[Mozilla Enterprise] Firefox ESR updates without admin rights ?

Thu Mar 14 14:41:24 UTC 2019

Hello Marius,

For years we install Firefox ESR with SCCM (like you but "only" for 12,000 PCs ;-)
The SCCM package script just runs (with admin privileges) the original installer silently, for example:   .\Firefox Setup 60.4.0esr.exe -ms

The corporate settings are then applied per user with another specific script, also deployed with SCCM).

We always let the auto-update enabled but, even with users having admin rights, we noticed that it takes  4 to 5 weeks to have only half of the PCs updated.
We still do not understand why because these are not always the same PCs that are updated or not updated: for an update a PC can be updated the same day of the release and for the next update this same PC will still not be updated 5 weeks after. (but if the user goes to Help -> About Firefox then the auto-update runs normally...)

So we deploy the update with an SCCM package with exactly the same installation command (ex: .\Firefox Setup 60.5.0esr.exe -ms) the original installer can manage the update.

Usually we can make, test and deploy the new package the day after the release date and all PCs are updated in a few days.

Regards,

Denis Gautier

PS: I did not test it but I believed that the auto-update could work even if the user does not have admin rights because the auto-update is run by a service installed with Firefox, named "Mozilla Maintenance Service". (Again this will not be a solution if this auto-update features cannot do its jobs in a few days for all the PCs...)

From: Enterprise [mailto:enterprise-bounces at mozilla.org] On Behalf Of Eddie Rowe
Sent: Monday, March 11, 2019 16:51
To: TARLO Marius OBS/OCB; enterprise at mozilla.org
Cc: CHEMINEL Mickael DTSI/DISU; BREDELOUX-CHEVAL Sabrina DISU/UOPT
Subject: Re: [Mozilla Enterprise] Firefox ESR updates without admin rights ?

We use the same business processes for updating all applications on our Windows systems to keep Firefox up-to-date (third party end point management tool).  The third party tool runs with elevated rights so it can install/upgrade any software we need to upgrade.  We never, ever allow any third party software to install until it has been tested on test systems, including verifying the upgrade works properly and that our antivirus solution does not flag it as being bad.

From: Enterprise <enterprise-bounces at mozilla.org> On Behalf Of marius.tarlo at orange.com
Sent: Monday, March 11, 2019 9:51 AM
To: enterprise at mozilla.org
Cc: CHEMINEL Mickael DTSI/DISU <mickael.cheminel at orange.com>; BREDELOUX-CHEVAL Sabrina DISU/UOPT <sabrina.bredelouxcheval at orange.com>
Subject: [Mozilla Enterprise] Firefox ESR updates without admin rights ?

Hello,

We have an IT infrastructure consisting of ~100 000 computers using Windows 7 and Windows 10, and with Firefox ESR 60.5.0.

For the moment, the auto-update is disabled by GPO, but we plan to enable it in the future.

Unfortunately, some users don't have admin rights on their computers, and when it's the case, the auto-update doesn't work

Question : would there be a way to update Firefox ESR without admin rights ?
If not, can you explain me how the auto-update process internally works, so that I can try to think about a solution ?

Thank you very much for your answers

Cordialement / Best regards,
[http://www.orange.com/sirius/logos_mail/orange_logo.gif]<https://urldefense.proofpoint.com/v2/url?u=http-3A__www.orange.com_&d=DwMFAw&c=2WwxlqHD_9GeHFEUsOHZXg&r=a0pF-r4VjZCyzB4zxbRDcONPyw-KRRoDiBPd4lDRky8&m=ZiYU3a8P4sEFMnsJSXea4blLNlldlEHw9sSND_qnj5k&s=mILiJn2mx0vwEbbjDzPtBygokGaXwG6TOcMalBVkLjE&e=>
Marius TARLO
Maintenance e-buro
FT/SCE/G2S/NRS/NEOCLES
tél. +33 1 42 75 34 25
marius.tarlo at orange.com<mailto:marius.tarlo at orange.com>

_________________________________________________________________________________________________________________________

Ce message et ses pieces jointes peuvent contenir des informations confidentielles ou privilegiees et ne doivent donc

pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu ce message par erreur, veuillez le signaler

a l'expediteur et le detruire ainsi que les pieces jointes. Les messages electroniques etant susceptibles d'alteration,

Orange decline toute responsabilite si ce message a ete altere, deforme ou falsifie. Merci.

This message and its attachments may contain confidential or privileged information that may be protected by law;

they should not be distributed, used or copied without authorisation.

If you have received this email in error, please notify the sender and delete this message and its attachments.

As emails may be altered, Orange is not liable for messages that have been modified, changed or falsified.

Thank you.

_________________________________________________________________________________________________________________________

Ce message et ses pieces jointes peuvent contenir des informations confidentielles ou privilegiees et ne doivent donc
pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu ce message par erreur, veuillez le signaler
a l'expediteur et le detruire ainsi que les pieces jointes. Les messages electroniques etant susceptibles d'alteration,
Orange decline toute responsabilite si ce message a ete altere, deforme ou falsifie. Merci.

This message and its attachments may contain confidential or privileged information that may be protected by law;
they should not be distributed, used or copied without authorisation.
If you have received this email in error, please notify the sender and delete this message and its attachments.
As emails may be altered, Orange is not liable for messages that have been modified, changed or falsified.
Thank you.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.mozilla.org/pipermail/enterprise/attachments/20190314/ca118a02/attachment-0002.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.jpg
Type: image/jpeg
Size: 785 bytes
Desc: image001.jpg
URL: <http://mail.mozilla.org/pipermail/enterprise/attachments/20190314/ca118a02/attachment-0002.jpg>