Can not get Firefox proxy setting to LOCK using GPO

Post Reply
morten44
Posts:8
Joined:Wed Feb 27, 2008 9:16 am
Can not get Firefox proxy setting to LOCK using GPO

Post by morten44 » Wed Feb 27, 2008 3:12 pm

Hi
I have a Win2003 Server that also is a terminal Server for a school.
I have setup a proxy Server on the Terminal Server to prevent stundet from browsing adult content.
That works fine as i force stundet to use proxy through GPU when using IE7.
Then a stundet installed Firefox and now they can bypass proxy and that is now my headake.

I found this forum and understand I can import firefox Settings into GPO.Sounds great. I can also get the proxy settings into the stundets firefox browser but can not lock the setting. Stundet can just delete them

I downloaded somehting called FirefoxADM_0.4.
Inside i have firefoxlock.adm and firefox_startup.vbs.
I followed insturction: Included the vbs script into script/Startup in GPO.
I moved firefoxlock.admin to C:\windows\inf and can now import it into GPO
I then configured proxy settings, Enabled and wrote IP and Port
I closed GPO , did GPUPDATE, created a new user and he got the settings imported, but he can edit it
How can i grey out so they can not change the settings?
I have installed Firefox 2.0.0.12
I have no plans to deploy firefox via msi files as when installing as admin there are already a icon on each users desctop pointing to C:\program files\Mozilla Firefox\ and they all start it from there

Any idears how to get this to work

Kind regards
Morten

User avatar
DraconPern
Site Admin
Posts:1218
Joined:Thu Oct 30, 2003 11:47 pm
Location:Texas
Contact:

Re: Can not get Firefox proxy setting to LOCK using GPO

Post by DraconPern » Wed Feb 27, 2008 11:41 pm

You have two options for locking. Either use the FrontMotion Firefox Community Edition with Administrative Template or use the Firefox packager with 'GPO for Mozilla Firefox' extension and the template that you are using with FirefoxADM. FirefoxADM can't lock settings as you have experienced.
FrontMotion Lead Developer

morten44
Posts:8
Joined:Wed Feb 27, 2008 9:16 am

Re: Can not get Firefox proxy setting to LOCK using GPO

Post by morten44 » Thu Feb 28, 2008 6:10 am

Hi. Thanks for your time :)
I tried to use the FrontMotion FirefoxCE but still have a problem. I tell you what happens

Enviroment: Firefox 2.0.0.12da.msi,firefox.adm on a Terminal Server Windows2003

As i had tried to install Forefox various times i started by uninstall the previous versions.
I then removed the Firefox folder from program files and each of the test stundets application data folder.
I deleted GPO that was made to control and make settings in Firefox.

-----------------------------------------------------------------------------------------------------------------------------
1 Downloaded firefox 2.0.0.12dk.msi and saved it on a network share
2. Downloaded firefox.adm and saved it on C:\windows\inf
3. Created a new GPO and enabled that for all user on domain
4. Edited GPO to install the firefox 2.0.0.12dm.msi from network share
5. Imported firefox.adm into GPO and it apparis in Administrative Templates. It is visible in Computer and User settings
6. I set it to use proxy, disable browser check and default homepage
7. I save it, run gpupdate and eaven reboot.

This happens:
When logging in as any user, it does deploy the Firefox in danish as all users have it now. I did not have Firefox installed before logging in and now I have it.
I start the application but it has not saved my proxy, homepage and not to check for browser.
When i go to the setting tab it says "connect directly to internet and does not key in the proxy settings.
I have checked in GPO that i have set it to "Manual proxy" in bouth Computer an User settings

I checked the Register for Current user and Current machine
I have attached them. it all looks correct. Do you have any idea where to go from here?
Do I need to delete other older settings somewhere in Register that is causing this settings to be bypassed?

Kind Regards
Morten
Attachments
register.jpg
Register keys looks OK for Local Machine and Current user
register.jpg (59.19KiB)Viewed 25467 times

User avatar
DraconPern
Site Admin
Posts:1218
Joined:Thu Oct 30, 2003 11:47 pm
Location:Texas
Contact:

Re: Can not get Firefox proxy setting to LOCK using GPO

Post by DraconPern » Mon Mar 03, 2008 1:19 am

Those settings look fine. You are sure that the community edition is installed?
FrontMotion Lead Developer

morten44
Posts:8
Joined:Wed Feb 27, 2008 9:16 am

Re: Can not get Firefox proxy setting to LOCK using GPO

Post by morten44 » Mon Mar 03, 2008 3:53 am

Hi. Thanks for you answer.
I might get confused here.
I belive the comunity edition is included in the FMFirefoxCE2.0.0.12.da.msi when you download it from your webside. Is that correct.
I have deployed that file on my terminal Server and imported the Firefox.adm into GPO.
Is there anything else I should download and install or is that it?

Kind Regards
Morten

User avatar
DraconPern
Site Admin
Posts:1218
Joined:Thu Oct 30, 2003 11:47 pm
Location:Texas
Contact:

Re: Can not get Firefox proxy setting to LOCK using GPO

Post by DraconPern » Mon Mar 03, 2008 2:44 pm

Hum.. that's very strange. You are using the right package. I just did a test with those settings and the package and I got the locked settings. In Firefox, type 'about:config' in the address bar. Sort by the status. The network.proxy.* settings should be in italics if they are locked.
FrontMotion Lead Developer

morten44
Posts:8
Joined:Wed Feb 27, 2008 9:16 am

Re: Can not get Firefox proxy setting to LOCK using GPO

Post by morten44 » Mon Mar 03, 2008 5:34 pm

Hi. Yes I will try that.
I will try to install it on a virgin system. I have installed so many versions of Firefox on this server when testing this. There might be that some older register files are conflicting. I dont know.
Will try this a little later this week and feed back. As its working for you, it might be my enviroment that has been compromised by several installs.
Will let you know how I get on :)

Kind Regards
Morten

User avatar
DraconPern
Site Admin
Posts:1218
Joined:Thu Oct 30, 2003 11:47 pm
Location:Texas
Contact:

Re: Can not get Firefox proxy setting to LOCK using GPO

Post by DraconPern » Wed Mar 05, 2008 7:21 pm

Status of the issue?
FrontMotion Lead Developer

morten44
Posts:8
Joined:Wed Feb 27, 2008 9:16 am

Re: Can not get Firefox proxy setting to LOCK using GPO

Post by morten44 » Thu Mar 06, 2008 3:22 am

Hi again.
Sorry for the delay. ran into som urgent mail server issues.
I have planed to get it tested on a virgin Firefox Server in the weekend and expect to post updates on Sunday :)

Thanks for following up on this


Kind Regards
Morten

morten44
Posts:8
Joined:Wed Feb 27, 2008 9:16 am

Re: Can not get Firefox proxy setting to LOCK using GPO

Post by morten44 » Sun Mar 09, 2008 5:00 am

Hi. I have today tried to install this again on a virgin Server.
I am using win2003 Server and stundet and using Terminal Service (RPD only)
I have tested with the following:
FMFirefoxCE-2.0.0.7-af.msi (mistake but tested)
Firefox-2.0.0.12-da.msi
using Firefox.adm

I installed firt FMFirefoxCE-2.0.0.7-af.msi in GPO together with Firefox.adm settings.Added to Domain Controller GPO and when rebooting it did install and locked all the settings. This works for Administrator and Stundent.
I then discovered it was the wrong language

I then Removed the Deployement and it unninstalled correct

I then Deployed Firefox-2.0.0.12-da.msi.Rebooted and tested.

Now I had mixed results:
When I login as Administrator it does install and I get it in danish. I get it in danish but the only settings I do put in is the proxy. They are all locked accept the "HTTP" for some reason. (screen shot below)
I then logon as stundet that should enherrate the GPO for Domain Controller.
But this does not lock any Settings at all in Proxy.
When I do an "About:Config" as stundet I get as shown i screen shot belove (sorry for danish language :)

Any idea where to look next.is it the version, if so do you know latest working version in ENglish and Danish?

Kind Regards
Morten

I will continue to do some more testing later
Attachments
proxy_settings.jpg
Not locking HTTP proxy
proxy_settings.jpg (47.53KiB)Viewed 25295 times

morten44
Posts:8
Joined:Wed Feb 27, 2008 9:16 am

Re: Can not get Firefox proxy setting to LOCK using GPO

Post by morten44 » Sun Mar 09, 2008 5:02 am

Hi again. Here is the screenshot from About:Config. Did not know how to attach two files in post :)
Kind Regards Morten
Attachments
about_config.jpg
About config. Profile does not lock settings
about_config.jpg (56.38KiB)Viewed 25282 times

User avatar
DraconPern
Site Admin
Posts:1218
Joined:Thu Oct 30, 2003 11:47 pm
Location:Texas
Contact:

Re: Can not get Firefox proxy setting to LOCK using GPO

Post by DraconPern » Sun Mar 09, 2008 5:53 am

Install FMFirefoxCE-2.0.0.12-da.msi. :)
FrontMotion Lead Developer

morten44
Posts:8
Joined:Wed Feb 27, 2008 9:16 am

Re: Can not get Firefox proxy setting to LOCK using GPO

Post by morten44 » Sun Mar 09, 2008 3:12 pm

Hi again.How stupid am I? lol
Thanks for seeing that. I did not see the difference but now I do.
I installed it and sat the Proxy Settings.I started up as Administrator and Student and it all worked fine.

I then realized that I had the wrong proxy Settings as the school that is going to use it does not use the same.
I then went into GPO and changed the proxy Setting again. Rebooted and now it did change for Administrator, but when logging on as Studnet it does not change. I have rebooted but its still greyed out and still with the old settings.
Any idea whats causing this or how to bypass this?

another thing is that I am not sure if this in the end will resolve my problem. As you know Firefox can be installed eaven in MyDocument and therfore when student download the program them selves, I can see that it takes the settings from GPO but of course now the stundent can edit it and bypass the proxy. I guess there is no way to force the GPO to apply to what ever they download. is there?

Kind Regards
Morten

User avatar
DraconPern
Site Admin
Posts:1218
Joined:Thu Oct 30, 2003 11:47 pm
Location:Texas
Contact:

Re: Can not get Firefox proxy setting to LOCK using GPO

Post by DraconPern » Sun Mar 09, 2008 5:01 pm

Hum.. I am not sure why your student account are not picking up the settings. When you setting the GPO, are you using the computer setting? And you are right, if they downloaded firefox and run it without installing, there is no way to prevent that.
FrontMotion Lead Developer

Post Reply