Avatar for Username

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

Hierdie gesprek is in die argief. Vra asseblief 'n nuwe vraag as jy hulp nodig het.

Is there a way to block extensions from being installed on a network level?

  • 4 antwoorde
  • 1 het hierdie probleem
  • 10 views
  • Laaste antwoord deur Maciej2

Maciej2
Maciej2
more options

We have staff installing VPN extensions on Firefox that are circumventing our web filter policy. Is there a way to remotely disable extensions, or prevent them from being installed on a network level? We were able to do so on Chrome thanks to Google's ADM template. I have not been able to find something similar for Firefox.

We have staff installing VPN extensions on Firefox that are circumventing our web filter policy. Is there a way to remotely disable extensions, or prevent them from being installed on a network level? We were able to do so on Chrome thanks to Google's ADM template. I have not been able to find something similar for Firefox.

All Replies (4)

WestEnd
WestEnd
more options

First off why do they have have Admin Privileges to install VPN? That is the only way they can install a VPN - if they have Admin privileges. If your system are Win7 or higher and Admin protected password they can't install a VPN without the Admin priviledges. And since this is beyond FF and a Company Internal Policy Audit this is really nothing related to FF itself specifically.

Maciej2
Maciej2 Vraag-eienaar
more options

You don't need to have admin rights to install extensions in Firefox. This is a Firefox "thing" since they don't have any way of managing their browser in a network environment.

cor-el
cor-el
  • Moderator
  • Top 10 Contributor
more options

See:

You can also lock the Firefox connection settings.

You can use the mozilla.cfg file in the Firefox program folder to set or lock preferences and run privileged JavaScript code.

The mozilla.cfg file needs to be in the main Firefox program folder.

These functions can be used in the mozilla.cfg file: 

defaultPref();	// set new default value
pref();	// set pref, allow changes in current session
lockPref();	// lock pref, disallow changes

This requires a local-settings.js file in the "defaults/pref" folder where the channel-prefs.js file is located that specifies to use mozilla.cfg. 

//
pref("general.config.filename", "mozilla.cfg");
pref("general.config.obscure_value", 0);

The mozilla.cfg and local-settings.js files need to start with a comment line (//).

See Configuration:

Maciej2
Maciej2 Vraag-eienaar
more options

I've tried following those steps, creating an autoconfig.js and Mozilla.cfg file in the respectable folder locations. The autoconfig file: // Any comment. You must start the file with a comment! pref("general.config.filename", "mozilla.cfg"); pref("general.config.obscure_value", 0);

The Mozilla.cfg file: //Starting comment

//Disable add-on installation lockPref("xpinstall.enable",false); lockPref("extensions.enabledScopes", 0);

But I am still capable of installing extensions. I am on Firefox version 57.0.4. Do these preferences no longer work with this version of FF?