[Mozilla Enterprise] Policy engine, GPO, FF-60.4.0esr

[tagtraeumer]

Hello,

after further investigation:

FF-addons are only updated automatically, if following two GPO settings are NOT activated:

DisableSystemAddonUpdate: Not activated
"Extensions": {
      "Install": ["https://addons.mozilla.org/firefox/downloads/file/1166954/ublock_origin-1.17.4-an+fx.xpi"],
      "Uninstall": [""],   <==
      "Locked":  [""]    <==

But with these settings all users can access addon installation/ deinstallation, what is NOT wanted...

If BlockAboutAddons is activated, access to about:addons is not possible. But addons can be installed by calling .xpi directly, if above settings are not activated...


How to free this conflict of interests?

Thanks + best regards, Chri