README.md

   1 **These policies are in active development and so might contain changes that do not work with current versions of Firefox.**
   2
   3 **You should use the [officially released versions](https://github.com/mozilla/policy-templates/releases) if you are deploying changes.**
   4
   5 Policies can be specified using the [Group Policy templates on Windows](https://github.com/mozilla/policy-templates/tree/master/windows), [Intune on Windows](https://support.mozilla.org/kb/managing-firefox-intune), [configuration profiles on macOS](https://github.com/mozilla/policy-templates/tree/master/mac), or by creating a file called `policies.json`. On Windows, create a directory called `distribution` where the EXE is located and place the file there. On Mac, the file goes into `Firefox.app/Contents/Resources/distribution`.  On Linux, the file goes into `firefox/distribution`, where `firefox` is the installation directory for firefox, which varies by distribution or you can specify system-wide policy by placing the file in `/etc/firefox/policies`.
   6
   7 | Policy Name | Description
   8 | --- | --- |
   9 | **[`3rdparty`](#3rdparty)** | Set policies that WebExtensions can access via chrome.storage.managed.
  10 | **[`AppAutoUpdate`](#appautoupdate)** | Enable or disable automatic application update.
  11 | **[`AppUpdateURL`](#appupdateurl)** | Change the URL for application update.
  12 | **[`Authentication`](#authentication)** | Configure sites that support integrated authentication.
  13 | **[`BlockAboutAddons`](#blockaboutaddons)** | Block access to the Add-ons Manager (about:addons).
  14 | **[`BlockAboutConfig`](#blockaboutconfig)** | Block access to about:config.
  15 | **[`BlockAboutProfiles`](#blockaboutprofiles)** | Block access to About Profiles (about:profiles).
  16 | **[`BlockAboutSupport`](#blockaboutsupport)** | Block access to Troubleshooting Information (about:support).
  17 | **[`Bookmarks`](#bookmarks)** | Add bookmarks in either the bookmarks toolbar or menu.
  18 | **[`CaptivePortal`](#captiveportal)** | Enable or disable the detection of captive portals.
  19 | **[`Certificates`](#certificates)** |
  20 | **[`Certificates -> ImportEnterpriseRoots`](#certificates--importenterpriseroots)** | Trust certificates that have been added to the operating system certificate store by a user or administrator.
  21 | **[`Certificates -> Install`](#certificates--install)** | Install certificates into the Firefox certificate store.
  22 | **[`Cookies`](#cookies)** | Configure cookie preferences.
  23 | **[`DisableAppUpdate`](#disableappupdate)** | Turn off application updates.
  24 | **[`DisableBuiltinPDFViewer`](#disablebuiltinpdfviewer)** | Disable the built in PDF viewer.
  25 | **[`DisabledCiphers`](#disabledciphers)** | Disable ciphers.
  26 | **[`DisableDefaultBrowserAgent`](#disabledefaultbrowseragent)** | Prevent the default browser agent from taking any actions (Windows only).
  27 | **[`DisableDeveloperTools`](#disabledevelopertools)** | Remove access to all developer tools.
  28 | **[`DisableFeedbackCommands`](#disablefeedbackcommands)** | Disable the menus for reporting sites.
  29 | **[`DisableFirefoxScreenshots`](#disablefirefoxscreenshots)** | Remove access to Firefox Screenshots.
  30 | **[`DisableFirefoxAccounts`](#disablefirefoxaccounts)** | Disable Firefox Accounts integration (Sync).
  31 | **[`DisableFirefoxStudies`](#disablefirefoxstudies)** | Disable Firefox studies (Shield).
  32 | **[`DisableForgetButton`](#disableforgetbutton)** | Disable the "Forget" button.
  33 | **[`DisableFormHistory`](#disableformhistory)** | Turn off saving information on web forms and the search bar.
  34 | **[`DisableMasterPasswordCreation`](#disablemasterpasswordcreation)** | Remove the master password functionality.
  35 | **[`DisablePasswordReveal`](#disablepasswordreveal)** | Do not allow passwords to be revealed in saved logins.
  36 | **[`DisablePocket`](#disablepocket)** | Remove Pocket in the Firefox UI.
  37 | **[`DisablePrivateBrowsing`](#disableprivatebrowsing)** | Remove access to private browsing.
  38 | **[`DisableProfileImport`](#disableprofileimport)** | Disables the "Import data from another browser" option in the bookmarks window.
  39 | **[`DisableProfileRefresh`](#disableprofilerefresh)** | Disable the Refresh Firefox button on about:support and support.mozilla.org
  40 | **[`DisableSafeMode`](#disablesafemode)** | Disable safe mode within the browser.
  41 | **[`DisableSecurityBypass`](#disablesecuritybypass)** | Prevent the user from bypassing security in certain cases.
  42 | **[`DisableSetDesktopBackground`](#disablesetdesktopbackground)** | Remove the "Set As Desktop Background..." menuitem when right clicking on an image.
  43 | **[`DisableSystemAddonUpdate`](#disablesystemaddonupdate)** | Prevent system add-ons from being installed or update.
  44 | **[`DisableTelemetry`](#disabletelemetry)** | DisableTelemetry
  45 | **[`DisplayBookmarksToolbar`](#displaybookmarkstoolbar)** | Set the initial state of the bookmarks toolbar.
  46 | **[`DisplayMenuBar (Deprecated)`](#displaymenubar-deprecated)** | Set the initial state of the menubar.
  47 | **[`DisplayMenuBar`](#displaymenubar)** | Set the state of the menubar.
  48 | **[`DNSOverHTTPS`](#dnsoverhttps)** | Configure DNS over HTTPS.
  49 | **[`DontCheckDefaultBrowser`](#dontcheckdefaultbrowser)** | Don't check if Firefox is the default browser at startup.
  50 | **[`DefaultDownloadDirectory`](#defaultdownloaddirectory)** | Set the default download directory.
  51 | **[`DownloadDirectory`](#downloaddirectory)** | Set and lock the download directory.
  52 | **[`EnableTrackingProtection`](#enabletrackingprotection)** | Configure tracking protection.
  53 | **[`EncryptedMediaExtensions`](#encryptedmediaextensions)** | Enable or disable Encrypted Media Extensions and optionally lock it.
  54 | **[`EnterprisePoliciesEnabled`](#enterprisepoliciesenabled)** | Enable policy support on macOS.
  55 | **[`Extensions`](#extensions)** | Control the installation, uninstallation and locking of extensions.
  56 | **[`ExtensionSettings`](#extensionsettings)** | Manage all aspects of extensions.
  57 | **[`ExtensionUpdate`](#extensionupdate)** | Control extension updates.
  58 | **[`FlashPlugin`](#flashplugin)** | Configure the default Flash plugin policy as well as origins for which Flash is allowed.
  59 | **[`FirefoxHome`](#firefoxhome)** | Customize the Firefox Home page.
  60 | **[`HardwareAcceleration`](#hardwareacceleration)** | Control hardware acceleration.
  61 | **[`Handlers`](#handlers)** | Configure default application handlers.
  62 | **[`Homepage`](#homepage)** | Configure the default homepage and how Firefox starts.
  63 | **[`InstallAddonsPermission`](#installaddonspermission)** | Configure the default extension install policy as well as origins for extension installs are allowed.
  64 | **[`LegacyProfiles`](#legacyprofiles)** | Disable the feature enforcing a separate profile for each installation.
  65 | **[`LocalFileLinks`](#localfilelinks)** | Enable linking to local files by origin.
  66 | **[`ManagedBookmarks`](#managedbookmarks)** | Configures a list of bookmarks managed by an administrator that cannot be changed by the user.
  67 | **[`PrimaryPassword`](#primarypassword)** | Require or prevent using a primary (formerly master) password.
  68 | **[`NetworkPrediction`](#networkprediction)** | Enable or disable network prediction (DNS prefetching).
  69 | **[`NewTabPage`](#newtabpage)** | Enable or disable the New Tab page.
  70 | **[`NoDefaultBookmarks`](#nodefaultbookmarks)** | Disable the creation of default bookmarks.
  71 | **[`OfferToSaveLogins`](#offertosavelogins)** | Control whether or not Firefox offers to save passwords.
  72 | **[`OfferToSaveLoginsDefault`](#offertosaveloginsdefault)** | Set the default value for whether or not Firefox offers to save passwords.
  73 | **[`OverrideFirstRunPage`](#overridefirstrunpage)** | Override the first run page.
  74 | **[`OverridePostUpdatePage`](#overridepostupdatepage)** | Override the upgrade page.
  75 | **[`PasswordManagerEnabled`](#passwordmanagerenabled)** | Remove (some) access to the password manager.
  76 | **[`PDFjs`](#pdfjs)** | Disable or configure PDF.js, the built-in PDF viewer.
  77 | **[`Permissions`](#permissions)** | Set permissions associated with camera, microphone, location, and notifications.
  78 | **[`PictureInPicture`](#pictureinpicture)** | Enable or disable Picture-in-Picture.
  79 | **[`PopupBlocking`](#popupblocking)** | Configure the default pop-up window policy as well as origins for which pop-up windows are allowed.
  80 | **[`Preferences`](#preferences)** | Set and lock preferences.
  81 | **[`Preferences (Deprecated)`](#preferences-deprecated)** | Set and lock some preferences.
  82 | **[`PromptForDownloadLocation`](#promptfordownloadlocation)** | Ask where to save each file before downloading.
  83 | **[`Proxy`](#proxy)** | Configure proxy settings.
  84 | **[`RequestedLocales`](#requestedlocales)** | Set the the list of requested locales for the application in order of preference.
  85 | **[`SanitizeOnShutdown` (All)](#sanitizeonshutdown-all)** | Clear all data on shutdown.
  86 | **[`SanitizeOnShutdown` (Selective)](#sanitizeonshutdown-selective)** | Clear data on shutdown.
  87 | **[`SearchBar`](#searchbar)** | Set whether or not search bar is displayed.
  88 | **[`SearchEngines`](#searchengines-this-policy-is-only-available-on-the-esr)** |
  89 | **[`SearchEngines -> Default`](#searchengines--default)** | Set the default search engine.
  90 | **[`SearchEngines -> PreventInstalls`](#searchengines--preventinstalls)** | Prevent installing search engines from webpages.
  91 | **[`SearchEngines -> Remove`](#searchengines--remove)** | Hide built-in search engines.
  92 | **[`SearchEngines -> Add`](#searchengines--add)** | Add new search engines.
  93 | **[`SearchSuggestEnabled`](#searchsuggestenabled)** | Enable search suggestions.
  94 | **[`SecurityDevices`](#securitydevices)** | Install PKCS #11 modules.
  95 | **[`SSLVersionMax`](#sslversionmax)** | Set and lock the maximum version of TLS.
  96 | **[`SSLVersionMin`](#sslversionmin)** | Set and lock the minimum version of TLS.
  97 | **[`SupportMenu`](#supportmenu)** | Add a menuitem to the help menu for specifying support information.
  98 | **[`UserMessaging`](#usermessaging)** | Don't show certain messages to the user.
  99 | **[`WebsiteFilter`](#websitefilter)** | Block websites from being visited.
 100
 101 ### 3rdparty
 102
 103 Allow WebExtensions to configure policy. For more information, see [Adding policy support to your extension](https://extensionworkshop.com/documentation/enterprise/adding-policy-support-to-your-extension/).
 104
 105 ### AppAutoUpdate
 106
 107 Enable or disable **automatic** application update.
 108
 109 If set to true, application updates are installed without user approval within Firefox. The operating system might still require approval.
 110
 111 If set to false, application updates are downloaded but the user can choose when to install the update.
 112
 113 If you have disabled updates via DisableAppUpdate, this policy has no effect.
 114
 115 **Compatibility:** Firefox 75, Firefox ESR 68.7\
 116 **CCK2 Equivalent:** N/A\
 117 **Preferences Affected:** app.update.auto
 118
 119 #### Windows (GPO)
 120 ```
 121 Software\Policies\Mozilla\Firefox\AppAutoUpdate = 0x1 | 0x0
 122 ```
 123 #### Windows (Intune)
 124 OMA-URI:
 125 ```
 126 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AppAutoUpdate
 127 ```
 128 Value (string):
 129 ```
 130 <enabled/> or <disabled/>
 131 ```
 132 #### macOS
 133 ```
 134 <dict>
 135   <key>AppAutoUpdate</key>
 136   <true/> | <false/>
 137 </dict>
 138 ```
 139 #### policies.json
 140 ```
 141 {
 142   "policies": {
 143     "AppAutoUpdate": true | false
 144   }
 145 }
 146 ```
 147 ### AppUpdateURL
 148
 149 Change the URL for application update if you are providing Firefox updates from a custom update server.
 150
 151 **Compatibility:** Firefox 62, Firefox ESR 60.2\
 152 **CCK2 Equivalent:** N/A\
 153 **Preferences Affected:** `app.update.url`
 154
 155 #### Windows (GPO)
 156 ```
 157 Software\Policies\Mozilla\Firefox\AppUpdateURL = "https://yoursite.com"
 158 ```
 159 #### Windows (Intune)
 160 OMA-URI:
 161 ```
 162 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AppUpdateURL
 163 ```
 164 Value (string):
 165 ```
 166 <enabled/>
 167 <data id="AppUpdateURL" value="https://yoursite.com"/>
 168 ```
 169 #### macOS
 170 ```
 171 <dict>
 172   <key>AppUpdateURL</key>
 173   <string>https://yoursite.com</string>
 174 </dict>
 175 ```
 176 #### policies.json
 177 ```
 178 {
 179   "policies": {
 180     "AppUpdateURL": "https://yoursite.com"
 181   }
 182 }
 183 ```
 184 ### Authentication
 185
 186 Configure sites that support integrated authentication.
 187
 188 See https://developer.mozilla.org/en-US/docs/Mozilla/Integrated_authentication for more information.
 189
 190 `PrivateBrowsing` enables integrated authentication in private browsing.
 191
 192 **Compatibility:** Firefox 60, Firefox ESR 60 (AllowNonFQDN added in 62/60.2, AllowProxies added in 70/68.2, Locked added in 71/68.3, PrivateBrowsing added in 77/68.9)\
 193 **CCK2 Equivalent:** N/A\
 194 **Preferences Affected:** `network.negotiate-auth.trusted-uris`,`network.negotiate-auth.delegation-uris`,`network.automatic-ntlm-auth.trusted-uris`,`network.automatic-ntlm-auth.allow-non-fqdn`,`network.negotiate-auth.allow-non-fqdn`,`network.automatic-ntlm-auth.allow-proxies`,`network.negotiate-auth.allow-proxies`,`network.auth.private-browsing-sso`
 195
 196 #### Windows (GPO)
 197 ```
 198 Software\Policies\Mozilla\Firefox\Authentication\SPNEGO\1 = "mydomain.com"
 199 Software\Policies\Mozilla\Firefox\Authentication\SPNEGO\2 = "https://myotherdomain.com"
 200 Software\Policies\Mozilla\Firefox\Authentication\Delegated\1 = "mydomain.com"
 201 Software\Policies\Mozilla\Firefox\Authentication\Delegated\2 = "https://myotherdomain.com"
 202 Software\Policies\Mozilla\Firefox\Authentication\NTLM\1 = "mydomain.com"
 203 Software\Policies\Mozilla\Firefox\Authentication\NTLM\2 = "https://myotherdomain.com"
 204 Software\Policies\Mozilla\Firefox\Authentication\AllowNonFQDN\SPNEGO = 0x1 | 0x0
 205 Software\Policies\Mozilla\Firefox\Authentication\AllowNonFQDN\NTLM = 0x1 | 0x0
 206 Software\Policies\Mozilla\Firefox\Authentication\AllowProxies\SPNEGO = 0x1 | 0x0
 207 Software\Policies\Mozilla\Firefox\Authentication\AllowProxies\NTLM = 0x1 | 0x0
 208 Software\Policies\Mozilla\Firefox\Authentication\Locked = 0x1 | 0x0
 209 Software\Policies\Mozilla\Firefox\Authentication\PrivateBrowsing = 0x1 | 0x0
 210 ```
 211 #### Windows (Intune)
 212 OMA-URI:
 213 ```
 214 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_SPNEGO
 215 ```
 216 Value (string):
 217 ```
 218 <enabled/>
 219 <data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
 220 ```
 221 OMA-URI:
 222 ```
 223 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_Delegated
 224 ```
 225 Value (string):
 226 ```
 227 <enabled/>
 228 <data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
 229 ```
 230 OMA-URI:
 231 ```
 232 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_NTLM
 233 ```
 234 Value (string):
 235 ```
 236 <enabled/>
 237 <data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
 238 ```
 239 OMA-URI:
 240 ```
 241 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_AllowNonFQDN
 242 ```
 243 Value (string):
 244 ```
 245 <enabled/>
 246 <data id="Authentication_AllowNonFQDN_NTLM" value="true | false"/>
 247 <data id="Authentication_AllowNonFQDN_SPNEGO" value="true | false"/>
 248 ```
 249 OMA-URI:
 250 ```
 251 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_Locked
 252 ```
 253 Value (string):
 254 ```
 255 <enabled/> or <disabled/>
 256 ```
 257 OMA-URI:
 258 ```
 259 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_PrivateBrowsing
 260 ```
 261 Value (string):
 262 ```
 263 <enabled/> or <disabled/>
 264 ```
 265 #### macOS
 266 ```
 267 <dict>
 268   <key>Authentication</key>
 269   <dict>
 270     <key>SPNEGO</key>
 271     <array>
 272       <string>mydomain.com</string>
 273       <string>https://myotherdomain.com</string>
 274     </array>
 275     <key>Delegated</key>
 276     <array>
 277       <string>mydomain.com</string>
 278       <string>https://myotherdomain.com</string>
 279     </array>
 280     <key>NTLM</key>
 281     <array>
 282       <string>mydomain.com</string>
 283       <string>https://myotherdomain.com</string>
 284     </array>
 285     <key>AllowNonFQDN</key>
 286       <dict>
 287       <key>SPNEGO</key>
 288       <true/> | <false/>
 289       <key>NTLM</key>
 290       <true/> | <false/>
 291     </dict>
 292     <key>AllowProxies</key>
 293       <dict>
 294       <key>SPNEGO</key>
 295       <true/> | <false/>
 296       <key>NTLM</key>
 297       <true/> | <false/>
 298     </dict>
 299     <key>Locked</key>
 300     <true/> | <false/>
 301     <key>PrivateBrowsing</key>
 302     <true/> | <false/>
 303   </dict>
 304 </dict>
 305 ```
 306 #### policies.json
 307 ```
 308 {
 309   "policies": {
 310     "Authentication": {
 311       "SPNEGO": ["mydomain.com", "https://myotherdomain.com"],
 312       "Delegated": ["mydomain.com", "https://myotherdomain.com"],
 313       "NTLM": ["mydomain.com", "https://myotherdomain.com"],
 314       "AllowNonFQDN": {
 315         "SPNEGO": true | false,
 316         "NTLM": true | false
 317       },
 318       "AllowProxies": {
 319         "SPNEGO": true | false,
 320         "NTLM": true | false
 321       },
 322       "Locked": true | false,
 323       "PrivateBrowsing": true | false
 324     }
 325   }
 326 }
 327 ```
 328 ### BlockAboutAddons
 329
 330 Block access to the Add-ons Manager (about:addons).
 331
 332 **Compatibility:** Firefox 60, Firefox ESR 60\
 333 **CCK2 Equivalent:** `disableAddonsManager`\
 334 **Preferences Affected:** N/A
 335
 336 #### Windows (GPO)
 337 ```
 338 Software\Policies\Mozilla\Firefox\BlockAboutAddons = 0x1 | 0x0
 339 ```
 340 #### Windows (Intune)
 341 OMA-URI:
 342 ```
 343 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutAddons
 344 ```
 345 Value (string):
 346 ```
 347 <enabled/> or <disabled/>
 348 ```
 349 #### macOS
 350 ```
 351 <dict>
 352   <key>BlockAboutAddons</key>
 353   <true/> | <false/>
 354 </dict>
 355 ```
 356 #### policies.json
 357 ```
 358 {
 359   "policies": {
 360     "BlockAboutAddons": true | false
 361   }
 362 }
 363 ```
 364 ### BlockAboutConfig
 365
 366 Block access to about:config.
 367
 368 **Compatibility:** Firefox 60, Firefox ESR 60\
 369 **CCK2 Equivalent:** `disableAboutConfig`\
 370 **Preferences Affected:** N/A
 371
 372 #### Windows (GPO)
 373 ```
 374 Software\Policies\Mozilla\Firefox\BlockAboutConfig = 0x1 | 0x0
 375 ```
 376 #### Windows (Intune)
 377 OMA-URI:
 378 ```
 379 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutConfig
 380 ```
 381 Value (string):
 382 ```
 383 <enabled/> or <disabled/>
 384 ```
 385 #### macOS
 386 ```
 387 <dict>
 388   <key>BlockAboutConfig</key>
 389   <true/> | <false/>
 390 </dict>
 391 ```
 392 #### policies.json
 393 ```
 394 {
 395   "policies": {
 396     "BlockAboutConfig": true | false
 397   }
 398 }
 399 ```
 400 ### BlockAboutProfiles
 401
 402 Block access to About Profiles (about:profiles).
 403
 404 **Compatibility:** Firefox 60, Firefox ESR 60\
 405 **CCK2 Equivalent:** `disableAboutProfiles`\
 406 **Preferences Affected:** N/A
 407
 408 #### Windows (GPO)
 409 ```
 410 Software\Policies\Mozilla\Firefox\BlockAboutProfiles = 0x1 | 0x0
 411 ```
 412 #### Windows (Intune)
 413 OMA-URI:
 414 ```
 415 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutProfiles
 416 ```
 417 Value (string):
 418 ```
 419 <enabled/> or <disabled/>
 420 ```
 421 #### macOS
 422 ```
 423 <dict>
 424   <key>BlockAboutProfiles</key>
 425   <true/> | <false/>
 426 </dict>
 427 ```
 428 #### policies.json
 429 ```
 430 {
 431   "policies": {
 432     "BlockAboutProfiles": true | false
 433   }
 434 }
 435 ```
 436 ### BlockAboutSupport
 437
 438 Block access to Troubleshooting Information (about:support).
 439
 440 **Compatibility:** Firefox 60, Firefox ESR 60\
 441 **CCK2 Equivalent:** `disableAboutSupport`\
 442 **Preferences Affected:** N/A
 443
 444 #### Windows (GPO)
 445 ```
 446 Software\Policies\Mozilla\Firefox\BlockAboutSupport = 0x1 | 0x0
 447 ```
 448 #### Windows (Intune)
 449 OMA-URI:
 450 ```
 451 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutSupport
 452 ```
 453 Value (string):
 454 ```
 455 <enabled/> or <disabled/>
 456 ```
 457 #### macOS
 458 ```
 459 <dict>
 460   <key>BlockAboutSupport</key>
 461   <true/> | <false/>
 462 </dict>
 463 ```
 464 #### policies.json
 465 ```
 466 {
 467   "policies": {
 468     "BlockAboutSupport": true | false
 469   }
 470 }
 471 ```
 472 ### Bookmarks
 473
 474 Note: [`ManagedBookmarks`](#managedbookmarks) is the new recommended way to add bookmarks. This policy will continue to be supported.
 475
 476 Add bookmarks in either the bookmarks toolbar or menu. Only `Title` and `URL` are required. If `Placement` is not specified, the bookmark will be placed on the toolbar. If `Folder` is specified, it is automatically created and bookmarks with the same folder name are grouped together.
 477
 478 **Compatibility:** Firefox 60, Firefox ESR 60\
 479 **CCK2 Equivalent:** `bookmarks.toolbar`,`bookmarks.menu`\
 480 **Preferences Affected:** N/A
 481
 482 #### Windows (GPO)
 483 ```
 484 Software\Policies\Mozilla\Firefox\Bookmarks\1\Title = "Example"
 485 Software\Policies\Mozilla\Firefox\Bookmarks\1\URL = "https://example.com"
 486 Software\Policies\Mozilla\Firefox\Bookmarks\1\Favicon = "https://example.com/favicon.ico"
 487 Software\Policies\Mozilla\Firefox\Bookmarks\1\Placement = "toolbar" | "menu"
 488 Software\Policies\Mozilla\Firefox\Bookmarks\1\Folder = "FolderName"
 489 ```
 490 #### Windows (Intune)
 491 OMA-URI:
 492 ```
 493 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Bookmarks/Bookmark01
 494 ```
 495 Value (string):
 496 ```
 497 <enabled/>
 498 <data id="BookmarkTitle" value="Example"/>
 499 <data id="BookmarkURL" value="https://example.com"/>
 500 <data id="BookmarkFavicon" value="https://example.com/favicon.ico"/>
 501 <data id="BookmarkPlacement" value="toolbar | menu"/>
 502 <data id="BookmarkFolder" value="FolderName"/>
 503 ```
 504 #### macOS
 505 ```
 506 <dict>
 507   <key>Bookmarks</key>
 508   <array>
 509     <dict>
 510       <key>Title</key>
 511       <string>Example</string>
 512       <key>URL</key>
 513       <string>https://example.com</string>
 514       <key>Favicon</key>
 515       <string>https://example.com/favicon.ico</string>
 516       <key>Placement</key>
 517       <string>toolbar | menu</string>
 518       <key>Folder</key>
 519       <string>FolderName</string>
 520     </dict>
 521   </array>
 522 </dict>
 523 ```
 524 #### policies.json
 525 ```
 526 {
 527   "policies": {
 528     "Bookmarks": [
 529       {
 530         "Title": "Example",
 531         "URL": "https://example.com",
 532         "Favicon": "https://example.com/favicon.ico",
 533         "Placement": "toolbar" | "menu",
 534         "Folder": "FolderName"
 535       }
 536     ]
 537   }
 538 }
 539 ```
 540 ### CaptivePortal
 541 Enable or disable the detection of captive portals.
 542
 543 **Compatibility:** Firefox 67, Firefox ESR 60.7\
 544 **CCK2 Equivalent:** N/A\
 545 **Preferences Affected:** `network.captive-portal-service.enabled`
 546
 547 #### Windows (GPO)
 548 ```
 549 Software\Policies\Mozilla\Firefox\CaptivePortal = 0x1 | 0x0
 550 ```
 551 #### Windows (Intune)
 552 OMA-URI:
 553 ```
 554 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/CaptivePortal
 555 ```
 556 Value (string):
 557 ```
 558 <enabled/> or <disabled/>
 559 ```
 560 #### macOS
 561 ```
 562 <dict>
 563   <key>CaptivePortal</key>
 564   <true/> | <false/>
 565 </dict>
 566 ```
 567 #### policies.json
 568 ```
 569 {
 570   "policies": {
 571     "CaptivePortal": true | false
 572   }
 573 }
 574 ```
 575 ### Certificates
 576
 577 ### Certificates | ImportEnterpriseRoots
 578
 579 Trust certificates that have been added to the operating system certificate store by a user or administrator.
 580
 581 Note: This policy only works on Windows and macOS. For Linux discussion, see [bug 1600509](https://bugzilla.mozilla.org/show_bug.cgi?id=1600509).
 582
 583 See https://support.mozilla.org/kb/setting-certificate-authorities-firefox for more detail.
 584
 585 **Compatibility:** Firefox 60, Firefox ESR 60 (macOS support in Firefox 63, Firefox ESR 68)\
 586 **CCK2 Equivalent:** N/A\
 587 **Preferences Affected:** `security.enterprise_roots.enabled`
 588
 589 #### Windows (GPO)
 590 ```
 591 Software\Policies\Mozilla\Firefox\Certificates\ImportEnterpriseRoots = 0x1 | 0x0
 592 ```
 593 #### Windows (Intune)
 594 OMA-URI:
 595 ```
 596 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Certificates/Certificates_ImportEnterpriseRoots
 597 ```
 598 Value (string):
 599 ```
 600 <enabled/> or <disabled/>
 601 ```
 602 #### macOS
 603 ```
 604 <dict>
 605   <key>Certificates</key>
 606   <dict>
 607     <key>ImportEnterpriseRoots</key>
 608     <true/> | <false/>
 609   </dict>
 610 </dict>
 611 ```
 612 #### policies.json
 613 ```
 614 {
 615   "policies": {
 616     "Certificates": {
 617       "ImportEnterpriseRoots": true | false
 618     }
 619   }
 620 }
 621 ```
 622 ### Certificates | Install
 623
 624 Install certificates into the Firefox certificate store. If only a filename is specified, Firefox searches for the file in the following locations:
 625
 626 - Windows
 627   - %USERPROFILE%\AppData\Local\Mozilla\Certificates
 628   - %USERPROFILE%\AppData\Roaming\Mozilla\Certificates
 629 - macOS
 630   - /Library/Application Support/Mozilla/Certificates
 631   - ~/Library/Application Support/Mozilla/Certificates
 632 - Linux
 633   - /usr/lib/mozilla/certificates
 634   - /usr/lib64/mozilla/certificates
 635   - ~/.mozilla/certificates
 636
 637 Starting with Firefox 65, Firefox 60.5 ESR, a fully qualified path can be used, including UNC paths. You should use the native path style for your operating system. We do not support using %USERPROFILE% or other environment variables on Windows.
 638
 639 If you are specifying the path in the policies.json file on Windows, you need to escape your backslashes (`\\`) which means that for UNC paths, you need to escape both (`\\\\`). If you use group policy, you only need one backslash.
 640
 641 Certificates are installed using the trust string `CT,CT,`.
 642
 643 Binary (DER) and ASCII (PEM) certificates are both supported.
 644
 645 **Compatibility:** Firefox 64, Firefox ESR 64\
 646 **CCK2 Equivalent:** `certs.ca`\
 647 **Preferences Affected:** N/A
 648
 649 #### Windows (GPO)
 650 ```
 651 Software\Policies\Mozilla\Firefox\Certificates\Install\1 = "cert1.der"
 652 Software\Policies\Mozilla\Firefox\Certificates\Install\2 = "C:\Users\username\cert2.pem"
 653 ```
 654 #### Windows (Intune)
 655 OMA-URI:
 656 ```
 657 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Certificates/Certificates_Install
 658 ```
 659 Value (string):
 660 ```
 661 <enabled/>
 662 <data id="Certificates_Install" value="1&#xF000;cert1.der&#xF000;2&#xF000;C:\Users\username\cert2.pem"/>
 663 ```
 664 #### macOS
 665 ```
 666 <dict>
 667   <key>Certificates</key>
 668   <dict>
 669     <key>Install</key>
 670     <array>
 671       <string>cert1.der</string>
 672       <string>/Users/username/cert2.pem</string>
 673     </array>
 674   </dict>
 675 </dict>
 676 ```
 677 #### policies.json
 678 ```
 679 {
 680   "policies": {
 681     "Certificates": {
 682       "Install": ["cert1.der", "/home/username/cert2.pem"]
 683     }
 684   }
 685 }
 686 ```
 687 ### Cookies
 688 Configure cookie preferences.
 689
 690 `Allow` is a list of origins (not domains) where cookies are always allowed. You must include http or https.
 691
 692 `AllowSession` is a list of origins (not domains) where cookies are only allowed for the current session. You must include http or https.
 693
 694 `Block` is a list of origins (not domains) where cookies are always blocked. You must include http or https.
 695
 696 `Default` determines whether cookies are accepted at all.
 697
 698 `AcceptThirdParty` determines how third-party cookies are handled.
 699
 700 `ExpireAtSessionEnd` determines when cookies expire.
 701
 702 `RejectTracker` only rejects cookies for trackers.
 703
 704 `Locked` prevents the user from changing cookie preferences.
 705
 706 **Compatibility:** Firefox 60, Firefox ESR 60 (RejectTracker added in Firefox 63, AllowSession added in Firefox 79/78.1)\
 707 **CCK2 Equivalent:** N/A\
 708 **Preferences Affected:** `network.cookie.cookieBehavior`,`network.cookie.lifetimePolicy`
 709
 710 #### Windows (GPO)
 711 ```
 712 Software\Policies\Mozilla\Firefox\Cookies\Allow\1 = "https://example.com"
 713 Software\Policies\Mozilla\Firefox\Cookies\AllowSession\1 = "https://example.edu"
 714 Software\Policies\Mozilla\Firefox\Cookies\Block\1 = "https://example.org"
 715 Software\Policies\Mozilla\Firefox\Cookies\Default = 0x1 | 0x0
 716 Software\Policies\Mozilla\Firefox\Cookies\AcceptThirdParty = "always" | "never" | "from-visited"
 717 Software\Policies\Mozilla\Firefox\Cookies\ExpireAtSessionEnd = 0x1 | 0x0
 718 Software\Policies\Mozilla\Firefox\Cookies\RejectTracker = 0x1 | 0x0
 719 Software\Policies\Mozilla\Firefox\Cookies\Locked = 0x1 | 0x0
 720 ```
 721 #### Windows (Intune)
 722 OMA-URI:
 723 ```
 724 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Allow
 725 ```
 726 Value (string):
 727 ```
 728 <enabled/>
 729 <data id="Cookies_Allow" value="1&#xF000;https://example.com"/>
 730 ```
 731 OMA-URI:
 732 ```
 733 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_AllowSession
 734 ```
 735 Value (string):
 736 ```
 737 <enabled/>
 738 <data id="Cookies_Allow" value="1&#xF000;https://example.edu"/>
 739 ```
 740 OMA-URI:
 741 ```
 742 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Block
 743 ```
 744 Value (string):
 745 ```
 746 <enabled/>
 747 <data id="Cookies_Block" value="1&#xF000;https://example.org"/>
 748 ```
 749 OMA-URI:
 750 ```
 751 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Default
 752 ```
 753 Value (string):
 754 ```
 755 <enabled/> or <disabled/>
 756 ```
 757 OMA-URI:
 758 ```
 759 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_AcceptThirdParty
 760 ```
 761 Value (string):
 762 ```
 763 <enabled/>
 764 <data id="Cookies_AcceptThirdParty" value="always | never | from-visited"/>
 765 ```
 766 OMA-URI:
 767 ```
 768 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_ExpireAtSessionEnd
 769 ```
 770 Value (string):
 771 ```
 772 <enabled/> or <disabled/>
 773 ```
 774 OMA-URI:
 775 ```
 776 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_RejectTracker
 777 ```
 778 Value (string):
 779 ```
 780 <enabled/> or <disabled/>
 781 ```
 782 OMA-URI:
 783 ```
 784 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Locked
 785 ```
 786 Value (string):
 787 ```
 788 <enabled/> or <disabled/>
 789 ```
 790 #### macOS
 791 ```
 792 <dict>
 793   <key>Cookies</key>
 794   <dict>
 795     <key>Allow</key>
 796     <array>
 797       <string>http://example.com</string>
 798     </array>
 799     <key>AllowSession</key>
 800     <array>
 801       <string>http://example.edu</string>
 802     </array>
 803     <key>Block</key>
 804     <array>
 805       <string>http://example.org</string>
 806     </array>
 807     <key>Default</key>
 808     <true/> | <false/>
 809     <key>AcceptThirdParty</key>
 810     <string>always | never | from-visited</string>
 811     <key>ExpireAtSessionEnd</key>
 812     <true/> | <false/>
 813     <key>RejectTracker</key>
 814     <true/> | <false/>
 815     <key>Locked</key>
 816     <true/> | <false/>
 817   </dict>
 818 </dict>
 819 ```
 820 #### policies.json
 821 ```
 822 {
 823   "policies": {
 824     "Cookies": {
 825       "Allow": ["http://example.org/"],
 826       "AllowSession": ["http://example.edu/"],
 827       "Block": ["http://example.edu/"],
 828       "Default": true | false,
 829       "AcceptThirdParty": "always" | "never" | "from-visited",
 830       "ExpireAtSessionEnd": true | false,
 831       "RejectTracker": true | false,
 832       "Locked": true | false
 833     }
 834   }
 835 }
 836 ```
 837 ### DisableSetDesktopBackground
 838 Remove the "Set As Desktop Background..." menuitem when right clicking on an image.
 839
 840 **Compatibility:** Firefox 60, Firefox ESR 60\
 841 **CCK2 Equivalent:** `removeSetDesktopBackground`\
 842 **Preferences Affected:** N/A
 843
 844 #### Windows (GPO)
 845 ```
 846 Software\Policies\Mozilla\Firefox\DisableSetDesktopBackground = 0x1 | 0x0
 847 ```
 848 #### Windows (Intune)
 849 OMA-URI:
 850 ```
 851 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSetDesktopBackground
 852 ```
 853 Value (string):
 854 ```
 855 <enabled/> or <disabled/>
 856 ```
 857 #### macOS
 858 ```
 859 <dict>
 860   <key>DisableSetDesktopBackground</key>
 861   <true/> | <false/>
 862 </dict>
 863 ```
 864 #### policies.json
 865 ```
 866 {
 867   "policies": {
 868     "DisableSetDesktopBackground": true | false
 869   }
 870 }
 871 ```
 872 ### DisableMasterPasswordCreation
 873 Remove the master password functionality.
 874
 875 If this value is true, it works the same as setting [`PrimaryPassword`](#primarypassword) to false and removes the primary password functionality.
 876
 877 If both DisableMasterPasswordCreation and PrimaryPassword are used, DisableMasterPasswordCreation takes precedent.
 878
 879 **Compatibility:** Firefox 60, Firefox ESR 60\
 880 **CCK2 Equivalent:** `noMasterPassword`\
 881 **Preferences Affected:** N/A
 882
 883 #### Windows (GPO)
 884 ```
 885 Software\Policies\Mozilla\Firefox\DisableMasterPasswordCreation = 0x1 | 0x0
 886 ```
 887 #### Windows (Intune)
 888 OMA-URI:
 889 ```
 890 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableMasterPasswordCreation
 891 ```
 892 Value (string):
 893 ```
 894 <enabled/> or <disabled/>
 895 ```
 896 #### macOS
 897 ```
 898 <dict>
 899   <key>DisableMasterPasswordCreation</key>
 900   <true/> | <false/>
 901 </dict>
 902 ```
 903 #### policies.json
 904 ```
 905 {
 906   "policies": {
 907     "DisableMasterPasswordCreation": true | false
 908   }
 909 }
 910 ```
 911 ### DisableAppUpdate
 912 Turn off application updates within Firefox.
 913
 914 **Compatibility:** Firefox 60, Firefox ESR 60\
 915 **CCK2 Equivalent:** `disableFirefoxUpdates`\
 916 **Preferences Affected:** N/A
 917
 918 #### Windows (GPO)
 919 ```
 920 Software\Policies\Mozilla\Firefox\DisableAppUpdate = 0x1 | 0x0
 921 ```
 922 #### Windows (Intune)
 923 OMA-URI:
 924 ```
 925 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableAppUpdate
 926 ```
 927 Value (string):
 928 ```
 929 <enabled/> or <disabled/>
 930 ```
 931 #### macOS
 932 ```
 933 <dict>
 934   <key>DisableAppUpdate</key>
 935   <true/> | <false/>
 936 </dict>
 937 ```
 938 #### policies.json
 939 ```
 940 {
 941   "policies": {
 942     "DisableAppUpdate": true | false
 943   }
 944 }
 945 ```
 946 ### DisableBuiltinPDFViewer
 947 Disable the built in PDF viewer. PDF files are downloaded and sent externally.
 948
 949 **Compatibility:** Firefox 60, Firefox ESR 60\
 950 **CCK2 Equivalent:** `disablePDFjs`\
 951 **Preferences Affected:** `pdfjs.disabled`
 952
 953 #### Windows (GPO)
 954 ```
 955 Software\Policies\Mozilla\Firefox\DisableBuiltinPDFViewer = 0x1 | 0x0
 956 ```
 957 #### Windows (Intune)
 958 OMA-URI:
 959 ```
 960 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableBuiltinPDFViewer
 961 ```
 962 Value (string):
 963 ```
 964 <enabled/> or <disabled/>
 965 ```
 966 #### macOS
 967 ```
 968 <dict>
 969   <key>DisableBuiltinPDFViewer</key>
 970   <true/> | <false/>
 971 </dict>
 972 ```
 973 #### policies.json
 974 ```
 975 {
 976   "policies": {
 977     "DisableBuiltinPDFViewer": true | false
 978   }
 979 }
 980 ```
 981 ### DisabledCiphers
 982 Disable specific cryptographic ciphers.
 983
 984 ---
 985 **Note:**
 986
 987 This policy was updated in Firefox 78 to allow enabling ciphers as well. Setting the value to true disables the cipher, setting the value to false enables the cipher. Previously setting the value to true or false disabled the cipher.
 988
 989 ---
 990 **Compatibility:** Firefox 76, Firefox ESR 68.8 (TLS_RSA_WITH_AES_128_GCM_SHA256 and TLS_RSA_WITH_AES_256_GCM_SHA384 were added in Firefox 78)\
 991 **CCK2 Equivalent:** N/A\
 992 **Preferences Affected:** N/A
 993
 994 #### Windows (GPO)
 995 ```
 996 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_DHE_RSA_WITH_AES_128_CBC_SHA = 0x1 | 0x0
 997 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_DHE_RSA_WITH_AES_256_CBC_SHA = 0x1 | 0x0
 998 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA = 0x1 | 0x0
 999 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA = 0x1 | 0x0
1000 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 = 0x1 | 0x0
1001 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 = 0x1 | 0x0
1002 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_RSA_WITH_AES_128_CBC_SHA = 0x1 | 0x0
1003 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_RSA_WITH_AES_256_CBC_SHA = 0x1 | 0x0
1004 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_RSA_WITH_3DES_EDE_CBC_SHA = 0x1 | 0x0
1005 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_RSA_WITH_AES_128_GCM_SHA256 = 0x1 | 0x0
1006 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_RSA_WITH_AES_256_GCM_SHA384 = 0x1 | 0x0
1007 ```
1008 #### Windows (Intune)
1009 OMA-URI:
1010 ```
1011 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_DHE_RSA_WITH_AES_128_CBC_SHA
1012 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_DHE_RSA_WITH_AES_256_CBC_SHA
1013 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
1014 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
1015 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
1016 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
1017 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_RSA_WITH_AES_128_CBC_SHA
1018 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_RSA_WITH_AES_256_CBC_SHA
1019 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_RSA_WITH_3DES_EDE_CBC_SHA
1020 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_RSA_WITH_AES_128_GCM_SHA256
1021 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_RSA_WITH_AES_256_GCM_SHA384
1022 ```
1023 Value (string):
1024 ```
1025 <enabled/> or <disabled/>
1026 ```
1027 #### macOS
1028 ```
1029 <dict>
1030   <key>DisabledCiphers</key>
1031     <dict>
1032       <key>TLS_DHE_RSA_WITH_AES_128_CBC_SHA</key>
1033       <true/> | <false/>
1034       <key>TLS_DHE_RSA_WITH_AES_256_CBC_SHA</key>
1035       <true/> | <false/>
1036       <key>TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA</key>
1037       <true/> | <false/>
1038       <key>TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA</key>
1039       <true/> | <false/>
1040       <key>TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256</key>
1041       <true/> | <false/>
1042       <key>TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256</key>
1043       <true/> | <false/>
1044       <key>TLS_RSA_WITH_AES_128_CBC_SHA</key>
1045       <true/> | <false/>
1046       <key>TLS_RSA_WITH_AES_256_CBC_SHA</key>
1047       <true/> | <false/>
1048       <key>TLS_RSA_WITH_3DES_EDE_CBC_SHA</key>
1049       <true/> | <false/>
1050       <key>TLS_RSA_WITH_AES_128_GCM_SHA256</key>
1051       <true/> | <false/>
1052       <key>TLS_RSA_WITH_AES_256_GCM_SHA384</key>
1053       <true/> | <false/>
1054     </dict>
1055 </dict>
1056 ```
1057 #### policies.json
1058 ```
1059 {
1060   "policies": {
1061     "DisabledCiphers": {
1062       "TLS_DHE_RSA_WITH_AES_128_CBC_SHA": true | false,
1063       "TLS_DHE_RSA_WITH_AES_256_CBC_SHA": true | false,
1064       "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA": true | false,
1065       "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA": true | false,
1066       "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256": true | false,
1067       "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256": true | false,
1068       "TLS_RSA_WITH_AES_128_CBC_SHA": true | false,
1069       "TLS_RSA_WITH_AES_256_CBC_SHA": true | false,
1070       "TLS_RSA_WITH_3DES_EDE_CBC_SHA": true | false,
1071       "TLS_RSA_WITH_AES_128_GCM_SHA256": true | false,
1072       "TLS_RSA_WITH_AES_256_GCM_SHA384": true | false
1073     }
1074   }
1075 }
1076 ```
1077 ### DisableDefaultBrowserAgent
1078 Prevent the default browser agent from taking any actions. Only applicable to Windows; other platforms don’t have the agent.
1079
1080 The browser agent is a Windows-only scheduled task which runs in the background to collect and submit data about the browser that the user has set as their OS default. More information is available [here](https://firefox-source-docs.mozilla.org/toolkit/mozapps/defaultagent/default-browser-agent/index.html).
1081
1082 **Compatibility:** Firefox 75, Firefox ESR 68.7 (Windows only)\
1083 **CCK2 Equivalent:** N/A\
1084 **Preferences Affected:** N/A
1085
1086 #### Windows (GPO)
1087 ```
1088 Software\Policies\Mozilla\Firefox\DisableDefaultBrowserAgent = 0x1 | 0x0
1089 ```
1090 #### Windows (Intune)
1091 OMA-URI:
1092 ```
1093 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableDefaultBrowserAgent
1094 ```
1095 Value (string):
1096 ```
1097 <enabled/> or <disabled/>
1098 ```
1099 #### policies.json
1100 ```
1101 {
1102   "policies": {
1103     "DisableDefaultBrowserAgent": true | false
1104   }
1105 }
1106 ```
1107 ### DisableDeveloperTools
1108 Remove access to all developer tools.
1109
1110 **Compatibility:** Firefox 60, Firefox ESR 60\
1111 **CCK2 Equivalent:** `removeDeveloperTools`\
1112 **Preferences Affected:** `devtools.policy.disabled`
1113
1114 #### Windows (GPO)
1115 ```
1116 Software\Policies\Mozilla\Firefox\DisableDeveloperTools = 0x1 | 0x0`
1117 ```
1118 #### Windows (Intune)
1119 OMA-URI:
1120 ```
1121 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableDeveloperTools
1122 ```
1123 Value (string):
1124 ```
1125 <enabled/> or <disabled/>
1126 ```
1127 #### macOS
1128 ```
1129 <dict>
1130   <key>DisableDeveloperTools</key>
1131   <true/> | <false/>
1132 </dict>
1133 ```
1134 #### policies.json
1135 ```
1136 {
1137   "policies": {
1138     "DisableDeveloperTools": true | false
1139   }
1140 }
1141 ```
1142 ### DisableFeedbackCommands
1143 Disable the menus for reporting sites (Submit Feedback, Report Deceptive Site).
1144
1145 **Compatibility:** Firefox 60, Firefox ESR 60\
1146 **CCK2 Equivalent:** N/A\
1147 **Preferences Affected:** N/A
1148
1149 #### Windows (GPO)
1150 ```
1151 Software\Policies\Mozilla\Firefox\DisableFeedbackCommands = 0x1 | 0x0
1152 ```
1153 #### Windows (Intune)
1154 OMA-URI:
1155 ```
1156 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFeedbackCommands
1157 ```
1158 Value (string):
1159 ```
1160 <enabled/> or <disabled/>
1161 ```
1162 #### macOS
1163 ```
1164 <dict>
1165   <key>DisableFeedbackCommands</key>
1166   <true/> | <false/>
1167 </dict>
1168 ```
1169 #### policies.json
1170 ```
1171 {
1172   "policies": {
1173     "DisableFeedbackCommands": true | false
1174   }
1175 }
1176 ```
1177 ### DisableFirefoxScreenshots
1178 Remove access to Firefox Screenshots.
1179
1180 **Compatibility:** Firefox 60, Firefox ESR 60\
1181 **CCK2 Equivalent:** N/A\
1182 **Preferences Affected:** `extensions.screenshots.disabled`
1183
1184 #### Windows (GPO)
1185 ```
1186 Software\Policies\Mozilla\Firefox\DisableFirefoxScreenshots = 0x1 | 0x0
1187 ```
1188 #### Windows (Intune)
1189 OMA-URI:
1190 ```
1191 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxScreenshots
1192 ```
1193 Value (string):
1194 ```
1195 <enabled/> or <disabled/>
1196 ```
1197 #### macOS
1198 ```
1199 <dict>
1200   <key>DisableFirefoxScreenshots</key>
1201   <true/> | <false/>
1202 </dict>
1203 ```
1204 #### policies.json
1205 ```
1206 {
1207   "policies": {
1208     "DisableFirefoxScreenshots": true | false
1209   }
1210 }
1211 ```
1212 ### DisableFirefoxAccounts
1213 Disable Firefox Accounts integration (Sync).
1214
1215 **Compatibility:** Firefox 60, Firefox ESR 60\
1216 **CCK2 Equivalent:** `disableSync`\
1217 **Preferences Affected:** `identity.fxaccounts.enabled`
1218
1219 #### Windows (GPO)
1220 ```
1221 Software\Policies\Mozilla\Firefox\DisableFirefoxAccounts = 0x1 | 0x0
1222 ```
1223 #### Windows (Intune)
1224 OMA-URI:
1225 ```
1226 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxAccounts
1227 ```
1228 Value (string):
1229 ```
1230 <enabled/> or <disabled/>
1231 ```
1232 #### macOS
1233 ```
1234 <dict>
1235   <key>DisableFirefoxAccounts</key>
1236   <true/> | <false/>
1237 </dict>
1238 ```
1239 #### policies.json
1240 ```
1241 {
1242   "policies": {
1243     "DisableFirefoxAccounts": true | false
1244   }
1245 }
1246 ```
1247 ### DisableFirefoxStudies
1248 Disable Firefox studies (Shield).
1249
1250 **Compatibility:** Firefox 60, Firefox ESR 60\
1251 **CCK2 Equivalent:** N/A\
1252 **Preferences Affected:** N/A
1253
1254 #### Windows (GPO)
1255 ```
1256 Software\Policies\Mozilla\Firefox\DisableFirefoxStudies = 0x1 | 0x0
1257 ```
1258 #### Windows (Intune)
1259 OMA-URI:
1260 ```
1261 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxStudies
1262 ```
1263 Value (string):
1264 ```
1265 <enabled/> or <disabled/>
1266 ```
1267 #### macOS
1268 ```
1269 <dict>
1270   <key>DisableFirefoxStudies</key>
1271   <true/> | <false/>
1272 </dict>
1273 ```
1274 #### policies.json
1275 ```
1276 {
1277   "policies": {
1278     "DisableFirefoxStudies": true | false
1279   }
1280 }
1281 ```
1282 ### DisableForgetButton
1283 Disable the "Forget" button.
1284
1285 **Compatibility:** Firefox 60, Firefox ESR 60\
1286 **CCK2 Equivalent:** `disableForget`\
1287 **Preferences Affected:** N/A
1288
1289 #### Windows (GPO)
1290 ```
1291 Software\Policies\Mozilla\Firefox\DisableForgetButton = 0x1 | 0x0
1292 ```
1293 #### Windows (Intune)
1294 OMA-URI:
1295 ```
1296 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableForgetButton
1297 ```
1298 Value (string):
1299 ```
1300 <enabled/> or <disabled/>
1301 ```
1302 #### macOS
1303 ```
1304 <dict>
1305   <key>DisableForgetButton</key>
1306   <true/> | <false/>
1307 </dict>
1308 ```
1309 #### policies.json
1310 ```
1311 {
1312   "policies": {
1313     "DisableForgetButton": true | false
1314   }
1315 }
1316 ```
1317 ### DisableFormHistory
1318 Turn off saving information on web forms and the search bar.
1319
1320 **Compatibility:** Firefox 60, Firefox ESR 60\
1321 **CCK2 Equivalent:** `disableFormFill`\
1322 **Preferences Affected:** ` browser.formfill.enable`
1323
1324 #### Windows (GPO)
1325 ```
1326 Software\Policies\Mozilla\Firefox\DisableFormHistory = 0x1 | 0x0
1327 ```
1328 #### Windows (Intune)
1329 OMA-URI:
1330 ```
1331 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFormHistory
1332 ```
1333 Value (string):
1334 ```
1335 <enabled/> or <disabled/>
1336 ```
1337 #### macOS
1338 ```
1339 <dict>
1340   <key>DisableFormHistory</key>
1341   <true/> | <false/>
1342 </dict>
1343 ```
1344 #### policies.json
1345 ```
1346 {
1347   "policies": {
1348     "DisableFormHistory": true | false
1349   }
1350 }
1351 ```
1352 ### DisablePasswordReveal
1353 Do not allow passwords to be shown in saved logins
1354
1355 **Compatibility:** Firefox 71, Firefox ESR 68.3\
1356 **CCK2 Equivalent:** N/A
1357 **Preferences Affected:** N/A
1358
1359 #### Windows (GPO)
1360 ```
1361 Software\Policies\Mozilla\Firefox\DisablePasswordReveal = 0x1 | 0x0
1362 ```
1363 #### Windows (Intune)
1364 OMA-URI:
1365 ```
1366 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePasswordReveal
1367 ```
1368 Value (string):
1369 ```
1370 <enabled/> or <disabled/>
1371 ```
1372 #### macOS
1373 ```
1374 <dict>
1375   <key>DisablePasswordReveal</key>
1376   <true/> | <false/>
1377 </dict>
1378 ```
1379 #### policies.json
1380 ```
1381 {
1382   "policies": {
1383     "DisablePasswordReveal": true | false
1384   }
1385 }
1386 ```
1387 ### DisablePocket
1388 Remove Pocket in the Firefox UI. It does not remove it from the new tab page.
1389
1390 **Compatibility:** Firefox 60, Firefox ESR 60\
1391 **CCK2 Equivalent:** `disablePocket`\
1392 **Preferences Affected:** `extensions.pocket.enabled`
1393
1394 #### Windows (GPO)
1395 ```
1396 Software\Policies\Mozilla\Firefox\DisablePocket = 0x1 | 0x0
1397 ```
1398 #### Windows (Intune)
1399 OMA-URI:
1400 ```
1401 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePocket
1402 ```
1403 Value (string):
1404 ```
1405 <enabled/> or <disabled/>
1406 ```
1407 #### macOS
1408 ```
1409 <dict>
1410   <key>DisablePocket</key>
1411   <true/> | <false/>
1412 </dict>
1413 ```
1414 #### policies.json
1415 ```
1416 {
1417   "policies": {
1418     "DisablePocket": true | false
1419   }
1420 }
1421 ```
1422 ### DisablePrivateBrowsing
1423 Remove access to private browsing.
1424
1425 **Compatibility:** Firefox 60, Firefox ESR 60\
1426 **CCK2 Equivalent:** `disablePrivateBrowsing`\
1427 **Preferences Affected:** N/A
1428
1429 #### Windows (GPO)
1430 ```
1431 Software\Policies\Mozilla\Firefox\DisablePrivateBrowsing = 0x1 | 0x0
1432 ```
1433 #### Windows (Intune)
1434 OMA-URI:
1435 ```
1436 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePrivateBrowsing
1437 ```
1438 Value (string):
1439 ```
1440 <enabled/> or <disabled/>
1441 ```
1442 #### macOS
1443 ```
1444 <dict>
1445   <key>DisablePrivateBrowsing</key>
1446   <true/> | <false/>
1447 </dict>
1448 ```
1449 #### policies.json
1450 ```
1451 {
1452   "policies": {
1453     "DisablePrivateBrowsing": true | false
1454   }
1455 }
1456 ```
1457 ### DisableProfileImport
1458 Disables the "Import data from another browser" option in the bookmarks window.
1459
1460 **Compatibility:** Firefox 60, Firefox ESR 60\
1461 **CCK2 Equivalent:** N/A\
1462 **Preferences Affected:** N/A
1463
1464 #### Windows (GPO)
1465 ```
1466 Software\Policies\Mozilla\Firefox\DisableProfileImport = 0x1 | 0x0
1467 ```
1468 #### Windows (Intune)
1469 OMA-URI:
1470 ```
1471 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableProfileImport
1472 ```
1473 Value (string):
1474 ```
1475 <enabled/> or <disabled/>
1476 ```
1477 #### macOS
1478 ```
1479 <dict>
1480   <key>DisableProfileImport</key>
1481   <true/> | <false/>
1482 </dict>
1483 ```
1484 #### policies.json
1485 ```
1486 {
1487   "policies": {
1488     "DisableProfileImport": true | false
1489   }
1490 }
1491 ```
1492 ### DisableProfileRefresh
1493 Disable the Refresh Firefox button on about:support and support.mozilla.org, as well as the prompt that displays offering to refresh Firefox when you haven't used it in a while.
1494
1495 **Compatibility:** Firefox 60, Firefox ESR 60\
1496 **CCK2 Equivalent:** `disableResetFirefox`\
1497 **Preferences Affected:** `browser.disableResetPrompt`
1498
1499 #### Windows (GPO)
1500 ```
1501 Software\Policies\Mozilla\Firefox\DisableProfileRefresh = 0x1 | 0x0
1502 ```
1503 #### Windows (Intune)
1504 OMA-URI:
1505 ```
1506 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableProfileRefresh
1507 ```
1508 Value (string):
1509 ```
1510 <enabled/> or <disabled/>
1511 ```
1512 #### macOS
1513 ```
1514 <dict>
1515   <key>DisableProfileRefresh</key>
1516   <true/> | <false/>
1517 </dict>
1518 ```
1519 #### policies.json
1520 ```
1521 {
1522   "policies": {
1523     "DisableProfileRefresh": true | false
1524   }
1525 }
1526 ```
1527 ### DisableSafeMode
1528 Disable safe mode within the browser.
1529
1530 On Windows, this disables safe mode via the command line as well.
1531
1532 **Compatibility:** Firefox 60, Firefox ESR 60 (Windows, macOS)\
1533 **CCK2 Equivalent:** `disableSafeMode`\
1534 **Preferences Affected:** N/A
1535
1536 #### Windows (GPO)
1537 ```
1538 Software\Policies\Mozilla\Firefox\DisableSafeMode = 0x1 | 0x0
1539 ```
1540 #### Windows (Intune)
1541 OMA-URI:
1542 ```
1543 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSafeMode
1544 ```
1545 Value (string):
1546 ```
1547 <enabled/> or <disabled/>
1548 ```
1549 #### macOS
1550 ```
1551 <dict>
1552   <key>DisableSafeMode</key>
1553   <true/> | <false/>
1554 </dict>
1555 ```
1556 #### policies.json
1557 ```
1558 {
1559   "policies": {
1560     "DisableSafeMode": true | false
1561   }
1562 }
1563 ```
1564 ### DisableSecurityBypass
1565 Prevent the user from bypassing security in certain cases.
1566
1567 `InvalidCertificate` prevents adding an exception when an invalid certificate is shown.
1568
1569 `SafeBrowsing` prevents selecting "ignore the risk" and visiting a harmful site anyway.
1570
1571 **Compatibility:** Firefox 60, Firefox ESR 60\
1572 **CCK2 Equivalent:** N/A\
1573 **Preferences Affected:** `security.certerror.hideAddException`,`browser.safebrowsing.allowOverride`
1574
1575 #### Windows (GPO)
1576 ```
1577 Software\Policies\Mozilla\Firefox\DisableSecurityBypass\InvalidCertificate = 0x1 | 0x0
1578 Software\Policies\Mozilla\Firefox\DisableSecurityBypass\SafeBrowsing = 0x1 | 0x0
1579 ```
1580 #### Windows (Intune)
1581 OMA-URI:
1582 ```
1583 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/P_DisableSecurityBypass_InvalidCertificate
1584 ```
1585 Value (string):
1586 ```
1587 <enabled/> or <disabled/>
1588 ```
1589 OMA-URI:
1590 ```
1591 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/P_DisableSecurityBypass_SafeBrowsing
1592 ```
1593 Value (string):
1594 ```
1595 <enabled/> or <disabled/>
1596 ```
1597
1598 #### macOS
1599 ```
1600 <dict>
1601   <key>DisableSecurityBypass</key>
1602   <dict>
1603     <key>InvalidCertificate</key>
1604     <true/> | <false/>
1605     <key>SafeBrowsing</key>
1606     <true/> | <false/>
1607   </dict>
1608 </dict>
1609 ```
1610 #### policies.json
1611 ```
1612 {
1613   "policies": {
1614     "DisableSecurityBypass": {
1615       "InvalidCertificate": true | false,
1616       "SafeBrowsing": true | false
1617     }
1618   }
1619 }
1620 ```
1621 ### DisableSystemAddonUpdate
1622 Prevent system add-ons from being installed or update.
1623
1624 **Compatibility:** Firefox 60, Firefox ESR 60\
1625 **CCK2 Equivalent:** N/A\
1626 **Preferences Affected:** N/A
1627
1628 #### Windows (GPO)
1629 ```
1630 Software\Policies\Mozilla\Firefox\DisableSystemAddonUpdate = 0x1 | 0x0
1631 ```
1632 #### Windows (Intune)
1633 OMA-URI:
1634 ```
1635 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSystemAddonUpdate
1636 ```
1637 Value (string):
1638 ```
1639 <enabled/> or <disabled/>
1640 ```
1641 #### macOS
1642 ```
1643 <dict>
1644   <key>DisableSystemAddonUpdate</key>
1645   <true/> | <false/>
1646 </dict>
1647 ```
1648 #### policies.json
1649 ```
1650 {
1651   "policies": {
1652     "DisableSystemAddonUpdate": true | false
1653   }
1654 }
1655 ```
1656 ### DisableTelemetry
1657 Prevent the upload of telemetry data.
1658
1659 As of Firefox 83 and Firefox ESR 78.5, local storage of telemetry data is disabled as well.
1660
1661 Mozilla recommends that you do not disable telemetry. Information collected through telemetry helps us build a better product for businesses like yours.
1662
1663 **Compatibility:** Firefox 60, Firefox ESR 60\
1664 **CCK2 Equivalent:** `disableTelemetry`\
1665 **Preferences Affected:** `datareporting.healthreport.uploadEnabled,datareporting.policy.dataSubmissionEnabled,toolkit.telemetry.archive.enabled`
1666
1667 #### Windows (GPO)
1668 ```
1669 Software\Policies\Mozilla\Firefox\DisableTelemetry = 0x1 | 0x0
1670 ```
1671 #### Windows (Intune)
1672 OMA-URI:
1673 ```
1674 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableTelemetry
1675 ```
1676 Value (string):
1677 ```
1678 <enabled/> or <disabled/>
1679 ```
1680 #### macOS
1681 ```
1682 <dict>
1683   <key>DisableTelemetry</key>
1684   <true/> | <false/>
1685 </dict>
1686 ```
1687 #### policies.json
1688 ```
1689 {
1690   "policies": {
1691     "DisableTelemetry": true | false
1692   }
1693 }
1694 ```
1695 ### DisplayBookmarksToolbar
1696 Set the initial state of the bookmarks toolbar. A user can still hide it and it will stay hidden.
1697
1698 **Compatibility:** Firefox 60, Firefox ESR 60\
1699 **CCK2 Equivalent:** `displayBookmarksToolbar`\
1700 **Preferences Affected:** N/A
1701
1702 #### Windows (GPO)
1703 ```
1704 Software\Policies\Mozilla\Firefox\DisplayBookmarksToolbar = 0x1 | 0x0
1705 ```
1706 #### Windows (Intune)
1707 OMA-URI:
1708 ```
1709 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisplayBookmarksToolbar
1710 ```
1711 Value (string):
1712 ```
1713 <enabled/> or <disabled/>
1714 ```
1715 #### macOS
1716 ```
1717 <dict>
1718   <key>DisplayBookmarksToolbar</key>
1719   <true/> | <false/>
1720 </dict>
1721 ```
1722 #### policies.json
1723 ```
1724 {
1725   "policies": {
1726     "DisplayBookmarksToolbar": true | false
1727   }
1728 }
1729 ```
1730 ### DisplayMenuBar (Deprecated)
1731 Set the initial state of the menubar. A user can still hide it and it will stay hidden.
1732
1733 **Compatibility:** Firefox 60, Firefox ESR 60 (Windows, some Linux)\
1734 **CCK2 Equivalent:** `displayMenuBar`\
1735 **Preferences Affected:** N/A
1736
1737 #### Windows (GPO)
1738 ```
1739 Software\Policies\Mozilla\Firefox\DisplayMenuBar = 0x1 | 0x0
1740 ```
1741 #### macOS
1742 ```
1743 <dict>
1744   <key>DisplayMenuBar</key>
1745   <true/> | <false/>
1746 </dict>
1747 ```
1748 #### policies.json
1749 ```
1750 {
1751   "policies": {
1752     "DisplayMenuBar": true | false
1753   }
1754 }
1755 ```
1756 ### DisplayMenuBar
1757 Set the state of the menubar.
1758
1759 `always` means the menubar is shown and cannot be hidden.
1760
1761 `never` means the menubar is hidden and cannot be shown.
1762
1763 `default-on` means the menubar is on by default but can be hidden.
1764
1765 `default-off` means the menubar is off by default but can be shown.
1766
1767 **Compatibility:** Firefox 73, Firefox ESR 68.5 (Windows, some Linux)\
1768 **CCK2 Equivalent:** `displayMenuBar`\
1769 **Preferences Affected:** N/A
1770
1771 #### Windows (GPO)
1772 ```
1773 Software\Policies\Mozilla\Firefox\DisplayMenuBar = "always", "never", "default-on", "default-off"
1774 ```
1775 #### Windows (Intune)
1776 OMA-URI:
1777 ```
1778 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisplayMenuBar_Enum
1779 ```
1780 Value (string):
1781 ```
1782 <enabled/>
1783 <data id="DisplayMenuBar" value="always | never | default-on | default-off"/>
1784 ```
1785 #### macOS
1786 ```
1787 <dict>
1788   <key>DisplayMenuBar</key>
1789   <string>always | never | default-on | default-off</string>
1790 </dict>
1791 ```
1792 #### policies.json
1793 ```
1794 {
1795   "policies": {
1796     "DisplayMenuBar": "always", "never", "default-on", "default-off"
1797   }
1798 }
1799 ```
1800 ### DNSOverHTTPS
1801 Configure DNS over HTTPS.
1802
1803 `Enabled` determines whether DNS over HTTPS is enabled
1804
1805 `ProviderURL` is a URL to another provider.
1806
1807 `Locked` prevents the user from changing DNS over HTTPS preferences.
1808
1809 `ExcludedDomains` excludes domains from DNS over HTTPS.
1810
1811 **Compatibility:** Firefox 63, Firefox ESR 68 (ExcludedDomains added in 75/68.7)\
1812 **CCK2 Equivalent:** N/A\
1813 **Preferences Affected:** `network.trr.mode`,`network.trr.uri`
1814
1815 #### Windows (GPO)
1816 ```
1817 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\Enabled = 0x1 | 0x0
1818 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\ProviderURL = "URL_TO_ALTERNATE_PROVIDER"
1819 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\Locked = 0x1 | 0x0
1820 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\ExcludedDomains\1 = "example.com"
1821 ```
1822 #### Windows (Intune)
1823 OMA-URI:
1824 ```
1825 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_Enabled
1826 ```
1827 Value (string):
1828 ```
1829 <enabled/> or <disabled/>
1830 ```
1831 OMA-URI:
1832 ```
1833 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_ProviderURL
1834 ```
1835 Value (string):
1836 ```
1837 <enabled/>
1838 <data id="String" value="URL_TO_ALTERNATE_PROVIDER"/>
1839 ```
1840 OMA-URI:
1841 ```
1842 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_Locked
1843 ```
1844 Value (string):
1845 ```
1846 <enabled/> or <disabled/>
1847 ```
1848 OMA-URI:
1849 ```
1850 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_ExcludedDomains
1851 ```
1852 Value (string):
1853 ```
1854 <enabled/>
1855 <data id="List" value="1&#xF000;example.com"/>
1856 ```
1857 #### macOS
1858 ```
1859 <dict>
1860   <key>DNSOverHTTPS</key>
1861   <dict>
1862     <key>Enabled</key>
1863     <true/> | <false/>
1864     <key>ProviderURL</key>
1865     <string>URL_TO_ALTERNATE_PROVIDER</string>
1866     <key>Locked</key>
1867     <true/> | <false/>
1868     <key>ExcludedDomains</key>
1869     <array>
1870       <string>example.com</string>
1871     </array>
1872   </dict>
1873 </dict>
1874 ```
1875 #### policies.json
1876 ```
1877 {
1878   "policies": {
1879     "DNSOverHTTPS": {
1880       "Enabled":  true | false,
1881       "ProviderURL": "URL_TO_ALTERNATE_PROVIDER",
1882       "Locked": true | false,
1883       "ExcludedDomains": ["example.com"]
1884     }
1885   }
1886 }
1887 ```
1888 ### DontCheckDefaultBrowser
1889 Don't check if Firefox is the default browser at startup.
1890
1891 **Compatibility:** Firefox 60, Firefox ESR 60\
1892 **CCK2 Equivalent:** `dontCheckDefaultBrowser`\
1893 **Preferences Affected:** `browser.shell.checkDefaultBrowser`
1894
1895 #### Windows (GPO)
1896 ```
1897 Software\Policies\Mozilla\Firefox\DontCheckDefaultBrowser = 0x1 | 0x0
1898 ```
1899 #### Windows (Intune)
1900 OMA-URI:
1901 ```
1902 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DontCheckDefaultBrowser
1903 ```
1904 Value (string):
1905 ```
1906 <enabled/> or <disabled/>
1907 ```
1908 #### macOS
1909 ```
1910 <dict>
1911   <key>DontCheckDefaultBrowser</key>
1912   <true/> | <false/>
1913 </dict>
1914 ```
1915 #### policies.json
1916 ```
1917 {
1918   "policies": {
1919     "DontCheckDefaultBrowser": true | false
1920   }
1921 }
1922 ```
1923 ### DefaultDownloadDirectory
1924 Set the default download directory.
1925
1926 You can use ${home} for the native home directory.
1927
1928 **Compatibility:** Firefox 68, Firefox ESR 68\
1929 **CCK2 Equivalent:** N/A\
1930 **Preferences Affected:** `browser.download.dir`,`browser.download.folderList`
1931
1932 #### Windows (GPO)
1933 ```
1934 Software\Policies\Mozilla\Firefox\DefaultDownloadDirectory = "${home}\Downloads"
1935 ```
1936 #### Windows (Intune)
1937 OMA-URI:
1938 ```
1939 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DefaultDownloadDirectory
1940 ```
1941 Value (string):
1942 ```
1943 <enabled/>
1944 <data id="Preferences_String" value="${home}\Downloads"/>
1945 ```
1946 #### macOS
1947 ```
1948 <dict>
1949   <key>DefaultDownloadDirectory</key>
1950   <string>${home}/Downloads</string>
1951 </dict>
1952 ```
1953 #### policies.json (macOS and Linux)
1954 ```
1955 {
1956   "policies": {
1957     "DefaultDownloadDirectory": "${home}/Downloads"
1958 }
1959 ```
1960 #### policies.json (Windows)
1961 ```
1962 {
1963   "policies": {
1964     "DefaultDownloadDirectory": "${home}\\Downloads"
1965 }
1966 ```
1967 ### DownloadDirectory
1968 Set and lock the download directory.
1969
1970 You can use ${home} for the native home directory.
1971
1972 **Compatibility:** Firefox 68, Firefox ESR 68\
1973 **CCK2 Equivalent:** N/A\
1974 **Preferences Affected:** `browser.download.dir`,`browser.download.folderList`,`browser.download.useDownloadDir`
1975
1976 #### Windows (GPO)
1977 ```
1978 Software\Policies\Mozilla\Firefox\DownloadDirectory = "${home}\Downloads"
1979 ```
1980 #### Windows (Intune)
1981 OMA-URI:
1982 ```
1983 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DownloadDirectory
1984 ```
1985 Value (string):
1986 ```
1987 <enabled/>
1988 <data id="Preferences_String" value="${home}\Downloads"/>
1989 ```
1990 #### macOS
1991 ```
1992 <dict>
1993   <key>DownloadDirectory</key>
1994   <string>${home}/Downloads</string>
1995 </dict>
1996 ```
1997 #### policies.json (macOS and Linux)
1998 ```
1999 {
2000   "policies": {
2001     "DownloadDirectory": "${home}/Downloads"
2002 }
2003 ```
2004 #### policies.json (Windows)
2005 ```
2006 {
2007   "policies": {
2008     "DownloadDirectory": "${home}\\Downloads"
2009 }
2010 ```
2011 ### EnableTrackingProtection
2012 Configure tracking protection.
2013
2014 If this policy is not configured, tracking protection is not enabled by default in the browser, but it is enabled by default in private browsing and the user can change it.
2015
2016 If `Value` is set to false, tracking protection is disabled and locked in both the regular browser and private browsing.
2017
2018 If `Value` is set to true, tracking protection is enabled by default in both the regular browser and private browsing and the `Locked` value determines whether or not a user can change it.
2019
2020 If `Cryptomining` is set to true, cryptomining scripts on websites are blocked.
2021
2022 If `Fingerprinting` is set to true, fingerprinting scripts on websites are blocked.
2023
2024 `Exceptions` are origins for which tracking protection is not enabled.
2025
2026 **Compatibility:** Firefox 60, Firefox ESR 60 (Cryptomining and Fingerprinting added in 70/68.2, Exceptions added in 73/68.5)\
2027 **CCK2 Equivalent:** N/A\
2028 **Preferences Affected:** `privacy.trackingprotection.enabled`,`privacy.trackingprotection.pbmode.enabled`,`privacy.trackingprotection.cryptomining.enabled`,`privacy.trackingprotection.fingerprinting.enabled`
2029
2030 #### Windows (GPO)
2031 ```
2032 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Value = 0x1 | 0x0
2033 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Locked = 0x1 | 0x0
2034 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Cryptomining = 0x1 | 0x0
2035 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Fingerprinting = 0x1 | 0x0
2036 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Exceptions\1 = "https://example.com"
2037 ```
2038 #### Windows (Intune)
2039 OMA-URI:
2040 ```
2041 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/A_TrackingProtection_Value
2042 ```
2043 Value (string):
2044 ```
2045 <enabled/> or <disabled/>
2046 ```
2047 OMA-URI:
2048 ```
2049 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/B_TrackingProtection_Cryptomining
2050 ```
2051 Value (string):
2052 ```
2053 <enabled/> or <disabled/>
2054 ```
2055 OMA-URI:
2056 ```
2057 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/C_TrackingProtection_Fingerprinting
2058 ```
2059 Value (string):
2060 ```
2061 <enabled/> or <disabled/>
2062 ```
2063 OMA-URI:
2064 ```
2065 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/D_TrackingProtection_Exceptions
2066 ```
2067 Value (string):
2068 ```
2069 <data id="TrackingProtection_Exceptions" value="1&#xF000;https://example.com"/>
2070 ```
2071 OMA-URI:
2072 ```
2073 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/E_TrackingProtection_Locked
2074 ```
2075 Value (string):
2076 ```
2077 <enabled/> or <disabled/>
2078 ```
2079 #### macOS
2080 ```
2081 <dict>
2082   <key>EnableTrackingProtection</key>
2083   <dict>
2084     <key>Value</key>
2085     <true/> | <false/>
2086     <key>Locked</key>
2087     <true/> | <false/>
2088     <key>Cryptomining</key>
2089     <true/> | <false/>
2090     <key>Fingerprinting</key>
2091     <true/> | <false/>
2092     <key>Exceptions</key>
2093     <array>
2094       <string>https://example.com</string>
2095     </array>
2096   </dict>
2097 </dict>
2098 ```
2099 #### policies.json
2100 ```
2101 {
2102   "policies": {
2103     "EnableTrackingProtection": {
2104       "Value": true | false,
2105       "Locked": true | false,
2106       "Cryptomining": true | false,
2107       "Fingerprinting": true | false,
2108       "Exceptions": ["https://example.com"]
2109     }
2110 }
2111 ```
2112 ### EncryptedMediaExtensions
2113 Enable or disable Encrypted Media Extensions and optionally lock it.
2114
2115 If `Enabled` is set to false, encrypted media extensions (like Widevine) are not downloaded by Firefox unless the user consents to installing them.
2116
2117 If `Locked` is set to true and `Enabled` is set to false, Firefox will not download encrypted media extensions (like Widevine) or ask the user to install them.
2118
2119 **Compatibility:** Firefox 77, Firefox ESR 68.9\
2120 **CCK2 Equivalent:** N/A\
2121 **Preferences Affected:** `media.eme.enabled`
2122
2123 #### Windows (GPO)
2124 ```
2125 Software\Policies\Mozilla\Firefox\EncryptedMediaExtensions\Enabled = 0x1 | 0x0
2126 Software\Policies\Mozilla\Firefox\EncryptedMediaExtensions\Locked = 0x1 | 0x0
2127 ```
2128 #### Windows (Intune)
2129 OMA-URI:
2130 ```
2131 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~EncryptedMediaExtensions/EncryptedMediaExtensions_Enabled
2132 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~EncryptedMediaExtensions/EncryptedMediaExtensions_Locked
2133 ```
2134 Value (string):
2135 ```
2136 <enabled/>or <disabled/>
2137 ```
2138 #### macOS
2139 ```
2140 <dict>
2141   <key>EncryptedMediaExtensions</key>
2142   <dict>
2143     <key>Enabled</key>
2144     <true/> | <false/>
2145     <key>Locked</key>
2146     <true/> | <false/>
2147   </dict>
2148 </dict>
2149 ```
2150 #### policies.json
2151 ```
2152 {
2153   "policies": {
2154     "EncryptedMediaExtensions": {
2155       "Enabled": true | false,
2156       "Locked": true | false
2157     }
2158 }
2159 ```
2160 ### EnterprisePoliciesEnabled
2161 Enable policy support on macOS.
2162
2163 **Compatibility:** Firefox 63, Firefox ESR 60.3 (macOS only)\
2164 **CCK2 Equivalent:** N/A\
2165 **Preferences Affected:** N/A
2166
2167 #### macOS
2168 ```
2169 <dict>
2170   <key>EnterprisePoliciesEnabled</key>
2171   <true/>
2172 </dict>
2173 ```
2174 ### Extensions
2175 Control the installation, uninstallation and locking of extensions.
2176
2177 `Install` is a list of URLs or native paths for extensions to be installed.
2178
2179 `Uninstall` is a list of extension IDs that should be uninstalled if found.
2180
2181 `Locked` is a list of extension IDs that the user cannot disable or uninstall.
2182
2183 **Compatibility:** Firefox 60, Firefox ESR 60\
2184 **CCK2 Equivalent:** `addons`\
2185 **Preferences Affected:** N/A
2186
2187 #### Windows (GPO)
2188 ```
2189 Software\Policies\Mozilla\Firefox\Extensions\Install\1 = "https://addons.mozilla.org/firefox/downloads/somefile.xpi"
2190 Software\Policies\Mozilla\Firefox\Extensions\Install\2 = "//path/to/xpi"
2191 Software\Policies\Mozilla\Firefox\Extensions\Uninstall\1 = "bad_addon_id@mozilla.org"
2192 Software\Policies\Mozilla\Firefox\Extensions\Locked\1 = "addon_id@mozilla.org"
2193 ```
2194 #### Windows (Intune)
2195 OMA-URI:
2196 ```
2197 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/Extensions_Install
2198 ```
2199 Value (string):
2200 ```
2201 <enabled/>
2202 <data id="Extensions" value="1&#xF000;https://addons.mozilla.org/firefox/downloads/somefile.xpi&#xF000;2&#xF000;//path/to/xpi"/>
2203 ```
2204 OMA-URI:
2205 ```
2206 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/Extensions_Uninstall
2207 ```
2208 Value (string):
2209 ```
2210 <enabled/>
2211 <data id="Extensions" value="1&#xF000;bad_addon_id@mozilla.org"/>
2212 ```
2213 OMA-URI:
2214 ```
2215 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/Extensions_Locked
2216 ```
2217 Value (string):
2218 ```
2219 <enabled/>
2220 <data id="Extensions" value="1&#xF000;addon_id@mozilla.org"/>
2221 ```
2222 #### macOS
2223 ```
2224 <dict>
2225   <key>Extensions</key>
2226   <dict>
2227     <key>Install</key>
2228     <array>
2229       <string>https://addons.mozilla.org/firefox/downloads/somefile.xpi</string>
2230       <string>//path/to/xpi</string>
2231     </array>
2232     <key>Uninstall</key>
2233     <array>
2234       <string>bad_addon_id@mozilla.org</string>
2235     </array>
2236     <key>Locked</key>
2237     <array>
2238       <string>addon_id@mozilla.org</string>
2239     </array>
2240   </dict>
2241 </dict>
2242 ```
2243 #### policies.json
2244 ```
2245 {
2246   "policies": {
2247     "Extensions": {
2248       "Install": ["https://addons.mozilla.org/firefox/downloads/somefile.xpi", "//path/to/xpi"],
2249       "Uninstall": ["bad_addon_id@mozilla.org"],
2250       "Locked":  ["addon_id@mozilla.org"]
2251     }
2252   }
2253 }
2254 ```
2255 ### ExtensionSettings
2256 Manage all aspects of extensions. This policy is based heavily on the [Chrome policy](https://dev.chromium.org/administrators/policy-list-3/extension-settings-full) of the same name.
2257
2258 This policy maps an extension ID to its configuration. With an extension ID, the configuration will be applied to the specified extension only. A default configuration can be set for the special ID "*", which will apply to all extensions that don't have a custom configuration set in this policy.
2259
2260 To obtain an extension ID, install the extension and go to about:support. You will see the ID in the Extensions section. I've also created an extension that makes it easy to find the ID of extensions on AMO. You can download it [here](https://github.com/mkaply/queryamoid/releases/tag/v0.1).
2261
2262 The configuration for each extension is another dictionary that can contain the fields documented below.
2263
2264 | Name | Description |
2265 | --- | --- |
2266 | `installation_mode` | Maps to a string indicating the installation mode for the extension. The valid strings are `allowed`,`blocked`,`force_installed`, and `normal_installed`.
2267 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`allowed` | Allows the extension to be installed by the user. This is the default behavior. There is no need for an install_url; it will automatically be allowed based on the ID.
2268 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`blocked`| Blocks installation of the extension and removes it from the device if already installed.
2269 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`force_installed`| The extension is automatically installed and can't be removed by the user. This option is not valid for the default configuration and requires an install_url.
2270 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`normal_installed`| The extension is automatically installed but can be disabled by the user. This option is not valid for the default configuration and requires an install_url.
2271 | `install_url`| Maps to a URL indicating where Firefox can download a force_installed or normal_installed extension. If installing from the addons.mozilla.org, use the following URL (substituting SHORT_NAME from the URL on AMO), https://addons.mozilla.org/firefox/downloads/latest/SHORT_NAME/latest.xpi. If installing from the local file system, use a file:/// URL. Languages packs are available from https://releases.mozilla.org/pub/firefox/releases/VERSION/PLATFORM/xpi/LANGUAGE.xpi. If you need to update the extension, you can change the name of the extension and it will be automatically updated. Extensions installed from file URLs will additional be updated when their internal version changes.
2272 | `install_sources` | A list of sources from which installing extensions is allowed. **This is unnecessary if you are only allowing the installation of certain extensions by ID.** Each item in this list is an extension-style match pattern. Users will be able to easily install items from any URL that matches an item in this list. Both the location of the *.xpi file and the page where the download is started from (i.e.  the referrer) must be allowed by these patterns. This setting can be used only for the default configuration.
2273 | `allowed_types` | This setting whitelists the allowed types of extension/apps that can be installed in Firefox. The value is a list of strings, each of which should be one of the following: "extension", "theme", "dictionary", "locale" This setting can be used only for the default configuration.
2274 | `blocked_install_message` | This maps to a string specifying the error message to display to users if they're blocked from installing an extension. This setting allows you to append text to the generic error message displayed when the extension is blocked. This could be be used to direct users to your help desk, explain why a particular extension is blocked, or something else. This setting can be used only for the default configuration.
2275 | `restricted_domains` | An array of domains on which content scripts can't be run. This setting can be used only for the default configuration.
2276
2277 **Compatibility:** Firefox 69, Firefox ESR 68.1 (As of Firefox 85, Firefox ESR 78.7, installing a theme makes it the default.)\
2278 **CCK2 Equivalent:** N/A\
2279 **Preferences Affected:** N/A
2280
2281 #### Windows (GPO)
2282 Software\Policies\Mozilla\Firefox\ExtensionSettings (REG_MULTI_SZ) =
2283 ```
2284 {
2285   "*": {
2286     "blocked_install_message": "Custom error message.",
2287     "install_sources": ["about:addons","https://addons.mozilla.org/"],
2288     "installation_mode": "blocked",
2289     "allowed_types": ["extension"]
2290   },
2291   "uBlock0@raymondhill.net": {
2292     "installation_mode": "force_installed",
2293     "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
2294   },
2295   "https-everywhere@eff.org": {
2296     "installation_mode": "allowed",
2297   }
2298 }
2299 ```
2300 #### Windows (Intune)
2301 OMA-URI:
2302 ```
2303 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/ExtensionSettings
2304 ```
2305 Value (string):
2306 ```
2307 <enabled/>
2308 <data id="ExtensionSettings" value='
2309 {
2310   "*": {
2311     "blocked_install_message": "Custom error message.",
2312     "install_sources": ["about:addons","https://addons.mozilla.org/"],
2313     "installation_mode": "blocked",
2314     "allowed_types": ["extension"]
2315   },
2316   "uBlock0@raymondhill.net": {
2317     "installation_mode": "force_installed",
2318     "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
2319   },
2320     "https-everywhere@eff.org": {
2321     "installation_mode": "allowed",
2322   }
2323 }'/>
2324 ```
2325 #### macOS
2326 ```
2327 <dict>
2328   <key>ExtensionSettings</key>
2329   <dict>
2330     <key>*</key>
2331     <dict>
2332       <key>blocked_install_message</key>
2333       <string>Custom error message.</string>
2334       <key>install_sources</key>
2335       <array>
2336         <string>about:addons</string>
2337         <string>https://addons.mozilla.org/</string>
2338       </array>
2339       <key>installation_mode</key>
2340       <string>blocked</string>
2341       <key>allowed_types</key>
2342       <array>
2343         <string>extension</string>
2344       </array>
2345     </dict>
2346     <key>uBlock0@raymondhill.net</key>
2347     <dict>
2348       <key>installation_mode</key>
2349        <string>force_installed</string>
2350       <key>install_url</key>
2351       <string>https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi</string>
2352     </dict>
2353     <key>https-everywhere@eff.org</key>
2354     <dict>
2355       <key>installation_mode</key>
2356        <string>allowed</string>
2357     </dict>
2358   </dict>
2359 </dict>
2360 ```
2361 #### policies.json
2362 ```
2363 {
2364   "policies": {
2365     "ExtensionSettings": {
2366       "*": {
2367         "blocked_install_message": "Custom error message.",
2368         "install_sources": ["about:addons","https://addons.mozilla.org/"],
2369         "installation_mode": "blocked",
2370         "allowed_types": ["extension"]
2371       },
2372       "uBlock0@raymondhill.net": {
2373         "installation_mode": "force_installed",
2374         "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
2375       },
2376       "https-everywhere@eff.org": {
2377         "installation_mode": "allowed"
2378       }
2379     }
2380   }
2381 }
2382 ```
2383 ### ExtensionUpdate
2384 Control extension updates.
2385
2386 **Compatibility:** Firefox 67, Firefox ESR 60.7\
2387 **CCK2 Equivalent:** N/A\
2388 **Preferences Affected:** `extensions.update.enabled`
2389
2390 #### Windows (GPO)
2391 ```
2392 Software\Policies\Mozilla\Firefox\ExtensionUpdate = 0x1 | 0x0
2393 ```
2394 #### Windows (Intune)
2395 OMA-URI:
2396 ```
2397 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/ExtensionUpdate
2398 ```
2399 Value (string):
2400 ```
2401 <enabled/> or <disabled/>
2402 ```
2403 #### macOS
2404 ```
2405 <dict>
2406   <key>ExtensionUpdate</key>
2407   <true/> | <false/>
2408 </dict>
2409 ```
2410 #### policies.json
2411 ```
2412 {
2413   "policies": {
2414     "ExtensionUpdate": true | false
2415   }
2416 }
2417 ```
2418 ### FlashPlugin
2419 Configure the default Flash plugin policy as well as origins for which Flash is allowed.
2420
2421 `Allow` is a list of origins where Flash are allowed.
2422
2423 `Block` is a list of origins where Flash is not allowed.
2424
2425 `Default` determines whether or not Flash is allowed by default.
2426
2427 `Locked` prevents the user from changing Flash preferences.
2428
2429 **Compatibility:** Firefox 60, Firefox ESR 60\
2430 **CCK2 Equivalent:** `permissions.plugin`\
2431 **Preferences Affected:** `plugin.state.flash`
2432
2433 #### Windows (GPO)
2434 ```
2435 Software\Policies\Mozilla\Firefox\FlashPlugin\Allow\1 = "https://example.org"
2436 Software\Policies\Mozilla\Firefox\FlashPlugin\Block\1 = "https://example.edu"
2437 Software\Policies\Mozilla\Firefox\FlashPlugin\Default = 0x1 | 0x0
2438 Software\Policies\Mozilla\Firefox\FlashPlugin\Locked = 0x1 | 0x0
2439 ```
2440 #### Windows (Intune)
2441 OMA-URI:
2442 ```
2443 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Flash/FlashPlugin_Allow
2444 ```
2445 Value (string):
2446 ```
2447 <enabled/>
2448 <data id="Permissions" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
2449 ```
2450 OMA-URI:
2451 ```
2452 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Flash/FlashPlugin_Locked
2453 ```
2454 Value (string):
2455 ```
2456 <enabled/> or <disabled/>
2457 ```
2458 OMA-URI:
2459 ```
2460 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Flash/FlashPlugin_Default
2461 ```
2462 Value (string):
2463 ```
2464 <enabled/> or <disabled/>
2465 ```
2466 #### macOS
2467 ```
2468 <dict>
2469   <key>FlashPlugin</key>
2470   <dict>
2471     <key>Allow</key>
2472     <array>
2473       <string>http://example.org</string>
2474     </array>
2475     <key>Block</key>
2476     <array>
2477       <string>http://example.edu</string>
2478     </array>
2479     <key>Default</key>
2480     <true/> | <false/>
2481     <key>Locked</key>
2482     <true/> | <false/>
2483   </dict>
2484 </dict>
2485 ```
2486 #### policies.json
2487 ```
2488 {
2489   "policies": {
2490     "FlashPlugin": {
2491       "Allow": ["http://example.org/"],
2492       "Block": ["http://example.edu/"],
2493       "Default": true | false,
2494       "Locked": true | false
2495     }
2496   }
2497 }
2498 ```
2499
2500
2501
2502 ### Handlers
2503 Configure default application handlers. This policy is based on the internal format of `handlers.json`.
2504
2505 You can configure handlers based on a mime type (`mimeTypes`), a file's extension (`extensions`), or a protocol (`schemes`).
2506
2507 Within each handler type, you specify the given mimeType/extension/scheme as a key and use the following subkeys to describe how it is handled.
2508
2509 | Name | Description |
2510 | --- | --- |
2511 | `action`| Can be either `saveToDisk`, `useHelperApp`, `useSystemDefault`.
2512 | `ask` | If `true`, the user is asked if what they want to do with the file. If `false`, the action is taken without user intervention.
2513 | `handlers` | An array of handlers with the first one being the default. If you don't want to have a default handler, use an empty object for the first handler. Choose between path or uriTemplate.
2514 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`name` | The display name of the handler (might not be used).
2515 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`path`| The native path to the executable to be used.
2516 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`uriTemplate`| A url to a web based application handler. The URL must be https and contain a %s to be used for substitution.
2517
2518 **Compatibility:** Firefox 78, Firefox ESR 78\
2519 **CCK2 Equivalent:** N/A\
2520 **Preferences Affected:** N/A
2521
2522 #### Windows (GPO)
2523 Software\Policies\Mozilla\Firefox\Handlers (REG_MULTI_SZ) =
2524 ```
2525 {
2526   "mimeTypes": {
2527     "application/msword": {
2528       "action": "useSystemDefault",
2529       "ask": true | false
2530     }
2531   },
2532   "schemes": {
2533     "mailto": {
2534       "action": "useHelperApp",
2535       "ask": true | false,
2536       "handlers": [{
2537         "name": "Gmail",
2538         "uriTemplate": "https://mail.google.com/mail/?extsrc=mailto&url=%s"
2539       }]
2540     }
2541   },
2542   "extensions": {
2543     "pdf": {
2544       "action": "useHelperApp",
2545       "ask": true | false,
2546       "handlers": [{
2547         "name": "Adobe Acrobat",
2548         "path": "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32.exe"
2549       }]
2550     }
2551   }
2552 }
2553 ```
2554 #### Windows (Intune)
2555 OMA-URI:
2556 ```
2557 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Handlers
2558 ```
2559 Value (string):
2560 ```
2561 <enabled/>
2562 <data id="Handlers" value='
2563 {
2564   "mimeTypes": {
2565     "application/msword": {
2566       "action": "useSystemDefault",
2567       "ask": true | false
2568     }
2569   },
2570   "schemes": {
2571     "mailto": {
2572       "action": "useHelperApp",
2573       "ask": true | false,
2574       "handlers": [{
2575         "name": "Gmail",
2576         "uriTemplate": "https://mail.google.com/mail/?extsrc=mailto&amp;url=%s"
2577       }]
2578     }
2579   },
2580   "extensions": {
2581     "pdf": {
2582       "action": "useHelperApp",
2583       "ask": true | false,
2584       "handlers": [{
2585         "name": "Adobe Acrobat",
2586         "path": "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32.exe"
2587       }]
2588     }
2589   }
2590 }
2591 '/>
2592 ```
2593 #### macOS
2594 ```
2595 <dict>
2596   <key>Handlers</key>
2597   <dict>
2598     <key>mimeTypes</key>
2599     <dict>
2600       <key>application/msword</key>
2601       <dict>
2602         <key>action</key>
2603         <string>useSystemDefault</string>
2604         <key>ask</key>
2605         <true/> | <false/>
2606       </dict>
2607     </dict>
2608     <key>schemes</key>
2609     <dict>
2610       <key>mailto</key>
2611       <dict>
2612         <key>action</key>
2613         <string>useHelperApp</string>
2614         <key>ask</key>
2615         <true/> | <false/>
2616         <key>handlers</key>
2617         <array>
2618           <dict>
2619             <key>name</key>
2620             <string>Gmail</string>
2621             <key>uriTemplate</key>
2622             <string>https://mail.google.com/mail/?extsrc=mailto&url=%s</string>
2623           </dict>
2624         </array>
2625       </dict>
2626     </dict>
2627     <key>extensions</key>
2628     <dict>
2629       <key>pdf</key>
2630       <dict>
2631         <key>action</key>
2632         <string>useHelperApp</string>
2633         <key>ask</key>
2634         <true/> | <false/>
2635         <key>handlers</key>
2636         <array>
2637           <dict>
2638             <key>name</key>
2639             <string>Adobe Acrobat</string>
2640             <key>path</key>
2641             <string>/System/Applications/Preview.app</string>
2642           </dict>
2643         </array>
2644       </dict>
2645     </dict>
2646   </dict>
2647 </dict>
2648 ```
2649 #### policies.json
2650 ```
2651 {
2652   "policies": {
2653     "Handlers": {
2654       "mimeTypes": {
2655         "application/msword": {
2656           "action": "useSystemDefault",
2657           "ask": false
2658         }
2659       },
2660       "schemes": {
2661         "mailto": {
2662           "action": "useHelperApp",
2663           "ask": true | false,
2664           "handlers": [{
2665             "name": "Gmail",
2666             "uriTemplate": "https://mail.google.com/mail/?extsrc=mailto&url=%s"
2667           }]
2668         }
2669       },
2670       "extensions": {
2671         "pdf": {
2672           "action": "useHelperApp",
2673           "ask": true | false,
2674           "handlers": [{
2675             "name": "Adobe Acrobat",
2676             "path": "/usr/bin/acroread"
2677           }]
2678         }
2679       }
2680     }
2681   }
2682 }
2683 ```
2684 ### FirefoxHome
2685 Customize the Firefox Home page.
2686
2687 **Compatibility:** Firefox 68, Firefox ESR 68\
2688 **CCK2 Equivalent:** N/A\
2689 **Preferences Affected:** `browser.newtabpage.activity-stream.showSearch`,`browser.newtabpage.activity-stream.feeds.topsites`,`browser.newtabpage.activity-stream.feeds.section.highlights`,`browser.newtabpage.activity-stream.feeds.section.topstories`,`browser.newtabpage.activity-stream.feeds.snippets`
2690
2691 #### Windows (GPO)
2692 ```
2693 Software\Policies\Mozilla\Firefox\FirefoxHome\Search = 0x1 | 0x0
2694 Software\Policies\Mozilla\Firefox\FirefoxHome\TopSites = 0x1 | 0x0
2695 Software\Policies\Mozilla\Firefox\FirefoxHome\Highlights = 0x1 | 0x0
2696 Software\Policies\Mozilla\Firefox\FirefoxHome\Pocket = 0x1 | 0x0
2697 Software\Policies\Mozilla\Firefox\FirefoxHome\Snippets = 0x1 | 0x0
2698 Software\Policies\Mozilla\Firefox\FirefoxHome\Locked = 0x1 | 0x0
2699 ```
2700 #### Windows (Intune)
2701 OMA-URI:
2702 ```
2703 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/CustomizeFirefoxHome
2704 ```
2705 Value (string):
2706 ```
2707 <enabled/>
2708 <data id="FirefoxHome_Search"  value="true | false"/>
2709 <data id="FirefoxHome_TopSites"  value="true | false"/>
2710 <data id="FirefoxHome_Highlights"  value="true | false"/>
2711 <data id="FirefoxHome_Pocket"  value="true | false"/>
2712 <data id="FirefoxHome_Snippets"  value="true | false"/>
2713 <data id="FirefoxHome_Locked"  value="true | false"/>
2714 ```
2715 #### macOS
2716 ```
2717 <dict>
2718   <key>FirefoxHome</key>
2719   <dict>
2720     <key>Search</key>
2721     <true/> | <false/>
2722     <key>TopSites</key>
2723     <true/> | <false/>
2724     <key>Highlights</key>
2725     <true/> | <false/>
2726     <key>Pocket</key>
2727     <true/> | <false/>
2728     <key>Snippets</key>
2729     <true/> | <false/>
2730     <key>Locked</key>
2731     <true/> | <false/>
2732   </dict>
2733 </dict>
2734 ```
2735 #### policies.json
2736 ```
2737 {
2738   "policies": {
2739     "FirefoxHome": {
2740       "Search": true | false,
2741       "TopSites": true | false,
2742       "Highlights": true | false,
2743       "Pocket": true | false,
2744       "Snippets": true | false,
2745       "Locked": true | false
2746     }
2747   }
2748 }
2749 ```
2750 ### HardwareAcceleration
2751 Control hardware acceleration.
2752
2753 **Compatibility:** Firefox 60, Firefox ESR 60\
2754 **CCK2 Equivalent:** N/A\
2755 **Preferences Affected:** `layers.acceleration.disabled`
2756
2757 #### Windows (GPO)
2758 ```
2759 Software\Policies\Mozilla\Firefox\HardwareAcceleration = 0x1 | 0x0
2760 ```
2761 #### Windows (Intune)
2762 OMA-URI:
2763 ```
2764 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/HardwareAcceleration
2765 ```
2766 Value (string):
2767 ```
2768 <enabled/> or <disabled/>
2769 ```
2770 #### macOS
2771 ```
2772 <dict>
2773   <key>HardwareAcceleration</key>
2774   <true/> | <false/>
2775 </dict>
2776 ```
2777 #### policies.json
2778 ```
2779 {
2780   "policies": {
2781     "HardwareAcceleration": true | false
2782   }
2783 }
2784 ```
2785 ### Homepage
2786 Configure the default homepage and how Firefox starts.
2787
2788 `URL` is the default homepage.
2789
2790 `Locked` prevents the user from changing homepage preferences.
2791
2792 `Additional` allows for more than one homepage.
2793
2794 `StartPage` is how Firefox starts. The choices are no homepage, the default homepage or the previous session.
2795
2796 With Firefox 78, an additional option as added for `Startpage`, `homepage-locked`. If this is value is set for the Startpage, the user will always get the homepage at startup and cannot choose to restore their session.
2797
2798 **Compatibility:** Firefox 60, Firefox ESR 60 (StartPage was added in Firefox 60, Firefox ESR 60.4, homepage-locked added in Firefox 78)\
2799 **CCK2 Equivalent:** `homePage`,`lockHomePage`\
2800 **Preferences Affected:** `browser.startup.homepage`,`browser.startup.page`
2801
2802 #### Windows (GPO)
2803 ```
2804 Software\Policies\Mozilla\Firefox\Homepage\URL = "https://example.com"
2805 Software\Policies\Mozilla\Firefox\Homepage\Locked = 0x1 | 0x0
2806 Software\Policies\Mozilla\Firefox\Homepage\Additional\1 = "https://example.org"
2807 Software\Policies\Mozilla\Firefox\Homepage\Additional\2 = "https://example.edu"
2808 Software\Policies\Mozilla\Firefox\Homepage\StartPage = "none" | "homepage" | "previous-session" | "homepage-locked"
2809 ```
2810 #### Windows (Intune)
2811 OMA-URI:
2812 ```
2813 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageURL
2814 ```
2815 Value (string):
2816 ```
2817 <enabled/>
2818
2819 <data id="HomepageURL" value="https://example.com"/>
2820 <data id="HomepageLocked" value="true | false"/>
2821 ```
2822 OMA-URI:
2823 ```
2824 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageAdditional
2825 ```
2826 Value (string):
2827 ```
2828 <enabled/>
2829
2830 <data id="HomepageAdditional" value="1&#xF000;http://example.org&#xF000;2&#xF000;http://example.edu"/>
2831 ```
2832 OMA-URI:
2833 ```
2834 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageStartPage
2835 ```
2836 Value (string):
2837 ```
2838 <enabled/>
2839
2840 <data id="StartPage" value="none | homepage | previous-session"/>
2841 ```
2842 #### macOS
2843 ```
2844 <dict>
2845   <key>Homepage</key>
2846   <dict>
2847     <key>URL</key>
2848     <string>http://example.com</string>
2849     <key>Locked</key>
2850     <true/> | <false/>
2851     <key>Additional</key>
2852     <array>
2853       <string>http://example.org</string>
2854       <string>http://example.edu</string>
2855     </array>
2856     <key>StartPage</key>
2857     <string>none | homepage | previous-session | homepage-locked</string>
2858   </dict>
2859 </dict>
2860 ```
2861 #### policies.json
2862 ```
2863 {
2864   "policies": {
2865     "Homepage": {
2866       "URL": "http://example.com/",
2867       "Locked": true | false,
2868       "Additional": ["http://example.org/",
2869                      "http://example.edu/"],
2870       "StartPage": "none" | "homepage" | "previous-session" | "homepage-locked"
2871     }
2872   }
2873 }
2874 ```
2875 ### InstallAddonsPermission
2876 Configure the default extension install policy as well as origins for extension installs are allowed. This policy does not override turning off all extension installs.
2877
2878 `Allow` is a list of origins where extension installs are allowed.
2879
2880 `Default` determines whether or not extension installs are allowed by default.
2881
2882 **Compatibility:** Firefox 60, Firefox ESR 60\
2883 **CCK2 Equivalent:** `permissions.install`\
2884 **Preferences Affected:** `xpinstall.enabled`
2885
2886 #### Windows (GPO)
2887 ```
2888 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Allow\1 = "https://example.org"
2889 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Allow\2 = "https://example.edu"
2890 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Default = 0x1 | 0x0
2891 ```
2892 #### Windows (Intune)
2893 OMA-URI:
2894 ```
2895 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Addons/InstallAddonsPermission_Allow
2896 ```
2897 Value (string):
2898 ```
2899 <enabled/>
2900 <data id="Permissions" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
2901 ```
2902 OMA-URI:
2903 ```
2904 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Addons/InstallAddonsPermission_Default
2905 ```
2906 Value (string):
2907 ```
2908 <enabled/>
2909 ```
2910 #### macOS
2911 ```
2912 <dict>
2913   <key>InstallAddonsPermission</key>
2914   <dict>
2915     <key>Allow</key>
2916     <array>
2917       <string>http://example.org</string>
2918       <string>http://example.edu</string>
2919     </array>
2920     <key>Default</key>
2921     <true/> | <false/>
2922   </dict>
2923 </dict>
2924 ```
2925 #### policies.json
2926 ```
2927 {
2928   "policies": {
2929     "InstallAddonsPermission": {
2930       "Allow": ["http://example.org/",
2931                 "http://example.edu/"],
2932       "Default": true | false
2933     }
2934   }
2935 }
2936 ```
2937 ### LegacyProfiles
2938 Disable the feature enforcing a separate profile for each installation.
2939
2940 If this policy set to true, Firefox will not try to create different profiles for installations of Firefox in different directories. This is the equivalent of the MOZ_LEGACY_PROFILES environment variable.
2941
2942 If this policy set to false, Firefox will create a new profile for each unique installation of Firefox.
2943
2944 This policy only work on Windows via GPO (not policies.json).
2945
2946 **Compatibility:** Firefox 70, Firefox ESR 68.2 (Windows only, GPO only)\
2947 **CCK2 Equivalent:** N/A\
2948 **Preferences Affected:** N/A
2949
2950 #### Windows (GPO)
2951 ```
2952 Software\Policies\Mozilla\Firefox\LegacyProfiles = = 0x1 | 0x0
2953 ```
2954 #### Windows (Intune)
2955 OMA-URI:
2956 ```
2957 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/LegacyProfiles
2958 ```
2959 Value (string):
2960 ```
2961 <enabled/> or <disabled/>
2962 ```
2963 ### LocalFileLinks
2964 Enable linking to local files by origin.
2965
2966 **Compatibility:** Firefox 68, Firefox ESR 68\
2967 **CCK2 Equivalent:** N/A\
2968 **Preferences Affected:** `capability.policy.localfilelinks.*`
2969
2970 #### Windows (GPO)
2971 ```
2972 Software\Policies\Mozilla\Firefox\LocalFileLinks\1 = "https://example.org"
2973 Software\Policies\Mozilla\Firefox\LocalFileLinks\2 = "https://example.edu"
2974 ```
2975 #### Windows (Intune)
2976 OMA-URI:
2977 ```
2978 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/LocalFileLinks
2979 ```
2980 Value (string):
2981 ```
2982 <enabled/>
2983 <data id="LocalFileLinks" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
2984 ```
2985 #### macOS
2986 ```
2987 <dict>
2988   <key>LocalFileLinks</key>
2989   <array>
2990     <string>http://example.org</string>
2991     <string>http://example.edu</string>
2992   </array>
2993 </dict>
2994 ```
2995 #### policies.json
2996 ```
2997 {
2998   "policies": {
2999     "LocalFileLinks": ["http://example.org/",
3000                        "http://example.edu/"]
3001   }
3002 }
3003 ```
3004 ### ManagedBookmarks
3005 Configures a list of bookmarks managed by an administrator that cannot be changed by the user.
3006
3007 The bookmarks are only added as a button on the personal toolbar. They are not in the bookmarks folder.
3008
3009 The syntax of this policy is exactly the same as the [Chrome ManagedBookmarks policy](https://cloud.google.com/docs/chrome-enterprise/policies/?policy=ManagedBookmarks). The schema is:
3010 ```
3011 {
3012  "items": {
3013   "id": "BookmarkType",
3014   "properties": {
3015    "children": {
3016     "items": {
3017      "$ref": "BookmarkType"
3018     },
3019     "type": "array"
3020    },
3021    "name": {
3022     "type": "string"
3023    },
3024    "toplevel_name": {
3025     "type": "string"
3026    },
3027    "url": {
3028     "type": "string"
3029    }
3030   },
3031   "type": "object"
3032  },
3033  "type": "array"
3034 }
3035 ```
3036 **Compatibility:** Firefox 83, Firefox ESR 78.5\
3037 **CCK2 Equivalent:** N/A\
3038 **Preferences Affected:** N/A
3039
3040 #### Windows (GPO)
3041 Software\Policies\Mozilla\Firefox\ManagedBookmarks (REG_MULTI_SZ) =
3042 ```
3043 [
3044   {
3045     "toplevel_name": "My managed bookmarks folder"
3046   },
3047   {
3048     "url": "example.com",
3049     "name": "Example"
3050   },
3051   {
3052     "name": "Mozilla links",
3053     "children": [
3054       {
3055         "url": "https://mozilla.org",
3056         "name": "Mozilla.org"
3057       },
3058       {
3059         "url": "https://support.mozilla.org/",
3060         "name": "SUMO"
3061       }
3062     ]
3063   }
3064 ]
3065 ```
3066 #### Windows (Intune)
3067 OMA-URI:
3068 ```
3069 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/ManagedBookmarks
3070 ```
3071 Value (string):
3072 ```
3073 <enabled/>
3074 <data id="JSON" value='
3075 [
3076   {
3077     "toplevel_name": "My managed bookmarks folder"
3078   },
3079   {
3080     "url": "example.com",
3081     "name": "Example"
3082   },
3083   {
3084     "name": "Mozilla links",
3085     "children": [
3086       {
3087         "url": "https://mozilla.org",
3088         "name": "Mozilla.org"
3089       },
3090       {
3091         "url": "https://support.mozilla.org/",
3092         "name": "SUMO"
3093       }
3094     ]
3095   }
3096 ]'/>
3097 ```
3098 #### macOS
3099 ```
3100 <dict>
3101   <key>ManagedBookmarks</key>
3102   <array>
3103     <dict>
3104       <key>toplevel_name</key>
3105       <string>My managed bookmarks folder</string></dict>
3106       <dict>
3107         <key>url</key>
3108         <string>example.com</string>
3109         <key>name</key>
3110         <string>Example</string>
3111       </dict>
3112       <dict>
3113       <key>name</key>
3114       <string>Mozilla links</string>
3115       <key>children</key>
3116       <array>
3117         <dict>
3118           <key>url</key>
3119           <string>https://mozilla.org</string>
3120           <key>name</key>
3121           <string>Mozilla</string>
3122         </dict>
3123         <dict>
3124           <key>url</key>
3125           <string>https://support.mozilla.org/</string>
3126           <key>name</key>
3127           <string>SUMO</string>
3128         </dict>
3129       </array>
3130     </dict>
3131   </array>
3132 </dict>
3133 ```
3134 #### policies.json
3135 ```
3136 {
3137   "policies": {
3138     "ManagedBookmarks": [
3139       {
3140         "toplevel_name": "My managed bookmarks folder"
3141       },
3142       {
3143         "url": "example.com",
3144         "name": "Example"
3145       },
3146       {
3147         "name": "Mozilla links",
3148         "children": [
3149           {
3150             "url": "https://mozilla.org",
3151             "name": "Mozilla.org"
3152           },
3153           {
3154             "url": "https://support.mozilla.org/",
3155             "name": "SUMO"
3156           }
3157         ]
3158       }
3159     ]
3160   }
3161 }
3162 ```
3163 ### PrimaryPassword
3164 Require or prevent using a primary (formerly master) password.
3165
3166 If this value is true, a primary password is required. If this value is false, it works the same as if [`DisableMasterPasswordCreation`](#disablemasterpasswordcreation) was true and removes the primary password functionality.
3167
3168 If both DisableMasterPasswordCreation and PrimaryPassword are used, DisableMasterPasswordCreation takes precedent.
3169
3170 **Compatibility:** Firefox 79, Firefox ESR 78.1\
3171 **CCK2 Equivalent:** `noMasterPassword`\
3172 **Preferences Affected:** N/A
3173
3174 #### Windows (GPO)
3175 ```
3176 Software\Policies\Mozilla\Firefox\PrimaryPassword = 0x1 | 0x0
3177 ```
3178 #### Windows (Intune)
3179 OMA-URI:
3180 ```
3181 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PrimaryPassword
3182 ```
3183 Value (string):
3184 ```
3185 <enabled/> or <disabled/>
3186 ```
3187 #### macOS
3188 ```
3189 <dict>
3190   <key>PrimaryPassword</key>
3191   <true/> | <false/>
3192 </dict>
3193 ```
3194 #### policies.json
3195 ```
3196 {
3197   "policies": {
3198     "PrimaryPassword": true | false
3199   }
3200 }
3201 ```
3202 ### NetworkPrediction
3203 Enable or disable network prediction (DNS prefetching).
3204
3205 **Compatibility:** Firefox 67, Firefox ESR 60.7\
3206 **CCK2 Equivalent:** N/A\
3207 **Preferences Affected:** `network.dns.disablePrefetch`,`network.dns.disablePrefetchFromHTTPS`
3208
3209 #### Windows (GPO)
3210 ```
3211 Software\Policies\Mozilla\Firefox\NetworkPrediction = 0x1 | 0x0
3212 ```
3213 #### Windows (Intune)
3214 OMA-URI:
3215 ```
3216 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NetworkPrediction
3217 ```
3218 Value (string):
3219 ```
3220 <enabled/> or <disabled/>
3221 ```
3222 #### macOS
3223 ```
3224 <dict>
3225   <key>NetworkPrediction</key>
3226   <true/> | <false/>
3227 </dict>
3228 ```
3229 #### policies.json
3230 ```
3231 {
3232   "policies": {
3233     "NetworkPrediction": true | false
3234 }
3235 ```
3236 ### NewTabPage
3237 Enable or disable the New Tab page.
3238
3239 **Compatibility:** Firefox 68, Firefox ESR 68\
3240 **CCK2 Equivalent:** N/A\
3241 **Preferences Affected:** `browser.newtabpage.enabled`
3242
3243 #### Windows (GPO)
3244 ```
3245 Software\Policies\Mozilla\Firefox\NewTabPage = 0x1 | 0x0
3246 ```
3247 #### Windows (Intune)
3248 OMA-URI:
3249 ```
3250 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NewTabPage
3251 ```
3252 Value (string):
3253 ```
3254 <enabled/> or <disabled/>
3255 ```
3256 #### macOS
3257 ```
3258 <dict>
3259   <key>NewTabPage</key>
3260   <true/> | <false/>
3261 </dict>
3262 ```
3263 #### policies.json
3264 ```
3265 {
3266   "policies": {
3267     "NewTabPage": true | false
3268 }
3269 ```
3270 ### NoDefaultBookmarks
3271 Disable the creation of default bookmarks.
3272
3273 This policy is only effective if the user profile has not been created yet.
3274
3275 **Compatibility:** Firefox 60, Firefox ESR 60\
3276 **CCK2 Equivalent:** `removeDefaultBookmarks`\
3277 **Preferences Affected:** N/A
3278
3279 #### Windows (GPO)
3280 ```
3281 Software\Policies\Mozilla\Firefox\NoDefaultBookmarks = 0x1 | 0x0
3282 ```
3283 #### Windows (Intune)
3284 OMA-URI:
3285 ```
3286 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NoDefaultBookmarks
3287 ```
3288 Value (string):
3289 ```
3290 <enabled/> or <disabled/>
3291 ```
3292 #### macOS
3293 ```
3294 <dict>
3295   <key>NoDefaultBookmarks</key>
3296   <true/> | <false/>
3297 </dict>
3298 ```
3299 #### policies.json
3300 ```
3301 {
3302   "policies": {
3303     "NoDefaultBookmarks": true | false
3304   }
3305 }
3306 ```
3307 ### OfferToSaveLogins
3308 Control whether or not Firefox offers to save passwords.
3309
3310 **Compatibility:** Firefox 60, Firefox ESR 60\
3311 **CCK2 Equivalent:** `dontRememberPasswords`\
3312 **Preferences Affected:** `signon.rememberSignons`
3313
3314 #### Windows (GPO)
3315 ```
3316 Software\Policies\Mozilla\Firefox\OfferToSaveLogins = 0x1 | 0x0
3317 ```
3318 #### Windows (Intune)
3319 OMA-URI:
3320 ```
3321 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OfferToSaveLogins
3322 ```
3323 Value (string):
3324 ```
3325 <enabled/> or <disabled/>
3326 ```
3327 #### macOS
3328 ```
3329 <dict>
3330   <key>OfferToSaveLogins</key>
3331   <true/> | <false/>
3332 </dict>
3333 ```
3334 #### policies.json
3335 ```
3336 {
3337   "policies": {
3338     "OfferToSaveLogins": true | false
3339   }
3340 }
3341 ```
3342 ### OfferToSaveLoginsDefault
3343 Sets the default value of signon.rememberSignons without locking it.
3344
3345 **Compatibility:** Firefox 70, Firefox ESR 60.2\
3346 **CCK2 Equivalent:** `dontRememberPasswords`\
3347 **Preferences Affected:** `signon.rememberSignons`
3348
3349 #### Windows (GPO)
3350 ```
3351 Software\Policies\Mozilla\Firefox\OfferToSaveLoginsDefault = 0x1 | 0x0
3352 ```
3353 #### Windows (Intune)
3354 OMA-URI:
3355 ```
3356 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OfferToSaveLoginsDefault
3357 ```
3358 Value (string):
3359 ```
3360 <enabled/> or <disabled/>
3361 ```
3362 #### macOS
3363 ```
3364 <dict>
3365   <key>OfferToSaveLoginsDefault</key>
3366   <true/> | <false/>
3367 </dict>
3368 ```
3369 #### policies.json
3370 ```
3371 {
3372   "policies": {
3373     "OfferToSaveLoginsDefault": true | false
3374   }
3375 }
3376 ```
3377 ### OverrideFirstRunPage
3378 Override the first run page. If the value is an empty string (""), the first run page is not displayed.
3379
3380 Starting with Firefox 83, Firefox ESR 78.5, you can also specify multiple URLS separated by a vertical bar (|).
3381
3382 **Compatibility:** Firefox 60, Firefox ESR 60\
3383 **CCK2 Equivalent:** `welcomePage`,`noWelcomePage`\
3384 **Preferences Affected:** `startup.homepage_welcome_url`
3385
3386 #### Windows (GPO)
3387 ```
3388 Software\Policies\Mozilla\Firefox\OverrideFirstRunPage = "http://example.org"
3389 ```
3390 #### Windows (Intune)
3391 OMA-URI:
3392 ```
3393 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OverrideFirstRunPage
3394 ```
3395 Value (string):
3396 ```
3397 <enabled/>
3398 <data id="OverridePage" value="https://example.com"/>
3399 ```
3400 #### macOS
3401 ```
3402 <dict>
3403   <key>OverrideFirstRunPage</key>
3404   <string>http://example.org</string>
3405 </dict>
3406 ```
3407 #### policies.json
3408 ```
3409 {
3410   "policies": {
3411     "OverrideFirstRunPage": "http://example.org"
3412 }
3413 ```
3414 ### OverridePostUpdatePage
3415 Override the upgrade page. If the value is an empty string (""), no extra pages are displayed when Firefox is upgraded.
3416
3417 **Compatibility:** Firefox 60, Firefox ESR 60\
3418 **CCK2 Equivalent:** `upgradePage`,`noUpgradePage`\
3419 **Preferences Affected:** `startup.homepage_override_url`
3420
3421 #### Windows (GPO)
3422 ```
3423 Software\Policies\Mozilla\Firefox\OverridePostUpdatePage = "http://example.org"
3424 ```
3425 #### Windows (Intune)
3426 OMA-URI:
3427 ```
3428 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OverridePostUpdatePage
3429 ```
3430 Value (string):
3431 ```
3432 <enabled/>
3433 <data id="OverridePage" value="https://example.com"/>
3434 ```
3435 #### macOS
3436 ```
3437 <dict>
3438   <key>OverridePostUpdatePage</key>
3439   <string>http://example.org</string>
3440 </dict>
3441 ```
3442 #### policies.json
3443 ```
3444 {
3445   "policies": {
3446     "OverridePostUpdatePage": "http://example.org"
3447 }
3448 ```
3449 ### PasswordManagerEnabled
3450 Remove access to the password manager via preferences and blocks about:logins on Firefox 70.
3451
3452 **Compatibility:** Firefox 70, Firefox ESR 60.2\
3453 **CCK2 Equivalent:** N/A\
3454 **Preferences Affected:** `pref.privacy.disable_button.view_passwords`
3455
3456 #### Windows (GPO)
3457 ```
3458 Software\Policies\Mozilla\Firefox\PasswordManagerEnabled = 0x1 | 0x0
3459 ```
3460 #### Windows (Intune)
3461 OMA-URI:
3462 ```
3463 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PasswordManagerEnabled
3464 ```
3465 Value (string):
3466 ```
3467 <enabled/> or <disabled/>
3468 ```
3469 #### macOS
3470 ```
3471 <dict>
3472   <key>PasswordManagerEnabled</key>
3473   <true/> | <false/>
3474 </dict>
3475 ```
3476 #### policies.json
3477 ```
3478 {
3479   "policies": {
3480     "PasswordManagerEnabled": true | false
3481   }
3482 }
3483 ```
3484 ### PDFjs
3485 Disable or configure PDF.js, the built-in PDF viewer.
3486
3487 If `Enabled` is set to false, the built-in PDF viewer is disabled.
3488
3489 If `EnablePermissions` is set to true, the built-in PDF viewer will honor document permissions like preventing the copying of text.
3490
3491 Note: DisableBuiltinPDFViewer has not been deprecated. You can either continue to use it, or switch to using PDFjs->Enabled to disable the built-in PDF viewer. This new permission was added because we needed a place for PDFjs->EnabledPermissions.
3492
3493 **Compatibility:** Firefox 77, Firefox ESR 68.9\
3494 **CCK2 Equivalent:** N/A\
3495 **Preferences Affected:** `pdfjs.diabled`,`pdfjs.enablePermissions`
3496
3497 #### Windows (GPO)
3498 ```
3499 Software\Policies\Mozilla\Firefox\PDFjs\Enabled = 0x1 | 0x0
3500 Software\Policies\Mozilla\Firefox\PDFjs\EnablePermissions = 0x1 | 0x0
3501 ```
3502 #### Windows (Intune)
3503 OMA-URI:
3504 ```
3505 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PDFjs/PDFjs_Enabled
3506 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PDFjs/PDFjs_EnablePermissions
3507 ```
3508 Value (string):
3509 ```
3510 <enabled/>or <disabled/>
3511 ```
3512 #### macOS
3513 ```
3514 <dict>
3515   <key>PDFjs</key>
3516   <dict>
3517     <key>Enabled</key>
3518     <true/> | <false/>
3519     <key>EnablePermissions</key>
3520     <true/> | <false/>
3521   </dict>
3522 </dict>
3523 ```
3524 #### policies.json
3525 ```
3526 {
3527   "policies": {
3528     "PSFjs": {
3529       "Enabled": true | false,
3530       "EnablePermissions": true | false
3531     }
3532 }
3533 ```
3534 ### Permissions
3535 Set permissions associated with camera, microphone, location, notifications, autoplay, and virtual reality. Because these are origins, not domains, entries with unique ports must be specified separately. This explicitly means that it is not possible to add wildcards. See examples below.
3536
3537 `Allow` is a list of origins where the feature is allowed.
3538
3539 `Block` is a list of origins where the feature is not allowed.
3540
3541 `BlockNewRequests` determines whether or not new requests can be made for the feature.
3542
3543 `Locked` prevents the user from changing preferences for the feature.
3544
3545 `Default` specifies the default value for Autoplay. block-audio-video is not supported on Firefox ESR 68.
3546
3547 **Compatibility:** Firefox 62, Firefox ESR 60.2 (Autoplay added in Firefox 74, Firefox ESR 68.6, Autoplay Default/Locked added in Firefox 76, Firefox ESR 68.8, VirtualReality added in Firefox 80, Firefox ESR 78.2)\
3548 **CCK2 Equivalent:** N/A\
3549 **Preferences Affected:** `permissions.default.camera`,`permissions.default.microphone`,`permissions.default.geo`,`permissions.default.desktop-notification`,`media.autoplay.default`.`permissions.default.xr`
3550
3551 #### Windows (GPO)
3552 ```
3553 Software\Policies\Mozilla\Firefox\Permissions\Camera\Allow\1 = "https://example.org"
3554 Software\Policies\Mozilla\Firefox\Permissions\Camera\Allow\2 = "https://example.org:1234"
3555 Software\Policies\Mozilla\Firefox\Permissions\Camera\Block\1 = "https://example.edu"
3556 Software\Policies\Mozilla\Firefox\Permissions\Camera\BlockNewRequests = 0x1 | 0x0
3557 Software\Policies\Mozilla\Firefox\Permissions\Camera\Locked = 0x1 | 0x0
3558 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Allow\1 = "https://example.org"
3559 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Block\1 = "https://example.edu"
3560 Software\Policies\Mozilla\Firefox\Permissions\Microphone\BlockNewRequests = 0x1 | 0x0
3561 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Locked = 0x1 | 0x0
3562 Software\Policies\Mozilla\Firefox\Permissions\Location\Allow\1 = "https://example.org"
3563 Software\Policies\Mozilla\Firefox\Permissions\Location\Block\1 = "https://example.edu"
3564 Software\Policies\Mozilla\Firefox\Permissions\Location\BlockNewRequests = 0x1 | 0x0
3565 Software\Policies\Mozilla\Firefox\Permissions\Location\Locked = 0x1 | 0x0
3566 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Allow\1 = "https://example.org"
3567 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Block\1 = "https://example.edu"
3568 Software\Policies\Mozilla\Firefox\Permissions\Notifications\BlockNewRequests = 0x1 | 0x0
3569 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Locked = 0x1 | 0x0
3570 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Allow\1 = "https://example.org"
3571 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Block\1 = "https://example.edu"
3572 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Default = "allow-audio-video" | "block-audio" | "block-audio-video"
3573 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Locked = 0x1 | 0x0
3574 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\Allow\1 = "https://example.org"
3575 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\Block\1 = "https://example.edu"
3576 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\BlockNewRequests = 0x1 | 0x0
3577 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\Locked = 0x1 | 0x0
3578 ```
3579 #### Windows (Intune)
3580 OMA-URI:
3581 ```
3582 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Location/Location_BlockNewRequests
3583 ```
3584 Value (string):
3585 ```
3586 <enabled/> or <disabled/>
3587 ```
3588 OMA-URI:
3589 ```
3590 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Location/Location_Locked
3591 ```
3592 Value (string):
3593 ```
3594 <enabled/> or <disabled/>
3595 ```
3596 OMA-URI:
3597 ```
3598 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_Allow
3599 ```
3600 Value (string):
3601 ```
3602 <enabled/>
3603 <data id="Permissions" value="1&#xF000;https://example.org"/>
3604 ```
3605 OMA-URI:
3606 ```
3607 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_BlockNewRequests
3608 ```
3609 Value (string):
3610 ```
3611 <enabled/> or <disabled/>
3612 ```
3613 OMA-URI:
3614 ```
3615 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_Locked
3616 ```
3617 Value (string):
3618 ```
3619 <enabled/> or <disabled/>
3620 ```
3621 OMA-URI:
3622 ```
3623 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Allow
3624 ```
3625 Value (string):
3626 ```
3627 <enabled/>
3628 <data id="Permissions" value="1&#xF000;https://example.org"/>
3629 ```
3630 OMA-URI:
3631 ```
3632 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Block
3633 ```
3634 Value (string):
3635 ```
3636 <enabled/>
3637 <data id="Permissions" value="1&#xF000;https://example.edu"/>
3638 ```
3639 OMA-URI:
3640 ```
3641 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Default
3642 ```
3643 Value (string):
3644 ```
3645 <enabled/>
3646 <data id="Autoplay_Default" value="allow-audio-video | block-audio | block-audio-video"/>
3647 ```
3648 OMA-URI:
3649 ```
3650 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Locked
3651 ```
3652 Value (string):
3653 ```
3654 <enabled/> or <disabled/>
3655 ```
3656 OMA-URI:
3657 ```
3658 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_Allow
3659 ```
3660 Value (string):
3661 ```
3662 <enabled/>
3663 <data id="Permissions" value="1&#xF000;https://example.org"/>
3664 ```
3665 OMA-URI:
3666 ```
3667 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_Block
3668 ```
3669 Value (string):
3670 ```
3671 <enabled/>
3672 <data id="Permissions" value="1&#xF000;https://example.edu"/>
3673 ```
3674 OMA-URI:
3675 ```
3676 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_BlockNewRequests
3677 ```
3678 Value (string):
3679 ```
3680 <enabled/> or <disabled/>
3681 ```
3682 OMA-URI:
3683 ```
3684 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_Locked
3685 ```
3686 Value (string):
3687 ```
3688 <enabled/> or <disabled/>
3689 ```
3690 #### macOS
3691 ```
3692 <dict>
3693   <key>Permissions</key>
3694   <dict>
3695     <key>Camera</key>
3696     <dict>
3697       <key>Allow</key>
3698       <array>
3699         <string>https://example.org</string>
3700         <string>https://example.org:1234</string>
3701       </array>
3702       <key>Block</key>
3703       <array>
3704         <string>https://example.edu</string>
3705       </array>
3706       <key>BlockNewRequests</key>
3707       <true/> | <false/>
3708       <key>Locked</key>
3709       <true/> | <false/>
3710     </dict>
3711     <key>Microphone</key>
3712     <dict>
3713       <key>Allow</key>
3714       <array>
3715         <string>https://example.org</string>
3716       </array>
3717       <key>Block</key>
3718       <array>
3719         <string>https://example.edu</string>
3720       </array>
3721       <key>BlockNewRequests</key>
3722       <true/> | <false/>
3723       <key>Locked</key>
3724       <true/> | <false/>
3725     </dict>
3726     <key>Location</key>
3727     <dict>
3728       <key>Allow</key>
3729       <array>
3730         <string>https://example.org</string>
3731       </array>
3732       <key>Block</key>
3733       <array>
3734         <string>https://example.edu</string>
3735       </array>
3736       <key>BlockNewRequests</key>
3737       <true/> | <false/>
3738       <key>Locked</key>
3739       <true/> | <false/>
3740     </dict>
3741     <key>Notifications</key>
3742     <dict>
3743       <key>Allow</key>
3744       <array>
3745         <string>https://example.org</string>
3746       </array>
3747       <key>Block</key>
3748       <array>
3749         <string>https://example.edu</string>
3750       </array>
3751       <key>BlockNewRequests</key>
3752       <true/>
3753       <key>Locked</key>
3754       <true/>
3755     </dict>
3756     <key>Autoplay</key>
3757     <dict>
3758       <key>Allow</key>
3759       <array>
3760         <string>https://example.org</string>
3761       </array>
3762       <key>Block</key>
3763       <array>
3764         <string>https://example.edu</string>
3765       </array>
3766       <key>Default</key>
3767       <string>allow-audio-video | block-audio | block-audio-video</string>
3768       <key>Locked</key>
3769       <true/> | <false/>
3770     </dict>
3771   </dict>
3772 </dict>
3773 ```
3774 #### policies.json
3775 ```
3776 {
3777   "policies": {
3778     "Permissions": {
3779       "Camera": {
3780         "Allow": ["https://example.org","https://example.org:1234"],
3781         "Block": ["https://example.edu"],
3782         "BlockNewRequests": true | false,
3783         "Locked": true | false
3784       },
3785       "Microphone": {
3786         "Allow": ["https://example.org"],
3787         "Block": ["https://example.edu"],
3788         "BlockNewRequests": true | false,
3789         "Locked": true | false
3790       },
3791       "Location": {
3792         "Allow": ["https://example.org"],
3793         "Block": ["https://example.edu"],
3794         "BlockNewRequests": true | false,
3795         "Locked": true | false
3796       },
3797       "Notifications": {
3798         "Allow": ["https://example.org"],
3799         "Block": ["https://example.edu"],
3800         "BlockNewRequests": true | false,
3801         "Locked": true | false
3802       },
3803       "Autoplay": {
3804         "Allow": ["https://example.org"],
3805         "Block": ["https://example.edu"],
3806         "Default": "allow-audio-video" | "block-audio" | "block-audio-video",
3807         "Locked": true | false
3808       }
3809     }
3810   }
3811 }
3812 ```
3813 ### PictureInPicture
3814
3815 Enable or disable Picture-in-Picture as well as prevent the user from enabling or disabling it (Locked).
3816
3817 **Compatibility:** Firefox 78, Firefox ESR 78\
3818 **CCK2 Equivalent:** N/A\
3819 **Preferences Affected:** `media.videocontrols.picture-in-picture.video-toggle.enabled`
3820
3821 #### Windows (GPO)
3822 ```
3823 Software\Policies\Mozilla\Firefox\PictureInPicture\Enabled = 0x1 | 0x0
3824 Software\Policies\Mozilla\Firefox\PictureInPicture\Locked = 0x1 | 0x0
3825
3826 ```
3827 #### Windows (Intune)
3828 OMA-URI:
3829 ```
3830 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PictureInPicture/PictureInPicture_Enabled
3831 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PictureInPicture/PictureInPicture_Locked
3832 ```
3833 Value (string):
3834 ```
3835 <enabled/> or <disabled/>
3836 ```
3837 #### macOS
3838 ```
3839 <dict>
3840   <key>PictureInPicture</key>
3841   <dict>
3842     <key>Enabled</key>
3843     <true/> | <false/>
3844     <key>Locked</key>
3845     <true/> | <false/>
3846   </dict>
3847 </dict>
3848 ```
3849 #### policies.json
3850 ```
3851 {
3852   "policies": {
3853     "PictureInPicture": {
3854       "Enabled": true | false,
3855       "Locked": true, false
3856     }
3857   }
3858 }
3859 ```
3860 ### PopupBlocking
3861 Configure the default pop-up window policy as well as origins for which pop-up windows are allowed.
3862
3863 `Allow` is a list of origins where popup-windows are allowed.
3864
3865 `Default` determines whether or not pop-up windows are allowed by default.
3866
3867 `Locked` prevents the user from changing pop-up preferences.
3868
3869 **Compatibility:** Firefox 60, Firefox ESR 60\
3870 **CCK2 Equivalent:** `permissions.popup`\
3871 **Preferences Affected:** `dom.disable_open_during_load`
3872
3873 #### Windows (GPO)
3874 ```
3875 Software\Policies\Mozilla\Firefox\PopupBlocking\Allow\1 = "https://example.org"
3876 Software\Policies\Mozilla\Firefox\PopupBlocking\Allow\2 = "https://example.edu"
3877 Software\Policies\Mozilla\Firefox\PopupBlocking\Default = 0x1 | 0x0
3878 Software\Policies\Mozilla\Firefox\PopupBlocking\Locked = 0x1 | 0x0
3879 ```
3880 #### Windows (Intune)
3881 OMA-URI:
3882 ```
3883 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Allow
3884 ```
3885 Value (string):
3886 ```
3887 <enabled/>
3888 <data id="Permissions" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
3889 ```
3890 OMA-URI:
3891 ```
3892 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Default
3893 ```
3894 Value (string):
3895 ```
3896 <enabled/> or <disabled/>
3897 ```
3898 OMA-URI:
3899 ```
3900 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Locked
3901 ```
3902 Value (string):
3903 ```
3904 <enabled/> or <disabled/>
3905 ```
3906 #### macOS
3907 ```
3908 <dict>
3909   <key>PopupBlocking</key>
3910   <dict>
3911     <key>Allow</key>
3912     <array>
3913       <string>http://example.org</string>
3914       <string>http://example.edu</string>
3915     </array>
3916     <key>Default</key>
3917     <true/> | <false/>
3918     <key>Locked</key>
3919     <true/> | <false/>
3920   </dict>
3921 </dict>
3922 ```
3923 #### policies.json
3924 ```
3925 {
3926   "policies": {
3927     "PopupBlocking": {
3928       "Allow": ["http://example.org/",
3929                 "http://example.edu/"],
3930       "Default": true | false,
3931       "Locked": true | false
3932     }
3933   }
3934 }
3935 ```
3936 ### Preferences
3937 Set and lock preferences.
3938
3939 **NOTE** On Windows, in order to use this policy, you must clear all settings in the old **Preferences (Deprecated)** section.
3940
3941 Previously you could only set and lock a subset of preferences. Starting with Firefox 81 and Firefox ESR 78.3 you can set many more preferences. You can also set default preferences, user preferences and you can clear preferences.
3942
3943 Preferences that start with the following prefixes are supported:
3944 ```
3945 accessibility.
3946 browser.
3947 datareporting.policy.
3948 dom.
3949 extensions.
3950 general.autoScroll (Firefox 83, Firefox ESR 78.5)
3951 general.smoothScroll (Firefox 83, Firefox ESR 78.5)
3952 geo.
3953 intl.
3954 layout.
3955 media.
3956 network.
3957 pdfjs. (Firefox 84, Firefox ESR 78.6)
3958 places.
3959 print.
3960 signon. (Firefox 83, Firefox ESR 78.5)
3961 spellchecker. (Firefox 84, Firefox ESR 78.6)
3962 ui.
3963 widget.
3964 ```
3965 as well as the following security preferences:
3966 | Preference | Type | Default
3967 | --- | --- | ---
3968 | security.default_personal_cert | string | Ask Every Time
3969 | &nbsp;&nbsp;&nbsp;&nbsp;If set to Select Automatically, Firefox automatically chooses the default personal certificate.
3970 | security.insecure_connection_text.enabled | bool | false
3971 | &nbsp;&nbsp;&nbsp;&nbsp;If set to true, adds the words "Not Secure" for insecure sites.
3972 | security.insecure_connection_text.pbmode.enabled | bool | false
3973 | &nbsp;&nbsp;&nbsp;&nbsp;If set to true, adds the words "Not Secure" for insecure sites in private browsing.
3974 | security.insecure_field_warning.contextual.enabled | bool | true
3975 | &nbsp;&nbsp;&nbsp;&nbsp;If set to false, remove the warning for inscure login fields.
3976 | security.mixed_content.block_active_content | boolean | true
3977 | &nbsp;&nbsp;&nbsp;&nbsp;If false, mixed active content (HTTP and HTTPS) is not blocked.
3978 | security.osclientcerts.autoload | boolean | false
3979 | &nbsp;&nbsp;&nbsp;&nbsp;If true, client certificates are loaded from the operating system certificate store.
3980 | security.ssl.errorReporting.enabled | boolean | true
3981 | &nbsp;&nbsp;&nbsp;&nbsp;If false, SSL errors cannot be sent to Mozilla.
3982 | security.tls.hello_downgrade_check | boolean | true
3983 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the TLS 1.3 downgrade check is disabled.
3984 | security.warn_submit_secure_to_insecure | boolean | true
3985 | &nbsp;&nbsp;&nbsp;&nbsp;If false, no warning is shown when submitting s form from https to http.
3986 &nbsp;
3987
3988 Using the preference as the key, set the `Value` to the corresponding preference value.
3989
3990 `Status` can be "default", "locked", "user" or "clear"
3991
3992 Default preferences can be modified by the user.
3993
3994 If a value is locked, it is also set as the default.
3995
3996 User preferences persist across invocations of Firefox. It is the equivalent of a user setting the preference. They are most useful when a preference is needed very early in startup so it can't be set as default by policy.
3997
3998 User preferences persist even if the policy is removed, so if you need to remove them, you should use the clear policy.
3999
4000 See the examples below for more detail.
4001
4002 IMPORTANT: Make sure you're only setting a particular preference using this mechanism and not some other way.
4003
4004 Status
4005 **Compatibility:** Firefox 81, Firefox ESR 78.3\
4006 **CCK2 Equivalent:** `preferences`\
4007 **Preferences Affected:** Many
4008
4009 #### Windows (GPO)
4010 Software\Policies\Mozilla\Firefox\Preferences (REG_MULTI_SZ) =
4011 ```
4012 {
4013   "accessibility.force_disabled": {
4014     "Value": 1,
4015     "Status": "default"
4016   },
4017   "browser.cache.disk.parent_directory": {
4018     "Value": "SOME_NATIVE_PATH",
4019     "Status": "user"
4020   },
4021   "browser.tabs.warnOnClose": {
4022     "Value": false,
4023     "Status": "locked"
4024   }
4025 }
4026 ```
4027 #### Windows (Intune)
4028 OMA-URI:
4029 ```
4030 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Preferences
4031 ```
4032 Value (string):
4033 ```
4034 <enabled/>
4035 <data id="JSON" value='
4036 {
4037   "accessibility.force_disabled": {
4038     "Value": 1,
4039     "Status": "default"
4040   },
4041   "browser.cache.disk.parent_directory": {
4042     "Value": "SOME_NATIVE_PATH",
4043     "Status": "user"
4044   },
4045   "browser.tabs.warnOnClose": {
4046     "Value": false,
4047     "Status": "locked"
4048   }
4049 }'/>
4050 ```
4051 #### macOS
4052 ```
4053 <dict>
4054   <key>Preferences</key>
4055   <dict>
4056     <key>accessibility.force_disabled</key>
4057     <dict>
4058       <key>Value</key>
4059       <integer>1</integer>
4060       <key>Status</key>
4061       <string>default</string>
4062     </dict>
4063     <key>browser.cache.disk.parent_directory</key>
4064     <dict>
4065       <key>Value</key>
4066       <string>SOME_NATIVE_PATH</string>
4067       <key>Status</key>
4068       <string>user</string>
4069     </dict>
4070     <key>browser.tabs.warnOnClose</key>
4071     <dict>
4072       <key>Value</key>
4073       <false/>
4074       <key>Status</key>
4075       <string>locked</string>
4076     </dict>
4077   </dict>
4078 </dict>
4079 ```
4080 #### policies.json
4081 ```
4082 {
4083   "policies": {
4084     "Preferences": {
4085       "accessibility.force_disabled": {
4086         "Value": 1,
4087         "Status": "default"
4088       },
4089       "browser.cache.disk.parent_directory": {
4090         "Value": "SOME_NATIVE_PATH",
4091         "Status": "user"
4092       },
4093       "browser.tabs.warnOnClose": {
4094         "Value": false,
4095         "Status": "locked"
4096       }
4097     }
4098   }
4099 }
4100 ```
4101 ### Preferences (Deprecated)
4102 Set and lock certain preferences.
4103
4104 **Compatibility:** See below\
4105 **CCK2 Equivalent:** `preferences`\
4106 **Preferences Affected:** See below
4107
4108 | Preference | Type | Compatibility | Default
4109 | --- | --- | --- | ---
4110 | accessibility.force_disabled | integer | Firefox 70, Firefox ESR 68.2 | 0
4111 | &nbsp;&nbsp;&nbsp;&nbsp;If set to 1, platform accessibility is disabled.
4112 | app.update.auto (Deprecated - Switch to AppAutoUpdate policy) | boolean | Firefox 68, Firefox ESR 68 | true
4113 | &nbsp;&nbsp;&nbsp;&nbsp;If false, Firefox doesn't automatically install update.
4114 | browser.bookmarks.autoExportHTML | boolean | Firefox 70, Firefox ESR 68.2 | false
4115 | &nbsp;&nbsp;&nbsp;&nbsp;If true, bookmarks are exported on shutdown.
4116 | browser.bookmarks.file | string | Firefox 70, Firefox ESR 68.2 | N/A
4117 | &nbsp;&nbsp;&nbsp;&nbsp;If set, the name of the file where bookmarks are exported and imported.
4118 | browser.bookmarks.restore_default_bookmarks | boolean | Firefox 70, Firefox ESR 68.2 | N/A
4119 | &nbsp;&nbsp;&nbsp;&nbsp;If true, bookmarks are restored to their defaults.
4120 | browser.cache.disk.enable | boolean | Firefox 68, Firefox ESR 68 | true
4121 | &nbsp;&nbsp;&nbsp;&nbsp;If false, don't store cache on the hard drive.
4122 | ~browser.cache.disk.parent_directory~ | string | Firefox 68, Firefox ESR 68 | Profile temporary directory
4123 | &nbsp;&nbsp;&nbsp;&nbsp;~If set, changes the location of the disk cache.~ This policy doesn't work. It's being worked on.
4124 | browser.fixup.dns_first_for_single_words | boolean | Firefox 68, Firefox ESR 68 | false
4125 | &nbsp;&nbsp;&nbsp;&nbsp;If true, single words are sent to DNS, not directly to search.
4126 | browser.newtabpage.activity-stream.default.sites | string | Firefox 72, ESR 68.4 | Locale dependent
4127 | &nbsp;&nbsp;&nbsp;&nbsp;If set, a list of URLs to use as the default top sites on the new tab page. Due to Firefox limitations, search sites can't be added. In addition, sites with the same name but different TLDs (example.org/example.com) will not display properly.
4128 | browser.places.importBookmarksHTML | boolean | Firefox 70, Firefox ESR 68.2
4129 | &nbsp;&nbsp;&nbsp;&nbsp;If true, bookmarks are always imported on startup.
4130 | browser.safebrowsing.phishing.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
4131 | &nbsp;&nbsp;&nbsp;&nbsp;If false, phishing protection is not enabled (Not recommended)
4132 | browser.safebrowsing.malware.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
4133 | &nbsp;&nbsp;&nbsp;&nbsp;If false, malware protection is not enabled (Not recommended)
4134 | browser.search.update | boolean | Firefox 68, Firefox ESR 68 | true
4135 | &nbsp;&nbsp;&nbsp;&nbsp;If false, updates for search engines are not checked.
4136 | browser.slowStartup.notificationDisabled | boolean | Firefox 70, Firefox ESR 68.2 | false
4137 | &nbsp;&nbsp;&nbsp;&nbsp;If true, a notification isn't shown if startup is slow.
4138 | browser.tabs.warnOnClose | boolean | Firefox 68, Firefox ESR 68 | true
4139 | &nbsp;&nbsp;&nbsp;&nbsp;If false, there is no warning when the browser is closed.
4140 | browser.taskbar.previews.enable | boolean | Firefox 70, Firefox ESR 68.2 (Windows only) | false
4141 | &nbsp;&nbsp;&nbsp;&nbsp;If true, tab previews are shown in the Windows taskbar.
4142 | browser.urlbar.suggest.bookmark | boolean | Firefox 68, Firefox ESR 68 | true
4143 | &nbsp;&nbsp;&nbsp;&nbsp;If false, bookmarks aren't suggested when typing in the URL bar.
4144 | browser.urlbar.suggest.history | boolean | Firefox 68, Firefox ESR 68 | true
4145 | &nbsp;&nbsp;&nbsp;&nbsp;If false, history isn't suggested when typing in the URL bar.
4146 | browser.urlbar.suggest.openpage | boolean | Firefox 68, Firefox ESR 68 | true
4147 | &nbsp;&nbsp;&nbsp;&nbsp;If false, open tabs aren't suggested when typing in the URL bar.
4148 | datareporting.policy.dataSubmissionPolicyBypassNotification | boolean | Firefox 68, Firefox ESR 68 | false
4149 | &nbsp;&nbsp;&nbsp;&nbsp;If true, don't show the privacy policy tab on first run.
4150 | dom.allow_scripts_to_close_windows | boolean | Firefox 70, Firefox ESR 68.2 | false
4151 | &nbsp;&nbsp;&nbsp;&nbsp;If false, web page can close windows.
4152 | dom.disable_window_flip | boolean | Firefox 68, Firefox ESR 68 | true
4153 | &nbsp;&nbsp;&nbsp;&nbsp;If false, web pages can focus and activate windows.
4154 | dom.disable_window_move_resize | boolean | Firefox 68, Firefox ESR 68 | false
4155 | &nbsp;&nbsp;&nbsp;&nbsp;If true, web pages can't move or resize windows.
4156 | dom.event.contextmenu.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4157 | &nbsp;&nbsp;&nbsp;&nbsp;If false, web pages can't override context menus.
4158 | dom.keyboardevent.keypress.hack.dispatch_non_printable_keys.addl | string | Firefox 68, Firefox ESR 68 | N/A
4159 | &nbsp;&nbsp;&nbsp;&nbsp;See https://support.mozilla.org/en-US/kb/dom-events-changes-introduced-firefox-66
4160 | dom.keyboardevent.keypress.hack.use_legacy_keycode_and_charcode.addl | string | Firefox 68, Firefox ESR 68 | N/A
4161 | &nbsp;&nbsp;&nbsp;&nbsp;See https://support.mozilla.org/en-US/kb/dom-events-changes-introduced-firefox-66
4162 | dom.xmldocument.load.enabled | boolean | Firefox ESR 68.5 | true.
4163 | &nbsp;&nbsp;&nbsp;&nbsp;If false, XMLDocument.load is not available.
4164 | dom.xmldocument.async.enabled | boolean | Firefox ESR 68.5 | true
4165 | &nbsp;&nbsp;&nbsp;&nbsp;If false, XMLDocument.async is not available.
4166 | extensions.blocklist.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
4167 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the extensions blocklist is not used (Not recommended)
4168 | extensions.getAddons.showPane | boolean | Firefox 68, Firefox ESR 68 | N/A
4169 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the Recommendations tab is not displayed in the Add-ons Manager.
4170 | extensions.htmlaboutaddons.recommendations.enabled | boolean | Firefox 72, Firefox ESR 68.4 | true
4171 | &nbsp;&nbsp;&nbsp;&nbsp;If false, recommendations are not shown on the Extensions tab in the Add-ons Manager.
4172 | geo.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
4173 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the geolocation API is disabled. | Language dependent
4174 | intl.accept_languages | string | Firefox 70, Firefox ESR 68.2
4175 | &nbsp;&nbsp;&nbsp;&nbsp;If set, preferred language for web pages.
4176 | media.eme.enabled (Deprecated - Switch to EncryptedMediaExtensions policy) | boolean | Firefox 70, Firefox ESR 68.2 | true
4177 | &nbsp;&nbsp;&nbsp;&nbsp;If false, Encrypted Media Extensions are not enabled.
4178 | media.gmp-gmpopenh264.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4179 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the OpenH264  plugin is not downloaded.
4180 | media.gmp-widevinecdm.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4181 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the Widevine plugin is not downloaded.
4182 | media.peerconnection.enabled | boolean | Firefox 72, Firefox ESR 68.4 | true
4183 | &nbsp;&nbsp;&nbsp;&nbsp;If false, WebRTC is disabled
4184 | media.peerconnection.ice.obfuscate_host_addresses.whitelist (Deprecated) | string | Firefox 72, Firefox ESR 68.4 | N/A
4185 | &nbsp;&nbsp;&nbsp;&nbsp;If set, a list of domains for which mDNS hostname obfuscation is
4186 disabled
4187 | media.peerconnection.ice.obfuscate_host_addresses.blocklist | string | Firefox 79, Firefox ESR 78.1 | N/A
4188 | &nbsp;&nbsp;&nbsp;&nbsp;If set, a list of domains for which mDNS hostname obfuscation is
4189 disabled
4190 | network.dns.disableIPv6 | boolean | Firefox 68, Firefox ESR 68 | false
4191 | &nbsp;&nbsp;&nbsp;&nbsp;If true, IPv6 DNS lokoups are disabled.
4192 | network.IDN_show_punycode | boolean | Firefox 68, Firefox ESR 68 | false
4193 | &nbsp;&nbsp;&nbsp;&nbsp;If true, display the punycode version of internationalized domain names.
4194 | places.history.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4195 | &nbsp;&nbsp;&nbsp;&nbsp;If false, history is not enabled.
4196 | print.save_print_settings | boolean | Firefox 70, Firefox ESR 68.2 | true
4197 | &nbsp;&nbsp;&nbsp;&nbsp;If false, print settings are not saved between jobs.
4198 | security.default_personal_cert | string | Firefox 68, Firefox ESR 68 | Ask Every Time
4199 | &nbsp;&nbsp;&nbsp;&nbsp;If set to Select Automatically, Firefox automatically chooses the default personal certificate.
4200 | security.mixed_content.block_active_content | boolean | Firefox 70, Firefox ESR 68.2 | true
4201 | &nbsp;&nbsp;&nbsp;&nbsp;If false, mixed active content (HTTP and HTTPS) is not blocked.
4202 | security.osclientcerts.autoload | boolean | Firefox 72 (Windows), Firefox 75 (macOS)  | false
4203 | &nbsp;&nbsp;&nbsp;&nbsp;If true, client certificates are loaded from the operating system certificate store.
4204 | security.ssl.errorReporting.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4205 | &nbsp;&nbsp;&nbsp;&nbsp;If false, SSL errors cannot be sent to Mozilla.
4206 | security.tls.hello_downgrade_check | boolean | Firefox 72, Firefox ESR 68.4 | true
4207 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the TLS 1.3 downgrade check is disabled.
4208 | ui.key.menuAccessKeyFocuses | boolean | Firefox 68, Firefox ESR 68 | true
4209 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the Alt key doesn't show the menubar on Windows.
4210 | widget.content.gtk-theme-override | string | Firefox 72, Firefox ESR 68.4 (Linux only) | N/A
4211 | &nbsp;&nbsp;&nbsp;&nbsp;If set, overrides the GTK theme for widgets.
4212 #### Windows (GPO)
4213 ```
4214 Software\Policies\Mozilla\Firefox\Preferences\boolean_preference_name = 0x1 | 0x0
4215 Software\Policies\Mozilla\Firefox\Preferences\string_preference_name = "string_value"
4216 ```
4217 #### Windows (Intune)
4218 OMA-URI: (periods are replaced by underscores)
4219 ```
4220 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Preferences/boolean_preference_name
4221 ```
4222 Value (string):
4223 ```
4224 <enabled/> or <disabled/>
4225 ```
4226 OMA-URI: (periods are replaced by underscores)
4227 ```
4228 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Preferences/string_preference_name
4229 ```
4230 Value (string):
4231 ```
4232 <enabled/>
4233 <data id="Preferences_String" value="string_value"/>
4234 ```
4235 #### macOS
4236 ```
4237 <dict>
4238   <key>Preferences</key>
4239   <dict>
4240     <key>boolean_preference_name</key>
4241     <true/> | <false/>
4242     <key>string_preference_name</key>
4243     <string>string_value</string>
4244   </dict>
4245 </dict>
4246 ```
4247 #### policies.json
4248 ```
4249 {
4250   "policies": {
4251     "Preferences": {
4252       "boolean_preference_name": true | false,
4253       "string_preference_name": "string_value"
4254     }
4255   }
4256 }
4257 ```
4258 ### PromptForDownloadLocation
4259 Ask where to save each file before downloading.
4260
4261 **Compatibility:** Firefox 68, Firefox ESR 68\
4262 **CCK2 Equivalent:** N/A\
4263 **Preferences Affected:** `browser.download.useDownloadDir`
4264
4265 #### Windows (GPO)
4266 ```
4267 Software\Policies\Mozilla\Firefox\PromptForDownloadLocation = 0x1 | 0x0
4268 ```
4269 #### Windows (Intune)
4270 OMA-URI:
4271 ```
4272 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PromptForDownloadLocation
4273 ```
4274 Value (string):
4275 ```
4276 <enabled/> or <disabled/>
4277 ```
4278 #### macOS
4279 ```
4280 <dict>
4281   <key>PromptForDownloadLocation</key>
4282   <true/> | <false/>
4283 </dict>
4284 ```
4285 #### policies.json
4286 ```
4287 {
4288   "policies": {
4289     "PromptForDownloadLocation": true | false
4290   }
4291 }
4292 ```
4293 ### Proxy
4294 Configure proxy settings. These settings correspond to the connection settings in Firefox preferences.
4295 To specify ports, append them to the hostnames with a colon (:).
4296
4297 `Mode` is the proxy method being used.
4298
4299 `Locked` is whether or not proxy settings can be changed.
4300
4301 `HTTPProxy` is the HTTP proxy server.
4302
4303 `UseHTTPProxyForAllProtocols` is whether or not the HTTP proxy should be used for all other proxies.
4304
4305 `SSLProxy` is the SSL proxy server.
4306
4307 `FTPProxy` is the FTP proxy server.
4308
4309 `SOCKSProxy` is the SOCKS proxy server
4310
4311 `SOCKSVersion` is the SOCKS version (4 or 5)
4312
4313 `Passthrough` is list of hostnames or IP addresses that will not be proxied. Use `<local>` to bypass proxying for all hostnames which do not contain periods.
4314
4315 `AutoConfigURL` is a  URL for proxy configuration (only used if Mode is autoConfig).
4316
4317 `AutoLogin` means do not prompt for authentication if password is saved.
4318
4319 `UseProxyForDNS` to use proxy DNS when using SOCKS v5.
4320
4321 **Compatibility:** Firefox 60, Firefox ESR 60\
4322 **CCK2 Equivalent:** `networkProxy*`\
4323 **Preferences Affected:** `network.proxy.type`,`network.proxy.autoconfig_url`,`network.proxy.socks_remote_dns`,`signon.autologin.proxy`,`network.proxy.socks_version`,`network.proxy.no_proxies_on`,`network.proxy.share_proxy_settings`,`network.proxy.http`,`network.proxy.http_port`,`network.proxy.ftp`,`network.proxy.ftp_port`,`network.proxy.ssl`,`network.proxy.ssl_port`,`network.proxy.socks`,`network.proxy.socks_port`
4324
4325 #### Windows (GPO)
4326 ```
4327 Software\Policies\Mozilla\Firefox\Proxy\Mode = "none" | "system" | "manual" | "autoDetect" | "autoConfig"
4328 Software\Policies\Mozilla\Firefox\Proxy\Locked = 0x1 | 0x0
4329 Software\Policies\Mozilla\Firefox\=Proxy\HTTPProxy = https://httpproxy.example.com
4330 Software\Policies\Mozilla\Firefox\Proxy\UseHTTPProxyForAllProtocols = 0x1 | 0x0
4331 Software\Policies\Mozilla\Firefox\Proxy\SSLProxy = https://sslproxy.example.com
4332 Software\Policies\Mozilla\Firefox\Proxy\FTPProxy = https://ftpproxy.example.com
4333 Software\Policies\Mozilla\Firefox\Proxy\SOCKSProxy = https://socksproxy.example.com
4334 Software\Policies\Mozilla\Firefox\Proxy\SOCKSVersion = 0x4 | 0x5
4335 Software\Policies\Mozilla\Firefox\Proxy\Passthrough = <local>
4336 Software\Policies\Mozilla\Firefox\Proxy\AutoConfigURL = URL_TO_AUTOCONFIG
4337 Software\Policies\Mozilla\Firefox\Proxy\AutoLogin = 0x1 | 0x0
4338 Software\Policies\Mozilla\Firefox\Proxy\UseProxyForDNS = 0x1 | 0x0
4339 ```
4340 #### Windows (Intune)
4341 OMA-URI:
4342 ```
4343 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Proxy
4344 ```
4345 Value (string):
4346 ```
4347 <enabled/>
4348 <data id="ProxyLocked" value="true | false"/>
4349 <data id="ConnectionType" value="none | system | manual | autoDetect | autoConfig"/>
4350 <data id="HTTPProxy" value="https://httpproxy.example.com"/>
4351 <data id="UseHTTPProxyForAllProtocols" value="true | false"/>
4352 <data id="SSLProxy" value="https://sslproxy.example.com"/>
4353 <data id="FTPProxy" value="https://ftpproxy.example.com"/>
4354 <data id="SOCKSProxy" value="https://socksproxy.example.com"/>
4355 <data id="SOCKSVersion" value="4 | 5"/>
4356 <data id="AutoConfigURL" value="URL_TO_AUTOCONFIG"/>
4357 <data id="Passthrough" value="<local>"/>
4358 <data id="AutoLogin" value="true | false"/>
4359 <data id="UseProxyForDNS" value="true | false"/>
4360 ```
4361 #### macOS
4362 ```
4363 <dict>
4364   <key>Proxy</key>
4365   <dict>
4366     <key>Mode</key>
4367     <string>none | system | manual | autoDetect | autoConfig</string>
4368     <key>Locked</key>
4369     <true> | </false>
4370     <key>HTTPProxy</key>
4371     <string>https://httpproxy.example.com</string>
4372     <key>UseHTTPProxyForAllProtocols</key>
4373     <true> | </false>
4374     <key>SSLProxy</key>
4375     <string>https://sslproxy.example.com</string>
4376     <key>FTPProxy</key>
4377     <string>https://ftpproxy.example.com</string>
4378     <key>SOCKSProxy</key>
4379     <string>https://socksproxy.example.com</string>
4380     <key>SOCKSVersion</key>
4381     <string>4 | 5</string>
4382     <key>Passthrough</key>
4383     <string>&lt;local>&gt;</string>
4384     <key>AutoConfigURL</key>
4385     <string>URL_TO_AUTOCONFIG</string>
4386     <key>AutoLogin</key>
4387     <true> | </false>
4388     <key>UseProxyForDNS</key>
4389     <true> | </false>
4390   </dict>
4391 </dict>
4392 ```
4393 #### policies.json
4394 ```
4395 {
4396   "policies": {
4397     "Proxy": {
4398       "Mode": "none" | "system" | "manual" | "autoDetect" | "autoConfig",
4399       "Locked": true | false,
4400       "HTTPProxy": "hostname",
4401       "UseHTTPProxyForAllProtocols": true | false,
4402       "SSLProxy": "hostname",
4403       "FTPProxy": "hostname",
4404       "SOCKSProxy": "hostname",
4405       "SOCKSVersion": 4 | 5
4406       "Passthrough": "<local>",
4407       "AutoConfigURL": "URL_TO_AUTOCONFIG",
4408       "AutoLogin": true | false,
4409       "UseProxyForDNS": true | false
4410     }
4411   }
4412 }
4413 ```
4414 ### RequestedLocales
4415 Set the the list of requested locales for the application in order of preference. It will cause the corresponding language pack to become active.
4416
4417 Note: For Firefox 68, this can now be a string so that you can specify an empty value.
4418
4419 **Compatibility:** Firefox 64, Firefox ESR 60.4, Updated in Firefox 68, Firefox ESR 68\
4420 **CCK2 Equivalent:** N/A\
4421 **Preferences Affected:** N/A
4422 #### Windows (GPO)
4423 ```
4424 Software\Policies\Mozilla\Firefox\RequestedLocales\1 = "de"
4425 Software\Policies\Mozilla\Firefox\RequestedLocales\2 = "en-US"
4426
4427 or
4428
4429 Software\Policies\Mozilla\Firefox\RequestedLocales = "de,en-US"
4430 ```
4431 #### Windows (Intune)
4432 OMA-URI:
4433 ```
4434 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/RequestedLocalesString
4435 ```
4436 Value (string):
4437 ```
4438 <enabled/>
4439 <data id="Preferences_String" value="de,en-US"/>
4440 ```
4441 #### macOS
4442 ```
4443 <dict>
4444   <key>RequestedLocales</key>
4445   <array>
4446     <string>de</string>
4447     <string>en-US</string>
4448   </array>
4449 </dict>
4450
4451 or
4452
4453 <dict>
4454   <key>RequestedLocales</key>
4455   <string>de,en-US</string>
4456 </dict>
4457
4458 ```
4459 #### policies.json
4460 ```
4461 {
4462   "policies": {
4463     "RequestedLocales": ["de", "en-US"]
4464   }
4465 }
4466
4467 or
4468
4469 {
4470   "policies": {
4471     "RequestedLocales": "de,en-US"
4472   }
4473 }
4474 ```
4475 <a name="SanitizeOnShutdown"></a>
4476
4477 ### SanitizeOnShutdown (Selective)
4478 Clear data on shutdown. Choose from Cache, Cookies, Download History, Form & Search History, Browsing History, Active Logins, Site Preferences and Offline Website Data.
4479
4480 Previously, these values were always locked. Starting with Firefox 74 and Firefox ESR 68.6, you can use the `Locked` option to either keep the values unlocked (set it to false), or lock only the values you set (set it to true). If you want the old behavior of locking everything, do not set `Locked` at all.
4481
4482 **Compatibility:** Firefox 68, Firefox ESR 68 (Locked added in 74/68.6)\
4483 **CCK2 Equivalent:** N/A\
4484 **Preferences Affected:** `privacy.sanitize.sanitizeOnShutdown`,`privacy.clearOnShutdown.cache`,`privacy.clearOnShutdown.cookies`,`privacy.clearOnShutdown.downloads`,`privacy.clearOnShutdown.formdata`,`privacy.clearOnShutdown.history`,`privacy.clearOnShutdown.sessions`,`privacy.clearOnShutdown.siteSettings`,`privacy.clearOnShutdown.offlineApps`
4485 #### Windows (GPO)
4486 ```
4487 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Cache = 0x1 | 0x0
4488 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Cookies = 0x1 | 0x0
4489 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Downloads = 0x1 | 0x0
4490 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\FormData = 0x1 | 0x0
4491 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\History = 0x1 | 0x0
4492 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Sessions = 0x1 | 0x0
4493 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\SiteSettings = 0x1 | 0x0
4494 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\OfflineApps = 0x1 | 0x0
4495 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Locked = 0x1 | 0x0
4496 ```
4497 #### Windows (Intune)
4498 OMA-URI:
4499 ```
4500 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/A_SanitizeOnShutdown_Cache
4501 ```
4502 Value (string):
4503 ```
4504 <enabled/> or <disabled/>
4505 ```
4506 OMA-URI:
4507 ```
4508 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/B_SanitizeOnShutdown_Cookies
4509 ```
4510 Value (string):
4511 ```
4512 <enabled/> or <disabled/>
4513 ```
4514 OMA-URI:
4515 ```
4516 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/C_SanitizeOnShutdown_Downloads
4517 ```
4518 Value (string):
4519 ```
4520 <enabled/> or <disabled/>
4521 ```
4522 OMA-URI:
4523 ```
4524 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/D_SanitizeOnShutdown_FormData
4525 ```
4526 Value (string):
4527 ```
4528 <enabled/> or <disabled/>
4529 ```
4530 OMA-URI:
4531 ```
4532 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/E_SanitizeOnShutdown_History
4533 ```
4534 Value (string):
4535 ```
4536 <enabled/> or <disabled/>
4537 ```
4538 OMA-URI:
4539 ```
4540 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/F_SanitizeOnShutdown_Sessions
4541 ```
4542 Value (string):
4543 ```
4544 <enabled/> or <disabled/>
4545 ```
4546 OMA-URI:
4547 ```
4548 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/G_SanitizeOnShutdown_SiteSettings
4549 ```
4550 Value (string):
4551 ```
4552 <enabled/> or <disabled/>
4553 ```
4554 OMA-URI:
4555 ```
4556 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/H_SanitizeOnShutdown_OfflineApps
4557 ```
4558 Value (string):
4559 ```
4560 <enabled/> or <disabled/>
4561 ```
4562 OMA-URI:
4563 ```
4564 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/I_SanitizeOnShutdown_Locked
4565 ```
4566 Value (string):
4567 ```
4568 <enabled/> or <disabled/>
4569 ```
4570 #### macOS
4571 ```
4572 <dict>
4573   <key>SanitizeOnShutdown</key>
4574   <dict>
4575     <key>Cache</key>
4576     <true/> | <false/>
4577     <key>Cookies</key>
4578     <true/> | <false/>
4579     <key>Downloads</key>
4580     <true/> | <false/>
4581     <key>FormData</key>
4582     <true/> | <false/>
4583     <key>History</key>
4584     <true/> | <false/>
4585     <key>Sessions</key>
4586     <true/> | <false/>
4587     <key>SiteSettings</key>
4588     <true/> | <false/>
4589     <key>OfflineApps</key>
4590     <true/> | <false/>
4591     <key>Locked</key>
4592     <true/> | <false/>
4593   </dict>
4594 </dict>
4595 ```
4596 #### policies.json
4597 ```
4598 {
4599   "policies": {
4600     "SanitizeOnShutdown": {
4601       "Cache": true | false,
4602       "Cookies": true | false,
4603       "Downloads": true | false,
4604       "FormData": true | false,
4605       "History": true | false,
4606       "Sessions": true | false,
4607       "SiteSettings": true | false,
4608       "OfflineApps": true | false,
4609       "Locked": true | false
4610     }
4611   }
4612 }
4613 ```
4614 ### SanitizeOnShutdown (All)
4615 Clear all data on shutdown, including Browsing & Download History, Cookies, Active Logins, Cache, Form & Search History, Site Preferences and Offline Website Data.
4616
4617 **Compatibility:** Firefox 60, Firefox ESR 60\
4618 **CCK2 Equivalent:** N/A\
4619 **Preferences Affected:** `privacy.sanitize.sanitizeOnShutdown`,`privacy.clearOnShutdown.cache`,`privacy.clearOnShutdown.cookies`,`privacy.clearOnShutdown.downloads`,`privacy.clearOnShutdown.formdata`,`privacy.clearOnShutdown.history`,`privacy.clearOnShutdown.sessions`,`privacy.clearOnShutdown.siteSettings`,`privacy.clearOnShutdown.offlineApps`
4620 #### Windows (GPO)
4621 ```
4622 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown = 0x1 | 0x0
4623 ```
4624 #### Windows (Intune)
4625 OMA-URI:
4626 ```
4627 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/C_SanitizeOnShutdown
4628 ```
4629 Value (string):
4630 ```
4631 <enabled/> or <disabled/>
4632 ```
4633 #### macOS
4634 ```
4635 <dict>
4636   <key>SanitizeOnShutdown</key>
4637   <true/> | <false/>
4638 </dict>
4639 ```
4640 #### policies.json
4641 ```
4642 {
4643   "policies": {
4644     "SanitizeOnShutdown": true | false
4645   }
4646 }
4647 ```
4648 ### SearchBar
4649 Set whether or not search bar is displayed.
4650
4651 **Compatibility:** Firefox 60, Firefox ESR 60\
4652 **CCK2 Equivalent:** `showSearchBar`\
4653 **Preferences Affected:** N/A
4654
4655 #### Windows (GPO)
4656 ```
4657 Software\Policies\Mozilla\Firefox\SearchBar = "unified" | "separate"
4658 ```
4659
4660 #### Windows (Intune)
4661 OMA-URI:
4662 ```
4663 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SearchBar
4664 ```
4665 Value (string):
4666 ```
4667 <enabled/>
4668 <data id="Permissions" value="unified | separate"/>
4669 ```
4670 #### macOS
4671 ```
4672 <dict>
4673   <key>SearchBar</key>
4674   <string>unified | separate</string>
4675 </dict>
4676 ```
4677 #### policies.json
4678 ```
4679 {
4680   "policies": {
4681     "SearchBar": "unified" | "separate"
4682   }
4683 }
4684 ```
4685 <a name="SearchEngines"></a>
4686
4687 ### SearchEngines (This policy is only available on the ESR.)
4688
4689 ### SearchEngines | Default
4690
4691 Set the default search engine. This policy is only available on the ESR.
4692
4693 **Compatibility:** Firefox ESR 60\
4694 **CCK2 Equivalent:** `defaultSearchEngine`\
4695 **Preferences Affected:** N/A
4696
4697 #### Windows (GPO)
4698 ```
4699 Software\Policies\Mozilla\Firefox\SearchEngines\Default = NAME_OF_SEARCH_ENGINE
4700 ```
4701 #### Windows (Intune)
4702 OMA-URI:
4703 ```
4704 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_Default
4705 ```
4706 Value (string):
4707 ```
4708 <enabled/>
4709 <data id="SearchEngines_Default" value="NAME_OF_SEARCH_ENGINE"/>
4710 ```
4711 #### macOS
4712 ```
4713 <dict>
4714   <key>SearchEngines</key>
4715   <dict>
4716     <key>Default</key>
4717     <string>NAME_OF_SEARCH_ENGINE</string>
4718   </dict>
4719 </dict>
4720 ```
4721 #### policies.json
4722 ```
4723 {
4724   "policies": {
4725     "SearchEngines": {
4726       "Default": "NAME_OF_SEARCH_ENGINE"
4727     }
4728   }
4729 }
4730 ```
4731 ### SearchEngines | PreventInstalls
4732
4733 Prevent installing search engines from webpages.
4734
4735 **Compatibility:** Firefox ESR 60\
4736 **CCK2 Equivalent:** `disableSearchEngineInstall`\
4737 **Preferences Affected:** N/A
4738
4739 #### Windows (GPO)
4740 ```
4741 Software\Policies\Mozilla\Firefox\SearchEngines\PreventInstalls = 0x1 | 0x0
4742 ```
4743 #### Windows (Intune)
4744 OMA-URI:
4745 ```
4746 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_PreventInstalls
4747 ```
4748 Value (string):
4749 ```
4750 <enabled/> or <disabled/>
4751 ```
4752 #### macOS
4753 ```
4754 <dict>
4755   <key>SearchEngines</key>
4756   <dict>
4757     <key>PreventInstalls</key>
4758     <true/> | <false/>
4759   </dict>
4760 </dict>
4761 ```
4762 #### policies.json
4763 ```
4764 {
4765   "policies": {
4766     "SearchEngines": {
4767       "PreventInstalls": true | false
4768     }
4769   }
4770 }
4771 ```
4772 ### SearchEngines | Remove
4773
4774 Hide built-in search engines. This policy is only available on the ESR.
4775
4776 **Compatibility:** Firefox ESR 60.2\
4777 **CCK2 Equivalent:** `removeDefaultSearchEngines` (removed all built-in engines)\
4778 **Preferences Affected:** N/A
4779
4780 #### Windows (GPO)
4781 ```
4782 Software\Policies\Mozilla\Firefox\SearchEngines\Remove\1 = NAME_OF_SEARCH_ENGINE
4783 ```
4784 #### Windows (Intune)
4785 OMA-URI:
4786 ```
4787 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_Remove
4788 ```
4789 Value (string):
4790 ```
4791 <enabled/>
4792 <data id="SearchEngines_Remove" value="1&#xF000;NAME_OF_SEARCH_ENGINE"/>
4793 ```
4794 #### macOS
4795 ```
4796 <dict>
4797   <key>SearchEngines</key>
4798   <dict>
4799     <key>Remove</key>
4800     <array>
4801       <string>NAME_OF_SEARCH_ENGINE</string>
4802     </array>
4803   </dict>
4804 </dict>
4805 ```
4806 #### policies.json
4807 ```
4808 {
4809   "policies": {
4810     "SearchEngines": {
4811       "Remove": ["NAME_OF_SEARCH_ENGINE"]
4812     }
4813   }
4814 }
4815 ```
4816 ### SearchEngines | Add
4817
4818 Add new search engines (up to five). This policy is only available on the ESR. `Name` and `URLTemplate` are required.
4819
4820 `Name` is the name of the search engine.
4821
4822 `URLTemplate` is the search URL with {searchTerms} to substitute for the search term.
4823
4824 `Method` is either GET or POST
4825
4826 `IconURL` is a URL for the icon to use.
4827
4828 `Alias` is a keyword to use for the engine.
4829
4830 `Description` is a description of the search engine.
4831
4832 `PostData` is the POST data as name value pairs separated by &.
4833
4834 `SuggestURLTemplate` is a search suggestions URL with {searchTerms} to substitute for the search term.
4835
4836 **Compatibility:** Firefox ESR 60 (POST support in Firefox ESR 68)\
4837 **CCK2 Equivalent:** `searchplugins`\
4838 **Preferences Affected:** N/A
4839
4840 #### Windows (GPO)
4841 ```
4842 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Name = "Example1"
4843 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\URLTemplate = "https://www.example.org/q={searchTerms}"
4844 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Method = "GET" | "POST"
4845 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\IconURL = "https://www.example.org/favicon.ico"
4846 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Alias = "example"
4847 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Description = "Example Description"
4848 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\SuggestURLTemplate = "https://www.example.org/suggestions/q={searchTerms}"
4849 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\PostData = "name=value&q={searchTerms}"
4850 ```
4851 #### Windows (Intune)
4852 OMA-URI:
4853 ```
4854 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_1
4855 ```
4856 Value (string):
4857 ```
4858 <enabled/>
4859 <data id="SearchEngine_Name" value="Example1"/>
4860 <data id="SearchEngine_URLTemplate" value="https://www.example.org/q={searchTerms"/>
4861 <data id="SearchEngine_Method" value="GET | POST"/>
4862 <data id="SearchEngine_IconURL" value="https://www.example.org/favicon.ico"/>
4863 <data id="SearchEngine_Alias" value="example"/>
4864 <data id="SearchEngine_Description" value="Example Description"/>
4865 <data id="SearchEngine_SuggestURLTemplate" value="https://www.example.org/suggestions/q={searchTerms}"/>
4866 <data id="SearchEngine_PostData" value="name=value&amp;q={searchTerms}"/>
4867 ```
4868 #### macOS
4869 ```
4870 <dict>
4871   <key>SearchEngines</key>
4872   <dict>
4873     <key>Add</key>
4874     <array>
4875       <dict>
4876         <key>Name</key>
4877         <string>Example1</string>
4878         <key>URLTemplate</key>
4879         <string>https://www.example.org/q={searchTerms}</string>
4880         <key>Method</key>
4881         <string>GET | POST </string>
4882         <key>IconURL</key>
4883         <string>https://www.example.org/favicon.ico</string>
4884         <key>Alias</key>
4885         <string>example</string>
4886         <key>Description</key>
4887         <string>Example Description</string>
4888         <key>SuggestURLTemplate</key>
4889         <string>https://www.example.org/suggestions/q={searchTerms}</string>
4890         <key>PostData</key>
4891         <string>name=value&q={searchTerms}</string>
4892       </dict>
4893     <array>
4894   </dict>
4895 </dict>
4896 ```
4897 #### policies.json
4898 ```
4899 {
4900   "policies": {
4901     "SearchEngines": {
4902       "Add": [
4903         {
4904           "Name": "Example1",
4905           "URLTemplate": "https://www.example.org/q={searchTerms}",
4906           "Method": "GET" | "POST",
4907           "IconURL": "https://www.example.org/favicon.ico",
4908           "Alias": "example",
4909           "Description": "Description",
4910           "PostData": "name=value&q={searchTerms}",
4911           "SuggestURLTemplate": "https://www.example.org/suggestions/q={searchTerms}"
4912         }
4913       ]
4914     }
4915   }
4916 }
4917 ```
4918 ### SearchSuggestEnabled
4919
4920 Enable search suggestions.
4921
4922 **Compatibility:** Firefox 68, Firefox ESR 68\
4923 **CCK2 Equivalent:** N/A\
4924 **Preferences Affected:** `browser.urlbar.suggest.searches`,`browser.search.suggest.enabled`
4925
4926 #### Windows (GPO)
4927 ```
4928 Software\Policies\Mozilla\Firefox\SearchSuggestEnabled = 0x1 | 0x0
4929 ```
4930 #### Windows (Intune)
4931 OMA-URI:
4932 ```
4933 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchSuggestEnabled
4934 ```
4935 Value (string):
4936 ```
4937 <enabled/> or <disabled/>
4938 ```
4939 #### macOS
4940 ```
4941 <dict>
4942   <key>SearchSuggestEnabled</key>
4943   <true/> | <false/>
4944 </dict>
4945 ```
4946 #### policies.json
4947 ```
4948 {
4949   "policies": {
4950     "SearchSuggestEnabled": true | false
4951   }
4952 }
4953 ```
4954 ### SecurityDevices
4955
4956 Install PKCS #11 modules.
4957
4958 **Compatibility:** Firefox 64, Firefox ESR 60.4\
4959 **CCK2 Equivalent:** `certs.devices`\
4960 **Preferences Affected:** N/A
4961
4962 #### Windows (GPO)
4963 ```
4964 Software\Policies\Mozilla\Firefox\SecurityDevices\NAME_OF_DEVICE = PATH_TO_LIBRARY_FOR_DEVICE
4965 ```
4966 #### Windows (Intune)
4967 OMA-URI:
4968 ```
4969 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SecurityDevices
4970 ```
4971 Value (string):
4972 ```
4973 <enabled/>
4974 <data id="SecurityDevices" value="NAME_OF_DEVICE&#xF000;PATH_TO_LIBRARY_FOR_DEVICE"/>
4975 ```
4976 #### macOS
4977 ```
4978 <dict>
4979   <key>SecurityDevices</key>
4980   <dict>
4981     <key>NAME_OF_DEVICE</key>
4982     <string>PATH_TO_LIBRARY_FOR_DEVICE</string>
4983   </dict>
4984 </dict>
4985 ```
4986
4987 #### policies.json
4988 ```
4989 {
4990   "policies": {
4991     "SecurityDevices": {
4992       "NAME_OF_DEVICE": "PATH_TO_LIBRARY_FOR_DEVICE"
4993     }
4994   }
4995 }
4996 ```
4997 ### SSLVersionMax
4998
4999 Set and lock the maximum version of TLS.
5000
5001 **Compatibility:** Firefox 66, Firefox ESR 60.6\
5002 **CCK2 Equivalent:** N/A\
5003 **Preferences Affected:** `security.tls.version.max`
5004
5005 #### Windows (GPO)
5006 ```
5007 Software\Policies\Mozilla\Firefox\SSLVersionMax = "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
5008 ```
5009 #### Windows (Intune)
5010 OMA-URI:
5011 ```
5012 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SSLVersionMax
5013 ```
5014 Value (string):
5015 ```
5016 <enabled/>
5017 <data id="SSLVersion" value="tls1 | tls1.2 | tls1.3"/>
5018 ```
5019 #### macOS
5020 ```
5021 <dict>
5022   <key>SSLVersionMax</key>
5023   <string>tls1 | tls1.1 | tls1.2 | tls1.3</string>
5024 </dict>
5025 ```
5026
5027 #### policies.json
5028 ```
5029 {
5030   "policies": {
5031     "SSLVersionMax": "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
5032   }
5033 }
5034 ```
5035 ### SSLVersionMin
5036
5037 Set and lock the minimum version of TLS.
5038
5039 **Compatibility:** Firefox 66, Firefox ESR 60.6\
5040 **CCK2 Equivalent:** N/A\
5041 **Preferences Affected:** `security.tls.version.min`
5042
5043 #### Windows (GPO)
5044 ```
5045 Software\Policies\Mozilla\Firefox\SSLVersionMin = "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
5046 ```
5047 #### Windows (Intune)
5048 OMA-URI:
5049 ```
5050 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SSLVersionMin
5051 ```
5052 Value (string):
5053 ```
5054 <enabled/>
5055 <data id="SSLVersion" value="tls1 | tls1.2 | tls1.3"/>
5056 ```
5057 #### macOS
5058 ```
5059 <dict>
5060   <key>SSLVersionMin</key>
5061   <string>tls1 | tls1.1 | tls1.2 | tls1.3</string>
5062 </dict>
5063 ```
5064
5065 #### policies.json
5066 ```
5067 {
5068   "policies": {
5069     "SSLVersionMin": "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
5070   }
5071 }
5072 ```
5073 ### SupportMenu
5074 Add a menuitem to the help menu for specifying support information.
5075
5076 **Compatibility:** Firefox 68.0.1, Firefox ESR 68.0.1\
5077 **CCK2 Equivalent:** helpMenu\
5078 **Preferences Affected:** N/A
5079
5080 #### Windows (GPO)
5081 ```
5082 Software\Policies\Mozilla\Firefox\SupportMenu\Title = "Support Menu"
5083 Software\Policies\Mozilla\Firefox\SupportMenu\URL = "http://example.com/support"
5084 Software\Policies\Mozilla\Firefox\SupportMenu\AccessKey = "S"
5085 ```
5086 #### Windows (Intune)
5087 OMA-URI:
5088 ```
5089 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SupportMenu
5090 ```
5091 Value (string):
5092 ```
5093 <enabled/>
5094 <data id="SupportMenuTitle" value="Support Menu"/>
5095 <data id="SupportMenuURL" value="http://example.com/support"/>
5096 <data id="SupportMenuAccessKey" value="S">
5097 ```
5098 #### macOS
5099 ```
5100 <dict>
5101   <key>SupportMenu</key>
5102   <dict>
5103     <key>Title</key>
5104     <string>SupportMenu</string>
5105     <key>URL</key>
5106     <string>http://example.com/support</string>
5107     <key>AccessKey</key>
5108     <string>S</string>
5109   </dict>
5110 </dict>
5111 ```
5112 #### policies.json
5113 ```
5114 {
5115   "policies": {
5116     "SupportMenu": {
5117       "Title": "Support Menu",
5118       "URL": "http://example.com/support",
5119       "AccessKey": "S"
5120     }
5121   }
5122 }
5123 ```
5124 ### UserMessaging
5125
5126 Prevent Firefox from messaging the user in certain situations.
5127
5128 `WhatsNew` Remove the "What's New" icon and menuitem. (Firefox 75 only)
5129
5130 `ExtensionRecommendations` Don't recommend extensions while the user is visiting web pages.
5131
5132 `FeatureRecommendations` Don't recommend browser features.
5133
5134 `UrlbarInterventions` Don't offer Firefox specific suggestions in the URL bar. (Firefox 75 only)
5135
5136 **Compatibility:** Firefox 75, Firefox ESR 68.7\
5137 **CCK2 Equivalent:** N/A\
5138 **Preferences Affected:** `browser.messaging-system.whatsNewPanel.enabled`,`browser.newtabpage.activity-stream.asrouter.userprefs.cfr.addons`,`browser.newtabpage.activity-stream.asrouter.userprefs.cfr.features`
5139
5140 #### Windows (GPO)
5141 ```
5142 Software\Policies\Mozilla\Firefox\UserMessaging\WhatsNew = 0x1 | 0x0
5143 Software\Policies\Mozilla\Firefox\UserMessaging\ExtensionRecommendations = 0x1 | 0x0
5144 Software\Policies\Mozilla\Firefox\UserMessaging\FeatureRecommendations = 0x1 | 0x0
5145 Software\Policies\Mozilla\Firefox\UserMessaging\UrlbarInterventions = 0x1 | 0x0
5146 ```
5147 #### Windows (Intune)
5148 OMA-URI:
5149 ```
5150 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/UserMessaging_WhatsNew
5151 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/UserMessaging_ExtensionRecommendations
5152 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/UserMessaging_FeatureRecommendations
5153 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/UserMessaging_UrlbarInterventions
5154 ```
5155 Value (string):
5156 ```
5157 <enabled/> or <disabled/>
5158 ```
5159 #### macOS
5160 ```
5161 <dict>
5162   <key>UserMessaging</key>
5163   <dict>
5164     <key>WhatsNew</key>
5165     <true/> | <false/>
5166     <key>ExtensionRecommendations</key>
5167     <true/> | <false/>
5168     <key>FeatureRecommendations</key>
5169     <true/> | <false/>
5170     <key>UrlbarInterventions</key>
5171     <true/> | <false/>
5172   </dict>
5173 </dict>
5174 ```
5175 #### policies.json
5176 ```
5177 {
5178   "policies": {
5179     "UserMessaging": {
5180       "WhatsNew": true | false,
5181       "ExtensionRecommendations": true | false,
5182       "FeatureRecommendations": true | false,
5183       "UrlbarInterventions": true | false
5184     }
5185   }
5186 }
5187 ```
5188 ### WebsiteFilter
5189 Block websites from being visited. The parameters take an array of Match Patterns, as documented in https://developer.mozilla.org/en-US/Add-ons/WebExtensions/Match_patterns.
5190 The arrays are limited to 1000 entries each.
5191
5192 As of Firefox 83 and Firefox ESR 78.5, file URLs are supported.
5193
5194 **Compatibility:** Firefox 60, Firefox ESR 60\
5195 **CCK2 Equivalent:** N/A\
5196 **Preferences Affected:** N/A
5197
5198 #### Windows (GPO)
5199 ```
5200 Software\Policies\Mozilla\Firefox\WebsiteFilter\Block\1 = "<all_urls>"
5201 Software\Policies\Mozilla\Firefox\WebsiteFilter\Exceptions\1 = "http://example.org/*"
5202 ```
5203 #### Windows (Intune)
5204 OMA-URI:
5205 ```
5206 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/B_WebsiteFilter_Block
5207 ```
5208 Value (string):
5209 ```
5210 <enabled/>
5211 <data id="WebsiteFilter" value="1&#xF000;<all_urls>"/>
5212 ```
5213 OMA-URI:
5214 ```
5215 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/B_WebsiteFilter_Exceptions
5216 ```
5217 Value (string):
5218 ```
5219 <enabled/>
5220 <data id="WebsiteFilter" value="1&#xF000;http://example.org/*"/>
5221 ```
5222 #### macOS
5223 ```
5224 <dict>
5225   <key>WebsiteFilter</key>
5226   <dict>
5227     <key>Block</key>
5228     <array>
5229       <string><all_urls></string>
5230     </array>
5231     <key>Exceptions</key>
5232     <array>
5233       <string>http://example.org/*</string>
5234     </array>
5235   </dict>
5236
5237 </dict>
5238 ```
5239 #### policies.json
5240 ```
5241 {
5242   "policies": {
5243     "WebsiteFilter": {
5244       "Block": ["<all_urls>"],
5245       "Exceptions": ["http://example.org/*"]
5246     }
5247   }
5248 }
5249 ```