Showing questions tagged: Show all questions

Enabling "Use a background service to install updates" across all company computers

My 45 users do not have admin access on there computers and I need to enable Use a background service to install updates across all computers. We use Microsoft Intune for… (read more)

My 45 users do not have admin access on there computers and I need to enable Use a background service to install updates across all computers. We use Microsoft Intune for Endpoint management but I dont see the option to enable this using the ADMX options. Does anyone have a solutions for this?

Thanks in advance, David

Asked by david.strand 1 month ago

Last reply by Mike Kaply 1 week ago

Auto Updates for Enterprises

What is the specific URL that is required to access auto-updates from the client? As an enterprise, we have locked down devices that have limited Internet connectivity. … (read more)

What is the specific URL that is required to access auto-updates from the client? As an enterprise, we have locked down devices that have limited Internet connectivity. Our security area will not open the entire download area, so we are looking for the specific URL or web address that is needed so we can still auto-update clients. We want to move more people to Firefox, but need to get this working first.

Asked by mcorcor1 1 month ago

Last reply by Mike Kaply 1 month ago

mozilla.cfg cookies aren't locked for users

Hello, FF82.0.2 I want to change and lock the settings "network.cookie.cookieBehavior" and "network.cookie.lifetimePolicy" for user via the mozilla.cfg. Also I'm using th… (read more)

Hello, FF82.0.2 I want to change and lock the settings "network.cookie.cookieBehavior" and "network.cookie.lifetimePolicy" for user via the mozilla.cfg. Also I'm using the policies.json (which would be my preferred option for changing the network.cookie..., but it doesn't work neither)

But none of them locked or changed the settings for the user. Is this a known problem or are there any other settings, which affect the cookiesettings?

I am really new to this and there were already old configs from another colleague (which has left the company and there are no documentations).

Thank you :)

Asked by Soulphy 1 month ago

Last reply by Mike Kaply 1 month ago

How do I disable saving credit cards via group policy?

We have several users in the company that constantly change their settings like saving passwords, credit cards, and addresses. I have created a group policy to keep peopl… (read more)

We have several users in the company that constantly change their settings like saving passwords, credit cards, and addresses. I have created a group policy to keep people from saving passwords but can't figure out how to disable Formfill for credit cards and addresses. May I please get your help on this? This is the only thing I have left to set on the group policy. I have set all of the other website browsers up already. Thanks for your time and help.

Asked by aadams81976 2 months ago

Last reply by Mike Kaply 2 months ago

policies.json WebsiteFilter parameter does not block indirect blocked webpages loading

Suppose I have a "policies.json" file in the "distribution" subdirectory of my Firefox installation. And suppose "policies.json" file contains this: { "policies": { … (read more)

Suppose I have a "policies.json" file in the "distribution" subdirectory of my Firefox installation.

And suppose "policies.json" file contains this:

{

  "policies": {
      "WebsiteFilter": {
          "Block": [
              "*://ads.yahoo.com"
          ]
      }
  }

}

Then after restarting firefox, if I put "https://ads.yahoo.com" in the URL bar, the website is blocked and I see this: "Blocked Page", "Your organisation has blocked access to this page or web site."

BUT, if I go to "https://www.yahoo.com", (and turn on the Web Developer -> Network, (CTRL+SHIFT+E)), when this loads, it successfully manages to load: "https://ads.yahoo.com/get-user-id?ver=2&n=29657&ts=1605010286&sig=5f3e61dfa993c4da&gdpr=1&gdpr_consent=CO8qFMIO8qFMIAOACBENA9CoAP_AAH_AACiQG2Nf_X_fb3_j-_599_t0eY1f9_7_v20zjgeds-8Nyd_X_L8X_2M7vA36pr4KuR4ku3bBAQdtHOncTQmR6IlVqTPsbk2Mr7NKJ7PEilsbe2dYGH9_n9XT-ZKZ79_s___7________77______3_vpwNsAJMNS-AizEsYCSaNKoUQIQriQ6AEAFFCMLRNYQErgp2VwEfoIGAAA1ARgRAgxBRiyCAAAAAJKIgBADwQCIAiAQAAgBUgIQAEaAILACQMAgAFANCwAigCECQgyOCo5TAgIkWignkjAEoudjDCEAgAA"

which is "ads.yahoo.com" and is on the WebsiteFilter block list.

So the WebsiteFilter block is not correctly blocking loading of the URL if another URL asks it to load.

In my opinion, this is a big flaw, as one large reason to block sites in the WebsiteFilter Block list is to prevent *any* page from loading anything in the blocked list.

Therefore please can this either be fixed, or a alternative "Block" suboption provided under "WebsiteFilter" that will block direct (given in URL bar) or indirect (another page trying to load it) loads ?

I'm using firefox 82.0.2 (64 bit) on Windows

Asked by mozilla.org11 2 months ago

Last reply by Mike Kaply 2 months ago

Firefox as default browser

Good morning all We are trying to put Firefox (already installed) as the default internet browser (currently IE 11) on our fleet of machines under Windows 7. I found a Mi… (read more)

Good morning all

We are trying to put Firefox (already installed) as the default internet browser (currently IE 11) on our fleet of machines under Windows 7.

I found a Microsoft solution which consists of modifying two values ​​in the registry:

HKCU \ Software \ Microsoft \ Windows \ Shell \ Associations \ UrlAssociations \ http (and https) at a minimum.

Concretely, the web shortcuts open well with Firefox, however when we go to menu, Firefox options, it is not considered as the default browser. (unhappy smiley: D)

And I don't want users to click on it themselves)

My question is the following, is there an easy way to change it to the default browser by GPO firefox? (which reproduces the click on this button)

Or a list of things to do in the registry to reproduce clicking on the button to set Firefox by default in the menu, options.

I did a regshot before and after clicking on this button, and compared, but it seems quite tedious to me (Keys added: 125, Values ​​added: 113, and some modified values)

Thank you in advance to all

Asked by antony.deverchin 2 months ago

Last reply by Mike Kaply 2 months ago

Automatic Updates Without Launching Firefox

I manage Firefox using the GPO policy templates on roughly 300 Windows 10 machines. I have AppAutoUpdate enabled, but Firefox appears to only apply the update if/when the… (read more)

I manage Firefox using the GPO policy templates on roughly 300 Windows 10 machines. I have AppAutoUpdate enabled, but Firefox appears to only apply the update if/when the application is launched. Is there a way to have the updates applied in the background without the application being launched?

Asked by Zach 2 months ago

Last reply by Mike Kaply 2 months ago

How group policy work for browser.cache.disk.parent_directory

Some years ago I pointed my Firefox cache drive to H:\Firefox. When I updated to 68esr I set the value in the GPO to the same folder. about:config shows the preference as… (read more)

Some years ago I pointed my Firefox cache drive to H:\Firefox. When I updated to 68esr I set the value in the GPO to the same folder. about:config shows the preference as locked.

Recently I decided to move the cache folder to the same drive as the profile folder. So I edited the group policy to point to F:\users\Tanya\Firefox. Updated the group policy and opened firefox. It continued to use H:\Firefox.

So set the policy to not configured and about:config showed h:\firefox. So as a test I set the group policy to iamcountessconsuelabananahammock (Not even a valid path name). No complaints, but firefox continued to write to h:\firefox.

So it seems the only purpose of the group policy is to lock the value, and the content of the GPO is not relevant at all. Is this by design

Asked by TanyaC 2 months ago

Last reply by Mike Kaply 2 months ago

Too many profiles

We have three 2012 R2 terminal servers with about 75 users. Disk space for local windows profiles has recently gotten short and while investigating I found nearly all us… (read more)

We have three 2012 R2 terminal servers with about 75 users. Disk space for local windows profiles has recently gotten short and while investigating I found nearly all users have a default Firefox profile and then seven default-release-1 (1-7). Each of these files is from 165mb to 1GB in size so I estimate each user has 3GB of space used by old profiles. This times 75 user that is 225GB of wasted space on each terminal server!

Why is the one 64bit Firefox install creating some many profiles?

Also, is there any way to limit cache file storage. Personally, I've never noticed any performance difference in a 25meg vs 250 meg cache allocation and the impact on space with many users is considerable.

Thanks

Asked by Marty 3 months ago

Last reply by cor-el 3 months ago

  • Archived

using firefox/google chrome on a domain

We just upgraded to windows 10 and it has been a rocky road to normalcy. My IT department uses Quest for everything. Quest SMA and SDA along with Desktop Authority. The C… (read more)

We just upgraded to windows 10 and it has been a rocky road to normalcy. My IT department uses Quest for everything. Quest SMA and SDA along with Desktop Authority. The CIO decided they didn't like Edge and wanted to move to a new browser. They did this 2 days before we go live. The question is how do i make firefox import the Bookmarks. So many articles say try the adm admx files. Tried that..failed. They create a registry entry for it but there not used. I tried finding the file location but firefox has some odd profile naming that changes the folder name. That and the location from the articles doesn't have the file it says to open. As of now I am just lost. I'm not sure how to complete this task of adding bookmarks or the Home Page. I was able to get them setup as the default browser but without the bookmarks or favorite its all moot. We have over 300 users and they are about 3 weeks away from coming back to work. I need a solution or i will have to force them to use Edge(no one wants that even web sites hate edge.). Any assistance would be greatly appreciated.

Asked by jeremy.beegle 8 months ago

Last reply by Mike Kaply 3 months ago

Roaming Profile

Hello, We have some trouble with Firefox in Windows Roaming Profiles: "The bookmarks and history system will not be functional". The sqlite-shm and sqlite-wal are shown b… (read more)

Hello,

We have some trouble with Firefox in Windows Roaming Profiles: "The bookmarks and history system will not be functional". The sqlite-shm and sqlite-wal are shown but they are fully inaccessible from CSC (client offline cache). Why does Firefox need to store this temp files in %appdata%? That's really bad design! sqlite-shm and sqlite-wal should be located in %localappdata%.

My solution is to just copy the profile folder, ignoring the inaccessible files. Then I just need to rename it to the original folder name and ff starts just fine. Does anyone know anything more to this problem? Thank you

Asked by support49 5 months ago

Last reply by Mike Kaply 3 months ago

Latest Update Resets Homepage

Why does FF reset the homepage to firefox home with the latest update? We deploy our Windows based systems to hundreds of customers and count on FF to bring them to our … (read more)

Why does FF reset the homepage to firefox home with the latest update? We deploy our Windows based systems to hundreds of customers and count on FF to bring them to our company homepage to check for updates, documentation, etc. How can I make sure my customers systems always start on my homepage? P.S. We have hundreds of customers so going to each system is not really feasible.

Asked by Videstra 5 months ago

Last reply by Mike Kaply 3 months ago

Firefox for enterprise setting up with MS Intune

I am attempting to setup Mozilla for enterprise version 81.0 (x64) to deploy through Intune and update the previous versions on our client laptops. I set up Intune with t… (read more)

I am attempting to setup Mozilla for enterprise version 81.0 (x64) to deploy through Intune and update the previous versions on our client laptops. I set up Intune with the following detection rule(attached). The idea is that Intune looks for this registry key and if its not at version 81.0 it pushes out the updated MSI file. What happens so far is that when I have a older version installed such as 74.0. Intune DOESN'T push out the update. However when I completely remove Firefox within minutes Intune detects that its not installed and pushes out the current version. Therefore it would appear that the detection rule works but not as intended. A attempted to adjust the value on the detection rule with no success. The original detection rule was to detect a file inside program files\mozilla firefox. However that rule would not detect the current version installed.

Any ideas would be helpful.

Asked by MDragon1 3 months ago

Last reply by Mike Kaply 3 months ago

Import personal pfx certificate via policy.json

Hello, I'm trying to setup basic policy.json file to configure firefox for all my users. I'm stuck in one step, we require SSL client certificate to access our intranet.… (read more)

Hello, I'm trying to setup basic policy.json file to configure firefox for all my users. I'm stuck in one step, we require SSL client certificate to access our intranet.

1.So far we are importing personal *.pfx file via Firefox GUI in personal tab, but I want to import this cert via policy.json and So far im not able to do it, I dont know how to set requiret certifacate password.

2. I was also thinking using Windows cert store. I imported certifacete to Windows and set flag security.enterprise_roots.enabled to true in about:config. But firefox is not using it. However Edge is working just fine.

Only way i was able to get website working so far is manualy importing that certificate via Firefox GUI.

Which way should I go? And do you have any tips how to get it working? Thanks a lot.

Asked by siba2 3 months ago

Last reply by Mike Kaply 3 months ago

  • Archived

Firefox still allowing to delete history/timeline (GPO)

Hello, we are setting our firefox setting for our domain over the gpo. I installed the the apmx template at our domain controller and setted it. Our goal is, to disable p… (read more)

Hello,

we are setting our firefox setting for our domain over the gpo. I installed the the apmx template at our domain controller and setted it.

Our goal is, to disable private surfing and preventing to delete the history. (So we could look it up if the law&order want them).

In the pictures you can see which settings are set in the gpo. Users are still to use the delete function under Settings. Do i miss some kind of gpo?

The gpo for private surfing is working fine so nobody can use it atm. A record with rsop.msc is showing evrything correctly. The Problem is on all machines. With outher browsers and gpo we do not have that kind of problem.

Following GPO Rules (Tranlated): Disable Chronicle -> Disabled Clear the history when Firefox is closed -> Disabled Disable Clean Firefox -> Enabled Disable private browsing -> Enabled Forgot button Deactivate button -> Enabled Mozilla/Firefox/Clear data when browser is closed -> Locked -> Enabled

Asked by Schnuecker 7 months ago

Last reply by Mike Kaply 5 months ago

  • Archived

Group Policy - Firefox Set language settings for all user profiles

Hi, I'm trying to configure from group policy and assign the default Firefox language for all users. The Firefox admx files are imported in group policy but i can't find … (read more)

Hi,

I'm trying to configure from group policy and assign the default Firefox language for all users. The Firefox admx files are imported in group policy but i can't find such setting to set the default language for all domain users. Is there any other way i can configure this setting?

Thanks Andreas

Asked by ac8 6 months ago

Last reply by cor-el 6 months ago

  • Archived

How to add addons globally on a user's computer for Firefox 75

Hi, I'm trying to install an addon for my users at my company. I have about 4500 machines that need to have this extension installed and I can't find what I need in ord… (read more)

Hi,

I'm trying to install an addon for my users at my company. I have about 4500 machines that need to have this extension installed and I can't find what I need in order to install the extension globally through the registry. Mozilla just came out with Firefox 75 and now I can't add an addon to the browser without having to remote into the computer and move the extension into the browser to install the addon, I would like to avoid to minimize impact to my company's resources.

I've tried this site below. Tried to put an entry into the registry and it's not working. https://extensionworkshop.com/documentation/enterprise/enterprise-distribution/#installation-using-windows-registry

Tried this site to try and find the GUID folder and can't find it in the Roaming folder https://support.mozilla.org/en-US/kb/cannot-remove-add-on-extension-or-theme

Tried this site but still can't find the GUID folder in roaming https://extensionworkshop.com/documentation/publish/distribute-sideloading/

Could I get steps on how to install an addon into the registry for Firefox 75?

Asked by paulazizeh 8 months ago

Last reply by jscher2000 7 months ago

  • Archived

Installing Multiple Certificate Authorities with Firefox Policies JSON

I'm trying to install multiple Root CA's using Firefox policies. I have a folder with 50 Certificates and while I know I can specify them each individually using "Certifi… (read more)

I'm trying to install multiple Root CA's using Firefox policies. I have a folder with 50 Certificates and while I know I can specify them each individually using "Certificates | Install" like in the example below, I wanted to know if there was a way to point to a whole folder and install those certs since it is way less messy that way.

I know the documentation says you can specify specific paths to files like so Example:

{

 "policies": {
   "Certificates": {
     "Install": ["cert1.der", "/home/username/cert2.pem"]
   }
 }

}

But I was trying to do something like this (So far unsucessfully): "Install": ["/path/to/folder/*.crt"] or "Install": ["/path/to/folder/*"] or "Install": ["/path/to/folder/"] or "Install": ["/path/to/folder"]

I also know there are other ways to install certs to Firefox programmatically but I liked how simple the .json method was.

Asked by zacherynotz 8 months ago

Last reply by cor-el 8 months ago

  • Archived

What URLs are used for Firefox Browser updates? Where can I get update about the URLs?

I would like to updates Firefox browser in my enterprise but we have to allow the update url before. I cannot find any official firefox update urls. so, what I need to kn… (read more)

I would like to updates Firefox browser in my enterprise but we have to allow the update url before. I cannot find any official firefox update urls. so, what I need to know are What URLs are used for Firefox Browser updates? and Where can I get update about the URLs?

Asked by Hyong 8 months ago

Last reply by Mike Kaply 8 months ago

  • Archived

Group Policy: How Do I Whitelist Plugins Not Hosted By Mozilla?

Hi there, I'm attempting to configure group policy in my organisation to only allow the install of selected Firefox plugins present in our whitelist. I am doing this via … (read more)

Hi there,

I'm attempting to configure group policy in my organisation to only allow the install of selected Firefox plugins present in our whitelist. I am doing this via the ExtensionSettings policy within the Firefox templates v1.14

I have successfully made the default behavior to block plugins, using this string:

   "*": {
   "blocked_install_message": "Extension is not whitelisted. Please contact IT Support",
   "install_sources": ["https://addons.mozilla.org/"],
   "installation_mode": "blocked"
 }

I'm even able to successfully whitelist plugins on the mozilla addon page, example below:

   "support@lastpass.com": {
   "installation_mode": "allowed",
   "install_url": "https://addons.mozilla.org/en-US/firefox/addon/lastpass-password-manager/"
 }

My problem is I can't seem to whitelist any plugins that are installed from any source other than Mozilla. For example, Dashlane is only available via their website. I tried the following, but it still says blocked.

   "jetpack-extension@dashlane.com": {
   "installation_mode": "allowed",
   "install_url": "https://www.dashlane.com/en/"
 }

I have run into the same issue with another plugin, even when using the full URL of the .xpi file. I've played around with this for a good few hours, but nothing seems to work. Any advice?

Thanks in advance.

Asked by Nick.Rogers 9 months ago

Last reply by Mike Kaply 8 months ago