mozilla / policy-templates

Policy Templates for Firefox
Mozilla Public License 2.0
1.12k stars 398 forks source link

GPO: adm file needed and policy request to disable "clear recent history" #156

Open ghost opened 6 years ago

ghost commented 6 years ago

Hello: Is there an adm version of the GPO policy that I could use on our Windows Server 2003 R2 Active Directory environment for Firefox version 60 (Quantum)? Currently, with the admx and adml, I would have to run a script to copy these down to everyone's local folders c:\windows\PolicyDefinitions. Chrome has a GPO template that works in our environment - I just use Group Policy Management "Default Domain Policy" on the AD server to add the Chrome adm file, and it propagates automatically to all our workstations - and was hoping Firefox would have a similar working GPO adm template we could use.

Also, would please like to request an enhancement unless I am just overlooking it: lock the user from deleting their browser history under History/Clear Recent History/Browsing & Download History

Thank you.

mkaply commented 6 years ago

We have no plans to create ADM files. When making a determination as to what would accomplish the most benefit, we chose ADMX.

If a community member wanted to produce ADM files, that is possible.

Note if there are specific policies you want (not the entire list), that might be straightforward.

As far as a history policy, that is on the list of things we are looking at.

ghost commented 6 years ago

OK I understand and thanks for working on the history policy. Is there a time frame when you might think it will be available? Thanks again.

mkaply commented 6 years ago

And to be perfectly honest, when I looked at the ADM format, it was pretty hard to understand, so ADMX was much easier to develop. I also don't have a good way to test ADM. (I can test ADMX with Local Group Policy).

I might try to learn ADM to see how easy it would be to do a handful of important policies.

Is there any way to test ADM without having a Win 2003 server?

ghost commented 6 years ago

I am not sure, but guessing here: think you can load it locally, say with Windows 7, using MMC and then Add/Remove Snap-in and then select the group policy object to "Add". Then you can right click "Administrative Templates" under "Computer Configuration" and then "Add/Remove Templates". Those are the instructions for adding the ADM for Chrome anyway - it can be done locally as well.

That would be great if you could provide an ADM formatted GPO for FF Quantum. Probably helpful to a lot of folks.

kheldorn commented 6 years ago

Alternatively, instead of using outdated legacy formats like ADM, you could just deploy the registry keys the ADMX-based policies would set with GPPs directly.

asadotzler commented 5 years ago

See also #181 for disabling clearing of history.