README.md

   1 **These policies are in active development and so might contain changes that do not work with current versions of Firefox.**
   2
   3 **You should use the [officially released versions](https://github.com/mozilla/policy-templates/releases) if you are deploying changes.**
   4
   5 Policies can be specified using the [Group Policy templates on Windows](https://github.com/mozilla/policy-templates/tree/master/windows), [Intune on Windows](https://support.mozilla.org/kb/managing-firefox-intune), [configuration profiles on macOS](https://github.com/mozilla/policy-templates/tree/master/mac), or by creating a file called `policies.json`. On Windows, create a directory called `distribution` where the EXE is located and place the file there. On Mac, the file goes into `Firefox.app/Contents/Resources/distribution`.  On Linux, the file goes into `firefox/distribution`, where `firefox` is the installation directory for firefox, which varies by distribution or you can specify system-wide policy by placing the file in `/etc/firefox/policies`.
   6
   7 | Policy Name | Description
   8 | --- | --- |
   9 | **[`AppAutoUpdate`](#appautoupdate)** |  Enable or disable automatic application update.
  10 | **[`AppUpdateURL`](#appupdateurl)** | Change the URL for application update.
  11 | **[`Authentication`](#authentication)** | Configure sites that support integrated authentication.
  12 | **[`BlockAboutAddons`](#blockaboutaddons)** | Block access to the Add-ons Manager (about:addons).
  13 | **[`BlockAboutConfig`](#blockaboutconfig)** | Block access to about:config.
  14 | **[`BlockAboutProfiles`](#blockaboutprofiles)** | Block access to About Profiles (about:profiles).
  15 | **[`BlockAboutSupport`](#blockaboutsupport)** | Block access to Troubleshooting Information (about:support).
  16 | **[`Bookmarks`](#bookmarks)** | Add bookmarks in either the bookmarks toolbar or menu.
  17 | **[`CaptivePortal`](#captiveportal)** | Enable or disable the detection of captive portals.
  18 | **[`Certificates`](#certificates)** |
  19 | **[`Certificates -> ImportEnterpriseRoots`](#certificates--importenterpriseroots)** | Trust certificates that have been added to the operating system certificate store by a user or administrator.
  20 | **[`Certificates -> Install`](#certificates--install)** | Install certificates into the Firefox certificate store.
  21 | **[`Cookies`](#cookies)** | Configure cookie preferences.
  22 | **[`DisableAppUpdate`](#disableappupdate)** | Turn off application updates.
  23 | **[`DisableBuiltinPDFViewer`](#disablebuiltinpdfviewer)** | Disable the built in PDF viewer.
  24 | **[`DisabledCiphers`](#disabledciphers)** | Disable ciphers.
  25 | **[`DisableDefaultBrowserAgent`](#disabledefaultbrowseragent)** | Prevent the default browser agent from taking any actions (Windows only).
  26 | **[`DisableDeveloperTools`](#disabledevelopertools)** | Remove access to all developer tools.
  27 | **[`DisableFeedbackCommands`](#disablefeedbackcommands)** | Disable the menus for reporting sites.
  28 | **[`DisableFirefoxScreenshots`](#disablefirefoxscreenshots)** | Remove access to Firefox Screenshots.
  29 | **[`DisableFirefoxAccounts`](#disablefirefoxaccounts)** | Disable Firefox Accounts integration (Sync).
  30 | **[`DisableFirefoxStudies`](#disablefirefoxstudies)** | Disable Firefox studies (Shield).
  31 | **[`DisableForgetButton`](#disableforgetbutton)** | Disable the "Forget" button.
  32 | **[`DisableFormHistory`](#disableformhistory)** | Turn off saving information on web forms and the search bar.
  33 | **[`DisableMasterPasswordCreation`](#disablemasterpasswordcreation)** | Remove the master password functionality.
  34 | **[`DisablePasswordReveal`](#disablepasswordreveal)** | Do not allow passwords to be revealed in saved logins.
  35 | **[`DisablePocket`](#disablepocket)** | Remove Pocket in the Firefox UI.
  36 | **[`DisablePrivateBrowsing`](#disableprivatebrowsing)** | Remove access to private browsing.
  37 | **[`DisableProfileImport`](#disableprofileimport)** | Disables the "Import data from another browser" option in the bookmarks window.
  38 | **[`DisableProfileRefresh`](#disableprofilerefresh)** | Disable the Refresh Firefox button on about:support and support.mozilla.org
  39 | **[`DisableSafeMode`](#disablesafemode)** | Disable safe mode within the browser.
  40 | **[`DisableSecurityBypass`](#disablesecuritybypass)** | Prevent the user from bypassing security in certain cases.
  41 | **[`DisableSetDesktopBackground`](#disablesetdesktopbackground)** | Remove the "Set As Desktop Background..." menuitem when right clicking on an image.
  42 | **[`DisableSystemAddonUpdate`](#disablesystemaddonupdate)** | Prevent system add-ons from being installed or update.
  43 | **[`DisableTelemetry`](#disabletelemetry)** | DisableTelemetry
  44 | **[`DisplayBookmarksToolbar`](#displaybookmarkstoolbar)** | Set the initial state of the bookmarks toolbar.
  45 | **[`DisplayMenuBar (Deprecated)`](#displaymenubar-deprecated)** | Set the initial state of the menubar.
  46 | **[`DisplayMenuBar`](#displaymenubar)** | Set the state of the menubar.
  47 | **[`DNSOverHTTPS`](#dnsoverhttps)** | Configure DNS over HTTPS.
  48 | **[`DontCheckDefaultBrowser`](#dontcheckdefaultbrowser)** | Don't check if Firefox is the default browser at startup.
  49 | **[`DefaultDownloadDirectory`](#defaultdownloaddirectory)** | Set the default download directory.
  50 | **[`DownloadDirectory`](#downloaddirectory)** | Set and lock the download directory.
  51 | **[`EnableTrackingProtection`](#enabletrackingprotection)** | Configure tracking protection.
  52 | **[`EncryptedMediaExtensions`](#encryptedmediaextensions)** | Enable or disable Encrypted Media Extensions and optionally lock it.
  53 | **[`EnterprisePoliciesEnabled`](#enterprisepoliciesenabled)** | Enable policy support on macOS.
  54 | **[`Extensions`](#extensions)** | Control the installation, uninstallation and locking of extensions.
  55 | **[`ExtensionSettings`](#extensionsettings)** | Manage all aspects of extensions.
  56 | **[`ExtensionUpdate`](#extensionupdate)** | Control extension updates.
  57 | **[`FlashPlugin`](#flashplugin)** | Configure the default Flash plugin policy as well as origins for which Flash is allowed.
  58 | **[`FirefoxHome`](#firefoxhome)** | Customize the Firefox Home page.
  59 | **[`HardwareAcceleration`](#hardwareacceleration)** | Control hardware acceleration.
  60 | **[`Handlers`](#handlers)** | Configure default application handlers.
  61 | **[`Homepage`](#homepage)** | Configure the default homepage and how Firefox starts.
  62 | **[`InstallAddonsPermission`](#installaddonspermission)** | Configure the default extension install policy as well as origins for extension installs are allowed.
  63 | **[`LegacyProfiles`](#legacyprofiles)** | Disable the feature enforcing a separate profile for each installation.
  64 | **[`LocalFileLinks`](#localfilelinks)** | Enable linking to local files by origin.
  65 | **[`PrimaryPassword`](#primarypassword)** | Require or prevent using a primary (formerly master) password.
  66 | **[`NetworkPrediction`](#networkprediction)** | Enable or disable network prediction (DNS prefetching).
  67 | **[`NewTabPage`](#newtabpage)** | Enable or disable the New Tab page.
  68 | **[`NoDefaultBookmarks`](#nodefaultbookmarks)** | Disable the creation of default bookmarks.
  69 | **[`OfferToSaveLogins`](#offertosavelogins)** | Control whether or not Firefox offers to save passwords.
  70 | **[`OfferToSaveLoginsDefault`](#offertosaveloginsdefault)** | Set the default value for whether or not Firefox offers to save passwords.
  71 | **[`OverrideFirstRunPage`](#overridefirstrunpage)** | Override the first run page.
  72 | **[`OverridePostUpdatePage`](#overridepostupdatepage)** | Override the upgrade page.
  73 | **[`PasswordManagerEnabled`](#passwordmanagerenabled)** | Remove (some) access to the password manager.
  74 | **[`PDFjs`](#pdfjs)** | Disable or configure PDF.js, the built-in PDF viewer.
  75 | **[`Permissions`](#permissions)** | Set permissions associated with camera, microphone, location, and notifications.
  76 | **[`PictureInPicture`](#pictureinpicture)** | Enable or disable Picture-in-Picture.
  77 | **[`PopupBlocking`](#popupblocking)** | Configure the default pop-up window policy as well as origins for which pop-up windows are allowed.
  78 | **[`Preferences`](#preferences)** | Set and lock some preferences.
  79 | **[`PromptForDownloadLocation`](#promptfordownloadlocation)** | Ask where to save each file before downloading.
  80 | **[`Proxy`](#proxy)** | Configure proxy settings.
  81 | **[`RequestedLocales`](#requestedlocales)** | Set the the list of requested locales for the application in order of preference.
  82 | **[`SanitizeOnShutdown` (All)](#sanitizeonshutdown-all)** | Clear all data on shutdown.
  83 | **[`SanitizeOnShutdown` (Selective)](#sanitizeonshutdown-selective)** | Clear data on shutdown.
  84 | **[`SearchBar`](#searchbar)** | Set whether or not search bar is displayed.
  85 | **[`SearchEngines`](#searchengines-this-policy-is-only-available-on-the-esr)** |
  86 | **[`SearchEngines -> Default`](#searchengines--default)** | Set the default search engine.
  87 | **[`SearchEngines -> PreventInstalls`](#searchengines--preventinstalls)** | Prevent installing search engines from webpages.
  88 | **[`SearchEngines -> Remove`](#searchengines--remove)** | Hide built-in search engines.
  89 | **[`SearchEngines -> Add`](#searchengines--add)** | Add new search engines.
  90 | **[`SearchSuggestEnabled`](#searchsuggestenabled)** | Enable search suggestions.
  91 | **[`SecurityDevices`](#securitydevices)** | Install PKCS #11 modules.
  92 | **[`SSLVersionMax`](#sslversionmax)** | Set and lock the maximum version of TLS.
  93 | **[`SSLVersionMin`](#sslversionmin)** | Set and lock the minimum version of TLS.
  94 | **[`SupportMenu`](#supportmenu)** | Add a menuitem to the help menu for specifying support information.
  95 | **[`UserMessaging`](#usermessaging)** | Don't show certain messages to the user.
  96 | **[`WebsiteFilter`](#websitefilter)** | Block websites from being visited.
  97
  98 ### AppAutoUpdate
  99
 100 Enable or disable **automatic** application update.
 101
 102 If set to true, application updates are installed without user approval.
 103
 104 If set to false, application updates are downloaded but the user can choose when to install the update.
 105
 106 If you have disabled updates via DisableAppUpdate, this policy has no effect.
 107
 108 **Compatibility:** Firefox 75, Firefox ESR 68.7\
 109 **CCK2 Equivalent:** N/A\
 110 **Preferences Affected:** app.update.auto
 111
 112 #### Windows (GPO)
 113 ```
 114 Software\Policies\Mozilla\Firefox\AppAutoUpdate = 0x1 | 0x0
 115 ```
 116 #### Windows (Intune)
 117 OMA-URI:
 118 ```
 119 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AppAutoUpdate
 120 ```
 121 Value (string):
 122 ```
 123 <enabled/> or <disabled/>
 124 ```
 125 #### macOS
 126 ```
 127 <dict>
 128   <key>AppAutoUpdate</key>
 129   <true/> | <false/>
 130 </dict>
 131 ```
 132 #### policies.json
 133 ```
 134 {
 135   "policies": {
 136     "AppAutoUpdate": true | false
 137   }
 138 }
 139 ```
 140 ### AppUpdateURL
 141
 142 Change the URL for application update.
 143
 144 **Compatibility:** Firefox 62, Firefox ESR 60.2\
 145 **CCK2 Equivalent:** N/A\
 146 **Preferences Affected:** `app.update.url`
 147
 148 #### Windows (GPO)
 149 ```
 150 Software\Policies\Mozilla\Firefox\AppUpdateURL = "https://yoursite.com"
 151 ```
 152 #### Windows (Intune)
 153 OMA-URI:
 154 ```
 155 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AppUpdateURL
 156 ```
 157 Value (string):
 158 ```
 159 <enabled/>
 160 <data id="AppUpdateURL" value="https://yoursite.com"/>
 161 ```
 162 #### macOS
 163 ```
 164 <dict>
 165   <key>AppUpdateURL</key>
 166   <string>https://yoursite.com</string>
 167 </dict>
 168 ```
 169 #### policies.json
 170 ```
 171 {
 172   "policies": {
 173     "AppUpdateURL": "https://yoursite.com"
 174   }
 175 }
 176 ```
 177 ### Authentication
 178
 179 Configure sites that support integrated authentication.
 180
 181 See https://developer.mozilla.org/en-US/docs/Mozilla/Integrated_authentication for more information.
 182
 183 `PrivateBrowsing` enables integrated authentication in prviate browsing.
 184
 185 **Compatibility:** Firefox 60, Firefox ESR 60 (AllowNonFQDN added in 62/60.2, AllowProxies added in 70/68.2, Locked added in 71/68.3, PrivateBrowsing added in 77/68.9)\
 186 **CCK2 Equivalent:** N/A\
 187 **Preferences Affected:** `network.negotiate-auth.trusted-uris`,`network.negotiate-auth.delegation-uris`,`network.automatic-ntlm-auth.trusted-uris`,`network.automatic-ntlm-auth.allow-non-fqdn`,`network.negotiate-auth.allow-non-fqdn`,`network.automatic-ntlm-auth.allow-proxies`,`network.negotiate-auth.allow-proxies`,`network.auth.private-browsing-sso`
 188
 189 #### Windows (GPO)
 190 ```
 191 Software\Policies\Mozilla\Firefox\Authentication\SPNEGO\1 = "mydomain.com"
 192 Software\Policies\Mozilla\Firefox\Authentication\SPNEGO\2 = "https://myotherdomain.com"
 193 Software\Policies\Mozilla\Firefox\Authentication\Delegated\1 = "mydomain.com"
 194 Software\Policies\Mozilla\Firefox\Authentication\Delegated\2 = "https://myotherdomain.com"
 195 Software\Policies\Mozilla\Firefox\Authentication\NTLM\1 = "mydomain.com"
 196 Software\Policies\Mozilla\Firefox\Authentication\NTLM\2 = "https://myotherdomain.com"
 197 Software\Policies\Mozilla\Firefox\Authentication\AllowNonFQDN\SPNEGO = 0x1 | 0x0
 198 Software\Policies\Mozilla\Firefox\Authentication\AllowNonFQDN\NTLM = 0x1 | 0x0
 199 Software\Policies\Mozilla\Firefox\Authentication\AllowProxies\SPNEGO = 0x1 | 0x0
 200 Software\Policies\Mozilla\Firefox\Authentication\AllowProxies\NTLM = 0x1 | 0x0
 201 Software\Policies\Mozilla\Firefox\Authentication\Locked = 0x1 | 0x0
 202 Software\Policies\Mozilla\Firefox\Authentication\PrivateBrowsing = 0x1 | 0x0
 203 ```
 204 #### Windows (Intune)
 205 OMA-URI:
 206 ```
 207 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_SPNEGO
 208 ```
 209 Value (string):
 210 ```
 211 <enabled/>
 212 <data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
 213 ```
 214 OMA-URI:
 215 ```
 216 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_Delegated
 217 ```
 218 Value (string):
 219 ```
 220 <enabled/>
 221 <data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
 222 ```
 223 OMA-URI:
 224 ```
 225 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_NTLM
 226 ```
 227 Value (string):
 228 ```
 229 <enabled/>
 230 <data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
 231 ```
 232 OMA-URI:
 233 ```
 234 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_AllowNonFQDN
 235 ```
 236 Value (string):
 237 ```
 238 <enabled/>
 239 <data id="Authentication_AllowNonFQDN_NTLM" value="true | false"/>
 240 <data id="Authentication_AllowNonFQDN_SPNEGO" value="true | false"/>
 241 ```
 242 OMA-URI:
 243 ```
 244 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_Locked
 245 ```
 246 Value (string):
 247 ```
 248 <enabled/> or <disabled/>
 249 ```
 250 OMA-URI:
 251 ```
 252 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_PrivateBrowsing
 253 ```
 254 Value (string):
 255 ```
 256 <enabled/> or <disabled/>
 257 ```
 258 #### macOS
 259 ```
 260 <dict>
 261   <key>Authentication</key>
 262   <dict>
 263     <key>SPNEGO</key>
 264     <array>
 265       <string>mydomain.com</string>
 266       <string>https://myotherdomain.com</string>
 267     </array>
 268     <key>Delegated</key>
 269     <array>
 270       <string>mydomain.com</string>
 271       <string>https://myotherdomain.com</string>
 272     </array>
 273     <key>NTLM</key>
 274     <array>
 275       <string>mydomain.com</string>
 276       <string>https://myotherdomain.com</string>
 277     </array>
 278     <key>AllowNonFQDN</key>
 279       <dict>
 280       <key>SPNEGO</key>
 281       <true/> | <false/>
 282       <key>NTLM</key>
 283       <true/> | <false/>
 284     </dict>
 285     <key>AllowProxies</key>
 286       <dict>
 287       <key>SPNEGO</key>
 288       <true/> | <false/>
 289       <key>NTLM</key>
 290       <true/> | <false/>
 291     </dict>
 292     <key>Locked</key>
 293     <true/> | <false/>
 294     <key>PrivateBrowsing</key>
 295     <true/> | <false/>
 296   </dict>
 297 </dict>
 298 ```
 299 #### policies.json
 300 ```
 301 {
 302   "policies": {
 303     "Authentication": {
 304       "SPNEGO": ["mydomain.com", "https://myotherdomain.com"],
 305       "Delegated": ["mydomain.com", "https://myotherdomain.com"],
 306       "NTLM": ["mydomain.com", "https://myotherdomain.com"],
 307       "AllowNonFQDN": {
 308         "SPNEGO": true | false,
 309         "NTLM": true | false
 310       },
 311       "AllowProxies": {
 312         "SPNEGO": true | false,
 313         "NTLM": true | false
 314       },
 315       "Locked": true | false,
 316       "PrivateBrowsing": true | false
 317     }
 318   }
 319 }
 320 ```
 321 ### BlockAboutAddons
 322
 323 Block access to the Add-ons Manager (about:addons).
 324
 325 **Compatibility:** Firefox 60, Firefox ESR 60\
 326 **CCK2 Equivalent:** `disableAddonsManager`\
 327 **Preferences Affected:** N/A
 328
 329 #### Windows (GPO)
 330 ```
 331 Software\Policies\Mozilla\Firefox\BlockAboutAddons = 0x1 | 0x0
 332 ```
 333 #### Windows (Intune)
 334 OMA-URI:
 335 ```
 336 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutAddons
 337 ```
 338 Value (string):
 339 ```
 340 <enabled/> or <disabled/>
 341 ```
 342 #### macOS
 343 ```
 344 <dict>
 345   <key>BlockAboutAddons</key>
 346   <true/> | <false/>
 347 </dict>
 348 ```
 349 #### policies.json
 350 ```
 351 {
 352   "policies": {
 353     "BlockAboutAddons": true | false
 354   }
 355 }
 356 ```
 357 ### BlockAboutConfig
 358
 359 Block access to about:config.
 360
 361 **Compatibility:** Firefox 60, Firefox ESR 60\
 362 **CCK2 Equivalent:** `disableAboutConfig`\
 363 **Preferences Affected:** N/A
 364
 365 #### Windows (GPO)
 366 ```
 367 Software\Policies\Mozilla\Firefox\BlockAboutConfig = 0x1 | 0x0
 368 ```
 369 #### Windows (Intune)
 370 OMA-URI:
 371 ```
 372 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutConfig
 373 ```
 374 Value (string):
 375 ```
 376 <enabled/> or <disabled/>
 377 ```
 378 #### macOS
 379 ```
 380 <dict>
 381   <key>BlockAboutConfig</key>
 382   <true/> | <false/>
 383 </dict>
 384 ```
 385 #### policies.json
 386 ```
 387 {
 388   "policies": {
 389     "BlockAboutConfig": true | false
 390   }
 391 }
 392 ```
 393 ### BlockAboutProfiles
 394
 395 Block access to About Profiles (about:profiles).
 396
 397 **Compatibility:** Firefox 60, Firefox ESR 60\
 398 **CCK2 Equivalent:** `disableAboutProfiles`\
 399 **Preferences Affected:** N/A
 400
 401 #### Windows (GPO)
 402 ```
 403 Software\Policies\Mozilla\Firefox\BlockAboutProfiles = 0x1 | 0x0
 404 ```
 405 #### Windows (Intune)
 406 OMA-URI:
 407 ```
 408 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutProfiles
 409 ```
 410 Value (string):
 411 ```
 412 <enabled/> or <disabled/>
 413 ```
 414 #### macOS
 415 ```
 416 <dict>
 417   <key>BlockAboutProfiles</key>
 418   <true/> | <false/>
 419 </dict>
 420 ```
 421 #### policies.json
 422 ```
 423 {
 424   "policies": {
 425     "BlockAboutProfiles": true | false
 426   }
 427 }
 428 ```
 429 ### BlockAboutSupport
 430
 431 Block access to Troubleshooting Information (about:support).
 432
 433 **Compatibility:** Firefox 60, Firefox ESR 60\
 434 **CCK2 Equivalent:** `disableAboutSupport`\
 435 **Preferences Affected:** N/A
 436
 437 #### Windows (GPO)
 438 ```
 439 Software\Policies\Mozilla\Firefox\BlockAboutSupport = 0x1 | 0x0
 440 ```
 441 #### Windows (Intune)
 442 OMA-URI:
 443 ```
 444 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutSupport
 445 ```
 446 Value (string):
 447 ```
 448 <enabled/> or <disabled/>
 449 ```
 450 #### macOS
 451 ```
 452 <dict>
 453   <key>BlockAboutSupport</key>
 454   <true/> | <false/>
 455 </dict>
 456 ```
 457 #### policies.json
 458 ```
 459 {
 460   "policies": {
 461     "BlockAboutSupport": true | false
 462   }
 463 }
 464 ```
 465 ### Bookmarks
 466
 467 Add bookmarks in either the bookmarks toolbar or menu. Only `Title` and `URL` are required. If `Placement` is not specified, the bookmark will be placed on the toolbar. If `Folder` is specified, it is automatically created and bookmarks with the same folder name are grouped together.
 468
 469 **Compatibility:** Firefox 60, Firefox ESR 60\
 470 **CCK2 Equivalent:** `bookmarks.toolbar`,`bookmarks.menu`\
 471 **Preferences Affected:** N/A
 472
 473 #### Windows (GPO)
 474 ```
 475 Software\Policies\Mozilla\Firefox\Bookmarks\1\Title = "Example"
 476 Software\Policies\Mozilla\Firefox\Bookmarks\1\URL = "https://example.com"
 477 Software\Policies\Mozilla\Firefox\Bookmarks\1\Favicon = "https://example.com/favicon.ico"
 478 Software\Policies\Mozilla\Firefox\Bookmarks\1\Placement = "toolbar" | "menu"
 479 Software\Policies\Mozilla\Firefox\Bookmarks\1\Folder = "FolderName"
 480 ```
 481 #### Windows (Intune)
 482 OMA-URI:
 483 ```
 484 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Bookmarks/Bookmark01
 485 ```
 486 Value (string):
 487 ```
 488 <enabled/>
 489 <data id="BookmarkTitle" value="Example"/>
 490 <data id="BookmarkURL" value="https://example.com"/>
 491 <data id="BookmarkFavicon" value="https://example.com/favicon.ico"/>
 492 <data id="BookmarkPlacement" value="toolbar | menu"/>
 493 <data id="BookmarkFolder" value="FolderName"/>
 494 ```
 495 #### macOS
 496 ```
 497 <dict>
 498   <key>Bookmarks</key>
 499   <array>
 500     <dict>
 501       <key>Title</key>
 502       <string>Example</string>
 503       <key>URL</key>
 504       <string>https://example.com</string>
 505       <key>Favicon</key>
 506       <string>https://example.com/favicon.ico</string>
 507       <key>Placement</key>
 508       <string>toolbar | menu</string>
 509       <key>Folder</key>
 510       <string>FolderName</string>
 511     </dict>
 512   </array>
 513 </dict>
 514 ```
 515 #### policies.json
 516 ```
 517 {
 518   "policies": {
 519     "Bookmarks": [
 520       {
 521         "Title": "Example",
 522         "URL": "https://example.com",
 523         "Favicon": "https://example.com/favicon.ico",
 524         "Placement": "toolbar" | "menu",
 525         "Folder": "FolderName"
 526       }
 527     ]
 528   }
 529 }
 530 ```
 531 ### CaptivePortal
 532 Enable or disable the detection of captive portals.
 533
 534 **Compatibility:** Firefox 67, Firefox ESR 60.7\
 535 **CCK2 Equivalent:** N/A\
 536 **Preferences Affected:** `network.captive-portal-service.enabled`
 537
 538 #### Windows (GPO)
 539 ```
 540 Software\Policies\Mozilla\Firefox\CaptivePortal = 0x1 | 0x0
 541 ```
 542 #### Windows (Intune)
 543 OMA-URI:
 544 ```
 545 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/CaptivePortal
 546 ```
 547 Value (string):
 548 ```
 549 <enabled/> or <disabled/>
 550 ```
 551 #### macOS
 552 ```
 553 <dict>
 554   <key>CaptivePortal</key>
 555   <true/> | <false/>
 556 </dict>
 557 ```
 558 #### policies.json
 559 ```
 560 {
 561   "policies": {
 562     "CaptivePortal": true | false
 563   }
 564 }
 565 ```
 566 ### Certificates
 567
 568 ### Certificates | ImportEnterpriseRoots
 569
 570 Trust certificates that have been added to the operating system certificate store by a user or administrator.
 571
 572 Note: This policy only works on Windows and macOS. For Linux discussion, see [bug 1600509](https://bugzilla.mozilla.org/show_bug.cgi?id=1600509).
 573
 574 See https://support.mozilla.org/kb/setting-certificate-authorities-firefox for more detail.
 575
 576 **Compatibility:** Firefox 60, Firefox ESR 60 (macOS support in Firefox 63, Firefox ESR 68)\
 577 **CCK2 Equivalent:** N/A\
 578 **Preferences Affected:** `security.enterprise_roots.enabled`
 579
 580 #### Windows (GPO)
 581 ```
 582 Software\Policies\Mozilla\Firefox\Certificates\ImportEnterpriseRoots = 0x1 | 0x0
 583 ```
 584 #### Windows (Intune)
 585 OMA-URI:
 586 ```
 587 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Certificates/Certificates_ImportEnterpriseRoots
 588 ```
 589 Value (string):
 590 ```
 591 <enabled/> or <disabled/>
 592 ```
 593 #### macOS
 594 ```
 595 <dict>
 596   <key>Certificates</key>
 597   <dict>
 598     <key>ImportEnterpriseRoots</key>
 599     <true/> | <false/>
 600   </dict>
 601 </dict>
 602 ```
 603 #### policies.json
 604 ```
 605 {
 606   "policies": {
 607     "Certificates": {
 608       "ImportEnterpriseRoots": true | false
 609     }
 610   }
 611 }
 612 ```
 613 ### Certificates | Install
 614
 615 Install certificates into the Firefox certificate store. If only a filename is specified, Firefox searches for the file in the following locations:
 616
 617 - Windows
 618   - %USERPROFILE%\AppData\Local\Mozilla\Certificates
 619   - %USERPROFILE%\AppData\Roaming\Mozilla\Certificates
 620 - macOS
 621   - /Library/Application Support/Mozilla/Certificates
 622   - ~/Library/Application Support/Mozilla/Certificates
 623 - Linux
 624   - /usr/lib/mozilla/certificates
 625   - /usr/lib64/mozilla/certificates
 626   - ~/.mozilla/certificates
 627
 628 Starting with Firefox 65, Firefox 60.5 ESR, a fully qualified path can be used, including UNC paths. You should use the native path style for your operating system. We do not support using %USERPROFILE% or other environment variables on Windows.
 629
 630 If you are specifying the path in the policies.json file on Windows, you need to escape your backslashes (`\\`) which means that for UNC paths, you need to escape both (`\\\\`). If you use group policy, you only need one backslash.
 631
 632 Certificates are installed using the trust string `CT,CT,`.
 633
 634 Binary (DER) and ASCII (PEM) certificates are both supported.
 635
 636 **Compatibility:** Firefox 64, Firefox ESR 64\
 637 **CCK2 Equivalent:** `certs.ca`\
 638 **Preferences Affected:** N/A
 639
 640 #### Windows (GPO)
 641 ```
 642 Software\Policies\Mozilla\Firefox\Certificates\Install\1 = "cert1.der"
 643 Software\Policies\Mozilla\Firefox\Certificates\Install\2 = "C:\Users\username\cert2.pem"
 644 ```
 645 #### Windows (Intune)
 646 OMA-URI:
 647 ```
 648 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Certificates/Certificates_Install
 649 ```
 650 Value (string):
 651 ```
 652 <enabled/>
 653 <data id="Certificates_Install" value="1&#xF000;cert1.der&#xF000;2&#xF000;C:\Users\username\cert2.pem"/>
 654 ```
 655 #### macOS
 656 ```
 657 <dict>
 658   <key>Certificates</key>
 659   <dict>
 660     <key>Install</key>
 661     <array>
 662       <string>cert1.der</string>
 663       <string>/Users/username/cert2.pem</string>
 664     </array>
 665   </dict>
 666 </dict>
 667 ```
 668 #### policies.json
 669 ```
 670 {
 671   "policies": {
 672     "Certificates": {
 673       "Install": ["cert1.der", "/home/username/cert2.pem"]
 674     }
 675   }
 676 }
 677 ```
 678 ### Cookies
 679 Configure cookie preferences.
 680
 681 `Allow` is a list of origins (not domains) where cookies are always allowed. You must include http or https.
 682
 683 `AllowSession` is a list of origins (not domains) where cookies are only allowed for the current session. You must include http or https.
 684
 685 `Block` is a list of origins (not domains) where cookies are always blocked. You must include http or https.
 686
 687 `Default` determines whether cookies are accepted at all.
 688
 689 `AcceptThirdParty` determines how third-party cookies are handled.
 690
 691 `ExpireAtSessionEnd` determines when cookies expire.
 692
 693 `RejectTracker` only rejects cookies for trackers.
 694
 695 `Locked` prevents the user from changing cookie preferences.
 696
 697 **Compatibility:** Firefox 60, Firefox ESR 60 (RejectTracker added in Firefox 63, AllowSession added in Firefox 79/78.1)\
 698 **CCK2 Equivalent:** N/A\
 699 **Preferences Affected:** `network.cookie.cookieBehavior`,`network.cookie.lifetimePolicy`
 700
 701 #### Windows (GPO)
 702 ```
 703 Software\Policies\Mozilla\Firefox\Cookies\Allow\1 = "https://example.com"
 704 Software\Policies\Mozilla\Firefox\Cookies\AllowSession\1 = "https://example.edu"
 705 Software\Policies\Mozilla\Firefox\Cookies\Block\1 = "https://example.org"
 706 Software\Policies\Mozilla\Firefox\Cookies\Default = 0x1 | 0x0
 707 Software\Policies\Mozilla\Firefox\Cookies\AcceptThirdParty = "always" | "never" | "from-visited"
 708 Software\Policies\Mozilla\Firefox\Cookies\ExpireAtSessionEnd = 0x1 | 0x0
 709 Software\Policies\Mozilla\Firefox\Cookies\RejectTracker = 0x1 | 0x0
 710 Software\Policies\Mozilla\Firefox\Cookies\Locked = 0x1 | 0x0
 711 ```
 712 #### Windows (Intune)
 713 OMA-URI:
 714 ```
 715 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Allow
 716 ```
 717 Value (string):
 718 ```
 719 <enabled/>
 720 <data id="Cookies_Allow" value="1&#xF000;https://example.com"/>
 721 ```
 722 OMA-URI:
 723 ```
 724 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_AllowSession
 725 ```
 726 Value (string):
 727 ```
 728 <enabled/>
 729 <data id="Cookies_Allow" value="1&#xF000;https://example.edu"/>
 730 ```
 731 OMA-URI:
 732 ```
 733 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Block
 734 ```
 735 Value (string):
 736 ```
 737 <enabled/>
 738 <data id="Cookies_Block" value="1&#xF000;https://example.org"/>
 739 ```
 740 OMA-URI:
 741 ```
 742 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Default
 743 ```
 744 Value (string):
 745 ```
 746 <enabled/> or <disabled/>
 747 ```
 748 OMA-URI:
 749 ```
 750 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_AcceptThirdParty
 751 ```
 752 Value (string):
 753 ```
 754 <enabled/>
 755 <data id="Cookies_AcceptThirdParty" value="always | never | from-visited"/>
 756 ```
 757 OMA-URI:
 758 ```
 759 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_ExpireAtSessionEnd
 760 ```
 761 Value (string):
 762 ```
 763 <enabled/> or <disabled/>
 764 ```
 765 OMA-URI:
 766 ```
 767 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_RejectTracker
 768 ```
 769 Value (string):
 770 ```
 771 <enabled/> or <disabled/>
 772 ```
 773 OMA-URI:
 774 ```
 775 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Locked
 776 ```
 777 Value (string):
 778 ```
 779 <enabled/> or <disabled/>
 780 ```
 781 #### macOS
 782 ```
 783 <dict>
 784   <key>Cookies</key>
 785   <dict>
 786     <key>Allow</key>
 787     <array>
 788       <string>http://example.com</string>
 789     </array>
 790     <key>AllowSession</key>
 791     <array>
 792       <string>http://example.edu</string>
 793     </array>
 794     <key>Block</key>
 795     <array>
 796       <string>http://example.org</string>
 797     </array>
 798     <key>Default</key>
 799     <true/> | <false/>
 800     <key>AcceptThirdParty</key>
 801     <string>always | never | from-visited</string>
 802     <key>ExpireAtSessionEnd</key>
 803     <true/> | <false/>
 804     <key>RejectTracker</key>
 805     <true/> | <false/>
 806     <key>Locked</key>
 807     <true/> | <false/>
 808   </dict>
 809 </dict>
 810 ```
 811 #### policies.json
 812 ```
 813 {
 814   "policies": {
 815     "Cookies": {
 816       "Allow": ["http://example.org/"],
 817       "AllowSession": ["http://example.edu/"],
 818       "Block": ["http://example.edu/"],
 819       "Default": true | false,
 820       "AcceptThirdParty": "always" | "never" | "from-visited",
 821       "ExpireAtSessionEnd": true | false,
 822       "RejectTracker": true | false,
 823       "Locked": true | false
 824     }
 825   }
 826 }
 827 ```
 828 ### DisableSetDesktopBackground
 829 Remove the "Set As Desktop Background..." menuitem when right clicking on an image.
 830
 831 **Compatibility:** Firefox 60, Firefox ESR 60\
 832 **CCK2 Equivalent:** `removeSetDesktopBackground`\
 833 **Preferences Affected:** N/A
 834
 835 #### Windows (GPO)
 836 ```
 837 Software\Policies\Mozilla\Firefox\DisableSetDesktopBackground = 0x1 | 0x0
 838 ```
 839 #### Windows (Intune)
 840 OMA-URI:
 841 ```
 842 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSetDesktopBackground
 843 ```
 844 Value (string):
 845 ```
 846 <enabled/> or <disabled/>
 847 ```
 848 #### macOS
 849 ```
 850 <dict>
 851   <key>DisableSetDesktopBackground</key>
 852   <true/> | <false/>
 853 </dict>
 854 ```
 855 #### policies.json
 856 ```
 857 {
 858   "policies": {
 859     "DisableSetDesktopBackground": true | false
 860   }
 861 }
 862 ```
 863 ### DisableMasterPasswordCreation
 864 Remove the master password functionality.
 865
 866 If this value is true, it works the same as setting [`PrimaryPassword`](#primarypassword) to false and removes the primary password functionality.
 867
 868 If both DisableMasterPasswordCreation and PrimaryPassword are used, DisableMasterPasswordCreation takes precedent.
 869
 870 **Compatibility:** Firefox 60, Firefox ESR 60\
 871 **CCK2 Equivalent:** `noMasterPassword`\
 872 **Preferences Affected:** N/A
 873
 874 #### Windows (GPO)
 875 ```
 876 Software\Policies\Mozilla\Firefox\DisableMasterPasswordCreation = 0x1 | 0x0
 877 ```
 878 #### Windows (Intune)
 879 OMA-URI:
 880 ```
 881 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableMasterPasswordCreation
 882 ```
 883 Value (string):
 884 ```
 885 <enabled/> or <disabled/>
 886 ```
 887 #### macOS
 888 ```
 889 <dict>
 890   <key>DisableMasterPasswordCreation</key>
 891   <true/> | <false/>
 892 </dict>
 893 ```
 894 #### policies.json
 895 ```
 896 {
 897   "policies": {
 898     "DisableMasterPasswordCreation": true | false
 899   }
 900 }
 901 ```
 902 ### DisableAppUpdate
 903 Turn off application updates.
 904
 905 **Compatibility:** Firefox 60, Firefox ESR 60\
 906 **CCK2 Equivalent:** `disableFirefoxUpdates`\
 907 **Preferences Affected:** N/A
 908
 909 #### Windows (GPO)
 910 ```
 911 Software\Policies\Mozilla\Firefox\DisableAppUpdate = 0x1 | 0x0
 912 ```
 913 #### Windows (Intune)
 914 OMA-URI:
 915 ```
 916 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableAppUpdate
 917 ```
 918 Value (string):
 919 ```
 920 <enabled/> or <disabled/>
 921 ```
 922 #### macOS
 923 ```
 924 <dict>
 925   <key>DisableAppUpdate</key>
 926   <true/> | <false/>
 927 </dict>
 928 ```
 929 #### policies.json
 930 ```
 931 {
 932   "policies": {
 933     "DisableAppUpdate": true | false
 934   }
 935 }
 936 ```
 937 ### DisableBuiltinPDFViewer
 938 Disable the built in PDF viewer. PDF files are downloaded and sent externally.
 939
 940 **Compatibility:** Firefox 60, Firefox ESR 60\
 941 **CCK2 Equivalent:** `disablePDFjs`\
 942 **Preferences Affected:** `pdfjs.disabled`
 943
 944 #### Windows (GPO)
 945 ```
 946 Software\Policies\Mozilla\Firefox\DisableBuiltinPDFViewer = 0x1 | 0x0
 947 ```
 948 #### Windows (Intune)
 949 OMA-URI:
 950 ```
 951 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableBuiltinPDFViewer
 952 ```
 953 Value (string):
 954 ```
 955 <enabled/> or <disabled/>
 956 ```
 957 #### macOS
 958 ```
 959 <dict>
 960   <key>DisableBuiltinPDFViewer</key>
 961   <true/> | <false/>
 962 </dict>
 963 ```
 964 #### policies.json
 965 ```
 966 {
 967   "policies": {
 968     "DisableBuiltinPDFViewer": true | false
 969   }
 970 }
 971 ```
 972 ### DisabledCiphers
 973 Disable specific cryptographic ciphers.
 974
 975 ---
 976 **Note:**
 977
 978 This policy was updated in Firefox 78 to allow enabling ciphers as well. Setting the value to true disables the cipher, setting the value to false enables the cipher. Previously setting the value to true or false disabled the cipher.
 979
 980 ---
 981 **Compatibility:** Firefox 76, Firefox ESR 68.8 (TLS_RSA_WITH_AES_128_GCM_SHA256 and TLS_RSA_WITH_AES_256_GCM_SHA384 were added in Firefox 78)\
 982 **CCK2 Equivalent:** N/A\
 983 **Preferences Affected:** N/A
 984
 985 #### Windows (GPO)
 986 ```
 987 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_DHE_RSA_WITH_AES_128_CBC_SHA = 0x1 | 0x0
 988 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_DHE_RSA_WITH_AES_256_CBC_SHA = 0x1 | 0x0
 989 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA = 0x1 | 0x0
 990 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA = 0x1 | 0x0
 991 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 = 0x1 | 0x0
 992 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 = 0x1 | 0x0
 993 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_RSA_WITH_AES_128_CBC_SHA = 0x1 | 0x0
 994 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_RSA_WITH_AES_256_CBC_SHA = 0x1 | 0x0
 995 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_RSA_WITH_3DES_EDE_CBC_SHA = 0x1 | 0x0
 996 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_RSA_WITH_AES_128_GCM_SHA256 = 0x1 | 0x0
 997 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_RSA_WITH_AES_256_GCM_SHA384 = 0x1 | 0x0
 998 ```
 999 #### Windows (Intune)
1000 OMA-URI:
1001 ```
1002 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_DHE_RSA_WITH_AES_128_CBC_SHA
1003 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_DHE_RSA_WITH_AES_256_CBC_SHA
1004 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
1005 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
1006 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
1007 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
1008 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_RSA_WITH_AES_128_CBC_SHA
1009 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_RSA_WITH_AES_256_CBC_SHA
1010 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_RSA_WITH_3DES_EDE_CBC_SHA
1011 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_RSA_WITH_AES_128_GCM_SHA256
1012 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_RSA_WITH_AES_256_GCM_SHA384
1013 ```
1014 Value (string):
1015 ```
1016 <enabled/> or <disabled/>
1017 ```
1018 #### macOS
1019 ```
1020 <dict>
1021   <key>DisabledCiphers</key>
1022     <dict>
1023       <key>TLS_DHE_RSA_WITH_AES_128_CBC_SHA</key>
1024       <true/> | <false/>
1025       <key>TLS_DHE_RSA_WITH_AES_256_CBC_SHA</key>
1026       <true/> | <false/>
1027       <key>TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA</key>
1028       <true/> | <false/>
1029       <key>TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA</key>
1030       <true/> | <false/>
1031       <key>TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256</key>
1032       <true/> | <false/>
1033       <key>TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256</key>
1034       <true/> | <false/>
1035       <key>TLS_RSA_WITH_AES_128_CBC_SHA</key>
1036       <true/> | <false/>
1037       <key>TLS_RSA_WITH_AES_256_CBC_SHA</key>
1038       <true/> | <false/>
1039       <key>TLS_RSA_WITH_3DES_EDE_CBC_SHA</key>
1040       <true/> | <false/>
1041       <key>TLS_RSA_WITH_AES_128_GCM_SHA256</key>
1042       <true/> | <false/>
1043       <key>TLS_RSA_WITH_AES_256_GCM_SHA384</key>
1044       <true/> | <false/>
1045     </dict>
1046 </dict>
1047 ```
1048 #### policies.json
1049 ```
1050 {
1051   "policies": {
1052     "DisabledCiphers" {
1053       "TLS_DHE_RSA_WITH_AES_128_CBC_SHA": true | false,
1054       "TLS_DHE_RSA_WITH_AES_256_CBC_SHA": true | false,
1055       "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA": true | false,
1056       "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA": true | false,
1057       "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256": true | false,
1058       "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256": true | false,
1059       "TLS_RSA_WITH_AES_128_CBC_SHA": true | false,
1060       "TLS_RSA_WITH_AES_256_CBC_SHA": true | false,
1061       "TLS_RSA_WITH_3DES_EDE_CBC_SHA": true | false
1062       "TLS_RSA_WITH_AES_128_GCM_SHA256": true | false
1063       "TLS_RSA_WITH_AES_256_GCM_SHA384": true | false
1064     }
1065   }
1066 }
1067 ```
1068 ### DisableDefaultBrowserAgent
1069 Prevent the default browser agent from taking any actions. Only applicable to Windows; other platforms don’t have the agent.
1070
1071 **Compatibility:** Firefox 75, Firefox ESR 68.7 (Windows only)\
1072 **CCK2 Equivalent:** N/A\
1073 **Preferences Affected:** N/A
1074
1075 #### Windows (GPO)
1076 ```
1077 Software\Policies\Mozilla\Firefox\DisableDefaultBrowserAgent = 0x1 | 0x0
1078 ```
1079 #### Windows (Intune)
1080 OMA-URI:
1081 ```
1082 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableDefaultBrowserAgent
1083 ```
1084 Value (string):
1085 ```
1086 <enabled/> or <disabled/>
1087 ```
1088 #### policies.json
1089 ```
1090 {
1091   "policies": {
1092     "DisableDefaultBrowserAgent": true | false
1093   }
1094 }
1095 ```
1096 ### DisableDeveloperTools
1097 Remove access to all developer tools.
1098
1099 **Compatibility:** Firefox 60, Firefox ESR 60\
1100 **CCK2 Equivalent:** `removeDeveloperTools`\
1101 **Preferences Affected:** `devtools.policy.disabled`
1102
1103 #### Windows (GPO)
1104 ```
1105 Software\Policies\Mozilla\Firefox\DisableDeveloperTools = 0x1 | 0x0`
1106 ```
1107 #### Windows (Intune)
1108 OMA-URI:
1109 ```
1110 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableDeveloperTools
1111 ```
1112 Value (string):
1113 ```
1114 <enabled/> or <disabled/>
1115 ```
1116 #### macOS
1117 ```
1118 <dict>
1119   <key>DisableDeveloperTools</key>
1120   <true/> | <false/>
1121 </dict>
1122 ```
1123 #### policies.json
1124 ```
1125 {
1126   "policies": {
1127     "DisableDeveloperTools": true | false
1128   }
1129 }
1130 ```
1131 ### DisableFeedbackCommands
1132 Disable the menus for reporting sites (Submit Feedback, Report Deceptive Site).
1133
1134 **Compatibility:** Firefox 60, Firefox ESR 60\
1135 **CCK2 Equivalent:** N/A\
1136 **Preferences Affected:** N/A
1137
1138 #### Windows (GPO)
1139 ```
1140 Software\Policies\Mozilla\Firefox\DisableFeedbackCommands = 0x1 | 0x0
1141 ```
1142 #### Windows (Intune)
1143 OMA-URI:
1144 ```
1145 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFeedbackCommands
1146 ```
1147 Value (string):
1148 ```
1149 <enabled/> or <disabled/>
1150 ```
1151 #### macOS
1152 ```
1153 <dict>
1154   <key>DisableFeedbackCommands</key>
1155   <true/> | <false/>
1156 </dict>
1157 ```
1158 #### policies.json
1159 ```
1160 {
1161   "policies": {
1162     "DisableFeedbackCommands": true | false
1163   }
1164 }
1165 ```
1166 ### DisableFirefoxScreenshots
1167 Remove access to Firefox Screenshots.
1168
1169 **Compatibility:** Firefox 60, Firefox ESR 60\
1170 **CCK2 Equivalent:** N/A\
1171 **Preferences Affected:** `extensions.screenshots.disabled`
1172
1173 #### Windows (GPO)
1174 ```
1175 Software\Policies\Mozilla\Firefox\DisableFirefoxScreenshots = 0x1 | 0x0
1176 ```
1177 #### Windows (Intune)
1178 OMA-URI:
1179 ```
1180 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxScreenshots
1181 ```
1182 Value (string):
1183 ```
1184 <enabled/> or <disabled/>
1185 ```
1186 #### macOS
1187 ```
1188 <dict>
1189   <key>DisableFirefoxScreenshots</key>
1190   <true/> | <false/>
1191 </dict>
1192 ```
1193 #### policies.json
1194 ```
1195 {
1196   "policies": {
1197     "DisableFirefoxScreenshots": true | false
1198   }
1199 }
1200 ```
1201 ### DisableFirefoxAccounts
1202 Disable Firefox Accounts integration (Sync).
1203
1204 **Compatibility:** Firefox 60, Firefox ESR 60\
1205 **CCK2 Equivalent:** `disableSync`\
1206 **Preferences Affected:** `identity.fxaccounts.enabled`
1207
1208 #### Windows (GPO)
1209 ```
1210 Software\Policies\Mozilla\Firefox\DisableFirefoxAccounts = 0x1 | 0x0
1211 ```
1212 #### Windows (Intune)
1213 OMA-URI:
1214 ```
1215 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxAccounts
1216 ```
1217 Value (string):
1218 ```
1219 <enabled/> or <disabled/>
1220 ```
1221 #### macOS
1222 ```
1223 <dict>
1224   <key>DisableFirefoxAccounts</key>
1225   <true/> | <false/>
1226 </dict>
1227 ```
1228 #### policies.json
1229 ```
1230 {
1231   "policies": {
1232     "DisableFirefoxAccounts": true | false
1233   }
1234 }
1235 ```
1236 ### DisableFirefoxStudies
1237 Disable Firefox studies (Shield).
1238
1239 **Compatibility:** Firefox 60, Firefox ESR 60\
1240 **CCK2 Equivalent:** N/A\
1241 **Preferences Affected:** N/A
1242
1243 #### Windows (GPO)
1244 ```
1245 Software\Policies\Mozilla\Firefox\DisableFirefoxStudies = 0x1 | 0x0
1246 ```
1247 #### Windows (Intune)
1248 OMA-URI:
1249 ```
1250 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxStudies
1251 ```
1252 Value (string):
1253 ```
1254 <enabled/> or <disabled/>
1255 ```
1256 #### macOS
1257 ```
1258 <dict>
1259   <key>DisableFirefoxStudies</key>
1260   <true/> | <false/>
1261 </dict>
1262 ```
1263 #### policies.json
1264 ```
1265 {
1266   "policies": {
1267     "DisableFirefoxStudies": true | false
1268   }
1269 }
1270 ```
1271 ### DisableForgetButton
1272 Disable the "Forget" button.
1273
1274 **Compatibility:** Firefox 60, Firefox ESR 60\
1275 **CCK2 Equivalent:** `disableForget`\
1276 **Preferences Affected:** N/A
1277
1278 #### Windows (GPO)
1279 ```
1280 Software\Policies\Mozilla\Firefox\DisableForgetButton = 0x1 | 0x0
1281 ```
1282 #### Windows (Intune)
1283 OMA-URI:
1284 ```
1285 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableForgetButton
1286 ```
1287 Value (string):
1288 ```
1289 <enabled/> or <disabled/>
1290 ```
1291 #### macOS
1292 ```
1293 <dict>
1294   <key>DisableForgetButton</key>
1295   <true/> | <false/>
1296 </dict>
1297 ```
1298 #### policies.json
1299 ```
1300 {
1301   "policies": {
1302     "DisableForgetButton": true | false
1303   }
1304 }
1305 ```
1306 ### DisableFormHistory
1307 Turn off saving information on web forms and the search bar.
1308
1309 **Compatibility:** Firefox 60, Firefox ESR 60\
1310 **CCK2 Equivalent:** `disableFormFill`\
1311 **Preferences Affected:** ` browser.formfill.enable`
1312
1313 #### Windows (GPO)
1314 ```
1315 Software\Policies\Mozilla\Firefox\DisableFormHistory = 0x1 | 0x0
1316 ```
1317 #### Windows (Intune)
1318 OMA-URI:
1319 ```
1320 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFormHistory
1321 ```
1322 Value (string):
1323 ```
1324 <enabled/> or <disabled/>
1325 ```
1326 #### macOS
1327 ```
1328 <dict>
1329   <key>DisableFormHistory</key>
1330   <true/> | <false/>
1331 </dict>
1332 ```
1333 #### policies.json
1334 ```
1335 {
1336   "policies": {
1337     "DisableFormHistory": true | false
1338   }
1339 }
1340 ```
1341 ### DisablePasswordReveal
1342 Do not allow passwords to be shown in saved logins
1343
1344 **Compatibility:** Firefox 71, Firefox ESR 68.3\
1345 **CCK2 Equivalent:** N/A
1346 **Preferences Affected:** N/A
1347
1348 #### Windows (GPO)
1349 ```
1350 Software\Policies\Mozilla\Firefox\DisablePasswordReveal = 0x1 | 0x0
1351 ```
1352 #### Windows (Intune)
1353 OMA-URI:
1354 ```
1355 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePasswordReveal
1356 ```
1357 Value (string):
1358 ```
1359 <enabled/> or <disabled/>
1360 ```
1361 #### macOS
1362 ```
1363 <dict>
1364   <key>DisablePasswordReveal</key>
1365   <true/> | <false/>
1366 </dict>
1367 ```
1368 #### policies.json
1369 ```
1370 {
1371   "policies": {
1372     "DisablePasswordReveal": true | false
1373   }
1374 }
1375 ```
1376 ### DisablePocket
1377 Remove Pocket in the Firefox UI. It does not remove it from the new tab page.
1378
1379 **Compatibility:** Firefox 60, Firefox ESR 60\
1380 **CCK2 Equivalent:** `disablePocket`\
1381 **Preferences Affected:** `extensions.pocket.enabled`
1382
1383 #### Windows (GPO)
1384 ```
1385 Software\Policies\Mozilla\Firefox\DisablePocket = 0x1 | 0x0
1386 ```
1387 #### Windows (Intune)
1388 OMA-URI:
1389 ```
1390 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePocket
1391 ```
1392 Value (string):
1393 ```
1394 <enabled/> or <disabled/>
1395 ```
1396 #### macOS
1397 ```
1398 <dict>
1399   <key>DisablePocket</key>
1400   <true/> | <false/>
1401 </dict>
1402 ```
1403 #### policies.json
1404 ```
1405 {
1406   "policies": {
1407     "DisablePocket": true | false
1408   }
1409 }
1410 ```
1411 ### DisablePrivateBrowsing
1412 Remove access to private browsing.
1413
1414 **Compatibility:** Firefox 60, Firefox ESR 60\
1415 **CCK2 Equivalent:** `disablePrivateBrowsing`\
1416 **Preferences Affected:** N/A
1417
1418 #### Windows (GPO)
1419 ```
1420 Software\Policies\Mozilla\Firefox\DisablePrivateBrowsing = 0x1 | 0x0
1421 ```
1422 #### Windows (Intune)
1423 OMA-URI:
1424 ```
1425 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePrivateBrowsing
1426 ```
1427 Value (string):
1428 ```
1429 <enabled/> or <disabled/>
1430 ```
1431 #### macOS
1432 ```
1433 <dict>
1434   <key>DisablePrivateBrowsing</key>
1435   <true/> | <false/>
1436 </dict>
1437 ```
1438 #### policies.json
1439 ```
1440 {
1441   "policies": {
1442     "DisablePrivateBrowsing": true | false
1443   }
1444 }
1445 ```
1446 ### DisableProfileImport
1447 Disables the "Import data from another browser" option in the bookmarks window.
1448
1449 **Compatibility:** Firefox 60, Firefox ESR 60\
1450 **CCK2 Equivalent:** N/A\
1451 **Preferences Affected:** N/A
1452
1453 #### Windows (GPO)
1454 ```
1455 Software\Policies\Mozilla\Firefox\DisableProfileImport = 0x1 | 0x0
1456 ```
1457 #### Windows (Intune)
1458 OMA-URI:
1459 ```
1460 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableProfileImport
1461 ```
1462 Value (string):
1463 ```
1464 <enabled/> or <disabled/>
1465 ```
1466 #### macOS
1467 ```
1468 <dict>
1469   <key>DisableProfileImport</key>
1470   <true/> | <false/>
1471 </dict>
1472 ```
1473 #### policies.json
1474 ```
1475 {
1476   "policies": {
1477     "DisableProfileImport": true | false
1478   }
1479 }
1480 ```
1481 ### DisableProfileRefresh
1482 Disable the Refresh Firefox button on about:support and support.mozilla.org, as well as the prompt that displays offering to refresh Firefox when you haven't used it in a while.
1483
1484 **Compatibility:** Firefox 60, Firefox ESR 60\
1485 **CCK2 Equivalent:** `disableResetFirefox`\
1486 **Preferences Affected:** `browser.disableResetPrompt`
1487
1488 #### Windows (GPO)
1489 ```
1490 Software\Policies\Mozilla\Firefox\DisableProfileRefresh = 0x1 | 0x0
1491 ```
1492 #### Windows (Intune)
1493 OMA-URI:
1494 ```
1495 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableProfileRefresh
1496 ```
1497 Value (string):
1498 ```
1499 <enabled/> or <disabled/>
1500 ```
1501 #### macOS
1502 ```
1503 <dict>
1504   <key>DisableProfileRefresh</key>
1505   <true/> | <false/>
1506 </dict>
1507 ```
1508 #### policies.json
1509 ```
1510 {
1511   "policies": {
1512     "DisableProfileRefresh": true | false
1513   }
1514 }
1515 ```
1516 ### DisableSafeMode
1517 Disable safe mode within the browser.
1518
1519 On Windows, this disables safe mode via the command line as well.
1520
1521 **Compatibility:** Firefox 60, Firefox ESR 60 (Windows, macOS)\
1522 **CCK2 Equivalent:** `disableSafeMode`\
1523 **Preferences Affected:** N/A
1524
1525 #### Windows (GPO)
1526 ```
1527 Software\Policies\Mozilla\Firefox\DisableSafeMode = 0x1 | 0x0
1528 ```
1529 #### Windows (Intune)
1530 OMA-URI:
1531 ```
1532 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSafeMode
1533 ```
1534 Value (string):
1535 ```
1536 <enabled/> or <disabled/>
1537 ```
1538 #### macOS
1539 ```
1540 <dict>
1541   <key>DisableSafeMode</key>
1542   <true/> | <false/>
1543 </dict>
1544 ```
1545 #### policies.json
1546 ```
1547 {
1548   "policies": {
1549     "DisableSafeMode": true | false
1550   }
1551 }
1552 ```
1553 ### DisableSecurityBypass
1554 Prevent the user from bypassing security in certain cases.
1555
1556 `InvalidCertificate` prevents adding an exception when an invalid certificate is shown.
1557
1558 `SafeBrowsing` prevents selecting "ignore the risk" and visiting a harmful site anyway.
1559
1560 **Compatibility:** Firefox 60, Firefox ESR 60\
1561 **CCK2 Equivalent:** N/A\
1562 **Preferences Affected:** `security.certerror.hideAddException`,`browser.safebrowsing.allowOverride`
1563
1564 #### Windows (GPO)
1565 ```
1566 Software\Policies\Mozilla\Firefox\DisableSecurityBypass\InvalidCertificate = 0x1 | 0x0
1567 Software\Policies\Mozilla\Firefox\DisableSecurityBypass\SafeBrowsing = 0x1 | 0x0
1568 ```
1569 #### Windows (Intune)
1570 OMA-URI:
1571 ```
1572 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/P_DisableSecurityBypass_InvalidCertificate
1573 ```
1574 Value (string):
1575 ```
1576 <enabled/> or <disabled/>
1577 ```
1578 OMA-URI:
1579 ```
1580 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/P_DisableSecurityBypass_SafeBrowsing
1581 ```
1582 Value (string):
1583 ```
1584 <enabled/> or <disabled/>
1585 ```
1586
1587 #### macOS
1588 ```
1589 <dict>
1590   <key>DisableSecurityBypass</key>
1591   <dict>
1592     <key>InvalidCertificate</key>
1593     <true/> | <false/>
1594     <key><SafeBrowsing/key>
1595     <true/> | <false/>
1596   </dict>
1597 </dict>
1598 ```
1599 #### policies.json
1600 ```
1601 {
1602   "policies": {
1603     "DisableSecurityBypass": {
1604       "InvalidCertificate": true | false,
1605       "SafeBrowsing": true | false
1606     }
1607   }
1608 }
1609 ```
1610 ### DisableSystemAddonUpdate
1611 Prevent system add-ons from being installed or update.
1612
1613 **Compatibility:** Firefox 60, Firefox ESR 60\
1614 **CCK2 Equivalent:** N/A\
1615 **Preferences Affected:** N/A
1616
1617 #### Windows (GPO)
1618 ```
1619 Software\Policies\Mozilla\Firefox\DisableSystemAddonUpdate = 0x1 | 0x0
1620 ```
1621 #### Windows (Intune)
1622 OMA-URI:
1623 ```
1624 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSystemAddonUpdate
1625 ```
1626 Value (string):
1627 ```
1628 <enabled/> or <disabled/>
1629 ```
1630 #### macOS
1631 ```
1632 <dict>
1633   <key>DisableSystemAddonUpdate</key>
1634   <true/> | <false/>
1635 </dict>
1636 ```
1637 #### policies.json
1638 ```
1639 {
1640   "policies": {
1641     "DisableSystemAddonUpdate": true | false
1642   }
1643 }
1644 ```
1645 ### DisableTelemetry
1646 Prevent the upload of telemetry data.
1647
1648 Mozilla recommends that you do not disable telemetry. Information collected through telemetry helps us build a better product for businesses like yours.
1649
1650 **Compatibility:** Firefox 60, Firefox ESR 60\
1651 **CCK2 Equivalent:** `disableTelemetry`\
1652 **Preferences Affected:** `datareporting.healthreport.uploadEnabled,datareporting.policy.dataSubmissionEnabled`
1653
1654 #### Windows (GPO)
1655 ```
1656 Software\Policies\Mozilla\Firefox\DisableTelemetry = 0x1 | 0x0
1657 ```
1658 #### Windows (Intune)
1659 OMA-URI:
1660 ```
1661 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableTelemetry
1662 ```
1663 Value (string):
1664 ```
1665 <enabled/> or <disabled/>
1666 ```
1667 #### macOS
1668 ```
1669 <dict>
1670   <key>DisableTelemetry</key>
1671   <true/> | <false/>
1672 </dict>
1673 ```
1674 #### policies.json
1675 ```
1676 {
1677   "policies": {
1678     "DisableTelemetry": true | false
1679   }
1680 }
1681 ```
1682 ### DisplayBookmarksToolbar
1683 Set the initial state of the bookmarks toolbar. A user can still hide it and it will stay hidden.
1684
1685 **Compatibility:** Firefox 60, Firefox ESR 60\
1686 **CCK2 Equivalent:** `displayBookmarksToolbar`\
1687 **Preferences Affected:** N/A
1688
1689 #### Windows (GPO)
1690 ```
1691 Software\Policies\Mozilla\Firefox\DisplayBookmarksToolbar = 0x1 | 0x0
1692 ```
1693 #### Windows (Intune)
1694 OMA-URI:
1695 ```
1696 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisplayBookmarksToolbar
1697 ```
1698 Value (string):
1699 ```
1700 <enabled/> or <disabled/>
1701 ```
1702 #### macOS
1703 ```
1704 <dict>
1705   <key>DisplayBookmarksToolbar</key>
1706   <true/> | <false/>
1707 </dict>
1708 ```
1709 #### policies.json
1710 ```
1711 {
1712   "policies": {
1713     "DisplayBookmarksToolbar": true | false
1714   }
1715 }
1716 ```
1717 ### DisplayMenuBar (Deprecated)
1718 Set the initial state of the menubar. A user can still hide it and it will stay hidden.
1719
1720 **Compatibility:** Firefox 60, Firefox ESR 60 (Windows, some Linux)\
1721 **CCK2 Equivalent:** `displayMenuBar`\
1722 **Preferences Affected:** N/A
1723
1724 #### Windows (GPO)
1725 ```
1726 Software\Policies\Mozilla\Firefox\DisplayMenuBar = 0x1 | 0x0
1727 ```
1728 #### macOS
1729 ```
1730 <dict>
1731   <key>DisplayMenuBar</key>
1732   <true/> | <false/>
1733 </dict>
1734 ```
1735 #### policies.json
1736 ```
1737 {
1738   "policies": {
1739     "DisplayMenuBar": true | false
1740   }
1741 }
1742 ```
1743 ### DisplayMenuBar
1744 Set the state of the menubar.
1745
1746 `always` means the menubar is shown and cannot be hidden.
1747
1748 `never` means the menubar is hidden and cannot be shown.
1749
1750 `default-on` means the menubar is on by default but can be hidden.
1751
1752 `default-off` means the menubar is off by default but can be shown.
1753
1754 **Compatibility:** Firefox 73, Firefox ESR 68.5 (Windows, some Linux)\
1755 **CCK2 Equivalent:** `displayMenuBar`\
1756 **Preferences Affected:** N/A
1757
1758 #### Windows (GPO)
1759 ```
1760 Software\Policies\Mozilla\Firefox\DisplayMenuBar = "always", "never", "default-on", "default-off"
1761 ```
1762 #### Windows (Intune)
1763 OMA-URI:
1764 ```
1765 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisplayMenuBar_Enum
1766 ```
1767 Value (string):
1768 ```
1769 <enabled/>
1770 <data id="DisplayMenuBar" value="always | never | default-on | default-off"/>
1771 ```
1772 #### macOS
1773 ```
1774 <dict>
1775   <key>DisplayMenuBar</key>
1776   <string>always | never | default-on | default-off</string>
1777 </dict>
1778 ```
1779 #### policies.json
1780 ```
1781 {
1782   "policies": {
1783     "DisplayMenuBar": "always", "never", "default-on", "default-off"
1784   }
1785 }
1786 ```
1787 ### DNSOverHTTPS
1788 Configure DNS over HTTPS.
1789
1790 `Enabled` determines whether DNS over HTTPS is enabled
1791
1792 `ProviderURL` is a URL to another provider.
1793
1794 `Locked` prevents the user from changing DNS over HTTPS preferences.
1795
1796 `ExcludedDomains` excludes domains from DNS over HTTPS.
1797
1798 **Compatibility:** Firefox 63, Firefox ESR 68 (ExcludedDomains added in 75/68.7)\
1799 **CCK2 Equivalent:** N/A\
1800 **Preferences Affected:** `network.trr.mode`,`network.trr.uri`
1801
1802 #### Windows (GPO)
1803 ```
1804 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\Enabled = 0x1 | 0x0
1805 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\ProviderURL = "URL_TO_ALTERNATE_PROVIDER"
1806 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\Locked = 0x1 | 0x0
1807 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\ExcludedDomains\1 = "example.com"
1808 ```
1809 #### Windows (Intune)
1810 OMA-URI:
1811 ```
1812 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_Enabled
1813 ```
1814 Value (string):
1815 ```
1816 <enabled/> or <disabled/>
1817 ```
1818 OMA-URI:
1819 ```
1820 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_ProviderURL
1821 ```
1822 Value (string):
1823 ```
1824 <enabled/>
1825 <data id="String" value="URL_TO_ALTERNATE_PROVIDER"/>
1826 ```
1827 OMA-URI:
1828 ```
1829 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_Locked
1830 ```
1831 Value (string):
1832 ```
1833 <enabled/> or <disabled/>
1834 ```
1835 OMA-URI:
1836 ```
1837 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_ExcludedDomains
1838 ```
1839 Value (string):
1840 ```
1841 <enabled/>
1842 <data id="List" value="1&#xF000;example.com"/>
1843 ```
1844 #### macOS
1845 ```
1846 <dict>
1847   <key>DNSOverHTTPS</key>
1848   <dict>
1849     <key>Enabled</key>
1850     <true/> | <false/>
1851     <key>ProviderURL</key>
1852     <string>URL_TO_ALTERNATE_PROVIDER</string>
1853     <key>Locked</key>
1854     <true/> | <false/>
1855     <key>ExcludedDomains</key>
1856     <array>
1857       <string>example.com</string>
1858     </array>
1859   </dict>
1860 </dict>
1861 ```
1862 #### policies.json
1863 ```
1864 {
1865   "policies": {
1866     "DNSOverHTTPS": {
1867       "Enabled":  true | false,
1868       "ProviderURL": "URL_TO_ALTERNATE_PROVIDER",
1869       "Locked": true | false,
1870       "ExcludedDomains": ["example.com"]
1871     }
1872   }
1873 }
1874 ```
1875 ### DontCheckDefaultBrowser
1876 Don't check if Firefox is the default browser at startup.
1877
1878 **Compatibility:** Firefox 60, Firefox ESR 60\
1879 **CCK2 Equivalent:** `dontCheckDefaultBrowser`\
1880 **Preferences Affected:** `browser.shell.checkDefaultBrowser`
1881
1882 #### Windows (GPO)
1883 ```
1884 Software\Policies\Mozilla\Firefox\DontCheckDefaultBrowser = 0x1 | 0x0
1885 ```
1886 #### Windows (Intune)
1887 OMA-URI:
1888 ```
1889 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DontCheckDefaultBrowser
1890 ```
1891 Value (string):
1892 ```
1893 <enabled/> or <disabled/>
1894 ```
1895 #### macOS
1896 ```
1897 <dict>
1898   <key>DontCheckDefaultBrowser</key>
1899   <true/> | <false/>
1900 </dict>
1901 ```
1902 #### policies.json
1903 ```
1904 {
1905   "policies": {
1906     "DontCheckDefaultBrowser": true | false
1907   }
1908 }
1909 ```
1910 ### DefaultDownloadDirectory
1911 Set the default download directory.
1912
1913 You can use ${home} for the native home directory.
1914
1915 **Compatibility:** Firefox 68, Firefox ESR 68\
1916 **CCK2 Equivalent:** N/A\
1917 **Preferences Affected:** `browser.download.dir`,`browser.download.folderList`
1918
1919 #### Windows (GPO)
1920 ```
1921 Software\Policies\Mozilla\Firefox\DefaultDownloadDirectory = "${home}\Downloads"
1922 ```
1923 #### Windows (Intune)
1924 OMA-URI:
1925 ```
1926 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DefaultDownloadDirectory
1927 ```
1928 Value (string):
1929 ```
1930 <enabled/>
1931 <data id="Preferences_String" value="${home}\Downloads"/>
1932 ```
1933 #### macOS
1934 ```
1935 <dict>
1936   <key>DefaultDownloadDirectory</key>
1937   <string>${home}/Downloads</string>
1938 </dict>
1939 ```
1940 #### policies.json (macOS and Linux)
1941 ```
1942 {
1943   "policies": {
1944     "DefaultDownloadDirectory": "${home}/Downloads"
1945 }
1946 ```
1947 #### policies.json (Windows)
1948 ```
1949 {
1950   "policies": {
1951     "DefaultDownloadDirectory": "${home}\\Downloads"
1952 }
1953 ```
1954 ### DownloadDirectory
1955 Set and lock the download directory.
1956
1957 You can use ${home} for the native home directory.
1958
1959 **Compatibility:** Firefox 68, Firefox ESR 68\
1960 **CCK2 Equivalent:** N/A\
1961 **Preferences Affected:** `browser.download.dir`,`browser.download.folderList`,`browser.download.useDownloadDir`
1962
1963 #### Windows (GPO)
1964 ```
1965 Software\Policies\Mozilla\Firefox\DownloadDirectory = "${home}\Downloads"
1966 ```
1967 #### Windows (Intune)
1968 OMA-URI:
1969 ```
1970 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DownloadDirectory
1971 ```
1972 Value (string):
1973 ```
1974 <enabled/>
1975 <data id="Preferences_String" value="${home}\Downloads"/>
1976 ```
1977 #### macOS
1978 ```
1979 <dict>
1980   <key>DownloadDirectory</key>
1981   <string>${home}/Downloads</string>
1982 </dict>
1983 ```
1984 #### policies.json (macOS and Linux)
1985 ```
1986 {
1987   "policies": {
1988     "DownloadDirectory": "${home}/Downloads"
1989 }
1990 ```
1991 #### policies.json (Windows)
1992 ```
1993 {
1994   "policies": {
1995     "DownloadDirectory": "${home}\\Downloads"
1996 }
1997 ```
1998 ### EnableTrackingProtection
1999 Configure tracking protection.
2000
2001 If this policy is not configured, tracking protection is not enabled by default in the browser, but it is enabled by default in private browsing and the user can change it.
2002
2003 If `Value` is set to false, tracking protection is disabled and locked in both the regular browser and private browsing.
2004
2005 If `Value` is set to true, tracking protection is enabled by default in both the regular browser and private browsing and the `Locked` value determines whether or not a user can change it.
2006
2007 If `Cryptomining` is set to true, cryptomining scripts on websites are blocked.
2008
2009 If `Fingerprinting` is set to true, fingerprinting scripts on websites are blocked.
2010
2011 `Exceptions` are origins for which tracking protection is not enabled.
2012
2013 **Compatibility:** Firefox 60, Firefox ESR 60 (Cryptomining and Fingerprinting added in 70/68.2, Exceptions added in 73/68.5)\
2014 **CCK2 Equivalent:** N/A\
2015 **Preferences Affected:** `privacy.trackingprotection.enabled`,`privacy.trackingprotection.pbmode.enabled`,`privacy.trackingprotection.cryptomining.enabled`,`privacy.trackingprotection.fingerprinting.enabled`
2016
2017 #### Windows (GPO)
2018 ```
2019 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Value = 0x1 | 0x0
2020 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Locked = 0x1 | 0x0
2021 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Cryptomining = 0x1 | 0x0
2022 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Fingerprinting = 0x1 | 0x0
2023 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Exceptions\1 = "https://example.com"
2024 ```
2025 #### Windows (Intune)
2026 OMA-URI:
2027 ```
2028 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/TrackingProtection
2029 ```
2030 Value (string):
2031 ```
2032 <enabled/>
2033 <data id="TrackingProtectionLocked" value="true | false"/>
2034 <data id="Cryptomining" value="true | false"/>
2035 <data id="Fingerprinting" value="true | false"/>
2036 <data id=TrackingProtection_Exceptions" value="1&#xF000;https://example.com"/>
2037 ```
2038 #### macOS
2039 ```
2040 <dict>
2041   <key>EnableTrackingProtection</key>
2042   <dict>
2043     <key>Value</key>
2044     <true/> | <false/>
2045     <key><Locked</key>
2046     <true/> | <false/>
2047     <key><Cryptomining</key>
2048     <true/> | <false/>
2049     <key><Fingerprinting</key>
2050     <true/> | <false/>
2051     <key>Exceptions</key>
2052     <array>
2053       <string>https://example.com</string>
2054     </array>
2055   </dict>
2056 </dict>
2057 ```
2058 #### policies.json
2059 ```
2060 {
2061   "policies": {
2062     "EnableTrackingProtection": {
2063       "Value": true | false,
2064       "Locked": true | false,
2065       "Cryptomining": true | false,
2066       "Fingerprinting": true | false,
2067       "Exceptions": ["https://example.com"]
2068     }
2069 }
2070 ```
2071 ### EncryptedMediaExtensions
2072 Enable or disable Encrypted Media Extensions and optionally lock it.
2073
2074 If `Enabled` is set to false, encrypted media extensions (like Widevine) are not downloaded by Firefox unless the user consents to installing them.
2075
2076 If `Locked` is set to true and `Enabled` is set to false, Firefox will not download encrypted media extensions (like Widevine) or ask the user to install them.
2077
2078 **Compatibility:** Firefox 77, Firefox ESR 68.9\
2079 **CCK2 Equivalent:** N/A\
2080 **Preferences Affected:** `media.eme.enabled`
2081
2082 #### Windows (GPO)
2083 ```
2084 Software\Policies\Mozilla\Firefox\EncryptedMediaExtensions\Enabled = 0x1 | 0x0
2085 Software\Policies\Mozilla\Firefox\EncryptedMediaExtensions\Locked = 0x1 | 0x0
2086 ```
2087 #### Windows (Intune)
2088 OMA-URI:
2089 ```
2090 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~EncryptedMediaExtensions/EncryptedMediaExtensions_Enabled
2091 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~EncryptedMediaExtensions/EncryptedMediaExtensions_Locked
2092 ```
2093 Value (string):
2094 ```
2095 <enabled/>or <disabled/>
2096 ```
2097 #### macOS
2098 ```
2099 <dict>
2100   <key>EncryptedMediaExtensions</key>
2101   <dict>
2102     <key>Enabled</key>
2103     <true/> | <false/>
2104     <key><Locked</key>
2105     <true/> | <false/>
2106   </dict>
2107 </dict>
2108 ```
2109 #### policies.json
2110 ```
2111 {
2112   "policies": {
2113     "EncryptedMediaExtensions": {
2114       "Enabled": true | false,
2115       "Locked": true | false
2116     }
2117 }
2118 ```
2119 ### EnterprisePoliciesEnabled
2120 Enable policy support on macOS.
2121
2122 **Compatibility:** Firefox 63, Firefox ESR 60.3 (macOS only)\
2123 **CCK2 Equivalent:** N/A\
2124 **Preferences Affected:** N/A
2125
2126 #### macOS
2127 ```
2128 <dict>
2129   <key>EnterprisePoliciesEnabled</key>
2130   <true/>
2131 </dict>
2132 ```
2133 ### Extensions
2134 Control the installation, uninstallation and locking of extensions.
2135
2136 `Install` is a list of URLs or native paths for extensions to be installed.
2137
2138 `Uninstall` is a list of extension IDs that should be uninstalled if found.
2139
2140 `Locked` is a list of extension IDs that the user cannot disable or uninstall.
2141
2142 **Compatibility:** Firefox 60, Firefox ESR 60\
2143 **CCK2 Equivalent:** `addons`\
2144 **Preferences Affected:** N/A
2145
2146 #### Windows (GPO)
2147 ```
2148 Software\Policies\Mozilla\Firefox\Extensions\Install\1 = "https://addons.mozilla.org/firefox/downloads/somefile.xpi"
2149 Software\Policies\Mozilla\Firefox\Extensions\Install\2 = "//path/to/xpi"
2150 Software\Policies\Mozilla\Firefox\Extensions\Uninstall\1 = "bad_addon_id@mozilla.org"
2151 Software\Policies\Mozilla\Firefox\Extensions\Locked\1 = "addon_id@mozilla.org"
2152 ```
2153 #### Windows (Intune)
2154 OMA-URI:
2155 ```
2156 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/Extensions_Install
2157 ```
2158 Value (string):
2159 ```
2160 <enabled/>
2161 <data id="Extensions" value="1&#xF000;https://addons.mozilla.org/firefox/downloads/somefile.xpi&#xF000;2&#xF000;//path/to/xpi"/>
2162 ```
2163 OMA-URI:
2164 ```
2165 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/Extensions_Uninstall
2166 ```
2167 Value (string):
2168 ```
2169 <enabled/>
2170 <data id="Extensions" value="1&#xF000;bad_addon_id@mozilla.org"/>
2171 ```
2172 OMA-URI:
2173 ```
2174 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/Extensions_Locked
2175 ```
2176 Value (string):
2177 ```
2178 <enabled/>
2179 <data id="Extensions" value="1&#xF000;addon_id@mozilla.org"/>
2180 ```
2181 #### macOS
2182 ```
2183 <dict>
2184   <key>Extensions</key>
2185   <dict>
2186     <key>Install</key>
2187     <array>
2188       <string>https://addons.mozilla.org/firefox/downloads/somefile.xpi</string>
2189       <string>//path/to/xpi</string>
2190     </array>
2191     <key>Uninstall</key>
2192     <array>
2193       <string>bad_addon_id@mozilla.org</string>
2194     </array>
2195     <key>Locked</key>
2196     <array>
2197       <string>addon_id@mozilla.org</string>
2198     </array>
2199   </dict>
2200 </dict>
2201 ```
2202 #### policies.json
2203 ```
2204 {
2205   "policies": {
2206     "Extensions": {
2207       "Install": ["https://addons.mozilla.org/firefox/downloads/somefile.xpi", "//path/to/xpi"],
2208       "Uninstall": ["bad_addon_id@mozilla.org"],
2209       "Locked":  ["addon_id@mozilla.org"]
2210     }
2211   }
2212 }
2213 ```
2214 ### ExtensionSettings
2215 Manage all aspects of extensions. This policy is based heavily on the [Chrome policy](https://dev.chromium.org/administrators/policy-list-3/extension-settings-full) of the same name.
2216
2217 This policy maps an extension ID to its configuration. With an extension ID, the configuration will be applied to the specified extension only. A default configuration can be set for the special ID "*", which will apply to all extensions that don't have a custom configuration set in this policy.
2218
2219 To obtain an extension ID, install the extension and go to about:support. You will see the ID in the Extensions section. I've also created an extension that makes it easy to find the ID of extensions on AMO. You can download it [here](https://github.com/mkaply/queryamoid/releases/tag/v0.1).
2220
2221 The configuration for each extension is another dictionary that can contain the fields documented below.
2222
2223 | Name | Description |
2224 | --- | --- |
2225 | `installation_mode` | Maps to a string indicating the installation mode for the extension. The valid strings are `allowed`,`blocked`,`force_installed`, and `normal_installed`.
2226 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`allowed` | Allows the extension to be installed by the user. This is the default behavior. There is no need for an install_url; it will automatically be allowed based on the ID.
2227 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`blocked`| Blocks installation of the extension and removes it from the device if already installed.
2228 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`force_installed`| The extension is automatically installed and can't be removed by the user. This option is not valid for the default configuration and requires an install_url.
2229 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`normal_installed`| The extension is automatically installed but can be disabled by the user. This option is not valid for the default configuration and requires an install_url.
2230 | `install_url`| Maps to a URL indicating where Firefox can download a force_installed or normal_installed extension. If installing from the addons.mozilla.org, use the following URL (substituting SHORT_NAME from the URL on AMO), https://addons.mozilla.org/firefox/downloads/latest/SHORT_NAME/latest.xpi. If installing from the local file system, use a file:/// URL. Languages packs are available from https://releases.mozilla.org/pub/firefox/releases/VERSION/PLATFORM/xpi/LANGUAGE.xpi. If you need to update the extension, you can change the name of the extension and it will be automatically updated. Extensions installed from file URLs will additional be updated when their internal version changes.
2231 | `install_sources` | A list of sources from which installing extensions is allowed. **This is unnecessary if you are only allowing the installation of certain extensions by ID.** Each item in this list is an extension-style match pattern. Users will be able to easily install items from any URL that matches an item in this list. Both the location of the *.xpi file and the page where the download is started from (i.e.  the referrer) must be allowed by these patterns. This setting can be used only for the default configuration. If you want to allow the install of extensions from the recommended add-ons page, you must add `about:addons` to this list.
2232 | `allowed_types` | This setting whitelists the allowed types of extension/apps that can be installed in Firefox. The value is a list of strings, each of which should be one of the following: "extension", "theme", "dictionary", "langpack" This setting can be used only for the default configuration.
2233 | `blocked_install_message` | This maps to a string specifying the error message to display to users if they're blocked from installing an extension. This setting allows you to append text to the generic error message displayed when the extension is blocked. This could be be used to direct users to your help desk, explain why a particular extension is blocked, or something else. This setting can be used only for the default configuration.
2234 | `restricted_domains` | An array of domains on which content scripts can't be run. This setting can be used only for the default configuration.
2235
2236 **Compatibility:** Firefox 69, Firefox ESR 68.1\
2237 **CCK2 Equivalent:** N/A\
2238 **Preferences Affected:** N/A
2239
2240 #### Windows (GPO)
2241 ```
2242 Software\Policies\Mozilla\Firefox\ExtensionSettings (REG_MULTI_SZ) =
2243 {
2244   "*": {
2245     "blocked_install_message": "Custom error message.",
2246     "install_sources": ["about:addons","https://addons.mozilla.org/"],
2247     "installation_mode": "blocked",
2248     "allowed_types": ["extension"]
2249   },
2250   "uBlock0@raymondhill.net": {
2251     "installation_mode": "force_installed",
2252     "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
2253   },
2254   "https-everywhere@eff.org": {
2255     "installation_mode": "allowed",
2256   }
2257 }
2258 ```
2259 #### Windows (Intune)
2260 OMA-URI:
2261 ```
2262 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/ExtensionSettings
2263 ```
2264 Value (string):
2265 ```
2266 <enabled/>
2267 <data id="ExtensionSettings" value='
2268   "*": {
2269     "blocked_install_message": "Custom error message.",
2270     "install_sources": ["about:addons","https://addons.mozilla.org/"],
2271     "installation_mode": "blocked",
2272     "allowed_types": ["extension"]
2273   },
2274   "uBlock0@raymondhill.net": {
2275     "installation_mode": "force_installed",
2276     "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
2277   },
2278     "https-everywhere@eff.org": {
2279     "installation_mode": "allowed",
2280   }'/>
2281 ```
2282 #### macOS
2283 ```
2284 <dict>
2285   <key>ExtensionSettings</key>
2286   <dict>
2287     <key>*</key>
2288     <dict>
2289       <key>blocked_install_message</key>
2290       <string>Custom error message.</string>
2291       <key>install_sources</key>
2292       <array>
2293         <string>about:addons</string>
2294         <string>https://addons.mozilla.org/</string>
2295       </array>
2296       <key>installation_mode</key>
2297       <string>blocked</string>
2298       <key>allowed_types</key>
2299       <array>
2300         <string>extension</string>
2301       </array>
2302     </dict>
2303     <key>uBlock0@raymondhill.net</key>
2304     <dict>
2305       <key>installation_mode</key>
2306        <string>force_installed</string>
2307       <key>install_url</key>
2308       <string>https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi</string>
2309     </dict>
2310     <key>https-everywhere@eff.org</key>
2311     <dict>
2312       <key>installation_mode</key>
2313        <string>allowed</string>
2314     </dict>
2315   </dict>
2316 </dict>
2317 ```
2318 #### policies.json
2319 ```
2320 {
2321   "policies": {
2322     "ExtensionSettings": {
2323       "*": {
2324         "blocked_install_message": "Custom error message.",
2325         "install_sources": ["about:addons","https://addons.mozilla.org/"],
2326         "installation_mode": "blocked",
2327         "allowed_types": ["extension"]
2328       },
2329       "uBlock0@raymondhill.net": {
2330         "installation_mode": "force_installed",
2331         "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
2332       },
2333       "https-everywhere@eff.org": {
2334         "installation_mode": "allowed"
2335       }
2336     }
2337   }
2338 }
2339 ```
2340 ### ExtensionUpdate
2341 Control extension updates.
2342
2343 **Compatibility:** Firefox 67, Firefox ESR 60.7\
2344 **CCK2 Equivalent:** N/A\
2345 **Preferences Affected:** `extensions.update.enabled`
2346
2347 #### Windows (GPO)
2348 ```
2349 Software\Policies\Mozilla\Firefox\ExtensionUpdate = 0x1 | 0x0
2350 ```
2351 #### Windows (Intune)
2352 OMA-URI:
2353 ```
2354 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/ExtensionUpdate
2355 ```
2356 Value (string):
2357 ```
2358 <enabled/> or <disabled/>
2359 ```
2360 #### macOS
2361 ```
2362 <dict>
2363   <key>ExtensionUpdate</key>
2364   <true/> | <false/>
2365 </dict>
2366 ```
2367 #### policies.json
2368 ```
2369 {
2370   "policies": {
2371     "ExtensionUpdate": true | false
2372   }
2373 }
2374 ```
2375 ### FlashPlugin
2376 Configure the default Flash plugin policy as well as origins for which Flash is allowed.
2377
2378 `Allow` is a list of origins where Flash are allowed.
2379
2380 `Block` is a list of origins where Flash is not allowed.
2381
2382 `Default` determines whether or not Flash is allowed by default.
2383
2384 `Locked` prevents the user from changing Flash preferences.
2385
2386 **Compatibility:** Firefox 60, Firefox ESR 60\
2387 **CCK2 Equivalent:** `permissions.plugin`\
2388 **Preferences Affected:** `plugin.state.flash`
2389
2390 #### Windows (GPO)
2391 ```
2392 Software\Policies\Mozilla\Firefox\FlashPlugin\Allow\1 = "https://example.org"
2393 Software\Policies\Mozilla\Firefox\FlashPlugin\Block\1 = "https://example.edu"
2394 Software\Policies\Mozilla\Firefox\FlashPlugin\Default = 0x1 | 0x0
2395 Software\Policies\Mozilla\Firefox\FlashPlugin\Locked = 0x1 | 0x0
2396 ```
2397 #### Windows (Intune)
2398 OMA-URI:
2399 ```
2400 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Flash/FlashPlugin_Allow
2401 ```
2402 Value (string):
2403 ```
2404 <enabled/>
2405 <data id="Permissions" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
2406 ```
2407 OMA-URI:
2408 ```
2409 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Flash/FlashPlugin_Locked
2410 ```
2411 Value (string):
2412 ```
2413 <enabled/> or <disabled/>
2414 ```
2415 OMA-URI:
2416 ```
2417 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Flash/FlashPlugin_Default
2418 ```
2419 Value (string):
2420 ```
2421 <enabled/> or <disabled/>
2422 ```
2423 #### macOS
2424 ```
2425 <dict>
2426   <key>FlashPlugin</key>
2427   <dict>
2428     <key>Allow</key>
2429     <array>
2430       <string>http://example.org</string>
2431     </array>
2432     <key>Block</key>
2433     <array>
2434       <string>http://example.edu</string>
2435     </array>
2436     <key>Default</key>
2437     <true/> | <false/>
2438     <key>Locked</key>
2439     <true/> | <false/>
2440   </dict>
2441 </dict>
2442 ```
2443 #### policies.json
2444 ```
2445 {
2446   "policies": {
2447     "FlashPlugin": {
2448       "Allow": ["http://example.org/"],
2449       "Block": ["http://example.edu/"],
2450       "Default": true | false,
2451       "Locked": true | false
2452     }
2453   }
2454 }
2455 ```
2456
2457
2458
2459 ### Handlers
2460 Configure default application handlers. This policy is based on the internal format of `handlers.json`.
2461
2462 You can configure handlers based on a mime type (`mimeTypes`), a file's extension (`extensions`), or a protocol (`schemes`).
2463
2464 Within each handler type, you specify the given mimeType/extension/scheme as a key and use the following subkeys to describe how it is handled.
2465
2466 | Name | Description |
2467 | --- | --- |
2468 | `action`| Can be either `saveToDisk`, `useHelperApp`, `useSystemDefault`.
2469 | `ask` | If `true`, the user is asked if what they want to do with the file. If `false`, the action is taken without user intervention.
2470 | `handlers` | An array of handlers with the first one being the default. If you don't want to have a default handler, use an empty object for the first handler. Choose between path or uriTemplate.
2471 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`name` | The display name of the handler (might not be used).
2472 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`path`| The native path to the executable to be used.
2473 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`uriTemplate`| A url to a web based application handler. The URL must be https and contain a %s to be used for substitution.
2474
2475 **Compatibility:** Firefox 78, Firefox ESR 78\
2476 **CCK2 Equivalent:** N/A\
2477 **Preferences Affected:** N/A
2478
2479 #### Windows (GPO)
2480 ```
2481 Software\Policies\Mozilla\Firefox\Handlers (REG_MULTI_SZ) =
2482 {
2483   "mimeTypes": {
2484     "application/msword": {
2485       "action": "useSystemDefault",
2486       "ask": true | false
2487     }
2488   },
2489   "schemes": {
2490     "mailto": {
2491       "action": "useHelperApp",
2492       "ask": true | false,
2493       "handlers": [{
2494         "name": "Gmail",
2495         "uriTemplate": "https://mail.google.com/mail/?extsrc=mailto&url=%s"
2496       }]
2497     }
2498   },
2499   "extensions": {
2500     "pdf": {
2501       "action": "useHelperApp",
2502       "ask": true | false,
2503       "handlers": [{
2504         "name": "Adobe Acrobat",
2505         "path": "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32.exe"
2506       }]
2507     }
2508   }
2509 }
2510 ```
2511 #### Windows (Intune)
2512 OMA-URI:
2513 ```
2514 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Handlers
2515 ```
2516 Value (string):
2517 ```
2518 <enabled/>
2519 <data id="Handlers" value='
2520 {
2521   "mimeTypes": {
2522     "application/msword": {
2523       "action": "useSystemDefault",
2524       "ask": true | false
2525     }
2526   },
2527   "schemes": {
2528     "mailto": {
2529       "action": "useHelperApp",
2530       "ask": true | false,
2531       "handlers": [{
2532         "name": "Gmail",
2533         "uriTemplate": "https://mail.google.com/mail/?extsrc=mailto&amp;url=%s"
2534       }]
2535     }
2536   },
2537   "extensions": {
2538     "pdf": {
2539       "action": "useHelperApp",
2540       "ask": true | false,
2541       "handlers": [{
2542         "name": "Adobe Acrobat",
2543         "path": "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32.exe"
2544       }]
2545     }
2546   }
2547 }
2548 '/>
2549 ```
2550 #### macOS
2551 ```
2552 <dict>
2553   <key>Handlers</key>
2554   <dict>
2555     <key>mimeTypes</key>
2556     <dict>
2557       <key>application/msword</key>
2558       <dict>
2559         <key>action</key>
2560         <string>useSystemDefault</string>
2561         <key>ask</key>
2562         <true/> | <false/>
2563       </dict>
2564     </dict>
2565     <key>schemes</key>
2566     <dict>
2567       <key>mailto</key>
2568       <dict>
2569         <key>action</key>
2570         <string>useHelperApp</string>
2571         <key>ask</key>
2572         <true/> | <false/>
2573         <key>handlers</key>
2574         <array>
2575           <dict>
2576             <key>name</key>
2577             <string>Gmail</string>
2578             <key>uriTemplate</key>
2579             <string>https://mail.google.com/mail/?extsrc=mailto&url=%s</string>
2580           </dict>
2581         </array>
2582       </dict>
2583     </dict>
2584     <key>extensions</key>
2585     <dict>
2586       <key>pdf</key>
2587       <dict>
2588         <key>action</key>
2589         <string>useHelperApp</string>
2590         <key>ask</key>
2591         <true/> | <false/>
2592         <key>handlers</key>
2593         <array>
2594           <dict>
2595             <key>name</key>
2596             <string>Adobe Acrobat</string>
2597             <key>path</key>
2598             <string>/System/Applications/Preview.app</string>
2599           </dict>
2600         </array>
2601       </dict>
2602     </dict>
2603   </dict>
2604 </dict>
2605 ```
2606 #### policies.json
2607 ```
2608 {
2609   "policies": {
2610     "Handlers": {
2611       "mimeTypes": {
2612         "application/msword": {
2613           "action": "useSystemDefault",
2614           "ask": false
2615         }
2616       },
2617       "schemes": {
2618         "mailto": {
2619           "action": "useHelperApp",
2620           "ask": true | false,
2621           "handlers": [{
2622             "name": "Gmail",
2623             "uriTemplate": "https://mail.google.com/mail/?extsrc=mailto&url=%s"
2624           }]
2625         }
2626       },
2627       "extensions": {
2628         "pdf": {
2629           "action": "useHelperApp",
2630           "ask": true | false,
2631           "handlers": [{
2632             "name": "Adobe Acrobat",
2633             "path": "/usr/bin/acroread"
2634           }]
2635         }
2636       }
2637     }
2638   }
2639 }
2640 ```
2641 ### FirefoxHome
2642 Customize the Firefox Home page.
2643
2644 **Compatibility:** Firefox 68, Firefox ESR 68\
2645 **CCK2 Equivalent:** N/A\
2646 **Preferences Affected:** `browser.newtabpage.activity-stream.showSearch`,`browser.newtabpage.activity-stream.feeds.topsites`,`browser.newtabpage.activity-stream.feeds.section.highlights`,`browser.newtabpage.activity-stream.feeds.section.topstories`,`browser.newtabpage.activity-stream.feeds.snippets`
2647
2648 #### Windows (GPO)
2649 ```
2650 Software\Policies\Mozilla\Firefox\FirefoxHome\Search = 0x1 | 0x0
2651 Software\Policies\Mozilla\Firefox\FirefoxHome\TopSites = 0x1 | 0x0
2652 Software\Policies\Mozilla\Firefox\FirefoxHome\Highlights = 0x1 | 0x0
2653 Software\Policies\Mozilla\Firefox\FirefoxHome\Pocket = 0x1 | 0x0
2654 Software\Policies\Mozilla\Firefox\FirefoxHome\Snippets = 0x1 | 0x0
2655 Software\Policies\Mozilla\Firefox\FirefoxHome\Locked = 0x1 | 0x0
2656 ```
2657 #### Windows (Intune)
2658 OMA-URI:
2659 ```
2660 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/CustomizeFirefoxHome
2661 ```
2662 Value (string):
2663 ```
2664 <enabled/>
2665 <data id="FirefoxHome_Search"  value="true | false"/>
2666 <data id="FirefoxHome_TopSites"  value="true | false"/>
2667 <data id="FirefoxHome_Highlights"  value="true | false"/>
2668 <data id="FirefoxHome_Pocket"  value="true | false"/>
2669 <data id="FirefoxHome_Snippets"  value="true | false"/>
2670 <data id="FirefoxHome_Locked"  value="true | false"/>
2671 ```
2672 #### macOS
2673 ```
2674 <dict>
2675   <key>FirefoxHome</key>
2676   <dict>
2677     <key>Search</key>
2678     <true/> | <false/>
2679     <key>TopSites</key>
2680     <true/> | <false/>
2681     <key>Highlights</key>
2682     <true/> | <false/>
2683     <key>Pocket</key>
2684     <true/> | <false/>
2685     <key>Snippets</key>
2686     <true/> | <false/>
2687     <key>Locked</key>
2688     <true/> | <false/>
2689   </dict>
2690 </dict>
2691 ```
2692 #### policies.json
2693 ```
2694 {
2695   "policies": {
2696     "FirefoxHome": {
2697       "Search": true | false,
2698       "TopSites": true | false,
2699       "Highlights": true | false,
2700       "Pocket": true | false,
2701       "Snippets": true | false,
2702       "Locked": true | false
2703     }
2704   }
2705 }
2706 ```
2707 ### HardwareAcceleration
2708 Control hardware acceleration.
2709
2710 **Compatibility:** Firefox 60, Firefox ESR 60\
2711 **CCK2 Equivalent:** N/A\
2712 **Preferences Affected:** `layers.acceleration.disabled`
2713
2714 #### Windows (GPO)
2715 ```
2716 Software\Policies\Mozilla\Firefox\HardwareAcceleration = 0x1 | 0x0
2717 ```
2718 #### Windows (Intune)
2719 OMA-URI:
2720 ```
2721 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/HardwareAcceleration
2722 ```
2723 Value (string):
2724 ```
2725 <enabled/> or <disabled/>
2726 ```
2727 #### macOS
2728 ```
2729 <dict>
2730   <key>HardwareAcceleration</key>
2731   <true/> | <false/>
2732 </dict>
2733 ```
2734 #### policies.json
2735 ```
2736 {
2737   "policies": {
2738     "HardwareAcceleration": true | false
2739   }
2740 }
2741 ```
2742 ### Homepage
2743 Configure the default homepage and how Firefox starts.
2744
2745 `URL` is the default homepage.
2746
2747 `Locked` prevents the user from changing homepage preferences.
2748
2749 `Additional` allows for more than one homepage.
2750
2751 `StartPage` is how Firefox starts. The choices are no homepage, the default homepage or the previous session.
2752
2753 With Firefox 78, an additional option as added for `Startpage`, `homepage-locked`. This allows for locking the homepage, but still allowing the user to choose whether or not they want to restore their session.
2754
2755 **Compatibility:** Firefox 60, Firefox ESR 60 (StartPage was added in Firefox 60, Firefox ESR 60.4, homepage-locked added in Firefox 78)\
2756 **CCK2 Equivalent:** `homePage`,`lockHomePage`\
2757 **Preferences Affected:** `browser.startup.homepage`,`browser.startup.page`
2758
2759 #### Windows (GPO)
2760 ```
2761 Software\Policies\Mozilla\Firefox\Homepage\URL = "https://example.com"
2762 Software\Policies\Mozilla\Firefox\Homepage\Locked = 0x1 | 0x0
2763 Software\Policies\Mozilla\Firefox\Homepage\Additional\1 = "https://example.org"
2764 Software\Policies\Mozilla\Firefox\Homepage\Additional\2 = "https://example.edu"
2765 Software\Policies\Mozilla\Firefox\Homepage\StartPage = "none" | "homepage" | "previous-session" | "homepage-locked"
2766 ```
2767 #### Windows (Intune)
2768 OMA-URI:
2769 ```
2770 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageURL
2771 ```
2772 Value (string):
2773 ```
2774 <enabled/>
2775
2776 <data id="HomepageURL" value="https://example.com"/>
2777 <data id="HomepageLocked" value="true | false"/>
2778 ```
2779 OMA-URI:
2780 ```
2781 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageAdditional
2782 ```
2783 Value (string):
2784 ```
2785 <enabled/>
2786
2787 <data id="HomepageAdditional" value="1&#xF000;http://example.org&#xF000;2&#xF000;http://example.edu"/>
2788 ```
2789 OMA-URI:
2790 ```
2791 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageStartPage
2792 ```
2793 Value (string):
2794 ```
2795 <enabled/>
2796
2797 <data id="StartPage" value="none | homepage | previous-session"/>
2798 ```
2799 #### macOS
2800 ```
2801 <dict>
2802   <key>Homepage</key>
2803   <dict>
2804     <key>URL</key>
2805     <string>http://example.com</string>
2806     <key>Locked</key>
2807     <true/> | <false/>
2808     <key>Additional</key>
2809     <array>
2810       <string>http://example.org</string>
2811       <string>http://example.edu</string>
2812     </array>
2813     <key>StartPage</key>
2814     <string>none | homepage | previous-session | homepage-locked</string>
2815   </dict>
2816 </dict>
2817 ```
2818 #### policies.json
2819 ```
2820 {
2821   "policies": {
2822     "Homepage": {
2823       "URL": "http://example.com/",
2824       "Locked": true | false,
2825       "Additional": ["http://example.org/",
2826                      "http://example.edu/"],
2827       "StartPage": "none" | "homepage" | "previous-session" | "homepage-locked"
2828     }
2829   }
2830 }
2831 ```
2832 ### InstallAddonsPermission
2833 Configure the default extension install policy as well as origins for extension installs are allowed. This policy does not override turning off all extension installs.
2834
2835 `Allow` is a list of origins where extension installs are allowed.
2836
2837 `Default` determines whether or not extension installs are allowed by default.
2838
2839 **Compatibility:** Firefox 60, Firefox ESR 60\
2840 **CCK2 Equivalent:** `permissions.install`\
2841 **Preferences Affected:** `xpinstall.enabled`
2842
2843 #### Windows (GPO)
2844 ```
2845 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Allow\1 = "https://example.org"
2846 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Allow\2 = "https://example.edu"
2847 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Default = 0x1 | 0x0
2848 ```
2849 #### Windows (Intune)
2850 OMA-URI:
2851 ```
2852 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Addons/InstallAddonsPermission_Allow
2853 ```
2854 Value (string):
2855 ```
2856 <enabled/>
2857 <data id="Permissions" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
2858 ```
2859 OMA-URI:
2860 ```
2861 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Addons/InstallAddonsPermission_Default
2862 ```
2863 Value (string):
2864 ```
2865 <enabled/>
2866 ```
2867 #### macOS
2868 ```
2869 <dict>
2870   <key>InstallAddonsPermission</key>
2871   <dict>
2872     <key>Allow</key>
2873     <array>
2874       <string>http://example.org</string>
2875       <string>http://example.edu</string>
2876     </array>
2877     <key>Default</key>
2878     <true/> | <false/>
2879   </dict>
2880 </dict>
2881 ```
2882 #### policies.json
2883 ```
2884 {
2885   "policies": {
2886     "InstallAddonsPermission": {
2887       "Allow": ["http://example.org/",
2888                 "http://example.edu/"],
2889       "Default": true | false
2890     }
2891   }
2892 }
2893 ```
2894 ### LegacyProfiles
2895 Disable the feature enforcing a separate profile for each installation.
2896
2897 If this policy set to true, Firefox will not try to create different profiles for installations of Firefox in different directories. This is the equivalent of the MOZ_LEGACY_PROFILES environment variable.
2898
2899 If this policy set to false, Firefox will create a new profile for each unique installation of Firefox.
2900
2901 This policy only work on Windows via GPO (not policies.json).
2902
2903 **Compatibility:** Firefox 70, Firefox ESR 68.2 (Windows only, GPO only)\
2904 **CCK2 Equivalent:** N/A\
2905 **Preferences Affected:** N/A
2906
2907 #### Windows (GPO)
2908 ```
2909 Software\Policies\Mozilla\Firefox\LegacyProfiles = = 0x1 | 0x0
2910 ```
2911 #### Windows (Intune)
2912 OMA-URI:
2913 ```
2914 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/LegacyProfiles
2915 ```
2916 Value (string):
2917 ```
2918 <enabled/> or <disabled/>
2919 ```
2920 ### LocalFileLinks
2921 Enable linking to local files by origin.
2922
2923 **Compatibility:** Firefox 68, Firefox ESR 68\
2924 **CCK2 Equivalent:** N/A\
2925 **Preferences Affected:** `capability.policy.localfilelinks.*`
2926
2927 #### Windows (GPO)
2928 ```
2929 Software\Policies\Mozilla\Firefox\LocalFileLinks\1 = "https://example.org"
2930 Software\Policies\Mozilla\Firefox\LocalFileLinks\2 = "https://example.edu"
2931 ```
2932 #### Windows (Intune)
2933 OMA-URI:
2934 ```
2935 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/LocalFileLinks
2936 ```
2937 Value (string):
2938 ```
2939 <enabled/>
2940 <data id="LocalFileLinks" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
2941 ```
2942 #### macOS
2943 ```
2944 <dict>
2945   <key>LocalFileLinks</key>
2946   <array>
2947     <string>http://example.org</string>
2948     <string>http://example.edu</string>
2949   </array>
2950 </dict>
2951 ```
2952 #### policies.json
2953 ```
2954 {
2955   "policies": {
2956     "LocalFileLinks": ["http://example.org/",
2957                        "http://example.edu/"]
2958   }
2959 }
2960 ```
2961 ### PrimaryPassword
2962 Require or prevent using a primary (formerly master) password.
2963
2964 If this value is true, a primary password is required. If this value is false, it works the same as if [`DisableMasterPasswordCreation`](#disablemasterpasswordcreation) was true and removes the primary password functionality.
2965
2966 If both DisableMasterPasswordCreation and PrimaryPassword are used, DisableMasterPasswordCreation takes precedent.
2967
2968 **Compatibility:** Firefox 79, Firefox ESR 78.1\
2969 **CCK2 Equivalent:** `noMasterPassword`\
2970 **Preferences Affected:** N/A
2971
2972 #### Windows (GPO)
2973 ```
2974 Software\Policies\Mozilla\Firefox\PrimaryPassword = 0x1 | 0x0
2975 ```
2976 #### Windows (Intune)
2977 OMA-URI:
2978 ```
2979 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PrimaryPassword
2980 ```
2981 Value (string):
2982 ```
2983 <enabled/> or <disabled/>
2984 ```
2985 #### macOS
2986 ```
2987 <dict>
2988   <key>PrimaryPassword</key>
2989   <true/> | <false/>
2990 </dict>
2991 ```
2992 #### policies.json
2993 ```
2994 {
2995   "policies": {
2996     "PrimaryPassword": true | false
2997   }
2998 }
2999 ```
3000 ### NetworkPrediction
3001 Enable or disable network prediction (DNS prefetching).
3002
3003 **Compatibility:** Firefox 67, Firefox ESR 60.7\
3004 **CCK2 Equivalent:** N/A\
3005 **Preferences Affected:** `network.dns.disablePrefetch`,`network.dns.disablePrefetchFromHTTPS`
3006
3007 #### Windows (GPO)
3008 ```
3009 Software\Policies\Mozilla\Firefox\NetworkPrediction = 0x1 | 0x0
3010 ```
3011 #### Windows (Intune)
3012 OMA-URI:
3013 ```
3014 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NetworkPrediction
3015 ```
3016 Value (string):
3017 ```
3018 <enabled/> or <disabled/>
3019 ```
3020 #### macOS
3021 ```
3022 <dict>
3023   <key>NetworkPrediction</key>
3024   <true/> | <false/>
3025 </dict>
3026 ```
3027 #### policies.json
3028 ```
3029 {
3030   "policies": {
3031     "NetworkPrediction": true | false
3032 }
3033 ```
3034 ### NewTabPage
3035 Enable or disable the New Tab page.
3036
3037 **Compatibility:** Firefox 68, Firefox ESR 68\
3038 **CCK2 Equivalent:** N/A\
3039 **Preferences Affected:** `browser.newtabpage.enabled`
3040
3041 #### Windows (GPO)
3042 ```
3043 Software\Policies\Mozilla\Firefox\NewTabPage = 0x1 | 0x0
3044 ```
3045 #### Windows (Intune)
3046 OMA-URI:
3047 ```
3048 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NewTabPage
3049 ```
3050 Value (string):
3051 ```
3052 <enabled/> or <disabled/>
3053 ```
3054 #### macOS
3055 ```
3056 <dict>
3057   <key>NewTabPage</key>
3058   <true/> | <false/>
3059 </dict>
3060 ```
3061 #### policies.json
3062 ```
3063 {
3064   "policies": {
3065     "NewTabPage": true | false
3066 }
3067 ```
3068 ### NoDefaultBookmarks
3069 Disable the creation of default bookmarks.
3070
3071 This policy is only effective if the user profile has not been created yet.
3072
3073 **Compatibility:** Firefox 60, Firefox ESR 60\
3074 **CCK2 Equivalent:** `removeDefaultBookmarks`\
3075 **Preferences Affected:** N/A
3076
3077 #### Windows (GPO)
3078 ```
3079 Software\Policies\Mozilla\Firefox\NoDefaultBookmarks = 0x1 | 0x0
3080 ```
3081 #### Windows (Intune)
3082 OMA-URI:
3083 ```
3084 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NoDefaultBookmarks
3085 ```
3086 Value (string):
3087 ```
3088 <enabled/> or <disabled/>
3089 ```
3090 #### macOS
3091 ```
3092 <dict>
3093   <key>NoDefaultBookmarks</key>
3094   <true/> | <false/>
3095 </dict>
3096 ```
3097 #### policies.json
3098 ```
3099 {
3100   "policies": {
3101     "NoDefaultBookmarks": true | false
3102   }
3103 }
3104 ```
3105 ### OfferToSaveLogins
3106 Control whether or not Firefox offers to save passwords.
3107
3108 **Compatibility:** Firefox 60, Firefox ESR 60\
3109 **CCK2 Equivalent:** `dontRememberPasswords`\
3110 **Preferences Affected:** `signon.rememberSignons`
3111
3112 #### Windows (GPO)
3113 ```
3114 Software\Policies\Mozilla\Firefox\OfferToSaveLogins = 0x1 | 0x0
3115 ```
3116 #### Windows (Intune)
3117 OMA-URI:
3118 ```
3119 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OfferToSaveLogins
3120 ```
3121 Value (string):
3122 ```
3123 <enabled/> or <disabled/>
3124 ```
3125 #### macOS
3126 ```
3127 <dict>
3128   <key>OfferToSaveLogins</key>
3129   <true/> | <false/>
3130 </dict>
3131 ```
3132 #### policies.json
3133 ```
3134 {
3135   "policies": {
3136     "OfferToSaveLogins": true | false
3137   }
3138 }
3139 ```
3140 ### OfferToSaveLoginsDefault
3141 Sets the default value of signon.rememberSignons without locking it.
3142
3143 **Compatibility:** Firefox 70, Firefox ESR 60.2\
3144 **CCK2 Equivalent:** `dontRememberPasswords`\
3145 **Preferences Affected:** `signon.rememberSignons`
3146
3147 #### Windows (GPO)
3148 ```
3149 Software\Policies\Mozilla\Firefox\OfferToSaveLoginsDefault = 0x1 | 0x0
3150 ```
3151 #### Windows (Intune)
3152 OMA-URI:
3153 ```
3154 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OfferToSaveLoginsDefault
3155 ```
3156 Value (string):
3157 ```
3158 <enabled/> or <disabled/>
3159 ```
3160 #### macOS
3161 ```
3162 <dict>
3163   <key>OfferToSaveLoginsDefault</key>
3164   <true/> | <false/>
3165 </dict>
3166 ```
3167 #### policies.json
3168 ```
3169 {
3170   "policies": {
3171     "OfferToSaveLoginsDefault": true | false
3172   }
3173 }
3174 ```
3175 ### OverrideFirstRunPage
3176 Override the first run page. If the value is blank, no first run page is displayed.
3177
3178 **Compatibility:** Firefox 60, Firefox ESR 60\
3179 **CCK2 Equivalent:** `welcomePage`,`noWelcomePage`\
3180 **Preferences Affected:** `startup.homepage_welcome_url`
3181
3182 #### Windows (GPO)
3183 ```
3184 Software\Policies\Mozilla\Firefox\OverrideFirstRunPage = "http://example.org"
3185 ```
3186 #### Windows (Intune)
3187 OMA-URI:
3188 ```
3189 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OverrideFirstRunPage
3190 ```
3191 Value (string):
3192 ```
3193 <enabled/>
3194 <data id="OverridePage" value="https://example.com"/>
3195 ```
3196 #### macOS
3197 ```
3198 <dict>
3199   <key>OverrideFirstRunPage</key>
3200   <string>http://example.org</string>
3201 </dict>
3202 ```
3203 #### policies.json
3204 ```
3205 {
3206   "policies": {
3207     "OverrideFirstRunPage": "http://example.org"
3208 }
3209 ```
3210 ### OverridePostUpdatePage
3211 Override the upgrade page. If the value is blank, no upgrade page is displayed.
3212
3213 **Compatibility:** Firefox 60, Firefox ESR 60\
3214 **CCK2 Equivalent:** `upgradePage`,`noUpgradePage`\
3215 **Preferences Affected:** `startup.homepage_override_url`
3216
3217 #### Windows (GPO)
3218 ```
3219 Software\Policies\Mozilla\Firefox\OverridePostUpdatePage = "http://example.org"
3220 ```
3221 #### Windows (Intune)
3222 OMA-URI:
3223 ```
3224 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OverridePostUpdatePage
3225 ```
3226 Value (string):
3227 ```
3228 <enabled/>
3229 <data id="OverridePage" value="https://example.com"/>
3230 ```
3231 #### macOS
3232 ```
3233 <dict>
3234   <key>OverridePostUpdatePage</key>
3235   <string>http://example.org</string>
3236 </dict>
3237 ```
3238 #### policies.json
3239 ```
3240 {
3241   "policies": {
3242     "OverridePostUpdatePage": "http://example.org"
3243 }
3244 ```
3245 ### PasswordManagerEnabled
3246 Remove access to the password manager via preferences and blocks about:logins on Firefox 70.
3247
3248 **Compatibility:** Firefox 70, Firefox ESR 60.2\
3249 **CCK2 Equivalent:** N/A\
3250 **Preferences Affected:** `pref.privacy.disable_button.view_passwords`
3251
3252 #### Windows (GPO)
3253 ```
3254 Software\Policies\Mozilla\Firefox\PasswordManagerEnabled = 0x1 | 0x0
3255 ```
3256 #### Windows (Intune)
3257 OMA-URI:
3258 ```
3259 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PasswordManagerEnabled
3260 ```
3261 Value (string):
3262 ```
3263 <enabled/> or <disabled/>
3264 ```
3265 #### macOS
3266 ```
3267 <dict>
3268   <key>PasswordManagerEnabled</key>
3269   <true/> | <false/>
3270 </dict>
3271 ```
3272 #### policies.json
3273 ```
3274 {
3275   "policies": {
3276     "PasswordManagerEnabled": true | false
3277   }
3278 }
3279 ```
3280 ### PDFjs
3281 Disable or configure PDF.js, the built-in PDF viewer.
3282
3283 If `Enabled` is set to false, the built-in PDF viewer is disabled.
3284
3285 If `EnablePermissions` is set to true, the built-in PDF viewer will honor document permissions like preventing the copying of text.
3286
3287 Note: DisableBuiltinPDFViewer has not been deprecated. You can either continue to use it, or switch to using PDFjs->Enabled to disable the built-in PDF viewer. This new permission was added because we needed a place for PDFjs->EnabledPermissions.
3288
3289 **Compatibility:** Firefox 77, Firefox ESR 68.9\
3290 **CCK2 Equivalent:** N/A\
3291 **Preferences Affected:** `pdfjs.diabled`,`pdfjs.enablePermissions`
3292
3293 #### Windows (GPO)
3294 ```
3295 Software\Policies\Mozilla\Firefox\PDFjs\Enabled = 0x1 | 0x0
3296 Software\Policies\Mozilla\Firefox\PDFjs\EnablePermissions = 0x1 | 0x0
3297 ```
3298 #### Windows (Intune)
3299 OMA-URI:
3300 ```
3301 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PDFjs/PDFjs_Enabled
3302 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PDFjs/PDFjs_EnablePermissions
3303 ```
3304 Value (string):
3305 ```
3306 <enabled/>or <disabled/>
3307 ```
3308 #### macOS
3309 ```
3310 <dict>
3311   <key>PDFjs</key>
3312   <dict>
3313     <key>Enabled</key>
3314     <true/> | <false/>
3315     <key><EnablePermissions</key>
3316     <true/> | <false/>
3317   </dict>
3318 </dict>
3319 ```
3320 #### policies.json
3321 ```
3322 {
3323   "policies": {
3324     "PSFjs": {
3325       "Enabled": true | false,
3326       "EnablePermissions": true | false
3327     }
3328 }
3329 ```
3330 ### Permissions
3331 Set permissions associated with camera, microphone, location, notifications, autoplay, and virtual reality. Because these are origins, not domains, entries with unique ports must be specified separately. See examples below.
3332
3333 `Allow` is a list of origins where the feature is allowed.
3334
3335 `Block` is a list of origins where the feature is not allowed.
3336
3337 `BlockNewRequests` determines whether or not new requests can be made for the feature.
3338
3339 `Locked` prevents the user from changing preferences for the feature.
3340
3341 `Default` specifies the default value for Autoplay. block-audio-video is not supported on Firefox ESR 68.
3342
3343 **Compatibility:** Firefox 62, Firefox ESR 60.2 (Autoplay added in Firefox 74, Firefox ESR 68.6, Autoplay Default/Locked added in Firefox 76, Firefox ESR 68.8, VirtualReality added in Firefox 80, Firefox ESR 78.2)\
3344 **CCK2 Equivalent:** N/A\
3345 **Preferences Affected:** `permissions.default.camera`,`permissions.default.microphone`,`permissions.default.geo`,`permissions.default.desktop-notification`,`media.autoplay.default`.`permissions.default.xr`
3346
3347 #### Windows (GPO)
3348 ```
3349 Software\Policies\Mozilla\Firefox\Permissions\Camera\Allow\1 = "https://example.org"
3350 Software\Policies\Mozilla\Firefox\Permissions\Camera\Allow\2 = "https://example.org:1234"
3351 Software\Policies\Mozilla\Firefox\Permissions\Camera\Block\1 = "https://example.edu"
3352 Software\Policies\Mozilla\Firefox\Permissions\Camera\BlockNewRequests = 0x1 | 0x0
3353 Software\Policies\Mozilla\Firefox\Permissions\Camera\Locked = 0x1 | 0x0
3354 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Allow\1 = "https://example.org"
3355 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Block\1 = "https://example.edu"
3356 Software\Policies\Mozilla\Firefox\Permissions\Microphone\BlockNewRequests = 0x1 | 0x0
3357 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Locked = 0x1 | 0x0
3358 Software\Policies\Mozilla\Firefox\Permissions\Location\Allow\1 = "https://example.org"
3359 Software\Policies\Mozilla\Firefox\Permissions\Location\Block\1 = "https://example.edu"
3360 Software\Policies\Mozilla\Firefox\Permissions\Location\BlockNewRequests = 0x1 | 0x0
3361 Software\Policies\Mozilla\Firefox\Permissions\Location\Locked = 0x1 | 0x0
3362 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Allow\1 = "https://example.org"
3363 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Block\1 = "https://example.edu"
3364 Software\Policies\Mozilla\Firefox\Permissions\Notifications\BlockNewRequests = 0x1 | 0x0
3365 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Locked = 0x1 | 0x0
3366 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Allow\1 = "https://example.org"
3367 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Block\1 = "https://example.edu"
3368 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Default = "allow-audio-video" | "block-audio" | "block-audio-video"
3369 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Locked = 0x1 | 0x0
3370 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\Allow\1 = "https://example.org"
3371 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\Block\1 = "https://example.edu"
3372 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\BlockNewRequests = 0x1 | 0x0
3373 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\Locked = 0x1 | 0x0
3374 ```
3375 #### Windows (Intune)
3376 OMA-URI:
3377 ```
3378 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Location/Location_BlockNewRequests
3379 ```
3380 Value (string):
3381 ```
3382 <enabled/> or <disabled/>
3383 ```
3384 OMA-URI:
3385 ```
3386 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Location/Location_Locked
3387 ```
3388 Value (string):
3389 ```
3390 <enabled/> or <disabled/>
3391 ```
3392 OMA-URI:
3393 ```
3394 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_Allow
3395 ```
3396 Value (string):
3397 ```
3398 <enabled/>
3399 <data id="Permissions" value="1&#xF000;https://example.org"/>
3400 ```
3401 OMA-URI:
3402 ```
3403 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_BlockNewRequests
3404 ```
3405 Value (string):
3406 ```
3407 <enabled/> or <disabled/>
3408 ```
3409 OMA-URI:
3410 ```
3411 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_Locked
3412 ```
3413 Value (string):
3414 ```
3415 <enabled/> or <disabled/>
3416 ```
3417 OMA-URI:
3418 ```
3419 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Allow
3420 ```
3421 Value (string):
3422 ```
3423 <enabled/>
3424 <data id="Permissions" value="1&#xF000;https://example.org"/>
3425 ```
3426 OMA-URI:
3427 ```
3428 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Block
3429 ```
3430 Value (string):
3431 ```
3432 <enabled/>
3433 <data id="Permissions" value="1&#xF000;https://example.edu"/>
3434 ```
3435 OMA-URI:
3436 ```
3437 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Default
3438 ```
3439 Value (string):
3440 ```
3441 <enabled/>
3442 <data id="Autoplay_Default" value="allow-audio-video | block-audio | block-audio-video"/>
3443 ```
3444 OMA-URI:
3445 ```
3446 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Locked
3447 ```
3448 Value (string):
3449 ```
3450 <enabled/> or <disabled/>
3451 ```
3452 OMA-URI:
3453 ```
3454 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_Allow
3455 ```
3456 Value (string):
3457 ```
3458 <enabled/>
3459 <data id="Permissions" value="1&#xF000;https://example.org"/>
3460 ```
3461 OMA-URI:
3462 ```
3463 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_Block
3464 ```
3465 Value (string):
3466 ```
3467 <enabled/>
3468 <data id="Permissions" value="1&#xF000;https://example.edu"/>
3469 ```
3470 OMA-URI:
3471 ```
3472 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_BlockNewRequests
3473 ```
3474 Value (string):
3475 ```
3476 <enabled/> or <disabled/>
3477 ```
3478 OMA-URI:
3479 ```
3480 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_Locked
3481 ```
3482 Value (string):
3483 ```
3484 <enabled/> or <disabled/>
3485 ```
3486 #### macOS
3487 ```
3488 <dict>
3489   <key>Permissions</key>
3490   <dict>
3491     <key>Camera</key>
3492     <dict>
3493       <key>Allow</key>
3494       <array>
3495         <string>https://example.org</string>
3496         <string>https://example.org:1234</string>
3497       </array>
3498       <key>Block</key>
3499       <array>
3500         <string>https://example.edu</string>
3501       </array>
3502       <key>BlockNewRequests</key>
3503       <true/> | <false/>
3504       <key>Locked</key>
3505       <true/> | <false/>
3506     </dict>
3507     <key>Microphone</key>
3508     <dict>
3509       <key>Allow</key>
3510       <array>
3511         <string>https://example.org</string>
3512       </array>
3513       <key>Block</key>
3514       <array>
3515         <string>https://example.edu</string>
3516       </array>
3517       <key>BlockNewRequests</key>
3518       <true/> | <false/>
3519       <key>Locked</key>
3520       <true/> | <false/>
3521     </dict>
3522     <key>Location</key>
3523     <dict>
3524       <key>Allow</key>
3525       <array>
3526         <string>https://example.org</string>
3527       </array>
3528       <key>Block</key>
3529       <array>
3530         <string>https://example.edu</string>
3531       </array>
3532       <key>BlockNewRequests</key>
3533       <true/> | <false/>
3534       <key>Locked</key>
3535       <true/> | <false/>
3536     </dict>
3537     <key>Notifications</key>
3538     <dict>
3539       <key>Allow</key>
3540       <array>
3541         <string>https://example.org</string>
3542       </array>
3543       <key>Block</key>
3544       <array>
3545         <string>https://example.edu</string>
3546       </array>
3547       <key>BlockNewRequests</key>
3548       <true/>
3549       <key>Locked</key>
3550       <true/>
3551     </dict>
3552     <key>Autoplay</key>
3553     <dict>
3554       <key>Allow</key>
3555       <array>
3556         <string>https://example.org</string>
3557       </array>
3558       <key>Block</key>
3559       <array>
3560         <string>https://example.edu</string>
3561       </array>
3562       <key>Default</key>
3563       <string>allow-audio-video | block-audio | block-audio-video</string>
3564       <key>Locked</key>
3565       <true/> | <false/>
3566     </dict>
3567   </dict>
3568 </dict>
3569 ```
3570 #### policies.json
3571 ```
3572 {
3573   "policies": {
3574     "Permissions": {
3575       "Camera": {
3576         "Allow": ["https://example.org","https://example.org:1234"],
3577         "Block": ["https://example.edu"],
3578         "BlockNewRequests": true | false,
3579         "Locked": true | false
3580       },
3581       "Microphone": {
3582         "Allow": ["https://example.org"],
3583         "Block": ["https://example.edu"],
3584         "BlockNewRequests": true | false,
3585         "Locked": true | false
3586       },
3587       "Location": {
3588         "Allow": ["https://example.org"],
3589         "Block": ["https://example.edu"],
3590         "BlockNewRequests": true | false,
3591         "Locked": true | false
3592       },
3593       "Notifications": {
3594         "Allow": ["https://example.org"],
3595         "Block": ["https://example.edu"],
3596         "BlockNewRequests": true | false,
3597         "Locked": true | false
3598       },
3599       "Autoplay": {
3600         "Allow": ["https://example.org"],
3601         "Block": ["https://example.edu"],
3602         "Default": "allow-audio-video" | "block-audio" | "block-audio-video",
3603         "Locked": true | false
3604       }
3605     }
3606   }
3607 }
3608 ```
3609 ### PictureInPicture
3610
3611 Enable or disable Picture-in-Picture.
3612
3613 **Compatibility:** Firefox 78, Firefox ESR 78\
3614 **CCK2 Equivalent:** N/A\
3615 **Preferences Affected:** `media.videocontrols.picture-in-picture.video-toggle.enabled`
3616
3617 #### Windows (GPO)
3618 ```
3619 Software\Policies\Mozilla\Firefox\PictureInPicture = 0x1 | 0x0
3620 ```
3621 #### Windows (Intune)
3622 OMA-URI:
3623 ```
3624 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PictureInPicture
3625 ```
3626 Value (string):
3627 ```
3628 <enabled/> or <disabled/>
3629 ```
3630 #### macOS
3631 ```
3632 <dict>
3633   <key>PictureInPicture</key>
3634   <true/> | <false/>
3635 </dict>
3636 ```
3637 #### policies.json
3638 ```
3639 {
3640   "policies": {
3641     "PictureInPicture": true | false
3642   }
3643 }
3644 ```
3645 ### PopupBlocking
3646 Configure the default pop-up window policy as well as origins for which pop-up windows are allowed.
3647
3648 `Allow` is a list of origins where popup-windows are allowed.
3649
3650 `Default` determines whether or not pop-up windows are allowed by default.
3651
3652 `Locked` prevents the user from changing pop-up preferences.
3653
3654 **Compatibility:** Firefox 60, Firefox ESR 60\
3655 **CCK2 Equivalent:** `permissions.popup`\
3656 **Preferences Affected:** `dom.disable_open_during_load`
3657
3658 #### Windows (GPO)
3659 ```
3660 Software\Policies\Mozilla\Firefox\PopupBlocking\Allow\1 = "https://example.org"
3661 Software\Policies\Mozilla\Firefox\PopupBlocking\Allow\2 = "https://example.edu"
3662 Software\Policies\Mozilla\Firefox\PopupBlocking\Default = 0x1 | 0x0
3663 Software\Policies\Mozilla\Firefox\PopupBlocking\Locked = 0x1 | 0x0
3664 ```
3665 #### Windows (Intune)
3666 OMA-URI:
3667 ```
3668 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Allow
3669 ```
3670 Value (string):
3671 ```
3672 <enabled/>
3673 <data id="Permissions" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
3674 ```
3675 OMA-URI:
3676 ```
3677 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Default
3678 ```
3679 Value (string):
3680 ```
3681 <enabled/> or <disabled/>
3682 ```
3683 OMA-URI:
3684 ```
3685 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Locked
3686 ```
3687 Value (string):
3688 ```
3689 <enabled/> or <disabled/>
3690 ```
3691 #### macOS
3692 ```
3693 <dict>
3694   <key>PopupBlocking</key>
3695   <dict>
3696     <key>Allow</key>
3697     <array>
3698       <string>http://example.org</string>
3699       <string>http://example.edu</string>
3700     </array>
3701     <key>Default</key>
3702     <true/> | <false/>
3703     <key>Locked</key>
3704     <true/> | <false/>
3705   </dict>
3706 </dict>
3707 ```
3708 #### policies.json
3709 ```
3710 {
3711   "policies": {
3712     "PopupBlocking": {
3713       "Allow": ["http://example.org/",
3714                 "http://example.edu/"],
3715       "Default": true | false,
3716       "Locked": true | false
3717     }
3718   }
3719 }
3720 ```
3721 ### Preferences
3722 Set and lock certain preferences.
3723
3724 **Compatibility:** See below\
3725 **CCK2 Equivalent:** `preferences`\
3726 **Preferences Affected:** See below
3727
3728 | Preference | Type | Compatibility | Default
3729 | --- | --- | --- | ---
3730 | accessibility.force_disabled | integer | Firefox 70, Firefox ESR 68.2 | 0
3731 | &nbsp;&nbsp;&nbsp;&nbsp;If set to 1, platform accessibility is disabled.
3732 | app.update.auto (Deprecated - Switch to AppAutoUpdate policy) | boolean | Firefox 68, Firefox ESR 68 | true
3733 | &nbsp;&nbsp;&nbsp;&nbsp;If false, Firefox doesn't automatically install update.
3734 | browser.bookmarks.autoExportHTML | boolean | Firefox 70, Firefox ESR 68.2 | false
3735 | &nbsp;&nbsp;&nbsp;&nbsp;If true, bookmarks are exported on shutdown.
3736 | browser.bookmarks.file | string | Firefox 70, Firefox ESR 68.2 | N/A
3737 | &nbsp;&nbsp;&nbsp;&nbsp;If set, the name of the file where bookmarks are exported and imported.
3738 | browser.bookmarks.restore_default_bookmarks | boolean | Firefox 70, Firefox ESR 68.2 | N/A
3739 | &nbsp;&nbsp;&nbsp;&nbsp;If true, bookmarks are restored to their defaults.
3740 | browser.cache.disk.enable | boolean | Firefox 68, Firefox ESR 68 | true
3741 | &nbsp;&nbsp;&nbsp;&nbsp;If false, don't store cache on the hard drive.
3742 | ~browser.cache.disk.parent_directory~ | string | Firefox 68, Firefox ESR 68 | Profile temporary directory
3743 | &nbsp;&nbsp;&nbsp;&nbsp;~If set, changes the location of the disk cache.~ This policy doesn't work. It's being worked on.
3744 | browser.fixup.dns_first_for_single_words | boolean | Firefox 68, Firefox ESR 68 | false
3745 | &nbsp;&nbsp;&nbsp;&nbsp;If true, single words are sent to DNS, not directly to search.
3746 | browser.newtabpage.activity-stream.default.sites | string | Firefox 72, ESR 68.4 | Locale dependent
3747 | &nbsp;&nbsp;&nbsp;&nbsp;If set, a list of URLs to use as the default top sites on the new tab page.
3748 | browser.places.importBookmarksHTML | boolean | Firefox 70, Firefox ESR 68.2
3749 | &nbsp;&nbsp;&nbsp;&nbsp;If true, bookmarks are always imported on startup.
3750 | browser.safebrowsing.phishing.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
3751 | &nbsp;&nbsp;&nbsp;&nbsp;If false, phishing protection is not enabled (Not recommended)
3752 | browser.safebrowsing.malware.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
3753 | &nbsp;&nbsp;&nbsp;&nbsp;If false, malware protection is not enabled (Not recommended)
3754 | browser.search.update | boolean | Firefox 68, Firefox ESR 68 | true
3755 | &nbsp;&nbsp;&nbsp;&nbsp;If false, updates for search engines are not checked.
3756 | browser.slowStartup.notificationDisabled | boolean | Firefox 70, Firefox ESR 68.2 | false
3757 | &nbsp;&nbsp;&nbsp;&nbsp;If true, a notification isn't shown if startup is slow.
3758 | browser.tabs.warnOnClose | boolean | Firefox 68, Firefox ESR 68 | true
3759 | &nbsp;&nbsp;&nbsp;&nbsp;If false, there is no warning when the browser is closed.
3760 | browser.taskbar.previews.enable | boolean | Firefox 70, Firefox ESR 68.2 (Windows only) | false
3761 | &nbsp;&nbsp;&nbsp;&nbsp;If true, tab previews are shown in the Windows taskbar.
3762 | browser.urlbar.suggest.bookmark | boolean | Firefox 68, Firefox ESR 68 | true
3763 | &nbsp;&nbsp;&nbsp;&nbsp;If false, bookmarks aren't suggested when typing in the URL bar.
3764 | browser.urlbar.suggest.history | boolean | Firefox 68, Firefox ESR 68 | true
3765 | &nbsp;&nbsp;&nbsp;&nbsp;If false, history isn't suggested when typing in the URL bar.
3766 | browser.urlbar.suggest.openpage | boolean | Firefox 68, Firefox ESR 68 | true
3767 | &nbsp;&nbsp;&nbsp;&nbsp;If false, open tabs aren't suggested when typing in the URL bar.
3768 | datareporting.policy.dataSubmissionPolicyBypassNotification | boolean | Firefox 68, Firefox ESR 68 | false
3769 | &nbsp;&nbsp;&nbsp;&nbsp;If true, don't show the privacy policy tab on first run.
3770 | dom.allow_scripts_to_close_windows | boolean | Firefox 70, Firefox ESR 68.2 | false
3771 | &nbsp;&nbsp;&nbsp;&nbsp;If false, web page can close windows.
3772 | dom.disable_window_flip | boolean | Firefox 68, Firefox ESR 68 | true
3773 | &nbsp;&nbsp;&nbsp;&nbsp;If false, web pages can focus and activate windows.
3774 | dom.disable_window_move_resize | boolean | Firefox 68, Firefox ESR 68 | false
3775 | &nbsp;&nbsp;&nbsp;&nbsp;If true, web pages can't move or resize windows.
3776 | dom.event.contextmenu.enabled | boolean | Firefox 68, Firefox ESR 68 | true
3777 | &nbsp;&nbsp;&nbsp;&nbsp;If false, web pages can't override context menus.
3778 | dom.keyboardevent.keypress.hack.dispatch_non_printable_keys.addl | string | Firefox 68, Firefox ESR 68 | N/A
3779 | &nbsp;&nbsp;&nbsp;&nbsp;See https://support.mozilla.org/en-US/kb/dom-events-changes-introduced-firefox-66
3780 | dom.keyboardevent.keypress.hack.use_legacy_keycode_and_charcode.addl | string | Firefox 68, Firefox ESR 68 | N/A
3781 | &nbsp;&nbsp;&nbsp;&nbsp;See https://support.mozilla.org/en-US/kb/dom-events-changes-introduced-firefox-66
3782 | dom.xmldocument.load.enabled | boolean | Firefox ESR 68.5 | true.
3783 | &nbsp;&nbsp;&nbsp;&nbsp;If false, XMLDocument.load is not available.
3784 | dom.xmldocument.async.enabled | boolean | Firefox ESR 68.5 | true
3785 | &nbsp;&nbsp;&nbsp;&nbsp;If false, XMLDocument.async is not available.
3786 | extensions.blocklist.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
3787 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the extensions blocklist is not used (Not recommended)
3788 | extensions.getAddons.showPane | boolean | Firefox 68, Firefox ESR 68 | N/A
3789 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the Recommendations tab is not displayed in the Add-ons Manager.
3790 | extensions.htmlaboutaddons.recommendations.enabled | boolean | Firefox 72, Firefox ESR 68.4 | true
3791 | &nbsp;&nbsp;&nbsp;&nbsp;If false, recommendations are not shown on the Extensions tab in the Add-ons Manager.
3792 | geo.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
3793 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the geolocation API is disabled. | Language dependent
3794 | intl.accept_languages | string | Firefox 70, Firefox ESR 68.2
3795 | &nbsp;&nbsp;&nbsp;&nbsp;If set, preferred language for web pages.
3796 | media.eme.enabled (Deprecated - Switch to EncryptedMediaExtensions policy) | boolean | Firefox 70, Firefox ESR 68.2 | true
3797 | &nbsp;&nbsp;&nbsp;&nbsp;If false, Encrypted Media Extensions are not enabled.
3798 | media.gmp-gmpopenh264.enabled | boolean | Firefox 68, Firefox ESR 68 | true
3799 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the OpenH264  plugin is not downloaded.
3800 | media.gmp-widevinecdm.enabled | boolean | Firefox 68, Firefox ESR 68 | true
3801 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the Widevine plugin is not downloaded.
3802 | media.peerconnection.enabled | boolean | Firefox 72, Firefox ESR 68.4 | true
3803 | &nbsp;&nbsp;&nbsp;&nbsp;If false, WebRTC is disabled
3804 | media.peerconnection.ice.obfuscate_host_addresses.whitelist (Deprecated) | string | Firefox 72, Firefox ESR 68.4 | N/A
3805 | &nbsp;&nbsp;&nbsp;&nbsp;If set, a list of domains for which mDNS hostname obfuscation is
3806 disabled
3807 | media.peerconnection.ice.obfuscate_host_addresses.blocklist | string | Firefox 79, Firefox ESR 78.1 | N/A
3808 | &nbsp;&nbsp;&nbsp;&nbsp;If set, a list of domains for which mDNS hostname obfuscation is
3809 disabled
3810 | network.dns.disableIPv6 | boolean | Firefox 68, Firefox ESR 68 | false
3811 | &nbsp;&nbsp;&nbsp;&nbsp;If true, IPv6 DNS lokoups are disabled.
3812 | network.IDN_show_punycode | boolean | Firefox 68, Firefox ESR 68 | false
3813 | &nbsp;&nbsp;&nbsp;&nbsp;If true, display the punycode version of internationalized domain names.
3814 | places.history.enabled | boolean | Firefox 68, Firefox ESR 68 | true
3815 | &nbsp;&nbsp;&nbsp;&nbsp;If false, history is not enabled.
3816 | print.save_print_settings | boolean | Firefox 70, Firefox ESR 68.2 | true
3817 | &nbsp;&nbsp;&nbsp;&nbsp;If false, print settings are not saved between jobs.
3818 | security.default_personal_cert | string | Firefox 68, Firefox ESR 68 | Ask Every Time
3819 | &nbsp;&nbsp;&nbsp;&nbsp;If set to Select Automatically, Firefox automatically chooses the default personal certificate.
3820 | security.mixed_content.block_active_content | boolean | Firefox 70, Firefox ESR 68.2 | true
3821 | &nbsp;&nbsp;&nbsp;&nbsp;If false, mixed active content (HTTP and HTTPS) is not blocked.
3822 | security.osclientcerts.autoload | boolean | Firefox 72 (Windows), Firefox 75 (macOS)  | false
3823 | &nbsp;&nbsp;&nbsp;&nbsp;If true, client certificates are loaded from the operating system certificate store.
3824 | security.ssl.errorReporting.enabled | boolean | Firefox 68, Firefox ESR 68 | true
3825 | &nbsp;&nbsp;&nbsp;&nbsp;If false, SSL errors cannot be sent to Mozilla.
3826 | security.tls.hello_downgrade_check | boolean | Firefox 72, Firefox ESR 68.4 | true
3827 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the TLS 1.3 downgrade check is disabled.
3828 | ui.key.menuAccessKeyFocuses | boolean | Firefox 68, Firefox ESR 68 | true
3829 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the Alt key doesn't show the menubar on Windows.
3830 | widget.content.gtk-theme-override | string | Firefox 72, Firefox ESR 68.4 (Linux only) | N/A
3831 | &nbsp;&nbsp;&nbsp;&nbsp;If set, overrides the GTK theme for widgets.
3832 #### Windows (GPO)
3833 ```
3834 Software\Policies\Mozilla\Firefox\Preferences\boolean_preference_name = 0x1 | 0x0
3835 Software\Policies\Mozilla\Firefox\Preferences\string_preference_name = "string_value"
3836 ```
3837 #### Windows (Intune)
3838 OMA-URI: (periods are replaced by underscores)
3839 ```
3840 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Preferences/boolean_preference_name
3841 ```
3842 Value (string):
3843 ```
3844 <enabled/> or <disabled/>
3845 ```
3846 OMA-URI: (periods are replaced by underscores)
3847 ```
3848 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Preferences/string_preference_name
3849 ```
3850 Value (string):
3851 ```
3852 <enabled/>
3853 <data id="Preferences_String" value="string_value"/>
3854 ```
3855 #### macOS
3856 ```
3857 <dict>
3858   <key>Preferences</key>
3859   <dict>
3860     <key>boolean_preference_name</key>
3861     <true/> | <false/>
3862     <key>string_preference_name</key>
3863     <string>string_value</string>
3864   </dict>
3865 </dict>
3866 ```
3867 #### policies.json
3868 ```
3869 {
3870   "policies": {
3871     "Preferences": {
3872       "boolean_preference_name": true | false,
3873       "string_preference_name": "string_value"
3874     }
3875   }
3876 }
3877 ```
3878 ### PromptForDownloadLocation
3879 Ask where to save each file before downloading.
3880
3881 **Compatibility:** Firefox 68, Firefox ESR 68\
3882 **CCK2 Equivalent:** N/A\
3883 **Preferences Affected:** `browser.download.useDownloadDir`
3884
3885 #### Windows (GPO)
3886 ```
3887 Software\Policies\Mozilla\Firefox\PromptForDownloadLocation = 0x1 | 0x0
3888 ```
3889 #### Windows (Intune)
3890 OMA-URI:
3891 ```
3892 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PromptForDownloadLocation
3893 ```
3894 Value (string):
3895 ```
3896 <enabled/> or <disabled/>
3897 ```
3898 #### macOS
3899 ```
3900 <dict>
3901   <key>PromptForDownloadLocation</key>
3902   <true/> | <false/>
3903 </dict>
3904 ```
3905 #### policies.json
3906 ```
3907 {
3908   "policies": {
3909     "PromptForDownloadLocation": true | false
3910   }
3911 }
3912 ```
3913 ### Proxy
3914 Configure proxy settings. These settings correspond to the connection settings in Firefox preferences.
3915 To specify ports, append them to the hostnames with a colon (:).
3916
3917 `Mode` is the proxy method being used.
3918
3919 `Locked` is whether or not proxy settings can be changed.
3920
3921 `HTTPProxy` is the HTTP proxy server.
3922
3923 `UseHTTPProxyForAllProtocols` is whether or not the HTTP proxy should be used for all other proxies.
3924
3925 `SSLProxy` is the SSL proxy server.
3926
3927 `FTPProxy` is the FTP proxy server.
3928
3929 `SOCKSProxy` is the SOCKS proxy server
3930
3931 `SOCKSVersion` is the SOCKS version (4 or 5)
3932
3933 `Passthrough` is list of hostnames or IP addresses that will not be proxied. Use `<local>` to bypass proxying for all hostnames which do not contain periods.
3934
3935 `AutoConfigURL` is a  URL for proxy configuration (only used if Mode is autoConfig).
3936
3937 `AutoLogin` means do not prompt for authentication if password is saved.
3938
3939 `UseProxyForDNS` to use proxy DNS when using SOCKS v5.
3940
3941 **Compatibility:** Firefox 60, Firefox ESR 60\
3942 **CCK2 Equivalent:** `networkProxy*`\
3943 **Preferences Affected:** `network.proxy.type`,`network.proxy.autoconfig_url`,`network.proxy.socks_remote_dns`,`signon.autologin.proxy`,`network.proxy.socks_version`,`network.proxy.no_proxies_on`,`network.proxy.share_proxy_settings`,`network.proxy.http`,`network.proxy.http_port`,`network.proxy.ftp`,`network.proxy.ftp_port`,`network.proxy.ssl`,`network.proxy.ssl_port`,`network.proxy.socks`,`network.proxy.socks_port`
3944
3945 #### Windows (GPO)
3946 ```
3947 Software\Policies\Mozilla\Firefox\Proxy\Mode = "none" | "system" | "manual" | "autoDetect" | "autoConfig"
3948 Software\Policies\Mozilla\Firefox\Proxy\Locked = 0x1 | 0x0
3949 Software\Policies\Mozilla\Firefox\=Proxy\HTTPProxy = https://httpproxy.example.com
3950 Software\Policies\Mozilla\Firefox\Proxy\UseHTTPProxyForAllProtocols = 0x1 | 0x0
3951 Software\Policies\Mozilla\Firefox\Proxy\SSLProxy = https://sslproxy.example.com
3952 Software\Policies\Mozilla\Firefox\Proxy\FTPProxy = https://ftpproxy.example.com
3953 Software\Policies\Mozilla\Firefox\Proxy\SOCKSProxy = https://socksproxy.example.com
3954 Software\Policies\Mozilla\Firefox\Proxy\SOCKSVersion = 0x4 | 0x5
3955 Software\Policies\Mozilla\Firefox\Proxy\Passthrough = <local>
3956 Software\Policies\Mozilla\Firefox\Proxy\AutoConfigURL = URL_TO_AUTOCONFIG
3957 Software\Policies\Mozilla\Firefox\Proxy\AutoLogin = 0x1 | 0x0
3958 Software\Policies\Mozilla\Firefox\Proxy\UseProxyForDNS = 0x1 | 0x0
3959 ```
3960 #### Windows (Intune)
3961 OMA-URI:
3962 ```
3963 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Proxy
3964 ```
3965 Value (string):
3966 ```
3967 <enabled/>
3968 <data id="ProxyLocked" value="true | false"/>
3969 <data id="ConnectionType" value="none | system | manual | autoDetect | autoConfig"/>
3970 <data id="HTTPProxy" value="https://httpproxy.example.com"/>
3971 <data id="UseHTTPProxyForAllProtocols" value="true | false"/>
3972 <data id="SSLProxy" value="https://sslproxy.example.com"/>
3973 <data id="FTPProxy" value="https://ftpproxy.example.com"/>
3974 <data id="SOCKSProxy" value="https://socksproxy.example.com"/>
3975 <data id="SOCKSVersion" value="4 | 5"/>
3976 <data id="AutoConfigURL" value="URL_TO_AUTOCONFIG"/>
3977 <data id="Passthrough" value="<local>"/>
3978 <data id="AutoLogin" value="true | false"/>
3979 <data id="UseProxyForDNS" value="true | false"/>
3980 ```
3981 #### macOS
3982 ```
3983 <dict>
3984   <key>Proxy</key>
3985   <dict>
3986     <key>Mode</key>
3987     <string>none | system | manual | autoDetect | autoConfig</string>
3988     <key>Locked</key>
3989     <true> | </false>
3990     <key>HTTPProxy</key>
3991     <string>https://httpproxy.example.com</string>
3992     <key>UseHTTPProxyForAllProtocols</key>
3993     <true> | </false>
3994     <key>SSLProxy</key>
3995     <string>https://sslproxy.example.com</string>
3996     <key>FTPProxy</key>
3997     <string>https://ftpproxy.example.com</string>
3998     <key>SOCKSProxy</key>
3999     <string>https://socksproxy.example.com</string>
4000     <key>SOCKSVersion</key>
4001     <string>4 | 5</string>
4002     <key>Passthrough</key>
4003     <string>&lt;local>&gt;</string>
4004     <key>AutoConfigURL</key>
4005     <string>URL_TO_AUTOCONFIG</string>
4006     <key>AutoLogin</key>
4007     <true> | </false>
4008     <key>UseProxyForDNS</key>
4009     <true> | </false>
4010   </dict>
4011 </dict>
4012 ```
4013 #### policies.json
4014 ```
4015 {
4016   "policies": {
4017     "Proxy": {
4018       "Mode": "none" | "system" | "manual" | "autoDetect" | "autoConfig",
4019       "Locked": true | false,
4020       "HTTPProxy": "hostname",
4021       "UseHTTPProxyForAllProtocols": true | false,
4022       "SSLProxy": "hostname",
4023       "FTPProxy": "hostname",
4024       "SOCKSProxy": "hostname",
4025       "SOCKSVersion": 4 | 5
4026       "Passthrough": "<local>",
4027       "AutoConfigURL": "URL_TO_AUTOCONFIG",
4028       "AutoLogin": true | false,
4029       "UseProxyForDNS": true | false
4030     }
4031   }
4032 }
4033 ```
4034 ### RequestedLocales
4035 Set the the list of requested locales for the application in order of preference. It will cause the corresponding language pack to become active.
4036
4037 Note: For Firefox 68, this can now be a string so that you can specify an empty value.
4038
4039 **Compatibility:** Firefox 64, Firefox ESR 60.4, Updated in Firefox 68, Firefox ESR 68\
4040 **CCK2 Equivalent:** N/A\
4041 **Preferences Affected:** N/A
4042 #### Windows (GPO)
4043 ```
4044 Software\Policies\Mozilla\Firefox\RequestedLocales\1 = "de"
4045 Software\Policies\Mozilla\Firefox\RequestedLocales\2 = "en-US"
4046
4047 or
4048
4049 Software\Policies\Mozilla\Firefox\RequestedLocales = "de,en-US"
4050 ```
4051 #### Windows (Intune)
4052 OMA-URI:
4053 ```
4054 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/RequestedLocalesString
4055 ```
4056 Value (string):
4057 ```
4058 <enabled/>
4059 <data id="Preferences_String" value="de,en-US"/>
4060 ```
4061 #### macOS
4062 ```
4063 <dict>
4064   <key>RequestedLocales</key>
4065   <array>
4066     <string>de</string>
4067     <string>en-US</string>
4068   </array>
4069 </dict>
4070
4071 or
4072
4073 <dict>
4074   <key>RequestedLocales</key>
4075   <string>de,en-US</string>
4076 </dict>
4077
4078 ```
4079 #### policies.json
4080 ```
4081 {
4082   "policies": {
4083     "RequestedLocales": ["de", "en-US"]
4084   }
4085 }
4086
4087 or
4088
4089 {
4090   "policies": {
4091     "RequestedLocales": "de,en-US"
4092   }
4093 }
4094 ```
4095 <a name="SanitizeOnShutdown"></a>
4096
4097 ### SanitizeOnShutdown (Selective)
4098 Clear data on shutdown. Choose from Cache, Cookies, Download History, Form & Search History, Browsing History, Active Logins, Site Preferences and Offline Website Data.
4099
4100 Previously, these values were always locked. Starting with Firefox 74 and Firefox ESR 68.6, you can use the `Locked` option to either keep the values unlocked (set it to false), or lock only the values you set (set it to true). If you want the old behavior of locking everything, do not set `Locked` at all.
4101
4102 **Compatibility:** Firefox 68, Firefox ESR 68 (Locked added in 74/68.6)\
4103 **CCK2 Equivalent:** N/A\
4104 **Preferences Affected:** `privacy.sanitize.sanitizeOnShutdown`,`privacy.clearOnShutdown.cache`,`privacy.clearOnShutdown.cookies`,`privacy.clearOnShutdown.downloads`,`privacy.clearOnShutdown.formdata`,`privacy.clearOnShutdown.history`,`privacy.clearOnShutdown.sessions`,`privacy.clearOnShutdown.siteSettings`,`privacy.clearOnShutdown.offlineApps`
4105 #### Windows (GPO)
4106 ```
4107 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Cache = 0x1 | 0x0
4108 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Cookies = 0x1 | 0x0
4109 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Downloads = 0x1 | 0x0
4110 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\FormData = 0x1 | 0x0
4111 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\History = 0x1 | 0x0
4112 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Sessions = 0x1 | 0x0
4113 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\SiteSettings = 0x1 | 0x0
4114 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\OfflineApps = 0x1 | 0x0
4115 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Locked = 0x1 | 0x0
4116 ```
4117 #### Windows (Intune)
4118 OMA-URI:
4119 ```
4120 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/I_SanitizeOnShutdown_Locked
4121 ```
4122 Value (string):
4123 ```
4124 <enabled/> or <disabled/>
4125 ```
4126 #### macOS
4127 ```
4128 <dict>
4129   <key>SanitizeOnShutdown</key>
4130   <dict>
4131     <key>Cache</key>
4132     <true/> | <false/>
4133     <key>Cookies</key>
4134     <true/> | <false/>
4135     <key>Downloads</key>
4136     <true/> | <false/>
4137     <key>FormData</key>
4138     <true/> | <false/>
4139     <key>History</key>
4140     <true/> | <false/>
4141     <key>Sessions</key>
4142     <true/> | <false/>
4143     <key>SiteSettings</key>
4144     <true/> | <false/>
4145     <key>OfflineApps</key>
4146     <true/> | <false/>
4147     <key>Locked</key>
4148     <true/> | <false/>
4149   </dict>
4150 </dict>
4151 ```
4152 #### policies.json
4153 ```
4154 {
4155   "policies": {
4156     "SanitizeOnShutdown": {
4157       "Cache": true | false,
4158       "Cookies": true | false,
4159       "Downloads": true | false,
4160       "FormData": true | false,
4161       "History": true | false,
4162       "Sessions": true | false,
4163       "SiteSettings": true | false,
4164       "OfflineApps": true | false,
4165       "Locked": true | false
4166     }
4167   }
4168 }
4169 ```
4170 ### SanitizeOnShutdown (All)
4171 Clear all data on shutdown, including Browsing & Download History, Cookies, Active Logins, Cache, Form & Search History, Site Preferences and Offline Website Data.
4172
4173 **Compatibility:** Firefox 60, Firefox ESR 60\
4174 **CCK2 Equivalent:** N/A\
4175 **Preferences Affected:** `privacy.sanitize.sanitizeOnShutdown`,`privacy.clearOnShutdown.cache`,`privacy.clearOnShutdown.cookies`,`privacy.clearOnShutdown.downloads`,`privacy.clearOnShutdown.formdata`,`privacy.clearOnShutdown.history`,`privacy.clearOnShutdown.sessions`,`privacy.clearOnShutdown.siteSettings`,`privacy.clearOnShutdown.offlineApps`
4176 #### Windows (GPO)
4177 ```
4178 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown = 0x1 | 0x0
4179 ```
4180 #### Windows (Intune)
4181 OMA-URI:
4182 ```
4183 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/C_SanitizeOnShutdown
4184 ```
4185 Value (string):
4186 ```
4187 <enabled/> or <disabled/>
4188 ```
4189 #### macOS
4190 ```
4191 <dict>
4192   <key>SanitizeOnShutdown</key>
4193   <true/> | <false/>
4194 </dict>
4195 ```
4196 #### policies.json
4197 ```
4198 {
4199   "policies": {
4200     "SanitizeOnShutdown": true | false
4201   }
4202 }
4203 ```
4204 ### SearchBar
4205 Set whether or not search bar is displayed.
4206
4207 **Compatibility:** Firefox 60, Firefox ESR 60\
4208 **CCK2 Equivalent:** `showSearchBar`\
4209 **Preferences Affected:** N/A
4210
4211 #### Windows (GPO)
4212 ```
4213 Software\Policies\Mozilla\Firefox\SearchBar = "unified" | "separate"
4214 ```
4215
4216 #### Windows (Intune)
4217 OMA-URI:
4218 ```
4219 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SearchBar
4220 ```
4221 Value (string):
4222 ```
4223 <enabled/>
4224 <data id="Permissions" value="unified | separate"/>
4225 ```
4226 #### macOS
4227 ```
4228 <dict>
4229   <key>SearchBar</key>
4230   <string>unified | separate</string>
4231 </dict>
4232 ```
4233 #### policies.json
4234 ```
4235 {
4236   "policies": {
4237     "SearchBar": "unified" | "separate"
4238   }
4239 }
4240 ```
4241 <a name="SearchEngines"></a>
4242
4243 ### SearchEngines (This policy is only available on the ESR.)
4244
4245 ### SearchEngines | Default
4246
4247 Set the default search engine. This policy is only available on the ESR.
4248
4249 **Compatibility:** Firefox ESR 60\
4250 **CCK2 Equivalent:** `defaultSearchEngine`\
4251 **Preferences Affected:** N/A
4252
4253 #### Windows (GPO)
4254 ```
4255 Software\Policies\Mozilla\Firefox\SearchEngines\Default = NAME_OF_SEARCH_ENGINE
4256 ```
4257 #### Windows (Intune)
4258 OMA-URI:
4259 ```
4260 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_Default
4261 ```
4262 Value (string):
4263 ```
4264 <enabled/>
4265 <data id="SearchEngines_Default" value="NAME_OF_SEARCH_ENGINE"/>
4266 ```
4267 #### macOS
4268 ```
4269 <dict>
4270   <key>SearchEngines</key>
4271   <dict>
4272     <key>Default</key>
4273     <string>NAME_OF_SEARCH_ENGINE</string>
4274   </dict>
4275 </dict>
4276 ```
4277 #### policies.json
4278 ```
4279 {
4280   "policies": {
4281     "SearchEngines": {
4282       "Default": "NAME_OF_SEARCH_ENGINE"
4283     }
4284   }
4285 }
4286 ```
4287 ### SearchEngines | PreventInstalls
4288
4289 Prevent installing search engines from webpages.
4290
4291 **Compatibility:** Firefox ESR 60\
4292 **CCK2 Equivalent:** `disableSearchEngineInstall`\
4293 **Preferences Affected:** N/A
4294
4295 #### Windows (GPO)
4296 ```
4297 Software\Policies\Mozilla\Firefox\SearchEngines\PreventInstalls = 0x1 | 0x0
4298 ```
4299 #### Windows (Intune)
4300 OMA-URI:
4301 ```
4302 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_PreventInstalls
4303 ```
4304 Value (string):
4305 ```
4306 <enabled/> or <disabled/>
4307 ```
4308 #### macOS
4309 ```
4310 <dict>
4311   <key>SearchEngines</key>
4312   <dict>
4313     <key>PreventInstalls</key>
4314     <true/> | <false/>
4315   </dict>
4316 </dict>
4317 ```
4318 #### policies.json
4319 ```
4320 {
4321   "policies": {
4322     "SearchEngines": {
4323       "PreventInstalls": true | false
4324     }
4325   }
4326 }
4327 ```
4328 ### SearchEngines | Remove
4329
4330 Hide built-in search engines. This policy is only available on the ESR.
4331
4332 **Compatibility:** Firefox ESR 60.2\
4333 **CCK2 Equivalent:** `removeDefaultSearchEngines` (removed all built-in engines)\
4334 **Preferences Affected:** N/A
4335
4336 #### Windows (GPO)
4337 ```
4338 Software\Policies\Mozilla\Firefox\SearchEngines\Remove\1 = NAME_OF_SEARCH_ENGINE
4339 ```
4340 #### Windows (Intune)
4341 OMA-URI:
4342 ```
4343 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_Remove
4344 ```
4345 Value (string):
4346 ```
4347 <enabled/>
4348 <data id="SearchEngines_Remove" value="1&#xF000;NAME_OF_SEARCH_ENGINE"/>
4349 ```
4350 #### macOS
4351 ```
4352 <dict>
4353   <key>SearchEngines</key>
4354   <dict>
4355     <key>Remove</key>
4356     <array>
4357       <string>NAME_OF_SEARCH_ENGINE</string>
4358     </array>
4359   </dict>
4360 </dict>
4361 ```
4362 #### policies.json
4363 ```
4364 {
4365   "policies": {
4366     "SearchEngines": {
4367       "Remove": ["NAME_OF_SEARCH_ENGINE"]
4368     }
4369   }
4370 }
4371 ```
4372 ### SearchEngines | Add
4373
4374 Add new search engines (up to five). This policy is only available on the ESR. `Name` and `URLTemplate` are required.
4375
4376 `Name` is the name of the search engine.
4377
4378 `URLTemplate` is the search URL with {searchTerms} to substitute for the search term.
4379
4380 `Method` is either GET or POST
4381
4382 `IconURL` is a URL for the icon to use.
4383
4384 `Alias` is a keyword to use for the engine.
4385
4386 `Description` is a description of the search engine.
4387
4388 `PostData` is the POST data as name value pairs separated by &.
4389
4390 `SuggestURLTemplate` is a search suggestions URL with {searchTerms} to substitute for the search term.
4391
4392 **Compatibility:** Firefox ESR 60 (POST support in Firefox ESR 68)\
4393 **CCK2 Equivalent:** `searchplugins`\
4394 **Preferences Affected:** N/A
4395
4396 #### Windows (GPO)
4397 ```
4398 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Name = "Example1"
4399 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\URLTemplate = "https://www.example.org/q={searchTerms}"
4400 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Method = "GET" | "POST"
4401 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\IconURL = "https://www.example.org/favicon.ico"
4402 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Alias = "example"
4403 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Description = "Example Description"
4404 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\SuggestURLTemplate = "https://www.example.org/suggestions/q={searchTerms}"
4405 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\PostData = "name=value&q={searchTerms}"
4406 ```
4407 #### Windows (Intune)
4408 OMA-URI:
4409 ```
4410 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_1
4411 ```
4412 Value (string):
4413 ```
4414 <enabled/>
4415 <data id="SearchEngine_Name" value="Example1"/>
4416 <data id="SearchEngine_URLTemplate" value="https://www.example.org/q={searchTerms"/>
4417 <data id="SearchEngine_Method" value="GET | POST"/>
4418 <data id="SearchEngine_IconURL" value="https://www.example.org/favicon.ico"/>
4419 <data id="SearchEngine_Alias" value="example"/>
4420 <data id="SearchEngine_Description" value="Example Description"/>
4421 <data id="SearchEngine_SuggestURLTemplate" value="https://www.example.org/suggestions/q={searchTerms}"/>
4422 <data id="SearchEngine_PostData" value="name=value&amp;q={searchTerms}"/>
4423 ```
4424 #### macOS
4425 ```
4426 <dict>
4427   <key>SearchEngines</key>
4428   <dict>
4429     <key>Add</key>
4430     <array>
4431       <dict>
4432         <key>Name</key>
4433         <string>Example1</string>
4434         <key>URLTemplate</key>
4435         <string>https://www.example.org/q={searchTerms}</string>
4436         <key>Method</key>
4437         <string>GET | POST </string>
4438         <key>IconURL</key>
4439         <string>https://www.example.org/favicon.ico</string>
4440         <key>Alias</key>
4441         <string>example</string>
4442         <key>Description</key>
4443         <string>Example Description</string>
4444         <key>SuggestURLTemplate</key>
4445         <string>https://www.example.org/suggestions/q={searchTerms}</string>
4446         <key>PostData</key>
4447         <string>name=value&q={searchTerms}</string>
4448       </dict>
4449     <array>
4450   </dict>
4451 </dict>
4452 ```
4453 #### policies.json
4454 ```
4455 {
4456   "policies": {
4457     "SearchEngines": {
4458       "Add": [
4459         {
4460           "Name": "Example1",
4461           "URLTemplate": "https://www.example.org/q={searchTerms}",
4462           "Method": "GET" | "POST",
4463           "IconURL": "https://www.example.org/favicon.ico",
4464           "Alias": "example",
4465           "Description": "Description",
4466           "PostData": "name=value&q={searchTerms}",
4467           "SuggestURLTemplate": "https://www.example.org/suggestions/q={searchTerms}"
4468         }
4469       ]
4470     }
4471   }
4472 }
4473 ```
4474 ### SearchSuggestEnabled
4475
4476 Enable search suggestions.
4477
4478 **Compatibility:** Firefox 68, Firefox ESR 68\
4479 **CCK2 Equivalent:** N/A\
4480 **Preferences Affected:** `browser.urlbar.suggest.searches`,`browser.search.suggest.enabled`
4481
4482 #### Windows (GPO)
4483 ```
4484 Software\Policies\Mozilla\Firefox\SearchSuggestEnabled = 0x1 | 0x0
4485 ```
4486 #### Windows (Intune)
4487 OMA-URI:
4488 ```
4489 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchSuggestEnabled
4490 ```
4491 Value (string):
4492 ```
4493 <enabled/> or <disabled/>
4494 ```
4495 #### macOS
4496 ```
4497 <dict>
4498   <key>SearchSuggestEnabled</key>
4499   <true/> | <false/>
4500 </dict>
4501 ```
4502 #### policies.json
4503 ```
4504 {
4505   "policies": {
4506     "SearchSuggestEnabled": true | false
4507   }
4508 }
4509 ```
4510 ### SecurityDevices
4511
4512 Install PKCS #11 modules.
4513
4514 **Compatibility:** Firefox 64, Firefox ESR 60.4\
4515 **CCK2 Equivalent:** `certs.devices`\
4516 **Preferences Affected:** N/A
4517
4518 #### Windows (GPO)
4519 ```
4520 Software\Policies\Mozilla\Firefox\SecurityDevices\NAME_OF_DEVICE = PATH_TO_LIBRARY_FOR_DEVICE
4521 ```
4522 #### Windows (Intune)
4523 OMA-URI:
4524 ```
4525 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SecurityDevices
4526 ```
4527 Value (string):
4528 ```
4529 <enabled/>
4530 <data id="SecurityDevices" value="NAME_OF_DEVICE&#xF000;PATH_TO_LIBRARY_FOR_DEVICE"/>
4531 ```
4532 #### macOS
4533 ```
4534 <dict>
4535   <key>SecurityDevices</key>
4536   <dict>
4537     <key>NAME_OF_DEVICE</key>
4538     <string>PATH_TO_LIBRARY_FOR_DEVICE</string>
4539   </dict>
4540 </dict>
4541 ```
4542
4543 #### policies.json
4544 ```
4545 {
4546   "policies": {
4547     "SecurityDevices": {
4548       "NAME_OF_DEVICE": "PATH_TO_LIBRARY_FOR_DEVICE"
4549     }
4550   }
4551 }
4552 ```
4553 ### SSLVersionMax
4554
4555 Set and lock the maximum version of TLS.
4556
4557 **Compatibility:** Firefox 66, Firefox ESR 60.6\
4558 **CCK2 Equivalent:** N/A\
4559 **Preferences Affected:** `security.tls.version.max`
4560
4561 #### Windows (GPO)
4562 ```
4563 Software\Policies\Mozilla\Firefox\SSLVersionMax = "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
4564 ```
4565 #### Windows (Intune)
4566 OMA-URI:
4567 ```
4568 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SSLVersionMax
4569 ```
4570 Value (string):
4571 ```
4572 <enabled/>
4573 <data id="SSLVersion" value="tls1 | tls1.2 | tls1.3"/>
4574 ```
4575 #### macOS
4576 ```
4577 <dict>
4578   <key>SSLVersionMax</key>
4579   <string>tls1 | tls1.1 | tls1.2 | tls1.3</string>
4580 </dict>
4581 ```
4582
4583 #### policies.json
4584 ```
4585 {
4586   "policies": {
4587     "SSLVersionMax": "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
4588   }
4589 }
4590 ```
4591 ### SSLVersionMin
4592
4593 Set and lock the minimum version of TLS.
4594
4595 **Compatibility:** Firefox 66, Firefox ESR 60.6\
4596 **CCK2 Equivalent:** N/A\
4597 **Preferences Affected:** `security.tls.version.min`
4598
4599 #### Windows (GPO)
4600 ```
4601 Software\Policies\Mozilla\Firefox\SSLVersionMin = "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
4602 ```
4603 #### Windows (Intune)
4604 OMA-URI:
4605 ```
4606 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SSLVersionMin
4607 ```
4608 Value (string):
4609 ```
4610 <enabled/>
4611 <data id="SSLVersion" value="tls1 | tls1.2 | tls1.3"/>
4612 ```
4613 #### macOS
4614 ```
4615 <dict>
4616   <key>SSLVersionMin</key>
4617   <string>tls1 | tls1.1 | tls1.2 | tls1.3</string>
4618 </dict>
4619 ```
4620
4621 #### policies.json
4622 ```
4623 {
4624   "policies": {
4625     "SSLVersionMin": "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
4626   }
4627 }
4628 ```
4629 ### SupportMenu
4630 Add a menuitem to the help menu for specifying support information.
4631
4632 **Compatibility:** Firefox 68.0.1, Firefox ESR 68.0.1\
4633 **CCK2 Equivalent:** helpMenu\
4634 **Preferences Affected:** N/A
4635
4636 #### Windows (GPO)
4637 ```
4638 Software\Policies\Mozilla\Firefox\SupportMenu\Title = "Support Menu"
4639 Software\Policies\Mozilla\Firefox\SupportMenu\URL = "http://example.com/support"
4640 Software\Policies\Mozilla\Firefox\SupportMenu\AccessKey = "S"
4641 ```
4642 #### Windows (Intune)
4643 OMA-URI:
4644 ```
4645 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SupportMenu
4646 ```
4647 Value (string):
4648 ```
4649 <enabled/>
4650 <data id="SupportMenuTitle" value="Support Menu"/>
4651 <data id="SupportMenuURL" value="http://example.com/support"/>
4652 <data id="SupportMenuAccessKey" value="S">
4653 ```
4654 #### macOS
4655 ```
4656 <dict>
4657   <key>SupportMenu</key>
4658   <dict>
4659     <key>Title</key>
4660     <string>SupportMenu</string>
4661     <key>URL</key>
4662     <string>http://example.com/support</string>
4663     <key>AccessKey</key>
4664     <string>S</string>
4665   </dict>
4666 </dict>
4667 ```
4668 #### policies.json
4669 ```
4670 {
4671   "policies": {
4672     "SupportMenu": {
4673       "Title": "Support Menu",
4674       "URL": "http://example.com/support",
4675       "AccessKey": "S"
4676     }
4677   }
4678 }
4679 ```
4680 ### UserMessaging
4681
4682 Prevent Firefox from messaging the user in certain situations.
4683
4684 `WhatsNew` Remove the "What's New" icon and menuitem. (Firefox 75 only)
4685
4686 `ExtensionRecommendations` Don't recommend extensions while the user is visiting web pages.
4687
4688 `FeatureRecommendations` Don't recommend browser features.
4689
4690 `UrlbarInterventions` Don't offer Firefox specific suggestions in the URL bar. (Firefox 75 only)
4691
4692 **Compatibility:** Firefox 75, Firefox ESR 68.7\
4693 **CCK2 Equivalent:** N/A\
4694 **Preferences Affected:** `browser.messaging-system.whatsNewPanel.enabled`,`browser.newtabpage.activity-stream.asrouter.userprefs.cfr.addons`,`browser.newtabpage.activity-stream.asrouter.userprefs.cfr.features`
4695
4696 #### Windows (GPO)
4697 ```
4698 Software\Policies\Mozilla\Firefox\UserMessaging\WhatsNew = 0x1 | 0x0
4699 Software\Policies\Mozilla\Firefox\UserMessaging\ExtensionRecommendations = 0x1 | 0x0
4700 Software\Policies\Mozilla\Firefox\UserMessaging\FeatureRecommendations = 0x1 | 0x0
4701 Software\Policies\Mozilla\Firefox\UserMessaging\UrlbarInterventions = 0x1 | 0x0
4702 ```
4703 #### Windows (Intune)
4704 OMA-URI:
4705 ```
4706 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/UserMessaging_WhatsNew
4707 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/UserMessaging_ExtensionRecommendations
4708 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/UserMessaging_FeatureRecommendations
4709 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/UserMessaging_UrlbarInterventions
4710 ```
4711 Value (string):
4712 ```
4713 <enabled/> or <disabled/>
4714 ```
4715 #### macOS
4716 ```
4717 <dict>
4718   <key>UserMessaging</key>
4719   <dict>
4720     <key>WhatsNew</key>
4721     <true/> | <false/>
4722     <key>ExtensionRecommendations</key>
4723     <true/> | <false/>
4724     <key>FeatureRecommendations</key>
4725     <true/> | <false/>
4726     <key>UrlbarInterventions</key>
4727     <true/> | <false/>
4728   </dict>
4729 </dict>
4730 ```
4731 #### policies.json
4732 ```
4733 {
4734   "policies": {
4735     "UserMessaging": {
4736       "WhatsNew": true | false,
4737       "ExtensionRecommendations": true | false,
4738       "FeatureRecommendations": true | false,
4739       "UrlbarInterventions": true | false
4740     }
4741   }
4742 }
4743 ```
4744 ### WebsiteFilter
4745 Block websites from being visited. The parameters take an array of Match Patterns, as documented in https://developer.mozilla.org/en-US/Add-ons/WebExtensions/Match_patterns. Only http/https addresses are supported at the moment. The arrays are limited to 1000 entries each.
4746
4747 **Compatibility:** Firefox 60, Firefox ESR 60\
4748 **CCK2 Equivalent:** N/A\
4749 **Preferences Affected:** N/A
4750
4751 #### Windows (GPO)
4752 ```
4753 Software\Policies\Mozilla\Firefox\WebsiteFilter\Block\1 = "<all_urls>"
4754 Software\Policies\Mozilla\Firefox\WebsiteFilter\Exceptions\1 = "http://example.org/*"
4755 ```
4756 #### Windows (Intune)
4757 OMA-URI:
4758 ```
4759 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/B_WebsiteFilter_Block
4760 ```
4761 Value (string):
4762 ```
4763 <enabled/>
4764 <data id="WebsiteFilter" value="1&#xF000;<all_urls>"/>
4765 ```
4766 OMA-URI:
4767 ```
4768 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/B_WebsiteFilter_Exceptions
4769 ```
4770 Value (string):
4771 ```
4772 <enabled/>
4773 <data id="WebsiteFilter" value="1&#xF000;http://example.org/*"/>
4774 ```
4775 #### macOS
4776 ```
4777 <dict>
4778   <key>WebsiteFilter</key>
4779   <dict>
4780     <key>Block</key>
4781     <array>
4782       <string><all_urls></string>
4783     </array>
4784     <key>Exceptions</key>
4785     <array>
4786       <string>http://example.org/*</string>
4787     </array>
4788   </dict>
4789
4790 </dict>
4791 ```
4792 #### policies.json
4793 ```
4794 {
4795   "policies": {
4796     "WebsiteFilter": {
4797       "Block": ["<all_urls>"],
4798       "Exceptions": ["http://example.org/*"]
4799     }
4800   }
4801 }
4802 ```