Look into policies.json & GPO deployment

[pyllyukko]

• https://support.mozilla.org/en-US/products/firefox-enterprise/policies-enterprise
• https://github.com/mozilla/policy-templates
• README: add link to Firefox policy templates #388

[Atavic]

The DISA STIG by DOD and Stigviewer, linked here are worth a look.

[nodiscc]

https://addons.mozilla.org/en-US/firefox/addon/enterprise-policy-generator/

[intika]

The new enterprise policy are very limited, and the settings that could be applied to about:config are very limited...

as an alternative i personally use the classic deployment system. Firefox_Enterprise_Deployment it still work (Tested in v63) i guess because the new system is not yet fully operational and/or we can not yet edit all the settings

user.js just change the settings; To avoid firefox and/or other source to change those settings it preferable to lock them with the method linked above, it is still the method to go for company that want to lock some settings, the new one is still under dev. and need to be unlocked to all the settings, its not yet the case... or may be firefox is going on a creepy road and is willing to disable access to all the settings...

[nodiscc]

I was attempting to change the default search engine through user.js, and found that it could not longer be modified in this way. Instead, it seems that policies.json must be used. [1] [2]

There is a very basic implementation of policies.json-based settings already in this repository:

user.js/Makefile

Line 19 in 3779a7c

.PHONY: policies.json # generate policy file (https://github.com/mozilla/policy-templates/blob/master/README.md)

.PHONY: policies.json # generate policy file (https://github.com/mozilla/policy-templates/blob/master/README.md)
policies.json:
	jq -n -M "{\"policies\": {\"OfferToSaveLogins\": false, \"DisableBuiltinPDFViewer\": true, \"DisablePocket\": true, \"DisableFormHistory\": true, \"SanitizeOnShutdown\": true, \"SearchBar\": \"separate\", \"DisableTelemetry\": true, \"Cookies\": {\"AcceptThirdParty\": \"never\", \"ExpireAtSessionEnd\": true}, \"EnableTrackingProtection\": {\"Value\": true}, \"PopupBlocking\": {\"Default\": true}, \"FlashPlugin\": {\"Default\": false}, \"DisableFirefoxStudies\": true}}" >| policies.json

I will look into what settings can be changed using the policy mechanism, if they are relevant to this user.js, and submit a patch to better document the deployment of this config file.

[nodiscc]

PR at #546