Firefox for Enterprise Support Forum

My 45 users do not have admin access on there computers and I need to enable Use a background service to install updates across all computers. We use Microsoft Intune for Endpoint management but I dont see the option to enable this using the ADMX options. Does anyone have a solutions for this?

Thanks in advance, David

What is the specific URL that is required to access auto-updates from the client? As an enterprise, we have locked down devices that have limited Internet connectivity. Our security area will not open the entire download area, so we are looking for the specific URL or web address that is needed so we can still auto-update clients. We want to move more people to Firefox, but need to get this working first.

Hello, FF82.0.2 I want to change and lock the settings "network.cookie.cookieBehavior" and "network.cookie.lifetimePolicy" for user via the mozilla.cfg. Also I'm using the policies.json (which would be my preferred option for changing the network.cookie..., but it doesn't work neither)

But none of them locked or changed the settings for the user. Is this a known problem or are there any other settings, which affect the cookiesettings?

I am really new to this and there were already old configs from another colleague (which has left the company and there are no documentations).

Thank you :)

We have several users in the company that constantly change their settings like saving passwords, credit cards, and addresses. I have created a group policy to keep people from saving passwords but can't figure out how to disable Formfill for credit cards and addresses. May I please get your help on this? This is the only thing I have left to set on the group policy. I have set all of the other website browsers up already. Thanks for your time and help.

Suppose I have a "policies.json" file in the "distribution" subdirectory of my Firefox installation.

And suppose "policies.json" file contains this:

{

  "policies": {
      "WebsiteFilter": {
          "Block": [
              "*://ads.yahoo.com"
          ]
      }
  }

}

Then after restarting firefox, if I put "https://ads.yahoo.com" in the URL bar, the website is blocked and I see this: "Blocked Page", "Your organisation has blocked access to this page or web site."

BUT, if I go to "https://www.yahoo.com", (and turn on the Web Developer -> Network, (CTRL+SHIFT+E)), when this loads, it successfully manages to load: "https://ads.yahoo.com/get-user-id?ver=2&n=29657&ts=1605010286&sig=5f3e61dfa993c4da&gdpr=1&gdpr_consent=CO8qFMIO8qFMIAOACBENA9CoAP_AAH_AACiQG2Nf_X_fb3_j-_599_t0eY1f9_7_v20zjgeds-8Nyd_X_L8X_2M7vA36pr4KuR4ku3bBAQdtHOncTQmR6IlVqTPsbk2Mr7NKJ7PEilsbe2dYGH9_n9XT-ZKZ79_s___7________77______3_vpwNsAJMNS-AizEsYCSaNKoUQIQriQ6AEAFFCMLRNYQErgp2VwEfoIGAAA1ARgRAgxBRiyCAAAAAJKIgBADwQCIAiAQAAgBUgIQAEaAILACQMAgAFANCwAigCECQgyOCo5TAgIkWignkjAEoudjDCEAgAA"

which is "ads.yahoo.com" and is on the WebsiteFilter block list.

So the WebsiteFilter block is not correctly blocking loading of the URL if another URL asks it to load.

In my opinion, this is a big flaw, as one large reason to block sites in the WebsiteFilter Block list is to prevent *any* page from loading anything in the blocked list.

Therefore please can this either be fixed, or a alternative "Block" suboption provided under "WebsiteFilter" that will block direct (given in URL bar) or indirect (another page trying to load it) loads ?

I'm using firefox 82.0.2 (64 bit) on Windows

Good morning all

We are trying to put Firefox (already installed) as the default internet browser (currently IE 11) on our fleet of machines under Windows 7.

I found a Microsoft solution which consists of modifying two values ​​in the registry:

HKCU \ Software \ Microsoft \ Windows \ Shell \ Associations \ UrlAssociations \ http (and https) at a minimum.

Concretely, the web shortcuts open well with Firefox, however when we go to menu, Firefox options, it is not considered as the default browser. (unhappy smiley: D)

And I don't want users to click on it themselves)

My question is the following, is there an easy way to change it to the default browser by GPO firefox? (which reproduces the click on this button)

Or a list of things to do in the registry to reproduce clicking on the button to set Firefox by default in the menu, options.

I did a regshot before and after clicking on this button, and compared, but it seems quite tedious to me (Keys added: 125, Values ​​added: 113, and some modified values)

Thank you in advance to all

I manage Firefox using the GPO policy templates on roughly 300 Windows 10 machines. I have AppAutoUpdate enabled, but Firefox appears to only apply the update if/when the application is launched. Is there a way to have the updates applied in the background without the application being launched?

Some years ago I pointed my Firefox cache drive to H:\Firefox. When I updated to 68esr I set the value in the GPO to the same folder. about:config shows the preference as locked.

Recently I decided to move the cache folder to the same drive as the profile folder. So I edited the group policy to point to F:\users\Tanya\Firefox. Updated the group policy and opened firefox. It continued to use H:\Firefox.

So set the policy to not configured and about:config showed h:\firefox. So as a test I set the group policy to iamcountessconsuelabananahammock (Not even a valid path name). No complaints, but firefox continued to write to h:\firefox.

So it seems the only purpose of the group policy is to lock the value, and the content of the GPO is not relevant at all. Is this by design

We have three 2012 R2 terminal servers with about 75 users. Disk space for local windows profiles has recently gotten short and while investigating I found nearly all users have a default Firefox profile and then seven default-release-1 (1-7). Each of these files is from 165mb to 1GB in size so I estimate each user has 3GB of space used by old profiles. This times 75 user that is 225GB of wasted space on each terminal server!

Why is the one 64bit Firefox install creating some many profiles?

Also, is there any way to limit cache file storage. Personally, I've never noticed any performance difference in a 25meg vs 250 meg cache allocation and the impact on space with many users is considerable.

Thanks

We just upgraded to windows 10 and it has been a rocky road to normalcy. My IT department uses Quest for everything. Quest SMA and SDA along with Desktop Authority. The CIO decided they didn't like Edge and wanted to move to a new browser. They did this 2 days before we go live. The question is how do i make firefox import the Bookmarks. So many articles say try the adm admx files. Tried that..failed. They create a registry entry for it but there not used. I tried finding the file location but firefox has some odd profile naming that changes the folder name. That and the location from the articles doesn't have the file it says to open. As of now I am just lost. I'm not sure how to complete this task of adding bookmarks or the Home Page. I was able to get them setup as the default browser but without the bookmarks or favorite its all moot. We have over 300 users and they are about 3 weeks away from coming back to work. I need a solution or i will have to force them to use Edge(no one wants that even web sites hate edge.). Any assistance would be greatly appreciated.

Hello,

We have some trouble with Firefox in Windows Roaming Profiles: "The bookmarks and history system will not be functional". The sqlite-shm and sqlite-wal are shown but they are fully inaccessible from CSC (client offline cache). Why does Firefox need to store this temp files in %appdata%? That's really bad design! sqlite-shm and sqlite-wal should be located in %localappdata%.

My solution is to just copy the profile folder, ignoring the inaccessible files. Then I just need to rename it to the original folder name and ff starts just fine. Does anyone know anything more to this problem? Thank you

Why does FF reset the homepage to firefox home with the latest update? We deploy our Windows based systems to hundreds of customers and count on FF to bring them to our company homepage to check for updates, documentation, etc. How can I make sure my customers systems always start on my homepage? P.S. We have hundreds of customers so going to each system is not really feasible.

I am attempting to setup Mozilla for enterprise version 81.0 (x64) to deploy through Intune and update the previous versions on our client laptops. I set up Intune with the following detection rule(attached). The idea is that Intune looks for this registry key and if its not at version 81.0 it pushes out the updated MSI file. What happens so far is that when I have a older version installed such as 74.0. Intune DOESN'T push out the update. However when I completely remove Firefox within minutes Intune detects that its not installed and pushes out the current version. Therefore it would appear that the detection rule works but not as intended. A attempted to adjust the value on the detection rule with no success. The original detection rule was to detect a file inside program files\mozilla firefox. However that rule would not detect the current version installed.

Any ideas would be helpful.

Hello, I'm trying to setup basic policy.json file to configure firefox for all my users. I'm stuck in one step, we require SSL client certificate to access our intranet.

1.So far we are importing personal *.pfx file via Firefox GUI in personal tab, but I want to import this cert via policy.json and So far im not able to do it, I dont know how to set requiret certifacate password.

2. I was also thinking using Windows cert store. I imported certifacete to Windows and set flag security.enterprise_roots.enabled to true in about:config. But firefox is not using it. However Edge is working just fine.

Only way i was able to get website working so far is manualy importing that certificate via Firefox GUI.

Which way should I go? And do you have any tips how to get it working? Thanks a lot.

Hello,

we are setting our firefox setting for our domain over the gpo. I installed the the apmx template at our domain controller and setted it.

Our goal is, to disable private surfing and preventing to delete the history. (So we could look it up if the law&order want them).

In the pictures you can see which settings are set in the gpo. Users are still to use the delete function under Settings. Do i miss some kind of gpo?

The gpo for private surfing is working fine so nobody can use it atm. A record with rsop.msc is showing evrything correctly. The Problem is on all machines. With outher browsers and gpo we do not have that kind of problem.

Following GPO Rules (Tranlated): Disable Chronicle -> Disabled Clear the history when Firefox is closed -> Disabled Disable Clean Firefox -> Enabled Disable private browsing -> Enabled Forgot button Deactivate button -> Enabled Mozilla/Firefox/Clear data when browser is closed -> Locked -> Enabled

Hi,

I'm trying to configure from group policy and assign the default Firefox language for all users. The Firefox admx files are imported in group policy but i can't find such setting to set the default language for all domain users. Is there any other way i can configure this setting?

Thanks Andreas

Hi,

I'm trying to install an addon for my users at my company. I have about 4500 machines that need to have this extension installed and I can't find what I need in order to install the extension globally through the registry. Mozilla just came out with Firefox 75 and now I can't add an addon to the browser without having to remote into the computer and move the extension into the browser to install the addon, I would like to avoid to minimize impact to my company's resources.

I've tried this site below. Tried to put an entry into the registry and it's not working. https://extensionworkshop.com/documentation/enterprise/enterprise-distribution/#installation-using-windows-registry

Tried this site to try and find the GUID folder and can't find it in the Roaming folder https://support.mozilla.org/en-US/kb/cannot-remove-add-on-extension-or-theme

Tried this site but still can't find the GUID folder in roaming https://extensionworkshop.com/documentation/publish/distribute-sideloading/

Could I get steps on how to install an addon into the registry for Firefox 75?

I'm trying to install multiple Root CA's using Firefox policies. I have a folder with 50 Certificates and while I know I can specify them each individually using "Certificates | Install" like in the example below, I wanted to know if there was a way to point to a whole folder and install those certs since it is way less messy that way.

I know the documentation says you can specify specific paths to files like so Example:

{

 "policies": {
   "Certificates": {
     "Install": ["cert1.der", "/home/username/cert2.pem"]
   }
 }

}

But I was trying to do something like this (So far unsucessfully): "Install": ["/path/to/folder/*.crt"] or "Install": ["/path/to/folder/*"] or "Install": ["/path/to/folder/"] or "Install": ["/path/to/folder"]

I also know there are other ways to install certs to Firefox programmatically but I liked how simple the .json method was.

I would like to updates Firefox browser in my enterprise but we have to allow the update url before. I cannot find any official firefox update urls. so, what I need to know are What URLs are used for Firefox Browser updates? and Where can I get update about the URLs?

Hi there,

I'm attempting to configure group policy in my organisation to only allow the install of selected Firefox plugins present in our whitelist. I am doing this via the ExtensionSettings policy within the Firefox templates v1.14

I have successfully made the default behavior to block plugins, using this string:

   "*": {
   "blocked_install_message": "Extension is not whitelisted. Please contact IT Support",
   "install_sources": ["https://addons.mozilla.org/"],
   "installation_mode": "blocked"
 }

I'm even able to successfully whitelist plugins on the mozilla addon page, example below:

   "support@lastpass.com": {
   "installation_mode": "allowed",
   "install_url": "https://addons.mozilla.org/en-US/firefox/addon/lastpass-password-manager/"
 }

My problem is I can't seem to whitelist any plugins that are installed from any source other than Mozilla. For example, Dashlane is only available via their website. I tried the following, but it still says blocked.

   "jetpack-extension@dashlane.com": {
   "installation_mode": "allowed",
   "install_url": "https://www.dashlane.com/en/"
 }

I have run into the same issue with another plugin, even when using the full URL of the .xpi file. I've played around with this for a good few hours, but nothing seems to work. Any advice?

Thanks in advance.