README.md

   1 **These policies are in active development and so might contain changes that do not work with current versions of Firefox.**
   2
   3 **You should use the [officially released versions](https://github.com/mozilla/policy-templates/releases) if you are deploying changes.**
   4
   5 Policies can be specified using the [Group Policy templates on Windows](https://github.com/mozilla/policy-templates/tree/master/windows), [Intune on Windows](https://support.mozilla.org/kb/managing-firefox-intune), [configuration profiles on macOS](https://github.com/mozilla/policy-templates/tree/master/mac), or by creating a file called `policies.json`. On Windows, create a directory called `distribution` where the EXE is located and place the file there. On Mac, the file goes into `Firefox.app/Contents/Resources/distribution`.  On Linux, the file goes into `firefox/distribution`, where `firefox` is the installation directory for firefox, which varies by distribution or you can specify system-wide policy by placing the file in `/etc/firefox/policies`.
   6
   7 | Policy Name | Description
   8 | --- | --- |
   9 | **[`3rdparty`](#3rdparty)** | Set policies that WebExtensions can access via chrome.storage.managed.
  10 | **[`AllowedDomainsForApps`](#alloweddomainsforapps)** | Define domains allowed to access Google Workspace.
  11 | **[`AppAutoUpdate`](#appautoupdate)** | Enable or disable automatic application update.
  12 | **[`AppUpdateURL`](#appupdateurl)** | Change the URL for application update.
  13 | **[`Authentication`](#authentication)** | Configure sites that support integrated authentication.
  14 | **[`AutoLaunchProtocolsFromOrigins`](#autolaunchprotocolsfromorigins)** | Define a list of external protocols that can be used from listed origins without prompting the user.
  15 | **[`BackgroundAppUpdate`](#backgroundappupdate)** | Enable or disable the background updater (Windows only).
  16 | **[`BlockAboutAddons`](#blockaboutaddons)** | Block access to the Add-ons Manager (about:addons).
  17 | **[`BlockAboutConfig`](#blockaboutconfig)** | Block access to about:config.
  18 | **[`BlockAboutProfiles`](#blockaboutprofiles)** | Block access to About Profiles (about:profiles).
  19 | **[`BlockAboutSupport`](#blockaboutsupport)** | Block access to Troubleshooting Information (about:support).
  20 | **[`Bookmarks`](#bookmarks)** | Add bookmarks in either the bookmarks toolbar or menu.
  21 | **[`CaptivePortal`](#captiveportal)** | Enable or disable the detection of captive portals.
  22 | **[`Certificates`](#certificates)** |
  23 | **[`Certificates -> ImportEnterpriseRoots`](#certificates--importenterpriseroots)** | Trust certificates that have been added to the operating system certificate store by a user or administrator.
  24 | **[`Certificates -> Install`](#certificates--install)** | Install certificates into the Firefox certificate store.
  25 | **[`Cookies`](#cookies)** | Configure cookie preferences.
  26 | **[`DefaultDownloadDirectory`](#defaultdownloaddirectory)** | Set the default download directory.
  27 | **[`DisableAppUpdate`](#disableappupdate)** | Turn off application updates.
  28 | **[`DisableBuiltinPDFViewer`](#disablebuiltinpdfviewer)** | Disable the built in PDF viewer.
  29 | **[`DisabledCiphers`](#disabledciphers)** | Disable ciphers.
  30 | **[`DisableDefaultBrowserAgent`](#disabledefaultbrowseragent)** | Prevent the default browser agent from taking any actions (Windows only).
  31 | **[`DisableDeveloperTools`](#disabledevelopertools)** | Remove access to all developer tools.
  32 | **[`DisableFeedbackCommands`](#disablefeedbackcommands)** | Disable the menus for reporting sites.
  33 | **[`DisableFirefoxAccounts`](#disablefirefoxaccounts)** | Disable Firefox Accounts integration (Sync).
  34 | **[`DisableFirefoxScreenshots`](#disablefirefoxscreenshots)** | Remove access to Firefox Screenshots.
  35 | **[`DisableFirefoxStudies`](#disablefirefoxstudies)** | Disable Firefox studies (Shield).
  36 | **[`DisableForgetButton`](#disableforgetbutton)** | Disable the "Forget" button.
  37 | **[`DisableFormHistory`](#disableformhistory)** | Turn off saving information on web forms and the search bar.
  38 | **[`DisableMasterPasswordCreation`](#disablemasterpasswordcreation)** | Remove the master password functionality.
  39 | **[`DisablePasswordReveal`](#disablepasswordreveal)** | Do not allow passwords to be revealed in saved logins.
  40 | **[`DisablePocket`](#disablepocket)** | Remove Pocket in the Firefox UI.
  41 | **[`DisablePrivateBrowsing`](#disableprivatebrowsing)** | Remove access to private browsing.
  42 | **[`DisableProfileImport`](#disableprofileimport)** | Disables the "Import data from another browser" option in the bookmarks window.
  43 | **[`DisableProfileRefresh`](#disableprofilerefresh)** | Disable the Refresh Firefox button on about:support and support.mozilla.org
  44 | **[`DisableSafeMode`](#disablesafemode)** | Disable safe mode within the browser.
  45 | **[`DisableSecurityBypass`](#disablesecuritybypass)** | Prevent the user from bypassing security in certain cases.
  46 | **[`DisableSetDesktopBackground`](#disablesetdesktopbackground)** | Remove the "Set As Desktop Background..." menuitem when right clicking on an image.
  47 | **[`DisableSystemAddonUpdate`](#disablesystemaddonupdate)** | Prevent system add-ons from being installed or updated.
  48 | **[`DisableTelemetry`](#disabletelemetry)** | DisableTelemetry
  49 | **[`DisplayBookmarksToolbar`](#displaybookmarkstoolbar)** | Set the initial state of the bookmarks toolbar.
  50 | **[`DisplayMenuBar`](#displaymenubar)** | Set the state of the menubar.
  51 | **[`DisplayMenuBar (Deprecated)`](#displaymenubar-deprecated)** | Set the initial state of the menubar.
  52 | **[`DNSOverHTTPS`](#dnsoverhttps)** | Configure DNS over HTTPS.
  53 | **[`DontCheckDefaultBrowser`](#dontcheckdefaultbrowser)** | Don't check if Firefox is the default browser at startup.
  54 | **[`DownloadDirectory`](#downloaddirectory)** | Set and lock the download directory.
  55 | **[`EnableTrackingProtection`](#enabletrackingprotection)** | Configure tracking protection.
  56 | **[`EncryptedMediaExtensions`](#encryptedmediaextensions)** | Enable or disable Encrypted Media Extensions and optionally lock it.
  57 | **[`EnterprisePoliciesEnabled`](#enterprisepoliciesenabled)** | Enable policy support on macOS.
  58 | **[`ExemptDomainFileTypePairsFromFileTypeDownloadWarnings`](#exemptdomainfiletypepairsfromfiletypedownloadwarnings)** | Disable warnings based on file extension for specific file types on domains.
  59 | **[`Extensions`](#extensions)** | Control the installation, uninstallation and locking of extensions.
  60 | **[`ExtensionSettings`](#extensionsettings)** | Manage all aspects of extensions.
  61 | **[`ExtensionUpdate`](#extensionupdate)** | Control extension updates.
  62 | **[`FirefoxHome`](#firefoxhome)** | Customize the Firefox Home page.
  63 | **[`FlashPlugin (Deprecated)`](#flashplugin-deprecated)** | Configure the default Flash plugin policy as well as origins for which Flash is allowed.
  64 | **[`Handlers`](#handlers)** | Configure default application handlers.
  65 | **[`HardwareAcceleration`](#hardwareacceleration)** | Control hardware acceleration.
  66 | **[`Homepage`](#homepage)** | Configure the default homepage and how Firefox starts.
  67 | **[`InstallAddonsPermission`](#installaddonspermission)** | Configure the default extension install policy as well as origins for extension installs are allowed.
  68 | **[`LegacyProfiles`](#legacyprofiles)** | Disable the feature enforcing a separate profile for each installation.
  69 | **[`LegacySameSiteCookieBehaviorEnabled`](#legacysamesitecookiebehaviorenabled)** | Enable default legacy SameSite cookie behavior setting.
  70 | **[`LegacySameSiteCookieBehaviorEnabledForDomainList`](#legacysamesitecookiebehaviorenabledfordomainlist)** | Revert to legacy SameSite behavior for cookies on specified sites.
  71 | **[`LocalFileLinks`](#localfilelinks)** | Enable linking to local files by origin.
  72 | **[`ManagedBookmarks`](#managedbookmarks)** | Configures a list of bookmarks managed by an administrator that cannot be changed by the user.
  73 | **[`ManualAppUpdateOnly`](#manualappupdateonly)** | Allow manual updates only and do not notify the user about updates.
  74 | **[`NetworkPrediction`](#networkprediction)** | Enable or disable network prediction (DNS prefetching).
  75 | **[`NewTabPage`](#newtabpage)** | Enable or disable the New Tab page.
  76 | **[`NoDefaultBookmarks`](#nodefaultbookmarks)** | Disable the creation of default bookmarks.
  77 | **[`OfferToSaveLogins`](#offertosavelogins)** | Control whether or not Firefox offers to save passwords.
  78 | **[`OfferToSaveLoginsDefault`](#offertosaveloginsdefault)** | Set the default value for whether or not Firefox offers to save passwords.
  79 | **[`OverrideFirstRunPage`](#overridefirstrunpage)** | Override the first run page.
  80 | **[`OverridePostUpdatePage`](#overridepostupdatepage)** | Override the upgrade page.
  81 | **[`PasswordManagerEnabled`](#passwordmanagerenabled)** | Remove (some) access to the password manager.
  82 | **[`PasswordManagerExceptions`](#passwordmanagerexceptions)** | Prevent Firefox from saving passwords for specific sites.
  83 | **[`PDFjs`](#pdfjs)** | Disable or configure PDF.js, the built-in PDF viewer.
  84 | **[`Permissions`](#permissions)** | Set permissions associated with camera, microphone, location, and notifications.
  85 | **[`PictureInPicture`](#pictureinpicture)** | Enable or disable Picture-in-Picture.
  86 | **[`PopupBlocking`](#popupblocking)** | Configure the default pop-up window policy as well as origins for which pop-up windows are allowed.
  87 | **[`Preferences`](#preferences)** | Set and lock preferences.
  88 | **[`Preferences (Deprecated)`](#preferences-deprecated)** | Set and lock some preferences.
  89 | **[`PrimaryPassword`](#primarypassword)** | Require or prevent using a primary (formerly master) password.
  90 | **[`PromptForDownloadLocation`](#promptfordownloadlocation)** | Ask where to save each file before downloading.
  91 | **[`Proxy`](#proxy)** | Configure proxy settings.
  92 | **[`RequestedLocales`](#requestedlocales)** | Set the the list of requested locales for the application in order of preference.
  93 | **[`SanitizeOnShutdown` (All)](#sanitizeonshutdown-all)** | Clear all data on shutdown.
  94 | **[`SanitizeOnShutdown` (Selective)](#sanitizeonshutdown-selective)** | Clear data on shutdown.
  95 | **[`SearchBar`](#searchbar)** | Set whether or not search bar is displayed.
  96 | **[`SearchEngines`](#searchengines-this-policy-is-only-available-on-the-esr)** |
  97 | **[`SearchEngines -> Add`](#searchengines--add)** | Add new search engines.
  98 | **[`SearchEngines -> Default`](#searchengines--default)** | Set the default search engine.
  99 | **[`SearchEngines -> PreventInstalls`](#searchengines--preventinstalls)** | Prevent installing search engines from webpages.
 100 | **[`SearchEngines -> Remove`](#searchengines--remove)** | Hide built-in search engines.
 101 | **[`SearchSuggestEnabled`](#searchsuggestenabled)** | Enable search suggestions.
 102 | **[`SecurityDevices`](#securitydevices)** | Install PKCS #11 modules.
 103 | **[`ShowHomeButton`](#showhomebutton)** | Show the home button on the toolbar.
 104 | **[`SSLVersionMax`](#sslversionmax)** | Set and lock the maximum version of TLS.
 105 | **[`SSLVersionMin`](#sslversionmin)** | Set and lock the minimum version of TLS.
 106 | **[`StartDownloadsInTempDirectory`](#startdownloadsintempdirectory)** | Force downloads to start off in a local, temporary location rather than the default download directory.
 107 | **[`SupportMenu`](#supportmenu)** | Add a menuitem to the help menu for specifying support information.
 108 | **[`UserMessaging`](#usermessaging)** | Don't show certain messages to the user.
 109 | **[`UseSystemPrintDialog`](#usesystemprintdialog)** | Print using the system print dialog instead of print preview.
 110 | **[`WebsiteFilter`](#websitefilter)** | Block websites from being visited.
 111 | **[`WindowsSSO`](#windowssso)** | Allow Windows single sign-on for Microsoft, work, and school accounts.
 112
 113 ### 3rdparty
 114
 115 Allow WebExtensions to configure policy. For more information, see [Adding policy support to your extension](https://extensionworkshop.com/documentation/enterprise/adding-policy-support-to-your-extension/).
 116
 117 For GPO and Intune, the extension developer should provide an ADMX file.
 118
 119 **Compatibility:** Firefox 68\
 120 **CCK2 Equivalent:** N/A\
 121 **Preferences Affected:** N/A
 122
 123 #### macOS
 124 ```
 125 <dict>
 126   <key>3rdparty</key>
 127   <dict>
 128     <key>Extensions</key>
 129     <dict>
 130       <key>uBlock0@raymondhill.net</key>
 131       <dict>
 132         <key>adminSettings</key>
 133         <dict>
 134           <key>selectedFilterLists</key>
 135           <array>
 136             <string>ublock-privacy</string>
 137             <string>ublock-badware</string>
 138             <string>ublock-filters</string>
 139             <string>user-filters</string>
 140           </array>
 141         </dict>
 142       </dict>
 143     </dict>
 144   </dict>
 145 </dict>
 146 ```
 147 #### policies.json
 148 ```
 149 {
 150   "policies": {
 151     "3rdparty": {
 152       "Extensions": {
 153         "uBlock0@raymondhill.net": {
 154           "adminSettings": {
 155             "selectedFilterLists": [
 156               "ublock-privacy",
 157               "ublock-badware",
 158               "ublock-filters",
 159               "user-filters"
 160             ]
 161           }
 162         }
 163       }
 164     }
 165   }
 166 }
 167 ```
 168
 169 ### AllowedDomainsForApps
 170
 171 Define domains allowed to access Google Workspace.
 172
 173 This policy is based on the [Chrome policy](https://chromeenterprise.google/policies/#AllowedDomainsForApps) of the same name.
 174
 175 If this policy is enabled, users can only access Google Workspace using accounts from the specified domains. If you want to allow Gmail, you can add ```consumer_accounts``` to the list.
 176
 177 **Compatibility:** Firefox 89, Firefox ESR 78.11\
 178 **CCK2 Equivalent:** N/A\
 179 **Preferences Affected:** N/A
 180
 181 #### Windows (GPO)
 182 ```
 183 Software\Policies\Mozilla\Firefox\AllowedDomainsForApps = "managedfirefox.com,example.com"
 184 ```
 185 #### Windows (Intune)
 186 OMA-URI:
 187 ```
 188 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AllowedDomainsForApps
 189 ```
 190 Value (string):
 191 ```
 192 <enabled/>
 193 <data id="AllowedDomainsForApps" value="managedfirefox.com,example.com"/>
 194 ```
 195 #### macOS
 196 ```
 197 <dict>
 198   <key>AllowedDomainsForApps</key>
 199   <string>managedfirefox.com,example.com</string>
 200 </dict>
 201 ```
 202 #### policies.json
 203 ```
 204 {
 205   "policies": {
 206     "AllowedDomainsForApps": "managedfirefox.com,example.com"
 207   }
 208 }
 209 ```
 210 ### AppAutoUpdate
 211
 212 Enable or disable **automatic** application update.
 213
 214 If set to true, application updates are installed without user approval within Firefox. The operating system might still require approval.
 215
 216 If set to false, application updates are downloaded but the user can choose when to install the update.
 217
 218 If you have disabled updates via `DisableAppUpdate`, this policy has no effect.
 219
 220 **Compatibility:** Firefox 75, Firefox ESR 68.7\
 221 **CCK2 Equivalent:** N/A\
 222 **Preferences Affected:** `app.update.auto`
 223
 224 #### Windows (GPO)
 225 ```
 226 Software\Policies\Mozilla\Firefox\AppAutoUpdate = 0x1 | 0x0
 227 ```
 228 #### Windows (Intune)
 229 OMA-URI:
 230 ```
 231 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AppAutoUpdate
 232 ```
 233 Value (string):
 234 ```
 235 <enabled/> or <disabled/>
 236 ```
 237 #### macOS
 238 ```
 239 <dict>
 240   <key>AppAutoUpdate</key>
 241   <true/> | <false/>
 242 </dict>
 243 ```
 244 #### policies.json
 245 ```
 246 {
 247   "policies": {
 248     "AppAutoUpdate": true | false
 249   }
 250 }
 251 ```
 252 ### AppUpdateURL
 253
 254 Change the URL for application update if you are providing Firefox updates from a custom update server.
 255
 256 **Compatibility:** Firefox 62, Firefox ESR 60.2\
 257 **CCK2 Equivalent:** N/A\
 258 **Preferences Affected:** `app.update.url`
 259
 260 #### Windows (GPO)
 261 ```
 262 Software\Policies\Mozilla\Firefox\AppUpdateURL = "https://yoursite.com"
 263 ```
 264 #### Windows (Intune)
 265 OMA-URI:
 266 ```
 267 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AppUpdateURL
 268 ```
 269 Value (string):
 270 ```
 271 <enabled/>
 272 <data id="AppUpdateURL" value="https://yoursite.com"/>
 273 ```
 274 #### macOS
 275 ```
 276 <dict>
 277   <key>AppUpdateURL</key>
 278   <string>https://yoursite.com</string>
 279 </dict>
 280 ```
 281 #### policies.json
 282 ```
 283 {
 284   "policies": {
 285     "AppUpdateURL": "https://yoursite.com"
 286   }
 287 }
 288 ```
 289 ### Authentication
 290
 291 Configure sites that support integrated authentication.
 292
 293 See [Integrated authentication](https://htmlpreview.github.io/?https://github.com/mdn/archived-content/blob/main/files/en-us/mozilla/integrated_authentication/raw.html) for more information.
 294
 295 `PrivateBrowsing` enables integrated authentication in private browsing.
 296
 297 **Compatibility:** Firefox 60, Firefox ESR 60 (AllowNonFQDN added in 62/60.2, AllowProxies added in 70/68.2, Locked added in 71/68.3, PrivateBrowsing added in 77/68.9)\
 298 **CCK2 Equivalent:** N/A\
 299 **Preferences Affected:** `network.negotiate-auth.trusted-uris`,`network.negotiate-auth.delegation-uris`,`network.automatic-ntlm-auth.trusted-uris`,`network.automatic-ntlm-auth.allow-non-fqdn`,`network.negotiate-auth.allow-non-fqdn`,`network.automatic-ntlm-auth.allow-proxies`,`network.negotiate-auth.allow-proxies`,`network.auth.private-browsing-sso`
 300
 301 #### Windows (GPO)
 302 ```
 303 Software\Policies\Mozilla\Firefox\Authentication\SPNEGO\1 = "mydomain.com"
 304 Software\Policies\Mozilla\Firefox\Authentication\SPNEGO\2 = "https://myotherdomain.com"
 305 Software\Policies\Mozilla\Firefox\Authentication\Delegated\1 = "mydomain.com"
 306 Software\Policies\Mozilla\Firefox\Authentication\Delegated\2 = "https://myotherdomain.com"
 307 Software\Policies\Mozilla\Firefox\Authentication\NTLM\1 = "mydomain.com"
 308 Software\Policies\Mozilla\Firefox\Authentication\NTLM\2 = "https://myotherdomain.com"
 309 Software\Policies\Mozilla\Firefox\Authentication\AllowNonFQDN\SPNEGO = 0x1 | 0x0
 310 Software\Policies\Mozilla\Firefox\Authentication\AllowNonFQDN\NTLM = 0x1 | 0x0
 311 Software\Policies\Mozilla\Firefox\Authentication\AllowProxies\SPNEGO = 0x1 | 0x0
 312 Software\Policies\Mozilla\Firefox\Authentication\AllowProxies\NTLM = 0x1 | 0x0
 313 Software\Policies\Mozilla\Firefox\Authentication\Locked = 0x1 | 0x0
 314 Software\Policies\Mozilla\Firefox\Authentication\PrivateBrowsing = 0x1 | 0x0
 315 ```
 316 #### Windows (Intune)
 317 OMA-URI:
 318 ```
 319 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_SPNEGO
 320 ```
 321 Value (string):
 322 ```
 323 <enabled/>
 324 <data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
 325 ```
 326 OMA-URI:
 327 ```
 328 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_Delegated
 329 ```
 330 Value (string):
 331 ```
 332 <enabled/>
 333 <data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
 334 ```
 335 OMA-URI:
 336 ```
 337 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_NTLM
 338 ```
 339 Value (string):
 340 ```
 341 <enabled/>
 342 <data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
 343 ```
 344 OMA-URI:
 345 ```
 346 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_AllowNonFQDN
 347 ```
 348 Value (string):
 349 ```
 350 <enabled/>
 351 <data id="Authentication_AllowNonFQDN_NTLM" value="true | false"/>
 352 <data id="Authentication_AllowNonFQDN_SPNEGO" value="true | false"/>
 353 ```
 354 OMA-URI:
 355 ```
 356 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_Locked
 357 ```
 358 Value (string):
 359 ```
 360 <enabled/> or <disabled/>
 361 ```
 362 OMA-URI:
 363 ```
 364 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_PrivateBrowsing
 365 ```
 366 Value (string):
 367 ```
 368 <enabled/> or <disabled/>
 369 ```
 370 #### macOS
 371 ```
 372 <dict>
 373   <key>Authentication</key>
 374   <dict>
 375     <key>SPNEGO</key>
 376     <array>
 377       <string>mydomain.com</string>
 378       <string>https://myotherdomain.com</string>
 379     </array>
 380     <key>Delegated</key>
 381     <array>
 382       <string>mydomain.com</string>
 383       <string>https://myotherdomain.com</string>
 384     </array>
 385     <key>NTLM</key>
 386     <array>
 387       <string>mydomain.com</string>
 388       <string>https://myotherdomain.com</string>
 389     </array>
 390     <key>AllowNonFQDN</key>
 391       <dict>
 392       <key>SPNEGO</key>
 393       <true/> | <false/>
 394       <key>NTLM</key>
 395       <true/> | <false/>
 396     </dict>
 397     <key>AllowProxies</key>
 398       <dict>
 399       <key>SPNEGO</key>
 400       <true/> | <false/>
 401       <key>NTLM</key>
 402       <true/> | <false/>
 403     </dict>
 404     <key>Locked</key>
 405     <true/> | <false/>
 406     <key>PrivateBrowsing</key>
 407     <true/> | <false/>
 408   </dict>
 409 </dict>
 410 ```
 411 #### policies.json
 412 ```
 413 {
 414   "policies": {
 415     "Authentication": {
 416       "SPNEGO": ["mydomain.com", "https://myotherdomain.com"],
 417       "Delegated": ["mydomain.com", "https://myotherdomain.com"],
 418       "NTLM": ["mydomain.com", "https://myotherdomain.com"],
 419       "AllowNonFQDN": {
 420         "SPNEGO": true | false,
 421         "NTLM": true | false
 422       },
 423       "AllowProxies": {
 424         "SPNEGO": true | false,
 425         "NTLM": true | false
 426       },
 427       "Locked": true | false,
 428       "PrivateBrowsing": true | false
 429     }
 430   }
 431 }
 432 ```
 433 ### AutoLaunchProtocolsFromOrigins
 434 Define a list of external protocols that can be used from listed origins without prompting the user. The origin is the scheme plus the hostname.
 435
 436 The syntax of this policy is exactly the same as the [Chrome AutoLaunchProtocolsFromOrigins policy](https://cloud.google.com/docs/chrome-enterprise/policies/?policy=AutoLaunchProtocolsFromOrigins) except that you can only use valid origins (not just hostnames). This also means that you cannot specify an asterisk for all origins.
 437
 438 The schema is:
 439 ```
 440 {
 441  "items": {
 442   "properties": {
 443    "allowed_origins": {
 444     "items": {
 445      "type": "string"
 446     },
 447     "type": "array"
 448    },
 449    "protocol": {
 450     "type": "string"
 451    }
 452   },
 453   "required": [
 454    "protocol",
 455    "allowed_origins"
 456   ],
 457   "type": "object"
 458  },
 459  "type": "array"
 460 }
 461 ```
 462 **Compatibility:** Firefox 90, Firefox ESR 78.12\
 463 **CCK2 Equivalent:** N/A\
 464 **Preferences Affected:** N/A
 465
 466 #### Windows (GPO)
 467 Software\Policies\Mozilla\Firefox\AutoLaunchProtocolsFromOrigins (REG_MULTI_SZ) =
 468 ```
 469 [
 470   {
 471     "protocol": "zoommtg",
 472     "allowed_origins": [
 473       "https://somesite.zoom.us"
 474     ]
 475   }
 476 ]
 477 ```
 478 #### Windows (Intune)
 479 OMA-URI:
 480 ```
 481 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AutoLaunchProtocolsFromOrigins
 482 ```
 483 Value (string):
 484 ```
 485 <enabled/>
 486 <data id="JSON" value='
 487 [
 488   {
 489     "protocol": "zoommtg",
 490     "allowed_origins": [
 491       "https://somesite.zoom.us"
 492     ]
 493   }
 494 ]'/>
 495 ```
 496 #### macOS
 497 ```
 498 <dict>
 499   <key>AutoLaunchProtocolsFromOrigins</key>
 500   <array>
 501     <dict>
 502       <key>protocol</key>
 503       <string>zoommtg</string>
 504       <key>allowed_origins</key>
 505       <array>
 506         <string>https://somesite.zoom.us</string>
 507       </array>
 508     </dict>
 509   </array>
 510 </dict>
 511 ```
 512 #### policies.json
 513 ```
 514 {
 515   "policies": {
 516     "AutoLaunchProtocolsFromOrigins": [{
 517       "protocol": "zoommtg",
 518       "allowed_origins": [
 519         "https://somesite.zoom.us"
 520       ]
 521     }]
 522   }
 523 }
 524 ```
 525 ### BackgroundAppUpdate
 526
 527 Enable or disable **automatic** application update **in the background**, when the application is not running.
 528
 529 If set to true, application updates may be installed (without user approval) in the background, even when the application is not running. The operating system might still require approval.
 530
 531 If set to false, the application will not try to install updates when the application is not running.
 532
 533 If you have disabled updates via `DisableAppUpdate` or disabled automatic updates via `AppAutoUpdate`, this policy has no effect.
 534
 535 **Compatibility:** Firefox 90 (Windows only)\
 536 **CCK2 Equivalent:** N/A\
 537 **Preferences Affected:** `app.update.background.enabled`
 538
 539 #### Windows (GPO)
 540 ```
 541 Software\Policies\Mozilla\Firefox\BackgroundAppUpdate = 0x1 | 0x0
 542 ```
 543 #### Windows (Intune)
 544 OMA-URI:
 545 ```
 546 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BackgroundAppUpdate
 547 ```
 548 Value (string):
 549 ```
 550 <enabled/> or <disabled/>
 551 ```
 552 #### macOS
 553 ```
 554 <dict>
 555   <key>BackgroundAppUpdate</key>
 556   <true/> | <false/>
 557 </dict>
 558 ```
 559 #### policies.json
 560 ```
 561 {
 562   "policies": {
 563     "BackgroundAppUpdate": true | false
 564   }
 565 }
 566 ```
 567 ### BlockAboutAddons
 568
 569 Block access to the Add-ons Manager (about:addons).
 570
 571 **Compatibility:** Firefox 60, Firefox ESR 60\
 572 **CCK2 Equivalent:** `disableAddonsManager`\
 573 **Preferences Affected:** N/A
 574
 575 #### Windows (GPO)
 576 ```
 577 Software\Policies\Mozilla\Firefox\BlockAboutAddons = 0x1 | 0x0
 578 ```
 579 #### Windows (Intune)
 580 OMA-URI:
 581 ```
 582 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutAddons
 583 ```
 584 Value (string):
 585 ```
 586 <enabled/> or <disabled/>
 587 ```
 588 #### macOS
 589 ```
 590 <dict>
 591   <key>BlockAboutAddons</key>
 592   <true/> | <false/>
 593 </dict>
 594 ```
 595 #### policies.json
 596 ```
 597 {
 598   "policies": {
 599     "BlockAboutAddons": true | false
 600   }
 601 }
 602 ```
 603 ### BlockAboutConfig
 604
 605 Block access to about:config.
 606
 607 **Compatibility:** Firefox 60, Firefox ESR 60\
 608 **CCK2 Equivalent:** `disableAboutConfig`\
 609 **Preferences Affected:** N/A
 610
 611 #### Windows (GPO)
 612 ```
 613 Software\Policies\Mozilla\Firefox\BlockAboutConfig = 0x1 | 0x0
 614 ```
 615 #### Windows (Intune)
 616 OMA-URI:
 617 ```
 618 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutConfig
 619 ```
 620 Value (string):
 621 ```
 622 <enabled/> or <disabled/>
 623 ```
 624 #### macOS
 625 ```
 626 <dict>
 627   <key>BlockAboutConfig</key>
 628   <true/> | <false/>
 629 </dict>
 630 ```
 631 #### policies.json
 632 ```
 633 {
 634   "policies": {
 635     "BlockAboutConfig": true | false
 636   }
 637 }
 638 ```
 639 ### BlockAboutProfiles
 640
 641 Block access to About Profiles (about:profiles).
 642
 643 **Compatibility:** Firefox 60, Firefox ESR 60\
 644 **CCK2 Equivalent:** `disableAboutProfiles`\
 645 **Preferences Affected:** N/A
 646
 647 #### Windows (GPO)
 648 ```
 649 Software\Policies\Mozilla\Firefox\BlockAboutProfiles = 0x1 | 0x0
 650 ```
 651 #### Windows (Intune)
 652 OMA-URI:
 653 ```
 654 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutProfiles
 655 ```
 656 Value (string):
 657 ```
 658 <enabled/> or <disabled/>
 659 ```
 660 #### macOS
 661 ```
 662 <dict>
 663   <key>BlockAboutProfiles</key>
 664   <true/> | <false/>
 665 </dict>
 666 ```
 667 #### policies.json
 668 ```
 669 {
 670   "policies": {
 671     "BlockAboutProfiles": true | false
 672   }
 673 }
 674 ```
 675 ### BlockAboutSupport
 676
 677 Block access to Troubleshooting Information (about:support).
 678
 679 **Compatibility:** Firefox 60, Firefox ESR 60\
 680 **CCK2 Equivalent:** `disableAboutSupport`\
 681 **Preferences Affected:** N/A
 682
 683 #### Windows (GPO)
 684 ```
 685 Software\Policies\Mozilla\Firefox\BlockAboutSupport = 0x1 | 0x0
 686 ```
 687 #### Windows (Intune)
 688 OMA-URI:
 689 ```
 690 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutSupport
 691 ```
 692 Value (string):
 693 ```
 694 <enabled/> or <disabled/>
 695 ```
 696 #### macOS
 697 ```
 698 <dict>
 699   <key>BlockAboutSupport</key>
 700   <true/> | <false/>
 701 </dict>
 702 ```
 703 #### policies.json
 704 ```
 705 {
 706   "policies": {
 707     "BlockAboutSupport": true | false
 708   }
 709 }
 710 ```
 711 ### Bookmarks
 712
 713 Note: [`ManagedBookmarks`](#managedbookmarks) is the new recommended way to add bookmarks. This policy will continue to be supported.
 714
 715 Add bookmarks in either the bookmarks toolbar or menu. Only `Title` and `URL` are required. If `Placement` is not specified, the bookmark will be placed on the toolbar. If `Folder` is specified, it is automatically created and bookmarks with the same folder name are grouped together.
 716
 717 If you want to clear all bookmarks set with this policy, you can set the value to an empty array (```[]```). This can be on Windows via the new Bookmarks (JSON) policy available with GPO and Intune.
 718
 719 **Compatibility:** Firefox 60, Firefox ESR 60\
 720 **CCK2 Equivalent:** `bookmarks.toolbar`,`bookmarks.menu`\
 721 **Preferences Affected:** N/A
 722
 723 #### Windows (GPO)
 724 ```
 725 Software\Policies\Mozilla\Firefox\Bookmarks\1\Title = "Example"
 726 Software\Policies\Mozilla\Firefox\Bookmarks\1\URL = "https://example.com"
 727 Software\Policies\Mozilla\Firefox\Bookmarks\1\Favicon = "https://example.com/favicon.ico"
 728 Software\Policies\Mozilla\Firefox\Bookmarks\1\Placement = "toolbar" | "menu"
 729 Software\Policies\Mozilla\Firefox\Bookmarks\1\Folder = "FolderName"
 730
 731 Software\Policies\Mozilla\Firefox\Bookmarks (REG_MULTI_SZ) =
 732 ```
 733 []
 734 ```
 735
 736 ```
 737 #### Windows (Intune)
 738 OMA-URI:
 739 ```
 740 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Bookmarks/Bookmark01
 741 ```
 742 Value (string):
 743 ```
 744 <enabled/>
 745 <data id="BookmarkTitle" value="Example"/>
 746 <data id="BookmarkURL" value="https://example.com"/>
 747 <data id="BookmarkFavicon" value="https://example.com/favicon.ico"/>
 748 <data id="BookmarkPlacement" value="toolbar | menu"/>
 749 <data id="BookmarkFolder" value="FolderName"/>
 750 ```
 751 OMA-URI:
 752 ```
 753 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Bookmarks
 754 ```
 755 Value (string):
 756 ```
 757 <enabled/>
 758 <data id="JSON" value='[]'/>
 759 ```
 760 #### macOS
 761 ```
 762 <dict>
 763   <key>Bookmarks</key>
 764   <array>
 765     <dict>
 766       <key>Title</key>
 767       <string>Example</string>
 768       <key>URL</key>
 769       <string>https://example.com</string>
 770       <key>Favicon</key>
 771       <string>https://example.com/favicon.ico</string>
 772       <key>Placement</key>
 773       <string>toolbar | menu</string>
 774       <key>Folder</key>
 775       <string>FolderName</string>
 776     </dict>
 777   </array>
 778 </dict>
 779 ```
 780 #### policies.json
 781 ```
 782 {
 783   "policies": {
 784     "Bookmarks": [
 785       {
 786         "Title": "Example",
 787         "URL": "https://example.com",
 788         "Favicon": "https://example.com/favicon.ico",
 789         "Placement": "toolbar" | "menu",
 790         "Folder": "FolderName"
 791       }
 792     ]
 793   }
 794 }
 795 ```
 796 ### CaptivePortal
 797 Enable or disable the detection of captive portals.
 798
 799 **Compatibility:** Firefox 67, Firefox ESR 60.7\
 800 **CCK2 Equivalent:** N/A\
 801 **Preferences Affected:** `network.captive-portal-service.enabled`
 802
 803 #### Windows (GPO)
 804 ```
 805 Software\Policies\Mozilla\Firefox\CaptivePortal = 0x1 | 0x0
 806 ```
 807 #### Windows (Intune)
 808 OMA-URI:
 809 ```
 810 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/CaptivePortal
 811 ```
 812 Value (string):
 813 ```
 814 <enabled/> or <disabled/>
 815 ```
 816 #### macOS
 817 ```
 818 <dict>
 819   <key>CaptivePortal</key>
 820   <true/> | <false/>
 821 </dict>
 822 ```
 823 #### policies.json
 824 ```
 825 {
 826   "policies": {
 827     "CaptivePortal": true | false
 828   }
 829 }
 830 ```
 831 ### Certificates
 832
 833 ### Certificates | ImportEnterpriseRoots
 834
 835 Trust certificates that have been added to the operating system certificate store by a user or administrator.
 836
 837 Note: This policy only works on Windows and macOS. For Linux discussion, see [bug 1600509](https://bugzilla.mozilla.org/show_bug.cgi?id=1600509).
 838
 839 See https://support.mozilla.org/kb/setting-certificate-authorities-firefox for more detail.
 840
 841 **Compatibility:** Firefox 60, Firefox ESR 60 (macOS support in Firefox 63, Firefox ESR 68)\
 842 **CCK2 Equivalent:** N/A\
 843 **Preferences Affected:** `security.enterprise_roots.enabled`
 844
 845 #### Windows (GPO)
 846 ```
 847 Software\Policies\Mozilla\Firefox\Certificates\ImportEnterpriseRoots = 0x1 | 0x0
 848 ```
 849 #### Windows (Intune)
 850 OMA-URI:
 851 ```
 852 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Certificates/Certificates_ImportEnterpriseRoots
 853 ```
 854 Value (string):
 855 ```
 856 <enabled/> or <disabled/>
 857 ```
 858 #### macOS
 859 ```
 860 <dict>
 861   <key>Certificates</key>
 862   <dict>
 863     <key>ImportEnterpriseRoots</key>
 864     <true/> | <false/>
 865   </dict>
 866 </dict>
 867 ```
 868 #### policies.json
 869 ```
 870 {
 871   "policies": {
 872     "Certificates": {
 873       "ImportEnterpriseRoots": true | false
 874     }
 875   }
 876 }
 877 ```
 878 ### Certificates | Install
 879
 880 Install certificates into the Firefox certificate store. If only a filename is specified, Firefox searches for the file in the following locations:
 881
 882 - Windows
 883   - %USERPROFILE%\AppData\Local\Mozilla\Certificates
 884   - %USERPROFILE%\AppData\Roaming\Mozilla\Certificates
 885 - macOS
 886   - /Library/Application Support/Mozilla/Certificates
 887   - ~/Library/Application Support/Mozilla/Certificates
 888 - Linux
 889   - /usr/lib/mozilla/certificates
 890   - /usr/lib64/mozilla/certificates
 891   - ~/.mozilla/certificates
 892
 893 Starting with Firefox 65, Firefox 60.5 ESR, a fully qualified path can be used, including UNC paths. You should use the native path style for your operating system. We do not support using %USERPROFILE% or other environment variables on Windows.
 894
 895 If you are specifying the path in the policies.json file on Windows, you need to escape your backslashes (`\\`) which means that for UNC paths, you need to escape both (`\\\\`). If you use group policy, you only need one backslash.
 896
 897 Certificates are installed using the trust string `CT,CT,`.
 898
 899 Binary (DER) and ASCII (PEM) certificates are both supported.
 900
 901 **Compatibility:** Firefox 64, Firefox ESR 64\
 902 **CCK2 Equivalent:** `certs.ca`\
 903 **Preferences Affected:** N/A
 904
 905 #### Windows (GPO)
 906 ```
 907 Software\Policies\Mozilla\Firefox\Certificates\Install\1 = "cert1.der"
 908 Software\Policies\Mozilla\Firefox\Certificates\Install\2 = "C:\Users\username\cert2.pem"
 909 ```
 910 #### Windows (Intune)
 911 OMA-URI:
 912 ```
 913 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Certificates/Certificates_Install
 914 ```
 915 Value (string):
 916 ```
 917 <enabled/>
 918 <data id="Certificates_Install" value="1&#xF000;cert1.der&#xF000;2&#xF000;C:\Users\username\cert2.pem"/>
 919 ```
 920 #### macOS
 921 ```
 922 <dict>
 923   <key>Certificates</key>
 924   <dict>
 925     <key>Install</key>
 926     <array>
 927       <string>cert1.der</string>
 928       <string>/Users/username/cert2.pem</string>
 929     </array>
 930   </dict>
 931 </dict>
 932 ```
 933 #### policies.json
 934 ```
 935 {
 936   "policies": {
 937     "Certificates": {
 938       "Install": ["cert1.der", "/home/username/cert2.pem"]
 939     }
 940   }
 941 }
 942 ```
 943 ### Cookies
 944 Configure cookie preferences.
 945
 946 `Allow` is a list of origins (not domains) where cookies are always allowed. You must include http or https.
 947
 948 `AllowSession` is a list of origins (not domains) where cookies are only allowed for the current session. You must include http or https.
 949
 950 `Block` is a list of origins (not domains) where cookies are always blocked. You must include http or https.
 951
 952 `Behavior` sets the default behavior for cookies based on the values below.
 953
 954 `BehaviorPrivateBrowsing` sets the default behavior for cookies in private browsing based on the values below.
 955
 956 | Value | Description
 957 | --- | ---
 958 | accept | Accept all cookies
 959 | reject-foreign | Reject third party cookies
 960 | reject | Reject all cookies
 961 | limit-foreign | Reject third party cookies for sites you haven't visited
 962 | reject-tracker | Reject cookies for known trackers (default)
 963 | reject-tracker-and-partition-foreign | Reject cookies for known trackers and partition third-party cookies (Total Cookie Protection) (default for private browsing)
 964
 965 `Default` (Deprecated) determines whether cookies are accepted at all.
 966
 967 `AcceptThirdParty` (Deprecated) determines how third-party cookies are handled.
 968
 969 `ExpireAtSessionEnd` determines when cookies expire.
 970
 971 `RejectTracker` (Deprecated) only rejects cookies for trackers.
 972
 973 `Locked` prevents the user from changing cookie preferences.
 974
 975 **Compatibility:** Firefox 60, Firefox ESR 60 (RejectTracker added in Firefox 63, AllowSession added in Firefox 79/78.1, Behavior added in Firefox 95/91.4)\
 976 **CCK2 Equivalent:** N/A\
 977 **Preferences Affected:** `network.cookie.cookieBehavior`, `network.cookie.cookieBehavior.pbmode`, `network.cookie.lifetimePolicy`
 978
 979 #### Windows (GPO)
 980 ```
 981 Software\Policies\Mozilla\Firefox\Cookies\Allow\1 = "https://example.com"
 982 Software\Policies\Mozilla\Firefox\Cookies\AllowSession\1 = "https://example.edu"
 983 Software\Policies\Mozilla\Firefox\Cookies\Block\1 = "https://example.org"
 984 Software\Policies\Mozilla\Firefox\Cookies\Default = 0x1 | 0x0
 985 Software\Policies\Mozilla\Firefox\Cookies\AcceptThirdParty = "always" | "never" | "from-visited"
 986 Software\Policies\Mozilla\Firefox\Cookies\ExpireAtSessionEnd = 0x1 | 0x0
 987 Software\Policies\Mozilla\Firefox\Cookies\RejectTracker = 0x1 | 0x0
 988 Software\Policies\Mozilla\Firefox\Cookies\Behavior = "accept" | "reject-foreign" | "reject" | "limit-foreign" | "reject-tracker" | "reject-tracker-and-partition-foreign"
 989 Software\Policies\Mozilla\Firefox\Cookies\BehaviorPrivateBrowsing = "accept" | "reject-foreign" | "reject" | "limit-foreign" | "reject-tracker" | "reject-tracker-and-partition-foreign"
 990 Software\Policies\Mozilla\Firefox\Cookies\Locked = 0x1 | 0x0
 991 ```
 992 #### Windows (Intune)
 993 OMA-URI:
 994 ```
 995 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Allow
 996 ```
 997 Value (string):
 998 ```
 999 <enabled/>
1000 <data id="Permissions" value="1&#xF000;https://example.com"/>
1001 ```
1002 OMA-URI:
1003 ```
1004 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_AllowSession
1005 ```
1006 Value (string):
1007 ```
1008 <enabled/>
1009 <data id="Permissions" value="1&#xF000;https://example.edu"/>
1010 ```
1011 OMA-URI:
1012 ```
1013 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Block
1014 ```
1015 Value (string):
1016 ```
1017 <enabled/>
1018 <data id="Permissions" value="1&#xF000;https://example.org"/>
1019 ```
1020 OMA-URI:
1021 ```
1022 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Default
1023 ```
1024 Value (string):
1025 ```
1026 <enabled/> or <disabled/>
1027 ```
1028 OMA-URI:
1029 ```
1030 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_AcceptThirdParty
1031 ```
1032 Value (string):
1033 ```
1034 <enabled/>
1035 <data id="Cookies_AcceptThirdParty" value="always | never | from-visited"/>
1036 ```
1037 OMA-URI:
1038 ```
1039 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_ExpireAtSessionEnd
1040 ```
1041 Value (string):
1042 ```
1043 <enabled/> or <disabled/>
1044 ```
1045 OMA-URI:
1046 ```
1047 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_RejectTracker
1048 ```
1049 Value (string):
1050 ```
1051 <enabled/> or <disabled/>
1052 ```
1053 OMA-URI:
1054 ```
1055 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Locked
1056 ```
1057 Value (string):
1058 ```
1059 <enabled/> or <disabled/>
1060 ```
1061 OMA-URI:
1062 ```
1063 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Behavior
1064 ```
1065 Value (string):
1066 ```
1067 <enabled/>
1068 <data id="Cookies_Behavior" value="accept | reject-foreign | reject | limit-foreign | reject-tracker | reject-tracker-and-partition-foreign"/>
1069 ```
1070 OMA-URI:
1071 ```
1072 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_BehaviorPrivateBrowsing
1073 ```
1074 Value (string):
1075 ```
1076 <enabled/>
1077 <data id="Cookies_BehaviorPrivateBrowsing" value="accept | reject-foreign | reject | limit-foreign | reject-tracker | reject-tracker-and-partition-foreign"/>
1078 ```
1079 #### macOS
1080 ```
1081 <dict>
1082   <key>Cookies</key>
1083   <dict>
1084     <key>Allow</key>
1085     <array>
1086       <string>http://example.com</string>
1087     </array>
1088     <key>AllowSession</key>
1089     <array>
1090       <string>http://example.edu</string>
1091     </array>
1092     <key>Block</key>
1093     <array>
1094       <string>http://example.org</string>
1095     </array>
1096     <key>Default</key>
1097     <true/> | <false/>
1098     <key>AcceptThirdParty</key>
1099     <string>always | never | from-visited</string>
1100     <key>ExpireAtSessionEnd</key>
1101     <true/> | <false/>
1102     <key>RejectTracker</key>
1103     <true/> | <false/>
1104     <key>Locked</key>
1105     <true/> | <false/>
1106     <key>Behavior</key>
1107     <string>accept | reject-foreign | reject | limit-foreign | reject-tracker | reject-tracker-and-partition-foreign</string>
1108     <key>BehaviorPrivateBrowsing</key>
1109     <string>accept | reject-foreign | reject | limit-foreign | reject-tracker | reject-tracker-and-partition-foreign</string>
1110   </dict>
1111 </dict>
1112 ```
1113 #### policies.json
1114 ```
1115 {
1116   "policies": {
1117     "Cookies": {
1118       "Allow": ["http://example.org/"],
1119       "AllowSession": ["http://example.edu/"],
1120       "Block": ["http://example.edu/"],
1121       "Default": true | false,
1122       "AcceptThirdParty": "always" | "never" | "from-visited",
1123       "ExpireAtSessionEnd": true | false,
1124       "RejectTracker": true | false,
1125       "Locked": true | false,
1126       "Behavior": "accept" | "reject-foreign" | "reject" | "limit-foreign" | "reject-tracker" | "reject-tracker-and-partition-foreign",
1127       "BehaviorPrivateBrowsing": "accept" | "reject-foreign" | "reject" | "limit-foreign" | "reject-tracker" | "reject-tracker-and-partition-foreign",
1128     }
1129   }
1130 }
1131 ```
1132 ### DefaultDownloadDirectory
1133 Set the default download directory.
1134
1135 You can use ${home} for the native home directory.
1136
1137 **Compatibility:** Firefox 68, Firefox ESR 68\
1138 **CCK2 Equivalent:** N/A\
1139 **Preferences Affected:** `browser.download.dir`, `browser.download.folderList`
1140
1141 #### Windows (GPO)
1142 ```
1143 Software\Policies\Mozilla\Firefox\DefaultDownloadDirectory = "${home}\Downloads"
1144 ```
1145 #### Windows (Intune)
1146 OMA-URI:
1147 ```
1148 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DefaultDownloadDirectory
1149 ```
1150 Value (string):
1151 ```
1152 <enabled/>
1153 <data id="Preferences_String" value="${home}\Downloads"/>
1154 ```
1155 #### macOS
1156 ```
1157 <dict>
1158   <key>DefaultDownloadDirectory</key>
1159   <string>${home}/Downloads</string>
1160 </dict>
1161 ```
1162 #### policies.json (macOS and Linux)
1163 ```
1164 {
1165   "policies": {
1166     "DefaultDownloadDirectory": "${home}/Downloads"
1167 }
1168 ```
1169 #### policies.json (Windows)
1170 ```
1171 {
1172   "policies": {
1173     "DefaultDownloadDirectory": "${home}\\Downloads"
1174 }
1175 ```
1176 ### DisableAppUpdate
1177 Turn off application updates within Firefox.
1178
1179 **Compatibility:** Firefox 60, Firefox ESR 60\
1180 **CCK2 Equivalent:** `disableFirefoxUpdates`\
1181 **Preferences Affected:** N/A
1182
1183 #### Windows (GPO)
1184 ```
1185 Software\Policies\Mozilla\Firefox\DisableAppUpdate = 0x1 | 0x0
1186 ```
1187 #### Windows (Intune)
1188 OMA-URI:
1189 ```
1190 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableAppUpdate
1191 ```
1192 Value (string):
1193 ```
1194 <enabled/> or <disabled/>
1195 ```
1196 #### macOS
1197 ```
1198 <dict>
1199   <key>DisableAppUpdate</key>
1200   <true/> | <false/>
1201 </dict>
1202 ```
1203 #### policies.json
1204 ```
1205 {
1206   "policies": {
1207     "DisableAppUpdate": true | false
1208   }
1209 }
1210 ```
1211 ### DisableBuiltinPDFViewer
1212 Disable the built in PDF viewer. PDF files are downloaded and sent externally.
1213
1214 **Compatibility:** Firefox 60, Firefox ESR 60\
1215 **CCK2 Equivalent:** `disablePDFjs`\
1216 **Preferences Affected:** `pdfjs.disabled`
1217
1218 #### Windows (GPO)
1219 ```
1220 Software\Policies\Mozilla\Firefox\DisableBuiltinPDFViewer = 0x1 | 0x0
1221 ```
1222 #### Windows (Intune)
1223 OMA-URI:
1224 ```
1225 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableBuiltinPDFViewer
1226 ```
1227 Value (string):
1228 ```
1229 <enabled/> or <disabled/>
1230 ```
1231 #### macOS
1232 ```
1233 <dict>
1234   <key>DisableBuiltinPDFViewer</key>
1235   <true/> | <false/>
1236 </dict>
1237 ```
1238 #### policies.json
1239 ```
1240 {
1241   "policies": {
1242     "DisableBuiltinPDFViewer": true | false
1243   }
1244 }
1245 ```
1246 ### DisabledCiphers
1247 Disable specific cryptographic ciphers, listed below.
1248
1249 ```
1250 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
1251 TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
1252 TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256
1253 TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
1254 TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
1255 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
1256 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
1257 TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA
1258 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
1259 TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA
1260 TLS_DHE_RSA_WITH_AES_128_CBC_SHA
1261 TLS_DHE_RSA_WITH_AES_256_CBC_SHA
1262 TLS_RSA_WITH_AES_128_GCM_SHA256
1263 TLS_RSA_WITH_AES_256_GCM_SHA384
1264 TLS_RSA_WITH_AES_128_CBC_SHA
1265 TLS_RSA_WITH_AES_256_CBC_SHA
1266 TLS_RSA_WITH_3DES_EDE_CBC_SHA
1267 ```
1268
1269 **Preferences Affected:** `security.ssl3.ecdhe_rsa_aes_128_gcm_sha256`, `security.ssl3.ecdhe_ecdsa_aes_128_gcm_sha256`, `security.ssl3.ecdhe_ecdsa_chacha20_poly1305_sha256`, `security.ssl3.ecdhe_rsa_chacha20_poly1305_sha256`, `security.ssl3.ecdhe_ecdsa_aes_256_gcm_sha384`, `security.ssl3.ecdhe_rsa_aes_256_gcm_sha384`, `security.ssl3.ecdhe_rsa_aes_128_sha`, `security.ssl3.ecdhe_ecdsa_aes_128_sha`, `security.ssl3.ecdhe_rsa_aes_256_sha`, `security.ssl3.ecdhe_ecdsa_aes_256_sha`, `security.ssl3.dhe_rsa_aes_128_sha`, `security.ssl3.dhe_rsa_aes_256_sha`, `security.ssl3.rsa_aes_128_gcm_sha256`, `security.ssl3.rsa_aes_256_gcm_sha384`, `security.ssl3.rsa_aes_128_sha`, `security.ssl3.rsa_aes_256_sha`, `security.ssl3.deprecated.rsa_des_ede3_sha`
1270
1271 ---
1272 **Note:**
1273
1274 This policy was updated in Firefox 78 to allow enabling ciphers as well. Setting the value to true disables the cipher, setting the value to false enables the cipher. Previously setting the value to true or false disabled the cipher.
1275
1276 ---
1277 **Compatibility:** Firefox 76, Firefox ESR 68.8 (TLS_RSA_WITH_AES_128_GCM_SHA256 and TLS_RSA_WITH_AES_256_GCM_SHA384 were added in Firefox 78, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA38, TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, and TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 were added in Firefox 97 and Firefox 91.6)\
1278 **CCK2 Equivalent:** N/A\
1279 **Preferences Affected:** N/A
1280
1281 #### Windows (GPO)
1282 ```
1283 Software\Policies\Mozilla\Firefox\DisabledCiphers\CIPHER_NAME = 0x1 | 0x0
1284 ```
1285 #### Windows (Intune)
1286 OMA-URI:
1287 ```
1288 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_CIPHER_NAME
1289
1290 ```
1291 Value (string):
1292 ```
1293 <enabled/> or <disabled/>
1294 ```
1295 #### macOS
1296 ```
1297 <dict>
1298   <key>DisabledCiphers</key>
1299     <dict>
1300       <key>CIPHER_NAME</key>
1301       <true/> | <false/>
1302     </dict>
1303 </dict>
1304 ```
1305 #### policies.json
1306 ```
1307 {
1308   "policies": {
1309     "DisabledCiphers": {
1310       "CIPHER_NAME": true | false,
1311     }
1312   }
1313 }
1314 ```
1315 ### DisableDefaultBrowserAgent
1316 Prevent the default browser agent from taking any actions. Only applicable to Windows; other platforms don’t have the agent.
1317
1318 The browser agent is a Windows-only scheduled task which runs in the background to collect and submit data about the browser that the user has set as their OS default. More information is available [here](https://firefox-source-docs.mozilla.org/toolkit/mozapps/defaultagent/default-browser-agent/index.html).
1319
1320 **Compatibility:** Firefox 75, Firefox ESR 68.7 (Windows only)\
1321 **CCK2 Equivalent:** N/A\
1322 **Preferences Affected:** N/A
1323
1324 #### Windows (GPO)
1325 ```
1326 Software\Policies\Mozilla\Firefox\DisableDefaultBrowserAgent = 0x1 | 0x0
1327 ```
1328 #### Windows (Intune)
1329 OMA-URI:
1330 ```
1331 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableDefaultBrowserAgent
1332 ```
1333 Value (string):
1334 ```
1335 <enabled/> or <disabled/>
1336 ```
1337 #### policies.json
1338 ```
1339 {
1340   "policies": {
1341     "DisableDefaultBrowserAgent": true | false
1342   }
1343 }
1344 ```
1345 ### DisableDeveloperTools
1346 Remove access to all developer tools.
1347
1348 **Compatibility:** Firefox 60, Firefox ESR 60\
1349 **CCK2 Equivalent:** `removeDeveloperTools`\
1350 **Preferences Affected:** `devtools.policy.disabled`
1351
1352 #### Windows (GPO)
1353 ```
1354 Software\Policies\Mozilla\Firefox\DisableDeveloperTools = 0x1 | 0x0`
1355 ```
1356 #### Windows (Intune)
1357 OMA-URI:
1358 ```
1359 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableDeveloperTools
1360 ```
1361 Value (string):
1362 ```
1363 <enabled/> or <disabled/>
1364 ```
1365 #### macOS
1366 ```
1367 <dict>
1368   <key>DisableDeveloperTools</key>
1369   <true/> | <false/>
1370 </dict>
1371 ```
1372 #### policies.json
1373 ```
1374 {
1375   "policies": {
1376     "DisableDeveloperTools": true | false
1377   }
1378 }
1379 ```
1380 ### DisableFeedbackCommands
1381 Disable the menus for reporting sites (Submit Feedback, Report Deceptive Site).
1382
1383 **Compatibility:** Firefox 60, Firefox ESR 60\
1384 **CCK2 Equivalent:** N/A\
1385 **Preferences Affected:** N/A
1386
1387 #### Windows (GPO)
1388 ```
1389 Software\Policies\Mozilla\Firefox\DisableFeedbackCommands = 0x1 | 0x0
1390 ```
1391 #### Windows (Intune)
1392 OMA-URI:
1393 ```
1394 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFeedbackCommands
1395 ```
1396 Value (string):
1397 ```
1398 <enabled/> or <disabled/>
1399 ```
1400 #### macOS
1401 ```
1402 <dict>
1403   <key>DisableFeedbackCommands</key>
1404   <true/> | <false/>
1405 </dict>
1406 ```
1407 #### policies.json
1408 ```
1409 {
1410   "policies": {
1411     "DisableFeedbackCommands": true | false
1412   }
1413 }
1414 ```
1415 ### DisableFirefoxAccounts
1416 Disable Firefox Accounts integration (Sync).
1417
1418 **Compatibility:** Firefox 60, Firefox ESR 60\
1419 **CCK2 Equivalent:** `disableSync`\
1420 **Preferences Affected:** `identity.fxaccounts.enabled`
1421
1422 #### Windows (GPO)
1423 ```
1424 Software\Policies\Mozilla\Firefox\DisableFirefoxAccounts = 0x1 | 0x0
1425 ```
1426 #### Windows (Intune)
1427 OMA-URI:
1428 ```
1429 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxAccounts
1430 ```
1431 Value (string):
1432 ```
1433 <enabled/> or <disabled/>
1434 ```
1435 #### macOS
1436 ```
1437 <dict>
1438   <key>DisableFirefoxAccounts</key>
1439   <true/> | <false/>
1440 </dict>
1441 ```
1442 #### policies.json
1443 ```
1444 {
1445   "policies": {
1446     "DisableFirefoxAccounts": true | false
1447   }
1448 }
1449 ```
1450 ### DisableFirefoxScreenshots
1451 Remove access to Firefox Screenshots.
1452
1453 **Compatibility:** Firefox 60, Firefox ESR 60\
1454 **CCK2 Equivalent:** N/A\
1455 **Preferences Affected:** `extensions.screenshots.disabled`
1456
1457 #### Windows (GPO)
1458 ```
1459 Software\Policies\Mozilla\Firefox\DisableFirefoxScreenshots = 0x1 | 0x0
1460 ```
1461 #### Windows (Intune)
1462 OMA-URI:
1463 ```
1464 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxScreenshots
1465 ```
1466 Value (string):
1467 ```
1468 <enabled/> or <disabled/>
1469 ```
1470 #### macOS
1471 ```
1472 <dict>
1473   <key>DisableFirefoxScreenshots</key>
1474   <true/> | <false/>
1475 </dict>
1476 ```
1477 #### policies.json
1478 ```
1479 {
1480   "policies": {
1481     "DisableFirefoxScreenshots": true | false
1482   }
1483 }
1484 ```
1485 ### DisableFirefoxStudies
1486 Disable Firefox studies (Shield).
1487
1488 **Compatibility:** Firefox 60, Firefox ESR 60\
1489 **CCK2 Equivalent:** N/A\
1490 **Preferences Affected:** N/A
1491
1492 #### Windows (GPO)
1493 ```
1494 Software\Policies\Mozilla\Firefox\DisableFirefoxStudies = 0x1 | 0x0
1495 ```
1496 #### Windows (Intune)
1497 OMA-URI:
1498 ```
1499 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxStudies
1500 ```
1501 Value (string):
1502 ```
1503 <enabled/> or <disabled/>
1504 ```
1505 #### macOS
1506 ```
1507 <dict>
1508   <key>DisableFirefoxStudies</key>
1509   <true/> | <false/>
1510 </dict>
1511 ```
1512 #### policies.json
1513 ```
1514 {
1515   "policies": {
1516     "DisableFirefoxStudies": true | false
1517   }
1518 }
1519 ```
1520 ### DisableForgetButton
1521 Disable the "Forget" button.
1522
1523 **Compatibility:** Firefox 60, Firefox ESR 60\
1524 **CCK2 Equivalent:** `disableForget`\
1525 **Preferences Affected:** N/A
1526
1527 #### Windows (GPO)
1528 ```
1529 Software\Policies\Mozilla\Firefox\DisableForgetButton = 0x1 | 0x0
1530 ```
1531 #### Windows (Intune)
1532 OMA-URI:
1533 ```
1534 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableForgetButton
1535 ```
1536 Value (string):
1537 ```
1538 <enabled/> or <disabled/>
1539 ```
1540 #### macOS
1541 ```
1542 <dict>
1543   <key>DisableForgetButton</key>
1544   <true/> | <false/>
1545 </dict>
1546 ```
1547 #### policies.json
1548 ```
1549 {
1550   "policies": {
1551     "DisableForgetButton": true | false
1552   }
1553 }
1554 ```
1555 ### DisableFormHistory
1556 Turn off saving information on web forms and the search bar.
1557
1558 **Compatibility:** Firefox 60, Firefox ESR 60\
1559 **CCK2 Equivalent:** `disableFormFill`\
1560 **Preferences Affected:** `browser.formfill.enable`
1561
1562 #### Windows (GPO)
1563 ```
1564 Software\Policies\Mozilla\Firefox\DisableFormHistory = 0x1 | 0x0
1565 ```
1566 #### Windows (Intune)
1567 OMA-URI:
1568 ```
1569 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFormHistory
1570 ```
1571 Value (string):
1572 ```
1573 <enabled/> or <disabled/>
1574 ```
1575 #### macOS
1576 ```
1577 <dict>
1578   <key>DisableFormHistory</key>
1579   <true/> | <false/>
1580 </dict>
1581 ```
1582 #### policies.json
1583 ```
1584 {
1585   "policies": {
1586     "DisableFormHistory": true | false
1587   }
1588 }
1589 ```
1590 ### DisableMasterPasswordCreation
1591 Remove the master password functionality.
1592
1593 If this value is true, it works the same as setting [`PrimaryPassword`](#primarypassword) to false and removes the primary password functionality.
1594
1595 If both `DisableMasterPasswordCreation` and `PrimaryPassword` are used, `DisableMasterPasswordCreation` takes precedent.
1596
1597 **Compatibility:** Firefox 60, Firefox ESR 60\
1598 **CCK2 Equivalent:** `noMasterPassword`\
1599 **Preferences Affected:** N/A
1600
1601 #### Windows (GPO)
1602 ```
1603 Software\Policies\Mozilla\Firefox\DisableMasterPasswordCreation = 0x1 | 0x0
1604 ```
1605 #### Windows (Intune)
1606 OMA-URI:
1607 ```
1608 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableMasterPasswordCreation
1609 ```
1610 Value (string):
1611 ```
1612 <enabled/> or <disabled/>
1613 ```
1614 #### macOS
1615 ```
1616 <dict>
1617   <key>DisableMasterPasswordCreation</key>
1618   <true/> | <false/>
1619 </dict>
1620 ```
1621 #### policies.json
1622 ```
1623 {
1624   "policies": {
1625     "DisableMasterPasswordCreation": true | false
1626   }
1627 }
1628 ```
1629 ### DisablePasswordReveal
1630 Do not allow passwords to be shown in saved logins
1631
1632 **Compatibility:** Firefox 71, Firefox ESR 68.3\
1633 **CCK2 Equivalent:** N/A
1634 **Preferences Affected:** N/A
1635
1636 #### Windows (GPO)
1637 ```
1638 Software\Policies\Mozilla\Firefox\DisablePasswordReveal = 0x1 | 0x0
1639 ```
1640 #### Windows (Intune)
1641 OMA-URI:
1642 ```
1643 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePasswordReveal
1644 ```
1645 Value (string):
1646 ```
1647 <enabled/> or <disabled/>
1648 ```
1649 #### macOS
1650 ```
1651 <dict>
1652   <key>DisablePasswordReveal</key>
1653   <true/> | <false/>
1654 </dict>
1655 ```
1656 #### policies.json
1657 ```
1658 {
1659   "policies": {
1660     "DisablePasswordReveal": true | false
1661   }
1662 }
1663 ```
1664 ### DisablePocket
1665 Remove Pocket in the Firefox UI. It does not remove it from the new tab page.
1666
1667 **Compatibility:** Firefox 60, Firefox ESR 60\
1668 **CCK2 Equivalent:** `disablePocket`\
1669 **Preferences Affected:** `extensions.pocket.enabled`
1670
1671 #### Windows (GPO)
1672 ```
1673 Software\Policies\Mozilla\Firefox\DisablePocket = 0x1 | 0x0
1674 ```
1675 #### Windows (Intune)
1676 OMA-URI:
1677 ```
1678 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePocket
1679 ```
1680 Value (string):
1681 ```
1682 <enabled/> or <disabled/>
1683 ```
1684 #### macOS
1685 ```
1686 <dict>
1687   <key>DisablePocket</key>
1688   <true/> | <false/>
1689 </dict>
1690 ```
1691 #### policies.json
1692 ```
1693 {
1694   "policies": {
1695     "DisablePocket": true | false
1696   }
1697 }
1698 ```
1699 ### DisablePrivateBrowsing
1700 Remove access to private browsing.
1701
1702 **Compatibility:** Firefox 60, Firefox ESR 60\
1703 **CCK2 Equivalent:** `disablePrivateBrowsing`\
1704 **Preferences Affected:** N/A
1705
1706 #### Windows (GPO)
1707 ```
1708 Software\Policies\Mozilla\Firefox\DisablePrivateBrowsing = 0x1 | 0x0
1709 ```
1710 #### Windows (Intune)
1711 OMA-URI:
1712 ```
1713 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePrivateBrowsing
1714 ```
1715 Value (string):
1716 ```
1717 <enabled/> or <disabled/>
1718 ```
1719 #### macOS
1720 ```
1721 <dict>
1722   <key>DisablePrivateBrowsing</key>
1723   <true/> | <false/>
1724 </dict>
1725 ```
1726 #### policies.json
1727 ```
1728 {
1729   "policies": {
1730     "DisablePrivateBrowsing": true | false
1731   }
1732 }
1733 ```
1734 ### DisableProfileImport
1735 Disables the "Import data from another browser" option in the bookmarks window.
1736
1737 **Compatibility:** Firefox 60, Firefox ESR 60\
1738 **CCK2 Equivalent:** N/A\
1739 **Preferences Affected:** N/A
1740
1741 #### Windows (GPO)
1742 ```
1743 Software\Policies\Mozilla\Firefox\DisableProfileImport = 0x1 | 0x0
1744 ```
1745 #### Windows (Intune)
1746 OMA-URI:
1747 ```
1748 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableProfileImport
1749 ```
1750 Value (string):
1751 ```
1752 <enabled/> or <disabled/>
1753 ```
1754 #### macOS
1755 ```
1756 <dict>
1757   <key>DisableProfileImport</key>
1758   <true/> | <false/>
1759 </dict>
1760 ```
1761 #### policies.json
1762 ```
1763 {
1764   "policies": {
1765     "DisableProfileImport": true | false
1766   }
1767 }
1768 ```
1769 ### DisableProfileRefresh
1770 Disable the Refresh Firefox button on about:support and support.mozilla.org, as well as the prompt that displays offering to refresh Firefox when you haven't used it in a while.
1771
1772 **Compatibility:** Firefox 60, Firefox ESR 60\
1773 **CCK2 Equivalent:** `disableResetFirefox`\
1774 **Preferences Affected:** `browser.disableResetPrompt`
1775
1776 #### Windows (GPO)
1777 ```
1778 Software\Policies\Mozilla\Firefox\DisableProfileRefresh = 0x1 | 0x0
1779 ```
1780 #### Windows (Intune)
1781 OMA-URI:
1782 ```
1783 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableProfileRefresh
1784 ```
1785 Value (string):
1786 ```
1787 <enabled/> or <disabled/>
1788 ```
1789 #### macOS
1790 ```
1791 <dict>
1792   <key>DisableProfileRefresh</key>
1793   <true/> | <false/>
1794 </dict>
1795 ```
1796 #### policies.json
1797 ```
1798 {
1799   "policies": {
1800     "DisableProfileRefresh": true | false
1801   }
1802 }
1803 ```
1804 ### DisableSafeMode
1805 Disable safe mode within the browser.
1806
1807 On Windows, this disables safe mode via the command line as well.
1808
1809 **Compatibility:** Firefox 60, Firefox ESR 60 (Windows, macOS)\
1810 **CCK2 Equivalent:** `disableSafeMode`\
1811 **Preferences Affected:** N/A
1812
1813 #### Windows (GPO)
1814 ```
1815 Software\Policies\Mozilla\Firefox\DisableSafeMode = 0x1 | 0x0
1816 ```
1817 #### Windows (Intune)
1818 OMA-URI:
1819 ```
1820 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSafeMode
1821 ```
1822 Value (string):
1823 ```
1824 <enabled/> or <disabled/>
1825 ```
1826 #### macOS
1827 ```
1828 <dict>
1829   <key>DisableSafeMode</key>
1830   <true/> | <false/>
1831 </dict>
1832 ```
1833 #### policies.json
1834 ```
1835 {
1836   "policies": {
1837     "DisableSafeMode": true | false
1838   }
1839 }
1840 ```
1841 ### DisableSecurityBypass
1842 Prevent the user from bypassing security in certain cases.
1843
1844 `InvalidCertificate` prevents adding an exception when an invalid certificate is shown.
1845
1846 `SafeBrowsing` prevents selecting "ignore the risk" and visiting a harmful site anyway.
1847
1848 **Compatibility:** Firefox 60, Firefox ESR 60\
1849 **CCK2 Equivalent:** N/A\
1850 **Preferences Affected:** `security.certerror.hideAddException`, `browser.safebrowsing.allowOverride`
1851
1852 #### Windows (GPO)
1853 ```
1854 Software\Policies\Mozilla\Firefox\DisableSecurityBypass\InvalidCertificate = 0x1 | 0x0
1855 Software\Policies\Mozilla\Firefox\DisableSecurityBypass\SafeBrowsing = 0x1 | 0x0
1856 ```
1857 #### Windows (Intune)
1858 OMA-URI:
1859 ```
1860 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/P_DisableSecurityBypass_InvalidCertificate
1861 ```
1862 Value (string):
1863 ```
1864 <enabled/> or <disabled/>
1865 ```
1866 OMA-URI:
1867 ```
1868 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/P_DisableSecurityBypass_SafeBrowsing
1869 ```
1870 Value (string):
1871 ```
1872 <enabled/> or <disabled/>
1873 ```
1874
1875 #### macOS
1876 ```
1877 <dict>
1878   <key>DisableSecurityBypass</key>
1879   <dict>
1880     <key>InvalidCertificate</key>
1881     <true/> | <false/>
1882     <key>SafeBrowsing</key>
1883     <true/> | <false/>
1884   </dict>
1885 </dict>
1886 ```
1887 #### policies.json
1888 ```
1889 {
1890   "policies": {
1891     "DisableSecurityBypass": {
1892       "InvalidCertificate": true | false,
1893       "SafeBrowsing": true | false
1894     }
1895   }
1896 }
1897 ```
1898 ### DisableSetDesktopBackground
1899 Remove the "Set As Desktop Background..." menuitem when right clicking on an image.
1900
1901 **Compatibility:** Firefox 60, Firefox ESR 60\
1902 **CCK2 Equivalent:** `removeSetDesktopBackground`\
1903 **Preferences Affected:** N/A
1904
1905 #### Windows (GPO)
1906 ```
1907 Software\Policies\Mozilla\Firefox\DisableSetDesktopBackground = 0x1 | 0x0
1908 ```
1909 #### Windows (Intune)
1910 OMA-URI:
1911 ```
1912 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSetDesktopBackground
1913 ```
1914 Value (string):
1915 ```
1916 <enabled/> or <disabled/>
1917 ```
1918 #### macOS
1919 ```
1920 <dict>
1921   <key>DisableSetDesktopBackground</key>
1922   <true/> | <false/>
1923 </dict>
1924 ```
1925 #### policies.json
1926 ```
1927 {
1928   "policies": {
1929     "DisableSetDesktopBackground": true | false
1930   }
1931 }
1932 ```
1933 ### DisableSystemAddonUpdate
1934 Prevent system add-ons from being installed or updated.
1935
1936 **Compatibility:** Firefox 60, Firefox ESR 60\
1937 **CCK2 Equivalent:** N/A\
1938 **Preferences Affected:** N/A
1939
1940 #### Windows (GPO)
1941 ```
1942 Software\Policies\Mozilla\Firefox\DisableSystemAddonUpdate = 0x1 | 0x0
1943 ```
1944 #### Windows (Intune)
1945 OMA-URI:
1946 ```
1947 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSystemAddonUpdate
1948 ```
1949 Value (string):
1950 ```
1951 <enabled/> or <disabled/>
1952 ```
1953 #### macOS
1954 ```
1955 <dict>
1956   <key>DisableSystemAddonUpdate</key>
1957   <true/> | <false/>
1958 </dict>
1959 ```
1960 #### policies.json
1961 ```
1962 {
1963   "policies": {
1964     "DisableSystemAddonUpdate": true | false
1965   }
1966 }
1967 ```
1968 ### DisableTelemetry
1969 Prevent the upload of telemetry data.
1970
1971 As of Firefox 83 and Firefox ESR 78.5, local storage of telemetry data is disabled as well.
1972
1973 Mozilla recommends that you do not disable telemetry. Information collected through telemetry helps us build a better product for businesses like yours.
1974
1975 **Compatibility:** Firefox 60, Firefox ESR 60\
1976 **CCK2 Equivalent:** `disableTelemetry`\
1977 **Preferences Affected:** `datareporting.healthreport.uploadEnabled`, `datareporting.policy.dataSubmissionEnabled`, `toolkit.telemetry.archive.enabled`
1978
1979 #### Windows (GPO)
1980 ```
1981 Software\Policies\Mozilla\Firefox\DisableTelemetry = 0x1 | 0x0
1982 ```
1983 #### Windows (Intune)
1984 OMA-URI:
1985 ```
1986 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableTelemetry
1987 ```
1988 Value (string):
1989 ```
1990 <enabled/> or <disabled/>
1991 ```
1992 #### macOS
1993 ```
1994 <dict>
1995   <key>DisableTelemetry</key>
1996   <true/> | <false/>
1997 </dict>
1998 ```
1999 #### policies.json
2000 ```
2001 {
2002   "policies": {
2003     "DisableTelemetry": true | false
2004   }
2005 }
2006 ```
2007 ### DisplayBookmarksToolbar
2008 Set the initial state of the bookmarks toolbar. A user can still hide it and it will stay hidden.
2009
2010 **Compatibility:** Firefox 60, Firefox ESR 60\
2011 **CCK2 Equivalent:** `displayBookmarksToolbar`\
2012 **Preferences Affected:** N/A
2013
2014 #### Windows (GPO)
2015 ```
2016 Software\Policies\Mozilla\Firefox\DisplayBookmarksToolbar = 0x1 | 0x0
2017 ```
2018 #### Windows (Intune)
2019 OMA-URI:
2020 ```
2021 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisplayBookmarksToolbar
2022 ```
2023 Value (string):
2024 ```
2025 <enabled/> or <disabled/>
2026 ```
2027 #### macOS
2028 ```
2029 <dict>
2030   <key>DisplayBookmarksToolbar</key>
2031   <true/> | <false/>
2032 </dict>
2033 ```
2034 #### policies.json
2035 ```
2036 {
2037   "policies": {
2038     "DisplayBookmarksToolbar": true | false
2039   }
2040 }
2041 ```
2042 ### DisplayMenuBar
2043 Set the state of the menubar.
2044
2045 `always` means the menubar is shown and cannot be hidden.
2046
2047 `never` means the menubar is hidden and cannot be shown.
2048
2049 `default-on` means the menubar is on by default but can be hidden.
2050
2051 `default-off` means the menubar is off by default but can be shown.
2052
2053 **Compatibility:** Firefox 73, Firefox ESR 68.5 (Windows, some Linux)\
2054 **CCK2 Equivalent:** `displayMenuBar`\
2055 **Preferences Affected:** N/A
2056
2057 #### Windows (GPO)
2058 ```
2059 Software\Policies\Mozilla\Firefox\DisplayMenuBar = "always", "never", "default-on", "default-off"
2060 ```
2061 #### Windows (Intune)
2062 OMA-URI:
2063 ```
2064 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisplayMenuBar_Enum
2065 ```
2066 Value (string):
2067 ```
2068 <enabled/>
2069 <data id="DisplayMenuBar" value="always | never | default-on | default-off"/>
2070 ```
2071 #### macOS
2072 ```
2073 <dict>
2074   <key>DisplayMenuBar</key>
2075   <string>always | never | default-on | default-off</string>
2076 </dict>
2077 ```
2078 #### policies.json
2079 ```
2080 {
2081   "policies": {
2082     "DisplayMenuBar": "always", "never", "default-on", "default-off"
2083   }
2084 }
2085 ```
2086 ### DisplayMenuBar (Deprecated)
2087 Set the initial state of the menubar. A user can still hide it and it will stay hidden.
2088
2089 **Compatibility:** Firefox 60, Firefox ESR 60 (Windows, some Linux)\
2090 **CCK2 Equivalent:** `displayMenuBar`\
2091 **Preferences Affected:** N/A
2092
2093 #### Windows (GPO)
2094 ```
2095 Software\Policies\Mozilla\Firefox\DisplayMenuBar = 0x1 | 0x0
2096 ```
2097 #### macOS
2098 ```
2099 <dict>
2100   <key>DisplayMenuBar</key>
2101   <true/> | <false/>
2102 </dict>
2103 ```
2104 #### policies.json
2105 ```
2106 {
2107   "policies": {
2108     "DisplayMenuBar": true | false
2109   }
2110 }
2111 ```
2112 ### DNSOverHTTPS
2113 Configure DNS over HTTPS.
2114
2115 `Enabled` determines whether DNS over HTTPS is enabled
2116
2117 `ProviderURL` is a URL to another provider.
2118
2119 `Locked` prevents the user from changing DNS over HTTPS preferences.
2120
2121 `ExcludedDomains` excludes domains from DNS over HTTPS.
2122
2123 **Compatibility:** Firefox 63, Firefox ESR 68 (ExcludedDomains added in 75/68.7)\
2124 **CCK2 Equivalent:** N/A\
2125 **Preferences Affected:** `network.trr.mode`, `network.trr.uri`
2126
2127 #### Windows (GPO)
2128 ```
2129 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\Enabled = 0x1 | 0x0
2130 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\ProviderURL = "URL_TO_ALTERNATE_PROVIDER"
2131 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\Locked = 0x1 | 0x0
2132 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\ExcludedDomains\1 = "example.com"
2133 ```
2134 #### Windows (Intune)
2135 OMA-URI:
2136 ```
2137 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_Enabled
2138 ```
2139 Value (string):
2140 ```
2141 <enabled/> or <disabled/>
2142 ```
2143 OMA-URI:
2144 ```
2145 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_ProviderURL
2146 ```
2147 Value (string):
2148 ```
2149 <enabled/>
2150 <data id="String" value="URL_TO_ALTERNATE_PROVIDER"/>
2151 ```
2152 OMA-URI:
2153 ```
2154 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_Locked
2155 ```
2156 Value (string):
2157 ```
2158 <enabled/> or <disabled/>
2159 ```
2160 OMA-URI:
2161 ```
2162 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_ExcludedDomains
2163 ```
2164 Value (string):
2165 ```
2166 <enabled/>
2167 <data id="List" value="1&#xF000;example.com"/>
2168 ```
2169 #### macOS
2170 ```
2171 <dict>
2172   <key>DNSOverHTTPS</key>
2173   <dict>
2174     <key>Enabled</key>
2175     <true/> | <false/>
2176     <key>ProviderURL</key>
2177     <string>URL_TO_ALTERNATE_PROVIDER</string>
2178     <key>Locked</key>
2179     <true/> | <false/>
2180     <key>ExcludedDomains</key>
2181     <array>
2182       <string>example.com</string>
2183     </array>
2184   </dict>
2185 </dict>
2186 ```
2187 #### policies.json
2188 ```
2189 {
2190   "policies": {
2191     "DNSOverHTTPS": {
2192       "Enabled":  true | false,
2193       "ProviderURL": "URL_TO_ALTERNATE_PROVIDER",
2194       "Locked": true | false,
2195       "ExcludedDomains": ["example.com"]
2196     }
2197   }
2198 }
2199 ```
2200 ### DontCheckDefaultBrowser
2201 Don't check if Firefox is the default browser at startup.
2202
2203 **Compatibility:** Firefox 60, Firefox ESR 60\
2204 **CCK2 Equivalent:** `dontCheckDefaultBrowser`\
2205 **Preferences Affected:** `browser.shell.checkDefaultBrowser`
2206
2207 #### Windows (GPO)
2208 ```
2209 Software\Policies\Mozilla\Firefox\DontCheckDefaultBrowser = 0x1 | 0x0
2210 ```
2211 #### Windows (Intune)
2212 OMA-URI:
2213 ```
2214 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DontCheckDefaultBrowser
2215 ```
2216 Value (string):
2217 ```
2218 <enabled/> or <disabled/>
2219 ```
2220 #### macOS
2221 ```
2222 <dict>
2223   <key>DontCheckDefaultBrowser</key>
2224   <true/> | <false/>
2225 </dict>
2226 ```
2227 #### policies.json
2228 ```
2229 {
2230   "policies": {
2231     "DontCheckDefaultBrowser": true | false
2232   }
2233 }
2234 ```
2235 ### DownloadDirectory
2236 Set and lock the download directory.
2237
2238 You can use ${home} for the native home directory.
2239
2240 **Compatibility:** Firefox 68, Firefox ESR 68\
2241 **CCK2 Equivalent:** N/A\
2242 **Preferences Affected:** `browser.download.dir`, `browser.download.folderList`, `browser.download.useDownloadDir`
2243
2244 #### Windows (GPO)
2245 ```
2246 Software\Policies\Mozilla\Firefox\DownloadDirectory = "${home}\Downloads"
2247 ```
2248 #### Windows (Intune)
2249 OMA-URI:
2250 ```
2251 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DownloadDirectory
2252 ```
2253 Value (string):
2254 ```
2255 <enabled/>
2256 <data id="Preferences_String" value="${home}\Downloads"/>
2257 ```
2258 #### macOS
2259 ```
2260 <dict>
2261   <key>DownloadDirectory</key>
2262   <string>${home}/Downloads</string>
2263 </dict>
2264 ```
2265 #### policies.json (macOS and Linux)
2266 ```
2267 {
2268   "policies": {
2269     "DownloadDirectory": "${home}/Downloads"
2270 }
2271 ```
2272 #### policies.json (Windows)
2273 ```
2274 {
2275   "policies": {
2276     "DownloadDirectory": "${home}\\Downloads"
2277 }
2278 ```
2279 ### EnableTrackingProtection
2280 Configure tracking protection.
2281
2282 If this policy is not configured, tracking protection is not enabled by default in the browser, but it is enabled by default in private browsing and the user can change it.
2283
2284 If `Value` is set to false, tracking protection is disabled and locked in both the regular browser and private browsing.
2285
2286 If `Value` is set to true, tracking protection is enabled by default in both the regular browser and private browsing and the `Locked` value determines whether or not a user can change it.
2287
2288 If `Cryptomining` is set to true, cryptomining scripts on websites are blocked.
2289
2290 If `Fingerprinting` is set to true, fingerprinting scripts on websites are blocked.
2291
2292 `Exceptions` are origins for which tracking protection is not enabled.
2293
2294 **Compatibility:** Firefox 60, Firefox ESR 60 (Cryptomining and Fingerprinting added in 70/68.2, Exceptions added in 73/68.5)\
2295 **CCK2 Equivalent:** N/A\
2296 **Preferences Affected:** `privacy.trackingprotection.enabled`, `privacy.trackingprotection.pbmode.enabled`, `privacy.trackingprotection.cryptomining.enabled`, `privacy.trackingprotection.fingerprinting.enabled`
2297
2298 #### Windows (GPO)
2299 ```
2300 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Value = 0x1 | 0x0
2301 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Locked = 0x1 | 0x0
2302 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Cryptomining = 0x1 | 0x0
2303 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Fingerprinting = 0x1 | 0x0
2304 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Exceptions\1 = "https://example.com"
2305 ```
2306 #### Windows (Intune)
2307 OMA-URI:
2308 ```
2309 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/A_TrackingProtection_Value
2310 ```
2311 Value (string):
2312 ```
2313 <enabled/> or <disabled/>
2314 ```
2315 OMA-URI:
2316 ```
2317 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/B_TrackingProtection_Cryptomining
2318 ```
2319 Value (string):
2320 ```
2321 <enabled/> or <disabled/>
2322 ```
2323 OMA-URI:
2324 ```
2325 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/C_TrackingProtection_Fingerprinting
2326 ```
2327 Value (string):
2328 ```
2329 <enabled/> or <disabled/>
2330 ```
2331 OMA-URI:
2332 ```
2333 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/D_TrackingProtection_Exceptions
2334 ```
2335 Value (string):
2336 ```
2337 <data id="TrackingProtection_Exceptions" value="1&#xF000;https://example.com"/>
2338 ```
2339 OMA-URI:
2340 ```
2341 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/E_TrackingProtection_Locked
2342 ```
2343 Value (string):
2344 ```
2345 <enabled/> or <disabled/>
2346 ```
2347 #### macOS
2348 ```
2349 <dict>
2350   <key>EnableTrackingProtection</key>
2351   <dict>
2352     <key>Value</key>
2353     <true/> | <false/>
2354     <key>Locked</key>
2355     <true/> | <false/>
2356     <key>Cryptomining</key>
2357     <true/> | <false/>
2358     <key>Fingerprinting</key>
2359     <true/> | <false/>
2360     <key>Exceptions</key>
2361     <array>
2362       <string>https://example.com</string>
2363     </array>
2364   </dict>
2365 </dict>
2366 ```
2367 #### policies.json
2368 ```
2369 {
2370   "policies": {
2371     "EnableTrackingProtection": {
2372       "Value": true | false,
2373       "Locked": true | false,
2374       "Cryptomining": true | false,
2375       "Fingerprinting": true | false,
2376       "Exceptions": ["https://example.com"]
2377     }
2378   }
2379 }
2380 ```
2381 ### EncryptedMediaExtensions
2382 Enable or disable Encrypted Media Extensions and optionally lock it.
2383
2384 If `Enabled` is set to false, encrypted media extensions (like Widevine) are not downloaded by Firefox unless the user consents to installing them.
2385
2386 If `Locked` is set to true and `Enabled` is set to false, Firefox will not download encrypted media extensions (like Widevine) or ask the user to install them.
2387
2388 **Compatibility:** Firefox 77, Firefox ESR 68.9\
2389 **CCK2 Equivalent:** N/A\
2390 **Preferences Affected:** `media.eme.enabled`
2391
2392 #### Windows (GPO)
2393 ```
2394 Software\Policies\Mozilla\Firefox\EncryptedMediaExtensions\Enabled = 0x1 | 0x0
2395 Software\Policies\Mozilla\Firefox\EncryptedMediaExtensions\Locked = 0x1 | 0x0
2396 ```
2397 #### Windows (Intune)
2398 OMA-URI:
2399 ```
2400 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~EncryptedMediaExtensions/EncryptedMediaExtensions_Enabled
2401 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~EncryptedMediaExtensions/EncryptedMediaExtensions_Locked
2402 ```
2403 Value (string):
2404 ```
2405 <enabled/>or <disabled/>
2406 ```
2407 #### macOS
2408 ```
2409 <dict>
2410   <key>EncryptedMediaExtensions</key>
2411   <dict>
2412     <key>Enabled</key>
2413     <true/> | <false/>
2414     <key>Locked</key>
2415     <true/> | <false/>
2416   </dict>
2417 </dict>
2418 ```
2419 #### policies.json
2420 ```
2421 {
2422   "policies": {
2423     "EncryptedMediaExtensions": {
2424       "Enabled": true | false,
2425       "Locked": true | false
2426     }
2427   }
2428 }
2429 ```
2430 ### EnterprisePoliciesEnabled
2431 Enable policy support on macOS.
2432
2433 **Compatibility:** Firefox 63, Firefox ESR 60.3 (macOS only)\
2434 **CCK2 Equivalent:** N/A\
2435 **Preferences Affected:** N/A
2436
2437 #### macOS
2438 ```
2439 <dict>
2440   <key>EnterprisePoliciesEnabled</key>
2441   <true/>
2442 </dict>
2443 ```
2444 ### ExemptDomainFileTypePairsFromFileTypeDownloadWarnings
2445
2446 Disable warnings based on file extension for specific file types on domains.
2447
2448 This policy is based on the [Chrome policy](https://chromeenterprise.google/policies/#ExemptDomainFileTypePairsFromFileTypeDownloadWarnings) of the same name.
2449
2450 Important: The documentation for the policy for both Edge and Chrome is incorrect. The ```domains``` value must be a domain, not a URL pattern. Also, we do not support using ```*``` to mean all domains.
2451
2452 **Compatibility:** Firefox 102\
2453 **CCK2 Equivalent:** N/A\
2454 **Preferences Affected:** N/A
2455
2456 #### Windows (GPO)
2457 Software\Policies\Mozilla\Firefox\ExemptDomainFileTypePairsFromFileTypeDownloadWarnings (REG_MULTI_SZ) =
2458 ```
2459 [
2460   {
2461      "file_extension": "jnlp",
2462      "domains": ["example.com"]
2463   }
2464 ]
2465 ```
2466 #### Windows (Intune)
2467 OMA-URI:
2468 ```
2469 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/ExemptDomainFileTypePairsFromFileTypeDownloadWarnings
2470 ```
2471 Value (string):
2472 ```
2473 <enabled/>
2474 <data id="JSON" value='
2475 [
2476   {
2477      "file_extension": "jnlp",
2478      "domains": ["example.com"]
2479   }
2480 ]
2481 '/>
2482 ```
2483 #### macOS
2484 ```
2485 <dict>
2486   <key>ExemptDomainFileTypePairsFromFileTypeDownloadWarnings</key>
2487   <array>
2488     <dict>
2489       <key>file_extension</key>
2490       <string>jnlp</string>
2491       <key>domains</key>
2492       <array>
2493         <string>example.com</string>
2494       </array>
2495     </dict>
2496   </array>
2497 </dict>
2498 ```
2499 #### policies.json
2500 ```
2501 {
2502   "policies": {
2503     "ExemptDomainFileTypePairsFromFileTypeDownloadWarnings": [{
2504       "file_extension": "jnlp",
2505       "domains": ["example.com"]
2506     }]
2507   }
2508 }
2509 ```
2510 ### Extensions
2511 Control the installation, uninstallation and locking of extensions.
2512
2513 While this policy is not technically deprecated, it is recommended that you use the **[`ExtensionSettings`](#extensionsettings)** policy. It has the same functionality and adds more. It does not support native paths, though, so you'll have to use file:/// URLs.
2514
2515 `Install` is a list of URLs or native paths for extensions to be installed.
2516
2517 `Uninstall` is a list of extension IDs that should be uninstalled if found.
2518
2519 `Locked` is a list of extension IDs that the user cannot disable or uninstall.
2520
2521 **Compatibility:** Firefox 60, Firefox ESR 60\
2522 **CCK2 Equivalent:** `addons`\
2523 **Preferences Affected:** N/A
2524
2525 #### Windows (GPO)
2526 ```
2527 Software\Policies\Mozilla\Firefox\Extensions\Install\1 = "https://addons.mozilla.org/firefox/downloads/somefile.xpi"
2528 Software\Policies\Mozilla\Firefox\Extensions\Install\2 = "//path/to/xpi"
2529 Software\Policies\Mozilla\Firefox\Extensions\Uninstall\1 = "bad_addon_id@mozilla.org"
2530 Software\Policies\Mozilla\Firefox\Extensions\Locked\1 = "addon_id@mozilla.org"
2531 ```
2532 #### Windows (Intune)
2533 OMA-URI:
2534 ```
2535 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/Extensions_Install
2536 ```
2537 Value (string):
2538 ```
2539 <enabled/>
2540 <data id="Extensions" value="1&#xF000;https://addons.mozilla.org/firefox/downloads/somefile.xpi&#xF000;2&#xF000;//path/to/xpi"/>
2541 ```
2542 OMA-URI:
2543 ```
2544 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/Extensions_Uninstall
2545 ```
2546 Value (string):
2547 ```
2548 <enabled/>
2549 <data id="Extensions" value="1&#xF000;bad_addon_id@mozilla.org"/>
2550 ```
2551 OMA-URI:
2552 ```
2553 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/Extensions_Locked
2554 ```
2555 Value (string):
2556 ```
2557 <enabled/>
2558 <data id="Extensions" value="1&#xF000;addon_id@mozilla.org"/>
2559 ```
2560 #### macOS
2561 ```
2562 <dict>
2563   <key>Extensions</key>
2564   <dict>
2565     <key>Install</key>
2566     <array>
2567       <string>https://addons.mozilla.org/firefox/downloads/somefile.xpi</string>
2568       <string>//path/to/xpi</string>
2569     </array>
2570     <key>Uninstall</key>
2571     <array>
2572       <string>bad_addon_id@mozilla.org</string>
2573     </array>
2574     <key>Locked</key>
2575     <array>
2576       <string>addon_id@mozilla.org</string>
2577     </array>
2578   </dict>
2579 </dict>
2580 ```
2581 #### policies.json
2582 ```
2583 {
2584   "policies": {
2585     "Extensions": {
2586       "Install": ["https://addons.mozilla.org/firefox/downloads/somefile.xpi", "//path/to/xpi"],
2587       "Uninstall": ["bad_addon_id@mozilla.org"],
2588       "Locked":  ["addon_id@mozilla.org"]
2589     }
2590   }
2591 }
2592 ```
2593 ### ExtensionSettings
2594 Manage all aspects of extensions. This policy is based heavily on the [Chrome policy](https://dev.chromium.org/administrators/policy-list-3/extension-settings-full) of the same name.
2595
2596 This policy maps an extension ID to its configuration. With an extension ID, the configuration will be applied to the specified extension only. A default configuration can be set for the special ID "*", which will apply to all extensions that don't have a custom configuration set in this policy.
2597
2598 To obtain an extension ID, install the extension and go to about:support. You will see the ID in the Extensions section. I've also created an extension that makes it easy to find the ID of extensions on AMO. You can download it [here](https://github.com/mkaply/queryamoid/releases/tag/v0.1).
2599
2600 The configuration for each extension is another dictionary that can contain the fields documented below.
2601
2602 | Name | Description |
2603 | --- | --- |
2604 | `installation_mode` | Maps to a string indicating the installation mode for the extension. The valid strings are `allowed`,`blocked`,`force_installed`, and `normal_installed`.
2605 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`allowed` | Allows the extension to be installed by the user. This is the default behavior. There is no need for an install_url; it will automatically be allowed based on the ID.
2606 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`blocked`| Blocks installation of the extension and removes it from the device if already installed.
2607 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`force_installed`| The extension is automatically installed and can't be removed by the user. This option is not valid for the default configuration and requires an install_url.
2608 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`normal_installed`| The extension is automatically installed but can be disabled by the user. This option is not valid for the default configuration and requires an install_url.
2609 | `install_url`| Maps to a URL indicating where Firefox can download a force_installed or normal_installed extension.  If installing from the local file system, use a [```file:///``` URL](https://en.wikipedia.org/wiki/File_URI_scheme). If installing from the addons.mozilla.org, use the following URL (substituting SHORT_NAME from the URL on AMO), https://addons.mozilla.org/firefox/downloads/latest/SHORT_NAME/latest.xpi. Languages packs are available from https://releases.mozilla.org/pub/firefox/releases/VERSION/PLATFORM/xpi/LANGUAGE.xpi. If you need to update the extension, you can change the name of the extension and it will be automatically updated. Extensions installed from file URLs will additional be updated when their internal version changes.
2610 | `install_sources` | A list of sources from which installing extensions is allowed. **This is unnecessary if you are only allowing the installation of certain extensions by ID.** Each item in this list is an extension-style match pattern. Users will be able to easily install items from any URL that matches an item in this list. Both the location of the *.xpi file and the page where the download is started from (i.e.  the referrer) must be allowed by these patterns. This setting can be used only for the default configuration.
2611 | `allowed_types` | This setting whitelists the allowed types of extension/apps that can be installed in Firefox. The value is a list of strings, each of which should be one of the following: "extension", "theme", "dictionary", "locale" This setting can be used only for the default configuration.
2612 | `blocked_install_message` | This maps to a string specifying the error message to display to users if they're blocked from installing an extension. This setting allows you to append text to the generic error message displayed when the extension is blocked. This could be be used to direct users to your help desk, explain why a particular extension is blocked, or something else. This setting can be used only for the default configuration.
2613 | `restricted_domains` | An array of domains on which content scripts can't be run. This setting can be used only for the default configuration.
2614 | `updates_disabled` | (Firefox 89, Firefox ESR 78.11) Boolean that indicates whether or not to disable automatic updates for an individual extension.
2615
2616 **Compatibility:** Firefox 69, Firefox ESR 68.1 (As of Firefox 85, Firefox ESR 78.7, installing a theme makes it the default.)\
2617 **CCK2 Equivalent:** N/A\
2618 **Preferences Affected:** N/A
2619
2620 #### Windows (GPO)
2621 Software\Policies\Mozilla\Firefox\ExtensionSettings (REG_MULTI_SZ) =
2622 ```
2623 {
2624   "*": {
2625     "blocked_install_message": "Custom error message.",
2626     "install_sources": ["about:addons","https://addons.mozilla.org/"],
2627     "installation_mode": "blocked",
2628     "allowed_types": ["extension"]
2629   },
2630   "uBlock0@raymondhill.net": {
2631     "installation_mode": "force_installed",
2632     "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
2633   },
2634   "https-everywhere@eff.org": {
2635     "installation_mode": "allowed"
2636   }
2637 }
2638 ```
2639 #### Windows (Intune)
2640 OMA-URI:
2641 ```
2642 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/ExtensionSettings
2643 ```
2644 Value (string):
2645 ```
2646 <enabled/>
2647 <data id="ExtensionSettings" value='
2648 {
2649   "*": {
2650     "blocked_install_message": "Custom error message.",
2651     "install_sources": ["about:addons","https://addons.mozilla.org/"],
2652     "installation_mode": "blocked",
2653     "allowed_types": ["extension"]
2654   },
2655   "uBlock0@raymondhill.net": {
2656     "installation_mode": "force_installed",
2657     "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
2658   },
2659     "https-everywhere@eff.org": {
2660     "installation_mode": "allowed"
2661   }
2662 }'/>
2663 ```
2664 #### macOS
2665 ```
2666 <dict>
2667   <key>ExtensionSettings</key>
2668   <dict>
2669     <key>*</key>
2670     <dict>
2671       <key>blocked_install_message</key>
2672       <string>Custom error message.</string>
2673       <key>install_sources</key>
2674       <array>
2675         <string>about:addons</string>
2676         <string>https://addons.mozilla.org/</string>
2677       </array>
2678       <key>installation_mode</key>
2679       <string>blocked</string>
2680       <key>allowed_types</key>
2681       <array>
2682         <string>extension</string>
2683       </array>
2684     </dict>
2685     <key>uBlock0@raymondhill.net</key>
2686     <dict>
2687       <key>installation_mode</key>
2688        <string>force_installed</string>
2689       <key>install_url</key>
2690       <string>https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi</string>
2691     </dict>
2692     <key>https-everywhere@eff.org</key>
2693     <dict>
2694       <key>installation_mode</key>
2695        <string>allowed</string>
2696     </dict>
2697   </dict>
2698 </dict>
2699 ```
2700 #### policies.json
2701 ```
2702 {
2703   "policies": {
2704     "ExtensionSettings": {
2705       "*": {
2706         "blocked_install_message": "Custom error message.",
2707         "install_sources": ["about:addons","https://addons.mozilla.org/"],
2708         "installation_mode": "blocked",
2709         "allowed_types": ["extension"]
2710       },
2711       "uBlock0@raymondhill.net": {
2712         "installation_mode": "force_installed",
2713         "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
2714       },
2715       "https-everywhere@eff.org": {
2716         "installation_mode": "allowed"
2717       }
2718     }
2719   }
2720 }
2721 ```
2722 ### ExtensionUpdate
2723 Control extension updates.
2724
2725 **Compatibility:** Firefox 67, Firefox ESR 60.7\
2726 **CCK2 Equivalent:** N/A\
2727 **Preferences Affected:** `extensions.update.enabled`
2728
2729 #### Windows (GPO)
2730 ```
2731 Software\Policies\Mozilla\Firefox\ExtensionUpdate = 0x1 | 0x0
2732 ```
2733 #### Windows (Intune)
2734 OMA-URI:
2735 ```
2736 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/ExtensionUpdate
2737 ```
2738 Value (string):
2739 ```
2740 <enabled/> or <disabled/>
2741 ```
2742 #### macOS
2743 ```
2744 <dict>
2745   <key>ExtensionUpdate</key>
2746   <true/> | <false/>
2747 </dict>
2748 ```
2749 #### policies.json
2750 ```
2751 {
2752   "policies": {
2753     "ExtensionUpdate": true | false
2754   }
2755 }
2756 ```
2757 ### FirefoxHome
2758 Customize the Firefox Home page.
2759
2760 **Compatibility:** Firefox 68, Firefox ESR 68 (SponsoredTopSites and SponsoredPocket were added in Firefox 95, Firefox ESR 91.4)
2761 **CCK2 Equivalent:** N/A\
2762 **Preferences Affected:** `browser.newtabpage.activity-stream.showSearch`, `browser.newtabpage.activity-stream.feeds.topsites`, `browser.newtabpage.activity-stream.feeds.section.highlights`, `browser.newtabpage.activity-stream.feeds.section.topstories`, `browser.newtabpage.activity-stream.feeds.snippets`, `browser.newtabpage.activity-stream.showSponsoredTopSites`, `browser.newtabpage.activity-stream.showSponsored`
2763
2764 #### Windows (GPO)
2765 ```
2766 Software\Policies\Mozilla\Firefox\FirefoxHome\Search = 0x1 | 0x0
2767 Software\Policies\Mozilla\Firefox\FirefoxHome\TopSites = 0x1 | 0x0
2768 Software\Policies\Mozilla\Firefox\FirefoxHome\SponsoredTopSites = 0x1 | 0x0
2769 Software\Policies\Mozilla\Firefox\FirefoxHome\Highlights = 0x1 | 0x0
2770 Software\Policies\Mozilla\Firefox\FirefoxHome\Pocket = 0x1 | 0x0
2771 Software\Policies\Mozilla\Firefox\FirefoxHome\SponsoredPocket = 0x1 | 0x0
2772 Software\Policies\Mozilla\Firefox\FirefoxHome\Snippets = 0x1 | 0x0
2773 Software\Policies\Mozilla\Firefox\FirefoxHome\Locked = 0x1 | 0x0
2774 ```
2775 #### Windows (Intune)
2776 OMA-URI:
2777 ```
2778 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/CustomizeFirefoxHome
2779 ```
2780 Value (string):
2781 ```
2782 <enabled/>
2783 <data id="FirefoxHome_Search"  value="true | false"/>
2784 <data id="FirefoxHome_TopSites"  value="true | false"/>
2785 <data id="FirefoxHome_SponsoredTopSites"  value="true | false"/>
2786 <data id="FirefoxHome_Highlights"  value="true | false"/>
2787 <data id="FirefoxHome_Pocket"  value="true | false"/>
2788 <data id="FirefoxHome_SponsoredPocket"  value="true | false"/>
2789 <data id="FirefoxHome_Snippets"  value="true | false"/>
2790 <data id="FirefoxHome_Locked"  value="true | false"/>
2791 ```
2792 #### macOS
2793 ```
2794 <dict>
2795   <key>FirefoxHome</key>
2796   <dict>
2797     <key>Search</key>
2798     <true/> | <false/>
2799     <key>TopSites</key>
2800     <true/> | <false/>
2801     <key>SponsoredTopSites</key>
2802     <true/> | <false/>
2803     <key>Highlights</key>
2804     <true/> | <false/>
2805     <key>Pocket</key>
2806     <true/> | <false/>
2807     <key>SponsoredPocket</key>
2808     <true/> | <false/>
2809     <key>Snippets</key>
2810     <true/> | <false/>
2811     <key>Locked</key>
2812     <true/> | <false/>
2813   </dict>
2814 </dict>
2815 ```
2816 #### policies.json
2817 ```
2818 {
2819   "policies": {
2820     "FirefoxHome": {
2821       "Search": true | false,
2822       "TopSites": true | false,
2823       "SponsoredTopSites": true | false,
2824       "Highlights": true | false,
2825       "Pocket": true | false,
2826       "SponsoredPocket": true | false,
2827       "Snippets": true | false,
2828       "Locked": true | false
2829     }
2830   }
2831 }
2832 ```
2833 ### FlashPlugin (Deprecated)
2834 Configure the default Flash plugin policy as well as origins for which Flash is allowed.
2835
2836 `Allow` is a list of origins where Flash are allowed.
2837
2838 `Block` is a list of origins where Flash is not allowed.
2839
2840 `Default` determines whether or not Flash is allowed by default.
2841
2842 `Locked` prevents the user from changing Flash preferences.
2843
2844 **Compatibility:** Firefox 60, Firefox ESR 60\
2845 **CCK2 Equivalent:** `permissions.plugin`\
2846 **Preferences Affected:** `plugin.state.flash`
2847
2848 #### Windows (GPO)
2849 ```
2850 Software\Policies\Mozilla\Firefox\FlashPlugin\Allow\1 = "https://example.org"
2851 Software\Policies\Mozilla\Firefox\FlashPlugin\Block\1 = "https://example.edu"
2852 Software\Policies\Mozilla\Firefox\FlashPlugin\Default = 0x1 | 0x0
2853 Software\Policies\Mozilla\Firefox\FlashPlugin\Locked = 0x1 | 0x0
2854 ```
2855 #### Windows (Intune)
2856 OMA-URI:
2857 ```
2858 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Flash/FlashPlugin_Allow
2859 ```
2860 Value (string):
2861 ```
2862 <enabled/>
2863 <data id="Permissions" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
2864 ```
2865 OMA-URI:
2866 ```
2867 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Flash/FlashPlugin_Locked
2868 ```
2869 Value (string):
2870 ```
2871 <enabled/> or <disabled/>
2872 ```
2873 OMA-URI:
2874 ```
2875 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Flash/FlashPlugin_Default
2876 ```
2877 Value (string):
2878 ```
2879 <enabled/> or <disabled/>
2880 ```
2881 #### macOS
2882 ```
2883 <dict>
2884   <key>FlashPlugin</key>
2885   <dict>
2886     <key>Allow</key>
2887     <array>
2888       <string>http://example.org</string>
2889     </array>
2890     <key>Block</key>
2891     <array>
2892       <string>http://example.edu</string>
2893     </array>
2894     <key>Default</key>
2895     <true/> | <false/>
2896     <key>Locked</key>
2897     <true/> | <false/>
2898   </dict>
2899 </dict>
2900 ```
2901 #### policies.json
2902 ```
2903 {
2904   "policies": {
2905     "FlashPlugin": {
2906       "Allow": ["http://example.org/"],
2907       "Block": ["http://example.edu/"],
2908       "Default": true | false,
2909       "Locked": true | false
2910     }
2911   }
2912 }
2913 ```
2914 ### Handlers
2915 Configure default application handlers. This policy is based on the internal format of `handlers.json`.
2916
2917 You can configure handlers based on a mime type (`mimeTypes`), a file's extension (`extensions`), or a protocol (`schemes`).
2918
2919 Within each handler type, you specify the given mimeType/extension/scheme as a key and use the following subkeys to describe how it is handled.
2920
2921 | Name | Description |
2922 | --- | --- |
2923 | `action`| Can be either `saveToDisk`, `useHelperApp`, `useSystemDefault`.
2924 | `ask` | If `true`, the user is asked if what they want to do with the file. If `false`, the action is taken without user intervention.
2925 | `handlers` | An array of handlers with the first one being the default. If you don't want to have a default handler, use an empty object for the first handler. Choose between path or uriTemplate.
2926 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`name` | The display name of the handler (might not be used).
2927 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`path`| The native path to the executable to be used.
2928 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`uriTemplate`| A url to a web based application handler. The URL must be https and contain a %s to be used for substitution.
2929
2930 **Compatibility:** Firefox 78, Firefox ESR 78\
2931 **CCK2 Equivalent:** N/A\
2932 **Preferences Affected:** N/A
2933
2934 #### Windows (GPO)
2935 Software\Policies\Mozilla\Firefox\Handlers (REG_MULTI_SZ) =
2936 ```
2937 {
2938   "mimeTypes": {
2939     "application/msword": {
2940       "action": "useSystemDefault",
2941       "ask": true | false
2942     }
2943   },
2944   "schemes": {
2945     "mailto": {
2946       "action": "useHelperApp",
2947       "ask": true | false,
2948       "handlers": [{
2949         "name": "Gmail",
2950         "uriTemplate": "https://mail.google.com/mail/?extsrc=mailto&url=%s"
2951       }]
2952     }
2953   },
2954   "extensions": {
2955     "pdf": {
2956       "action": "useHelperApp",
2957       "ask": true | false,
2958       "handlers": [{
2959         "name": "Adobe Acrobat",
2960         "path": "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32.exe"
2961       }]
2962     }
2963   }
2964 }
2965 ```
2966 #### Windows (Intune)
2967 OMA-URI:
2968 ```
2969 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Handlers
2970 ```
2971 Value (string):
2972 ```
2973 <enabled/>
2974 <data id="Handlers" value='
2975 {
2976   "mimeTypes": {
2977     "application/msword": {
2978       "action": "useSystemDefault",
2979       "ask": true | false
2980     }
2981   },
2982   "schemes": {
2983     "mailto": {
2984       "action": "useHelperApp",
2985       "ask": true | false,
2986       "handlers": [{
2987         "name": "Gmail",
2988         "uriTemplate": "https://mail.google.com/mail/?extsrc=mailto&amp;url=%s"
2989       }]
2990     }
2991   },
2992   "extensions": {
2993     "pdf": {
2994       "action": "useHelperApp",
2995       "ask": true | false,
2996       "handlers": [{
2997         "name": "Adobe Acrobat",
2998         "path": "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32.exe"
2999       }]
3000     }
3001   }
3002 }
3003 '/>
3004 ```
3005 #### macOS
3006 ```
3007 <dict>
3008   <key>Handlers</key>
3009   <dict>
3010     <key>mimeTypes</key>
3011     <dict>
3012       <key>application/msword</key>
3013       <dict>
3014         <key>action</key>
3015         <string>useSystemDefault</string>
3016         <key>ask</key>
3017         <true/> | <false/>
3018       </dict>
3019     </dict>
3020     <key>schemes</key>
3021     <dict>
3022       <key>mailto</key>
3023       <dict>
3024         <key>action</key>
3025         <string>useHelperApp</string>
3026         <key>ask</key>
3027         <true/> | <false/>
3028         <key>handlers</key>
3029         <array>
3030           <dict>
3031             <key>name</key>
3032             <string>Gmail</string>
3033             <key>uriTemplate</key>
3034             <string>https://mail.google.com/mail/?extsrc=mailto&url=%s</string>
3035           </dict>
3036         </array>
3037       </dict>
3038     </dict>
3039     <key>extensions</key>
3040     <dict>
3041       <key>pdf</key>
3042       <dict>
3043         <key>action</key>
3044         <string>useHelperApp</string>
3045         <key>ask</key>
3046         <true/> | <false/>
3047         <key>handlers</key>
3048         <array>
3049           <dict>
3050             <key>name</key>
3051             <string>Adobe Acrobat</string>
3052             <key>path</key>
3053             <string>/System/Applications/Preview.app</string>
3054           </dict>
3055         </array>
3056       </dict>
3057     </dict>
3058   </dict>
3059 </dict>
3060 ```
3061 #### policies.json
3062 ```
3063 {
3064   "policies": {
3065     "Handlers": {
3066       "mimeTypes": {
3067         "application/msword": {
3068           "action": "useSystemDefault",
3069           "ask": false
3070         }
3071       },
3072       "schemes": {
3073         "mailto": {
3074           "action": "useHelperApp",
3075           "ask": true | false,
3076           "handlers": [{
3077             "name": "Gmail",
3078             "uriTemplate": "https://mail.google.com/mail/?extsrc=mailto&url=%s"
3079           }]
3080         }
3081       },
3082       "extensions": {
3083         "pdf": {
3084           "action": "useHelperApp",
3085           "ask": true | false,
3086           "handlers": [{
3087             "name": "Adobe Acrobat",
3088             "path": "/usr/bin/acroread"
3089           }]
3090         }
3091       }
3092     }
3093   }
3094 }
3095 ```
3096 ### HardwareAcceleration
3097 Control hardware acceleration.
3098
3099 **Compatibility:** Firefox 60, Firefox ESR 60\
3100 **CCK2 Equivalent:** N/A\
3101 **Preferences Affected:** `layers.acceleration.disabled`
3102
3103 #### Windows (GPO)
3104 ```
3105 Software\Policies\Mozilla\Firefox\HardwareAcceleration = 0x1 | 0x0
3106 ```
3107 #### Windows (Intune)
3108 OMA-URI:
3109 ```
3110 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/HardwareAcceleration
3111 ```
3112 Value (string):
3113 ```
3114 <enabled/> or <disabled/>
3115 ```
3116 #### macOS
3117 ```
3118 <dict>
3119   <key>HardwareAcceleration</key>
3120   <true/> | <false/>
3121 </dict>
3122 ```
3123 #### policies.json
3124 ```
3125 {
3126   "policies": {
3127     "HardwareAcceleration": true | false
3128   }
3129 }
3130 ```
3131 ### Homepage
3132 Configure the default homepage and how Firefox starts.
3133
3134 `URL` is the default homepage.
3135
3136 `Locked` prevents the user from changing homepage preferences.
3137
3138 `Additional` allows for more than one homepage.
3139
3140 `StartPage` is how Firefox starts. The choices are no homepage, the default homepage or the previous session.
3141
3142 With Firefox 78, an additional option as added for `Startpage`, `homepage-locked`. If this is value is set for the Startpage, the user will always get the homepage at startup and cannot choose to restore their session.
3143
3144 **Compatibility:** Firefox 60, Firefox ESR 60 (StartPage was added in Firefox 60, Firefox ESR 60.4, homepage-locked added in Firefox 78)\
3145 **CCK2 Equivalent:** `homePage`,`lockHomePage`\
3146 **Preferences Affected:** `browser.startup.homepage`, `browser.startup.page`
3147
3148 #### Windows (GPO)
3149 ```
3150 Software\Policies\Mozilla\Firefox\Homepage\URL = "https://example.com"
3151 Software\Policies\Mozilla\Firefox\Homepage\Locked = 0x1 | 0x0
3152 Software\Policies\Mozilla\Firefox\Homepage\Additional\1 = "https://example.org"
3153 Software\Policies\Mozilla\Firefox\Homepage\Additional\2 = "https://example.edu"
3154 Software\Policies\Mozilla\Firefox\Homepage\StartPage = "none" | "homepage" | "previous-session" | "homepage-locked"
3155 ```
3156 #### Windows (Intune)
3157 OMA-URI:
3158 ```
3159 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageURL
3160 ```
3161 Value (string):
3162 ```
3163 <enabled/>
3164
3165 <data id="HomepageURL" value="https://example.com"/>
3166 <data id="HomepageLocked" value="true | false"/>
3167 ```
3168 OMA-URI:
3169 ```
3170 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageAdditional
3171 ```
3172 Value (string):
3173 ```
3174 <enabled/>
3175
3176 <data id="HomepageAdditional" value="1&#xF000;http://example.org&#xF000;2&#xF000;http://example.edu"/>
3177 ```
3178 OMA-URI:
3179 ```
3180 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageStartPage
3181 ```
3182 Value (string):
3183 ```
3184 <enabled/>
3185
3186 <data id="StartPage" value="none | homepage | previous-session"/>
3187 ```
3188 #### macOS
3189 ```
3190 <dict>
3191   <key>Homepage</key>
3192   <dict>
3193     <key>URL</key>
3194     <string>http://example.com</string>
3195     <key>Locked</key>
3196     <true/> | <false/>
3197     <key>Additional</key>
3198     <array>
3199       <string>http://example.org</string>
3200       <string>http://example.edu</string>
3201     </array>
3202     <key>StartPage</key>
3203     <string>none | homepage | previous-session | homepage-locked</string>
3204   </dict>
3205 </dict>
3206 ```
3207 #### policies.json
3208 ```
3209 {
3210   "policies": {
3211     "Homepage": {
3212       "URL": "http://example.com/",
3213       "Locked": true | false,
3214       "Additional": ["http://example.org/",
3215                      "http://example.edu/"],
3216       "StartPage": "none" | "homepage" | "previous-session" | "homepage-locked"
3217     }
3218   }
3219 }
3220 ```
3221 ### InstallAddonsPermission
3222 Configure the default extension install policy as well as origins for extension installs are allowed. This policy does not override turning off all extension installs.
3223
3224 `Allow` is a list of origins where extension installs are allowed.
3225
3226 `Default` determines whether or not extension installs are allowed by default.
3227
3228 **Compatibility:** Firefox 60, Firefox ESR 60\
3229 **CCK2 Equivalent:** `permissions.install`\
3230 **Preferences Affected:** `xpinstall.enabled`
3231
3232 #### Windows (GPO)
3233 ```
3234 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Allow\1 = "https://example.org"
3235 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Allow\2 = "https://example.edu"
3236 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Default = 0x1 | 0x0
3237 ```
3238 #### Windows (Intune)
3239 OMA-URI:
3240 ```
3241 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Addons/InstallAddonsPermission_Allow
3242 ```
3243 Value (string):
3244 ```
3245 <enabled/>
3246 <data id="Permissions" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
3247 ```
3248 OMA-URI:
3249 ```
3250 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Addons/InstallAddonsPermission_Default
3251 ```
3252 Value (string):
3253 ```
3254 <enabled/>
3255 ```
3256 #### macOS
3257 ```
3258 <dict>
3259   <key>InstallAddonsPermission</key>
3260   <dict>
3261     <key>Allow</key>
3262     <array>
3263       <string>http://example.org</string>
3264       <string>http://example.edu</string>
3265     </array>
3266     <key>Default</key>
3267     <true/> | <false/>
3268   </dict>
3269 </dict>
3270 ```
3271 #### policies.json
3272 ```
3273 {
3274   "policies": {
3275     "InstallAddonsPermission": {
3276       "Allow": ["http://example.org/",
3277                 "http://example.edu/"],
3278       "Default": true | false
3279     }
3280   }
3281 }
3282 ```
3283 ### LegacyProfiles
3284 Disable the feature enforcing a separate profile for each installation.
3285
3286 If this policy set to true, Firefox will not try to create different profiles for installations of Firefox in different directories. This is the equivalent of the MOZ_LEGACY_PROFILES environment variable.
3287
3288 If this policy set to false, Firefox will create a new profile for each unique installation of Firefox.
3289
3290 This policy only work on Windows via GPO (not policies.json).
3291
3292 **Compatibility:** Firefox 70, Firefox ESR 68.2 (Windows only, GPO only)\
3293 **CCK2 Equivalent:** N/A\
3294 **Preferences Affected:** N/A
3295
3296 #### Windows (GPO)
3297 ```
3298 Software\Policies\Mozilla\Firefox\LegacyProfiles = = 0x1 | 0x0
3299 ```
3300 #### Windows (Intune)
3301 OMA-URI:
3302 ```
3303 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/LegacyProfiles
3304 ```
3305 Value (string):
3306 ```
3307 <enabled/> or <disabled/>
3308 ```
3309 ### LegacySameSiteCookieBehaviorEnabled
3310 Enable default legacy SameSite cookie behavior setting.
3311
3312 If this policy is set to true, it reverts all cookies to legacy SameSite behavior which means that cookies that don't explicitly specify a ```SameSite``` attribute are treated as if they were ```SameSite=None```.
3313
3314 **Compatibility:** Firefox 96\
3315 **CCK2 Equivalent:** N/A\
3316 **Preferences Affected:** `network.cookie.sameSite.laxByDefault`
3317
3318 #### Windows (GPO)
3319 ```
3320 Software\Policies\Mozilla\Firefox\LegacySameSiteCookieBehaviorEnabled = = 0x1 | 0x0
3321 ```
3322 #### Windows (Intune)
3323 OMA-URI:
3324 ```
3325 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/LegacySameSiteCookieBehaviorEnabled
3326 ```
3327 Value (string):
3328 ```
3329 <enabled/> or <disabled/>
3330 ```
3331 #### macOS
3332 ```
3333 <dict>
3334   <key>LegacySameSiteCookieBehaviorEnabled</key>
3335   <true/> | <false/>
3336 </dict>
3337 ```
3338 #### policies.json
3339 ```
3340 {
3341   "policies": {
3342     "LegacySameSiteCookieBehaviorEnabled": true | false
3343 }
3344 ```
3345 ### LegacySameSiteCookieBehaviorEnabledForDomainList
3346 Revert to legacy SameSite behavior for cookies on specified sites.
3347
3348 If this policy is set to true, cookies set for domains in this list will revert to legacy SameSite behavior which means that cookies that don't explicitly specify a ```SameSite``` attribute are treated as if they were ```SameSite=None```.
3349
3350 **Compatibility:** Firefox 96\
3351 **CCK2 Equivalent:** N/A\
3352 **Preferences Affected:** `network.cookie.sameSite.laxByDefault.disabledHosts`
3353
3354 #### Windows (GPO)
3355 ```
3356 Software\Policies\Mozilla\Firefox\LegacySameSiteCookieBehaviorEnabledForDomainList\1 = "example.org"
3357 Software\Policies\Mozilla\Firefox\LegacySameSiteCookieBehaviorEnabledForDomainList\2 = "example.edu"
3358 ```
3359 #### Windows (Intune)
3360 OMA-URI:
3361 ```
3362 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/LegacySameSiteCookieBehaviorEnabledForDomainList
3363 ```
3364 Value (string):
3365 ```
3366 <enabled/>
3367 <data id="LegacySameSiteCookieBehaviorEnabledForDomainList" value="1&#xF000;example.org&#xF000;2&#xF000;example.edu"/>
3368 ```
3369 #### macOS
3370 ```
3371 <dict>
3372   <key>LegacySameSiteCookieBehaviorEnabledForDomainList</key>
3373   <array>
3374     <string>example.org</string>
3375     <string>example.edu</string>
3376   </array>
3377 </dict>
3378 ```
3379 #### policies.json
3380 ```
3381 {
3382   "policies": {
3383     "LegacySameSiteCookieBehaviorEnabledForDomainList": ["example.org",
3384                                                          "example.edu"]
3385   }
3386 }
3387 ```
3388 ### LocalFileLinks
3389 Enable linking to local files by origin.
3390
3391 **Compatibility:** Firefox 68, Firefox ESR 68\
3392 **CCK2 Equivalent:** N/A\
3393 **Preferences Affected:** `capability.policy.localfilelinks.*`
3394
3395 #### Windows (GPO)
3396 ```
3397 Software\Policies\Mozilla\Firefox\LocalFileLinks\1 = "https://example.org"
3398 Software\Policies\Mozilla\Firefox\LocalFileLinks\2 = "https://example.edu"
3399 ```
3400 #### Windows (Intune)
3401 OMA-URI:
3402 ```
3403 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/LocalFileLinks
3404 ```
3405 Value (string):
3406 ```
3407 <enabled/>
3408 <data id="LocalFileLinks" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
3409 ```
3410 #### macOS
3411 ```
3412 <dict>
3413   <key>LocalFileLinks</key>
3414   <array>
3415     <string>http://example.org</string>
3416     <string>http://example.edu</string>
3417   </array>
3418 </dict>
3419 ```
3420 #### policies.json
3421 ```
3422 {
3423   "policies": {
3424     "LocalFileLinks": ["http://example.org/",
3425                        "http://example.edu/"]
3426   }
3427 }
3428 ```
3429 ### ManagedBookmarks
3430 Configures a list of bookmarks managed by an administrator that cannot be changed by the user.
3431
3432 The bookmarks are only added as a button on the personal toolbar. They are not in the bookmarks folder.
3433
3434 The syntax of this policy is exactly the same as the [Chrome ManagedBookmarks policy](https://cloud.google.com/docs/chrome-enterprise/policies/?policy=ManagedBookmarks). The schema is:
3435 ```
3436 {
3437  "items": {
3438   "id": "BookmarkType",
3439   "properties": {
3440    "children": {
3441     "items": {
3442      "$ref": "BookmarkType"
3443     },
3444     "type": "array"
3445    },
3446    "name": {
3447     "type": "string"
3448    },
3449    "toplevel_name": {
3450     "type": "string"
3451    },
3452    "url": {
3453     "type": "string"
3454    }
3455   },
3456   "type": "object"
3457  },
3458  "type": "array"
3459 }
3460 ```
3461 **Compatibility:** Firefox 83, Firefox ESR 78.5\
3462 **CCK2 Equivalent:** N/A\
3463 **Preferences Affected:** N/A
3464
3465 #### Windows (GPO)
3466 Software\Policies\Mozilla\Firefox\ManagedBookmarks (REG_MULTI_SZ) =
3467 ```
3468 [
3469   {
3470     "toplevel_name": "My managed bookmarks folder"
3471   },
3472   {
3473     "url": "example.com",
3474     "name": "Example"
3475   },
3476   {
3477     "name": "Mozilla links",
3478     "children": [
3479       {
3480         "url": "https://mozilla.org",
3481         "name": "Mozilla.org"
3482       },
3483       {
3484         "url": "https://support.mozilla.org/",
3485         "name": "SUMO"
3486       }
3487     ]
3488   }
3489 ]
3490 ```
3491 #### Windows (Intune)
3492 OMA-URI:
3493 ```
3494 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/ManagedBookmarks
3495 ```
3496 Value (string):
3497 ```
3498 <enabled/>
3499 <data id="JSON" value='
3500 [
3501   {
3502     "toplevel_name": "My managed bookmarks folder"
3503   },
3504   {
3505     "url": "example.com",
3506     "name": "Example"
3507   },
3508   {
3509     "name": "Mozilla links",
3510     "children": [
3511       {
3512         "url": "https://mozilla.org",
3513         "name": "Mozilla.org"
3514       },
3515       {
3516         "url": "https://support.mozilla.org/",
3517         "name": "SUMO"
3518       }
3519     ]
3520   }
3521 ]'/>
3522 ```
3523 #### macOS
3524 ```
3525 <dict>
3526   <key>ManagedBookmarks</key>
3527   <array>
3528     <dict>
3529       <key>toplevel_name</key>
3530       <string>My managed bookmarks folder</string>
3531       <dict>
3532         <key>url</key>
3533         <string>example.com</string>
3534         <key>name</key>
3535         <string>Example</string>
3536       </dict>
3537       <dict>
3538       <key>name</key>
3539       <string>Mozilla links</string>
3540       <key>children</key>
3541       <array>
3542         <dict>
3543           <key>url</key>
3544           <string>https://mozilla.org</string>
3545           <key>name</key>
3546           <string>Mozilla</string>
3547         </dict>
3548         <dict>
3549           <key>url</key>
3550           <string>https://support.mozilla.org/</string>
3551           <key>name</key>
3552           <string>SUMO</string>
3553         </dict>
3554       </array>
3555     </dict>
3556   </array>
3557 </dict>
3558 ```
3559 #### policies.json
3560 ```
3561 {
3562   "policies": {
3563     "ManagedBookmarks": [
3564       {
3565         "toplevel_name": "My managed bookmarks folder"
3566       },
3567       {
3568         "url": "example.com",
3569         "name": "Example"
3570       },
3571       {
3572         "name": "Mozilla links",
3573         "children": [
3574           {
3575             "url": "https://mozilla.org",
3576             "name": "Mozilla.org"
3577           },
3578           {
3579             "url": "https://support.mozilla.org/",
3580             "name": "SUMO"
3581           }
3582         ]
3583       }
3584     ]
3585   }
3586 }
3587 ```
3588 ### ManualAppUpdateOnly
3589
3590 Switch to manual updates only.
3591
3592 If this policy is enabled:
3593  1. The user will never be prompted to install updates
3594  2. Firefox will not check for updates in the background, though it will check automatically when an update UI is displayed (such as the one in the About dialog). This check will be used to show "Update to version X" in the UI, but will not automatically download the update or prompt the user to update in any other way.
3595  3. The update UI will work as expected, unlike when using DisableAppUpdate.
3596
3597 This policy is primarily intended for advanced end users, not for enterprises.
3598
3599 **Compatibility:** Firefox 87\
3600 **CCK2 Equivalent:** N/A\
3601 **Preferences Affected:** N/A
3602
3603 #### policies.json
3604 ```
3605 {
3606   "policies": {
3607     "ManualAppUpdateOnly": true | false
3608   }
3609 }
3610 ```
3611 ### NetworkPrediction
3612 Enable or disable network prediction (DNS prefetching).
3613
3614 **Compatibility:** Firefox 67, Firefox ESR 60.7\
3615 **CCK2 Equivalent:** N/A\
3616 **Preferences Affected:** `network.dns.disablePrefetch`, `network.dns.disablePrefetchFromHTTPS`
3617
3618 #### Windows (GPO)
3619 ```
3620 Software\Policies\Mozilla\Firefox\NetworkPrediction = 0x1 | 0x0
3621 ```
3622 #### Windows (Intune)
3623 OMA-URI:
3624 ```
3625 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NetworkPrediction
3626 ```
3627 Value (string):
3628 ```
3629 <enabled/> or <disabled/>
3630 ```
3631 #### macOS
3632 ```
3633 <dict>
3634   <key>NetworkPrediction</key>
3635   <true/> | <false/>
3636 </dict>
3637 ```
3638 #### policies.json
3639 ```
3640 {
3641   "policies": {
3642     "NetworkPrediction": true | false
3643 }
3644 ```
3645 ### NewTabPage
3646 Enable or disable the New Tab page.
3647
3648 **Compatibility:** Firefox 68, Firefox ESR 68\
3649 **CCK2 Equivalent:** N/A\
3650 **Preferences Affected:** `browser.newtabpage.enabled`
3651
3652 #### Windows (GPO)
3653 ```
3654 Software\Policies\Mozilla\Firefox\NewTabPage = 0x1 | 0x0
3655 ```
3656 #### Windows (Intune)
3657 OMA-URI:
3658 ```
3659 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NewTabPage
3660 ```
3661 Value (string):
3662 ```
3663 <enabled/> or <disabled/>
3664 ```
3665 #### macOS
3666 ```
3667 <dict>
3668   <key>NewTabPage</key>
3669   <true/> | <false/>
3670 </dict>
3671 ```
3672 #### policies.json
3673 ```
3674 {
3675   "policies": {
3676     "NewTabPage": true | false
3677 }
3678 ```
3679 ### NoDefaultBookmarks
3680 Disable the creation of default bookmarks.
3681
3682 This policy is only effective if the user profile has not been created yet.
3683
3684 **Compatibility:** Firefox 60, Firefox ESR 60\
3685 **CCK2 Equivalent:** `removeDefaultBookmarks`\
3686 **Preferences Affected:** N/A
3687
3688 #### Windows (GPO)
3689 ```
3690 Software\Policies\Mozilla\Firefox\NoDefaultBookmarks = 0x1 | 0x0
3691 ```
3692 #### Windows (Intune)
3693 OMA-URI:
3694 ```
3695 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NoDefaultBookmarks
3696 ```
3697 Value (string):
3698 ```
3699 <enabled/> or <disabled/>
3700 ```
3701 #### macOS
3702 ```
3703 <dict>
3704   <key>NoDefaultBookmarks</key>
3705   <true/> | <false/>
3706 </dict>
3707 ```
3708 #### policies.json
3709 ```
3710 {
3711   "policies": {
3712     "NoDefaultBookmarks": true | false
3713   }
3714 }
3715 ```
3716 ### OfferToSaveLogins
3717 Control whether or not Firefox offers to save passwords.
3718
3719 **Compatibility:** Firefox 60, Firefox ESR 60\
3720 **CCK2 Equivalent:** `dontRememberPasswords`\
3721 **Preferences Affected:** `signon.rememberSignons`
3722
3723 #### Windows (GPO)
3724 ```
3725 Software\Policies\Mozilla\Firefox\OfferToSaveLogins = 0x1 | 0x0
3726 ```
3727 #### Windows (Intune)
3728 OMA-URI:
3729 ```
3730 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OfferToSaveLogins
3731 ```
3732 Value (string):
3733 ```
3734 <enabled/> or <disabled/>
3735 ```
3736 #### macOS
3737 ```
3738 <dict>
3739   <key>OfferToSaveLogins</key>
3740   <true/> | <false/>
3741 </dict>
3742 ```
3743 #### policies.json
3744 ```
3745 {
3746   "policies": {
3747     "OfferToSaveLogins": true | false
3748   }
3749 }
3750 ```
3751 ### OfferToSaveLoginsDefault
3752 Sets the default value of signon.rememberSignons without locking it.
3753
3754 **Compatibility:** Firefox 70, Firefox ESR 60.2\
3755 **CCK2 Equivalent:** `dontRememberPasswords`\
3756 **Preferences Affected:** `signon.rememberSignons`
3757
3758 #### Windows (GPO)
3759 ```
3760 Software\Policies\Mozilla\Firefox\OfferToSaveLoginsDefault = 0x1 | 0x0
3761 ```
3762 #### Windows (Intune)
3763 OMA-URI:
3764 ```
3765 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OfferToSaveLoginsDefault
3766 ```
3767 Value (string):
3768 ```
3769 <enabled/> or <disabled/>
3770 ```
3771 #### macOS
3772 ```
3773 <dict>
3774   <key>OfferToSaveLoginsDefault</key>
3775   <true/> | <false/>
3776 </dict>
3777 ```
3778 #### policies.json
3779 ```
3780 {
3781   "policies": {
3782     "OfferToSaveLoginsDefault": true | false
3783   }
3784 }
3785 ```
3786 ### OverrideFirstRunPage
3787 Override the first run page. If the value is an empty string (""), the first run page is not displayed.
3788
3789 Starting with Firefox 83, Firefox ESR 78.5, you can also specify multiple URLS separated by a vertical bar (|).
3790
3791 **Compatibility:** Firefox 60, Firefox ESR 60\
3792 **CCK2 Equivalent:** `welcomePage`,`noWelcomePage`\
3793 **Preferences Affected:** `startup.homepage_welcome_url`
3794
3795 #### Windows (GPO)
3796 ```
3797 Software\Policies\Mozilla\Firefox\OverrideFirstRunPage = "http://example.org"
3798 ```
3799 #### Windows (Intune)
3800 OMA-URI:
3801 ```
3802 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OverrideFirstRunPage
3803 ```
3804 Value (string):
3805 ```
3806 <enabled/>
3807 <data id="OverridePage" value="https://example.com"/>
3808 ```
3809 #### macOS
3810 ```
3811 <dict>
3812   <key>OverrideFirstRunPage</key>
3813   <string>http://example.org</string>
3814 </dict>
3815 ```
3816 #### policies.json
3817 ```
3818 {
3819   "policies": {
3820     "OverrideFirstRunPage": "http://example.org"
3821   }
3822 }
3823 ```
3824 ### OverridePostUpdatePage
3825 Override the upgrade page. If the value is an empty string (""), no extra pages are displayed when Firefox is upgraded.
3826
3827 **Compatibility:** Firefox 60, Firefox ESR 60\
3828 **CCK2 Equivalent:** `upgradePage`,`noUpgradePage`\
3829 **Preferences Affected:** `startup.homepage_override_url`
3830
3831 #### Windows (GPO)
3832 ```
3833 Software\Policies\Mozilla\Firefox\OverridePostUpdatePage = "http://example.org"
3834 ```
3835 #### Windows (Intune)
3836 OMA-URI:
3837 ```
3838 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OverridePostUpdatePage
3839 ```
3840 Value (string):
3841 ```
3842 <enabled/>
3843 <data id="OverridePage" value="https://example.com"/>
3844 ```
3845 #### macOS
3846 ```
3847 <dict>
3848   <key>OverridePostUpdatePage</key>
3849   <string>http://example.org</string>
3850 </dict>
3851 ```
3852 #### policies.json
3853 ```
3854 {
3855   "policies": {
3856     "OverridePostUpdatePage": "http://example.org"
3857   }
3858 }
3859 ```
3860 ### PasswordManagerEnabled
3861 Remove access to the password manager via preferences and blocks about:logins on Firefox 70.
3862
3863 **Compatibility:** Firefox 70, Firefox ESR 60.2\
3864 **CCK2 Equivalent:** N/A\
3865 **Preferences Affected:** `pref.privacy.disable_button.view_passwords`
3866
3867 #### Windows (GPO)
3868 ```
3869 Software\Policies\Mozilla\Firefox\PasswordManagerEnabled = 0x1 | 0x0
3870 ```
3871 #### Windows (Intune)
3872 OMA-URI:
3873 ```
3874 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PasswordManagerEnabled
3875 ```
3876 Value (string):
3877 ```
3878 <enabled/> or <disabled/>
3879 ```
3880 #### macOS
3881 ```
3882 <dict>
3883   <key>PasswordManagerEnabled</key>
3884   <true/> | <false/>
3885 </dict>
3886 ```
3887 #### policies.json
3888 ```
3889 {
3890   "policies": {
3891     "PasswordManagerEnabled": true | false
3892   }
3893 }
3894 ```
3895 ### PasswordManagerExceptions
3896 Prevent Firefox from saving passwords for specific sites.
3897
3898 The sites are specified as a list of origins.
3899
3900 **Compatibility:** Firefox 101\
3901 **CCK2 Equivalent:** N/A\
3902 **Preferences Affected:** N/A
3903
3904 #### Windows (GPO)
3905 ```
3906 Software\Policies\Mozilla\Firefox\PasswordManagerExceptions\1 = "https://example.org"
3907 Software\Policies\Mozilla\Firefox\PasswordManagerExceptions\2 = "https://example.edu"
3908 ```
3909 #### Windows (Intune)
3910 OMA-URI:
3911 ```
3912 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PasswordManagerExceptions
3913 ```
3914 Value (string):
3915 ```
3916 <enabled/>
3917 <data id="List" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
3918 ```
3919 #### macOS
3920 ```
3921 <dict>
3922   <key>PasswordManagerExceptions</key>
3923   <array>
3924     <string>https://example.org</string>
3925     <string>https://example.edu</string>
3926   </array>
3927 </dict>
3928 ```
3929 #### policies.json
3930 ```
3931 {
3932   "policies": {
3933     "PasswordManagerExceptions": ["https://example.org",
3934                                   "https://example.edu"]
3935   }
3936 }
3937 ```
3938
3939 ### PDFjs
3940 Disable or configure PDF.js, the built-in PDF viewer.
3941
3942 If `Enabled` is set to false, the built-in PDF viewer is disabled.
3943
3944 If `EnablePermissions` is set to true, the built-in PDF viewer will honor document permissions like preventing the copying of text.
3945
3946 Note: DisableBuiltinPDFViewer has not been deprecated. You can either continue to use it, or switch to using PDFjs->Enabled to disable the built-in PDF viewer. This new permission was added because we needed a place for PDFjs->EnabledPermissions.
3947
3948 **Compatibility:** Firefox 77, Firefox ESR 68.9\
3949 **CCK2 Equivalent:** N/A\
3950 **Preferences Affected:** `pdfjs.diabled`, `pdfjs.enablePermissions`
3951
3952 #### Windows (GPO)
3953 ```
3954 Software\Policies\Mozilla\Firefox\PDFjs\Enabled = 0x1 | 0x0
3955 Software\Policies\Mozilla\Firefox\PDFjs\EnablePermissions = 0x1 | 0x0
3956 ```
3957 #### Windows (Intune)
3958 OMA-URI:
3959 ```
3960 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PDFjs/PDFjs_Enabled
3961 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PDFjs/PDFjs_EnablePermissions
3962 ```
3963 Value (string):
3964 ```
3965 <enabled/>or <disabled/>
3966 ```
3967 #### macOS
3968 ```
3969 <dict>
3970   <key>PDFjs</key>
3971   <dict>
3972     <key>Enabled</key>
3973     <true/> | <false/>
3974     <key>EnablePermissions</key>
3975     <true/> | <false/>
3976   </dict>
3977 </dict>
3978 ```
3979 #### policies.json
3980 ```
3981 {
3982   "policies": {
3983     "PDFjs": {
3984       "Enabled": true | false,
3985       "EnablePermissions": true | false
3986     }
3987   }
3988 }
3989 ```
3990 ### Permissions
3991 Set permissions associated with camera, microphone, location, notifications, autoplay, and virtual reality. Because these are origins, not domains, entries with unique ports must be specified separately. This explicitly means that it is not possible to add wildcards. See examples below.
3992
3993 `Allow` is a list of origins where the feature is allowed.
3994
3995 `Block` is a list of origins where the feature is not allowed.
3996
3997 `BlockNewRequests` determines whether or not new requests can be made for the feature.
3998
3999 `Locked` prevents the user from changing preferences for the feature.
4000
4001 `Default` specifies the default value for Autoplay. block-audio-video is not supported on Firefox ESR 68.
4002
4003 **Compatibility:** Firefox 62, Firefox ESR 60.2 (Autoplay added in Firefox 74, Firefox ESR 68.6, Autoplay Default/Locked added in Firefox 76, Firefox ESR 68.8, VirtualReality added in Firefox 80, Firefox ESR 78.2)\
4004 **CCK2 Equivalent:** N/A\
4005 **Preferences Affected:** `permissions.default.camera`, `permissions.default.microphone`, `permissions.default.geo`, `permissions.default.desktop-notification`, `media.autoplay.default`, `permissions.default.xr`
4006
4007 #### Windows (GPO)
4008 ```
4009 Software\Policies\Mozilla\Firefox\Permissions\Camera\Allow\1 = "https://example.org"
4010 Software\Policies\Mozilla\Firefox\Permissions\Camera\Allow\2 = "https://example.org:1234"
4011 Software\Policies\Mozilla\Firefox\Permissions\Camera\Block\1 = "https://example.edu"
4012 Software\Policies\Mozilla\Firefox\Permissions\Camera\BlockNewRequests = 0x1 | 0x0
4013 Software\Policies\Mozilla\Firefox\Permissions\Camera\Locked = 0x1 | 0x0
4014 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Allow\1 = "https://example.org"
4015 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Block\1 = "https://example.edu"
4016 Software\Policies\Mozilla\Firefox\Permissions\Microphone\BlockNewRequests = 0x1 | 0x0
4017 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Locked = 0x1 | 0x0
4018 Software\Policies\Mozilla\Firefox\Permissions\Location\Allow\1 = "https://example.org"
4019 Software\Policies\Mozilla\Firefox\Permissions\Location\Block\1 = "https://example.edu"
4020 Software\Policies\Mozilla\Firefox\Permissions\Location\BlockNewRequests = 0x1 | 0x0
4021 Software\Policies\Mozilla\Firefox\Permissions\Location\Locked = 0x1 | 0x0
4022 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Allow\1 = "https://example.org"
4023 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Block\1 = "https://example.edu"
4024 Software\Policies\Mozilla\Firefox\Permissions\Notifications\BlockNewRequests = 0x1 | 0x0
4025 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Locked = 0x1 | 0x0
4026 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Allow\1 = "https://example.org"
4027 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Block\1 = "https://example.edu"
4028 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Default = "allow-audio-video" | "block-audio" | "block-audio-video"
4029 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Locked = 0x1 | 0x0
4030 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\Allow\1 = "https://example.org"
4031 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\Block\1 = "https://example.edu"
4032 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\BlockNewRequests = 0x1 | 0x0
4033 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\Locked = 0x1 | 0x0
4034 ```
4035 #### Windows (Intune)
4036 OMA-URI:
4037 ```
4038 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Location/Location_BlockNewRequests
4039 ```
4040 Value (string):
4041 ```
4042 <enabled/> or <disabled/>
4043 ```
4044 OMA-URI:
4045 ```
4046 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Location/Location_Locked
4047 ```
4048 Value (string):
4049 ```
4050 <enabled/> or <disabled/>
4051 ```
4052 OMA-URI:
4053 ```
4054 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_Allow
4055 ```
4056 Value (string):
4057 ```
4058 <enabled/>
4059 <data id="Permissions" value="1&#xF000;https://example.org"/>
4060 ```
4061 OMA-URI:
4062 ```
4063 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_BlockNewRequests
4064 ```
4065 Value (string):
4066 ```
4067 <enabled/> or <disabled/>
4068 ```
4069 OMA-URI:
4070 ```
4071 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_Locked
4072 ```
4073 Value (string):
4074 ```
4075 <enabled/> or <disabled/>
4076 ```
4077 OMA-URI:
4078 ```
4079 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Allow
4080 ```
4081 Value (string):
4082 ```
4083 <enabled/>
4084 <data id="Permissions" value="1&#xF000;https://example.org"/>
4085 ```
4086 OMA-URI:
4087 ```
4088 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Block
4089 ```
4090 Value (string):
4091 ```
4092 <enabled/>
4093 <data id="Permissions" value="1&#xF000;https://example.edu"/>
4094 ```
4095 OMA-URI:
4096 ```
4097 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Default
4098 ```
4099 Value (string):
4100 ```
4101 <enabled/>
4102 <data id="Autoplay_Default" value="allow-audio-video | block-audio | block-audio-video"/>
4103 ```
4104 OMA-URI:
4105 ```
4106 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Locked
4107 ```
4108 Value (string):
4109 ```
4110 <enabled/> or <disabled/>
4111 ```
4112 OMA-URI:
4113 ```
4114 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_Allow
4115 ```
4116 Value (string):
4117 ```
4118 <enabled/>
4119 <data id="Permissions" value="1&#xF000;https://example.org"/>
4120 ```
4121 OMA-URI:
4122 ```
4123 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_Block
4124 ```
4125 Value (string):
4126 ```
4127 <enabled/>
4128 <data id="Permissions" value="1&#xF000;https://example.edu"/>
4129 ```
4130 OMA-URI:
4131 ```
4132 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_BlockNewRequests
4133 ```
4134 Value (string):
4135 ```
4136 <enabled/> or <disabled/>
4137 ```
4138 OMA-URI:
4139 ```
4140 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_Locked
4141 ```
4142 Value (string):
4143 ```
4144 <enabled/> or <disabled/>
4145 ```
4146 #### macOS
4147 ```
4148 <dict>
4149   <key>Permissions</key>
4150   <dict>
4151     <key>Camera</key>
4152     <dict>
4153       <key>Allow</key>
4154       <array>
4155         <string>https://example.org</string>
4156         <string>https://example.org:1234</string>
4157       </array>
4158       <key>Block</key>
4159       <array>
4160         <string>https://example.edu</string>
4161       </array>
4162       <key>BlockNewRequests</key>
4163       <true/> | <false/>
4164       <key>Locked</key>
4165       <true/> | <false/>
4166     </dict>
4167     <key>Microphone</key>
4168     <dict>
4169       <key>Allow</key>
4170       <array>
4171         <string>https://example.org</string>
4172       </array>
4173       <key>Block</key>
4174       <array>
4175         <string>https://example.edu</string>
4176       </array>
4177       <key>BlockNewRequests</key>
4178       <true/> | <false/>
4179       <key>Locked</key>
4180       <true/> | <false/>
4181     </dict>
4182     <key>Location</key>
4183     <dict>
4184       <key>Allow</key>
4185       <array>
4186         <string>https://example.org</string>
4187       </array>
4188       <key>Block</key>
4189       <array>
4190         <string>https://example.edu</string>
4191       </array>
4192       <key>BlockNewRequests</key>
4193       <true/> | <false/>
4194       <key>Locked</key>
4195       <true/> | <false/>
4196     </dict>
4197     <key>Notifications</key>
4198     <dict>
4199       <key>Allow</key>
4200       <array>
4201         <string>https://example.org</string>
4202       </array>
4203       <key>Block</key>
4204       <array>
4205         <string>https://example.edu</string>
4206       </array>
4207       <key>BlockNewRequests</key>
4208       <true/>
4209       <key>Locked</key>
4210       <true/>
4211     </dict>
4212     <key>Autoplay</key>
4213     <dict>
4214       <key>Allow</key>
4215       <array>
4216         <string>https://example.org</string>
4217       </array>
4218       <key>Block</key>
4219       <array>
4220         <string>https://example.edu</string>
4221       </array>
4222       <key>Default</key>
4223       <string>allow-audio-video | block-audio | block-audio-video</string>
4224       <key>Locked</key>
4225       <true/> | <false/>
4226     </dict>
4227   </dict>
4228 </dict>
4229 ```
4230 #### policies.json
4231 ```
4232 {
4233   "policies": {
4234     "Permissions": {
4235       "Camera": {
4236         "Allow": ["https://example.org","https://example.org:1234"],
4237         "Block": ["https://example.edu"],
4238         "BlockNewRequests": true | false,
4239         "Locked": true | false
4240       },
4241       "Microphone": {
4242         "Allow": ["https://example.org"],
4243         "Block": ["https://example.edu"],
4244         "BlockNewRequests": true | false,
4245         "Locked": true | false
4246       },
4247       "Location": {
4248         "Allow": ["https://example.org"],
4249         "Block": ["https://example.edu"],
4250         "BlockNewRequests": true | false,
4251         "Locked": true | false
4252       },
4253       "Notifications": {
4254         "Allow": ["https://example.org"],
4255         "Block": ["https://example.edu"],
4256         "BlockNewRequests": true | false,
4257         "Locked": true | false
4258       },
4259       "Autoplay": {
4260         "Allow": ["https://example.org"],
4261         "Block": ["https://example.edu"],
4262         "Default": "allow-audio-video" | "block-audio" | "block-audio-video",
4263         "Locked": true | false
4264       }
4265     }
4266   }
4267 }
4268 ```
4269 ### PictureInPicture
4270
4271 Enable or disable Picture-in-Picture as well as prevent the user from enabling or disabling it (Locked).
4272
4273 **Compatibility:** Firefox 78, Firefox ESR 78\
4274 **CCK2 Equivalent:** N/A\
4275 **Preferences Affected:** `media.videocontrols.picture-in-picture.video-toggle.enabled`
4276
4277 #### Windows (GPO)
4278 ```
4279 Software\Policies\Mozilla\Firefox\PictureInPicture\Enabled = 0x1 | 0x0
4280 Software\Policies\Mozilla\Firefox\PictureInPicture\Locked = 0x1 | 0x0
4281
4282 ```
4283 #### Windows (Intune)
4284 OMA-URI:
4285 ```
4286 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PictureInPicture/PictureInPicture_Enabled
4287 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PictureInPicture/PictureInPicture_Locked
4288 ```
4289 Value (string):
4290 ```
4291 <enabled/> or <disabled/>
4292 ```
4293 #### macOS
4294 ```
4295 <dict>
4296   <key>PictureInPicture</key>
4297   <dict>
4298     <key>Enabled</key>
4299     <true/> | <false/>
4300     <key>Locked</key>
4301     <true/> | <false/>
4302   </dict>
4303 </dict>
4304 ```
4305 #### policies.json
4306 ```
4307 {
4308   "policies": {
4309     "PictureInPicture": {
4310       "Enabled": true | false,
4311       "Locked": true | false
4312     }
4313   }
4314 }
4315 ```
4316 ### PopupBlocking
4317 Configure the default pop-up window policy as well as origins for which pop-up windows are allowed.
4318
4319 `Allow` is a list of origins where popup-windows are allowed.
4320
4321 `Default` determines whether or not pop-up windows are allowed by default.
4322
4323 `Locked` prevents the user from changing pop-up preferences.
4324
4325 **Compatibility:** Firefox 60, Firefox ESR 60\
4326 **CCK2 Equivalent:** `permissions.popup`\
4327 **Preferences Affected:** `dom.disable_open_during_load`
4328
4329 #### Windows (GPO)
4330 ```
4331 Software\Policies\Mozilla\Firefox\PopupBlocking\Allow\1 = "https://example.org"
4332 Software\Policies\Mozilla\Firefox\PopupBlocking\Allow\2 = "https://example.edu"
4333 Software\Policies\Mozilla\Firefox\PopupBlocking\Default = 0x1 | 0x0
4334 Software\Policies\Mozilla\Firefox\PopupBlocking\Locked = 0x1 | 0x0
4335 ```
4336 #### Windows (Intune)
4337 OMA-URI:
4338 ```
4339 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Allow
4340 ```
4341 Value (string):
4342 ```
4343 <enabled/>
4344 <data id="Permissions" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
4345 ```
4346 OMA-URI:
4347 ```
4348 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Default
4349 ```
4350 Value (string):
4351 ```
4352 <enabled/> or <disabled/>
4353 ```
4354 OMA-URI:
4355 ```
4356 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Locked
4357 ```
4358 Value (string):
4359 ```
4360 <enabled/> or <disabled/>
4361 ```
4362 #### macOS
4363 ```
4364 <dict>
4365   <key>PopupBlocking</key>
4366   <dict>
4367     <key>Allow</key>
4368     <array>
4369       <string>http://example.org</string>
4370       <string>http://example.edu</string>
4371     </array>
4372     <key>Default</key>
4373     <true/> | <false/>
4374     <key>Locked</key>
4375     <true/> | <false/>
4376   </dict>
4377 </dict>
4378 ```
4379 #### policies.json
4380 ```
4381 {
4382   "policies": {
4383     "PopupBlocking": {
4384       "Allow": ["http://example.org/",
4385                 "http://example.edu/"],
4386       "Default": true | false,
4387       "Locked": true | false
4388     }
4389   }
4390 }
4391 ```
4392 ### Preferences
4393 Set and lock preferences.
4394
4395 **NOTE** On Windows, in order to use this policy, you must clear all settings in the old **Preferences (Deprecated)** section.
4396
4397 Previously you could only set and lock a subset of preferences. Starting with Firefox 81 and Firefox ESR 78.3 you can set many more preferences. You can also set default preferences, user preferences and you can clear preferences.
4398
4399 Preferences that start with the following prefixes are supported:
4400 ```
4401 accessibility.
4402 app.update.* (Firefox 86, Firefox 78.8)
4403 browser.
4404 datareporting.policy.
4405 dom.
4406 extensions.
4407 general.autoScroll (Firefox 83, Firefox ESR 78.5)
4408 general.smoothScroll (Firefox 83, Firefox ESR 78.5)
4409 geo.
4410 gfx.
4411 intl.
4412 keyword.enabled (Firefox 95, Firefox ESR 91.4)
4413 layers.
4414 layout.
4415 media.
4416 network.
4417 pdfjs. (Firefox 84, Firefox ESR 78.6)
4418 places.
4419 print.
4420 signon. (Firefox 83, Firefox ESR 78.5)
4421 spellchecker. (Firefox 84, Firefox ESR 78.6)
4422 toolkit.legacyUserProfileCustomizations.stylesheets (Firefox 95, Firefox ESR 91.4)
4423 ui.
4424 widget.
4425 ```
4426 as well as the following security preferences:
4427 | Preference | Type | Default
4428 | --- | --- | ---
4429 | security.default_personal_cert | string | Ask Every Time
4430 | &nbsp;&nbsp;&nbsp;&nbsp;If set to Select Automatically, Firefox automatically chooses the default personal certificate.
4431 | security.insecure_connection_text.enabled | bool | false
4432 | &nbsp;&nbsp;&nbsp;&nbsp;If set to true, adds the words "Not Secure" for insecure sites.
4433 | security.insecure_connection_text.pbmode.enabled | bool | false
4434 | &nbsp;&nbsp;&nbsp;&nbsp;If set to true, adds the words "Not Secure" for insecure sites in private browsing.
4435 | security.insecure_field_warning.contextual.enabled | bool | true
4436 | &nbsp;&nbsp;&nbsp;&nbsp;If set to false, remove the warning for inscure login fields.
4437 | security.mixed_content.block_active_content | boolean | true
4438 | &nbsp;&nbsp;&nbsp;&nbsp;If false, mixed active content (HTTP and HTTPS) is not blocked.
4439 | security.osclientcerts.autoload | boolean | false
4440 | &nbsp;&nbsp;&nbsp;&nbsp;If true, client certificates are loaded from the operating system certificate store.
4441 | security.ssl.errorReporting.enabled | boolean | true
4442 | &nbsp;&nbsp;&nbsp;&nbsp;If false, SSL errors cannot be sent to Mozilla.
4443 | security.tls.enable_0rtt_data | boolean | true
4444 | &nbsp;&nbsp;&nbsp;&nbsp;If false, TLS early data is turned off (Firefox 93, Firefox 91.2, Firefox 78.15).
4445 | security.tls.hello_downgrade_check | boolean | true
4446 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the TLS 1.3 downgrade check is disabled.
4447 | security.tls.version.enable-deprecated | boolean | false
4448 | &nbsp;&nbsp;&nbsp;&nbsp;If true, browser will accept TLS 1.0. and TLS 1.1 (Firefox 86, Firefox 78.8).
4449 | security.warn_submit_secure_to_insecure | boolean | true
4450 | &nbsp;&nbsp;&nbsp;&nbsp;If false, no warning is shown when submitting a form from https to http.
4451 &nbsp;
4452
4453 Using the preference as the key, set the `Value` to the corresponding preference value.
4454
4455 `Status` can be "default", "locked", "user" or "clear"
4456
4457 * `"default"`: Read/Write: Settings appear as default even if factory default differs.
4458 * `"locked"`: Read-Only: Settings appear as default even if factory default differs.
4459 * `"user"`: Read/Write: Settings appear as changed if it differs from factory default.
4460 * `"clear"`: Read/Write: `Value` has no effect. Resets to factory defaults on each startup.
4461
4462 `"user"` preferences persist across invocations of Firefox. It is the equivalent of a user setting the preference. They are most useful when a preference is needed very early in startup so it can't be set as default by policy. An example of this is ```toolkit.legacyUserProfileCustomizations.stylesheets```.
4463
4464 `"user"` preferences persist even if the policy is removed, so if you need to remove them, you should use the clear policy.
4465
4466 See the examples below for more detail.
4467
4468 IMPORTANT: Make sure you're only setting a particular preference using this mechanism and not some other way.
4469
4470 Status
4471 **Compatibility:** Firefox 81, Firefox ESR 78.3\
4472 **CCK2 Equivalent:** `preferences`\
4473 **Preferences Affected:** Many
4474
4475 #### Windows (GPO)
4476 Software\Policies\Mozilla\Firefox\Preferences (REG_MULTI_SZ) =
4477 ```
4478 {
4479   "accessibility.force_disabled": {
4480     "Value": 1,
4481     "Status": "default"
4482   },
4483   "browser.cache.disk.parent_directory": {
4484     "Value": "SOME_NATIVE_PATH",
4485     "Status": "user"
4486   },
4487   "browser.tabs.warnOnClose": {
4488     "Value": false,
4489     "Status": "locked"
4490   }
4491 }
4492 ```
4493 #### Windows (Intune)
4494 OMA-URI:
4495 ```
4496 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Preferences
4497 ```
4498 Value (string):
4499 ```
4500 <enabled/>
4501 <data id="JSON" value='
4502 {
4503   "accessibility.force_disabled": {
4504     "Value": 1,
4505     "Status": "default"
4506   },
4507   "browser.cache.disk.parent_directory": {
4508     "Value": "SOME_NATIVE_PATH",
4509     "Status": "user"
4510   },
4511   "browser.tabs.warnOnClose": {
4512     "Value": false,
4513     "Status": "locked"
4514   }
4515 }'/>
4516 ```
4517 #### macOS
4518 ```
4519 <dict>
4520   <key>Preferences</key>
4521   <dict>
4522     <key>accessibility.force_disabled</key>
4523     <dict>
4524       <key>Value</key>
4525       <integer>1</integer>
4526       <key>Status</key>
4527       <string>default</string>
4528     </dict>
4529     <key>browser.cache.disk.parent_directory</key>
4530     <dict>
4531       <key>Value</key>
4532       <string>SOME_NATIVE_PATH</string>
4533       <key>Status</key>
4534       <string>user</string>
4535     </dict>
4536     <key>browser.tabs.warnOnClose</key>
4537     <dict>
4538       <key>Value</key>
4539       <false/>
4540       <key>Status</key>
4541       <string>locked</string>
4542     </dict>
4543   </dict>
4544 </dict>
4545 ```
4546 #### policies.json
4547 ```
4548 {
4549   "policies": {
4550     "Preferences": {
4551       "accessibility.force_disabled": {
4552         "Value": 1,
4553         "Status": "default"
4554       },
4555       "browser.cache.disk.parent_directory": {
4556         "Value": "SOME_NATIVE_PATH",
4557         "Status": "user"
4558       },
4559       "browser.tabs.warnOnClose": {
4560         "Value": false,
4561         "Status": "locked"
4562       }
4563     }
4564   }
4565 }
4566 ```
4567 ### Preferences (Deprecated)
4568 Set and lock certain preferences.
4569
4570 **Compatibility:** See below\
4571 **CCK2 Equivalent:** `preferences`\
4572 **Preferences Affected:** See below
4573
4574 | Preference | Type | Compatibility | Default
4575 | --- | --- | --- | ---
4576 | accessibility.force_disabled | integer | Firefox 70, Firefox ESR 68.2 | 0
4577 | &nbsp;&nbsp;&nbsp;&nbsp;If set to 1, platform accessibility is disabled.
4578 | app.update.auto (Deprecated - Switch to AppAutoUpdate policy) | boolean | Firefox 68, Firefox ESR 68 | true
4579 | &nbsp;&nbsp;&nbsp;&nbsp;If false, Firefox doesn't automatically install update.
4580 | browser.bookmarks.autoExportHTML | boolean | Firefox 70, Firefox ESR 68.2 | false
4581 | &nbsp;&nbsp;&nbsp;&nbsp;If true, bookmarks are exported on shutdown.
4582 | browser.bookmarks.file | string | Firefox 70, Firefox ESR 68.2 | N/A
4583 | &nbsp;&nbsp;&nbsp;&nbsp;If set, the name of the file where bookmarks are exported and imported.
4584 | browser.bookmarks.restore_default_bookmarks | boolean | Firefox 70, Firefox ESR 68.2 | N/A
4585 | &nbsp;&nbsp;&nbsp;&nbsp;If true, bookmarks are restored to their defaults.
4586 | browser.cache.disk.enable | boolean | Firefox 68, Firefox ESR 68 | true
4587 | &nbsp;&nbsp;&nbsp;&nbsp;If false, don't store cache on the hard drive.
4588 | ~browser.cache.disk.parent_directory~ | string | Firefox 68, Firefox ESR 68 | Profile temporary directory
4589 | &nbsp;&nbsp;&nbsp;&nbsp;~If set, changes the location of the disk cache.~ This policy doesn't work. It's being worked on.
4590 | browser.fixup.dns_first_for_single_words | boolean | Firefox 68, Firefox ESR 68 | false
4591 | &nbsp;&nbsp;&nbsp;&nbsp;If true, single words are sent to DNS, not directly to search.
4592 | browser.newtabpage.activity-stream.default.sites | string | Firefox 72, ESR 68.4 | Locale dependent
4593 | &nbsp;&nbsp;&nbsp;&nbsp;If set, a list of URLs to use as the default top sites on the new tab page. Due to Firefox limitations, search sites can't be added. In addition, sites with the same name but different TLDs (example.org/example.com) will not display properly.
4594 | browser.places.importBookmarksHTML | boolean | Firefox 70, Firefox ESR 68.2
4595 | &nbsp;&nbsp;&nbsp;&nbsp;If true, bookmarks are always imported on startup.
4596 | browser.safebrowsing.phishing.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
4597 | &nbsp;&nbsp;&nbsp;&nbsp;If false, phishing protection is not enabled (Not recommended)
4598 | browser.safebrowsing.malware.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
4599 | &nbsp;&nbsp;&nbsp;&nbsp;If false, malware protection is not enabled (Not recommended)
4600 | browser.search.update | boolean | Firefox 68, Firefox ESR 68 | true
4601 | &nbsp;&nbsp;&nbsp;&nbsp;If false, updates for search engines are not checked.
4602 | browser.slowStartup.notificationDisabled | boolean | Firefox 70, Firefox ESR 68.2 | false
4603 | &nbsp;&nbsp;&nbsp;&nbsp;If true, a notification isn't shown if startup is slow.
4604 | browser.tabs.warnOnClose | boolean | Firefox 68, Firefox ESR 68 | true
4605 | &nbsp;&nbsp;&nbsp;&nbsp;If false, there is no warning when the browser is closed.
4606 | browser.taskbar.previews.enable | boolean | Firefox 70, Firefox ESR 68.2 (Windows only) | false
4607 | &nbsp;&nbsp;&nbsp;&nbsp;If true, tab previews are shown in the Windows taskbar.
4608 | browser.urlbar.suggest.bookmark | boolean | Firefox 68, Firefox ESR 68 | true
4609 | &nbsp;&nbsp;&nbsp;&nbsp;If false, bookmarks aren't suggested when typing in the URL bar.
4610 | browser.urlbar.suggest.history | boolean | Firefox 68, Firefox ESR 68 | true
4611 | &nbsp;&nbsp;&nbsp;&nbsp;If false, history isn't suggested when typing in the URL bar.
4612 | browser.urlbar.suggest.openpage | boolean | Firefox 68, Firefox ESR 68 | true
4613 | &nbsp;&nbsp;&nbsp;&nbsp;If false, open tabs aren't suggested when typing in the URL bar.
4614 | datareporting.policy.dataSubmissionPolicyBypassNotification | boolean | Firefox 68, Firefox ESR 68 | false
4615 | &nbsp;&nbsp;&nbsp;&nbsp;If true, don't show the privacy policy tab on first run.
4616 | dom.allow_scripts_to_close_windows | boolean | Firefox 70, Firefox ESR 68.2 | false
4617 | &nbsp;&nbsp;&nbsp;&nbsp;If false, web page can close windows.
4618 | dom.disable_window_flip | boolean | Firefox 68, Firefox ESR 68 | true
4619 | &nbsp;&nbsp;&nbsp;&nbsp;If false, web pages can focus and activate windows.
4620 | dom.disable_window_move_resize | boolean | Firefox 68, Firefox ESR 68 | false
4621 | &nbsp;&nbsp;&nbsp;&nbsp;If true, web pages can't move or resize windows.
4622 | dom.event.contextmenu.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4623 | &nbsp;&nbsp;&nbsp;&nbsp;If false, web pages can't override context menus.
4624 | dom.keyboardevent.keypress.hack.dispatch_non_printable_keys.addl | string | Firefox 68, Firefox ESR 68 | N/A
4625 | &nbsp;&nbsp;&nbsp;&nbsp;See https://support.mozilla.org/en-US/kb/dom-events-changes-introduced-firefox-66
4626 | dom.keyboardevent.keypress.hack.use_legacy_keycode_and_charcode.addl | string | Firefox 68, Firefox ESR 68 | N/A
4627 | &nbsp;&nbsp;&nbsp;&nbsp;See https://support.mozilla.org/en-US/kb/dom-events-changes-introduced-firefox-66
4628 | dom.xmldocument.load.enabled | boolean | Firefox ESR 68.5 | true.
4629 | &nbsp;&nbsp;&nbsp;&nbsp;If false, XMLDocument.load is not available.
4630 | dom.xmldocument.async.enabled | boolean | Firefox ESR 68.5 | true
4631 | &nbsp;&nbsp;&nbsp;&nbsp;If false, XMLDocument.async is not available.
4632 | extensions.blocklist.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
4633 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the extensions blocklist is not used (Not recommended)
4634 | extensions.getAddons.showPane | boolean | Firefox 68, Firefox ESR 68 | N/A
4635 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the Recommendations tab is not displayed in the Add-ons Manager.
4636 | extensions.htmlaboutaddons.recommendations.enabled | boolean | Firefox 72, Firefox ESR 68.4 | true
4637 | &nbsp;&nbsp;&nbsp;&nbsp;If false, recommendations are not shown on the Extensions tab in the Add-ons Manager.
4638 | geo.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
4639 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the geolocation API is disabled. | Language dependent
4640 | intl.accept_languages | string | Firefox 70, Firefox ESR 68.2
4641 | &nbsp;&nbsp;&nbsp;&nbsp;If set, preferred language for web pages.
4642 | media.eme.enabled (Deprecated - Switch to EncryptedMediaExtensions policy) | boolean | Firefox 70, Firefox ESR 68.2 | true
4643 | &nbsp;&nbsp;&nbsp;&nbsp;If false, Encrypted Media Extensions are not enabled.
4644 | media.gmp-gmpopenh264.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4645 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the OpenH264  plugin is not downloaded.
4646 | media.gmp-widevinecdm.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4647 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the Widevine plugin is not downloaded.
4648 | media.peerconnection.enabled | boolean | Firefox 72, Firefox ESR 68.4 | true
4649 | &nbsp;&nbsp;&nbsp;&nbsp;If false, WebRTC is disabled
4650 | media.peerconnection.ice.obfuscate_host_addresses.whitelist (Deprecated) | string | Firefox 72, Firefox ESR 68.4 | N/A
4651 | &nbsp;&nbsp;&nbsp;&nbsp;If set, a list of domains for which mDNS hostname obfuscation is
4652 disabled
4653 | media.peerconnection.ice.obfuscate_host_addresses.blocklist | string | Firefox 79, Firefox ESR 78.1 | N/A
4654 | &nbsp;&nbsp;&nbsp;&nbsp;If set, a list of domains for which mDNS hostname obfuscation is
4655 disabled
4656 | network.dns.disableIPv6 | boolean | Firefox 68, Firefox ESR 68 | false
4657 | &nbsp;&nbsp;&nbsp;&nbsp;If true, IPv6 DNS lokoups are disabled.
4658 | network.IDN_show_punycode | boolean | Firefox 68, Firefox ESR 68 | false
4659 | &nbsp;&nbsp;&nbsp;&nbsp;If true, display the punycode version of internationalized domain names.
4660 | places.history.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4661 | &nbsp;&nbsp;&nbsp;&nbsp;If false, history is not enabled.
4662 | print.save_print_settings | boolean | Firefox 70, Firefox ESR 68.2 | true
4663 | &nbsp;&nbsp;&nbsp;&nbsp;If false, print settings are not saved between jobs.
4664 | security.default_personal_cert | string | Firefox 68, Firefox ESR 68 | Ask Every Time
4665 | &nbsp;&nbsp;&nbsp;&nbsp;If set to Select Automatically, Firefox automatically chooses the default personal certificate.
4666 | security.mixed_content.block_active_content | boolean | Firefox 70, Firefox ESR 68.2 | true
4667 | &nbsp;&nbsp;&nbsp;&nbsp;If false, mixed active content (HTTP and HTTPS) is not blocked.
4668 | security.osclientcerts.autoload | boolean | Firefox 72 (Windows), Firefox 75 (macOS)  | false
4669 | &nbsp;&nbsp;&nbsp;&nbsp;If true, client certificates are loaded from the operating system certificate store.
4670 | security.ssl.errorReporting.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4671 | &nbsp;&nbsp;&nbsp;&nbsp;If false, SSL errors cannot be sent to Mozilla.
4672 | security.tls.hello_downgrade_check | boolean | Firefox 72, Firefox ESR 68.4 | true
4673 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the TLS 1.3 downgrade check is disabled.
4674 | ui.key.menuAccessKeyFocuses | boolean | Firefox 68, Firefox ESR 68 | true
4675 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the Alt key doesn't show the menubar on Windows.
4676 | widget.content.gtk-theme-override | string | Firefox 72, Firefox ESR 68.4 (Linux only) | N/A
4677 | &nbsp;&nbsp;&nbsp;&nbsp;If set, overrides the GTK theme for widgets.
4678 #### Windows (GPO)
4679 ```
4680 Software\Policies\Mozilla\Firefox\Preferences\boolean_preference_name = 0x1 | 0x0
4681 Software\Policies\Mozilla\Firefox\Preferences\string_preference_name = "string_value"
4682 ```
4683 #### Windows (Intune)
4684 OMA-URI: (periods are replaced by underscores)
4685 ```
4686 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Preferences/boolean_preference_name
4687 ```
4688 Value (string):
4689 ```
4690 <enabled/> or <disabled/>
4691 ```
4692 OMA-URI: (periods are replaced by underscores)
4693 ```
4694 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Preferences/string_preference_name
4695 ```
4696 Value (string):
4697 ```
4698 <enabled/>
4699 <data id="Preferences_String" value="string_value"/>
4700 ```
4701 #### macOS
4702 ```
4703 <dict>
4704   <key>Preferences</key>
4705   <dict>
4706     <key>boolean_preference_name</key>
4707     <true/> | <false/>
4708     <key>string_preference_name</key>
4709     <string>string_value</string>
4710   </dict>
4711 </dict>
4712 ```
4713 #### policies.json
4714 ```
4715 {
4716   "policies": {
4717     "Preferences": {
4718       "boolean_preference_name": true | false,
4719       "string_preference_name": "string_value"
4720     }
4721   }
4722 }
4723 ```
4724 ### PrimaryPassword
4725 Require or prevent using a primary (formerly master) password.
4726
4727 If this value is true, a primary password is required. If this value is false, it works the same as if [`DisableMasterPasswordCreation`](#disablemasterpasswordcreation) was true and removes the primary password functionality.
4728
4729 If both DisableMasterPasswordCreation and PrimaryPassword are used, DisableMasterPasswordCreation takes precedent.
4730
4731 **Compatibility:** Firefox 79, Firefox ESR 78.1\
4732 **CCK2 Equivalent:** `noMasterPassword`\
4733 **Preferences Affected:** N/A
4734
4735 #### Windows (GPO)
4736 ```
4737 Software\Policies\Mozilla\Firefox\PrimaryPassword = 0x1 | 0x0
4738 ```
4739 #### Windows (Intune)
4740 OMA-URI:
4741 ```
4742 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PrimaryPassword
4743 ```
4744 Value (string):
4745 ```
4746 <enabled/> or <disabled/>
4747 ```
4748 #### macOS
4749 ```
4750 <dict>
4751   <key>PrimaryPassword</key>
4752   <true/> | <false/>
4753 </dict>
4754 ```
4755 #### policies.json
4756 ```
4757 {
4758   "policies": {
4759     "PrimaryPassword": true | false
4760   }
4761 }
4762 ```
4763 ### PromptForDownloadLocation
4764 Ask where to save each file before downloading.
4765
4766 **Compatibility:** Firefox 68, Firefox ESR 68\
4767 **CCK2 Equivalent:** N/A\
4768 **Preferences Affected:** `browser.download.useDownloadDir`
4769
4770 #### Windows (GPO)
4771 ```
4772 Software\Policies\Mozilla\Firefox\PromptForDownloadLocation = 0x1 | 0x0
4773 ```
4774 #### Windows (Intune)
4775 OMA-URI:
4776 ```
4777 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PromptForDownloadLocation
4778 ```
4779 Value (string):
4780 ```
4781 <enabled/> or <disabled/>
4782 ```
4783 #### macOS
4784 ```
4785 <dict>
4786   <key>PromptForDownloadLocation</key>
4787   <true/> | <false/>
4788 </dict>
4789 ```
4790 #### policies.json
4791 ```
4792 {
4793   "policies": {
4794     "PromptForDownloadLocation": true | false
4795   }
4796 }
4797 ```
4798 ### Proxy
4799 Configure proxy settings. These settings correspond to the connection settings in Firefox preferences.
4800 To specify ports, append them to the hostnames with a colon (:).
4801
4802 `Mode` is the proxy method being used.
4803
4804 `Locked` is whether or not proxy settings can be changed.
4805
4806 `HTTPProxy` is the HTTP proxy server.
4807
4808 `UseHTTPProxyForAllProtocols` is whether or not the HTTP proxy should be used for all other proxies.
4809
4810 `SSLProxy` is the SSL proxy server.
4811
4812 `FTPProxy` is the FTP proxy server.
4813
4814 `SOCKSProxy` is the SOCKS proxy server
4815
4816 `SOCKSVersion` is the SOCKS version (4 or 5)
4817
4818 `Passthrough` is list of hostnames or IP addresses that will not be proxied. Use `<local>` to bypass proxying for all hostnames which do not contain periods.
4819
4820 `AutoConfigURL` is a  URL for proxy configuration (only used if Mode is autoConfig).
4821
4822 `AutoLogin` means do not prompt for authentication if password is saved.
4823
4824 `UseProxyForDNS` to use proxy DNS when using SOCKS v5.
4825
4826 **Compatibility:** Firefox 60, Firefox ESR 60\
4827 **CCK2 Equivalent:** `networkProxy*`\
4828 **Preferences Affected:** `network.proxy.type`, `network.proxy.autoconfig_url`, `network.proxy.socks_remote_dns`, `signon.autologin.proxy`, `network.proxy.socks_version`, `network.proxy.no_proxies_on`, `network.proxy.share_proxy_settings`, `network.proxy.http`, `network.proxy.http_port`, `network.proxy.ftp`, `network.proxy.ftp_port`, `network.proxy.ssl`, `network.proxy.ssl_port`, `network.proxy.socks`, `network.proxy.socks_port`
4829
4830 #### Windows (GPO)
4831 ```
4832 Software\Policies\Mozilla\Firefox\Proxy\Mode = "none" | "system" | "manual" | "autoDetect" | "autoConfig"
4833 Software\Policies\Mozilla\Firefox\Proxy\Locked = 0x1 | 0x0
4834 Software\Policies\Mozilla\Firefox\=Proxy\HTTPProxy = https://httpproxy.example.com
4835 Software\Policies\Mozilla\Firefox\Proxy\UseHTTPProxyForAllProtocols = 0x1 | 0x0
4836 Software\Policies\Mozilla\Firefox\Proxy\SSLProxy = https://sslproxy.example.com
4837 Software\Policies\Mozilla\Firefox\Proxy\FTPProxy = https://ftpproxy.example.com
4838 Software\Policies\Mozilla\Firefox\Proxy\SOCKSProxy = https://socksproxy.example.com
4839 Software\Policies\Mozilla\Firefox\Proxy\SOCKSVersion = 0x4 | 0x5
4840 Software\Policies\Mozilla\Firefox\Proxy\Passthrough = <local>
4841 Software\Policies\Mozilla\Firefox\Proxy\AutoConfigURL = URL_TO_AUTOCONFIG
4842 Software\Policies\Mozilla\Firefox\Proxy\AutoLogin = 0x1 | 0x0
4843 Software\Policies\Mozilla\Firefox\Proxy\UseProxyForDNS = 0x1 | 0x0
4844 ```
4845 #### Windows (Intune)
4846 OMA-URI:
4847 ```
4848 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Proxy
4849 ```
4850 Value (string):
4851 ```
4852 <enabled/>
4853 <data id="ProxyLocked" value="true | false"/>
4854 <data id="ConnectionType" value="none | system | manual | autoDetect | autoConfig"/>
4855 <data id="HTTPProxy" value="https://httpproxy.example.com"/>
4856 <data id="UseHTTPProxyForAllProtocols" value="true | false"/>
4857 <data id="SSLProxy" value="https://sslproxy.example.com"/>
4858 <data id="FTPProxy" value="https://ftpproxy.example.com"/>
4859 <data id="SOCKSProxy" value="https://socksproxy.example.com"/>
4860 <data id="SOCKSVersion" value="4 | 5"/>
4861 <data id="AutoConfigURL" value="URL_TO_AUTOCONFIG"/>
4862 <data id="Passthrough" value="<local>"/>
4863 <data id="AutoLogin" value="true | false"/>
4864 <data id="UseProxyForDNS" value="true | false"/>
4865 ```
4866 #### macOS
4867 ```
4868 <dict>
4869   <key>Proxy</key>
4870   <dict>
4871     <key>Mode</key>
4872     <string>none | system | manual | autoDetect | autoConfig</string>
4873     <key>Locked</key>
4874     <true> | </false>
4875     <key>HTTPProxy</key>
4876     <string>https://httpproxy.example.com</string>
4877     <key>UseHTTPProxyForAllProtocols</key>
4878     <true> | </false>
4879     <key>SSLProxy</key>
4880     <string>https://sslproxy.example.com</string>
4881     <key>FTPProxy</key>
4882     <string>https://ftpproxy.example.com</string>
4883     <key>SOCKSProxy</key>
4884     <string>https://socksproxy.example.com</string>
4885     <key>SOCKSVersion</key>
4886     <string>4 | 5</string>
4887     <key>Passthrough</key>
4888     <string>&lt;local>&gt;</string>
4889     <key>AutoConfigURL</key>
4890     <string>URL_TO_AUTOCONFIG</string>
4891     <key>AutoLogin</key>
4892     <true> | </false>
4893     <key>UseProxyForDNS</key>
4894     <true> | </false>
4895   </dict>
4896 </dict>
4897 ```
4898 #### policies.json
4899 ```
4900 {
4901   "policies": {
4902     "Proxy": {
4903       "Mode": "none" | "system" | "manual" | "autoDetect" | "autoConfig",
4904       "Locked": true | false,
4905       "HTTPProxy": "hostname",
4906       "UseHTTPProxyForAllProtocols": true | false,
4907       "SSLProxy": "hostname",
4908       "FTPProxy": "hostname",
4909       "SOCKSProxy": "hostname",
4910       "SOCKSVersion": 4 | 5,
4911       "Passthrough": "<local>",
4912       "AutoConfigURL": "URL_TO_AUTOCONFIG",
4913       "AutoLogin": true | false,
4914       "UseProxyForDNS": true | false
4915     }
4916   }
4917 }
4918 ```
4919 ### RequestedLocales
4920 Set the the list of requested locales for the application in order of preference. It will cause the corresponding language pack to become active.
4921
4922 Note: For Firefox 68, this can now be a string so that you can specify an empty value.
4923
4924 **Compatibility:** Firefox 64, Firefox ESR 60.4, Updated in Firefox 68, Firefox ESR 68\
4925 **CCK2 Equivalent:** N/A\
4926 **Preferences Affected:** N/A
4927 #### Windows (GPO)
4928 ```
4929 Software\Policies\Mozilla\Firefox\RequestedLocales\1 = "de"
4930 Software\Policies\Mozilla\Firefox\RequestedLocales\2 = "en-US"
4931
4932 or
4933
4934 Software\Policies\Mozilla\Firefox\RequestedLocales = "de,en-US"
4935 ```
4936 #### Windows (Intune)
4937 OMA-URI:
4938 ```
4939 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/RequestedLocalesString
4940 ```
4941 Value (string):
4942 ```
4943 <enabled/>
4944 <data id="Preferences_String" value="de,en-US"/>
4945 ```
4946 #### macOS
4947 ```
4948 <dict>
4949   <key>RequestedLocales</key>
4950   <array>
4951     <string>de</string>
4952     <string>en-US</string>
4953   </array>
4954 </dict>
4955
4956 or
4957
4958 <dict>
4959   <key>RequestedLocales</key>
4960   <string>de,en-US</string>
4961 </dict>
4962
4963 ```
4964 #### policies.json
4965 ```
4966 {
4967   "policies": {
4968     "RequestedLocales": ["de", "en-US"]
4969   }
4970 }
4971
4972 or
4973
4974 {
4975   "policies": {
4976     "RequestedLocales": "de,en-US"
4977   }
4978 }
4979 ```
4980 <a name="SanitizeOnShutdown"></a>
4981
4982 ### SanitizeOnShutdown (Selective)
4983 Clear data on shutdown. Choose from Cache, Cookies, Download History, Form & Search History, Browsing History, Active Logins, Site Preferences and Offline Website Data.
4984
4985 Previously, these values were always locked. Starting with Firefox 74 and Firefox ESR 68.6, you can use the `Locked` option to either keep the values unlocked (set it to false), or lock only the values you set (set it to true). If you want the old behavior of locking everything, do not set `Locked` at all.
4986
4987 **Compatibility:** Firefox 68, Firefox ESR 68 (Locked added in 74/68.6)\
4988 **CCK2 Equivalent:** N/A\
4989 **Preferences Affected:** `privacy.sanitize.sanitizeOnShutdown`, `privacy.clearOnShutdown.cache`, `privacy.clearOnShutdown.cookies`, `privacy.clearOnShutdown.downloads`, `privacy.clearOnShutdown.formdata`, `privacy.clearOnShutdown.history`, `privacy.clearOnShutdown.sessions`, `privacy.clearOnShutdown.siteSettings`, `privacy.clearOnShutdown.offlineApps`
4990 #### Windows (GPO)
4991 ```
4992 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Cache = 0x1 | 0x0
4993 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Cookies = 0x1 | 0x0
4994 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Downloads = 0x1 | 0x0
4995 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\FormData = 0x1 | 0x0
4996 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\History = 0x1 | 0x0
4997 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Sessions = 0x1 | 0x0
4998 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\SiteSettings = 0x1 | 0x0
4999 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\OfflineApps = 0x1 | 0x0
5000 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Locked = 0x1 | 0x0
5001 ```
5002 #### Windows (Intune)
5003 OMA-URI:
5004 ```
5005 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/A_SanitizeOnShutdown_Cache
5006 ```
5007 Value (string):
5008 ```
5009 <enabled/> or <disabled/>
5010 ```
5011 OMA-URI:
5012 ```
5013 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/B_SanitizeOnShutdown_Cookies
5014 ```
5015 Value (string):
5016 ```
5017 <enabled/> or <disabled/>
5018 ```
5019 OMA-URI:
5020 ```
5021 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/C_SanitizeOnShutdown_Downloads
5022 ```
5023 Value (string):
5024 ```
5025 <enabled/> or <disabled/>
5026 ```
5027 OMA-URI:
5028 ```
5029 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/D_SanitizeOnShutdown_FormData
5030 ```
5031 Value (string):
5032 ```
5033 <enabled/> or <disabled/>
5034 ```
5035 OMA-URI:
5036 ```
5037 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/E_SanitizeOnShutdown_History
5038 ```
5039 Value (string):
5040 ```
5041 <enabled/> or <disabled/>
5042 ```
5043 OMA-URI:
5044 ```
5045 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/F_SanitizeOnShutdown_Sessions
5046 ```
5047 Value (string):
5048 ```
5049 <enabled/> or <disabled/>
5050 ```
5051 OMA-URI:
5052 ```
5053 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/G_SanitizeOnShutdown_SiteSettings
5054 ```
5055 Value (string):
5056 ```
5057 <enabled/> or <disabled/>
5058 ```
5059 OMA-URI:
5060 ```
5061 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/H_SanitizeOnShutdown_OfflineApps
5062 ```
5063 Value (string):
5064 ```
5065 <enabled/> or <disabled/>
5066 ```
5067 OMA-URI:
5068 ```
5069 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/I_SanitizeOnShutdown_Locked
5070 ```
5071 Value (string):
5072 ```
5073 <enabled/> or <disabled/>
5074 ```
5075 #### macOS
5076 ```
5077 <dict>
5078   <key>SanitizeOnShutdown</key>
5079   <dict>
5080     <key>Cache</key>
5081     <true/> | <false/>
5082     <key>Cookies</key>
5083     <true/> | <false/>
5084     <key>Downloads</key>
5085     <true/> | <false/>
5086     <key>FormData</key>
5087     <true/> | <false/>
5088     <key>History</key>
5089     <true/> | <false/>
5090     <key>Sessions</key>
5091     <true/> | <false/>
5092     <key>SiteSettings</key>
5093     <true/> | <false/>
5094     <key>OfflineApps</key>
5095     <true/> | <false/>
5096     <key>Locked</key>
5097     <true/> | <false/>
5098   </dict>
5099 </dict>
5100 ```
5101 #### policies.json
5102 ```
5103 {
5104   "policies": {
5105     "SanitizeOnShutdown": {
5106       "Cache": true | false,
5107       "Cookies": true | false,
5108       "Downloads": true | false,
5109       "FormData": true | false,
5110       "History": true | false,
5111       "Sessions": true | false,
5112       "SiteSettings": true | false,
5113       "OfflineApps": true | false,
5114       "Locked": true | false
5115     }
5116   }
5117 }
5118 ```
5119 ### SanitizeOnShutdown (All)
5120 Clear all data on shutdown, including Browsing & Download History, Cookies, Active Logins, Cache, Form & Search History, Site Preferences and Offline Website Data.
5121
5122 **Compatibility:** Firefox 60, Firefox ESR 60\
5123 **CCK2 Equivalent:** N/A\
5124 **Preferences Affected:** `privacy.sanitize.sanitizeOnShutdown`, `privacy.clearOnShutdown.cache`, `privacy.clearOnShutdown.cookies`, `privacy.clearOnShutdown.downloads`, `privacy.clearOnShutdown.formdata`, `privacy.clearOnShutdown.history`, `privacy.clearOnShutdown.sessions`, `privacy.clearOnShutdown.siteSettings`, `privacy.clearOnShutdown.offlineApps`
5125 #### Windows (GPO)
5126 ```
5127 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown = 0x1 | 0x0
5128 ```
5129 #### Windows (Intune)
5130 OMA-URI:
5131 ```
5132 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/C_SanitizeOnShutdown
5133 ```
5134 Value (string):
5135 ```
5136 <enabled/> or <disabled/>
5137 ```
5138 #### macOS
5139 ```
5140 <dict>
5141   <key>SanitizeOnShutdown</key>
5142   <true/> | <false/>
5143 </dict>
5144 ```
5145 #### policies.json
5146 ```
5147 {
5148   "policies": {
5149     "SanitizeOnShutdown": true | false
5150   }
5151 }
5152 ```
5153 ### SearchBar
5154 Set whether or not search bar is displayed.
5155
5156 **Compatibility:** Firefox 60, Firefox ESR 60\
5157 **CCK2 Equivalent:** `showSearchBar`\
5158 **Preferences Affected:** N/A
5159
5160 #### Windows (GPO)
5161 ```
5162 Software\Policies\Mozilla\Firefox\SearchBar = "unified" | "separate"
5163 ```
5164
5165 #### Windows (Intune)
5166 OMA-URI:
5167 ```
5168 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SearchBar
5169 ```
5170 Value (string):
5171 ```
5172 <enabled/>
5173 <data id="SearchBar" value="unified | separate"/>
5174 ```
5175 #### macOS
5176 ```
5177 <dict>
5178   <key>SearchBar</key>
5179   <string>unified | separate</string>
5180 </dict>
5181 ```
5182 #### policies.json
5183 ```
5184 {
5185   "policies": {
5186     "SearchBar": "unified" | "separate"
5187   }
5188 }
5189 ```
5190 <a name="SearchEngines"></a>
5191
5192 ### SearchEngines (This policy is only available on the ESR.)
5193
5194 ### SearchEngines | Add
5195
5196 Add new search engines. Although there are only five engines available in the ADMX template, there is no limit. To add more in the ADMX template, you can duplicate the XML.
5197
5198 This policy is only available on the ESR. `Name` and `URLTemplate` are required.
5199
5200 `Name` is the name of the search engine.
5201
5202 `URLTemplate` is the search URL with {searchTerms} to substitute for the search term.
5203
5204 `Method` is either GET or POST
5205
5206 `IconURL` is a URL for the icon to use.
5207
5208 `Alias` is a keyword to use for the engine.
5209
5210 `Description` is a description of the search engine.
5211
5212 `PostData` is the POST data as name value pairs separated by &.
5213
5214 `SuggestURLTemplate` is a search suggestions URL with {searchTerms} to substitute for the search term.
5215
5216 `Encoding` is the query charset for the engine. It defaults to UTF-8.
5217
5218 **Compatibility:** Firefox ESR 60 (POST support in Firefox ESR 68, Encoding support in Firefox 91)\
5219 **CCK2 Equivalent:** `searchplugins`\
5220 **Preferences Affected:** N/A
5221
5222 #### Windows (GPO)
5223 ```
5224 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Name = "Example1"
5225 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\URLTemplate = "https://www.example.org/q={searchTerms}"
5226 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Method = "GET" | "POST"
5227 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\IconURL = "https://www.example.org/favicon.ico"
5228 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Alias = "example"
5229 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Description = "Example Description"
5230 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\SuggestURLTemplate = "https://www.example.org/suggestions/q={searchTerms}"
5231 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\PostData = "name=value&q={searchTerms}"
5232 ```
5233 #### Windows (Intune)
5234 OMA-URI:
5235 ```
5236 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_1
5237 ```
5238 Value (string):
5239 ```
5240 <enabled/>
5241 <data id="SearchEngine_Name" value="Example1"/>
5242 <data id="SearchEngine_URLTemplate" value="https://www.example.org/q={searchTerms"/>
5243 <data id="SearchEngine_Method" value="GET | POST"/>
5244 <data id="SearchEngine_IconURL" value="https://www.example.org/favicon.ico"/>
5245 <data id="SearchEngine_Alias" value="example"/>
5246 <data id="SearchEngine_Description" value="Example Description"/>
5247 <data id="SearchEngine_SuggestURLTemplate" value="https://www.example.org/suggestions/q={searchTerms}"/>
5248 <data id="SearchEngine_PostData" value="name=value&amp;q={searchTerms}"/>
5249 ```
5250 #### macOS
5251 ```
5252 <dict>
5253   <key>SearchEngines</key>
5254   <dict>
5255     <key>Add</key>
5256     <array>
5257       <dict>
5258         <key>Name</key>
5259         <string>Example1</string>
5260         <key>URLTemplate</key>
5261         <string>https://www.example.org/q={searchTerms}</string>
5262         <key>Method</key>
5263         <string>GET | POST </string>
5264         <key>IconURL</key>
5265         <string>https://www.example.org/favicon.ico</string>
5266         <key>Alias</key>
5267         <string>example</string>
5268         <key>Description</key>
5269         <string>Example Description</string>
5270         <key>SuggestURLTemplate</key>
5271         <string>https://www.example.org/suggestions/q={searchTerms}</string>
5272         <key>PostData</key>
5273         <string>name=value&q={searchTerms}</string>
5274       </dict>
5275     <array>
5276   </dict>
5277 </dict>
5278 ```
5279 #### policies.json
5280 ```
5281 {
5282   "policies": {
5283     "SearchEngines": {
5284       "Add": [
5285         {
5286           "Name": "Example1",
5287           "URLTemplate": "https://www.example.org/q={searchTerms}",
5288           "Method": "GET" | "POST",
5289           "IconURL": "https://www.example.org/favicon.ico",
5290           "Alias": "example",
5291           "Description": "Description",
5292           "PostData": "name=value&q={searchTerms}",
5293           "SuggestURLTemplate": "https://www.example.org/suggestions/q={searchTerms}"
5294         }
5295       ]
5296     }
5297   }
5298 }
5299 ```
5300 ### SearchEngines | Default
5301
5302 Set the default search engine. This policy is only available on the ESR.
5303
5304 **Compatibility:** Firefox ESR 60\
5305 **CCK2 Equivalent:** `defaultSearchEngine`\
5306 **Preferences Affected:** N/A
5307
5308 #### Windows (GPO)
5309 ```
5310 Software\Policies\Mozilla\Firefox\SearchEngines\Default = NAME_OF_SEARCH_ENGINE
5311 ```
5312 #### Windows (Intune)
5313 OMA-URI:
5314 ```
5315 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_Default
5316 ```
5317 Value (string):
5318 ```
5319 <enabled/>
5320 <data id="SearchEngines_Default" value="NAME_OF_SEARCH_ENGINE"/>
5321 ```
5322 #### macOS
5323 ```
5324 <dict>
5325   <key>SearchEngines</key>
5326   <dict>
5327     <key>Default</key>
5328     <string>NAME_OF_SEARCH_ENGINE</string>
5329   </dict>
5330 </dict>
5331 ```
5332 #### policies.json
5333 ```
5334 {
5335   "policies": {
5336     "SearchEngines": {
5337       "Default": "NAME_OF_SEARCH_ENGINE"
5338     }
5339   }
5340 }
5341 ```
5342 ### SearchEngines | PreventInstalls
5343
5344 Prevent installing search engines from webpages.
5345
5346 **Compatibility:** Firefox ESR 60\
5347 **CCK2 Equivalent:** `disableSearchEngineInstall`\
5348 **Preferences Affected:** N/A
5349
5350 #### Windows (GPO)
5351 ```
5352 Software\Policies\Mozilla\Firefox\SearchEngines\PreventInstalls = 0x1 | 0x0
5353 ```
5354 #### Windows (Intune)
5355 OMA-URI:
5356 ```
5357 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_PreventInstalls
5358 ```
5359 Value (string):
5360 ```
5361 <enabled/> or <disabled/>
5362 ```
5363 #### macOS
5364 ```
5365 <dict>
5366   <key>SearchEngines</key>
5367   <dict>
5368     <key>PreventInstalls</key>
5369     <true/> | <false/>
5370   </dict>
5371 </dict>
5372 ```
5373 #### policies.json
5374 ```
5375 {
5376   "policies": {
5377     "SearchEngines": {
5378       "PreventInstalls": true | false
5379     }
5380   }
5381 }
5382 ```
5383 ### SearchEngines | Remove
5384
5385 Hide built-in search engines. This policy is only available on the ESR.
5386
5387 **Compatibility:** Firefox ESR 60.2\
5388 **CCK2 Equivalent:** `removeDefaultSearchEngines` (removed all built-in engines)\
5389 **Preferences Affected:** N/A
5390
5391 #### Windows (GPO)
5392 ```
5393 Software\Policies\Mozilla\Firefox\SearchEngines\Remove\1 = NAME_OF_SEARCH_ENGINE
5394 ```
5395 #### Windows (Intune)
5396 OMA-URI:
5397 ```
5398 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_Remove
5399 ```
5400 Value (string):
5401 ```
5402 <enabled/>
5403 <data id="SearchEngines_Remove" value="1&#xF000;NAME_OF_SEARCH_ENGINE"/>
5404 ```
5405 #### macOS
5406 ```
5407 <dict>
5408   <key>SearchEngines</key>
5409   <dict>
5410     <key>Remove</key>
5411     <array>
5412       <string>NAME_OF_SEARCH_ENGINE</string>
5413     </array>
5414   </dict>
5415 </dict>
5416 ```
5417 #### policies.json
5418 ```
5419 {
5420   "policies": {
5421     "SearchEngines": {
5422       "Remove": ["NAME_OF_SEARCH_ENGINE"]
5423     }
5424   }
5425 }
5426 ```
5427 ### SearchSuggestEnabled
5428
5429 Enable search suggestions.
5430
5431 **Compatibility:** Firefox 68, Firefox ESR 68\
5432 **CCK2 Equivalent:** N/A\
5433 **Preferences Affected:** `browser.urlbar.suggest.searches`, `browser.search.suggest.enabled`
5434
5435 #### Windows (GPO)
5436 ```
5437 Software\Policies\Mozilla\Firefox\SearchSuggestEnabled = 0x1 | 0x0
5438 ```
5439 #### Windows (Intune)
5440 OMA-URI:
5441 ```
5442 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchSuggestEnabled
5443 ```
5444 Value (string):
5445 ```
5446 <enabled/> or <disabled/>
5447 ```
5448 #### macOS
5449 ```
5450 <dict>
5451   <key>SearchSuggestEnabled</key>
5452   <true/> | <false/>
5453 </dict>
5454 ```
5455 #### policies.json
5456 ```
5457 {
5458   "policies": {
5459     "SearchSuggestEnabled": true | false
5460   }
5461 }
5462 ```
5463 ### SecurityDevices
5464
5465 Install PKCS #11 modules.
5466
5467 **Compatibility:** Firefox 64, Firefox ESR 60.4\
5468 **CCK2 Equivalent:** `certs.devices`\
5469 **Preferences Affected:** N/A
5470
5471 #### Windows (GPO)
5472 ```
5473 Software\Policies\Mozilla\Firefox\SecurityDevices\NAME_OF_DEVICE = PATH_TO_LIBRARY_FOR_DEVICE
5474 ```
5475 #### Windows (Intune)
5476 OMA-URI:
5477 ```
5478 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SecurityDevices
5479 ```
5480 Value (string):
5481 ```
5482 <enabled/>
5483 <data id="SecurityDevices" value="NAME_OF_DEVICE&#xF000;PATH_TO_LIBRARY_FOR_DEVICE"/>
5484 ```
5485 #### macOS
5486 ```
5487 <dict>
5488   <key>SecurityDevices</key>
5489   <dict>
5490     <key>NAME_OF_DEVICE</key>
5491     <string>PATH_TO_LIBRARY_FOR_DEVICE</string>
5492   </dict>
5493 </dict>
5494 ```
5495
5496 #### policies.json
5497 ```
5498 {
5499   "policies": {
5500     "SecurityDevices": {
5501       "NAME_OF_DEVICE": "PATH_TO_LIBRARY_FOR_DEVICE"
5502     }
5503   }
5504 }
5505 ```
5506 ### ShowHomeButton
5507 Show the home button on the toolbar.
5508
5509 Future versions of Firefox will not show the home button by default.
5510
5511 **Compatibility:** Firefox 88, Firefox ESR 78.10\
5512 **CCK2 Equivalent:** N/A\
5513 **Preferences Affected:** N/A
5514
5515 #### Windows (GPO)
5516 ```
5517 Software\Policies\Mozilla\Firefox\ShowHomeButton = 0x1 | 0x0
5518 ```
5519 #### Windows (Intune)
5520 OMA-URI:
5521 ```
5522 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/Homepage_ShowHomeButton
5523 ```
5524 Value (string):
5525 ```
5526 <enabled/> or <disabled/>
5527 ```
5528 #### macOS
5529 ```
5530 <dict>
5531   <key>ShowHomeButton</key>
5532   <true/> | <false/>
5533 </dict>
5534 ```
5535 #### policies.json
5536 ```
5537 {
5538   "policies": {
5539     "ShowHomeButton": true | false
5540   }
5541 }
5542 ```
5543 ### SSLVersionMax
5544
5545 Set and lock the maximum version of TLS.
5546
5547 **Compatibility:** Firefox 66, Firefox ESR 60.6\
5548 **CCK2 Equivalent:** N/A\
5549 **Preferences Affected:** `security.tls.version.max`
5550
5551 #### Windows (GPO)
5552 ```
5553 Software\Policies\Mozilla\Firefox\SSLVersionMax = "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
5554 ```
5555 #### Windows (Intune)
5556 OMA-URI:
5557 ```
5558 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SSLVersionMax
5559 ```
5560 Value (string):
5561 ```
5562 <enabled/>
5563 <data id="SSLVersion" value="tls1 | tls1.2 | tls1.3"/>
5564 ```
5565 #### macOS
5566 ```
5567 <dict>
5568   <key>SSLVersionMax</key>
5569   <string>tls1 | tls1.1 | tls1.2 | tls1.3</string>
5570 </dict>
5571 ```
5572
5573 #### policies.json
5574 ```
5575 {
5576   "policies": {
5577     "SSLVersionMax": "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
5578   }
5579 }
5580 ```
5581 ### SSLVersionMin
5582
5583 Set and lock the minimum version of TLS.
5584
5585 **Compatibility:** Firefox 66, Firefox ESR 60.6\
5586 **CCK2 Equivalent:** N/A\
5587 **Preferences Affected:** `security.tls.version.min`
5588
5589 #### Windows (GPO)
5590 ```
5591 Software\Policies\Mozilla\Firefox\SSLVersionMin = "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
5592 ```
5593 #### Windows (Intune)
5594 OMA-URI:
5595 ```
5596 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SSLVersionMin
5597 ```
5598 Value (string):
5599 ```
5600 <enabled/>
5601 <data id="SSLVersion" value="tls1 | tls1.2 | tls1.3"/>
5602 ```
5603 #### macOS
5604 ```
5605 <dict>
5606   <key>SSLVersionMin</key>
5607   <string>tls1 | tls1.1 | tls1.2 | tls1.3</string>
5608 </dict>
5609 ```
5610
5611 #### policies.json
5612 ```
5613 {
5614   "policies": {
5615     "SSLVersionMin": "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
5616   }
5617 }
5618 ```
5619 ### SupportMenu
5620 Add a menuitem to the help menu for specifying support information.
5621
5622 **Compatibility:** Firefox 68.0.1, Firefox ESR 68.0.1\
5623 **CCK2 Equivalent:** helpMenu\
5624 **Preferences Affected:** N/A
5625
5626 #### Windows (GPO)
5627 ```
5628 Software\Policies\Mozilla\Firefox\SupportMenu\Title = "Support Menu"
5629 Software\Policies\Mozilla\Firefox\SupportMenu\URL = "http://example.com/support"
5630 Software\Policies\Mozilla\Firefox\SupportMenu\AccessKey = "S"
5631 ```
5632 #### Windows (Intune)
5633 OMA-URI:
5634 ```
5635 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SupportMenu
5636 ```
5637 Value (string):
5638 ```
5639 <enabled/>
5640 <data id="SupportMenuTitle" value="Support Menu"/>
5641 <data id="SupportMenuURL" value="http://example.com/support"/>
5642 <data id="SupportMenuAccessKey" value="S">
5643 ```
5644 #### macOS
5645 ```
5646 <dict>
5647   <key>SupportMenu</key>
5648   <dict>
5649     <key>Title</key>
5650     <string>SupportMenu</string>
5651     <key>URL</key>
5652     <string>http://example.com/support</string>
5653     <key>AccessKey</key>
5654     <string>S</string>
5655   </dict>
5656 </dict>
5657 ```
5658 #### policies.json
5659 ```
5660 {
5661   "policies": {
5662     "SupportMenu": {
5663       "Title": "Support Menu",
5664       "URL": "http://example.com/support",
5665       "AccessKey": "S"
5666     }
5667   }
5668 }
5669 ```
5670 ### StartDownloadsInTempDirectory
5671 Force downloads to start off in a local, temporary location rather than the default download directory.
5672
5673 **Compatibility:** Firefox 102\
5674 **CCK2 Equivalent:** N/A\
5675 **Preferences Affected:** `browser.downloads.start_downloads_in_tmp_dir`
5676
5677 #### Windows (GPO)
5678 ```
5679 Software\Policies\Mozilla\Firefox\StartDownloadsInTempDirectory = 0x1 | 0x0
5680 ```
5681 #### Windows (Intune)
5682 OMA-URI:
5683 ```
5684 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/StartDownloadsInTempDirectory
5685 ```
5686 Value (string):
5687 ```
5688 <enabled/> or <disabled/>
5689 ```
5690 #### macOS
5691 ```
5692 <dict>
5693   <key>StartDownloadsInTempDirectory</key>
5694   <true/> | <false/>
5695 </dict>
5696 ```
5697 #### policies.json
5698 ```
5699 {
5700   "policies": {
5701     "StartDownloadsInTempDirectory": true | false
5702 }
5703 ```
5704 ### UserMessaging
5705
5706 Prevent Firefox from messaging the user in certain situations.
5707
5708 `WhatsNew` Remove the "What's New" icon and menuitem.
5709
5710 `ExtensionRecommendations` If false, don't recommend extensions while the user is visiting web pages.
5711
5712 `FeatureRecommendations` If false, don't recommend browser features.
5713
5714 `UrlbarInterventions` If false, Don't offer Firefox specific suggestions in the URL bar.
5715
5716 `SkipOnboarding` If true, don't show onboarding messages on the new tab page.
5717
5718 `MoreFromMozilla` If false, don't show the "More from Mozilla" section in Preferences. (Firefox 98)
5719
5720 **Compatibility:** Firefox 75, Firefox ESR 68.7\
5721 **CCK2 Equivalent:** N/A\
5722 **Preferences Affected:** `browser.messaging-system.whatsNewPanel.enabled`, `browser.newtabpage.activity-stream.asrouter.userprefs.cfr.addons`, `browser.newtabpage.activity-stream.asrouter.userprefs.cfr.features`, `browser.aboutwelcome.enabled`, `browser.preferences.moreFromMozilla`
5723
5724 #### Windows (GPO)
5725 ```
5726 Software\Policies\Mozilla\Firefox\UserMessaging\WhatsNew = 0x1 | 0x0
5727 Software\Policies\Mozilla\Firefox\UserMessaging\ExtensionRecommendations = 0x1 | 0x0
5728 Software\Policies\Mozilla\Firefox\UserMessaging\FeatureRecommendations = 0x1 | 0x0
5729 Software\Policies\Mozilla\Firefox\UserMessaging\UrlbarInterventions = 0x1 | 0x0
5730 Software\Policies\Mozilla\Firefox\UserMessaging\SkipOnboarding = 0x1 | 0x0
5731 Software\Policies\Mozilla\Firefox\UserMessaging\MoreFromMozilla = 0x1 | 0x0
5732 ```
5733 #### Windows (Intune)
5734 OMA-URI:
5735 ```
5736 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_WhatsNew
5737 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_ExtensionRecommendations
5738 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_FeatureRecommendations
5739 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_UrlbarInterventions
5740 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_SkipOnboarding
5741 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_MoreFromMozilla
5742 ```
5743 Value (string):
5744 ```
5745 <enabled/> or <disabled/>
5746 ```
5747 #### macOS
5748 ```
5749 <dict>
5750   <key>UserMessaging</key>
5751   <dict>
5752     <key>WhatsNew</key>
5753     <true/> | <false/>
5754     <key>ExtensionRecommendations</key>
5755     <true/> | <false/>
5756     <key>FeatureRecommendations</key>
5757     <true/> | <false/>
5758     <key>UrlbarInterventions</key>
5759     <true/> | <false/>
5760     <key>SkipOnboarding</key>
5761     <true/> | <false/>
5762     <key>MoreFromMozilla</key>
5763     <true/> | <false/>
5764   </dict>
5765 </dict>
5766 ```
5767 #### policies.json
5768 ```
5769 {
5770   "policies": {
5771     "UserMessaging": {
5772       "WhatsNew": true | false,
5773       "ExtensionRecommendations": true | false,
5774       "FeatureRecommendations": true | false,
5775       "UrlbarInterventions": true | false,
5776       "SkipOnboarding": true | false,
5777       "MoreFromMozilla": true | false
5778     }
5779   }
5780 }
5781 ```
5782 ### UseSystemPrintDialog
5783 Use the system print dialog instead of the print preview window.
5784
5785 **Compatibility:** Firefox 102\
5786 **CCK2 Equivalent:** N/A\
5787 **Preferences Affected:** `print.prefer_system_dialog`
5788
5789 #### Windows (GPO)
5790 ```
5791 Software\Policies\Mozilla\Firefox\UseSystemPrintDialog = 0x1 | 0x0
5792 ```
5793 #### Windows (Intune)
5794 OMA-URI:
5795 ```
5796 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/UseSystemPrintDialog
5797 ```
5798 Value (string):
5799 ```
5800 <enabled/> or <disabled/>
5801 ```
5802 #### macOS
5803 ```
5804 <dict>
5805   <key>UseSystemPrintDialog</key>
5806   <true/> | <false/>
5807 </dict>
5808 ```
5809 #### policies.json
5810 ```
5811 {
5812   "policies": {
5813     "UseSystemPrintDialog": true | false
5814   }
5815 }
5816 ```
5817 ### WebsiteFilter
5818 Block websites from being visited. The parameters take an array of Match Patterns, as documented in https://developer.mozilla.org/en-US/Add-ons/WebExtensions/Match_patterns.
5819 The arrays are limited to 1000 entries each.
5820
5821 If you want to block all URLs, you can use `<all_urls>` or `*://*/*`. You can't have just a `*` on the right side.
5822
5823 For specific protocols, use `https://*/*` or `http://*/*`.
5824
5825 As of Firefox 83 and Firefox ESR 78.5, file URLs are supported.
5826
5827 **Compatibility:** Firefox 60, Firefox ESR 60\
5828 **CCK2 Equivalent:** N/A\
5829 **Preferences Affected:** N/A
5830
5831 #### Windows (GPO)
5832 ```
5833 Software\Policies\Mozilla\Firefox\WebsiteFilter\Block\1 = "<all_urls>"
5834 Software\Policies\Mozilla\Firefox\WebsiteFilter\Exceptions\1 = "http://example.org/*"
5835 ```
5836 #### Windows (Intune)
5837 OMA-URI:
5838 ```
5839 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/B_WebsiteFilter_Block
5840 ```
5841 Value (string):
5842 ```
5843 <enabled/> <data id="WebsiteFilter" value="1&#xF000;&#60;all_urls&#62;"/>
5844 ```
5845 OMA-URI:
5846 ```
5847 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/B_WebsiteFilter_Exceptions
5848 ```
5849 Value (string):
5850 ```
5851 <enabled/>
5852 <data id="WebsiteFilter" value="1&#xF000;http://example.org/*"/>
5853 ```
5854 #### macOS
5855 ```
5856 <dict>
5857   <key>WebsiteFilter</key>
5858   <dict>
5859     <key>Block</key>
5860     <array>
5861       <string><all_urls></string>
5862     </array>
5863     <key>Exceptions</key>
5864     <array>
5865       <string>http://example.org/*</string>
5866     </array>
5867   </dict>
5868
5869 </dict>
5870 ```
5871 #### policies.json
5872 ```
5873 {
5874   "policies": {
5875     "WebsiteFilter": {
5876       "Block": ["<all_urls>"],
5877       "Exceptions": ["http://example.org/*"]
5878     }
5879   }
5880 }
5881 ```
5882 ### WindowsSSO
5883 Allow Windows single sign-on for Microsoft, work, and school accounts.
5884
5885 If this policy is set to true, Firefox will use credentials stored in Windows to sign in to Microsoft, work, and school accounts.
5886
5887 **Compatibility:** Firefox 91\
5888 **CCK2 Equivalent:** N/A\
5889 **Preferences Affected:** `network.http.windows-sso.enabled`
5890
5891 #### Windows (GPO)
5892 ```
5893 Software\Policies\Mozilla\Firefox\WindowsSSO = 0x1 | 0x0
5894 ```
5895 #### Windows (Intune)
5896 OMA-URI:
5897 ```
5898 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/WindowsSSO
5899 ```
5900 Value (string):
5901 ```
5902 <enabled/> or <disabled/>
5903 ```
5904 #### policies.json
5905 ```
5906 {
5907   "policies": {
5908     "WindowsSSO": true | false
5909   }
5910 }
5911 ```