Disable Firefox Password Manager Completely via plist

Attempting to disable FF Password manager completely for my org via a plist. Currently have the password manager itself disabled but can't figure out how to disable the … (了解更多)

Attempting to disable FF Password manager completely for my org via a plist.

Currently have the password manager itself disabled but can't figure out how to disable the Auto-fill settings with previously saved passwords prior to the password manager being disabled?

Is this possible? Or is this disabled already when the password manager itself is disabled?

Currently have this set via a plist:

<key>PasswordManagerEnabled</key> <false/>

Matthew L 于 2 天前提问

最后由 Mike Kaply 于 1 天前回复

Assistance Needed with Firefox Browser and Group Policy Settings

Hi there, We are currently utilizing Windows Server 2019 as our development server. To maintain security protocols, we have implemented a Group Policy to block internet … (了解更多)

Hi there,

We are currently utilizing Windows Server 2019 as our development server. To maintain security protocols, we have implemented a Group Policy to block internet access on this server. Initially, this configuration successfully restricted internet access on all browsers, including Firefox. However, recently we encountered an issue where internet access became available solely through the Firefox browser, posing a significant data security risk.

Upon investigation, we discovered that Firefox allows users to modify proxy settings, effectively bypassing our Group Policy restrictions. Unlike other browsers, Firefox permits users to adjust proxy settings without sufficient rights, thus overriding our established restrictions.

To mitigate this issue, we require guidance on enforcing Group Policy settings within Firefox to prevent unauthorized alterations to proxy settings and ensure internet access remains restricted. It's important to note that Firefox is exclusively utilized for development purposes on our server.

Your assistance in resolving this matter would be greatly appreciated.

Regards, Hiten

hitenj.trivedi 于 3 天前提问

最后由 Mike Kaply 于 1 天前回复

Trigger Update through command line or script

Is there a way to trigger a Firefox browser update through command line or script? I need to trigger an update across a few hundered computers and I can do this, but thr… (了解更多)

Is there a way to trigger a Firefox browser update through command line or script? I need to trigger an update across a few hundered computers and I can do this, but through command line or script automation. What is the command line syntax to do this, if there is any?

Thank you for your help

pcdl 于 3 天前提问

最后由 cor-el 于 3 天前回复

CyberArk Extension ID

I'm looking to allow the CyberArk extension for FireFox, via our GPO. I am not seeing the application ID for the extension, which is needed. I'm hoping that you folks ca… (了解更多)

I'm looking to allow the CyberArk extension for FireFox, via our GPO. I am not seeing the application ID for the extension, which is needed.

I'm hoping that you folks can provide that ID.

Thanks!

dlacivita 于 2 周前提问

最后由 cor-el 于 2 周前回复

I am working for an Organization.

HI Team, I am working for an organization, members have different versions installed and need help to uninstall the Firefox completely, Member able to see the applicatio… (了解更多)

HI Team,

I am working for an organization, members have different versions installed and need help to uninstall the Firefox completely, Member able to see the application installed in Apps and features and but files do not exist in program files or program files x86, please someone please contact me for my queries [removed phone# from support forum]. my email id [edited] @gmail.com

The script is not removing the application

IF EXIST "%ProgramFiles%\Mozilla Firefox\" ( "%ProgramFiles%\Mozilla Firefox\uninstall\helper.exe" /s )

IF EXIST "%Program Files (x86)%\Mozilla Firefox\" ( "%Program Files (x86)%\Mozilla Firefox\uninstall\helper.exe" /s )

siji monish karial 于 2 周前提问

最后由 Mike Kaply 于 2 周前回复

Disable Save menu entry from Firefox built-in PDF Viewer on local Linux system

I would like to prevent users to navigate on the Linux system when they view a PDF and then use the Save option. The "PDFjs" policy enables or disables the PDF Viewer but… (了解更多)

I would like to prevent users to navigate on the Linux system when they view a PDF and then use the Save option. The "PDFjs" policy enables or disables the PDF Viewer but does not control the built-in PDF Viewer menus.

InfoMaze 于 3 个月前提问

最后由 zeroknight 于 3 周前回复

FireFox Extension Error

I have imported the ADMX and tried to add an extension but it does not appear. So I imported the admx and this is working because I have another custom oma-uri that sets … (了解更多)

I have imported the ADMX and tried to add an extension but it does not appear. So I imported the admx and this is working because I have another custom oma-uri that sets the home pages.

Here is what I have for my custom oma-uri to try and get the 1password extension added to FireFox. It is coming back with an error, Any recommendations? Name: Extensions_Install OMA-URI: ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/Extensions_Install Data Type: String Value: <enabled/> <data id=”Extensions” value=”1\https://addons.mozilla.org/en-US/firefox/addon/1password-x-password-manager”/>

dj56 于 1 个月前提问

最后由 Mike Kaply 于 4 周前回复

Looking to customize Firefox application via Intune Plist

Looking to specify homepage, homepage button, and new tab page within Firefox on our Mac fleet. I was able to create a plist file for macs, and it was "deployed successf… (了解更多)

Looking to specify homepage, homepage button, and new tab page within Firefox on our Mac fleet.

I was able to create a plist file for macs, and it was "deployed successfully" according to Intune, but no changes actually happened on my test machines.

I've uploaded a redacted version of the used plist.

Anyone out there have any ideas?

jmajors50 于 1 个月前提问

最后由 Mike Kaply 于 1 个月前回复

Saving passwords for specific websites GPO

Dear Forum, Maybe this has been already asked but i keep getting the quite opposite when searching. is there a way that i can save passwords, for autofill purposes, for… (了解更多)

Dear Forum,

Maybe this has been already asked but i keep getting the quite opposite when searching.

is there a way that i can save passwords, for autofill purposes, for specific websites in Firefox using GPO?.

I have 4 computers, that are currently deployed with Firefox and all 4 should be able to login to a specific website with a given username and password. I would like to set the username and password for them stored in the Firefox password manager and let it autofill it for them when going to the given website.

Or should i do this using the created shortcut they received, deployed to their systems using GPO?

Thank you in advanced.

cbraafhart 于 1 个月前提问

最后由 Mike Kaply 于 1 个月前回复

Best Way to force firefox update without opening the application

We are currently looking at devices with out-of-date Firefox versions these are listed with vulnerabilities within our environment and need to be patched to the latest ve… (了解更多)

We are currently looking at devices with out-of-date Firefox versions these are listed with vulnerabilities within our environment and need to be patched to the latest version to cover those vulnerabilities.

With the volume of patching required, we want to be able to enable auto-update and allow the application to patch itself.

However, the current options via group policy don't seem to work as I've read on such threads https://bugzilla.mozilla.org/show_bug.cgi?id=1876302.

The application Autoupdate has been enabled within local group policy as a test and nothing seems to force the application to update unless a user enters the application and selects about.

Reading into how Firefox does this it doesn't seem viable to enable an auto-update feature without specifying the version it needs to upgrade to, we can currently patch to specific versions using SCCM.

Is anyone aware of a solution to this problem or another method?

Looked into calling updater.exe and the maintenance service but nothing i successful when trying to call on these.

oliver.gillman 于 1 个月前提问

最后由 zeroknight 于 1 个月前回复

Proxy not working

Hello, from Terminal Servers, it is not possible to browse the Internet via FortiGate's explicit proxy from the Firefox browser, while there is no problem with Chrome or … (了解更多)

Hello, from Terminal Servers, it is not possible to browse the Internet via FortiGate's explicit proxy from the Firefox browser, while there is no problem with Chrome or Edge. When the user tries to browse external sites, the proxy sends the error page "You need to authenticate to use this service". It seems that Firefox does not pass user authentication to FortiGate. The proxy authenticates users per session via Kerberos tickets.

Firefox version: 115.5.0esr

I also performed the following settings to pass the Kerberos ticket to the proxy without success: https://people.redhat.com/mikeb/negotiate/

I also noticed that it is not possible to change the "network.negotiate-auth.allow-proxies" setting from "false" to "true." Is this my problem? Is it normal that it cannot be changed?

Attached are the settings.

Thank you in advance.

akas89 于 4 个月前提问

最后由 Mike Kaply 于 1 个月前回复

How to disable welcome back notification?

Seems to be new in 122.0 because i never received that before. It asks if you want to open links with Firefox and if you do, it sets file associations for htm / html and … (了解更多)

Seems to be new in 122.0 because i never received that before. It asks if you want to open links with Firefox and if you do, it sets file associations for htm / html and things like that. However in a company environment i want to supress that notification

Tynth 于 2 个月前提问

最后由 Mike Kaply 于 2 个月前回复

GPO, Reg Key, Nothing works to force add/install an extension.

I am writing from an enterprise environment and I have been directed to the community page by Mozilla support to seek answers. This approach seems somewhat unreasonable f… (了解更多)

I am writing from an enterprise environment and I have been directed to the community page by Mozilla support to seek answers. This approach seems somewhat unreasonable for an enterprise setting and it has led me to consider discontinuing their product within our organization. I had requested support to send me a copy of my previous correspondence as I had forgotten some details, but this request was ignored, which is disappointing.

I am skeptical about receiving the help or answers I need here. If there is a more direct line to Mozilla support, I would greatly appreciate being redirected there.

We are currently using Firefox 121.0 and are attempting to implement the Applied Epic extension. I have updated the ADMX policy.

Originally, the reg key flip I created did work but something has changed since then. See screenshot of this. I followed the guide provided at https://github.com/mozilla/policy-templates/blob/v5.5/docs/index.md, which instructed me to place the registry key in Software\Policies\Mozilla\Firefox\Extensions\Install\1. However, the guide did not specify whether this should be in HKLM or HKCU. I tried this instead, and it did not work.

I also attempted to implement the extension via GPO, but this was unsuccessful. I tried the new Extension Management system as well, but to no avail.

Here is the JSON configuration I used: {

 "AppliedEpicExtension@gmail.com": {
   "installation_mode": "force_installed",
   "install_url": "https://addons.mozilla.org/firefox/downloads/file/4143256/applied_epic_extension-3.16.3.xpi"
 }

}

Despite following the guide and trying multiple methods, none of the options seem to work. I would appreciate any guidance on what I might be doing wrong.

BM 于 3 个月前提问

最后由 Mike Kaply 于 2 个月前回复

Fail to update firefox

We're exploring the possibility of implementing a mass update for Firefox through backend management, leveraging PowerShell scripts or any applicable method that can stre… (了解更多)

We're exploring the possibility of implementing a mass update for Firefox through backend management, leveraging PowerShell scripts or any applicable method that can streamline the update process for our users.

Additionally, we've encountered instances where users have installed Firefox via local profiles, posing challenges for centralized updates. I'd appreciate any insights or guidance on how we can address this issue effectively to ensure these installations align with our centralized management approach.

slimmonkey 于 3 个月前提问

最后由 Mike Kaply 于 3 个月前回复

Bypass UAC prompts through GPO settings

We are currently attempting to automate our Firefox update processes. Currently we use robocopy to push out new versions on release, but ideally we'd like to use the back… (了解更多)

We are currently attempting to automate our Firefox update processes. Currently we use robocopy to push out new versions on release, but ideally we'd like to use the background updater instead. We are currently on 64-bit 119.0.1, on Windows 10 Pro 22H2. We'd prefer not to switch over to ESR if at all possible. I've already reactivated the AppAutoUpdate and BackgroundAppUpdate policies, and DisableAppUpdate is disabled, but I'm still being hit with a UAC Admin prompt when I try to launch Firefox. I tried to bypass it through the registry at [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers], with "C:\Program Files\Mozilla Firefox\firefox.exe" = "RUNASINVOKER", but that also doesn't seem to have done anything. Any and all assistance would be appreciated

ddrake1 于 4 个月前提问

最后由 Mike Kaply 于 3 个月前回复

Automatic updates

We have recently enabled background updates in our organization, however I noticed that a requirement for this to work is that Firefox needs to be run with the default pr… (了解更多)

We have recently enabled background updates in our organization, however I noticed that a requirement for this to work is that Firefox needs to be run with the default profile at least once after the feature is enabled. The issue we have is that not all users are actively using Firefox and therefore they are not being updated. I realize the security flaws won't be exposed if it's not in use, but management doesn't like seeing out of date browsers. Is there a way to force auto updates on all device where Firefox isn't not being used. Background updating is working for the majority of those that do use Firefox.

Also, we do have a couple of users reporting a credential prompt when updating from 119 to 119.0.1. These same users had no issues updating from 118 to 119. I have not figured out why this is happening just yet and why only for a handful of users so far. Would anyone have an idea why that is happening?

rob.scott1 于 4 个月前提问

最后由 Mike Kaply 于 4 个月前回复

Configuration via Windows GPO -> exclude second Firefox installation

Hi, we want to switch our Firefox configuration from file-based (policies.json) to GPO-based. We rolled out the GPO on some test clients and it worked like a charm. But… (了解更多)

Hi,

we want to switch our Firefox configuration from file-based (policies.json) to GPO-based. We rolled out the GPO on some test clients and it worked like a charm.

But... It shows that there are some clients which need a second firefox installation for a special purpose, which is not allowed to enter the internet or update itself.

The file-base configuration can handle these to different installations with two differend policies.json files.

Is there a way to accomplish this scenario with the use of GPOs? The GPO-base configuration seems to be global for every client.

At this moment i don't see a solution for our problem. Do you see one?

maik.w 于 4 个月前提问

最后由 Mike Kaply 于 4 个月前回复

What does pref.browser.language.disable_button.remove do?

I am reviewing my user.js and pref.js files in anticipation of deploying policy settings in GPO. As a part of the review, I am trying to document what each of the prefere… (了解更多)

I am reviewing my user.js and pref.js files in anticipation of deploying policy settings in GPO. As a part of the review, I am trying to document what each of the preferences in those files actually do, in order to be able to see in the future why a setting was set the way it was.

I am presently at the preference "pref.browser.language.disable_button.remove". Based on the name of the preference, I would think that if set to true, it would disable the remove button in the Webpage Language Settings window. (Hamburger menu -> Settings -> General -> Language -> Choose your preferred language for displaying pages)

When I set it to true, it does not disable the remove button but when I use the remove button, the preference is set to false.

Am I misunderstanding the purpose of this preference or is there more to using this preference than just setting its value in about:config?

Also, I see there are a number of other preferences that contain disable_button but that only one, "pref.privacy.disable_button.view_passwords", has a GPO policy for setting. I would expect that these preferences containing disable_button would all work in a similar way just each for a different button in the Firefox GUI.

If it matters, I'm running Firefox 115.3.1esr 64-bit en-ca on Windows 10.

Numbers 于 5 个月前提问

最后由 Mike Kaply 于 5 个月前回复

Configure policies for Firefox

Hi there, We would like to disable ECH on our browsers as it is interfering with our Anti-virus Website blocks. I have identified the settings that need to be changed in… (了解更多)

Hi there,

We would like to disable ECH on our browsers as it is interfering with our Anti-virus Website blocks. I have identified the settings that need to be changed in about:config and was able to configure 2 of them to be controlled via a registry key but was not able to for another 3 as their keys should be placed in a different Key in the registry. I have searched all over but cannot identify the name for this Key.

The settings I need to manage are in the image. I was able to configure the settings beginning with network.dns but I am not sure how to manage the settings beginning with security.tls.ech

Any help would be much appreciated

Dhiren Hirani 于 5 个月前提问

最后由 Dennis Jackson 于 5 个月前回复