Let us learn how to inject the ADMX policy for the Mozilla Firefox browser using Intune. Manage Firefox ADMX Policies using Intune on Windows 10 devices. You will learn how to download Firefox.ADMX and OMA-URI details to deploy Firefox ADMX policy from this post.
NOTE! – Need to inject ADMX policies for Chrome before deploying any Chrome browser policies.
Download Firfox ADMX
- Open up Firefox ADMX policy templates page https://github.com/mozilla/policy-templates/releases
- Download the relevant policy_templates_vXX.zip file.
NOTE! – Confirm the version of Firefox application installed on the device. The recommendation is to use the latest version of ADMX and Firefox application.
Where is Firefox ADMX File
- Unzip the downloaded file policy_Template_v1.16.zip.
- Navigate to Windows Folder.
- Open the Firefox.admx file in the notepad.
Create Firefox ADMX Injection Policy
- Login to Endpoint.Microsoft.com
- Navigate to Devices – Configuration profiles
- Click on +Create Profile
- Select Platform – Windows 10 and Later
- Select Profile – Custom
- Click on Create
- Enter the Name – Firefox ADMX Policies
- Enter the Description – Firefox ADMX Policies
- https://github.com/mozilla/policy-templates/releases
- ./Device/Vendor/MSFT/Policy/ConfigOperations/ADMXInstall/MozillaFirefox/Policy/FirefoxADMX
- Click on Next
- Click on the Add button to add new Firefox Policies.
OMA-URI to Inject Firefox ADMX Policy
- Now, to proceed further, you need to find out the OMA-URI to Inject Firefox ADMX Policy.
- Mozilla Firefox KB Article provides this information – https://support.mozilla.org/en-US/kb/managing-firefox-intune
Create Firefox ADMX Injection Policy Using Intune
- Enter the Name – MozillaFirefox/Policy/FirefoxADMX
- Enter the Description – MozillaFirefox/Policy/FirefoxADMX
- Enter OMA-URI Value –
- ./Device/Vendor/MSFT/Policy/ConfigOperations/ADMXInstall/MozillaFirefox/Policy/FirefoxADMX
- Select Data type – String
- Enter the content of Firefox.admx file content (as mentioned in the above section) in the VALUE section.
- Click on Add
- Click on Next
Scope Assignment for Firefox
- Select the Scope (Tags) to Firefox policy deployment – This is optional setting.
- Click +Add
- Select Tags ->Â Test
- Click on Select
- Click OK
Firefox ADMX Injection Policy Assignment
- On the Assignments page.
- Click on + Select Groups to Include.
- Search for Azure AD Device Group which you want to inject Firefox ADMX policy.
- Click on the group – HTMD Windows Devices.
- Click on the Select button.
- Click on the Next button to continue.
Applicability Rules + Create Configuration Profile
- Applicability Rules – Specify how to apply this profile within an assigned group. Intune will only apply the profile to devices that meet the combined criteria of these rules.
- Click on Create button to complete the deployment of Firefox ADMX policies.
Results + Troubleshooting
You can verify the ADMX injection for the Firefox browser using Intune. The following information might help you to troubleshoot the issue related to ADMX injection on Windows 10 devices.
Intune Portal
- Intune Portal Results
Event Logs
MDM PolicyManager: ADMX Ingestion: EnrollmentId (D8D5A74A-020E-40F2-BA69-086EDDDD9F08), app name (MozillaFirefox), setting type (Policy), unique Id (FirefoxADMX), area (NULL). MDM PolicyManager: ADMX ingestion starting new Admx ingestion. EnrollmentId (D8D5A74A-020E-40F2-BA69-086EDDDD9F08), app name (MozillaFirefox), setting type (Policy), unique Id (FirefoxADMX).
Registry Entries
I can see 252 policies are injected to FirefoxADMX value after applying the above Intune policy. In the following registry, you can see more details about the policy count, start date time etc…
Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\AdmxInstalled\D8D5A74A-020E-40F2-BA69-086EDDDD9F08\MozillaFirefox
The following registry path will give you the details policies for Firefox browser.
Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\AdmxDefault
- MozillaFirefox~Policy~firefox
- MozillaFirefox~Policy~firefox~Addons
- MozillaFirefox~Policy~firefox~Authentication
- MozillaFirefox~Policy~firefox~Bookmarks
- MozillaFirefox~Policy~firefox~Certificates
- MozillaFirefox~Policy~firefox~Cookies
- MozillaFirefox~Policy~firefox~DisabledCiphers
- MozillaFirefox~Policy~firefox~DNSOverHTTPS
- MozillaFirefox~Policy~firefox~Extensions
- MozillaFirefox~Policy~firefox~Flash
- MozillaFirefox~Policy~firefox~Homepage
- MozillaFirefox~Policy~firefox~Permissions~Autoplay
- MozillaFirefox~Policy~firefox~Permissions~Camera
- MozillaFirefox~Policy~firefox~Permissions~Location
- MozillaFirefox~Policy~firefox~Permissions~Microphone
- MozillaFirefox~Policy~firefox~Permissions~Notifications
- MozillaFirefox~Policy~firefox~Popups
- MozillaFirefox~Policy~firefox~Preferences
- MozillaFirefox~Policy~firefox~SanitizeOnShutdown
- MozillaFirefox~Policy~firefox~Search
- MozillaFirefox~Policy~firefox~TrackingProtection
- MozillaFirefox~Policy~firefox~UserMessaging
Video Recording – Firefox ADMX Policies using Intune
Resources
- Fix Error Code 0x87d1fde8 Remediation Failed Intune Configuration Profiles | Chrome | Setting Error
- Firefox KB for Intune https://support.mozilla.org/en-US/kb/managing-firefox-intune
- Download Firefox ADMX policies https://github.com/mozilla/policy-templates/releases
- •Firefox OMA-URI Details https://github.com/mozilla/policy-templates/blob/master/README.md