<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Verdana;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
pre
{mso-style-priority:99;
mso-style-link:"HTML Preformatted Char";
margin:0in;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Courier New";}
span.HTMLPreformattedChar
{mso-style-name:"HTML Preformatted Char";
mso-style-priority:99;
mso-style-link:"HTML Preformatted";
font-family:Consolas;}
span.EmailStyle23
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><a name="Classify_Bookmark"><b><i><span style="font-size:12.0pt;font-family:"Arial",sans-serif;color:green">Classification: UNCLASSIFIED</span></i></b></a><span style="mso-bookmark:Classify_Bookmark"></span><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Good morning Mike and Victor,<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Just to clarify, here’s the situation.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I manage a VDI infra, essentially I’m migrating users from System 1.0 to System 2.0.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><i><u>On system 1.0</u></i>, I had a Firefox ESR that’s about 6 months old when initially installed and when the user loads the browser for the first time they can update it to the latest ESR because we allow the self-update.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Now here’s the catch 22, I’m using Microsoft’s USMT profile backup tools to export the user’s profile to a .MIG and then I import.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Now once the <i><u>user’s profile is migrated</u></i> to <i>
<u>System 2.0</u>,</i><b> </b>by default when they log into the new machine SCCM offers that older version of Firefox that’s about 6 months old so they install it and of course as soon as they user tries to load it detects the profile as incompatible because
FF hasn’t had the chance to update yet. So essentially the situation is that a NEW profile is loaded into an OLD FF….<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I’ve tried the <i><u>MOZ_LEGACY_PROFILES</u></i> through both USER and SYSTEM GPO’s and the behavior remained the same, the newer profile couldn’t load into the old temporary FF.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">So would <i><u>MOZ_ALLOW_DOWNGRADE</u></i> actually<i> </i>allow me to load a new profile onto an old FF temporarily while it updates?<br>
<br>
Or basically with those two, it would work….. BUT the users would have to rebuild their profile using the static profile moving forward instead of the randomly generating string one?<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Eric<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b>From:</b> Hoang (US), Victor T <victor.t.hoang@boeing.com>
<br>
<b>Sent:</b> July 1, 2020 2:58 PM<br>
<b>To:</b> Mike Kaply <mkaply@mozilla.com>; Periard, Eric <Eric.Periard@cyber.gc.ca><br>
<b>Cc:</b> enterprise@mozilla.org<br>
<b>Subject:</b> RE: [EXTERNAL] Re: [Mozilla Enterprise] Error with using system proxy settings (when changing from using "automatic proxy configuration URL" by default via policies.json)<o:p></o:p></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p><span style="color:blue">EXTERNAL EMAIL – USE CAUTION / COURRIEL EXTERNE – FAITES PREUVE DE PRUDENCE</span><o:p></o:p></p>
<div>
<p class="MsoNormal"><span style="color:#1F497D">Hey Eric,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">I also had this problem in the past and its basically what Mike pointed out. I mostly saw this for folks coming from 60 to 68 ESR. To resolve this, I created 2 environment variables in windows. One called MOZ_ALLOW_DOWNGRADE
and another called MOZ_LEGACY_PROFILES. For the Value field of each variable, I set it to 1.
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">This should allow you to downgrade and use the same profile for all users. I automate that process via my own scripts and deploy through SCCM. Also keep in mind when a user uninstalls Firefox from control panel,
it does not remove these system variables (and they will need to be an administrator), so I recommend that you have an internal process to remove these variables when they try to uninstall the browser for the cleanest practice. Easy way to check incase the
individual does not have admin rights is by opening up cmd and typing: set. That should show if the variable still exists (or not).<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">Victor<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><b>From:</b> Enterprise <<a href="mailto:enterprise-bounces@mozilla.org">enterprise-bounces@mozilla.org</a>>
<b>On Behalf Of </b>Mike Kaply<br>
<b>Sent:</b> Wednesday, July 1, 2020 11:47 AM<br>
<b>To:</b> Periard, Eric <<a href="mailto:Eric.Periard@cyber.gc.ca">Eric.Periard@cyber.gc.ca</a>><br>
<b>Cc:</b> <a href="mailto:enterprise@mozilla.org">enterprise@mozilla.org</a><br>
<b>Subject:</b> [EXTERNAL] Re: [Mozilla Enterprise] Error with using system proxy settings (when changing from using "automatic proxy configuration URL" by default via policies.json)<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<table class="MsoNormalTable" border="0" cellspacing="3" cellpadding="0">
<tbody>
<tr>
<td style="background:white;padding:.75pt .75pt .75pt .75pt">
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" align="left" width="100%" style="width:100.0%;margin-left:.75pt;margin-right:.75pt">
<tbody>
<tr>
<td style="background:#910A19;padding:5.25pt 1.5pt 5.25pt 1.5pt"></td>
<td width="100%" style="width:100.0%;background:#FDF2F4;padding:5.25pt 3.75pt 5.25pt 11.25pt;word-wrap:break-word">
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-element:frame;mso-element-frame-hspace:2.25pt;mso-element-wrap:around;mso-element-anchor-vertical:paragraph;mso-element-anchor-horizontal:column;mso-height-rule:exactly">
<span style="font-size:10.0pt;font-family:"Verdana",sans-serif;color:#212121">This message was sent from outside of Boeing. Please do not click links or open attachments unless you recognize the sender and know that the content is safe.</span><o:p></o:p></p>
</div>
</td>
</tr>
</tbody>
</table>
<pre><span style="color:black"><br> <o:p></o:p></span></pre>
</td>
</tr>
</tbody>
</table>
<div>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt">You can read more about this here:<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt"><a href="https://can01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fsupport.mozilla.org%2Fen-US%2Fkb%2Funderstanding-depth-profile-installation&data=02%7C01%7CEric.Periard%40cyber.gc.ca%7C0d385fe7aba049d0706f08d81df0ad75%7Cda9cbe40ec1e4997afb317d87574571a%7C0%7C0%7C637292266831055030&sdata=dE9hUg6kuVIZUNGiHAJTsaGgnomZ1bzk%2FHjiKiHJuI0%3D&reserved=0">https://support.mozilla.org/en-US/kb/understanding-depth-profile-installation</a><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt">But specifically at the end:<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt">" The downgrade blocking can be bypassed by setting the environment variable MOZ_ALLOW_DOWNGRADE or by passing the --allow-downgrade command line argument when running Firefox."<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt">Hopefully this should accomplish what you need.<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt">Alternatively if it is a problem with the new Firefox being installed in a different directory, you can use the MOZ_LEGACY_PROFILES environment variable or the LegacyProfiles policy -
<a href="https://can01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fmozilla%2Fpolicy-templates%2Fblob%2Fmaster%2FREADME.md%23legacyprofiles&data=02%7C01%7CEric.Periard%40cyber.gc.ca%7C0d385fe7aba049d0706f08d81df0ad75%7Cda9cbe40ec1e4997afb317d87574571a%7C0%7C0%7C637292266831065024&sdata=umHVpT9L4ldFTb2ZzvXbLEAlSP3n9EMgq5Bdk1FhTRw%3D&reserved=0">
https://github.com/mozilla/policy-templates/blob/master/README.md#legacyprofiles</a><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt">Mike<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><span style="font-size:10.0pt"><o:p> </o:p></span></p>
<div>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt">On Wed, Jul 1, 2020 at 12:04 PM Periard, Eric <<a href="mailto:Eric.Periard@cyber.gc.ca">Eric.Periard@cyber.gc.ca</a>> wrote:<o:p></o:p></span></p>
</div>
<blockquote style="border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-top:5.0pt;margin-right:0in;margin-bottom:5.0pt">
<div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><b><i><span style="font-size:12.0pt;font-family:"Arial",sans-serif;color:green">Classification: UNCLASSIFIED</span></i></b><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">Hello,<o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">Here’s an interesting situation: We’ve recently created a USMT Windows User Profile Backup and Restore package via SCCM and that works fine, however there’s a catch 22 with firefox….<o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;margin-bottom:12.0pt">Usually I keep a baseline version of the package via the Software Center and the users can update the browser via the ABOUT menu.
<br>
<br>
However if a windows profile is restored to a new system (with AppData) and then firefox is installed from the Software Center, of course it’s old and it sees the newer profile as incompatible.<br>
<br>
so far the only solution I got is to go ahead and update the baseline version of my Firefox package.<br>
<br>
So here’s my questions:<br>
<br>
1. Is it possible somehow to load a new profile onto an old Firefox?<br>
2. Is it possible to force Firefox to look for updates as soon as someone tries to open it?<br>
3. If 2. is possible, would it fetch the update before prompting the user to create a new profile?<br>
<br>
Please advise, this seems to be a none-issue with Chrome post-user mig.<br>
<br>
Thanks<br>
<br>
Eric<o:p></o:p></p>
</div>
</div>
<p class="MsoNormal"><span style="font-size:10.0pt">_______________________________________________<br>
Enterprise mailing list<br>
<a href="mailto:Enterprise@mozilla.org" target="_blank">Enterprise@mozilla.org</a><br>
<a href="https://can01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fmail.mozilla.org%2Flistinfo%2Fenterprise&data=02%7C01%7CEric.Periard%40cyber.gc.ca%7C0d385fe7aba049d0706f08d81df0ad75%7Cda9cbe40ec1e4997afb317d87574571a%7C0%7C0%7C637292266831065024&sdata=L%2FTuAGq1zc3RCuJ6SD3ddMed9XidjfGdJkcC8%2B3Ijh8%3D&reserved=0" target="_blank">https://mail.mozilla.org/listinfo/enterprise</a><br>
<br>
To unsubscribe from this list, please visit <a href="https://can01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fmail.mozilla.org%2Flistinfo%2Fenterprise&data=02%7C01%7CEric.Periard%40cyber.gc.ca%7C0d385fe7aba049d0706f08d81df0ad75%7Cda9cbe40ec1e4997afb317d87574571a%7C0%7C0%7C637292266831075021&sdata=0olcoMr49SdT7cCiMAGX6kJz41W38hGGUUU8cmWYZ%2FA%3D&reserved=0" target="_blank">
https://mail.mozilla.org/listinfo/enterprise</a> or send an email to <a href="mailto:enterprise-request@mozilla.org" target="_blank">
enterprise-request@mozilla.org</a> with a subject of "unsubscribe"<o:p></o:p></span></p>
</blockquote>
</div>
</div>
</div>
</body>
</html>