For the past two years I've been using Ninite to keep Flash up to date. Between cryptolocker variants and 0-day vulnerabilities I'm experimenting with removing Flash from everyone and then giving it back to the few that actually need it. I did this with Java and haven't looked back.
Stats: 10.6% of sites still use Flash
Source: http://w3techs.com/technologies/details/cp-flash/all/all Opens a new window
I've reached out to Ninite to see if they will automate the settings to click to run but I'm not expecting them to.
For the users that I allow to have Flash how can I control the click to run settings via GPO?
http://www.howtogeek.com/188059/how-to-enable-click-to-play-plugins-in-every-web-browser/ Opens a new window
My users are primarily IE, Chrome is 2ndary and a very small subset use Firefox.
This topic first appeared in the Spiceworks Community