Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

Understanding How Extension Install Policy Interacts with Enterprise Installed Add Ons

I work in an enterprise environment. We have certain requirements that we must maintain for our system to maintain accreditation. One of these requirements is to prevent the installation of add-ons using the policies.json file.

We are also trying to develop an extension that adds banners to each page the user interacts with. I understand this can be loaded using the process [https://support.mozilla.org/en-US/kb/deploying-firefox-with-extensions|he...] and does not have to be signed following this [https://support.mozilla.org/en-US/kb/install-system-add-ons-firefox-enter...] .

My question is, before embarking on the journey to create this web extension, can it still be installed following the enterprise process, despite being denied by default by the policies.json? Or is there a way to allow for the extension to be installed by changing the policy?

I work in an enterprise environment. We have certain requirements that we must maintain for our system to maintain accreditation. One of these requirements is to prevent the installation of add-ons using the policies.json file. We are also trying to develop an extension that adds banners to each page the user interacts with. I understand this can be loaded using the process [[https://support.mozilla.org/en-US/kb/deploying-firefox-with-extensions|here]] and does not have to be signed following this [[https://support.mozilla.org/en-US/kb/install-system-add-ons-firefox-enterprise|configuration]] . My question is, before embarking on the journey to create this web extension, can it still be installed following the enterprise process, despite being denied by default by the policies.json? Or is there a way to allow for the extension to be installed by changing the policy?

All Replies (1)

You can force-install an extension using policy (i.e., either Group Policy or policies.json). I think you'll have to test out how the various settings work together.

https://github.com/mozilla/policy-templates#extensionsettings

Note that the setting for unsigned extensions is present in the ESR release, but not in the regular "rapid" release.