On Mon, Feb 25, 2019 at 8:37 AM Dimas Streich (Informàtica Trueta) <
[email protected]> wrote:
> Hi,
>
> We will try to update our company from Firefox 52 ESR to Firefox 60 and
> we'd like to try the new Group Policy integration feature. At the moment we
> use autoconfig to set or lock some preferences. Some questions:
>
> 1. We found how to convert some of them to GPO but we don't know if there
> are policies for:
>
> *Important*
> defaultPref("browser.fixup.domainwhitelist.intranet", true);
>
No policy for this. I'll add it to the todo list. You'll be able to use
autoconfig.
> pref("extensions.autoDisableScopes", 0); // To install system addons
> without prompt the user
>
There is no policy for this. We recommend you install addons via policy.
> pref("extensions.update.enabled", false); // The policy
> DisableSystemAddonUpdate works for that or only for system addons?
>
We've added a policy recently for this.
>
> *Others*
> pref("capability.policy.policynames", "localfilelinks");
> pref("capability.policy.localfilelinks.checkloaduri.enabled", "allAccess");
> pref("capability.policy.localfilelinks.sites", "http://intranet ..."
> <http://intranet...>);
>
I'll be creating a policy for this.
> pref("dom.allow_scripts_to_close_windows", true);
> pref("security.tls.insecure_fallback_hosts", "testdomain.net");
> pref("security.insecure_field_warning.contextual.enabled", false);
> pref("security.ssl.enable_ocsp_stapling", false);
> pref("extensions.blocklist.enabled", false);
> defaultPref("spellchecker.dictionary", "ca");
> defaultPref("layout.spellcheckDefault", 2);
> pref("extensions.shownSelectionUI", true);
> pref("dom.serviceWorkers.enabled", true); // Disabled for default on ESR
> pref("dom.serviceWorkers.openWindow.enabled", true); // Disabled for
> default on ESR
> pref("dom.push.enabled", true); // Disabled for default on ESR
> pref("javascript.options.wasm", true); // Disabled for default on ESR
>
No policies for any of these. I'll add these to the todo list, but I can't
guarantee them. You'll be able to use autoconfig.
DOM Service workers aren't guaranteed to work on ESR, I'm surprised you are
using them.
extensions.shownSelectionUI is unnecessary now.
Why do you disable the extensions blocklist?
>
> 2. How is better to install system addons? At the moment we use autologon
> to execute a BAT that install addons in c:\Program Files. I've seen a
> Extensions policy that can install addons, but I think only user addons. Is
> it advisable to use this and lock via Locked policy?
>
I recommend using the policy to install and lock addons.
>
> 2.1. How we set addon options/prefs?
>
You cannot. We are adding support for chrome.storage.managed, so if an
addon supports getting settings from there, they can use policies.
> 3. Is it possible to install dictionary / spellchecker throught gpo?
>
Yes, those are extensions, so they can be installed via policies.
>
> 4. Is it possible to use GPO and Autoconfig at the same time?
>
Yes, you can use both.
>
> Thx,
> --
>
>
> *Dimas Streich i Colomeda * Unitat de Tecnologies de la Informació i
> Comunicació
> Hospital Universitari de Girona Doctor Josep Trueta
> Institut Català de la Salut Girona
> Departament de Salut | Generalitat de Catalunya
> Av.França s/n | 17007 Girona
> [email protected] | http://www.hospitaltrueta.cat
> <http://www.facebook.com/icscat> <http://twitter.com/htrueta>
> <http://projectecims.wordpress.com> <http://www.youtube.com/icscat>
> <http://slideshare.net/icscat>
>
> Aquest missatge s'adreça exclusivament a la persona destinatària i pot
> contenir informació privilegiada o confidencial. Si no sou el destinatari
> indicat, us recordem que la utilització, divulgació i/o còpia sense
> autorització està prohibida en virtut de la legislació vigent. Si heu rebut
> aquest missatge per error, feu-nos-ho saber immediatament per aquesta via i
> destruïu-lo.
> Abans d'imprimir aquest correu, assegureu-vos que és realment necessari.
> _______________________________________________
> Enterprise mailing list
> [email protected]
> https://mail.mozilla.org/listinfo/enterprise
>
> To unsubscribe from this list, please visit
> https://mail.mozilla.org/listinfo/enterprise or send an email to
> [email protected] with a subject of "unsubscribe"
>
_______________________________________________
Enterprise mailing list
[email protected]
https://mail.mozilla.org/listinfo/enterprise
To unsubscribe from this list, please visit
https://mail.mozilla.org/listinfo/enterprise or send an email to
[email protected] with a subject of "unsubscribe"
