Showing questions tagged: Show all questions
  • Solved
  • Archived

How I can configure trusted URL sites by Group Policy?

I download Firefox 60. Download ADMX, but I can't found options similar trusted.uris how from about:config. I found only: Authentication_SPNEGO, Authentication_Delegated,… (read more)

I download Firefox 60. Download ADMX, but I can't found options similar trusted.uris how from about:config. I found only: Authentication_SPNEGO, Authentication_Delegated, Authentication_NTLM.

If I insert links of my sites LDAP authorization in these settings, then the browser, when I try to open them, will still request a login with a password If I manual add ulr to about:config -> trusted:uris - Then everything is successfully authorized

Asked by strelkovandrey 2 years ago

Answered by Mike Kaply 2 years ago

  • Solved
  • Archived

How do I find the ID of an extension?

Attempting to deploy an extension via GPO and make it so that it cannot be disabled or removed. I cannot seem to find the ID of a certain extension. Policy = Prevent exte… (read more)

Attempting to deploy an extension via GPO and make it so that it cannot be disabled or removed. I cannot seem to find the ID of a certain extension.

Policy = Prevent extensions from being disabled or removed. I enabled the policy and added as many options of the ID as I could find. Not sure the right formatting or address to put. I tried: {93fc56d8-0594-4975-8753-c6d1877053ac} 93fc56d8-0594-4975-8753-c6d1877053ac 93fc56d8-0594-4975-8753-c6d1877053ac@mozilla.org

Nothing worked. Firefox 60 ESR Windows 10 1803

Asked by becauseimbatman 2 years ago

Answered by cor-el 2 years ago

  • Solved
  • Archived

GPO ineffective - Firefox ESR

We're looking at using the GPO functionality to start managing our existing Firefox deployments. We've loaded the ADMX file and have created a test GPO that does 2 things… (read more)

We're looking at using the GPO functionality to start managing our existing Firefox deployments. We've loaded the ADMX file and have created a test GPO that does 2 things:

1. Enable AutoUpdate 2. Creates 2 bookmarks

We've deployed the GPO to a few machines, confirmed the GPO is applying via GPResult, and confirmed that there are corresponding entries in HKLM\Software\Policies\Mozilla\Firefox but we're not seeing the changes occurring in the browser. AutoUpdate is still disabled and greyed out (via the previously deployed local JSON config file) and the bookmarks aren't present.

Any idea why we wouldn't see the changes as effective in the browser? Browser is running 60.4.0 ESR (32-bit).

Asked by cowspotter 1 year ago

Answered by Mike Kaply 1 year ago

  • Solved
  • Archived

I'm using FireFox 60.0. I set up the GPO and applied it to my computer but it is not changing the homepage. Help!

I use sync on all computers I use Firefox. For my work PC, I am expecting that Group Policy will change that computer to see the company configured homepage. (my home … (read more)

I use sync on all computers I use Firefox. For my work PC, I am expecting that Group Policy will change that computer to see the company configured homepage. (my home PC will see the homepage I have configured in my personal settings because it is not part of domain where GPO's exist.) The problem is that the GPO settings are not working. It is showing my personal homepage and the GPO is not taking effect. Any advice as to why the GPO is not working? I am using the recent release that says Group Policy is supported. ADMX files are in place and home page is configured.

Asked by wolverine6879 2 years ago

Answered by philipp 2 years ago

  • Solved
  • Archived

How to deploy handlers.json file to all new profiles?

I edited a handlers.json file for our users that I would like to push out for all new firefox installs. I tried placing this file in the "defaults" folder in my firefox … (read more)

I edited a handlers.json file for our users that I would like to push out for all new firefox installs. I tried placing this file in the "defaults" folder in my firefox directory, but it doesn't appear to be correctly copying over to any new profile made. If I manually copy the handlers.json file to the new profile folder, I do see the changes reflected.

Where do I need to place this file in order to push it out? I tried <firefox>/defaults, <firefox>/defaults/prefs, <firefox>/browser/defaults and none appeared to work. I did paste my code contents into a linter to verify there were no errors.

Thanks.

Asked by Solaire 2 years ago

Answered by Mike Kaply 2 years ago

  • Solved
  • Archived

settings from firefox.cfg not applying

I am attempting to change configuration settings for all users in Firefox 60.4.0. I am currently deploying on Windows 10 (1803). The autoconfig file sits here: C:\Program… (read more)

I am attempting to change configuration settings for all users in Firefox 60.4.0. I am currently deploying on Windows 10 (1803).

The autoconfig file sits here: C:\Program Files\Mozilla Firefox\defaults\pref and is written as follows:

pref("general.config.obscure_value", 0); 
pref("general.config.filename", "firefox.cfg");

The firefox.cfg file sits here: C:\Program Files\Mozilla Firefox and is written as follows:

//Firefox Default Settings

// set Firefox Default homepage

pref("browser.startup.homepage","https://www.google.com");

// disable default browser check

pref("browser.shell.checkDefaultBrowser", false); 

pref("browser.startup.homepage_override.mstone", "ignore");

// disable application updates

pref("app.update.auto", false); 
pref("app.update.enabled", false);

// disables the 'know your rights' button from displaying on first run

pref("browser.rights.3.shown", true);

// disables the request to send performance data from displaying

pref("toolkit.telemetry.prompted", 2); 
pref("toolkit.telemetry.rejected", true);

// enables proxy auto detect

pref("network. enablePad", true);

//force prompt for download location every time

pref("browser.download.useDownloadDir", false)

//set proxy setting to 'Auto-detect proxy settings for this network'

pref("network.proxy.type", 5);


None of these preferences are set when I check about:config in my firefox browser. Any insight would be helpful

Asked by tcosgrove1 1 year ago

Answered by Mike Kaply 1 year ago

  • Solved
  • Archived

How do I keep the X showing to close non-active tabs with one click?

I'm currently using Firefox Quantum 64.0.2. Basically, I'd like the X that lets me close a tab with just a click to stay visible. Currently, it's only visible on the a… (read more)

I'm currently using Firefox Quantum 64.0.2. Basically, I'd like the X that lets me close a tab with just a click to stay visible. Currently, it's only visible on the active tab. Is there an add-on, a tweak in about:config, or some userChrome.css code available to keep that X visible all the time on all the tabs?

Asked by carpevis 1 year ago

Answered by carpevis 1 year ago

  • Solved
  • Archived

Deploying Firefox 60ESR with policies.json doesn't appear to do anything.

Extracted setup installer, created "distribution" directory within core, and added a policies.json file. Installed Firefox 60.1.0esr 64-bit, and created a new firefox pro… (read more)

Extracted setup installer, created "distribution" directory within core, and added a policies.json file. Installed Firefox 60.1.0esr 64-bit, and created a new firefox profile for testing. Doesn't appear any policies actually apply, including bookmarks, cookies, DisableTelemetry,DisplayBookmarksToolbar,DisplayMenuBar.

Tested individual policies as listed within the README.md file within GitHub, and also tested creating of new policies.json files with the help of a niftly little add-on called "Enterprise Policy Generator".

In troubleshooting, I've done the following: -Uninstall all instances of Firefox, and removed their existing installer directories in Program Files and Program Files (x86) -Removed Mozilla directories from AppData\Local, AppData\LocalLow, and AppData\Roaming -Removed registry keys from HKCU\Software\Mozilla*, and HKLM\Software\Mozilla* -Reinstalled a freshly customized install with only one policy to isolate the issue -Tested other versions of Firefox 60, including Firefox 60.0esr, 60.0rr

Asked by davwan 2 years ago

Answered by Wesley Branton 2 years ago

  • Solved
  • Archived

Kerberos Authentication with ADFS not working in Firefox Quantum

We are attempting to use ADFS with Kerberos. The /adfs/ls/wia URL works out of box with both Internet Explorer and Google Chrome, but we unable to make it work in Firefo… (read more)

We are attempting to use ADFS with Kerberos. The /adfs/ls/wia URL works out of box with both Internet Explorer and Google Chrome, but we unable to make it work in Firefox Quantum. Instead we are presented with a completely blank screen. We are running ADFS 3.0 on Windows Server 2012 R2 with NTLM traffic disabled. When we temporarily enable NTLM on the ADFS server, Kerberos authentication works. We have also tried on a Windows Server 2016 box running ADFS 4.0 and we get the same results. Have have ensured that the WIA user agent includes Mozilla 5.0 and up.

We have also tried adjusting the URIS in about:config as suggested online to include our domain for the following values:

network.automatic-ntlm-auth.trusted-uris network.negotiate-auth.trusted-uris

We are wondering if there are any further configurations that we may need to get this to work.

Thanks

Asked by jmpsymalla 1 year ago

Answered by Mike Kaply 1 year ago

  • Solved
  • Archived

What is the correct URLs to set Google as the default search provider and make it permanent?

I am attempting to make Google the default search engine for Firefox 60 ESR. I am trying User Configuration. Default Search Engine = Google (not sure if just put a random… (read more)

I am attempting to make Google the default search engine for Firefox 60 ESR.

I am trying User Configuration.

Default Search Engine = Google (not sure if just put a random name or the actual URL) Prevent Search Engine Installs = Enabled Search Engine One: - Name = Google - URL Template = {google:baseURL}suggest?q={searchTerms} - Method = GET

System: Win10 1803

Asked by becauseimbatman 2 years ago

Answered by Mike Kaply 2 years ago

  • Solved
  • Archived

How does Firefox determine the Firefox GPOs are in place, superceding policies.json?

Within our environment, we've got a bunch of very old GPOs. However, we do not have the Firefox policy templates imported or enabled. With a customized Firefox deployment… (read more)

Within our environment, we've got a bunch of very old GPOs. However, we do not have the Firefox policy templates imported or enabled. With a customized Firefox deployment that includes both autoconfig and policies.json, settings and policies apply fine on a test system that's off the domain, but within the domain, it's almost as if the policies.json are ignored altogether.

How does Firefox determine to supercede the policies.json file? Does it simply look for active GPOs with Firefox in the name, and if so, skip applying policies by json?

Asked by davwan 2 years ago

Answered by davwan 2 years ago

  • Solved
  • Archived

Setting up firefox via GPO

Team, I deployed firefox a few years back with the localsettings.js file and the mozilla.cfg file. Below is the settings for the localsettings.js file. I inherited these… (read more)

Team,

I deployed firefox a few years back with the localsettings.js file and the mozilla.cfg file. Below is the settings for the localsettings.js file. I inherited these settings. I used sccm to install firefox and then copy these 2 files to mozilla folder (mozilla.cfg) and prefs folder (localsettings.js)

pref("general.config.filename", "mozilla.cfg"); pref("general.config.obscure_value", 0);

Mozilla.cfg settings are below.

// WKS Mozilla Firefox Lockdown // Disable updater lockPref("app.update.enabled", false); // Make absolutely sure it is really off lockPref("app.update.auto", false); lockPref("app.update.mode", 0); lockPref("app.update.service.enabled", false); // Disable Add-ons compatibility checking clearPref("extensions.lastAppVersion"); // Don't show 'know your rights' on first run pref("browser.rights.3.shown", true); // Don't show WhatsNew on first run after every update pref("browser.startup.homepage_override.mstone","ignore"); // Don't show Windows 10 splash screen on first run pref("browser.usedOnWindows10", true); // Set default homepage lockPref("browser.startup.homepage","Test.com"); // Disable the internal PDF viewer lockPref("pdfjs.disabled", true); // Disable the flash to javascript converter lockPref("shumway.disabled", true); // Don't ask to install the Flash plugin pref("plugins.notifyMissingFlash", false); // Disable plugin checking lockPref("plugins.hide_infobar_for_outdated_plugin", true); clearPref("plugins.update.url"); // Disable health reporter lockPref("datareporting.healthreport.service.enabled", false); // Disable all data upload (Telemetry and FHR) lockPref("datareporting.policy.dataSubmissionEnabled", false); // Disable crash reporter lockPref("toolkit.crashreporter.enabled", false); Components.classes["@mozilla.org/toolkit/crash-reporter;1"].getService(Components.interfaces.nsICrashReporter).submitReports = false; // Disable default browser check lockPref("browser.shell.checkDefaultBrowser", false); // Delete history on exit // lockPref("browser.history_expire_days", 0); // lockPref("browser.history_expire_days.mirror", 0); // lockPref("browser.formfill.enable", false); // lockPref("browser.download.manager.retention", 0); // lockPref("network.cookie.cookieBehavior", 0); // lockPref("network.cookie.lifetimePolicy", 2); // Disable password manager // lockPref("signon.rememberSignons", false); // lockPref("pref.privacy.disable_button.view_passwords", true); // Disable themes // lockPref("config.lockdown.disable_themes", true); // Enable Java Plugin lockPref("security.enable_java", true); // Automatically enable extensions lockPref("extensions.autoDisableScopes", 0);

I got the request from security to enable auto updating with firefox. After working with the security team and determining that we need to deploy a GPO to enable auto updates. I setup the gpo and created a baselines in sccm to delete those 2 files. For some reason lots of the ff clients are not updating also when i check to see if auto updates are enabled on my machine i see i can go into the options and disable the updates.

What am i missing should i be deleting another files in mozilla. Also, blogs, articles or suggestions are welcome. thanks,

Asked by kseanng 1 year ago

Answered by Mike Kaply 1 year ago

  • Solved
  • Archived

Can we please have a group policy setting to customize the new tab page?

So far ESR 60 and the group policy settings are great, but there are no settings for the new tab page. In an educational environment (k-12), many of these Top Sites (Fac… (read more)

So far ESR 60 and the group policy settings are great, but there are no settings for the new tab page. In an educational environment (k-12), many of these Top Sites (Facebook, Reddit, etc) and Recommended by Pocket articles (video game related, etc) are not appropriate.

I know that I can disable the entire New Tab page with a config file (which is how we did it with previous versions), but with the introduction of Group Policies, I'd like to be able to move away from this and handle everything in the GPO.

Asked by WCPSS-Software 2 years ago

Answered by Mike Kaply 2 years ago

  • Solved
  • Archived

templates on Win 2012r2 not working

I've applied the admx templates to the Sysvol on our Win Server 2012r2 environment & I've created a GPO to allow NTLM authentication to our intranet sites. However w… (read more)

I've applied the admx templates to the Sysvol on our Win Server 2012r2 environment & I've created a GPO to allow NTLM authentication to our intranet sites. However when I deploy the GPO I do not see the site in about:config network.automatic-ntlm-auth.trusted-uris

using gpresult /r I can see that the GPO is getting applied on our test machine.

attached is an image (first image) of the Firefox templates when added to the domain controller (Win 2012r2) -

I tried on another test Domain controller (this time Win 2016) and noticed that the templates look different. When applied to the Win2012r2 DC they seem to have been placed under 'Extra Registry Settings' (see first image) however when I placed them on my 2016 box, they were assigned to a different category (see second image).

Asked by barnacle 2 years ago

Answered by Mike Kaply 2 years ago

  • Solved
  • Archived

Change date format config file

Hi All, We are using Firefox ESR 60.x.x on our W10 devices. We are unable to change the locale via the config files for the device rather than a per user setting. Does an… (read more)

Hi All, We are using Firefox ESR 60.x.x on our W10 devices. We are unable to change the locale via the config files for the device rather than a per user setting. Does anyone know how to make this work? We are seeing the US date format but need UK date format. intl.accept_languages works only when changed in about:config. None of the config files seem to apply this setting.

Asked by maclabib 1 year ago

Answered by cor-el 1 year ago

  • Solved
  • Archived

How to load PKCS11 module and deploy to enterprise

I am currently using Firefox Quantum ESR 60 in an enterprise deployment. We noticed that our smartcards are no longer being read after upgrading from Firefox 38 to 60. I … (read more)

I am currently using Firefox Quantum ESR 60 in an enterprise deployment.

We noticed that our smartcards are no longer being read after upgrading from Firefox 38 to 60.

I cam see that once I load the module under security devices, the issue goes away.

My question is how do I deploy this out to everyone else now? I can't expect our users all to do this manually.

Any help would realyl be appreciated.

thank you.

Asked by gmihailo 2 years ago

Answered by Mike Kaply 2 years ago

  • Solved
  • Archived

Deploying Firefox 60.2.0 esr in citrix xenapp 7.15 environment opens up an extra tab of https://www.mozilla.org/privacy/firefox/ page.

I was trying to update Firefox esr deployed in my company's citrix environment from 52.7.3 (32-bit) version to latest released 60.2.0 and it opens up an extra tab of http… (read more)

I was trying to update Firefox esr deployed in my company's citrix environment from 52.7.3 (32-bit) version to latest released 60.2.0 and it opens up an extra tab of https://www.mozilla.org/privacy/firefox/ page with a warning "Your connection is not secure" along with my set homepage. its been like this since April release Firefox 60.0.1 ESR so I'm still stuck with old 52 version. I use customized config file and tried adding lines such as lockPref("browser.newtabpage.activity-stream.aboutHome.enabled", false); as suggested on some forums but nothing seems to work for me.

Asked by PrajjwalShrestha 2 years ago

Answered by Mike Kaply 2 years ago

  • Solved
  • Archived

how to change the the setting "Privacy & Security - History - Clear history when Firefox closes" using mozilla.cfg

My Firefox 70.0 32-bit version is default to not clear history when Firefox closes. However, when I upgrade to Firefox 68.2 ESR 64-bit, it is defaulted to clear history … (read more)

My Firefox 70.0 32-bit version is default to not clear history when Firefox closes. However, when I upgrade to Firefox 68.2 ESR 64-bit, it is defaulted to clear history when Firefox closes. How do I toggle that value in .cfg file. I want to change the config before install Firefox because changing it after the installation is not feasible. I have a lot of users to install. Thanks.

Asked by hknguyen2000 10 months ago

Answered by Wesley Branton 10 months ago

  • Solved
  • Archived

Firefox 62, help needed to change the color of the "clock" icon in the History sidebar tree

I'm using the built-in dark theme of Firefox. In these days I changed the background color and the folder icons in the Bookmarks/History sidebar using this codes (I'm not… (read more)

I'm using the built-in dark theme of Firefox. In these days I changed the background color and the folder icons in the Bookmarks/History sidebar using this codes (I'm not absolutely an expert of codes, I've found them by searching the web and the old questions in our support forum.):

/* Sidebar color change */
#viewButton, #sidebar-header, #sidebar-box, #sidebar, .sidebar-placesTree{
-moz-appearance: none !important;
color: #f9f9fa !important; /*text color*/
background-color: #1c1c1c !important; /* background color */
}
/* Drop down arrow - next to "view" */

.button-menu-dropmarker,
.button-menubutton-dropmarker {
 filter: invert(85%);
}
/* Edit folder icons */
#bookmarks-view treechildren::-moz-tree-image(container),
#PlacesToolbarItems toolbarbutton[container="true"] .toolbarbutton-icon,
#PlacesToolbarItems menu[container="true"] .menu-iconic-left,
#BMB_bookmarksPopup menu[container="true"] .menu-iconic-icon,
#bookmarksMenu menu[container="true"] .menu-iconic-icon {
  fill: #e8bb00 !important; /* slightly muted gold */
}
  /* Live Bookmark (RSS Feed) */
#bookmarks-view treechildren::-moz-tree-image(container, livemark),
#PlacesToolbarItems toolbarbutton[container="true"][livemark="true"] .toolbarbutton-icon,
#PlacesToolbarItems menu[container="true"][livemark="true"] .menu-iconic-left,
#BMB_bookmarksPopup menu[container="true"][livemark="true"] .menu-iconic-icon,
#bookmarksMenu menu[container="true"][livemark="true"] .menu-iconic-icon {
  fill: orange !important;
}
  /* Smart bookmark folder */
#bookmarks-view treechildren::-moz-tree-image(container, query),
#PlacesToolbarItems toolbarbutton[container="true"][query="true"] .toolbarbutton-icon,
#PlacesToolbarItems menu[container="true"][query="true"] .menu-iconic-left,
#BMB_bookmarksPopup menu[container="true"][query="true"] .menu-iconic-icon,
#bookmarksMenu menu[container="true"][query="true"] .menu-iconic-icon {
  fill: #69c !important; /* similar to blue smart folder color */
}
/* These "containers" are SVG in the sidebar, not yet on the menu */
#bookmarks-view treechildren::-moz-tree-image(container, OrganizerQuery_BookmarksMenu) {
  fill: olive !important;
}
#bookmarks-view treechildren::-moz-tree-image(container, OrganizerQuery_BookmarksToolbar) {
  fill: olive !important;
}
#bookmarks-view treechildren::-moz-tree-image(container, OrganizerQuery_UnfiledBookmarks) {
  fill: olive !important;
}
/* Avoid overriding classic Bookmarks Toolbar and Other Bookmarks icons in menus */
#BMB_bookmarksPopup #BMB_bookmarksToolbar.menu-iconic-icon, 
#bookmarksMenu #bookmarksToolbarFolderMenu.menu-iconic-icon {
  list-style-image: url("chrome://browser/skin/places/bookmarksToolbar.png") !important;
}
#BMB_bookmarksPopup #BMB_unsortedBookmarks.menu-iconic-icon, 
#bookmarksMenu #menu_unsortedBookmarks.menu-iconic-icon {
  list-style-image: url("chrome://browser/skin/places/unsortedBookmarks.png") !important;
}

I didn't find how to change the "clock" icon color (white could be ok) in the History sidebar at the left of the "Today, Yesterday, etc". items. I attach a screenshot (it is Firefox in Italian, Cronologia = History). Do you have any suggestion to solve my problem?

Asked by Michele Rodaro 2 years ago

Answered by cor-el 2 years ago