Firefox for Enterprise Community Forum

We have Firefox deployed and managed through Intune/Endpoint and all works well but every device has an error with this line of the policy:

UserMessaging_FirefoxLabs [./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_FirefoxLabs] STATE Error SOURCE PROFILES Source Profile Mozilla_Firefox_Configuration ERROR CODE 0x87d1fde8

The error code is the same on all devices and is the only one present in on each device config.

Does anyone have any idea what the issue and resolution would be?

Thanks, Matt

Hello,

I am experiencing an issue with HEVC hardware decoding in Firefox on Windows 10.

System information:

OS: Windows 10 (latest updates installed) Browser: Firefox ESR 128.8 GPU: (your GPU model) GPU driver version: (your driver version) Problem: In about:support under the "Media" section, I see that HEVC (H.265) hardware decoding is not supported, while on Windows 11 with the same hardware, it works correctly.

What I have tried:

Installed HEVC Video Extensions from the official Microsoft website. Enabled hardware decoding in about:config: media.hardware-video-decoding.enabled → true media.wmf.hevc.enabled → true Updated GPU drivers to the latest version. Checked HEVC support via FFmpeg – decoders are available. Expected result: Firefox should use HEVC hardware decoding on Windows 10, just like it does on Windows 11.

Actual result: HEVC is only supported in software mode, and hardware decoding is not working.

Could you please help me resolve this issue?

Thank you!

We are currently considering using Firefox ESR as our default browser but experiencing a few issues and one of them is with our configured SailPoint IdentityIQ Single Sign-On Experience, which uses Basic Authentication.

Issue Description First, the login button needs to be clicked multiple times before access to the site is granted. Once signed in, the Firefox inbuilt authentication dialogue appears, prompting the user to log in again (see the attached screenshot). The landing page is only presented after clicking the login button several times. This creates a poor user experience, sometimes causing pages to load improperly. Interestingly, the same process works seamlessly in Edge Chromium.

Troubleshooting Steps Taken I have already attempted the following: 1. Temporarily disabled all custom and security settings in mozilla.cfg and config.json. 2. Temporarily disabled Firefox Tracking Protection. 3. Allowed third-party cookies for the specific URL. 4. Upgraded Firefox Version to 128.7.0 5. Since our Firefox browser is significantly hardened, I have also enabled and reconfigured the following settings in mozilla.cfg to ensure Basic Authentication is allowed, functions properly, and suppresses Firefox’s authentication prompt, but without success:

network.http.phishy-userpass-length = 255 network.http.use-basic-auth network.automatic-ntlm-auth.allow-non-fqdn network.automatic-ntlm-auth.trusted-uris security.enterprise_roots.enabled security.enterprise_roots.enabled

Observations from SailPoint Team Our colleagues from SailPoint have tested the setup in their environment, and according to them, it works as expected. However, their browser is not hardened, and they have leveraged the SailPoint UI for authentication instead of the built-in Firefox authentication prompt.

Further Investigation • Is there a specific configuration required in the user profile settings? • Network trace analysis shows 404 errors on GET requests and the following error codes on POST requests: • 302 Redirect: Mozilla Documentation • 408 Request Timeout: Mozilla Documentation

Next Steps Is there a specific security setting that needs to be enabled or disabled? Are there any particular Firefox enterprise policies we should modify? I have also attached screenshots for reference. Let me know if you need specific logs or network traces for further troubleshooting.

Dear Team,

When my Client device installs From Firefox 102.7.0 ESR to Firefox 128.7.0 from SCCM. (The case is First install the Version 102.7.0 then save the Bookmarks and then uninstall. Second Install the 128.7.0 then check the bookmarks)

user profile Bookmarks are not mapped in Firefox. When I check C:\Users\Tests\AppData\Roaming\Mozilla\Firefox\Profiles I can see the xxxx.defaultesr

I don't understand why the bookmarks are not linked in Firefox. Can you please help? I would be thankful to you if you could share me the .bat script

Thank you

Hi, I keep getting a message that I should update to a newer version of Firefox on Ubuntu. The problem is: I click on the install for 64 bit button, A ...tar.xz file downloads to my desktop, and the process ends completely. How to proceed?

Thanks, Ildikó

Hello everyone,

We have been using Mozilla Firefox ESR (32-bit) in the organization for several years. For installation on our clients, we use "Matrix42 Empirum" as the software distribution tool. All it does is install the MSI of Firefox.

However, for quite some time now (almost 2 years), we have been facing an issue where some installations are marked as successful (Error code 0), but once the MSI installer is automatically closed, files like "firefox.exe" disappear from the installation directory – despite the installation being marked as successful.

The problem doesn’t always occur, but a repair attempt usually resolves the issue.

In addition to Empirum, we also use Defender for Endpoint, but we couldn’t find any clues there.

Is this problem known, or are we the only ones experiencing it?

bold text

If you have a legitimate question related to a Mozilla product, please submit a question with details at /questions/new.

bold text

If you have a legitimate question, please start a new question at /questions/new with details.

Using group policy there is various settings required for our users. We have been using the preferences policy located at: Administrative Templates > Mozilla > Firefox > Preferences

This policy requires the use of JSON, we have been using the following which has been working ok:

{ "media.navigator.permission.disabled": { "Value": true, "Status": "user" }, "browser.warnOnQuit": { "Value": true, "Status": "user" }, "keyword.enabled": { "Value": false, "Status": "user" }, "browser.tabs.unloadOnLowMemory": { "Value": false, "Status": "user" }, }

Within the old "Preferences (Deprecated)" there is a setting called "intl.accept_languages" which we are wanting to use but I can't seem to find a way to include this within the JSON. We are wanting to set it to "en-GB".

If I enable this within the old deprecated preferences section it causes the Preferences with the JSON to stop working.

I have tried various combinations of including it within the JSON but neither are working:

"intl.accept_languages": { "Value": en-GB, "Status": "user" }

"intl.accept.languages": { "Value": en-GB, "Status": "user" }

I've checked the Mozilla website here: https://mozilla.github.io/policy-templates/ There doesn't seem to be any reference for the intl.accept_languages setting to be used within the JSON

Please can someone advise?

Dear Mozilla Firefox Team,

I hope this message finds you well.

We manage a network of workstations that frequently utilize the Mozilla Firefox browser. Recently, we have encountered a situation where many of our systems are showing vulnerabilities due to pending browser updates. The updates are being installed successfully; however, users often neglect to restart the browser, which is crucial for completing the update process and ensuring security.

To address this, we would like to inquire if there is an existing Group Policy that can be configured to automatically notify users when they need to restart their Firefox browser to apply the latest updates. Such a feature would greatly assist us in maintaining the security integrity of our workstations and ensuring that users are made aware of the importance of restarting their browsers when prompted.

If this functionality is not currently available, we would appreciate any insights on potential workarounds or future plans to incorporate such a feature.

Thank you for your attention to this matter. We look forward to your response.

Hi All, I want to block traffic on firefox externally for managed devices via Intune, following the import of the ADMX/ADML files into intune.

Having read https://support.mozilla.org/en-US/kb/managing-firefox-intune I have set '\Mozilla\Firefox\Exceptions to blocked websites' to the following; //*.mydomain.com/*

Which works, however, I also want to add hosts that are only resolving on IPs and not DNS. I can add specific IPs if known, but is there a way I can allow IP ranges? Ie

//10.10.*/* (this doesn't currently work) Of the included screenshot, only the wildcard for mydomain.com and the specific IP currently work

I've looked over the link that is recommened in the policy (indirectly) and can't see an option for allowing an IP range. https://developer.mozilla.org/en-US/docs/Mozilla/Add-ons/WebExtensions/Match_patterns

If there is a better way to do this via intune for firefox only, please let me know.

Thanks

Form History Control (II) FoxyProxy Standard

These 2 extensions just installed themselves in Firefox ESR and disabled ALL my current extensions!!? I can't seem to remove them either.. please help!

I'm running Parrot OS (Linux) and had just signed myself in @hackthebox.com , which is a friendly place where people can learn to develop their cybersecurity skills. security on this site should be great, i don't know if this could be the issue...

Thanks in regards!

I need assistance with updating an old version of Firefox installed in the local AppData folder on our users' machines. We currently use Intune for application management, but I'm unsure how to remove the user-based installation and revert to a system installation without losing bookmarks.

Could you please provide guidance on how to:

1. Numbered list item Force update Firefox to the latest version while keeping user data intact.

2. Remove the user-installed version of Firefox using Intune.

3. Ensure that bookmarks are preserved during the update process.

Thank you for your help!

Hello community,

i would like to ask about how to deploy security.pki.certificate_transparency.disable_for_hosts globally for users? With version 135 a lot of production webapps stopped working and as of now , we have to do manual modification in about:config. Our company has over 300k users , so the possible disruption might arise very quickly and there will be significant loses in production enviroment.

Is there a way how to deploy this specific setting via GPO/SCCM ?

Thank you

Trying to block www.share365.net but it's not working

{

 "policies": {
     "WebsiteFilter": {
         "Block": [
           "*:share365.net",
           "*:www.share365.net",
           "*://share365.net/*"
         ]
     }
 }

}