Prikaz označenih pitanja: Prikaži sva pitanja
  • Riješeno
  • Arhivirano

Enterprise Policies deployed despite no Group Policy being configured

Our organisation made Group Policy changes today clients relating to disabling Windows Hello on Windows 10. These seem to have had unintended effects on Firefox. Note we … (pročitajte više)

Our organisation made Group Policy changes today clients relating to disabling Windows Hello on Windows 10. These seem to have had unintended effects on Firefox. Note we do not implement any Firefox specific *.admx — these Firefox Enterprise Policies seem to have been activated by some other means.

The Firefox Enterprise policies are:

  • DisableFirefoxAccounts true
  • PasswordManagerEnabled false
  • OfferToSaveLogins false
  • OfferToSaveLoginsDefault false

Upon reporting the side-effect, we rolled-back most of the Group Policy changes, only maintaining the following remnants:

Computer Policy\Administrative Templates\System/Logon

  • Turn on convenience PIN sign-in

Computer Policy\Administrative Templates\Windows Components/Biometrics

  • Allow domain users to log on using biometrics
  • Allow the use of biometrics
  • Allow users to log on using biometrics

Computer Policy\Administrative Templates\Windows Components/Windows Hello for Business

  • Use biometrics

However, even with only those Group Policies being implemented, the following 2 Firefox Enterprise Policies remain active:

  • OfferToSaveLogins false
  • OfferToSaveLoginsDefault false

Are the above interactions between Windows Group Policy and Firefox documented or known?

Asked by Damon prije 1 godina

Answered by cor-el prije 1 godina

  • Riješeno
  • Arhivirano

Trouble using firefox.cfg with JS in ubuntu18

I'm setting up Firefox 78.6.1esr in an image and want it to start in French or English given the environment variable (lang or language or otherwise) and I'm having troub… (pročitajte više)

I'm setting up Firefox 78.6.1esr in an image and want it to start in French or English given the environment variable (lang or language or otherwise) and I'm having trouble doing so.

I installed the correct French Language pack from http://releases.mozilla.org/pub/firefox/releases/78.6.1esr/linux-x86_64/xpi/ and it is now recognized by Firefox as a valid add-on.

I have `autoconfig.js` in the /distribution/extensions/ directory as well as `firefox.cfg` in the base folder. If in the cfg file I just have ``` // IMPORTANT: code begins next line. pref("intl.locale.requested","fr") ```

It works fine but the moment I try and use something like `getenv(LANG)` suddenly the error appears "Failed to read configuration file" pops up when I try to start Firefox. My understanding was that the cfg was treated like a JS file per https://support.mozilla.org/en-US/kb/customizing-firefox-using-autoconfig but I can't seem to get any JS to run nicely.

Something like the following would be nice // next line const langvar = getenv(LANG); pref("intl.locale.requested", langvar);

would be ideal but I'm missing something.

Any help is greatly appreciated!

Asked by ito-matsuda prije 1 godina

Answered by jscher2000 - Support Volunteer prije 1 godina

  • Riješeno
  • Arhivirano

GPO (Group Policy) Change security.tls.enable_0rtt_data

Hello, we have some trouble in our Enterprise Environment with tls 1.3 and 0rtt data. The integrated google search and other websites doesnt work as they should (Pages do… (pročitajte više)

Hello,

we have some trouble in our Enterprise Environment with tls 1.3 and 0rtt data. The integrated google search and other websites doesnt work as they should (Pages doesnt load and stay white).

So we want to turn of "security.tls.enable_0rtt_data" with Group Policy. But i cannot find a switch for this setting.

When i try to set security.tls.enable_0rtt_data with Preferences in GPO it doesnt work (old Preferences is empty) { "security.tls.enable_0rtt_data": { "Value": false, "Status": "locked" } }

With Preferences i am able to configure security.tls.hello_downgrade_check, but not security.tls.enable_0rtt_data

The only workaround would be to disable tls 1.3 completely and use tls 1.2. (security.tls.version.max = 3) Is there a solution for this?

Regards, Michael

Asked by michael.reiter prije 1 godina

Answered by Mike Kaply prije 1 godina

  • Riješeno
  • Arhivirano

Firefox resetting profiles after each launch. Keeps creating new install even if same version launched

Hello world, This problem is sticking for a year now. We even switched to ESR thinking it will fixed the problem but to no avail. After a bunch of test, I've finally deci… (pročitajte više)

Hello world,

This problem is sticking for a year now. We even switched to ESR thinking it will fixed the problem but to no avail. After a bunch of test, I've finally decided to post and ask for help. Tests have been done on macos 11.6 fresh vanilla install, no encryption (no filevault, I hate it), and Firefox 91.1.0esr (64 bits), but problem is the same since version 75 + (no problem seen on windows or linux) If I don't use Profiles Manager, at each launch of Firefox a new profile is created with no import from former profiles. If I do use Profiles Manager, I can keep on choosing my default profile, and no new ones are created, BUT new install is added to install.ini and profiles.ini. All tests have been done with the exact same firefox (i mean, application is the same and correctly installed in the /Applications of macos).

Here is the profiles.ini

[Install5A291CFD23D97DBF] Default=Profiles/ucaeqkrb.default-esr Locked=1

[Profile0] Name=default-esr IsRelative=1 Path=Profiles/ucaeqkrb.default-esr Default=1

[General] StartWithLastProfile=0 Version=1

[InstallF5B6C4E8673B7987] Default=Profiles/ucaeqkrb.default-esr Locked=1

[Install7F9608401B386673] Default=Profiles/ucaeqkrb.default-esr Locked=1

And the installs.ini

[5A291CFD23D97DBF] Default=Profiles/ucaeqkrb.default-esr Locked=1

[F5B6C4E8673B7987] Default=Profiles/ucaeqkrb.default-esr Locked=1

[7F9608401B386673] Default=Profiles/ucaeqkrb.default-esr Locked=1

As you can see each launch of Firefox created a new hash of installation (even if same it's always the same firefox version). As long as I choose my default profile in profiles manager, I can keep it. If I switch to default comportment, I will get a new profile at each launch (as it see en new install hash) and it will not import former profiles (even if it's from the same or an older version).

So I'm wandering, why Firefox keeps on adding a news install hash on each launch, and/or how can I prevent it from doing it.

Asked by firefox1540 prije 1 godina

Answered by Mike Kaply prije 1 godina

  • Riješeno
  • Arhivirano

block file:///c:/ in Firefox Quantum release 60.4.0esr(32-bit)

Hello, I ve tried to block file:///c:/ in Firefox Quantum release 60.4.0esr(32-bit) by the above .json with no results. I ve also tried to block it in a newer release and… (pročitajte više)

Hello, I ve tried to block file:///c:/ in Firefox Quantum release 60.4.0esr(32-bit) by the above .json with no results. I ve also tried to block it in a newer release and it was fine (78.15.0esr (32-bit)). Is anything i can do to block it in this particular version i m using(60.4.0esr(32-bit))?

Thank you

{ "policies": { "WebsiteFilter": { "Block": ["file:///C:/*"] } } }

Asked by ThanosTh prije 1 godina

Answered by Mike Kaply prije 1 godina

  • Riješeno
  • Arhivirano

New bookmarks not showing on toolbar, but exist in library

Hi, I got an issue that bookmarks are saved in the library, but this doesn't reflect on the Bookmark toolbar. I have already removed the entire profile, did a reinstall .… (pročitajte više)

Hi,

I got an issue that bookmarks are saved in the library, but this doesn't reflect on the Bookmark toolbar.

I have already removed the entire profile, did a reinstall .. nothing seems to reset it. When I perform a backup, the entries are also in the backup json.

I hope somebody can help, this started happening recently it seems.

Thanks in advance!

Asked by Mathé de Wit prije 8 mjeseci

Answered by Mathé de Wit prije 8 mjeseci

  • Riješeno
  • Arhivirano

Certificates included with browser

I am trying to use a policies.json file to include a certificate for my own website using a certificate stored online, but not locally. Would it be possible to do so usi… (pročitajte više)

I am trying to use a policies.json file to include a certificate for my own website using a certificate stored online, but not locally. Would it be possible to do so using code similar to below: {

   "policies": {
   "Certificates": {
       "ImportEnterpriseRoots": true,
       "Install" [
           "cert_name",
           "http://www.xxxxxxxx.com/xxxxx/xxxxx.der"
                  ]
            }
       }
   }

Any help would be greatly appreciated.

Asked by gtevi prije 1 godina

Answered by Mike Kaply prije 1 godina

  • Riješeno
  • Arhivirano

v2.9 Policy Not allowing Extensions that are allowed to install.

I'm trying to force the install of the Okta extension for users in my environment. I just updated to the latest admx templates and I'm not allowed to install any extensio… (pročitajte više)

I'm trying to force the install of the Okta extension for users in my environment. I just updated to the latest admx templates and I'm not allowed to install any extensions.

My GPO JSON is as follows:

{

 "*": {
   "blocked_install_message": "Custom error message.",
   "install_sources": ["about:addons","https://addons.mozilla.org/"],
   "installation_mode": "blocked",
   "allowed_types": ["extension"]
 },
 "uBlock0@raymondhill.net": {
   "installation_mode": "force_installed",
   "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
 },
 "Okta": {
   "installation_mode": "force_installed",
   "install_url": "https://addons.mozilla.org/firefox/downloads/latest/okta-browser-plugin/latest.xpi"
 },
 "https-everywhere@eff.org": {
   "installation_mode": "allowed"
 }

}

Yes I'm getting the attached image on this when i'm trying to install it manually because it's not auto installing. I'm also getting the same with the allowed uBlock extension.

Asked by chris.kasprzak prije 1 godina

Answered by Mike Kaply prije 1 godina