Disable sync option configuration profile
Hi,
We are currently looking for a configuration profile to disable the sync option to the users, we allow the users to sign in but not to sync the bookmarks, history, etc.
We need to deploy this profile to all the users in our environment.
Regards, Jesus
All Replies (9)
Do you only want to block some specific engines or block Sync completely? There is a DisableFirefoxAccounts policy available to disable Sync.
I will move the thread to Firefox for Enterprise support.
Hi, Thanks for your answer. Want we are looking for is a confg profile to block all the sync options, as I said, the users can login using an email but then, they can't sync bookmarks, passwords, etc.
Regards, Jesus
What's the purpose of allowing them to login if you don't want them to sync anything?
Hi, The idea is to deploy this configuration to Chrome, Edge and Firefox, for the first 2 is already in place and working, and the purpose is the user can login and access to their emails but can't sync the bookmarks, password etc for security reasons (I know, it's a silly solution) but I don't take these decisions.
Regards, Jesus
The only reason for logging in to Firefox Account is to synchronize data.
You can use the DisableFirefoxAccounts policy. It doesn't disable their emails or anything.
I'm trying different ways but I can't make it work. I'm using <dict>
<key>DisableFirefoxAccounts</key> <true/>
</dict>
Do I need to add more info/keys?
Yes on macOS, you need to add EnterprisePoliciesEnabled as well:
https://github.com/mozilla/policy-templates/blob/master/README.md#enterprisepoliciesenabled
I'll update the docs here
https://github.com/mozilla/policy-templates/tree/master/mac
to make that clear.
For some reason is not working.
<dict> <key>PayloadContent</key> <dict> <key>org.mozilla.firefox</key> <dict> <key>EnterprisePoliciesEnabled</key> <true/> <key>DisableFirefoxAccounts</key> <true/> </dict> </dict> <key>PayloadEnabled</key> <true/> <key>PayloadIdentifier</key> <string>xxx</string> <key>PayloadType</key> <string>com.apple.ManagedClient.preferences</string> <key>PayloadUUID</key> <string>xxx</string> <key>PayloadVersion</key> <integer>1</integer> </dict>
Endret
I'm not familiar with that format.
I normally use this:
https://github.com/timsutton/mcxToProfile
to convert the plist to a mobileconfig and it's a binary file.