Intune Firefox Extensions ADMX Length Limit

[tkudya]

I am using the Firefox Intune ADMX to manage extensions installed on Browsers. I have managed to allow a few extensions but as I start adding more extensions I am no longer Able with the following message "The value must have a length of at most 1023."
Whats the available workaround to allow more extensions

{ "*": {
"blocked_install_message": "Please email if you think an extension should be unblocked.",
"install_sources": ["about:addons","https://addons.mozilla.org/"],
"installation_mode": "blocked",
"allowed_types": ["extension"]
},
"{@react-devtools}": {
"installation_mode": "allowed",
"install_url": "https://addons.mozilla.org/firefox/downloads/latest/react-devtools/latest.xpi" },
"extension@redux.devtools": {
"installation_mode": "allowed",
"{446900e4-71c2-419f-a6a7-df9c091e268b}": { "installation_mode": "allowed", "install_url": "https://addons.mozilla.org/firefox/downloads/latest/bitwarden-password-manager/latest.xpi" },
"{support@lastpass.com}": { "installation_mode": "allowed", "install_url": "https://addons.mozilla.org/firefox/downloads/latest/lastpass-password-manager/latest.xpi"},
"{7a7a4a92-a2a0-41d1-9fd7-1e92480d612d}": {
"installation_mode": "allowed",
"install_url": "https://addons.mozilla.org/firefox/downloads/latest/styl-us/latest.xpi" },
"{943b8007-a895-44af-a672-4f4ea548c95f}": {
"installation_mode": "allowed",
"install_url": "https://addons.mozilla.org/firefox/downloads/latest/markdown-viewer-webext/latest.xpi" },
"installation_mode": "allowed",
"install_url": "https://addons.mozilla.org/firefox/downloads/latest/reduxdevtools/latest.xpi" },
"uBlock0@raymondhill.net": {
"installation_mode": "allowed",
}
}

[mkaply]

What version of the ADMX templates are you using? That field should be a MULTI_SZ now (not a single line) and have a limit of 16384

    <multiText id="ExtensionSettings" valueName="ExtensionSettings"  maxLength="16384"/>

[tkudya]

I am not using using the Custom ADMX import intune anyore but the Device Configuration - "Administrative Templates" option that's now available in Intune.

[mkaply]

Interesting. I haven't used that yet, but it sounds like they have a bug. They are not handling multiText correctly and implementing a limit that I don't have. I'll take a look.

[mkaply]

Yeah, this is definitely a Microsoft bug. Considering this feature is in preview, do you know of a way to report this bug to Microsoft?

[mkaply]

I've reported a bug through the Support Center feature. We'll see what they say.

[tkudya]

@mkaply Have you managed to get an answer from Microsoft? I can raise a support ticket with Microsoft

[mkaply]

I'm in communication with their product manager, but opening a support ticket would be great as well.

[sky2133]

is there a way to fix ? I have the same issue using imported firefox admx on intune, intune console just provided a single line instead multiple text, so that unable to paste the rule using json schedule

[mkaply]

I'll reach out to Microsoft again. Unfortunately this is their bug because they aren't honoring the maxLength in the ADMX.

Please raise a support ticket if you can.

[sky2133]

Hi Michael, Thanks for reaching out. I have raised ticket to Microsoft and their support enginner already reported this issue and their product is already aware of this issue A new feature has been requested and has an approximate time line of July-Aug, 2023.

…

________________________________ From: Michael Kaply ***@***.***> Sent: Friday, March 3, 2023 11:08 PM To: mozilla/policy-templates ***@***.***> Cc: sky2133 ***@***.***>; Comment ***@***.***> Subject: Re: [mozilla/policy-templates] Intune Firefox Extensions ADMX Length Limit (Issue #973) I'll reach out to Microsoft again. Unfortunately this is their bug because they aren't honoring the maxLength in the ADMX. Please raise a support ticket if you can. — Reply to this email directly, view it on GitHub<#973 (comment)>, or unsubscribe<https://github.com/notifications/unsubscribe-auth/ALBGG7KG6WONWBJ6AKPCLRDW2ICNVANCNFSM6AAAAAAR3OPFVE>. You are receiving this because you commented.Message ID: ***@***.***>

[mkaply]

Feel free to let them know they can reach out to me if they want to discuss further.

I'm going to close this since it';s a Microsoft issue.

[sky2133]

Hi Michael, can you share your email address, so that I can give it to microsoft support team.

…

________________________________ From: Michael Kaply ***@***.***> Sent: Thursday, March 9, 2023 10:15 PM To: mozilla/policy-templates ***@***.***> Cc: sky2133 ***@***.***>; Comment ***@***.***> Subject: Re: [mozilla/policy-templates] Intune Firefox Extensions ADMX Length Limit (Issue #973) Feel free to let them know they can reach out to me if they want to discuss further. I'm going to close this since it';s a Microsoft issue. — Reply to this email directly, view it on GitHub<#973 (comment)>, or unsubscribe<https://github.com/notifications/unsubscribe-auth/ALBGG7NZHBHBGWW4ZO5CQ23W3HQWTANCNFSM6AAAAAAR3OPFVE>. You are receiving this because you commented.Message ID: ***@***.***>

[mkaply]

mkaply at mozilla.com

Thanks!

[htcfreek]

Is this bug in intune fixed now?

[mkaply]

In order to work around this, I created one line versions of all the JSON policies.

If you search in this document:

https://mozilla.github.io/policy-templates/

for JSONOneLine

you'll find the information.

These should show up when you import the Custom ADMX/ADML

[htcfreek]

In order to work around this, I created one line versions of all the JSON policies.

If you search in this document:

https://mozilla.github.io/policy-templates/

for JSONOneLine

you'll find the information.

These should show up when you import the Custom ADMX/ADML

I asked for a policy I implemented in a different project. But I understood the issue wrong. Now I see that it is about the max length per text line.

[mkaply]

Max per textline, plus the UI is bad. It should be a multiline text field so you can paste in the JSON in regular format.