[Mozilla Enterprise] Enabling Extension via GPO

Tue Feb 26 19:24:30 UTC 2019

You’re a genius! That seems to have worked. I’ll delete the keys after the install and let the policy install it. Thankfully I’ve only deployed it to a test group, because it looks like I need to reset the Firefox profile if it’s already been installed by the vendor installer

______________________

Rob Gura
TSS Infrastructure (Desktop) Engineer
JONES DAY® - One Firm Worldwide<http://www.jonesday.com/>℠
______________________

From: Mike Kaply <mkaply at mozilla.com>
Sent: Tuesday, February 26, 2019 2:18 PM
To: Gura, Robert L. <rlgura at jonesday.com>
Cc: enterprise at mozilla.org
Subject: Re: [Mozilla Enterprise] Enabling Extension via GPO

OK, that makes much more sense. Because it's a third party install, it's disabled by default.

The easiest way to work around this would be to remove the registry entry and just let the policy install it and it won't be disabled.

I'll see about making a policy that force enabled add-ons based on their ID.

I've had requests to change the addon scopes as well, but I'm not sure how feasible that is right now.

Mike

On Tue, Feb 26, 2019 at 1:12 PM Gura, Robert L. <rlgura at jonesday.com<mailto:rlgura at jonesday.com>> wrote:
Yes, the install for Research Monitor installs the plugin for IE and Firefox, but Firefox extension is disabled.

Without policy, this key is present and plugin is disabled:
HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\Firefox\Extensions

rmff at priorysolutions.com<mailto:rmff at priorysolutions.com> = C:\Program Files
(x86)\ResearchMonitor\rmff\rmff at priorysolutions.com.xpi

______________________

Rob Gura
TSS Infrastructure (Desktop) Engineer
JONES DAY® - One Firm Worldwide<http://www.jonesday.com/>℠
______________________

From: Mike Kaply <mkaply at mozilla.com<mailto:mkaply at mozilla.com>>
Sent: Tuesday, February 26, 2019 1:58 PM
To: Gura, Robert L. <rlgura at jonesday.com<mailto:rlgura at jonesday.com>>
Cc: enterprise at mozilla.org<mailto:enterprise at mozilla.org>
Subject: Re: [Mozilla Enterprise] Enabling Extension via GPO

I'm wondering if ResearchMonitor is installing itself as a 3rd party extension so it actually isn't using the policy.

If you remove the policy, does it still install disabled?

Can you check the Windows registry to see if there is an install setup?

https://developer.mozilla.org/en-US/docs/Mozilla/Add-ons/WebExtensions/Distribution_options/Add-ons_in_the_enterprise#Installation_using_the_Windows_registry

Mike Kaply

On Tue, Feb 26, 2019 at 10:09 AM Mike Kaply <mkaply at mozilla.com<mailto:mkaply at mozilla.com>> wrote:
That's really odd. I found one case where it didn't get enabled (if it was already installed disabled), but I could recreate in other cases.

I'm going to add some code to make sure it is explicitly enabled.

https://bugzilla.mozilla.org/show_bug.cgi?id=1530712

We can take the discussion there.

Mike Kaply

Mike

On Tue, Feb 26, 2019 at 9:43 AM Gura, Robert L. <rlgura at jonesday.com<mailto:rlgura at jonesday.com>> wrote:
Yes. I’ve tried on clean installs of Firefox, before, after Firefox installed, new profiles, existing profiles…

______________________

Rob Gura
TSS Infrastructure (Desktop) Engineer
JONES DAY® - One Firm Worldwide<http://www.jonesday.com/>℠
______________________

From: Mike Kaply <mkaply at mozilla.com<mailto:mkaply at mozilla.com>>
Sent: Tuesday, February 26, 2019 10:36 AM
To: Gura, Robert L. <rlgura at jonesday.com<mailto:rlgura at jonesday.com>>
Cc: enterprise at mozilla.org<mailto:enterprise at mozilla.org>
Subject: Re: [Mozilla Enterprise] Enabling Extension via GPO

Is this the first time this extension has been installed on this machine?

Mike

On Tue, Feb 26, 2019 at 9:35 AM Gura, Robert L. <rlgura at jonesday.com<mailto:rlgura at jonesday.com>> wrote:
I’ve tried setting the following policies on machine and user side:

Administrative Templates > Mozilla > Firefox > Extensions
                Extensions to Install = C:\Program Files (x86)\ResearchMonitor\rmff\rmff at priorysolutions.com.xpi
                Prevent extensions from being disabled or removed = rmff at priorysolutions.com<mailto:rmff at priorysolutions.com>

This installs the Extension, but does not enable it.
IF the user enables the extension manually, they cannot disable it, but how do I get the extension to be enabled automatically??
It seems like there’s a policy setting missing…

I’m on Firefox 60.5.1ESR (32-bit) with GPO templates v1.4
______________________
Rob Gura
TSS Infrastructure (Desktop) Engineer
JONES DAY® - One Firm Worldwide<http://www.jonesday.com/>℠
901 Lakeside Ave.
Cleveland, OH 44114
Office +1.216.586.0943

***This e-mail (including any attachments) may contain information that is private, confidential, or protected by attorney-client or other privilege. If you received this e-mail in error, please delete it from your system without copying it and notify sender by reply e-mail, so that our records can be corrected.***
_______________________________________________
Enterprise mailing list
Enterprise at mozilla.org<mailto:Enterprise at mozilla.org>
https://mail.mozilla.org/listinfo/enterprise

To unsubscribe from this list, please visit https://mail.mozilla.org/listinfo/enterprise or send an email to enterprise-request at mozilla.org<mailto:enterprise-request at mozilla.org> with a subject of "unsubscribe"
***This e-mail (including any attachments) may contain information that is private, confidential, or protected by attorney-client or other privilege. If you received this e-mail in error, please delete it from your system without copying it and notify sender by reply e-mail, so that our records can be corrected.***
***This e-mail (including any attachments) may contain information that is private, confidential, or protected by attorney-client or other privilege. If you received this e-mail in error, please delete it from your system without copying it and notify sender by reply e-mail, so that our records can be corrected.***
***This e-mail (including any attachments) may contain information that is private, confidential, or protected by attorney-client or other privilege. If you received this e-mail in error, please delete it from your system without copying it and notify sender by reply e-mail, so that our records can be corrected.***
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.mozilla.org/pipermail/enterprise/attachments/20190226/370f16be/attachment-0002.html>