README.md

   1 **These policies are in active development and so might contain changes that do not work with current versions of Firefox.**
   2
   3 **You should use the [officially released versions](https://github.com/mozilla/policy-templates/releases) if you are deploying changes.**
   4
   5 Policies can be specified using the [Group Policy templates on Windows](https://github.com/mozilla/policy-templates/tree/master/windows), [Intune on Windows](https://support.mozilla.org/kb/managing-firefox-intune), [configuration profiles on macOS](https://github.com/mozilla/policy-templates/tree/master/mac), or by creating a file called `policies.json`. On Windows, create a directory called `distribution` where the EXE is located and place the file there. On Mac, the file goes into `Firefox.app/Contents/Resources/distribution`.  On Linux, the file goes into `firefox/distribution`, where `firefox` is the installation directory for firefox, which varies by distribution or you can specify system-wide policy by placing the file in `/etc/firefox/policies`.
   6
   7 | Policy Name | Description
   8 | --- | --- |
   9 | **[`3rdparty`](#3rdparty)** | Set policies that WebExtensions can access via chrome.storage.managed.
  10 | **[`AllowedDomainsForApps`](#alloweddomainsforapps)** | Define domains allowed to access Google Workspace.
  11 | **[`AppAutoUpdate`](#appautoupdate)** | Enable or disable automatic application update.
  12 | **[`AppUpdateURL`](#appupdateurl)** | Change the URL for application update.
  13 | **[`Authentication`](#authentication)** | Configure sites that support integrated authentication.
  14 | **[`BackgroundAppUpdate`](#backgroundappupdate)** | Enable or disable automatic application update in the background, when the application is not running.
  15 | **[`BlockAboutAddons`](#blockaboutaddons)** | Block access to the Add-ons Manager (about:addons).
  16 | **[`BlockAboutConfig`](#blockaboutconfig)** | Block access to about:config.
  17 | **[`BlockAboutProfiles`](#blockaboutprofiles)** | Block access to About Profiles (about:profiles).
  18 | **[`BlockAboutSupport`](#blockaboutsupport)** | Block access to Troubleshooting Information (about:support).
  19 | **[`Bookmarks`](#bookmarks)** | Add bookmarks in either the bookmarks toolbar or menu.
  20 | **[`CaptivePortal`](#captiveportal)** | Enable or disable the detection of captive portals.
  21 | **[`Certificates`](#certificates)** |
  22 | **[`Certificates -> ImportEnterpriseRoots`](#certificates--importenterpriseroots)** | Trust certificates that have been added to the operating system certificate store by a user or administrator.
  23 | **[`Certificates -> Install`](#certificates--install)** | Install certificates into the Firefox certificate store.
  24 | **[`Cookies`](#cookies)** | Configure cookie preferences.
  25 | **[`DisableAppUpdate`](#disableappupdate)** | Turn off application updates.
  26 | **[`DisableBuiltinPDFViewer`](#disablebuiltinpdfviewer)** | Disable the built in PDF viewer.
  27 | **[`DisabledCiphers`](#disabledciphers)** | Disable ciphers.
  28 | **[`DisableDefaultBrowserAgent`](#disabledefaultbrowseragent)** | Prevent the default browser agent from taking any actions (Windows only).
  29 | **[`DisableDeveloperTools`](#disabledevelopertools)** | Remove access to all developer tools.
  30 | **[`DisableFeedbackCommands`](#disablefeedbackcommands)** | Disable the menus for reporting sites.
  31 | **[`DisableFirefoxScreenshots`](#disablefirefoxscreenshots)** | Remove access to Firefox Screenshots.
  32 | **[`DisableFirefoxAccounts`](#disablefirefoxaccounts)** | Disable Firefox Accounts integration (Sync).
  33 | **[`DisableFirefoxStudies`](#disablefirefoxstudies)** | Disable Firefox studies (Shield).
  34 | **[`DisableForgetButton`](#disableforgetbutton)** | Disable the "Forget" button.
  35 | **[`DisableFormHistory`](#disableformhistory)** | Turn off saving information on web forms and the search bar.
  36 | **[`DisableMasterPasswordCreation`](#disablemasterpasswordcreation)** | Remove the master password functionality.
  37 | **[`DisablePasswordReveal`](#disablepasswordreveal)** | Do not allow passwords to be revealed in saved logins.
  38 | **[`DisablePocket`](#disablepocket)** | Remove Pocket in the Firefox UI.
  39 | **[`DisablePrivateBrowsing`](#disableprivatebrowsing)** | Remove access to private browsing.
  40 | **[`DisableProfileImport`](#disableprofileimport)** | Disables the "Import data from another browser" option in the bookmarks window.
  41 | **[`DisableProfileRefresh`](#disableprofilerefresh)** | Disable the Refresh Firefox button on about:support and support.mozilla.org
  42 | **[`DisableSafeMode`](#disablesafemode)** | Disable safe mode within the browser.
  43 | **[`DisableSecurityBypass`](#disablesecuritybypass)** | Prevent the user from bypassing security in certain cases.
  44 | **[`DisableSetDesktopBackground`](#disablesetdesktopbackground)** | Remove the "Set As Desktop Background..." menuitem when right clicking on an image.
  45 | **[`DisableSystemAddonUpdate`](#disablesystemaddonupdate)** | Prevent system add-ons from being installed or update.
  46 | **[`DisableTelemetry`](#disabletelemetry)** | DisableTelemetry
  47 | **[`DisplayBookmarksToolbar`](#displaybookmarkstoolbar)** | Set the initial state of the bookmarks toolbar.
  48 | **[`DisplayMenuBar (Deprecated)`](#displaymenubar-deprecated)** | Set the initial state of the menubar.
  49 | **[`DisplayMenuBar`](#displaymenubar)** | Set the state of the menubar.
  50 | **[`DNSOverHTTPS`](#dnsoverhttps)** | Configure DNS over HTTPS.
  51 | **[`DontCheckDefaultBrowser`](#dontcheckdefaultbrowser)** | Don't check if Firefox is the default browser at startup.
  52 | **[`DefaultDownloadDirectory`](#defaultdownloaddirectory)** | Set the default download directory.
  53 | **[`DownloadDirectory`](#downloaddirectory)** | Set and lock the download directory.
  54 | **[`EnableTrackingProtection`](#enabletrackingprotection)** | Configure tracking protection.
  55 | **[`EncryptedMediaExtensions`](#encryptedmediaextensions)** | Enable or disable Encrypted Media Extensions and optionally lock it.
  56 | **[`EnterprisePoliciesEnabled`](#enterprisepoliciesenabled)** | Enable policy support on macOS.
  57 | **[`Extensions`](#extensions)** | Control the installation, uninstallation and locking of extensions.
  58 | **[`ExtensionSettings`](#extensionsettings)** | Manage all aspects of extensions.
  59 | **[`ExtensionUpdate`](#extensionupdate)** | Control extension updates.
  60 | **[`FlashPlugin`](#flashplugin)** | Configure the default Flash plugin policy as well as origins for which Flash is allowed.
  61 | **[`FirefoxHome`](#firefoxhome)** | Customize the Firefox Home page.
  62 | **[`HardwareAcceleration`](#hardwareacceleration)** | Control hardware acceleration.
  63 | **[`Handlers`](#handlers)** | Configure default application handlers.
  64 | **[`Homepage`](#homepage)** | Configure the default homepage and how Firefox starts.
  65 | **[`InstallAddonsPermission`](#installaddonspermission)** | Configure the default extension install policy as well as origins for extension installs are allowed.
  66 | **[`LegacyProfiles`](#legacyprofiles)** | Disable the feature enforcing a separate profile for each installation.
  67 | **[`LocalFileLinks`](#localfilelinks)** | Enable linking to local files by origin.
  68 | **[`ManagedBookmarks`](#managedbookmarks)** | Configures a list of bookmarks managed by an administrator that cannot be changed by the user.
  69 | **[`ManualAppUpdateOnly`](#manualappupdateonly)** | Allow manual updates only and do not notify the user about updates..
  70 | **[`PrimaryPassword`](#primarypassword)** | Require or prevent using a primary (formerly master) password.
  71 | **[`NetworkPrediction`](#networkprediction)** | Enable or disable network prediction (DNS prefetching).
  72 | **[`NewTabPage`](#newtabpage)** | Enable or disable the New Tab page.
  73 | **[`NoDefaultBookmarks`](#nodefaultbookmarks)** | Disable the creation of default bookmarks.
  74 | **[`OfferToSaveLogins`](#offertosavelogins)** | Control whether or not Firefox offers to save passwords.
  75 | **[`OfferToSaveLoginsDefault`](#offertosaveloginsdefault)** | Set the default value for whether or not Firefox offers to save passwords.
  76 | **[`OverrideFirstRunPage`](#overridefirstrunpage)** | Override the first run page.
  77 | **[`OverridePostUpdatePage`](#overridepostupdatepage)** | Override the upgrade page.
  78 | **[`PasswordManagerEnabled`](#passwordmanagerenabled)** | Remove (some) access to the password manager.
  79 | **[`PDFjs`](#pdfjs)** | Disable or configure PDF.js, the built-in PDF viewer.
  80 | **[`Permissions`](#permissions)** | Set permissions associated with camera, microphone, location, and notifications.
  81 | **[`PictureInPicture`](#pictureinpicture)** | Enable or disable Picture-in-Picture.
  82 | **[`PopupBlocking`](#popupblocking)** | Configure the default pop-up window policy as well as origins for which pop-up windows are allowed.
  83 | **[`Preferences`](#preferences)** | Set and lock preferences.
  84 | **[`Preferences (Deprecated)`](#preferences-deprecated)** | Set and lock some preferences.
  85 | **[`PromptForDownloadLocation`](#promptfordownloadlocation)** | Ask where to save each file before downloading.
  86 | **[`Proxy`](#proxy)** | Configure proxy settings.
  87 | **[`RequestedLocales`](#requestedlocales)** | Set the the list of requested locales for the application in order of preference.
  88 | **[`SanitizeOnShutdown` (All)](#sanitizeonshutdown-all)** | Clear all data on shutdown.
  89 | **[`SanitizeOnShutdown` (Selective)](#sanitizeonshutdown-selective)** | Clear data on shutdown.
  90 | **[`SearchBar`](#searchbar)** | Set whether or not search bar is displayed.
  91 | **[`SearchEngines`](#searchengines-this-policy-is-only-available-on-the-esr)** |
  92 | **[`SearchEngines -> Default`](#searchengines--default)** | Set the default search engine.
  93 | **[`SearchEngines -> PreventInstalls`](#searchengines--preventinstalls)** | Prevent installing search engines from webpages.
  94 | **[`SearchEngines -> Remove`](#searchengines--remove)** | Hide built-in search engines.
  95 | **[`SearchEngines -> Add`](#searchengines--add)** | Add new search engines.
  96 | **[`SearchSuggestEnabled`](#searchsuggestenabled)** | Enable search suggestions.
  97 | **[`SecurityDevices`](#securitydevices)** | Install PKCS #11 modules.
  98 | **[`ShowHomeButton`](#showhomebutton)** | Show the home button on the toolbar.
  99 | **[`SSLVersionMax`](#sslversionmax)** | Set and lock the maximum version of TLS.
 100 | **[`SSLVersionMin`](#sslversionmin)** | Set and lock the minimum version of TLS.
 101 | **[`SupportMenu`](#supportmenu)** | Add a menuitem to the help menu for specifying support information.
 102 | **[`UserMessaging`](#usermessaging)** | Don't show certain messages to the user.
 103 | **[`WebsiteFilter`](#websitefilter)** | Block websites from being visited.
 104
 105 ### 3rdparty
 106
 107 Allow WebExtensions to configure policy. For more information, see [Adding policy support to your extension](https://extensionworkshop.com/documentation/enterprise/adding-policy-support-to-your-extension/).
 108
 109 ### AppAutoUpdate
 110
 111 Enable or disable **automatic** application update.
 112
 113 If set to true, application updates are installed without user approval within Firefox. The operating system might still require approval.
 114
 115 If set to false, application updates are downloaded but the user can choose when to install the update.
 116
 117 If you have disabled updates via DisableAppUpdate, this policy has no effect.
 118
 119 **Compatibility:** Firefox 75, Firefox ESR 68.7\
 120 **CCK2 Equivalent:** N/A\
 121 **Preferences Affected:** app.update.auto
 122
 123 #### Windows (GPO)
 124 ```
 125 Software\Policies\Mozilla\Firefox\AppAutoUpdate = 0x1 | 0x0
 126 ```
 127 #### Windows (Intune)
 128 OMA-URI:
 129 ```
 130 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AppAutoUpdate
 131 ```
 132 Value (string):
 133 ```
 134 <enabled/> or <disabled/>
 135 ```
 136 #### macOS
 137 ```
 138 <dict>
 139   <key>AppAutoUpdate</key>
 140   <true/> | <false/>
 141 </dict>
 142 ```
 143 #### policies.json
 144 ```
 145 {
 146   "policies": {
 147     "AppAutoUpdate": true | false
 148   }
 149 }
 150 ```
 151 ### AllowedDomainsForApps
 152
 153 Define domains allowed to access Google Workspace.
 154
 155 This policy is based on the [Chrome policy](https://chromeenterprise.google/policies/#AllowedDomainsForApps) of the same name.
 156
 157 If this policy is enabled, users can only access Google Workspace using accounts from the specified domains. If you want to allow Gmail, you can add ```consumer_accounts``` to the list.
 158
 159 **Compatibility:** Firefox 89, Firefox ESR 78.11\
 160 **CCK2 Equivalent:** N/A\
 161 **Preferences Affected:** N/A
 162
 163 #### Windows (GPO)
 164 ```
 165 Software\Policies\Mozilla\Firefox\AllowedDomainsForApps = "managedfirefox.com,example.com"
 166 ```
 167 #### Windows (Intune)
 168 OMA-URI:
 169 ```
 170 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AllowedDomainsForApps
 171 ```
 172 Value (string):
 173 ```
 174 <enabled/>
 175 <data id="AllowedDomainsForApps" value="managedfirefox.com,example.com"/>
 176 ```
 177 #### macOS
 178 ```
 179 <dict>
 180   <key>AllowedDomainsForApps</key>
 181   <string>managedfirefox.com,example.com</string>
 182 </dict>
 183 ```
 184 #### policies.json
 185 ```
 186 {
 187   "policies": {
 188     "AllowedDomainsForApps": "managedfirefox.com,example.com"
 189   }
 190 }
 191 ```
 192 ### AppUpdateURL
 193
 194 Change the URL for application update if you are providing Firefox updates from a custom update server.
 195
 196 **Compatibility:** Firefox 62, Firefox ESR 60.2\
 197 **CCK2 Equivalent:** N/A\
 198 **Preferences Affected:** `app.update.url`
 199
 200 #### Windows (GPO)
 201 ```
 202 Software\Policies\Mozilla\Firefox\AppUpdateURL = "https://yoursite.com"
 203 ```
 204 #### Windows (Intune)
 205 OMA-URI:
 206 ```
 207 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AppUpdateURL
 208 ```
 209 Value (string):
 210 ```
 211 <enabled/>
 212 <data id="AppUpdateURL" value="https://yoursite.com"/>
 213 ```
 214 #### macOS
 215 ```
 216 <dict>
 217   <key>AppUpdateURL</key>
 218   <string>https://yoursite.com</string>
 219 </dict>
 220 ```
 221 #### policies.json
 222 ```
 223 {
 224   "policies": {
 225     "AppUpdateURL": "https://yoursite.com"
 226   }
 227 }
 228 ```
 229 ### Authentication
 230
 231 Configure sites that support integrated authentication.
 232
 233 See https://developer.mozilla.org/en-US/docs/Mozilla/Integrated_authentication for more information.
 234
 235 `PrivateBrowsing` enables integrated authentication in private browsing.
 236
 237 **Compatibility:** Firefox 60, Firefox ESR 60 (AllowNonFQDN added in 62/60.2, AllowProxies added in 70/68.2, Locked added in 71/68.3, PrivateBrowsing added in 77/68.9)\
 238 **CCK2 Equivalent:** N/A\
 239 **Preferences Affected:** `network.negotiate-auth.trusted-uris`,`network.negotiate-auth.delegation-uris`,`network.automatic-ntlm-auth.trusted-uris`,`network.automatic-ntlm-auth.allow-non-fqdn`,`network.negotiate-auth.allow-non-fqdn`,`network.automatic-ntlm-auth.allow-proxies`,`network.negotiate-auth.allow-proxies`,`network.auth.private-browsing-sso`
 240
 241 #### Windows (GPO)
 242 ```
 243 Software\Policies\Mozilla\Firefox\Authentication\SPNEGO\1 = "mydomain.com"
 244 Software\Policies\Mozilla\Firefox\Authentication\SPNEGO\2 = "https://myotherdomain.com"
 245 Software\Policies\Mozilla\Firefox\Authentication\Delegated\1 = "mydomain.com"
 246 Software\Policies\Mozilla\Firefox\Authentication\Delegated\2 = "https://myotherdomain.com"
 247 Software\Policies\Mozilla\Firefox\Authentication\NTLM\1 = "mydomain.com"
 248 Software\Policies\Mozilla\Firefox\Authentication\NTLM\2 = "https://myotherdomain.com"
 249 Software\Policies\Mozilla\Firefox\Authentication\AllowNonFQDN\SPNEGO = 0x1 | 0x0
 250 Software\Policies\Mozilla\Firefox\Authentication\AllowNonFQDN\NTLM = 0x1 | 0x0
 251 Software\Policies\Mozilla\Firefox\Authentication\AllowProxies\SPNEGO = 0x1 | 0x0
 252 Software\Policies\Mozilla\Firefox\Authentication\AllowProxies\NTLM = 0x1 | 0x0
 253 Software\Policies\Mozilla\Firefox\Authentication\Locked = 0x1 | 0x0
 254 Software\Policies\Mozilla\Firefox\Authentication\PrivateBrowsing = 0x1 | 0x0
 255 ```
 256 #### Windows (Intune)
 257 OMA-URI:
 258 ```
 259 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_SPNEGO
 260 ```
 261 Value (string):
 262 ```
 263 <enabled/>
 264 <data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
 265 ```
 266 OMA-URI:
 267 ```
 268 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_Delegated
 269 ```
 270 Value (string):
 271 ```
 272 <enabled/>
 273 <data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
 274 ```
 275 OMA-URI:
 276 ```
 277 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_NTLM
 278 ```
 279 Value (string):
 280 ```
 281 <enabled/>
 282 <data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
 283 ```
 284 OMA-URI:
 285 ```
 286 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_AllowNonFQDN
 287 ```
 288 Value (string):
 289 ```
 290 <enabled/>
 291 <data id="Authentication_AllowNonFQDN_NTLM" value="true | false"/>
 292 <data id="Authentication_AllowNonFQDN_SPNEGO" value="true | false"/>
 293 ```
 294 OMA-URI:
 295 ```
 296 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_Locked
 297 ```
 298 Value (string):
 299 ```
 300 <enabled/> or <disabled/>
 301 ```
 302 OMA-URI:
 303 ```
 304 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_PrivateBrowsing
 305 ```
 306 Value (string):
 307 ```
 308 <enabled/> or <disabled/>
 309 ```
 310 #### macOS
 311 ```
 312 <dict>
 313   <key>Authentication</key>
 314   <dict>
 315     <key>SPNEGO</key>
 316     <array>
 317       <string>mydomain.com</string>
 318       <string>https://myotherdomain.com</string>
 319     </array>
 320     <key>Delegated</key>
 321     <array>
 322       <string>mydomain.com</string>
 323       <string>https://myotherdomain.com</string>
 324     </array>
 325     <key>NTLM</key>
 326     <array>
 327       <string>mydomain.com</string>
 328       <string>https://myotherdomain.com</string>
 329     </array>
 330     <key>AllowNonFQDN</key>
 331       <dict>
 332       <key>SPNEGO</key>
 333       <true/> | <false/>
 334       <key>NTLM</key>
 335       <true/> | <false/>
 336     </dict>
 337     <key>AllowProxies</key>
 338       <dict>
 339       <key>SPNEGO</key>
 340       <true/> | <false/>
 341       <key>NTLM</key>
 342       <true/> | <false/>
 343     </dict>
 344     <key>Locked</key>
 345     <true/> | <false/>
 346     <key>PrivateBrowsing</key>
 347     <true/> | <false/>
 348   </dict>
 349 </dict>
 350 ```
 351 #### policies.json
 352 ```
 353 {
 354   "policies": {
 355     "Authentication": {
 356       "SPNEGO": ["mydomain.com", "https://myotherdomain.com"],
 357       "Delegated": ["mydomain.com", "https://myotherdomain.com"],
 358       "NTLM": ["mydomain.com", "https://myotherdomain.com"],
 359       "AllowNonFQDN": {
 360         "SPNEGO": true | false,
 361         "NTLM": true | false
 362       },
 363       "AllowProxies": {
 364         "SPNEGO": true | false,
 365         "NTLM": true | false
 366       },
 367       "Locked": true | false,
 368       "PrivateBrowsing": true | false
 369     }
 370   }
 371 }
 372 ```
 373 ### BackgroundAppUpdate
 374
 375 Enable or disable **automatic** application update **in the background**, when the application is not running.
 376
 377 If set to true, application updates may be installed (without user approval) in the background, even when the application is not running. The operating system might still require approval.
 378
 379 If set to false, the application will not try to install updates when the application is not running.
 380
 381 If you have disabled updates via `DisableAppUpdate` or disabled automatic updates via `AppUpdateAuto`, this policy has no effect.
 382
 383 **Compatibility:** Firefox 90\
 384 **CCK2 Equivalent:** N/A\
 385 **Preferences Affected:** `app.update.background.enabled`
 386
 387 #### Windows (GPO)
 388 ```
 389 Software\Policies\Mozilla\Firefox\BackgroundAppUpdate = 0x1 | 0x0
 390 ```
 391 #### Windows (Intune)
 392 OMA-URI:
 393 ```
 394 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BackgroundAppUpdate
 395 ```
 396 Value (string):
 397 ```
 398 <enabled/> or <disabled/>
 399 ```
 400 #### macOS
 401 ```
 402 <dict>
 403   <key>BackgroundAppUpdate</key>
 404   <true/> | <false/>
 405 </dict>
 406 ```
 407 #### policies.json
 408 ```
 409 {
 410   "policies": {
 411     "BackgroundAppUpdate": true | false
 412   }
 413 }
 414 ```
 415 ### BlockAboutAddons
 416
 417 Block access to the Add-ons Manager (about:addons).
 418
 419 **Compatibility:** Firefox 60, Firefox ESR 60\
 420 **CCK2 Equivalent:** `disableAddonsManager`\
 421 **Preferences Affected:** N/A
 422
 423 #### Windows (GPO)
 424 ```
 425 Software\Policies\Mozilla\Firefox\BlockAboutAddons = 0x1 | 0x0
 426 ```
 427 #### Windows (Intune)
 428 OMA-URI:
 429 ```
 430 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutAddons
 431 ```
 432 Value (string):
 433 ```
 434 <enabled/> or <disabled/>
 435 ```
 436 #### macOS
 437 ```
 438 <dict>
 439   <key>BlockAboutAddons</key>
 440   <true/> | <false/>
 441 </dict>
 442 ```
 443 #### policies.json
 444 ```
 445 {
 446   "policies": {
 447     "BlockAboutAddons": true | false
 448   }
 449 }
 450 ```
 451 ### BlockAboutConfig
 452
 453 Block access to about:config.
 454
 455 **Compatibility:** Firefox 60, Firefox ESR 60\
 456 **CCK2 Equivalent:** `disableAboutConfig`\
 457 **Preferences Affected:** N/A
 458
 459 #### Windows (GPO)
 460 ```
 461 Software\Policies\Mozilla\Firefox\BlockAboutConfig = 0x1 | 0x0
 462 ```
 463 #### Windows (Intune)
 464 OMA-URI:
 465 ```
 466 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutConfig
 467 ```
 468 Value (string):
 469 ```
 470 <enabled/> or <disabled/>
 471 ```
 472 #### macOS
 473 ```
 474 <dict>
 475   <key>BlockAboutConfig</key>
 476   <true/> | <false/>
 477 </dict>
 478 ```
 479 #### policies.json
 480 ```
 481 {
 482   "policies": {
 483     "BlockAboutConfig": true | false
 484   }
 485 }
 486 ```
 487 ### BlockAboutProfiles
 488
 489 Block access to About Profiles (about:profiles).
 490
 491 **Compatibility:** Firefox 60, Firefox ESR 60\
 492 **CCK2 Equivalent:** `disableAboutProfiles`\
 493 **Preferences Affected:** N/A
 494
 495 #### Windows (GPO)
 496 ```
 497 Software\Policies\Mozilla\Firefox\BlockAboutProfiles = 0x1 | 0x0
 498 ```
 499 #### Windows (Intune)
 500 OMA-URI:
 501 ```
 502 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutProfiles
 503 ```
 504 Value (string):
 505 ```
 506 <enabled/> or <disabled/>
 507 ```
 508 #### macOS
 509 ```
 510 <dict>
 511   <key>BlockAboutProfiles</key>
 512   <true/> | <false/>
 513 </dict>
 514 ```
 515 #### policies.json
 516 ```
 517 {
 518   "policies": {
 519     "BlockAboutProfiles": true | false
 520   }
 521 }
 522 ```
 523 ### BlockAboutSupport
 524
 525 Block access to Troubleshooting Information (about:support).
 526
 527 **Compatibility:** Firefox 60, Firefox ESR 60\
 528 **CCK2 Equivalent:** `disableAboutSupport`\
 529 **Preferences Affected:** N/A
 530
 531 #### Windows (GPO)
 532 ```
 533 Software\Policies\Mozilla\Firefox\BlockAboutSupport = 0x1 | 0x0
 534 ```
 535 #### Windows (Intune)
 536 OMA-URI:
 537 ```
 538 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutSupport
 539 ```
 540 Value (string):
 541 ```
 542 <enabled/> or <disabled/>
 543 ```
 544 #### macOS
 545 ```
 546 <dict>
 547   <key>BlockAboutSupport</key>
 548   <true/> | <false/>
 549 </dict>
 550 ```
 551 #### policies.json
 552 ```
 553 {
 554   "policies": {
 555     "BlockAboutSupport": true | false
 556   }
 557 }
 558 ```
 559 ### Bookmarks
 560
 561 Note: [`ManagedBookmarks`](#managedbookmarks) is the new recommended way to add bookmarks. This policy will continue to be supported.
 562
 563 Add bookmarks in either the bookmarks toolbar or menu. Only `Title` and `URL` are required. If `Placement` is not specified, the bookmark will be placed on the toolbar. If `Folder` is specified, it is automatically created and bookmarks with the same folder name are grouped together.
 564
 565 **Compatibility:** Firefox 60, Firefox ESR 60\
 566 **CCK2 Equivalent:** `bookmarks.toolbar`,`bookmarks.menu`\
 567 **Preferences Affected:** N/A
 568
 569 #### Windows (GPO)
 570 ```
 571 Software\Policies\Mozilla\Firefox\Bookmarks\1\Title = "Example"
 572 Software\Policies\Mozilla\Firefox\Bookmarks\1\URL = "https://example.com"
 573 Software\Policies\Mozilla\Firefox\Bookmarks\1\Favicon = "https://example.com/favicon.ico"
 574 Software\Policies\Mozilla\Firefox\Bookmarks\1\Placement = "toolbar" | "menu"
 575 Software\Policies\Mozilla\Firefox\Bookmarks\1\Folder = "FolderName"
 576 ```
 577 #### Windows (Intune)
 578 OMA-URI:
 579 ```
 580 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Bookmarks/Bookmark01
 581 ```
 582 Value (string):
 583 ```
 584 <enabled/>
 585 <data id="BookmarkTitle" value="Example"/>
 586 <data id="BookmarkURL" value="https://example.com"/>
 587 <data id="BookmarkFavicon" value="https://example.com/favicon.ico"/>
 588 <data id="BookmarkPlacement" value="toolbar | menu"/>
 589 <data id="BookmarkFolder" value="FolderName"/>
 590 ```
 591 #### macOS
 592 ```
 593 <dict>
 594   <key>Bookmarks</key>
 595   <array>
 596     <dict>
 597       <key>Title</key>
 598       <string>Example</string>
 599       <key>URL</key>
 600       <string>https://example.com</string>
 601       <key>Favicon</key>
 602       <string>https://example.com/favicon.ico</string>
 603       <key>Placement</key>
 604       <string>toolbar | menu</string>
 605       <key>Folder</key>
 606       <string>FolderName</string>
 607     </dict>
 608   </array>
 609 </dict>
 610 ```
 611 #### policies.json
 612 ```
 613 {
 614   "policies": {
 615     "Bookmarks": [
 616       {
 617         "Title": "Example",
 618         "URL": "https://example.com",
 619         "Favicon": "https://example.com/favicon.ico",
 620         "Placement": "toolbar" | "menu",
 621         "Folder": "FolderName"
 622       }
 623     ]
 624   }
 625 }
 626 ```
 627 ### CaptivePortal
 628 Enable or disable the detection of captive portals.
 629
 630 **Compatibility:** Firefox 67, Firefox ESR 60.7\
 631 **CCK2 Equivalent:** N/A\
 632 **Preferences Affected:** `network.captive-portal-service.enabled`
 633
 634 #### Windows (GPO)
 635 ```
 636 Software\Policies\Mozilla\Firefox\CaptivePortal = 0x1 | 0x0
 637 ```
 638 #### Windows (Intune)
 639 OMA-URI:
 640 ```
 641 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/CaptivePortal
 642 ```
 643 Value (string):
 644 ```
 645 <enabled/> or <disabled/>
 646 ```
 647 #### macOS
 648 ```
 649 <dict>
 650   <key>CaptivePortal</key>
 651   <true/> | <false/>
 652 </dict>
 653 ```
 654 #### policies.json
 655 ```
 656 {
 657   "policies": {
 658     "CaptivePortal": true | false
 659   }
 660 }
 661 ```
 662 ### Certificates
 663
 664 ### Certificates | ImportEnterpriseRoots
 665
 666 Trust certificates that have been added to the operating system certificate store by a user or administrator.
 667
 668 Note: This policy only works on Windows and macOS. For Linux discussion, see [bug 1600509](https://bugzilla.mozilla.org/show_bug.cgi?id=1600509).
 669
 670 See https://support.mozilla.org/kb/setting-certificate-authorities-firefox for more detail.
 671
 672 **Compatibility:** Firefox 60, Firefox ESR 60 (macOS support in Firefox 63, Firefox ESR 68)\
 673 **CCK2 Equivalent:** N/A\
 674 **Preferences Affected:** `security.enterprise_roots.enabled`
 675
 676 #### Windows (GPO)
 677 ```
 678 Software\Policies\Mozilla\Firefox\Certificates\ImportEnterpriseRoots = 0x1 | 0x0
 679 ```
 680 #### Windows (Intune)
 681 OMA-URI:
 682 ```
 683 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Certificates/Certificates_ImportEnterpriseRoots
 684 ```
 685 Value (string):
 686 ```
 687 <enabled/> or <disabled/>
 688 ```
 689 #### macOS
 690 ```
 691 <dict>
 692   <key>Certificates</key>
 693   <dict>
 694     <key>ImportEnterpriseRoots</key>
 695     <true/> | <false/>
 696   </dict>
 697 </dict>
 698 ```
 699 #### policies.json
 700 ```
 701 {
 702   "policies": {
 703     "Certificates": {
 704       "ImportEnterpriseRoots": true | false
 705     }
 706   }
 707 }
 708 ```
 709 ### Certificates | Install
 710
 711 Install certificates into the Firefox certificate store. If only a filename is specified, Firefox searches for the file in the following locations:
 712
 713 - Windows
 714   - %USERPROFILE%\AppData\Local\Mozilla\Certificates
 715   - %USERPROFILE%\AppData\Roaming\Mozilla\Certificates
 716 - macOS
 717   - /Library/Application Support/Mozilla/Certificates
 718   - ~/Library/Application Support/Mozilla/Certificates
 719 - Linux
 720   - /usr/lib/mozilla/certificates
 721   - /usr/lib64/mozilla/certificates
 722   - ~/.mozilla/certificates
 723
 724 Starting with Firefox 65, Firefox 60.5 ESR, a fully qualified path can be used, including UNC paths. You should use the native path style for your operating system. We do not support using %USERPROFILE% or other environment variables on Windows.
 725
 726 If you are specifying the path in the policies.json file on Windows, you need to escape your backslashes (`\\`) which means that for UNC paths, you need to escape both (`\\\\`). If you use group policy, you only need one backslash.
 727
 728 Certificates are installed using the trust string `CT,CT,`.
 729
 730 Binary (DER) and ASCII (PEM) certificates are both supported.
 731
 732 **Compatibility:** Firefox 64, Firefox ESR 64\
 733 **CCK2 Equivalent:** `certs.ca`\
 734 **Preferences Affected:** N/A
 735
 736 #### Windows (GPO)
 737 ```
 738 Software\Policies\Mozilla\Firefox\Certificates\Install\1 = "cert1.der"
 739 Software\Policies\Mozilla\Firefox\Certificates\Install\2 = "C:\Users\username\cert2.pem"
 740 ```
 741 #### Windows (Intune)
 742 OMA-URI:
 743 ```
 744 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Certificates/Certificates_Install
 745 ```
 746 Value (string):
 747 ```
 748 <enabled/>
 749 <data id="Certificates_Install" value="1&#xF000;cert1.der&#xF000;2&#xF000;C:\Users\username\cert2.pem"/>
 750 ```
 751 #### macOS
 752 ```
 753 <dict>
 754   <key>Certificates</key>
 755   <dict>
 756     <key>Install</key>
 757     <array>
 758       <string>cert1.der</string>
 759       <string>/Users/username/cert2.pem</string>
 760     </array>
 761   </dict>
 762 </dict>
 763 ```
 764 #### policies.json
 765 ```
 766 {
 767   "policies": {
 768     "Certificates": {
 769       "Install": ["cert1.der", "/home/username/cert2.pem"]
 770     }
 771   }
 772 }
 773 ```
 774 ### Cookies
 775 Configure cookie preferences.
 776
 777 `Allow` is a list of origins (not domains) where cookies are always allowed. You must include http or https.
 778
 779 `AllowSession` is a list of origins (not domains) where cookies are only allowed for the current session. You must include http or https.
 780
 781 `Block` is a list of origins (not domains) where cookies are always blocked. You must include http or https.
 782
 783 `Default` determines whether cookies are accepted at all.
 784
 785 `AcceptThirdParty` determines how third-party cookies are handled.
 786
 787 `ExpireAtSessionEnd` determines when cookies expire.
 788
 789 `RejectTracker` only rejects cookies for trackers.
 790
 791 `Locked` prevents the user from changing cookie preferences.
 792
 793 **Compatibility:** Firefox 60, Firefox ESR 60 (RejectTracker added in Firefox 63, AllowSession added in Firefox 79/78.1)\
 794 **CCK2 Equivalent:** N/A\
 795 **Preferences Affected:** `network.cookie.cookieBehavior`,`network.cookie.lifetimePolicy`
 796
 797 #### Windows (GPO)
 798 ```
 799 Software\Policies\Mozilla\Firefox\Cookies\Allow\1 = "https://example.com"
 800 Software\Policies\Mozilla\Firefox\Cookies\AllowSession\1 = "https://example.edu"
 801 Software\Policies\Mozilla\Firefox\Cookies\Block\1 = "https://example.org"
 802 Software\Policies\Mozilla\Firefox\Cookies\Default = 0x1 | 0x0
 803 Software\Policies\Mozilla\Firefox\Cookies\AcceptThirdParty = "always" | "never" | "from-visited"
 804 Software\Policies\Mozilla\Firefox\Cookies\ExpireAtSessionEnd = 0x1 | 0x0
 805 Software\Policies\Mozilla\Firefox\Cookies\RejectTracker = 0x1 | 0x0
 806 Software\Policies\Mozilla\Firefox\Cookies\Locked = 0x1 | 0x0
 807 ```
 808 #### Windows (Intune)
 809 OMA-URI:
 810 ```
 811 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Allow
 812 ```
 813 Value (string):
 814 ```
 815 <enabled/>
 816 <data id="Cookies_Allow" value="1&#xF000;https://example.com"/>
 817 ```
 818 OMA-URI:
 819 ```
 820 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_AllowSession
 821 ```
 822 Value (string):
 823 ```
 824 <enabled/>
 825 <data id="Cookies_Allow" value="1&#xF000;https://example.edu"/>
 826 ```
 827 OMA-URI:
 828 ```
 829 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Block
 830 ```
 831 Value (string):
 832 ```
 833 <enabled/>
 834 <data id="Cookies_Block" value="1&#xF000;https://example.org"/>
 835 ```
 836 OMA-URI:
 837 ```
 838 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Default
 839 ```
 840 Value (string):
 841 ```
 842 <enabled/> or <disabled/>
 843 ```
 844 OMA-URI:
 845 ```
 846 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_AcceptThirdParty
 847 ```
 848 Value (string):
 849 ```
 850 <enabled/>
 851 <data id="Cookies_AcceptThirdParty" value="always | never | from-visited"/>
 852 ```
 853 OMA-URI:
 854 ```
 855 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_ExpireAtSessionEnd
 856 ```
 857 Value (string):
 858 ```
 859 <enabled/> or <disabled/>
 860 ```
 861 OMA-URI:
 862 ```
 863 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_RejectTracker
 864 ```
 865 Value (string):
 866 ```
 867 <enabled/> or <disabled/>
 868 ```
 869 OMA-URI:
 870 ```
 871 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Locked
 872 ```
 873 Value (string):
 874 ```
 875 <enabled/> or <disabled/>
 876 ```
 877 #### macOS
 878 ```
 879 <dict>
 880   <key>Cookies</key>
 881   <dict>
 882     <key>Allow</key>
 883     <array>
 884       <string>http://example.com</string>
 885     </array>
 886     <key>AllowSession</key>
 887     <array>
 888       <string>http://example.edu</string>
 889     </array>
 890     <key>Block</key>
 891     <array>
 892       <string>http://example.org</string>
 893     </array>
 894     <key>Default</key>
 895     <true/> | <false/>
 896     <key>AcceptThirdParty</key>
 897     <string>always | never | from-visited</string>
 898     <key>ExpireAtSessionEnd</key>
 899     <true/> | <false/>
 900     <key>RejectTracker</key>
 901     <true/> | <false/>
 902     <key>Locked</key>
 903     <true/> | <false/>
 904   </dict>
 905 </dict>
 906 ```
 907 #### policies.json
 908 ```
 909 {
 910   "policies": {
 911     "Cookies": {
 912       "Allow": ["http://example.org/"],
 913       "AllowSession": ["http://example.edu/"],
 914       "Block": ["http://example.edu/"],
 915       "Default": true | false,
 916       "AcceptThirdParty": "always" | "never" | "from-visited",
 917       "ExpireAtSessionEnd": true | false,
 918       "RejectTracker": true | false,
 919       "Locked": true | false
 920     }
 921   }
 922 }
 923 ```
 924 ### DisableSetDesktopBackground
 925 Remove the "Set As Desktop Background..." menuitem when right clicking on an image.
 926
 927 **Compatibility:** Firefox 60, Firefox ESR 60\
 928 **CCK2 Equivalent:** `removeSetDesktopBackground`\
 929 **Preferences Affected:** N/A
 930
 931 #### Windows (GPO)
 932 ```
 933 Software\Policies\Mozilla\Firefox\DisableSetDesktopBackground = 0x1 | 0x0
 934 ```
 935 #### Windows (Intune)
 936 OMA-URI:
 937 ```
 938 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSetDesktopBackground
 939 ```
 940 Value (string):
 941 ```
 942 <enabled/> or <disabled/>
 943 ```
 944 #### macOS
 945 ```
 946 <dict>
 947   <key>DisableSetDesktopBackground</key>
 948   <true/> | <false/>
 949 </dict>
 950 ```
 951 #### policies.json
 952 ```
 953 {
 954   "policies": {
 955     "DisableSetDesktopBackground": true | false
 956   }
 957 }
 958 ```
 959 ### DisableMasterPasswordCreation
 960 Remove the master password functionality.
 961
 962 If this value is true, it works the same as setting [`PrimaryPassword`](#primarypassword) to false and removes the primary password functionality.
 963
 964 If both DisableMasterPasswordCreation and PrimaryPassword are used, DisableMasterPasswordCreation takes precedent.
 965
 966 **Compatibility:** Firefox 60, Firefox ESR 60\
 967 **CCK2 Equivalent:** `noMasterPassword`\
 968 **Preferences Affected:** N/A
 969
 970 #### Windows (GPO)
 971 ```
 972 Software\Policies\Mozilla\Firefox\DisableMasterPasswordCreation = 0x1 | 0x0
 973 ```
 974 #### Windows (Intune)
 975 OMA-URI:
 976 ```
 977 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableMasterPasswordCreation
 978 ```
 979 Value (string):
 980 ```
 981 <enabled/> or <disabled/>
 982 ```
 983 #### macOS
 984 ```
 985 <dict>
 986   <key>DisableMasterPasswordCreation</key>
 987   <true/> | <false/>
 988 </dict>
 989 ```
 990 #### policies.json
 991 ```
 992 {
 993   "policies": {
 994     "DisableMasterPasswordCreation": true | false
 995   }
 996 }
 997 ```
 998 ### DisableAppUpdate
 999 Turn off application updates within Firefox.
1000
1001 **Compatibility:** Firefox 60, Firefox ESR 60\
1002 **CCK2 Equivalent:** `disableFirefoxUpdates`\
1003 **Preferences Affected:** N/A
1004
1005 #### Windows (GPO)
1006 ```
1007 Software\Policies\Mozilla\Firefox\DisableAppUpdate = 0x1 | 0x0
1008 ```
1009 #### Windows (Intune)
1010 OMA-URI:
1011 ```
1012 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableAppUpdate
1013 ```
1014 Value (string):
1015 ```
1016 <enabled/> or <disabled/>
1017 ```
1018 #### macOS
1019 ```
1020 <dict>
1021   <key>DisableAppUpdate</key>
1022   <true/> | <false/>
1023 </dict>
1024 ```
1025 #### policies.json
1026 ```
1027 {
1028   "policies": {
1029     "DisableAppUpdate": true | false
1030   }
1031 }
1032 ```
1033 ### DisableBuiltinPDFViewer
1034 Disable the built in PDF viewer. PDF files are downloaded and sent externally.
1035
1036 **Compatibility:** Firefox 60, Firefox ESR 60\
1037 **CCK2 Equivalent:** `disablePDFjs`\
1038 **Preferences Affected:** `pdfjs.disabled`
1039
1040 #### Windows (GPO)
1041 ```
1042 Software\Policies\Mozilla\Firefox\DisableBuiltinPDFViewer = 0x1 | 0x0
1043 ```
1044 #### Windows (Intune)
1045 OMA-URI:
1046 ```
1047 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableBuiltinPDFViewer
1048 ```
1049 Value (string):
1050 ```
1051 <enabled/> or <disabled/>
1052 ```
1053 #### macOS
1054 ```
1055 <dict>
1056   <key>DisableBuiltinPDFViewer</key>
1057   <true/> | <false/>
1058 </dict>
1059 ```
1060 #### policies.json
1061 ```
1062 {
1063   "policies": {
1064     "DisableBuiltinPDFViewer": true | false
1065   }
1066 }
1067 ```
1068 ### DisabledCiphers
1069 Disable specific cryptographic ciphers.
1070
1071 **Preferences Affected:** `security.ssl3.dhe_rsa_aes_128_sha`, `security.ssl3.dhe_rsa_aes_256_sha`, `security.ssl3.ecdhe_ecdsa_aes_128_gcm_sha256`, `security.ssl3.ecdhe_rsa_aes_128_gcm_sha256`, `security.ssl3.ecdhe_rsa_aes_128_sha`, `security.ssl3.ecdhe_rsa_aes_256_sha`, `security.ssl3.rsa_aes_128_gcm_sha256`, `security.ssl3.rsa_aes_128_sha`, `security.ssl3.rsa_aes_256_gcm_sha384`, `security.ssl3.rsa_aes_256_sha`, `security.ssl3.rsa_des_ede3_sha`
1072
1073 ---
1074 **Note:**
1075
1076 This policy was updated in Firefox 78 to allow enabling ciphers as well. Setting the value to true disables the cipher, setting the value to false enables the cipher. Previously setting the value to true or false disabled the cipher.
1077
1078 ---
1079 **Compatibility:** Firefox 76, Firefox ESR 68.8 (TLS_RSA_WITH_AES_128_GCM_SHA256 and TLS_RSA_WITH_AES_256_GCM_SHA384 were added in Firefox 78)\
1080 **CCK2 Equivalent:** N/A\
1081 **Preferences Affected:** N/A
1082
1083 #### Windows (GPO)
1084 ```
1085 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_DHE_RSA_WITH_AES_128_CBC_SHA = 0x1 | 0x0
1086 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_DHE_RSA_WITH_AES_256_CBC_SHA = 0x1 | 0x0
1087 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA = 0x1 | 0x0
1088 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA = 0x1 | 0x0
1089 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 = 0x1 | 0x0
1090 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 = 0x1 | 0x0
1091 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_RSA_WITH_AES_128_CBC_SHA = 0x1 | 0x0
1092 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_RSA_WITH_AES_256_CBC_SHA = 0x1 | 0x0
1093 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_RSA_WITH_3DES_EDE_CBC_SHA = 0x1 | 0x0
1094 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_RSA_WITH_AES_128_GCM_SHA256 = 0x1 | 0x0
1095 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_RSA_WITH_AES_256_GCM_SHA384 = 0x1 | 0x0
1096 ```
1097 #### Windows (Intune)
1098 OMA-URI:
1099 ```
1100 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_DHE_RSA_WITH_AES_128_CBC_SHA
1101 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_DHE_RSA_WITH_AES_256_CBC_SHA
1102 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
1103 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
1104 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
1105 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
1106 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_RSA_WITH_AES_128_CBC_SHA
1107 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_RSA_WITH_AES_256_CBC_SHA
1108 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_RSA_WITH_3DES_EDE_CBC_SHA
1109 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_RSA_WITH_AES_128_GCM_SHA256
1110 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_RSA_WITH_AES_256_GCM_SHA384
1111 ```
1112 Value (string):
1113 ```
1114 <enabled/> or <disabled/>
1115 ```
1116 #### macOS
1117 ```
1118 <dict>
1119   <key>DisabledCiphers</key>
1120     <dict>
1121       <key>TLS_DHE_RSA_WITH_AES_128_CBC_SHA</key>
1122       <true/> | <false/>
1123       <key>TLS_DHE_RSA_WITH_AES_256_CBC_SHA</key>
1124       <true/> | <false/>
1125       <key>TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA</key>
1126       <true/> | <false/>
1127       <key>TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA</key>
1128       <true/> | <false/>
1129       <key>TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256</key>
1130       <true/> | <false/>
1131       <key>TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256</key>
1132       <true/> | <false/>
1133       <key>TLS_RSA_WITH_AES_128_CBC_SHA</key>
1134       <true/> | <false/>
1135       <key>TLS_RSA_WITH_AES_256_CBC_SHA</key>
1136       <true/> | <false/>
1137       <key>TLS_RSA_WITH_3DES_EDE_CBC_SHA</key>
1138       <true/> | <false/>
1139       <key>TLS_RSA_WITH_AES_128_GCM_SHA256</key>
1140       <true/> | <false/>
1141       <key>TLS_RSA_WITH_AES_256_GCM_SHA384</key>
1142       <true/> | <false/>
1143     </dict>
1144 </dict>
1145 ```
1146 #### policies.json
1147 ```
1148 {
1149   "policies": {
1150     "DisabledCiphers": {
1151       "TLS_DHE_RSA_WITH_AES_128_CBC_SHA": true | false,
1152       "TLS_DHE_RSA_WITH_AES_256_CBC_SHA": true | false,
1153       "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA": true | false,
1154       "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA": true | false,
1155       "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256": true | false,
1156       "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256": true | false,
1157       "TLS_RSA_WITH_AES_128_CBC_SHA": true | false,
1158       "TLS_RSA_WITH_AES_256_CBC_SHA": true | false,
1159       "TLS_RSA_WITH_3DES_EDE_CBC_SHA": true | false,
1160       "TLS_RSA_WITH_AES_128_GCM_SHA256": true | false,
1161       "TLS_RSA_WITH_AES_256_GCM_SHA384": true | false
1162     }
1163   }
1164 }
1165 ```
1166 ### DisableDefaultBrowserAgent
1167 Prevent the default browser agent from taking any actions. Only applicable to Windows; other platforms don’t have the agent.
1168
1169 The browser agent is a Windows-only scheduled task which runs in the background to collect and submit data about the browser that the user has set as their OS default. More information is available [here](https://firefox-source-docs.mozilla.org/toolkit/mozapps/defaultagent/default-browser-agent/index.html).
1170
1171 **Compatibility:** Firefox 75, Firefox ESR 68.7 (Windows only)\
1172 **CCK2 Equivalent:** N/A\
1173 **Preferences Affected:** N/A
1174
1175 #### Windows (GPO)
1176 ```
1177 Software\Policies\Mozilla\Firefox\DisableDefaultBrowserAgent = 0x1 | 0x0
1178 ```
1179 #### Windows (Intune)
1180 OMA-URI:
1181 ```
1182 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableDefaultBrowserAgent
1183 ```
1184 Value (string):
1185 ```
1186 <enabled/> or <disabled/>
1187 ```
1188 #### policies.json
1189 ```
1190 {
1191   "policies": {
1192     "DisableDefaultBrowserAgent": true | false
1193   }
1194 }
1195 ```
1196 ### DisableDeveloperTools
1197 Remove access to all developer tools.
1198
1199 **Compatibility:** Firefox 60, Firefox ESR 60\
1200 **CCK2 Equivalent:** `removeDeveloperTools`\
1201 **Preferences Affected:** `devtools.policy.disabled`
1202
1203 #### Windows (GPO)
1204 ```
1205 Software\Policies\Mozilla\Firefox\DisableDeveloperTools = 0x1 | 0x0`
1206 ```
1207 #### Windows (Intune)
1208 OMA-URI:
1209 ```
1210 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableDeveloperTools
1211 ```
1212 Value (string):
1213 ```
1214 <enabled/> or <disabled/>
1215 ```
1216 #### macOS
1217 ```
1218 <dict>
1219   <key>DisableDeveloperTools</key>
1220   <true/> | <false/>
1221 </dict>
1222 ```
1223 #### policies.json
1224 ```
1225 {
1226   "policies": {
1227     "DisableDeveloperTools": true | false
1228   }
1229 }
1230 ```
1231 ### DisableFeedbackCommands
1232 Disable the menus for reporting sites (Submit Feedback, Report Deceptive Site).
1233
1234 **Compatibility:** Firefox 60, Firefox ESR 60\
1235 **CCK2 Equivalent:** N/A\
1236 **Preferences Affected:** N/A
1237
1238 #### Windows (GPO)
1239 ```
1240 Software\Policies\Mozilla\Firefox\DisableFeedbackCommands = 0x1 | 0x0
1241 ```
1242 #### Windows (Intune)
1243 OMA-URI:
1244 ```
1245 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFeedbackCommands
1246 ```
1247 Value (string):
1248 ```
1249 <enabled/> or <disabled/>
1250 ```
1251 #### macOS
1252 ```
1253 <dict>
1254   <key>DisableFeedbackCommands</key>
1255   <true/> | <false/>
1256 </dict>
1257 ```
1258 #### policies.json
1259 ```
1260 {
1261   "policies": {
1262     "DisableFeedbackCommands": true | false
1263   }
1264 }
1265 ```
1266 ### DisableFirefoxScreenshots
1267 Remove access to Firefox Screenshots.
1268
1269 **Compatibility:** Firefox 60, Firefox ESR 60\
1270 **CCK2 Equivalent:** N/A\
1271 **Preferences Affected:** `extensions.screenshots.disabled`
1272
1273 #### Windows (GPO)
1274 ```
1275 Software\Policies\Mozilla\Firefox\DisableFirefoxScreenshots = 0x1 | 0x0
1276 ```
1277 #### Windows (Intune)
1278 OMA-URI:
1279 ```
1280 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxScreenshots
1281 ```
1282 Value (string):
1283 ```
1284 <enabled/> or <disabled/>
1285 ```
1286 #### macOS
1287 ```
1288 <dict>
1289   <key>DisableFirefoxScreenshots</key>
1290   <true/> | <false/>
1291 </dict>
1292 ```
1293 #### policies.json
1294 ```
1295 {
1296   "policies": {
1297     "DisableFirefoxScreenshots": true | false
1298   }
1299 }
1300 ```
1301 ### DisableFirefoxAccounts
1302 Disable Firefox Accounts integration (Sync).
1303
1304 **Compatibility:** Firefox 60, Firefox ESR 60\
1305 **CCK2 Equivalent:** `disableSync`\
1306 **Preferences Affected:** `identity.fxaccounts.enabled`
1307
1308 #### Windows (GPO)
1309 ```
1310 Software\Policies\Mozilla\Firefox\DisableFirefoxAccounts = 0x1 | 0x0
1311 ```
1312 #### Windows (Intune)
1313 OMA-URI:
1314 ```
1315 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxAccounts
1316 ```
1317 Value (string):
1318 ```
1319 <enabled/> or <disabled/>
1320 ```
1321 #### macOS
1322 ```
1323 <dict>
1324   <key>DisableFirefoxAccounts</key>
1325   <true/> | <false/>
1326 </dict>
1327 ```
1328 #### policies.json
1329 ```
1330 {
1331   "policies": {
1332     "DisableFirefoxAccounts": true | false
1333   }
1334 }
1335 ```
1336 ### DisableFirefoxStudies
1337 Disable Firefox studies (Shield).
1338
1339 **Compatibility:** Firefox 60, Firefox ESR 60\
1340 **CCK2 Equivalent:** N/A\
1341 **Preferences Affected:** N/A
1342
1343 #### Windows (GPO)
1344 ```
1345 Software\Policies\Mozilla\Firefox\DisableFirefoxStudies = 0x1 | 0x0
1346 ```
1347 #### Windows (Intune)
1348 OMA-URI:
1349 ```
1350 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxStudies
1351 ```
1352 Value (string):
1353 ```
1354 <enabled/> or <disabled/>
1355 ```
1356 #### macOS
1357 ```
1358 <dict>
1359   <key>DisableFirefoxStudies</key>
1360   <true/> | <false/>
1361 </dict>
1362 ```
1363 #### policies.json
1364 ```
1365 {
1366   "policies": {
1367     "DisableFirefoxStudies": true | false
1368   }
1369 }
1370 ```
1371 ### DisableForgetButton
1372 Disable the "Forget" button.
1373
1374 **Compatibility:** Firefox 60, Firefox ESR 60\
1375 **CCK2 Equivalent:** `disableForget`\
1376 **Preferences Affected:** N/A
1377
1378 #### Windows (GPO)
1379 ```
1380 Software\Policies\Mozilla\Firefox\DisableForgetButton = 0x1 | 0x0
1381 ```
1382 #### Windows (Intune)
1383 OMA-URI:
1384 ```
1385 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableForgetButton
1386 ```
1387 Value (string):
1388 ```
1389 <enabled/> or <disabled/>
1390 ```
1391 #### macOS
1392 ```
1393 <dict>
1394   <key>DisableForgetButton</key>
1395   <true/> | <false/>
1396 </dict>
1397 ```
1398 #### policies.json
1399 ```
1400 {
1401   "policies": {
1402     "DisableForgetButton": true | false
1403   }
1404 }
1405 ```
1406 ### DisableFormHistory
1407 Turn off saving information on web forms and the search bar.
1408
1409 **Compatibility:** Firefox 60, Firefox ESR 60\
1410 **CCK2 Equivalent:** `disableFormFill`\
1411 **Preferences Affected:** ` browser.formfill.enable`
1412
1413 #### Windows (GPO)
1414 ```
1415 Software\Policies\Mozilla\Firefox\DisableFormHistory = 0x1 | 0x0
1416 ```
1417 #### Windows (Intune)
1418 OMA-URI:
1419 ```
1420 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFormHistory
1421 ```
1422 Value (string):
1423 ```
1424 <enabled/> or <disabled/>
1425 ```
1426 #### macOS
1427 ```
1428 <dict>
1429   <key>DisableFormHistory</key>
1430   <true/> | <false/>
1431 </dict>
1432 ```
1433 #### policies.json
1434 ```
1435 {
1436   "policies": {
1437     "DisableFormHistory": true | false
1438   }
1439 }
1440 ```
1441 ### DisablePasswordReveal
1442 Do not allow passwords to be shown in saved logins
1443
1444 **Compatibility:** Firefox 71, Firefox ESR 68.3\
1445 **CCK2 Equivalent:** N/A
1446 **Preferences Affected:** N/A
1447
1448 #### Windows (GPO)
1449 ```
1450 Software\Policies\Mozilla\Firefox\DisablePasswordReveal = 0x1 | 0x0
1451 ```
1452 #### Windows (Intune)
1453 OMA-URI:
1454 ```
1455 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePasswordReveal
1456 ```
1457 Value (string):
1458 ```
1459 <enabled/> or <disabled/>
1460 ```
1461 #### macOS
1462 ```
1463 <dict>
1464   <key>DisablePasswordReveal</key>
1465   <true/> | <false/>
1466 </dict>
1467 ```
1468 #### policies.json
1469 ```
1470 {
1471   "policies": {
1472     "DisablePasswordReveal": true | false
1473   }
1474 }
1475 ```
1476 ### DisablePocket
1477 Remove Pocket in the Firefox UI. It does not remove it from the new tab page.
1478
1479 **Compatibility:** Firefox 60, Firefox ESR 60\
1480 **CCK2 Equivalent:** `disablePocket`\
1481 **Preferences Affected:** `extensions.pocket.enabled`
1482
1483 #### Windows (GPO)
1484 ```
1485 Software\Policies\Mozilla\Firefox\DisablePocket = 0x1 | 0x0
1486 ```
1487 #### Windows (Intune)
1488 OMA-URI:
1489 ```
1490 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePocket
1491 ```
1492 Value (string):
1493 ```
1494 <enabled/> or <disabled/>
1495 ```
1496 #### macOS
1497 ```
1498 <dict>
1499   <key>DisablePocket</key>
1500   <true/> | <false/>
1501 </dict>
1502 ```
1503 #### policies.json
1504 ```
1505 {
1506   "policies": {
1507     "DisablePocket": true | false
1508   }
1509 }
1510 ```
1511 ### DisablePrivateBrowsing
1512 Remove access to private browsing.
1513
1514 **Compatibility:** Firefox 60, Firefox ESR 60\
1515 **CCK2 Equivalent:** `disablePrivateBrowsing`\
1516 **Preferences Affected:** N/A
1517
1518 #### Windows (GPO)
1519 ```
1520 Software\Policies\Mozilla\Firefox\DisablePrivateBrowsing = 0x1 | 0x0
1521 ```
1522 #### Windows (Intune)
1523 OMA-URI:
1524 ```
1525 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePrivateBrowsing
1526 ```
1527 Value (string):
1528 ```
1529 <enabled/> or <disabled/>
1530 ```
1531 #### macOS
1532 ```
1533 <dict>
1534   <key>DisablePrivateBrowsing</key>
1535   <true/> | <false/>
1536 </dict>
1537 ```
1538 #### policies.json
1539 ```
1540 {
1541   "policies": {
1542     "DisablePrivateBrowsing": true | false
1543   }
1544 }
1545 ```
1546 ### DisableProfileImport
1547 Disables the "Import data from another browser" option in the bookmarks window.
1548
1549 **Compatibility:** Firefox 60, Firefox ESR 60\
1550 **CCK2 Equivalent:** N/A\
1551 **Preferences Affected:** N/A
1552
1553 #### Windows (GPO)
1554 ```
1555 Software\Policies\Mozilla\Firefox\DisableProfileImport = 0x1 | 0x0
1556 ```
1557 #### Windows (Intune)
1558 OMA-URI:
1559 ```
1560 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableProfileImport
1561 ```
1562 Value (string):
1563 ```
1564 <enabled/> or <disabled/>
1565 ```
1566 #### macOS
1567 ```
1568 <dict>
1569   <key>DisableProfileImport</key>
1570   <true/> | <false/>
1571 </dict>
1572 ```
1573 #### policies.json
1574 ```
1575 {
1576   "policies": {
1577     "DisableProfileImport": true | false
1578   }
1579 }
1580 ```
1581 ### DisableProfileRefresh
1582 Disable the Refresh Firefox button on about:support and support.mozilla.org, as well as the prompt that displays offering to refresh Firefox when you haven't used it in a while.
1583
1584 **Compatibility:** Firefox 60, Firefox ESR 60\
1585 **CCK2 Equivalent:** `disableResetFirefox`\
1586 **Preferences Affected:** `browser.disableResetPrompt`
1587
1588 #### Windows (GPO)
1589 ```
1590 Software\Policies\Mozilla\Firefox\DisableProfileRefresh = 0x1 | 0x0
1591 ```
1592 #### Windows (Intune)
1593 OMA-URI:
1594 ```
1595 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableProfileRefresh
1596 ```
1597 Value (string):
1598 ```
1599 <enabled/> or <disabled/>
1600 ```
1601 #### macOS
1602 ```
1603 <dict>
1604   <key>DisableProfileRefresh</key>
1605   <true/> | <false/>
1606 </dict>
1607 ```
1608 #### policies.json
1609 ```
1610 {
1611   "policies": {
1612     "DisableProfileRefresh": true | false
1613   }
1614 }
1615 ```
1616 ### DisableSafeMode
1617 Disable safe mode within the browser.
1618
1619 On Windows, this disables safe mode via the command line as well.
1620
1621 **Compatibility:** Firefox 60, Firefox ESR 60 (Windows, macOS)\
1622 **CCK2 Equivalent:** `disableSafeMode`\
1623 **Preferences Affected:** N/A
1624
1625 #### Windows (GPO)
1626 ```
1627 Software\Policies\Mozilla\Firefox\DisableSafeMode = 0x1 | 0x0
1628 ```
1629 #### Windows (Intune)
1630 OMA-URI:
1631 ```
1632 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSafeMode
1633 ```
1634 Value (string):
1635 ```
1636 <enabled/> or <disabled/>
1637 ```
1638 #### macOS
1639 ```
1640 <dict>
1641   <key>DisableSafeMode</key>
1642   <true/> | <false/>
1643 </dict>
1644 ```
1645 #### policies.json
1646 ```
1647 {
1648   "policies": {
1649     "DisableSafeMode": true | false
1650   }
1651 }
1652 ```
1653 ### DisableSecurityBypass
1654 Prevent the user from bypassing security in certain cases.
1655
1656 `InvalidCertificate` prevents adding an exception when an invalid certificate is shown.
1657
1658 `SafeBrowsing` prevents selecting "ignore the risk" and visiting a harmful site anyway.
1659
1660 **Compatibility:** Firefox 60, Firefox ESR 60\
1661 **CCK2 Equivalent:** N/A\
1662 **Preferences Affected:** `security.certerror.hideAddException`,`browser.safebrowsing.allowOverride`
1663
1664 #### Windows (GPO)
1665 ```
1666 Software\Policies\Mozilla\Firefox\DisableSecurityBypass\InvalidCertificate = 0x1 | 0x0
1667 Software\Policies\Mozilla\Firefox\DisableSecurityBypass\SafeBrowsing = 0x1 | 0x0
1668 ```
1669 #### Windows (Intune)
1670 OMA-URI:
1671 ```
1672 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/P_DisableSecurityBypass_InvalidCertificate
1673 ```
1674 Value (string):
1675 ```
1676 <enabled/> or <disabled/>
1677 ```
1678 OMA-URI:
1679 ```
1680 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/P_DisableSecurityBypass_SafeBrowsing
1681 ```
1682 Value (string):
1683 ```
1684 <enabled/> or <disabled/>
1685 ```
1686
1687 #### macOS
1688 ```
1689 <dict>
1690   <key>DisableSecurityBypass</key>
1691   <dict>
1692     <key>InvalidCertificate</key>
1693     <true/> | <false/>
1694     <key>SafeBrowsing</key>
1695     <true/> | <false/>
1696   </dict>
1697 </dict>
1698 ```
1699 #### policies.json
1700 ```
1701 {
1702   "policies": {
1703     "DisableSecurityBypass": {
1704       "InvalidCertificate": true | false,
1705       "SafeBrowsing": true | false
1706     }
1707   }
1708 }
1709 ```
1710 ### DisableSystemAddonUpdate
1711 Prevent system add-ons from being installed or update.
1712
1713 **Compatibility:** Firefox 60, Firefox ESR 60\
1714 **CCK2 Equivalent:** N/A\
1715 **Preferences Affected:** N/A
1716
1717 #### Windows (GPO)
1718 ```
1719 Software\Policies\Mozilla\Firefox\DisableSystemAddonUpdate = 0x1 | 0x0
1720 ```
1721 #### Windows (Intune)
1722 OMA-URI:
1723 ```
1724 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSystemAddonUpdate
1725 ```
1726 Value (string):
1727 ```
1728 <enabled/> or <disabled/>
1729 ```
1730 #### macOS
1731 ```
1732 <dict>
1733   <key>DisableSystemAddonUpdate</key>
1734   <true/> | <false/>
1735 </dict>
1736 ```
1737 #### policies.json
1738 ```
1739 {
1740   "policies": {
1741     "DisableSystemAddonUpdate": true | false
1742   }
1743 }
1744 ```
1745 ### DisableTelemetry
1746 Prevent the upload of telemetry data.
1747
1748 As of Firefox 83 and Firefox ESR 78.5, local storage of telemetry data is disabled as well.
1749
1750 Mozilla recommends that you do not disable telemetry. Information collected through telemetry helps us build a better product for businesses like yours.
1751
1752 **Compatibility:** Firefox 60, Firefox ESR 60\
1753 **CCK2 Equivalent:** `disableTelemetry`\
1754 **Preferences Affected:** `datareporting.healthreport.uploadEnabled,datareporting.policy.dataSubmissionEnabled,toolkit.telemetry.archive.enabled`
1755
1756 #### Windows (GPO)
1757 ```
1758 Software\Policies\Mozilla\Firefox\DisableTelemetry = 0x1 | 0x0
1759 ```
1760 #### Windows (Intune)
1761 OMA-URI:
1762 ```
1763 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableTelemetry
1764 ```
1765 Value (string):
1766 ```
1767 <enabled/> or <disabled/>
1768 ```
1769 #### macOS
1770 ```
1771 <dict>
1772   <key>DisableTelemetry</key>
1773   <true/> | <false/>
1774 </dict>
1775 ```
1776 #### policies.json
1777 ```
1778 {
1779   "policies": {
1780     "DisableTelemetry": true | false
1781   }
1782 }
1783 ```
1784 ### DisplayBookmarksToolbar
1785 Set the initial state of the bookmarks toolbar. A user can still hide it and it will stay hidden.
1786
1787 **Compatibility:** Firefox 60, Firefox ESR 60\
1788 **CCK2 Equivalent:** `displayBookmarksToolbar`\
1789 **Preferences Affected:** N/A
1790
1791 #### Windows (GPO)
1792 ```
1793 Software\Policies\Mozilla\Firefox\DisplayBookmarksToolbar = 0x1 | 0x0
1794 ```
1795 #### Windows (Intune)
1796 OMA-URI:
1797 ```
1798 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisplayBookmarksToolbar
1799 ```
1800 Value (string):
1801 ```
1802 <enabled/> or <disabled/>
1803 ```
1804 #### macOS
1805 ```
1806 <dict>
1807   <key>DisplayBookmarksToolbar</key>
1808   <true/> | <false/>
1809 </dict>
1810 ```
1811 #### policies.json
1812 ```
1813 {
1814   "policies": {
1815     "DisplayBookmarksToolbar": true | false
1816   }
1817 }
1818 ```
1819 ### DisplayMenuBar (Deprecated)
1820 Set the initial state of the menubar. A user can still hide it and it will stay hidden.
1821
1822 **Compatibility:** Firefox 60, Firefox ESR 60 (Windows, some Linux)\
1823 **CCK2 Equivalent:** `displayMenuBar`\
1824 **Preferences Affected:** N/A
1825
1826 #### Windows (GPO)
1827 ```
1828 Software\Policies\Mozilla\Firefox\DisplayMenuBar = 0x1 | 0x0
1829 ```
1830 #### macOS
1831 ```
1832 <dict>
1833   <key>DisplayMenuBar</key>
1834   <true/> | <false/>
1835 </dict>
1836 ```
1837 #### policies.json
1838 ```
1839 {
1840   "policies": {
1841     "DisplayMenuBar": true | false
1842   }
1843 }
1844 ```
1845 ### DisplayMenuBar
1846 Set the state of the menubar.
1847
1848 `always` means the menubar is shown and cannot be hidden.
1849
1850 `never` means the menubar is hidden and cannot be shown.
1851
1852 `default-on` means the menubar is on by default but can be hidden.
1853
1854 `default-off` means the menubar is off by default but can be shown.
1855
1856 **Compatibility:** Firefox 73, Firefox ESR 68.5 (Windows, some Linux)\
1857 **CCK2 Equivalent:** `displayMenuBar`\
1858 **Preferences Affected:** N/A
1859
1860 #### Windows (GPO)
1861 ```
1862 Software\Policies\Mozilla\Firefox\DisplayMenuBar = "always", "never", "default-on", "default-off"
1863 ```
1864 #### Windows (Intune)
1865 OMA-URI:
1866 ```
1867 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisplayMenuBar_Enum
1868 ```
1869 Value (string):
1870 ```
1871 <enabled/>
1872 <data id="DisplayMenuBar" value="always | never | default-on | default-off"/>
1873 ```
1874 #### macOS
1875 ```
1876 <dict>
1877   <key>DisplayMenuBar</key>
1878   <string>always | never | default-on | default-off</string>
1879 </dict>
1880 ```
1881 #### policies.json
1882 ```
1883 {
1884   "policies": {
1885     "DisplayMenuBar": "always", "never", "default-on", "default-off"
1886   }
1887 }
1888 ```
1889 ### DNSOverHTTPS
1890 Configure DNS over HTTPS.
1891
1892 `Enabled` determines whether DNS over HTTPS is enabled
1893
1894 `ProviderURL` is a URL to another provider.
1895
1896 `Locked` prevents the user from changing DNS over HTTPS preferences.
1897
1898 `ExcludedDomains` excludes domains from DNS over HTTPS.
1899
1900 **Compatibility:** Firefox 63, Firefox ESR 68 (ExcludedDomains added in 75/68.7)\
1901 **CCK2 Equivalent:** N/A\
1902 **Preferences Affected:** `network.trr.mode`,`network.trr.uri`
1903
1904 #### Windows (GPO)
1905 ```
1906 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\Enabled = 0x1 | 0x0
1907 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\ProviderURL = "URL_TO_ALTERNATE_PROVIDER"
1908 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\Locked = 0x1 | 0x0
1909 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\ExcludedDomains\1 = "example.com"
1910 ```
1911 #### Windows (Intune)
1912 OMA-URI:
1913 ```
1914 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_Enabled
1915 ```
1916 Value (string):
1917 ```
1918 <enabled/> or <disabled/>
1919 ```
1920 OMA-URI:
1921 ```
1922 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_ProviderURL
1923 ```
1924 Value (string):
1925 ```
1926 <enabled/>
1927 <data id="String" value="URL_TO_ALTERNATE_PROVIDER"/>
1928 ```
1929 OMA-URI:
1930 ```
1931 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_Locked
1932 ```
1933 Value (string):
1934 ```
1935 <enabled/> or <disabled/>
1936 ```
1937 OMA-URI:
1938 ```
1939 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_ExcludedDomains
1940 ```
1941 Value (string):
1942 ```
1943 <enabled/>
1944 <data id="List" value="1&#xF000;example.com"/>
1945 ```
1946 #### macOS
1947 ```
1948 <dict>
1949   <key>DNSOverHTTPS</key>
1950   <dict>
1951     <key>Enabled</key>
1952     <true/> | <false/>
1953     <key>ProviderURL</key>
1954     <string>URL_TO_ALTERNATE_PROVIDER</string>
1955     <key>Locked</key>
1956     <true/> | <false/>
1957     <key>ExcludedDomains</key>
1958     <array>
1959       <string>example.com</string>
1960     </array>
1961   </dict>
1962 </dict>
1963 ```
1964 #### policies.json
1965 ```
1966 {
1967   "policies": {
1968     "DNSOverHTTPS": {
1969       "Enabled":  true | false,
1970       "ProviderURL": "URL_TO_ALTERNATE_PROVIDER",
1971       "Locked": true | false,
1972       "ExcludedDomains": ["example.com"]
1973     }
1974   }
1975 }
1976 ```
1977 ### DontCheckDefaultBrowser
1978 Don't check if Firefox is the default browser at startup.
1979
1980 **Compatibility:** Firefox 60, Firefox ESR 60\
1981 **CCK2 Equivalent:** `dontCheckDefaultBrowser`\
1982 **Preferences Affected:** `browser.shell.checkDefaultBrowser`
1983
1984 #### Windows (GPO)
1985 ```
1986 Software\Policies\Mozilla\Firefox\DontCheckDefaultBrowser = 0x1 | 0x0
1987 ```
1988 #### Windows (Intune)
1989 OMA-URI:
1990 ```
1991 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DontCheckDefaultBrowser
1992 ```
1993 Value (string):
1994 ```
1995 <enabled/> or <disabled/>
1996 ```
1997 #### macOS
1998 ```
1999 <dict>
2000   <key>DontCheckDefaultBrowser</key>
2001   <true/> | <false/>
2002 </dict>
2003 ```
2004 #### policies.json
2005 ```
2006 {
2007   "policies": {
2008     "DontCheckDefaultBrowser": true | false
2009   }
2010 }
2011 ```
2012 ### DefaultDownloadDirectory
2013 Set the default download directory.
2014
2015 You can use ${home} for the native home directory.
2016
2017 **Compatibility:** Firefox 68, Firefox ESR 68\
2018 **CCK2 Equivalent:** N/A\
2019 **Preferences Affected:** `browser.download.dir`,`browser.download.folderList`
2020
2021 #### Windows (GPO)
2022 ```
2023 Software\Policies\Mozilla\Firefox\DefaultDownloadDirectory = "${home}\Downloads"
2024 ```
2025 #### Windows (Intune)
2026 OMA-URI:
2027 ```
2028 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DefaultDownloadDirectory
2029 ```
2030 Value (string):
2031 ```
2032 <enabled/>
2033 <data id="Preferences_String" value="${home}\Downloads"/>
2034 ```
2035 #### macOS
2036 ```
2037 <dict>
2038   <key>DefaultDownloadDirectory</key>
2039   <string>${home}/Downloads</string>
2040 </dict>
2041 ```
2042 #### policies.json (macOS and Linux)
2043 ```
2044 {
2045   "policies": {
2046     "DefaultDownloadDirectory": "${home}/Downloads"
2047 }
2048 ```
2049 #### policies.json (Windows)
2050 ```
2051 {
2052   "policies": {
2053     "DefaultDownloadDirectory": "${home}\\Downloads"
2054 }
2055 ```
2056 ### DownloadDirectory
2057 Set and lock the download directory.
2058
2059 You can use ${home} for the native home directory.
2060
2061 **Compatibility:** Firefox 68, Firefox ESR 68\
2062 **CCK2 Equivalent:** N/A\
2063 **Preferences Affected:** `browser.download.dir`,`browser.download.folderList`,`browser.download.useDownloadDir`
2064
2065 #### Windows (GPO)
2066 ```
2067 Software\Policies\Mozilla\Firefox\DownloadDirectory = "${home}\Downloads"
2068 ```
2069 #### Windows (Intune)
2070 OMA-URI:
2071 ```
2072 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DownloadDirectory
2073 ```
2074 Value (string):
2075 ```
2076 <enabled/>
2077 <data id="Preferences_String" value="${home}\Downloads"/>
2078 ```
2079 #### macOS
2080 ```
2081 <dict>
2082   <key>DownloadDirectory</key>
2083   <string>${home}/Downloads</string>
2084 </dict>
2085 ```
2086 #### policies.json (macOS and Linux)
2087 ```
2088 {
2089   "policies": {
2090     "DownloadDirectory": "${home}/Downloads"
2091 }
2092 ```
2093 #### policies.json (Windows)
2094 ```
2095 {
2096   "policies": {
2097     "DownloadDirectory": "${home}\\Downloads"
2098 }
2099 ```
2100 ### EnableTrackingProtection
2101 Configure tracking protection.
2102
2103 If this policy is not configured, tracking protection is not enabled by default in the browser, but it is enabled by default in private browsing and the user can change it.
2104
2105 If `Value` is set to false, tracking protection is disabled and locked in both the regular browser and private browsing.
2106
2107 If `Value` is set to true, tracking protection is enabled by default in both the regular browser and private browsing and the `Locked` value determines whether or not a user can change it.
2108
2109 If `Cryptomining` is set to true, cryptomining scripts on websites are blocked.
2110
2111 If `Fingerprinting` is set to true, fingerprinting scripts on websites are blocked.
2112
2113 `Exceptions` are origins for which tracking protection is not enabled.
2114
2115 **Compatibility:** Firefox 60, Firefox ESR 60 (Cryptomining and Fingerprinting added in 70/68.2, Exceptions added in 73/68.5)\
2116 **CCK2 Equivalent:** N/A\
2117 **Preferences Affected:** `privacy.trackingprotection.enabled`,`privacy.trackingprotection.pbmode.enabled`,`privacy.trackingprotection.cryptomining.enabled`,`privacy.trackingprotection.fingerprinting.enabled`
2118
2119 #### Windows (GPO)
2120 ```
2121 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Value = 0x1 | 0x0
2122 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Locked = 0x1 | 0x0
2123 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Cryptomining = 0x1 | 0x0
2124 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Fingerprinting = 0x1 | 0x0
2125 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Exceptions\1 = "https://example.com"
2126 ```
2127 #### Windows (Intune)
2128 OMA-URI:
2129 ```
2130 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/A_TrackingProtection_Value
2131 ```
2132 Value (string):
2133 ```
2134 <enabled/> or <disabled/>
2135 ```
2136 OMA-URI:
2137 ```
2138 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/B_TrackingProtection_Cryptomining
2139 ```
2140 Value (string):
2141 ```
2142 <enabled/> or <disabled/>
2143 ```
2144 OMA-URI:
2145 ```
2146 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/C_TrackingProtection_Fingerprinting
2147 ```
2148 Value (string):
2149 ```
2150 <enabled/> or <disabled/>
2151 ```
2152 OMA-URI:
2153 ```
2154 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/D_TrackingProtection_Exceptions
2155 ```
2156 Value (string):
2157 ```
2158 <data id="TrackingProtection_Exceptions" value="1&#xF000;https://example.com"/>
2159 ```
2160 OMA-URI:
2161 ```
2162 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/E_TrackingProtection_Locked
2163 ```
2164 Value (string):
2165 ```
2166 <enabled/> or <disabled/>
2167 ```
2168 #### macOS
2169 ```
2170 <dict>
2171   <key>EnableTrackingProtection</key>
2172   <dict>
2173     <key>Value</key>
2174     <true/> | <false/>
2175     <key>Locked</key>
2176     <true/> | <false/>
2177     <key>Cryptomining</key>
2178     <true/> | <false/>
2179     <key>Fingerprinting</key>
2180     <true/> | <false/>
2181     <key>Exceptions</key>
2182     <array>
2183       <string>https://example.com</string>
2184     </array>
2185   </dict>
2186 </dict>
2187 ```
2188 #### policies.json
2189 ```
2190 {
2191   "policies": {
2192     "EnableTrackingProtection": {
2193       "Value": true | false,
2194       "Locked": true | false,
2195       "Cryptomining": true | false,
2196       "Fingerprinting": true | false,
2197       "Exceptions": ["https://example.com"]
2198     }
2199   }
2200 }
2201 ```
2202 ### EncryptedMediaExtensions
2203 Enable or disable Encrypted Media Extensions and optionally lock it.
2204
2205 If `Enabled` is set to false, encrypted media extensions (like Widevine) are not downloaded by Firefox unless the user consents to installing them.
2206
2207 If `Locked` is set to true and `Enabled` is set to false, Firefox will not download encrypted media extensions (like Widevine) or ask the user to install them.
2208
2209 **Compatibility:** Firefox 77, Firefox ESR 68.9\
2210 **CCK2 Equivalent:** N/A\
2211 **Preferences Affected:** `media.eme.enabled`
2212
2213 #### Windows (GPO)
2214 ```
2215 Software\Policies\Mozilla\Firefox\EncryptedMediaExtensions\Enabled = 0x1 | 0x0
2216 Software\Policies\Mozilla\Firefox\EncryptedMediaExtensions\Locked = 0x1 | 0x0
2217 ```
2218 #### Windows (Intune)
2219 OMA-URI:
2220 ```
2221 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~EncryptedMediaExtensions/EncryptedMediaExtensions_Enabled
2222 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~EncryptedMediaExtensions/EncryptedMediaExtensions_Locked
2223 ```
2224 Value (string):
2225 ```
2226 <enabled/>or <disabled/>
2227 ```
2228 #### macOS
2229 ```
2230 <dict>
2231   <key>EncryptedMediaExtensions</key>
2232   <dict>
2233     <key>Enabled</key>
2234     <true/> | <false/>
2235     <key>Locked</key>
2236     <true/> | <false/>
2237   </dict>
2238 </dict>
2239 ```
2240 #### policies.json
2241 ```
2242 {
2243   "policies": {
2244     "EncryptedMediaExtensions": {
2245       "Enabled": true | false,
2246       "Locked": true | false
2247     }
2248   }
2249 }
2250 ```
2251 ### EnterprisePoliciesEnabled
2252 Enable policy support on macOS.
2253
2254 **Compatibility:** Firefox 63, Firefox ESR 60.3 (macOS only)\
2255 **CCK2 Equivalent:** N/A\
2256 **Preferences Affected:** N/A
2257
2258 #### macOS
2259 ```
2260 <dict>
2261   <key>EnterprisePoliciesEnabled</key>
2262   <true/>
2263 </dict>
2264 ```
2265 ### Extensions
2266 Control the installation, uninstallation and locking of extensions.
2267
2268 While this policy is not technically deprecated, it is recommended that you use the **[`ExtensionSettings`](#extensionsettings)** policy. It has the same functionality and adds more. It does not support native paths, though, so you'll have to use file:/// URLs.
2269
2270 `Install` is a list of URLs or native paths for extensions to be installed.
2271
2272 `Uninstall` is a list of extension IDs that should be uninstalled if found.
2273
2274 `Locked` is a list of extension IDs that the user cannot disable or uninstall.
2275
2276 **Compatibility:** Firefox 60, Firefox ESR 60\
2277 **CCK2 Equivalent:** `addons`\
2278 **Preferences Affected:** N/A
2279
2280 #### Windows (GPO)
2281 ```
2282 Software\Policies\Mozilla\Firefox\Extensions\Install\1 = "https://addons.mozilla.org/firefox/downloads/somefile.xpi"
2283 Software\Policies\Mozilla\Firefox\Extensions\Install\2 = "//path/to/xpi"
2284 Software\Policies\Mozilla\Firefox\Extensions\Uninstall\1 = "bad_addon_id@mozilla.org"
2285 Software\Policies\Mozilla\Firefox\Extensions\Locked\1 = "addon_id@mozilla.org"
2286 ```
2287 #### Windows (Intune)
2288 OMA-URI:
2289 ```
2290 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/Extensions_Install
2291 ```
2292 Value (string):
2293 ```
2294 <enabled/>
2295 <data id="Extensions" value="1&#xF000;https://addons.mozilla.org/firefox/downloads/somefile.xpi&#xF000;2&#xF000;//path/to/xpi"/>
2296 ```
2297 OMA-URI:
2298 ```
2299 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/Extensions_Uninstall
2300 ```
2301 Value (string):
2302 ```
2303 <enabled/>
2304 <data id="Extensions" value="1&#xF000;bad_addon_id@mozilla.org"/>
2305 ```
2306 OMA-URI:
2307 ```
2308 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/Extensions_Locked
2309 ```
2310 Value (string):
2311 ```
2312 <enabled/>
2313 <data id="Extensions" value="1&#xF000;addon_id@mozilla.org"/>
2314 ```
2315 #### macOS
2316 ```
2317 <dict>
2318   <key>Extensions</key>
2319   <dict>
2320     <key>Install</key>
2321     <array>
2322       <string>https://addons.mozilla.org/firefox/downloads/somefile.xpi</string>
2323       <string>//path/to/xpi</string>
2324     </array>
2325     <key>Uninstall</key>
2326     <array>
2327       <string>bad_addon_id@mozilla.org</string>
2328     </array>
2329     <key>Locked</key>
2330     <array>
2331       <string>addon_id@mozilla.org</string>
2332     </array>
2333   </dict>
2334 </dict>
2335 ```
2336 #### policies.json
2337 ```
2338 {
2339   "policies": {
2340     "Extensions": {
2341       "Install": ["https://addons.mozilla.org/firefox/downloads/somefile.xpi", "//path/to/xpi"],
2342       "Uninstall": ["bad_addon_id@mozilla.org"],
2343       "Locked":  ["addon_id@mozilla.org"]
2344     }
2345   }
2346 }
2347 ```
2348 ### ExtensionSettings
2349 Manage all aspects of extensions. This policy is based heavily on the [Chrome policy](https://dev.chromium.org/administrators/policy-list-3/extension-settings-full) of the same name.
2350
2351 This policy maps an extension ID to its configuration. With an extension ID, the configuration will be applied to the specified extension only. A default configuration can be set for the special ID "*", which will apply to all extensions that don't have a custom configuration set in this policy.
2352
2353 To obtain an extension ID, install the extension and go to about:support. You will see the ID in the Extensions section. I've also created an extension that makes it easy to find the ID of extensions on AMO. You can download it [here](https://github.com/mkaply/queryamoid/releases/tag/v0.1).
2354
2355 The configuration for each extension is another dictionary that can contain the fields documented below.
2356
2357 | Name | Description |
2358 | --- | --- |
2359 | `installation_mode` | Maps to a string indicating the installation mode for the extension. The valid strings are `allowed`,`blocked`,`force_installed`, and `normal_installed`.
2360 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`allowed` | Allows the extension to be installed by the user. This is the default behavior. There is no need for an install_url; it will automatically be allowed based on the ID.
2361 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`blocked`| Blocks installation of the extension and removes it from the device if already installed.
2362 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`force_installed`| The extension is automatically installed and can't be removed by the user. This option is not valid for the default configuration and requires an install_url.
2363 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`normal_installed`| The extension is automatically installed but can be disabled by the user. This option is not valid for the default configuration and requires an install_url.
2364 | `install_url`| Maps to a URL indicating where Firefox can download a force_installed or normal_installed extension.  If installing from the local file system, use a [```file:///``` URL](https://en.wikipedia.org/wiki/File_URI_scheme). If installing from the addons.mozilla.org, use the following URL (substituting SHORT_NAME from the URL on AMO), https://addons.mozilla.org/firefox/downloads/latest/SHORT_NAME/latest.xpi. Languages packs are available from https://releases.mozilla.org/pub/firefox/releases/VERSION/PLATFORM/xpi/LANGUAGE.xpi. If you need to update the extension, you can change the name of the extension and it will be automatically updated. Extensions installed from file URLs will additional be updated when their internal version changes.
2365 | `install_sources` | A list of sources from which installing extensions is allowed. **This is unnecessary if you are only allowing the installation of certain extensions by ID.** Each item in this list is an extension-style match pattern. Users will be able to easily install items from any URL that matches an item in this list. Both the location of the *.xpi file and the page where the download is started from (i.e.  the referrer) must be allowed by these patterns. This setting can be used only for the default configuration.
2366 | `allowed_types` | This setting whitelists the allowed types of extension/apps that can be installed in Firefox. The value is a list of strings, each of which should be one of the following: "extension", "theme", "dictionary", "locale" This setting can be used only for the default configuration.
2367 | `blocked_install_message` | This maps to a string specifying the error message to display to users if they're blocked from installing an extension. This setting allows you to append text to the generic error message displayed when the extension is blocked. This could be be used to direct users to your help desk, explain why a particular extension is blocked, or something else. This setting can be used only for the default configuration.
2368 | `restricted_domains` | An array of domains on which content scripts can't be run. This setting can be used only for the default configuration.
2369 | `updates_disabled` | (Firefox 89, Firefox ESR 78.11) Boolean that indicates whether or not to disable automatic updates for an individual extension.
2370
2371 **Compatibility:** Firefox 69, Firefox ESR 68.1 (As of Firefox 85, Firefox ESR 78.7, installing a theme makes it the default.)\
2372 **CCK2 Equivalent:** N/A\
2373 **Preferences Affected:** N/A
2374
2375 #### Windows (GPO)
2376 Software\Policies\Mozilla\Firefox\ExtensionSettings (REG_MULTI_SZ) =
2377 ```
2378 {
2379   "*": {
2380     "blocked_install_message": "Custom error message.",
2381     "install_sources": ["about:addons","https://addons.mozilla.org/"],
2382     "installation_mode": "blocked",
2383     "allowed_types": ["extension"]
2384   },
2385   "uBlock0@raymondhill.net": {
2386     "installation_mode": "force_installed",
2387     "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
2388   },
2389   "https-everywhere@eff.org": {
2390     "installation_mode": "allowed"
2391   }
2392 }
2393 ```
2394 #### Windows (Intune)
2395 OMA-URI:
2396 ```
2397 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/ExtensionSettings
2398 ```
2399 Value (string):
2400 ```
2401 <enabled/>
2402 <data id="ExtensionSettings" value='
2403 {
2404   "*": {
2405     "blocked_install_message": "Custom error message.",
2406     "install_sources": ["about:addons","https://addons.mozilla.org/"],
2407     "installation_mode": "blocked",
2408     "allowed_types": ["extension"]
2409   },
2410   "uBlock0@raymondhill.net": {
2411     "installation_mode": "force_installed",
2412     "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
2413   },
2414     "https-everywhere@eff.org": {
2415     "installation_mode": "allowed"
2416   }
2417 }'/>
2418 ```
2419 #### macOS
2420 ```
2421 <dict>
2422   <key>ExtensionSettings</key>
2423   <dict>
2424     <key>*</key>
2425     <dict>
2426       <key>blocked_install_message</key>
2427       <string>Custom error message.</string>
2428       <key>install_sources</key>
2429       <array>
2430         <string>about:addons</string>
2431         <string>https://addons.mozilla.org/</string>
2432       </array>
2433       <key>installation_mode</key>
2434       <string>blocked</string>
2435       <key>allowed_types</key>
2436       <array>
2437         <string>extension</string>
2438       </array>
2439     </dict>
2440     <key>uBlock0@raymondhill.net</key>
2441     <dict>
2442       <key>installation_mode</key>
2443        <string>force_installed</string>
2444       <key>install_url</key>
2445       <string>https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi</string>
2446     </dict>
2447     <key>https-everywhere@eff.org</key>
2448     <dict>
2449       <key>installation_mode</key>
2450        <string>allowed</string>
2451     </dict>
2452   </dict>
2453 </dict>
2454 ```
2455 #### policies.json
2456 ```
2457 {
2458   "policies": {
2459     "ExtensionSettings": {
2460       "*": {
2461         "blocked_install_message": "Custom error message.",
2462         "install_sources": ["about:addons","https://addons.mozilla.org/"],
2463         "installation_mode": "blocked",
2464         "allowed_types": ["extension"]
2465       },
2466       "uBlock0@raymondhill.net": {
2467         "installation_mode": "force_installed",
2468         "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
2469       },
2470       "https-everywhere@eff.org": {
2471         "installation_mode": "allowed"
2472       }
2473     }
2474   }
2475 }
2476 ```
2477 ### ExtensionUpdate
2478 Control extension updates.
2479
2480 **Compatibility:** Firefox 67, Firefox ESR 60.7\
2481 **CCK2 Equivalent:** N/A\
2482 **Preferences Affected:** `extensions.update.enabled`
2483
2484 #### Windows (GPO)
2485 ```
2486 Software\Policies\Mozilla\Firefox\ExtensionUpdate = 0x1 | 0x0
2487 ```
2488 #### Windows (Intune)
2489 OMA-URI:
2490 ```
2491 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/ExtensionUpdate
2492 ```
2493 Value (string):
2494 ```
2495 <enabled/> or <disabled/>
2496 ```
2497 #### macOS
2498 ```
2499 <dict>
2500   <key>ExtensionUpdate</key>
2501   <true/> | <false/>
2502 </dict>
2503 ```
2504 #### policies.json
2505 ```
2506 {
2507   "policies": {
2508     "ExtensionUpdate": true | false
2509   }
2510 }
2511 ```
2512 ### FlashPlugin
2513 Configure the default Flash plugin policy as well as origins for which Flash is allowed.
2514
2515 `Allow` is a list of origins where Flash are allowed.
2516
2517 `Block` is a list of origins where Flash is not allowed.
2518
2519 `Default` determines whether or not Flash is allowed by default.
2520
2521 `Locked` prevents the user from changing Flash preferences.
2522
2523 **Compatibility:** Firefox 60, Firefox ESR 60\
2524 **CCK2 Equivalent:** `permissions.plugin`\
2525 **Preferences Affected:** `plugin.state.flash`
2526
2527 #### Windows (GPO)
2528 ```
2529 Software\Policies\Mozilla\Firefox\FlashPlugin\Allow\1 = "https://example.org"
2530 Software\Policies\Mozilla\Firefox\FlashPlugin\Block\1 = "https://example.edu"
2531 Software\Policies\Mozilla\Firefox\FlashPlugin\Default = 0x1 | 0x0
2532 Software\Policies\Mozilla\Firefox\FlashPlugin\Locked = 0x1 | 0x0
2533 ```
2534 #### Windows (Intune)
2535 OMA-URI:
2536 ```
2537 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Flash/FlashPlugin_Allow
2538 ```
2539 Value (string):
2540 ```
2541 <enabled/>
2542 <data id="Permissions" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
2543 ```
2544 OMA-URI:
2545 ```
2546 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Flash/FlashPlugin_Locked
2547 ```
2548 Value (string):
2549 ```
2550 <enabled/> or <disabled/>
2551 ```
2552 OMA-URI:
2553 ```
2554 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Flash/FlashPlugin_Default
2555 ```
2556 Value (string):
2557 ```
2558 <enabled/> or <disabled/>
2559 ```
2560 #### macOS
2561 ```
2562 <dict>
2563   <key>FlashPlugin</key>
2564   <dict>
2565     <key>Allow</key>
2566     <array>
2567       <string>http://example.org</string>
2568     </array>
2569     <key>Block</key>
2570     <array>
2571       <string>http://example.edu</string>
2572     </array>
2573     <key>Default</key>
2574     <true/> | <false/>
2575     <key>Locked</key>
2576     <true/> | <false/>
2577   </dict>
2578 </dict>
2579 ```
2580 #### policies.json
2581 ```
2582 {
2583   "policies": {
2584     "FlashPlugin": {
2585       "Allow": ["http://example.org/"],
2586       "Block": ["http://example.edu/"],
2587       "Default": true | false,
2588       "Locked": true | false
2589     }
2590   }
2591 }
2592 ```
2593
2594
2595
2596 ### Handlers
2597 Configure default application handlers. This policy is based on the internal format of `handlers.json`.
2598
2599 You can configure handlers based on a mime type (`mimeTypes`), a file's extension (`extensions`), or a protocol (`schemes`).
2600
2601 Within each handler type, you specify the given mimeType/extension/scheme as a key and use the following subkeys to describe how it is handled.
2602
2603 | Name | Description |
2604 | --- | --- |
2605 | `action`| Can be either `saveToDisk`, `useHelperApp`, `useSystemDefault`.
2606 | `ask` | If `true`, the user is asked if what they want to do with the file. If `false`, the action is taken without user intervention.
2607 | `handlers` | An array of handlers with the first one being the default. If you don't want to have a default handler, use an empty object for the first handler. Choose between path or uriTemplate.
2608 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`name` | The display name of the handler (might not be used).
2609 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`path`| The native path to the executable to be used.
2610 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`uriTemplate`| A url to a web based application handler. The URL must be https and contain a %s to be used for substitution.
2611
2612 **Compatibility:** Firefox 78, Firefox ESR 78\
2613 **CCK2 Equivalent:** N/A\
2614 **Preferences Affected:** N/A
2615
2616 #### Windows (GPO)
2617 Software\Policies\Mozilla\Firefox\Handlers (REG_MULTI_SZ) =
2618 ```
2619 {
2620   "mimeTypes": {
2621     "application/msword": {
2622       "action": "useSystemDefault",
2623       "ask": true | false
2624     }
2625   },
2626   "schemes": {
2627     "mailto": {
2628       "action": "useHelperApp",
2629       "ask": true | false,
2630       "handlers": [{
2631         "name": "Gmail",
2632         "uriTemplate": "https://mail.google.com/mail/?extsrc=mailto&url=%s"
2633       }]
2634     }
2635   },
2636   "extensions": {
2637     "pdf": {
2638       "action": "useHelperApp",
2639       "ask": true | false,
2640       "handlers": [{
2641         "name": "Adobe Acrobat",
2642         "path": "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32.exe"
2643       }]
2644     }
2645   }
2646 }
2647 ```
2648 #### Windows (Intune)
2649 OMA-URI:
2650 ```
2651 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Handlers
2652 ```
2653 Value (string):
2654 ```
2655 <enabled/>
2656 <data id="Handlers" value='
2657 {
2658   "mimeTypes": {
2659     "application/msword": {
2660       "action": "useSystemDefault",
2661       "ask": true | false
2662     }
2663   },
2664   "schemes": {
2665     "mailto": {
2666       "action": "useHelperApp",
2667       "ask": true | false,
2668       "handlers": [{
2669         "name": "Gmail",
2670         "uriTemplate": "https://mail.google.com/mail/?extsrc=mailto&amp;url=%s"
2671       }]
2672     }
2673   },
2674   "extensions": {
2675     "pdf": {
2676       "action": "useHelperApp",
2677       "ask": true | false,
2678       "handlers": [{
2679         "name": "Adobe Acrobat",
2680         "path": "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32.exe"
2681       }]
2682     }
2683   }
2684 }
2685 '/>
2686 ```
2687 #### macOS
2688 ```
2689 <dict>
2690   <key>Handlers</key>
2691   <dict>
2692     <key>mimeTypes</key>
2693     <dict>
2694       <key>application/msword</key>
2695       <dict>
2696         <key>action</key>
2697         <string>useSystemDefault</string>
2698         <key>ask</key>
2699         <true/> | <false/>
2700       </dict>
2701     </dict>
2702     <key>schemes</key>
2703     <dict>
2704       <key>mailto</key>
2705       <dict>
2706         <key>action</key>
2707         <string>useHelperApp</string>
2708         <key>ask</key>
2709         <true/> | <false/>
2710         <key>handlers</key>
2711         <array>
2712           <dict>
2713             <key>name</key>
2714             <string>Gmail</string>
2715             <key>uriTemplate</key>
2716             <string>https://mail.google.com/mail/?extsrc=mailto&url=%s</string>
2717           </dict>
2718         </array>
2719       </dict>
2720     </dict>
2721     <key>extensions</key>
2722     <dict>
2723       <key>pdf</key>
2724       <dict>
2725         <key>action</key>
2726         <string>useHelperApp</string>
2727         <key>ask</key>
2728         <true/> | <false/>
2729         <key>handlers</key>
2730         <array>
2731           <dict>
2732             <key>name</key>
2733             <string>Adobe Acrobat</string>
2734             <key>path</key>
2735             <string>/System/Applications/Preview.app</string>
2736           </dict>
2737         </array>
2738       </dict>
2739     </dict>
2740   </dict>
2741 </dict>
2742 ```
2743 #### policies.json
2744 ```
2745 {
2746   "policies": {
2747     "Handlers": {
2748       "mimeTypes": {
2749         "application/msword": {
2750           "action": "useSystemDefault",
2751           "ask": false
2752         }
2753       },
2754       "schemes": {
2755         "mailto": {
2756           "action": "useHelperApp",
2757           "ask": true | false,
2758           "handlers": [{
2759             "name": "Gmail",
2760             "uriTemplate": "https://mail.google.com/mail/?extsrc=mailto&url=%s"
2761           }]
2762         }
2763       },
2764       "extensions": {
2765         "pdf": {
2766           "action": "useHelperApp",
2767           "ask": true | false,
2768           "handlers": [{
2769             "name": "Adobe Acrobat",
2770             "path": "/usr/bin/acroread"
2771           }]
2772         }
2773       }
2774     }
2775   }
2776 }
2777 ```
2778 ### FirefoxHome
2779 Customize the Firefox Home page.
2780
2781 **Compatibility:** Firefox 68, Firefox ESR 68\
2782 **CCK2 Equivalent:** N/A\
2783 **Preferences Affected:** `browser.newtabpage.activity-stream.showSearch`,`browser.newtabpage.activity-stream.feeds.topsites`,`browser.newtabpage.activity-stream.feeds.section.highlights`,`browser.newtabpage.activity-stream.feeds.section.topstories`,`browser.newtabpage.activity-stream.feeds.snippets`
2784
2785 #### Windows (GPO)
2786 ```
2787 Software\Policies\Mozilla\Firefox\FirefoxHome\Search = 0x1 | 0x0
2788 Software\Policies\Mozilla\Firefox\FirefoxHome\TopSites = 0x1 | 0x0
2789 Software\Policies\Mozilla\Firefox\FirefoxHome\Highlights = 0x1 | 0x0
2790 Software\Policies\Mozilla\Firefox\FirefoxHome\Pocket = 0x1 | 0x0
2791 Software\Policies\Mozilla\Firefox\FirefoxHome\Snippets = 0x1 | 0x0
2792 Software\Policies\Mozilla\Firefox\FirefoxHome\Locked = 0x1 | 0x0
2793 ```
2794 #### Windows (Intune)
2795 OMA-URI:
2796 ```
2797 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/CustomizeFirefoxHome
2798 ```
2799 Value (string):
2800 ```
2801 <enabled/>
2802 <data id="FirefoxHome_Search"  value="true | false"/>
2803 <data id="FirefoxHome_TopSites"  value="true | false"/>
2804 <data id="FirefoxHome_Highlights"  value="true | false"/>
2805 <data id="FirefoxHome_Pocket"  value="true | false"/>
2806 <data id="FirefoxHome_Snippets"  value="true | false"/>
2807 <data id="FirefoxHome_Locked"  value="true | false"/>
2808 ```
2809 #### macOS
2810 ```
2811 <dict>
2812   <key>FirefoxHome</key>
2813   <dict>
2814     <key>Search</key>
2815     <true/> | <false/>
2816     <key>TopSites</key>
2817     <true/> | <false/>
2818     <key>Highlights</key>
2819     <true/> | <false/>
2820     <key>Pocket</key>
2821     <true/> | <false/>
2822     <key>Snippets</key>
2823     <true/> | <false/>
2824     <key>Locked</key>
2825     <true/> | <false/>
2826   </dict>
2827 </dict>
2828 ```
2829 #### policies.json
2830 ```
2831 {
2832   "policies": {
2833     "FirefoxHome": {
2834       "Search": true | false,
2835       "TopSites": true | false,
2836       "Highlights": true | false,
2837       "Pocket": true | false,
2838       "Snippets": true | false,
2839       "Locked": true | false
2840     }
2841   }
2842 }
2843 ```
2844 ### HardwareAcceleration
2845 Control hardware acceleration.
2846
2847 **Compatibility:** Firefox 60, Firefox ESR 60\
2848 **CCK2 Equivalent:** N/A\
2849 **Preferences Affected:** `layers.acceleration.disabled`
2850
2851 #### Windows (GPO)
2852 ```
2853 Software\Policies\Mozilla\Firefox\HardwareAcceleration = 0x1 | 0x0
2854 ```
2855 #### Windows (Intune)
2856 OMA-URI:
2857 ```
2858 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/HardwareAcceleration
2859 ```
2860 Value (string):
2861 ```
2862 <enabled/> or <disabled/>
2863 ```
2864 #### macOS
2865 ```
2866 <dict>
2867   <key>HardwareAcceleration</key>
2868   <true/> | <false/>
2869 </dict>
2870 ```
2871 #### policies.json
2872 ```
2873 {
2874   "policies": {
2875     "HardwareAcceleration": true | false
2876   }
2877 }
2878 ```
2879 ### Homepage
2880 Configure the default homepage and how Firefox starts.
2881
2882 `URL` is the default homepage.
2883
2884 `Locked` prevents the user from changing homepage preferences.
2885
2886 `Additional` allows for more than one homepage.
2887
2888 `StartPage` is how Firefox starts. The choices are no homepage, the default homepage or the previous session.
2889
2890 With Firefox 78, an additional option as added for `Startpage`, `homepage-locked`. If this is value is set for the Startpage, the user will always get the homepage at startup and cannot choose to restore their session.
2891
2892 **Compatibility:** Firefox 60, Firefox ESR 60 (StartPage was added in Firefox 60, Firefox ESR 60.4, homepage-locked added in Firefox 78)\
2893 **CCK2 Equivalent:** `homePage`,`lockHomePage`\
2894 **Preferences Affected:** `browser.startup.homepage`,`browser.startup.page`
2895
2896 #### Windows (GPO)
2897 ```
2898 Software\Policies\Mozilla\Firefox\Homepage\URL = "https://example.com"
2899 Software\Policies\Mozilla\Firefox\Homepage\Locked = 0x1 | 0x0
2900 Software\Policies\Mozilla\Firefox\Homepage\Additional\1 = "https://example.org"
2901 Software\Policies\Mozilla\Firefox\Homepage\Additional\2 = "https://example.edu"
2902 Software\Policies\Mozilla\Firefox\Homepage\StartPage = "none" | "homepage" | "previous-session" | "homepage-locked"
2903 ```
2904 #### Windows (Intune)
2905 OMA-URI:
2906 ```
2907 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageURL
2908 ```
2909 Value (string):
2910 ```
2911 <enabled/>
2912
2913 <data id="HomepageURL" value="https://example.com"/>
2914 <data id="HomepageLocked" value="true | false"/>
2915 ```
2916 OMA-URI:
2917 ```
2918 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageAdditional
2919 ```
2920 Value (string):
2921 ```
2922 <enabled/>
2923
2924 <data id="HomepageAdditional" value="1&#xF000;http://example.org&#xF000;2&#xF000;http://example.edu"/>
2925 ```
2926 OMA-URI:
2927 ```
2928 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageStartPage
2929 ```
2930 Value (string):
2931 ```
2932 <enabled/>
2933
2934 <data id="StartPage" value="none | homepage | previous-session"/>
2935 ```
2936 #### macOS
2937 ```
2938 <dict>
2939   <key>Homepage</key>
2940   <dict>
2941     <key>URL</key>
2942     <string>http://example.com</string>
2943     <key>Locked</key>
2944     <true/> | <false/>
2945     <key>Additional</key>
2946     <array>
2947       <string>http://example.org</string>
2948       <string>http://example.edu</string>
2949     </array>
2950     <key>StartPage</key>
2951     <string>none | homepage | previous-session | homepage-locked</string>
2952   </dict>
2953 </dict>
2954 ```
2955 #### policies.json
2956 ```
2957 {
2958   "policies": {
2959     "Homepage": {
2960       "URL": "http://example.com/",
2961       "Locked": true | false,
2962       "Additional": ["http://example.org/",
2963                      "http://example.edu/"],
2964       "StartPage": "none" | "homepage" | "previous-session" | "homepage-locked"
2965     }
2966   }
2967 }
2968 ```
2969 ### InstallAddonsPermission
2970 Configure the default extension install policy as well as origins for extension installs are allowed. This policy does not override turning off all extension installs.
2971
2972 `Allow` is a list of origins where extension installs are allowed.
2973
2974 `Default` determines whether or not extension installs are allowed by default.
2975
2976 **Compatibility:** Firefox 60, Firefox ESR 60\
2977 **CCK2 Equivalent:** `permissions.install`\
2978 **Preferences Affected:** `xpinstall.enabled`
2979
2980 #### Windows (GPO)
2981 ```
2982 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Allow\1 = "https://example.org"
2983 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Allow\2 = "https://example.edu"
2984 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Default = 0x1 | 0x0
2985 ```
2986 #### Windows (Intune)
2987 OMA-URI:
2988 ```
2989 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Addons/InstallAddonsPermission_Allow
2990 ```
2991 Value (string):
2992 ```
2993 <enabled/>
2994 <data id="Permissions" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
2995 ```
2996 OMA-URI:
2997 ```
2998 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Addons/InstallAddonsPermission_Default
2999 ```
3000 Value (string):
3001 ```
3002 <enabled/>
3003 ```
3004 #### macOS
3005 ```
3006 <dict>
3007   <key>InstallAddonsPermission</key>
3008   <dict>
3009     <key>Allow</key>
3010     <array>
3011       <string>http://example.org</string>
3012       <string>http://example.edu</string>
3013     </array>
3014     <key>Default</key>
3015     <true/> | <false/>
3016   </dict>
3017 </dict>
3018 ```
3019 #### policies.json
3020 ```
3021 {
3022   "policies": {
3023     "InstallAddonsPermission": {
3024       "Allow": ["http://example.org/",
3025                 "http://example.edu/"],
3026       "Default": true | false
3027     }
3028   }
3029 }
3030 ```
3031 ### LegacyProfiles
3032 Disable the feature enforcing a separate profile for each installation.
3033
3034 If this policy set to true, Firefox will not try to create different profiles for installations of Firefox in different directories. This is the equivalent of the MOZ_LEGACY_PROFILES environment variable.
3035
3036 If this policy set to false, Firefox will create a new profile for each unique installation of Firefox.
3037
3038 This policy only work on Windows via GPO (not policies.json).
3039
3040 **Compatibility:** Firefox 70, Firefox ESR 68.2 (Windows only, GPO only)\
3041 **CCK2 Equivalent:** N/A\
3042 **Preferences Affected:** N/A
3043
3044 #### Windows (GPO)
3045 ```
3046 Software\Policies\Mozilla\Firefox\LegacyProfiles = = 0x1 | 0x0
3047 ```
3048 #### Windows (Intune)
3049 OMA-URI:
3050 ```
3051 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/LegacyProfiles
3052 ```
3053 Value (string):
3054 ```
3055 <enabled/> or <disabled/>
3056 ```
3057 ### LocalFileLinks
3058 Enable linking to local files by origin.
3059
3060 **Compatibility:** Firefox 68, Firefox ESR 68\
3061 **CCK2 Equivalent:** N/A\
3062 **Preferences Affected:** `capability.policy.localfilelinks.*`
3063
3064 #### Windows (GPO)
3065 ```
3066 Software\Policies\Mozilla\Firefox\LocalFileLinks\1 = "https://example.org"
3067 Software\Policies\Mozilla\Firefox\LocalFileLinks\2 = "https://example.edu"
3068 ```
3069 #### Windows (Intune)
3070 OMA-URI:
3071 ```
3072 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/LocalFileLinks
3073 ```
3074 Value (string):
3075 ```
3076 <enabled/>
3077 <data id="LocalFileLinks" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
3078 ```
3079 #### macOS
3080 ```
3081 <dict>
3082   <key>LocalFileLinks</key>
3083   <array>
3084     <string>http://example.org</string>
3085     <string>http://example.edu</string>
3086   </array>
3087 </dict>
3088 ```
3089 #### policies.json
3090 ```
3091 {
3092   "policies": {
3093     "LocalFileLinks": ["http://example.org/",
3094                        "http://example.edu/"]
3095   }
3096 }
3097 ```
3098 ### ManagedBookmarks
3099 Configures a list of bookmarks managed by an administrator that cannot be changed by the user.
3100
3101 The bookmarks are only added as a button on the personal toolbar. They are not in the bookmarks folder.
3102
3103 The syntax of this policy is exactly the same as the [Chrome ManagedBookmarks policy](https://cloud.google.com/docs/chrome-enterprise/policies/?policy=ManagedBookmarks). The schema is:
3104 ```
3105 {
3106  "items": {
3107   "id": "BookmarkType",
3108   "properties": {
3109    "children": {
3110     "items": {
3111      "$ref": "BookmarkType"
3112     },
3113     "type": "array"
3114    },
3115    "name": {
3116     "type": "string"
3117    },
3118    "toplevel_name": {
3119     "type": "string"
3120    },
3121    "url": {
3122     "type": "string"
3123    }
3124   },
3125   "type": "object"
3126  },
3127  "type": "array"
3128 }
3129 ```
3130 **Compatibility:** Firefox 83, Firefox ESR 78.5\
3131 **CCK2 Equivalent:** N/A\
3132 **Preferences Affected:** N/A
3133
3134 #### Windows (GPO)
3135 Software\Policies\Mozilla\Firefox\ManagedBookmarks (REG_MULTI_SZ) =
3136 ```
3137 [
3138   {
3139     "toplevel_name": "My managed bookmarks folder"
3140   },
3141   {
3142     "url": "example.com",
3143     "name": "Example"
3144   },
3145   {
3146     "name": "Mozilla links",
3147     "children": [
3148       {
3149         "url": "https://mozilla.org",
3150         "name": "Mozilla.org"
3151       },
3152       {
3153         "url": "https://support.mozilla.org/",
3154         "name": "SUMO"
3155       }
3156     ]
3157   }
3158 ]
3159 ```
3160 #### Windows (Intune)
3161 OMA-URI:
3162 ```
3163 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/ManagedBookmarks
3164 ```
3165 Value (string):
3166 ```
3167 <enabled/>
3168 <data id="JSON" value='
3169 [
3170   {
3171     "toplevel_name": "My managed bookmarks folder"
3172   },
3173   {
3174     "url": "example.com",
3175     "name": "Example"
3176   },
3177   {
3178     "name": "Mozilla links",
3179     "children": [
3180       {
3181         "url": "https://mozilla.org",
3182         "name": "Mozilla.org"
3183       },
3184       {
3185         "url": "https://support.mozilla.org/",
3186         "name": "SUMO"
3187       }
3188     ]
3189   }
3190 ]'/>
3191 ```
3192 #### macOS
3193 ```
3194 <dict>
3195   <key>ManagedBookmarks</key>
3196   <array>
3197     <dict>
3198       <key>toplevel_name</key>
3199       <string>My managed bookmarks folder</string></dict>
3200       <dict>
3201         <key>url</key>
3202         <string>example.com</string>
3203         <key>name</key>
3204         <string>Example</string>
3205       </dict>
3206       <dict>
3207       <key>name</key>
3208       <string>Mozilla links</string>
3209       <key>children</key>
3210       <array>
3211         <dict>
3212           <key>url</key>
3213           <string>https://mozilla.org</string>
3214           <key>name</key>
3215           <string>Mozilla</string>
3216         </dict>
3217         <dict>
3218           <key>url</key>
3219           <string>https://support.mozilla.org/</string>
3220           <key>name</key>
3221           <string>SUMO</string>
3222         </dict>
3223       </array>
3224     </dict>
3225   </array>
3226 </dict>
3227 ```
3228 #### policies.json
3229 ```
3230 {
3231   "policies": {
3232     "ManagedBookmarks": [
3233       {
3234         "toplevel_name": "My managed bookmarks folder"
3235       },
3236       {
3237         "url": "example.com",
3238         "name": "Example"
3239       },
3240       {
3241         "name": "Mozilla links",
3242         "children": [
3243           {
3244             "url": "https://mozilla.org",
3245             "name": "Mozilla.org"
3246           },
3247           {
3248             "url": "https://support.mozilla.org/",
3249             "name": "SUMO"
3250           }
3251         ]
3252       }
3253     ]
3254   }
3255 }
3256 ```
3257 ### ManualAppUpdateOnly
3258
3259 Switch to manual updates only.
3260
3261 If this policy is enabled:
3262  1. The user will never be prompted to install updates
3263  2. Firefox will not check for updates in the background, though it will check automatically when an update UI is displayed (such as the one in the About dialog). This check will be used to show "Update to version X" in the UI, but will not automatically download the update or prompt the user to update in any other way.
3264  3. The update UI will work as expected, unlike when using DisableAppUpdate.
3265
3266 This policy is primarily intended for advanced end users, not for enterprises.
3267
3268 **Compatibility:** Firefox 87\
3269 **CCK2 Equivalent:** N/A\
3270 **Preferences Affected:** N/A
3271
3272 #### policies.json
3273 ```
3274 {
3275   "policies": {
3276     "ManualAppUpdateOnly": true | false
3277   }
3278 }
3279 ```
3280 ### PrimaryPassword
3281 Require or prevent using a primary (formerly master) password.
3282
3283 If this value is true, a primary password is required. If this value is false, it works the same as if [`DisableMasterPasswordCreation`](#disablemasterpasswordcreation) was true and removes the primary password functionality.
3284
3285 If both DisableMasterPasswordCreation and PrimaryPassword are used, DisableMasterPasswordCreation takes precedent.
3286
3287 **Compatibility:** Firefox 79, Firefox ESR 78.1\
3288 **CCK2 Equivalent:** `noMasterPassword`\
3289 **Preferences Affected:** N/A
3290
3291 #### Windows (GPO)
3292 ```
3293 Software\Policies\Mozilla\Firefox\PrimaryPassword = 0x1 | 0x0
3294 ```
3295 #### Windows (Intune)
3296 OMA-URI:
3297 ```
3298 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PrimaryPassword
3299 ```
3300 Value (string):
3301 ```
3302 <enabled/> or <disabled/>
3303 ```
3304 #### macOS
3305 ```
3306 <dict>
3307   <key>PrimaryPassword</key>
3308   <true/> | <false/>
3309 </dict>
3310 ```
3311 #### policies.json
3312 ```
3313 {
3314   "policies": {
3315     "PrimaryPassword": true | false
3316   }
3317 }
3318 ```
3319 ### NetworkPrediction
3320 Enable or disable network prediction (DNS prefetching).
3321
3322 **Compatibility:** Firefox 67, Firefox ESR 60.7\
3323 **CCK2 Equivalent:** N/A\
3324 **Preferences Affected:** `network.dns.disablePrefetch`,`network.dns.disablePrefetchFromHTTPS`
3325
3326 #### Windows (GPO)
3327 ```
3328 Software\Policies\Mozilla\Firefox\NetworkPrediction = 0x1 | 0x0
3329 ```
3330 #### Windows (Intune)
3331 OMA-URI:
3332 ```
3333 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NetworkPrediction
3334 ```
3335 Value (string):
3336 ```
3337 <enabled/> or <disabled/>
3338 ```
3339 #### macOS
3340 ```
3341 <dict>
3342   <key>NetworkPrediction</key>
3343   <true/> | <false/>
3344 </dict>
3345 ```
3346 #### policies.json
3347 ```
3348 {
3349   "policies": {
3350     "NetworkPrediction": true | false
3351 }
3352 ```
3353 ### NewTabPage
3354 Enable or disable the New Tab page.
3355
3356 **Compatibility:** Firefox 68, Firefox ESR 68\
3357 **CCK2 Equivalent:** N/A\
3358 **Preferences Affected:** `browser.newtabpage.enabled`
3359
3360 #### Windows (GPO)
3361 ```
3362 Software\Policies\Mozilla\Firefox\NewTabPage = 0x1 | 0x0
3363 ```
3364 #### Windows (Intune)
3365 OMA-URI:
3366 ```
3367 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NewTabPage
3368 ```
3369 Value (string):
3370 ```
3371 <enabled/> or <disabled/>
3372 ```
3373 #### macOS
3374 ```
3375 <dict>
3376   <key>NewTabPage</key>
3377   <true/> | <false/>
3378 </dict>
3379 ```
3380 #### policies.json
3381 ```
3382 {
3383   "policies": {
3384     "NewTabPage": true | false
3385 }
3386 ```
3387 ### NoDefaultBookmarks
3388 Disable the creation of default bookmarks.
3389
3390 This policy is only effective if the user profile has not been created yet.
3391
3392 **Compatibility:** Firefox 60, Firefox ESR 60\
3393 **CCK2 Equivalent:** `removeDefaultBookmarks`\
3394 **Preferences Affected:** N/A
3395
3396 #### Windows (GPO)
3397 ```
3398 Software\Policies\Mozilla\Firefox\NoDefaultBookmarks = 0x1 | 0x0
3399 ```
3400 #### Windows (Intune)
3401 OMA-URI:
3402 ```
3403 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NoDefaultBookmarks
3404 ```
3405 Value (string):
3406 ```
3407 <enabled/> or <disabled/>
3408 ```
3409 #### macOS
3410 ```
3411 <dict>
3412   <key>NoDefaultBookmarks</key>
3413   <true/> | <false/>
3414 </dict>
3415 ```
3416 #### policies.json
3417 ```
3418 {
3419   "policies": {
3420     "NoDefaultBookmarks": true | false
3421   }
3422 }
3423 ```
3424 ### OfferToSaveLogins
3425 Control whether or not Firefox offers to save passwords.
3426
3427 **Compatibility:** Firefox 60, Firefox ESR 60\
3428 **CCK2 Equivalent:** `dontRememberPasswords`\
3429 **Preferences Affected:** `signon.rememberSignons`
3430
3431 #### Windows (GPO)
3432 ```
3433 Software\Policies\Mozilla\Firefox\OfferToSaveLogins = 0x1 | 0x0
3434 ```
3435 #### Windows (Intune)
3436 OMA-URI:
3437 ```
3438 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OfferToSaveLogins
3439 ```
3440 Value (string):
3441 ```
3442 <enabled/> or <disabled/>
3443 ```
3444 #### macOS
3445 ```
3446 <dict>
3447   <key>OfferToSaveLogins</key>
3448   <true/> | <false/>
3449 </dict>
3450 ```
3451 #### policies.json
3452 ```
3453 {
3454   "policies": {
3455     "OfferToSaveLogins": true | false
3456   }
3457 }
3458 ```
3459 ### OfferToSaveLoginsDefault
3460 Sets the default value of signon.rememberSignons without locking it.
3461
3462 **Compatibility:** Firefox 70, Firefox ESR 60.2\
3463 **CCK2 Equivalent:** `dontRememberPasswords`\
3464 **Preferences Affected:** `signon.rememberSignons`
3465
3466 #### Windows (GPO)
3467 ```
3468 Software\Policies\Mozilla\Firefox\OfferToSaveLoginsDefault = 0x1 | 0x0
3469 ```
3470 #### Windows (Intune)
3471 OMA-URI:
3472 ```
3473 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OfferToSaveLoginsDefault
3474 ```
3475 Value (string):
3476 ```
3477 <enabled/> or <disabled/>
3478 ```
3479 #### macOS
3480 ```
3481 <dict>
3482   <key>OfferToSaveLoginsDefault</key>
3483   <true/> | <false/>
3484 </dict>
3485 ```
3486 #### policies.json
3487 ```
3488 {
3489   "policies": {
3490     "OfferToSaveLoginsDefault": true | false
3491   }
3492 }
3493 ```
3494 ### OverrideFirstRunPage
3495 Override the first run page. If the value is an empty string (""), the first run page is not displayed.
3496
3497 Starting with Firefox 83, Firefox ESR 78.5, you can also specify multiple URLS separated by a vertical bar (|).
3498
3499 **Compatibility:** Firefox 60, Firefox ESR 60\
3500 **CCK2 Equivalent:** `welcomePage`,`noWelcomePage`\
3501 **Preferences Affected:** `startup.homepage_welcome_url`
3502
3503 #### Windows (GPO)
3504 ```
3505 Software\Policies\Mozilla\Firefox\OverrideFirstRunPage = "http://example.org"
3506 ```
3507 #### Windows (Intune)
3508 OMA-URI:
3509 ```
3510 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OverrideFirstRunPage
3511 ```
3512 Value (string):
3513 ```
3514 <enabled/>
3515 <data id="OverridePage" value="https://example.com"/>
3516 ```
3517 #### macOS
3518 ```
3519 <dict>
3520   <key>OverrideFirstRunPage</key>
3521   <string>http://example.org</string>
3522 </dict>
3523 ```
3524 #### policies.json
3525 ```
3526 {
3527   "policies": {
3528     "OverrideFirstRunPage": "http://example.org"
3529   }
3530 }
3531 ```
3532 ### OverridePostUpdatePage
3533 Override the upgrade page. If the value is an empty string (""), no extra pages are displayed when Firefox is upgraded.
3534
3535 **Compatibility:** Firefox 60, Firefox ESR 60\
3536 **CCK2 Equivalent:** `upgradePage`,`noUpgradePage`\
3537 **Preferences Affected:** `startup.homepage_override_url`
3538
3539 #### Windows (GPO)
3540 ```
3541 Software\Policies\Mozilla\Firefox\OverridePostUpdatePage = "http://example.org"
3542 ```
3543 #### Windows (Intune)
3544 OMA-URI:
3545 ```
3546 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OverridePostUpdatePage
3547 ```
3548 Value (string):
3549 ```
3550 <enabled/>
3551 <data id="OverridePage" value="https://example.com"/>
3552 ```
3553 #### macOS
3554 ```
3555 <dict>
3556   <key>OverridePostUpdatePage</key>
3557   <string>http://example.org</string>
3558 </dict>
3559 ```
3560 #### policies.json
3561 ```
3562 {
3563   "policies": {
3564     "OverridePostUpdatePage": "http://example.org"
3565   }
3566 }
3567 ```
3568 ### PasswordManagerEnabled
3569 Remove access to the password manager via preferences and blocks about:logins on Firefox 70.
3570
3571 **Compatibility:** Firefox 70, Firefox ESR 60.2\
3572 **CCK2 Equivalent:** N/A\
3573 **Preferences Affected:** `pref.privacy.disable_button.view_passwords`
3574
3575 #### Windows (GPO)
3576 ```
3577 Software\Policies\Mozilla\Firefox\PasswordManagerEnabled = 0x1 | 0x0
3578 ```
3579 #### Windows (Intune)
3580 OMA-URI:
3581 ```
3582 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PasswordManagerEnabled
3583 ```
3584 Value (string):
3585 ```
3586 <enabled/> or <disabled/>
3587 ```
3588 #### macOS
3589 ```
3590 <dict>
3591   <key>PasswordManagerEnabled</key>
3592   <true/> | <false/>
3593 </dict>
3594 ```
3595 #### policies.json
3596 ```
3597 {
3598   "policies": {
3599     "PasswordManagerEnabled": true | false
3600   }
3601 }
3602 ```
3603 ### PDFjs
3604 Disable or configure PDF.js, the built-in PDF viewer.
3605
3606 If `Enabled` is set to false, the built-in PDF viewer is disabled.
3607
3608 If `EnablePermissions` is set to true, the built-in PDF viewer will honor document permissions like preventing the copying of text.
3609
3610 Note: DisableBuiltinPDFViewer has not been deprecated. You can either continue to use it, or switch to using PDFjs->Enabled to disable the built-in PDF viewer. This new permission was added because we needed a place for PDFjs->EnabledPermissions.
3611
3612 **Compatibility:** Firefox 77, Firefox ESR 68.9\
3613 **CCK2 Equivalent:** N/A\
3614 **Preferences Affected:** `pdfjs.diabled`,`pdfjs.enablePermissions`
3615
3616 #### Windows (GPO)
3617 ```
3618 Software\Policies\Mozilla\Firefox\PDFjs\Enabled = 0x1 | 0x0
3619 Software\Policies\Mozilla\Firefox\PDFjs\EnablePermissions = 0x1 | 0x0
3620 ```
3621 #### Windows (Intune)
3622 OMA-URI:
3623 ```
3624 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PDFjs/PDFjs_Enabled
3625 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PDFjs/PDFjs_EnablePermissions
3626 ```
3627 Value (string):
3628 ```
3629 <enabled/>or <disabled/>
3630 ```
3631 #### macOS
3632 ```
3633 <dict>
3634   <key>PDFjs</key>
3635   <dict>
3636     <key>Enabled</key>
3637     <true/> | <false/>
3638     <key>EnablePermissions</key>
3639     <true/> | <false/>
3640   </dict>
3641 </dict>
3642 ```
3643 #### policies.json
3644 ```
3645 {
3646   "policies": {
3647     "PSFjs": {
3648       "Enabled": true | false,
3649       "EnablePermissions": true | false
3650     }
3651   }
3652 }
3653 ```
3654 ### Permissions
3655 Set permissions associated with camera, microphone, location, notifications, autoplay, and virtual reality. Because these are origins, not domains, entries with unique ports must be specified separately. This explicitly means that it is not possible to add wildcards. See examples below.
3656
3657 `Allow` is a list of origins where the feature is allowed.
3658
3659 `Block` is a list of origins where the feature is not allowed.
3660
3661 `BlockNewRequests` determines whether or not new requests can be made for the feature.
3662
3663 `Locked` prevents the user from changing preferences for the feature.
3664
3665 `Default` specifies the default value for Autoplay. block-audio-video is not supported on Firefox ESR 68.
3666
3667 **Compatibility:** Firefox 62, Firefox ESR 60.2 (Autoplay added in Firefox 74, Firefox ESR 68.6, Autoplay Default/Locked added in Firefox 76, Firefox ESR 68.8, VirtualReality added in Firefox 80, Firefox ESR 78.2)\
3668 **CCK2 Equivalent:** N/A\
3669 **Preferences Affected:** `permissions.default.camera`,`permissions.default.microphone`,`permissions.default.geo`,`permissions.default.desktop-notification`,`media.autoplay.default`.`permissions.default.xr`
3670
3671 #### Windows (GPO)
3672 ```
3673 Software\Policies\Mozilla\Firefox\Permissions\Camera\Allow\1 = "https://example.org"
3674 Software\Policies\Mozilla\Firefox\Permissions\Camera\Allow\2 = "https://example.org:1234"
3675 Software\Policies\Mozilla\Firefox\Permissions\Camera\Block\1 = "https://example.edu"
3676 Software\Policies\Mozilla\Firefox\Permissions\Camera\BlockNewRequests = 0x1 | 0x0
3677 Software\Policies\Mozilla\Firefox\Permissions\Camera\Locked = 0x1 | 0x0
3678 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Allow\1 = "https://example.org"
3679 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Block\1 = "https://example.edu"
3680 Software\Policies\Mozilla\Firefox\Permissions\Microphone\BlockNewRequests = 0x1 | 0x0
3681 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Locked = 0x1 | 0x0
3682 Software\Policies\Mozilla\Firefox\Permissions\Location\Allow\1 = "https://example.org"
3683 Software\Policies\Mozilla\Firefox\Permissions\Location\Block\1 = "https://example.edu"
3684 Software\Policies\Mozilla\Firefox\Permissions\Location\BlockNewRequests = 0x1 | 0x0
3685 Software\Policies\Mozilla\Firefox\Permissions\Location\Locked = 0x1 | 0x0
3686 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Allow\1 = "https://example.org"
3687 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Block\1 = "https://example.edu"
3688 Software\Policies\Mozilla\Firefox\Permissions\Notifications\BlockNewRequests = 0x1 | 0x0
3689 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Locked = 0x1 | 0x0
3690 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Allow\1 = "https://example.org"
3691 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Block\1 = "https://example.edu"
3692 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Default = "allow-audio-video" | "block-audio" | "block-audio-video"
3693 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Locked = 0x1 | 0x0
3694 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\Allow\1 = "https://example.org"
3695 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\Block\1 = "https://example.edu"
3696 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\BlockNewRequests = 0x1 | 0x0
3697 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\Locked = 0x1 | 0x0
3698 ```
3699 #### Windows (Intune)
3700 OMA-URI:
3701 ```
3702 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Location/Location_BlockNewRequests
3703 ```
3704 Value (string):
3705 ```
3706 <enabled/> or <disabled/>
3707 ```
3708 OMA-URI:
3709 ```
3710 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Location/Location_Locked
3711 ```
3712 Value (string):
3713 ```
3714 <enabled/> or <disabled/>
3715 ```
3716 OMA-URI:
3717 ```
3718 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_Allow
3719 ```
3720 Value (string):
3721 ```
3722 <enabled/>
3723 <data id="Permissions" value="1&#xF000;https://example.org"/>
3724 ```
3725 OMA-URI:
3726 ```
3727 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_BlockNewRequests
3728 ```
3729 Value (string):
3730 ```
3731 <enabled/> or <disabled/>
3732 ```
3733 OMA-URI:
3734 ```
3735 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_Locked
3736 ```
3737 Value (string):
3738 ```
3739 <enabled/> or <disabled/>
3740 ```
3741 OMA-URI:
3742 ```
3743 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Allow
3744 ```
3745 Value (string):
3746 ```
3747 <enabled/>
3748 <data id="Permissions" value="1&#xF000;https://example.org"/>
3749 ```
3750 OMA-URI:
3751 ```
3752 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Block
3753 ```
3754 Value (string):
3755 ```
3756 <enabled/>
3757 <data id="Permissions" value="1&#xF000;https://example.edu"/>
3758 ```
3759 OMA-URI:
3760 ```
3761 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Default
3762 ```
3763 Value (string):
3764 ```
3765 <enabled/>
3766 <data id="Autoplay_Default" value="allow-audio-video | block-audio | block-audio-video"/>
3767 ```
3768 OMA-URI:
3769 ```
3770 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Locked
3771 ```
3772 Value (string):
3773 ```
3774 <enabled/> or <disabled/>
3775 ```
3776 OMA-URI:
3777 ```
3778 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_Allow
3779 ```
3780 Value (string):
3781 ```
3782 <enabled/>
3783 <data id="Permissions" value="1&#xF000;https://example.org"/>
3784 ```
3785 OMA-URI:
3786 ```
3787 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_Block
3788 ```
3789 Value (string):
3790 ```
3791 <enabled/>
3792 <data id="Permissions" value="1&#xF000;https://example.edu"/>
3793 ```
3794 OMA-URI:
3795 ```
3796 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_BlockNewRequests
3797 ```
3798 Value (string):
3799 ```
3800 <enabled/> or <disabled/>
3801 ```
3802 OMA-URI:
3803 ```
3804 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_Locked
3805 ```
3806 Value (string):
3807 ```
3808 <enabled/> or <disabled/>
3809 ```
3810 #### macOS
3811 ```
3812 <dict>
3813   <key>Permissions</key>
3814   <dict>
3815     <key>Camera</key>
3816     <dict>
3817       <key>Allow</key>
3818       <array>
3819         <string>https://example.org</string>
3820         <string>https://example.org:1234</string>
3821       </array>
3822       <key>Block</key>
3823       <array>
3824         <string>https://example.edu</string>
3825       </array>
3826       <key>BlockNewRequests</key>
3827       <true/> | <false/>
3828       <key>Locked</key>
3829       <true/> | <false/>
3830     </dict>
3831     <key>Microphone</key>
3832     <dict>
3833       <key>Allow</key>
3834       <array>
3835         <string>https://example.org</string>
3836       </array>
3837       <key>Block</key>
3838       <array>
3839         <string>https://example.edu</string>
3840       </array>
3841       <key>BlockNewRequests</key>
3842       <true/> | <false/>
3843       <key>Locked</key>
3844       <true/> | <false/>
3845     </dict>
3846     <key>Location</key>
3847     <dict>
3848       <key>Allow</key>
3849       <array>
3850         <string>https://example.org</string>
3851       </array>
3852       <key>Block</key>
3853       <array>
3854         <string>https://example.edu</string>
3855       </array>
3856       <key>BlockNewRequests</key>
3857       <true/> | <false/>
3858       <key>Locked</key>
3859       <true/> | <false/>
3860     </dict>
3861     <key>Notifications</key>
3862     <dict>
3863       <key>Allow</key>
3864       <array>
3865         <string>https://example.org</string>
3866       </array>
3867       <key>Block</key>
3868       <array>
3869         <string>https://example.edu</string>
3870       </array>
3871       <key>BlockNewRequests</key>
3872       <true/>
3873       <key>Locked</key>
3874       <true/>
3875     </dict>
3876     <key>Autoplay</key>
3877     <dict>
3878       <key>Allow</key>
3879       <array>
3880         <string>https://example.org</string>
3881       </array>
3882       <key>Block</key>
3883       <array>
3884         <string>https://example.edu</string>
3885       </array>
3886       <key>Default</key>
3887       <string>allow-audio-video | block-audio | block-audio-video</string>
3888       <key>Locked</key>
3889       <true/> | <false/>
3890     </dict>
3891   </dict>
3892 </dict>
3893 ```
3894 #### policies.json
3895 ```
3896 {
3897   "policies": {
3898     "Permissions": {
3899       "Camera": {
3900         "Allow": ["https://example.org","https://example.org:1234"],
3901         "Block": ["https://example.edu"],
3902         "BlockNewRequests": true | false,
3903         "Locked": true | false
3904       },
3905       "Microphone": {
3906         "Allow": ["https://example.org"],
3907         "Block": ["https://example.edu"],
3908         "BlockNewRequests": true | false,
3909         "Locked": true | false
3910       },
3911       "Location": {
3912         "Allow": ["https://example.org"],
3913         "Block": ["https://example.edu"],
3914         "BlockNewRequests": true | false,
3915         "Locked": true | false
3916       },
3917       "Notifications": {
3918         "Allow": ["https://example.org"],
3919         "Block": ["https://example.edu"],
3920         "BlockNewRequests": true | false,
3921         "Locked": true | false
3922       },
3923       "Autoplay": {
3924         "Allow": ["https://example.org"],
3925         "Block": ["https://example.edu"],
3926         "Default": "allow-audio-video" | "block-audio" | "block-audio-video",
3927         "Locked": true | false
3928       }
3929     }
3930   }
3931 }
3932 ```
3933 ### PictureInPicture
3934
3935 Enable or disable Picture-in-Picture as well as prevent the user from enabling or disabling it (Locked).
3936
3937 **Compatibility:** Firefox 78, Firefox ESR 78\
3938 **CCK2 Equivalent:** N/A\
3939 **Preferences Affected:** `media.videocontrols.picture-in-picture.video-toggle.enabled`
3940
3941 #### Windows (GPO)
3942 ```
3943 Software\Policies\Mozilla\Firefox\PictureInPicture\Enabled = 0x1 | 0x0
3944 Software\Policies\Mozilla\Firefox\PictureInPicture\Locked = 0x1 | 0x0
3945
3946 ```
3947 #### Windows (Intune)
3948 OMA-URI:
3949 ```
3950 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PictureInPicture/PictureInPicture_Enabled
3951 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PictureInPicture/PictureInPicture_Locked
3952 ```
3953 Value (string):
3954 ```
3955 <enabled/> or <disabled/>
3956 ```
3957 #### macOS
3958 ```
3959 <dict>
3960   <key>PictureInPicture</key>
3961   <dict>
3962     <key>Enabled</key>
3963     <true/> | <false/>
3964     <key>Locked</key>
3965     <true/> | <false/>
3966   </dict>
3967 </dict>
3968 ```
3969 #### policies.json
3970 ```
3971 {
3972   "policies": {
3973     "PictureInPicture": {
3974       "Enabled": true | false,
3975       "Locked": true | false
3976     }
3977   }
3978 }
3979 ```
3980 ### PopupBlocking
3981 Configure the default pop-up window policy as well as origins for which pop-up windows are allowed.
3982
3983 `Allow` is a list of origins where popup-windows are allowed.
3984
3985 `Default` determines whether or not pop-up windows are allowed by default.
3986
3987 `Locked` prevents the user from changing pop-up preferences.
3988
3989 **Compatibility:** Firefox 60, Firefox ESR 60\
3990 **CCK2 Equivalent:** `permissions.popup`\
3991 **Preferences Affected:** `dom.disable_open_during_load`
3992
3993 #### Windows (GPO)
3994 ```
3995 Software\Policies\Mozilla\Firefox\PopupBlocking\Allow\1 = "https://example.org"
3996 Software\Policies\Mozilla\Firefox\PopupBlocking\Allow\2 = "https://example.edu"
3997 Software\Policies\Mozilla\Firefox\PopupBlocking\Default = 0x1 | 0x0
3998 Software\Policies\Mozilla\Firefox\PopupBlocking\Locked = 0x1 | 0x0
3999 ```
4000 #### Windows (Intune)
4001 OMA-URI:
4002 ```
4003 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Allow
4004 ```
4005 Value (string):
4006 ```
4007 <enabled/>
4008 <data id="Permissions" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
4009 ```
4010 OMA-URI:
4011 ```
4012 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Default
4013 ```
4014 Value (string):
4015 ```
4016 <enabled/> or <disabled/>
4017 ```
4018 OMA-URI:
4019 ```
4020 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Locked
4021 ```
4022 Value (string):
4023 ```
4024 <enabled/> or <disabled/>
4025 ```
4026 #### macOS
4027 ```
4028 <dict>
4029   <key>PopupBlocking</key>
4030   <dict>
4031     <key>Allow</key>
4032     <array>
4033       <string>http://example.org</string>
4034       <string>http://example.edu</string>
4035     </array>
4036     <key>Default</key>
4037     <true/> | <false/>
4038     <key>Locked</key>
4039     <true/> | <false/>
4040   </dict>
4041 </dict>
4042 ```
4043 #### policies.json
4044 ```
4045 {
4046   "policies": {
4047     "PopupBlocking": {
4048       "Allow": ["http://example.org/",
4049                 "http://example.edu/"],
4050       "Default": true | false,
4051       "Locked": true | false
4052     }
4053   }
4054 }
4055 ```
4056 ### Preferences
4057 Set and lock preferences.
4058
4059 **NOTE** On Windows, in order to use this policy, you must clear all settings in the old **Preferences (Deprecated)** section.
4060
4061 Previously you could only set and lock a subset of preferences. Starting with Firefox 81 and Firefox ESR 78.3 you can set many more preferences. You can also set default preferences, user preferences and you can clear preferences.
4062
4063 Preferences that start with the following prefixes are supported:
4064 ```
4065 accessibility.
4066 app.update.* (Firefox 86, Firefox 78.8)
4067 browser.
4068 datareporting.policy.
4069 dom.
4070 extensions.
4071 general.autoScroll (Firefox 83, Firefox ESR 78.5)
4072 general.smoothScroll (Firefox 83, Firefox ESR 78.5)
4073 geo.
4074 gfx.
4075 intl.
4076 layers.
4077 layout.
4078 media.
4079 network.
4080 pdfjs. (Firefox 84, Firefox ESR 78.6)
4081 places.
4082 print.
4083 signon. (Firefox 83, Firefox ESR 78.5)
4084 spellchecker. (Firefox 84, Firefox ESR 78.6)
4085 ui.
4086 widget.
4087 ```
4088 as well as the following security preferences:
4089 | Preference | Type | Default
4090 | --- | --- | ---
4091 | security.default_personal_cert | string | Ask Every Time
4092 | &nbsp;&nbsp;&nbsp;&nbsp;If set to Select Automatically, Firefox automatically chooses the default personal certificate.
4093 | security.insecure_connection_text.enabled | bool | false
4094 | &nbsp;&nbsp;&nbsp;&nbsp;If set to true, adds the words "Not Secure" for insecure sites.
4095 | security.insecure_connection_text.pbmode.enabled | bool | false
4096 | &nbsp;&nbsp;&nbsp;&nbsp;If set to true, adds the words "Not Secure" for insecure sites in private browsing.
4097 | security.insecure_field_warning.contextual.enabled | bool | true
4098 | &nbsp;&nbsp;&nbsp;&nbsp;If set to false, remove the warning for inscure login fields.
4099 | security.mixed_content.block_active_content | boolean | true
4100 | &nbsp;&nbsp;&nbsp;&nbsp;If false, mixed active content (HTTP and HTTPS) is not blocked.
4101 | security.osclientcerts.autoload | boolean | false
4102 | &nbsp;&nbsp;&nbsp;&nbsp;If true, client certificates are loaded from the operating system certificate store.
4103 | security.ssl.errorReporting.enabled | boolean | true
4104 | &nbsp;&nbsp;&nbsp;&nbsp;If false, SSL errors cannot be sent to Mozilla.
4105 | security.tls.hello_downgrade_check | boolean | true
4106 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the TLS 1.3 downgrade check is disabled.
4107 | security.tls.version.enable-deprecated | boolean | false
4108 | &nbsp;&nbsp;&nbsp;&nbsp;If true, browser will accept TLS 1.0. and TLS 1.1 (Firefox 86, Firefox 78.8)
4109 | security.warn_submit_secure_to_insecure | boolean | true
4110 | &nbsp;&nbsp;&nbsp;&nbsp;If false, no warning is shown when submitting s form from https to http.
4111 &nbsp;
4112
4113 Using the preference as the key, set the `Value` to the corresponding preference value.
4114
4115 `Status` can be "default", "locked", "user" or "clear"
4116
4117 Default preferences can be modified by the user.
4118
4119 If a value is locked, it is also set as the default.
4120
4121 User preferences persist across invocations of Firefox. It is the equivalent of a user setting the preference. They are most useful when a preference is needed very early in startup so it can't be set as default by policy.
4122
4123 User preferences persist even if the policy is removed, so if you need to remove them, you should use the clear policy.
4124
4125 See the examples below for more detail.
4126
4127 IMPORTANT: Make sure you're only setting a particular preference using this mechanism and not some other way.
4128
4129 Status
4130 **Compatibility:** Firefox 81, Firefox ESR 78.3\
4131 **CCK2 Equivalent:** `preferences`\
4132 **Preferences Affected:** Many
4133
4134 #### Windows (GPO)
4135 Software\Policies\Mozilla\Firefox\Preferences (REG_MULTI_SZ) =
4136 ```
4137 {
4138   "accessibility.force_disabled": {
4139     "Value": 1,
4140     "Status": "default"
4141   },
4142   "browser.cache.disk.parent_directory": {
4143     "Value": "SOME_NATIVE_PATH",
4144     "Status": "user"
4145   },
4146   "browser.tabs.warnOnClose": {
4147     "Value": false,
4148     "Status": "locked"
4149   }
4150 }
4151 ```
4152 #### Windows (Intune)
4153 OMA-URI:
4154 ```
4155 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Preferences
4156 ```
4157 Value (string):
4158 ```
4159 <enabled/>
4160 <data id="JSON" value='
4161 {
4162   "accessibility.force_disabled": {
4163     "Value": 1,
4164     "Status": "default"
4165   },
4166   "browser.cache.disk.parent_directory": {
4167     "Value": "SOME_NATIVE_PATH",
4168     "Status": "user"
4169   },
4170   "browser.tabs.warnOnClose": {
4171     "Value": false,
4172     "Status": "locked"
4173   }
4174 }'/>
4175 ```
4176 #### macOS
4177 ```
4178 <dict>
4179   <key>Preferences</key>
4180   <dict>
4181     <key>accessibility.force_disabled</key>
4182     <dict>
4183       <key>Value</key>
4184       <integer>1</integer>
4185       <key>Status</key>
4186       <string>default</string>
4187     </dict>
4188     <key>browser.cache.disk.parent_directory</key>
4189     <dict>
4190       <key>Value</key>
4191       <string>SOME_NATIVE_PATH</string>
4192       <key>Status</key>
4193       <string>user</string>
4194     </dict>
4195     <key>browser.tabs.warnOnClose</key>
4196     <dict>
4197       <key>Value</key>
4198       <false/>
4199       <key>Status</key>
4200       <string>locked</string>
4201     </dict>
4202   </dict>
4203 </dict>
4204 ```
4205 #### policies.json
4206 ```
4207 {
4208   "policies": {
4209     "Preferences": {
4210       "accessibility.force_disabled": {
4211         "Value": 1,
4212         "Status": "default"
4213       },
4214       "browser.cache.disk.parent_directory": {
4215         "Value": "SOME_NATIVE_PATH",
4216         "Status": "user"
4217       },
4218       "browser.tabs.warnOnClose": {
4219         "Value": false,
4220         "Status": "locked"
4221       }
4222     }
4223   }
4224 }
4225 ```
4226 ### Preferences (Deprecated)
4227 Set and lock certain preferences.
4228
4229 **Compatibility:** See below\
4230 **CCK2 Equivalent:** `preferences`\
4231 **Preferences Affected:** See below
4232
4233 | Preference | Type | Compatibility | Default
4234 | --- | --- | --- | ---
4235 | accessibility.force_disabled | integer | Firefox 70, Firefox ESR 68.2 | 0
4236 | &nbsp;&nbsp;&nbsp;&nbsp;If set to 1, platform accessibility is disabled.
4237 | app.update.auto (Deprecated - Switch to AppAutoUpdate policy) | boolean | Firefox 68, Firefox ESR 68 | true
4238 | &nbsp;&nbsp;&nbsp;&nbsp;If false, Firefox doesn't automatically install update.
4239 | browser.bookmarks.autoExportHTML | boolean | Firefox 70, Firefox ESR 68.2 | false
4240 | &nbsp;&nbsp;&nbsp;&nbsp;If true, bookmarks are exported on shutdown.
4241 | browser.bookmarks.file | string | Firefox 70, Firefox ESR 68.2 | N/A
4242 | &nbsp;&nbsp;&nbsp;&nbsp;If set, the name of the file where bookmarks are exported and imported.
4243 | browser.bookmarks.restore_default_bookmarks | boolean | Firefox 70, Firefox ESR 68.2 | N/A
4244 | &nbsp;&nbsp;&nbsp;&nbsp;If true, bookmarks are restored to their defaults.
4245 | browser.cache.disk.enable | boolean | Firefox 68, Firefox ESR 68 | true
4246 | &nbsp;&nbsp;&nbsp;&nbsp;If false, don't store cache on the hard drive.
4247 | ~browser.cache.disk.parent_directory~ | string | Firefox 68, Firefox ESR 68 | Profile temporary directory
4248 | &nbsp;&nbsp;&nbsp;&nbsp;~If set, changes the location of the disk cache.~ This policy doesn't work. It's being worked on.
4249 | browser.fixup.dns_first_for_single_words | boolean | Firefox 68, Firefox ESR 68 | false
4250 | &nbsp;&nbsp;&nbsp;&nbsp;If true, single words are sent to DNS, not directly to search.
4251 | browser.newtabpage.activity-stream.default.sites | string | Firefox 72, ESR 68.4 | Locale dependent
4252 | &nbsp;&nbsp;&nbsp;&nbsp;If set, a list of URLs to use as the default top sites on the new tab page. Due to Firefox limitations, search sites can't be added. In addition, sites with the same name but different TLDs (example.org/example.com) will not display properly.
4253 | browser.places.importBookmarksHTML | boolean | Firefox 70, Firefox ESR 68.2
4254 | &nbsp;&nbsp;&nbsp;&nbsp;If true, bookmarks are always imported on startup.
4255 | browser.safebrowsing.phishing.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
4256 | &nbsp;&nbsp;&nbsp;&nbsp;If false, phishing protection is not enabled (Not recommended)
4257 | browser.safebrowsing.malware.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
4258 | &nbsp;&nbsp;&nbsp;&nbsp;If false, malware protection is not enabled (Not recommended)
4259 | browser.search.update | boolean | Firefox 68, Firefox ESR 68 | true
4260 | &nbsp;&nbsp;&nbsp;&nbsp;If false, updates for search engines are not checked.
4261 | browser.slowStartup.notificationDisabled | boolean | Firefox 70, Firefox ESR 68.2 | false
4262 | &nbsp;&nbsp;&nbsp;&nbsp;If true, a notification isn't shown if startup is slow.
4263 | browser.tabs.warnOnClose | boolean | Firefox 68, Firefox ESR 68 | true
4264 | &nbsp;&nbsp;&nbsp;&nbsp;If false, there is no warning when the browser is closed.
4265 | browser.taskbar.previews.enable | boolean | Firefox 70, Firefox ESR 68.2 (Windows only) | false
4266 | &nbsp;&nbsp;&nbsp;&nbsp;If true, tab previews are shown in the Windows taskbar.
4267 | browser.urlbar.suggest.bookmark | boolean | Firefox 68, Firefox ESR 68 | true
4268 | &nbsp;&nbsp;&nbsp;&nbsp;If false, bookmarks aren't suggested when typing in the URL bar.
4269 | browser.urlbar.suggest.history | boolean | Firefox 68, Firefox ESR 68 | true
4270 | &nbsp;&nbsp;&nbsp;&nbsp;If false, history isn't suggested when typing in the URL bar.
4271 | browser.urlbar.suggest.openpage | boolean | Firefox 68, Firefox ESR 68 | true
4272 | &nbsp;&nbsp;&nbsp;&nbsp;If false, open tabs aren't suggested when typing in the URL bar.
4273 | datareporting.policy.dataSubmissionPolicyBypassNotification | boolean | Firefox 68, Firefox ESR 68 | false
4274 | &nbsp;&nbsp;&nbsp;&nbsp;If true, don't show the privacy policy tab on first run.
4275 | dom.allow_scripts_to_close_windows | boolean | Firefox 70, Firefox ESR 68.2 | false
4276 | &nbsp;&nbsp;&nbsp;&nbsp;If false, web page can close windows.
4277 | dom.disable_window_flip | boolean | Firefox 68, Firefox ESR 68 | true
4278 | &nbsp;&nbsp;&nbsp;&nbsp;If false, web pages can focus and activate windows.
4279 | dom.disable_window_move_resize | boolean | Firefox 68, Firefox ESR 68 | false
4280 | &nbsp;&nbsp;&nbsp;&nbsp;If true, web pages can't move or resize windows.
4281 | dom.event.contextmenu.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4282 | &nbsp;&nbsp;&nbsp;&nbsp;If false, web pages can't override context menus.
4283 | dom.keyboardevent.keypress.hack.dispatch_non_printable_keys.addl | string | Firefox 68, Firefox ESR 68 | N/A
4284 | &nbsp;&nbsp;&nbsp;&nbsp;See https://support.mozilla.org/en-US/kb/dom-events-changes-introduced-firefox-66
4285 | dom.keyboardevent.keypress.hack.use_legacy_keycode_and_charcode.addl | string | Firefox 68, Firefox ESR 68 | N/A
4286 | &nbsp;&nbsp;&nbsp;&nbsp;See https://support.mozilla.org/en-US/kb/dom-events-changes-introduced-firefox-66
4287 | dom.xmldocument.load.enabled | boolean | Firefox ESR 68.5 | true.
4288 | &nbsp;&nbsp;&nbsp;&nbsp;If false, XMLDocument.load is not available.
4289 | dom.xmldocument.async.enabled | boolean | Firefox ESR 68.5 | true
4290 | &nbsp;&nbsp;&nbsp;&nbsp;If false, XMLDocument.async is not available.
4291 | extensions.blocklist.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
4292 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the extensions blocklist is not used (Not recommended)
4293 | extensions.getAddons.showPane | boolean | Firefox 68, Firefox ESR 68 | N/A
4294 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the Recommendations tab is not displayed in the Add-ons Manager.
4295 | extensions.htmlaboutaddons.recommendations.enabled | boolean | Firefox 72, Firefox ESR 68.4 | true
4296 | &nbsp;&nbsp;&nbsp;&nbsp;If false, recommendations are not shown on the Extensions tab in the Add-ons Manager.
4297 | geo.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
4298 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the geolocation API is disabled. | Language dependent
4299 | intl.accept_languages | string | Firefox 70, Firefox ESR 68.2
4300 | &nbsp;&nbsp;&nbsp;&nbsp;If set, preferred language for web pages.
4301 | media.eme.enabled (Deprecated - Switch to EncryptedMediaExtensions policy) | boolean | Firefox 70, Firefox ESR 68.2 | true
4302 | &nbsp;&nbsp;&nbsp;&nbsp;If false, Encrypted Media Extensions are not enabled.
4303 | media.gmp-gmpopenh264.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4304 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the OpenH264  plugin is not downloaded.
4305 | media.gmp-widevinecdm.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4306 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the Widevine plugin is not downloaded.
4307 | media.peerconnection.enabled | boolean | Firefox 72, Firefox ESR 68.4 | true
4308 | &nbsp;&nbsp;&nbsp;&nbsp;If false, WebRTC is disabled
4309 | media.peerconnection.ice.obfuscate_host_addresses.whitelist (Deprecated) | string | Firefox 72, Firefox ESR 68.4 | N/A
4310 | &nbsp;&nbsp;&nbsp;&nbsp;If set, a list of domains for which mDNS hostname obfuscation is
4311 disabled
4312 | media.peerconnection.ice.obfuscate_host_addresses.blocklist | string | Firefox 79, Firefox ESR 78.1 | N/A
4313 | &nbsp;&nbsp;&nbsp;&nbsp;If set, a list of domains for which mDNS hostname obfuscation is
4314 disabled
4315 | network.dns.disableIPv6 | boolean | Firefox 68, Firefox ESR 68 | false
4316 | &nbsp;&nbsp;&nbsp;&nbsp;If true, IPv6 DNS lokoups are disabled.
4317 | network.IDN_show_punycode | boolean | Firefox 68, Firefox ESR 68 | false
4318 | &nbsp;&nbsp;&nbsp;&nbsp;If true, display the punycode version of internationalized domain names.
4319 | places.history.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4320 | &nbsp;&nbsp;&nbsp;&nbsp;If false, history is not enabled.
4321 | print.save_print_settings | boolean | Firefox 70, Firefox ESR 68.2 | true
4322 | &nbsp;&nbsp;&nbsp;&nbsp;If false, print settings are not saved between jobs.
4323 | security.default_personal_cert | string | Firefox 68, Firefox ESR 68 | Ask Every Time
4324 | &nbsp;&nbsp;&nbsp;&nbsp;If set to Select Automatically, Firefox automatically chooses the default personal certificate.
4325 | security.mixed_content.block_active_content | boolean | Firefox 70, Firefox ESR 68.2 | true
4326 | &nbsp;&nbsp;&nbsp;&nbsp;If false, mixed active content (HTTP and HTTPS) is not blocked.
4327 | security.osclientcerts.autoload | boolean | Firefox 72 (Windows), Firefox 75 (macOS)  | false
4328 | &nbsp;&nbsp;&nbsp;&nbsp;If true, client certificates are loaded from the operating system certificate store.
4329 | security.ssl.errorReporting.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4330 | &nbsp;&nbsp;&nbsp;&nbsp;If false, SSL errors cannot be sent to Mozilla.
4331 | security.tls.hello_downgrade_check | boolean | Firefox 72, Firefox ESR 68.4 | true
4332 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the TLS 1.3 downgrade check is disabled.
4333 | ui.key.menuAccessKeyFocuses | boolean | Firefox 68, Firefox ESR 68 | true
4334 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the Alt key doesn't show the menubar on Windows.
4335 | widget.content.gtk-theme-override | string | Firefox 72, Firefox ESR 68.4 (Linux only) | N/A
4336 | &nbsp;&nbsp;&nbsp;&nbsp;If set, overrides the GTK theme for widgets.
4337 #### Windows (GPO)
4338 ```
4339 Software\Policies\Mozilla\Firefox\Preferences\boolean_preference_name = 0x1 | 0x0
4340 Software\Policies\Mozilla\Firefox\Preferences\string_preference_name = "string_value"
4341 ```
4342 #### Windows (Intune)
4343 OMA-URI: (periods are replaced by underscores)
4344 ```
4345 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Preferences/boolean_preference_name
4346 ```
4347 Value (string):
4348 ```
4349 <enabled/> or <disabled/>
4350 ```
4351 OMA-URI: (periods are replaced by underscores)
4352 ```
4353 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Preferences/string_preference_name
4354 ```
4355 Value (string):
4356 ```
4357 <enabled/>
4358 <data id="Preferences_String" value="string_value"/>
4359 ```
4360 #### macOS
4361 ```
4362 <dict>
4363   <key>Preferences</key>
4364   <dict>
4365     <key>boolean_preference_name</key>
4366     <true/> | <false/>
4367     <key>string_preference_name</key>
4368     <string>string_value</string>
4369   </dict>
4370 </dict>
4371 ```
4372 #### policies.json
4373 ```
4374 {
4375   "policies": {
4376     "Preferences": {
4377       "boolean_preference_name": true | false,
4378       "string_preference_name": "string_value"
4379     }
4380   }
4381 }
4382 ```
4383 ### PromptForDownloadLocation
4384 Ask where to save each file before downloading.
4385
4386 **Compatibility:** Firefox 68, Firefox ESR 68\
4387 **CCK2 Equivalent:** N/A\
4388 **Preferences Affected:** `browser.download.useDownloadDir`
4389
4390 #### Windows (GPO)
4391 ```
4392 Software\Policies\Mozilla\Firefox\PromptForDownloadLocation = 0x1 | 0x0
4393 ```
4394 #### Windows (Intune)
4395 OMA-URI:
4396 ```
4397 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PromptForDownloadLocation
4398 ```
4399 Value (string):
4400 ```
4401 <enabled/> or <disabled/>
4402 ```
4403 #### macOS
4404 ```
4405 <dict>
4406   <key>PromptForDownloadLocation</key>
4407   <true/> | <false/>
4408 </dict>
4409 ```
4410 #### policies.json
4411 ```
4412 {
4413   "policies": {
4414     "PromptForDownloadLocation": true | false
4415   }
4416 }
4417 ```
4418 ### Proxy
4419 Configure proxy settings. These settings correspond to the connection settings in Firefox preferences.
4420 To specify ports, append them to the hostnames with a colon (:).
4421
4422 `Mode` is the proxy method being used.
4423
4424 `Locked` is whether or not proxy settings can be changed.
4425
4426 `HTTPProxy` is the HTTP proxy server.
4427
4428 `UseHTTPProxyForAllProtocols` is whether or not the HTTP proxy should be used for all other proxies.
4429
4430 `SSLProxy` is the SSL proxy server.
4431
4432 `FTPProxy` is the FTP proxy server.
4433
4434 `SOCKSProxy` is the SOCKS proxy server
4435
4436 `SOCKSVersion` is the SOCKS version (4 or 5)
4437
4438 `Passthrough` is list of hostnames or IP addresses that will not be proxied. Use `<local>` to bypass proxying for all hostnames which do not contain periods.
4439
4440 `AutoConfigURL` is a  URL for proxy configuration (only used if Mode is autoConfig).
4441
4442 `AutoLogin` means do not prompt for authentication if password is saved.
4443
4444 `UseProxyForDNS` to use proxy DNS when using SOCKS v5.
4445
4446 **Compatibility:** Firefox 60, Firefox ESR 60\
4447 **CCK2 Equivalent:** `networkProxy*`\
4448 **Preferences Affected:** `network.proxy.type`,`network.proxy.autoconfig_url`,`network.proxy.socks_remote_dns`,`signon.autologin.proxy`,`network.proxy.socks_version`,`network.proxy.no_proxies_on`,`network.proxy.share_proxy_settings`,`network.proxy.http`,`network.proxy.http_port`,`network.proxy.ftp`,`network.proxy.ftp_port`,`network.proxy.ssl`,`network.proxy.ssl_port`,`network.proxy.socks`,`network.proxy.socks_port`
4449
4450 #### Windows (GPO)
4451 ```
4452 Software\Policies\Mozilla\Firefox\Proxy\Mode = "none" | "system" | "manual" | "autoDetect" | "autoConfig"
4453 Software\Policies\Mozilla\Firefox\Proxy\Locked = 0x1 | 0x0
4454 Software\Policies\Mozilla\Firefox\=Proxy\HTTPProxy = https://httpproxy.example.com
4455 Software\Policies\Mozilla\Firefox\Proxy\UseHTTPProxyForAllProtocols = 0x1 | 0x0
4456 Software\Policies\Mozilla\Firefox\Proxy\SSLProxy = https://sslproxy.example.com
4457 Software\Policies\Mozilla\Firefox\Proxy\FTPProxy = https://ftpproxy.example.com
4458 Software\Policies\Mozilla\Firefox\Proxy\SOCKSProxy = https://socksproxy.example.com
4459 Software\Policies\Mozilla\Firefox\Proxy\SOCKSVersion = 0x4 | 0x5
4460 Software\Policies\Mozilla\Firefox\Proxy\Passthrough = <local>
4461 Software\Policies\Mozilla\Firefox\Proxy\AutoConfigURL = URL_TO_AUTOCONFIG
4462 Software\Policies\Mozilla\Firefox\Proxy\AutoLogin = 0x1 | 0x0
4463 Software\Policies\Mozilla\Firefox\Proxy\UseProxyForDNS = 0x1 | 0x0
4464 ```
4465 #### Windows (Intune)
4466 OMA-URI:
4467 ```
4468 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Proxy
4469 ```
4470 Value (string):
4471 ```
4472 <enabled/>
4473 <data id="ProxyLocked" value="true | false"/>
4474 <data id="ConnectionType" value="none | system | manual | autoDetect | autoConfig"/>
4475 <data id="HTTPProxy" value="https://httpproxy.example.com"/>
4476 <data id="UseHTTPProxyForAllProtocols" value="true | false"/>
4477 <data id="SSLProxy" value="https://sslproxy.example.com"/>
4478 <data id="FTPProxy" value="https://ftpproxy.example.com"/>
4479 <data id="SOCKSProxy" value="https://socksproxy.example.com"/>
4480 <data id="SOCKSVersion" value="4 | 5"/>
4481 <data id="AutoConfigURL" value="URL_TO_AUTOCONFIG"/>
4482 <data id="Passthrough" value="<local>"/>
4483 <data id="AutoLogin" value="true | false"/>
4484 <data id="UseProxyForDNS" value="true | false"/>
4485 ```
4486 #### macOS
4487 ```
4488 <dict>
4489   <key>Proxy</key>
4490   <dict>
4491     <key>Mode</key>
4492     <string>none | system | manual | autoDetect | autoConfig</string>
4493     <key>Locked</key>
4494     <true> | </false>
4495     <key>HTTPProxy</key>
4496     <string>https://httpproxy.example.com</string>
4497     <key>UseHTTPProxyForAllProtocols</key>
4498     <true> | </false>
4499     <key>SSLProxy</key>
4500     <string>https://sslproxy.example.com</string>
4501     <key>FTPProxy</key>
4502     <string>https://ftpproxy.example.com</string>
4503     <key>SOCKSProxy</key>
4504     <string>https://socksproxy.example.com</string>
4505     <key>SOCKSVersion</key>
4506     <string>4 | 5</string>
4507     <key>Passthrough</key>
4508     <string>&lt;local>&gt;</string>
4509     <key>AutoConfigURL</key>
4510     <string>URL_TO_AUTOCONFIG</string>
4511     <key>AutoLogin</key>
4512     <true> | </false>
4513     <key>UseProxyForDNS</key>
4514     <true> | </false>
4515   </dict>
4516 </dict>
4517 ```
4518 #### policies.json
4519 ```
4520 {
4521   "policies": {
4522     "Proxy": {
4523       "Mode": "none" | "system" | "manual" | "autoDetect" | "autoConfig",
4524       "Locked": true | false,
4525       "HTTPProxy": "hostname",
4526       "UseHTTPProxyForAllProtocols": true | false,
4527       "SSLProxy": "hostname",
4528       "FTPProxy": "hostname",
4529       "SOCKSProxy": "hostname",
4530       "SOCKSVersion": 4 | 5,
4531       "Passthrough": "<local>",
4532       "AutoConfigURL": "URL_TO_AUTOCONFIG",
4533       "AutoLogin": true | false,
4534       "UseProxyForDNS": true | false
4535     }
4536   }
4537 }
4538 ```
4539 ### RequestedLocales
4540 Set the the list of requested locales for the application in order of preference. It will cause the corresponding language pack to become active.
4541
4542 Note: For Firefox 68, this can now be a string so that you can specify an empty value.
4543
4544 **Compatibility:** Firefox 64, Firefox ESR 60.4, Updated in Firefox 68, Firefox ESR 68\
4545 **CCK2 Equivalent:** N/A\
4546 **Preferences Affected:** N/A
4547 #### Windows (GPO)
4548 ```
4549 Software\Policies\Mozilla\Firefox\RequestedLocales\1 = "de"
4550 Software\Policies\Mozilla\Firefox\RequestedLocales\2 = "en-US"
4551
4552 or
4553
4554 Software\Policies\Mozilla\Firefox\RequestedLocales = "de,en-US"
4555 ```
4556 #### Windows (Intune)
4557 OMA-URI:
4558 ```
4559 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/RequestedLocalesString
4560 ```
4561 Value (string):
4562 ```
4563 <enabled/>
4564 <data id="Preferences_String" value="de,en-US"/>
4565 ```
4566 #### macOS
4567 ```
4568 <dict>
4569   <key>RequestedLocales</key>
4570   <array>
4571     <string>de</string>
4572     <string>en-US</string>
4573   </array>
4574 </dict>
4575
4576 or
4577
4578 <dict>
4579   <key>RequestedLocales</key>
4580   <string>de,en-US</string>
4581 </dict>
4582
4583 ```
4584 #### policies.json
4585 ```
4586 {
4587   "policies": {
4588     "RequestedLocales": ["de", "en-US"]
4589   }
4590 }
4591
4592 or
4593
4594 {
4595   "policies": {
4596     "RequestedLocales": "de,en-US"
4597   }
4598 }
4599 ```
4600 <a name="SanitizeOnShutdown"></a>
4601
4602 ### SanitizeOnShutdown (Selective)
4603 Clear data on shutdown. Choose from Cache, Cookies, Download History, Form & Search History, Browsing History, Active Logins, Site Preferences and Offline Website Data.
4604
4605 Previously, these values were always locked. Starting with Firefox 74 and Firefox ESR 68.6, you can use the `Locked` option to either keep the values unlocked (set it to false), or lock only the values you set (set it to true). If you want the old behavior of locking everything, do not set `Locked` at all.
4606
4607 **Compatibility:** Firefox 68, Firefox ESR 68 (Locked added in 74/68.6)\
4608 **CCK2 Equivalent:** N/A\
4609 **Preferences Affected:** `privacy.sanitize.sanitizeOnShutdown`,`privacy.clearOnShutdown.cache`,`privacy.clearOnShutdown.cookies`,`privacy.clearOnShutdown.downloads`,`privacy.clearOnShutdown.formdata`,`privacy.clearOnShutdown.history`,`privacy.clearOnShutdown.sessions`,`privacy.clearOnShutdown.siteSettings`,`privacy.clearOnShutdown.offlineApps`
4610 #### Windows (GPO)
4611 ```
4612 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Cache = 0x1 | 0x0
4613 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Cookies = 0x1 | 0x0
4614 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Downloads = 0x1 | 0x0
4615 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\FormData = 0x1 | 0x0
4616 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\History = 0x1 | 0x0
4617 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Sessions = 0x1 | 0x0
4618 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\SiteSettings = 0x1 | 0x0
4619 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\OfflineApps = 0x1 | 0x0
4620 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Locked = 0x1 | 0x0
4621 ```
4622 #### Windows (Intune)
4623 OMA-URI:
4624 ```
4625 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/A_SanitizeOnShutdown_Cache
4626 ```
4627 Value (string):
4628 ```
4629 <enabled/> or <disabled/>
4630 ```
4631 OMA-URI:
4632 ```
4633 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/B_SanitizeOnShutdown_Cookies
4634 ```
4635 Value (string):
4636 ```
4637 <enabled/> or <disabled/>
4638 ```
4639 OMA-URI:
4640 ```
4641 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/C_SanitizeOnShutdown_Downloads
4642 ```
4643 Value (string):
4644 ```
4645 <enabled/> or <disabled/>
4646 ```
4647 OMA-URI:
4648 ```
4649 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/D_SanitizeOnShutdown_FormData
4650 ```
4651 Value (string):
4652 ```
4653 <enabled/> or <disabled/>
4654 ```
4655 OMA-URI:
4656 ```
4657 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/E_SanitizeOnShutdown_History
4658 ```
4659 Value (string):
4660 ```
4661 <enabled/> or <disabled/>
4662 ```
4663 OMA-URI:
4664 ```
4665 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/F_SanitizeOnShutdown_Sessions
4666 ```
4667 Value (string):
4668 ```
4669 <enabled/> or <disabled/>
4670 ```
4671 OMA-URI:
4672 ```
4673 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/G_SanitizeOnShutdown_SiteSettings
4674 ```
4675 Value (string):
4676 ```
4677 <enabled/> or <disabled/>
4678 ```
4679 OMA-URI:
4680 ```
4681 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/H_SanitizeOnShutdown_OfflineApps
4682 ```
4683 Value (string):
4684 ```
4685 <enabled/> or <disabled/>
4686 ```
4687 OMA-URI:
4688 ```
4689 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/I_SanitizeOnShutdown_Locked
4690 ```
4691 Value (string):
4692 ```
4693 <enabled/> or <disabled/>
4694 ```
4695 #### macOS
4696 ```
4697 <dict>
4698   <key>SanitizeOnShutdown</key>
4699   <dict>
4700     <key>Cache</key>
4701     <true/> | <false/>
4702     <key>Cookies</key>
4703     <true/> | <false/>
4704     <key>Downloads</key>
4705     <true/> | <false/>
4706     <key>FormData</key>
4707     <true/> | <false/>
4708     <key>History</key>
4709     <true/> | <false/>
4710     <key>Sessions</key>
4711     <true/> | <false/>
4712     <key>SiteSettings</key>
4713     <true/> | <false/>
4714     <key>OfflineApps</key>
4715     <true/> | <false/>
4716     <key>Locked</key>
4717     <true/> | <false/>
4718   </dict>
4719 </dict>
4720 ```
4721 #### policies.json
4722 ```
4723 {
4724   "policies": {
4725     "SanitizeOnShutdown": {
4726       "Cache": true | false,
4727       "Cookies": true | false,
4728       "Downloads": true | false,
4729       "FormData": true | false,
4730       "History": true | false,
4731       "Sessions": true | false,
4732       "SiteSettings": true | false,
4733       "OfflineApps": true | false,
4734       "Locked": true | false
4735     }
4736   }
4737 }
4738 ```
4739 ### SanitizeOnShutdown (All)
4740 Clear all data on shutdown, including Browsing & Download History, Cookies, Active Logins, Cache, Form & Search History, Site Preferences and Offline Website Data.
4741
4742 **Compatibility:** Firefox 60, Firefox ESR 60\
4743 **CCK2 Equivalent:** N/A\
4744 **Preferences Affected:** `privacy.sanitize.sanitizeOnShutdown`,`privacy.clearOnShutdown.cache`,`privacy.clearOnShutdown.cookies`,`privacy.clearOnShutdown.downloads`,`privacy.clearOnShutdown.formdata`,`privacy.clearOnShutdown.history`,`privacy.clearOnShutdown.sessions`,`privacy.clearOnShutdown.siteSettings`,`privacy.clearOnShutdown.offlineApps`
4745 #### Windows (GPO)
4746 ```
4747 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown = 0x1 | 0x0
4748 ```
4749 #### Windows (Intune)
4750 OMA-URI:
4751 ```
4752 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/C_SanitizeOnShutdown
4753 ```
4754 Value (string):
4755 ```
4756 <enabled/> or <disabled/>
4757 ```
4758 #### macOS
4759 ```
4760 <dict>
4761   <key>SanitizeOnShutdown</key>
4762   <true/> | <false/>
4763 </dict>
4764 ```
4765 #### policies.json
4766 ```
4767 {
4768   "policies": {
4769     "SanitizeOnShutdown": true | false
4770   }
4771 }
4772 ```
4773 ### SearchBar
4774 Set whether or not search bar is displayed.
4775
4776 **Compatibility:** Firefox 60, Firefox ESR 60\
4777 **CCK2 Equivalent:** `showSearchBar`\
4778 **Preferences Affected:** N/A
4779
4780 #### Windows (GPO)
4781 ```
4782 Software\Policies\Mozilla\Firefox\SearchBar = "unified" | "separate"
4783 ```
4784
4785 #### Windows (Intune)
4786 OMA-URI:
4787 ```
4788 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SearchBar
4789 ```
4790 Value (string):
4791 ```
4792 <enabled/>
4793 <data id="Permissions" value="unified | separate"/>
4794 ```
4795 #### macOS
4796 ```
4797 <dict>
4798   <key>SearchBar</key>
4799   <string>unified | separate</string>
4800 </dict>
4801 ```
4802 #### policies.json
4803 ```
4804 {
4805   "policies": {
4806     "SearchBar": "unified" | "separate"
4807   }
4808 }
4809 ```
4810 <a name="SearchEngines"></a>
4811
4812 ### SearchEngines (This policy is only available on the ESR.)
4813
4814 ### SearchEngines | Default
4815
4816 Set the default search engine. This policy is only available on the ESR.
4817
4818 **Compatibility:** Firefox ESR 60\
4819 **CCK2 Equivalent:** `defaultSearchEngine`\
4820 **Preferences Affected:** N/A
4821
4822 #### Windows (GPO)
4823 ```
4824 Software\Policies\Mozilla\Firefox\SearchEngines\Default = NAME_OF_SEARCH_ENGINE
4825 ```
4826 #### Windows (Intune)
4827 OMA-URI:
4828 ```
4829 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_Default
4830 ```
4831 Value (string):
4832 ```
4833 <enabled/>
4834 <data id="SearchEngines_Default" value="NAME_OF_SEARCH_ENGINE"/>
4835 ```
4836 #### macOS
4837 ```
4838 <dict>
4839   <key>SearchEngines</key>
4840   <dict>
4841     <key>Default</key>
4842     <string>NAME_OF_SEARCH_ENGINE</string>
4843   </dict>
4844 </dict>
4845 ```
4846 #### policies.json
4847 ```
4848 {
4849   "policies": {
4850     "SearchEngines": {
4851       "Default": "NAME_OF_SEARCH_ENGINE"
4852     }
4853   }
4854 }
4855 ```
4856 ### SearchEngines | PreventInstalls
4857
4858 Prevent installing search engines from webpages.
4859
4860 **Compatibility:** Firefox ESR 60\
4861 **CCK2 Equivalent:** `disableSearchEngineInstall`\
4862 **Preferences Affected:** N/A
4863
4864 #### Windows (GPO)
4865 ```
4866 Software\Policies\Mozilla\Firefox\SearchEngines\PreventInstalls = 0x1 | 0x0
4867 ```
4868 #### Windows (Intune)
4869 OMA-URI:
4870 ```
4871 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_PreventInstalls
4872 ```
4873 Value (string):
4874 ```
4875 <enabled/> or <disabled/>
4876 ```
4877 #### macOS
4878 ```
4879 <dict>
4880   <key>SearchEngines</key>
4881   <dict>
4882     <key>PreventInstalls</key>
4883     <true/> | <false/>
4884   </dict>
4885 </dict>
4886 ```
4887 #### policies.json
4888 ```
4889 {
4890   "policies": {
4891     "SearchEngines": {
4892       "PreventInstalls": true | false
4893     }
4894   }
4895 }
4896 ```
4897 ### SearchEngines | Remove
4898
4899 Hide built-in search engines. This policy is only available on the ESR.
4900
4901 **Compatibility:** Firefox ESR 60.2\
4902 **CCK2 Equivalent:** `removeDefaultSearchEngines` (removed all built-in engines)\
4903 **Preferences Affected:** N/A
4904
4905 #### Windows (GPO)
4906 ```
4907 Software\Policies\Mozilla\Firefox\SearchEngines\Remove\1 = NAME_OF_SEARCH_ENGINE
4908 ```
4909 #### Windows (Intune)
4910 OMA-URI:
4911 ```
4912 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_Remove
4913 ```
4914 Value (string):
4915 ```
4916 <enabled/>
4917 <data id="SearchEngines_Remove" value="1&#xF000;NAME_OF_SEARCH_ENGINE"/>
4918 ```
4919 #### macOS
4920 ```
4921 <dict>
4922   <key>SearchEngines</key>
4923   <dict>
4924     <key>Remove</key>
4925     <array>
4926       <string>NAME_OF_SEARCH_ENGINE</string>
4927     </array>
4928   </dict>
4929 </dict>
4930 ```
4931 #### policies.json
4932 ```
4933 {
4934   "policies": {
4935     "SearchEngines": {
4936       "Remove": ["NAME_OF_SEARCH_ENGINE"]
4937     }
4938   }
4939 }
4940 ```
4941 ### SearchEngines | Add
4942
4943 Add new search engines (up to five). This policy is only available on the ESR. `Name` and `URLTemplate` are required.
4944
4945 `Name` is the name of the search engine.
4946
4947 `URLTemplate` is the search URL with {searchTerms} to substitute for the search term.
4948
4949 `Method` is either GET or POST
4950
4951 `IconURL` is a URL for the icon to use.
4952
4953 `Alias` is a keyword to use for the engine.
4954
4955 `Description` is a description of the search engine.
4956
4957 `PostData` is the POST data as name value pairs separated by &.
4958
4959 `SuggestURLTemplate` is a search suggestions URL with {searchTerms} to substitute for the search term.
4960
4961 **Compatibility:** Firefox ESR 60 (POST support in Firefox ESR 68)\
4962 **CCK2 Equivalent:** `searchplugins`\
4963 **Preferences Affected:** N/A
4964
4965 #### Windows (GPO)
4966 ```
4967 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Name = "Example1"
4968 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\URLTemplate = "https://www.example.org/q={searchTerms}"
4969 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Method = "GET" | "POST"
4970 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\IconURL = "https://www.example.org/favicon.ico"
4971 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Alias = "example"
4972 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Description = "Example Description"
4973 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\SuggestURLTemplate = "https://www.example.org/suggestions/q={searchTerms}"
4974 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\PostData = "name=value&q={searchTerms}"
4975 ```
4976 #### Windows (Intune)
4977 OMA-URI:
4978 ```
4979 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_1
4980 ```
4981 Value (string):
4982 ```
4983 <enabled/>
4984 <data id="SearchEngine_Name" value="Example1"/>
4985 <data id="SearchEngine_URLTemplate" value="https://www.example.org/q={searchTerms"/>
4986 <data id="SearchEngine_Method" value="GET | POST"/>
4987 <data id="SearchEngine_IconURL" value="https://www.example.org/favicon.ico"/>
4988 <data id="SearchEngine_Alias" value="example"/>
4989 <data id="SearchEngine_Description" value="Example Description"/>
4990 <data id="SearchEngine_SuggestURLTemplate" value="https://www.example.org/suggestions/q={searchTerms}"/>
4991 <data id="SearchEngine_PostData" value="name=value&amp;q={searchTerms}"/>
4992 ```
4993 #### macOS
4994 ```
4995 <dict>
4996   <key>SearchEngines</key>
4997   <dict>
4998     <key>Add</key>
4999     <array>
5000       <dict>
5001         <key>Name</key>
5002         <string>Example1</string>
5003         <key>URLTemplate</key>
5004         <string>https://www.example.org/q={searchTerms}</string>
5005         <key>Method</key>
5006         <string>GET | POST </string>
5007         <key>IconURL</key>
5008         <string>https://www.example.org/favicon.ico</string>
5009         <key>Alias</key>
5010         <string>example</string>
5011         <key>Description</key>
5012         <string>Example Description</string>
5013         <key>SuggestURLTemplate</key>
5014         <string>https://www.example.org/suggestions/q={searchTerms}</string>
5015         <key>PostData</key>
5016         <string>name=value&q={searchTerms}</string>
5017       </dict>
5018     <array>
5019   </dict>
5020 </dict>
5021 ```
5022 #### policies.json
5023 ```
5024 {
5025   "policies": {
5026     "SearchEngines": {
5027       "Add": [
5028         {
5029           "Name": "Example1",
5030           "URLTemplate": "https://www.example.org/q={searchTerms}",
5031           "Method": "GET" | "POST",
5032           "IconURL": "https://www.example.org/favicon.ico",
5033           "Alias": "example",
5034           "Description": "Description",
5035           "PostData": "name=value&q={searchTerms}",
5036           "SuggestURLTemplate": "https://www.example.org/suggestions/q={searchTerms}"
5037         }
5038       ]
5039     }
5040   }
5041 }
5042 ```
5043 ### SearchSuggestEnabled
5044
5045 Enable search suggestions.
5046
5047 **Compatibility:** Firefox 68, Firefox ESR 68\
5048 **CCK2 Equivalent:** N/A\
5049 **Preferences Affected:** `browser.urlbar.suggest.searches`,`browser.search.suggest.enabled`
5050
5051 #### Windows (GPO)
5052 ```
5053 Software\Policies\Mozilla\Firefox\SearchSuggestEnabled = 0x1 | 0x0
5054 ```
5055 #### Windows (Intune)
5056 OMA-URI:
5057 ```
5058 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchSuggestEnabled
5059 ```
5060 Value (string):
5061 ```
5062 <enabled/> or <disabled/>
5063 ```
5064 #### macOS
5065 ```
5066 <dict>
5067   <key>SearchSuggestEnabled</key>
5068   <true/> | <false/>
5069 </dict>
5070 ```
5071 #### policies.json
5072 ```
5073 {
5074   "policies": {
5075     "SearchSuggestEnabled": true | false
5076   }
5077 }
5078 ```
5079 ### SecurityDevices
5080
5081 Install PKCS #11 modules.
5082
5083 **Compatibility:** Firefox 64, Firefox ESR 60.4\
5084 **CCK2 Equivalent:** `certs.devices`\
5085 **Preferences Affected:** N/A
5086
5087 #### Windows (GPO)
5088 ```
5089 Software\Policies\Mozilla\Firefox\SecurityDevices\NAME_OF_DEVICE = PATH_TO_LIBRARY_FOR_DEVICE
5090 ```
5091 #### Windows (Intune)
5092 OMA-URI:
5093 ```
5094 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SecurityDevices
5095 ```
5096 Value (string):
5097 ```
5098 <enabled/>
5099 <data id="SecurityDevices" value="NAME_OF_DEVICE&#xF000;PATH_TO_LIBRARY_FOR_DEVICE"/>
5100 ```
5101 #### macOS
5102 ```
5103 <dict>
5104   <key>SecurityDevices</key>
5105   <dict>
5106     <key>NAME_OF_DEVICE</key>
5107     <string>PATH_TO_LIBRARY_FOR_DEVICE</string>
5108   </dict>
5109 </dict>
5110 ```
5111
5112 #### policies.json
5113 ```
5114 {
5115   "policies": {
5116     "SecurityDevices": {
5117       "NAME_OF_DEVICE": "PATH_TO_LIBRARY_FOR_DEVICE"
5118     }
5119   }
5120 }
5121 ```
5122 ### ShowHomeButton
5123 Show the home button on the toolbar.
5124
5125 Future versions of Firefox will not show the home button by default.
5126
5127 **Compatibility:** Firefox 88, Firefox ESR 78.10\
5128 **CCK2 Equivalent:** N/A\
5129 **Preferences Affected:** N/A
5130
5131 #### Windows (GPO)
5132 ```
5133 Software\Policies\Mozilla\Firefox\ShowHomeButton = 0x1 | 0x0
5134 ```
5135 #### Windows (Intune)
5136 OMA-URI:
5137 ```
5138 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/ShowHomeButton
5139 ```
5140 Value (string):
5141 ```
5142 <enabled/> or <disabled/>
5143 ```
5144 #### macOS
5145 ```
5146 <dict>
5147   <key>ShowHomeButton</key>
5148   <true/> | <false/>
5149 </dict>
5150 ```
5151 #### policies.json
5152 ```
5153 {
5154   "policies": {
5155     "ShowHomeButton": true | false
5156   }
5157 }
5158 ```
5159 ### SSLVersionMax
5160
5161 Set and lock the maximum version of TLS.
5162
5163 **Compatibility:** Firefox 66, Firefox ESR 60.6\
5164 **CCK2 Equivalent:** N/A\
5165 **Preferences Affected:** `security.tls.version.max`
5166
5167 #### Windows (GPO)
5168 ```
5169 Software\Policies\Mozilla\Firefox\SSLVersionMax = "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
5170 ```
5171 #### Windows (Intune)
5172 OMA-URI:
5173 ```
5174 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SSLVersionMax
5175 ```
5176 Value (string):
5177 ```
5178 <enabled/>
5179 <data id="SSLVersion" value="tls1 | tls1.2 | tls1.3"/>
5180 ```
5181 #### macOS
5182 ```
5183 <dict>
5184   <key>SSLVersionMax</key>
5185   <string>tls1 | tls1.1 | tls1.2 | tls1.3</string>
5186 </dict>
5187 ```
5188
5189 #### policies.json
5190 ```
5191 {
5192   "policies": {
5193     "SSLVersionMax": "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
5194   }
5195 }
5196 ```
5197 ### SSLVersionMin
5198
5199 Set and lock the minimum version of TLS.
5200
5201 **Compatibility:** Firefox 66, Firefox ESR 60.6\
5202 **CCK2 Equivalent:** N/A\
5203 **Preferences Affected:** `security.tls.version.min`
5204
5205 #### Windows (GPO)
5206 ```
5207 Software\Policies\Mozilla\Firefox\SSLVersionMin = "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
5208 ```
5209 #### Windows (Intune)
5210 OMA-URI:
5211 ```
5212 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SSLVersionMin
5213 ```
5214 Value (string):
5215 ```
5216 <enabled/>
5217 <data id="SSLVersion" value="tls1 | tls1.2 | tls1.3"/>
5218 ```
5219 #### macOS
5220 ```
5221 <dict>
5222   <key>SSLVersionMin</key>
5223   <string>tls1 | tls1.1 | tls1.2 | tls1.3</string>
5224 </dict>
5225 ```
5226
5227 #### policies.json
5228 ```
5229 {
5230   "policies": {
5231     "SSLVersionMin": "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
5232   }
5233 }
5234 ```
5235 ### SupportMenu
5236 Add a menuitem to the help menu for specifying support information.
5237
5238 **Compatibility:** Firefox 68.0.1, Firefox ESR 68.0.1\
5239 **CCK2 Equivalent:** helpMenu\
5240 **Preferences Affected:** N/A
5241
5242 #### Windows (GPO)
5243 ```
5244 Software\Policies\Mozilla\Firefox\SupportMenu\Title = "Support Menu"
5245 Software\Policies\Mozilla\Firefox\SupportMenu\URL = "http://example.com/support"
5246 Software\Policies\Mozilla\Firefox\SupportMenu\AccessKey = "S"
5247 ```
5248 #### Windows (Intune)
5249 OMA-URI:
5250 ```
5251 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SupportMenu
5252 ```
5253 Value (string):
5254 ```
5255 <enabled/>
5256 <data id="SupportMenuTitle" value="Support Menu"/>
5257 <data id="SupportMenuURL" value="http://example.com/support"/>
5258 <data id="SupportMenuAccessKey" value="S">
5259 ```
5260 #### macOS
5261 ```
5262 <dict>
5263   <key>SupportMenu</key>
5264   <dict>
5265     <key>Title</key>
5266     <string>SupportMenu</string>
5267     <key>URL</key>
5268     <string>http://example.com/support</string>
5269     <key>AccessKey</key>
5270     <string>S</string>
5271   </dict>
5272 </dict>
5273 ```
5274 #### policies.json
5275 ```
5276 {
5277   "policies": {
5278     "SupportMenu": {
5279       "Title": "Support Menu",
5280       "URL": "http://example.com/support",
5281       "AccessKey": "S"
5282     }
5283   }
5284 }
5285 ```
5286 ### UserMessaging
5287
5288 Prevent Firefox from messaging the user in certain situations.
5289
5290 `WhatsNew` Remove the "What's New" icon and menuitem.
5291
5292 `ExtensionRecommendations` If false, don't recommend extensions while the user is visiting web pages.
5293
5294 `FeatureRecommendations` IF false, don't recommend browser features.
5295
5296 `UrlbarInterventions` If false, Don't offer Firefox specific suggestions in the URL bar.
5297
5298 `SkipOnboarding` If true, don't show onboarding messages on the new tab page.
5299
5300 **Compatibility:** Firefox 75, Firefox ESR 68.7\
5301 **CCK2 Equivalent:** N/A\
5302 **Preferences Affected:** `browser.messaging-system.whatsNewPanel.enabled`,`browser.newtabpage.activity-stream.asrouter.userprefs.cfr.addons`,`browser.newtabpage.activity-stream.asrouter.userprefs.cfr.features`,`browser.aboutwelcome.enabled`
5303
5304 #### Windows (GPO)
5305 ```
5306 Software\Policies\Mozilla\Firefox\UserMessaging\WhatsNew = 0x1 | 0x0
5307 Software\Policies\Mozilla\Firefox\UserMessaging\ExtensionRecommendations = 0x1 | 0x0
5308 Software\Policies\Mozilla\Firefox\UserMessaging\FeatureRecommendations = 0x1 | 0x0
5309 Software\Policies\Mozilla\Firefox\UserMessaging\UrlbarInterventions = 0x1 | 0x0
5310 Software\Policies\Mozilla\Firefox\UserMessaging\SkipOnboarding = 0x1 | 0x0
5311 ```
5312 #### Windows (Intune)
5313 OMA-URI:
5314 ```
5315 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/UserMessaging_WhatsNew
5316 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/UserMessaging_ExtensionRecommendations
5317 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/UserMessaging_FeatureRecommendations
5318 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/UserMessaging_UrlbarInterventions
5319 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/UserMessaging_SkipOnboarding
5320 ```
5321 Value (string):
5322 ```
5323 <enabled/> or <disabled/>
5324 ```
5325 #### macOS
5326 ```
5327 <dict>
5328   <key>UserMessaging</key>
5329   <dict>
5330     <key>WhatsNew</key>
5331     <true/> | <false/>
5332     <key>ExtensionRecommendations</key>
5333     <true/> | <false/>
5334     <key>FeatureRecommendations</key>
5335     <true/> | <false/>
5336     <key>UrlbarInterventions</key>
5337     <true/> | <false/>
5338     <key>SkipOnboarding</key>
5339     <true/> | <false/>
5340   </dict>
5341 </dict>
5342 ```
5343 #### policies.json
5344 ```
5345 {
5346   "policies": {
5347     "UserMessaging": {
5348       "WhatsNew": true | false,
5349       "ExtensionRecommendations": true | false,
5350       "FeatureRecommendations": true | false,
5351       "UrlbarInterventions": true | false
5352       "SkipOnboarding": true | false
5353     }
5354   }
5355 }
5356 ```
5357 ### WebsiteFilter
5358 Block websites from being visited. The parameters take an array of Match Patterns, as documented in https://developer.mozilla.org/en-US/Add-ons/WebExtensions/Match_patterns.
5359 The arrays are limited to 1000 entries each.
5360
5361 As of Firefox 83 and Firefox ESR 78.5, file URLs are supported.
5362
5363 **Compatibility:** Firefox 60, Firefox ESR 60\
5364 **CCK2 Equivalent:** N/A\
5365 **Preferences Affected:** N/A
5366
5367 #### Windows (GPO)
5368 ```
5369 Software\Policies\Mozilla\Firefox\WebsiteFilter\Block\1 = "<all_urls>"
5370 Software\Policies\Mozilla\Firefox\WebsiteFilter\Exceptions\1 = "http://example.org/*"
5371 ```
5372 #### Windows (Intune)
5373 OMA-URI:
5374 ```
5375 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/B_WebsiteFilter_Block
5376 ```
5377 Value (string):
5378 ```
5379 <enabled/>
5380 <data id="WebsiteFilter" value="1&#xF000;<all_urls>"/>
5381 ```
5382 OMA-URI:
5383 ```
5384 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/B_WebsiteFilter_Exceptions
5385 ```
5386 Value (string):
5387 ```
5388 <enabled/>
5389 <data id="WebsiteFilter" value="1&#xF000;http://example.org/*"/>
5390 ```
5391 #### macOS
5392 ```
5393 <dict>
5394   <key>WebsiteFilter</key>
5395   <dict>
5396     <key>Block</key>
5397     <array>
5398       <string><all_urls></string>
5399     </array>
5400     <key>Exceptions</key>
5401     <array>
5402       <string>http://example.org/*</string>
5403     </array>
5404   </dict>
5405
5406 </dict>
5407 ```
5408 #### policies.json
5409 ```
5410 {
5411   "policies": {
5412     "WebsiteFilter": {
5413       "Block": ["<all_urls>"],
5414       "Exceptions": ["http://example.org/*"]
5415     }
5416   }
5417 }
5418 ```