What features would you add to Firefox to get it into the enterprise?

If it came in MSI format for easy installation to Windows workstations, and could be managed by GPO and Apple Open Directory then it would be perfect. It would also need to work well with things like Sharepoint, but I suspect that's an issue for the people designing sites in Sharepoint rather than Mozilla.

I know there's currently a fork of firefox that is designed to work with GPOs, but I'm talking about having it work with the "standard" product out of the box, and being able to control and lock down and any all preferences.

As neobyte says, patch management is also an issue. Firefox's current method doesn't scale for business imho.

EDIT: Extension management - this needs to be controllable by the enterprise too, there needs to be a way to roll out and "lock" into place a standard set of extensions, regardless of whether or not you want users to be able to add their own, possibly to nominate a trusted location of your own where you publish "approved" extensions, that kind of thing.

NTLM auth - looks like there's a hack to add this to the browser anyway if you look around the web but this needs to be obviously better exposed.

It's annoying that I'm registered by can't comment until I reach a reputation of 50. Why do i need that to comment?

Anyways, to p858snake: Firefox ADM is not real GPO management, it's cheating. It's cheating by:

1. Inject some reg keys into registry
2. Use a .vbs as logon script to read these registries, then modify prefs.js file accordingly

As a result,

1. You are adding one more logon script. Logon scripts are bad and need to be kept to minumum.

2. There is no enforcing effect on what the vbs does. User can change the settings manually by going to about:config.

About how to help Firefox make it into enterprise:

• GPO GPO GPO
• Centralized update infrastructure

That's it!

They need to get a group of developers at Mozilla who care about anything other than folks at home.

Let's think about the deficiencies of Firefox:

• No good, documented way to mirror the Firefox update repository and have clients pull down updates locally when approved.
• No good, documented way to mirror the Firefox add-on update repository and have clients pull down updates locally when approved.
• No standard way of applying extensions.
• No standard way of installing the application via systems management tools on platforms other than Linux. (And with Linux you're limited to whatever your distro packages)
• A settings mechanism that's is about as manageable as Windows 95 was back in the bad old days.
• A downright hostile attitude towards people who want to do something about these issues.

You'll see good alternatives as Safari and Chrome mature. Forget about Firefox.

You'd have to break a feature in FF to get this working but,

• Pass through authentication of the Windows user credentials.

We have a number of web apps that use authentication and making users logon everytime in FF would just be painful.

A way to remotely force upgrades. WSUS controls IE upgrades, there's no equivalent for Firefox, you just can't rely on users to keep on top of updates.

We've seen users sneak Firefox onto their machines, even though they are not local admins. As it doesn't "install" you just need the expanded distribution on a network share and just run firefox.exe direct over the network. They found this out themselves when they discovered that IE6 (our SOE browser) is incompatible with a growing number of apps. So it can sneak in the backdoor!

A big reason for not using Firefox is the lack of official ActiveX support. We have a number of these around the business.

Managing settings via GPO can already be done by a third party package called Firefox ADM.

These features are missing:

Manageable by group policy, especially proxy settings.

No ActiveX support, some our applications we use require this.

OWA Premium (Although this should change with next version of OWA).

A way to centrally manage Firefox Add-ons and Updates.

People here complained after upgrading from IE6 to IE7.
It's hard to force everyone to use something else.

This is only my enviroment and probably does not apply to many other people, but we run in a Terminal Services enviroment. My main reason for not deploying Firefox is because of memory usage. Even in Firefox 3 we still see massive (2GB plus) Firefox browsers running. Where as IE runs in much less RAM (500-800 MB) for the same people.

Firefox can be widely deployed and managed in the enterprise, given enough resources - IBM deployed and managed baseline configuration defaults through their internal workstation management tool. I know people at "enterprisey" organizations that do this with Firefox as well because the benefits over IE outweigh the negatives.

However, the biggest barrier I've heard/seen with Firefox is that many internal web applications are simply IE only. ActiveX aside, the cost of updating the web app's content (or getting the vendor to) is too high. I'm talking about HTML/CSS/JavaScript presentation stuff that can be browser dependent, and of course the ActiveX, MS-specific development tools, whatever else makes sites 'IE only'.

Also mentioned was user education. People get used to a specific software application, be it IE, MS Word or Windows itself, and they dont want to change. Or training them to use something else is too costly. It doesn't matter if we technical people can switch between applications on a whim. It doesn't even matter if the new application is pixel-for-pixel the same program, some users see a different icon and their entire world explodes.