Showing questions tagged: Show all questions
  • Locked
  • Archived

Do we have GPO setting for this preference "network.captive-portal-service.enabled" ?

Locking this thread.Please continue here: [/questions/1430409] In my environment, we have Firefox version 117. Users get this pop up "You must log in to this network befo… (read more)

Locking this thread.
Please continue here: [/questions/1430409]
In my environment, we have Firefox version 117. Users get this pop up "You must log in to this network before you can access the Internet" (see snip 1) when they launch firefox. In order to get rid of we can toggle this preference setting to TRUE ""network.captive-portal-service.enabled" in the user's browser, which works fine. But i want to control this setting from GPO. I'm unable to find the GPO for the same in the GPO hive for FF. See snip 2 for 'Preferences' related GPOs.

Asked by pivashis 6 months ago

Last reply by Mike Kaply 6 months ago

  • Solved
  • Archived

Do we have GPO setting for this preference "network.captive-portal-service.enabled" ?

In my environment, we have Firefox version 117. Users get this pop up "You must log in to this network before you can access the Internet" (see snip 1) when they launch f… (read more)

In my environment, we have Firefox version 117. Users get this pop up "You must log in to this network before you can access the Internet" (see snip 1) when they launch firefox. In order to get rid of we can toggle this preference setting to TRUE ""network.captive-portal-service.enabled" in the user's browser, which works fine. But i want to control this setting from GPO. I'm unable to find the GPO for the same in the GPO hive for FF. See snip 2 for 'Preferences' related GPOs.

Asked by pivashis 6 months ago

Answered by Mike Kaply 6 months ago

  • Archived

ESR 115 Windows - background update without user ever logging in or launching FF?

Hello, We want to run Firefox in our environment which is constantly scanned by a security scanner, and deducts points for applications which have a vulnerability that h… (read more)

Hello,

We want to run Firefox in our environment which is constantly scanned by a security scanner, and deducts points for applications which have a vulnerability that has an available patch, but the patch has not been installed. These are on shared Windows terminal servers. Firefox is one of two browsers, Edge being the other one.

If users do not launch firefox at least once, then Firefox never gets updated.

Yes, we have the background update service installed, but it sets itself to manual, and if I try to start it, it simply gives the error "error 1: incorrect function"

How can we configure Firefox 115ESR to be able to run this service automatically, check for updates, and install, without a user on a particular terminal server ever having launched the application once?

Asked by zach.heise 8 months ago

Last reply by Mike Kaply 6 months ago

  • Solved

Extension GPO help

Hello, I am trying to create a deny all & white list only gpo for Firefox extensions. I am using the gpo; Computer Configuration/Policies/Administrative Templates/M… (read more)

Hello, I am trying to create a deny all & white list only gpo for Firefox extensions.

I am using the gpo; Computer Configuration/Policies/Administrative Templates/Mozilla/Firefox/Extensions/Extension Management

I started out simple using a template which worked.

{ "*": { "blocked_install_message": "Your Company Blocked Message", "installation_mode": "blocked" }, "uBlock0@raymondhill.net": { "installation_mode": "allowed" } }

However, when I tried to add in more allowed extensions it now longer worked and was able to install any extension.

{ "*": { "blocked_install_message": "Your Company Blocked Message", "installation_mode": "blocked" }, "uBlock0@raymondhill.net": { "installation_mode": "allowed" }, "querymoid@kaply.com": { "installation_mode": "allowed" } }

Asked by zick.rockco 5 months ago

Answered by zick.rockco 5 months ago

Links sometimes open in new windows instead of new tabs

Software used: Firefox ESR 102.15.1 on RedHat Enterprise Linux 8 with the Xfce4 desktop environment in version 4.16.3. I run two Firefox windows on two different virtual… (read more)

Software used: Firefox ESR 102.15.1 on RedHat Enterprise Linux 8 with the Xfce4 desktop environment in version 4.16.3.

I run two Firefox windows on two different virtual desktops. Most open tabs in each of them are tied to the workflow I use on each desktop, in case this is somehow important.

Problem description: Sometimes, Ctrl+clicking on HTTP or HTTPS links will open the resource in a new window instead of in a new tab. This appears to be random, and does not depend on the link target. It is also not properly reproducible, so the same link may work just fine and open the resource in a new tab as expected on another attempt to Ctrl+click it.

Properties like browser.link.open_newwindow or browser.link.open_newwindow.override.external are unmodified and set at their default values.

I can drag the new window's only tab back into the browser window in which I originally clicked on such a link, but this is becoming tedious. Sometimes I overlook this, resulting in a chaos of multiple open Firefox windows with multiple open tabs in each of them.

The behavior I would expect: When Ctrl+clicking on links, their resources should always open in a new tab, never in a new window, unless it's a link with a protocol that Firefox by itself won't handle and where it will have to rely on another program to open it (e.g. ftp://, ssh:// or mailto:somebody@somedomain.com).

My request: I would like this to be fixed if it's a real bug. If I am somehow responsible myself without knowing why, please just let me know what I might be doing wrong.

If there are some workarounds for this, e.g. some properties I could set in about:config, help with those would be appreciated as well.

Most information I can find about similar problems is pretty old by now and pre-dates Firefox 102.15.1 by many releases and years. All suggestions I could find about what one would need to change in about:config to fix this seem to be the default by now anyway.

Thank you very much!

Asked by michael.lackner1 5 months ago

Last reply by michael.lackner1 4 months ago

  • Solved

HTTPs Only Mode

Hello, I have a problem with setting up HTTPs only Mode in my Organization, I read a lot about that, but I dont see the "dom.security.https_only_mode" switch in GPO, we h… (read more)

Hello, I have a problem with setting up HTTPs only Mode in my Organization, I read a lot about that, but I dont see the "dom.security.https_only_mode" switch in GPO, we have the newest admx for Firefox. We need that to specific container, but still I dont know how to set it up, even via regedit, or preferences. Can someone describe me when can I set it up ? It could be using json file (which exactly file and how?), registry or just gpo. Regards, M.

Asked by marcin.markiewicz 4 months ago

Answered by Mike Kaply 4 months ago

  • Solved

Firefox ESR (Windows) Policy Wildcards - Is it possible?

Good afternoon, We're currently trying to set up a Hardening Guide for Firefox ESR but are struggling with a few policies and setting wildcards. For example, we're tr… (read more)

Good afternoon,

We're currently trying to set up a Hardening Guide for Firefox ESR but are struggling with a few policies and setting wildcards.

For example, we're trying to set an origin in Cookies > Block Settings to something like "*", and we get the error "Ignoring parameter "*" - not a valid origin."

In Chrome / Edge you can set a wildcard like this: [*.]google.com for example - we receive the same error message for this.

Can you do such a thing for Firefox ESR without having to list every site you want to block?

ESR Version: 115.6.0esr (64-bit)

Kind Regards, Ethan Jerrum

Asked by ethan.jerrum 4 months ago

Answered by Mike Kaply 4 months ago

  • Archived

Background update task

Hello everyone, being annoyed of a huge amount of Qualys tickets in my enterprise environment, i have decided to use the ability of firefox to update itself on its own i… (read more)

Hello everyone,

being annoyed of a huge amount of Qualys tickets in my enterprise environment, i have decided to use the ability of firefox to update itself on its own instead of deploying a new version each time.

Requirement: Firefox has to stay up-to-date even on devices where it is not used. That´s what the scheduled background update task and Mozilla Maintenance Service are for, right?

Problem: The background update task will only be created if a logged on user will run firefox at least one time. Since Firefox is used as the secondary browser here, it is installed on all clients, but not even half of the clients/users are running it.

I didn´t find any option to create that task manually. So - at least in my environment - the autoupdate mechanism is useless.

Is there any hope for an autoupdate mechanism which can be run independent of logged on users? Or does anyone have an idea how i could achieve my goal?

Thank you in advance!

Asked by alexander.propp 9 months ago

Last reply by Mike Kaply 4 months ago

  • Solved

Subscriptions for security advisory alerts for Firefox enterprise

I'm a security analyst. I would like to get email notifications on security advisories, alerts and vulnerability information regarding Firefox to stay up to date. Please … (read more)

I'm a security analyst. I would like to get email notifications on security advisories, alerts and vulnerability information regarding Firefox to stay up to date. Please help on how I can get the subscription?

Asked by nandini.vempati 4 months ago

Answered by Mike Kaply 4 months ago

  • Archived

GPO Search Engine: spaces replaced with pluses instead of %20

Good day. I have created a custom Search Engine via a GPO. The search engine is added to Firefox without issue. However, when a user enters in a search with a space,… (read more)

Good day.

I have created a custom Search Engine via a GPO.

The search engine is added to Firefox without issue. However, when a user enters in a search with a space, Firefox replaces the space with a "plus" instead of a %20. The search engine does not know how to interpret a "plus," so the search engine returns 'no results found.' I use the same search string in a Chrome GPO, and it works as Chrome replaces a space with a %20. Is there a way I can tweak the Search engine GPO to use %20 instead of a "plus" for a space?

Thanks.

Peter

Asked by peterc5 9 months ago

Last reply by Mike Kaply 3 months ago

Saving passwords for specific websites GPO

Dear Forum, Maybe this has been already asked but i keep getting the quite opposite when searching. is there a way that i can save passwords, for autofill purposes, for… (read more)

Dear Forum,

Maybe this has been already asked but i keep getting the quite opposite when searching.

is there a way that i can save passwords, for autofill purposes, for specific websites in Firefox using GPO?.

I have 4 computers, that are currently deployed with Firefox and all 4 should be able to login to a specific website with a given username and password. I would like to set the username and password for them stored in the Firefox password manager and let it autofill it for them when going to the given website.

Or should i do this using the created shortcut they received, deployed to their systems using GPO?

Thank you in advanced.

Asked by cbraafhart 3 months ago

Last reply by Mike Kaply 3 months ago

FireFox Extension Error

I have imported the ADMX and tried to add an extension but it does not appear. So I imported the admx and this is working because I have another custom oma-uri that sets … (read more)

I have imported the ADMX and tried to add an extension but it does not appear. So I imported the admx and this is working because I have another custom oma-uri that sets the home pages.

Here is what I have for my custom oma-uri to try and get the 1password extension added to FireFox. It is coming back with an error, Any recommendations? Name: Extensions_Install OMA-URI: ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/Extensions_Install Data Type: String Value: <enabled/> <data id=”Extensions” value=”1\https://addons.mozilla.org/en-US/firefox/addon/1password-x-password-manager”/>

Asked by dj56 3 months ago

Last reply by Mike Kaply 3 months ago

  • Solved

Remove extensions button from toolbar

I need to be able to hide the Extensions button from the toolbar. Is there a way to do that outside of the user.js or prefs.js? Preferably I'd like to do this though the … (read more)

I need to be able to hide the Extensions button from the toolbar. Is there a way to do that outside of the user.js or prefs.js? Preferably I'd like to do this though the policies.json file though I could not find any options for this.

Asked by patrick.hinckley 2 months ago

Answered by Mike Kaply 2 months ago

How to block extension using "blocked_permissions"

How can I apply a policy based on "blocked_permissions". I've read Chrome documentation but I guess Firefox does not support this parameter. Right? If so, is there any wa… (read more)

How can I apply a policy based on "blocked_permissions". I've read Chrome documentation but I guess Firefox does not support this parameter. Right? If so, is there any way to request this feature?

I need a policy like

{

 "policies": {
   "ExtensionSettings": {
     "*": {
       "blocked_permissions": ["tabs"]
     }
   }
 }

}

Asked by LoL User 2 months ago

Profiles on RDS Windows Server 2016 - Need to create a new one almost each time

Hi, We are using Firefox Enterprise on Windows Server 2016 Remote Desktop for approx 100 users. The users need very often to create a new profile when launching FireFo… (read more)

Hi,

We are using Firefox Enterprise on Windows Server 2016 Remote Desktop for approx 100 users.

The users need very often to create a new profile when launching FireFox, and then loose all their bookmarks.

Is there a way to manage the profiles correctly to bypass this problem ?

Thank you for your help ! Have a nice day.

Asked by esteban.beytrison 1 month ago

Last reply by Mike Kaply 1 month ago

  • Solved

ExtensionSettings does not show up as a GPO setting with the latest ADMX files

the settings ExtessionSettings does not show up to be able to modify even tho it is on the ADMX file (5.11)? Should I use the older Extensions policies? I want to install… (read more)

the settings ExtessionSettings does not show up to be able to modify even tho it is on the ADMX file (5.11)? Should I use the older Extensions policies? I want to install and pin an extension from the store.

Asked by Christopher Roble 2 days ago

Answered by Mike Kaply 1 day ago