Disable Data Collection Features in Firefox

[TWF]

Hello fellow Jamf Admins,

I have a request in from our InfoSec team to disable the data collection features within Firefox. I have tried pushed config profiles with custom settings to turn them off. Here's the output:

<key>DataCollection</key>
<dict>
<key>Experimentation</key>
<false/>
<key>HealthReport</key>
<false/>
<key>Submission</key>
<false/>
<key>Telemetry</key>
<false/>
</dict>

Firefox is not changing the settings though. It seems to not care about the plist at all. Has anyone run into an issue like this and if so, how did you get Firefox to behave?

Thanks in advance!

[sdagley · Accepted solution]

@TWF Firefox seems to require a configuration .plist that doesn't necessarily use exactly the same key name as the preference setting. For example here is a profile to disable DNS over HTTPS:

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
	<dict>
		<key>EnterprisePoliciesEnabled</key>
		<true/>
		<key>DNSOverHTTPS__Enabled</key>
		<false/>
		<key>DNSOverHTTPS__Locked</key>
		<true/>
	</dict>
</plist>

I don't know if the setting you're looking to set have the same issue, so you'll need to check on that.

The "EnterprisePoliciesEnabled" key set to "true" is required otherwise Firefox will ignore any settings you're trying to manage.

[sdagley · Accepted solution]

@TWF Firefox seems to require a configuration .plist that doesn't necessarily use exactly the same key name as the preference setting. For example here is a profile to disable DNS over HTTPS:

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
	<dict>
		<key>EnterprisePoliciesEnabled</key>
		<true/>
		<key>DNSOverHTTPS__Enabled</key>
		<false/>
		<key>DNSOverHTTPS__Locked</key>
		<true/>
	</dict>
</plist>

I don't know if the setting you're looking to set have the same issue, so you'll need to check on that.

The "EnterprisePoliciesEnabled" key set to "true" is required otherwise Firefox will ignore any settings you're trying to manage.

[rayjd1650 · Accepted solution]

iMazing Profile Editor has a Firefox payload, and the payload documentation points to a GitHub which has a .plist with all the settings.

https://github.com/mozilla/policy-templates/tree/master/mac

[TWF]

This worked perfect for me. Thank you!

[_Daley]

The attributes you've listed are different to the ones in their documentation. You can find their documentation here: https://mozilla.github.io/policy-templates/

For example, to disable telemetry it should be: 

<dict>
  <key>DisableTelemetry</key>
  <true/>
</dict>

 This should also disable the health report, and the submission of data. 

I couldn't find a direct key for Experimentation, but it might be the FirefoxLabs key. 

I hope this helps!