<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN">
<html><body>
<p><span style="font-family: Arial; font-size: 12px;">Hello,</span></p>
<p><span style="font-family: Arial; font-size: 12px;">In my opinion, the esasiest way to configure Firefox in a Microsoft environnement is to use policy template (<a href="https://github.com/mozilla/policy-templates" target="_blank" rel="noopener noreferrer">https://github.com/mozilla/policy-templates</a>).</span></p>
<p><span style="font-family: Arial; font-size: 12px;">Parameters you are looking for can be managed with it.</span></p>
<p> </p>
<div>
<p>Regards,</p>
</div>
<p> </p>
<p> </p>
<div>
<p>Cordialement,</p>
<p><span style="font-family: Arial, Helvetica, sans-serif; font-size: 11px;">-- </span></p>
<table style="font-size: 10px; cursor: default; height: 21px;" width="546" cellspacing="0" cellpadding="0">
<tbody>
<tr>
<td style="font-family: 'Lucida Grande', Verdana, Arial, Helvetica, sans-serif; margin: 8px; cursor: text;" width="120px"><img src="cid:453a9f3ae40e2eeed4fd7c44e2b897b9@yonne.fr" width="82px" height="83px" /></td>
<td style="margin: 8px; cursor: text;">
<p style="font-family: Arial, Helvetica, sans-serif; font-size: 11px;">Sébastien CLÉMENT<br />Direction des Systèmes d’Information<br />Pôle Ressources Organisation et Modernisation<br />Tél: 03 86 72 87 32<br />16-18 Boulevard de la Marne - 89089 Auxerre Cedex</p>
</td>
</tr>
</tbody>
</table>
<p style="font-family: Arial, Helvetica, sans-serif; font-size: 8px;">Pour le respect de l'environnement, veuillez n'imprimer ce message ainsi que les pièces jointes qu'en cas de nécessité.</p>
<p style="font-family: Arial, Helvetica, sans-serif; font-size: 8px;">Le contenu de ce courrier et ses éventuelles pièces jointes sont confidentiels. Ils s'adressent exclusivement à la personne destinataire. Si cet envoi ne vous est pas destiné, ou si vous l'avez reçu par erreur, et afin de ne pas violer le secret des correspondances, vous ne devez pas le transmettre à d'autres personnes ni le reproduire. Merci de le renvoyer à l'émetteur et de le détruire.</p>
</div>
<p>Le 2020-02-14 01:38, Eddie Rowe a écrit :</p>
<blockquote type="cite" style="padding-left:5px; border-left:#1010ff 2px solid; margin-left:5px; width:100%"><!-- html ignored --><!-- head ignored --><!-- meta ignored --><!-- meta ignored -->
<div class="WordSection1">
<p class="MsoNormal"><span style="color: #1f497d;">I have not edit the MSI file for Firefox with Orca (I have used the tool with a couple other products). I would suggest using a preference that sets the home page and allow the employee to change it, in case they wish to do so. See <a href="https://support.mozilla.org/en-US/kb/customizing-firefox-using-autoconfig"> https://support.mozilla.org/en-US/kb/customizing-firefox-using-autoconfig</a>. I would also suggest setting up the policies.json to control other options through policy <a href="https://support.mozilla.org/en-US/products/firefox-enterprise/policies-customization-enterprise/policies-overview-enterprise"> https://support.mozilla.org/en-US/products/firefox-enterprise/policies-customization-enterprise/policies-overview-enterprise</a>. At a minimum you need to take out the support for DNS Over HTTPS via a policy!<!-- o ignored --></span></p>
<p class="MsoNormal"><span style="color: #1f497d;"><!-- o ignored --> </span></p>
<p class="MsoNormal"><span style="color: #1f497d;">It takes a little bit of reading to put everything together, but well worth it and you can begin adopting security controls and settings to help reduce the attack surface at your organization. I put off the work far too long because at first glance it looked too difficult, but once I sat down, read the web pages and made some notes it wasn’t nearly that much work. Pretty well thought out options given how the software has changed over the years. There is sometimes overlap between a preference and policy.<!-- o ignored --></span></p>
<p class="MsoNormal"><span style="color: #1f497d;"><!-- o ignored --> </span></p>
<p class="MsoNormal"><span style="color: #1f497d;">When you are done reading and configuring here is what you will have for x64 Firefox:<!-- o ignored --></span></p>
<p class="MsoNormal"><span style="color: #1f497d;"><!-- o ignored --> </span></p>
<p class="MsoListParagraph" style="text-indent: -.25in; mso-list: l0 level1 lfo2;"><span style="font-family: Symbol; color: #1f497d;"><span style="mso-list: Ignore;">·<span style="font: 7.0pt 'Times New Roman';"> </span></span></span><span style="color: #1f497d;">autoconfig.js goes into C:\Program Files\Mozilla Firefox\defaults\pref\<!-- o ignored --></span></p>
<p class="MsoListParagraph" style="margin-left: 1.0in; text-indent: -.25in; mso-list: l0 level2 lfo2;"><span style="color: #1f497d;"><span style="mso-list: Ignore;">a.<span style="font: 7.0pt 'Times New Roman';"> </span></span></span><span style="color: #1f497d;">This tells Firefox what firefox.cfg file to use.<!-- o ignored --></span></p>
<p class="MsoListParagraph" style="text-indent: -.25in; mso-list: l0 level1 lfo2;"><span style="font-family: Symbol; color: #1f497d;"><span style="mso-list: Ignore;">·<span style="font: 7.0pt 'Times New Roman';"> </span></span></span><span style="color: #1f497d;">firefox.cfg goes into C:\Program Files\Mozilla Firefox\<!-- o ignored --></span></p>
<p class="MsoListParagraph" style="margin-left: 1.0in; text-indent: -.25in; mso-list: l0 level2 lfo2;"><span style="color: #1f497d;"><span style="mso-list: Ignore;">a.<span style="font: 7.0pt 'Times New Roman';"> </span></span></span><span style="color: #1f497d;">This is the Firefox configuration file. I started with a CIS baseline for Firefox ESR that was very old and adjusted where it made sense. I highly recommend putting comments in the file with “//” at the start of the line. I used the CIS benchmark control number to keep my sanity. Preferences in here can be locked where employees cannot change them, default ones, etc. All of mine are locked since I focused on security items – we have a bias in the organization for IE because of internal web apps that have UNC links that don’t work elsewhere (unless someone recodes the app). We try to keep our apps setup pretty generic, but you can go to down with this file and preferences.<!-- o ignored --></span></p>
<p class="MsoListParagraph" style="text-indent: -.25in; mso-list: l0 level1 lfo2;"><span style="font-family: Symbol; color: #1f497d;"><span style="mso-list: Ignore;">·<span style="font: 7.0pt 'Times New Roman';"> </span></span></span><span style="color: #1f497d;">policies.json goes into C:\Program Files\Mozilla Firefox\distribution\<!-- o ignored --></span></p>
<p class="MsoListParagraph" style="margin-left: 1.0in; text-indent: -.25in; mso-list: l0 level2 lfo2;"><span style="color: #1f497d;"><span style="mso-list: Ignore;">a.<span style="font: 7.0pt 'Times New Roman';"> </span></span></span><span style="color: #1f497d;">This is the policies file and has more capabilities than using the GPO option. All manner of goodness can go in this file such as making sure the MenuBar is ALWAYS available, configuring servers you know need pop-ups to work, disabling evil third party cookies, but allow exceptions where you really need them, blocking evil extensions and only allowing those you have reviewed and approved, etc. I push out all of these files via Group Policy Preference so they end up on the Windows boxes (all that we have) in such a way that regular users cannot change, but if someone changed, we would overwrite at next enforcement.<!-- o ignored --></span></p>
<p class="MsoNormal"><span style="color: #1f497d;"><!-- o ignored --> </span></p>
<p class="MsoNormal"><span style="color: #1f497d;"><!-- o ignored --> </span></p>
<div>
<div style="border: none; border-top: solid #E1E1E1 1.0pt; padding: 3.0pt 0in 0in 0in;">
<p class="MsoNormal"><strong>From:</strong> Enterprise <enterprise-bounces@mozilla.org> <strong> On Behalf Of </strong>Michael Tran via Enterprise<br /><strong>Sent:</strong> Thursday, February 13, 2020 6:09 PM<br /><strong>To:</strong> enterprise@mozilla.org<br /><strong>Subject:</strong> Re: [Mozilla Enterprise] Deploy Firefox with MSI installers<!-- o ignored --></p>
</div>
</div>
<p class="MsoNormal"><!-- o ignored --> </p>
<p class="MsoNormal">Hello folks,<!-- o ignored --></p>
<p class="MsoNormal">I’m trying to use the MSI installers to deploy Firefox through SCCM. Beside changing existing values for the PROPERTIES by using ORCA, is there a way to set HOME page in it? What about prevent Firefox to perform check the default browser? Thanks for any help.<!-- o ignored --></p>
<p class="MsoNormal"><!-- o ignored --> </p>
<p class="MsoNormal"><strong><span style="font-size: 10.0pt; font-family: 'Bernard MT Condensed',serif;">Michael Tran</span></strong> <!-- o ignored --></p>
<p class="MsoNormal"><span style="font-size: 10.0pt;">Information Systems Division – Service Desk<!-- o ignored --></span></p>
<p class="MsoNormal"><span style="font-size: 10.0pt;">Oregon Department of Fish and Wildlife <!-- o ignored --></span></p>
<p class="MsoNormal"><span style="font-size: 10.0pt;"><a href="mailto:Michael.C.Tran@state.or.us"><span style="color: windowtext;">Michael.C.Tran@state.or.us</span></a> <!-- o ignored --></span></p>
<p class="MsoNormal"><span style="font-size: 10.0pt;">(503)947-6347</span> <!-- o ignored --></p>
<p class="MsoNormal"><img id="Picture_x0020_1" style="width: .5916in; height: .7833in;" src="cid:37f801dd7ae777ca265da240bdc87322@yonne.fr" width="57" height="75" border="0" /><!-- o ignored --></p>
<p class="MsoNormal"><!-- o ignored --> </p>
</div>
<!-- html ignored --><br />
<pre>_______________________________________________
Enterprise mailing list
<a href="mailto:Enterprise@mozilla.org">Enterprise@mozilla.org</a>
<a href="https://mail.mozilla.org/listinfo/enterprise">https://mail.mozilla.org/listinfo/enterprise</a>
To unsubscribe from this list, please visit <a href="https://mail.mozilla.org/listinfo/enterprise">https://mail.mozilla.org/listinfo/enterprise</a> or send an email to <a href="mailto:enterprise-request@mozilla.org">enterprise-request@mozilla.org</a> with a subject of "unsubscribe"
</pre>
</blockquote>
</body></html>