Firefox Enterprise Community Forum

I have Mozilla Firefox and Mozilla ESR browsers updates to manage across the devices. Policies have been configured on browser from Intune and same has been reflected everywhere in registry, and update.json file. still task is missing. can someone help on this. Also i have few ESR so will same ADMX file will work for that?

Hi all,

We use a service integration in our organization that only works in the latest ESR version of Firefox (140.14). The latest regular release breaks our integration due to added security policies preventing the software from communicating with Windows services.

After installing the ESR version and disabling auto updates in the settings and adding the DisableAppUpdate registry key, the software still keeps updating to 154 (not the ESR version). I've also chosen to not install the Mozilla Maintenance service when installing the ESR version. I can't seem to find any support articles of people having the same issue. Is there something I may be missing? Any help would be greatly appreciated.

Hello, we have the issue, that Firefox esr 153.1.0 crashes on opening urls. The crashes happen on several devices. These are the current crash-reports: bp-3e6bd41b-89b0-4a49-9479-90cbc0260831 bp-9bd858e0-2573-4a01-8bac-90c320260831 bp-ad358921-a24d-4e02-9ed5-2bc4d0260831 bp-0bfb15d0-b637-48b6-a445-94b350260831 bp-0dc0dbcb-fb77-4ce6-a1c0-659f40260831 bp-268bf05a-3eb7-493e-bd40-42e0c0260831 bp-3910ddb1-9dbd-4016-b421-0dd450260831

thanks for Help and advice.

Best Regards

Felix

Hi,

In the latest firefox update 154, no start pages are displayed that were distributed with a registry key via group policy. It only works again if you change this setting manually in the Firefox settings.

In Version 153 it´s fine.

Jan

I don't understand why auto:config is so difficult (for me at least) to create. Isn't there an easier way? I've tried following the directions and creating the 2 files. But I can't manage to successfully create auto:config.

I created and pasted the first tile into the prefs folder. For the 2nd, I noticed the firefox.cfg file I created in Notepad appended a .txt suffix. I pasted it into the Firefox top directory. Then typed auto:config into the address bar. Nothing happened. Can anyone tell what I did wrong? Is the .txt suffix not recognized? Or is there's an easier way to do this?

We are managing Firefox settings using Intune via Imported ADMX templates.

We are managing Extension Settings via 'Extension Management (JSON on one line)' which works fine for our force installs, force removals etc.

We have noticed that some users have installed 3rd party extensions which create the ExtensionSettings key in the registry with the 3rd party extension details.

The issue we see if when ExtensionSettings exists as a REG_SZ or REG_MULTI_SZ under `HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Mozilla\Firefox` it is then ignored if the `HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Mozilla\Firefox\ExtensionSettings` key exists.

Is there a setting we can use to have these settings merged by Firefox or have the REG_SZ/REG_MULTI_SZ take priority or is the only way to ensure enterprise policy continues to work we need to migrate our extension settings into the key rather than string?

Thanks!

we are using firefox std version in more than 15000 machines in our organisation, recentlty we migrated to all machines to ESR version, but now we are getting escallation, the application working very slow and not opening sometimes

Is there a blessed solution to the problem above? I'm sure we're not alone, but our end users are not admins. God forbid... So the official statement of "enter admin credentials" is not a plausable solution on managed systems. Providing a Reinstall Firefox on the users' selv service store is something we can do, but users are usually not fond of losing browser data. (I do konw about Firefox account to sync/restore) My question is more like as the problem roots back to permission problems, what would be the proper command(s) to fix permissions? I can run commands on the end users' comptuers in the background, as root/system user, or even as them of course. Thanks

Moderator note: Moved from the Firefox Desktop forum to the Firefox for Enterprise forum.

Hello,

I had seen this topic : https://support.mozilla.org/en-US/questions/1489702, i'am using a GPO to deploy an Lockself (password manager) extension on Firefox 152 on all computers in my company. I wanted to pin to navbar just this extension, because users will ask at first time where is it. I have changed the JSON to pin to navbar :

{

 "{ca613ee6-4211-4ae2-aa3c-d29608461d11}": {
   "installation_mode": "force_installed",
   "install_url": "https://addons.mozilla.org/firefox/downloads/latest/lockself-password-manager/latest.xpi",
   "updates_disabled": false,
   "default_area": navbar
 }

}

But when i reload the GPO on a test machine this GPO isn't applied.

So it seems the bug isn't solved ?

Thanks

Hi all,

Firefox 140.10.2esr Windows 11

Opened Firefox this morning and it said I was using an old version of Firefox and it couldn't load my profile. I have always used the esr version.

I had a look at the compatibility.ini file under my profile and it had version 150.xx. Is that a bug with the last update?

To recover I backed up my profile then changed the compatibility version to the version of Firefox I am using. I was able to load my profile and while all my bookmarks and settings are there, my saved credentials are not. The key4.db and logins.json file are both still under my profile folder, they just don't seem to be recognised; no errors. Viewing the logins.json shows my encrypted credentials.

Does anyone know what is going on and how to resolve?

thanks

j

Hello,

support.mozilla.org/kb/website-translation says, when you do not have downloaded translation packs, parts of the packs will be downloaded when you first use the translation function.

My questions about this feature: - How does this work exactly? - Will the words from the website which i try to translate be collected and "downloaded"? - How are the translation language packs parted? - What information will be used and sent to servers/cloud to request these parts of the translation packs?

Thank you in advance for your help.

Best Regards

Bjoern

Hi,

In the latest firefox update 149, no start pages are displayed that were distributed with a registry key via group policy. It only works again if you change this setting manually in the Firefox settings.

In Version 148 it´s fine.

Jan

Hi,

just downloaded the latest Policy Templates in Version 7.7 and installed them in our Central Policy Store. I went through all the settings but cannot find a configuration allowing us to block downloads of eg. executable files .

Even safebrowsing is not included to configure.

Any ideas?

I am trying to use group policy to block all extensions from being installed and only allow approved extensions.

I have followed the article:

https://firefox-admin-docs.mozilla.org/reference/policies/extensionsettings/

And here is my JSON config but it doesnt seem to be working and I can still install any extension.

{

 "*": { 

"blocked_install_message": "Please email the IT Helpdesk if you think an extension should be unblocked.", "installation_mode": "blocked" }, "com.abr.startapp@adminbyrequest.com": { "installation_mode": "force_installed", "install_url": "https://addons.mozilla.org/firefox/downloads/latest/admin-by-request/latest.xpi" } }

Please can anyone advise or confirm if this is a bug.

We are using firefox version 147.0.4 (64-bit)

Thanks

Hello, For FF on Linux running in KIOSK mode, is there a way to allow the user to perform a refresh like you can do in normal mode by pressing F5 ? This seems to be disabled in KIOSK mode.

Thank you, Tom

We are currently rolling out a profile management solution based on Ivanti User Environment Manager. In order to configure file includes and excludes in the profile management tool, we have to “standardize” the Firefox profile path in the filesystem. We have implemented a PowerShell script, which reads the currently used profile from %appdata%\Mozilla\Firefox\install.ini, renames the appropriate profile subfolder to “firefox.default-esr” and replaces the entries in installs.ini and profiles.ini.

The script seems to be reliable. However, for around 10% of the users, we are seeing issues when the user launches Firefox after the “firefox profile migration” happened. Firefox opens but none of the GUI controls is accessible. Firefox is completely unusable. See screenshot attached.

We do have workarounds to resolve this issue, such as completely wiping the %appdata%\Mozilla\Firefox folder and let Firefox re-build everything from scratch. But we are still trying to find the root cause the issue, because our customers have more than 100k clients, what will be a big impact and hard to handle for the helpdesk.

We are currently unable to reproduce the issue on test clients. Even copied Firefox profile folders form affected clients don’t show the issue on other clients.

Therefore we want to find out and ask for your help:

- Is there a supported way to “standardize” the filesystem folder name of the Mozilla Firefox (ESR) profile of a user? - What are the files within a Firefox profile that are required for the profile and the application itself to properly start? - Do you have any idea which files in a Firefox profile (in a corrupted state) could cause our issue?

Cree una política para filtrado web donde bloquea por ejemplo páginas de juegos de azar, sin embargo, varias páginas las está dejando abrir, para contrarestar eso, por medio de indicadores bloquee las páginas que deja pasar pero aún así está dejando abrir ciertas páginas, por ejemplo betplay, para solventar eso apliqué una política de filtrado web, para esto importé el admx de Mozilla, sin embargo en Mozilla todavía está dejando entrar a esa página.

I've been tasked with removing Firefox from all Windows workstations in our enterprise environment. Our users don't have local admin, so when they install Firefox, it is installed in the user's profile.

I've just installed Firefox 143.0.1 in my own user profile for testing purposes. However, when I attempt to uninstall, either from Control Panel or by running %localappdata%\Mozilla Firefox\uninstall\helper.exe manually, UAC prompts for elevation, even though I installed without elevating.

I've dug in a bit more, and I found this was an issue five years ago as well:

https://support.mozilla.org/en-US/questions/1286070

According to that post, the issue was resolved, but it seems to have come back.

Any help would be appreciated.