Avatar for Username

חיפוש בתמיכה

יש להימנע מהונאות תמיכה. לעולם לא נבקש ממך להתקשר או לשלוח הודעת טקסט למספר טלפון או לשתף מידע אישי. נא לדווח על כל פעילות חשודה באמצעות באפשרות ״דיווח על שימוש לרעה״.

מידע נוסף

אשכול זה הועבר לארכיון. נא לשאול שאלה חדשה אם יש לך צורך בעזרה.

templates on Win 2012r2 not working

  • 4 תגובות
  • 1 has this problem
  • 1 view
  • תגובה אחרונה מאת Mike Kaply

barnacle
barnacle
more options

I've applied the admx templates to the Sysvol on our Win Server 2012r2 environment & I've created a GPO to allow NTLM authentication to our intranet sites. However when I deploy the GPO I do not see the site in about:config network.automatic-ntlm-auth.trusted-uris

using gpresult /r I can see that the GPO is getting applied on our test machine.

attached is an image (first image) of the Firefox templates when added to the domain controller (Win 2012r2) -

I tried on another test Domain controller (this time Win 2016) and noticed that the templates look different. When applied to the Win2012r2 DC they seem to have been placed under 'Extra Registry Settings' (see first image) however when I placed them on my 2016 box, they were assigned to a different category (see second image).

I've applied the admx templates to the Sysvol on our Win Server 2012r2 environment & I've created a GPO to allow NTLM authentication to our intranet sites. However when I deploy the GPO I do not see the site in about:config network.automatic-ntlm-auth.trusted-uris using gpresult /r I can see that the GPO is getting applied on our test machine. attached is an image (first image) of the Firefox templates when added to the domain controller (Win 2012r2) - I tried on another test Domain controller (this time Win 2016) and noticed that the templates look different. When applied to the Win2012r2 DC they seem to have been placed under 'Extra Registry Settings' (see first image) however when I placed them on my 2016 box, they were assigned to a different category (see second image).
צילומי מסך מצורפים

פתרון נבחר

Are you using ESR or rapid release? Do other policies work?

The NTLM policies were accidentally marked enterprise only. I'll be fixing that.

Read this answer in context 👍 1

כל התגובות (4)

barnacle
barnacle Question owner
more options

EDIT: I checked on the Win 10 Pro device (included on the GPO) and it has applied the GPO (gpresult /h c:\temp\gp.html ) for Firefox, however when I go into Firefox and about:config I still dont see the trusted-uris.

Mike Kaply
Mike Kaply
  • Moderator
more options

פתרון נבחר

Are you using ESR or rapid release? Do other policies work?

The NTLM policies were accidentally marked enterprise only. I'll be fixing that.

barnacle
barnacle Question owner
more options

mkaply said

Are you using ESR or rapid release? Do other policies work? The NTLM policies were accidentally marked enterprise only. I'll be fixing that.

all other policies are working (there's a policy for IE to apply trusted intranet, which works fine).

Your question about if I was using ESR might be onto something. I've got ESR 60.0.1 (which is the working GPO) on my test rig, and standard 60.0.1 on my other (non working test rig).

EDIT: you cracked it! in order for the GPO to work successfully, you must be using ESR 60.0.1 - which is incredibly strange as the standard (non ESR) version was also 60.0.1 but didn't work. My understanding was the ESR was only different in the frequency of updates & not fundamentally different than standard?

Mike Kaply
Mike Kaply
  • Moderator
more options

We've documented the differences here:

https://support.mozilla.org/en-US/kb/choosing-firefox-update-channel

We're on figuring out how to make them closer.

I'm also going to be updating the templates to make it more clear that some policies don't work on rapid release.