We're calling on all EU-based Mozillians with iOS or iPadOS devices to help us monitor Apple’s new browser choice screens. Join the effort to hold Big Tech to account!

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

Mulongo oyo etiyamaki na archive. Tuna motuna mosusu soki osengeli na lisalisi

Is there a way to block extensions from being installed on a network level?

  • 4 biyano
  • 1 eza na nkokoso oyo
  • 4 views
  • Eyano yasuka ya Maciej2

more options

We have staff installing VPN extensions on Firefox that are circumventing our web filter policy. Is there a way to remotely disable extensions, or prevent them from being installed on a network level? We were able to do so on Chrome thanks to Google's ADM template. I have not been able to find something similar for Firefox.

We have staff installing VPN extensions on Firefox that are circumventing our web filter policy. Is there a way to remotely disable extensions, or prevent them from being installed on a network level? We were able to do so on Chrome thanks to Google's ADM template. I have not been able to find something similar for Firefox.

All Replies (4)

more options

First off why do they have have Admin Privileges to install VPN? That is the only way they can install a VPN - if they have Admin privileges. If your system are Win7 or higher and Admin protected password they can't install a VPN without the Admin priviledges. And since this is beyond FF and a Company Internal Policy Audit this is really nothing related to FF itself specifically.

more options

You don't need to have admin rights to install extensions in Firefox. This is a Firefox "thing" since they don't have any way of managing their browser in a network environment.

more options

See:

You can also lock the Firefox connection settings.

You can use the mozilla.cfg file in the Firefox program folder to set or lock preferences and run privileged JavaScript code.

The mozilla.cfg file needs to be in the main Firefox program folder.

These functions can be used in the mozilla.cfg file:

defaultPref();	// set new default value
pref();	// set pref, allow changes in current session
lockPref();	// lock pref, disallow changes

This requires a local-settings.js file in the "defaults/pref" folder where the channel-prefs.js file is located that specifies to use mozilla.cfg.

//
pref("general.config.filename", "mozilla.cfg");
pref("general.config.obscure_value", 0);

The mozilla.cfg and local-settings.js files need to start with a comment line (//).

See Configuration:

more options

I've tried following those steps, creating an autoconfig.js and Mozilla.cfg file in the respectable folder locations. The autoconfig file: // Any comment. You must start the file with a comment! pref("general.config.filename", "mozilla.cfg"); pref("general.config.obscure_value", 0);

The Mozilla.cfg file: //Starting comment

//Disable add-on installation lockPref("xpinstall.enable",false); lockPref("extensions.enabledScopes", 0);

But I am still capable of installing extensions. I am on Firefox version 57.0.4. Do these preferences no longer work with this version of FF?