README.md

   1 **These policies are in active development and so might contain changes that do not work with current versions of Firefox.**
   2
   3 **You should use the [officially released versions](https://github.com/mozilla/policy-templates/releases) if you are deploying changes.**
   4
   5 Policies can be specified using the [Group Policy templates on Windows](https://github.com/mozilla/policy-templates/tree/master/windows), [Intune on Windows](https://support.mozilla.org/kb/managing-firefox-intune), [configuration profiles on macOS](https://github.com/mozilla/policy-templates/tree/master/mac), or by creating a file called `policies.json`. On Windows, create a directory called `distribution` where the EXE is located and place the file there. On Mac, the file goes into `Firefox.app/Contents/Resources/distribution`.  On Linux, the file goes into `firefox/distribution`, where `firefox` is the installation directory for firefox, which varies by distribution or you can specify system-wide policy by placing the file in `/etc/firefox/policies`.
   6
   7 | Policy Name | Description
   8 | --- | --- |
   9 | **[`AppAutoUpdate`](#appautoupdate)** |  Enable or disable automatic application update.
  10 | **[`AppUpdateURL`](#appupdateurl)** | Change the URL for application update.
  11 | **[`Authentication`](#authentication)** | Configure sites that support integrated authentication.
  12 | **[`BlockAboutAddons`](#blockaboutaddons)** | Block access to the Add-ons Manager (about:addons).
  13 | **[`BlockAboutConfig`](#blockaboutconfig)** | Block access to about:config.
  14 | **[`BlockAboutProfiles`](#blockaboutprofiles)** | Block access to About Profiles (about:profiles).
  15 | **[`BlockAboutSupport`](#blockaboutsupport)** | Block access to Troubleshooting Information (about:support).
  16 | **[`Bookmarks`](#bookmarks)** | Add bookmarks in either the bookmarks toolbar or menu.
  17 | **[`CaptivePortal`](#captiveportal)** | Enable or disable the detection of captive portals.
  18 | **[`Certificates`](#certificates)** |
  19 | **[`Certificates -> ImportEnterpriseRoots`](#certificates--importenterpriseroots)** | Trust certificates that have been added to the operating system certificate store by a user or administrator.
  20 | **[`Certificates -> Install`](#certificates--install)** | Install certificates into the Firefox certificate store.
  21 | **[`Cookies`](#cookies)** | Configure cookie preferences.
  22 | **[`DisableAppUpdate`](#disableappupdate)** | Turn off application updates.
  23 | **[`DisableBuiltinPDFViewer`](#disablebuiltinpdfviewer)** | Disable the built in PDF viewer.
  24 | **[`DisabledCiphers`](#disabledciphers)** | Disable ciphers.
  25 | **[`DisableDefaultBrowserAgent`](#disabledefaultbrowseragent)** | Prevent the default browser agent from taking any actions (Windows only).
  26 | **[`DisableDeveloperTools`](#disabledevelopertools)** | Remove access to all developer tools.
  27 | **[`DisableFeedbackCommands`](#disablefeedbackcommands)** | Disable the menus for reporting sites.
  28 | **[`DisableFirefoxScreenshots`](#disablefirefoxscreenshots)** | Remove access to Firefox Screenshots.
  29 | **[`DisableFirefoxAccounts`](#disablefirefoxaccounts)** | Disable Firefox Accounts integration (Sync).
  30 | **[`DisableFirefoxStudies`](#disablefirefoxstudies)** | Disable Firefox studies (Shield).
  31 | **[`DisableForgetButton`](#disableforgetbutton)** | Disable the "Forget" button.
  32 | **[`DisableFormHistory`](#disableformhistory)** | Turn off saving information on web forms and the search bar.
  33 | **[`DisableMasterPasswordCreation`](#disablemasterpasswordcreation)** | Remove the master password functionality.
  34 | **[`DisablePasswordReveal`](#disablepasswordreveal)** | Do not allow passwords to be revealed in saved logins.
  35 | **[`DisablePocket`](#disablepocket)** | Remove Pocket in the Firefox UI.
  36 | **[`DisablePrivateBrowsing`](#disableprivatebrowsing)** | Remove access to private browsing.
  37 | **[`DisableProfileImport`](#disableprofileimport)** | Disables the "Import data from another browser" option in the bookmarks window.
  38 | **[`DisableProfileRefresh`](#disableprofilerefresh)** | Disable the Refresh Firefox button on about:support and support.mozilla.org
  39 | **[`DisableSafeMode`](#disablesafemode)** | Disable safe mode within the browser.
  40 | **[`DisableSecurityBypass`](#disablesecuritybypass)** | Prevent the user from bypassing security in certain cases.
  41 | **[`DisableSetDesktopBackground`](#disablesetdesktopbackground)** | Remove the "Set As Desktop Background..." menuitem when right clicking on an image.
  42 | **[`DisableSystemAddonUpdate`](#disablesystemaddonupdate)** | Prevent system add-ons from being installed or update.
  43 | **[`DisableTelemetry`](#disabletelemetry)** | DisableTelemetry
  44 | **[`DisplayBookmarksToolbar`](#displaybookmarkstoolbar)** | Set the initial state of the bookmarks toolbar.
  45 | **[`DisplayMenuBar (Deprecated)`](#displaymenubar-deprecated)** | Set the initial state of the menubar.
  46 | **[`DisplayMenuBar`](#displaymenubar)** | Set the state of the menubar.
  47 | **[`DNSOverHTTPS`](#dnsoverhttps)** | Configure DNS over HTTPS.
  48 | **[`DontCheckDefaultBrowser`](#dontcheckdefaultbrowser)** | Don't check if Firefox is the default browser at startup.
  49 | **[`DefaultDownloadDirectory`](#defaultdownloaddirectory)** | Set the default download directory.
  50 | **[`DownloadDirectory`](#downloaddirectory)** | Set and lock the download directory.
  51 | **[`EnableTrackingProtection`](#enabletrackingprotection)** | Configure tracking protection.
  52 | **[`EncryptedMediaExtensions`](#encryptedmediaextensions)** | Enable or disable Encrypted Media Extensions and optionally lock it.
  53 | **[`EnterprisePoliciesEnabled`](#enterprisepoliciesenabled)** | Enable policy support on macOS.
  54 | **[`Extensions`](#extensions)** | Control the installation, uninstallation and locking of extensions.
  55 | **[`ExtensionSettings`](#extensionsettings)** | Manage all aspects of extensions.
  56 | **[`ExtensionUpdate`](#extensionupdate)** | Control extension updates.
  57 | **[`FlashPlugin`](#flashplugin)** | Configure the default Flash plugin policy as well as origins for which Flash is allowed.
  58 | **[`FirefoxHome`](#firefoxhome)** | Customize the Firefox Home page.
  59 | **[`HardwareAcceleration`](#hardwareacceleration)** | Control hardware acceleration.
  60 | **[`Handlers`](#handlers)** | Configure default application handlers.
  61 | **[`Homepage`](#homepage)** | Configure the default homepage and how Firefox starts.
  62 | **[`InstallAddonsPermission`](#installaddonspermission)** | Configure the default extension install policy as well as origins for extension installs are allowed.
  63 | **[`LegacyProfiles`](#legacyprofiles)** | Disable the feature enforcing a separate profile for each installation.
  64 | **[`LocalFileLinks`](#localfilelinks)** | Enable linking to local files by origin.
  65 | **[`ManagedBookmarks`](#managedbookmarks)** | Configures a list of bookmarks managed by an administrator that cannot be changed by the user.
  66 | **[`PrimaryPassword`](#primarypassword)** | Require or prevent using a primary (formerly master) password.
  67 | **[`NetworkPrediction`](#networkprediction)** | Enable or disable network prediction (DNS prefetching).
  68 | **[`NewTabPage`](#newtabpage)** | Enable or disable the New Tab page.
  69 | **[`NoDefaultBookmarks`](#nodefaultbookmarks)** | Disable the creation of default bookmarks.
  70 | **[`OfferToSaveLogins`](#offertosavelogins)** | Control whether or not Firefox offers to save passwords.
  71 | **[`OfferToSaveLoginsDefault`](#offertosaveloginsdefault)** | Set the default value for whether or not Firefox offers to save passwords.
  72 | **[`OverrideFirstRunPage`](#overridefirstrunpage)** | Override the first run page.
  73 | **[`OverridePostUpdatePage`](#overridepostupdatepage)** | Override the upgrade page.
  74 | **[`PasswordManagerEnabled`](#passwordmanagerenabled)** | Remove (some) access to the password manager.
  75 | **[`PDFjs`](#pdfjs)** | Disable or configure PDF.js, the built-in PDF viewer.
  76 | **[`Permissions`](#permissions)** | Set permissions associated with camera, microphone, location, and notifications.
  77 | **[`PictureInPicture`](#pictureinpicture)** | Enable or disable Picture-in-Picture.
  78 | **[`PopupBlocking`](#popupblocking)** | Configure the default pop-up window policy as well as origins for which pop-up windows are allowed.
  79 | **[`Preferences`](#preferences)** | Set and lock preferences.
  80 | **[`Preferences (Deprecated)`](#preferences-deprecated)** | Set and lock some preferences.
  81 | **[`PromptForDownloadLocation`](#promptfordownloadlocation)** | Ask where to save each file before downloading.
  82 | **[`Proxy`](#proxy)** | Configure proxy settings.
  83 | **[`RequestedLocales`](#requestedlocales)** | Set the the list of requested locales for the application in order of preference.
  84 | **[`SanitizeOnShutdown` (All)](#sanitizeonshutdown-all)** | Clear all data on shutdown.
  85 | **[`SanitizeOnShutdown` (Selective)](#sanitizeonshutdown-selective)** | Clear data on shutdown.
  86 | **[`SearchBar`](#searchbar)** | Set whether or not search bar is displayed.
  87 | **[`SearchEngines`](#searchengines-this-policy-is-only-available-on-the-esr)** |
  88 | **[`SearchEngines -> Default`](#searchengines--default)** | Set the default search engine.
  89 | **[`SearchEngines -> PreventInstalls`](#searchengines--preventinstalls)** | Prevent installing search engines from webpages.
  90 | **[`SearchEngines -> Remove`](#searchengines--remove)** | Hide built-in search engines.
  91 | **[`SearchEngines -> Add`](#searchengines--add)** | Add new search engines.
  92 | **[`SearchSuggestEnabled`](#searchsuggestenabled)** | Enable search suggestions.
  93 | **[`SecurityDevices`](#securitydevices)** | Install PKCS #11 modules.
  94 | **[`SSLVersionMax`](#sslversionmax)** | Set and lock the maximum version of TLS.
  95 | **[`SSLVersionMin`](#sslversionmin)** | Set and lock the minimum version of TLS.
  96 | **[`SupportMenu`](#supportmenu)** | Add a menuitem to the help menu for specifying support information.
  97 | **[`UserMessaging`](#usermessaging)** | Don't show certain messages to the user.
  98 | **[`WebsiteFilter`](#websitefilter)** | Block websites from being visited.
  99
 100 ### AppAutoUpdate
 101
 102 Enable or disable **automatic** application update.
 103
 104 If set to true, application updates are installed without user approval.
 105
 106 If set to false, application updates are downloaded but the user can choose when to install the update.
 107
 108 If you have disabled updates via DisableAppUpdate, this policy has no effect.
 109
 110 **Compatibility:** Firefox 75, Firefox ESR 68.7\
 111 **CCK2 Equivalent:** N/A\
 112 **Preferences Affected:** app.update.auto
 113
 114 #### Windows (GPO)
 115 ```
 116 Software\Policies\Mozilla\Firefox\AppAutoUpdate = 0x1 | 0x0
 117 ```
 118 #### Windows (Intune)
 119 OMA-URI:
 120 ```
 121 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AppAutoUpdate
 122 ```
 123 Value (string):
 124 ```
 125 <enabled/> or <disabled/>
 126 ```
 127 #### macOS
 128 ```
 129 <dict>
 130   <key>AppAutoUpdate</key>
 131   <true/> | <false/>
 132 </dict>
 133 ```
 134 #### policies.json
 135 ```
 136 {
 137   "policies": {
 138     "AppAutoUpdate": true | false
 139   }
 140 }
 141 ```
 142 ### AppUpdateURL
 143
 144 Change the URL for application update.
 145
 146 **Compatibility:** Firefox 62, Firefox ESR 60.2\
 147 **CCK2 Equivalent:** N/A\
 148 **Preferences Affected:** `app.update.url`
 149
 150 #### Windows (GPO)
 151 ```
 152 Software\Policies\Mozilla\Firefox\AppUpdateURL = "https://yoursite.com"
 153 ```
 154 #### Windows (Intune)
 155 OMA-URI:
 156 ```
 157 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AppUpdateURL
 158 ```
 159 Value (string):
 160 ```
 161 <enabled/>
 162 <data id="AppUpdateURL" value="https://yoursite.com"/>
 163 ```
 164 #### macOS
 165 ```
 166 <dict>
 167   <key>AppUpdateURL</key>
 168   <string>https://yoursite.com</string>
 169 </dict>
 170 ```
 171 #### policies.json
 172 ```
 173 {
 174   "policies": {
 175     "AppUpdateURL": "https://yoursite.com"
 176   }
 177 }
 178 ```
 179 ### Authentication
 180
 181 Configure sites that support integrated authentication.
 182
 183 See https://developer.mozilla.org/en-US/docs/Mozilla/Integrated_authentication for more information.
 184
 185 `PrivateBrowsing` enables integrated authentication in private browsing.
 186
 187 **Compatibility:** Firefox 60, Firefox ESR 60 (AllowNonFQDN added in 62/60.2, AllowProxies added in 70/68.2, Locked added in 71/68.3, PrivateBrowsing added in 77/68.9)\
 188 **CCK2 Equivalent:** N/A\
 189 **Preferences Affected:** `network.negotiate-auth.trusted-uris`,`network.negotiate-auth.delegation-uris`,`network.automatic-ntlm-auth.trusted-uris`,`network.automatic-ntlm-auth.allow-non-fqdn`,`network.negotiate-auth.allow-non-fqdn`,`network.automatic-ntlm-auth.allow-proxies`,`network.negotiate-auth.allow-proxies`,`network.auth.private-browsing-sso`
 190
 191 #### Windows (GPO)
 192 ```
 193 Software\Policies\Mozilla\Firefox\Authentication\SPNEGO\1 = "mydomain.com"
 194 Software\Policies\Mozilla\Firefox\Authentication\SPNEGO\2 = "https://myotherdomain.com"
 195 Software\Policies\Mozilla\Firefox\Authentication\Delegated\1 = "mydomain.com"
 196 Software\Policies\Mozilla\Firefox\Authentication\Delegated\2 = "https://myotherdomain.com"
 197 Software\Policies\Mozilla\Firefox\Authentication\NTLM\1 = "mydomain.com"
 198 Software\Policies\Mozilla\Firefox\Authentication\NTLM\2 = "https://myotherdomain.com"
 199 Software\Policies\Mozilla\Firefox\Authentication\AllowNonFQDN\SPNEGO = 0x1 | 0x0
 200 Software\Policies\Mozilla\Firefox\Authentication\AllowNonFQDN\NTLM = 0x1 | 0x0
 201 Software\Policies\Mozilla\Firefox\Authentication\AllowProxies\SPNEGO = 0x1 | 0x0
 202 Software\Policies\Mozilla\Firefox\Authentication\AllowProxies\NTLM = 0x1 | 0x0
 203 Software\Policies\Mozilla\Firefox\Authentication\Locked = 0x1 | 0x0
 204 Software\Policies\Mozilla\Firefox\Authentication\PrivateBrowsing = 0x1 | 0x0
 205 ```
 206 #### Windows (Intune)
 207 OMA-URI:
 208 ```
 209 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_SPNEGO
 210 ```
 211 Value (string):
 212 ```
 213 <enabled/>
 214 <data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
 215 ```
 216 OMA-URI:
 217 ```
 218 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_Delegated
 219 ```
 220 Value (string):
 221 ```
 222 <enabled/>
 223 <data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
 224 ```
 225 OMA-URI:
 226 ```
 227 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_NTLM
 228 ```
 229 Value (string):
 230 ```
 231 <enabled/>
 232 <data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
 233 ```
 234 OMA-URI:
 235 ```
 236 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_AllowNonFQDN
 237 ```
 238 Value (string):
 239 ```
 240 <enabled/>
 241 <data id="Authentication_AllowNonFQDN_NTLM" value="true | false"/>
 242 <data id="Authentication_AllowNonFQDN_SPNEGO" value="true | false"/>
 243 ```
 244 OMA-URI:
 245 ```
 246 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_Locked
 247 ```
 248 Value (string):
 249 ```
 250 <enabled/> or <disabled/>
 251 ```
 252 OMA-URI:
 253 ```
 254 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_PrivateBrowsing
 255 ```
 256 Value (string):
 257 ```
 258 <enabled/> or <disabled/>
 259 ```
 260 #### macOS
 261 ```
 262 <dict>
 263   <key>Authentication</key>
 264   <dict>
 265     <key>SPNEGO</key>
 266     <array>
 267       <string>mydomain.com</string>
 268       <string>https://myotherdomain.com</string>
 269     </array>
 270     <key>Delegated</key>
 271     <array>
 272       <string>mydomain.com</string>
 273       <string>https://myotherdomain.com</string>
 274     </array>
 275     <key>NTLM</key>
 276     <array>
 277       <string>mydomain.com</string>
 278       <string>https://myotherdomain.com</string>
 279     </array>
 280     <key>AllowNonFQDN</key>
 281       <dict>
 282       <key>SPNEGO</key>
 283       <true/> | <false/>
 284       <key>NTLM</key>
 285       <true/> | <false/>
 286     </dict>
 287     <key>AllowProxies</key>
 288       <dict>
 289       <key>SPNEGO</key>
 290       <true/> | <false/>
 291       <key>NTLM</key>
 292       <true/> | <false/>
 293     </dict>
 294     <key>Locked</key>
 295     <true/> | <false/>
 296     <key>PrivateBrowsing</key>
 297     <true/> | <false/>
 298   </dict>
 299 </dict>
 300 ```
 301 #### policies.json
 302 ```
 303 {
 304   "policies": {
 305     "Authentication": {
 306       "SPNEGO": ["mydomain.com", "https://myotherdomain.com"],
 307       "Delegated": ["mydomain.com", "https://myotherdomain.com"],
 308       "NTLM": ["mydomain.com", "https://myotherdomain.com"],
 309       "AllowNonFQDN": {
 310         "SPNEGO": true | false,
 311         "NTLM": true | false
 312       },
 313       "AllowProxies": {
 314         "SPNEGO": true | false,
 315         "NTLM": true | false
 316       },
 317       "Locked": true | false,
 318       "PrivateBrowsing": true | false
 319     }
 320   }
 321 }
 322 ```
 323 ### BlockAboutAddons
 324
 325 Block access to the Add-ons Manager (about:addons).
 326
 327 **Compatibility:** Firefox 60, Firefox ESR 60\
 328 **CCK2 Equivalent:** `disableAddonsManager`\
 329 **Preferences Affected:** N/A
 330
 331 #### Windows (GPO)
 332 ```
 333 Software\Policies\Mozilla\Firefox\BlockAboutAddons = 0x1 | 0x0
 334 ```
 335 #### Windows (Intune)
 336 OMA-URI:
 337 ```
 338 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutAddons
 339 ```
 340 Value (string):
 341 ```
 342 <enabled/> or <disabled/>
 343 ```
 344 #### macOS
 345 ```
 346 <dict>
 347   <key>BlockAboutAddons</key>
 348   <true/> | <false/>
 349 </dict>
 350 ```
 351 #### policies.json
 352 ```
 353 {
 354   "policies": {
 355     "BlockAboutAddons": true | false
 356   }
 357 }
 358 ```
 359 ### BlockAboutConfig
 360
 361 Block access to about:config.
 362
 363 **Compatibility:** Firefox 60, Firefox ESR 60\
 364 **CCK2 Equivalent:** `disableAboutConfig`\
 365 **Preferences Affected:** N/A
 366
 367 #### Windows (GPO)
 368 ```
 369 Software\Policies\Mozilla\Firefox\BlockAboutConfig = 0x1 | 0x0
 370 ```
 371 #### Windows (Intune)
 372 OMA-URI:
 373 ```
 374 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutConfig
 375 ```
 376 Value (string):
 377 ```
 378 <enabled/> or <disabled/>
 379 ```
 380 #### macOS
 381 ```
 382 <dict>
 383   <key>BlockAboutConfig</key>
 384   <true/> | <false/>
 385 </dict>
 386 ```
 387 #### policies.json
 388 ```
 389 {
 390   "policies": {
 391     "BlockAboutConfig": true | false
 392   }
 393 }
 394 ```
 395 ### BlockAboutProfiles
 396
 397 Block access to About Profiles (about:profiles).
 398
 399 **Compatibility:** Firefox 60, Firefox ESR 60\
 400 **CCK2 Equivalent:** `disableAboutProfiles`\
 401 **Preferences Affected:** N/A
 402
 403 #### Windows (GPO)
 404 ```
 405 Software\Policies\Mozilla\Firefox\BlockAboutProfiles = 0x1 | 0x0
 406 ```
 407 #### Windows (Intune)
 408 OMA-URI:
 409 ```
 410 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutProfiles
 411 ```
 412 Value (string):
 413 ```
 414 <enabled/> or <disabled/>
 415 ```
 416 #### macOS
 417 ```
 418 <dict>
 419   <key>BlockAboutProfiles</key>
 420   <true/> | <false/>
 421 </dict>
 422 ```
 423 #### policies.json
 424 ```
 425 {
 426   "policies": {
 427     "BlockAboutProfiles": true | false
 428   }
 429 }
 430 ```
 431 ### BlockAboutSupport
 432
 433 Block access to Troubleshooting Information (about:support).
 434
 435 **Compatibility:** Firefox 60, Firefox ESR 60\
 436 **CCK2 Equivalent:** `disableAboutSupport`\
 437 **Preferences Affected:** N/A
 438
 439 #### Windows (GPO)
 440 ```
 441 Software\Policies\Mozilla\Firefox\BlockAboutSupport = 0x1 | 0x0
 442 ```
 443 #### Windows (Intune)
 444 OMA-URI:
 445 ```
 446 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutSupport
 447 ```
 448 Value (string):
 449 ```
 450 <enabled/> or <disabled/>
 451 ```
 452 #### macOS
 453 ```
 454 <dict>
 455   <key>BlockAboutSupport</key>
 456   <true/> | <false/>
 457 </dict>
 458 ```
 459 #### policies.json
 460 ```
 461 {
 462   "policies": {
 463     "BlockAboutSupport": true | false
 464   }
 465 }
 466 ```
 467 ### Bookmarks
 468
 469 Add bookmarks in either the bookmarks toolbar or menu. Only `Title` and `URL` are required. If `Placement` is not specified, the bookmark will be placed on the toolbar. If `Folder` is specified, it is automatically created and bookmarks with the same folder name are grouped together.
 470
 471 **Compatibility:** Firefox 60, Firefox ESR 60\
 472 **CCK2 Equivalent:** `bookmarks.toolbar`,`bookmarks.menu`\
 473 **Preferences Affected:** N/A
 474
 475 #### Windows (GPO)
 476 ```
 477 Software\Policies\Mozilla\Firefox\Bookmarks\1\Title = "Example"
 478 Software\Policies\Mozilla\Firefox\Bookmarks\1\URL = "https://example.com"
 479 Software\Policies\Mozilla\Firefox\Bookmarks\1\Favicon = "https://example.com/favicon.ico"
 480 Software\Policies\Mozilla\Firefox\Bookmarks\1\Placement = "toolbar" | "menu"
 481 Software\Policies\Mozilla\Firefox\Bookmarks\1\Folder = "FolderName"
 482 ```
 483 #### Windows (Intune)
 484 OMA-URI:
 485 ```
 486 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Bookmarks/Bookmark01
 487 ```
 488 Value (string):
 489 ```
 490 <enabled/>
 491 <data id="BookmarkTitle" value="Example"/>
 492 <data id="BookmarkURL" value="https://example.com"/>
 493 <data id="BookmarkFavicon" value="https://example.com/favicon.ico"/>
 494 <data id="BookmarkPlacement" value="toolbar | menu"/>
 495 <data id="BookmarkFolder" value="FolderName"/>
 496 ```
 497 #### macOS
 498 ```
 499 <dict>
 500   <key>Bookmarks</key>
 501   <array>
 502     <dict>
 503       <key>Title</key>
 504       <string>Example</string>
 505       <key>URL</key>
 506       <string>https://example.com</string>
 507       <key>Favicon</key>
 508       <string>https://example.com/favicon.ico</string>
 509       <key>Placement</key>
 510       <string>toolbar | menu</string>
 511       <key>Folder</key>
 512       <string>FolderName</string>
 513     </dict>
 514   </array>
 515 </dict>
 516 ```
 517 #### policies.json
 518 ```
 519 {
 520   "policies": {
 521     "Bookmarks": [
 522       {
 523         "Title": "Example",
 524         "URL": "https://example.com",
 525         "Favicon": "https://example.com/favicon.ico",
 526         "Placement": "toolbar" | "menu",
 527         "Folder": "FolderName"
 528       }
 529     ]
 530   }
 531 }
 532 ```
 533 ### CaptivePortal
 534 Enable or disable the detection of captive portals.
 535
 536 **Compatibility:** Firefox 67, Firefox ESR 60.7\
 537 **CCK2 Equivalent:** N/A\
 538 **Preferences Affected:** `network.captive-portal-service.enabled`
 539
 540 #### Windows (GPO)
 541 ```
 542 Software\Policies\Mozilla\Firefox\CaptivePortal = 0x1 | 0x0
 543 ```
 544 #### Windows (Intune)
 545 OMA-URI:
 546 ```
 547 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/CaptivePortal
 548 ```
 549 Value (string):
 550 ```
 551 <enabled/> or <disabled/>
 552 ```
 553 #### macOS
 554 ```
 555 <dict>
 556   <key>CaptivePortal</key>
 557   <true/> | <false/>
 558 </dict>
 559 ```
 560 #### policies.json
 561 ```
 562 {
 563   "policies": {
 564     "CaptivePortal": true | false
 565   }
 566 }
 567 ```
 568 ### Certificates
 569
 570 ### Certificates | ImportEnterpriseRoots
 571
 572 Trust certificates that have been added to the operating system certificate store by a user or administrator.
 573
 574 Note: This policy only works on Windows and macOS. For Linux discussion, see [bug 1600509](https://bugzilla.mozilla.org/show_bug.cgi?id=1600509).
 575
 576 See https://support.mozilla.org/kb/setting-certificate-authorities-firefox for more detail.
 577
 578 **Compatibility:** Firefox 60, Firefox ESR 60 (macOS support in Firefox 63, Firefox ESR 68)\
 579 **CCK2 Equivalent:** N/A\
 580 **Preferences Affected:** `security.enterprise_roots.enabled`
 581
 582 #### Windows (GPO)
 583 ```
 584 Software\Policies\Mozilla\Firefox\Certificates\ImportEnterpriseRoots = 0x1 | 0x0
 585 ```
 586 #### Windows (Intune)
 587 OMA-URI:
 588 ```
 589 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Certificates/Certificates_ImportEnterpriseRoots
 590 ```
 591 Value (string):
 592 ```
 593 <enabled/> or <disabled/>
 594 ```
 595 #### macOS
 596 ```
 597 <dict>
 598   <key>Certificates</key>
 599   <dict>
 600     <key>ImportEnterpriseRoots</key>
 601     <true/> | <false/>
 602   </dict>
 603 </dict>
 604 ```
 605 #### policies.json
 606 ```
 607 {
 608   "policies": {
 609     "Certificates": {
 610       "ImportEnterpriseRoots": true | false
 611     }
 612   }
 613 }
 614 ```
 615 ### Certificates | Install
 616
 617 Install certificates into the Firefox certificate store. If only a filename is specified, Firefox searches for the file in the following locations:
 618
 619 - Windows
 620   - %USERPROFILE%\AppData\Local\Mozilla\Certificates
 621   - %USERPROFILE%\AppData\Roaming\Mozilla\Certificates
 622 - macOS
 623   - /Library/Application Support/Mozilla/Certificates
 624   - ~/Library/Application Support/Mozilla/Certificates
 625 - Linux
 626   - /usr/lib/mozilla/certificates
 627   - /usr/lib64/mozilla/certificates
 628   - ~/.mozilla/certificates
 629
 630 Starting with Firefox 65, Firefox 60.5 ESR, a fully qualified path can be used, including UNC paths. You should use the native path style for your operating system. We do not support using %USERPROFILE% or other environment variables on Windows.
 631
 632 If you are specifying the path in the policies.json file on Windows, you need to escape your backslashes (`\\`) which means that for UNC paths, you need to escape both (`\\\\`). If you use group policy, you only need one backslash.
 633
 634 Certificates are installed using the trust string `CT,CT,`.
 635
 636 Binary (DER) and ASCII (PEM) certificates are both supported.
 637
 638 **Compatibility:** Firefox 64, Firefox ESR 64\
 639 **CCK2 Equivalent:** `certs.ca`\
 640 **Preferences Affected:** N/A
 641
 642 #### Windows (GPO)
 643 ```
 644 Software\Policies\Mozilla\Firefox\Certificates\Install\1 = "cert1.der"
 645 Software\Policies\Mozilla\Firefox\Certificates\Install\2 = "C:\Users\username\cert2.pem"
 646 ```
 647 #### Windows (Intune)
 648 OMA-URI:
 649 ```
 650 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Certificates/Certificates_Install
 651 ```
 652 Value (string):
 653 ```
 654 <enabled/>
 655 <data id="Certificates_Install" value="1&#xF000;cert1.der&#xF000;2&#xF000;C:\Users\username\cert2.pem"/>
 656 ```
 657 #### macOS
 658 ```
 659 <dict>
 660   <key>Certificates</key>
 661   <dict>
 662     <key>Install</key>
 663     <array>
 664       <string>cert1.der</string>
 665       <string>/Users/username/cert2.pem</string>
 666     </array>
 667   </dict>
 668 </dict>
 669 ```
 670 #### policies.json
 671 ```
 672 {
 673   "policies": {
 674     "Certificates": {
 675       "Install": ["cert1.der", "/home/username/cert2.pem"]
 676     }
 677   }
 678 }
 679 ```
 680 ### Cookies
 681 Configure cookie preferences.
 682
 683 `Allow` is a list of origins (not domains) where cookies are always allowed. You must include http or https.
 684
 685 `AllowSession` is a list of origins (not domains) where cookies are only allowed for the current session. You must include http or https.
 686
 687 `Block` is a list of origins (not domains) where cookies are always blocked. You must include http or https.
 688
 689 `Default` determines whether cookies are accepted at all.
 690
 691 `AcceptThirdParty` determines how third-party cookies are handled.
 692
 693 `ExpireAtSessionEnd` determines when cookies expire.
 694
 695 `RejectTracker` only rejects cookies for trackers.
 696
 697 `Locked` prevents the user from changing cookie preferences.
 698
 699 **Compatibility:** Firefox 60, Firefox ESR 60 (RejectTracker added in Firefox 63, AllowSession added in Firefox 79/78.1)\
 700 **CCK2 Equivalent:** N/A\
 701 **Preferences Affected:** `network.cookie.cookieBehavior`,`network.cookie.lifetimePolicy`
 702
 703 #### Windows (GPO)
 704 ```
 705 Software\Policies\Mozilla\Firefox\Cookies\Allow\1 = "https://example.com"
 706 Software\Policies\Mozilla\Firefox\Cookies\AllowSession\1 = "https://example.edu"
 707 Software\Policies\Mozilla\Firefox\Cookies\Block\1 = "https://example.org"
 708 Software\Policies\Mozilla\Firefox\Cookies\Default = 0x1 | 0x0
 709 Software\Policies\Mozilla\Firefox\Cookies\AcceptThirdParty = "always" | "never" | "from-visited"
 710 Software\Policies\Mozilla\Firefox\Cookies\ExpireAtSessionEnd = 0x1 | 0x0
 711 Software\Policies\Mozilla\Firefox\Cookies\RejectTracker = 0x1 | 0x0
 712 Software\Policies\Mozilla\Firefox\Cookies\Locked = 0x1 | 0x0
 713 ```
 714 #### Windows (Intune)
 715 OMA-URI:
 716 ```
 717 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Allow
 718 ```
 719 Value (string):
 720 ```
 721 <enabled/>
 722 <data id="Cookies_Allow" value="1&#xF000;https://example.com"/>
 723 ```
 724 OMA-URI:
 725 ```
 726 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_AllowSession
 727 ```
 728 Value (string):
 729 ```
 730 <enabled/>
 731 <data id="Cookies_Allow" value="1&#xF000;https://example.edu"/>
 732 ```
 733 OMA-URI:
 734 ```
 735 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Block
 736 ```
 737 Value (string):
 738 ```
 739 <enabled/>
 740 <data id="Cookies_Block" value="1&#xF000;https://example.org"/>
 741 ```
 742 OMA-URI:
 743 ```
 744 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Default
 745 ```
 746 Value (string):
 747 ```
 748 <enabled/> or <disabled/>
 749 ```
 750 OMA-URI:
 751 ```
 752 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_AcceptThirdParty
 753 ```
 754 Value (string):
 755 ```
 756 <enabled/>
 757 <data id="Cookies_AcceptThirdParty" value="always | never | from-visited"/>
 758 ```
 759 OMA-URI:
 760 ```
 761 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_ExpireAtSessionEnd
 762 ```
 763 Value (string):
 764 ```
 765 <enabled/> or <disabled/>
 766 ```
 767 OMA-URI:
 768 ```
 769 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_RejectTracker
 770 ```
 771 Value (string):
 772 ```
 773 <enabled/> or <disabled/>
 774 ```
 775 OMA-URI:
 776 ```
 777 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Locked
 778 ```
 779 Value (string):
 780 ```
 781 <enabled/> or <disabled/>
 782 ```
 783 #### macOS
 784 ```
 785 <dict>
 786   <key>Cookies</key>
 787   <dict>
 788     <key>Allow</key>
 789     <array>
 790       <string>http://example.com</string>
 791     </array>
 792     <key>AllowSession</key>
 793     <array>
 794       <string>http://example.edu</string>
 795     </array>
 796     <key>Block</key>
 797     <array>
 798       <string>http://example.org</string>
 799     </array>
 800     <key>Default</key>
 801     <true/> | <false/>
 802     <key>AcceptThirdParty</key>
 803     <string>always | never | from-visited</string>
 804     <key>ExpireAtSessionEnd</key>
 805     <true/> | <false/>
 806     <key>RejectTracker</key>
 807     <true/> | <false/>
 808     <key>Locked</key>
 809     <true/> | <false/>
 810   </dict>
 811 </dict>
 812 ```
 813 #### policies.json
 814 ```
 815 {
 816   "policies": {
 817     "Cookies": {
 818       "Allow": ["http://example.org/"],
 819       "AllowSession": ["http://example.edu/"],
 820       "Block": ["http://example.edu/"],
 821       "Default": true | false,
 822       "AcceptThirdParty": "always" | "never" | "from-visited",
 823       "ExpireAtSessionEnd": true | false,
 824       "RejectTracker": true | false,
 825       "Locked": true | false
 826     }
 827   }
 828 }
 829 ```
 830 ### DisableSetDesktopBackground
 831 Remove the "Set As Desktop Background..." menuitem when right clicking on an image.
 832
 833 **Compatibility:** Firefox 60, Firefox ESR 60\
 834 **CCK2 Equivalent:** `removeSetDesktopBackground`\
 835 **Preferences Affected:** N/A
 836
 837 #### Windows (GPO)
 838 ```
 839 Software\Policies\Mozilla\Firefox\DisableSetDesktopBackground = 0x1 | 0x0
 840 ```
 841 #### Windows (Intune)
 842 OMA-URI:
 843 ```
 844 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSetDesktopBackground
 845 ```
 846 Value (string):
 847 ```
 848 <enabled/> or <disabled/>
 849 ```
 850 #### macOS
 851 ```
 852 <dict>
 853   <key>DisableSetDesktopBackground</key>
 854   <true/> | <false/>
 855 </dict>
 856 ```
 857 #### policies.json
 858 ```
 859 {
 860   "policies": {
 861     "DisableSetDesktopBackground": true | false
 862   }
 863 }
 864 ```
 865 ### DisableMasterPasswordCreation
 866 Remove the master password functionality.
 867
 868 If this value is true, it works the same as setting [`PrimaryPassword`](#primarypassword) to false and removes the primary password functionality.
 869
 870 If both DisableMasterPasswordCreation and PrimaryPassword are used, DisableMasterPasswordCreation takes precedent.
 871
 872 **Compatibility:** Firefox 60, Firefox ESR 60\
 873 **CCK2 Equivalent:** `noMasterPassword`\
 874 **Preferences Affected:** N/A
 875
 876 #### Windows (GPO)
 877 ```
 878 Software\Policies\Mozilla\Firefox\DisableMasterPasswordCreation = 0x1 | 0x0
 879 ```
 880 #### Windows (Intune)
 881 OMA-URI:
 882 ```
 883 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableMasterPasswordCreation
 884 ```
 885 Value (string):
 886 ```
 887 <enabled/> or <disabled/>
 888 ```
 889 #### macOS
 890 ```
 891 <dict>
 892   <key>DisableMasterPasswordCreation</key>
 893   <true/> | <false/>
 894 </dict>
 895 ```
 896 #### policies.json
 897 ```
 898 {
 899   "policies": {
 900     "DisableMasterPasswordCreation": true | false
 901   }
 902 }
 903 ```
 904 ### DisableAppUpdate
 905 Turn off application updates.
 906
 907 **Compatibility:** Firefox 60, Firefox ESR 60\
 908 **CCK2 Equivalent:** `disableFirefoxUpdates`\
 909 **Preferences Affected:** N/A
 910
 911 #### Windows (GPO)
 912 ```
 913 Software\Policies\Mozilla\Firefox\DisableAppUpdate = 0x1 | 0x0
 914 ```
 915 #### Windows (Intune)
 916 OMA-URI:
 917 ```
 918 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableAppUpdate
 919 ```
 920 Value (string):
 921 ```
 922 <enabled/> or <disabled/>
 923 ```
 924 #### macOS
 925 ```
 926 <dict>
 927   <key>DisableAppUpdate</key>
 928   <true/> | <false/>
 929 </dict>
 930 ```
 931 #### policies.json
 932 ```
 933 {
 934   "policies": {
 935     "DisableAppUpdate": true | false
 936   }
 937 }
 938 ```
 939 ### DisableBuiltinPDFViewer
 940 Disable the built in PDF viewer. PDF files are downloaded and sent externally.
 941
 942 **Compatibility:** Firefox 60, Firefox ESR 60\
 943 **CCK2 Equivalent:** `disablePDFjs`\
 944 **Preferences Affected:** `pdfjs.disabled`
 945
 946 #### Windows (GPO)
 947 ```
 948 Software\Policies\Mozilla\Firefox\DisableBuiltinPDFViewer = 0x1 | 0x0
 949 ```
 950 #### Windows (Intune)
 951 OMA-URI:
 952 ```
 953 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableBuiltinPDFViewer
 954 ```
 955 Value (string):
 956 ```
 957 <enabled/> or <disabled/>
 958 ```
 959 #### macOS
 960 ```
 961 <dict>
 962   <key>DisableBuiltinPDFViewer</key>
 963   <true/> | <false/>
 964 </dict>
 965 ```
 966 #### policies.json
 967 ```
 968 {
 969   "policies": {
 970     "DisableBuiltinPDFViewer": true | false
 971   }
 972 }
 973 ```
 974 ### DisabledCiphers
 975 Disable specific cryptographic ciphers.
 976
 977 ---
 978 **Note:**
 979
 980 This policy was updated in Firefox 78 to allow enabling ciphers as well. Setting the value to true disables the cipher, setting the value to false enables the cipher. Previously setting the value to true or false disabled the cipher.
 981
 982 ---
 983 **Compatibility:** Firefox 76, Firefox ESR 68.8 (TLS_RSA_WITH_AES_128_GCM_SHA256 and TLS_RSA_WITH_AES_256_GCM_SHA384 were added in Firefox 78)\
 984 **CCK2 Equivalent:** N/A\
 985 **Preferences Affected:** N/A
 986
 987 #### Windows (GPO)
 988 ```
 989 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_DHE_RSA_WITH_AES_128_CBC_SHA = 0x1 | 0x0
 990 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_DHE_RSA_WITH_AES_256_CBC_SHA = 0x1 | 0x0
 991 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA = 0x1 | 0x0
 992 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA = 0x1 | 0x0
 993 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 = 0x1 | 0x0
 994 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 = 0x1 | 0x0
 995 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_RSA_WITH_AES_128_CBC_SHA = 0x1 | 0x0
 996 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_RSA_WITH_AES_256_CBC_SHA = 0x1 | 0x0
 997 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_RSA_WITH_3DES_EDE_CBC_SHA = 0x1 | 0x0
 998 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_RSA_WITH_AES_128_GCM_SHA256 = 0x1 | 0x0
 999 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_RSA_WITH_AES_256_GCM_SHA384 = 0x1 | 0x0
1000 ```
1001 #### Windows (Intune)
1002 OMA-URI:
1003 ```
1004 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_DHE_RSA_WITH_AES_128_CBC_SHA
1005 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_DHE_RSA_WITH_AES_256_CBC_SHA
1006 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
1007 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
1008 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
1009 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
1010 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_RSA_WITH_AES_128_CBC_SHA
1011 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_RSA_WITH_AES_256_CBC_SHA
1012 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_RSA_WITH_3DES_EDE_CBC_SHA
1013 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_RSA_WITH_AES_128_GCM_SHA256
1014 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_RSA_WITH_AES_256_GCM_SHA384
1015 ```
1016 Value (string):
1017 ```
1018 <enabled/> or <disabled/>
1019 ```
1020 #### macOS
1021 ```
1022 <dict>
1023   <key>DisabledCiphers</key>
1024     <dict>
1025       <key>TLS_DHE_RSA_WITH_AES_128_CBC_SHA</key>
1026       <true/> | <false/>
1027       <key>TLS_DHE_RSA_WITH_AES_256_CBC_SHA</key>
1028       <true/> | <false/>
1029       <key>TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA</key>
1030       <true/> | <false/>
1031       <key>TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA</key>
1032       <true/> | <false/>
1033       <key>TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256</key>
1034       <true/> | <false/>
1035       <key>TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256</key>
1036       <true/> | <false/>
1037       <key>TLS_RSA_WITH_AES_128_CBC_SHA</key>
1038       <true/> | <false/>
1039       <key>TLS_RSA_WITH_AES_256_CBC_SHA</key>
1040       <true/> | <false/>
1041       <key>TLS_RSA_WITH_3DES_EDE_CBC_SHA</key>
1042       <true/> | <false/>
1043       <key>TLS_RSA_WITH_AES_128_GCM_SHA256</key>
1044       <true/> | <false/>
1045       <key>TLS_RSA_WITH_AES_256_GCM_SHA384</key>
1046       <true/> | <false/>
1047     </dict>
1048 </dict>
1049 ```
1050 #### policies.json
1051 ```
1052 {
1053   "policies": {
1054     "DisabledCiphers" {
1055       "TLS_DHE_RSA_WITH_AES_128_CBC_SHA": true | false,
1056       "TLS_DHE_RSA_WITH_AES_256_CBC_SHA": true | false,
1057       "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA": true | false,
1058       "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA": true | false,
1059       "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256": true | false,
1060       "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256": true | false,
1061       "TLS_RSA_WITH_AES_128_CBC_SHA": true | false,
1062       "TLS_RSA_WITH_AES_256_CBC_SHA": true | false,
1063       "TLS_RSA_WITH_3DES_EDE_CBC_SHA": true | false
1064       "TLS_RSA_WITH_AES_128_GCM_SHA256": true | false
1065       "TLS_RSA_WITH_AES_256_GCM_SHA384": true | false
1066     }
1067   }
1068 }
1069 ```
1070 ### DisableDefaultBrowserAgent
1071 Prevent the default browser agent from taking any actions. Only applicable to Windows; other platforms don’t have the agent.
1072
1073 **Compatibility:** Firefox 75, Firefox ESR 68.7 (Windows only)\
1074 **CCK2 Equivalent:** N/A\
1075 **Preferences Affected:** N/A
1076
1077 #### Windows (GPO)
1078 ```
1079 Software\Policies\Mozilla\Firefox\DisableDefaultBrowserAgent = 0x1 | 0x0
1080 ```
1081 #### Windows (Intune)
1082 OMA-URI:
1083 ```
1084 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableDefaultBrowserAgent
1085 ```
1086 Value (string):
1087 ```
1088 <enabled/> or <disabled/>
1089 ```
1090 #### policies.json
1091 ```
1092 {
1093   "policies": {
1094     "DisableDefaultBrowserAgent": true | false
1095   }
1096 }
1097 ```
1098 ### DisableDeveloperTools
1099 Remove access to all developer tools.
1100
1101 **Compatibility:** Firefox 60, Firefox ESR 60\
1102 **CCK2 Equivalent:** `removeDeveloperTools`\
1103 **Preferences Affected:** `devtools.policy.disabled`
1104
1105 #### Windows (GPO)
1106 ```
1107 Software\Policies\Mozilla\Firefox\DisableDeveloperTools = 0x1 | 0x0`
1108 ```
1109 #### Windows (Intune)
1110 OMA-URI:
1111 ```
1112 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableDeveloperTools
1113 ```
1114 Value (string):
1115 ```
1116 <enabled/> or <disabled/>
1117 ```
1118 #### macOS
1119 ```
1120 <dict>
1121   <key>DisableDeveloperTools</key>
1122   <true/> | <false/>
1123 </dict>
1124 ```
1125 #### policies.json
1126 ```
1127 {
1128   "policies": {
1129     "DisableDeveloperTools": true | false
1130   }
1131 }
1132 ```
1133 ### DisableFeedbackCommands
1134 Disable the menus for reporting sites (Submit Feedback, Report Deceptive Site).
1135
1136 **Compatibility:** Firefox 60, Firefox ESR 60\
1137 **CCK2 Equivalent:** N/A\
1138 **Preferences Affected:** N/A
1139
1140 #### Windows (GPO)
1141 ```
1142 Software\Policies\Mozilla\Firefox\DisableFeedbackCommands = 0x1 | 0x0
1143 ```
1144 #### Windows (Intune)
1145 OMA-URI:
1146 ```
1147 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFeedbackCommands
1148 ```
1149 Value (string):
1150 ```
1151 <enabled/> or <disabled/>
1152 ```
1153 #### macOS
1154 ```
1155 <dict>
1156   <key>DisableFeedbackCommands</key>
1157   <true/> | <false/>
1158 </dict>
1159 ```
1160 #### policies.json
1161 ```
1162 {
1163   "policies": {
1164     "DisableFeedbackCommands": true | false
1165   }
1166 }
1167 ```
1168 ### DisableFirefoxScreenshots
1169 Remove access to Firefox Screenshots.
1170
1171 **Compatibility:** Firefox 60, Firefox ESR 60\
1172 **CCK2 Equivalent:** N/A\
1173 **Preferences Affected:** `extensions.screenshots.disabled`
1174
1175 #### Windows (GPO)
1176 ```
1177 Software\Policies\Mozilla\Firefox\DisableFirefoxScreenshots = 0x1 | 0x0
1178 ```
1179 #### Windows (Intune)
1180 OMA-URI:
1181 ```
1182 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxScreenshots
1183 ```
1184 Value (string):
1185 ```
1186 <enabled/> or <disabled/>
1187 ```
1188 #### macOS
1189 ```
1190 <dict>
1191   <key>DisableFirefoxScreenshots</key>
1192   <true/> | <false/>
1193 </dict>
1194 ```
1195 #### policies.json
1196 ```
1197 {
1198   "policies": {
1199     "DisableFirefoxScreenshots": true | false
1200   }
1201 }
1202 ```
1203 ### DisableFirefoxAccounts
1204 Disable Firefox Accounts integration (Sync).
1205
1206 **Compatibility:** Firefox 60, Firefox ESR 60\
1207 **CCK2 Equivalent:** `disableSync`\
1208 **Preferences Affected:** `identity.fxaccounts.enabled`
1209
1210 #### Windows (GPO)
1211 ```
1212 Software\Policies\Mozilla\Firefox\DisableFirefoxAccounts = 0x1 | 0x0
1213 ```
1214 #### Windows (Intune)
1215 OMA-URI:
1216 ```
1217 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxAccounts
1218 ```
1219 Value (string):
1220 ```
1221 <enabled/> or <disabled/>
1222 ```
1223 #### macOS
1224 ```
1225 <dict>
1226   <key>DisableFirefoxAccounts</key>
1227   <true/> | <false/>
1228 </dict>
1229 ```
1230 #### policies.json
1231 ```
1232 {
1233   "policies": {
1234     "DisableFirefoxAccounts": true | false
1235   }
1236 }
1237 ```
1238 ### DisableFirefoxStudies
1239 Disable Firefox studies (Shield).
1240
1241 **Compatibility:** Firefox 60, Firefox ESR 60\
1242 **CCK2 Equivalent:** N/A\
1243 **Preferences Affected:** N/A
1244
1245 #### Windows (GPO)
1246 ```
1247 Software\Policies\Mozilla\Firefox\DisableFirefoxStudies = 0x1 | 0x0
1248 ```
1249 #### Windows (Intune)
1250 OMA-URI:
1251 ```
1252 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxStudies
1253 ```
1254 Value (string):
1255 ```
1256 <enabled/> or <disabled/>
1257 ```
1258 #### macOS
1259 ```
1260 <dict>
1261   <key>DisableFirefoxStudies</key>
1262   <true/> | <false/>
1263 </dict>
1264 ```
1265 #### policies.json
1266 ```
1267 {
1268   "policies": {
1269     "DisableFirefoxStudies": true | false
1270   }
1271 }
1272 ```
1273 ### DisableForgetButton
1274 Disable the "Forget" button.
1275
1276 **Compatibility:** Firefox 60, Firefox ESR 60\
1277 **CCK2 Equivalent:** `disableForget`\
1278 **Preferences Affected:** N/A
1279
1280 #### Windows (GPO)
1281 ```
1282 Software\Policies\Mozilla\Firefox\DisableForgetButton = 0x1 | 0x0
1283 ```
1284 #### Windows (Intune)
1285 OMA-URI:
1286 ```
1287 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableForgetButton
1288 ```
1289 Value (string):
1290 ```
1291 <enabled/> or <disabled/>
1292 ```
1293 #### macOS
1294 ```
1295 <dict>
1296   <key>DisableForgetButton</key>
1297   <true/> | <false/>
1298 </dict>
1299 ```
1300 #### policies.json
1301 ```
1302 {
1303   "policies": {
1304     "DisableForgetButton": true | false
1305   }
1306 }
1307 ```
1308 ### DisableFormHistory
1309 Turn off saving information on web forms and the search bar.
1310
1311 **Compatibility:** Firefox 60, Firefox ESR 60\
1312 **CCK2 Equivalent:** `disableFormFill`\
1313 **Preferences Affected:** ` browser.formfill.enable`
1314
1315 #### Windows (GPO)
1316 ```
1317 Software\Policies\Mozilla\Firefox\DisableFormHistory = 0x1 | 0x0
1318 ```
1319 #### Windows (Intune)
1320 OMA-URI:
1321 ```
1322 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFormHistory
1323 ```
1324 Value (string):
1325 ```
1326 <enabled/> or <disabled/>
1327 ```
1328 #### macOS
1329 ```
1330 <dict>
1331   <key>DisableFormHistory</key>
1332   <true/> | <false/>
1333 </dict>
1334 ```
1335 #### policies.json
1336 ```
1337 {
1338   "policies": {
1339     "DisableFormHistory": true | false
1340   }
1341 }
1342 ```
1343 ### DisablePasswordReveal
1344 Do not allow passwords to be shown in saved logins
1345
1346 **Compatibility:** Firefox 71, Firefox ESR 68.3\
1347 **CCK2 Equivalent:** N/A
1348 **Preferences Affected:** N/A
1349
1350 #### Windows (GPO)
1351 ```
1352 Software\Policies\Mozilla\Firefox\DisablePasswordReveal = 0x1 | 0x0
1353 ```
1354 #### Windows (Intune)
1355 OMA-URI:
1356 ```
1357 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePasswordReveal
1358 ```
1359 Value (string):
1360 ```
1361 <enabled/> or <disabled/>
1362 ```
1363 #### macOS
1364 ```
1365 <dict>
1366   <key>DisablePasswordReveal</key>
1367   <true/> | <false/>
1368 </dict>
1369 ```
1370 #### policies.json
1371 ```
1372 {
1373   "policies": {
1374     "DisablePasswordReveal": true | false
1375   }
1376 }
1377 ```
1378 ### DisablePocket
1379 Remove Pocket in the Firefox UI. It does not remove it from the new tab page.
1380
1381 **Compatibility:** Firefox 60, Firefox ESR 60\
1382 **CCK2 Equivalent:** `disablePocket`\
1383 **Preferences Affected:** `extensions.pocket.enabled`
1384
1385 #### Windows (GPO)
1386 ```
1387 Software\Policies\Mozilla\Firefox\DisablePocket = 0x1 | 0x0
1388 ```
1389 #### Windows (Intune)
1390 OMA-URI:
1391 ```
1392 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePocket
1393 ```
1394 Value (string):
1395 ```
1396 <enabled/> or <disabled/>
1397 ```
1398 #### macOS
1399 ```
1400 <dict>
1401   <key>DisablePocket</key>
1402   <true/> | <false/>
1403 </dict>
1404 ```
1405 #### policies.json
1406 ```
1407 {
1408   "policies": {
1409     "DisablePocket": true | false
1410   }
1411 }
1412 ```
1413 ### DisablePrivateBrowsing
1414 Remove access to private browsing.
1415
1416 **Compatibility:** Firefox 60, Firefox ESR 60\
1417 **CCK2 Equivalent:** `disablePrivateBrowsing`\
1418 **Preferences Affected:** N/A
1419
1420 #### Windows (GPO)
1421 ```
1422 Software\Policies\Mozilla\Firefox\DisablePrivateBrowsing = 0x1 | 0x0
1423 ```
1424 #### Windows (Intune)
1425 OMA-URI:
1426 ```
1427 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePrivateBrowsing
1428 ```
1429 Value (string):
1430 ```
1431 <enabled/> or <disabled/>
1432 ```
1433 #### macOS
1434 ```
1435 <dict>
1436   <key>DisablePrivateBrowsing</key>
1437   <true/> | <false/>
1438 </dict>
1439 ```
1440 #### policies.json
1441 ```
1442 {
1443   "policies": {
1444     "DisablePrivateBrowsing": true | false
1445   }
1446 }
1447 ```
1448 ### DisableProfileImport
1449 Disables the "Import data from another browser" option in the bookmarks window.
1450
1451 **Compatibility:** Firefox 60, Firefox ESR 60\
1452 **CCK2 Equivalent:** N/A\
1453 **Preferences Affected:** N/A
1454
1455 #### Windows (GPO)
1456 ```
1457 Software\Policies\Mozilla\Firefox\DisableProfileImport = 0x1 | 0x0
1458 ```
1459 #### Windows (Intune)
1460 OMA-URI:
1461 ```
1462 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableProfileImport
1463 ```
1464 Value (string):
1465 ```
1466 <enabled/> or <disabled/>
1467 ```
1468 #### macOS
1469 ```
1470 <dict>
1471   <key>DisableProfileImport</key>
1472   <true/> | <false/>
1473 </dict>
1474 ```
1475 #### policies.json
1476 ```
1477 {
1478   "policies": {
1479     "DisableProfileImport": true | false
1480   }
1481 }
1482 ```
1483 ### DisableProfileRefresh
1484 Disable the Refresh Firefox button on about:support and support.mozilla.org, as well as the prompt that displays offering to refresh Firefox when you haven't used it in a while.
1485
1486 **Compatibility:** Firefox 60, Firefox ESR 60\
1487 **CCK2 Equivalent:** `disableResetFirefox`\
1488 **Preferences Affected:** `browser.disableResetPrompt`
1489
1490 #### Windows (GPO)
1491 ```
1492 Software\Policies\Mozilla\Firefox\DisableProfileRefresh = 0x1 | 0x0
1493 ```
1494 #### Windows (Intune)
1495 OMA-URI:
1496 ```
1497 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableProfileRefresh
1498 ```
1499 Value (string):
1500 ```
1501 <enabled/> or <disabled/>
1502 ```
1503 #### macOS
1504 ```
1505 <dict>
1506   <key>DisableProfileRefresh</key>
1507   <true/> | <false/>
1508 </dict>
1509 ```
1510 #### policies.json
1511 ```
1512 {
1513   "policies": {
1514     "DisableProfileRefresh": true | false
1515   }
1516 }
1517 ```
1518 ### DisableSafeMode
1519 Disable safe mode within the browser.
1520
1521 On Windows, this disables safe mode via the command line as well.
1522
1523 **Compatibility:** Firefox 60, Firefox ESR 60 (Windows, macOS)\
1524 **CCK2 Equivalent:** `disableSafeMode`\
1525 **Preferences Affected:** N/A
1526
1527 #### Windows (GPO)
1528 ```
1529 Software\Policies\Mozilla\Firefox\DisableSafeMode = 0x1 | 0x0
1530 ```
1531 #### Windows (Intune)
1532 OMA-URI:
1533 ```
1534 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSafeMode
1535 ```
1536 Value (string):
1537 ```
1538 <enabled/> or <disabled/>
1539 ```
1540 #### macOS
1541 ```
1542 <dict>
1543   <key>DisableSafeMode</key>
1544   <true/> | <false/>
1545 </dict>
1546 ```
1547 #### policies.json
1548 ```
1549 {
1550   "policies": {
1551     "DisableSafeMode": true | false
1552   }
1553 }
1554 ```
1555 ### DisableSecurityBypass
1556 Prevent the user from bypassing security in certain cases.
1557
1558 `InvalidCertificate` prevents adding an exception when an invalid certificate is shown.
1559
1560 `SafeBrowsing` prevents selecting "ignore the risk" and visiting a harmful site anyway.
1561
1562 **Compatibility:** Firefox 60, Firefox ESR 60\
1563 **CCK2 Equivalent:** N/A\
1564 **Preferences Affected:** `security.certerror.hideAddException`,`browser.safebrowsing.allowOverride`
1565
1566 #### Windows (GPO)
1567 ```
1568 Software\Policies\Mozilla\Firefox\DisableSecurityBypass\InvalidCertificate = 0x1 | 0x0
1569 Software\Policies\Mozilla\Firefox\DisableSecurityBypass\SafeBrowsing = 0x1 | 0x0
1570 ```
1571 #### Windows (Intune)
1572 OMA-URI:
1573 ```
1574 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/P_DisableSecurityBypass_InvalidCertificate
1575 ```
1576 Value (string):
1577 ```
1578 <enabled/> or <disabled/>
1579 ```
1580 OMA-URI:
1581 ```
1582 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/P_DisableSecurityBypass_SafeBrowsing
1583 ```
1584 Value (string):
1585 ```
1586 <enabled/> or <disabled/>
1587 ```
1588
1589 #### macOS
1590 ```
1591 <dict>
1592   <key>DisableSecurityBypass</key>
1593   <dict>
1594     <key>InvalidCertificate</key>
1595     <true/> | <false/>
1596     <key>SafeBrowsing</key>
1597     <true/> | <false/>
1598   </dict>
1599 </dict>
1600 ```
1601 #### policies.json
1602 ```
1603 {
1604   "policies": {
1605     "DisableSecurityBypass": {
1606       "InvalidCertificate": true | false,
1607       "SafeBrowsing": true | false
1608     }
1609   }
1610 }
1611 ```
1612 ### DisableSystemAddonUpdate
1613 Prevent system add-ons from being installed or update.
1614
1615 **Compatibility:** Firefox 60, Firefox ESR 60\
1616 **CCK2 Equivalent:** N/A\
1617 **Preferences Affected:** N/A
1618
1619 #### Windows (GPO)
1620 ```
1621 Software\Policies\Mozilla\Firefox\DisableSystemAddonUpdate = 0x1 | 0x0
1622 ```
1623 #### Windows (Intune)
1624 OMA-URI:
1625 ```
1626 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSystemAddonUpdate
1627 ```
1628 Value (string):
1629 ```
1630 <enabled/> or <disabled/>
1631 ```
1632 #### macOS
1633 ```
1634 <dict>
1635   <key>DisableSystemAddonUpdate</key>
1636   <true/> | <false/>
1637 </dict>
1638 ```
1639 #### policies.json
1640 ```
1641 {
1642   "policies": {
1643     "DisableSystemAddonUpdate": true | false
1644   }
1645 }
1646 ```
1647 ### DisableTelemetry
1648 Prevent the upload of telemetry data.
1649
1650 As of Firefox 83 and Firefox ESR 78.5, local storage of telemetry data is disabled as well.
1651
1652 Mozilla recommends that you do not disable telemetry. Information collected through telemetry helps us build a better product for businesses like yours.
1653
1654 **Compatibility:** Firefox 60, Firefox ESR 60\
1655 **CCK2 Equivalent:** `disableTelemetry`\
1656 **Preferences Affected:** `datareporting.healthreport.uploadEnabled,datareporting.policy.dataSubmissionEnabled,toolkit.telemetry.archive.enabled`
1657
1658 #### Windows (GPO)
1659 ```
1660 Software\Policies\Mozilla\Firefox\DisableTelemetry = 0x1 | 0x0
1661 ```
1662 #### Windows (Intune)
1663 OMA-URI:
1664 ```
1665 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableTelemetry
1666 ```
1667 Value (string):
1668 ```
1669 <enabled/> or <disabled/>
1670 ```
1671 #### macOS
1672 ```
1673 <dict>
1674   <key>DisableTelemetry</key>
1675   <true/> | <false/>
1676 </dict>
1677 ```
1678 #### policies.json
1679 ```
1680 {
1681   "policies": {
1682     "DisableTelemetry": true | false
1683   }
1684 }
1685 ```
1686 ### DisplayBookmarksToolbar
1687 Set the initial state of the bookmarks toolbar. A user can still hide it and it will stay hidden.
1688
1689 **Compatibility:** Firefox 60, Firefox ESR 60\
1690 **CCK2 Equivalent:** `displayBookmarksToolbar`\
1691 **Preferences Affected:** N/A
1692
1693 #### Windows (GPO)
1694 ```
1695 Software\Policies\Mozilla\Firefox\DisplayBookmarksToolbar = 0x1 | 0x0
1696 ```
1697 #### Windows (Intune)
1698 OMA-URI:
1699 ```
1700 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisplayBookmarksToolbar
1701 ```
1702 Value (string):
1703 ```
1704 <enabled/> or <disabled/>
1705 ```
1706 #### macOS
1707 ```
1708 <dict>
1709   <key>DisplayBookmarksToolbar</key>
1710   <true/> | <false/>
1711 </dict>
1712 ```
1713 #### policies.json
1714 ```
1715 {
1716   "policies": {
1717     "DisplayBookmarksToolbar": true | false
1718   }
1719 }
1720 ```
1721 ### DisplayMenuBar (Deprecated)
1722 Set the initial state of the menubar. A user can still hide it and it will stay hidden.
1723
1724 **Compatibility:** Firefox 60, Firefox ESR 60 (Windows, some Linux)\
1725 **CCK2 Equivalent:** `displayMenuBar`\
1726 **Preferences Affected:** N/A
1727
1728 #### Windows (GPO)
1729 ```
1730 Software\Policies\Mozilla\Firefox\DisplayMenuBar = 0x1 | 0x0
1731 ```
1732 #### macOS
1733 ```
1734 <dict>
1735   <key>DisplayMenuBar</key>
1736   <true/> | <false/>
1737 </dict>
1738 ```
1739 #### policies.json
1740 ```
1741 {
1742   "policies": {
1743     "DisplayMenuBar": true | false
1744   }
1745 }
1746 ```
1747 ### DisplayMenuBar
1748 Set the state of the menubar.
1749
1750 `always` means the menubar is shown and cannot be hidden.
1751
1752 `never` means the menubar is hidden and cannot be shown.
1753
1754 `default-on` means the menubar is on by default but can be hidden.
1755
1756 `default-off` means the menubar is off by default but can be shown.
1757
1758 **Compatibility:** Firefox 73, Firefox ESR 68.5 (Windows, some Linux)\
1759 **CCK2 Equivalent:** `displayMenuBar`\
1760 **Preferences Affected:** N/A
1761
1762 #### Windows (GPO)
1763 ```
1764 Software\Policies\Mozilla\Firefox\DisplayMenuBar = "always", "never", "default-on", "default-off"
1765 ```
1766 #### Windows (Intune)
1767 OMA-URI:
1768 ```
1769 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisplayMenuBar_Enum
1770 ```
1771 Value (string):
1772 ```
1773 <enabled/>
1774 <data id="DisplayMenuBar" value="always | never | default-on | default-off"/>
1775 ```
1776 #### macOS
1777 ```
1778 <dict>
1779   <key>DisplayMenuBar</key>
1780   <string>always | never | default-on | default-off</string>
1781 </dict>
1782 ```
1783 #### policies.json
1784 ```
1785 {
1786   "policies": {
1787     "DisplayMenuBar": "always", "never", "default-on", "default-off"
1788   }
1789 }
1790 ```
1791 ### DNSOverHTTPS
1792 Configure DNS over HTTPS.
1793
1794 `Enabled` determines whether DNS over HTTPS is enabled
1795
1796 `ProviderURL` is a URL to another provider.
1797
1798 `Locked` prevents the user from changing DNS over HTTPS preferences.
1799
1800 `ExcludedDomains` excludes domains from DNS over HTTPS.
1801
1802 **Compatibility:** Firefox 63, Firefox ESR 68 (ExcludedDomains added in 75/68.7)\
1803 **CCK2 Equivalent:** N/A\
1804 **Preferences Affected:** `network.trr.mode`,`network.trr.uri`
1805
1806 #### Windows (GPO)
1807 ```
1808 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\Enabled = 0x1 | 0x0
1809 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\ProviderURL = "URL_TO_ALTERNATE_PROVIDER"
1810 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\Locked = 0x1 | 0x0
1811 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\ExcludedDomains\1 = "example.com"
1812 ```
1813 #### Windows (Intune)
1814 OMA-URI:
1815 ```
1816 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_Enabled
1817 ```
1818 Value (string):
1819 ```
1820 <enabled/> or <disabled/>
1821 ```
1822 OMA-URI:
1823 ```
1824 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_ProviderURL
1825 ```
1826 Value (string):
1827 ```
1828 <enabled/>
1829 <data id="String" value="URL_TO_ALTERNATE_PROVIDER"/>
1830 ```
1831 OMA-URI:
1832 ```
1833 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_Locked
1834 ```
1835 Value (string):
1836 ```
1837 <enabled/> or <disabled/>
1838 ```
1839 OMA-URI:
1840 ```
1841 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_ExcludedDomains
1842 ```
1843 Value (string):
1844 ```
1845 <enabled/>
1846 <data id="List" value="1&#xF000;example.com"/>
1847 ```
1848 #### macOS
1849 ```
1850 <dict>
1851   <key>DNSOverHTTPS</key>
1852   <dict>
1853     <key>Enabled</key>
1854     <true/> | <false/>
1855     <key>ProviderURL</key>
1856     <string>URL_TO_ALTERNATE_PROVIDER</string>
1857     <key>Locked</key>
1858     <true/> | <false/>
1859     <key>ExcludedDomains</key>
1860     <array>
1861       <string>example.com</string>
1862     </array>
1863   </dict>
1864 </dict>
1865 ```
1866 #### policies.json
1867 ```
1868 {
1869   "policies": {
1870     "DNSOverHTTPS": {
1871       "Enabled":  true | false,
1872       "ProviderURL": "URL_TO_ALTERNATE_PROVIDER",
1873       "Locked": true | false,
1874       "ExcludedDomains": ["example.com"]
1875     }
1876   }
1877 }
1878 ```
1879 ### DontCheckDefaultBrowser
1880 Don't check if Firefox is the default browser at startup.
1881
1882 **Compatibility:** Firefox 60, Firefox ESR 60\
1883 **CCK2 Equivalent:** `dontCheckDefaultBrowser`\
1884 **Preferences Affected:** `browser.shell.checkDefaultBrowser`
1885
1886 #### Windows (GPO)
1887 ```
1888 Software\Policies\Mozilla\Firefox\DontCheckDefaultBrowser = 0x1 | 0x0
1889 ```
1890 #### Windows (Intune)
1891 OMA-URI:
1892 ```
1893 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DontCheckDefaultBrowser
1894 ```
1895 Value (string):
1896 ```
1897 <enabled/> or <disabled/>
1898 ```
1899 #### macOS
1900 ```
1901 <dict>
1902   <key>DontCheckDefaultBrowser</key>
1903   <true/> | <false/>
1904 </dict>
1905 ```
1906 #### policies.json
1907 ```
1908 {
1909   "policies": {
1910     "DontCheckDefaultBrowser": true | false
1911   }
1912 }
1913 ```
1914 ### DefaultDownloadDirectory
1915 Set the default download directory.
1916
1917 You can use ${home} for the native home directory.
1918
1919 **Compatibility:** Firefox 68, Firefox ESR 68\
1920 **CCK2 Equivalent:** N/A\
1921 **Preferences Affected:** `browser.download.dir`,`browser.download.folderList`
1922
1923 #### Windows (GPO)
1924 ```
1925 Software\Policies\Mozilla\Firefox\DefaultDownloadDirectory = "${home}\Downloads"
1926 ```
1927 #### Windows (Intune)
1928 OMA-URI:
1929 ```
1930 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DefaultDownloadDirectory
1931 ```
1932 Value (string):
1933 ```
1934 <enabled/>
1935 <data id="Preferences_String" value="${home}\Downloads"/>
1936 ```
1937 #### macOS
1938 ```
1939 <dict>
1940   <key>DefaultDownloadDirectory</key>
1941   <string>${home}/Downloads</string>
1942 </dict>
1943 ```
1944 #### policies.json (macOS and Linux)
1945 ```
1946 {
1947   "policies": {
1948     "DefaultDownloadDirectory": "${home}/Downloads"
1949 }
1950 ```
1951 #### policies.json (Windows)
1952 ```
1953 {
1954   "policies": {
1955     "DefaultDownloadDirectory": "${home}\\Downloads"
1956 }
1957 ```
1958 ### DownloadDirectory
1959 Set and lock the download directory.
1960
1961 You can use ${home} for the native home directory.
1962
1963 **Compatibility:** Firefox 68, Firefox ESR 68\
1964 **CCK2 Equivalent:** N/A\
1965 **Preferences Affected:** `browser.download.dir`,`browser.download.folderList`,`browser.download.useDownloadDir`
1966
1967 #### Windows (GPO)
1968 ```
1969 Software\Policies\Mozilla\Firefox\DownloadDirectory = "${home}\Downloads"
1970 ```
1971 #### Windows (Intune)
1972 OMA-URI:
1973 ```
1974 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DownloadDirectory
1975 ```
1976 Value (string):
1977 ```
1978 <enabled/>
1979 <data id="Preferences_String" value="${home}\Downloads"/>
1980 ```
1981 #### macOS
1982 ```
1983 <dict>
1984   <key>DownloadDirectory</key>
1985   <string>${home}/Downloads</string>
1986 </dict>
1987 ```
1988 #### policies.json (macOS and Linux)
1989 ```
1990 {
1991   "policies": {
1992     "DownloadDirectory": "${home}/Downloads"
1993 }
1994 ```
1995 #### policies.json (Windows)
1996 ```
1997 {
1998   "policies": {
1999     "DownloadDirectory": "${home}\\Downloads"
2000 }
2001 ```
2002 ### EnableTrackingProtection
2003 Configure tracking protection.
2004
2005 If this policy is not configured, tracking protection is not enabled by default in the browser, but it is enabled by default in private browsing and the user can change it.
2006
2007 If `Value` is set to false, tracking protection is disabled and locked in both the regular browser and private browsing.
2008
2009 If `Value` is set to true, tracking protection is enabled by default in both the regular browser and private browsing and the `Locked` value determines whether or not a user can change it.
2010
2011 If `Cryptomining` is set to true, cryptomining scripts on websites are blocked.
2012
2013 If `Fingerprinting` is set to true, fingerprinting scripts on websites are blocked.
2014
2015 `Exceptions` are origins for which tracking protection is not enabled.
2016
2017 **Compatibility:** Firefox 60, Firefox ESR 60 (Cryptomining and Fingerprinting added in 70/68.2, Exceptions added in 73/68.5)\
2018 **CCK2 Equivalent:** N/A\
2019 **Preferences Affected:** `privacy.trackingprotection.enabled`,`privacy.trackingprotection.pbmode.enabled`,`privacy.trackingprotection.cryptomining.enabled`,`privacy.trackingprotection.fingerprinting.enabled`
2020
2021 #### Windows (GPO)
2022 ```
2023 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Value = 0x1 | 0x0
2024 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Locked = 0x1 | 0x0
2025 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Cryptomining = 0x1 | 0x0
2026 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Fingerprinting = 0x1 | 0x0
2027 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Exceptions\1 = "https://example.com"
2028 ```
2029 #### Windows (Intune)
2030 OMA-URI:
2031 ```
2032 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/A_TrackingProtection_Value
2033 ```
2034 Value (string):
2035 ```
2036 <enabled/> or <disabled/>
2037 ```
2038 OMA-URI:
2039 ```
2040 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/B_TrackingProtection_Cryptomining
2041 ```
2042 Value (string):
2043 ```
2044 <enabled/> or <disabled/>
2045 ```
2046 OMA-URI:
2047 ```
2048 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/C_TrackingProtection_Fingerprinting
2049 ```
2050 Value (string):
2051 ```
2052 <enabled/> or <disabled/>
2053 ```
2054 OMA-URI:
2055 ```
2056 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/D_TrackingProtection_Exceptions
2057 ```
2058 Value (string):
2059 ```
2060 <data id="TrackingProtection_Exceptions" value="1&#xF000;https://example.com"/>
2061 ```
2062 OMA-URI:
2063 ```
2064 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/E_TrackingProtection_Locked
2065 ```
2066 Value (string):
2067 ```
2068 <enabled/> or <disabled/>
2069 ```
2070 #### macOS
2071 ```
2072 <dict>
2073   <key>EnableTrackingProtection</key>
2074   <dict>
2075     <key>Value</key>
2076     <true/> | <false/>
2077     <key>Locked</key>
2078     <true/> | <false/>
2079     <key>Cryptomining</key>
2080     <true/> | <false/>
2081     <key>Fingerprinting</key>
2082     <true/> | <false/>
2083     <key>Exceptions</key>
2084     <array>
2085       <string>https://example.com</string>
2086     </array>
2087   </dict>
2088 </dict>
2089 ```
2090 #### policies.json
2091 ```
2092 {
2093   "policies": {
2094     "EnableTrackingProtection": {
2095       "Value": true | false,
2096       "Locked": true | false,
2097       "Cryptomining": true | false,
2098       "Fingerprinting": true | false,
2099       "Exceptions": ["https://example.com"]
2100     }
2101 }
2102 ```
2103 ### EncryptedMediaExtensions
2104 Enable or disable Encrypted Media Extensions and optionally lock it.
2105
2106 If `Enabled` is set to false, encrypted media extensions (like Widevine) are not downloaded by Firefox unless the user consents to installing them.
2107
2108 If `Locked` is set to true and `Enabled` is set to false, Firefox will not download encrypted media extensions (like Widevine) or ask the user to install them.
2109
2110 **Compatibility:** Firefox 77, Firefox ESR 68.9\
2111 **CCK2 Equivalent:** N/A\
2112 **Preferences Affected:** `media.eme.enabled`
2113
2114 #### Windows (GPO)
2115 ```
2116 Software\Policies\Mozilla\Firefox\EncryptedMediaExtensions\Enabled = 0x1 | 0x0
2117 Software\Policies\Mozilla\Firefox\EncryptedMediaExtensions\Locked = 0x1 | 0x0
2118 ```
2119 #### Windows (Intune)
2120 OMA-URI:
2121 ```
2122 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~EncryptedMediaExtensions/EncryptedMediaExtensions_Enabled
2123 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~EncryptedMediaExtensions/EncryptedMediaExtensions_Locked
2124 ```
2125 Value (string):
2126 ```
2127 <enabled/>or <disabled/>
2128 ```
2129 #### macOS
2130 ```
2131 <dict>
2132   <key>EncryptedMediaExtensions</key>
2133   <dict>
2134     <key>Enabled</key>
2135     <true/> | <false/>
2136     <key>Locked</key>
2137     <true/> | <false/>
2138   </dict>
2139 </dict>
2140 ```
2141 #### policies.json
2142 ```
2143 {
2144   "policies": {
2145     "EncryptedMediaExtensions": {
2146       "Enabled": true | false,
2147       "Locked": true | false
2148     }
2149 }
2150 ```
2151 ### EnterprisePoliciesEnabled
2152 Enable policy support on macOS.
2153
2154 **Compatibility:** Firefox 63, Firefox ESR 60.3 (macOS only)\
2155 **CCK2 Equivalent:** N/A\
2156 **Preferences Affected:** N/A
2157
2158 #### macOS
2159 ```
2160 <dict>
2161   <key>EnterprisePoliciesEnabled</key>
2162   <true/>
2163 </dict>
2164 ```
2165 ### Extensions
2166 Control the installation, uninstallation and locking of extensions.
2167
2168 `Install` is a list of URLs or native paths for extensions to be installed.
2169
2170 `Uninstall` is a list of extension IDs that should be uninstalled if found.
2171
2172 `Locked` is a list of extension IDs that the user cannot disable or uninstall.
2173
2174 **Compatibility:** Firefox 60, Firefox ESR 60\
2175 **CCK2 Equivalent:** `addons`\
2176 **Preferences Affected:** N/A
2177
2178 #### Windows (GPO)
2179 ```
2180 Software\Policies\Mozilla\Firefox\Extensions\Install\1 = "https://addons.mozilla.org/firefox/downloads/somefile.xpi"
2181 Software\Policies\Mozilla\Firefox\Extensions\Install\2 = "//path/to/xpi"
2182 Software\Policies\Mozilla\Firefox\Extensions\Uninstall\1 = "bad_addon_id@mozilla.org"
2183 Software\Policies\Mozilla\Firefox\Extensions\Locked\1 = "addon_id@mozilla.org"
2184 ```
2185 #### Windows (Intune)
2186 OMA-URI:
2187 ```
2188 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/Extensions_Install
2189 ```
2190 Value (string):
2191 ```
2192 <enabled/>
2193 <data id="Extensions" value="1&#xF000;https://addons.mozilla.org/firefox/downloads/somefile.xpi&#xF000;2&#xF000;//path/to/xpi"/>
2194 ```
2195 OMA-URI:
2196 ```
2197 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/Extensions_Uninstall
2198 ```
2199 Value (string):
2200 ```
2201 <enabled/>
2202 <data id="Extensions" value="1&#xF000;bad_addon_id@mozilla.org"/>
2203 ```
2204 OMA-URI:
2205 ```
2206 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/Extensions_Locked
2207 ```
2208 Value (string):
2209 ```
2210 <enabled/>
2211 <data id="Extensions" value="1&#xF000;addon_id@mozilla.org"/>
2212 ```
2213 #### macOS
2214 ```
2215 <dict>
2216   <key>Extensions</key>
2217   <dict>
2218     <key>Install</key>
2219     <array>
2220       <string>https://addons.mozilla.org/firefox/downloads/somefile.xpi</string>
2221       <string>//path/to/xpi</string>
2222     </array>
2223     <key>Uninstall</key>
2224     <array>
2225       <string>bad_addon_id@mozilla.org</string>
2226     </array>
2227     <key>Locked</key>
2228     <array>
2229       <string>addon_id@mozilla.org</string>
2230     </array>
2231   </dict>
2232 </dict>
2233 ```
2234 #### policies.json
2235 ```
2236 {
2237   "policies": {
2238     "Extensions": {
2239       "Install": ["https://addons.mozilla.org/firefox/downloads/somefile.xpi", "//path/to/xpi"],
2240       "Uninstall": ["bad_addon_id@mozilla.org"],
2241       "Locked":  ["addon_id@mozilla.org"]
2242     }
2243   }
2244 }
2245 ```
2246 ### ExtensionSettings
2247 Manage all aspects of extensions. This policy is based heavily on the [Chrome policy](https://dev.chromium.org/administrators/policy-list-3/extension-settings-full) of the same name.
2248
2249 This policy maps an extension ID to its configuration. With an extension ID, the configuration will be applied to the specified extension only. A default configuration can be set for the special ID "*", which will apply to all extensions that don't have a custom configuration set in this policy.
2250
2251 To obtain an extension ID, install the extension and go to about:support. You will see the ID in the Extensions section. I've also created an extension that makes it easy to find the ID of extensions on AMO. You can download it [here](https://github.com/mkaply/queryamoid/releases/tag/v0.1).
2252
2253 The configuration for each extension is another dictionary that can contain the fields documented below.
2254
2255 | Name | Description |
2256 | --- | --- |
2257 | `installation_mode` | Maps to a string indicating the installation mode for the extension. The valid strings are `allowed`,`blocked`,`force_installed`, and `normal_installed`.
2258 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`allowed` | Allows the extension to be installed by the user. This is the default behavior. There is no need for an install_url; it will automatically be allowed based on the ID.
2259 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`blocked`| Blocks installation of the extension and removes it from the device if already installed.
2260 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`force_installed`| The extension is automatically installed and can't be removed by the user. This option is not valid for the default configuration and requires an install_url.
2261 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`normal_installed`| The extension is automatically installed but can be disabled by the user. This option is not valid for the default configuration and requires an install_url.
2262 | `install_url`| Maps to a URL indicating where Firefox can download a force_installed or normal_installed extension. If installing from the addons.mozilla.org, use the following URL (substituting SHORT_NAME from the URL on AMO), https://addons.mozilla.org/firefox/downloads/latest/SHORT_NAME/latest.xpi. If installing from the local file system, use a file:/// URL. Languages packs are available from https://releases.mozilla.org/pub/firefox/releases/VERSION/PLATFORM/xpi/LANGUAGE.xpi. If you need to update the extension, you can change the name of the extension and it will be automatically updated. Extensions installed from file URLs will additional be updated when their internal version changes.
2263 | `install_sources` | A list of sources from which installing extensions is allowed. **This is unnecessary if you are only allowing the installation of certain extensions by ID.** Each item in this list is an extension-style match pattern. Users will be able to easily install items from any URL that matches an item in this list. Both the location of the *.xpi file and the page where the download is started from (i.e.  the referrer) must be allowed by these patterns. This setting can be used only for the default configuration.
2264 | `allowed_types` | This setting whitelists the allowed types of extension/apps that can be installed in Firefox. The value is a list of strings, each of which should be one of the following: "extension", "theme", "dictionary", "locale" This setting can be used only for the default configuration.
2265 | `blocked_install_message` | This maps to a string specifying the error message to display to users if they're blocked from installing an extension. This setting allows you to append text to the generic error message displayed when the extension is blocked. This could be be used to direct users to your help desk, explain why a particular extension is blocked, or something else. This setting can be used only for the default configuration.
2266 | `restricted_domains` | An array of domains on which content scripts can't be run. This setting can be used only for the default configuration.
2267
2268 **Compatibility:** Firefox 69, Firefox ESR 68.1\
2269 **CCK2 Equivalent:** N/A\
2270 **Preferences Affected:** N/A
2271
2272 #### Windows (GPO)
2273 ```
2274 Software\Policies\Mozilla\Firefox\ExtensionSettings (REG_MULTI_SZ) =
2275 {
2276   "*": {
2277     "blocked_install_message": "Custom error message.",
2278     "install_sources": ["about:addons","https://addons.mozilla.org/"],
2279     "installation_mode": "blocked",
2280     "allowed_types": ["extension"]
2281   },
2282   "uBlock0@raymondhill.net": {
2283     "installation_mode": "force_installed",
2284     "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
2285   },
2286   "https-everywhere@eff.org": {
2287     "installation_mode": "allowed",
2288   }
2289 }
2290 ```
2291 #### Windows (Intune)
2292 OMA-URI:
2293 ```
2294 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/ExtensionSettings
2295 ```
2296 Value (string):
2297 ```
2298 <enabled/>
2299 <data id="ExtensionSettings" value='
2300 {
2301   "*": {
2302     "blocked_install_message": "Custom error message.",
2303     "install_sources": ["about:addons","https://addons.mozilla.org/"],
2304     "installation_mode": "blocked",
2305     "allowed_types": ["extension"]
2306   },
2307   "uBlock0@raymondhill.net": {
2308     "installation_mode": "force_installed",
2309     "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
2310   },
2311     "https-everywhere@eff.org": {
2312     "installation_mode": "allowed",
2313   }
2314 }'/>
2315 ```
2316 #### macOS
2317 ```
2318 <dict>
2319   <key>ExtensionSettings</key>
2320   <dict>
2321     <key>*</key>
2322     <dict>
2323       <key>blocked_install_message</key>
2324       <string>Custom error message.</string>
2325       <key>install_sources</key>
2326       <array>
2327         <string>about:addons</string>
2328         <string>https://addons.mozilla.org/</string>
2329       </array>
2330       <key>installation_mode</key>
2331       <string>blocked</string>
2332       <key>allowed_types</key>
2333       <array>
2334         <string>extension</string>
2335       </array>
2336     </dict>
2337     <key>uBlock0@raymondhill.net</key>
2338     <dict>
2339       <key>installation_mode</key>
2340        <string>force_installed</string>
2341       <key>install_url</key>
2342       <string>https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi</string>
2343     </dict>
2344     <key>https-everywhere@eff.org</key>
2345     <dict>
2346       <key>installation_mode</key>
2347        <string>allowed</string>
2348     </dict>
2349   </dict>
2350 </dict>
2351 ```
2352 #### policies.json
2353 ```
2354 {
2355   "policies": {
2356     "ExtensionSettings": {
2357       "*": {
2358         "blocked_install_message": "Custom error message.",
2359         "install_sources": ["about:addons","https://addons.mozilla.org/"],
2360         "installation_mode": "blocked",
2361         "allowed_types": ["extension"]
2362       },
2363       "uBlock0@raymondhill.net": {
2364         "installation_mode": "force_installed",
2365         "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
2366       },
2367       "https-everywhere@eff.org": {
2368         "installation_mode": "allowed"
2369       }
2370     }
2371   }
2372 }
2373 ```
2374 ### ExtensionUpdate
2375 Control extension updates.
2376
2377 **Compatibility:** Firefox 67, Firefox ESR 60.7\
2378 **CCK2 Equivalent:** N/A\
2379 **Preferences Affected:** `extensions.update.enabled`
2380
2381 #### Windows (GPO)
2382 ```
2383 Software\Policies\Mozilla\Firefox\ExtensionUpdate = 0x1 | 0x0
2384 ```
2385 #### Windows (Intune)
2386 OMA-URI:
2387 ```
2388 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/ExtensionUpdate
2389 ```
2390 Value (string):
2391 ```
2392 <enabled/> or <disabled/>
2393 ```
2394 #### macOS
2395 ```
2396 <dict>
2397   <key>ExtensionUpdate</key>
2398   <true/> | <false/>
2399 </dict>
2400 ```
2401 #### policies.json
2402 ```
2403 {
2404   "policies": {
2405     "ExtensionUpdate": true | false
2406   }
2407 }
2408 ```
2409 ### FlashPlugin
2410 Configure the default Flash plugin policy as well as origins for which Flash is allowed.
2411
2412 `Allow` is a list of origins where Flash are allowed.
2413
2414 `Block` is a list of origins where Flash is not allowed.
2415
2416 `Default` determines whether or not Flash is allowed by default.
2417
2418 `Locked` prevents the user from changing Flash preferences.
2419
2420 **Compatibility:** Firefox 60, Firefox ESR 60\
2421 **CCK2 Equivalent:** `permissions.plugin`\
2422 **Preferences Affected:** `plugin.state.flash`
2423
2424 #### Windows (GPO)
2425 ```
2426 Software\Policies\Mozilla\Firefox\FlashPlugin\Allow\1 = "https://example.org"
2427 Software\Policies\Mozilla\Firefox\FlashPlugin\Block\1 = "https://example.edu"
2428 Software\Policies\Mozilla\Firefox\FlashPlugin\Default = 0x1 | 0x0
2429 Software\Policies\Mozilla\Firefox\FlashPlugin\Locked = 0x1 | 0x0
2430 ```
2431 #### Windows (Intune)
2432 OMA-URI:
2433 ```
2434 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Flash/FlashPlugin_Allow
2435 ```
2436 Value (string):
2437 ```
2438 <enabled/>
2439 <data id="Permissions" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
2440 ```
2441 OMA-URI:
2442 ```
2443 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Flash/FlashPlugin_Locked
2444 ```
2445 Value (string):
2446 ```
2447 <enabled/> or <disabled/>
2448 ```
2449 OMA-URI:
2450 ```
2451 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Flash/FlashPlugin_Default
2452 ```
2453 Value (string):
2454 ```
2455 <enabled/> or <disabled/>
2456 ```
2457 #### macOS
2458 ```
2459 <dict>
2460   <key>FlashPlugin</key>
2461   <dict>
2462     <key>Allow</key>
2463     <array>
2464       <string>http://example.org</string>
2465     </array>
2466     <key>Block</key>
2467     <array>
2468       <string>http://example.edu</string>
2469     </array>
2470     <key>Default</key>
2471     <true/> | <false/>
2472     <key>Locked</key>
2473     <true/> | <false/>
2474   </dict>
2475 </dict>
2476 ```
2477 #### policies.json
2478 ```
2479 {
2480   "policies": {
2481     "FlashPlugin": {
2482       "Allow": ["http://example.org/"],
2483       "Block": ["http://example.edu/"],
2484       "Default": true | false,
2485       "Locked": true | false
2486     }
2487   }
2488 }
2489 ```
2490
2491
2492
2493 ### Handlers
2494 Configure default application handlers. This policy is based on the internal format of `handlers.json`.
2495
2496 You can configure handlers based on a mime type (`mimeTypes`), a file's extension (`extensions`), or a protocol (`schemes`).
2497
2498 Within each handler type, you specify the given mimeType/extension/scheme as a key and use the following subkeys to describe how it is handled.
2499
2500 | Name | Description |
2501 | --- | --- |
2502 | `action`| Can be either `saveToDisk`, `useHelperApp`, `useSystemDefault`.
2503 | `ask` | If `true`, the user is asked if what they want to do with the file. If `false`, the action is taken without user intervention.
2504 | `handlers` | An array of handlers with the first one being the default. If you don't want to have a default handler, use an empty object for the first handler. Choose between path or uriTemplate.
2505 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`name` | The display name of the handler (might not be used).
2506 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`path`| The native path to the executable to be used.
2507 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`uriTemplate`| A url to a web based application handler. The URL must be https and contain a %s to be used for substitution.
2508
2509 **Compatibility:** Firefox 78, Firefox ESR 78\
2510 **CCK2 Equivalent:** N/A\
2511 **Preferences Affected:** N/A
2512
2513 #### Windows (GPO)
2514 ```
2515 Software\Policies\Mozilla\Firefox\Handlers (REG_MULTI_SZ) =
2516 {
2517   "mimeTypes": {
2518     "application/msword": {
2519       "action": "useSystemDefault",
2520       "ask": true | false
2521     }
2522   },
2523   "schemes": {
2524     "mailto": {
2525       "action": "useHelperApp",
2526       "ask": true | false,
2527       "handlers": [{
2528         "name": "Gmail",
2529         "uriTemplate": "https://mail.google.com/mail/?extsrc=mailto&url=%s"
2530       }]
2531     }
2532   },
2533   "extensions": {
2534     "pdf": {
2535       "action": "useHelperApp",
2536       "ask": true | false,
2537       "handlers": [{
2538         "name": "Adobe Acrobat",
2539         "path": "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32.exe"
2540       }]
2541     }
2542   }
2543 }
2544 ```
2545 #### Windows (Intune)
2546 OMA-URI:
2547 ```
2548 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Handlers
2549 ```
2550 Value (string):
2551 ```
2552 <enabled/>
2553 <data id="Handlers" value='
2554 {
2555   "mimeTypes": {
2556     "application/msword": {
2557       "action": "useSystemDefault",
2558       "ask": true | false
2559     }
2560   },
2561   "schemes": {
2562     "mailto": {
2563       "action": "useHelperApp",
2564       "ask": true | false,
2565       "handlers": [{
2566         "name": "Gmail",
2567         "uriTemplate": "https://mail.google.com/mail/?extsrc=mailto&amp;url=%s"
2568       }]
2569     }
2570   },
2571   "extensions": {
2572     "pdf": {
2573       "action": "useHelperApp",
2574       "ask": true | false,
2575       "handlers": [{
2576         "name": "Adobe Acrobat",
2577         "path": "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32.exe"
2578       }]
2579     }
2580   }
2581 }
2582 '/>
2583 ```
2584 #### macOS
2585 ```
2586 <dict>
2587   <key>Handlers</key>
2588   <dict>
2589     <key>mimeTypes</key>
2590     <dict>
2591       <key>application/msword</key>
2592       <dict>
2593         <key>action</key>
2594         <string>useSystemDefault</string>
2595         <key>ask</key>
2596         <true/> | <false/>
2597       </dict>
2598     </dict>
2599     <key>schemes</key>
2600     <dict>
2601       <key>mailto</key>
2602       <dict>
2603         <key>action</key>
2604         <string>useHelperApp</string>
2605         <key>ask</key>
2606         <true/> | <false/>
2607         <key>handlers</key>
2608         <array>
2609           <dict>
2610             <key>name</key>
2611             <string>Gmail</string>
2612             <key>uriTemplate</key>
2613             <string>https://mail.google.com/mail/?extsrc=mailto&url=%s</string>
2614           </dict>
2615         </array>
2616       </dict>
2617     </dict>
2618     <key>extensions</key>
2619     <dict>
2620       <key>pdf</key>
2621       <dict>
2622         <key>action</key>
2623         <string>useHelperApp</string>
2624         <key>ask</key>
2625         <true/> | <false/>
2626         <key>handlers</key>
2627         <array>
2628           <dict>
2629             <key>name</key>
2630             <string>Adobe Acrobat</string>
2631             <key>path</key>
2632             <string>/System/Applications/Preview.app</string>
2633           </dict>
2634         </array>
2635       </dict>
2636     </dict>
2637   </dict>
2638 </dict>
2639 ```
2640 #### policies.json
2641 ```
2642 {
2643   "policies": {
2644     "Handlers": {
2645       "mimeTypes": {
2646         "application/msword": {
2647           "action": "useSystemDefault",
2648           "ask": false
2649         }
2650       },
2651       "schemes": {
2652         "mailto": {
2653           "action": "useHelperApp",
2654           "ask": true | false,
2655           "handlers": [{
2656             "name": "Gmail",
2657             "uriTemplate": "https://mail.google.com/mail/?extsrc=mailto&url=%s"
2658           }]
2659         }
2660       },
2661       "extensions": {
2662         "pdf": {
2663           "action": "useHelperApp",
2664           "ask": true | false,
2665           "handlers": [{
2666             "name": "Adobe Acrobat",
2667             "path": "/usr/bin/acroread"
2668           }]
2669         }
2670       }
2671     }
2672   }
2673 }
2674 ```
2675 ### FirefoxHome
2676 Customize the Firefox Home page.
2677
2678 **Compatibility:** Firefox 68, Firefox ESR 68\
2679 **CCK2 Equivalent:** N/A\
2680 **Preferences Affected:** `browser.newtabpage.activity-stream.showSearch`,`browser.newtabpage.activity-stream.feeds.topsites`,`browser.newtabpage.activity-stream.feeds.section.highlights`,`browser.newtabpage.activity-stream.feeds.section.topstories`,`browser.newtabpage.activity-stream.feeds.snippets`
2681
2682 #### Windows (GPO)
2683 ```
2684 Software\Policies\Mozilla\Firefox\FirefoxHome\Search = 0x1 | 0x0
2685 Software\Policies\Mozilla\Firefox\FirefoxHome\TopSites = 0x1 | 0x0
2686 Software\Policies\Mozilla\Firefox\FirefoxHome\Highlights = 0x1 | 0x0
2687 Software\Policies\Mozilla\Firefox\FirefoxHome\Pocket = 0x1 | 0x0
2688 Software\Policies\Mozilla\Firefox\FirefoxHome\Snippets = 0x1 | 0x0
2689 Software\Policies\Mozilla\Firefox\FirefoxHome\Locked = 0x1 | 0x0
2690 ```
2691 #### Windows (Intune)
2692 OMA-URI:
2693 ```
2694 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/CustomizeFirefoxHome
2695 ```
2696 Value (string):
2697 ```
2698 <enabled/>
2699 <data id="FirefoxHome_Search"  value="true | false"/>
2700 <data id="FirefoxHome_TopSites"  value="true | false"/>
2701 <data id="FirefoxHome_Highlights"  value="true | false"/>
2702 <data id="FirefoxHome_Pocket"  value="true | false"/>
2703 <data id="FirefoxHome_Snippets"  value="true | false"/>
2704 <data id="FirefoxHome_Locked"  value="true | false"/>
2705 ```
2706 #### macOS
2707 ```
2708 <dict>
2709   <key>FirefoxHome</key>
2710   <dict>
2711     <key>Search</key>
2712     <true/> | <false/>
2713     <key>TopSites</key>
2714     <true/> | <false/>
2715     <key>Highlights</key>
2716     <true/> | <false/>
2717     <key>Pocket</key>
2718     <true/> | <false/>
2719     <key>Snippets</key>
2720     <true/> | <false/>
2721     <key>Locked</key>
2722     <true/> | <false/>
2723   </dict>
2724 </dict>
2725 ```
2726 #### policies.json
2727 ```
2728 {
2729   "policies": {
2730     "FirefoxHome": {
2731       "Search": true | false,
2732       "TopSites": true | false,
2733       "Highlights": true | false,
2734       "Pocket": true | false,
2735       "Snippets": true | false,
2736       "Locked": true | false
2737     }
2738   }
2739 }
2740 ```
2741 ### HardwareAcceleration
2742 Control hardware acceleration.
2743
2744 **Compatibility:** Firefox 60, Firefox ESR 60\
2745 **CCK2 Equivalent:** N/A\
2746 **Preferences Affected:** `layers.acceleration.disabled`
2747
2748 #### Windows (GPO)
2749 ```
2750 Software\Policies\Mozilla\Firefox\HardwareAcceleration = 0x1 | 0x0
2751 ```
2752 #### Windows (Intune)
2753 OMA-URI:
2754 ```
2755 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/HardwareAcceleration
2756 ```
2757 Value (string):
2758 ```
2759 <enabled/> or <disabled/>
2760 ```
2761 #### macOS
2762 ```
2763 <dict>
2764   <key>HardwareAcceleration</key>
2765   <true/> | <false/>
2766 </dict>
2767 ```
2768 #### policies.json
2769 ```
2770 {
2771   "policies": {
2772     "HardwareAcceleration": true | false
2773   }
2774 }
2775 ```
2776 ### Homepage
2777 Configure the default homepage and how Firefox starts.
2778
2779 `URL` is the default homepage.
2780
2781 `Locked` prevents the user from changing homepage preferences.
2782
2783 `Additional` allows for more than one homepage.
2784
2785 `StartPage` is how Firefox starts. The choices are no homepage, the default homepage or the previous session.
2786
2787 With Firefox 78, an additional option as added for `Startpage`, `homepage-locked`. If this is value is set for the Startpage, the user will always get the homepage at startup and cannot choose to restore their session.
2788
2789 **Compatibility:** Firefox 60, Firefox ESR 60 (StartPage was added in Firefox 60, Firefox ESR 60.4, homepage-locked added in Firefox 78)\
2790 **CCK2 Equivalent:** `homePage`,`lockHomePage`\
2791 **Preferences Affected:** `browser.startup.homepage`,`browser.startup.page`
2792
2793 #### Windows (GPO)
2794 ```
2795 Software\Policies\Mozilla\Firefox\Homepage\URL = "https://example.com"
2796 Software\Policies\Mozilla\Firefox\Homepage\Locked = 0x1 | 0x0
2797 Software\Policies\Mozilla\Firefox\Homepage\Additional\1 = "https://example.org"
2798 Software\Policies\Mozilla\Firefox\Homepage\Additional\2 = "https://example.edu"
2799 Software\Policies\Mozilla\Firefox\Homepage\StartPage = "none" | "homepage" | "previous-session" | "homepage-locked"
2800 ```
2801 #### Windows (Intune)
2802 OMA-URI:
2803 ```
2804 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageURL
2805 ```
2806 Value (string):
2807 ```
2808 <enabled/>
2809
2810 <data id="HomepageURL" value="https://example.com"/>
2811 <data id="HomepageLocked" value="true | false"/>
2812 ```
2813 OMA-URI:
2814 ```
2815 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageAdditional
2816 ```
2817 Value (string):
2818 ```
2819 <enabled/>
2820
2821 <data id="HomepageAdditional" value="1&#xF000;http://example.org&#xF000;2&#xF000;http://example.edu"/>
2822 ```
2823 OMA-URI:
2824 ```
2825 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageStartPage
2826 ```
2827 Value (string):
2828 ```
2829 <enabled/>
2830
2831 <data id="StartPage" value="none | homepage | previous-session"/>
2832 ```
2833 #### macOS
2834 ```
2835 <dict>
2836   <key>Homepage</key>
2837   <dict>
2838     <key>URL</key>
2839     <string>http://example.com</string>
2840     <key>Locked</key>
2841     <true/> | <false/>
2842     <key>Additional</key>
2843     <array>
2844       <string>http://example.org</string>
2845       <string>http://example.edu</string>
2846     </array>
2847     <key>StartPage</key>
2848     <string>none | homepage | previous-session | homepage-locked</string>
2849   </dict>
2850 </dict>
2851 ```
2852 #### policies.json
2853 ```
2854 {
2855   "policies": {
2856     "Homepage": {
2857       "URL": "http://example.com/",
2858       "Locked": true | false,
2859       "Additional": ["http://example.org/",
2860                      "http://example.edu/"],
2861       "StartPage": "none" | "homepage" | "previous-session" | "homepage-locked"
2862     }
2863   }
2864 }
2865 ```
2866 ### InstallAddonsPermission
2867 Configure the default extension install policy as well as origins for extension installs are allowed. This policy does not override turning off all extension installs.
2868
2869 `Allow` is a list of origins where extension installs are allowed.
2870
2871 `Default` determines whether or not extension installs are allowed by default.
2872
2873 **Compatibility:** Firefox 60, Firefox ESR 60\
2874 **CCK2 Equivalent:** `permissions.install`\
2875 **Preferences Affected:** `xpinstall.enabled`
2876
2877 #### Windows (GPO)
2878 ```
2879 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Allow\1 = "https://example.org"
2880 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Allow\2 = "https://example.edu"
2881 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Default = 0x1 | 0x0
2882 ```
2883 #### Windows (Intune)
2884 OMA-URI:
2885 ```
2886 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Addons/InstallAddonsPermission_Allow
2887 ```
2888 Value (string):
2889 ```
2890 <enabled/>
2891 <data id="Permissions" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
2892 ```
2893 OMA-URI:
2894 ```
2895 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Addons/InstallAddonsPermission_Default
2896 ```
2897 Value (string):
2898 ```
2899 <enabled/>
2900 ```
2901 #### macOS
2902 ```
2903 <dict>
2904   <key>InstallAddonsPermission</key>
2905   <dict>
2906     <key>Allow</key>
2907     <array>
2908       <string>http://example.org</string>
2909       <string>http://example.edu</string>
2910     </array>
2911     <key>Default</key>
2912     <true/> | <false/>
2913   </dict>
2914 </dict>
2915 ```
2916 #### policies.json
2917 ```
2918 {
2919   "policies": {
2920     "InstallAddonsPermission": {
2921       "Allow": ["http://example.org/",
2922                 "http://example.edu/"],
2923       "Default": true | false
2924     }
2925   }
2926 }
2927 ```
2928 ### LegacyProfiles
2929 Disable the feature enforcing a separate profile for each installation.
2930
2931 If this policy set to true, Firefox will not try to create different profiles for installations of Firefox in different directories. This is the equivalent of the MOZ_LEGACY_PROFILES environment variable.
2932
2933 If this policy set to false, Firefox will create a new profile for each unique installation of Firefox.
2934
2935 This policy only work on Windows via GPO (not policies.json).
2936
2937 **Compatibility:** Firefox 70, Firefox ESR 68.2 (Windows only, GPO only)\
2938 **CCK2 Equivalent:** N/A\
2939 **Preferences Affected:** N/A
2940
2941 #### Windows (GPO)
2942 ```
2943 Software\Policies\Mozilla\Firefox\LegacyProfiles = = 0x1 | 0x0
2944 ```
2945 #### Windows (Intune)
2946 OMA-URI:
2947 ```
2948 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/LegacyProfiles
2949 ```
2950 Value (string):
2951 ```
2952 <enabled/> or <disabled/>
2953 ```
2954 ### LocalFileLinks
2955 Enable linking to local files by origin.
2956
2957 **Compatibility:** Firefox 68, Firefox ESR 68\
2958 **CCK2 Equivalent:** N/A\
2959 **Preferences Affected:** `capability.policy.localfilelinks.*`
2960
2961 #### Windows (GPO)
2962 ```
2963 Software\Policies\Mozilla\Firefox\LocalFileLinks\1 = "https://example.org"
2964 Software\Policies\Mozilla\Firefox\LocalFileLinks\2 = "https://example.edu"
2965 ```
2966 #### Windows (Intune)
2967 OMA-URI:
2968 ```
2969 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/LocalFileLinks
2970 ```
2971 Value (string):
2972 ```
2973 <enabled/>
2974 <data id="LocalFileLinks" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
2975 ```
2976 #### macOS
2977 ```
2978 <dict>
2979   <key>LocalFileLinks</key>
2980   <array>
2981     <string>http://example.org</string>
2982     <string>http://example.edu</string>
2983   </array>
2984 </dict>
2985 ```
2986 #### policies.json
2987 ```
2988 {
2989   "policies": {
2990     "LocalFileLinks": ["http://example.org/",
2991                        "http://example.edu/"]
2992   }
2993 }
2994 ```
2995 ### ManagedBookmarks
2996 Configures a list of bookmarks managed by an administrator that cannot be changed by the user.
2997
2998 The bookmarks are only added as a button on the personal toolbar. They are not in the bookmarks folder.
2999
3000 The syntax of this policy is exactly the same as the [Chrome ManagedBookmarks policy](https://cloud.google.com/docs/chrome-enterprise/policies/?policy=ManagedBookmarks). The schema is:
3001 ```
3002 {
3003  "items": {
3004   "id": "BookmarkType",
3005   "properties": {
3006    "children": {
3007     "items": {
3008      "$ref": "BookmarkType"
3009     },
3010     "type": "array"
3011    },
3012    "name": {
3013     "type": "string"
3014    },
3015    "toplevel_name": {
3016     "type": "string"
3017    },
3018    "url": {
3019     "type": "string"
3020    }
3021   },
3022   "type": "object"
3023  },
3024  "type": "array"
3025 }
3026 ```
3027 **Compatibility:** Firefox 83, Firefox ESR 78.5\
3028 **CCK2 Equivalent:** N/A\
3029 **Preferences Affected:** N/A
3030
3031 #### Windows (GPO)
3032 ```
3033 Software\Policies\Mozilla\Firefox\ManagedBookmarks (REG_MULTI_SZ) =
3034 [
3035   {
3036     "toplevel_name": "My managed bookmarks folder"
3037   },
3038   {
3039     "url": "example.com",
3040     "name": "Example"
3041   },
3042   {
3043     "name": "Mozilla links",
3044     "children": [
3045       {
3046         "url": "https://mozilla.org",
3047         "name": "Mozilla.org"
3048       },
3049       {
3050         "url": "https://support.mozilla.org/",
3051         "name": "SUMO"
3052       }
3053     ]
3054   }
3055 ]
3056 ```
3057 #### Windows (Intune)
3058 OMA-URI:
3059 ```
3060 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/ManagedBookmarks
3061 ```
3062 Value (string):
3063 ```
3064 <enabled/>
3065 <data id="JSON" value='
3066 [
3067   {
3068     "toplevel_name": "My managed bookmarks folder"
3069   },
3070   {
3071     "url": "example.com",
3072     "name": "Example"
3073   },
3074   {
3075     "name": "Mozilla links",
3076     "children": [
3077       {
3078         "url": "https://mozilla.org",
3079         "name": "Mozilla.org"
3080       },
3081       {
3082         "url": "https://support.mozilla.org/",
3083         "name": "SUMO"
3084       }
3085     ]
3086   }
3087 ]'/>
3088 ```
3089 #### macOS
3090 ```
3091 <dict>
3092   <key>ManagedBookmarks</key>
3093   <array>
3094     <dict>
3095       <key>toplevel_name</key>
3096       <string>My managed bookmarks folder</string></dict>
3097       <dict>
3098         <key>url</key>
3099         <string>example.com</string>
3100         <key>name</key>
3101         <string>Example</string>
3102       </dict>
3103       <dict>
3104       <key>name</key>
3105       <string>Mozilla links</string>
3106       <key>children</key>
3107       <array>
3108         <dict>
3109           <key>url</key>
3110           <string>https://mozilla.org</string>
3111           <key>name</key>
3112           <string>Mozilla</string>
3113         </dict>
3114         <dict>
3115           <key>url</key>
3116           <string>https://support.mozilla.org/</string>
3117           <key>name</key>
3118           <string>SUMO</string>
3119         </dict>
3120       </array>
3121     </dict>
3122   </array>
3123 </dict>
3124 ```
3125 #### policies.json
3126 ```
3127 {
3128   "policies": {
3129     "ManagedBookmarks": [
3130       {
3131         "toplevel_name": "My managed bookmarks folder"
3132       },
3133       {
3134         "url": "example.com",
3135         "name": "Example"
3136       },
3137       {
3138         "name": "Mozilla links",
3139         "children": [
3140           {
3141             "url": "https://mozilla.org",
3142             "name": "Mozilla.org"
3143           },
3144           {
3145             "url": "https://support.mozilla.org/",
3146             "name": "SUMO"
3147           }
3148         ]
3149       }
3150     ]
3151   }
3152 }
3153 ```
3154 ### PrimaryPassword
3155 Require or prevent using a primary (formerly master) password.
3156
3157 If this value is true, a primary password is required. If this value is false, it works the same as if [`DisableMasterPasswordCreation`](#disablemasterpasswordcreation) was true and removes the primary password functionality.
3158
3159 If both DisableMasterPasswordCreation and PrimaryPassword are used, DisableMasterPasswordCreation takes precedent.
3160
3161 **Compatibility:** Firefox 79, Firefox ESR 78.1\
3162 **CCK2 Equivalent:** `noMasterPassword`\
3163 **Preferences Affected:** N/A
3164
3165 #### Windows (GPO)
3166 ```
3167 Software\Policies\Mozilla\Firefox\PrimaryPassword = 0x1 | 0x0
3168 ```
3169 #### Windows (Intune)
3170 OMA-URI:
3171 ```
3172 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PrimaryPassword
3173 ```
3174 Value (string):
3175 ```
3176 <enabled/> or <disabled/>
3177 ```
3178 #### macOS
3179 ```
3180 <dict>
3181   <key>PrimaryPassword</key>
3182   <true/> | <false/>
3183 </dict>
3184 ```
3185 #### policies.json
3186 ```
3187 {
3188   "policies": {
3189     "PrimaryPassword": true | false
3190   }
3191 }
3192 ```
3193 ### NetworkPrediction
3194 Enable or disable network prediction (DNS prefetching).
3195
3196 **Compatibility:** Firefox 67, Firefox ESR 60.7\
3197 **CCK2 Equivalent:** N/A\
3198 **Preferences Affected:** `network.dns.disablePrefetch`,`network.dns.disablePrefetchFromHTTPS`
3199
3200 #### Windows (GPO)
3201 ```
3202 Software\Policies\Mozilla\Firefox\NetworkPrediction = 0x1 | 0x0
3203 ```
3204 #### Windows (Intune)
3205 OMA-URI:
3206 ```
3207 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NetworkPrediction
3208 ```
3209 Value (string):
3210 ```
3211 <enabled/> or <disabled/>
3212 ```
3213 #### macOS
3214 ```
3215 <dict>
3216   <key>NetworkPrediction</key>
3217   <true/> | <false/>
3218 </dict>
3219 ```
3220 #### policies.json
3221 ```
3222 {
3223   "policies": {
3224     "NetworkPrediction": true | false
3225 }
3226 ```
3227 ### NewTabPage
3228 Enable or disable the New Tab page.
3229
3230 **Compatibility:** Firefox 68, Firefox ESR 68\
3231 **CCK2 Equivalent:** N/A\
3232 **Preferences Affected:** `browser.newtabpage.enabled`
3233
3234 #### Windows (GPO)
3235 ```
3236 Software\Policies\Mozilla\Firefox\NewTabPage = 0x1 | 0x0
3237 ```
3238 #### Windows (Intune)
3239 OMA-URI:
3240 ```
3241 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NewTabPage
3242 ```
3243 Value (string):
3244 ```
3245 <enabled/> or <disabled/>
3246 ```
3247 #### macOS
3248 ```
3249 <dict>
3250   <key>NewTabPage</key>
3251   <true/> | <false/>
3252 </dict>
3253 ```
3254 #### policies.json
3255 ```
3256 {
3257   "policies": {
3258     "NewTabPage": true | false
3259 }
3260 ```
3261 ### NoDefaultBookmarks
3262 Disable the creation of default bookmarks.
3263
3264 This policy is only effective if the user profile has not been created yet.
3265
3266 **Compatibility:** Firefox 60, Firefox ESR 60\
3267 **CCK2 Equivalent:** `removeDefaultBookmarks`\
3268 **Preferences Affected:** N/A
3269
3270 #### Windows (GPO)
3271 ```
3272 Software\Policies\Mozilla\Firefox\NoDefaultBookmarks = 0x1 | 0x0
3273 ```
3274 #### Windows (Intune)
3275 OMA-URI:
3276 ```
3277 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NoDefaultBookmarks
3278 ```
3279 Value (string):
3280 ```
3281 <enabled/> or <disabled/>
3282 ```
3283 #### macOS
3284 ```
3285 <dict>
3286   <key>NoDefaultBookmarks</key>
3287   <true/> | <false/>
3288 </dict>
3289 ```
3290 #### policies.json
3291 ```
3292 {
3293   "policies": {
3294     "NoDefaultBookmarks": true | false
3295   }
3296 }
3297 ```
3298 ### OfferToSaveLogins
3299 Control whether or not Firefox offers to save passwords.
3300
3301 **Compatibility:** Firefox 60, Firefox ESR 60\
3302 **CCK2 Equivalent:** `dontRememberPasswords`\
3303 **Preferences Affected:** `signon.rememberSignons`
3304
3305 #### Windows (GPO)
3306 ```
3307 Software\Policies\Mozilla\Firefox\OfferToSaveLogins = 0x1 | 0x0
3308 ```
3309 #### Windows (Intune)
3310 OMA-URI:
3311 ```
3312 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OfferToSaveLogins
3313 ```
3314 Value (string):
3315 ```
3316 <enabled/> or <disabled/>
3317 ```
3318 #### macOS
3319 ```
3320 <dict>
3321   <key>OfferToSaveLogins</key>
3322   <true/> | <false/>
3323 </dict>
3324 ```
3325 #### policies.json
3326 ```
3327 {
3328   "policies": {
3329     "OfferToSaveLogins": true | false
3330   }
3331 }
3332 ```
3333 ### OfferToSaveLoginsDefault
3334 Sets the default value of signon.rememberSignons without locking it.
3335
3336 **Compatibility:** Firefox 70, Firefox ESR 60.2\
3337 **CCK2 Equivalent:** `dontRememberPasswords`\
3338 **Preferences Affected:** `signon.rememberSignons`
3339
3340 #### Windows (GPO)
3341 ```
3342 Software\Policies\Mozilla\Firefox\OfferToSaveLoginsDefault = 0x1 | 0x0
3343 ```
3344 #### Windows (Intune)
3345 OMA-URI:
3346 ```
3347 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OfferToSaveLoginsDefault
3348 ```
3349 Value (string):
3350 ```
3351 <enabled/> or <disabled/>
3352 ```
3353 #### macOS
3354 ```
3355 <dict>
3356   <key>OfferToSaveLoginsDefault</key>
3357   <true/> | <false/>
3358 </dict>
3359 ```
3360 #### policies.json
3361 ```
3362 {
3363   "policies": {
3364     "OfferToSaveLoginsDefault": true | false
3365   }
3366 }
3367 ```
3368 ### OverrideFirstRunPage
3369 Override the first run page. If the value is an empty string (""), the first run page is not displayed.
3370
3371 Starting with Firefox 83, Firefox ESR 78.5, you can also specify multiple URLS separated by a vertical bar (|).
3372
3373 **Compatibility:** Firefox 60, Firefox ESR 60\
3374 **CCK2 Equivalent:** `welcomePage`,`noWelcomePage`\
3375 **Preferences Affected:** `startup.homepage_welcome_url`
3376
3377 #### Windows (GPO)
3378 ```
3379 Software\Policies\Mozilla\Firefox\OverrideFirstRunPage = "http://example.org"
3380 ```
3381 #### Windows (Intune)
3382 OMA-URI:
3383 ```
3384 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OverrideFirstRunPage
3385 ```
3386 Value (string):
3387 ```
3388 <enabled/>
3389 <data id="OverridePage" value="https://example.com"/>
3390 ```
3391 #### macOS
3392 ```
3393 <dict>
3394   <key>OverrideFirstRunPage</key>
3395   <string>http://example.org</string>
3396 </dict>
3397 ```
3398 #### policies.json
3399 ```
3400 {
3401   "policies": {
3402     "OverrideFirstRunPage": "http://example.org"
3403 }
3404 ```
3405 ### OverridePostUpdatePage
3406 Override the upgrade page. If the value is an empty string (""), no extra pages are displayed when Firefox is upgraded.
3407
3408 **Compatibility:** Firefox 60, Firefox ESR 60\
3409 **CCK2 Equivalent:** `upgradePage`,`noUpgradePage`\
3410 **Preferences Affected:** `startup.homepage_override_url`
3411
3412 #### Windows (GPO)
3413 ```
3414 Software\Policies\Mozilla\Firefox\OverridePostUpdatePage = "http://example.org"
3415 ```
3416 #### Windows (Intune)
3417 OMA-URI:
3418 ```
3419 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OverridePostUpdatePage
3420 ```
3421 Value (string):
3422 ```
3423 <enabled/>
3424 <data id="OverridePage" value="https://example.com"/>
3425 ```
3426 #### macOS
3427 ```
3428 <dict>
3429   <key>OverridePostUpdatePage</key>
3430   <string>http://example.org</string>
3431 </dict>
3432 ```
3433 #### policies.json
3434 ```
3435 {
3436   "policies": {
3437     "OverridePostUpdatePage": "http://example.org"
3438 }
3439 ```
3440 ### PasswordManagerEnabled
3441 Remove access to the password manager via preferences and blocks about:logins on Firefox 70.
3442
3443 **Compatibility:** Firefox 70, Firefox ESR 60.2\
3444 **CCK2 Equivalent:** N/A\
3445 **Preferences Affected:** `pref.privacy.disable_button.view_passwords`
3446
3447 #### Windows (GPO)
3448 ```
3449 Software\Policies\Mozilla\Firefox\PasswordManagerEnabled = 0x1 | 0x0
3450 ```
3451 #### Windows (Intune)
3452 OMA-URI:
3453 ```
3454 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PasswordManagerEnabled
3455 ```
3456 Value (string):
3457 ```
3458 <enabled/> or <disabled/>
3459 ```
3460 #### macOS
3461 ```
3462 <dict>
3463   <key>PasswordManagerEnabled</key>
3464   <true/> | <false/>
3465 </dict>
3466 ```
3467 #### policies.json
3468 ```
3469 {
3470   "policies": {
3471     "PasswordManagerEnabled": true | false
3472   }
3473 }
3474 ```
3475 ### PDFjs
3476 Disable or configure PDF.js, the built-in PDF viewer.
3477
3478 If `Enabled` is set to false, the built-in PDF viewer is disabled.
3479
3480 If `EnablePermissions` is set to true, the built-in PDF viewer will honor document permissions like preventing the copying of text.
3481
3482 Note: DisableBuiltinPDFViewer has not been deprecated. You can either continue to use it, or switch to using PDFjs->Enabled to disable the built-in PDF viewer. This new permission was added because we needed a place for PDFjs->EnabledPermissions.
3483
3484 **Compatibility:** Firefox 77, Firefox ESR 68.9\
3485 **CCK2 Equivalent:** N/A\
3486 **Preferences Affected:** `pdfjs.diabled`,`pdfjs.enablePermissions`
3487
3488 #### Windows (GPO)
3489 ```
3490 Software\Policies\Mozilla\Firefox\PDFjs\Enabled = 0x1 | 0x0
3491 Software\Policies\Mozilla\Firefox\PDFjs\EnablePermissions = 0x1 | 0x0
3492 ```
3493 #### Windows (Intune)
3494 OMA-URI:
3495 ```
3496 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PDFjs/PDFjs_Enabled
3497 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PDFjs/PDFjs_EnablePermissions
3498 ```
3499 Value (string):
3500 ```
3501 <enabled/>or <disabled/>
3502 ```
3503 #### macOS
3504 ```
3505 <dict>
3506   <key>PDFjs</key>
3507   <dict>
3508     <key>Enabled</key>
3509     <true/> | <false/>
3510     <key>EnablePermissions</key>
3511     <true/> | <false/>
3512   </dict>
3513 </dict>
3514 ```
3515 #### policies.json
3516 ```
3517 {
3518   "policies": {
3519     "PSFjs": {
3520       "Enabled": true | false,
3521       "EnablePermissions": true | false
3522     }
3523 }
3524 ```
3525 ### Permissions
3526 Set permissions associated with camera, microphone, location, notifications, autoplay, and virtual reality. Because these are origins, not domains, entries with unique ports must be specified separately. This explicitly means that it is not possible to add wildcards. See examples below.
3527
3528 `Allow` is a list of origins where the feature is allowed.
3529
3530 `Block` is a list of origins where the feature is not allowed.
3531
3532 `BlockNewRequests` determines whether or not new requests can be made for the feature.
3533
3534 `Locked` prevents the user from changing preferences for the feature.
3535
3536 `Default` specifies the default value for Autoplay. block-audio-video is not supported on Firefox ESR 68.
3537
3538 **Compatibility:** Firefox 62, Firefox ESR 60.2 (Autoplay added in Firefox 74, Firefox ESR 68.6, Autoplay Default/Locked added in Firefox 76, Firefox ESR 68.8, VirtualReality added in Firefox 80, Firefox ESR 78.2)\
3539 **CCK2 Equivalent:** N/A\
3540 **Preferences Affected:** `permissions.default.camera`,`permissions.default.microphone`,`permissions.default.geo`,`permissions.default.desktop-notification`,`media.autoplay.default`.`permissions.default.xr`
3541
3542 #### Windows (GPO)
3543 ```
3544 Software\Policies\Mozilla\Firefox\Permissions\Camera\Allow\1 = "https://example.org"
3545 Software\Policies\Mozilla\Firefox\Permissions\Camera\Allow\2 = "https://example.org:1234"
3546 Software\Policies\Mozilla\Firefox\Permissions\Camera\Block\1 = "https://example.edu"
3547 Software\Policies\Mozilla\Firefox\Permissions\Camera\BlockNewRequests = 0x1 | 0x0
3548 Software\Policies\Mozilla\Firefox\Permissions\Camera\Locked = 0x1 | 0x0
3549 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Allow\1 = "https://example.org"
3550 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Block\1 = "https://example.edu"
3551 Software\Policies\Mozilla\Firefox\Permissions\Microphone\BlockNewRequests = 0x1 | 0x0
3552 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Locked = 0x1 | 0x0
3553 Software\Policies\Mozilla\Firefox\Permissions\Location\Allow\1 = "https://example.org"
3554 Software\Policies\Mozilla\Firefox\Permissions\Location\Block\1 = "https://example.edu"
3555 Software\Policies\Mozilla\Firefox\Permissions\Location\BlockNewRequests = 0x1 | 0x0
3556 Software\Policies\Mozilla\Firefox\Permissions\Location\Locked = 0x1 | 0x0
3557 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Allow\1 = "https://example.org"
3558 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Block\1 = "https://example.edu"
3559 Software\Policies\Mozilla\Firefox\Permissions\Notifications\BlockNewRequests = 0x1 | 0x0
3560 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Locked = 0x1 | 0x0
3561 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Allow\1 = "https://example.org"
3562 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Block\1 = "https://example.edu"
3563 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Default = "allow-audio-video" | "block-audio" | "block-audio-video"
3564 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Locked = 0x1 | 0x0
3565 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\Allow\1 = "https://example.org"
3566 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\Block\1 = "https://example.edu"
3567 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\BlockNewRequests = 0x1 | 0x0
3568 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\Locked = 0x1 | 0x0
3569 ```
3570 #### Windows (Intune)
3571 OMA-URI:
3572 ```
3573 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Location/Location_BlockNewRequests
3574 ```
3575 Value (string):
3576 ```
3577 <enabled/> or <disabled/>
3578 ```
3579 OMA-URI:
3580 ```
3581 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Location/Location_Locked
3582 ```
3583 Value (string):
3584 ```
3585 <enabled/> or <disabled/>
3586 ```
3587 OMA-URI:
3588 ```
3589 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_Allow
3590 ```
3591 Value (string):
3592 ```
3593 <enabled/>
3594 <data id="Permissions" value="1&#xF000;https://example.org"/>
3595 ```
3596 OMA-URI:
3597 ```
3598 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_BlockNewRequests
3599 ```
3600 Value (string):
3601 ```
3602 <enabled/> or <disabled/>
3603 ```
3604 OMA-URI:
3605 ```
3606 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_Locked
3607 ```
3608 Value (string):
3609 ```
3610 <enabled/> or <disabled/>
3611 ```
3612 OMA-URI:
3613 ```
3614 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Allow
3615 ```
3616 Value (string):
3617 ```
3618 <enabled/>
3619 <data id="Permissions" value="1&#xF000;https://example.org"/>
3620 ```
3621 OMA-URI:
3622 ```
3623 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Block
3624 ```
3625 Value (string):
3626 ```
3627 <enabled/>
3628 <data id="Permissions" value="1&#xF000;https://example.edu"/>
3629 ```
3630 OMA-URI:
3631 ```
3632 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Default
3633 ```
3634 Value (string):
3635 ```
3636 <enabled/>
3637 <data id="Autoplay_Default" value="allow-audio-video | block-audio | block-audio-video"/>
3638 ```
3639 OMA-URI:
3640 ```
3641 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Locked
3642 ```
3643 Value (string):
3644 ```
3645 <enabled/> or <disabled/>
3646 ```
3647 OMA-URI:
3648 ```
3649 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_Allow
3650 ```
3651 Value (string):
3652 ```
3653 <enabled/>
3654 <data id="Permissions" value="1&#xF000;https://example.org"/>
3655 ```
3656 OMA-URI:
3657 ```
3658 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_Block
3659 ```
3660 Value (string):
3661 ```
3662 <enabled/>
3663 <data id="Permissions" value="1&#xF000;https://example.edu"/>
3664 ```
3665 OMA-URI:
3666 ```
3667 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_BlockNewRequests
3668 ```
3669 Value (string):
3670 ```
3671 <enabled/> or <disabled/>
3672 ```
3673 OMA-URI:
3674 ```
3675 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_Locked
3676 ```
3677 Value (string):
3678 ```
3679 <enabled/> or <disabled/>
3680 ```
3681 #### macOS
3682 ```
3683 <dict>
3684   <key>Permissions</key>
3685   <dict>
3686     <key>Camera</key>
3687     <dict>
3688       <key>Allow</key>
3689       <array>
3690         <string>https://example.org</string>
3691         <string>https://example.org:1234</string>
3692       </array>
3693       <key>Block</key>
3694       <array>
3695         <string>https://example.edu</string>
3696       </array>
3697       <key>BlockNewRequests</key>
3698       <true/> | <false/>
3699       <key>Locked</key>
3700       <true/> | <false/>
3701     </dict>
3702     <key>Microphone</key>
3703     <dict>
3704       <key>Allow</key>
3705       <array>
3706         <string>https://example.org</string>
3707       </array>
3708       <key>Block</key>
3709       <array>
3710         <string>https://example.edu</string>
3711       </array>
3712       <key>BlockNewRequests</key>
3713       <true/> | <false/>
3714       <key>Locked</key>
3715       <true/> | <false/>
3716     </dict>
3717     <key>Location</key>
3718     <dict>
3719       <key>Allow</key>
3720       <array>
3721         <string>https://example.org</string>
3722       </array>
3723       <key>Block</key>
3724       <array>
3725         <string>https://example.edu</string>
3726       </array>
3727       <key>BlockNewRequests</key>
3728       <true/> | <false/>
3729       <key>Locked</key>
3730       <true/> | <false/>
3731     </dict>
3732     <key>Notifications</key>
3733     <dict>
3734       <key>Allow</key>
3735       <array>
3736         <string>https://example.org</string>
3737       </array>
3738       <key>Block</key>
3739       <array>
3740         <string>https://example.edu</string>
3741       </array>
3742       <key>BlockNewRequests</key>
3743       <true/>
3744       <key>Locked</key>
3745       <true/>
3746     </dict>
3747     <key>Autoplay</key>
3748     <dict>
3749       <key>Allow</key>
3750       <array>
3751         <string>https://example.org</string>
3752       </array>
3753       <key>Block</key>
3754       <array>
3755         <string>https://example.edu</string>
3756       </array>
3757       <key>Default</key>
3758       <string>allow-audio-video | block-audio | block-audio-video</string>
3759       <key>Locked</key>
3760       <true/> | <false/>
3761     </dict>
3762   </dict>
3763 </dict>
3764 ```
3765 #### policies.json
3766 ```
3767 {
3768   "policies": {
3769     "Permissions": {
3770       "Camera": {
3771         "Allow": ["https://example.org","https://example.org:1234"],
3772         "Block": ["https://example.edu"],
3773         "BlockNewRequests": true | false,
3774         "Locked": true | false
3775       },
3776       "Microphone": {
3777         "Allow": ["https://example.org"],
3778         "Block": ["https://example.edu"],
3779         "BlockNewRequests": true | false,
3780         "Locked": true | false
3781       },
3782       "Location": {
3783         "Allow": ["https://example.org"],
3784         "Block": ["https://example.edu"],
3785         "BlockNewRequests": true | false,
3786         "Locked": true | false
3787       },
3788       "Notifications": {
3789         "Allow": ["https://example.org"],
3790         "Block": ["https://example.edu"],
3791         "BlockNewRequests": true | false,
3792         "Locked": true | false
3793       },
3794       "Autoplay": {
3795         "Allow": ["https://example.org"],
3796         "Block": ["https://example.edu"],
3797         "Default": "allow-audio-video" | "block-audio" | "block-audio-video",
3798         "Locked": true | false
3799       }
3800     }
3801   }
3802 }
3803 ```
3804 ### PictureInPicture
3805
3806 Enable or disable Picture-in-Picture as well as lock it.
3807
3808 **Compatibility:** Firefox 78, Firefox ESR 78\
3809 **CCK2 Equivalent:** N/A\
3810 **Preferences Affected:** `media.videocontrols.picture-in-picture.video-toggle.enabled`
3811
3812 #### Windows (GPO)
3813 ```
3814 Software\Policies\Mozilla\Firefox\PictureInPicture\Enabled = 0x1 | 0x0
3815 Software\Policies\Mozilla\Firefox\PictureInPicture\Locked = 0x1 | 0x0
3816
3817 ```
3818 #### Windows (Intune)
3819 OMA-URI:
3820 ```
3821 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PictureInPicture/PictureInPicture_Enabled
3822 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PictureInPicture/PictureInPicture_Locked
3823 ```
3824 Value (string):
3825 ```
3826 <enabled/> or <disabled/>
3827 ```
3828 #### macOS
3829 ```
3830 <dict>
3831   <key>PictureInPicture</key>
3832   <dict>
3833     <key>Enabled</key>
3834     <true/> | <false/>
3835     <key>Locked</key>
3836     <true/> | <false/>
3837   </dict>
3838 </dict>
3839 ```
3840 #### policies.json
3841 ```
3842 {
3843   "policies": {
3844     "PictureInPicture": {
3845       "Enabled": true | false,
3846       "Locked": true, false
3847     }
3848   }
3849 }
3850 ```
3851 ### PopupBlocking
3852 Configure the default pop-up window policy as well as origins for which pop-up windows are allowed.
3853
3854 `Allow` is a list of origins where popup-windows are allowed.
3855
3856 `Default` determines whether or not pop-up windows are allowed by default.
3857
3858 `Locked` prevents the user from changing pop-up preferences.
3859
3860 **Compatibility:** Firefox 60, Firefox ESR 60\
3861 **CCK2 Equivalent:** `permissions.popup`\
3862 **Preferences Affected:** `dom.disable_open_during_load`
3863
3864 #### Windows (GPO)
3865 ```
3866 Software\Policies\Mozilla\Firefox\PopupBlocking\Allow\1 = "https://example.org"
3867 Software\Policies\Mozilla\Firefox\PopupBlocking\Allow\2 = "https://example.edu"
3868 Software\Policies\Mozilla\Firefox\PopupBlocking\Default = 0x1 | 0x0
3869 Software\Policies\Mozilla\Firefox\PopupBlocking\Locked = 0x1 | 0x0
3870 ```
3871 #### Windows (Intune)
3872 OMA-URI:
3873 ```
3874 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Allow
3875 ```
3876 Value (string):
3877 ```
3878 <enabled/>
3879 <data id="Permissions" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
3880 ```
3881 OMA-URI:
3882 ```
3883 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Default
3884 ```
3885 Value (string):
3886 ```
3887 <enabled/> or <disabled/>
3888 ```
3889 OMA-URI:
3890 ```
3891 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Locked
3892 ```
3893 Value (string):
3894 ```
3895 <enabled/> or <disabled/>
3896 ```
3897 #### macOS
3898 ```
3899 <dict>
3900   <key>PopupBlocking</key>
3901   <dict>
3902     <key>Allow</key>
3903     <array>
3904       <string>http://example.org</string>
3905       <string>http://example.edu</string>
3906     </array>
3907     <key>Default</key>
3908     <true/> | <false/>
3909     <key>Locked</key>
3910     <true/> | <false/>
3911   </dict>
3912 </dict>
3913 ```
3914 #### policies.json
3915 ```
3916 {
3917   "policies": {
3918     "PopupBlocking": {
3919       "Allow": ["http://example.org/",
3920                 "http://example.edu/"],
3921       "Default": true | false,
3922       "Locked": true | false
3923     }
3924   }
3925 }
3926 ```
3927 ### Preferences
3928 Set and lock preferences.
3929
3930 **NOTE** On Windows, in order to use this policy, you must clear all settings in the old **Preferences (Deprecated)** section.
3931
3932 Previously you could only set and lock a subset of preferences. Starting with Firefox 81 and Firefox ESR 78.3 you can set many more preferences. You can also set default preferences, user preferences and you can clear preferences.
3933
3934 Preferences that start with the following prefixes are supported:
3935 ```
3936 accessibility.
3937 browser.
3938 datareporting.policy.
3939 dom.
3940 extensions.
3941 general.autoScroll (Firefox 83, Firefox ESR 78.5)
3942 general.smoothScroll (Firefox 83, Firefox ESR 78.5)
3943 geo.
3944 intl.
3945 layout.
3946 media.
3947 network.
3948 pdfjs. (Firefox 84, Firefox ESR 78.6)
3949 places.
3950 print.
3951 signon. (Firefox 83, Firefox ESR 78.5)
3952 spellchecker. (Firefox 84, Firefox ESR 78.6)
3953 ui.
3954 widget.
3955 ```
3956 as well as the following security preferences:
3957 | Preference | Type | Default
3958 | --- | --- | ---
3959 | security.default_personal_cert | string | Ask Every Time
3960 | &nbsp;&nbsp;&nbsp;&nbsp;If set to Select Automatically, Firefox automatically chooses the default personal certificate.
3961 | security.insecure_connection_text.enabled | bool | false
3962 | &nbsp;&nbsp;&nbsp;&nbsp;If set to true, adds the words "Not Secure" for insecure sites.
3963 | security.insecure_connection_text.pbmode.enabled | bool | false
3964 | &nbsp;&nbsp;&nbsp;&nbsp;If set to true, adds the words "Not Secure" for insecure sites in private browsing.
3965 | security.insecure_field_warning.contextual.enabled | bool | true
3966 | &nbsp;&nbsp;&nbsp;&nbsp;If set to false, remove the warning for inscure login fields.
3967 | security.mixed_content.block_active_content | boolean | true
3968 | &nbsp;&nbsp;&nbsp;&nbsp;If false, mixed active content (HTTP and HTTPS) is not blocked.
3969 | security.osclientcerts.autoload | boolean | false
3970 | &nbsp;&nbsp;&nbsp;&nbsp;If true, client certificates are loaded from the operating system certificate store.
3971 | security.ssl.errorReporting.enabled | boolean | true
3972 | &nbsp;&nbsp;&nbsp;&nbsp;If false, SSL errors cannot be sent to Mozilla.
3973 | security.tls.hello_downgrade_check | boolean | true
3974 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the TLS 1.3 downgrade check is disabled.
3975 | security.warn_submit_secure_to_insecure | boolean | true
3976 | &nbsp;&nbsp;&nbsp;&nbsp;If false, no warning is shown when submitting s form from https to http.
3977 &nbsp;
3978
3979 Using the preference as the key, set the `Value` to the corresponding preference value.
3980
3981 `Status` can be "default", "locked", "user" or "clear"
3982
3983 Default preferences can be modified by the user.
3984
3985 If a value is locked, it is also set as the default.
3986
3987 User preferences persist across invocations of Firefox. It is the equivalent of a user setting the preference. They are most useful when a preference is needed very early in startup so it can't be set as default by policy.
3988
3989 User preferences persist even if the policy is removed, so if you need to remove them, you should use the clear policy.
3990
3991 See the examples below for more detail.
3992
3993 IMPORTANT: Make sure you're only setting a particular preference using this mechanism and not some other way.
3994
3995 Status
3996 **Compatibility:** Firefox 81, Firefox ESR 78.3\
3997 **CCK2 Equivalent:** `preferences`\
3998 **Preferences Affected:** Many
3999
4000 #### Windows (GPO)
4001 ```
4002 Software\Policies\Mozilla\Firefox\Preferences (REG_MULTI_SZ) =
4003 {
4004   "accessibility.force_disabled": {
4005     "Value": 1,
4006     "Status": "default"
4007   },
4008   "browser.cache.disk.parent_directory": {
4009     "Value": "SOME_NATIVE_PATH",
4010     "Status": "user"
4011   },
4012   "browser.tabs.warnOnClose": {
4013     "Value": false,
4014     "Status": "locked"
4015   }
4016 }
4017 ```
4018 #### Windows (Intune)
4019 OMA-URI:
4020 ```
4021 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Preferences
4022 ```
4023 Value (string):
4024 ```
4025 <enabled/>
4026 <data id="Preferences" value='
4027 {
4028   "accessibility.force_disabled": {
4029     "Value": 1,
4030     "Status": "default"
4031   },
4032   "browser.cache.disk.parent_directory": {
4033     "Value": "SOME_NATIVE_PATH",
4034     "Status": "user"
4035   },
4036   "browser.tabs.warnOnClose": {
4037     "Value": false,
4038     "Status": "locked"
4039   }
4040 }'/>
4041 ```
4042 #### macOS
4043 ```
4044 <dict>
4045   <key>Preferences</key>
4046   <dict>
4047     <key>accessibility.force_disabled</key>
4048     <dict>
4049       <key>Value</key>
4050       <integer>1</integer>
4051       <key>Status</key>
4052       <string>default</string>
4053     </dict>
4054     <key>browser.cache.disk.parent_directory</key>
4055     <dict>
4056       <key>Value</key>
4057       <string>SOME_NATIVE_PATH</string>
4058       <key>Status</key>
4059       <string>user</string>
4060     </dict>
4061     <key>browser.tabs.warnOnClose</key>
4062     <dict>
4063       <key>Value</key>
4064       <false/>
4065       <key>Status</key>
4066       <string>locked</string>
4067     </dict>
4068   </dict>
4069 </dict>
4070 ```
4071 #### policies.json
4072 ```
4073 {
4074   "policies": {
4075     "Preferences": {
4076       "accessibility.force_disabled": {
4077         "Value": 1,
4078         "Status": "default"
4079       },
4080       "browser.cache.disk.parent_directory": {
4081         "Value": "SOME_NATIVE_PATH",
4082         "Status": "user"
4083       },
4084       "browser.tabs.warnOnClose": {
4085         "Value": false,
4086         "Status": "locked"
4087       }
4088     }
4089   }
4090 }
4091 ```
4092 ### Preferences (Deprecated)
4093 Set and lock certain preferences.
4094
4095 **Compatibility:** See below\
4096 **CCK2 Equivalent:** `preferences`\
4097 **Preferences Affected:** See below
4098
4099 | Preference | Type | Compatibility | Default
4100 | --- | --- | --- | ---
4101 | accessibility.force_disabled | integer | Firefox 70, Firefox ESR 68.2 | 0
4102 | &nbsp;&nbsp;&nbsp;&nbsp;If set to 1, platform accessibility is disabled.
4103 | app.update.auto (Deprecated - Switch to AppAutoUpdate policy) | boolean | Firefox 68, Firefox ESR 68 | true
4104 | &nbsp;&nbsp;&nbsp;&nbsp;If false, Firefox doesn't automatically install update.
4105 | browser.bookmarks.autoExportHTML | boolean | Firefox 70, Firefox ESR 68.2 | false
4106 | &nbsp;&nbsp;&nbsp;&nbsp;If true, bookmarks are exported on shutdown.
4107 | browser.bookmarks.file | string | Firefox 70, Firefox ESR 68.2 | N/A
4108 | &nbsp;&nbsp;&nbsp;&nbsp;If set, the name of the file where bookmarks are exported and imported.
4109 | browser.bookmarks.restore_default_bookmarks | boolean | Firefox 70, Firefox ESR 68.2 | N/A
4110 | &nbsp;&nbsp;&nbsp;&nbsp;If true, bookmarks are restored to their defaults.
4111 | browser.cache.disk.enable | boolean | Firefox 68, Firefox ESR 68 | true
4112 | &nbsp;&nbsp;&nbsp;&nbsp;If false, don't store cache on the hard drive.
4113 | ~browser.cache.disk.parent_directory~ | string | Firefox 68, Firefox ESR 68 | Profile temporary directory
4114 | &nbsp;&nbsp;&nbsp;&nbsp;~If set, changes the location of the disk cache.~ This policy doesn't work. It's being worked on.
4115 | browser.fixup.dns_first_for_single_words | boolean | Firefox 68, Firefox ESR 68 | false
4116 | &nbsp;&nbsp;&nbsp;&nbsp;If true, single words are sent to DNS, not directly to search.
4117 | browser.newtabpage.activity-stream.default.sites | string | Firefox 72, ESR 68.4 | Locale dependent
4118 | &nbsp;&nbsp;&nbsp;&nbsp;If set, a list of URLs to use as the default top sites on the new tab page. Due to Firefox limitations, search sites can't be added. In addition, sites with the same name but different TLDs (example.org/example.com) will not display properly.
4119 | browser.places.importBookmarksHTML | boolean | Firefox 70, Firefox ESR 68.2
4120 | &nbsp;&nbsp;&nbsp;&nbsp;If true, bookmarks are always imported on startup.
4121 | browser.safebrowsing.phishing.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
4122 | &nbsp;&nbsp;&nbsp;&nbsp;If false, phishing protection is not enabled (Not recommended)
4123 | browser.safebrowsing.malware.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
4124 | &nbsp;&nbsp;&nbsp;&nbsp;If false, malware protection is not enabled (Not recommended)
4125 | browser.search.update | boolean | Firefox 68, Firefox ESR 68 | true
4126 | &nbsp;&nbsp;&nbsp;&nbsp;If false, updates for search engines are not checked.
4127 | browser.slowStartup.notificationDisabled | boolean | Firefox 70, Firefox ESR 68.2 | false
4128 | &nbsp;&nbsp;&nbsp;&nbsp;If true, a notification isn't shown if startup is slow.
4129 | browser.tabs.warnOnClose | boolean | Firefox 68, Firefox ESR 68 | true
4130 | &nbsp;&nbsp;&nbsp;&nbsp;If false, there is no warning when the browser is closed.
4131 | browser.taskbar.previews.enable | boolean | Firefox 70, Firefox ESR 68.2 (Windows only) | false
4132 | &nbsp;&nbsp;&nbsp;&nbsp;If true, tab previews are shown in the Windows taskbar.
4133 | browser.urlbar.suggest.bookmark | boolean | Firefox 68, Firefox ESR 68 | true
4134 | &nbsp;&nbsp;&nbsp;&nbsp;If false, bookmarks aren't suggested when typing in the URL bar.
4135 | browser.urlbar.suggest.history | boolean | Firefox 68, Firefox ESR 68 | true
4136 | &nbsp;&nbsp;&nbsp;&nbsp;If false, history isn't suggested when typing in the URL bar.
4137 | browser.urlbar.suggest.openpage | boolean | Firefox 68, Firefox ESR 68 | true
4138 | &nbsp;&nbsp;&nbsp;&nbsp;If false, open tabs aren't suggested when typing in the URL bar.
4139 | datareporting.policy.dataSubmissionPolicyBypassNotification | boolean | Firefox 68, Firefox ESR 68 | false
4140 | &nbsp;&nbsp;&nbsp;&nbsp;If true, don't show the privacy policy tab on first run.
4141 | dom.allow_scripts_to_close_windows | boolean | Firefox 70, Firefox ESR 68.2 | false
4142 | &nbsp;&nbsp;&nbsp;&nbsp;If false, web page can close windows.
4143 | dom.disable_window_flip | boolean | Firefox 68, Firefox ESR 68 | true
4144 | &nbsp;&nbsp;&nbsp;&nbsp;If false, web pages can focus and activate windows.
4145 | dom.disable_window_move_resize | boolean | Firefox 68, Firefox ESR 68 | false
4146 | &nbsp;&nbsp;&nbsp;&nbsp;If true, web pages can't move or resize windows.
4147 | dom.event.contextmenu.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4148 | &nbsp;&nbsp;&nbsp;&nbsp;If false, web pages can't override context menus.
4149 | dom.keyboardevent.keypress.hack.dispatch_non_printable_keys.addl | string | Firefox 68, Firefox ESR 68 | N/A
4150 | &nbsp;&nbsp;&nbsp;&nbsp;See https://support.mozilla.org/en-US/kb/dom-events-changes-introduced-firefox-66
4151 | dom.keyboardevent.keypress.hack.use_legacy_keycode_and_charcode.addl | string | Firefox 68, Firefox ESR 68 | N/A
4152 | &nbsp;&nbsp;&nbsp;&nbsp;See https://support.mozilla.org/en-US/kb/dom-events-changes-introduced-firefox-66
4153 | dom.xmldocument.load.enabled | boolean | Firefox ESR 68.5 | true.
4154 | &nbsp;&nbsp;&nbsp;&nbsp;If false, XMLDocument.load is not available.
4155 | dom.xmldocument.async.enabled | boolean | Firefox ESR 68.5 | true
4156 | &nbsp;&nbsp;&nbsp;&nbsp;If false, XMLDocument.async is not available.
4157 | extensions.blocklist.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
4158 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the extensions blocklist is not used (Not recommended)
4159 | extensions.getAddons.showPane | boolean | Firefox 68, Firefox ESR 68 | N/A
4160 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the Recommendations tab is not displayed in the Add-ons Manager.
4161 | extensions.htmlaboutaddons.recommendations.enabled | boolean | Firefox 72, Firefox ESR 68.4 | true
4162 | &nbsp;&nbsp;&nbsp;&nbsp;If false, recommendations are not shown on the Extensions tab in the Add-ons Manager.
4163 | geo.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
4164 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the geolocation API is disabled. | Language dependent
4165 | intl.accept_languages | string | Firefox 70, Firefox ESR 68.2
4166 | &nbsp;&nbsp;&nbsp;&nbsp;If set, preferred language for web pages.
4167 | media.eme.enabled (Deprecated - Switch to EncryptedMediaExtensions policy) | boolean | Firefox 70, Firefox ESR 68.2 | true
4168 | &nbsp;&nbsp;&nbsp;&nbsp;If false, Encrypted Media Extensions are not enabled.
4169 | media.gmp-gmpopenh264.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4170 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the OpenH264  plugin is not downloaded.
4171 | media.gmp-widevinecdm.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4172 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the Widevine plugin is not downloaded.
4173 | media.peerconnection.enabled | boolean | Firefox 72, Firefox ESR 68.4 | true
4174 | &nbsp;&nbsp;&nbsp;&nbsp;If false, WebRTC is disabled
4175 | media.peerconnection.ice.obfuscate_host_addresses.whitelist (Deprecated) | string | Firefox 72, Firefox ESR 68.4 | N/A
4176 | &nbsp;&nbsp;&nbsp;&nbsp;If set, a list of domains for which mDNS hostname obfuscation is
4177 disabled
4178 | media.peerconnection.ice.obfuscate_host_addresses.blocklist | string | Firefox 79, Firefox ESR 78.1 | N/A
4179 | &nbsp;&nbsp;&nbsp;&nbsp;If set, a list of domains for which mDNS hostname obfuscation is
4180 disabled
4181 | network.dns.disableIPv6 | boolean | Firefox 68, Firefox ESR 68 | false
4182 | &nbsp;&nbsp;&nbsp;&nbsp;If true, IPv6 DNS lokoups are disabled.
4183 | network.IDN_show_punycode | boolean | Firefox 68, Firefox ESR 68 | false
4184 | &nbsp;&nbsp;&nbsp;&nbsp;If true, display the punycode version of internationalized domain names.
4185 | places.history.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4186 | &nbsp;&nbsp;&nbsp;&nbsp;If false, history is not enabled.
4187 | print.save_print_settings | boolean | Firefox 70, Firefox ESR 68.2 | true
4188 | &nbsp;&nbsp;&nbsp;&nbsp;If false, print settings are not saved between jobs.
4189 | security.default_personal_cert | string | Firefox 68, Firefox ESR 68 | Ask Every Time
4190 | &nbsp;&nbsp;&nbsp;&nbsp;If set to Select Automatically, Firefox automatically chooses the default personal certificate.
4191 | security.mixed_content.block_active_content | boolean | Firefox 70, Firefox ESR 68.2 | true
4192 | &nbsp;&nbsp;&nbsp;&nbsp;If false, mixed active content (HTTP and HTTPS) is not blocked.
4193 | security.osclientcerts.autoload | boolean | Firefox 72 (Windows), Firefox 75 (macOS)  | false
4194 | &nbsp;&nbsp;&nbsp;&nbsp;If true, client certificates are loaded from the operating system certificate store.
4195 | security.ssl.errorReporting.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4196 | &nbsp;&nbsp;&nbsp;&nbsp;If false, SSL errors cannot be sent to Mozilla.
4197 | security.tls.hello_downgrade_check | boolean | Firefox 72, Firefox ESR 68.4 | true
4198 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the TLS 1.3 downgrade check is disabled.
4199 | ui.key.menuAccessKeyFocuses | boolean | Firefox 68, Firefox ESR 68 | true
4200 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the Alt key doesn't show the menubar on Windows.
4201 | widget.content.gtk-theme-override | string | Firefox 72, Firefox ESR 68.4 (Linux only) | N/A
4202 | &nbsp;&nbsp;&nbsp;&nbsp;If set, overrides the GTK theme for widgets.
4203 #### Windows (GPO)
4204 ```
4205 Software\Policies\Mozilla\Firefox\Preferences\boolean_preference_name = 0x1 | 0x0
4206 Software\Policies\Mozilla\Firefox\Preferences\string_preference_name = "string_value"
4207 ```
4208 #### Windows (Intune)
4209 OMA-URI: (periods are replaced by underscores)
4210 ```
4211 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Preferences/boolean_preference_name
4212 ```
4213 Value (string):
4214 ```
4215 <enabled/> or <disabled/>
4216 ```
4217 OMA-URI: (periods are replaced by underscores)
4218 ```
4219 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Preferences/string_preference_name
4220 ```
4221 Value (string):
4222 ```
4223 <enabled/>
4224 <data id="Preferences_String" value="string_value"/>
4225 ```
4226 #### macOS
4227 ```
4228 <dict>
4229   <key>Preferences</key>
4230   <dict>
4231     <key>boolean_preference_name</key>
4232     <true/> | <false/>
4233     <key>string_preference_name</key>
4234     <string>string_value</string>
4235   </dict>
4236 </dict>
4237 ```
4238 #### policies.json
4239 ```
4240 {
4241   "policies": {
4242     "Preferences": {
4243       "boolean_preference_name": true | false,
4244       "string_preference_name": "string_value"
4245     }
4246   }
4247 }
4248 ```
4249 ### PromptForDownloadLocation
4250 Ask where to save each file before downloading.
4251
4252 **Compatibility:** Firefox 68, Firefox ESR 68\
4253 **CCK2 Equivalent:** N/A\
4254 **Preferences Affected:** `browser.download.useDownloadDir`
4255
4256 #### Windows (GPO)
4257 ```
4258 Software\Policies\Mozilla\Firefox\PromptForDownloadLocation = 0x1 | 0x0
4259 ```
4260 #### Windows (Intune)
4261 OMA-URI:
4262 ```
4263 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PromptForDownloadLocation
4264 ```
4265 Value (string):
4266 ```
4267 <enabled/> or <disabled/>
4268 ```
4269 #### macOS
4270 ```
4271 <dict>
4272   <key>PromptForDownloadLocation</key>
4273   <true/> | <false/>
4274 </dict>
4275 ```
4276 #### policies.json
4277 ```
4278 {
4279   "policies": {
4280     "PromptForDownloadLocation": true | false
4281   }
4282 }
4283 ```
4284 ### Proxy
4285 Configure proxy settings. These settings correspond to the connection settings in Firefox preferences.
4286 To specify ports, append them to the hostnames with a colon (:).
4287
4288 `Mode` is the proxy method being used.
4289
4290 `Locked` is whether or not proxy settings can be changed.
4291
4292 `HTTPProxy` is the HTTP proxy server.
4293
4294 `UseHTTPProxyForAllProtocols` is whether or not the HTTP proxy should be used for all other proxies.
4295
4296 `SSLProxy` is the SSL proxy server.
4297
4298 `FTPProxy` is the FTP proxy server.
4299
4300 `SOCKSProxy` is the SOCKS proxy server
4301
4302 `SOCKSVersion` is the SOCKS version (4 or 5)
4303
4304 `Passthrough` is list of hostnames or IP addresses that will not be proxied. Use `<local>` to bypass proxying for all hostnames which do not contain periods.
4305
4306 `AutoConfigURL` is a  URL for proxy configuration (only used if Mode is autoConfig).
4307
4308 `AutoLogin` means do not prompt for authentication if password is saved.
4309
4310 `UseProxyForDNS` to use proxy DNS when using SOCKS v5.
4311
4312 **Compatibility:** Firefox 60, Firefox ESR 60\
4313 **CCK2 Equivalent:** `networkProxy*`\
4314 **Preferences Affected:** `network.proxy.type`,`network.proxy.autoconfig_url`,`network.proxy.socks_remote_dns`,`signon.autologin.proxy`,`network.proxy.socks_version`,`network.proxy.no_proxies_on`,`network.proxy.share_proxy_settings`,`network.proxy.http`,`network.proxy.http_port`,`network.proxy.ftp`,`network.proxy.ftp_port`,`network.proxy.ssl`,`network.proxy.ssl_port`,`network.proxy.socks`,`network.proxy.socks_port`
4315
4316 #### Windows (GPO)
4317 ```
4318 Software\Policies\Mozilla\Firefox\Proxy\Mode = "none" | "system" | "manual" | "autoDetect" | "autoConfig"
4319 Software\Policies\Mozilla\Firefox\Proxy\Locked = 0x1 | 0x0
4320 Software\Policies\Mozilla\Firefox\=Proxy\HTTPProxy = https://httpproxy.example.com
4321 Software\Policies\Mozilla\Firefox\Proxy\UseHTTPProxyForAllProtocols = 0x1 | 0x0
4322 Software\Policies\Mozilla\Firefox\Proxy\SSLProxy = https://sslproxy.example.com
4323 Software\Policies\Mozilla\Firefox\Proxy\FTPProxy = https://ftpproxy.example.com
4324 Software\Policies\Mozilla\Firefox\Proxy\SOCKSProxy = https://socksproxy.example.com
4325 Software\Policies\Mozilla\Firefox\Proxy\SOCKSVersion = 0x4 | 0x5
4326 Software\Policies\Mozilla\Firefox\Proxy\Passthrough = <local>
4327 Software\Policies\Mozilla\Firefox\Proxy\AutoConfigURL = URL_TO_AUTOCONFIG
4328 Software\Policies\Mozilla\Firefox\Proxy\AutoLogin = 0x1 | 0x0
4329 Software\Policies\Mozilla\Firefox\Proxy\UseProxyForDNS = 0x1 | 0x0
4330 ```
4331 #### Windows (Intune)
4332 OMA-URI:
4333 ```
4334 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Proxy
4335 ```
4336 Value (string):
4337 ```
4338 <enabled/>
4339 <data id="ProxyLocked" value="true | false"/>
4340 <data id="ConnectionType" value="none | system | manual | autoDetect | autoConfig"/>
4341 <data id="HTTPProxy" value="https://httpproxy.example.com"/>
4342 <data id="UseHTTPProxyForAllProtocols" value="true | false"/>
4343 <data id="SSLProxy" value="https://sslproxy.example.com"/>
4344 <data id="FTPProxy" value="https://ftpproxy.example.com"/>
4345 <data id="SOCKSProxy" value="https://socksproxy.example.com"/>
4346 <data id="SOCKSVersion" value="4 | 5"/>
4347 <data id="AutoConfigURL" value="URL_TO_AUTOCONFIG"/>
4348 <data id="Passthrough" value="<local>"/>
4349 <data id="AutoLogin" value="true | false"/>
4350 <data id="UseProxyForDNS" value="true | false"/>
4351 ```
4352 #### macOS
4353 ```
4354 <dict>
4355   <key>Proxy</key>
4356   <dict>
4357     <key>Mode</key>
4358     <string>none | system | manual | autoDetect | autoConfig</string>
4359     <key>Locked</key>
4360     <true> | </false>
4361     <key>HTTPProxy</key>
4362     <string>https://httpproxy.example.com</string>
4363     <key>UseHTTPProxyForAllProtocols</key>
4364     <true> | </false>
4365     <key>SSLProxy</key>
4366     <string>https://sslproxy.example.com</string>
4367     <key>FTPProxy</key>
4368     <string>https://ftpproxy.example.com</string>
4369     <key>SOCKSProxy</key>
4370     <string>https://socksproxy.example.com</string>
4371     <key>SOCKSVersion</key>
4372     <string>4 | 5</string>
4373     <key>Passthrough</key>
4374     <string>&lt;local>&gt;</string>
4375     <key>AutoConfigURL</key>
4376     <string>URL_TO_AUTOCONFIG</string>
4377     <key>AutoLogin</key>
4378     <true> | </false>
4379     <key>UseProxyForDNS</key>
4380     <true> | </false>
4381   </dict>
4382 </dict>
4383 ```
4384 #### policies.json
4385 ```
4386 {
4387   "policies": {
4388     "Proxy": {
4389       "Mode": "none" | "system" | "manual" | "autoDetect" | "autoConfig",
4390       "Locked": true | false,
4391       "HTTPProxy": "hostname",
4392       "UseHTTPProxyForAllProtocols": true | false,
4393       "SSLProxy": "hostname",
4394       "FTPProxy": "hostname",
4395       "SOCKSProxy": "hostname",
4396       "SOCKSVersion": 4 | 5
4397       "Passthrough": "<local>",
4398       "AutoConfigURL": "URL_TO_AUTOCONFIG",
4399       "AutoLogin": true | false,
4400       "UseProxyForDNS": true | false
4401     }
4402   }
4403 }
4404 ```
4405 ### RequestedLocales
4406 Set the the list of requested locales for the application in order of preference. It will cause the corresponding language pack to become active.
4407
4408 Note: For Firefox 68, this can now be a string so that you can specify an empty value.
4409
4410 **Compatibility:** Firefox 64, Firefox ESR 60.4, Updated in Firefox 68, Firefox ESR 68\
4411 **CCK2 Equivalent:** N/A\
4412 **Preferences Affected:** N/A
4413 #### Windows (GPO)
4414 ```
4415 Software\Policies\Mozilla\Firefox\RequestedLocales\1 = "de"
4416 Software\Policies\Mozilla\Firefox\RequestedLocales\2 = "en-US"
4417
4418 or
4419
4420 Software\Policies\Mozilla\Firefox\RequestedLocales = "de,en-US"
4421 ```
4422 #### Windows (Intune)
4423 OMA-URI:
4424 ```
4425 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/RequestedLocalesString
4426 ```
4427 Value (string):
4428 ```
4429 <enabled/>
4430 <data id="Preferences_String" value="de,en-US"/>
4431 ```
4432 #### macOS
4433 ```
4434 <dict>
4435   <key>RequestedLocales</key>
4436   <array>
4437     <string>de</string>
4438     <string>en-US</string>
4439   </array>
4440 </dict>
4441
4442 or
4443
4444 <dict>
4445   <key>RequestedLocales</key>
4446   <string>de,en-US</string>
4447 </dict>
4448
4449 ```
4450 #### policies.json
4451 ```
4452 {
4453   "policies": {
4454     "RequestedLocales": ["de", "en-US"]
4455   }
4456 }
4457
4458 or
4459
4460 {
4461   "policies": {
4462     "RequestedLocales": "de,en-US"
4463   }
4464 }
4465 ```
4466 <a name="SanitizeOnShutdown"></a>
4467
4468 ### SanitizeOnShutdown (Selective)
4469 Clear data on shutdown. Choose from Cache, Cookies, Download History, Form & Search History, Browsing History, Active Logins, Site Preferences and Offline Website Data.
4470
4471 Previously, these values were always locked. Starting with Firefox 74 and Firefox ESR 68.6, you can use the `Locked` option to either keep the values unlocked (set it to false), or lock only the values you set (set it to true). If you want the old behavior of locking everything, do not set `Locked` at all.
4472
4473 **Compatibility:** Firefox 68, Firefox ESR 68 (Locked added in 74/68.6)\
4474 **CCK2 Equivalent:** N/A\
4475 **Preferences Affected:** `privacy.sanitize.sanitizeOnShutdown`,`privacy.clearOnShutdown.cache`,`privacy.clearOnShutdown.cookies`,`privacy.clearOnShutdown.downloads`,`privacy.clearOnShutdown.formdata`,`privacy.clearOnShutdown.history`,`privacy.clearOnShutdown.sessions`,`privacy.clearOnShutdown.siteSettings`,`privacy.clearOnShutdown.offlineApps`
4476 #### Windows (GPO)
4477 ```
4478 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Cache = 0x1 | 0x0
4479 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Cookies = 0x1 | 0x0
4480 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Downloads = 0x1 | 0x0
4481 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\FormData = 0x1 | 0x0
4482 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\History = 0x1 | 0x0
4483 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Sessions = 0x1 | 0x0
4484 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\SiteSettings = 0x1 | 0x0
4485 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\OfflineApps = 0x1 | 0x0
4486 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Locked = 0x1 | 0x0
4487 ```
4488 #### Windows (Intune)
4489 OMA-URI:
4490 ```
4491 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/I_SanitizeOnShutdown_Locked
4492 ```
4493 Value (string):
4494 ```
4495 <enabled/> or <disabled/>
4496 ```
4497 #### macOS
4498 ```
4499 <dict>
4500   <key>SanitizeOnShutdown</key>
4501   <dict>
4502     <key>Cache</key>
4503     <true/> | <false/>
4504     <key>Cookies</key>
4505     <true/> | <false/>
4506     <key>Downloads</key>
4507     <true/> | <false/>
4508     <key>FormData</key>
4509     <true/> | <false/>
4510     <key>History</key>
4511     <true/> | <false/>
4512     <key>Sessions</key>
4513     <true/> | <false/>
4514     <key>SiteSettings</key>
4515     <true/> | <false/>
4516     <key>OfflineApps</key>
4517     <true/> | <false/>
4518     <key>Locked</key>
4519     <true/> | <false/>
4520   </dict>
4521 </dict>
4522 ```
4523 #### policies.json
4524 ```
4525 {
4526   "policies": {
4527     "SanitizeOnShutdown": {
4528       "Cache": true | false,
4529       "Cookies": true | false,
4530       "Downloads": true | false,
4531       "FormData": true | false,
4532       "History": true | false,
4533       "Sessions": true | false,
4534       "SiteSettings": true | false,
4535       "OfflineApps": true | false,
4536       "Locked": true | false
4537     }
4538   }
4539 }
4540 ```
4541 ### SanitizeOnShutdown (All)
4542 Clear all data on shutdown, including Browsing & Download History, Cookies, Active Logins, Cache, Form & Search History, Site Preferences and Offline Website Data.
4543
4544 **Compatibility:** Firefox 60, Firefox ESR 60\
4545 **CCK2 Equivalent:** N/A\
4546 **Preferences Affected:** `privacy.sanitize.sanitizeOnShutdown`,`privacy.clearOnShutdown.cache`,`privacy.clearOnShutdown.cookies`,`privacy.clearOnShutdown.downloads`,`privacy.clearOnShutdown.formdata`,`privacy.clearOnShutdown.history`,`privacy.clearOnShutdown.sessions`,`privacy.clearOnShutdown.siteSettings`,`privacy.clearOnShutdown.offlineApps`
4547 #### Windows (GPO)
4548 ```
4549 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown = 0x1 | 0x0
4550 ```
4551 #### Windows (Intune)
4552 OMA-URI:
4553 ```
4554 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/C_SanitizeOnShutdown
4555 ```
4556 Value (string):
4557 ```
4558 <enabled/> or <disabled/>
4559 ```
4560 #### macOS
4561 ```
4562 <dict>
4563   <key>SanitizeOnShutdown</key>
4564   <true/> | <false/>
4565 </dict>
4566 ```
4567 #### policies.json
4568 ```
4569 {
4570   "policies": {
4571     "SanitizeOnShutdown": true | false
4572   }
4573 }
4574 ```
4575 ### SearchBar
4576 Set whether or not search bar is displayed.
4577
4578 **Compatibility:** Firefox 60, Firefox ESR 60\
4579 **CCK2 Equivalent:** `showSearchBar`\
4580 **Preferences Affected:** N/A
4581
4582 #### Windows (GPO)
4583 ```
4584 Software\Policies\Mozilla\Firefox\SearchBar = "unified" | "separate"
4585 ```
4586
4587 #### Windows (Intune)
4588 OMA-URI:
4589 ```
4590 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SearchBar
4591 ```
4592 Value (string):
4593 ```
4594 <enabled/>
4595 <data id="Permissions" value="unified | separate"/>
4596 ```
4597 #### macOS
4598 ```
4599 <dict>
4600   <key>SearchBar</key>
4601   <string>unified | separate</string>
4602 </dict>
4603 ```
4604 #### policies.json
4605 ```
4606 {
4607   "policies": {
4608     "SearchBar": "unified" | "separate"
4609   }
4610 }
4611 ```
4612 <a name="SearchEngines"></a>
4613
4614 ### SearchEngines (This policy is only available on the ESR.)
4615
4616 ### SearchEngines | Default
4617
4618 Set the default search engine. This policy is only available on the ESR.
4619
4620 **Compatibility:** Firefox ESR 60\
4621 **CCK2 Equivalent:** `defaultSearchEngine`\
4622 **Preferences Affected:** N/A
4623
4624 #### Windows (GPO)
4625 ```
4626 Software\Policies\Mozilla\Firefox\SearchEngines\Default = NAME_OF_SEARCH_ENGINE
4627 ```
4628 #### Windows (Intune)
4629 OMA-URI:
4630 ```
4631 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_Default
4632 ```
4633 Value (string):
4634 ```
4635 <enabled/>
4636 <data id="SearchEngines_Default" value="NAME_OF_SEARCH_ENGINE"/>
4637 ```
4638 #### macOS
4639 ```
4640 <dict>
4641   <key>SearchEngines</key>
4642   <dict>
4643     <key>Default</key>
4644     <string>NAME_OF_SEARCH_ENGINE</string>
4645   </dict>
4646 </dict>
4647 ```
4648 #### policies.json
4649 ```
4650 {
4651   "policies": {
4652     "SearchEngines": {
4653       "Default": "NAME_OF_SEARCH_ENGINE"
4654     }
4655   }
4656 }
4657 ```
4658 ### SearchEngines | PreventInstalls
4659
4660 Prevent installing search engines from webpages.
4661
4662 **Compatibility:** Firefox ESR 60\
4663 **CCK2 Equivalent:** `disableSearchEngineInstall`\
4664 **Preferences Affected:** N/A
4665
4666 #### Windows (GPO)
4667 ```
4668 Software\Policies\Mozilla\Firefox\SearchEngines\PreventInstalls = 0x1 | 0x0
4669 ```
4670 #### Windows (Intune)
4671 OMA-URI:
4672 ```
4673 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_PreventInstalls
4674 ```
4675 Value (string):
4676 ```
4677 <enabled/> or <disabled/>
4678 ```
4679 #### macOS
4680 ```
4681 <dict>
4682   <key>SearchEngines</key>
4683   <dict>
4684     <key>PreventInstalls</key>
4685     <true/> | <false/>
4686   </dict>
4687 </dict>
4688 ```
4689 #### policies.json
4690 ```
4691 {
4692   "policies": {
4693     "SearchEngines": {
4694       "PreventInstalls": true | false
4695     }
4696   }
4697 }
4698 ```
4699 ### SearchEngines | Remove
4700
4701 Hide built-in search engines. This policy is only available on the ESR.
4702
4703 **Compatibility:** Firefox ESR 60.2\
4704 **CCK2 Equivalent:** `removeDefaultSearchEngines` (removed all built-in engines)\
4705 **Preferences Affected:** N/A
4706
4707 #### Windows (GPO)
4708 ```
4709 Software\Policies\Mozilla\Firefox\SearchEngines\Remove\1 = NAME_OF_SEARCH_ENGINE
4710 ```
4711 #### Windows (Intune)
4712 OMA-URI:
4713 ```
4714 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_Remove
4715 ```
4716 Value (string):
4717 ```
4718 <enabled/>
4719 <data id="SearchEngines_Remove" value="1&#xF000;NAME_OF_SEARCH_ENGINE"/>
4720 ```
4721 #### macOS
4722 ```
4723 <dict>
4724   <key>SearchEngines</key>
4725   <dict>
4726     <key>Remove</key>
4727     <array>
4728       <string>NAME_OF_SEARCH_ENGINE</string>
4729     </array>
4730   </dict>
4731 </dict>
4732 ```
4733 #### policies.json
4734 ```
4735 {
4736   "policies": {
4737     "SearchEngines": {
4738       "Remove": ["NAME_OF_SEARCH_ENGINE"]
4739     }
4740   }
4741 }
4742 ```
4743 ### SearchEngines | Add
4744
4745 Add new search engines (up to five). This policy is only available on the ESR. `Name` and `URLTemplate` are required.
4746
4747 `Name` is the name of the search engine.
4748
4749 `URLTemplate` is the search URL with {searchTerms} to substitute for the search term.
4750
4751 `Method` is either GET or POST
4752
4753 `IconURL` is a URL for the icon to use.
4754
4755 `Alias` is a keyword to use for the engine.
4756
4757 `Description` is a description of the search engine.
4758
4759 `PostData` is the POST data as name value pairs separated by &.
4760
4761 `SuggestURLTemplate` is a search suggestions URL with {searchTerms} to substitute for the search term.
4762
4763 **Compatibility:** Firefox ESR 60 (POST support in Firefox ESR 68)\
4764 **CCK2 Equivalent:** `searchplugins`\
4765 **Preferences Affected:** N/A
4766
4767 #### Windows (GPO)
4768 ```
4769 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Name = "Example1"
4770 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\URLTemplate = "https://www.example.org/q={searchTerms}"
4771 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Method = "GET" | "POST"
4772 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\IconURL = "https://www.example.org/favicon.ico"
4773 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Alias = "example"
4774 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Description = "Example Description"
4775 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\SuggestURLTemplate = "https://www.example.org/suggestions/q={searchTerms}"
4776 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\PostData = "name=value&q={searchTerms}"
4777 ```
4778 #### Windows (Intune)
4779 OMA-URI:
4780 ```
4781 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_1
4782 ```
4783 Value (string):
4784 ```
4785 <enabled/>
4786 <data id="SearchEngine_Name" value="Example1"/>
4787 <data id="SearchEngine_URLTemplate" value="https://www.example.org/q={searchTerms"/>
4788 <data id="SearchEngine_Method" value="GET | POST"/>
4789 <data id="SearchEngine_IconURL" value="https://www.example.org/favicon.ico"/>
4790 <data id="SearchEngine_Alias" value="example"/>
4791 <data id="SearchEngine_Description" value="Example Description"/>
4792 <data id="SearchEngine_SuggestURLTemplate" value="https://www.example.org/suggestions/q={searchTerms}"/>
4793 <data id="SearchEngine_PostData" value="name=value&amp;q={searchTerms}"/>
4794 ```
4795 #### macOS
4796 ```
4797 <dict>
4798   <key>SearchEngines</key>
4799   <dict>
4800     <key>Add</key>
4801     <array>
4802       <dict>
4803         <key>Name</key>
4804         <string>Example1</string>
4805         <key>URLTemplate</key>
4806         <string>https://www.example.org/q={searchTerms}</string>
4807         <key>Method</key>
4808         <string>GET | POST </string>
4809         <key>IconURL</key>
4810         <string>https://www.example.org/favicon.ico</string>
4811         <key>Alias</key>
4812         <string>example</string>
4813         <key>Description</key>
4814         <string>Example Description</string>
4815         <key>SuggestURLTemplate</key>
4816         <string>https://www.example.org/suggestions/q={searchTerms}</string>
4817         <key>PostData</key>
4818         <string>name=value&q={searchTerms}</string>
4819       </dict>
4820     <array>
4821   </dict>
4822 </dict>
4823 ```
4824 #### policies.json
4825 ```
4826 {
4827   "policies": {
4828     "SearchEngines": {
4829       "Add": [
4830         {
4831           "Name": "Example1",
4832           "URLTemplate": "https://www.example.org/q={searchTerms}",
4833           "Method": "GET" | "POST",
4834           "IconURL": "https://www.example.org/favicon.ico",
4835           "Alias": "example",
4836           "Description": "Description",
4837           "PostData": "name=value&q={searchTerms}",
4838           "SuggestURLTemplate": "https://www.example.org/suggestions/q={searchTerms}"
4839         }
4840       ]
4841     }
4842   }
4843 }
4844 ```
4845 ### SearchSuggestEnabled
4846
4847 Enable search suggestions.
4848
4849 **Compatibility:** Firefox 68, Firefox ESR 68\
4850 **CCK2 Equivalent:** N/A\
4851 **Preferences Affected:** `browser.urlbar.suggest.searches`,`browser.search.suggest.enabled`
4852
4853 #### Windows (GPO)
4854 ```
4855 Software\Policies\Mozilla\Firefox\SearchSuggestEnabled = 0x1 | 0x0
4856 ```
4857 #### Windows (Intune)
4858 OMA-URI:
4859 ```
4860 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchSuggestEnabled
4861 ```
4862 Value (string):
4863 ```
4864 <enabled/> or <disabled/>
4865 ```
4866 #### macOS
4867 ```
4868 <dict>
4869   <key>SearchSuggestEnabled</key>
4870   <true/> | <false/>
4871 </dict>
4872 ```
4873 #### policies.json
4874 ```
4875 {
4876   "policies": {
4877     "SearchSuggestEnabled": true | false
4878   }
4879 }
4880 ```
4881 ### SecurityDevices
4882
4883 Install PKCS #11 modules.
4884
4885 **Compatibility:** Firefox 64, Firefox ESR 60.4\
4886 **CCK2 Equivalent:** `certs.devices`\
4887 **Preferences Affected:** N/A
4888
4889 #### Windows (GPO)
4890 ```
4891 Software\Policies\Mozilla\Firefox\SecurityDevices\NAME_OF_DEVICE = PATH_TO_LIBRARY_FOR_DEVICE
4892 ```
4893 #### Windows (Intune)
4894 OMA-URI:
4895 ```
4896 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SecurityDevices
4897 ```
4898 Value (string):
4899 ```
4900 <enabled/>
4901 <data id="SecurityDevices" value="NAME_OF_DEVICE&#xF000;PATH_TO_LIBRARY_FOR_DEVICE"/>
4902 ```
4903 #### macOS
4904 ```
4905 <dict>
4906   <key>SecurityDevices</key>
4907   <dict>
4908     <key>NAME_OF_DEVICE</key>
4909     <string>PATH_TO_LIBRARY_FOR_DEVICE</string>
4910   </dict>
4911 </dict>
4912 ```
4913
4914 #### policies.json
4915 ```
4916 {
4917   "policies": {
4918     "SecurityDevices": {
4919       "NAME_OF_DEVICE": "PATH_TO_LIBRARY_FOR_DEVICE"
4920     }
4921   }
4922 }
4923 ```
4924 ### SSLVersionMax
4925
4926 Set and lock the maximum version of TLS.
4927
4928 **Compatibility:** Firefox 66, Firefox ESR 60.6\
4929 **CCK2 Equivalent:** N/A\
4930 **Preferences Affected:** `security.tls.version.max`
4931
4932 #### Windows (GPO)
4933 ```
4934 Software\Policies\Mozilla\Firefox\SSLVersionMax = "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
4935 ```
4936 #### Windows (Intune)
4937 OMA-URI:
4938 ```
4939 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SSLVersionMax
4940 ```
4941 Value (string):
4942 ```
4943 <enabled/>
4944 <data id="SSLVersion" value="tls1 | tls1.2 | tls1.3"/>
4945 ```
4946 #### macOS
4947 ```
4948 <dict>
4949   <key>SSLVersionMax</key>
4950   <string>tls1 | tls1.1 | tls1.2 | tls1.3</string>
4951 </dict>
4952 ```
4953
4954 #### policies.json
4955 ```
4956 {
4957   "policies": {
4958     "SSLVersionMax": "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
4959   }
4960 }
4961 ```
4962 ### SSLVersionMin
4963
4964 Set and lock the minimum version of TLS.
4965
4966 **Compatibility:** Firefox 66, Firefox ESR 60.6\
4967 **CCK2 Equivalent:** N/A\
4968 **Preferences Affected:** `security.tls.version.min`
4969
4970 #### Windows (GPO)
4971 ```
4972 Software\Policies\Mozilla\Firefox\SSLVersionMin = "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
4973 ```
4974 #### Windows (Intune)
4975 OMA-URI:
4976 ```
4977 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SSLVersionMin
4978 ```
4979 Value (string):
4980 ```
4981 <enabled/>
4982 <data id="SSLVersion" value="tls1 | tls1.2 | tls1.3"/>
4983 ```
4984 #### macOS
4985 ```
4986 <dict>
4987   <key>SSLVersionMin</key>
4988   <string>tls1 | tls1.1 | tls1.2 | tls1.3</string>
4989 </dict>
4990 ```
4991
4992 #### policies.json
4993 ```
4994 {
4995   "policies": {
4996     "SSLVersionMin": "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
4997   }
4998 }
4999 ```
5000 ### SupportMenu
5001 Add a menuitem to the help menu for specifying support information.
5002
5003 **Compatibility:** Firefox 68.0.1, Firefox ESR 68.0.1\
5004 **CCK2 Equivalent:** helpMenu\
5005 **Preferences Affected:** N/A
5006
5007 #### Windows (GPO)
5008 ```
5009 Software\Policies\Mozilla\Firefox\SupportMenu\Title = "Support Menu"
5010 Software\Policies\Mozilla\Firefox\SupportMenu\URL = "http://example.com/support"
5011 Software\Policies\Mozilla\Firefox\SupportMenu\AccessKey = "S"
5012 ```
5013 #### Windows (Intune)
5014 OMA-URI:
5015 ```
5016 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SupportMenu
5017 ```
5018 Value (string):
5019 ```
5020 <enabled/>
5021 <data id="SupportMenuTitle" value="Support Menu"/>
5022 <data id="SupportMenuURL" value="http://example.com/support"/>
5023 <data id="SupportMenuAccessKey" value="S">
5024 ```
5025 #### macOS
5026 ```
5027 <dict>
5028   <key>SupportMenu</key>
5029   <dict>
5030     <key>Title</key>
5031     <string>SupportMenu</string>
5032     <key>URL</key>
5033     <string>http://example.com/support</string>
5034     <key>AccessKey</key>
5035     <string>S</string>
5036   </dict>
5037 </dict>
5038 ```
5039 #### policies.json
5040 ```
5041 {
5042   "policies": {
5043     "SupportMenu": {
5044       "Title": "Support Menu",
5045       "URL": "http://example.com/support",
5046       "AccessKey": "S"
5047     }
5048   }
5049 }
5050 ```
5051 ### UserMessaging
5052
5053 Prevent Firefox from messaging the user in certain situations.
5054
5055 `WhatsNew` Remove the "What's New" icon and menuitem. (Firefox 75 only)
5056
5057 `ExtensionRecommendations` Don't recommend extensions while the user is visiting web pages.
5058
5059 `FeatureRecommendations` Don't recommend browser features.
5060
5061 `UrlbarInterventions` Don't offer Firefox specific suggestions in the URL bar. (Firefox 75 only)
5062
5063 **Compatibility:** Firefox 75, Firefox ESR 68.7\
5064 **CCK2 Equivalent:** N/A\
5065 **Preferences Affected:** `browser.messaging-system.whatsNewPanel.enabled`,`browser.newtabpage.activity-stream.asrouter.userprefs.cfr.addons`,`browser.newtabpage.activity-stream.asrouter.userprefs.cfr.features`
5066
5067 #### Windows (GPO)
5068 ```
5069 Software\Policies\Mozilla\Firefox\UserMessaging\WhatsNew = 0x1 | 0x0
5070 Software\Policies\Mozilla\Firefox\UserMessaging\ExtensionRecommendations = 0x1 | 0x0
5071 Software\Policies\Mozilla\Firefox\UserMessaging\FeatureRecommendations = 0x1 | 0x0
5072 Software\Policies\Mozilla\Firefox\UserMessaging\UrlbarInterventions = 0x1 | 0x0
5073 ```
5074 #### Windows (Intune)
5075 OMA-URI:
5076 ```
5077 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/UserMessaging_WhatsNew
5078 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/UserMessaging_ExtensionRecommendations
5079 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/UserMessaging_FeatureRecommendations
5080 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/UserMessaging_UrlbarInterventions
5081 ```
5082 Value (string):
5083 ```
5084 <enabled/> or <disabled/>
5085 ```
5086 #### macOS
5087 ```
5088 <dict>
5089   <key>UserMessaging</key>
5090   <dict>
5091     <key>WhatsNew</key>
5092     <true/> | <false/>
5093     <key>ExtensionRecommendations</key>
5094     <true/> | <false/>
5095     <key>FeatureRecommendations</key>
5096     <true/> | <false/>
5097     <key>UrlbarInterventions</key>
5098     <true/> | <false/>
5099   </dict>
5100 </dict>
5101 ```
5102 #### policies.json
5103 ```
5104 {
5105   "policies": {
5106     "UserMessaging": {
5107       "WhatsNew": true | false,
5108       "ExtensionRecommendations": true | false,
5109       "FeatureRecommendations": true | false,
5110       "UrlbarInterventions": true | false
5111     }
5112   }
5113 }
5114 ```
5115 ### WebsiteFilter
5116 Block websites from being visited. The parameters take an array of Match Patterns, as documented in https://developer.mozilla.org/en-US/Add-ons/WebExtensions/Match_patterns.
5117 The arrays are limited to 1000 entries each.
5118
5119 As of Firefox 83 and Firefox ESR 78.5, file URLs are supported.
5120
5121 **Compatibility:** Firefox 60, Firefox ESR 60\
5122 **CCK2 Equivalent:** N/A\
5123 **Preferences Affected:** N/A
5124
5125 #### Windows (GPO)
5126 ```
5127 Software\Policies\Mozilla\Firefox\WebsiteFilter\Block\1 = "<all_urls>"
5128 Software\Policies\Mozilla\Firefox\WebsiteFilter\Exceptions\1 = "http://example.org/*"
5129 ```
5130 #### Windows (Intune)
5131 OMA-URI:
5132 ```
5133 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/B_WebsiteFilter_Block
5134 ```
5135 Value (string):
5136 ```
5137 <enabled/>
5138 <data id="WebsiteFilter" value="1&#xF000;<all_urls>"/>
5139 ```
5140 OMA-URI:
5141 ```
5142 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/B_WebsiteFilter_Exceptions
5143 ```
5144 Value (string):
5145 ```
5146 <enabled/>
5147 <data id="WebsiteFilter" value="1&#xF000;http://example.org/*"/>
5148 ```
5149 #### macOS
5150 ```
5151 <dict>
5152   <key>WebsiteFilter</key>
5153   <dict>
5154     <key>Block</key>
5155     <array>
5156       <string><all_urls></string>
5157     </array>
5158     <key>Exceptions</key>
5159     <array>
5160       <string>http://example.org/*</string>
5161     </array>
5162   </dict>
5163
5164 </dict>
5165 ```
5166 #### policies.json
5167 ```
5168 {
5169   "policies": {
5170     "WebsiteFilter": {
5171       "Block": ["<all_urls>"],
5172       "Exceptions": ["http://example.org/*"]
5173     }
5174   }
5175 }
5176 ```