AD uses Group Policy Object (GPO) to deploy settings, software, features, etc. to a large number of endpoints. To deploy Firefox:

1. Prepare the installation packages (x86 and x64). Download the Firefox installation package from the official Mozilla website:
   • For Rapid Release (RR): https://www.mozilla.org/en-US/firefox/all/
   • For Extend Support Release (ESR): https://www.mozilla.org/en-US/firefox/organizations/all/
    

   To understand the difference between RR and ESR, please go to following website for more information: https://developer.mozilla.org/en-US/Firefox/Enterprise_deployment.
2. Prepare the installation script (installation.bat). The official Mozilla website doesn't provide the MSI installation package, so the administrator can only use the script to install Firefox automatically. This step uses Firefox 52.0 ESR as an example.

   The installation script is as shown below:

   installation.bat  reg query "HKLM\SOFTWARE\Mozilla\Mozilla Firefox" /v CurrentVersion  if %errorlevel%==0 GOTO END  if %PROCESSOR_ARCHITECTURE%==x86 (  "\\<server FQDN>\sharefolder\Firefox Setup 52.0esr x86.exe" -ms  )  if %PROCESSOR_ARCHITECTURE%==AMD64 (  "\\<server FQDN>\sharefolder\Firefox Setup 52.0esr x64.exe" -ms  )  copy "\\<server FQDN>\sharefolder\autoconfig.js" "C:\Program Files\Mozilla Firefox\defaults\pref\"  copy "\\<server FQDN>\sharefolder\mozilla.cfg" "C:\Program Files\Mozilla Firefox\"  :END  

3. Prepare the Firefox Preference file (autoconfig.js) and the Firefox configuration file (mozilla.cfg). If Web Reputation Service is enabled, the OSCE plug-in will be installed automatically but not enabled. As a result, additional configuration files are required.

   autoconfig.js  // Any comment. You must start the file with a comment!  pref("general.config.filename", "mozilla.cfg");  pref("general.config.obscure_value", 0);  

   mozilla.cfg  // Any comment. You must start the file with a comment!  lockPref("extensions.autoDisableScopes", 0);  lockPref("extensions.enabledScopes", 15);  

4. Prepare a shared folder containing the prepared files:
   • Installation packages (x86 and x64)
   • Installation script (installation.bat)
   • Firefox Preference file (autoconfig.js)
   • Firefox configuration file (mozilla.cfg)

     

5. Add a Group Policy:
   1. Open the Group Policy Management Console.
   2. Expand Group Policy Objects in the forest.
   3. Right-click the GPO that should be edited, then click Edit to open the Group Policy Object Editor.
   4. Choose between Computer Configuration and User Configuration.
   5. Go to Policies > Windows Settings > Script (Startup/Shutdown).
   6. Select Startup or Shutdown to determine when to execute the installation script.
   7. Click Add... > Browse... > [locate the installation script by using network path] > Open.
   8. Click OKtwice.

      

6. Restart endpoints to trigger the installation process.
    

   End users can still disable the OSCE plug-in manually.