How to Deploy Mozilla Firefox via Intune (Win32 Packaging Guide)

Download the enterprise MSI

Mozilla provides an enterprise MSI at:

https://www.mozilla.org/en-GB/firefox/enterprise/

Click Download Firefox ESR (Extended Support Release) for business deployments. ESR releases get security patches but not feature updates for 12 months, making them more stable in managed environments. If you prefer the latest release, the standard MSI is also available from the same page.

Wrap with the Content Prep Tool

IntuneWinAppUtil.exe -c "C:\AppSource\Firefox" -s "Firefox Setup ESR.msi" -o "C:\IntunePackages"

Add the app in Intune

1. Upload the .intunewin file
2. Name: Mozilla Firefox ESR
3. Publisher: Mozilla Foundation

Install and uninstall commands

Detection rule

Managing Firefox updates

Firefox auto-updates by default. For managed environments, you have two options:

• Allow auto-updates - Firefox updates itself in the background. Minimal work, but you lose control over the exact version on devices.
• Disable auto-updates via policy - Deploy a policies.json file to C:\Program Files\Mozilla Firefox\distribution\ to control update behaviour. This is the recommended approach for ESR.

{
  "policies": {
    "DisableAppUpdate": true,
    "Homepage": {
      "URL": "https://intranet.yourdomain.com",
      "Locked": true
    }
  }
}

Known gotchas

Firefox installing to Program Files (x86) on some devices

On 32-bit Windows, Firefox installs to C:\Program Files (x86)\Mozilla Firefox. If your estate has mixed architecture, either use a detection rule that checks both paths with a PowerShell script, or require 64-bit OS in the requirements.

Firefox prompting users to set it as default browser

Suppress this by including a policies.json file with "DontCheckDefaultBrowser": true.

Frequently Asked Questions