Yonke imikhiqizo Community Forum

Hello,

We are trying to automate updating Firefox ESR from 32bit to 64bit. There seems to be an issue with getting user's profiles to properly migrate for ESR. If we do a plain 32bit uninstall and 64bit installation, a new "default-esr-1" profile gets created (which is expected behavior from these Mozilla docs for new installs). But, when we set the MOZ_LEGACY_PROFILES=1 policy, this reverts to using the "default" profile instead of "default-esr" profile that was previously in use.

Are there any known ways around this which does not require user intervention to manually change back to the "default-esr" profile?

Thank you

I am going to deploy Firefox ESR in an environment where the default topsites provided by the top-sites.json included in omni.ja (namely Wikipedia, youtube and reddit) are not desirable, and I want to provide my own. I cannot find a way to do so.

Setting the browser.newtabpage.activity-stream.default.sites preference through the policies.json file does not work (the pref gets loaded but it does not influence the actual default topsites, which is not surprising since the default value of this pref has nothing to do with the actual default topsites).

Note that I am not seeking to remove the topsites from the homepage entirely (as would be achieved through the FirefoxHome/TopSites policy), I want to change the default ones.

I tried creating my own top-sites.json in /lib/firefox-esr/browser/ where omni.ja resides, but to no avail.

Hi, we use Firefox 128.9.0esr (64bit) on about 6000 workstations. We redirect the stored bookmarks on a personal network drive for each user. For that we use these settings via Windows group policy:

browser.bookmarks.file = P:\Firefox\Bookmarks browser.bookmarks.autoExportHTML = true browser.places.importBookmarksHTML = true

For some time the automatic export/import with that settings above does not work any more. When I close Firefox on workstation A, the bookmarks seem to be exported correctly in that export-file (check the file via editor). But when I use another workstation B an start Firefox, the exported file does not import on startup. But this worked fine in the past.

I found out, that the switch "browser.places.importBookmarksHTML" is obviously automtically set to false when I have startet Firefox (checking with about:config). I dont know if it is correct.

Any suggestions? Maybe it's a new bug?

Thanks Malte

I am trying to manage Firefox browser for our users with MDM. On doing so, I can't able to get expected output on blocking the camera access for certain websites with the following OMA-URI.

./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Camera/Camera_Block

I can add websites in allow section and even lock the setting so that the users can't change. But facing issues with blocking camera access.

Is there any place where I can see the log if there are any error encountering by any chance? Any insights or suggestions would be greatly appreciated.

Thanks in advance!

Hi team,

I am trying to deploy policy form intune to turn off enhanced tracking mode for firefox. Followed the guide from firefox: about:policies#documentation --https://mozilla.github.io/policy-templates/#enabletrackingprotection Windows (Intune)

OMA-URI:

./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/A_TrackingProtection_Value

Value (string):

<enabled/> or <disabled/>

OMA-URI:

./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/B_TrackingProtection_Cryptomining

Value (string):

<enabled/> or <disabled/>

OMA-URI:

./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/C_TrackingProtection_Fingerprinting

Value (string):

<enabled/> or <disabled/>

OMA-URI:

./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/D_TrackingProtection_Exceptions

Value (string):

<enabled/> <data id="TrackingProtection_Exceptions" value="1https://example.com"/>

OMA-URI:

./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/E_TrackingProtection_Locked

Value (string):

<enabled/> or <disabled/>

I tried to add the OMA-URI as string and add <enabled/> <data id="TrackingProtection_Exceptions" value="1https://example.com"/>. The policy saves but errors on delpoying to device. Changed it to string XML with xml content like this: <data id="TrackingProtection_Exceptions" value="1https://www.example.com"/>, this seems to be deloyed since it says successful however when checking on about: policies it does not seem to be applying. Can I please get some help. We need to whitelist some websites to turn off enhanced trackign mode. Please Help.

Hello,

For enterprise solutions, for our browser extension can we disable the switch button where user can turn-off the "Access your data for all websites"?

This can be informed to the end user and also approved by the IT admins.

But the option to disable at runtime on the fly needs to be disabled.

I have received the .xpi file from LabStats and verified that the Firefox ADMX Templates are on the DC. I'm having trouble getting this to work though. Can I have someone look over the settings in case I missed something obvious? The GPO is enabled and set to a test group of PCs. I have ran GPupdate /Force each time I make a change and then checked about:policies & about:addons and never see LabStats show up. Thanks,

Hello everyone,

We have been using Mozilla Firefox ESR (32-bit) in the organization for several years. For installation on our clients, we use "Matrix42 Empirum" as the software distribution tool. All it does is install the MSI of Firefox.

However, for quite some time now (almost 2 years), we have been facing an issue where some installations are marked as successful (Error code 0), but once the MSI installer is automatically closed, files like "firefox.exe" disappear from the installation directory – despite the installation being marked as successful.

The problem doesn’t always occur, but a repair attempt usually resolves the issue.

In addition to Empirum, we also use Defender for Endpoint, but we couldn’t find any clues there.

Is this problem known, or are we the only ones experiencing it?

When a user logs onto the PC, FF creates the Task scheduler folder but not the task inside. This only get created once the user opens FF for the first time.

So as an admin how would I manage the updates for FF when the user never opens Firefox?

We are currently considering using Firefox ESR as our default browser but experiencing a few issues and one of them is with our configured SailPoint IdentityIQ Single Sign-On Experience, which uses Basic Authentication.

Issue Description First, the login button needs to be clicked multiple times before access to the site is granted. Once signed in, the Firefox inbuilt authentication dialogue appears, prompting the user to log in again (see the attached screenshot). The landing page is only presented after clicking the login button several times. This creates a poor user experience, sometimes causing pages to load improperly. Interestingly, the same process works seamlessly in Edge Chromium.

Troubleshooting Steps Taken I have already attempted the following: 1. Temporarily disabled all custom and security settings in mozilla.cfg and config.json. 2. Temporarily disabled Firefox Tracking Protection. 3. Allowed third-party cookies for the specific URL. 4. Upgraded Firefox Version to 128.7.0 5. Since our Firefox browser is significantly hardened, I have also enabled and reconfigured the following settings in mozilla.cfg to ensure Basic Authentication is allowed, functions properly, and suppresses Firefox’s authentication prompt, but without success:

network.http.phishy-userpass-length = 255 network.http.use-basic-auth network.automatic-ntlm-auth.allow-non-fqdn network.automatic-ntlm-auth.trusted-uris security.enterprise_roots.enabled security.enterprise_roots.enabled

Observations from SailPoint Team Our colleagues from SailPoint have tested the setup in their environment, and according to them, it works as expected. However, their browser is not hardened, and they have leveraged the SailPoint UI for authentication instead of the built-in Firefox authentication prompt.

Further Investigation • Is there a specific configuration required in the user profile settings? • Network trace analysis shows 404 errors on GET requests and the following error codes on POST requests: • 302 Redirect: Mozilla Documentation • 408 Request Timeout: Mozilla Documentation

Next Steps Is there a specific security setting that needs to be enabled or disabled? Are there any particular Firefox enterprise policies we should modify? I have also attached screenshots for reference. Let me know if you need specific logs or network traces for further troubleshooting.

Using group policy there is various settings required for our users. We have been using the preferences policy located at: Administrative Templates > Mozilla > Firefox > Preferences

This policy requires the use of JSON, we have been using the following which has been working ok:

{ "media.navigator.permission.disabled": { "Value": true, "Status": "user" }, "browser.warnOnQuit": { "Value": true, "Status": "user" }, "keyword.enabled": { "Value": false, "Status": "user" }, "browser.tabs.unloadOnLowMemory": { "Value": false, "Status": "user" }, }

Within the old "Preferences (Deprecated)" there is a setting called "intl.accept_languages" which we are wanting to use but I can't seem to find a way to include this within the JSON. We are wanting to set it to "en-GB".

If I enable this within the old deprecated preferences section it causes the Preferences with the JSON to stop working.

I have tried various combinations of including it within the JSON but neither are working:

"intl.accept_languages": { "Value": en-GB, "Status": "user" }

"intl.accept.languages": { "Value": en-GB, "Status": "user" }

I've checked the Mozilla website here: https://mozilla.github.io/policy-templates/ There doesn't seem to be any reference for the intl.accept_languages setting to be used within the JSON

Please can someone advise?

Dear Mozilla Firefox Team,

I hope this message finds you well.

We manage a network of workstations that frequently utilize the Mozilla Firefox browser. Recently, we have encountered a situation where many of our systems are showing vulnerabilities due to pending browser updates. The updates are being installed successfully; however, users often neglect to restart the browser, which is crucial for completing the update process and ensuring security.

To address this, we would like to inquire if there is an existing Group Policy that can be configured to automatically notify users when they need to restart their Firefox browser to apply the latest updates. Such a feature would greatly assist us in maintaining the security integrity of our workstations and ensuring that users are made aware of the importance of restarting their browsers when prompted.

If this functionality is not currently available, we would appreciate any insights on potential workarounds or future plans to incorporate such a feature.

Thank you for your attention to this matter. We look forward to your response.

Dear Mozilla Firefox Team,

I hope this message finds you well.

We manage a network of workstations that frequently utilize the Mozilla Firefox browser. Recently, we have encountered a situation where many of our systems are showing vulnerabilities due to pending browser updates. The updates are being installed successfully; however, users often neglect to restart the browser, which is crucial for completing the update process and ensuring security.

To address this, we would like to inquire if there is an existing Group Policy that can be configured to automatically notify users when they need to restart their Firefox browser to apply the latest updates. Such a feature would greatly assist us in maintaining the security integrity of our workstations and ensuring that users are made aware of the importance of restarting their browsers when prompted.

If this functionality is not currently available, we would appreciate any insights on potential workarounds or future plans to incorporate such a feature.

Thank you for your attention to this matter. We look forward to your response.

I'm developing a parental control add-on, installed with policies.json. It works... but it's easy to disable it by simply deactivating it in private windows + opening a private window, which kinda makes it useless.

Is there a way to force my add-on to work in private windows, regardless of user choice?

If that's not possible, is it possible to somehow disable private windows while the add-on is disabled in private windows.

Note: I know that I can disable private browsing entirely with policies.json `privatebrowsingmodeavailability`, but I'd rather avoid it. Kids browing privately is a good idea :)

Form History Control (II) FoxyProxy Standard

These 2 extensions just installed themselves in Firefox ESR and disabled ALL my current extensions!!? I can't seem to remove them either.. please help!

I'm running Parrot OS (Linux) and had just signed myself in @hackthebox.com , which is a friendly place where people can learn to develop their cybersecurity skills. security on this site should be great, i don't know if this could be the issue...

Thanks in regards!