Sök i support

Akta dig för supportbedrägerier: Vi kommer aldrig att be dig att ringa eller skicka ett sms till ett telefonnummer eller dela personlig information. Rapportera misstänkt aktivitet med alternativet "Rapportera missbruk".

Läs mer

Can't remove Purview Firefox browser extension with intune

  • 12 svar
  • 0 har detta problem
  • 40 visningar
  • Senaste svar av Mike Kaply

more options

Hello,

New subscriber here. I have been given the task to test the install and uninstall of the Purview Firefox browser extension using Intune. I created 2 groups in EntraID, one for each (install and uninstall).

I have no issues with the installation. Initially, I left the test device in the install group and then added it to the uninstall group to remove it. (this usually works with other apps, it worked this way with the Purview Chrome browsing extension as well other apps) but when I do this, nothing happens.

Next, I removed the device from the install group and added it to the uninstall group only. Once the configuration profile applies to the test device, it allows the user to remove it manually (before it did not) but the extension remains installed.

I have created a policy using the administrative template extension uninstall option as well as with the OMA-URI settings but the same happens. When i check the device configuration for the device in Intune, it says it succeeded but that is not the case. The OMA-URI setting I was not too sure about, but gave it a shot. I used the UUID value for the Purview Firefox extension

I am attaching some pictures and hope someone can tell me what I am doing wrong. I can add additional information, if needed. I have opened a ticket with Microsoft last week but have not called me yet. I ran into this forum today.

Thanks in advance

Hello, New subscriber here. I have been given the task to test the install and uninstall of the Purview Firefox browser extension using Intune. I created 2 groups in EntraID, one for each (install and uninstall). I have no issues with the installation. Initially, I left the test device in the install group and then added it to the uninstall group to remove it. (this usually works with other apps, it worked this way with the Purview Chrome browsing extension as well other apps) but when I do this, nothing happens. Next, I removed the device from the install group and added it to the uninstall group only. Once the configuration profile applies to the test device, it allows the user to remove it manually (before it did not) but the extension remains installed. I have created a policy using the administrative template extension uninstall option as well as with the OMA-URI settings but the same happens. When i check the device configuration for the device in Intune, it says it succeeded but that is not the case. The OMA-URI setting I was not too sure about, but gave it a shot. I used the UUID value for the Purview Firefox extension I am attaching some pictures and hope someone can tell me what I am doing wrong. I can add additional information, if needed. I have opened a ticket with Microsoft last week but have not called me yet. I ran into this forum today. Thanks in advance
Bifogade skärmdumpar

Alla svar (12)

more options

Can you type about:policies on the machine where it is not uninstalling and post the contents?

Hjälpsam?

more options

Thanks for the quick answer Mike. The pic below is from using the OMA-URI setting alternative. I can push one using the Administrative Template extension uninstall setting to another machine so you can see the about:policies result, if needed. It has been same result at the end. I am attaching my current extension page as well where you can see that I still have it

Hjälpsam?

more options

None of those IDs are the purview extension.

It's

beta.microsoft.defender.browser_extension.native_message_host@microsoft.com (as you had in your original post)

It looks like it's getting info from somewhere else?

Hjälpsam?

more options

Thanks Mike. I found a doc in google that told me where to get the extension from (pic attached) which does not have "beta" in front of it ,and this is what I used. I am going to replace the Extension ID with what you provided on the admin template. This may fix the issue. i will let you know.

Thank you

Ändrad av raul.aramburu

Hjälpsam?

more options

Actually, looking at what you just posted, you want the extension ID. The UUID is an internal thing.

so

microsoft.defender.browser_extension.native_message_host@microsoft.com

Hjälpsam?

more options

I have already added the Extension ID to the admin template which seems not to work. Just to confirm, I need to add the Extension ID to the admin template or the OMA-URI setting? Sorry if I am getting confused (and confusing you)?

Hjälpsam?

more options

Your first two screenshots shows it properly, but then your about:policies screenshots have different IDs. That's the part that's confusing me.

The ID should be in the OMA-URI. Like this:

/Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/Extensions_Uninstall <enabled/> <data id="Extensions" value="1microsoft.defender.browser_extension.native_message_host@microsoft.com"/>

Or as your second screenshot shows, use the new profile management stuff on Intune.

Hjälpsam?

more options

Mike,

Can you please confirm what is the character between the 1 and the m? (highlighted)

Hjälpsam?

more options

Looks like a SUMO bug.

& # x F 0 0 0;

(No spaces)

Hjälpsam?

more options

Apologies as i don't have much experience with Firefox or the code used. Attaching a picture, line highlighted, hopefully this is what you mean.

Thank you

Hjälpsam?

more options

If we can't use Intune to remove the Purview Firefox browser extension, do you know of a method that i could use? Perhaps a script with PowerShell, etc. The plan is to push it to approx. 1400 Windows devices. We have pushed the install via Intune to the tests devices and we plan to push it to all our Windows devices the same way. Just in case, we would like to have the option to remove it simultaneously on all of them, if needed, rather than ask each user to do it themselves. Let me know

Thanks

Ändrad av raul.aramburu

Hjälpsam?

more options

This should definitely work with policy. And using policy is definitely the best way.

Hjälpsam?

Ställ en fråga

Du måste logga in på ditt konto för att svara på inlägg. Vänligen starta en ny fråga om du inte har ett konto ännu.