为提升您的使用体验,本站正在维护,部分功能暂时无法使用。如果本站文章无法解决您的问题,您想要向社区提问的话,请到 Twitter 上的 @FirefoxSupport 或 Reddit 上的 /r/firefox 提问,我们的支持社区将会很快回复您的疑问。

搜索 | 用户支持

防范以用户支持为名的诈骗。我们绝对不会要求您拨打电话或发送短信,及提供任何个人信息。请使用“举报滥用”选项报告涉及违规的行为。

详细了解

Firefox CIS baselines deployment with Intune

  • 10 个回答
  • 1 人有此问题
  • 1 次查看
  • 最后回复者为 Mike Kaply

more options

Hi all,

I'm trying to create configuration profile to deploy CIS baselines using Intune. Configured custom schema and able to deploy certain settings. However, while deploying preferences, I'm getting error and none of the preferences are being deployed. Enclosing the error screenshots. Did anyone configured preference settings. if yes, can you please suggest how to configure.

Hi all, I'm trying to create configuration profile to deploy CIS baselines using Intune. Configured custom schema and able to deploy certain settings. However, while deploying preferences, I'm getting error and none of the preferences are being deployed. Enclosing the error screenshots. Did anyone configured preference settings. if yes, can you please suggest how to configure.
已附加屏幕截图

所有回复 (10)

more options

We have a new way of configuring preferences using JSON that should work for many of those:

https://github.com/mozilla/policy-templates/blob/master/README.md#preferences

A lot of those pref names are incorrect (_ instead of .)

You should check about:config for the correct names.

more options

Thank you for your response Mike. I did check JSON file and configured preferences but none of them are working as expected.

more options

Can you post the JSON you used for your preferences?

more options

Tried with different combinations. OMA-URI --> ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Preferences JSON

<enabled/> <data id="JSON" value=' {

 "geo.enabled": {
   "Value": false,
   "Status": "default"
 },
 "security.mixed_content.block_active_content": {
   "Value": false,
 }
 }'/>


tried with geo_enabled and security_mixed_content_block_active_content with no luck

more options

You have an extra comma after

"Value": false,

and that one is missing the Status type (we don't do a status by default)

I run my JSON through JSONlint.com to verify it is correct.

I'll still do some checking with intune to make sure this is working, my comments are from a first glance.

more options

Did fixing those typos make it work for you?

more options

I have tried with removing the comma but it didn't work.

more options

I just ran a quick test and this is working for me.

Can you post a screenshot of your Configuration settings in intune?

I'm wondering if somehow the old preferences are conflicting with the new preferences?

more options

Hi Mike, since it didn't work through Intune, I have deleted Intune profile and deployed the settings using config file. Can you please share your configuration settings in Intune so that I will also test with the same set of configurations and revert you with the results?

more options

Sure.

I created an entry called Firefox ADMX with the OMA-URI

./Device/Vendor/MSFT/Policy/ConfigOperations/ADMXInstall/Firefox/Policy/FirefoxAdmx.

And a type of string and pasted the entirety of:

https://raw.githubusercontent.com/mozilla/policy-templates/master/windows/firefox.admx

Then I created an entry called Preferences with an OMA-URI of:

./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Preferences

Data type is string and value is:

<enabled/> <data id="JSON" value=' {

"geo.enabled": {
  "Value": false,
  "Status": "default"
},
"security.mixed_content.block_active_content": {
  "Value": false
}
}'/>

Then after saving and deploying, the preferences were set in the registry.