Showing questions tagged: Show all questions
  • Solved
  • Archived

v2.9 Policy Not allowing Extensions that are allowed to install.

I'm trying to force the install of the Okta extension for users in my environment. I just updated to the latest admx templates and I'm not allowed to install any extensio… (read more)

I'm trying to force the install of the Okta extension for users in my environment. I just updated to the latest admx templates and I'm not allowed to install any extensions.

My GPO JSON is as follows:

{

 "*": {
   "blocked_install_message": "Custom error message.",
   "install_sources": ["about:addons","https://addons.mozilla.org/"],
   "installation_mode": "blocked",
   "allowed_types": ["extension"]
 },
 "uBlock0@raymondhill.net": {
   "installation_mode": "force_installed",
   "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
 },
 "Okta": {
   "installation_mode": "force_installed",
   "install_url": "https://addons.mozilla.org/firefox/downloads/latest/okta-browser-plugin/latest.xpi"
 },
 "https-everywhere@eff.org": {
   "installation_mode": "allowed"
 }

}

Yes I'm getting the attached image on this when i'm trying to install it manually because it's not auto installing. I'm also getting the same with the allowed uBlock extension.

Asked by chris.kasprzak 8 months ago

Answered by Mike Kaply 8 months ago

  • Solved

Certificates included with browser

I am trying to use a policies.json file to include a certificate for my own website using a certificate stored online, but not locally. Would it be possible to do so usi… (read more)

I am trying to use a policies.json file to include a certificate for my own website using a certificate stored online, but not locally. Would it be possible to do so using code similar to below: {

   "policies": {
   "Certificates": {
       "ImportEnterpriseRoots": true,
       "Install" [
           "cert_name",
           "http://www.xxxxxxxx.com/xxxxx/xxxxx.der"
                  ]
            }
       }
   }

Any help would be greatly appreciated.

Asked by gtevi 4 months ago

Answered by Mike Kaply 4 months ago

  • Solved

GPO (Group Policy) Change security.tls.enable_0rtt_data

Hello, we have some trouble in our Enterprise Environment with tls 1.3 and 0rtt data. The integrated google search and other websites doesnt work as they should (Pages do… (read more)

Hello,

we have some trouble in our Enterprise Environment with tls 1.3 and 0rtt data. The integrated google search and other websites doesnt work as they should (Pages doesnt load and stay white).

So we want to turn of "security.tls.enable_0rtt_data" with Group Policy. But i cannot find a switch for this setting.

When i try to set security.tls.enable_0rtt_data with Preferences in GPO it doesnt work (old Preferences is empty) { "security.tls.enable_0rtt_data": { "Value": false, "Status": "locked" } }

With Preferences i am able to configure security.tls.hello_downgrade_check, but not security.tls.enable_0rtt_data

The only workaround would be to disable tls 1.3 completely and use tls 1.2. (security.tls.version.max = 3) Is there a solution for this?

Regards, Michael

Asked by michael.reiter 2 months ago

Answered by Mike Kaply 1 month ago

  • Solved

Firefox resetting profiles after each launch. Keeps creating new install even if same version launched

Hello world, This problem is sticking for a year now. We even switched to ESR thinking it will fixed the problem but to no avail. After a bunch of test, I've finally deci… (read more)

Hello world,

This problem is sticking for a year now. We even switched to ESR thinking it will fixed the problem but to no avail. After a bunch of test, I've finally decided to post and ask for help. Tests have been done on macos 11.6 fresh vanilla install, no encryption (no filevault, I hate it), and Firefox 91.1.0esr (64 bits), but problem is the same since version 75 + (no problem seen on windows or linux) If I don't use Profiles Manager, at each launch of Firefox a new profile is created with no import from former profiles. If I do use Profiles Manager, I can keep on choosing my default profile, and no new ones are created, BUT new install is added to install.ini and profiles.ini. All tests have been done with the exact same firefox (i mean, application is the same and correctly installed in the /Applications of macos).

Here is the profiles.ini

[Install5A291CFD23D97DBF] Default=Profiles/ucaeqkrb.default-esr Locked=1

[Profile0] Name=default-esr IsRelative=1 Path=Profiles/ucaeqkrb.default-esr Default=1

[General] StartWithLastProfile=0 Version=1

[InstallF5B6C4E8673B7987] Default=Profiles/ucaeqkrb.default-esr Locked=1

[Install7F9608401B386673] Default=Profiles/ucaeqkrb.default-esr Locked=1

And the installs.ini

[5A291CFD23D97DBF] Default=Profiles/ucaeqkrb.default-esr Locked=1

[F5B6C4E8673B7987] Default=Profiles/ucaeqkrb.default-esr Locked=1

[7F9608401B386673] Default=Profiles/ucaeqkrb.default-esr Locked=1

As you can see each launch of Firefox created a new hash of installation (even if same it's always the same firefox version). As long as I choose my default profile in profiles manager, I can keep it. If I switch to default comportment, I will get a new profile at each launch (as it see en new install hash) and it will not import former profiles (even if it's from the same or an older version).

So I'm wandering, why Firefox keeps on adding a news install hash on each launch, and/or how can I prevent it from doing it.

Asked by firefox1540 2 months ago

Answered by Mike Kaply 1 month ago

  • Solved

block file:///c:/ in Firefox Quantum release 60.4.0esr(32-bit)

Hello, I ve tried to block file:///c:/ in Firefox Quantum release 60.4.0esr(32-bit) by the above .json with no results. I ve also tried to block it in a newer release and… (read more)

Hello, I ve tried to block file:///c:/ in Firefox Quantum release 60.4.0esr(32-bit) by the above .json with no results. I ve also tried to block it in a newer release and it was fine (78.15.0esr (32-bit)). Is anything i can do to block it in this particular version i m using(60.4.0esr(32-bit))?

Thank you

{ "policies": { "WebsiteFilter": { "Block": ["file:///C:/*"] } } }

Asked by ThanosTh 1 month ago

Answered by Mike Kaply 3 weeks ago

  • Solved
  • Archived

Firefox can't access url with name but can with ip address

version 78.5.0esr I have a VMWare mint linux running on a PC. It has its own ip address. If I log into the router, I can see it. Suddenly, from today, I am unable to acce… (read more)

version 78.5.0esr I have a VMWare mint linux running on a PC. It has its own ip address. If I log into the router, I can see it. Suddenly, from today, I am unable to access that VM using vm-name:port/ but I can access it using the ip address 192.168.1.6:port within firefox. Using edge, I can access the server using both name and ip address.

This has always worked and now it is not. I have made no changes to the prefs in firefox.

Any ideas?

Asked by john489 1 year ago

Answered by Mike Kaply 12 months ago

  • Solved
  • Archived

Trouble using firefox.cfg with JS in ubuntu18

I'm setting up Firefox 78.6.1esr in an image and want it to start in French or English given the environment variable (lang or language or otherwise) and I'm having troub… (read more)

I'm setting up Firefox 78.6.1esr in an image and want it to start in French or English given the environment variable (lang or language or otherwise) and I'm having trouble doing so.

I installed the correct French Language pack from http://releases.mozilla.org/pub/firefox/releases/78.6.1esr/linux-x86_64/xpi/ and it is now recognized by Firefox as a valid add-on.

I have `autoconfig.js` in the /distribution/extensions/ directory as well as `firefox.cfg` in the base folder. If in the cfg file I just have ``` // IMPORTANT: code begins next line. pref("intl.locale.requested","fr") ```

It works fine but the moment I try and use something like `getenv(LANG)` suddenly the error appears "Failed to read configuration file" pops up when I try to start Firefox. My understanding was that the cfg was treated like a JS file per https://support.mozilla.org/en-US/kb/customizing-firefox-using-autoconfig but I can't seem to get any JS to run nicely.

Something like the following would be nice // next line const langvar = getenv(LANG); pref("intl.locale.requested", langvar);

would be ideal but I'm missing something.

Any help is greatly appreciated!

Asked by ito-matsuda 10 months ago

Answered by jscher2000 10 months ago

  • Solved
  • Archived

Enterprise Policies deployed despite no Group Policy being configured

Our organisation made Group Policy changes today clients relating to disabling Windows Hello on Windows 10. These seem to have had unintended effects on Firefox. Note we … (read more)

Our organisation made Group Policy changes today clients relating to disabling Windows Hello on Windows 10. These seem to have had unintended effects on Firefox. Note we do not implement any Firefox specific *.admx — these Firefox Enterprise Policies seem to have been activated by some other means.

The Firefox Enterprise policies are:

  • DisableFirefoxAccounts true
  • PasswordManagerEnabled false
  • OfferToSaveLogins false
  • OfferToSaveLoginsDefault false

Upon reporting the side-effect, we rolled-back most of the Group Policy changes, only maintaining the following remnants:

Computer Policy\Administrative Templates\System/Logon

  • Turn on convenience PIN sign-in

Computer Policy\Administrative Templates\Windows Components/Biometrics

  • Allow domain users to log on using biometrics
  • Allow the use of biometrics
  • Allow users to log on using biometrics

Computer Policy\Administrative Templates\Windows Components/Windows Hello for Business

  • Use biometrics

However, even with only those Group Policies being implemented, the following 2 Firefox Enterprise Policies remain active:

  • OfferToSaveLogins false
  • OfferToSaveLoginsDefault false

Are the above interactions between Windows Group Policy and Firefox documented or known?

Asked by oneofthedamons 9 months ago

Answered by cor-el 9 months ago

  • Solved
  • Archived

policies.json don't work on Windows

I've made "C:\Program Files\Mozilla Firefox\distribution" folder and policies.json with test policy below: { "policies": { "SearchBar": "unified" } } But it do… (read more)

I've made "C:\Program Files\Mozilla Firefox\distribution" folder and policies.json with test policy below: {

 "policies": {
   "SearchBar": "unified"
 }

}

But it doesn't work. In registry it does. I even used Enterprise Policy Generator to exclude any typos. What's wrong here?

Asked by Serpher 9 months ago

Answered by Serpher 9 months ago

  • Solved

prevent firefox tabs from opening

Hey there I am running Firefox on a lot of touchpanels in kiosk mode. It works really great and is rather reliable. The only problems are tabs from firefox opening. Like… (read more)

Hey there

I am running Firefox on a lot of touchpanels in kiosk mode. It works really great and is rather reliable.

The only problems are tabs from firefox opening. Like the tab advertising the firefox account, first start tab, update tab and the tab to recreate a session after a powerloss.

As it is a kiosk, I dont want any of the users to see these things.

Yet though I did not find a way to disable these tabs/ functions.

Is there a way to do so? If yes then your help would appreciated a lot!

Sincerely Alessio

Asked by Ale 1 month ago

Answered by Mike Kaply 1 month ago

  • Solved
  • Archived

A wildcard preference name for AutoConfig and/or Policies.json

Is it possible to use a wildcard of some sort to identify settings ? For example: we have print.printer_WHATEVERTHENAME.print_shrink_to_fit I want to put a wildcard to sk… (read more)

Is it possible to use a wildcard of some sort to identify settings ?

For example: we have print.printer_WHATEVERTHENAME.print_shrink_to_fit

I want to put a wildcard to skip the printer name and just change preference that ends with .print_shrink_to_fit

So it would look something like this: pref("*.print_shrink_to_fit", false) or *.print_shrink_to_fit", false

Asked by Serpher 9 months ago

Answered by Mike Kaply 9 months ago

  • Solved

Updates are disabled but still popup "Firefox can't update.." at every start

Hello @all, we deployed Firefox ESR in a corporate environment, managing settings via GPOs. When users open Firefox a message box / banner appears: "Firefox can't update … (read more)

Hello @all,

we deployed Firefox ESR in a corporate environment, managing settings via GPOs. When users open Firefox a message box / banner appears: "Firefox can't update to the latest version"

This is what we have: Firefox 78.6.1 ESR No Background Update Service Updates Disabled via GPO Checking FF Options: "Updates disabled by your system administrator" Checking FF "about:policies#active" => Updates Disabled

BUT STILL: Open Firefox - message box appears "Firefox can't update to the latest version".

I do know that we are not on the latest version but first I need to get rid of this message for each user. I cannot thiink of why this is happening at all because updates are disabled and Firefox confirms this, too.

What am I missing here?

Asked by stefan.johnen 5 months ago

Answered by stefan.johnen 5 months ago

  • Solved
  • Archived

Unable to Stop Automatic Firefox Update and Pop-up

Hi Team, We have created a package for ESR version, but when we tested with older version i.e. 78.4.1. We are not able to stop the Automatic Mozilla Firefox update throu… (read more)

Hi Team,

We have created a package for ESR version, but when we tested with older version i.e. 78.4.1. We are not able to stop the Automatic Mozilla Firefox update through script. Attaching the script command:


// Disable Auto Update lockPref("app.update.enabled", false); lockPref("app.update.auto", false); lockPref("app.update.service.enabled", false); lockPref("app.update.mode", 0); lockPref("app.update.BITS.enabled", false); lockPref("app.update.auto.migrated", false); lockPref("app.update.checkInstallTime", false); lockPref("app.update.staging.enabled", false); lockPref("app.update.doorhanger", false); lockPref("app.update.url", "https://google.com/");

Install command that we used is:

msiexec.exe /i "%~dp0FirefoxSetup78.4.1esr_x64.msi" INSTALL_MAINTENANCE_SERVICE=false /qn

======================================================================

echo Script to disable auto update of Firefox using Registry...

======================================================================

REG ADD HKEY_LOCAL_MACHINE\Software\Policies\Mozilla\Firefox /v AppAutoUpdate /t REG_DWORD /d 0 /f

=======================================================================

echo Script for customization firefox ...

=======================================================================

If exist "%ProgramFiles%\Mozilla Firefox\" copy /Y "%~dp0override.ini" "%ProgramFiles%\Mozilla Firefox\browser\" If exist "%ProgramFiles%\Mozilla Firefox\" copy /Y "%~dp0mozilla.cfg" "%ProgramFiles%\Mozilla Firefox\" If exist "%ProgramFiles%\Mozilla Firefox\" copy /Y "%~dp0local-settings.js" "%ProgramFiles%\Mozilla Firefox\defaults\pref"


Same worked perfectly with 68.10. Does anyone has any idea what we are doing wrong.

Asked by Vineeth Nambiar 1 year ago

Answered by Mike Kaply 11 months ago