README.md

   1 **These policies are in active development and so might contain changes that do not work with current versions of Firefox.**
   2
   3 **You should use the officially released versions (https://github.com/mozilla/policy-templates/releases) if you are deploying changes.**
   4
   5 Policies can be specified using the Group Policy templates on Windows (https://github.com/mozilla/policy-templates/tree/master/windows), configuration profiles on macOS (https://github.com/mozilla/policy-templates/tree/master/mac), or by creating a file called `policies.json`. On Windows, create a directory called `distribution` where the EXE is located and place the file there. On Mac, the file goes into `Firefox.app/Contents/Resources/distribution`.  On Linux, the file goes into `firefox/distribution`, where `firefox` is the installation directory for firefox, which varies by distribution.
   6
   7 | Policy Name | Description
   8 | --- | --- |
   9 | **[`AppAutoUpdate`](#appautoupdate)** |  Enable or disable automatic application update.
  10 | **[`AppUpdateURL`](#appupdateurl)** | Change the URL for application update.
  11 | **[`Authentication`](#authentication)** | Configure sites that support integrated authentication.
  12 | **[`BlockAboutAddons`](#blockaboutaddons)** | Block access to the Add-ons Manager (about:addons).
  13 | **[`BlockAboutConfig`](#blockaboutconfig)** | Block access to about:config.
  14 | **[`BlockAboutProfiles`](#blockaboutprofiles)** | Block access to About Profiles (about:profiles).
  15 | **[`BlockAboutSupport`](#blockaboutsupport)** | Block access to Troubleshooting Information (about:support).
  16 | **[`Bookmarks`](#bookmarks)** | Add bookmarks in either the bookmarks toolbar or menu.
  17 | **[`CaptivePortal`](#captiveportal)** | Enable or disable the detection of captive portals.
  18 | **[`Certificates`](#certificates)** |
  19 | **[`Certificates -> ImportEnterpriseRoots`](#certificates--importenterpriseroots)** | Trust certificates that have been added to the operating system certificate store by a user or administrator.
  20 | **[`Certificates -> Install`](#certificates--install)** | Install certificates into the Firefox certificate store.
  21 | **[`Cookies`](#cookies)** | Configure cookie preferences.
  22 | **[`DisableSetDesktopBackground`](#disablesetdesktopbackground)** | Remove the "Set As Desktop Background..." menuitem when right clicking on an image.
  23 | **[`DisableMasterPasswordCreation`](#disablemasterpasswordcreation)** | Remove the master password functionality.
  24 | **[`DisableAppUpdate`](#disableappupdate)** | Turn off application updates.
  25 | **[`DisableBuiltinPDFViewer`](#disablebuiltinpdfviewer)** | Disable the built in PDF viewer.
  26 | **[`DisabledCiphers`](#disabledciphers)** | Disable ciphers.
  27 | **[`DisableDefaultBrowserAgent`](#disabledefaultbrowseragent)** | Prevent the default browser agent from taking any actions (Windows only).
  28 | **[`DisableDeveloperTools`](#disabledevelopertools)** | Remove access to all developer tools.
  29 | **[`DisableFeedbackCommands`](#disablefeedbackcommands)** | Disable the menus for reporting sites.
  30 | **[`DisableFirefoxScreenshots`](#disablefirefoxscreenshots)** | Remove access to Firefox Screenshots.
  31 | **[`DisableFirefoxAccounts`](#disablefirefoxaccounts)** | Disable Firefox Accounts integration (Sync).
  32 | **[`DisableFirefoxStudies`](#disablefirefoxstudies)** | Disable Firefox studies (Shield).
  33 | **[`DisableForgetButton`](#disableforgetbutton)** | Disable the "Forget" button.
  34 | **[`DisableFormHistory`](#disableformhistory)** | Turn off saving information on web forms and the search bar.
  35 | **[`DisablePocket`](#disablepocket)** | Remove Pocket in the Firefox UI.
  36 | **[`DisablePrivateBrowsing`](#disableprivatebrowsing)** | Remove access to private browsing.
  37 | **[`DisablePasswordReveal`](#disablepasswordreveal)** | Do not allow passwords to be revealed in saved logins.
  38 | **[`DisableProfileImport`](#disableprofileimport)** | Disables the "Import data from another browser" option in the bookmarks window.
  39 | **[`DisableProfileRefresh`](#disableprofilerefresh)** | Disable the Refresh Firefox button on about:support and support.mozilla.org
  40 | **[`DisableSafeMode`](#disablesafemode)** | Disable safe mode within the browser.
  41 | **[`DisableSecurityBypass`](#disablesecuritybypass)** | Prevent the user from bypassing security in certain cases.
  42 | **[`DisableSystemAddonUpdate`](#disablesystemaddonupdate)** | Prevent system add-ons from being installed or update.
  43 | **[`DisableTelemetry`](#disabletelemetry)** | DisableTelemetry
  44 | **[`DisplayBookmarksToolbar`](#displaybookmarkstoolbar)** | Set the initial state of the bookmarks toolbar.
  45 | **[`DisplayMenuBar (Deprecated)`](#displaymenubar-deprecated)** | Set the initial state of the menubar.
  46 | **[`DisplayMenuBar`](#displaymenubar)** | Set the state of the menubar.
  47 | **[`DNSOverHTTPS`](#dnsoverhttps)** | Configure DNS over HTTPS.
  48 | **[`DontCheckDefaultBrowser`](#dontcheckdefaultbrowser)** | Don't check if Firefox is the default browser at startup.
  49 | **[`DefaultDownloadDirectory`](#defaultdownloaddirectory)** | Set the default download directory.
  50 | **[`DownloadDirectory`](#downloaddirectory)** | Set and lock the download directory.
  51 | **[`EnableTrackingProtection`](#enabletrackingprotection)** | Configure tracking protection.
  52 | **[`EnterprisePoliciesEnabled`](#enterprisepoliciesenabled)** | Enable policy support on macOS.
  53 | **[`Extensions`](#extensions)** | Control the installation, uninstallation and locking of extensions.
  54 | **[`ExtensionSettings`](#extensionsettings)** | Manage all aspects of extensions.
  55 | **[`ExtensionUpdate`](#extensionupdate)** | Control extension updates.
  56 | **[`FlashPlugin`](#flashplugin)** | Configure the default Flash plugin policy as well as origins for which Flash is allowed.
  57 | **[`FirefoxHome`](#firefoxhome)** | Customize the Firefox Home page.
  58 | **[`HardwareAcceleration`](#hardwareacceleration)** | Control hardware acceleration.
  59 | **[`Homepage`](#homepage)** | Configure the default homepage and how Firefox starts.
  60 | **[`InstallAddonsPermission`](#installaddonspermission)** | Configure the default extension install policy as well as origins for extension installs are allowed.
  61 | **[`LegacyProfiles`](#legacyprofiles)** | Disable the feature enforcing a separate profile for each installation.
  62 | **[`LocalFileLinks`](#localfilelinks)** | Enable linking to local files by origin.
  63 | **[`NetworkPrediction`](#networkprediction)** | Enable or disable network prediction (DNS prefetching).
  64 | **[`NewTabPage`](#newtabpage)** | Enable or disable the New Tab page.
  65 | **[`NoDefaultBookmarks`](#nodefaultbookmarks)** | Disable the creation of default bookmarks.
  66 | **[`OfferToSaveLogins`](#offertosavelogins)** | Control whether or not Firefox offers to save passwords.
  67 | **[`OfferToSaveLoginsDefault`](#offertosaveloginsdefault)** | Set the default value for whether or not Firefox offers to save passwords.
  68 | **[`OverrideFirstRunPage`](#overridefirstrunpage)** | Override the first run page.
  69 | **[`OverridePostUpdatePage`](#overridepostupdatepage)** | Override the upgrade page.
  70 | **[`PasswordManagerEnabled`](#passwordmanagerenabled)** | Remove (some) access to the password manager.
  71 | **[`Permissions`](#permissions)** | Set permissions associated with camera, microphone, location, and notifications.
  72 | **[`PopupBlocking`](#popupblocking)** | Configure the default pop-up window policy as well as origins for which pop-up windows are allowed.
  73 | **[`Preferences`](#preferences)** | Set and lock some preferences.
  74 | **[`PromptForDownloadLocation`](#promptfordownloadlocation)** | Ask where to save each file before downloading.
  75 | **[`Proxy`](#proxy)** | Configure proxy settings.
  76 | **[`RequestedLocales`](#requestedlocales)** | Set the the list of requested locales for the application in order of preference.
  77 | **[`SanitizeOnShutdown` (All)](#sanitizeonshutdown-all)** | Clear all data on shutdown.
  78 | **[`SanitizeOnShutdown` (Selective)](#sanitizeonshutdown-selective)** | Clear data on shutdown.
  79 | **[`SearchBar`](#searchbar)** | Set whether or not search bar is displayed.
  80 | **[`SearchEngines`](#searchengines-this-policy-is-only-available-on-the-esr)** |
  81 | **[`SearchEngines -> Default`](#searchengines--default)** | Set the default search engine.
  82 | **[`SearchEngines -> PreventInstalls`](#searchengines--preventinstalls)** | Prevent installing search engines from webpages.
  83 | **[`SearchEngines -> Remove`](#searchengines--remove)** | Hide built-in search engines.
  84 | **[`SearchEngines -> Add`](#searchengines--add)** | Add new search engines.
  85 | **[`SecurityDevices`](#securitydevices)** | Install PKCS #11 modules.
  86 | **[`SearchSuggestEnabled`](#searchsuggestenabled)** | Enable search suggestions.
  87 | **[`SSLVersionMax`](#sslversionmax)** | Set and lock the maximum version of TLS.
  88 | **[`SSLVersionMin`](#sslversionmin)** | Set and lock the minimum version of TLS.
  89 | **[`SupportMenu`](#supportmenu)** | Add a menuitem to the help menu for specifying support information.
  90 | **[`UserMessaging`](#usermessaging)** | Don't show certain messages to the user.
  91 | **[`WebsiteFilter`](#websitefilter)** | Block websites from being visited.
  92
  93 ### AppAutoUpdate
  94
  95 Enable or disable **automatic** application update.
  96
  97 If set to true, application updates are installed without user approval.
  98
  99 If set to false, application updates are downloaded but the user can choose when to install the update.
 100
 101 If you have disabled updates via DisableAppUpdate, this policy has no effect.
 102
 103 **Compatibility:** Firefox 75, Firefox ESR 68.7\
 104 **CCK2 Equivalent:** N/A\
 105 **Preferences Affected:** app.update.auto
 106
 107 #### Windows (GPO)
 108 ```
 109 Software\Policies\Mozilla\Firefox\AppAutoUpdate = 0x1 | 0x0
 110 ```
 111 #### macOS
 112 ```
 113 <dict>
 114   <key>AppAutoUpdate</key>
 115   <true/> | <false/>
 116 </dict>
 117 ```
 118 #### policies.json
 119 ```
 120 {
 121   "policies": {
 122     "AppAutoUpdate": true | false
 123   }
 124 }
 125 ```
 126 ### AppUpdateURL
 127
 128 Change the URL for application update.
 129
 130 **Compatibility:** Firefox 62, Firefox ESR 60.2\
 131 **CCK2 Equivalent:** N/A\
 132 **Preferences Affected:** `app.update.url`
 133
 134 #### Windows (GPO)
 135 ```
 136 Software\Policies\Mozilla\Firefox\AppUpdateURL = "https://yoursite.com"
 137 ```
 138 #### macOS
 139 ```
 140 <dict>
 141   <key>AppUpdateURL</key>
 142   <string>https://yoursite.com</string>
 143 </dict>
 144 ```
 145 #### policies.json
 146 ```
 147 {
 148   "policies": {
 149     "AppUpdateURL": "https://yoursite.com"
 150   }
 151 }
 152 ```
 153 ### Authentication
 154
 155 Configure sites that support integrated authentication.
 156
 157 See https://developer.mozilla.org/en-US/docs/Mozilla/Integrated_authentication for more information.
 158
 159 **Compatibility:** Firefox 60, Firefox ESR 60 (AllowNonFQDN added in 62/60.2, AllowProxies added in 70/68.2, Locked added in 71/68.3)\
 160 **CCK2 Equivalent:** N/A\
 161 **Preferences Affected:** `network.negotiate-auth.trusted-uris`,`network.negotiate-auth.delegation-uris`,`network.automatic-ntlm-auth.trusted-uris`,`network.automatic-ntlm-auth.allow-non-fqdn`,`network.negotiate-auth.allow-non-fqdn`,`network.automatic-ntlm-auth.allow-proxies`,`network.negotiate-auth.allow-proxies`
 162
 163 #### Windows (GPO)
 164 ```
 165 Software\Policies\Mozilla\Firefox\Authentication\SPNEGO\1 = "mydomain.com"
 166 Software\Policies\Mozilla\Firefox\Authentication\SPNEGO\2 = "https://myotherdomain.com"
 167 Software\Policies\Mozilla\Firefox\Authentication\Delegated\1 = "mydomain.com"
 168 Software\Policies\Mozilla\Firefox\Authentication\Delegated\2 = "https://myotherdomain.com"
 169 Software\Policies\Mozilla\Firefox\Authentication\NTLM\1 = "mydomain.com"
 170 Software\Policies\Mozilla\Firefox\Authentication\NTLM\2 = "https://myotherdomain.com"
 171 Software\Policies\Mozilla\Firefox\Authentication\AllowNonFQDN\SPNEGO = 0x1 | 0x0
 172 Software\Policies\Mozilla\Firefox\Authentication\AllowNonFQDN\NTLM = 0x1 | 0x0
 173 Software\Policies\Mozilla\Firefox\Authentication\AllowProxies\SPNEGO = 0x1 | 0x0
 174 Software\Policies\Mozilla\Firefox\Authentication\AllowProxies\NTLM = 0x1 | 0x0
 175 Software\Policies\Mozilla\Firefox\Authentication\Locked = 0x1 | 0x0
 176 ```
 177 #### macOS
 178 ```
 179 <dict>
 180   <key>Authentication</key>
 181   <dict>
 182     <key>SPNEGO</key>
 183     <array>
 184       <string>mydomain.com</string>
 185       <string>https://myotherdomain.com</string>
 186     </array>
 187     <key>Delegated</key>
 188     <array>
 189       <string>mydomain.com</string>
 190       <string>https://myotherdomain.com</string>
 191     </array>
 192     <key>NTLM</key>
 193     <array>
 194       <string>mydomain.com</string>
 195       <string>https://myotherdomain.com</string>
 196     </array>
 197     <key>AllowNonFQDN</key>
 198       <dict>
 199       <key>SPNEGO</key>
 200       <true/> | <false/>
 201       <key>NTLM</key>
 202       <true/> | <false/>
 203     </dict>
 204     <key>AllowProxies</key>
 205       <dict>
 206       <key>SPNEGO</key>
 207       <true/> | <false/>
 208       <key>NTLM</key>
 209       <true/> | <false/>
 210     </dict>
 211     <key>Locked</key>
 212     <true/> | <false/>
 213   </dict>
 214 </dict>
 215 ```
 216 #### policies.json
 217 ```
 218 {
 219   "policies": {
 220     "Authentication": {
 221       "SPNEGO": ["mydomain.com", "https://myotherdomain.com"],
 222       "Delegated": ["mydomain.com", "https://myotherdomain.com"],
 223       "NTLM": ["mydomain.com", "https://myotherdomain.com"],
 224       "AllowNonFQDN": {
 225         "SPNEGO": true | false,
 226         "NTLM": true | false
 227       },
 228       "AllowProxies": {
 229         "SPNEGO": true | false,
 230         "NTLM": true | false
 231       },
 232       "Locked": true | false
 233     }
 234   }
 235 }
 236 ```
 237 ### BlockAboutAddons
 238
 239 Block access to the Add-ons Manager (about:addons).
 240
 241 **Compatibility:** Firefox 60, Firefox ESR 60\
 242 **CCK2 Equivalent:** `disableAddonsManager`\
 243 **Preferences Affected:** N/A
 244
 245 #### Windows (GPO)
 246 ```
 247 Software\Policies\Mozilla\Firefox\BlockAboutAddons = 0x1 | 0x0
 248 ```
 249 #### macOS
 250 ```
 251 <dict>
 252   <key>BlockAboutAddons</key>
 253   <true/> | <false/>
 254 </dict>
 255 ```
 256 #### policies.json
 257 ```
 258 {
 259   "policies": {
 260     "BlockAboutAddons": true | false
 261   }
 262 }
 263 ```
 264 ### BlockAboutConfig
 265
 266 Block access to about:config.
 267
 268 **Compatibility:** Firefox 60, Firefox ESR 60\
 269 **CCK2 Equivalent:** `disableAboutConfig`\
 270 **Preferences Affected:** N/A
 271
 272 #### Windows (GPO)
 273 ```
 274 Software\Policies\Mozilla\Firefox\BlockAboutConfig = 0x1 | 0x0
 275 ```
 276 #### macOS
 277 ```
 278 <dict>
 279   <key>BlockAboutConfig</key>
 280   <true/> | <false/>
 281 </dict>
 282 ```
 283 #### policies.json
 284 ```
 285 {
 286   "policies": {
 287     "BlockAboutConfig": true | false
 288   }
 289 }
 290 ```
 291 ### BlockAboutProfiles
 292
 293 Block access to About Profiles (about:profiles).
 294
 295 **Compatibility:** Firefox 60, Firefox ESR 60\
 296 **CCK2 Equivalent:** `disableAboutProfiles`\
 297 **Preferences Affected:** N/A
 298
 299 #### Windows (GPO)
 300 ```
 301 Software\Policies\Mozilla\Firefox\BlockAboutProfiles = 0x1 | 0x0
 302 ```
 303 #### macOS
 304 ```
 305 <dict>
 306   <key>BlockAboutProfiles</key>
 307   <true/> | <false/>
 308 </dict>
 309 ```
 310 #### policies.json
 311 ```
 312 {
 313   "policies": {
 314     "BlockAboutProfiles": true | false
 315   }
 316 }
 317 ```
 318 ### BlockAboutSupport
 319
 320 Block access to Troubleshooting Information (about:support).
 321
 322 **Compatibility:** Firefox 60, Firefox ESR 60\
 323 **CCK2 Equivalent:** `disableAboutSupport`\
 324 **Preferences Affected:** N/A
 325
 326 #### Windows (GPO)
 327 ```
 328 Software\Policies\Mozilla\Firefox\BlockAboutSupport = 0x1 | 0x0
 329 ```
 330 #### macOS
 331 ```
 332 <dict>
 333   <key>BlockAboutSupport</key>
 334   <true/> | <false/>
 335 </dict>
 336 ```
 337 #### policies.json
 338 ```
 339 {
 340   "policies": {
 341     "BlockAboutSupport": true | false
 342   }
 343 }
 344 ```
 345 ### Bookmarks
 346
 347 Add bookmarks in either the bookmarks toolbar or menu. Only `Title` and `URL` are required. If `Placement` is not specified, the bookmark will be placed on the toolbar. If `Folder` is specified, it is automatically created and bookmarks with the same folder name are grouped together.
 348
 349 **Compatibility:** Firefox 60, Firefox ESR 60\
 350 **CCK2 Equivalent:** `bookmarks.toolbar`,`bookmarks.menu`\
 351 **Preferences Affected:** N/A
 352
 353 #### Windows (GPO)
 354 ```
 355 Software\Policies\Mozilla\Firefox\Bookmarks\1\Title = "Example"
 356 Software\Policies\Mozilla\Firefox\Bookmarks\1\URL = "https://example.com"
 357 Software\Policies\Mozilla\Firefox\Bookmarks\1\Favicon = "https://example.com/favicon.ico"
 358 Software\Policies\Mozilla\Firefox\Bookmarks\1\Placement = "toolbar" | "menu"
 359 Software\Policies\Mozilla\Firefox\Bookmarks\1\Folder = "FolderName"
 360 ```
 361 #### macOS
 362 ```
 363 <dict>
 364   <key>Bookmarks</key>
 365   <array>
 366     <dict>
 367       <key>Title</key>
 368       <string>Example</string>
 369       <key>URL</key>
 370       <string>https://example.com</string>
 371       <key>Favicon</key>
 372       <string>https://example.com/favicon.ico</string>
 373       <key>Placement</key>
 374       <string>toolbar | menu</string>
 375       <key>Folder</key>
 376       <string>FolderName</string>
 377     </dict>
 378   </array>
 379 </dict>
 380 ```
 381 #### policies.json
 382 ```
 383 {
 384   "policies": {
 385     "Bookmarks": [
 386       {
 387         "Title": "Example",
 388         "URL": "https://example.com",
 389         "Favicon": "https://example.com/favicon.ico",
 390         "Placement": "toolbar" | "menu",
 391         "Folder": "FolderName"
 392       }
 393     ]
 394   }
 395 }
 396 ```
 397 ### CaptivePortal
 398 Enable or disable the detection of captive portals.
 399
 400 **Compatibility:** Firefox 67, Firefox ESR 60.7\
 401 **CCK2 Equivalent:** N/A\
 402 **Preferences Affected:** `network.captive-portal-service.enabled`
 403
 404 #### Windows (GPO)
 405 ```
 406 Software\Policies\Mozilla\Firefox\CaptivePortal = 0x1 | 0x0
 407 ```
 408 #### macOS
 409 ```
 410 <dict>
 411   <key>CaptivePortal</key>
 412   <true/> | <false/>
 413 </dict>
 414 ```
 415 #### policies.json
 416 ```
 417 {
 418   "policies": {
 419     "CaptivePortal": true | false
 420   }
 421 }
 422 ```
 423 ### Certificates
 424
 425 ### Certificates | ImportEnterpriseRoots
 426
 427 Trust certificates that have been added to the operating system certificate store by a user or administrator.
 428
 429 See https://support.mozilla.org/kb/setting-certificate-authorities-firefox for more detail.
 430
 431 **Compatibility:** Firefox 60, Firefox ESR 60 (macOS support in Firefox 63, Firefox ESR 68)\
 432 **CCK2 Equivalent:** N/A\
 433 **Preferences Affected:** `security.enterprise_roots.enabled`
 434
 435 #### Windows (GPO)
 436 ```
 437 Software\Policies\Mozilla\Firefox\Certificates\ImportEnterpriseRoots = 0x1 | 0x0
 438 ```
 439 #### macOS
 440 ```
 441 <dict>
 442   <key>Certificates</key>
 443   <dict>
 444     <key>ImportEnterpriseRoots</key>
 445     <true/> | <false/>
 446   </dict>
 447 </dict>
 448 ```
 449 #### policies.json
 450 ```
 451 {
 452   "policies": {
 453     "Certificates": {
 454       "ImportEnterpriseRoots": true | false
 455     }
 456   }
 457 }
 458 ```
 459 ### Certificates | Install
 460
 461 Install certificates into the Firefox certificate store. If only a filename is specified, Firefox searches for the file in the following locations:
 462
 463 - Windows
 464   - %USERPROFILE%\AppData\Local\Mozilla\Certificates
 465   - %USERPROFILE%\AppData\Roaming\Mozilla\Certificates
 466 - macOS
 467   - /Library/Application Support/Mozilla/Certificates
 468   - ~/Library/Application Support/Mozilla/Certificates
 469 - Linux
 470   - /usr/lib/mozilla/certificates
 471   - /usr/lib64/mozilla/certificates
 472   - ~/.mozilla/certificates
 473
 474 Starting with Firefox 65, Firefox 60.5 ESR, a fully qualified path can be used, including UNC paths. You should use the native path style for your operating system. We do not support using %USERPROFILE% or other environment variables on Windows.
 475
 476 If you are specifying the path in the policies.json file on Windows, you need to escape your backslashes (`\\`) which means that for UNC paths, you need to escape both (`\\\\`). If you use group policy, you only need one backslash.
 477
 478 Certificates are installed using the trust string `CT,CT,`.
 479
 480 Binary (DER) and ASCII (PEM) certificates are both supported.
 481
 482 **Compatibility:** Firefox 64, Firefox ESR 64\
 483 **CCK2 Equivalent:** `certs.ca`\
 484 **Preferences Affected:** N/A
 485
 486 #### Windows (GPO)
 487 ```
 488 Software\Policies\Mozilla\Firefox\Certificates\Install\1 = "cert1.der"
 489 Software\Policies\Mozilla\Firefox\Certificates\Install\2 = "C:\Users\username\cert2.pem"
 490 ```
 491 #### macOS
 492 ```
 493 <dict>
 494   <key>Certificates</key>
 495   <dict>
 496     <key>Install</key>
 497     <array>
 498       <string>cert1.der</string>
 499       <string>/Users/username/cert2.pem</string>
 500     </array>
 501   </dict>
 502 </dict>
 503 ```
 504 #### policies.json
 505 ```
 506 {
 507   "policies": {
 508     "Certificates": {
 509       "Install": ["cert1.der", "/home/username/cert2.pem"]
 510     }
 511   }
 512 }
 513 ```
 514 ### Cookies
 515 Configure cookie preferences.
 516
 517 `Allow` is a list of origins (not domains) where cookies are always allowed. You must include http or https.
 518
 519 `Block` is a list of origins (not domains) where cookies are always blocked. You must include http or https.
 520
 521 `Default` determines whether cookies are accepted at all.
 522
 523 `AcceptThirdParty` determines how third-party cookies are handled.
 524
 525 `ExpireAtSessionEnd` determines when cookies expire.
 526
 527 `RejectTracker` only rejects cookies for trackers.
 528
 529 `Locked` prevents the user from changing cookie preferences.
 530
 531 **Compatibility:** Firefox 60, Firefox ESR 60 (RejectTracker was added in Firefox 63)\
 532 **CCK2 Equivalent:** N/A\
 533 **Preferences Affected:** `network.cookie.cookieBehavior`,`network.cookie.lifetimePolicy`
 534
 535 #### Windows (GPO)
 536 ```
 537 Software\Policies\Mozilla\Firefox\Cookies\Allow\1 = "https://example.com"
 538 Software\Policies\Mozilla\Firefox\Cookies\Block\1 = "https://example.org"
 539 Software\Policies\Mozilla\Firefox\Cookies\Default = 0x1 | 0x0
 540 Software\Policies\Mozilla\Firefox\Cookies\AcceptThirdParty = "always" | "never" |"from-visited"
 541 Software\Policies\Mozilla\Firefox\Cookies\ExpireAtSessionEnd = 0x1 | 0x0
 542 Software\Policies\Mozilla\Firefox\Cookies\RejectTracker = 0x1 | 0x0
 543 Software\Policies\Mozilla\Firefox\Cookies\Locked = 0x1 | 0x0
 544 ```
 545 #### macOS
 546 ```
 547 <dict>
 548   <key>Cookies</key>
 549   <dict>
 550     <key>Allow</key>
 551     <array>
 552       <string>http://example.com</string>
 553     </array>
 554     <key>Block</key>
 555     <array>
 556       <string>http://example.org</string>
 557     </array>
 558     <key>Default</key>
 559     <true/> | <false/>
 560     <key>AcceptThirdParty</key>
 561     <string>always | never | from-visited</string>
 562     <key>ExpireAtSessionEnd</key>
 563     <true/> | <false/>
 564     <key>RejectTracker</key>
 565     <true/> | <false/>
 566     <key>Locked</key>
 567     <true/> | <false/>
 568   </dict>
 569 </dict>
 570 ```
 571 #### policies.json
 572 ```
 573 {
 574   "policies": {
 575     "Cookies": {
 576       "Allow": ["http://example.org/"],
 577       "Block": ["http://example.edu/"],
 578       "Default": true | false,
 579       "AcceptThirdParty": "always" | "never" | "from-visited",
 580       "ExpireAtSessionEnd": true | false,
 581       "RejectTracker": true | false,
 582       "Locked": true | false
 583     }
 584   }
 585 }
 586 ```
 587 ### DisableSetDesktopBackground
 588 Remove the "Set As Desktop Background..." menuitem when right clicking on an image.
 589
 590 **Compatibility:** Firefox 60, Firefox ESR 60\
 591 **CCK2 Equivalent:** `removeSetDesktopBackground`\
 592 **Preferences Affected:** N/A
 593
 594 #### Windows (GPO)
 595 ```
 596 Software\Policies\Mozilla\Firefox\DisableSetDesktopBackground = 0x1 | 0x0
 597 ```
 598
 599 #### macOS
 600 ```
 601 <dict>
 602   <key>DisableSetDesktopBackground</key>
 603   <true/> | <false/>
 604 </dict>
 605 ```
 606 #### policies.json
 607 ```
 608 {
 609   "policies": {
 610     "DisableSetDesktopBackground": true | false
 611   }
 612 }
 613 ```
 614 ### DisableMasterPasswordCreation
 615 Remove the master password functionality.
 616
 617 **Compatibility:** Firefox 60, Firefox ESR 60\
 618 **CCK2 Equivalent:** `noMasterPassword`\
 619 **Preferences Affected:** N/A
 620
 621 #### Windows (GPO)
 622 ```
 623 Software\Policies\Mozilla\Firefox\DisableMasterPasswordCreation = 0x1 | 0x0
 624 ```
 625
 626 #### macOS
 627 ```
 628 <dict>
 629   <key>DisableMasterPasswordCreation</key>
 630   <true/> | <false/>
 631 </dict>
 632 ```
 633 #### policies.json
 634 ```
 635 {
 636   "policies": {
 637     "DisableMasterPasswordCreation": true | false
 638   }
 639 }
 640 ```
 641 ### DisableAppUpdate
 642 Turn off application updates.
 643
 644 **Compatibility:** Firefox 60, Firefox ESR 60\
 645 **CCK2 Equivalent:** `disableFirefoxUpdates`\
 646 **Preferences Affected:** N/A
 647
 648 #### Windows (GPO)
 649 ```
 650 Software\Policies\Mozilla\Firefox\DisableAppUpdate = 0x1 | 0x0
 651 ```
 652 #### macOS
 653 ```
 654 <dict>
 655   <key>DisableAppUpdate</key>
 656   <true/> | <false/>
 657 </dict>
 658 ```
 659 #### policies.json
 660 ```
 661 {
 662   "policies": {
 663     "DisableAppUpdate": true | false
 664   }
 665 }
 666 ```
 667 ### DisableBuiltinPDFViewer
 668 Disable the built in PDF viewer. PDF files are downloaded and sent externally.
 669
 670 **Compatibility:** Firefox 60, Firefox ESR 60\
 671 **CCK2 Equivalent:** `disablePDFjs`\
 672 **Preferences Affected:** `pdfjs.disabled`
 673
 674 #### Windows (GPO)
 675 ```
 676 Software\Policies\Mozilla\Firefox\DisableBuiltinPDFViewer = 0x1 | 0x0
 677 ```
 678
 679 #### macOS
 680 ```
 681 <dict>
 682   <key>DisableBuiltinPDFViewer</key>
 683   <true/> | <false/>
 684 </dict>
 685 ```
 686 #### policies.json
 687 ```
 688 {
 689   "policies": {
 690     "DisableBuiltinPDFViewer": true | false
 691   }
 692 }
 693 ```
 694 ### DisabledCiphers
 695 Disable specific cryptographic ciphers.
 696
 697 **Compatibility:** Firefox 76, Firefox ESR 68.8\
 698 **CCK2 Equivalent:** N/A\
 699 **Preferences Affected:** N/A
 700
 701 #### Windows (GPO)
 702 ```
 703 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_DHE_RSA_WITH_AES_128_CBC_SHA = 0x1 | 0x0
 704 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_DHE_RSA_WITH_AES_256_CBC_SHA = 0x1 | 0x0
 705 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA = 0x1 | 0x0
 706 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA = 0x1 | 0x0
 707 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 = 0x1 | 0x0
 708 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 = 0x1 | 0x0
 709 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_RSA_WITH_AES_128_CBC_SHA = 0x1 | 0x0
 710 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_RSA_WITH_AES_256_CBC_SHA = 0x1 | 0x0
 711 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_RSA_WITH_3DES_EDE_CBC_SHA = 0x1 | 0x0
 712 ```
 713 #### macOS
 714 ```
 715 <dict>
 716   <key>DisabledCiphers</key>
 717     <dict>
 718       <key>TLS_DHE_RSA_WITH_AES_128_CBC_SHA</key>
 719       <true/> | <false/>
 720       <key>TLS_DHE_RSA_WITH_AES_256_CBC_SHA</key>
 721       <true/> | <false/>
 722       <key>TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA</key>
 723       <true/> | <false/>
 724       <key>TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA</key>
 725       <true/> | <false/>
 726       <key>TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256</key>
 727       <true/> | <false/>
 728       <key>TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256</key>
 729       <true/> | <false/>
 730       <key>TLS_RSA_WITH_AES_128_CBC_SHA</key>
 731       <true/> | <false/>
 732       <key>TLS_RSA_WITH_AES_256_CBC_SHA</key>
 733       <true/> | <false/>
 734       <key>TLS_RSA_WITH_3DES_EDE_CBC_SHA</key>
 735       <true/> | <false/>
 736     </dict>
 737 </dict>
 738 ```
 739 #### policies.json
 740 ```
 741 {
 742   "policies": {
 743     "DisabledCiphers" {
 744       "TLS_DHE_RSA_WITH_AES_128_CBC_SHA": true | false,
 745       "TLS_DHE_RSA_WITH_AES_256_CBC_SHA": true | false,
 746       "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA": true | false,
 747       "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA": true | false,
 748       "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256": true | false,
 749       "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256": true | false,
 750       "TLS_RSA_WITH_AES_128_CBC_SHA": true | false,
 751       "TLS_RSA_WITH_AES_256_CBC_SHA": true | false,
 752       "TLS_RSA_WITH_3DES_EDE_CBC_SHA": true | false
 753     }
 754   }
 755 }
 756 ```
 757 ### DisableDefaultBrowserAgent
 758 Prevent the default browser agent from taking any actions. Only applicable to Windows; other platforms don’t have the agent.
 759
 760 **Compatibility:** Firefox 75, Firefox ESR 68.7 (Windows only)\
 761 **CCK2 Equivalent:** N/A\
 762 **Preferences Affected:** N/A
 763
 764 #### Windows (GPO)
 765 ```
 766 Software\Policies\Mozilla\Firefox\DisableDefaultBrowserAgent = 0x1 | 0x0
 767 ```
 768
 769 #### policies.json
 770 ```
 771 {
 772   "policies": {
 773     "DisableDefaultBrowserAgent": true | false
 774   }
 775 }
 776 ```
 777 ### DisableDeveloperTools
 778 Remove access to all developer tools.
 779
 780 **Compatibility:** Firefox 60, Firefox ESR 60\
 781 **CCK2 Equivalent:** `removeDeveloperTools`\
 782 **Preferences Affected:** `devtools.policy.disabled`
 783
 784 #### Windows (GPO)
 785 ```
 786 Software\Policies\Mozilla\Firefox\DisableDeveloperTools = 0x1 | 0x0`
 787 ```
 788
 789 #### macOS
 790 ```
 791 <dict>
 792   <key>DisableDeveloperTools</key>
 793   <true/> | <false/>
 794 </dict>
 795 ```
 796 #### policies.json
 797 ```
 798 {
 799   "policies": {
 800     "DisableDeveloperTools": true | false
 801   }
 802 }
 803 ```
 804 ### DisableFeedbackCommands
 805 Disable the menus for reporting sites (Submit Feedback, Report Deceptive Site).
 806
 807 **Compatibility:** Firefox 60, Firefox ESR 60\
 808 **CCK2 Equivalent:** N/A\
 809 **Preferences Affected:** N/A
 810
 811 #### Windows (GPO)
 812 ```
 813 Software\Policies\Mozilla\Firefox\DisableFeedbackCommands = 0x1 | 0x0
 814 ```
 815 #### macOS
 816 ```
 817 <dict>
 818   <key>DisableFeedbackCommands</key>
 819   <true/> | <false/>
 820 </dict>
 821 ```
 822 #### policies.json
 823 ```
 824 {
 825   "policies": {
 826     "DisableFeedbackCommands": true | false
 827   }
 828 }
 829 ```
 830 ### DisableFirefoxScreenshots
 831 Remove access to Firefox Screenshots.
 832
 833 **Compatibility:** Firefox 60, Firefox ESR 60\
 834 **CCK2 Equivalent:** N/A\
 835 **Preferences Affected:** `extensions.screenshots.disabled`
 836
 837 #### Windows (GPO)
 838 ```
 839 Software\Policies\Mozilla\Firefox\DisableFirefoxScreenshots = 0x1 | 0x0
 840 ```
 841 #### macOS
 842 ```
 843 <dict>
 844   <key>DisableFirefoxScreenshots</key>
 845   <true/> | <false/>
 846 </dict>
 847 ```
 848 #### policies.json
 849 ```
 850 {
 851   "policies": {
 852     "DisableFirefoxScreenshots": true | false
 853   }
 854 }
 855 ```
 856 ### DisableFirefoxAccounts
 857 Disable Firefox Accounts integration (Sync).
 858
 859 **Compatibility:** Firefox 60, Firefox ESR 60\
 860 **CCK2 Equivalent:** `disableSync`\
 861 **Preferences Affected:** `identity.fxaccounts.enabled`
 862
 863 #### Windows (GPO)
 864 ```
 865 Software\Policies\Mozilla\Firefox\DisableFirefoxAccounts = 0x1 | 0x0
 866 ```
 867 #### macOS
 868 ```
 869 <dict>
 870   <key>DisableFirefoxAccounts</key>
 871   <true/> | <false/>
 872 </dict>
 873 ```
 874 #### policies.json
 875 ```
 876 {
 877   "policies": {
 878     "DisableFirefoxAccounts": true | false
 879   }
 880 }
 881 ```
 882 ### DisableFirefoxStudies
 883 Disable Firefox studies (Shield).
 884
 885 **Compatibility:** Firefox 60, Firefox ESR 60\
 886 **CCK2 Equivalent:** N/A\
 887 **Preferences Affected:** N/A
 888
 889 #### Windows (GPO)
 890 ```
 891 Software\Policies\Mozilla\Firefox\DisableFirefoxStudies = 0x1 | 0x0
 892 ```
 893 #### macOS
 894 ```
 895 <dict>
 896   <key>DisableFirefoxStudies</key>
 897   <true/> | <false/>
 898 </dict>
 899 ```
 900 #### policies.json
 901 ```
 902 {
 903   "policies": {
 904     "DisableFirefoxStudies": true | false
 905   }
 906 }
 907 ```
 908 ### DisableForgetButton
 909 Disable the "Forget" button.
 910
 911 **Compatibility:** Firefox 60, Firefox ESR 60\
 912 **CCK2 Equivalent:** `disableForget`\
 913 **Preferences Affected:** N/A
 914
 915 #### Windows (GPO)
 916 ```
 917 Software\Policies\Mozilla\Firefox\DisableForgetButton = 0x1 | 0x0
 918 ```
 919 #### macOS
 920 ```
 921 <dict>
 922   <key>DisableForgetButton</key>
 923   <true/> | <false/>
 924 </dict>
 925 ```
 926 #### policies.json
 927 ```
 928 {
 929   "policies": {
 930     "DisableForgetButton": true | false
 931   }
 932 }
 933 ```
 934 ### DisableFormHistory
 935 Turn off saving information on web forms and the search bar.
 936
 937 **Compatibility:** Firefox 60, Firefox ESR 60\
 938 **CCK2 Equivalent:** `disableFormFill`\
 939 **Preferences Affected:** ` browser.formfill.enable`
 940
 941 #### Windows (GPO)
 942 ```
 943 Software\Policies\Mozilla\Firefox\DisableFormHistory = 0x1 | 0x0
 944 ```
 945 #### macOS
 946 ```
 947 <dict>
 948   <key>DisableFormHistory</key>
 949   <true/> | <false/>
 950 </dict>
 951 ```
 952 #### policies.json
 953 ```
 954 {
 955   "policies": {
 956     "DisableFormHistory": true | false
 957   }
 958 }
 959 ```
 960 ### DisablePasswordReveal
 961 Do not allow passwords to be shown in saved logins
 962
 963 **Compatibility:** Firefox 71, Firefox ESR 68.3\
 964 **CCK2 Equivalent:** N/A
 965 **Preferences Affected:** N/A
 966
 967 #### Windows (GPO)
 968 ```
 969 Software\Policies\Mozilla\Firefox\DisablePasswordReveal = 0x1 | 0x0
 970 ```
 971
 972 #### macOS
 973 ```
 974 <dict>
 975   <key>DisablePasswordReveal</key>
 976   <true/> | <false/>
 977 </dict>
 978 ```
 979 #### policies.json
 980 ```
 981 {
 982   "policies": {
 983     "DisablePasswordReveal": true | false
 984   }
 985 }
 986 ```
 987 ### DisablePocket
 988 Remove Pocket in the Firefox UI. It does not remove it from the new tab page.
 989
 990 **Compatibility:** Firefox 60, Firefox ESR 60\
 991 **CCK2 Equivalent:** `disablePocket`\
 992 **Preferences Affected:** `extensions.pocket.enabled`
 993
 994 #### Windows (GPO)
 995 ```
 996 Software\Policies\Mozilla\Firefox\DisablePocket = 0x1 | 0x0
 997 ```
 998 #### macOS
 999 ```
1000 <dict>
1001   <key>DisablePocket</key>
1002   <true/> | <false/>
1003 </dict>
1004 ```
1005 #### policies.json
1006 ```
1007 {
1008   "policies": {
1009     "DisablePocket": true | false
1010   }
1011 }
1012 ```
1013 ### DisablePrivateBrowsing
1014 Remove access to private browsing.
1015
1016 **Compatibility:** Firefox 60, Firefox ESR 60\
1017 **CCK2 Equivalent:** `disablePrivateBrowsing`\
1018 **Preferences Affected:** N/A
1019
1020 #### Windows (GPO)
1021 ```
1022 Software\Policies\Mozilla\Firefox\DisablePrivateBrowsing = 0x1 | 0x0
1023 ```
1024 #### macOS
1025 ```
1026 <dict>
1027   <key>DisablePrivateBrowsing</key>
1028   <true/> | <false/>
1029 </dict>
1030 ```
1031 #### policies.json
1032 ```
1033 {
1034   "policies": {
1035     "DisablePrivateBrowsing": true | false
1036   }
1037 }
1038 ```
1039 ### DisableProfileImport
1040 Disables the "Import data from another browser" option in the bookmarks window.
1041
1042 **Compatibility:** Firefox 60, Firefox ESR 60\
1043 **CCK2 Equivalent:** N/A\
1044 **Preferences Affected:** N/A
1045
1046 #### Windows (GPO)
1047 ```
1048 Software\Policies\Mozilla\Firefox\DisableProfileImport = 0x1 | 0x0
1049 ```
1050 #### macOS
1051 ```
1052 <dict>
1053   <key>DisableProfileImport</key>
1054   <true/> | <false/>
1055 </dict>
1056 ```
1057 #### policies.json
1058 ```
1059 {
1060   "policies": {
1061     "DisableProfileImport": true | false
1062   }
1063 }
1064 ```
1065 ### DisableProfileRefresh
1066 Disable the Refresh Firefox button on about:support and support.mozilla.org, as well as the prompt that displays offering to refresh Firefox when you haven't used it in a while.
1067
1068 **Compatibility:** Firefox 60, Firefox ESR 60\
1069 **CCK2 Equivalent:** `disableResetFirefox`\
1070 **Preferences Affected:** `browser.disableResetPrompt`
1071
1072 #### Windows (GPO)
1073 ```
1074 Software\Policies\Mozilla\Firefox\DisableProfileRefresh = 0x1 | 0x0
1075 ```
1076 #### macOS
1077 ```
1078 <dict>
1079   <key>DisableProfileRefresh</key>
1080   <true/> | <false/>
1081 </dict>
1082 ```
1083 #### policies.json
1084 ```
1085 {
1086   "policies": {
1087     "DisableProfileRefresh": true | false
1088   }
1089 }
1090 ```
1091 ### DisableSafeMode
1092 Disable safe mode within the browser.
1093
1094 On Windows, this disables safe mode via the command line as well.
1095
1096 **Compatibility:** Firefox 60, Firefox ESR 60 (Windows, macOS)\
1097 **CCK2 Equivalent:** `disableSafeMode`\
1098 **Preferences Affected:** N/A
1099
1100 #### Windows (GPO)
1101 ```
1102 Software\Policies\Mozilla\Firefox\DisableSafeMode = 0x1 | 0x0
1103 ```
1104 #### macOS
1105 ```
1106 <dict>
1107   <key>DisableSafeMode</key>
1108   <true/> | <false/>
1109 </dict>
1110 ```
1111 #### policies.json
1112 ```
1113 {
1114   "policies": {
1115     "DisableSafeMode": true | false
1116   }
1117 }
1118 ```
1119 ### DisableSecurityBypass
1120 Prevent the user from bypassing security in certain cases.
1121
1122 `InvalidCertificate` prevents adding an exception when an invalid certificate is shown.
1123
1124 `SafeBrowsing` prevents selecting "ignore the risk" and visiting a harmful site anyway.
1125
1126 **Compatibility:** Firefox 60, Firefox ESR 60\
1127 **CCK2 Equivalent:** N/A\
1128 **Preferences Affected:** `security.certerror.hideAddException`,`browser.safebrowsing.allowOverride`
1129
1130 #### Windows (GPO)
1131 ```
1132 Software\Policies\Mozilla\Firefox\DisableSecurityBypass\InvalidCertificate = 0x1 | 0x0
1133 Software\Policies\Mozilla\Firefox\DisableSecurityBypass\SafeBrowsing = 0x1 | 0x0
1134 ```
1135 #### macOS
1136 ```
1137 <dict>
1138   <key>DisableSecurityBypass</key>
1139   <dict>
1140     <key>InvalidCertificate</key>
1141     <true/> | <false/>
1142     <key><SafeBrowsing/key>
1143     <true/> | <false/>
1144   </dict>
1145 </dict>
1146 ```
1147 #### policies.json
1148 ```
1149 {
1150   "policies": {
1151     "DisableSecurityBypass": {
1152       "InvalidCertificate": true false,
1153       "SafeBrowsing": true false
1154     }
1155   }
1156 }
1157 ```
1158 ### DisableSystemAddonUpdate
1159 Prevent system add-ons from being installed or update.
1160
1161 **Compatibility:** Firefox 60, Firefox ESR 60\
1162 **CCK2 Equivalent:** N/A\
1163 **Preferences Affected:** N/A
1164
1165 #### Windows (GPO)
1166 ```Software\Policies\Mozilla\Firefox\DisableSystemAddonUpdate = 0x1 | 0x0
1167 ```
1168 #### macOS
1169 ```
1170 <dict>
1171   <key>DisableSystemAddonUpdate</key>
1172   <true/> | <false/>
1173 </dict>
1174 ```
1175 #### policies.json
1176 ```
1177 {
1178   "policies": {
1179     "DisableSystemAddonUpdate": true | false
1180   }
1181 }
1182 ```
1183 ### DisableTelemetry
1184 Prevent the upload of telemetry data.
1185
1186 Mozilla recommends that you do not disable telemetry. Information collected through telemetry helps us build a better product for businesses like yours.
1187
1188 **Compatibility:** Firefox 60, Firefox ESR 60\
1189 **CCK2 Equivalent:** `disableTelemetry`\
1190 **Preferences Affected:** `datareporting.healthreport.uploadEnabled,datareporting.policy.dataSubmissionEnabled`
1191
1192 #### Windows (GPO)
1193 ```
1194 Software\Policies\Mozilla\Firefox\DisableTelemetry = 0x1 | 0x0
1195 ```
1196 #### macOS
1197 ```
1198 <dict>
1199   <key>DisableTelemetry</key>
1200   <true/> | <false/>
1201 </dict>
1202 ```
1203 #### policies.json
1204 ```
1205 {
1206   "policies": {
1207     "DisableTelemetry": true | false
1208   }
1209 }
1210 ```
1211 ### DisplayBookmarksToolbar
1212 Set the initial state of the bookmarks toolbar. A user can still hide it and it will stay hidden.
1213
1214 **Compatibility:** Firefox 60, Firefox ESR 60\
1215 **CCK2 Equivalent:** `displayBookmarksToolbar`\
1216 **Preferences Affected:** N/A
1217
1218 #### Windows (GPO)
1219 ```
1220 Software\Policies\Mozilla\Firefox\DisplayBookmarksToolbar = 0x1 | 0x0
1221 ```
1222 #### macOS
1223 ```
1224 <dict>
1225   <key>DisplayBookmarksToolbar</key>
1226   <true/> | <false/>
1227 </dict>
1228 ```
1229 #### policies.json
1230 ```
1231 {
1232   "policies": {
1233     "DisplayBookmarksToolbar": true | false
1234   }
1235 }
1236 ```
1237 ### DisplayMenuBar (Deprecated)
1238 Set the initial state of the menubar. A user can still hide it and it will stay hidden.
1239
1240 **Compatibility:** Firefox 60, Firefox ESR 60 (Windows, some Linux)\
1241 **CCK2 Equivalent:** `displayMenuBar`\
1242 **Preferences Affected:** N/A
1243
1244 #### Windows (GPO)
1245 ```
1246 Software\Policies\Mozilla\Firefox\DisplayMenuBar = 0x1 | 0x0
1247 ```
1248 #### macOS
1249 ```
1250 <dict>
1251   <key>DisplayMenuBar</key>
1252   <true/> | <false/>
1253 </dict>
1254 ```
1255 #### policies.json
1256 ```
1257 {
1258   "policies": {
1259     "DisplayMenuBar": true | false
1260   }
1261 }
1262 ```
1263 ### DisplayMenuBar
1264 Set the state of the menubar.
1265
1266 `always` means the menubar is shown and cannot be hidden.
1267
1268 `never` means the menubar is hidden and cannot be shown.
1269
1270 `default-on` means the menubar is on by default but can be hidden.
1271
1272 `default-off` means the menubar is off by default but can be shown.
1273
1274 **Compatibility:** Firefox 73, Firefox ESR 68.5 (Windows, some Linux)\
1275 **CCK2 Equivalent:** `displayMenuBar`\
1276 **Preferences Affected:** N/A
1277
1278 #### Windows (GPO)
1279 ```
1280 Software\Policies\Mozilla\Firefox\DisplayMenuBar = "always", "never", "default-on", "default-off"
1281 ```
1282 #### macOS
1283 ```
1284 <dict>
1285   <key>DisplayMenuBar</key>
1286   <string>always | never | default-on | default-off</string>
1287 </dict>
1288 ```
1289 #### policies.json
1290 ```
1291 {
1292   "policies": {
1293     "DisplayMenuBar": "always", "never", "default-on", "default-off"
1294   }
1295 }
1296 ```
1297 ### DNSOverHTTPS
1298 Configure DNS over HTTPS.
1299
1300 `Enabled` determines whether DNS over HTTPS is enabled
1301
1302 `ProviderURL` is a URL to another provider.
1303
1304 `Locked` prevents the user from changing DNS over HTTPS preferences.
1305
1306 `ExcludedDomains` excludes domains from DNS over HTTPS.
1307
1308 **Compatibility:** Firefox 63, Firefox ESR 68 (ExcludedDomains added in 75/68.7)\
1309 **CCK2 Equivalent:** N/A\
1310 **Preferences Affected:** `network.trr.mode`,`network.trr.uri`
1311
1312 #### Windows (GPO)
1313 ```
1314 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\Enabled = 0x1 | 0x0
1315 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\ProviderURL = "URL_TO_ALTERNATE_PROVIDER"
1316 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\Locked = 0x1 | 0x0
1317 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\ExcludedDomains\1 = "example.com"
1318 ```
1319 #### macOS
1320 ```
1321 <dict>
1322   <key>DNSOverHTTPS</key>
1323   <dict>
1324     <key>Enabled</key>
1325     <true/> | <false/>
1326     <key>ProviderURL</key>
1327     <string>URL_TO_ALTERNATE_PROVIDER</string>
1328     <key>Locked</key>
1329     <true/> | <false/>
1330     <key>ExcludedDomains</key>
1331     <array>
1332       <string>example.com</string>
1333     </array>
1334   </dict>
1335 </dict>
1336 ```
1337 #### policies.json
1338 ```
1339 {
1340   "policies": {
1341     "DNSOverHTTPS": {
1342       "Enabled":  true | false,
1343       "ProviderURL": "URL_TO_ALTERNATE_PROVIDER",
1344       "Locked": true | false,
1345       "ExcludedDomains": ["example.com"]
1346     }
1347   }
1348 }
1349 ```
1350 ### DontCheckDefaultBrowser
1351 Don't check if Firefox is the default browser at startup.
1352
1353 **Compatibility:** Firefox 60, Firefox ESR 60\
1354 **CCK2 Equivalent:** `dontCheckDefaultBrowser`\
1355 **Preferences Affected:** `browser.shell.checkDefaultBrowser`
1356
1357 #### Windows (GPO)
1358 ```
1359 Software\Policies\Mozilla\Firefox\DontCheckDefaultBrowser = 0x1 | 0x0
1360 ```
1361 #### macOS
1362 ```
1363 <dict>
1364   <key>DontCheckDefaultBrowser</key>
1365   <true/> | <false/>
1366 </dict>
1367 ```
1368 #### policies.json
1369 ```
1370 {
1371   "policies": {
1372     "DontCheckDefaultBrowser": true | false
1373   }
1374 }
1375 ```
1376 ### DefaultDownloadDirectory
1377 Set the default download directory.
1378
1379 You can use ${home} for the native home directory.
1380
1381 **Compatibility:** Firefox 68, Firefox ESR 68\
1382 **CCK2 Equivalent:** N/A\
1383 **Preferences Affected:** `browser.download.dir`,`browser.download.folderList`
1384
1385 #### Windows (GPO)
1386 ```
1387 Software\Policies\Mozilla\Firefox\DefaultDownloadDirectory = "${home}\Downloads"
1388 ```
1389 #### macOS
1390 ```
1391 <dict>
1392   <key>DefaultDownloadDirectory</key>
1393   <string>${home}/Downloads</string>
1394 </dict>
1395 ```
1396 #### policies.json (macOS and Linux)
1397 ```
1398 {
1399   "policies": {
1400     "DefaultDownloadDirectory": "${home}/Downloads"
1401 }
1402 ```
1403 #### policies.json (Windows)
1404 ```
1405 {
1406   "policies": {
1407     "DefaultDownloadDirectory": "${home}\\Downloads"
1408 }
1409 ```
1410 ### DownloadDirectory
1411 Set and lock the download directory.
1412
1413 You can use ${home} for the native home directory.
1414
1415 **Compatibility:** Firefox 68, Firefox ESR 68\
1416 **CCK2 Equivalent:** N/A\
1417 **Preferences Affected:** `browser.download.dir`,`browser.download.folderList`,`browser.download.useDownloadDir`
1418
1419 #### Windows (GPO)
1420 ```
1421 Software\Policies\Mozilla\Firefox\DownloadDirectory = "${home}\Downloads"
1422 ```
1423 #### macOS
1424 ```
1425 <dict>
1426   <key>DownloadDirectory</key>
1427   <string>${home}/Downloads</string>
1428 </dict>
1429 ```
1430 #### policies.json (macOS and Linux)
1431 ```
1432 {
1433   "policies": {
1434     "DownloadDirectory": "${home}/Downloads"
1435 }
1436 ```
1437 #### policies.json (Windows)
1438 ```
1439 {
1440   "policies": {
1441     "DownloadDirectory": "${home}\\Downloads"
1442 }
1443 ```
1444 ### EnableTrackingProtection
1445 Configure tracking protection.
1446
1447 If this policy is not configured, tracking protection is not enabled by default in the browser, but it is enabled by default in private browsing and the user can change it.
1448
1449 If `Value` is set to false, tracking protection is disabled and locked in both the regular browser and private browsing.
1450
1451 If `Value` is set to true, tracking protection is enabled by default in both the regular browser and private browsing and the `Locked` value determines whether or not a user can change it.
1452
1453 If `Cryptomining` is set to true, cryptomining scripts on websites are blocked.
1454
1455 If `Fingerprinting` is set to true, fingerprinting scripts on websites are blocked.
1456
1457 `Exceptions` are origins for which tracking protection is not enabled.
1458
1459 **Compatibility:** Firefox 60, Firefox ESR 60 (Cryptomining and Fingerprinting added in 70/68.2, Exceptions added in 73/68.5)\
1460 **CCK2 Equivalent:** N/A\
1461 **Preferences Affected:** `privacy.trackingprotection.enabled`,`privacy.trackingprotection.pbmode.enabled`,`privacy.trackingprotection.cryptomining.enabled`,`privacy.trackingprotection.fingerprinting.enabled`
1462
1463 #### Windows (GPO)
1464 ```
1465 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Value = 0x1 | 0x0
1466 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Locked = 0x1 | 0x0
1467 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Cryptomining = 0x1 | 0x0
1468 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Fingerprinting = 0x1 | 0x0
1469 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Exceptions\1 = "https://example.com"
1470 ```
1471 #### macOS
1472 ```
1473 <dict>
1474   <key>EnableTrackingProtection</key>
1475   <dict>
1476     <key>Value</key>
1477     <true/> | <false/>
1478     <key><Locked</key>
1479     <true/> | <false/>
1480     <key><Cryptomining</key>
1481     <true/> | <false/>
1482     <key><Fingerprinting</key>
1483     <true/> | <false/>
1484     <key>Exceptions</key>
1485     <array>
1486       <string>https://example.com</string>
1487     </array>
1488   </dict>
1489 </dict>
1490 ```
1491 #### policies.json
1492 ```
1493 {
1494   "policies": {
1495     "EnableTrackingProtection": {
1496       "Value": [true, false],
1497       "Locked": [true, false],
1498       "Cryptomining": [true, false],
1499       "Fingerprinting": [true, false],
1500       "Exceptions": ["https://example.com"]
1501     }
1502 }
1503 ```
1504 ### EnterprisePoliciesEnabled
1505 Enable policy support on macOS.
1506
1507 **Compatibility:** Firefox 63, Firefox ESR 60.3 (macOS only)\
1508 **CCK2 Equivalent:** N/A\
1509 **Preferences Affected:** N/A
1510
1511 #### macOS
1512 ```
1513 <dict>
1514   <key>EnterprisePoliciesEnabled</key>
1515   <true/>
1516 </dict>
1517 ```
1518 ### Extensions
1519 Control the installation, uninstallation and locking of extensions.
1520
1521 `Install` is a list of URLs or native paths for extensions to be installed.
1522
1523 `Uninstall` is a list of extension IDs that should be uninstalled if found.
1524
1525 `Locked` is a list of extension IDs that the user cannot disable or uninstall.
1526
1527 **Compatibility:** Firefox 60, Firefox ESR 60\
1528 **CCK2 Equivalent:** `addons`\
1529 **Preferences Affected:** N/A
1530
1531 #### Windows (GPO)
1532 ```
1533 Software\Policies\Mozilla\Firefox\Extensions\Install\1 = "https://addons.mozilla.org/firefox/downloads/somefile.xpi"
1534 Software\Policies\Mozilla\Firefox\Extensions\Install\2 = "//path/to/xpi"
1535 Software\Policies\Mozilla\Firefox\Extensions\Uninstall\1 = "bad_addon_id@mozilla.org"
1536 Software\Policies\Mozilla\Firefox\Extensions\Locked\1 = "addon_id@mozilla.org"
1537 ```
1538 #### macOS
1539 ```
1540 <dict>
1541   <key>Extensions</key>
1542   <dict>
1543     <key>Install</key>
1544     <array>
1545       <string>https://addons.mozilla.org/firefox/downloads/somefile.xpi</string>
1546       <string>//path/to/xpi</string>
1547     </array>
1548     <key>Uninstall</key>
1549     <array>
1550       <string>bad_addon_id@mozilla.org</string>
1551     </array>
1552     <key>Locked</key>
1553     <array>
1554       <string>addon_id@mozilla.org</string>
1555     </array>
1556   </dict>
1557 </dict>
1558 ```
1559 #### policies.json
1560 ```
1561 {
1562   "policies": {
1563     "Extensions": {
1564       "Install": ["https://addons.mozilla.org/firefox/downloads/somefile.xpi", "//path/to/xpi"],
1565       "Uninstall": ["bad_addon_id@mozilla.org"],
1566       "Locked":  ["addon_id@mozilla.org"]
1567     }
1568   }
1569 }
1570 ```
1571 ### ExtensionSettings
1572 Manage all aspects of extensions. This policy is based heavily on the [Chrome policy](https://dev.chromium.org/administrators/policy-list-3/extension-settings-full) of the same name.
1573
1574 This policy maps an extension ID to its configuration. With an extension ID, the configuration will be applied to the specified extension only. A default configuration can be set for the special ID "*", which will apply to all extensions that don't have a custom configuration set in this policy.
1575
1576 To obtain an extension ID, install the extension and go to about:support. You will see the ID in the Extensions section.
1577
1578 The configuration for each extension is another dictionary that can contain the fields documented below.
1579
1580 | Name | Description |
1581 | --- | --- |
1582 | `installation_mode` | Maps to a string indicating the installation mode for the extension. The valid strings are `allowed`,`blocked`,`force_installed`, and `normal_installed`.
1583 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`allowed` | Allows the extension to be installed by the user. This is the default behavior.
1584 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`blocked`| Blocks installation of the extension and removes it from the device if already installed.
1585 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`force_installed`| The extension is automatically installed and can't be removed by the user. This option is not valid for the default configuration and requires an install_url.
1586 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`normal_installed`| The extension is automatically installed but can be disabled by the user. This option is not valid for the default configuration and requires an install_url.
1587 | `install_url`| Maps to a URL indicating where Firefox can download a force_installed or normal_installed extension. If installing from the addons.mozilla.org, use the following URL (substituting SHORT_NAME from the URL on AMO), https://addons.mozilla.org/firefox/downloads/latest/SHORT_NAME/latest.xpi. If installing from the local file system, use a file:/// URL. Languages packs are available from https://releases.mozilla.org/pub/firefox/releases/VERSION/PLATFORM/xpi/LANGUAGE.xpi.
1588 | `install_sources` | Each item in this list is an extension-style match pattern. Users will be able to easily install items from any URL that matches an item in this list. Both the location of the *.xpi file and the page where the download is started from (i.e.  the referrer) must be allowed by these patterns. This setting can be used only for the default configuration.
1589 | `allowed_types` | This setting whitelists the allowed types of extension/apps that can be installed in Firefox. The value is a list of strings, each of which should be one of the following: "extension", "theme", "dictionary", "langpack" This setting can be used only for the default configuration.
1590 | `blocked_install_message` | This maps to a string specifying the error message to display to users if they're blocked from installing an extension. This setting allows you to append text to the generic error message displayed when the extension is blocked. This could be be used to direct users to your help desk, explain why a particular extension is blocked, or something else.
1591
1592 **Compatibility:** Firefox 69, Firefox ESR 68.1\
1593 **CCK2 Equivalent:** N/A\
1594 **Preferences Affected:** N/A
1595
1596 #### Windows (GPO)
1597 ```
1598 Software\Policies\Mozilla\Firefox\ExtensionSettings (REG_MULTI_SZ) =
1599 {
1600   "*": {
1601     "blocked_install_message": "Custom error message.",
1602     "install_sources": ["https://addons.mozilla.org/"],
1603     "installation_mode": "blocked",
1604     "allowed_types": ["extension"]
1605   },
1606   "uBlock0@raymondhill.net": {
1607     "installation_mode": "force_installed",
1608     "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
1609   }
1610 }
1611 ```
1612 #### macOS
1613 ```
1614 <dict>
1615   <key>ExtensionSettings</key>
1616   <dict>
1617     <key>*</key>
1618     <dict>
1619       <key>blocked_install_message</key>
1620       <string>Custom error message.</string>
1621       <key>install_sources</key>
1622       <array>
1623         <string>https://addons.mozilla.org/</string>
1624       </array>
1625       <key>installation_mode</key>
1626       <string>blocked</string>
1627       <key>allowed_types</key>
1628       <array>
1629         <string>extension</string>
1630       </array>
1631     </dict>
1632     <key>uBlock0@raymondhill.net</key>
1633     <dict>
1634       <key>installation_mode</key>
1635        <string>force_installed</string>
1636       <key>install_url</key>
1637       <string>https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi</string>
1638     </dict>
1639   </dict>
1640 </dict>
1641 ```
1642 #### policies.json
1643 ```
1644 {
1645   "policies": {
1646     "ExtensionSettings": {
1647       "*": {
1648         "blocked_install_message": "Custom error message.",
1649         "install_sources": ["https://addons.mozilla.org/"],
1650         "installation_mode": "blocked",
1651         "allowed_types": ["extension"]
1652       },
1653       "uBlock0@raymondhill.net": {
1654         "installation_mode": "force_installed",
1655         "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
1656       }
1657     }
1658   }
1659 }
1660 ```
1661 ### ExtensionUpdate
1662 Control extension updates.
1663
1664 **Compatibility:** Firefox 67, Firefox ESR 60.7\
1665 **CCK2 Equivalent:** N/A\
1666 **Preferences Affected:** `extensions.update.enabled`
1667
1668 #### Windows (GPO)
1669 ```
1670 Software\Policies\Mozilla\Firefox\ExtensionUpdate = 0x1 | 0x0
1671 ```
1672 #### macOS
1673 ```
1674 <dict>
1675   <key>ExtensionUpdate</key>
1676   <true/> | <false/>
1677 </dict>
1678 ```
1679 #### policies.json
1680 ```
1681 {
1682   "policies": {
1683     "ExtensionUpdate": true | false
1684   }
1685 }
1686 ```
1687 ### FlashPlugin
1688 Configure the default Flash plugin policy as well as origins for which Flash is allowed.
1689
1690 `Allow` is a list of origins where Flash are allowed.
1691
1692 `Block` is a list of origins where Flash is not allowed.
1693
1694 `Default` determines whether or not Flash is allowed by default.
1695
1696 `Locked` prevents the user from changing Flash preferences.
1697
1698 **Compatibility:** Firefox 60, Firefox ESR 60\
1699 **CCK2 Equivalent:** `permissions.plugin`\
1700 **Preferences Affected:** `plugin.state.flash`
1701
1702 #### Windows (GPO)
1703 ```
1704 Software\Policies\Mozilla\Firefox\FlashPlugin\Allow\1 = "https://example.org"
1705 Software\Policies\Mozilla\Firefox\FlashPlugin\Block\1 = "https://example.edu"
1706 Software\Policies\Mozilla\Firefox\FlashPlugin\Default = 0x1 | 0x0
1707 Software\Policies\Mozilla\Firefox\FlashPlugin\Locked = 0x1 | 0x0
1708 ```
1709 #### macOS
1710 ```
1711 <dict>
1712   <key>FlashPlugin</key>
1713   <dict>
1714     <key>Allow</key>
1715     <array>
1716       <string>http://example.org</string>
1717     </array>
1718     <key>Block</key>
1719     <array>
1720       <string>http://example.edu</string>
1721     </array>
1722     <key>Default</key>
1723     <true/> | <false/>
1724     <key>Locked</key>
1725     <true/> | <false/>
1726   </dict>
1727 </dict>
1728 ```
1729 #### policies.json
1730 ```
1731 {
1732   "policies": {
1733     "FlashPlugin": {
1734       "Allow": ["http://example.org/"],
1735       "Block": ["http://example.edu/"],
1736       "Default": true | false,
1737       "Locked": true | false
1738     }
1739   }
1740 }
1741 ```
1742 ### FirefoxHome
1743 Customize the Firefox Home page.
1744
1745 **Compatibility:** Firefox 68, Firefox ESR 68\
1746 **CCK2 Equivalent:** N/A\
1747 **Preferences Affected:** `browser.newtabpage.activity-stream.showSearch`,`browser.newtabpage.activity-stream.feeds.topsites`,`browser.newtabpage.activity-stream.feeds.section.highlights`,`browser.newtabpage.activity-stream.feeds.section.topstories`,`browser.newtabpage.activity-stream.feeds.snippets`
1748
1749 #### Windows (GPO)
1750 ```
1751 Software\Policies\Mozilla\Firefox\FirefoxHome\Search = 0x1 | 0x0
1752 Software\Policies\Mozilla\Firefox\FirefoxHome\TopSites = 0x1 | 0x0
1753 Software\Policies\Mozilla\Firefox\FirefoxHome\Highlights = 0x1 | 0x0
1754 Software\Policies\Mozilla\Firefox\FirefoxHome\Pocket = 0x1 | 0x0
1755 Software\Policies\Mozilla\Firefox\FirefoxHome\Snippets = 0x1 | 0x0
1756 Software\Policies\Mozilla\Firefox\FirefoxHome\Locked = 0x1 | 0x0
1757 ```
1758 #### macOS
1759 ```
1760 <dict>
1761   <key>FirefoxHome</key>
1762   <dict>
1763     <key>Search</key>
1764     <true/> | <false/>
1765     <key>TopSites</key>
1766     <true/> | <false/>
1767     <key>Highlights</key>
1768     <true/> | <false/>
1769     <key>Pocket</key>
1770     <true/> | <false/>
1771     <key>Snippets</key>
1772     <true/> | <false/>
1773     <key>Locked</key>
1774     <true/> | <false/>
1775   </dict>
1776 </dict>
1777 ```
1778 #### policies.json
1779 ```
1780 {
1781   "policies": {
1782     "FirefoxHome": {
1783       "Search": true | false,
1784       "TopSites": true | false,
1785       "Highlights": true | false,
1786       "Pocket": true | false,
1787       "Snippets": true | false,
1788       "Locked": true | false
1789     }
1790   }
1791 }
1792 ```
1793 ### HardwareAcceleration
1794 Control hardware acceleration.
1795
1796 **Compatibility:** Firefox 60, Firefox ESR 60\
1797 **CCK2 Equivalent:** N/A\
1798 **Preferences Affected:** `layers.acceleration.disabled`
1799
1800 #### Windows (GPO)
1801 ```
1802 Software\Policies\Mozilla\Firefox\HardwareAcceleration = 0x1 | 0x0
1803 ```
1804 #### macOS
1805 ```
1806 <dict>
1807   <key>HardwareAcceleration</key>
1808   <true/> | <false/>
1809 </dict>
1810 ```
1811 #### policies.json
1812 ```
1813 {
1814   "policies": {
1815     "HardwareAcceleration": true | false
1816   }
1817 }
1818 ```
1819 ### Homepage
1820 Configure the default homepage and how Firefox starts.
1821
1822 `URL` is the default homepage.
1823
1824 `Locked` prevents the user from changing homepage preferences.
1825
1826 `Additional` allows for more than one homepage.
1827
1828 `StartPage` is how Firefox starts. The choices are no homepage, the default homepage or the previous session.
1829
1830 **Compatibility:** Firefox 60, Firefox ESR 60 (StartPage was added in Firefox 60, Firefox ESR 60.4)\
1831 **CCK2 Equivalent:** `homePage`,`lockHomePage`\
1832 **Preferences Affected:** `browser.startup.homepage`,`browser.startup.page`
1833
1834 #### Windows (GPO)
1835 ```
1836 Software\Policies\Mozilla\Firefox\Homepage\URL = "https://example.com"
1837 Software\Policies\Mozilla\Firefox\Homepage\Locked = 0x1 | 0x0
1838 Software\Policies\Mozilla\Firefox\Homepage\Additional\1 = "https://example.org"
1839 Software\Policies\Mozilla\Firefox\Homepage\Additional\2 = "https://example.edu"
1840 Software\Policies\Mozilla\Firefox\Homepage\StartPage = "none" | "homepage" |  "previous-session"
1841 ```
1842 #### macOS
1843 ```
1844 <dict>
1845   <key>Homepage</key>
1846   <dict>
1847     <key>URL</key>
1848     <string>http://example.com</string>
1849     <key>Locked</key>
1850     <true/> | <false/>
1851     <key>Additional</key>
1852     <array>
1853       <string>http://example.org</string>
1854       <string>http://example.edu</string>
1855     </array>
1856     <key>StartPage</key>
1857     <string>none | homepage | previous-session</string>
1858   </dict>
1859 </dict>
1860 ```
1861 #### policies.json
1862 ```
1863 {
1864   "policies": {
1865     "Homepage": {
1866       "URL": "http://example.com/",
1867       "Locked": true | false,
1868       "Additional": ["http://example.org/",
1869                      "http://example.edu/"],
1870       "StartPage": "none" | "homepage" | "previous-session"
1871     }
1872   }
1873 }
1874 ```
1875 ### InstallAddonsPermission
1876 Configure the default extension install policy as well as origins for extension installs are allowed. This policy does not override turning off all extension installs.
1877
1878 `Allow` is a list of origins where extension installs are allowed.
1879
1880 `Default` determines whether or not extension installs are allowed by default.
1881
1882 **Compatibility:** Firefox 60, Firefox ESR 60\
1883 **CCK2 Equivalent:** `permissions.install`\
1884 **Preferences Affected:** `xpinstall.enabled`
1885
1886 #### Windows (GPO)
1887 ```
1888 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Allow\1 = "https://example.org"
1889 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Allow\2 = "https://example.edu"
1890 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Default = 0x1 | 0x0
1891 ```
1892 #### macOS
1893 ```
1894 <dict>
1895   <key>InstallAddonsPermission</key>
1896   <dict>
1897     <key>Allow</key>
1898     <array>
1899       <string>http://example.org</string>
1900       <string>http://example.edu</string>
1901     </array>
1902     <key>Default</key>
1903     <true/> | <false/>
1904   </dict>
1905 </dict>
1906 ```
1907 #### policies.json
1908 ```
1909 {
1910   "policies": {
1911     "InstallAddonsPermission": {
1912       "Allow": ["http://example.org/",
1913                 "http://example.edu/"],
1914       "Default": true | false
1915     }
1916   }
1917 }
1918 ```
1919 ### LegacyProfiles
1920 Disable the feature enforcing a separate profile for each installation.
1921
1922 If this policy set to true, Firefox will not try to create different profiles for installations of Firefox in different directories. This is the equivalent of the MOZ_LEGACY_PROFILES environment variable.
1923
1924 If this policy set to false, Firefox will create a new profile for each unique installation of Firefox.
1925
1926 This policy only work on Windows via GPO (not policies.json).
1927
1928 **Compatibility:** Firefox 70, Firefox ESR 68.2 (Windows only, GPO only)\
1929 **CCK2 Equivalent:** N/A\
1930 **Preferences Affected:** N/A
1931
1932 #### Windows (GPO)
1933 ```
1934 Software\Policies\Mozilla\Firefox\LegacyProfiles = = 0x1 | 0x0
1935 ```
1936 ### LocalFileLinks
1937 Enable linking to local files by origin.
1938
1939 **Compatibility:** Firefox 68, Firefox ESR 68\
1940 **CCK2 Equivalent:** N/A\
1941 **Preferences Affected:** `capability.policy.localfilelinks.*`
1942
1943 #### Windows (GPO)
1944 ```
1945 Software\Policies\Mozilla\Firefox\LocalFileLinks\1 = "https://example.org"
1946 Software\Policies\Mozilla\Firefox\LocalFileLinks\2 = "https://example.edu"
1947 ```
1948 #### macOS
1949 ```
1950 <dict>
1951   <key>LocalFileLinks</key>
1952   <array>
1953     <string>http://example.org</string>
1954     <string>http://example.edu</string>
1955   </array>
1956 </dict>
1957 ```
1958 #### policies.json
1959 ```
1960 {
1961   "policies": {
1962     "LocalFileLinks": ["http://example.org/",
1963                        "http://example.edu/"]
1964   }
1965 }
1966 ```
1967 ### NoDefaultBookmarks
1968 Disable the creation of default bookmarks.
1969
1970 This policy is only effective if the user profile has not been created yet.
1971
1972 **Compatibility:** Firefox 60, Firefox ESR 60\
1973 **CCK2 Equivalent:** `removeDefaultBookmarks`\
1974 **Preferences Affected:** N/A
1975
1976 #### Windows (GPO)
1977 ```
1978 Software\Policies\Mozilla\Firefox\NoDefaultBookmarks = 0x1 | 0x0
1979 ```
1980 #### macOS
1981 ```
1982 <dict>
1983   <key>NoDefaultBookmarks</key>
1984   <true/> | <false/>
1985 </dict>
1986 ```
1987 #### policies.json
1988 ```
1989 {
1990   "policies": {
1991     "NoDefaultBookmarks": true | false
1992   }
1993 }
1994 ```
1995 ### NetworkPrediction
1996 Enable or disable network prediction (DNS prefetching).
1997
1998 **Compatibility:** Firefox 67, Firefox ESR 60.7\
1999 **CCK2 Equivalent:** N/A\
2000 **Preferences Affected:** `network.dns.disablePrefetch`,`network.dns.disablePrefetchFromHTTPS`
2001
2002 #### Windows (GPO)
2003 ```
2004 Software\Policies\Mozilla\Firefox\NetworkPrediction = 0x1 | 0x0
2005 ```
2006 #### macOS
2007 ```
2008 <dict>
2009   <key>NetworkPrediction</key>
2010   <true/> | <false/>
2011 </dict>
2012 ```
2013 #### policies.json
2014 ```
2015 {
2016   "policies": {
2017     "NetworkPrediction": true | false
2018 }
2019 ```
2020 ### NewTabPage
2021 Enable or disable the New Tab page.
2022
2023 **Compatibility:** Firefox 68, Firefox ESR 68\
2024 **CCK2 Equivalent:** N/A\
2025 **Preferences Affected:** `browser.newtabpage.enabled`
2026
2027 #### Windows (GPO)
2028 ```
2029 Software\Policies\Mozilla\Firefox\NewTabPage = 0x1 | 0x0
2030 ```
2031 #### macOS
2032 ```
2033 <dict>
2034   <key>NewTabPage</key>
2035   <true/> | <false/>
2036 </dict>
2037 ```
2038 #### policies.json
2039 ```
2040 {
2041   "policies": {
2042     "NewTabPage": true | false
2043 }
2044 ```
2045 ### OfferToSaveLogins
2046 Control whether or not Firefox offers to save passwords.
2047
2048 **Compatibility:** Firefox 60, Firefox ESR 60\
2049 **CCK2 Equivalent:** `dontRememberPasswords`\
2050 **Preferences Affected:** `signon.rememberSignons`
2051
2052 #### Windows (GPO)
2053 ```
2054 Software\Policies\Mozilla\Firefox\OfferToSaveLogins = 0x1 | 0x0
2055 ```
2056 #### macOS
2057 ```
2058 <dict>
2059   <key>OfferToSaveLogins</key>
2060   <true/> | <false/>
2061 </dict>
2062 ```
2063 #### policies.json
2064 ```
2065 {
2066   "policies": {
2067     "OfferToSaveLogins": true | false
2068   }
2069 }
2070 ```
2071 ### OfferToSaveLoginsDefault
2072 Sets the default value of signon.rememberSignons without locking it.
2073
2074 **Compatibility:** Firefox 70, Firefox ESR 60.2\
2075 **CCK2 Equivalent:** `dontRememberPasswords`\
2076 **Preferences Affected:** `signon.rememberSignons`
2077
2078 #### Windows (GPO)
2079 ```
2080 Software\Policies\Mozilla\Firefox\OfferToSaveLoginsDefault = 0x1 | 0x0
2081 ```
2082 #### macOS
2083 ```
2084 <dict>
2085   <key>OfferToSaveLoginsDefault</key>
2086   <true/> | <false/>
2087 </dict>
2088 ```
2089 #### policies.json
2090 ```
2091 {
2092   "policies": {
2093     "OfferToSaveLoginsDefault": true | false
2094   }
2095 }
2096 ```
2097 ### OverrideFirstRunPage
2098 Override the first run page. If the value is blank, no first run page is displayed.
2099
2100 **Compatibility:** Firefox 60, Firefox ESR 60\
2101 **CCK2 Equivalent:** `welcomePage`,`noWelcomePage`\
2102 **Preferences Affected:** `startup.homepage_welcome_url`
2103
2104 #### Windows (GPO)
2105 ```
2106 Software\Policies\Mozilla\Firefox\OverrideFirstRunPage = "http://example.org"
2107 ```
2108 #### macOS
2109 ```
2110 <dict>
2111   <key>OverrideFirstRunPage</key>
2112   <string>http://example.org</string>
2113 </dict>
2114 ```
2115 #### policies.json
2116 ```
2117 {
2118   "policies": {
2119     "OverrideFirstRunPage": "http://example.org"
2120 }
2121 ```
2122 ### OverridePostUpdatePage
2123 Override the upgrade page. If the value is blank, no upgrade page is displayed.
2124
2125 **Compatibility:** Firefox 60, Firefox ESR 60\
2126 **CCK2 Equivalent:** `upgradePage`,`noUpgradePage`\
2127 **Preferences Affected:** `startup.homepage_override_url`
2128
2129 #### Windows (GPO)
2130 ```
2131 Software\Policies\Mozilla\Firefox\OverridePostUpdatePage = "http://example.org"
2132 ```
2133 #### macOS
2134 ```
2135 <dict>
2136   <key>OverridePostUpdatePage</key>
2137   <string>http://example.org</string>
2138 </dict>
2139 ```
2140 #### policies.json
2141 ```
2142 {
2143   "policies": {
2144     "OverridePostUpdatePage": "http://example.org"
2145 }
2146 ```
2147 ### PasswordManagerEnabled
2148 Remove access to the password manager via preferences and blocks about:logins on Firefox 70.
2149
2150 **Compatibility:** Firefox 70, Firefox ESR 60.2\
2151 **CCK2 Equivalent:** N/A\
2152 **Preferences Affected:** `pref.privacy.disable_button.view_passwords`
2153
2154 #### Windows (GPO)
2155 ```
2156 Software\Policies\Mozilla\Firefox\PasswordManagerEnabled = 0x1 | 0x0
2157 ```
2158 #### macOS
2159 ```
2160 <dict>
2161   <key>PasswordManagerEnabled</key>
2162   <true/> | <false/>
2163 </dict>
2164 ```
2165 #### policies.json
2166 ```
2167 {
2168   "policies": {
2169     "PasswordManagerEnabled": true | false
2170   }
2171 }
2172 ```
2173 ### Permissions
2174 Set permissions associated with camera, microphone, location, notifications, and autoplay. Because these are origins, not domains, entries with unique ports must be specified separately. See examples below.
2175
2176 `Allow` is a list of origins where the feature is allowed.
2177
2178 `Block` is a list of origins where the feature is not allowed.
2179
2180 `BlockNewRequests` determines whether or not new requests can be made for the feature.
2181
2182 `Locked` prevents the user from changing preferences for the feature.
2183
2184 `Default` specifies the default value for Autoplay. block-audio-video is not supported on Firefox ESR 68.
2185
2186 **Compatibility:** Firefox 62, Firefox ESR 60.2 (Autoplay added in Firefox 74, Firefox ESR 68.6, Autoplay Default/Locked added in Firefox 76, Firefox ESR 68.8)\
2187 **CCK2 Equivalent:** N/A\
2188 **Preferences Affected:** `permissions.default.camera`,`permissions.default.microphone`,`permissions.default.geo`,`permissions.default.desktop-notification`,`media.autoplay.default`
2189
2190 #### Windows (GPO)
2191 ```
2192 Software\Policies\Mozilla\Firefox\Permissions\Camera\Allow\1 = "https://example.org"
2193 Software\Policies\Mozilla\Firefox\Permissions\Camera\Allow\2 = "https://example.org:1234"
2194 Software\Policies\Mozilla\Firefox\Permissions\Camera\Block\1 = "https://example.edu"
2195 Software\Policies\Mozilla\Firefox\Permissions\Camera\BlockNewRequests = 0x1 | 0x0
2196 Software\Policies\Mozilla\Firefox\Permissions\Camera\Locked = 0x1 | 0x0
2197 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Allow\1 = "https://example.org"
2198 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Block\1 = "https://example.edu"
2199 Software\Policies\Mozilla\Firefox\Permissions\Microphone\BlockNewRequests = 0x1 | 0x0
2200 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Locked = 0x1 | 0x0
2201 Software\Policies\Mozilla\Firefox\Permissions\Location\Allow\1 = "https://example.org"
2202 Software\Policies\Mozilla\Firefox\Permissions\Location\Block\1 = "https://example.edu"
2203 Software\Policies\Mozilla\Firefox\Permissions\Location\BlockNewRequests = 0x1 | 0x0
2204 Software\Policies\Mozilla\Firefox\Permissions\Location\Locked = 0x1 | 0x0
2205 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Allow\1 = "https://example.org"
2206 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Block\1 = "https://example.edu"
2207 Software\Policies\Mozilla\Firefox\Permissions\Notifications\BlockNewRequests = 0x1 | 0x0
2208 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Locked = 0x1 | 0x0
2209 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Allow\1 = "https://example.org"
2210 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Block\1 = "https://example.edu"
2211 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Default = "allow-audio-video" | "block-audio" | "block-audio-video"
2212 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Locked = 0x1 | 0x0
2213 ```
2214 #### macOS
2215 ```
2216 <dict>
2217   <key>Permissions</key>
2218   <dict>
2219     <key>Camera</key>
2220     <dict>
2221       <key>Allow</key>
2222       <array>
2223         <string>https://example.org</string>
2224         <string>https://example.org:1234</string>
2225       </array>
2226       <key>Block</key>
2227       <array>
2228         <string>https://example.edu</string>
2229       </array>
2230       <key>BlockNewRequests</key>
2231       <true/> | <false/>
2232       <key>Locked</key>
2233       <true/> | <false/>
2234     </dict>
2235     <key>Microphone</key>
2236     <dict>
2237       <key>Allow</key>
2238       <array>
2239         <string>https://example.org</string>
2240       </array>
2241       <key>Block</key>
2242       <array>
2243         <string>https://example.edu</string>
2244       </array>
2245       <key>BlockNewRequests</key>
2246       <true/> | <false/>
2247       <key>Locked</key>
2248       <true/> | <false/>
2249     </dict>
2250     <key>Location</key>
2251     <dict>
2252       <key>Allow</key>
2253       <array>
2254         <string>https://example.org</string>
2255       </array>
2256       <key>Block</key>
2257       <array>
2258         <string>https://example.edu</string>
2259       </array>
2260       <key>BlockNewRequests</key>
2261       <true/> | <false/>
2262       <key>Locked</key>
2263       <true/> | <false/>
2264     </dict>
2265     <key>Notifications</key>
2266     <dict>
2267       <key>Allow</key>
2268       <array>
2269         <string>https://example.org</string>
2270       </array>
2271       <key>Block</key>
2272       <array>
2273         <string>https://example.edu</string>
2274       </array>
2275       <key>BlockNewRequests</key>
2276       <true/>
2277       <key>Locked</key>
2278       <true/>
2279     </dict>
2280     <key>Autoplay</key>
2281     <dict>
2282       <key>Allow</key>
2283       <array>
2284         <string>https://example.org</string>
2285       </array>
2286       <key>Block</key>
2287       <array>
2288         <string>https://example.edu</string>
2289       </array>
2290       <key>Default</key>
2291       <string>allow-audio-video | block-audio | block-audio-video</string>
2292       <key>Locked</key>
2293       <true/> | <false/>
2294     </dict>
2295   </dict>
2296 </dict>
2297 ```
2298 #### policies.json
2299 ```
2300 {
2301   "policies": {
2302     "Permissions": {
2303       "Camera": {
2304         "Allow": ["https://example.org","https://example.org:1234"],
2305         "Block": ["https://example.edu"],
2306         "BlockNewRequests": true | false,
2307         "Locked": true | false
2308       },
2309       "Microphone": {
2310         "Allow": ["https://example.org"],
2311         "Block": ["https://example.edu"],
2312         "BlockNewRequests": true | false,
2313         "Locked": true | false
2314       },
2315       "Location": {
2316         "Allow": ["https://example.org"],
2317         "Block": ["https://example.edu"],
2318         "BlockNewRequests": true | false,
2319         "Locked": true | false
2320       },
2321       "Notifications": {
2322         "Allow": ["https://example.org"],
2323         "Block": ["https://example.edu"],
2324         "BlockNewRequests": true | false,
2325         "Locked": true | false
2326       },
2327       "Autoplay": {
2328         "Allow": ["https://example.org"],
2329         "Block": ["https://example.edu"],
2330         "Default": "allow-audio-video" | "block-audio" | "block-audio-video",
2331         "Locked": true | false
2332       }
2333     }
2334   }
2335 }
2336 ```
2337 ### PopupBlocking
2338 Configure the default pop-up window policy as well as origins for which pop-up windows are allowed.
2339
2340 `Allow` is a list of origins where popup-windows are allowed.
2341
2342 `Default` determines whether or not pop-up windows are allowed by default.
2343
2344 `Locked` prevents the user from changing pop-up preferences.
2345
2346 **Compatibility:** Firefox 60, Firefox ESR 60\
2347 **CCK2 Equivalent:** `permissions.popup`\
2348 **Preferences Affected:** `dom.disable_open_during_load`
2349
2350 #### Windows (GPO)
2351 ```
2352 Software\Policies\Mozilla\Firefox\PopupBlocking\Allow\1 = "https://example.org"
2353 Software\Policies\Mozilla\Firefox\PopupBlocking\Allow\2 = "https://example.edu"
2354 Software\Policies\Mozilla\Firefox\PopupBlocking\Default = 0x1 | 0x0
2355 Software\Policies\Mozilla\Firefox\PopupBlocking\Locked = 0x1 | 0x0
2356 ```
2357 #### macOS
2358 ```
2359 <dict>
2360   <key>PopupBlocking</key>
2361   <dict>
2362     <key>Allow</key>
2363     <array>
2364       <string>http://example.org</string>
2365       <string>http://example.edu</string>
2366     </array>
2367     <key>Default</key>
2368     <true/> | <false/>
2369     <key>Locked</key>
2370     <true/> | <false/>
2371   </dict>
2372 </dict>
2373 ```
2374 #### policies.json
2375 ```
2376 {
2377   "policies": {
2378     "PopupBlocking": {
2379       "Allow": ["http://example.org/",
2380                 "http://example.edu/"],
2381       "Default": true | false,
2382       "Locked": true | false
2383     }
2384   }
2385 }
2386 ```
2387 ### Preferences
2388 Set and lock certain preferences.
2389
2390 **Compatibility:** See below\
2391 **CCK2 Equivalent:** `preferences`\
2392 **Preferences Affected:** See below
2393
2394 | Preference | Type | Compatibility | Default
2395 | --- | --- | --- | ---
2396 | accessibility.force_disabled | integer | Firefox 70, Firefox ESR 68.2 | 0
2397 | &nbsp;&nbsp;&nbsp;&nbsp;If set to 1, platform accessibility is disabled.
2398 | app.update.auto (Deprecated - Switch to AppAutoUpdate policy) | boolean | Firefox 68, Firefox ESR 68 | true
2399 | &nbsp;&nbsp;&nbsp;&nbsp;If false, Firefox doesn't automatically install update.
2400 | browser.bookmarks.autoExportHTML | boolean | Firefox 70, Firefox ESR 68.2 | false
2401 | &nbsp;&nbsp;&nbsp;&nbsp;If true, bookmarks are exported on shutdown.
2402 | browser.bookmarks.file | string | Firefox 70, Firefox ESR 68.2 | N/A
2403 | &nbsp;&nbsp;&nbsp;&nbsp;If set, the name of the file where bookmarks are exported and imported.
2404 | browser.bookmarks.restore_default_bookmarks | boolean | Firefox 70, Firefox ESR 68.2 | N/A
2405 | &nbsp;&nbsp;&nbsp;&nbsp;If true, bookmarks are restored to their defaults.
2406 | browser.cache.disk.enable | boolean | Firefox 68, Firefox ESR 68 | true
2407 | &nbsp;&nbsp;&nbsp;&nbsp;If false, don't store cache on the hard drive.
2408 | ~browser.cache.disk.parent_directory~ | string | Firefox 68, Firefox ESR 68 | Profile temporary directory
2409 | &nbsp;&nbsp;&nbsp;&nbsp;~If set, changes the location of the disk cache.~ This policy doesn't work. It's being worked on.
2410 | browser.fixup.dns_first_for_single_words | boolean | Firefox 68, Firefox ESR 68 | false
2411 | &nbsp;&nbsp;&nbsp;&nbsp;If true, single words are sent to DNS, not directly to search.
2412 | browser.newtabpage.activity-stream.default.sites | string | Firefox 72, ESR 68.4 | Locale dependent
2413 | &nbsp;&nbsp;&nbsp;&nbsp;If set, a list of URLs to use as the default top sites on the new tab page.
2414 | browser.places.importBookmarksHTML | boolean | Firefox 70, Firefox ESR 68.2
2415 | &nbsp;&nbsp;&nbsp;&nbsp;If true, bookmarks are always imported on startup.
2416 | browser.safebrowsing.phishing.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
2417 | &nbsp;&nbsp;&nbsp;&nbsp;If false, phishing protection is not enabled (Not recommended)
2418 | browser.safebrowsing.malware.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
2419 | &nbsp;&nbsp;&nbsp;&nbsp;If false, malware protection is not enabled (Not recommended)
2420 | browser.search.update | boolean | Firefox 68, Firefox ESR 68 | true
2421 | &nbsp;&nbsp;&nbsp;&nbsp;If false, updates for search engines are not checked.
2422 | browser.slowStartup.notificationDisabled | boolean | Firefox 70, Firefox ESR 68.2 | false
2423 | &nbsp;&nbsp;&nbsp;&nbsp;If true, a notification isn't shown if startup is slow.
2424 | browser.tabs.warnOnClose | boolean | Firefox 68, Firefox ESR 68 | true
2425 | &nbsp;&nbsp;&nbsp;&nbsp;If false, there is no warning when the browser is closed.
2426 | browser.taskbar.previews.enable | boolean | Firefox 70, Firefox ESR 68.2 (Windows only) | false
2427 | &nbsp;&nbsp;&nbsp;&nbsp;If true, tab previews are shown in the Windows taskbar.
2428 | browser.urlbar.suggest.bookmark | boolean | Firefox 68, Firefox ESR 68 | true
2429 | &nbsp;&nbsp;&nbsp;&nbsp;If false, bookmarks aren't suggested when typing in the URL bar.
2430 | browser.urlbar.suggest.history | boolean | Firefox 68, Firefox ESR 68 | true
2431 | &nbsp;&nbsp;&nbsp;&nbsp;If false, history isn't suggested when typing in the URL bar.
2432 | browser.urlbar.suggest.openpage | boolean | Firefox 68, Firefox ESR 68 | true
2433 | &nbsp;&nbsp;&nbsp;&nbsp;If false, open tabs aren't suggested when typing in the URL bar.
2434 | datareporting.policy.dataSubmissionPolicyBypassNotification | boolean | Firefox 68, Firefox ESR 68 | false
2435 | &nbsp;&nbsp;&nbsp;&nbsp;If true, don't show the privacy policy tab on first run.
2436 | dom.allow_scripts_to_close_windows | boolean | Firefox 70, Firefox ESR 68.2 | false
2437 | &nbsp;&nbsp;&nbsp;&nbsp;If false, web page can close windows.
2438 | dom.disable_window_flip | boolean | Firefox 68, Firefox ESR 68 | true
2439 | &nbsp;&nbsp;&nbsp;&nbsp;If false, web pages can focus and activate windows.
2440 | dom.disable_window_move_resize | boolean | Firefox 68, Firefox ESR 68 | false
2441 | &nbsp;&nbsp;&nbsp;&nbsp;If true, web pages can't move or resize windows.
2442 | dom.event.contextmenu.enabled | boolean | Firefox 68, Firefox ESR 68 | true
2443 | &nbsp;&nbsp;&nbsp;&nbsp;If false, web pages can't override context menus.
2444 | dom.keyboardevent.keypress.hack.dispatch_non_printable_keys.addl | string | Firefox 68, Firefox ESR 68 | N/A
2445 | &nbsp;&nbsp;&nbsp;&nbsp;See https://support.mozilla.org/en-US/kb/dom-events-changes-introduced-firefox-66
2446 | dom.keyboardevent.keypress.hack.use_legacy_keycode_and_charcode.addl | string | Firefox 68, Firefox ESR 68 | N/A
2447 | &nbsp;&nbsp;&nbsp;&nbsp;See https://support.mozilla.org/en-US/kb/dom-events-changes-introduced-firefox-66
2448 | dom.xmldocument.load.enabled | boolean | Firefox ESR 68.5 | true.
2449 | &nbsp;&nbsp;&nbsp;&nbsp;If false, XMLDocument.load is not available.
2450 | dom.xmldocument.async.enabled | boolean | Firefox ESR 68.5 | true
2451 | &nbsp;&nbsp;&nbsp;&nbsp;If false, XMLDocument.async is not available.
2452 | extensions.blocklist.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
2453 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the extensions blocklist is not used (Not recommended)
2454 | extensions.getAddons.showPane | boolean | Firefox 68, Firefox ESR 68 | N/A
2455 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the Recommendations tab is not displayed in the Add-ons Manager.
2456 | extensions.htmlaboutaddons.recommendations.enabled | boolean | Firefox 72, Firefox ESR 68.4 | true
2457 | &nbsp;&nbsp;&nbsp;&nbsp;If false, recommendations are not shown on the Extensions tab in the Add-ons Manager.
2458 | geo.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
2459 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the geolocation API is disabled. | Language dependent
2460 | intl.accept_languages | string | Firefox 70, Firefox ESR 68.2
2461 | &nbsp;&nbsp;&nbsp;&nbsp;If set, preferred language for web pages.
2462 | media.eme.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
2463 | &nbsp;&nbsp;&nbsp;&nbsp;If false, Encrypted Media Extensions are not enabled.
2464 | media.gmp-gmpopenh264.enabled | boolean | Firefox 68, Firefox ESR 68 | true
2465 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the OpenH264  plugin is not downloaded.
2466 | media.gmp-widevinecdm.enabled | boolean | Firefox 68, Firefox ESR 68 | true
2467 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the Widevine plugin is not downloaded.
2468 | media.peerconnection.enabled | boolean | Firefox 72, Firefox ESR 68.4 | true
2469 | &nbsp;&nbsp;&nbsp;&nbsp;If false, WebRTC is disabled
2470 | media.peerconnection.ice.obfuscate_host_addresses.whitelist | string | Firefox 72, Firefox ESR 68.4 | N/A
2471 | &nbsp;&nbsp;&nbsp;&nbsp;If set, a list of domains for which mDNS hostname obfuscation is
2472 disabled
2473 | network.dns.disableIPv6 | boolean | Firefox 68, Firefox ESR 68 | false
2474 | &nbsp;&nbsp;&nbsp;&nbsp;If true, IPv6 DNS lokoups are disabled.
2475 | network.IDN_show_punycode | boolean | Firefox 68, Firefox ESR 68 | false
2476 | &nbsp;&nbsp;&nbsp;&nbsp;If true, display the punycode version of internationalized domain names.
2477 | places.history.enabled | boolean | Firefox 68, Firefox ESR 68 | true
2478 | &nbsp;&nbsp;&nbsp;&nbsp;If false, history is not enabled.
2479 | print.save_print_settings | boolean | Firefox 70, Firefox ESR 68.2 | true
2480 | &nbsp;&nbsp;&nbsp;&nbsp;If false, print settings are not saved between jobs.
2481 | security.default_personal_cert | string | Firefox 68, Firefox ESR 68 | Ask Every Time
2482 | &nbsp;&nbsp;&nbsp;&nbsp;If set to Select Automatically, Firefox automatically chooses the default personal certificate.
2483 | security.mixed_content.block_active_content | boolean | Firefox 70, Firefox ESR 68.2 | true
2484 | &nbsp;&nbsp;&nbsp;&nbsp;If false, mixed active content (HTTP and HTTPS) is not blocked.
2485 | security.osclientcerts.autoload | boolean | Firefox 72 (Windows), Firefox 75 (macOS)  | false
2486 | &nbsp;&nbsp;&nbsp;&nbsp;If true, client certificates are loaded from the operating system certificate store.
2487 | security.ssl.errorReporting.enabled | boolean | Firefox 68, Firefox ESR 68 | true
2488 | &nbsp;&nbsp;&nbsp;&nbsp;If false, SSL errors cannot be sent to Mozilla.
2489 | security.tls.hello_downgrade_check | boolean | Firefox 72, Firefox ESR 68.4 | true
2490 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the TLS 1.3 downgrade check is disabled.
2491 | ui.key.menuAccessKeyFocuses | boolean | Firefox 68, Firefox ESR 68 | true
2492 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the Alt key doesn't show the menubar on Windows.
2493 | widget.content.gtk-theme-override | string | Firefox 72, Firefox ESR 68.4 (Linux only) | N/A
2494 | &nbsp;&nbsp;&nbsp;&nbsp;If set, overrides the GTK theme for widgets.
2495 #### Windows (GPO)
2496 ```
2497 Software\Policies\Mozilla\Firefox\Preferences\boolean_preference_name = 0x1 | 0x0
2498 Software\Policies\Mozilla\Firefox\Preferences\string_preference_name = "string_value"
2499 ```
2500 #### macOS
2501 ```
2502 <dict>
2503   <key>Preferences</key>
2504   <dict>
2505     <key>boolean_preference_name</key>
2506     <true/> | <false/>
2507     <key>string_preference_name</key>
2508     <string>string_value</string>
2509   </dict>
2510 </dict>
2511 ```
2512 #### policies.json
2513 ```
2514 {
2515   "policies": {
2516     "Preferences": {
2517       "boolean_preference_name": true | false,
2518       "string_preference_name": "string_value"
2519     }
2520   }
2521 }
2522 ```
2523 ### PromptForDownloadLocation
2524 Ask where to save each file before downloading.
2525
2526 **Compatibility:** Firefox 68, Firefox ESR 68\
2527 **CCK2 Equivalent:** N/A\
2528 **Preferences Affected:** `browser.download.useDownloadDir`
2529
2530 #### Windows (GPO)
2531 ```
2532 Software\Policies\Mozilla\Firefox\PromptForDownloadLocation = 0x1 | 0x0
2533 ```
2534 #### macOS
2535 ```
2536 <dict>
2537   <key>PromptForDownloadLocation</key>
2538   <true/> | <false/>
2539 </dict>
2540 ```
2541 #### policies.json
2542 ```
2543 {
2544   "policies": {
2545     "PromptForDownloadLocation": true | false
2546   }
2547 }
2548 ```
2549 ### Proxy
2550 Configure proxy settings. These settings correspond to the connection settings in Firefox preferences.
2551 To specify ports, append them to the hostnames with a colon (:).
2552
2553 `Mode` is the proxy method being used.
2554
2555 `Locked` is whether or not proxy settings can be changed.
2556
2557 `HTTPProxy` is the HTTP proxy server.
2558
2559 `UseHTTPProxyForAllProtocols` is whether or not the HTTP proxy should be used for all other proxies.
2560
2561 `SSLProxy` is the SSL proxy server.
2562
2563 `FTPProxy` is the FTP proxy server.
2564
2565 `SOCKSProxy` is the SOCKS proxy server
2566
2567 `SOCKSVersion` is the SOCKS version (4 or 5)
2568
2569 `Passthrough` is list of hostnames or IP addresses that will not be proxied. Use `<local>` to bypass proxying for all hostnames which do not contain periods.
2570
2571 `AutoConfigURL` is a  URL for proxy configuration (only used if Mode is autoConfig).
2572
2573 `AutoLogin` means do not prompt for authentication if password is saved.
2574
2575 `UseProxyForDNS` to use proxy DNS when using SOCKS v5.
2576
2577 **Compatibility:** Firefox 60, Firefox ESR 60\
2578 **CCK2 Equivalent:** `networkProxy*`\
2579 **Preferences Affected:** `network.proxy.type`,`network.proxy.autoconfig_url`,`network.proxy.socks_remote_dns`,`signon.autologin.proxy`,`network.proxy.socks_version`,`network.proxy.no_proxies_on`,`network.proxy.share_proxy_settings`,`network.proxy.http`,`network.proxy.http_port`,`network.proxy.ftp`,`network.proxy.ftp_port`,`network.proxy.ssl`,`network.proxy.ssl_port`,`network.proxy.socks`,`network.proxy.socks_port`
2580
2581 #### Windows (GPO)
2582 ```
2583 Software\Policies\Mozilla\Firefox\Proxy\Mode = "none", "system", "manual", "autoDetect", "autoConfig"
2584 Software\Policies\Mozilla\Firefox\Proxy\Locked = 0x1 | 0x0
2585 Software\Policies\Mozilla\Firefox\=Proxy\HTTPProxy = https://httpproxy.example.com
2586 Software\Policies\Mozilla\Firefox\Proxy\UseHTTPProxyForAllProtocols = 0x1 | 0x0
2587 Software\Policies\Mozilla\Firefox\Proxy\SSLProxy = https://sslproxy.example.com
2588 Software\Policies\Mozilla\Firefox\Proxy\FTPProxy = https://ftpproxy.example.com
2589 Software\Policies\Mozilla\Firefox\Proxy\SOCKSProxy = https://socksproxy.example.com
2590 Software\Policies\Mozilla\Firefox\Proxy\SOCKSVersion = 0x4 | 0x5
2591 Software\Policies\Mozilla\Firefox\Proxy\Passthrough = <local>
2592 Software\Policies\Mozilla\Firefox\Proxy\AutoConfigURL = URL_TO_AUTOCONFIG
2593 Software\Policies\Mozilla\Firefox\Proxy\AutoLogin = 0x1 | 0x0
2594 Software\Policies\Mozilla\Firefox\Proxy\UseProxyForDNS = 0x1 | 0x0
2595 ```
2596 #### macOS
2597 ```
2598 <dict>
2599   <key>Proxy</key>
2600   <dict>
2601     <key>Mode</key>
2602     <string>none | system | manual | autoDetect | autoConfig</string>
2603     <key>Locked</key>
2604     <true> | </false>
2605     <key>HTTPProxy</key>
2606     <string>https://httpproxy.example.com</string>
2607     <key>UseHTTPProxyForAllProtocols</key>
2608     <true> | </false>
2609     <key>SSLProxy</key>
2610     <string>https://sslproxy.example.com</string>
2611     <key>FTPProxy</key>
2612     <string>https://ftpproxy.example.com</string>
2613     <key>SOCKSProxy</key>
2614     <string>https://socksproxy.example.com</string>
2615     <key>SOCKSVersion</key>
2616     <string>4 | 5</string>
2617     <key>Passthrough</key>
2618     <string>&lt;local>&gt;</string>
2619     <key>AutoConfigURL</key>
2620     <string>URL_TO_AUTOCONFIG</string>
2621     <key>AutoLogin</key>
2622     <true> | </false>
2623     <key>UseProxyForDNS</key>
2624     <true> | </false>
2625   </dict>
2626 </dict>
2627 ```
2628 #### policies.json
2629 ```
2630 {
2631   "policies": {
2632     "Proxy": {
2633       "Mode": "none", "system", "manual", "autoDetect", "autoConfig",
2634       "Locked": [true, false],
2635       "HTTPProxy": "hostname",
2636       "UseHTTPProxyForAllProtocols": [true, false],
2637       "SSLProxy": "hostname",
2638       "FTPProxy": "hostname",
2639       "SOCKSProxy": "hostname",
2640       "SOCKSVersion": 4 | 5
2641       "Passthrough": "<local>",
2642       "AutoConfigURL": "URL_TO_AUTOCONFIG",
2643       "AutoLogin":  [true, false],
2644       "UseProxyForDNS": [true, false]
2645     }
2646   }
2647 }
2648 ```
2649 ### RequestedLocales
2650 Set the the list of requested locales for the application in order of preference. It will cause the corresponding language pack to become active.
2651
2652 Note: For Firefox 68, this can now be a string so that you can specify an empty value.
2653
2654 **Compatibility:** Firefox 64, Firefox ESR 60.4, Updated in Firefox 68, Firefox ESR 68\
2655 **CCK2 Equivalent:** N/A\
2656 **Preferences Affected:** N/A
2657 #### Windows (GPO)
2658 ```
2659 Software\Policies\Mozilla\Firefox\RequestedLocales\1 = "de"
2660 Software\Policies\Mozilla\Firefox\RequestedLocales\2 = "en-US"
2661
2662 or
2663
2664 Software\Policies\Mozilla\Firefox\RequestedLocales = "de,en-US"
2665 ```
2666 #### macOS
2667 ```
2668 <dict>
2669   <key>RequestedLocales</key>
2670   <array>
2671     <string>de</string>
2672     <string>en-US</string>
2673   </array>
2674 </dict>
2675
2676 or
2677
2678 <dict>
2679   <key>RequestedLocales</key>
2680   <string>de,en-US</string>
2681 </dict>
2682
2683 ```
2684 #### policies.json
2685 ```
2686 {
2687   "policies": {
2688     "RequestedLocales": ["de", "en-US"]
2689   }
2690 }
2691
2692 or
2693
2694 {
2695   "policies": {
2696     "RequestedLocales": "de,en-US"
2697   }
2698 }
2699 ```
2700 <a name="SanitizeOnShutdown"></a>
2701
2702 ### SanitizeOnShutdown (Selective)
2703 Clear data on shutdown. Choose from Cache, Cookies, Download History, Form & Search History, Browsing History, Active Logins, Site Preferences and Offline Website Data.
2704
2705 Previously, these values were always locked. Starting with Firefox 74 and Firefox ESR 68.6, you can use the `Locked` option to either keep the values unlocked (set it to false), or lock only the values you set (set it to true). If you want the old behavior of locking everything, do not set `Locked` at all.
2706
2707 **Compatibility:** Firefox 68, Firefox ESR 68 (Locked added in 74/68.6)\
2708 **CCK2 Equivalent:** N/A\
2709 **Preferences Affected:** `privacy.sanitize.sanitizeOnShutdown`,`privacy.clearOnShutdown.cache`,`privacy.clearOnShutdown.cookies`,`privacy.clearOnShutdown.downloads`,`privacy.clearOnShutdown.formdata`,`privacy.clearOnShutdown.history`,`privacy.clearOnShutdown.sessions`,`privacy.clearOnShutdown.siteSettings`,`privacy.clearOnShutdown.offlineApps`
2710 #### Windows (GPO)
2711 ```
2712 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Cache = 0x1 | 0x0
2713 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Cookies = 0x1 | 0x0
2714 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Downloads = 0x1 | 0x0
2715 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\FormData = 0x1 | 0x0
2716 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\History = 0x1 | 0x0
2717 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Sessions = 0x1 | 0x0
2718 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\SiteSettings = 0x1 | 0x0
2719 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\OfflineApps = 0x1 | 0x0
2720 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Locked = 0x1 | 0x0
2721 ```
2722 #### macOS
2723 ```
2724 <dict>
2725   <key>SanitizeOnShutdown</key>
2726   <dict>
2727     <key>Cache</key>
2728     <true/> | <false/>
2729     <key>Cookies</key>
2730     <true/> | <false/>
2731     <key>Downloads</key>
2732     <true/> | <false/>
2733     <key>FormData</key>
2734     <true/> | <false/>
2735     <key>History</key>
2736     <true/> | <false/>
2737     <key>Sessions</key>
2738     <true/> | <false/>
2739     <key>SiteSettings</key>
2740     <true/> | <false/>
2741     <key>OfflineApps</key>
2742     <true/> | <false/>
2743     <key>Locked</key>
2744     <true/> | <false/>
2745   </dict>
2746 </dict>
2747 ```
2748 #### policies.json
2749 ```
2750 {
2751   "policies": {
2752     "SanitizeOnShutdown": {
2753       "Cache": true | false,
2754       "Cookies": true | false,
2755       "Downloads": true | false,
2756       "FormData": true | false,
2757       "History": true | false,
2758       "Sessions": true | false,
2759       "SiteSettings": true | false,
2760       "OfflineApps": true | false,
2761       "Locked": true | false
2762     }
2763   }
2764 }
2765 ```
2766 ### SanitizeOnShutdown (All)
2767 Clear all data on shutdown, including Browsing & Download History, Cookies, Active Logins, Cache, Form & Search History, Site Preferences and Offline Website Data.
2768
2769 **Compatibility:** Firefox 60, Firefox ESR 60\
2770 **CCK2 Equivalent:** N/A\
2771 **Preferences Affected:** `privacy.sanitize.sanitizeOnShutdown`,`privacy.clearOnShutdown.cache`,`privacy.clearOnShutdown.cookies`,`privacy.clearOnShutdown.downloads`,`privacy.clearOnShutdown.formdata`,`privacy.clearOnShutdown.history`,`privacy.clearOnShutdown.sessions`,`privacy.clearOnShutdown.siteSettings`,`privacy.clearOnShutdown.offlineApps`
2772 #### Windows (GPO)
2773 ```
2774 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown = 0x1 | 0x0
2775 ```
2776 #### macOS
2777 ```
2778 <dict>
2779   <key>SanitizeOnShutdown</key>
2780   <true/> | <false/>
2781 </dict>
2782 ```
2783 #### policies.json
2784 ```
2785 {
2786   "policies": {
2787     "SanitizeOnShutdown": true | false
2788   }
2789 }
2790 ```
2791 ### SearchBar
2792 Set whether or not search bar is displayed.
2793
2794 **Compatibility:** Firefox 60, Firefox ESR 60\
2795 **CCK2 Equivalent:** `showSearchBar`\
2796 **Preferences Affected:** N/A
2797
2798 #### Windows (GPO)
2799 ```
2800 Software\Policies\Mozilla\Firefox\SearchBar = "unified" | "separate"
2801 ```
2802 #### macOS
2803 ```
2804 <dict>
2805   <key>SearchBar</key>
2806   <string>unified | separate</string>
2807 </dict>
2808 ```
2809
2810 #### policies.json
2811 ```
2812 {
2813   "policies": {
2814     "SearchBar": "unified" | "separate"
2815   }
2816 }
2817 ```
2818 <a name="SearchEngines"></a>
2819
2820 ### SearchEngines (This policy is only available on the ESR.)
2821
2822 ### SearchEngines | Default
2823
2824 Set the default search engine. This policy is only available on the ESR.
2825
2826 **Compatibility:** Firefox ESR 60\
2827 **CCK2 Equivalent:** `defaultSearchEngine`\
2828 **Preferences Affected:** N/A
2829
2830 #### Windows (GPO)
2831 ```
2832 Software\Policies\Mozilla\Firefox\SearchEngines\Default = NAME_OF_SEARCH_ENGINE
2833 ```
2834 #### macOS
2835 ```
2836 <dict>
2837   <key>SearchEngines</key>
2838   <dict>
2839     <key>Default</key>
2840     <string>NAME_OF_SEARCH_ENGINE</string>
2841   </dict>
2842 </dict>
2843 ```
2844 #### policies.json
2845 ```
2846 {
2847   "policies": {
2848     "SearchEngines": {
2849       "Default": "NAME_OF_SEARCH_ENGINE"
2850     }
2851   }
2852 }
2853 ```
2854 ### SearchEngines | PreventInstalls
2855
2856 Prevent installing search engines from webpages.
2857
2858 **Compatibility:** Firefox ESR 60\
2859 **CCK2 Equivalent:** `disableSearchEngineInstall`\
2860 **Preferences Affected:** N/A
2861
2862 #### Windows (GPO)
2863 ```
2864 Software\Policies\Mozilla\Firefox\SearchEngines\PreventInstalls = 0x1 | 0x0
2865 ```
2866 #### macOS
2867 ```
2868 <dict>
2869   <key>SearchEngines</key>
2870   <dict>
2871     <key>PreventInstalls</key>
2872     <true/> | <false/>
2873   </dict>
2874 </dict>
2875 ```
2876 #### policies.json
2877 ```
2878 {
2879   "policies": {
2880     "SearchEngines": {
2881       "PreventInstalls": true | false
2882     }
2883   }
2884 }
2885 ```
2886 ### SearchEngines | Remove
2887
2888 Hide built-in search engines. This policy is only available on the ESR.
2889
2890 **Compatibility:** Firefox ESR 60.2\
2891 **CCK2 Equivalent:** `removeDefaultSearchEngines` (removed all built-in engines)\
2892 **Preferences Affected:** N/A
2893
2894 #### Windows (GPO)
2895 ```
2896 Software\Policies\Mozilla\Firefox\SearchEngines\Remove\1 = NAME_OF_SEARCH_ENGINE
2897 ```
2898 #### macOS
2899 ```
2900 <dict>
2901   <key>SearchEngines</key>
2902   <dict>
2903     <key>Remove</key>
2904     <array>
2905       <string>NAME_OF_SEARCH_ENGINE</string>
2906     </array>
2907   </dict>
2908 </dict>
2909 ```
2910 #### policies.json
2911 ```
2912 {
2913   "policies": {
2914     "SearchEngines": {
2915       "Remove": ["NAME_OF_SEARCH_ENGINE"]
2916     }
2917   }
2918 }
2919 ```
2920 ### SearchEngines | Add
2921
2922 Add new search engines (up to five). This policy is only available on the ESR. `Name` and `URLTemplate` are required.
2923
2924 `Name` is the name of the search engine.
2925
2926 `URLTemplate` is the search URL with {searchTerms} to substitute for the search term.
2927
2928 `Method` is either GET or POST
2929
2930 `IconURL` is a URL for the icon to use.
2931
2932 `Alias` is a keyword to use for the engine.
2933
2934 `Description` is a description of the search engine.
2935
2936 `PostData` is the POST data as name value pairs separated by &.
2937
2938 `SuggestURLTemplate` is a search suggestions URL with {searchTerms} to substitute for the search term.
2939
2940 **Compatibility:** Firefox ESR 60 (POST support in Firefox ESR 68)\
2941 **CCK2 Equivalent:** `searchplugins`\
2942 **Preferences Affected:** N/A
2943
2944 #### Windows (GPO)
2945 ```
2946 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Name = "Example1"
2947 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\URLTemplate = "https://www.example.org/q={searchTerms}"
2948 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Method = "GET" | "POST"
2949 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\IconURL = "https://www.example.org/favicon.ico"
2950 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Alias = "example"
2951 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Description = "Example Description"
2952 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\SuggestURLTemplate = "https://www.example.org/suggestions/q={searchTerms}"
2953 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\PostData = "name=value&q={searchTerms}"
2954 ```
2955
2956 #### macOS
2957 ```
2958 <dict>
2959   <key>SearchEngines</key>
2960   <dict>
2961     <key>Add</key>
2962     <array>
2963       <dict>
2964         <key>Name</key>
2965         <string>Example1</string>
2966         <key>URLTemplate</key>
2967         <string>https://www.example.org/q={searchTerms}</string>
2968         <key>Method</key>
2969         <string>GET | POST </string>
2970         <key>IconURL</key>
2971         <string>https://www.example.org/favicon.ico</string>
2972         <key>Alias</key>
2973         <string>example</string>
2974         <key>Description</key>
2975         <string>Example Description</string>
2976         <key>SuggestURLTemplate</key>
2977         <string>https://www.example.org/suggestions/q={searchTerms}</string>
2978         <key>PostData</key>
2979         <string>name=value&q={searchTerms}</string>
2980       </dict>
2981     <array>
2982   </dict>
2983 </dict>
2984 ```
2985 #### policies.json
2986 ```
2987 {
2988   "policies": {
2989     "SearchEngines": {
2990       "Add": [
2991         {
2992           "Name": "Example1",
2993           "URLTemplate": "https://www.example.org/q={searchTerms}",
2994           "Method": "GET" | "POST",
2995           "IconURL": "https://www.example.org/favicon.ico",
2996           "Alias": "example",
2997           "Description": "Description",
2998           "PostData": "name=value&q={searchTerms}",
2999           "SuggestURLTemplate": "https://www.example.org/suggestions/q={searchTerms}"
3000         }
3001       ]
3002     }
3003   }
3004 }
3005 ```
3006 ### SearchSuggestEnabled
3007
3008 Enable search suggestions.
3009
3010 **Compatibility:** Firefox 68, Firefox ESR 68\
3011 **CCK2 Equivalent:** N/A\
3012 **Preferences Affected:** `browser.urlbar.suggest.searches`,`browser.search.suggest.enabled`
3013
3014 #### Windows (GPO)
3015 ```
3016 Software\Policies\Mozilla\Firefox\SearchSuggestEnabled = 0x1 | 0x0
3017 ```
3018 #### macOS
3019 ```
3020 <dict>
3021   <key>SearchSuggestEnabled</key>
3022   <true/> | <false/>
3023 </dict>
3024 ```
3025 #### policies.json
3026 ```
3027 {
3028   "policies": {
3029     "SearchSuggestEnabled": true | false
3030   }
3031 }
3032 ```
3033 ### SecurityDevices
3034
3035 Install PKCS #11 modules.
3036
3037 **Compatibility:** Firefox 64, Firefox ESR 60.4\
3038 **CCK2 Equivalent:** `certs.devices`\
3039 **Preferences Affected:** N/A
3040
3041 #### Windows (GPO)
3042 ```
3043 Software\Policies\Mozilla\Firefox\SecurityDevices\NAME_OF_DEVICE = PATH_TO_LIBRARY_FOR_DEVICE
3044 ```
3045 #### macOS
3046 ```
3047 <dict>
3048   <key>SecurityDevices</key>
3049   <dict>
3050     <key>NAME_OF_DEVICE</key>
3051     <string>PATH_TO_LIBRARY_FOR_DEVICE</string>
3052   </dict>
3053 </dict>
3054 ```
3055
3056 #### policies.json
3057 ```
3058 {
3059   "policies": {
3060     "SecurityDevices": {
3061       "NAME_OF_DEVICE": "PATH_TO_LIBRARY_FOR_DEVICE"
3062     }
3063   }
3064 }
3065 ```
3066 ### SSLVersionMax
3067
3068 Set and lock the maximum version of TLS.
3069
3070 **Compatibility:** Firefox 66, Firefox ESR 60.6\
3071 **CCK2 Equivalent:** N/A\
3072 **Preferences Affected:** `security.tls.version.max`
3073
3074 #### Windows (GPO)
3075 ```
3076 Software\Policies\Mozilla\Firefox\SSLVersionMax = "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
3077 ```
3078 #### macOS
3079 ```
3080 <dict>
3081   <key>SSLVersionMax</key>
3082   <string>tls1 | tls1.1 | tls1.2 | tls1.3</string>
3083 </dict>
3084 ```
3085
3086 #### policies.json
3087 ```
3088 {
3089   "policies": {
3090     "SSLVersionMax": "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
3091   }
3092 }
3093 ```
3094 ### SSLVersionMin
3095
3096 Set and lock the minimum version of TLS.
3097
3098 **Compatibility:** Firefox 66, Firefox ESR 60.6\
3099 **CCK2 Equivalent:** N/A\
3100 **Preferences Affected:** `security.tls.version.min`
3101
3102 #### Windows (GPO)
3103 ```
3104 Software\Policies\Mozilla\Firefox\SSLVersionMin = "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
3105 ```
3106 #### macOS
3107 ```
3108 <dict>
3109   <key>SSLVersionMin</key>
3110   <string>tls1 | tls1.1 | tls1.2 | tls1.3</string>
3111 </dict>
3112 ```
3113
3114 #### policies.json
3115 ```
3116 {
3117   "policies": {
3118     "SSLVersionMin": "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
3119   }
3120 }
3121 ```
3122 ### SupportMenu
3123 Add a menuitem to the help menu for specifying support information.
3124
3125 **Compatibility:** Firefox 68.0.1, Firefox ESR 68.0.1\
3126 **CCK2 Equivalent:** helpMenu\
3127 **Preferences Affected:** N/A
3128
3129 #### Windows (GPO)
3130 ```
3131 Software\Policies\Mozilla\Firefox\SupportMenu\Title = "Support Menu"
3132 Software\Policies\Mozilla\Firefox\SupportMenu\URL = "http://example.com/support"
3133 Software\Policies\Mozilla\Firefox\SupportMenu\AccessKey = "S"
3134 ```
3135 #### macOS
3136 ```
3137 <dict>
3138   <key>SupportMenu</key>
3139   <dict>
3140     <key>Title</key>
3141     <string>SupportMenu</string>
3142     <key>URL</key>
3143     <string>http://example.com/support</string>
3144     <key>AccessKey</key>
3145     <string>S</string>
3146   </dict>
3147 </dict>
3148 ```
3149 #### policies.json
3150 ```
3151 {
3152   "policies": {
3153     "SupportMenu": {
3154       "Title": "Support Menu",
3155       "URL": "http://example.com/support",
3156       "AccessKey": "S"
3157     }
3158   }
3159 }
3160 ```
3161 ### UserMessaging
3162
3163 Prevent installing search engines from webpages.
3164
3165 `WhatsNew` Remove the "What's New" icon and menuitem. (Firefox 75 only)
3166
3167 `ExtensionRecommendations` Don't recommend extensions.
3168
3169 `FeatureRecommendations` Don't recommend browser features.
3170
3171 `UrlbarInterventions` Don't offer Firefox specific suggestions in the URL bar. (Firefox 75 only)
3172
3173 **Compatibility:** Firefox 75, Firefox ESR 68.7\
3174 **CCK2 Equivalent:** N/A\
3175 **Preferences Affected:** `browser.messaging-system.whatsNewPanel.enabled`,`browser.newtabpage.activity-stream.asrouter.userprefs.cfr.addons`,`browser.newtabpage.activity-stream.asrouter.userprefs.cfr.features`
3176
3177 #### Windows (GPO)
3178 ```
3179 Software\Policies\Mozilla\Firefox\UserMessaging\WhatsNew = 0x1 | 0x0
3180 Software\Policies\Mozilla\Firefox\UserMessaging\ExtensionRecommendations = 0x1 | 0x0
3181 Software\Policies\Mozilla\Firefox\UserMessaging\FeatureRecommendations = 0x1 | 0x0
3182 Software\Policies\Mozilla\Firefox\UserMessaging\UrlbarInterventions = 0x1 | 0x0
3183 ```
3184 #### macOS
3185 ```
3186 <dict>
3187   <key>UserMessaging</key>
3188   <dict>
3189     <key>WhatsNew</key>
3190     <true/> | <false/>
3191     <key>ExtensionRecommendations</key>
3192     <true/> | <false/>
3193     <key>FeatureRecommendations</key>
3194     <true/> | <false/>
3195     <key>UrlbarInterventions</key>
3196     <true/> | <false/>
3197   </dict>
3198 </dict>
3199 ```
3200 #### policies.json
3201 ```
3202 {
3203   "policies": {
3204     "UserMessaging": {
3205       "WhatsNew": true | false,
3206       "ExtensionRecommendations": true | false,
3207       "FeatureRecommendations": true | false,
3208       "UrlbarInterventions": true | false
3209     }
3210   }
3211 }
3212 ```
3213 ### WebsiteFilter
3214 Block websites from being visited. The parameters take an array of Match Patterns, as documented in https://developer.mozilla.org/en-US/Add-ons/WebExtensions/Match_patterns. Only http/https addresses are supported at the moment. The arrays are limited to 1000 entries each.
3215
3216 **Compatibility:** Firefox 60, Firefox ESR 60\
3217 **CCK2 Equivalent:** N/A\
3218 **Preferences Affected:** N/A
3219
3220 #### Windows (GPO)
3221 ```
3222 Software\Policies\Mozilla\Firefox\WebsiteFilter\Block\1 = "<all_urls>"
3223 Software\Policies\Mozilla\Firefox\WebsiteFilter\Exceptions\1 = "http://example.org/*"
3224 ```
3225 #### macOS
3226 ```
3227 <dict>
3228   <key>WebsiteFilter</key>
3229   <dict>
3230     <key>Block</key>
3231     <array>
3232       <string><all_urls></string>
3233     </array>
3234     <key>Exceptions</key>
3235     <array>
3236       <string>http://example.org/*</string>
3237     </array>
3238   </dict>
3239
3240 </dict>
3241 ```
3242 #### policies.json
3243 ```
3244 {
3245   "policies": {
3246     "WebsiteFilter": {
3247       "Block": ["<all_urls>"],
3248       "Exceptions": ["http://example.org/*"]
3249     }
3250   }
3251 }
3252 ```