main

SCCMTips

Deploy Firefox with SCCM

Spread the love

In this guide, You will learn how to script a Firefox Install for use with SCCM and other deployment utilities. I will show you to install Firefox on the computers in your network with pre-configured settings and extensions, suppressing all unnecessary prompts and first-run pages.

Step 1 – Download your preferred version of Firefox – for my company i used 54.0.1.

I recommend you use the Extended Support Release (ESR) package, as it is intended for large groups and organizations that need to mass deploy Firefox in a desktop environment. This version is also more stable and secure than the regular version of Firefox, which is intended for personal use.

Step 2 – Create a new folder to place the installer, scripts, and extensions. For this guide, I will be saving all the necessary files to the following location:

\\YourSERVER\YourFolder\Mozilla\

Step 3 – Open Notepad and create a new text document called “override.ini.” Copy and paste the information below. When you are done, save the file to the source folder you just created.

[XRE]
EnableProfileMigrator=false 

Step 4 – Open Notepad and create a second text document called “local-settings.js.” Copy and paste the information below. When you are done, save the file to the source folder you just created.

pref("general.config.filename", "mozilla.cfg");
pref("general.config.obscure_value", 0);

Step 5 – Open Notepad and create a third text file called “mozilla.cfg.” Copy and paste the information below.

Note the strings that may be used in this file can be found by opening Firefox on a reference computer and navigating to “about:config.” You can choose to add or remove strings from this file as you wish. Be careful when doing this because Firefox will not launch if the mozilla.cfg file is corrupt or invalid. In addition, note that placing “lockPref” in front of a string will lock the settings from being changed by any user, while “pref” will simply make your custom setting the default setting when Firefox is launched. When you are done, save the file to the source folder you just created.

// WKS Mozilla Firefox Lockdown
// Disable updater
lockPref("app.update.enabled", false);
// Make absolutely sure it is really off
lockPref("app.update.auto", false);
lockPref("app.update.mode", 0);
lockPref("app.update.service.enabled", false);
// Disable Add-ons compatibility checking
clearPref("extensions.lastAppVersion"); 
// Don't show 'know your rights' on first run
pref("browser.rights.3.shown", true);
// Don't show WhatsNew on first run after every update
pref("browser.startup.homepage_override.mstone","ignore");
// Don't show Windows 10 splash screen on first run
pref("browser.usedOnWindows10", true);
// Set default homepage
lockPref("browser.startup.homepage","https://www.google.com");
// Disable the internal PDF viewer
lockPref("pdfjs.disabled", true);
// Disable the flash to javascript converter
lockPref("shumway.disabled", true);
// Don't ask to install the Flash plugin
pref("plugins.notifyMissingFlash", false);
// Disable plugin checking
lockPref("plugins.hide_infobar_for_outdated_plugin", true);
clearPref("plugins.update.url");
// Disable health reporter
lockPref("datareporting.healthreport.service.enabled", false);
// Disable all data upload (Telemetry and FHR)
lockPref("datareporting.policy.dataSubmissionEnabled", false);
// Disable crash reporter
lockPref("toolkit.crashreporter.enabled", false);
Components.classes["@mozilla.org/toolkit/crash-reporter;1"].getService(Components.interfaces.nsICrashReporter).submitReports = false; 
// Disable default browser check
lockPref("browser.shell.checkDefaultBrowser", false);
// Delete history on exit
lockPref("browser.history_expire_days", 0);
lockPref("browser.history_expire_days.mirror", 0);
lockPref("browser.formfill.enable", false);
lockPref("browser.download.manager.retention", 0);
lockPref("network.cookie.cookieBehavior", 0);
lockPref("network.cookie.lifetimePolicy", 2);
// Disable password manager
lockPref("signon.rememberSignons", false);
lockPref("pref.privacy.disable_button.view_passwords", true);
// Disable themes
lockPref("config.lockdown.disable_themes", true);
// Enable Java Plugin
lockPref("security.enable_java", true);
// Automatically enable extensions
lockPref("extensions.autoDisableScopes", 0);
lockPref("security.insecure_field_warning.contextual.enabled", false);

Step 6 – Create a new folder inside the source folder you created earlier called “~Extensions.”

For this guide, I will be using OneNote Web Clipper 3.2.8 as the extension I want to include with my deployment. To obtain this extension, install and launch the OneNote Web Clipper add-on in Firefox on a reference computer. Navigate to C:\Users\%USERNAME%\AppData\Roaming\Mozilla\Firefox\Profiles\*.default\extensions\, and copy the extension Clipper@OneNote.com.xpi file to the “~Extensions” folder you just created. This process may vary for some extensions.

Step 7 – Open Notepad and create a fourth text file called “Install.bat.” Copy and paste the information below.

Note that the fifth line, which copies the extension, uses the name that is specific to the extension used in this example. You will need to change this text to match the extension that you’d like to include with your installation.

"%~dp0setup.exe" -ms
if exist "C:\Program Files\Mozilla Firefox\" copy /Y "%~dp0override.ini" "C:\Program Files\Mozilla Firefox\browser\"
if exist "C:\Program Files\Mozilla Firefox\" copy /Y "%~dp0mozilla.cfg" "C:\Program Files\Mozilla Firefox\"
if exist "C:\Program Files\Mozilla Firefox\" copy /Y "%~dp0local-settings.js" "C:\Program Files\Mozilla Firefox\defaults\pref"
if exist "C:\Program Files\Mozilla Firefox\" copy /Y "%~dp0~Extensions\ Clipper@OneNote.com.xpi" "C:\Program Files\Mozilla Firefox\browser\extensions"

When you are done, save the file to the source folder you just created. You are now ready to deploy the application with SCCM!

Leave a Reply

%d bloggers like this: