Sign In with your
Trend Micro Account
Need Help?
Need More Help?

Create a technical support case if you need further support.

Deploying Firefox in AD environment with OfficeScan (OSCE) plug-in

    • Updated:
    • 17 Mar 2017
    • Product/Version:
    • OfficeScan 11.0
    • OfficeScan XG.All
    • Platform:
    • Windows 10 32-bit
    • Windows 10 64-bit
    • Windows 7 32-Bit
    • Windows 7 64-Bit
    • Windows 8.1 32-Bit
    • Windows 8.1 64-Bit
Summary

OSCE plug-in protects browsers against web threats. This article illustrates how to deploy Firefox in an Active Directory (AD) environment with an OSCE plug-in.

Details
Public

AD uses Group Policy Object (GPO) to deploy settings, software, features, etc. to a large number of endpoints. To deploy Firefox:

  1. Prepare the installation packages (x86 and x64). Download the Firefox installation package from the official Mozilla website:
     
    To understand the difference between RR and ESR, please go to following website for more information: https://developer.mozilla.org/en-US/Firefox/Enterprise_deployment.
  2. Prepare the installation script (installation.bat). The official Mozilla website doesn't provide the MSI installation package, so the administrator can only use the script to install Firefox automatically. This step uses Firefox 52.0 ESR as an example.

    The installation script is as shown below:

    installation.bat  reg query "HKLM\SOFTWARE\Mozilla\Mozilla Firefox" /v CurrentVersion  if %errorlevel%==0 GOTO END  if %PROCESSOR_ARCHITECTURE%==x86 (  "\\<server FQDN>\sharefolder\Firefox Setup 52.0esr x86.exe" -ms  )  if %PROCESSOR_ARCHITECTURE%==AMD64 (  "\\<server FQDN>\sharefolder\Firefox Setup 52.0esr x64.exe" -ms  )  copy "\\<server FQDN>\sharefolder\autoconfig.js" "C:\Program Files\Mozilla Firefox\defaults\pref\"  copy "\\<server FQDN>\sharefolder\mozilla.cfg" "C:\Program Files\Mozilla Firefox\"  :END  
  3. Prepare the Firefox Preference file (autoconfig.js) and the Firefox configuration file (mozilla.cfg). If Web Reputation Service is enabled, the OSCE plug-in will be installed automatically but not enabled. As a result, additional configuration files are required.
    autoconfig.js  // Any comment. You must start the file with a comment!  pref("general.config.filename", "mozilla.cfg");  pref("general.config.obscure_value", 0);  
    mozilla.cfg  // Any comment. You must start the file with a comment!  lockPref("extensions.autoDisableScopes", 0);  lockPref("extensions.enabledScopes", 15);  
  4. Prepare a shared folder containing the prepared files:
    • Installation packages (x86 and x64)
    • Installation script (installation.bat)
    • Firefox Preference file (autoconfig.js)
    • Firefox configuration file (mozilla.cfg)

      mozilla.cfg

  5. Add a Group Policy:
    1. Open the Group Policy Management Console.
    2. Expand Group Policy Objects in the forest.
    3. Right-click the GPO that should be edited, then click Edit to open the Group Policy Object Editor.
    4. Choose between Computer Configuration and User Configuration.
    5. Go to Policies > Windows Settings > Script (Startup/Shutdown).
    6. Select Startup or Shutdown to determine when to execute the installation script.
    7. Click Add... > Browse... > [locate the installation script by using network path] > Open.
    8. Click OKtwice.

      Group Policy Management Editor

  6. Restart endpoints to trigger the installation process.
     
    End users can still disable the OSCE plug-in manually.
Premium
Internal
Rating:
Category:
Configure; Deploy
Solution Id:
1116920
Feedback
Did this article help you?

Thank you for your feedback!

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.

If you need additional help, you may try to contact the support team. Contact Support


To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.