Mozilla 도움말 검색

고객 지원 사기를 피하세요. 저희는 여러분께 절대로 전화를 걸거나 문자를 보내거나 개인 정보를 공유하도록 요청하지 않습니다. "악용 사례 신고"옵션을 사용하여 의심스러운 활동을 신고해 주세요.

Learn More

Firefox CIS baselines deployment with Intune

  • 10 답장
  • 1 이 문제를 만남
  • 15 보기
  • 최종 답변자: Mike Kaply

more options

Hi all,

I'm trying to create configuration profile to deploy CIS baselines using Intune. Configured custom schema and able to deploy certain settings. However, while deploying preferences, I'm getting error and none of the preferences are being deployed. Enclosing the error screenshots. Did anyone configured preference settings. if yes, can you please suggest how to configure.

Hi all, I'm trying to create configuration profile to deploy CIS baselines using Intune. Configured custom schema and able to deploy certain settings. However, while deploying preferences, I'm getting error and none of the preferences are being deployed. Enclosing the error screenshots. Did anyone configured preference settings. if yes, can you please suggest how to configure.
첨부된 스크린샷

모든 댓글 (10)

more options

We have a new way of configuring preferences using JSON that should work for many of those:

https://github.com/mozilla/policy-templates/blob/master/README.md#preferences

A lot of those pref names are incorrect (_ instead of .)

You should check about:config for the correct names.

more options

Thank you for your response Mike. I did check JSON file and configured preferences but none of them are working as expected.

more options

Can you post the JSON you used for your preferences?

more options

Tried with different combinations. OMA-URI --> ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Preferences JSON

<enabled/> <data id="JSON" value=' {

 "geo.enabled": {
   "Value": false,
   "Status": "default"
 },
 "security.mixed_content.block_active_content": {
   "Value": false,
 }
 }'/>


tried with geo_enabled and security_mixed_content_block_active_content with no luck

more options

You have an extra comma after

"Value": false,

and that one is missing the Status type (we don't do a status by default)

I run my JSON through JSONlint.com to verify it is correct.

I'll still do some checking with intune to make sure this is working, my comments are from a first glance.

more options

Did fixing those typos make it work for you?

more options

I have tried with removing the comma but it didn't work.

more options

I just ran a quick test and this is working for me.

Can you post a screenshot of your Configuration settings in intune?

I'm wondering if somehow the old preferences are conflicting with the new preferences?

more options

Hi Mike, since it didn't work through Intune, I have deleted Intune profile and deployed the settings using config file. Can you please share your configuration settings in Intune so that I will also test with the same set of configurations and revert you with the results?

more options

Sure.

I created an entry called Firefox ADMX with the OMA-URI

./Device/Vendor/MSFT/Policy/ConfigOperations/ADMXInstall/Firefox/Policy/FirefoxAdmx.

And a type of string and pasted the entirety of:

https://raw.githubusercontent.com/mozilla/policy-templates/master/windows/firefox.admx

Then I created an entry called Preferences with an OMA-URI of:

./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Preferences

Data type is string and value is:

<enabled/> <data id="JSON" value=' {

"geo.enabled": {
  "Value": false,
  "Status": "default"
},
"security.mixed_content.block_active_content": {
  "Value": false
}
}'/>

Then after saving and deploying, the preferences were set in the registry.