[Mozilla Enterprise] Create Profiles at first firefox run

[Gruhm, Sebastian]

Hi Dirk,

I assume you are in a Windows environment. Maybe you want to take a look at "ActiveSetup" and how to use this. ActiveSetup build into Windows and is not Firefox related. We use this often to prepopulate usersettings stored at %appdata%, %localappdata% or HKCU. Effectively all you have to do is setup three RegKeys.

reg add "HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\FF-Settings" /ve /f /d "FF-Settings"
reg add "HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\FF-Settings" /v "StubPath" /f /d "<FF-Folder>\doSomething.cmd"
reg add "HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\FF-Settings" /v "Version" /f /d "1,0"

It doesn't need to be a cmd file.

If this is suitable for you and you have more questions don't hesitate and ask your questions. (Maybe not with the list involved)


Mit freundlichem Gruß


-----Ursprüngliche Nachricht-----
Von: Dirk Schneider <dirk.schneider at lka-mv.de> 
Gesendet: Mittwoch, 21. August 2019 09:25
An: Mozilla.org <enterprise at mozilla.org>
Betreff: [Mozilla Enterprise] Create Profiles at first firefox run

Hi,


we use Firefox with 3 profiles.

One profile with default settings is usable for Internet, the other
profiles use special (different) proxy settings to connect to special
environments.

So with installing firefox I can customize some general settings, like
trust root certificates as example.

The profile will be created at first FF run.
I can copy a folder with all three profiles and settings to the users
appData-structure, but I can do this after first login, not at os
rollout. So I have to do this manually, because the "runonce" is not
working stable. And a generalized profile folder at a diffent structure,
maybe "C:\ff-profiles" does not work because of individual settings per
user. And every user can use some needed extensions at user base too.


Is there a way I don't see to simplify the rollout of all profiles /
settings to the user accounts?

Ah, hint: not all machines are included in a domain, some machines need
to be separated from a domain.


Suggestions welcome


Dirk


-- 
This email was Virus checked by Security Gateway at LKA MV.