Firefox for Enterprise Support Forum

We have three 2012 R2 terminal servers with about 75 users. Disk space for local windows profiles has recently gotten short and while investigating I found nearly all users have a default Firefox profile and then seven default-release-1 (1-7). Each of these files is from 165mb to 1GB in size so I estimate each user has 3GB of space used by old profiles. This times 75 user that is 225GB of wasted space on each terminal server!

Why is the one 64bit Firefox install creating some many profiles?

Also, is there any way to limit cache file storage. Personally, I've never noticed any performance difference in a 25meg vs 250 meg cache allocation and the impact on space with many users is considerable.

Thanks

I'm trying to install multiple Root CA's using Firefox policies. I have a folder with 50 Certificates and while I know I can specify them each individually using "Certificates | Install" like in the example below, I wanted to know if there was a way to point to a whole folder and install those certs since it is way less messy that way.

I know the documentation says you can specify specific paths to files like so Example:

{

 "policies": {
   "Certificates": {
     "Install": ["cert1.der", "/home/username/cert2.pem"]
   }
 }

}

But I was trying to do something like this (So far unsucessfully): "Install": ["/path/to/folder/*.crt"] or "Install": ["/path/to/folder/*"] or "Install": ["/path/to/folder/"] or "Install": ["/path/to/folder"]

I also know there are other ways to install certs to Firefox programmatically but I liked how simple the .json method was.

Hello,

I am looking at implementing the Firefix ADMX using Microsoft Endpoint Manager, however I cannot seem to get over the first hurdle. I am receive the following error -2016281112 (Remediation failed) and I am only trying to ingest the ADMX file.

Name: Firefox ADMX Ingestion OMA-URI: ./Device/Vendor/MSFT/Policy/ConfigOperations/ADMXInstall/Firefox/Policy/FirefoxAdmx Data type: String Value: <policyDefinitions revision="1.14" schemaVersion="1.0">

 <policyNamespaces>
   <target prefix="firefox" namespace="Mozilla.Policies.Firefox"/>
   <using prefix="Mozilla" namespace="Mozilla.Policies"/>
 </policyNamespaces>
 <resources minRequiredRevision="1.14"/>

I've found plenty of instructions for setting up a web kiosk on linux with just X and openbox, but they all use the chromium browser. I've searched the web as to how to do this with firefox. I've tried to simply use the instructions for chromium but change things over to firefox, but I'm not sure what the equivalent paths/files are in firefox.

I've got a VM (to test with) and got the chromium setup working (just so that I know X and openbox are behaving). Here is where I'm getting stuck in /etc/xdg/openbox/autostart:

===

sed -i 's/"exited_cleanly":false/"exited_cleanly":true/' ~/.config/chromium/'Local State'

sed -i 's/"exited_cleanly":false/"exited_cleanly":true/; s/"exit_type":"[^"]\+"/"exit_type":"Normal"/' ~/.config/chromium/Default/Preferences

chromium-browser --disable-infobars --kiosk '<http://your-url-here>'

===

I'm not at all sure where the equivalent of "~/.config/chromium/"Local State" would be for firefox. Surely under the ./mozilla/firefox directory, but I know not where.

Same thing for the second sed line, no idea about the equivalent.

The actual command I presume is 'firefox --kiosk 'url of choice'

I've commented out the 'sed' lines and get firefox to start ONCE, but it alwasy exits X uncleanly and times out with getting a lock on .Xauthority. If I remove firefox and delete the .mozilla folder and then reinstall firefox, it will again work only once. When it does work like this, it takes about two minutes for firefox to come up as compared to the chromium setup that only takes several seconds.

Any thoughts or help would be VERY appreciated.

TIA,

Joe

Many of my users access a web based application (Cisco Finesse) to log into our phone system. Each time they move to another desk Firefox needs to be configured for Finesse for that user. This is the only thing they use Firefox for.

Is there a way to force all users to use the same Firefox profile so that once one user of a particular PC has been set up in Finesse all subsequent new users use the same profile and therefore also also set up for Finesse?

Thanks

We are currently trialling Firefox in our business, we need to redirect the users profile to have users bookmarks move with them when they enter meeting rooms. Currently we are using Folder Redirection with offline file syncing enabled to accomplish this. This is causing users to receive the error telling them to close Firefox as it is already running when they open Firefox on a second PC at the same time. I understand why this is happening with the lock file being created in the users roaming profile data, I am looking to find a solution that will allow users to have their data roam with them and be able to open multiple sessions on different PCs simultaneously.

What methods are you using to provide this level of functionality to users in your business?

In my searching, almost everthying I've found related to managing Firefox is from a manual user perspective. Most of our users are not very computer literate to begin with. They are of sort who refer to the browser as "Google" or "MSN", whichever default search engine they have grown accustomed to, learn just enough to get their job done. That leaves it to IT to preserve their settings.

Firefox is writing a majority the user profile information to appdata\roaming. Windows is preventing appdata\roaming from being redirected. This means whenever IT needs to rebuild the desktops, all the users that prefer Firefox as a browser lose their setup. As of yet, we have no specific policy for users creating a Mozilla account to backup their profile to the cloud, but that is a manual process for the users to implement.

During the last recomopose, users were dismayed they lost their Firefox settings, especially their bookmarks. The auto export of bookmarks is useless , as it writes its files to appdata\roaming and I can find no setting to redirect that. Being impossible to redirect, appdata\Roaming is destroyed every time a virtual desktop is recomposed.

IT is currently exploring removing Firefox from the next recompose image, because we cannot find a way to support it internally. I am wondering if anyone else out there has Firefox in a VDI environment, and what do you do to preserve the profiles during remaking the desktops?

I work at a school and I'd like to know if there are any ways to prevent browser history deletion within Firefox (potentially with Windows Group Policies). Within Chrome there is this fantastic flag/policy "AllowDeletingBrowserHistory" which works perfectly to prevent users from removing their history within the app. I know the policy settings are new for Firefox and they've added a lot of them, but am I missing one that would have a similar functionality? As we are a K-12 school we like to have our browsers locked down as possible and we love this feature with Chrome and we were wondering what we could do with Firefox. We had a way to do this before but it has not been supported for 2-3 years so we don't know how to proceed.

Okay, the problem we experience is almost exactly like the one that's described here: https://support.mozilla.org/en-US/questions/1264949 , but in our case this happens on a Remote Desktop environment and we know why it happens.

So we have this Remote Desktop Environment for a client of ours. When a user signs in to their online workplace, he or she will be signed on to one of the RD servers. Their profiles are stored on a user profile disk (UPD), which connects to their session upon logon. (I think the same issue will happen when roaming profiles or folder redirection is used.) We use Ninite Pro to install 3rd party updates on all of our servers. Ninite will only update Firefox when it's not in use so I think this is the reason why the Firefox versions become out of sync between the servers. When a user uses Firefox on server 1, which has version 69.0.2 installed and gets signed on to the other server the next time they log on, where version 69.0.1 is installed, they receive the warning: "You've launched an older version of Firefox". The only option there is to exit or create a new profile. Since they use certificates for their medcial administration software, this is a huge inconvenience.

Using firefox.exe -allow-downgrade solves the problem for now, but I understand that's not the best solution.

I will disable the Ninite updates for now and update Firefox to the latest version when everybody signed off. I've also explained the situation to Ninite support and suggested an option to 'bind' servers to update when all servers are ready to update. I would like suggest Mozilla to loosen the version check a little. I mean, there can't be a huge difference between 0.0.1 right?

Thanks for reading!

I'm looking to block it via a corporate firewall, but I cannot find any list of IP networks or DNS names to block as the school uses BYOD for students (K-8). I do see that it uses cloudflare for their DNS servers but blocking cloudflare is not an option (NOTE: I found this out by using dnsleaktest.com while using firefox in Private Network mode). Thanks in advance for your help.

I am End user computing member and I need to uninstall Mozila Firefox from almost 2000 machine ans these machines have different versions of firefox. Request you to provide generic uninstall string which will uninstall firefox. I am using deployment tool Ivanti to deploy the script/app/software.

Thanks Shreyash

Note : Below version are present: 8 12 13 15 19 26 29 31 32 35 39 41 42 43 44 45 46 47 48 49 50 51 52 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 16.0.2 17.0.1 25.0.1 27.0.1 29.0.1 32.0.1 32.0.3 34.0.5 35.0.1 38.0.1 38.0.5 38.0.6 40.0.2 40.0.3 41.0.2 43.0.1 43.0.2 43.0.4 44.0.1 45.0.1 45.0.2 46.0.1 47.0.1 47.0.2 48.0.1 48.0.2 49.0.1 49.0.2 50.0.1 50.1.0 51.0.1 52.0.1 52.0.1 52.0.2 52.0.2 52.2.1 52.6.0 52.7.3 52.8.1 53.0.2 53.0.3 53.0.3 54.0.1 54.0.1 55.0.1 55.0.2 55.0.3 56.0.1 56.0.2 56.0.2 57.0.1 57.0.2 57.0.2 57.0.3 57.0.4 58.0.1 58.0.2 59.0.1 59.0.2 59.0.3 60.0.1 60.0.2 60.3.0 61.0.1 61.0.2 62.0.2 62.0.3 63.0.1 63.0.3 64.0.2 65.0.1 65.0.2 66.0.1 66.0.2 66.0.3 66.0.4 66.0.5 67.0.1 67.0.2 67.0.3 67.0.4 68.0.1 68.0.2

I work for a large corporation that requires a corporate support for FireFox. Currently, we are experiencing some issues with the browser crashes. We use FireFox as a front-end for MS Dynamics DB with multiple web applications. We need someone to analyze FireFox dumps and establish the root cause of these crushes. Please contact me ASAP for more details.

I have tried "C:\Program Files\Mozilla Firefox\firefox.exe" -silent "C:\1\XYZ.xpi". It comes up with a permission message that I do not want the user to see. I want to remotely silent push the extension whether they logged in or not. Thanks,

Hi, i try to use the firefox Policys to konfigure startpages etc for WIN 10 VMs. When the User logs in there is no FF Profile in app Data. Starting ff for the first time, the startpages dont appear like i configured, but a Profile in appdata will be generated. Starting FF for the second time the Pages appear, like configured. So the ff GP only works with a Profile in appdata! But with VMs the ff Profile will be deleted after logout. Can i automatically generate a ff Profile while login in windows, without starting ff two times? How can i do this? This would solve my Problem ? Any other workarounds are welcome!

regards!

Jontef

Using Firefox ESR along with GPO Templates. Since the issue with with a Firefox update we have not been able to force enable addons. Adding them in the correct group policy template will place them in the addons menus however it does not automatically enable them anymore.

The key is successfully created in this location HKCU\Software\Policies\Mozilla\Firefox\Extensions\Install

And in HKCU\Software\Policies\Mozilla\Firefox\Extensions\Locked

I was only able to make the addon visible by manually creating the registry value in HKLM\SOFTWARE\Mozilla\Firefox\Extensions

Has anyone seen similar behavior or have a possible workaround?

Windows 10 x64 Enterprise Mozilla Firefox 60.7.0 x64

We have upgraded to Firefox version 67 recently and the warning message SEC_ERROR_UNKNOWN_ISSUER was shown on every startup of our web application.

In our environment, we are using the root certificate generated by our enterprise.

Before upgrade, the warning message can be dismissed by applying the following policies in policies.json. But it does not work after upgrade. Anyone can help? Thanks. {

   "policies": {
       "Certificates": {
           "ImportEnterpriseRoots": true
       },
  }
 }

I've been using Firefox on all the public computers in our public library for years. I used to be able to protect the users from being harassed with pop-ups to update firefox (which the user cannot do anyway, because they're a guest user and don't have permission to install programs) by changing settings in about:config. Now that this doesn't work anymore, I am trying to use a policies.json file to prevent the update popup. This works fine if I am logged into Windows as a standard or elevated user, but when I run Firefox as a Guest user, the policies.json file is completely ignored. Is there some other folder where I need to put the file? Is there something else I can try like running Firefox Portable or some other trick? The update pop-up is now a constant annoyance for all the library's users and I'd like to make it go away.

I will like to Disable Browser Password Saving via Group Policy. Is that possible with Firefox version 66.0.3? I used the configuration from this website:

https://support.practiceprotectonline.com/knowledge-base/disable-browser-password-saving-via-group-policy/

I am preparing a new version to be deployed and I am passing from ver 52.4.1 esr to 60.6.1 esr and things look different for deploying the software.

How to make all users have the same settings including cert files and preferences in the new version?

I am using Windows 10 - 1809. I have Firefox 65.01 installed on a test PC. I have loaded the GPO templates from version 1.6 download on the domain controller. I want to enable the template option to remove all but one search engine (Google) from the list of available search engines. I cannot find any documentation/examples of the correct name or syntax to remove the unwanted entries. Entering the displayed name in either the computer or user area does not work (attached image). Can you please provide the correct entries to remove them?