Sign up for our newsletter.

I agree to this site's Privacy Policy.

Tech Line

Rolling Out Firefox via Active Directory

Leverage AD to roll out and update the Firefox Web browser in a Windows domain.

Deployment and management simplicity are two key reasons (aside from the fact that’s it’s bundled with Windows) that most organizations use Internet Explorer as the default workstation Web browser. So, organizations often overlook Firefox due to the belief that it cannot be deployed or managed with Active Directory.

If deployment and management simplicity had previously held you back from evaluating and deploying Firefox across your organization, then you should take a look at FrontMotion Firefox Community Edition. Firefox Community Edition is free and includes Microsoft System Installer (MSI) deployment package files as well as an administrative template for group policy-based management.

To deploy Firefox using a group policy object (GPO), you will need to download the appropriate MSI file for your organization’s desktop environment. In my case, I used the FMFirefoxCE- package for the U.S. English Firefox version.

Once you've downloaded the MSI file, you can deploy it using a GPO by following the steps in the Active Directory Deployment section on the FrontMotion Firefox Community Edition page.

If you would like to deploy Firefox with added functionality (such as with the IE Tab extension), you can build Firefox deployment packages with up to 10 extensions using FrontMotion’s Firefox Packaging Service. The packaging service is not free, but is offered as an annual subscription for $150.

Once Firefox has been deployed to the desktops in your domain, you need to download the Firefox administrative template (firefox.adm) in order to centrally manage the Firefox browser settings. Import firefox.adm into a GPO by following these steps:

  1. Open the GPO you wish to edit in the Group Policy Object Editor.
  2. Under Computer Configuration, right-click on Administrative Templates and select Add/Remove Tempates.
  3. Click the Add button and then browse to and select the downloaded firefox.adm file, then click Open.
  4. In the Add/Remove Templates dialog box, click Close.

You can now use the Firefox administrative template in the Group Policy Object Editor to centrally configure the following browser settings:

  • Homepage (configured under General Settings)
  • Automatic image resizing
  • Default browser check
  • Firefox cache size
  • Default download location
  • Proxy settings
  • Disable XPI installs
Tech Help—Just An
E-Mail Away

Got a Windows, Exchange or virtualization question or need troubleshooting help? Or maybe you want a better explanation than provided in the manuals? Describe your dilemma in an e-mail to the editors at; the best questions get answered in this column and garner the questioner with a nifty Redmond T-shirt.

When you send your questions, please include your full first and last name, location, certifications (if any) with your message. (If you prefer to remain anonymous, specify this in your message, but submit the requested information for verification purposes.)

The free FrontMotion Firefox Community Edition MSI deployment files and administrative template provide the tools you need to deploy and manage Firefox as you do with IE. Granted, the administrative template has not matured to the point that you can tweak every Firefox setting, but it does provide the features necessary to manage the more common Firefox configuration elements. The folks at FrontMotion have put together a very good Firefox deployment and management solution and I hope that you find it as useful as I have.

About the Author

Chris Wolf is a Microsoft MVP for Windows --Virtual Machine and is a MCSE, MCT, and CCNA. He's a Senior Analyst for Burton Group who specializes in the areas of virtualization solutions, high availability, storage and enterprise management. Chris is the author of Virtualization: From the Desktop to the Enterprise (Apress), Troubleshooting Microsoft Technologies (Addison Wesley), and a contributor to the Windows Server 2003 Deployment Kit (Microsoft Press).learningstore-20/">Troubleshooting Microsoft Technologies (Addison Wesley) and a contributor to the Windows Server 2003 Deployment Kit (Microsoft Press).

comments powered by Disqus

Reader Comments:

Wed, Oct 1, 2008 Anonymous Anonymous

Article was very helpful.

Thu, Sep 20, 2007 Anonymous Anonymous

Rolling out FF is all and fine, but the second part of a FF deployment has to be some sort of patching. Remember, FF is not anymore without flaws than IE and at least with IE I can force patches down from WSUS.

I would not even consider deploying FF if I were to only rely on the good will of end users to patch it!!

Wed, Sep 19, 2007 Anonymous Anonymous

I was able to push the Frefox MSI via GPO and add the template. But, whatever setting I apply into the template does not seem to work. Thanks for your help

Wed, Sep 19, 2007 Craig NY

Chris I have attempted to use this template many times and am not successful. Is there a certain version of Firefox this is applicable to or does this need to be rolloed out with a custom MSI only? I essentialy downloaded Firefox Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv: Gecko/20070725 Firefox/ Is there any additonal instructions for using this template? Thanks.

Add Your Comment Now:

Your Name:(optional)
Your Email:(optional)
Your Location:(optional)
Please type the letters/numbers you see above