Solved

Prevent domain users from installing Firefox add-ons / Centrally manage and unistall add-ons

Posted on 2014-03-20
11
864 Views
Last Modified: 2014-03-31
Hi,

Is there any way to stop the users installing the Firefox add-ons/extensions in a domain environment? And if they have already installed some, can they be remotely removed or at least disabled?

Many thanks,

Martin
0
Comment
Question by:y3s-it
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 6
  • 5
11 Comments
 
LVL 29

Expert Comment

by:sammySeltzer
ID: 39942558
Retrict their permission levels to just Standard users or at the very most, Power Users.

But first, you go and remove to disable the current adds-on before modifying their permission levels or else I doubt they will be able to after you remove their ability to install stuff.
0
 

Author Comment

by:y3s-it
ID: 39942595
They all only have user level permissions and yet they are able to install Firefox add-ons. I suspect that happens because: 1) changes in Firefox aren't being written to registry and 2) Firefox add-ons aren't executables as such.
0
 
LVL 29

Expert Comment

by:sammySeltzer
ID: 39942646
Well, the best you can probably do is to sabotage the use of firefox.

That is, if you are a developer, and write software, you can code it to NOT work with firefox.

Quite frankly, it is a tough call to try and block the installation of firefox.

Even Microsoft has tried with limited success. You can come of with .exe to block and they can create a folder, dump it into that folder and install it from there.

Your company can come up with a policy to outlaw the use of firefox.

That might prevent most but not all from installing and using it.

What beef do you have with it anyway?

Just curious.
0
Why Off-Site Backups Are The Only Way To Go

You are probably backing up your data—but how and where? Ransomware is on the rise and there are variants that specifically target backups. Read on to discover why off-site is the way to go.

 

Author Comment

by:y3s-it
ID: 39942688
I personally love Firefox and the fact is that some our company's websites are most optimized for it. That is why we actually encourage our employees using it.

My beef is that some of them (our employees) are connecting to TOR using a Firefox add-on. And apart from that being bad enough, they use it to access websites that our content filter specifically blocks. Very upsetting that!
0
 
LVL 29

Expert Comment

by:sammySeltzer
ID: 39942751
Well, I am not sure how this prevents everyone but you can someone find a way to push this fix to domain accounts, it would help you alot.

Try it and see how it works for you.

http://www.jkwebtalks.com/2009/09/how-to-prevent-installation-of-add-ons.html
0
 

Author Comment

by:y3s-it
ID: 39942808
Yes, I've been looking at that. But I think that option had been taken out of later versions of FF.

This appears to be the new way of doing it: https://support.mozilla.org/en-US/questions/888009

Problem is that it doesn't make much sense to me...
0
 
LVL 29

Expert Comment

by:sammySeltzer
ID: 39942839
Maybe, this link which is an offshoot of it, walks you through some steps of using the features.

I think that the biggest thing is to have firefox browser open, then hitting Ctl+Shift+A will open the environment where you can begin implement the steps enumerated on this link:

http://mike.kaply.com/2012/07/03/customizing-firefox-blocking-add-ons/
0
 
LVL 29

Expert Comment

by:sammySeltzer
ID: 39942852
I think you can pretty much the files where changes need to be made here:

C:\Program Files\mozilla.org\Mozilla\defaults\pref\

including this :  all.js

More here:
https://developer.mozilla.org/en-US/docs/Automatic_Mozilla_Configurator/Locked_config_settings

One of these links hopefully, should help you resolve the problems you are having.
0
 

Author Comment

by:y3s-it
ID: 39943013
Ok, I'll research it and come back. Thanks!
0
 

Accepted Solution

by:
y3s-it earned 0 total points
ID: 39956472
In the end, the best shot was installing the CCK2 wizard.

https://addons.mozilla.org/en-US/firefox/addon/cck2wizard/

It effectively prohibits access to all config and addon features plus much more. A bit like Microsoft IEAK. Very useful indeed!
0
 

Author Closing Comment

by:y3s-it
ID: 39966117
After much research based on discussion with the involved experts, my solution was simply the most complete one.
0

Featured Post

Revamp Your Training Process

Drastically shorten your training time with WalkMe's advanced online training solution that Guides your trainees to action.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Today, still in the boom of Apple, PC's and products, nearly 50% of the computer users use Windows as graphical operating systems. If you are among those users who love windows, but are grappling to keep the system's hard drive optimized, then you s…
Ever visit a website where you spotted a really cool looking Font, yet couldn't figure out which font family it belonged to, or how to get a copy of it for your own use? This article explains the process of doing exactly that, as well as showing how…
Google currently has a new report that is in beta and coming soon to Webmaster Tool accounts. This Micro Tutorial will highlight new features for Google Webmaster Tools.
This Micro Tutorial will demonstrate how nuggets on the Web are formatted by using Chrome Developer Tools. These tools would not only view the site's CSS but it can also modify it and save the CSS to use on your own site.

631 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question