Unfortunately, this is from an AD deployment. Can I do that after the MSI has been pushed out from a startup script, though? If the script is run with admin/system privileges, yes. If it's under a user account, firefox won't complain but the setting won't be remembered on logout. Also, I'm unclear ...