Re: [Mozilla Enterprise] GPO Certificates

[Delise, John]

Todd,

We found sometime back using a GPO to install certs that the certs only worked 
if they were in the Windows “Trusted Root Certification Authorities” Store.

Using mmc.exe add the cert snap-in and check to see if and where the certs are 
stored. If this is the problem try moving them to the “Trusted” Store and see 
if it makes a difference.


Regards,

John Delise
Windows Deployment Engineer
[Image32]
VW Credit, Inc.
IT Operations
1401 Franklin Boulevard
Libertyville, IL 60048
United States of America

Phone +1(847) 371-4136
john.del...@vwcredit.com

[VW-Credit-Inc.-Logo]

From: Enterprise  On Behalf Of Houle, Todd - 
1120 - MITLL
Sent: Thursday, October 24, 2019 8:31 AM
To: Paul Kosinski via Enterprise 
Subject: [Mozilla Enterprise] GPO Certificates

Warning: External Email. Ensure you trust this sender before clicking on any 
links or attachments.
Hi all –
We are using a GPO to install our internal CA certificates in Firefox 68 ESR.  
It seems to be a bit inconsistent.  We found using a test cert that 
c:\temp\cert1.cer worked.  However if we put a few certificates in there, they 
did not all work. We delete from Firefox and try again, and a different one or 
two certs are imported.  It seems like two random certs, of the six we are 
trying to import, work fine.

We’re going back to CCK for Firefox ESR 68.2, but wonder if anyone else has run 
into this problem and how you resolved it.
Thank you
   Todd
___
Enterprise mailing list
Enterprise@mozilla.org
https://mail.mozilla.org/listinfo/enterprise

To unsubscribe from this list, please visit 
https://mail.mozilla.org/listinfo/enterprise or send an email to 
enterprise-requ...@mozilla.org with a subject of "unsubscribe"

Re: [Mozilla Enterprise] [From: EXTERNAL] Remove old Firefox and Install new version 58.0

[Delise, John]

Loghaman,

Using SCCM my package removes firefox with this command-line

"C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe" /S

The S does not have to be capitalized.

I have used this for  versions back to for many versions. I would test it from 
an elevated command prompt on each version you have.

It has been our best practice to always remove the previous version before 
installing a new one, but as always test, test, test.

It does NOT remove the users profile. Reverting to earlier versions using an 
uninstall\install method may fail because of differences introduced to the user 
profile by each new version.

“Always forward, never backwards…”

Thank you,

John Delise
Windows Deployment Engineer
[Image32]
VW Credit, Inc.
IT Operations
1401 Franklin Boulevard
Libertyville, IL 60048
United States of America

Phone +1(847) 371-4136
john.del...@vwcredit.com

[VW-Credit-Inc.-Logo]

From: Enterprise [mailto:enterprise-boun...@mozilla.org] On Behalf Of Loghman 
Adak
Sent: Wednesday, February 14, 2018 11:16 AM
To: enterprise@mozilla.org
Subject: [From: EXTERNAL] [Mozilla Enterprise] Remove old Firefox and Install 
new version 58.0

Hello,

I hope you are doing well. I am planning to push the latest Firefox (58.0) to 
our users via sccm 2012. The package has been created and tested successfully 
for new installation. But our users have different versions of Firefox such as 
39, 43, 47 and etc. Do you have any guideline to remove all previous versions 
and install new version by SCCM?

I look forward to hearing from you soon.

Sincerely,
Loghman Adak
___
Enterprise mailing list
Enterprise@mozilla.org
https://mail.mozilla.org/listinfo/enterprise

To unsubscribe from this list, please visit 
https://mail.mozilla.org/listinfo/enterprise or send an email to 
enterprise-requ...@mozilla.org with a subject of "unsubscribe"

Re: [Mozilla Enterprise] [From: EXTERNAL] Re: Anyone migrate to 64-bit?

[Delise, John]

Do your users use Java based Web sites? If so, did you have to load a 64-bit 
version of Java on your workstations to accommodate them?


Thank you,

John Delise
Windows Deployment Engineer
[Image32]
VW Credit, Inc.
IT Operations
1401 Franklin Boulevard
Libertyville, IL 60048
United States of America

Phone +1(847) 371-4136
john.del...@vwcredit.com

[VW-Credit-Inc.-Logo]

From: Enterprise [mailto:enterprise-boun...@mozilla.org] On Behalf Of Jim Weill
Sent: Friday, February 9, 2018 11:54 AM
To: Jason Jackson ; enterprise@mozilla.org
Subject: [From: EXTERNAL] Re: [Mozilla Enterprise] Anyone migrate to 64-bit?


We deploy via batch scripts, and I migrated all our Windows clients to 64-bit 
around 52.4 or so.  So far nobody has complained that I am aware of.

jim

On 2/8/2018 10:56 AM, Jason Jackson wrote:
For those of you who migrated your organization to 64-bit Firefox, did you 
encounter any problems with this?  I'd be using CCK2 for deployment, but I'd 
also like to hear if there were compatibility issues with any sites or web 
applications.


--
Jason Jackson
Computer Systems Technician
North Vancouver School District






___

Enterprise mailing list

Enterprise@mozilla.org

https://mail.mozilla.org/listinfo/enterprise



To unsubscribe from this list, please visit 
https://mail.mozilla.org/listinfo/enterprise or send an email to 
enterprise-requ...@mozilla.org with a 
subject of "unsubscribe"

___
Enterprise mailing list
Enterprise@mozilla.org
https://mail.mozilla.org/listinfo/enterprise

To unsubscribe from this list, please visit 
https://mail.mozilla.org/listinfo/enterprise or send an email to 
enterprise-requ...@mozilla.org with a subject of "unsubscribe"

Re: [Mozilla Enterprise] AD Group Policy for Firefox

[Delise, John]

We also use PolicyPak and it is very robust.

Has the Mozilla Team ever considered working with PolicyPak Software and 
licensing their technology?  Why reinvent the wheel.

Jeremy Moskowitz is the founder of PolicyPak software and one of the few Group 
Policy MVP's in the world. PolicyPak covers 100's of apps not just Firefox.

So even though built-in group policy support would compete against PolicyPak to 
a small degree, an arrangement to incorporate and license their technology 
while giving them credit for it would negate the competitive aspect while 
helping PolicyPak market their product overall. Win-Win!

Think out-side the box. Just a thought.

Disclaimer: While my company licenses and uses PolicyPak for Group Policy 
Application Management I have no other relationship or commercial connection 
with PolicyPak software.


Thank you,

John Delise

From: Enterprise [mailto:enterprise-boun...@mozilla.org] On Behalf Of Heaton, 
Joseph@Wildlife
Sent: Thursday, February 1, 2018 10:17 AM
To: Yee, Herman C ; enterprise@mozilla.org
Subject: Re: [Mozilla Enterprise] AD Group Policy for Firefox

PolicyPak is awesome for managing Firefox with Group Policy.

From: Enterprise [mailto:enterprise-boun...@mozilla.org] On Behalf Of Yee, 
Herman C
Sent: Wednesday, January 31, 2018 6:44 PM
To: enterprise@mozilla.org
Subject: [Mozilla Enterprise] AD Group Policy for Firefox

Hi,

Is there an official Group Policy Template for Firefox that's released by 
Mozilla? I only can find third party Firefox GPO Templates.

Thanks.
Herman
NOTICE: This information and attachments are intended only for the use of the 
individual or entity to which it is addressed, and may contain information that 
is privileged and/or confidential. If the reader of this message is not the 
intended recipient, any dissemination, distribution or copying of this 
communication is strictly prohibited and may be punishable under state and 
federal law. If you have received this communication and/or attachments in 
error, please notify the sender via email immediately and destroy all 
electronic and paper copies.
___
Enterprise mailing list
Enterprise@mozilla.org
https://mail.mozilla.org/listinfo/enterprise

To unsubscribe from this list, please visit 
https://mail.mozilla.org/listinfo/enterprise or send an email to 
enterprise-requ...@mozilla.org with a subject of "unsubscribe"

Re: [Mozilla Enterprise] Setting up Firefox ESR with Group Policies ?

[Delise, John]

Folks,

For those who support a windows environment read on.

We use PolicyPak Software Application Manager (PPAM) on premise suite which 
includes a PAK for Firefox that allows us to manage it’s settings.

The PPAM is a  group policy extension product requiring a client agent, the 
PAKS for various software applications of which Firefox is just one is quite 
powerful. One unique feature is that the “PAK” with your defined settings 
checks for and applies the settings when Firefox is launched by the user.   It 
provides an admin extension to the GPMC which allows you to manage using the 
same utility as regular Group policy.

From deploying the commercial version of Firefox to our enterprise for the last 
4 years using SCCM the take on the Firefox Installer either consumer or ESR is 
that the configuration information is either inside .js files or SQLLite 
Database files. This design makes it very good for cross-platform products but 
it makes it very challenging for Group Policy to be the managing process, for  
Group Policy primarily manages registry settings while Firefox does not want or 
care about the registry for the most part, certainly not for the user settings. 
Group Policy was designed to work with “Group Policy Aware” products and 
Firefox is not group policy aware and because of its core design it will not be 
natively group policy aware, yet the need is there and from this group there 
are multiple approaches brought forth, which is really amazing.

I am very impressed with the creative methods discussed in this thread to 
address the issue.  However there is  a product call PolicyPak, it is a 
commercial product that just does what you want, Group Policy Management of 
Firefox and hundreds of other applications.

So if you are in a windows environment and you absolutely have to manage 
aspects of an application that Microsoft Group Policy cannot address then take 
a look at PolicyPak.  I have interacted with Jeremy Moskowitz the founder of 
PolicyPak a number of times and their support is awesome.

Disclaimer: I have no financial relationship with PolicyPak  and the opinions 
stated here are soley my own , I am simply an administrator that works for a 
company that has had the product in place for 3 years. It works.


Thank you,

John Delise
Windows Deployment Engineer
[Image32]

From: Enterprise [mailto:enterprise-boun...@mozilla.org] On Behalf Of Anderson 
Gama
Sent: Tuesday, November 21, 2017 10:36 AM
To: pascal.wulle...@orange.com
Cc: enterprise@mozilla.org
Subject: Re: [Mozilla Enterprise] Setting up Firefox ESR with Group Policies ?

Hello Pascal, in the company where I work, we use Group Policy Templates from 
Frontmotion, on the site itself there is the possibility of using the 
installers in MSI but we prefer to install using the official Mozilla Firefox 
ESR executable.

Attached is "Firefox.tar.gz" which contains the script and other configuration 
files that we use to install Firefox ESR using the Mozilla executable.

Frontmotion Group Policy Templates: 
http://www.frontmotion.com/fmfirefoxce/download/

Firefox Script: 
https://drive.google.com/file/d/1FkK91U5YW6yrWZFWG8xMPvcKrF7Yh3kt/view?usp=sharing


2017-11-21 11:07 GMT-03:00 
>:
Hello all,

A couple months ago we have been asked to answer a survey on whether setting up 
Firefox ESR with GPO would be a matter of interest.

My question : Did you get many answers ? Were people interested by the idea ? 
Do you guys plan to have GPO admx we could use to do so ?

Today we have FF ESR 52.x on hundreds of thousands Orange group internal 
workstations. We install it with SCCM and we set it up with a GPO module we 
have developed for this purpose.
However our analysis indicates that with the coming out of Firefox ESR 59.X our 
module won’t be able to operate properly.
We are therefore getting ready to change the way we set up parameters but 
before we start the study, build and deliver something to replace the current 
method I want to ask you if there is any plan on your side to provide such a 
GPO based solution.

I believe groups similar to our group have similar needs : deploy and 
administrate Firefox ESR on hundreds of thousands users workstations and manage 
releases according to Mozilla roadmaps.

Thanks for your help and insights

Bien Cordialement / Best Regards

[logo Orange]


Pascal Wulleput
e-buro maintenance Team Leader
Orange International Networks Infrastructures & Services

tel : +33 223 066 836
cel:  +33 633 467 082

pascal.wulle...@orange.com


_



Ce message et ses pieces jointes peuvent contenir des informations 
confidentielles ou privilegiees et ne doivent donc

pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu ce 
message par erreur, veuillez le 

Re: [Mozilla Enterprise] Check Installed Firefox Version with CMD or Powershell

[Delise, John]

#--

# A quick way to find a file version

$FF_FQP = "C:\Program Files (x86)\Mozilla Firefox\firefox.exe"

$FFVersion = Get-ChildItem -path $FF_FQP

$FFVersion.VersionInfo

#--
# Substitute the fully qualified path of your firefox.exe if different than 
above. Or any other file with a known location that has a file version, not all 
do

If you have local admin rights on a remote computer you could substitute a UNC 
path.

The post that shows how to use the registry provider is also a great article 
when you want it all and you want it now!


John Delise
Windows Deployment Engineer
[Image32]
VW Credit, Inc.
IT Operations
1401 Franklin Boulevard
Libertyville, IL 60048
United States of America

Phone +1(847) 371-4136
john.del...@vwcredit.com

[VW-Credit-Inc.-Logo]


From: Enterprise [mailto:enterprise-boun...@mozilla.org] On Behalf Of Greg 
Haines
Sent: Wednesday, September 6, 2017 4:36 AM
To: enterprise@mozilla.org
Subject: [Mozilla Enterprise] Check Installed Firefox Version with CMD or 
Powershell

Hi Guys

​How do i check via the command line or Powershell in Windows what version of 
Firefox is being used?  Cant seem to find anything online that actually works.

Thanks​

--
Greg Haines
Systems Administrator
End User Operations
Technology Department

greg.hai...@telegraph.co.uk
Telegraphmediagroup | 111 Buckingham Palace Road, London SW1W 0DT




The contents of this message and any attachments to it are private, 
confidential and may be the subject of legal privilege. Telegraph Media Group 
Limited is registered in England and Wales (company number 451593) at 111 
Buckingham Palace Road, London, SW1W 0DT. If you are not the intended recipient 
of this email please inform us and the sender immediately. You must not take 
any action based upon the contents of this email, nor copy it or show it to 
anyone. Any unauthorised disclosure, use or dissemination of the whole or part 
of the message contained in such email is prohibited. Any views or opinions 
expressed do not necessarily represent those of Telegraph Media Group Limited. 
It is the recipient’s responsibility to carry out any virus checking.

[http://s.telegraph.co.uk/Brand_Sig.jpg]
___
Enterprise mailing list
Enterprise@mozilla.org
https://mail.mozilla.org/listinfo/enterprise

To unsubscribe from this list, please visit 
https://mail.mozilla.org/listinfo/enterprise or send an email to 
enterprise-requ...@mozilla.org with a subject of "unsubscribe"

[Mozilla Enterprise] Download site still only has RR 49.0 , not 49.01

[Delise, John]

How is it that we get an automatic update to 49.0.1 but the  download site 
still shows 49.0 and downloads 49.0?

John Delise
Windows Deployment Engineer

___
Enterprise mailing list
Enterprise@mozilla.org
https://mail.mozilla.org/listinfo/enterprise

To unsubscribe from this list, please visit 
https://mail.mozilla.org/listinfo/enterprise or send an email to 
enterprise-requ...@mozilla.org with a subject of "unsubscribe"

Re: [Mozilla Enterprise] ESR questions

[Delise, John]

We actually use the RR (rapid release) version and not the ESR to 1700 machines 
using SCCM, we use the built-in uninstaller of Firefox to always uninstall 
first then install the latest version.

We are fortunate to have the PolicyPak Application Manager from PolicyPak 
Software where we use their Firefox PolicyPaks to manage the configuration for 
our users, combining this Group Policy Enhancement product has saved us many 
hours. Because of this product we feel confident to support the RR release.

It is a commercial product and as such has a cost per system, but when you look 
at the time saved in managing the application and the control you have it is 
very cost effective. It has paks for hundreds of applications and you can 
create your own.

Other products such as CCK2 from Mike Kaply are also good solutions.

John Delise
Windows Deployment Engineer

VW Credit, Inc.
IT Operations
1401 Franklin Boulevard
Libertyville, IL 60048
United States of America

Phone +1(847) 371-4136
john.del...@vwcredit.com

[VW-Credit-Inc.-Logo]


From: Enterprise [mailto:enterprise-boun...@mozilla.org] On Behalf Of 
florence.gluck...@orange.com
Sent: Thursday, April 14, 2016 9:52 AM
To: Skrivseth, Daniel ; Heaton, Joseph@Wildlife 
; enterprise@mozilla.org
Subject: Re: [Mozilla Enterprise] ESR questions

Hi

At Orange France, we also use FF ESR with SCCM for about 100 000 PC


Bien cordialement
florence
+33 (0) 6 74 35 54 53

De : Enterprise [mailto:enterprise-boun...@mozilla.org] De la part de 
Skrivseth, Daniel
Envoyé : jeudi 14 avril 2016 16:30
À : Heaton, Joseph@Wildlife; 
enterprise@mozilla.org
Objet : Re: [Mozilla Enterprise] ESR questions

I also use SCCM to deploy applications and have a better success rate with 
Firefox than any other software. I find it easier to manage than the standard 
version of Firefox. The slower adoption of new features is appreciated by my 
users who are not always fans of change.

I use a vbscript to do the install which closes Firefox if it is running and 
copies a local-settings.js and mozilla.cfg file to lock some settings. For 
detection I use the file system detection and have it check the version of 
firefox.exe which has been very successful. You can leave the auto-update 
feature of Firefox enabled and still deploy new versions without conflict. This 
way your remote users will still update on their own and once on the network 
will report back their compliance status to SCCM and update if needed.

If you are using SCCM to do your imaging I would advise against including it in 
your gold image but include the install as part of the task sequence instead. 
This way you can update the installer or task sequence to avoid deploying 
computers with an outdated version of Firefox or having to make a new image for 
every Firefox update.

Daniel Skrivseth
Infrastructure Engineer
Milwaukee Center for Independence (MCFI)
Harry & Jeanette Weinberg Building
2020 West Wells Street
Milwaukee, WI 53233
daniel.skrivs...@mcfi.net
www.mcfi.net

From: Enterprise [mailto:enterprise-boun...@mozilla.org] On Behalf Of Heaton, 
Joseph@Wildlife
Sent: Thursday, April 14, 2016 8:52 AM
To: enterprise@mozilla.org
Subject: [Mozilla Enterprise] ESR questions

Does ESR make Firefox any easier to manage in the enterprise?  I have around 
3400 PCs spread throughout the state, some of which don't connect to the 
network with any regularity.

Is it difficult to implement?  I use SCCM for most software deployments, and we 
would also bake it into the gold image that we use.

Joe Heaton
Information Technology Operations Branch
Data and Technology Division
CA Department of Fish and Wildlife
1700 9th Street, 3rd Floor
Sacramento, CA  95811
Desk:  (916) 323-1284

Every Californian should conserve water.  Find out how at:
[SaveOurWater_Logo]
SaveOurWater.com · 
Drought.CA.gov


This message may contain information which may be privileged or confidential and
is intended for the sole use of the individual or entity to which it is
addressed. It is prohibited for anyone else to disclose, copy, distribute or use
the contents of this message for any purpose whatsoever. If you are not the
intended recipient, you are hereby notified that any dissemination, 
distribution,
or copying of this communication, or any of its contents, is strictly 
prohibited.
If you have received this communication in error, please immediately notify the
sender by reply email and delete/destroy the original message and any copy of it
from your computer or paper files. Personal messages, if any, express the views
of the individual sender only, and not that of the Agency.