Windows 10: Automatic updates by GPO fails
Hi,
i'm running Firefox on +70 Windows 10 PCs in three labs in a university. I've applied a computer configuration GPO with AppAutoUpdate enabled, BackgroundAppUpdate enabled and DisableAppUpdate disabled to my PCs, but it looks like i don't get automatic updates. In my labs i see some workstations have Firefox 108.0.1, but most workstations still have Firefox 107.0.1...
As my users can switch between workstations and labs, this leads to the annoying 'older version' message box when a user worked on a PC which already got the update and later uses another PC which didn't get the update. The users are also forced to create a 'new' profile then, which is quite problematic because of the size of the roaming profiles.
Any hints?
All Replies (7)
For the Firefox 107 machines, if you manually check for updates, do they update?
Yes they update if i check manually...
It sounds like the background app update service isn't running.
Can you check this document?
https://support.mozilla.org/en-US/kb/enable-background-updates-firefox-windows
In particular the end where it talks about reasons it won't run.
Otherwise, you should open a bugzilla bug and we can debug.
Hi Mike,
ok i've read through the doc you've linked above: yes the background update service is enabled. However, the browser settings look different than stated in the doc: there is no option to enable automatic updates at all and there is no checkbox option 'when Firefox is not running'. I think this is because i have this options in my GPO, and thefore settings tell me the browser is managed by my organisation. I have attached a screenshot.
Now for the requirements stated in the doc:
- Firefox was installed with the installer
- The Mozilla Maintenance Service is installed (Start Type: manual)
- Firefox uses the default-release profile
But (as you see from the screenshot) Firefox uses a (german) Language Pack, so app.update.langpack.enabled is true :(
So, does this mean i cannot get automatic updates when offering my users the german Firefox version?
You can get automatic updates, you just can't get background updates
If you ship the German version of Firefox to those users, it will work
To avoid the error message, you can set an environment variable MOZ_ALLOW_DOWNGRADE or start firefox with --allow-downgrade as a parameter and then Firefox would update when it is opened.
Ok, i've implemented this by a GPO. If a log in to one of the Workstations with normal user rights and start Firefox, i see the 'hourglass' cursor for some time and when i check for Updates via 'Help->About Firefox' afterwards the latest version is installed (and i know it wasn't installed before).
So i think i can live with this solution. Although the MOZ_ALLOW_DOWNGRADE setting can cause problems as stated in the docs.
> So i think i can live with this solution. Although the MOZ_ALLOW_DOWNGRADE setting can cause problems as stated in the docs.
It's very rarely an issue, so I think you'll be pretty safe.