Showing questions tagged: Show all questions

Credit Card/Debit Card Group Policy

Hi all, I need to be able to disable the option to save Credit Card/Debit cards through group policy, has anyone got a few steps to help me through this? Thank You … (read more)

Hi all,

I need to be able to disable the option to save Credit Card/Debit cards through group policy, has anyone got a few steps to help me through this?

Thank You

Asked by dan.maskrey 4 weeks ago

Last reply by Mike Kaply 3 weeks ago

ExtensionSettings not deploying through Intune OMA-URI

Hi, I've been struggling for a week to try and get our extensions managed in Firefox. Firstly I tried doing it in Intune through the Extension Management setting in the … (read more)

Hi,

I've been struggling for a week to try and get our extensions managed in Firefox. Firstly I tried doing it in Intune through the Extension Management setting in the ADMX however that wouldn't work as it couldn't parse the JSON. Then I've tried using the OMA-URI ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/ExtensionSettings

I'm now getting a straight up error in Intune -2016281112 (0x87d1fde8). I've followed the documentation as best as I can but it still doesn't seem to work. In the Intune logs there is no record of the Config profile even being attempted. Any ideas as to what is causing this error? Here is the full code being used for the OMA-URI string:

<enabled/>
<data id="ExtensionSettings" value='
{

   "*": {
       "blocked_install_message": "This extension is blocked. Please contact the helpdesk for further assistance.",
       "install_sources": ["about:addons","https://addons.mozilla.org/*"],
       "installation_mode": "blocked",
       "allowed_types": ["extension"]
   },
   "rested@restedclient": {
       "installation_mode": "allowed"
   },
   "{c45c406e-ab73-11d8-be73-000a95be3b12}": {
       "installation_mode": "allowed"
   },
   "{5caff8cc-3d2e-4110-a88a-003cc85b3858}": {
       "installation_mode": "allowed"
   },
   "selenium-ide": {
       "installation_mode": "allowed"
   },
   "{a6fd85ed-e919-4a43-a5af-8da18bda539f}": {
       "installation_mode": "allowed"
   },
   "{16a49f65-1369-4839-a5ef-db2581e08b16}": {
       "installation_mode": "allowed"
   },
   "{5384767E-00D9-40E9-B72F-9CC39D655D6F}": {
       "installation_mode": "allowed"
   },
   "{83efb7a7-cf21-4f94-840a-316f651053ef}": {
       "installation_mode": "allowed"
   },
   "{edfc63b3-fc9b-4b6b-b9bf-4561ad548044}": {
       "installation_mode": "allowed"
   },
    "{f1a3d59a-f759-4d03-9545-6f741e64524e}": {
       "installation_mode": "allowed"
   },
    "cors-everywhere@spenibus": {
       "installation_mode": "allowed"
   }
}'/>

Asked by liquidtabs 1 month ago

Last reply by Mike Kaply 1 month ago

multiple users needing single profile

We have 50 workstations set up for certain jobs and the users roam as needed. Each workstation has two printers using different media. the printers are controlled by ha… (read more)

We have 50 workstations set up for certain jobs and the users roam as needed. Each workstation has two printers using different media. the printers are controlled by having two instances of Firefox with each having a user profile to use one printer or the other. In addition to printer settings we set a number of other profile settings such as silent printing etc.

Having a profile per user requires a great deal of setup work to allow different users to log in with authentication and to align the printers with the programs which will print to them.

A solution that would allow us to write a copy of a master profile to each new user via a program would be nearly perfect. Thank you,

Asked by rprefontaine 3 months ago

Last reply by Mike Kaply 3 months ago

Extension Management GPO has a limit of 2048 characters

I'm trying to configure the "Extension Management" policy for firefox in my company. We have 14 addons to manage. using JSON this will end to a line of about 2500 chara… (read more)

I'm trying to configure the "Extension Management" policy for firefox in my company. We have 14 addons to manage. using JSON this will end to a line of about 2500 characters.

when I try to copy the code into the gpo I get a message telling me the limit is 2048 characters.

Is there a way to baypass this limitation ?


thank you

Asked by kalimera555 5 months ago

Last reply by Mike Kaply 5 months ago

How to configure "What Firefox should do with other files" with policies.json

Hi, I deployed the last Firefox ESR update and I just found about this new feature : https://support.mozilla.org/en-US/kb/manage-downloads-preferences-using-downloa… (read more)

Hi,

I deployed the last Firefox ESR update and I just found about this new feature : https://support.mozilla.org/en-US/kb/manage-downloads-preferences-using-downloads-menu

So files are now downloaded and users are no longer prompted for what to do. My question is can we change this to "Ask whether to open or save files" using policies.json?

Kind regards,

McB

Asked by loic.hemat 5 months ago

Last reply by cor-el 5 months ago

  • Archived

Unable to configure the firefox policy for Proxy in Intune

OMA-URI: ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Proxy Value (string): <enabled/> <data id="ProxyLocked" value="true | false"/> <data i… (read more)

OMA-URI:

./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Proxy Value (string):

<enabled/> <data id="ProxyLocked" value="true | false"/> <data id="ConnectionType" value="none | system | manual | autoDetect | autoConfig"/> <data id="HTTPProxy" value="https://httpproxy.example.com"/> <data id="UseHTTPProxyForAllProtocols" value="true | false"/> <data id="SSLProxy" value="https://sslproxy.example.com"/> <data id="FTPProxy" value="https://ftpproxy.example.com"/> <data id="SOCKSProxy" value="https://socksproxy.example.com"/> <data id="SOCKSVersion" value="4 | 5"/> <data id="AutoConfigURL" value="URL_TO_AUTOCONFIG"/> <data id="Passthrough" value="<local>" >="" <data="" <="" p=""></data>


This has mixure of String and Integer , when we configure as string and use one from the above or leaving blank or setting only string , it failed the policy with error - -2016281112

Asked by kamal.manoranjith 6 months ago

Last reply by Mike Kaply 6 months ago

  • Archived

Group Policy is applied but no changes

We use GPO to push out our Firefox homepage and bookmarks. I get totally different results for each user, some will make changes right away if I add a new book marks, but… (read more)

We use GPO to push out our Firefox homepage and bookmarks. I get totally different results for each user, some will make changes right away if I add a new book marks, but they don't see older ones?

I decided to build a few test machines (we don't have time to build a dev envir) and it applies the GPO for the home page but not the bookmarks, I can see the book marks in the registry even but nothing on firefox. Anyone have a guess?

thanks David

Asked by david.kafrissen 7 months ago

Last reply by Mike Kaply 6 months ago

  • Archived

Hardening Firefox browser

Hi, I am looking for a security Hardening guidelines for Firefox from Mozilla. Could you please guide me to the right direction where I can find one. Thanks Raju … (read more)

Hi, I am looking for a security Hardening guidelines for Firefox from Mozilla. Could you please guide me to the right direction where I can find one.

Thanks Raju

Asked by raju.singanna 8 months ago

Last reply by Mike Kaply 8 months ago

  • Archived

Completely remove address bar

I would like to completely remove the address bar (url bar?) from Firefox 78 64bit. We had to update our Firefox at work and the old way of doing it through the userChrom… (read more)

I would like to completely remove the address bar (url bar?) from Firefox 78 64bit. We had to update our Firefox at work and the old way of doing it through the userChrome.css file doesnt seem to work with the newer versions.

Asked by pingaaron 10 months ago

Last reply by Mike Kaply 9 months ago

  • Archived

Silent Auto Update for Firefox ESR

Hi All- I am in charge of deploying Firefox ESR to my company and trying to get it to silently auto update on it's on with user interaction. We have policies in place (GP… (read more)

Hi All- I am in charge of deploying Firefox ESR to my company and trying to get it to silently auto update on it's on with user interaction. We have policies in place (GPO) that prevent it at this point. I need some guidance on whether I should use just GPOs to manage this or should I go the route of the .cfg file? If someone has a step by step on how to best achieve this I would appreciate it. I am currently using the .msi installer.

Here is settings in an old .cfg file that I am testing with:

lockPref("app.update.mode", 1); lockPref("app.update.service.enabled", true); lockPref("extensions.update.enabled", false); lockPref("extensions.update.autoUpdateEnabled", false);

// Set default homepage - users can change // Requires a complex preference defaultPref("browser.startup.homepage","data:text/plain,browser.startup.homepage=http://workday");

// Don't ask to install the Flash plugin lockPref("plugins.notifyMissingFlash", false);

// Disable Search Engine automatic updates lockPref("browser.search.update", false);

//Disable telemetry lockPref("toolkit.telemetry.prompted", 2); lockPref("toolkit.telemetry.rejected", true); lockPref("toolkit.telemetry.enabled", false);

// Disable health reporter lockPref("datareporting.healthreport.service.enabled", false); lockPref("datareporting.healthreport.logging.consoleEnabled", false); lockPref("datareporting.healthreport.uploadEnabled", false);

// Disable all data upload (Telemetry and FHR) lockPref("datareporting.policy.dataSubmissionEnabled", false);

// Disable crash reporter lockPref("toolkit.crashreporter.enabled", false); Components.classes["@mozilla.org/toolkit/crash-reporter;1"].getService(Components.interfaces.nsICrashReporter).submitReports = false;

// Don't show WhatsNew on first run after every update pref("browser.startup.homepage_override.mstone","ignore");

// Don't show 'know your rights' on first run pref("browser.rights.3.shown", true);

Asked by CherishYourLife 10 months ago

Last reply by cor-el 10 months ago

  • Archived

How do I configure kiosk mode?

Mozilla's website states: "Numerous features of the kiosk mode are configurable through policy or command line parameters when launching the browser." However, other t… (read more)

Mozilla's website states:

"Numerous features of the kiosk mode are configurable through policy or command line parameters when launching the browser."

However, other than a single example to run kiosk mode as a private window, it doesn't seem to provide any information on how to access such configuration. I couldn't seem to find the information anywhere else either.

How can I configure kiosk mode? Preferably via the CLI, but I'd be interested also to learn what is meant by "configurable through policy".

Asked by davidecl175 10 months ago

Last reply by Mike Kaply 10 months ago

  • Archived

Extension Management via GPO not working

Trying to block all but allow specific plugins. I have the okta one and the web password filler working, but not the logon assist. I've tried putting in (secret-server-l… (read more)

Trying to block all but allow specific plugins. I have the okta one and the web password filler working, but not the logon assist. I've tried putting in (secret-server-logon-assist-ff57@thycotic.com), and {secret-server-logon-assist-ff57@thycotic.com}, and also without any extras. These codes come from just the numeric URL (ie https://addons.mozilla.org/firefox/downloads/file/1747490) which says "Secret Server Login Assist (secret-server-logon-assist-ff57@thycotic.com) is blocked by your system administrator. Extension not on OAI allowed list". Am I misreading this message, or missing something on this specific one?

{ "*": { "blocked_install_message" : "Extension not on OAI allowed list", "installation_mode": "blocked" }, "dd1e31d5-3623-45cb-b1ad-64074d36b360@thycotic.com": { "installation_mode": "allowed", "install_url": "https://addons.mozilla.org/firefox/downloads/file/3906662/secret_server_web_password_filler-3.2-fx.xpi" }, "secret-server-logon-assist-ff57@thycotic.com": { "installation_mode": "allowed", "install_url": "https://addons.mozilla.org/firefox/downloads/file/1747490/secret_server_login_assist-2.1.1-an+fx.xpi" }, "plugin@okta.com": { "installation_mode": "allowed", "install_url": "https://addons.mozilla.org/firefox/downloads/file/3901586/okta_browser_plugin-6.8.0-an+fx.xpi" } }

Asked by mhunt3 1 year ago

Last reply by trackcourier1 11 months ago

  • Archived

Extensions -> can't auto enable them

Hi, I'm trying to auto enable 2 extensions for my users, and after hours on the issue, I cannot find any fix. We are using: ESR 91.4 32 bits I've tried to use: - Group… (read more)

Hi,

I'm trying to auto enable 2 extensions for my users, and after hours on the issue, I cannot find any fix.

We are using: ESR 91.4 32 bits

I've tried to use: - Group Policy -> ExtensionSettings {

 "policies": {
   "ExtensionSettings": {

"uBlock0@asipsante.fr": { "installation_mode": "force_installed", "install_url": "file:///c:/Program Files (x86)/Ivanti/Workspace Control/Data/DBCache/Resources/custom_resources/Logiciels/Mozilla/extensions/CPS2ter-2020_Firefox@asipsante.fr.xpi" }, "uBlock1@netsoins.org": { "installation_mode": "force_installed", "install_url": "https://maintenance.netsoins.org/cpsvitale/firefox.xpi" } } } }

- and Registry HKCU\Software\Policies\Mozilla\Firefox -> ExtensionSettings (REG_MULTI_SZ): { "uBlock0@asipsante.fr": { "installation_mode": "force_installed", "install_url": "file:///c:/Program Files (x86)/Ivanti/Workspace Control/Data/DBCache/Resources/custom_resources/Logiciels/Mozilla/extensions/CPS2ter-2020_Firefox@asipsante.fr.xpi" }, "uBlock1@netsoins.org": { "installation_mode": "force_installed", "install_url": "https://maintenance.netsoins.org/cpsvitale/firefox.xpi" } }

-> HKCU\Software\Policies\Mozilla\Firefox\Extensions\Install 1 (REG_SZ): c:\Program Files (x86)\Ivanti\Workspace Control\Data\DBCache\Resources\custom_resources\Logiciels\Mozilla\extensions\CPS2ter-2020_Firefox@asipsante.fr.xpi 2 (REG_SZ): https://maintenance.netsoins.org/cpsvitale/firefox.xpi


The result is: extension are installed, but always disabled. I have to manually enable them.

Would you have any idea?

thanks for help

Asked by pierre.rodriguez 1 year ago

Last reply by Mike Kaply 1 year ago

  • Archived

Mendeley plugin installed via registry setting pointing to plugin file has stopped working

I make the Mendeley Firefox plugin available to managed windows 10 workstations by downloading the plugin file to this location on a workstation: C:\Program Files (x86)\… (read more)

I make the Mendeley Firefox plugin available to managed windows 10 workstations by downloading the plugin file to this location on a workstation:

C:\Program Files (x86)\Mendeley Desktop\Firefox Importer\mendeley_web_importer-3.2.65-fx.xpi

and then add a registry setting to the machine as follows:

[HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\Firefox\Extensions] "@mendeleyimporter"="C:\\Program Files (x86)\\Mendeley Desktop\\Firefox Importer\\mendeley_web_importer-3.2.65-fx.xpi"

This method worked for previous versions of Firefox and Mendeley Importer, but for the latest versions of both the plugin no longer appears in Firefox.

No error messages are generated.

Is this method still supported by Firefox?

Thanks Mike

Asked by alder-woolf 1 year ago

Last reply by cor-el 1 year ago

  • Archived

MDM Management - 'Open Links in tabs instead of new windows'

Hi Looking to control the following tab options via Intune but i cannot seem to identify the OMI-url settings. Are these setting manageable via OMI-url? Settings>Tabs… (read more)

Hi Looking to control the following tab options via Intune but i cannot seem to identify the OMI-url settings. Are these setting manageable via OMI-url?

Settings>Tabs>Open links in tabs instead of a new window Settings>Tabs>When you open a link or media in a new tab, switch to it immediately

Thanks in advance

Asked by russell.stead 1 year ago

Last reply by Mike Kaply 1 year ago

  • Archived

I want a option to disable entering URL manually for users

I want a option to disable entering URL manually for users. I'll be publishing Mozilla in Citrix with URL bind with it, and need to disable adding tab or editing URL from… (read more)

I want a option to disable entering URL manually for users. I'll be publishing Mozilla in Citrix with URL bind with it, and need to disable adding tab or editing URL from address bar. How can I achieve that?

Asked by sudipto.pal 1 year ago

Last reply by cor-el 1 year ago

  • Archived

Setting a Homepage regardless of user

I have been trying to automate setting a homepage for my users. I have tried a number of ways including a script I found but changing the prefs.js on my account doesn't s… (read more)

I have been trying to automate setting a homepage for my users. I have tried a number of ways including a script I found but changing the prefs.js on my account doesn't seem to affect Firefox at all. I can append "browser.startup.homepage" in the view:config if I open Firefox locally and that seems to change the homepage as intended but putting it into a script doesn't seem to do anything unfortunately.

I have also tried what's recommended in this guide however that did not help either.

https://smallbusiness.chron.com/change-default-homepage-users-54727.html

Is there a way to do this through regedit or group policy? Preferably a way that still allows the users to change the homepage if they like.

Asked by buritoman88 1 year ago

Last reply by cor-el 1 year ago

  • Archived

Lock down Applications

We are taking advantage of the Mozilla.cfg and PrefLock and that works great! Now I am looking for a way to lock down the Applications set in Firefox and I don't seem to … (read more)

We are taking advantage of the Mozilla.cfg and PrefLock and that works great! Now I am looking for a way to lock down the Applications set in Firefox and I don't seem to be having any luck doing so.

Goal is to lock down the Applications section In Firefox under "General" (See the screenshot). Its currently set to a few default applications we use. These settings seem to change at random depending on user actions, or after browser updates. Is there any way to lock them in place once the settings are set? Would like the settings to stick and we don't want users to have do to anything. Example: If Adobe is set for PDF's, I just want it to always open in Adobe. Maybe grey out the section or something so it cannot be changed if possible.

Thanks!

Asked by ar550n1c 1 year ago

Last reply by Mike Kaply 1 year ago