We're calling on all EU-based Mozillians with iOS or iPadOS devices to help us monitor Apple’s new browser choice screens. Join the effort to hold Big Tech to account!

This site will have limited functionality while we undergo maintenance to improve your experience. If an article doesn't solve your issue and you want to ask a question, we have our support community waiting to help you at @FirefoxSupport on Twitter and/r/firefox on Reddit.

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

Firefox for enterprise setting up with MS Intune

  • 3 replies
  • 1 has this problem
  • 14 views
  • Last reply by Mike Kaply

more options

I am attempting to setup Mozilla for enterprise version 81.0 (x64) to deploy through Intune and update the previous versions on our client laptops. I set up Intune with the following detection rule(attached). The idea is that Intune looks for this registry key and if its not at version 81.0 it pushes out the updated MSI file. What happens so far is that when I have a older version installed such as 74.0. Intune DOESN'T push out the update. However when I completely remove Firefox within minutes Intune detects that its not installed and pushes out the current version. Therefore it would appear that the detection rule works but not as intended. A attempted to adjust the value on the detection rule with no success. The original detection rule was to detect a file inside program files\mozilla firefox. However that rule would not detect the current version installed.

Any ideas would be helpful.

I am attempting to setup Mozilla for enterprise version 81.0 (x64) to deploy through Intune and update the previous versions on our client laptops. I set up Intune with the following detection rule(attached). The idea is that Intune looks for this registry key and if its not at version 81.0 it pushes out the updated MSI file. What happens so far is that when I have a older version installed such as 74.0. Intune DOESN'T push out the update. However when I completely remove Firefox within minutes Intune detects that its not installed and pushes out the current version. Therefore it would appear that the detection rule works but not as intended. A attempted to adjust the value on the detection rule with no success. The original detection rule was to detect a file inside program files\mozilla firefox. However that rule would not detect the current version installed. Any ideas would be helpful.
Attached screenshots

All Replies (3)

more options

CurrentVersion includes extra text at the end which probably breaks the version compare:

82.0 (x64 en-US)

You should compare against the (Default) value in Mozilla Firefox which is set to a correct version. See attachment.

more options

Thanks for your response and made the changes. However on my test system which I have version 74.0 installed it will NOT push the updated 81 version we have loaded in intune. Attached is a screenshot of my detection rule settings as they are currently.

I am also attaching a screenshot of the firefox ADMX we have set up.

We enabled the APPUPDATE OMA-URI rule in our ADMX setup. However it seems to only remove the option for the end user to select their update option.

Is there a rule that will force the update to install after it is downloaded?

What we might do is move the Mozilla to our MS store to avoid these problems in with future deployments. Unless we can find a way to reliably push out updates through Intune.

more options

I've exhausted my knowledge :)

This is the kind of question that is probably better asked on our enterprise mailing list:

https://mail.mozilla.org/listinfo/enterprise

It's a lot of folks that have done these kind of deployments and probably have more specific knowledge