Prikaz označenih pitanja: Prikaži sva pitanja
  • Riješeno
  • Arhivirano

Unable to lock preferences on Windows with ESR-60 and above

I have the issue noted in shekpal's post on https://support.mozilla.org/en-US/questions/1229450/edit/1167251. It seems to be limited to installation of ESR-60 (and above)… (pročitajte više)

I have the issue noted in shekpal's post on https://support.mozilla.org/en-US/questions/1229450/edit/1167251. It seems to be limited to installation of ESR-60 (and above) on Windows platforms. With ESR-52.9 (and older) the files which I placed into "Program Files\Mozilla Firefox\defaults\prefs\local-settings.js" and "Program Files\Mozilla Firefox\mozilla.cfg" are able to make settings and lock preferences. The settings which I used in the files are similar to those listed by shekpal. When I use the same files, in the same locations with ESR-60 (and above) installed on Windows 7 or Windows 10: I open about:config and same the settings are either listed as "user set" or "default" and can be changed. That is not desired behavior. I have also placed the same files into installation of ESR-52.9 and ESR-60 (and above) on Linux installations (as "/usr/lib64/firefox/mozilla.cfg" and "/usr/lib64/firefox/defaults/preferences/local-settings.js") and the locked behavior is as desired--about:config shows the settings as locked. I followed the steps in https://support.mozilla.org/en-US/kb/customizing-firefox-using-autoconfig to completely reset and used the names of autoconfig.js and firefox.cfg. I ensured that the first line was a comment. Nothing restored the desired functionality on a Windows system. An additional anomaly which I did find is that if I have "Program Files\Mozilla Firefox\defaults\prefs\local-settings.js" in place without the referenced mozilla.cfg file in place gives these results: Firefox 52.9-ESR displays an error that preferences cannot be found and closes. That is expected behavior. Firefox 60.3-ESR opens without displaying an error.

Asked by Dwight prije 1 godina

Answered by Dwight prije 1 godina

  • Arhivirano

locking preferences in Firefox 63.0

I searched high and low on the internet to find out how to lock down preferences, most that I found had incomplete information and for older versions. The last entry I fo… (pročitajte više)

I searched high and low on the internet to find out how to lock down preferences, most that I found had incomplete information and for older versions. The last entry I found on this forum was from three years ago for version 38 and where to place the files was clear but when to use the commands lockPref, userPref and pref wasn't clear. For version 63 none of what I found was working. Well, diligence paid off. I kept experimenting until I found the correct combination. Where the different pref commands were used and the files locations was the problem. I couldn't use lockPref in the user.js file, I couldn't use the user_pref in the mozilla.cfg file. I was hoping to combine the commands together but it wouldn't work. So, here is what I came up with, spelled out clearly as to how it is setup. Almost every place I found on the internet would not have all the information spelled out leaving me scratching my head as to what they were trying to say. Here is the procedure I put together:

Mozilla Firefox version 63.00 Setup for Locking Files

1. Open Firefox and type “about:config” into the path bar.

       a.	For any preference that is locked you will see the entries in italics and the status displaying “locked”

2. Create the following as text files and change the extension on each.

       a.	mozilla.cfg – lists desired files to be locked.
               i.	The first line is always a double forward slash (//)
               ii.	Starting at the second line, use the lockPref command – examples:
                     1.	lockPref("app.update.enabled", false);
                     2.	lockPref("security.tls.version.min", 2);
      b.	local-settings.js – uses mozilla.cfg to lock the preferences. 
              i.	Add the following entries. Do NOT place a “//” on the first line of the file.
                     1.	pref("general.config.filename", "mozilla.cfg");
                     2.	pref("general.config.obscure_value", 0);
      c.	user.js – changes the settings for each of the listed preferences.
              i.	Enter the same entries that were in mozilla.cfg but use the “user_pref” command at the beginning of 
                       each entry. Do NOT place a “//” on the first line of the file.
                    1.	user_pref("app.update.enabled", false);
                    2.	user_pref("security.tls.version.min", 2);

3. The folders where mozilla.cfg and local-settings.js files are located have full Administrators and System rights assigned, however to make changes to these files copy them to another folder (i.e. Desktop) then copy it back into its respective folder. The UAC prompt asks to accept the changes. A regular user shouldn’t have rights to do this.

4. Location is very important for each of the above files. Place each in their respective directories as shown below.

       a.	mozilla.cfg is placed into:
               i.	C:\Program Files\Mozilla Firefox
       b.	Local-settings.js is placed into:
               i.	C:\Program Files\Mozilla Firefox\defaults\pref
       c.	User.js is placed into:
               i.	C:\Users\”username”\AppData\Roaming\Mozilla\Firefox\Profiles\*this folder name will vary for each installation*

5. To disable the files listed in mozilla.cfg, open the local-setting.js file and add “//” to the beginning of each line to remark them out, save and then restart Firefox. Verify in Firefox under “about:config” that the “locked” status was removed. Of course, to lock them again, remove the “//”.


My question now stands as when GPO is set up to push, is it these three files pushed to their respective locations for each roaming profile and computer?

Asked by sullijwiii prije 1 godina

Last reply by Roland Tanglao prije 1 godina

  • Arhivirano

Customize installation with userChrome.css for default profile.

I have a PXE boot Linux server-client setup. Each client boot over PXE then install firefox. I want (customize Firefox installer) to use userChrome.css at first time exec… (pročitajte više)

I have a PXE boot Linux server-client setup. Each client boot over PXE then install firefox. I want (customize Firefox installer) to use userChrome.css at first time execution of firefox to enable Kiosk interface to... - hide nav-bar - hide tabstoolbar - disable right click context menu -- on blank area of webpage -- on hyperlink -- on images & media -- on input text fields, etc - disable update check pop-up - disable default browser check pop-up Other security options. My OS blocked "ctrl+q", "ctrl+w", "ctrl+t", "ctrl+n", etc.

Asked by ipmeel prije 1 godina

Last reply by cor-el prije 1 godina

  • Arhivirano

JS script not loaded in pref directory

Hi all I have distributed a .js file via gpo to the default location: C:\Program Files (x86)\Mozilla Firefox\defaults\pref\ It seems like it is only loaded on the very fi… (pročitajte više)

Hi all

I have distributed a .js file via gpo to the default location: C:\Program Files (x86)\Mozilla Firefox\defaults\pref\

It seems like it is only loaded on the very first boot. Once I disable the setting on about:config, the js file will not load / apply once I restart firefox.

The file looks like this(enableroot.js):

/* Allows Firefox reading Windows certificates */ pref("security.enterprise_roots.enabled", true);

I searched this and wasn't able to find any solution. Does anyone have experience with it?

best regards,

Trennety

Asked by trennety prije 1 godina

Last reply by Roland Tanglao prije 1 godina

  • Arhivirano

Allow multiple Security Exceptions

Hello, In our environment, we roughly have 200~ subdomains that are all on a local network. Unfortunately, the certificates are self signed, so whenever a user visits X s… (pročitajte više)

Hello,

In our environment, we roughly have 200~ subdomains that are all on a local network. Unfortunately, the certificates are self signed, so whenever a user visits X subdomain for the first time they have to go through and manually permanently allow exception on that one subdomain. I was wondering if there is a way to gather a list of the 200~ subdomains, and automate or bulk add them to the exception list. I wasn't able to find much on Google, or maybe there is something I'm not searching properly. I was hoping if you could further point me to the right direction, I appreciate your time in reading this.

Asked by encryptedfaith prije 1 godina

Last reply by cor-el prije 1 godina

  • Arhivirano

In FF 60.6.0 ESR - How do I make it so that when a user opens firefox for the first time they get a default profile that I have configured.

In the previous versions I could have a default profile configured and when a user launched FF for the first time it would copy that default profile to the users profile… (pročitajte više)

In the previous versions I could have a default profile configured and when a user launched FF for the first time it would copy that default profile to the users profile. This allowed me to set a variety of corporate configuration defaults.

We currently run Windows 7 (moving to 10 soon) Trying to get 60.6.0 ESR to work.

Asked by BryanGa prije 1 godina

Last reply by Mike Kaply prije 1 godina

  • Riješeno

Enable addons locally installed via GPO

Hello, I'm migrating from CCK2 to GPO for Firefox ESR 60.30 and having an issue with xpi files I downloaded 3 languages pack files on copied them to the Firefox directory… (pročitajte više)

Hello, I'm migrating from CCK2 to GPO for Firefox ESR 60.30 and having an issue with xpi files I downloaded 3 languages pack files on copied them to the Firefox directory I'd like to enable them via GPO but I have an issue with the syntax In CCK2 config it's something like resource://path/to/xpi In set the same value in GPO but extensions is not available for user Regards, Goksel

Asked by goksel.balci prije 4 mjeseci

Answered by cor-el prije 4 mjeseci