I'm trying to figure out a couple things w.r.t. CCK2.  Hopefully somebody has 
already figured out how to do some of this.  ;)

CCK separation of settings:
When using CCK2, does anyone know if it's possible to put certain configuration 
items into separate files?  For example, it would be great to be able to 
isolate settings such as home pages, bookmarks, popup exception sites, and so 
on into their own separate config files so I can utilize group policies to be 
able to push out department-specific settings.  I know I can just clone our 
default university-wide 'cck2.cfg' file and change one department-specific 
setting like the home page.  However, if there's a way I could separate these 
settings out into their own files that would make managing and targeting them 
with GPO-pushed files a little easier.  I've experimented a little with the 
AutoConfig "before CCK2" section but I don't think any javascript variables I 
declare there are visible to the CCK2, as I've tried to declare my own 
"CustomHomePage" variable but couldn't get it to work.  BTW, I'm aware of 
PolicyPak but I'm trying to do all this with little-to-no budget.  ;)

CCK content type action modifications:
Is it possible to use CCK2 to configure Adobe Reader as the default PDF 
handler?  My preference is to use the option "Use Adobe Acrobat Reader DC 
(default)" so that Adobe Reader launches externally in its own app rather than 
inside of Firefox with its plugin...not "Use Adobe Acrobat (in Firefox)".  I 
don't want to disable the internal PDF renderer either in case the user 
wants/needs to switch to it.  I came across 
https://mike.kaply.com/2013/05/15/setting-default-application-handlers/ which 
looks useful.  But it looks like this requires me to know the path to the EXE 
ahead of time.  Unfortunately I see this path changing over time as newer 
versions get released such as if they change its name again which will 
eventually cause upgrade and maintenance problems later on down the road.  Does 
anyone know of a way to "scan" the list of currently available "actions" for a 
specific "content type" so I can pick and "set" the best one?  For example, I 
would search for all "Adobe Acroba
 t" actions while excluding the "(in Firefox)" entry and set the first that I 
find.  Thanks for any tips!

thanks!

--
Scott Copus, Lab Systems Engineer
Academic Technology | Western Kentucky University
http://www.wku.edu/it/labs


-----Original Message-----
From: Kasper, Ryan V [mailto:[email protected]] 
Sent: Thursday, April 20, 2017 5:43 PM
To: Copus, Scott <[email protected]>; [email protected]
Cc: Jeremy Moskowitz <[email protected]>; Kaply Consulting 
([email protected]) <[email protected]>
Subject: RE: Firefox deployment/configuration/update guides?

Hi Scott,

So for getting it installed... We use MS Configuration Manager 2012. We run the 
executable downloaded from Mozilla with the /INI command line parameter:
/INI=<path to source>\ff_setup.ini

Our ff_setup.ini file contains:
[Install]
;Use with /INI=<full path to configuration ini file> on cmdline
DesktopShortcut=false
TaskbarShortcut=false
QuickLaunchShortcut=false
MaintenanceService=false

I believe /INI assumes silent mode... Got this from 
https://wiki.mozilla.org/Installer:Command_Line_Arguments

We keep our prefs in a cfg file out under the Firefox installation directory 
(Autoconfig - 
http://mike.kaply.com/2012/03/16/customizing-firefox-autoconfig-files/). To 
configure Firefox to honor this file populate "C:\Program Files (x86)\Mozilla 
Firefox\defaults\pref\local-settings.js" with:
pref("general.config.obscure_value", 0);
pref("general.config.filename", "mozilla.cfg.txt");

Copy your mozilla.cfg.txt out under the root (C:\Program Files (x86)\Mozilla 
Firefox) and populate with (just some example prefs - proxy, disable WebGL and 
Updates):
defaultPref("network.proxy.autoconfig_url", "http://proxy.example.com/";);
defaultPref("network.proxy.type", 2);
lockPref("webgl.disabled", true);
lockPref("app.update.auto", false);
lockPref("app.update.mode", 0);
lockPref("app.update.enabled", false);

If you want the same experience customizing Firefox that you see available in 
Chrome with GPO - consider PolicyPak - https://www.policypak.com/... If you 
want something in the middle (between Autoconfig and PolicyPak) Mike Kaply's 
CCK2 is a great option - https://mike.kaply.com/cck2/. We use Autoconfig...

I hope that helps get you started!

Thanks,
Ryan Kasper
Lockheed Martin Software Distribution
[email protected]

-----Original Message-----
From: Enterprise [mailto:[email protected]] On Behalf Of Copus, 
Scott
Sent: Thursday, April 20, 2017 3:37 PM
To: [email protected]
Subject: EXTERNAL: [Mozilla Enterprise] Firefox deployment/configuration/update 
guides?

Hi all,

FYI, I'm a noob with respect to Firefox ESR/Enterprise and this mailing list.  
So please bear with me as I try to learn how to manage Firefox in the 
enterprise hopefully the 'proper' way compared to the way we've always handled 
it in our environment.

My background is an admin for classroom podium computers and computer labs at 
my university.  In an educational setting we try to offer as much as we can to 
faculty, staff, and students for maximum teaching potential and user choice.  
We've always included the most recent versions both Firefox and Chrome consumer 
browsers baked in our images (mainly because I think the enterprise versions 
didn't exist when we first started down this path).  In our environment we run 
Windows 7/10, domain-joined, don't use roaming profiles, and customize the 
Windows default user profile via sysprep's audit mode.  We also use a disk 
reboot-to-restore product called Deep Freeze which basically means that every 
user login is a "new/fresh" login after every boot or restart.  We've always 
customized all the browsers and let these customizations be part of the 
aforementioned default user profile that then propagate into the new user's 
Windows profile.  However, I'd like to get away from doing it this
  way and deploy the additional browsers as silent install packages after 
Windows has been deployed.

Most of our browser customizations involve making the user experience as best 
as possible given our static "locked" lab environment.  We disable first-run 
items, reminders or annoyances and anything date-based like scheduled tasks and 
such that that like to periodically 'clean up' things (including disabling 
Firefox's "it looks like you haven't started Firefox in a while"), etc.  We 
also customize home pages, bookmarks, popup blocker exception site lists, etc. 
depending on the department or situation that's requesting it.  For Firefox, 
some of this is done in a scripted fashion during initial deployment while 
other things are handled via group policy/GPO (either login scripts that modify 
browser profile files that contain such settings or just overwriting them with 
a server copy).

Recently I've learned that with the Chrome browser I don't need to go this 
route of duplicating an entire browser profile anymore.  Chrome seems to 
support configuring all or most of the settings I need customizing using either 
GPOs and/or a 'master preferences' file.  These settings get picked at user's 
first launch of the browser and a fresh browser's profile gets built around it.

So I'm looking to do the same thing above with Firefox.  I'm sure it can be 
done.  I'd like to get away our 'big' 15-20MB Firefox default user profile just 
to replicate the custom settings we want.  But there's a lot of old or outdated 
information out there and I don't know where to start.  For example, some tips 
are specific to older versions since things like file paths/names and 
preference names change over time.

Can anyone point me to any good guides/pages that cover these enterprise 
management tasks that would still be relative to the most recent versions of 
Firefox?
  - initial deployment of Firefox
  - deploying a baseline Firefox config for new users
  - maintaining configuration or avoiding configuration drift (i.e. default or 
enforced policies/settings)
  - controlled updates of the browser and all its other components (including 
having a relatively recent malware/phishing database, CRLs, etc. on the local 
drive)
  - anything specific to a 'lab' environment (since it can have special 
circumstances that are different than normal enterprise user management)

Are Firefox version upgrades (major, minor, and security updates) typically 
handled via just deploying the latest EXE over any previous versions?

Is there anyone here who doesn't let Firefox upgrade itself but rather use your 
software deployment or patching system like Altiris/SCCM/LANDESK/Zendesk handle 
it?  What's the general technique?  Is there anything to watch out for?

Any comments on the virtualization of Firefox such as with App-V?

Sorry for the long post.  I appreciate any tips or advice even if it's to 
answer just one of my questions.  Thanks!  ;)

--
Scott Copus, Lab Systems Engineer
Academic Technology | Western Kentucky University
http://www.wku.edu/it/labs


_______________________________________________
Enterprise mailing list
[email protected]
https://mail.mozilla.org/listinfo/enterprise

To unsubscribe from this list, please visit 
https://mail.mozilla.org/listinfo/enterprise or send an email to 
[email protected] with a subject of "unsubscribe"

Reply via email to