Mozilla and GPO Proxy Settings

[rangerman]

We have locked down IE with a GP to make everyones IE go through a proxy and they are unable to change settings in Internet Explorer as it's greyed out. Unfortunatley some people have installed Mozilla to get round this !!! Dos anybody know how to make the settings for a proxy in Mozilla permanent so they cant change it ??

Thanks Guys, I hope I have posted in the right group

 

[gavm99]

There are differnet ways of looking at this:

1) Remove Firefox from their PC's and then put a Group Policy in place to stop the installation of software for normal users.

2) You can use the Community Version of Firefox which allows Group Policys to be applied to it, I have not done this myself but read articles on it. This won't stop them installing the normal version of Firefox and using that still.

I would go with option 1.

Thanks.

----------------------------------------
"Nobody cares how it works, as long as it works

 

[58sniper]

[google]Firefox adm[/google]

Pat Richard, MCSE MCSA:Messaging CNA
Microsoft Exchange MVP

 

[leegregory]

Sorry to Hijack your thread rangerman but I am having a similarish problem.

Is it possible to create a group policy to REMOVE mozilla from people's PC's and prevent them from installing it?

Thanks

 

[58sniper]

You could, in theory, use a vbscript to run the install string to remove it. I've done that in the past for other apps. YMMV.

You could then restrict them from installing apps. I can't recall if Mozilla requires local admin rights or not. I rarely make users local admins. That stops most of the installs.

Pat Richard, MCSE MCSA:Messaging CNA
Microsoft Exchange MVP

 

[kmcferrin]

Agree, lock down the PCs so that users don't have admin rights.

Back to the Mozilla issue, all you need to do is set firewall rules that will not allow outbound traffic on http/https ports from desktop VLANs. Then they won't be able to hit the Internet unless they go through the proxy, regardless of the browser that they're using.

I like to think of it as a win-win. People get the browser that they want, and you still force them to use the proxy.

 

[58sniper]

You could, in theory, use a vbscript to run the install string to remove it.

Whoops - that should have read the UNINSTALL string.

My bad.

Pat Richard, MCSE MCSA:Messaging CNA
Microsoft Exchange MVP

 

[jchoponis]

Just create a software restriction policy for all computers that forbids the mozilla program (firefox.exe) from running. I would use a path rule for the exe and choose several obvious paths. You could also hash several firefox versions (probably the most current one).

Link for more help:

http://support.microsoft.com/kb/324036