Free tools Windows power users keep installed
One-click scans. No signup required.
Some links on this page are affiliate links: if you buy through them we may earn a commission, at no extra cost to you.
The current way to deploy Mozilla Firefox to managed Windows devices is through Intune’s Microsoft Store app (new) integration—not the retired Microsoft Store for Business workflow used by many older guides.
In the 2021 HTMD Blog procedure, administrators acquired Firefox in Microsoft Store for Business and synchronized it into Intune. Microsoft Store for Business and Microsoft Store for Education were retired on March 31, 2023. Today, add Firefox directly from Apps > All apps > Create > Microsoft Store app (new), assign it to a pilot or production group, and monitor the result in the Microsoft Intune admin center.
| # | Preview | Product | Price | |
|---|---|---|---|---|
| 1 |
|
Microsoft Windows 11 (USB) | $128.99 | Buy on Amazon |
| 2 |
|
Microsoft Windows 11 PRO (Ingles) FPP 64-BIT ENG INTL USB Flash Drive | $149.99 | Buy on Amazon |
| 3 |
|
Microsoft System Builder | Windоws 11 Home | Intended use for new systems | Install on a new PC |... | $119.99 | Buy on Amazon |
What changed since the old MEM Intune method?
The historical procedure used Microsoft Store for Business:
- Acquire Firefox in Microsoft Store for Business.
- Open the former Microsoft Endpoint Manager administration experience.
- Synchronize the Store connection through Tenant administration > Connectors and tokens.
- Deploy the synchronized Firefox application from Intune.
That is no longer the standard deployment path. Microsoft Store for Business was retired on March 31, 2023. The current method adds a catalog application directly from Intune using the modern Microsoft Store integration. Microsoft’s migration guidance is available in its documentation on managing MSIX deployment in the enterprise.
#1 Best Overall
- Less chaos, more calm. The refreshed design of Windows 11 enables you to do what you want effortlessly.
- Biometric logins. Encrypted authentication. And, of course, advanced antivirus defenses. Everything you need, plus more, to protect you against the latest cyberthreats.
- Make the most of your screen space with snap layouts, desktops, and seamless redocking.
- Widgets makes staying up-to-date with the content you love and the news you care about, simple.
- Stay in touch with friends and family with Microsoft Teams, which can be seamlessly integrated into your taskbar. (1)
“MEM Intune” and “Endpoint Manager” are also historical names. The current administration portal is the Microsoft Intune admin center.
When the Microsoft Store method is a good fit
Use the Store-based deployment when your organization wants a straightforward Firefox installation with minimal packaging and maintenance. Microsoft says the modern integration supports Store applications, including packaged Win32 applications, and provides Intune monitoring. Store-deployed applications are generally kept updated by the Store when new versions become available.
This method is particularly suitable when:
- You accept Store-controlled update timing.
- Managed devices have reliable access to Microsoft Store content services.
- Firefox does not require custom installation scripting.
- You want to avoid maintaining an installer package.
- The Firefox listing is visible in your tenant’s Store search.
It is not the best choice when you need exact version pinning, custom install switches, staged rollback, complex dependencies, or a completely controlled internal content source. In those cases, use a Win32 deployment instead.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Prerequisites
Confirm the following before creating the application:
- An Intune-capable tenant and an account with permission to create and assign applications.
- Windows 10 or Windows 11 devices enrolled in Intune and actively checking in.
- A supported Windows edition. Microsoft’s Windows deployment matrix lists Microsoft Store app (new) support for Pro, Business, Enterprise, Education, and S mode, but not Windows Home.
- At least two logical processors on the target device, as specified in Microsoft’s current Store-app documentation.
- Support for the Intune Management Extension on the device.
- Network access to Microsoft Store delivery services and required content endpoints.
- No proxy, firewall, TLS inspection, or outbound filtering rule that blocks Store delivery.
- A Firefox listing that is visible in the target tenant’s Store search.
- A decision about whether the app will be targeted to users or devices.
Also inventory existing Firefox installations. A device may already have Firefox from the Microsoft Store, Mozilla’s EXE or MSI installer, an enterprise software catalog, or another management platform. Decide whether the rollout will preserve, replace, remove, or temporarily coexist with the existing installation.
See Microsoft’s Windows app deployment guidance and Microsoft Store configuration documentation for current platform requirements.
Add Firefox to Intune
- Sign in to the Microsoft Intune admin center.
- Select Apps.
- Select All apps.
- Select Create.
- Under Select app type, choose Microsoft Store app (new).
- Select Search the Microsoft Store app.
- Search for
Mozilla Firefox. If necessary, search forFirefox. - Select the correct Mozilla listing.
- Review the app name, publisher, package type, and any available Store identifier.
- Review the application information and configure the installation context if that option is exposed for the listing.
- Add scope tags if your organization uses them.
- Configure assignments.
- Select Review + create, confirm the settings, and create the application.
Microsoft documents this flow in Add Microsoft Store apps to Microsoft Intune. The exact fields can vary by package type, Windows version, and changes to the Store catalog.
Choose the installation context
The installation context determines who receives Firefox and where it is registered.
User context
In user context, Firefox is installed for the signed-in user. This can be appropriate for individually assigned employees, but installation may not occur until that user signs in. Do not assume that a user-targeted deployment automatically makes Firefox available to every user of a shared computer.
Device or system context
Device or system context deploys the application to the device and can be more appropriate for shared computers, Windows Autopilot scenarios, or device-based targeting. When the selected behavior requires device context, assign the application to a device group rather than a user group.
Rank #2
- MICROSOFT WINDOWS 11 PRO (INGLES) FPP 64-BIT ENG INTL USB FLASH DRIVE
Shared devices, multi-user computers, Azure Virtual Desktop, and Windows 365 environments require explicit testing. Actual behavior depends on the Firefox package type, Store listing, Windows version, Intune options, and assignment context.
Do these 3 things before closing this tab:
1Fix the driver behind crashes, sound loss and screen glitches2Clear out junk files and repair common Windows errors3Scan for outdated or missing drivers - takes under a minuteAssign Firefox
Required
A Required assignment tells Intune to install Firefox automatically on targeted users or devices. It is the usual choice for a standard browser baseline or a controlled pilot.
Available
An Available assignment lets users initiate installation through Company Portal where supported. It is better when Firefox is optional, but it is not suitable when every targeted device must have the browser.
Uninstall
An Uninstall assignment tells Intune to remove the Store app from targeted users or devices. Test this carefully when another Firefox package—such as an MSI or EXE installation—also exists.
Start with a small pilot group. Check that the group type matches the installation context, and review exclusions, filters, scope tags, and competing assignments before expanding to production.
Quick wins for a faster PC:
Repair Windows errors before they cause bigger problemsFix Now →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Verify the deployment
Check Intune reporting
Open the Firefox application in Intune and review its reporting or device-installation status view. Check for:
- Installed
- Pending
- Failed
- Not applicable
- Not installed
For an affected device, confirm that it belongs to the intended Entra ID group, that no exclusion applies, that the assignment was saved, and that the device has checked in since the assignment was created.
Inspect the endpoint package
Run PowerShell on the Windows device:
Get-AppxPackage -AllUsers |
Where-Object { $_.Name -match 'Firefox|Mozilla' } |
Select-Object Name, Version, PackageFullNameUse this as a discovery command, not as a permanent universal detection rule. Store package names and package families can change. The command does not reliably identify a traditional EXE or MSI installation and does not prove that Firefox launches correctly.
Perform an application check
- Launch Firefox.
- Open Help > About Firefox and confirm the runtime version.
- Check that the application is visible to the intended user.
- Test an existing Firefox profile if profiles are expected to be preserved.
- Validate extensions, certificates, proxy settings, and default-browser policies.
Updates and version control
The Store route reduces packaging effort, but it also reduces version-control precision. Microsoft states that Microsoft Store applications are automatically kept up to date when new versions become available. Update behavior can vary by package type and policy, including policies that disable automatic download and installation of Store updates.
| Requirement | Microsoft Store app | Win32 deployment |
|---|---|---|
| Minimal packaging work | Strong | Weaker |
| Store-managed updates | Strong | Depends on your package and update strategy |
| Exact version pinning | Weak | Stronger |
| Custom install switches | Limited | Strong |
| Custom detection logic | More limited | Strong |
| Offline deployment | Usually a poor fit | More manageable |
| Dependence on Store connectivity | Yes | Depends on the package source |
Do not treat Store deployment as a way to pin Firefox to any arbitrary release. If browser updates require formal compatibility testing, regulatory validation, staged rollout, or guaranteed rollback, a controlled Win32 deployment is usually more appropriate.
Rank #3
- STREAMLINED & INTUITIVE UI, DVD FORMAT | Intelligent desktop | Personalize your experience for simpler efficiency | Powerful security built-in and enabled.
- OEM IS TO BE INSTALLED ON A NEW PC with no prior version of Windows installed and cannot be transferred to another machine.
- OEM DOES NOT PROVIDE SUPPORT | To acquire product with Microsoft support, obtain the full packaged “Retail” version.
- PRODUCT SHIPS IN PLAIN ENVELOPE | Activation key is located under scratch-off area on label.
- GENUINE WINDOWS SOFTWARE IS BRANDED BY MIRCOSOFT ONLY.
Troubleshooting
Firefox does not appear in the Intune Store search
Microsoft warns that some Store applications may not be displayed or available in Intune. Possible reasons include catalog changes, geography, publisher metadata, package changes, unsupported Windows requirements, or tenant-specific availability.
- Search for both
FirefoxandMozilla Firefox. - Confirm the publisher and package type.
- Check the public Microsoft Store listing separately.
- Do not reuse an old Store for Business identifier without validating it.
- Use a Win32 package if the current listing cannot be added.
Intune reports success, but Firefox is absent
- Confirm whether the assignment used user or device context.
- Check the expected user profile rather than another profile on the device.
- Confirm whether the assignment targeted a user or device group.
- Trigger an Intune sync and verify the device’s last check-in.
- Check whether Store services or required Windows components are disabled.
- Look for a different Firefox package identity already installed.
- Check whether Firefox is installed but has no expected Start menu shortcut.
- Determine whether the package was staged but not registered for the expected user.
Installation remains pending
Pending status commonly indicates a device-sync, service, connectivity, or assignment-processing problem.
- Trigger a manual sync from Windows Settings or Company Portal.
- Confirm that the device is active and recently checked in to Intune.
- Check Intune Management Extension logs where applicable.
- Validate Microsoft Store connectivity and content access.
- Check proxy authentication and TLS inspection.
- Confirm that no Store-blocking policy conflicts with managed deployment.
- Test the same application on a clean pilot device.
Blocking the Microsoft Store user interface is not necessarily the same as blocking Intune’s managed Store installation path. Microsoft states that Intune-managed devices can still install Store-sourced applications even when user access to the Store application is blocked. Network access and other policy requirements still apply.
An existing Firefox installation causes conflicts
Different Firefox packages can produce duplicate entries, different update channels, confusing detection results, unexpected profile reuse, or an “installed” status while you inspect another installation. Removing one package may leave another behind.
Before broad deployment, document what is installed and define a migration policy. If you need scripted cleanup, custom detection, dependencies, or a controlled replacement sequence, deploy Firefox as a Win32 application instead.
Alternative: deploy Firefox as a Win32 app
A Win32 deployment requires more preparation but gives administrators greater control over installer commands, uninstall behavior, detection rules, dependencies, content sources, version rollout, and rollback handling. Microsoft’s current guidance is available in Add Win32 apps to Microsoft Intune.
Choose this route when:
- Exact Firefox versions must be controlled.
- The Store is unavailable or unreliable in the environment.
- An existing installation must be removed or migrated first.
- Firefox needs custom installation switches or scripting.
- You need a controlled internal content source.
- Custom detection and dependency logic are required.
For a single straightforward Firefox deployment, the modern Store integration is usually less work. For a large application estate, an Intune Win32 process or an enterprise application-management tool may justify the additional packaging effort.
The Tool Desk
Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Frequently Asked Questions
Is Microsoft Store for Business required to deploy Firefox with Intune?
No. For supported tenants and listings, add Firefox directly through Microsoft Intune using Microsoft Store app (new).
Can Firefox be deployed if users cannot open the Microsoft Store?
Often, yes. Microsoft distinguishes Store UI access from Intune-managed Store app deployment. The device must still be able to reach the required Microsoft content and delivery services.
Can Intune pin Firefox to an exact version through the Store?
Generally, no. Store deployment favors catalog-managed servicing. Use a controlled Win32 deployment when exact versions, staged upgrades, or rollback are required.
Will Store Firefox always coexist with the MSI or EXE version?
Do not assume that it will. Coexistence depends on the package and version combination. Inventory existing installations and test the migration plan before broad deployment.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
