Thunderbird is checking against C:\Program Files\Mozilla Firefox\distribution\policies.json at start. Some guys collected this for the latest version: https://fossies.org/linux/thunderbird/comm/mail/components/enterprisepolicies/schemas/policies-schema.json Thank you very much! Maybe this stuff is triggerable through the registry.
Create the task on a computer. Set the executional principal to ‘NT AUTHORITY\SYSTEM’. Type the string directly or search for ‘SYSTEM’ in the computers local branch. Test it locally. Export the Task as xml. Copy the xml to an accessable network share. Create a powershell script to install the task out of this xml. Example […]
You Foxits opens an UAC prompt on startup? It’s a never endig foxit issue… Did this and got rid of it: GPO: use the admx and activate: ‘Disable default PDF viewer switching’ Registry: Software\Foxit Software\Foxit Reader 10.0\CollectionData DefaultPDF REG_DWORD 1 Software\Foxit Software\Foxit Reader 10.0\CollectionData AppState REG_SZ Licensed Software\Foxit Software\Foxit Reader 10.0\Preferences\Others bCheckRegister REG_SZ 0 Software\Foxit […]
When Thunderbird starts it ignores already existing registry entries. That means, if you have had deleted an extension via UI and you did not change the registry entry (deleting or modifying) afterwards TB will not install this extension again. In other words: If you have once installed an extension via registry and you delete it […]
Debug it using the Developers error console. Try using ASCII (PEM) instead of Binary (DER) certs.
Basics: https://bytesandbones.wordpress.com/2019/09/30/thunderbird-gpo-admx Via Registry: HKCU\Software\Policies\Mozilla\Thunderbird\Certificates\Install\1 = “mycert.der” or Software\Policies\Mozilla\Thunderbird\Certificates\Install\2 = “\\MYHOST\Users\username\mycert.pem” or Software\Policies\Mozilla\Thunderbird\Certificates\Install\3 = “C:\CERTS\mycert.pem” as REG_EXPAND_SZ. If you define only a file name without a path Thunderbird searches %USERPROFILE%\AppData\Local\Thunderbird\Certificates%USERPROFILE%\AppData\Roaming\Thunderbird\Certificates for your files. Via GPO: Use the user branch. Define full path file location or file names only. If you specify only a file […]
Your machines can’t connect to your WSUS? Maybe you upgraded your Windows version (ie 1909 > 2004) and your old GPOs don’t fit the new version. Solution: remove your old Update GPOs, add the new admx files from an freshly upgraded windows machine to your DCs PoliciyDefinitions and reconstruct your GPOs.
These policy settings are available in Administrative Templates\Start Menu and Taskbar under User Configuration. Remove and prevent access to the Shut Down, Restart, Sleep, and Hibernate commands or in German: Befehle “Herunterfahren”, “Neu starten”, “Energie sparen” und “Ruhezustand” entfernen und Zugriff darauf verweigern
Run cmd.exe as administrator gpresult /z /scope computer