hi hyvokar, it's only possible to lock extensions via group policy in the firefox extended support release: https://github.com/mozilla/policy-templates/blob/master/README.md#extensions-esr-only

Hi Philipp and thank you for your quick reply. What would be the procedure to uninstall firefox from 100 computers and install ESR ?

i don't know which way you're deploying firefox till now. i guess you could just install the esr version on top of the current 61 - it should overwrite the program folder automatically: https://www.mozilla.org/en-US/firefox/organizations/all/

Hi,

Currently we are deploying firefox on a new computers with Microsoft Deployment Toolkit as a task sequence when deploying a new OS on a computer. There are propably older (1-2years) machines, on which firefox has been installed by hand. Every ff installation should have auto update enabled, or it is updated frequently via F-secure client security premium.

So I'd need something to upgrade stantard firefox with ESR version unattented, preferably an .msi package.

We are currently using 32-bit version. Is there a benefit to move to 64-bit version? All the operating systems are win7/win10 64bit. Can 32-bit firefox be upgraded with 64-bit esr version?

Installing the Firefox ESR version should overwrite the standard Firefox. Where you might run into issues is that the 32-bit version will be installed in the Program Files (x86) folder and the 64-bit version will be installed in the Program Files folder by default. You'll likely have to uninstall the standard Firefox after you install Firefox ESR.

Mozilla doesn't provide an MSI file for Firefox and never has. However, here are some useful links related to unattended installations:

• https://wiki.mozilla.org/Installer:Command_Line_Arguments
• http://unattended.sourceforge.net/installers.php

the 64bit-installer should detect when a 32bit version is in place and just install itself into the same Program Files (x86) folder (the same was happening during the automatic migration to 64bit in auto-updates).

during the 52 cycle the 32bit version brought the benefit of supporting legacy npapi plugins, but since they are now end-of-lifed i think it's beneficial to switch to 64bit for advanced security features like aslr...

Thanks for the help gyus, I'll try to sort this out :-)

Hi,

I have now upgarded to the latest 64bit ESR release. The F-secure browsing protection extensions is still disabled. What I'm doing wrong?

Also, it seems that on the test machines, the firefox was not updated, it simply installed a ESR versio. So now I have two firefox versions. NOT GOOD.

in which program folders are the regular & the esr version of firefox residing now respectively on your test machines?

and back to the original issues - please try to specify the addon id including the surrounding {}-brackets

ESR firefox, "C:\Program Files\Mozilla Firefox\firefox.exe" old version "C:\Program Files (x86)\Mozilla Firefox\firefox.exe"

Just to make sure, I have the correct string :

about:memory ->

2 (100.0%) -- extensions ├──1 (50.00%) ── Extension(id=ols@f-secure.com, name="Browsing Protection by F-Secure", baseURL=moz-extension://7268ebdc-30a0-4a68-a3cb-be59f9750b03/) └──1 (50.00%) ── Extension(id=screenshots@mozilla.org, name="Firefox Screenshots", baseURL=moz-extension://066228b2-b509-44af-bba9-d61202c63413/)

I have now specified the bold section in group policy setting. When I open the ESR version and go to extensions, I dont have enable or disable button. I guess that means that it is working?

hyvokar said

ESR firefox, "C:\Program Files\Mozilla Firefox\firefox.exe" old version "C:\Program Files (x86)\Mozilla Firefox\firefox.exe"

This is the issue that I referenced in my previous response. It's because you changed from the 32-bit version of Firefox to the 64-bit version. Windows saves all 32-bit programs in the Program Files (x86) folder and all 64-bit programs in the Program Files folder.

Thanks, I got also information, that 64bit installer should detect 32bit ff and install in to a same directory. However, Since I have to use a install script to install 64bit ESR versio, I guess I can just use the same script and try to uninstall the 32bit version ..

Hi,

I have now successfully uninstalled the standard version of 32bit firefox and installed 64bit esr version to test machines. However, the F-secure browsing protection wont still be automatically turned on. After I manually turn it on on each test machine, it cannot be turned off (the enabled/disabled button disappears).

How can I turn on the extension automatically?

Still having the same problem