I'm managing a server environment with Windows Server 2019 and client machines running Windows 10 (version 22H2). My issue is that when standard users try to open Firefox, it prompts for admin privileges to update, and I want to find a way for it to update in the background without that hassle. I know that registry tweaks might help, but I'm not entirely sure how to set it up properly. I'm considering the following registry keys: HKLM for all users, HKCU for current users, and HKEY_USERS for AD users.
Specifically, I want to know:
1. Will making changes in HKLM allow it to work for all users?
2. How do I correctly construct the registry key and value for this purpose? I'm confused about whether the path to Firefox.exe is the property name and if RUNASINVOKER is the right value to use.
3 Answers
Are there any strict policies applied on your system? Normally, Firefox should be able to update without admin rights. You could also utilize Firefox's ADMX templates which can help in managing the updates smoothly.
We decided to ban Firefox in our setup completely to avoid such issues. We just use Edge or Chrome instead now.
We update our Firefox automatically using PatchMyPC and disable the auto-update feature during installation. It’s a hassle-free way, and you might also want to check MDM solutions that can help manage updates effectively. This way, you don't have to keep building installation packages constantly.
Exactly! We did the same with Chrome; it’s just easier to manage.