X
Tap here to go to the mobile version of the site.
Your Firefox is out of date and may contain a security risk! Upgrade Firefox

Support Forum

how do lock down browser settings? i need to deploy the latest version of firefox to the enterprise

Posted

I work for a company with 4000+ users and I have been tasked to deploy the latest version of Firefox. I need to lock down the browser settings, setup home page, disable auto updates, rebrand the browser (e.g. Mozilla Firefox provided by companyname). i was able to do this with firefox 3.x but I cant seem to make it work with version 7.0.1

Chosen solution

The greprefs folder no longer exists with the change to using a ZIP archive omni.jar and you need to place a file local-settings.js in the defaults\pref instead.


You can use a mozilla.cfg file in the Firefox program folder to lock prefs or specify default values.

Place a file local-settings.js in the defaults\pref folder where you also find the file channel-prefs.js to specify using mozilla.cfg.

pref("general.config.filename", "mozilla.cfg");
pref("general.config.obscure_value", 0); // use this to disable the byte-shift

See:

Read this answer in context 0

Additional System Details

Installed Plug-ins

  • Google Update
  • Shockwave Flash 10.3 r183
  • Version 2.3.2.0
  • Google Talk Plugin Video Accelerator version:0.1.44.11
  • Adobe PDF Plug-In For Firefox and Netscape 10.1.1
  • NPRuntime Script Plug-in Library for Java(TM) Deploy
  • Next Generation Java Plug-in 1.6.0_27 for Mozilla browsers
  • 4.0.60531.0
  • iTunes Detector Plug-in
  • Picasa plugin
  • The QuickTime Plugin allows you to view a wide variety of multimedia content in Web pages. For more information, visit the QuickTime Web site.
  • Provides additional functionality on Facebook. See our web site for details.
  • ActiveTouch General Plugin Container Version 105
  • Adobe Shockwave for Director Netscape plug-in, version 11.5
  • The plug-in allows you to open and edit files using Microsoft Office applications
  • Office Authorization plug-in for NPAPI browsers

Application

  • User Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:7.0.1) Gecko/20100101 Firefox/7.0.1

More Information

Part of this is old and some folders no longer exist in Firefox, but these are some notes from when we started allowing the users to use Firefox in the environment.
Begin Customizations of Firefox install source...
Overview of Items accounted for in the following steps:
1. Removal of built in agents specifically: Inspector and Talkback
2. Add 'companyname' to the custom dictionary
3. Create a mozilla.cfg file to control the proxy settings and specify to automatically detect the proxy.
Also use mozilla.cfg to disable Auto Update built-in feature for Firefox.
4. Change default homepage to Oasis
5. Brand Firefox with companyname
*2. Add 'companyname' to the custom dictionary
-Navigate to the Source\Install\localized\dictionaries folder
-Edit en-US.dic in a text editor such as PSPad or UltraEdit.
The file is alphabetical so find the location in the file that companyname should be added
insert a new line and enter the following: companyname/M
-Save the file
3. Create a mozilla.cfg file to control the proxy settings and specify to automatically detect the proxy.
-Navigate to the Source\Install\nonlocalized\greprefs folder
-Edit the all.js file, and add the following to the end of the file:
// Switch use custom configuration for proxy settings
pref("general.config.filename", "mozilla.cfg");
pref("browser.startup.homepage_reset", "resource:/browserconfig.properties");
-Save the file
-create a new text file in Source called mozilla.txt
-Edit the new mozilla.txt with a text editor and add the following:
//
lockPref("app.update.auto", false);
lockPref("app.update.enabled", false);
lockPref("network.proxy.type", 4);
lockPref("browser.shell.checkDefaultBrowser", false);
pref("general.smoothScroll", true);
pref("network.standard-url.encode-utf8", true);
pref("prefs.converted-to-utf8", true);
pref("browser.history_expire_days.mirror", 20);
pref("browser.cache.disk.capacity", 305000);
pref("browser.download.useDownloadDir", false);
pref("browser.startup.homepage_reset", "browserconfig.properties");
pref("startup.homepage_welcome_url", "http://.companyname.org");
-Save the mozilla.txt file.
*** For the next step, you'll need a program like Byte Shifter available here:
*** http://home.comcast.net/~dabbink/dabbink/ByteShifter.htm
-Open Byte Shifter, and specify the following fields:
Input File: mozilla.txt
Output File: mozilla.cfg (specify the same location as mozilla.txt, such as Source)
Shift by: 13 bytes
-After the byte shift is successful, close Byte Shifter.
-Delete mozilla.txt, as you no longer need it.
-Copy newly created mozilla.cfg to Source\Install\nonlocalized
*4. Change default homepage to Oasis
(also this is related to modification made in step 3 above)
-Navigate to the Source\Install\localized folder
-Edit the browserconfig.properties file in a text editor other than notepad
-Add the following to the file:
browser.startup.homepage=http://companyname.org
browser.startup.homepage_reset=http://companyname.org
-Save the file.
*5. Brand Firefox with companyname
-Extract the Source\Install\localized\chrome\en-US.jar file to an alternate location such as c:\en-US using WinZip
-navigate to C:\en-US\locale\branding and edit the brand.properties and the brand.dtd file using a text editor
-In the brand.properties file:
Change: brandFullName=Mozilla Firefox
To: brandFullName=Mozilla Firefox provided by companyname
-In the brand.dtd file:
Change: <!ENTITY brandFullName "Mozilla Firefox">
To: <!ENTITY brandFullName "Mozilla Firefox provided by companyname">
-Save the file.
* Critical that you re-compile the jar file so that it is an executable archive.
* You cannot use winzip for this step.
*
* You will need to install the Java JDK and ensure that jar.exe and jli.dll are in the
* system path of the workstation that you are using(Both files can be found: C:\Program Files\Java\jdk1.6.0_07\bin).
-Open a command prompt
-Navigate to c:\en-US
-Type the following command:
jar -cvf en-US.jar locale/*
-Now copy the en-US.jar that you've re-complied to Source\Install\localized\chrome\
-Overwrite the original with your update file.
6. Add the Flash Plugin
-Install Firefox on a clean system
-navigate to a page that requires the Flash plugin, such as OASIS
-Install the plugin when prompted.
-close Firefox
-navigate to the C:\Program Files\Mozilla Firefox\plugins directory
Copy all the files within that folder to Source\Install\nonlocalized\plugins

cor-el
  • Top 10 Contributor
  • Moderator
10762 solutions 96861 answers

Chosen Solution

The greprefs folder no longer exists with the change to using a ZIP archive omni.jar and you need to place a file local-settings.js in the defaults\pref instead.


You can use a mozilla.cfg file in the Firefox program folder to lock prefs or specify default values.

Place a file local-settings.js in the defaults\pref folder where you also find the file channel-prefs.js to specify using mozilla.cfg.

pref("general.config.filename", "mozilla.cfg");
pref("general.config.obscure_value", 0); // use this to disable the byte-shift

See:

Question owner

Thanks for the suggestion. I tried this and now Firefox will not launch

Question owner

Thanks for your help!! I was making a mistake by not zipping the contents of the omni.jar when i modified the following: brand.dtd, brand.properties and browserconfig.properties

Can you provide me the info to disable to Update option under Help/About Firefox?

cor-el
  • Top 10 Contributor
  • Moderator
10762 solutions 96861 answers

You can lock the appropriate prefs and set the update URL to an empty string if necessary

lockPref("app.update.auto", false);
lockPref("app.update.url", "");

Question owner

That worked!

Thanks for all your help!!

cor-el
  • Top 10 Contributor
  • Moderator
10762 solutions 96861 answers

You're welcome