I know that Add-ons can be disabled with Firefox running in safe mode.  I know how to add the Root CAs and I believe I can change the NTLM settings while monitoring with EMCO (an MSI builder) without issue.  Otherwise I know that I can create a config file for the NTLM settings.

I need to build a Firefox MSI that has one Root CA automatically installed, some NTLM settings configured, and Add-ons disabled by default with users unable to turn it back on. I know that Add-ons can be disabled with Firefox running in safe mode. I know how to add the Root CAs and I believe I can change the NTLM settings while monitoring with EMCO (an MSI builder) without issue. Otherwise I know that I can create a config file for the NTLM settings. However, I am very stumped with how I would configure the Root CA to automatically be a trusted root. I am going to try monitoring while I add change all of these settings, but I am concerned that the package that I build will not be complete. I am completely stumped about how to turn off Add-ons. If it is an about:config setting, is there a way to lock down about:config? Thank you very much for the help guys, I'm always impressed at the level of intelligence found throughout the Mozilla forums.