Thunderbird is checking against C:\Program Files\Mozilla Firefox\distribution\policies.json at start. Some guys collected this for the latest version: https://fossies.org/linux/thunderbird/comm/mail/components/enterprisepolicies/schemas/policies-schema.json Thank you very much! Maybe this stuff is triggerable through the registry.
Do sysprep.exe, but you will lose activation, licenses, maybe devices. The poor mans way: Remove the SusClientID and (if exists) AccountDomainID from Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate
You Foxits opens an UAC prompt on startup? It’s a never endig foxit issue… Did this and got rid of it: GPO: use the admx and activate: ‘Disable default PDF viewer switching’ Registry: Software\Foxit Software\Foxit Reader 10.0\CollectionData DefaultPDF REG_DWORD 1 Software\Foxit Software\Foxit Reader 10.0\CollectionData AppState REG_SZ Licensed Software\Foxit Software\Foxit Reader 10.0\Preferences\Others bCheckRegister REG_SZ 0 Software\Foxit […]
When Thunderbird starts it ignores already existing registry entries. That means, if you have had deleted an extension via UI and you did not change the registry entry (deleting or modifying) afterwards TB will not install this extension again. In other words: If you have once installed an extension via registry and you delete it […]
Debug it using the Developers error console. Try using ASCII (PEM) instead of Binary (DER) certs.
Basics: https://bytesandbones.wordpress.com/2019/09/30/thunderbird-gpo-admx Via Registry: HKCU\Software\Policies\Mozilla\Thunderbird\Certificates\Install\1 = “mycert.der” or Software\Policies\Mozilla\Thunderbird\Certificates\Install\2 = “\\MYHOST\Users\username\mycert.pem” or Software\Policies\Mozilla\Thunderbird\Certificates\Install\3 = “C:\CERTS\mycert.pem” as REG_EXPAND_SZ. If you define only a file name without a path Thunderbird searches %USERPROFILE%\AppData\Local\Thunderbird\Certificates%USERPROFILE%\AppData\Roaming\Thunderbird\Certificates for your files. Via GPO: Use the user branch. Define full path file location or file names only. If you specify only a file […]
On a machine some users are always logged on with temorarary profiles only? Go to this machines registry: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList Check the names + note the SIDs (!) + and delete these candidates. Then go to HKEY_USERS and delete the corresponding SIDs branches.
Create a reg file and add the following stuff: