json preferences (via Group Policy) are ignored by browser

271 views
Skip to first unread message

Malte Riemer

unread,
Jun 21, 2023, 8:36:09 AM6/21/23
to enter...@mozilla.org

Hi,

 

we use the Windows Group Policy für configurating Firefox. Not every conf is possible via that way. So we would like to use the group policy settings “Mozilla/Firerox/Preferences” with some json-Stuff in it additionally.

 

But the json-configuration is ignored by the browser.

 

When I go to “about:policies#errors” the following error is shown:

“Unable to set preference policies. Preference not allowed for stability reasons.”

 

Any idea why?

 

We use 102.12.0esr (32-Bit) Firefox.

 

Best regards

Malte

375 Jahre westfälischer Frieden

Der Schutz Ihrer personenbezogenen Daten ist der Stadt Münster ein wichtiges Anliegen. Die Datenschutzerklärung finden Sie unter folgendem Link: https://www.stadt-muenster.de/datenschutz.html

Mike Kaply

unread,
Jun 21, 2023, 3:03:43 PM6/21/23
to Malte Riemer, enter...@mozilla.org
There are some preferences we don't allow.

What preferences are you trying to set?

Mike

--
You received this message because you are subscribed to the Google Groups "enter...@mozilla.org" group.
To unsubscribe from this group and stop receiving emails from it, send an email to enterprise+...@mozilla.org.
To view this discussion on the web visit https://groups.google.com/a/mozilla.org/d/msgid/enterprise/75d1fbab26464769a1000ca8f244ad3a%40citeq.de.

Malte Riemer

unread,
Jun 22, 2023, 2:57:57 AM6/22/23
to Mike Kaply, enter...@mozilla.org

I just tried to move the stuff from user.js to that preferences json-field.

 

For testing I tried this:

 

{

  "policies": {

    "BlockAboutAddons": true

  }

}

 

The mentioned error displayed aftermath.

 

In future we would like to add these settings to that json-field and give up the user.js:

 

user_pref("browser.bookmarks.file", "X:\\Firefox\\Bookmarks");

user_pref("browser.bookmarks.autoExportHTML", true);

user_pref("browser.places.importBookmarksHTML", true);

user_pref("browser.newtabpage.activity-stream.feeds.section.highlights", false);

user_pref("browser.newtabpage.activity-stream.feeds.section.topstories", false);

user_pref("browser.newtabpage.activity-stream.feeds.snippets", false);

user_pref("browser.newtabpage.activity-stream.prerender", false);

user_pref("browser.newtabpage.activity-stream.showSearch", false);

user_pref("browser.newtabpage.activity-stream.showTopSites", false);

user_pref("security.ssl.require_safe_negotiation", true);

user_pref("security.ssl.treat_unsafe_negotiation_as_broken", true);

user_pref("extensions.formautofill.creditCards.enabled", false);

user_pref("extensions.formautofill.creditCards.available", false);

 

Best regards

Malte

 

Von: Mike Kaply <mka...@mozilla.com>
Gesendet: Mittwoch, 21. Juni 2023 21:03
An: Malte Riemer <Rieme...@citeq.de>
Cc: enter...@mozilla.org
Betreff: Re: [Mozilla Enterprise] json preferences (via Group Policy) are ignored by browser

 

[Vorsicht Internetmail]:
Diese Mail haben Sie über das Internet erhalten. Bitte Anlagen und Links nur öffnen, wenn keine Anhaltspunkte für Viren vorliegen. Weitere Informationen finden Sie auch in der FAQ Outlook

Gausmann, Thomas

unread,
Jun 22, 2023, 4:44:56 AM6/22/23
to Malte Riemer, enter...@mozilla.org

Hallo Malte,

ich habe Dir unsere aktuelle policies.json angehängt. Die benutzen wir seit Jahren mit Firefox ESR 64bit unter Windows 10 / 11. Die ist zwar auf unsere spezielle FF- und Windows-Installation angepasst, möge Dir aber als Beispiel dienen. Du mußt also jede Zeile prüfen, ob sie für Euch so einsetzbar ist.

Die Syntax für user_pref findest Du ab "_Preferences".

Addons blockieren wir nicht grundsätzlich, fügen aber einige wenige immer hinzu.

Für die Bearbeitung und den Syntaxcheck benutzen wir die Notepad++-Plugins JSTools und  "Json Tools"


English (in short):

Attached you will find our policies.json. Used with Firefox ESR 64 bit under Windows 10 / 11. Matched for our special FF- and Windows-Installation. You may use it as a sample. You have to check every line for your intended use.

Syntax for user_pref => "_Preferences".

Addons are not blocked. Some are installed.


Grüße aus dem Münsterland
Thomas

policies.json_20230622T101746.zip

Mike Kaply

unread,
Jun 22, 2023, 10:03:25 AM6/22/23
to Malte Riemer, enter...@mozilla.org
These are the two that are causing the error:

user_pref("security.ssl.require_safe_negotiation", true);

user_pref("security.ssl.treat_unsafe_negotiation_as_broken", true);


I will have those in policy soon.

FYI, the new tab page ones can be set via a specific Firefox Home Policy, no need to use the prefs.


Mike
Reply all
Reply to author
Forward
0 new messages