GPO Wish: more granular sync control

[hesselink]

Our organization has recently disabled sync, because concerns about malicious extensions from private devices being automatically installed on company devices. They are happy to support syncing bookmarks, open tabs etc.

Would it be possible to add a more granular setting than DisableFirefoxAccounts, that allows separately configuring what to sync?

[mkaply]

You are the first person that have ever wanted to use sync in an enterprise context :).

I'll take this as a requirement. Might be a couple releases before it happens.

[drlellinger]

I wish sync would be allowed in our envoirment but our it security forbids it.

[Sunyix11]

Hello, Can you help me if the problem has been solved since then? because we are in the same situation. We want to leave out the password synchronization, but we would synchronize everything else.

Thank You

[douglasjohnson873]

Alright no problem

[Sunyix11]

so the issue solved? and is there any solution to separately configuring what to sync? Could you please help me how can I set exclude list the passwords? We want to enabled the Firefox account synchronization in Intune and want to sync everything except the passwords. Is there any OMA-URI for this setting? Thank you in advance!

[mkaply]

So I'm not sure doing this will work as expected (but I'm looking into it).

The preferences that control sync are really set at the server level, not on the client. So for instance, if on one client you check "sync passwords", every other device will start syncing passwords. So even if you set the pref to not sync passwords, if they set to sync passwords on another machine, it would get synced.

But I'll discuss with the sync team to see if something can be done here.