docs/index.md

   1 Firefox policies can be specified using the [Group Policy templates on Windows](https://github.com/mozilla/policy-templates/tree/master/windows), [Intune on Windows](https://support.mozilla.org/kb/managing-firefox-intune), [configuration profiles on macOS](https://github.com/mozilla/policy-templates/tree/master/mac), or by creating a file called `policies.json`. On Windows, create a directory called `distribution` where the EXE is located and place the file there. On Mac, the file goes into `Firefox.app/Contents/Resources/distribution`.  On Linux, the file goes into `firefox/distribution`, where `firefox` is the installation directory for firefox, which varies by distribution or you can specify system-wide policy by placing the file in `/etc/firefox/policies`.
   2
   3 Unfortunately, JSON files do not support comments, but you can add extra entries to the JSON to use as comments. You will see an error in about:policies, but the policies will still work properly. For example:
   4
   5 ```
   6 {
   7   "policies": {
   8     "Authentication": {
   9       "SPNEGO": ["mydomain.com", "https://myotherdomain.com"]
  10     }
  11     "Authentication_Comment": "These domains are required for us"
  12   }
  13 }
  14 ```
  15
  16 | Policy Name | Description
  17 | --- | --- |
  18 | **[`3rdparty`](#3rdparty)** | Set policies that WebExtensions can access via chrome.storage.managed.
  19 | **[`AllowedDomainsForApps`](#alloweddomainsforapps)** | Define domains allowed to access Google Workspace.
  20 | **[`AllowFileSelectionDialogs`](#allowfileselectiondialogs)** | Allow file selection dialogs.
  21 | **[`AppAutoUpdate`](#appautoupdate)** | Enable or disable automatic application update.
  22 | **[`AppUpdatePin`](#appupdatepin)** | Prevent Firefox from being updated beyond the specified version.
  23 | **[`AppUpdateURL`](#appupdateurl)** | Change the URL for application update.
  24 | **[`Authentication`](#authentication)** | Configure sites that support integrated authentication.
  25 | **[`AutofillAddressEnabled`](#autofilladdressenabled)** | Enable autofill for addresses.
  26 | **[`AutofillCreditCardEnabled`](#autofillcreditcardenabled)** | Enable autofill for payment methods.
  27 | **[`AutoLaunchProtocolsFromOrigins`](#autolaunchprotocolsfromorigins)** | Define a list of external protocols that can be used from listed origins without prompting the user.
  28 | **[`BackgroundAppUpdate`](#backgroundappupdate)** | Enable or disable the background updater (Windows only).
  29 | **[`BlockAboutAddons`](#blockaboutaddons)** | Block access to the Add-ons Manager (about:addons).
  30 | **[`BlockAboutConfig`](#blockaboutconfig)** | Block access to about:config.
  31 | **[`BlockAboutProfiles`](#blockaboutprofiles)** | Block access to About Profiles (about:profiles).
  32 | **[`BlockAboutSupport`](#blockaboutsupport)** | Block access to Troubleshooting Information (about:support).
  33 | **[`Bookmarks`](#bookmarks)** | Add bookmarks in either the bookmarks toolbar or menu.
  34 | **[`CaptivePortal`](#captiveportal)** | Enable or disable the detection of captive portals.
  35 | **[`Certificates`](#certificates)** |
  36 | **[`Certificates -> ImportEnterpriseRoots`](#certificates--importenterpriseroots)** | Trust certificates that have been added to the operating system certificate store by a user or administrator.
  37 | **[`Certificates -> Install`](#certificates--install)** | Install certificates into the Firefox certificate store.
  38 | **[`Containers`](#containers)** | Set policies related to [containers](https://addons.mozilla.org/firefox/addon/multi-account-containers/).
  39 | **[`Cookies`](#cookies)** | Configure cookie preferences.
  40 | **[`DefaultDownloadDirectory`](#defaultdownloaddirectory)** | Set the default download directory.
  41 | **[`DisableAppUpdate`](#disableappupdate)** | Turn off application updates.
  42 | **[`DisableBuiltinPDFViewer`](#disablebuiltinpdfviewer)** | Disable the built in PDF viewer.
  43 | **[`DisabledCiphers`](#disabledciphers)** | Disable ciphers.
  44 | **[`DisableDefaultBrowserAgent`](#disabledefaultbrowseragent)** | Prevent the default browser agent from taking any actions (Windows only).
  45 | **[`DisableDeveloperTools`](#disabledevelopertools)** | Remove access to all developer tools.
  46 | **[`DisableFeedbackCommands`](#disablefeedbackcommands)** | Disable the menus for reporting sites.
  47 | **[`DisableFirefoxAccounts`](#disablefirefoxaccounts)** | Disable Firefox Accounts integration (Sync).
  48 | **[`DisableFirefoxScreenshots`](#disablefirefoxscreenshots)** | Remove access to Firefox Screenshots.
  49 | **[`DisableFirefoxStudies`](#disablefirefoxstudies)** | Disable Firefox studies (Shield).
  50 | **[`DisableForgetButton`](#disableforgetbutton)** | Disable the "Forget" button.
  51 | **[`DisableFormHistory`](#disableformhistory)** | Turn off saving information on web forms and the search bar.
  52 | **[`DisableMasterPasswordCreation`](#disablemasterpasswordcreation)** | Remove the master password functionality.
  53 | **[`DisablePasswordReveal`](#disablepasswordreveal)** | Do not allow passwords to be revealed in saved logins.
  54 | **[`DisablePocket`](#disablepocket)** | Remove Pocket in the Firefox UI.
  55 | **[`DisablePrivateBrowsing`](#disableprivatebrowsing)** | Remove access to private browsing.
  56 | **[`DisableProfileImport`](#disableprofileimport)** | Disables the "Import data from another browser" option in the bookmarks window.
  57 | **[`DisableProfileRefresh`](#disableprofilerefresh)** | Disable the Refresh Firefox button on about:support and support.mozilla.org
  58 | **[`DisableSafeMode`](#disablesafemode)** | Disable safe mode within the browser.
  59 | **[`DisableSecurityBypass`](#disablesecuritybypass)** | Prevent the user from bypassing security in certain cases.
  60 | **[`DisableSetDesktopBackground`](#disablesetdesktopbackground)** | Remove the "Set As Desktop Background..." menuitem when right clicking on an image.
  61 | **[`DisableSystemAddonUpdate`](#disablesystemaddonupdate)** | Prevent system add-ons from being installed or updated.
  62 | **[`DisableTelemetry`](#disabletelemetry)** | DisableTelemetry
  63 | **[`DisableThirdPartyModuleBlocking`](#disablethirdpartymoduleblocking)** | Do not allow blocking third-party modules.
  64 | **[`DisplayBookmarksToolbar`](#displaybookmarkstoolbar)** | Set the initial state of the bookmarks toolbar.
  65 | **[`DisplayMenuBar`](#displaymenubar)** | Set the state of the menubar.
  66 | **[`DNSOverHTTPS`](#dnsoverhttps)** | Configure DNS over HTTPS.
  67 | **[`DontCheckDefaultBrowser`](#dontcheckdefaultbrowser)** | Don't check if Firefox is the default browser at startup.
  68 | **[`DownloadDirectory`](#downloaddirectory)** | Set and lock the download directory.
  69 | **[`EnableTrackingProtection`](#enabletrackingprotection)** | Configure tracking protection.
  70 | **[`EncryptedMediaExtensions`](#encryptedmediaextensions)** | Enable or disable Encrypted Media Extensions and optionally lock it.
  71 | **[`EnterprisePoliciesEnabled`](#enterprisepoliciesenabled)** | Enable policy support on macOS.
  72 | **[`ExemptDomainFileTypePairsFromFileTypeDownloadWarnings`](#exemptdomainfiletypepairsfromfiletypedownloadwarnings)** | Disable warnings based on file extension for specific file types on domains.
  73 | **[`Extensions`](#extensions)** | Control the installation, uninstallation and locking of extensions.
  74 | **[`ExtensionSettings`](#extensionsettings)** | Manage all aspects of extensions.
  75 | **[`ExtensionUpdate`](#extensionupdate)** | Control extension updates.
  76 | **[`FirefoxHome`](#firefoxhome)** | Customize the Firefox Home page.
  77 | **[`FirefoxSuggest`](#firefoxsuggest)** | Customize Firefox Suggest.
  78 | **[`GoToIntranetSiteForSingleWordEntryInAddressBar`](#gotointranetsiteforsinglewordentryinaddressbar)** | Force direct intranet site navigation instead of searching when typing single word entries in the address bar.
  79 | **[`Handlers`](#handlers)** | Configure default application handlers.
  80 | **[`HardwareAcceleration`](#hardwareacceleration)** | Control hardware acceleration.
  81 | **[`Homepage`](#homepage)** | Configure the default homepage and how Firefox starts.
  82 | **[`InstallAddonsPermission`](#installaddonspermission)** | Configure the default extension install policy as well as origins for extension installs are allowed.
  83 | **[`LegacyProfiles`](#legacyprofiles)** | Disable the feature enforcing a separate profile for each installation.
  84 | **[`LegacySameSiteCookieBehaviorEnabled`](#legacysamesitecookiebehaviorenabled)** | Enable default legacy SameSite cookie behavior setting.
  85 | **[`LegacySameSiteCookieBehaviorEnabledForDomainList`](#legacysamesitecookiebehaviorenabledfordomainlist)** | Revert to legacy SameSite behavior for cookies on specified sites.
  86 | **[`LocalFileLinks`](#localfilelinks)** | Enable linking to local files by origin.
  87 | **[`ManagedBookmarks`](#managedbookmarks)** | Configures a list of bookmarks managed by an administrator that cannot be changed by the user.
  88 | **[`ManualAppUpdateOnly`](#manualappupdateonly)** | Allow manual updates only and do not notify the user about updates.
  89 | **[`NetworkPrediction`](#networkprediction)** | Enable or disable network prediction (DNS prefetching).
  90 | **[`NewTabPage`](#newtabpage)** | Enable or disable the New Tab page.
  91 | **[`NoDefaultBookmarks`](#nodefaultbookmarks)** | Disable the creation of default bookmarks.
  92 | **[`OfferToSaveLogins`](#offertosavelogins)** | Control whether or not Firefox offers to save passwords.
  93 | **[`OfferToSaveLoginsDefault`](#offertosaveloginsdefault)** | Set the default value for whether or not Firefox offers to save passwords.
  94 | **[`OverrideFirstRunPage`](#overridefirstrunpage)** | Override the first run page.
  95 | **[`OverridePostUpdatePage`](#overridepostupdatepage)** | Override the upgrade page.
  96 | **[`PasswordManagerEnabled`](#passwordmanagerenabled)** | Remove (some) access to the password manager.
  97 | **[`PasswordManagerExceptions`](#passwordmanagerexceptions)** | Prevent Firefox from saving passwords for specific sites.
  98 | **[`PDFjs`](#pdfjs)** | Disable or configure PDF.js, the built-in PDF viewer.
  99 | **[`Permissions`](#permissions)** | Set permissions associated with camera, microphone, location, and notifications.
 100 | **[`PictureInPicture`](#pictureinpicture)** | Enable or disable Picture-in-Picture.
 101 | **[`PopupBlocking`](#popupblocking)** | Configure the default pop-up window policy as well as origins for which pop-up windows are allowed.
 102 | **[`Preferences`](#preferences)** | Set and lock preferences.
 103 | **[`PrimaryPassword`](#primarypassword)** | Require or prevent using a primary (formerly master) password.
 104 | **[`PrintingEnabled`](#printingenabled)** | Enable or disable printing.
 105 | **[`PromptForDownloadLocation`](#promptfordownloadlocation)** | Ask where to save each file before downloading.
 106 | **[`Proxy`](#proxy)** | Configure proxy settings.
 107 | **[`RequestedLocales`](#requestedlocales)** | Set the the list of requested locales for the application in order of preference.
 108 | **[`SanitizeOnShutdown` (All)](#sanitizeonshutdown-all)** | Clear all data on shutdown.
 109 | **[`SanitizeOnShutdown` (Selective)](#sanitizeonshutdown-selective)** | Clear data on shutdown.
 110 | **[`SearchBar`](#searchbar)** | Set whether or not search bar is displayed.
 111 | **[`SearchEngines`](#searchengines-this-policy-is-only-available-on-the-esr)** |
 112 | **[`SearchEngines -> Add`](#searchengines--add)** | Add new search engines.
 113 | **[`SearchEngines -> Default`](#searchengines--default)** | Set the default search engine.
 114 | **[`SearchEngines -> PreventInstalls`](#searchengines--preventinstalls)** | Prevent installing search engines from webpages.
 115 | **[`SearchEngines -> Remove`](#searchengines--remove)** | Hide built-in search engines.
 116 | **[`SearchSuggestEnabled`](#searchsuggestenabled)** | Enable search suggestions.
 117 | **[`SecurityDevices`](#securitydevices)** | Install PKCS #11 modules.
 118 | **[`ShowHomeButton`](#showhomebutton)** | Show the home button on the toolbar.
 119 | **[`SSLVersionMax`](#sslversionmax)** | Set and lock the maximum version of TLS.
 120 | **[`SSLVersionMin`](#sslversionmin)** | Set and lock the minimum version of TLS.
 121 | **[`StartDownloadsInTempDirectory`](#startdownloadsintempdirectory)** | Force downloads to start off in a local, temporary location rather than the default download directory.
 122 | **[`SupportMenu`](#supportmenu)** | Add a menuitem to the help menu for specifying support information.
 123 | **[`UserMessaging`](#usermessaging)** | Don't show certain messages to the user.
 124 | **[`UseSystemPrintDialog`](#usesystemprintdialog)** | Print using the system print dialog instead of print preview.
 125 | **[`WebsiteFilter`](#websitefilter)** | Block websites from being visited.
 126 | **[`WindowsSSO`](#windowssso)** | Allow Windows single sign-on for Microsoft, work, and school accounts.
 127
 128 ### 3rdparty
 129
 130 Allow WebExtensions to configure policy. For more information, see [Adding policy support to your extension](https://extensionworkshop.com/documentation/enterprise/adding-policy-support-to-your-extension/).
 131
 132 For GPO and Intune, the extension developer should provide an ADMX file.
 133
 134 **Compatibility:** Firefox 68\
 135 **CCK2 Equivalent:** N/A\
 136 **Preferences Affected:** N/A
 137
 138 #### macOS
 139 ```
 140 <dict>
 141   <key>3rdparty</key>
 142   <dict>
 143     <key>Extensions</key>
 144     <dict>
 145       <key>uBlock0@raymondhill.net</key>
 146       <dict>
 147         <key>adminSettings</key>
 148         <dict>
 149           <key>selectedFilterLists</key>
 150           <array>
 151             <string>ublock-privacy</string>
 152             <string>ublock-badware</string>
 153             <string>ublock-filters</string>
 154             <string>user-filters</string>
 155           </array>
 156         </dict>
 157       </dict>
 158     </dict>
 159   </dict>
 160 </dict>
 161 ```
 162 #### policies.json
 163 ```
 164 {
 165   "policies": {
 166     "3rdparty": {
 167       "Extensions": {
 168         "uBlock0@raymondhill.net": {
 169           "adminSettings": {
 170             "selectedFilterLists": [
 171               "ublock-privacy",
 172               "ublock-badware",
 173               "ublock-filters",
 174               "user-filters"
 175             ]
 176           }
 177         }
 178       }
 179     }
 180   }
 181 }
 182 ```
 183
 184 ### AllowedDomainsForApps
 185
 186 Define domains allowed to access Google Workspace.
 187
 188 This policy is based on the [Chrome policy](https://chromeenterprise.google/policies/#AllowedDomainsForApps) of the same name.
 189
 190 If this policy is enabled, users can only access Google Workspace using accounts from the specified domains. If you want to allow Gmail, you can add ```consumer_accounts``` to the list.
 191
 192 **Compatibility:** Firefox 89, Firefox ESR 78.11\
 193 **CCK2 Equivalent:** N/A\
 194 **Preferences Affected:** N/A
 195
 196 #### Windows (GPO)
 197 ```
 198 Software\Policies\Mozilla\Firefox\AllowedDomainsForApps = "managedfirefox.com,example.com"
 199 ```
 200 #### Windows (Intune)
 201 OMA-URI:
 202 ```
 203 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AllowedDomainsForApps
 204 ```
 205 Value (string):
 206 ```
 207 <enabled/>
 208 <data id="AllowedDomainsForApps" value="managedfirefox.com,example.com"/>
 209 ```
 210 #### macOS
 211 ```
 212 <dict>
 213   <key>AllowedDomainsForApps</key>
 214   <string>managedfirefox.com,example.com</string>
 215 </dict>
 216 ```
 217 #### policies.json
 218 ```
 219 {
 220   "policies": {
 221     "AllowedDomainsForApps": "managedfirefox.com,example.com"
 222   }
 223 }
 224 ```
 225 ### AllowFileSelectionDialogs
 226
 227 Enable or disable file selection dialogs.
 228
 229 **Compatibility:** Firefox 124\
 230 **CCK2 Equivalent:** N/A\
 231 **Preferences Affected:** `widget.disable_file_pickers`
 232
 233 #### Windows (GPO)
 234 ```
 235 Software\Policies\Mozilla\Firefox\AllowFileSelectionDialogs = 0x1 | 0x0
 236 ```
 237 #### Windows (Intune)
 238 OMA-URI:
 239 ```
 240 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AppAutoAllowFileSelectionDialogsUpdate
 241 ```
 242 Value (string):
 243 ```
 244 <enabled/> or <disabled/>
 245 ```
 246 #### macOS
 247 ```
 248 <dict>
 249   <key>AllowFileSelectionDialogs</key>
 250   <true/> | <false/>
 251 </dict>
 252 ```
 253 #### policies.json
 254 ```
 255 {
 256   "policies": {
 257     "AllowFileSelectionDialogs": true | false
 258   }
 259 }
 260 ```
 261 ### AppAutoUpdate
 262
 263 Enable or disable **automatic** application update.
 264
 265 If set to true, application updates are installed without user approval within Firefox. The operating system might still require approval.
 266
 267 If set to false, application updates are downloaded but the user can choose when to install the update.
 268
 269 If you have disabled updates via `DisableAppUpdate`, this policy has no effect.
 270
 271 **Compatibility:** Firefox 75, Firefox ESR 68.7\
 272 **CCK2 Equivalent:** N/A\
 273 **Preferences Affected:** `app.update.auto`
 274
 275 #### Windows (GPO)
 276 ```
 277 Software\Policies\Mozilla\Firefox\AppAutoUpdate = 0x1 | 0x0
 278 ```
 279 #### Windows (Intune)
 280 OMA-URI:
 281 ```
 282 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AppAutoUpdate
 283 ```
 284 Value (string):
 285 ```
 286 <enabled/> or <disabled/>
 287 ```
 288 #### macOS
 289 ```
 290 <dict>
 291   <key>AppAutoUpdate</key>
 292   <true/> | <false/>
 293 </dict>
 294 ```
 295 #### policies.json
 296 ```
 297 {
 298   "policies": {
 299     "AppAutoUpdate": true | false
 300   }
 301 }
 302 ```
 303 ### AppUpdatePin
 304
 305 Prevent Firefox from being updated beyond the specified version.
 306
 307 You can specify the any version as ```xx.``` and Firefox will be updated with all minor versions, but will not be updated beyond the major version.
 308
 309 You can also specify the version as ```xx.xx``` and Firefox will be updated with all patch versions, but will not be updated beyond the minor version.
 310
 311 You should specify a version that exists or is guaranteed to exist. If you specify a version that doesn't end up existing, Firefox will update beyond that version.
 312
 313 **Compatibility:** Firefox 102,\
 314 **CCK2 Equivalent:** N/A\
 315 **Preferences Affected:** N/A
 316
 317 #### Windows (GPO)
 318 ```
 319 Software\Policies\Mozilla\Firefox\AppUpdatePin = "106."
 320 ```
 321 #### Windows (Intune)
 322 OMA-URI:
 323 ```
 324 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AppUpdatePin
 325 ```
 326 Value (string):
 327 ```
 328 <enabled/>
 329 <data id="AppUpdatePin" value="106."/>
 330 ```
 331 #### macOS
 332 ```
 333 <dict>
 334   <key>AppUpdatePin</key>
 335   <string>106.</string>
 336 </dict>
 337 ```
 338 #### policies.json
 339 ```
 340 {
 341   "policies": {
 342     "AppUpdatePin": "106."
 343   }
 344 }
 345 ```
 346 ### AppUpdateURL
 347
 348 Change the URL for application update if you are providing Firefox updates from a custom update server.
 349
 350 **Compatibility:** Firefox 62, Firefox ESR 60.2\
 351 **CCK2 Equivalent:** N/A\
 352 **Preferences Affected:** `app.update.url`
 353
 354 #### Windows (GPO)
 355 ```
 356 Software\Policies\Mozilla\Firefox\AppUpdateURL = "https://yoursite.com"
 357 ```
 358 #### Windows (Intune)
 359 OMA-URI:
 360 ```
 361 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AppUpdateURL
 362 ```
 363 Value (string):
 364 ```
 365 <enabled/>
 366 <data id="AppUpdateURL" value="https://yoursite.com"/>
 367 ```
 368 #### macOS
 369 ```
 370 <dict>
 371   <key>AppUpdateURL</key>
 372   <string>https://yoursite.com</string>
 373 </dict>
 374 ```
 375 #### policies.json
 376 ```
 377 {
 378   "policies": {
 379     "AppUpdateURL": "https://yoursite.com"
 380   }
 381 }
 382 ```
 383 ### Authentication
 384
 385 Configure sites that support integrated authentication.
 386
 387 See [Integrated authentication](https://htmlpreview.github.io/?https://github.com/mdn/archived-content/blob/main/files/en-us/mozilla/integrated_authentication/raw.html) for more information.
 388
 389 `PrivateBrowsing` enables integrated authentication in private browsing.
 390
 391 **Compatibility:** Firefox 60, Firefox ESR 60 (AllowNonFQDN added in 62/60.2, AllowProxies added in 70/68.2, Locked added in 71/68.3, PrivateBrowsing added in 77/68.9)\
 392 **CCK2 Equivalent:** N/A\
 393 **Preferences Affected:** `network.negotiate-auth.trusted-uris`,`network.negotiate-auth.delegation-uris`,`network.automatic-ntlm-auth.trusted-uris`,`network.automatic-ntlm-auth.allow-non-fqdn`,`network.negotiate-auth.allow-non-fqdn`,`network.automatic-ntlm-auth.allow-proxies`,`network.negotiate-auth.allow-proxies`,`network.auth.private-browsing-sso`
 394
 395 #### Windows (GPO)
 396 ```
 397 Software\Policies\Mozilla\Firefox\Authentication\SPNEGO\1 = "mydomain.com"
 398 Software\Policies\Mozilla\Firefox\Authentication\SPNEGO\2 = "https://myotherdomain.com"
 399 Software\Policies\Mozilla\Firefox\Authentication\Delegated\1 = "mydomain.com"
 400 Software\Policies\Mozilla\Firefox\Authentication\Delegated\2 = "https://myotherdomain.com"
 401 Software\Policies\Mozilla\Firefox\Authentication\NTLM\1 = "mydomain.com"
 402 Software\Policies\Mozilla\Firefox\Authentication\NTLM\2 = "https://myotherdomain.com"
 403 Software\Policies\Mozilla\Firefox\Authentication\AllowNonFQDN\SPNEGO = 0x1 | 0x0
 404 Software\Policies\Mozilla\Firefox\Authentication\AllowNonFQDN\NTLM = 0x1 | 0x0
 405 Software\Policies\Mozilla\Firefox\Authentication\AllowProxies\SPNEGO = 0x1 | 0x0
 406 Software\Policies\Mozilla\Firefox\Authentication\AllowProxies\NTLM = 0x1 | 0x0
 407 Software\Policies\Mozilla\Firefox\Authentication\Locked = 0x1 | 0x0
 408 Software\Policies\Mozilla\Firefox\Authentication\PrivateBrowsing = 0x1 | 0x0
 409 ```
 410 #### Windows (Intune)
 411 OMA-URI:
 412 ```
 413 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_SPNEGO
 414 ```
 415 Value (string):
 416 ```
 417 <enabled/>
 418 <data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
 419 ```
 420 OMA-URI:
 421 ```
 422 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_Delegated
 423 ```
 424 Value (string):
 425 ```
 426 <enabled/>
 427 <data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
 428 ```
 429 OMA-URI:
 430 ```
 431 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_NTLM
 432 ```
 433 Value (string):
 434 ```
 435 <enabled/>
 436 <data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
 437 ```
 438 OMA-URI:
 439 ```
 440 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_AllowNonFQDN
 441 ```
 442 Value (string):
 443 ```
 444 <enabled/>
 445 <data id="Authentication_AllowNonFQDN_NTLM" value="true | false"/>
 446 <data id="Authentication_AllowNonFQDN_SPNEGO" value="true | false"/>
 447 ```
 448 OMA-URI:
 449 ```
 450 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_Locked
 451 ```
 452 Value (string):
 453 ```
 454 <enabled/> or <disabled/>
 455 ```
 456 OMA-URI:
 457 ```
 458 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_PrivateBrowsing
 459 ```
 460 Value (string):
 461 ```
 462 <enabled/> or <disabled/>
 463 ```
 464 #### macOS
 465 ```
 466 <dict>
 467   <key>Authentication</key>
 468   <dict>
 469     <key>SPNEGO</key>
 470     <array>
 471       <string>mydomain.com</string>
 472       <string>https://myotherdomain.com</string>
 473     </array>
 474     <key>Delegated</key>
 475     <array>
 476       <string>mydomain.com</string>
 477       <string>https://myotherdomain.com</string>
 478     </array>
 479     <key>NTLM</key>
 480     <array>
 481       <string>mydomain.com</string>
 482       <string>https://myotherdomain.com</string>
 483     </array>
 484     <key>AllowNonFQDN</key>
 485       <dict>
 486       <key>SPNEGO</key>
 487       <true/> | <false/>
 488       <key>NTLM</key>
 489       <true/> | <false/>
 490     </dict>
 491     <key>AllowProxies</key>
 492       <dict>
 493       <key>SPNEGO</key>
 494       <true/> | <false/>
 495       <key>NTLM</key>
 496       <true/> | <false/>
 497     </dict>
 498     <key>Locked</key>
 499     <true/> | <false/>
 500     <key>PrivateBrowsing</key>
 501     <true/> | <false/>
 502   </dict>
 503 </dict>
 504 ```
 505 #### policies.json
 506 ```
 507 {
 508   "policies": {
 509     "Authentication": {
 510       "SPNEGO": ["mydomain.com", "https://myotherdomain.com"],
 511       "Delegated": ["mydomain.com", "https://myotherdomain.com"],
 512       "NTLM": ["mydomain.com", "https://myotherdomain.com"],
 513       "AllowNonFQDN": {
 514         "SPNEGO": true | false,
 515         "NTLM": true | false
 516       },
 517       "AllowProxies": {
 518         "SPNEGO": true | false,
 519         "NTLM": true | false
 520       },
 521       "Locked": true | false,
 522       "PrivateBrowsing": true | false
 523     }
 524   }
 525 }
 526 ```
 527 ### AutofillAddressEnabled
 528
 529 Enables or disables autofill for addresses.
 530
 531 This only applies when address autofill is enabled for a particular Firefox version or region. See [this page](https://support.mozilla.org/kb/automatically-fill-your-address-web-forms) for more information.
 532
 533 **Compatibility:** Firefox 125, Firefox ESR 115.10\
 534 **CCK2 Equivalent:** N/A\
 535 **Preferences Affected:** `extensions.formautofill.addresses.enabled`
 536
 537 #### Windows (GPO)
 538 ```
 539 Software\Policies\Mozilla\Firefox\AutofillAddressEnabled = 0x1 | 0x0
 540 ```
 541 #### Windows (Intune)
 542 OMA-URI:
 543 ```
 544 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AutofillAddressEnabled
 545 ```
 546 Value (string):
 547 ```
 548 <enabled/> or <disabled/>
 549 ```
 550 #### macOS
 551 ```
 552 <dict>
 553   <key>AutofillAddressEnabled</key>
 554   <true/> | <false/>
 555 </dict>
 556 ```
 557 #### policies.json
 558 ```
 559 {
 560   "policies": {
 561     "AutofillAddressEnabled": true | false
 562   }
 563 }
 564 ```
 565 ### AutofillCreditCardEnabled
 566
 567 Enables or disables autofill for payment methods.
 568
 569 This only applies when payment method autofill is enabled for a particular Firefox version or region. See [this page](https://support.mozilla.org/kb/credit-card-autofill) for more information.
 570
 571 **Compatibility:** Firefox 125, Firefox ESR 115.10\
 572 **CCK2 Equivalent:** N/A\
 573 **Preferences Affected:** `extensions.formautofill.creditCards.enabled`
 574
 575 #### Windows (GPO)
 576 ```
 577 Software\Policies\Mozilla\Firefox\AutofillCreditCardEnabled = 0x1 | 0x0
 578 ```
 579 #### Windows (Intune)
 580 OMA-URI:
 581 ```
 582 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AutofillCreditCardEnabled
 583 ```
 584 Value (string):
 585 ```
 586 <enabled/> or <disabled/>
 587 ```
 588 #### macOS
 589 ```
 590 <dict>
 591   <key>AutofillCreditCardEnabled</key>
 592   <true/> | <false/>
 593 </dict>
 594 ```
 595 #### policies.json
 596 ```
 597 {
 598   "policies": {
 599     "AutofillCreditCardEnabled": true | false
 600   }
 601 }
 602 ```
 603 ### AutoLaunchProtocolsFromOrigins
 604 Define a list of external protocols that can be used from listed origins without prompting the user. The origin is the scheme plus the hostname.
 605
 606 The syntax of this policy is exactly the same as the [Chrome AutoLaunchProtocolsFromOrigins policy](https://cloud.google.com/docs/chrome-enterprise/policies/?policy=AutoLaunchProtocolsFromOrigins) except that you can only use valid origins (not just hostnames). This also means that you cannot specify an asterisk for all origins.
 607
 608 The schema is:
 609 ```
 610 {
 611  "items": {
 612   "properties": {
 613    "allowed_origins": {
 614     "items": {
 615      "type": "string"
 616     },
 617     "type": "array"
 618    },
 619    "protocol": {
 620     "type": "string"
 621    }
 622   },
 623   "required": [
 624    "protocol",
 625    "allowed_origins"
 626   ],
 627   "type": "object"
 628  },
 629  "type": "array"
 630 }
 631 ```
 632 **Compatibility:** Firefox 90, Firefox ESR 78.12\
 633 **CCK2 Equivalent:** N/A\
 634 **Preferences Affected:** N/A
 635
 636 #### Windows (GPO)
 637 Software\Policies\Mozilla\Firefox\AutoLaunchProtocolsFromOrigins (REG_MULTI_SZ) =
 638 ```
 639 [
 640   {
 641     "protocol": "zoommtg",
 642     "allowed_origins": [
 643       "https://somesite.zoom.us"
 644     ]
 645   }
 646 ]
 647 ```
 648 #### Windows (Intune)
 649 OMA-URI:
 650 ```
 651 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AutoLaunchProtocolsFromOrigins
 652 ```
 653 Value (string):
 654 ```
 655 <enabled/>
 656 <data id="JSON" value='
 657 [
 658   {
 659     "protocol": "zoommtg",
 660     "allowed_origins": [
 661       "https://somesite.zoom.us"
 662     ]
 663   }
 664 ]'/>
 665 ```
 666 #### macOS
 667 ```
 668 <dict>
 669   <key>AutoLaunchProtocolsFromOrigins</key>
 670   <array>
 671     <dict>
 672       <key>protocol</key>
 673       <string>zoommtg</string>
 674       <key>allowed_origins</key>
 675       <array>
 676         <string>https://somesite.zoom.us</string>
 677       </array>
 678     </dict>
 679   </array>
 680 </dict>
 681 ```
 682 #### policies.json
 683 ```
 684 {
 685   "policies": {
 686     "AutoLaunchProtocolsFromOrigins": [{
 687       "protocol": "zoommtg",
 688       "allowed_origins": [
 689         "https://somesite.zoom.us"
 690       ]
 691     }]
 692   }
 693 }
 694 ```
 695 ### BackgroundAppUpdate
 696
 697 Enable or disable **automatic** application update **in the background**, when the application is not running.
 698
 699 If set to true, application updates may be installed (without user approval) in the background, even when the application is not running. The operating system might still require approval.
 700
 701 If set to false, the application will not try to install updates when the application is not running.
 702
 703 If you have disabled updates via `DisableAppUpdate` or disabled automatic updates via `AppAutoUpdate`, this policy has no effect.
 704
 705 If you are having trouble getting the background task to run, verify your configuration with the ["Requirements to run" section in this support document](https://support.mozilla.org/en-US/kb/enable-background-updates-firefox-windows).
 706
 707 **Compatibility:** Firefox 90 (Windows only)\
 708 **CCK2 Equivalent:** N/A\
 709 **Preferences Affected:** `app.update.background.enabled`
 710
 711 #### Windows (GPO)
 712 ```
 713 Software\Policies\Mozilla\Firefox\BackgroundAppUpdate = 0x1 | 0x0
 714 ```
 715 #### Windows (Intune)
 716 OMA-URI:
 717 ```
 718 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BackgroundAppUpdate
 719 ```
 720 Value (string):
 721 ```
 722 <enabled/> or <disabled/>
 723 ```
 724 #### macOS
 725 ```
 726 <dict>
 727   <key>BackgroundAppUpdate</key>
 728   <true/> | <false/>
 729 </dict>
 730 ```
 731 #### policies.json
 732 ```
 733 {
 734   "policies": {
 735     "BackgroundAppUpdate": true | false
 736   }
 737 }
 738 ```
 739 ### BlockAboutAddons
 740
 741 Block access to the Add-ons Manager (about:addons).
 742
 743 **Compatibility:** Firefox 60, Firefox ESR 60\
 744 **CCK2 Equivalent:** `disableAddonsManager`\
 745 **Preferences Affected:** N/A
 746
 747 #### Windows (GPO)
 748 ```
 749 Software\Policies\Mozilla\Firefox\BlockAboutAddons = 0x1 | 0x0
 750 ```
 751 #### Windows (Intune)
 752 OMA-URI:
 753 ```
 754 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutAddons
 755 ```
 756 Value (string):
 757 ```
 758 <enabled/> or <disabled/>
 759 ```
 760 #### macOS
 761 ```
 762 <dict>
 763   <key>BlockAboutAddons</key>
 764   <true/> | <false/>
 765 </dict>
 766 ```
 767 #### policies.json
 768 ```
 769 {
 770   "policies": {
 771     "BlockAboutAddons": true | false
 772   }
 773 }
 774 ```
 775 ### BlockAboutConfig
 776
 777 Block access to about:config.
 778
 779 **Compatibility:** Firefox 60, Firefox ESR 60\
 780 **CCK2 Equivalent:** `disableAboutConfig`\
 781 **Preferences Affected:** N/A
 782
 783 #### Windows (GPO)
 784 ```
 785 Software\Policies\Mozilla\Firefox\BlockAboutConfig = 0x1 | 0x0
 786 ```
 787 #### Windows (Intune)
 788 OMA-URI:
 789 ```
 790 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutConfig
 791 ```
 792 Value (string):
 793 ```
 794 <enabled/> or <disabled/>
 795 ```
 796 #### macOS
 797 ```
 798 <dict>
 799   <key>BlockAboutConfig</key>
 800   <true/> | <false/>
 801 </dict>
 802 ```
 803 #### policies.json
 804 ```
 805 {
 806   "policies": {
 807     "BlockAboutConfig": true | false
 808   }
 809 }
 810 ```
 811 ### BlockAboutProfiles
 812
 813 Block access to About Profiles (about:profiles).
 814
 815 **Compatibility:** Firefox 60, Firefox ESR 60\
 816 **CCK2 Equivalent:** `disableAboutProfiles`\
 817 **Preferences Affected:** N/A
 818
 819 #### Windows (GPO)
 820 ```
 821 Software\Policies\Mozilla\Firefox\BlockAboutProfiles = 0x1 | 0x0
 822 ```
 823 #### Windows (Intune)
 824 OMA-URI:
 825 ```
 826 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutProfiles
 827 ```
 828 Value (string):
 829 ```
 830 <enabled/> or <disabled/>
 831 ```
 832 #### macOS
 833 ```
 834 <dict>
 835   <key>BlockAboutProfiles</key>
 836   <true/> | <false/>
 837 </dict>
 838 ```
 839 #### policies.json
 840 ```
 841 {
 842   "policies": {
 843     "BlockAboutProfiles": true | false
 844   }
 845 }
 846 ```
 847 ### BlockAboutSupport
 848
 849 Block access to Troubleshooting Information (about:support).
 850
 851 **Compatibility:** Firefox 60, Firefox ESR 60\
 852 **CCK2 Equivalent:** `disableAboutSupport`\
 853 **Preferences Affected:** N/A
 854
 855 #### Windows (GPO)
 856 ```
 857 Software\Policies\Mozilla\Firefox\BlockAboutSupport = 0x1 | 0x0
 858 ```
 859 #### Windows (Intune)
 860 OMA-URI:
 861 ```
 862 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutSupport
 863 ```
 864 Value (string):
 865 ```
 866 <enabled/> or <disabled/>
 867 ```
 868 #### macOS
 869 ```
 870 <dict>
 871   <key>BlockAboutSupport</key>
 872   <true/> | <false/>
 873 </dict>
 874 ```
 875 #### policies.json
 876 ```
 877 {
 878   "policies": {
 879     "BlockAboutSupport": true | false
 880   }
 881 }
 882 ```
 883 ### Bookmarks
 884
 885 Note: [`ManagedBookmarks`](#managedbookmarks) is the new recommended way to add bookmarks. This policy will continue to be supported.
 886
 887 Add bookmarks in either the bookmarks toolbar or menu. Only `Title` and `URL` are required. If `Placement` is not specified, the bookmark will be placed on the toolbar. If `Folder` is specified, it is automatically created and bookmarks with the same folder name are grouped together.
 888
 889 If you want to clear all bookmarks set with this policy, you can set the value to an empty array (```[]```). This can be on Windows via the new Bookmarks (JSON) policy available with GPO and Intune.
 890
 891 **Compatibility:** Firefox 60, Firefox ESR 60\
 892 **CCK2 Equivalent:** `bookmarks.toolbar`,`bookmarks.menu`\
 893 **Preferences Affected:** N/A
 894
 895 #### Windows (GPO)
 896 ```
 897 Software\Policies\Mozilla\Firefox\Bookmarks\1\Title = "Example"
 898 Software\Policies\Mozilla\Firefox\Bookmarks\1\URL = "https://example.com"
 899 Software\Policies\Mozilla\Firefox\Bookmarks\1\Favicon = "https://example.com/favicon.ico"
 900 Software\Policies\Mozilla\Firefox\Bookmarks\1\Placement = "toolbar" | "menu"
 901 Software\Policies\Mozilla\Firefox\Bookmarks\1\Folder = "FolderName"
 902
 903 Software\Policies\Mozilla\Firefox\Bookmarks (REG_MULTI_SZ) =
 904 ```
 905 []
 906 ```
 907
 908 ```
 909 #### Windows (Intune)
 910 OMA-URI:
 911 ```
 912 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Bookmarks/Bookmark01
 913 ```
 914 Value (string):
 915 ```
 916 <enabled/>
 917 <data id="BookmarkTitle" value="Example"/>
 918 <data id="BookmarkURL" value="https://example.com"/>
 919 <data id="BookmarkFavicon" value="https://example.com/favicon.ico"/>
 920 <data id="BookmarkPlacement" value="toolbar | menu"/>
 921 <data id="BookmarkFolder" value="FolderName"/>
 922 ```
 923 OMA-URI:
 924 ```
 925 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Bookmarks
 926 ```
 927 Value (string):
 928 ```
 929 <enabled/>
 930 <data id="JSON" value='[]'/>
 931 ```
 932 #### macOS
 933 ```
 934 <dict>
 935   <key>Bookmarks</key>
 936   <array>
 937     <dict>
 938       <key>Title</key>
 939       <string>Example</string>
 940       <key>URL</key>
 941       <string>https://example.com</string>
 942       <key>Favicon</key>
 943       <string>https://example.com/favicon.ico</string>
 944       <key>Placement</key>
 945       <string>toolbar | menu</string>
 946       <key>Folder</key>
 947       <string>FolderName</string>
 948     </dict>
 949   </array>
 950 </dict>
 951 ```
 952 #### policies.json
 953 ```
 954 {
 955   "policies": {
 956     "Bookmarks": [
 957       {
 958         "Title": "Example",
 959         "URL": "https://example.com",
 960         "Favicon": "https://example.com/favicon.ico",
 961         "Placement": "toolbar" | "menu",
 962         "Folder": "FolderName"
 963       }
 964     ]
 965   }
 966 }
 967 ```
 968 ### CaptivePortal
 969 Enable or disable the detection of captive portals.
 970
 971 **Compatibility:** Firefox 67, Firefox ESR 60.7\
 972 **CCK2 Equivalent:** N/A\
 973 **Preferences Affected:** `network.captive-portal-service.enabled`
 974
 975 #### Windows (GPO)
 976 ```
 977 Software\Policies\Mozilla\Firefox\CaptivePortal = 0x1 | 0x0
 978 ```
 979 #### Windows (Intune)
 980 OMA-URI:
 981 ```
 982 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/CaptivePortal
 983 ```
 984 Value (string):
 985 ```
 986 <enabled/> or <disabled/>
 987 ```
 988 #### macOS
 989 ```
 990 <dict>
 991   <key>CaptivePortal</key>
 992   <true/> | <false/>
 993 </dict>
 994 ```
 995 #### policies.json
 996 ```
 997 {
 998   "policies": {
 999     "CaptivePortal": true | false
1000   }
1001 }
1002 ```
1003 ### Certificates
1004
1005 ### Certificates | ImportEnterpriseRoots
1006
1007 Trust certificates that have been added to the operating system certificate store by a user or administrator.
1008
1009 Note: This policy only works on Windows and macOS. For Linux discussion, see [bug 1600509](https://bugzilla.mozilla.org/show_bug.cgi?id=1600509).
1010
1011 See https://support.mozilla.org/kb/setting-certificate-authorities-firefox for more detail.
1012
1013 **Compatibility:** Firefox 60, Firefox ESR 60 (macOS support in Firefox 63, Firefox ESR 68)\
1014 **CCK2 Equivalent:** N/A\
1015 **Preferences Affected:** `security.enterprise_roots.enabled`
1016
1017 #### Windows (GPO)
1018 ```
1019 Software\Policies\Mozilla\Firefox\Certificates\ImportEnterpriseRoots = 0x1 | 0x0
1020 ```
1021 #### Windows (Intune)
1022 OMA-URI:
1023 ```
1024 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Certificates/Certificates_ImportEnterpriseRoots
1025 ```
1026 Value (string):
1027 ```
1028 <enabled/> or <disabled/>
1029 ```
1030 #### macOS
1031 ```
1032 <dict>
1033   <key>Certificates</key>
1034   <dict>
1035     <key>ImportEnterpriseRoots</key>
1036     <true/> | <false/>
1037   </dict>
1038 </dict>
1039 ```
1040 #### policies.json
1041 ```
1042 {
1043   "policies": {
1044     "Certificates": {
1045       "ImportEnterpriseRoots": true | false
1046     }
1047   }
1048 }
1049 ```
1050 ### Certificates | Install
1051
1052 Install certificates into the Firefox certificate store. If only a filename is specified, Firefox searches for the file in the following locations:
1053
1054 - Windows
1055   - %USERPROFILE%\AppData\Local\Mozilla\Certificates
1056   - %USERPROFILE%\AppData\Roaming\Mozilla\Certificates
1057 - macOS
1058   - /Library/Application Support/Mozilla/Certificates
1059   - ~/Library/Application Support/Mozilla/Certificates
1060 - Linux
1061   - /usr/lib/mozilla/certificates
1062   - /usr/lib64/mozilla/certificates
1063   - ~/.mozilla/certificates
1064
1065 Starting with Firefox 65, Firefox 60.5 ESR, a fully qualified path can be used, including UNC paths. You should use the native path style for your operating system. We do not support using %USERPROFILE% or other environment variables on Windows.
1066
1067 If you are specifying the path in the policies.json file on Windows, you need to escape your backslashes (`\\`) which means that for UNC paths, you need to escape both (`\\\\`). If you use group policy, you only need one backslash.
1068
1069 Certificates are installed using the trust string `CT,CT,`.
1070
1071 Binary (DER) and ASCII (PEM) certificates are both supported.
1072
1073 **Compatibility:** Firefox 64, Firefox ESR 64\
1074 **CCK2 Equivalent:** `certs.ca`\
1075 **Preferences Affected:** N/A
1076
1077 #### Windows (GPO)
1078 ```
1079 Software\Policies\Mozilla\Firefox\Certificates\Install\1 = "cert1.der"
1080 Software\Policies\Mozilla\Firefox\Certificates\Install\2 = "C:\Users\username\cert2.pem"
1081 ```
1082 #### Windows (Intune)
1083 OMA-URI:
1084 ```
1085 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Certificates/Certificates_Install
1086 ```
1087 Value (string):
1088 ```
1089 <enabled/>
1090 <data id="Certificates_Install" value="1&#xF000;cert1.der&#xF000;2&#xF000;C:\Users\username\cert2.pem"/>
1091 ```
1092 #### macOS
1093 ```
1094 <dict>
1095   <key>Certificates</key>
1096   <dict>
1097     <key>Install</key>
1098     <array>
1099       <string>cert1.der</string>
1100       <string>/Users/username/cert2.pem</string>
1101     </array>
1102   </dict>
1103 </dict>
1104 ```
1105 #### policies.json
1106 ```
1107 {
1108   "policies": {
1109     "Certificates": {
1110       "Install": ["cert1.der", "/home/username/cert2.pem"]
1111     }
1112   }
1113 }
1114 ```
1115 ### Containers
1116 Set policies related to [containers](https://addons.mozilla.org/firefox/addon/multi-account-containers/).
1117
1118 Currently you can set the initial set of containers.
1119
1120 For each container, you can specify the name, icon, and color.
1121
1122 | Name | Description |
1123 | --- | --- |
1124 | `name`| Name of container
1125 | `icon` | Can be `fingerprint`, `briefcase`, `dollar`, `cart`, `vacation`, `gift`, `food`, `fruit`, `pet`, `tree`, `chill`, `circle`, `fence`
1126 | `color` | Can be `blue`, `turquoise`, `green`, `yellow`, `orange`, `red`, `pink`, `purple`, `toolbar`
1127
1128 **Compatibility:** Firefox 113\
1129 **CCK2 Equivalent:** N/A\
1130 **Preferences Affected:** N/A
1131
1132 #### Windows (GPO)
1133 Software\Policies\Mozilla\Firefox\Containers (REG_MULTI_SZ) =
1134 ```
1135 {
1136   "Default": [
1137     {
1138       "name": "My container",
1139       "icon": "pet",
1140       "color": "turquoise"
1141     }
1142   ]
1143 }
1144 ```
1145 #### Windows (Intune)
1146 OMA-URI:
1147 ```
1148 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Containers
1149 ```
1150 Value (string):
1151 ```
1152 <enabled/>
1153 <data id="JSON" value='
1154 {
1155   "Default": [
1156     {
1157       "name": "My container",
1158       "icon": "pet",
1159       "color": "turquoise"
1160     }
1161   ]
1162 }
1163 '/>
1164 ```
1165 #### macOS
1166 ```
1167 <dict>
1168   <key>Default</key>
1169   <dict>
1170     <key>Containers</key>
1171     <array>
1172       <dict>
1173         <key>name</key>
1174         <string>My container</string>
1175         <key>icon</key>
1176         <string>pet</string>
1177         <key>color</key>
1178         <string>turquoise</string>
1179       </dict>
1180     </array>
1181   </dict>
1182 </dict>
1183 ```
1184 #### policies.json
1185 ```
1186 {
1187   "policies": {
1188     "Containers": {
1189       "Default": [
1190         {
1191           "name": "My container",
1192           "icon": "pet",
1193           "color": "turquoise"
1194         }
1195       ]
1196     }
1197   }
1198 }
1199 ```
1200 ### Cookies
1201 Configure cookie preferences.
1202
1203 `Allow` is a list of origins (not domains) where cookies are always allowed. You must include http or https.
1204
1205 `AllowSession` is a list of origins (not domains) where cookies are only allowed for the current session. You must include http or https.
1206
1207 `Block` is a list of origins (not domains) where cookies are always blocked. You must include http or https.
1208
1209 `Behavior` sets the default behavior for cookies based on the values below.
1210
1211 `BehaviorPrivateBrowsing` sets the default behavior for cookies in private browsing based on the values below.
1212
1213 | Value | Description
1214 | --- | --- |
1215 | accept | Accept all cookies
1216 | reject-foreign | Reject third party cookies
1217 | reject | Reject all cookies
1218 | limit-foreign | Reject third party cookies for sites you haven't visited
1219 | reject-tracker | Reject cookies for known trackers (default)
1220 | reject-tracker-and-partition-foreign | Reject cookies for known trackers and partition third-party cookies (Total Cookie Protection) (default for private browsing)
1221
1222 `Locked` prevents the user from changing cookie preferences.
1223
1224 **Compatibility:** Firefox 60, Firefox ESR 60 (RejectTracker added in Firefox 63, AllowSession added in Firefox 79/78.1, Behavior added in Firefox 95/91.4)\
1225 **CCK2 Equivalent:** N/A\
1226 **Preferences Affected:** `network.cookie.cookieBehavior`, `network.cookie.cookieBehavior.pbmode`, `network.cookie.lifetimePolicy`
1227
1228 #### Windows (GPO)
1229 ```
1230 Software\Policies\Mozilla\Firefox\Cookies\Allow\1 = "https://example.com"
1231 Software\Policies\Mozilla\Firefox\Cookies\AllowSession\1 = "https://example.edu"
1232 Software\Policies\Mozilla\Firefox\Cookies\Block\1 = "https://example.org"
1233 Software\Policies\Mozilla\Firefox\Cookies\Default = 0x1 | 0x0
1234 Software\Policies\Mozilla\Firefox\Cookies\AcceptThirdParty = "always" | "never" | "from-visited"
1235 Software\Policies\Mozilla\Firefox\Cookies\ExpireAtSessionEnd = 0x1 | 0x0
1236 Software\Policies\Mozilla\Firefox\Cookies\RejectTracker = 0x1 | 0x0
1237 Software\Policies\Mozilla\Firefox\Cookies\Behavior = "accept" | "reject-foreign" | "reject" | "limit-foreign" | "reject-tracker" | "reject-tracker-and-partition-foreign"
1238 Software\Policies\Mozilla\Firefox\Cookies\BehaviorPrivateBrowsing = "accept" | "reject-foreign" | "reject" | "limit-foreign" | "reject-tracker" | "reject-tracker-and-partition-foreign"
1239 Software\Policies\Mozilla\Firefox\Cookies\Locked = 0x1 | 0x0
1240 ```
1241 #### Windows (Intune)
1242 OMA-URI:
1243 ```
1244 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Allow
1245 ```
1246 Value (string):
1247 ```
1248 <enabled/>
1249 <data id="Permissions" value="1&#xF000;https://example.com"/>
1250 ```
1251 OMA-URI:
1252 ```
1253 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_AllowSession
1254 ```
1255 Value (string):
1256 ```
1257 <enabled/>
1258 <data id="Permissions" value="1&#xF000;https://example.edu"/>
1259 ```
1260 OMA-URI:
1261 ```
1262 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Block
1263 ```
1264 Value (string):
1265 ```
1266 <enabled/>
1267 <data id="Permissions" value="1&#xF000;https://example.org"/>
1268 ```
1269 OMA-URI:
1270 ```
1271 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Default
1272 ```
1273 Value (string):
1274 ```
1275 <enabled/> or <disabled/>
1276 ```
1277 OMA-URI:
1278 ```
1279 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_AcceptThirdParty
1280 ```
1281 Value (string):
1282 ```
1283 <enabled/>
1284 <data id="Cookies_AcceptThirdParty" value="always | never | from-visited"/>
1285 ```
1286 OMA-URI:
1287 ```
1288 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_ExpireAtSessionEnd
1289 ```
1290 Value (string):
1291 ```
1292 <enabled/> or <disabled/>
1293 ```
1294 OMA-URI:
1295 ```
1296 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_RejectTracker
1297 ```
1298 Value (string):
1299 ```
1300 <enabled/> or <disabled/>
1301 ```
1302 OMA-URI:
1303 ```
1304 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Locked
1305 ```
1306 Value (string):
1307 ```
1308 <enabled/> or <disabled/>
1309 ```
1310 OMA-URI:
1311 ```
1312 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Behavior
1313 ```
1314 Value (string):
1315 ```
1316 <enabled/>
1317 <data id="Cookies_Behavior" value="accept | reject-foreign | reject | limit-foreign | reject-tracker | reject-tracker-and-partition-foreign"/>
1318 ```
1319 OMA-URI:
1320 ```
1321 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_BehaviorPrivateBrowsing
1322 ```
1323 Value (string):
1324 ```
1325 <enabled/>
1326 <data id="Cookies_BehaviorPrivateBrowsing" value="accept | reject-foreign | reject | limit-foreign | reject-tracker | reject-tracker-and-partition-foreign"/>
1327 ```
1328 #### macOS
1329 ```
1330 <dict>
1331   <key>Cookies</key>
1332   <dict>
1333     <key>Allow</key>
1334     <array>
1335       <string>http://example.com</string>
1336     </array>
1337     <key>AllowSession</key>
1338     <array>
1339       <string>http://example.edu</string>
1340     </array>
1341     <key>Block</key>
1342     <array>
1343       <string>http://example.org</string>
1344     </array>
1345     <key>Default</key>
1346     <true/> | <false/>
1347     <key>AcceptThirdParty</key>
1348     <string>always | never | from-visited</string>
1349     <key>ExpireAtSessionEnd</key>
1350     <true/> | <false/>
1351     <key>RejectTracker</key>
1352     <true/> | <false/>
1353     <key>Locked</key>
1354     <true/> | <false/>
1355     <key>Behavior</key>
1356     <string>accept | reject-foreign | reject | limit-foreign | reject-tracker | reject-tracker-and-partition-foreign</string>
1357     <key>BehaviorPrivateBrowsing</key>
1358     <string>accept | reject-foreign | reject | limit-foreign | reject-tracker | reject-tracker-and-partition-foreign</string>
1359   </dict>
1360 </dict>
1361 ```
1362 #### policies.json
1363 ```
1364 {
1365   "policies": {
1366     "Cookies": {
1367       "Allow": ["http://example.org/"],
1368       "AllowSession": ["http://example.edu/"],
1369       "Block": ["http://example.edu/"],
1370       "Default": true | false,
1371       "AcceptThirdParty": "always" | "never" | "from-visited",
1372       "ExpireAtSessionEnd": true | false,
1373       "RejectTracker": true | false,
1374       "Locked": true | false,
1375       "Behavior": "accept" | "reject-foreign" | "reject" | "limit-foreign" | "reject-tracker" | "reject-tracker-and-partition-foreign",
1376       "BehaviorPrivateBrowsing": "accept" | "reject-foreign" | "reject" | "limit-foreign" | "reject-tracker" | "reject-tracker-and-partition-foreign",
1377     }
1378   }
1379 }
1380 ```
1381 ### DefaultDownloadDirectory
1382 Set the default download directory.
1383
1384 You can use ${home} for the native home directory.
1385
1386 **Compatibility:** Firefox 68, Firefox ESR 68\
1387 **CCK2 Equivalent:** N/A\
1388 **Preferences Affected:** `browser.download.dir`, `browser.download.folderList`
1389
1390 #### Windows (GPO)
1391 ```
1392 Software\Policies\Mozilla\Firefox\DefaultDownloadDirectory = "${home}\Downloads"
1393 ```
1394 #### Windows (Intune)
1395 OMA-URI:
1396 ```
1397 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DefaultDownloadDirectory
1398 ```
1399 Value (string):
1400 ```
1401 <enabled/>
1402 <data id="Preferences_String" value="${home}\Downloads"/>
1403 ```
1404 #### macOS
1405 ```
1406 <dict>
1407   <key>DefaultDownloadDirectory</key>
1408   <string>${home}/Downloads</string>
1409 </dict>
1410 ```
1411 #### policies.json (macOS and Linux)
1412 ```
1413 {
1414   "policies": {
1415     "DefaultDownloadDirectory": "${home}/Downloads"
1416   }
1417 }
1418 ```
1419 #### policies.json (Windows)
1420 ```
1421 {
1422   "policies": {
1423     "DefaultDownloadDirectory": "${home}\\Downloads"
1424   }
1425 }
1426 ```
1427 ### DisableAppUpdate
1428 Turn off application updates within Firefox.
1429
1430 **Compatibility:** Firefox 60, Firefox ESR 60\
1431 **CCK2 Equivalent:** `disableFirefoxUpdates`\
1432 **Preferences Affected:** N/A
1433
1434 #### Windows (GPO)
1435 ```
1436 Software\Policies\Mozilla\Firefox\DisableAppUpdate = 0x1 | 0x0
1437 ```
1438 #### Windows (Intune)
1439 OMA-URI:
1440 ```
1441 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableAppUpdate
1442 ```
1443 Value (string):
1444 ```
1445 <enabled/> or <disabled/>
1446 ```
1447 #### macOS
1448 ```
1449 <dict>
1450   <key>DisableAppUpdate</key>
1451   <true/> | <false/>
1452 </dict>
1453 ```
1454 #### policies.json
1455 ```
1456 {
1457   "policies": {
1458     "DisableAppUpdate": true | false
1459   }
1460 }
1461 ```
1462 ### DisableBuiltinPDFViewer
1463 Disable the built in PDF viewer. PDF files are downloaded and sent externally.
1464
1465 **Compatibility:** Firefox 60, Firefox ESR 60\
1466 **CCK2 Equivalent:** `disablePDFjs`\
1467 **Preferences Affected:** `pdfjs.disabled`
1468
1469 #### Windows (GPO)
1470 ```
1471 Software\Policies\Mozilla\Firefox\DisableBuiltinPDFViewer = 0x1 | 0x0
1472 ```
1473 #### Windows (Intune)
1474 OMA-URI:
1475 ```
1476 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableBuiltinPDFViewer
1477 ```
1478 Value (string):
1479 ```
1480 <enabled/> or <disabled/>
1481 ```
1482 #### macOS
1483 ```
1484 <dict>
1485   <key>DisableBuiltinPDFViewer</key>
1486   <true/> | <false/>
1487 </dict>
1488 ```
1489 #### policies.json
1490 ```
1491 {
1492   "policies": {
1493     "DisableBuiltinPDFViewer": true | false
1494   }
1495 }
1496 ```
1497 ### DisabledCiphers
1498 Disable specific cryptographic ciphers, listed below.
1499
1500 ```
1501 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
1502 TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
1503 TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256
1504 TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
1505 TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
1506 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
1507 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
1508 TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA
1509 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
1510 TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA
1511 TLS_DHE_RSA_WITH_AES_128_CBC_SHA
1512 TLS_DHE_RSA_WITH_AES_256_CBC_SHA
1513 TLS_RSA_WITH_AES_128_GCM_SHA256
1514 TLS_RSA_WITH_AES_256_GCM_SHA384
1515 TLS_RSA_WITH_AES_128_CBC_SHA
1516 TLS_RSA_WITH_AES_256_CBC_SHA
1517 TLS_RSA_WITH_3DES_EDE_CBC_SHA
1518 ```
1519
1520 **Preferences Affected:** `security.ssl3.ecdhe_rsa_aes_128_gcm_sha256`, `security.ssl3.ecdhe_ecdsa_aes_128_gcm_sha256`, `security.ssl3.ecdhe_ecdsa_chacha20_poly1305_sha256`, `security.ssl3.ecdhe_rsa_chacha20_poly1305_sha256`, `security.ssl3.ecdhe_ecdsa_aes_256_gcm_sha384`, `security.ssl3.ecdhe_rsa_aes_256_gcm_sha384`, `security.ssl3.ecdhe_rsa_aes_128_sha`, `security.ssl3.ecdhe_ecdsa_aes_128_sha`, `security.ssl3.ecdhe_rsa_aes_256_sha`, `security.ssl3.ecdhe_ecdsa_aes_256_sha`, `security.ssl3.dhe_rsa_aes_128_sha`, `security.ssl3.dhe_rsa_aes_256_sha`, `security.ssl3.rsa_aes_128_gcm_sha256`, `security.ssl3.rsa_aes_256_gcm_sha384`, `security.ssl3.rsa_aes_128_sha`, `security.ssl3.rsa_aes_256_sha`, `security.ssl3.deprecated.rsa_des_ede3_sha`
1521
1522 ---
1523 **Note:**
1524
1525 This policy was updated in Firefox 78 to allow enabling ciphers as well. Setting the value to true disables the cipher, setting the value to false enables the cipher. Previously setting the value to true or false disabled the cipher.
1526
1527 ---
1528 **Compatibility:** Firefox 76, Firefox ESR 68.8 (TLS_RSA_WITH_AES_128_GCM_SHA256 and TLS_RSA_WITH_AES_256_GCM_SHA384 were added in Firefox 78, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA38, TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, and TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 were added in Firefox 97 and Firefox 91.6)\
1529 **CCK2 Equivalent:** N/A\
1530 **Preferences Affected:** N/A
1531
1532 #### Windows (GPO)
1533 ```
1534 Software\Policies\Mozilla\Firefox\DisabledCiphers\CIPHER_NAME = 0x1 | 0x0
1535 ```
1536 #### Windows (Intune)
1537 OMA-URI:
1538 ```
1539 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_CIPHER_NAME
1540
1541 ```
1542 Value (string):
1543 ```
1544 <enabled/> or <disabled/>
1545 ```
1546 #### macOS
1547 ```
1548 <dict>
1549   <key>DisabledCiphers</key>
1550     <dict>
1551       <key>CIPHER_NAME</key>
1552       <true/> | <false/>
1553     </dict>
1554 </dict>
1555 ```
1556 #### policies.json
1557 ```
1558 {
1559   "policies": {
1560     "DisabledCiphers": {
1561       "CIPHER_NAME": true | false,
1562     }
1563   }
1564 }
1565 ```
1566 ### DisableDefaultBrowserAgent
1567 Prevent the default browser agent from taking any actions. Only applicable to Windows; other platforms don’t have the agent.
1568
1569 The browser agent is a Windows-only scheduled task which runs in the background to collect and submit data about the browser that the user has set as their OS default. More information is available [here](https://firefox-source-docs.mozilla.org/toolkit/mozapps/defaultagent/default-browser-agent/index.html).
1570
1571 **Compatibility:** Firefox 75, Firefox ESR 68.7 (Windows only)\
1572 **CCK2 Equivalent:** N/A\
1573 **Preferences Affected:** N/A
1574
1575 #### Windows (GPO)
1576 ```
1577 Software\Policies\Mozilla\Firefox\DisableDefaultBrowserAgent = 0x1 | 0x0
1578 ```
1579 #### Windows (Intune)
1580 OMA-URI:
1581 ```
1582 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableDefaultBrowserAgent
1583 ```
1584 Value (string):
1585 ```
1586 <enabled/> or <disabled/>
1587 ```
1588 #### policies.json
1589 ```
1590 {
1591   "policies": {
1592     "DisableDefaultBrowserAgent": true | false
1593   }
1594 }
1595 ```
1596 ### DisableDeveloperTools
1597 Remove access to all developer tools.
1598
1599 **Compatibility:** Firefox 60, Firefox ESR 60\
1600 **CCK2 Equivalent:** `removeDeveloperTools`\
1601 **Preferences Affected:** `devtools.policy.disabled`
1602
1603 #### Windows (GPO)
1604 ```
1605 Software\Policies\Mozilla\Firefox\DisableDeveloperTools = 0x1 | 0x0`
1606 ```
1607 #### Windows (Intune)
1608 OMA-URI:
1609 ```
1610 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableDeveloperTools
1611 ```
1612 Value (string):
1613 ```
1614 <enabled/> or <disabled/>
1615 ```
1616 #### macOS
1617 ```
1618 <dict>
1619   <key>DisableDeveloperTools</key>
1620   <true/> | <false/>
1621 </dict>
1622 ```
1623 #### policies.json
1624 ```
1625 {
1626   "policies": {
1627     "DisableDeveloperTools": true | false
1628   }
1629 }
1630 ```
1631 ### DisableFeedbackCommands
1632 Disable the menus for reporting sites (Submit Feedback, Report Deceptive Site).
1633
1634 **Compatibility:** Firefox 60, Firefox ESR 60\
1635 **CCK2 Equivalent:** N/A\
1636 **Preferences Affected:** N/A
1637
1638 #### Windows (GPO)
1639 ```
1640 Software\Policies\Mozilla\Firefox\DisableFeedbackCommands = 0x1 | 0x0
1641 ```
1642 #### Windows (Intune)
1643 OMA-URI:
1644 ```
1645 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFeedbackCommands
1646 ```
1647 Value (string):
1648 ```
1649 <enabled/> or <disabled/>
1650 ```
1651 #### macOS
1652 ```
1653 <dict>
1654   <key>DisableFeedbackCommands</key>
1655   <true/> | <false/>
1656 </dict>
1657 ```
1658 #### policies.json
1659 ```
1660 {
1661   "policies": {
1662     "DisableFeedbackCommands": true | false
1663   }
1664 }
1665 ```
1666 ### DisableFirefoxAccounts
1667 Disable Firefox Accounts integration (Sync).
1668
1669 **Compatibility:** Firefox 60, Firefox ESR 60\
1670 **CCK2 Equivalent:** `disableSync`\
1671 **Preferences Affected:** `identity.fxaccounts.enabled`
1672
1673 #### Windows (GPO)
1674 ```
1675 Software\Policies\Mozilla\Firefox\DisableFirefoxAccounts = 0x1 | 0x0
1676 ```
1677 #### Windows (Intune)
1678 OMA-URI:
1679 ```
1680 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxAccounts
1681 ```
1682 Value (string):
1683 ```
1684 <enabled/> or <disabled/>
1685 ```
1686 #### macOS
1687 ```
1688 <dict>
1689   <key>DisableFirefoxAccounts</key>
1690   <true/> | <false/>
1691 </dict>
1692 ```
1693 #### policies.json
1694 ```
1695 {
1696   "policies": {
1697     "DisableFirefoxAccounts": true | false
1698   }
1699 }
1700 ```
1701 ### DisableFirefoxScreenshots
1702 Remove access to Firefox Screenshots.
1703
1704 **Compatibility:** Firefox 60, Firefox ESR 60\
1705 **CCK2 Equivalent:** N/A\
1706 **Preferences Affected:** `extensions.screenshots.disabled`
1707
1708 #### Windows (GPO)
1709 ```
1710 Software\Policies\Mozilla\Firefox\DisableFirefoxScreenshots = 0x1 | 0x0
1711 ```
1712 #### Windows (Intune)
1713 OMA-URI:
1714 ```
1715 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxScreenshots
1716 ```
1717 Value (string):
1718 ```
1719 <enabled/> or <disabled/>
1720 ```
1721 #### macOS
1722 ```
1723 <dict>
1724   <key>DisableFirefoxScreenshots</key>
1725   <true/> | <false/>
1726 </dict>
1727 ```
1728 #### policies.json
1729 ```
1730 {
1731   "policies": {
1732     "DisableFirefoxScreenshots": true | false
1733   }
1734 }
1735 ```
1736 ### DisableFirefoxStudies
1737 Disable Firefox studies (Shield).
1738
1739 **Compatibility:** Firefox 60, Firefox ESR 60\
1740 **CCK2 Equivalent:** N/A\
1741 **Preferences Affected:** N/A
1742
1743 #### Windows (GPO)
1744 ```
1745 Software\Policies\Mozilla\Firefox\DisableFirefoxStudies = 0x1 | 0x0
1746 ```
1747 #### Windows (Intune)
1748 OMA-URI:
1749 ```
1750 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxStudies
1751 ```
1752 Value (string):
1753 ```
1754 <enabled/> or <disabled/>
1755 ```
1756 #### macOS
1757 ```
1758 <dict>
1759   <key>DisableFirefoxStudies</key>
1760   <true/> | <false/>
1761 </dict>
1762 ```
1763 #### policies.json
1764 ```
1765 {
1766   "policies": {
1767     "DisableFirefoxStudies": true | false
1768   }
1769 }
1770 ```
1771 ### DisableForgetButton
1772 Disable the "Forget" button.
1773
1774 **Compatibility:** Firefox 60, Firefox ESR 60\
1775 **CCK2 Equivalent:** `disableForget`\
1776 **Preferences Affected:** N/A
1777
1778 #### Windows (GPO)
1779 ```
1780 Software\Policies\Mozilla\Firefox\DisableForgetButton = 0x1 | 0x0
1781 ```
1782 #### Windows (Intune)
1783 OMA-URI:
1784 ```
1785 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableForgetButton
1786 ```
1787 Value (string):
1788 ```
1789 <enabled/> or <disabled/>
1790 ```
1791 #### macOS
1792 ```
1793 <dict>
1794   <key>DisableForgetButton</key>
1795   <true/> | <false/>
1796 </dict>
1797 ```
1798 #### policies.json
1799 ```
1800 {
1801   "policies": {
1802     "DisableForgetButton": true | false
1803   }
1804 }
1805 ```
1806 ### DisableFormHistory
1807 Turn off saving information on web forms and the search bar.
1808
1809 **Compatibility:** Firefox 60, Firefox ESR 60\
1810 **CCK2 Equivalent:** `disableFormFill`\
1811 **Preferences Affected:** `browser.formfill.enable`
1812
1813 #### Windows (GPO)
1814 ```
1815 Software\Policies\Mozilla\Firefox\DisableFormHistory = 0x1 | 0x0
1816 ```
1817 #### Windows (Intune)
1818 OMA-URI:
1819 ```
1820 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFormHistory
1821 ```
1822 Value (string):
1823 ```
1824 <enabled/> or <disabled/>
1825 ```
1826 #### macOS
1827 ```
1828 <dict>
1829   <key>DisableFormHistory</key>
1830   <true/> | <false/>
1831 </dict>
1832 ```
1833 #### policies.json
1834 ```
1835 {
1836   "policies": {
1837     "DisableFormHistory": true | false
1838   }
1839 }
1840 ```
1841 ### DisableMasterPasswordCreation
1842 Remove the master password functionality.
1843
1844 If this value is true, it works the same as setting [`PrimaryPassword`](#primarypassword) to false and removes the primary password functionality.
1845
1846 If both `DisableMasterPasswordCreation` and `PrimaryPassword` are used, `DisableMasterPasswordCreation` takes precedent.
1847
1848 **Compatibility:** Firefox 60, Firefox ESR 60\
1849 **CCK2 Equivalent:** `noMasterPassword`\
1850 **Preferences Affected:** N/A
1851
1852 #### Windows (GPO)
1853 ```
1854 Software\Policies\Mozilla\Firefox\DisableMasterPasswordCreation = 0x1 | 0x0
1855 ```
1856 #### Windows (Intune)
1857 OMA-URI:
1858 ```
1859 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableMasterPasswordCreation
1860 ```
1861 Value (string):
1862 ```
1863 <enabled/> or <disabled/>
1864 ```
1865 #### macOS
1866 ```
1867 <dict>
1868   <key>DisableMasterPasswordCreation</key>
1869   <true/> | <false/>
1870 </dict>
1871 ```
1872 #### policies.json
1873 ```
1874 {
1875   "policies": {
1876     "DisableMasterPasswordCreation": true | false
1877   }
1878 }
1879 ```
1880 ### DisablePasswordReveal
1881 Do not allow passwords to be shown in saved logins
1882
1883 **Compatibility:** Firefox 71, Firefox ESR 68.3\
1884 **CCK2 Equivalent:** N/A
1885 **Preferences Affected:** N/A
1886
1887 #### Windows (GPO)
1888 ```
1889 Software\Policies\Mozilla\Firefox\DisablePasswordReveal = 0x1 | 0x0
1890 ```
1891 #### Windows (Intune)
1892 OMA-URI:
1893 ```
1894 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePasswordReveal
1895 ```
1896 Value (string):
1897 ```
1898 <enabled/> or <disabled/>
1899 ```
1900 #### macOS
1901 ```
1902 <dict>
1903   <key>DisablePasswordReveal</key>
1904   <true/> | <false/>
1905 </dict>
1906 ```
1907 #### policies.json
1908 ```
1909 {
1910   "policies": {
1911     "DisablePasswordReveal": true | false
1912   }
1913 }
1914 ```
1915 ### DisablePocket
1916 Remove Pocket in the Firefox UI. It does not remove it from the new tab page.
1917
1918 **Compatibility:** Firefox 60, Firefox ESR 60\
1919 **CCK2 Equivalent:** `disablePocket`\
1920 **Preferences Affected:** `extensions.pocket.enabled`
1921
1922 #### Windows (GPO)
1923 ```
1924 Software\Policies\Mozilla\Firefox\DisablePocket = 0x1 | 0x0
1925 ```
1926 #### Windows (Intune)
1927 OMA-URI:
1928 ```
1929 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePocket
1930 ```
1931 Value (string):
1932 ```
1933 <enabled/> or <disabled/>
1934 ```
1935 #### macOS
1936 ```
1937 <dict>
1938   <key>DisablePocket</key>
1939   <true/> | <false/>
1940 </dict>
1941 ```
1942 #### policies.json
1943 ```
1944 {
1945   "policies": {
1946     "DisablePocket": true | false
1947   }
1948 }
1949 ```
1950 ### DisablePrivateBrowsing
1951 Remove access to private browsing.
1952
1953 **Compatibility:** Firefox 60, Firefox ESR 60\
1954 **CCK2 Equivalent:** `disablePrivateBrowsing`\
1955 **Preferences Affected:** N/A
1956
1957 #### Windows (GPO)
1958 ```
1959 Software\Policies\Mozilla\Firefox\DisablePrivateBrowsing = 0x1 | 0x0
1960 ```
1961 #### Windows (Intune)
1962 OMA-URI:
1963 ```
1964 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePrivateBrowsing
1965 ```
1966 Value (string):
1967 ```
1968 <enabled/> or <disabled/>
1969 ```
1970 #### macOS
1971 ```
1972 <dict>
1973   <key>DisablePrivateBrowsing</key>
1974   <true/> | <false/>
1975 </dict>
1976 ```
1977 #### policies.json
1978 ```
1979 {
1980   "policies": {
1981     "DisablePrivateBrowsing": true | false
1982   }
1983 }
1984 ```
1985 ### DisableProfileImport
1986 Disables the "Import data from another browser" option in the bookmarks window.
1987
1988 **Compatibility:** Firefox 60, Firefox ESR 60\
1989 **CCK2 Equivalent:** N/A\
1990 **Preferences Affected:** N/A
1991
1992 #### Windows (GPO)
1993 ```
1994 Software\Policies\Mozilla\Firefox\DisableProfileImport = 0x1 | 0x0
1995 ```
1996 #### Windows (Intune)
1997 OMA-URI:
1998 ```
1999 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableProfileImport
2000 ```
2001 Value (string):
2002 ```
2003 <enabled/> or <disabled/>
2004 ```
2005 #### macOS
2006 ```
2007 <dict>
2008   <key>DisableProfileImport</key>
2009   <true/> | <false/>
2010 </dict>
2011 ```
2012 #### policies.json
2013 ```
2014 {
2015   "policies": {
2016     "DisableProfileImport": true | false
2017   }
2018 }
2019 ```
2020 ### DisableProfileRefresh
2021 Disable the Refresh Firefox button on about:support and support.mozilla.org, as well as the prompt that displays offering to refresh Firefox when you haven't used it in a while.
2022
2023 **Compatibility:** Firefox 60, Firefox ESR 60\
2024 **CCK2 Equivalent:** `disableResetFirefox`\
2025 **Preferences Affected:** `browser.disableResetPrompt`
2026
2027 #### Windows (GPO)
2028 ```
2029 Software\Policies\Mozilla\Firefox\DisableProfileRefresh = 0x1 | 0x0
2030 ```
2031 #### Windows (Intune)
2032 OMA-URI:
2033 ```
2034 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableProfileRefresh
2035 ```
2036 Value (string):
2037 ```
2038 <enabled/> or <disabled/>
2039 ```
2040 #### macOS
2041 ```
2042 <dict>
2043   <key>DisableProfileRefresh</key>
2044   <true/> | <false/>
2045 </dict>
2046 ```
2047 #### policies.json
2048 ```
2049 {
2050   "policies": {
2051     "DisableProfileRefresh": true | false
2052   }
2053 }
2054 ```
2055 ### DisableSafeMode
2056 Disable safe mode within the browser.
2057
2058 On Windows, this disables safe mode via the command line as well.
2059
2060 **Compatibility:** Firefox 60, Firefox ESR 60 (Windows, macOS)\
2061 **CCK2 Equivalent:** `disableSafeMode`\
2062 **Preferences Affected:** N/A
2063
2064 #### Windows (GPO)
2065 ```
2066 Software\Policies\Mozilla\Firefox\DisableSafeMode = 0x1 | 0x0
2067 ```
2068 #### Windows (Intune)
2069 OMA-URI:
2070 ```
2071 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSafeMode
2072 ```
2073 Value (string):
2074 ```
2075 <enabled/> or <disabled/>
2076 ```
2077 #### macOS
2078 ```
2079 <dict>
2080   <key>DisableSafeMode</key>
2081   <true/> | <false/>
2082 </dict>
2083 ```
2084 #### policies.json
2085 ```
2086 {
2087   "policies": {
2088     "DisableSafeMode": true | false
2089   }
2090 }
2091 ```
2092 ### DisableSecurityBypass
2093 Prevent the user from bypassing security in certain cases.
2094
2095 `InvalidCertificate` prevents adding an exception when an invalid certificate is shown.
2096
2097 `SafeBrowsing` prevents selecting "ignore the risk" and visiting a harmful site anyway.
2098
2099 These policies only affect what happens when an error is shown, they do not affect any settings in preferences.
2100
2101 **Compatibility:** Firefox 60, Firefox ESR 60\
2102 **CCK2 Equivalent:** N/A\
2103 **Preferences Affected:** `security.certerror.hideAddException`, `browser.safebrowsing.allowOverride`
2104
2105 #### Windows (GPO)
2106 ```
2107 Software\Policies\Mozilla\Firefox\DisableSecurityBypass\InvalidCertificate = 0x1 | 0x0
2108 Software\Policies\Mozilla\Firefox\DisableSecurityBypass\SafeBrowsing = 0x1 | 0x0
2109 ```
2110 #### Windows (Intune)
2111 OMA-URI:
2112 ```
2113 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/P_DisableSecurityBypass_InvalidCertificate
2114 ```
2115 Value (string):
2116 ```
2117 <enabled/> or <disabled/>
2118 ```
2119 OMA-URI:
2120 ```
2121 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/P_DisableSecurityBypass_SafeBrowsing
2122 ```
2123 Value (string):
2124 ```
2125 <enabled/> or <disabled/>
2126 ```
2127
2128 #### macOS
2129 ```
2130 <dict>
2131   <key>DisableSecurityBypass</key>
2132   <dict>
2133     <key>InvalidCertificate</key>
2134     <true/> | <false/>
2135     <key>SafeBrowsing</key>
2136     <true/> | <false/>
2137   </dict>
2138 </dict>
2139 ```
2140 #### policies.json
2141 ```
2142 {
2143   "policies": {
2144     "DisableSecurityBypass": {
2145       "InvalidCertificate": true | false,
2146       "SafeBrowsing": true | false
2147     }
2148   }
2149 }
2150 ```
2151 ### DisableSetDesktopBackground
2152 Remove the "Set As Desktop Background..." menuitem when right clicking on an image.
2153
2154 **Compatibility:** Firefox 60, Firefox ESR 60\
2155 **CCK2 Equivalent:** `removeSetDesktopBackground`\
2156 **Preferences Affected:** N/A
2157
2158 #### Windows (GPO)
2159 ```
2160 Software\Policies\Mozilla\Firefox\DisableSetDesktopBackground = 0x1 | 0x0
2161 ```
2162 #### Windows (Intune)
2163 OMA-URI:
2164 ```
2165 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSetDesktopBackground
2166 ```
2167 Value (string):
2168 ```
2169 <enabled/> or <disabled/>
2170 ```
2171 #### macOS
2172 ```
2173 <dict>
2174   <key>DisableSetDesktopBackground</key>
2175   <true/> | <false/>
2176 </dict>
2177 ```
2178 #### policies.json
2179 ```
2180 {
2181   "policies": {
2182     "DisableSetDesktopBackground": true | false
2183   }
2184 }
2185 ```
2186 ### DisableSystemAddonUpdate
2187 Prevent system add-ons from being installed or updated.
2188
2189 **Compatibility:** Firefox 60, Firefox ESR 60\
2190 **CCK2 Equivalent:** N/A\
2191 **Preferences Affected:** N/A
2192
2193 #### Windows (GPO)
2194 ```
2195 Software\Policies\Mozilla\Firefox\DisableSystemAddonUpdate = 0x1 | 0x0
2196 ```
2197 #### Windows (Intune)
2198 OMA-URI:
2199 ```
2200 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSystemAddonUpdate
2201 ```
2202 Value (string):
2203 ```
2204 <enabled/> or <disabled/>
2205 ```
2206 #### macOS
2207 ```
2208 <dict>
2209   <key>DisableSystemAddonUpdate</key>
2210   <true/> | <false/>
2211 </dict>
2212 ```
2213 #### policies.json
2214 ```
2215 {
2216   "policies": {
2217     "DisableSystemAddonUpdate": true | false
2218   }
2219 }
2220 ```
2221 ### DisableTelemetry
2222 Prevent the upload of telemetry data.
2223
2224 As of Firefox 83 and Firefox ESR 78.5, local storage of telemetry data is disabled as well.
2225
2226 Mozilla recommends that you do not disable telemetry. Information collected through telemetry helps us build a better product for businesses like yours.
2227
2228 **Compatibility:** Firefox 60, Firefox ESR 60\
2229 **CCK2 Equivalent:** `disableTelemetry`\
2230 **Preferences Affected:** `datareporting.healthreport.uploadEnabled`, `datareporting.policy.dataSubmissionEnabled`, `toolkit.telemetry.archive.enabled`
2231
2232 #### Windows (GPO)
2233 ```
2234 Software\Policies\Mozilla\Firefox\DisableTelemetry = 0x1 | 0x0
2235 ```
2236 #### Windows (Intune)
2237 OMA-URI:
2238 ```
2239 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableTelemetry
2240 ```
2241 Value (string):
2242 ```
2243 <enabled/> or <disabled/>
2244 ```
2245 #### macOS
2246 ```
2247 <dict>
2248   <key>DisableTelemetry</key>
2249   <true/> | <false/>
2250 </dict>
2251 ```
2252 #### policies.json
2253 ```
2254 {
2255   "policies": {
2256     "DisableTelemetry": true | false
2257   }
2258 }
2259 ```
2260 ### DisableThirdPartyModuleBlocking
2261 Do not allow blocking third-party modules from the `about:third-party` page.
2262
2263 This policy only works on Windows through GPO (not policies.json).
2264
2265 **Compatibility:** Firefox 110 (Windows only, GPO only)\
2266 **CCK2 Equivalent:** N/A\
2267 **Preferences Affected:** N/A
2268
2269 #### Windows (GPO)
2270 ```
2271 Software\Policies\Mozilla\Firefox\DisableThirdPartyModuleBlocking = = 0x1 | 0x0
2272 ```
2273 #### Windows (Intune)
2274 OMA-URI:
2275 ```
2276 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableThirdPartyModuleBlocking
2277 ```
2278 Value (string):
2279 ```
2280 <enabled/> or <disabled/>
2281 ```
2282 ### DisplayBookmarksToolbar
2283 Set the initial state of the bookmarks toolbar. A user can still change how it is displayed.
2284
2285 `always` means the bookmarks toolbar is always shown.
2286
2287 `never` means the bookmarks toolbar is not shown.
2288
2289 `newtab` means the bookmarks toolbar is only shown on the new tab page.
2290
2291 **Compatibility:** Firefox 109, Firefox ESR 102.7\
2292 **CCK2 Equivalent:** N/A\
2293 **Preferences Affected:** N/A
2294
2295 #### Windows (GPO)
2296 ```
2297 Software\Policies\Mozilla\Firefox\DisplayBookmarksToolbar = "always", "never", "newtab"
2298 ```
2299 #### Windows (Intune)
2300 OMA-URI:
2301 ```
2302 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisplayBookmarksToolbar_Enum
2303 ```
2304 Value (string):
2305 ```
2306 <enabled/>
2307 <data id="DisplayBookmarksToolbar" value="always | never | newtab"/>
2308 ```
2309 #### macOS
2310 ```
2311 <dict>
2312   <key>DisplayBookmarksToolbar</key>
2313   <string>always | never | newtab</string>
2314 </dict>
2315 ```
2316 #### policies.json
2317 ```
2318 {
2319   "policies": {
2320     "DisplayBookmarksToolbar": "always" | "never" | "newtab"
2321   }
2322 }
2323 ```
2324 ### DisplayMenuBar
2325 Set the state of the menubar.
2326
2327 `always` means the menubar is shown and cannot be hidden.
2328
2329 `never` means the menubar is hidden and cannot be shown.
2330
2331 `default-on` means the menubar is on by default but can be hidden.
2332
2333 `default-off` means the menubar is off by default but can be shown.
2334
2335 **Compatibility:** Firefox 73, Firefox ESR 68.5 (Windows, some Linux)\
2336 **CCK2 Equivalent:** `displayMenuBar`\
2337 **Preferences Affected:** N/A
2338
2339 #### Windows (GPO)
2340 ```
2341 Software\Policies\Mozilla\Firefox\DisplayMenuBar = "always", "never", "default-on", "default-off"
2342 ```
2343 #### Windows (Intune)
2344 OMA-URI:
2345 ```
2346 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisplayMenuBar_Enum
2347 ```
2348 Value (string):
2349 ```
2350 <enabled/>
2351 <data id="DisplayMenuBar" value="always | never | default-on | default-off"/>
2352 ```
2353 #### macOS
2354 ```
2355 <dict>
2356   <key>DisplayMenuBar</key>
2357   <string>always | never | default-on | default-off</string>
2358 </dict>
2359 ```
2360 #### policies.json
2361 ```
2362 {
2363   "policies": {
2364     "DisplayMenuBar": "always", "never", "default-on", "default-off"
2365   }
2366 }
2367 ```
2368 ### DNSOverHTTPS
2369 Configure DNS over HTTPS.
2370
2371 `Enabled` determines whether DNS over HTTPS is enabled
2372
2373 `ProviderURL` is a URL to another provider.
2374
2375 `Locked` prevents the user from changing DNS over HTTPS preferences.
2376
2377 `ExcludedDomains` excludes domains from DNS over HTTPS.
2378
2379 `Fallback` determines whether or not Firefox will use your default DNS resolver if there is a problem with the secure DNS provider.
2380
2381 **Compatibility:** Firefox 63, Firefox ESR 68 (ExcludedDomains added in 75/68.7) (Fallback added in 124)\
2382 **CCK2 Equivalent:** N/A\
2383 **Preferences Affected:** `network.trr.mode`, `network.trr.uri`
2384
2385 #### Windows (GPO)
2386 ```
2387 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\Enabled = 0x1 | 0x0
2388 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\ProviderURL = "URL_TO_ALTERNATE_PROVIDER"
2389 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\Locked = 0x1 | 0x0
2390 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\ExcludedDomains\1 = "example.com"
2391 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\Fallback = 0x1 | 0x0
2392 ```
2393 #### Windows (Intune)
2394 OMA-URI:
2395 ```
2396 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_Enabled
2397 ```
2398 Value (string):
2399 ```
2400 <enabled/> or <disabled/>
2401 ```
2402 OMA-URI:
2403 ```
2404 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_ProviderURL
2405 ```
2406 Value (string):
2407 ```
2408 <enabled/>
2409 <data id="String" value="URL_TO_ALTERNATE_PROVIDER"/>
2410 ```
2411 OMA-URI:
2412 ```
2413 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_Locked
2414 ```
2415 Value (string):
2416 ```
2417 <enabled/> or <disabled/>
2418 ```
2419 OMA-URI:
2420 ```
2421 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_ExcludedDomains
2422 ```
2423 Value (string):
2424 ```
2425 <enabled/>
2426 <data id="List" value="1&#xF000;example.com"/>
2427 ```
2428 OMA-URI:
2429 ```
2430 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_Fallback
2431 ```
2432 Value (string):
2433 ```
2434 <enabled/> or <disabled/>
2435 ```
2436 #### macOS
2437 ```
2438 <dict>
2439   <key>DNSOverHTTPS</key>
2440   <dict>
2441     <key>Enabled</key>
2442     <true/> | <false/>
2443     <key>ProviderURL</key>
2444     <string>URL_TO_ALTERNATE_PROVIDER</string>
2445     <key>Locked</key>
2446     <true/> | <false/>
2447     <key>ExcludedDomains</key>
2448     <array>
2449       <string>example.com</string>
2450     </array>
2451     <key>Fallback</key>
2452     <true/> | <false/>
2453   </dict>
2454 </dict>
2455 ```
2456 #### policies.json
2457 ```
2458 {
2459   "policies": {
2460     "DNSOverHTTPS": {
2461       "Enabled":  true | false,
2462       "ProviderURL": "URL_TO_ALTERNATE_PROVIDER",
2463       "Locked": true | false,
2464       "ExcludedDomains": ["example.com"],
2465       "Fallback": true | false,
2466     }
2467   }
2468 }
2469 ```
2470 ### DontCheckDefaultBrowser
2471 Don't check if Firefox is the default browser at startup.
2472
2473 **Compatibility:** Firefox 60, Firefox ESR 60\
2474 **CCK2 Equivalent:** `dontCheckDefaultBrowser`\
2475 **Preferences Affected:** `browser.shell.checkDefaultBrowser`
2476
2477 #### Windows (GPO)
2478 ```
2479 Software\Policies\Mozilla\Firefox\DontCheckDefaultBrowser = 0x1 | 0x0
2480 ```
2481 #### Windows (Intune)
2482 OMA-URI:
2483 ```
2484 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DontCheckDefaultBrowser
2485 ```
2486 Value (string):
2487 ```
2488 <enabled/> or <disabled/>
2489 ```
2490 #### macOS
2491 ```
2492 <dict>
2493   <key>DontCheckDefaultBrowser</key>
2494   <true/> | <false/>
2495 </dict>
2496 ```
2497 #### policies.json
2498 ```
2499 {
2500   "policies": {
2501     "DontCheckDefaultBrowser": true | false
2502   }
2503 }
2504 ```
2505 ### DownloadDirectory
2506 Set and lock the download directory.
2507
2508 You can use ${home} for the native home directory.
2509
2510 **Compatibility:** Firefox 68, Firefox ESR 68\
2511 **CCK2 Equivalent:** N/A\
2512 **Preferences Affected:** `browser.download.dir`, `browser.download.folderList`, `browser.download.useDownloadDir`
2513
2514 #### Windows (GPO)
2515 ```
2516 Software\Policies\Mozilla\Firefox\DownloadDirectory = "${home}\Downloads"
2517 ```
2518 #### Windows (Intune)
2519 OMA-URI:
2520 ```
2521 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DownloadDirectory
2522 ```
2523 Value (string):
2524 ```
2525 <enabled/>
2526 <data id="Preferences_String" value="${home}\Downloads"/>
2527 ```
2528 #### macOS
2529 ```
2530 <dict>
2531   <key>DownloadDirectory</key>
2532   <string>${home}/Downloads</string>
2533 </dict>
2534 ```
2535 #### policies.json (macOS and Linux)
2536 ```
2537 {
2538   "policies": {
2539     "DownloadDirectory": "${home}/Downloads"
2540 }
2541 ```
2542 #### policies.json (Windows)
2543 ```
2544 {
2545   "policies": {
2546     "DownloadDirectory": "${home}\\Downloads"
2547 }
2548 ```
2549 ### EnableTrackingProtection
2550 Configure tracking protection.
2551
2552 If this policy is not configured, tracking protection is not enabled by default in the browser, but it is enabled by default in private browsing and the user can change it.
2553
2554 If `Value` is set to false, tracking protection is disabled and locked in both the regular browser and private browsing.
2555
2556 If `Value` is set to true, tracking protection is enabled by default in both the regular browser and private browsing and the `Locked` value determines whether or not a user can change it.
2557
2558 If `Cryptomining` is set to true, cryptomining scripts on websites are blocked.
2559
2560 If `Fingerprinting` is set to true, fingerprinting scripts on websites are blocked.
2561
2562 If `EmailTracking` is set to true, hidden email tracking pixels and scripts on websites are blocked. (Firefox 112)
2563
2564 `Exceptions` are origins for which tracking protection is not enabled.
2565
2566 **Compatibility:** Firefox 60, Firefox ESR 60 (Cryptomining and Fingerprinting added in 70/68.2, Exceptions added in 73/68.5)\
2567 **CCK2 Equivalent:** N/A\
2568 **Preferences Affected:** `privacy.trackingprotection.enabled`, `privacy.trackingprotection.pbmode.enabled`, `privacy.trackingprotection.cryptomining.enabled`, `privacy.trackingprotection.fingerprinting.enabled`
2569
2570 #### Windows (GPO)
2571 ```
2572 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Value = 0x1 | 0x0
2573 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Locked = 0x1 | 0x0
2574 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Cryptomining = 0x1 | 0x0
2575 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Fingerprinting = 0x1 | 0x0
2576 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Exceptions\1 = "https://example.com"
2577 ```
2578 #### Windows (Intune)
2579 OMA-URI:
2580 ```
2581 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/A_TrackingProtection_Value
2582 ```
2583 Value (string):
2584 ```
2585 <enabled/> or <disabled/>
2586 ```
2587 OMA-URI:
2588 ```
2589 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/B_TrackingProtection_Cryptomining
2590 ```
2591 Value (string):
2592 ```
2593 <enabled/> or <disabled/>
2594 ```
2595 OMA-URI:
2596 ```
2597 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/C_TrackingProtection_Fingerprinting
2598 ```
2599 Value (string):
2600 ```
2601 <enabled/> or <disabled/>
2602 ```
2603 OMA-URI:
2604 ```
2605 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/D_TrackingProtection_Exceptions
2606 ```
2607 Value (string):
2608 ```
2609 <enabled/>
2610 <data id="TrackingProtection_Exceptions" value="1&#xF000;https://example.com"/>
2611 ```
2612 OMA-URI:
2613 ```
2614 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/E_TrackingProtection_Locked
2615 ```
2616 Value (string):
2617 ```
2618 <enabled/> or <disabled/>
2619 ```
2620 #### macOS
2621 ```
2622 <dict>
2623   <key>EnableTrackingProtection</key>
2624   <dict>
2625     <key>Value</key>
2626     <true/> | <false/>
2627     <key>Locked</key>
2628     <true/> | <false/>
2629     <key>Cryptomining</key>
2630     <true/> | <false/>
2631     <key>Fingerprinting</key>
2632     <true/> | <false/>
2633     <key>Exceptions</key>
2634     <array>
2635       <string>https://example.com</string>
2636     </array>
2637   </dict>
2638 </dict>
2639 ```
2640 #### policies.json
2641 ```
2642 {
2643   "policies": {
2644     "EnableTrackingProtection": {
2645       "Value": true | false,
2646       "Locked": true | false,
2647       "Cryptomining": true | false,
2648       "Fingerprinting": true | false,
2649       "Exceptions": ["https://example.com"]
2650     }
2651   }
2652 }
2653 ```
2654 ### EncryptedMediaExtensions
2655 Enable or disable Encrypted Media Extensions and optionally lock it.
2656
2657 If `Enabled` is set to false, encrypted media extensions (like Widevine) are not downloaded by Firefox unless the user consents to installing them.
2658
2659 If `Locked` is set to true and `Enabled` is set to false, Firefox will not download encrypted media extensions (like Widevine) or ask the user to install them.
2660
2661 **Compatibility:** Firefox 77, Firefox ESR 68.9\
2662 **CCK2 Equivalent:** N/A\
2663 **Preferences Affected:** `media.eme.enabled`
2664
2665 #### Windows (GPO)
2666 ```
2667 Software\Policies\Mozilla\Firefox\EncryptedMediaExtensions\Enabled = 0x1 | 0x0
2668 Software\Policies\Mozilla\Firefox\EncryptedMediaExtensions\Locked = 0x1 | 0x0
2669 ```
2670 #### Windows (Intune)
2671 OMA-URI:
2672 ```
2673 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~EncryptedMediaExtensions/EncryptedMediaExtensions_Enabled
2674 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~EncryptedMediaExtensions/EncryptedMediaExtensions_Locked
2675 ```
2676 Value (string):
2677 ```
2678 <enabled/>or <disabled/>
2679 ```
2680 #### macOS
2681 ```
2682 <dict>
2683   <key>EncryptedMediaExtensions</key>
2684   <dict>
2685     <key>Enabled</key>
2686     <true/> | <false/>
2687     <key>Locked</key>
2688     <true/> | <false/>
2689   </dict>
2690 </dict>
2691 ```
2692 #### policies.json
2693 ```
2694 {
2695   "policies": {
2696     "EncryptedMediaExtensions": {
2697       "Enabled": true | false,
2698       "Locked": true | false
2699     }
2700   }
2701 }
2702 ```
2703 ### EnterprisePoliciesEnabled
2704 Enable policy support on macOS.
2705
2706 **Compatibility:** Firefox 63, Firefox ESR 60.3 (macOS only)\
2707 **CCK2 Equivalent:** N/A\
2708 **Preferences Affected:** N/A
2709
2710 #### macOS
2711 ```
2712 <dict>
2713   <key>EnterprisePoliciesEnabled</key>
2714   <true/>
2715 </dict>
2716 ```
2717 ### ExemptDomainFileTypePairsFromFileTypeDownloadWarnings
2718
2719 Disable warnings based on file extension for specific file types on domains.
2720
2721 This policy is based on the [Chrome policy](https://chromeenterprise.google/policies/#ExemptDomainFileTypePairsFromFileTypeDownloadWarnings) of the same name.
2722
2723 Important: The documentation for the policy for both Edge and Chrome is incorrect. The ```domains``` value must be a domain, not a URL pattern. Also, we do not support using ```*``` to mean all domains.
2724
2725 **Compatibility:** Firefox 102\
2726 **CCK2 Equivalent:** N/A\
2727 **Preferences Affected:** N/A
2728
2729 #### Windows (GPO)
2730 Software\Policies\Mozilla\Firefox\ExemptDomainFileTypePairsFromFileTypeDownloadWarnings (REG_MULTI_SZ) =
2731 ```
2732 [
2733   {
2734      "file_extension": "jnlp",
2735      "domains": ["example.com"]
2736   }
2737 ]
2738 ```
2739 #### Windows (Intune)
2740 OMA-URI:
2741 ```
2742 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/ExemptDomainFileTypePairsFromFileTypeDownloadWarnings
2743 ```
2744 Value (string):
2745 ```
2746 <enabled/>
2747 <data id="JSON" value='
2748 [
2749   {
2750      "file_extension": "jnlp",
2751      "domains": ["example.com"]
2752   }
2753 ]
2754 '/>
2755 ```
2756 #### macOS
2757 ```
2758 <dict>
2759   <key>ExemptDomainFileTypePairsFromFileTypeDownloadWarnings</key>
2760   <array>
2761     <dict>
2762       <key>file_extension</key>
2763       <string>jnlp</string>
2764       <key>domains</key>
2765       <array>
2766         <string>example.com</string>
2767       </array>
2768     </dict>
2769   </array>
2770 </dict>
2771 ```
2772 #### policies.json
2773 ```
2774 {
2775   "policies": {
2776     "ExemptDomainFileTypePairsFromFileTypeDownloadWarnings": [{
2777       "file_extension": "jnlp",
2778       "domains": ["example.com"]
2779     }]
2780   }
2781 }
2782 ```
2783 ### Extensions
2784 Control the installation, uninstallation and locking of extensions.
2785
2786 We strongly recommend that you use the **[`ExtensionSettings`](#extensionsettings)** policy. It has the same functionality and adds more. It does not support native paths, though, so you'll have to use file:/// URLs.
2787
2788 This method will be deprecated in the near future.
2789
2790 `Install` is a list of URLs or native paths for extensions to be installed.
2791
2792 `Uninstall` is a list of extension IDs that should be uninstalled if found.
2793
2794 `Locked` is a list of extension IDs that the user cannot disable or uninstall.
2795
2796 **Compatibility:** Firefox 60, Firefox ESR 60\
2797 **CCK2 Equivalent:** `addons`\
2798 **Preferences Affected:** N/A
2799
2800 #### Windows (GPO)
2801 ```
2802 Software\Policies\Mozilla\Firefox\Extensions\Install\1 = "https://addons.mozilla.org/firefox/downloads/somefile.xpi"
2803 Software\Policies\Mozilla\Firefox\Extensions\Install\2 = "//path/to/xpi"
2804 Software\Policies\Mozilla\Firefox\Extensions\Uninstall\1 = "bad_addon_id@mozilla.org"
2805 Software\Policies\Mozilla\Firefox\Extensions\Locked\1 = "addon_id@mozilla.org"
2806 ```
2807 #### Windows (Intune)
2808 OMA-URI:
2809 ```
2810 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/Extensions_Install
2811 ```
2812 Value (string):
2813 ```
2814 <enabled/>
2815 <data id="Extensions" value="1&#xF000;https://addons.mozilla.org/firefox/downloads/somefile.xpi&#xF000;2&#xF000;//path/to/xpi"/>
2816 ```
2817 OMA-URI:
2818 ```
2819 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/Extensions_Uninstall
2820 ```
2821 Value (string):
2822 ```
2823 <enabled/>
2824 <data id="Extensions" value="1&#xF000;bad_addon_id@mozilla.org"/>
2825 ```
2826 OMA-URI:
2827 ```
2828 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/Extensions_Locked
2829 ```
2830 Value (string):
2831 ```
2832 <enabled/>
2833 <data id="Extensions" value="1&#xF000;addon_id@mozilla.org"/>
2834 ```
2835 #### macOS
2836 ```
2837 <dict>
2838   <key>Extensions</key>
2839   <dict>
2840     <key>Install</key>
2841     <array>
2842       <string>https://addons.mozilla.org/firefox/downloads/somefile.xpi</string>
2843       <string>//path/to/xpi</string>
2844     </array>
2845     <key>Uninstall</key>
2846     <array>
2847       <string>bad_addon_id@mozilla.org</string>
2848     </array>
2849     <key>Locked</key>
2850     <array>
2851       <string>addon_id@mozilla.org</string>
2852     </array>
2853   </dict>
2854 </dict>
2855 ```
2856 #### policies.json
2857 ```
2858 {
2859   "policies": {
2860     "Extensions": {
2861       "Install": ["https://addons.mozilla.org/firefox/downloads/somefile.xpi", "//path/to/xpi"],
2862       "Uninstall": ["bad_addon_id@mozilla.org"],
2863       "Locked":  ["addon_id@mozilla.org"]
2864     }
2865   }
2866 }
2867 ```
2868 ### ExtensionSettings
2869 Manage all aspects of extensions. This policy is based heavily on the [Chrome policy](https://dev.chromium.org/administrators/policy-list-3/extension-settings-full) of the same name.
2870
2871 This policy maps an extension ID to its configuration. With an extension ID, the configuration will be applied to the specified extension only. A default configuration can be set for the special ID "*", which will apply to all extensions that don't have a custom configuration set in this policy.
2872
2873 To obtain an extension ID, install the extension and go to about:support. You will see the ID in the Extensions section. I've also created an extension that makes it easy to find the ID of extensions on AMO. You can download it [here](https://github.com/mkaply/queryamoid/releases/tag/v0.1).
2874
2875 The configuration for each extension is another dictionary that can contain the fields documented below.
2876
2877 | Name | Description |
2878 | --- | --- |
2879 | `installation_mode` | Maps to a string indicating the installation mode for the extension. The valid strings are `allowed`,`blocked`,`force_installed`, and `normal_installed`.
2880 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`allowed` | Allows the extension to be installed by the user. This is the default behavior. There is no need for an install_url; it will automatically be allowed based on the ID.
2881 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`blocked`| Blocks installation of the extension and removes it from the device if already installed.
2882 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`force_installed`| The extension is automatically installed and can't be removed by the user. This option is not valid for the default configuration and requires an install_url.
2883 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`normal_installed`| The extension is automatically installed but can be disabled by the user. This option is not valid for the default configuration and requires an install_url.
2884 | `install_url`| Maps to a URL indicating where Firefox can download a force_installed or normal_installed extension.  If installing from the local file system, use a [```file:///``` URL](https://en.wikipedia.org/wiki/File_URI_scheme). If installing from the addons.mozilla.org, use the following URL (substituting SHORT_NAME from the URL on AMO), https://addons.mozilla.org/firefox/downloads/latest/SHORT_NAME/latest.xpi. Languages packs are available from https://releases.mozilla.org/pub/firefox/releases/VERSION/PLATFORM/xpi/LANGUAGE.xpi. If you need to update the extension, you can change the name of the extension and it will be automatically updated. Extensions installed from file URLs will additional be updated when their internal version changes.
2885 | `install_sources` | A list of sources from which installing extensions is allowed using URL match patterns. **This is unnecessary if you are only allowing the installation of certain extensions by ID.** Each item in this list is an extension-style match pattern. Users will be able to easily install items from any URL that matches an item in this list. Both the location of the *.xpi file and the page where the download is started from (i.e.  the referrer) must be allowed by these patterns. This setting can be used only for the default configuration.
2886 | `allowed_types` | This setting whitelists the allowed types of extension/apps that can be installed in Firefox. The value is a list of strings, each of which should be one of the following: "extension", "theme", "dictionary", "locale" This setting can be used only for the default configuration.
2887 | `blocked_install_message` | This maps to a string specifying the error message to display to users if they're blocked from installing an extension. This setting allows you to append text to the generic error message displayed when the extension is blocked. This could be be used to direct users to your help desk, explain why a particular extension is blocked, or something else. This setting can be used only for the default configuration.
2888 | `restricted_domains` | An array of domains on which content scripts can't be run. This setting can be used only for the default configuration.
2889 | `updates_disabled` | (Firefox 89, Firefox ESR 78.11) Boolean that indicates whether or not to disable automatic updates for an individual extension.
2890 | `default_area` | (Firefox 113) String that indicates where to place the extension icon by default. Possible values are `navbar` and `menupanel`.
2891 | `temporarily_allow_weak_signatures`| (Firefox 127) A boolean that indicates whether to allow installing extensions signed using deprecated signature algorithms.
2892
2893 **Compatibility:** Firefox 69, Firefox ESR 68.1 (As of Firefox 85, Firefox ESR 78.7, installing a theme makes it the default.)\
2894 **CCK2 Equivalent:** N/A\
2895 **Preferences Affected:** N/A
2896
2897 #### Windows (GPO)
2898 Software\Policies\Mozilla\Firefox\ExtensionSettings (REG_MULTI_SZ) =
2899 ```
2900 {
2901   "*": {
2902     "blocked_install_message": "Custom error message.",
2903     "install_sources": ["https://yourwebsite.com/*"],
2904     "installation_mode": "blocked",
2905     "allowed_types": ["extension"]
2906   },
2907   "uBlock0@raymondhill.net": {
2908     "installation_mode": "force_installed",
2909     "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
2910   },
2911   "https-everywhere@eff.org": {
2912     "installation_mode": "allowed",
2913     "updates_disabled": false
2914   }
2915 }
2916 ```
2917 #### Windows (Intune)
2918 OMA-URI:
2919 ```
2920 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/ExtensionSettings
2921 ```
2922 Value (string):
2923 ```
2924 <enabled/>
2925 <data id="ExtensionSettings" value='
2926 {
2927   "*": {
2928     "blocked_install_message": "Custom error message.",
2929     "install_sources": ["https://yourwebsite.com/*"],
2930     "installation_mode": "blocked",
2931     "allowed_types": ["extension"]
2932   },
2933   "uBlock0@raymondhill.net": {
2934     "installation_mode": "force_installed",
2935     "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
2936   },
2937     "https-everywhere@eff.org": {
2938     "installation_mode": "allowed",
2939     "updates_disabled": false
2940   }
2941 }'/>
2942 ```
2943 #### macOS
2944 ```
2945 <dict>
2946   <key>ExtensionSettings</key>
2947   <dict>
2948     <key>*</key>
2949     <dict>
2950       <key>blocked_install_message</key>
2951       <string>Custom error message.</string>
2952       <key>install_sources</key>
2953       <array>
2954         <string>"https://yourwebsite.com/*"</string>
2955       </array>
2956       <key>installation_mode</key>
2957       <string>blocked</string>
2958       <key>allowed_types</key>
2959       <array>
2960         <string>extension</string>
2961       </array>
2962     </dict>
2963     <key>uBlock0@raymondhill.net</key>
2964     <dict>
2965       <key>installation_mode</key>
2966       <string>force_installed</string>
2967       <key>install_url</key>
2968       <string>https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi</string>
2969     </dict>
2970     <key>https-everywhere@eff.org</key>
2971     <dict>
2972       <key>installation_mode</key>
2973       <string>allowed</string>
2974       <key>updates_disabled</key>
2975       <true/> | <false/>
2976     </dict>
2977   </dict>
2978 </dict>
2979 ```
2980 #### policies.json
2981 ```
2982 {
2983   "policies": {
2984     "ExtensionSettings": {
2985       "*": {
2986         "blocked_install_message": "Custom error message.",
2987         "install_sources": ["https://yourwebsite.com/*"],
2988         "installation_mode": "blocked",
2989         "allowed_types": ["extension"]
2990       },
2991       "uBlock0@raymondhill.net": {
2992         "installation_mode": "force_installed",
2993         "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
2994       },
2995       "https-everywhere@eff.org": {
2996         "installation_mode": "allowed",
2997         "updates_disabled": false
2998       }
2999     }
3000   }
3001 }
3002 ```
3003 ### ExtensionUpdate
3004 Control extension updates.
3005
3006 **Compatibility:** Firefox 67, Firefox ESR 60.7\
3007 **CCK2 Equivalent:** N/A\
3008 **Preferences Affected:** `extensions.update.enabled`
3009
3010 #### Windows (GPO)
3011 ```
3012 Software\Policies\Mozilla\Firefox\ExtensionUpdate = 0x1 | 0x0
3013 ```
3014 #### Windows (Intune)
3015 OMA-URI:
3016 ```
3017 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/ExtensionUpdate
3018 ```
3019 Value (string):
3020 ```
3021 <enabled/> or <disabled/>
3022 ```
3023 #### macOS
3024 ```
3025 <dict>
3026   <key>ExtensionUpdate</key>
3027   <true/> | <false/>
3028 </dict>
3029 ```
3030 #### policies.json
3031 ```
3032 {
3033   "policies": {
3034     "ExtensionUpdate": true | false
3035   }
3036 }
3037 ```
3038 ### FirefoxHome
3039 Customize the Firefox Home page.
3040
3041 **Compatibility:** Firefox 68, Firefox ESR 68 (SponsoredTopSites and SponsoredPocket were added in Firefox 95, Firefox ESR 91.4, Snippets was deprecated in Firefox 122)
3042 **CCK2 Equivalent:** N/A\
3043 **Preferences Affected:** `browser.newtabpage.activity-stream.showSearch`, `browser.newtabpage.activity-stream.feeds.topsites`, `browser.newtabpage.activity-stream.feeds.section.highlights`, `browser.newtabpage.activity-stream.feeds.section.topstories`, `browser.newtabpage.activity-stream.feeds.snippets`, `browser.newtabpage.activity-stream.showSponsoredTopSites`, `browser.newtabpage.activity-stream.showSponsored`
3044
3045 #### Windows (GPO)
3046 ```
3047 Software\Policies\Mozilla\Firefox\FirefoxHome\Search = 0x1 | 0x0
3048 Software\Policies\Mozilla\Firefox\FirefoxHome\TopSites = 0x1 | 0x0
3049 Software\Policies\Mozilla\Firefox\FirefoxHome\SponsoredTopSites = 0x1 | 0x0
3050 Software\Policies\Mozilla\Firefox\FirefoxHome\Highlights = 0x1 | 0x0
3051 Software\Policies\Mozilla\Firefox\FirefoxHome\Pocket = 0x1 | 0x0
3052 Software\Policies\Mozilla\Firefox\FirefoxHome\SponsoredPocket = 0x1 | 0x0
3053 Software\Policies\Mozilla\Firefox\FirefoxHome\Snippets = 0x1 | 0x0
3054 Software\Policies\Mozilla\Firefox\FirefoxHome\Locked = 0x1 | 0x0
3055 ```
3056 #### Windows (Intune)
3057 OMA-URI:
3058 ```
3059 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/CustomizeFirefoxHome
3060 ```
3061 Value (string):
3062 ```
3063 <enabled/>
3064 <data id="FirefoxHome_Search"  value="true | false"/>
3065 <data id="FirefoxHome_TopSites"  value="true | false"/>
3066 <data id="FirefoxHome_SponsoredTopSites"  value="true | false"/>
3067 <data id="FirefoxHome_Highlights"  value="true | false"/>
3068 <data id="FirefoxHome_Pocket"  value="true | false"/>
3069 <data id="FirefoxHome_SponsoredPocket"  value="true | false"/>
3070 <data id="FirefoxHome_Snippets"  value="true | false"/>
3071 <data id="FirefoxHome_Locked"  value="true | false"/>
3072 ```
3073 #### macOS
3074 ```
3075 <dict>
3076   <key>FirefoxHome</key>
3077   <dict>
3078     <key>Search</key>
3079     <true/> | <false/>
3080     <key>TopSites</key>
3081     <true/> | <false/>
3082     <key>SponsoredTopSites</key>
3083     <true/> | <false/>
3084     <key>Highlights</key>
3085     <true/> | <false/>
3086     <key>Pocket</key>
3087     <true/> | <false/>
3088     <key>SponsoredPocket</key>
3089     <true/> | <false/>
3090     <key>Snippets</key>
3091     <true/> | <false/>
3092     <key>Locked</key>
3093     <true/> | <false/>
3094   </dict>
3095 </dict>
3096 ```
3097 #### policies.json
3098 ```
3099 {
3100   "policies": {
3101     "FirefoxHome": {
3102       "Search": true | false,
3103       "TopSites": true | false,
3104       "SponsoredTopSites": true | false,
3105       "Highlights": true | false,
3106       "Pocket": true | false,
3107       "SponsoredPocket": true | false,
3108       "Snippets": true | false,
3109       "Locked": true | false
3110     }
3111   }
3112 }
3113 ```
3114 ### FirefoxSuggest
3115 Customize Firefox Suggest (US only).
3116
3117 **Compatibility:** Firefox 118, Firefox ESR 115.3.
3118 **CCK2 Equivalent:** N/A\
3119 **Preferences Affected:** `browser.urlbar.suggest.quicksuggest.nonsponsored`, `browser.urlbar.suggest.quicksuggest.sponsored`, `browser.urlbar.quicksuggest.dataCollection.enabled`
3120
3121 #### Windows (GPO)
3122 ```
3123 Software\Policies\Mozilla\Firefox\FirefoxSuggest\WebSuggestions = 0x1 | 0x0
3124 Software\Policies\Mozilla\Firefox\FirefoxSuggest\SponsoredSuggestions = 0x1 | 0x0
3125 Software\Policies\Mozilla\Firefox\FirefoxSuggest\ImproveSuggest = 0x1 | 0x0
3126 Software\Policies\Mozilla\Firefox\FirefoxSuggest\Locked = 0x1 | 0x0
3127 ```
3128 #### Windows (Intune)
3129 OMA-URI:
3130 ```
3131 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~FirefoxSuggest/WebSuggestions
3132 ```
3133 Value (string):
3134 ```
3135 <enabled/> or <disabled/>
3136 ```
3137 OMA-URI:
3138 ```
3139 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~FirefoxSuggest/SponsoredSuggestions
3140 ```
3141 Value (string):
3142 ```
3143 <enabled/> or <disabled/>
3144 ```
3145 OMA-URI:
3146 ```
3147 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~FirefoxSuggest/ImproveSuggest
3148 ```
3149 Value (string):
3150 ```
3151 <enabled/> or <disabled/>
3152 ```
3153 OMA-URI:
3154 ```
3155 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~FirefoxSuggest/Locked
3156 ```
3157 Value (string):
3158 ```
3159 <enabled/> or <disabled/>
3160 ```
3161 #### macOS
3162 ```
3163 <dict>
3164   <key>FirefoxSuggest</key>
3165   <dict>
3166     <key>WebSuggestions</key>
3167     <true/> | <false/>
3168     <key>SponsoredSuggestions</key>
3169     <true/> | <false/>
3170     <key>ImproveSuggest</key>
3171     <true/> | <false/>
3172     <key>Locked</key>
3173     <true/> | <false/>
3174   </dict>
3175 </dict>
3176 ```
3177 #### policies.json
3178 ```
3179 {
3180   "policies": {
3181     "FirefoxSuggest": {
3182       "WebSuggestions": true | false,
3183       "SponsoredSuggestions": true | false,
3184       "ImproveSuggest": true | false,
3185       "Locked": true | false
3186     }
3187   }
3188 }
3189 ```
3190 ### GoToIntranetSiteForSingleWordEntryInAddressBar
3191 Whether to always go through the DNS server before sending a single word search string to a search engine.
3192
3193 If the site exists, it will navigate to the website. If the intranet responds with a 404, the page will show a 404. If the intranet does not respond, the browser will attempt a search.
3194
3195 The second result in the URL bar will be a search result to allow users to conduct a web search exactly as it was entered.
3196
3197 If instead you would like to enable the ability to have your domain appear as a valid URL and to disallow the browser from ever searching that term using the first result that matches it, add the pref `browser.fixup.domainwhitelist.YOUR_DOMAIN` (where `YOUR_DOMAIN` is the name of the domain you'd like to add), and set the pref to `true`. The URL bar will then suggest `YOUR_DOMAIN` when the user fully types `YOUR_DOMAIN`. If the user attempts to load that domain and it fails to load, it will show an "Unable to connect" error page.
3198
3199 You can also whitelist a domain suffix that is not part of the [Public Suffix List](https://publicsuffix.org/) by adding the pref `browser.fixup.domainsuffixwhitelist.YOUR_DOMAIN_SUFFIX` with a value of `true`.
3200
3201 Additionally, if you want users to see a "Did you mean to go to 'YOUR_DOMAIN'" prompt below the URL bar if they land on a search results page instead of an intranet domain that provides a response, set the pref `browser.urlbar.dnsResolveSingleWordsAfterSearch` to `1`. Enabling this will cause the browser to commit a DNS check after every single word search. If the browser receives a response from the intranet, a prompt will ask the user if they'd like to instead navigate to `YOUR_DOMAIN`. If the user presses the **yes** button, `browser.fixup.domainwhitelist.YOUR_DOMAIN` will be set to `true`.
3202
3203 **Compatibility:** Firefox 104, Firefox ESR 102.2\
3204 **CCK2 Equivalent:** `N/A`\
3205 **Preferences Affected:** `browser.fixup.dns_first_for_single_words`
3206
3207 #### Windows (GPO)
3208 ```
3209 Software\Policies\Mozilla\Firefox\GoToIntranetSiteForSingleWordEntryInAddressBar = 0x1 | 0x0
3210 ```
3211 #### Windows (Intune)
3212 OMA-URI:
3213 ```
3214 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/GoToIntranetSiteForSingleWordEntryInAddressBar
3215 ```
3216 Value (string):
3217 ```
3218 <enabled/> or <disabled/>
3219 ```
3220 #### macOS
3221 ```
3222 <dict>
3223   <key>GoToIntranetSiteForSingleWordEntryInAddressBar</key>
3224   <true/> | <false/>
3225 </dict>
3226 ```
3227 #### policies.json
3228 ```
3229 {
3230   "policies": {
3231     "GoToIntranetSiteForSingleWordEntryInAddressBar": true | false
3232   }
3233 }
3234 ```
3235 ### Handlers
3236 Configure default application handlers. This policy is based on the internal format of `handlers.json`.
3237
3238 You can configure handlers based on a mime type (`mimeTypes`), a file's extension (`extensions`), or a protocol (`schemes`).
3239
3240 Within each handler type, you specify the given mimeType/extension/scheme as a key and use the following subkeys to describe how it is handled.
3241
3242 | Name | Description |
3243 | --- | --- |
3244 | `action`| Can be either `saveToDisk`, `useHelperApp`, `useSystemDefault`.
3245 | `ask` | If `true`, the user is asked if what they want to do with the file. If `false`, the action is taken without user intervention.
3246 | `handlers` | An array of handlers with the first one being the default. If you don't want to have a default handler, use an empty object for the first handler. Choose between path or uriTemplate.
3247 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`name` | The display name of the handler (might not be used).
3248 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`path`| The native path to the executable to be used.
3249 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`uriTemplate`| A url to a web based application handler. The URL must be https and contain a %s to be used for substitution.
3250
3251 **Compatibility:** Firefox 78, Firefox ESR 78\
3252 **CCK2 Equivalent:** N/A\
3253 **Preferences Affected:** N/A
3254
3255 #### Windows (GPO)
3256 Software\Policies\Mozilla\Firefox\Handlers (REG_MULTI_SZ) =
3257 ```
3258 {
3259   "mimeTypes": {
3260     "application/msword": {
3261       "action": "useSystemDefault",
3262       "ask": true | false
3263     }
3264   },
3265   "schemes": {
3266     "mailto": {
3267       "action": "useHelperApp",
3268       "ask": true | false,
3269       "handlers": [{
3270         "name": "Gmail",
3271         "uriTemplate": "https://mail.google.com/mail/?extsrc=mailto&url=%s"
3272       }]
3273     }
3274   },
3275   "extensions": {
3276     "pdf": {
3277       "action": "useHelperApp",
3278       "ask": true | false,
3279       "handlers": [{
3280         "name": "Adobe Acrobat",
3281         "path": "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32.exe"
3282       }]
3283     }
3284   }
3285 }
3286 ```
3287 #### Windows (Intune)
3288 OMA-URI:
3289 ```
3290 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Handlers
3291 ```
3292 Value (string):
3293 ```
3294 <enabled/>
3295 <data id="Handlers" value='
3296 {
3297   "mimeTypes": {
3298     "application/msword": {
3299       "action": "useSystemDefault",
3300       "ask": true | false
3301     }
3302   },
3303   "schemes": {
3304     "mailto": {
3305       "action": "useHelperApp",
3306       "ask": true | false,
3307       "handlers": [{
3308         "name": "Gmail",
3309         "uriTemplate": "https://mail.google.com/mail/?extsrc=mailto&amp;url=%s"
3310       }]
3311     }
3312   },
3313   "extensions": {
3314     "pdf": {
3315       "action": "useHelperApp",
3316       "ask": true | false,
3317       "handlers": [{
3318         "name": "Adobe Acrobat",
3319         "path": "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32.exe"
3320       }]
3321     }
3322   }
3323 }
3324 '/>
3325 ```
3326 #### macOS
3327 ```
3328 <dict>
3329   <key>Handlers</key>
3330   <dict>
3331     <key>mimeTypes</key>
3332     <dict>
3333       <key>application/msword</key>
3334       <dict>
3335         <key>action</key>
3336         <string>useSystemDefault</string>
3337         <key>ask</key>
3338         <true/> | <false/>
3339       </dict>
3340     </dict>
3341     <key>schemes</key>
3342     <dict>
3343       <key>mailto</key>
3344       <dict>
3345         <key>action</key>
3346         <string>useHelperApp</string>
3347         <key>ask</key>
3348         <true/> | <false/>
3349         <key>handlers</key>
3350         <array>
3351           <dict>
3352             <key>name</key>
3353             <string>Gmail</string>
3354             <key>uriTemplate</key>
3355             <string>https://mail.google.com/mail/?extsrc=mailto&url=%s</string>
3356           </dict>
3357         </array>
3358       </dict>
3359     </dict>
3360     <key>extensions</key>
3361     <dict>
3362       <key>pdf</key>
3363       <dict>
3364         <key>action</key>
3365         <string>useHelperApp</string>
3366         <key>ask</key>
3367         <true/> | <false/>
3368         <key>handlers</key>
3369         <array>
3370           <dict>
3371             <key>name</key>
3372             <string>Adobe Acrobat</string>
3373             <key>path</key>
3374             <string>/System/Applications/Preview.app</string>
3375           </dict>
3376         </array>
3377       </dict>
3378     </dict>
3379   </dict>
3380 </dict>
3381 ```
3382 #### policies.json
3383 ```
3384 {
3385   "policies": {
3386     "Handlers": {
3387       "mimeTypes": {
3388         "application/msword": {
3389           "action": "useSystemDefault",
3390           "ask": false
3391         }
3392       },
3393       "schemes": {
3394         "mailto": {
3395           "action": "useHelperApp",
3396           "ask": true | false,
3397           "handlers": [{
3398             "name": "Gmail",
3399             "uriTemplate": "https://mail.google.com/mail/?extsrc=mailto&url=%s"
3400           }]
3401         }
3402       },
3403       "extensions": {
3404         "pdf": {
3405           "action": "useHelperApp",
3406           "ask": true | false,
3407           "handlers": [{
3408             "name": "Adobe Acrobat",
3409             "path": "/usr/bin/acroread"
3410           }]
3411         }
3412       }
3413     }
3414   }
3415 }
3416 ```
3417 ### HardwareAcceleration
3418 Control hardware acceleration.
3419
3420 **Compatibility:** Firefox 60, Firefox ESR 60\
3421 **CCK2 Equivalent:** N/A\
3422 **Preferences Affected:** `layers.acceleration.disabled`
3423
3424 #### Windows (GPO)
3425 ```
3426 Software\Policies\Mozilla\Firefox\HardwareAcceleration = 0x1 | 0x0
3427 ```
3428 #### Windows (Intune)
3429 OMA-URI:
3430 ```
3431 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/HardwareAcceleration
3432 ```
3433 Value (string):
3434 ```
3435 <enabled/> or <disabled/>
3436 ```
3437 #### macOS
3438 ```
3439 <dict>
3440   <key>HardwareAcceleration</key>
3441   <true/> | <false/>
3442 </dict>
3443 ```
3444 #### policies.json
3445 ```
3446 {
3447   "policies": {
3448     "HardwareAcceleration": true | false
3449   }
3450 }
3451 ```
3452 ### Homepage
3453 Configure the default homepage and how Firefox starts.
3454
3455 `URL` is the default homepage.
3456
3457 `Locked` prevents the user from changing homepage preferences.
3458
3459 `Additional` allows for more than one homepage.
3460
3461 `StartPage` is how Firefox starts. The choices are no homepage, the default homepage or the previous session.
3462
3463 With Firefox 78, an additional option as added for `Startpage`, `homepage-locked`. If this is value is set for the Startpage, the user will always get the homepage at startup and cannot choose to restore their session.
3464
3465 **Compatibility:** Firefox 60, Firefox ESR 60 (StartPage was added in Firefox 60, Firefox ESR 60.4, homepage-locked added in Firefox 78)\
3466 **CCK2 Equivalent:** `homePage`,`lockHomePage`\
3467 **Preferences Affected:** `browser.startup.homepage`, `browser.startup.page`
3468
3469 #### Windows (GPO)
3470 ```
3471 Software\Policies\Mozilla\Firefox\Homepage\URL = "https://example.com"
3472 Software\Policies\Mozilla\Firefox\Homepage\Locked = 0x1 | 0x0
3473 Software\Policies\Mozilla\Firefox\Homepage\Additional\1 = "https://example.org"
3474 Software\Policies\Mozilla\Firefox\Homepage\Additional\2 = "https://example.edu"
3475 Software\Policies\Mozilla\Firefox\Homepage\StartPage = "none" | "homepage" | "previous-session" | "homepage-locked"
3476 ```
3477 #### Windows (Intune)
3478 OMA-URI:
3479 ```
3480 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageURL
3481 ```
3482 Value (string):
3483 ```
3484 <enabled/>
3485
3486 <data id="HomepageURL" value="https://example.com"/>
3487 <data id="HomepageLocked" value="true | false"/>
3488 ```
3489 OMA-URI:
3490 ```
3491 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageAdditional
3492 ```
3493 Value (string):
3494 ```
3495 <enabled/>
3496
3497 <data id="HomepageAdditional" value="1&#xF000;http://example.org&#xF000;2&#xF000;http://example.edu"/>
3498 ```
3499 OMA-URI:
3500 ```
3501 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageStartPage
3502 ```
3503 Value (string):
3504 ```
3505 <enabled/>
3506
3507 <data id="StartPage" value="none | homepage | previous-session"/>
3508 ```
3509 #### macOS
3510 ```
3511 <dict>
3512   <key>Homepage</key>
3513   <dict>
3514     <key>URL</key>
3515     <string>http://example.com</string>
3516     <key>Locked</key>
3517     <true/> | <false/>
3518     <key>Additional</key>
3519     <array>
3520       <string>http://example.org</string>
3521       <string>http://example.edu</string>
3522     </array>
3523     <key>StartPage</key>
3524     <string>none | homepage | previous-session | homepage-locked</string>
3525   </dict>
3526 </dict>
3527 ```
3528 #### policies.json
3529 ```
3530 {
3531   "policies": {
3532     "Homepage": {
3533       "URL": "http://example.com/",
3534       "Locked": true | false,
3535       "Additional": ["http://example.org/",
3536                      "http://example.edu/"],
3537       "StartPage": "none" | "homepage" | "previous-session" | "homepage-locked"
3538     }
3539   }
3540 }
3541 ```
3542 ### InstallAddonsPermission
3543 Configure the default extension install policy as well as origins for extension installs are allowed. This policy does not override turning off all extension installs.
3544
3545 `Allow` is a list of origins where extension installs are allowed.
3546
3547 `Default` determines whether or not extension installs are allowed by default.
3548
3549 **Compatibility:** Firefox 60, Firefox ESR 60\
3550 **CCK2 Equivalent:** `permissions.install`\
3551 **Preferences Affected:** `xpinstall.enabled`
3552
3553 #### Windows (GPO)
3554 ```
3555 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Allow\1 = "https://example.org"
3556 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Allow\2 = "https://example.edu"
3557 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Default = 0x1 | 0x0
3558 ```
3559 #### Windows (Intune)
3560 OMA-URI:
3561 ```
3562 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Addons/InstallAddonsPermission_Allow
3563 ```
3564 Value (string):
3565 ```
3566 <enabled/>
3567 <data id="Permissions" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
3568 ```
3569 OMA-URI:
3570 ```
3571 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Addons/InstallAddonsPermission_Default
3572 ```
3573 Value (string):
3574 ```
3575 <enabled/>
3576 ```
3577 #### macOS
3578 ```
3579 <dict>
3580   <key>InstallAddonsPermission</key>
3581   <dict>
3582     <key>Allow</key>
3583     <array>
3584       <string>http://example.org</string>
3585       <string>http://example.edu</string>
3586     </array>
3587     <key>Default</key>
3588     <true/> | <false/>
3589   </dict>
3590 </dict>
3591 ```
3592 #### policies.json
3593 ```
3594 {
3595   "policies": {
3596     "InstallAddonsPermission": {
3597       "Allow": ["http://example.org/",
3598                 "http://example.edu/"],
3599       "Default": true | false
3600     }
3601   }
3602 }
3603 ```
3604 ### LegacyProfiles
3605 Disable the feature enforcing a separate profile for each installation.
3606
3607 If this policy set to true, Firefox will not try to create different profiles for installations of Firefox in different directories. This is the equivalent of the MOZ_LEGACY_PROFILES environment variable.
3608
3609 If this policy set to false, Firefox will create a new profile for each unique installation of Firefox.
3610
3611 This policy only work on Windows via GPO (not policies.json).
3612
3613 **Compatibility:** Firefox 70, Firefox ESR 68.2 (Windows only, GPO only)\
3614 **CCK2 Equivalent:** N/A\
3615 **Preferences Affected:** N/A
3616
3617 #### Windows (GPO)
3618 ```
3619 Software\Policies\Mozilla\Firefox\LegacyProfiles = = 0x1 | 0x0
3620 ```
3621 #### Windows (Intune)
3622 OMA-URI:
3623 ```
3624 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/LegacyProfiles
3625 ```
3626 Value (string):
3627 ```
3628 <enabled/> or <disabled/>
3629 ```
3630 ### LegacySameSiteCookieBehaviorEnabled
3631 Enable default legacy SameSite cookie behavior setting.
3632
3633 If this policy is set to true, it reverts all cookies to legacy SameSite behavior which means that cookies that don't explicitly specify a ```SameSite``` attribute are treated as if they were ```SameSite=None```.
3634
3635 **Compatibility:** Firefox 96\
3636 **CCK2 Equivalent:** N/A\
3637 **Preferences Affected:** `network.cookie.sameSite.laxByDefault`
3638
3639 #### Windows (GPO)
3640 ```
3641 Software\Policies\Mozilla\Firefox\LegacySameSiteCookieBehaviorEnabled = = 0x1 | 0x0
3642 ```
3643 #### Windows (Intune)
3644 OMA-URI:
3645 ```
3646 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/LegacySameSiteCookieBehaviorEnabled
3647 ```
3648 Value (string):
3649 ```
3650 <enabled/> or <disabled/>
3651 ```
3652 #### macOS
3653 ```
3654 <dict>
3655   <key>LegacySameSiteCookieBehaviorEnabled</key>
3656   <true/> | <false/>
3657 </dict>
3658 ```
3659 #### policies.json
3660 ```
3661 {
3662   "policies": {
3663     "LegacySameSiteCookieBehaviorEnabled": true | false
3664 }
3665 ```
3666 ### LegacySameSiteCookieBehaviorEnabledForDomainList
3667 Revert to legacy SameSite behavior for cookies on specified sites.
3668
3669 If this policy is set to true, cookies set for domains in this list will revert to legacy SameSite behavior which means that cookies that don't explicitly specify a ```SameSite``` attribute are treated as if they were ```SameSite=None```.
3670
3671 **Compatibility:** Firefox 96\
3672 **CCK2 Equivalent:** N/A\
3673 **Preferences Affected:** `network.cookie.sameSite.laxByDefault.disabledHosts`
3674
3675 #### Windows (GPO)
3676 ```
3677 Software\Policies\Mozilla\Firefox\LegacySameSiteCookieBehaviorEnabledForDomainList\1 = "example.org"
3678 Software\Policies\Mozilla\Firefox\LegacySameSiteCookieBehaviorEnabledForDomainList\2 = "example.edu"
3679 ```
3680 #### Windows (Intune)
3681 OMA-URI:
3682 ```
3683 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/LegacySameSiteCookieBehaviorEnabledForDomainList
3684 ```
3685 Value (string):
3686 ```
3687 <enabled/>
3688 <data id="LegacySameSiteCookieBehaviorEnabledForDomainList" value="1&#xF000;example.org&#xF000;2&#xF000;example.edu"/>
3689 ```
3690 #### macOS
3691 ```
3692 <dict>
3693   <key>LegacySameSiteCookieBehaviorEnabledForDomainList</key>
3694   <array>
3695     <string>example.org</string>
3696     <string>example.edu</string>
3697   </array>
3698 </dict>
3699 ```
3700 #### policies.json
3701 ```
3702 {
3703   "policies": {
3704     "LegacySameSiteCookieBehaviorEnabledForDomainList": ["example.org",
3705                                                          "example.edu"]
3706   }
3707 }
3708 ```
3709 ### LocalFileLinks
3710 Enable linking to local files by origin.
3711
3712 **Compatibility:** Firefox 68, Firefox ESR 68\
3713 **CCK2 Equivalent:** N/A\
3714 **Preferences Affected:** `capability.policy.localfilelinks.*`
3715
3716 #### Windows (GPO)
3717 ```
3718 Software\Policies\Mozilla\Firefox\LocalFileLinks\1 = "https://example.org"
3719 Software\Policies\Mozilla\Firefox\LocalFileLinks\2 = "https://example.edu"
3720 ```
3721 #### Windows (Intune)
3722 OMA-URI:
3723 ```
3724 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/LocalFileLinks
3725 ```
3726 Value (string):
3727 ```
3728 <enabled/>
3729 <data id="LocalFileLinks" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
3730 ```
3731 #### macOS
3732 ```
3733 <dict>
3734   <key>LocalFileLinks</key>
3735   <array>
3736     <string>http://example.org</string>
3737     <string>http://example.edu</string>
3738   </array>
3739 </dict>
3740 ```
3741 #### policies.json
3742 ```
3743 {
3744   "policies": {
3745     "LocalFileLinks": ["http://example.org/",
3746                        "http://example.edu/"]
3747   }
3748 }
3749 ```
3750 ### ManagedBookmarks
3751 Configures a list of bookmarks managed by an administrator that cannot be changed by the user.
3752
3753 The bookmarks are only added as a button on the personal toolbar. They are not in the bookmarks folder.
3754
3755 The syntax of this policy is exactly the same as the [Chrome ManagedBookmarks policy](https://cloud.google.com/docs/chrome-enterprise/policies/?policy=ManagedBookmarks). The schema is:
3756 ```
3757 {
3758  "items": {
3759   "id": "BookmarkType",
3760   "properties": {
3761    "children": {
3762     "items": {
3763      "$ref": "BookmarkType"
3764     },
3765     "type": "array"
3766    },
3767    "name": {
3768     "type": "string"
3769    },
3770    "toplevel_name": {
3771     "type": "string"
3772    },
3773    "url": {
3774     "type": "string"
3775    }
3776   },
3777   "type": "object"
3778  },
3779  "type": "array"
3780 }
3781 ```
3782 **Compatibility:** Firefox 83, Firefox ESR 78.5\
3783 **CCK2 Equivalent:** N/A\
3784 **Preferences Affected:** N/A
3785
3786 #### Windows (GPO)
3787 Software\Policies\Mozilla\Firefox\ManagedBookmarks (REG_MULTI_SZ) =
3788 ```
3789 [
3790   {
3791     "toplevel_name": "My managed bookmarks folder"
3792   },
3793   {
3794     "url": "example.com",
3795     "name": "Example"
3796   },
3797   {
3798     "name": "Mozilla links",
3799     "children": [
3800       {
3801         "url": "https://mozilla.org",
3802         "name": "Mozilla.org"
3803       },
3804       {
3805         "url": "https://support.mozilla.org/",
3806         "name": "SUMO"
3807       }
3808     ]
3809   }
3810 ]
3811 ```
3812 #### Windows (Intune)
3813 OMA-URI:
3814 ```
3815 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/ManagedBookmarks
3816 ```
3817 Value (string):
3818 ```
3819 <enabled/>
3820 <data id="JSON" value='
3821 [
3822   {
3823     "toplevel_name": "My managed bookmarks folder"
3824   },
3825   {
3826     "url": "example.com",
3827     "name": "Example"
3828   },
3829   {
3830     "name": "Mozilla links",
3831     "children": [
3832       {
3833         "url": "https://mozilla.org",
3834         "name": "Mozilla.org"
3835       },
3836       {
3837         "url": "https://support.mozilla.org/",
3838         "name": "SUMO"
3839       }
3840     ]
3841   }
3842 ]'/>
3843 ```
3844 #### macOS
3845 ```
3846 <dict>
3847   <key>ManagedBookmarks</key>
3848   <array>
3849     <dict>
3850       <key>toplevel_name</key>
3851       <string>My managed bookmarks folder</string>
3852       <dict>
3853         <key>url</key>
3854         <string>example.com</string>
3855         <key>name</key>
3856         <string>Example</string>
3857       </dict>
3858       <dict>
3859       <key>name</key>
3860       <string>Mozilla links</string>
3861       <key>children</key>
3862       <array>
3863         <dict>
3864           <key>url</key>
3865           <string>https://mozilla.org</string>
3866           <key>name</key>
3867           <string>Mozilla</string>
3868         </dict>
3869         <dict>
3870           <key>url</key>
3871           <string>https://support.mozilla.org/</string>
3872           <key>name</key>
3873           <string>SUMO</string>
3874         </dict>
3875       </array>
3876     </dict>
3877   </array>
3878 </dict>
3879 ```
3880 #### policies.json
3881 ```
3882 {
3883   "policies": {
3884     "ManagedBookmarks": [
3885       {
3886         "toplevel_name": "My managed bookmarks folder"
3887       },
3888       {
3889         "url": "example.com",
3890         "name": "Example"
3891       },
3892       {
3893         "name": "Mozilla links",
3894         "children": [
3895           {
3896             "url": "https://mozilla.org",
3897             "name": "Mozilla.org"
3898           },
3899           {
3900             "url": "https://support.mozilla.org/",
3901             "name": "SUMO"
3902           }
3903         ]
3904       }
3905     ]
3906   }
3907 }
3908 ```
3909 ### ManualAppUpdateOnly
3910
3911 Switch to manual updates only.
3912
3913 If this policy is enabled:
3914  1. The user will never be prompted to install updates
3915  2. Firefox will not check for updates in the background, though it will check automatically when an update UI is displayed (such as the one in the About dialog). This check will be used to show "Update to version X" in the UI, but will not automatically download the update or prompt the user to update in any other way.
3916  3. The update UI will work as expected, unlike when using DisableAppUpdate.
3917
3918 This policy is primarily intended for advanced end users, not for enterprises, but it is available via GPO.
3919
3920 **Compatibility:** Firefox 87\
3921 **CCK2 Equivalent:** N/A\
3922 **Preferences Affected:** N/A
3923
3924 #### Windows (GPO)
3925 ```
3926 Software\Policies\Mozilla\Firefox\ManualAppUpdateOnly = 0x1 | 0x0
3927 ```
3928 #### Windows (Intune)
3929 OMA-URI:
3930 ```
3931 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/ManualAppUpdateOnly
3932 ```
3933 Value (string):
3934 ```
3935 <enabled/> or <disabled/>
3936 ```
3937 #### macOS
3938 ```
3939 <dict>
3940   <key>ManualAppUpdateOnly</key>
3941   <true/> | <false/>
3942 </dict>
3943 ```
3944 #### policies.json
3945 ```
3946 {
3947   "policies": {
3948     "ManualAppUpdateOnly": true | false
3949   }
3950 }
3951 ```
3952 ### NetworkPrediction
3953 Enable or disable network prediction (DNS prefetching).
3954
3955 **Compatibility:** Firefox 67, Firefox ESR 60.7\
3956 **CCK2 Equivalent:** N/A\
3957 **Preferences Affected:** `network.dns.disablePrefetch`, `network.dns.disablePrefetchFromHTTPS`
3958
3959 #### Windows (GPO)
3960 ```
3961 Software\Policies\Mozilla\Firefox\NetworkPrediction = 0x1 | 0x0
3962 ```
3963 #### Windows (Intune)
3964 OMA-URI:
3965 ```
3966 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NetworkPrediction
3967 ```
3968 Value (string):
3969 ```
3970 <enabled/> or <disabled/>
3971 ```
3972 #### macOS
3973 ```
3974 <dict>
3975   <key>NetworkPrediction</key>
3976   <true/> | <false/>
3977 </dict>
3978 ```
3979 #### policies.json
3980 ```
3981 {
3982   "policies": {
3983     "NetworkPrediction": true | false
3984 }
3985 ```
3986 ### NewTabPage
3987 Enable or disable the New Tab page.
3988
3989 **Compatibility:** Firefox 68, Firefox ESR 68\
3990 **CCK2 Equivalent:** N/A\
3991 **Preferences Affected:** `browser.newtabpage.enabled`
3992
3993 #### Windows (GPO)
3994 ```
3995 Software\Policies\Mozilla\Firefox\NewTabPage = 0x1 | 0x0
3996 ```
3997 #### Windows (Intune)
3998 OMA-URI:
3999 ```
4000 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NewTabPage
4001 ```
4002 Value (string):
4003 ```
4004 <enabled/> or <disabled/>
4005 ```
4006 #### macOS
4007 ```
4008 <dict>
4009   <key>NewTabPage</key>
4010   <true/> | <false/>
4011 </dict>
4012 ```
4013 #### policies.json
4014 ```
4015 {
4016   "policies": {
4017     "NewTabPage": true | false
4018 }
4019 ```
4020 ### NoDefaultBookmarks
4021 Disable the creation of default bookmarks.
4022
4023 This policy is only effective if the user profile has not been created yet.
4024
4025 **Compatibility:** Firefox 60, Firefox ESR 60\
4026 **CCK2 Equivalent:** `removeDefaultBookmarks`\
4027 **Preferences Affected:** N/A
4028
4029 #### Windows (GPO)
4030 ```
4031 Software\Policies\Mozilla\Firefox\NoDefaultBookmarks = 0x1 | 0x0
4032 ```
4033 #### Windows (Intune)
4034 OMA-URI:
4035 ```
4036 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NoDefaultBookmarks
4037 ```
4038 Value (string):
4039 ```
4040 <enabled/> or <disabled/>
4041 ```
4042 #### macOS
4043 ```
4044 <dict>
4045   <key>NoDefaultBookmarks</key>
4046   <true/> | <false/>
4047 </dict>
4048 ```
4049 #### policies.json
4050 ```
4051 {
4052   "policies": {
4053     "NoDefaultBookmarks": true | false
4054   }
4055 }
4056 ```
4057 ### OfferToSaveLogins
4058 Control whether or not Firefox offers to save passwords.
4059
4060 **Compatibility:** Firefox 60, Firefox ESR 60\
4061 **CCK2 Equivalent:** `dontRememberPasswords`\
4062 **Preferences Affected:** `signon.rememberSignons`
4063
4064 #### Windows (GPO)
4065 ```
4066 Software\Policies\Mozilla\Firefox\OfferToSaveLogins = 0x1 | 0x0
4067 ```
4068 #### Windows (Intune)
4069 OMA-URI:
4070 ```
4071 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OfferToSaveLogins
4072 ```
4073 Value (string):
4074 ```
4075 <enabled/> or <disabled/>
4076 ```
4077 #### macOS
4078 ```
4079 <dict>
4080   <key>OfferToSaveLogins</key>
4081   <true/> | <false/>
4082 </dict>
4083 ```
4084 #### policies.json
4085 ```
4086 {
4087   "policies": {
4088     "OfferToSaveLogins": true | false
4089   }
4090 }
4091 ```
4092 ### OfferToSaveLoginsDefault
4093 Sets the default value of signon.rememberSignons without locking it.
4094
4095 **Compatibility:** Firefox 70, Firefox ESR 60.2\
4096 **CCK2 Equivalent:** `dontRememberPasswords`\
4097 **Preferences Affected:** `signon.rememberSignons`
4098
4099 #### Windows (GPO)
4100 ```
4101 Software\Policies\Mozilla\Firefox\OfferToSaveLoginsDefault = 0x1 | 0x0
4102 ```
4103 #### Windows (Intune)
4104 OMA-URI:
4105 ```
4106 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OfferToSaveLoginsDefault
4107 ```
4108 Value (string):
4109 ```
4110 <enabled/> or <disabled/>
4111 ```
4112 #### macOS
4113 ```
4114 <dict>
4115   <key>OfferToSaveLoginsDefault</key>
4116   <true/> | <false/>
4117 </dict>
4118 ```
4119 #### policies.json
4120 ```
4121 {
4122   "policies": {
4123     "OfferToSaveLoginsDefault": true | false
4124   }
4125 }
4126 ```
4127 ### OverrideFirstRunPage
4128 Override the first run page. If the value is an empty string (""), the first run page is not displayed.
4129
4130 Starting with Firefox 83, Firefox ESR 78.5, you can also specify multiple URLS separated by a vertical bar (|).
4131
4132 **Compatibility:** Firefox 60, Firefox ESR 60\
4133 **CCK2 Equivalent:** `welcomePage`,`noWelcomePage`\
4134 **Preferences Affected:** `startup.homepage_welcome_url`
4135
4136 #### Windows (GPO)
4137 ```
4138 Software\Policies\Mozilla\Firefox\OverrideFirstRunPage = "http://example.org"
4139 ```
4140 #### Windows (Intune)
4141 OMA-URI:
4142 ```
4143 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OverrideFirstRunPage
4144 ```
4145 Value (string):
4146 ```
4147 <enabled/>
4148 <data id="OverridePage" value="https://example.com"/>
4149 ```
4150 #### macOS
4151 ```
4152 <dict>
4153   <key>OverrideFirstRunPage</key>
4154   <string>http://example.org</string>
4155 </dict>
4156 ```
4157 #### policies.json
4158 ```
4159 {
4160   "policies": {
4161     "OverrideFirstRunPage": "http://example.org"
4162   }
4163 }
4164 ```
4165 ### OverridePostUpdatePage
4166 Override the upgrade page. If the value is an empty string (""), no extra pages are displayed when Firefox is upgraded.
4167
4168 **Compatibility:** Firefox 60, Firefox ESR 60\
4169 **CCK2 Equivalent:** `upgradePage`,`noUpgradePage`\
4170 **Preferences Affected:** `startup.homepage_override_url`
4171
4172 #### Windows (GPO)
4173 ```
4174 Software\Policies\Mozilla\Firefox\OverridePostUpdatePage = "http://example.org"
4175 ```
4176 #### Windows (Intune)
4177 OMA-URI:
4178 ```
4179 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OverridePostUpdatePage
4180 ```
4181 Value (string):
4182 ```
4183 <enabled/>
4184 <data id="OverridePage" value="https://example.com"/>
4185 ```
4186 #### macOS
4187 ```
4188 <dict>
4189   <key>OverridePostUpdatePage</key>
4190   <string>http://example.org</string>
4191 </dict>
4192 ```
4193 #### policies.json
4194 ```
4195 {
4196   "policies": {
4197     "OverridePostUpdatePage": "http://example.org"
4198   }
4199 }
4200 ```
4201 ### PasswordManagerEnabled
4202 Remove access to the password manager via preferences and blocks about:logins on Firefox 70.
4203
4204 **Compatibility:** Firefox 70, Firefox ESR 60.2\
4205 **CCK2 Equivalent:** N/A\
4206 **Preferences Affected:** `pref.privacy.disable_button.view_passwords`
4207
4208 #### Windows (GPO)
4209 ```
4210 Software\Policies\Mozilla\Firefox\PasswordManagerEnabled = 0x1 | 0x0
4211 ```
4212 #### Windows (Intune)
4213 OMA-URI:
4214 ```
4215 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PasswordManagerEnabled
4216 ```
4217 Value (string):
4218 ```
4219 <enabled/> or <disabled/>
4220 ```
4221 #### macOS
4222 ```
4223 <dict>
4224   <key>PasswordManagerEnabled</key>
4225   <true/> | <false/>
4226 </dict>
4227 ```
4228 #### policies.json
4229 ```
4230 {
4231   "policies": {
4232     "PasswordManagerEnabled": true | false
4233   }
4234 }
4235 ```
4236 ### PasswordManagerExceptions
4237 Prevent Firefox from saving passwords for specific sites.
4238
4239 The sites are specified as a list of origins.
4240
4241 **Compatibility:** Firefox 101\
4242 **CCK2 Equivalent:** N/A\
4243 **Preferences Affected:** N/A
4244
4245 #### Windows (GPO)
4246 ```
4247 Software\Policies\Mozilla\Firefox\PasswordManagerExceptions\1 = "https://example.org"
4248 Software\Policies\Mozilla\Firefox\PasswordManagerExceptions\2 = "https://example.edu"
4249 ```
4250 #### Windows (Intune)
4251 OMA-URI:
4252 ```
4253 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PasswordManagerExceptions
4254 ```
4255 Value (string):
4256 ```
4257 <enabled/>
4258 <data id="List" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
4259 ```
4260 #### macOS
4261 ```
4262 <dict>
4263   <key>PasswordManagerExceptions</key>
4264   <array>
4265     <string>https://example.org</string>
4266     <string>https://example.edu</string>
4267   </array>
4268 </dict>
4269 ```
4270 #### policies.json
4271 ```
4272 {
4273   "policies": {
4274     "PasswordManagerExceptions": ["https://example.org",
4275                                   "https://example.edu"]
4276   }
4277 }
4278 ```
4279
4280 ### PDFjs
4281 Disable or configure PDF.js, the built-in PDF viewer.
4282
4283 If `Enabled` is set to false, the built-in PDF viewer is disabled.
4284
4285 If `EnablePermissions` is set to true, the built-in PDF viewer will honor document permissions like preventing the copying of text.
4286
4287 Note: DisableBuiltinPDFViewer has not been deprecated. You can either continue to use it, or switch to using PDFjs->Enabled to disable the built-in PDF viewer. This new permission was added because we needed a place for PDFjs->EnabledPermissions.
4288
4289 **Compatibility:** Firefox 77, Firefox ESR 68.9\
4290 **CCK2 Equivalent:** N/A\
4291 **Preferences Affected:** `pdfjs.disabled`, `pdfjs.enablePermissions`
4292
4293 #### Windows (GPO)
4294 ```
4295 Software\Policies\Mozilla\Firefox\PDFjs\Enabled = 0x1 | 0x0
4296 Software\Policies\Mozilla\Firefox\PDFjs\EnablePermissions = 0x1 | 0x0
4297 ```
4298 #### Windows (Intune)
4299 OMA-URI:
4300 ```
4301 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PDFjs/PDFjs_Enabled
4302 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PDFjs/PDFjs_EnablePermissions
4303 ```
4304 Value (string):
4305 ```
4306 <enabled/>or <disabled/>
4307 ```
4308 #### macOS
4309 ```
4310 <dict>
4311   <key>PDFjs</key>
4312   <dict>
4313     <key>Enabled</key>
4314     <true/> | <false/>
4315     <key>EnablePermissions</key>
4316     <true/> | <false/>
4317   </dict>
4318 </dict>
4319 ```
4320 #### policies.json
4321 ```
4322 {
4323   "policies": {
4324     "PDFjs": {
4325       "Enabled": true | false,
4326       "EnablePermissions": true | false
4327     }
4328   }
4329 }
4330 ```
4331 ### Permissions
4332 Set permissions associated with camera, microphone, location, notifications, autoplay, and virtual reality. Because these are origins, not domains, entries with unique ports must be specified separately. This explicitly means that it is not possible to add wildcards. See examples below.
4333
4334 `Allow` is a list of origins where the feature is allowed.
4335
4336 `Block` is a list of origins where the feature is not allowed.
4337
4338 `BlockNewRequests` determines whether or not new requests can be made for the feature.
4339
4340 `Locked` prevents the user from changing preferences for the feature.
4341
4342 `Default` specifies the default value for Autoplay. block-audio-video is not supported on Firefox ESR 68.
4343
4344 **Compatibility:** Firefox 62, Firefox ESR 60.2 (Autoplay added in Firefox 74, Firefox ESR 68.6, Autoplay Default/Locked added in Firefox 76, Firefox ESR 68.8, VirtualReality added in Firefox 80, Firefox ESR 78.2)\
4345 **CCK2 Equivalent:** N/A\
4346 **Preferences Affected:** `permissions.default.camera`, `permissions.default.microphone`, `permissions.default.geo`, `permissions.default.desktop-notification`, `media.autoplay.default`, `permissions.default.xr`
4347
4348 #### Windows (GPO)
4349 ```
4350 Software\Policies\Mozilla\Firefox\Permissions\Camera\Allow\1 = "https://example.org"
4351 Software\Policies\Mozilla\Firefox\Permissions\Camera\Allow\2 = "https://example.org:1234"
4352 Software\Policies\Mozilla\Firefox\Permissions\Camera\Block\1 = "https://example.edu"
4353 Software\Policies\Mozilla\Firefox\Permissions\Camera\BlockNewRequests = 0x1 | 0x0
4354 Software\Policies\Mozilla\Firefox\Permissions\Camera\Locked = 0x1 | 0x0
4355 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Allow\1 = "https://example.org"
4356 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Block\1 = "https://example.edu"
4357 Software\Policies\Mozilla\Firefox\Permissions\Microphone\BlockNewRequests = 0x1 | 0x0
4358 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Locked = 0x1 | 0x0
4359 Software\Policies\Mozilla\Firefox\Permissions\Location\Allow\1 = "https://example.org"
4360 Software\Policies\Mozilla\Firefox\Permissions\Location\Block\1 = "https://example.edu"
4361 Software\Policies\Mozilla\Firefox\Permissions\Location\BlockNewRequests = 0x1 | 0x0
4362 Software\Policies\Mozilla\Firefox\Permissions\Location\Locked = 0x1 | 0x0
4363 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Allow\1 = "https://example.org"
4364 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Block\1 = "https://example.edu"
4365 Software\Policies\Mozilla\Firefox\Permissions\Notifications\BlockNewRequests = 0x1 | 0x0
4366 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Locked = 0x1 | 0x0
4367 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Allow\1 = "https://example.org"
4368 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Block\1 = "https://example.edu"
4369 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Default = "allow-audio-video" | "block-audio" | "block-audio-video"
4370 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Locked = 0x1 | 0x0
4371 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\Allow\1 = "https://example.org"
4372 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\Block\1 = "https://example.edu"
4373 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\BlockNewRequests = 0x1 | 0x0
4374 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\Locked = 0x1 | 0x0
4375 ```
4376 #### Windows (Intune)
4377 OMA-URI:
4378 ```
4379 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Location/Location_BlockNewRequests
4380 ```
4381 Value (string):
4382 ```
4383 <enabled/> or <disabled/>
4384 ```
4385 OMA-URI:
4386 ```
4387 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Location/Location_Locked
4388 ```
4389 Value (string):
4390 ```
4391 <enabled/> or <disabled/>
4392 ```
4393 OMA-URI:
4394 ```
4395 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_Allow
4396 ```
4397 Value (string):
4398 ```
4399 <enabled/>
4400 <data id="Permissions" value="1&#xF000;https://example.org"/>
4401 ```
4402 OMA-URI:
4403 ```
4404 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_BlockNewRequests
4405 ```
4406 Value (string):
4407 ```
4408 <enabled/> or <disabled/>
4409 ```
4410 OMA-URI:
4411 ```
4412 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_Locked
4413 ```
4414 Value (string):
4415 ```
4416 <enabled/> or <disabled/>
4417 ```
4418 OMA-URI:
4419 ```
4420 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Allow
4421 ```
4422 Value (string):
4423 ```
4424 <enabled/>
4425 <data id="Permissions" value="1&#xF000;https://example.org"/>
4426 ```
4427 OMA-URI:
4428 ```
4429 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Block
4430 ```
4431 Value (string):
4432 ```
4433 <enabled/>
4434 <data id="Permissions" value="1&#xF000;https://example.edu"/>
4435 ```
4436 OMA-URI:
4437 ```
4438 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Default
4439 ```
4440 Value (string):
4441 ```
4442 <enabled/>
4443 <data id="Autoplay_Default" value="allow-audio-video | block-audio | block-audio-video"/>
4444 ```
4445 OMA-URI:
4446 ```
4447 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Locked
4448 ```
4449 Value (string):
4450 ```
4451 <enabled/> or <disabled/>
4452 ```
4453 OMA-URI:
4454 ```
4455 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_Allow
4456 ```
4457 Value (string):
4458 ```
4459 <enabled/>
4460 <data id="Permissions" value="1&#xF000;https://example.org"/>
4461 ```
4462 OMA-URI:
4463 ```
4464 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_Block
4465 ```
4466 Value (string):
4467 ```
4468 <enabled/>
4469 <data id="Permissions" value="1&#xF000;https://example.edu"/>
4470 ```
4471 OMA-URI:
4472 ```
4473 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_BlockNewRequests
4474 ```
4475 Value (string):
4476 ```
4477 <enabled/> or <disabled/>
4478 ```
4479 OMA-URI:
4480 ```
4481 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_Locked
4482 ```
4483 Value (string):
4484 ```
4485 <enabled/> or <disabled/>
4486 ```
4487 #### macOS
4488 ```
4489 <dict>
4490   <key>Permissions</key>
4491   <dict>
4492     <key>Camera</key>
4493     <dict>
4494       <key>Allow</key>
4495       <array>
4496         <string>https://example.org</string>
4497         <string>https://example.org:1234</string>
4498       </array>
4499       <key>Block</key>
4500       <array>
4501         <string>https://example.edu</string>
4502       </array>
4503       <key>BlockNewRequests</key>
4504       <true/> | <false/>
4505       <key>Locked</key>
4506       <true/> | <false/>
4507     </dict>
4508     <key>Microphone</key>
4509     <dict>
4510       <key>Allow</key>
4511       <array>
4512         <string>https://example.org</string>
4513       </array>
4514       <key>Block</key>
4515       <array>
4516         <string>https://example.edu</string>
4517       </array>
4518       <key>BlockNewRequests</key>
4519       <true/> | <false/>
4520       <key>Locked</key>
4521       <true/> | <false/>
4522     </dict>
4523     <key>Location</key>
4524     <dict>
4525       <key>Allow</key>
4526       <array>
4527         <string>https://example.org</string>
4528       </array>
4529       <key>Block</key>
4530       <array>
4531         <string>https://example.edu</string>
4532       </array>
4533       <key>BlockNewRequests</key>
4534       <true/> | <false/>
4535       <key>Locked</key>
4536       <true/> | <false/>
4537     </dict>
4538     <key>Notifications</key>
4539     <dict>
4540       <key>Allow</key>
4541       <array>
4542         <string>https://example.org</string>
4543       </array>
4544       <key>Block</key>
4545       <array>
4546         <string>https://example.edu</string>
4547       </array>
4548       <key>BlockNewRequests</key>
4549       <true/>
4550       <key>Locked</key>
4551       <true/>
4552     </dict>
4553     <key>Autoplay</key>
4554     <dict>
4555       <key>Allow</key>
4556       <array>
4557         <string>https://example.org</string>
4558       </array>
4559       <key>Block</key>
4560       <array>
4561         <string>https://example.edu</string>
4562       </array>
4563       <key>Default</key>
4564       <string>allow-audio-video | block-audio | block-audio-video</string>
4565       <key>Locked</key>
4566       <true/> | <false/>
4567     </dict>
4568   </dict>
4569 </dict>
4570 ```
4571 #### policies.json
4572 ```
4573 {
4574   "policies": {
4575     "Permissions": {
4576       "Camera": {
4577         "Allow": ["https://example.org","https://example.org:1234"],
4578         "Block": ["https://example.edu"],
4579         "BlockNewRequests": true | false,
4580         "Locked": true | false
4581       },
4582       "Microphone": {
4583         "Allow": ["https://example.org"],
4584         "Block": ["https://example.edu"],
4585         "BlockNewRequests": true | false,
4586         "Locked": true | false
4587       },
4588       "Location": {
4589         "Allow": ["https://example.org"],
4590         "Block": ["https://example.edu"],
4591         "BlockNewRequests": true | false,
4592         "Locked": true | false
4593       },
4594       "Notifications": {
4595         "Allow": ["https://example.org"],
4596         "Block": ["https://example.edu"],
4597         "BlockNewRequests": true | false,
4598         "Locked": true | false
4599       },
4600       "Autoplay": {
4601         "Allow": ["https://example.org"],
4602         "Block": ["https://example.edu"],
4603         "Default": "allow-audio-video" | "block-audio" | "block-audio-video",
4604         "Locked": true | false
4605       }
4606     }
4607   }
4608 }
4609 ```
4610 ### PictureInPicture
4611
4612 Enable or disable Picture-in-Picture as well as prevent the user from enabling or disabling it (Locked).
4613
4614 **Compatibility:** Firefox 78, Firefox ESR 78\
4615 **CCK2 Equivalent:** N/A\
4616 **Preferences Affected:** `media.videocontrols.picture-in-picture.video-toggle.enabled`
4617
4618 #### Windows (GPO)
4619 ```
4620 Software\Policies\Mozilla\Firefox\PictureInPicture\Enabled = 0x1 | 0x0
4621 Software\Policies\Mozilla\Firefox\PictureInPicture\Locked = 0x1 | 0x0
4622
4623 ```
4624 #### Windows (Intune)
4625 OMA-URI:
4626 ```
4627 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PictureInPicture/PictureInPicture_Enabled
4628 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PictureInPicture/PictureInPicture_Locked
4629 ```
4630 Value (string):
4631 ```
4632 <enabled/> or <disabled/>
4633 ```
4634 #### macOS
4635 ```
4636 <dict>
4637   <key>PictureInPicture</key>
4638   <dict>
4639     <key>Enabled</key>
4640     <true/> | <false/>
4641     <key>Locked</key>
4642     <true/> | <false/>
4643   </dict>
4644 </dict>
4645 ```
4646 #### policies.json
4647 ```
4648 {
4649   "policies": {
4650     "PictureInPicture": {
4651       "Enabled": true | false,
4652       "Locked": true | false
4653     }
4654   }
4655 }
4656 ```
4657 ### PopupBlocking
4658 Configure the default pop-up window policy as well as origins for which pop-up windows are allowed.
4659
4660 `Allow` is a list of origins where popup-windows are allowed.
4661
4662 `Default` determines whether or not pop-up windows are allowed by default.
4663
4664 `Locked` prevents the user from changing pop-up preferences.
4665
4666 **Compatibility:** Firefox 60, Firefox ESR 60\
4667 **CCK2 Equivalent:** `permissions.popup`\
4668 **Preferences Affected:** `dom.disable_open_during_load`
4669
4670 #### Windows (GPO)
4671 ```
4672 Software\Policies\Mozilla\Firefox\PopupBlocking\Allow\1 = "https://example.org"
4673 Software\Policies\Mozilla\Firefox\PopupBlocking\Allow\2 = "https://example.edu"
4674 Software\Policies\Mozilla\Firefox\PopupBlocking\Default = 0x1 | 0x0
4675 Software\Policies\Mozilla\Firefox\PopupBlocking\Locked = 0x1 | 0x0
4676 ```
4677 #### Windows (Intune)
4678 OMA-URI:
4679 ```
4680 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Allow
4681 ```
4682 Value (string):
4683 ```
4684 <enabled/>
4685 <data id="Permissions" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
4686 ```
4687 OMA-URI:
4688 ```
4689 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Default
4690 ```
4691 Value (string):
4692 ```
4693 <enabled/> or <disabled/>
4694 ```
4695 OMA-URI:
4696 ```
4697 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Locked
4698 ```
4699 Value (string):
4700 ```
4701 <enabled/> or <disabled/>
4702 ```
4703 #### macOS
4704 ```
4705 <dict>
4706   <key>PopupBlocking</key>
4707   <dict>
4708     <key>Allow</key>
4709     <array>
4710       <string>http://example.org</string>
4711       <string>http://example.edu</string>
4712     </array>
4713     <key>Default</key>
4714     <true/> | <false/>
4715     <key>Locked</key>
4716     <true/> | <false/>
4717   </dict>
4718 </dict>
4719 ```
4720 #### policies.json
4721 ```
4722 {
4723   "policies": {
4724     "PopupBlocking": {
4725       "Allow": ["http://example.org/",
4726                 "http://example.edu/"],
4727       "Default": true | false,
4728       "Locked": true | false
4729     }
4730   }
4731 }
4732 ```
4733 ### Preferences
4734 Set and lock preferences.
4735
4736 **NOTE** On Windows, in order to use this policy, you must clear all settings in the old **Preferences (Deprecated)** section in group policy.
4737
4738 Previously you could only set and lock a subset of preferences. Starting with Firefox 81 and Firefox ESR 78.3 you can set many more preferences. You can also set default preferences, user preferences and you can clear preferences.
4739
4740 Preferences that start with the following prefixes are supported:
4741 ```
4742 accessibility.
4743 alerts.* (Firefox 122, Firefox ESR 115.7)
4744 app.update.* (Firefox 86, Firefox ESR 78.8)
4745 browser.
4746 datareporting.policy.
4747 dom.
4748 extensions.
4749 general.autoScroll (Firefox 83, Firefox ESR 78.5)
4750 general.smoothScroll (Firefox 83, Firefox ESR 78.5)
4751 geo.
4752 gfx.
4753 intl.
4754 keyword.enabled (Firefox 95, Firefox ESR 91.4)
4755 layers.
4756 layout.
4757 media.
4758 network.
4759 pdfjs. (Firefox 84, Firefox ESR 78.6)
4760 places.
4761 pref.
4762 print.
4763 signon. (Firefox 83, Firefox ESR 78.5)
4764 spellchecker. (Firefox 84, Firefox ESR 78.6)
4765 toolkit.legacyUserProfileCustomizations.stylesheets (Firefox 95, Firefox ESR 91.4)
4766 ui.
4767 widget.
4768 xpinstall.signatures.required (Firefox ESR 102.10, Firefox ESR only)
4769 xpinstall.whitelist.required (Firefox 118, Firefox ESR 115.3)
4770 ```
4771 as well as the following security preferences:
4772
4773 | Preference | Type | Default
4774 | --- | --- | --- |
4775 | security.default_personal_cert | string | Ask Every Time
4776 | &nbsp;&nbsp;&nbsp;&nbsp;If set to Select Automatically, Firefox automatically chooses the default personal certificate.
4777 | security.disable_button.openCertManager | string | N/A
4778 | &nbsp;&nbsp;&nbsp;&nbsp;If set to true and locked, the View Certificates button in preferences is disabled (Firefox 121, Firefox ESR 115.6)
4779 | security.disable_button.openDeviceManager | string | N/A
4780 | &nbsp;&nbsp;&nbsp;&nbsp;If set to true and locked, the Security Devices button in preferences is disabled (Firefox 121, Firefox ESR 115.6)
4781 | security.insecure_connection_text.enabled | bool | false
4782 | &nbsp;&nbsp;&nbsp;&nbsp;If set to true, adds the words "Not Secure" for insecure sites.
4783 | security.insecure_connection_text.pbmode.enabled | bool | false
4784 | &nbsp;&nbsp;&nbsp;&nbsp;If set to true, adds the words "Not Secure" for insecure sites in private browsing.
4785 | security.mixed_content.block_active_content | boolean | true
4786 | &nbsp;&nbsp;&nbsp;&nbsp;If false, mixed active content (HTTP and HTTPS) is not blocked.
4787 | security.osclientcerts.autoload | boolean | false
4788 | &nbsp;&nbsp;&nbsp;&nbsp;If true, client certificates are loaded from the operating system certificate store.
4789 | security.OCSP.enabled | integer | 1
4790 | &nbsp;&nbsp;&nbsp;&nbsp;If 0, do not fetch OCSP. If 1, fetch OCSP for DV and EV certificates. If 2, fetch OCSP only for EV certificates.
4791 | security.OCSP.require | boolean | false
4792 | &nbsp;&nbsp;&nbsp;&nbsp; If true, if an OCSP request times out, the connection fails.
4793 | security.osclientcerts.assume_rsa_pss_support | boolean | true
4794 | &nbsp;&nbsp;&nbsp;&nbsp; If false, we don't assume an RSA key can do RSA-PSS. (Firefox 114, Firefox ESR 102.12)
4795 | security.ssl.enable_ocsp_stapling | boolean | true
4796 | &nbsp;&nbsp;&nbsp;&nbsp; If false, OCSP stapling is not enabled.
4797 | security.ssl.errorReporting.enabled | boolean | true
4798 | &nbsp;&nbsp;&nbsp;&nbsp;If false, SSL errors cannot be sent to Mozilla.
4799 | security.ssl.require_safe_negotiation | boolean | false
4800 | &nbsp;&nbsp;&nbsp;&nbsp;If true, Firefox will only negotiate TLS connections with servers that indicate they support secure renegotiation. (Firefox 118, Firefox ESR 115.3)
4801 | security.tls.enable_0rtt_data | boolean | true
4802 | &nbsp;&nbsp;&nbsp;&nbsp;If false, TLS early data is turned off. (Firefox 93, Firefox 91.2, Firefox 78.15)
4803 | security.tls.hello_downgrade_check | boolean | true
4804 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the TLS 1.3 downgrade check is disabled.
4805 | security.tls.version.enable-deprecated | boolean | false
4806 | &nbsp;&nbsp;&nbsp;&nbsp;If true, browser will accept TLS 1.0. and TLS 1.1. (Firefox 86, Firefox 78.8)
4807 | security.warn_submit_secure_to_insecure | boolean | true
4808 | &nbsp;&nbsp;&nbsp;&nbsp;If false, no warning is shown when submitting a form from https to http.
4809
4810 Using the preference as the key, set the `Value` to the corresponding preference value.
4811
4812 `Status` can be "default", "locked", "user" or "clear"
4813
4814 * `"default"`: Read/Write: Settings appear as default even if factory default differs.
4815 * `"locked"`: Read-Only: Settings appear as default even if factory default differs.
4816 * `"user"`: Read/Write: Settings appear as changed if it differs from factory default.
4817 * `"clear"`: Read/Write: `Value` has no effect. Resets to factory defaults on each startup.
4818
4819 `"user"` preferences persist across invocations of Firefox. It is the equivalent of a user setting the preference. They are most useful when a preference is needed very early in startup so it can't be set as default by policy. An example of this is ```toolkit.legacyUserProfileCustomizations.stylesheets```.
4820
4821 `"user"` preferences persist even if the policy is removed, so if you need to remove them, you should use the clear policy.
4822
4823 You can also set the `Type` starting in Firefox 123 and Firefox ESR 115.8. It can be `number`, `boolean` or `string`. This is especially useful if you are seeing 0 or 1 values being converted to booleans when set as user preferences.
4824
4825 See the examples below for more detail.
4826
4827 IMPORTANT: Make sure you're only setting a particular preference using this mechanism and not some other way.
4828
4829 Status
4830 **Compatibility:** Firefox 81, Firefox ESR 78.3\
4831 **CCK2 Equivalent:** `preferences`\
4832 **Preferences Affected:** Many
4833
4834 #### Windows (GPO)
4835 Software\Policies\Mozilla\Firefox\Preferences (REG_MULTI_SZ) =
4836 ```
4837 {
4838   "accessibility.force_disabled": {
4839     "Value": 1,
4840     "Status": "default",
4841     "Type": "number"
4842
4843   },
4844   "browser.cache.disk.parent_directory": {
4845     "Value": "SOME_NATIVE_PATH",
4846     "Status": "user"
4847   },
4848   "browser.tabs.warnOnClose": {
4849     "Value": false,
4850     "Status": "locked"
4851   }
4852 }
4853 ```
4854 #### Windows (Intune)
4855 OMA-URI:
4856 ```
4857 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Preferences
4858 ```
4859 Value (string):
4860 ```
4861 <enabled/>
4862 <data id="JSON" value='
4863 {
4864   "accessibility.force_disabled": {
4865     "Value": 1,
4866     "Status": "default",
4867     "Type": "number"
4868   },
4869   "browser.cache.disk.parent_directory": {
4870     "Value": "SOME_NATIVE_PATH",
4871     "Status": "user"
4872   },
4873   "browser.tabs.warnOnClose": {
4874     "Value": false,
4875     "Status": "locked"
4876   }
4877 }'/>
4878 ```
4879 #### macOS
4880 ```
4881 <dict>
4882   <key>Preferences</key>
4883   <dict>
4884     <key>accessibility.force_disabled</key>
4885     <dict>
4886       <key>Value</key>
4887       <integer>1</integer>
4888       <key>Status</key>
4889       <string>default</string>
4890       <key>Type</key>
4891       <string>number</string>
4892     </dict>
4893     <key>browser.cache.disk.parent_directory</key>
4894     <dict>
4895       <key>Value</key>
4896       <string>SOME_NATIVE_PATH</string>
4897       <key>Status</key>
4898       <string>user</string>
4899     </dict>
4900     <key>browser.tabs.warnOnClose</key>
4901     <dict>
4902       <key>Value</key>
4903       <false/>
4904       <key>Status</key>
4905       <string>locked</string>
4906     </dict>
4907   </dict>
4908 </dict>
4909 ```
4910 #### policies.json
4911 ```
4912 {
4913   "policies": {
4914     "Preferences": {
4915       "accessibility.force_disabled": {
4916         "Value": 1,
4917         "Status": "default"
4918         "Type": "number"
4919       },
4920       "browser.cache.disk.parent_directory": {
4921         "Value": "SOME_NATIVE_PATH",
4922         "Status": "user"
4923       },
4924       "browser.tabs.warnOnClose": {
4925         "Value": false,
4926         "Status": "locked"
4927       }
4928     }
4929   }
4930 }
4931 ```
4932 ### PrimaryPassword
4933 Require or prevent using a primary (formerly master) password.
4934
4935 If this value is true, a primary password is required. If this value is false, it works the same as if [`DisableMasterPasswordCreation`](#disablemasterpasswordcreation) was true and removes the primary password functionality.
4936
4937 If both DisableMasterPasswordCreation and PrimaryPassword are used, DisableMasterPasswordCreation takes precedent.
4938
4939 **Compatibility:** Firefox 79, Firefox ESR 78.1\
4940 **CCK2 Equivalent:** `noMasterPassword`\
4941 **Preferences Affected:** N/A
4942
4943 #### Windows (GPO)
4944 ```
4945 Software\Policies\Mozilla\Firefox\PrimaryPassword = 0x1 | 0x0
4946 ```
4947 #### Windows (Intune)
4948 OMA-URI:
4949 ```
4950 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PrimaryPassword
4951 ```
4952 Value (string):
4953 ```
4954 <enabled/> or <disabled/>
4955 ```
4956 #### macOS
4957 ```
4958 <dict>
4959   <key>PrimaryPassword</key>
4960   <true/> | <false/>
4961 </dict>
4962 ```
4963 #### policies.json
4964 ```
4965 {
4966   "policies": {
4967     "PrimaryPassword": true | false
4968   }
4969 }
4970 ```
4971 ### PrintingEnabled
4972 Enable or disable printing.
4973
4974 **Compatibility:** Firefox 120, Firefox ESR 115.5\
4975 **CCK2 Equivalent:** N/A\
4976 **Preferences Affected:** `print.enabled`
4977
4978 #### Windows (GPO)
4979 ```
4980 Software\Policies\Mozilla\Firefox\PrintingEnabled = 0x1 | 0x0
4981 ```
4982 #### Windows (Intune)
4983 OMA-URI:
4984 ```
4985 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PrintingEnabled
4986 ```
4987 Value (string):
4988 ```
4989 <enabled/> or <disabled/>
4990 ```
4991 #### macOS
4992 ```
4993 <dict>
4994   <key>PrintingEnabled</key>
4995   <true/> | <false/>
4996 </dict>
4997 ```
4998 #### policies.json
4999 ```
5000 {
5001   "policies": {
5002     "PrintingEnabled": true | false
5003   }
5004 }
5005 ```
5006 ### PromptForDownloadLocation
5007 Ask where to save each file before downloading.
5008
5009 **Compatibility:** Firefox 68, Firefox ESR 68\
5010 **CCK2 Equivalent:** N/A\
5011 **Preferences Affected:** `browser.download.useDownloadDir`
5012
5013 #### Windows (GPO)
5014 ```
5015 Software\Policies\Mozilla\Firefox\PromptForDownloadLocation = 0x1 | 0x0
5016 ```
5017 #### Windows (Intune)
5018 OMA-URI:
5019 ```
5020 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PromptForDownloadLocation
5021 ```
5022 Value (string):
5023 ```
5024 <enabled/> or <disabled/>
5025 ```
5026 #### macOS
5027 ```
5028 <dict>
5029   <key>PromptForDownloadLocation</key>
5030   <true/> | <false/>
5031 </dict>
5032 ```
5033 #### policies.json
5034 ```
5035 {
5036   "policies": {
5037     "PromptForDownloadLocation": true | false
5038   }
5039 }
5040 ```
5041 ### Proxy
5042 Configure proxy settings. These settings correspond to the connection settings in Firefox preferences.
5043 To specify ports, append them to the hostnames with a colon (:).
5044
5045 Unless you lock this policy, changes the user already has in place will take effect.
5046
5047 `Mode` is the proxy method being used.
5048
5049 `Locked` is whether or not proxy settings can be changed.
5050
5051 `HTTPProxy` is the HTTP proxy server.
5052
5053 `UseHTTPProxyForAllProtocols` is whether or not the HTTP proxy should be used for all other proxies.
5054
5055 `SSLProxy` is the SSL proxy server.
5056
5057 `FTPProxy` is the FTP proxy server.
5058
5059 `SOCKSProxy` is the SOCKS proxy server
5060
5061 `SOCKSVersion` is the SOCKS version (4 or 5)
5062
5063 `Passthrough` is list of hostnames or IP addresses that will not be proxied. Use `<local>` to bypass proxying for all hostnames which do not contain periods.
5064
5065 `AutoConfigURL` is a  URL for proxy configuration (only used if Mode is autoConfig).
5066
5067 `AutoLogin` means do not prompt for authentication if password is saved.
5068
5069 `UseProxyForDNS` to use proxy DNS when using SOCKS v5.
5070
5071 **Compatibility:** Firefox 60, Firefox ESR 60\
5072 **CCK2 Equivalent:** `networkProxy*`\
5073 **Preferences Affected:** `network.proxy.type`, `network.proxy.autoconfig_url`, `network.proxy.socks_remote_dns`, `signon.autologin.proxy`, `network.proxy.socks_version`, `network.proxy.no_proxies_on`, `network.proxy.share_proxy_settings`, `network.proxy.http`, `network.proxy.http_port`, `network.proxy.ftp`, `network.proxy.ftp_port`, `network.proxy.ssl`, `network.proxy.ssl_port`, `network.proxy.socks`, `network.proxy.socks_port`
5074
5075 #### Windows (GPO)
5076 ```
5077 Software\Policies\Mozilla\Firefox\Proxy\Mode = "none" | "system" | "manual" | "autoDetect" | "autoConfig"
5078 Software\Policies\Mozilla\Firefox\Proxy\Locked = 0x1 | 0x0
5079 Software\Policies\Mozilla\Firefox\Proxy\HTTPProxy = https://httpproxy.example.com
5080 Software\Policies\Mozilla\Firefox\Proxy\UseHTTPProxyForAllProtocols = 0x1 | 0x0
5081 Software\Policies\Mozilla\Firefox\Proxy\SSLProxy = https://sslproxy.example.com
5082 Software\Policies\Mozilla\Firefox\Proxy\FTPProxy = https://ftpproxy.example.com
5083 Software\Policies\Mozilla\Firefox\Proxy\SOCKSProxy = https://socksproxy.example.com
5084 Software\Policies\Mozilla\Firefox\Proxy\SOCKSVersion = 0x4 | 0x5
5085 Software\Policies\Mozilla\Firefox\Proxy\Passthrough = <local>
5086 Software\Policies\Mozilla\Firefox\Proxy\AutoConfigURL = URL_TO_AUTOCONFIG
5087 Software\Policies\Mozilla\Firefox\Proxy\AutoLogin = 0x1 | 0x0
5088 Software\Policies\Mozilla\Firefox\Proxy\UseProxyForDNS = 0x1 | 0x0
5089 ```
5090 #### Windows (Intune)
5091 **Note**
5092 These setttings were moved to a category to make them easier to configure via Intune.
5093
5094 OMA-URI:
5095 ```
5096 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ProxySettings/Proxy_Locked
5097 ```
5098 Value (string):
5099 ```
5100 <enabled/> or <disabled/>
5101 ```
5102 OMA-URI:
5103 ```
5104 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ProxySettings/Proxy_ConnectionType
5105 ```
5106 Value (string):
5107 ```
5108 <enabled/>
5109 <data id="Proxy_ConnectionType" value="none | system | manual | autoDetect | autoConfig"/>
5110 ```
5111 OMA-URI:
5112 ```
5113 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ProxySettings/Proxy_HTTPProxy
5114 ```
5115 Value (string):
5116 ```
5117 <enabled/>
5118 <data id="Proxy_HTTPProxy" value="httpproxy.example.com"/>
5119 ```
5120 OMA-URI:
5121 ```
5122 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ProxySettings/Proxy_UseHTTPProxyForAllProtocols
5123 ```
5124 Value (string):
5125 ```
5126 <enabled/> or <disabled/>
5127 ```
5128 OMA-URI:
5129 ```
5130 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ProxySettings/Proxy_SSLProxy
5131 ```
5132 Value (string):
5133 ```
5134 <enabled/>
5135 <data id="Proxy_SSLProxy" value="sslproxy.example.com"/>
5136 ```
5137 OMA-URI:
5138 ```
5139 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ProxySettings/Proxy_SOCKSProxy
5140 ```
5141 Value (string):
5142 ```
5143 <enabled/>
5144 <data id="Proxy_SOCKSProxy" value="socksproxy.example.com"/>
5145 <data id="Proxy_SOCKSVersion" value="4 | 5"/>
5146 ```
5147 OMA-URI:
5148 ```
5149 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ProxySettings/Proxy_AutoConfigURL
5150 ```
5151 Value (string):
5152 ```
5153 <enabled/>
5154 <data id="Proxy_AutoConfigURL" value="URL_TO_AUTOCONFIG"/>
5155 ```
5156 OMA-URI:
5157 ```
5158 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ProxySettings/Proxy_Passthrough
5159 ```
5160 Value (string):
5161 ```
5162 <enabled/>
5163 <data id="Proxy_Passthrough" value="&lt;local&gt;"/>
5164 ```
5165 OMA-URI:
5166 ```
5167 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ProxySettings/Proxy_AutoLogin
5168 ```
5169 Value (string):
5170 ```
5171 <enabled/> or <disabled/>
5172 ```
5173 OMA-URI:
5174 ```
5175 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ProxySettings/Proxy_UseProxyForDNS
5176 ```
5177 Value (string):
5178 ```
5179 <enabled/> or <disabled/>
5180 ```
5181 OMA-URI (Old way):
5182 ```
5183 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Proxy
5184 ```
5185 Value (string):
5186 ```
5187 <enabled/>
5188 <data id="ProxyLocked" value="true | false"/>
5189 <data id="ConnectionType" value="none | system | manual | autoDetect | autoConfig"/>
5190 <data id="HTTPProxy" value="httpproxy.example.com"/>
5191 <data id="UseHTTPProxyForAllProtocols" value="true | false"/>
5192 <data id="SSLProxy" value="sslproxy.example.com"/>
5193 <data id="FTPProxy" value="ftpproxy.example.com"/>
5194 <data id="SOCKSProxy" value="socksproxy.example.com"/>
5195 <data id="SOCKSVersion" value="4 | 5"/>
5196 <data id="AutoConfigURL" value="URL_TO_AUTOCONFIG"/>
5197 <data id="Passthrough" value="<local>"/>
5198 <data id="AutoLogin" value="true | false"/>
5199 <data id="UseProxyForDNS" value="true | false"/>
5200 ```
5201 #### macOS
5202 ```
5203 <dict>
5204   <key>Proxy</key>
5205   <dict>
5206     <key>Mode</key>
5207     <string>none | system | manual | autoDetect | autoConfig</string>
5208     <key>Locked</key>
5209     <true> | </false>
5210     <key>HTTPProxy</key>
5211     <string>https://httpproxy.example.com</string>
5212     <key>UseHTTPProxyForAllProtocols</key>
5213     <true> | </false>
5214     <key>SSLProxy</key>
5215     <string>https://sslproxy.example.com</string>
5216     <key>FTPProxy</key>
5217     <string>https://ftpproxy.example.com</string>
5218     <key>SOCKSProxy</key>
5219     <string>https://socksproxy.example.com</string>
5220     <key>SOCKSVersion</key>
5221     <string>4 | 5</string>
5222     <key>Passthrough</key>
5223     <string>&lt;local>&gt;</string>
5224     <key>AutoConfigURL</key>
5225     <string>URL_TO_AUTOCONFIG</string>
5226     <key>AutoLogin</key>
5227     <true> | </false>
5228     <key>UseProxyForDNS</key>
5229     <true> | </false>
5230   </dict>
5231 </dict>
5232 ```
5233 #### policies.json
5234 ```
5235 {
5236   "policies": {
5237     "Proxy": {
5238       "Mode": "none" | "system" | "manual" | "autoDetect" | "autoConfig",
5239       "Locked": true | false,
5240       "HTTPProxy": "hostname",
5241       "UseHTTPProxyForAllProtocols": true | false,
5242       "SSLProxy": "hostname",
5243       "FTPProxy": "hostname",
5244       "SOCKSProxy": "hostname",
5245       "SOCKSVersion": 4 | 5,
5246       "Passthrough": "<local>",
5247       "AutoConfigURL": "URL_TO_AUTOCONFIG",
5248       "AutoLogin": true | false,
5249       "UseProxyForDNS": true | false
5250     }
5251   }
5252 }
5253 ```
5254 ### RequestedLocales
5255 Set the the list of requested locales for the application in order of preference. It will cause the corresponding language pack to become active.
5256
5257 Note: For Firefox 68, this can now be a string so that you can specify an empty value.
5258
5259 **Compatibility:** Firefox 64, Firefox ESR 60.4, Updated in Firefox 68, Firefox ESR 68\
5260 **CCK2 Equivalent:** N/A\
5261 **Preferences Affected:** N/A
5262 #### Windows (GPO)
5263 ```
5264 Software\Policies\Mozilla\Firefox\RequestedLocales\1 = "de"
5265 Software\Policies\Mozilla\Firefox\RequestedLocales\2 = "en-US"
5266
5267 or
5268
5269 Software\Policies\Mozilla\Firefox\RequestedLocales = "de,en-US"
5270 ```
5271 #### Windows (Intune)
5272 OMA-URI:
5273 ```
5274 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/RequestedLocalesString
5275 ```
5276 Value (string):
5277 ```
5278 <enabled/>
5279 <data id="Preferences_String" value="de,en-US"/>
5280 ```
5281 #### macOS
5282 ```
5283 <dict>
5284   <key>RequestedLocales</key>
5285   <array>
5286     <string>de</string>
5287     <string>en-US</string>
5288   </array>
5289 </dict>
5290
5291 or
5292
5293 <dict>
5294   <key>RequestedLocales</key>
5295   <string>de,en-US</string>
5296 </dict>
5297
5298 ```
5299 #### policies.json
5300 ```
5301 {
5302   "policies": {
5303     "RequestedLocales": ["de", "en-US"]
5304   }
5305 }
5306
5307 or
5308
5309 {
5310   "policies": {
5311     "RequestedLocales": "de,en-US"
5312   }
5313 }
5314 ```
5315 <a name="SanitizeOnShutdown"></a>
5316
5317 ### SanitizeOnShutdown (Selective)
5318 Clear data on shutdown. Choose from Cache, Cookies, Download History, Form & Search History, Browsing History, Active Logins, Site Preferences and Offline Website Data.
5319
5320 Previously, these values were always locked. Starting with Firefox 74 and Firefox ESR 68.6, you can use the `Locked` option to either keep the values unlocked (set it to false), or lock only the values you set (set it to true). If you want the old behavior of locking everything, do not set `Locked` at all.
5321
5322 **Compatibility:** Firefox 68, Firefox ESR 68 (Locked added in 74/68.6)\
5323 **CCK2 Equivalent:** N/A\
5324 **Preferences Affected:** `privacy.sanitize.sanitizeOnShutdown`, `privacy.clearOnShutdown.cache`, `privacy.clearOnShutdown.cookies`, `privacy.clearOnShutdown.downloads`, `privacy.clearOnShutdown.formdata`, `privacy.clearOnShutdown.history`, `privacy.clearOnShutdown.sessions`, `privacy.clearOnShutdown.siteSettings`, `privacy.clearOnShutdown.offlineApps`
5325 #### Windows (GPO)
5326 ```
5327 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Cache = 0x1 | 0x0
5328 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Cookies = 0x1 | 0x0
5329 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Downloads = 0x1 | 0x0
5330 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\FormData = 0x1 | 0x0
5331 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\History = 0x1 | 0x0
5332 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Sessions = 0x1 | 0x0
5333 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\SiteSettings = 0x1 | 0x0
5334 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\OfflineApps = 0x1 | 0x0
5335 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Locked = 0x1 | 0x0
5336 ```
5337 #### Windows (Intune)
5338 OMA-URI:
5339 ```
5340 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/A_SanitizeOnShutdown_Cache
5341 ```
5342 Value (string):
5343 ```
5344 <enabled/> or <disabled/>
5345 ```
5346 OMA-URI:
5347 ```
5348 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/B_SanitizeOnShutdown_Cookies
5349 ```
5350 Value (string):
5351 ```
5352 <enabled/> or <disabled/>
5353 ```
5354 OMA-URI:
5355 ```
5356 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/C_SanitizeOnShutdown_Downloads
5357 ```
5358 Value (string):
5359 ```
5360 <enabled/> or <disabled/>
5361 ```
5362 OMA-URI:
5363 ```
5364 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/D_SanitizeOnShutdown_FormData
5365 ```
5366 Value (string):
5367 ```
5368 <enabled/> or <disabled/>
5369 ```
5370 OMA-URI:
5371 ```
5372 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/E_SanitizeOnShutdown_History
5373 ```
5374 Value (string):
5375 ```
5376 <enabled/> or <disabled/>
5377 ```
5378 OMA-URI:
5379 ```
5380 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/F_SanitizeOnShutdown_Sessions
5381 ```
5382 Value (string):
5383 ```
5384 <enabled/> or <disabled/>
5385 ```
5386 OMA-URI:
5387 ```
5388 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/G_SanitizeOnShutdown_SiteSettings
5389 ```
5390 Value (string):
5391 ```
5392 <enabled/> or <disabled/>
5393 ```
5394 OMA-URI:
5395 ```
5396 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/H_SanitizeOnShutdown_OfflineApps
5397 ```
5398 Value (string):
5399 ```
5400 <enabled/> or <disabled/>
5401 ```
5402 OMA-URI:
5403 ```
5404 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/I_SanitizeOnShutdown_Locked
5405 ```
5406 Value (string):
5407 ```
5408 <enabled/> or <disabled/>
5409 ```
5410 #### macOS
5411 ```
5412 <dict>
5413   <key>SanitizeOnShutdown</key>
5414   <dict>
5415     <key>Cache</key>
5416     <true/> | <false/>
5417     <key>Cookies</key>
5418     <true/> | <false/>
5419     <key>Downloads</key>
5420     <true/> | <false/>
5421     <key>FormData</key>
5422     <true/> | <false/>
5423     <key>History</key>
5424     <true/> | <false/>
5425     <key>Sessions</key>
5426     <true/> | <false/>
5427     <key>SiteSettings</key>
5428     <true/> | <false/>
5429     <key>OfflineApps</key>
5430     <true/> | <false/>
5431     <key>Locked</key>
5432     <true/> | <false/>
5433   </dict>
5434 </dict>
5435 ```
5436 #### policies.json
5437 ```
5438 {
5439   "policies": {
5440     "SanitizeOnShutdown": {
5441       "Cache": true | false,
5442       "Cookies": true | false,
5443       "Downloads": true | false,
5444       "FormData": true | false,
5445       "History": true | false,
5446       "Sessions": true | false,
5447       "SiteSettings": true | false,
5448       "OfflineApps": true | false,
5449       "Locked": true | false
5450     }
5451   }
5452 }
5453 ```
5454 ### SanitizeOnShutdown (All)
5455 Clear all data on shutdown, including Browsing & Download History, Cookies, Active Logins, Cache, Form & Search History, Site Preferences and Offline Website Data.
5456
5457 **Compatibility:** Firefox 60, Firefox ESR 60\
5458 **CCK2 Equivalent:** N/A\
5459 **Preferences Affected:** `privacy.sanitize.sanitizeOnShutdown`, `privacy.clearOnShutdown.cache`, `privacy.clearOnShutdown.cookies`, `privacy.clearOnShutdown.downloads`, `privacy.clearOnShutdown.formdata`, `privacy.clearOnShutdown.history`, `privacy.clearOnShutdown.sessions`, `privacy.clearOnShutdown.siteSettings`, `privacy.clearOnShutdown.offlineApps`
5460 #### Windows (GPO)
5461 ```
5462 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown = 0x1 | 0x0
5463 ```
5464 #### Windows (Intune)
5465 OMA-URI:
5466 ```
5467 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/C_SanitizeOnShutdown
5468 ```
5469 Value (string):
5470 ```
5471 <enabled/> or <disabled/>
5472 ```
5473 #### macOS
5474 ```
5475 <dict>
5476   <key>SanitizeOnShutdown</key>
5477   <true/> | <false/>
5478 </dict>
5479 ```
5480 #### policies.json
5481 ```
5482 {
5483   "policies": {
5484     "SanitizeOnShutdown": true | false
5485   }
5486 }
5487 ```
5488 ### SearchBar
5489 Set whether or not search bar is displayed.
5490
5491 **Compatibility:** Firefox 60, Firefox ESR 60\
5492 **CCK2 Equivalent:** `showSearchBar`\
5493 **Preferences Affected:** N/A
5494
5495 #### Windows (GPO)
5496 ```
5497 Software\Policies\Mozilla\Firefox\SearchBar = "unified" | "separate"
5498 ```
5499
5500 #### Windows (Intune)
5501 OMA-URI:
5502 ```
5503 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SearchBar
5504 ```
5505 Value (string):
5506 ```
5507 <enabled/>
5508 <data id="SearchBar" value="unified | separate"/>
5509 ```
5510 #### macOS
5511 ```
5512 <dict>
5513   <key>SearchBar</key>
5514   <string>unified | separate</string>
5515 </dict>
5516 ```
5517 #### policies.json
5518 ```
5519 {
5520   "policies": {
5521     "SearchBar": "unified" | "separate"
5522   }
5523 }
5524 ```
5525 <a name="SearchEngines"></a>
5526
5527 ### SearchEngines (This policy is only available on the ESR.)
5528
5529 ### SearchEngines | Add
5530
5531 Add new search engines. Although there are only five engines available in the ADMX template, there is no limit. To add more in the ADMX template, you can duplicate the XML.
5532
5533 This policy is only available on the ESR. `Name` and `URLTemplate` are required.
5534
5535 `Name` is the name of the search engine.
5536
5537 `URLTemplate` is the search URL with {searchTerms} to substitute for the search term.
5538
5539 `Method` is either GET or POST
5540
5541 `IconURL` is a URL for the icon to use.
5542
5543 `Alias` is a keyword to use for the engine.
5544
5545 `Description` is a description of the search engine.
5546
5547 `PostData` is the POST data as name value pairs separated by &.
5548
5549 `SuggestURLTemplate` is a search suggestions URL with {searchTerms} to substitute for the search term.
5550
5551 `Encoding` is the query charset for the engine. It defaults to UTF-8.
5552
5553 **Compatibility:** Firefox ESR 60 (POST support in Firefox ESR 68, Encoding support in Firefox 91)\
5554 **CCK2 Equivalent:** `searchplugins`\
5555 **Preferences Affected:** N/A
5556
5557 #### Windows (GPO)
5558 ```
5559 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Name = "Example1"
5560 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\URLTemplate = "https://www.example.org/q={searchTerms}"
5561 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Method = "GET" | "POST"
5562 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\IconURL = "https://www.example.org/favicon.ico"
5563 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Alias = "example"
5564 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Description = "Example Description"
5565 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\SuggestURLTemplate = "https://www.example.org/suggestions/q={searchTerms}"
5566 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\PostData = "name=value&q={searchTerms}"
5567 ```
5568 #### Windows (Intune)
5569 OMA-URI:
5570 ```
5571 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_1
5572 ```
5573 Value (string):
5574 ```
5575 <enabled/>
5576 <data id="SearchEngine_Name" value="Example1"/>
5577 <data id="SearchEngine_URLTemplate" value="https://www.example.org/q={searchTerms"/>
5578 <data id="SearchEngine_Method" value="GET | POST"/>
5579 <data id="SearchEngine_IconURL" value="https://www.example.org/favicon.ico"/>
5580 <data id="SearchEngine_Alias" value="example"/>
5581 <data id="SearchEngine_Description" value="Example Description"/>
5582 <data id="SearchEngine_SuggestURLTemplate" value="https://www.example.org/suggestions/q={searchTerms}"/>
5583 <data id="SearchEngine_PostData" value="name=value&amp;q={searchTerms}"/>
5584 ```
5585 #### macOS
5586 ```
5587 <dict>
5588   <key>SearchEngines</key>
5589   <dict>
5590     <key>Add</key>
5591     <array>
5592       <dict>
5593         <key>Name</key>
5594         <string>Example1</string>
5595         <key>URLTemplate</key>
5596         <string>https://www.example.org/q={searchTerms}</string>
5597         <key>Method</key>
5598         <string>GET | POST </string>
5599         <key>IconURL</key>
5600         <string>https://www.example.org/favicon.ico</string>
5601         <key>Alias</key>
5602         <string>example</string>
5603         <key>Description</key>
5604         <string>Example Description</string>
5605         <key>SuggestURLTemplate</key>
5606         <string>https://www.example.org/suggestions/q={searchTerms}</string>
5607         <key>PostData</key>
5608         <string>name=value&q={searchTerms}</string>
5609       </dict>
5610     <array>
5611   </dict>
5612 </dict>
5613 ```
5614 #### policies.json
5615 ```
5616 {
5617   "policies": {
5618     "SearchEngines": {
5619       "Add": [
5620         {
5621           "Name": "Example1",
5622           "URLTemplate": "https://www.example.org/q={searchTerms}",
5623           "Method": "GET" | "POST",
5624           "IconURL": "https://www.example.org/favicon.ico",
5625           "Alias": "example",
5626           "Description": "Description",
5627           "PostData": "name=value&q={searchTerms}",
5628           "SuggestURLTemplate": "https://www.example.org/suggestions/q={searchTerms}"
5629         }
5630       ]
5631     }
5632   }
5633 }
5634 ```
5635 ### SearchEngines | Default
5636
5637 Set the default search engine. This policy is only available on the ESR.
5638
5639 **Compatibility:** Firefox ESR 60\
5640 **CCK2 Equivalent:** `defaultSearchEngine`\
5641 **Preferences Affected:** N/A
5642
5643 #### Windows (GPO)
5644 ```
5645 Software\Policies\Mozilla\Firefox\SearchEngines\Default = NAME_OF_SEARCH_ENGINE
5646 ```
5647 #### Windows (Intune)
5648 OMA-URI:
5649 ```
5650 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_Default
5651 ```
5652 Value (string):
5653 ```
5654 <enabled/>
5655 <data id="SearchEngines_Default" value="NAME_OF_SEARCH_ENGINE"/>
5656 ```
5657 #### macOS
5658 ```
5659 <dict>
5660   <key>SearchEngines</key>
5661   <dict>
5662     <key>Default</key>
5663     <string>NAME_OF_SEARCH_ENGINE</string>
5664   </dict>
5665 </dict>
5666 ```
5667 #### policies.json
5668 ```
5669 {
5670   "policies": {
5671     "SearchEngines": {
5672       "Default": "NAME_OF_SEARCH_ENGINE"
5673     }
5674   }
5675 }
5676 ```
5677 ### SearchEngines | PreventInstalls
5678
5679 Prevent installing search engines from webpages.
5680
5681 **Compatibility:** Firefox ESR 60\
5682 **CCK2 Equivalent:** `disableSearchEngineInstall`\
5683 **Preferences Affected:** N/A
5684
5685 #### Windows (GPO)
5686 ```
5687 Software\Policies\Mozilla\Firefox\SearchEngines\PreventInstalls = 0x1 | 0x0
5688 ```
5689 #### Windows (Intune)
5690 OMA-URI:
5691 ```
5692 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_PreventInstalls
5693 ```
5694 Value (string):
5695 ```
5696 <enabled/> or <disabled/>
5697 ```
5698 #### macOS
5699 ```
5700 <dict>
5701   <key>SearchEngines</key>
5702   <dict>
5703     <key>PreventInstalls</key>
5704     <true/> | <false/>
5705   </dict>
5706 </dict>
5707 ```
5708 #### policies.json
5709 ```
5710 {
5711   "policies": {
5712     "SearchEngines": {
5713       "PreventInstalls": true | false
5714     }
5715   }
5716 }
5717 ```
5718 ### SearchEngines | Remove
5719
5720 Hide built-in search engines. This policy is only available on the ESR.
5721
5722 **Compatibility:** Firefox ESR 60.2\
5723 **CCK2 Equivalent:** `removeDefaultSearchEngines` (removed all built-in engines)\
5724 **Preferences Affected:** N/A
5725
5726 #### Windows (GPO)
5727 ```
5728 Software\Policies\Mozilla\Firefox\SearchEngines\Remove\1 = NAME_OF_SEARCH_ENGINE
5729 ```
5730 #### Windows (Intune)
5731 OMA-URI:
5732 ```
5733 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_Remove
5734 ```
5735 Value (string):
5736 ```
5737 <enabled/>
5738 <data id="SearchEngines_Remove" value="1&#xF000;NAME_OF_SEARCH_ENGINE"/>
5739 ```
5740 #### macOS
5741 ```
5742 <dict>
5743   <key>SearchEngines</key>
5744   <dict>
5745     <key>Remove</key>
5746     <array>
5747       <string>NAME_OF_SEARCH_ENGINE</string>
5748     </array>
5749   </dict>
5750 </dict>
5751 ```
5752 #### policies.json
5753 ```
5754 {
5755   "policies": {
5756     "SearchEngines": {
5757       "Remove": ["NAME_OF_SEARCH_ENGINE"]
5758     }
5759   }
5760 }
5761 ```
5762 ### SearchSuggestEnabled
5763
5764 Enable search suggestions.
5765
5766 **Compatibility:** Firefox 68, Firefox ESR 68\
5767 **CCK2 Equivalent:** N/A\
5768 **Preferences Affected:** `browser.urlbar.suggest.searches`, `browser.search.suggest.enabled`
5769
5770 #### Windows (GPO)
5771 ```
5772 Software\Policies\Mozilla\Firefox\SearchSuggestEnabled = 0x1 | 0x0
5773 ```
5774 #### Windows (Intune)
5775 OMA-URI:
5776 ```
5777 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchSuggestEnabled
5778 ```
5779 Value (string):
5780 ```
5781 <enabled/> or <disabled/>
5782 ```
5783 #### macOS
5784 ```
5785 <dict>
5786   <key>SearchSuggestEnabled</key>
5787   <true/> | <false/>
5788 </dict>
5789 ```
5790 #### policies.json
5791 ```
5792 {
5793   "policies": {
5794     "SearchSuggestEnabled": true | false
5795   }
5796 }
5797 ```
5798 ### SecurityDevices
5799
5800 Add or delete PKCS #11 modules.
5801
5802 **Compatibility:** Firefox 114, Firefox ESR 112.12\
5803 **CCK2 Equivalent:** N/A\
5804 **Preferences Affected:** N/A
5805
5806 #### Windows (GPO)
5807 ```
5808 Software\Policies\Mozilla\Firefox\SecurityDevices\Add\NAME_OF_DEVICE_TO_ADD = PATH_TO_LIBRARY_FOR_DEVICE
5809 Software\Policies\Mozilla\Firefox\SecurityDevices\Remove\1 = NAME_OF_DEVICE_TO_REMOVE
5810 ```
5811 #### Windows (Intune)
5812 OMA-URI:
5813 ```
5814 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SecurityDevices/SecurityDevices_Add
5815 ```
5816 Value (string):
5817 ```
5818 <enabled/>
5819 <data id="SecurityDevices" value="NAME_OF_DEVICE_TO_ADD&#xF000;PATH_TO_LIBRARY_FOR_DEVICE"/>
5820 ```
5821 OMA-URI:
5822 ```
5823 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SecurityDevices/SecurityDevices_Delete
5824 ```
5825 Value (string):
5826 ```
5827 <enabled/>
5828 <data id="SecurityDevices" value="1&#xF000;NAME_OF_DEVICE_TO_REMOVE"/>
5829 ```
5830 #### macOS
5831 ```
5832 <dict>
5833   <key>SecurityDevices</key>
5834   <dict>
5835     <key>Add<key>
5836     <dict>
5837       <key>NAME_OF_DEVICE_TO_ADD</key>
5838       <string>PATH_TO_LIBRARY_FOR_DEVICE</string>
5839     </dict>
5840     <key>Delete</add>
5841     <array>
5842       <string>NAME_OF_DEVICE_TO_DELETE</string>
5843     </array>
5844   </dict>
5845 </dict>
5846 ```
5847 #### policies.json
5848 ```
5849 {
5850   "policies": {
5851     "SecurityDevices": {
5852       "Add": {
5853         "NAME_OF_DEVICE_TO_ADD": "PATH_TO_LIBRARY_FOR_DEVICE"
5854       },
5855       "Delete": ["NAME_OF_DEVICE_TO_DELETE"]
5856     }
5857   }
5858 }
5859 ```
5860 ### SecurityDevices (Deprecated)
5861
5862 Install PKCS #11 modules.
5863
5864 **Compatibility:** Firefox 64, Firefox ESR 60.4\
5865 **CCK2 Equivalent:** `certs.devices`\
5866 **Preferences Affected:** N/A
5867
5868 #### Windows (GPO)
5869 ```
5870 Software\Policies\Mozilla\Firefox\SecurityDevices\NAME_OF_DEVICE = PATH_TO_LIBRARY_FOR_DEVICE
5871 ```
5872 #### Windows (Intune)
5873 OMA-URI:
5874 ```
5875 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SecurityDevices
5876 ```
5877 Value (string):
5878 ```
5879 <enabled/>
5880 <data id="SecurityDevices" value="NAME_OF_DEVICE&#xF000;PATH_TO_LIBRARY_FOR_DEVICE"/>
5881 ```
5882 #### macOS
5883 ```
5884 <dict>
5885   <key>SecurityDevices</key>
5886   <dict>
5887     <key>NAME_OF_DEVICE</key>
5888     <string>PATH_TO_LIBRARY_FOR_DEVICE</string>
5889   </dict>
5890 </dict>
5891 ```
5892 #### policies.json
5893 ```
5894 {
5895   "policies": {
5896     "SecurityDevices": {
5897       "NAME_OF_DEVICE": "PATH_TO_LIBRARY_FOR_DEVICE"
5898     }
5899   }
5900 }
5901 ```
5902 ### ShowHomeButton
5903 Show the home button on the toolbar.
5904
5905 Future versions of Firefox will not show the home button by default.
5906
5907 **Compatibility:** Firefox 88, Firefox ESR 78.10\
5908 **CCK2 Equivalent:** N/A\
5909 **Preferences Affected:** N/A
5910
5911 #### Windows (GPO)
5912 ```
5913 Software\Policies\Mozilla\Firefox\ShowHomeButton = 0x1 | 0x0
5914 ```
5915 #### Windows (Intune)
5916 OMA-URI:
5917 ```
5918 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/Homepage_ShowHomeButton
5919 ```
5920 Value (string):
5921 ```
5922 <enabled/> or <disabled/>
5923 ```
5924 #### macOS
5925 ```
5926 <dict>
5927   <key>ShowHomeButton</key>
5928   <true/> | <false/>
5929 </dict>
5930 ```
5931 #### policies.json
5932 ```
5933 {
5934   "policies": {
5935     "ShowHomeButton": true | false
5936   }
5937 }
5938 ```
5939 ### SSLVersionMax
5940
5941 Set and lock the maximum version of TLS. (Firefox defaults to a maximum of TLS 1.3.)
5942
5943 **Compatibility:** Firefox 66, Firefox ESR 60.6\
5944 **CCK2 Equivalent:** N/A\
5945 **Preferences Affected:** `security.tls.version.max`
5946
5947 #### Windows (GPO)
5948 ```
5949 Software\Policies\Mozilla\Firefox\SSLVersionMax = "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
5950 ```
5951 #### Windows (Intune)
5952 OMA-URI:
5953 ```
5954 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SSLVersionMax
5955 ```
5956 Value (string):
5957 ```
5958 <enabled/>
5959 <data id="SSLVersion" value="tls1 | tls1.2 | tls1.3"/>
5960 ```
5961 #### macOS
5962 ```
5963 <dict>
5964   <key>SSLVersionMax</key>
5965   <string>tls1 | tls1.1 | tls1.2 | tls1.3</string>
5966 </dict>
5967 ```
5968
5969 #### policies.json
5970 ```
5971 {
5972   "policies": {
5973     "SSLVersionMax": "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
5974   }
5975 }
5976 ```
5977 ### SSLVersionMin
5978
5979 Set and lock the minimum version of TLS. (Firefox defaults to a minimum of TLS 1.2.)
5980
5981 **Compatibility:** Firefox 66, Firefox ESR 60.6\
5982 **CCK2 Equivalent:** N/A\
5983 **Preferences Affected:** `security.tls.version.min`
5984
5985 #### Windows (GPO)
5986 ```
5987 Software\Policies\Mozilla\Firefox\SSLVersionMin = "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
5988 ```
5989 #### Windows (Intune)
5990 OMA-URI:
5991 ```
5992 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SSLVersionMin
5993 ```
5994 Value (string):
5995 ```
5996 <enabled/>
5997 <data id="SSLVersion" value="tls1 | tls1.2 | tls1.3"/>
5998 ```
5999 #### macOS
6000 ```
6001 <dict>
6002   <key>SSLVersionMin</key>
6003   <string>tls1 | tls1.1 | tls1.2 | tls1.3</string>
6004 </dict>
6005 ```
6006
6007 #### policies.json
6008 ```
6009 {
6010   "policies": {
6011     "SSLVersionMin": "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
6012   }
6013 }
6014 ```
6015 ### SupportMenu
6016 Add a menuitem to the help menu for specifying support information.
6017
6018 **Compatibility:** Firefox 68.0.1, Firefox ESR 68.0.1\
6019 **CCK2 Equivalent:** helpMenu\
6020 **Preferences Affected:** N/A
6021
6022 #### Windows (GPO)
6023 ```
6024 Software\Policies\Mozilla\Firefox\SupportMenu\Title = "Support Menu"
6025 Software\Policies\Mozilla\Firefox\SupportMenu\URL = "http://example.com/support"
6026 Software\Policies\Mozilla\Firefox\SupportMenu\AccessKey = "S"
6027 ```
6028 #### Windows (Intune)
6029 OMA-URI:
6030 ```
6031 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SupportMenu
6032 ```
6033 Value (string):
6034 ```
6035 <enabled/>
6036 <data id="SupportMenuTitle" value="Support Menu"/>
6037 <data id="SupportMenuURL" value="http://example.com/support"/>
6038 <data id="SupportMenuAccessKey" value="S"/>
6039 ```
6040 #### macOS
6041 ```
6042 <dict>
6043   <key>SupportMenu</key>
6044   <dict>
6045     <key>Title</key>
6046     <string>SupportMenu</string>
6047     <key>URL</key>
6048     <string>http://example.com/support</string>
6049     <key>AccessKey</key>
6050     <string>S</string>
6051   </dict>
6052 </dict>
6053 ```
6054 #### policies.json
6055 ```
6056 {
6057   "policies": {
6058     "SupportMenu": {
6059       "Title": "Support Menu",
6060       "URL": "http://example.com/support",
6061       "AccessKey": "S"
6062     }
6063   }
6064 }
6065 ```
6066 ### StartDownloadsInTempDirectory
6067 Force downloads to start off in a local, temporary location rather than the default download directory.
6068
6069 **Compatibility:** Firefox 102\
6070 **CCK2 Equivalent:** N/A\
6071 **Preferences Affected:** `browser.download.start_downloads_in_tmp_dir`
6072
6073 #### Windows (GPO)
6074 ```
6075 Software\Policies\Mozilla\Firefox\StartDownloadsInTempDirectory = 0x1 | 0x0
6076 ```
6077 #### Windows (Intune)
6078 OMA-URI:
6079 ```
6080 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/StartDownloadsInTempDirectory
6081 ```
6082 Value (string):
6083 ```
6084 <enabled/> or <disabled/>
6085 ```
6086 #### macOS
6087 ```
6088 <dict>
6089   <key>StartDownloadsInTempDirectory</key>
6090   <true/> | <false/>
6091 </dict>
6092 ```
6093 #### policies.json
6094 ```
6095 {
6096   "policies": {
6097     "StartDownloadsInTempDirectory": true | false
6098 }
6099 ```
6100 ### UserMessaging
6101
6102 Prevent Firefox from messaging the user in certain situations.
6103
6104 `WhatsNew` Remove the "What's New" icon and menuitem.
6105
6106 `ExtensionRecommendations` If false, don't recommend extensions while the user is visiting web pages.
6107
6108 `FeatureRecommendations` If false, don't recommend browser features.
6109
6110 `UrlbarInterventions` If false, Don't offer Firefox specific suggestions in the URL bar.
6111
6112 `SkipOnboarding` If true, don't show onboarding messages on the new tab page.
6113
6114 `MoreFromMozilla` If false, don't show the "More from Mozilla" section in Preferences. (Firefox 98)
6115
6116 `Locked` prevents the user from changing user messaging preferences.
6117
6118 **Compatibility:** Firefox 75, Firefox ESR 68.7\
6119 **CCK2 Equivalent:** N/A\
6120 **Preferences Affected:** `browser.messaging-system.whatsNewPanel.enabled`, `browser.newtabpage.activity-stream.asrouter.userprefs.cfr.addons`, `browser.newtabpage.activity-stream.asrouter.userprefs.cfr.features`, `browser.aboutwelcome.enabled`, `browser.preferences.moreFromMozilla`
6121
6122 #### Windows (GPO)
6123 ```
6124 Software\Policies\Mozilla\Firefox\UserMessaging\WhatsNew = 0x1 | 0x0
6125 Software\Policies\Mozilla\Firefox\UserMessaging\ExtensionRecommendations = 0x1 | 0x0
6126 Software\Policies\Mozilla\Firefox\UserMessaging\FeatureRecommendations = 0x1 | 0x0
6127 Software\Policies\Mozilla\Firefox\UserMessaging\UrlbarInterventions = 0x1 | 0x0
6128 Software\Policies\Mozilla\Firefox\UserMessaging\SkipOnboarding = 0x1 | 0x0
6129 Software\Policies\Mozilla\Firefox\UserMessaging\MoreFromMozilla = 0x1 | 0x0
6130 Software\Policies\Mozilla\Firefox\UserMessaging\Locked = 0x1 | 0x0
6131 ```
6132 #### Windows (Intune)
6133 OMA-URI:
6134 ```
6135 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_WhatsNew
6136 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_ExtensionRecommendations
6137 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_FeatureRecommendations
6138 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_UrlbarInterventions
6139 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_SkipOnboarding
6140 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_MoreFromMozilla
6141 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_Locked
6142 ```
6143 Value (string):
6144 ```
6145 <enabled/> or <disabled/>
6146 ```
6147 #### macOS
6148 ```
6149 <dict>
6150   <key>UserMessaging</key>
6151   <dict>
6152     <key>WhatsNew</key>
6153     <true/> | <false/>
6154     <key>ExtensionRecommendations</key>
6155     <true/> | <false/>
6156     <key>FeatureRecommendations</key>
6157     <true/> | <false/>
6158     <key>UrlbarInterventions</key>
6159     <true/> | <false/>
6160     <key>SkipOnboarding</key>
6161     <true/> | <false/>
6162     <key>MoreFromMozilla</key>
6163     <true/> | <false/>
6164     <key>Locked</key>
6165     <true/> | <false/>
6166   </dict>
6167 </dict>
6168 ```
6169 #### policies.json
6170 ```
6171 {
6172   "policies": {
6173     "UserMessaging": {
6174       "WhatsNew": true | false,
6175       "ExtensionRecommendations": true | false,
6176       "FeatureRecommendations": true | false,
6177       "UrlbarInterventions": true | false,
6178       "SkipOnboarding": true | false,
6179       "MoreFromMozilla": true | false,
6180       "Locked": true | false
6181     }
6182   }
6183 }
6184 ```
6185 ### UseSystemPrintDialog
6186 Use the system print dialog instead of the print preview window.
6187
6188 **Compatibility:** Firefox 102\
6189 **CCK2 Equivalent:** N/A\
6190 **Preferences Affected:** `print.prefer_system_dialog`
6191
6192 #### Windows (GPO)
6193 ```
6194 Software\Policies\Mozilla\Firefox\UseSystemPrintDialog = 0x1 | 0x0
6195 ```
6196 #### Windows (Intune)
6197 OMA-URI:
6198 ```
6199 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/UseSystemPrintDialog
6200 ```
6201 Value (string):
6202 ```
6203 <enabled/> or <disabled/>
6204 ```
6205 #### macOS
6206 ```
6207 <dict>
6208   <key>UseSystemPrintDialog</key>
6209   <true/> | <false/>
6210 </dict>
6211 ```
6212 #### policies.json
6213 ```
6214 {
6215   "policies": {
6216     "UseSystemPrintDialog": true | false
6217   }
6218 }
6219 ```
6220 ### WebsiteFilter
6221 Block websites from being visited. The parameters take an array of Match Patterns, as documented in https://developer.mozilla.org/en-US/Add-ons/WebExtensions/Match_patterns.
6222 The arrays are limited to 1000 entries each.
6223
6224 If you want to block all URLs, you can use `<all_urls>` or `*://*/*`. You can't have just a `*` on the right side.
6225
6226 For specific protocols, use `https://*/*` or `http://*/*`.
6227
6228 As of Firefox 83 and Firefox ESR 78.5, file URLs are supported.
6229
6230 **Compatibility:** Firefox 60, Firefox ESR 60\
6231 **CCK2 Equivalent:** N/A\
6232 **Preferences Affected:** N/A
6233
6234 #### Windows (GPO)
6235 ```
6236 Software\Policies\Mozilla\Firefox\WebsiteFilter\Block\1 = "<all_urls>"
6237 Software\Policies\Mozilla\Firefox\WebsiteFilter\Exceptions\1 = "http://example.org/*"
6238 ```
6239 #### Windows (Intune)
6240 OMA-URI:
6241 ```
6242 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/B_WebsiteFilter_Block
6243 ```
6244 Value (string):
6245 ```
6246 <enabled/> <data id="WebsiteFilter" value="1&#xF000;&#60;all_urls&#62;"/>
6247 ```
6248 OMA-URI:
6249 ```
6250 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/B_WebsiteFilter_Exceptions
6251 ```
6252 Value (string):
6253 ```
6254 <enabled/>
6255 <data id="WebsiteFilter" value="1&#xF000;http://example.org/*"/>
6256 ```
6257 #### macOS
6258 ```
6259 <dict>
6260   <key>WebsiteFilter</key>
6261   <dict>
6262     <key>Block</key>
6263     <array>
6264       <string><all_urls></string>
6265     </array>
6266     <key>Exceptions</key>
6267     <array>
6268       <string>http://example.org/*</string>
6269     </array>
6270   </dict>
6271
6272 </dict>
6273 ```
6274 #### policies.json
6275 ```
6276 {
6277   "policies": {
6278     "WebsiteFilter": {
6279       "Block": ["<all_urls>"],
6280       "Exceptions": ["http://example.org/*"]
6281     }
6282   }
6283 }
6284 ```
6285 ### WindowsSSO
6286 Allow Windows single sign-on for Microsoft, work, and school accounts.
6287
6288 If this policy is set to true, Firefox will use credentials stored in Windows to sign in to Microsoft, work, and school accounts.
6289
6290 **Compatibility:** Firefox 91\
6291 **CCK2 Equivalent:** N/A\
6292 **Preferences Affected:** `network.http.windows-sso.enabled`
6293
6294 #### Windows (GPO)
6295 ```
6296 Software\Policies\Mozilla\Firefox\WindowsSSO = 0x1 | 0x0
6297 ```
6298 #### Windows (Intune)
6299 OMA-URI:
6300 ```
6301 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/WindowsSSO
6302 ```
6303 Value (string):
6304 ```
6305 <enabled/> or <disabled/>
6306 ```
6307 #### policies.json
6308 ```
6309 {
6310   "policies": {
6311     "WindowsSSO": true | false
6312   }
6313 }
6314 ```