HOWTO: Remove built-in Adobe Flash from Windows 10

[erik]

In my quest to meet specific HIPAA/SOX/PCI/security requirements on various Win 10 deployments, I wrote the following batch script to remove the built-in Flash installation. The standard Adobe Uninstall Flash Player app doesn't remove the built-in version. See note below.


Create a batch file and paste the following text:

Code: Select all

@echo off
cls
takeown /f "%SystemRoot%\System32\Macromed" /r /d y > NUL 2>&1
takeown /f "%SystemRoot%\SysWOW64\Macromed" /r /d y > NUL 2>&1
icacls "%SystemRoot%\System32\Macromed" /grant administrators:F /t /q > NUL 2>&1
icacls "%SystemRoot%\SysWOW64\Macromed" /grant administrators:F /t /q > NUL 2>&1
rd "%SystemRoot%\System32\Macromed" /Q /S > NUL 2>&1
rd "%SystemRoot%\SysWOW64\Macromed" /Q /S > NUL 2>&1
rd "%AppData%\Adobe\Flash Player" /Q /S > NUL 2>&1
rd "%AppData%\Macromedia" /Q /S > NUL 2>&1
del "%SystemRoot%\SysWOW64\FlashPlayerApp.exe" /Q /S > NUL 2>&1
del "%SystemRoot%\SysWOW64\FlashPlayerCPLApp.cpl" /Q /S > NUL 2>&1

Save and run the file. The built-in version of Flash will be deleted completely, including the Control Panel. You can browse to the various locations listed to verify that the directories and files are gone.

You shouldn't need to use the Administrator account to accomplish this, only a member of the Administrators group.


NOTE: This is intended for those who don't have Flash installed on their systems by any other means. I've not tested this by installing a downloaded version of Flash on top of the built-in version. The audience here is for companies or individuals who wish to remove Flash completely. You'll also want to make sure any Flash plugins are disabled in your Internet browsers. To remove any downloaded versions, use the Uninstall app linked above.

This batch script will also be handy if Microsoft reinstalls Flash via Windows Update.


I hope you find this useful. I'm sure various blogs and forums will pick this up at some point and copy the work as their own.

[Puppy]

The built-in Adobe Flash is Edge browser specific so you can simply disable it.

Are you sure these files won't get restored (considered as corrupted system files) by system restore ? It is enough to change ACL instead of removing them. In case of Pro version you can use Software Restriction Policy to disable them, to reset its "executable" flag.

[erik]

Not sure. With Enterprise N LTSB there is no Edge, only standard IE. IE has been uninstalled on nearly all systems I manage, my own personal systems included. But, Flash still gets installed with the OS and constantly updated for security issues.

I've not yet seen it get reinstalled but I'll keep an eye on it with the next monthly update.

[erik]

Flash updates error out during Windows Update. KB3174060 from yesterday was unable to install because Flash has been removed from my system.

The downside is that the update needs to be manually removed from the queue or it keeps trying to install when WU runs.