Re: [Mozilla Enterprise] Auto Creating firefox profile issue

[Éric Périard]

Looks like you have roaming profiles, make sure your systems are up to date...

It's essentially loading a newer profile into an older firefox build.

Eric

From: Enterprise  On Behalf Of JUSTIAA2
Sent: December 18, 2019 9:48 AM
To: enterprise@mozilla.org
Cc: jaa_1...@yahoo.com
Subject: [Mozilla Enterprise] Auto Creating firefox profile issue

Good Morning,

I have an issue where customers travel and have two different versions of 
Firefox on the workstations they log into.

Here is the scenario:

User A travelled to machine #1. It had Firefox 68.2.0 on it
User A travelled to machine #2. It had Firefox 68.3.0 on it. User opens Firefox.
User A traveled to machine #1. It still has Firefox 68.2.0 on it

The user then opens firefox and gets this error:

"Using an older version of Firefox can corrupt bookmarks and browsing history 
already saved to an existing Firefox profile. To protect your information, 
create a new profile for this installation of Firefox"

The problem with this is that we force Firefox to create the firefox profile 
using the name "firefox.default", with the settings that we have in place. How 
can we stop Firefox from launching this error message popping up or if the 
customer clicks on "Create New Profile" it won't wipe out all the customers 
bookmarks and settings. Also, I the customer clicks "Exit"they can't open 
Firefox. Any help will be greatly appreciated.


Justin Anderson
Software Engineer
CACI

___
Enterprise mailing list
Enterprise@mozilla.org
https://mail.mozilla.org/listinfo/enterprise

To unsubscribe from this list, please visit 
https://mail.mozilla.org/listinfo/enterprise or send an email to 
enterprise-requ...@mozilla.org with a subject of "unsubscribe"

Re: [Mozilla Enterprise] Firefox ESR 60.9 and Firefox ESR 68.1 released

[Éric Périard]

Classification: Unclassified

With the script below, with SCCM I detect both binary flags and registry keys 
and I can confirm this works 100% of the time for quite a few years now…


Éric Périard

Mission Network System Administrator | Administrateur de système du réseau de 
mission
Canadian Centre for Cyber Security | Centre canadien pour la cybersécurité
Email | Courriel: eric.peri...@cyber.gc.ca<mailto:eric.peri...@cyber.gc.ca>
Website | Site Web: https://www.cyber.gc.ca/
Government of Canada | Gouvernement du Canada

[cid:image002.png@01D4ADA3.F54E4950]


From: Éric Périard
Sent: Monday, September 9, 2019 7:39 AM
To: Gruhm, Sebastian ; enterprise@mozilla.org
Subject: RE: [Mozilla Enterprise] Firefox ESR 60.9 and Firefox ESR 68.1 released

Typo fixed >_<

From: Éric Périard
Sent: Monday, September 9, 2019 7:38 AM
To: Gruhm, Sebastian 
mailto:sebastian.gr...@fu-berlin.de>>; 
enterprise@mozilla.org<mailto:enterprise@mozilla.org>
Subject: RE: [Mozilla Enterprise] Firefox ESR 60.9 and Firefox ESR 68.1 released


TASKKILL /F /IM Firefox* /T



IF EXIST "%ProgramFiles%\Mozilla Firefox" (

"%ProgramFiles%\Mozilla Firefox\uninstall\helper.exe" -ms

"%WinDir%\System32\timeout.exe" /T 10 /NOBREAK

IF EXIST "%ProgramFiles%\Mozilla Firefox" (

RMDIR /S /Q "%ProgramFiles%\Mozilla Firefox"

)

DEL %Public%\Desktop\*Firefox*.lnk

RMDIR /S /Q "%ProgramData%\Microsoft\Windows\Start 
Menu\Programs\Mozilla Firefox"

REG DELETE HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla /F

REG DELETE HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins /F

REG DELETE HKEY_LOCAL_MACHINE\SOFTWARE\mozilla.org /F

)



IF EXIST "%ProgramFiles(x86)%\Mozilla Firefox" (

"%ProgramFiles(x86)%\%\Mozilla Firefox\uninstall\helper.exe" -ms

"%WinDir%\System32\timeout.exe" /T 10 /NOBREAK

IF EXIST "%ProgramFiles(x86)%\%\Mozilla Firefox" (

RMDIR /S /Q "%ProgramFiles(x86)%\Mozilla 
Firefox"

)

DEL %Public%\Desktop\*Firefox*.lnk

RMDIR /S /Q "%ProgramData%\Microsoft\Windows\Start 
Menu\Programs\Mozilla Firefox"

REG DELETE HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Mozilla /F

REG DELETE HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\mozilla.org 
/F

REG DELETE 
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins /F

)





IF EXIST "%ProgramFiles(x86)%\Mozilla Maintenance Service" (

"%ProgramFiles(x86)%\Mozilla Maintenance Service\Uninstall.exe" 
/S

"%WinDir%\System32\timeout.exe" /T 10 /NOBREAK

RMDIR /S /Q "%ProgramFiles(x86)%\Mozilla Maintenance Service"

)



"%WinDir%\System32\timeout.exe" /T 10 /NOBREAK

EXIT /B







Works 100% of the time for me.



-Original Message-
From: Enterprise 
mailto:enterprise-boun...@mozilla.org>> On 
Behalf Of Gruhm, Sebastian
Sent: Monday, September 9, 2019 2:17 AM
To: enterprise@mozilla.org<mailto:enterprise@mozilla.org>
Subject: Re: [Mozilla Enterprise] Firefox ESR 60.9 and Firefox ESR 68.1 released



But it is still half-baked because you can't use an MSI GUID to uninstall it. 
Because of that you have to carry the "Un_A.exe" with you (I never managed to 
uninstall FF silent with the "helper.exe").



Mit freundlichem Gruß



Sebastian





-Ursprüngliche Nachricht-

Von: Timo Pietilä mailto:timo.piet...@helsinki.fi>>

Gesendet: Freitag, 6. September 2019 10:46

An: enterprise@mozilla.org<mailto:enterprise@mozilla.org>

Betreff: Re: [Mozilla Enterprise] Firefox ESR 60.9 and Firefox ESR 68.1 released



I need to apologize about criticizing FF msi. This is by far the smartest 
exe-wrapper I have seen in my 10+ years of deploying software.

It just doesn't leave any trace of itself being msi in the machine. No crap 
left behind.



Every single exe-wrapper I have seen this far has been utter crap. Not this 
one. Only drawback I see is that you can't use its productcode as detection 
rule, but that is not really any issue. Just treat it like it was installed 
from .exe.



Whoever made this one should write a blog about it to teach other people how to 
make proper exe-wrapper. D*mn nice job.



Timo Pietilä



On 6.9.2019 10.40, Timo Pietilä wrote:

> If you can distribute FF without msi do so. That msi is a exe-wrapper

> and as such will create all kinds difficulties that pure .exe or

> proper .msi doesn't.

>

> Timo Pietilä

>

> On 6.9.2019 9.29, Alessio Gennari via Enterprise wrote:

>> Hello,

>> where ca I find msi package and GPO definition for

Re: [Mozilla Enterprise] Firefox Configuration Confusion - Need to Secure Firefox

[Éric Périard]

***Typo fix*** Not my day... :/

From: Enterprise  On Behalf Of Éric Périard
Sent: Monday, September 9, 2019 7:45 AM
To: Eddie Rowe ; enterprise@mozilla.org
Subject: Re: [Mozilla Enterprise] Firefox Configuration Confusion - Need to 
Secure Firefox

Classification: Unclassified

Agreed, for those of us who have been managing ESR in our environment it's not 
too bad, but for someone just stepping into the fold, it could become a 
roadblock of red tape... Google's approach is consistent and the templates 
don't change every 5 minutes.

However, keep in mind Eddie, that Mozilla has been doing actual admx/adml 
templates for little over a year now, so we're sort of the guineapig in all of 
this.

Back then, all you had were those ini's and autoconfig files and other tools to 
configure FF.

At the end of the day, Mozilla is a much smaller group than Google Inc and 
they're doing the best they can to help out enterprise users.

Speaking of other tools, check with Mike Kaply, he's got something you may be 
interested in ;)

Éric Périard

Mission Network System Administrator | Administrateur de système du réseau de 
mission
Canadian Centre for Cyber Security | Centre canadien pour la cybersécurité
Email | Courriel: eric.peri...@cyber.gc.ca<mailto:eric.peri...@cyber.gc.ca>
Website | Site Web: https://www.cyber.gc.ca/
Government of Canada | Gouvernement du Canada

[cid:image002.png@01D4ADA3.F54E4950]




From: Enterprise 
mailto:enterprise-boun...@mozilla.org>> On 
Behalf Of Eddie Rowe
Sent: Sunday, September 8, 2019 4:28 PM
To: enterprise@mozilla.org<mailto:enterprise@mozilla.org>
Subject: [Mozilla Enterprise] Firefox Configuration Confusion - Need to Secure 
Firefox

Given Mozilla's decision to turn on DNS over HTTPS we have to secure Firefox to 
disable this type of nonsense or remove it from every PC in the next two weeks. 
 Chrome is configured through an easy to manage GPO which leverages other 
really smart people who have created a security baseline along with 
preconfigured GPOs, while Firefox does not seem to have this level of support.

Assuming a  person is new to Firefox, exactly what are we supposed to modify to 
setup things securely?  I see references to things going into Mozilla.cfg, 
policies.json, GPO, autoconfig.js...I probably missed a file too.  I see people 
helpfully answering a question and telling the person to go to 
https://developer.mozilla.org/en-US/Firefox/Enterprise_deployment for the 
answer to their question, but there are just more links there.  I see people 
posting to not to bother with GPO because all the options are not there, but 
other say there are GPO settings that are no elsewhere... I see references that 
one thing is set one place, another place overrides...  I see one document say 
the autoconfig.js file goes into the folder where Firefox is installed, but the 
same document says it does into a subfolder...  I see references to setting 
preferences in the policies.json file, but I thought Mozilla.cfg was to be used 
for this?  Finally I see mention that there are preferences that are set in the 
source code that are not exposed to about:config?

Surely there is a simple one page document that walks you through this so we 
can spend a LIMITED amount of time sorting this out???

https://www.zdnet.com/article/mozilla-to-gradually-enable-dns-over-https-for-firefox-us-users-later-this-month/
 - Ready or not, here comes DNS over HTTPS to bypass all security you have 
using DNS to block dangerous sites.


___
Enterprise mailing list
Enterprise@mozilla.org
https://mail.mozilla.org/listinfo/enterprise

To unsubscribe from this list, please visit 
https://mail.mozilla.org/listinfo/enterprise or send an email to 
enterprise-requ...@mozilla.org with a subject of "unsubscribe"

Re: [Mozilla Enterprise] Firefox Configuration Confusion - Need to Secure Firefox

[Éric Périard]

Classification: Unclassified

Agreed, for those of us who have been managing ESR in our environment it's not 
too bad, but just stepping into the folder could become a roadblock of redtape 
for many... Google's approach is consistent and the templates don't change 
every 5 minutes.

Keep in mind Eddie, that Mozilla has been doing actually admx/adml templates 
for little over a year, so we're sort of the guineapig in all of this.

Back then, all you had were those ini's and autoconfig files and other tools to 
configure FF.

At the end of the day, Mozilla is a much smaller group than Google Inc and 
they're doing the best they can to help out enterprise users.

Éric Périard

Mission Network System Administrator | Administrateur de système du réseau de 
mission
Canadian Centre for Cyber Security | Centre canadien pour la cybersécurité
Email | Courriel: eric.peri...@cyber.gc.ca<mailto:eric.peri...@cyber.gc.ca>
Website | Site Web: https://www.cyber.gc.ca/
Government of Canada | Gouvernement du Canada

[cid:image002.png@01D4ADA3.F54E4950]




From: Enterprise  On Behalf Of Eddie Rowe
Sent: Sunday, September 8, 2019 4:28 PM
To: enterprise@mozilla.org
Subject: [Mozilla Enterprise] Firefox Configuration Confusion - Need to Secure 
Firefox

Given Mozilla's decision to turn on DNS over HTTPS we have to secure Firefox to 
disable this type of nonsense or remove it from every PC in the next two weeks. 
 Chrome is configured through an easy to manage GPO which leverages other 
really smart people who have created a security baseline along with 
preconfigured GPOs, while Firefox does not seem to have this level of support.

Assuming a  person is new to Firefox, exactly what are we supposed to modify to 
setup things securely?  I see references to things going into Mozilla.cfg, 
policies.json, GPO, autoconfig.js...I probably missed a file too.  I see people 
helpfully answering a question and telling the person to go to 
https://developer.mozilla.org/en-US/Firefox/Enterprise_deployment for the 
answer to their question, but there are just more links there.  I see people 
posting to not to bother with GPO because all the options are not there, but 
other say there are GPO settings that are no elsewhere... I see references that 
one thing is set one place, another place overrides...  I see one document say 
the autoconfig.js file goes into the folder where Firefox is installed, but the 
same document says it does into a subfolder...  I see references to setting 
preferences in the policies.json file, but I thought Mozilla.cfg was to be used 
for this?  Finally I see mention that there are preferences that are set in the 
source code that are not exposed to about:config?

Surely there is a simple one page document that walks you through this so we 
can spend a LIMITED amount of time sorting this out???

https://www.zdnet.com/article/mozilla-to-gradually-enable-dns-over-https-for-firefox-us-users-later-this-month/
 - Ready or not, here comes DNS over HTTPS to bypass all security you have 
using DNS to block dangerous sites.


___
Enterprise mailing list
Enterprise@mozilla.org
https://mail.mozilla.org/listinfo/enterprise

To unsubscribe from this list, please visit 
https://mail.mozilla.org/listinfo/enterprise or send an email to 
enterprise-requ...@mozilla.org with a subject of "unsubscribe"

Re: [Mozilla Enterprise] Firefox ESR 60.9 and Firefox ESR 68.1 released

[Éric Périard]

Typo fixed >_<

From: Éric Périard
Sent: Monday, September 9, 2019 7:38 AM
To: Gruhm, Sebastian ; enterprise@mozilla.org
Subject: RE: [Mozilla Enterprise] Firefox ESR 60.9 and Firefox ESR 68.1 released


TASKKILL /F /IM Firefox* /T



IF EXIST "%ProgramFiles%\Mozilla Firefox" (

"%ProgramFiles%\Mozilla Firefox\uninstall\helper.exe" -ms

"%WinDir%\System32\timeout.exe" /T 10 /NOBREAK

IF EXIST "%ProgramFiles%\Mozilla Firefox" (

RMDIR /S /Q "%ProgramFiles%\Mozilla Firefox"

)

DEL %Public%\Desktop\*Firefox*.lnk

RMDIR /S /Q "%ProgramData%\Microsoft\Windows\Start 
Menu\Programs\Mozilla Firefox"

REG DELETE HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla /F

REG DELETE HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins /F

REG DELETE HKEY_LOCAL_MACHINE\SOFTWARE\mozilla.org /F

)



IF EXIST "%ProgramFiles(x86)%\Mozilla Firefox" (

"%ProgramFiles(x86)%\%\Mozilla Firefox\uninstall\helper.exe" -ms

"%WinDir%\System32\timeout.exe" /T 10 /NOBREAK

IF EXIST "%ProgramFiles(x86)%\%\Mozilla Firefox" (

RMDIR /S /Q "%ProgramFiles(x86)%\Mozilla 
Firefox"

)

DEL %Public%\Desktop\*Firefox*.lnk

RMDIR /S /Q "%ProgramData%\Microsoft\Windows\Start 
Menu\Programs\Mozilla Firefox"

REG DELETE HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Mozilla /F

REG DELETE HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\mozilla.org 
/F

REG DELETE 
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins /F

)





IF EXIST "%ProgramFiles(x86)%\Mozilla Maintenance Service" (

"%ProgramFiles(x86)%\Mozilla Maintenance Service\Uninstall.exe" 
/S

"%WinDir%\System32\timeout.exe" /T 10 /NOBREAK

RMDIR /S /Q "%ProgramFiles(x86)%\Mozilla Maintenance Service"

)



"%WinDir%\System32\timeout.exe" /T 10 /NOBREAK

EXIT /B







Works 100% of the time for me.



-Original Message-
From: Enterprise 
mailto:enterprise-boun...@mozilla.org>> On 
Behalf Of Gruhm, Sebastian
Sent: Monday, September 9, 2019 2:17 AM
To: enterprise@mozilla.org<mailto:enterprise@mozilla.org>
Subject: Re: [Mozilla Enterprise] Firefox ESR 60.9 and Firefox ESR 68.1 released



But it is still half-baked because you can't use an MSI GUID to uninstall it. 
Because of that you have to carry the "Un_A.exe" with you (I never managed to 
uninstall FF silent with the "helper.exe").



Mit freundlichem Gruß



Sebastian





-Ursprüngliche Nachricht-

Von: Timo Pietilä mailto:timo.piet...@helsinki.fi>>

Gesendet: Freitag, 6. September 2019 10:46

An: enterprise@mozilla.org<mailto:enterprise@mozilla.org>

Betreff: Re: [Mozilla Enterprise] Firefox ESR 60.9 and Firefox ESR 68.1 released



I need to apologize about criticizing FF msi. This is by far the smartest 
exe-wrapper I have seen in my 10+ years of deploying software.

It just doesn't leave any trace of itself being msi in the machine. No crap 
left behind.



Every single exe-wrapper I have seen this far has been utter crap. Not this 
one. Only drawback I see is that you can't use its productcode as detection 
rule, but that is not really any issue. Just treat it like it was installed 
from .exe.



Whoever made this one should write a blog about it to teach other people how to 
make proper exe-wrapper. D*mn nice job.



Timo Pietilä



On 6.9.2019 10.40, Timo Pietilä wrote:

> If you can distribute FF without msi do so. That msi is a exe-wrapper

> and as such will create all kinds difficulties that pure .exe or

> proper .msi doesn't.

>

> Timo Pietilä

>

> On 6.9.2019 9.29, Alessio Gennari via Enterprise wrote:

>> Hello,

>> where ca I find msi package and GPO definition for these new versions?

>>

>> Very kind regards.

>>

>> Email Signature

>> Alessio Gennari

>> IT Manager, Diakont S.r.l.

>> Logo <http://www.diakont.it/>

>> *Tel.* +39 0575 250332 int. 8104 *Fax* +39 0575 250031

>> genn...@diakont.it-<mailto:genn...@diakont.it-> 
>> www.diakont.it<http://www.diakont.it> <http://www.diakont.it> *Sede

>> operativa e amministrativa.* Via Achille Grandi, 10/12 - 52100 Arezzo

>> - Italia *Sede legale.* Via Romita, 222 - 50025 Montespertoli (FI) -

>> Italia

>> *PI.* 06437990481 *Capitale sociale.* € 2.510.000 I.V.

>> Bureau Veritas logo <https://www.bureauveritas.it>

>>

>> On 2019-09-03 16:16, Ryan VanderMeulen wrote:

>>> Hi,

>>>

>>> We are pl

Re: [Mozilla Enterprise] Firefox ESR 60.9 and Firefox ESR 68.1 released

[Éric Périard]

TASKKILL /F /IM Firefox* /T



IF EXIST "%ProgramFiles%\Mozilla Firefox" (

"%ProgramFiles%\Mozilla Firefox\uninstall\helper.exe" -ms

"%WinDir%\System32\timeout.exe" /T 10 /NOBREAK

IF EXIST "%ProgramFiles%\Mozilla Firefox" (

RMDIR /S /Q "%ProgramFiles%\Mozilla Firefox"

)

DEL %Public%\Desktop\*Firefox*.lnk

RMDIR /S /Q "%ProgramData%\Microsoft\Windows\Start 
Menu\Programs\Mozilla Firefox"

REG DELETE HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla /F

REG DELETE HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins /F

REG DELETE HKEY_LOCAL_MACHINE\SOFTWARE\mozilla.org /F

)



IF EXIST "%ProgramFiles(x86)%\Mozilla Firefox" (

"%ProgramFiles(x86)%\%\Mozilla Firefox\uninstall\helper.exe" -ms

"%WinDir%\System32\timeout.exe" /T 10 /NOBREAK

IF EXIST "%ProgramFiles(x86)%\%\Mozilla Firefox" (

RMDIR /S /Q "%ProgramFiles%\Mozilla Firefox"

)

DEL %Public%\Desktop\*Firefox*.lnk

RMDIR /S /Q "%ProgramData%\Microsoft\Windows\Start 
Menu\Programs\Mozilla Firefox"

REG DELETE HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Mozilla /F

REG DELETE HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\mozilla.org 
/F

REG DELETE 
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins /F

)





IF EXIST "%ProgramFiles(x86)%\Mozilla Maintenance Service" (

"%ProgramFiles(x86)%\Mozilla Maintenance Service\Uninstall.exe" 
/S

"%WinDir%\System32\timeout.exe" /T 10 /NOBREAK

RMDIR /S /Q "%ProgramFiles(x86)%\Mozilla Maintenance Service"

)



"%WinDir%\System32\timeout.exe" /T 10 /NOBREAK

EXIT /B







Works 100% of the time for me.



-Original Message-
From: Enterprise  On Behalf Of Gruhm, Sebastian
Sent: Monday, September 9, 2019 2:17 AM
To: enterprise@mozilla.org
Subject: Re: [Mozilla Enterprise] Firefox ESR 60.9 and Firefox ESR 68.1 released



But it is still half-baked because you can't use an MSI GUID to uninstall it. 
Because of that you have to carry the "Un_A.exe" with you (I never managed to 
uninstall FF silent with the "helper.exe").



Mit freundlichem Gruß



Sebastian





-Ursprüngliche Nachricht-

Von: Timo Pietilä mailto:timo.piet...@helsinki.fi>>

Gesendet: Freitag, 6. September 2019 10:46

An: enterprise@mozilla.org

Betreff: Re: [Mozilla Enterprise] Firefox ESR 60.9 and Firefox ESR 68.1 released



I need to apologize about criticizing FF msi. This is by far the smartest 
exe-wrapper I have seen in my 10+ years of deploying software.

It just doesn't leave any trace of itself being msi in the machine. No crap 
left behind.



Every single exe-wrapper I have seen this far has been utter crap. Not this 
one. Only drawback I see is that you can't use its productcode as detection 
rule, but that is not really any issue. Just treat it like it was installed 
from .exe.



Whoever made this one should write a blog about it to teach other people how to 
make proper exe-wrapper. D*mn nice job.



Timo Pietilä



On 6.9.2019 10.40, Timo Pietilä wrote:

> If you can distribute FF without msi do so. That msi is a exe-wrapper

> and as such will create all kinds difficulties that pure .exe or

> proper .msi doesn't.

>

> Timo Pietilä

>

> On 6.9.2019 9.29, Alessio Gennari via Enterprise wrote:

>> Hello,

>> where ca I find msi package and GPO definition for these new versions?

>>

>> Very kind regards.

>>

>> Email Signature

>> Alessio Gennari

>> IT Manager, Diakont S.r.l.

>> Logo 

>> *Tel.* +39 0575 250332 int. 8104 *Fax* +39 0575 250031

>> genn...@diakont.it- 
>> www.diakont.it  *Sede

>> operativa e amministrativa.* Via Achille Grandi, 10/12 - 52100 Arezzo

>> - Italia *Sede legale.* Via Romita, 222 - 50025 Montespertoli (FI) -

>> Italia

>> *PI.* 06437990481 *Capitale sociale.* € 2.510.000 I.V.

>> Bureau Veritas logo 

>>

>> On 2019-09-03 16:16, Ryan VanderMeulen wrote:

>>> Hi,

>>>

>>> We are pleased to announce the release of two new Firefox ESR

>>> versions this week, 60.9 and 68.1. Both are available for download

>>> from https://www.mozilla.org/firefox/organizations/all/

>>>

>>> Firefox ESR 60.9 is the latest in the ESR60 branch, and as always,

>>> we recommend that users keep up to date with the newest version of

>>> Firefox ESR for the latest stability and security fixes.

>>>

>>> Release notes for Firefox 60.9.0esr are available at:

>>> https://www.mozilla.org/firefox/60.9.0/releasenotes/

>>>

>>> Associated security advisories are posted at:

>>> https://www.mozilla.org/security/advisories/mfsa2019-27/

>>>

>>> This is the last scheduled release of the ESR 60.x branch. With the

>>> 

Re: [Mozilla Enterprise] Firefox ESR Offline Patching solution.

[Éric Périard]

Classification: UNCLASSIFIED

Hey Alex,

Interesting, but deployment wise, SCCM has legs in every segment of the network.

End-user desktops are whitelisted to update from the web using the Firefox 
maintenance app, however the PAW's are segmented because they are for 
administration.

So PAWs DO get the updated, however only when I change the base version of the 
deployment package for Firefox on SCCM.

The way is works is that I deploy a base version to every desktops and the 
detection is done on a "Greater or Equal..." basis, so desktops are allowed to 
updated themselves and SCCM doesn't attempt to reinstall it. But since PAWs 
don't access the web, they're stuck until I deploy a new base version.

Essentially, I'm trying to update one less package manually by building an 
offline solution for everyone.


Éric Périard
Laboratory Administrator | Administrateur du laboratoire
Canadian Centre for Cyber Security | Centre canadien pour la cybersécurité
Telephone | Téléphone: 613-991-3555
Email | Courriel: eric.peri...@cyber.gc.ca<mailto:eric.peri...@cyber.gc.ca>
Website | Site Web: https://www.cyber.gc.ca/
Government of Canada | Gouvernement du Canada

[cid:image002.png@01D4ADA3.F54E4950]

NOTICE: This message and accompanying attachments contain information that is 
intended only for the use of the individual or entity to which it is addressed. 
Any dissemination, distribution, copying or action taken in reliance on the 
contents of this communication by anyone other than the intended recipient is 
strictly prohibited. If you have received this communication in error, please 
notify the sender immediately at the above address and delete the e-mail.

AVIS : Le présent message et toutes les pièces jointes qui l'accompagnent 
contiennent de l'information destinée uniquement à la personne ou à l'entité à 
laquelle elle est adressée. Toute diffusion, distribution ou copie de son 
contenu par une autre personne que son destinataire est strictement interdite. 
Si vous avez reçu ce message par erreur, veuillez informer immédiatement 
l'expéditeur à l'adresse ci-dessus puis l'effacer.



From: Alexandre GAUVRIT 
Sent: Wednesday, July 31, 2019 10:57 AM
To: Éric Périard ; Enterprise@mozilla.org
Subject: Re: [Mozilla Enterprise] Firefox ESR Offline Patching solution.


Hi,

There is also an Open-Source alternative to SCCM which can fulfill your need, 
it's WAPT Deployment software.

The store provides pre-made Firefox and Firefox ESR packages : 
https://store.wapt.fr/store/?search=Firefox&sort=popular

If your scope of endpoint is out of SCCM scope, it can be a good solution

Alexandre
Le 29/07/2019 à 17:47, Éric Périard a écrit :
Classification: UNCLASSIFIED // Public

Greetings colleagues,

I work in a border-line paranoid secure environment where we make use of 
air-gapped PAW (Privileged Access Workstations) to administer the network.

The issue is well... it's air-gapped, meaning there's no access to the internet 
at all from those workstations and everything is tightly controlled.

Also to deploy the updates, I use SCCM. For end-user systems we whitelist the 
access so browsers can update themselves however that's not possible for the 
PAW's.

So I've got a few questions:


1.   Is there a GPO or some kind of solution to redirect where Firefox ESR 
fetches it's update? (Without trying to spoof URLs which I'm sure change often)

2.   Where would I get the update patches instead of the entire installer 
EXE?

3.   Is above possible at all?

Thank you as always

Éric Périard
Laboratory Administrator | Administrateur du laboratoire
Canadian Centre for Cyber Security | Centre canadien pour la cybersécurité
Email | Courriel: eric.peri...@cyber.gc.ca<mailto:eric.peri...@cyber.gc.ca>
Website | Site Web: https://www.cyber.gc.ca/
Government of Canada | Gouvernement du Canada

[cid:image002.png@01D4ADA3.F54E4950]

NOTICE: This message and accompanying attachments contain information that is 
intended only for the use of the individual or entity to which it is addressed. 
Any dissemination, distribution, copying or action taken in reliance on the 
contents of this communication by anyone other than the intended recipient is 
strictly prohibited. If you have received this communication in error, please 
notify the sender immediately at the above address and delete the e-mail.

AVIS : Le présent message et toutes les pièces jointes qui l'accompagnent 
contiennent de l'information destinée uniquement à la personne ou à l'entité à 
laquelle elle est adressée. Toute diffusion, distribution ou copie de son 
contenu par une autre personne que son destinataire est strictement interdite. 
Si vous avez reçu ce message par erreur, veuillez informer immédiatement 
l'expéditeur à l'adresse ci-dessus puis l'effacer.




___

E

Re: [Mozilla Enterprise] Firefox ESR Offline Patching solution.

[Éric Périard]

Thanks Mike, always reliable ☺

Have a great day!

Eric

From: Mike Kaply 
Sent: Monday, July 29, 2019 12:38 PM
To: Éric Périard 
Cc: Enterprise@mozilla.org
Subject: Re: [Mozilla Enterprise] Firefox ESR Offline Patching solution.

On Mon, Jul 29, 2019 at 10:54 AM Éric Périard 
mailto:eric.peri...@ccirc-ccric.ca>> wrote:
Classification: UNCLASSIFIED // Public

Greetings colleagues,

I work in a border-line paranoid secure environment where we make use of 
air-gapped PAW (Privileged Access Workstations) to administer the network.

The issue is well… it’s air-gapped, meaning there’s no access to the internet 
at all from those workstations and everything is tightly controlled.

Also to deploy the updates, I use SCCM. For end-user systems we whitelist the 
access so browsers can update themselves however that’s not possible for the 
PAW’s.

So I’ve got a few questions:


1.   Is there a GPO or some kind of solution to redirect where Firefox ESR 
fetches it’s update? (Without trying to spoof URLs which I’m sure change often)
Yes. We provide a policy to change the update URL.

2.   Where would I get the update patches instead of the entire installer 
EXE?
The updates are called MAR files. They can be obtained on our release servers:

http://releases.mozilla.org/pub/firefox/releases/68.0.1esr/update/win64/en-US/

3.   Is above possible at all?
I have an (very) old post that describes this:

https://mike.kaply.com/2007/03/26/deploying-firefox-2-within-the-enterprise-part-5/

I think some things have change slightly since then (particular the server 
response with the update)

The simplest thing to do would to push the complete mar file every time and 
just have an update server that served based on the currently available version.

If you want to see how this all works, you can install an older version of 
Firefox, turn on the pref app.update.log and then check for an update in the 
help dialog. In the Javascript console, you'll see a message like this:

AUS:SVC Checker:getUpdateURL - update URL: 
https://aus5.mozilla.org/update/6/Firefox/68.0.1/20190717172542/Darwin_x86_64-gcc3/en-US/release/Darwin%2018.7.0/ISET:SSE4_2,MEM:32768/default/default/update.xml?force=1

You can visit the URL you get to see the inner workings of the update XML.

Mike



Thank you as always….

Éric Périard
Laboratory Administrator | Administrateur du laboratoire
Canadian Centre for Cyber Security | Centre canadien pour la cybersécurité
Email | Courriel: eric.peri...@cyber.gc.ca<mailto:eric.peri...@cyber.gc.ca>
Website | Site Web: https://www.cyber.gc.ca/
Government of Canada | Gouvernement du Canada

[cid:image002.png@01D4ADA3.F54E4950]

NOTICE: This message and accompanying attachments contain information that is 
intended only for the use of the individual or entity to which it is addressed. 
Any dissemination, distribution, copying or action taken in reliance on the 
contents of this communication by anyone other than the intended recipient is 
strictly prohibited. If you have received this communication in error, please 
notify the sender immediately at the above address and delete the e-mail.

AVIS : Le présent message et toutes les pièces jointes qui l'accompagnent 
contiennent de l'information destinée uniquement à la personne ou à l'entité à 
laquelle elle est adressée. Toute diffusion, distribution ou copie de son 
contenu par une autre personne que son destinataire est strictement interdite. 
Si vous avez reçu ce message par erreur, veuillez informer immédiatement 
l’expéditeur à l’adresse ci-dessus puis l’effacer.

___
Enterprise mailing list
Enterprise@mozilla.org<mailto:Enterprise@mozilla.org>
https://mail.mozilla.org/listinfo/enterprise

To unsubscribe from this list, please visit 
https://mail.mozilla.org/listinfo/enterprise or send an email to 
enterprise-requ...@mozilla.org<mailto:enterprise-requ...@mozilla.org> with a 
subject of "unsubscribe"
___
Enterprise mailing list
Enterprise@mozilla.org
https://mail.mozilla.org/listinfo/enterprise

To unsubscribe from this list, please visit 
https://mail.mozilla.org/listinfo/enterprise or send an email to 
enterprise-requ...@mozilla.org with a subject of "unsubscribe"

[Mozilla Enterprise] Firefox ESR Offline Patching solution.

[Éric Périard]

Classification: UNCLASSIFIED // Public

Greetings colleagues,

I work in a border-line paranoid secure environment where we make use of 
air-gapped PAW (Privileged Access Workstations) to administer the network.

The issue is well... it's air-gapped, meaning there's no access to the internet 
at all from those workstations and everything is tightly controlled.

Also to deploy the updates, I use SCCM. For end-user systems we whitelist the 
access so browsers can update themselves however that's not possible for the 
PAW's.

So I've got a few questions:


1.   Is there a GPO or some kind of solution to redirect where Firefox ESR 
fetches it's update? (Without trying to spoof URLs which I'm sure change often)

2.   Where would I get the update patches instead of the entire installer 
EXE?

3.   Is above possible at all?

Thank you as always

Éric Périard
Laboratory Administrator | Administrateur du laboratoire
Canadian Centre for Cyber Security | Centre canadien pour la cybersécurité
Email | Courriel: eric.peri...@cyber.gc.ca<mailto:eric.peri...@cyber.gc.ca>
Website | Site Web: https://www.cyber.gc.ca/
Government of Canada | Gouvernement du Canada

[cid:image002.png@01D4ADA3.F54E4950]

NOTICE: This message and accompanying attachments contain information that is 
intended only for the use of the individual or entity to which it is addressed. 
Any dissemination, distribution, copying or action taken in reliance on the 
contents of this communication by anyone other than the intended recipient is 
strictly prohibited. If you have received this communication in error, please 
notify the sender immediately at the above address and delete the e-mail.

AVIS : Le présent message et toutes les pièces jointes qui l'accompagnent 
contiennent de l'information destinée uniquement à la personne ou à l'entité à 
laquelle elle est adressée. Toute diffusion, distribution ou copie de son 
contenu par une autre personne que son destinataire est strictement interdite. 
Si vous avez reçu ce message par erreur, veuillez informer immédiatement 
l'expéditeur à l'adresse ci-dessus puis l'effacer.

___
Enterprise mailing list
Enterprise@mozilla.org
https://mail.mozilla.org/listinfo/enterprise

To unsubscribe from this list, please visit 
https://mail.mozilla.org/listinfo/enterprise or send an email to 
enterprise-requ...@mozilla.org with a subject of "unsubscribe"

Re: [Mozilla Enterprise] [EXTERNAL] Mozilla FF ESR - Slack Support Group?

[Éric Périard]

By spammy I meant "WY too verbose..." Like Mike Kaply was having a complete 
"chat like" conversation over email and there was like 100 of them on one 
subject

-Original Message-
From: Joseph Robinson [mailto:jrobin...@luminex.com] 
Sent: Thursday, July 11, 2019 2:00 PM
To: Éric Périard 
Subject: Re: [EXTERNAL] [Mozilla Enterprise] Mozilla FF ESR - Slack Support 
Group?

On 7/11/2019 9:33 AM, Éric Périard wrote:
> As much as I like this support group for ESR it gets quite spammy at 
> time (yes I filter and sort them in outlook with rules),

I see about five spam messages per year out of this list.


-- 
Joseph Robinson  Voice: 951-781-4100 ext 158
Systems AdministratorFax: 858-268-1120
Luminex Software 9765 Clairemont Mesa Blvd., Suite A
http://www.luminex.com   San Diego, CA 92124
PGP fingerprint: F079 583A F95E E98E 8DBE  9F83 3A59 8DED 51E2 295A
___
Enterprise mailing list
Enterprise@mozilla.org
https://mail.mozilla.org/listinfo/enterprise

To unsubscribe from this list, please visit 
https://mail.mozilla.org/listinfo/enterprise or send an email to 
enterprise-requ...@mozilla.org with a subject of "unsubscribe"

Re: [Mozilla Enterprise] Mozilla FF ESR - Slack Support Group?

[Éric Périard]

If you've got privacy concerns and you're on facebook you're doing it wrong ;)

-Original Message-
From: Enterprise [mailto:enterprise-boun...@mozilla.org] On Behalf Of Paul 
Kosinski
Sent: Thursday, July 11, 2019 1:09 PM
To: enterprise@mozilla.org
Subject: Re: [Mozilla Enterprise] Mozilla FF ESR - Slack Support Group?

I don't see any spam on this list, but then I have set up a separate email 
address just for ESR. (And I set up separate emails for most such
groups.)

Also, I am always suspicious of aggregating, cross topic providers taking steps 
to fully preserve user privacy, rather than correlating data belonging to one 
person who subscribes to multiple topics. (Of course, few can rise to 
Facebook's disregard for user privacy.)


On Thu, 11 Jul 2019 16:33:20 +
Éric Périard  wrote:

> Hello people,
> 
> 
> As much as I like this support group for ESR it gets quite spammy at 
> time (yes I filter and sort them in outlook with rules),
> 
> However, since we’re always pretty active, would it not be more useful 
> to ha channel on Slack?
> 
> It’s completely free to register an instance and people may get 
> answers much faster than an email.
> 
> It also supports A/V for meetings.
> 
> Just a thought…
> 
> Eric
___
Enterprise mailing list
Enterprise@mozilla.org
https://mail.mozilla.org/listinfo/enterprise

To unsubscribe from this list, please visit 
https://mail.mozilla.org/listinfo/enterprise or send an email to 
enterprise-requ...@mozilla.org with a subject of "unsubscribe"
___
Enterprise mailing list
Enterprise@mozilla.org
https://mail.mozilla.org/listinfo/enterprise

To unsubscribe from this list, please visit 
https://mail.mozilla.org/listinfo/enterprise or send an email to 
enterprise-requ...@mozilla.org with a subject of "unsubscribe"

[Mozilla Enterprise] Mozilla FF ESR - Slack Support Group?

[Éric Périard]

Hello people,


As much as I like this support group for ESR it gets quite spammy at time (yes 
I filter and sort them in outlook with rules),

However, since we’re always pretty active, would it not be more useful to ha 
channel on Slack?

It’s completely free to register an instance and people may get answers much 
faster than an email.

It also supports A/V for meetings.

Just a thought…

Eric
___
Enterprise mailing list
Enterprise@mozilla.org
https://mail.mozilla.org/listinfo/enterprise

To unsubscribe from this list, please visit 
https://mail.mozilla.org/listinfo/enterprise or send an email to 
enterprise-requ...@mozilla.org with a subject of "unsubscribe"

Re: [Mozilla Enterprise] Firefox ESR 60.6.0 x64 - Not Uninstalling Correctly?

[Éric Périard]

Ugh not my day, I mean disregard note 1… the –ms switch isn’t there, could of 
sworn I saw it.

From: Éric Périard
Sent: Wednesday, July 3, 2019 11:55 AM
To: enterprise@mozilla.org
Subject: RE: [Mozilla Enterprise] Firefox ESR 60.6.0 x64 - Not Uninstalling 
Correctly?

Disregard note 2 >.<

From: Enterprise [mailto:enterprise-boun...@mozilla.org] On Behalf Of Éric 
Périard
Sent: Wednesday, July 3, 2019 11:52 AM
To: enterprise@mozilla.org<mailto:enterprise@mozilla.org>
Subject: Re: [Mozilla Enterprise] Firefox ESR 60.6.0 x64 - Not Uninstalling 
Correctly?

Hello Matt,

At the moment I have no way of explaining what happened…

Usually when I upgrade the baseline FF ESR for my users my script first starts 
by wiping clean the current installation and then it reinstalls FF ESR with the 
new provided installer and my customizations.

For reasons unknown it stayed hung on a system for nearly 20 minutes and on 
another system I was testing the PC’s resource completely froze to the point I 
had to force shutdown the system and cold start it.

So my first suspicions was that my AV real-time scanner exclusion list went 
haywire, so I turned it off on a test target.

Once the AV was off on the test target the uninstallation and reinstallation 
went fine.

So next I uninstalled the new FF ESR and reloaded 60.60 with the AV on  and 
restarted the PC, after I tried to reinstall 60.7.2 from 60.6.0 while the AV 
was on and everything worked fine as per usual.

One thing I did notice is that I had forgotten to check the “unblock” 
executable from the EXE’s properties when I updated my package, although I 
doubt that this would cause such a behaviour.

In any case, the issue resolved itself, I think the AVs may have been updating 
at the time of my initial test and somehow didn’t play well.

Also a few notes:

1. Now that you mention the –ms switch is deprecated, you installer still loads 
the –ms switch in the uninstallation registry key.

2. For reasons unknown when I was investigating the FF ESR uninstall issue, I 
noticed there was a uninstall.exe in C:\Program Files\Mozilla 
Firefox\uninstall, however once the browser was fully uninstalled and 
reinstalled only the helper.exe remained and some other related files >_>.

Anyhow, thanks for the quick feedback… I guess it was just a perfect storm 
timing wise.



Éric Périard
Laboratory Administrator | Administrateur du laboratoire
Canadian Centre for Cyber Security | Centre canadien pour la cybersécurité
Website | Site Web: https://www.cyber.gc.ca/
Government of Canada | Gouvernement du Canada


From: Matt Howell [mailto:mhow...@mozilla.com]
Sent: Wednesday, July 3, 2019 10:57 AM
To: Éric Périard 
mailto:eric.peri...@ccirc-ccric.ca>>
Cc: enterprise@mozilla.org<mailto:enterprise@mozilla.org>
Subject: Re: [Mozilla Enterprise] Firefox ESR 60.6.0 x64 - Not Uninstalling 
Correctly?

That command line is definitely expected to work; technically -ms is deprecated 
in favor of /S, but they're both supported equally and we have no plan to 
actually remove -ms so that doesn't make any difference. So I have a few 
questions to help us diagnose this, if you don't mind.

I don't fully understand your description of what's going wrong; is helper.exe 
running and just hanging in the background forever, or not starting at all, or 
something else?

I'm also curious about this uninstall.exe file that you mentioned; do you mean 
that you have a file called "%ProgramFiles%\Mozilla 
Firefox\uninstall\uninstall.exe"? I'm confused about that because we don't 
distribute a file by that name in our official Firefox builds; all that should 
be in that uninstall directory is helper.exe and a couple of log files (the 
Maintenance Service uninstaller is normally called Uninstall.exe though). Did 
the copy of Firefox you're using come from Mozilla or from a third party, or 
can you think of something else that might have dropped that file there?

Thanks,
-- Matt Howell

On Wed, Jul 3, 2019 at 7:28 AM Éric Périard 
mailto:eric.peri...@ccirc-ccric.ca>> wrote:
Classification: UNCLASSIFIED

Hello,

I manage the software (SCCM) for  my domain and regularly update Firefox ESR, 
usually seamless…

This is my uninstall script:

TASKKILL /F /IM   Firefox* /T

IF EXIST "%ProgramFiles%\Mozilla Firefox" (
"%ProgramFiles%\Mozilla Firefox\uninstall\helper.exe" -ms
"%WinDir%\System32\timeout.exe" /T 10 /NOBREAK
RMDIR /S /Q "%ProgramFiles%\Mozilla Firefox"
DEL %Public%\Desktop\*Firefox*.lnk
RMDIR /S /Q "%ProgramData%\Microsoft\Windows\Start 
Menu\Programs\Mozilla Firefox"
REG DELETE /F HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla
REG DELETE /F HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins
REG DELETE /F 
HKEY_LOCAL_MACHINE\SOFTWARE\mozilla.org<http://mozil

Re: [Mozilla Enterprise] Firefox ESR 60.6.0 x64 - Not Uninstalling Correctly?

[Éric Périard]

Disregard note 2 >.<

From: Enterprise [mailto:enterprise-boun...@mozilla.org] On Behalf Of Éric 
Périard
Sent: Wednesday, July 3, 2019 11:52 AM
To: enterprise@mozilla.org
Subject: Re: [Mozilla Enterprise] Firefox ESR 60.6.0 x64 - Not Uninstalling 
Correctly?

Hello Matt,

At the moment I have no way of explaining what happened…

Usually when I upgrade the baseline FF ESR for my users my script first starts 
by wiping clean the current installation and then it reinstalls FF ESR with the 
new provided installer and my customizations.

For reasons unknown it stayed hung on a system for nearly 20 minutes and on 
another system I was testing the PC’s resource completely froze to the point I 
had to force shutdown the system and cold start it.

So my first suspicions was that my AV real-time scanner exclusion list went 
haywire, so I turned it off on a test target.

Once the AV was off on the test target the uninstallation and reinstallation 
went fine.

So next I uninstalled the new FF ESR and reloaded 60.60 with the AV on  and 
restarted the PC, after I tried to reinstall 60.7.2 from 60.6.0 while the AV 
was on and everything worked fine as per usual.

One thing I did notice is that I had forgotten to check the “unblock” 
executable from the EXE’s properties when I updated my package, although I 
doubt that this would cause such a behaviour.

In any case, the issue resolved itself, I think the AVs may have been updating 
at the time of my initial test and somehow didn’t play well.

Also a few notes:

1. Now that you mention the –ms switch is deprecated, you installer still loads 
the –ms switch in the uninstallation registry key.

2. For reasons unknown when I was investigating the FF ESR uninstall issue, I 
noticed there was a uninstall.exe in C:\Program Files\Mozilla 
Firefox\uninstall, however once the browser was fully uninstalled and 
reinstalled only the helper.exe remained and some other related files >_>.

Anyhow, thanks for the quick feedback… I guess it was just a perfect storm 
timing wise.



Éric Périard
Laboratory Administrator | Administrateur du laboratoire
Canadian Centre for Cyber Security | Centre canadien pour la cybersécurité
Website | Site Web: https://www.cyber.gc.ca/
Government of Canada | Gouvernement du Canada


From: Matt Howell [mailto:mhow...@mozilla.com]
Sent: Wednesday, July 3, 2019 10:57 AM
To: Éric Périard 
mailto:eric.peri...@ccirc-ccric.ca>>
Cc: enterprise@mozilla.org<mailto:enterprise@mozilla.org>
Subject: Re: [Mozilla Enterprise] Firefox ESR 60.6.0 x64 - Not Uninstalling 
Correctly?

That command line is definitely expected to work; technically -ms is deprecated 
in favor of /S, but they're both supported equally and we have no plan to 
actually remove -ms so that doesn't make any difference. So I have a few 
questions to help us diagnose this, if you don't mind.

I don't fully understand your description of what's going wrong; is helper.exe 
running and just hanging in the background forever, or not starting at all, or 
something else?

I'm also curious about this uninstall.exe file that you mentioned; do you mean 
that you have a file called "%ProgramFiles%\Mozilla 
Firefox\uninstall\uninstall.exe"? I'm confused about that because we don't 
distribute a file by that name in our official Firefox builds; all that should 
be in that uninstall directory is helper.exe and a couple of log files (the 
Maintenance Service uninstaller is normally called Uninstall.exe though). Did 
the copy of Firefox you're using come from Mozilla or from a third party, or 
can you think of something else that might have dropped that file there?

Thanks,
-- Matt Howell

On Wed, Jul 3, 2019 at 7:28 AM Éric Périard 
mailto:eric.peri...@ccirc-ccric.ca>> wrote:
Classification: UNCLASSIFIED

Hello,

I manage the software (SCCM) for  my domain and regularly update Firefox ESR, 
usually seamless…

This is my uninstall script:

TASKKILL /F /IM   Firefox* /T

IF EXIST "%ProgramFiles%\Mozilla Firefox" (
"%ProgramFiles%\Mozilla Firefox\uninstall\helper.exe" -ms
"%WinDir%\System32\timeout.exe" /T 10 /NOBREAK
RMDIR /S /Q "%ProgramFiles%\Mozilla Firefox"
DEL %Public%\Desktop\*Firefox*.lnk
RMDIR /S /Q "%ProgramData%\Microsoft\Windows\Start 
Menu\Programs\Mozilla Firefox"
REG DELETE /F HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla
REG DELETE /F HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins
REG DELETE /F 
HKEY_LOCAL_MACHINE\SOFTWARE\mozilla.org<http://mozilla.org>
REG DELETE /F HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Mozilla
REG DELETE /F 
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins
)

IF EXIST "%ProgramFiles(x86)%\Mozilla Maintenance Service" (
"%ProgramFiles(x86)%\Mozilla Ma

Re: [Mozilla Enterprise] Firefox ESR 60.6.0 x64 - Not Uninstalling Correctly?

[Éric Périard]

Hello Matt,

At the moment I have no way of explaining what happened…

Usually when I upgrade the baseline FF ESR for my users my script first starts 
by wiping clean the current installation and then it reinstalls FF ESR with the 
new provided installer and my customizations.

For reasons unknown it stayed hung on a system for nearly 20 minutes and on 
another system I was testing the PC’s resource completely froze to the point I 
had to force shutdown the system and cold start it.

So my first suspicions was that my AV real-time scanner exclusion list went 
haywire, so I turned it off on a test target.

Once the AV was off on the test target the uninstallation and reinstallation 
went fine.

So next I uninstalled the new FF ESR and reloaded 60.60 with the AV on  and 
restarted the PC, after I tried to reinstall 60.7.2 from 60.6.0 while the AV 
was on and everything worked fine as per usual.

One thing I did notice is that I had forgotten to check the “unblock” 
executable from the EXE’s properties when I updated my package, although I 
doubt that this would cause such a behaviour.

In any case, the issue resolved itself, I think the AVs may have been updating 
at the time of my initial test and somehow didn’t play well.

Also a few notes:

1. Now that you mention the –ms switch is deprecated, you installer still loads 
the –ms switch in the uninstallation registry key.

2. For reasons unknown when I was investigating the FF ESR uninstall issue, I 
noticed there was a uninstall.exe in C:\Program Files\Mozilla 
Firefox\uninstall, however once the browser was fully uninstalled and 
reinstalled only the helper.exe remained and some other related files >_>.

Anyhow, thanks for the quick feedback… I guess it was just a perfect storm 
timing wise.



Éric Périard
Laboratory Administrator | Administrateur du laboratoire
Canadian Centre for Cyber Security | Centre canadien pour la cybersécurité
Website | Site Web: https://www.cyber.gc.ca/
Government of Canada | Gouvernement du Canada


From: Matt Howell [mailto:mhow...@mozilla.com]
Sent: Wednesday, July 3, 2019 10:57 AM
To: Éric Périard 
Cc: enterprise@mozilla.org
Subject: Re: [Mozilla Enterprise] Firefox ESR 60.6.0 x64 - Not Uninstalling 
Correctly?

That command line is definitely expected to work; technically -ms is deprecated 
in favor of /S, but they're both supported equally and we have no plan to 
actually remove -ms so that doesn't make any difference. So I have a few 
questions to help us diagnose this, if you don't mind.

I don't fully understand your description of what's going wrong; is helper.exe 
running and just hanging in the background forever, or not starting at all, or 
something else?

I'm also curious about this uninstall.exe file that you mentioned; do you mean 
that you have a file called "%ProgramFiles%\Mozilla 
Firefox\uninstall\uninstall.exe"? I'm confused about that because we don't 
distribute a file by that name in our official Firefox builds; all that should 
be in that uninstall directory is helper.exe and a couple of log files (the 
Maintenance Service uninstaller is normally called Uninstall.exe though). Did 
the copy of Firefox you're using come from Mozilla or from a third party, or 
can you think of something else that might have dropped that file there?

Thanks,
-- Matt Howell

On Wed, Jul 3, 2019 at 7:28 AM Éric Périard 
mailto:eric.peri...@ccirc-ccric.ca>> wrote:
Classification: UNCLASSIFIED

Hello,

I manage the software (SCCM) for  my domain and regularly update Firefox ESR, 
usually seamless…

This is my uninstall script:

TASKKILL /F /IM   Firefox* /T

IF EXIST "%ProgramFiles%\Mozilla Firefox" (
"%ProgramFiles%\Mozilla Firefox\uninstall\helper.exe" -ms
"%WinDir%\System32\timeout.exe" /T 10 /NOBREAK
RMDIR /S /Q "%ProgramFiles%\Mozilla Firefox"
DEL %Public%\Desktop\*Firefox*.lnk
RMDIR /S /Q "%ProgramData%\Microsoft\Windows\Start 
Menu\Programs\Mozilla Firefox"
REG DELETE /F HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla
REG DELETE /F HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins
REG DELETE /F 
HKEY_LOCAL_MACHINE\SOFTWARE\mozilla.org<http://mozilla.org>
REG DELETE /F HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Mozilla
REG DELETE /F 
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins
)

IF EXIST "%ProgramFiles(x86)%\Mozilla Maintenance Service" (
"%ProgramFiles(x86)%\Mozilla Maintenance Service\Uninstall.exe" 
/S
"%WinDir%\System32\timeout.exe" /T 10 /NOBREAK
RMDIR /S /Q "%ProgramFiles(x86)%\Mozilla Maintenance Service"
)

"%WinDir%\System32\timeout.exe" /T 10 /NOBREAK
EXIT /B

This usually works flawlessly, however it seems that with 60.6.0 the helper.

[Mozilla Enterprise] Firefox ESR 60.6.0 x64 - Not Uninstalling Correctly?

[Éric Périard]

Classification: UNCLASSIFIED

Hello,

I manage the software (SCCM) for  my domain and regularly update Firefox ESR, 
usually seamless...

This is my uninstall script:

TASKKILL /F /IM   Firefox* /T

IF EXIST "%ProgramFiles%\Mozilla Firefox" (
"%ProgramFiles%\Mozilla Firefox\uninstall\helper.exe" -ms
"%WinDir%\System32\timeout.exe" /T 10 /NOBREAK
RMDIR /S /Q "%ProgramFiles%\Mozilla Firefox"
DEL %Public%\Desktop\*Firefox*.lnk
RMDIR /S /Q "%ProgramData%\Microsoft\Windows\Start 
Menu\Programs\Mozilla Firefox"
REG DELETE /F HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla
REG DELETE /F HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins
REG DELETE /F HKEY_LOCAL_MACHINE\SOFTWARE\mozilla.org
REG DELETE /F HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Mozilla
REG DELETE /F 
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins
)

IF EXIST "%ProgramFiles(x86)%\Mozilla Maintenance Service" (
"%ProgramFiles(x86)%\Mozilla Maintenance Service\Uninstall.exe" 
/S
"%WinDir%\System32\timeout.exe" /T 10 /NOBREAK
RMDIR /S /Q "%ProgramFiles(x86)%\Mozilla Maintenance Service"
)

"%WinDir%\System32\timeout.exe" /T 10 /NOBREAK
EXIT /B

This usually works flawlessly, however it seems that with 60.6.0 the helper.exe 
is unresponsive to the uninstall command, I also tried the uninstall.exe with 
the same switches in the same folder, no cigar.

Has there been a reported issue with the uninstallation of the browser or is 
there a newer way to do this?

Simply put, I usually uninstall the software client and then apply the update, 
however it stays stuck forever with the firefox uninstall phase.


Éric Périard
Laboratory Administrator | Administrateur du laboratoire
Canadian Centre for Cyber Security | Centre canadien pour la cybersécurité
Website | Site Web: https://www.cyber.gc.ca/
Government of Canada | Gouvernement du Canada

___
Enterprise mailing list
Enterprise@mozilla.org
https://mail.mozilla.org/listinfo/enterprise

To unsubscribe from this list, please visit 
https://mail.mozilla.org/listinfo/enterprise or send an email to 
enterprise-requ...@mozilla.org with a subject of "unsubscribe"

Re: [Mozilla Enterprise] unsuscribe

[Éric Périard]

___
Enterprise mailing list
Enterprise@mozilla.org
https://mail.mozilla.org/listinfo/enterprise

To unsubscribe from this list, please visit 
https://mail.mozilla.org/listinfo/enterprise or send an email to 
enterprise-requ...@mozilla.org with a subject of "unsubscribe"


From: Enterprise  On Behalf Of Jacopo Antichi
Sent: Thursday, March 14, 2019 10:45 AM
To: enterprise@mozilla.org
Subject: Re: [Mozilla Enterprise] unsuscribe

Hi there,

Please unsuscribe me. I ask this thing weekly and is not going. Why you 
indicate to write an email with this subject then?

Jacopo Antichi

Il ven 8 mar 2019, 08:39 Jacopo Antichi 
mailto:anti...@gmail.com>> ha scritto:




Jacopo Antichi
Airbus Defence and Space GmbH
Willy-Messerschmitt-Str. 1 82024, Munchen

___
Enterprise mailing list
Enterprise@mozilla.org
https://mail.mozilla.org/listinfo/enterprise

To unsubscribe from this list, please visit 
https://mail.mozilla.org/listinfo/enterprise or send an email to 
enterprise-requ...@mozilla.org with a subject of "unsubscribe"

Re: [Mozilla Enterprise] Firefox auto updating issue

[Éric Périard]

Dare I say, use Chrome?

From: Enterprise  On Behalf Of Robert 
Stallknecht
Sent: Friday, October 12, 2018 12:37 PM
To: Daniel Veditz 
Cc: Enterprise Working Group Mailing List 
Subject: Re: [Mozilla Enterprise] Firefox auto updating issue

Personally, I really don’t like IE but looks like it is our only option at this 
point. Our Oracle DBA’s stated its going to take at least 6 months for them to 
finish their current projects and integrate the Java Web Start functionality. I 
currently have no control of my Firefox installs across the company. My 
motzilla.cfg, override.ini, local-settings.js, install.ini, host redirects 
appear to keep Firefox from updating for a short period of time but somehow the 
browser finds a way and updates massively across the company. From an 
enterprise perspective, I cannot have a program that updates on its own, on 
non-administrative user accounts, without being able to test those updates 
first.

Best Regards,
Robert Stallknecht
Senior Systems Administrator
O. +1. 817.541.8600 C. +1.210.884.4911

[http://www.gdctechnics.com/images/uploads/GDCTechnicsLinearBlack.png]

From: Daniel Veditz mailto:dved...@mozilla.com>>
Sent: Friday, October 12, 2018 10:31 AM
To: Robert Stallknecht 
mailto:robert.stallkne...@gdctechnics.com>>
Cc: Enterprise Working Group Mailing List 
mailto:enterprise@mozilla.org>>
Subject: Re: [Mozilla Enterprise] Firefox auto updating issue

On Mon, Oct 8, 2018 at 10:21 AM Robert Stallknecht 
mailto:robert.stallkne...@gdctechnics.com>> 
wrote:
  If not we will have to swap the whole company over to IE and will be 
uninstalling Firefox to avoid further issues.

Note that neither Firefox ESR 52.x nor IE will be receiving further security 
updates and have known vulnerabilities. There are exploits in the wild for IE. 
There haven't been any reported against ESR-52 but it's only a matter of time. 
Do not use these browsers on computers connected to the public internet unless 
you have time to deal with ransomware or other malware attacks.
-Dan Veditz
___
Enterprise mailing list
Enterprise@mozilla.org
https://mail.mozilla.org/listinfo/enterprise

To unsubscribe from this list, please visit 
https://mail.mozilla.org/listinfo/enterprise or send an email to 
enterprise-requ...@mozilla.org with a subject of "unsubscribe"

Re: [Mozilla Enterprise] Responsive Design Mode in FF60 ESR not working?

[Éric Périard]

I get the same thing after a quick test using 60.2.1 ESR...

From: Enterprise  On Behalf Of Peter Schlierf
Sent: Tuesday, September 25, 2018 9:20 AM
To: enterprise@mozilla.org
Subject: [Mozilla Enterprise] Responsive Design Mode in FF60 ESR not working?

Hello all,

I today got the response from some of my colleagues that the Responsive Design 
Mode (Ctrl + Shift + M)
will not work and only shows a blank screen in Firefox 60 ESR.

I can reproduce this on all of my machines (Windows 10 64Bit, Windows 7 32Bit + 
64Bit) with different FF60 ESR version installed, 60.1.0, 60.2.0 and 60.2.1 in 
32Bit and also 60.2.0 and 60.2.1 in 64Bit.

[cid:image001.png@01D454B2.B54AB130]

Website is completely loaded (looks likes Inspector and Debugger) but the 
screens stays blank, It is also not possible to disable the Responsive Design 
Mode.

Can anyone reproduce this or have some thoughts what causes this?

Freundliche Grüße / Best regards,

Peter Schlierf

___
Enterprise mailing list
Enterprise@mozilla.org
https://mail.mozilla.org/listinfo/enterprise

To unsubscribe from this list, please visit 
https://mail.mozilla.org/listinfo/enterprise or send an email to 
enterprise-requ...@mozilla.org with a subject of "unsubscribe"

Re: [Mozilla Enterprise] GPO Bookmarks

[Éric Périard]

Did you check with GPResult /h /f results.html for errors when the policy 
applies or if it applies at all?

-Original Message-
From: Enterprise  On Behalf Of Sirko Pöhlmann
Sent: Thursday, August 30, 2018 7:30 AM
To: Mozilla.org 
Subject: [Mozilla Enterprise] GPO Bookmarks

Hello,

Im using using the new GPOs under FF 60.1 ESR 32bit. "Normal" GPOs are working 
correctly since any month, but I'm in troubble with Bookmarks. 
In GPO configuration, I can activate Bookmarks, and I set "Title:" , "URL:" and 
"Placemant:" -> Toolbar.

But there are no bookmarks on the clients after a restart. I tested 
Bookmark-GPO as " Computer-Configutation" and "User-Configuration", but without 
success.

Is there any special style for field fill-in ?

Clients are on Windows 7 + 10 .

regards Poe



--
Dipl.-Ing.(FH) Sirko Poehlmann

Tel: 03641 3667 43 Fax: 03641 3667 77
GMBU e.V. - Fachsektion Photonik und Sensorik
Felsbachstraße 7D- 07745 Jena
poehlm...@gmbu.de www.gmbu.de


___
Enterprise mailing list
Enterprise@mozilla.org
https://mail.mozilla.org/listinfo/enterprise

To unsubscribe from this list, please visit 
https://mail.mozilla.org/listinfo/enterprise or send an email to 
enterprise-requ...@mozilla.org with a subject of "unsubscribe"
___
Enterprise mailing list
Enterprise@mozilla.org
https://mail.mozilla.org/listinfo/enterprise

To unsubscribe from this list, please visit 
https://mail.mozilla.org/listinfo/enterprise or send an email to 
enterprise-requ...@mozilla.org with a subject of "unsubscribe"

Re: [Mozilla Enterprise] app.update.enabled deprecation

[Éric Périard]

Thanks Karl.

-Original Message-
From: Enterprise  On Behalf Of Karl Scheel
Sent: Saturday, July 21, 2018 10:39 AM
To: enterprise@mozilla.org
Subject: Re: [Mozilla Enterprise] app.update.enabled deprecation

Hey there,

> I'll be notifying on this list where there are new templates 
> available. You can also keep an eye on:
>
> https://github.com/mozilla/policy-templates/releases
>
> Or just follow the repo and receive updates. I know that's not ideal, 
> but it's the easiest way.

You can also subscribe to an atom feed of the github releases:
https://github.com/mozilla/policy-templates/releases.atom

That's what I usually do when I want to keep up with projects hosted on GitHub.

kind regards!
Karl
___
Enterprise mailing list
Enterprise@mozilla.org
https://mail.mozilla.org/listinfo/enterprise

To unsubscribe from this list, please visit 
https://mail.mozilla.org/listinfo/enterprise or send an email to 
enterprise-requ...@mozilla.org with a subject of "unsubscribe"

Re: [Mozilla Enterprise] app.update.enabled deprecation

[Éric Périard]

I second that!

Does this also mean we’ll have to constantly update the ADMX template?

And is there a way to get notified when new templates are needed.

Some kind of ESR newsletter or update notification mailing list would be nice.

It could have the What’s New section.

Eric

From: Enterprise  On Behalf Of Jason Jackson
Sent: Friday, July 20, 2018 1:20 PM
To: 'Mozilla.org' 
Subject: Re: [Mozilla Enterprise] app.update.enabled deprecation

Thanks for the heads up.  I just wanted to confirm, this change won’t be in ESR 
60.3, correct?

If this is the way things are headed, I sure hope the next ESR will include 
documentation that lists what preferences are autoconfig-only, policy-only, or 
both.

-
Jason Jackson
Computer Systems Technician
North Vancouver School District


From: Enterprise [mailto:enterprise-boun...@mozilla.org] On Behalf Of Jim 
Mathies
Sent: July 20, 2018 9:22 AM
To: 'Mozilla.org' mailto:Enterprise@mozilla.org>>
Subject: [Mozilla Enterprise] app.update.enabled deprecation

Note that app.update.enabled was just removed from Nightly builds. This change 
will roll out in 63. To control updates you'll need to use the new enterprise 
policy system.

https://bugzilla.mozilla.org/show_bug.cgi?id=1420514#c113

Regards,
Jim

From: Enterprise 
mailto:enterprise-boun...@mozilla.org>> On 
Behalf Of Mike Kaply
Sent: Thursday, July 19, 2018 7:58 AM
To: Eddy Mendez mailto:mendez.e...@gmail.com>>
Cc: Robert Ernst 
mailto:r...@callcentrehosting.com>>; Mozilla.org 
mailto:Enterprise@mozilla.org>>
Subject: Re: [Mozilla Enterprise] NPAPI

You could use autoconfig and set the values

app.update.enabled and app.update.auto

to false

https://support.mozilla.org/en-US/products/firefox-enterprise/autoconfiguration-enterprise

Mike Kaply





On Thu, Jul 19, 2018 at 6:13 AM, Eddy Mendez 
mailto:mendez.e...@gmail.com>> wrote:
But, how could it be possible?  I mean how to block the automatic updates?

On Wed, Jul 18, 2018, 2:38 PM Mike Kaply 
mailto:mka...@mozilla.com>> wrote:
Yes, they'll need to continue using Firefox 52 and not update.

Mike Kaply

On Mon, Jul 16, 2018 at 11:45 AM, Robert Ernst 
mailto:r...@callcentrehosting.com>> wrote:

Hello All,

We currently use an NPAPI web phone (Zoiper). A number of our clients do 
not wish to switch over to IE preferring to continue using ESR 52.9 32 bit for 
the time being.

Will they need to disable updates currently set to the ESR channel to avoid 
prompts to update to 60.

Sincerely,

Robert Ernst
Director, Technical Operations
Call Centre Hosting Inc.

888.986.8571
r...@callcentrehosting.com

___
Enterprise mailing list
Enterprise@mozilla.org
https://mail.mozilla.org/listinfo/enterprise

To unsubscribe from this list, please visit 
https://mail.mozilla.org/listinfo/enterprise or send an email to 
enterprise-requ...@mozilla.org with a 
subject of "unsubscribe"

___
Enterprise mailing list
Enterprise@mozilla.org
https://mail.mozilla.org/listinfo/enterprise

To unsubscribe from this list, please visit 
https://mail.mozilla.org/listinfo/enterprise or send an email to 
enterprise-requ...@mozilla.org with a 
subject of "unsubscribe"

___
Enterprise mailing list
Enterprise@mozilla.org
https://mail.mozilla.org/listinfo/enterprise

To unsubscribe from this list, please visit 
https://mail.mozilla.org/listinfo/enterprise or send an email to 
enterprise-requ...@mozilla.org with a subject of "unsubscribe"

Re: [Mozilla Enterprise] FirefoxESR 60 and Windows 10 edition 1803 Problems installing.

[Éric Périard]

Check the Avecto logs?

From: Enterprise  On Behalf Of William Spratt
Sent: Thursday, May 17, 2018 5:44 AM
To: enterprise@mozilla.org
Subject: [Mozilla Enterprise] FirefoxESR 60 and Windows 10 edition 1803 
Problems installing.

Hi All,

Bit of an odd one this.  In Windows 10 (edition 1803) Firefox install okay on 
clean installs.  After installing the Avecto Defendpoint client, it installs 
okay in Safe Mode.  However... in normal mode, the installer unpacks the files, 
but then stops.  The installer window doesn't open.  Putting the ".exe" file 
into compatibility mode for 7 or 8 means the installer windows opens, you can 
select options, but then the progress bar hangs at about 10%.

The cause is clearly Avecto Defendpoint Client.  The install is being done with 
an Admin account, so the client shouldn't be getting involved at all.  Firefox 
also installs without issue in previous editions of Windows 10 (with the client 
installed).  Previous versions of Firefox have the same issue when trying to 
install in edition 1803 with the client active.

Has anyone had any similar experiences?

I'd like to whitelist the install files in the Avecto console to see if that 
resolves the issue.  Where does the ".exe" upack the files to?

Regards

Will

[http://fera.co.uk/files/signatures/Fera-Logo.jpg]

Will Spratt
IT Scientific Support Specialist
Fera Science Ltd.


william.spr...@fera.co.uk | Tel +44 (0)1904 
46 2631 | Mob +44 (0)7810855621

www.fera.co.uk | 
Twitter | 
LinkedIn | 
YouTube

___
Enterprise mailing list
Enterprise@mozilla.org
https://mail.mozilla.org/listinfo/enterprise

To unsubscribe from this list, please visit 
https://mail.mozilla.org/listinfo/enterprise or send an email to 
enterprise-requ...@mozilla.org with a subject of "unsubscribe"

Re: [Mozilla Enterprise] Releasenotes for ESR 52.5.1 missing

[Éric Périard]

lol

From: Enterprise [mailto:enterprise-boun...@mozilla.org] On Behalf Of Rivere 
Benjamin
Sent: Friday, December 08, 2017 3:54 AM
To: Robert Cooper 
Cc: enterprise@mozilla.org
Subject: Re: [Mozilla Enterprise] Releasenotes for ESR 52.5.1 missing

don't feed the troll guys.
He is a sysadmin :p

Cordialement


[cid:image001.gif@01D36FFE.E6715640]

Benjamin RIVERE
Administrateur Système et Réseau
Service Informatique


Tel. : 04 91 13 28 50 / 06 51 53 09 13

benjamin.riv...@cereq.fr




L'IT en image




De: "Robert Cooper" mailto:r...@noidea.us>>
À: enterprise@mozilla.org, "Ryan Gilmore" 
mailto:ry...@macc.edu>>, "William Spratt" 
mailto:william.spr...@fera.co.uk>>
Envoyé: Jeudi 7 Décembre 2017 16:49:31
Objet: Re: [Mozilla Enterprise] Releasenotes for ESR 52.5.1 missing

I'm pretty sure that was sarcasm. You don't need to be a sysadmin to get on or 
off the list, all you have to do is READ to the bottom of any message, 
including the ones you get when you first sign up.

RobertC

On December 7, 2017 8:18:01 AM CST, Ryan Gilmore 
mailto:ry...@macc.edu>> wrote:

Honestly, any decent sysadmin will not give out their username and password.
This would be a perfect case of a phishing attempt. There's no validation
that you are an admin when signing up for this mailing list. And anyone here
could be a potential threat.

If anyone has any issues being removed from this list, contact Mozilla
themselves.

Thank You
Ryan Gilmore

Computer Services Technician/Security Specialist
Moberly Area Community College
190 Shinn ln.
Hannibal, Mo 63401
573-231-0941 ext. 14029

NOTICE: This e-mail may contain information that is privileged,
confidential, or otherwise exempt from disclosure under applicable law.
If you are not the intended recipient or it appears from the context or
otherwise that you have received this e-mail in error, please permanently
delete this message and disregard.

-Original Message-
From: Enterprise [mailto:enterprise-boun...@mozilla.org] On Behalf Of
William Spratt
Sent: Thursday, December 7, 2017 2:38 AM
To: enterprise@mozilla.org
Subject: Re: [Mozilla Enterprise] Releasenotes for ESR 52.5.1 missing

Honestly, it's completely unprofessional, but...

If anyone wants to be unsubscribed from this list but can't get the
instructions (at the bottom of every e-mail from this list) to work, send me
a private e-mail with your webmail address, username and password then I'll
log in as you in order to unsubscribe you.

I'm nothing to do with Mozilla (apart from using their products), but you
can trust me.  I'm a SysAdmin.

Regards

Will

Will Spratt
IT Science Support Specialist
Tel: 01904 46 2631

-Original Message-
From: Josef Pizúr [mailto:jo...@freshbedynky.cz]
Sent: 07 December 2017 08:25
To: William Spratt 
mailto:william.spr...@fera.co.uk>>; 
enterprise@mozilla.org
Subject: RE: [Mozilla Enterprise] Releasenotes for ESR 52.5.1 missing

Again and again and again,

Could you erase my mail adress from this conversation pls?

I am not interested in.

!

-Original Message-
From: Enterprise [mailto:enterprise-boun...@mozilla.org] On Behalf Of
William Spratt
Sent: Thursday, December 7, 2017 9:21 AM
To: enterprise@mozilla.org
Subject: Re: [Mozilla Enterprise] Releasenotes for ESR 52.5.1 missing

Seconded - obviously a few people aren't finding this list relevant, but I
find information like this useful.

Regards

Will

Will Spratt
IT Science Support Specialist
Tel: 01904 46 2631

-Original Message-
From: Enterprise [mailto:enterprise-boun...@mozilla.org] On Behalf Of James
Pearson
Sent: 07 December 2017 08:07
To: enterprise@mozilla.org
Subject: Re: [Mozilla Enterprise] Releasenotes for ESR 52.5.1 missing

Sylvestre Ledru wrote:


 We will be publishing an ESR 52.5.2 probably tomorrow. We were not
 happy with 52.5.1 and we decided to postpone it.

OK - thanks for the info

James Pearson



Enterprise mailing list
Enterprise@mozilla.org
https://mail.mozilla.org/listinfo/enterprise

To unsubscribe from this list, please visit
https://mail.mozilla.org/listinfo/enterprise or send an email to
enterprise-requ...@mozilla.org with a 
subject of "unsubscribe"



Enterprise mailing list
Enterprise@mozilla.org
https://mail.mozilla.org/listinfo/enterprise

To unsubscribe from this list, please visit
https://mail.mozilla.org/listinfo/enterprise or send an email to
enterprise-requ...@mozilla.org with a 
subject of "unsubscribe"

_

Re: [Mozilla Enterprise] Suggestions

[Éric Périard]

Douteux effectivement.

From: Enterprise [mailto:enterprise-boun...@mozilla.org] On Behalf Of Ugo 
Bellavance
Sent: Monday, November 20, 2017 6:41 PM
To: Enterprise@mozilla.org
Subject: Re: [Mozilla Enterprise] Suggestions

Ton courriel est difficile à comprendre, voire douteux.

Pour les demandes d’ajout de fonctionnalité, il est suggéré d’utiliser 
https://bugzilla.mozilla.org/

Translation :

Your email is rather hard to understand, and looks suspicious.

For feature request, please use https://bugzilla.mozilla.org/



De : Enterprise [mailto:enterprise-boun...@mozilla.org] De la part de Cyril Le 
Roy
Envoyé : 20 novembre 2017 18:24
À : Enterprise@mozilla.org
Objet : [Mozilla Enterprise] Suggestions

Bonjour,
Je vous suggère d'ajouter un cryptage pour la zone de téléchargement de firefox 
voir pour firefox en entier de façon à ce que l'accéssibilité aux fichiers 
téléchargés ne soit possible que depuis firefox une fois celui ci ouvert. Ceci 
pourai aussi permettre de rendre plus difficile le fait de corrompre firefox.
Il serait bien aussi que lorsque l'on ouvre la page d'accueil de firefox par 
défault l'intégrité et l'origine du logiciel soit vérifiés.
J'ai des problèmes d'argent.
Compte à la banque CA languedoc 0669871 en france.
RIB joint.

J'ai par ailleurs une idée concernant un ordinateur ayant pour objet de rendre 
l'accès aux données personnelles impossible depuis internet.
Je suis hébergé.
Mon compte mail semble piraté.

Salutations.
Cyril Le Roy.
--
---
Book en pâtisserie et chocolaterie : http://mongato.fr
Partage de randonnée : http://www.circuitderando.com
Mail : cyril.le-...@xaalis.com
___
Enterprise mailing list
Enterprise@mozilla.org
https://mail.mozilla.org/listinfo/enterprise

To unsubscribe from this list, please visit 
https://mail.mozilla.org/listinfo/enterprise or send an email to 
enterprise-requ...@mozilla.org with a subject of "unsubscribe"

Re: [Mozilla Enterprise] Vista

[Éric Périard]

People are still using XP :/?

From: Enterprise [mailto:enterprise-boun...@mozilla.org] On Behalf Of Julien 
Cristau
Sent: Wednesday, October 11, 2017 6:10 AM
To: R. Rob Andre 
Cc: Enterprise@mozilla.org
Subject: Re: [Mozilla Enterprise] Vista

The end of support for xp and vista was announced at 
https://blog.mozilla.org/futurereleases/2017/10/04/firefox-support-for-windows-xp-and-vista/

Cheers,
Julien


On Wed, Oct 11, 2017 at 12:12 AM, R. Rob Andre 
mailto:robs78cle...@yahoo.com>> wrote:
Afternoon,
I'm still running my Windows Vista Ultimate using Firefox 52.4.0, how long will 
it still haphazardly (as it freezes up regularly whilst browsing Internet 
sites) be supported?

©"I quill my Prose at Candle's glow, to share with all my Friends..
Morning's break or Evening's end, this Poet's thoughts you'll know".

___
Enterprise mailing list
Enterprise@mozilla.org
https://mail.mozilla.org/listinfo/enterprise

To unsubscribe from this list, please visit 
https://mail.mozilla.org/listinfo/enterprise or send an email to 
enterprise-requ...@mozilla.org with a 
subject of "unsubscribe"

___
Enterprise mailing list
Enterprise@mozilla.org
https://mail.mozilla.org/listinfo/enterprise

To unsubscribe from this list, please visit 
https://mail.mozilla.org/listinfo/enterprise or send an email to 
enterprise-requ...@mozilla.org with a subject of "unsubscribe"

[Mozilla Enterprise] List Clean Up!

[Éric Périard]

Greetings,

It seems since I've registered with this mailing list that I've been receiving 
a lot of unwanted spam mail.

The admins should consider doing a user cleanup for machine accounts.

Easy fix is to send a de-activation notice where a human has to click "confirm" 
to keep their account active, that weed out the bots quite easily.

Thanks!

Eric
___
Enterprise mailing list
Enterprise@mozilla.org
https://mail.mozilla.org/listinfo/enterprise

To unsubscribe from this list, please visit 
https://mail.mozilla.org/listinfo/enterprise or send an email to 
enterprise-requ...@mozilla.org with a subject of "unsubscribe"

Re: [Mozilla Enterprise] Auto-Update

[Éric Périard]

We have Chrome on auto update and it’s been fine, I’ve just been wanting 
Firefox to behave the same.

Yes I’m fully aware, but in our environment setup it’s fine… I used to come 
from  web dev background.

I’m using SCCM R2 Buld 1702 for my deployment ;)

From: Alexandre Gauvrit [mailto:agauv...@tranquil.it]
Sent: Tuesday, July 04, 2017 4:04 PM
To: Éric Périard 
Cc: enterprise@mozilla.org
Subject: Re: [Mozilla Enterprise] Auto-Update

Bonjour Éric,

IMO, Firefox is one on the key softwares used in production.

Letting Mozilla Firefox updating by itself can lead to some issues as we had 
lately with Firefox ESR 52.2.0, printing from Firefox would print pictures 
only, avoiding text.

You should consider qualifying updates before deploying them.

What method do you use to deploy Firefox ? GPO ? Software packager ?

Alexandre

Le 4 juil. 2017 9:05 PM, Éric Périard 
mailto:eric.peri...@ccirc-ccric.ca>> a écrit :

So another question.



app.update.silent does this make Firefox check and update automatically? A bit 
like Chrome checks in the background and upon next browser start the update is 
applied.



Éric S. Périard
Laboratory Administrator | Administrateur de laboratoire
Canadian Cyber Incident Response Centre | Centre canadien de réponse aux 
incidents cybernétiques
Public Safety Canada | Sécurité publique Canada
Telephone | Téléphone  1-613-991-3555
eric.peri...@canada.ca<mailto:eric.peri...@canada.ca> | 
eric.peri...@ccirc-ccric.ca<mailto:eric.peri...@ccirc-ccric.ca>
PublicSafety.gc.ca<https://www.publicsafety.gc.ca/cnt/ntnl-scrt/cbr-scrt/ccirc-ccric-en.aspx>|
 
SecuritePublique.gc.ca<https://www.publicsafety.gc.ca/cnt/ntnl-scrt/cbr-scrt/ccirc-ccric-fr.aspx>
Government of Canada | Gouvernement du Canada



___
Enterprise mailing list
Enterprise@mozilla.org
https://mail.mozilla.org/listinfo/enterprise

To unsubscribe from this list, please visit 
https://mail.mozilla.org/listinfo/enterprise or send an email to 
enterprise-requ...@mozilla.org with a subject of "unsubscribe"

[Mozilla Enterprise] Auto-Update

[Éric Périard]

So another question.

app.update.silent does this make Firefox check and update automatically? A bit 
like Chrome checks in the background and upon next browser start the update is 
applied.

Éric S. Périard
Laboratory Administrator | Administrateur de laboratoire
Canadian Cyber Incident Response Centre | Centre canadien de réponse aux 
incidents cybernétiques
Public Safety Canada | Sécurité publique Canada
Telephone | Téléphone  1-613-991-3555
eric.peri...@canada.ca | 
eric.peri...@ccirc-ccric.ca
PublicSafety.gc.ca|
 
SecuritePublique.gc.ca
Government of Canada | Gouvernement du Canada

___
Enterprise mailing list
Enterprise@mozilla.org
https://mail.mozilla.org/listinfo/enterprise

To unsubscribe from this list, please visit 
https://mail.mozilla.org/listinfo/enterprise or send an email to 
enterprise-requ...@mozilla.org with a subject of "unsubscribe"

Re: [Mozilla Enterprise] Firefox GPO Template

[Éric Périard]

Sweet for the heck of it I tried the yellow highlighted parameters and it works!

lockPref("app.update.auto", true);
lockPref("app.update.enabled", true);
lockPref("app.update.service.enabled", true);
lockPref("network.proxy.type", 4);
lockPref("extensions.autoDisableScopes", 0);
lockPref("datareporting.healthreport.service.enabled", false);
lockPref("toolkit.crashreporter.enabled", false);
lockPref("security.enterprise_roots.enabled", true);

pref("browser.startup.homepage","https://www.google.ca/";);
pref("browser.shell.checkDefaultBrowser", false);
pref("browser.startup.homepage_override.mstone", "ignore");
pref("browser.rights.3.shown", true);
pref("toolkit.telemetry.prompted", 2);
pref("toolkit.telemetry.rejected", true);
pref("pdfjs.disabled", true);
pref("plugins.notifyMissingFlash", false);
Components.classes["@mozilla.org/toolkit/crash-reporter;1"].getService(Components.interfaces.nsICrashReporter).submitReports
 = false;

From: Enterprise [mailto:enterprise-boun...@mozilla.org] On Behalf Of Éric 
Périard
Sent: Tuesday, July 04, 2017 2:24 PM
To: 'Dipen Narendra Kumar' ; 
enterprise@mozilla.org
Subject: Re: [Mozilla Enterprise] Firefox GPO Template

SWEET... This is exactly what I wanted to hear.

It was probably a discussion piece here a while ago but I haven't paid 
attention since my previous package was working.

I assume that value below can be changed with the mozilla.cfg?!

Eric

From: Dipen Narendra Kumar [mailto:dipen.ku...@harmonic-capital.com]
Sent: Tuesday, July 04, 2017 11:51 AM
To: Éric Périard 
mailto:eric.peri...@ccirc-ccric.ca>>; 
enterprise@mozilla.org<mailto:enterprise@mozilla.org>
Subject: RE: Firefox GPO Template

HI Eric,

Firefox now has the option to use the Windows Certificate Store.

To enable this functionality you need to set the following:

security.enterprise_roots.enabled  to true

We use the config file to lock down settings in Firefox and I no longer have to 
manually import each certificate into the Firefox certdb.

Mike wrote a blog entry for it: 
https://mike.kaply.com/2016/09/01/upcoming-changes-to-root-certificates-in-firefox-on-windows/

Cheers,

Dipen

From: Enterprise [mailto:enterprise-boun...@mozilla.org] On Behalf Of Éric 
Périard
Sent: 04 July 2017 16:43
To: enterprise@mozilla.org<mailto:enterprise@mozilla.org>
Subject: [Mozilla Enterprise] Firefox GPO Template

Hello community,

Opinions on the custom GPO adm template below...

I've recently pulled FF ESR from the network because of the annoyance it is to 
import a certificate (cert8) into each users profile.

I've been running ESR for about 2 years but I'm trying to minimize the backend 
script of my software deployments.

So essentially I looked up that GPO and it has a solution to grab the SSL cert 
database from a central location and import it into the default user profile 
AND existing users.

Has anyone experimented with that feature and made it work successfully?

Essentially my ORG does SSL inspection and we have our own network's 
certificate has a middleman before it gets out to check validity of the source 
and to do that we merge our CA into the FF cert8 db.

https://sourceforge.net/projects/firefoxadm/

thanks!


Éric S. Périard
Laboratory Administrator | Administrateur de laboratoire
Canadian Cyber Incident Response Centre | Centre canadien de réponse aux 
incidents cybernétiques
Public Safety Canada | Sécurité publique Canada
Telephone | Téléphone  1-613-991-3555
eric.peri...@canada.ca<mailto:eric.peri...@canada.ca> | 
eric.peri...@ccirc-ccric.ca<mailto:eric.peri...@ccirc-ccric.ca>
PublicSafety.gc.ca<https://www.publicsafety.gc.ca/cnt/ntnl-scrt/cbr-scrt/ccirc-ccric-en.aspx>|
 
SecuritePublique.gc.ca<https://www.publicsafety.gc.ca/cnt/ntnl-scrt/cbr-scrt/ccirc-ccric-fr.aspx>
Government of Canada | Gouvernement du Canada



Past results are not necessarily indicative of future results. Commodity 
interest trading involves substantial risk of loss. This e-mail, and any 
attachment, is confidential and for the intended recipient(s) only, subject to 
important disclaimers and conditions available at 
http://www.harmonic-capital.com/disclaimer . This communication is not an offer 
(or solicitation of an offer) to buy or sell products or investment advisory 
services that may be mentioned. Harmonic Capital Partners LLP (Harmonic) is 
authorised and regulated by the Financial Conduct Authority. Harmonic is 
registered in England and Wales with company registration number OC303094, and 
registered office at 3 Lombard Street, London, EC3V 9AA, UK.
___
Enterprise mailing list
Enterprise@mozilla.org
https://mail.mozilla.org/listinfo/enterprise

To unsubscribe from this list, please visit 
https://mail.mozilla.org/listinfo/enterprise or send an email to 
enterprise-requ...@mozilla.org with a subject of "unsubscribe"

Re: [Mozilla Enterprise] Firefox GPO Template

[Éric Périard]

SWEET... This is exactly what I wanted to hear.

It was probably a discussion piece here a while ago but I haven't paid 
attention since my previous package was working.

I assume that value below can be changed with the mozilla.cfg?!

Eric

From: Dipen Narendra Kumar [mailto:dipen.ku...@harmonic-capital.com]
Sent: Tuesday, July 04, 2017 11:51 AM
To: Éric Périard ; enterprise@mozilla.org
Subject: RE: Firefox GPO Template

HI Eric,

Firefox now has the option to use the Windows Certificate Store.

To enable this functionality you need to set the following:

security.enterprise_roots.enabled  to true

We use the config file to lock down settings in Firefox and I no longer have to 
manually import each certificate into the Firefox certdb.

Mike wrote a blog entry for it: 
https://mike.kaply.com/2016/09/01/upcoming-changes-to-root-certificates-in-firefox-on-windows/

Cheers,

Dipen

From: Enterprise [mailto:enterprise-boun...@mozilla.org] On Behalf Of Éric 
Périard
Sent: 04 July 2017 16:43
To: enterprise@mozilla.org<mailto:enterprise@mozilla.org>
Subject: [Mozilla Enterprise] Firefox GPO Template

Hello community,

Opinions on the custom GPO adm template below...

I've recently pulled FF ESR from the network because of the annoyance it is to 
import a certificate (cert8) into each users profile.

I've been running ESR for about 2 years but I'm trying to minimize the backend 
script of my software deployments.

So essentially I looked up that GPO and it has a solution to grab the SSL cert 
database from a central location and import it into the default user profile 
AND existing users.

Has anyone experimented with that feature and made it work successfully?

Essentially my ORG does SSL inspection and we have our own network's 
certificate has a middleman before it gets out to check validity of the source 
and to do that we merge our CA into the FF cert8 db.

https://sourceforge.net/projects/firefoxadm/

thanks!


Éric S. Périard
Laboratory Administrator | Administrateur de laboratoire
Canadian Cyber Incident Response Centre | Centre canadien de réponse aux 
incidents cybernétiques
Public Safety Canada | Sécurité publique Canada
Telephone | Téléphone  1-613-991-3555
eric.peri...@canada.ca<mailto:eric.peri...@canada.ca> | 
eric.peri...@ccirc-ccric.ca<mailto:eric.peri...@ccirc-ccric.ca>
PublicSafety.gc.ca<https://www.publicsafety.gc.ca/cnt/ntnl-scrt/cbr-scrt/ccirc-ccric-en.aspx>|
 
SecuritePublique.gc.ca<https://www.publicsafety.gc.ca/cnt/ntnl-scrt/cbr-scrt/ccirc-ccric-fr.aspx>
Government of Canada | Gouvernement du Canada



Past results are not necessarily indicative of future results. Commodity 
interest trading involves substantial risk of loss. This e-mail, and any 
attachment, is confidential and for the intended recipient(s) only, subject to 
important disclaimers and conditions available at 
http://www.harmonic-capital.com/disclaimer . This communication is not an offer 
(or solicitation of an offer) to buy or sell products or investment advisory 
services that may be mentioned. Harmonic Capital Partners LLP (Harmonic) is 
authorised and regulated by the Financial Conduct Authority. Harmonic is 
registered in England and Wales with company registration number OC303094, and 
registered office at 3 Lombard Street, London, EC3V 9AA, UK.
___
Enterprise mailing list
Enterprise@mozilla.org
https://mail.mozilla.org/listinfo/enterprise

To unsubscribe from this list, please visit 
https://mail.mozilla.org/listinfo/enterprise or send an email to 
enterprise-requ...@mozilla.org with a subject of "unsubscribe"

[Mozilla Enterprise] Firefox GPO Template

[Éric Périard]

Hello community,

Opinions on the custom GPO adm template below...

I've recently pulled FF ESR from the network because of the annoyance it is to 
import a certificate (cert8) into each users profile.

I've been running ESR for about 2 years but I'm trying to minimize the backend 
script of my software deployments.

So essentially I looked up that GPO and it has a solution to grab the SSL cert 
database from a central location and import it into the default user profile 
AND existing users.

Has anyone experimented with that feature and made it work successfully?

Essentially my ORG does SSL inspection and we have our own network's 
certificate has a middleman before it gets out to check validity of the source 
and to do that we merge our CA into the FF cert8 db.

https://sourceforge.net/projects/firefoxadm/

thanks!


Éric S. Périard
Laboratory Administrator | Administrateur de laboratoire
Canadian Cyber Incident Response Centre | Centre canadien de réponse aux 
incidents cybernétiques
Public Safety Canada | Sécurité publique Canada
Telephone | Téléphone  1-613-991-3555
eric.peri...@canada.ca | 
eric.peri...@ccirc-ccric.ca
PublicSafety.gc.ca|
 
SecuritePublique.gc.ca
Government of Canada | Gouvernement du Canada

___
Enterprise mailing list
Enterprise@mozilla.org
https://mail.mozilla.org/listinfo/enterprise

To unsubscribe from this list, please visit 
https://mail.mozilla.org/listinfo/enterprise or send an email to 
enterprise-requ...@mozilla.org with a subject of "unsubscribe"

Re: [Mozilla Enterprise] Issue regarding installation of Java 8

[Éric Périard]

You may want to add more details

From: Enterprise [mailto:enterprise-boun...@mozilla.org] On Behalf Of AMIT 
KUMAR MISHRA
Sent: Thursday, May 18, 2017 12:14 AM
To: Enterprise@mozilla.org
Subject: [Mozilla Enterprise] Issue regarding installation of Java 8

Dear Sir,

I am trying to install Java 8 several time but after installation every time 
its ask again and again, and also Java 8 not verify.

Please resolve this issue.

Regards

Amit Kumar Mishra


___
Enterprise mailing list
Enterprise@mozilla.org
https://mail.mozilla.org/listinfo/enterprise

To unsubscribe from this list, please visit 
https://mail.mozilla.org/listinfo/enterprise or send an email to 
enterprise-requ...@mozilla.org with a subject of "unsubscribe"

Re: [Mozilla Enterprise] (no subject)

[Éric Périard]

___
Enterprise mailing list
Enterprise@mozilla.org
https://mail.mozilla.org/listinfo/enterprise

To unsubscribe from this list, please visit 
https://mail.mozilla.org/listinfo/enterprise or send an email to 
enterprise-requ...@mozilla.org with a 
subject of "unsubscribe"


From: Enterprise [mailto:enterprise-boun...@mozilla.org] On Behalf Of Daniel 
Kammerer
Sent: Wednesday, May 17, 2017 1:33 PM
To: enterprise@mozilla.org
Subject: [Mozilla Enterprise] (no subject)

Jo Please unsubscribe my Email dein the list



kam.stuttg...@googlemail.com


Thank you in Advance
___
Enterprise mailing list
Enterprise@mozilla.org
https://mail.mozilla.org/listinfo/enterprise

To unsubscribe from this list, please visit 
https://mail.mozilla.org/listinfo/enterprise or send an email to 
enterprise-requ...@mozilla.org with a subject of "unsubscribe"

Re: [Mozilla Enterprise] Stop your emails please

[Éric Périard]

The follow the easy instructions and unsubscribe, duh…

From: Enterprise [mailto:enterprise-boun...@mozilla.org] On Behalf Of Gys Visser
Sent: Thursday, April 27, 2017 4:09 AM
To: enterprise@mozilla.org
Subject: [Mozilla Enterprise] Stop your emails please


___
Enterprise mailing list
Enterprise@mozilla.org
https://mail.mozilla.org/listinfo/enterprise

To unsubscribe from this list, please visit 
https://mail.mozilla.org/listinfo/enterprise or send an email to 
enterprise-requ...@mozilla.org with a subject of "unsubscribe"

[Mozilla Enterprise] Notepad++ exploit

[Éric Périard]

Hey,

Not really related to Firefox but I thought it may be of interest since many of 
us are deployment experts.

https://www.ghacks.net/2017/03/09/notepad-7-3-3-update-fixes-cia-vulnerability/

Apparently an CIA exploited has been uncovered on the older versions of np++.

G’day!


Éric S. Périard
Laboratory Administrator | Administrateur de laboratoire
Canadian Cyber Incident Response Centre | Centre canadien de réponse aux 
incidents cybernétiques
Public Safety Canada | Sécurité publique Canada
eric.peri...@canada.ca | 
eric.peri...@ccirc-ccric.ca
PublicSafety.gc.ca| 
SecuritePublique.gc.ca
Government of Canada | Gouvernement du Canada


___
Enterprise mailing list
Enterprise@mozilla.org
https://mail.mozilla.org/listinfo/enterprise

To unsubscribe from this list, please visit 
https://mail.mozilla.org/listinfo/enterprise or send an email to 
enterprise-requ...@mozilla.org with a subject of "unsubscribe"

Re: [Mozilla Enterprise] Setting Firefox as default using a cmd line

[Éric Périard]

I’ve done some testing following this conversation.

To make Firefox the default browser for all “future users” use the following 
command line:

x86 "%ProgramFiles(x86)%\Mozilla Firefox\uninstall\helper.exe" 
/SetAsDefaultAppGlobal

x64 "%ProgramFiles%\Mozilla Firefox\uninstall\helper.exe" /SetAsDefaultAppGlobal

Observation: When new users login to the system regardless that “Chrome” or 
“Firefox” or “Internet Explorer” don’t mention being the default browser, for 
testing purposes I typed google.ca from an explorer window and Firefox was 
launched every time. However this command does not overwrite pre-exiting users 
on the system.

To make Firefox the default browser for the current user use the following 
command line:

x86 "%ProgramFiles(x86)%\Mozilla Firefox\uninstall\helper.exe" 
/SetAsDefaultAppUser

x64 "%ProgramFiles%\Mozilla Firefox\uninstall\helper.exe" /SetAsDefaultAppUser

Observation: This command takes effect immediately and the Firefox browser is 
set to the current user’s session to as default.

If you got SCCM you could have a silent batch file ran with the users’ 
permission at the login time to set the browser default to Firefox.

Or by policy you could deploy batch script that silently sets the user’s 
default browser.

There’s many way to go about this really.

Eric








From: Enterprise [mailto:enterprise-boun...@mozilla.org] On Behalf Of Nicolas 
Gardi
Sent: Thursday, January 05, 2017 4:25 AM
To: William Spratt; enterprise@mozilla.org; Nicolas Gardi
Subject: Re: [Mozilla Enterprise] Setting Firefox as default using a cmd line

After some more research I found that this seems to work:

"%ProgramFiles(x86)%\Mozilla Firefox\uninstall\helper.exe" /SetAsDefaultAppUser

Best,
Nicolas
From:

"Nicolas Gardi" mailto:nicolas.ga...@oakfnd.ch>>

To:

"William Spratt" mailto:william.spr...@fera.co.uk>>, 
"enterprise@mozilla.org" 
mailto:enterprise@mozilla.org>>

Date:

05 Janvier 2017 08:34

Subject:

Re: [Mozilla Enterprise] Setting Firefox as default using a cmd line

Hi Will,

It has been a while that I am looking for the same thing.

The only thing I could do so far is to force https, http and ftp to be opened 
via registry like:

[HKEY_CLASSES_ROOT\https\shell\open\command]
@="\"C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe\" 
-osint -url \"%1\""
"DelegateExecute"="{17FE9752-0B5A-4665-84CD-569794602F5C}"

[HKEY_CLASSES_ROOT\http\shell\open\command]
@="\"C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe\" 
-osint -url \"%1\""

[HKEY_CLASSES_ROOT\ftp\shell\open\command]
@="\"C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe\" 
-osint -url \"%1\""
"DelegateExecute"="{17FE9752-0B5A-4665-84CD-569794602F5C}"

But that seems not to be the clean way as in FF it shows me the options to make 
is default...

Thanks,
Nicolas
From:

William Spratt mailto:william.spr...@fera.co.uk>>

To:

"enterprise@mozilla.org" 
mailto:enterprise@mozilla.org>>

Date:

03 Janvier 2017 16:16

Subject:

[Mozilla Enterprise] Setting Firefox as default using a cmd line

Hi All,

So during the interactive install, the installer prompts if the user wants 
Firefox to be the default browser.

I install using a VBA script to copy settings files over before silently 
installing, but I can’t find the setting to make it default.

Looking on the internet suggests these command lines should work:

C:\Program Files (x86)\Mozilla Firefox\firefox.exe -setDefaultBrowser

C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe 
/SetAsDefaultAppGlobal

However, once install is complete I check under “options” in Firefox and it’s 
still showing “not the default browser”.

Running in a Windows 7 environment, but we’re shortly updating to Windows 10.

We distribute Firefox via the script in SCCM, but I’m looking to get the script 
working locally before trying to remotely install though SCCM.

Each device tends to only have one user, so not bothered about setting it 
automatically as default for all Window 7 profiles on the machine.

Has anyone dealt with this before?

Regards

Will



Will Spratt
IT Scientific Support Specialist
Fera Science Ltd.


william.spr...@fera.co.uk | Tel +44 (0)1904 
46 2631 | Mob +44 (0)7810855621

www.fera.co.uk | 
Twitter | 
LinkedIn | 
YouTube

[OriGen-Logo]
Introducing OriGen - Fera’s new contamination traceback service
Utilising whole genome sequencing we can help you prevent future product recalls
For more details click 
here.
___
Enterprise mailing list
Enterprise@mozilla.org
https://mail.mozilla.org/listinfo/enterprise

To unsubscribe from this list, please visit 
https://mail.mozilla.org/listinfo/enterprise or send an email to 
enterprise

[Mozilla Enterprise] Recall: Setting Firefox as default using a cmd line

[Éric Périard]

Éric Périard would like to recall the message, "[Mozilla Enterprise] Setting 
Firefox as default using a cmd line".
___
Enterprise mailing list
Enterprise@mozilla.org
https://mail.mozilla.org/listinfo/enterprise

To unsubscribe from this list, please visit 
https://mail.mozilla.org/listinfo/enterprise or send an email to 
enterprise-requ...@mozilla.org with a subject of "unsubscribe"

Re: [Mozilla Enterprise] Setting Firefox as default using a cmd line

[Éric Périard]

I’ve done some testing following this conversation.

To make Firefox the default browser for all “future users” use the following 
command line:

x86 "%ProgramFiles(x86)%\Mozilla Firefox\uninstall\helper.exe" 
/SetAsDefaultAppGlobal

x64 "%ProgramFiles(x86)%\Mozilla Firefox\uninstall\helper.exe" 
/SetAsDefaultAppGlobal

Observation: When new users login to the system regardless that “Chrome” or 
“Firefox” or “Internet Explorer” don’t mention being the default browser, for 
testing purposes I typed google.ca from an explorer window and Firefox was 
launched every time. However this command does not overwrite pre-exiting users 
on the system.

To make Firefox the default browser for the current user use the following 
command line:

x86 "%ProgramFiles(x86)%\Mozilla Firefox\uninstall\helper.exe" 
/SetAsDefaultAppUser

x64 "%ProgramFiles(x86)%\Mozilla Firefox\uninstall\helper.exe" 
/SetAsDefaultAppUser

Observation: This command takes effect immediately and the Firefox browser is 
set to the current user’s session to as default.

If you got SCCM you could have a silent batch file ran with the users’ 
permission at the login time to set the browser default to Firefox.

Or by policy you could deploy batch script that silently sets the user’s 
default browser.

There’s many way to go about this really.

Eric








From: Enterprise [mailto:enterprise-boun...@mozilla.org] On Behalf Of Nicolas 
Gardi
Sent: Thursday, January 05, 2017 4:25 AM
To: William Spratt; enterprise@mozilla.org; Nicolas Gardi
Subject: Re: [Mozilla Enterprise] Setting Firefox as default using a cmd line

After some more research I found that this seems to work:

"%ProgramFiles(x86)%\Mozilla Firefox\uninstall\helper.exe" /SetAsDefaultAppUser

Best,
Nicolas
From:

"Nicolas Gardi" mailto:nicolas.ga...@oakfnd.ch>>

To:

"William Spratt" mailto:william.spr...@fera.co.uk>>, 
"enterprise@mozilla.org" 
mailto:enterprise@mozilla.org>>

Date:

05 Janvier 2017 08:34

Subject:

Re: [Mozilla Enterprise] Setting Firefox as default using a cmd line

Hi Will,

It has been a while that I am looking for the same thing.

The only thing I could do so far is to force https, http and ftp to be opened 
via registry like:

[HKEY_CLASSES_ROOT\https\shell\open\command]
@="\"C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe\" 
-osint -url \"%1\""
"DelegateExecute"="{17FE9752-0B5A-4665-84CD-569794602F5C}"

[HKEY_CLASSES_ROOT\http\shell\open\command]
@="\"C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe\" 
-osint -url \"%1\""

[HKEY_CLASSES_ROOT\ftp\shell\open\command]
@="\"C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe\" 
-osint -url \"%1\""
"DelegateExecute"="{17FE9752-0B5A-4665-84CD-569794602F5C}"

But that seems not to be the clean way as in FF it shows me the options to make 
is default...

Thanks,
Nicolas
From:

William Spratt mailto:william.spr...@fera.co.uk>>

To:

"enterprise@mozilla.org" 
mailto:enterprise@mozilla.org>>

Date:

03 Janvier 2017 16:16

Subject:

[Mozilla Enterprise] Setting Firefox as default using a cmd line

Hi All,

So during the interactive install, the installer prompts if the user wants 
Firefox to be the default browser.

I install using a VBA script to copy settings files over before silently 
installing, but I can’t find the setting to make it default.

Looking on the internet suggests these command lines should work:

C:\Program Files (x86)\Mozilla Firefox\firefox.exe -setDefaultBrowser

C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe 
/SetAsDefaultAppGlobal

However, once install is complete I check under “options” in Firefox and it’s 
still showing “not the default browser”.

Running in a Windows 7 environment, but we’re shortly updating to Windows 10.

We distribute Firefox via the script in SCCM, but I’m looking to get the script 
working locally before trying to remotely install though SCCM.

Each device tends to only have one user, so not bothered about setting it 
automatically as default for all Window 7 profiles on the machine.

Has anyone dealt with this before?

Regards

Will


[http://fera.co.uk/files/signatures/Fera-Logo.jpg]

Will Spratt
IT Scientific Support Specialist
Fera Science Ltd.


william.spr...@fera.co.uk | Tel +44 (0)1904 
46 2631 | Mob +44 (0)7810855621

www.fera.co.uk | 
Twitter | 
LinkedIn | 
YouTube

[OriGen-Logo]
Introducing OriGen - Fera’s new contamination traceback service
Utilising whole genome sequencing we can help you prevent future product recalls
For more details click 
here.
___
Enterprise mailing list
Enterprise@mozilla.org
https://mail.mozilla.org/listinfo/enterprise

To unsubscribe from this list, please visit 
https://mail.

Re: [Mozilla Enterprise] [Spam] Re: شكرا لكم أريد أن أكون عضو في المؤسسة فقط بدون مجموعة وتبادل مسجات ع البريد الإلكتروني

[Éric Périard]

Probably….


From: Delfi Ramirez [mailto:delf...@gmail.com]
Sent: Wednesday, December 28, 2016 7:41 AM
To: Éric Périard
Cc: jwan tork; enterprise@mozilla.org
Subject: [Spam] Re: [Mozilla Enterprise] شكرا لكم أريد أن أكون عضو في المؤسسة 
فقط بدون مجموعة وتبادل مسجات ع البريد الإلكتروني

I guess, I am afraid, this jonarame50 post may be kind of spam.

May it be?


Delfi Ramirez i Ruiz
http://delfiramirez.info
http://segonquart.net
http://delfiramirez.blogspot.com
skype: segonquart
linkedin: https://www.linkedin.com/in/delfiramirez
08005 Barcelona. Spain
__

2016-12-28 13:05 GMT+01:00 Éric Périard 
mailto:eric.peri...@ccirc-ccric.ca>>:
English please

From: Enterprise 
[mailto:enterprise-boun...@mozilla.org<mailto:enterprise-boun...@mozilla.org>] 
On Behalf Of jwan tork
Sent: Tuesday, December 27, 2016 5:33 PM
To: enterprise@mozilla.org<mailto:enterprise@mozilla.org>
Subject: [Mozilla Enterprise] شكرا لكم أريد أن أكون عضو في المؤسسة فقط بدون 
مجموعة وتبادل مسجات ع البريد الإلكتروني

شكرا لكم أريد أن أكون عضو في المؤسسة فقط بدون مجموعة وتبادل مسجات ع البريد 
الإلكتروني

___
Enterprise mailing list
Enterprise@mozilla.org<mailto:Enterprise@mozilla.org>
https://mail.mozilla.org/listinfo/enterprise

To unsubscribe from this list, please visit 
https://mail.mozilla.org/listinfo/enterprise or send an email to 
enterprise-requ...@mozilla.org<mailto:enterprise-requ...@mozilla.org> with a 
subject of "unsubscribe"

___
Enterprise mailing list
Enterprise@mozilla.org
https://mail.mozilla.org/listinfo/enterprise

To unsubscribe from this list, please visit 
https://mail.mozilla.org/listinfo/enterprise or send an email to 
enterprise-requ...@mozilla.org with a subject of "unsubscribe"

Re: [Mozilla Enterprise] شكرا لكم أريد أن أكون عضو في المؤسسة فقط بدون مجموعة وتبادل مسجات ع البريد الإلكتروني

[Éric Périard]

English please

From: Enterprise [mailto:enterprise-boun...@mozilla.org] On Behalf Of jwan tork
Sent: Tuesday, December 27, 2016 5:33 PM
To: enterprise@mozilla.org
Subject: [Mozilla Enterprise] شكرا لكم أريد أن أكون عضو في المؤسسة فقط بدون 
مجموعة وتبادل مسجات ع البريد الإلكتروني

شكرا لكم أريد أن أكون عضو في المؤسسة فقط بدون مجموعة وتبادل مسجات ع البريد 
الإلكتروني
___
Enterprise mailing list
Enterprise@mozilla.org
https://mail.mozilla.org/listinfo/enterprise

To unsubscribe from this list, please visit 
https://mail.mozilla.org/listinfo/enterprise or send an email to 
enterprise-requ...@mozilla.org with a subject of "unsubscribe"

Re: [Mozilla Enterprise] Current 0-Day

[Éric Périard]

Hey thanks for the heads up Roger, I’ve pulled the browser from all desktops 
until further notice.


Éric S. Périard
Laboratory Administrator | Administrateur de laboratoire
Canadian Cyber Incident Response Centre | Centre canadien de réponse aux 
incidents cybernétiques
Public Safety Canada | Sécurité publique Canada
eric.peri...@canada.ca | 
eric.peri...@ccirc-ccric.ca
PublicSafety.gc.ca| 
SecuritePublique.gc.ca
Government of Canada | Gouvernement du Canada



From: Enterprise [mailto:enterprise-boun...@mozilla.org] On Behalf Of Crawford, 
Roger
Sent: Wednesday, November 30, 2016 10:46 AM
To: enterprise@mozilla.org
Cc: enterprise@mozilla.org
Subject: [Mozilla Enterprise] Current 0-Day

Given this 0-Day we have Firefox blocked across the enterprise, is there 
official word of ETA on a fix?

https://www.wordfence.com/blog/2016/11/emergency-bulletin-firefox-0-day-wild/

Thanks


Roger Crawford
Systems Engineer
American Public University System


This message is private and confidential. If you have received it in error, 
please notify the sender and remove it from your system.
___
Enterprise mailing list
Enterprise@mozilla.org
https://mail.mozilla.org/listinfo/enterprise

To unsubscribe from this list, please visit 
https://mail.mozilla.org/listinfo/enterprise or send an email to 
enterprise-requ...@mozilla.org with a subject of "unsubscribe"

Re: [Mozilla Enterprise] unsubscribe

[Éric Périard]

lol

-Original Message-
From: Enterprise [mailto:enterprise-boun...@mozilla.org] On Behalf Of Elbart
Sent: Wednesday, November 16, 2016 9:55 AM
To: enterprise@mozilla.org
Subject: Re: [Mozilla Enterprise] unsubscribe

Three unsubscribe-failures in a row, that got to be a record.
Maybe the mailinglist-server should respond to these messages with a link to a 
McDonald's-application-form.

>
> Tim Rausch   |   Network Administrator   |   tim.rau...@milliman.com
> Milliman   |   15800 W. Bluemound Road, Suite 100   |   Brookfield, WI 53005  
> |   USA
> Direct +1 (262) 641-3512   |   Mobile +1 (920) 382-7420 |   milliman.com
>
>
>
> -Original Message-
> From: Enterprise [mailto:enterprise-boun...@mozilla.org] On Behalf Of 
> enterprise-requ...@mozilla.org
> Sent: Wednesday, November 16, 2016 6:00 AM
> To: enterprise@mozilla.org
> Subject: Enterprise Digest, Vol 65, Issue 8
>
> To unsubscribe via the web interface, visit 
> https://mail.mozilla.org/listinfo/enterprise
> or, via email, send a message with a subject or body of 'unsubscribe'
> to
> enterprise-requ...@mozilla.org
>
> Send Enterprise mailing list submissions to enterprise@mozilla.org
>
> You can reach the person managing the list at 
> enterprise-ow...@mozilla.org
>
> When replying, please edit your Subject line so it is more specific than "Re: 
> Contents of Enterprise digest..."
>
>
> Today's Topics:
>
> 1.  Firefox ESR 45.5 Released (Liz Henry (:lizzard))
> 2.  deactivate any Videos in Mozilla Firefox45.4.0 ESR (Bongardt)
> 3. Re:  Silently Installing Add-ons/ .xpi ? (AHARCHI Hesdin)
> 4. Re:  Silently Installing Add-ons/ .xpi ?
>(Portillo, Estevan (NIH/NHGRI) [C])
> 5. Re:  Firefox ESR 45.5 Released (Liz Henry (:lizzard))
> 6. Re:  deactivate any Videos in Mozilla Firefox 45.4.0 ESR
>(James Pearson)
> 7. Re:  Quicktime and MP4 playback with ESR 45 on Macintosh?
>(James Pearson)
> 8.  Testing tools for Firefox (Julio Cesar Faracco)
>
>
> --
>
> Message: 1
> Date: Tue, 15 Nov 2016 12:07:04 -0800
> From: "Liz Henry (:lizzard)" 
> To: enterprise@mozilla.org
> Subject: [Mozilla Enterprise] Firefox ESR 45.5 Released
> Message-ID:
> 
> Content-Type: text/plain; charset="utf-8"
>
> Firefox ESR 45.5 is now available for download at 
> https://www.mozilla.org/en-US/firefox/organizations/all.html.
>
> As always, we recommend that users keep up to date with the newest version of 
> Firefox ESR for the latest stability and security fixes.
>
> Release notes for Firefox 45.5 are available 
> at:https://www.mozilla.org/en-US/firefox/45.5.0/releasenotes/
> 
>
> Associated security advisories will be posted once available 
> at:https://www.mozilla.org/security/known-vulnerabilities/firefoxESR.h
> tml
>
> Liz Henry
>
> Firefox Release Manager
>
>
>
>
>
> --
> 
> Liz Henry (:lizzard)
> Firefox Release Manager
> lhe...@mozilla.com
> -- next part -- An HTML attachment was 
> scrubbed...
> URL: 
>  73af/attachment-0001.html>
>
> --
>
> Message: 2
> Date: Tue, 15 Nov 2016 15:30:41 +
> From: Bongardt, Bj?rn 
> To: "'enterprise@mozilla.org'" 
> Subject: [Mozilla Enterprise] deactivate any Videos in Mozilla Firefox
> 45.4.0 ESR
> Message-ID:
>  nt>
>
> Content-Type: text/plain; charset="iso-8859-1"
>
> Dear ladies and gentlemen,
>
> we?ve a few questions about the use of Firefox on our TS Systems.
>
> Is it possible to deactivate any video player so that it is not possible to 
> watch a video anymore?
> Is it also possible to use the configuration file for it?
>
> We want to use Mozilla Firefox on our TS-Farm, but if it is not possible to 
> deactivate videos it doesn?t make sense for us.
>
> Also is  it possible to add certificates in Firefox automatically from the IE?
>
> Kind regards
> Bj?rn Bongardt
>
>
> Mit freundlichen Gr??en
>
> Bj?rn Bongardt
> IT Betrieb
>
> Tel.: +49 2102 3081 119
> Fax: +49 2102 3081 219
> mailto:bjoern.bonga...@deutsche-factoring.de
>
> Deutsche Factoring Bank GmbH & Co. KG
> Standort Ratingen
> Kreuzerkamp 7 - 11
> 40878 Ratingen
> http://www.deutsche-factoring.de
>
> Sitz der Gesellschaft: Bremen, HR Bremen A 15633
> Gesch?ftsf?hrer: Hendrik Harms, Fedor Kr?ger, Uwe M?ller
>
> Deutsche Leasing Gruppe
> Sparkassen-Finanzgruppe
>
> Der Austausch von Nachrichten via Email dient nur zu Informationszwecken und 
> erf?llt kein Schriftformerfordernis.
> Correspondence via e-mail is only for information purposes and does not 
> comply with the requirement of written form.
> -- next part -- An HTML attachment was 
> scrubbed...
> URL: 
>  d949/attachment-0001.html>
>
> --
>
> Message: 3
> Date: Tue, 15