Firefox for Enterprise Support Forum

Hello, I have a series of laptops that I need to block access to all URLs and only allow access to one. These laptops are not joined to an AD domain so I downloaded the ADMX templates and copied them to c:\windows\policydefinitions. I ran gpedit.msc and added <all_urls> to the Blocked Websites policy and then added the specific URL to the Exceptions to Blocked Websites policy. However I am unable to access the allowed URL as Firefox is blocking it, despite having the URL defined in the exceptions policy.

I have added various other URLs to the exceptions policy like https://www.msn.com, https://www.yahoo.com, and https://www.mozilla.org, and all are blocked. I have tried different match patterns in the blocked policy and none blocked any URL, which I didn't expect them to anyway. I tried these patterns:

*://*.*.*
https://*.*.*
http://*.*.*
*

Also in my testing I added https://www.yahoo.com to the block policy, did not enable the exceptions policy and found Firefox did not block that site, which makes zero sense. Am I missing something? I was able to do something similar to this in Chrome with its ADMX templates copied locally to a non-domain joined PC, and it worked flawlessly.

Suppose I have a "policies.json" file in the "distribution" subdirectory of my Firefox installation.

And suppose "policies.json" file contains this:

{

 "policies": {
     "WebsiteFilter": {
         "Block": [
           "youtube.com",
           "www.youtube.com",
           "http://www.youtube.com",
           "https://www.youtube.com",
         ]
     }
 }

}

Now if I type "youtube.com" in the address bar, it shows "Your organisation has blocked access to this page or web site." It means firefox blocks "youtube.com" correctly. Meanwhile the url in the address bar is "https://www.youtube.com/."

But if I remove "https://www." from "https://www.youtube.com/" in the address bar (Not retype), I can actually visit "youtube.com." It means somehow the webfilter is not working properly.

This issue exists in ubuntu and macos with version 92.0(64-bit).

Does anyone have the same problem? Any help would be appreciated.

We have Firefox ESR deployed in our Enterprise. Our core financial banking system runs on Firefox. Our Intranet page has special javascript code to take advantage of IE's ActiveX so if one were to launch IE, the default page (our intranet) has an icon to our core banking system and if clicked the script uses ActiveX and runs this code: ar oShell = new ActiveXObject("Shell.Application"); var commandtoRun = "C:\\Program Files\\Mozilla Firefox\\firefox.exe" ; oShell.ShellExecute(commandtoRun,"https:/path-to-core-system-web-ui","","open","1"); }

So when they click on the icon which is basically an img with the style of cursor: pointer; it does an onclick launch to that code which launches firefox to the web command. If you open our Intranet page in Firefox or Chrome then ActiveX does not run so it just launches in a new tab the link to our core system.

This week (1/19) we are going live with a new loan origination system. The LoS system vendor claims they want us to use Chrome for their system. Well a few months ago we changed the default browser to Firefox with GPO's and now the issue is our Intranet page opens in Firefox (which works great) as any other, but how can we craft our link to open the Loan Origination System in Chrome? I call B.S. that is only works in Chrome. It seems to work in Firefox to me, but that's all they want to support so if we need help they won't help us unless we are using it in Chrome. I know I'm not happy about it either. I'm just happy to be rid of IE finally. I like Firefox (and Chrome) but if I can do any tricks to craft a link, maybe a javascript function to launch something like commandtoRun = "C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe", along with the argument with the LoS web URL, that would be great.

Thanks!

I am using the group policy that Mozilla created and I can block individual websites, but I have been tasked to block all but 1 website. The server is a windows server 2012 and it will be used by multiple people at the same time with separate autonomous desktops. Also known as a terminal server or a remote desktop services host. Because of the fabric of our environment I have to use group policy to perform this. Can I do this, and how can I accomplish this through Firefox group policy? The attached picture is a copy of my attempt of blocking all of the sites.