GP and Autoconfig are your tools for locking down Firefox as an admin.

https://github.com/mozilla/policy-templates/blob/master/README.md https://github.com/mozilla/policy-templates/tree/master/windows https://support.mozilla.org/en-US/kb/customizing-firefox-using-autoconfig

I appreciate the answer, however, it appears the policy I need to enforce "app.update.auto" is deprecated in Firefox policy settings. I cannot seem to find an equivalent setting.

app.update.auto is still in about:config.

Using Autoconfig:

lockPref(prefName, value) – sets the default value of a preference and locks it. This is the most commonly used function. Locking a preference prevents a user from changing it, and in most cases, disables the UI in preferences so it is obvious to the user that the preference has been disabled.

lockPref("app.update.auto", true);

Of course, one would make sure users do not have privileges and cannot take privileges or ownership on the necessary autoconfig.js and firefox.cfg files. (I would guess that as the files are not in the user's Windows profile folder, they cannot have access to them by default.)

This should work, i think?

I absolutely think it should yes, however, I just tested it with those settings locked (attached image). Initially it started updating Firefox to the newest version but I was still able to interrupt the update by selecting Check for updates but let you choose to install them.

This as some users for whatever reason are selecting this option which results in security issues.

McCoy suggested to me the pref "app.update.auto.migrated" which you would have to add to the about:config, it seems.

It would look like this in the prefs.js file in the user profile, if you wanted to merge the text into file. user_pref("app.update.auto.migrated", true);

Perhaps this will help.

Forcing auto-update via autoconfig is currently broken on Windows.

• Bug 1579332 - app.update.auto set to true and locked in about:config does not lock Check box in about:preferences

(please do not comment in bug reports
https://bugzilla.mozilla.org/page.cgi?id=etiquette.html)

Thankyou all very much for the info.