README.md

   1 **These policies are in active development and so might contain changes that do not work with current versions of Firefox.**
   2
   3 **You should use the officially released versions (https://github.com/mozilla/policy-templates/releases) if you are deploying changes.**
   4
   5 Policies can be specified using the Group Policy templates on Windows (https://github.com/mozilla/policy-templates/tree/master/windows), configuration profiles on macOS (https://github.com/mozilla/policy-templates/tree/master/mac), or by creating a file called `policies.json`. On Windows, create a directory called `distribution` where the EXE is located and place the file there. On Mac, the file goes into `Firefox.app/Contents/Resources/distribution`.  On Linux, the file goes into `firefox/distribution`, where `firefox` is the installation directory for firefox, which varies by distribution.
   6
   7 | Policy Name | Description
   8 | --- | --- |
   9 | **[`AppAutoUpdate`](#appautoupdate)** |  Enable or disable automatic application update.
  10 | **[`AppUpdateURL`](#appupdateurl)** | Change the URL for application update.
  11 | **[`Authentication`](#authentication)** | Configure sites that support integrated authentication.
  12 | **[`BlockAboutAddons`](#blockaboutaddons)** | Block access to the Add-ons Manager (about:addons).
  13 | **[`BlockAboutConfig`](#blockaboutconfig)** | Block access to about:config.
  14 | **[`BlockAboutProfiles`](#blockaboutprofiles)** | Block access to About Profiles (about:profiles).
  15 | **[`BlockAboutSupport`](#blockaboutsupport)** | Block access to Troubleshooting Information (about:support).
  16 | **[`Bookmarks`](#bookmarks)** | Add bookmarks in either the bookmarks toolbar or menu.
  17 | **[`CaptivePortal`](#captiveportal)** | Enable or disable the detection of captive portals.
  18 | **[`Certificates`](#certificates)** |
  19 | **[`Certificates -> ImportEnterpriseRoots`](#certificates--importenterpriseroots)** | Trust certificates that have been added to the operating system certificate store by a user or administrator.
  20 | **[`Certificates -> Install`](#certificates--install)** | Install certificates into the Firefox certificate store.
  21 | **[`Cookies`](#cookies)** | Configure cookie preferences.
  22 | **[`DisableSetDesktopBackground`](#disablesetdesktopbackground)** | Remove the "Set As Desktop Background..." menuitem when right clicking on an image.
  23 | **[`DisableMasterPasswordCreation`](#disablemasterpasswordcreation)** | Remove the master password functionality.
  24 | **[`DisableAppUpdate`](#disableappupdate)** | Turn off application updates.
  25 | **[`DisableBuiltinPDFViewer`](#disablebuiltinpdfviewer)** | Disable the built in PDF viewer.
  26 | **[`DisabledCiphers`](#disabledciphers)** | Disable ciphers.
  27 | **[`DisableDefaultBrowserAgent`](#disabledefaultbrowseragent)** | Prevent the default browser agent from taking any actions (Windows only).
  28 | **[`DisableDeveloperTools`](#disabledevelopertools)** | Remove access to all developer tools.
  29 | **[`DisableFeedbackCommands`](#disablefeedbackcommands)** | Disable the menus for reporting sites.
  30 | **[`DisableFirefoxScreenshots`](#disablefirefoxscreenshots)** | Remove access to Firefox Screenshots.
  31 | **[`DisableFirefoxAccounts`](#disablefirefoxaccounts)** | Disable Firefox Accounts integration (Sync).
  32 | **[`DisableFirefoxStudies`](#disablefirefoxstudies)** | Disable Firefox studies (Shield).
  33 | **[`DisableForgetButton`](#disableforgetbutton)** | Disable the "Forget" button.
  34 | **[`DisableFormHistory`](#disableformhistory)** | Turn off saving information on web forms and the search bar.
  35 | **[`DisablePocket`](#disablepocket)** | Remove Pocket in the Firefox UI.
  36 | **[`DisablePrivateBrowsing`](#disableprivatebrowsing)** | Remove access to private browsing.
  37 | **[`DisablePasswordReveal`](#disablepasswordreveal)** | Do not allow passwords to be revealed in saved logins.
  38 | **[`DisableProfileImport`](#disableprofileimport)** | Disables the "Import data from another browser" option in the bookmarks window.
  39 | **[`DisableProfileRefresh`](#disableprofilerefresh)** | Disable the Refresh Firefox button on about:support and support.mozilla.org
  40 | **[`DisableSafeMode`](#disablesafemode)** | Disable safe mode within the browser.
  41 | **[`DisableSecurityBypass`](#disablesecuritybypass)** | Prevent the user from bypassing security in certain cases.
  42 | **[`DisableSystemAddonUpdate`](#disablesystemaddonupdate)** | Prevent system add-ons from being installed or update.
  43 | **[`DisableTelemetry`](#disabletelemetry)** | DisableTelemetry
  44 | **[`DisplayBookmarksToolbar`](#displaybookmarkstoolbar)** | Set the initial state of the bookmarks toolbar.
  45 | **[`DisplayMenuBar (Deprecated)`](#displaymenubar-deprecated)** | Set the initial state of the menubar.
  46 | **[`DisplayMenuBar`](#displaymenubar)** | Set the state of the menubar.
  47 | **[`DNSOverHTTPS`](#dnsoverhttps)** | Configure DNS over HTTPS.
  48 | **[`DontCheckDefaultBrowser`](#dontcheckdefaultbrowser)** | Don't check if Firefox is the default browser at startup.
  49 | **[`DefaultDownloadDirectory`](#defaultdownloaddirectory)** | Set the default download directory.
  50 | **[`DownloadDirectory`](#downloaddirectory)** | Set and lock the download directory.
  51 | **[`EnableTrackingProtection`](#enabletrackingprotection)** | Configure tracking protection.
  52 | **[`EnterprisePoliciesEnabled`](#enterprisepoliciesenabled)** | Enable policy support on macOS.
  53 | **[`Extensions`](#extensions)** | Control the installation, uninstallation and locking of extensions.
  54 | **[`ExtensionSettings`](#extensionsettings)** | Manage all aspects of extensions.
  55 | **[`ExtensionUpdate`](#extensionupdate)** | Control extension updates.
  56 | **[`FlashPlugin`](#flashplugin)** | Configure the default Flash plugin policy as well as origins for which Flash is allowed.
  57 | **[`FirefoxHome`](#firefoxhome)** | Customize the Firefox Home page.
  58 | **[`HardwareAcceleration`](#hardwareacceleration)** | Control hardware acceleration.
  59 | **[`Homepage`](#homepage)** | Configure the default homepage and how Firefox starts.
  60 | **[`InstallAddonsPermission`](#installaddonspermission)** | Configure the default extension install policy as well as origins for extension installs are allowed.
  61 | **[`LegacyProfiles`](#legacyprofiles)** | Disable the feature enforcing a separate profile for each installation.
  62 | **[`LocalFileLinks`](#localfilelinks)** | Enable linking to local files by origin.
  63 | **[`NetworkPrediction`](#networkprediction)** | Enable or disable network prediction (DNS prefetching).
  64 | **[`NewTabPage`](#newtabpage)** | Enable or disable the New Tab page.
  65 | **[`NoDefaultBookmarks`](#nodefaultbookmarks)** | Disable the creation of default bookmarks.
  66 | **[`OfferToSaveLogins`](#offertosavelogins)** | Control whether or not Firefox offers to save passwords.
  67 | **[`OfferToSaveLoginsDefault`](#offertosaveloginsdefault)** | Set the default value for whether or not Firefox offers to save passwords.
  68 | **[`OverrideFirstRunPage`](#overridefirstrunpage)** | Override the first run page.
  69 | **[`OverridePostUpdatePage`](#overridepostupdatepage)** | Override the upgrade page.
  70 | **[`PasswordManagerEnabled`](#passwordmanagerenabled)** | Remove (some) access to the password manager.
  71 | **[`Permissions`](#permissions)** | Set permissions associated with camera, microphone, location, and notifications.
  72 | **[`PopupBlocking`](#popupblocking)** | Configure the default pop-up window policy as well as origins for which pop-up windows are allowed.
  73 | **[`Preferences`](#preferences)** | Set and lock some preferences.
  74 | **[`PromptForDownloadLocation`](#promptfordownloadlocation)** | Ask where to save each file before downloading.
  75 | **[`Proxy`](#proxy)** | Configure proxy settings.
  76 | **[`RequestedLocales`](#requestedlocales)** | Set the the list of requested locales for the application in order of preference.
  77 | **[`SanitizeOnShutdown` (All)](#sanitizeonshutdown-all)** | Clear all data on shutdown.
  78 | **[`SanitizeOnShutdown` (Selective)](#sanitizeonshutdown-selective)** | Clear data on shutdown.
  79 | **[`SearchBar`](#searchbar)** | Set whether or not search bar is displayed.
  80 | **[`SearchEngines`](#searchengines-this-policy-is-only-available-on-the-esr)** |
  81 | **[`SearchEngines -> Default`](#searchengines--default)** | Set the default search engine.
  82 | **[`SearchEngines -> PreventInstalls`](#searchengines--preventinstalls)** | Prevent installing search engines from webpages.
  83 | **[`SearchEngines -> Remove`](#searchengines--remove)** | Hide built-in search engines.
  84 | **[`SearchEngines -> Add`](#searchengines--add)** | Add new search engines.
  85 | **[`SecurityDevices`](#securitydevices)** | Install PKCS #11 modules.
  86 | **[`SearchSuggestEnabled`](#searchsuggestenabled)** | Enable search suggestions.
  87 | **[`SSLVersionMax`](#sslversionmax)** | Set and lock the maximum version of TLS.
  88 | **[`SSLVersionMin`](#sslversionmin)** | Set and lock the minimum version of TLS.
  89 | **[`SupportMenu`](#supportmenu)** | Add a menuitem to the help menu for specifying support information.
  90 | **[`UserMessaging`](#usermessaging)** | Don't show certain messages to the user.
  91 | **[`WebsiteFilter`](#websitefilter)** | Block websites from being visited.
  92
  93 ### AppAutoUpdate
  94
  95 Enable or disable **automatic** application update.
  96
  97 If set to true, application updates are installed without user approval.
  98
  99 If set to false, application updates are downloaded but the user can choose when to install the update.
 100
 101 If you have disabled updates via DisableAppUpdate, this policy has no effect.
 102
 103 **Compatibility:** Firefox 75, Firefox ESR 68.7\
 104 **CCK2 Equivalent:** N/A\
 105 **Preferences Affected:** app.update.auto
 106
 107 #### Windows (GPO)
 108 ```
 109 Software\Policies\Mozilla\Firefox\AppAutoUpdate = 0x1 | 0x0
 110 ```
 111 #### macOS
 112 ```
 113 <dict>
 114   <key>AppAutoUpdate</key>
 115   <true/> | <false/>
 116 </dict>
 117 ```
 118 #### policies.json
 119 ```
 120 {
 121   "policies": {
 122     "AppAutoUpdate": true | false
 123   }
 124 }
 125 ```
 126 ### AppUpdateURL
 127
 128 Change the URL for application update.
 129
 130 **Compatibility:** Firefox 62, Firefox ESR 60.2\
 131 **CCK2 Equivalent:** N/A\
 132 **Preferences Affected:** `app.update.url`
 133
 134 #### Windows (GPO)
 135 ```
 136 Software\Policies\Mozilla\Firefox\AppUpdateURL = "https://yoursite.com"
 137 ```
 138 #### macOS
 139 ```
 140 <dict>
 141   <key>AppUpdateURL</key>
 142   <string>https://yoursite.com</string>
 143 </dict>
 144 ```
 145 #### policies.json
 146 ```
 147 {
 148   "policies": {
 149     "AppUpdateURL": "https://yoursite.com"
 150   }
 151 }
 152 ```
 153 ### Authentication
 154
 155 Configure sites that support integrated authentication.
 156
 157 See https://developer.mozilla.org/en-US/docs/Mozilla/Integrated_authentication for more information.
 158
 159 **Compatibility:** Firefox 60, Firefox ESR 60 (AllowNonFQDN added in 62/60.2, AllowProxies added in 70/68.2, Locked added in 71/68.3)\
 160 **CCK2 Equivalent:** N/A\
 161 **Preferences Affected:** `network.negotiate-auth.trusted-uris`,`network.negotiate-auth.delegation-uris`,`network.automatic-ntlm-auth.trusted-uris`,`network.automatic-ntlm-auth.allow-non-fqdn`,`network.negotiate-auth.allow-non-fqdn`,`network.automatic-ntlm-auth.allow-proxies`,`network.negotiate-auth.allow-proxies`
 162
 163 #### Windows (GPO)
 164 ```
 165 Software\Policies\Mozilla\Firefox\Authentication\SPNEGO\1 = "mydomain.com"
 166 Software\Policies\Mozilla\Firefox\Authentication\SPNEGO\2 = "https://myotherdomain.com"
 167 Software\Policies\Mozilla\Firefox\Authentication\Delegated\1 = "mydomain.com"
 168 Software\Policies\Mozilla\Firefox\Authentication\Delegated\2 = "https://myotherdomain.com"
 169 Software\Policies\Mozilla\Firefox\Authentication\NTLM\1 = "mydomain.com"
 170 Software\Policies\Mozilla\Firefox\Authentication\NTLM\2 = "https://myotherdomain.com"
 171 Software\Policies\Mozilla\Firefox\Authentication\AllowNonFQDN\SPNEGO = 0x1 | 0x0
 172 Software\Policies\Mozilla\Firefox\Authentication\AllowNonFQDN\NTLM = 0x1 | 0x0
 173 Software\Policies\Mozilla\Firefox\Authentication\AllowProxies\SPNEGO = 0x1 | 0x0
 174 Software\Policies\Mozilla\Firefox\Authentication\AllowProxies\NTLM = 0x1 | 0x0
 175 Software\Policies\Mozilla\Firefox\Authentication\Locked = 0x1 | 0x0
 176 ```
 177 #### macOS
 178 ```
 179 <dict>
 180   <key>Authentication</key>
 181   <dict>
 182     <key>SPNEGO</key>
 183     <array>
 184       <string>mydomain.com</string>
 185       <string>https://myotherdomain.com</string>
 186     </array>
 187     <key>Delegated</key>
 188     <array>
 189       <string>mydomain.com</string>
 190       <string>https://myotherdomain.com</string>
 191     </array>
 192     <key>NTLM</key>
 193     <array>
 194       <string>mydomain.com</string>
 195       <string>https://myotherdomain.com</string>
 196     </array>
 197     <key>AllowNonFQDN</key>
 198       <dict>
 199       <key>SPNEGO</key>
 200       <true/> | <false/>
 201       <key>NTLM</key>
 202       <true/> | <false/>
 203     </dict>
 204     <key>AllowProxies</key>
 205       <dict>
 206       <key>SPNEGO</key>
 207       <true/> | <false/>
 208       <key>NTLM</key>
 209       <true/> | <false/>
 210     </dict>
 211     <key>Locked</key>
 212     <true/> | <false/>
 213   </dict>
 214 </dict>
 215 ```
 216 #### policies.json
 217 ```
 218 {
 219   "policies": {
 220     "Authentication": {
 221       "SPNEGO": ["mydomain.com", "https://myotherdomain.com"],
 222       "Delegated": ["mydomain.com", "https://myotherdomain.com"],
 223       "NTLM": ["mydomain.com", "https://myotherdomain.com"],
 224       "AllowNonFQDN": {
 225         "SPNEGO": true | false,
 226         "NTLM": true | false
 227       },
 228       "AllowProxies": {
 229         "SPNEGO": true | false,
 230         "NTLM": true | false
 231       },
 232       "Locked": true | false
 233     }
 234   }
 235 }
 236 ```
 237 ### BlockAboutAddons
 238
 239 Block access to the Add-ons Manager (about:addons).
 240
 241 **Compatibility:** Firefox 60, Firefox ESR 60\
 242 **CCK2 Equivalent:** `disableAddonsManager`\
 243 **Preferences Affected:** N/A
 244
 245 #### Windows (GPO)
 246 ```
 247 Software\Policies\Mozilla\Firefox\BlockAboutAddons = 0x1 | 0x0
 248 ```
 249 #### macOS
 250 ```
 251 <dict>
 252   <key>BlockAboutAddons</key>
 253   <true/> | <false/>
 254 </dict>
 255 ```
 256 #### policies.json
 257 ```
 258 {
 259   "policies": {
 260     "BlockAboutAddons": true | false
 261   }
 262 }
 263 ```
 264 ### BlockAboutConfig
 265
 266 Block access to about:config.
 267
 268 **Compatibility:** Firefox 60, Firefox ESR 60\
 269 **CCK2 Equivalent:** `disableAboutConfig`\
 270 **Preferences Affected:** N/A
 271
 272 #### Windows (GPO)
 273 ```
 274 Software\Policies\Mozilla\Firefox\BlockAboutConfig = 0x1 | 0x0
 275 ```
 276 #### macOS
 277 ```
 278 <dict>
 279   <key>BlockAboutConfig</key>
 280   <true/> | <false/>
 281 </dict>
 282 ```
 283 #### policies.json
 284 ```
 285 {
 286   "policies": {
 287     "BlockAboutConfig": true | false
 288   }
 289 }
 290 ```
 291 ### BlockAboutProfiles
 292
 293 Block access to About Profiles (about:profiles).
 294
 295 **Compatibility:** Firefox 60, Firefox ESR 60\
 296 **CCK2 Equivalent:** `disableAboutProfiles`\
 297 **Preferences Affected:** N/A
 298
 299 #### Windows (GPO)
 300 ```
 301 Software\Policies\Mozilla\Firefox\BlockAboutProfiles = 0x1 | 0x0
 302 ```
 303 #### macOS
 304 ```
 305 <dict>
 306   <key>BlockAboutProfiles</key>
 307   <true/> | <false/>
 308 </dict>
 309 ```
 310 #### policies.json
 311 ```
 312 {
 313   "policies": {
 314     "BlockAboutProfiles": true | false
 315   }
 316 }
 317 ```
 318 ### BlockAboutSupport
 319
 320 Block access to Troubleshooting Information (about:support).
 321
 322 **Compatibility:** Firefox 60, Firefox ESR 60\
 323 **CCK2 Equivalent:** `disableAboutSupport`\
 324 **Preferences Affected:** N/A
 325
 326 #### Windows (GPO)
 327 ```
 328 Software\Policies\Mozilla\Firefox\BlockAboutSupport = 0x1 | 0x0
 329 ```
 330 #### macOS
 331 ```
 332 <dict>
 333   <key>BlockAboutSupport</key>
 334   <true/> | <false/>
 335 </dict>
 336 ```
 337 #### policies.json
 338 ```
 339 {
 340   "policies": {
 341     "BlockAboutSupport": true | false
 342   }
 343 }
 344 ```
 345 ### Bookmarks
 346
 347 Add bookmarks in either the bookmarks toolbar or menu. Only `Title` and `URL` are required. If `Placement` is not specified, the bookmark will be placed on the toolbar. If `Folder` is specified, it is automatically created and bookmarks with the same folder name are grouped together.
 348
 349 **Compatibility:** Firefox 60, Firefox ESR 60\
 350 **CCK2 Equivalent:** `bookmarks.toolbar`,`bookmarks.menu`\
 351 **Preferences Affected:** N/A
 352
 353 #### Windows (GPO)
 354 ```
 355 Software\Policies\Mozilla\Firefox\Bookmarks\1\Title = "Example"
 356 Software\Policies\Mozilla\Firefox\Bookmarks\1\URL = "https://example.com"
 357 Software\Policies\Mozilla\Firefox\Bookmarks\1\Favicon = "https://example.com/favicon.ico"
 358 Software\Policies\Mozilla\Firefox\Bookmarks\1\Placement = "toolbar" | "menu"
 359 Software\Policies\Mozilla\Firefox\Bookmarks\1\Folder = "FolderName"
 360 ```
 361 #### macOS
 362 ```
 363 <dict>
 364   <key>Bookmarks</key>
 365   <array>
 366     <dict>
 367       <key>Title</key>
 368       <string>Example</string>
 369       <key>URL</key>
 370       <string>https://example.com</string>
 371       <key>Favicon</key>
 372       <string>https://example.com/favicon.ico</string>
 373       <key>Placement</key>
 374       <string>toolbar | menu</string>
 375       <key>Folder</key>
 376       <string>FolderName</string>
 377     </dict>
 378   </array>
 379 </dict>
 380 ```
 381 #### policies.json
 382 ```
 383 {
 384   "policies": {
 385     "Bookmarks": [
 386       {
 387         "Title": "Example",
 388         "URL": "https://example.com",
 389         "Favicon": "https://example.com/favicon.ico",
 390         "Placement": "toolbar" | "menu",
 391         "Folder": "FolderName"
 392       }
 393     ]
 394   }
 395 }
 396 ```
 397 ### CaptivePortal
 398 Enable or disable the detection of captive portals.
 399
 400 **Compatibility:** Firefox 67, Firefox ESR 60.7\
 401 **CCK2 Equivalent:** N/A\
 402 **Preferences Affected:** `network.captive-portal-service.enabled`
 403
 404 #### Windows (GPO)
 405 ```
 406 Software\Policies\Mozilla\Firefox\CaptivePortal = 0x1 | 0x0
 407 ```
 408 #### macOS
 409 ```
 410 <dict>
 411   <key>CaptivePortal</key>
 412   <true/> | <false/>
 413 </dict>
 414 ```
 415 #### policies.json
 416 ```
 417 {
 418   "policies": {
 419     "CaptivePortal": true | false
 420   }
 421 }
 422 ```
 423 ### Certificates
 424
 425 ### Certificates | ImportEnterpriseRoots
 426
 427 Trust certificates that have been added to the operating system certificate store by a user or administrator.
 428
 429 See https://support.mozilla.org/kb/setting-certificate-authorities-firefox for more detail.
 430
 431 **Compatibility:** Firefox 60, Firefox ESR 60 (macOS support in Firefox 63, Firefox ESR 68)\
 432 **CCK2 Equivalent:** N/A\
 433 **Preferences Affected:** `security.enterprise_roots.enabled`
 434
 435 #### Windows (GPO)
 436 ```
 437 Software\Policies\Mozilla\Firefox\Certificates\ImportEnterpriseRoots = 0x1 | 0x0
 438 ```
 439 #### macOS
 440 ```
 441 <dict>
 442   <key>Certificates</key>
 443   <dict>
 444     <key>ImportEnterpriseRoots</key>
 445     <true/> | <false/>
 446   </dict>
 447 </dict>
 448 ```
 449 #### policies.json
 450 ```
 451 {
 452   "policies": {
 453     "Certificates": {
 454       "ImportEnterpriseRoots": true | false
 455     }
 456   }
 457 }
 458 ```
 459 ### Certificates | Install
 460
 461 Install certificates into the Firefox certificate store. If only a filename is specified, Firefox searches for the file in the following locations:
 462
 463 - Windows
 464   - %USERPROFILE%\AppData\Local\Mozilla\Certificates
 465   - %USERPROFILE%\AppData\Roaming\Mozilla\Certificates
 466 - macOS
 467   - /Library/Application Support/Mozilla/Certificates
 468   - ~/Library/Application Support/Mozilla/Certificates
 469 - Linux
 470   - /usr/lib/mozilla/certificates
 471   - /usr/lib64/mozilla/certificates
 472   - ~/.mozilla/certificates
 473
 474 Starting with Firefox 65, Firefox 60.5 ESR, a fully qualified path can be used, including UNC paths. You should use the native path style for your operating system. We do not support using %USERPROFILE% or other environment variables on Windows.
 475
 476 If you are specifying the path in the policies.json file on Windows, you need to escape your backslashes (`\\`) which means that for UNC paths, you need to escape both (`\\\\`). If you use group policy, you only need one backslash.
 477
 478 Certificates are installed using the trust string `CT,CT,`.
 479
 480 Binary (DER) and ASCII (PEM) certificates are both supported.
 481
 482 **Compatibility:** Firefox 64, Firefox ESR 64\
 483 **CCK2 Equivalent:** `certs.ca`\
 484 **Preferences Affected:** N/A
 485
 486 #### Windows (GPO)
 487 ```
 488 Software\Policies\Mozilla\Firefox\Certificates\Install\1 = "cert1.der"
 489 Software\Policies\Mozilla\Firefox\Certificates\Install\2 = "C:\Users\username\cert2.pem"
 490 ```
 491 #### macOS
 492 ```
 493 <dict>
 494   <key>Certificates</key>
 495   <dict>
 496     <key>Install</key>
 497     <array>
 498       <string>cert1.der</string>
 499       <string>/Users/username/cert2.pem</string>
 500     </array>
 501   </dict>
 502 </dict>
 503 ```
 504 #### policies.json
 505 ```
 506 {
 507   "policies": {
 508     "Certificates": {
 509       "Install": ["cert1.der", "/home/username/cert2.pem"]
 510     }
 511   }
 512 }
 513 ```
 514 ### Cookies
 515 Configure cookie preferences.
 516
 517 `Allow` is a list of origins (not domains) where cookies are always allowed. You must include http or https.
 518
 519 `Block` is a list of origins (not domains) where cookies are always blocked. You must include http or https.
 520
 521 `Default` determines whether cookies are accepted at all.
 522
 523 `AcceptThirdParty` determines how third-party cookies are handled.
 524
 525 `ExpireAtSessionEnd` determines when cookies expire.
 526
 527 `RejectTracker` only rejects cookies for trackers.
 528
 529 `Locked` prevents the user from changing cookie preferences.
 530
 531 **Compatibility:** Firefox 60, Firefox ESR 60 (RejectTracker was added in Firefox 63)\
 532 **CCK2 Equivalent:** N/A\
 533 **Preferences Affected:** `network.cookie.cookieBehavior`,`network.cookie.lifetimePolicy`
 534
 535 #### Windows (GPO)
 536 ```
 537 Software\Policies\Mozilla\Firefox\Cookies\Allow\1 = "https://example.com"
 538 Software\Policies\Mozilla\Firefox\Cookies\Block\1 = "https://example.org"
 539 Software\Policies\Mozilla\Firefox\Cookies\Default = 0x1 | 0x0
 540 Software\Policies\Mozilla\Firefox\Cookies\AcceptThirdParty = "always" | "never" |"from-visited"
 541 Software\Policies\Mozilla\Firefox\Cookies\ExpireAtSessionEnd = 0x1 | 0x0
 542 Software\Policies\Mozilla\Firefox\Cookies\RejectTracker = 0x1 | 0x0
 543 Software\Policies\Mozilla\Firefox\Cookies\Locked = 0x1 | 0x0
 544 ```
 545 #### macOS
 546 ```
 547 <dict>
 548   <key>Cookies</key>
 549   <dict>
 550     <key>Allow</key>
 551     <array>
 552       <string>http://example.com</string>
 553     </array>
 554     <key>Block</key>
 555     <array>
 556       <string>http://example.org</string>
 557     </array>
 558     <key>Default</key>
 559     <true/> | <false/>
 560     <key>AcceptThirdParty</key>
 561     <string>always | never | from-visited</string>
 562     <key>ExpireAtSessionEnd</key>
 563     <true/> | <false/>
 564     <key>RejectTracker</key>
 565     <true/> | <false/>
 566     <key>Locked</key>
 567     <true/> | <false/>
 568   </dict>
 569 </dict>
 570 ```
 571 #### policies.json
 572 ```
 573 {
 574   "policies": {
 575     "Cookies": {
 576       "Allow": ["http://example.org/"],
 577       "Block": ["http://example.edu/"],
 578       "Default": true | false,
 579       "AcceptThirdParty": "always" | "never" | "from-visited",
 580       "ExpireAtSessionEnd": true | false,
 581       "RejectTracker": true | false,
 582       "Locked": true | false
 583     }
 584   }
 585 }
 586 ```
 587 ### DisableSetDesktopBackground
 588 Remove the "Set As Desktop Background..." menuitem when right clicking on an image.
 589
 590 **Compatibility:** Firefox 60, Firefox ESR 60\
 591 **CCK2 Equivalent:** `removeSetDesktopBackground`\
 592 **Preferences Affected:** N/A
 593
 594 #### Windows (GPO)
 595 ```
 596 Software\Policies\Mozilla\Firefox\DisableSetDesktopBackground = 0x1 | 0x0
 597 ```
 598
 599 #### macOS
 600 ```
 601 <dict>
 602   <key>DisableSetDesktopBackground</key>
 603   <true/> | <false/>
 604 </dict>
 605 ```
 606 #### policies.json
 607 ```
 608 {
 609   "policies": {
 610     "DisableSetDesktopBackground": true | false
 611   }
 612 }
 613 ```
 614 ### DisableMasterPasswordCreation
 615 Remove the master password functionality.
 616
 617 **Compatibility:** Firefox 60, Firefox ESR 60\
 618 **CCK2 Equivalent:** `noMasterPassword`\
 619 **Preferences Affected:** N/A
 620
 621 #### Windows (GPO)
 622 ```
 623 Software\Policies\Mozilla\Firefox\DisableMasterPasswordCreation = 0x1 | 0x0
 624 ```
 625
 626 #### macOS
 627 ```
 628 <dict>
 629   <key>DisableMasterPasswordCreation</key>
 630   <true/> | <false/>
 631 </dict>
 632 ```
 633 #### policies.json
 634 ```
 635 {
 636   "policies": {
 637     "DisableMasterPasswordCreation": true | false
 638   }
 639 }
 640 ```
 641 ### DisableAppUpdate
 642 Turn off application updates.
 643
 644 **Compatibility:** Firefox 60, Firefox ESR 60\
 645 **CCK2 Equivalent:** `disableFirefoxUpdates`\
 646 **Preferences Affected:** N/A
 647
 648 #### Windows (GPO)
 649 ```
 650 Software\Policies\Mozilla\Firefox\DisableAppUpdate = 0x1 | 0x0
 651 ```
 652 #### macOS
 653 ```
 654 <dict>
 655   <key>DisableAppUpdate</key>
 656   <true/> | <false/>
 657 </dict>
 658 ```
 659 #### policies.json
 660 ```
 661 {
 662   "policies": {
 663     "DisableAppUpdate": true | false
 664   }
 665 }
 666 ```
 667 ### DisableBuiltinPDFViewer
 668 Disable the built in PDF viewer. PDF files are downloaded and sent externally.
 669
 670 **Compatibility:** Firefox 60, Firefox ESR 60\
 671 **CCK2 Equivalent:** `disablePDFjs`\
 672 **Preferences Affected:** `pdfjs.disabled`
 673
 674 #### Windows (GPO)
 675 ```
 676 Software\Policies\Mozilla\Firefox\DisableBuiltinPDFViewer = 0x1 | 0x0
 677 ```
 678
 679 #### macOS
 680 ```
 681 <dict>
 682   <key>DisableBuiltinPDFViewer</key>
 683   <true/> | <false/>
 684 </dict>
 685 ```
 686 #### policies.json
 687 ```
 688 {
 689   "policies": {
 690     "DisableBuiltinPDFViewer": true | false
 691   }
 692 }
 693 ```
 694 ### DisabledCiphers
 695 Disable specific cryptographic ciphers.
 696
 697 **Compatibility:** Firefox 68.8, Firefox ESR 76\
 698 **CCK2 Equivalent:** N/A\
 699 **Preferences Affected:** N/A
 700
 701 #### Windows (GPO)
 702 ```
 703 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_DHE_RSA_WITH_AES_128_CBC_SHA = 0x1 | 0x0
 704 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_DHE_RSA_WITH_AES_256_CBC_SHA = 0x1 | 0x0
 705 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA = 0x1 | 0x0
 706 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA = 0x1 | 0x0
 707 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 = 0x1 | 0x0
 708 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 = 0x1 | 0x0
 709 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_RSA_WITH_AES_128_CBC_SHA = 0x1 | 0x0
 710 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_RSA_WITH_AES_256_CBC_SHA = 0x1 | 0x0
 711 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_RSA_WITH_3DES_EDE_CBC_SHA = 0x1 | 0x0
 712 ```
 713 #### macOS
 714 ```
 715 <dict>
 716   <key>DisabledCiphers</key>
 717     <dict>
 718       <key>TLS_DHE_RSA_WITH_AES_128_CBC_SHA</key>
 719       <true/> | <false/>
 720       <key>TLS_DHE_RSA_WITH_AES_256_CBC_SHA</key>
 721       <true/> | <false/>
 722       <key>TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA</key>
 723       <true/> | <false/>
 724       <key>TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA</key>
 725       <true/> | <false/>
 726       <key>TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256</key>
 727       <true/> | <false/>
 728       <key>TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256</key>
 729       <true/> | <false/>
 730       <key>TLS_RSA_WITH_AES_128_CBC_SHA</key>
 731       <true/> | <false/>
 732       <key>TLS_RSA_WITH_AES_256_CBC_SHA</key>
 733       <true/> | <false/>
 734       <key>TLS_RSA_WITH_3DES_EDE_CBC_SHA</key>
 735       <true/> | <false/>
 736     </dict>
 737 </dict>
 738 ```
 739 #### policies.json
 740 ```
 741 {
 742   "policies": {
 743     "DisabledCiphers" {
 744       "TLS_DHE_RSA_WITH_AES_128_CBC_SHA": true | false,
 745       "TLS_DHE_RSA_WITH_AES_256_CBC_SHA": true | false,
 746       "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA": true | false,
 747       "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA": true | false,
 748       "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256": true | false,
 749       "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256": true | false,
 750       "TLS_RSA_WITH_AES_128_CBC_SHA": true | false,
 751       "TLS_RSA_WITH_AES_256_CBC_SHA": true | false,
 752       "TLS_RSA_WITH_3DES_EDE_CBC_SHA": true | false
 753     }
 754   }
 755 }
 756 ```
 757 ### DisableDefaultBrowserAgent
 758 Prevent the default browser agent from taking any actions. Only applicable to Windows; other platforms don’t have the agent.
 759
 760 **Compatibility:** Firefox 75, Firefox ESR 68.7 (Windows only)\
 761 **CCK2 Equivalent:** N/A\
 762 **Preferences Affected:** N/A
 763
 764 #### Windows (GPO)
 765 ```
 766 Software\Policies\Mozilla\Firefox\DisableDefaultBrowserAgent = 0x1 | 0x0
 767 ```
 768
 769 #### policies.json
 770 ```
 771 {
 772   "policies": {
 773     "DisableDefaultBrowserAgent": true | false
 774   }
 775 }
 776 ```
 777 ### DisableDeveloperTools
 778 Remove access to all developer tools.
 779
 780 **Compatibility:** Firefox 60, Firefox ESR 60\
 781 **CCK2 Equivalent:** `removeDeveloperTools`\
 782 **Preferences Affected:** `devtools.policy.disabled`
 783
 784 #### Windows (GPO)
 785 ```
 786 Software\Policies\Mozilla\Firefox\DisableDeveloperTools = 0x1 | 0x0`
 787 ```
 788
 789 #### macOS
 790 ```
 791 <dict>
 792   <key>DisableDeveloperTools</key>
 793   <true/> | <false/>
 794 </dict>
 795 ```
 796 #### policies.json
 797 ```
 798 {
 799   "policies": {
 800     "DisableDeveloperTools": true | false
 801   }
 802 }
 803 ```
 804 ### DisableFeedbackCommands
 805 Disable the menus for reporting sites (Submit Feedback, Report Deceptive Site).
 806
 807 **Compatibility:** Firefox 60, Firefox ESR 60\
 808 **CCK2 Equivalent:** N/A\
 809 **Preferences Affected:** N/A
 810
 811 #### Windows (GPO)
 812 ```
 813 Software\Policies\Mozilla\Firefox\DisableFeedbackCommands = 0x1 | 0x0
 814 ```
 815 #### macOS
 816 ```
 817 <dict>
 818   <key>DisableFeedbackCommands</key>
 819   <true/> | <false/>
 820 </dict>
 821 ```
 822 #### policies.json
 823 ```
 824 {
 825   "policies": {
 826     "DisableFeedbackCommands": true | false
 827   }
 828 }
 829 ```
 830 ### DisableFirefoxScreenshots
 831 Remove access to Firefox Screenshots.
 832
 833 **Compatibility:** Firefox 60, Firefox ESR 60\
 834 **CCK2 Equivalent:** N/A\
 835 **Preferences Affected:** `extensions.screenshots.disabled`
 836
 837 #### Windows (GPO)
 838 ```
 839 Software\Policies\Mozilla\Firefox\DisableFirefoxScreenshots = 0x1 | 0x0
 840 ```
 841 #### macOS
 842 ```
 843 <dict>
 844   <key>DisableFirefoxScreenshots</key>
 845   <true/> | <false/>
 846 </dict>
 847 ```
 848 #### policies.json
 849 ```
 850 {
 851   "policies": {
 852     "DisableFirefoxScreenshots": true | false
 853   }
 854 }
 855 ```
 856 ### DisableFirefoxAccounts
 857 Disable Firefox Accounts integration (Sync).
 858
 859 **Compatibility:** Firefox 60, Firefox ESR 60\
 860 **CCK2 Equivalent:** `disableSync`\
 861 **Preferences Affected:** `identity.fxaccounts.enabled`
 862
 863 #### Windows (GPO)
 864 ```
 865 Software\Policies\Mozilla\Firefox\DisableFirefoxAccounts = 0x1 | 0x0
 866 ```
 867 #### macOS
 868 ```
 869 <dict>
 870   <key>DisableFirefoxAccounts</key>
 871   <true/> | <false/>
 872 </dict>
 873 ```
 874 #### policies.json
 875 ```
 876 {
 877   "policies": {
 878     "DisableFirefoxAccounts": true | false
 879   }
 880 }
 881 ```
 882 ### DisableFirefoxStudies
 883 Disable Firefox studies (Shield).
 884
 885 **Compatibility:** Firefox 60, Firefox ESR 60\
 886 **CCK2 Equivalent:** N/A\
 887 **Preferences Affected:** N/A
 888
 889 #### Windows (GPO)
 890 ```
 891 Software\Policies\Mozilla\Firefox\DisableFirefoxStudies = 0x1 | 0x0
 892 ```
 893 #### macOS
 894 ```
 895 <dict>
 896   <key>DisableFirefoxStudies</key>
 897   <true/> | <false/>
 898 </dict>
 899 ```
 900 #### policies.json
 901 ```
 902 {
 903   "policies": {
 904     "DisableFirefoxStudies": true | false
 905   }
 906 }
 907 ```
 908 ### DisableForgetButton
 909 Disable the "Forget" button.
 910
 911 **Compatibility:** Firefox 60, Firefox ESR 60\
 912 **CCK2 Equivalent:** `disableForget`\
 913 **Preferences Affected:** N/A
 914
 915 #### Windows (GPO)
 916 ```
 917 Software\Policies\Mozilla\Firefox\DisableForgetButton = 0x1 | 0x0
 918 ```
 919 #### macOS
 920 ```
 921 <dict>
 922   <key>DisableForgetButton</key>
 923   <true/> | <false/>
 924 </dict>
 925 ```
 926 #### policies.json
 927 ```
 928 {
 929   "policies": {
 930     "DisableForgetButton": true | false
 931   }
 932 }
 933 ```
 934 ### DisableFormHistory
 935 Turn off saving information on web forms and the search bar.
 936
 937 **Compatibility:** Firefox 60, Firefox ESR 60\
 938 **CCK2 Equivalent:** `disableFormFill`\
 939 **Preferences Affected:** ` browser.formfill.enable`
 940
 941 #### Windows (GPO)
 942 ```
 943 Software\Policies\Mozilla\Firefox\DisableFormHistory = 0x1 | 0x0
 944 ```
 945 #### macOS
 946 ```
 947 <dict>
 948   <key>DisableFormHistory</key>
 949   <true/> | <false/>
 950 </dict>
 951 ```
 952 #### policies.json
 953 ```
 954 {
 955   "policies": {
 956     "DisableFormHistory": true | false
 957   }
 958 }
 959 ```
 960 ### DisablePasswordReveal
 961 Do not allow passwords to be shown in saved logins
 962
 963 **Compatibility:** Firefox 71, Firefox ESR 68.3\
 964 **CCK2 Equivalent:** N/A
 965 **Preferences Affected:** N/A
 966
 967 #### Windows (GPO)
 968 ```
 969 Software\Policies\Mozilla\Firefox\DisablePasswordReveal = 0x1 | 0x0
 970 ```
 971
 972 #### macOS
 973 ```
 974 <dict>
 975   <key>DisablePasswordReveal</key>
 976   <true/> | <false/>
 977 </dict>
 978 ```
 979 #### policies.json
 980 ```
 981 {
 982   "policies": {
 983     "DisablePasswordReveal": true | false
 984   }
 985 }
 986 ```
 987 ### DisablePocket
 988 Remove Pocket in the Firefox UI. It does not remove it from the new tab page.
 989
 990 **Compatibility:** Firefox 60, Firefox ESR 60\
 991 **CCK2 Equivalent:** `disablePocket`\
 992 **Preferences Affected:** `extensions.pocket.enabled`
 993
 994 #### Windows (GPO)
 995 ```
 996 Software\Policies\Mozilla\Firefox\DisablePocket = 0x1 | 0x0
 997 ```
 998 #### macOS
 999 ```
1000 <dict>
1001   <key>DisablePocket</key>
1002   <true/> | <false/>
1003 </dict>
1004 ```
1005 #### policies.json
1006 ```
1007 {
1008   "policies": {
1009     "DisablePocket": true | false
1010   }
1011 }
1012 ```
1013 ### DisablePrivateBrowsing
1014 Remove access to private browsing.
1015
1016 **Compatibility:** Firefox 60, Firefox ESR 60\
1017 **CCK2 Equivalent:** `disablePrivateBrowsing`\
1018 **Preferences Affected:** N/A
1019
1020 #### Windows (GPO)
1021 ```
1022 Software\Policies\Mozilla\Firefox\DisablePrivateBrowsing = 0x1 | 0x0
1023 ```
1024 #### macOS
1025 ```
1026 <dict>
1027   <key>DisablePrivateBrowsing</key>
1028   <true/> | <false/>
1029 </dict>
1030 ```
1031 #### policies.json
1032 ```
1033 {
1034   "policies": {
1035     "DisablePrivateBrowsing": true | false
1036   }
1037 }
1038 ```
1039 ### DisableProfileImport
1040 Disables the "Import data from another browser" option in the bookmarks window.
1041
1042 **Compatibility:** Firefox 60, Firefox ESR 60\
1043 **CCK2 Equivalent:** N/A\
1044 **Preferences Affected:** N/A
1045
1046 #### Windows (GPO)
1047 ```
1048 Software\Policies\Mozilla\Firefox\DisableProfileImport = 0x1 | 0x0
1049 ```
1050 #### macOS
1051 ```
1052 <dict>
1053   <key>DisableProfileImport</key>
1054   <true/> | <false/>
1055 </dict>
1056 ```
1057 #### policies.json
1058 ```
1059 {
1060   "policies": {
1061     "DisableProfileImport": true | false
1062   }
1063 }
1064 ```
1065 ### DisableProfileRefresh
1066 Disable the Refresh Firefox button on about:support and support.mozilla.org, as well as the prompt that displays offering to refresh Firefox when you haven't used it in a while.
1067
1068 **Compatibility:** Firefox 60, Firefox ESR 60\
1069 **CCK2 Equivalent:** `disableResetFirefox`\
1070 **Preferences Affected:** `browser.disableResetPrompt`
1071
1072 #### Windows (GPO)
1073 ```
1074 Software\Policies\Mozilla\Firefox\DisableProfileRefresh = 0x1 | 0x0
1075 ```
1076 #### macOS
1077 ```
1078 <dict>
1079   <key>DisableProfileRefresh</key>
1080   <true/> | <false/>
1081 </dict>
1082 ```
1083 #### policies.json
1084 ```
1085 {
1086   "policies": {
1087     "DisableProfileRefresh": true | false
1088   }
1089 }
1090 ```
1091 ### DisableSafeMode
1092 Disable safe mode within the browser.
1093
1094 On Windows, this disables safe mode via the command line as well.
1095
1096 **Compatibility:** Firefox 60, Firefox ESR 60 (Windows, macOS)\
1097 **CCK2 Equivalent:** `disableSafeMode`\
1098 **Preferences Affected:** N/A
1099
1100 #### Windows (GPO)
1101 ```
1102 Software\Policies\Mozilla\Firefox\DisableSafeMode = 0x1 | 0x0
1103 ```
1104 #### macOS
1105 ```
1106 <dict>
1107   <key>DisableSafeMode</key>
1108   <true/> | <false/>
1109 </dict>
1110 ```
1111 #### policies.json
1112 ```
1113 {
1114   "policies": {
1115     "DisableSafeMode": true | false
1116   }
1117 }
1118 ```
1119 ### DisableSecurityBypass
1120 Prevent the user from bypassing security in certain cases.
1121
1122 `InvalidCertificate` prevents adding an exception when an invalid certificate is shown.
1123
1124 `SafeBrowsing` prevents selecting "ignore the risk" and visiting a harmful site anyway.
1125
1126 **Compatibility:** Firefox 60, Firefox ESR 60\
1127 **CCK2 Equivalent:** N/A\
1128 **Preferences Affected:** `security.certerror.hideAddException`,`browser.safebrowsing.allowOverride`
1129
1130 #### Windows (GPO)
1131 ```
1132 Software\Policies\Mozilla\Firefox\DisableSecurityBypass\InvalidCertificate = 0x1 | 0x0
1133 Software\Policies\Mozilla\Firefox\DisableSecurityBypass\SafeBrowsing = 0x1 | 0x0
1134 ```
1135 #### macOS
1136 ```
1137 <dict>
1138   <key>DisableSecurityBypass</key>
1139   <dict>
1140     <key>InvalidCertificate</key>
1141     <true/> | <false/>
1142     <key><SafeBrowsing/key>
1143     <true/> | <false/>
1144   </dict>
1145 </dict>
1146 ```
1147 #### policies.json
1148 ```
1149 {
1150   "policies": {
1151     "DisableSecurityBypass": {
1152       "InvalidCertificate": true false,
1153       "SafeBrowsing": true false
1154     }
1155   }
1156 }
1157 ```
1158 ### DisableSystemAddonUpdate
1159 Prevent system add-ons from being installed or update.
1160
1161 **Compatibility:** Firefox 60, Firefox ESR 60\
1162 **CCK2 Equivalent:** N/A\
1163 **Preferences Affected:** N/A
1164
1165 #### Windows (GPO)
1166 ```Software\Policies\Mozilla\Firefox\DisableSystemAddonUpdate = 0x1 | 0x0
1167 ```
1168 #### macOS
1169 ```
1170 <dict>
1171   <key>DisableSystemAddonUpdate</key>
1172   <true/> | <false/>
1173 </dict>
1174 ```
1175 #### policies.json
1176 ```
1177 {
1178   "policies": {
1179     "DisableSystemAddonUpdate": true | false
1180   }
1181 }
1182 ```
1183 ### DisableTelemetry
1184 Prevent the upload of telemetry data.
1185
1186 Mozilla recommends that you do not disable telemetry. Information collected through telemetry helps us build a better product for businesses like yours.
1187
1188 **Compatibility:** Firefox 60, Firefox ESR 60\
1189 **CCK2 Equivalent:** `disableTelemetry`\
1190 **Preferences Affected:** `datareporting.healthreport.uploadEnabled,datareporting.policy.dataSubmissionEnabled`
1191
1192 #### Windows (GPO)
1193 ```
1194 Software\Policies\Mozilla\Firefox\DisableTelemetry = 0x1 | 0x0
1195 ```
1196 #### macOS
1197 ```
1198 <dict>
1199   <key>DisableTelemetry</key>
1200   <true/> | <false/>
1201 </dict>
1202 ```
1203 #### policies.json
1204 ```
1205 {
1206   "policies": {
1207     "DisableTelemetry": true | false
1208   }
1209 }
1210 ```
1211 ### DisplayBookmarksToolbar
1212 Set the initial state of the bookmarks toolbar. A user can still hide it and it will stay hidden.
1213
1214 **Compatibility:** Firefox 60, Firefox ESR 60\
1215 **CCK2 Equivalent:** `displayBookmarksToolbar`\
1216 **Preferences Affected:** N/A
1217
1218 #### Windows (GPO)
1219 ```
1220 Software\Policies\Mozilla\Firefox\DisplayBookmarksToolbar = 0x1 | 0x0
1221 ```
1222 #### macOS
1223 ```
1224 <dict>
1225   <key>DisplayBookmarksToolbar</key>
1226   <true/> | <false/>
1227 </dict>
1228 ```
1229 #### policies.json
1230 ```
1231 {
1232   "policies": {
1233     "DisplayBookmarksToolbar": true | false
1234   }
1235 }
1236 ```
1237 ### DisplayMenuBar (Deprecated)
1238 Set the initial state of the menubar. A user can still hide it and it will stay hidden.
1239
1240 **Compatibility:** Firefox 60, Firefox ESR 60 (Windows, some Linux)\
1241 **CCK2 Equivalent:** `displayMenuBar`\
1242 **Preferences Affected:** N/A
1243
1244 #### Windows (GPO)
1245 ```
1246 Software\Policies\Mozilla\Firefox\DisplayMenuBar = 0x1 | 0x0
1247 ```
1248 #### macOS
1249 ```
1250 <dict>
1251   <key>DisplayMenuBar</key>
1252   <true/> | <false/>
1253 </dict>
1254 ```
1255 #### policies.json
1256 ```
1257 {
1258   "policies": {
1259     "DisplayMenuBar": true | false
1260   }
1261 }
1262 ```
1263 ### DisplayMenuBar
1264 Set the state of the menubar.
1265
1266 `always` means the menubar is shown and cannot be hidden.
1267
1268 `never` means the menubar is hidden and cannot be shown.
1269
1270 `default-on` means the menubar is on by default but can be hidden.
1271
1272 `default-off` means the menubar is off by default but can be shown.
1273
1274 **Compatibility:** Firefox 73, Firefox ESR 68.5 (Windows, some Linux)\
1275 **CCK2 Equivalent:** `displayMenuBar`\
1276 **Preferences Affected:** N/A
1277
1278 #### Windows (GPO)
1279 ```
1280 Software\Policies\Mozilla\Firefox\DisplayMenuBar = "always", "never", "default-on", "default-off"
1281 ```
1282 #### macOS
1283 ```
1284 <dict>
1285   <key>DisplayMenuBar</key>
1286   <string>always | never | default-on | default-off</string>
1287 </dict>
1288 ```
1289 #### policies.json
1290 ```
1291 {
1292   "policies": {
1293     "DisplayMenuBar": "always", "never", "default-on", "default-off"
1294   }
1295 }
1296 ```
1297 ### DNSOverHTTPS
1298 Configure DNS over HTTPS.
1299
1300 `Enabled` determines whether DNS over HTTPS is enabled
1301
1302 `ProviderURL` is a URL to another provider.
1303
1304 `Locked` prevents the user from changing DNS over HTTPS preferences.
1305
1306 `ExcludedDomains` excludes domains from DNS over HTTPS.
1307
1308 **Compatibility:** Firefox 63, Firefox ESR 68 (ExcludedDomains added in 75/68.7)\
1309 **CCK2 Equivalent:** N/A\
1310 **Preferences Affected:** `network.trr.mode`,`network.trr.uri`
1311
1312 #### Windows (GPO)
1313 ```
1314 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\Enabled = 0x1 | 0x0
1315 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\ProviderURL = "URL_TO_ALTERNATE_PROVIDER"
1316 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\Locked = 0x1 | 0x0
1317 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\ExcludedDomains\1 = "example.com"
1318 ```
1319 #### macOS
1320 ```
1321 <dict>
1322   <key>DNSOverHTTPS</key>
1323   <dict>
1324     <key>Enabled</key>
1325     <true/> | <false/>
1326     <key>ProviderURL</key>
1327     <string>URL_TO_ALTERNATE_PROVIDER</string>
1328     <key>Locked</key>
1329     <true/> | <false/>
1330     <key>ExcludedDomains</key>
1331     <array>
1332       <string>example.com</string>
1333     </array>
1334   </dict>
1335 </dict>
1336 ```
1337 #### policies.json
1338 ```
1339 {
1340   "policies": {
1341     "DNSOverHTTPS": {
1342       "Enabled":  true | false,
1343       "ProviderURL": "URL_TO_ALTERNATE_PROVIDER",
1344       "Locked": true | false,
1345       "ExcludedDomains": ["example.com"]
1346     }
1347   }
1348 }
1349 ```
1350 ### DontCheckDefaultBrowser
1351 Don't check if Firefox is the default browser at startup.
1352
1353 **Compatibility:** Firefox 60, Firefox ESR 60\
1354 **CCK2 Equivalent:** `dontCheckDefaultBrowser`\
1355 **Preferences Affected:** `browser.shell.checkDefaultBrowser`
1356
1357 #### Windows (GPO)
1358 ```
1359 Software\Policies\Mozilla\Firefox\DontCheckDefaultBrowser = 0x1 | 0x0
1360 ```
1361 #### macOS
1362 ```
1363 <dict>
1364   <key>DontCheckDefaultBrowser</key>
1365   <true/> | <false/>
1366 </dict>
1367 ```
1368 #### policies.json
1369 ```
1370 {
1371   "policies": {
1372     "DontCheckDefaultBrowser": true | false
1373   }
1374 }
1375 ```
1376 ### DefaultDownloadDirectory
1377 Set the default download directory.
1378
1379 You can use ${home} for the native home directory.
1380
1381 **Compatibility:** Firefox 68, Firefox ESR 68\
1382 **CCK2 Equivalent:** N/A\
1383 **Preferences Affected:** `browser.download.dir`,`browser.download.folderList`
1384
1385 #### Windows (GPO)
1386 ```
1387 Software\Policies\Mozilla\Firefox\DefaultDownloadDirectory = "${home}\Downloads"
1388 ```
1389 #### macOS
1390 ```
1391 <dict>
1392   <key>DefaultDownloadDirectory</key>
1393   <string>${home}/Downloads</string>
1394 </dict>
1395 ```
1396 #### policies.json (macOS and Linux)
1397 ```
1398 {
1399   "policies": {
1400     "DefaultDownloadDirectory": "${home}/Downloads"
1401 }
1402 ```
1403 #### policies.json (Windows)
1404 ```
1405 {
1406   "policies": {
1407     "DefaultDownloadDirectory": "${home}\\Downloads"
1408 }
1409 ```
1410 ### DownloadDirectory
1411 Set and lock the download directory.
1412
1413 You can use ${home} for the native home directory.
1414
1415 **Compatibility:** Firefox 68, Firefox ESR 68\
1416 **CCK2 Equivalent:** N/A\
1417 **Preferences Affected:** `browser.download.dir`,`browser.download.folderList`,`browser.download.useDownloadDir`
1418
1419 #### Windows (GPO)
1420 ```
1421 Software\Policies\Mozilla\Firefox\DownloadDirectory = "${home}\Downloads"
1422 ```
1423 #### macOS
1424 ```
1425 <dict>
1426   <key>DownloadDirectory</key>
1427   <string>${home}/Downloads</string>
1428 </dict>
1429 ```
1430 #### policies.json (macOS and Linux)
1431 ```
1432 {
1433   "policies": {
1434     "DownloadDirectory": "${home}/Downloads"
1435 }
1436 ```
1437 #### policies.json (Windows)
1438 ```
1439 {
1440   "policies": {
1441     "DownloadDirectory": "${home}\\Downloads"
1442 }
1443 ```
1444 ### EnableTrackingProtection
1445 Configure tracking protection.
1446
1447 If this policy is not configured, tracking protection is not enabled by default in the browser, but it is enabled by default in private browsing and the user can change it.
1448
1449 If `Value` is set to false, tracking protection is disabled and locked in both the regular browser and private browsing.
1450
1451 If `Value` is set to true, tracking protection is enabled by default in both the regular browser and private browsing and the `Locked` value determines whether or not a user can change it.
1452
1453 If `Cryptomining` is set to true, cryptomining scripts on websites are blocked.
1454
1455 If `Fingerprinting` is set to true, fingerprinting scripts on websites are blocked.
1456
1457 `Exceptions` are origins for which tracking protection is not enabled.
1458
1459 **Compatibility:** Firefox 60, Firefox ESR 60 (Cryptomining and Fingerprinting added in 70/68.2, Exceptions added in 73/68.5)\
1460 **CCK2 Equivalent:** N/A\
1461 **Preferences Affected:** `privacy.trackingprotection.enabled`,`privacy.trackingprotection.pbmode.enabled`,`privacy.trackingprotection.cryptomining.enabled`,`privacy.trackingprotection.fingerprinting.enabled`
1462
1463 #### Windows (GPO)
1464 ```
1465 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Value = 0x1 | 0x0
1466 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Locked = 0x1 | 0x0
1467 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Cryptomining = 0x1 | 0x0
1468 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Fingerprinting = 0x1 | 0x0
1469 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Exceptions\1 = "https://example.com"
1470 ```
1471 #### macOS
1472 ```
1473 <dict>
1474   <key>EnableTrackingProtection</key>
1475   <dict>
1476     <key>Value</key>
1477     <true/> | <false/>
1478     <key><Locked</key>
1479     <true/> | <false/>
1480     <key><Cryptomining</key>
1481     <true/> | <false/>
1482     <key><Fingerprinting</key>
1483     <true/> | <false/>
1484     <key>Exceptions</key>
1485     <array>
1486       <string>https://example.com</string>
1487     </array>
1488   </dict>
1489 </dict>
1490 ```
1491 #### policies.json
1492 ```
1493 {
1494   "policies": {
1495     "EnableTrackingProtection": {
1496       "Value": [true, false],
1497       "Locked": [true, false],
1498       "Cryptomining": [true, false],
1499       "Fingerprinting": [true, false],
1500       "Exceptions": ["https://example.com"]
1501     }
1502 }
1503 ```
1504 ### EnterprisePoliciesEnabled
1505 Enable policy support on macOS.
1506
1507 **Compatibility:** Firefox 63, Firefox ESR 60.3 (macOS only)\
1508 **CCK2 Equivalent:** N/A\
1509 **Preferences Affected:** N/A
1510
1511 #### macOS
1512 ```
1513 <dict>
1514   <key>EnterprisePoliciesEnabled</key>
1515   <true/>
1516 </dict>
1517 ```
1518 ### Extensions
1519 Control the installation, uninstallation and locking of extensions.
1520
1521 `Install` is a list of URLs or native paths for extensions to be installed.
1522
1523 `Uninstall` is a list of extension IDs that should be uninstalled if found.
1524
1525 `Locked` is a list of extension IDs that the user cannot disable or uninstall.
1526
1527 **Compatibility:** Firefox 60, Firefox ESR 60\
1528 **CCK2 Equivalent:** `addons`\
1529 **Preferences Affected:** N/A
1530
1531 #### Windows (GPO)
1532 ```
1533 Software\Policies\Mozilla\Firefox\Extensions\Install\1 = "https://addons.mozilla.org/firefox/downloads/somefile.xpi"
1534 Software\Policies\Mozilla\Firefox\Extensions\Install\2 = "//path/to/xpi"
1535 Software\Policies\Mozilla\Firefox\Extensions\Uninstall\1 = "bad_addon_id@mozilla.org"
1536 Software\Policies\Mozilla\Firefox\Extensions\Locked\1 = "addon_id@mozilla.org"
1537 ```
1538 #### macOS
1539 ```
1540 <dict>
1541   <key>Extensions</key>
1542   <dict>
1543     <key>Install</key>
1544     <array>
1545       <string>https://addons.mozilla.org/firefox/downloads/somefile.xpi</string>
1546       <string>//path/to/xpi</string>
1547     </array>
1548     <key>Uninstall</key>
1549     <array>
1550       <string>bad_addon_id@mozilla.org</string>
1551     </array>
1552     <key>Locked</key>
1553     <array>
1554       <string>addon_id@mozilla.org</string>
1555     </array>
1556   </dict>
1557 </dict>
1558 ```
1559 #### policies.json
1560 ```
1561 {
1562   "policies": {
1563     "Extensions": {
1564       "Install": ["https://addons.mozilla.org/firefox/downloads/somefile.xpi", "//path/to/xpi"],
1565       "Uninstall": ["bad_addon_id@mozilla.org"],
1566       "Locked":  ["addon_id@mozilla.org"]
1567     }
1568   }
1569 }
1570 ```
1571 ### ExtensionSettings
1572 Manage all aspects of extensions. This policy is based heavily on the [Chrome policy](https://dev.chromium.org/administrators/policy-list-3/extension-settings-full) of the same name.
1573
1574 This policy maps an extension ID to its configuration. With an extension ID, the configuration will be applied to the specified extension only. A default configuration can be set for the special ID "*", which will apply to all extensions that don't have a custom configuration set in this policy.
1575
1576 To obtain an extension ID, install the extension and go to about:support. You will see the ID in the Extensions section.
1577
1578 The configuration for each extension is another dictionary that can contain the fields documented below.
1579
1580 | Name | Description |
1581 | --- | --- |
1582 | `installation_mode` | Maps to a string indicating the installation mode for the extension. The valid strings are `allowed`,`blocked`,`force_installed`, and `normal_installed`.
1583 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`allowed` | Allows the extension to be installed by the user. This is the default behavior.
1584 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`blocked`| Blocks installation of the extension and removes it from the device if already installed.
1585 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`force_installed`| The extension is automatically installed and can't be removed by the user. This option is not valid for the default configuration and requires an install_url.
1586 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`normal_installed`| The extension is automatically installed but can be disabled by the user. This option is not valid for the default configuration and requires an install_url.
1587 | `install_url`| Maps to a URL indicating where Firefox can download a force_installed or normal_installed extension. If installing from the addons.mozilla.org, use the following URL (substituting SHORT_NAME from the URL on AMO), https://addons.mozilla.org/firefox/downloads/latest/SHORT_NAME/latest.xpi. If installing from the local file system, use a file:/// URL. Languages packs are available from https://releases.mozilla.org/pub/firefox/releases/VERSION/PLATFORM/xpi/LANGUAGE.xpi.
1588 | `install_sources` | Each item in this list is an extension-style match pattern. Users will be able to easily install items from any URL that matches an item in this list. Both the location of the *.xpi file and the page where the download is started from (i.e.  the referrer) must be allowed by these patterns. This setting can be used only for the default configuration.
1589 | `allowed_types` | This setting whitelists the allowed types of extension/apps that can be installed in Firefox. The value is a list of strings, each of which should be one of the following: "extension", "theme", "dictionary", "langpack" This setting can be used only for the default configuration.
1590 | `blocked_install_message` | This maps to a string specifying the error message to display to users if they're blocked from installing an extension. This setting allows you to append text to the generic error message displayed when the extension is blocked. This could be be used to direct users to your help desk, explain why a particular extension is blocked, or something else.
1591
1592 **Compatibility:** Firefox 69, Firefox ESR 68.1\
1593 **CCK2 Equivalent:** N/A\
1594 **Preferences Affected:** N/A
1595
1596 #### Windows (GPO)
1597 ```
1598 Software\Policies\Mozilla\Firefox\ExtensionSettings (REG_MULTI_SZ) =
1599 {
1600   "*": {
1601     "blocked_install_message": "Custom error message.",
1602     "install_sources": ["https://addons.mozilla.org/"],
1603     "installation_mode": "blocked",
1604     "allowed_types": ["extension"]
1605   },
1606   "uBlock0@raymondhill.net": {
1607     "installation_mode": "force_installed",
1608     "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
1609   }
1610 }
1611 ```
1612 #### macOS
1613 ```
1614 <dict>
1615   <key>ExtensionSettings</key>
1616   <dict>
1617     <key>*</key>
1618     <dict>
1619       <key>blocked_install_message</key>
1620       <string>Custom error message.</string>
1621       <key>install_sources</key>
1622       <array>
1623         <string>https://addons.mozilla.org/</string>
1624       </array>
1625       <key>installation_mode</key>
1626       <string>blocked</string>
1627       <key>allowed_types</key>
1628       <array>
1629         <string>extension</string>
1630       </array>
1631     </dict>
1632     <key>uBlock0@raymondhill.net</key>
1633     <dict>
1634       <key>installation_mode</key>
1635        <string>force_installed</string>
1636       <key>install_url</key>
1637       <string>https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi</string>
1638     </dict>
1639   </dict>
1640 </dict>
1641 ```
1642 #### policies.json
1643 ```
1644 {
1645   "policies": {
1646     "ExtensionSettings": {
1647       "*": {
1648         "blocked_install_message": "Custom error message.",
1649         "install_sources": ["https://addons.mozilla.org/"],
1650         "installation_mode": "blocked",
1651         "allowed_types": ["extension"]
1652       },
1653       "uBlock0@raymondhill.net": {
1654         "installation_mode": "force_installed",
1655         "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
1656       }
1657     }
1658   }
1659 }
1660 ```
1661 ### ExtensionUpdate
1662 Control extension updates.
1663
1664 **Compatibility:** Firefox 67, Firefox ESR 60.7\
1665 **CCK2 Equivalent:** N/A\
1666 **Preferences Affected:** `extensions.update.enabled`
1667
1668 #### Windows (GPO)
1669 ```
1670 Software\Policies\Mozilla\Firefox\ExtensionUpdate = 0x1 | 0x0
1671 ```
1672 #### macOS
1673 ```
1674 <dict>
1675   <key>ExtensionUpdate</key>
1676   <true/> | <false/>
1677 </dict>
1678 ```
1679 #### policies.json
1680 ```
1681 {
1682   "policies": {
1683     "ExtensionUpdate": true | false
1684   }
1685 }
1686 ```
1687 ### FlashPlugin
1688 Configure the default Flash plugin policy as well as origins for which Flash is allowed.
1689
1690 `Allow` is a list of origins where Flash are allowed.
1691
1692 `Block` is a list of origins where Flash is not allowed.
1693
1694 `Default` determines whether or not Flash is allowed by default.
1695
1696 `Locked` prevents the user from changing Flash preferences.
1697
1698 **Compatibility:** Firefox 60, Firefox ESR 60\
1699 **CCK2 Equivalent:** `permissions.plugin`\
1700 **Preferences Affected:** `plugin.state.flash`
1701
1702 #### Windows (GPO)
1703 ```
1704 Software\Policies\Mozilla\Firefox\FlashPlugin\Allow\1 = "https://example.org"
1705 Software\Policies\Mozilla\Firefox\FlashPlugin\Block\1 = "https://example.edu"
1706 Software\Policies\Mozilla\Firefox\FlashPlugin\Default = 0x1 | 0x0
1707 Software\Policies\Mozilla\Firefox\FlashPlugin\Locked = 0x1 | 0x0
1708 ```
1709 #### macOS
1710 ```
1711 <dict>
1712   <key>FlashPlugin</key>
1713   <dict>
1714     <key>Allow</key>
1715     <array>
1716       <string>http://example.org</string>
1717     </array>
1718     <key>Block</key>
1719     <array>
1720       <string>http://example.edu</string>
1721     </array>
1722     <key>Default</key>
1723     <true/> | <false/>
1724     <key>Locked</key>
1725     <true/> | <false/>
1726   </dict>
1727 </dict>
1728 ```
1729 #### policies.json
1730 ```
1731 {
1732   "policies": {
1733     "FlashPlugin": {
1734       "Allow": ["http://example.org/"],
1735       "Block": ["http://example.edu/"],
1736       "Default": true | false,
1737       "Locked": true | false
1738     }
1739   }
1740 }
1741 ```
1742 ### FirefoxHome
1743 Customize the Firefox Home page.
1744
1745 **Compatibility:** Firefox 68, Firefox ESR 68\
1746 **CCK2 Equivalent:** N/A\
1747 **Preferences Affected:** `browser.newtabpage.activity-stream.showSearch`,`browser.newtabpage.activity-stream.feeds.topsites`,`browser.newtabpage.activity-stream.feeds.section.highlights`,`browser.newtabpage.activity-stream.feeds.section.topstories`,`browser.newtabpage.activity-stream.feeds.snippets`
1748
1749 #### Windows (GPO)
1750 ```
1751 Software\Policies\Mozilla\Firefox\FirefoxHome\Search = 0x1 | 0x0
1752 Software\Policies\Mozilla\Firefox\FirefoxHome\TopSites = 0x1 | 0x0
1753 Software\Policies\Mozilla\Firefox\FirefoxHome\Highlights = 0x1 | 0x0
1754 Software\Policies\Mozilla\Firefox\FirefoxHome\Pocket = 0x1 | 0x0
1755 Software\Policies\Mozilla\Firefox\FirefoxHome\Snippets = 0x1 | 0x0
1756 Software\Policies\Mozilla\Firefox\FirefoxHome\Locked = 0x1 | 0x0
1757 ```
1758 #### macOS
1759 ```
1760 <dict>
1761   <key>FirefoxHome</key>
1762   <dict>
1763     <key>Search</key>
1764     <true/> | <false/>
1765     <key>TopSites</key>
1766     <true/> | <false/>
1767     <key>Highlights</key>
1768     <true/> | <false/>
1769     <key>Pocket</key>
1770     <true/> | <false/>
1771     <key>Snippets</key>
1772     <true/> | <false/>
1773     <key>Locked</key>
1774     <true/> | <false/>
1775   </dict>
1776 </dict>
1777 ```
1778 #### policies.json
1779 ```
1780 {
1781   "policies": {
1782     "FirefoxHome": {
1783       "Search": true | false,
1784       "TopSites": true | false,
1785       "Highlights": true | false,
1786       "Pocket": true | false,
1787       "Snippets": true | false,
1788       "Locked": true | false
1789     }
1790   }
1791 }
1792 ```
1793 ### HardwareAcceleration
1794 Control hardware acceleration.
1795
1796 **Compatibility:** Firefox 60, Firefox ESR 60\
1797 **CCK2 Equivalent:** N/A\
1798 **Preferences Affected:** `layers.acceleration.disabled`
1799
1800 #### Windows (GPO)
1801 ```
1802 Software\Policies\Mozilla\Firefox\HardwareAcceleration = 0x1 | 0x0
1803 ```
1804 #### macOS
1805 ```
1806 <dict>
1807   <key>HardwareAcceleration</key>
1808   <true/> | <false/>
1809 </dict>
1810 ```
1811 #### policies.json
1812 ```
1813 {
1814   "policies": {
1815     "HardwareAcceleration": true | false
1816   }
1817 }
1818 ```
1819 ### Homepage
1820 Configure the default homepage and how Firefox starts.
1821
1822 `URL` is the default homepage.
1823
1824 `Locked` prevents the user from changing homepage preferences.
1825
1826 `Additional` allows for more than one homepage.
1827
1828 `StartPage` is how Firefox starts. The choices are no homepage, the default homepage or the previous session.
1829
1830 **Compatibility:** Firefox 60, Firefox ESR 60 (StartPage was added in Firefox 60, Firefox ESR 60.4)\
1831 **CCK2 Equivalent:** `homePage`,`lockHomePage`\
1832 **Preferences Affected:** `browser.startup.homepage`,`browser.startup.page`
1833
1834 #### Windows (GPO)
1835 ```
1836 Software\Policies\Mozilla\Firefox\Homepage\URL = "https://example.com"
1837 Software\Policies\Mozilla\Firefox\Homepage\Locked = 0x1 | 0x0
1838 Software\Policies\Mozilla\Firefox\Homepage\Additional\1 = "https://example.org"
1839 Software\Policies\Mozilla\Firefox\Homepage\Additional\2 = "https://example.edu"
1840 Software\Policies\Mozilla\Firefox\Homepage\StartPage = "none" | "homepage" |  "previous-session"
1841 ```
1842 #### macOS
1843 ```
1844 <dict>
1845   <key>Homepage</key>
1846   <dict>
1847     <key>URL</key>
1848     <string>http://example.com</string>
1849     <key>Locked</key>
1850     <true/> | <false/>
1851     <key>Additional</key>
1852     <array>
1853       <string>http://example.org</string>
1854       <string>http://example.edu</string>
1855     </array>
1856     <key>StartPage</key>
1857     <string>none | homepage | previous-session</string>
1858   </dict>
1859 </dict>
1860 ```
1861 #### policies.json
1862 ```
1863 {
1864   "policies": {
1865     "Homepage": {
1866       "URL": "http://example.com/",
1867       "Locked": true | false,
1868       "Additional": ["http://example.org/",
1869                      "http://example.edu/"],
1870       "StartPage": "none" | "homepage" | "previous-session"
1871     }
1872   }
1873 }
1874 ```
1875 ### InstallAddonsPermission
1876 Configure the default extension install policy as well as origins for extension installs are allowed. This policy does not override turning off all extension installs.
1877
1878 `Allow` is a list of origins where extension installs are allowed.
1879
1880 `Default` determines whether or not extension installs are allowed by default.
1881
1882 **Compatibility:** Firefox 60, Firefox ESR 60\
1883 **CCK2 Equivalent:** `permissions.install`\
1884 **Preferences Affected:** `xpinstall.enabled`
1885
1886 #### Windows (GPO)
1887 ```
1888 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Allow\1 = "https://example.org"
1889 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Allow\2 = "https://example.edu"
1890 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Default = 0x1 | 0x0
1891 ```
1892 #### macOS
1893 ```
1894 <dict>
1895   <key>InstallAddonsPermission</key>
1896   <dict>
1897     <key>Allow</key>
1898     <array>
1899       <string>http://example.org</string>
1900       <string>http://example.edu</string>
1901     </array>
1902     <key>Default</key>
1903     <true/> | <false/>
1904   </dict>
1905 </dict>
1906 ```
1907 #### policies.json
1908 ```
1909 {
1910   "policies": {
1911     "InstallAddonsPermission": {
1912       "Allow": ["http://example.org/",
1913                 "http://example.edu/"],
1914       "Default": true | false
1915     }
1916   }
1917 }
1918 ```
1919 ### LegacyProfiles
1920 Disable the feature enforcing a separate profile for each installation.
1921
1922 If this policy set to true, Firefox will not try to create different profiles for installations of Firefox in different directories. This is the equivalent of the MOZ_LEGACY_PROFILES environment variable.
1923
1924 If this policy set to false, Firefox will create a new profile for each unique installation of Firefox.
1925
1926 This policy only work on Windows via GPO (not policies.json).
1927
1928 **Compatibility:** Firefox 70, Firefox ESR 68.2 (Windows only, GPO only)\
1929 **CCK2 Equivalent:** N/A\
1930 **Preferences Affected:** N/A
1931
1932 #### Windows (GPO)
1933 ```
1934 Software\Policies\Mozilla\Firefox\LegacyProfiles = = 0x1 | 0x0
1935 ```
1936 ### LocalFileLinks
1937 Enable linking to local files by origin.
1938
1939 **Compatibility:** Firefox 68, Firefox ESR 68\
1940 **CCK2 Equivalent:** N/A\
1941 **Preferences Affected:** `capability.policy.localfilelinks.*`
1942
1943 #### Windows (GPO)
1944 ```
1945 Software\Policies\Mozilla\Firefox\LocalFileLinks\1 = "https://example.org"
1946 Software\Policies\Mozilla\Firefox\LocalFileLinks\2 = "https://example.edu"
1947 ```
1948 #### macOS
1949 ```
1950 <dict>
1951   <key>LocalFileLinks</key>
1952   <array>
1953     <string>http://example.org</string>
1954     <string>http://example.edu</string>
1955   </array>
1956 </dict>
1957 ```
1958 #### policies.json
1959 ```
1960 {
1961   "policies": {
1962     "LocalFileLinks": ["http://example.org/",
1963                        "http://example.edu/"]
1964   }
1965 }
1966 ```
1967 ### NoDefaultBookmarks
1968 Disable the creation of default bookmarks.
1969
1970 This policy is only effective if the user profile has not been created yet.
1971
1972 **Compatibility:** Firefox 60, Firefox ESR 60\
1973 **CCK2 Equivalent:** `removeDefaultBookmarks`\
1974 **Preferences Affected:** N/A
1975
1976 #### Windows (GPO)
1977 ```
1978 Software\Policies\Mozilla\Firefox\NoDefaultBookmarks = 0x1 | 0x0
1979 ```
1980 #### macOS
1981 ```
1982 <dict>
1983   <key>NoDefaultBookmarks</key>
1984   <true/> | <false/>
1985 </dict>
1986 ```
1987 #### policies.json
1988 ```
1989 {
1990   "policies": {
1991     "NoDefaultBookmarks": true | false
1992   }
1993 }
1994 ```
1995 ### NetworkPrediction
1996 Enable or disable network prediction (DNS prefetching).
1997
1998 **Compatibility:** Firefox 67, Firefox ESR 60.7\
1999 **CCK2 Equivalent:** N/A\
2000 **Preferences Affected:** `network.dns.disablePrefetch`,`network.dns.disablePrefetchFromHTTPS`
2001
2002 #### Windows (GPO)
2003 ```
2004 Software\Policies\Mozilla\Firefox\NetworkPrediction = 0x1 | 0x0
2005 ```
2006 #### macOS
2007 ```
2008 <dict>
2009   <key>NetworkPrediction</key>
2010   <true/> | <false/>
2011 </dict>
2012 ```
2013 #### policies.json
2014 ```
2015 {
2016   "policies": {
2017     "NetworkPrediction": true | false
2018 }
2019 ```
2020 ### NewTabPage
2021 Enable or disable the New Tab page.
2022
2023 **Compatibility:** Firefox 68, Firefox ESR 68\
2024 **CCK2 Equivalent:** N/A\
2025 **Preferences Affected:** `browser.newtabpage.enabled`
2026
2027 #### Windows (GPO)
2028 ```
2029 Software\Policies\Mozilla\Firefox\NewTabPage = 0x1 | 0x0
2030 ```
2031 #### macOS
2032 ```
2033 <dict>
2034   <key>NewTabPage</key>
2035   <true/> | <false/>
2036 </dict>
2037 ```
2038 #### policies.json
2039 ```
2040 {
2041   "policies": {
2042     "NewTabPage": true | false
2043 }
2044 ```
2045 ### OfferToSaveLogins
2046 Control whether or not Firefox offers to save passwords.
2047
2048 **Compatibility:** Firefox 60, Firefox ESR 60\
2049 **CCK2 Equivalent:** `dontRememberPasswords`\
2050 **Preferences Affected:** `signon.rememberSignons`
2051
2052 #### Windows (GPO)
2053 ```
2054 Software\Policies\Mozilla\Firefox\OfferToSaveLogins = 0x1 | 0x0
2055 ```
2056 #### macOS
2057 ```
2058 <dict>
2059   <key>OfferToSaveLogins</key>
2060   <true/> | <false/>
2061 </dict>
2062 ```
2063 #### policies.json
2064 ```
2065 {
2066   "policies": {
2067     "OfferToSaveLogins": true | false
2068   }
2069 }
2070 ```
2071 ### OfferToSaveLoginsDefault
2072 Sets the default value of signon.rememberSignons without locking it.
2073
2074 **Compatibility:** Firefox 70, Firefox ESR 60.2\
2075 **CCK2 Equivalent:** `dontRememberPasswords`\
2076 **Preferences Affected:** `signon.rememberSignons`
2077
2078 #### Windows (GPO)
2079 ```
2080 Software\Policies\Mozilla\Firefox\OfferToSaveLoginsDefault = 0x1 | 0x0
2081 ```
2082 #### macOS
2083 ```
2084 <dict>
2085   <key>OfferToSaveLoginsDefault</key>
2086   <true/> | <false/>
2087 </dict>
2088 ```
2089 #### policies.json
2090 ```
2091 {
2092   "policies": {
2093     "OfferToSaveLoginsDefault": true | false
2094   }
2095 }
2096 ```
2097 ### OverrideFirstRunPage
2098 Override the first run page. If the value is blank, no first run page is displayed.
2099
2100 **Compatibility:** Firefox 60, Firefox ESR 60\
2101 **CCK2 Equivalent:** `welcomePage`,`noWelcomePage`\
2102 **Preferences Affected:** `startup.homepage_welcome_url`
2103
2104 #### Windows (GPO)
2105 ```
2106 Software\Policies\Mozilla\Firefox\OverrideFirstRunPage = "http://example.org"
2107 ```
2108 #### macOS
2109 ```
2110 <dict>
2111   <key>OverrideFirstRunPage</key>
2112   <string>http://example.org</string>
2113 </dict>
2114 ```
2115 #### policies.json
2116 ```
2117 {
2118   "policies": {
2119     "OverrideFirstRunPage": "http://example.org"
2120 }
2121 ```
2122 ### OverridePostUpdatePage
2123 Override the upgrade page. If the value is blank, no upgrade page is displayed.
2124
2125 **Compatibility:** Firefox 60, Firefox ESR 60\
2126 **CCK2 Equivalent:** `upgradePage`,`noUpgradePage`\
2127 **Preferences Affected:** `startup.homepage_override_url`
2128
2129 #### Windows (GPO)
2130 ```
2131 Software\Policies\Mozilla\Firefox\OverridePostUpdatePage = "http://example.org"
2132 ```
2133 #### macOS
2134 ```
2135 <dict>
2136   <key>OverridePostUpdatePage</key>
2137   <string>http://example.org</string>
2138 </dict>
2139 ```
2140 #### policies.json
2141 ```
2142 {
2143   "policies": {
2144     "OverridePostUpdatePage": "http://example.org"
2145 }
2146 ```
2147 ### PasswordManagerEnabled
2148 Remove access to the password manager via preferences and blocks about:logins on Firefox 70.
2149
2150 **Compatibility:** Firefox 70, Firefox ESR 60.2\
2151 **CCK2 Equivalent:** N/A\
2152 **Preferences Affected:** `pref.privacy.disable_button.view_passwords`
2153
2154 #### Windows (GPO)
2155 ```
2156 Software\Policies\Mozilla\Firefox\PasswordManagerEnabled = 0x1 | 0x0
2157 ```
2158 #### macOS
2159 ```
2160 <dict>
2161   <key>PasswordManagerEnabled</key>
2162   <true/> | <false/>
2163 </dict>
2164 ```
2165 #### policies.json
2166 ```
2167 {
2168   "policies": {
2169     "PasswordManagerEnabled": true | false
2170   }
2171 }
2172 ```
2173 ### Permissions
2174 Set permissions associated with camera, microphone, location, notifications, and autoplay. Because these are origins, not domains, entries with unique ports must be specified separately. See examples below.
2175
2176 `Allow` is a list of origins where the feature is allowed.
2177
2178 `Block` is a list of origins where the feature is not allowed.
2179
2180 `BlockNewRequests` determines whether or not new requests can be made for the feature.
2181
2182 `Locked` prevents the user from changing preferences for the feature.
2183
2184 **Compatibility:** Firefox 62, Firefox ESR 60.2 (Autoplay added in Firefox 74, Firefox ESR 68.6\
2185 **CCK2 Equivalent:** N/A\
2186 **Preferences Affected:** `permissions.default.camera`,`permissions.default.microphone`,`permissions.default.geo`,`permissions.default.desktop-notification`
2187
2188 #### Windows (GPO)
2189 ```
2190 Software\Policies\Mozilla\Firefox\Permissions\Camera\Allow\1 = "https://example.org"
2191 Software\Policies\Mozilla\Firefox\Permissions\Camera\Allow\2 = "https://example.org:1234"
2192 Software\Policies\Mozilla\Firefox\Permissions\Camera\Block\1 = "https://example.edu"
2193 Software\Policies\Mozilla\Firefox\Permissions\Camera\BlockNewRequests = 0x1 | 0x0
2194 Software\Policies\Mozilla\Firefox\Permissions\Camera\Locked = 0x1 | 0x0
2195 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Allow\1 = "https://example.org"
2196 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Block\1 = "https://example.edu"
2197 Software\Policies\Mozilla\Firefox\Permissions\Microphone\BlockNewRequests = 0x1 | 0x0
2198 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Locked = 0x1 | 0x0
2199 Software\Policies\Mozilla\Firefox\Permissions\Location\Allow\1 = "https://example.org"
2200 Software\Policies\Mozilla\Firefox\Permissions\Location\Block\1 = "https://example.edu"
2201 Software\Policies\Mozilla\Firefox\Permissions\Location\BlockNewRequests = 0x1 | 0x0
2202 Software\Policies\Mozilla\Firefox\Permissions\Location\Locked = 0x1 | 0x0
2203 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Allow\1 = "https://example.org"
2204 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Block\1 = "https://example.edu"
2205 Software\Policies\Mozilla\Firefox\Permissions\Notifications\BlockNewRequests = 0x1 | 0x0
2206 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Locked = 0x1 | 0x0
2207 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Allow\1 = "https://example.org"
2208 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Block\1 = "https://example.edu"
2209 ```
2210 #### macOS
2211 ```
2212 <dict>
2213   <key>Permissions</key>
2214   <dict>
2215     <key>Camera</key>
2216     <dict>
2217       <key>Allow</key>
2218       <array>
2219         <string>https://example.org</string>
2220         <string>https://example.org:1234</string>
2221       </array>
2222       <key>Block</key>
2223       <array>
2224         <string>https://example.edu</string>
2225       </array>
2226       <key>BlockNewRequests</key>
2227       <true/>
2228       <key>Locked</key>
2229       <true/>
2230     </dict>
2231     <key>Microphone</key>
2232     <dict>
2233       <key>Allow</key>
2234       <array>
2235         <string>https://example.org</string>
2236       </array>
2237       <key>Block</key>
2238       <array>
2239         <string>https://example.edu</string>
2240       </array>
2241       <key>BlockNewRequests</key>
2242       <true/>
2243       <key>Locked</key>
2244       <true/>
2245     </dict>
2246     <key>Location</key>
2247     <dict>
2248       <key>Allow</key>
2249       <array>
2250         <string>https://example.org</string>
2251       </array>
2252       <key>Block</key>
2253       <array>
2254         <string>https://example.edu</string>
2255       </array>
2256       <key>BlockNewRequests</key>
2257       <true/>
2258       <key>Locked</key>
2259       <true/>
2260     </dict>
2261     <key>Notifications</key>
2262     <dict>
2263       <key>Allow</key>
2264       <array>
2265         <string>https://example.org</string>
2266       </array>
2267       <key>Block</key>
2268       <array>
2269         <string>https://example.edu</string>
2270       </array>
2271       <key>BlockNewRequests</key>
2272       <true/>
2273       <key>Locked</key>
2274       <true/>
2275     </dict>
2276     <key>Autoplay</key>
2277     <dict>
2278       <key>Allow</key>
2279       <array>
2280         <string>https://example.org</string>
2281       </array>
2282       <key>Block</key>
2283       <array>
2284         <string>https://example.edu</string>
2285       </array>
2286     </dict>
2287   </dict>
2288 </dict>
2289 ```
2290 #### policies.json
2291 ```
2292 {
2293   "policies": {
2294     "Permissions": {
2295       "Camera": {
2296         "Allow": ["https://example.org","https://example.org:1234"],
2297         "Block": ["https://example.edu"],
2298         "BlockNewRequests": true | false,
2299         "Locked": true | false
2300       },
2301       "Microphone": {
2302         "Allow": ["https://example.org"],
2303         "Block": ["https://example.edu"],
2304         "BlockNewRequests": true | false,
2305         "Locked": true | false
2306       },
2307       "Location": {
2308         "Allow": ["https://example.org"],
2309         "Block": ["https://example.edu"],
2310         "BlockNewRequests": true | false,
2311         "Locked": true | false
2312       },
2313       "Notifications": {
2314         "Allow": ["https://example.org"],
2315         "Block": ["https://example.edu"],
2316         "BlockNewRequests": true | false,
2317         "Locked": true | false
2318       },
2319       "Autoplay": {
2320         "Allow": ["https://example.org"],
2321         "Block": ["https://example.edu"]
2322       }
2323     }
2324   }
2325 }
2326 ```
2327 ### PopupBlocking
2328 Configure the default pop-up window policy as well as origins for which pop-up windows are allowed.
2329
2330 `Allow` is a list of origins where popup-windows are allowed.
2331
2332 `Default` determines whether or not pop-up windows are allowed by default.
2333
2334 `Locked` prevents the user from changing pop-up preferences.
2335
2336 **Compatibility:** Firefox 60, Firefox ESR 60\
2337 **CCK2 Equivalent:** `permissions.popup`\
2338 **Preferences Affected:** `dom.disable_open_during_load`
2339
2340 #### Windows (GPO)
2341 ```
2342 Software\Policies\Mozilla\Firefox\PopupBlocking\Allow\1 = "https://example.org"
2343 Software\Policies\Mozilla\Firefox\PopupBlocking\Allow\2 = "https://example.edu"
2344 Software\Policies\Mozilla\Firefox\PopupBlocking\Default = 0x1 | 0x0
2345 Software\Policies\Mozilla\Firefox\PopupBlocking\Locked = 0x1 | 0x0
2346 ```
2347 #### macOS
2348 ```
2349 <dict>
2350   <key>PopupBlocking</key>
2351   <dict>
2352     <key>Allow</key>
2353     <array>
2354       <string>http://example.org</string>
2355       <string>http://example.edu</string>
2356     </array>
2357     <key>Default</key>
2358     <true/> | <false/>
2359     <key>Locked</key>
2360     <true/> | <false/>
2361   </dict>
2362 </dict>
2363 ```
2364 #### policies.json
2365 ```
2366 {
2367   "policies": {
2368     "PopupBlocking": {
2369       "Allow": ["http://example.org/",
2370                 "http://example.edu/"],
2371       "Default": true | false,
2372       "Locked": true | false
2373     }
2374   }
2375 }
2376 ```
2377 ### Preferences
2378 Set and lock certain preferences.
2379
2380 **Compatibility:** See below\
2381 **CCK2 Equivalent:** `preferences`\
2382 **Preferences Affected:** See below
2383
2384 | Preference | Type | Compatibility | Default
2385 | --- | --- | --- | ---
2386 | accessibility.force_disabled | integer | Firefox 70, Firefox ESR 68.2 | 0
2387 | &nbsp;&nbsp;&nbsp;&nbsp;If set to 1, platform accessibility is disabled.
2388 | app.update.auto (Deprecated - Switch to AppAutoUpdate policy) | boolean | Firefox 68, Firefox ESR 68 | true
2389 | &nbsp;&nbsp;&nbsp;&nbsp;If false, Firefox doesn't automatically install update.
2390 | browser.bookmarks.autoExportHTML | boolean | Firefox 70, Firefox ESR 68.2 | false
2391 | &nbsp;&nbsp;&nbsp;&nbsp;If true, bookmarks are exported on shutdown.
2392 | browser.bookmarks.file | string | Firefox 70, Firefox ESR 68.2 | N/A
2393 | &nbsp;&nbsp;&nbsp;&nbsp;If set, the name of the file where bookmarks are exported and imported.
2394 | browser.bookmarks.restore_default_bookmarks | boolean | Firefox 70, Firefox ESR 68.2 | N/A
2395 | &nbsp;&nbsp;&nbsp;&nbsp;If true, bookmarks are restored to their defaults.
2396 | browser.cache.disk.enable | boolean | Firefox 68, Firefox ESR 68 | true
2397 | &nbsp;&nbsp;&nbsp;&nbsp;If false, don't store cache on the hard drive.
2398 | ~browser.cache.disk.parent_directory~ | string | Firefox 68, Firefox ESR 68 | Profile temporary directory
2399 | &nbsp;&nbsp;&nbsp;&nbsp;~If set, changes the location of the disk cache.~ This policy doesn't work. It's being worked on.
2400 | browser.fixup.dns_first_for_single_words | boolean | Firefox 68, Firefox ESR 68 | false
2401 | &nbsp;&nbsp;&nbsp;&nbsp;If true, single words are sent to DNS, not directly to search.
2402 | browser.newtabpage.activity-stream.default.sites | string | Firefox 72, ESR 68.4 | Locale dependent
2403 | &nbsp;&nbsp;&nbsp;&nbsp;If set, a list of URLs to use as the default top sites on the new tab page.
2404 | browser.places.importBookmarksHTML | boolean | Firefox 70, Firefox ESR 68.2
2405 | &nbsp;&nbsp;&nbsp;&nbsp;If true, bookmarks are always imported on startup.
2406 | browser.safebrowsing.phishing.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
2407 | &nbsp;&nbsp;&nbsp;&nbsp;If false, phishing protection is not enabled (Not recommended)
2408 | browser.safebrowsing.malware.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
2409 | &nbsp;&nbsp;&nbsp;&nbsp;If false, malware protection is not enabled (Not recommended)
2410 | browser.search.update | boolean | Firefox 68, Firefox ESR 68 | true
2411 | &nbsp;&nbsp;&nbsp;&nbsp;If false, updates for search engines are not checked.
2412 | browser.slowStartup.notificationDisabled | boolean | Firefox 70, Firefox ESR 68.2 | false
2413 | &nbsp;&nbsp;&nbsp;&nbsp;If true, a notification isn't shown if startup is slow.
2414 | browser.tabs.warnOnClose | boolean | Firefox 68, Firefox ESR 68 | true
2415 | &nbsp;&nbsp;&nbsp;&nbsp;If false, there is no warning when the browser is closed.
2416 | browser.taskbar.previews.enable | boolean | Firefox 70, Firefox ESR 68.2 (Windows only) | false
2417 | &nbsp;&nbsp;&nbsp;&nbsp;If true, tab previews are shown in the Windows taskbar.
2418 | browser.urlbar.suggest.bookmark | boolean | Firefox 68, Firefox ESR 68 | true
2419 | &nbsp;&nbsp;&nbsp;&nbsp;If false, bookmarks aren't suggested when typing in the URL bar.
2420 | browser.urlbar.suggest.history | boolean | Firefox 68, Firefox ESR 68 | true
2421 | &nbsp;&nbsp;&nbsp;&nbsp;If false, history isn't suggested when typing in the URL bar.
2422 | browser.urlbar.suggest.openpage | boolean | Firefox 68, Firefox ESR 68 | true
2423 | &nbsp;&nbsp;&nbsp;&nbsp;If false, open tabs aren't suggested when typing in the URL bar.
2424 | datareporting.policy.dataSubmissionPolicyBypassNotification | boolean | Firefox 68, Firefox ESR 68 | false
2425 | &nbsp;&nbsp;&nbsp;&nbsp;If true, don't show the privacy policy tab on first run.
2426 | dom.allow_scripts_to_close_windows | boolean | Firefox 70, Firefox ESR 68.2 | false
2427 | &nbsp;&nbsp;&nbsp;&nbsp;If false, web page can close windows.
2428 | dom.disable_window_flip | boolean | Firefox 68, Firefox ESR 68 | true
2429 | &nbsp;&nbsp;&nbsp;&nbsp;If false, web pages can focus and activate windows.
2430 | dom.disable_window_move_resize | boolean | Firefox 68, Firefox ESR 68 | false
2431 | &nbsp;&nbsp;&nbsp;&nbsp;If true, web pages can't move or resize windows.
2432 | dom.event.contextmenu.enabled | boolean | Firefox 68, Firefox ESR 68 | true
2433 | &nbsp;&nbsp;&nbsp;&nbsp;If false, web pages can't override context menus.
2434 | dom.keyboardevent.keypress.hack.dispatch_non_printable_keys.addl | string | Firefox 68, Firefox ESR 68 | N/A
2435 | &nbsp;&nbsp;&nbsp;&nbsp;See https://support.mozilla.org/en-US/kb/dom-events-changes-introduced-firefox-66
2436 | dom.keyboardevent.keypress.hack.use_legacy_keycode_and_charcode.addl | string | Firefox 68, Firefox ESR 68 | N/A
2437 | &nbsp;&nbsp;&nbsp;&nbsp;See https://support.mozilla.org/en-US/kb/dom-events-changes-introduced-firefox-66
2438 | dom.xmldocument.load.enabled | boolean | Firefox ESR 68.5 | true.
2439 | &nbsp;&nbsp;&nbsp;&nbsp;If false, XMLDocument.load is not available.
2440 | dom.xmldocument.async.enabled | boolean | Firefox ESR 68.5 | true
2441 | &nbsp;&nbsp;&nbsp;&nbsp;If false, XMLDocument.async is not available.
2442 | extensions.blocklist.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
2443 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the extensions blocklist is not used (Not recommended)
2444 | extensions.getAddons.showPane | boolean | Firefox 68, Firefox ESR 68 | N/A
2445 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the Recommendations tab is not displayed in the Add-ons Manager.
2446 | extensions.htmlaboutaddons.recommendations.enabled | boolean | Firefox 72, Firefox ESR 68.4 | true
2447 | &nbsp;&nbsp;&nbsp;&nbsp;If false, recommendations are not shown on the Extensions tab in the Add-ons Manager.
2448 | geo.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
2449 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the geolocation API is disabled. | Language dependent
2450 | intl.accept_languages | string | Firefox 70, Firefox ESR 68.2
2451 | &nbsp;&nbsp;&nbsp;&nbsp;If set, preferred language for web pages.
2452 | media.eme.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
2453 | &nbsp;&nbsp;&nbsp;&nbsp;If false, Encrypted Media Extensions are not enabled.
2454 | media.gmp-gmpopenh264.enabled | boolean | Firefox 68, Firefox ESR 68 | true
2455 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the OpenH264  plugin is not downloaded.
2456 | media.gmp-widevinecdm.enabled | boolean | Firefox 68, Firefox ESR 68 | true
2457 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the Widevine plugin is not downloaded.
2458 | media.peerconnection.enabled | boolean | Firefox 72, Firefox ESR 68.4 | true
2459 | &nbsp;&nbsp;&nbsp;&nbsp;If false, WebRTC is disabled
2460 | media.peerconnection.ice.obfuscate_host_addresses.whitelist | string | Firefox 72, Firefox ESR 68.4 | N/A
2461 | &nbsp;&nbsp;&nbsp;&nbsp;If set, a list of domains for which mDNS hostname obfuscation is
2462 disabled
2463 | network.dns.disableIPv6 | boolean | Firefox 68, Firefox ESR 68 | false
2464 | &nbsp;&nbsp;&nbsp;&nbsp;If true, IPv6 DNS lokoups are disabled.
2465 | network.IDN_show_punycode | boolean | Firefox 68, Firefox ESR 68 | false
2466 | &nbsp;&nbsp;&nbsp;&nbsp;If true, display the punycode version of internationalized domain names.
2467 | places.history.enabled | boolean | Firefox 68, Firefox ESR 68 | true
2468 | &nbsp;&nbsp;&nbsp;&nbsp;If false, history is not enabled.
2469 | print.save_print_settings | boolean | Firefox 70, Firefox ESR 68.2 | true
2470 | &nbsp;&nbsp;&nbsp;&nbsp;If false, print settings are not saved between jobs.
2471 | security.default_personal_cert | string | Firefox 68, Firefox ESR 68 | Ask Every Time
2472 | &nbsp;&nbsp;&nbsp;&nbsp;If set to Select Automatically, Firefox automatically chooses the default personal certificate.
2473 | security.mixed_content.block_active_content | boolean | Firefox 70, Firefox ESR 68.2 | true
2474 | &nbsp;&nbsp;&nbsp;&nbsp;If false, mixed active content (HTTP and HTTPS) is not blocked.
2475 | security.osclientcerts.autoload | boolean | Firefox 72 (Windows), Firefox 75 (macOS)  | false
2476 | &nbsp;&nbsp;&nbsp;&nbsp;If true, client certificates are loaded from the operating system certificate store.
2477 | security.ssl.errorReporting.enabled | boolean | Firefox 68, Firefox ESR 68 | true
2478 | &nbsp;&nbsp;&nbsp;&nbsp;If false, SSL errors cannot be sent to Mozilla.
2479 | security.tls.hello_downgrade_check | boolean | Firefox 72, Firefox ESR 68.4 | true
2480 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the TLS 1.3 downgrade check is disabled.
2481 | ui.key.menuAccessKeyFocuses | boolean | Firefox 68, Firefox ESR 68 | true
2482 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the Alt key doesn't show the menubar on Windows.
2483 | widget.content.gtk-theme-override | string | Firefox 72, Firefox ESR 68.4 (Linux only) | N/A
2484 | &nbsp;&nbsp;&nbsp;&nbsp;If set, overrides the GTK theme for widgets.
2485 #### Windows (GPO)
2486 ```
2487 Software\Policies\Mozilla\Firefox\Preferences\boolean_preference_name = 0x1 | 0x0
2488 Software\Policies\Mozilla\Firefox\Preferences\string_preference_name = "string_value"
2489 ```
2490 #### macOS
2491 ```
2492 <dict>
2493   <key>Preferences</key>
2494   <dict>
2495     <key>boolean_preference_name</key>
2496     <true/> | <false/>
2497     <key>string_preference_name</key>
2498     <string>string_value</string>
2499   </dict>
2500 </dict>
2501 ```
2502 #### policies.json
2503 ```
2504 {
2505   "policies": {
2506     "Preferences": {
2507       "boolean_preference_name": true | false,
2508       "string_preference_name": "string_value"
2509     }
2510   }
2511 }
2512 ```
2513 ### PromptForDownloadLocation
2514 Ask where to save each file before downloading.
2515
2516 **Compatibility:** Firefox 68, Firefox ESR 68\
2517 **CCK2 Equivalent:** N/A\
2518 **Preferences Affected:** `browser.download.useDownloadDir`
2519
2520 #### Windows (GPO)
2521 ```
2522 Software\Policies\Mozilla\Firefox\PromptForDownloadLocation = 0x1 | 0x0
2523 ```
2524 #### macOS
2525 ```
2526 <dict>
2527   <key>PromptForDownloadLocation</key>
2528   <true/> | <false/>
2529 </dict>
2530 ```
2531 #### policies.json
2532 ```
2533 {
2534   "policies": {
2535     "PromptForDownloadLocation": true | false
2536   }
2537 }
2538 ```
2539 ### Proxy
2540 Configure proxy settings. These settings correspond to the connection settings in Firefox preferences.
2541 To specify ports, append them to the hostnames with a colon (:).
2542
2543 `Mode` is the proxy method being used.
2544
2545 `Locked` is whether or not proxy settings can be changed.
2546
2547 `HTTPProxy` is the HTTP proxy server.
2548
2549 `UseHTTPProxyForAllProtocols` is whether or not the HTTP proxy should be used for all other proxies.
2550
2551 `SSLProxy` is the SSL proxy server.
2552
2553 `FTPProxy` is the FTP proxy server.
2554
2555 `SOCKSProxy` is the SOCKS proxy server
2556
2557 `SOCKSVersion` is the SOCKS version (4 or 5)
2558
2559 `Passthrough` is list of hostnames or IP addresses that will not be proxied. Use `<local>` to bypass proxying for all hostnames which do not contain periods.
2560
2561 `AutoConfigURL` is a  URL for proxy configuration (only used if Mode is autoConfig).
2562
2563 `AutoLogin` means do not prompt for authentication if password is saved.
2564
2565 `UseProxyForDNS` to use proxy DNS when using SOCKS v5.
2566
2567 **Compatibility:** Firefox 60, Firefox ESR 60\
2568 **CCK2 Equivalent:** `networkProxy*`\
2569 **Preferences Affected:** `network.proxy.type`,`network.proxy.autoconfig_url`,`network.proxy.socks_remote_dns`,`signon.autologin.proxy`,`network.proxy.socks_version`,`network.proxy.no_proxies_on`,`network.proxy.share_proxy_settings`,`network.proxy.http`,`network.proxy.http_port`,`network.proxy.ftp`,`network.proxy.ftp_port`,`network.proxy.ssl`,`network.proxy.ssl_port`,`network.proxy.socks`,`network.proxy.socks_port`
2570
2571 #### Windows (GPO)
2572 ```
2573 Software\Policies\Mozilla\Firefox\Proxy\Mode = "none", "system", "manual", "autoDetect", "autoConfig"
2574 Software\Policies\Mozilla\Firefox\Proxy\Locked = 0x1 | 0x0
2575 Software\Policies\Mozilla\Firefox\=Proxy\HTTPProxy = https://httpproxy.example.com
2576 Software\Policies\Mozilla\Firefox\Proxy\UseHTTPProxyForAllProtocols = 0x1 | 0x0
2577 Software\Policies\Mozilla\Firefox\Proxy\SSLProxy = https://sslproxy.example.com
2578 Software\Policies\Mozilla\Firefox\Proxy\FTPProxy = https://ftpproxy.example.com
2579 Software\Policies\Mozilla\Firefox\Proxy\SOCKSProxy = https://socksproxy.example.com
2580 Software\Policies\Mozilla\Firefox\Proxy\SOCKSVersion = 0x4 | 0x5
2581 Software\Policies\Mozilla\Firefox\Proxy\Passthrough = <local>
2582 Software\Policies\Mozilla\Firefox\Proxy\AutoConfigURL = URL_TO_AUTOCONFIG
2583 Software\Policies\Mozilla\Firefox\Proxy\AutoLogin = 0x1 | 0x0
2584 Software\Policies\Mozilla\Firefox\Proxy\UseProxyForDNS = 0x1 | 0x0
2585 ```
2586 #### macOS
2587 ```
2588 <dict>
2589   <key>Proxy</key>
2590   <dict>
2591     <key>Mode</key>
2592     <string>none | system | manual | autoDetect | autoConfig</string>
2593     <key>Locked</key>
2594     <true> | </false>
2595     <key>HTTPProxy</key>
2596     <string>https://httpproxy.example.com</string>
2597     <key>UseHTTPProxyForAllProtocols</key>
2598     <true> | </false>
2599     <key>SSLProxy</key>
2600     <string>https://sslproxy.example.com</string>
2601     <key>FTPProxy</key>
2602     <string>https://ftpproxy.example.com</string>
2603     <key>SOCKSProxy</key>
2604     <string>https://socksproxy.example.com</string>
2605     <key>SOCKSVersion</key>
2606     <string>4 | 5</string>
2607     <key>Passthrough</key>
2608     <string>&lt;local>&gt;</string>
2609     <key>AutoConfigURL</key>
2610     <string>URL_TO_AUTOCONFIG</string>
2611     <key>AutoLogin</key>
2612     <true> | </false>
2613     <key>UseProxyForDNS</key>
2614     <true> | </false>
2615   </dict>
2616 </dict>
2617 ```
2618 #### policies.json
2619 ```
2620 {
2621   "policies": {
2622     "Proxy": {
2623       "Mode": "none", "system", "manual", "autoDetect", "autoConfig",
2624       "Locked": [true, false],
2625       "HTTPProxy": "hostname",
2626       "UseHTTPProxyForAllProtocols": [true, false],
2627       "SSLProxy": "hostname",
2628       "FTPProxy": "hostname",
2629       "SOCKSProxy": "hostname",
2630       "SOCKSVersion": 4 | 5
2631       "Passthrough": "<local>",
2632       "AutoConfigURL": "URL_TO_AUTOCONFIG",
2633       "AutoLogin":  [true, false],
2634       "UseProxyForDNS": [true, false]
2635     }
2636   }
2637 }
2638 ```
2639 ### RequestedLocales
2640 Set the the list of requested locales for the application in order of preference. It will cause the corresponding language pack to become active.
2641
2642 Note: For Firefox 68, this can now be a string so that you can specify an empty value.
2643
2644 **Compatibility:** Firefox 64, Firefox ESR 60.4, Updated in Firefox 68, Firefox ESR 68\
2645 **CCK2 Equivalent:** N/A\
2646 **Preferences Affected:** N/A
2647 #### Windows (GPO)
2648 ```
2649 Software\Policies\Mozilla\Firefox\RequestedLocales\1 = "de"
2650 Software\Policies\Mozilla\Firefox\RequestedLocales\2 = "en-US"
2651
2652 or
2653
2654 Software\Policies\Mozilla\Firefox\RequestedLocales = "de,en-US"
2655 ```
2656 #### macOS
2657 ```
2658 <dict>
2659   <key>RequestedLocales</key>
2660   <array>
2661     <string>de</string>
2662     <string>en-US</string>
2663   </array>
2664 </dict>
2665
2666 or
2667
2668 <dict>
2669   <key>RequestedLocales</key>
2670   <string>de,en-US</string>
2671 </dict>
2672
2673 ```
2674 #### policies.json
2675 ```
2676 {
2677   "policies": {
2678     "RequestedLocales": ["de", "en-US"]
2679   }
2680 }
2681
2682 or
2683
2684 {
2685   "policies": {
2686     "RequestedLocales": "de,en-US"
2687   }
2688 }
2689 ```
2690 <a name="SanitizeOnShutdown"></a>
2691
2692 ### SanitizeOnShutdown (Selective)
2693 Clear data on shutdown. Choose from Cache, Cookies, Download History, Form & Search History, Browsing History, Active Logins, Site Preferences and Offline Website Data.
2694
2695 Previously, these values were always locked. Starting with Firefox 74 and Firefox ESR 68.6, you can use the `Locked` option to either keep the values unlocked (set it to false), or lock only the values you set (set it to true). If you want the old behavior of locking everything, do not set `Locked` at all.
2696
2697 **Compatibility:** Firefox 68, Firefox ESR 68 (Locked added in 74/68.6)\
2698 **CCK2 Equivalent:** N/A\
2699 **Preferences Affected:** `privacy.sanitize.sanitizeOnShutdown`,`privacy.clearOnShutdown.cache`,`privacy.clearOnShutdown.cookies`,`privacy.clearOnShutdown.downloads`,`privacy.clearOnShutdown.formdata`,`privacy.clearOnShutdown.history`,`privacy.clearOnShutdown.sessions`,`privacy.clearOnShutdown.siteSettings`,`privacy.clearOnShutdown.offlineApps`
2700 #### Windows (GPO)
2701 ```
2702 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Cache = 0x1 | 0x0
2703 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Cookies = 0x1 | 0x0
2704 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Downloads = 0x1 | 0x0
2705 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\FormData = 0x1 | 0x0
2706 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\History = 0x1 | 0x0
2707 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Sessions = 0x1 | 0x0
2708 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\SiteSettings = 0x1 | 0x0
2709 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\OfflineApps = 0x1 | 0x0
2710 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Locked = 0x1 | 0x0
2711 ```
2712 #### macOS
2713 ```
2714 <dict>
2715   <key>SanitizeOnShutdown</key>
2716   <dict>
2717     <key>Cache</key>
2718     <true/> | <false/>
2719     <key>Cookies</key>
2720     <true/> | <false/>
2721     <key>Downloads</key>
2722     <true/> | <false/>
2723     <key>FormData</key>
2724     <true/> | <false/>
2725     <key>History</key>
2726     <true/> | <false/>
2727     <key>Sessions</key>
2728     <true/> | <false/>
2729     <key>SiteSettings</key>
2730     <true/> | <false/>
2731     <key>OfflineApps</key>
2732     <true/> | <false/>
2733     <key>Locked</key>
2734     <true/> | <false/>
2735   </dict>
2736 </dict>
2737 ```
2738 #### policies.json
2739 ```
2740 {
2741   "policies": {
2742     "SanitizeOnShutdown": {
2743       "Cache": true | false,
2744       "Cookies": true | false,
2745       "Downloads": true | false,
2746       "FormData": true | false,
2747       "History": true | false,
2748       "Sessions": true | false,
2749       "SiteSettings": true | false,
2750       "OfflineApps": true | false,
2751       "Locked": true | false
2752     }
2753   }
2754 }
2755 ```
2756 ### SanitizeOnShutdown (All)
2757 Clear all data on shutdown, including Browsing & Download History, Cookies, Active Logins, Cache, Form & Search History, Site Preferences and Offline Website Data.
2758
2759 **Compatibility:** Firefox 60, Firefox ESR 60\
2760 **CCK2 Equivalent:** N/A\
2761 **Preferences Affected:** `privacy.sanitize.sanitizeOnShutdown`,`privacy.clearOnShutdown.cache`,`privacy.clearOnShutdown.cookies`,`privacy.clearOnShutdown.downloads`,`privacy.clearOnShutdown.formdata`,`privacy.clearOnShutdown.history`,`privacy.clearOnShutdown.sessions`,`privacy.clearOnShutdown.siteSettings`,`privacy.clearOnShutdown.offlineApps`
2762 #### Windows (GPO)
2763 ```
2764 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown = 0x1 | 0x0
2765 ```
2766 #### macOS
2767 ```
2768 <dict>
2769   <key>SanitizeOnShutdown</key>
2770   <true/> | <false/>
2771 </dict>
2772 ```
2773 #### policies.json
2774 ```
2775 {
2776   "policies": {
2777     "SanitizeOnShutdown": true | false
2778   }
2779 }
2780 ```
2781 ### SearchBar
2782 Set whether or not search bar is displayed.
2783
2784 **Compatibility:** Firefox 60, Firefox ESR 60\
2785 **CCK2 Equivalent:** `showSearchBar`\
2786 **Preferences Affected:** N/A
2787
2788 #### Windows (GPO)
2789 ```
2790 Software\Policies\Mozilla\Firefox\SearchBar = "unified" | "separate"
2791 ```
2792 #### macOS
2793 ```
2794 <dict>
2795   <key>SearchBar</key>
2796   <string>unified | separate</string>
2797 </dict>
2798 ```
2799
2800 #### policies.json
2801 ```
2802 {
2803   "policies": {
2804     "SearchBar": "unified" | "separate"
2805   }
2806 }
2807 ```
2808 <a name="SearchEngines"></a>
2809
2810 ### SearchEngines (This policy is only available on the ESR.)
2811
2812 ### SearchEngines | Default
2813
2814 Set the default search engine. This policy is only available on the ESR.
2815
2816 **Compatibility:** Firefox ESR 60\
2817 **CCK2 Equivalent:** `defaultSearchEngine`\
2818 **Preferences Affected:** N/A
2819
2820 #### Windows (GPO)
2821 ```
2822 Software\Policies\Mozilla\Firefox\SearchEngines\Default = NAME_OF_SEARCH_ENGINE
2823 ```
2824 #### macOS
2825 ```
2826 <dict>
2827   <key>SearchEngines</key>
2828   <dict>
2829     <key>Default</key>
2830     <string>NAME_OF_SEARCH_ENGINE</string>
2831   </dict>
2832 </dict>
2833 ```
2834 #### policies.json
2835 ```
2836 {
2837   "policies": {
2838     "SearchEngines": {
2839       "Default": "NAME_OF_SEARCH_ENGINE"
2840     }
2841   }
2842 }
2843 ```
2844 ### SearchEngines | PreventInstalls
2845
2846 Prevent installing search engines from webpages.
2847
2848 **Compatibility:** Firefox ESR 60\
2849 **CCK2 Equivalent:** `disableSearchEngineInstall`\
2850 **Preferences Affected:** N/A
2851
2852 #### Windows (GPO)
2853 ```
2854 Software\Policies\Mozilla\Firefox\SearchEngines\PreventInstalls = 0x1 | 0x0
2855 ```
2856 #### macOS
2857 ```
2858 <dict>
2859   <key>SearchEngines</key>
2860   <dict>
2861     <key>PreventInstalls</key>
2862     <true/> | <false/>
2863   </dict>
2864 </dict>
2865 ```
2866 #### policies.json
2867 ```
2868 {
2869   "policies": {
2870     "SearchEngines": {
2871       "PreventInstalls": true | false
2872     }
2873   }
2874 }
2875 ```
2876 ### SearchEngines | Remove
2877
2878 Hide built-in search engines. This policy is only available on the ESR.
2879
2880 **Compatibility:** Firefox ESR 60.2\
2881 **CCK2 Equivalent:** `removeDefaultSearchEngines` (removed all built-in engines)\
2882 **Preferences Affected:** N/A
2883
2884 #### Windows (GPO)
2885 ```
2886 Software\Policies\Mozilla\Firefox\SearchEngines\Remove\1 = NAME_OF_SEARCH_ENGINE
2887 ```
2888 #### macOS
2889 ```
2890 <dict>
2891   <key>SearchEngines</key>
2892   <dict>
2893     <key>Remove</key>
2894     <array>
2895       <string>NAME_OF_SEARCH_ENGINE</string>
2896     </array>
2897   </dict>
2898 </dict>
2899 ```
2900 #### policies.json
2901 ```
2902 {
2903   "policies": {
2904     "SearchEngines": {
2905       "Remove": ["NAME_OF_SEARCH_ENGINE"]
2906     }
2907   }
2908 }
2909 ```
2910 ### SearchEngines | Add
2911
2912 Add new search engines (up to five). This policy is only available on the ESR. `Name` and `URLTemplate` are required.
2913
2914 `Name` is the name of the search engine.
2915
2916 `URLTemplate` is the search URL with {searchTerms} to substitute for the search term.
2917
2918 `Method` is either GET or POST
2919
2920 `IconURL` is a URL for the icon to use.
2921
2922 `Alias` is a keyword to use for the engine.
2923
2924 `Description` is a description of the search engine.
2925
2926 `PostData` is the POST data as name value pairs separated by &.
2927
2928 `SuggestURLTemplate` is a search suggestions URL with {searchTerms} to substitute for the search term.
2929
2930 **Compatibility:** Firefox ESR 60 (POST support in Firefox ESR 68)\
2931 **CCK2 Equivalent:** `searchplugins`\
2932 **Preferences Affected:** N/A
2933
2934 #### Windows (GPO)
2935 ```
2936 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Name = "Example1"
2937 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\URLTemplate = "https://www.example.org/q={searchTerms}"
2938 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Method = "GET" | "POST"
2939 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\IconURL = "https://www.example.org/favicon.ico"
2940 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Alias = "example"
2941 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Description = "Example Description"
2942 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\SuggestURLTemplate = "https://www.example.org/suggestions/q={searchTerms}"
2943 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\PostData = "name=value&q={searchTerms}"
2944 ```
2945
2946 #### macOS
2947 ```
2948 <dict>
2949   <key>SearchEngines</key>
2950   <dict>
2951     <key>Add</key>
2952     <array>
2953       <dict>
2954         <key>Name</key>
2955         <string>Example1</string>
2956         <key>URLTemplate</key>
2957         <string>https://www.example.org/q={searchTerms}</string>
2958         <key>Method</key>
2959         <string>GET | POST </string>
2960         <key>IconURL</key>
2961         <string>https://www.example.org/favicon.ico</string>
2962         <key>Alias</key>
2963         <string>example</string>
2964         <key>Description</key>
2965         <string>Example Description</string>
2966         <key>SuggestURLTemplate</key>
2967         <string>https://www.example.org/suggestions/q={searchTerms}</string>
2968         <key>PostData</key>
2969         <string>name=value&q={searchTerms}</string>
2970       </dict>
2971     <array>
2972   </dict>
2973 </dict>
2974 ```
2975 #### policies.json
2976 ```
2977 {
2978   "policies": {
2979     "SearchEngines": {
2980       "Add": [
2981         {
2982           "Name": "Example1",
2983           "URLTemplate": "https://www.example.org/q={searchTerms}",
2984           "Method": "GET" | "POST",
2985           "IconURL": "https://www.example.org/favicon.ico",
2986           "Alias": "example",
2987           "Description": "Description",
2988           "PostData": "name=value&q={searchTerms}",
2989           "SuggestURLTemplate": "https://www.example.org/suggestions/q={searchTerms}"
2990         }
2991       ]
2992     }
2993   }
2994 }
2995 ```
2996 ### SearchSuggestEnabled
2997
2998 Enable search suggestions.
2999
3000 **Compatibility:** Firefox 68, Firefox ESR 68\
3001 **CCK2 Equivalent:** N/A\
3002 **Preferences Affected:** `browser.urlbar.suggest.searches`,`browser.search.suggest.enabled`
3003
3004 #### Windows (GPO)
3005 ```
3006 Software\Policies\Mozilla\Firefox\SearchSuggestEnabled = 0x1 | 0x0
3007 ```
3008 #### macOS
3009 ```
3010 <dict>
3011   <key>SearchSuggestEnabled</key>
3012   <true/> | <false/>
3013 </dict>
3014 ```
3015 #### policies.json
3016 ```
3017 {
3018   "policies": {
3019     "SearchSuggestEnabled": true | false
3020   }
3021 }
3022 ```
3023 ### SecurityDevices
3024
3025 Install PKCS #11 modules.
3026
3027 **Compatibility:** Firefox 64, Firefox ESR 60.4\
3028 **CCK2 Equivalent:** `certs.devices`\
3029 **Preferences Affected:** N/A
3030
3031 #### Windows (GPO)
3032 ```
3033 Software\Policies\Mozilla\Firefox\SecurityDevices\NAME_OF_DEVICE = PATH_TO_LIBRARY_FOR_DEVICE
3034 ```
3035 #### macOS
3036 ```
3037 <dict>
3038   <key>SecurityDevices</key>
3039   <dict>
3040     <key>NAME_OF_DEVICE</key>
3041     <string>PATH_TO_LIBRARY_FOR_DEVICE</string>
3042   </dict>
3043 </dict>
3044 ```
3045
3046 #### policies.json
3047 ```
3048 {
3049   "policies": {
3050     "SecurityDevices": {
3051       "NAME_OF_DEVICE": "PATH_TO_LIBRARY_FOR_DEVICE"
3052     }
3053   }
3054 }
3055 ```
3056 ### SSLVersionMax
3057
3058 Set and lock the maximum version of TLS.
3059
3060 **Compatibility:** Firefox 66, Firefox ESR 60.6\
3061 **CCK2 Equivalent:** N/A\
3062 **Preferences Affected:** `security.tls.version.max`
3063
3064 #### Windows (GPO)
3065 ```
3066 Software\Policies\Mozilla\Firefox\SSLVersionMax = "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
3067 ```
3068 #### macOS
3069 ```
3070 <dict>
3071   <key>SSLVersionMax</key>
3072   <string>tls1 | tls1.1 | tls1.2 | tls1.3</string>
3073 </dict>
3074 ```
3075
3076 #### policies.json
3077 ```
3078 {
3079   "policies": {
3080     "SSLVersionMax": "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
3081   }
3082 }
3083 ```
3084 ### SSLVersionMin
3085
3086 Set and lock the minimum version of TLS.
3087
3088 **Compatibility:** Firefox 66, Firefox ESR 60.6\
3089 **CCK2 Equivalent:** N/A\
3090 **Preferences Affected:** `security.tls.version.min`
3091
3092 #### Windows (GPO)
3093 ```
3094 Software\Policies\Mozilla\Firefox\SSLVersionMin = "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
3095 ```
3096 #### macOS
3097 ```
3098 <dict>
3099   <key>SSLVersionMin</key>
3100   <string>tls1 | tls1.1 | tls1.2 | tls1.3</string>
3101 </dict>
3102 ```
3103
3104 #### policies.json
3105 ```
3106 {
3107   "policies": {
3108     "SSLVersionMin": "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
3109   }
3110 }
3111 ```
3112 ### SupportMenu
3113 Add a menuitem to the help menu for specifying support information.
3114
3115 **Compatibility:** Firefox 68.0.1, Firefox ESR 68.0.1\
3116 **CCK2 Equivalent:** helpMenu\
3117 **Preferences Affected:** N/A
3118
3119 #### Windows (GPO)
3120 ```
3121 Software\Policies\Mozilla\Firefox\SupportMenu\Title = "Support Menu"
3122 Software\Policies\Mozilla\Firefox\SupportMenu\URL = "http://example.com/support"
3123 Software\Policies\Mozilla\Firefox\SupportMenu\AccessKey = "S"
3124 ```
3125 #### macOS
3126 ```
3127 <dict>
3128   <key>SupportMenu</key>
3129   <dict>
3130     <key>Title</key>
3131     <string>SupportMenu</string>
3132     <key>URL</key>
3133     <string>http://example.com/support</string>
3134     <key>AccessKey</key>
3135     <string>S</string>
3136   </dict>
3137 </dict>
3138 ```
3139 #### policies.json
3140 ```
3141 {
3142   "policies": {
3143     "SupportMenu": {
3144       "Title": "Support Menu",
3145       "URL": "http://example.com/support",
3146       "AccessKey": "S"
3147     }
3148   }
3149 }
3150 ```
3151 ### UserMessaging
3152
3153 Prevent installing search engines from webpages.
3154
3155 `WhatsNew` Remove the "What's New" icon and menuitem. (Firefox 75 only)
3156
3157 `ExtensionRecommendations` Don't recommend extensions.
3158
3159 `FeatureRecommendations` Don't recommend browser features.
3160
3161 `UrlbarInterventions` Don't offer Firefox specific suggestions in the URL bar. (Firefox 75 only)
3162
3163 **Compatibility:** Firefox 75, Firefox ESR 68.7\
3164 **CCK2 Equivalent:** N/A\
3165 **Preferences Affected:** `browser.messaging-system.whatsNewPanel.enabled`,`browser.newtabpage.activity-stream.asrouter.userprefs.cfr.addons`,`browser.newtabpage.activity-stream.asrouter.userprefs.cfr.features`
3166
3167 #### Windows (GPO)
3168 ```
3169 Software\Policies\Mozilla\Firefox\UserMessaging\WhatsNew = 0x1 | 0x0
3170 Software\Policies\Mozilla\Firefox\UserMessaging\ExtensionRecommendations = 0x1 | 0x0
3171 Software\Policies\Mozilla\Firefox\UserMessaging\FeatureRecommendations = 0x1 | 0x0
3172 Software\Policies\Mozilla\Firefox\UserMessaging\UrlbarInterventions = 0x1 | 0x0
3173 ```
3174 #### macOS
3175 ```
3176 <dict>
3177   <key>UserMessaging</key>
3178   <dict>
3179     <key>WhatsNew</key>
3180     <true/> | <false/>
3181     <key>ExtensionRecommendations</key>
3182     <true/> | <false/>
3183     <key>FeatureRecommendations</key>
3184     <true/> | <false/>
3185     <key>UrlbarInterventions</key>
3186     <true/> | <false/>
3187   </dict>
3188 </dict>
3189 ```
3190 #### policies.json
3191 ```
3192 {
3193   "policies": {
3194     "UserMessaging": {
3195       "WhatsNew": true | false,
3196       "ExtensionRecommendations": true | false,
3197       "FeatureRecommendations": true | false,
3198       "UrlbarInterventions": true | false
3199     }
3200   }
3201 }
3202 ```
3203 ### WebsiteFilter
3204 Block websites from being visited. The parameters take an array of Match Patterns, as documented in https://developer.mozilla.org/en-US/Add-ons/WebExtensions/Match_patterns. Only http/https addresses are supported at the moment. The arrays are limited to 1000 entries each.
3205
3206 **Compatibility:** Firefox 60, Firefox ESR 60\
3207 **CCK2 Equivalent:** N/A\
3208 **Preferences Affected:** N/A
3209
3210 #### Windows (GPO)
3211 ```
3212 Software\Policies\Mozilla\Firefox\WebsiteFilter\Block\1 = "<all_urls>"
3213 Software\Policies\Mozilla\Firefox\WebsiteFilter\Exceptions\1 = "http://example.org/*"
3214 ```
3215 #### macOS
3216 ```
3217 <dict>
3218   <key>WebsiteFilter</key>
3219   <dict>
3220     <key>Block</key>
3221     <array>
3222       <string><all_urls></string>
3223     </array>
3224     <key>Exceptions</key>
3225     <array>
3226       <string>http://example.org/*</string>
3227     </array>
3228   </dict>
3229
3230 </dict>
3231 ```
3232 #### policies.json
3233 ```
3234 {
3235   "policies": {
3236     "WebsiteFilter": {
3237       "Block": ["<all_urls>"],
3238       "Exceptions": ["http://example.org/*"]
3239     }
3240   }
3241 }
3242 ```