ADMX Help

Hello, I am reaching out to gain information on ADMX GPO policies. We are retiring Policy Pak which used to add all the policies and secure Firefox for Enterprise. Wha… (read more)

Hello,

I am reaching out to gain information on ADMX GPO policies. We are retiring Policy Pak which used to add all the policies and secure Firefox for Enterprise. What we noticed is that Policy Pak used the app set to apply these policies and we are noticing that native GPO's for the most part to match the Policy Pak policies is not as accurate for GPO's My ask here is there any Most Viable Product suggestions to apply Native GPO's for securing Firefox.

Asked by chris_weiderhold 4 months ago

Last reply by Mike Kaply 3 months ago

Firefox ESR/Duo: Not reporting minor version in user agent

We use ESR due to its stability and long term security updates, and we use Duo as our SSO/IDP. We have Duo set to deny login when the browser is more than 6 mo out of da… (read more)

We use ESR due to its stability and long term security updates, and we use Duo as our SSO/IDP.

We have Duo set to deny login when the browser is more than 6 mo out of date, but due to the way FF reports only the main version number via the user agent Duo is unable to determine that FF ESR is actually up to date and thinks that it's too old and my users are being denied login or getting an erroneous message about needing to update their browser.

Is there a way to set FF to report it's whole version to Duo? We would prefer not to have to "outlaw" FF in our prod environment if at all possible.

Asked by Jarrod Coombes 3 months ago

Last reply by Mike Kaply 3 months ago

Auto updating in stages

Hi, I am in a company where there is 100 and more devices with firefox on it. Right now we are facing a problem where some of it are using version way back into the days … (read more)

Hi, I am in a company where there is 100 and more devices with firefox on it. Right now we are facing a problem where some of it are using version way back into the days such as version 100 115 117 and such. We enabled auto updating but it only updates to version 127 whereas the latest version is 132. We are required to open firefox again for multiple time b4 it gets the latest version. Is there any way to jump those stages and straight updates to the latest version?

Asked by LucasLau 4 weeks ago

Last reply by Max Christian Pohle 3 weeks ago

Conditional access policy

Login to o365 email does not work on Firefox browsers after enabling the Conditional Access policy based on compatible devices Firefox does not send device details, resu… (read more)

Login to o365 email does not work on Firefox browsers after enabling the Conditional Access policy based on compatible devices

Firefox does not send device details, resulting in a device incompatibility message

Does Firefox support this?

There is an example of missing device ID in the attachment

Asked by spie.michal 1 week ago

Last reply by Mike Kaply 1 week ago

Deploying Firefox Developer Edition with Intune

I'm having trouble find clear directions online on how to import Firefox Developer Edition into my Intune App Catalog to deploy it to users. I was able to convert the .ex… (read more)

I'm having trouble find clear directions online on how to import Firefox Developer Edition into my Intune App Catalog to deploy it to users. I was able to convert the .exe installer into a .intunewin file but Intune won't import it for some reason. All the other directions i keep finding just direct me to creating a custom configuration policy around FireFox but it looks like it is just the basic Firefox for Enterprise.

I'm hoping to either get directed to actual directions for this or even a .msi installer for the developer edition. Does that exist?

Asked by sstroup970 5 months ago

Last reply by James 5 months ago

An Extension was added via GPO, and we would like to enable the two settings / make the extension removable

Hi supporting teams / volunteers, A Microsoft Purview extension was added via GPO previously, and we would like to enable the two settings (indicated with red box), may … (read more)

Hi supporting teams / volunteers,

A Microsoft Purview extension was added via GPO previously, and we would like to enable the two settings (indicated with red box), may I know if anyone might have clues on that please? Also, would like to also check if we could remove the extension from users' end, since it said "can't be removed". Many thanks.

Best regards, Vincent

Asked by vyau1018 4 months ago

Last reply by Mike Kaply 4 months ago

Kerberos authentication working for Chrome, Edge, Opera, and Brave, but not Firefox

Firefox (129.0.2) displays "401 - Unauthorized: Access is denied due to invalid credentials" (see attached image) I have tried various combinations of setting and not se… (read more)

Firefox (129.0.2) displays "401 - Unauthorized: Access is denied due to invalid credentials" (see attached image)

I have tried various combinations of setting and not setting the following in Firefox:

  • network.negotiate-auth.trusted-uris
  • network.negotiate-auth.delegation-uris
  • network.auth.use-sspi

For the URI settings I have tried both .domainname.domainextension and https://servicename.domainname.domainextension

In Windows 10 Control Panel -> Internet Options, the site is in "Trusted sites" using a domain wildcard, and also "Local intranet" and both "Automatic logon" and "Enable Integrated Windows Authentication" are enabled. I suspect those setting aren't relevant since other browsers are authenticating without error or prompt, but calling this out to show that I've covered that base.

The web service is served by IIS 10.0 on Windows Server 2022 and the authentication provider list only includes Negotiate, but I don't believe this issue has anything to do with IIS or its configuration as, again, other browsers are authenticating without error or prompt.

Anything else to check?

Thank you for any guidance you can offer.

Asked by bryan 3 months ago

Last reply by Mike Kaply 3 months ago

Locking down firefox for primary school

Hi All, I'm using Firefox on 24 PC's in a primary school computer Lab, I have had reports of students installing extensions and plugins that i wish to stop, also i've ha… (read more)

Hi All,

I'm using Firefox on 24 PC's in a primary school computer Lab, I have had reports of students installing extensions and plugins that i wish to stop, also i've had issues with students not signing out of their email and other students gaining access.

Im looking for solutions for the following and was hoping someone could point me in the right direction -

1. Disabling the installations of extensions and plugins. 2. Clearing browsing history/logging out of any accounts. 3. Locking settings so students can't change settings.

Any help would be greatly appreciated. Adam

Asked by adam183 4 months ago

Last reply by James 3 months ago

Firefox needs updating to many machines - how do i do this easily when no internet connection?

I have a number of servers which need firefox updating They do not have internet. There is one machine that does have internet How do i get them to point to that serve… (read more)

I have a number of servers which need firefox updating They do not have internet.

There is one machine that does have internet

How do i get them to point to that server for updates?

FF should have an easy deployment console for rolling out their product.

I saw something about an MAR server however its not clear.

We just have WSUS so cant use that to update like Edge.

Asked by petesinbox 5 months ago

Last reply by Mike Kaply 5 months ago

How to update Firefox ESR 115.14.0 to 128.1.0?

I'm a newbie using Debian and Deb 12 ships with Firefox ESR and I've decided to stick with it instead of the regular release, 'cause it breaks some extensions I have. How… (read more)

I'm a newbie using Debian and Deb 12 ships with Firefox ESR and I've decided to stick with it instead of the regular release, 'cause it breaks some extensions I have. However, I want to upgrade to the latest ESR version, how do I do it? I tried going to (https://www.mozilla.org/en-US/firefox/all/#product-desktop-esr), but the file for linux 64 bit is a .tar.bz2 file, which I have no idea how to compile.

Asked by spandanjit.05 3 months ago

Last reply by cor-el 3 months ago

Log-in with a certificate is not possible

With Firefox 115.14.0esr, 115.2esr and 128.xesr we can`t log in into a company website with a certificate. After the certificate login we end up on the WebSeal again. Htt… (read more)

With Firefox 115.14.0esr, 115.2esr and 128.xesr we can`t log in into a company website with a certificate. After the certificate login we end up on the WebSeal again. Http status 302 for pkmslogin.form and pkmscertpromptstagen is called ~12x repeatedly with 302 error each time and then jump back to the login screen.

Asked by desislava.ivanova 2 months ago

Last reply by Mike Kaply 2 months ago

Require device sign in to fill and manage passwords BUT with GPO?

I am working on deploying Firefox with a GPO and I noticed that a saved password can be easily viewed just by going into the password manager. I found a way to disable th… (read more)

I am working on deploying Firefox with a GPO and I noticed that a saved password can be easily viewed just by going into the password manager. I found a way to disable the password manager all together, but then you can't save passwords. I am look for a way just to Require device sign in to fill and manage passwords as it says so its not just clicking the eyeball to see the password. I saw this article ( https://support.mozilla.org/en-US/kb/firefox-password-authentification-prompt ) which is how I got the description for this and that seems to be exactly what I want, But I cannot find this setting anywhere in the GPO. Anyone know where it is OR perhaps maybe you could add it?

Asked by awebber1 3 months ago

Last reply by cor-el 3 months ago

install command of version 18.05

i want to add win32 app on intune and i need the ( install & uninstall command of my version 18.05 ) below uploaded images more details about my version that I downl… (read more)

i want to add win32 app on intune and i need the ( install & uninstall command of my version 18.05 )

below uploaded images more details about my version that I download it in my device.

Asked by wejdan.bawazeer 4 weeks ago

Last reply by Mike Kaply 3 weeks ago

history folder location path on firefox115.18.Oesr

Hello there, Could some please tell me how to find the path of the history containing folder in firefox115.18.Oesr? I mean something like: /Users/<votre_nom_utilisat… (read more)

Hello there, Could some please tell me how to find the path of the history containing folder in firefox115.18.Oesr? I mean something like: /Users/<votre_nom_utilisateur>/Library/Application Support/Firefox/Profiles/<nom_du_profil>/places.sqlite

thanks in advance Rab

Asked by rab27a 3 days ago

Last reply by Mike Kaply 2 days ago

Firefox ESR Update

We use Firefox ESR in our environment today, Is it possible to have a policy that would display "update required" message to end-users, or have it automatically update wi… (read more)

We use Firefox ESR in our environment today, Is it possible to have a policy that would display "update required" message to end-users, or have it automatically update without users opening the browsers.

Asked by Ayodeji David 2 weeks ago

Last reply by Mike Kaply 2 weeks ago

Upgrading to Firefox ESR 128.2.0 from 115.15.0

Hi, Looking to upgrade our org to ESR 128.2.0 due to compatibility issues - most notably, embedded PDFs not loading due to Promise.withResolvers() not being implemented… (read more)

Hi,

Looking to upgrade our org to ESR 128.2.0 due to compatibility issues - most notably, embedded PDFs not loading due to Promise.withResolvers() not being implemented on versions prior to 121.

Curious to know if there are any issues or concerns with upgrading manually/pushing this version out - would like to ensure we don't cause further issues in attempting to resolve one.

Asked by ngreyling 2 months ago

Last reply by Mike Kaply 2 months ago