Deploying Firefox

[Michael]

However i am still trying to find away of having a configuration file in a main location

 

I presume you mean a central location, such as a file server? You could in theory do this but I wouldn't recommend it. You're still going to need to deploy FF.

 

The file you're looking for is:

 

C:\Program Files\Mozilla Firefox\greprefs\local-settings.js

 

The mozilla.cfg file is 8KB in size, so you're better off pushing it out to each workstation. If you wanted to make changes (for whatever reason), you can customise your own mozilla.cfg file, overwrite the existing file (in your distribution share) then re-deploy FF using the MSI. Simples

[mdking]

Thanks Michael for the information.

 

I have now created a new ou for Firefox. And it has been deployed to a test PC with the help of Firefox ADM.

 

I have added the ADM template and edited the settings, however there is a few bits im looking at locking down. Is There away of attaching .cfg files?

 

many thanks

 

Matt

 

 

 

I presume you mean a central location, such as a file server? You could in theory do this but I wouldn't recommend it. You're still going to need to deploy FF.

 

The file you're looking for is:

 

C:\Program Files\Mozilla Firefox\greprefs\local-settings.js

 

The mozilla.cfg file is 8KB in size, so you're better off pushing it out to each workstation. If you wanted to make changes (for whatever reason), you can customise your own mozilla.cfg file, overwrite the existing file (in your distribution share) then re-deploy FF using the MSI. Simples

[Arthur]

Is There away of attaching .cfg files?

You could attach it as a zip, rar or 7z.

[Arthur]

I have "googled" autoadmin.global_config_url with no joy

I think this was the website I used when I last looked into centrally managing Firefox's preferences/restrictions early last year. The "autoadmin.global_config_url" would look something like the one below, although the link above describes what else you need to do to get it working. I'll check to see if I can find the settings I used when I was testing this.

 

lockPref("autoadmin.global_config_url","http://internalwebserver/firefox.js");

 

In theory, this would allow you to have a centrally managed configuration file which Firefox loads when it is opened by the user. There is a setting that enables Firefox to locally cache the last used .cfg too, so that people can still use Firefox if the web server cannot be reached and any settings/restrictions you set are still applied.

[mdking]

Nearly there

 

Has anyone found a way to disable the default browser check for Firefox. I know i can disable it via ADM?

 

I have found the setting that allows me to disable it, however its still checking

 

 

matt

[Michael]

If you're using a config file the following entry works:

 

lockPref("browser.shell.checkDefaultBrowser", false);

 

If you want to do the same with IE, you should do that via GPO.

[mdking]

If you're using a config file the following entry works:

 

lockPref("browser.shell.checkDefaultBrowser", false);

 

If you want to do the same with IE, you should do that via GPO.

 

 

 

Thanks a lot, i have now got this to work.

 

 

Still trying to find away to taking off the Firefox icon on the desktop. Can it be done via ADM?

 

Matt

[Michael]

When I create Firefox packages I use WinInstall LE. There is an option in here to remove Start Menu/Desktop icons as appropriate. Alternatively (in a network environment) you're better off using controlled or redirected Start Menu/Desktops so you control what shortcuts users have when they logon.

[mdking]

I'm using the front motion 3.5.7 msi package.

 

Once installed via GPO it creates a desktop icon (Or what looks like it anyway) And i cant get rid of it.

[Michael]

I have created a custom MSI for you so it will no longer place a desktop shortcut when setup completes. I'd recommend you uninstall any version of FF before installing my version.

 

You just need to overwrite the mozilla.cfg accordingly. Full details can be found here

[mdking]

I have created a custom MSI for you so it will no longer place a desktop shortcut when setup completes. I'd recommend you uninstall any version of FF before installing my version.

 

You just need to overwrite the mozilla.cfg accordingly. Full details can be found here

 

Thanks Michael.

 

I take it this will work with the ADM files i have in GPO. All of the settings are set via the ADM files.

 

I see you talk about the cfg file. Would there be away of pushing that out via GPO?

 

 

Sorry to keep asking questions

 

many thanks

 

matt

[Michael]

You no longer need the ADM files on your server. Extract the WinRAR file to a destribution share on your server, for example \\SERVERNAME\Distribution\Mozilla Firefox (3.5.7) Logistix

 

Create your own custom mozilla.cfg by copying the code I produced into Notepad. Then run it through Byte Shifter. Copy and overwrite the existing mozilla.cfg file within:

 

\\SERVERNAME\Distribution\Mozilla Firefox (3.5.7) Logistix\Mozilla Firefox

 

Then deploy the MSI using Active Directory and that's it.

[lankygibbon]

I have just tried deploying your 3.6 MSI on an RM CC3 network following your instructions and unfortunately when i go to run firefox after deploying it, even as an admin i get the "Firefox is already running issue" i was wondering whether you had seen this before or have any idea what might be causing it?

 

thanks

 

Matt

[Michael]

If you have a look in Task Manager, is there a firefox.exe process already running?

[lankygibbon]

Yeah I checked an there is no firefox process running in task manager which I thought was odd, and it's not like I hve already tried opening it and got impatient and clicked again as it happens the first time you try and open it. Baffled

[Michael]

I've deployed 3.5.7 to CC3 with no problems. Have you tried allocating a new profile?

[lankygibbon]

Ok I may try 3.5.7 when I get back then. Do you mean a new ff profile. Would thy mean allocating a profile at each station? Or am I wing special.

[Michael]

Normally in CC3 (I think) users have roaming profiles.

[lankygibbon]

I get you so your thinking maybe if your logged on elsewhere it may prevent you from opening ff at that particular pc due to the roaming profile.? I shall give it a go.

[powdarrmonkey]

I get you so your thinking maybe if your logged on elsewhere it may prevent you from opening ff at that particular pc due to the roaming profile.? I shall give it a go.

 

Being a roaming profile won't be a big deal, but if you have redirected special folders you will find that FF won't open the (confusingly) Firefox Profile twice.

[lankygibbon]

Ok brilliant got it up and working did a reset on my profile and it seems to work on all the other test profiles i have tried. .

 

Will i be needing to build a seperate package for flash for firefox?

[Michael]

If you deploy the latest version of Flash and Shockwave you shouldn't need to do anything else.

[lankygibbon]

Deployed an MSI from macromedia "flash player 10 plugin for firefox" and everything is now working hunky dorey.

 

I appreciate you doing the work so we don't have, so i can get back to answering teachers inane questions.

 

thanks again your a hero.

[Michael]

You're welcome

[digone52]

Hello.

 

We're looking into rolling out Firefox 3.6, and I've read most of this thread - it's helped me a lot.

 

We had the following line in mozilla.cfg...

 

lockPref("security.enable_ssl2", true);

 

One thing I've noted in my testing is that smile.co.uk - the internet bank uses ssl3, and with both ssl2 and ssl3 enabled, logging into smile doesn't work. If you just have ssl3 (which is what smile uses) enabled and ssl2 disabled, the smile bank logon works.

 

Now, I don't expect anyone to actually be using smile.co.uk at our school, but this might indicate an issue - is it better to leave ssl2 disabled, or should it be enabled? I don't know much about ssl I'm afraid.

 

Just a quick run-through of what we're intending...

 

Deployment via FrontMotion MSI in a GPO, and updates to the product using the same method. (Not tested the updating, but will do before deployment).

 

From memory...

 

Startup script in the GPO to place Mozilla.cfg into the program files/mozilla firefox dir, and a loadcustom.js placed in the default/pref folder to force use of the mozilla.cfg file.

 

override.ini placed in the program files/mozilla firefox dir, to stop new profiles from migrating from IE settings.

 

Run Firefox.exe from the startup script silently to set it to the default browser.

 

In the logon script, if a Firefox profile does not exist, then create one by running firefox in silent mode just to create the profile, and then insert a userChrome.css file into the Firefox profile to switch off some menus in the interface, and a insert a userContent.css to switch off about:config.

 

We also tweak the registry to stop IE from checking if it's the default browser.

 

I'm pretty new to Firefox, so some of the above might be better done differently.

 

If anyone has any comments or suggestions, or want to know more?