Your browser is being managed by your organization message in Settings, but can't remove ImportEnterpriseRoots from FireFox.
When I go into Settings, I see the following message at the top:
"Your browser is being managed by your organization."
I've never seen this before. Going into about:policies, this is what I see:
ImportEnterpriseRoots
It's the only one there. My searches have told me that this should only appear if you're not an admin and it's on a work computer. But I am the admin and my computer is a home one, not a work one so this message shouldn't be there. I have looked up around here to find out how to disable/remove this and I did the following:
I found and followed these solutions here: https://support.mozilla.org/en-US/questions/1434356 https://winaero.com/remove-your-browser-is-being-managed-by-your-organization-from-firefox/ https://www.minitool.com/news/firefox-your-browser-is-managed-by-your-organization.html
Where I made a backup of the Registry and went in to delete ImportEnterpriseRoots. I restarted Firefox afterwards, and when I checked it was removed. I restarted my computer just to be sure that it was removed, but upon restart the message appeared again and ImportEnterpriseRoots reappeared.
I then checked out these solutions: https://support.mozilla.org/en-US/kb/how-disable-enterprise-roots-preference https://support.mozilla.org/eu/questions/1313379
Where I go to about:config the "security.certerrors.mitm.auto_enable_enterprise_roots" can be disabled, but the "security.enterprise_roots.enabled" is grayed out and I can't disable it at all. The solution above mentions that this can be caused by your anti virus. I tried disabling "https scanning" and "QUIC/http3" under Norton's Safe Web option, but this did nothing. I'm planning on removing Norton soon once my sub runs out and I know Norton is doing this to Firefox, so I'm concerned that if I don't remove this when I do an uninstall it will screw up Firefox or my computer. I've tried asking the Norton forums and they only offered the solutions above that I tried and they didn't work at all.
How do I remove the "Your browser is being managed by your organization." message and ImportEnterpriseRoots from Firefox if these solutions don't work?
所有回覆 (8)
Seeing the "Your browser is being managed by your organization" notification at the top of the Settings page is usually caused by security software that uses GPO policy rules or uses a policies.json file in the distribution folder in the profile folder to inject their root certificate (ImportEnterpriseRoots) in Firefox to be able to hook into your internet connection to prevent getting a connection not trusted error message.
You can click the "Your browser is being managed by your organization" notification or open the about:policies page via the address bar to see if policies are active and if errors are reported.
cor-el said
Seeing the "Your browser is being managed by your organization" notification at the top of the Settings page is usually caused by security software that uses GPO policy rules or uses a policies.json file in the distribution folder in the profile folder to inject their root certificate (ImportEnterpriseRoots) in Firefox to be able to hook into your internet connection to prevent getting a connection not trusted error message. You can click the "Your browser is being managed by your organization" notification or open the about:policies page via the address bar to see if policies are active and if errors are reported.
There's no policies.json file causing this, I already checked that based on the links in my post. I also already checked about:policies and see that "ImportEnterpriseRoots" is active/true.
What security software do you have since this policy is usually set via GPO rules in the Windows Registry?
- HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Mozilla\Firefox\
cor-el said
What security software do you have since this policy is usually set via GPO rules in the Windows Registry?
- HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Mozilla\Firefox\
If you read my original post, I mention that I have Norton and that I know its the one doing this.
Norton will set this policy as long as you allow it to scan your internet traffic and inject its own certificate in the certificate chain, otherwise you would get messages that your connection isn't trusted.
cor-el said
Norton will set this policy as long as you allow it to scan your internet traffic and inject its own certificate in the certificate chain, otherwise you would get messages that your connection isn't trusted.
Is there a way to remove this at all?
Sure, you can disable the browser protection feature of the antivirus. Not sure if this information is up-to-date, but I found this comment showing where to find the feature: https://community.norton.com/t/need-to-disable-browser-protection-due-to-false-positives/251261/6
Balázs Meskó said
Sure, you can disable the browser protection feature of the antivirus. Not sure if this information is up-to-date, but I found this comment showing where to find the feature: https://community.norton.com/t/need-to-disable-browser-protection-due-to-false-positives/251261/6
Do I have to turn off everything under that option, remove the ImportEnterpriseRoots from the Registry again, and then restart my computer to make sure it's removed from Firefox?