README.md

   1 **These policies are in active development and so might contain changes that do not work with current versions of Firefox.**
   2
   3 **You should use the [officially released versions](https://github.com/mozilla/policy-templates/releases) if you are deploying changes.**
   4
   5 Policies can be specified using the [Group Policy templates on Windows](https://github.com/mozilla/policy-templates/tree/master/windows), [Intune on Windows](https://support.mozilla.org/kb/managing-firefox-intune), [configuration profiles on macOS](https://github.com/mozilla/policy-templates/tree/master/mac), or by creating a file called `policies.json`. On Windows, create a directory called `distribution` where the EXE is located and place the file there. On Mac, the file goes into `Firefox.app/Contents/Resources/distribution`.  On Linux, the file goes into `firefox/distribution`, where `firefox` is the installation directory for firefox, which varies by distribution or you can specify system-wide policy by placing the file in `/etc/firefox/policies`.
   6
   7 | Policy Name | Description
   8 | --- | --- |
   9 | **[`AppAutoUpdate`](#appautoupdate)** |  Enable or disable automatic application update.
  10 | **[`AppUpdateURL`](#appupdateurl)** | Change the URL for application update.
  11 | **[`Authentication`](#authentication)** | Configure sites that support integrated authentication.
  12 | **[`BlockAboutAddons`](#blockaboutaddons)** | Block access to the Add-ons Manager (about:addons).
  13 | **[`BlockAboutConfig`](#blockaboutconfig)** | Block access to about:config.
  14 | **[`BlockAboutProfiles`](#blockaboutprofiles)** | Block access to About Profiles (about:profiles).
  15 | **[`BlockAboutSupport`](#blockaboutsupport)** | Block access to Troubleshooting Information (about:support).
  16 | **[`Bookmarks`](#bookmarks)** | Add bookmarks in either the bookmarks toolbar or menu.
  17 | **[`CaptivePortal`](#captiveportal)** | Enable or disable the detection of captive portals.
  18 | **[`Certificates`](#certificates)** |
  19 | **[`Certificates -> ImportEnterpriseRoots`](#certificates--importenterpriseroots)** | Trust certificates that have been added to the operating system certificate store by a user or administrator.
  20 | **[`Certificates -> Install`](#certificates--install)** | Install certificates into the Firefox certificate store.
  21 | **[`Cookies`](#cookies)** | Configure cookie preferences.
  22 | **[`DisableAppUpdate`](#disableappupdate)** | Turn off application updates.
  23 | **[`DisableBuiltinPDFViewer`](#disablebuiltinpdfviewer)** | Disable the built in PDF viewer.
  24 | **[`DisabledCiphers`](#disabledciphers)** | Disable ciphers.
  25 | **[`DisableDefaultBrowserAgent`](#disabledefaultbrowseragent)** | Prevent the default browser agent from taking any actions (Windows only).
  26 | **[`DisableDeveloperTools`](#disabledevelopertools)** | Remove access to all developer tools.
  27 | **[`DisableFeedbackCommands`](#disablefeedbackcommands)** | Disable the menus for reporting sites.
  28 | **[`DisableFirefoxScreenshots`](#disablefirefoxscreenshots)** | Remove access to Firefox Screenshots.
  29 | **[`DisableFirefoxAccounts`](#disablefirefoxaccounts)** | Disable Firefox Accounts integration (Sync).
  30 | **[`DisableFirefoxStudies`](#disablefirefoxstudies)** | Disable Firefox studies (Shield).
  31 | **[`DisableForgetButton`](#disableforgetbutton)** | Disable the "Forget" button.
  32 | **[`DisableFormHistory`](#disableformhistory)** | Turn off saving information on web forms and the search bar.
  33 | **[`DisableMasterPasswordCreation`](#disablemasterpasswordcreation)** | Remove the master password functionality.
  34 | **[`DisablePasswordReveal`](#disablepasswordreveal)** | Do not allow passwords to be revealed in saved logins.
  35 | **[`DisablePocket`](#disablepocket)** | Remove Pocket in the Firefox UI.
  36 | **[`DisablePrivateBrowsing`](#disableprivatebrowsing)** | Remove access to private browsing.
  37 | **[`DisableProfileImport`](#disableprofileimport)** | Disables the "Import data from another browser" option in the bookmarks window.
  38 | **[`DisableProfileRefresh`](#disableprofilerefresh)** | Disable the Refresh Firefox button on about:support and support.mozilla.org
  39 | **[`DisableSafeMode`](#disablesafemode)** | Disable safe mode within the browser.
  40 | **[`DisableSecurityBypass`](#disablesecuritybypass)** | Prevent the user from bypassing security in certain cases.
  41 | **[`DisableSetDesktopBackground`](#disablesetdesktopbackground)** | Remove the "Set As Desktop Background..." menuitem when right clicking on an image.
  42 | **[`DisableSystemAddonUpdate`](#disablesystemaddonupdate)** | Prevent system add-ons from being installed or update.
  43 | **[`DisableTelemetry`](#disabletelemetry)** | DisableTelemetry
  44 | **[`DisplayBookmarksToolbar`](#displaybookmarkstoolbar)** | Set the initial state of the bookmarks toolbar.
  45 | **[`DisplayMenuBar (Deprecated)`](#displaymenubar-deprecated)** | Set the initial state of the menubar.
  46 | **[`DisplayMenuBar`](#displaymenubar)** | Set the state of the menubar.
  47 | **[`DNSOverHTTPS`](#dnsoverhttps)** | Configure DNS over HTTPS.
  48 | **[`DontCheckDefaultBrowser`](#dontcheckdefaultbrowser)** | Don't check if Firefox is the default browser at startup.
  49 | **[`DefaultDownloadDirectory`](#defaultdownloaddirectory)** | Set the default download directory.
  50 | **[`DownloadDirectory`](#downloaddirectory)** | Set and lock the download directory.
  51 | **[`EnableTrackingProtection`](#enabletrackingprotection)** | Configure tracking protection.
  52 | **[`EncryptedMediaExtensions`](#encryptedmediaextensions)** | Enable or disable Encrypted Media Extensions and optionally lock it.
  53 | **[`EnterprisePoliciesEnabled`](#enterprisepoliciesenabled)** | Enable policy support on macOS.
  54 | **[`Extensions`](#extensions)** | Control the installation, uninstallation and locking of extensions.
  55 | **[`ExtensionSettings`](#extensionsettings)** | Manage all aspects of extensions.
  56 | **[`ExtensionUpdate`](#extensionupdate)** | Control extension updates.
  57 | **[`FlashPlugin`](#flashplugin)** | Configure the default Flash plugin policy as well as origins for which Flash is allowed.
  58 | **[`FirefoxHome`](#firefoxhome)** | Customize the Firefox Home page.
  59 | **[`HardwareAcceleration`](#hardwareacceleration)** | Control hardware acceleration.
  60 | **[`Handlers`](#handlers)** | Configure default application handlers.
  61 | **[`Homepage`](#homepage)** | Configure the default homepage and how Firefox starts.
  62 | **[`InstallAddonsPermission`](#installaddonspermission)** | Configure the default extension install policy as well as origins for extension installs are allowed.
  63 | **[`LegacyProfiles`](#legacyprofiles)** | Disable the feature enforcing a separate profile for each installation.
  64 | **[`LocalFileLinks`](#localfilelinks)** | Enable linking to local files by origin.
  65 | **[`PrimaryPassword`](#primarypassword)** | Require or prevent using a primary (formerly master) password.
  66 | **[`NetworkPrediction`](#networkprediction)** | Enable or disable network prediction (DNS prefetching).
  67 | **[`NewTabPage`](#newtabpage)** | Enable or disable the New Tab page.
  68 | **[`NoDefaultBookmarks`](#nodefaultbookmarks)** | Disable the creation of default bookmarks.
  69 | **[`OfferToSaveLogins`](#offertosavelogins)** | Control whether or not Firefox offers to save passwords.
  70 | **[`OfferToSaveLoginsDefault`](#offertosaveloginsdefault)** | Set the default value for whether or not Firefox offers to save passwords.
  71 | **[`OverrideFirstRunPage`](#overridefirstrunpage)** | Override the first run page.
  72 | **[`OverridePostUpdatePage`](#overridepostupdatepage)** | Override the upgrade page.
  73 | **[`PasswordManagerEnabled`](#passwordmanagerenabled)** | Remove (some) access to the password manager.
  74 | **[`PDFjs`](#pdfjs)** | Disable or configure PDF.js, the built-in PDF viewer.
  75 | **[`Permissions`](#permissions)** | Set permissions associated with camera, microphone, location, and notifications.
  76 | **[`PictureInPicture`](#pictureinpicture)** | Enable or disable Picture-in-Picture.
  77 | **[`PopupBlocking`](#popupblocking)** | Configure the default pop-up window policy as well as origins for which pop-up windows are allowed.
  78 | **[`Preferences`](#preferences)** | Set and lock some preferences.
  79 | **[`PromptForDownloadLocation`](#promptfordownloadlocation)** | Ask where to save each file before downloading.
  80 | **[`Proxy`](#proxy)** | Configure proxy settings.
  81 | **[`RequestedLocales`](#requestedlocales)** | Set the the list of requested locales for the application in order of preference.
  82 | **[`SanitizeOnShutdown` (All)](#sanitizeonshutdown-all)** | Clear all data on shutdown.
  83 | **[`SanitizeOnShutdown` (Selective)](#sanitizeonshutdown-selective)** | Clear data on shutdown.
  84 | **[`SearchBar`](#searchbar)** | Set whether or not search bar is displayed.
  85 | **[`SearchEngines`](#searchengines-this-policy-is-only-available-on-the-esr)** |
  86 | **[`SearchEngines -> Default`](#searchengines--default)** | Set the default search engine.
  87 | **[`SearchEngines -> PreventInstalls`](#searchengines--preventinstalls)** | Prevent installing search engines from webpages.
  88 | **[`SearchEngines -> Remove`](#searchengines--remove)** | Hide built-in search engines.
  89 | **[`SearchEngines -> Add`](#searchengines--add)** | Add new search engines.
  90 | **[`SearchSuggestEnabled`](#searchsuggestenabled)** | Enable search suggestions.
  91 | **[`SecurityDevices`](#securitydevices)** | Install PKCS #11 modules.
  92 | **[`SSLVersionMax`](#sslversionmax)** | Set and lock the maximum version of TLS.
  93 | **[`SSLVersionMin`](#sslversionmin)** | Set and lock the minimum version of TLS.
  94 | **[`SupportMenu`](#supportmenu)** | Add a menuitem to the help menu for specifying support information.
  95 | **[`UserMessaging`](#usermessaging)** | Don't show certain messages to the user.
  96 | **[`WebsiteFilter`](#websitefilter)** | Block websites from being visited.
  97
  98 ### AppAutoUpdate
  99
 100 Enable or disable **automatic** application update.
 101
 102 If set to true, application updates are installed without user approval.
 103
 104 If set to false, application updates are downloaded but the user can choose when to install the update.
 105
 106 If you have disabled updates via DisableAppUpdate, this policy has no effect.
 107
 108 **Compatibility:** Firefox 75, Firefox ESR 68.7\
 109 **CCK2 Equivalent:** N/A\
 110 **Preferences Affected:** app.update.auto
 111
 112 #### Windows (GPO)
 113 ```
 114 Software\Policies\Mozilla\Firefox\AppAutoUpdate = 0x1 | 0x0
 115 ```
 116 #### Windows (Intune)
 117 OMA-URI:
 118 ```
 119 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AppAutoUpdate
 120 ```
 121 Value (string):
 122 ```
 123 <enabled/> or <disabled/>
 124 ```
 125 #### macOS
 126 ```
 127 <dict>
 128   <key>AppAutoUpdate</key>
 129   <true/> | <false/>
 130 </dict>
 131 ```
 132 #### policies.json
 133 ```
 134 {
 135   "policies": {
 136     "AppAutoUpdate": true | false
 137   }
 138 }
 139 ```
 140 ### AppUpdateURL
 141
 142 Change the URL for application update.
 143
 144 **Compatibility:** Firefox 62, Firefox ESR 60.2\
 145 **CCK2 Equivalent:** N/A\
 146 **Preferences Affected:** `app.update.url`
 147
 148 #### Windows (GPO)
 149 ```
 150 Software\Policies\Mozilla\Firefox\AppUpdateURL = "https://yoursite.com"
 151 ```
 152 #### Windows (Intune)
 153 OMA-URI:
 154 ```
 155 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AppUpdateURL
 156 ```
 157 Value (string):
 158 ```
 159 <enabled/>
 160 <data id="AppUpdateURL" value="https://yoursite.com"/>
 161 ```
 162 #### macOS
 163 ```
 164 <dict>
 165   <key>AppUpdateURL</key>
 166   <string>https://yoursite.com</string>
 167 </dict>
 168 ```
 169 #### policies.json
 170 ```
 171 {
 172   "policies": {
 173     "AppUpdateURL": "https://yoursite.com"
 174   }
 175 }
 176 ```
 177 ### Authentication
 178
 179 Configure sites that support integrated authentication.
 180
 181 See https://developer.mozilla.org/en-US/docs/Mozilla/Integrated_authentication for more information.
 182
 183 `PrivateBrowsing` enables integrated authentication in prviate browsing.
 184
 185 **Compatibility:** Firefox 60, Firefox ESR 60 (AllowNonFQDN added in 62/60.2, AllowProxies added in 70/68.2, Locked added in 71/68.3, PrivateBrowsing added in 77/68.9)\
 186 **CCK2 Equivalent:** N/A\
 187 **Preferences Affected:** `network.negotiate-auth.trusted-uris`,`network.negotiate-auth.delegation-uris`,`network.automatic-ntlm-auth.trusted-uris`,`network.automatic-ntlm-auth.allow-non-fqdn`,`network.negotiate-auth.allow-non-fqdn`,`network.automatic-ntlm-auth.allow-proxies`,`network.negotiate-auth.allow-proxies`,`network.auth.private-browsing-sso`
 188
 189 #### Windows (GPO)
 190 ```
 191 Software\Policies\Mozilla\Firefox\Authentication\SPNEGO\1 = "mydomain.com"
 192 Software\Policies\Mozilla\Firefox\Authentication\SPNEGO\2 = "https://myotherdomain.com"
 193 Software\Policies\Mozilla\Firefox\Authentication\Delegated\1 = "mydomain.com"
 194 Software\Policies\Mozilla\Firefox\Authentication\Delegated\2 = "https://myotherdomain.com"
 195 Software\Policies\Mozilla\Firefox\Authentication\NTLM\1 = "mydomain.com"
 196 Software\Policies\Mozilla\Firefox\Authentication\NTLM\2 = "https://myotherdomain.com"
 197 Software\Policies\Mozilla\Firefox\Authentication\AllowNonFQDN\SPNEGO = 0x1 | 0x0
 198 Software\Policies\Mozilla\Firefox\Authentication\AllowNonFQDN\NTLM = 0x1 | 0x0
 199 Software\Policies\Mozilla\Firefox\Authentication\AllowProxies\SPNEGO = 0x1 | 0x0
 200 Software\Policies\Mozilla\Firefox\Authentication\AllowProxies\NTLM = 0x1 | 0x0
 201 Software\Policies\Mozilla\Firefox\Authentication\Locked = 0x1 | 0x0
 202 Software\Policies\Mozilla\Firefox\Authentication\PrivateBrowsing = 0x1 | 0x0
 203 ```
 204 #### Windows (Intune)
 205 OMA-URI:
 206 ```
 207 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_SPNEGO
 208 ```
 209 Value (string):
 210 ```
 211 <enabled/>
 212 <data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
 213 ```
 214 OMA-URI:
 215 ```
 216 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_Delegated
 217 ```
 218 Value (string):
 219 ```
 220 <enabled/>
 221 <data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
 222 ```
 223 OMA-URI:
 224 ```
 225 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_NTLM
 226 ```
 227 Value (string):
 228 ```
 229 <enabled/>
 230 <data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
 231 ```
 232 OMA-URI:
 233 ```
 234 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_AllowNonFQDN
 235 ```
 236 Value (string):
 237 ```
 238 <enabled/>
 239 <data id="Authentication_AllowNonFQDN_NTLM" value="true | false"/>
 240 <data id="Authentication_AllowNonFQDN_SPNEGO" value="true | false"/>
 241 ```
 242 OMA-URI:
 243 ```
 244 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_Locked
 245 ```
 246 Value (string):
 247 ```
 248 <enabled/> or <disabled/>
 249 ```
 250 OMA-URI:
 251 ```
 252 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_PrivateBrowsing
 253 ```
 254 Value (string):
 255 ```
 256 <enabled/> or <disabled/>
 257 ```
 258 #### macOS
 259 ```
 260 <dict>
 261   <key>Authentication</key>
 262   <dict>
 263     <key>SPNEGO</key>
 264     <array>
 265       <string>mydomain.com</string>
 266       <string>https://myotherdomain.com</string>
 267     </array>
 268     <key>Delegated</key>
 269     <array>
 270       <string>mydomain.com</string>
 271       <string>https://myotherdomain.com</string>
 272     </array>
 273     <key>NTLM</key>
 274     <array>
 275       <string>mydomain.com</string>
 276       <string>https://myotherdomain.com</string>
 277     </array>
 278     <key>AllowNonFQDN</key>
 279       <dict>
 280       <key>SPNEGO</key>
 281       <true/> | <false/>
 282       <key>NTLM</key>
 283       <true/> | <false/>
 284     </dict>
 285     <key>AllowProxies</key>
 286       <dict>
 287       <key>SPNEGO</key>
 288       <true/> | <false/>
 289       <key>NTLM</key>
 290       <true/> | <false/>
 291     </dict>
 292     <key>Locked</key>
 293     <true/> | <false/>
 294     <key>PrivateBrowsing</key>
 295     <true/> | <false/>
 296   </dict>
 297 </dict>
 298 ```
 299 #### policies.json
 300 ```
 301 {
 302   "policies": {
 303     "Authentication": {
 304       "SPNEGO": ["mydomain.com", "https://myotherdomain.com"],
 305       "Delegated": ["mydomain.com", "https://myotherdomain.com"],
 306       "NTLM": ["mydomain.com", "https://myotherdomain.com"],
 307       "AllowNonFQDN": {
 308         "SPNEGO": true | false,
 309         "NTLM": true | false
 310       },
 311       "AllowProxies": {
 312         "SPNEGO": true | false,
 313         "NTLM": true | false
 314       },
 315       "Locked": true | false,
 316       "PrivateBrowsing": true | false
 317     }
 318   }
 319 }
 320 ```
 321 ### BlockAboutAddons
 322
 323 Block access to the Add-ons Manager (about:addons).
 324
 325 **Compatibility:** Firefox 60, Firefox ESR 60\
 326 **CCK2 Equivalent:** `disableAddonsManager`\
 327 **Preferences Affected:** N/A
 328
 329 #### Windows (GPO)
 330 ```
 331 Software\Policies\Mozilla\Firefox\BlockAboutAddons = 0x1 | 0x0
 332 ```
 333 #### Windows (Intune)
 334 OMA-URI:
 335 ```
 336 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutAddons
 337 ```
 338 Value (string):
 339 ```
 340 <enabled/> or <disabled/>
 341 ```
 342 #### macOS
 343 ```
 344 <dict>
 345   <key>BlockAboutAddons</key>
 346   <true/> | <false/>
 347 </dict>
 348 ```
 349 #### policies.json
 350 ```
 351 {
 352   "policies": {
 353     "BlockAboutAddons": true | false
 354   }
 355 }
 356 ```
 357 ### BlockAboutConfig
 358
 359 Block access to about:config.
 360
 361 **Compatibility:** Firefox 60, Firefox ESR 60\
 362 **CCK2 Equivalent:** `disableAboutConfig`\
 363 **Preferences Affected:** N/A
 364
 365 #### Windows (GPO)
 366 ```
 367 Software\Policies\Mozilla\Firefox\BlockAboutConfig = 0x1 | 0x0
 368 ```
 369 #### Windows (Intune)
 370 OMA-URI:
 371 ```
 372 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutConfig
 373 ```
 374 Value (string):
 375 ```
 376 <enabled/> or <disabled/>
 377 ```
 378 #### macOS
 379 ```
 380 <dict>
 381   <key>BlockAboutConfig</key>
 382   <true/> | <false/>
 383 </dict>
 384 ```
 385 #### policies.json
 386 ```
 387 {
 388   "policies": {
 389     "BlockAboutConfig": true | false
 390   }
 391 }
 392 ```
 393 ### BlockAboutProfiles
 394
 395 Block access to About Profiles (about:profiles).
 396
 397 **Compatibility:** Firefox 60, Firefox ESR 60\
 398 **CCK2 Equivalent:** `disableAboutProfiles`\
 399 **Preferences Affected:** N/A
 400
 401 #### Windows (GPO)
 402 ```
 403 Software\Policies\Mozilla\Firefox\BlockAboutProfiles = 0x1 | 0x0
 404 ```
 405 #### Windows (Intune)
 406 OMA-URI:
 407 ```
 408 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutProfiles
 409 ```
 410 Value (string):
 411 ```
 412 <enabled/> or <disabled/>
 413 ```
 414 #### macOS
 415 ```
 416 <dict>
 417   <key>BlockAboutProfiles</key>
 418   <true/> | <false/>
 419 </dict>
 420 ```
 421 #### policies.json
 422 ```
 423 {
 424   "policies": {
 425     "BlockAboutProfiles": true | false
 426   }
 427 }
 428 ```
 429 ### BlockAboutSupport
 430
 431 Block access to Troubleshooting Information (about:support).
 432
 433 **Compatibility:** Firefox 60, Firefox ESR 60\
 434 **CCK2 Equivalent:** `disableAboutSupport`\
 435 **Preferences Affected:** N/A
 436
 437 #### Windows (GPO)
 438 ```
 439 Software\Policies\Mozilla\Firefox\BlockAboutSupport = 0x1 | 0x0
 440 ```
 441 #### Windows (Intune)
 442 OMA-URI:
 443 ```
 444 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutSupport
 445 ```
 446 Value (string):
 447 ```
 448 <enabled/> or <disabled/>
 449 ```
 450 #### macOS
 451 ```
 452 <dict>
 453   <key>BlockAboutSupport</key>
 454   <true/> | <false/>
 455 </dict>
 456 ```
 457 #### policies.json
 458 ```
 459 {
 460   "policies": {
 461     "BlockAboutSupport": true | false
 462   }
 463 }
 464 ```
 465 ### Bookmarks
 466
 467 Add bookmarks in either the bookmarks toolbar or menu. Only `Title` and `URL` are required. If `Placement` is not specified, the bookmark will be placed on the toolbar. If `Folder` is specified, it is automatically created and bookmarks with the same folder name are grouped together.
 468
 469 **Compatibility:** Firefox 60, Firefox ESR 60\
 470 **CCK2 Equivalent:** `bookmarks.toolbar`,`bookmarks.menu`\
 471 **Preferences Affected:** N/A
 472
 473 #### Windows (GPO)
 474 ```
 475 Software\Policies\Mozilla\Firefox\Bookmarks\1\Title = "Example"
 476 Software\Policies\Mozilla\Firefox\Bookmarks\1\URL = "https://example.com"
 477 Software\Policies\Mozilla\Firefox\Bookmarks\1\Favicon = "https://example.com/favicon.ico"
 478 Software\Policies\Mozilla\Firefox\Bookmarks\1\Placement = "toolbar" | "menu"
 479 Software\Policies\Mozilla\Firefox\Bookmarks\1\Folder = "FolderName"
 480 ```
 481 #### Windows (Intune)
 482 OMA-URI:
 483 ```
 484 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Bookmarks/Bookmark01
 485 ```
 486 Value (string):
 487 ```
 488 <enabled/>
 489 <data id="BookmarkTitle" value="Example"/>
 490 <data id="BookmarkURL" value="https://example.com"/>
 491 <data id="BookmarkFavicon" value="https://example.com/favicon.ico"/>
 492 <data id="BookmarkPlacement" value="toolbar | menu"/>
 493 <data id="BookmarkFolder" value="FolderName"/>
 494 ```
 495 #### macOS
 496 ```
 497 <dict>
 498   <key>Bookmarks</key>
 499   <array>
 500     <dict>
 501       <key>Title</key>
 502       <string>Example</string>
 503       <key>URL</key>
 504       <string>https://example.com</string>
 505       <key>Favicon</key>
 506       <string>https://example.com/favicon.ico</string>
 507       <key>Placement</key>
 508       <string>toolbar | menu</string>
 509       <key>Folder</key>
 510       <string>FolderName</string>
 511     </dict>
 512   </array>
 513 </dict>
 514 ```
 515 #### policies.json
 516 ```
 517 {
 518   "policies": {
 519     "Bookmarks": [
 520       {
 521         "Title": "Example",
 522         "URL": "https://example.com",
 523         "Favicon": "https://example.com/favicon.ico",
 524         "Placement": "toolbar" | "menu",
 525         "Folder": "FolderName"
 526       }
 527     ]
 528   }
 529 }
 530 ```
 531 ### CaptivePortal
 532 Enable or disable the detection of captive portals.
 533
 534 **Compatibility:** Firefox 67, Firefox ESR 60.7\
 535 **CCK2 Equivalent:** N/A\
 536 **Preferences Affected:** `network.captive-portal-service.enabled`
 537
 538 #### Windows (GPO)
 539 ```
 540 Software\Policies\Mozilla\Firefox\CaptivePortal = 0x1 | 0x0
 541 ```
 542 #### Windows (Intune)
 543 OMA-URI:
 544 ```
 545 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/CaptivePortal
 546 ```
 547 Value (string):
 548 ```
 549 <enabled/> or <disabled/>
 550 ```
 551 #### macOS
 552 ```
 553 <dict>
 554   <key>CaptivePortal</key>
 555   <true/> | <false/>
 556 </dict>
 557 ```
 558 #### policies.json
 559 ```
 560 {
 561   "policies": {
 562     "CaptivePortal": true | false
 563   }
 564 }
 565 ```
 566 ### Certificates
 567
 568 ### Certificates | ImportEnterpriseRoots
 569
 570 Trust certificates that have been added to the operating system certificate store by a user or administrator.
 571
 572 Note: This policy only works on Windows and macOS. For Linux discussion, see [bug 1600509](https://bugzilla.mozilla.org/show_bug.cgi?id=1600509).
 573
 574 See https://support.mozilla.org/kb/setting-certificate-authorities-firefox for more detail.
 575
 576 **Compatibility:** Firefox 60, Firefox ESR 60 (macOS support in Firefox 63, Firefox ESR 68)\
 577 **CCK2 Equivalent:** N/A\
 578 **Preferences Affected:** `security.enterprise_roots.enabled`
 579
 580 #### Windows (GPO)
 581 ```
 582 Software\Policies\Mozilla\Firefox\Certificates\ImportEnterpriseRoots = 0x1 | 0x0
 583 ```
 584 #### Windows (Intune)
 585 OMA-URI:
 586 ```
 587 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Certificates/Certificates_ImportEnterpriseRoots
 588 ```
 589 Value (string):
 590 ```
 591 <enabled/> or <disabled/>
 592 ```
 593 #### macOS
 594 ```
 595 <dict>
 596   <key>Certificates</key>
 597   <dict>
 598     <key>ImportEnterpriseRoots</key>
 599     <true/> | <false/>
 600   </dict>
 601 </dict>
 602 ```
 603 #### policies.json
 604 ```
 605 {
 606   "policies": {
 607     "Certificates": {
 608       "ImportEnterpriseRoots": true | false
 609     }
 610   }
 611 }
 612 ```
 613 ### Certificates | Install
 614
 615 Install certificates into the Firefox certificate store. If only a filename is specified, Firefox searches for the file in the following locations:
 616
 617 - Windows
 618   - %USERPROFILE%\AppData\Local\Mozilla\Certificates
 619   - %USERPROFILE%\AppData\Roaming\Mozilla\Certificates
 620 - macOS
 621   - /Library/Application Support/Mozilla/Certificates
 622   - ~/Library/Application Support/Mozilla/Certificates
 623 - Linux
 624   - /usr/lib/mozilla/certificates
 625   - /usr/lib64/mozilla/certificates
 626   - ~/.mozilla/certificates
 627
 628 Starting with Firefox 65, Firefox 60.5 ESR, a fully qualified path can be used, including UNC paths. You should use the native path style for your operating system. We do not support using %USERPROFILE% or other environment variables on Windows.
 629
 630 If you are specifying the path in the policies.json file on Windows, you need to escape your backslashes (`\\`) which means that for UNC paths, you need to escape both (`\\\\`). If you use group policy, you only need one backslash.
 631
 632 Certificates are installed using the trust string `CT,CT,`.
 633
 634 Binary (DER) and ASCII (PEM) certificates are both supported.
 635
 636 **Compatibility:** Firefox 64, Firefox ESR 64\
 637 **CCK2 Equivalent:** `certs.ca`\
 638 **Preferences Affected:** N/A
 639
 640 #### Windows (GPO)
 641 ```
 642 Software\Policies\Mozilla\Firefox\Certificates\Install\1 = "cert1.der"
 643 Software\Policies\Mozilla\Firefox\Certificates\Install\2 = "C:\Users\username\cert2.pem"
 644 ```
 645 #### Windows (Intune)
 646 OMA-URI:
 647 ```
 648 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Certificates/Certificates_Install
 649 ```
 650 Value (string):
 651 ```
 652 <enabled/>
 653 <data id="Certificates_Install" value="1&#xF000;cert1.der&#xF000;2&#xF000;C:\Users\username\cert2.pem"/>
 654 ```
 655 #### macOS
 656 ```
 657 <dict>
 658   <key>Certificates</key>
 659   <dict>
 660     <key>Install</key>
 661     <array>
 662       <string>cert1.der</string>
 663       <string>/Users/username/cert2.pem</string>
 664     </array>
 665   </dict>
 666 </dict>
 667 ```
 668 #### policies.json
 669 ```
 670 {
 671   "policies": {
 672     "Certificates": {
 673       "Install": ["cert1.der", "/home/username/cert2.pem"]
 674     }
 675   }
 676 }
 677 ```
 678 ### Cookies
 679 Configure cookie preferences.
 680
 681 `Allow` is a list of origins (not domains) where cookies are always allowed. You must include http or https.
 682
 683 `AllowSession` is a list of origins (not domains) where cookies are only allowed for the current session. You must include http or https.
 684
 685 `Block` is a list of origins (not domains) where cookies are always blocked. You must include http or https.
 686
 687 `Default` determines whether cookies are accepted at all.
 688
 689 `AcceptThirdParty` determines how third-party cookies are handled.
 690
 691 `ExpireAtSessionEnd` determines when cookies expire.
 692
 693 `RejectTracker` only rejects cookies for trackers.
 694
 695 `Locked` prevents the user from changing cookie preferences.
 696
 697 **Compatibility:** Firefox 60, Firefox ESR 60 (RejectTracker added in Firefox 63, AllowSession added in Firefox 79/78.1)\
 698 **CCK2 Equivalent:** N/A\
 699 **Preferences Affected:** `network.cookie.cookieBehavior`,`network.cookie.lifetimePolicy`
 700
 701 #### Windows (GPO)
 702 ```
 703 Software\Policies\Mozilla\Firefox\Cookies\Allow\1 = "https://example.com"
 704 Software\Policies\Mozilla\Firefox\Cookies\AllowSession\1 = "https://example.edu"
 705 Software\Policies\Mozilla\Firefox\Cookies\Block\1 = "https://example.org"
 706 Software\Policies\Mozilla\Firefox\Cookies\Default = 0x1 | 0x0
 707 Software\Policies\Mozilla\Firefox\Cookies\AcceptThirdParty = "always" | "never" | "from-visited"
 708 Software\Policies\Mozilla\Firefox\Cookies\ExpireAtSessionEnd = 0x1 | 0x0
 709 Software\Policies\Mozilla\Firefox\Cookies\RejectTracker = 0x1 | 0x0
 710 Software\Policies\Mozilla\Firefox\Cookies\Locked = 0x1 | 0x0
 711 ```
 712 #### Windows (Intune)
 713 OMA-URI:
 714 ```
 715 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Allow
 716 ```
 717 Value (string):
 718 ```
 719 <enabled/>
 720 <data id="Cookies_Allow" value="1&#xF000;https://example.com"/>
 721 ```
 722 OMA-URI:
 723 ```
 724 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_AllowSession
 725 ```
 726 Value (string):
 727 ```
 728 <enabled/>
 729 <data id="Cookies_Allow" value="1&#xF000;https://example.edu"/>
 730 ```
 731 OMA-URI:
 732 ```
 733 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Block
 734 ```
 735 Value (string):
 736 ```
 737 <enabled/>
 738 <data id="Cookies_Block" value="1&#xF000;https://example.org"/>
 739 ```
 740 OMA-URI:
 741 ```
 742 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Default
 743 ```
 744 Value (string):
 745 ```
 746 <enabled/> or <disabled/>
 747 ```
 748 OMA-URI:
 749 ```
 750 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_AcceptThirdParty
 751 ```
 752 Value (string):
 753 ```
 754 <enabled/>
 755 <data id="Cookies_AcceptThirdParty" value="always | never | from-visited"/>
 756 ```
 757 OMA-URI:
 758 ```
 759 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_ExpireAtSessionEnd
 760 ```
 761 Value (string):
 762 ```
 763 <enabled/> or <disabled/>
 764 ```
 765 OMA-URI:
 766 ```
 767 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_RejectTracker
 768 ```
 769 Value (string):
 770 ```
 771 <enabled/> or <disabled/>
 772 ```
 773 OMA-URI:
 774 ```
 775 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Locked
 776 ```
 777 Value (string):
 778 ```
 779 <enabled/> or <disabled/>
 780 ```
 781 #### macOS
 782 ```
 783 <dict>
 784   <key>Cookies</key>
 785   <dict>
 786     <key>Allow</key>
 787     <array>
 788       <string>http://example.com</string>
 789     </array>
 790     <key>AllowSession</key>
 791     <array>
 792       <string>http://example.edu</string>
 793     </array>
 794     <key>Block</key>
 795     <array>
 796       <string>http://example.org</string>
 797     </array>
 798     <key>Default</key>
 799     <true/> | <false/>
 800     <key>AcceptThirdParty</key>
 801     <string>always | never | from-visited</string>
 802     <key>ExpireAtSessionEnd</key>
 803     <true/> | <false/>
 804     <key>RejectTracker</key>
 805     <true/> | <false/>
 806     <key>Locked</key>
 807     <true/> | <false/>
 808   </dict>
 809 </dict>
 810 ```
 811 #### policies.json
 812 ```
 813 {
 814   "policies": {
 815     "Cookies": {
 816       "Allow": ["http://example.org/"],
 817       "AllowSession": ["http://example.edu/"],
 818       "Block": ["http://example.edu/"],
 819       "Default": true | false,
 820       "AcceptThirdParty": "always" | "never" | "from-visited",
 821       "ExpireAtSessionEnd": true | false,
 822       "RejectTracker": true | false,
 823       "Locked": true | false
 824     }
 825   }
 826 }
 827 ```
 828 ### DisableSetDesktopBackground
 829 Remove the "Set As Desktop Background..." menuitem when right clicking on an image.
 830
 831 **Compatibility:** Firefox 60, Firefox ESR 60\
 832 **CCK2 Equivalent:** `removeSetDesktopBackground`\
 833 **Preferences Affected:** N/A
 834
 835 #### Windows (GPO)
 836 ```
 837 Software\Policies\Mozilla\Firefox\DisableSetDesktopBackground = 0x1 | 0x0
 838 ```
 839 #### Windows (Intune)
 840 OMA-URI:
 841 ```
 842 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSetDesktopBackground
 843 ```
 844 Value (string):
 845 ```
 846 <enabled/> or <disabled/>
 847 ```
 848 #### macOS
 849 ```
 850 <dict>
 851   <key>DisableSetDesktopBackground</key>
 852   <true/> | <false/>
 853 </dict>
 854 ```
 855 #### policies.json
 856 ```
 857 {
 858   "policies": {
 859     "DisableSetDesktopBackground": true | false
 860   }
 861 }
 862 ```
 863 ### DisableMasterPasswordCreation
 864 Remove the master password functionality.
 865
 866 If this value is true, it works the same as setting [`PrimaryPassword`](#primarypassword) to false and removes the primary password functionality.
 867
 868 If both DisableMasterPasswordCreation and PrimaryPassword are used, DisableMasterPasswordCreation takes precedent.
 869
 870 **Compatibility:** Firefox 60, Firefox ESR 60\
 871 **CCK2 Equivalent:** `noMasterPassword`\
 872 **Preferences Affected:** N/A
 873
 874 #### Windows (GPO)
 875 ```
 876 Software\Policies\Mozilla\Firefox\DisableMasterPasswordCreation = 0x1 | 0x0
 877 ```
 878 #### Windows (Intune)
 879 OMA-URI:
 880 ```
 881 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableMasterPasswordCreation
 882 ```
 883 Value (string):
 884 ```
 885 <enabled/> or <disabled/>
 886 ```
 887 #### macOS
 888 ```
 889 <dict>
 890   <key>DisableMasterPasswordCreation</key>
 891   <true/> | <false/>
 892 </dict>
 893 ```
 894 #### policies.json
 895 ```
 896 {
 897   "policies": {
 898     "DisableMasterPasswordCreation": true | false
 899   }
 900 }
 901 ```
 902 ### DisableAppUpdate
 903 Turn off application updates.
 904
 905 **Compatibility:** Firefox 60, Firefox ESR 60\
 906 **CCK2 Equivalent:** `disableFirefoxUpdates`\
 907 **Preferences Affected:** N/A
 908
 909 #### Windows (GPO)
 910 ```
 911 Software\Policies\Mozilla\Firefox\DisableAppUpdate = 0x1 | 0x0
 912 ```
 913 #### Windows (Intune)
 914 OMA-URI:
 915 ```
 916 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableAppUpdate
 917 ```
 918 Value (string):
 919 ```
 920 <enabled/> or <disabled/>
 921 ```
 922 #### macOS
 923 ```
 924 <dict>
 925   <key>DisableAppUpdate</key>
 926   <true/> | <false/>
 927 </dict>
 928 ```
 929 #### policies.json
 930 ```
 931 {
 932   "policies": {
 933     "DisableAppUpdate": true | false
 934   }
 935 }
 936 ```
 937 ### DisableBuiltinPDFViewer
 938 Disable the built in PDF viewer. PDF files are downloaded and sent externally.
 939
 940 **Compatibility:** Firefox 60, Firefox ESR 60\
 941 **CCK2 Equivalent:** `disablePDFjs`\
 942 **Preferences Affected:** `pdfjs.disabled`
 943
 944 #### Windows (GPO)
 945 ```
 946 Software\Policies\Mozilla\Firefox\DisableBuiltinPDFViewer = 0x1 | 0x0
 947 ```
 948 #### Windows (Intune)
 949 OMA-URI:
 950 ```
 951 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableBuiltinPDFViewer
 952 ```
 953 Value (string):
 954 ```
 955 <enabled/> or <disabled/>
 956 ```
 957 #### macOS
 958 ```
 959 <dict>
 960   <key>DisableBuiltinPDFViewer</key>
 961   <true/> | <false/>
 962 </dict>
 963 ```
 964 #### policies.json
 965 ```
 966 {
 967   "policies": {
 968     "DisableBuiltinPDFViewer": true | false
 969   }
 970 }
 971 ```
 972 ### DisabledCiphers
 973 Disable specific cryptographic ciphers.
 974
 975 ---
 976 **Note:**
 977
 978 This policy was updated in Firefox 78 to allow enabling ciphers as well. Setting the value to true disables the cipher, setting the value to false enables the cipher. Previously setting the value to true or false disabled the cipher.
 979
 980 ---
 981 **Compatibility:** Firefox 76, Firefox ESR 68.8 (TLS_RSA_WITH_AES_128_GCM_SHA256 and TLS_RSA_WITH_AES_256_GCM_SHA384 were added in Firefox 78)\
 982 **CCK2 Equivalent:** N/A\
 983 **Preferences Affected:** N/A
 984
 985 #### Windows (GPO)
 986 ```
 987 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_DHE_RSA_WITH_AES_128_CBC_SHA = 0x1 | 0x0
 988 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_DHE_RSA_WITH_AES_256_CBC_SHA = 0x1 | 0x0
 989 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA = 0x1 | 0x0
 990 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA = 0x1 | 0x0
 991 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 = 0x1 | 0x0
 992 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 = 0x1 | 0x0
 993 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_RSA_WITH_AES_128_CBC_SHA = 0x1 | 0x0
 994 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_RSA_WITH_AES_256_CBC_SHA = 0x1 | 0x0
 995 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_RSA_WITH_3DES_EDE_CBC_SHA = 0x1 | 0x0
 996 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_RSA_WITH_AES_128_GCM_SHA256 = 0x1 | 0x0
 997 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_RSA_WITH_AES_256_GCM_SHA384 = 0x1 | 0x0
 998 ```
 999 #### Windows (Intune)
1000 OMA-URI:
1001 ```
1002 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_DHE_RSA_WITH_AES_128_CBC_SHA
1003 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_DHE_RSA_WITH_AES_256_CBC_SHA
1004 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
1005 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
1006 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
1007 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
1008 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_RSA_WITH_AES_128_CBC_SHA
1009 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_RSA_WITH_AES_256_CBC_SHA
1010 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_RSA_WITH_3DES_EDE_CBC_SHA
1011 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_RSA_WITH_AES_128_GCM_SHA256
1012 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_RSA_WITH_AES_256_GCM_SHA384
1013 ```
1014 Value (string):
1015 ```
1016 <enabled/> or <disabled/>
1017 ```
1018 #### macOS
1019 ```
1020 <dict>
1021   <key>DisabledCiphers</key>
1022     <dict>
1023       <key>TLS_DHE_RSA_WITH_AES_128_CBC_SHA</key>
1024       <true/> | <false/>
1025       <key>TLS_DHE_RSA_WITH_AES_256_CBC_SHA</key>
1026       <true/> | <false/>
1027       <key>TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA</key>
1028       <true/> | <false/>
1029       <key>TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA</key>
1030       <true/> | <false/>
1031       <key>TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256</key>
1032       <true/> | <false/>
1033       <key>TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256</key>
1034       <true/> | <false/>
1035       <key>TLS_RSA_WITH_AES_128_CBC_SHA</key>
1036       <true/> | <false/>
1037       <key>TLS_RSA_WITH_AES_256_CBC_SHA</key>
1038       <true/> | <false/>
1039       <key>TLS_RSA_WITH_3DES_EDE_CBC_SHA</key>
1040       <true/> | <false/>
1041       <key>TLS_RSA_WITH_AES_128_GCM_SHA256</key>
1042       <true/> | <false/>
1043       <key>TLS_RSA_WITH_AES_256_GCM_SHA384</key>
1044       <true/> | <false/>
1045     </dict>
1046 </dict>
1047 ```
1048 #### policies.json
1049 ```
1050 {
1051   "policies": {
1052     "DisabledCiphers" {
1053       "TLS_DHE_RSA_WITH_AES_128_CBC_SHA": true | false,
1054       "TLS_DHE_RSA_WITH_AES_256_CBC_SHA": true | false,
1055       "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA": true | false,
1056       "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA": true | false,
1057       "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256": true | false,
1058       "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256": true | false,
1059       "TLS_RSA_WITH_AES_128_CBC_SHA": true | false,
1060       "TLS_RSA_WITH_AES_256_CBC_SHA": true | false,
1061       "TLS_RSA_WITH_3DES_EDE_CBC_SHA": true | false
1062       "TLS_RSA_WITH_AES_128_GCM_SHA256": true | false
1063       "TLS_RSA_WITH_AES_256_GCM_SHA384": true | false
1064     }
1065   }
1066 }
1067 ```
1068 ### DisableDefaultBrowserAgent
1069 Prevent the default browser agent from taking any actions. Only applicable to Windows; other platforms don’t have the agent.
1070
1071 **Compatibility:** Firefox 75, Firefox ESR 68.7 (Windows only)\
1072 **CCK2 Equivalent:** N/A\
1073 **Preferences Affected:** N/A
1074
1075 #### Windows (GPO)
1076 ```
1077 Software\Policies\Mozilla\Firefox\DisableDefaultBrowserAgent = 0x1 | 0x0
1078 ```
1079 #### Windows (Intune)
1080 OMA-URI:
1081 ```
1082 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableDefaultBrowserAgent
1083 ```
1084 Value (string):
1085 ```
1086 <enabled/> or <disabled/>
1087 ```
1088 #### policies.json
1089 ```
1090 {
1091   "policies": {
1092     "DisableDefaultBrowserAgent": true | false
1093   }
1094 }
1095 ```
1096 ### DisableDeveloperTools
1097 Remove access to all developer tools.
1098
1099 **Compatibility:** Firefox 60, Firefox ESR 60\
1100 **CCK2 Equivalent:** `removeDeveloperTools`\
1101 **Preferences Affected:** `devtools.policy.disabled`
1102
1103 #### Windows (GPO)
1104 ```
1105 Software\Policies\Mozilla\Firefox\DisableDeveloperTools = 0x1 | 0x0`
1106 ```
1107 #### Windows (Intune)
1108 OMA-URI:
1109 ```
1110 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableDeveloperTools
1111 ```
1112 Value (string):
1113 ```
1114 <enabled/> or <disabled/>
1115 ```
1116 #### macOS
1117 ```
1118 <dict>
1119   <key>DisableDeveloperTools</key>
1120   <true/> | <false/>
1121 </dict>
1122 ```
1123 #### policies.json
1124 ```
1125 {
1126   "policies": {
1127     "DisableDeveloperTools": true | false
1128   }
1129 }
1130 ```
1131 ### DisableFeedbackCommands
1132 Disable the menus for reporting sites (Submit Feedback, Report Deceptive Site).
1133
1134 **Compatibility:** Firefox 60, Firefox ESR 60\
1135 **CCK2 Equivalent:** N/A\
1136 **Preferences Affected:** N/A
1137
1138 #### Windows (GPO)
1139 ```
1140 Software\Policies\Mozilla\Firefox\DisableFeedbackCommands = 0x1 | 0x0
1141 ```
1142 #### Windows (Intune)
1143 OMA-URI:
1144 ```
1145 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFeedbackCommands
1146 ```
1147 Value (string):
1148 ```
1149 <enabled/> or <disabled/>
1150 ```
1151 #### macOS
1152 ```
1153 <dict>
1154   <key>DisableFeedbackCommands</key>
1155   <true/> | <false/>
1156 </dict>
1157 ```
1158 #### policies.json
1159 ```
1160 {
1161   "policies": {
1162     "DisableFeedbackCommands": true | false
1163   }
1164 }
1165 ```
1166 ### DisableFirefoxScreenshots
1167 Remove access to Firefox Screenshots.
1168
1169 **Compatibility:** Firefox 60, Firefox ESR 60\
1170 **CCK2 Equivalent:** N/A\
1171 **Preferences Affected:** `extensions.screenshots.disabled`
1172
1173 #### Windows (GPO)
1174 ```
1175 Software\Policies\Mozilla\Firefox\DisableFirefoxScreenshots = 0x1 | 0x0
1176 ```
1177 #### Windows (Intune)
1178 OMA-URI:
1179 ```
1180 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxScreenshots
1181 ```
1182 Value (string):
1183 ```
1184 <enabled/> or <disabled/>
1185 ```
1186 #### macOS
1187 ```
1188 <dict>
1189   <key>DisableFirefoxScreenshots</key>
1190   <true/> | <false/>
1191 </dict>
1192 ```
1193 #### policies.json
1194 ```
1195 {
1196   "policies": {
1197     "DisableFirefoxScreenshots": true | false
1198   }
1199 }
1200 ```
1201 ### DisableFirefoxAccounts
1202 Disable Firefox Accounts integration (Sync).
1203
1204 **Compatibility:** Firefox 60, Firefox ESR 60\
1205 **CCK2 Equivalent:** `disableSync`\
1206 **Preferences Affected:** `identity.fxaccounts.enabled`
1207
1208 #### Windows (GPO)
1209 ```
1210 Software\Policies\Mozilla\Firefox\DisableFirefoxAccounts = 0x1 | 0x0
1211 ```
1212 #### Windows (Intune)
1213 OMA-URI:
1214 ```
1215 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxAccounts
1216 ```
1217 Value (string):
1218 ```
1219 <enabled/> or <disabled/>
1220 ```
1221 #### macOS
1222 ```
1223 <dict>
1224   <key>DisableFirefoxAccounts</key>
1225   <true/> | <false/>
1226 </dict>
1227 ```
1228 #### policies.json
1229 ```
1230 {
1231   "policies": {
1232     "DisableFirefoxAccounts": true | false
1233   }
1234 }
1235 ```
1236 ### DisableFirefoxStudies
1237 Disable Firefox studies (Shield).
1238
1239 **Compatibility:** Firefox 60, Firefox ESR 60\
1240 **CCK2 Equivalent:** N/A\
1241 **Preferences Affected:** N/A
1242
1243 #### Windows (GPO)
1244 ```
1245 Software\Policies\Mozilla\Firefox\DisableFirefoxStudies = 0x1 | 0x0
1246 ```
1247 #### Windows (Intune)
1248 OMA-URI:
1249 ```
1250 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxStudies
1251 ```
1252 Value (string):
1253 ```
1254 <enabled/> or <disabled/>
1255 ```
1256 #### macOS
1257 ```
1258 <dict>
1259   <key>DisableFirefoxStudies</key>
1260   <true/> | <false/>
1261 </dict>
1262 ```
1263 #### policies.json
1264 ```
1265 {
1266   "policies": {
1267     "DisableFirefoxStudies": true | false
1268   }
1269 }
1270 ```
1271 ### DisableForgetButton
1272 Disable the "Forget" button.
1273
1274 **Compatibility:** Firefox 60, Firefox ESR 60\
1275 **CCK2 Equivalent:** `disableForget`\
1276 **Preferences Affected:** N/A
1277
1278 #### Windows (GPO)
1279 ```
1280 Software\Policies\Mozilla\Firefox\DisableForgetButton = 0x1 | 0x0
1281 ```
1282 #### Windows (Intune)
1283 OMA-URI:
1284 ```
1285 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableForgetButton
1286 ```
1287 Value (string):
1288 ```
1289 <enabled/> or <disabled/>
1290 ```
1291 #### macOS
1292 ```
1293 <dict>
1294   <key>DisableForgetButton</key>
1295   <true/> | <false/>
1296 </dict>
1297 ```
1298 #### policies.json
1299 ```
1300 {
1301   "policies": {
1302     "DisableForgetButton": true | false
1303   }
1304 }
1305 ```
1306 ### DisableFormHistory
1307 Turn off saving information on web forms and the search bar.
1308
1309 **Compatibility:** Firefox 60, Firefox ESR 60\
1310 **CCK2 Equivalent:** `disableFormFill`\
1311 **Preferences Affected:** ` browser.formfill.enable`
1312
1313 #### Windows (GPO)
1314 ```
1315 Software\Policies\Mozilla\Firefox\DisableFormHistory = 0x1 | 0x0
1316 ```
1317 #### Windows (Intune)
1318 OMA-URI:
1319 ```
1320 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFormHistory
1321 ```
1322 Value (string):
1323 ```
1324 <enabled/> or <disabled/>
1325 ```
1326 #### macOS
1327 ```
1328 <dict>
1329   <key>DisableFormHistory</key>
1330   <true/> | <false/>
1331 </dict>
1332 ```
1333 #### policies.json
1334 ```
1335 {
1336   "policies": {
1337     "DisableFormHistory": true | false
1338   }
1339 }
1340 ```
1341 ### DisablePasswordReveal
1342 Do not allow passwords to be shown in saved logins
1343
1344 **Compatibility:** Firefox 71, Firefox ESR 68.3\
1345 **CCK2 Equivalent:** N/A
1346 **Preferences Affected:** N/A
1347
1348 #### Windows (GPO)
1349 ```
1350 Software\Policies\Mozilla\Firefox\DisablePasswordReveal = 0x1 | 0x0
1351 ```
1352 #### Windows (Intune)
1353 OMA-URI:
1354 ```
1355 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePasswordReveal
1356 ```
1357 Value (string):
1358 ```
1359 <enabled/> or <disabled/>
1360 ```
1361 #### macOS
1362 ```
1363 <dict>
1364   <key>DisablePasswordReveal</key>
1365   <true/> | <false/>
1366 </dict>
1367 ```
1368 #### policies.json
1369 ```
1370 {
1371   "policies": {
1372     "DisablePasswordReveal": true | false
1373   }
1374 }
1375 ```
1376 ### DisablePocket
1377 Remove Pocket in the Firefox UI. It does not remove it from the new tab page.
1378
1379 **Compatibility:** Firefox 60, Firefox ESR 60\
1380 **CCK2 Equivalent:** `disablePocket`\
1381 **Preferences Affected:** `extensions.pocket.enabled`
1382
1383 #### Windows (GPO)
1384 ```
1385 Software\Policies\Mozilla\Firefox\DisablePocket = 0x1 | 0x0
1386 ```
1387 #### Windows (Intune)
1388 OMA-URI:
1389 ```
1390 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePocket
1391 ```
1392 Value (string):
1393 ```
1394 <enabled/> or <disabled/>
1395 ```
1396 #### macOS
1397 ```
1398 <dict>
1399   <key>DisablePocket</key>
1400   <true/> | <false/>
1401 </dict>
1402 ```
1403 #### policies.json
1404 ```
1405 {
1406   "policies": {
1407     "DisablePocket": true | false
1408   }
1409 }
1410 ```
1411 ### DisablePrivateBrowsing
1412 Remove access to private browsing.
1413
1414 **Compatibility:** Firefox 60, Firefox ESR 60\
1415 **CCK2 Equivalent:** `disablePrivateBrowsing`\
1416 **Preferences Affected:** N/A
1417
1418 #### Windows (GPO)
1419 ```
1420 Software\Policies\Mozilla\Firefox\DisablePrivateBrowsing = 0x1 | 0x0
1421 ```
1422 #### Windows (Intune)
1423 OMA-URI:
1424 ```
1425 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePrivateBrowsing
1426 ```
1427 Value (string):
1428 ```
1429 <enabled/> or <disabled/>
1430 ```
1431 #### macOS
1432 ```
1433 <dict>
1434   <key>DisablePrivateBrowsing</key>
1435   <true/> | <false/>
1436 </dict>
1437 ```
1438 #### policies.json
1439 ```
1440 {
1441   "policies": {
1442     "DisablePrivateBrowsing": true | false
1443   }
1444 }
1445 ```
1446 ### DisableProfileImport
1447 Disables the "Import data from another browser" option in the bookmarks window.
1448
1449 **Compatibility:** Firefox 60, Firefox ESR 60\
1450 **CCK2 Equivalent:** N/A\
1451 **Preferences Affected:** N/A
1452
1453 #### Windows (GPO)
1454 ```
1455 Software\Policies\Mozilla\Firefox\DisableProfileImport = 0x1 | 0x0
1456 ```
1457 #### Windows (Intune)
1458 OMA-URI:
1459 ```
1460 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableProfileImport
1461 ```
1462 Value (string):
1463 ```
1464 <enabled/> or <disabled/>
1465 ```
1466 #### macOS
1467 ```
1468 <dict>
1469   <key>DisableProfileImport</key>
1470   <true/> | <false/>
1471 </dict>
1472 ```
1473 #### policies.json
1474 ```
1475 {
1476   "policies": {
1477     "DisableProfileImport": true | false
1478   }
1479 }
1480 ```
1481 ### DisableProfileRefresh
1482 Disable the Refresh Firefox button on about:support and support.mozilla.org, as well as the prompt that displays offering to refresh Firefox when you haven't used it in a while.
1483
1484 **Compatibility:** Firefox 60, Firefox ESR 60\
1485 **CCK2 Equivalent:** `disableResetFirefox`\
1486 **Preferences Affected:** `browser.disableResetPrompt`
1487
1488 #### Windows (GPO)
1489 ```
1490 Software\Policies\Mozilla\Firefox\DisableProfileRefresh = 0x1 | 0x0
1491 ```
1492 #### Windows (Intune)
1493 OMA-URI:
1494 ```
1495 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableProfileRefresh
1496 ```
1497 Value (string):
1498 ```
1499 <enabled/> or <disabled/>
1500 ```
1501 #### macOS
1502 ```
1503 <dict>
1504   <key>DisableProfileRefresh</key>
1505   <true/> | <false/>
1506 </dict>
1507 ```
1508 #### policies.json
1509 ```
1510 {
1511   "policies": {
1512     "DisableProfileRefresh": true | false
1513   }
1514 }
1515 ```
1516 ### DisableSafeMode
1517 Disable safe mode within the browser.
1518
1519 On Windows, this disables safe mode via the command line as well.
1520
1521 **Compatibility:** Firefox 60, Firefox ESR 60 (Windows, macOS)\
1522 **CCK2 Equivalent:** `disableSafeMode`\
1523 **Preferences Affected:** N/A
1524
1525 #### Windows (GPO)
1526 ```
1527 Software\Policies\Mozilla\Firefox\DisableSafeMode = 0x1 | 0x0
1528 ```
1529 #### Windows (Intune)
1530 OMA-URI:
1531 ```
1532 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSafeMode
1533 ```
1534 Value (string):
1535 ```
1536 <enabled/> or <disabled/>
1537 ```
1538 #### macOS
1539 ```
1540 <dict>
1541   <key>DisableSafeMode</key>
1542   <true/> | <false/>
1543 </dict>
1544 ```
1545 #### policies.json
1546 ```
1547 {
1548   "policies": {
1549     "DisableSafeMode": true | false
1550   }
1551 }
1552 ```
1553 ### DisableSecurityBypass
1554 Prevent the user from bypassing security in certain cases.
1555
1556 `InvalidCertificate` prevents adding an exception when an invalid certificate is shown.
1557
1558 `SafeBrowsing` prevents selecting "ignore the risk" and visiting a harmful site anyway.
1559
1560 **Compatibility:** Firefox 60, Firefox ESR 60\
1561 **CCK2 Equivalent:** N/A\
1562 **Preferences Affected:** `security.certerror.hideAddException`,`browser.safebrowsing.allowOverride`
1563
1564 #### Windows (GPO)
1565 ```
1566 Software\Policies\Mozilla\Firefox\DisableSecurityBypass\InvalidCertificate = 0x1 | 0x0
1567 Software\Policies\Mozilla\Firefox\DisableSecurityBypass\SafeBrowsing = 0x1 | 0x0
1568 ```
1569 #### Windows (Intune)
1570 OMA-URI:
1571 ```
1572 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/P_DisableSecurityBypass_InvalidCertificate
1573 ```
1574 Value (string):
1575 ```
1576 <enabled/> or <disabled/>
1577 ```
1578 OMA-URI:
1579 ```
1580 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/P_DisableSecurityBypass_SafeBrowsing
1581 ```
1582 Value (string):
1583 ```
1584 <enabled/> or <disabled/>
1585 ```
1586
1587 #### macOS
1588 ```
1589 <dict>
1590   <key>DisableSecurityBypass</key>
1591   <dict>
1592     <key>InvalidCertificate</key>
1593     <true/> | <false/>
1594     <key><SafeBrowsing/key>
1595     <true/> | <false/>
1596   </dict>
1597 </dict>
1598 ```
1599 #### policies.json
1600 ```
1601 {
1602   "policies": {
1603     "DisableSecurityBypass": {
1604       "InvalidCertificate": true | false,
1605       "SafeBrowsing": true | false
1606     }
1607   }
1608 }
1609 ```
1610 ### DisableSystemAddonUpdate
1611 Prevent system add-ons from being installed or update.
1612
1613 **Compatibility:** Firefox 60, Firefox ESR 60\
1614 **CCK2 Equivalent:** N/A\
1615 **Preferences Affected:** N/A
1616
1617 #### Windows (GPO)
1618 ```
1619 Software\Policies\Mozilla\Firefox\DisableSystemAddonUpdate = 0x1 | 0x0
1620 ```
1621 #### Windows (Intune)
1622 OMA-URI:
1623 ```
1624 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSystemAddonUpdate
1625 ```
1626 Value (string):
1627 ```
1628 <enabled/> or <disabled/>
1629 ```
1630 #### macOS
1631 ```
1632 <dict>
1633   <key>DisableSystemAddonUpdate</key>
1634   <true/> | <false/>
1635 </dict>
1636 ```
1637 #### policies.json
1638 ```
1639 {
1640   "policies": {
1641     "DisableSystemAddonUpdate": true | false
1642   }
1643 }
1644 ```
1645 ### DisableTelemetry
1646 Prevent the upload of telemetry data.
1647
1648 Mozilla recommends that you do not disable telemetry. Information collected through telemetry helps us build a better product for businesses like yours.
1649
1650 **Compatibility:** Firefox 60, Firefox ESR 60\
1651 **CCK2 Equivalent:** `disableTelemetry`\
1652 **Preferences Affected:** `datareporting.healthreport.uploadEnabled,datareporting.policy.dataSubmissionEnabled`
1653
1654 #### Windows (GPO)
1655 ```
1656 Software\Policies\Mozilla\Firefox\DisableTelemetry = 0x1 | 0x0
1657 ```
1658 #### Windows (Intune)
1659 OMA-URI:
1660 ```
1661 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableTelemetry
1662 ```
1663 Value (string):
1664 ```
1665 <enabled/> or <disabled/>
1666 ```
1667 #### macOS
1668 ```
1669 <dict>
1670   <key>DisableTelemetry</key>
1671   <true/> | <false/>
1672 </dict>
1673 ```
1674 #### policies.json
1675 ```
1676 {
1677   "policies": {
1678     "DisableTelemetry": true | false
1679   }
1680 }
1681 ```
1682 ### DisplayBookmarksToolbar
1683 Set the initial state of the bookmarks toolbar. A user can still hide it and it will stay hidden.
1684
1685 **Compatibility:** Firefox 60, Firefox ESR 60\
1686 **CCK2 Equivalent:** `displayBookmarksToolbar`\
1687 **Preferences Affected:** N/A
1688
1689 #### Windows (GPO)
1690 ```
1691 Software\Policies\Mozilla\Firefox\DisplayBookmarksToolbar = 0x1 | 0x0
1692 ```
1693 #### Windows (Intune)
1694 OMA-URI:
1695 ```
1696 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisplayBookmarksToolbar
1697 ```
1698 Value (string):
1699 ```
1700 <enabled/> or <disabled/>
1701 ```
1702 #### macOS
1703 ```
1704 <dict>
1705   <key>DisplayBookmarksToolbar</key>
1706   <true/> | <false/>
1707 </dict>
1708 ```
1709 #### policies.json
1710 ```
1711 {
1712   "policies": {
1713     "DisplayBookmarksToolbar": true | false
1714   }
1715 }
1716 ```
1717 ### DisplayMenuBar (Deprecated)
1718 Set the initial state of the menubar. A user can still hide it and it will stay hidden.
1719
1720 **Compatibility:** Firefox 60, Firefox ESR 60 (Windows, some Linux)\
1721 **CCK2 Equivalent:** `displayMenuBar`\
1722 **Preferences Affected:** N/A
1723
1724 #### Windows (GPO)
1725 ```
1726 Software\Policies\Mozilla\Firefox\DisplayMenuBar = 0x1 | 0x0
1727 ```
1728 #### macOS
1729 ```
1730 <dict>
1731   <key>DisplayMenuBar</key>
1732   <true/> | <false/>
1733 </dict>
1734 ```
1735 #### policies.json
1736 ```
1737 {
1738   "policies": {
1739     "DisplayMenuBar": true | false
1740   }
1741 }
1742 ```
1743 ### DisplayMenuBar
1744 Set the state of the menubar.
1745
1746 `always` means the menubar is shown and cannot be hidden.
1747
1748 `never` means the menubar is hidden and cannot be shown.
1749
1750 `default-on` means the menubar is on by default but can be hidden.
1751
1752 `default-off` means the menubar is off by default but can be shown.
1753
1754 **Compatibility:** Firefox 73, Firefox ESR 68.5 (Windows, some Linux)\
1755 **CCK2 Equivalent:** `displayMenuBar`\
1756 **Preferences Affected:** N/A
1757
1758 #### Windows (GPO)
1759 ```
1760 Software\Policies\Mozilla\Firefox\DisplayMenuBar = "always", "never", "default-on", "default-off"
1761 ```
1762 #### Windows (Intune)
1763 OMA-URI:
1764 ```
1765 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisplayMenuBar_Enum
1766 ```
1767 Value (string):
1768 ```
1769 <enabled/>
1770 <data id="DisplayMenuBar" value="always | never | default-on | default-off"/>
1771 ```
1772 #### macOS
1773 ```
1774 <dict>
1775   <key>DisplayMenuBar</key>
1776   <string>always | never | default-on | default-off</string>
1777 </dict>
1778 ```
1779 #### policies.json
1780 ```
1781 {
1782   "policies": {
1783     "DisplayMenuBar": "always", "never", "default-on", "default-off"
1784   }
1785 }
1786 ```
1787 ### DNSOverHTTPS
1788 Configure DNS over HTTPS.
1789
1790 `Enabled` determines whether DNS over HTTPS is enabled
1791
1792 `ProviderURL` is a URL to another provider.
1793
1794 `Locked` prevents the user from changing DNS over HTTPS preferences.
1795
1796 `ExcludedDomains` excludes domains from DNS over HTTPS.
1797
1798 **Compatibility:** Firefox 63, Firefox ESR 68 (ExcludedDomains added in 75/68.7)\
1799 **CCK2 Equivalent:** N/A\
1800 **Preferences Affected:** `network.trr.mode`,`network.trr.uri`
1801
1802 #### Windows (GPO)
1803 ```
1804 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\Enabled = 0x1 | 0x0
1805 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\ProviderURL = "URL_TO_ALTERNATE_PROVIDER"
1806 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\Locked = 0x1 | 0x0
1807 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\ExcludedDomains\1 = "example.com"
1808 ```
1809 #### Windows (Intune)
1810 OMA-URI:
1811 ```
1812 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_Enabled
1813 ```
1814 Value (string):
1815 ```
1816 <enabled/> or <disabled/>
1817 ```
1818 OMA-URI:
1819 ```
1820 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_ProviderURL
1821 ```
1822 Value (string):
1823 ```
1824 <enabled/>
1825 <data id="String" value="URL_TO_ALTERNATE_PROVIDER"/>
1826 ```
1827 OMA-URI:
1828 ```
1829 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_Locked
1830 ```
1831 Value (string):
1832 ```
1833 <enabled/> or <disabled/>
1834 ```
1835 OMA-URI:
1836 ```
1837 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_ExcludedDomains
1838 ```
1839 Value (string):
1840 ```
1841 <enabled/>
1842 <data id="List" value="1&#xF000;example.com"/>
1843 ```
1844 #### macOS
1845 ```
1846 <dict>
1847   <key>DNSOverHTTPS</key>
1848   <dict>
1849     <key>Enabled</key>
1850     <true/> | <false/>
1851     <key>ProviderURL</key>
1852     <string>URL_TO_ALTERNATE_PROVIDER</string>
1853     <key>Locked</key>
1854     <true/> | <false/>
1855     <key>ExcludedDomains</key>
1856     <array>
1857       <string>example.com</string>
1858     </array>
1859   </dict>
1860 </dict>
1861 ```
1862 #### policies.json
1863 ```
1864 {
1865   "policies": {
1866     "DNSOverHTTPS": {
1867       "Enabled":  true | false,
1868       "ProviderURL": "URL_TO_ALTERNATE_PROVIDER",
1869       "Locked": true | false,
1870       "ExcludedDomains": ["example.com"]
1871     }
1872   }
1873 }
1874 ```
1875 ### DontCheckDefaultBrowser
1876 Don't check if Firefox is the default browser at startup.
1877
1878 **Compatibility:** Firefox 60, Firefox ESR 60\
1879 **CCK2 Equivalent:** `dontCheckDefaultBrowser`\
1880 **Preferences Affected:** `browser.shell.checkDefaultBrowser`
1881
1882 #### Windows (GPO)
1883 ```
1884 Software\Policies\Mozilla\Firefox\DontCheckDefaultBrowser = 0x1 | 0x0
1885 ```
1886 #### Windows (Intune)
1887 OMA-URI:
1888 ```
1889 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DontCheckDefaultBrowser
1890 ```
1891 Value (string):
1892 ```
1893 <enabled/> or <disabled/>
1894 ```
1895 #### macOS
1896 ```
1897 <dict>
1898   <key>DontCheckDefaultBrowser</key>
1899   <true/> | <false/>
1900 </dict>
1901 ```
1902 #### policies.json
1903 ```
1904 {
1905   "policies": {
1906     "DontCheckDefaultBrowser": true | false
1907   }
1908 }
1909 ```
1910 ### DefaultDownloadDirectory
1911 Set the default download directory.
1912
1913 You can use ${home} for the native home directory.
1914
1915 **Compatibility:** Firefox 68, Firefox ESR 68\
1916 **CCK2 Equivalent:** N/A\
1917 **Preferences Affected:** `browser.download.dir`,`browser.download.folderList`
1918
1919 #### Windows (GPO)
1920 ```
1921 Software\Policies\Mozilla\Firefox\DefaultDownloadDirectory = "${home}\Downloads"
1922 ```
1923 #### Windows (Intune)
1924 OMA-URI:
1925 ```
1926 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DefaultDownloadDirectory
1927 ```
1928 Value (string):
1929 ```
1930 <enabled/>
1931 <data id="Preferences_String" value="${home}\Downloads"/>
1932 ```
1933 #### macOS
1934 ```
1935 <dict>
1936   <key>DefaultDownloadDirectory</key>
1937   <string>${home}/Downloads</string>
1938 </dict>
1939 ```
1940 #### policies.json (macOS and Linux)
1941 ```
1942 {
1943   "policies": {
1944     "DefaultDownloadDirectory": "${home}/Downloads"
1945 }
1946 ```
1947 #### policies.json (Windows)
1948 ```
1949 {
1950   "policies": {
1951     "DefaultDownloadDirectory": "${home}\\Downloads"
1952 }
1953 ```
1954 ### DownloadDirectory
1955 Set and lock the download directory.
1956
1957 You can use ${home} for the native home directory.
1958
1959 **Compatibility:** Firefox 68, Firefox ESR 68\
1960 **CCK2 Equivalent:** N/A\
1961 **Preferences Affected:** `browser.download.dir`,`browser.download.folderList`,`browser.download.useDownloadDir`
1962
1963 #### Windows (GPO)
1964 ```
1965 Software\Policies\Mozilla\Firefox\DownloadDirectory = "${home}\Downloads"
1966 ```
1967 #### Windows (Intune)
1968 OMA-URI:
1969 ```
1970 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DownloadDirectory
1971 ```
1972 Value (string):
1973 ```
1974 <enabled/>
1975 <data id="Preferences_String" value="${home}\Downloads"/>
1976 ```
1977 #### macOS
1978 ```
1979 <dict>
1980   <key>DownloadDirectory</key>
1981   <string>${home}/Downloads</string>
1982 </dict>
1983 ```
1984 #### policies.json (macOS and Linux)
1985 ```
1986 {
1987   "policies": {
1988     "DownloadDirectory": "${home}/Downloads"
1989 }
1990 ```
1991 #### policies.json (Windows)
1992 ```
1993 {
1994   "policies": {
1995     "DownloadDirectory": "${home}\\Downloads"
1996 }
1997 ```
1998 ### EnableTrackingProtection
1999 Configure tracking protection.
2000
2001 If this policy is not configured, tracking protection is not enabled by default in the browser, but it is enabled by default in private browsing and the user can change it.
2002
2003 If `Value` is set to false, tracking protection is disabled and locked in both the regular browser and private browsing.
2004
2005 If `Value` is set to true, tracking protection is enabled by default in both the regular browser and private browsing and the `Locked` value determines whether or not a user can change it.
2006
2007 If `Cryptomining` is set to true, cryptomining scripts on websites are blocked.
2008
2009 If `Fingerprinting` is set to true, fingerprinting scripts on websites are blocked.
2010
2011 `Exceptions` are origins for which tracking protection is not enabled.
2012
2013 **Compatibility:** Firefox 60, Firefox ESR 60 (Cryptomining and Fingerprinting added in 70/68.2, Exceptions added in 73/68.5)\
2014 **CCK2 Equivalent:** N/A\
2015 **Preferences Affected:** `privacy.trackingprotection.enabled`,`privacy.trackingprotection.pbmode.enabled`,`privacy.trackingprotection.cryptomining.enabled`,`privacy.trackingprotection.fingerprinting.enabled`
2016
2017 #### Windows (GPO)
2018 ```
2019 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Value = 0x1 | 0x0
2020 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Locked = 0x1 | 0x0
2021 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Cryptomining = 0x1 | 0x0
2022 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Fingerprinting = 0x1 | 0x0
2023 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Exceptions\1 = "https://example.com"
2024 ```
2025 #### Windows (Intune)
2026 OMA-URI:
2027 ```
2028 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/A_TrackingProtection_Value
2029 ```
2030 Value (string):
2031 ```
2032 <enabled/> or <disabled/>
2033 ```
2034 OMA-URI:
2035 ```
2036 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/B_TrackingProtection_Cryptomining
2037 ```
2038 Value (string):
2039 ```
2040 <enabled/> or <disabled/>
2041 ```
2042 OMA-URI:
2043 ```
2044 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/C_TrackingProtection_Fingerprinting
2045 ```
2046 Value (string):
2047 ```
2048 <enabled/> or <disabled/>
2049 ```
2050 OMA-URI:
2051 ```
2052 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/D_TrackingProtection_Exceptions
2053 ```
2054 Value (string):
2055 ```
2056 <data id="TrackingProtection_Exceptions" value="1&#xF000;https://example.com"/>
2057 ```
2058 OMA-URI:
2059 ```
2060 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/E_TrackingProtection_Locked
2061 ```
2062 Value (string):
2063 ```
2064 <enabled/> or <disabled/>
2065 ```
2066 #### macOS
2067 ```
2068 <dict>
2069   <key>EnableTrackingProtection</key>
2070   <dict>
2071     <key>Value</key>
2072     <true/> | <false/>
2073     <key><Locked</key>
2074     <true/> | <false/>
2075     <key><Cryptomining</key>
2076     <true/> | <false/>
2077     <key><Fingerprinting</key>
2078     <true/> | <false/>
2079     <key>Exceptions</key>
2080     <array>
2081       <string>https://example.com</string>
2082     </array>
2083   </dict>
2084 </dict>
2085 ```
2086 #### policies.json
2087 ```
2088 {
2089   "policies": {
2090     "EnableTrackingProtection": {
2091       "Value": true | false,
2092       "Locked": true | false,
2093       "Cryptomining": true | false,
2094       "Fingerprinting": true | false,
2095       "Exceptions": ["https://example.com"]
2096     }
2097 }
2098 ```
2099 ### EncryptedMediaExtensions
2100 Enable or disable Encrypted Media Extensions and optionally lock it.
2101
2102 If `Enabled` is set to false, encrypted media extensions (like Widevine) are not downloaded by Firefox unless the user consents to installing them.
2103
2104 If `Locked` is set to true and `Enabled` is set to false, Firefox will not download encrypted media extensions (like Widevine) or ask the user to install them.
2105
2106 **Compatibility:** Firefox 77, Firefox ESR 68.9\
2107 **CCK2 Equivalent:** N/A\
2108 **Preferences Affected:** `media.eme.enabled`
2109
2110 #### Windows (GPO)
2111 ```
2112 Software\Policies\Mozilla\Firefox\EncryptedMediaExtensions\Enabled = 0x1 | 0x0
2113 Software\Policies\Mozilla\Firefox\EncryptedMediaExtensions\Locked = 0x1 | 0x0
2114 ```
2115 #### Windows (Intune)
2116 OMA-URI:
2117 ```
2118 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~EncryptedMediaExtensions/EncryptedMediaExtensions_Enabled
2119 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~EncryptedMediaExtensions/EncryptedMediaExtensions_Locked
2120 ```
2121 Value (string):
2122 ```
2123 <enabled/>or <disabled/>
2124 ```
2125 #### macOS
2126 ```
2127 <dict>
2128   <key>EncryptedMediaExtensions</key>
2129   <dict>
2130     <key>Enabled</key>
2131     <true/> | <false/>
2132     <key><Locked</key>
2133     <true/> | <false/>
2134   </dict>
2135 </dict>
2136 ```
2137 #### policies.json
2138 ```
2139 {
2140   "policies": {
2141     "EncryptedMediaExtensions": {
2142       "Enabled": true | false,
2143       "Locked": true | false
2144     }
2145 }
2146 ```
2147 ### EnterprisePoliciesEnabled
2148 Enable policy support on macOS.
2149
2150 **Compatibility:** Firefox 63, Firefox ESR 60.3 (macOS only)\
2151 **CCK2 Equivalent:** N/A\
2152 **Preferences Affected:** N/A
2153
2154 #### macOS
2155 ```
2156 <dict>
2157   <key>EnterprisePoliciesEnabled</key>
2158   <true/>
2159 </dict>
2160 ```
2161 ### Extensions
2162 Control the installation, uninstallation and locking of extensions.
2163
2164 `Install` is a list of URLs or native paths for extensions to be installed.
2165
2166 `Uninstall` is a list of extension IDs that should be uninstalled if found.
2167
2168 `Locked` is a list of extension IDs that the user cannot disable or uninstall.
2169
2170 **Compatibility:** Firefox 60, Firefox ESR 60\
2171 **CCK2 Equivalent:** `addons`\
2172 **Preferences Affected:** N/A
2173
2174 #### Windows (GPO)
2175 ```
2176 Software\Policies\Mozilla\Firefox\Extensions\Install\1 = "https://addons.mozilla.org/firefox/downloads/somefile.xpi"
2177 Software\Policies\Mozilla\Firefox\Extensions\Install\2 = "//path/to/xpi"
2178 Software\Policies\Mozilla\Firefox\Extensions\Uninstall\1 = "bad_addon_id@mozilla.org"
2179 Software\Policies\Mozilla\Firefox\Extensions\Locked\1 = "addon_id@mozilla.org"
2180 ```
2181 #### Windows (Intune)
2182 OMA-URI:
2183 ```
2184 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/Extensions_Install
2185 ```
2186 Value (string):
2187 ```
2188 <enabled/>
2189 <data id="Extensions" value="1&#xF000;https://addons.mozilla.org/firefox/downloads/somefile.xpi&#xF000;2&#xF000;//path/to/xpi"/>
2190 ```
2191 OMA-URI:
2192 ```
2193 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/Extensions_Uninstall
2194 ```
2195 Value (string):
2196 ```
2197 <enabled/>
2198 <data id="Extensions" value="1&#xF000;bad_addon_id@mozilla.org"/>
2199 ```
2200 OMA-URI:
2201 ```
2202 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/Extensions_Locked
2203 ```
2204 Value (string):
2205 ```
2206 <enabled/>
2207 <data id="Extensions" value="1&#xF000;addon_id@mozilla.org"/>
2208 ```
2209 #### macOS
2210 ```
2211 <dict>
2212   <key>Extensions</key>
2213   <dict>
2214     <key>Install</key>
2215     <array>
2216       <string>https://addons.mozilla.org/firefox/downloads/somefile.xpi</string>
2217       <string>//path/to/xpi</string>
2218     </array>
2219     <key>Uninstall</key>
2220     <array>
2221       <string>bad_addon_id@mozilla.org</string>
2222     </array>
2223     <key>Locked</key>
2224     <array>
2225       <string>addon_id@mozilla.org</string>
2226     </array>
2227   </dict>
2228 </dict>
2229 ```
2230 #### policies.json
2231 ```
2232 {
2233   "policies": {
2234     "Extensions": {
2235       "Install": ["https://addons.mozilla.org/firefox/downloads/somefile.xpi", "//path/to/xpi"],
2236       "Uninstall": ["bad_addon_id@mozilla.org"],
2237       "Locked":  ["addon_id@mozilla.org"]
2238     }
2239   }
2240 }
2241 ```
2242 ### ExtensionSettings
2243 Manage all aspects of extensions. This policy is based heavily on the [Chrome policy](https://dev.chromium.org/administrators/policy-list-3/extension-settings-full) of the same name.
2244
2245 This policy maps an extension ID to its configuration. With an extension ID, the configuration will be applied to the specified extension only. A default configuration can be set for the special ID "*", which will apply to all extensions that don't have a custom configuration set in this policy.
2246
2247 To obtain an extension ID, install the extension and go to about:support. You will see the ID in the Extensions section. I've also created an extension that makes it easy to find the ID of extensions on AMO. You can download it [here](https://github.com/mkaply/queryamoid/releases/tag/v0.1).
2248
2249 The configuration for each extension is another dictionary that can contain the fields documented below.
2250
2251 | Name | Description |
2252 | --- | --- |
2253 | `installation_mode` | Maps to a string indicating the installation mode for the extension. The valid strings are `allowed`,`blocked`,`force_installed`, and `normal_installed`.
2254 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`allowed` | Allows the extension to be installed by the user. This is the default behavior. There is no need for an install_url; it will automatically be allowed based on the ID.
2255 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`blocked`| Blocks installation of the extension and removes it from the device if already installed.
2256 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`force_installed`| The extension is automatically installed and can't be removed by the user. This option is not valid for the default configuration and requires an install_url.
2257 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`normal_installed`| The extension is automatically installed but can be disabled by the user. This option is not valid for the default configuration and requires an install_url.
2258 | `install_url`| Maps to a URL indicating where Firefox can download a force_installed or normal_installed extension. If installing from the addons.mozilla.org, use the following URL (substituting SHORT_NAME from the URL on AMO), https://addons.mozilla.org/firefox/downloads/latest/SHORT_NAME/latest.xpi. If installing from the local file system, use a file:/// URL. Languages packs are available from https://releases.mozilla.org/pub/firefox/releases/VERSION/PLATFORM/xpi/LANGUAGE.xpi. If you need to update the extension, you can change the name of the extension and it will be automatically updated. Extensions installed from file URLs will additional be updated when their internal version changes.
2259 | `install_sources` | A list of sources from which installing extensions is allowed. **This is unnecessary if you are only allowing the installation of certain extensions by ID.** Each item in this list is an extension-style match pattern. Users will be able to easily install items from any URL that matches an item in this list. Both the location of the *.xpi file and the page where the download is started from (i.e.  the referrer) must be allowed by these patterns. This setting can be used only for the default configuration. If you want to allow the install of extensions from the recommended add-ons page, you must add `about:addons` to this list.
2260 | `allowed_types` | This setting whitelists the allowed types of extension/apps that can be installed in Firefox. The value is a list of strings, each of which should be one of the following: "extension", "theme", "dictionary", "langpack" This setting can be used only for the default configuration.
2261 | `blocked_install_message` | This maps to a string specifying the error message to display to users if they're blocked from installing an extension. This setting allows you to append text to the generic error message displayed when the extension is blocked. This could be be used to direct users to your help desk, explain why a particular extension is blocked, or something else. This setting can be used only for the default configuration.
2262 | `restricted_domains` | An array of domains on which content scripts can't be run. This setting can be used only for the default configuration.
2263
2264 **Compatibility:** Firefox 69, Firefox ESR 68.1\
2265 **CCK2 Equivalent:** N/A\
2266 **Preferences Affected:** N/A
2267
2268 #### Windows (GPO)
2269 ```
2270 Software\Policies\Mozilla\Firefox\ExtensionSettings (REG_MULTI_SZ) =
2271 {
2272   "*": {
2273     "blocked_install_message": "Custom error message.",
2274     "install_sources": ["about:addons","https://addons.mozilla.org/"],
2275     "installation_mode": "blocked",
2276     "allowed_types": ["extension"]
2277   },
2278   "uBlock0@raymondhill.net": {
2279     "installation_mode": "force_installed",
2280     "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
2281   },
2282   "https-everywhere@eff.org": {
2283     "installation_mode": "allowed",
2284   }
2285 }
2286 ```
2287 #### Windows (Intune)
2288 OMA-URI:
2289 ```
2290 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/ExtensionSettings
2291 ```
2292 Value (string):
2293 ```
2294 <enabled/>
2295 <data id="ExtensionSettings" value='
2296 {
2297   "*": {
2298     "blocked_install_message": "Custom error message.",
2299     "install_sources": ["about:addons","https://addons.mozilla.org/"],
2300     "installation_mode": "blocked",
2301     "allowed_types": ["extension"]
2302   },
2303   "uBlock0@raymondhill.net": {
2304     "installation_mode": "force_installed",
2305     "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
2306   },
2307     "https-everywhere@eff.org": {
2308     "installation_mode": "allowed",
2309   }
2310 }'/>
2311 ```
2312 #### macOS
2313 ```
2314 <dict>
2315   <key>ExtensionSettings</key>
2316   <dict>
2317     <key>*</key>
2318     <dict>
2319       <key>blocked_install_message</key>
2320       <string>Custom error message.</string>
2321       <key>install_sources</key>
2322       <array>
2323         <string>about:addons</string>
2324         <string>https://addons.mozilla.org/</string>
2325       </array>
2326       <key>installation_mode</key>
2327       <string>blocked</string>
2328       <key>allowed_types</key>
2329       <array>
2330         <string>extension</string>
2331       </array>
2332     </dict>
2333     <key>uBlock0@raymondhill.net</key>
2334     <dict>
2335       <key>installation_mode</key>
2336        <string>force_installed</string>
2337       <key>install_url</key>
2338       <string>https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi</string>
2339     </dict>
2340     <key>https-everywhere@eff.org</key>
2341     <dict>
2342       <key>installation_mode</key>
2343        <string>allowed</string>
2344     </dict>
2345   </dict>
2346 </dict>
2347 ```
2348 #### policies.json
2349 ```
2350 {
2351   "policies": {
2352     "ExtensionSettings": {
2353       "*": {
2354         "blocked_install_message": "Custom error message.",
2355         "install_sources": ["about:addons","https://addons.mozilla.org/"],
2356         "installation_mode": "blocked",
2357         "allowed_types": ["extension"]
2358       },
2359       "uBlock0@raymondhill.net": {
2360         "installation_mode": "force_installed",
2361         "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
2362       },
2363       "https-everywhere@eff.org": {
2364         "installation_mode": "allowed"
2365       }
2366     }
2367   }
2368 }
2369 ```
2370 ### ExtensionUpdate
2371 Control extension updates.
2372
2373 **Compatibility:** Firefox 67, Firefox ESR 60.7\
2374 **CCK2 Equivalent:** N/A\
2375 **Preferences Affected:** `extensions.update.enabled`
2376
2377 #### Windows (GPO)
2378 ```
2379 Software\Policies\Mozilla\Firefox\ExtensionUpdate = 0x1 | 0x0
2380 ```
2381 #### Windows (Intune)
2382 OMA-URI:
2383 ```
2384 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/ExtensionUpdate
2385 ```
2386 Value (string):
2387 ```
2388 <enabled/> or <disabled/>
2389 ```
2390 #### macOS
2391 ```
2392 <dict>
2393   <key>ExtensionUpdate</key>
2394   <true/> | <false/>
2395 </dict>
2396 ```
2397 #### policies.json
2398 ```
2399 {
2400   "policies": {
2401     "ExtensionUpdate": true | false
2402   }
2403 }
2404 ```
2405 ### FlashPlugin
2406 Configure the default Flash plugin policy as well as origins for which Flash is allowed.
2407
2408 `Allow` is a list of origins where Flash are allowed.
2409
2410 `Block` is a list of origins where Flash is not allowed.
2411
2412 `Default` determines whether or not Flash is allowed by default.
2413
2414 `Locked` prevents the user from changing Flash preferences.
2415
2416 **Compatibility:** Firefox 60, Firefox ESR 60\
2417 **CCK2 Equivalent:** `permissions.plugin`\
2418 **Preferences Affected:** `plugin.state.flash`
2419
2420 #### Windows (GPO)
2421 ```
2422 Software\Policies\Mozilla\Firefox\FlashPlugin\Allow\1 = "https://example.org"
2423 Software\Policies\Mozilla\Firefox\FlashPlugin\Block\1 = "https://example.edu"
2424 Software\Policies\Mozilla\Firefox\FlashPlugin\Default = 0x1 | 0x0
2425 Software\Policies\Mozilla\Firefox\FlashPlugin\Locked = 0x1 | 0x0
2426 ```
2427 #### Windows (Intune)
2428 OMA-URI:
2429 ```
2430 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Flash/FlashPlugin_Allow
2431 ```
2432 Value (string):
2433 ```
2434 <enabled/>
2435 <data id="Permissions" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
2436 ```
2437 OMA-URI:
2438 ```
2439 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Flash/FlashPlugin_Locked
2440 ```
2441 Value (string):
2442 ```
2443 <enabled/> or <disabled/>
2444 ```
2445 OMA-URI:
2446 ```
2447 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Flash/FlashPlugin_Default
2448 ```
2449 Value (string):
2450 ```
2451 <enabled/> or <disabled/>
2452 ```
2453 #### macOS
2454 ```
2455 <dict>
2456   <key>FlashPlugin</key>
2457   <dict>
2458     <key>Allow</key>
2459     <array>
2460       <string>http://example.org</string>
2461     </array>
2462     <key>Block</key>
2463     <array>
2464       <string>http://example.edu</string>
2465     </array>
2466     <key>Default</key>
2467     <true/> | <false/>
2468     <key>Locked</key>
2469     <true/> | <false/>
2470   </dict>
2471 </dict>
2472 ```
2473 #### policies.json
2474 ```
2475 {
2476   "policies": {
2477     "FlashPlugin": {
2478       "Allow": ["http://example.org/"],
2479       "Block": ["http://example.edu/"],
2480       "Default": true | false,
2481       "Locked": true | false
2482     }
2483   }
2484 }
2485 ```
2486
2487
2488
2489 ### Handlers
2490 Configure default application handlers. This policy is based on the internal format of `handlers.json`.
2491
2492 You can configure handlers based on a mime type (`mimeTypes`), a file's extension (`extensions`), or a protocol (`schemes`).
2493
2494 Within each handler type, you specify the given mimeType/extension/scheme as a key and use the following subkeys to describe how it is handled.
2495
2496 | Name | Description |
2497 | --- | --- |
2498 | `action`| Can be either `saveToDisk`, `useHelperApp`, `useSystemDefault`.
2499 | `ask` | If `true`, the user is asked if what they want to do with the file. If `false`, the action is taken without user intervention.
2500 | `handlers` | An array of handlers with the first one being the default. If you don't want to have a default handler, use an empty object for the first handler. Choose between path or uriTemplate.
2501 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`name` | The display name of the handler (might not be used).
2502 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`path`| The native path to the executable to be used.
2503 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`uriTemplate`| A url to a web based application handler. The URL must be https and contain a %s to be used for substitution.
2504
2505 **Compatibility:** Firefox 78, Firefox ESR 78\
2506 **CCK2 Equivalent:** N/A\
2507 **Preferences Affected:** N/A
2508
2509 #### Windows (GPO)
2510 ```
2511 Software\Policies\Mozilla\Firefox\Handlers (REG_MULTI_SZ) =
2512 {
2513   "mimeTypes": {
2514     "application/msword": {
2515       "action": "useSystemDefault",
2516       "ask": true | false
2517     }
2518   },
2519   "schemes": {
2520     "mailto": {
2521       "action": "useHelperApp",
2522       "ask": true | false,
2523       "handlers": [{
2524         "name": "Gmail",
2525         "uriTemplate": "https://mail.google.com/mail/?extsrc=mailto&url=%s"
2526       }]
2527     }
2528   },
2529   "extensions": {
2530     "pdf": {
2531       "action": "useHelperApp",
2532       "ask": true | false,
2533       "handlers": [{
2534         "name": "Adobe Acrobat",
2535         "path": "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32.exe"
2536       }]
2537     }
2538   }
2539 }
2540 ```
2541 #### Windows (Intune)
2542 OMA-URI:
2543 ```
2544 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Handlers
2545 ```
2546 Value (string):
2547 ```
2548 <enabled/>
2549 <data id="Handlers" value='
2550 {
2551   "mimeTypes": {
2552     "application/msword": {
2553       "action": "useSystemDefault",
2554       "ask": true | false
2555     }
2556   },
2557   "schemes": {
2558     "mailto": {
2559       "action": "useHelperApp",
2560       "ask": true | false,
2561       "handlers": [{
2562         "name": "Gmail",
2563         "uriTemplate": "https://mail.google.com/mail/?extsrc=mailto&amp;url=%s"
2564       }]
2565     }
2566   },
2567   "extensions": {
2568     "pdf": {
2569       "action": "useHelperApp",
2570       "ask": true | false,
2571       "handlers": [{
2572         "name": "Adobe Acrobat",
2573         "path": "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32.exe"
2574       }]
2575     }
2576   }
2577 }
2578 '/>
2579 ```
2580 #### macOS
2581 ```
2582 <dict>
2583   <key>Handlers</key>
2584   <dict>
2585     <key>mimeTypes</key>
2586     <dict>
2587       <key>application/msword</key>
2588       <dict>
2589         <key>action</key>
2590         <string>useSystemDefault</string>
2591         <key>ask</key>
2592         <true/> | <false/>
2593       </dict>
2594     </dict>
2595     <key>schemes</key>
2596     <dict>
2597       <key>mailto</key>
2598       <dict>
2599         <key>action</key>
2600         <string>useHelperApp</string>
2601         <key>ask</key>
2602         <true/> | <false/>
2603         <key>handlers</key>
2604         <array>
2605           <dict>
2606             <key>name</key>
2607             <string>Gmail</string>
2608             <key>uriTemplate</key>
2609             <string>https://mail.google.com/mail/?extsrc=mailto&url=%s</string>
2610           </dict>
2611         </array>
2612       </dict>
2613     </dict>
2614     <key>extensions</key>
2615     <dict>
2616       <key>pdf</key>
2617       <dict>
2618         <key>action</key>
2619         <string>useHelperApp</string>
2620         <key>ask</key>
2621         <true/> | <false/>
2622         <key>handlers</key>
2623         <array>
2624           <dict>
2625             <key>name</key>
2626             <string>Adobe Acrobat</string>
2627             <key>path</key>
2628             <string>/System/Applications/Preview.app</string>
2629           </dict>
2630         </array>
2631       </dict>
2632     </dict>
2633   </dict>
2634 </dict>
2635 ```
2636 #### policies.json
2637 ```
2638 {
2639   "policies": {
2640     "Handlers": {
2641       "mimeTypes": {
2642         "application/msword": {
2643           "action": "useSystemDefault",
2644           "ask": false
2645         }
2646       },
2647       "schemes": {
2648         "mailto": {
2649           "action": "useHelperApp",
2650           "ask": true | false,
2651           "handlers": [{
2652             "name": "Gmail",
2653             "uriTemplate": "https://mail.google.com/mail/?extsrc=mailto&url=%s"
2654           }]
2655         }
2656       },
2657       "extensions": {
2658         "pdf": {
2659           "action": "useHelperApp",
2660           "ask": true | false,
2661           "handlers": [{
2662             "name": "Adobe Acrobat",
2663             "path": "/usr/bin/acroread"
2664           }]
2665         }
2666       }
2667     }
2668   }
2669 }
2670 ```
2671 ### FirefoxHome
2672 Customize the Firefox Home page.
2673
2674 **Compatibility:** Firefox 68, Firefox ESR 68\
2675 **CCK2 Equivalent:** N/A\
2676 **Preferences Affected:** `browser.newtabpage.activity-stream.showSearch`,`browser.newtabpage.activity-stream.feeds.topsites`,`browser.newtabpage.activity-stream.feeds.section.highlights`,`browser.newtabpage.activity-stream.feeds.section.topstories`,`browser.newtabpage.activity-stream.feeds.snippets`
2677
2678 #### Windows (GPO)
2679 ```
2680 Software\Policies\Mozilla\Firefox\FirefoxHome\Search = 0x1 | 0x0
2681 Software\Policies\Mozilla\Firefox\FirefoxHome\TopSites = 0x1 | 0x0
2682 Software\Policies\Mozilla\Firefox\FirefoxHome\Highlights = 0x1 | 0x0
2683 Software\Policies\Mozilla\Firefox\FirefoxHome\Pocket = 0x1 | 0x0
2684 Software\Policies\Mozilla\Firefox\FirefoxHome\Snippets = 0x1 | 0x0
2685 Software\Policies\Mozilla\Firefox\FirefoxHome\Locked = 0x1 | 0x0
2686 ```
2687 #### Windows (Intune)
2688 OMA-URI:
2689 ```
2690 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/CustomizeFirefoxHome
2691 ```
2692 Value (string):
2693 ```
2694 <enabled/>
2695 <data id="FirefoxHome_Search"  value="true | false"/>
2696 <data id="FirefoxHome_TopSites"  value="true | false"/>
2697 <data id="FirefoxHome_Highlights"  value="true | false"/>
2698 <data id="FirefoxHome_Pocket"  value="true | false"/>
2699 <data id="FirefoxHome_Snippets"  value="true | false"/>
2700 <data id="FirefoxHome_Locked"  value="true | false"/>
2701 ```
2702 #### macOS
2703 ```
2704 <dict>
2705   <key>FirefoxHome</key>
2706   <dict>
2707     <key>Search</key>
2708     <true/> | <false/>
2709     <key>TopSites</key>
2710     <true/> | <false/>
2711     <key>Highlights</key>
2712     <true/> | <false/>
2713     <key>Pocket</key>
2714     <true/> | <false/>
2715     <key>Snippets</key>
2716     <true/> | <false/>
2717     <key>Locked</key>
2718     <true/> | <false/>
2719   </dict>
2720 </dict>
2721 ```
2722 #### policies.json
2723 ```
2724 {
2725   "policies": {
2726     "FirefoxHome": {
2727       "Search": true | false,
2728       "TopSites": true | false,
2729       "Highlights": true | false,
2730       "Pocket": true | false,
2731       "Snippets": true | false,
2732       "Locked": true | false
2733     }
2734   }
2735 }
2736 ```
2737 ### HardwareAcceleration
2738 Control hardware acceleration.
2739
2740 **Compatibility:** Firefox 60, Firefox ESR 60\
2741 **CCK2 Equivalent:** N/A\
2742 **Preferences Affected:** `layers.acceleration.disabled`
2743
2744 #### Windows (GPO)
2745 ```
2746 Software\Policies\Mozilla\Firefox\HardwareAcceleration = 0x1 | 0x0
2747 ```
2748 #### Windows (Intune)
2749 OMA-URI:
2750 ```
2751 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/HardwareAcceleration
2752 ```
2753 Value (string):
2754 ```
2755 <enabled/> or <disabled/>
2756 ```
2757 #### macOS
2758 ```
2759 <dict>
2760   <key>HardwareAcceleration</key>
2761   <true/> | <false/>
2762 </dict>
2763 ```
2764 #### policies.json
2765 ```
2766 {
2767   "policies": {
2768     "HardwareAcceleration": true | false
2769   }
2770 }
2771 ```
2772 ### Homepage
2773 Configure the default homepage and how Firefox starts.
2774
2775 `URL` is the default homepage.
2776
2777 `Locked` prevents the user from changing homepage preferences.
2778
2779 `Additional` allows for more than one homepage.
2780
2781 `StartPage` is how Firefox starts. The choices are no homepage, the default homepage or the previous session.
2782
2783 With Firefox 78, an additional option as added for `Startpage`, `homepage-locked`. This allows for locking the homepage, but still allowing the user to choose whether or not they want to restore their session.
2784
2785 **Compatibility:** Firefox 60, Firefox ESR 60 (StartPage was added in Firefox 60, Firefox ESR 60.4, homepage-locked added in Firefox 78)\
2786 **CCK2 Equivalent:** `homePage`,`lockHomePage`\
2787 **Preferences Affected:** `browser.startup.homepage`,`browser.startup.page`
2788
2789 #### Windows (GPO)
2790 ```
2791 Software\Policies\Mozilla\Firefox\Homepage\URL = "https://example.com"
2792 Software\Policies\Mozilla\Firefox\Homepage\Locked = 0x1 | 0x0
2793 Software\Policies\Mozilla\Firefox\Homepage\Additional\1 = "https://example.org"
2794 Software\Policies\Mozilla\Firefox\Homepage\Additional\2 = "https://example.edu"
2795 Software\Policies\Mozilla\Firefox\Homepage\StartPage = "none" | "homepage" | "previous-session" | "homepage-locked"
2796 ```
2797 #### Windows (Intune)
2798 OMA-URI:
2799 ```
2800 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageURL
2801 ```
2802 Value (string):
2803 ```
2804 <enabled/>
2805
2806 <data id="HomepageURL" value="https://example.com"/>
2807 <data id="HomepageLocked" value="true | false"/>
2808 ```
2809 OMA-URI:
2810 ```
2811 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageAdditional
2812 ```
2813 Value (string):
2814 ```
2815 <enabled/>
2816
2817 <data id="HomepageAdditional" value="1&#xF000;http://example.org&#xF000;2&#xF000;http://example.edu"/>
2818 ```
2819 OMA-URI:
2820 ```
2821 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageStartPage
2822 ```
2823 Value (string):
2824 ```
2825 <enabled/>
2826
2827 <data id="StartPage" value="none | homepage | previous-session"/>
2828 ```
2829 #### macOS
2830 ```
2831 <dict>
2832   <key>Homepage</key>
2833   <dict>
2834     <key>URL</key>
2835     <string>http://example.com</string>
2836     <key>Locked</key>
2837     <true/> | <false/>
2838     <key>Additional</key>
2839     <array>
2840       <string>http://example.org</string>
2841       <string>http://example.edu</string>
2842     </array>
2843     <key>StartPage</key>
2844     <string>none | homepage | previous-session | homepage-locked</string>
2845   </dict>
2846 </dict>
2847 ```
2848 #### policies.json
2849 ```
2850 {
2851   "policies": {
2852     "Homepage": {
2853       "URL": "http://example.com/",
2854       "Locked": true | false,
2855       "Additional": ["http://example.org/",
2856                      "http://example.edu/"],
2857       "StartPage": "none" | "homepage" | "previous-session" | "homepage-locked"
2858     }
2859   }
2860 }
2861 ```
2862 ### InstallAddonsPermission
2863 Configure the default extension install policy as well as origins for extension installs are allowed. This policy does not override turning off all extension installs.
2864
2865 `Allow` is a list of origins where extension installs are allowed.
2866
2867 `Default` determines whether or not extension installs are allowed by default.
2868
2869 **Compatibility:** Firefox 60, Firefox ESR 60\
2870 **CCK2 Equivalent:** `permissions.install`\
2871 **Preferences Affected:** `xpinstall.enabled`
2872
2873 #### Windows (GPO)
2874 ```
2875 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Allow\1 = "https://example.org"
2876 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Allow\2 = "https://example.edu"
2877 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Default = 0x1 | 0x0
2878 ```
2879 #### Windows (Intune)
2880 OMA-URI:
2881 ```
2882 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Addons/InstallAddonsPermission_Allow
2883 ```
2884 Value (string):
2885 ```
2886 <enabled/>
2887 <data id="Permissions" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
2888 ```
2889 OMA-URI:
2890 ```
2891 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Addons/InstallAddonsPermission_Default
2892 ```
2893 Value (string):
2894 ```
2895 <enabled/>
2896 ```
2897 #### macOS
2898 ```
2899 <dict>
2900   <key>InstallAddonsPermission</key>
2901   <dict>
2902     <key>Allow</key>
2903     <array>
2904       <string>http://example.org</string>
2905       <string>http://example.edu</string>
2906     </array>
2907     <key>Default</key>
2908     <true/> | <false/>
2909   </dict>
2910 </dict>
2911 ```
2912 #### policies.json
2913 ```
2914 {
2915   "policies": {
2916     "InstallAddonsPermission": {
2917       "Allow": ["http://example.org/",
2918                 "http://example.edu/"],
2919       "Default": true | false
2920     }
2921   }
2922 }
2923 ```
2924 ### LegacyProfiles
2925 Disable the feature enforcing a separate profile for each installation.
2926
2927 If this policy set to true, Firefox will not try to create different profiles for installations of Firefox in different directories. This is the equivalent of the MOZ_LEGACY_PROFILES environment variable.
2928
2929 If this policy set to false, Firefox will create a new profile for each unique installation of Firefox.
2930
2931 This policy only work on Windows via GPO (not policies.json).
2932
2933 **Compatibility:** Firefox 70, Firefox ESR 68.2 (Windows only, GPO only)\
2934 **CCK2 Equivalent:** N/A\
2935 **Preferences Affected:** N/A
2936
2937 #### Windows (GPO)
2938 ```
2939 Software\Policies\Mozilla\Firefox\LegacyProfiles = = 0x1 | 0x0
2940 ```
2941 #### Windows (Intune)
2942 OMA-URI:
2943 ```
2944 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/LegacyProfiles
2945 ```
2946 Value (string):
2947 ```
2948 <enabled/> or <disabled/>
2949 ```
2950 ### LocalFileLinks
2951 Enable linking to local files by origin.
2952
2953 **Compatibility:** Firefox 68, Firefox ESR 68\
2954 **CCK2 Equivalent:** N/A\
2955 **Preferences Affected:** `capability.policy.localfilelinks.*`
2956
2957 #### Windows (GPO)
2958 ```
2959 Software\Policies\Mozilla\Firefox\LocalFileLinks\1 = "https://example.org"
2960 Software\Policies\Mozilla\Firefox\LocalFileLinks\2 = "https://example.edu"
2961 ```
2962 #### Windows (Intune)
2963 OMA-URI:
2964 ```
2965 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/LocalFileLinks
2966 ```
2967 Value (string):
2968 ```
2969 <enabled/>
2970 <data id="LocalFileLinks" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
2971 ```
2972 #### macOS
2973 ```
2974 <dict>
2975   <key>LocalFileLinks</key>
2976   <array>
2977     <string>http://example.org</string>
2978     <string>http://example.edu</string>
2979   </array>
2980 </dict>
2981 ```
2982 #### policies.json
2983 ```
2984 {
2985   "policies": {
2986     "LocalFileLinks": ["http://example.org/",
2987                        "http://example.edu/"]
2988   }
2989 }
2990 ```
2991 ### PrimaryPassword
2992 Require or prevent using a primary (formerly master) password.
2993
2994 If this value is true, a primary password is required. If this value is false, it works the same as if [`DisableMasterPasswordCreation`](#disablemasterpasswordcreation) was true and removes the primary password functionality.
2995
2996 If both DisableMasterPasswordCreation and PrimaryPassword are used, DisableMasterPasswordCreation takes precedent.
2997
2998 **Compatibility:** Firefox 79, Firefox ESR 78.1\
2999 **CCK2 Equivalent:** `noMasterPassword`\
3000 **Preferences Affected:** N/A
3001
3002 #### Windows (GPO)
3003 ```
3004 Software\Policies\Mozilla\Firefox\PrimaryPassword = 0x1 | 0x0
3005 ```
3006 #### Windows (Intune)
3007 OMA-URI:
3008 ```
3009 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PrimaryPassword
3010 ```
3011 Value (string):
3012 ```
3013 <enabled/> or <disabled/>
3014 ```
3015 #### macOS
3016 ```
3017 <dict>
3018   <key>PrimaryPassword</key>
3019   <true/> | <false/>
3020 </dict>
3021 ```
3022 #### policies.json
3023 ```
3024 {
3025   "policies": {
3026     "PrimaryPassword": true | false
3027   }
3028 }
3029 ```
3030 ### NetworkPrediction
3031 Enable or disable network prediction (DNS prefetching).
3032
3033 **Compatibility:** Firefox 67, Firefox ESR 60.7\
3034 **CCK2 Equivalent:** N/A\
3035 **Preferences Affected:** `network.dns.disablePrefetch`,`network.dns.disablePrefetchFromHTTPS`
3036
3037 #### Windows (GPO)
3038 ```
3039 Software\Policies\Mozilla\Firefox\NetworkPrediction = 0x1 | 0x0
3040 ```
3041 #### Windows (Intune)
3042 OMA-URI:
3043 ```
3044 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NetworkPrediction
3045 ```
3046 Value (string):
3047 ```
3048 <enabled/> or <disabled/>
3049 ```
3050 #### macOS
3051 ```
3052 <dict>
3053   <key>NetworkPrediction</key>
3054   <true/> | <false/>
3055 </dict>
3056 ```
3057 #### policies.json
3058 ```
3059 {
3060   "policies": {
3061     "NetworkPrediction": true | false
3062 }
3063 ```
3064 ### NewTabPage
3065 Enable or disable the New Tab page.
3066
3067 **Compatibility:** Firefox 68, Firefox ESR 68\
3068 **CCK2 Equivalent:** N/A\
3069 **Preferences Affected:** `browser.newtabpage.enabled`
3070
3071 #### Windows (GPO)
3072 ```
3073 Software\Policies\Mozilla\Firefox\NewTabPage = 0x1 | 0x0
3074 ```
3075 #### Windows (Intune)
3076 OMA-URI:
3077 ```
3078 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NewTabPage
3079 ```
3080 Value (string):
3081 ```
3082 <enabled/> or <disabled/>
3083 ```
3084 #### macOS
3085 ```
3086 <dict>
3087   <key>NewTabPage</key>
3088   <true/> | <false/>
3089 </dict>
3090 ```
3091 #### policies.json
3092 ```
3093 {
3094   "policies": {
3095     "NewTabPage": true | false
3096 }
3097 ```
3098 ### NoDefaultBookmarks
3099 Disable the creation of default bookmarks.
3100
3101 This policy is only effective if the user profile has not been created yet.
3102
3103 **Compatibility:** Firefox 60, Firefox ESR 60\
3104 **CCK2 Equivalent:** `removeDefaultBookmarks`\
3105 **Preferences Affected:** N/A
3106
3107 #### Windows (GPO)
3108 ```
3109 Software\Policies\Mozilla\Firefox\NoDefaultBookmarks = 0x1 | 0x0
3110 ```
3111 #### Windows (Intune)
3112 OMA-URI:
3113 ```
3114 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NoDefaultBookmarks
3115 ```
3116 Value (string):
3117 ```
3118 <enabled/> or <disabled/>
3119 ```
3120 #### macOS
3121 ```
3122 <dict>
3123   <key>NoDefaultBookmarks</key>
3124   <true/> | <false/>
3125 </dict>
3126 ```
3127 #### policies.json
3128 ```
3129 {
3130   "policies": {
3131     "NoDefaultBookmarks": true | false
3132   }
3133 }
3134 ```
3135 ### OfferToSaveLogins
3136 Control whether or not Firefox offers to save passwords.
3137
3138 **Compatibility:** Firefox 60, Firefox ESR 60\
3139 **CCK2 Equivalent:** `dontRememberPasswords`\
3140 **Preferences Affected:** `signon.rememberSignons`
3141
3142 #### Windows (GPO)
3143 ```
3144 Software\Policies\Mozilla\Firefox\OfferToSaveLogins = 0x1 | 0x0
3145 ```
3146 #### Windows (Intune)
3147 OMA-URI:
3148 ```
3149 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OfferToSaveLogins
3150 ```
3151 Value (string):
3152 ```
3153 <enabled/> or <disabled/>
3154 ```
3155 #### macOS
3156 ```
3157 <dict>
3158   <key>OfferToSaveLogins</key>
3159   <true/> | <false/>
3160 </dict>
3161 ```
3162 #### policies.json
3163 ```
3164 {
3165   "policies": {
3166     "OfferToSaveLogins": true | false
3167   }
3168 }
3169 ```
3170 ### OfferToSaveLoginsDefault
3171 Sets the default value of signon.rememberSignons without locking it.
3172
3173 **Compatibility:** Firefox 70, Firefox ESR 60.2\
3174 **CCK2 Equivalent:** `dontRememberPasswords`\
3175 **Preferences Affected:** `signon.rememberSignons`
3176
3177 #### Windows (GPO)
3178 ```
3179 Software\Policies\Mozilla\Firefox\OfferToSaveLoginsDefault = 0x1 | 0x0
3180 ```
3181 #### Windows (Intune)
3182 OMA-URI:
3183 ```
3184 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OfferToSaveLoginsDefault
3185 ```
3186 Value (string):
3187 ```
3188 <enabled/> or <disabled/>
3189 ```
3190 #### macOS
3191 ```
3192 <dict>
3193   <key>OfferToSaveLoginsDefault</key>
3194   <true/> | <false/>
3195 </dict>
3196 ```
3197 #### policies.json
3198 ```
3199 {
3200   "policies": {
3201     "OfferToSaveLoginsDefault": true | false
3202   }
3203 }
3204 ```
3205 ### OverrideFirstRunPage
3206 Override the first run page. If the value is blank, no first run page is displayed.
3207
3208 **Compatibility:** Firefox 60, Firefox ESR 60\
3209 **CCK2 Equivalent:** `welcomePage`,`noWelcomePage`\
3210 **Preferences Affected:** `startup.homepage_welcome_url`
3211
3212 #### Windows (GPO)
3213 ```
3214 Software\Policies\Mozilla\Firefox\OverrideFirstRunPage = "http://example.org"
3215 ```
3216 #### Windows (Intune)
3217 OMA-URI:
3218 ```
3219 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OverrideFirstRunPage
3220 ```
3221 Value (string):
3222 ```
3223 <enabled/>
3224 <data id="OverridePage" value="https://example.com"/>
3225 ```
3226 #### macOS
3227 ```
3228 <dict>
3229   <key>OverrideFirstRunPage</key>
3230   <string>http://example.org</string>
3231 </dict>
3232 ```
3233 #### policies.json
3234 ```
3235 {
3236   "policies": {
3237     "OverrideFirstRunPage": "http://example.org"
3238 }
3239 ```
3240 ### OverridePostUpdatePage
3241 Override the upgrade page. If the value is blank, no upgrade page is displayed.
3242
3243 **Compatibility:** Firefox 60, Firefox ESR 60\
3244 **CCK2 Equivalent:** `upgradePage`,`noUpgradePage`\
3245 **Preferences Affected:** `startup.homepage_override_url`
3246
3247 #### Windows (GPO)
3248 ```
3249 Software\Policies\Mozilla\Firefox\OverridePostUpdatePage = "http://example.org"
3250 ```
3251 #### Windows (Intune)
3252 OMA-URI:
3253 ```
3254 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OverridePostUpdatePage
3255 ```
3256 Value (string):
3257 ```
3258 <enabled/>
3259 <data id="OverridePage" value="https://example.com"/>
3260 ```
3261 #### macOS
3262 ```
3263 <dict>
3264   <key>OverridePostUpdatePage</key>
3265   <string>http://example.org</string>
3266 </dict>
3267 ```
3268 #### policies.json
3269 ```
3270 {
3271   "policies": {
3272     "OverridePostUpdatePage": "http://example.org"
3273 }
3274 ```
3275 ### PasswordManagerEnabled
3276 Remove access to the password manager via preferences and blocks about:logins on Firefox 70.
3277
3278 **Compatibility:** Firefox 70, Firefox ESR 60.2\
3279 **CCK2 Equivalent:** N/A\
3280 **Preferences Affected:** `pref.privacy.disable_button.view_passwords`
3281
3282 #### Windows (GPO)
3283 ```
3284 Software\Policies\Mozilla\Firefox\PasswordManagerEnabled = 0x1 | 0x0
3285 ```
3286 #### Windows (Intune)
3287 OMA-URI:
3288 ```
3289 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PasswordManagerEnabled
3290 ```
3291 Value (string):
3292 ```
3293 <enabled/> or <disabled/>
3294 ```
3295 #### macOS
3296 ```
3297 <dict>
3298   <key>PasswordManagerEnabled</key>
3299   <true/> | <false/>
3300 </dict>
3301 ```
3302 #### policies.json
3303 ```
3304 {
3305   "policies": {
3306     "PasswordManagerEnabled": true | false
3307   }
3308 }
3309 ```
3310 ### PDFjs
3311 Disable or configure PDF.js, the built-in PDF viewer.
3312
3313 If `Enabled` is set to false, the built-in PDF viewer is disabled.
3314
3315 If `EnablePermissions` is set to true, the built-in PDF viewer will honor document permissions like preventing the copying of text.
3316
3317 Note: DisableBuiltinPDFViewer has not been deprecated. You can either continue to use it, or switch to using PDFjs->Enabled to disable the built-in PDF viewer. This new permission was added because we needed a place for PDFjs->EnabledPermissions.
3318
3319 **Compatibility:** Firefox 77, Firefox ESR 68.9\
3320 **CCK2 Equivalent:** N/A\
3321 **Preferences Affected:** `pdfjs.diabled`,`pdfjs.enablePermissions`
3322
3323 #### Windows (GPO)
3324 ```
3325 Software\Policies\Mozilla\Firefox\PDFjs\Enabled = 0x1 | 0x0
3326 Software\Policies\Mozilla\Firefox\PDFjs\EnablePermissions = 0x1 | 0x0
3327 ```
3328 #### Windows (Intune)
3329 OMA-URI:
3330 ```
3331 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PDFjs/PDFjs_Enabled
3332 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PDFjs/PDFjs_EnablePermissions
3333 ```
3334 Value (string):
3335 ```
3336 <enabled/>or <disabled/>
3337 ```
3338 #### macOS
3339 ```
3340 <dict>
3341   <key>PDFjs</key>
3342   <dict>
3343     <key>Enabled</key>
3344     <true/> | <false/>
3345     <key><EnablePermissions</key>
3346     <true/> | <false/>
3347   </dict>
3348 </dict>
3349 ```
3350 #### policies.json
3351 ```
3352 {
3353   "policies": {
3354     "PSFjs": {
3355       "Enabled": true | false,
3356       "EnablePermissions": true | false
3357     }
3358 }
3359 ```
3360 ### Permissions
3361 Set permissions associated with camera, microphone, location, notifications, autoplay, and virtual reality. Because these are origins, not domains, entries with unique ports must be specified separately. See examples below.
3362
3363 `Allow` is a list of origins where the feature is allowed.
3364
3365 `Block` is a list of origins where the feature is not allowed.
3366
3367 `BlockNewRequests` determines whether or not new requests can be made for the feature.
3368
3369 `Locked` prevents the user from changing preferences for the feature.
3370
3371 `Default` specifies the default value for Autoplay. block-audio-video is not supported on Firefox ESR 68.
3372
3373 **Compatibility:** Firefox 62, Firefox ESR 60.2 (Autoplay added in Firefox 74, Firefox ESR 68.6, Autoplay Default/Locked added in Firefox 76, Firefox ESR 68.8, VirtualReality added in Firefox 80, Firefox ESR 78.2)\
3374 **CCK2 Equivalent:** N/A\
3375 **Preferences Affected:** `permissions.default.camera`,`permissions.default.microphone`,`permissions.default.geo`,`permissions.default.desktop-notification`,`media.autoplay.default`.`permissions.default.xr`
3376
3377 #### Windows (GPO)
3378 ```
3379 Software\Policies\Mozilla\Firefox\Permissions\Camera\Allow\1 = "https://example.org"
3380 Software\Policies\Mozilla\Firefox\Permissions\Camera\Allow\2 = "https://example.org:1234"
3381 Software\Policies\Mozilla\Firefox\Permissions\Camera\Block\1 = "https://example.edu"
3382 Software\Policies\Mozilla\Firefox\Permissions\Camera\BlockNewRequests = 0x1 | 0x0
3383 Software\Policies\Mozilla\Firefox\Permissions\Camera\Locked = 0x1 | 0x0
3384 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Allow\1 = "https://example.org"
3385 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Block\1 = "https://example.edu"
3386 Software\Policies\Mozilla\Firefox\Permissions\Microphone\BlockNewRequests = 0x1 | 0x0
3387 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Locked = 0x1 | 0x0
3388 Software\Policies\Mozilla\Firefox\Permissions\Location\Allow\1 = "https://example.org"
3389 Software\Policies\Mozilla\Firefox\Permissions\Location\Block\1 = "https://example.edu"
3390 Software\Policies\Mozilla\Firefox\Permissions\Location\BlockNewRequests = 0x1 | 0x0
3391 Software\Policies\Mozilla\Firefox\Permissions\Location\Locked = 0x1 | 0x0
3392 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Allow\1 = "https://example.org"
3393 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Block\1 = "https://example.edu"
3394 Software\Policies\Mozilla\Firefox\Permissions\Notifications\BlockNewRequests = 0x1 | 0x0
3395 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Locked = 0x1 | 0x0
3396 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Allow\1 = "https://example.org"
3397 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Block\1 = "https://example.edu"
3398 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Default = "allow-audio-video" | "block-audio" | "block-audio-video"
3399 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Locked = 0x1 | 0x0
3400 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\Allow\1 = "https://example.org"
3401 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\Block\1 = "https://example.edu"
3402 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\BlockNewRequests = 0x1 | 0x0
3403 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\Locked = 0x1 | 0x0
3404 ```
3405 #### Windows (Intune)
3406 OMA-URI:
3407 ```
3408 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Location/Location_BlockNewRequests
3409 ```
3410 Value (string):
3411 ```
3412 <enabled/> or <disabled/>
3413 ```
3414 OMA-URI:
3415 ```
3416 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Location/Location_Locked
3417 ```
3418 Value (string):
3419 ```
3420 <enabled/> or <disabled/>
3421 ```
3422 OMA-URI:
3423 ```
3424 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_Allow
3425 ```
3426 Value (string):
3427 ```
3428 <enabled/>
3429 <data id="Permissions" value="1&#xF000;https://example.org"/>
3430 ```
3431 OMA-URI:
3432 ```
3433 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_BlockNewRequests
3434 ```
3435 Value (string):
3436 ```
3437 <enabled/> or <disabled/>
3438 ```
3439 OMA-URI:
3440 ```
3441 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_Locked
3442 ```
3443 Value (string):
3444 ```
3445 <enabled/> or <disabled/>
3446 ```
3447 OMA-URI:
3448 ```
3449 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Allow
3450 ```
3451 Value (string):
3452 ```
3453 <enabled/>
3454 <data id="Permissions" value="1&#xF000;https://example.org"/>
3455 ```
3456 OMA-URI:
3457 ```
3458 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Block
3459 ```
3460 Value (string):
3461 ```
3462 <enabled/>
3463 <data id="Permissions" value="1&#xF000;https://example.edu"/>
3464 ```
3465 OMA-URI:
3466 ```
3467 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Default
3468 ```
3469 Value (string):
3470 ```
3471 <enabled/>
3472 <data id="Autoplay_Default" value="allow-audio-video | block-audio | block-audio-video"/>
3473 ```
3474 OMA-URI:
3475 ```
3476 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Locked
3477 ```
3478 Value (string):
3479 ```
3480 <enabled/> or <disabled/>
3481 ```
3482 OMA-URI:
3483 ```
3484 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_Allow
3485 ```
3486 Value (string):
3487 ```
3488 <enabled/>
3489 <data id="Permissions" value="1&#xF000;https://example.org"/>
3490 ```
3491 OMA-URI:
3492 ```
3493 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_Block
3494 ```
3495 Value (string):
3496 ```
3497 <enabled/>
3498 <data id="Permissions" value="1&#xF000;https://example.edu"/>
3499 ```
3500 OMA-URI:
3501 ```
3502 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_BlockNewRequests
3503 ```
3504 Value (string):
3505 ```
3506 <enabled/> or <disabled/>
3507 ```
3508 OMA-URI:
3509 ```
3510 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_Locked
3511 ```
3512 Value (string):
3513 ```
3514 <enabled/> or <disabled/>
3515 ```
3516 #### macOS
3517 ```
3518 <dict>
3519   <key>Permissions</key>
3520   <dict>
3521     <key>Camera</key>
3522     <dict>
3523       <key>Allow</key>
3524       <array>
3525         <string>https://example.org</string>
3526         <string>https://example.org:1234</string>
3527       </array>
3528       <key>Block</key>
3529       <array>
3530         <string>https://example.edu</string>
3531       </array>
3532       <key>BlockNewRequests</key>
3533       <true/> | <false/>
3534       <key>Locked</key>
3535       <true/> | <false/>
3536     </dict>
3537     <key>Microphone</key>
3538     <dict>
3539       <key>Allow</key>
3540       <array>
3541         <string>https://example.org</string>
3542       </array>
3543       <key>Block</key>
3544       <array>
3545         <string>https://example.edu</string>
3546       </array>
3547       <key>BlockNewRequests</key>
3548       <true/> | <false/>
3549       <key>Locked</key>
3550       <true/> | <false/>
3551     </dict>
3552     <key>Location</key>
3553     <dict>
3554       <key>Allow</key>
3555       <array>
3556         <string>https://example.org</string>
3557       </array>
3558       <key>Block</key>
3559       <array>
3560         <string>https://example.edu</string>
3561       </array>
3562       <key>BlockNewRequests</key>
3563       <true/> | <false/>
3564       <key>Locked</key>
3565       <true/> | <false/>
3566     </dict>
3567     <key>Notifications</key>
3568     <dict>
3569       <key>Allow</key>
3570       <array>
3571         <string>https://example.org</string>
3572       </array>
3573       <key>Block</key>
3574       <array>
3575         <string>https://example.edu</string>
3576       </array>
3577       <key>BlockNewRequests</key>
3578       <true/>
3579       <key>Locked</key>
3580       <true/>
3581     </dict>
3582     <key>Autoplay</key>
3583     <dict>
3584       <key>Allow</key>
3585       <array>
3586         <string>https://example.org</string>
3587       </array>
3588       <key>Block</key>
3589       <array>
3590         <string>https://example.edu</string>
3591       </array>
3592       <key>Default</key>
3593       <string>allow-audio-video | block-audio | block-audio-video</string>
3594       <key>Locked</key>
3595       <true/> | <false/>
3596     </dict>
3597   </dict>
3598 </dict>
3599 ```
3600 #### policies.json
3601 ```
3602 {
3603   "policies": {
3604     "Permissions": {
3605       "Camera": {
3606         "Allow": ["https://example.org","https://example.org:1234"],
3607         "Block": ["https://example.edu"],
3608         "BlockNewRequests": true | false,
3609         "Locked": true | false
3610       },
3611       "Microphone": {
3612         "Allow": ["https://example.org"],
3613         "Block": ["https://example.edu"],
3614         "BlockNewRequests": true | false,
3615         "Locked": true | false
3616       },
3617       "Location": {
3618         "Allow": ["https://example.org"],
3619         "Block": ["https://example.edu"],
3620         "BlockNewRequests": true | false,
3621         "Locked": true | false
3622       },
3623       "Notifications": {
3624         "Allow": ["https://example.org"],
3625         "Block": ["https://example.edu"],
3626         "BlockNewRequests": true | false,
3627         "Locked": true | false
3628       },
3629       "Autoplay": {
3630         "Allow": ["https://example.org"],
3631         "Block": ["https://example.edu"],
3632         "Default": "allow-audio-video" | "block-audio" | "block-audio-video",
3633         "Locked": true | false
3634       }
3635     }
3636   }
3637 }
3638 ```
3639 ### PictureInPicture
3640
3641 Enable or disable Picture-in-Picture.
3642
3643 **Compatibility:** Firefox 78, Firefox ESR 78\
3644 **CCK2 Equivalent:** N/A\
3645 **Preferences Affected:** `media.videocontrols.picture-in-picture.video-toggle.enabled`
3646
3647 #### Windows (GPO)
3648 ```
3649 Software\Policies\Mozilla\Firefox\PictureInPicture = 0x1 | 0x0
3650 ```
3651 #### Windows (Intune)
3652 OMA-URI:
3653 ```
3654 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PictureInPicture
3655 ```
3656 Value (string):
3657 ```
3658 <enabled/> or <disabled/>
3659 ```
3660 #### macOS
3661 ```
3662 <dict>
3663   <key>PictureInPicture</key>
3664   <true/> | <false/>
3665 </dict>
3666 ```
3667 #### policies.json
3668 ```
3669 {
3670   "policies": {
3671     "PictureInPicture": true | false
3672   }
3673 }
3674 ```
3675 ### PopupBlocking
3676 Configure the default pop-up window policy as well as origins for which pop-up windows are allowed.
3677
3678 `Allow` is a list of origins where popup-windows are allowed.
3679
3680 `Default` determines whether or not pop-up windows are allowed by default.
3681
3682 `Locked` prevents the user from changing pop-up preferences.
3683
3684 **Compatibility:** Firefox 60, Firefox ESR 60\
3685 **CCK2 Equivalent:** `permissions.popup`\
3686 **Preferences Affected:** `dom.disable_open_during_load`
3687
3688 #### Windows (GPO)
3689 ```
3690 Software\Policies\Mozilla\Firefox\PopupBlocking\Allow\1 = "https://example.org"
3691 Software\Policies\Mozilla\Firefox\PopupBlocking\Allow\2 = "https://example.edu"
3692 Software\Policies\Mozilla\Firefox\PopupBlocking\Default = 0x1 | 0x0
3693 Software\Policies\Mozilla\Firefox\PopupBlocking\Locked = 0x1 | 0x0
3694 ```
3695 #### Windows (Intune)
3696 OMA-URI:
3697 ```
3698 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Allow
3699 ```
3700 Value (string):
3701 ```
3702 <enabled/>
3703 <data id="Permissions" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
3704 ```
3705 OMA-URI:
3706 ```
3707 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Default
3708 ```
3709 Value (string):
3710 ```
3711 <enabled/> or <disabled/>
3712 ```
3713 OMA-URI:
3714 ```
3715 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Locked
3716 ```
3717 Value (string):
3718 ```
3719 <enabled/> or <disabled/>
3720 ```
3721 #### macOS
3722 ```
3723 <dict>
3724   <key>PopupBlocking</key>
3725   <dict>
3726     <key>Allow</key>
3727     <array>
3728       <string>http://example.org</string>
3729       <string>http://example.edu</string>
3730     </array>
3731     <key>Default</key>
3732     <true/> | <false/>
3733     <key>Locked</key>
3734     <true/> | <false/>
3735   </dict>
3736 </dict>
3737 ```
3738 #### policies.json
3739 ```
3740 {
3741   "policies": {
3742     "PopupBlocking": {
3743       "Allow": ["http://example.org/",
3744                 "http://example.edu/"],
3745       "Default": true | false,
3746       "Locked": true | false
3747     }
3748   }
3749 }
3750 ```
3751 ### Preferences
3752 Set and lock certain preferences.
3753
3754 **Compatibility:** See below\
3755 **CCK2 Equivalent:** `preferences`\
3756 **Preferences Affected:** See below
3757
3758 | Preference | Type | Compatibility | Default
3759 | --- | --- | --- | ---
3760 | accessibility.force_disabled | integer | Firefox 70, Firefox ESR 68.2 | 0
3761 | &nbsp;&nbsp;&nbsp;&nbsp;If set to 1, platform accessibility is disabled.
3762 | app.update.auto (Deprecated - Switch to AppAutoUpdate policy) | boolean | Firefox 68, Firefox ESR 68 | true
3763 | &nbsp;&nbsp;&nbsp;&nbsp;If false, Firefox doesn't automatically install update.
3764 | browser.bookmarks.autoExportHTML | boolean | Firefox 70, Firefox ESR 68.2 | false
3765 | &nbsp;&nbsp;&nbsp;&nbsp;If true, bookmarks are exported on shutdown.
3766 | browser.bookmarks.file | string | Firefox 70, Firefox ESR 68.2 | N/A
3767 | &nbsp;&nbsp;&nbsp;&nbsp;If set, the name of the file where bookmarks are exported and imported.
3768 | browser.bookmarks.restore_default_bookmarks | boolean | Firefox 70, Firefox ESR 68.2 | N/A
3769 | &nbsp;&nbsp;&nbsp;&nbsp;If true, bookmarks are restored to their defaults.
3770 | browser.cache.disk.enable | boolean | Firefox 68, Firefox ESR 68 | true
3771 | &nbsp;&nbsp;&nbsp;&nbsp;If false, don't store cache on the hard drive.
3772 | ~browser.cache.disk.parent_directory~ | string | Firefox 68, Firefox ESR 68 | Profile temporary directory
3773 | &nbsp;&nbsp;&nbsp;&nbsp;~If set, changes the location of the disk cache.~ This policy doesn't work. It's being worked on.
3774 | browser.fixup.dns_first_for_single_words | boolean | Firefox 68, Firefox ESR 68 | false
3775 | &nbsp;&nbsp;&nbsp;&nbsp;If true, single words are sent to DNS, not directly to search.
3776 | browser.newtabpage.activity-stream.default.sites | string | Firefox 72, ESR 68.4 | Locale dependent
3777 | &nbsp;&nbsp;&nbsp;&nbsp;If set, a list of URLs to use as the default top sites on the new tab page. Due to Firefox limitations, search sites can't be added. In addition, sites with the same name but different TLDs (example.org/example.com) will not display properly.
3778 | browser.places.importBookmarksHTML | boolean | Firefox 70, Firefox ESR 68.2
3779 | &nbsp;&nbsp;&nbsp;&nbsp;If true, bookmarks are always imported on startup.
3780 | browser.safebrowsing.phishing.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
3781 | &nbsp;&nbsp;&nbsp;&nbsp;If false, phishing protection is not enabled (Not recommended)
3782 | browser.safebrowsing.malware.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
3783 | &nbsp;&nbsp;&nbsp;&nbsp;If false, malware protection is not enabled (Not recommended)
3784 | browser.search.update | boolean | Firefox 68, Firefox ESR 68 | true
3785 | &nbsp;&nbsp;&nbsp;&nbsp;If false, updates for search engines are not checked.
3786 | browser.slowStartup.notificationDisabled | boolean | Firefox 70, Firefox ESR 68.2 | false
3787 | &nbsp;&nbsp;&nbsp;&nbsp;If true, a notification isn't shown if startup is slow.
3788 | browser.tabs.warnOnClose | boolean | Firefox 68, Firefox ESR 68 | true
3789 | &nbsp;&nbsp;&nbsp;&nbsp;If false, there is no warning when the browser is closed.
3790 | browser.taskbar.previews.enable | boolean | Firefox 70, Firefox ESR 68.2 (Windows only) | false
3791 | &nbsp;&nbsp;&nbsp;&nbsp;If true, tab previews are shown in the Windows taskbar.
3792 | browser.urlbar.suggest.bookmark | boolean | Firefox 68, Firefox ESR 68 | true
3793 | &nbsp;&nbsp;&nbsp;&nbsp;If false, bookmarks aren't suggested when typing in the URL bar.
3794 | browser.urlbar.suggest.history | boolean | Firefox 68, Firefox ESR 68 | true
3795 | &nbsp;&nbsp;&nbsp;&nbsp;If false, history isn't suggested when typing in the URL bar.
3796 | browser.urlbar.suggest.openpage | boolean | Firefox 68, Firefox ESR 68 | true
3797 | &nbsp;&nbsp;&nbsp;&nbsp;If false, open tabs aren't suggested when typing in the URL bar.
3798 | datareporting.policy.dataSubmissionPolicyBypassNotification | boolean | Firefox 68, Firefox ESR 68 | false
3799 | &nbsp;&nbsp;&nbsp;&nbsp;If true, don't show the privacy policy tab on first run.
3800 | dom.allow_scripts_to_close_windows | boolean | Firefox 70, Firefox ESR 68.2 | false
3801 | &nbsp;&nbsp;&nbsp;&nbsp;If false, web page can close windows.
3802 | dom.disable_window_flip | boolean | Firefox 68, Firefox ESR 68 | true
3803 | &nbsp;&nbsp;&nbsp;&nbsp;If false, web pages can focus and activate windows.
3804 | dom.disable_window_move_resize | boolean | Firefox 68, Firefox ESR 68 | false
3805 | &nbsp;&nbsp;&nbsp;&nbsp;If true, web pages can't move or resize windows.
3806 | dom.event.contextmenu.enabled | boolean | Firefox 68, Firefox ESR 68 | true
3807 | &nbsp;&nbsp;&nbsp;&nbsp;If false, web pages can't override context menus.
3808 | dom.keyboardevent.keypress.hack.dispatch_non_printable_keys.addl | string | Firefox 68, Firefox ESR 68 | N/A
3809 | &nbsp;&nbsp;&nbsp;&nbsp;See https://support.mozilla.org/en-US/kb/dom-events-changes-introduced-firefox-66
3810 | dom.keyboardevent.keypress.hack.use_legacy_keycode_and_charcode.addl | string | Firefox 68, Firefox ESR 68 | N/A
3811 | &nbsp;&nbsp;&nbsp;&nbsp;See https://support.mozilla.org/en-US/kb/dom-events-changes-introduced-firefox-66
3812 | dom.xmldocument.load.enabled | boolean | Firefox ESR 68.5 | true.
3813 | &nbsp;&nbsp;&nbsp;&nbsp;If false, XMLDocument.load is not available.
3814 | dom.xmldocument.async.enabled | boolean | Firefox ESR 68.5 | true
3815 | &nbsp;&nbsp;&nbsp;&nbsp;If false, XMLDocument.async is not available.
3816 | extensions.blocklist.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
3817 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the extensions blocklist is not used (Not recommended)
3818 | extensions.getAddons.showPane | boolean | Firefox 68, Firefox ESR 68 | N/A
3819 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the Recommendations tab is not displayed in the Add-ons Manager.
3820 | extensions.htmlaboutaddons.recommendations.enabled | boolean | Firefox 72, Firefox ESR 68.4 | true
3821 | &nbsp;&nbsp;&nbsp;&nbsp;If false, recommendations are not shown on the Extensions tab in the Add-ons Manager.
3822 | geo.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
3823 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the geolocation API is disabled. | Language dependent
3824 | intl.accept_languages | string | Firefox 70, Firefox ESR 68.2
3825 | &nbsp;&nbsp;&nbsp;&nbsp;If set, preferred language for web pages.
3826 | media.eme.enabled (Deprecated - Switch to EncryptedMediaExtensions policy) | boolean | Firefox 70, Firefox ESR 68.2 | true
3827 | &nbsp;&nbsp;&nbsp;&nbsp;If false, Encrypted Media Extensions are not enabled.
3828 | media.gmp-gmpopenh264.enabled | boolean | Firefox 68, Firefox ESR 68 | true
3829 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the OpenH264  plugin is not downloaded.
3830 | media.gmp-widevinecdm.enabled | boolean | Firefox 68, Firefox ESR 68 | true
3831 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the Widevine plugin is not downloaded.
3832 | media.peerconnection.enabled | boolean | Firefox 72, Firefox ESR 68.4 | true
3833 | &nbsp;&nbsp;&nbsp;&nbsp;If false, WebRTC is disabled
3834 | media.peerconnection.ice.obfuscate_host_addresses.whitelist (Deprecated) | string | Firefox 72, Firefox ESR 68.4 | N/A
3835 | &nbsp;&nbsp;&nbsp;&nbsp;If set, a list of domains for which mDNS hostname obfuscation is
3836 disabled
3837 | media.peerconnection.ice.obfuscate_host_addresses.blocklist | string | Firefox 79, Firefox ESR 78.1 | N/A
3838 | &nbsp;&nbsp;&nbsp;&nbsp;If set, a list of domains for which mDNS hostname obfuscation is
3839 disabled
3840 | network.dns.disableIPv6 | boolean | Firefox 68, Firefox ESR 68 | false
3841 | &nbsp;&nbsp;&nbsp;&nbsp;If true, IPv6 DNS lokoups are disabled.
3842 | network.IDN_show_punycode | boolean | Firefox 68, Firefox ESR 68 | false
3843 | &nbsp;&nbsp;&nbsp;&nbsp;If true, display the punycode version of internationalized domain names.
3844 | places.history.enabled | boolean | Firefox 68, Firefox ESR 68 | true
3845 | &nbsp;&nbsp;&nbsp;&nbsp;If false, history is not enabled.
3846 | print.save_print_settings | boolean | Firefox 70, Firefox ESR 68.2 | true
3847 | &nbsp;&nbsp;&nbsp;&nbsp;If false, print settings are not saved between jobs.
3848 | security.default_personal_cert | string | Firefox 68, Firefox ESR 68 | Ask Every Time
3849 | &nbsp;&nbsp;&nbsp;&nbsp;If set to Select Automatically, Firefox automatically chooses the default personal certificate.
3850 | security.mixed_content.block_active_content | boolean | Firefox 70, Firefox ESR 68.2 | true
3851 | &nbsp;&nbsp;&nbsp;&nbsp;If false, mixed active content (HTTP and HTTPS) is not blocked.
3852 | security.osclientcerts.autoload | boolean | Firefox 72 (Windows), Firefox 75 (macOS)  | false
3853 | &nbsp;&nbsp;&nbsp;&nbsp;If true, client certificates are loaded from the operating system certificate store.
3854 | security.ssl.errorReporting.enabled | boolean | Firefox 68, Firefox ESR 68 | true
3855 | &nbsp;&nbsp;&nbsp;&nbsp;If false, SSL errors cannot be sent to Mozilla.
3856 | security.tls.hello_downgrade_check | boolean | Firefox 72, Firefox ESR 68.4 | true
3857 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the TLS 1.3 downgrade check is disabled.
3858 | ui.key.menuAccessKeyFocuses | boolean | Firefox 68, Firefox ESR 68 | true
3859 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the Alt key doesn't show the menubar on Windows.
3860 | widget.content.gtk-theme-override | string | Firefox 72, Firefox ESR 68.4 (Linux only) | N/A
3861 | &nbsp;&nbsp;&nbsp;&nbsp;If set, overrides the GTK theme for widgets.
3862 #### Windows (GPO)
3863 ```
3864 Software\Policies\Mozilla\Firefox\Preferences\boolean_preference_name = 0x1 | 0x0
3865 Software\Policies\Mozilla\Firefox\Preferences\string_preference_name = "string_value"
3866 ```
3867 #### Windows (Intune)
3868 OMA-URI: (periods are replaced by underscores)
3869 ```
3870 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Preferences/boolean_preference_name
3871 ```
3872 Value (string):
3873 ```
3874 <enabled/> or <disabled/>
3875 ```
3876 OMA-URI: (periods are replaced by underscores)
3877 ```
3878 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Preferences/string_preference_name
3879 ```
3880 Value (string):
3881 ```
3882 <enabled/>
3883 <data id="Preferences_String" value="string_value"/>
3884 ```
3885 #### macOS
3886 ```
3887 <dict>
3888   <key>Preferences</key>
3889   <dict>
3890     <key>boolean_preference_name</key>
3891     <true/> | <false/>
3892     <key>string_preference_name</key>
3893     <string>string_value</string>
3894   </dict>
3895 </dict>
3896 ```
3897 #### policies.json
3898 ```
3899 {
3900   "policies": {
3901     "Preferences": {
3902       "boolean_preference_name": true | false,
3903       "string_preference_name": "string_value"
3904     }
3905   }
3906 }
3907 ```
3908 ### PromptForDownloadLocation
3909 Ask where to save each file before downloading.
3910
3911 **Compatibility:** Firefox 68, Firefox ESR 68\
3912 **CCK2 Equivalent:** N/A\
3913 **Preferences Affected:** `browser.download.useDownloadDir`
3914
3915 #### Windows (GPO)
3916 ```
3917 Software\Policies\Mozilla\Firefox\PromptForDownloadLocation = 0x1 | 0x0
3918 ```
3919 #### Windows (Intune)
3920 OMA-URI:
3921 ```
3922 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PromptForDownloadLocation
3923 ```
3924 Value (string):
3925 ```
3926 <enabled/> or <disabled/>
3927 ```
3928 #### macOS
3929 ```
3930 <dict>
3931   <key>PromptForDownloadLocation</key>
3932   <true/> | <false/>
3933 </dict>
3934 ```
3935 #### policies.json
3936 ```
3937 {
3938   "policies": {
3939     "PromptForDownloadLocation": true | false
3940   }
3941 }
3942 ```
3943 ### Proxy
3944 Configure proxy settings. These settings correspond to the connection settings in Firefox preferences.
3945 To specify ports, append them to the hostnames with a colon (:).
3946
3947 `Mode` is the proxy method being used.
3948
3949 `Locked` is whether or not proxy settings can be changed.
3950
3951 `HTTPProxy` is the HTTP proxy server.
3952
3953 `UseHTTPProxyForAllProtocols` is whether or not the HTTP proxy should be used for all other proxies.
3954
3955 `SSLProxy` is the SSL proxy server.
3956
3957 `FTPProxy` is the FTP proxy server.
3958
3959 `SOCKSProxy` is the SOCKS proxy server
3960
3961 `SOCKSVersion` is the SOCKS version (4 or 5)
3962
3963 `Passthrough` is list of hostnames or IP addresses that will not be proxied. Use `<local>` to bypass proxying for all hostnames which do not contain periods.
3964
3965 `AutoConfigURL` is a  URL for proxy configuration (only used if Mode is autoConfig).
3966
3967 `AutoLogin` means do not prompt for authentication if password is saved.
3968
3969 `UseProxyForDNS` to use proxy DNS when using SOCKS v5.
3970
3971 **Compatibility:** Firefox 60, Firefox ESR 60\
3972 **CCK2 Equivalent:** `networkProxy*`\
3973 **Preferences Affected:** `network.proxy.type`,`network.proxy.autoconfig_url`,`network.proxy.socks_remote_dns`,`signon.autologin.proxy`,`network.proxy.socks_version`,`network.proxy.no_proxies_on`,`network.proxy.share_proxy_settings`,`network.proxy.http`,`network.proxy.http_port`,`network.proxy.ftp`,`network.proxy.ftp_port`,`network.proxy.ssl`,`network.proxy.ssl_port`,`network.proxy.socks`,`network.proxy.socks_port`
3974
3975 #### Windows (GPO)
3976 ```
3977 Software\Policies\Mozilla\Firefox\Proxy\Mode = "none" | "system" | "manual" | "autoDetect" | "autoConfig"
3978 Software\Policies\Mozilla\Firefox\Proxy\Locked = 0x1 | 0x0
3979 Software\Policies\Mozilla\Firefox\=Proxy\HTTPProxy = https://httpproxy.example.com
3980 Software\Policies\Mozilla\Firefox\Proxy\UseHTTPProxyForAllProtocols = 0x1 | 0x0
3981 Software\Policies\Mozilla\Firefox\Proxy\SSLProxy = https://sslproxy.example.com
3982 Software\Policies\Mozilla\Firefox\Proxy\FTPProxy = https://ftpproxy.example.com
3983 Software\Policies\Mozilla\Firefox\Proxy\SOCKSProxy = https://socksproxy.example.com
3984 Software\Policies\Mozilla\Firefox\Proxy\SOCKSVersion = 0x4 | 0x5
3985 Software\Policies\Mozilla\Firefox\Proxy\Passthrough = <local>
3986 Software\Policies\Mozilla\Firefox\Proxy\AutoConfigURL = URL_TO_AUTOCONFIG
3987 Software\Policies\Mozilla\Firefox\Proxy\AutoLogin = 0x1 | 0x0
3988 Software\Policies\Mozilla\Firefox\Proxy\UseProxyForDNS = 0x1 | 0x0
3989 ```
3990 #### Windows (Intune)
3991 OMA-URI:
3992 ```
3993 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Proxy
3994 ```
3995 Value (string):
3996 ```
3997 <enabled/>
3998 <data id="ProxyLocked" value="true | false"/>
3999 <data id="ConnectionType" value="none | system | manual | autoDetect | autoConfig"/>
4000 <data id="HTTPProxy" value="https://httpproxy.example.com"/>
4001 <data id="UseHTTPProxyForAllProtocols" value="true | false"/>
4002 <data id="SSLProxy" value="https://sslproxy.example.com"/>
4003 <data id="FTPProxy" value="https://ftpproxy.example.com"/>
4004 <data id="SOCKSProxy" value="https://socksproxy.example.com"/>
4005 <data id="SOCKSVersion" value="4 | 5"/>
4006 <data id="AutoConfigURL" value="URL_TO_AUTOCONFIG"/>
4007 <data id="Passthrough" value="<local>"/>
4008 <data id="AutoLogin" value="true | false"/>
4009 <data id="UseProxyForDNS" value="true | false"/>
4010 ```
4011 #### macOS
4012 ```
4013 <dict>
4014   <key>Proxy</key>
4015   <dict>
4016     <key>Mode</key>
4017     <string>none | system | manual | autoDetect | autoConfig</string>
4018     <key>Locked</key>
4019     <true> | </false>
4020     <key>HTTPProxy</key>
4021     <string>https://httpproxy.example.com</string>
4022     <key>UseHTTPProxyForAllProtocols</key>
4023     <true> | </false>
4024     <key>SSLProxy</key>
4025     <string>https://sslproxy.example.com</string>
4026     <key>FTPProxy</key>
4027     <string>https://ftpproxy.example.com</string>
4028     <key>SOCKSProxy</key>
4029     <string>https://socksproxy.example.com</string>
4030     <key>SOCKSVersion</key>
4031     <string>4 | 5</string>
4032     <key>Passthrough</key>
4033     <string>&lt;local>&gt;</string>
4034     <key>AutoConfigURL</key>
4035     <string>URL_TO_AUTOCONFIG</string>
4036     <key>AutoLogin</key>
4037     <true> | </false>
4038     <key>UseProxyForDNS</key>
4039     <true> | </false>
4040   </dict>
4041 </dict>
4042 ```
4043 #### policies.json
4044 ```
4045 {
4046   "policies": {
4047     "Proxy": {
4048       "Mode": "none" | "system" | "manual" | "autoDetect" | "autoConfig",
4049       "Locked": true | false,
4050       "HTTPProxy": "hostname",
4051       "UseHTTPProxyForAllProtocols": true | false,
4052       "SSLProxy": "hostname",
4053       "FTPProxy": "hostname",
4054       "SOCKSProxy": "hostname",
4055       "SOCKSVersion": 4 | 5
4056       "Passthrough": "<local>",
4057       "AutoConfigURL": "URL_TO_AUTOCONFIG",
4058       "AutoLogin": true | false,
4059       "UseProxyForDNS": true | false
4060     }
4061   }
4062 }
4063 ```
4064 ### RequestedLocales
4065 Set the the list of requested locales for the application in order of preference. It will cause the corresponding language pack to become active.
4066
4067 Note: For Firefox 68, this can now be a string so that you can specify an empty value.
4068
4069 **Compatibility:** Firefox 64, Firefox ESR 60.4, Updated in Firefox 68, Firefox ESR 68\
4070 **CCK2 Equivalent:** N/A\
4071 **Preferences Affected:** N/A
4072 #### Windows (GPO)
4073 ```
4074 Software\Policies\Mozilla\Firefox\RequestedLocales\1 = "de"
4075 Software\Policies\Mozilla\Firefox\RequestedLocales\2 = "en-US"
4076
4077 or
4078
4079 Software\Policies\Mozilla\Firefox\RequestedLocales = "de,en-US"
4080 ```
4081 #### Windows (Intune)
4082 OMA-URI:
4083 ```
4084 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/RequestedLocalesString
4085 ```
4086 Value (string):
4087 ```
4088 <enabled/>
4089 <data id="Preferences_String" value="de,en-US"/>
4090 ```
4091 #### macOS
4092 ```
4093 <dict>
4094   <key>RequestedLocales</key>
4095   <array>
4096     <string>de</string>
4097     <string>en-US</string>
4098   </array>
4099 </dict>
4100
4101 or
4102
4103 <dict>
4104   <key>RequestedLocales</key>
4105   <string>de,en-US</string>
4106 </dict>
4107
4108 ```
4109 #### policies.json
4110 ```
4111 {
4112   "policies": {
4113     "RequestedLocales": ["de", "en-US"]
4114   }
4115 }
4116
4117 or
4118
4119 {
4120   "policies": {
4121     "RequestedLocales": "de,en-US"
4122   }
4123 }
4124 ```
4125 <a name="SanitizeOnShutdown"></a>
4126
4127 ### SanitizeOnShutdown (Selective)
4128 Clear data on shutdown. Choose from Cache, Cookies, Download History, Form & Search History, Browsing History, Active Logins, Site Preferences and Offline Website Data.
4129
4130 Previously, these values were always locked. Starting with Firefox 74 and Firefox ESR 68.6, you can use the `Locked` option to either keep the values unlocked (set it to false), or lock only the values you set (set it to true). If you want the old behavior of locking everything, do not set `Locked` at all.
4131
4132 **Compatibility:** Firefox 68, Firefox ESR 68 (Locked added in 74/68.6)\
4133 **CCK2 Equivalent:** N/A\
4134 **Preferences Affected:** `privacy.sanitize.sanitizeOnShutdown`,`privacy.clearOnShutdown.cache`,`privacy.clearOnShutdown.cookies`,`privacy.clearOnShutdown.downloads`,`privacy.clearOnShutdown.formdata`,`privacy.clearOnShutdown.history`,`privacy.clearOnShutdown.sessions`,`privacy.clearOnShutdown.siteSettings`,`privacy.clearOnShutdown.offlineApps`
4135 #### Windows (GPO)
4136 ```
4137 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Cache = 0x1 | 0x0
4138 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Cookies = 0x1 | 0x0
4139 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Downloads = 0x1 | 0x0
4140 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\FormData = 0x1 | 0x0
4141 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\History = 0x1 | 0x0
4142 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Sessions = 0x1 | 0x0
4143 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\SiteSettings = 0x1 | 0x0
4144 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\OfflineApps = 0x1 | 0x0
4145 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Locked = 0x1 | 0x0
4146 ```
4147 #### Windows (Intune)
4148 OMA-URI:
4149 ```
4150 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/I_SanitizeOnShutdown_Locked
4151 ```
4152 Value (string):
4153 ```
4154 <enabled/> or <disabled/>
4155 ```
4156 #### macOS
4157 ```
4158 <dict>
4159   <key>SanitizeOnShutdown</key>
4160   <dict>
4161     <key>Cache</key>
4162     <true/> | <false/>
4163     <key>Cookies</key>
4164     <true/> | <false/>
4165     <key>Downloads</key>
4166     <true/> | <false/>
4167     <key>FormData</key>
4168     <true/> | <false/>
4169     <key>History</key>
4170     <true/> | <false/>
4171     <key>Sessions</key>
4172     <true/> | <false/>
4173     <key>SiteSettings</key>
4174     <true/> | <false/>
4175     <key>OfflineApps</key>
4176     <true/> | <false/>
4177     <key>Locked</key>
4178     <true/> | <false/>
4179   </dict>
4180 </dict>
4181 ```
4182 #### policies.json
4183 ```
4184 {
4185   "policies": {
4186     "SanitizeOnShutdown": {
4187       "Cache": true | false,
4188       "Cookies": true | false,
4189       "Downloads": true | false,
4190       "FormData": true | false,
4191       "History": true | false,
4192       "Sessions": true | false,
4193       "SiteSettings": true | false,
4194       "OfflineApps": true | false,
4195       "Locked": true | false
4196     }
4197   }
4198 }
4199 ```
4200 ### SanitizeOnShutdown (All)
4201 Clear all data on shutdown, including Browsing & Download History, Cookies, Active Logins, Cache, Form & Search History, Site Preferences and Offline Website Data.
4202
4203 **Compatibility:** Firefox 60, Firefox ESR 60\
4204 **CCK2 Equivalent:** N/A\
4205 **Preferences Affected:** `privacy.sanitize.sanitizeOnShutdown`,`privacy.clearOnShutdown.cache`,`privacy.clearOnShutdown.cookies`,`privacy.clearOnShutdown.downloads`,`privacy.clearOnShutdown.formdata`,`privacy.clearOnShutdown.history`,`privacy.clearOnShutdown.sessions`,`privacy.clearOnShutdown.siteSettings`,`privacy.clearOnShutdown.offlineApps`
4206 #### Windows (GPO)
4207 ```
4208 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown = 0x1 | 0x0
4209 ```
4210 #### Windows (Intune)
4211 OMA-URI:
4212 ```
4213 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/C_SanitizeOnShutdown
4214 ```
4215 Value (string):
4216 ```
4217 <enabled/> or <disabled/>
4218 ```
4219 #### macOS
4220 ```
4221 <dict>
4222   <key>SanitizeOnShutdown</key>
4223   <true/> | <false/>
4224 </dict>
4225 ```
4226 #### policies.json
4227 ```
4228 {
4229   "policies": {
4230     "SanitizeOnShutdown": true | false
4231   }
4232 }
4233 ```
4234 ### SearchBar
4235 Set whether or not search bar is displayed.
4236
4237 **Compatibility:** Firefox 60, Firefox ESR 60\
4238 **CCK2 Equivalent:** `showSearchBar`\
4239 **Preferences Affected:** N/A
4240
4241 #### Windows (GPO)
4242 ```
4243 Software\Policies\Mozilla\Firefox\SearchBar = "unified" | "separate"
4244 ```
4245
4246 #### Windows (Intune)
4247 OMA-URI:
4248 ```
4249 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SearchBar
4250 ```
4251 Value (string):
4252 ```
4253 <enabled/>
4254 <data id="Permissions" value="unified | separate"/>
4255 ```
4256 #### macOS
4257 ```
4258 <dict>
4259   <key>SearchBar</key>
4260   <string>unified | separate</string>
4261 </dict>
4262 ```
4263 #### policies.json
4264 ```
4265 {
4266   "policies": {
4267     "SearchBar": "unified" | "separate"
4268   }
4269 }
4270 ```
4271 <a name="SearchEngines"></a>
4272
4273 ### SearchEngines (This policy is only available on the ESR.)
4274
4275 ### SearchEngines | Default
4276
4277 Set the default search engine. This policy is only available on the ESR.
4278
4279 **Compatibility:** Firefox ESR 60\
4280 **CCK2 Equivalent:** `defaultSearchEngine`\
4281 **Preferences Affected:** N/A
4282
4283 #### Windows (GPO)
4284 ```
4285 Software\Policies\Mozilla\Firefox\SearchEngines\Default = NAME_OF_SEARCH_ENGINE
4286 ```
4287 #### Windows (Intune)
4288 OMA-URI:
4289 ```
4290 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_Default
4291 ```
4292 Value (string):
4293 ```
4294 <enabled/>
4295 <data id="SearchEngines_Default" value="NAME_OF_SEARCH_ENGINE"/>
4296 ```
4297 #### macOS
4298 ```
4299 <dict>
4300   <key>SearchEngines</key>
4301   <dict>
4302     <key>Default</key>
4303     <string>NAME_OF_SEARCH_ENGINE</string>
4304   </dict>
4305 </dict>
4306 ```
4307 #### policies.json
4308 ```
4309 {
4310   "policies": {
4311     "SearchEngines": {
4312       "Default": "NAME_OF_SEARCH_ENGINE"
4313     }
4314   }
4315 }
4316 ```
4317 ### SearchEngines | PreventInstalls
4318
4319 Prevent installing search engines from webpages.
4320
4321 **Compatibility:** Firefox ESR 60\
4322 **CCK2 Equivalent:** `disableSearchEngineInstall`\
4323 **Preferences Affected:** N/A
4324
4325 #### Windows (GPO)
4326 ```
4327 Software\Policies\Mozilla\Firefox\SearchEngines\PreventInstalls = 0x1 | 0x0
4328 ```
4329 #### Windows (Intune)
4330 OMA-URI:
4331 ```
4332 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_PreventInstalls
4333 ```
4334 Value (string):
4335 ```
4336 <enabled/> or <disabled/>
4337 ```
4338 #### macOS
4339 ```
4340 <dict>
4341   <key>SearchEngines</key>
4342   <dict>
4343     <key>PreventInstalls</key>
4344     <true/> | <false/>
4345   </dict>
4346 </dict>
4347 ```
4348 #### policies.json
4349 ```
4350 {
4351   "policies": {
4352     "SearchEngines": {
4353       "PreventInstalls": true | false
4354     }
4355   }
4356 }
4357 ```
4358 ### SearchEngines | Remove
4359
4360 Hide built-in search engines. This policy is only available on the ESR.
4361
4362 **Compatibility:** Firefox ESR 60.2\
4363 **CCK2 Equivalent:** `removeDefaultSearchEngines` (removed all built-in engines)\
4364 **Preferences Affected:** N/A
4365
4366 #### Windows (GPO)
4367 ```
4368 Software\Policies\Mozilla\Firefox\SearchEngines\Remove\1 = NAME_OF_SEARCH_ENGINE
4369 ```
4370 #### Windows (Intune)
4371 OMA-URI:
4372 ```
4373 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_Remove
4374 ```
4375 Value (string):
4376 ```
4377 <enabled/>
4378 <data id="SearchEngines_Remove" value="1&#xF000;NAME_OF_SEARCH_ENGINE"/>
4379 ```
4380 #### macOS
4381 ```
4382 <dict>
4383   <key>SearchEngines</key>
4384   <dict>
4385     <key>Remove</key>
4386     <array>
4387       <string>NAME_OF_SEARCH_ENGINE</string>
4388     </array>
4389   </dict>
4390 </dict>
4391 ```
4392 #### policies.json
4393 ```
4394 {
4395   "policies": {
4396     "SearchEngines": {
4397       "Remove": ["NAME_OF_SEARCH_ENGINE"]
4398     }
4399   }
4400 }
4401 ```
4402 ### SearchEngines | Add
4403
4404 Add new search engines (up to five). This policy is only available on the ESR. `Name` and `URLTemplate` are required.
4405
4406 `Name` is the name of the search engine.
4407
4408 `URLTemplate` is the search URL with {searchTerms} to substitute for the search term.
4409
4410 `Method` is either GET or POST
4411
4412 `IconURL` is a URL for the icon to use.
4413
4414 `Alias` is a keyword to use for the engine.
4415
4416 `Description` is a description of the search engine.
4417
4418 `PostData` is the POST data as name value pairs separated by &.
4419
4420 `SuggestURLTemplate` is a search suggestions URL with {searchTerms} to substitute for the search term.
4421
4422 **Compatibility:** Firefox ESR 60 (POST support in Firefox ESR 68)\
4423 **CCK2 Equivalent:** `searchplugins`\
4424 **Preferences Affected:** N/A
4425
4426 #### Windows (GPO)
4427 ```
4428 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Name = "Example1"
4429 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\URLTemplate = "https://www.example.org/q={searchTerms}"
4430 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Method = "GET" | "POST"
4431 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\IconURL = "https://www.example.org/favicon.ico"
4432 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Alias = "example"
4433 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Description = "Example Description"
4434 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\SuggestURLTemplate = "https://www.example.org/suggestions/q={searchTerms}"
4435 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\PostData = "name=value&q={searchTerms}"
4436 ```
4437 #### Windows (Intune)
4438 OMA-URI:
4439 ```
4440 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_1
4441 ```
4442 Value (string):
4443 ```
4444 <enabled/>
4445 <data id="SearchEngine_Name" value="Example1"/>
4446 <data id="SearchEngine_URLTemplate" value="https://www.example.org/q={searchTerms"/>
4447 <data id="SearchEngine_Method" value="GET | POST"/>
4448 <data id="SearchEngine_IconURL" value="https://www.example.org/favicon.ico"/>
4449 <data id="SearchEngine_Alias" value="example"/>
4450 <data id="SearchEngine_Description" value="Example Description"/>
4451 <data id="SearchEngine_SuggestURLTemplate" value="https://www.example.org/suggestions/q={searchTerms}"/>
4452 <data id="SearchEngine_PostData" value="name=value&amp;q={searchTerms}"/>
4453 ```
4454 #### macOS
4455 ```
4456 <dict>
4457   <key>SearchEngines</key>
4458   <dict>
4459     <key>Add</key>
4460     <array>
4461       <dict>
4462         <key>Name</key>
4463         <string>Example1</string>
4464         <key>URLTemplate</key>
4465         <string>https://www.example.org/q={searchTerms}</string>
4466         <key>Method</key>
4467         <string>GET | POST </string>
4468         <key>IconURL</key>
4469         <string>https://www.example.org/favicon.ico</string>
4470         <key>Alias</key>
4471         <string>example</string>
4472         <key>Description</key>
4473         <string>Example Description</string>
4474         <key>SuggestURLTemplate</key>
4475         <string>https://www.example.org/suggestions/q={searchTerms}</string>
4476         <key>PostData</key>
4477         <string>name=value&q={searchTerms}</string>
4478       </dict>
4479     <array>
4480   </dict>
4481 </dict>
4482 ```
4483 #### policies.json
4484 ```
4485 {
4486   "policies": {
4487     "SearchEngines": {
4488       "Add": [
4489         {
4490           "Name": "Example1",
4491           "URLTemplate": "https://www.example.org/q={searchTerms}",
4492           "Method": "GET" | "POST",
4493           "IconURL": "https://www.example.org/favicon.ico",
4494           "Alias": "example",
4495           "Description": "Description",
4496           "PostData": "name=value&q={searchTerms}",
4497           "SuggestURLTemplate": "https://www.example.org/suggestions/q={searchTerms}"
4498         }
4499       ]
4500     }
4501   }
4502 }
4503 ```
4504 ### SearchSuggestEnabled
4505
4506 Enable search suggestions.
4507
4508 **Compatibility:** Firefox 68, Firefox ESR 68\
4509 **CCK2 Equivalent:** N/A\
4510 **Preferences Affected:** `browser.urlbar.suggest.searches`,`browser.search.suggest.enabled`
4511
4512 #### Windows (GPO)
4513 ```
4514 Software\Policies\Mozilla\Firefox\SearchSuggestEnabled = 0x1 | 0x0
4515 ```
4516 #### Windows (Intune)
4517 OMA-URI:
4518 ```
4519 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchSuggestEnabled
4520 ```
4521 Value (string):
4522 ```
4523 <enabled/> or <disabled/>
4524 ```
4525 #### macOS
4526 ```
4527 <dict>
4528   <key>SearchSuggestEnabled</key>
4529   <true/> | <false/>
4530 </dict>
4531 ```
4532 #### policies.json
4533 ```
4534 {
4535   "policies": {
4536     "SearchSuggestEnabled": true | false
4537   }
4538 }
4539 ```
4540 ### SecurityDevices
4541
4542 Install PKCS #11 modules.
4543
4544 **Compatibility:** Firefox 64, Firefox ESR 60.4\
4545 **CCK2 Equivalent:** `certs.devices`\
4546 **Preferences Affected:** N/A
4547
4548 #### Windows (GPO)
4549 ```
4550 Software\Policies\Mozilla\Firefox\SecurityDevices\NAME_OF_DEVICE = PATH_TO_LIBRARY_FOR_DEVICE
4551 ```
4552 #### Windows (Intune)
4553 OMA-URI:
4554 ```
4555 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SecurityDevices
4556 ```
4557 Value (string):
4558 ```
4559 <enabled/>
4560 <data id="SecurityDevices" value="NAME_OF_DEVICE&#xF000;PATH_TO_LIBRARY_FOR_DEVICE"/>
4561 ```
4562 #### macOS
4563 ```
4564 <dict>
4565   <key>SecurityDevices</key>
4566   <dict>
4567     <key>NAME_OF_DEVICE</key>
4568     <string>PATH_TO_LIBRARY_FOR_DEVICE</string>
4569   </dict>
4570 </dict>
4571 ```
4572
4573 #### policies.json
4574 ```
4575 {
4576   "policies": {
4577     "SecurityDevices": {
4578       "NAME_OF_DEVICE": "PATH_TO_LIBRARY_FOR_DEVICE"
4579     }
4580   }
4581 }
4582 ```
4583 ### SSLVersionMax
4584
4585 Set and lock the maximum version of TLS.
4586
4587 **Compatibility:** Firefox 66, Firefox ESR 60.6\
4588 **CCK2 Equivalent:** N/A\
4589 **Preferences Affected:** `security.tls.version.max`
4590
4591 #### Windows (GPO)
4592 ```
4593 Software\Policies\Mozilla\Firefox\SSLVersionMax = "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
4594 ```
4595 #### Windows (Intune)
4596 OMA-URI:
4597 ```
4598 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SSLVersionMax
4599 ```
4600 Value (string):
4601 ```
4602 <enabled/>
4603 <data id="SSLVersion" value="tls1 | tls1.2 | tls1.3"/>
4604 ```
4605 #### macOS
4606 ```
4607 <dict>
4608   <key>SSLVersionMax</key>
4609   <string>tls1 | tls1.1 | tls1.2 | tls1.3</string>
4610 </dict>
4611 ```
4612
4613 #### policies.json
4614 ```
4615 {
4616   "policies": {
4617     "SSLVersionMax": "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
4618   }
4619 }
4620 ```
4621 ### SSLVersionMin
4622
4623 Set and lock the minimum version of TLS.
4624
4625 **Compatibility:** Firefox 66, Firefox ESR 60.6\
4626 **CCK2 Equivalent:** N/A\
4627 **Preferences Affected:** `security.tls.version.min`
4628
4629 #### Windows (GPO)
4630 ```
4631 Software\Policies\Mozilla\Firefox\SSLVersionMin = "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
4632 ```
4633 #### Windows (Intune)
4634 OMA-URI:
4635 ```
4636 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SSLVersionMin
4637 ```
4638 Value (string):
4639 ```
4640 <enabled/>
4641 <data id="SSLVersion" value="tls1 | tls1.2 | tls1.3"/>
4642 ```
4643 #### macOS
4644 ```
4645 <dict>
4646   <key>SSLVersionMin</key>
4647   <string>tls1 | tls1.1 | tls1.2 | tls1.3</string>
4648 </dict>
4649 ```
4650
4651 #### policies.json
4652 ```
4653 {
4654   "policies": {
4655     "SSLVersionMin": "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
4656   }
4657 }
4658 ```
4659 ### SupportMenu
4660 Add a menuitem to the help menu for specifying support information.
4661
4662 **Compatibility:** Firefox 68.0.1, Firefox ESR 68.0.1\
4663 **CCK2 Equivalent:** helpMenu\
4664 **Preferences Affected:** N/A
4665
4666 #### Windows (GPO)
4667 ```
4668 Software\Policies\Mozilla\Firefox\SupportMenu\Title = "Support Menu"
4669 Software\Policies\Mozilla\Firefox\SupportMenu\URL = "http://example.com/support"
4670 Software\Policies\Mozilla\Firefox\SupportMenu\AccessKey = "S"
4671 ```
4672 #### Windows (Intune)
4673 OMA-URI:
4674 ```
4675 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SupportMenu
4676 ```
4677 Value (string):
4678 ```
4679 <enabled/>
4680 <data id="SupportMenuTitle" value="Support Menu"/>
4681 <data id="SupportMenuURL" value="http://example.com/support"/>
4682 <data id="SupportMenuAccessKey" value="S">
4683 ```
4684 #### macOS
4685 ```
4686 <dict>
4687   <key>SupportMenu</key>
4688   <dict>
4689     <key>Title</key>
4690     <string>SupportMenu</string>
4691     <key>URL</key>
4692     <string>http://example.com/support</string>
4693     <key>AccessKey</key>
4694     <string>S</string>
4695   </dict>
4696 </dict>
4697 ```
4698 #### policies.json
4699 ```
4700 {
4701   "policies": {
4702     "SupportMenu": {
4703       "Title": "Support Menu",
4704       "URL": "http://example.com/support",
4705       "AccessKey": "S"
4706     }
4707   }
4708 }
4709 ```
4710 ### UserMessaging
4711
4712 Prevent Firefox from messaging the user in certain situations.
4713
4714 `WhatsNew` Remove the "What's New" icon and menuitem. (Firefox 75 only)
4715
4716 `ExtensionRecommendations` Don't recommend extensions while the user is visiting web pages.
4717
4718 `FeatureRecommendations` Don't recommend browser features.
4719
4720 `UrlbarInterventions` Don't offer Firefox specific suggestions in the URL bar. (Firefox 75 only)
4721
4722 **Compatibility:** Firefox 75, Firefox ESR 68.7\
4723 **CCK2 Equivalent:** N/A\
4724 **Preferences Affected:** `browser.messaging-system.whatsNewPanel.enabled`,`browser.newtabpage.activity-stream.asrouter.userprefs.cfr.addons`,`browser.newtabpage.activity-stream.asrouter.userprefs.cfr.features`
4725
4726 #### Windows (GPO)
4727 ```
4728 Software\Policies\Mozilla\Firefox\UserMessaging\WhatsNew = 0x1 | 0x0
4729 Software\Policies\Mozilla\Firefox\UserMessaging\ExtensionRecommendations = 0x1 | 0x0
4730 Software\Policies\Mozilla\Firefox\UserMessaging\FeatureRecommendations = 0x1 | 0x0
4731 Software\Policies\Mozilla\Firefox\UserMessaging\UrlbarInterventions = 0x1 | 0x0
4732 ```
4733 #### Windows (Intune)
4734 OMA-URI:
4735 ```
4736 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/UserMessaging_WhatsNew
4737 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/UserMessaging_ExtensionRecommendations
4738 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/UserMessaging_FeatureRecommendations
4739 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/UserMessaging_UrlbarInterventions
4740 ```
4741 Value (string):
4742 ```
4743 <enabled/> or <disabled/>
4744 ```
4745 #### macOS
4746 ```
4747 <dict>
4748   <key>UserMessaging</key>
4749   <dict>
4750     <key>WhatsNew</key>
4751     <true/> | <false/>
4752     <key>ExtensionRecommendations</key>
4753     <true/> | <false/>
4754     <key>FeatureRecommendations</key>
4755     <true/> | <false/>
4756     <key>UrlbarInterventions</key>
4757     <true/> | <false/>
4758   </dict>
4759 </dict>
4760 ```
4761 #### policies.json
4762 ```
4763 {
4764   "policies": {
4765     "UserMessaging": {
4766       "WhatsNew": true | false,
4767       "ExtensionRecommendations": true | false,
4768       "FeatureRecommendations": true | false,
4769       "UrlbarInterventions": true | false
4770     }
4771   }
4772 }
4773 ```
4774 ### WebsiteFilter
4775 Block websites from being visited. The parameters take an array of Match Patterns, as documented in https://developer.mozilla.org/en-US/Add-ons/WebExtensions/Match_patterns. Only http/https addresses are supported at the moment. The arrays are limited to 1000 entries each.
4776
4777 **Compatibility:** Firefox 60, Firefox ESR 60\
4778 **CCK2 Equivalent:** N/A\
4779 **Preferences Affected:** N/A
4780
4781 #### Windows (GPO)
4782 ```
4783 Software\Policies\Mozilla\Firefox\WebsiteFilter\Block\1 = "<all_urls>"
4784 Software\Policies\Mozilla\Firefox\WebsiteFilter\Exceptions\1 = "http://example.org/*"
4785 ```
4786 #### Windows (Intune)
4787 OMA-URI:
4788 ```
4789 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/B_WebsiteFilter_Block
4790 ```
4791 Value (string):
4792 ```
4793 <enabled/>
4794 <data id="WebsiteFilter" value="1&#xF000;<all_urls>"/>
4795 ```
4796 OMA-URI:
4797 ```
4798 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/B_WebsiteFilter_Exceptions
4799 ```
4800 Value (string):
4801 ```
4802 <enabled/>
4803 <data id="WebsiteFilter" value="1&#xF000;http://example.org/*"/>
4804 ```
4805 #### macOS
4806 ```
4807 <dict>
4808   <key>WebsiteFilter</key>
4809   <dict>
4810     <key>Block</key>
4811     <array>
4812       <string><all_urls></string>
4813     </array>
4814     <key>Exceptions</key>
4815     <array>
4816       <string>http://example.org/*</string>
4817     </array>
4818   </dict>
4819
4820 </dict>
4821 ```
4822 #### policies.json
4823 ```
4824 {
4825   "policies": {
4826     "WebsiteFilter": {
4827       "Block": ["<all_urls>"],
4828       "Exceptions": ["http://example.org/*"]
4829     }
4830   }
4831 }
4832 ```