tezza80
asked on
Lock down Firefox downloaded from Web through Group Policy?
Hello... I have been searching for a way to lockdown Firefox through Group Policy, but only can find ways of doing it with a "Custom" Firefox installation. This is no good to me, as I have certain users with admin rights that just download Firefox from the Web and use it to bypass our Internet proxy server. Just wondering if there is a Firefox.adm template available which can be used on the standard version of Firefox that is downloaded from the Web?
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
thanks for the link... I followed the directions, but just skipped the section for deploying as I want to use it on PCs that already have firefox installed. so I created a GPO under the root OU which contains all users and computers and chose the "lockdown" method and in group policy under computer settings I loaded the firefox_startup.vbs script and just configured the proxy settings. In Security Filtering I added my test VM and a test account. Rebooted the test VM and logged in with test account and opened Firefox. The proxy settings had been applied and the options were now grayed out. Logged out and back in with another account and saw the settings were still applied and locked down. So removed both user account and computer from the security filtering and moved the GPO to an OU that is not under the main one. Rebooted VM and again the settings are locked down. Disabled the entire GPO and rebooted again. Still the same thing. I then tried to re-apply the GPO and changed the proxy settings to go directly to the internet, but they did not change. I cannot "UNLOCK" the orginal settings that were applied... anyone seen anything like this?
ASKER
just an update.. i found shutdown scripts included in one of the packages. So after removing the policy, i rebooted and it removed the GPO.
ASKER
I will try the wetdog one next.