Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

For an organization still using XP, and that plans to continue using XP for at least another year, do you think it would be better to switch to Firefox 4 or continue to use IE8? Is Firefox configurable via GP? Patchable via WSUS or Local Update Publisher? What do you think?

share|improve this question
Better in what regard? – joeqwerty May 10 '11 at 19:46
Security, features, everything? – Shawn May 11 '11 at 13:22
up vote 7 down vote accepted

No, you cannot control FF via GPO (without an add-on or script) or update via WSUS. You may be able to push patches with SCCM, but that would be overkill if you don't have it in your environment. In short, unless you have an explicit need for FF, or something is totally incompatible with IE in your environment, stick with IE if you want ease of updates.

share|improve this answer
Some Firefox settings can be controlled via GPO, but you can't configure as much. -- – Zoredache May 10 '11 at 19:48
This is simply not true. There are adm templates that exist for Firefox (although for FF4 it might be harder to find). Having said this, it ain't easy (like with IE). – GregD May 10 '11 at 19:50
SCOM is for monitoring, not centralized management; that's SCCM. – Massimo May 10 '11 at 19:50
Made a couple changes, thanks to Zordache and Massimo – DanBig May 10 '11 at 19:51

If you're configuring settings with group policy and updating via WSUS, IE7/8/9 is really your only option.

You can do the same thing with Firefox to some degree, but it will require a lot of not-particularly-pleasant scripting.

share|improve this answer

Your best bet is really to use Internet Explorer if you're using WSUS and GPOs. IE is much more manageable than FF or even Chrome from a policy standpoint and updates through WSUS are a no brainer.

While FF can be managed with adm templates (they exist), it's much harder to lock it down and manage FF.

share|improve this answer

You can definitely use Local Update Publisher to install and patch Firefox. I'm the developer of LUP and I do that very thing. I would recommend using FrontMotion's MSI installers and creating your own MST transform file.

share|improve this answer
do you know of any websites that might give further details as to how LUP can be used with FF, using FrontMotion, or any other helpful information? – Chris S May 11 '11 at 13:05
Bryan, love your software. Its worked great for deploying Reader and Flash, just looks like more work to get FF to work. – Shawn May 11 '11 at 13:38
Deploying FF is really simple if you use the MSIs from FrontMotion. Just use the MSI rules that get automatically created and that's it. For more info go to The documentation wiki is your best source of info and has a page specifically for FF. – Bryan Dam May 13 '11 at 15:26

Is Google Chrome an option for you?

It has some basic GPO support:

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.