Firefox for Enterprise Support Forum

My 45 users do not have admin access on there computers and I need to enable Use a background service to install updates across all computers. We use Microsoft Intune for Endpoint management but I dont see the option to enable this using the ADMX options. Does anyone have a solutions for this?

Thanks in advance, David

What is the specific URL that is required to access auto-updates from the client? As an enterprise, we have locked down devices that have limited Internet connectivity. Our security area will not open the entire download area, so we are looking for the specific URL or web address that is needed so we can still auto-update clients. We want to move more people to Firefox, but need to get this working first.

Some years ago I pointed my Firefox cache drive to H:\Firefox. When I updated to 68esr I set the value in the GPO to the same folder. about:config shows the preference as locked.

Recently I decided to move the cache folder to the same drive as the profile folder. So I edited the group policy to point to F:\users\Tanya\Firefox. Updated the group policy and opened firefox. It continued to use H:\Firefox.

So set the policy to not configured and about:config showed h:\firefox. So as a test I set the group policy to iamcountessconsuelabananahammock (Not even a valid path name). No complaints, but firefox continued to write to h:\firefox.

So it seems the only purpose of the group policy is to lock the value, and the content of the GPO is not relevant at all. Is this by design

We have three 2012 R2 terminal servers with about 75 users. Disk space for local windows profiles has recently gotten short and while investigating I found nearly all users have a default Firefox profile and then seven default-release-1 (1-7). Each of these files is from 165mb to 1GB in size so I estimate each user has 3GB of space used by old profiles. This times 75 user that is 225GB of wasted space on each terminal server!

Why is the one 64bit Firefox install creating some many profiles?

Also, is there any way to limit cache file storage. Personally, I've never noticed any performance difference in a 25meg vs 250 meg cache allocation and the impact on space with many users is considerable.

Thanks

Hello,

We have some trouble with Firefox in Windows Roaming Profiles: "The bookmarks and history system will not be functional". The sqlite-shm and sqlite-wal are shown but they are fully inaccessible from CSC (client offline cache). Why does Firefox need to store this temp files in %appdata%? That's really bad design! sqlite-shm and sqlite-wal should be located in %localappdata%.

My solution is to just copy the profile folder, ignoring the inaccessible files. Then I just need to rename it to the original folder name and ff starts just fine. Does anyone know anything more to this problem? Thank you

Why does FF reset the homepage to firefox home with the latest update? We deploy our Windows based systems to hundreds of customers and count on FF to bring them to our company homepage to check for updates, documentation, etc. How can I make sure my customers systems always start on my homepage? P.S. We have hundreds of customers so going to each system is not really feasible.

I am attempting to setup Mozilla for enterprise version 81.0 (x64) to deploy through Intune and update the previous versions on our client laptops. I set up Intune with the following detection rule(attached). The idea is that Intune looks for this registry key and if its not at version 81.0 it pushes out the updated MSI file. What happens so far is that when I have a older version installed such as 74.0. Intune DOESN'T push out the update. However when I completely remove Firefox within minutes Intune detects that its not installed and pushes out the current version. Therefore it would appear that the detection rule works but not as intended. A attempted to adjust the value on the detection rule with no success. The original detection rule was to detect a file inside program files\mozilla firefox. However that rule would not detect the current version installed.

Any ideas would be helpful.

I would like to updates Firefox browser in my enterprise but we have to allow the update url before. I cannot find any official firefox update urls. so, what I need to know are What URLs are used for Firefox Browser updates? and Where can I get update about the URLs?

Hi there,

I'm attempting to configure group policy in my organisation to only allow the install of selected Firefox plugins present in our whitelist. I am doing this via the ExtensionSettings policy within the Firefox templates v1.14

I have successfully made the default behavior to block plugins, using this string:

   "*": {
   "blocked_install_message": "Extension is not whitelisted. Please contact IT Support",
   "install_sources": ["https://addons.mozilla.org/"],
   "installation_mode": "blocked"
 }

I'm even able to successfully whitelist plugins on the mozilla addon page, example below:

   "support@lastpass.com": {
   "installation_mode": "allowed",
   "install_url": "https://addons.mozilla.org/en-US/firefox/addon/lastpass-password-manager/"
 }

My problem is I can't seem to whitelist any plugins that are installed from any source other than Mozilla. For example, Dashlane is only available via their website. I tried the following, but it still says blocked.

   "jetpack-extension@dashlane.com": {
   "installation_mode": "allowed",
   "install_url": "https://www.dashlane.com/en/"
 }

I have run into the same issue with another plugin, even when using the full URL of the .xpi file. I've played around with this for a good few hours, but nothing seems to work. Any advice?

Thanks in advance.

Hello,

I am looking at implementing the Firefix ADMX using Microsoft Endpoint Manager, however I cannot seem to get over the first hurdle. I am receive the following error -2016281112 (Remediation failed) and I am only trying to ingest the ADMX file.

Name: Firefox ADMX Ingestion OMA-URI: ./Device/Vendor/MSFT/Policy/ConfigOperations/ADMXInstall/Firefox/Policy/FirefoxAdmx Data type: String Value: <policyDefinitions revision="1.14" schemaVersion="1.0">

 <policyNamespaces>
   <target prefix="firefox" namespace="Mozilla.Policies.Firefox"/>
   <using prefix="Mozilla" namespace="Mozilla.Policies"/>
 </policyNamespaces>
 <resources minRequiredRevision="1.14"/>

Our security division has asked that we disable and lock Webrtc for all deployments of firefox. How do we configure/implement this when we automatically deploy firefox? We can do it either via Group Policy or a file on the client computer.

Hello Guys,

I hope that you can help me. I work for a company with 900+ Windows Clients and several Terminal Server users. At the moment I deployed Firefox ESR 68.4.2 32-Bit. Yes 32-Bit, my mistake. Anyway, I want to update to version ESR 68.5.0. At the same time, I want to jump onto the 64-Bit version. This article mentioned no problem at all; install 64-Bit and afterwards uninstall the 32-Bit version of Firefox: https://support.mozilla.org/en-US/kb/switch-32-bit-64-bit

I did this step for step but I can't see the bookmarks on the 64-Bit version. If I uninstall and reinstall the 32-Bit Version the bookmarks are back. I need help, please. The users are going to kill me, if I "delete" their bookmarks.

Greetings and thank you in advance!

Hi, everyone! I have a quick question - is there a way to remove the "Getting started" bookmark from the Toolbar through group policy? So far I've notice how I can add bookmarks, but not how to delete them. I use the latest browser and .admx files version.

We have it on many computers in our environment and manual uninstalls are not feasible. I can install/uninstall Firefox itself silently, but the maintenance service does not use the Windows MSI installer so command line switches like "/s" and "-ms" have no effect.

The ProductCode (ProductID) after Firefox Setup 68.5.0esr.msi is installed does not match to the ProductCode (ProductID) of the Firefox Setup 68.5.0esr.msi. We use SCCM to create the application deployment for Firefox ESR x64 and to install all the endpoints. When creating the deployment, SCCM automatically extracts the ProductCode, and uses the same to detect the presence of the application - if it's not present, it installs. The main issue is that when SCCM checks again the presence after it's installed, the deployment fails because the ProductCode after it's installed is different than what came with the MSI installer. I noticed that this is the case as well for Firefox Setup 68.4.0x esr.msi whereas in the past this was not the case.

See the attached file to see the screenshots.

I am trying to install Firefox ESR 68.2.0 exe version but I keep getting this error message. When I click ok the installation will resume. It's for an enterprise environment so I want my installation to be silent. Can anyone help me with this?

We are currently trialling Firefox in our business, we need to redirect the users profile to have users bookmarks move with them when they enter meeting rooms. Currently we are using Folder Redirection with offline file syncing enabled to accomplish this. This is causing users to receive the error telling them to close Firefox as it is already running when they open Firefox on a second PC at the same time. I understand why this is happening with the lock file being created in the users roaming profile data, I am looking to find a solution that will allow users to have their data roam with them and be able to open multiple sessions on different PCs simultaneously.

What methods are you using to provide this level of functionality to users in your business?

We have Firefox in an enterprise environment. We have Firefox configured to read from the Root Store in IE. There is one internal site that apparently Firefox cannot, or does not, receive SSL certificate information. When trying to load the site, we receive a Secure Connection Failed error message. There is no option to manually enter an exception. When clicking the information icon next to the URL, there is no certificate information displayed. Internet Explorer is able to open the website without issue. There is no error message anywhere. Is there anywhere I can look to see what is going on? Any suggestions are greatly appreciated.

In my searching, almost everthying I've found related to managing Firefox is from a manual user perspective. Most of our users are not very computer literate to begin with. They are of sort who refer to the browser as "Google" or "MSN", whichever default search engine they have grown accustomed to, learn just enough to get their job done. That leaves it to IT to preserve their settings.

Firefox is writing a majority the user profile information to appdata\roaming. Windows is preventing appdata\roaming from being redirected. This means whenever IT needs to rebuild the desktops, all the users that prefer Firefox as a browser lose their setup. As of yet, we have no specific policy for users creating a Mozilla account to backup their profile to the cloud, but that is a manual process for the users to implement.

During the last recomopose, users were dismayed they lost their Firefox settings, especially their bookmarks. The auto export of bookmarks is useless , as it writes its files to appdata\roaming and I can find no setting to redirect that. Being impossible to redirect, appdata\Roaming is destroyed every time a virtual desktop is recomposed.

IT is currently exploring removing Firefox from the next recompose image, because we cannot find a way to support it internally. I am wondering if anyone else out there has Firefox in a VDI environment, and what do you do to preserve the profiles during remaking the desktops?

We are planning to deploy the Firefox enterprise to our environment (Windows). We found that the auto updates only works when we go to Options (about:preferences). What we want to achieve is we want the check for update happen in background. And if possible it should install silently background. Then prompt for new update notification for user to relaunch the browser in order to get latest version.

A few questions we would like to ask and understand. - How did the automatic update works? - How frequent does the check for updates happen? - Is there any group policy that we could configure for the interval check or other related to auto update? - How could we achieve this goal? with mozilla config file or group policy?

Thank you.