Zobrazenie otázok označených: Zobraziť všetky otázky
  • Vyriešené

Firefox GPO to add certificate exception

Hello. I know how to define a server certificate exception to avoid browser warnings in case of certificate issue with a website (see attachment). However, I'd like to ap… (ďalšie informácie)

Hello. I know how to define a server certificate exception to avoid browser warnings in case of certificate issue with a website (see attachment). However, I'd like to apply that exception for all users with access to my machine using a GPO (for user or local machine). This is also a requirement in my work where many users run Firefox from a server and the face browser warnings all the time (related to self-signed certificates) so it would be great to apply an exception for all users through a GPO specifying the self-signed certificate warning we want Firefox to ignore. Thanks.

Otázku položil(a) eltenista10 Pred 5 mesiacmi

Na otázku odpovedal(a) Mike Kaply Pred 5 mesiacmi

Can't remove Purview Firefox browser extension with intune

Hello, New subscriber here. I have been given the task to test the install and uninstall of the Purview Firefox browser extension using Intune. I created 2 groups in E… (ďalšie informácie)

Hello,

New subscriber here. I have been given the task to test the install and uninstall of the Purview Firefox browser extension using Intune. I created 2 groups in EntraID, one for each (install and uninstall).

I have no issues with the installation. Initially, I left the test device in the install group and then added it to the uninstall group to remove it. (this usually works with other apps, it worked this way with the Purview Chrome browsing extension as well other apps) but when I do this, nothing happens.

Next, I removed the device from the install group and added it to the uninstall group only. Once the configuration profile applies to the test device, it allows the user to remove it manually (before it did not) but the extension remains installed.

I have created a policy using the administrative template extension uninstall option as well as with the OMA-URI settings but the same happens. When i check the device configuration for the device in Intune, it says it succeeded but that is not the case. The OMA-URI setting I was not too sure about, but gave it a shot. I used the UUID value for the Purview Firefox extension

I am attaching some pictures and hope someone can tell me what I am doing wrong. I can add additional information, if needed. I have opened a ticket with Microsoft last week but have not called me yet. I ran into this forum today.

Thanks in advance

Otázku položil(a) raul.aramburu Pred 5 mesiacmi

Posledná odpoveď od Mike Kaply Pred 5 mesiacmi

  • Vyriešené

Force-Pinning Extension doesn't Appear to Work (GPO in Microsoft AD)

I am having the same issue as this other user here: https://www.reddit.com/r/sysadmin/comments/17wvuwh/help_pinning_extension_in_firefox_with_gpo/ Preliminaries -- Initi… (ďalšie informácie)

I am having the same issue as this other user here: https://www.reddit.com/r/sysadmin/comments/17wvuwh/help_pinning_extension_in_firefox_with_gpo/

Preliminaries -- Initially (before trying to force-pin), I had these GPOs enabled:

Extensions to Install -> https://addons.mozilla.org/firefox/downloads/file/4410896/bitwarden_password_manager-2024.12.4.xpi

Prevent extensions from being disabled or removed ->

(Those GPOs above all work.)

What I'm trying to do: Force-pin Bitwarden.

I believe I've followed the documentation correctly (except for not including a "*" case): https://mozilla.github.io/policy-templates/#extensionsettings

I've enabled this GPO with this value:

Extension Management ->

{

 "{446900e4-71c2-419f-a6a7-df9c091e268b}": {
   "default_area": "navbar"
 }

}

After running various "GPUpdate"s and whatnot, the option to uncheck "Pin to toolbar" is still available to click.

I've verified in "about:policies#active" that the JSON item appears next to "ExtensionSettings" and that there are no errors listed in the "Errors" tab.

I've also verified that it appears in the correct location in the Registry.

Since another user had the same issue (Reddit link above), I figured it'd be a good idea to check in with y'all to see if we are missing something.

Thanks for your help!

Otázku položil(a) TheCyberWarden Pred 5 mesiacmi

Na otázku odpovedal(a) Mike Kaply Pred 5 mesiacmi

differences and interchangibility of pref(); user_pref(); and lockPref();

Firefox is used on Windows 11 Enterprise. There is a firefox.cfg in the installation directory (and an autoconfig.js in the ./defaults/pref sub-directory). The firefox.cf… (ďalšie informácie)

Firefox is used on Windows 11 Enterprise. There is a firefox.cfg in the installation directory (and an autoconfig.js in the ./defaults/pref sub-directory). The firefox.cfg targets an autoconfigfile.js. This setup is recommended here: [firefox using autoconfig"]

  1. In the support article´s example, the firefox.cfg uses a pref(); expression. Is it possible to use a lockPref(); expression instead?
  2. What is the result of either using pref(); expressions or user_pref(); expressions in the remoted autoconfigfile.js? Are both of them possible, especially while the firefox.cfg uses lockPref(); expressions instead of pref();?

I hope that somesone can help with one of these questions. Thanks a lot!

Otázku položil(a) fortuna90 Pred 5 mesiacmi

Posledná odpoveď od Mike Kaply Pred 5 mesiacmi

[docker/playwright] policies.json file not applied

Hey everyone. I am automating end-to-end testing with playwright for python, using the official Docker image from the microsoft artifact repository (using `playwright/pyt… (ďalšie informácie)

Hey everyone. I am automating end-to-end testing with playwright for python, using the official Docker image from the microsoft artifact repository (using `playwright/python:v1.49.1`).

As I have signed certificates for my local domains with my own certificate authority, I am trying to have Firefox automatically install the certificates via a policies file. However, Firefox seems to ignore the policies file no matter what.

To ensure that the file itself is used, I simplified it to a single boolean value, and ensured that it's copied correctly inside the container via the `cat` command. Here are the current contents:

{

 "policies": {
   "DisableTelemetry": true

}

I know that the CA certificate is installed correctly, as it works out of the box using the WebKit browser and Curl command. I have gotten it to work in Chromium by installing it to nssdb using `certutil`.

I have converted the file from ASCII to the `utf-8` charset.

The file has the expected content, and I have copied it to both `/etc/firefox/policies/policies.json` and `/ms-playwright/firefox-1466/firefox/distribution/policies.json` (the path to the binary is `/ms-playwright/firefox-1466/firefox/firefox`).

Opening `about:policies` shows the text "The Enterprise Policies service is inactive.", which is sadly not very informative. It would be nice to have a list of locations it looks in, and any problems it encountered.

The container uses Firefox Nightly 132.

Are these locations incorrect? Is there any way to debug this? Does anyone have any other suggestions? If you need any more info (Dockerfile, etc.), please let me know.

Thanks in advance.

Otázku položil(a) Pat B Pred 5 mesiacmi

Posledná odpoveď od Mike Kaply Pred 5 mesiacmi

call expression in firefox.cfg

Firefox is used on Windows 11 Enterprise. There is a firefox.cfg in the installation directory (and an autoconfig.js in the ./defaults/pref sub-directory). Everything wor… (ďalšie informácie)

Firefox is used on Windows 11 Enterprise. There is a firefox.cfg in the installation directory (and an autoconfig.js in the ./defaults/pref sub-directory). Everything works fine when a pref(...); entry is written to the firefox.cfg. However, we want the firefox.cfg to call the pref(...); entries from a global_config.js which is saved on the machines public directory.

Therefore, the firefox.cfg says:

// free line lockPref("autoadmin.global_config_url","file:///C:/Users/Public/.../global_config.js");

But firefox does not load whatever prefs are written to the global_config.js. There probably is problems with the formatting of the file path (file:///C:/Users/Public/.../global_config.js). What would the correct formatting look like? Unfortunately, Mozilla´s support guide only includes an example code for a firefox.cfg which calls a global_config.js via http:, but not via file:.

Otázku položil(a) fortuna90 Pred 5 mesiacmi

Posledná odpoveď od Mike Kaply Pred 5 mesiacmi

  • Archivované

Ajax Call Frequently Blocked by Firefox

We have an application running on Firefox and noticed that with new Firefox ESR, Ajax call (XMLHttpRequest ) from js script running on Firefox browser on thin clients see… (ďalšie informácie)

We have an application running on Firefox and noticed that with new Firefox ESR, Ajax call (XMLHttpRequest ) from js script running on Firefox browser on thin clients seems to be blocked frequently (same call succeed most of the time, but blocked from time to time). Issue was raised starting with Firefox 128.2.0esr), but in general persist with newer Firefox ESR. We tried replacing XMLHttpRequest with fetch which seems making no much difference so far.

Otázku položil(a) kunling zeng Pred 6 mesiacmi

Posledná odpoveď od Mike Kaply Pred 5 mesiacmi

New Preference clearOnShutdown Cache/Cookies/Storage is now v2

Dear Community, i had .cfg file with following settings to clean up some userdata after closing firefox: //Clean UP Cache etc. lockPref("privacy.sanitize.sanitizeOnShut… (ďalšie informácie)

Dear Community,

i had .cfg file with following settings to clean up some userdata after closing firefox:

//Clean UP Cache etc. lockPref("privacy.sanitize.sanitizeOnShutdown", true); lockPref("privacy.clearOnShutdown.cache", true); lockPref("privacy.clearOnShutdown.cookies", false); lockPref("privacy.clearOnShutdown.offlineApps", true); lockPref("privacy.clearOnShutdown.sessions", false);

This cleaned the "Storage" Folder in the Firefox Profile folder, but cookies and sessions where remaining, so the logins where active.

Now i saw that all useres have lots of folders in the "Storage/Default" folder. After some research i found out that this behavior startet at 02.10.2024.

I also found a new pref: privacy.clearOnShutdown_v2.cookiesAndStorage which was set to "false". No idea where this key came from? When I set this key to "Yes", the storage is cleared after closing Firefox. But so also all the cookies. Was there a change at the prefs?

And is ther any other solution to clear the Storage but remain the cookies?

Thank you in advance!

Otázku položil(a) sn1.k Pred 5 mesiacmi

Posledná odpoveď od Mike Kaply Pred 5 mesiacmi

  • Vyriešené
  • Archivované

Firewall changes required after updating to Firefox v132

After updating to v132 I have noticed a significant increase in the load times for some websites that our users connect to. Using v131.0.3 I usually see < 1 second loa… (ďalšie informácie)

After updating to v132 I have noticed a significant increase in the load times for some websites that our users connect to. Using v131.0.3 I usually see < 1 second load times for the two websites I am monitoring but after upgrading to v132 it is consistently taking 18-19 seconds for the same page. I have tried uninstalling v132 and reverting to v131 and it immediately goes back to the much faster load times. I have also tried installing various v133 releases and I see the same performance issue as for v132.

The environment I am working in is behind a network firewall with relatively restrictive internet access and I am wondering whether there are sites that Firefox is trying to connect to for the new anti-tracking or suspicious activity features (or anything else) that are being blocked and are therefore causing timeouts and retries that are bumping the total load time up.

Can anyone think of anything else I could check or change?

Otázku položil(a) Steve G NZ Pred 6 mesiacmi

Na otázku odpovedal(a) TyDraniu Pred 6 mesiacmi

  • Archivované

Managed Bookmarks subfolder

Hello, I would like to create Managed Bookmarks for our company and distribute them via Group Policy. However, I am unable to create subfolders for these Managed Bookmar… (ďalšie informácie)

Hello,

I would like to create Managed Bookmarks for our company and distribute them via Group Policy. However, I am unable to create subfolders for these Managed Bookmarks, so they would all be in one folder and quite disorganized, which is why I need subfolders. Can I map this using a JSON file, and if so, could someone assist me with the structure of the JSON file?

Thank you in advance!

Kind regards

Otázku položil(a) Username2025 Pred 6 mesiacmi

Posledná odpoveď od TyDraniu Pred 6 mesiacmi

  • Archivované

security.cert_pinning.enforcement_level using a GPO?

Hi, I need to ask regardining this security.cert_pinning.enforcement_level. how can i set this value using the windwos server GPO? i could not find this even after copy… (ďalšie informácie)

Hi,

I need to ask regardining this security.cert_pinning.enforcement_level. how can i set this value using the windwos server GPO? i could not find this even after copying the firefox.admx file. could someone please guide me how can i acheive it?

I would really appreciate the help!

Regards Sheras

Otázku položil(a) Sheras Pred 6 mesiacmi

Posledná odpoveď od Mike Kaply Pred 6 mesiacmi

  • Archivované

security.cert_pinning.enforcement_level

Hi Firefoxians, I need to ask regardining this security.cert_pinning.enforcement_level. how can i set this value using the windwos server GPO? i could not find this even… (ďalšie informácie)

Hi Firefoxians,

I need to ask regardining this security.cert_pinning.enforcement_level. how can i set this value using the windwos server GPO? i could not find this even after copying the firefox.admx file. could someone please guide me how can i acheive it?

I would really appreciate the help!

Regards Sheras

Otázku položil(a) Sheras Pred 6 mesiacmi

Posledná odpoveď od James (On Leave) Pred 6 mesiacmi

  • Archivované

history folder location path on firefox115.18.Oesr

Hello there, Could some please tell me how to find the path of the history containing folder in firefox115.18.Oesr? I mean something like: /Users/<votre_nom_utilisat… (ďalšie informácie)

Hello there, Could some please tell me how to find the path of the history containing folder in firefox115.18.Oesr? I mean something like: /Users/<votre_nom_utilisateur>/Library/Application Support/Firefox/Profiles/<nom_du_profil>/places.sqlite

thanks in advance Rab

Otázku položil(a) rab27a Pred 7 mesiacmi

Posledná odpoveď od Mike Kaply Pred 7 mesiacmi

  • Archivované

Firefox ESR Update

We use Firefox ESR in our environment today, Is it possible to have a policy that would display "update required" message to end-users, or have it automatically update wi… (ďalšie informácie)

We use Firefox ESR in our environment today, Is it possible to have a policy that would display "update required" message to end-users, or have it automatically update without users opening the browsers.

Otázku položil(a) Ayodeji David Pred 7 mesiacmi

Posledná odpoveď od Mike Kaply Pred 7 mesiacmi

  • Uzamknuté
  • Archivované

Last Firefox ESR update took the status bar off.

Debian 12 Linux on Dell laptop. Current "updated version" Firefox ESR 128.4.0esr (64bit) I received an update notice for Firefox ESR this morning. After running the Upda… (ďalšie informácie)

Debian 12 Linux on Dell laptop. Current "updated version" Firefox ESR 128.4.0esr (64bit) I received an update notice for Firefox ESR this morning. After running the Update, I lost the status bar. How can I get it back?

Otázku položil(a) noidly1 Pred 8 mesiacmi

Posledná odpoveď od Clashof Clansfun Pred 7 mesiacmi