1656556 - Figure out if we can make Firefox MSI dual mode

Status: RESOLVED FIXED

(Firefox :: Installer, enhancement, P3)

Description

[Mike Kaply [:mkaply]]

Attachment: intune-msi.png

We had a report that Firefox could only be installed via Intune per user (not device). I checked into this and that does seem to be the case.

Apparently there is some way to create a dual mode MSI. I'm still researching.

See attached image for what users see.

I found this:

https://docs.microsoft.com/en-us/windows/win32/msi/msiinstallperuser

Which might give more information.

Comment 1

[Molly Howell (she/her) (mostly inactive)]

We can't do this super easily because the full installer doesn't have this switch itself, but we should at least set the ALLUSERS property.

Comment 2

[Conan Chiles]

Setting the "ALLUSERS" property to 1 seems to not break the installer

Comment 3

[Mike Kaply [:mkaply]]

Based on what I'm reading, we should definitely have ALLUSERS set to 1 because right now we only install at a system level context.

https://docs.microsoft.com/en-us/windows/win32/msi/allusers

Comment 4

[Mike Kaply [:mkaply]]

This very detailed article helped me understand this:

https://www.joyofsetup.com/2008/04/01/new-wix-feature-setting-package-installation-scope/

Comment 5

[Mike Kaply [:mkaply]]

Attachment: Bug 1656556 - Switch to device context as default for Firefox MSI. r?mhowell!

Comment 6

[Mike Kaply [:mkaply]]

And FYI, this isn't just a shot in the dark.

I was able to build an MSI with the new parameter and verified that when I loaded it into Intune it said:

Execution Context: Per-Machine

With our regular MSI, it's:

Execution Context: Per-User

As some point in the future, we'll want to look at allowing people to switch contexts.

Comment 7

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/8b5dc0a088e3
Switch to device context as default for Firefox MSI. r=mhowell

Comment 8

[Noemi Erli[:noemi_erli]]

https://hg.mozilla.org/mozilla-central/rev/8b5dc0a088e3

Comment 9

[Mike Kaply [:mkaply]]

Comment on attachment 9173719 [details]
Bug 1656556 - Switch to device context as default for Firefox MSI. r?mhowell!

ESR Uplift Approval Request

• If this is not a sec:{high,crit} bug, please state case for ESR consideration: Enterprise only fix for MSI
• User impact if declined: Admins can't install MSI properly in Intune
• Fix Landed on Version: 82
• Risk to taking this patch: Low
• Why is the change risky/not risky? (and alternatives if risky): MSI only
• String or UUID changes made by this patch:

Beta/Release Uplift Approval Request

• User impact if declined: Admins can't install MSI properly in Intune
• Is this code covered by automated tests?: No
• Has the fix been verified in Nightly?: Yes
• Needs manual test from QE?: No
• If yes, steps to reproduce:
• List of other uplifts needed: None
• Risk to taking this patch: Low
• Why is the change risky/not risky? (and alternatives if risky): Testing this requires an Intune/Azure setup. I've verified the fix.
• String changes made/needed:

Comment 10

[Ryan VanderMeulen [:RyanVM]]

Comment on attachment 9173719 [details]
Bug 1656556 - Switch to device context as default for Firefox MSI. r?mhowell!

Approved for 81.0b9 and 78.3esr.

Comment 11

[Ryan VanderMeulen [:RyanVM]]

https://hg.mozilla.org/releases/mozilla-beta/rev/35e1cdd5ba3b

Comment 12

[Ryan VanderMeulen [:RyanVM]]

https://hg.mozilla.org/releases/mozilla-esr78/rev/8e5ceb66f847