Deactivate Browser Password Managers Using Device Management

1. Open Group Policy Management Editor on your managing Windows server.

2. Download the Google Chrome Administrative Templates.

3. In the ADMX file, copy the following:
   policy_templates\windows\admx\chrome.admx
and
policy_templates\windows\admx\google.admx

TO C:\Windows\PolicyDefinitions

4. In the ADML file, copy the following:
   policy_templates\windows\admx\en-us\chrome.adml
and
policy_templates\windows\admx\en-us\google.adml

   TO C:\Windows \PolicyDefinitions\en-us

5. In Group Policy Editor, create a new GPO for Chrome and provide an appropriate name.

6. Choose your desired scope.

7. Right-click the Group Policy Object → Edit.

8. Go to User Configuration → Policies → Administrative Templates → Google → Google Chrome.

9. Edit the following settings:

   • Under "Password Manager," disable the policy Enable saving passwords to the password manager.

   • Disable the policy Enable AutoFill for Addresses.

   • Disable the policy Enable AutoFill for credit cards.

10. Once complete, the GPO settings should show the following:
    

    

11. Ensure the GPO link is enabled.

1. Open Group Policy Editor on your managing Windows server.

2. Download the latest Firefox Policy Templates .zip file.

3. Copy the ADMX file:
   FROM the downloaded folder policy_templates_v1.##\windows\firefox.admx & mozilla.admx
   TO C:\Windows\PolicyDefinitions

4. Copy the ADML file
   FROM policy_templates\windows\en-us\firefox.adml & mozilla.adml
   TO C:\Windows \PolicyDefinitions\en-us

5. In Group Policy Editor, create a new GPO for FireFox and provide an appropriate name.

6. Choose your desired scope.

7. Right-click the new group policy → Edit.

8. Open User Configuration → Policies → Administrative Templates → Mozilla → Firefox.

9. Locate and edit the following policies:

   • Disable the policy Disable Firefox Accounts.

   • Disable the policy Offer to save logins.

   • Disable the policy Offer to save logins (default).

   • Disable the policy Password Manager.

10. Once complete, the GPO settings should show the following:
    

    

11. Ensure the GPO link is enabled.

1. On a user's computer, Open the command line, and run:
   gpupdate /force.

2. Open Chrome and click the profile icon on the top right. See that the user is not signed in.

3. Open Chrome, then click the three dots ... → Settings → Passwords. See that Offer to save passwords is unchecked and managed by the organization.
   

1. On a user's computer, Open the command line, and run:
   gpupdate /force.

2. Open Firefox and select Logins and Passwords from the menu bar.

3. Ensure that a "Blocked Page" message is displayed.

To disable the Firefox Manager via group policy:

1. Download Firefox for Linux.

2. Open a terminal and navigate to the directory your download has been saved to. For example:
cd ~/Downloads

3. Extract to contents of the downloaded file:


   Bash
   tar xjf firefox-*.tar.bz2

   The following commands must be executed as root, or preceded by sudo.

4. Move the uncompressed Firefox folder to /opt:
   

   Bash
   mv firefox /opt

5. Create a symlink to the Firefox executable:
   

   Bash
   ln -s /opt/firefox /usr/local/bin/firefox

6. Download a copy of the desktop file:
   

   Bash
   wget https://raw.githubusercontent.com/mozilla/sumo-kb/main/install-firefox-linux/firefox.desktop -P /usr/local/share/applications
   

7. To disable Firefox's built-in password manager, add the following to policies.json inside of "policies": {}:
   

   Bash
   {
    "PasswordManagerEnabled": false
   }

8. Create the following directory if it does not already exist:
   

   Bash
   mkdir /opt/firefox/distribution
   

9. Modify the directory with the following:
   

   Bash
   chmod 755 /opt/firefox/distribution
   

10. Additionally, we recommend admins should add the following to files to prevent modifications to the files themselves:
    

    Bash
    chmod 644 /opt/firefox/distribution/policies.json

11. Using your preferred software distribution or MDM tool, deploy the following to users' machines:

12. Firefox Browser

13. /distribution/policies.json

1. Download and install Firefox for Enterprise for macOS.

2. Create a distribution directory in Firefox.app/Contents/Resources/.

3. In the created /distribution directory, create a new file org.mozilla.firefox.plist.
   

   tip

   Use the Firefox .plist template and Policy README for reference.

4. To disable Firefox's built-in password manager, add the following to org.mozilla.firefox.plist:
   

   Bash
   <dict>
     <key>PasswordManagerEnabled</key>
     <false/>
   </dict>

5. Convert the org.mozilla.firefox.plist file to a configuration profile using a conversion tool of your choice.

6. Deploy the Firefox .dmg and the configuration profile using your software distribution or MDM tool to all managed computers.

For additional information, see Firefox's documentation for MacOS configuration profiles.

1. Download the Microsoft Edge for macOS .pkg file.

2. In Terminal, use the following command to create a .plist file for Microsoft Edge:
   

   Bash
   /usr/bin/defaults write ~/Desktop/com.microsoft.Edge.plist RestoreOnStartup -int 1

3. Use the following command to convert the .plist from binary to plain text:
   

   Bash
   /usr/bin/plutil -convert xml1 ~/Desktop/com.microsoft.Edge.plist

4. To disable Edge's built-in password manager, add the following to com.microsoft.Edge.plist:
   

   Bash
   <key>PasswordManagerEnabled</key>
   <false/>

5. Deploy the Edge .pkg and the configuration profile using your software distribution or MDM tool to all managed computers.
   

   tip

   For Jamf-specific help, refer to Microsoft's documentation on Configuring Microsoft Edge policy settings on macOS with Jamf.

   For additional information, see Edge's documentation for configuration profiles.