README.md

   1 **These policies are in active development and so might contain changes that do not work with current versions of Firefox.**
   2
   3 **You should use the [officially released versions](https://github.com/mozilla/policy-templates/releases) if you are deploying changes.**
   4
   5 Policies can be specified using the [Group Policy templates on Windows](https://github.com/mozilla/policy-templates/tree/master/windows), [Intune on Windows](https://support.mozilla.org/kb/managing-firefox-intune), [configuration profiles on macOS](https://github.com/mozilla/policy-templates/tree/master/mac), or by creating a file called `policies.json`. On Windows, create a directory called `distribution` where the EXE is located and place the file there. On Mac, the file goes into `Firefox.app/Contents/Resources/distribution`.  On Linux, the file goes into `firefox/distribution`, where `firefox` is the installation directory for firefox, which varies by distribution or you can specify system-wide policy by placing the file in `/etc/firefox/policies`.
   6
   7 | Policy Name | Description
   8 | --- | --- |
   9 | **[`AppAutoUpdate`](#appautoupdate)** |  Enable or disable automatic application update.
  10 | **[`AppUpdateURL`](#appupdateurl)** | Change the URL for application update.
  11 | **[`Authentication`](#authentication)** | Configure sites that support integrated authentication.
  12 | **[`BlockAboutAddons`](#blockaboutaddons)** | Block access to the Add-ons Manager (about:addons).
  13 | **[`BlockAboutConfig`](#blockaboutconfig)** | Block access to about:config.
  14 | **[`BlockAboutProfiles`](#blockaboutprofiles)** | Block access to About Profiles (about:profiles).
  15 | **[`BlockAboutSupport`](#blockaboutsupport)** | Block access to Troubleshooting Information (about:support).
  16 | **[`Bookmarks`](#bookmarks)** | Add bookmarks in either the bookmarks toolbar or menu.
  17 | **[`CaptivePortal`](#captiveportal)** | Enable or disable the detection of captive portals.
  18 | **[`Certificates`](#certificates)** |
  19 | **[`Certificates -> ImportEnterpriseRoots`](#certificates--importenterpriseroots)** | Trust certificates that have been added to the operating system certificate store by a user or administrator.
  20 | **[`Certificates -> Install`](#certificates--install)** | Install certificates into the Firefox certificate store.
  21 | **[`Cookies`](#cookies)** | Configure cookie preferences.
  22 | **[`DisableAppUpdate`](#disableappupdate)** | Turn off application updates.
  23 | **[`DisableBuiltinPDFViewer`](#disablebuiltinpdfviewer)** | Disable the built in PDF viewer.
  24 | **[`DisabledCiphers`](#disabledciphers)** | Disable ciphers.
  25 | **[`DisableDefaultBrowserAgent`](#disabledefaultbrowseragent)** | Prevent the default browser agent from taking any actions (Windows only).
  26 | **[`DisableDeveloperTools`](#disabledevelopertools)** | Remove access to all developer tools.
  27 | **[`DisableFeedbackCommands`](#disablefeedbackcommands)** | Disable the menus for reporting sites.
  28 | **[`DisableFirefoxScreenshots`](#disablefirefoxscreenshots)** | Remove access to Firefox Screenshots.
  29 | **[`DisableFirefoxAccounts`](#disablefirefoxaccounts)** | Disable Firefox Accounts integration (Sync).
  30 | **[`DisableFirefoxStudies`](#disablefirefoxstudies)** | Disable Firefox studies (Shield).
  31 | **[`DisableForgetButton`](#disableforgetbutton)** | Disable the "Forget" button.
  32 | **[`DisableFormHistory`](#disableformhistory)** | Turn off saving information on web forms and the search bar.
  33 | **[`DisableMasterPasswordCreation`](#disablemasterpasswordcreation)** | Remove the master password functionality.
  34 | **[`DisablePasswordReveal`](#disablepasswordreveal)** | Do not allow passwords to be revealed in saved logins.
  35 | **[`DisablePocket`](#disablepocket)** | Remove Pocket in the Firefox UI.
  36 | **[`DisablePrivateBrowsing`](#disableprivatebrowsing)** | Remove access to private browsing.
  37 | **[`DisableProfileImport`](#disableprofileimport)** | Disables the "Import data from another browser" option in the bookmarks window.
  38 | **[`DisableProfileRefresh`](#disableprofilerefresh)** | Disable the Refresh Firefox button on about:support and support.mozilla.org
  39 | **[`DisableSafeMode`](#disablesafemode)** | Disable safe mode within the browser.
  40 | **[`DisableSecurityBypass`](#disablesecuritybypass)** | Prevent the user from bypassing security in certain cases.
  41 | **[`DisableSetDesktopBackground`](#disablesetdesktopbackground)** | Remove the "Set As Desktop Background..." menuitem when right clicking on an image.
  42 | **[`DisableSystemAddonUpdate`](#disablesystemaddonupdate)** | Prevent system add-ons from being installed or update.
  43 | **[`DisableTelemetry`](#disabletelemetry)** | DisableTelemetry
  44 | **[`DisplayBookmarksToolbar`](#displaybookmarkstoolbar)** | Set the initial state of the bookmarks toolbar.
  45 | **[`DisplayMenuBar (Deprecated)`](#displaymenubar-deprecated)** | Set the initial state of the menubar.
  46 | **[`DisplayMenuBar`](#displaymenubar)** | Set the state of the menubar.
  47 | **[`DNSOverHTTPS`](#dnsoverhttps)** | Configure DNS over HTTPS.
  48 | **[`DontCheckDefaultBrowser`](#dontcheckdefaultbrowser)** | Don't check if Firefox is the default browser at startup.
  49 | **[`DefaultDownloadDirectory`](#defaultdownloaddirectory)** | Set the default download directory.
  50 | **[`DownloadDirectory`](#downloaddirectory)** | Set and lock the download directory.
  51 | **[`EnableTrackingProtection`](#enabletrackingprotection)** | Configure tracking protection.
  52 | **[`EncryptedMediaExtensions`](#encryptedmediaextensions)** | Enable or disable Encrypted Media Extensions and optionally lock it.
  53 | **[`EnterprisePoliciesEnabled`](#enterprisepoliciesenabled)** | Enable policy support on macOS.
  54 | **[`Extensions`](#extensions)** | Control the installation, uninstallation and locking of extensions.
  55 | **[`ExtensionSettings`](#extensionsettings)** | Manage all aspects of extensions.
  56 | **[`ExtensionUpdate`](#extensionupdate)** | Control extension updates.
  57 | **[`FlashPlugin`](#flashplugin)** | Configure the default Flash plugin policy as well as origins for which Flash is allowed.
  58 | **[`FirefoxHome`](#firefoxhome)** | Customize the Firefox Home page.
  59 | **[`HardwareAcceleration`](#hardwareacceleration)** | Control hardware acceleration.
  60 | **[`Handlers`](#handlers)** | Configure default application handlers.
  61 | **[`Homepage`](#homepage)** | Configure the default homepage and how Firefox starts.
  62 | **[`InstallAddonsPermission`](#installaddonspermission)** | Configure the default extension install policy as well as origins for extension installs are allowed.
  63 | **[`LegacyProfiles`](#legacyprofiles)** | Disable the feature enforcing a separate profile for each installation.
  64 | **[`LocalFileLinks`](#localfilelinks)** | Enable linking to local files by origin.
  65 | **[`ManagedBookmarks`](#managedbookmarks)** | Configures a list of bookmarks managed by an administrator that cannot be changed by the user.
  66 | **[`PrimaryPassword`](#primarypassword)** | Require or prevent using a primary (formerly master) password.
  67 | **[`NetworkPrediction`](#networkprediction)** | Enable or disable network prediction (DNS prefetching).
  68 | **[`NewTabPage`](#newtabpage)** | Enable or disable the New Tab page.
  69 | **[`NoDefaultBookmarks`](#nodefaultbookmarks)** | Disable the creation of default bookmarks.
  70 | **[`OfferToSaveLogins`](#offertosavelogins)** | Control whether or not Firefox offers to save passwords.
  71 | **[`OfferToSaveLoginsDefault`](#offertosaveloginsdefault)** | Set the default value for whether or not Firefox offers to save passwords.
  72 | **[`OverrideFirstRunPage`](#overridefirstrunpage)** | Override the first run page.
  73 | **[`OverridePostUpdatePage`](#overridepostupdatepage)** | Override the upgrade page.
  74 | **[`PasswordManagerEnabled`](#passwordmanagerenabled)** | Remove (some) access to the password manager.
  75 | **[`PDFjs`](#pdfjs)** | Disable or configure PDF.js, the built-in PDF viewer.
  76 | **[`Permissions`](#permissions)** | Set permissions associated with camera, microphone, location, and notifications.
  77 | **[`PictureInPicture`](#pictureinpicture)** | Enable or disable Picture-in-Picture.
  78 | **[`PopupBlocking`](#popupblocking)** | Configure the default pop-up window policy as well as origins for which pop-up windows are allowed.
  79 | **[`Preferences`](#preferences)** | Set and lock preferences.
  80 | **[`Preferences (Deprecated)`](#preferences-deprecated)** | Set and lock some preferences.
  81 | **[`PromptForDownloadLocation`](#promptfordownloadlocation)** | Ask where to save each file before downloading.
  82 | **[`Proxy`](#proxy)** | Configure proxy settings.
  83 | **[`RequestedLocales`](#requestedlocales)** | Set the the list of requested locales for the application in order of preference.
  84 | **[`SanitizeOnShutdown` (All)](#sanitizeonshutdown-all)** | Clear all data on shutdown.
  85 | **[`SanitizeOnShutdown` (Selective)](#sanitizeonshutdown-selective)** | Clear data on shutdown.
  86 | **[`SearchBar`](#searchbar)** | Set whether or not search bar is displayed.
  87 | **[`SearchEngines`](#searchengines-this-policy-is-only-available-on-the-esr)** |
  88 | **[`SearchEngines -> Default`](#searchengines--default)** | Set the default search engine.
  89 | **[`SearchEngines -> PreventInstalls`](#searchengines--preventinstalls)** | Prevent installing search engines from webpages.
  90 | **[`SearchEngines -> Remove`](#searchengines--remove)** | Hide built-in search engines.
  91 | **[`SearchEngines -> Add`](#searchengines--add)** | Add new search engines.
  92 | **[`SearchSuggestEnabled`](#searchsuggestenabled)** | Enable search suggestions.
  93 | **[`SecurityDevices`](#securitydevices)** | Install PKCS #11 modules.
  94 | **[`SSLVersionMax`](#sslversionmax)** | Set and lock the maximum version of TLS.
  95 | **[`SSLVersionMin`](#sslversionmin)** | Set and lock the minimum version of TLS.
  96 | **[`SupportMenu`](#supportmenu)** | Add a menuitem to the help menu for specifying support information.
  97 | **[`UserMessaging`](#usermessaging)** | Don't show certain messages to the user.
  98 | **[`WebsiteFilter`](#websitefilter)** | Block websites from being visited.
  99
 100 ### AppAutoUpdate
 101
 102 Enable or disable **automatic** application update.
 103
 104 If set to true, application updates are installed without user approval within Firefox. The operating system might still require approval.
 105
 106 If set to false, application updates are downloaded but the user can choose when to install the update.
 107
 108 If you have disabled updates via DisableAppUpdate, this policy has no effect.
 109
 110 **Compatibility:** Firefox 75, Firefox ESR 68.7\
 111 **CCK2 Equivalent:** N/A\
 112 **Preferences Affected:** app.update.auto
 113
 114 #### Windows (GPO)
 115 ```
 116 Software\Policies\Mozilla\Firefox\AppAutoUpdate = 0x1 | 0x0
 117 ```
 118 #### Windows (Intune)
 119 OMA-URI:
 120 ```
 121 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AppAutoUpdate
 122 ```
 123 Value (string):
 124 ```
 125 <enabled/> or <disabled/>
 126 ```
 127 #### macOS
 128 ```
 129 <dict>
 130   <key>AppAutoUpdate</key>
 131   <true/> | <false/>
 132 </dict>
 133 ```
 134 #### policies.json
 135 ```
 136 {
 137   "policies": {
 138     "AppAutoUpdate": true | false
 139   }
 140 }
 141 ```
 142 ### AppUpdateURL
 143
 144 Change the URL for application update if you are providing Firefox updates from a custom update server.
 145
 146 **Compatibility:** Firefox 62, Firefox ESR 60.2\
 147 **CCK2 Equivalent:** N/A\
 148 **Preferences Affected:** `app.update.url`
 149
 150 #### Windows (GPO)
 151 ```
 152 Software\Policies\Mozilla\Firefox\AppUpdateURL = "https://yoursite.com"
 153 ```
 154 #### Windows (Intune)
 155 OMA-URI:
 156 ```
 157 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AppUpdateURL
 158 ```
 159 Value (string):
 160 ```
 161 <enabled/>
 162 <data id="AppUpdateURL" value="https://yoursite.com"/>
 163 ```
 164 #### macOS
 165 ```
 166 <dict>
 167   <key>AppUpdateURL</key>
 168   <string>https://yoursite.com</string>
 169 </dict>
 170 ```
 171 #### policies.json
 172 ```
 173 {
 174   "policies": {
 175     "AppUpdateURL": "https://yoursite.com"
 176   }
 177 }
 178 ```
 179 ### Authentication
 180
 181 Configure sites that support integrated authentication.
 182
 183 See https://developer.mozilla.org/en-US/docs/Mozilla/Integrated_authentication for more information.
 184
 185 `PrivateBrowsing` enables integrated authentication in private browsing.
 186
 187 **Compatibility:** Firefox 60, Firefox ESR 60 (AllowNonFQDN added in 62/60.2, AllowProxies added in 70/68.2, Locked added in 71/68.3, PrivateBrowsing added in 77/68.9)\
 188 **CCK2 Equivalent:** N/A\
 189 **Preferences Affected:** `network.negotiate-auth.trusted-uris`,`network.negotiate-auth.delegation-uris`,`network.automatic-ntlm-auth.trusted-uris`,`network.automatic-ntlm-auth.allow-non-fqdn`,`network.negotiate-auth.allow-non-fqdn`,`network.automatic-ntlm-auth.allow-proxies`,`network.negotiate-auth.allow-proxies`,`network.auth.private-browsing-sso`
 190
 191 #### Windows (GPO)
 192 ```
 193 Software\Policies\Mozilla\Firefox\Authentication\SPNEGO\1 = "mydomain.com"
 194 Software\Policies\Mozilla\Firefox\Authentication\SPNEGO\2 = "https://myotherdomain.com"
 195 Software\Policies\Mozilla\Firefox\Authentication\Delegated\1 = "mydomain.com"
 196 Software\Policies\Mozilla\Firefox\Authentication\Delegated\2 = "https://myotherdomain.com"
 197 Software\Policies\Mozilla\Firefox\Authentication\NTLM\1 = "mydomain.com"
 198 Software\Policies\Mozilla\Firefox\Authentication\NTLM\2 = "https://myotherdomain.com"
 199 Software\Policies\Mozilla\Firefox\Authentication\AllowNonFQDN\SPNEGO = 0x1 | 0x0
 200 Software\Policies\Mozilla\Firefox\Authentication\AllowNonFQDN\NTLM = 0x1 | 0x0
 201 Software\Policies\Mozilla\Firefox\Authentication\AllowProxies\SPNEGO = 0x1 | 0x0
 202 Software\Policies\Mozilla\Firefox\Authentication\AllowProxies\NTLM = 0x1 | 0x0
 203 Software\Policies\Mozilla\Firefox\Authentication\Locked = 0x1 | 0x0
 204 Software\Policies\Mozilla\Firefox\Authentication\PrivateBrowsing = 0x1 | 0x0
 205 ```
 206 #### Windows (Intune)
 207 OMA-URI:
 208 ```
 209 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_SPNEGO
 210 ```
 211 Value (string):
 212 ```
 213 <enabled/>
 214 <data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
 215 ```
 216 OMA-URI:
 217 ```
 218 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_Delegated
 219 ```
 220 Value (string):
 221 ```
 222 <enabled/>
 223 <data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
 224 ```
 225 OMA-URI:
 226 ```
 227 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_NTLM
 228 ```
 229 Value (string):
 230 ```
 231 <enabled/>
 232 <data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
 233 ```
 234 OMA-URI:
 235 ```
 236 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_AllowNonFQDN
 237 ```
 238 Value (string):
 239 ```
 240 <enabled/>
 241 <data id="Authentication_AllowNonFQDN_NTLM" value="true | false"/>
 242 <data id="Authentication_AllowNonFQDN_SPNEGO" value="true | false"/>
 243 ```
 244 OMA-URI:
 245 ```
 246 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_Locked
 247 ```
 248 Value (string):
 249 ```
 250 <enabled/> or <disabled/>
 251 ```
 252 OMA-URI:
 253 ```
 254 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_PrivateBrowsing
 255 ```
 256 Value (string):
 257 ```
 258 <enabled/> or <disabled/>
 259 ```
 260 #### macOS
 261 ```
 262 <dict>
 263   <key>Authentication</key>
 264   <dict>
 265     <key>SPNEGO</key>
 266     <array>
 267       <string>mydomain.com</string>
 268       <string>https://myotherdomain.com</string>
 269     </array>
 270     <key>Delegated</key>
 271     <array>
 272       <string>mydomain.com</string>
 273       <string>https://myotherdomain.com</string>
 274     </array>
 275     <key>NTLM</key>
 276     <array>
 277       <string>mydomain.com</string>
 278       <string>https://myotherdomain.com</string>
 279     </array>
 280     <key>AllowNonFQDN</key>
 281       <dict>
 282       <key>SPNEGO</key>
 283       <true/> | <false/>
 284       <key>NTLM</key>
 285       <true/> | <false/>
 286     </dict>
 287     <key>AllowProxies</key>
 288       <dict>
 289       <key>SPNEGO</key>
 290       <true/> | <false/>
 291       <key>NTLM</key>
 292       <true/> | <false/>
 293     </dict>
 294     <key>Locked</key>
 295     <true/> | <false/>
 296     <key>PrivateBrowsing</key>
 297     <true/> | <false/>
 298   </dict>
 299 </dict>
 300 ```
 301 #### policies.json
 302 ```
 303 {
 304   "policies": {
 305     "Authentication": {
 306       "SPNEGO": ["mydomain.com", "https://myotherdomain.com"],
 307       "Delegated": ["mydomain.com", "https://myotherdomain.com"],
 308       "NTLM": ["mydomain.com", "https://myotherdomain.com"],
 309       "AllowNonFQDN": {
 310         "SPNEGO": true | false,
 311         "NTLM": true | false
 312       },
 313       "AllowProxies": {
 314         "SPNEGO": true | false,
 315         "NTLM": true | false
 316       },
 317       "Locked": true | false,
 318       "PrivateBrowsing": true | false
 319     }
 320   }
 321 }
 322 ```
 323 ### BlockAboutAddons
 324
 325 Block access to the Add-ons Manager (about:addons).
 326
 327 **Compatibility:** Firefox 60, Firefox ESR 60\
 328 **CCK2 Equivalent:** `disableAddonsManager`\
 329 **Preferences Affected:** N/A
 330
 331 #### Windows (GPO)
 332 ```
 333 Software\Policies\Mozilla\Firefox\BlockAboutAddons = 0x1 | 0x0
 334 ```
 335 #### Windows (Intune)
 336 OMA-URI:
 337 ```
 338 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutAddons
 339 ```
 340 Value (string):
 341 ```
 342 <enabled/> or <disabled/>
 343 ```
 344 #### macOS
 345 ```
 346 <dict>
 347   <key>BlockAboutAddons</key>
 348   <true/> | <false/>
 349 </dict>
 350 ```
 351 #### policies.json
 352 ```
 353 {
 354   "policies": {
 355     "BlockAboutAddons": true | false
 356   }
 357 }
 358 ```
 359 ### BlockAboutConfig
 360
 361 Block access to about:config.
 362
 363 **Compatibility:** Firefox 60, Firefox ESR 60\
 364 **CCK2 Equivalent:** `disableAboutConfig`\
 365 **Preferences Affected:** N/A
 366
 367 #### Windows (GPO)
 368 ```
 369 Software\Policies\Mozilla\Firefox\BlockAboutConfig = 0x1 | 0x0
 370 ```
 371 #### Windows (Intune)
 372 OMA-URI:
 373 ```
 374 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutConfig
 375 ```
 376 Value (string):
 377 ```
 378 <enabled/> or <disabled/>
 379 ```
 380 #### macOS
 381 ```
 382 <dict>
 383   <key>BlockAboutConfig</key>
 384   <true/> | <false/>
 385 </dict>
 386 ```
 387 #### policies.json
 388 ```
 389 {
 390   "policies": {
 391     "BlockAboutConfig": true | false
 392   }
 393 }
 394 ```
 395 ### BlockAboutProfiles
 396
 397 Block access to About Profiles (about:profiles).
 398
 399 **Compatibility:** Firefox 60, Firefox ESR 60\
 400 **CCK2 Equivalent:** `disableAboutProfiles`\
 401 **Preferences Affected:** N/A
 402
 403 #### Windows (GPO)
 404 ```
 405 Software\Policies\Mozilla\Firefox\BlockAboutProfiles = 0x1 | 0x0
 406 ```
 407 #### Windows (Intune)
 408 OMA-URI:
 409 ```
 410 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutProfiles
 411 ```
 412 Value (string):
 413 ```
 414 <enabled/> or <disabled/>
 415 ```
 416 #### macOS
 417 ```
 418 <dict>
 419   <key>BlockAboutProfiles</key>
 420   <true/> | <false/>
 421 </dict>
 422 ```
 423 #### policies.json
 424 ```
 425 {
 426   "policies": {
 427     "BlockAboutProfiles": true | false
 428   }
 429 }
 430 ```
 431 ### BlockAboutSupport
 432
 433 Block access to Troubleshooting Information (about:support).
 434
 435 **Compatibility:** Firefox 60, Firefox ESR 60\
 436 **CCK2 Equivalent:** `disableAboutSupport`\
 437 **Preferences Affected:** N/A
 438
 439 #### Windows (GPO)
 440 ```
 441 Software\Policies\Mozilla\Firefox\BlockAboutSupport = 0x1 | 0x0
 442 ```
 443 #### Windows (Intune)
 444 OMA-URI:
 445 ```
 446 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutSupport
 447 ```
 448 Value (string):
 449 ```
 450 <enabled/> or <disabled/>
 451 ```
 452 #### macOS
 453 ```
 454 <dict>
 455   <key>BlockAboutSupport</key>
 456   <true/> | <false/>
 457 </dict>
 458 ```
 459 #### policies.json
 460 ```
 461 {
 462   "policies": {
 463     "BlockAboutSupport": true | false
 464   }
 465 }
 466 ```
 467 ### Bookmarks
 468
 469 Note: [`ManagedBookmarks`](#managedbookmarks) is the new recommended way to add bookmarks. This policy will continue to be supported.
 470
 471 Add bookmarks in either the bookmarks toolbar or menu. Only `Title` and `URL` are required. If `Placement` is not specified, the bookmark will be placed on the toolbar. If `Folder` is specified, it is automatically created and bookmarks with the same folder name are grouped together.
 472
 473 **Compatibility:** Firefox 60, Firefox ESR 60\
 474 **CCK2 Equivalent:** `bookmarks.toolbar`,`bookmarks.menu`\
 475 **Preferences Affected:** N/A
 476
 477 #### Windows (GPO)
 478 ```
 479 Software\Policies\Mozilla\Firefox\Bookmarks\1\Title = "Example"
 480 Software\Policies\Mozilla\Firefox\Bookmarks\1\URL = "https://example.com"
 481 Software\Policies\Mozilla\Firefox\Bookmarks\1\Favicon = "https://example.com/favicon.ico"
 482 Software\Policies\Mozilla\Firefox\Bookmarks\1\Placement = "toolbar" | "menu"
 483 Software\Policies\Mozilla\Firefox\Bookmarks\1\Folder = "FolderName"
 484 ```
 485 #### Windows (Intune)
 486 OMA-URI:
 487 ```
 488 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Bookmarks/Bookmark01
 489 ```
 490 Value (string):
 491 ```
 492 <enabled/>
 493 <data id="BookmarkTitle" value="Example"/>
 494 <data id="BookmarkURL" value="https://example.com"/>
 495 <data id="BookmarkFavicon" value="https://example.com/favicon.ico"/>
 496 <data id="BookmarkPlacement" value="toolbar | menu"/>
 497 <data id="BookmarkFolder" value="FolderName"/>
 498 ```
 499 #### macOS
 500 ```
 501 <dict>
 502   <key>Bookmarks</key>
 503   <array>
 504     <dict>
 505       <key>Title</key>
 506       <string>Example</string>
 507       <key>URL</key>
 508       <string>https://example.com</string>
 509       <key>Favicon</key>
 510       <string>https://example.com/favicon.ico</string>
 511       <key>Placement</key>
 512       <string>toolbar | menu</string>
 513       <key>Folder</key>
 514       <string>FolderName</string>
 515     </dict>
 516   </array>
 517 </dict>
 518 ```
 519 #### policies.json
 520 ```
 521 {
 522   "policies": {
 523     "Bookmarks": [
 524       {
 525         "Title": "Example",
 526         "URL": "https://example.com",
 527         "Favicon": "https://example.com/favicon.ico",
 528         "Placement": "toolbar" | "menu",
 529         "Folder": "FolderName"
 530       }
 531     ]
 532   }
 533 }
 534 ```
 535 ### CaptivePortal
 536 Enable or disable the detection of captive portals.
 537
 538 **Compatibility:** Firefox 67, Firefox ESR 60.7\
 539 **CCK2 Equivalent:** N/A\
 540 **Preferences Affected:** `network.captive-portal-service.enabled`
 541
 542 #### Windows (GPO)
 543 ```
 544 Software\Policies\Mozilla\Firefox\CaptivePortal = 0x1 | 0x0
 545 ```
 546 #### Windows (Intune)
 547 OMA-URI:
 548 ```
 549 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/CaptivePortal
 550 ```
 551 Value (string):
 552 ```
 553 <enabled/> or <disabled/>
 554 ```
 555 #### macOS
 556 ```
 557 <dict>
 558   <key>CaptivePortal</key>
 559   <true/> | <false/>
 560 </dict>
 561 ```
 562 #### policies.json
 563 ```
 564 {
 565   "policies": {
 566     "CaptivePortal": true | false
 567   }
 568 }
 569 ```
 570 ### Certificates
 571
 572 ### Certificates | ImportEnterpriseRoots
 573
 574 Trust certificates that have been added to the operating system certificate store by a user or administrator.
 575
 576 Note: This policy only works on Windows and macOS. For Linux discussion, see [bug 1600509](https://bugzilla.mozilla.org/show_bug.cgi?id=1600509).
 577
 578 See https://support.mozilla.org/kb/setting-certificate-authorities-firefox for more detail.
 579
 580 **Compatibility:** Firefox 60, Firefox ESR 60 (macOS support in Firefox 63, Firefox ESR 68)\
 581 **CCK2 Equivalent:** N/A\
 582 **Preferences Affected:** `security.enterprise_roots.enabled`
 583
 584 #### Windows (GPO)
 585 ```
 586 Software\Policies\Mozilla\Firefox\Certificates\ImportEnterpriseRoots = 0x1 | 0x0
 587 ```
 588 #### Windows (Intune)
 589 OMA-URI:
 590 ```
 591 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Certificates/Certificates_ImportEnterpriseRoots
 592 ```
 593 Value (string):
 594 ```
 595 <enabled/> or <disabled/>
 596 ```
 597 #### macOS
 598 ```
 599 <dict>
 600   <key>Certificates</key>
 601   <dict>
 602     <key>ImportEnterpriseRoots</key>
 603     <true/> | <false/>
 604   </dict>
 605 </dict>
 606 ```
 607 #### policies.json
 608 ```
 609 {
 610   "policies": {
 611     "Certificates": {
 612       "ImportEnterpriseRoots": true | false
 613     }
 614   }
 615 }
 616 ```
 617 ### Certificates | Install
 618
 619 Install certificates into the Firefox certificate store. If only a filename is specified, Firefox searches for the file in the following locations:
 620
 621 - Windows
 622   - %USERPROFILE%\AppData\Local\Mozilla\Certificates
 623   - %USERPROFILE%\AppData\Roaming\Mozilla\Certificates
 624 - macOS
 625   - /Library/Application Support/Mozilla/Certificates
 626   - ~/Library/Application Support/Mozilla/Certificates
 627 - Linux
 628   - /usr/lib/mozilla/certificates
 629   - /usr/lib64/mozilla/certificates
 630   - ~/.mozilla/certificates
 631
 632 Starting with Firefox 65, Firefox 60.5 ESR, a fully qualified path can be used, including UNC paths. You should use the native path style for your operating system. We do not support using %USERPROFILE% or other environment variables on Windows.
 633
 634 If you are specifying the path in the policies.json file on Windows, you need to escape your backslashes (`\\`) which means that for UNC paths, you need to escape both (`\\\\`). If you use group policy, you only need one backslash.
 635
 636 Certificates are installed using the trust string `CT,CT,`.
 637
 638 Binary (DER) and ASCII (PEM) certificates are both supported.
 639
 640 **Compatibility:** Firefox 64, Firefox ESR 64\
 641 **CCK2 Equivalent:** `certs.ca`\
 642 **Preferences Affected:** N/A
 643
 644 #### Windows (GPO)
 645 ```
 646 Software\Policies\Mozilla\Firefox\Certificates\Install\1 = "cert1.der"
 647 Software\Policies\Mozilla\Firefox\Certificates\Install\2 = "C:\Users\username\cert2.pem"
 648 ```
 649 #### Windows (Intune)
 650 OMA-URI:
 651 ```
 652 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Certificates/Certificates_Install
 653 ```
 654 Value (string):
 655 ```
 656 <enabled/>
 657 <data id="Certificates_Install" value="1&#xF000;cert1.der&#xF000;2&#xF000;C:\Users\username\cert2.pem"/>
 658 ```
 659 #### macOS
 660 ```
 661 <dict>
 662   <key>Certificates</key>
 663   <dict>
 664     <key>Install</key>
 665     <array>
 666       <string>cert1.der</string>
 667       <string>/Users/username/cert2.pem</string>
 668     </array>
 669   </dict>
 670 </dict>
 671 ```
 672 #### policies.json
 673 ```
 674 {
 675   "policies": {
 676     "Certificates": {
 677       "Install": ["cert1.der", "/home/username/cert2.pem"]
 678     }
 679   }
 680 }
 681 ```
 682 ### Cookies
 683 Configure cookie preferences.
 684
 685 `Allow` is a list of origins (not domains) where cookies are always allowed. You must include http or https.
 686
 687 `AllowSession` is a list of origins (not domains) where cookies are only allowed for the current session. You must include http or https.
 688
 689 `Block` is a list of origins (not domains) where cookies are always blocked. You must include http or https.
 690
 691 `Default` determines whether cookies are accepted at all.
 692
 693 `AcceptThirdParty` determines how third-party cookies are handled.
 694
 695 `ExpireAtSessionEnd` determines when cookies expire.
 696
 697 `RejectTracker` only rejects cookies for trackers.
 698
 699 `Locked` prevents the user from changing cookie preferences.
 700
 701 **Compatibility:** Firefox 60, Firefox ESR 60 (RejectTracker added in Firefox 63, AllowSession added in Firefox 79/78.1)\
 702 **CCK2 Equivalent:** N/A\
 703 **Preferences Affected:** `network.cookie.cookieBehavior`,`network.cookie.lifetimePolicy`
 704
 705 #### Windows (GPO)
 706 ```
 707 Software\Policies\Mozilla\Firefox\Cookies\Allow\1 = "https://example.com"
 708 Software\Policies\Mozilla\Firefox\Cookies\AllowSession\1 = "https://example.edu"
 709 Software\Policies\Mozilla\Firefox\Cookies\Block\1 = "https://example.org"
 710 Software\Policies\Mozilla\Firefox\Cookies\Default = 0x1 | 0x0
 711 Software\Policies\Mozilla\Firefox\Cookies\AcceptThirdParty = "always" | "never" | "from-visited"
 712 Software\Policies\Mozilla\Firefox\Cookies\ExpireAtSessionEnd = 0x1 | 0x0
 713 Software\Policies\Mozilla\Firefox\Cookies\RejectTracker = 0x1 | 0x0
 714 Software\Policies\Mozilla\Firefox\Cookies\Locked = 0x1 | 0x0
 715 ```
 716 #### Windows (Intune)
 717 OMA-URI:
 718 ```
 719 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Allow
 720 ```
 721 Value (string):
 722 ```
 723 <enabled/>
 724 <data id="Cookies_Allow" value="1&#xF000;https://example.com"/>
 725 ```
 726 OMA-URI:
 727 ```
 728 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_AllowSession
 729 ```
 730 Value (string):
 731 ```
 732 <enabled/>
 733 <data id="Cookies_Allow" value="1&#xF000;https://example.edu"/>
 734 ```
 735 OMA-URI:
 736 ```
 737 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Block
 738 ```
 739 Value (string):
 740 ```
 741 <enabled/>
 742 <data id="Cookies_Block" value="1&#xF000;https://example.org"/>
 743 ```
 744 OMA-URI:
 745 ```
 746 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Default
 747 ```
 748 Value (string):
 749 ```
 750 <enabled/> or <disabled/>
 751 ```
 752 OMA-URI:
 753 ```
 754 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_AcceptThirdParty
 755 ```
 756 Value (string):
 757 ```
 758 <enabled/>
 759 <data id="Cookies_AcceptThirdParty" value="always | never | from-visited"/>
 760 ```
 761 OMA-URI:
 762 ```
 763 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_ExpireAtSessionEnd
 764 ```
 765 Value (string):
 766 ```
 767 <enabled/> or <disabled/>
 768 ```
 769 OMA-URI:
 770 ```
 771 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_RejectTracker
 772 ```
 773 Value (string):
 774 ```
 775 <enabled/> or <disabled/>
 776 ```
 777 OMA-URI:
 778 ```
 779 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Locked
 780 ```
 781 Value (string):
 782 ```
 783 <enabled/> or <disabled/>
 784 ```
 785 #### macOS
 786 ```
 787 <dict>
 788   <key>Cookies</key>
 789   <dict>
 790     <key>Allow</key>
 791     <array>
 792       <string>http://example.com</string>
 793     </array>
 794     <key>AllowSession</key>
 795     <array>
 796       <string>http://example.edu</string>
 797     </array>
 798     <key>Block</key>
 799     <array>
 800       <string>http://example.org</string>
 801     </array>
 802     <key>Default</key>
 803     <true/> | <false/>
 804     <key>AcceptThirdParty</key>
 805     <string>always | never | from-visited</string>
 806     <key>ExpireAtSessionEnd</key>
 807     <true/> | <false/>
 808     <key>RejectTracker</key>
 809     <true/> | <false/>
 810     <key>Locked</key>
 811     <true/> | <false/>
 812   </dict>
 813 </dict>
 814 ```
 815 #### policies.json
 816 ```
 817 {
 818   "policies": {
 819     "Cookies": {
 820       "Allow": ["http://example.org/"],
 821       "AllowSession": ["http://example.edu/"],
 822       "Block": ["http://example.edu/"],
 823       "Default": true | false,
 824       "AcceptThirdParty": "always" | "never" | "from-visited",
 825       "ExpireAtSessionEnd": true | false,
 826       "RejectTracker": true | false,
 827       "Locked": true | false
 828     }
 829   }
 830 }
 831 ```
 832 ### DisableSetDesktopBackground
 833 Remove the "Set As Desktop Background..." menuitem when right clicking on an image.
 834
 835 **Compatibility:** Firefox 60, Firefox ESR 60\
 836 **CCK2 Equivalent:** `removeSetDesktopBackground`\
 837 **Preferences Affected:** N/A
 838
 839 #### Windows (GPO)
 840 ```
 841 Software\Policies\Mozilla\Firefox\DisableSetDesktopBackground = 0x1 | 0x0
 842 ```
 843 #### Windows (Intune)
 844 OMA-URI:
 845 ```
 846 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSetDesktopBackground
 847 ```
 848 Value (string):
 849 ```
 850 <enabled/> or <disabled/>
 851 ```
 852 #### macOS
 853 ```
 854 <dict>
 855   <key>DisableSetDesktopBackground</key>
 856   <true/> | <false/>
 857 </dict>
 858 ```
 859 #### policies.json
 860 ```
 861 {
 862   "policies": {
 863     "DisableSetDesktopBackground": true | false
 864   }
 865 }
 866 ```
 867 ### DisableMasterPasswordCreation
 868 Remove the master password functionality.
 869
 870 If this value is true, it works the same as setting [`PrimaryPassword`](#primarypassword) to false and removes the primary password functionality.
 871
 872 If both DisableMasterPasswordCreation and PrimaryPassword are used, DisableMasterPasswordCreation takes precedent.
 873
 874 **Compatibility:** Firefox 60, Firefox ESR 60\
 875 **CCK2 Equivalent:** `noMasterPassword`\
 876 **Preferences Affected:** N/A
 877
 878 #### Windows (GPO)
 879 ```
 880 Software\Policies\Mozilla\Firefox\DisableMasterPasswordCreation = 0x1 | 0x0
 881 ```
 882 #### Windows (Intune)
 883 OMA-URI:
 884 ```
 885 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableMasterPasswordCreation
 886 ```
 887 Value (string):
 888 ```
 889 <enabled/> or <disabled/>
 890 ```
 891 #### macOS
 892 ```
 893 <dict>
 894   <key>DisableMasterPasswordCreation</key>
 895   <true/> | <false/>
 896 </dict>
 897 ```
 898 #### policies.json
 899 ```
 900 {
 901   "policies": {
 902     "DisableMasterPasswordCreation": true | false
 903   }
 904 }
 905 ```
 906 ### DisableAppUpdate
 907 Turn off application updates within Firefox.
 908
 909 **Compatibility:** Firefox 60, Firefox ESR 60\
 910 **CCK2 Equivalent:** `disableFirefoxUpdates`\
 911 **Preferences Affected:** N/A
 912
 913 #### Windows (GPO)
 914 ```
 915 Software\Policies\Mozilla\Firefox\DisableAppUpdate = 0x1 | 0x0
 916 ```
 917 #### Windows (Intune)
 918 OMA-URI:
 919 ```
 920 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableAppUpdate
 921 ```
 922 Value (string):
 923 ```
 924 <enabled/> or <disabled/>
 925 ```
 926 #### macOS
 927 ```
 928 <dict>
 929   <key>DisableAppUpdate</key>
 930   <true/> | <false/>
 931 </dict>
 932 ```
 933 #### policies.json
 934 ```
 935 {
 936   "policies": {
 937     "DisableAppUpdate": true | false
 938   }
 939 }
 940 ```
 941 ### DisableBuiltinPDFViewer
 942 Disable the built in PDF viewer. PDF files are downloaded and sent externally.
 943
 944 **Compatibility:** Firefox 60, Firefox ESR 60\
 945 **CCK2 Equivalent:** `disablePDFjs`\
 946 **Preferences Affected:** `pdfjs.disabled`
 947
 948 #### Windows (GPO)
 949 ```
 950 Software\Policies\Mozilla\Firefox\DisableBuiltinPDFViewer = 0x1 | 0x0
 951 ```
 952 #### Windows (Intune)
 953 OMA-URI:
 954 ```
 955 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableBuiltinPDFViewer
 956 ```
 957 Value (string):
 958 ```
 959 <enabled/> or <disabled/>
 960 ```
 961 #### macOS
 962 ```
 963 <dict>
 964   <key>DisableBuiltinPDFViewer</key>
 965   <true/> | <false/>
 966 </dict>
 967 ```
 968 #### policies.json
 969 ```
 970 {
 971   "policies": {
 972     "DisableBuiltinPDFViewer": true | false
 973   }
 974 }
 975 ```
 976 ### DisabledCiphers
 977 Disable specific cryptographic ciphers.
 978
 979 ---
 980 **Note:**
 981
 982 This policy was updated in Firefox 78 to allow enabling ciphers as well. Setting the value to true disables the cipher, setting the value to false enables the cipher. Previously setting the value to true or false disabled the cipher.
 983
 984 ---
 985 **Compatibility:** Firefox 76, Firefox ESR 68.8 (TLS_RSA_WITH_AES_128_GCM_SHA256 and TLS_RSA_WITH_AES_256_GCM_SHA384 were added in Firefox 78)\
 986 **CCK2 Equivalent:** N/A\
 987 **Preferences Affected:** N/A
 988
 989 #### Windows (GPO)
 990 ```
 991 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_DHE_RSA_WITH_AES_128_CBC_SHA = 0x1 | 0x0
 992 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_DHE_RSA_WITH_AES_256_CBC_SHA = 0x1 | 0x0
 993 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA = 0x1 | 0x0
 994 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA = 0x1 | 0x0
 995 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 = 0x1 | 0x0
 996 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 = 0x1 | 0x0
 997 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_RSA_WITH_AES_128_CBC_SHA = 0x1 | 0x0
 998 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_RSA_WITH_AES_256_CBC_SHA = 0x1 | 0x0
 999 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_RSA_WITH_3DES_EDE_CBC_SHA = 0x1 | 0x0
1000 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_RSA_WITH_AES_128_GCM_SHA256 = 0x1 | 0x0
1001 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_RSA_WITH_AES_256_GCM_SHA384 = 0x1 | 0x0
1002 ```
1003 #### Windows (Intune)
1004 OMA-URI:
1005 ```
1006 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_DHE_RSA_WITH_AES_128_CBC_SHA
1007 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_DHE_RSA_WITH_AES_256_CBC_SHA
1008 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
1009 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
1010 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
1011 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
1012 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_RSA_WITH_AES_128_CBC_SHA
1013 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_RSA_WITH_AES_256_CBC_SHA
1014 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_RSA_WITH_3DES_EDE_CBC_SHA
1015 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_RSA_WITH_AES_128_GCM_SHA256
1016 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_RSA_WITH_AES_256_GCM_SHA384
1017 ```
1018 Value (string):
1019 ```
1020 <enabled/> or <disabled/>
1021 ```
1022 #### macOS
1023 ```
1024 <dict>
1025   <key>DisabledCiphers</key>
1026     <dict>
1027       <key>TLS_DHE_RSA_WITH_AES_128_CBC_SHA</key>
1028       <true/> | <false/>
1029       <key>TLS_DHE_RSA_WITH_AES_256_CBC_SHA</key>
1030       <true/> | <false/>
1031       <key>TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA</key>
1032       <true/> | <false/>
1033       <key>TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA</key>
1034       <true/> | <false/>
1035       <key>TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256</key>
1036       <true/> | <false/>
1037       <key>TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256</key>
1038       <true/> | <false/>
1039       <key>TLS_RSA_WITH_AES_128_CBC_SHA</key>
1040       <true/> | <false/>
1041       <key>TLS_RSA_WITH_AES_256_CBC_SHA</key>
1042       <true/> | <false/>
1043       <key>TLS_RSA_WITH_3DES_EDE_CBC_SHA</key>
1044       <true/> | <false/>
1045       <key>TLS_RSA_WITH_AES_128_GCM_SHA256</key>
1046       <true/> | <false/>
1047       <key>TLS_RSA_WITH_AES_256_GCM_SHA384</key>
1048       <true/> | <false/>
1049     </dict>
1050 </dict>
1051 ```
1052 #### policies.json
1053 ```
1054 {
1055   "policies": {
1056     "DisabledCiphers": {
1057       "TLS_DHE_RSA_WITH_AES_128_CBC_SHA": true | false,
1058       "TLS_DHE_RSA_WITH_AES_256_CBC_SHA": true | false,
1059       "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA": true | false,
1060       "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA": true | false,
1061       "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256": true | false,
1062       "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256": true | false,
1063       "TLS_RSA_WITH_AES_128_CBC_SHA": true | false,
1064       "TLS_RSA_WITH_AES_256_CBC_SHA": true | false,
1065       "TLS_RSA_WITH_3DES_EDE_CBC_SHA": true | false,
1066       "TLS_RSA_WITH_AES_128_GCM_SHA256": true | false,
1067       "TLS_RSA_WITH_AES_256_GCM_SHA384": true | false
1068     }
1069   }
1070 }
1071 ```
1072 ### DisableDefaultBrowserAgent
1073 Prevent the default browser agent from taking any actions. Only applicable to Windows; other platforms don’t have the agent.
1074
1075 The browser agent is a Windows-only scheduled task which runs in the background to collect and submit data about the browser that the user has set as their OS default. More information is available [here](https://firefox-source-docs.mozilla.org/toolkit/mozapps/defaultagent/default-browser-agent/index.html).
1076
1077 **Compatibility:** Firefox 75, Firefox ESR 68.7 (Windows only)\
1078 **CCK2 Equivalent:** N/A\
1079 **Preferences Affected:** N/A
1080
1081 #### Windows (GPO)
1082 ```
1083 Software\Policies\Mozilla\Firefox\DisableDefaultBrowserAgent = 0x1 | 0x0
1084 ```
1085 #### Windows (Intune)
1086 OMA-URI:
1087 ```
1088 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableDefaultBrowserAgent
1089 ```
1090 Value (string):
1091 ```
1092 <enabled/> or <disabled/>
1093 ```
1094 #### policies.json
1095 ```
1096 {
1097   "policies": {
1098     "DisableDefaultBrowserAgent": true | false
1099   }
1100 }
1101 ```
1102 ### DisableDeveloperTools
1103 Remove access to all developer tools.
1104
1105 **Compatibility:** Firefox 60, Firefox ESR 60\
1106 **CCK2 Equivalent:** `removeDeveloperTools`\
1107 **Preferences Affected:** `devtools.policy.disabled`
1108
1109 #### Windows (GPO)
1110 ```
1111 Software\Policies\Mozilla\Firefox\DisableDeveloperTools = 0x1 | 0x0`
1112 ```
1113 #### Windows (Intune)
1114 OMA-URI:
1115 ```
1116 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableDeveloperTools
1117 ```
1118 Value (string):
1119 ```
1120 <enabled/> or <disabled/>
1121 ```
1122 #### macOS
1123 ```
1124 <dict>
1125   <key>DisableDeveloperTools</key>
1126   <true/> | <false/>
1127 </dict>
1128 ```
1129 #### policies.json
1130 ```
1131 {
1132   "policies": {
1133     "DisableDeveloperTools": true | false
1134   }
1135 }
1136 ```
1137 ### DisableFeedbackCommands
1138 Disable the menus for reporting sites (Submit Feedback, Report Deceptive Site).
1139
1140 **Compatibility:** Firefox 60, Firefox ESR 60\
1141 **CCK2 Equivalent:** N/A\
1142 **Preferences Affected:** N/A
1143
1144 #### Windows (GPO)
1145 ```
1146 Software\Policies\Mozilla\Firefox\DisableFeedbackCommands = 0x1 | 0x0
1147 ```
1148 #### Windows (Intune)
1149 OMA-URI:
1150 ```
1151 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFeedbackCommands
1152 ```
1153 Value (string):
1154 ```
1155 <enabled/> or <disabled/>
1156 ```
1157 #### macOS
1158 ```
1159 <dict>
1160   <key>DisableFeedbackCommands</key>
1161   <true/> | <false/>
1162 </dict>
1163 ```
1164 #### policies.json
1165 ```
1166 {
1167   "policies": {
1168     "DisableFeedbackCommands": true | false
1169   }
1170 }
1171 ```
1172 ### DisableFirefoxScreenshots
1173 Remove access to Firefox Screenshots.
1174
1175 **Compatibility:** Firefox 60, Firefox ESR 60\
1176 **CCK2 Equivalent:** N/A\
1177 **Preferences Affected:** `extensions.screenshots.disabled`
1178
1179 #### Windows (GPO)
1180 ```
1181 Software\Policies\Mozilla\Firefox\DisableFirefoxScreenshots = 0x1 | 0x0
1182 ```
1183 #### Windows (Intune)
1184 OMA-URI:
1185 ```
1186 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxScreenshots
1187 ```
1188 Value (string):
1189 ```
1190 <enabled/> or <disabled/>
1191 ```
1192 #### macOS
1193 ```
1194 <dict>
1195   <key>DisableFirefoxScreenshots</key>
1196   <true/> | <false/>
1197 </dict>
1198 ```
1199 #### policies.json
1200 ```
1201 {
1202   "policies": {
1203     "DisableFirefoxScreenshots": true | false
1204   }
1205 }
1206 ```
1207 ### DisableFirefoxAccounts
1208 Disable Firefox Accounts integration (Sync).
1209
1210 **Compatibility:** Firefox 60, Firefox ESR 60\
1211 **CCK2 Equivalent:** `disableSync`\
1212 **Preferences Affected:** `identity.fxaccounts.enabled`
1213
1214 #### Windows (GPO)
1215 ```
1216 Software\Policies\Mozilla\Firefox\DisableFirefoxAccounts = 0x1 | 0x0
1217 ```
1218 #### Windows (Intune)
1219 OMA-URI:
1220 ```
1221 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxAccounts
1222 ```
1223 Value (string):
1224 ```
1225 <enabled/> or <disabled/>
1226 ```
1227 #### macOS
1228 ```
1229 <dict>
1230   <key>DisableFirefoxAccounts</key>
1231   <true/> | <false/>
1232 </dict>
1233 ```
1234 #### policies.json
1235 ```
1236 {
1237   "policies": {
1238     "DisableFirefoxAccounts": true | false
1239   }
1240 }
1241 ```
1242 ### DisableFirefoxStudies
1243 Disable Firefox studies (Shield).
1244
1245 **Compatibility:** Firefox 60, Firefox ESR 60\
1246 **CCK2 Equivalent:** N/A\
1247 **Preferences Affected:** N/A
1248
1249 #### Windows (GPO)
1250 ```
1251 Software\Policies\Mozilla\Firefox\DisableFirefoxStudies = 0x1 | 0x0
1252 ```
1253 #### Windows (Intune)
1254 OMA-URI:
1255 ```
1256 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxStudies
1257 ```
1258 Value (string):
1259 ```
1260 <enabled/> or <disabled/>
1261 ```
1262 #### macOS
1263 ```
1264 <dict>
1265   <key>DisableFirefoxStudies</key>
1266   <true/> | <false/>
1267 </dict>
1268 ```
1269 #### policies.json
1270 ```
1271 {
1272   "policies": {
1273     "DisableFirefoxStudies": true | false
1274   }
1275 }
1276 ```
1277 ### DisableForgetButton
1278 Disable the "Forget" button.
1279
1280 **Compatibility:** Firefox 60, Firefox ESR 60\
1281 **CCK2 Equivalent:** `disableForget`\
1282 **Preferences Affected:** N/A
1283
1284 #### Windows (GPO)
1285 ```
1286 Software\Policies\Mozilla\Firefox\DisableForgetButton = 0x1 | 0x0
1287 ```
1288 #### Windows (Intune)
1289 OMA-URI:
1290 ```
1291 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableForgetButton
1292 ```
1293 Value (string):
1294 ```
1295 <enabled/> or <disabled/>
1296 ```
1297 #### macOS
1298 ```
1299 <dict>
1300   <key>DisableForgetButton</key>
1301   <true/> | <false/>
1302 </dict>
1303 ```
1304 #### policies.json
1305 ```
1306 {
1307   "policies": {
1308     "DisableForgetButton": true | false
1309   }
1310 }
1311 ```
1312 ### DisableFormHistory
1313 Turn off saving information on web forms and the search bar.
1314
1315 **Compatibility:** Firefox 60, Firefox ESR 60\
1316 **CCK2 Equivalent:** `disableFormFill`\
1317 **Preferences Affected:** ` browser.formfill.enable`
1318
1319 #### Windows (GPO)
1320 ```
1321 Software\Policies\Mozilla\Firefox\DisableFormHistory = 0x1 | 0x0
1322 ```
1323 #### Windows (Intune)
1324 OMA-URI:
1325 ```
1326 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFormHistory
1327 ```
1328 Value (string):
1329 ```
1330 <enabled/> or <disabled/>
1331 ```
1332 #### macOS
1333 ```
1334 <dict>
1335   <key>DisableFormHistory</key>
1336   <true/> | <false/>
1337 </dict>
1338 ```
1339 #### policies.json
1340 ```
1341 {
1342   "policies": {
1343     "DisableFormHistory": true | false
1344   }
1345 }
1346 ```
1347 ### DisablePasswordReveal
1348 Do not allow passwords to be shown in saved logins
1349
1350 **Compatibility:** Firefox 71, Firefox ESR 68.3\
1351 **CCK2 Equivalent:** N/A
1352 **Preferences Affected:** N/A
1353
1354 #### Windows (GPO)
1355 ```
1356 Software\Policies\Mozilla\Firefox\DisablePasswordReveal = 0x1 | 0x0
1357 ```
1358 #### Windows (Intune)
1359 OMA-URI:
1360 ```
1361 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePasswordReveal
1362 ```
1363 Value (string):
1364 ```
1365 <enabled/> or <disabled/>
1366 ```
1367 #### macOS
1368 ```
1369 <dict>
1370   <key>DisablePasswordReveal</key>
1371   <true/> | <false/>
1372 </dict>
1373 ```
1374 #### policies.json
1375 ```
1376 {
1377   "policies": {
1378     "DisablePasswordReveal": true | false
1379   }
1380 }
1381 ```
1382 ### DisablePocket
1383 Remove Pocket in the Firefox UI. It does not remove it from the new tab page.
1384
1385 **Compatibility:** Firefox 60, Firefox ESR 60\
1386 **CCK2 Equivalent:** `disablePocket`\
1387 **Preferences Affected:** `extensions.pocket.enabled`
1388
1389 #### Windows (GPO)
1390 ```
1391 Software\Policies\Mozilla\Firefox\DisablePocket = 0x1 | 0x0
1392 ```
1393 #### Windows (Intune)
1394 OMA-URI:
1395 ```
1396 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePocket
1397 ```
1398 Value (string):
1399 ```
1400 <enabled/> or <disabled/>
1401 ```
1402 #### macOS
1403 ```
1404 <dict>
1405   <key>DisablePocket</key>
1406   <true/> | <false/>
1407 </dict>
1408 ```
1409 #### policies.json
1410 ```
1411 {
1412   "policies": {
1413     "DisablePocket": true | false
1414   }
1415 }
1416 ```
1417 ### DisablePrivateBrowsing
1418 Remove access to private browsing.
1419
1420 **Compatibility:** Firefox 60, Firefox ESR 60\
1421 **CCK2 Equivalent:** `disablePrivateBrowsing`\
1422 **Preferences Affected:** N/A
1423
1424 #### Windows (GPO)
1425 ```
1426 Software\Policies\Mozilla\Firefox\DisablePrivateBrowsing = 0x1 | 0x0
1427 ```
1428 #### Windows (Intune)
1429 OMA-URI:
1430 ```
1431 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePrivateBrowsing
1432 ```
1433 Value (string):
1434 ```
1435 <enabled/> or <disabled/>
1436 ```
1437 #### macOS
1438 ```
1439 <dict>
1440   <key>DisablePrivateBrowsing</key>
1441   <true/> | <false/>
1442 </dict>
1443 ```
1444 #### policies.json
1445 ```
1446 {
1447   "policies": {
1448     "DisablePrivateBrowsing": true | false
1449   }
1450 }
1451 ```
1452 ### DisableProfileImport
1453 Disables the "Import data from another browser" option in the bookmarks window.
1454
1455 **Compatibility:** Firefox 60, Firefox ESR 60\
1456 **CCK2 Equivalent:** N/A\
1457 **Preferences Affected:** N/A
1458
1459 #### Windows (GPO)
1460 ```
1461 Software\Policies\Mozilla\Firefox\DisableProfileImport = 0x1 | 0x0
1462 ```
1463 #### Windows (Intune)
1464 OMA-URI:
1465 ```
1466 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableProfileImport
1467 ```
1468 Value (string):
1469 ```
1470 <enabled/> or <disabled/>
1471 ```
1472 #### macOS
1473 ```
1474 <dict>
1475   <key>DisableProfileImport</key>
1476   <true/> | <false/>
1477 </dict>
1478 ```
1479 #### policies.json
1480 ```
1481 {
1482   "policies": {
1483     "DisableProfileImport": true | false
1484   }
1485 }
1486 ```
1487 ### DisableProfileRefresh
1488 Disable the Refresh Firefox button on about:support and support.mozilla.org, as well as the prompt that displays offering to refresh Firefox when you haven't used it in a while.
1489
1490 **Compatibility:** Firefox 60, Firefox ESR 60\
1491 **CCK2 Equivalent:** `disableResetFirefox`\
1492 **Preferences Affected:** `browser.disableResetPrompt`
1493
1494 #### Windows (GPO)
1495 ```
1496 Software\Policies\Mozilla\Firefox\DisableProfileRefresh = 0x1 | 0x0
1497 ```
1498 #### Windows (Intune)
1499 OMA-URI:
1500 ```
1501 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableProfileRefresh
1502 ```
1503 Value (string):
1504 ```
1505 <enabled/> or <disabled/>
1506 ```
1507 #### macOS
1508 ```
1509 <dict>
1510   <key>DisableProfileRefresh</key>
1511   <true/> | <false/>
1512 </dict>
1513 ```
1514 #### policies.json
1515 ```
1516 {
1517   "policies": {
1518     "DisableProfileRefresh": true | false
1519   }
1520 }
1521 ```
1522 ### DisableSafeMode
1523 Disable safe mode within the browser.
1524
1525 On Windows, this disables safe mode via the command line as well.
1526
1527 **Compatibility:** Firefox 60, Firefox ESR 60 (Windows, macOS)\
1528 **CCK2 Equivalent:** `disableSafeMode`\
1529 **Preferences Affected:** N/A
1530
1531 #### Windows (GPO)
1532 ```
1533 Software\Policies\Mozilla\Firefox\DisableSafeMode = 0x1 | 0x0
1534 ```
1535 #### Windows (Intune)
1536 OMA-URI:
1537 ```
1538 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSafeMode
1539 ```
1540 Value (string):
1541 ```
1542 <enabled/> or <disabled/>
1543 ```
1544 #### macOS
1545 ```
1546 <dict>
1547   <key>DisableSafeMode</key>
1548   <true/> | <false/>
1549 </dict>
1550 ```
1551 #### policies.json
1552 ```
1553 {
1554   "policies": {
1555     "DisableSafeMode": true | false
1556   }
1557 }
1558 ```
1559 ### DisableSecurityBypass
1560 Prevent the user from bypassing security in certain cases.
1561
1562 `InvalidCertificate` prevents adding an exception when an invalid certificate is shown.
1563
1564 `SafeBrowsing` prevents selecting "ignore the risk" and visiting a harmful site anyway.
1565
1566 **Compatibility:** Firefox 60, Firefox ESR 60\
1567 **CCK2 Equivalent:** N/A\
1568 **Preferences Affected:** `security.certerror.hideAddException`,`browser.safebrowsing.allowOverride`
1569
1570 #### Windows (GPO)
1571 ```
1572 Software\Policies\Mozilla\Firefox\DisableSecurityBypass\InvalidCertificate = 0x1 | 0x0
1573 Software\Policies\Mozilla\Firefox\DisableSecurityBypass\SafeBrowsing = 0x1 | 0x0
1574 ```
1575 #### Windows (Intune)
1576 OMA-URI:
1577 ```
1578 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/P_DisableSecurityBypass_InvalidCertificate
1579 ```
1580 Value (string):
1581 ```
1582 <enabled/> or <disabled/>
1583 ```
1584 OMA-URI:
1585 ```
1586 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/P_DisableSecurityBypass_SafeBrowsing
1587 ```
1588 Value (string):
1589 ```
1590 <enabled/> or <disabled/>
1591 ```
1592
1593 #### macOS
1594 ```
1595 <dict>
1596   <key>DisableSecurityBypass</key>
1597   <dict>
1598     <key>InvalidCertificate</key>
1599     <true/> | <false/>
1600     <key>SafeBrowsing</key>
1601     <true/> | <false/>
1602   </dict>
1603 </dict>
1604 ```
1605 #### policies.json
1606 ```
1607 {
1608   "policies": {
1609     "DisableSecurityBypass": {
1610       "InvalidCertificate": true | false,
1611       "SafeBrowsing": true | false
1612     }
1613   }
1614 }
1615 ```
1616 ### DisableSystemAddonUpdate
1617 Prevent system add-ons from being installed or update.
1618
1619 **Compatibility:** Firefox 60, Firefox ESR 60\
1620 **CCK2 Equivalent:** N/A\
1621 **Preferences Affected:** N/A
1622
1623 #### Windows (GPO)
1624 ```
1625 Software\Policies\Mozilla\Firefox\DisableSystemAddonUpdate = 0x1 | 0x0
1626 ```
1627 #### Windows (Intune)
1628 OMA-URI:
1629 ```
1630 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSystemAddonUpdate
1631 ```
1632 Value (string):
1633 ```
1634 <enabled/> or <disabled/>
1635 ```
1636 #### macOS
1637 ```
1638 <dict>
1639   <key>DisableSystemAddonUpdate</key>
1640   <true/> | <false/>
1641 </dict>
1642 ```
1643 #### policies.json
1644 ```
1645 {
1646   "policies": {
1647     "DisableSystemAddonUpdate": true | false
1648   }
1649 }
1650 ```
1651 ### DisableTelemetry
1652 Prevent the upload of telemetry data.
1653
1654 As of Firefox 83 and Firefox ESR 78.5, local storage of telemetry data is disabled as well.
1655
1656 Mozilla recommends that you do not disable telemetry. Information collected through telemetry helps us build a better product for businesses like yours.
1657
1658 **Compatibility:** Firefox 60, Firefox ESR 60\
1659 **CCK2 Equivalent:** `disableTelemetry`\
1660 **Preferences Affected:** `datareporting.healthreport.uploadEnabled,datareporting.policy.dataSubmissionEnabled,toolkit.telemetry.archive.enabled`
1661
1662 #### Windows (GPO)
1663 ```
1664 Software\Policies\Mozilla\Firefox\DisableTelemetry = 0x1 | 0x0
1665 ```
1666 #### Windows (Intune)
1667 OMA-URI:
1668 ```
1669 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableTelemetry
1670 ```
1671 Value (string):
1672 ```
1673 <enabled/> or <disabled/>
1674 ```
1675 #### macOS
1676 ```
1677 <dict>
1678   <key>DisableTelemetry</key>
1679   <true/> | <false/>
1680 </dict>
1681 ```
1682 #### policies.json
1683 ```
1684 {
1685   "policies": {
1686     "DisableTelemetry": true | false
1687   }
1688 }
1689 ```
1690 ### DisplayBookmarksToolbar
1691 Set the initial state of the bookmarks toolbar. A user can still hide it and it will stay hidden.
1692
1693 **Compatibility:** Firefox 60, Firefox ESR 60\
1694 **CCK2 Equivalent:** `displayBookmarksToolbar`\
1695 **Preferences Affected:** N/A
1696
1697 #### Windows (GPO)
1698 ```
1699 Software\Policies\Mozilla\Firefox\DisplayBookmarksToolbar = 0x1 | 0x0
1700 ```
1701 #### Windows (Intune)
1702 OMA-URI:
1703 ```
1704 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisplayBookmarksToolbar
1705 ```
1706 Value (string):
1707 ```
1708 <enabled/> or <disabled/>
1709 ```
1710 #### macOS
1711 ```
1712 <dict>
1713   <key>DisplayBookmarksToolbar</key>
1714   <true/> | <false/>
1715 </dict>
1716 ```
1717 #### policies.json
1718 ```
1719 {
1720   "policies": {
1721     "DisplayBookmarksToolbar": true | false
1722   }
1723 }
1724 ```
1725 ### DisplayMenuBar (Deprecated)
1726 Set the initial state of the menubar. A user can still hide it and it will stay hidden.
1727
1728 **Compatibility:** Firefox 60, Firefox ESR 60 (Windows, some Linux)\
1729 **CCK2 Equivalent:** `displayMenuBar`\
1730 **Preferences Affected:** N/A
1731
1732 #### Windows (GPO)
1733 ```
1734 Software\Policies\Mozilla\Firefox\DisplayMenuBar = 0x1 | 0x0
1735 ```
1736 #### macOS
1737 ```
1738 <dict>
1739   <key>DisplayMenuBar</key>
1740   <true/> | <false/>
1741 </dict>
1742 ```
1743 #### policies.json
1744 ```
1745 {
1746   "policies": {
1747     "DisplayMenuBar": true | false
1748   }
1749 }
1750 ```
1751 ### DisplayMenuBar
1752 Set the state of the menubar.
1753
1754 `always` means the menubar is shown and cannot be hidden.
1755
1756 `never` means the menubar is hidden and cannot be shown.
1757
1758 `default-on` means the menubar is on by default but can be hidden.
1759
1760 `default-off` means the menubar is off by default but can be shown.
1761
1762 **Compatibility:** Firefox 73, Firefox ESR 68.5 (Windows, some Linux)\
1763 **CCK2 Equivalent:** `displayMenuBar`\
1764 **Preferences Affected:** N/A
1765
1766 #### Windows (GPO)
1767 ```
1768 Software\Policies\Mozilla\Firefox\DisplayMenuBar = "always", "never", "default-on", "default-off"
1769 ```
1770 #### Windows (Intune)
1771 OMA-URI:
1772 ```
1773 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisplayMenuBar_Enum
1774 ```
1775 Value (string):
1776 ```
1777 <enabled/>
1778 <data id="DisplayMenuBar" value="always | never | default-on | default-off"/>
1779 ```
1780 #### macOS
1781 ```
1782 <dict>
1783   <key>DisplayMenuBar</key>
1784   <string>always | never | default-on | default-off</string>
1785 </dict>
1786 ```
1787 #### policies.json
1788 ```
1789 {
1790   "policies": {
1791     "DisplayMenuBar": "always", "never", "default-on", "default-off"
1792   }
1793 }
1794 ```
1795 ### DNSOverHTTPS
1796 Configure DNS over HTTPS.
1797
1798 `Enabled` determines whether DNS over HTTPS is enabled
1799
1800 `ProviderURL` is a URL to another provider.
1801
1802 `Locked` prevents the user from changing DNS over HTTPS preferences.
1803
1804 `ExcludedDomains` excludes domains from DNS over HTTPS.
1805
1806 **Compatibility:** Firefox 63, Firefox ESR 68 (ExcludedDomains added in 75/68.7)\
1807 **CCK2 Equivalent:** N/A\
1808 **Preferences Affected:** `network.trr.mode`,`network.trr.uri`
1809
1810 #### Windows (GPO)
1811 ```
1812 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\Enabled = 0x1 | 0x0
1813 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\ProviderURL = "URL_TO_ALTERNATE_PROVIDER"
1814 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\Locked = 0x1 | 0x0
1815 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\ExcludedDomains\1 = "example.com"
1816 ```
1817 #### Windows (Intune)
1818 OMA-URI:
1819 ```
1820 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_Enabled
1821 ```
1822 Value (string):
1823 ```
1824 <enabled/> or <disabled/>
1825 ```
1826 OMA-URI:
1827 ```
1828 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_ProviderURL
1829 ```
1830 Value (string):
1831 ```
1832 <enabled/>
1833 <data id="String" value="URL_TO_ALTERNATE_PROVIDER"/>
1834 ```
1835 OMA-URI:
1836 ```
1837 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_Locked
1838 ```
1839 Value (string):
1840 ```
1841 <enabled/> or <disabled/>
1842 ```
1843 OMA-URI:
1844 ```
1845 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_ExcludedDomains
1846 ```
1847 Value (string):
1848 ```
1849 <enabled/>
1850 <data id="List" value="1&#xF000;example.com"/>
1851 ```
1852 #### macOS
1853 ```
1854 <dict>
1855   <key>DNSOverHTTPS</key>
1856   <dict>
1857     <key>Enabled</key>
1858     <true/> | <false/>
1859     <key>ProviderURL</key>
1860     <string>URL_TO_ALTERNATE_PROVIDER</string>
1861     <key>Locked</key>
1862     <true/> | <false/>
1863     <key>ExcludedDomains</key>
1864     <array>
1865       <string>example.com</string>
1866     </array>
1867   </dict>
1868 </dict>
1869 ```
1870 #### policies.json
1871 ```
1872 {
1873   "policies": {
1874     "DNSOverHTTPS": {
1875       "Enabled":  true | false,
1876       "ProviderURL": "URL_TO_ALTERNATE_PROVIDER",
1877       "Locked": true | false,
1878       "ExcludedDomains": ["example.com"]
1879     }
1880   }
1881 }
1882 ```
1883 ### DontCheckDefaultBrowser
1884 Don't check if Firefox is the default browser at startup.
1885
1886 **Compatibility:** Firefox 60, Firefox ESR 60\
1887 **CCK2 Equivalent:** `dontCheckDefaultBrowser`\
1888 **Preferences Affected:** `browser.shell.checkDefaultBrowser`
1889
1890 #### Windows (GPO)
1891 ```
1892 Software\Policies\Mozilla\Firefox\DontCheckDefaultBrowser = 0x1 | 0x0
1893 ```
1894 #### Windows (Intune)
1895 OMA-URI:
1896 ```
1897 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DontCheckDefaultBrowser
1898 ```
1899 Value (string):
1900 ```
1901 <enabled/> or <disabled/>
1902 ```
1903 #### macOS
1904 ```
1905 <dict>
1906   <key>DontCheckDefaultBrowser</key>
1907   <true/> | <false/>
1908 </dict>
1909 ```
1910 #### policies.json
1911 ```
1912 {
1913   "policies": {
1914     "DontCheckDefaultBrowser": true | false
1915   }
1916 }
1917 ```
1918 ### DefaultDownloadDirectory
1919 Set the default download directory.
1920
1921 You can use ${home} for the native home directory.
1922
1923 **Compatibility:** Firefox 68, Firefox ESR 68\
1924 **CCK2 Equivalent:** N/A\
1925 **Preferences Affected:** `browser.download.dir`,`browser.download.folderList`
1926
1927 #### Windows (GPO)
1928 ```
1929 Software\Policies\Mozilla\Firefox\DefaultDownloadDirectory = "${home}\Downloads"
1930 ```
1931 #### Windows (Intune)
1932 OMA-URI:
1933 ```
1934 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DefaultDownloadDirectory
1935 ```
1936 Value (string):
1937 ```
1938 <enabled/>
1939 <data id="Preferences_String" value="${home}\Downloads"/>
1940 ```
1941 #### macOS
1942 ```
1943 <dict>
1944   <key>DefaultDownloadDirectory</key>
1945   <string>${home}/Downloads</string>
1946 </dict>
1947 ```
1948 #### policies.json (macOS and Linux)
1949 ```
1950 {
1951   "policies": {
1952     "DefaultDownloadDirectory": "${home}/Downloads"
1953 }
1954 ```
1955 #### policies.json (Windows)
1956 ```
1957 {
1958   "policies": {
1959     "DefaultDownloadDirectory": "${home}\\Downloads"
1960 }
1961 ```
1962 ### DownloadDirectory
1963 Set and lock the download directory.
1964
1965 You can use ${home} for the native home directory.
1966
1967 **Compatibility:** Firefox 68, Firefox ESR 68\
1968 **CCK2 Equivalent:** N/A\
1969 **Preferences Affected:** `browser.download.dir`,`browser.download.folderList`,`browser.download.useDownloadDir`
1970
1971 #### Windows (GPO)
1972 ```
1973 Software\Policies\Mozilla\Firefox\DownloadDirectory = "${home}\Downloads"
1974 ```
1975 #### Windows (Intune)
1976 OMA-URI:
1977 ```
1978 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DownloadDirectory
1979 ```
1980 Value (string):
1981 ```
1982 <enabled/>
1983 <data id="Preferences_String" value="${home}\Downloads"/>
1984 ```
1985 #### macOS
1986 ```
1987 <dict>
1988   <key>DownloadDirectory</key>
1989   <string>${home}/Downloads</string>
1990 </dict>
1991 ```
1992 #### policies.json (macOS and Linux)
1993 ```
1994 {
1995   "policies": {
1996     "DownloadDirectory": "${home}/Downloads"
1997 }
1998 ```
1999 #### policies.json (Windows)
2000 ```
2001 {
2002   "policies": {
2003     "DownloadDirectory": "${home}\\Downloads"
2004 }
2005 ```
2006 ### EnableTrackingProtection
2007 Configure tracking protection.
2008
2009 If this policy is not configured, tracking protection is not enabled by default in the browser, but it is enabled by default in private browsing and the user can change it.
2010
2011 If `Value` is set to false, tracking protection is disabled and locked in both the regular browser and private browsing.
2012
2013 If `Value` is set to true, tracking protection is enabled by default in both the regular browser and private browsing and the `Locked` value determines whether or not a user can change it.
2014
2015 If `Cryptomining` is set to true, cryptomining scripts on websites are blocked.
2016
2017 If `Fingerprinting` is set to true, fingerprinting scripts on websites are blocked.
2018
2019 `Exceptions` are origins for which tracking protection is not enabled.
2020
2021 **Compatibility:** Firefox 60, Firefox ESR 60 (Cryptomining and Fingerprinting added in 70/68.2, Exceptions added in 73/68.5)\
2022 **CCK2 Equivalent:** N/A\
2023 **Preferences Affected:** `privacy.trackingprotection.enabled`,`privacy.trackingprotection.pbmode.enabled`,`privacy.trackingprotection.cryptomining.enabled`,`privacy.trackingprotection.fingerprinting.enabled`
2024
2025 #### Windows (GPO)
2026 ```
2027 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Value = 0x1 | 0x0
2028 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Locked = 0x1 | 0x0
2029 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Cryptomining = 0x1 | 0x0
2030 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Fingerprinting = 0x1 | 0x0
2031 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Exceptions\1 = "https://example.com"
2032 ```
2033 #### Windows (Intune)
2034 OMA-URI:
2035 ```
2036 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/A_TrackingProtection_Value
2037 ```
2038 Value (string):
2039 ```
2040 <enabled/> or <disabled/>
2041 ```
2042 OMA-URI:
2043 ```
2044 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/B_TrackingProtection_Cryptomining
2045 ```
2046 Value (string):
2047 ```
2048 <enabled/> or <disabled/>
2049 ```
2050 OMA-URI:
2051 ```
2052 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/C_TrackingProtection_Fingerprinting
2053 ```
2054 Value (string):
2055 ```
2056 <enabled/> or <disabled/>
2057 ```
2058 OMA-URI:
2059 ```
2060 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/D_TrackingProtection_Exceptions
2061 ```
2062 Value (string):
2063 ```
2064 <data id="TrackingProtection_Exceptions" value="1&#xF000;https://example.com"/>
2065 ```
2066 OMA-URI:
2067 ```
2068 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/E_TrackingProtection_Locked
2069 ```
2070 Value (string):
2071 ```
2072 <enabled/> or <disabled/>
2073 ```
2074 #### macOS
2075 ```
2076 <dict>
2077   <key>EnableTrackingProtection</key>
2078   <dict>
2079     <key>Value</key>
2080     <true/> | <false/>
2081     <key>Locked</key>
2082     <true/> | <false/>
2083     <key>Cryptomining</key>
2084     <true/> | <false/>
2085     <key>Fingerprinting</key>
2086     <true/> | <false/>
2087     <key>Exceptions</key>
2088     <array>
2089       <string>https://example.com</string>
2090     </array>
2091   </dict>
2092 </dict>
2093 ```
2094 #### policies.json
2095 ```
2096 {
2097   "policies": {
2098     "EnableTrackingProtection": {
2099       "Value": true | false,
2100       "Locked": true | false,
2101       "Cryptomining": true | false,
2102       "Fingerprinting": true | false,
2103       "Exceptions": ["https://example.com"]
2104     }
2105 }
2106 ```
2107 ### EncryptedMediaExtensions
2108 Enable or disable Encrypted Media Extensions and optionally lock it.
2109
2110 If `Enabled` is set to false, encrypted media extensions (like Widevine) are not downloaded by Firefox unless the user consents to installing them.
2111
2112 If `Locked` is set to true and `Enabled` is set to false, Firefox will not download encrypted media extensions (like Widevine) or ask the user to install them.
2113
2114 **Compatibility:** Firefox 77, Firefox ESR 68.9\
2115 **CCK2 Equivalent:** N/A\
2116 **Preferences Affected:** `media.eme.enabled`
2117
2118 #### Windows (GPO)
2119 ```
2120 Software\Policies\Mozilla\Firefox\EncryptedMediaExtensions\Enabled = 0x1 | 0x0
2121 Software\Policies\Mozilla\Firefox\EncryptedMediaExtensions\Locked = 0x1 | 0x0
2122 ```
2123 #### Windows (Intune)
2124 OMA-URI:
2125 ```
2126 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~EncryptedMediaExtensions/EncryptedMediaExtensions_Enabled
2127 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~EncryptedMediaExtensions/EncryptedMediaExtensions_Locked
2128 ```
2129 Value (string):
2130 ```
2131 <enabled/>or <disabled/>
2132 ```
2133 #### macOS
2134 ```
2135 <dict>
2136   <key>EncryptedMediaExtensions</key>
2137   <dict>
2138     <key>Enabled</key>
2139     <true/> | <false/>
2140     <key>Locked</key>
2141     <true/> | <false/>
2142   </dict>
2143 </dict>
2144 ```
2145 #### policies.json
2146 ```
2147 {
2148   "policies": {
2149     "EncryptedMediaExtensions": {
2150       "Enabled": true | false,
2151       "Locked": true | false
2152     }
2153 }
2154 ```
2155 ### EnterprisePoliciesEnabled
2156 Enable policy support on macOS.
2157
2158 **Compatibility:** Firefox 63, Firefox ESR 60.3 (macOS only)\
2159 **CCK2 Equivalent:** N/A\
2160 **Preferences Affected:** N/A
2161
2162 #### macOS
2163 ```
2164 <dict>
2165   <key>EnterprisePoliciesEnabled</key>
2166   <true/>
2167 </dict>
2168 ```
2169 ### Extensions
2170 Control the installation, uninstallation and locking of extensions.
2171
2172 `Install` is a list of URLs or native paths for extensions to be installed.
2173
2174 `Uninstall` is a list of extension IDs that should be uninstalled if found.
2175
2176 `Locked` is a list of extension IDs that the user cannot disable or uninstall.
2177
2178 **Compatibility:** Firefox 60, Firefox ESR 60\
2179 **CCK2 Equivalent:** `addons`\
2180 **Preferences Affected:** N/A
2181
2182 #### Windows (GPO)
2183 ```
2184 Software\Policies\Mozilla\Firefox\Extensions\Install\1 = "https://addons.mozilla.org/firefox/downloads/somefile.xpi"
2185 Software\Policies\Mozilla\Firefox\Extensions\Install\2 = "//path/to/xpi"
2186 Software\Policies\Mozilla\Firefox\Extensions\Uninstall\1 = "bad_addon_id@mozilla.org"
2187 Software\Policies\Mozilla\Firefox\Extensions\Locked\1 = "addon_id@mozilla.org"
2188 ```
2189 #### Windows (Intune)
2190 OMA-URI:
2191 ```
2192 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/Extensions_Install
2193 ```
2194 Value (string):
2195 ```
2196 <enabled/>
2197 <data id="Extensions" value="1&#xF000;https://addons.mozilla.org/firefox/downloads/somefile.xpi&#xF000;2&#xF000;//path/to/xpi"/>
2198 ```
2199 OMA-URI:
2200 ```
2201 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/Extensions_Uninstall
2202 ```
2203 Value (string):
2204 ```
2205 <enabled/>
2206 <data id="Extensions" value="1&#xF000;bad_addon_id@mozilla.org"/>
2207 ```
2208 OMA-URI:
2209 ```
2210 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/Extensions_Locked
2211 ```
2212 Value (string):
2213 ```
2214 <enabled/>
2215 <data id="Extensions" value="1&#xF000;addon_id@mozilla.org"/>
2216 ```
2217 #### macOS
2218 ```
2219 <dict>
2220   <key>Extensions</key>
2221   <dict>
2222     <key>Install</key>
2223     <array>
2224       <string>https://addons.mozilla.org/firefox/downloads/somefile.xpi</string>
2225       <string>//path/to/xpi</string>
2226     </array>
2227     <key>Uninstall</key>
2228     <array>
2229       <string>bad_addon_id@mozilla.org</string>
2230     </array>
2231     <key>Locked</key>
2232     <array>
2233       <string>addon_id@mozilla.org</string>
2234     </array>
2235   </dict>
2236 </dict>
2237 ```
2238 #### policies.json
2239 ```
2240 {
2241   "policies": {
2242     "Extensions": {
2243       "Install": ["https://addons.mozilla.org/firefox/downloads/somefile.xpi", "//path/to/xpi"],
2244       "Uninstall": ["bad_addon_id@mozilla.org"],
2245       "Locked":  ["addon_id@mozilla.org"]
2246     }
2247   }
2248 }
2249 ```
2250 ### ExtensionSettings
2251 Manage all aspects of extensions. This policy is based heavily on the [Chrome policy](https://dev.chromium.org/administrators/policy-list-3/extension-settings-full) of the same name.
2252
2253 This policy maps an extension ID to its configuration. With an extension ID, the configuration will be applied to the specified extension only. A default configuration can be set for the special ID "*", which will apply to all extensions that don't have a custom configuration set in this policy.
2254
2255 To obtain an extension ID, install the extension and go to about:support. You will see the ID in the Extensions section. I've also created an extension that makes it easy to find the ID of extensions on AMO. You can download it [here](https://github.com/mkaply/queryamoid/releases/tag/v0.1).
2256
2257 The configuration for each extension is another dictionary that can contain the fields documented below.
2258
2259 | Name | Description |
2260 | --- | --- |
2261 | `installation_mode` | Maps to a string indicating the installation mode for the extension. The valid strings are `allowed`,`blocked`,`force_installed`, and `normal_installed`.
2262 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`allowed` | Allows the extension to be installed by the user. This is the default behavior. There is no need for an install_url; it will automatically be allowed based on the ID.
2263 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`blocked`| Blocks installation of the extension and removes it from the device if already installed.
2264 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`force_installed`| The extension is automatically installed and can't be removed by the user. This option is not valid for the default configuration and requires an install_url.
2265 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`normal_installed`| The extension is automatically installed but can be disabled by the user. This option is not valid for the default configuration and requires an install_url.
2266 | `install_url`| Maps to a URL indicating where Firefox can download a force_installed or normal_installed extension. If installing from the addons.mozilla.org, use the following URL (substituting SHORT_NAME from the URL on AMO), https://addons.mozilla.org/firefox/downloads/latest/SHORT_NAME/latest.xpi. If installing from the local file system, use a file:/// URL. Languages packs are available from https://releases.mozilla.org/pub/firefox/releases/VERSION/PLATFORM/xpi/LANGUAGE.xpi. If you need to update the extension, you can change the name of the extension and it will be automatically updated. Extensions installed from file URLs will additional be updated when their internal version changes.
2267 | `install_sources` | A list of sources from which installing extensions is allowed. **This is unnecessary if you are only allowing the installation of certain extensions by ID.** Each item in this list is an extension-style match pattern. Users will be able to easily install items from any URL that matches an item in this list. Both the location of the *.xpi file and the page where the download is started from (i.e.  the referrer) must be allowed by these patterns. This setting can be used only for the default configuration.
2268 | `allowed_types` | This setting whitelists the allowed types of extension/apps that can be installed in Firefox. The value is a list of strings, each of which should be one of the following: "extension", "theme", "dictionary", "locale" This setting can be used only for the default configuration.
2269 | `blocked_install_message` | This maps to a string specifying the error message to display to users if they're blocked from installing an extension. This setting allows you to append text to the generic error message displayed when the extension is blocked. This could be be used to direct users to your help desk, explain why a particular extension is blocked, or something else. This setting can be used only for the default configuration.
2270 | `restricted_domains` | An array of domains on which content scripts can't be run. This setting can be used only for the default configuration.
2271
2272 **Compatibility:** Firefox 69, Firefox ESR 68.1\
2273 **CCK2 Equivalent:** N/A\
2274 **Preferences Affected:** N/A
2275
2276 #### Windows (GPO)
2277 ```
2278 Software\Policies\Mozilla\Firefox\ExtensionSettings (REG_MULTI_SZ) =
2279 {
2280   "*": {
2281     "blocked_install_message": "Custom error message.",
2282     "install_sources": ["about:addons","https://addons.mozilla.org/"],
2283     "installation_mode": "blocked",
2284     "allowed_types": ["extension"]
2285   },
2286   "uBlock0@raymondhill.net": {
2287     "installation_mode": "force_installed",
2288     "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
2289   },
2290   "https-everywhere@eff.org": {
2291     "installation_mode": "allowed",
2292   }
2293 }
2294 ```
2295 #### Windows (Intune)
2296 OMA-URI:
2297 ```
2298 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/ExtensionSettings
2299 ```
2300 Value (string):
2301 ```
2302 <enabled/>
2303 <data id="ExtensionSettings" value='
2304 {
2305   "*": {
2306     "blocked_install_message": "Custom error message.",
2307     "install_sources": ["about:addons","https://addons.mozilla.org/"],
2308     "installation_mode": "blocked",
2309     "allowed_types": ["extension"]
2310   },
2311   "uBlock0@raymondhill.net": {
2312     "installation_mode": "force_installed",
2313     "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
2314   },
2315     "https-everywhere@eff.org": {
2316     "installation_mode": "allowed",
2317   }
2318 }'/>
2319 ```
2320 #### macOS
2321 ```
2322 <dict>
2323   <key>ExtensionSettings</key>
2324   <dict>
2325     <key>*</key>
2326     <dict>
2327       <key>blocked_install_message</key>
2328       <string>Custom error message.</string>
2329       <key>install_sources</key>
2330       <array>
2331         <string>about:addons</string>
2332         <string>https://addons.mozilla.org/</string>
2333       </array>
2334       <key>installation_mode</key>
2335       <string>blocked</string>
2336       <key>allowed_types</key>
2337       <array>
2338         <string>extension</string>
2339       </array>
2340     </dict>
2341     <key>uBlock0@raymondhill.net</key>
2342     <dict>
2343       <key>installation_mode</key>
2344        <string>force_installed</string>
2345       <key>install_url</key>
2346       <string>https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi</string>
2347     </dict>
2348     <key>https-everywhere@eff.org</key>
2349     <dict>
2350       <key>installation_mode</key>
2351        <string>allowed</string>
2352     </dict>
2353   </dict>
2354 </dict>
2355 ```
2356 #### policies.json
2357 ```
2358 {
2359   "policies": {
2360     "ExtensionSettings": {
2361       "*": {
2362         "blocked_install_message": "Custom error message.",
2363         "install_sources": ["about:addons","https://addons.mozilla.org/"],
2364         "installation_mode": "blocked",
2365         "allowed_types": ["extension"]
2366       },
2367       "uBlock0@raymondhill.net": {
2368         "installation_mode": "force_installed",
2369         "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
2370       },
2371       "https-everywhere@eff.org": {
2372         "installation_mode": "allowed"
2373       }
2374     }
2375   }
2376 }
2377 ```
2378 ### ExtensionUpdate
2379 Control extension updates.
2380
2381 **Compatibility:** Firefox 67, Firefox ESR 60.7\
2382 **CCK2 Equivalent:** N/A\
2383 **Preferences Affected:** `extensions.update.enabled`
2384
2385 #### Windows (GPO)
2386 ```
2387 Software\Policies\Mozilla\Firefox\ExtensionUpdate = 0x1 | 0x0
2388 ```
2389 #### Windows (Intune)
2390 OMA-URI:
2391 ```
2392 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/ExtensionUpdate
2393 ```
2394 Value (string):
2395 ```
2396 <enabled/> or <disabled/>
2397 ```
2398 #### macOS
2399 ```
2400 <dict>
2401   <key>ExtensionUpdate</key>
2402   <true/> | <false/>
2403 </dict>
2404 ```
2405 #### policies.json
2406 ```
2407 {
2408   "policies": {
2409     "ExtensionUpdate": true | false
2410   }
2411 }
2412 ```
2413 ### FlashPlugin
2414 Configure the default Flash plugin policy as well as origins for which Flash is allowed.
2415
2416 `Allow` is a list of origins where Flash are allowed.
2417
2418 `Block` is a list of origins where Flash is not allowed.
2419
2420 `Default` determines whether or not Flash is allowed by default.
2421
2422 `Locked` prevents the user from changing Flash preferences.
2423
2424 **Compatibility:** Firefox 60, Firefox ESR 60\
2425 **CCK2 Equivalent:** `permissions.plugin`\
2426 **Preferences Affected:** `plugin.state.flash`
2427
2428 #### Windows (GPO)
2429 ```
2430 Software\Policies\Mozilla\Firefox\FlashPlugin\Allow\1 = "https://example.org"
2431 Software\Policies\Mozilla\Firefox\FlashPlugin\Block\1 = "https://example.edu"
2432 Software\Policies\Mozilla\Firefox\FlashPlugin\Default = 0x1 | 0x0
2433 Software\Policies\Mozilla\Firefox\FlashPlugin\Locked = 0x1 | 0x0
2434 ```
2435 #### Windows (Intune)
2436 OMA-URI:
2437 ```
2438 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Flash/FlashPlugin_Allow
2439 ```
2440 Value (string):
2441 ```
2442 <enabled/>
2443 <data id="Permissions" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
2444 ```
2445 OMA-URI:
2446 ```
2447 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Flash/FlashPlugin_Locked
2448 ```
2449 Value (string):
2450 ```
2451 <enabled/> or <disabled/>
2452 ```
2453 OMA-URI:
2454 ```
2455 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Flash/FlashPlugin_Default
2456 ```
2457 Value (string):
2458 ```
2459 <enabled/> or <disabled/>
2460 ```
2461 #### macOS
2462 ```
2463 <dict>
2464   <key>FlashPlugin</key>
2465   <dict>
2466     <key>Allow</key>
2467     <array>
2468       <string>http://example.org</string>
2469     </array>
2470     <key>Block</key>
2471     <array>
2472       <string>http://example.edu</string>
2473     </array>
2474     <key>Default</key>
2475     <true/> | <false/>
2476     <key>Locked</key>
2477     <true/> | <false/>
2478   </dict>
2479 </dict>
2480 ```
2481 #### policies.json
2482 ```
2483 {
2484   "policies": {
2485     "FlashPlugin": {
2486       "Allow": ["http://example.org/"],
2487       "Block": ["http://example.edu/"],
2488       "Default": true | false,
2489       "Locked": true | false
2490     }
2491   }
2492 }
2493 ```
2494
2495
2496
2497 ### Handlers
2498 Configure default application handlers. This policy is based on the internal format of `handlers.json`.
2499
2500 You can configure handlers based on a mime type (`mimeTypes`), a file's extension (`extensions`), or a protocol (`schemes`).
2501
2502 Within each handler type, you specify the given mimeType/extension/scheme as a key and use the following subkeys to describe how it is handled.
2503
2504 | Name | Description |
2505 | --- | --- |
2506 | `action`| Can be either `saveToDisk`, `useHelperApp`, `useSystemDefault`.
2507 | `ask` | If `true`, the user is asked if what they want to do with the file. If `false`, the action is taken without user intervention.
2508 | `handlers` | An array of handlers with the first one being the default. If you don't want to have a default handler, use an empty object for the first handler. Choose between path or uriTemplate.
2509 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`name` | The display name of the handler (might not be used).
2510 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`path`| The native path to the executable to be used.
2511 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`uriTemplate`| A url to a web based application handler. The URL must be https and contain a %s to be used for substitution.
2512
2513 **Compatibility:** Firefox 78, Firefox ESR 78\
2514 **CCK2 Equivalent:** N/A\
2515 **Preferences Affected:** N/A
2516
2517 #### Windows (GPO)
2518 ```
2519 Software\Policies\Mozilla\Firefox\Handlers (REG_MULTI_SZ) =
2520 {
2521   "mimeTypes": {
2522     "application/msword": {
2523       "action": "useSystemDefault",
2524       "ask": true | false
2525     }
2526   },
2527   "schemes": {
2528     "mailto": {
2529       "action": "useHelperApp",
2530       "ask": true | false,
2531       "handlers": [{
2532         "name": "Gmail",
2533         "uriTemplate": "https://mail.google.com/mail/?extsrc=mailto&url=%s"
2534       }]
2535     }
2536   },
2537   "extensions": {
2538     "pdf": {
2539       "action": "useHelperApp",
2540       "ask": true | false,
2541       "handlers": [{
2542         "name": "Adobe Acrobat",
2543         "path": "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32.exe"
2544       }]
2545     }
2546   }
2547 }
2548 ```
2549 #### Windows (Intune)
2550 OMA-URI:
2551 ```
2552 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Handlers
2553 ```
2554 Value (string):
2555 ```
2556 <enabled/>
2557 <data id="Handlers" value='
2558 {
2559   "mimeTypes": {
2560     "application/msword": {
2561       "action": "useSystemDefault",
2562       "ask": true | false
2563     }
2564   },
2565   "schemes": {
2566     "mailto": {
2567       "action": "useHelperApp",
2568       "ask": true | false,
2569       "handlers": [{
2570         "name": "Gmail",
2571         "uriTemplate": "https://mail.google.com/mail/?extsrc=mailto&amp;url=%s"
2572       }]
2573     }
2574   },
2575   "extensions": {
2576     "pdf": {
2577       "action": "useHelperApp",
2578       "ask": true | false,
2579       "handlers": [{
2580         "name": "Adobe Acrobat",
2581         "path": "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32.exe"
2582       }]
2583     }
2584   }
2585 }
2586 '/>
2587 ```
2588 #### macOS
2589 ```
2590 <dict>
2591   <key>Handlers</key>
2592   <dict>
2593     <key>mimeTypes</key>
2594     <dict>
2595       <key>application/msword</key>
2596       <dict>
2597         <key>action</key>
2598         <string>useSystemDefault</string>
2599         <key>ask</key>
2600         <true/> | <false/>
2601       </dict>
2602     </dict>
2603     <key>schemes</key>
2604     <dict>
2605       <key>mailto</key>
2606       <dict>
2607         <key>action</key>
2608         <string>useHelperApp</string>
2609         <key>ask</key>
2610         <true/> | <false/>
2611         <key>handlers</key>
2612         <array>
2613           <dict>
2614             <key>name</key>
2615             <string>Gmail</string>
2616             <key>uriTemplate</key>
2617             <string>https://mail.google.com/mail/?extsrc=mailto&url=%s</string>
2618           </dict>
2619         </array>
2620       </dict>
2621     </dict>
2622     <key>extensions</key>
2623     <dict>
2624       <key>pdf</key>
2625       <dict>
2626         <key>action</key>
2627         <string>useHelperApp</string>
2628         <key>ask</key>
2629         <true/> | <false/>
2630         <key>handlers</key>
2631         <array>
2632           <dict>
2633             <key>name</key>
2634             <string>Adobe Acrobat</string>
2635             <key>path</key>
2636             <string>/System/Applications/Preview.app</string>
2637           </dict>
2638         </array>
2639       </dict>
2640     </dict>
2641   </dict>
2642 </dict>
2643 ```
2644 #### policies.json
2645 ```
2646 {
2647   "policies": {
2648     "Handlers": {
2649       "mimeTypes": {
2650         "application/msword": {
2651           "action": "useSystemDefault",
2652           "ask": false
2653         }
2654       },
2655       "schemes": {
2656         "mailto": {
2657           "action": "useHelperApp",
2658           "ask": true | false,
2659           "handlers": [{
2660             "name": "Gmail",
2661             "uriTemplate": "https://mail.google.com/mail/?extsrc=mailto&url=%s"
2662           }]
2663         }
2664       },
2665       "extensions": {
2666         "pdf": {
2667           "action": "useHelperApp",
2668           "ask": true | false,
2669           "handlers": [{
2670             "name": "Adobe Acrobat",
2671             "path": "/usr/bin/acroread"
2672           }]
2673         }
2674       }
2675     }
2676   }
2677 }
2678 ```
2679 ### FirefoxHome
2680 Customize the Firefox Home page.
2681
2682 **Compatibility:** Firefox 68, Firefox ESR 68\
2683 **CCK2 Equivalent:** N/A\
2684 **Preferences Affected:** `browser.newtabpage.activity-stream.showSearch`,`browser.newtabpage.activity-stream.feeds.topsites`,`browser.newtabpage.activity-stream.feeds.section.highlights`,`browser.newtabpage.activity-stream.feeds.section.topstories`,`browser.newtabpage.activity-stream.feeds.snippets`
2685
2686 #### Windows (GPO)
2687 ```
2688 Software\Policies\Mozilla\Firefox\FirefoxHome\Search = 0x1 | 0x0
2689 Software\Policies\Mozilla\Firefox\FirefoxHome\TopSites = 0x1 | 0x0
2690 Software\Policies\Mozilla\Firefox\FirefoxHome\Highlights = 0x1 | 0x0
2691 Software\Policies\Mozilla\Firefox\FirefoxHome\Pocket = 0x1 | 0x0
2692 Software\Policies\Mozilla\Firefox\FirefoxHome\Snippets = 0x1 | 0x0
2693 Software\Policies\Mozilla\Firefox\FirefoxHome\Locked = 0x1 | 0x0
2694 ```
2695 #### Windows (Intune)
2696 OMA-URI:
2697 ```
2698 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/CustomizeFirefoxHome
2699 ```
2700 Value (string):
2701 ```
2702 <enabled/>
2703 <data id="FirefoxHome_Search"  value="true | false"/>
2704 <data id="FirefoxHome_TopSites"  value="true | false"/>
2705 <data id="FirefoxHome_Highlights"  value="true | false"/>
2706 <data id="FirefoxHome_Pocket"  value="true | false"/>
2707 <data id="FirefoxHome_Snippets"  value="true | false"/>
2708 <data id="FirefoxHome_Locked"  value="true | false"/>
2709 ```
2710 #### macOS
2711 ```
2712 <dict>
2713   <key>FirefoxHome</key>
2714   <dict>
2715     <key>Search</key>
2716     <true/> | <false/>
2717     <key>TopSites</key>
2718     <true/> | <false/>
2719     <key>Highlights</key>
2720     <true/> | <false/>
2721     <key>Pocket</key>
2722     <true/> | <false/>
2723     <key>Snippets</key>
2724     <true/> | <false/>
2725     <key>Locked</key>
2726     <true/> | <false/>
2727   </dict>
2728 </dict>
2729 ```
2730 #### policies.json
2731 ```
2732 {
2733   "policies": {
2734     "FirefoxHome": {
2735       "Search": true | false,
2736       "TopSites": true | false,
2737       "Highlights": true | false,
2738       "Pocket": true | false,
2739       "Snippets": true | false,
2740       "Locked": true | false
2741     }
2742   }
2743 }
2744 ```
2745 ### HardwareAcceleration
2746 Control hardware acceleration.
2747
2748 **Compatibility:** Firefox 60, Firefox ESR 60\
2749 **CCK2 Equivalent:** N/A\
2750 **Preferences Affected:** `layers.acceleration.disabled`
2751
2752 #### Windows (GPO)
2753 ```
2754 Software\Policies\Mozilla\Firefox\HardwareAcceleration = 0x1 | 0x0
2755 ```
2756 #### Windows (Intune)
2757 OMA-URI:
2758 ```
2759 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/HardwareAcceleration
2760 ```
2761 Value (string):
2762 ```
2763 <enabled/> or <disabled/>
2764 ```
2765 #### macOS
2766 ```
2767 <dict>
2768   <key>HardwareAcceleration</key>
2769   <true/> | <false/>
2770 </dict>
2771 ```
2772 #### policies.json
2773 ```
2774 {
2775   "policies": {
2776     "HardwareAcceleration": true | false
2777   }
2778 }
2779 ```
2780 ### Homepage
2781 Configure the default homepage and how Firefox starts.
2782
2783 `URL` is the default homepage.
2784
2785 `Locked` prevents the user from changing homepage preferences.
2786
2787 `Additional` allows for more than one homepage.
2788
2789 `StartPage` is how Firefox starts. The choices are no homepage, the default homepage or the previous session.
2790
2791 With Firefox 78, an additional option as added for `Startpage`, `homepage-locked`. If this is value is set for the Startpage, the user will always get the homepage at startup and cannot choose to restore their session.
2792
2793 **Compatibility:** Firefox 60, Firefox ESR 60 (StartPage was added in Firefox 60, Firefox ESR 60.4, homepage-locked added in Firefox 78)\
2794 **CCK2 Equivalent:** `homePage`,`lockHomePage`\
2795 **Preferences Affected:** `browser.startup.homepage`,`browser.startup.page`
2796
2797 #### Windows (GPO)
2798 ```
2799 Software\Policies\Mozilla\Firefox\Homepage\URL = "https://example.com"
2800 Software\Policies\Mozilla\Firefox\Homepage\Locked = 0x1 | 0x0
2801 Software\Policies\Mozilla\Firefox\Homepage\Additional\1 = "https://example.org"
2802 Software\Policies\Mozilla\Firefox\Homepage\Additional\2 = "https://example.edu"
2803 Software\Policies\Mozilla\Firefox\Homepage\StartPage = "none" | "homepage" | "previous-session" | "homepage-locked"
2804 ```
2805 #### Windows (Intune)
2806 OMA-URI:
2807 ```
2808 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageURL
2809 ```
2810 Value (string):
2811 ```
2812 <enabled/>
2813
2814 <data id="HomepageURL" value="https://example.com"/>
2815 <data id="HomepageLocked" value="true | false"/>
2816 ```
2817 OMA-URI:
2818 ```
2819 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageAdditional
2820 ```
2821 Value (string):
2822 ```
2823 <enabled/>
2824
2825 <data id="HomepageAdditional" value="1&#xF000;http://example.org&#xF000;2&#xF000;http://example.edu"/>
2826 ```
2827 OMA-URI:
2828 ```
2829 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageStartPage
2830 ```
2831 Value (string):
2832 ```
2833 <enabled/>
2834
2835 <data id="StartPage" value="none | homepage | previous-session"/>
2836 ```
2837 #### macOS
2838 ```
2839 <dict>
2840   <key>Homepage</key>
2841   <dict>
2842     <key>URL</key>
2843     <string>http://example.com</string>
2844     <key>Locked</key>
2845     <true/> | <false/>
2846     <key>Additional</key>
2847     <array>
2848       <string>http://example.org</string>
2849       <string>http://example.edu</string>
2850     </array>
2851     <key>StartPage</key>
2852     <string>none | homepage | previous-session | homepage-locked</string>
2853   </dict>
2854 </dict>
2855 ```
2856 #### policies.json
2857 ```
2858 {
2859   "policies": {
2860     "Homepage": {
2861       "URL": "http://example.com/",
2862       "Locked": true | false,
2863       "Additional": ["http://example.org/",
2864                      "http://example.edu/"],
2865       "StartPage": "none" | "homepage" | "previous-session" | "homepage-locked"
2866     }
2867   }
2868 }
2869 ```
2870 ### InstallAddonsPermission
2871 Configure the default extension install policy as well as origins for extension installs are allowed. This policy does not override turning off all extension installs.
2872
2873 `Allow` is a list of origins where extension installs are allowed.
2874
2875 `Default` determines whether or not extension installs are allowed by default.
2876
2877 **Compatibility:** Firefox 60, Firefox ESR 60\
2878 **CCK2 Equivalent:** `permissions.install`\
2879 **Preferences Affected:** `xpinstall.enabled`
2880
2881 #### Windows (GPO)
2882 ```
2883 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Allow\1 = "https://example.org"
2884 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Allow\2 = "https://example.edu"
2885 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Default = 0x1 | 0x0
2886 ```
2887 #### Windows (Intune)
2888 OMA-URI:
2889 ```
2890 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Addons/InstallAddonsPermission_Allow
2891 ```
2892 Value (string):
2893 ```
2894 <enabled/>
2895 <data id="Permissions" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
2896 ```
2897 OMA-URI:
2898 ```
2899 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Addons/InstallAddonsPermission_Default
2900 ```
2901 Value (string):
2902 ```
2903 <enabled/>
2904 ```
2905 #### macOS
2906 ```
2907 <dict>
2908   <key>InstallAddonsPermission</key>
2909   <dict>
2910     <key>Allow</key>
2911     <array>
2912       <string>http://example.org</string>
2913       <string>http://example.edu</string>
2914     </array>
2915     <key>Default</key>
2916     <true/> | <false/>
2917   </dict>
2918 </dict>
2919 ```
2920 #### policies.json
2921 ```
2922 {
2923   "policies": {
2924     "InstallAddonsPermission": {
2925       "Allow": ["http://example.org/",
2926                 "http://example.edu/"],
2927       "Default": true | false
2928     }
2929   }
2930 }
2931 ```
2932 ### LegacyProfiles
2933 Disable the feature enforcing a separate profile for each installation.
2934
2935 If this policy set to true, Firefox will not try to create different profiles for installations of Firefox in different directories. This is the equivalent of the MOZ_LEGACY_PROFILES environment variable.
2936
2937 If this policy set to false, Firefox will create a new profile for each unique installation of Firefox.
2938
2939 This policy only work on Windows via GPO (not policies.json).
2940
2941 **Compatibility:** Firefox 70, Firefox ESR 68.2 (Windows only, GPO only)\
2942 **CCK2 Equivalent:** N/A\
2943 **Preferences Affected:** N/A
2944
2945 #### Windows (GPO)
2946 ```
2947 Software\Policies\Mozilla\Firefox\LegacyProfiles = = 0x1 | 0x0
2948 ```
2949 #### Windows (Intune)
2950 OMA-URI:
2951 ```
2952 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/LegacyProfiles
2953 ```
2954 Value (string):
2955 ```
2956 <enabled/> or <disabled/>
2957 ```
2958 ### LocalFileLinks
2959 Enable linking to local files by origin.
2960
2961 **Compatibility:** Firefox 68, Firefox ESR 68\
2962 **CCK2 Equivalent:** N/A\
2963 **Preferences Affected:** `capability.policy.localfilelinks.*`
2964
2965 #### Windows (GPO)
2966 ```
2967 Software\Policies\Mozilla\Firefox\LocalFileLinks\1 = "https://example.org"
2968 Software\Policies\Mozilla\Firefox\LocalFileLinks\2 = "https://example.edu"
2969 ```
2970 #### Windows (Intune)
2971 OMA-URI:
2972 ```
2973 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/LocalFileLinks
2974 ```
2975 Value (string):
2976 ```
2977 <enabled/>
2978 <data id="LocalFileLinks" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
2979 ```
2980 #### macOS
2981 ```
2982 <dict>
2983   <key>LocalFileLinks</key>
2984   <array>
2985     <string>http://example.org</string>
2986     <string>http://example.edu</string>
2987   </array>
2988 </dict>
2989 ```
2990 #### policies.json
2991 ```
2992 {
2993   "policies": {
2994     "LocalFileLinks": ["http://example.org/",
2995                        "http://example.edu/"]
2996   }
2997 }
2998 ```
2999 ### ManagedBookmarks
3000 Configures a list of bookmarks managed by an administrator that cannot be changed by the user.
3001
3002 The bookmarks are only added as a button on the personal toolbar. They are not in the bookmarks folder.
3003
3004 The syntax of this policy is exactly the same as the [Chrome ManagedBookmarks policy](https://cloud.google.com/docs/chrome-enterprise/policies/?policy=ManagedBookmarks). The schema is:
3005 ```
3006 {
3007  "items": {
3008   "id": "BookmarkType",
3009   "properties": {
3010    "children": {
3011     "items": {
3012      "$ref": "BookmarkType"
3013     },
3014     "type": "array"
3015    },
3016    "name": {
3017     "type": "string"
3018    },
3019    "toplevel_name": {
3020     "type": "string"
3021    },
3022    "url": {
3023     "type": "string"
3024    }
3025   },
3026   "type": "object"
3027  },
3028  "type": "array"
3029 }
3030 ```
3031 **Compatibility:** Firefox 83, Firefox ESR 78.5\
3032 **CCK2 Equivalent:** N/A\
3033 **Preferences Affected:** N/A
3034
3035 #### Windows (GPO)
3036 ```
3037 Software\Policies\Mozilla\Firefox\ManagedBookmarks (REG_MULTI_SZ) =
3038 [
3039   {
3040     "toplevel_name": "My managed bookmarks folder"
3041   },
3042   {
3043     "url": "example.com",
3044     "name": "Example"
3045   },
3046   {
3047     "name": "Mozilla links",
3048     "children": [
3049       {
3050         "url": "https://mozilla.org",
3051         "name": "Mozilla.org"
3052       },
3053       {
3054         "url": "https://support.mozilla.org/",
3055         "name": "SUMO"
3056       }
3057     ]
3058   }
3059 ]
3060 ```
3061 #### Windows (Intune)
3062 OMA-URI:
3063 ```
3064 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/ManagedBookmarks
3065 ```
3066 Value (string):
3067 ```
3068 <enabled/>
3069 <data id="JSON" value='
3070 [
3071   {
3072     "toplevel_name": "My managed bookmarks folder"
3073   },
3074   {
3075     "url": "example.com",
3076     "name": "Example"
3077   },
3078   {
3079     "name": "Mozilla links",
3080     "children": [
3081       {
3082         "url": "https://mozilla.org",
3083         "name": "Mozilla.org"
3084       },
3085       {
3086         "url": "https://support.mozilla.org/",
3087         "name": "SUMO"
3088       }
3089     ]
3090   }
3091 ]'/>
3092 ```
3093 #### macOS
3094 ```
3095 <dict>
3096   <key>ManagedBookmarks</key>
3097   <array>
3098     <dict>
3099       <key>toplevel_name</key>
3100       <string>My managed bookmarks folder</string></dict>
3101       <dict>
3102         <key>url</key>
3103         <string>example.com</string>
3104         <key>name</key>
3105         <string>Example</string>
3106       </dict>
3107       <dict>
3108       <key>name</key>
3109       <string>Mozilla links</string>
3110       <key>children</key>
3111       <array>
3112         <dict>
3113           <key>url</key>
3114           <string>https://mozilla.org</string>
3115           <key>name</key>
3116           <string>Mozilla</string>
3117         </dict>
3118         <dict>
3119           <key>url</key>
3120           <string>https://support.mozilla.org/</string>
3121           <key>name</key>
3122           <string>SUMO</string>
3123         </dict>
3124       </array>
3125     </dict>
3126   </array>
3127 </dict>
3128 ```
3129 #### policies.json
3130 ```
3131 {
3132   "policies": {
3133     "ManagedBookmarks": [
3134       {
3135         "toplevel_name": "My managed bookmarks folder"
3136       },
3137       {
3138         "url": "example.com",
3139         "name": "Example"
3140       },
3141       {
3142         "name": "Mozilla links",
3143         "children": [
3144           {
3145             "url": "https://mozilla.org",
3146             "name": "Mozilla.org"
3147           },
3148           {
3149             "url": "https://support.mozilla.org/",
3150             "name": "SUMO"
3151           }
3152         ]
3153       }
3154     ]
3155   }
3156 }
3157 ```
3158 ### PrimaryPassword
3159 Require or prevent using a primary (formerly master) password.
3160
3161 If this value is true, a primary password is required. If this value is false, it works the same as if [`DisableMasterPasswordCreation`](#disablemasterpasswordcreation) was true and removes the primary password functionality.
3162
3163 If both DisableMasterPasswordCreation and PrimaryPassword are used, DisableMasterPasswordCreation takes precedent.
3164
3165 **Compatibility:** Firefox 79, Firefox ESR 78.1\
3166 **CCK2 Equivalent:** `noMasterPassword`\
3167 **Preferences Affected:** N/A
3168
3169 #### Windows (GPO)
3170 ```
3171 Software\Policies\Mozilla\Firefox\PrimaryPassword = 0x1 | 0x0
3172 ```
3173 #### Windows (Intune)
3174 OMA-URI:
3175 ```
3176 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PrimaryPassword
3177 ```
3178 Value (string):
3179 ```
3180 <enabled/> or <disabled/>
3181 ```
3182 #### macOS
3183 ```
3184 <dict>
3185   <key>PrimaryPassword</key>
3186   <true/> | <false/>
3187 </dict>
3188 ```
3189 #### policies.json
3190 ```
3191 {
3192   "policies": {
3193     "PrimaryPassword": true | false
3194   }
3195 }
3196 ```
3197 ### NetworkPrediction
3198 Enable or disable network prediction (DNS prefetching).
3199
3200 **Compatibility:** Firefox 67, Firefox ESR 60.7\
3201 **CCK2 Equivalent:** N/A\
3202 **Preferences Affected:** `network.dns.disablePrefetch`,`network.dns.disablePrefetchFromHTTPS`
3203
3204 #### Windows (GPO)
3205 ```
3206 Software\Policies\Mozilla\Firefox\NetworkPrediction = 0x1 | 0x0
3207 ```
3208 #### Windows (Intune)
3209 OMA-URI:
3210 ```
3211 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NetworkPrediction
3212 ```
3213 Value (string):
3214 ```
3215 <enabled/> or <disabled/>
3216 ```
3217 #### macOS
3218 ```
3219 <dict>
3220   <key>NetworkPrediction</key>
3221   <true/> | <false/>
3222 </dict>
3223 ```
3224 #### policies.json
3225 ```
3226 {
3227   "policies": {
3228     "NetworkPrediction": true | false
3229 }
3230 ```
3231 ### NewTabPage
3232 Enable or disable the New Tab page.
3233
3234 **Compatibility:** Firefox 68, Firefox ESR 68\
3235 **CCK2 Equivalent:** N/A\
3236 **Preferences Affected:** `browser.newtabpage.enabled`
3237
3238 #### Windows (GPO)
3239 ```
3240 Software\Policies\Mozilla\Firefox\NewTabPage = 0x1 | 0x0
3241 ```
3242 #### Windows (Intune)
3243 OMA-URI:
3244 ```
3245 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NewTabPage
3246 ```
3247 Value (string):
3248 ```
3249 <enabled/> or <disabled/>
3250 ```
3251 #### macOS
3252 ```
3253 <dict>
3254   <key>NewTabPage</key>
3255   <true/> | <false/>
3256 </dict>
3257 ```
3258 #### policies.json
3259 ```
3260 {
3261   "policies": {
3262     "NewTabPage": true | false
3263 }
3264 ```
3265 ### NoDefaultBookmarks
3266 Disable the creation of default bookmarks.
3267
3268 This policy is only effective if the user profile has not been created yet.
3269
3270 **Compatibility:** Firefox 60, Firefox ESR 60\
3271 **CCK2 Equivalent:** `removeDefaultBookmarks`\
3272 **Preferences Affected:** N/A
3273
3274 #### Windows (GPO)
3275 ```
3276 Software\Policies\Mozilla\Firefox\NoDefaultBookmarks = 0x1 | 0x0
3277 ```
3278 #### Windows (Intune)
3279 OMA-URI:
3280 ```
3281 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NoDefaultBookmarks
3282 ```
3283 Value (string):
3284 ```
3285 <enabled/> or <disabled/>
3286 ```
3287 #### macOS
3288 ```
3289 <dict>
3290   <key>NoDefaultBookmarks</key>
3291   <true/> | <false/>
3292 </dict>
3293 ```
3294 #### policies.json
3295 ```
3296 {
3297   "policies": {
3298     "NoDefaultBookmarks": true | false
3299   }
3300 }
3301 ```
3302 ### OfferToSaveLogins
3303 Control whether or not Firefox offers to save passwords.
3304
3305 **Compatibility:** Firefox 60, Firefox ESR 60\
3306 **CCK2 Equivalent:** `dontRememberPasswords`\
3307 **Preferences Affected:** `signon.rememberSignons`
3308
3309 #### Windows (GPO)
3310 ```
3311 Software\Policies\Mozilla\Firefox\OfferToSaveLogins = 0x1 | 0x0
3312 ```
3313 #### Windows (Intune)
3314 OMA-URI:
3315 ```
3316 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OfferToSaveLogins
3317 ```
3318 Value (string):
3319 ```
3320 <enabled/> or <disabled/>
3321 ```
3322 #### macOS
3323 ```
3324 <dict>
3325   <key>OfferToSaveLogins</key>
3326   <true/> | <false/>
3327 </dict>
3328 ```
3329 #### policies.json
3330 ```
3331 {
3332   "policies": {
3333     "OfferToSaveLogins": true | false
3334   }
3335 }
3336 ```
3337 ### OfferToSaveLoginsDefault
3338 Sets the default value of signon.rememberSignons without locking it.
3339
3340 **Compatibility:** Firefox 70, Firefox ESR 60.2\
3341 **CCK2 Equivalent:** `dontRememberPasswords`\
3342 **Preferences Affected:** `signon.rememberSignons`
3343
3344 #### Windows (GPO)
3345 ```
3346 Software\Policies\Mozilla\Firefox\OfferToSaveLoginsDefault = 0x1 | 0x0
3347 ```
3348 #### Windows (Intune)
3349 OMA-URI:
3350 ```
3351 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OfferToSaveLoginsDefault
3352 ```
3353 Value (string):
3354 ```
3355 <enabled/> or <disabled/>
3356 ```
3357 #### macOS
3358 ```
3359 <dict>
3360   <key>OfferToSaveLoginsDefault</key>
3361   <true/> | <false/>
3362 </dict>
3363 ```
3364 #### policies.json
3365 ```
3366 {
3367   "policies": {
3368     "OfferToSaveLoginsDefault": true | false
3369   }
3370 }
3371 ```
3372 ### OverrideFirstRunPage
3373 Override the first run page. If the value is an empty string (""), the first run page is not displayed.
3374
3375 Starting with Firefox 83, Firefox ESR 78.5, you can also specify multiple URLS separated by a vertical bar (|).
3376
3377 **Compatibility:** Firefox 60, Firefox ESR 60\
3378 **CCK2 Equivalent:** `welcomePage`,`noWelcomePage`\
3379 **Preferences Affected:** `startup.homepage_welcome_url`
3380
3381 #### Windows (GPO)
3382 ```
3383 Software\Policies\Mozilla\Firefox\OverrideFirstRunPage = "http://example.org"
3384 ```
3385 #### Windows (Intune)
3386 OMA-URI:
3387 ```
3388 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OverrideFirstRunPage
3389 ```
3390 Value (string):
3391 ```
3392 <enabled/>
3393 <data id="OverridePage" value="https://example.com"/>
3394 ```
3395 #### macOS
3396 ```
3397 <dict>
3398   <key>OverrideFirstRunPage</key>
3399   <string>http://example.org</string>
3400 </dict>
3401 ```
3402 #### policies.json
3403 ```
3404 {
3405   "policies": {
3406     "OverrideFirstRunPage": "http://example.org"
3407 }
3408 ```
3409 ### OverridePostUpdatePage
3410 Override the upgrade page. If the value is an empty string (""), no extra pages are displayed when Firefox is upgraded.
3411
3412 **Compatibility:** Firefox 60, Firefox ESR 60\
3413 **CCK2 Equivalent:** `upgradePage`,`noUpgradePage`\
3414 **Preferences Affected:** `startup.homepage_override_url`
3415
3416 #### Windows (GPO)
3417 ```
3418 Software\Policies\Mozilla\Firefox\OverridePostUpdatePage = "http://example.org"
3419 ```
3420 #### Windows (Intune)
3421 OMA-URI:
3422 ```
3423 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OverridePostUpdatePage
3424 ```
3425 Value (string):
3426 ```
3427 <enabled/>
3428 <data id="OverridePage" value="https://example.com"/>
3429 ```
3430 #### macOS
3431 ```
3432 <dict>
3433   <key>OverridePostUpdatePage</key>
3434   <string>http://example.org</string>
3435 </dict>
3436 ```
3437 #### policies.json
3438 ```
3439 {
3440   "policies": {
3441     "OverridePostUpdatePage": "http://example.org"
3442 }
3443 ```
3444 ### PasswordManagerEnabled
3445 Remove access to the password manager via preferences and blocks about:logins on Firefox 70.
3446
3447 **Compatibility:** Firefox 70, Firefox ESR 60.2\
3448 **CCK2 Equivalent:** N/A\
3449 **Preferences Affected:** `pref.privacy.disable_button.view_passwords`
3450
3451 #### Windows (GPO)
3452 ```
3453 Software\Policies\Mozilla\Firefox\PasswordManagerEnabled = 0x1 | 0x0
3454 ```
3455 #### Windows (Intune)
3456 OMA-URI:
3457 ```
3458 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PasswordManagerEnabled
3459 ```
3460 Value (string):
3461 ```
3462 <enabled/> or <disabled/>
3463 ```
3464 #### macOS
3465 ```
3466 <dict>
3467   <key>PasswordManagerEnabled</key>
3468   <true/> | <false/>
3469 </dict>
3470 ```
3471 #### policies.json
3472 ```
3473 {
3474   "policies": {
3475     "PasswordManagerEnabled": true | false
3476   }
3477 }
3478 ```
3479 ### PDFjs
3480 Disable or configure PDF.js, the built-in PDF viewer.
3481
3482 If `Enabled` is set to false, the built-in PDF viewer is disabled.
3483
3484 If `EnablePermissions` is set to true, the built-in PDF viewer will honor document permissions like preventing the copying of text.
3485
3486 Note: DisableBuiltinPDFViewer has not been deprecated. You can either continue to use it, or switch to using PDFjs->Enabled to disable the built-in PDF viewer. This new permission was added because we needed a place for PDFjs->EnabledPermissions.
3487
3488 **Compatibility:** Firefox 77, Firefox ESR 68.9\
3489 **CCK2 Equivalent:** N/A\
3490 **Preferences Affected:** `pdfjs.diabled`,`pdfjs.enablePermissions`
3491
3492 #### Windows (GPO)
3493 ```
3494 Software\Policies\Mozilla\Firefox\PDFjs\Enabled = 0x1 | 0x0
3495 Software\Policies\Mozilla\Firefox\PDFjs\EnablePermissions = 0x1 | 0x0
3496 ```
3497 #### Windows (Intune)
3498 OMA-URI:
3499 ```
3500 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PDFjs/PDFjs_Enabled
3501 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PDFjs/PDFjs_EnablePermissions
3502 ```
3503 Value (string):
3504 ```
3505 <enabled/>or <disabled/>
3506 ```
3507 #### macOS
3508 ```
3509 <dict>
3510   <key>PDFjs</key>
3511   <dict>
3512     <key>Enabled</key>
3513     <true/> | <false/>
3514     <key>EnablePermissions</key>
3515     <true/> | <false/>
3516   </dict>
3517 </dict>
3518 ```
3519 #### policies.json
3520 ```
3521 {
3522   "policies": {
3523     "PSFjs": {
3524       "Enabled": true | false,
3525       "EnablePermissions": true | false
3526     }
3527 }
3528 ```
3529 ### Permissions
3530 Set permissions associated with camera, microphone, location, notifications, autoplay, and virtual reality. Because these are origins, not domains, entries with unique ports must be specified separately. This explicitly means that it is not possible to add wildcards. See examples below.
3531
3532 `Allow` is a list of origins where the feature is allowed.
3533
3534 `Block` is a list of origins where the feature is not allowed.
3535
3536 `BlockNewRequests` determines whether or not new requests can be made for the feature.
3537
3538 `Locked` prevents the user from changing preferences for the feature.
3539
3540 `Default` specifies the default value for Autoplay. block-audio-video is not supported on Firefox ESR 68.
3541
3542 **Compatibility:** Firefox 62, Firefox ESR 60.2 (Autoplay added in Firefox 74, Firefox ESR 68.6, Autoplay Default/Locked added in Firefox 76, Firefox ESR 68.8, VirtualReality added in Firefox 80, Firefox ESR 78.2)\
3543 **CCK2 Equivalent:** N/A\
3544 **Preferences Affected:** `permissions.default.camera`,`permissions.default.microphone`,`permissions.default.geo`,`permissions.default.desktop-notification`,`media.autoplay.default`.`permissions.default.xr`
3545
3546 #### Windows (GPO)
3547 ```
3548 Software\Policies\Mozilla\Firefox\Permissions\Camera\Allow\1 = "https://example.org"
3549 Software\Policies\Mozilla\Firefox\Permissions\Camera\Allow\2 = "https://example.org:1234"
3550 Software\Policies\Mozilla\Firefox\Permissions\Camera\Block\1 = "https://example.edu"
3551 Software\Policies\Mozilla\Firefox\Permissions\Camera\BlockNewRequests = 0x1 | 0x0
3552 Software\Policies\Mozilla\Firefox\Permissions\Camera\Locked = 0x1 | 0x0
3553 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Allow\1 = "https://example.org"
3554 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Block\1 = "https://example.edu"
3555 Software\Policies\Mozilla\Firefox\Permissions\Microphone\BlockNewRequests = 0x1 | 0x0
3556 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Locked = 0x1 | 0x0
3557 Software\Policies\Mozilla\Firefox\Permissions\Location\Allow\1 = "https://example.org"
3558 Software\Policies\Mozilla\Firefox\Permissions\Location\Block\1 = "https://example.edu"
3559 Software\Policies\Mozilla\Firefox\Permissions\Location\BlockNewRequests = 0x1 | 0x0
3560 Software\Policies\Mozilla\Firefox\Permissions\Location\Locked = 0x1 | 0x0
3561 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Allow\1 = "https://example.org"
3562 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Block\1 = "https://example.edu"
3563 Software\Policies\Mozilla\Firefox\Permissions\Notifications\BlockNewRequests = 0x1 | 0x0
3564 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Locked = 0x1 | 0x0
3565 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Allow\1 = "https://example.org"
3566 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Block\1 = "https://example.edu"
3567 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Default = "allow-audio-video" | "block-audio" | "block-audio-video"
3568 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Locked = 0x1 | 0x0
3569 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\Allow\1 = "https://example.org"
3570 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\Block\1 = "https://example.edu"
3571 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\BlockNewRequests = 0x1 | 0x0
3572 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\Locked = 0x1 | 0x0
3573 ```
3574 #### Windows (Intune)
3575 OMA-URI:
3576 ```
3577 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Location/Location_BlockNewRequests
3578 ```
3579 Value (string):
3580 ```
3581 <enabled/> or <disabled/>
3582 ```
3583 OMA-URI:
3584 ```
3585 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Location/Location_Locked
3586 ```
3587 Value (string):
3588 ```
3589 <enabled/> or <disabled/>
3590 ```
3591 OMA-URI:
3592 ```
3593 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_Allow
3594 ```
3595 Value (string):
3596 ```
3597 <enabled/>
3598 <data id="Permissions" value="1&#xF000;https://example.org"/>
3599 ```
3600 OMA-URI:
3601 ```
3602 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_BlockNewRequests
3603 ```
3604 Value (string):
3605 ```
3606 <enabled/> or <disabled/>
3607 ```
3608 OMA-URI:
3609 ```
3610 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_Locked
3611 ```
3612 Value (string):
3613 ```
3614 <enabled/> or <disabled/>
3615 ```
3616 OMA-URI:
3617 ```
3618 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Allow
3619 ```
3620 Value (string):
3621 ```
3622 <enabled/>
3623 <data id="Permissions" value="1&#xF000;https://example.org"/>
3624 ```
3625 OMA-URI:
3626 ```
3627 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Block
3628 ```
3629 Value (string):
3630 ```
3631 <enabled/>
3632 <data id="Permissions" value="1&#xF000;https://example.edu"/>
3633 ```
3634 OMA-URI:
3635 ```
3636 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Default
3637 ```
3638 Value (string):
3639 ```
3640 <enabled/>
3641 <data id="Autoplay_Default" value="allow-audio-video | block-audio | block-audio-video"/>
3642 ```
3643 OMA-URI:
3644 ```
3645 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Locked
3646 ```
3647 Value (string):
3648 ```
3649 <enabled/> or <disabled/>
3650 ```
3651 OMA-URI:
3652 ```
3653 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_Allow
3654 ```
3655 Value (string):
3656 ```
3657 <enabled/>
3658 <data id="Permissions" value="1&#xF000;https://example.org"/>
3659 ```
3660 OMA-URI:
3661 ```
3662 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_Block
3663 ```
3664 Value (string):
3665 ```
3666 <enabled/>
3667 <data id="Permissions" value="1&#xF000;https://example.edu"/>
3668 ```
3669 OMA-URI:
3670 ```
3671 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_BlockNewRequests
3672 ```
3673 Value (string):
3674 ```
3675 <enabled/> or <disabled/>
3676 ```
3677 OMA-URI:
3678 ```
3679 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_Locked
3680 ```
3681 Value (string):
3682 ```
3683 <enabled/> or <disabled/>
3684 ```
3685 #### macOS
3686 ```
3687 <dict>
3688   <key>Permissions</key>
3689   <dict>
3690     <key>Camera</key>
3691     <dict>
3692       <key>Allow</key>
3693       <array>
3694         <string>https://example.org</string>
3695         <string>https://example.org:1234</string>
3696       </array>
3697       <key>Block</key>
3698       <array>
3699         <string>https://example.edu</string>
3700       </array>
3701       <key>BlockNewRequests</key>
3702       <true/> | <false/>
3703       <key>Locked</key>
3704       <true/> | <false/>
3705     </dict>
3706     <key>Microphone</key>
3707     <dict>
3708       <key>Allow</key>
3709       <array>
3710         <string>https://example.org</string>
3711       </array>
3712       <key>Block</key>
3713       <array>
3714         <string>https://example.edu</string>
3715       </array>
3716       <key>BlockNewRequests</key>
3717       <true/> | <false/>
3718       <key>Locked</key>
3719       <true/> | <false/>
3720     </dict>
3721     <key>Location</key>
3722     <dict>
3723       <key>Allow</key>
3724       <array>
3725         <string>https://example.org</string>
3726       </array>
3727       <key>Block</key>
3728       <array>
3729         <string>https://example.edu</string>
3730       </array>
3731       <key>BlockNewRequests</key>
3732       <true/> | <false/>
3733       <key>Locked</key>
3734       <true/> | <false/>
3735     </dict>
3736     <key>Notifications</key>
3737     <dict>
3738       <key>Allow</key>
3739       <array>
3740         <string>https://example.org</string>
3741       </array>
3742       <key>Block</key>
3743       <array>
3744         <string>https://example.edu</string>
3745       </array>
3746       <key>BlockNewRequests</key>
3747       <true/>
3748       <key>Locked</key>
3749       <true/>
3750     </dict>
3751     <key>Autoplay</key>
3752     <dict>
3753       <key>Allow</key>
3754       <array>
3755         <string>https://example.org</string>
3756       </array>
3757       <key>Block</key>
3758       <array>
3759         <string>https://example.edu</string>
3760       </array>
3761       <key>Default</key>
3762       <string>allow-audio-video | block-audio | block-audio-video</string>
3763       <key>Locked</key>
3764       <true/> | <false/>
3765     </dict>
3766   </dict>
3767 </dict>
3768 ```
3769 #### policies.json
3770 ```
3771 {
3772   "policies": {
3773     "Permissions": {
3774       "Camera": {
3775         "Allow": ["https://example.org","https://example.org:1234"],
3776         "Block": ["https://example.edu"],
3777         "BlockNewRequests": true | false,
3778         "Locked": true | false
3779       },
3780       "Microphone": {
3781         "Allow": ["https://example.org"],
3782         "Block": ["https://example.edu"],
3783         "BlockNewRequests": true | false,
3784         "Locked": true | false
3785       },
3786       "Location": {
3787         "Allow": ["https://example.org"],
3788         "Block": ["https://example.edu"],
3789         "BlockNewRequests": true | false,
3790         "Locked": true | false
3791       },
3792       "Notifications": {
3793         "Allow": ["https://example.org"],
3794         "Block": ["https://example.edu"],
3795         "BlockNewRequests": true | false,
3796         "Locked": true | false
3797       },
3798       "Autoplay": {
3799         "Allow": ["https://example.org"],
3800         "Block": ["https://example.edu"],
3801         "Default": "allow-audio-video" | "block-audio" | "block-audio-video",
3802         "Locked": true | false
3803       }
3804     }
3805   }
3806 }
3807 ```
3808 ### PictureInPicture
3809
3810 Enable or disable Picture-in-Picture as well as prevent the user from enabling or disabling it (Locked).
3811
3812 **Compatibility:** Firefox 78, Firefox ESR 78\
3813 **CCK2 Equivalent:** N/A\
3814 **Preferences Affected:** `media.videocontrols.picture-in-picture.video-toggle.enabled`
3815
3816 #### Windows (GPO)
3817 ```
3818 Software\Policies\Mozilla\Firefox\PictureInPicture\Enabled = 0x1 | 0x0
3819 Software\Policies\Mozilla\Firefox\PictureInPicture\Locked = 0x1 | 0x0
3820
3821 ```
3822 #### Windows (Intune)
3823 OMA-URI:
3824 ```
3825 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PictureInPicture/PictureInPicture_Enabled
3826 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PictureInPicture/PictureInPicture_Locked
3827 ```
3828 Value (string):
3829 ```
3830 <enabled/> or <disabled/>
3831 ```
3832 #### macOS
3833 ```
3834 <dict>
3835   <key>PictureInPicture</key>
3836   <dict>
3837     <key>Enabled</key>
3838     <true/> | <false/>
3839     <key>Locked</key>
3840     <true/> | <false/>
3841   </dict>
3842 </dict>
3843 ```
3844 #### policies.json
3845 ```
3846 {
3847   "policies": {
3848     "PictureInPicture": {
3849       "Enabled": true | false,
3850       "Locked": true, false
3851     }
3852   }
3853 }
3854 ```
3855 ### PopupBlocking
3856 Configure the default pop-up window policy as well as origins for which pop-up windows are allowed.
3857
3858 `Allow` is a list of origins where popup-windows are allowed.
3859
3860 `Default` determines whether or not pop-up windows are allowed by default.
3861
3862 `Locked` prevents the user from changing pop-up preferences.
3863
3864 **Compatibility:** Firefox 60, Firefox ESR 60\
3865 **CCK2 Equivalent:** `permissions.popup`\
3866 **Preferences Affected:** `dom.disable_open_during_load`
3867
3868 #### Windows (GPO)
3869 ```
3870 Software\Policies\Mozilla\Firefox\PopupBlocking\Allow\1 = "https://example.org"
3871 Software\Policies\Mozilla\Firefox\PopupBlocking\Allow\2 = "https://example.edu"
3872 Software\Policies\Mozilla\Firefox\PopupBlocking\Default = 0x1 | 0x0
3873 Software\Policies\Mozilla\Firefox\PopupBlocking\Locked = 0x1 | 0x0
3874 ```
3875 #### Windows (Intune)
3876 OMA-URI:
3877 ```
3878 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Allow
3879 ```
3880 Value (string):
3881 ```
3882 <enabled/>
3883 <data id="Permissions" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
3884 ```
3885 OMA-URI:
3886 ```
3887 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Default
3888 ```
3889 Value (string):
3890 ```
3891 <enabled/> or <disabled/>
3892 ```
3893 OMA-URI:
3894 ```
3895 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Locked
3896 ```
3897 Value (string):
3898 ```
3899 <enabled/> or <disabled/>
3900 ```
3901 #### macOS
3902 ```
3903 <dict>
3904   <key>PopupBlocking</key>
3905   <dict>
3906     <key>Allow</key>
3907     <array>
3908       <string>http://example.org</string>
3909       <string>http://example.edu</string>
3910     </array>
3911     <key>Default</key>
3912     <true/> | <false/>
3913     <key>Locked</key>
3914     <true/> | <false/>
3915   </dict>
3916 </dict>
3917 ```
3918 #### policies.json
3919 ```
3920 {
3921   "policies": {
3922     "PopupBlocking": {
3923       "Allow": ["http://example.org/",
3924                 "http://example.edu/"],
3925       "Default": true | false,
3926       "Locked": true | false
3927     }
3928   }
3929 }
3930 ```
3931 ### Preferences
3932 Set and lock preferences.
3933
3934 **NOTE** On Windows, in order to use this policy, you must clear all settings in the old **Preferences (Deprecated)** section.
3935
3936 Previously you could only set and lock a subset of preferences. Starting with Firefox 81 and Firefox ESR 78.3 you can set many more preferences. You can also set default preferences, user preferences and you can clear preferences.
3937
3938 Preferences that start with the following prefixes are supported:
3939 ```
3940 accessibility.
3941 browser.
3942 datareporting.policy.
3943 dom.
3944 extensions.
3945 general.autoScroll (Firefox 83, Firefox ESR 78.5)
3946 general.smoothScroll (Firefox 83, Firefox ESR 78.5)
3947 geo.
3948 intl.
3949 layout.
3950 media.
3951 network.
3952 pdfjs. (Firefox 84, Firefox ESR 78.6)
3953 places.
3954 print.
3955 signon. (Firefox 83, Firefox ESR 78.5)
3956 spellchecker. (Firefox 84, Firefox ESR 78.6)
3957 ui.
3958 widget.
3959 ```
3960 as well as the following security preferences:
3961 | Preference | Type | Default
3962 | --- | --- | ---
3963 | security.default_personal_cert | string | Ask Every Time
3964 | &nbsp;&nbsp;&nbsp;&nbsp;If set to Select Automatically, Firefox automatically chooses the default personal certificate.
3965 | security.insecure_connection_text.enabled | bool | false
3966 | &nbsp;&nbsp;&nbsp;&nbsp;If set to true, adds the words "Not Secure" for insecure sites.
3967 | security.insecure_connection_text.pbmode.enabled | bool | false
3968 | &nbsp;&nbsp;&nbsp;&nbsp;If set to true, adds the words "Not Secure" for insecure sites in private browsing.
3969 | security.insecure_field_warning.contextual.enabled | bool | true
3970 | &nbsp;&nbsp;&nbsp;&nbsp;If set to false, remove the warning for inscure login fields.
3971 | security.mixed_content.block_active_content | boolean | true
3972 | &nbsp;&nbsp;&nbsp;&nbsp;If false, mixed active content (HTTP and HTTPS) is not blocked.
3973 | security.osclientcerts.autoload | boolean | false
3974 | &nbsp;&nbsp;&nbsp;&nbsp;If true, client certificates are loaded from the operating system certificate store.
3975 | security.ssl.errorReporting.enabled | boolean | true
3976 | &nbsp;&nbsp;&nbsp;&nbsp;If false, SSL errors cannot be sent to Mozilla.
3977 | security.tls.hello_downgrade_check | boolean | true
3978 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the TLS 1.3 downgrade check is disabled.
3979 | security.warn_submit_secure_to_insecure | boolean | true
3980 | &nbsp;&nbsp;&nbsp;&nbsp;If false, no warning is shown when submitting s form from https to http.
3981 &nbsp;
3982
3983 Using the preference as the key, set the `Value` to the corresponding preference value.
3984
3985 `Status` can be "default", "locked", "user" or "clear"
3986
3987 Default preferences can be modified by the user.
3988
3989 If a value is locked, it is also set as the default.
3990
3991 User preferences persist across invocations of Firefox. It is the equivalent of a user setting the preference. They are most useful when a preference is needed very early in startup so it can't be set as default by policy.
3992
3993 User preferences persist even if the policy is removed, so if you need to remove them, you should use the clear policy.
3994
3995 See the examples below for more detail.
3996
3997 IMPORTANT: Make sure you're only setting a particular preference using this mechanism and not some other way.
3998
3999 Status
4000 **Compatibility:** Firefox 81, Firefox ESR 78.3\
4001 **CCK2 Equivalent:** `preferences`\
4002 **Preferences Affected:** Many
4003
4004 #### Windows (GPO)
4005 ```
4006 Software\Policies\Mozilla\Firefox\Preferences (REG_MULTI_SZ) =
4007 {
4008   "accessibility.force_disabled": {
4009     "Value": 1,
4010     "Status": "default"
4011   },
4012   "browser.cache.disk.parent_directory": {
4013     "Value": "SOME_NATIVE_PATH",
4014     "Status": "user"
4015   },
4016   "browser.tabs.warnOnClose": {
4017     "Value": false,
4018     "Status": "locked"
4019   }
4020 }
4021 ```
4022 #### Windows (Intune)
4023 OMA-URI:
4024 ```
4025 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Preferences
4026 ```
4027 Value (string):
4028 ```
4029 <enabled/>
4030 <data id="JSON" value='
4031 {
4032   "accessibility.force_disabled": {
4033     "Value": 1,
4034     "Status": "default"
4035   },
4036   "browser.cache.disk.parent_directory": {
4037     "Value": "SOME_NATIVE_PATH",
4038     "Status": "user"
4039   },
4040   "browser.tabs.warnOnClose": {
4041     "Value": false,
4042     "Status": "locked"
4043   }
4044 }'/>
4045 ```
4046 #### macOS
4047 ```
4048 <dict>
4049   <key>Preferences</key>
4050   <dict>
4051     <key>accessibility.force_disabled</key>
4052     <dict>
4053       <key>Value</key>
4054       <integer>1</integer>
4055       <key>Status</key>
4056       <string>default</string>
4057     </dict>
4058     <key>browser.cache.disk.parent_directory</key>
4059     <dict>
4060       <key>Value</key>
4061       <string>SOME_NATIVE_PATH</string>
4062       <key>Status</key>
4063       <string>user</string>
4064     </dict>
4065     <key>browser.tabs.warnOnClose</key>
4066     <dict>
4067       <key>Value</key>
4068       <false/>
4069       <key>Status</key>
4070       <string>locked</string>
4071     </dict>
4072   </dict>
4073 </dict>
4074 ```
4075 #### policies.json
4076 ```
4077 {
4078   "policies": {
4079     "Preferences": {
4080       "accessibility.force_disabled": {
4081         "Value": 1,
4082         "Status": "default"
4083       },
4084       "browser.cache.disk.parent_directory": {
4085         "Value": "SOME_NATIVE_PATH",
4086         "Status": "user"
4087       },
4088       "browser.tabs.warnOnClose": {
4089         "Value": false,
4090         "Status": "locked"
4091       }
4092     }
4093   }
4094 }
4095 ```
4096 ### Preferences (Deprecated)
4097 Set and lock certain preferences.
4098
4099 **Compatibility:** See below\
4100 **CCK2 Equivalent:** `preferences`\
4101 **Preferences Affected:** See below
4102
4103 | Preference | Type | Compatibility | Default
4104 | --- | --- | --- | ---
4105 | accessibility.force_disabled | integer | Firefox 70, Firefox ESR 68.2 | 0
4106 | &nbsp;&nbsp;&nbsp;&nbsp;If set to 1, platform accessibility is disabled.
4107 | app.update.auto (Deprecated - Switch to AppAutoUpdate policy) | boolean | Firefox 68, Firefox ESR 68 | true
4108 | &nbsp;&nbsp;&nbsp;&nbsp;If false, Firefox doesn't automatically install update.
4109 | browser.bookmarks.autoExportHTML | boolean | Firefox 70, Firefox ESR 68.2 | false
4110 | &nbsp;&nbsp;&nbsp;&nbsp;If true, bookmarks are exported on shutdown.
4111 | browser.bookmarks.file | string | Firefox 70, Firefox ESR 68.2 | N/A
4112 | &nbsp;&nbsp;&nbsp;&nbsp;If set, the name of the file where bookmarks are exported and imported.
4113 | browser.bookmarks.restore_default_bookmarks | boolean | Firefox 70, Firefox ESR 68.2 | N/A
4114 | &nbsp;&nbsp;&nbsp;&nbsp;If true, bookmarks are restored to their defaults.
4115 | browser.cache.disk.enable | boolean | Firefox 68, Firefox ESR 68 | true
4116 | &nbsp;&nbsp;&nbsp;&nbsp;If false, don't store cache on the hard drive.
4117 | ~browser.cache.disk.parent_directory~ | string | Firefox 68, Firefox ESR 68 | Profile temporary directory
4118 | &nbsp;&nbsp;&nbsp;&nbsp;~If set, changes the location of the disk cache.~ This policy doesn't work. It's being worked on.
4119 | browser.fixup.dns_first_for_single_words | boolean | Firefox 68, Firefox ESR 68 | false
4120 | &nbsp;&nbsp;&nbsp;&nbsp;If true, single words are sent to DNS, not directly to search.
4121 | browser.newtabpage.activity-stream.default.sites | string | Firefox 72, ESR 68.4 | Locale dependent
4122 | &nbsp;&nbsp;&nbsp;&nbsp;If set, a list of URLs to use as the default top sites on the new tab page. Due to Firefox limitations, search sites can't be added. In addition, sites with the same name but different TLDs (example.org/example.com) will not display properly.
4123 | browser.places.importBookmarksHTML | boolean | Firefox 70, Firefox ESR 68.2
4124 | &nbsp;&nbsp;&nbsp;&nbsp;If true, bookmarks are always imported on startup.
4125 | browser.safebrowsing.phishing.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
4126 | &nbsp;&nbsp;&nbsp;&nbsp;If false, phishing protection is not enabled (Not recommended)
4127 | browser.safebrowsing.malware.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
4128 | &nbsp;&nbsp;&nbsp;&nbsp;If false, malware protection is not enabled (Not recommended)
4129 | browser.search.update | boolean | Firefox 68, Firefox ESR 68 | true
4130 | &nbsp;&nbsp;&nbsp;&nbsp;If false, updates for search engines are not checked.
4131 | browser.slowStartup.notificationDisabled | boolean | Firefox 70, Firefox ESR 68.2 | false
4132 | &nbsp;&nbsp;&nbsp;&nbsp;If true, a notification isn't shown if startup is slow.
4133 | browser.tabs.warnOnClose | boolean | Firefox 68, Firefox ESR 68 | true
4134 | &nbsp;&nbsp;&nbsp;&nbsp;If false, there is no warning when the browser is closed.
4135 | browser.taskbar.previews.enable | boolean | Firefox 70, Firefox ESR 68.2 (Windows only) | false
4136 | &nbsp;&nbsp;&nbsp;&nbsp;If true, tab previews are shown in the Windows taskbar.
4137 | browser.urlbar.suggest.bookmark | boolean | Firefox 68, Firefox ESR 68 | true
4138 | &nbsp;&nbsp;&nbsp;&nbsp;If false, bookmarks aren't suggested when typing in the URL bar.
4139 | browser.urlbar.suggest.history | boolean | Firefox 68, Firefox ESR 68 | true
4140 | &nbsp;&nbsp;&nbsp;&nbsp;If false, history isn't suggested when typing in the URL bar.
4141 | browser.urlbar.suggest.openpage | boolean | Firefox 68, Firefox ESR 68 | true
4142 | &nbsp;&nbsp;&nbsp;&nbsp;If false, open tabs aren't suggested when typing in the URL bar.
4143 | datareporting.policy.dataSubmissionPolicyBypassNotification | boolean | Firefox 68, Firefox ESR 68 | false
4144 | &nbsp;&nbsp;&nbsp;&nbsp;If true, don't show the privacy policy tab on first run.
4145 | dom.allow_scripts_to_close_windows | boolean | Firefox 70, Firefox ESR 68.2 | false
4146 | &nbsp;&nbsp;&nbsp;&nbsp;If false, web page can close windows.
4147 | dom.disable_window_flip | boolean | Firefox 68, Firefox ESR 68 | true
4148 | &nbsp;&nbsp;&nbsp;&nbsp;If false, web pages can focus and activate windows.
4149 | dom.disable_window_move_resize | boolean | Firefox 68, Firefox ESR 68 | false
4150 | &nbsp;&nbsp;&nbsp;&nbsp;If true, web pages can't move or resize windows.
4151 | dom.event.contextmenu.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4152 | &nbsp;&nbsp;&nbsp;&nbsp;If false, web pages can't override context menus.
4153 | dom.keyboardevent.keypress.hack.dispatch_non_printable_keys.addl | string | Firefox 68, Firefox ESR 68 | N/A
4154 | &nbsp;&nbsp;&nbsp;&nbsp;See https://support.mozilla.org/en-US/kb/dom-events-changes-introduced-firefox-66
4155 | dom.keyboardevent.keypress.hack.use_legacy_keycode_and_charcode.addl | string | Firefox 68, Firefox ESR 68 | N/A
4156 | &nbsp;&nbsp;&nbsp;&nbsp;See https://support.mozilla.org/en-US/kb/dom-events-changes-introduced-firefox-66
4157 | dom.xmldocument.load.enabled | boolean | Firefox ESR 68.5 | true.
4158 | &nbsp;&nbsp;&nbsp;&nbsp;If false, XMLDocument.load is not available.
4159 | dom.xmldocument.async.enabled | boolean | Firefox ESR 68.5 | true
4160 | &nbsp;&nbsp;&nbsp;&nbsp;If false, XMLDocument.async is not available.
4161 | extensions.blocklist.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
4162 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the extensions blocklist is not used (Not recommended)
4163 | extensions.getAddons.showPane | boolean | Firefox 68, Firefox ESR 68 | N/A
4164 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the Recommendations tab is not displayed in the Add-ons Manager.
4165 | extensions.htmlaboutaddons.recommendations.enabled | boolean | Firefox 72, Firefox ESR 68.4 | true
4166 | &nbsp;&nbsp;&nbsp;&nbsp;If false, recommendations are not shown on the Extensions tab in the Add-ons Manager.
4167 | geo.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
4168 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the geolocation API is disabled. | Language dependent
4169 | intl.accept_languages | string | Firefox 70, Firefox ESR 68.2
4170 | &nbsp;&nbsp;&nbsp;&nbsp;If set, preferred language for web pages.
4171 | media.eme.enabled (Deprecated - Switch to EncryptedMediaExtensions policy) | boolean | Firefox 70, Firefox ESR 68.2 | true
4172 | &nbsp;&nbsp;&nbsp;&nbsp;If false, Encrypted Media Extensions are not enabled.
4173 | media.gmp-gmpopenh264.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4174 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the OpenH264  plugin is not downloaded.
4175 | media.gmp-widevinecdm.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4176 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the Widevine plugin is not downloaded.
4177 | media.peerconnection.enabled | boolean | Firefox 72, Firefox ESR 68.4 | true
4178 | &nbsp;&nbsp;&nbsp;&nbsp;If false, WebRTC is disabled
4179 | media.peerconnection.ice.obfuscate_host_addresses.whitelist (Deprecated) | string | Firefox 72, Firefox ESR 68.4 | N/A
4180 | &nbsp;&nbsp;&nbsp;&nbsp;If set, a list of domains for which mDNS hostname obfuscation is
4181 disabled
4182 | media.peerconnection.ice.obfuscate_host_addresses.blocklist | string | Firefox 79, Firefox ESR 78.1 | N/A
4183 | &nbsp;&nbsp;&nbsp;&nbsp;If set, a list of domains for which mDNS hostname obfuscation is
4184 disabled
4185 | network.dns.disableIPv6 | boolean | Firefox 68, Firefox ESR 68 | false
4186 | &nbsp;&nbsp;&nbsp;&nbsp;If true, IPv6 DNS lokoups are disabled.
4187 | network.IDN_show_punycode | boolean | Firefox 68, Firefox ESR 68 | false
4188 | &nbsp;&nbsp;&nbsp;&nbsp;If true, display the punycode version of internationalized domain names.
4189 | places.history.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4190 | &nbsp;&nbsp;&nbsp;&nbsp;If false, history is not enabled.
4191 | print.save_print_settings | boolean | Firefox 70, Firefox ESR 68.2 | true
4192 | &nbsp;&nbsp;&nbsp;&nbsp;If false, print settings are not saved between jobs.
4193 | security.default_personal_cert | string | Firefox 68, Firefox ESR 68 | Ask Every Time
4194 | &nbsp;&nbsp;&nbsp;&nbsp;If set to Select Automatically, Firefox automatically chooses the default personal certificate.
4195 | security.mixed_content.block_active_content | boolean | Firefox 70, Firefox ESR 68.2 | true
4196 | &nbsp;&nbsp;&nbsp;&nbsp;If false, mixed active content (HTTP and HTTPS) is not blocked.
4197 | security.osclientcerts.autoload | boolean | Firefox 72 (Windows), Firefox 75 (macOS)  | false
4198 | &nbsp;&nbsp;&nbsp;&nbsp;If true, client certificates are loaded from the operating system certificate store.
4199 | security.ssl.errorReporting.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4200 | &nbsp;&nbsp;&nbsp;&nbsp;If false, SSL errors cannot be sent to Mozilla.
4201 | security.tls.hello_downgrade_check | boolean | Firefox 72, Firefox ESR 68.4 | true
4202 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the TLS 1.3 downgrade check is disabled.
4203 | ui.key.menuAccessKeyFocuses | boolean | Firefox 68, Firefox ESR 68 | true
4204 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the Alt key doesn't show the menubar on Windows.
4205 | widget.content.gtk-theme-override | string | Firefox 72, Firefox ESR 68.4 (Linux only) | N/A
4206 | &nbsp;&nbsp;&nbsp;&nbsp;If set, overrides the GTK theme for widgets.
4207 #### Windows (GPO)
4208 ```
4209 Software\Policies\Mozilla\Firefox\Preferences\boolean_preference_name = 0x1 | 0x0
4210 Software\Policies\Mozilla\Firefox\Preferences\string_preference_name = "string_value"
4211 ```
4212 #### Windows (Intune)
4213 OMA-URI: (periods are replaced by underscores)
4214 ```
4215 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Preferences/boolean_preference_name
4216 ```
4217 Value (string):
4218 ```
4219 <enabled/> or <disabled/>
4220 ```
4221 OMA-URI: (periods are replaced by underscores)
4222 ```
4223 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Preferences/string_preference_name
4224 ```
4225 Value (string):
4226 ```
4227 <enabled/>
4228 <data id="Preferences_String" value="string_value"/>
4229 ```
4230 #### macOS
4231 ```
4232 <dict>
4233   <key>Preferences</key>
4234   <dict>
4235     <key>boolean_preference_name</key>
4236     <true/> | <false/>
4237     <key>string_preference_name</key>
4238     <string>string_value</string>
4239   </dict>
4240 </dict>
4241 ```
4242 #### policies.json
4243 ```
4244 {
4245   "policies": {
4246     "Preferences": {
4247       "boolean_preference_name": true | false,
4248       "string_preference_name": "string_value"
4249     }
4250   }
4251 }
4252 ```
4253 ### PromptForDownloadLocation
4254 Ask where to save each file before downloading.
4255
4256 **Compatibility:** Firefox 68, Firefox ESR 68\
4257 **CCK2 Equivalent:** N/A\
4258 **Preferences Affected:** `browser.download.useDownloadDir`
4259
4260 #### Windows (GPO)
4261 ```
4262 Software\Policies\Mozilla\Firefox\PromptForDownloadLocation = 0x1 | 0x0
4263 ```
4264 #### Windows (Intune)
4265 OMA-URI:
4266 ```
4267 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PromptForDownloadLocation
4268 ```
4269 Value (string):
4270 ```
4271 <enabled/> or <disabled/>
4272 ```
4273 #### macOS
4274 ```
4275 <dict>
4276   <key>PromptForDownloadLocation</key>
4277   <true/> | <false/>
4278 </dict>
4279 ```
4280 #### policies.json
4281 ```
4282 {
4283   "policies": {
4284     "PromptForDownloadLocation": true | false
4285   }
4286 }
4287 ```
4288 ### Proxy
4289 Configure proxy settings. These settings correspond to the connection settings in Firefox preferences.
4290 To specify ports, append them to the hostnames with a colon (:).
4291
4292 `Mode` is the proxy method being used.
4293
4294 `Locked` is whether or not proxy settings can be changed.
4295
4296 `HTTPProxy` is the HTTP proxy server.
4297
4298 `UseHTTPProxyForAllProtocols` is whether or not the HTTP proxy should be used for all other proxies.
4299
4300 `SSLProxy` is the SSL proxy server.
4301
4302 `FTPProxy` is the FTP proxy server.
4303
4304 `SOCKSProxy` is the SOCKS proxy server
4305
4306 `SOCKSVersion` is the SOCKS version (4 or 5)
4307
4308 `Passthrough` is list of hostnames or IP addresses that will not be proxied. Use `<local>` to bypass proxying for all hostnames which do not contain periods.
4309
4310 `AutoConfigURL` is a  URL for proxy configuration (only used if Mode is autoConfig).
4311
4312 `AutoLogin` means do not prompt for authentication if password is saved.
4313
4314 `UseProxyForDNS` to use proxy DNS when using SOCKS v5.
4315
4316 **Compatibility:** Firefox 60, Firefox ESR 60\
4317 **CCK2 Equivalent:** `networkProxy*`\
4318 **Preferences Affected:** `network.proxy.type`,`network.proxy.autoconfig_url`,`network.proxy.socks_remote_dns`,`signon.autologin.proxy`,`network.proxy.socks_version`,`network.proxy.no_proxies_on`,`network.proxy.share_proxy_settings`,`network.proxy.http`,`network.proxy.http_port`,`network.proxy.ftp`,`network.proxy.ftp_port`,`network.proxy.ssl`,`network.proxy.ssl_port`,`network.proxy.socks`,`network.proxy.socks_port`
4319
4320 #### Windows (GPO)
4321 ```
4322 Software\Policies\Mozilla\Firefox\Proxy\Mode = "none" | "system" | "manual" | "autoDetect" | "autoConfig"
4323 Software\Policies\Mozilla\Firefox\Proxy\Locked = 0x1 | 0x0
4324 Software\Policies\Mozilla\Firefox\=Proxy\HTTPProxy = https://httpproxy.example.com
4325 Software\Policies\Mozilla\Firefox\Proxy\UseHTTPProxyForAllProtocols = 0x1 | 0x0
4326 Software\Policies\Mozilla\Firefox\Proxy\SSLProxy = https://sslproxy.example.com
4327 Software\Policies\Mozilla\Firefox\Proxy\FTPProxy = https://ftpproxy.example.com
4328 Software\Policies\Mozilla\Firefox\Proxy\SOCKSProxy = https://socksproxy.example.com
4329 Software\Policies\Mozilla\Firefox\Proxy\SOCKSVersion = 0x4 | 0x5
4330 Software\Policies\Mozilla\Firefox\Proxy\Passthrough = <local>
4331 Software\Policies\Mozilla\Firefox\Proxy\AutoConfigURL = URL_TO_AUTOCONFIG
4332 Software\Policies\Mozilla\Firefox\Proxy\AutoLogin = 0x1 | 0x0
4333 Software\Policies\Mozilla\Firefox\Proxy\UseProxyForDNS = 0x1 | 0x0
4334 ```
4335 #### Windows (Intune)
4336 OMA-URI:
4337 ```
4338 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Proxy
4339 ```
4340 Value (string):
4341 ```
4342 <enabled/>
4343 <data id="ProxyLocked" value="true | false"/>
4344 <data id="ConnectionType" value="none | system | manual | autoDetect | autoConfig"/>
4345 <data id="HTTPProxy" value="https://httpproxy.example.com"/>
4346 <data id="UseHTTPProxyForAllProtocols" value="true | false"/>
4347 <data id="SSLProxy" value="https://sslproxy.example.com"/>
4348 <data id="FTPProxy" value="https://ftpproxy.example.com"/>
4349 <data id="SOCKSProxy" value="https://socksproxy.example.com"/>
4350 <data id="SOCKSVersion" value="4 | 5"/>
4351 <data id="AutoConfigURL" value="URL_TO_AUTOCONFIG"/>
4352 <data id="Passthrough" value="<local>"/>
4353 <data id="AutoLogin" value="true | false"/>
4354 <data id="UseProxyForDNS" value="true | false"/>
4355 ```
4356 #### macOS
4357 ```
4358 <dict>
4359   <key>Proxy</key>
4360   <dict>
4361     <key>Mode</key>
4362     <string>none | system | manual | autoDetect | autoConfig</string>
4363     <key>Locked</key>
4364     <true> | </false>
4365     <key>HTTPProxy</key>
4366     <string>https://httpproxy.example.com</string>
4367     <key>UseHTTPProxyForAllProtocols</key>
4368     <true> | </false>
4369     <key>SSLProxy</key>
4370     <string>https://sslproxy.example.com</string>
4371     <key>FTPProxy</key>
4372     <string>https://ftpproxy.example.com</string>
4373     <key>SOCKSProxy</key>
4374     <string>https://socksproxy.example.com</string>
4375     <key>SOCKSVersion</key>
4376     <string>4 | 5</string>
4377     <key>Passthrough</key>
4378     <string>&lt;local>&gt;</string>
4379     <key>AutoConfigURL</key>
4380     <string>URL_TO_AUTOCONFIG</string>
4381     <key>AutoLogin</key>
4382     <true> | </false>
4383     <key>UseProxyForDNS</key>
4384     <true> | </false>
4385   </dict>
4386 </dict>
4387 ```
4388 #### policies.json
4389 ```
4390 {
4391   "policies": {
4392     "Proxy": {
4393       "Mode": "none" | "system" | "manual" | "autoDetect" | "autoConfig",
4394       "Locked": true | false,
4395       "HTTPProxy": "hostname",
4396       "UseHTTPProxyForAllProtocols": true | false,
4397       "SSLProxy": "hostname",
4398       "FTPProxy": "hostname",
4399       "SOCKSProxy": "hostname",
4400       "SOCKSVersion": 4 | 5
4401       "Passthrough": "<local>",
4402       "AutoConfigURL": "URL_TO_AUTOCONFIG",
4403       "AutoLogin": true | false,
4404       "UseProxyForDNS": true | false
4405     }
4406   }
4407 }
4408 ```
4409 ### RequestedLocales
4410 Set the the list of requested locales for the application in order of preference. It will cause the corresponding language pack to become active.
4411
4412 Note: For Firefox 68, this can now be a string so that you can specify an empty value.
4413
4414 **Compatibility:** Firefox 64, Firefox ESR 60.4, Updated in Firefox 68, Firefox ESR 68\
4415 **CCK2 Equivalent:** N/A\
4416 **Preferences Affected:** N/A
4417 #### Windows (GPO)
4418 ```
4419 Software\Policies\Mozilla\Firefox\RequestedLocales\1 = "de"
4420 Software\Policies\Mozilla\Firefox\RequestedLocales\2 = "en-US"
4421
4422 or
4423
4424 Software\Policies\Mozilla\Firefox\RequestedLocales = "de,en-US"
4425 ```
4426 #### Windows (Intune)
4427 OMA-URI:
4428 ```
4429 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/RequestedLocalesString
4430 ```
4431 Value (string):
4432 ```
4433 <enabled/>
4434 <data id="Preferences_String" value="de,en-US"/>
4435 ```
4436 #### macOS
4437 ```
4438 <dict>
4439   <key>RequestedLocales</key>
4440   <array>
4441     <string>de</string>
4442     <string>en-US</string>
4443   </array>
4444 </dict>
4445
4446 or
4447
4448 <dict>
4449   <key>RequestedLocales</key>
4450   <string>de,en-US</string>
4451 </dict>
4452
4453 ```
4454 #### policies.json
4455 ```
4456 {
4457   "policies": {
4458     "RequestedLocales": ["de", "en-US"]
4459   }
4460 }
4461
4462 or
4463
4464 {
4465   "policies": {
4466     "RequestedLocales": "de,en-US"
4467   }
4468 }
4469 ```
4470 <a name="SanitizeOnShutdown"></a>
4471
4472 ### SanitizeOnShutdown (Selective)
4473 Clear data on shutdown. Choose from Cache, Cookies, Download History, Form & Search History, Browsing History, Active Logins, Site Preferences and Offline Website Data.
4474
4475 Previously, these values were always locked. Starting with Firefox 74 and Firefox ESR 68.6, you can use the `Locked` option to either keep the values unlocked (set it to false), or lock only the values you set (set it to true). If you want the old behavior of locking everything, do not set `Locked` at all.
4476
4477 **Compatibility:** Firefox 68, Firefox ESR 68 (Locked added in 74/68.6)\
4478 **CCK2 Equivalent:** N/A\
4479 **Preferences Affected:** `privacy.sanitize.sanitizeOnShutdown`,`privacy.clearOnShutdown.cache`,`privacy.clearOnShutdown.cookies`,`privacy.clearOnShutdown.downloads`,`privacy.clearOnShutdown.formdata`,`privacy.clearOnShutdown.history`,`privacy.clearOnShutdown.sessions`,`privacy.clearOnShutdown.siteSettings`,`privacy.clearOnShutdown.offlineApps`
4480 #### Windows (GPO)
4481 ```
4482 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Cache = 0x1 | 0x0
4483 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Cookies = 0x1 | 0x0
4484 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Downloads = 0x1 | 0x0
4485 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\FormData = 0x1 | 0x0
4486 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\History = 0x1 | 0x0
4487 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Sessions = 0x1 | 0x0
4488 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\SiteSettings = 0x1 | 0x0
4489 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\OfflineApps = 0x1 | 0x0
4490 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Locked = 0x1 | 0x0
4491 ```
4492 #### Windows (Intune)
4493 OMA-URI:
4494 ```
4495 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/A_SanitizeOnShutdown_Cache
4496 ```
4497 Value (string):
4498 ```
4499 <enabled/> or <disabled/>
4500 ```
4501 OMA-URI:
4502 ```
4503 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/B_SanitizeOnShutdown_Cookies
4504 ```
4505 Value (string):
4506 ```
4507 <enabled/> or <disabled/>
4508 ```
4509 OMA-URI:
4510 ```
4511 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/C_SanitizeOnShutdown_Downloads
4512 ```
4513 Value (string):
4514 ```
4515 <enabled/> or <disabled/>
4516 ```
4517 OMA-URI:
4518 ```
4519 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/D_SanitizeOnShutdown_FormData
4520 ```
4521 Value (string):
4522 ```
4523 <enabled/> or <disabled/>
4524 ```
4525 OMA-URI:
4526 ```
4527 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/E_SanitizeOnShutdown_History
4528 ```
4529 Value (string):
4530 ```
4531 <enabled/> or <disabled/>
4532 ```
4533 OMA-URI:
4534 ```
4535 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/F_SanitizeOnShutdown_Sessions
4536 ```
4537 Value (string):
4538 ```
4539 <enabled/> or <disabled/>
4540 ```
4541 OMA-URI:
4542 ```
4543 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/G_SanitizeOnShutdown_SiteSettings
4544 ```
4545 Value (string):
4546 ```
4547 <enabled/> or <disabled/>
4548 ```
4549 OMA-URI:
4550 ```
4551 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/H_SanitizeOnShutdown_OfflineApps
4552 ```
4553 Value (string):
4554 ```
4555 <enabled/> or <disabled/>
4556 ```
4557 OMA-URI:
4558 ```
4559 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/I_SanitizeOnShutdown_Locked
4560 ```
4561 Value (string):
4562 ```
4563 <enabled/> or <disabled/>
4564 ```
4565 #### macOS
4566 ```
4567 <dict>
4568   <key>SanitizeOnShutdown</key>
4569   <dict>
4570     <key>Cache</key>
4571     <true/> | <false/>
4572     <key>Cookies</key>
4573     <true/> | <false/>
4574     <key>Downloads</key>
4575     <true/> | <false/>
4576     <key>FormData</key>
4577     <true/> | <false/>
4578     <key>History</key>
4579     <true/> | <false/>
4580     <key>Sessions</key>
4581     <true/> | <false/>
4582     <key>SiteSettings</key>
4583     <true/> | <false/>
4584     <key>OfflineApps</key>
4585     <true/> | <false/>
4586     <key>Locked</key>
4587     <true/> | <false/>
4588   </dict>
4589 </dict>
4590 ```
4591 #### policies.json
4592 ```
4593 {
4594   "policies": {
4595     "SanitizeOnShutdown": {
4596       "Cache": true | false,
4597       "Cookies": true | false,
4598       "Downloads": true | false,
4599       "FormData": true | false,
4600       "History": true | false,
4601       "Sessions": true | false,
4602       "SiteSettings": true | false,
4603       "OfflineApps": true | false,
4604       "Locked": true | false
4605     }
4606   }
4607 }
4608 ```
4609 ### SanitizeOnShutdown (All)
4610 Clear all data on shutdown, including Browsing & Download History, Cookies, Active Logins, Cache, Form & Search History, Site Preferences and Offline Website Data.
4611
4612 **Compatibility:** Firefox 60, Firefox ESR 60\
4613 **CCK2 Equivalent:** N/A\
4614 **Preferences Affected:** `privacy.sanitize.sanitizeOnShutdown`,`privacy.clearOnShutdown.cache`,`privacy.clearOnShutdown.cookies`,`privacy.clearOnShutdown.downloads`,`privacy.clearOnShutdown.formdata`,`privacy.clearOnShutdown.history`,`privacy.clearOnShutdown.sessions`,`privacy.clearOnShutdown.siteSettings`,`privacy.clearOnShutdown.offlineApps`
4615 #### Windows (GPO)
4616 ```
4617 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown = 0x1 | 0x0
4618 ```
4619 #### Windows (Intune)
4620 OMA-URI:
4621 ```
4622 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/C_SanitizeOnShutdown
4623 ```
4624 Value (string):
4625 ```
4626 <enabled/> or <disabled/>
4627 ```
4628 #### macOS
4629 ```
4630 <dict>
4631   <key>SanitizeOnShutdown</key>
4632   <true/> | <false/>
4633 </dict>
4634 ```
4635 #### policies.json
4636 ```
4637 {
4638   "policies": {
4639     "SanitizeOnShutdown": true | false
4640   }
4641 }
4642 ```
4643 ### SearchBar
4644 Set whether or not search bar is displayed.
4645
4646 **Compatibility:** Firefox 60, Firefox ESR 60\
4647 **CCK2 Equivalent:** `showSearchBar`\
4648 **Preferences Affected:** N/A
4649
4650 #### Windows (GPO)
4651 ```
4652 Software\Policies\Mozilla\Firefox\SearchBar = "unified" | "separate"
4653 ```
4654
4655 #### Windows (Intune)
4656 OMA-URI:
4657 ```
4658 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SearchBar
4659 ```
4660 Value (string):
4661 ```
4662 <enabled/>
4663 <data id="Permissions" value="unified | separate"/>
4664 ```
4665 #### macOS
4666 ```
4667 <dict>
4668   <key>SearchBar</key>
4669   <string>unified | separate</string>
4670 </dict>
4671 ```
4672 #### policies.json
4673 ```
4674 {
4675   "policies": {
4676     "SearchBar": "unified" | "separate"
4677   }
4678 }
4679 ```
4680 <a name="SearchEngines"></a>
4681
4682 ### SearchEngines (This policy is only available on the ESR.)
4683
4684 ### SearchEngines | Default
4685
4686 Set the default search engine. This policy is only available on the ESR.
4687
4688 **Compatibility:** Firefox ESR 60\
4689 **CCK2 Equivalent:** `defaultSearchEngine`\
4690 **Preferences Affected:** N/A
4691
4692 #### Windows (GPO)
4693 ```
4694 Software\Policies\Mozilla\Firefox\SearchEngines\Default = NAME_OF_SEARCH_ENGINE
4695 ```
4696 #### Windows (Intune)
4697 OMA-URI:
4698 ```
4699 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_Default
4700 ```
4701 Value (string):
4702 ```
4703 <enabled/>
4704 <data id="SearchEngines_Default" value="NAME_OF_SEARCH_ENGINE"/>
4705 ```
4706 #### macOS
4707 ```
4708 <dict>
4709   <key>SearchEngines</key>
4710   <dict>
4711     <key>Default</key>
4712     <string>NAME_OF_SEARCH_ENGINE</string>
4713   </dict>
4714 </dict>
4715 ```
4716 #### policies.json
4717 ```
4718 {
4719   "policies": {
4720     "SearchEngines": {
4721       "Default": "NAME_OF_SEARCH_ENGINE"
4722     }
4723   }
4724 }
4725 ```
4726 ### SearchEngines | PreventInstalls
4727
4728 Prevent installing search engines from webpages.
4729
4730 **Compatibility:** Firefox ESR 60\
4731 **CCK2 Equivalent:** `disableSearchEngineInstall`\
4732 **Preferences Affected:** N/A
4733
4734 #### Windows (GPO)
4735 ```
4736 Software\Policies\Mozilla\Firefox\SearchEngines\PreventInstalls = 0x1 | 0x0
4737 ```
4738 #### Windows (Intune)
4739 OMA-URI:
4740 ```
4741 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_PreventInstalls
4742 ```
4743 Value (string):
4744 ```
4745 <enabled/> or <disabled/>
4746 ```
4747 #### macOS
4748 ```
4749 <dict>
4750   <key>SearchEngines</key>
4751   <dict>
4752     <key>PreventInstalls</key>
4753     <true/> | <false/>
4754   </dict>
4755 </dict>
4756 ```
4757 #### policies.json
4758 ```
4759 {
4760   "policies": {
4761     "SearchEngines": {
4762       "PreventInstalls": true | false
4763     }
4764   }
4765 }
4766 ```
4767 ### SearchEngines | Remove
4768
4769 Hide built-in search engines. This policy is only available on the ESR.
4770
4771 **Compatibility:** Firefox ESR 60.2\
4772 **CCK2 Equivalent:** `removeDefaultSearchEngines` (removed all built-in engines)\
4773 **Preferences Affected:** N/A
4774
4775 #### Windows (GPO)
4776 ```
4777 Software\Policies\Mozilla\Firefox\SearchEngines\Remove\1 = NAME_OF_SEARCH_ENGINE
4778 ```
4779 #### Windows (Intune)
4780 OMA-URI:
4781 ```
4782 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_Remove
4783 ```
4784 Value (string):
4785 ```
4786 <enabled/>
4787 <data id="SearchEngines_Remove" value="1&#xF000;NAME_OF_SEARCH_ENGINE"/>
4788 ```
4789 #### macOS
4790 ```
4791 <dict>
4792   <key>SearchEngines</key>
4793   <dict>
4794     <key>Remove</key>
4795     <array>
4796       <string>NAME_OF_SEARCH_ENGINE</string>
4797     </array>
4798   </dict>
4799 </dict>
4800 ```
4801 #### policies.json
4802 ```
4803 {
4804   "policies": {
4805     "SearchEngines": {
4806       "Remove": ["NAME_OF_SEARCH_ENGINE"]
4807     }
4808   }
4809 }
4810 ```
4811 ### SearchEngines | Add
4812
4813 Add new search engines (up to five). This policy is only available on the ESR. `Name` and `URLTemplate` are required.
4814
4815 `Name` is the name of the search engine.
4816
4817 `URLTemplate` is the search URL with {searchTerms} to substitute for the search term.
4818
4819 `Method` is either GET or POST
4820
4821 `IconURL` is a URL for the icon to use.
4822
4823 `Alias` is a keyword to use for the engine.
4824
4825 `Description` is a description of the search engine.
4826
4827 `PostData` is the POST data as name value pairs separated by &.
4828
4829 `SuggestURLTemplate` is a search suggestions URL with {searchTerms} to substitute for the search term.
4830
4831 **Compatibility:** Firefox ESR 60 (POST support in Firefox ESR 68)\
4832 **CCK2 Equivalent:** `searchplugins`\
4833 **Preferences Affected:** N/A
4834
4835 #### Windows (GPO)
4836 ```
4837 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Name = "Example1"
4838 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\URLTemplate = "https://www.example.org/q={searchTerms}"
4839 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Method = "GET" | "POST"
4840 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\IconURL = "https://www.example.org/favicon.ico"
4841 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Alias = "example"
4842 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Description = "Example Description"
4843 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\SuggestURLTemplate = "https://www.example.org/suggestions/q={searchTerms}"
4844 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\PostData = "name=value&q={searchTerms}"
4845 ```
4846 #### Windows (Intune)
4847 OMA-URI:
4848 ```
4849 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_1
4850 ```
4851 Value (string):
4852 ```
4853 <enabled/>
4854 <data id="SearchEngine_Name" value="Example1"/>
4855 <data id="SearchEngine_URLTemplate" value="https://www.example.org/q={searchTerms"/>
4856 <data id="SearchEngine_Method" value="GET | POST"/>
4857 <data id="SearchEngine_IconURL" value="https://www.example.org/favicon.ico"/>
4858 <data id="SearchEngine_Alias" value="example"/>
4859 <data id="SearchEngine_Description" value="Example Description"/>
4860 <data id="SearchEngine_SuggestURLTemplate" value="https://www.example.org/suggestions/q={searchTerms}"/>
4861 <data id="SearchEngine_PostData" value="name=value&amp;q={searchTerms}"/>
4862 ```
4863 #### macOS
4864 ```
4865 <dict>
4866   <key>SearchEngines</key>
4867   <dict>
4868     <key>Add</key>
4869     <array>
4870       <dict>
4871         <key>Name</key>
4872         <string>Example1</string>
4873         <key>URLTemplate</key>
4874         <string>https://www.example.org/q={searchTerms}</string>
4875         <key>Method</key>
4876         <string>GET | POST </string>
4877         <key>IconURL</key>
4878         <string>https://www.example.org/favicon.ico</string>
4879         <key>Alias</key>
4880         <string>example</string>
4881         <key>Description</key>
4882         <string>Example Description</string>
4883         <key>SuggestURLTemplate</key>
4884         <string>https://www.example.org/suggestions/q={searchTerms}</string>
4885         <key>PostData</key>
4886         <string>name=value&q={searchTerms}</string>
4887       </dict>
4888     <array>
4889   </dict>
4890 </dict>
4891 ```
4892 #### policies.json
4893 ```
4894 {
4895   "policies": {
4896     "SearchEngines": {
4897       "Add": [
4898         {
4899           "Name": "Example1",
4900           "URLTemplate": "https://www.example.org/q={searchTerms}",
4901           "Method": "GET" | "POST",
4902           "IconURL": "https://www.example.org/favicon.ico",
4903           "Alias": "example",
4904           "Description": "Description",
4905           "PostData": "name=value&q={searchTerms}",
4906           "SuggestURLTemplate": "https://www.example.org/suggestions/q={searchTerms}"
4907         }
4908       ]
4909     }
4910   }
4911 }
4912 ```
4913 ### SearchSuggestEnabled
4914
4915 Enable search suggestions.
4916
4917 **Compatibility:** Firefox 68, Firefox ESR 68\
4918 **CCK2 Equivalent:** N/A\
4919 **Preferences Affected:** `browser.urlbar.suggest.searches`,`browser.search.suggest.enabled`
4920
4921 #### Windows (GPO)
4922 ```
4923 Software\Policies\Mozilla\Firefox\SearchSuggestEnabled = 0x1 | 0x0
4924 ```
4925 #### Windows (Intune)
4926 OMA-URI:
4927 ```
4928 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchSuggestEnabled
4929 ```
4930 Value (string):
4931 ```
4932 <enabled/> or <disabled/>
4933 ```
4934 #### macOS
4935 ```
4936 <dict>
4937   <key>SearchSuggestEnabled</key>
4938   <true/> | <false/>
4939 </dict>
4940 ```
4941 #### policies.json
4942 ```
4943 {
4944   "policies": {
4945     "SearchSuggestEnabled": true | false
4946   }
4947 }
4948 ```
4949 ### SecurityDevices
4950
4951 Install PKCS #11 modules.
4952
4953 **Compatibility:** Firefox 64, Firefox ESR 60.4\
4954 **CCK2 Equivalent:** `certs.devices`\
4955 **Preferences Affected:** N/A
4956
4957 #### Windows (GPO)
4958 ```
4959 Software\Policies\Mozilla\Firefox\SecurityDevices\NAME_OF_DEVICE = PATH_TO_LIBRARY_FOR_DEVICE
4960 ```
4961 #### Windows (Intune)
4962 OMA-URI:
4963 ```
4964 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SecurityDevices
4965 ```
4966 Value (string):
4967 ```
4968 <enabled/>
4969 <data id="SecurityDevices" value="NAME_OF_DEVICE&#xF000;PATH_TO_LIBRARY_FOR_DEVICE"/>
4970 ```
4971 #### macOS
4972 ```
4973 <dict>
4974   <key>SecurityDevices</key>
4975   <dict>
4976     <key>NAME_OF_DEVICE</key>
4977     <string>PATH_TO_LIBRARY_FOR_DEVICE</string>
4978   </dict>
4979 </dict>
4980 ```
4981
4982 #### policies.json
4983 ```
4984 {
4985   "policies": {
4986     "SecurityDevices": {
4987       "NAME_OF_DEVICE": "PATH_TO_LIBRARY_FOR_DEVICE"
4988     }
4989   }
4990 }
4991 ```
4992 ### SSLVersionMax
4993
4994 Set and lock the maximum version of TLS.
4995
4996 **Compatibility:** Firefox 66, Firefox ESR 60.6\
4997 **CCK2 Equivalent:** N/A\
4998 **Preferences Affected:** `security.tls.version.max`
4999
5000 #### Windows (GPO)
5001 ```
5002 Software\Policies\Mozilla\Firefox\SSLVersionMax = "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
5003 ```
5004 #### Windows (Intune)
5005 OMA-URI:
5006 ```
5007 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SSLVersionMax
5008 ```
5009 Value (string):
5010 ```
5011 <enabled/>
5012 <data id="SSLVersion" value="tls1 | tls1.2 | tls1.3"/>
5013 ```
5014 #### macOS
5015 ```
5016 <dict>
5017   <key>SSLVersionMax</key>
5018   <string>tls1 | tls1.1 | tls1.2 | tls1.3</string>
5019 </dict>
5020 ```
5021
5022 #### policies.json
5023 ```
5024 {
5025   "policies": {
5026     "SSLVersionMax": "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
5027   }
5028 }
5029 ```
5030 ### SSLVersionMin
5031
5032 Set and lock the minimum version of TLS.
5033
5034 **Compatibility:** Firefox 66, Firefox ESR 60.6\
5035 **CCK2 Equivalent:** N/A\
5036 **Preferences Affected:** `security.tls.version.min`
5037
5038 #### Windows (GPO)
5039 ```
5040 Software\Policies\Mozilla\Firefox\SSLVersionMin = "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
5041 ```
5042 #### Windows (Intune)
5043 OMA-URI:
5044 ```
5045 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SSLVersionMin
5046 ```
5047 Value (string):
5048 ```
5049 <enabled/>
5050 <data id="SSLVersion" value="tls1 | tls1.2 | tls1.3"/>
5051 ```
5052 #### macOS
5053 ```
5054 <dict>
5055   <key>SSLVersionMin</key>
5056   <string>tls1 | tls1.1 | tls1.2 | tls1.3</string>
5057 </dict>
5058 ```
5059
5060 #### policies.json
5061 ```
5062 {
5063   "policies": {
5064     "SSLVersionMin": "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
5065   }
5066 }
5067 ```
5068 ### SupportMenu
5069 Add a menuitem to the help menu for specifying support information.
5070
5071 **Compatibility:** Firefox 68.0.1, Firefox ESR 68.0.1\
5072 **CCK2 Equivalent:** helpMenu\
5073 **Preferences Affected:** N/A
5074
5075 #### Windows (GPO)
5076 ```
5077 Software\Policies\Mozilla\Firefox\SupportMenu\Title = "Support Menu"
5078 Software\Policies\Mozilla\Firefox\SupportMenu\URL = "http://example.com/support"
5079 Software\Policies\Mozilla\Firefox\SupportMenu\AccessKey = "S"
5080 ```
5081 #### Windows (Intune)
5082 OMA-URI:
5083 ```
5084 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SupportMenu
5085 ```
5086 Value (string):
5087 ```
5088 <enabled/>
5089 <data id="SupportMenuTitle" value="Support Menu"/>
5090 <data id="SupportMenuURL" value="http://example.com/support"/>
5091 <data id="SupportMenuAccessKey" value="S">
5092 ```
5093 #### macOS
5094 ```
5095 <dict>
5096   <key>SupportMenu</key>
5097   <dict>
5098     <key>Title</key>
5099     <string>SupportMenu</string>
5100     <key>URL</key>
5101     <string>http://example.com/support</string>
5102     <key>AccessKey</key>
5103     <string>S</string>
5104   </dict>
5105 </dict>
5106 ```
5107 #### policies.json
5108 ```
5109 {
5110   "policies": {
5111     "SupportMenu": {
5112       "Title": "Support Menu",
5113       "URL": "http://example.com/support",
5114       "AccessKey": "S"
5115     }
5116   }
5117 }
5118 ```
5119 ### UserMessaging
5120
5121 Prevent Firefox from messaging the user in certain situations.
5122
5123 `WhatsNew` Remove the "What's New" icon and menuitem. (Firefox 75 only)
5124
5125 `ExtensionRecommendations` Don't recommend extensions while the user is visiting web pages.
5126
5127 `FeatureRecommendations` Don't recommend browser features.
5128
5129 `UrlbarInterventions` Don't offer Firefox specific suggestions in the URL bar. (Firefox 75 only)
5130
5131 **Compatibility:** Firefox 75, Firefox ESR 68.7\
5132 **CCK2 Equivalent:** N/A\
5133 **Preferences Affected:** `browser.messaging-system.whatsNewPanel.enabled`,`browser.newtabpage.activity-stream.asrouter.userprefs.cfr.addons`,`browser.newtabpage.activity-stream.asrouter.userprefs.cfr.features`
5134
5135 #### Windows (GPO)
5136 ```
5137 Software\Policies\Mozilla\Firefox\UserMessaging\WhatsNew = 0x1 | 0x0
5138 Software\Policies\Mozilla\Firefox\UserMessaging\ExtensionRecommendations = 0x1 | 0x0
5139 Software\Policies\Mozilla\Firefox\UserMessaging\FeatureRecommendations = 0x1 | 0x0
5140 Software\Policies\Mozilla\Firefox\UserMessaging\UrlbarInterventions = 0x1 | 0x0
5141 ```
5142 #### Windows (Intune)
5143 OMA-URI:
5144 ```
5145 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/UserMessaging_WhatsNew
5146 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/UserMessaging_ExtensionRecommendations
5147 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/UserMessaging_FeatureRecommendations
5148 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/UserMessaging_UrlbarInterventions
5149 ```
5150 Value (string):
5151 ```
5152 <enabled/> or <disabled/>
5153 ```
5154 #### macOS
5155 ```
5156 <dict>
5157   <key>UserMessaging</key>
5158   <dict>
5159     <key>WhatsNew</key>
5160     <true/> | <false/>
5161     <key>ExtensionRecommendations</key>
5162     <true/> | <false/>
5163     <key>FeatureRecommendations</key>
5164     <true/> | <false/>
5165     <key>UrlbarInterventions</key>
5166     <true/> | <false/>
5167   </dict>
5168 </dict>
5169 ```
5170 #### policies.json
5171 ```
5172 {
5173   "policies": {
5174     "UserMessaging": {
5175       "WhatsNew": true | false,
5176       "ExtensionRecommendations": true | false,
5177       "FeatureRecommendations": true | false,
5178       "UrlbarInterventions": true | false
5179     }
5180   }
5181 }
5182 ```
5183 ### WebsiteFilter
5184 Block websites from being visited. The parameters take an array of Match Patterns, as documented in https://developer.mozilla.org/en-US/Add-ons/WebExtensions/Match_patterns.
5185 The arrays are limited to 1000 entries each.
5186
5187 As of Firefox 83 and Firefox ESR 78.5, file URLs are supported.
5188
5189 **Compatibility:** Firefox 60, Firefox ESR 60\
5190 **CCK2 Equivalent:** N/A\
5191 **Preferences Affected:** N/A
5192
5193 #### Windows (GPO)
5194 ```
5195 Software\Policies\Mozilla\Firefox\WebsiteFilter\Block\1 = "<all_urls>"
5196 Software\Policies\Mozilla\Firefox\WebsiteFilter\Exceptions\1 = "http://example.org/*"
5197 ```
5198 #### Windows (Intune)
5199 OMA-URI:
5200 ```
5201 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/B_WebsiteFilter_Block
5202 ```
5203 Value (string):
5204 ```
5205 <enabled/>
5206 <data id="WebsiteFilter" value="1&#xF000;<all_urls>"/>
5207 ```
5208 OMA-URI:
5209 ```
5210 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/B_WebsiteFilter_Exceptions
5211 ```
5212 Value (string):
5213 ```
5214 <enabled/>
5215 <data id="WebsiteFilter" value="1&#xF000;http://example.org/*"/>
5216 ```
5217 #### macOS
5218 ```
5219 <dict>
5220   <key>WebsiteFilter</key>
5221   <dict>
5222     <key>Block</key>
5223     <array>
5224       <string><all_urls></string>
5225     </array>
5226     <key>Exceptions</key>
5227     <array>
5228       <string>http://example.org/*</string>
5229     </array>
5230   </dict>
5231
5232 </dict>
5233 ```
5234 #### policies.json
5235 ```
5236 {
5237   "policies": {
5238     "WebsiteFilter": {
5239       "Block": ["<all_urls>"],
5240       "Exceptions": ["http://example.org/*"]
5241     }
5242   }
5243 }
5244 ```