Norton adds ImportEnterpriseRoots policy for Firefox

Hi,
I have a fresh (personal) install of Windows11Pro (all updates), Norton360 (24.11.9615), Firefox (newest) and Chrome (newest) - nothing more.
On Firefox (in settings) I’ve got message “Your browser is being managed by your organization.”
It is caused by the “ImportEnterpriseRoots” policy. It’s the only one policy, IMO, added by Norton.
I can manually remove it with Regedit but after a reboot, the policy is added again.
I removed/recreated Firefoxe profiles but without any effect.
I tried to switch off several options (e.g. completely switching off “Safe Web” and “Browser Data Protection”) in Norton settings but the only case when it disappeared for good was after de-installation of Norton.
I have also other PCs at home (older OS), the same FireFox and older Norton but without this annoying message.
Two questions:
Do you have the same message (“Your browser is being managed by your organization.”) with Firefox and new Norton 360 ?
If yes, do you know how to get ride of it for good and still be able to use Norton ?

If you remove that policy via registry or not it can cause your Norton product to not function, what is the real sense in doing that? The policy you are seeing IS used by A/V solution to validate SSL connections, again what is the benefit of disabling that? And its related to FireFox, FF is adding it back I would guess when you load it for your next session. Please post a screenshot related to the registry entry you are editing for review.

https://support.mozilla.org/en-US/questions/1306557

SA

I uninstalled Norton v.24 and installed v.22 . Older version does not add this policy and no issue with message “Your browser is being managed by your organization.”
This policy is for: “Set up Certificate Authorities (CAs) in Firefox | Firefox for Enterprise Help”.
It is not required in old Norton version, it is not required in Chrome and Edge either. It is NOT Firefox that adds it back. I tested it without Norton and it is NOT added.
This option should be used only in corporate installation when a company wants to have additional control/view of its own PC.
Your link to Norton Support is not really relevant to my case. It concerns issue with Norton installation.

1 Like

Screenshots would be prudent. What registry key are you referring to? I stand by my statement, I wouldn’t disable a registry setting that puts me at risk. For the record, Norton products are NOT designed for nor used in a corporate setting.

SA

To make screenshots, I will need again update Norton to the newest V24 version.
The reg key is:
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Mozilla\Firefox\Certificates
The only entry is: ImportEnterpriseRoots
After removal, the “Your browser is being managed by your organization.” message is not displayed. But after reboot, the new V24 Norton again switch the policy on and the message appears again.
I am using Norton 360 Deluxe for my home, I have 5 licenses for all PCs at HOME.
The issue is only appearing in my new desktop with Win11 and the newest version of Norton.

1 Like

Below is what I see WITHOUT FireFox installed on either Windows 10 or 11 machines: The entry does exist with Windows 11 on the current version of 24.xx Norton. Change the dword to 0 vice removal of the entry, see what your results are.

Windows 10 Pro: Norton 360 Deluxe version 22.24.8.36

Windows 11 Pro: Norton 360 version 24.xx

SA

  1. Yes - 24.11.9615 (build 24.11.9615.891)
  2. No

Note: v24 Browser Protection is now Safe Web

Learn More → here

Note: Web Shield = Browser Protection = Safe Web

================================================

Learn more
How to disable the Enterprise Roots preference here Last updated: 6/5/22

More information

@bjm My earlier post suggested; Change the dword to 0 vice removal of the entry, see what your results are.