Locking down firefox in a corporate environment

Hello all, I would like to set a default webpage and set a proxy setting globally for Our Firefox users. I tried a couple of the firefox group policy add-on. One worked then stopped working (buggy) The other one worked well but ff was just a small part of the program so they would not sell just the ff gpo add on. so I am thinking is there a script or another program or something you firefox gurus can recommended and use something that can be used in a enterprise environment?

You can use a mozilla.cfg file in the Firefox program folder to lock prefs or specify new (default) values.
Place a file local-settings.js in the defaults\pref folder where you also find the file channel-prefs.js to specify using mozilla.cfg.
pref("general.config.filename", "mozilla.cfg");
pref("general.config.obscure_value", 0); // use this to disable the byte-shift
See:
*http://kb.mozillazine.org/Locking_preferences
You can use these functions in mozilla.cfg:
defaultPref(); // set new default value
pref(); // set pref, but allow changes in current session
lockPref(); // lock pref, disallow changes
*http://kb.mozillazine.org/network.proxy.type
*http://kb.mozillazine.org/network.proxy.%28protocol%29
*http://kb.mozillazine.org/network.proxy.%28protocol%29_port
*http://kb.mozillazine.org/browser.startup.homepage

Similar Messages

  • Locking down firefox 18.0.2 in domain

    I want to lock down Firefox options in particular the tab for updates
    i have done the network tab but cant find how to do the other options for the cfg file

    this is set as false but it does not stop a user clicking chech for updates
    what i want is to hide the whole tab from options realy or at least gray them out for users

  • Locking down Firefox Connection settings

    Due to Google removing their support for IE8, I'm being forced down the road to look at an alternative Browser to support my users when connecting to Google tools.
    Using IE I have locked down users to enforce them to use our cloud based web security using a PAC file and now need to use the same with firefox.
    I've edited the registry with the PAC file but now want to effectivly grey out the options on the Connections setting page
    I've read a few guides and tried them but they are all for older version of FF.
    Can anyone out there point me in the right direction?

    If you really want to prevent users from changing settings then the only way to achieve this is via a mozilla.cfg file.
    It is not really that difficult.<br />
    You need to create to plain text files.
    Place a file local-settings.js in the defaults\pref folder where you also find the file channel-prefs.js to specify using mozilla.cfg.
    <pre><nowiki>pref("general.config.filename", "mozilla.cfg");
    pref("general.config.obscure_value", 0); // use this to disable the byte-shift
    </nowiki></pre>
    The mozilla.cfg file to be located in the main Firefox program folder should contain these lines:
    <pre><nowiki>// mzila.cfg should start with a comment line
    lockPref("network.proxy.type", 2);
    </nowiki></pre>
    See also:
    *http://kb.mozillazine.org/network.proxy.type
    *http://kb.mozillazine.org/Locking_preferences

  • I was trying to update my Garmin,on my Imac and the application is locked down on the right hand side of the page next to my trash can and will not open---how can I get firefox to open up again ???

    I was trying to update my Garmin and Firefox is now locked down on the righthand page next to my trash can and will not open---I have an Imac desktop.

    We need a lot more information - like exactly waht you are doing, what version of iPhoto you have and what happens
    LN

  • Access Connections v4.52 - user rights in locked down environment

    I'm currently working on a small project to deploy various Lenovo wireless drivers, Access Connections v4.52, Hotkey and Power Management drivers via SMS but have come across a slight issue with Access Connections that I can't seem to resolve.
    I'm hoping to provide my locked down users with a selection of standard profiles that are copied to their machines on logon but would also like to give them the ability to create and modify new ones too - this is where I'm having problems.
    Through Group Policy I have set:
    Allow Windows users without administrator privileges to create and apply WLAN location profiles using Find Wireless Network function
    HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Lenovo\AccessConnection\EnableCreateProfilewithFWN 1
    Allow Windows users without administrator privileges to create and apply location profiles
    HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Lenovo\AccessConnection\EnableUserMode 1
    I have also manually set the following:
    HKEY_LOCAL_MACHINE\SOFTWARE\Lenovo\Access Connections\Install\AllowPrfCreationThruFWN 1
    I couldn't find a key for the 'EnableUserMode' option
    Unfortunately, none of these give standard users access to create or modify profiles.
    Have any of you come across this in your environment and if so did you manage to come up with a suitable solution?
    Thanks in advance.

    Hi,
    the steps, that you performed are correct.
    However I would not do the last step:
    HKEY_LOCAL_MACHINE\SOFTWARE\Lenovo\Access Connections\Install\AllowPrfCreationThruFWN 1
    This might cause confusiong.
    I have just tested it in here and it's working fine with the 5.x version of AC
    Cheers

  • Locked down computer (means I cannot see network settings) allows IE6 but Firefox always times out.

    The tech guys have locked down the computer and I cannot see the network settings and have no access to the registry. Firefox always times out so I am forced to use IE6. How to set up Firefox to get round this?

    Presumably, you're talking about your company's administrator. It probably wouldn't be wise to try and circumvent their network policy. It might get you fired even.
    A better idea would be to show them how insecure IE6 is - ''it's no longer supported by Microsoft for example and exposes their network to all kinds of attacks'' - and that it's in their own interests to use a secure browser like Firefox 4.0
    Maybe they'll even promote you!

  • How to granularly lock down corporate email from syncing to icloud

    Need to allow users to have icloud for personal space but lock down corporate email, contacts and calendars from syncing.  Have MDM product and tried iphone config tool but both are all or nothing.  Anyone have luck doing this?

    Hi,
    I just purchased a 2nd I-phone, 1 for my son, and now me. Please dont kill the messenger but I'd like to add to this string and get your advice:) I too today only have 1 I-tunes account and my son was syncing with this I-tunes account and also turned on I-cloud for backups. I now will use my I-phone for checking corporate e-mail, i.e exchange, I have over 1000 contacts, lots of calender meetings in a given day, etc. When I 1st plugged my I-phone into the "same" I-tunes account computer and enabled I-cloud on my new phones I now have all of my sons games, and his contacts, which I really dont want to see on a corporate phone.
    What is the best suggestion you can provide to seperate personal data from corporate data?
    Should we use Fredrickfromvacaville suggestions above?
    1) turn off I-cloud email, contacts, calendar
    2) or create another I-tunes account for the corporate user I-phone
    Can you provide any guidance on which one would be better over the other?
    Thanks,
    alffy

  • How Creative Cloud working under locked down IT administration environment

    We are  existing CS6 and would like to sign for Creative Cloud. Just want to know how it works on the locked down user computers (without local administrator rights)?
    DISCLAIMER The contents of this email and any attachments (together "this email") may contain information that is confidential to Breville Group Limited (and/or its associated entities) (together"BRG"). Information contained in this email is subject to copyright. If you are not the intended recipient, you cannot print, use, rely, or disseminate any part of this email. If you receive this email in error, please notify us immediately by return e-mail and erase all copies. If you are the intended recipient of this email you should not copy, disclose, or distribute this email without the authority of BRG. Any views expressed in this email are those of the individual sender, except where the sender specifically states them to be the views of BRG. If this email contains any defamatory comments expressed by the individual sender, these comments are made outside the scope of his/her authority. BRG does not accept liability in respect of such defamatory comments. BRG does not warrant that the integrity of this email has been maintained, or that this email is free of errors or viruses, and has not been intercepted or interfered with. It is your responsibility to scan this email for computer viruses and other defects. BRG does not accept liability for any loss or damage however caused, whether by negligence or otherwise, which may result directly or indirectly from this email. In any event, BRG's liability is limited to the cost of re-supplying this email. Please consider the environment before printing this email. ***************************************************************

    The deployment is just the same like for the conventional suites and the same rules apply, so I'm not sure what you are asking.
    Mylenium

  • Directory preferences in a locked down PC environment

    How do I change:
    ide.pref.dir
    ide.pref.dir.base
    ide.user.dir
    ide.work.dir
    ide.work.dir.base
    user.home
    so that they don't reference a windows path like \\<server>\<user>$, but <drive letter>:\Oracle\sqldeveloper instead
    We use locked down PC's (with no access to the A: and C: drives) . And when we start SQLD we get 16 dialogue windows say that it cannot access the A: drive, to which we press the continue button. You also get the message when using the File navigator and the File->Open or File-Save functions.
    On upgrade from 1.5.1 to 1.5.4 the number of dialogue windows dropped from 16 to 2.
    We also always lose our connextions and have to reimport from a saved file every morning.
    A response to thread Connections fail to load at startup by user user641239 at 1-sep-2008 0:59 seems to have the solution - except it requires access to regedit. We don't have that. It's much too painful to get SQLD part of the PC build at the customer, so we need to be able to configure without resorting to regedit.
    Any help appreciated.
    Nic
    Edited by: Nic Atkin on 17-apr-2009 2:41
    Edited by: Nic Atkin on 17-apr-2009 2:54

    Hi FurryOne,
    There is a way to hide both A: and C: - but you need Windows Administrator rights to do it. Not possible in a locked down PC, So I'll live with it for now.
    I was also having the Configure File Type Associations at startup everytime problem (see
    Re: Configure File Type Associations at startup everytime
    So, my current solution looks like this:
    AddVMOption -Dide.pref.dir.base=M:\Oracle\
    AddVMOption -Dide.pref.dir=M:\Oracle\sqldeveloper
    AddVMOption -Dide.user.dir.base=M:\Oracle\
    AddVMOption -Dide.user.dir=M:\Oracle\sqldeveloper
    AddVMOption -Dide.work.dir.base=M:\Oracle\
    AddVMOption -Dide.work.dir=M:\Oracle\sqldeveloper
    AddVMOption -Duser.home=M:\
    AddVMOption -Dno.shell.integration=true

  • Installing QuickTime in a Corporate Environment

    I apologize if this has already been asked, but I searched and couldn't find anything related. Hopefully someone can point me in the right direction.
    I need to deploy the latest version of QT in a corporate environment. Our users are locked down and cannot download or perform automatic updates. Since they cannot upgrade to Pro, I'd also like to remove the Pro-related menu times. I'd also like to prevent the Help-->Check for Existing Updates menu from being displayed.
    I've extracted the Windows Installer (.msi) files and created a transform for some minor changes. Other than the items above, the install works and runs great. I've poked at the registry and nothing jumps out at me. I've also gone through Edit->Preferences, but there are no options that match my requirements.
    Any help would be appreciated.

    You may be right, but I thought it was worth a shot. Previous versions have been a little bit more friendly in this regard.
    I appreciate your reply. Thanks!

  • Video in FP10 ActionScript 2 vs. ActionScript 3 on locked-down network

    My company has an extremly locked-down network, and I'm having some issues getting Flash video to play when it is encoded with ActionScript 3 that I do not have with video encoded with ActionScript 2. What I am assuming is that there is a required external framework or library my network is blocking with regard to AS3 content, but I can't find any information about where that framework or library "lives". (I had a similar problem in an earlier project with the Text Layout Framework, but documentation on that was easy to find and I implimented a solution.)  If someone can point me to that framework/library/other external source location I can get my networking guys to unlock it. (Note that I know the actual videos are encoded correctly, as I can get everything to work outside the corporate environment, and the videos are otherwise exactly the same but for their encoding [AS2 happy - which will play - vs. AS3 required - which won't].) This problem is boggling me...
    As a company we use (and I have no power to change):
    Windows XP Professional version 5.1.2600 Service Pack 3 Build 2600
    IE 7.0.5730.13CO
    Flash Player version 10,1,52,14
    Thanks!
    Chris, from the corporate world of locked-down systems.

    My company has an extremly locked-down network, and I'm having some issues getting Flash video to play when it is encoded with ActionScript 3 that I do not have with video encoded with ActionScript 2. What I am assuming is that there is a required external framework or library my network is blocking with regard to AS3 content, but I can't find any information about where that framework or library "lives". (I had a similar problem in an earlier project with the Text Layout Framework, but documentation on that was easy to find and I implimented a solution.)  If someone can point me to that framework/library/other external source location I can get my networking guys to unlock it. (Note that I know the actual videos are encoded correctly, as I can get everything to work outside the corporate environment, and the videos are otherwise exactly the same but for their encoding [AS2 happy - which will play - vs. AS3 required - which won't].) This problem is boggling me...
    As a company we use (and I have no power to change):
    Windows XP Professional version 5.1.2600 Service Pack 3 Build 2600
    IE 7.0.5730.13CO
    Flash Player version 10,1,52,14
    Thanks!
    Chris, from the corporate world of locked-down systems.

  • Security - Locking Down Oracle 9i

    Anyone,
    I have been asked by our auditors to lock down my Oracle environment by disabling the default accounts that are not needed.
    What User Accounts can I disable (Lock) and not break my Oracle environment?
    I am looking at the following:
    DBSNMP
    OUTLN
    WMSYS
    Will I break anything if I disable these accounts?
    Thanks in advance,
    Miller

    Hi
    DBSNMP User:
    For database event monitoring, it is recommended you use the pre-existing DBSNMP user account.The DBSNMP user is automatically created with each new database and is already used for basic monitoring such as checking database availability. When setting up the EM Event owner’s preferences for Preferred Credentials, specify DBSNMP as database credentials for all monitored databases. This account will be used by the agent for monitoring and historical data collection as well as by the OMS/Console for database browsing. The DBSNMP user has already been granted some basic privileges. However, if it is to be used for all database event monitoring, you will also need to grant:
    SELECT_CATALOG_ROLE role.
    OUTLN User:
    This user is used while using TKPROF utility
    select user# from sys.user$ where name = 'OUTLN'
    WMSYS: Don't know about this user.
    I suggest to remove only SCOTT user account, as this is a demo user account.
    Hope this was useful.
    Thank You

  • Recommendation needed on: Locking Down BW Client / Object Changeability:

    Hello Experts,
    We recently had a problem on our production box and we found the need to lock down the environment with scc4.
    We further used object changeability to control the environment and it has been hell ever since. Users have had difficulties running queries, etc.
    In a typical BW production environment, what is the approach and what is the common practice?
    (Please for each recommended approach include any command you mention)
    For example, what transaction do we use to see various users and their authorizations, etc. Who made modification on which object, etc.
    Thanks.

    Hi Amanda,
    In SCC4, you should maintain following values.
    Under
    >Changes and transport for client specific objects
    no changes allowed
    under
    >Cross client object changes
    no changes to repository and cross client customizing 
    objects
    Under
    > Protection : Client copier and comparison tool
    Protection level 1: NO OVERWRITING
    Regards
    Sriram

  • Locking down the sound

    Hello fellow macers!
    I have multiple accounts setup on my Apple Macs, and most things work well, though I am struggling to solve one little gripe:
    The managed users can turn up or down the volume as much as they want. I would like to stop this function totally as it is disruptive to a classroom environment.
    Any ideas? I have used the com.apple.dock.plist file rights before, I had a quick peak for a sound file but no joy. Maybe I looked in the wrong place or there is another method?
    Cheers guys.
    Rob

    Give them pencils to tap on their desks instead. That'll stop their ability to distract you with the computer's volume button.
    All kidding aside (or is it?), output volume preferences are stored in "/Library/Preferences/.GlobalPreferences.plist". I'm not completely sure if it's easily locked down without potential future headaches, but that's where the setting is stored.

  • Deploying iPhone 5 in a Corporate Environment

    Recently I have purchased several iPhone 5c's to deploy to my end users.  I am experimenting with the features that Apple boasts with iOS 7; which are nice, especially the VPN functionality. 
    I wanted to ask a few questions and to get feedback from other administrators.  Any tips that you have found to work please let me know.
    Question 1: Since these are corporate devices and not BYOD's, how do I setup app store for 50+ users?  I don't want users downloading apps or having it associated with their corporate emails.  I would prefer one corporate email address be associated with all devices in which I retain the credentials.
    Question 2: What are some helpful hints that others have found in locking down iPhones?

    Turn the phone in to the police and give them all the information you have on the person you bought it from.
    Be grateful all you got was ripped off. It could have been much much worse.
    Google "Craigslist murders" some time.

Maybe you are looking for