Extensions -> can't auto enable them

Hi, I'm trying to auto enable 2 extensions for my users, and after hours on the issue, I cannot find any fix. We are using: ESR 91.4 32 bits I've tried to use: - Group Po… (了解更多)

Hi,

I'm trying to auto enable 2 extensions for my users, and after hours on the issue, I cannot find any fix.

We are using: ESR 91.4 32 bits

I've tried to use: - Group Policy -> ExtensionSettings {

 "policies": {
   "ExtensionSettings": {

"uBlock0@asipsante.fr": { "installation_mode": "force_installed", "install_url": "file:///c:/Program Files (x86)/Ivanti/Workspace Control/Data/DBCache/Resources/custom_resources/Logiciels/Mozilla/extensions/CPS2ter-2020_Firefox@asipsante.fr.xpi" }, "uBlock1@netsoins.org": { "installation_mode": "force_installed", "install_url": "https://maintenance.netsoins.org/cpsvitale/firefox.xpi" } } } }

- and Registry HKCU\Software\Policies\Mozilla\Firefox -> ExtensionSettings (REG_MULTI_SZ): { "uBlock0@asipsante.fr": { "installation_mode": "force_installed", "install_url": "file:///c:/Program Files (x86)/Ivanti/Workspace Control/Data/DBCache/Resources/custom_resources/Logiciels/Mozilla/extensions/CPS2ter-2020_Firefox@asipsante.fr.xpi" }, "uBlock1@netsoins.org": { "installation_mode": "force_installed", "install_url": "https://maintenance.netsoins.org/cpsvitale/firefox.xpi" } }

-> HKCU\Software\Policies\Mozilla\Firefox\Extensions\Install 1 (REG_SZ): c:\Program Files (x86)\Ivanti\Workspace Control\Data\DBCache\Resources\custom_resources\Logiciels\Mozilla\extensions\CPS2ter-2020_Firefox@asipsante.fr.xpi 2 (REG_SZ): https://maintenance.netsoins.org/cpsvitale/firefox.xpi


The result is: extension are installed, but always disabled. I have to manually enable them.

Would you have any idea?

thanks for help

询问者 pierre.rodriguez 于 3 周前

最后回复者 Mike Kaply 于 1 周前

Change Cache Size via Group Policy

We block our user's access to about:config in Firefox for security reasons. I need to set the browser.cache.disk.capacity and browser.cache.disk.max_entry_size for a gro… (了解更多)

We block our user's access to about:config in Firefox for security reasons. I need to set the browser.cache.disk.capacity and browser.cache.disk.max_entry_size for a group of users as recommended by an online services provider. Those values are not available under the preferences policy in the ADMX template for Firefox. How can I set these values in group policy? Is there a registry entry I can make? I tried changing them on my computer and then finding the change in the registry but was unable to find the changed values.

询问者 scott.langley 于 3 周前

最后回复者 Mike Kaply 于 1 周前

Supported Preferences

i am switching preference / policy management from the mozilla.cfg file to the admin template/GPO. i need to know if the following are still supported in the current rel… (了解更多)

i am switching preference / policy management from the mozilla.cfg file to the admin template/GPO. i need to know if the following are still supported in the current release of Firefox ESR.

lockPref("app.update.enabled", false); lockPref("browser.download.dir", "N:"); lockPref("browser.download.downloadDir", "N:"); lockPref("browser.shell.checkDefaultBrowser", false); lockPref("dom.disable_open_during_load", true); lockPref("privacy.item.history", false); lockPref("xpinstall.whitelist.required", true); lockPref("browser.newtabpage.activity-stream.feeds.section.highlights", false); lockPref("browser.newtabpage.activity-stream.feeds.section.topstories", false); lockPref("browser.urlbar.autocomplete.enabled", false); lockPref("network.automatic-ntlm-auth.allow-non-fqdn", true); lockPref("plugin.default_plugin_disabled", "PDF, FDF, XFDF, LSL, LSO, LSS, IQY, RQY, XLK, XLS, XLT, POT, PPS, PPT, DOS, DOT, WKS, BAT, PS, EPS, WCH, WCM, WB1, WB3, RTF, DOC, MDB, MDE, WBK, WB1, WCH, WCM, AD, ADP"); lockPref("privacy.sanitize.promptOnSanitize", false); lockPref("privacy.sanitize.timeSpan", 40); lockPref("security.enable_ssl2", false); lockPref("security.enable_ssl3", false); lockPref("startup.homepage_welcome_url", ""); lockPref("startup.homepage_welcome_url.additional", ""); lockPref("toolkit.crashreporter.enabled", false);

if they are no longer supported, i need to know when (which release) they became unsupported. if there is a link that details all afailable preference and their support status, please provide that as well.

Thanks in advance.

询问者 grahjame 于 2 周前

最后回复者 TyDraniu 于 2 周前

Mendeley plugin installed via registry setting pointing to plugin file has stopped working

I make the Mendeley Firefox plugin available to managed windows 10 workstations by downloading the plugin file to this location on a workstation: C:\Program Files (x86)\M… (了解更多)

I make the Mendeley Firefox plugin available to managed windows 10 workstations by downloading the plugin file to this location on a workstation:

C:\Program Files (x86)\Mendeley Desktop\Firefox Importer\mendeley_web_importer-3.2.65-fx.xpi

and then add a registry setting to the machine as follows:

[HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\Firefox\Extensions] "@mendeleyimporter"="C:\\Program Files (x86)\\Mendeley Desktop\\Firefox Importer\\mendeley_web_importer-3.2.65-fx.xpi"

This method worked for previous versions of Firefox and Mendeley Importer, but for the latest versions of both the plugin no longer appears in Firefox.

No error messages are generated.

Is this method still supported by Firefox?

Thanks Mike

询问者 alder-woolf 于 1 个月前

最后回复者 cor-el 于 4 周前

Using Local Policy on a NON-DOMAIN COMPUTER

I downloaded the admx files for Mozilla Firefox and put them in with the other Windows provided Administrative Local Policy Templates, thinking that it SHOULD show up in … (了解更多)

I downloaded the admx files for Mozilla Firefox and put them in with the other Windows provided Administrative Local Policy Templates, thinking that it SHOULD show up in the Group Policy Editor tool provided with Windows 10. Apparently I could not have been more wrong. Does anybody know how to make the template show up on a non-domain (Home PC running Windows 10 Pro) computer? Granted, I know I can't control it from "Active Directory" since there is none, but I still want to add this functionality to the PC.

What I have tried: I renamed C:\Windows\PolicyDefinitions to C:\Windows\PolicyDefinitions.old I then Reopened GPEditor and verified all templates had been cleared of viewing (Empty set). I then created a new folder called C:\Windows\PolicyDefinitions and copied the files into it. It refuses to read the Firefox, but everything else shows back up. I downloaded the files again, and reinstalled them, but it still does not show up. I then Rebooted the PC, but my attempts were futile. Any assistance would be appreciated.

询问者 Twidget0831 于 1 个月前

最后回复者 Mike Kaply 于 1 个月前

prevent users from enable menu bar in firefox

Hello, How can i prevent users from enable menu bar in firefox with Mozilla .cfg file or GPO? i hide successfully the menu bar with userChrome.css but users can enable it… (了解更多)

Hello,

How can i prevent users from enable menu bar in firefox with Mozilla .cfg file or GPO?

i hide successfully the menu bar with userChrome.css but users can enable it with righ click -> and check menu bar option.

I would also like to configure in the same way (GPO or .cfg) the option to "Always ask where to save the files"

Thank you,

询问者 t.santos-ext 于 1 个月前

最后回复者 jscher2000 于 1 个月前

Replacing Rogue Installations with Managed ESR Versions

We are deploying Firefox ESR using Ivanti and have reached a point were were need to start cleaning up rogue installs of Firefox that we are not managing. Has anyone depl… (了解更多)

We are deploying Firefox ESR using Ivanti and have reached a point were were need to start cleaning up rogue installs of Firefox that we are not managing. Has anyone deployed ESR over a local install of Firefox. Does the end user end up with two version of Firefox install or does the ESR version write over the previously installed version? Does the end user lose their bookmarks and history? I'm just curious as too what others have experienced so I can notify my first test group on what they can expect.

询问者 Brian 于 1 个月前

最后回复者 Mike Kaply 于 1 个月前

Intune MSI LOB Deployment Return Codes

Hi, I want to deploy the Firefox .msi installer using Intune as Line of Business application. I can deploy any other msi in this manner successfully, except Firefox. The… (了解更多)

Hi,

I want to deploy the Firefox .msi installer using Intune as Line of Business application.

I can deploy any other msi in this manner successfully, except Firefox. The application installs, but never reports back to Intune that it was a success, just pending, which makes my AutoPilot deployment fail.

Here are a couple forms from people having the same issue.

https://www.reddit.com/r/Intune/comments/mvp80t/firefox_msi_always_waiting_for_install_status/

https://www.reddit.com/r/Intune/comments/lych1h/deployed_msi_stuck_on_pending_install/

It seems that the only way people can fix it is by wrapping the .exe installer as win32 app in Intune. While that technically works, it removes abilities to control versions in a large company.

We really need the MSI to return success codes properly, or we have to stop using Firefox.

Anyone know of any workarounds? Is there something in the MSI I can tweak with Orca?

Thanks

Jeff

询问者 rosejef 于 3 个月前

最后回复者 Mike Kaply 于 1 个月前

Firefox CIS baselines deployment with Intune

Hi all, I'm trying to create configuration profile to deploy CIS baselines using Intune. Configured custom schema and able to deploy certain settings. However, while depl… (了解更多)

Hi all,

I'm trying to create configuration profile to deploy CIS baselines using Intune. Configured custom schema and able to deploy certain settings. However, while deploying preferences, I'm getting error and none of the preferences are being deployed. Enclosing the error screenshots. Did anyone configured preference settings. if yes, can you please suggest how to configure.

询问者 Ramesh 于 4 个月前

最后回复者 Mike Kaply 于 1 个月前

MDM Management - 'Open Links in tabs instead of new windows'

Hi Looking to control the following tab options via Intune but i cannot seem to identify the OMI-url settings. Are these setting manageable via OMI-url? Settings>Tabs&… (了解更多)

Hi Looking to control the following tab options via Intune but i cannot seem to identify the OMI-url settings. Are these setting manageable via OMI-url?

Settings>Tabs>Open links in tabs instead of a new window Settings>Tabs>When you open a link or media in a new tab, switch to it immediately

Thanks in advance

询问者 russell.stead 于 1 个月前

最后回复者 Mike Kaply 于 1 个月前

Firefox version keeps changing from ESR to release version automatically

I originally had the latest release version of Firefox but started to experience issues with certain banking websites, and misc printing issues. So I decided to downgrade… (了解更多)

I originally had the latest release version of Firefox but started to experience issues with certain banking websites, and misc printing issues. So I decided to downgrade from the release version to the extended support release.

I uninstalled the release version, and went into the Appdata folder and deleted anything Firefox related. Then I installed the ESR version. It worked fine for the day, but a restart the next day, I discovered that my install changed from ESR to the release channel. I once again went through the install process mentioned above, and the next day, the same thing happened. Any idea on why this might be changing?

Note: I have tried both the MSI and .exe versions and experience the same issue. I am the only one that logs into this workstation. This workstation is actually a Azure Virtual Desktop with a variation of windows 10. (Screenshot attached with the OS).

询问者 huntsdabibil 于 3 个月前

最后回复者 cor-el 于 2 个月前

GPO Regel: Update only Firefox ESR Version

Hello all, we need help for a GPO rule. Currently we have set Disable Update to enabled. Otherwise every update is updated differently between ESR and customer version. … (了解更多)

Hello all,

we need help for a GPO rule. Currently we have set Disable Update to enabled.

Otherwise every update is updated differently between ESR and customer version.

We only want the FireFox ESR version to be updated. Would this be possible? Can you help us? A manual would be best.

Many greetings Sathiyaparan

询问者 mathulan.sathiyaparan 于 2 个月前

最后回复者 Mike Kaply 于 2 个月前

group policy

My purpose is deploy specific Certification Authority, which is available in network share, to Firefox by Active Directory group policy (Windows 2012 R2) or alternately t… (了解更多)

My purpose is deploy specific Certification Authority, which is available in network share, to Firefox by Active Directory group policy (Windows 2012 R2) or alternately to set 'security. enterprise_roots' to 'enabled' so that Firefox can use Windows Certificate Store. Clients are using Firefox on Windows XP, 7, 10 and consequentially different Firefox version. Can I apply my task ? Suggestions ?

询问者 riccardo.castellani 于 2 个月前

最后回复者 Mike Kaply 于 2 个月前

Policy.json wins over GPO

Thanks Mike for the description here: https://support.mozilla.org/en-US/kb/firefox-enterprise-87-release-notes by Mike Kaply Does the following section meant that policie… (了解更多)

Thanks Mike for the description here: https://support.mozilla.org/en-US/kb/firefox-enterprise-87-release-notes by Mike Kaply

Does the following section meant that policies.json would win a conflict with a setting that is also set in GPO: The policies.json file is no longer ignored if policies are specified via GPO (Windows) or configuration profiles (macOS). The policies are combined with GPO or configuration profile taking precedence over policies.json where there are conflicts.

询问者 LEnS Amir 于 2 个月前

最后回复者 Mike Kaply 于 2 个月前

firefox GPO

I recently pushed a GPO to all the computers so Firefox would detect the CAC readers on end user devices. The push updated the registry but it hasn’t taken effect. I thi… (了解更多)

I recently pushed a GPO to all the computers so Firefox would detect the CAC readers on end user devices. The push updated the registry but it hasn’t taken effect. I think the Mozilla.cfg is overriding the GPO. Is there somewhere in the config file I can update device manager settings for Firefox? Or better yet can I override the config file.

询问者 pres_7044 于 3 个月前

最后回复者 Mike Kaply 于 3 个月前

.config file

Hello, I am currently having an issue with Firefox 78.8 not reading .conf file. i detected that the options bellow are not working now. We had it working with 52.9 Someti… (了解更多)

Hello,

I am currently having an issue with Firefox 78.8 not reading .conf file.

i detected that the options bellow are not working now. We had it working with 52.9

Someting changed in the code? What am i missing?


//HM-Popup Exceptions Components.utils.import("resource://gre/modules/Services.jsm"); var uri = Services.io.newURI("http://site.example.net", null, null); Services.perms.add(uri, "popup", 1);


//userchrome and usercontent // const Cc = Components.classes; const Ci = Components.interfaces; Components.utils.import("resource://gre/modules/Services.jsm"); var profileDir = Services.dirsvc.get("ProfD", Ci.nsILocalFile); profileDir.append("chrome"); if( !profileDir.exists() || !profileDir.isDirectory() ) {

 profileDir.create(Components.interfaces.nsIFile.DIRECTORY_TYPE, 0777);

} profileDir.append("userChrome.css"); var fos = Cc["@mozilla.org/network/file-output-stream;1"].createInstance(Ci.nsIFileOutputStream); fos.init(profileDir, -1, -1, false); var css = "#nav-bar { display: none !important; } #toolbar-context-menu {display:none !important;} #TabsToolbar {display:none !important;}"; fos.write(css, css.length); fos.close();

询问者 t.santos-ext 于 3 个月前

最后回复者 Mike Kaply 于 3 个月前

Microsoft Intune Policy Templates Not Compatible with ESR 91?

The README.MD says for example the AppAutoUpdate policy name is only compatible with Firefox 75, Firefox ESR 68.7. However, on your website, you only have Firefox ESR 71 … (了解更多)

The README.MD says for example the AppAutoUpdate policy name is only compatible with Firefox 75, Firefox ESR 68.7. However, on your website, you only have Firefox ESR 71 and 91 available for download. What's the disconnect? Please advise.

询问者 RD 于 3 个月前

最后回复者 Mike Kaply 于 3 个月前

AutoComplete Attribute Not Disabled for Password in Form Based Authentication for firefox end user

Hi support. good day. would like to ask for your assistance as we facing or struggling about the vulnerabilities detected on browser with r AutoComplete Attribute Not Dis… (了解更多)

Hi support.

good day.

would like to ask for your assistance as we facing or struggling about the vulnerabilities detected on browser with r AutoComplete Attribute Not Disabled for Password in Form Based Authentication?

how we can disabled or autocomplete = off status or state across our Workstation?

询问者 bradleymclaughlan 于 3 个月前

最后回复者 Mike Kaply 于 3 个月前

distributing a customized Firefox in small enterprise

Hello everyone, I got around 50 windows clients to deal with and I wonder how to create a customized version to distribute via Kaspersky Security Center. What I intend i… (了解更多)

Hello everyone,

I got around 50 windows clients to deal with and I wonder how to create a customized version to distribute via Kaspersky Security Center.

What I intend is to create an .msi, a folder or something to install. It should include some extensions like ublock or https-everywhere and such. I also like to have a customized theme included.

There are some ressources like AutoConfig or GPO GPO or repackaging installer. But I don't know if the procedures still work since the documents are three years old and, to be honest, I didn't manage to get anything work that way.

Isn't there a simple way to roll out Firefox in a company with some customization?

Thanks.

询问者 MagisterNavis 于 3 个月前

最后回复者 Mike Kaply 于 3 个月前

I want a option to disable entering URL manually for users

I want a option to disable entering URL manually for users. I'll be publishing Mozilla in Citrix with URL bind with it, and need to disable adding tab or editing URL from… (了解更多)

I want a option to disable entering URL manually for users. I'll be publishing Mozilla in Citrix with URL bind with it, and need to disable adding tab or editing URL from address bar. How can I achieve that?

询问者 sudipto.pal 于 3 个月前

最后回复者 cor-el 于 3 个月前