README.md

   1 **These policies are in active development and so might contain changes that do not work with current versions of Firefox.**
   2
   3 **You should use the officially released versions (https://github.com/mozilla/policy-templates/releases) if you are deploying changes.**
   4
   5 Policies can be specified using the Group Policy templates on Windows (https://github.com/mozilla/policy-templates/tree/master/windows), configuration profiles on macOS (https://github.com/mozilla/policy-templates/tree/master/mac), or by creating a file called `policies.json`. On Windows, create a directory called `distribution` where the EXE is located and place the file there. On Mac, the file goes into `Firefox.app/Contents/Resources/distribution`.  On Linux, the file goes into `firefox/distribution`, where `firefox` is the installation directory for firefox, which varies by distribution.
   6
   7 | Policy Name | Description
   8 | --- | --- |
   9 | **[`AppUpdateURL`](#AppUpdateURL)** | Change the URL for application update.
  10 | **[`Authentication`](#Authentication)** | Configure sites that support integrated authentication.
  11 | **[`BlockAboutAddons`](#blockaboutaddons)** | Block access to the Add-ons Manager (about:addons).
  12 | **[`BlockAboutConfig`](#blockaboutconfig)** | Block access to about:config.
  13 | **[`BlockAboutProfiles`](#blockaboutprofiles)** | Block access to About Profiles (about:profiles).
  14 | **[`BlockAboutSupport`](#blockaboutsupport)** | Block access to Troubleshooting Information (about:support).
  15 | **[`Bookmarks`](#bookmarks)** | Add bookmarks in either the bookmarks toolbar or menu.
  16 | **[`CaptivePortal`](#captiveportal)** | Enable or disable the detection of captive portals.
  17 | **[`Certificates`](#certificates)** |
  18 | **[`Certificates -> ImportEnterpriseRoots`](#certificates--importenterpriseroots)** | Trust certificates that have been added to the operating system certificate store by a user or administrator.
  19 | **[`Certificates -> Install`](#certificates--install)** | Install certificates into the Firefox certificate store.
  20 | **[`Cookies`](#cookies)** | Configure cookie preferences.
  21 | **[`DisableSetDesktopBackground`](#disablesetdesktopbackground)** | Remove the "Set As Desktop Background..." menuitem when right clicking on an image.
  22 | **[`DisableMasterPasswordCreation`](#disablemasterpasswordcreation)** | Remove the master password functionality.
  23 | **[`DisableAppUpdate`](#disableappupdate)** | Turn off application updates.
  24 | **[`DisableBuiltinPDFViewer`](#disablebuiltinpdfviewer)** | Disable the built in PDF viewer.
  25 | **[`DisableDeveloperTools`](#disabledevelopertools)** | Remove access to all developer tools.
  26 | **[`DisableFeedbackCommands`](#disablefeedbackcommands)** | Disable the menus for reporting sites.
  27 | **[`DisableFirefoxScreenshots`](#disablefirefoxscreenshots)** | Remove access to Firefox Screenshots.
  28 | **[`DisableFirefoxAccounts`](#disablefirefoxaccounts)** | Disable Firefox Accounts integration (Sync).
  29 | **[`DisableFirefoxStudies`](#disablefirefoxstudies)** | Disable Firefox studies (Shield).
  30 | **[`DisableForgetButton`](#disableforgetbutton)** | Disable the "Forget" button.
  31 | **[`DisableFormHistory`](#disableformhistory)** | Turn off saving information on web forms and the search bar.
  32 | **[`DisablePocket`](#disablepocket)** | Remove Pocket in the Firefox UI.
  33 | **[`DisablePrivateBrowsing`](#disableprivatebrowsing)** | Remove access to private browsing.
  34 | **[`DisableProfileImport`](#disableprofileimport)** | Disables the "Import data from another browser" option in the bookmarks window.
  35 | **[`DisableProfileRefresh`](#disableprofilerefresh)** | Disable the Refresh Firefox button on about:support and support.mozilla.org
  36 | **[`DisableSafeMode`](#disablesafemode)** | Disable safe mode within the browser.
  37 | **[`DisableSecurityBypass`](#disablesecuritybypass)** | Prevent the user from bypassing security in certain cases.
  38 | **[`DisableSystemAddonUpdate`](#disablesystemaddonupdate)** | Prevent system add-ons from being installed or update.
  39 | **[`DisableTelemetry`](#disabletelemetry)** | DisableTelemetry
  40 | **[`DisplayBookmarksToolbar`](#displaybookmarkstoolbar)** | Set the initial state of the bookmarks toolbar.
  41 | **[`DisplayMenuBar`](#displaymenubar)** | Set the initial state of the menubar.
  42 | **[`DNSOverHTTPS`](#dnsoverhttps)** | Configure DNS over HTTPS.
  43 | **[`DontCheckDefaultBrowser`](#dontcheckdefaultbrowser)** | Don't check if Firefox is the default browser at startup.
  44 | **[`DefaultDownloadDirectory`](#defaultdownloaddirectory)** | Set the default download directory.
  45 | **[`DownloadDirectory`](#downloaddirectory)** | Set and lock the download directory.
  46 | **[`EnableTrackingProtection`](#enabletrackingprotection)** | Configure tracking protection.
  47 | **[`EnterprisePoliciesEnabled`](#enterprisepoliciesenabled)** | Enable policy support on macOS.
  48 | **[`Extensions`](#extensions)** | Control the installation, uninstallation and locking of extensions.
  49 | **[`ExtensionSettings`](#extensionsettings)** | Manage all aspects of extensions.
  50 | **[`ExtensionUpdate`](#extensionupdate)** | Control extension updates.
  51 | **[`FlashPlugin`](#flashplugin)** | Configure the default Flash plugin policy as well as origins for which Flash is allowed.
  52 | **[`FirefoxHome`](#firefoxhome)** | Customize the Firefox Home page.
  53 | **[`HardwareAcceleration`](#hardwareacceleration)** | Control hardware acceleration.
  54 | **[`Homepage`](#homepage)** | Configure the default homepage and how Firefox starts.
  55 | **[`InstallAddonsPermission`](#installaddonspermission)** | Configure the default extension install policy as well as origins for extension installs are allowed.
  56 | **[`LegacyProfiles`](#legacyprofiles)** | Disable the feature enforcing a separate profile for each installation.
  57 | **[`LocalFileLinks`](#localfilelinks)** | Enable linking to local files by origin.
  58 | **[`NetworkPrediction`](#networkprediction)** | Enable or disable network prediction (DNS prefetching).
  59 | **[`NewTabPage`](#newtabpage)** | Enable or disable the New Tab page.
  60 | **[`NoDefaultBookmarks`](#nodefaultbookmarks)** | Disable the creation of default bookmarks.
  61 | **[`OfferToSaveLogins`](#offertosavelogins)** | Control whether or not Firefox offers to save passwords.
  62 | **[`OfferToSaveLoginsDefault`](#offertosaveloginsdefault)** | Set the default value for whether or not Firefox offers to save passwords.
  63 | **[`OverrideFirstRunPage`](#overridefirstrunpage)** | Override the first run page.
  64 | **[`OverridePostUpdatePage`](#overridepostupdatepage)** | Override the upgrade page.
  65 | **[`PasswordManagerEnabled`](#passwordmanagerenabled)** | Remove (some) access to the password manager.
  66 | **[`Permissions`](#permissions)** | Set permissions associated with camera, microphone, location, and notifications.
  67 | **[`PopupBlocking`](#popupblocking)** | Configure the default pop-up window policy as well as origins for which pop-up windows are allowed.
  68 | **[`Preferences`](#preferences)** | Set and lock some preferences.
  69 | **[`PromptForDownloadLocation`](#promptfordownloadlocation)** | Ask where to save each file before downloading.
  70 | **[`Proxy`](#proxy)** | Configure proxy settings.
  71 | **[`RequestedLocales`](#requestedlocales)** | Set the the list of requested locales for the application in order of preference.
  72 | **[`SanitizeOnShutdown` (All)](#sanitizeonshutdown-all)** | Clear all data on shutdown.
  73 | **[`SanitizeOnShutdown` (Selective)](#sanitizeonshutdown-selective)** | Clear data on shutdown.
  74 | **[`SearchBar`](#searchbar)** | Set whether or not search bar is displayed.
  75 | **[`SearchEngines`](#searchengines-this-policy-is-only-available-on-the-esr)** |
  76 | **[`SearchEngines -> Default`](#searchengines--default)** | Set the default search engine.
  77 | **[`SearchEngines -> PreventInstalls`](#searchengines--preventinstalls)** | Prevent installing search engines from webpages.
  78 | **[`SearchEngines -> Remove`](#searchengines--remove)** | Hide built-in search engines.
  79 | **[`SearchEngines -> Add`](#searchengines--add)** | Add new search engines.
  80 | **[`SecurityDevices`](#securitydevices)** | Install PKCS #11 modules.
  81 | **[`SearchSuggestEnabled`](#searchsuggestenabled)** | Enable search suggestions.
  82 | **[`SSLVersionMax`](#sslversionmax)** | Set and lock the maximum version of TLS.
  83 | **[`SSLVersionMin`](#sslversionmin)** | Set and lock the minimum version of TLS.
  84 | **[`SupportMenu`](#supportmenu)** | Add a menuitem to the help menu for specifying support information.
  85 | **[`WebsiteFilter`](#websitefilter)** | Block websites from being visited.
  86
  87 ### AppUpdateURL
  88
  89 Change the URL for application update.
  90
  91 **Compatibility:** Firefox 62, Firefox ESR 60.2\
  92 **CCK2 Equivalent:** N/A\
  93 **Preferences Affected:** `app.update.url`
  94
  95 #### Windows
  96 ```
  97 Software\Policies\Mozilla\Firefox\AppUpdateURL = "https://yoursite.com"
  98 ```
  99 #### macOS
 100 ```
 101 <dict>
 102   <key>AppUpdateURL</key>
 103   <string>https://yoursite.com</string>
 104 </dict>
 105 ```
 106 #### JSON
 107 ```
 108 {
 109   "policies": {
 110     "AppUpdateURL": "https://yoursite.com"
 111   }
 112 }
 113 ```
 114 ### Authentication
 115
 116 Configure sites that support integrated authentication.
 117
 118 See https://developer.mozilla.org/en-US/docs/Mozilla/Integrated_authentication for more information.
 119
 120 **Compatibility:** Firefox 60, Firefox ESR 60 (AllowNonFQDN added in 62/60.2)\
 121 **CCK2 Equivalent:** N/A\
 122 **Preferences Affected:** `network.negotiate-auth.trusted-uris`, `network.negotiate-auth.delegation-uris`, `network.automatic-ntlm-auth.trusted-uris`, `network.automatic-ntlm-auth.allow-non-fqdn`, `network.negotiate-auth.allow-non-fqdn`
 123
 124 #### Windows
 125 ```
 126 Software\Policies\Mozilla\Firefox\Authentication\SPNEGO\1 = "mydomain.com"
 127 Software\Policies\Mozilla\Firefox\Authentication\SPNEGO\2 = "https://myotherdomain.com"
 128 Software\Policies\Mozilla\Firefox\Authentication\Delegated\1 = "mydomain.com"
 129 Software\Policies\Mozilla\Firefox\Authentication\Delegated\2 = "https://myotherdomain.com"
 130 Software\Policies\Mozilla\Firefox\Authentication\NTLM\1 = "mydomain.com"
 131 Software\Policies\Mozilla\Firefox\Authentication\NTLM\2 = "https://myotherdomain.com"
 132 Software\Policies\Mozilla\Firefox\Authentication\AllowNonFQDN\SPNEGO = 0x1 | 0x0
 133 Software\Policies\Mozilla\Firefox\Authentication\AllowNonFQDN\NTLM = 0x1 | 0x0
 134 ```
 135 #### macOS
 136 ```
 137 <dict>
 138   <key>Authentication</key>
 139   <dict>
 140     <key>SPNEGO</key>
 141     <array>
 142       <string>mydomain.com</string>
 143       <string>https://myotherdomain.com</string>
 144     </array>
 145     <key>Delegated</key>
 146     <array>
 147       <string>mydomain.com</string>
 148       <string>https://myotherdomain.com</string>
 149     </array>
 150     <key>NTLM</key>
 151     <array>
 152       <string>mydomain.com</string>
 153       <string>https://myotherdomain.com</string>
 154     </array>
 155     <key>AllowNonFQDN</key>
 156       <dict>
 157       <key>SPNEGO</key>
 158       <true/> | <false/>
 159       <key>NTLM</key>
 160       <true/> | <false/>
 161     </dict>
 162   </dict>
 163 </dict>
 164 ```
 165 #### JSON
 166 ```
 167 {
 168   "policies": {
 169     "Authentication": {
 170       "SPNEGO": ["mydomain.com", "https://myotherdomain.com"],
 171       "Delegated": ["mydomain.com", "https://myotherdomain.com"],
 172       "NTLM": ["mydomain.com", "https://myotherdomain.com"],
 173       "AllowNonFQDN": {
 174         "SPNEGO": true | false,
 175         "NTLM": true | false
 176       }
 177     }
 178   }
 179 }
 180 ```
 181 ### BlockAboutAddons
 182
 183 Block access to the Add-ons Manager (about:addons).
 184
 185 **Compatibility:** Firefox 60, Firefox ESR 60\
 186 **CCK2 Equivalent:** `disableAddonsManager`\
 187 **Preferences Affected:** N/A
 188
 189 #### Windows
 190 ```
 191 Software\Policies\Mozilla\Firefox\BlockAboutAddons = 0x1 | 0x0
 192 ```
 193 #### macOS
 194 ```
 195 <dict>
 196   <key>BlockAboutAddons</key>
 197   <true/> | <false/>
 198 </dict>
 199 ```
 200 #### JSON
 201 ```
 202 {
 203   "policies": {
 204     "BlockAboutAddons": true | false
 205   }
 206 }
 207 ```
 208 ### BlockAboutConfig
 209
 210 Block access to about:config.
 211
 212 **Compatibility:** Firefox 60, Firefox ESR 60\
 213 **CCK2 Equivalent:** `disableAboutConfig`\
 214 **Preferences Affected:** N/A
 215
 216 #### Windows
 217 ```
 218 Software\Policies\Mozilla\Firefox\BlockAboutConfig = 0x1 | 0x0
 219 ```
 220 #### macOS
 221 ```
 222 <dict>
 223   <key>BlockAboutConfig</key>
 224   <true/> | <false/>
 225 </dict>
 226 ```
 227 #### JSON
 228 ```
 229 {
 230   "policies": {
 231     "BlockAboutConfig": true | false
 232   }
 233 }
 234 ```
 235 ### BlockAboutProfiles
 236
 237 Block access to About Profiles (about:profiles).
 238
 239 **Compatibility:** Firefox 60, Firefox ESR 60\
 240 **CCK2 Equivalent:** `disableAboutProfiles`\
 241 **Preferences Affected:** N/A
 242
 243 #### Windows
 244 ```
 245 Software\Policies\Mozilla\Firefox\BlockAboutProfiles = 0x1 | 0x0
 246 ```
 247 #### macOS
 248 ```
 249 <dict>
 250   <key>BlockAboutProfiles</key>
 251   <true/> | <false/>
 252 </dict>
 253 ```
 254 #### JSON
 255 ```
 256 {
 257   "policies": {
 258     "BlockAboutProfiles": true | false
 259   }
 260 }
 261 ```
 262 ### BlockAboutSupport
 263
 264 Block access to Troubleshooting Information (about:support).
 265
 266 **Compatibility:** Firefox 60, Firefox ESR 60\
 267 **CCK2 Equivalent:** `disableAboutSupport`\
 268 **Preferences Affected:** N/A
 269
 270 #### Windows
 271 ```
 272 Software\Policies\Mozilla\Firefox\BlockAboutSupport = 0x1 | 0x0
 273 ```
 274 #### macOS
 275 ```
 276 <dict>
 277   <key>BlockAboutSupport</key>
 278   <true/> | <false/>
 279 </dict>
 280 ```
 281 #### JSON
 282 ```
 283 {
 284   "policies": {
 285     "BlockAboutSupport": true | false
 286   }
 287 }
 288 ```
 289 ### Bookmarks
 290
 291 Add bookmarks in either the bookmarks toolbar or menu. Only `Title` and `URL` are required. If `Placement` is not specified, the bookmark will be placed on the toolbar. If `Folder` is specified, it is automatically created and bookmarks with the same folder name are grouped together.
 292
 293 **Compatibility:** Firefox 60, Firefox ESR 60\
 294 **CCK2 Equivalent:** `bookmarks.toolbar`,`bookmarks.menu`\
 295 **Preferences Affected:** N/A
 296
 297 #### Windows
 298 ```
 299 Software\Policies\Mozilla\Firefox\Bookmarks\1\Title = "Example"
 300 Software\Policies\Mozilla\Firefox\Bookmarks\1\URL = "https://example.com"
 301 Software\Policies\Mozilla\Firefox\Bookmarks\1\Favicon = "https://example.com/favicon.ico"
 302 Software\Policies\Mozilla\Firefox\Bookmarks\1\Placement = "toolbar" | "menu"
 303 Software\Policies\Mozilla\Firefox\Bookmarks\1\Folder = "FolderName"
 304 ```
 305 #### macOS
 306 ```
 307 <dict>
 308   <key>Bookmarks</key>
 309   <array>
 310     <dict>
 311       <key>Title</key>
 312       <string>Example</string>
 313       <key>URL</key>
 314       <string>https://example.com</string>
 315       <key>Favicon</key>
 316       <string>https://example.com/favicon.ico</string>
 317       <key>Placement</key>
 318       <string>toolbar | menu</string>
 319       <key>Folder</key>
 320       <string>FolderName</string>
 321     </dict>
 322   </array>
 323 </dict>
 324 ```
 325 #### JSON
 326 ```
 327 {
 328   "policies": {
 329     "Bookmarks": [
 330       {
 331         "Title": "Example",
 332         "URL": "https://example.com",
 333         "Favicon": "https://example.com/favicon.ico",
 334         "Placement": "toolbar" | "menu",
 335         "Folder": "FolderName"
 336       }
 337     ]
 338   }
 339 }
 340 ```
 341 ### CaptivePortal
 342 Enable or disable the detection of captive portals.
 343
 344 **Compatibility:** Firefox 67, Firefox ESR 60.7\
 345 **CCK2 Equivalent:** N/A\
 346 **Preferences Affected:** `network.captive-portal-service.enabled`
 347
 348 #### Windows
 349 ```
 350 Software\Policies\Mozilla\Firefox\CaptivePortal = 0x1 | 0x0
 351 ```
 352 #### macOS
 353 ```
 354 <dict>
 355   <key>CaptivePortal</key>
 356   <true/> | <false/>
 357 </dict>
 358 ```
 359 #### JSON
 360 ```
 361 {
 362   "policies": {
 363     "CaptivePortal": true | false
 364   }
 365 }
 366 ```
 367 ### Certificates
 368
 369 ### Certificates | ImportEnterpriseRoots
 370
 371 Trust certificates that have been added to the operating system certificate store by a user or administrator.
 372
 373 See https://support.mozilla.org/kb/setting-certificate-authorities-firefox for more detail.
 374
 375 **Compatibility:** Firefox 60, Firefox ESR 60 (macOS support in Firefox 63, Firefox ESR 68)\
 376 **CCK2 Equivalent:** N/A\
 377 **Preferences Affected:** `security.enterprise_roots.enabled`
 378
 379 #### Windows
 380 ```
 381 Software\Policies\Mozilla\Firefox\Certificates\ImportEnterpriseRoots = 0x1 | 0x0
 382 ```
 383 #### macOS
 384 ```
 385 <dict>
 386   <key>Certificates</key>
 387   <dict>
 388     <key>ImportEnterpriseRoots</key>
 389     <true/> | <false/>
 390   </dict>
 391 </dict>
 392 ```
 393 #### JSON
 394 ```
 395 {
 396   "policies": {
 397     "Certificates": {
 398       "ImportEnterpriseRoots": true | false
 399     }
 400   }
 401 }
 402 ```
 403 ### Certificates | Install
 404
 405 Install certificates into the Firefox certificate store. If only a filename is specified, Firefox searches for the file in the following locations:
 406
 407 - Windows
 408   - %USERPROFILE%\AppData\Local\Mozilla\Certificates
 409   - %USERPROFILE%\AppData\Roaming\Mozilla\Certificates
 410 - macOS
 411   - /Library/Application Support/Mozilla/Certificates
 412   - ~/Library/Application Support/Mozilla/Certificates
 413 - Linux
 414   - /usr/lib/mozilla/certificates
 415   - /usr/lib64/mozilla/certificates
 416   - ~/.mozilla/certificates
 417
 418 Starting with Firefox 65, Firefox 60.5 ESR, a fully qualified path can be used, including UNC paths. You should use the native path style for your operating system. We do not support using %USERPROFILE% or other environment variables on Windows.
 419
 420 If you are specifying the path in the policies.json file on Windows, you need to escape your backslashes (`\\`) which means that for UNC paths, you need to escape both (`\\\\`). If you use group policy, you only need one backslash.
 421
 422 Certificates are installed using the trust string `CT,CT,`.
 423
 424 Binary (DER) and ASCII (PEM) certificates are both supported.
 425
 426 **Compatibility:** Firefox 64, Firefox ESR 64\
 427 **CCK2 Equivalent:** `certs.ca`\
 428 **Preferences Affected:** N/A
 429
 430 #### Windows
 431 ```
 432 Software\Policies\Mozilla\Firefox\Certificates\Install\1 = "cert1.der"
 433 Software\Policies\Mozilla\Firefox\Certificates\Install\2 = "C:\Users\username\cert2.pem"
 434 ```
 435 #### macOS
 436 ```
 437 <dict>
 438   <key>Certificates</key>
 439   <dict>
 440     <key>Install</key>
 441     <array>
 442       <string>cert1.der</string>
 443       <string>/Users/username/cert2.pem</string>
 444     </array>
 445   </dict>
 446 </dict>
 447 ```
 448 #### JSON
 449 ```
 450 {
 451   "policies": {
 452     "Certificates": {
 453       "Install": ["cert1.der", "/home/username/cert2.pem"]
 454     }
 455   }
 456 }
 457 ```
 458 ### Cookies
 459 Configure cookie preferences.
 460
 461 `Allow` is a list of origins (not domains) where cookies are always allowed. You must include http or https.
 462
 463 `Block` is a list of origins (not domains) where cookies are always blocked. You must include http or https.
 464
 465 `Default` determines whether cookies are accepted at all.
 466
 467 `AcceptThirdParty` determines how third-party cookies are handled.
 468
 469 `ExpireAtSessionEnd` determines when cookies expire.
 470
 471 `RejectTracker` only rejects cookies for trackers.
 472
 473 `Locked` prevents the user from changing cookie preferences.
 474
 475 **Compatibility:** Firefox 60, Firefox ESR 60 (RejectTracker was added in Firefox 63)\
 476 **CCK2 Equivalent:** N/A\
 477 **Preferences Affected:** `network.cookie.cookieBehavior`,`network.cookie.lifetimePolicy`
 478
 479 #### Windows
 480 ```
 481 Software\Policies\Mozilla\Firefox\Cookies\Allow\1 = "https://example.com"
 482 Software\Policies\Mozilla\Firefox\Cookies\Block\1 = "https://example.org"
 483 Software\Policies\Mozilla\Firefox\Cookies\Default = 0x1 | 0x0
 484 Software\Policies\Mozilla\Firefox\Cookies\AcceptThirdParty = "always" | "never" |"from-visited"
 485 Software\Policies\Mozilla\Firefox\Cookies\ExpireAtSessionEnd = 0x1 | 0x0
 486 Software\Policies\Mozilla\Firefox\Cookies\RejectTracker = 0x1 | 0x0
 487 Software\Policies\Mozilla\Firefox\Cookies\Locked = 0x1 | 0x0
 488 ```
 489 #### macOS
 490 ```
 491 <dict>
 492   <key>Cookies</key>
 493   <dict>
 494     <key>Allow</key>
 495     <array>
 496       <string>http://example.com</string>
 497     </array>
 498     <key>Block</key>
 499     <array>
 500       <string>http://example.org</string>
 501     </array>
 502     <key>Default</key>
 503     <true/> | <false/>
 504     <key>AcceptThirdParty</key>
 505     <string>always | never | from-visited</string>
 506     <key>ExpireAtSessionEnd</key>
 507     <true/> | <false/>
 508     <key>RejectTracker</key>
 509     <true/> | <false/>
 510     <key>Locked</key>
 511     <true/> | <false/>
 512   </dict>
 513 </dict>
 514 ```
 515 #### JSON
 516 ```
 517 {
 518   "policies": {
 519     "Cookies": {
 520       "Allow": ["http://example.org/"],
 521       "Block": ["http://example.edu/"],
 522       "Default": true | false,
 523       "AcceptThirdParty": "always" | "never" | "from-visited"],
 524       "ExpireAtSessionEnd": true | false,
 525       "RejectTracker": true | false,
 526       "Locked": true | false
 527     }
 528   }
 529 }
 530 ```
 531 ### DisableSetDesktopBackground
 532 Remove the "Set As Desktop Background..." menuitem when right clicking on an image.
 533
 534 **Compatibility:** Firefox 60, Firefox ESR 60\
 535 **CCK2 Equivalent:** `removeSetDesktopBackground`\
 536 **Preferences Affected:** N/A
 537
 538 #### Windows
 539 ```
 540 Software\Policies\Mozilla\Firefox\DisableSetDesktopBackground = 0x1 | 0x0
 541 ```
 542
 543 #### macOS
 544 ```
 545 <dict>
 546   <key>DisableSetDesktopBackground</key>
 547   <true/> | <false/>
 548 </dict>
 549 ```
 550 #### JSON
 551 ```
 552 {
 553   "policies": {
 554     "DisableSetDesktopBackground": true | false
 555   }
 556 }
 557 ```
 558 ### DisableMasterPasswordCreation
 559 Remove the master password functionality.
 560
 561 **Compatibility:** Firefox 60, Firefox ESR 60\
 562 **CCK2 Equivalent:** `noMasterPassword`\
 563 **Preferences Affected:** N/A
 564
 565 #### Windows
 566 ```
 567 Software\Policies\Mozilla\Firefox\DisableMasterPasswordCreation = 0x1 | 0x0
 568 ```
 569
 570 #### macOS
 571 ```
 572 <dict>
 573   <key>DisableMasterPasswordCreation</key>
 574   <true/> | <false/>
 575 </dict>
 576 ```
 577 #### JSON
 578 ```
 579 {
 580   "policies": {
 581     "DisableMasterPasswordCreation": true | false
 582   }
 583 }
 584 ```
 585 ### DisableAppUpdate
 586 Turn off application updates.
 587
 588 **Compatibility:** Firefox 60, Firefox ESR 60\
 589 **CCK2 Equivalent:** `disableFirefoxUpdates`\
 590 **Preferences Affected:** N/A
 591
 592 #### Windows
 593 ```
 594 Software\Policies\Mozilla\Firefox\DisableAppUpdate = 0x1 | 0x0
 595 ```
 596 #### macOS
 597 ```
 598 <dict>
 599   <key>DisableAppUpdate</key>
 600   <true/> | <false/>
 601 </dict>
 602 ```
 603 #### JSON
 604 ```
 605 {
 606   "policies": {
 607     "DisableAppUpdate": true | false
 608   }
 609 }
 610 ```
 611 ### DisableBuiltinPDFViewer
 612 Disable the built in PDF viewer. PDF files are downloaded and sent externally.
 613
 614 **Compatibility:** Firefox 60, Firefox ESR 60\
 615 **CCK2 Equivalent:** `disablePDFjs`\
 616 **Preferences Affected:** `pdfjs.disabled`
 617
 618 #### Windows
 619 ```
 620 Software\Policies\Mozilla\Firefox\DisableBuiltinPDFViewer = 0x1 | 0x0
 621 ```
 622
 623 #### macOS
 624 ```
 625 <dict>
 626   <key>DisableBuiltinPDFViewer</key>
 627   <true/> | <false/>
 628 </dict>
 629 ```
 630 #### JSON
 631 ```
 632 {
 633   "policies": {
 634     "DisableBuiltinPDFViewer": true | false
 635   }
 636 }
 637 ```
 638 ### DisableDeveloperTools
 639 Remove access to all developer tools.
 640
 641 **Compatibility:** Firefox 60, Firefox ESR 60\
 642 **CCK2 Equivalent:** `removeDeveloperTools`\
 643 **Preferences Affected:** `devtools.policy.disabled`
 644
 645 #### Windows
 646 ```
 647 Software\Policies\Mozilla\Firefox\DisableDeveloperTools = 0x1 | 0x0`
 648 ```
 649
 650 #### macOS
 651 ```
 652 <dict>
 653   <key>DisableDeveloperTools</key>
 654   <true/> | <false/>
 655 </dict>
 656 ```
 657 #### JSON
 658 ```
 659 {
 660   "policies": {
 661     "DisableDeveloperTools": true | false
 662   }
 663 }
 664 ```
 665 ### DisableFeedbackCommands
 666 Disable the menus for reporting sites (Submit Feedback, Report Deceptive Site).
 667
 668 **Compatibility:** Firefox 60, Firefox ESR 60\
 669 **CCK2 Equivalent:** N/A\
 670 **Preferences Affected:** N/A
 671
 672 #### Windows
 673 ```
 674 Software\Policies\Mozilla\Firefox\DisableFeedbackCommands = 0x1 | 0x0
 675 ```
 676 #### macOS
 677 ```
 678 <dict>
 679   <key>DisableFeedbackCommands</key>
 680   <true/> | <false/>
 681 </dict>
 682 ```
 683 #### JSON
 684 ```
 685 {
 686   "policies": {
 687     "DisableFeedbackCommands": true | false
 688   }
 689 }
 690 ```
 691 ### DisableFirefoxScreenshots
 692 Remove access to Firefox Screenshots.
 693
 694 **Compatibility:** Firefox 60, Firefox ESR 60\
 695 **CCK2 Equivalent:** N/A\
 696 **Preferences Affected:** `extensions.screenshots.disabled`
 697
 698 #### Windows
 699 ```
 700 Software\Policies\Mozilla\Firefox\DisableFirefoxScreenshots = 0x1 | 0x0
 701 ```
 702 #### macOS
 703 ```
 704 <dict>
 705   <key>DisableFirefoxScreenshots</key>
 706   <true/> | <false/>
 707 </dict>
 708 ```
 709 #### JSON
 710 ```
 711 {
 712   "policies": {
 713     "DisableFirefoxScreenshots": true | false
 714   }
 715 }
 716 ```
 717 ### DisableFirefoxAccounts
 718 Disable Firefox Accounts integration (Sync).
 719
 720 **Compatibility:** Firefox 60, Firefox ESR 60\
 721 **CCK2 Equivalent:** `disableSync`\
 722 **Preferences Affected:** `identity.fxaccounts.enabled`
 723
 724 #### Windows
 725 ```
 726 Software\Policies\Mozilla\Firefox\DisableFirefoxAccounts = 0x1 | 0x0
 727 ```
 728 #### macOS
 729 ```
 730 <dict>
 731   <key>DisableFirefoxAccounts</key>
 732   <true/> | <false/>
 733 </dict>
 734 ```
 735 #### JSON
 736 ```
 737 {
 738   "policies": {
 739     "DisableFirefoxAccounts": true | false
 740   }
 741 }
 742 ```
 743 ### DisableFirefoxStudies
 744 Disable Firefox studies (Shield).
 745
 746 **Compatibility:** Firefox 60, Firefox ESR 60\
 747 **CCK2 Equivalent:** `disableForget`\
 748 **Preferences Affected:** N/A
 749
 750 #### Windows
 751 ```
 752 Software\Policies\Mozilla\Firefox\DisableFirefoxStudies = 0x1 | 0x0
 753 ```
 754 #### macOS
 755 ```
 756 <dict>
 757   <key>DisableFirefoxStudies</key>
 758   <true/> | <false/>
 759 </dict>
 760 ```
 761 #### JSON
 762 ```
 763 {
 764   "policies": {
 765     "DisableFirefoxStudies": true | false
 766   }
 767 }
 768 ```
 769 ### DisableForgetButton
 770 Disable the "Forget" button.
 771
 772 **Compatibility:** Firefox 60, Firefox ESR 60\
 773 **CCK2 Equivalent:** `disableForget`\
 774 **Preferences Affected:** N/A
 775
 776 #### Windows
 777 ```
 778 Software\Policies\Mozilla\Firefox\DisableForgetButton = 0x1 | 0x0
 779 ```
 780 #### macOS
 781 ```
 782 <dict>
 783   <key>DisableForgetButton</key>
 784   <true/> | <false/>
 785 </dict>
 786 ```
 787 #### JSON
 788 ```
 789 {
 790   "policies": {
 791     "DisableForgetButton": true | false
 792   }
 793 }
 794 ```
 795 ### DisableFormHistory
 796 Turn off saving information on web forms and the search bar.
 797
 798 **Compatibility:** Firefox 60, Firefox ESR 60\
 799 **CCK2 Equivalent:** `disableFormFill`\
 800 **Preferences Affected:** ` browser.formfill.enable`
 801
 802 #### Windows
 803 ```
 804 Software\Policies\Mozilla\Firefox\DisableFormHistory = 0x1 | 0x0
 805 ```
 806 #### macOS
 807 ```
 808 <dict>
 809   <key>DisableFormHistory</key>
 810   <true/> | <false/>
 811 </dict>
 812 ```
 813 #### JSON
 814 ```
 815 {
 816   "policies": {
 817     "DisableFormHistory": true | false
 818   }
 819 }
 820 ```
 821 ### DisablePocket
 822 Remove Pocket in the Firefox UI. It does not remove it from the new tab page.
 823
 824 **Compatibility:** Firefox 60, Firefox ESR 60\
 825 **CCK2 Equivalent:** `disablePocket`\
 826 **Preferences Affected:** `extensions.pocket.enabled`
 827
 828 #### Windows
 829 ```
 830 Software\Policies\Mozilla\Firefox\DisablePocket = 0x1 | 0x0
 831 ```
 832 #### macOS
 833 ```
 834 <dict>
 835   <key>DisablePocket</key>
 836   <true/> | <false/>
 837 </dict>
 838 ```
 839 #### JSON
 840 ```
 841 {
 842   "policies": {
 843     "DisablePocket": true | false
 844   }
 845 }
 846 ```
 847 ### DisablePrivateBrowsing
 848 Remove access to private browsing.
 849
 850 **Compatibility:** Firefox 60, Firefox ESR 60\
 851 **CCK2 Equivalent:** `disablePrivateBrowsing`\
 852 **Preferences Affected:** N/A
 853
 854 #### Windows
 855 ```
 856 Software\Policies\Mozilla\Firefox\DisablePrivateBrowsing = 0x1 | 0x0
 857 ```
 858 #### macOS
 859 ```
 860 <dict>
 861   <key>DisablePrivateBrowsing</key>
 862   <true/> | <false/>
 863 </dict>
 864 ```
 865 #### JSON
 866 ```
 867 {
 868   "policies": {
 869     "DisablePrivateBrowsing": true | false
 870   }
 871 }
 872 ```
 873 ### DisableProfileImport
 874 Disables the "Import data from another browser" option in the bookmarks window.
 875
 876 **Compatibility:** Firefox 60, Firefox ESR 60\
 877 **CCK2 Equivalent:** N/A\
 878 **Preferences Affected:** N/A
 879
 880 #### Windows
 881 ```
 882 Software\Policies\Mozilla\Firefox\DisableProfileImport = 0x1 | 0x0
 883 ```
 884 #### macOS
 885 ```
 886 <dict>
 887   <key>DisableProfileImport</key>
 888   <true/> | <false/>
 889 </dict>
 890 ```
 891 #### JSON
 892 ```
 893 {
 894   "policies": {
 895     "DisableProfileImport": true | false
 896   }
 897 }
 898 ```
 899 ### DisableProfileRefresh
 900 Disable the Refresh Firefox button on about:support and support.mozilla.org, as well as the prompt that displays offering to refresh Firefox when you haven't used it in a while.
 901
 902 **Compatibility:** Firefox 60, Firefox ESR 60\
 903 **CCK2 Equivalent:** `disableResetFirefox`\
 904 **Preferences Affected:** `browser.disableResetPrompt`
 905
 906 #### Windows
 907 ```
 908 Software\Policies\Mozilla\Firefox\DisableProfileRefresh = 0x1 | 0x0
 909 ```
 910 #### macOS
 911 ```
 912 <dict>
 913   <key>DisableProfileRefresh</key>
 914   <true/> | <false/>
 915 </dict>
 916 ```
 917 #### JSON
 918 ```
 919 {
 920   "policies": {
 921     "DisableProfileRefresh": true | false
 922   }
 923 }
 924 ```
 925 ### DisableSafeMode
 926 Disable safe mode within the browser.
 927
 928 On Windows, this disables safe mode via the command line as well.
 929
 930 **Compatibility:** Firefox 60, Firefox ESR 60 (Windows, macOS)\
 931 **CCK2 Equivalent:** `disableSafeMode`\
 932 **Preferences Affected:** N/A
 933
 934 #### Windows
 935 ```
 936 Software\Policies\Mozilla\Firefox\DisableSafeMode = 0x1 | 0x0
 937 ```
 938 #### macOS
 939 ```
 940 <dict>
 941   <key>DisableSafeMode</key>
 942   <true/> | <false/>
 943 </dict>
 944 ```
 945 #### JSON
 946 ```
 947 {
 948   "policies": {
 949     "DisableSafeMode": true | false
 950   }
 951 }
 952 ```
 953 ### DisableSecurityBypass
 954 Prevent the user from bypassing security in certain cases.
 955
 956 `InvalidCertificate` prevents adding an exception when an invalid certificate is shown.
 957
 958 `SafeBrowsing` prevents selecting "ignore the risk" and visiting a harmful site anyway.
 959
 960 **Compatibility:** Firefox 60, Firefox ESR 60\
 961 **CCK2 Equivalent:** N/A\
 962 **Preferences Affected:** `security.certerror.hideAddException`,`browser.safebrowsing.allowOverride`
 963
 964 #### Windows
 965 ```
 966 Software\Policies\Mozilla\Firefox\DisableSecurityBypass\InvalidCertificate = 0x1 | 0x0
 967 Software\Policies\Mozilla\Firefox\DisableSecurityBypass\SafeBrowsing = 0x1 | 0x0
 968 ```
 969 #### macOS
 970 ```
 971 <dict>
 972   <key>DisableSecurityBypass</key>
 973   <dict>
 974     <key>InvalidCertificate</key>
 975     <true/> | <false/>
 976     <key><SafeBrowsing/key>
 977     <true/> | <false/>
 978   </dict>
 979 </dict>
 980 ```
 981 #### JSON
 982 ```
 983 {
 984   "policies": {
 985     "DisableSecurityBypass": {
 986       "InvalidCertificate": true false,
 987       "SafeBrowsing": true false
 988     }
 989   }
 990 }
 991 ```
 992 ### DisableSystemAddonUpdate
 993 Prevent system add-ons from being installed or update.
 994
 995 **Compatibility:** Firefox 60, Firefox ESR 60\
 996 **CCK2 Equivalent:** N/A\
 997 **Preferences Affected:** N/A
 998
 999 #### Windows
1000 ```Software\Policies\Mozilla\Firefox\DisableSystemAddonUpdate = 0x1 | 0x0
1001 ```
1002 #### macOS
1003 ```
1004 <dict>
1005   <key>DisableSystemAddonUpdate</key>
1006   <true/> | <false/>
1007 </dict>
1008 ```
1009 #### JSON
1010 ```
1011 {
1012   "policies": {
1013     "DisableSystemAddonUpdate": true | false
1014   }
1015 }
1016 ```
1017 ### DisableTelemetry
1018 Prevent the upload of telemetry data.
1019
1020 Mozilla recommends that you do not disable telemetry. Information collected through telemetry helps us build a better product for businesses like yours.
1021
1022 **Compatibility:** Firefox 60, Firefox ESR 60\
1023 **CCK2 Equivalent:** `disableTelemetry`\
1024 **Preferences Affected:** `datareporting.healthreport.uploadEnabled,datareporting.policy.dataSubmissionEnabled`
1025
1026 #### Windows
1027 ```
1028 Software\Policies\Mozilla\Firefox\DisableTelemetry = 0x1 | 0x0
1029 ```
1030 #### macOS
1031 ```
1032 <dict>
1033   <key>DisableTelemetry</key>
1034   <true/> | <false/>
1035 </dict>
1036 ```
1037 #### JSON
1038 ```
1039 {
1040   "policies": {
1041     "DisableTelemetry": true | false
1042   }
1043 }
1044 ```
1045 ### DisplayBookmarksToolbar
1046 Set the initial state of the bookmarks toolbar. A user can still hide it and it will stay hidden.
1047
1048 **Compatibility:** Firefox 60, Firefox ESR 60\
1049 **CCK2 Equivalent:** `displayBookmarksToolbar`\
1050 **Preferences Affected:** N/A
1051
1052 #### Windows
1053 ```
1054 Software\Policies\Mozilla\Firefox\DisplayBookmarksToolbar = 0x1 | 0x0
1055 ```
1056 #### macOS
1057 ```
1058 <dict>
1059   <key>DisplayBookmarksToolbar</key>
1060   <true/> | <false/>
1061 </dict>
1062 ```
1063 #### JSON
1064 ```
1065 {
1066   "policies": {
1067     "DisplayBookmarksToolbar": true | false
1068   }
1069 }
1070 ```
1071 ### DisplayMenuBar
1072 Set the initial state of the menubar. A user can still hide it and it will stay hidden.
1073
1074 **Compatibility:** Firefox 60, Firefox ESR 60 (Windows, some Linux)\
1075 **CCK2 Equivalent:** `displayMenuBar`\
1076 **Preferences Affected:** N/A
1077
1078 #### Windows
1079 ```
1080 Software\Policies\Mozilla\Firefox\DisplayMenuBar = 0x1 | 0x0
1081 ```
1082 #### macOS
1083 ```
1084 <dict>
1085   <key>DisplayMenuBar</key>
1086   <true/> | <false/>
1087 </dict>
1088 ```
1089 #### JSON
1090 ```
1091 {
1092   "policies": {
1093     "DisplayMenuBar": true | false
1094   }
1095 }
1096 ```
1097 ### DNSOverHTTPS
1098 Configure DNS over HTTPS.
1099
1100 `Enabled` determines whether DNS over HTTPS is enabled
1101
1102 `ProviderURL` is a URL to another provider.
1103
1104 `Locked` prevents the user from changing DNS over HTTPS preferences.
1105
1106 **Compatibility:** Firefox 63, Firefox ESR 68\
1107 **CCK2 Equivalent:** N/A\
1108 **Preferences Affected:** `network.trr.mode`,`network.trr.uri`
1109
1110 #### Windows
1111 ```
1112 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\Enabled = 0x1 | 0x0
1113 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\ProviderURL = "URL_TO_ALTERNATE_PROVIDER"
1114 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\Locked = 0x1 | 0x0
1115 ```
1116 #### macOS
1117 ```
1118 <dict>
1119   <key>DNSOverHTTPS</key>
1120   <dict>
1121     <key>Enabled</key>
1122     <true/> | <false/>
1123     <key>ProviderURL</key>
1124     <string>URL_TO_ALTERNATE_PROVIDER</string>
1125     <key>Locked</key>
1126     <true/> | <false/>
1127   </dict>
1128 </dict>
1129 ```
1130 #### JSON
1131 ```
1132 {
1133   "policies": {
1134     "DNSOverHTTPS": {
1135       "Enabled":  true | false,
1136       "ProviderURL": "URL_TO_ALTERNATE_PROVIDER",
1137       "Locked": true | false
1138     }
1139   }
1140 }
1141 ```
1142 ### DontCheckDefaultBrowser
1143 Don't check if Firefox is the default browser at startup.
1144
1145 **Compatibility:** Firefox 60, Firefox ESR 60\
1146 **CCK2 Equivalent:** `dontCheckDefaultBrowser`\
1147 **Preferences Affected:** `browser.shell.checkDefaultBrowser`
1148
1149 #### Windows
1150 ```
1151 Software\Policies\Mozilla\Firefox\DontCheckDefaultBrowser = 0x1 | 0x0
1152 ```
1153 #### macOS
1154 ```
1155 <dict>
1156   <key>DontCheckDefaultBrowser</key>
1157   <true/> | <false/>
1158 </dict>
1159 ```
1160 #### JSON
1161 ```
1162 {
1163   "policies": {
1164     "DontCheckDefaultBrowser": true | false
1165   }
1166 }
1167 ```
1168 ### DefaultDownloadDirectory
1169 Set the default download directory.
1170
1171 You can use ${home} for the native home directory.
1172
1173 **Compatibility:** Firefox 68, Firefox ESR 68\
1174 **CCK2 Equivalent:** N/A\
1175 **Preferences Affected:** `browser.download.dir`,`browser.download.folderList`
1176
1177 #### Windows
1178 ```
1179 Software\Policies\Mozilla\Firefox\DefaultDownloadDirectory = "${home}\Downloads"
1180 ```
1181 #### macOS
1182 ```
1183 <dict>
1184   <key>DefaultDownloadDirectory</key>
1185   <string>${home}/Downloads</string>
1186 </dict>
1187 ```
1188 #### JSON (macOS and Linux)
1189 ```
1190 {
1191   "policies": {
1192     "DefaultDownloadDirectory": "${home}/Downloads"
1193 }
1194 ```
1195 #### JSON (Windows)
1196 ```
1197 {
1198   "policies": {
1199     "DefaultDownloadDirectory": "${home}\\Downloads"
1200 }
1201 ```
1202 ### DownloadDirectory
1203 Set and lock the download directory.
1204
1205 You can use ${home} for the native home directory.
1206
1207 **Compatibility:** Firefox 68, Firefox ESR 68\
1208 **CCK2 Equivalent:** N/A\
1209 **Preferences Affected:** `browser.download.dir`,`browser.download.folderList`,`browser.download.useDownloadDir`
1210
1211 #### Windows
1212 ```
1213 Software\Policies\Mozilla\Firefox\DownloadDirectory = "${home}\Downloads"
1214 ```
1215 #### macOS
1216 ```
1217 <dict>
1218   <key>DownloadDirectory</key>
1219   <string>${home}/Downloads</string>
1220 </dict>
1221 ```
1222 #### JSON (macOS and Linux)
1223 ```
1224 {
1225   "policies": {
1226     "DownloadDirectory": "${home}/Downloads"
1227 }
1228 ```
1229 #### JSON (Windows)
1230 ```
1231 {
1232   "policies": {
1233     "DownloadDirectory": "${home}\\Downloads"
1234 }
1235 ```
1236 ### EnableTrackingProtection
1237 Configure tracking protection.
1238
1239 If this policy is not configured, tracking protection is not enabled by default in the browser, but it is enabled by default in private browsing and the user can change it.
1240
1241 If `Value` is set to false, tracking protection is disabled and locked in both the regular browser and private browsing.
1242
1243 If `Value` is set to true, tracking protection is enabled by default in both the regular browser and private browsing and the `Locked` value determines whether or not a user can change it.
1244
1245 If `Cryptomining` is set to true, cryptomining scripts on websites are blocked.
1246
1247 If `Fingerprinting` is set to true, fingerprinting scripts on websites are blocked.
1248
1249 **Compatibility:** Firefox 60, Firefox ESR 60 (Cryptomining and Fingerprinting added in 70/68.2)\
1250 **CCK2 Equivalent:** `dontCheckDefaultBrowser`\
1251 **Preferences Affected:** `privacy.trackingprotection.enabled`,`privacy.trackingprotection.pbmode.enabled`,`privacy.trackingprotection.cryptomining.enabled`,`privacy.trackingprotection.fingerprinting.enabled`
1252
1253 #### Windows
1254 ```
1255 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Value = 0x1 | 0x0
1256 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Locked = 0x1 | 0x0
1257 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Cryptomining = 0x1 | 0x0
1258 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Fingerprinting = 0x1 | 0x0
1259 ```
1260 #### macOS
1261 ```
1262 <dict>
1263   <key>EnableTrackingProtection</key>
1264   <dict>
1265     <key>Value</key>
1266     <true/> | <false/>
1267     <key><Locked/key>
1268     <true/> | <false/>
1269     <key><Cryptomining/key>
1270     <true/> | <false/>
1271     <key><Fingerprinting/key>
1272     <true/> | <false/>
1273   </dict>
1274 </dict>
1275 ```
1276 #### JSON
1277 ```
1278 {
1279   "policies": {
1280     "EnableTrackingProtection": {
1281       "Value": [true, false],
1282       "Locked": [true, false],
1283       "Cryptomining": [true, false],
1284       "Fingerprinting": [true, false]
1285     }
1286 }
1287 ```
1288 ### EnterprisePoliciesEnabled
1289 Enable policy support on macOS.
1290
1291 **Compatibility:** Firefox 63, Firefox ESR 60.3 (macOS only)\
1292 **CCK2 Equivalent:** N/A\
1293 **Preferences Affected:** N/A
1294
1295 #### macOS
1296 ```
1297 <dict>
1298   <key>EnterprisePoliciesEnabled</key>
1299   <true/>
1300 </dict>
1301 ```
1302 ### Extensions
1303 Control the installation, uninstallation and locking of extensions.
1304
1305 `Install` is a list of URLs or native paths for extensions to be installed.
1306
1307 `Uninstall` is a list of extension IDs that should be uninstalled if found.
1308
1309 `Locked` is a list of extension IDs that the user cannot disable or uninstall.
1310
1311 **Compatibility:** Firefox 60, Firefox ESR 60\
1312 **CCK2 Equivalent:** `addons`\
1313 **Preferences Affected:** N/A
1314
1315 #### Windows
1316 ```
1317 Software\Policies\Mozilla\Firefox\Extensions\Install\1 = "https://addons.mozilla.org/firefox/downloads/somefile.xpi"
1318 Software\Policies\Mozilla\Firefox\Extensions\Install\2 = "//path/to/xpi"
1319 Software\Policies\Mozilla\Firefox\Extensions\Uninstall\1 = "bad_addon_id@mozilla.org"
1320 Software\Policies\Mozilla\Firefox\Extensions\Locked\1 = "addon_id@mozilla.org"
1321 ```
1322 #### macOS
1323 ```
1324 <dict>
1325   <key>Extensions</key>
1326   <dict>
1327     <key>Install</key>
1328     <array>
1329       <string>https://addons.mozilla.org/firefox/downloads/somefile.xpi</string>
1330       <string>//path/to/xpi</string>
1331     </array>
1332     <key>Uninstall</key>
1333     <array>
1334       <string>bad_addon_id@mozilla.org</string>
1335     </array>
1336     <key>Locked</key>
1337     <array>
1338       <string>addon_id@mozilla.org</string>
1339     </array>
1340   </dict>
1341 </dict>
1342 ```
1343 #### JSON
1344
1345
1346 ```
1347 {
1348   "policies": {
1349     "Extensions": {
1350       "Install": ["https://addons.mozilla.org/firefox/downloads/somefile.xpi", "//path/to/xpi"],
1351       "Uninstall": ["bad_addon_id@mozilla.org"],
1352       "Locked":  ["addon_id@mozilla.org"]
1353     }
1354   }
1355 }
1356 ```
1357 ### ExtensionSettings
1358 Manage all aspects of extensions. This policy is based heavily on the [Chrome policy](https://dev.chromium.org/administrators/policy-list-3/extension-settings-full) of the same name.
1359
1360 This policy maps an extension ID to its configuration. With an extension ID, the configuration will be applied to the specified extension only. A default configuration can be set for the special ID "*", which will apply to all extensions that don't have a custom configuration set in this policy.
1361
1362 To obtain an extension ID, install the extension and go to about:support. You will see the ID in the Extensions section.
1363
1364 The configuration for each extension is another dictionary that can contain the fields documented below.
1365
1366 | Name | Description |
1367 | --- | --- |
1368 | `installation_mode` | Maps to a string indicating the installation mode for the extension. The valid strings are `allowed`,`blocked`,`force_installed`, and `normal_installed`.
1369 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`allowed` | Allows the extension to be installed by the user. This is the default behavior.
1370 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`blocked`| Blocks installation of the extension and removes it from the device if already installed.
1371 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`force_installed`| The extension is automatically installed and can't be removed by the user. This option is not valid for the default configuration and requires an install_url.
1372 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`normal_installed`| The extension is automatically installed but can be disabled by the user. This option is not valid for the default configuration and requires an install_url.
1373 | `install_url`| Maps to a URL indicating where Firefox can download a force_installed or normal_installed extension. If installing from the addons.mozilla.org, use the following URL (substituting SHORT_NAME from the URL on AMO), https://addons.mozilla.org/firefox/downloads/latest/SHORT_NAME/latest.xpi. If installing frmo the local file system, use a file:/// URL.
1374 | `install_sources` | Each item in this list is an extension-style match pattern. Users will be able to easily install items from any URL that matches an item in this list. Both the location of the *.xpi file and the page where the download is started from (i.e.  the referrer) must be allowed by these patterns. This setting can be used only for the default configuration.
1375 | `allowed_types` | This setting whitelists the allowed types of extension/apps that can be installed in Firefox. The value is a list of strings, each of which should be one of the following: "extension", "theme", "dictionary", "langpack" This setting can be used only for the default configuration.
1376 | `blocked_install_message` | This maps to a string specifying the error message to display to users if they're blocked from installing an extension. This setting allows you to append text to the generic error message displayed when the extension is blocked. This could be be used to direct users to your help desk, explain why a particular extension is blocked, or something else.
1377
1378 **Compatibility:** Firefox 69, Firefox ESR 68.1\
1379 **CCK2 Equivalent:** N/A\
1380 **Preferences Affected:** N/A
1381
1382 #### Windows
1383 ```
1384 Software\Policies\Mozilla\Firefox\ExtensionSettings (REG_MULTI_SZ) = '{"*": {"installation_mode": "blocked"}}'
1385 ```
1386 #### macOS
1387 ```
1388 <dict>
1389   <key>ExtensionSettings</key>
1390   <dict>
1391     <key>*</key>
1392     <dict>
1393       <key>blocked_install_message</key>
1394       <string>Custom error message.</string>
1395       <key>install_sources</key>
1396       <array>
1397         <string>https://addons.mozilla.org/</string>
1398       </array>
1399       <key>installation_mode</key>
1400       <string>blocked</string>
1401     </dict>
1402     <key>uBlock0@raymondhill.net</key>
1403     <dict>
1404       <key>installation_mode</key>
1405        <string>force_installed</string>
1406       <key>install_url</key>
1407       <string>https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi</string>
1408     </dict>
1409   </dict>
1410 </dict>
1411 ```
1412 #### JSON
1413 ```
1414 {
1415   "policies": {
1416     "ExtensionSettings": {
1417       "*": {
1418         "blocked_install_message": "Custom error message.",
1419         "install_sources": ["https://addons.mozilla.org/"],
1420         "installation_mode": "blocked"
1421       },
1422       "uBlock0@raymondhill.net": {
1423         "installation_mode": "force_installed",
1424         "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
1425       }
1426     }
1427   }
1428 }
1429 ```
1430 ### ExtensionUpdate
1431 Control extension updates.
1432
1433 **Compatibility:** Firefox 67, Firefox ESR 60.7\
1434 **CCK2 Equivalent:** N/A\
1435 **Preferences Affected:** `extensions.update.enabled`
1436
1437 #### Windows
1438 ```
1439 Software\Policies\Mozilla\Firefox\ExtensionUpdate = 0x1 | 0x0
1440 ```
1441 #### macOS
1442 ```
1443 <dict>
1444   <key>ExtensionUpdate</key>
1445   <true/> | <false/>
1446 </dict>
1447 ```
1448 #### JSON
1449 ```
1450 {
1451   "policies": {
1452     "ExtensionUpdate": true | false
1453   }
1454 }
1455 ```
1456 ### FlashPlugin
1457 Configure the default Flash plugin policy as well as origins for which Flash is allowed.
1458
1459 `Allow` is a list of origins where Flash are allowed.
1460
1461 `Block` is a list of origins where Flash is not allowed.
1462
1463 `Default` determines whether or not Flash is allowed by default.
1464
1465 `Locked` prevents the user from changing Flash preferences.
1466
1467 **Compatibility:** Firefox 60, Firefox ESR 60\
1468 **CCK2 Equivalent:** `permissions.plugin`\
1469 **Preferences Affected:** `plugin.state.flash`
1470
1471 #### Windows
1472 ```
1473 Software\Policies\Mozilla\Firefox\FlashPlugin\Allow\1 = "https://example.org"
1474 Software\Policies\Mozilla\Firefox\FlashPlugin\Block\1 = "https://example.edu"
1475 Software\Policies\Mozilla\Firefox\FlashPlugin\Default = 0x1 | 0x0
1476 Software\Policies\Mozilla\Firefox\FlashPlugin\Locked = 0x1 | 0x0
1477 ```
1478 #### macOS
1479 ```
1480 <dict>
1481   <key>FlashPlugin</key>
1482   <dict>
1483     <key>Allow</key>
1484     <array>
1485       <string>http://example.org</string>
1486     </array>
1487     <key>Block</key>
1488     <array>
1489       <string>http://example.edu</string>
1490     </array>
1491     <key>Default</key>
1492     <true/> | <false/>
1493     <key>Locked</key>
1494     <true/> | <false/>
1495   </dict>
1496 </dict>
1497 ```
1498 #### JSON
1499 ```
1500 {
1501   "policies": {
1502     "FlashPlugin": {
1503       "Allow": ["http://example.org/"],
1504       "Block": ["http://example.edu/"],
1505       "Default": true | false,
1506       "Locked": true | false
1507     }
1508   }
1509 }
1510 ```
1511 ### FirefoxHome
1512 Customize the Firefox Home page.
1513
1514 **Compatibility:** Firefox 68, Firefox ESR 68\
1515 **CCK2 Equivalent:** N/A\
1516 **Preferences Affected:** `browser.newtabpage.activity-stream.showSearch`,`browser.newtabpage.activity-stream.feeds.topsites`,`browser.newtabpage.activity-stream.feeds.section.highlights`,`browser.newtabpage.activity-stream.feeds.section.topstories`,`browser.newtabpage.activity-stream.feeds.snippets`
1517
1518 #### Windows
1519 ```
1520 Software\Policies\Mozilla\Firefox\FirefoxHome\Search = 0x1 | 0x0
1521 Software\Policies\Mozilla\Firefox\FirefoxHome\TopSites = 0x1 | 0x0
1522 Software\Policies\Mozilla\Firefox\FirefoxHome\Highlights = 0x1 | 0x0
1523 Software\Policies\Mozilla\Firefox\FirefoxHome\Pocket = 0x1 | 0x0
1524 Software\Policies\Mozilla\Firefox\FirefoxHome\Snippets = 0x1 | 0x0
1525 Software\Policies\Mozilla\Firefox\FirefoxHome\Locked = 0x1 | 0x0
1526 ```
1527 #### macOS
1528 ```
1529 <dict>
1530   <key>FirefoxHome</key>
1531   <dict>
1532     <key>Search</key>
1533     <true/> | <false/>
1534     <key>TopSites</key>
1535     <true/> | <false/>
1536     <key>Highlights</key>
1537     <true/> | <false/>
1538     <key>Pocket</key>
1539     <true/> | <false/>
1540     <key>Snippets</key>
1541     <true/> | <false/>
1542     <key>Locked</key>
1543     <true/> | <false/>
1544   </dict>
1545 </dict>
1546 ```
1547 #### JSON
1548 ```
1549 {
1550   "policies": {
1551     "FirefoxHome": {
1552       "Search": true | false,
1553       "TopSites": true | false,
1554       "Highlights": true | false,
1555       "Pocket": true | false,
1556       "Snippets": true | false,
1557       "Locked": true | false
1558     }
1559   }
1560 }
1561 ```
1562 ### HardwareAcceleration
1563 Control hardware acceleration.
1564
1565 **Compatibility:** Firefox 60, Firefox ESR 60\
1566 **CCK2 Equivalent:** N/A\
1567 **Preferences Affected:** `layers.acceleration.disabled`
1568
1569 #### Windows
1570 ```
1571 Software\Policies\Mozilla\Firefox\HardwareAcceleration = 0x1 | 0x0
1572 ```
1573 #### macOS
1574 ```
1575 <dict>
1576   <key>HardwareAcceleration</key>
1577   <true/> | <false/>
1578 </dict>
1579 ```
1580 #### JSON
1581 ```
1582 {
1583   "policies": {
1584     "HardwareAcceleration": true | false
1585   }
1586 }
1587 ```
1588 ### Homepage
1589 Configure the default homepage and how Firefox starts.
1590
1591 `URL` is the default homepage.
1592
1593 `Locked` prevents the user from changing homepage preferences.
1594
1595 `Additional` allows for more than one homepage.
1596
1597 `StartPage` is how Firefox starts. The choices are no homepage, the default homepage or the previous session.
1598
1599 **Compatibility:** Firefox 60, Firefox ESR 60 (StartPage was added in Firefox 60, Firefox ESR 60.4)\
1600 **CCK2 Equivalent:** `homePage`,`lockHomePage`\
1601 **Preferences Affected:** `browser.startup.homepage`,`browser.startup.page`
1602
1603 #### Windows
1604 ```
1605 Software\Policies\Mozilla\Firefox\Homepage\URL = "https://example.com"
1606 Software\Policies\Mozilla\Firefox\Homepage\Locked = 0x1 | 0x0
1607 Software\Policies\Mozilla\Firefox\Homepage\Additional\1 = "https://example.org"
1608 Software\Policies\Mozilla\Firefox\Homepage\Additional\2 = "https://example.edu"
1609 Software\Policies\Mozilla\Firefox\Homepage\StartPage = "none" | "homepage" |  "previous-session"
1610 ```
1611 #### macOS
1612 ```
1613 <dict>
1614   <key>Homepage</key>
1615   <dict>
1616     <key>URL</key>
1617     <string>http://example.com</string>
1618     <key>Locked</key>
1619     <true/> | <false/>
1620     <key>Additional</key>
1621     <array>
1622       <string>http://example.org</string>
1623       <string>http://example.edu</string>
1624     </array>
1625     <key>StartPage</key>
1626     <string>always | never | from-visited</string>
1627   </dict>
1628 </dict>
1629 ```
1630 #### JSON
1631 ```
1632 {
1633   "policies": {
1634     "Homepage": {
1635       "URL": "http://example.com/",
1636       "Locked": true | false,
1637       "Additional": ["http://example.org/",
1638                      "http://example.edu/"],
1639       "StartPage": "none" | "homepage" |  "previous-session"
1640     }
1641   }
1642 }
1643 ```
1644 ### InstallAddonsPermission
1645 Configure the default extension install policy as well as origins for extension installs are allowed. This policy does not override turning off all extension installs.
1646
1647 `Allow` is a list of origins where extension installs are allowed.
1648
1649 `Default` determines whether or not extension installs are allowed by default.
1650
1651 **Compatibility:** Firefox 60, Firefox ESR 60\
1652 **CCK2 Equivalent:** `permissions.install`\
1653 **Preferences Affected:** `xpinstall.enabled`
1654
1655 #### Windows
1656 ```
1657 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Allow\1 = "https://example.org"
1658 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Allow\2 = "https://example.edu"
1659 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Default = 0x1 | 0x0
1660 ```
1661 #### macOS
1662 ```
1663 <dict>
1664   <key>InstallAddonsPermission</key>
1665   <dict>
1666     <key>Allow</key>
1667     <array>
1668       <string>http://example.org</string>
1669       <string>http://example.edu</string>
1670     </array>
1671     <key>Default</key>
1672     <true/> | <false/>
1673   </dict>
1674 </dict>
1675 ```
1676 #### JSON
1677 ```
1678 {
1679   "policies": {
1680     "InstallAddonsPermission": {
1681       "Allow": ["http://example.org/",
1682                 "http://example.edu/"],
1683       "Default": true | false
1684     }
1685   }
1686 }
1687 ```
1688 ### LegacyProfiles
1689 Disable the feature enforcing a separate profile for each installation.
1690
1691 If this policy set to true, Firefox will not try to create different profiles for installations of Firefox in different directories. This is the equivalent of the MOZ_LEGACY_PROFILES environment variable.
1692
1693 If this policy set to false, Firefox will create a new profile for each unique installation of Firefox.
1694
1695 This policy only work on Windows via GPO (not policies.json).
1696
1697 **Compatibility:** Firefox 70, Firefox ESR 68.2 (Windows only, GPO only)\
1698 **CCK2 Equivalent:** N/A\
1699 **Preferences Affected:** N/A
1700
1701 #### Windows
1702 ```
1703 Software\Policies\Mozilla\Firefox\LegacyProfiles = = 0x1 | 0x0
1704 ```
1705 ### LocalFileLinks
1706 Enable linking to local files by origin.
1707
1708 **Compatibility:** Firefox 68, Firefox ESR 68\
1709 **CCK2 Equivalent:** N/A\
1710 **Preferences Affected:** `capability.policy.localfilelinks.*`
1711
1712 #### Windows
1713 ```
1714 Software\Policies\Mozilla\Firefox\LocalFileLinks\1 = "https://example.org"
1715 Software\Policies\Mozilla\Firefox\LocalFileLinks\2 = "https://example.edu"
1716 ```
1717 #### macOS
1718 ```
1719 <dict>
1720   <key>LocalFileLinks</key>
1721   <array>
1722     <string>http://example.org</string>
1723     <string>http://example.edu</string>
1724   </array>
1725 </dict>
1726 ```
1727 #### JSON
1728 ```
1729 {
1730   "policies": {
1731     "LocalFileLinks": ["http://example.org/",
1732                        "http://example.edu/"]
1733   }
1734 }
1735 ```
1736 ### NoDefaultBookmarks
1737 Disable the creation of default bookmarks.
1738
1739 This policy is only effective if the user profile has not been created yet.
1740
1741 **Compatibility:** Firefox 60, Firefox ESR 60\
1742 **CCK2 Equivalent:** `removeDefaultBookmarks`\
1743 **Preferences Affected:** N/A
1744
1745 #### Windows
1746 ```
1747 Software\Policies\Mozilla\Firefox\NoDefaultBookmarks = 0x1 | 0x0
1748 ```
1749 #### macOS
1750 ```
1751 <dict>
1752   <key>NoDefaultBookmarks</key>
1753   <true/> | <false/>
1754 </dict>
1755 ```
1756 #### JSON
1757 ```
1758 {
1759   "policies": {
1760     "NoDefaultBookmarks": true | false
1761   }
1762 }
1763 ```
1764 ### NetworkPrediction
1765 Enable or disable network prediction (DNS prefetching).
1766
1767 **Compatibility:** Firefox 67, Firefox ESR 60.7\
1768 **CCK2 Equivalent:** N/A\
1769 **Preferences Affected:** `network.dns.disablePrefetch`,`network.dns.disablePrefetchFromHTTPS`
1770
1771 #### Windows
1772 ```
1773 Software\Policies\Mozilla\Firefox\NetworkPrediction = 0x1 | 0x0
1774 ```
1775 #### macOS
1776 ```
1777 <dict>
1778   <key>NetworkPrediction</key>
1779   <true/> | <false/>
1780 </dict>
1781 ```
1782 #### JSON
1783 ```
1784 {
1785   "policies": {
1786     "NetworkPrediction": true | false
1787 }
1788 ```
1789 ### NewTabPage
1790 Enable or disable the New Tab page.
1791
1792 **Compatibility:** Firefox 68, Firefox ESR 68\
1793 **CCK2 Equivalent:** N/A\
1794 **Preferences Affected:** `browser.newtabpage.enabled`
1795
1796 #### Windows
1797 ```
1798 Software\Policies\Mozilla\Firefox\NewTabPage = 0x1 | 0x0
1799 ```
1800 #### macOS
1801 ```
1802 <dict>
1803   <key>NewTabPage</key>
1804   <true/> | <false/>
1805 </dict>
1806 ```
1807 #### JSON
1808 ```
1809 {
1810   "policies": {
1811     "NewTabPage": true | false
1812 }
1813 ```
1814 ### OfferToSaveLogins
1815 Control whether or not Firefox offers to save passwords.
1816
1817 **Compatibility:** Firefox 60, Firefox ESR 60\
1818 **CCK2 Equivalent:** `dontRememberPasswords`\
1819 **Preferences Affected:** `signon.rememberSignons`
1820
1821 #### Windows
1822 ```
1823 Software\Policies\Mozilla\Firefox\OfferToSaveLogins = 0x1 | 0x0
1824 ```
1825 #### macOS
1826 ```
1827 <dict>
1828   <key>OfferToSaveLogins</key>
1829   <true/> | <false/>
1830 </dict>
1831 ```
1832 #### JSON
1833 ```
1834 {
1835   "policies": {
1836     "OfferToSaveLogins": true | false
1837   }
1838 }
1839 ```
1840 ### OfferToSaveLoginsDefault
1841 Sets the default value of signon.rememberSignons without locking it.
1842
1843 **Compatibility:** Firefox 70, Firefox ESR 60.2\
1844 **CCK2 Equivalent:** `dontRememberPasswords`\
1845 **Preferences Affected:** `signon.rememberSignons`
1846
1847 #### Windows
1848 ```
1849 Software\Policies\Mozilla\Firefox\OfferToSaveLoginsDefault = 0x1 | 0x0
1850 ```
1851 #### macOS
1852 ```
1853 <dict>
1854   <key>OfferToSaveLoginsDefault</key>
1855   <true/> | <false/>
1856 </dict>
1857 ```
1858 #### JSON
1859 ```
1860 {
1861   "policies": {
1862     "OfferToSaveLoginsDefault": true | false
1863   }
1864 }
1865 ```
1866 ### OverrideFirstRunPage
1867 Override the first run page. If the value is blank, no first run page is displayed.
1868
1869 **Compatibility:** Firefox 60, Firefox ESR 60\
1870 **CCK2 Equivalent:** `welcomePage`,`noWelcomePage`\
1871 **Preferences Affected:** `startup.homepage_welcome_url`
1872
1873 #### Windows
1874 ```
1875 Software\Policies\Mozilla\Firefox\OverrideFirstRunPage = "http://example.org"
1876 ```
1877 #### macOS
1878 ```
1879 <dict>
1880   <key>OverrideFirstRunPage</key>
1881   <string>http://example.org</string>
1882 </dict>
1883 ```
1884 #### JSON
1885 ```
1886 {
1887   "policies": {
1888     "OverrideFirstRunPage": "http://example.org"
1889 }
1890 ```
1891 ### OverridePostUpdatePage
1892 Override the upgrade page. If the value is blank, no upgrade page is displayed.
1893
1894 **Compatibility:** Firefox 60, Firefox ESR 60\
1895 **CCK2 Equivalent:** `upgradePage`,`noUpgradePage`\
1896 **Preferences Affected:** `startup.homepage_override_url`
1897
1898 #### Windows
1899 ```
1900 Software\Policies\Mozilla\Firefox\OverridePostUpdatePage = "http://example.org"
1901 ```
1902 #### macOS
1903 ```
1904 <dict>
1905   <key>OverridePostUpdatePage</key>
1906   <string>http://example.org</string>
1907 </dict>
1908 ```
1909 #### JSON
1910 ```
1911 {
1912   "policies": {
1913     "OverridePostUpdatePage": "http://example.org"
1914 }
1915 ```
1916 ### PasswordManagerEnabled
1917 Remove access to the password manager via preferences and blocks about:logins on Firefox 70.
1918
1919 **Compatibility:** Firefox 70, Firefox ESR 60.2\
1920 **CCK2 Equivalent:** N/A\
1921 **Preferences Affected:** `prefs.privacy.disable_button.view_passwords`
1922
1923 #### Windows
1924 ```
1925 Software\Policies\Mozilla\Firefox\PasswordManagerEnabled = 0x1 | 0x0
1926 ```
1927 #### macOS
1928 ```
1929 <dict>
1930   <key>PasswordManagerEnabled</key>
1931   <true/> | <false/>
1932 </dict>
1933 ```
1934 #### JSON
1935 ```
1936 {
1937   "policies": {
1938     "PasswordManagerEnabled": true | false
1939   }
1940 }
1941 ```
1942 ### Permissions
1943 Set permissions associated with camera, microphone, location, and notifications
1944
1945 `Allow` is a list of origins where the feature is allowed.
1946
1947 `Block` is a list of origins where the feature is not allowed.
1948
1949 `BlockNewRequests` determines whether or not new requests can be made for the feature.
1950
1951 `Locked` prevents the user from changing preferences for the feature.
1952
1953 **Compatibility:** Firefox 62, Firefox ESR 60.2\
1954 **CCK2 Equivalent:** N/A\
1955 **Preferences Affected:** `permissions.default.camera`,`permissions.default.microphone`,`permissions.default.geo`,`permissions.default.desktop-notification`
1956
1957 #### Windows
1958 ```
1959 Software\Policies\Mozilla\Firefox\Permissions\Camera\Allow\1 = "https://example.org"
1960 Software\Policies\Mozilla\Firefox\Permissions\Camera\Block\1 = "https://example.edu"
1961 Software\Policies\Mozilla\Firefox\Permissions\Camera\BlockNewRequests = 0x1 | 0x0
1962 Software\Policies\Mozilla\Firefox\Permissions\Camera\Locked = 0x1 | 0x0
1963 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Allow\1 = "https://example.org"
1964 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Block\1 = "https://example.edu"
1965 Software\Policies\Mozilla\Firefox\Permissions\Microphone\BlockNewRequests = 0x1 | 0x0
1966 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Locked = 0x1 | 0x0
1967 Software\Policies\Mozilla\Firefox\Permissions\Location\Allow\1 = "https://example.org"
1968 Software\Policies\Mozilla\Firefox\Permissions\Location\Block\1 = "https://example.edu"
1969 Software\Policies\Mozilla\Firefox\Permissions\Location\BlockNewRequests = 0x1 | 0x0
1970 Software\Policies\Mozilla\Firefox\Permissions\Location\Locked = 0x1 | 0x0
1971 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Allow\1 = "https://example.org"
1972 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Block\1 = "https://example.edu"
1973 Software\Policies\Mozilla\Firefox\Permissions\Notifications\BlockNewRequests = 0x1 | 0x0
1974 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Locked = 0x1 | 0x0
1975 ```
1976 #### macOS
1977 ```
1978 <dict>
1979   <key>Permissions</key>
1980   <dict>
1981     <key>Camera</key>
1982     <dict>
1983       <key>Allow</key>
1984       <array>
1985         <string>https://example.org</string>
1986       </array>
1987       <key>Block</key>
1988       <array>
1989         <string>https://example.edu</string>
1990       </array>
1991       <key>BlockNewRequests</key>
1992       <true/>
1993       <key>Locked</key>
1994       <true/>
1995     </dict>
1996     <key>Microphone</key>
1997     <dict>
1998       <key>Allow</key>
1999       <array>
2000         <string>https://example.org</string>
2001       </array>
2002       <key>Block</key>
2003       <array>
2004         <string>https://example.edu</string>
2005       </array>
2006       <key>BlockNewRequests</key>
2007       <true/>
2008       <key>Locked</key>
2009       <true/>
2010     </dict>
2011     <key>Location</key>
2012     <dict>
2013       <key>Allow</key>
2014       <array>
2015         <string>https://example.org</string>
2016       </array>
2017       <key>Block</key>
2018       <array>
2019         <string>https://example.edu</string>
2020       </array>
2021       <key>BlockNewRequests</key>
2022       <true/>
2023       <key>Locked</key>
2024       <true/>
2025     </dict>
2026     <key>Notifications</key>
2027     <dict>
2028       <key>Allow</key>
2029       <array>
2030         <string>https://example.org</string>
2031       </array>
2032       <key>Block</key>
2033       <array>
2034         <string>https://example.edu</string>
2035       </array>
2036       <key>BlockNewRequests</key>
2037       <true/>
2038       <key>Locked</key>
2039       <true/>
2040     </dict>
2041   </dict>
2042 </dict>
2043 ```
2044 #### JSON
2045 ```
2046 {
2047   "policies": {
2048     "Permissions": {
2049       "Camera": {
2050         "Allow": ["https://example.org"],
2051         "Block": ["https://example.edu"],
2052         "BlockNewRequests": true | false,
2053         "Locked": true | false
2054       },
2055       "Microphone": {
2056         "Allow": ["https://example.org"],
2057         "Block": ["https://example.edu"],
2058         "BlockNewRequests": true | false,
2059         "Locked": true | false
2060       },
2061       "Location": {
2062         "Allow": ["https://example.org"],
2063         "Block": ["https://example.edu"],
2064         "BlockNewRequests": true | false,
2065         "Locked": true | false
2066       },
2067       "Notifications": {
2068         "Allow": ["https://example.org"],
2069         "Block": ["https://example.edu"],
2070         "BlockNewRequests": true | false,
2071         "Locked": true | false
2072       }
2073     }
2074   }
2075 }
2076 ```
2077 ### PopupBlocking
2078 Configure the default pop-up window policy as well as origins for which pop-up windows are allowed.
2079
2080 `Allow` is a list of origins where popup-windows are allowed.
2081
2082 `Default` determines whether or not pop-up windows are allowed by default.
2083
2084 `Locked` prevents the user from changing pop-up preferences.
2085
2086 **Compatibility:** Firefox 60, Firefox ESR 60\
2087 **CCK2 Equivalent:** `permissions.popup`\
2088 **Preferences Affected:** `dom.disable_open_during_load`
2089
2090 #### Windows
2091 ```
2092 Software\Policies\Mozilla\Firefox\PopupBlocking\Allow\1 = "https://example.org"
2093 Software\Policies\Mozilla\Firefox\PopupBlocking\Allow\2 = "https://example.edu"
2094 Software\Policies\Mozilla\Firefox\PopupBlocking\Default = 0x1 | 0x0
2095 Software\Policies\Mozilla\Firefox\PopupBlocking\Locked = 0x1 | 0x0
2096 ```
2097 #### macOS
2098 ```
2099 <dict>
2100   <key>PopupBlocking</key>
2101   <dict>
2102     <key>Allow</key>
2103     <array>
2104       <string>http://example.org</string>
2105       <string>http://example.edu</string>
2106     </array>
2107     <key>Default</key>
2108     <true/> | <false/>
2109     <key>Locked</key>
2110     <true/> | <false/>
2111   </dict>
2112 </dict>
2113 ```
2114 #### JSON
2115 ```
2116 {
2117   "policies": {
2118     "PopupBlocking": {
2119       "Allow": ["http://example.org/",
2120                 "http://example.edu/"],
2121       "Default": true | false,
2122       "Locked": true | false
2123     }
2124   }
2125 }
2126 ```
2127 ### Preferences
2128 Set and lock certain preferences.
2129
2130 **Compatibility:** See below\
2131 **CCK2 Equivalent:** `preferences`\
2132 **Preferences Affected:** See below
2133
2134 | Preference | Type | Compatibility | Default
2135 | --- | --- | --- | ---
2136 | accessibility.force_disabled | integer | Firefox 70, Firefox ESR 6.2 | 0
2137 | &nbsp;&nbsp;&nbsp;&nbsp;If set to 1, platform accessibility is disabled.
2138 | app.update.auto | boolean | Firefox 68, Firefox ESR 68 | true
2139 | &nbsp;&nbsp;&nbsp;&nbsp;If false, Firefox doesn't automatically install update.
2140 | browser.bookmarks.autoExportHTML | boolean | Firefox 70, Firefox ESR 6.2 | false
2141 | &nbsp;&nbsp;&nbsp;&nbsp;If true, bookmarks are exported on shutdown.
2142 | browser.bookmarks.file | string | Firefox 70, Firefox ESR 6.2 | N/A
2143 | &nbsp;&nbsp;&nbsp;&nbsp;
2144 | browser.bookmarks.restore_default_bookmarks | string | Firefox 70, Firefox ESR 6.2 | N/A
2145 | &nbsp;&nbsp;&nbsp;&nbsp;If true, bookmarks are restored from the profile at startup.
2146 | browser.cache.disk.enable | boolean | Firefox 68, Firefox ESR 68 | true
2147 | &nbsp;&nbsp;&nbsp;&nbsp;If false, don't store cache on the hard drive.
2148 | browser.cache.disk.parent_directory | string | Firefox 68, Firefox ESR 68 | Profile temporary directory
2149 | &nbsp;&nbsp;&nbsp;&nbsp;If set, changes the location of the disk cache.
2150 | browser.fixup.dns_first_for_single_words | boolean | Firefox 68, Firefox ESR 68 | false
2151 | &nbsp;&nbsp;&nbsp;&nbsp;If true, single words are sent to DNS, not directly to search.
2152 | browser.places.importBookmarksHTML | string | Firefox 70, Firefox ESR 6.2
2153 | &nbsp;&nbsp;&nbsp;&nbsp;
2154 | browser.safebrowsing.phishing.enabled | string | Firefox 70, Firefox ESR 6.2 | true
2155 | &nbsp;&nbsp;&nbsp;&nbsp;If false, phishing protection is not enabled (Not recommended)
2156 | browser.safebrowsing.malware.enabled | string | Firefox 70, Firefox ESR 6.2 | true
2157 | &nbsp;&nbsp;&nbsp;&nbsp;IF false, malware protection is not enabled (Not recommended)
2158 | browser.search.update | boolean | Firefox 68, Firefox ESR 68 | true
2159 | &nbsp;&nbsp;&nbsp;&nbsp;If false, updates for search engines are not checked.
2160 | browser.slowStartup.notificationDisabled | string | Firefox 70, Firefox ESR 6.2 | false
2161 | &nbsp;&nbsp;&nbsp;&nbsp;If true, a notification isn't shown if startup is slow.
2162 | browser.tabs.warnOnClose | boolean | Firefox 68, Firefox ESR 68 | true
2163 | &nbsp;&nbsp;&nbsp;&nbsp;If false, there is no warning when the browser is closed.
2164 | browser.taskbar.previews.enable | string | Firefox 70, Firefox ESR 6.2 (Windows only) | false
2165 | &nbsp;&nbsp;&nbsp;&nbsp;If true, tab previews are shown in the Windows taskbar.
2166 | browser.urlbar.suggest.bookmark | boolean | Firefox 68, Firefox ESR 68 | true
2167 | &nbsp;&nbsp;&nbsp;&nbsp;If false, bookmarks aren't suggested when typing in the URL bar.
2168 | browser.urlbar.suggest.history | boolean | Firefox 68, Firefox ESR 68 | true
2169 | &nbsp;&nbsp;&nbsp;&nbsp;If false, history isn't suggested when typing in the URL bar.
2170 | browser.urlbar.suggest.openpage | boolean | Firefox 68, Firefox ESR 68 | true
2171 | &nbsp;&nbsp;&nbsp;&nbsp;If false, open tabs aren't suggested when typing in the URL bar.
2172 | datareporting.policy.dataSubmissionPolicyBypassNotification | boolean | Firefox 68, Firefox ESR 68 | false
2173 | &nbsp;&nbsp;&nbsp;&nbsp;If true, don't show the privacy policy tab on first run.
2174 | dom.allow_scripts_to_close_windows | string | Firefox 70, Firefox ESR 6.2 | false
2175 | &nbsp;&nbsp;&nbsp;&nbsp;If false, web page can close windows.
2176 | dom.disable_window_flip | boolean | Firefox 68, Firefox ESR 68 | true
2177 | &nbsp;&nbsp;&nbsp;&nbsp;If false, web pages can focus and activate windows.
2178 | dom.disable_window_move_resize | boolean | Firefox 68, Firefox ESR 68 | false
2179 | &nbsp;&nbsp;&nbsp;&nbsp;If true, web pages can't move or resize windows.
2180 | dom.event.contextmenu.enabled | boolean | Firefox 68, Firefox ESR 68 | true
2181 | &nbsp;&nbsp;&nbsp;&nbsp;If false, web pages can't override context menus.
2182 | dom.keyboardevent.keypress.hack.dispatch_non_printable_keys.addl | string | Firefox 68, Firefox ESR 68 | N/A
2183 | &nbsp;&nbsp;&nbsp;&nbsp;See https://support.mozilla.org/en-US/kb/dom-events-changes-introduced-firefox-66
2184 | dom.keyboardevent.keypress.hack.use_legacy_keycode_and_charcode.addl | string | Firefox 68, Firefox ESR 68 | N/A
2185 | &nbsp;&nbsp;&nbsp;&nbsp;See https://support.mozilla.org/en-US/kb/dom-events-changes-introduced-firefox-66
2186 | extensions.blocklist.enabled | string | Firefox 70, Firefox ESR 6.2 | true
2187 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the extensions blocklist is not used (Not recommended)
2188 | extensions.getAddons.showPane | boolean | Firefox 68, Firefox ESR 68 | N/A
2189 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the Recommendations tab is not displayed in the Add-ons Manager.
2190 | geo.enabled | string | Firefox 70, Firefox ESR 6.2 | true
2191 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the geolocation API is disabled. | Language dependent
2192 | intl.accept_languages | string | Firefox 70, Firefox ESR 6.2
2193 | &nbsp;&nbsp;&nbsp;&nbsp;If set, preferred language for web pages.
2194 | media.eme.enabled | string | Firefox 70, Firefox ESR 6.2 | true
2195 | &nbsp;&nbsp;&nbsp;&nbsp;If false, Encrypted Media Extensions are not enabled.
2196 | media.gmp-gmpopenh264.enabled | boolean | Firefox 68, Firefox ESR 68 | true
2197 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the OpenH264  plugin is not downloaded.
2198 | media.gmp-widevinecdm.enabled | boolean | Firefox 68, Firefox ESR 68 | true
2199 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the Widevine plugin is not downloaded.
2200 | network.dns.disableIPv6 | boolean | Firefox 68, Firefox ESR 68 | false
2201 | &nbsp;&nbsp;&nbsp;&nbsp;If true, IPv6 DNS lokoups are disabled.
2202 | network.IDN_show_punycode | boolean | Firefox 68, Firefox ESR 68 | false
2203 | &nbsp;&nbsp;&nbsp;&nbsp;If true, display the punycode version of internationalized domain names.
2204 | places.history.enabled | boolean | Firefox 68, Firefox ESR 68 | true
2205 | &nbsp;&nbsp;&nbsp;&nbsp;If false, history is not enabled.
2206 | print.save_print_settings | string | Firefox 70, Firefox ESR 6.2 | true
2207 | &nbsp;&nbsp;&nbsp;&nbsp;If false, print settings are not saved between jobs.
2208 | security.default_personal_cert | string | Firefox 68, Firefox ESR 68 | Ask Every Time
2209 | &nbsp;&nbsp;&nbsp;&nbsp;If set to Select Automatically, Firefox automatically chooses the default personal certificate.
2210 | security.mixed_content.block_active_content | string | Firefox 70, Firefox ESR 6.2 | true
2211 | &nbsp;&nbsp;&nbsp;&nbsp;If false, mixed active content (HTTP and HTTPS) is not blocked.
2212 | security.ssl.errorReporting.enabled | boolean | Firefox 68, Firefox ESR 68 | true
2213 | &nbsp;&nbsp;&nbsp;&nbsp;If false, SSL errors cannot be sent to Mozilla.
2214 | ui.key.menuAccessKeyFocuses | boolean | Firefox 68, Firefox ESR 68 | true
2215 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the Alt key doesn't show the menubar on Windows.
2216 #### Windows
2217 ```
2218 Software\Policies\Mozilla\Firefox\Preferences\boolean_preference_name = 0x1 | 0x0
2219 Software\Policies\Mozilla\Firefox\Preferences\string_preference_name = "string_value"
2220 ```
2221 #### macOS
2222 ```
2223 <dict>
2224   <key>Preferences</key>
2225   <dict>
2226     <key>boolean_preference_name</key>
2227     <true/> | <false/>
2228     <key>string_preference_name</key>
2229     <string>string_value</string>
2230   </dict>
2231 </dict>
2232 ```
2233 #### JSON
2234 ```
2235 {
2236   "policies": {
2237     "Preferences": {
2238       "boolean_preference_name": true | false,
2239       "string_preference_name": "string_value"
2240     }
2241   }
2242 }
2243 ```
2244 ### PromptForDownloadLocation
2245 Ask where to save each file before downloading.
2246
2247 **Compatibility:** Firefox 68, Firefox ESR 68\
2248 **CCK2 Equivalent:** N/A
2249 **Preferences Affected:** `browser.download.useDownloadDir`
2250
2251 #### Windows
2252 ```
2253 Software\Policies\Mozilla\Firefox\PromptForDownloadLocation = 0x1 | 0x0
2254 ```
2255 #### macOS
2256 ```
2257 <dict>
2258   <key>PromptForDownloadLocation</key>
2259   <true/> | <false/>
2260 </dict>
2261 ```
2262 #### JSON
2263 ```
2264 {
2265   "policies": {
2266     "PromptForDownloadLocation": true | false
2267   }
2268 }
2269 ```
2270 ### Proxy
2271 Configure proxy settings. These settings correspond to the connection settings in Firefox preferences.
2272 To specify ports, append them to the hostnames with a colon (:).
2273
2274 `Mode` is the proxy method being used.
2275
2276 `Locked` is whether or not proxy settings can be changed.
2277
2278 `HTTPProxy` is the HTTP proxy server.
2279
2280 `UseHTTPProxyForAllProtocols` is whether or not the HTTP proxy should be used for all other proxies.
2281
2282 `SSLProxy` is the SSL proxy server.
2283
2284 `FTPProxy` is the FTP proxy server.
2285
2286 `SOCKSProxy` is the SOCKS proxy server
2287
2288 `SOCKSVersion` is the SOCKS version (4 or 5)
2289
2290 `Passthrough` is list of hostnames or IP addresses that will not be proxied. Use `<local>` to bypass proxying for all hostnames which do not contain periods.
2291
2292 `AutoConfigURL` is a  URL for proxy configuration (only used if Mode is autoConfig).
2293
2294 `AutoLogin` means do not prompt for authentication if password is saved.
2295
2296 `UseProxyForDNS` to use proxy DNS when using SOCKS v5.
2297
2298 **Compatibility:** Firefox 60, Firefox ESR 60\
2299 **CCK2 Equivalent:** `networkProxy*`\
2300 **Preferences Affected:** `network.proxy.type`,`network.proxy.autoconfig_url`,`network.proxy.socks_remote_dns`,`signon.autologin.proxy`,`network.proxy.socks_version`,`network.proxy.no_proxies_on`,`network.proxy.share_proxy_settings`,`network.proxy.http`,`network.proxy.http_port`,`network.proxy.ftp`,`network.proxy.ftp_port`,`network.proxy.ssl`,`network.proxy.ssl_port`,`network.proxy.socks`,`network.proxy.socks_port`
2301
2302 #### Windows
2303 ```
2304 Software\Policies\Mozilla\Firefox\Proxy\Mode = "none", "system", "manual", "autoDetect", "autoConfig"
2305 Software\Policies\Mozilla\Firefox\Proxy\Locked = 0x1 | 0x0
2306 Software\Policies\Mozilla\Firefox\=Proxy\HTTPProxy = https://httpproxy.example.com
2307 Software\Policies\Mozilla\Firefox\Proxy\UseHTTPProxyForAllProtocols = 0x1 | 0x0
2308 Software\Policies\Mozilla\Firefox\Proxy\SSLProxy = https://sslproxy.example.com
2309 Software\Policies\Mozilla\Firefox\Proxy\FTPProxy = https://ftpproxy.example.com
2310 Software\Policies\Mozilla\Firefox\Proxy\SOCKSProxy = https://socksproxy.example.com
2311 Software\Policies\Mozilla\Firefox\Proxy\SOCKSVersion = 0x4 | 0x5
2312 Software\Policies\Mozilla\Firefox\Proxy\Passthrough = <local>
2313 Software\Policies\Mozilla\Firefox\Proxy\AutoConfigURL = URL_TO_AUTOCONFIG
2314 Software\Policies\Mozilla\Firefox\Proxy\AutoLogin = 0x1 | 0x0
2315 Software\Policies\Mozilla\Firefox\Proxy\UseProxyForDNS = 0x1 | 0x0
2316 ```
2317 #### macOS
2318 ```
2319 <dict>
2320   <key>Proxy</key>
2321   <dict>
2322     <key>Mode</key>
2323     <string>none | system | manual | autoDetect| autoConfig</string>
2324     <key>Locked</key>
2325     <true> | </false>
2326     <key>HTTPProxy</key>
2327     <string>https://httpproxy.example.com</string>
2328     <key>UseHTTPProxyForAllProtocols</key>
2329     <true> | </false>
2330     <key>SSLProxy</key>
2331     <string>https://sslproxy.example.com</string>
2332     <key>FTPProxy</key>
2333     <string>https://ftpproxy.example.com</string>
2334     <key>SOCKSProxy</key>
2335     <string>https://socksproxy.example.com</string>
2336     <key>SOCKSVersion</key>
2337     <string>4 | 5</string>
2338     <key>Passthrough</key>
2339     <string>&lt;local>&gt;</string>
2340     <key>AutoConfigURL</key>
2341     <string>URL_TO_AUTOCONFIG</string>
2342     <key>AutoLogin</key>
2343     <true> | </false>
2344     <key>UseProxyForDNS</key>
2345     <true> | </false>
2346   </dict>
2347 </dict>
2348 ```
2349 #### JSON
2350 ```
2351 {
2352   "policies": {
2353     "Proxy": {
2354       "Mode": "none", "system", "manual", "autoDetect", "autoConfig",
2355       "Locked": [true, false],
2356       "HTTPProxy": "hostname",
2357       "UseHTTPProxyForAllProtocols": [true, false],
2358       "SSLProxy": "hostname",
2359       "FTPProxy": "hostname",
2360       "SOCKSProxy": "hostname",
2361       "SOCKSVersion": 4 | 5
2362       "Passthrough": "<local>",
2363       "AutoConfigURL": "URL_TO_AUTOCONFIG",
2364       "AutoLogin":  [true, false],
2365       "UseProxyForDNS": [true, false]
2366     }
2367   }
2368 }
2369 ```
2370 ### RequestedLocales
2371 Set the the list of requested locales for the application in order of preference. It will cause the corresponding language pack to become active.
2372
2373 Note: For Firefox 68, this can now be a string so that you can specify an empty value.
2374
2375 **Compatibility:** Firefox 64, Firefox ESR 60.4, Updated in Firefox 68, Firefox ESR 68\
2376 **CCK2 Equivalent:** N/A\
2377 **Preferences Affected:** N/A
2378 #### Windows
2379 ```
2380 Software\Policies\Mozilla\Firefox\RequestedLocales\1 = "de"
2381 Software\Policies\Mozilla\Firefox\RequestedLocales\2 = "en-US"
2382
2383 or
2384
2385 Software\Policies\Mozilla\Firefox\RequestedLocales = "de,en-US"
2386 ```
2387 #### macOS
2388 ```
2389 <dict>
2390   <key>RequestedLocales</key>
2391   <array>
2392     <string>de</string>
2393     <string>en-US</string>
2394   </array>
2395 </dict>
2396
2397 or
2398
2399 <dict>
2400   <key>RequestedLocales</key>
2401   <string>de,en-US</string>
2402 </dict>
2403
2404 ```
2405 #### JSON
2406 ```
2407 {
2408   "policies": {
2409     "RequestedLocales": ["de", "en-US"]
2410   }
2411 }
2412
2413 or
2414
2415 {
2416   "policies": {
2417     "RequestedLocales": "de,en-US"
2418   }
2419 }
2420 ```
2421 ### SanitizeOnShutdown (Selective)
2422 Clear data on shutdown. Choose from Cache, Cookies, Download History, Form & Search History, Browsing History, Active Logins, Site Preferences and Offline Website Data.
2423
2424 **Compatibility:** Firefox 68, Firefox ESR 68\
2425 **CCK2 Equivalent:** N/A\
2426 **Preferences Affected:** `privacy.sanitize.sanitizeOnShutdown`,`privacy.clearOnShutdown.cache`,`privacy.clearOnShutdown.cookies`,`privacy.clearOnShutdown.downloads`,`privacy.clearOnShutdown.formdata`,`privacy.clearOnShutdown.history`,`privacy.clearOnShutdown.sessions`,`privacy.clearOnShutdown.siteSettings`,`privacy.clearOnShutdown.offlineApps`
2427 #### Windows
2428 ```
2429 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Cache = 0x1 | 0x0
2430 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Cookies = 0x1 | 0x0
2431 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Downloads = 0x1 | 0x0
2432 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\FormData = 0x1 | 0x0
2433 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\History = 0x1 | 0x0
2434 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Sessions = 0x1 | 0x0
2435 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\SiteSettings = 0x1 | 0x0
2436 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\OfflineApps = 0x1 | 0x0
2437 ```
2438 #### macOS
2439 ```
2440 <dict>
2441   <key>SanitizeOnShutdown</key>
2442   <dict>
2443     <key>Cache</key>
2444     <true/> | <false/>
2445     <key>Cookies</key>
2446     <true/> | <false/>
2447     <key>Downloads</key>
2448     <true/> | <false/>
2449     <key>FormData</key>
2450     <true/> | <false/>
2451     <key>History</key>
2452     <true/> | <false/>
2453     <key>Sessions</key>
2454     <true/> | <false/>
2455     <key>SiteSettings</key>
2456     <true/> | <false/>
2457     <key>OfflineApps</key>
2458     <true/> | <false/>
2459   </dict>
2460 </dict>
2461 ```
2462 #### JSON
2463 ```
2464 {
2465   "policies": {
2466     "SanitizeOnShutdown": {
2467       "Cache": true | false,
2468       "Cookies": true | false,
2469       "Downloads": true | false,
2470       "FormData": true | false,
2471       "History": true | false,
2472       "Sessions": true | false,
2473       "SiteSettings": true | false,
2474       "OfflineApps": true | false
2475     }
2476   }
2477 }
2478 ```
2479 ### SanitizeOnShutdown (All)
2480 Clear all data on shutdown, including Browsing & Download History, Cookies, Active Logins, Cache, Form & Search History, Site Preferences and Offline Website Data.
2481
2482 **Compatibility:** Firefox 60, Firefox ESR 60\
2483 **CCK2 Equivalent:** N/A\
2484 **Preferences Affected:** `privacy.sanitize.sanitizeOnShutdown`,`privacy.clearOnShutdown.cache`,`privacy.clearOnShutdown.cookies`,`privacy.clearOnShutdown.downloads`,`privacy.clearOnShutdown.formdata`,`privacy.clearOnShutdown.history`,`privacy.clearOnShutdown.sessions`,`privacy.clearOnShutdown.siteSettings`,`privacy.clearOnShutdown.offlineApps`
2485 #### Windows
2486 ```
2487 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown = 0x1 | 0x0
2488 ```
2489 #### macOS
2490 ```
2491 <dict>
2492   <key>SanitizeOnShutdown</key>
2493   <true/> | <false/>
2494 </dict>
2495 ```
2496 #### JSON
2497 ```
2498 {
2499   "policies": {
2500     "SanitizeOnShutdown": true | false
2501   }
2502 }
2503 ```
2504 ### SearchBar
2505 Set whether or not search bar is displayed.
2506
2507 **Compatibility:** Firefox 60, Firefox ESR 60\
2508 **CCK2 Equivalent:** `showSearchBar`\
2509 **Preferences Affected:** N/A
2510
2511 #### Windows
2512 ```
2513 Software\Policies\Mozilla\Firefox\SearchBar = "unified" | "separate"
2514 ```
2515 #### macOS
2516 ```
2517 <dict>
2518   <key>SearchBar</key>
2519   <string>unified | separate</string>
2520 </dict>
2521 ```
2522
2523 #### JSON
2524 ```
2525 {
2526   "policies": {
2527     "SearchBar": "unified" | "separate"
2528   }
2529 }
2530 ```
2531
2532
2533
2534
2535
2536 ### SearchEngines (This policy is only available on the ESR.)
2537
2538 ### SearchEngines | Default
2539
2540 Set the default search engine. This policy is only available on the ESR.
2541
2542 **Compatibility:** Firefox ESR 60\
2543 **CCK2 Equivalent:** `defaultSearchEngine`\
2544 **Preferences Affected:** N/A
2545
2546 #### Windows
2547 ```
2548 Software\Policies\Mozilla\Firefox\SearchEngines\Default = NAME_OF_SEARCH_ENGINE
2549 ```
2550 #### macOS
2551 ```
2552 <dict>
2553   <key>SearchEngines</key>
2554   <dict>
2555     <key>Default</key>
2556     <string>NAME_OF_SEARCH_ENGINE</string>
2557   </dict>
2558 </dict>
2559 ```
2560 #### JSON
2561 ```
2562 {
2563   "policies": {
2564     "SearchEngines": {
2565       "Default": "NAME_OF_SEARCH_ENGINE"
2566     }
2567   }
2568 }
2569 ```
2570 ### SearchEngines | PreventInstalls
2571
2572 Prevent installing search engines from webpages.
2573
2574 **Compatibility:** Firefox ESR 60\
2575 **CCK2 Equivalent:** `disableSearchEngineInstall`\
2576 **Preferences Affected:** N/A
2577
2578 #### Windows
2579 ```
2580 Software\Policies\Mozilla\Firefox\SearchEngines\PreventInstalls = 0x1 | 0x0
2581 ```
2582 #### macOS
2583 ```
2584 <dict>
2585   <key>SearchEngines</key>
2586   <dict>
2587     <key>PreventInstalls</key>
2588     <true/> | <false/>
2589   </dict>
2590 </dict>
2591 ```
2592 #### JSON
2593 ```
2594 {
2595   "policies": {
2596     "SearchEngines": {
2597       "PreventInstalls": true | false
2598     }
2599   }
2600 }
2601 ```
2602 ### SearchEngines | Remove
2603
2604 Hide built-in search engines. This policy is only available on the ESR.
2605
2606 **Compatibility:** Firefox ESR 60.2\
2607 **CCK2 Equivalent:** `removeDefaultSearchEngines` (removed all built-in engines)\
2608 **Preferences Affected:** N/A
2609
2610 #### Windows
2611 ```
2612 Software\Policies\Mozilla\Firefox\SearchEngines\Remove\1 = NAME_OF_SEARCH_ENGINE
2613 ```
2614 #### macOS
2615 ```
2616 <dict>
2617   <key>SearchEngines</key>
2618   <dict>
2619     <key>Remove</key>
2620     <array>
2621       <string>NAME_OF_SEARCH_ENGINE</string>
2622     </array>
2623   </dict>
2624 </dict>
2625 ```
2626 #### JSON
2627 ```
2628 {
2629   "policies": {
2630     "SearchEngines": {
2631       "Remove": ["NAME_OF_SEARCH_ENGINE"]
2632     }
2633   }
2634 }
2635 ```
2636 ### SearchEngines | Add
2637
2638 Add new search engines (up to five). This policy is only available on the ESR. `Name` and `URLTemplate` are required.
2639
2640 `Name` is the name of the search engine.
2641
2642 `URLTemplate` is the search URL with {searchTerms} to substitute for the search term.
2643
2644 `Method` is either GET or POST
2645
2646 `IconURL` is a URL for the icon to use.
2647
2648 `Alias` is a keyword to use for the engine.
2649
2650 `Description` is a description of the search engine.
2651
2652 `PostData` is the POST data as name value pairs separated by &.
2653
2654 `SuggestURLTemplate` is a search suggestions URL with {searchTerms} to substitute for the search term.
2655
2656 **Compatibility:** Firefox ESR 60 (POST support in Firefox ESR 68)\
2657 **CCK2 Equivalent:** `searchplugins`\
2658 **Preferences Affected:** N/A
2659
2660 #### Windows
2661 ```
2662 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Name = "Example1"
2663 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\URLTemplate = "https://www.example.org/q={searchTerms}"
2664 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Method = "GET" | "POST"
2665 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\IconURL = "https://www.example.org/favicon.ico"
2666 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Alias = "example"
2667 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Description = "Example Description"
2668 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\SuggestURLTemplate = "https://www.example.org/suggestions/q={searchTerms}"
2669 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\PostData = "name=value&q={searchTerms}"
2670 ```
2671
2672 #### macOS
2673 ```
2674 <dict>
2675   <key>SearchEngines</key>
2676   <dict>
2677     <key>Add</key>
2678     <array>
2679       <dict>
2680         <key>Name</key>
2681         <string>Example1</string>
2682         <key>URLTemplate</key>
2683         <string>https://www.example.org/q={searchTerms}</string>
2684         <key>Method</key>
2685         <string>GET | POST </string>
2686         <key>IconURL</key>
2687         <string>https://www.example.org/favicon.ico</string>
2688         <key>Alias</key>
2689         <string>example</string>
2690         <key>Description</key>
2691         <string>Example Description</string>
2692         <key>SuggestURLTemplate</key>
2693         <string>https://www.example.org/suggestions/q={searchTerms}</string>
2694         <key>PostData</key>
2695         <string>name=value&q={searchTerms}</string>
2696       </dict>
2697     <array>
2698   </dict>
2699 </dict>
2700 ```
2701 #### JSON
2702 ```
2703 {
2704   "policies": {
2705     "SearchEngines": {
2706       "Add": [
2707         {
2708           "Name": "Example1",
2709           "URLTemplate": "https://www.example.org/q={searchTerms}",
2710           "Method": "GET" | "POST",
2711           "IconURL": "https://www.example.org/favicon.ico",
2712           "Alias": "example",
2713           "Description": "Description",
2714           "PostData": "name=value&q={searchTerms}",
2715           "SuggestURLTemplate": "https://www.example.org/suggestions/q={searchTerms}"
2716         }
2717       ]
2718     }
2719   }
2720 }
2721 ```
2722 ### SearchSuggestEnabled
2723
2724 Enable search suggestions.
2725
2726 **Compatibility:** Firefox 68, Firefox ESR 68\
2727 **CCK2 Equivalent:** N/A\
2728 **Preferences Affected:** `browser.urlbar.suggest.searches`,`browser.search.suggest.enabled`
2729
2730 #### Windows
2731 ```
2732 Software\Policies\Mozilla\Firefox\SearchSuggestEnabled = 0x1 | 0x0
2733 ```
2734 #### macOS
2735 ```
2736 <dict>
2737   <key>SearchSuggestEnabled</key>
2738   <true/> | <false/>
2739 </dict>
2740 ```
2741 #### JSON
2742 ```
2743 {
2744   "policies": {
2745     "SearchSuggestEnabled": true | false
2746   }
2747 }
2748 ```
2749 ### SecurityDevices
2750
2751 Install PKCS #11 modules.
2752
2753 **Compatibility:** Firefox 64, Firefox ESR 60.4\
2754 **CCK2 Equivalent:** `certs.devices`\
2755 **Preferences Affected:** N/A
2756
2757 #### Windows
2758 ```
2759 Software\Policies\Mozilla\Firefox\SecurityDevices\NAME_OF_DEVICE = PATH_TO_LIBRARY_FOR_DEVICE
2760 ```
2761 #### macOS
2762 ```
2763 <dict>
2764   <key>SecurityDevices</key>
2765   <dict>
2766     <key>NAME_OF_DEVICE</key>
2767     <string>PATH_TO_LIBRARY_FOR_DEVICE</string>
2768   </dict>
2769 </dict>
2770 ```
2771
2772 #### JSON
2773 ```
2774 {
2775   "policies": {
2776     "SecurityDevices": {
2777       "NAME_OF_DEVICE": "PATH_TO_LIBRARY_FOR_DEVICE"
2778     }
2779   }
2780 }
2781 ```
2782 ### SSLVersionMax
2783
2784 Set and lock the maximum version of TLS.
2785
2786 **Compatibility:** Firefox 66, Firefox ESR 60.6\
2787 **CCK2 Equivalent:** N/A\
2788 **Preferences Affected:** `security.tls.version.max`
2789
2790 #### Windows
2791 ```
2792 Software\Policies\Mozilla\Firefox\SSLVersionMax = "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
2793 ```
2794 #### macOS
2795 ```
2796 <dict>
2797   <key>SSLVersionMax</key>
2798   <string>tls1 | tls1.1 | tls1.2 | tls1.3</string>
2799 </dict>
2800 ```
2801
2802 #### JSON
2803 ```
2804 {
2805   "policies": {
2806     "SSLVersionMax": "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
2807   }
2808 }
2809 ```
2810 ### SSLVersionMin
2811
2812 Set and lock the minimum version of TLS.
2813
2814 **Compatibility:** Firefox 66, Firefox ESR 60.6\
2815 **CCK2 Equivalent:** N/A\
2816 **Preferences Affected:** `security.tls.version.min`
2817
2818 #### Windows
2819 ```
2820 Software\Policies\Mozilla\Firefox\SSLVersionMin = "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
2821 ```
2822 #### macOS
2823 ```
2824 <dict>
2825   <key>SSLVersionMin</key>
2826   <string>tls1 | tls1.1 | tls1.2 | tls1.3</string>
2827 </dict>
2828 ```
2829
2830 #### JSON
2831 ```
2832 {
2833   "policies": {
2834     "SSLVersionMin": "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
2835   }
2836 }
2837 ```
2838 ### SupportMenu
2839 Add a menuitem to the help menu for specifying support information.
2840
2841 **Compatibility:** Firefox 68.0.1, Firefox ESR 68.0.1\
2842 **CCK2 Equivalent:** helpMenu\
2843 **Preferences Affected:** N/A
2844
2845 #### Windows
2846 ```
2847 Software\Policies\Mozilla\Firefox\SupportMenu\Title = "Support Menu"
2848 Software\Policies\Mozilla\Firefox\SupportMenu\URL = "http://example.com/support"
2849 Software\Policies\Mozilla\Firefox\SupportMenu\AccessKey = "S"
2850 ```
2851 #### macOS
2852 ```
2853 <dict>
2854   <key>SupportMenu</key>
2855   <dict>
2856     <key>Title</key>
2857     <string>SupportMenu</string>
2858     <key>URL</key>
2859     <string>http://example.com/support</string>
2860     <key>AccessKey</key>
2861     <string>S</string>
2862   </dict>
2863 </dict>
2864 ```
2865 #### JSON
2866 ```
2867 {
2868   "policies": {
2869     "SupportMenu": {
2870       "Title": "Support Menu",
2871       "URL": "http://example.com/support",
2872       "AccessKey": "S"
2873     }
2874   }
2875 }
2876 ```
2877 ### WebsiteFilter
2878 Block websites from being visited. The parameters take an array of Match Patterns, as documented in https://developer.mozilla.org/en-US/Add-ons/WebExtensions/Match_patterns. Only http/https addresses are supported at the moment. The arrays are limited to 1000 entries each.
2879
2880 **Compatibility:** Firefox 60, Firefox ESR 60\
2881 **CCK2 Equivalent:** N/A\
2882 **Preferences Affected:** N/A
2883
2884 #### Windows
2885 ```
2886 Software\Policies\Mozilla\Firefox\WebsiteFilters\Block\1 = "<all_urls>"
2887 Software\Policies\Mozilla\Firefox\WebsiteFilters\Exceptions\1 = "http://example.org/*"
2888 ```
2889 #### macOS
2890 ```
2891 <dict>
2892   <key>WebsiteFilter</key>
2893   <dict>
2894     <key>Block</key>
2895     <array>
2896       <string><all_urls></string>
2897     </array>
2898     <key>Exceptions</key>
2899     <array>
2900       <string>http://example.org/*</string>
2901     </array>
2902   </dict>
2903
2904 </dict>
2905 ```
2906 #### JSON
2907 ```
2908 {
2909   "policies": {
2910     "WebsiteFilter": {
2911       "Block": ["<all_urls>"],
2912       "Exceptions": ["http://example.org/*"]
2913     }
2914   }
2915 }
2916 ```