README.md

   1 **These policies are in active development and so might contain changes that do not work with current versions of Firefox.**
   2
   3 **You should use the [officially released versions](https://github.com/mozilla/policy-templates/releases) if you are deploying changes.**
   4
   5 Policies can be specified using the [Group Policy templates on Windows](https://github.com/mozilla/policy-templates/tree/master/windows), [Intune on Windows](https://support.mozilla.org/kb/managing-firefox-intune), [configuration profiles on macOS](https://github.com/mozilla/policy-templates/tree/master/mac), or by creating a file called `policies.json`. On Windows, create a directory called `distribution` where the EXE is located and place the file there. On Mac, the file goes into `Firefox.app/Contents/Resources/distribution`.  On Linux, the file goes into `firefox/distribution`, where `firefox` is the installation directory for firefox, which varies by distribution or you can specify system-wide policy by placing the file in `/etc/firefox/policies`.
   6
   7 | Policy Name | Description
   8 | --- | --- |
   9 | **[`3rdparty`](#3rdparty)** | Set policies that WebExtensions can access via chrome.storage.managed.
  10 | **[`AllowedDomainsForApps`](#alloweddomainsforapps)** | Define domains allowed to access Google Workspace.
  11 | **[`AppAutoUpdate`](#appautoupdate)** | Enable or disable automatic application update.
  12 | **[`AppUpdateURL`](#appupdateurl)** | Change the URL for application update.
  13 | **[`Authentication`](#authentication)** | Configure sites that support integrated authentication.
  14 | **[`AutoLaunchProtocolsFromOrigins`](#autolaunchprotocolsfromorigins)** | Define a list of external protocols that can be used from listed origins without prompting the user.
  15 | **[`BackgroundAppUpdate`](#backgroundappupdate)** | Enable or disable the background updater (Windows only).
  16 | **[`BlockAboutAddons`](#blockaboutaddons)** | Block access to the Add-ons Manager (about:addons).
  17 | **[`BlockAboutConfig`](#blockaboutconfig)** | Block access to about:config.
  18 | **[`BlockAboutProfiles`](#blockaboutprofiles)** | Block access to About Profiles (about:profiles).
  19 | **[`BlockAboutSupport`](#blockaboutsupport)** | Block access to Troubleshooting Information (about:support).
  20 | **[`Bookmarks`](#bookmarks)** | Add bookmarks in either the bookmarks toolbar or menu.
  21 | **[`CaptivePortal`](#captiveportal)** | Enable or disable the detection of captive portals.
  22 | **[`Certificates`](#certificates)** |
  23 | **[`Certificates -> ImportEnterpriseRoots`](#certificates--importenterpriseroots)** | Trust certificates that have been added to the operating system certificate store by a user or administrator.
  24 | **[`Certificates -> Install`](#certificates--install)** | Install certificates into the Firefox certificate store.
  25 | **[`Cookies`](#cookies)** | Configure cookie preferences.
  26 | **[`DefaultDownloadDirectory`](#defaultdownloaddirectory)** | Set the default download directory.
  27 | **[`DisableAppUpdate`](#disableappupdate)** | Turn off application updates.
  28 | **[`DisableBuiltinPDFViewer`](#disablebuiltinpdfviewer)** | Disable the built in PDF viewer.
  29 | **[`DisabledCiphers`](#disabledciphers)** | Disable ciphers.
  30 | **[`DisableDefaultBrowserAgent`](#disabledefaultbrowseragent)** | Prevent the default browser agent from taking any actions (Windows only).
  31 | **[`DisableDeveloperTools`](#disabledevelopertools)** | Remove access to all developer tools.
  32 | **[`DisableFeedbackCommands`](#disablefeedbackcommands)** | Disable the menus for reporting sites.
  33 | **[`DisableFirefoxAccounts`](#disablefirefoxaccounts)** | Disable Firefox Accounts integration (Sync).
  34 | **[`DisableFirefoxScreenshots`](#disablefirefoxscreenshots)** | Remove access to Firefox Screenshots.
  35 | **[`DisableFirefoxStudies`](#disablefirefoxstudies)** | Disable Firefox studies (Shield).
  36 | **[`DisableForgetButton`](#disableforgetbutton)** | Disable the "Forget" button.
  37 | **[`DisableFormHistory`](#disableformhistory)** | Turn off saving information on web forms and the search bar.
  38 | **[`DisableMasterPasswordCreation`](#disablemasterpasswordcreation)** | Remove the master password functionality.
  39 | **[`DisablePasswordReveal`](#disablepasswordreveal)** | Do not allow passwords to be revealed in saved logins.
  40 | **[`DisablePocket`](#disablepocket)** | Remove Pocket in the Firefox UI.
  41 | **[`DisablePrivateBrowsing`](#disableprivatebrowsing)** | Remove access to private browsing.
  42 | **[`DisableProfileImport`](#disableprofileimport)** | Disables the "Import data from another browser" option in the bookmarks window.
  43 | **[`DisableProfileRefresh`](#disableprofilerefresh)** | Disable the Refresh Firefox button on about:support and support.mozilla.org
  44 | **[`DisableSafeMode`](#disablesafemode)** | Disable safe mode within the browser.
  45 | **[`DisableSecurityBypass`](#disablesecuritybypass)** | Prevent the user from bypassing security in certain cases.
  46 | **[`DisableSetDesktopBackground`](#disablesetdesktopbackground)** | Remove the "Set As Desktop Background..." menuitem when right clicking on an image.
  47 | **[`DisableSystemAddonUpdate`](#disablesystemaddonupdate)** | Prevent system add-ons from being installed or update.
  48 | **[`DisableTelemetry`](#disabletelemetry)** | DisableTelemetry
  49 | **[`DisplayBookmarksToolbar`](#displaybookmarkstoolbar)** | Set the initial state of the bookmarks toolbar.
  50 | **[`DisplayMenuBar`](#displaymenubar)** | Set the state of the menubar.
  51 | **[`DisplayMenuBar (Deprecated)`](#displaymenubar-deprecated)** | Set the initial state of the menubar.
  52 | **[`DNSOverHTTPS`](#dnsoverhttps)** | Configure DNS over HTTPS.
  53 | **[`DontCheckDefaultBrowser`](#dontcheckdefaultbrowser)** | Don't check if Firefox is the default browser at startup.
  54 | **[`DownloadDirectory`](#downloaddirectory)** | Set and lock the download directory.
  55 | **[`EnableTrackingProtection`](#enabletrackingprotection)** | Configure tracking protection.
  56 | **[`EncryptedMediaExtensions`](#encryptedmediaextensions)** | Enable or disable Encrypted Media Extensions and optionally lock it.
  57 | **[`EnterprisePoliciesEnabled`](#enterprisepoliciesenabled)** | Enable policy support on macOS.
  58 | **[`Extensions`](#extensions)** | Control the installation, uninstallation and locking of extensions.
  59 | **[`ExtensionSettings`](#extensionsettings)** | Manage all aspects of extensions.
  60 | **[`ExtensionUpdate`](#extensionupdate)** | Control extension updates.
  61 | **[`FirefoxHome`](#firefoxhome)** | Customize the Firefox Home page.
  62 | **[`FlashPlugin`](#flashplugin)** | Configure the default Flash plugin policy as well as origins for which Flash is allowed.
  63 | **[`Handlers`](#handlers)** | Configure default application handlers.
  64 | **[`HardwareAcceleration`](#hardwareacceleration)** | Control hardware acceleration.
  65 | **[`Homepage`](#homepage)** | Configure the default homepage and how Firefox starts.
  66 | **[`InstallAddonsPermission`](#installaddonspermission)** | Configure the default extension install policy as well as origins for extension installs are allowed.
  67 | **[`LegacyProfiles`](#legacyprofiles)** | Disable the feature enforcing a separate profile for each installation.
  68 | **[`LegacySameSiteCookieBehaviorEnabled`](#legacysamesitecookiebehaviorenabled)** | Enable default legacy SameSite cookie behavior setting.
  69 | **[`LegacySameSiteCookieBehaviorEnabledForDomainList`](#legacysamesitecookiebehaviorenabledfordomainlist)** | Revert to legacy SameSite behavior for cookies on specified sites.
  70 | **[`LocalFileLinks`](#localfilelinks)** | Enable linking to local files by origin.
  71 | **[`ManagedBookmarks`](#managedbookmarks)** | Configures a list of bookmarks managed by an administrator that cannot be changed by the user.
  72 | **[`ManualAppUpdateOnly`](#manualappupdateonly)** | Allow manual updates only and do not notify the user about updates..
  73 | **[`NetworkPrediction`](#networkprediction)** | Enable or disable network prediction (DNS prefetching).
  74 | **[`NewTabPage`](#newtabpage)** | Enable or disable the New Tab page.
  75 | **[`NoDefaultBookmarks`](#nodefaultbookmarks)** | Disable the creation of default bookmarks.
  76 | **[`OfferToSaveLogins`](#offertosavelogins)** | Control whether or not Firefox offers to save passwords.
  77 | **[`OfferToSaveLoginsDefault`](#offertosaveloginsdefault)** | Set the default value for whether or not Firefox offers to save passwords.
  78 | **[`OverrideFirstRunPage`](#overridefirstrunpage)** | Override the first run page.
  79 | **[`OverridePostUpdatePage`](#overridepostupdatepage)** | Override the upgrade page.
  80 | **[`PasswordManagerEnabled`](#passwordmanagerenabled)** | Remove (some) access to the password manager.
  81 | **[`PDFjs`](#pdfjs)** | Disable or configure PDF.js, the built-in PDF viewer.
  82 | **[`Permissions`](#permissions)** | Set permissions associated with camera, microphone, location, and notifications.
  83 | **[`PictureInPicture`](#pictureinpicture)** | Enable or disable Picture-in-Picture.
  84 | **[`PopupBlocking`](#popupblocking)** | Configure the default pop-up window policy as well as origins for which pop-up windows are allowed.
  85 | **[`Preferences`](#preferences)** | Set and lock preferences.
  86 | **[`Preferences (Deprecated)`](#preferences-deprecated)** | Set and lock some preferences.
  87 | **[`PrimaryPassword`](#primarypassword)** | Require or prevent using a primary (formerly master) password.
  88 | **[`PromptForDownloadLocation`](#promptfordownloadlocation)** | Ask where to save each file before downloading.
  89 | **[`Proxy`](#proxy)** | Configure proxy settings.
  90 | **[`RequestedLocales`](#requestedlocales)** | Set the the list of requested locales for the application in order of preference.
  91 | **[`SanitizeOnShutdown` (All)](#sanitizeonshutdown-all)** | Clear all data on shutdown.
  92 | **[`SanitizeOnShutdown` (Selective)](#sanitizeonshutdown-selective)** | Clear data on shutdown.
  93 | **[`SearchBar`](#searchbar)** | Set whether or not search bar is displayed.
  94 | **[`SearchEngines`](#searchengines-this-policy-is-only-available-on-the-esr)** |
  95 | **[`SearchEngines -> Add`](#searchengines--add)** | Add new search engines.
  96 | **[`SearchEngines -> Default`](#searchengines--default)** | Set the default search engine.
  97 | **[`SearchEngines -> PreventInstalls`](#searchengines--preventinstalls)** | Prevent installing search engines from webpages.
  98 | **[`SearchEngines -> Remove`](#searchengines--remove)** | Hide built-in search engines.
  99 | **[`SearchSuggestEnabled`](#searchsuggestenabled)** | Enable search suggestions.
 100 | **[`SecurityDevices`](#securitydevices)** | Install PKCS #11 modules.
 101 | **[`ShowHomeButton`](#showhomebutton)** | Show the home button on the toolbar.
 102 | **[`SSLVersionMax`](#sslversionmax)** | Set and lock the maximum version of TLS.
 103 | **[`SSLVersionMin`](#sslversionmin)** | Set and lock the minimum version of TLS.
 104 | **[`SupportMenu`](#supportmenu)** | Add a menuitem to the help menu for specifying support information.
 105 | **[`UserMessaging`](#usermessaging)** | Don't show certain messages to the user.
 106 | **[`WebsiteFilter`](#websitefilter)** | Block websites from being visited.
 107 | **[`WindowsSSO`](#windowssso)** | Allow Windows single sign-on for Microsoft, work, and school accounts.
 108
 109 ### 3rdparty
 110
 111 Allow WebExtensions to configure policy. For more information, see [Adding policy support to your extension](https://extensionworkshop.com/documentation/enterprise/adding-policy-support-to-your-extension/).
 112
 113 ### AllowedDomainsForApps
 114
 115 Define domains allowed to access Google Workspace.
 116
 117 This policy is based on the [Chrome policy](https://chromeenterprise.google/policies/#AllowedDomainsForApps) of the same name.
 118
 119 If this policy is enabled, users can only access Google Workspace using accounts from the specified domains. If you want to allow Gmail, you can add ```consumer_accounts``` to the list.
 120
 121 **Compatibility:** Firefox 89, Firefox ESR 78.11\
 122 **CCK2 Equivalent:** N/A\
 123 **Preferences Affected:** N/A
 124
 125 #### Windows (GPO)
 126 ```
 127 Software\Policies\Mozilla\Firefox\AllowedDomainsForApps = "managedfirefox.com,example.com"
 128 ```
 129 #### Windows (Intune)
 130 OMA-URI:
 131 ```
 132 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AllowedDomainsForApps
 133 ```
 134 Value (string):
 135 ```
 136 <enabled/>
 137 <data id="AllowedDomainsForApps" value="managedfirefox.com,example.com"/>
 138 ```
 139 #### macOS
 140 ```
 141 <dict>
 142   <key>AllowedDomainsForApps</key>
 143   <string>managedfirefox.com,example.com</string>
 144 </dict>
 145 ```
 146 #### policies.json
 147 ```
 148 {
 149   "policies": {
 150     "AllowedDomainsForApps": "managedfirefox.com,example.com"
 151   }
 152 }
 153 ```
 154 ### AppAutoUpdate
 155
 156 Enable or disable **automatic** application update.
 157
 158 If set to true, application updates are installed without user approval within Firefox. The operating system might still require approval.
 159
 160 If set to false, application updates are downloaded but the user can choose when to install the update.
 161
 162 If you have disabled updates via `DisableAppUpdate`, this policy has no effect.
 163
 164 **Compatibility:** Firefox 75, Firefox ESR 68.7\
 165 **CCK2 Equivalent:** N/A\
 166 **Preferences Affected:** `app.update.auto`
 167
 168 #### Windows (GPO)
 169 ```
 170 Software\Policies\Mozilla\Firefox\AppAutoUpdate = 0x1 | 0x0
 171 ```
 172 #### Windows (Intune)
 173 OMA-URI:
 174 ```
 175 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AppAutoUpdate
 176 ```
 177 Value (string):
 178 ```
 179 <enabled/> or <disabled/>
 180 ```
 181 #### macOS
 182 ```
 183 <dict>
 184   <key>AppAutoUpdate</key>
 185   <true/> | <false/>
 186 </dict>
 187 ```
 188 #### policies.json
 189 ```
 190 {
 191   "policies": {
 192     "AppAutoUpdate": true | false
 193   }
 194 }
 195 ```
 196 ### AppUpdateURL
 197
 198 Change the URL for application update if you are providing Firefox updates from a custom update server.
 199
 200 **Compatibility:** Firefox 62, Firefox ESR 60.2\
 201 **CCK2 Equivalent:** N/A\
 202 **Preferences Affected:** `app.update.url`
 203
 204 #### Windows (GPO)
 205 ```
 206 Software\Policies\Mozilla\Firefox\AppUpdateURL = "https://yoursite.com"
 207 ```
 208 #### Windows (Intune)
 209 OMA-URI:
 210 ```
 211 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AppUpdateURL
 212 ```
 213 Value (string):
 214 ```
 215 <enabled/>
 216 <data id="AppUpdateURL" value="https://yoursite.com"/>
 217 ```
 218 #### macOS
 219 ```
 220 <dict>
 221   <key>AppUpdateURL</key>
 222   <string>https://yoursite.com</string>
 223 </dict>
 224 ```
 225 #### policies.json
 226 ```
 227 {
 228   "policies": {
 229     "AppUpdateURL": "https://yoursite.com"
 230   }
 231 }
 232 ```
 233 ### Authentication
 234
 235 Configure sites that support integrated authentication.
 236
 237 See [Integrated authentication](https://htmlpreview.github.io/?https://github.com/mdn/archived-content/blob/main/files/en-us/mozilla/integrated_authentication/raw.html) for more information.
 238
 239 `PrivateBrowsing` enables integrated authentication in private browsing.
 240
 241 **Compatibility:** Firefox 60, Firefox ESR 60 (AllowNonFQDN added in 62/60.2, AllowProxies added in 70/68.2, Locked added in 71/68.3, PrivateBrowsing added in 77/68.9)\
 242 **CCK2 Equivalent:** N/A\
 243 **Preferences Affected:** `network.negotiate-auth.trusted-uris`,`network.negotiate-auth.delegation-uris`,`network.automatic-ntlm-auth.trusted-uris`,`network.automatic-ntlm-auth.allow-non-fqdn`,`network.negotiate-auth.allow-non-fqdn`,`network.automatic-ntlm-auth.allow-proxies`,`network.negotiate-auth.allow-proxies`,`network.auth.private-browsing-sso`
 244
 245 #### Windows (GPO)
 246 ```
 247 Software\Policies\Mozilla\Firefox\Authentication\SPNEGO\1 = "mydomain.com"
 248 Software\Policies\Mozilla\Firefox\Authentication\SPNEGO\2 = "https://myotherdomain.com"
 249 Software\Policies\Mozilla\Firefox\Authentication\Delegated\1 = "mydomain.com"
 250 Software\Policies\Mozilla\Firefox\Authentication\Delegated\2 = "https://myotherdomain.com"
 251 Software\Policies\Mozilla\Firefox\Authentication\NTLM\1 = "mydomain.com"
 252 Software\Policies\Mozilla\Firefox\Authentication\NTLM\2 = "https://myotherdomain.com"
 253 Software\Policies\Mozilla\Firefox\Authentication\AllowNonFQDN\SPNEGO = 0x1 | 0x0
 254 Software\Policies\Mozilla\Firefox\Authentication\AllowNonFQDN\NTLM = 0x1 | 0x0
 255 Software\Policies\Mozilla\Firefox\Authentication\AllowProxies\SPNEGO = 0x1 | 0x0
 256 Software\Policies\Mozilla\Firefox\Authentication\AllowProxies\NTLM = 0x1 | 0x0
 257 Software\Policies\Mozilla\Firefox\Authentication\Locked = 0x1 | 0x0
 258 Software\Policies\Mozilla\Firefox\Authentication\PrivateBrowsing = 0x1 | 0x0
 259 ```
 260 #### Windows (Intune)
 261 OMA-URI:
 262 ```
 263 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_SPNEGO
 264 ```
 265 Value (string):
 266 ```
 267 <enabled/>
 268 <data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
 269 ```
 270 OMA-URI:
 271 ```
 272 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_Delegated
 273 ```
 274 Value (string):
 275 ```
 276 <enabled/>
 277 <data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
 278 ```
 279 OMA-URI:
 280 ```
 281 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_NTLM
 282 ```
 283 Value (string):
 284 ```
 285 <enabled/>
 286 <data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
 287 ```
 288 OMA-URI:
 289 ```
 290 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_AllowNonFQDN
 291 ```
 292 Value (string):
 293 ```
 294 <enabled/>
 295 <data id="Authentication_AllowNonFQDN_NTLM" value="true | false"/>
 296 <data id="Authentication_AllowNonFQDN_SPNEGO" value="true | false"/>
 297 ```
 298 OMA-URI:
 299 ```
 300 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_Locked
 301 ```
 302 Value (string):
 303 ```
 304 <enabled/> or <disabled/>
 305 ```
 306 OMA-URI:
 307 ```
 308 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_PrivateBrowsing
 309 ```
 310 Value (string):
 311 ```
 312 <enabled/> or <disabled/>
 313 ```
 314 #### macOS
 315 ```
 316 <dict>
 317   <key>Authentication</key>
 318   <dict>
 319     <key>SPNEGO</key>
 320     <array>
 321       <string>mydomain.com</string>
 322       <string>https://myotherdomain.com</string>
 323     </array>
 324     <key>Delegated</key>
 325     <array>
 326       <string>mydomain.com</string>
 327       <string>https://myotherdomain.com</string>
 328     </array>
 329     <key>NTLM</key>
 330     <array>
 331       <string>mydomain.com</string>
 332       <string>https://myotherdomain.com</string>
 333     </array>
 334     <key>AllowNonFQDN</key>
 335       <dict>
 336       <key>SPNEGO</key>
 337       <true/> | <false/>
 338       <key>NTLM</key>
 339       <true/> | <false/>
 340     </dict>
 341     <key>AllowProxies</key>
 342       <dict>
 343       <key>SPNEGO</key>
 344       <true/> | <false/>
 345       <key>NTLM</key>
 346       <true/> | <false/>
 347     </dict>
 348     <key>Locked</key>
 349     <true/> | <false/>
 350     <key>PrivateBrowsing</key>
 351     <true/> | <false/>
 352   </dict>
 353 </dict>
 354 ```
 355 #### policies.json
 356 ```
 357 {
 358   "policies": {
 359     "Authentication": {
 360       "SPNEGO": ["mydomain.com", "https://myotherdomain.com"],
 361       "Delegated": ["mydomain.com", "https://myotherdomain.com"],
 362       "NTLM": ["mydomain.com", "https://myotherdomain.com"],
 363       "AllowNonFQDN": {
 364         "SPNEGO": true | false,
 365         "NTLM": true | false
 366       },
 367       "AllowProxies": {
 368         "SPNEGO": true | false,
 369         "NTLM": true | false
 370       },
 371       "Locked": true | false,
 372       "PrivateBrowsing": true | false
 373     }
 374   }
 375 }
 376 ```
 377 ### AutoLaunchProtocolsFromOrigins
 378 Define a list of external protocols that can be used from listed origins without prompting the user. The origin is the scheme plus the hostname.
 379
 380 The syntax of this policy is exactly the same as the [Chrome AutoLaunchProtocolsFromOrigins policy](https://cloud.google.com/docs/chrome-enterprise/policies/?policy=AutoLaunchProtocolsFromOrigins) except that you can only use valid origins (not just hostnames). This also means that you cannot specify an asterisk for all origins.
 381
 382 The schema is:
 383 ```
 384 {
 385  "items": {
 386   "properties": {
 387    "allowed_origins": {
 388     "items": {
 389      "type": "string"
 390     },
 391     "type": "array"
 392    },
 393    "protocol": {
 394     "type": "string"
 395    }
 396   },
 397   "required": [
 398    "protocol",
 399    "allowed_origins"
 400   ],
 401   "type": "object"
 402  },
 403  "type": "array"
 404 }
 405 ```
 406 **Compatibility:** Firefox 90, Firefox ESR 78.12\
 407 **CCK2 Equivalent:** N/A\
 408 **Preferences Affected:** N/A
 409
 410 #### Windows (GPO)
 411 Software\Policies\Mozilla\Firefox\AutoLaunchProtocolsFromOrigins (REG_MULTI_SZ) =
 412 ```
 413 [
 414   {
 415     "protocol": "zoommtg",
 416     "allowed_origins": [
 417       "https://somesite.zoom.us"
 418     ]
 419   }
 420 ]
 421 ```
 422 #### Windows (Intune)
 423 OMA-URI:
 424 ```
 425 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AutoLaunchProtocolsFromOrigins
 426 ```
 427 Value (string):
 428 ```
 429 <enabled/>
 430 <data id="JSON" value='
 431 [
 432   {
 433     "protocol": "zoommtg",
 434     "allowed_origins": [
 435       "https://somesite.zoom.us"
 436     ]
 437   }
 438 ]'/>
 439 ```
 440 #### macOS
 441 ```
 442 <dict>
 443   <key>AutoLaunchProtocolsFromOrigins</key>
 444   <array>
 445     <dict>
 446       <key>protocol</key>
 447       <string>zoommtg</string>
 448       <key>allowed_origins</key>
 449       <array>
 450         <string>https://somesite.zoom.us</string>
 451       </array>
 452     </dict>
 453   </array>
 454 </dict>
 455 ```
 456 #### policies.json
 457 ```
 458 {
 459   "policies": {
 460     "AutoLaunchProtocolsFromOrigins": [{
 461       "protocol": "zoommtg",
 462       "allowed_origins": [
 463         "https://somesite.zoom.us"
 464       ]
 465     }]
 466   }
 467 }
 468 ```
 469 ### BackgroundAppUpdate
 470
 471 Enable or disable **automatic** application update **in the background**, when the application is not running.
 472
 473 If set to true, application updates may be installed (without user approval) in the background, even when the application is not running. The operating system might still require approval.
 474
 475 If set to false, the application will not try to install updates when the application is not running.
 476
 477 If you have disabled updates via `DisableAppUpdate` or disabled automatic updates via `AppAutoUpdate`, this policy has no effect.
 478
 479 **Compatibility:** Firefox 90 (Windows only)\
 480 **CCK2 Equivalent:** N/A\
 481 **Preferences Affected:** `app.update.background.enabled`
 482
 483 #### Windows (GPO)
 484 ```
 485 Software\Policies\Mozilla\Firefox\BackgroundAppUpdate = 0x1 | 0x0
 486 ```
 487 #### Windows (Intune)
 488 OMA-URI:
 489 ```
 490 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BackgroundAppUpdate
 491 ```
 492 Value (string):
 493 ```
 494 <enabled/> or <disabled/>
 495 ```
 496 #### macOS
 497 ```
 498 <dict>
 499   <key>BackgroundAppUpdate</key>
 500   <true/> | <false/>
 501 </dict>
 502 ```
 503 #### policies.json
 504 ```
 505 {
 506   "policies": {
 507     "BackgroundAppUpdate": true | false
 508   }
 509 }
 510 ```
 511 ### BlockAboutAddons
 512
 513 Block access to the Add-ons Manager (about:addons).
 514
 515 **Compatibility:** Firefox 60, Firefox ESR 60\
 516 **CCK2 Equivalent:** `disableAddonsManager`\
 517 **Preferences Affected:** N/A
 518
 519 #### Windows (GPO)
 520 ```
 521 Software\Policies\Mozilla\Firefox\BlockAboutAddons = 0x1 | 0x0
 522 ```
 523 #### Windows (Intune)
 524 OMA-URI:
 525 ```
 526 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutAddons
 527 ```
 528 Value (string):
 529 ```
 530 <enabled/> or <disabled/>
 531 ```
 532 #### macOS
 533 ```
 534 <dict>
 535   <key>BlockAboutAddons</key>
 536   <true/> | <false/>
 537 </dict>
 538 ```
 539 #### policies.json
 540 ```
 541 {
 542   "policies": {
 543     "BlockAboutAddons": true | false
 544   }
 545 }
 546 ```
 547 ### BlockAboutConfig
 548
 549 Block access to about:config.
 550
 551 **Compatibility:** Firefox 60, Firefox ESR 60\
 552 **CCK2 Equivalent:** `disableAboutConfig`\
 553 **Preferences Affected:** N/A
 554
 555 #### Windows (GPO)
 556 ```
 557 Software\Policies\Mozilla\Firefox\BlockAboutConfig = 0x1 | 0x0
 558 ```
 559 #### Windows (Intune)
 560 OMA-URI:
 561 ```
 562 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutConfig
 563 ```
 564 Value (string):
 565 ```
 566 <enabled/> or <disabled/>
 567 ```
 568 #### macOS
 569 ```
 570 <dict>
 571   <key>BlockAboutConfig</key>
 572   <true/> | <false/>
 573 </dict>
 574 ```
 575 #### policies.json
 576 ```
 577 {
 578   "policies": {
 579     "BlockAboutConfig": true | false
 580   }
 581 }
 582 ```
 583 ### BlockAboutProfiles
 584
 585 Block access to About Profiles (about:profiles).
 586
 587 **Compatibility:** Firefox 60, Firefox ESR 60\
 588 **CCK2 Equivalent:** `disableAboutProfiles`\
 589 **Preferences Affected:** N/A
 590
 591 #### Windows (GPO)
 592 ```
 593 Software\Policies\Mozilla\Firefox\BlockAboutProfiles = 0x1 | 0x0
 594 ```
 595 #### Windows (Intune)
 596 OMA-URI:
 597 ```
 598 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutProfiles
 599 ```
 600 Value (string):
 601 ```
 602 <enabled/> or <disabled/>
 603 ```
 604 #### macOS
 605 ```
 606 <dict>
 607   <key>BlockAboutProfiles</key>
 608   <true/> | <false/>
 609 </dict>
 610 ```
 611 #### policies.json
 612 ```
 613 {
 614   "policies": {
 615     "BlockAboutProfiles": true | false
 616   }
 617 }
 618 ```
 619 ### BlockAboutSupport
 620
 621 Block access to Troubleshooting Information (about:support).
 622
 623 **Compatibility:** Firefox 60, Firefox ESR 60\
 624 **CCK2 Equivalent:** `disableAboutSupport`\
 625 **Preferences Affected:** N/A
 626
 627 #### Windows (GPO)
 628 ```
 629 Software\Policies\Mozilla\Firefox\BlockAboutSupport = 0x1 | 0x0
 630 ```
 631 #### Windows (Intune)
 632 OMA-URI:
 633 ```
 634 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutSupport
 635 ```
 636 Value (string):
 637 ```
 638 <enabled/> or <disabled/>
 639 ```
 640 #### macOS
 641 ```
 642 <dict>
 643   <key>BlockAboutSupport</key>
 644   <true/> | <false/>
 645 </dict>
 646 ```
 647 #### policies.json
 648 ```
 649 {
 650   "policies": {
 651     "BlockAboutSupport": true | false
 652   }
 653 }
 654 ```
 655 ### Bookmarks
 656
 657 Note: [`ManagedBookmarks`](#managedbookmarks) is the new recommended way to add bookmarks. This policy will continue to be supported.
 658
 659 Add bookmarks in either the bookmarks toolbar or menu. Only `Title` and `URL` are required. If `Placement` is not specified, the bookmark will be placed on the toolbar. If `Folder` is specified, it is automatically created and bookmarks with the same folder name are grouped together.
 660
 661 If you want to clear all bookmarks set with this policy, you can set the value to an empty array (```[]```). This can be on Windows via the new Bookmarks (JSON) policy available with GPO and Intune.
 662
 663 **Compatibility:** Firefox 60, Firefox ESR 60\
 664 **CCK2 Equivalent:** `bookmarks.toolbar`,`bookmarks.menu`\
 665 **Preferences Affected:** N/A
 666
 667 #### Windows (GPO)
 668 ```
 669 Software\Policies\Mozilla\Firefox\Bookmarks\1\Title = "Example"
 670 Software\Policies\Mozilla\Firefox\Bookmarks\1\URL = "https://example.com"
 671 Software\Policies\Mozilla\Firefox\Bookmarks\1\Favicon = "https://example.com/favicon.ico"
 672 Software\Policies\Mozilla\Firefox\Bookmarks\1\Placement = "toolbar" | "menu"
 673 Software\Policies\Mozilla\Firefox\Bookmarks\1\Folder = "FolderName"
 674
 675 Software\Policies\Mozilla\Firefox\Bookmarks (REG_MULTI_SZ) =
 676 ```
 677 []
 678 ```
 679
 680 ```
 681 #### Windows (Intune)
 682 OMA-URI:
 683 ```
 684 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Bookmarks/Bookmark01
 685 ```
 686 Value (string):
 687 ```
 688 <enabled/>
 689 <data id="BookmarkTitle" value="Example"/>
 690 <data id="BookmarkURL" value="https://example.com"/>
 691 <data id="BookmarkFavicon" value="https://example.com/favicon.ico"/>
 692 <data id="BookmarkPlacement" value="toolbar | menu"/>
 693 <data id="BookmarkFolder" value="FolderName"/>
 694 ```
 695 OMA-URI:
 696 ```
 697 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Bookmarks
 698 ```
 699 Value (string):
 700 ```
 701 <enabled/>
 702 <data id="JSON" value='[]'/>
 703 ```
 704 #### macOS
 705 ```
 706 <dict>
 707   <key>Bookmarks</key>
 708   <array>
 709     <dict>
 710       <key>Title</key>
 711       <string>Example</string>
 712       <key>URL</key>
 713       <string>https://example.com</string>
 714       <key>Favicon</key>
 715       <string>https://example.com/favicon.ico</string>
 716       <key>Placement</key>
 717       <string>toolbar | menu</string>
 718       <key>Folder</key>
 719       <string>FolderName</string>
 720     </dict>
 721   </array>
 722 </dict>
 723 ```
 724 #### policies.json
 725 ```
 726 {
 727   "policies": {
 728     "Bookmarks": [
 729       {
 730         "Title": "Example",
 731         "URL": "https://example.com",
 732         "Favicon": "https://example.com/favicon.ico",
 733         "Placement": "toolbar" | "menu",
 734         "Folder": "FolderName"
 735       }
 736     ]
 737   }
 738 }
 739 ```
 740 ### CaptivePortal
 741 Enable or disable the detection of captive portals.
 742
 743 **Compatibility:** Firefox 67, Firefox ESR 60.7\
 744 **CCK2 Equivalent:** N/A\
 745 **Preferences Affected:** `network.captive-portal-service.enabled`
 746
 747 #### Windows (GPO)
 748 ```
 749 Software\Policies\Mozilla\Firefox\CaptivePortal = 0x1 | 0x0
 750 ```
 751 #### Windows (Intune)
 752 OMA-URI:
 753 ```
 754 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/CaptivePortal
 755 ```
 756 Value (string):
 757 ```
 758 <enabled/> or <disabled/>
 759 ```
 760 #### macOS
 761 ```
 762 <dict>
 763   <key>CaptivePortal</key>
 764   <true/> | <false/>
 765 </dict>
 766 ```
 767 #### policies.json
 768 ```
 769 {
 770   "policies": {
 771     "CaptivePortal": true | false
 772   }
 773 }
 774 ```
 775 ### Certificates
 776
 777 ### Certificates | ImportEnterpriseRoots
 778
 779 Trust certificates that have been added to the operating system certificate store by a user or administrator.
 780
 781 Note: This policy only works on Windows and macOS. For Linux discussion, see [bug 1600509](https://bugzilla.mozilla.org/show_bug.cgi?id=1600509).
 782
 783 See https://support.mozilla.org/kb/setting-certificate-authorities-firefox for more detail.
 784
 785 **Compatibility:** Firefox 60, Firefox ESR 60 (macOS support in Firefox 63, Firefox ESR 68)\
 786 **CCK2 Equivalent:** N/A\
 787 **Preferences Affected:** `security.enterprise_roots.enabled`
 788
 789 #### Windows (GPO)
 790 ```
 791 Software\Policies\Mozilla\Firefox\Certificates\ImportEnterpriseRoots = 0x1 | 0x0
 792 ```
 793 #### Windows (Intune)
 794 OMA-URI:
 795 ```
 796 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Certificates/Certificates_ImportEnterpriseRoots
 797 ```
 798 Value (string):
 799 ```
 800 <enabled/> or <disabled/>
 801 ```
 802 #### macOS
 803 ```
 804 <dict>
 805   <key>Certificates</key>
 806   <dict>
 807     <key>ImportEnterpriseRoots</key>
 808     <true/> | <false/>
 809   </dict>
 810 </dict>
 811 ```
 812 #### policies.json
 813 ```
 814 {
 815   "policies": {
 816     "Certificates": {
 817       "ImportEnterpriseRoots": true | false
 818     }
 819   }
 820 }
 821 ```
 822 ### Certificates | Install
 823
 824 Install certificates into the Firefox certificate store. If only a filename is specified, Firefox searches for the file in the following locations:
 825
 826 - Windows
 827   - %USERPROFILE%\AppData\Local\Mozilla\Certificates
 828   - %USERPROFILE%\AppData\Roaming\Mozilla\Certificates
 829 - macOS
 830   - /Library/Application Support/Mozilla/Certificates
 831   - ~/Library/Application Support/Mozilla/Certificates
 832 - Linux
 833   - /usr/lib/mozilla/certificates
 834   - /usr/lib64/mozilla/certificates
 835   - ~/.mozilla/certificates
 836
 837 Starting with Firefox 65, Firefox 60.5 ESR, a fully qualified path can be used, including UNC paths. You should use the native path style for your operating system. We do not support using %USERPROFILE% or other environment variables on Windows.
 838
 839 If you are specifying the path in the policies.json file on Windows, you need to escape your backslashes (`\\`) which means that for UNC paths, you need to escape both (`\\\\`). If you use group policy, you only need one backslash.
 840
 841 Certificates are installed using the trust string `CT,CT,`.
 842
 843 Binary (DER) and ASCII (PEM) certificates are both supported.
 844
 845 **Compatibility:** Firefox 64, Firefox ESR 64\
 846 **CCK2 Equivalent:** `certs.ca`\
 847 **Preferences Affected:** N/A
 848
 849 #### Windows (GPO)
 850 ```
 851 Software\Policies\Mozilla\Firefox\Certificates\Install\1 = "cert1.der"
 852 Software\Policies\Mozilla\Firefox\Certificates\Install\2 = "C:\Users\username\cert2.pem"
 853 ```
 854 #### Windows (Intune)
 855 OMA-URI:
 856 ```
 857 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Certificates/Certificates_Install
 858 ```
 859 Value (string):
 860 ```
 861 <enabled/>
 862 <data id="Certificates_Install" value="1&#xF000;cert1.der&#xF000;2&#xF000;C:\Users\username\cert2.pem"/>
 863 ```
 864 #### macOS
 865 ```
 866 <dict>
 867   <key>Certificates</key>
 868   <dict>
 869     <key>Install</key>
 870     <array>
 871       <string>cert1.der</string>
 872       <string>/Users/username/cert2.pem</string>
 873     </array>
 874   </dict>
 875 </dict>
 876 ```
 877 #### policies.json
 878 ```
 879 {
 880   "policies": {
 881     "Certificates": {
 882       "Install": ["cert1.der", "/home/username/cert2.pem"]
 883     }
 884   }
 885 }
 886 ```
 887 ### Cookies
 888 Configure cookie preferences.
 889
 890 `Allow` is a list of origins (not domains) where cookies are always allowed. You must include http or https.
 891
 892 `AllowSession` is a list of origins (not domains) where cookies are only allowed for the current session. You must include http or https.
 893
 894 `Block` is a list of origins (not domains) where cookies are always blocked. You must include http or https.
 895
 896 `Behavior` sets the default behavior for cookies based on the values below.
 897
 898 `BehaviorPrivateBrowsing` sets the default behavior for cookies in private browsing based on the values below.
 899
 900 | Value | Description
 901 | --- | ---
 902 | accept | Accept all cookies
 903 | reject-foreign | Reject third party cookies
 904 | reject | Reject all cookies
 905 | limit-foreign | Reject third party cookies for sites you haven't visited
 906 | reject-tracker | Reject cookies for known trackers (default)
 907 | reject-tracker-and-partition-foreign | Reject cookies for known trackers and partition third-party cookies (Total Cookie Protection) (default for private browsing)
 908
 909 `Default` (Deprecated) determines whether cookies are accepted at all.
 910
 911 `AcceptThirdParty` (Deprecated) determines how third-party cookies are handled.
 912
 913 `ExpireAtSessionEnd` determines when cookies expire.
 914
 915 `RejectTracker` (Deprecated) only rejects cookies for trackers.
 916
 917 `Locked` prevents the user from changing cookie preferences.
 918
 919 **Compatibility:** Firefox 60, Firefox ESR 60 (RejectTracker added in Firefox 63, AllowSession added in Firefox 79/78.1, Behavior added in Firefox 95/91.4)\
 920 **CCK2 Equivalent:** N/A\
 921 **Preferences Affected:** `network.cookie.cookieBehavior`, `network.cookie.cookieBehavior.pbmode`, `network.cookie.lifetimePolicy`
 922
 923 #### Windows (GPO)
 924 ```
 925 Software\Policies\Mozilla\Firefox\Cookies\Allow\1 = "https://example.com"
 926 Software\Policies\Mozilla\Firefox\Cookies\AllowSession\1 = "https://example.edu"
 927 Software\Policies\Mozilla\Firefox\Cookies\Block\1 = "https://example.org"
 928 Software\Policies\Mozilla\Firefox\Cookies\Default = 0x1 | 0x0
 929 Software\Policies\Mozilla\Firefox\Cookies\AcceptThirdParty = "always" | "never" | "from-visited"
 930 Software\Policies\Mozilla\Firefox\Cookies\ExpireAtSessionEnd = 0x1 | 0x0
 931 Software\Policies\Mozilla\Firefox\Cookies\RejectTracker = 0x1 | 0x0
 932 Software\Policies\Mozilla\Firefox\Cookies\Behavior = "accept" | "reject-foreign" | "reject" | "limit-foreign" | "reject-tracker" | "reject-tracker-and-partition-foreign"
 933 Software\Policies\Mozilla\Firefox\Cookies\BehaviorPrivateBrowsing = "accept" | "reject-foreign" | "reject" | "limit-foreign" | "reject-tracker" | "reject-tracker-and-partition-foreign"
 934 Software\Policies\Mozilla\Firefox\Cookies\Locked = 0x1 | 0x0
 935 ```
 936 #### Windows (Intune)
 937 OMA-URI:
 938 ```
 939 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Allow
 940 ```
 941 Value (string):
 942 ```
 943 <enabled/>
 944 <data id="Cookies_Allow" value="1&#xF000;https://example.com"/>
 945 ```
 946 OMA-URI:
 947 ```
 948 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_AllowSession
 949 ```
 950 Value (string):
 951 ```
 952 <enabled/>
 953 <data id="Cookies_Allow" value="1&#xF000;https://example.edu"/>
 954 ```
 955 OMA-URI:
 956 ```
 957 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Block
 958 ```
 959 Value (string):
 960 ```
 961 <enabled/>
 962 <data id="Cookies_Block" value="1&#xF000;https://example.org"/>
 963 ```
 964 OMA-URI:
 965 ```
 966 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Default
 967 ```
 968 Value (string):
 969 ```
 970 <enabled/> or <disabled/>
 971 ```
 972 OMA-URI:
 973 ```
 974 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_AcceptThirdParty
 975 ```
 976 Value (string):
 977 ```
 978 <enabled/>
 979 <data id="Cookies_AcceptThirdParty" value="always | never | from-visited"/>
 980 ```
 981 OMA-URI:
 982 ```
 983 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_ExpireAtSessionEnd
 984 ```
 985 Value (string):
 986 ```
 987 <enabled/> or <disabled/>
 988 ```
 989 OMA-URI:
 990 ```
 991 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_RejectTracker
 992 ```
 993 Value (string):
 994 ```
 995 <enabled/> or <disabled/>
 996 ```
 997 OMA-URI:
 998 ```
 999 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Locked
1000 ```
1001 Value (string):
1002 ```
1003 <enabled/> or <disabled/>
1004 ```
1005 OMA-URI:
1006 ```
1007 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Behavior
1008 ```
1009 Value (string):
1010 ```
1011 <enabled/>
1012 <data id="Cookies_Behavior" value="accept | reject-foreign | reject | limit-foreign | reject-tracker | reject-tracker-and-partition-foreign"/>
1013 ```
1014 OMA-URI:
1015 ```
1016 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_BehaviorPrivateBrowsing
1017 ```
1018 Value (string):
1019 ```
1020 <enabled/>
1021 <data id="Cookies_BehaviorPrivateBrowsing" value="accept | reject-foreign | reject | limit-foreign | reject-tracker | reject-tracker-and-partition-foreign"/>
1022 ```
1023 #### macOS
1024 ```
1025 <dict>
1026   <key>Cookies</key>
1027   <dict>
1028     <key>Allow</key>
1029     <array>
1030       <string>http://example.com</string>
1031     </array>
1032     <key>AllowSession</key>
1033     <array>
1034       <string>http://example.edu</string>
1035     </array>
1036     <key>Block</key>
1037     <array>
1038       <string>http://example.org</string>
1039     </array>
1040     <key>Default</key>
1041     <true/> | <false/>
1042     <key>AcceptThirdParty</key>
1043     <string>always | never | from-visited</string>
1044     <key>ExpireAtSessionEnd</key>
1045     <true/> | <false/>
1046     <key>RejectTracker</key>
1047     <true/> | <false/>
1048     <key>Locked</key>
1049     <true/> | <false/>
1050     <key>Behavior</key>
1051     <string>accept | reject-foreign | reject | limit-foreign | reject-tracker | reject-tracker-and-partition-foreign</string>
1052     <key>BehaviorPrivateBrowsing</key>
1053     <string>accept | reject-foreign | reject | limit-foreign | reject-tracker | reject-tracker-and-partition-foreign</string>
1054   </dict>
1055 </dict>
1056 ```
1057 #### policies.json
1058 ```
1059 {
1060   "policies": {
1061     "Cookies": {
1062       "Allow": ["http://example.org/"],
1063       "AllowSession": ["http://example.edu/"],
1064       "Block": ["http://example.edu/"],
1065       "Default": true | false,
1066       "AcceptThirdParty": "always" | "never" | "from-visited",
1067       "ExpireAtSessionEnd": true | false,
1068       "RejectTracker": true | false,
1069       "Locked": true | false,
1070       "Behavior": "accept" | "reject-foreign" | "reject" | "limit-foreign" | "reject-tracker" | "reject-tracker-and-partition-foreign",
1071       "BehaviorPrivateBrowsing": "accept" | "reject-foreign" | "reject" | "limit-foreign" | "reject-tracker" | "reject-tracker-and-partition-foreign",
1072     }
1073   }
1074 }
1075 ```
1076 ### DefaultDownloadDirectory
1077 Set the default download directory.
1078
1079 You can use ${home} for the native home directory.
1080
1081 **Compatibility:** Firefox 68, Firefox ESR 68\
1082 **CCK2 Equivalent:** N/A\
1083 **Preferences Affected:** `browser.download.dir`, `browser.download.folderList`
1084
1085 #### Windows (GPO)
1086 ```
1087 Software\Policies\Mozilla\Firefox\DefaultDownloadDirectory = "${home}\Downloads"
1088 ```
1089 #### Windows (Intune)
1090 OMA-URI:
1091 ```
1092 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DefaultDownloadDirectory
1093 ```
1094 Value (string):
1095 ```
1096 <enabled/>
1097 <data id="Preferences_String" value="${home}\Downloads"/>
1098 ```
1099 #### macOS
1100 ```
1101 <dict>
1102   <key>DefaultDownloadDirectory</key>
1103   <string>${home}/Downloads</string>
1104 </dict>
1105 ```
1106 #### policies.json (macOS and Linux)
1107 ```
1108 {
1109   "policies": {
1110     "DefaultDownloadDirectory": "${home}/Downloads"
1111 }
1112 ```
1113 #### policies.json (Windows)
1114 ```
1115 {
1116   "policies": {
1117     "DefaultDownloadDirectory": "${home}\\Downloads"
1118 }
1119 ```
1120 ### DisableAppUpdate
1121 Turn off application updates within Firefox.
1122
1123 **Compatibility:** Firefox 60, Firefox ESR 60\
1124 **CCK2 Equivalent:** `disableFirefoxUpdates`\
1125 **Preferences Affected:** N/A
1126
1127 #### Windows (GPO)
1128 ```
1129 Software\Policies\Mozilla\Firefox\DisableAppUpdate = 0x1 | 0x0
1130 ```
1131 #### Windows (Intune)
1132 OMA-URI:
1133 ```
1134 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableAppUpdate
1135 ```
1136 Value (string):
1137 ```
1138 <enabled/> or <disabled/>
1139 ```
1140 #### macOS
1141 ```
1142 <dict>
1143   <key>DisableAppUpdate</key>
1144   <true/> | <false/>
1145 </dict>
1146 ```
1147 #### policies.json
1148 ```
1149 {
1150   "policies": {
1151     "DisableAppUpdate": true | false
1152   }
1153 }
1154 ```
1155 ### DisableBuiltinPDFViewer
1156 Disable the built in PDF viewer. PDF files are downloaded and sent externally.
1157
1158 **Compatibility:** Firefox 60, Firefox ESR 60\
1159 **CCK2 Equivalent:** `disablePDFjs`\
1160 **Preferences Affected:** `pdfjs.disabled`
1161
1162 #### Windows (GPO)
1163 ```
1164 Software\Policies\Mozilla\Firefox\DisableBuiltinPDFViewer = 0x1 | 0x0
1165 ```
1166 #### Windows (Intune)
1167 OMA-URI:
1168 ```
1169 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableBuiltinPDFViewer
1170 ```
1171 Value (string):
1172 ```
1173 <enabled/> or <disabled/>
1174 ```
1175 #### macOS
1176 ```
1177 <dict>
1178   <key>DisableBuiltinPDFViewer</key>
1179   <true/> | <false/>
1180 </dict>
1181 ```
1182 #### policies.json
1183 ```
1184 {
1185   "policies": {
1186     "DisableBuiltinPDFViewer": true | false
1187   }
1188 }
1189 ```
1190 ### DisabledCiphers
1191 Disable specific cryptographic ciphers, listed below.
1192
1193 ```
1194 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
1195 TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
1196 TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256
1197 TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
1198 TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
1199 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
1200 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
1201 TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA
1202 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
1203 TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA
1204 TLS_DHE_RSA_WITH_AES_128_CBC_SHA
1205 TLS_DHE_RSA_WITH_AES_256_CBC_SHA
1206 TLS_RSA_WITH_AES_128_GCM_SHA256
1207 TLS_RSA_WITH_AES_256_GCM_SHA384
1208 TLS_RSA_WITH_AES_128_CBC_SHA
1209 TLS_RSA_WITH_AES_256_CBC_SHA
1210 TLS_RSA_WITH_3DES_EDE_CBC_SHA
1211 ```
1212
1213 **Preferences Affected:** `security.ssl3.ecdhe_rsa_aes_128_gcm_sha256`, `security.ssl3.ecdhe_ecdsa_aes_128_gcm_sha256`, `security.ssl3.ecdhe_ecdsa_chacha20_poly1305_sha256`, `security.ssl3.ecdhe_rsa_chacha20_poly1305_sha256`, `security.ssl3.ecdhe_ecdsa_aes_256_gcm_sha384`, `security.ssl3.ecdhe_rsa_aes_256_gcm_sha384`, `security.ssl3.ecdhe_rsa_aes_128_sha`, `security.ssl3.ecdhe_ecdsa_aes_128_sha`, `security.ssl3.ecdhe_rsa_aes_256_sha`, `security.ssl3.ecdhe_ecdsa_aes_256_sha`, `security.ssl3.dhe_rsa_aes_128_sha`, `security.ssl3.dhe_rsa_aes_256_sha`, `security.ssl3.rsa_aes_128_gcm_sha256`, `security.ssl3.rsa_aes_256_gcm_sha384`, `security.ssl3.rsa_aes_128_sha`, `security.ssl3.rsa_aes_256_sha`, `security.ssl3.deprecated.rsa_des_ede3_sha`
1214
1215 ---
1216 **Note:**
1217
1218 This policy was updated in Firefox 78 to allow enabling ciphers as well. Setting the value to true disables the cipher, setting the value to false enables the cipher. Previously setting the value to true or false disabled the cipher.
1219
1220 ---
1221 **Compatibility:** Firefox 76, Firefox ESR 68.8 (TLS_RSA_WITH_AES_128_GCM_SHA256 and TLS_RSA_WITH_AES_256_GCM_SHA384 were added in Firefox 78, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA38, TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, and TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 were added in Firefox 97 and Firefox 91.6)\
1222 **CCK2 Equivalent:** N/A\
1223 **Preferences Affected:** N/A
1224
1225 #### Windows (GPO)
1226 ```
1227 Software\Policies\Mozilla\Firefox\DisabledCiphers\CIPHER_NAME = 0x1 | 0x0
1228 ```
1229 #### Windows (Intune)
1230 OMA-URI:
1231 ```
1232 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_CIPHER_NAME
1233
1234 ```
1235 Value (string):
1236 ```
1237 <enabled/> or <disabled/>
1238 ```
1239 #### macOS
1240 ```
1241 <dict>
1242   <key>DisabledCiphers</key>
1243     <dict>
1244       <key>CIPHER_NAME</key>
1245       <true/> | <false/>
1246     </dict>
1247 </dict>
1248 ```
1249 #### policies.json
1250 ```
1251 {
1252   "policies": {
1253     "DisabledCiphers": {
1254       "CIPHER_NAME": true | false,
1255     }
1256   }
1257 }
1258 ```
1259 ### DisableDefaultBrowserAgent
1260 Prevent the default browser agent from taking any actions. Only applicable to Windows; other platforms don’t have the agent.
1261
1262 The browser agent is a Windows-only scheduled task which runs in the background to collect and submit data about the browser that the user has set as their OS default. More information is available [here](https://firefox-source-docs.mozilla.org/toolkit/mozapps/defaultagent/default-browser-agent/index.html).
1263
1264 **Compatibility:** Firefox 75, Firefox ESR 68.7 (Windows only)\
1265 **CCK2 Equivalent:** N/A\
1266 **Preferences Affected:** N/A
1267
1268 #### Windows (GPO)
1269 ```
1270 Software\Policies\Mozilla\Firefox\DisableDefaultBrowserAgent = 0x1 | 0x0
1271 ```
1272 #### Windows (Intune)
1273 OMA-URI:
1274 ```
1275 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableDefaultBrowserAgent
1276 ```
1277 Value (string):
1278 ```
1279 <enabled/> or <disabled/>
1280 ```
1281 #### policies.json
1282 ```
1283 {
1284   "policies": {
1285     "DisableDefaultBrowserAgent": true | false
1286   }
1287 }
1288 ```
1289 ### DisableDeveloperTools
1290 Remove access to all developer tools.
1291
1292 **Compatibility:** Firefox 60, Firefox ESR 60\
1293 **CCK2 Equivalent:** `removeDeveloperTools`\
1294 **Preferences Affected:** `devtools.policy.disabled`
1295
1296 #### Windows (GPO)
1297 ```
1298 Software\Policies\Mozilla\Firefox\DisableDeveloperTools = 0x1 | 0x0`
1299 ```
1300 #### Windows (Intune)
1301 OMA-URI:
1302 ```
1303 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableDeveloperTools
1304 ```
1305 Value (string):
1306 ```
1307 <enabled/> or <disabled/>
1308 ```
1309 #### macOS
1310 ```
1311 <dict>
1312   <key>DisableDeveloperTools</key>
1313   <true/> | <false/>
1314 </dict>
1315 ```
1316 #### policies.json
1317 ```
1318 {
1319   "policies": {
1320     "DisableDeveloperTools": true | false
1321   }
1322 }
1323 ```
1324 ### DisableFeedbackCommands
1325 Disable the menus for reporting sites (Submit Feedback, Report Deceptive Site).
1326
1327 **Compatibility:** Firefox 60, Firefox ESR 60\
1328 **CCK2 Equivalent:** N/A\
1329 **Preferences Affected:** N/A
1330
1331 #### Windows (GPO)
1332 ```
1333 Software\Policies\Mozilla\Firefox\DisableFeedbackCommands = 0x1 | 0x0
1334 ```
1335 #### Windows (Intune)
1336 OMA-URI:
1337 ```
1338 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFeedbackCommands
1339 ```
1340 Value (string):
1341 ```
1342 <enabled/> or <disabled/>
1343 ```
1344 #### macOS
1345 ```
1346 <dict>
1347   <key>DisableFeedbackCommands</key>
1348   <true/> | <false/>
1349 </dict>
1350 ```
1351 #### policies.json
1352 ```
1353 {
1354   "policies": {
1355     "DisableFeedbackCommands": true | false
1356   }
1357 }
1358 ```
1359 ### DisableFirefoxAccounts
1360 Disable Firefox Accounts integration (Sync).
1361
1362 **Compatibility:** Firefox 60, Firefox ESR 60\
1363 **CCK2 Equivalent:** `disableSync`\
1364 **Preferences Affected:** `identity.fxaccounts.enabled`
1365
1366 #### Windows (GPO)
1367 ```
1368 Software\Policies\Mozilla\Firefox\DisableFirefoxAccounts = 0x1 | 0x0
1369 ```
1370 #### Windows (Intune)
1371 OMA-URI:
1372 ```
1373 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxAccounts
1374 ```
1375 Value (string):
1376 ```
1377 <enabled/> or <disabled/>
1378 ```
1379 #### macOS
1380 ```
1381 <dict>
1382   <key>DisableFirefoxAccounts</key>
1383   <true/> | <false/>
1384 </dict>
1385 ```
1386 #### policies.json
1387 ```
1388 {
1389   "policies": {
1390     "DisableFirefoxAccounts": true | false
1391   }
1392 }
1393 ```
1394 ### DisableFirefoxScreenshots
1395 Remove access to Firefox Screenshots.
1396
1397 **Compatibility:** Firefox 60, Firefox ESR 60\
1398 **CCK2 Equivalent:** N/A\
1399 **Preferences Affected:** `extensions.screenshots.disabled`
1400
1401 #### Windows (GPO)
1402 ```
1403 Software\Policies\Mozilla\Firefox\DisableFirefoxScreenshots = 0x1 | 0x0
1404 ```
1405 #### Windows (Intune)
1406 OMA-URI:
1407 ```
1408 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxScreenshots
1409 ```
1410 Value (string):
1411 ```
1412 <enabled/> or <disabled/>
1413 ```
1414 #### macOS
1415 ```
1416 <dict>
1417   <key>DisableFirefoxScreenshots</key>
1418   <true/> | <false/>
1419 </dict>
1420 ```
1421 #### policies.json
1422 ```
1423 {
1424   "policies": {
1425     "DisableFirefoxScreenshots": true | false
1426   }
1427 }
1428 ```
1429 ### DisableFirefoxStudies
1430 Disable Firefox studies (Shield).
1431
1432 **Compatibility:** Firefox 60, Firefox ESR 60\
1433 **CCK2 Equivalent:** N/A\
1434 **Preferences Affected:** N/A
1435
1436 #### Windows (GPO)
1437 ```
1438 Software\Policies\Mozilla\Firefox\DisableFirefoxStudies = 0x1 | 0x0
1439 ```
1440 #### Windows (Intune)
1441 OMA-URI:
1442 ```
1443 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxStudies
1444 ```
1445 Value (string):
1446 ```
1447 <enabled/> or <disabled/>
1448 ```
1449 #### macOS
1450 ```
1451 <dict>
1452   <key>DisableFirefoxStudies</key>
1453   <true/> | <false/>
1454 </dict>
1455 ```
1456 #### policies.json
1457 ```
1458 {
1459   "policies": {
1460     "DisableFirefoxStudies": true | false
1461   }
1462 }
1463 ```
1464 ### DisableForgetButton
1465 Disable the "Forget" button.
1466
1467 **Compatibility:** Firefox 60, Firefox ESR 60\
1468 **CCK2 Equivalent:** `disableForget`\
1469 **Preferences Affected:** N/A
1470
1471 #### Windows (GPO)
1472 ```
1473 Software\Policies\Mozilla\Firefox\DisableForgetButton = 0x1 | 0x0
1474 ```
1475 #### Windows (Intune)
1476 OMA-URI:
1477 ```
1478 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableForgetButton
1479 ```
1480 Value (string):
1481 ```
1482 <enabled/> or <disabled/>
1483 ```
1484 #### macOS
1485 ```
1486 <dict>
1487   <key>DisableForgetButton</key>
1488   <true/> | <false/>
1489 </dict>
1490 ```
1491 #### policies.json
1492 ```
1493 {
1494   "policies": {
1495     "DisableForgetButton": true | false
1496   }
1497 }
1498 ```
1499 ### DisableFormHistory
1500 Turn off saving information on web forms and the search bar.
1501
1502 **Compatibility:** Firefox 60, Firefox ESR 60\
1503 **CCK2 Equivalent:** `disableFormFill`\
1504 **Preferences Affected:** `browser.formfill.enable`
1505
1506 #### Windows (GPO)
1507 ```
1508 Software\Policies\Mozilla\Firefox\DisableFormHistory = 0x1 | 0x0
1509 ```
1510 #### Windows (Intune)
1511 OMA-URI:
1512 ```
1513 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFormHistory
1514 ```
1515 Value (string):
1516 ```
1517 <enabled/> or <disabled/>
1518 ```
1519 #### macOS
1520 ```
1521 <dict>
1522   <key>DisableFormHistory</key>
1523   <true/> | <false/>
1524 </dict>
1525 ```
1526 #### policies.json
1527 ```
1528 {
1529   "policies": {
1530     "DisableFormHistory": true | false
1531   }
1532 }
1533 ```
1534 ### DisableMasterPasswordCreation
1535 Remove the master password functionality.
1536
1537 If this value is true, it works the same as setting [`PrimaryPassword`](#primarypassword) to false and removes the primary password functionality.
1538
1539 If both `DisableMasterPasswordCreation` and `PrimaryPassword` are used, `DisableMasterPasswordCreation` takes precedent.
1540
1541 **Compatibility:** Firefox 60, Firefox ESR 60\
1542 **CCK2 Equivalent:** `noMasterPassword`\
1543 **Preferences Affected:** N/A
1544
1545 #### Windows (GPO)
1546 ```
1547 Software\Policies\Mozilla\Firefox\DisableMasterPasswordCreation = 0x1 | 0x0
1548 ```
1549 #### Windows (Intune)
1550 OMA-URI:
1551 ```
1552 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableMasterPasswordCreation
1553 ```
1554 Value (string):
1555 ```
1556 <enabled/> or <disabled/>
1557 ```
1558 #### macOS
1559 ```
1560 <dict>
1561   <key>DisableMasterPasswordCreation</key>
1562   <true/> | <false/>
1563 </dict>
1564 ```
1565 #### policies.json
1566 ```
1567 {
1568   "policies": {
1569     "DisableMasterPasswordCreation": true | false
1570   }
1571 }
1572 ```
1573 ### DisablePasswordReveal
1574 Do not allow passwords to be shown in saved logins
1575
1576 **Compatibility:** Firefox 71, Firefox ESR 68.3\
1577 **CCK2 Equivalent:** N/A
1578 **Preferences Affected:** N/A
1579
1580 #### Windows (GPO)
1581 ```
1582 Software\Policies\Mozilla\Firefox\DisablePasswordReveal = 0x1 | 0x0
1583 ```
1584 #### Windows (Intune)
1585 OMA-URI:
1586 ```
1587 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePasswordReveal
1588 ```
1589 Value (string):
1590 ```
1591 <enabled/> or <disabled/>
1592 ```
1593 #### macOS
1594 ```
1595 <dict>
1596   <key>DisablePasswordReveal</key>
1597   <true/> | <false/>
1598 </dict>
1599 ```
1600 #### policies.json
1601 ```
1602 {
1603   "policies": {
1604     "DisablePasswordReveal": true | false
1605   }
1606 }
1607 ```
1608 ### DisablePocket
1609 Remove Pocket in the Firefox UI. It does not remove it from the new tab page.
1610
1611 **Compatibility:** Firefox 60, Firefox ESR 60\
1612 **CCK2 Equivalent:** `disablePocket`\
1613 **Preferences Affected:** `extensions.pocket.enabled`
1614
1615 #### Windows (GPO)
1616 ```
1617 Software\Policies\Mozilla\Firefox\DisablePocket = 0x1 | 0x0
1618 ```
1619 #### Windows (Intune)
1620 OMA-URI:
1621 ```
1622 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePocket
1623 ```
1624 Value (string):
1625 ```
1626 <enabled/> or <disabled/>
1627 ```
1628 #### macOS
1629 ```
1630 <dict>
1631   <key>DisablePocket</key>
1632   <true/> | <false/>
1633 </dict>
1634 ```
1635 #### policies.json
1636 ```
1637 {
1638   "policies": {
1639     "DisablePocket": true | false
1640   }
1641 }
1642 ```
1643 ### DisablePrivateBrowsing
1644 Remove access to private browsing.
1645
1646 **Compatibility:** Firefox 60, Firefox ESR 60\
1647 **CCK2 Equivalent:** `disablePrivateBrowsing`\
1648 **Preferences Affected:** N/A
1649
1650 #### Windows (GPO)
1651 ```
1652 Software\Policies\Mozilla\Firefox\DisablePrivateBrowsing = 0x1 | 0x0
1653 ```
1654 #### Windows (Intune)
1655 OMA-URI:
1656 ```
1657 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePrivateBrowsing
1658 ```
1659 Value (string):
1660 ```
1661 <enabled/> or <disabled/>
1662 ```
1663 #### macOS
1664 ```
1665 <dict>
1666   <key>DisablePrivateBrowsing</key>
1667   <true/> | <false/>
1668 </dict>
1669 ```
1670 #### policies.json
1671 ```
1672 {
1673   "policies": {
1674     "DisablePrivateBrowsing": true | false
1675   }
1676 }
1677 ```
1678 ### DisableProfileImport
1679 Disables the "Import data from another browser" option in the bookmarks window.
1680
1681 **Compatibility:** Firefox 60, Firefox ESR 60\
1682 **CCK2 Equivalent:** N/A\
1683 **Preferences Affected:** N/A
1684
1685 #### Windows (GPO)
1686 ```
1687 Software\Policies\Mozilla\Firefox\DisableProfileImport = 0x1 | 0x0
1688 ```
1689 #### Windows (Intune)
1690 OMA-URI:
1691 ```
1692 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableProfileImport
1693 ```
1694 Value (string):
1695 ```
1696 <enabled/> or <disabled/>
1697 ```
1698 #### macOS
1699 ```
1700 <dict>
1701   <key>DisableProfileImport</key>
1702   <true/> | <false/>
1703 </dict>
1704 ```
1705 #### policies.json
1706 ```
1707 {
1708   "policies": {
1709     "DisableProfileImport": true | false
1710   }
1711 }
1712 ```
1713 ### DisableProfileRefresh
1714 Disable the Refresh Firefox button on about:support and support.mozilla.org, as well as the prompt that displays offering to refresh Firefox when you haven't used it in a while.
1715
1716 **Compatibility:** Firefox 60, Firefox ESR 60\
1717 **CCK2 Equivalent:** `disableResetFirefox`\
1718 **Preferences Affected:** `browser.disableResetPrompt`
1719
1720 #### Windows (GPO)
1721 ```
1722 Software\Policies\Mozilla\Firefox\DisableProfileRefresh = 0x1 | 0x0
1723 ```
1724 #### Windows (Intune)
1725 OMA-URI:
1726 ```
1727 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableProfileRefresh
1728 ```
1729 Value (string):
1730 ```
1731 <enabled/> or <disabled/>
1732 ```
1733 #### macOS
1734 ```
1735 <dict>
1736   <key>DisableProfileRefresh</key>
1737   <true/> | <false/>
1738 </dict>
1739 ```
1740 #### policies.json
1741 ```
1742 {
1743   "policies": {
1744     "DisableProfileRefresh": true | false
1745   }
1746 }
1747 ```
1748 ### DisableSafeMode
1749 Disable safe mode within the browser.
1750
1751 On Windows, this disables safe mode via the command line as well.
1752
1753 **Compatibility:** Firefox 60, Firefox ESR 60 (Windows, macOS)\
1754 **CCK2 Equivalent:** `disableSafeMode`\
1755 **Preferences Affected:** N/A
1756
1757 #### Windows (GPO)
1758 ```
1759 Software\Policies\Mozilla\Firefox\DisableSafeMode = 0x1 | 0x0
1760 ```
1761 #### Windows (Intune)
1762 OMA-URI:
1763 ```
1764 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSafeMode
1765 ```
1766 Value (string):
1767 ```
1768 <enabled/> or <disabled/>
1769 ```
1770 #### macOS
1771 ```
1772 <dict>
1773   <key>DisableSafeMode</key>
1774   <true/> | <false/>
1775 </dict>
1776 ```
1777 #### policies.json
1778 ```
1779 {
1780   "policies": {
1781     "DisableSafeMode": true | false
1782   }
1783 }
1784 ```
1785 ### DisableSecurityBypass
1786 Prevent the user from bypassing security in certain cases.
1787
1788 `InvalidCertificate` prevents adding an exception when an invalid certificate is shown.
1789
1790 `SafeBrowsing` prevents selecting "ignore the risk" and visiting a harmful site anyway.
1791
1792 **Compatibility:** Firefox 60, Firefox ESR 60\
1793 **CCK2 Equivalent:** N/A\
1794 **Preferences Affected:** `security.certerror.hideAddException`, `browser.safebrowsing.allowOverride`
1795
1796 #### Windows (GPO)
1797 ```
1798 Software\Policies\Mozilla\Firefox\DisableSecurityBypass\InvalidCertificate = 0x1 | 0x0
1799 Software\Policies\Mozilla\Firefox\DisableSecurityBypass\SafeBrowsing = 0x1 | 0x0
1800 ```
1801 #### Windows (Intune)
1802 OMA-URI:
1803 ```
1804 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/P_DisableSecurityBypass_InvalidCertificate
1805 ```
1806 Value (string):
1807 ```
1808 <enabled/> or <disabled/>
1809 ```
1810 OMA-URI:
1811 ```
1812 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/P_DisableSecurityBypass_SafeBrowsing
1813 ```
1814 Value (string):
1815 ```
1816 <enabled/> or <disabled/>
1817 ```
1818
1819 #### macOS
1820 ```
1821 <dict>
1822   <key>DisableSecurityBypass</key>
1823   <dict>
1824     <key>InvalidCertificate</key>
1825     <true/> | <false/>
1826     <key>SafeBrowsing</key>
1827     <true/> | <false/>
1828   </dict>
1829 </dict>
1830 ```
1831 #### policies.json
1832 ```
1833 {
1834   "policies": {
1835     "DisableSecurityBypass": {
1836       "InvalidCertificate": true | false,
1837       "SafeBrowsing": true | false
1838     }
1839   }
1840 }
1841 ```
1842 ### DisableSetDesktopBackground
1843 Remove the "Set As Desktop Background..." menuitem when right clicking on an image.
1844
1845 **Compatibility:** Firefox 60, Firefox ESR 60\
1846 **CCK2 Equivalent:** `removeSetDesktopBackground`\
1847 **Preferences Affected:** N/A
1848
1849 #### Windows (GPO)
1850 ```
1851 Software\Policies\Mozilla\Firefox\DisableSetDesktopBackground = 0x1 | 0x0
1852 ```
1853 #### Windows (Intune)
1854 OMA-URI:
1855 ```
1856 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSetDesktopBackground
1857 ```
1858 Value (string):
1859 ```
1860 <enabled/> or <disabled/>
1861 ```
1862 #### macOS
1863 ```
1864 <dict>
1865   <key>DisableSetDesktopBackground</key>
1866   <true/> | <false/>
1867 </dict>
1868 ```
1869 #### policies.json
1870 ```
1871 {
1872   "policies": {
1873     "DisableSetDesktopBackground": true | false
1874   }
1875 }
1876 ```
1877 ### DisableSystemAddonUpdate
1878 Prevent system add-ons from being installed or update.
1879
1880 **Compatibility:** Firefox 60, Firefox ESR 60\
1881 **CCK2 Equivalent:** N/A\
1882 **Preferences Affected:** N/A
1883
1884 #### Windows (GPO)
1885 ```
1886 Software\Policies\Mozilla\Firefox\DisableSystemAddonUpdate = 0x1 | 0x0
1887 ```
1888 #### Windows (Intune)
1889 OMA-URI:
1890 ```
1891 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSystemAddonUpdate
1892 ```
1893 Value (string):
1894 ```
1895 <enabled/> or <disabled/>
1896 ```
1897 #### macOS
1898 ```
1899 <dict>
1900   <key>DisableSystemAddonUpdate</key>
1901   <true/> | <false/>
1902 </dict>
1903 ```
1904 #### policies.json
1905 ```
1906 {
1907   "policies": {
1908     "DisableSystemAddonUpdate": true | false
1909   }
1910 }
1911 ```
1912 ### DisableTelemetry
1913 Prevent the upload of telemetry data.
1914
1915 As of Firefox 83 and Firefox ESR 78.5, local storage of telemetry data is disabled as well.
1916
1917 Mozilla recommends that you do not disable telemetry. Information collected through telemetry helps us build a better product for businesses like yours.
1918
1919 **Compatibility:** Firefox 60, Firefox ESR 60\
1920 **CCK2 Equivalent:** `disableTelemetry`\
1921 **Preferences Affected:** `datareporting.healthreport.uploadEnabled`, `datareporting.policy.dataSubmissionEnabled`, `toolkit.telemetry.archive.enabled`
1922
1923 #### Windows (GPO)
1924 ```
1925 Software\Policies\Mozilla\Firefox\DisableTelemetry = 0x1 | 0x0
1926 ```
1927 #### Windows (Intune)
1928 OMA-URI:
1929 ```
1930 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableTelemetry
1931 ```
1932 Value (string):
1933 ```
1934 <enabled/> or <disabled/>
1935 ```
1936 #### macOS
1937 ```
1938 <dict>
1939   <key>DisableTelemetry</key>
1940   <true/> | <false/>
1941 </dict>
1942 ```
1943 #### policies.json
1944 ```
1945 {
1946   "policies": {
1947     "DisableTelemetry": true | false
1948   }
1949 }
1950 ```
1951 ### DisplayBookmarksToolbar
1952 Set the initial state of the bookmarks toolbar. A user can still hide it and it will stay hidden.
1953
1954 **Compatibility:** Firefox 60, Firefox ESR 60\
1955 **CCK2 Equivalent:** `displayBookmarksToolbar`\
1956 **Preferences Affected:** N/A
1957
1958 #### Windows (GPO)
1959 ```
1960 Software\Policies\Mozilla\Firefox\DisplayBookmarksToolbar = 0x1 | 0x0
1961 ```
1962 #### Windows (Intune)
1963 OMA-URI:
1964 ```
1965 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisplayBookmarksToolbar
1966 ```
1967 Value (string):
1968 ```
1969 <enabled/> or <disabled/>
1970 ```
1971 #### macOS
1972 ```
1973 <dict>
1974   <key>DisplayBookmarksToolbar</key>
1975   <true/> | <false/>
1976 </dict>
1977 ```
1978 #### policies.json
1979 ```
1980 {
1981   "policies": {
1982     "DisplayBookmarksToolbar": true | false
1983   }
1984 }
1985 ```
1986 ### DisplayMenuBar
1987 Set the state of the menubar.
1988
1989 `always` means the menubar is shown and cannot be hidden.
1990
1991 `never` means the menubar is hidden and cannot be shown.
1992
1993 `default-on` means the menubar is on by default but can be hidden.
1994
1995 `default-off` means the menubar is off by default but can be shown.
1996
1997 **Compatibility:** Firefox 73, Firefox ESR 68.5 (Windows, some Linux)\
1998 **CCK2 Equivalent:** `displayMenuBar`\
1999 **Preferences Affected:** N/A
2000
2001 #### Windows (GPO)
2002 ```
2003 Software\Policies\Mozilla\Firefox\DisplayMenuBar = "always", "never", "default-on", "default-off"
2004 ```
2005 #### Windows (Intune)
2006 OMA-URI:
2007 ```
2008 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisplayMenuBar_Enum
2009 ```
2010 Value (string):
2011 ```
2012 <enabled/>
2013 <data id="DisplayMenuBar" value="always | never | default-on | default-off"/>
2014 ```
2015 #### macOS
2016 ```
2017 <dict>
2018   <key>DisplayMenuBar</key>
2019   <string>always | never | default-on | default-off</string>
2020 </dict>
2021 ```
2022 #### policies.json
2023 ```
2024 {
2025   "policies": {
2026     "DisplayMenuBar": "always", "never", "default-on", "default-off"
2027   }
2028 }
2029 ```
2030 ### DisplayMenuBar (Deprecated)
2031 Set the initial state of the menubar. A user can still hide it and it will stay hidden.
2032
2033 **Compatibility:** Firefox 60, Firefox ESR 60 (Windows, some Linux)\
2034 **CCK2 Equivalent:** `displayMenuBar`\
2035 **Preferences Affected:** N/A
2036
2037 #### Windows (GPO)
2038 ```
2039 Software\Policies\Mozilla\Firefox\DisplayMenuBar = 0x1 | 0x0
2040 ```
2041 #### macOS
2042 ```
2043 <dict>
2044   <key>DisplayMenuBar</key>
2045   <true/> | <false/>
2046 </dict>
2047 ```
2048 #### policies.json
2049 ```
2050 {
2051   "policies": {
2052     "DisplayMenuBar": true | false
2053   }
2054 }
2055 ```
2056 ### DNSOverHTTPS
2057 Configure DNS over HTTPS.
2058
2059 `Enabled` determines whether DNS over HTTPS is enabled
2060
2061 `ProviderURL` is a URL to another provider.
2062
2063 `Locked` prevents the user from changing DNS over HTTPS preferences.
2064
2065 `ExcludedDomains` excludes domains from DNS over HTTPS.
2066
2067 **Compatibility:** Firefox 63, Firefox ESR 68 (ExcludedDomains added in 75/68.7)\
2068 **CCK2 Equivalent:** N/A\
2069 **Preferences Affected:** `network.trr.mode`, `network.trr.uri`
2070
2071 #### Windows (GPO)
2072 ```
2073 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\Enabled = 0x1 | 0x0
2074 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\ProviderURL = "URL_TO_ALTERNATE_PROVIDER"
2075 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\Locked = 0x1 | 0x0
2076 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\ExcludedDomains\1 = "example.com"
2077 ```
2078 #### Windows (Intune)
2079 OMA-URI:
2080 ```
2081 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_Enabled
2082 ```
2083 Value (string):
2084 ```
2085 <enabled/> or <disabled/>
2086 ```
2087 OMA-URI:
2088 ```
2089 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_ProviderURL
2090 ```
2091 Value (string):
2092 ```
2093 <enabled/>
2094 <data id="String" value="URL_TO_ALTERNATE_PROVIDER"/>
2095 ```
2096 OMA-URI:
2097 ```
2098 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_Locked
2099 ```
2100 Value (string):
2101 ```
2102 <enabled/> or <disabled/>
2103 ```
2104 OMA-URI:
2105 ```
2106 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_ExcludedDomains
2107 ```
2108 Value (string):
2109 ```
2110 <enabled/>
2111 <data id="List" value="1&#xF000;example.com"/>
2112 ```
2113 #### macOS
2114 ```
2115 <dict>
2116   <key>DNSOverHTTPS</key>
2117   <dict>
2118     <key>Enabled</key>
2119     <true/> | <false/>
2120     <key>ProviderURL</key>
2121     <string>URL_TO_ALTERNATE_PROVIDER</string>
2122     <key>Locked</key>
2123     <true/> | <false/>
2124     <key>ExcludedDomains</key>
2125     <array>
2126       <string>example.com</string>
2127     </array>
2128   </dict>
2129 </dict>
2130 ```
2131 #### policies.json
2132 ```
2133 {
2134   "policies": {
2135     "DNSOverHTTPS": {
2136       "Enabled":  true | false,
2137       "ProviderURL": "URL_TO_ALTERNATE_PROVIDER",
2138       "Locked": true | false,
2139       "ExcludedDomains": ["example.com"]
2140     }
2141   }
2142 }
2143 ```
2144 ### DontCheckDefaultBrowser
2145 Don't check if Firefox is the default browser at startup.
2146
2147 **Compatibility:** Firefox 60, Firefox ESR 60\
2148 **CCK2 Equivalent:** `dontCheckDefaultBrowser`\
2149 **Preferences Affected:** `browser.shell.checkDefaultBrowser`
2150
2151 #### Windows (GPO)
2152 ```
2153 Software\Policies\Mozilla\Firefox\DontCheckDefaultBrowser = 0x1 | 0x0
2154 ```
2155 #### Windows (Intune)
2156 OMA-URI:
2157 ```
2158 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DontCheckDefaultBrowser
2159 ```
2160 Value (string):
2161 ```
2162 <enabled/> or <disabled/>
2163 ```
2164 #### macOS
2165 ```
2166 <dict>
2167   <key>DontCheckDefaultBrowser</key>
2168   <true/> | <false/>
2169 </dict>
2170 ```
2171 #### policies.json
2172 ```
2173 {
2174   "policies": {
2175     "DontCheckDefaultBrowser": true | false
2176   }
2177 }
2178 ```
2179 ### DownloadDirectory
2180 Set and lock the download directory.
2181
2182 You can use ${home} for the native home directory.
2183
2184 **Compatibility:** Firefox 68, Firefox ESR 68\
2185 **CCK2 Equivalent:** N/A\
2186 **Preferences Affected:** `browser.download.dir`, `browser.download.folderList`, `browser.download.useDownloadDir`
2187
2188 #### Windows (GPO)
2189 ```
2190 Software\Policies\Mozilla\Firefox\DownloadDirectory = "${home}\Downloads"
2191 ```
2192 #### Windows (Intune)
2193 OMA-URI:
2194 ```
2195 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DownloadDirectory
2196 ```
2197 Value (string):
2198 ```
2199 <enabled/>
2200 <data id="Preferences_String" value="${home}\Downloads"/>
2201 ```
2202 #### macOS
2203 ```
2204 <dict>
2205   <key>DownloadDirectory</key>
2206   <string>${home}/Downloads</string>
2207 </dict>
2208 ```
2209 #### policies.json (macOS and Linux)
2210 ```
2211 {
2212   "policies": {
2213     "DownloadDirectory": "${home}/Downloads"
2214 }
2215 ```
2216 #### policies.json (Windows)
2217 ```
2218 {
2219   "policies": {
2220     "DownloadDirectory": "${home}\\Downloads"
2221 }
2222 ```
2223 ### EnableTrackingProtection
2224 Configure tracking protection.
2225
2226 If this policy is not configured, tracking protection is not enabled by default in the browser, but it is enabled by default in private browsing and the user can change it.
2227
2228 If `Value` is set to false, tracking protection is disabled and locked in both the regular browser and private browsing.
2229
2230 If `Value` is set to true, tracking protection is enabled by default in both the regular browser and private browsing and the `Locked` value determines whether or not a user can change it.
2231
2232 If `Cryptomining` is set to true, cryptomining scripts on websites are blocked.
2233
2234 If `Fingerprinting` is set to true, fingerprinting scripts on websites are blocked.
2235
2236 `Exceptions` are origins for which tracking protection is not enabled.
2237
2238 **Compatibility:** Firefox 60, Firefox ESR 60 (Cryptomining and Fingerprinting added in 70/68.2, Exceptions added in 73/68.5)\
2239 **CCK2 Equivalent:** N/A\
2240 **Preferences Affected:** `privacy.trackingprotection.enabled`, `privacy.trackingprotection.pbmode.enabled`, `privacy.trackingprotection.cryptomining.enabled`, `privacy.trackingprotection.fingerprinting.enabled`
2241
2242 #### Windows (GPO)
2243 ```
2244 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Value = 0x1 | 0x0
2245 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Locked = 0x1 | 0x0
2246 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Cryptomining = 0x1 | 0x0
2247 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Fingerprinting = 0x1 | 0x0
2248 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Exceptions\1 = "https://example.com"
2249 ```
2250 #### Windows (Intune)
2251 OMA-URI:
2252 ```
2253 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/A_TrackingProtection_Value
2254 ```
2255 Value (string):
2256 ```
2257 <enabled/> or <disabled/>
2258 ```
2259 OMA-URI:
2260 ```
2261 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/B_TrackingProtection_Cryptomining
2262 ```
2263 Value (string):
2264 ```
2265 <enabled/> or <disabled/>
2266 ```
2267 OMA-URI:
2268 ```
2269 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/C_TrackingProtection_Fingerprinting
2270 ```
2271 Value (string):
2272 ```
2273 <enabled/> or <disabled/>
2274 ```
2275 OMA-URI:
2276 ```
2277 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/D_TrackingProtection_Exceptions
2278 ```
2279 Value (string):
2280 ```
2281 <data id="TrackingProtection_Exceptions" value="1&#xF000;https://example.com"/>
2282 ```
2283 OMA-URI:
2284 ```
2285 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/E_TrackingProtection_Locked
2286 ```
2287 Value (string):
2288 ```
2289 <enabled/> or <disabled/>
2290 ```
2291 #### macOS
2292 ```
2293 <dict>
2294   <key>EnableTrackingProtection</key>
2295   <dict>
2296     <key>Value</key>
2297     <true/> | <false/>
2298     <key>Locked</key>
2299     <true/> | <false/>
2300     <key>Cryptomining</key>
2301     <true/> | <false/>
2302     <key>Fingerprinting</key>
2303     <true/> | <false/>
2304     <key>Exceptions</key>
2305     <array>
2306       <string>https://example.com</string>
2307     </array>
2308   </dict>
2309 </dict>
2310 ```
2311 #### policies.json
2312 ```
2313 {
2314   "policies": {
2315     "EnableTrackingProtection": {
2316       "Value": true | false,
2317       "Locked": true | false,
2318       "Cryptomining": true | false,
2319       "Fingerprinting": true | false,
2320       "Exceptions": ["https://example.com"]
2321     }
2322   }
2323 }
2324 ```
2325 ### EncryptedMediaExtensions
2326 Enable or disable Encrypted Media Extensions and optionally lock it.
2327
2328 If `Enabled` is set to false, encrypted media extensions (like Widevine) are not downloaded by Firefox unless the user consents to installing them.
2329
2330 If `Locked` is set to true and `Enabled` is set to false, Firefox will not download encrypted media extensions (like Widevine) or ask the user to install them.
2331
2332 **Compatibility:** Firefox 77, Firefox ESR 68.9\
2333 **CCK2 Equivalent:** N/A\
2334 **Preferences Affected:** `media.eme.enabled`
2335
2336 #### Windows (GPO)
2337 ```
2338 Software\Policies\Mozilla\Firefox\EncryptedMediaExtensions\Enabled = 0x1 | 0x0
2339 Software\Policies\Mozilla\Firefox\EncryptedMediaExtensions\Locked = 0x1 | 0x0
2340 ```
2341 #### Windows (Intune)
2342 OMA-URI:
2343 ```
2344 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~EncryptedMediaExtensions/EncryptedMediaExtensions_Enabled
2345 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~EncryptedMediaExtensions/EncryptedMediaExtensions_Locked
2346 ```
2347 Value (string):
2348 ```
2349 <enabled/>or <disabled/>
2350 ```
2351 #### macOS
2352 ```
2353 <dict>
2354   <key>EncryptedMediaExtensions</key>
2355   <dict>
2356     <key>Enabled</key>
2357     <true/> | <false/>
2358     <key>Locked</key>
2359     <true/> | <false/>
2360   </dict>
2361 </dict>
2362 ```
2363 #### policies.json
2364 ```
2365 {
2366   "policies": {
2367     "EncryptedMediaExtensions": {
2368       "Enabled": true | false,
2369       "Locked": true | false
2370     }
2371   }
2372 }
2373 ```
2374 ### EnterprisePoliciesEnabled
2375 Enable policy support on macOS.
2376
2377 **Compatibility:** Firefox 63, Firefox ESR 60.3 (macOS only)\
2378 **CCK2 Equivalent:** N/A\
2379 **Preferences Affected:** N/A
2380
2381 #### macOS
2382 ```
2383 <dict>
2384   <key>EnterprisePoliciesEnabled</key>
2385   <true/>
2386 </dict>
2387 ```
2388 ### Extensions
2389 Control the installation, uninstallation and locking of extensions.
2390
2391 While this policy is not technically deprecated, it is recommended that you use the **[`ExtensionSettings`](#extensionsettings)** policy. It has the same functionality and adds more. It does not support native paths, though, so you'll have to use file:/// URLs.
2392
2393 `Install` is a list of URLs or native paths for extensions to be installed.
2394
2395 `Uninstall` is a list of extension IDs that should be uninstalled if found.
2396
2397 `Locked` is a list of extension IDs that the user cannot disable or uninstall.
2398
2399 **Compatibility:** Firefox 60, Firefox ESR 60\
2400 **CCK2 Equivalent:** `addons`\
2401 **Preferences Affected:** N/A
2402
2403 #### Windows (GPO)
2404 ```
2405 Software\Policies\Mozilla\Firefox\Extensions\Install\1 = "https://addons.mozilla.org/firefox/downloads/somefile.xpi"
2406 Software\Policies\Mozilla\Firefox\Extensions\Install\2 = "//path/to/xpi"
2407 Software\Policies\Mozilla\Firefox\Extensions\Uninstall\1 = "bad_addon_id@mozilla.org"
2408 Software\Policies\Mozilla\Firefox\Extensions\Locked\1 = "addon_id@mozilla.org"
2409 ```
2410 #### Windows (Intune)
2411 OMA-URI:
2412 ```
2413 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/Extensions_Install
2414 ```
2415 Value (string):
2416 ```
2417 <enabled/>
2418 <data id="Extensions" value="1&#xF000;https://addons.mozilla.org/firefox/downloads/somefile.xpi&#xF000;2&#xF000;//path/to/xpi"/>
2419 ```
2420 OMA-URI:
2421 ```
2422 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/Extensions_Uninstall
2423 ```
2424 Value (string):
2425 ```
2426 <enabled/>
2427 <data id="Extensions" value="1&#xF000;bad_addon_id@mozilla.org"/>
2428 ```
2429 OMA-URI:
2430 ```
2431 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/Extensions_Locked
2432 ```
2433 Value (string):
2434 ```
2435 <enabled/>
2436 <data id="Extensions" value="1&#xF000;addon_id@mozilla.org"/>
2437 ```
2438 #### macOS
2439 ```
2440 <dict>
2441   <key>Extensions</key>
2442   <dict>
2443     <key>Install</key>
2444     <array>
2445       <string>https://addons.mozilla.org/firefox/downloads/somefile.xpi</string>
2446       <string>//path/to/xpi</string>
2447     </array>
2448     <key>Uninstall</key>
2449     <array>
2450       <string>bad_addon_id@mozilla.org</string>
2451     </array>
2452     <key>Locked</key>
2453     <array>
2454       <string>addon_id@mozilla.org</string>
2455     </array>
2456   </dict>
2457 </dict>
2458 ```
2459 #### policies.json
2460 ```
2461 {
2462   "policies": {
2463     "Extensions": {
2464       "Install": ["https://addons.mozilla.org/firefox/downloads/somefile.xpi", "//path/to/xpi"],
2465       "Uninstall": ["bad_addon_id@mozilla.org"],
2466       "Locked":  ["addon_id@mozilla.org"]
2467     }
2468   }
2469 }
2470 ```
2471 ### ExtensionSettings
2472 Manage all aspects of extensions. This policy is based heavily on the [Chrome policy](https://dev.chromium.org/administrators/policy-list-3/extension-settings-full) of the same name.
2473
2474 This policy maps an extension ID to its configuration. With an extension ID, the configuration will be applied to the specified extension only. A default configuration can be set for the special ID "*", which will apply to all extensions that don't have a custom configuration set in this policy.
2475
2476 To obtain an extension ID, install the extension and go to about:support. You will see the ID in the Extensions section. I've also created an extension that makes it easy to find the ID of extensions on AMO. You can download it [here](https://github.com/mkaply/queryamoid/releases/tag/v0.1).
2477
2478 The configuration for each extension is another dictionary that can contain the fields documented below.
2479
2480 | Name | Description |
2481 | --- | --- |
2482 | `installation_mode` | Maps to a string indicating the installation mode for the extension. The valid strings are `allowed`,`blocked`,`force_installed`, and `normal_installed`.
2483 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`allowed` | Allows the extension to be installed by the user. This is the default behavior. There is no need for an install_url; it will automatically be allowed based on the ID.
2484 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`blocked`| Blocks installation of the extension and removes it from the device if already installed.
2485 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`force_installed`| The extension is automatically installed and can't be removed by the user. This option is not valid for the default configuration and requires an install_url.
2486 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`normal_installed`| The extension is automatically installed but can be disabled by the user. This option is not valid for the default configuration and requires an install_url.
2487 | `install_url`| Maps to a URL indicating where Firefox can download a force_installed or normal_installed extension.  If installing from the local file system, use a [```file:///``` URL](https://en.wikipedia.org/wiki/File_URI_scheme). If installing from the addons.mozilla.org, use the following URL (substituting SHORT_NAME from the URL on AMO), https://addons.mozilla.org/firefox/downloads/latest/SHORT_NAME/latest.xpi. Languages packs are available from https://releases.mozilla.org/pub/firefox/releases/VERSION/PLATFORM/xpi/LANGUAGE.xpi. If you need to update the extension, you can change the name of the extension and it will be automatically updated. Extensions installed from file URLs will additional be updated when their internal version changes.
2488 | `install_sources` | A list of sources from which installing extensions is allowed. **This is unnecessary if you are only allowing the installation of certain extensions by ID.** Each item in this list is an extension-style match pattern. Users will be able to easily install items from any URL that matches an item in this list. Both the location of the *.xpi file and the page where the download is started from (i.e.  the referrer) must be allowed by these patterns. This setting can be used only for the default configuration.
2489 | `allowed_types` | This setting whitelists the allowed types of extension/apps that can be installed in Firefox. The value is a list of strings, each of which should be one of the following: "extension", "theme", "dictionary", "locale" This setting can be used only for the default configuration.
2490 | `blocked_install_message` | This maps to a string specifying the error message to display to users if they're blocked from installing an extension. This setting allows you to append text to the generic error message displayed when the extension is blocked. This could be be used to direct users to your help desk, explain why a particular extension is blocked, or something else. This setting can be used only for the default configuration.
2491 | `restricted_domains` | An array of domains on which content scripts can't be run. This setting can be used only for the default configuration.
2492 | `updates_disabled` | (Firefox 89, Firefox ESR 78.11) Boolean that indicates whether or not to disable automatic updates for an individual extension.
2493
2494 **Compatibility:** Firefox 69, Firefox ESR 68.1 (As of Firefox 85, Firefox ESR 78.7, installing a theme makes it the default.)\
2495 **CCK2 Equivalent:** N/A\
2496 **Preferences Affected:** N/A
2497
2498 #### Windows (GPO)
2499 Software\Policies\Mozilla\Firefox\ExtensionSettings (REG_MULTI_SZ) =
2500 ```
2501 {
2502   "*": {
2503     "blocked_install_message": "Custom error message.",
2504     "install_sources": ["about:addons","https://addons.mozilla.org/"],
2505     "installation_mode": "blocked",
2506     "allowed_types": ["extension"]
2507   },
2508   "uBlock0@raymondhill.net": {
2509     "installation_mode": "force_installed",
2510     "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
2511   },
2512   "https-everywhere@eff.org": {
2513     "installation_mode": "allowed"
2514   }
2515 }
2516 ```
2517 #### Windows (Intune)
2518 OMA-URI:
2519 ```
2520 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/ExtensionSettings
2521 ```
2522 Value (string):
2523 ```
2524 <enabled/>
2525 <data id="ExtensionSettings" value='
2526 {
2527   "*": {
2528     "blocked_install_message": "Custom error message.",
2529     "install_sources": ["about:addons","https://addons.mozilla.org/"],
2530     "installation_mode": "blocked",
2531     "allowed_types": ["extension"]
2532   },
2533   "uBlock0@raymondhill.net": {
2534     "installation_mode": "force_installed",
2535     "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
2536   },
2537     "https-everywhere@eff.org": {
2538     "installation_mode": "allowed"
2539   }
2540 }'/>
2541 ```
2542 #### macOS
2543 ```
2544 <dict>
2545   <key>ExtensionSettings</key>
2546   <dict>
2547     <key>*</key>
2548     <dict>
2549       <key>blocked_install_message</key>
2550       <string>Custom error message.</string>
2551       <key>install_sources</key>
2552       <array>
2553         <string>about:addons</string>
2554         <string>https://addons.mozilla.org/</string>
2555       </array>
2556       <key>installation_mode</key>
2557       <string>blocked</string>
2558       <key>allowed_types</key>
2559       <array>
2560         <string>extension</string>
2561       </array>
2562     </dict>
2563     <key>uBlock0@raymondhill.net</key>
2564     <dict>
2565       <key>installation_mode</key>
2566        <string>force_installed</string>
2567       <key>install_url</key>
2568       <string>https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi</string>
2569     </dict>
2570     <key>https-everywhere@eff.org</key>
2571     <dict>
2572       <key>installation_mode</key>
2573        <string>allowed</string>
2574     </dict>
2575   </dict>
2576 </dict>
2577 ```
2578 #### policies.json
2579 ```
2580 {
2581   "policies": {
2582     "ExtensionSettings": {
2583       "*": {
2584         "blocked_install_message": "Custom error message.",
2585         "install_sources": ["about:addons","https://addons.mozilla.org/"],
2586         "installation_mode": "blocked",
2587         "allowed_types": ["extension"]
2588       },
2589       "uBlock0@raymondhill.net": {
2590         "installation_mode": "force_installed",
2591         "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
2592       },
2593       "https-everywhere@eff.org": {
2594         "installation_mode": "allowed"
2595       }
2596     }
2597   }
2598 }
2599 ```
2600 ### ExtensionUpdate
2601 Control extension updates.
2602
2603 **Compatibility:** Firefox 67, Firefox ESR 60.7\
2604 **CCK2 Equivalent:** N/A\
2605 **Preferences Affected:** `extensions.update.enabled`
2606
2607 #### Windows (GPO)
2608 ```
2609 Software\Policies\Mozilla\Firefox\ExtensionUpdate = 0x1 | 0x0
2610 ```
2611 #### Windows (Intune)
2612 OMA-URI:
2613 ```
2614 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/ExtensionUpdate
2615 ```
2616 Value (string):
2617 ```
2618 <enabled/> or <disabled/>
2619 ```
2620 #### macOS
2621 ```
2622 <dict>
2623   <key>ExtensionUpdate</key>
2624   <true/> | <false/>
2625 </dict>
2626 ```
2627 #### policies.json
2628 ```
2629 {
2630   "policies": {
2631     "ExtensionUpdate": true | false
2632   }
2633 }
2634 ```
2635 ### FirefoxHome
2636 Customize the Firefox Home page.
2637
2638 **Compatibility:** Firefox 68, Firefox ESR 68 (SponsoredTopSites and SponsoredPocket were added in Firefox 95, Firefox ESR 91.4)
2639 **CCK2 Equivalent:** N/A\
2640 **Preferences Affected:** `browser.newtabpage.activity-stream.showSearch`, `browser.newtabpage.activity-stream.feeds.topsites`, `browser.newtabpage.activity-stream.feeds.section.highlights`, `browser.newtabpage.activity-stream.feeds.section.topstories`, `browser.newtabpage.activity-stream.feeds.snippets`, `browser.newtabpage.activity-stream.showSponsoredTopSites`, `browser.newtabpage.activity-stream.showSponsored`
2641
2642 #### Windows (GPO)
2643 ```
2644 Software\Policies\Mozilla\Firefox\FirefoxHome\Search = 0x1 | 0x0
2645 Software\Policies\Mozilla\Firefox\FirefoxHome\TopSites = 0x1 | 0x0
2646 Software\Policies\Mozilla\Firefox\FirefoxHome\SponsoredTopSites = 0x1 | 0x0
2647 Software\Policies\Mozilla\Firefox\FirefoxHome\Highlights = 0x1 | 0x0
2648 Software\Policies\Mozilla\Firefox\FirefoxHome\Pocket = 0x1 | 0x0
2649 Software\Policies\Mozilla\Firefox\FirefoxHome\SponsoredPocket = 0x1 | 0x0
2650 Software\Policies\Mozilla\Firefox\FirefoxHome\Snippets = 0x1 | 0x0
2651 Software\Policies\Mozilla\Firefox\FirefoxHome\Locked = 0x1 | 0x0
2652 ```
2653 #### Windows (Intune)
2654 OMA-URI:
2655 ```
2656 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/CustomizeFirefoxHome
2657 ```
2658 Value (string):
2659 ```
2660 <enabled/>
2661 <data id="FirefoxHome_Search"  value="true | false"/>
2662 <data id="FirefoxHome_TopSites"  value="true | false"/>
2663 <data id="FirefoxHome_SponsoredTopSites"  value="true | false"/>
2664 <data id="FirefoxHome_Highlights"  value="true | false"/>
2665 <data id="FirefoxHome_Pocket"  value="true | false"/>
2666 <data id="FirefoxHome_SponsoredPocket"  value="true | false"/>
2667 <data id="FirefoxHome_Snippets"  value="true | false"/>
2668 <data id="FirefoxHome_Locked"  value="true | false"/>
2669 ```
2670 #### macOS
2671 ```
2672 <dict>
2673   <key>FirefoxHome</key>
2674   <dict>
2675     <key>Search</key>
2676     <true/> | <false/>
2677     <key>TopSites</key>
2678     <true/> | <false/>
2679     <key>SponsoredTopSites</key>
2680     <true/> | <false/>
2681     <key>Highlights</key>
2682     <true/> | <false/>
2683     <key>Pocket</key>
2684     <true/> | <false/>
2685     <key>SponsoredPocket</key>
2686     <true/> | <false/>
2687     <key>Snippets</key>
2688     <true/> | <false/>
2689     <key>Locked</key>
2690     <true/> | <false/>
2691   </dict>
2692 </dict>
2693 ```
2694 #### policies.json
2695 ```
2696 {
2697   "policies": {
2698     "FirefoxHome": {
2699       "Search": true | false,
2700       "TopSites": true | false,
2701       "SponsoredTopSites": true | false,
2702       "Highlights": true | false,
2703       "Pocket": true | false,
2704       "SponsoredPocket": true | false,
2705       "Snippets": true | false,
2706       "Locked": true | false
2707     }
2708   }
2709 }
2710 ```
2711 ### FlashPlugin (Deprecated)
2712 Configure the default Flash plugin policy as well as origins for which Flash is allowed.
2713
2714 `Allow` is a list of origins where Flash are allowed.
2715
2716 `Block` is a list of origins where Flash is not allowed.
2717
2718 `Default` determines whether or not Flash is allowed by default.
2719
2720 `Locked` prevents the user from changing Flash preferences.
2721
2722 **Compatibility:** Firefox 60, Firefox ESR 60\
2723 **CCK2 Equivalent:** `permissions.plugin`\
2724 **Preferences Affected:** `plugin.state.flash`
2725
2726 #### Windows (GPO)
2727 ```
2728 Software\Policies\Mozilla\Firefox\FlashPlugin\Allow\1 = "https://example.org"
2729 Software\Policies\Mozilla\Firefox\FlashPlugin\Block\1 = "https://example.edu"
2730 Software\Policies\Mozilla\Firefox\FlashPlugin\Default = 0x1 | 0x0
2731 Software\Policies\Mozilla\Firefox\FlashPlugin\Locked = 0x1 | 0x0
2732 ```
2733 #### Windows (Intune)
2734 OMA-URI:
2735 ```
2736 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Flash/FlashPlugin_Allow
2737 ```
2738 Value (string):
2739 ```
2740 <enabled/>
2741 <data id="Permissions" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
2742 ```
2743 OMA-URI:
2744 ```
2745 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Flash/FlashPlugin_Locked
2746 ```
2747 Value (string):
2748 ```
2749 <enabled/> or <disabled/>
2750 ```
2751 OMA-URI:
2752 ```
2753 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Flash/FlashPlugin_Default
2754 ```
2755 Value (string):
2756 ```
2757 <enabled/> or <disabled/>
2758 ```
2759 #### macOS
2760 ```
2761 <dict>
2762   <key>FlashPlugin</key>
2763   <dict>
2764     <key>Allow</key>
2765     <array>
2766       <string>http://example.org</string>
2767     </array>
2768     <key>Block</key>
2769     <array>
2770       <string>http://example.edu</string>
2771     </array>
2772     <key>Default</key>
2773     <true/> | <false/>
2774     <key>Locked</key>
2775     <true/> | <false/>
2776   </dict>
2777 </dict>
2778 ```
2779 #### policies.json
2780 ```
2781 {
2782   "policies": {
2783     "FlashPlugin": {
2784       "Allow": ["http://example.org/"],
2785       "Block": ["http://example.edu/"],
2786       "Default": true | false,
2787       "Locked": true | false
2788     }
2789   }
2790 }
2791 ```
2792 ### Handlers
2793 Configure default application handlers. This policy is based on the internal format of `handlers.json`.
2794
2795 You can configure handlers based on a mime type (`mimeTypes`), a file's extension (`extensions`), or a protocol (`schemes`).
2796
2797 Within each handler type, you specify the given mimeType/extension/scheme as a key and use the following subkeys to describe how it is handled.
2798
2799 | Name | Description |
2800 | --- | --- |
2801 | `action`| Can be either `saveToDisk`, `useHelperApp`, `useSystemDefault`.
2802 | `ask` | If `true`, the user is asked if what they want to do with the file. If `false`, the action is taken without user intervention.
2803 | `handlers` | An array of handlers with the first one being the default. If you don't want to have a default handler, use an empty object for the first handler. Choose between path or uriTemplate.
2804 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`name` | The display name of the handler (might not be used).
2805 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`path`| The native path to the executable to be used.
2806 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`uriTemplate`| A url to a web based application handler. The URL must be https and contain a %s to be used for substitution.
2807
2808 **Compatibility:** Firefox 78, Firefox ESR 78\
2809 **CCK2 Equivalent:** N/A\
2810 **Preferences Affected:** N/A
2811
2812 #### Windows (GPO)
2813 Software\Policies\Mozilla\Firefox\Handlers (REG_MULTI_SZ) =
2814 ```
2815 {
2816   "mimeTypes": {
2817     "application/msword": {
2818       "action": "useSystemDefault",
2819       "ask": true | false
2820     }
2821   },
2822   "schemes": {
2823     "mailto": {
2824       "action": "useHelperApp",
2825       "ask": true | false,
2826       "handlers": [{
2827         "name": "Gmail",
2828         "uriTemplate": "https://mail.google.com/mail/?extsrc=mailto&url=%s"
2829       }]
2830     }
2831   },
2832   "extensions": {
2833     "pdf": {
2834       "action": "useHelperApp",
2835       "ask": true | false,
2836       "handlers": [{
2837         "name": "Adobe Acrobat",
2838         "path": "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32.exe"
2839       }]
2840     }
2841   }
2842 }
2843 ```
2844 #### Windows (Intune)
2845 OMA-URI:
2846 ```
2847 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Handlers
2848 ```
2849 Value (string):
2850 ```
2851 <enabled/>
2852 <data id="Handlers" value='
2853 {
2854   "mimeTypes": {
2855     "application/msword": {
2856       "action": "useSystemDefault",
2857       "ask": true | false
2858     }
2859   },
2860   "schemes": {
2861     "mailto": {
2862       "action": "useHelperApp",
2863       "ask": true | false,
2864       "handlers": [{
2865         "name": "Gmail",
2866         "uriTemplate": "https://mail.google.com/mail/?extsrc=mailto&amp;url=%s"
2867       }]
2868     }
2869   },
2870   "extensions": {
2871     "pdf": {
2872       "action": "useHelperApp",
2873       "ask": true | false,
2874       "handlers": [{
2875         "name": "Adobe Acrobat",
2876         "path": "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32.exe"
2877       }]
2878     }
2879   }
2880 }
2881 '/>
2882 ```
2883 #### macOS
2884 ```
2885 <dict>
2886   <key>Handlers</key>
2887   <dict>
2888     <key>mimeTypes</key>
2889     <dict>
2890       <key>application/msword</key>
2891       <dict>
2892         <key>action</key>
2893         <string>useSystemDefault</string>
2894         <key>ask</key>
2895         <true/> | <false/>
2896       </dict>
2897     </dict>
2898     <key>schemes</key>
2899     <dict>
2900       <key>mailto</key>
2901       <dict>
2902         <key>action</key>
2903         <string>useHelperApp</string>
2904         <key>ask</key>
2905         <true/> | <false/>
2906         <key>handlers</key>
2907         <array>
2908           <dict>
2909             <key>name</key>
2910             <string>Gmail</string>
2911             <key>uriTemplate</key>
2912             <string>https://mail.google.com/mail/?extsrc=mailto&url=%s</string>
2913           </dict>
2914         </array>
2915       </dict>
2916     </dict>
2917     <key>extensions</key>
2918     <dict>
2919       <key>pdf</key>
2920       <dict>
2921         <key>action</key>
2922         <string>useHelperApp</string>
2923         <key>ask</key>
2924         <true/> | <false/>
2925         <key>handlers</key>
2926         <array>
2927           <dict>
2928             <key>name</key>
2929             <string>Adobe Acrobat</string>
2930             <key>path</key>
2931             <string>/System/Applications/Preview.app</string>
2932           </dict>
2933         </array>
2934       </dict>
2935     </dict>
2936   </dict>
2937 </dict>
2938 ```
2939 #### policies.json
2940 ```
2941 {
2942   "policies": {
2943     "Handlers": {
2944       "mimeTypes": {
2945         "application/msword": {
2946           "action": "useSystemDefault",
2947           "ask": false
2948         }
2949       },
2950       "schemes": {
2951         "mailto": {
2952           "action": "useHelperApp",
2953           "ask": true | false,
2954           "handlers": [{
2955             "name": "Gmail",
2956             "uriTemplate": "https://mail.google.com/mail/?extsrc=mailto&url=%s"
2957           }]
2958         }
2959       },
2960       "extensions": {
2961         "pdf": {
2962           "action": "useHelperApp",
2963           "ask": true | false,
2964           "handlers": [{
2965             "name": "Adobe Acrobat",
2966             "path": "/usr/bin/acroread"
2967           }]
2968         }
2969       }
2970     }
2971   }
2972 }
2973 ```
2974 ### HardwareAcceleration
2975 Control hardware acceleration.
2976
2977 **Compatibility:** Firefox 60, Firefox ESR 60\
2978 **CCK2 Equivalent:** N/A\
2979 **Preferences Affected:** `layers.acceleration.disabled`
2980
2981 #### Windows (GPO)
2982 ```
2983 Software\Policies\Mozilla\Firefox\HardwareAcceleration = 0x1 | 0x0
2984 ```
2985 #### Windows (Intune)
2986 OMA-URI:
2987 ```
2988 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/HardwareAcceleration
2989 ```
2990 Value (string):
2991 ```
2992 <enabled/> or <disabled/>
2993 ```
2994 #### macOS
2995 ```
2996 <dict>
2997   <key>HardwareAcceleration</key>
2998   <true/> | <false/>
2999 </dict>
3000 ```
3001 #### policies.json
3002 ```
3003 {
3004   "policies": {
3005     "HardwareAcceleration": true | false
3006   }
3007 }
3008 ```
3009 ### Homepage
3010 Configure the default homepage and how Firefox starts.
3011
3012 `URL` is the default homepage.
3013
3014 `Locked` prevents the user from changing homepage preferences.
3015
3016 `Additional` allows for more than one homepage.
3017
3018 `StartPage` is how Firefox starts. The choices are no homepage, the default homepage or the previous session.
3019
3020 With Firefox 78, an additional option as added for `Startpage`, `homepage-locked`. If this is value is set for the Startpage, the user will always get the homepage at startup and cannot choose to restore their session.
3021
3022 **Compatibility:** Firefox 60, Firefox ESR 60 (StartPage was added in Firefox 60, Firefox ESR 60.4, homepage-locked added in Firefox 78)\
3023 **CCK2 Equivalent:** `homePage`,`lockHomePage`\
3024 **Preferences Affected:** `browser.startup.homepage`, `browser.startup.page`
3025
3026 #### Windows (GPO)
3027 ```
3028 Software\Policies\Mozilla\Firefox\Homepage\URL = "https://example.com"
3029 Software\Policies\Mozilla\Firefox\Homepage\Locked = 0x1 | 0x0
3030 Software\Policies\Mozilla\Firefox\Homepage\Additional\1 = "https://example.org"
3031 Software\Policies\Mozilla\Firefox\Homepage\Additional\2 = "https://example.edu"
3032 Software\Policies\Mozilla\Firefox\Homepage\StartPage = "none" | "homepage" | "previous-session" | "homepage-locked"
3033 ```
3034 #### Windows (Intune)
3035 OMA-URI:
3036 ```
3037 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageURL
3038 ```
3039 Value (string):
3040 ```
3041 <enabled/>
3042
3043 <data id="HomepageURL" value="https://example.com"/>
3044 <data id="HomepageLocked" value="true | false"/>
3045 ```
3046 OMA-URI:
3047 ```
3048 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageAdditional
3049 ```
3050 Value (string):
3051 ```
3052 <enabled/>
3053
3054 <data id="HomepageAdditional" value="1&#xF000;http://example.org&#xF000;2&#xF000;http://example.edu"/>
3055 ```
3056 OMA-URI:
3057 ```
3058 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageStartPage
3059 ```
3060 Value (string):
3061 ```
3062 <enabled/>
3063
3064 <data id="StartPage" value="none | homepage | previous-session"/>
3065 ```
3066 #### macOS
3067 ```
3068 <dict>
3069   <key>Homepage</key>
3070   <dict>
3071     <key>URL</key>
3072     <string>http://example.com</string>
3073     <key>Locked</key>
3074     <true/> | <false/>
3075     <key>Additional</key>
3076     <array>
3077       <string>http://example.org</string>
3078       <string>http://example.edu</string>
3079     </array>
3080     <key>StartPage</key>
3081     <string>none | homepage | previous-session | homepage-locked</string>
3082   </dict>
3083 </dict>
3084 ```
3085 #### policies.json
3086 ```
3087 {
3088   "policies": {
3089     "Homepage": {
3090       "URL": "http://example.com/",
3091       "Locked": true | false,
3092       "Additional": ["http://example.org/",
3093                      "http://example.edu/"],
3094       "StartPage": "none" | "homepage" | "previous-session" | "homepage-locked"
3095     }
3096   }
3097 }
3098 ```
3099 ### InstallAddonsPermission
3100 Configure the default extension install policy as well as origins for extension installs are allowed. This policy does not override turning off all extension installs.
3101
3102 `Allow` is a list of origins where extension installs are allowed.
3103
3104 `Default` determines whether or not extension installs are allowed by default.
3105
3106 **Compatibility:** Firefox 60, Firefox ESR 60\
3107 **CCK2 Equivalent:** `permissions.install`\
3108 **Preferences Affected:** `xpinstall.enabled`
3109
3110 #### Windows (GPO)
3111 ```
3112 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Allow\1 = "https://example.org"
3113 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Allow\2 = "https://example.edu"
3114 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Default = 0x1 | 0x0
3115 ```
3116 #### Windows (Intune)
3117 OMA-URI:
3118 ```
3119 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Addons/InstallAddonsPermission_Allow
3120 ```
3121 Value (string):
3122 ```
3123 <enabled/>
3124 <data id="Permissions" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
3125 ```
3126 OMA-URI:
3127 ```
3128 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Addons/InstallAddonsPermission_Default
3129 ```
3130 Value (string):
3131 ```
3132 <enabled/>
3133 ```
3134 #### macOS
3135 ```
3136 <dict>
3137   <key>InstallAddonsPermission</key>
3138   <dict>
3139     <key>Allow</key>
3140     <array>
3141       <string>http://example.org</string>
3142       <string>http://example.edu</string>
3143     </array>
3144     <key>Default</key>
3145     <true/> | <false/>
3146   </dict>
3147 </dict>
3148 ```
3149 #### policies.json
3150 ```
3151 {
3152   "policies": {
3153     "InstallAddonsPermission": {
3154       "Allow": ["http://example.org/",
3155                 "http://example.edu/"],
3156       "Default": true | false
3157     }
3158   }
3159 }
3160 ```
3161 ### LegacyProfiles
3162 Disable the feature enforcing a separate profile for each installation.
3163
3164 If this policy set to true, Firefox will not try to create different profiles for installations of Firefox in different directories. This is the equivalent of the MOZ_LEGACY_PROFILES environment variable.
3165
3166 If this policy set to false, Firefox will create a new profile for each unique installation of Firefox.
3167
3168 This policy only work on Windows via GPO (not policies.json).
3169
3170 **Compatibility:** Firefox 70, Firefox ESR 68.2 (Windows only, GPO only)\
3171 **CCK2 Equivalent:** N/A\
3172 **Preferences Affected:** N/A
3173
3174 #### Windows (GPO)
3175 ```
3176 Software\Policies\Mozilla\Firefox\LegacyProfiles = = 0x1 | 0x0
3177 ```
3178 #### Windows (Intune)
3179 OMA-URI:
3180 ```
3181 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/LegacyProfiles
3182 ```
3183 Value (string):
3184 ```
3185 <enabled/> or <disabled/>
3186 ```
3187 ### LegacySameSiteCookieBehaviorEnabled
3188 Enable default legacy SameSite cookie behavior setting.
3189
3190 If this policy is set to true, it reverts all cookies to legacy SameSite behavior which means that cookies that don't explicitly specify a ```SameSite``` attribute are treated as if they were ```SameSite=None```.
3191
3192 **Compatibility:** Firefox 96\
3193 **CCK2 Equivalent:** N/A\
3194 **Preferences Affected:** `network.cookie.sameSite.laxByDefault`
3195
3196 #### Windows (GPO)
3197 ```
3198 Software\Policies\Mozilla\Firefox\LegacySameSiteCookieBehaviorEnabled = = 0x1 | 0x0
3199 ```
3200 #### Windows (Intune)
3201 OMA-URI:
3202 ```
3203 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/LegacySameSiteCookieBehaviorEnabled
3204 ```
3205 Value (string):
3206 ```
3207 <enabled/> or <disabled/>
3208 ```
3209 #### macOS
3210 ```
3211 <dict>
3212   <key>LegacySameSiteCookieBehaviorEnabled</key>
3213   <true/> | <false/>
3214 </dict>
3215 ```
3216 #### policies.json
3217 ```
3218 {
3219   "policies": {
3220     "LegacySameSiteCookieBehaviorEnabled": true | false
3221 }
3222 ```
3223 ### LegacySameSiteCookieBehaviorEnabledForDomainList
3224 Revert to legacy SameSite behavior for cookies on specified sites.
3225
3226 If this policy is set to true, cookies set for domains in this list will revert to legacy SameSite behavior which means that cookies that don't explicitly specify a ```SameSite``` attribute are treated as if they were ```SameSite=None```.
3227
3228 **Compatibility:** Firefox 96\
3229 **CCK2 Equivalent:** N/A\
3230 **Preferences Affected:** `network.cookie.sameSite.laxByDefault.disabledHosts`
3231
3232 #### Windows (GPO)
3233 ```
3234 Software\Policies\Mozilla\Firefox\LegacySameSiteCookieBehaviorEnabledForDomainList\1 = "example.org"
3235 Software\Policies\Mozilla\Firefox\LegacySameSiteCookieBehaviorEnabledForDomainList\2 = "example.edu"
3236 ```
3237 #### Windows (Intune)
3238 OMA-URI:
3239 ```
3240 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/LegacySameSiteCookieBehaviorEnabledForDomainList
3241 ```
3242 Value (string):
3243 ```
3244 <enabled/>
3245 <data id="LegacySameSiteCookieBehaviorEnabledForDomainList" value="1&#xF000;example.org&#xF000;2&#xF000;example.edu"/>
3246 ```
3247 #### macOS
3248 ```
3249 <dict>
3250   <key>LegacySameSiteCookieBehaviorEnabledForDomainList</key>
3251   <array>
3252     <string>example.org</string>
3253     <string>example.edu</string>
3254   </array>
3255 </dict>
3256 ```
3257 #### policies.json
3258 ```
3259 {
3260   "policies": {
3261     "LegacySameSiteCookieBehaviorEnabledForDomainList": ["example.org",
3262                                                          "example.edu"]
3263   }
3264 }
3265 ```
3266 ### LocalFileLinks
3267 Enable linking to local files by origin.
3268
3269 **Compatibility:** Firefox 68, Firefox ESR 68\
3270 **CCK2 Equivalent:** N/A\
3271 **Preferences Affected:** `capability.policy.localfilelinks.*`
3272
3273 #### Windows (GPO)
3274 ```
3275 Software\Policies\Mozilla\Firefox\LocalFileLinks\1 = "https://example.org"
3276 Software\Policies\Mozilla\Firefox\LocalFileLinks\2 = "https://example.edu"
3277 ```
3278 #### Windows (Intune)
3279 OMA-URI:
3280 ```
3281 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/LocalFileLinks
3282 ```
3283 Value (string):
3284 ```
3285 <enabled/>
3286 <data id="LocalFileLinks" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
3287 ```
3288 #### macOS
3289 ```
3290 <dict>
3291   <key>LocalFileLinks</key>
3292   <array>
3293     <string>http://example.org</string>
3294     <string>http://example.edu</string>
3295   </array>
3296 </dict>
3297 ```
3298 #### policies.json
3299 ```
3300 {
3301   "policies": {
3302     "LocalFileLinks": ["http://example.org/",
3303                        "http://example.edu/"]
3304   }
3305 }
3306 ```
3307 ### ManagedBookmarks
3308 Configures a list of bookmarks managed by an administrator that cannot be changed by the user.
3309
3310 The bookmarks are only added as a button on the personal toolbar. They are not in the bookmarks folder.
3311
3312 The syntax of this policy is exactly the same as the [Chrome ManagedBookmarks policy](https://cloud.google.com/docs/chrome-enterprise/policies/?policy=ManagedBookmarks). The schema is:
3313 ```
3314 {
3315  "items": {
3316   "id": "BookmarkType",
3317   "properties": {
3318    "children": {
3319     "items": {
3320      "$ref": "BookmarkType"
3321     },
3322     "type": "array"
3323    },
3324    "name": {
3325     "type": "string"
3326    },
3327    "toplevel_name": {
3328     "type": "string"
3329    },
3330    "url": {
3331     "type": "string"
3332    }
3333   },
3334   "type": "object"
3335  },
3336  "type": "array"
3337 }
3338 ```
3339 **Compatibility:** Firefox 83, Firefox ESR 78.5\
3340 **CCK2 Equivalent:** N/A\
3341 **Preferences Affected:** N/A
3342
3343 #### Windows (GPO)
3344 Software\Policies\Mozilla\Firefox\ManagedBookmarks (REG_MULTI_SZ) =
3345 ```
3346 [
3347   {
3348     "toplevel_name": "My managed bookmarks folder"
3349   },
3350   {
3351     "url": "example.com",
3352     "name": "Example"
3353   },
3354   {
3355     "name": "Mozilla links",
3356     "children": [
3357       {
3358         "url": "https://mozilla.org",
3359         "name": "Mozilla.org"
3360       },
3361       {
3362         "url": "https://support.mozilla.org/",
3363         "name": "SUMO"
3364       }
3365     ]
3366   }
3367 ]
3368 ```
3369 #### Windows (Intune)
3370 OMA-URI:
3371 ```
3372 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/ManagedBookmarks
3373 ```
3374 Value (string):
3375 ```
3376 <enabled/>
3377 <data id="JSON" value='
3378 [
3379   {
3380     "toplevel_name": "My managed bookmarks folder"
3381   },
3382   {
3383     "url": "example.com",
3384     "name": "Example"
3385   },
3386   {
3387     "name": "Mozilla links",
3388     "children": [
3389       {
3390         "url": "https://mozilla.org",
3391         "name": "Mozilla.org"
3392       },
3393       {
3394         "url": "https://support.mozilla.org/",
3395         "name": "SUMO"
3396       }
3397     ]
3398   }
3399 ]'/>
3400 ```
3401 #### macOS
3402 ```
3403 <dict>
3404   <key>ManagedBookmarks</key>
3405   <array>
3406     <dict>
3407       <key>toplevel_name</key>
3408       <string>My managed bookmarks folder</string>
3409       <dict>
3410         <key>url</key>
3411         <string>example.com</string>
3412         <key>name</key>
3413         <string>Example</string>
3414       </dict>
3415       <dict>
3416       <key>name</key>
3417       <string>Mozilla links</string>
3418       <key>children</key>
3419       <array>
3420         <dict>
3421           <key>url</key>
3422           <string>https://mozilla.org</string>
3423           <key>name</key>
3424           <string>Mozilla</string>
3425         </dict>
3426         <dict>
3427           <key>url</key>
3428           <string>https://support.mozilla.org/</string>
3429           <key>name</key>
3430           <string>SUMO</string>
3431         </dict>
3432       </array>
3433     </dict>
3434   </array>
3435 </dict>
3436 ```
3437 #### policies.json
3438 ```
3439 {
3440   "policies": {
3441     "ManagedBookmarks": [
3442       {
3443         "toplevel_name": "My managed bookmarks folder"
3444       },
3445       {
3446         "url": "example.com",
3447         "name": "Example"
3448       },
3449       {
3450         "name": "Mozilla links",
3451         "children": [
3452           {
3453             "url": "https://mozilla.org",
3454             "name": "Mozilla.org"
3455           },
3456           {
3457             "url": "https://support.mozilla.org/",
3458             "name": "SUMO"
3459           }
3460         ]
3461       }
3462     ]
3463   }
3464 }
3465 ```
3466 ### ManualAppUpdateOnly
3467
3468 Switch to manual updates only.
3469
3470 If this policy is enabled:
3471  1. The user will never be prompted to install updates
3472  2. Firefox will not check for updates in the background, though it will check automatically when an update UI is displayed (such as the one in the About dialog). This check will be used to show "Update to version X" in the UI, but will not automatically download the update or prompt the user to update in any other way.
3473  3. The update UI will work as expected, unlike when using DisableAppUpdate.
3474
3475 This policy is primarily intended for advanced end users, not for enterprises.
3476
3477 **Compatibility:** Firefox 87\
3478 **CCK2 Equivalent:** N/A\
3479 **Preferences Affected:** N/A
3480
3481 #### policies.json
3482 ```
3483 {
3484   "policies": {
3485     "ManualAppUpdateOnly": true | false
3486   }
3487 }
3488 ```
3489 ### NetworkPrediction
3490 Enable or disable network prediction (DNS prefetching).
3491
3492 **Compatibility:** Firefox 67, Firefox ESR 60.7\
3493 **CCK2 Equivalent:** N/A\
3494 **Preferences Affected:** `network.dns.disablePrefetch`, `network.dns.disablePrefetchFromHTTPS`
3495
3496 #### Windows (GPO)
3497 ```
3498 Software\Policies\Mozilla\Firefox\NetworkPrediction = 0x1 | 0x0
3499 ```
3500 #### Windows (Intune)
3501 OMA-URI:
3502 ```
3503 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NetworkPrediction
3504 ```
3505 Value (string):
3506 ```
3507 <enabled/> or <disabled/>
3508 ```
3509 #### macOS
3510 ```
3511 <dict>
3512   <key>NetworkPrediction</key>
3513   <true/> | <false/>
3514 </dict>
3515 ```
3516 #### policies.json
3517 ```
3518 {
3519   "policies": {
3520     "NetworkPrediction": true | false
3521 }
3522 ```
3523 ### NewTabPage
3524 Enable or disable the New Tab page.
3525
3526 **Compatibility:** Firefox 68, Firefox ESR 68\
3527 **CCK2 Equivalent:** N/A\
3528 **Preferences Affected:** `browser.newtabpage.enabled`
3529
3530 #### Windows (GPO)
3531 ```
3532 Software\Policies\Mozilla\Firefox\NewTabPage = 0x1 | 0x0
3533 ```
3534 #### Windows (Intune)
3535 OMA-URI:
3536 ```
3537 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NewTabPage
3538 ```
3539 Value (string):
3540 ```
3541 <enabled/> or <disabled/>
3542 ```
3543 #### macOS
3544 ```
3545 <dict>
3546   <key>NewTabPage</key>
3547   <true/> | <false/>
3548 </dict>
3549 ```
3550 #### policies.json
3551 ```
3552 {
3553   "policies": {
3554     "NewTabPage": true | false
3555 }
3556 ```
3557 ### NoDefaultBookmarks
3558 Disable the creation of default bookmarks.
3559
3560 This policy is only effective if the user profile has not been created yet.
3561
3562 **Compatibility:** Firefox 60, Firefox ESR 60\
3563 **CCK2 Equivalent:** `removeDefaultBookmarks`\
3564 **Preferences Affected:** N/A
3565
3566 #### Windows (GPO)
3567 ```
3568 Software\Policies\Mozilla\Firefox\NoDefaultBookmarks = 0x1 | 0x0
3569 ```
3570 #### Windows (Intune)
3571 OMA-URI:
3572 ```
3573 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NoDefaultBookmarks
3574 ```
3575 Value (string):
3576 ```
3577 <enabled/> or <disabled/>
3578 ```
3579 #### macOS
3580 ```
3581 <dict>
3582   <key>NoDefaultBookmarks</key>
3583   <true/> | <false/>
3584 </dict>
3585 ```
3586 #### policies.json
3587 ```
3588 {
3589   "policies": {
3590     "NoDefaultBookmarks": true | false
3591   }
3592 }
3593 ```
3594 ### OfferToSaveLogins
3595 Control whether or not Firefox offers to save passwords.
3596
3597 **Compatibility:** Firefox 60, Firefox ESR 60\
3598 **CCK2 Equivalent:** `dontRememberPasswords`\
3599 **Preferences Affected:** `signon.rememberSignons`
3600
3601 #### Windows (GPO)
3602 ```
3603 Software\Policies\Mozilla\Firefox\OfferToSaveLogins = 0x1 | 0x0
3604 ```
3605 #### Windows (Intune)
3606 OMA-URI:
3607 ```
3608 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OfferToSaveLogins
3609 ```
3610 Value (string):
3611 ```
3612 <enabled/> or <disabled/>
3613 ```
3614 #### macOS
3615 ```
3616 <dict>
3617   <key>OfferToSaveLogins</key>
3618   <true/> | <false/>
3619 </dict>
3620 ```
3621 #### policies.json
3622 ```
3623 {
3624   "policies": {
3625     "OfferToSaveLogins": true | false
3626   }
3627 }
3628 ```
3629 ### OfferToSaveLoginsDefault
3630 Sets the default value of signon.rememberSignons without locking it.
3631
3632 **Compatibility:** Firefox 70, Firefox ESR 60.2\
3633 **CCK2 Equivalent:** `dontRememberPasswords`\
3634 **Preferences Affected:** `signon.rememberSignons`
3635
3636 #### Windows (GPO)
3637 ```
3638 Software\Policies\Mozilla\Firefox\OfferToSaveLoginsDefault = 0x1 | 0x0
3639 ```
3640 #### Windows (Intune)
3641 OMA-URI:
3642 ```
3643 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OfferToSaveLoginsDefault
3644 ```
3645 Value (string):
3646 ```
3647 <enabled/> or <disabled/>
3648 ```
3649 #### macOS
3650 ```
3651 <dict>
3652   <key>OfferToSaveLoginsDefault</key>
3653   <true/> | <false/>
3654 </dict>
3655 ```
3656 #### policies.json
3657 ```
3658 {
3659   "policies": {
3660     "OfferToSaveLoginsDefault": true | false
3661   }
3662 }
3663 ```
3664 ### OverrideFirstRunPage
3665 Override the first run page. If the value is an empty string (""), the first run page is not displayed.
3666
3667 Starting with Firefox 83, Firefox ESR 78.5, you can also specify multiple URLS separated by a vertical bar (|).
3668
3669 **Compatibility:** Firefox 60, Firefox ESR 60\
3670 **CCK2 Equivalent:** `welcomePage`,`noWelcomePage`\
3671 **Preferences Affected:** `startup.homepage_welcome_url`
3672
3673 #### Windows (GPO)
3674 ```
3675 Software\Policies\Mozilla\Firefox\OverrideFirstRunPage = "http://example.org"
3676 ```
3677 #### Windows (Intune)
3678 OMA-URI:
3679 ```
3680 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OverrideFirstRunPage
3681 ```
3682 Value (string):
3683 ```
3684 <enabled/>
3685 <data id="OverridePage" value="https://example.com"/>
3686 ```
3687 #### macOS
3688 ```
3689 <dict>
3690   <key>OverrideFirstRunPage</key>
3691   <string>http://example.org</string>
3692 </dict>
3693 ```
3694 #### policies.json
3695 ```
3696 {
3697   "policies": {
3698     "OverrideFirstRunPage": "http://example.org"
3699   }
3700 }
3701 ```
3702 ### OverridePostUpdatePage
3703 Override the upgrade page. If the value is an empty string (""), no extra pages are displayed when Firefox is upgraded.
3704
3705 **Compatibility:** Firefox 60, Firefox ESR 60\
3706 **CCK2 Equivalent:** `upgradePage`,`noUpgradePage`\
3707 **Preferences Affected:** `startup.homepage_override_url`
3708
3709 #### Windows (GPO)
3710 ```
3711 Software\Policies\Mozilla\Firefox\OverridePostUpdatePage = "http://example.org"
3712 ```
3713 #### Windows (Intune)
3714 OMA-URI:
3715 ```
3716 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OverridePostUpdatePage
3717 ```
3718 Value (string):
3719 ```
3720 <enabled/>
3721 <data id="OverridePage" value="https://example.com"/>
3722 ```
3723 #### macOS
3724 ```
3725 <dict>
3726   <key>OverridePostUpdatePage</key>
3727   <string>http://example.org</string>
3728 </dict>
3729 ```
3730 #### policies.json
3731 ```
3732 {
3733   "policies": {
3734     "OverridePostUpdatePage": "http://example.org"
3735   }
3736 }
3737 ```
3738 ### PasswordManagerEnabled
3739 Remove access to the password manager via preferences and blocks about:logins on Firefox 70.
3740
3741 **Compatibility:** Firefox 70, Firefox ESR 60.2\
3742 **CCK2 Equivalent:** N/A\
3743 **Preferences Affected:** `pref.privacy.disable_button.view_passwords`
3744
3745 #### Windows (GPO)
3746 ```
3747 Software\Policies\Mozilla\Firefox\PasswordManagerEnabled = 0x1 | 0x0
3748 ```
3749 #### Windows (Intune)
3750 OMA-URI:
3751 ```
3752 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PasswordManagerEnabled
3753 ```
3754 Value (string):
3755 ```
3756 <enabled/> or <disabled/>
3757 ```
3758 #### macOS
3759 ```
3760 <dict>
3761   <key>PasswordManagerEnabled</key>
3762   <true/> | <false/>
3763 </dict>
3764 ```
3765 #### policies.json
3766 ```
3767 {
3768   "policies": {
3769     "PasswordManagerEnabled": true | false
3770   }
3771 }
3772 ```
3773 ### PDFjs
3774 Disable or configure PDF.js, the built-in PDF viewer.
3775
3776 If `Enabled` is set to false, the built-in PDF viewer is disabled.
3777
3778 If `EnablePermissions` is set to true, the built-in PDF viewer will honor document permissions like preventing the copying of text.
3779
3780 Note: DisableBuiltinPDFViewer has not been deprecated. You can either continue to use it, or switch to using PDFjs->Enabled to disable the built-in PDF viewer. This new permission was added because we needed a place for PDFjs->EnabledPermissions.
3781
3782 **Compatibility:** Firefox 77, Firefox ESR 68.9\
3783 **CCK2 Equivalent:** N/A\
3784 **Preferences Affected:** `pdfjs.diabled`, `pdfjs.enablePermissions`
3785
3786 #### Windows (GPO)
3787 ```
3788 Software\Policies\Mozilla\Firefox\PDFjs\Enabled = 0x1 | 0x0
3789 Software\Policies\Mozilla\Firefox\PDFjs\EnablePermissions = 0x1 | 0x0
3790 ```
3791 #### Windows (Intune)
3792 OMA-URI:
3793 ```
3794 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PDFjs/PDFjs_Enabled
3795 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PDFjs/PDFjs_EnablePermissions
3796 ```
3797 Value (string):
3798 ```
3799 <enabled/>or <disabled/>
3800 ```
3801 #### macOS
3802 ```
3803 <dict>
3804   <key>PDFjs</key>
3805   <dict>
3806     <key>Enabled</key>
3807     <true/> | <false/>
3808     <key>EnablePermissions</key>
3809     <true/> | <false/>
3810   </dict>
3811 </dict>
3812 ```
3813 #### policies.json
3814 ```
3815 {
3816   "policies": {
3817     "PDFjs": {
3818       "Enabled": true | false,
3819       "EnablePermissions": true | false
3820     }
3821   }
3822 }
3823 ```
3824 ### Permissions
3825 Set permissions associated with camera, microphone, location, notifications, autoplay, and virtual reality. Because these are origins, not domains, entries with unique ports must be specified separately. This explicitly means that it is not possible to add wildcards. See examples below.
3826
3827 `Allow` is a list of origins where the feature is allowed.
3828
3829 `Block` is a list of origins where the feature is not allowed.
3830
3831 `BlockNewRequests` determines whether or not new requests can be made for the feature.
3832
3833 `Locked` prevents the user from changing preferences for the feature.
3834
3835 `Default` specifies the default value for Autoplay. block-audio-video is not supported on Firefox ESR 68.
3836
3837 **Compatibility:** Firefox 62, Firefox ESR 60.2 (Autoplay added in Firefox 74, Firefox ESR 68.6, Autoplay Default/Locked added in Firefox 76, Firefox ESR 68.8, VirtualReality added in Firefox 80, Firefox ESR 78.2)\
3838 **CCK2 Equivalent:** N/A\
3839 **Preferences Affected:** `permissions.default.camera`, `permissions.default.microphone`, `permissions.default.geo`, `permissions.default.desktop-notification`, `media.autoplay.default`, `permissions.default.xr`
3840
3841 #### Windows (GPO)
3842 ```
3843 Software\Policies\Mozilla\Firefox\Permissions\Camera\Allow\1 = "https://example.org"
3844 Software\Policies\Mozilla\Firefox\Permissions\Camera\Allow\2 = "https://example.org:1234"
3845 Software\Policies\Mozilla\Firefox\Permissions\Camera\Block\1 = "https://example.edu"
3846 Software\Policies\Mozilla\Firefox\Permissions\Camera\BlockNewRequests = 0x1 | 0x0
3847 Software\Policies\Mozilla\Firefox\Permissions\Camera\Locked = 0x1 | 0x0
3848 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Allow\1 = "https://example.org"
3849 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Block\1 = "https://example.edu"
3850 Software\Policies\Mozilla\Firefox\Permissions\Microphone\BlockNewRequests = 0x1 | 0x0
3851 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Locked = 0x1 | 0x0
3852 Software\Policies\Mozilla\Firefox\Permissions\Location\Allow\1 = "https://example.org"
3853 Software\Policies\Mozilla\Firefox\Permissions\Location\Block\1 = "https://example.edu"
3854 Software\Policies\Mozilla\Firefox\Permissions\Location\BlockNewRequests = 0x1 | 0x0
3855 Software\Policies\Mozilla\Firefox\Permissions\Location\Locked = 0x1 | 0x0
3856 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Allow\1 = "https://example.org"
3857 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Block\1 = "https://example.edu"
3858 Software\Policies\Mozilla\Firefox\Permissions\Notifications\BlockNewRequests = 0x1 | 0x0
3859 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Locked = 0x1 | 0x0
3860 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Allow\1 = "https://example.org"
3861 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Block\1 = "https://example.edu"
3862 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Default = "allow-audio-video" | "block-audio" | "block-audio-video"
3863 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Locked = 0x1 | 0x0
3864 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\Allow\1 = "https://example.org"
3865 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\Block\1 = "https://example.edu"
3866 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\BlockNewRequests = 0x1 | 0x0
3867 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\Locked = 0x1 | 0x0
3868 ```
3869 #### Windows (Intune)
3870 OMA-URI:
3871 ```
3872 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Location/Location_BlockNewRequests
3873 ```
3874 Value (string):
3875 ```
3876 <enabled/> or <disabled/>
3877 ```
3878 OMA-URI:
3879 ```
3880 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Location/Location_Locked
3881 ```
3882 Value (string):
3883 ```
3884 <enabled/> or <disabled/>
3885 ```
3886 OMA-URI:
3887 ```
3888 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_Allow
3889 ```
3890 Value (string):
3891 ```
3892 <enabled/>
3893 <data id="Permissions" value="1&#xF000;https://example.org"/>
3894 ```
3895 OMA-URI:
3896 ```
3897 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_BlockNewRequests
3898 ```
3899 Value (string):
3900 ```
3901 <enabled/> or <disabled/>
3902 ```
3903 OMA-URI:
3904 ```
3905 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_Locked
3906 ```
3907 Value (string):
3908 ```
3909 <enabled/> or <disabled/>
3910 ```
3911 OMA-URI:
3912 ```
3913 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Allow
3914 ```
3915 Value (string):
3916 ```
3917 <enabled/>
3918 <data id="Permissions" value="1&#xF000;https://example.org"/>
3919 ```
3920 OMA-URI:
3921 ```
3922 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Block
3923 ```
3924 Value (string):
3925 ```
3926 <enabled/>
3927 <data id="Permissions" value="1&#xF000;https://example.edu"/>
3928 ```
3929 OMA-URI:
3930 ```
3931 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Default
3932 ```
3933 Value (string):
3934 ```
3935 <enabled/>
3936 <data id="Autoplay_Default" value="allow-audio-video | block-audio | block-audio-video"/>
3937 ```
3938 OMA-URI:
3939 ```
3940 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Locked
3941 ```
3942 Value (string):
3943 ```
3944 <enabled/> or <disabled/>
3945 ```
3946 OMA-URI:
3947 ```
3948 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_Allow
3949 ```
3950 Value (string):
3951 ```
3952 <enabled/>
3953 <data id="Permissions" value="1&#xF000;https://example.org"/>
3954 ```
3955 OMA-URI:
3956 ```
3957 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_Block
3958 ```
3959 Value (string):
3960 ```
3961 <enabled/>
3962 <data id="Permissions" value="1&#xF000;https://example.edu"/>
3963 ```
3964 OMA-URI:
3965 ```
3966 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_BlockNewRequests
3967 ```
3968 Value (string):
3969 ```
3970 <enabled/> or <disabled/>
3971 ```
3972 OMA-URI:
3973 ```
3974 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_Locked
3975 ```
3976 Value (string):
3977 ```
3978 <enabled/> or <disabled/>
3979 ```
3980 #### macOS
3981 ```
3982 <dict>
3983   <key>Permissions</key>
3984   <dict>
3985     <key>Camera</key>
3986     <dict>
3987       <key>Allow</key>
3988       <array>
3989         <string>https://example.org</string>
3990         <string>https://example.org:1234</string>
3991       </array>
3992       <key>Block</key>
3993       <array>
3994         <string>https://example.edu</string>
3995       </array>
3996       <key>BlockNewRequests</key>
3997       <true/> | <false/>
3998       <key>Locked</key>
3999       <true/> | <false/>
4000     </dict>
4001     <key>Microphone</key>
4002     <dict>
4003       <key>Allow</key>
4004       <array>
4005         <string>https://example.org</string>
4006       </array>
4007       <key>Block</key>
4008       <array>
4009         <string>https://example.edu</string>
4010       </array>
4011       <key>BlockNewRequests</key>
4012       <true/> | <false/>
4013       <key>Locked</key>
4014       <true/> | <false/>
4015     </dict>
4016     <key>Location</key>
4017     <dict>
4018       <key>Allow</key>
4019       <array>
4020         <string>https://example.org</string>
4021       </array>
4022       <key>Block</key>
4023       <array>
4024         <string>https://example.edu</string>
4025       </array>
4026       <key>BlockNewRequests</key>
4027       <true/> | <false/>
4028       <key>Locked</key>
4029       <true/> | <false/>
4030     </dict>
4031     <key>Notifications</key>
4032     <dict>
4033       <key>Allow</key>
4034       <array>
4035         <string>https://example.org</string>
4036       </array>
4037       <key>Block</key>
4038       <array>
4039         <string>https://example.edu</string>
4040       </array>
4041       <key>BlockNewRequests</key>
4042       <true/>
4043       <key>Locked</key>
4044       <true/>
4045     </dict>
4046     <key>Autoplay</key>
4047     <dict>
4048       <key>Allow</key>
4049       <array>
4050         <string>https://example.org</string>
4051       </array>
4052       <key>Block</key>
4053       <array>
4054         <string>https://example.edu</string>
4055       </array>
4056       <key>Default</key>
4057       <string>allow-audio-video | block-audio | block-audio-video</string>
4058       <key>Locked</key>
4059       <true/> | <false/>
4060     </dict>
4061   </dict>
4062 </dict>
4063 ```
4064 #### policies.json
4065 ```
4066 {
4067   "policies": {
4068     "Permissions": {
4069       "Camera": {
4070         "Allow": ["https://example.org","https://example.org:1234"],
4071         "Block": ["https://example.edu"],
4072         "BlockNewRequests": true | false,
4073         "Locked": true | false
4074       },
4075       "Microphone": {
4076         "Allow": ["https://example.org"],
4077         "Block": ["https://example.edu"],
4078         "BlockNewRequests": true | false,
4079         "Locked": true | false
4080       },
4081       "Location": {
4082         "Allow": ["https://example.org"],
4083         "Block": ["https://example.edu"],
4084         "BlockNewRequests": true | false,
4085         "Locked": true | false
4086       },
4087       "Notifications": {
4088         "Allow": ["https://example.org"],
4089         "Block": ["https://example.edu"],
4090         "BlockNewRequests": true | false,
4091         "Locked": true | false
4092       },
4093       "Autoplay": {
4094         "Allow": ["https://example.org"],
4095         "Block": ["https://example.edu"],
4096         "Default": "allow-audio-video" | "block-audio" | "block-audio-video",
4097         "Locked": true | false
4098       }
4099     }
4100   }
4101 }
4102 ```
4103 ### PictureInPicture
4104
4105 Enable or disable Picture-in-Picture as well as prevent the user from enabling or disabling it (Locked).
4106
4107 **Compatibility:** Firefox 78, Firefox ESR 78\
4108 **CCK2 Equivalent:** N/A\
4109 **Preferences Affected:** `media.videocontrols.picture-in-picture.video-toggle.enabled`
4110
4111 #### Windows (GPO)
4112 ```
4113 Software\Policies\Mozilla\Firefox\PictureInPicture\Enabled = 0x1 | 0x0
4114 Software\Policies\Mozilla\Firefox\PictureInPicture\Locked = 0x1 | 0x0
4115
4116 ```
4117 #### Windows (Intune)
4118 OMA-URI:
4119 ```
4120 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PictureInPicture/PictureInPicture_Enabled
4121 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PictureInPicture/PictureInPicture_Locked
4122 ```
4123 Value (string):
4124 ```
4125 <enabled/> or <disabled/>
4126 ```
4127 #### macOS
4128 ```
4129 <dict>
4130   <key>PictureInPicture</key>
4131   <dict>
4132     <key>Enabled</key>
4133     <true/> | <false/>
4134     <key>Locked</key>
4135     <true/> | <false/>
4136   </dict>
4137 </dict>
4138 ```
4139 #### policies.json
4140 ```
4141 {
4142   "policies": {
4143     "PictureInPicture": {
4144       "Enabled": true | false,
4145       "Locked": true | false
4146     }
4147   }
4148 }
4149 ```
4150 ### PopupBlocking
4151 Configure the default pop-up window policy as well as origins for which pop-up windows are allowed.
4152
4153 `Allow` is a list of origins where popup-windows are allowed.
4154
4155 `Default` determines whether or not pop-up windows are allowed by default.
4156
4157 `Locked` prevents the user from changing pop-up preferences.
4158
4159 **Compatibility:** Firefox 60, Firefox ESR 60\
4160 **CCK2 Equivalent:** `permissions.popup`\
4161 **Preferences Affected:** `dom.disable_open_during_load`
4162
4163 #### Windows (GPO)
4164 ```
4165 Software\Policies\Mozilla\Firefox\PopupBlocking\Allow\1 = "https://example.org"
4166 Software\Policies\Mozilla\Firefox\PopupBlocking\Allow\2 = "https://example.edu"
4167 Software\Policies\Mozilla\Firefox\PopupBlocking\Default = 0x1 | 0x0
4168 Software\Policies\Mozilla\Firefox\PopupBlocking\Locked = 0x1 | 0x0
4169 ```
4170 #### Windows (Intune)
4171 OMA-URI:
4172 ```
4173 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Allow
4174 ```
4175 Value (string):
4176 ```
4177 <enabled/>
4178 <data id="Permissions" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
4179 ```
4180 OMA-URI:
4181 ```
4182 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Default
4183 ```
4184 Value (string):
4185 ```
4186 <enabled/> or <disabled/>
4187 ```
4188 OMA-URI:
4189 ```
4190 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Locked
4191 ```
4192 Value (string):
4193 ```
4194 <enabled/> or <disabled/>
4195 ```
4196 #### macOS
4197 ```
4198 <dict>
4199   <key>PopupBlocking</key>
4200   <dict>
4201     <key>Allow</key>
4202     <array>
4203       <string>http://example.org</string>
4204       <string>http://example.edu</string>
4205     </array>
4206     <key>Default</key>
4207     <true/> | <false/>
4208     <key>Locked</key>
4209     <true/> | <false/>
4210   </dict>
4211 </dict>
4212 ```
4213 #### policies.json
4214 ```
4215 {
4216   "policies": {
4217     "PopupBlocking": {
4218       "Allow": ["http://example.org/",
4219                 "http://example.edu/"],
4220       "Default": true | false,
4221       "Locked": true | false
4222     }
4223   }
4224 }
4225 ```
4226 ### Preferences
4227 Set and lock preferences.
4228
4229 **NOTE** On Windows, in order to use this policy, you must clear all settings in the old **Preferences (Deprecated)** section.
4230
4231 Previously you could only set and lock a subset of preferences. Starting with Firefox 81 and Firefox ESR 78.3 you can set many more preferences. You can also set default preferences, user preferences and you can clear preferences.
4232
4233 Preferences that start with the following prefixes are supported:
4234 ```
4235 accessibility.
4236 app.update.* (Firefox 86, Firefox 78.8)
4237 browser.
4238 datareporting.policy.
4239 dom.
4240 extensions.
4241 general.autoScroll (Firefox 83, Firefox ESR 78.5)
4242 general.smoothScroll (Firefox 83, Firefox ESR 78.5)
4243 geo.
4244 gfx.
4245 intl.
4246 keyword.enabled (Firefox 95, Firefox ESR 91.4)
4247 layers.
4248 layout.
4249 media.
4250 network.
4251 pdfjs. (Firefox 84, Firefox ESR 78.6)
4252 places.
4253 print.
4254 signon. (Firefox 83, Firefox ESR 78.5)
4255 spellchecker. (Firefox 84, Firefox ESR 78.6)
4256 toolkit.legacyUserProfileCustomizations.stylesheets (Firefox 95, Firefox ESR 91.4)
4257 ui.
4258 widget.
4259 ```
4260 as well as the following security preferences:
4261 | Preference | Type | Default
4262 | --- | --- | ---
4263 | security.default_personal_cert | string | Ask Every Time
4264 | &nbsp;&nbsp;&nbsp;&nbsp;If set to Select Automatically, Firefox automatically chooses the default personal certificate.
4265 | security.insecure_connection_text.enabled | bool | false
4266 | &nbsp;&nbsp;&nbsp;&nbsp;If set to true, adds the words "Not Secure" for insecure sites.
4267 | security.insecure_connection_text.pbmode.enabled | bool | false
4268 | &nbsp;&nbsp;&nbsp;&nbsp;If set to true, adds the words "Not Secure" for insecure sites in private browsing.
4269 | security.insecure_field_warning.contextual.enabled | bool | true
4270 | &nbsp;&nbsp;&nbsp;&nbsp;If set to false, remove the warning for inscure login fields.
4271 | security.mixed_content.block_active_content | boolean | true
4272 | &nbsp;&nbsp;&nbsp;&nbsp;If false, mixed active content (HTTP and HTTPS) is not blocked.
4273 | security.osclientcerts.autoload | boolean | false
4274 | &nbsp;&nbsp;&nbsp;&nbsp;If true, client certificates are loaded from the operating system certificate store.
4275 | security.ssl.errorReporting.enabled | boolean | true
4276 | &nbsp;&nbsp;&nbsp;&nbsp;If false, SSL errors cannot be sent to Mozilla.
4277 | security.tls.enable_0rtt_data | boolean | true
4278 | &nbsp;&nbsp;&nbsp;&nbsp;If false, TLS early data is turned off (Firefox 93, Firefox 91.2, Firefox 78.15).
4279 | security.tls.hello_downgrade_check | boolean | true
4280 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the TLS 1.3 downgrade check is disabled.
4281 | security.tls.version.enable-deprecated | boolean | false
4282 | &nbsp;&nbsp;&nbsp;&nbsp;If true, browser will accept TLS 1.0. and TLS 1.1 (Firefox 86, Firefox 78.8).
4283 | security.warn_submit_secure_to_insecure | boolean | true
4284 | &nbsp;&nbsp;&nbsp;&nbsp;If false, no warning is shown when submitting a form from https to http.
4285 &nbsp;
4286
4287 Using the preference as the key, set the `Value` to the corresponding preference value.
4288
4289 `Status` can be "default", "locked", "user" or "clear"
4290
4291 Default preferences can be modified by the user.
4292
4293 If a value is locked, it is also set as the default.
4294
4295 User preferences persist across invocations of Firefox. It is the equivalent of a user setting the preference. They are most useful when a preference is needed very early in startup so it can't be set as default by policy. An example of this is ```toolkit.legacyUserProfileCustomizations.stylesheets```.
4296
4297 User preferences persist even if the policy is removed, so if you need to remove them, you should use the clear policy.
4298
4299 See the examples below for more detail.
4300
4301 IMPORTANT: Make sure you're only setting a particular preference using this mechanism and not some other way.
4302
4303 Status
4304 **Compatibility:** Firefox 81, Firefox ESR 78.3\
4305 **CCK2 Equivalent:** `preferences`\
4306 **Preferences Affected:** Many
4307
4308 #### Windows (GPO)
4309 Software\Policies\Mozilla\Firefox\Preferences (REG_MULTI_SZ) =
4310 ```
4311 {
4312   "accessibility.force_disabled": {
4313     "Value": 1,
4314     "Status": "default"
4315   },
4316   "browser.cache.disk.parent_directory": {
4317     "Value": "SOME_NATIVE_PATH",
4318     "Status": "user"
4319   },
4320   "browser.tabs.warnOnClose": {
4321     "Value": false,
4322     "Status": "locked"
4323   }
4324 }
4325 ```
4326 #### Windows (Intune)
4327 OMA-URI:
4328 ```
4329 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Preferences
4330 ```
4331 Value (string):
4332 ```
4333 <enabled/>
4334 <data id="JSON" value='
4335 {
4336   "accessibility.force_disabled": {
4337     "Value": 1,
4338     "Status": "default"
4339   },
4340   "browser.cache.disk.parent_directory": {
4341     "Value": "SOME_NATIVE_PATH",
4342     "Status": "user"
4343   },
4344   "browser.tabs.warnOnClose": {
4345     "Value": false,
4346     "Status": "locked"
4347   }
4348 }'/>
4349 ```
4350 #### macOS
4351 ```
4352 <dict>
4353   <key>Preferences</key>
4354   <dict>
4355     <key>accessibility.force_disabled</key>
4356     <dict>
4357       <key>Value</key>
4358       <integer>1</integer>
4359       <key>Status</key>
4360       <string>default</string>
4361     </dict>
4362     <key>browser.cache.disk.parent_directory</key>
4363     <dict>
4364       <key>Value</key>
4365       <string>SOME_NATIVE_PATH</string>
4366       <key>Status</key>
4367       <string>user</string>
4368     </dict>
4369     <key>browser.tabs.warnOnClose</key>
4370     <dict>
4371       <key>Value</key>
4372       <false/>
4373       <key>Status</key>
4374       <string>locked</string>
4375     </dict>
4376   </dict>
4377 </dict>
4378 ```
4379 #### policies.json
4380 ```
4381 {
4382   "policies": {
4383     "Preferences": {
4384       "accessibility.force_disabled": {
4385         "Value": 1,
4386         "Status": "default"
4387       },
4388       "browser.cache.disk.parent_directory": {
4389         "Value": "SOME_NATIVE_PATH",
4390         "Status": "user"
4391       },
4392       "browser.tabs.warnOnClose": {
4393         "Value": false,
4394         "Status": "locked"
4395       }
4396     }
4397   }
4398 }
4399 ```
4400 ### Preferences (Deprecated)
4401 Set and lock certain preferences.
4402
4403 **Compatibility:** See below\
4404 **CCK2 Equivalent:** `preferences`\
4405 **Preferences Affected:** See below
4406
4407 | Preference | Type | Compatibility | Default
4408 | --- | --- | --- | ---
4409 | accessibility.force_disabled | integer | Firefox 70, Firefox ESR 68.2 | 0
4410 | &nbsp;&nbsp;&nbsp;&nbsp;If set to 1, platform accessibility is disabled.
4411 | app.update.auto (Deprecated - Switch to AppAutoUpdate policy) | boolean | Firefox 68, Firefox ESR 68 | true
4412 | &nbsp;&nbsp;&nbsp;&nbsp;If false, Firefox doesn't automatically install update.
4413 | browser.bookmarks.autoExportHTML | boolean | Firefox 70, Firefox ESR 68.2 | false
4414 | &nbsp;&nbsp;&nbsp;&nbsp;If true, bookmarks are exported on shutdown.
4415 | browser.bookmarks.file | string | Firefox 70, Firefox ESR 68.2 | N/A
4416 | &nbsp;&nbsp;&nbsp;&nbsp;If set, the name of the file where bookmarks are exported and imported.
4417 | browser.bookmarks.restore_default_bookmarks | boolean | Firefox 70, Firefox ESR 68.2 | N/A
4418 | &nbsp;&nbsp;&nbsp;&nbsp;If true, bookmarks are restored to their defaults.
4419 | browser.cache.disk.enable | boolean | Firefox 68, Firefox ESR 68 | true
4420 | &nbsp;&nbsp;&nbsp;&nbsp;If false, don't store cache on the hard drive.
4421 | ~browser.cache.disk.parent_directory~ | string | Firefox 68, Firefox ESR 68 | Profile temporary directory
4422 | &nbsp;&nbsp;&nbsp;&nbsp;~If set, changes the location of the disk cache.~ This policy doesn't work. It's being worked on.
4423 | browser.fixup.dns_first_for_single_words | boolean | Firefox 68, Firefox ESR 68 | false
4424 | &nbsp;&nbsp;&nbsp;&nbsp;If true, single words are sent to DNS, not directly to search.
4425 | browser.newtabpage.activity-stream.default.sites | string | Firefox 72, ESR 68.4 | Locale dependent
4426 | &nbsp;&nbsp;&nbsp;&nbsp;If set, a list of URLs to use as the default top sites on the new tab page. Due to Firefox limitations, search sites can't be added. In addition, sites with the same name but different TLDs (example.org/example.com) will not display properly.
4427 | browser.places.importBookmarksHTML | boolean | Firefox 70, Firefox ESR 68.2
4428 | &nbsp;&nbsp;&nbsp;&nbsp;If true, bookmarks are always imported on startup.
4429 | browser.safebrowsing.phishing.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
4430 | &nbsp;&nbsp;&nbsp;&nbsp;If false, phishing protection is not enabled (Not recommended)
4431 | browser.safebrowsing.malware.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
4432 | &nbsp;&nbsp;&nbsp;&nbsp;If false, malware protection is not enabled (Not recommended)
4433 | browser.search.update | boolean | Firefox 68, Firefox ESR 68 | true
4434 | &nbsp;&nbsp;&nbsp;&nbsp;If false, updates for search engines are not checked.
4435 | browser.slowStartup.notificationDisabled | boolean | Firefox 70, Firefox ESR 68.2 | false
4436 | &nbsp;&nbsp;&nbsp;&nbsp;If true, a notification isn't shown if startup is slow.
4437 | browser.tabs.warnOnClose | boolean | Firefox 68, Firefox ESR 68 | true
4438 | &nbsp;&nbsp;&nbsp;&nbsp;If false, there is no warning when the browser is closed.
4439 | browser.taskbar.previews.enable | boolean | Firefox 70, Firefox ESR 68.2 (Windows only) | false
4440 | &nbsp;&nbsp;&nbsp;&nbsp;If true, tab previews are shown in the Windows taskbar.
4441 | browser.urlbar.suggest.bookmark | boolean | Firefox 68, Firefox ESR 68 | true
4442 | &nbsp;&nbsp;&nbsp;&nbsp;If false, bookmarks aren't suggested when typing in the URL bar.
4443 | browser.urlbar.suggest.history | boolean | Firefox 68, Firefox ESR 68 | true
4444 | &nbsp;&nbsp;&nbsp;&nbsp;If false, history isn't suggested when typing in the URL bar.
4445 | browser.urlbar.suggest.openpage | boolean | Firefox 68, Firefox ESR 68 | true
4446 | &nbsp;&nbsp;&nbsp;&nbsp;If false, open tabs aren't suggested when typing in the URL bar.
4447 | datareporting.policy.dataSubmissionPolicyBypassNotification | boolean | Firefox 68, Firefox ESR 68 | false
4448 | &nbsp;&nbsp;&nbsp;&nbsp;If true, don't show the privacy policy tab on first run.
4449 | dom.allow_scripts_to_close_windows | boolean | Firefox 70, Firefox ESR 68.2 | false
4450 | &nbsp;&nbsp;&nbsp;&nbsp;If false, web page can close windows.
4451 | dom.disable_window_flip | boolean | Firefox 68, Firefox ESR 68 | true
4452 | &nbsp;&nbsp;&nbsp;&nbsp;If false, web pages can focus and activate windows.
4453 | dom.disable_window_move_resize | boolean | Firefox 68, Firefox ESR 68 | false
4454 | &nbsp;&nbsp;&nbsp;&nbsp;If true, web pages can't move or resize windows.
4455 | dom.event.contextmenu.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4456 | &nbsp;&nbsp;&nbsp;&nbsp;If false, web pages can't override context menus.
4457 | dom.keyboardevent.keypress.hack.dispatch_non_printable_keys.addl | string | Firefox 68, Firefox ESR 68 | N/A
4458 | &nbsp;&nbsp;&nbsp;&nbsp;See https://support.mozilla.org/en-US/kb/dom-events-changes-introduced-firefox-66
4459 | dom.keyboardevent.keypress.hack.use_legacy_keycode_and_charcode.addl | string | Firefox 68, Firefox ESR 68 | N/A
4460 | &nbsp;&nbsp;&nbsp;&nbsp;See https://support.mozilla.org/en-US/kb/dom-events-changes-introduced-firefox-66
4461 | dom.xmldocument.load.enabled | boolean | Firefox ESR 68.5 | true.
4462 | &nbsp;&nbsp;&nbsp;&nbsp;If false, XMLDocument.load is not available.
4463 | dom.xmldocument.async.enabled | boolean | Firefox ESR 68.5 | true
4464 | &nbsp;&nbsp;&nbsp;&nbsp;If false, XMLDocument.async is not available.
4465 | extensions.blocklist.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
4466 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the extensions blocklist is not used (Not recommended)
4467 | extensions.getAddons.showPane | boolean | Firefox 68, Firefox ESR 68 | N/A
4468 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the Recommendations tab is not displayed in the Add-ons Manager.
4469 | extensions.htmlaboutaddons.recommendations.enabled | boolean | Firefox 72, Firefox ESR 68.4 | true
4470 | &nbsp;&nbsp;&nbsp;&nbsp;If false, recommendations are not shown on the Extensions tab in the Add-ons Manager.
4471 | geo.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
4472 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the geolocation API is disabled. | Language dependent
4473 | intl.accept_languages | string | Firefox 70, Firefox ESR 68.2
4474 | &nbsp;&nbsp;&nbsp;&nbsp;If set, preferred language for web pages.
4475 | media.eme.enabled (Deprecated - Switch to EncryptedMediaExtensions policy) | boolean | Firefox 70, Firefox ESR 68.2 | true
4476 | &nbsp;&nbsp;&nbsp;&nbsp;If false, Encrypted Media Extensions are not enabled.
4477 | media.gmp-gmpopenh264.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4478 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the OpenH264  plugin is not downloaded.
4479 | media.gmp-widevinecdm.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4480 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the Widevine plugin is not downloaded.
4481 | media.peerconnection.enabled | boolean | Firefox 72, Firefox ESR 68.4 | true
4482 | &nbsp;&nbsp;&nbsp;&nbsp;If false, WebRTC is disabled
4483 | media.peerconnection.ice.obfuscate_host_addresses.whitelist (Deprecated) | string | Firefox 72, Firefox ESR 68.4 | N/A
4484 | &nbsp;&nbsp;&nbsp;&nbsp;If set, a list of domains for which mDNS hostname obfuscation is
4485 disabled
4486 | media.peerconnection.ice.obfuscate_host_addresses.blocklist | string | Firefox 79, Firefox ESR 78.1 | N/A
4487 | &nbsp;&nbsp;&nbsp;&nbsp;If set, a list of domains for which mDNS hostname obfuscation is
4488 disabled
4489 | network.dns.disableIPv6 | boolean | Firefox 68, Firefox ESR 68 | false
4490 | &nbsp;&nbsp;&nbsp;&nbsp;If true, IPv6 DNS lokoups are disabled.
4491 | network.IDN_show_punycode | boolean | Firefox 68, Firefox ESR 68 | false
4492 | &nbsp;&nbsp;&nbsp;&nbsp;If true, display the punycode version of internationalized domain names.
4493 | places.history.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4494 | &nbsp;&nbsp;&nbsp;&nbsp;If false, history is not enabled.
4495 | print.save_print_settings | boolean | Firefox 70, Firefox ESR 68.2 | true
4496 | &nbsp;&nbsp;&nbsp;&nbsp;If false, print settings are not saved between jobs.
4497 | security.default_personal_cert | string | Firefox 68, Firefox ESR 68 | Ask Every Time
4498 | &nbsp;&nbsp;&nbsp;&nbsp;If set to Select Automatically, Firefox automatically chooses the default personal certificate.
4499 | security.mixed_content.block_active_content | boolean | Firefox 70, Firefox ESR 68.2 | true
4500 | &nbsp;&nbsp;&nbsp;&nbsp;If false, mixed active content (HTTP and HTTPS) is not blocked.
4501 | security.osclientcerts.autoload | boolean | Firefox 72 (Windows), Firefox 75 (macOS)  | false
4502 | &nbsp;&nbsp;&nbsp;&nbsp;If true, client certificates are loaded from the operating system certificate store.
4503 | security.ssl.errorReporting.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4504 | &nbsp;&nbsp;&nbsp;&nbsp;If false, SSL errors cannot be sent to Mozilla.
4505 | security.tls.hello_downgrade_check | boolean | Firefox 72, Firefox ESR 68.4 | true
4506 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the TLS 1.3 downgrade check is disabled.
4507 | ui.key.menuAccessKeyFocuses | boolean | Firefox 68, Firefox ESR 68 | true
4508 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the Alt key doesn't show the menubar on Windows.
4509 | widget.content.gtk-theme-override | string | Firefox 72, Firefox ESR 68.4 (Linux only) | N/A
4510 | &nbsp;&nbsp;&nbsp;&nbsp;If set, overrides the GTK theme for widgets.
4511 #### Windows (GPO)
4512 ```
4513 Software\Policies\Mozilla\Firefox\Preferences\boolean_preference_name = 0x1 | 0x0
4514 Software\Policies\Mozilla\Firefox\Preferences\string_preference_name = "string_value"
4515 ```
4516 #### Windows (Intune)
4517 OMA-URI: (periods are replaced by underscores)
4518 ```
4519 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Preferences/boolean_preference_name
4520 ```
4521 Value (string):
4522 ```
4523 <enabled/> or <disabled/>
4524 ```
4525 OMA-URI: (periods are replaced by underscores)
4526 ```
4527 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Preferences/string_preference_name
4528 ```
4529 Value (string):
4530 ```
4531 <enabled/>
4532 <data id="Preferences_String" value="string_value"/>
4533 ```
4534 #### macOS
4535 ```
4536 <dict>
4537   <key>Preferences</key>
4538   <dict>
4539     <key>boolean_preference_name</key>
4540     <true/> | <false/>
4541     <key>string_preference_name</key>
4542     <string>string_value</string>
4543   </dict>
4544 </dict>
4545 ```
4546 #### policies.json
4547 ```
4548 {
4549   "policies": {
4550     "Preferences": {
4551       "boolean_preference_name": true | false,
4552       "string_preference_name": "string_value"
4553     }
4554   }
4555 }
4556 ```
4557 ### PrimaryPassword
4558 Require or prevent using a primary (formerly master) password.
4559
4560 If this value is true, a primary password is required. If this value is false, it works the same as if [`DisableMasterPasswordCreation`](#disablemasterpasswordcreation) was true and removes the primary password functionality.
4561
4562 If both DisableMasterPasswordCreation and PrimaryPassword are used, DisableMasterPasswordCreation takes precedent.
4563
4564 **Compatibility:** Firefox 79, Firefox ESR 78.1\
4565 **CCK2 Equivalent:** `noMasterPassword`\
4566 **Preferences Affected:** N/A
4567
4568 #### Windows (GPO)
4569 ```
4570 Software\Policies\Mozilla\Firefox\PrimaryPassword = 0x1 | 0x0
4571 ```
4572 #### Windows (Intune)
4573 OMA-URI:
4574 ```
4575 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PrimaryPassword
4576 ```
4577 Value (string):
4578 ```
4579 <enabled/> or <disabled/>
4580 ```
4581 #### macOS
4582 ```
4583 <dict>
4584   <key>PrimaryPassword</key>
4585   <true/> | <false/>
4586 </dict>
4587 ```
4588 #### policies.json
4589 ```
4590 {
4591   "policies": {
4592     "PrimaryPassword": true | false
4593   }
4594 }
4595 ```
4596 ### PromptForDownloadLocation
4597 Ask where to save each file before downloading.
4598
4599 **Compatibility:** Firefox 68, Firefox ESR 68\
4600 **CCK2 Equivalent:** N/A\
4601 **Preferences Affected:** `browser.download.useDownloadDir`
4602
4603 #### Windows (GPO)
4604 ```
4605 Software\Policies\Mozilla\Firefox\PromptForDownloadLocation = 0x1 | 0x0
4606 ```
4607 #### Windows (Intune)
4608 OMA-URI:
4609 ```
4610 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PromptForDownloadLocation
4611 ```
4612 Value (string):
4613 ```
4614 <enabled/> or <disabled/>
4615 ```
4616 #### macOS
4617 ```
4618 <dict>
4619   <key>PromptForDownloadLocation</key>
4620   <true/> | <false/>
4621 </dict>
4622 ```
4623 #### policies.json
4624 ```
4625 {
4626   "policies": {
4627     "PromptForDownloadLocation": true | false
4628   }
4629 }
4630 ```
4631 ### Proxy
4632 Configure proxy settings. These settings correspond to the connection settings in Firefox preferences.
4633 To specify ports, append them to the hostnames with a colon (:).
4634
4635 `Mode` is the proxy method being used.
4636
4637 `Locked` is whether or not proxy settings can be changed.
4638
4639 `HTTPProxy` is the HTTP proxy server.
4640
4641 `UseHTTPProxyForAllProtocols` is whether or not the HTTP proxy should be used for all other proxies.
4642
4643 `SSLProxy` is the SSL proxy server.
4644
4645 `FTPProxy` is the FTP proxy server.
4646
4647 `SOCKSProxy` is the SOCKS proxy server
4648
4649 `SOCKSVersion` is the SOCKS version (4 or 5)
4650
4651 `Passthrough` is list of hostnames or IP addresses that will not be proxied. Use `<local>` to bypass proxying for all hostnames which do not contain periods.
4652
4653 `AutoConfigURL` is a  URL for proxy configuration (only used if Mode is autoConfig).
4654
4655 `AutoLogin` means do not prompt for authentication if password is saved.
4656
4657 `UseProxyForDNS` to use proxy DNS when using SOCKS v5.
4658
4659 **Compatibility:** Firefox 60, Firefox ESR 60\
4660 **CCK2 Equivalent:** `networkProxy*`\
4661 **Preferences Affected:** `network.proxy.type`, `network.proxy.autoconfig_url`, `network.proxy.socks_remote_dns`, `signon.autologin.proxy`, `network.proxy.socks_version`, `network.proxy.no_proxies_on`, `network.proxy.share_proxy_settings`, `network.proxy.http`, `network.proxy.http_port`, `network.proxy.ftp`, `network.proxy.ftp_port`, `network.proxy.ssl`, `network.proxy.ssl_port`, `network.proxy.socks`, `network.proxy.socks_port`
4662
4663 #### Windows (GPO)
4664 ```
4665 Software\Policies\Mozilla\Firefox\Proxy\Mode = "none" | "system" | "manual" | "autoDetect" | "autoConfig"
4666 Software\Policies\Mozilla\Firefox\Proxy\Locked = 0x1 | 0x0
4667 Software\Policies\Mozilla\Firefox\=Proxy\HTTPProxy = https://httpproxy.example.com
4668 Software\Policies\Mozilla\Firefox\Proxy\UseHTTPProxyForAllProtocols = 0x1 | 0x0
4669 Software\Policies\Mozilla\Firefox\Proxy\SSLProxy = https://sslproxy.example.com
4670 Software\Policies\Mozilla\Firefox\Proxy\FTPProxy = https://ftpproxy.example.com
4671 Software\Policies\Mozilla\Firefox\Proxy\SOCKSProxy = https://socksproxy.example.com
4672 Software\Policies\Mozilla\Firefox\Proxy\SOCKSVersion = 0x4 | 0x5
4673 Software\Policies\Mozilla\Firefox\Proxy\Passthrough = <local>
4674 Software\Policies\Mozilla\Firefox\Proxy\AutoConfigURL = URL_TO_AUTOCONFIG
4675 Software\Policies\Mozilla\Firefox\Proxy\AutoLogin = 0x1 | 0x0
4676 Software\Policies\Mozilla\Firefox\Proxy\UseProxyForDNS = 0x1 | 0x0
4677 ```
4678 #### Windows (Intune)
4679 OMA-URI:
4680 ```
4681 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Proxy
4682 ```
4683 Value (string):
4684 ```
4685 <enabled/>
4686 <data id="ProxyLocked" value="true | false"/>
4687 <data id="ConnectionType" value="none | system | manual | autoDetect | autoConfig"/>
4688 <data id="HTTPProxy" value="https://httpproxy.example.com"/>
4689 <data id="UseHTTPProxyForAllProtocols" value="true | false"/>
4690 <data id="SSLProxy" value="https://sslproxy.example.com"/>
4691 <data id="FTPProxy" value="https://ftpproxy.example.com"/>
4692 <data id="SOCKSProxy" value="https://socksproxy.example.com"/>
4693 <data id="SOCKSVersion" value="4 | 5"/>
4694 <data id="AutoConfigURL" value="URL_TO_AUTOCONFIG"/>
4695 <data id="Passthrough" value="<local>"/>
4696 <data id="AutoLogin" value="true | false"/>
4697 <data id="UseProxyForDNS" value="true | false"/>
4698 ```
4699 #### macOS
4700 ```
4701 <dict>
4702   <key>Proxy</key>
4703   <dict>
4704     <key>Mode</key>
4705     <string>none | system | manual | autoDetect | autoConfig</string>
4706     <key>Locked</key>
4707     <true> | </false>
4708     <key>HTTPProxy</key>
4709     <string>https://httpproxy.example.com</string>
4710     <key>UseHTTPProxyForAllProtocols</key>
4711     <true> | </false>
4712     <key>SSLProxy</key>
4713     <string>https://sslproxy.example.com</string>
4714     <key>FTPProxy</key>
4715     <string>https://ftpproxy.example.com</string>
4716     <key>SOCKSProxy</key>
4717     <string>https://socksproxy.example.com</string>
4718     <key>SOCKSVersion</key>
4719     <string>4 | 5</string>
4720     <key>Passthrough</key>
4721     <string>&lt;local>&gt;</string>
4722     <key>AutoConfigURL</key>
4723     <string>URL_TO_AUTOCONFIG</string>
4724     <key>AutoLogin</key>
4725     <true> | </false>
4726     <key>UseProxyForDNS</key>
4727     <true> | </false>
4728   </dict>
4729 </dict>
4730 ```
4731 #### policies.json
4732 ```
4733 {
4734   "policies": {
4735     "Proxy": {
4736       "Mode": "none" | "system" | "manual" | "autoDetect" | "autoConfig",
4737       "Locked": true | false,
4738       "HTTPProxy": "hostname",
4739       "UseHTTPProxyForAllProtocols": true | false,
4740       "SSLProxy": "hostname",
4741       "FTPProxy": "hostname",
4742       "SOCKSProxy": "hostname",
4743       "SOCKSVersion": 4 | 5,
4744       "Passthrough": "<local>",
4745       "AutoConfigURL": "URL_TO_AUTOCONFIG",
4746       "AutoLogin": true | false,
4747       "UseProxyForDNS": true | false
4748     }
4749   }
4750 }
4751 ```
4752 ### RequestedLocales
4753 Set the the list of requested locales for the application in order of preference. It will cause the corresponding language pack to become active.
4754
4755 Note: For Firefox 68, this can now be a string so that you can specify an empty value.
4756
4757 **Compatibility:** Firefox 64, Firefox ESR 60.4, Updated in Firefox 68, Firefox ESR 68\
4758 **CCK2 Equivalent:** N/A\
4759 **Preferences Affected:** N/A
4760 #### Windows (GPO)
4761 ```
4762 Software\Policies\Mozilla\Firefox\RequestedLocales\1 = "de"
4763 Software\Policies\Mozilla\Firefox\RequestedLocales\2 = "en-US"
4764
4765 or
4766
4767 Software\Policies\Mozilla\Firefox\RequestedLocales = "de,en-US"
4768 ```
4769 #### Windows (Intune)
4770 OMA-URI:
4771 ```
4772 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/RequestedLocalesString
4773 ```
4774 Value (string):
4775 ```
4776 <enabled/>
4777 <data id="Preferences_String" value="de,en-US"/>
4778 ```
4779 #### macOS
4780 ```
4781 <dict>
4782   <key>RequestedLocales</key>
4783   <array>
4784     <string>de</string>
4785     <string>en-US</string>
4786   </array>
4787 </dict>
4788
4789 or
4790
4791 <dict>
4792   <key>RequestedLocales</key>
4793   <string>de,en-US</string>
4794 </dict>
4795
4796 ```
4797 #### policies.json
4798 ```
4799 {
4800   "policies": {
4801     "RequestedLocales": ["de", "en-US"]
4802   }
4803 }
4804
4805 or
4806
4807 {
4808   "policies": {
4809     "RequestedLocales": "de,en-US"
4810   }
4811 }
4812 ```
4813 <a name="SanitizeOnShutdown"></a>
4814
4815 ### SanitizeOnShutdown (Selective)
4816 Clear data on shutdown. Choose from Cache, Cookies, Download History, Form & Search History, Browsing History, Active Logins, Site Preferences and Offline Website Data.
4817
4818 Previously, these values were always locked. Starting with Firefox 74 and Firefox ESR 68.6, you can use the `Locked` option to either keep the values unlocked (set it to false), or lock only the values you set (set it to true). If you want the old behavior of locking everything, do not set `Locked` at all.
4819
4820 **Compatibility:** Firefox 68, Firefox ESR 68 (Locked added in 74/68.6)\
4821 **CCK2 Equivalent:** N/A\
4822 **Preferences Affected:** `privacy.sanitize.sanitizeOnShutdown`, `privacy.clearOnShutdown.cache`, `privacy.clearOnShutdown.cookies`, `privacy.clearOnShutdown.downloads`, `privacy.clearOnShutdown.formdata`, `privacy.clearOnShutdown.history`, `privacy.clearOnShutdown.sessions`, `privacy.clearOnShutdown.siteSettings`, `privacy.clearOnShutdown.offlineApps`
4823 #### Windows (GPO)
4824 ```
4825 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Cache = 0x1 | 0x0
4826 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Cookies = 0x1 | 0x0
4827 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Downloads = 0x1 | 0x0
4828 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\FormData = 0x1 | 0x0
4829 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\History = 0x1 | 0x0
4830 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Sessions = 0x1 | 0x0
4831 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\SiteSettings = 0x1 | 0x0
4832 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\OfflineApps = 0x1 | 0x0
4833 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Locked = 0x1 | 0x0
4834 ```
4835 #### Windows (Intune)
4836 OMA-URI:
4837 ```
4838 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/A_SanitizeOnShutdown_Cache
4839 ```
4840 Value (string):
4841 ```
4842 <enabled/> or <disabled/>
4843 ```
4844 OMA-URI:
4845 ```
4846 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/B_SanitizeOnShutdown_Cookies
4847 ```
4848 Value (string):
4849 ```
4850 <enabled/> or <disabled/>
4851 ```
4852 OMA-URI:
4853 ```
4854 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/C_SanitizeOnShutdown_Downloads
4855 ```
4856 Value (string):
4857 ```
4858 <enabled/> or <disabled/>
4859 ```
4860 OMA-URI:
4861 ```
4862 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/D_SanitizeOnShutdown_FormData
4863 ```
4864 Value (string):
4865 ```
4866 <enabled/> or <disabled/>
4867 ```
4868 OMA-URI:
4869 ```
4870 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/E_SanitizeOnShutdown_History
4871 ```
4872 Value (string):
4873 ```
4874 <enabled/> or <disabled/>
4875 ```
4876 OMA-URI:
4877 ```
4878 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/F_SanitizeOnShutdown_Sessions
4879 ```
4880 Value (string):
4881 ```
4882 <enabled/> or <disabled/>
4883 ```
4884 OMA-URI:
4885 ```
4886 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/G_SanitizeOnShutdown_SiteSettings
4887 ```
4888 Value (string):
4889 ```
4890 <enabled/> or <disabled/>
4891 ```
4892 OMA-URI:
4893 ```
4894 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/H_SanitizeOnShutdown_OfflineApps
4895 ```
4896 Value (string):
4897 ```
4898 <enabled/> or <disabled/>
4899 ```
4900 OMA-URI:
4901 ```
4902 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/I_SanitizeOnShutdown_Locked
4903 ```
4904 Value (string):
4905 ```
4906 <enabled/> or <disabled/>
4907 ```
4908 #### macOS
4909 ```
4910 <dict>
4911   <key>SanitizeOnShutdown</key>
4912   <dict>
4913     <key>Cache</key>
4914     <true/> | <false/>
4915     <key>Cookies</key>
4916     <true/> | <false/>
4917     <key>Downloads</key>
4918     <true/> | <false/>
4919     <key>FormData</key>
4920     <true/> | <false/>
4921     <key>History</key>
4922     <true/> | <false/>
4923     <key>Sessions</key>
4924     <true/> | <false/>
4925     <key>SiteSettings</key>
4926     <true/> | <false/>
4927     <key>OfflineApps</key>
4928     <true/> | <false/>
4929     <key>Locked</key>
4930     <true/> | <false/>
4931   </dict>
4932 </dict>
4933 ```
4934 #### policies.json
4935 ```
4936 {
4937   "policies": {
4938     "SanitizeOnShutdown": {
4939       "Cache": true | false,
4940       "Cookies": true | false,
4941       "Downloads": true | false,
4942       "FormData": true | false,
4943       "History": true | false,
4944       "Sessions": true | false,
4945       "SiteSettings": true | false,
4946       "OfflineApps": true | false,
4947       "Locked": true | false
4948     }
4949   }
4950 }
4951 ```
4952 ### SanitizeOnShutdown (All)
4953 Clear all data on shutdown, including Browsing & Download History, Cookies, Active Logins, Cache, Form & Search History, Site Preferences and Offline Website Data.
4954
4955 **Compatibility:** Firefox 60, Firefox ESR 60\
4956 **CCK2 Equivalent:** N/A\
4957 **Preferences Affected:** `privacy.sanitize.sanitizeOnShutdown`, `privacy.clearOnShutdown.cache`, `privacy.clearOnShutdown.cookies`, `privacy.clearOnShutdown.downloads`, `privacy.clearOnShutdown.formdata`, `privacy.clearOnShutdown.history`, `privacy.clearOnShutdown.sessions`, `privacy.clearOnShutdown.siteSettings`, `privacy.clearOnShutdown.offlineApps`
4958 #### Windows (GPO)
4959 ```
4960 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown = 0x1 | 0x0
4961 ```
4962 #### Windows (Intune)
4963 OMA-URI:
4964 ```
4965 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/C_SanitizeOnShutdown
4966 ```
4967 Value (string):
4968 ```
4969 <enabled/> or <disabled/>
4970 ```
4971 #### macOS
4972 ```
4973 <dict>
4974   <key>SanitizeOnShutdown</key>
4975   <true/> | <false/>
4976 </dict>
4977 ```
4978 #### policies.json
4979 ```
4980 {
4981   "policies": {
4982     "SanitizeOnShutdown": true | false
4983   }
4984 }
4985 ```
4986 ### SearchBar
4987 Set whether or not search bar is displayed.
4988
4989 **Compatibility:** Firefox 60, Firefox ESR 60\
4990 **CCK2 Equivalent:** `showSearchBar`\
4991 **Preferences Affected:** N/A
4992
4993 #### Windows (GPO)
4994 ```
4995 Software\Policies\Mozilla\Firefox\SearchBar = "unified" | "separate"
4996 ```
4997
4998 #### Windows (Intune)
4999 OMA-URI:
5000 ```
5001 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SearchBar
5002 ```
5003 Value (string):
5004 ```
5005 <enabled/>
5006 <data id="SearchBar" value="unified | separate"/>
5007 ```
5008 #### macOS
5009 ```
5010 <dict>
5011   <key>SearchBar</key>
5012   <string>unified | separate</string>
5013 </dict>
5014 ```
5015 #### policies.json
5016 ```
5017 {
5018   "policies": {
5019     "SearchBar": "unified" | "separate"
5020   }
5021 }
5022 ```
5023 <a name="SearchEngines"></a>
5024
5025 ### SearchEngines (This policy is only available on the ESR.)
5026
5027 ### SearchEngines | Add
5028
5029 Add new search engines. Although there are only five engines available in the ADMX template, there is no limit. To add more in the ADMX template, you can duplicate the XML.
5030
5031 This policy is only available on the ESR. `Name` and `URLTemplate` are required.
5032
5033 `Name` is the name of the search engine.
5034
5035 `URLTemplate` is the search URL with {searchTerms} to substitute for the search term.
5036
5037 `Method` is either GET or POST
5038
5039 `IconURL` is a URL for the icon to use.
5040
5041 `Alias` is a keyword to use for the engine.
5042
5043 `Description` is a description of the search engine.
5044
5045 `PostData` is the POST data as name value pairs separated by &.
5046
5047 `SuggestURLTemplate` is a search suggestions URL with {searchTerms} to substitute for the search term.
5048
5049 `Encoding` is the query charset for the engine. It defaults to UTF-8.
5050
5051 **Compatibility:** Firefox ESR 60 (POST support in Firefox ESR 68, Encoding support in Firefox 91)\
5052 **CCK2 Equivalent:** `searchplugins`\
5053 **Preferences Affected:** N/A
5054
5055 #### Windows (GPO)
5056 ```
5057 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Name = "Example1"
5058 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\URLTemplate = "https://www.example.org/q={searchTerms}"
5059 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Method = "GET" | "POST"
5060 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\IconURL = "https://www.example.org/favicon.ico"
5061 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Alias = "example"
5062 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Description = "Example Description"
5063 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\SuggestURLTemplate = "https://www.example.org/suggestions/q={searchTerms}"
5064 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\PostData = "name=value&q={searchTerms}"
5065 ```
5066 #### Windows (Intune)
5067 OMA-URI:
5068 ```
5069 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_1
5070 ```
5071 Value (string):
5072 ```
5073 <enabled/>
5074 <data id="SearchEngine_Name" value="Example1"/>
5075 <data id="SearchEngine_URLTemplate" value="https://www.example.org/q={searchTerms"/>
5076 <data id="SearchEngine_Method" value="GET | POST"/>
5077 <data id="SearchEngine_IconURL" value="https://www.example.org/favicon.ico"/>
5078 <data id="SearchEngine_Alias" value="example"/>
5079 <data id="SearchEngine_Description" value="Example Description"/>
5080 <data id="SearchEngine_SuggestURLTemplate" value="https://www.example.org/suggestions/q={searchTerms}"/>
5081 <data id="SearchEngine_PostData" value="name=value&amp;q={searchTerms}"/>
5082 ```
5083 #### macOS
5084 ```
5085 <dict>
5086   <key>SearchEngines</key>
5087   <dict>
5088     <key>Add</key>
5089     <array>
5090       <dict>
5091         <key>Name</key>
5092         <string>Example1</string>
5093         <key>URLTemplate</key>
5094         <string>https://www.example.org/q={searchTerms}</string>
5095         <key>Method</key>
5096         <string>GET | POST </string>
5097         <key>IconURL</key>
5098         <string>https://www.example.org/favicon.ico</string>
5099         <key>Alias</key>
5100         <string>example</string>
5101         <key>Description</key>
5102         <string>Example Description</string>
5103         <key>SuggestURLTemplate</key>
5104         <string>https://www.example.org/suggestions/q={searchTerms}</string>
5105         <key>PostData</key>
5106         <string>name=value&q={searchTerms}</string>
5107       </dict>
5108     <array>
5109   </dict>
5110 </dict>
5111 ```
5112 #### policies.json
5113 ```
5114 {
5115   "policies": {
5116     "SearchEngines": {
5117       "Add": [
5118         {
5119           "Name": "Example1",
5120           "URLTemplate": "https://www.example.org/q={searchTerms}",
5121           "Method": "GET" | "POST",
5122           "IconURL": "https://www.example.org/favicon.ico",
5123           "Alias": "example",
5124           "Description": "Description",
5125           "PostData": "name=value&q={searchTerms}",
5126           "SuggestURLTemplate": "https://www.example.org/suggestions/q={searchTerms}"
5127         }
5128       ]
5129     }
5130   }
5131 }
5132 ```
5133 ### SearchEngines | Default
5134
5135 Set the default search engine. This policy is only available on the ESR.
5136
5137 **Compatibility:** Firefox ESR 60\
5138 **CCK2 Equivalent:** `defaultSearchEngine`\
5139 **Preferences Affected:** N/A
5140
5141 #### Windows (GPO)
5142 ```
5143 Software\Policies\Mozilla\Firefox\SearchEngines\Default = NAME_OF_SEARCH_ENGINE
5144 ```
5145 #### Windows (Intune)
5146 OMA-URI:
5147 ```
5148 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_Default
5149 ```
5150 Value (string):
5151 ```
5152 <enabled/>
5153 <data id="SearchEngines_Default" value="NAME_OF_SEARCH_ENGINE"/>
5154 ```
5155 #### macOS
5156 ```
5157 <dict>
5158   <key>SearchEngines</key>
5159   <dict>
5160     <key>Default</key>
5161     <string>NAME_OF_SEARCH_ENGINE</string>
5162   </dict>
5163 </dict>
5164 ```
5165 #### policies.json
5166 ```
5167 {
5168   "policies": {
5169     "SearchEngines": {
5170       "Default": "NAME_OF_SEARCH_ENGINE"
5171     }
5172   }
5173 }
5174 ```
5175 ### SearchEngines | PreventInstalls
5176
5177 Prevent installing search engines from webpages.
5178
5179 **Compatibility:** Firefox ESR 60\
5180 **CCK2 Equivalent:** `disableSearchEngineInstall`\
5181 **Preferences Affected:** N/A
5182
5183 #### Windows (GPO)
5184 ```
5185 Software\Policies\Mozilla\Firefox\SearchEngines\PreventInstalls = 0x1 | 0x0
5186 ```
5187 #### Windows (Intune)
5188 OMA-URI:
5189 ```
5190 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_PreventInstalls
5191 ```
5192 Value (string):
5193 ```
5194 <enabled/> or <disabled/>
5195 ```
5196 #### macOS
5197 ```
5198 <dict>
5199   <key>SearchEngines</key>
5200   <dict>
5201     <key>PreventInstalls</key>
5202     <true/> | <false/>
5203   </dict>
5204 </dict>
5205 ```
5206 #### policies.json
5207 ```
5208 {
5209   "policies": {
5210     "SearchEngines": {
5211       "PreventInstalls": true | false
5212     }
5213   }
5214 }
5215 ```
5216 ### SearchEngines | Remove
5217
5218 Hide built-in search engines. This policy is only available on the ESR.
5219
5220 **Compatibility:** Firefox ESR 60.2\
5221 **CCK2 Equivalent:** `removeDefaultSearchEngines` (removed all built-in engines)\
5222 **Preferences Affected:** N/A
5223
5224 #### Windows (GPO)
5225 ```
5226 Software\Policies\Mozilla\Firefox\SearchEngines\Remove\1 = NAME_OF_SEARCH_ENGINE
5227 ```
5228 #### Windows (Intune)
5229 OMA-URI:
5230 ```
5231 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_Remove
5232 ```
5233 Value (string):
5234 ```
5235 <enabled/>
5236 <data id="SearchEngines_Remove" value="1&#xF000;NAME_OF_SEARCH_ENGINE"/>
5237 ```
5238 #### macOS
5239 ```
5240 <dict>
5241   <key>SearchEngines</key>
5242   <dict>
5243     <key>Remove</key>
5244     <array>
5245       <string>NAME_OF_SEARCH_ENGINE</string>
5246     </array>
5247   </dict>
5248 </dict>
5249 ```
5250 #### policies.json
5251 ```
5252 {
5253   "policies": {
5254     "SearchEngines": {
5255       "Remove": ["NAME_OF_SEARCH_ENGINE"]
5256     }
5257   }
5258 }
5259 ```
5260 ### SearchSuggestEnabled
5261
5262 Enable search suggestions.
5263
5264 **Compatibility:** Firefox 68, Firefox ESR 68\
5265 **CCK2 Equivalent:** N/A\
5266 **Preferences Affected:** `browser.urlbar.suggest.searches`, `browser.search.suggest.enabled`
5267
5268 #### Windows (GPO)
5269 ```
5270 Software\Policies\Mozilla\Firefox\SearchSuggestEnabled = 0x1 | 0x0
5271 ```
5272 #### Windows (Intune)
5273 OMA-URI:
5274 ```
5275 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchSuggestEnabled
5276 ```
5277 Value (string):
5278 ```
5279 <enabled/> or <disabled/>
5280 ```
5281 #### macOS
5282 ```
5283 <dict>
5284   <key>SearchSuggestEnabled</key>
5285   <true/> | <false/>
5286 </dict>
5287 ```
5288 #### policies.json
5289 ```
5290 {
5291   "policies": {
5292     "SearchSuggestEnabled": true | false
5293   }
5294 }
5295 ```
5296 ### SecurityDevices
5297
5298 Install PKCS #11 modules.
5299
5300 **Compatibility:** Firefox 64, Firefox ESR 60.4\
5301 **CCK2 Equivalent:** `certs.devices`\
5302 **Preferences Affected:** N/A
5303
5304 #### Windows (GPO)
5305 ```
5306 Software\Policies\Mozilla\Firefox\SecurityDevices\NAME_OF_DEVICE = PATH_TO_LIBRARY_FOR_DEVICE
5307 ```
5308 #### Windows (Intune)
5309 OMA-URI:
5310 ```
5311 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SecurityDevices
5312 ```
5313 Value (string):
5314 ```
5315 <enabled/>
5316 <data id="SecurityDevices" value="NAME_OF_DEVICE&#xF000;PATH_TO_LIBRARY_FOR_DEVICE"/>
5317 ```
5318 #### macOS
5319 ```
5320 <dict>
5321   <key>SecurityDevices</key>
5322   <dict>
5323     <key>NAME_OF_DEVICE</key>
5324     <string>PATH_TO_LIBRARY_FOR_DEVICE</string>
5325   </dict>
5326 </dict>
5327 ```
5328
5329 #### policies.json
5330 ```
5331 {
5332   "policies": {
5333     "SecurityDevices": {
5334       "NAME_OF_DEVICE": "PATH_TO_LIBRARY_FOR_DEVICE"
5335     }
5336   }
5337 }
5338 ```
5339 ### ShowHomeButton
5340 Show the home button on the toolbar.
5341
5342 Future versions of Firefox will not show the home button by default.
5343
5344 **Compatibility:** Firefox 88, Firefox ESR 78.10\
5345 **CCK2 Equivalent:** N/A\
5346 **Preferences Affected:** N/A
5347
5348 #### Windows (GPO)
5349 ```
5350 Software\Policies\Mozilla\Firefox\ShowHomeButton = 0x1 | 0x0
5351 ```
5352 #### Windows (Intune)
5353 OMA-URI:
5354 ```
5355 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/Homepage_ShowHomeButton
5356 ```
5357 Value (string):
5358 ```
5359 <enabled/> or <disabled/>
5360 ```
5361 #### macOS
5362 ```
5363 <dict>
5364   <key>ShowHomeButton</key>
5365   <true/> | <false/>
5366 </dict>
5367 ```
5368 #### policies.json
5369 ```
5370 {
5371   "policies": {
5372     "ShowHomeButton": true | false
5373   }
5374 }
5375 ```
5376 ### SSLVersionMax
5377
5378 Set and lock the maximum version of TLS.
5379
5380 **Compatibility:** Firefox 66, Firefox ESR 60.6\
5381 **CCK2 Equivalent:** N/A\
5382 **Preferences Affected:** `security.tls.version.max`
5383
5384 #### Windows (GPO)
5385 ```
5386 Software\Policies\Mozilla\Firefox\SSLVersionMax = "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
5387 ```
5388 #### Windows (Intune)
5389 OMA-URI:
5390 ```
5391 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SSLVersionMax
5392 ```
5393 Value (string):
5394 ```
5395 <enabled/>
5396 <data id="SSLVersion" value="tls1 | tls1.2 | tls1.3"/>
5397 ```
5398 #### macOS
5399 ```
5400 <dict>
5401   <key>SSLVersionMax</key>
5402   <string>tls1 | tls1.1 | tls1.2 | tls1.3</string>
5403 </dict>
5404 ```
5405
5406 #### policies.json
5407 ```
5408 {
5409   "policies": {
5410     "SSLVersionMax": "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
5411   }
5412 }
5413 ```
5414 ### SSLVersionMin
5415
5416 Set and lock the minimum version of TLS.
5417
5418 **Compatibility:** Firefox 66, Firefox ESR 60.6\
5419 **CCK2 Equivalent:** N/A\
5420 **Preferences Affected:** `security.tls.version.min`
5421
5422 #### Windows (GPO)
5423 ```
5424 Software\Policies\Mozilla\Firefox\SSLVersionMin = "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
5425 ```
5426 #### Windows (Intune)
5427 OMA-URI:
5428 ```
5429 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SSLVersionMin
5430 ```
5431 Value (string):
5432 ```
5433 <enabled/>
5434 <data id="SSLVersion" value="tls1 | tls1.2 | tls1.3"/>
5435 ```
5436 #### macOS
5437 ```
5438 <dict>
5439   <key>SSLVersionMin</key>
5440   <string>tls1 | tls1.1 | tls1.2 | tls1.3</string>
5441 </dict>
5442 ```
5443
5444 #### policies.json
5445 ```
5446 {
5447   "policies": {
5448     "SSLVersionMin": "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
5449   }
5450 }
5451 ```
5452 ### SupportMenu
5453 Add a menuitem to the help menu for specifying support information.
5454
5455 **Compatibility:** Firefox 68.0.1, Firefox ESR 68.0.1\
5456 **CCK2 Equivalent:** helpMenu\
5457 **Preferences Affected:** N/A
5458
5459 #### Windows (GPO)
5460 ```
5461 Software\Policies\Mozilla\Firefox\SupportMenu\Title = "Support Menu"
5462 Software\Policies\Mozilla\Firefox\SupportMenu\URL = "http://example.com/support"
5463 Software\Policies\Mozilla\Firefox\SupportMenu\AccessKey = "S"
5464 ```
5465 #### Windows (Intune)
5466 OMA-URI:
5467 ```
5468 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SupportMenu
5469 ```
5470 Value (string):
5471 ```
5472 <enabled/>
5473 <data id="SupportMenuTitle" value="Support Menu"/>
5474 <data id="SupportMenuURL" value="http://example.com/support"/>
5475 <data id="SupportMenuAccessKey" value="S">
5476 ```
5477 #### macOS
5478 ```
5479 <dict>
5480   <key>SupportMenu</key>
5481   <dict>
5482     <key>Title</key>
5483     <string>SupportMenu</string>
5484     <key>URL</key>
5485     <string>http://example.com/support</string>
5486     <key>AccessKey</key>
5487     <string>S</string>
5488   </dict>
5489 </dict>
5490 ```
5491 #### policies.json
5492 ```
5493 {
5494   "policies": {
5495     "SupportMenu": {
5496       "Title": "Support Menu",
5497       "URL": "http://example.com/support",
5498       "AccessKey": "S"
5499     }
5500   }
5501 }
5502 ```
5503 ### UserMessaging
5504
5505 Prevent Firefox from messaging the user in certain situations.
5506
5507 `WhatsNew` Remove the "What's New" icon and menuitem.
5508
5509 `ExtensionRecommendations` If false, don't recommend extensions while the user is visiting web pages.
5510
5511 `FeatureRecommendations` If false, don't recommend browser features.
5512
5513 `UrlbarInterventions` If false, Don't offer Firefox specific suggestions in the URL bar.
5514
5515 `SkipOnboarding` If true, don't show onboarding messages on the new tab page.
5516
5517 **Compatibility:** Firefox 75, Firefox ESR 68.7\
5518 **CCK2 Equivalent:** N/A\
5519 **Preferences Affected:** `browser.messaging-system.whatsNewPanel.enabled`, `browser.newtabpage.activity-stream.asrouter.userprefs.cfr.addons`, `browser.newtabpage.activity-stream.asrouter.userprefs.cfr.features`, `browser.aboutwelcome.enabled`
5520
5521 #### Windows (GPO)
5522 ```
5523 Software\Policies\Mozilla\Firefox\UserMessaging\WhatsNew = 0x1 | 0x0
5524 Software\Policies\Mozilla\Firefox\UserMessaging\ExtensionRecommendations = 0x1 | 0x0
5525 Software\Policies\Mozilla\Firefox\UserMessaging\FeatureRecommendations = 0x1 | 0x0
5526 Software\Policies\Mozilla\Firefox\UserMessaging\UrlbarInterventions = 0x1 | 0x0
5527 Software\Policies\Mozilla\Firefox\UserMessaging\SkipOnboarding = 0x1 | 0x0
5528 ```
5529 #### Windows (Intune)
5530 OMA-URI:
5531 ```
5532 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_WhatsNew
5533 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_ExtensionRecommendations
5534 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_FeatureRecommendations
5535 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_UrlbarInterventions
5536 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_SkipOnboarding
5537 ```
5538 Value (string):
5539 ```
5540 <enabled/> or <disabled/>
5541 ```
5542 #### macOS
5543 ```
5544 <dict>
5545   <key>UserMessaging</key>
5546   <dict>
5547     <key>WhatsNew</key>
5548     <true/> | <false/>
5549     <key>ExtensionRecommendations</key>
5550     <true/> | <false/>
5551     <key>FeatureRecommendations</key>
5552     <true/> | <false/>
5553     <key>UrlbarInterventions</key>
5554     <true/> | <false/>
5555     <key>SkipOnboarding</key>
5556     <true/> | <false/>
5557   </dict>
5558 </dict>
5559 ```
5560 #### policies.json
5561 ```
5562 {
5563   "policies": {
5564     "UserMessaging": {
5565       "WhatsNew": true | false,
5566       "ExtensionRecommendations": true | false,
5567       "FeatureRecommendations": true | false,
5568       "UrlbarInterventions": true | false
5569       "SkipOnboarding": true | false
5570     }
5571   }
5572 }
5573 ```
5574 ### WebsiteFilter
5575 Block websites from being visited. The parameters take an array of Match Patterns, as documented in https://developer.mozilla.org/en-US/Add-ons/WebExtensions/Match_patterns.
5576 The arrays are limited to 1000 entries each.
5577
5578 If you want to block all URLs, you can use `<all_urls>` or `*://*/*`. You can't have just a `*` on the right side.
5579
5580 For specific protocols, use `https://*/*` or `http://*/*`.
5581
5582 As of Firefox 83 and Firefox ESR 78.5, file URLs are supported.
5583
5584 **Compatibility:** Firefox 60, Firefox ESR 60\
5585 **CCK2 Equivalent:** N/A\
5586 **Preferences Affected:** N/A
5587
5588 #### Windows (GPO)
5589 ```
5590 Software\Policies\Mozilla\Firefox\WebsiteFilter\Block\1 = "<all_urls>"
5591 Software\Policies\Mozilla\Firefox\WebsiteFilter\Exceptions\1 = "http://example.org/*"
5592 ```
5593 #### Windows (Intune)
5594 OMA-URI:
5595 ```
5596 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/B_WebsiteFilter_Block
5597 ```
5598 Value (string):
5599 ```
5600 <enabled/> <data id="WebsiteFilter" value="1&#xF000;&#60;all_urls&#62;"/>
5601 ```
5602 OMA-URI:
5603 ```
5604 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/B_WebsiteFilter_Exceptions
5605 ```
5606 Value (string):
5607 ```
5608 <enabled/>
5609 <data id="WebsiteFilter" value="1&#xF000;http://example.org/*"/>
5610 ```
5611 #### macOS
5612 ```
5613 <dict>
5614   <key>WebsiteFilter</key>
5615   <dict>
5616     <key>Block</key>
5617     <array>
5618       <string><all_urls></string>
5619     </array>
5620     <key>Exceptions</key>
5621     <array>
5622       <string>http://example.org/*</string>
5623     </array>
5624   </dict>
5625
5626 </dict>
5627 ```
5628 #### policies.json
5629 ```
5630 {
5631   "policies": {
5632     "WebsiteFilter": {
5633       "Block": ["<all_urls>"],
5634       "Exceptions": ["http://example.org/*"]
5635     }
5636   }
5637 }
5638 ```
5639 ### WindowsSSO
5640 Allow Windows single sign-on for Microsoft, work, and school accounts.
5641
5642 If this policy is set to true, Firefox will use credentials stored in Windows to sign in to Microsoft, work, and school accounts.
5643
5644 **Compatibility:** Firefox 91\
5645 **CCK2 Equivalent:** N/A\
5646 **Preferences Affected:** `network.http.windows-sso.enabled`
5647
5648 #### Windows (GPO)
5649 ```
5650 Software\Policies\Mozilla\Firefox\WindowsSSO = 0x1 | 0x0
5651 ```
5652 #### Windows (Intune)
5653 OMA-URI:
5654 ```
5655 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/WindowsSSO
5656 ```
5657 Value (string):
5658 ```
5659 <enabled/> or <disabled/>
5660 ```
5661 #### policies.json
5662 ```
5663 {
5664   "policies": {
5665     "WindowsSSO": true | false
5666   }
5667 }
5668 ```