Can't remove Purview Firefox browser extension with intune
Hello,
New subscriber here. I have been given the task to test the install and uninstall of the Purview Firefox browser extension using Intune. I created 2 groups in EntraID, one for each (install and uninstall).
I have no issues with the installation. Initially, I left the test device in the install group and then added it to the uninstall group to remove it. (this usually works with other apps, it worked this way with the Purview Chrome browsing extension as well other apps) but when I do this, nothing happens.
Next, I removed the device from the install group and added it to the uninstall group only. Once the configuration profile applies to the test device, it allows the user to remove it manually (before it did not) but the extension remains installed.
I have created a policy using the administrative template extension uninstall option as well as with the OMA-URI settings but the same happens. When i check the device configuration for the device in Intune, it says it succeeded but that is not the case. The OMA-URI setting I was not too sure about, but gave it a shot. I used the UUID value for the Purview Firefox extension
I am attaching some pictures and hope someone can tell me what I am doing wrong. I can add additional information, if needed. I have opened a ticket with Microsoft last week but have not called me yet. I ran into this forum today.
Thanks in advance
All Replies (11)
Can you type about:policies on the machine where it is not uninstalling and post the contents?
Thanks for the quick answer Mike. The pic below is from using the OMA-URI setting alternative. I can push one using the Administrative Template extension uninstall setting to another machine so you can see the about:policies result, if needed. It has been same result at the end. I am attaching my current extension page as well where you can see that I still have it
None of those IDs are the purview extension.
It's
beta.microsoft.defender.browser_extension.native_message_host@microsoft.com (as you had in your original post)
It looks like it's getting info from somewhere else?
Thanks Mike. I found a doc in google that told me where to get the extension from (pic attached) which does not have "beta" in front of it ,and this is what I used. I am going to replace the Extension ID with what you provided on the admin template. This may fix the issue. i will let you know.
Thank you
Ilungisiwe
Actually, looking at what you just posted, you want the extension ID. The UUID is an internal thing.
so
microsoft.defender.browser_extension.native_message_host@microsoft.com
I have already added the Extension ID to the admin template which seems not to work. Just to confirm, I need to add the Extension ID to the admin template or the OMA-URI setting? Sorry if I am getting confused (and confusing you)?
Your first two screenshots shows it properly, but then your about:policies screenshots have different IDs. That's the part that's confusing me.
The ID should be in the OMA-URI. Like this:
/Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/Extensions_Uninstall
<enabled/>
<data id="Extensions" value="1microsoft.defender.browser_extension.native_message_host@microsoft.com"/>
Or as your second screenshot shows, use the new profile management stuff on Intune.
Mike,
Can you please confirm what is the character between the 1 and the m? (highlighted)
Looks like a SUMO bug.
& # x F 0 0 0;
(No spaces)
Apologies as i don't have much experience with Firefox or the code used. Attaching a picture, line highlighted, hopefully this is what you mean.
Thank you
If we can't use Intune to remove the Purview Firefox browser extension, do you know of a method that i could use? Perhaps a script with PowerShell, etc. The plan is to push it to approx. 1400 Windows devices. We have pushed the install via Intune to the tests devices and we plan to push it to all our Windows devices the same way. Just in case, we would like to have the option to remove it simultaneously on all of them, if needed, rather than ask each user to do it themselves. Let me know
Thanks
Ilungisiwe