Intune Firefox Extensions ADMX Length Limit

[tkudya]

I am using the Firefox Intune ADMX to manage extensions installed on Browsers. I have managed to allow a few extensions but as I start adding more extensions I am no longer Able with the following message "The value must have a length of at most 1023." Whats the available workaround to allow more extensions

{ "*": { "blocked_install_message": "Please email if you think an extension should be unblocked.", "install_sources": ["about:addons","https://addons.mozilla.org/"], "installation_mode": "blocked", "allowed_types": ["extension"] }, "{@react-devtools}": { "installation_mode": "allowed", "install_url": "https://addons.mozilla.org/firefox/downloads/latest/react-devtools/latest.xpi" }, "extension@redux.devtools": { "installation_mode": "allowed", "{446900e4-71c2-419f-a6a7-df9c091e268b}": { "installation_mode": "allowed", "install_url": "https://addons.mozilla.org/firefox/downloads/latest/bitwarden-password-manager/latest.xpi" }, "{support@lastpass.com}": { "installation_mode": "allowed", "install_url": "https://addons.mozilla.org/firefox/downloads/latest/lastpass-password-manager/latest.xpi"}, "{7a7a4a92-a2a0-41d1-9fd7-1e92480d612d}": { "installation_mode": "allowed", "install_url": "https://addons.mozilla.org/firefox/downloads/latest/styl-us/latest.xpi" }, "{943b8007-a895-44af-a672-4f4ea548c95f}": { "installation_mode": "allowed", "install_url": "https://addons.mozilla.org/firefox/downloads/latest/markdown-viewer-webext/latest.xpi" }, "installation_mode": "allowed", "install_url": "https://addons.mozilla.org/firefox/downloads/latest/reduxdevtools/latest.xpi" }, "uBlock0@raymondhill.net": { "installation_mode": "allowed", } }

[mkaply]

What version of the ADMX templates are you using? That field should be a MULTI_SZ now (not a single line) and have a limit of 16384

    <multiText id="ExtensionSettings" valueName="ExtensionSettings"  maxLength="16384"/>

[tkudya]

I am not using using the Custom ADMX import intune anyore but the Device Configuration - "Administrative Templates" option that's now available in Intune.

[mkaply]

Interesting. I haven't used that yet, but it sounds like they have a bug. They are not handling multiText correctly and implementing a limit that I don't have. I'll take a look.

[mkaply]

Yeah, this is definitely a Microsoft bug. Considering this feature is in preview, do you know of a way to report this bug to Microsoft?

[mkaply]

I've reported a bug through the Support Center feature. We'll see what they say.

[tkudya]

@mkaply Have you managed to get an answer from Microsoft? I can raise a support ticket with Microsoft

[mkaply]

I'm in communication with their product manager, but opening a support ticket would be great as well.

[sky2133]

is there a way to fix ? I have the same issue using imported firefox admx on intune, intune console just provided a single line instead multiple text, so that unable to paste the rule using json schedule

[mkaply]

I'll reach out to Microsoft again. Unfortunately this is their bug because they aren't honoring the maxLength in the ADMX.

Please raise a support ticket if you can.

[sky2133]

Hi Michael,

Thanks for reaching out.

I have raised ticket to Microsoft and their support enginner already reported this issue and their product is already aware of this issue

A new feature has been requested and has an approximate time line of July-Aug, 2023.

---

From: Michael Kaply @.> Sent: Friday, March 3, 2023 11:08 PM To: mozilla/policy-templates @.> Cc: sky2133 @.>; Comment @.> Subject: Re: [mozilla/policy-templates] Intune Firefox Extensions ADMX Length Limit (Issue #973)

I'll reach out to Microsoft again. Unfortunately this is their bug because they aren't honoring the maxLength in the ADMX.

Please raise a support ticket if you can.

— Reply to this email directly, view it on GitHubhttps://github.com/mozilla/policy-templates/issues/973#issuecomment-1453671451, or unsubscribehttps://github.com/notifications/unsubscribe-auth/ALBGG7KG6WONWBJ6AKPCLRDW2ICNVANCNFSM6AAAAAAR3OPFVE. You are receiving this because you commented.Message ID: @.***>

[mkaply]

Feel free to let them know they can reach out to me if they want to discuss further.

I'm going to close this since it';s a Microsoft issue.

[sky2133]

Hi Michael,

can you share your email address, so that I can give it to microsoft support team.

---

From: Michael Kaply @.> Sent: Thursday, March 9, 2023 10:15 PM To: mozilla/policy-templates @.> Cc: sky2133 @.>; Comment @.> Subject: Re: [mozilla/policy-templates] Intune Firefox Extensions ADMX Length Limit (Issue #973)

Feel free to let them know they can reach out to me if they want to discuss further.

I'm going to close this since it';s a Microsoft issue.

— Reply to this email directly, view it on GitHubhttps://github.com/mozilla/policy-templates/issues/973#issuecomment-1462137328, or unsubscribehttps://github.com/notifications/unsubscribe-auth/ALBGG7NZHBHBGWW4ZO5CQ23W3HQWTANCNFSM6AAAAAAR3OPFVE. You are receiving this because you commented.Message ID: @.***>

[mkaply]

mkaply at mozilla.com

Thanks!

[htcfreek]

Is this bug in intune fixed now?

[mkaply]

In order to work around this, I created one line versions of all the JSON policies.

If you search in this document:

https://mozilla.github.io/policy-templates/

for JSONOneLine

you'll find the information.

These should show up when you import the Custom ADMX/ADML

[htcfreek]

In order to work around this, I created one line versions of all the JSON policies.

If you search in this document:

https://mozilla.github.io/policy-templates/

for JSONOneLine

you'll find the information.

These should show up when you import the Custom ADMX/ADML

I asked for a policy I implemented in a different project. But I understood the issue wrong. Now I see that it is about the max length per text line.

[mkaply]

Max per textline, plus the UI is bad. It should be a multiline text field so you can paste in the JSON in regular format.