Common Error

[AhmedSHMK]

Hello All,

I am running into an error that seams to repeat for different policies but happens on some devices and not all.

Error usually is as below: From location (Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Admin)

MDM ConfigurationManager: Command failure status. Configuration Source ID: (GUID), Enrollment Name: (MDMDeviceWithAAD), Provider Name: (Policy), Command Type: (Add: from Replace or Add), CSP URI: (./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/ExtensionSettings), Result: (The system cannot find the file specified.).

-With this particular error, It is installing the Purview(DLP) extension for Firefox(Bit this happens with other settings as well).

Can you confirm what could be the reason for this?

[#2]

How is the policy setup? Have you imported the Firefox admx template in Intune?

[#3]

-Policy is setup as explained in the documentation below:
https://learn.microsoft.com/en-us/purview/dlp-firefox-extension-get-started
-Admx for Firefox/chrome, Mozilla, Google and Windows.admx were all imported to Intune.

[#4]

Apart from the event log, is the policy actually applying on the devices? What is the compliance status on Intune?

[#5]

The policy distribution status shows an error in Intune portal so far, error code:
-2016281112

ExtensionSettings [./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/ExtensionSettings]
STATE
Error
SOURCE PROFILES
Source Profile
FireFox
ERROR CODE
0x87d1fde8

-On the device itself (policy does not show yet in access work or school -> profile -> info)
-Google Purview extension works fine and is downloaded after admx policy import

[#6]

I am starting to think the issue is with firefox itself, The chrome extension works well, GPO was also tested before but firefox extension fails to be downloaded.
Importing Admin templates also was attempted with the same output https://learn.microsoft.com/en-us/mem/intune/configuration/administrative-templates-import-custom

[#7]

The XPI link in the official documentation also does not point to any valid URL, The below error is returned from different networks.

Hmm. We’re having trouble finding that site.

We can’t connect to the server at firefoxdlp.blob.core.windows.net.

If you entered the right address, you can:

• Try again later
• Check your network connection
• Check that Firefox has permission to access the web (you might be connected but behind a firewall)

[#8 · Accepted solution]

FYI for any one Interested, MS modified the article Yesterday. (https://learn.microsoft.com/en-us/purview/dlp-firefox-extension-get-started)

The new link for the firefox extension is: https://github.com/microsoft/purview/raw/main/endpointDLP/browser_extension/prod-1.1.0.212.xpi , Works fine both in GPO and Intune.