Hi! I'm working on deploying Firefox to my AD domain with group policy. After that's done, what's the best way to keep the installations up to date? By default Firefox will update automatically and that seems to be recommended even for enterprise. That's fine. But what happens if down the road I deploy a new machine to the domain and the now-current but by that time old version of Firefox gets deployed to that machine? I know it would get auto-updated after some (undetermined?) time but between the installation and the update it could be vulnerable. How can one prevent that? Do I just keep adding newest MSI packages to software installation in the policy? However, if I keep doing that would it interfere with Firefox's auto-update? Could it lead to having some versions installed outside of policy? Can someone shed some light onto this as I've read that it may prevent the group policy version from installing, or upgrading once there are multiple versions in the policy?