• Solved

GPO Settings

Good Afternoon Im currently configuring OKTA for SSO, part of this setup is to configure a FireFox option, for people that use this particular browser. These are the inst… (read more)

Good Afternoon

Im currently configuring OKTA for SSO, part of this setup is to configure a FireFox option, for people that use this particular browser.

These are the instructions provided by OKTA:- Open the Firefox web browser, enter about:config in the Address bar. If the Proceed with Caution message appears, click Accept the Risk and Continue. In the Search preference name field, enter network.negotiate-auth.trusted-uris. Click Edit, enter <org>.kerberos.okta.com, and click Save.

This works fine when i manually edit the config for myself to test, but i need to deploy this across our org, i downloaded the Mozilla GPOS but i cannot find anywhere i can set this particular setting.

Is it possible to set this particular setting in the GPOs? so i can deploy across our org.


Thanks.

Asked by richard.rostron 3 days ago

Answered by jscher2000 3 days ago

  • Solved

Kiosk Usage

I am currently creating new Images for our touch kiosks and would like to use Firefox. Sadly I am confronted with some problems / strange behaviour. I want to set up a wi… (read more)

I am currently creating new Images for our touch kiosks and would like to use Firefox.

Sadly I am confronted with some problems / strange behaviour.

I want to set up a windows Kiosk with Firefox as shell application. So far this worked but the Firefox window opens around 5 times at every restart, also it does not open again if it is closed. The reopening is a feature of the eshell which reacts to the exit code of the Application. Is there anything you know what causes these behaviours? Google chrome does nothing of these things and simply gets restarted if it is closed, as it should.

The second thing is, the built in Kiosk mode is great but our Application at least needs tabs. Is it possible without too much of a hassle to create such a locked down experience? I'd like to do it with a policy or settings file and not to create my own browser out of firefox, maybe there's a way I have overseeen.

I'd really like to do it with firefox as I personally always had a great experience and I trust the team behind it. Thank you for your support beforehand!

Asked by Ale 1 month ago

Answered by Mike Kaply 3 weeks ago

  • Solved

How to find the URL to use for ExtensionSettings?

I am using group policy, extension settings. I want to block all extensions, require 1, and allow a handful. I think I have the JSON figured out but finding the URL to … (read more)

I am using group policy, extension settings. I want to block all extensions, require 1, and allow a handful. I think I have the JSON figured out but finding the URL to use is escaping me.

I can find the site in the Mozilla addons, https://addons.mozilla.org/en-US/firefox/addon, but how do I find the exact filename to use? I see that many end in latest.xpi but I'm unsure what that means or how I should know which is correct. I know how to find it in Chrome but I'm now trying for FireFox. I've had a hard time and it's not as clear as the direct GPO implementation as Chrome uses.

My next thing to figure out is when extension settings are mentioned in multiple levels of the GPO hierarchy. That's a separate question and not needed for an answer to this question. I only mention it as someone who knows one part is likely to know the other as well.

Thanks, -g

Asked by GrumpyGreg 2 weeks ago

Answered by cor-el 2 weeks ago

  • Solved

Attempting ExtensionSettings via Extension Managmement GPO - Error 'No text was entered...'

Hi, I'm trying to create a Windows GPO to control Addons/Extensions in our FireFox installations. From the doc I've read, the place is Policies|Administrative Templates|M… (read more)

Hi, I'm trying to create a Windows GPO to control Addons/Extensions in our FireFox installations.

From the doc I've read, the place is Policies|Administrative Templates|Mozilla|Firefox|Extensions Policy is "Extension Management"

I set it to enabled and include this text: {

 "*": {
   "blocked_install_message": "My Custom Test Message",
   "installation_mode": "blocked"
 }

}

When I hit apply, I get this error message: "No text was entered for this field. Make sure that you enter text."

If I put nothing (but still enabled) or "A" or A, then it accepts that. It's when I plop in the JSON that it fails.

What am I doing wrong?

I have ESR 91.0.1 and policy 3.0 installed. I do not have Firefox installed on the machine doing the GPO work, that's currently only on the test machine. I do have the policy definitions installed.

-g

Asked by GrumpyGreg 2 weeks ago

Answered by Mike Kaply 1 week ago

  • Solved

Silently Import Bookmarks from IE to Firefox

I am in an enterprise environment with over 500 machines, and we are looking for a way to import users Bookmarks from IE to Firefox silently and behind the scenes without… (read more)

I am in an enterprise environment with over 500 machines, and we are looking for a way to import users Bookmarks from IE to Firefox silently and behind the scenes without requiring user interaction.

Due to security restrictions 3rd party software is not a possibility. Most users have already been using Firefox. We do not want to delete their existing bookmarks in Firefox

Asked by Reod_Dai97 3 months ago

Answered by Mike Kaply 2 months ago

  • Solved

Certificates included with browser

I am trying to use a policies.json file to include a certificate for my own website using a certificate stored online, but not locally. Would it be possible to do so usi… (read more)

I am trying to use a policies.json file to include a certificate for my own website using a certificate stored online, but not locally. Would it be possible to do so using code similar to below: {

   "policies": {
   "Certificates": {
       "ImportEnterpriseRoots": true,
       "Install" [
           "cert_name",
           "http://www.xxxxxxxx.com/xxxxx/xxxxx.der"
                  ]
            }
       }
   }

Any help would be greatly appreciated.

Asked by gtevi 2 months ago

Answered by Mike Kaply 2 months ago

  • Solved

settings problem with enterprise install

Background information: since version 87 of firefox, I have been having problems viewing pdfs online. All the suggestions from people provided on the post, placed in ano… (read more)

Background information: since version 87 of firefox, I have been having problems viewing pdfs online. All the suggestions from people provided on the post, placed in another part of thecommunity, didn't work for me. I decided to remove my installation of Firefox and install a new uptodate version. I decided on this after I had installed Brave as an alternate browser and changed it to the default browser in my frustration. Now: I was unaware that I had downloaded the enterprise version. When I got to the settings, next to "make Firefox your default browser" there was a statement in red saying "your browser is being managed by your organization". Clicking the link brings up a policy screen which says "don't check default browser" with a value of true and no way - as far as i can see of changing the value. And it is also unchangeable in Brave. I hope someone has an answer for me. The one good thing about the current situation is that I can read pdfs in the browser. Is there an emoji for headache?

Asked by bdjim 2 months ago

Answered by jscher2000 2 months ago

  • Solved

Updates are disabled but still popup "Firefox can't update.." at every start

Hello @all, we deployed Firefox ESR in a corporate environment, managing settings via GPOs. When users open Firefox a message box / banner appears: "Firefox can't update … (read more)

Hello @all,

we deployed Firefox ESR in a corporate environment, managing settings via GPOs. When users open Firefox a message box / banner appears: "Firefox can't update to the latest version"

This is what we have: Firefox 78.6.1 ESR No Background Update Service Updates Disabled via GPO Checking FF Options: "Updates disabled by your system administrator" Checking FF "about:policies#active" => Updates Disabled

BUT STILL: Open Firefox - message box appears "Firefox can't update to the latest version".

I do know that we are not on the latest version but first I need to get rid of this message for each user. I cannot thiink of why this is happening at all because updates are disabled and Firefox confirms this, too.

What am I missing here?

Asked by stefan.johnen 2 months ago

Answered by stefan.johnen 2 months ago

  • Solved

Mozilla Maintenance Service

Has anything changed in Mozilla Maintenance Service in regards to security required for the logged on user in order for Mozilla updates to be installed? We do not allow o… (read more)

Has anything changed in Mozilla Maintenance Service in regards to security required for the logged on user in order for Mozilla updates to be installed? We do not allow our users local admin rights, but instead they have an application where they can request admin rights when needed, and with the release of Firefox 89, we are seeing peoples Mozilla products disappear. In the logs it looks like an update is being made, and once the old version has been deleted, the new version fails to install.

Asked by Steven 3 months ago

Answered by Steven 3 months ago

  • Solved
  • Archived

deploy the about: config configuration on the company's computers

Hello, Please excuse my poor level in English. In my company I deploy FirefoxESR-68.12.0-fr.msi by GPO. I would like to know how to deploy a config file to modify its con… (read more)

Hello, Please excuse my poor level in English. In my company I deploy FirefoxESR-68.12.0-fr.msi by GPO. I would like to know how to deploy a config file to modify its configuration. More precisely the settings network negotiate-auth delegation-uris and network automatic-ntlm-auth trusted-uris

Thanks for your help

Asked by pierre.terme 6 months ago

Answered by cor-el 6 months ago

  • Solved

Unable to make Firefox the default browser via GPO on Windows 10

I'm using these instructions for making the FireFox browser the default browser via GPO: https://support.mozilla.org/en-US/kb/make-firefox-enterprise-default-browser#fire… (read more)

I'm using these instructions for making the FireFox browser the default browser via GPO: https://support.mozilla.org/en-US/kb/make-firefox-enterprise-default-browser#firefox-enterprise:win10: and I'm unable to do so successfully.

When I perform the steps what happens is that no browser becomes the default. Trying to open an html document causes Windows 10 to ask the user to pick which browser they would like to be the default web browser. I can choose Firefox at that point but if I reboot or do a gpupdate /force, the default app for browser goes back to not having one selected.

I can use the same steps to a file at the same network location to make Google Chrome the default browser without issue, but when I switch back to trying to make Firefox the default the same problem returns. I've tried the rapid release version and the ESR version. I have also uninstalled and reinstalled Firefox.

I feel like the issue is related to the default associations xml file from the instructions which states ProgId="FirefoxHTML . If you look in the windows registry, "FirefoxHTML" is not listed as an option for either of these keys: Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.html\OpenWithProgIds Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.htm\OpenWithProgIds

If you go here: Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\Firefox-308046B0AF4A39CB\Capabilities\URLAssociations

Instead of "FirefoxHTML" it lists "FirefoxURL-308046B0AF4A39CB" for the http and https url associations.

Does anyone have a solution to this problem or another way to make Firefox the default browser for multiple machines remotely?

Asked by adidasnmotion 4 months ago

Answered by Mike Kaply 4 months ago

  • Solved

Is there a way to disable "Open File" and "Save Page As" operation from the menu?

Our company is using Firefox. We recently have found that you can launch Command Prompt or PowerShell by typing "cmd" or "powershell" into address bar of "Open File" or "… (read more)

Our company is using Firefox. We recently have found that you can launch Command Prompt or PowerShell by typing "cmd" or "powershell" into address bar of "Open File" or "Save Page As" menu.

Since we can not accept this behavior for security reasons, we are considering disabling "Open File" and "Save Page As" feature themselves. Is there a way to realize this?

We sought options to disable these features, but could not find any so far. Or If there is alternative solution for this, that would be highly appreciated if you share your knowledge.

moved from Firefox -> Firefox for Enterprise

Asked by Flagab 5 months ago

Answered by Mike Kaply 5 months ago

  • Solved

v2.9 Policy Not allowing Extensions that are allowed to install.

I'm trying to force the install of the Okta extension for users in my environment. I just updated to the latest admx templates and I'm not allowed to install any extensio… (read more)

I'm trying to force the install of the Okta extension for users in my environment. I just updated to the latest admx templates and I'm not allowed to install any extensions.

My GPO JSON is as follows:

{

 "*": {
   "blocked_install_message": "Custom error message.",
   "install_sources": ["about:addons","https://addons.mozilla.org/"],
   "installation_mode": "blocked",
   "allowed_types": ["extension"]
 },
 "uBlock0@raymondhill.net": {
   "installation_mode": "force_installed",
   "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
 },
 "Okta": {
   "installation_mode": "force_installed",
   "install_url": "https://addons.mozilla.org/firefox/downloads/latest/okta-browser-plugin/latest.xpi"
 },
 "https-everywhere@eff.org": {
   "installation_mode": "allowed"
 }

}

Yes I'm getting the attached image on this when i'm trying to install it manually because it's not auto installing. I'm also getting the same with the allowed uBlock extension.

Asked by chris.kasprzak 5 months ago

Answered by Mike Kaply 5 months ago

  • Solved
  • Archived

In Windows 10 20h2 version the config setting for firefox is not working

In Windows 10 20h2 version the config setting for firefox is not working while in Windows 7 and lower versions of Windows 10 it is working fine. The settings in js file a… (read more)

In Windows 10 20h2 version the config setting for firefox is not working while in Windows 7 and lower versions of Windows 10 it is working fine. The settings in js file and cfg file is correct but still it is not working in Windows 10 20h2 version. It is observed that everytime the firefox is launched it is generating new ffm.js and ffm.cfg file. If we try to edit this ffm.js file still it is not taking the updated values. it again regenerated the file. Can you please help in resolving this issue?

Asked by rasshuniverse 6 months ago

Answered by Mike Kaply 6 months ago

  • Solved
  • Archived

Enforcing blank page (against group policy)

Hi, I work for a large corporation. My employer enforces an annoying policy that when loading Firefox it defaults to the corporate intranet. This is really slow and hampe… (read more)

Hi, I work for a large corporation. My employer enforces an annoying policy that when loading Firefox it defaults to the corporate intranet. This is really slow and hampers my productivity big time as I very often (re)load Firefox. Especially when in video sharing calls with customers this is extremely annoying as I'm working 99.9 % from home on a lousy VPN bandwidth.

Can I enforce somehow that Firefox loads a blank page by default, essentially overriding the group policy ? e.g. by using the command line when clicking on the Firefox icon in Windows 10 ?

      or via a batch file or some other way which can improve this situation ?

The installed version of FF is 78.8.0esr (64-bits), should be latest.

Your support is most welcome ! Cordially Yours, Jean.

Asked by jean_R 6 months ago

Answered by Mike Kaply 6 months ago

  • Solved
  • Archived

Firefox and Citrix

As part of a job we have been asked to install Firefox 78.4 ESR in to citrix for our published desktops. We originally had v68 ESR which works lovely however the security… (read more)

As part of a job we have been asked to install Firefox 78.4 ESR in to citrix for our published desktops. We originally had v68 ESR which works lovely however the security team have asked us to upgrade to v78. We did this however when we opened up a published desktop and ran firefox, the app opened up but nothing happened. We get no page loading, nothing on the screen apart from just firefox. So here are my questions What is the minimum version and requirements to run firefox v68 and v78? IE citrix versions, Server Versions etc Is there a document that lists all the changes since v68 to v78?

Is there any special install requirements when putting firefox in to a citrix based environment?

Thanks in advance.

Asked by clubsceneuk2 7 months ago

Answered by Mike Kaply 7 months ago