Enforcing 3CX PWA Browser Permissions via Group Policy

[arma_admin]

Dear 3CX Administrator Friends,

Since I couldn’t find a forum post covering this topic, I wanted to share a solution that may be useful for other administrators.

This guide explains how to centrally configure and enforce the required 3CX PWA browser permissions in a Windows Active Directory domain environment.

What can you achieve?​

With the appropriate Group Policy settings, you can configure your browser so that users in your domain automatically have the following permissions enabled for your 3CX website:

• Audio capture
• Video capture
• Notifications

This means users won’t have to manually approve these permissions every time they use the 3CX PWA.

What do you need?​

You need the administrative template (ADMX) files for your preferred browser.

Microsoft Edge​

Download the Microsoft Edge administrative templates:

Microsoft Edge for Business – Download

Google Chrome​

Download the Google Chrome Enterprise administrative templates:

Chrome Enterprise – Download

You can then install the administrative templates in your Active Directory environment.

For Microsoft Edge, Microsoft provides documentation here:

Configure Microsoft Edge using Group Policy

Configure the Group Policy​

Create a new GPO and navigate to:

User Configuration → Administrative Templates → Browser

Depending on the browser, enable the following policies and add your 3CX website.

For example:

https://3cx.yourdomain.com

Microsoft Edge​

Configure the following policies:

• Sites that can access audio capture devices without requesting permission
• Sites that can access video capture devices without requesting permission
• Content → Allow notifications on specific sites

Add your 3CX URL to each applicable policy.

Google Chrome​

Configure the following policies:

• URLs that will be granted access to audio capture devices without prompt
• URLs that will be granted access to video capture devices without prompt
• Content Settings → Allow notifications on these sites

Again, add your 3CX URL to each policy.

Policy names for easier searching​

If you are looking for these settings in the browser documentation or ADMX templates, the corresponding policy names are:

AudioCaptureAllowedUrls
VideoCaptureAllowedUrls
NotificationsAllowedForUrls

Final thoughts​

I hope this helps some of you reduce the number of support requests related to simple browser permission settings.

Have a good day!

 

[Alphabetic]

Hi

I would imagine its similar steps to this, i think i've followed this before to deploy.

https://www.3cx.com/docs/pwa-terminal-server-deployment/

 

[arma_admin]

Hi

I would imagine its similar steps to this, i think i've followed this before to deploy.

https://www.3cx.com/docs/pwa-terminal-server-deployment/

Ah yes, you are correct, but this does not cover the permissions part. The user still has to manually acknowledge the push, audio, and video permissions.

I mainly ran into this problem because we have a customers where users don't work for a period of around six weeks during the summer. During this time, the browsers started resetting the permissions because the website wasn't being used frequently enough.