Automatic update of Firefox even with no user logged on (Windows x64)?

1,044 views
Skip to first unread message

Euan Holton

unread,
Jun 30, 2023, 5:21:56 PM6/30/23
to enter...@mozilla.org
Looking at the documentation for the automatic update feature of Firefox,
it looks like it will not run at all if either no user is logged in or if
a user who has never launched Firefox is logged in.

Is there a reasonable way to configure the scheduled task so that it will
run regardless of if a user is signed in or not? Or is this out of scope
for the automatic update feature?

MAXIME ACCADIA

unread,
Jul 7, 2023, 10:55:56 AM7/7/23
to Euan Holton, enterprise
Hi,

I found this feature request (currently open) : https://bugzilla.mozilla.org/show_bug.cgi?id=1422646


Maxime ACCADIA

Université Grenoble Alpes

----- Mail original -----
De: "'Euan Holton' via enter...@mozilla.org" <enter...@mozilla.org>
À: "enterprise" <enter...@mozilla.org>
Envoyé: Vendredi 30 Juin 2023 23:21:43
Objet: [Mozilla Enterprise] Automatic update of Firefox even with no user logged on (Windows x64)?
--
You received this message because you are subscribed to the Google Groups "enter...@mozilla.org" group.
To unsubscribe from this group and stop receiving emails from it, send an email to enterprise+...@mozilla.org.
To view this discussion on the web visit https://groups.google.com/a/mozilla.org/d/msgid/enterprise/08d61a87f03953743007394da04bf3b2%40mail.gmail.com.

Mike Kaply

unread,
Jul 7, 2023, 11:13:24 AM7/7/23
to MAXIME ACCADIA, Euan Holton, enterprise
It's just a background task, so an admin could just add it and do the update.

See:


The reason it's user dependent right now is because the code that adds the background task is executed by Firefox itself (not an installer).

Although there is an issue wherein the background update task will only ever run as the first user to schedule background update


Mike

Message has been deleted
Message has been deleted

Groleau, Patrick

unread,
Dec 1, 2023, 11:29:59 AM12/1/23
to Francis, enter...@mozilla.org, Mike Kaply, Euan Holton, enterprise, MAXIME ACCADIA
I have Seen the same behavior and i've fix it by not configuring the automatic update in my gpo policie.
Shen I was forcing the automatic update, the background service was not able to update Firefox.


Le 29 novembre 2023 4 h 46 min 47 s p.m. Francis <kerp...@gmail.com> a écrit :

Hello, 

I have run into this issue in my environment and have not been able to find a solution.

We install Firefox as system via SCCM and then background updates would not work. 

Tried replicating the scheduled task as the currently logged in user when the app is installed and it still fails to update. If I am reading the bug report listed above this work around is not possible either.

I service a large group of users and our security policy dictates that all apps present on the client systems be up to date when security issues are addressed in a new version. 

There would be a lot of users that would be upset if we had to no longer offer Firefox as a browsing option but it's coming to a point where we might have to pull it from the catalogue. 

Any insight on how I can address this would be appreciated.

Thank you,

Francis
To view this discussion on the web visit https://groups.google.com/a/mozilla.org/d/msgid/enterprise/39173562-7fac-4d22-a63d-a7e9f51487een%40mozilla.org.

____________________________________________________________________________________

ATTENTION: L’émetteur de ce courriel est externe au Cégep de Sherbrooke.

Évitez de cliquer sur un hyperlien, d’ouvrir une pièce jointe ou de transmettre des informations

si vous ne connaissez pas l’expéditeur du courriel. En cas de doute, contactez la DTI au 5000.


Osdoba, Sascha

unread,
Dec 1, 2023, 11:29:59 AM12/1/23
to Francis, enter...@mozilla.org, Mike Kaply, Euan Holton, enterprise, MAXIME ACCADIA

hi,

 

this is something we also would like to get solved. Otherwise updating Firefox depends on how user reacts to the update mark or if user will close and start Firefox again.

At worst this can be days.

 

Only solution and this is we have done it before, you have to deploy every new Firefox version to the devices. With an ESR version its not that often but annoying at least.

 

As far as I remember Microsoft Edge is doing the same but with one difference, there is a counter – if update was done and Edge needs to be restarted and it wont be done,

it will do it automatically. Love this. But the first release problem is still existing: for example you deploy version 100.0.0.0, no one is using it for 90 days and if you start using it

you will begin with this really old version.

 

Regards,


Sascha

 

 

Von: enter...@mozilla.org <enter...@mozilla.org> Im Auftrag von Francis
Gesendet: Mittwoch, 29. November 2023 21:41
An: enter...@mozilla.org
Cc: Mike Kaply <mka...@mozilla.com>; Euan Holton <euan....@uah.edu>; enterprise <enter...@mozilla.org>; MAXIME ACCADIA <maxime....@univ-grenoble-alpes.fr>
Betreff: Re: [Mozilla Enterprise] Automatic update of Firefox even with no user logged on (Windows x64)?

 

Hello, 

 

I have run into this issue in my environment and have not been able to find a solution.

 

We install Firefox as system via SCCM and then background updates would not work. 

 

Tried replicating the scheduled task as the currently logged in user when the app is installed and it still fails to update. If I am reading the bug report listed above this work around is not possible either.

 

I service a large group of users and our security policy dictates that all apps present on the client systems be up to date when security issues are addressed in a new version. 

 

There would be a lot of users that would be upset if we had to no longer offer Firefox as a browsing option but it's coming to a point where we might have to pull it from the catalogue. 

 

Any insight on how I can address this would be appreciated.

 

Thank you,

 

Francis

On Friday, July 7, 2023 at 9:13:24 AM UTC-6 Mike Kaply wrote:

Mike Kaply

unread,
Jan 17, 2024, 3:17:12 PMJan 17
to Francis, enter...@mozilla.org
FYI, bug 1830071 has been fixed and will be in Firefox 123.

Mike

On Fri, Dec 1, 2023 at 11:29 AM Francis <kerp...@gmail.com> wrote:
Hello,

I have run into the same issue it seems. 

We deploy apps using SCCM which installs as SYSTEM. This causes the issue mentioned in the bug report:


As a workaround I have tried to programmatically create the scheduled task to be ran as the user when Firefox is installed with the same settings as the installer uses. 

Reading the bug report notes this will not work either and this is also what my testing has shown.

My workplace has strict compliance policies for apps receiving their updates when they are addressing vulnerabilities on the large user base I support.

Is there a workaround to allow Firefox to background update with no user intervention when Firefox is installed as SYSTEM? 

If not I might have to remove it from our application catalogue and that would frustrate many of our users.

Francis

 

On Friday, July 7, 2023 at 9:13:24 AM UTC-6 Mike Kaply wrote:

James Andrewartha

unread,
Jan 19, 2024, 11:31:46 AMJan 19
to enter...@mozilla.org

Hi,

This is an improvement, but if a user doesn't have admin rights they still won't be able to update an installation? I just checked my laptop, Firefox is installed via Intune and the scheduled task is correctly installed for my user, but I regularly get prompts on startup saying Firefox couldn't update itself.

Thanks,

-- 
James Andrewartha
Network & Projects Engineer
Christ Church Grammar School
Claremont, Western Australia
Ph. (08) 9442 1757
Mob. 0424 160 877

Osdoba, Sascha

unread,
Jan 22, 2024, 11:53:56 AMJan 22
to James Andrewartha, enter...@mozilla.org

this isnt just an improvement, this will be a big, big, big change – biggest for this year I guess

 

until now we have this scenarion:

we install version 1, user didn’t used it so it will be still version 1 after months, then he is using it after months and its still the old version 1 until next start of Firefox (or user will see this little mark/point and check for it)

 

 

for updating Firefox without having admin rights you need two things:

 

  1. installed Mozilla Maintenance Service
  2. enabled setting/preferences (for example via group policy) to allow updates -> https://mozilla.github.io/policy-templates/ -> AppAutoUpdate

(there is also a background updater mentioned, I have never seen that this is working)

 

We have seen on 2 of ~3000 devices that Firefox updates sometimes still not works, uninstall Firefox and Mozilla Maintenance Service and reinstall fixed this

 

Regards,

 

Sascha

Jan-Peter Rühmann

unread,
Jan 23, 2024, 12:09:38 PMJan 23
to enter...@mozilla.org
These are the Commands I am using to set the rights so that Thunderbird and Firefox can Update itself.

sudo chown root:users -R /opt/firefox
sudo chmod g+w -R /opt/firefox
sudo chown root:users -R /opt/thunderbird
sudo chmod g+w -R /opt/thunderbird
MDHR-e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Am 18.01.24 um 07:21 schrieb James Andrewartha:
OpenPGP_0x35C212A69B4E3095.asc
OpenPGP_signature.asc
Reply all
Reply to author
Forward
0 new messages