Configure Firefox defaults and uBlock
This commit is contained in:
+10
-1
@@ -20,6 +20,7 @@ Petite boîte à outils Windows pour installer des packs de logiciels libres ave
|
||||
| Chemin | Rôle |
|
||||
| --- | --- |
|
||||
| 🧭 [`powershell/libres-softwares-install.ps1`](./powershell/libres-softwares-install.ps1) | Installateur interactif pour une liste de logiciels sélectionnés. |
|
||||
| 🦊 [`powershell/Configure-FirefoxDefaults.ps1`](./powershell/Configure-FirefoxDefaults.ps1) | Définit Firefox ESR comme navigateur par défaut et force l'installation de uBlock Origin pour tous les utilisateurs. |
|
||||
| 🧹 [`powershell/Winget-Remove-BuiltInApps.ps1`](./powershell/Winget-Remove-BuiltInApps.ps1) | Suppression de certaines applications Windows intégrées pour l'utilisateur courant avec winget. |
|
||||
| 🚫 [`powershell/Remove-BuiltInApps.ps1`](./powershell/Remove-BuiltInApps.ps1) | Suppression de certaines applications Appx intégrées sans winget avec blocages registre pour les futurs utilisateurs. |
|
||||
| 🚀 [`winget/libre-soft-start-pack.yaml`](./winget/libre-soft-start-pack.yaml) | Pack automatisé de départ : Firefox ESR, 7-Zip et VLC. |
|
||||
@@ -44,7 +45,7 @@ Les packs YAML automatisés n'imposent pas de version précise de Windows. Ils n
|
||||
|
||||
## 🧭 Installateur Interactif
|
||||
|
||||
Choisis les logiciels à installer depuis un menu PowerShell.
|
||||
Choisis les logiciels à installer depuis un menu PowerShell. Quand Firefox ESR est installé depuis ce script, les paramètres Firefox par défaut et les policies uBlock Origin sont configurés automatiquement.
|
||||
|
||||
|
||||
|
||||
@@ -87,6 +88,14 @@ Exemple :
|
||||
winget configure --file .\winget\libre-soft-start-pack.yaml --accept-configuration-agreements
|
||||
```
|
||||
|
||||
Après l'installation d'un pack qui inclut Firefox ESR, lance le script de configuration Firefox depuis un terminal administrateur :
|
||||
|
||||
```powershell
|
||||
powershell -ExecutionPolicy Bypass -File .\powershell\Configure-FirefoxDefaults.ps1
|
||||
```
|
||||
|
||||
Le script écrit les policies Firefox, force l'installation de uBlock Origin depuis Mozilla Add-ons, configure les paramètres gérés de uBlock Origin et importe les associations d'applications Windows par défaut pour les futurs utilisateurs.
|
||||
|
||||
## 🧹 Supprimer des Applications Intégrées
|
||||
|
||||
Utilise le script de nettoyage Appx pour supprimer certaines applications intégrées sans winget et limiter leur reprovisionnement pour les nouveaux utilisateurs.
|
||||
|
||||
@@ -20,6 +20,7 @@ Small Windows toolkit to install libre software packs with `winget` and remove s
|
||||
| Path | Purpose |
|
||||
| --- | --- |
|
||||
| 🧭 [`powershell/libres-softwares-install.ps1`](./powershell/libres-softwares-install.ps1) | Interactive installer for a curated list of applications. |
|
||||
| 🦊 [`powershell/Configure-FirefoxDefaults.ps1`](./powershell/Configure-FirefoxDefaults.ps1) | Sets Firefox ESR as default browser and force-installs uBlock Origin for all users. |
|
||||
| 🧹 [`powershell/Winget-Remove-BuiltInApps.ps1`](./powershell/Winget-Remove-BuiltInApps.ps1) | Removes selected built-in Windows applications for the current user with winget. |
|
||||
| 🚫 [`powershell/Remove-BuiltInApps.ps1`](./powershell/Remove-BuiltInApps.ps1) | Removes selected built-in Appx applications without winget and writes registry blocks for future users. |
|
||||
| 🚀 [`winget/libre-soft-start-pack.yaml`](./winget/libre-soft-start-pack.yaml) | Automated starter pack: Firefox ESR, 7-Zip and VLC. |
|
||||
@@ -44,7 +45,7 @@ The automated YAML packs do not enforce a specific Windows release. They require
|
||||
|
||||
## 🧭 Interactive Installer
|
||||
|
||||
Choose the software you want to install from a PowerShell menu.
|
||||
Choose the software you want to install from a PowerShell menu. When Firefox ESR is installed from this script, Firefox defaults and uBlock Origin policies are configured automatically.
|
||||
|
||||
|
||||
|
||||
@@ -87,6 +88,14 @@ Example:
|
||||
winget configure --file .\winget\libre-soft-start-pack.yaml --accept-configuration-agreements
|
||||
```
|
||||
|
||||
After installing a pack that includes Firefox ESR, run the Firefox configuration script from an administrator terminal:
|
||||
|
||||
```powershell
|
||||
powershell -ExecutionPolicy Bypass -File .\powershell\Configure-FirefoxDefaults.ps1
|
||||
```
|
||||
|
||||
The script writes Firefox enterprise policies, force-installs uBlock Origin from Mozilla Add-ons, configures managed uBlock Origin defaults and imports Windows default app associations for future users.
|
||||
|
||||
## 🧹 Remove Built-In Apps
|
||||
|
||||
Use the Appx cleanup script when you want to remove selected built-in applications without winget and reduce reprovisioning for newly created users.
|
||||
|
||||
@@ -0,0 +1,207 @@
|
||||
# Requires running as administrator
|
||||
# Configures Firefox ESR as the default browser and force-installs uBlock Origin.
|
||||
|
||||
[CmdletBinding(SupportsShouldProcess = $true)]
|
||||
param(
|
||||
[string]$AssociationsPath = "$env:ProgramData\WindowsLibreSoftwareToolkit\FirefoxDefaultAssociations.xml"
|
||||
)
|
||||
|
||||
$ErrorActionPreference = "Stop"
|
||||
|
||||
$IsAdministrator = ([Security.Principal.WindowsPrincipal] [Security.Principal.WindowsIdentity]::GetCurrent()).IsInRole(
|
||||
[Security.Principal.WindowsBuiltInRole]::Administrator
|
||||
)
|
||||
|
||||
if (-not $IsAdministrator) {
|
||||
Write-Error "This script must be run from an administrator PowerShell session."
|
||||
exit 1
|
||||
}
|
||||
|
||||
function Get-FirefoxExecutablePath {
|
||||
$CandidatePaths = @()
|
||||
|
||||
$AppPath = Get-ItemProperty -Path "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\firefox.exe" -ErrorAction SilentlyContinue
|
||||
if ($AppPath -and $AppPath.'(default)') {
|
||||
$CandidatePaths += $AppPath.'(default)'
|
||||
}
|
||||
|
||||
$UninstallRoots = @(
|
||||
"HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\*",
|
||||
"HKLM:\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\*"
|
||||
)
|
||||
|
||||
foreach ($Root in $UninstallRoots) {
|
||||
$FirefoxInstall = Get-ItemProperty -Path $Root -ErrorAction SilentlyContinue |
|
||||
Where-Object { $_.DisplayName -like "Mozilla Firefox*" -and $_.InstallLocation } |
|
||||
Select-Object -First 1
|
||||
|
||||
if ($FirefoxInstall) {
|
||||
$CandidatePaths += (Join-Path $FirefoxInstall.InstallLocation "firefox.exe")
|
||||
}
|
||||
}
|
||||
|
||||
$CandidatePaths += @(
|
||||
"$env:ProgramFiles\Mozilla Firefox\firefox.exe",
|
||||
"${env:ProgramFiles(x86)}\Mozilla Firefox\firefox.exe"
|
||||
)
|
||||
|
||||
foreach ($Path in ($CandidatePaths | Where-Object { -not [string]::IsNullOrWhiteSpace($_) } | Select-Object -Unique)) {
|
||||
if (Test-Path $Path) {
|
||||
return (Resolve-Path $Path).Path
|
||||
}
|
||||
}
|
||||
|
||||
return $null
|
||||
}
|
||||
|
||||
function Get-FirefoxAssociationProgIds {
|
||||
$CapabilitiesPath = "HKLM:\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\Capabilities"
|
||||
$UrlAssociationsPath = Join-Path $CapabilitiesPath "URLAssociations"
|
||||
$FileAssociationsPath = Join-Path $CapabilitiesPath "FileAssociations"
|
||||
|
||||
$UrlAssociations = Get-ItemProperty -Path $UrlAssociationsPath -ErrorAction SilentlyContinue
|
||||
$FileAssociations = Get-ItemProperty -Path $FileAssociationsPath -ErrorAction SilentlyContinue
|
||||
|
||||
$HttpProgId = $UrlAssociations.http
|
||||
$HttpsProgId = $UrlAssociations.https
|
||||
$HtmlProgId = $FileAssociations.".html"
|
||||
$HtmProgId = $FileAssociations.".htm"
|
||||
|
||||
if (-not $HttpProgId) {
|
||||
$HttpProgId = "FirefoxURL-308046B0AF4A39CB"
|
||||
}
|
||||
|
||||
if (-not $HttpsProgId) {
|
||||
$HttpsProgId = $HttpProgId
|
||||
}
|
||||
|
||||
if (-not $HtmlProgId) {
|
||||
$HtmlProgId = "FirefoxHTML-308046B0AF4A39CB"
|
||||
}
|
||||
|
||||
if (-not $HtmProgId) {
|
||||
$HtmProgId = $HtmlProgId
|
||||
}
|
||||
|
||||
return [PSCustomObject]@{
|
||||
Http = $HttpProgId
|
||||
Https = $HttpsProgId
|
||||
Html = $HtmlProgId
|
||||
Htm = $HtmProgId
|
||||
}
|
||||
}
|
||||
|
||||
function Set-FirefoxEnterprisePolicies {
|
||||
param(
|
||||
[string]$FirefoxExe
|
||||
)
|
||||
|
||||
$FirefoxDirectory = Split-Path -Parent $FirefoxExe
|
||||
$DistributionDirectory = Join-Path $FirefoxDirectory "distribution"
|
||||
$PoliciesPath = Join-Path $DistributionDirectory "policies.json"
|
||||
|
||||
$Policies = [ordered]@{
|
||||
policies = [ordered]@{
|
||||
DontCheckDefaultBrowser = $true
|
||||
DisableDefaultBrowserAgent = $true
|
||||
ExtensionSettings = [ordered]@{
|
||||
"uBlock0@raymondhill.net" = [ordered]@{
|
||||
installation_mode = "force_installed"
|
||||
install_url = "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
|
||||
}
|
||||
}
|
||||
"3rdparty" = [ordered]@{
|
||||
Extensions = [ordered]@{
|
||||
"uBlock0@raymondhill.net" = [ordered]@{
|
||||
adminSettings = [ordered]@{
|
||||
selectedFilterLists = @(
|
||||
"user-filters",
|
||||
"ublock-filters",
|
||||
"ublock-badware",
|
||||
"ublock-privacy",
|
||||
"ublock-abuse",
|
||||
"ublock-unbreak",
|
||||
"ublock-quick-fixes",
|
||||
"easylist",
|
||||
"easyprivacy",
|
||||
"urlhaus-1",
|
||||
"plowe-0"
|
||||
)
|
||||
userSettings = [ordered]@{
|
||||
advancedUserEnabled = $false
|
||||
cloudStorageEnabled = $false
|
||||
contextMenuEnabled = $true
|
||||
showIconBadge = $true
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
if ($PSCmdlet.ShouldProcess($PoliciesPath, "Write Firefox enterprise policies")) {
|
||||
New-Item -Path $DistributionDirectory -ItemType Directory -Force | Out-Null
|
||||
$Policies | ConvertTo-Json -Depth 12 | Set-Content -Path $PoliciesPath -Encoding UTF8
|
||||
Write-Host "Firefox enterprise policies written: $PoliciesPath" -ForegroundColor Green
|
||||
}
|
||||
}
|
||||
|
||||
function Set-FirefoxDefaultAssociations {
|
||||
param(
|
||||
[string]$OutputPath
|
||||
)
|
||||
|
||||
$ProgIds = Get-FirefoxAssociationProgIds
|
||||
$OutputDirectory = Split-Path -Parent $OutputPath
|
||||
|
||||
$Xml = @"
|
||||
<?xml version="1.0" encoding="UTF-8"?>
|
||||
<DefaultAssociations>
|
||||
<Association Identifier=".htm" ProgId="$($ProgIds.Htm)" ApplicationName="Firefox" />
|
||||
<Association Identifier=".html" ProgId="$($ProgIds.Html)" ApplicationName="Firefox" />
|
||||
<Association Identifier="http" ProgId="$($ProgIds.Http)" ApplicationName="Firefox" />
|
||||
<Association Identifier="https" ProgId="$($ProgIds.Https)" ApplicationName="Firefox" />
|
||||
</DefaultAssociations>
|
||||
"@
|
||||
|
||||
if ($PSCmdlet.ShouldProcess($OutputPath, "Write Firefox default app associations")) {
|
||||
New-Item -Path $OutputDirectory -ItemType Directory -Force | Out-Null
|
||||
Set-Content -Path $OutputPath -Value $Xml -Encoding UTF8
|
||||
Write-Host "Default app associations written: $OutputPath" -ForegroundColor Green
|
||||
}
|
||||
|
||||
$SystemPolicyPath = "HKLM:\SOFTWARE\Policies\Microsoft\Windows\System"
|
||||
|
||||
if ($PSCmdlet.ShouldProcess($SystemPolicyPath, "Set default associations policy")) {
|
||||
New-Item -Path $SystemPolicyPath -Force | Out-Null
|
||||
New-ItemProperty -Path $SystemPolicyPath -Name "DefaultAssociationsConfiguration" -Value $OutputPath -PropertyType String -Force | Out-Null
|
||||
Write-Host "Default associations policy configured." -ForegroundColor Green
|
||||
}
|
||||
|
||||
if ($PSCmdlet.ShouldProcess("DISM", "Import default app associations for new users")) {
|
||||
$Arguments = "/Online", "/Import-DefaultAppAssociations:$OutputPath"
|
||||
$Process = Start-Process -FilePath "dism.exe" -ArgumentList $Arguments -NoNewWindow -Wait -PassThru
|
||||
|
||||
if ($Process.ExitCode -ne 0) {
|
||||
Write-Warning "DISM failed to import default app associations. Exit code: $($Process.ExitCode)"
|
||||
}
|
||||
else {
|
||||
Write-Host "Default app associations imported for future users." -ForegroundColor Green
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
$FirefoxExe = Get-FirefoxExecutablePath
|
||||
|
||||
if (-not $FirefoxExe) {
|
||||
Write-Error "Firefox was not found. Install Firefox ESR first, then run this script again."
|
||||
exit 1
|
||||
}
|
||||
|
||||
Write-Host "Firefox found: $FirefoxExe" -ForegroundColor Cyan
|
||||
Set-FirefoxEnterprisePolicies -FirefoxExe $FirefoxExe
|
||||
Set-FirefoxDefaultAssociations -OutputPath $AssociationsPath
|
||||
|
||||
Write-Host ""
|
||||
Write-Host "Firefox defaults configured. Restart Windows or sign out before creating/testing new users." -ForegroundColor Green
|
||||
@@ -105,6 +105,18 @@ foreach ($logiciel in $logicielsAInstaller) {
|
||||
|
||||
if ($process.ExitCode -eq 0) {
|
||||
Write-Host "OK $($logiciel.Nom) installe avec succes" -ForegroundColor Green
|
||||
|
||||
if ($logiciel.ID -eq "Mozilla.Firefox.ESR.fr") {
|
||||
$configurationFirefox = Join-Path $PSScriptRoot "Configure-FirefoxDefaults.ps1"
|
||||
|
||||
if (Test-Path $configurationFirefox) {
|
||||
Write-Host "Configuration de Firefox ESR comme navigateur par defaut avec uBlock Origin..." -ForegroundColor Cyan
|
||||
& $configurationFirefox
|
||||
} else {
|
||||
Write-Warning "Script de configuration Firefox introuvable: $configurationFirefox"
|
||||
}
|
||||
}
|
||||
|
||||
$reussites++
|
||||
$resultats += @{Logiciel = $logiciel.Nom; Statut = "Succes"}
|
||||
} else {
|
||||
@@ -138,4 +150,4 @@ Write-Host "Total: $reussites reussite(s), $echecs echec(s)" -ForegroundColor $(
|
||||
Write-Host "===========================================================" -ForegroundColor Cyan
|
||||
Write-Host ""
|
||||
Write-Host "Appuyez sur une touche pour quitter..."
|
||||
$null = $Host.UI.RawUI.ReadKey("NoEcho,IncludeKeyDown")
|
||||
$null = $Host.UI.RawUI.ReadKey("NoEcho,IncludeKeyDown")
|
||||
|
||||
Reference in New Issue
Block a user