Firefox 57 (Quantum) in a corporate environment. 

Filed under: Uncategorized on Wednesday, December 13th, 2017 by | 1 Comment

When i first heard the intention of Mozilla, to abandon the XUL-extension-interface, i was shocked.
How the hell should i deliver a satisfying user experience to our customers, without multi-language interface, Noscript, Adblock and custom configuration?
In the meantime, FF57 has landed, the dust is blown away and our first in-house release of Firefox 57 (57.0.2) is on the deployment system.
What features and extensions did survive the extreme renovation?
First of all: Noscript and Adblock Plus
Further more: Multi-lingual feature with all our Languages spoken here in Switzerland, which automatically follows the OS-Language.
And least but not last: An even better implementation of the GPO-Extension for Firefox!

To achieve all this, quite some work was needed.
The multi-lingual interface, which in theory was already there through the function of the pref “intl.locale.matchOS”, was never usable on Windows.
This is now fixed from V57 onward. See: https://bugzilla.mozilla.org/show_bug.cgi?id=1413866
Zibi, thank you for your fast, straight forward approach and work!

The GPO functionality has been moved to Autoconfig/CCK2.
Thank goes to Pavel Kardash @ https://mozillagpo.sourceforge.io/ for putting together a perfect working Javascript-Module for this.
Just create your autoconfig with the famous CCK2 from Mike Kaply (https://mike.kaply.com/cck2/) and append the 2 lines to cck2.cfg to call the gpo.jsm and you are done!

Adblock Plus seems to work on FF57 out of the box like always.
Noscript is a bit trickier. We had to wait for several week, until with 10.1.5.7, it was quite stable and usable again.
Another story here is to deploy a custom default white-list. We could not find a way to populate this in Autoconfig with Javascript. Maybe later…
In the meantime, we use the default profile functionality from CCK2 to copy a preconfigured “storage-sync.sqlite” file to new profiles.

And with the help of NANT, WIX, 7zip and Powershell, a fully automated build process, gives us a stable MSI-package and several Transforms, in less than 10 min.

Enhance a Lenovo Thinkpad T440p with physical TrackPoint buttons 

Filed under: Hardware on Monday, January 2nd, 2017 by | 5 Comments

The Thinkpad T440p is a real nice device… if there wouldn’t be the missing physical mouse buttons when working with the trackpoint.
Lenovo/Synaptics tried to sacrifice the buttons in favor of a bigger touchpad… and failed gloriously!
Fortunately, they realized it (with the help of thousands of users…) pretty quick. The successor of the T440 series, the 450 had the buttons back on it!
And even better: Those T450 Touchpad-Buttons-Combo is compatible with the T440 series.
And yes, they are sold for € 20-30 on ebay. I bought one from here.
To actually do the work, you need the maintenance manual. Lenovo has it online for most of their products. You can get it here.
Unfortunately it is not quite accurate, when it comes to the removal of the keyboard bezel, which houses the trackpad.
There are a lot of unnecessary steps listed. You only need to remove the battery, the big door and the optical drive to detach the bezel!
Be careful with the removal of the old touchpad! There are 2 cables! One ribbon cable which is clearly seen. And a second, black one with 3 leads on the right side (when looking at the screws)! The new Pad did not have this second cable anymore.
After the assembly a first test… a disappointing one: The buttons had no signs of life! at least, the touchpad was working.
That led me to the assumption, that there must be a configuration problem.
Some googleing later, it slowly appeared, that there must be a configuration problem in the Win10 – Synaptics-driver – BIOS (PCIID) triangle.
It looks like, that the touchpad itself does not have any intelligence on it. That means, even when you change the pad, the PCIID stays the same.
The blog of Cameron Gray was a big help in this findings. And down in comments of his blog, there is a guy, nicknamed “flyoil”, who outlines a possible solution. However, for this to work, one has to break driver signing and disable automatic Updates for drivers, because he changes the drivers INF file, to connect the existing PCIID with the new touchpad.
That led me to the idea, to look for the differences between the installations for the old and the new pad. After a (longer) look at the INF-file, i was left with only 12 registry keys, which where different! In detail:
The PCIID of the Touchpad on my T440p is ACPI\LEN0039
The PCIID of the Touchpad on an T450s is ACPI\LEN200E
So, I installed the latest Synaptics driver from the T450s driver page (jbg211ww.exe), which installed the driver group 12 (see SynPD.inf for details). After that, i searched the x64/SynPD.inf file for differences between
[LENOVO_GROUP41_InterTouch_Inst]
and
[LENOVO_GROUP12_InterTouch_Inst]

The following registry entries sets the right configuration for the new pad:

Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SynTP\Parameters]
"ExtraCapabilities7Add"=dword:00010000
"ExtraCapabilities7Mask"=dword:FFFFFFFF
"ProcessUnexpectedResetDuringDetection"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Synaptics\SynTP\Defaults]
"SlaveLeftButtonZoneR"=dword:00000d80
"SlaveLeftButtonZoneB"=dword:00000f40
"SlaveRightButtonZoneL"=dword:00000d81
"SlaveRightButtonZoneB"=dword:00000f40
"SlaveMiddleButtonZoneL"=dword:00000b57
"SlaveMiddleButtonZoneR"=dword:00000fa9
"SlaveMiddleButtonZoneB"=dword:0000112e

[HKEY_LOCAL_MACHINE\SOFTWARE\Synaptics\SynTPEnh]
"ScrollMethod"=dword:00000005
"SynapticsScrollMethodSpeedFactor"=dword:00005000

Put this into a REG-file and apply it with admin rights and after a reboot, the buttons are in full business!
Good luck,
Nick

tags: , , , ,

ADMX Template and improved GPO-Extension for Firefox 

Filed under: Uncategorized on Friday, September 20th, 2013 by | 7 Comments

Hi folks,
finally, i found the time to publish an piece of extra software, which we successfully used for years.
The basic is the GPO for Firefox Extension from here:
https://addons.mozilla.org/de/firefox/addon/gpo-for-firefox/
See also:

However, since we use GPO’s for different Mozilla-products, we changed the keys, where the Policies are written in the registry.
Computer context:
HKLM/Software/Policies/Firefox
HKLM/Software/Policies/Firefox/locked

User context:
HKCU/Software/Policies/Firefox
HKCU/Software/Policies/Firefox/locked

Therefore, the paths in the ADMX-template point to this locations.

There are still a lot of preferences missing from the template. But it’s a start and adding new ones is not that hard.

gpo_for_firefox-0.9.2-fx-ETH.xpi
Firefox.admx

Version 1.1 of ADMX Template for Reader/Acrobat 

Filed under: Uncategorized on Sunday, March 13th, 2011 by | 2 Comments

Here is Version 1.1 of the ADMX-Template to control important settings in Adobes Acrobat and Reader. Now with support for Acrobat/Reader X.
New feature is the the control of the protected mode, which was introduced in Reader X.

ADMX Template for Adobe Reader/Acrobat 

Filed under: Uncategorized on Wednesday, February 10th, 2010 by | 6 Comments

Here is an newly created ADMX-Template for disabling the most dangerous security issues in Adobes Acrobat and Reader. With it, you can disable JavaScript globally for version 7-9 of the mentioned products. There is also an option to block JavaScript functions with an entry into the blacklist. It has been done in ADMX to make use of the new Central Store functionality introduced in Server 2k8 AD.

Welcome to my blog space 

Filed under: Uncategorized on Wednesday, June 27th, 2007 by | 1 Comment

Hello, dear reader.
Welcome to my blog. On this site, i will post different aspects of Windows deployment.