X
Tap here to go to the mobile version of the site.

Support Forum

How to properly implement group policy ExtensionSettings control

Posted

I've downloaded the latest admx files and tried pasting the sample JSON into the Computer section of the group policy. I used the JSON from https://github.com/mozilla/policy-templates/blob/9387163a9b1dd93500867fcb3b33598b6d559e89/README.md#extensionsettings

I think that sample is supposed to block all but 1 firefox extension, but it's still letting me install any extension. For this feature, I'm running Firefox 70.0 64-bit on Windows 10 How do I properly configure the group policy so that only approved extensions are allowed?

I've downloaded the latest admx files and tried pasting the sample JSON into the Computer section of the group policy. I used the JSON from https://github.com/mozilla/policy-templates/blob/9387163a9b1dd93500867fcb3b33598b6d559e89/README.md#extensionsettings I think that sample is supposed to block all but 1 firefox extension, but it's still letting me install any extension. For this feature, I'm running Firefox 70.0 64-bit on Windows 10 How do I properly configure the group policy so that only approved extensions are allowed?

Chosen solution

You don't need the policies part of your JSON code. That is the main part of the code if you are using a policies.json file, but since you are using Group Policy instead, it's not needed and actually causes the code to stop working.

The same for the ExtensionsSettings part. Again, since we are using Group Policy, Firefox already knows the specific policy that you are referring to, so you don't need to specify it.

So the example code inserted into the Extension Management policy should be the following:

 {
      "*": {
            "blocked_install_message": "Custom error message.",
            "install_sources": ["https://addons.mozilla.org/"],
            "installation_mode": "blocked"
      },
      "uBlock0@raymondhill.net": {
            "installation_mode": "allowed",
            "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
      }
}

Hope this helps.

Read this answer in context 1
Quote

Additional System Details

Installed Plug-ins

uBlock Origin and Privacy Badger

Application

  • User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.18362

More Information

jhalder 0 solutions 1 answers

Agreed, what would be the actual syntax/data to put in the "Extension Management" setting in the GPO? I just want to block extensions on devices, it would be great if I could whitelist a few extensions as well.

Agreed, what would be the actual syntax/data to put in the "Extension Management" setting in the GPO? I just want to block extensions on devices, it would be great if I could whitelist a few extensions as well.
Was this helpful to you?
Quote

Question owner

Glad to see that jhalder also wants the answer (means I'm not alone).

Just to clear up any possible misunderstanding, I pasted the following into the group policy "Extension Management" - but it doesn't seem to have any effect.

{

 "policies": {
   "ExtensionSettings": {
     "*": {
       "blocked_install_message": "Custom error message.",
       "install_sources": ["https://addons.mozilla.org/"],
       "installation_mode": "blocked"
     },
     "uBlock0@raymondhill.net": {
       "installation_mode": "allowed",
       "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
     }
   }
 }

}

Glad to see that jhalder also wants the answer (means I'm not alone). Just to clear up any possible misunderstanding, I pasted the following into the group policy "Extension Management" - but it doesn't seem to have any effect. { "policies": { "ExtensionSettings": { "*": { "blocked_install_message": "Custom error message.", "install_sources": ["https://addons.mozilla.org/"], "installation_mode": "blocked" }, "uBlock0@raymondhill.net": { "installation_mode": "allowed", "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi" } } } }
Was this helpful to you?
Quote
Wesley Branton
  • Top 10 Contributor
695 solutions 5507 answers

Chosen Solution

You don't need the policies part of your JSON code. That is the main part of the code if you are using a policies.json file, but since you are using Group Policy instead, it's not needed and actually causes the code to stop working.

The same for the ExtensionsSettings part. Again, since we are using Group Policy, Firefox already knows the specific policy that you are referring to, so you don't need to specify it.

So the example code inserted into the Extension Management policy should be the following:

 {
      "*": {
            "blocked_install_message": "Custom error message.",
            "install_sources": ["https://addons.mozilla.org/"],
            "installation_mode": "blocked"
      },
      "uBlock0@raymondhill.net": {
            "installation_mode": "allowed",
            "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
      }
}

Hope this helps.

You don't need the <code>policies</code> part of your JSON code. That is the main part of the code if you are using a <code>policies.json</code> file, but since you are using Group Policy instead, it's not needed and actually causes the code to stop working. The same for the <code>ExtensionsSettings</code> part. Again, since we are using Group Policy, Firefox already knows the specific policy that you are referring to, so you don't need to specify it. So the example code inserted into the '''Extension Management''' policy should be the following: <pre><nowiki> { "*": { "blocked_install_message": "Custom error message.", "install_sources": ["https://addons.mozilla.org/"], "installation_mode": "blocked" }, "uBlock0@raymondhill.net": { "installation_mode": "allowed", "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi" } }</nowiki></pre> Hope this helps.
Was this helpful to you? 1
Quote
Mike Kaply
  • Moderator
39 solutions 207 answers

Helpful Reply

I've updated the documentation to try to make this clearer. Sorry about that.

I've updated the documentation to try to make this clearer. Sorry about that.
Was this helpful to you? 1
Quote
Ask a question

You must log in to your account to reply to posts. Please start a new question, if you do not have an account yet.