README.md

   1 **These policies are in active development and so might contain changes that do not work with current versions of Firefox.**
   2
   3 **You should use the [officially released versions](https://github.com/mozilla/policy-templates/releases) if you are deploying changes.**
   4
   5 Policies can be specified using the [Group Policy templates on Windows](https://github.com/mozilla/policy-templates/tree/master/windows), [Intune on Windows](https://support.mozilla.org/kb/managing-firefox-intune), [configuration profiles on macOS](https://github.com/mozilla/policy-templates/tree/master/mac), or by creating a file called `policies.json`. On Windows, create a directory called `distribution` where the EXE is located and place the file there. On Mac, the file goes into `Firefox.app/Contents/Resources/distribution`.  On Linux, the file goes into `firefox/distribution`, where `firefox` is the installation directory for firefox, which varies by distribution or you can specify system-wide policy by placing the file in `/etc/firefox/policies`.
   6
   7 | Policy Name | Description
   8 | --- | --- |
   9 | **[`3rdparty`](#3rdparty)** | Set policies that WebExtensions can access via chrome.storage.managed.
  10 | **[`AppAutoUpdate`](#appautoupdate)** | Enable or disable automatic application update.
  11 | **[`AppUpdateURL`](#appupdateurl)** | Change the URL for application update.
  12 | **[`Authentication`](#authentication)** | Configure sites that support integrated authentication.
  13 | **[`BlockAboutAddons`](#blockaboutaddons)** | Block access to the Add-ons Manager (about:addons).
  14 | **[`BlockAboutConfig`](#blockaboutconfig)** | Block access to about:config.
  15 | **[`BlockAboutProfiles`](#blockaboutprofiles)** | Block access to About Profiles (about:profiles).
  16 | **[`BlockAboutSupport`](#blockaboutsupport)** | Block access to Troubleshooting Information (about:support).
  17 | **[`Bookmarks`](#bookmarks)** | Add bookmarks in either the bookmarks toolbar or menu.
  18 | **[`CaptivePortal`](#captiveportal)** | Enable or disable the detection of captive portals.
  19 | **[`Certificates`](#certificates)** |
  20 | **[`Certificates -> ImportEnterpriseRoots`](#certificates--importenterpriseroots)** | Trust certificates that have been added to the operating system certificate store by a user or administrator.
  21 | **[`Certificates -> Install`](#certificates--install)** | Install certificates into the Firefox certificate store.
  22 | **[`Cookies`](#cookies)** | Configure cookie preferences.
  23 | **[`DisableAppUpdate`](#disableappupdate)** | Turn off application updates.
  24 | **[`DisableBuiltinPDFViewer`](#disablebuiltinpdfviewer)** | Disable the built in PDF viewer.
  25 | **[`DisabledCiphers`](#disabledciphers)** | Disable ciphers.
  26 | **[`DisableDefaultBrowserAgent`](#disabledefaultbrowseragent)** | Prevent the default browser agent from taking any actions (Windows only).
  27 | **[`DisableDeveloperTools`](#disabledevelopertools)** | Remove access to all developer tools.
  28 | **[`DisableFeedbackCommands`](#disablefeedbackcommands)** | Disable the menus for reporting sites.
  29 | **[`DisableFirefoxScreenshots`](#disablefirefoxscreenshots)** | Remove access to Firefox Screenshots.
  30 | **[`DisableFirefoxAccounts`](#disablefirefoxaccounts)** | Disable Firefox Accounts integration (Sync).
  31 | **[`DisableFirefoxStudies`](#disablefirefoxstudies)** | Disable Firefox studies (Shield).
  32 | **[`DisableForgetButton`](#disableforgetbutton)** | Disable the "Forget" button.
  33 | **[`DisableFormHistory`](#disableformhistory)** | Turn off saving information on web forms and the search bar.
  34 | **[`DisableMasterPasswordCreation`](#disablemasterpasswordcreation)** | Remove the master password functionality.
  35 | **[`DisablePasswordReveal`](#disablepasswordreveal)** | Do not allow passwords to be revealed in saved logins.
  36 | **[`DisablePocket`](#disablepocket)** | Remove Pocket in the Firefox UI.
  37 | **[`DisablePrivateBrowsing`](#disableprivatebrowsing)** | Remove access to private browsing.
  38 | **[`DisableProfileImport`](#disableprofileimport)** | Disables the "Import data from another browser" option in the bookmarks window.
  39 | **[`DisableProfileRefresh`](#disableprofilerefresh)** | Disable the Refresh Firefox button on about:support and support.mozilla.org
  40 | **[`DisableSafeMode`](#disablesafemode)** | Disable safe mode within the browser.
  41 | **[`DisableSecurityBypass`](#disablesecuritybypass)** | Prevent the user from bypassing security in certain cases.
  42 | **[`DisableSetDesktopBackground`](#disablesetdesktopbackground)** | Remove the "Set As Desktop Background..." menuitem when right clicking on an image.
  43 | **[`DisableSystemAddonUpdate`](#disablesystemaddonupdate)** | Prevent system add-ons from being installed or update.
  44 | **[`DisableTelemetry`](#disabletelemetry)** | DisableTelemetry
  45 | **[`DisplayBookmarksToolbar`](#displaybookmarkstoolbar)** | Set the initial state of the bookmarks toolbar.
  46 | **[`DisplayMenuBar (Deprecated)`](#displaymenubar-deprecated)** | Set the initial state of the menubar.
  47 | **[`DisplayMenuBar`](#displaymenubar)** | Set the state of the menubar.
  48 | **[`DNSOverHTTPS`](#dnsoverhttps)** | Configure DNS over HTTPS.
  49 | **[`DontCheckDefaultBrowser`](#dontcheckdefaultbrowser)** | Don't check if Firefox is the default browser at startup.
  50 | **[`DefaultDownloadDirectory`](#defaultdownloaddirectory)** | Set the default download directory.
  51 | **[`DownloadDirectory`](#downloaddirectory)** | Set and lock the download directory.
  52 | **[`EnableTrackingProtection`](#enabletrackingprotection)** | Configure tracking protection.
  53 | **[`EncryptedMediaExtensions`](#encryptedmediaextensions)** | Enable or disable Encrypted Media Extensions and optionally lock it.
  54 | **[`EnterprisePoliciesEnabled`](#enterprisepoliciesenabled)** | Enable policy support on macOS.
  55 | **[`Extensions`](#extensions)** | Control the installation, uninstallation and locking of extensions.
  56 | **[`ExtensionSettings`](#extensionsettings)** | Manage all aspects of extensions.
  57 | **[`ExtensionUpdate`](#extensionupdate)** | Control extension updates.
  58 | **[`FlashPlugin`](#flashplugin)** | Configure the default Flash plugin policy as well as origins for which Flash is allowed.
  59 | **[`FirefoxHome`](#firefoxhome)** | Customize the Firefox Home page.
  60 | **[`HardwareAcceleration`](#hardwareacceleration)** | Control hardware acceleration.
  61 | **[`Handlers`](#handlers)** | Configure default application handlers.
  62 | **[`Homepage`](#homepage)** | Configure the default homepage and how Firefox starts.
  63 | **[`InstallAddonsPermission`](#installaddonspermission)** | Configure the default extension install policy as well as origins for extension installs are allowed.
  64 | **[`LegacyProfiles`](#legacyprofiles)** | Disable the feature enforcing a separate profile for each installation.
  65 | **[`LocalFileLinks`](#localfilelinks)** | Enable linking to local files by origin.
  66 | **[`ManagedBookmarks`](#managedbookmarks)** | Configures a list of bookmarks managed by an administrator that cannot be changed by the user.
  67 | **[`PrimaryPassword`](#primarypassword)** | Require or prevent using a primary (formerly master) password.
  68 | **[`NetworkPrediction`](#networkprediction)** | Enable or disable network prediction (DNS prefetching).
  69 | **[`NewTabPage`](#newtabpage)** | Enable or disable the New Tab page.
  70 | **[`NoDefaultBookmarks`](#nodefaultbookmarks)** | Disable the creation of default bookmarks.
  71 | **[`OfferToSaveLogins`](#offertosavelogins)** | Control whether or not Firefox offers to save passwords.
  72 | **[`OfferToSaveLoginsDefault`](#offertosaveloginsdefault)** | Set the default value for whether or not Firefox offers to save passwords.
  73 | **[`OverrideFirstRunPage`](#overridefirstrunpage)** | Override the first run page.
  74 | **[`OverridePostUpdatePage`](#overridepostupdatepage)** | Override the upgrade page.
  75 | **[`PasswordManagerEnabled`](#passwordmanagerenabled)** | Remove (some) access to the password manager.
  76 | **[`PDFjs`](#pdfjs)** | Disable or configure PDF.js, the built-in PDF viewer.
  77 | **[`Permissions`](#permissions)** | Set permissions associated with camera, microphone, location, and notifications.
  78 | **[`PictureInPicture`](#pictureinpicture)** | Enable or disable Picture-in-Picture.
  79 | **[`PopupBlocking`](#popupblocking)** | Configure the default pop-up window policy as well as origins for which pop-up windows are allowed.
  80 | **[`Preferences`](#preferences)** | Set and lock preferences.
  81 | **[`Preferences (Deprecated)`](#preferences-deprecated)** | Set and lock some preferences.
  82 | **[`PromptForDownloadLocation`](#promptfordownloadlocation)** | Ask where to save each file before downloading.
  83 | **[`Proxy`](#proxy)** | Configure proxy settings.
  84 | **[`RequestedLocales`](#requestedlocales)** | Set the the list of requested locales for the application in order of preference.
  85 | **[`SanitizeOnShutdown` (All)](#sanitizeonshutdown-all)** | Clear all data on shutdown.
  86 | **[`SanitizeOnShutdown` (Selective)](#sanitizeonshutdown-selective)** | Clear data on shutdown.
  87 | **[`SearchBar`](#searchbar)** | Set whether or not search bar is displayed.
  88 | **[`SearchEngines`](#searchengines-this-policy-is-only-available-on-the-esr)** |
  89 | **[`SearchEngines -> Default`](#searchengines--default)** | Set the default search engine.
  90 | **[`SearchEngines -> PreventInstalls`](#searchengines--preventinstalls)** | Prevent installing search engines from webpages.
  91 | **[`SearchEngines -> Remove`](#searchengines--remove)** | Hide built-in search engines.
  92 | **[`SearchEngines -> Add`](#searchengines--add)** | Add new search engines.
  93 | **[`SearchSuggestEnabled`](#searchsuggestenabled)** | Enable search suggestions.
  94 | **[`SecurityDevices`](#securitydevices)** | Install PKCS #11 modules.
  95 | **[`SSLVersionMax`](#sslversionmax)** | Set and lock the maximum version of TLS.
  96 | **[`SSLVersionMin`](#sslversionmin)** | Set and lock the minimum version of TLS.
  97 | **[`SupportMenu`](#supportmenu)** | Add a menuitem to the help menu for specifying support information.
  98 | **[`UserMessaging`](#usermessaging)** | Don't show certain messages to the user.
  99 | **[`WebsiteFilter`](#websitefilter)** | Block websites from being visited.
 100
 101 ### 3rdparty
 102
 103 Allow WebExtensions to configure policy. For more information, see [Adding policy support to your extension](https://extensionworkshop.com/documentation/enterprise/adding-policy-support-to-your-extension/).
 104
 105 ### AppAutoUpdate
 106
 107 Enable or disable **automatic** application update.
 108
 109 If set to true, application updates are installed without user approval within Firefox. The operating system might still require approval.
 110
 111 If set to false, application updates are downloaded but the user can choose when to install the update.
 112
 113 If you have disabled updates via DisableAppUpdate, this policy has no effect.
 114
 115 **Compatibility:** Firefox 75, Firefox ESR 68.7\
 116 **CCK2 Equivalent:** N/A\
 117 **Preferences Affected:** app.update.auto
 118
 119 #### Windows (GPO)
 120 ```
 121 Software\Policies\Mozilla\Firefox\AppAutoUpdate = 0x1 | 0x0
 122 ```
 123 #### Windows (Intune)
 124 OMA-URI:
 125 ```
 126 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AppAutoUpdate
 127 ```
 128 Value (string):
 129 ```
 130 <enabled/> or <disabled/>
 131 ```
 132 #### macOS
 133 ```
 134 <dict>
 135   <key>AppAutoUpdate</key>
 136   <true/> | <false/>
 137 </dict>
 138 ```
 139 #### policies.json
 140 ```
 141 {
 142   "policies": {
 143     "AppAutoUpdate": true | false
 144   }
 145 }
 146 ```
 147 ### AppUpdateURL
 148
 149 Change the URL for application update if you are providing Firefox updates from a custom update server.
 150
 151 **Compatibility:** Firefox 62, Firefox ESR 60.2\
 152 **CCK2 Equivalent:** N/A\
 153 **Preferences Affected:** `app.update.url`
 154
 155 #### Windows (GPO)
 156 ```
 157 Software\Policies\Mozilla\Firefox\AppUpdateURL = "https://yoursite.com"
 158 ```
 159 #### Windows (Intune)
 160 OMA-URI:
 161 ```
 162 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AppUpdateURL
 163 ```
 164 Value (string):
 165 ```
 166 <enabled/>
 167 <data id="AppUpdateURL" value="https://yoursite.com"/>
 168 ```
 169 #### macOS
 170 ```
 171 <dict>
 172   <key>AppUpdateURL</key>
 173   <string>https://yoursite.com</string>
 174 </dict>
 175 ```
 176 #### policies.json
 177 ```
 178 {
 179   "policies": {
 180     "AppUpdateURL": "https://yoursite.com"
 181   }
 182 }
 183 ```
 184 ### Authentication
 185
 186 Configure sites that support integrated authentication.
 187
 188 See https://developer.mozilla.org/en-US/docs/Mozilla/Integrated_authentication for more information.
 189
 190 `PrivateBrowsing` enables integrated authentication in private browsing.
 191
 192 **Compatibility:** Firefox 60, Firefox ESR 60 (AllowNonFQDN added in 62/60.2, AllowProxies added in 70/68.2, Locked added in 71/68.3, PrivateBrowsing added in 77/68.9)\
 193 **CCK2 Equivalent:** N/A\
 194 **Preferences Affected:** `network.negotiate-auth.trusted-uris`,`network.negotiate-auth.delegation-uris`,`network.automatic-ntlm-auth.trusted-uris`,`network.automatic-ntlm-auth.allow-non-fqdn`,`network.negotiate-auth.allow-non-fqdn`,`network.automatic-ntlm-auth.allow-proxies`,`network.negotiate-auth.allow-proxies`,`network.auth.private-browsing-sso`
 195
 196 #### Windows (GPO)
 197 ```
 198 Software\Policies\Mozilla\Firefox\Authentication\SPNEGO\1 = "mydomain.com"
 199 Software\Policies\Mozilla\Firefox\Authentication\SPNEGO\2 = "https://myotherdomain.com"
 200 Software\Policies\Mozilla\Firefox\Authentication\Delegated\1 = "mydomain.com"
 201 Software\Policies\Mozilla\Firefox\Authentication\Delegated\2 = "https://myotherdomain.com"
 202 Software\Policies\Mozilla\Firefox\Authentication\NTLM\1 = "mydomain.com"
 203 Software\Policies\Mozilla\Firefox\Authentication\NTLM\2 = "https://myotherdomain.com"
 204 Software\Policies\Mozilla\Firefox\Authentication\AllowNonFQDN\SPNEGO = 0x1 | 0x0
 205 Software\Policies\Mozilla\Firefox\Authentication\AllowNonFQDN\NTLM = 0x1 | 0x0
 206 Software\Policies\Mozilla\Firefox\Authentication\AllowProxies\SPNEGO = 0x1 | 0x0
 207 Software\Policies\Mozilla\Firefox\Authentication\AllowProxies\NTLM = 0x1 | 0x0
 208 Software\Policies\Mozilla\Firefox\Authentication\Locked = 0x1 | 0x0
 209 Software\Policies\Mozilla\Firefox\Authentication\PrivateBrowsing = 0x1 | 0x0
 210 ```
 211 #### Windows (Intune)
 212 OMA-URI:
 213 ```
 214 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_SPNEGO
 215 ```
 216 Value (string):
 217 ```
 218 <enabled/>
 219 <data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
 220 ```
 221 OMA-URI:
 222 ```
 223 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_Delegated
 224 ```
 225 Value (string):
 226 ```
 227 <enabled/>
 228 <data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
 229 ```
 230 OMA-URI:
 231 ```
 232 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_NTLM
 233 ```
 234 Value (string):
 235 ```
 236 <enabled/>
 237 <data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
 238 ```
 239 OMA-URI:
 240 ```
 241 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_AllowNonFQDN
 242 ```
 243 Value (string):
 244 ```
 245 <enabled/>
 246 <data id="Authentication_AllowNonFQDN_NTLM" value="true | false"/>
 247 <data id="Authentication_AllowNonFQDN_SPNEGO" value="true | false"/>
 248 ```
 249 OMA-URI:
 250 ```
 251 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_Locked
 252 ```
 253 Value (string):
 254 ```
 255 <enabled/> or <disabled/>
 256 ```
 257 OMA-URI:
 258 ```
 259 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_PrivateBrowsing
 260 ```
 261 Value (string):
 262 ```
 263 <enabled/> or <disabled/>
 264 ```
 265 #### macOS
 266 ```
 267 <dict>
 268   <key>Authentication</key>
 269   <dict>
 270     <key>SPNEGO</key>
 271     <array>
 272       <string>mydomain.com</string>
 273       <string>https://myotherdomain.com</string>
 274     </array>
 275     <key>Delegated</key>
 276     <array>
 277       <string>mydomain.com</string>
 278       <string>https://myotherdomain.com</string>
 279     </array>
 280     <key>NTLM</key>
 281     <array>
 282       <string>mydomain.com</string>
 283       <string>https://myotherdomain.com</string>
 284     </array>
 285     <key>AllowNonFQDN</key>
 286       <dict>
 287       <key>SPNEGO</key>
 288       <true/> | <false/>
 289       <key>NTLM</key>
 290       <true/> | <false/>
 291     </dict>
 292     <key>AllowProxies</key>
 293       <dict>
 294       <key>SPNEGO</key>
 295       <true/> | <false/>
 296       <key>NTLM</key>
 297       <true/> | <false/>
 298     </dict>
 299     <key>Locked</key>
 300     <true/> | <false/>
 301     <key>PrivateBrowsing</key>
 302     <true/> | <false/>
 303   </dict>
 304 </dict>
 305 ```
 306 #### policies.json
 307 ```
 308 {
 309   "policies": {
 310     "Authentication": {
 311       "SPNEGO": ["mydomain.com", "https://myotherdomain.com"],
 312       "Delegated": ["mydomain.com", "https://myotherdomain.com"],
 313       "NTLM": ["mydomain.com", "https://myotherdomain.com"],
 314       "AllowNonFQDN": {
 315         "SPNEGO": true | false,
 316         "NTLM": true | false
 317       },
 318       "AllowProxies": {
 319         "SPNEGO": true | false,
 320         "NTLM": true | false
 321       },
 322       "Locked": true | false,
 323       "PrivateBrowsing": true | false
 324     }
 325   }
 326 }
 327 ```
 328 ### BlockAboutAddons
 329
 330 Block access to the Add-ons Manager (about:addons).
 331
 332 **Compatibility:** Firefox 60, Firefox ESR 60\
 333 **CCK2 Equivalent:** `disableAddonsManager`\
 334 **Preferences Affected:** N/A
 335
 336 #### Windows (GPO)
 337 ```
 338 Software\Policies\Mozilla\Firefox\BlockAboutAddons = 0x1 | 0x0
 339 ```
 340 #### Windows (Intune)
 341 OMA-URI:
 342 ```
 343 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutAddons
 344 ```
 345 Value (string):
 346 ```
 347 <enabled/> or <disabled/>
 348 ```
 349 #### macOS
 350 ```
 351 <dict>
 352   <key>BlockAboutAddons</key>
 353   <true/> | <false/>
 354 </dict>
 355 ```
 356 #### policies.json
 357 ```
 358 {
 359   "policies": {
 360     "BlockAboutAddons": true | false
 361   }
 362 }
 363 ```
 364 ### BlockAboutConfig
 365
 366 Block access to about:config.
 367
 368 **Compatibility:** Firefox 60, Firefox ESR 60\
 369 **CCK2 Equivalent:** `disableAboutConfig`\
 370 **Preferences Affected:** N/A
 371
 372 #### Windows (GPO)
 373 ```
 374 Software\Policies\Mozilla\Firefox\BlockAboutConfig = 0x1 | 0x0
 375 ```
 376 #### Windows (Intune)
 377 OMA-URI:
 378 ```
 379 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutConfig
 380 ```
 381 Value (string):
 382 ```
 383 <enabled/> or <disabled/>
 384 ```
 385 #### macOS
 386 ```
 387 <dict>
 388   <key>BlockAboutConfig</key>
 389   <true/> | <false/>
 390 </dict>
 391 ```
 392 #### policies.json
 393 ```
 394 {
 395   "policies": {
 396     "BlockAboutConfig": true | false
 397   }
 398 }
 399 ```
 400 ### BlockAboutProfiles
 401
 402 Block access to About Profiles (about:profiles).
 403
 404 **Compatibility:** Firefox 60, Firefox ESR 60\
 405 **CCK2 Equivalent:** `disableAboutProfiles`\
 406 **Preferences Affected:** N/A
 407
 408 #### Windows (GPO)
 409 ```
 410 Software\Policies\Mozilla\Firefox\BlockAboutProfiles = 0x1 | 0x0
 411 ```
 412 #### Windows (Intune)
 413 OMA-URI:
 414 ```
 415 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutProfiles
 416 ```
 417 Value (string):
 418 ```
 419 <enabled/> or <disabled/>
 420 ```
 421 #### macOS
 422 ```
 423 <dict>
 424   <key>BlockAboutProfiles</key>
 425   <true/> | <false/>
 426 </dict>
 427 ```
 428 #### policies.json
 429 ```
 430 {
 431   "policies": {
 432     "BlockAboutProfiles": true | false
 433   }
 434 }
 435 ```
 436 ### BlockAboutSupport
 437
 438 Block access to Troubleshooting Information (about:support).
 439
 440 **Compatibility:** Firefox 60, Firefox ESR 60\
 441 **CCK2 Equivalent:** `disableAboutSupport`\
 442 **Preferences Affected:** N/A
 443
 444 #### Windows (GPO)
 445 ```
 446 Software\Policies\Mozilla\Firefox\BlockAboutSupport = 0x1 | 0x0
 447 ```
 448 #### Windows (Intune)
 449 OMA-URI:
 450 ```
 451 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutSupport
 452 ```
 453 Value (string):
 454 ```
 455 <enabled/> or <disabled/>
 456 ```
 457 #### macOS
 458 ```
 459 <dict>
 460   <key>BlockAboutSupport</key>
 461   <true/> | <false/>
 462 </dict>
 463 ```
 464 #### policies.json
 465 ```
 466 {
 467   "policies": {
 468     "BlockAboutSupport": true | false
 469   }
 470 }
 471 ```
 472 ### Bookmarks
 473
 474 Note: [`ManagedBookmarks`](#managedbookmarks) is the new recommended way to add bookmarks. This policy will continue to be supported.
 475
 476 Add bookmarks in either the bookmarks toolbar or menu. Only `Title` and `URL` are required. If `Placement` is not specified, the bookmark will be placed on the toolbar. If `Folder` is specified, it is automatically created and bookmarks with the same folder name are grouped together.
 477
 478 **Compatibility:** Firefox 60, Firefox ESR 60\
 479 **CCK2 Equivalent:** `bookmarks.toolbar`,`bookmarks.menu`\
 480 **Preferences Affected:** N/A
 481
 482 #### Windows (GPO)
 483 ```
 484 Software\Policies\Mozilla\Firefox\Bookmarks\1\Title = "Example"
 485 Software\Policies\Mozilla\Firefox\Bookmarks\1\URL = "https://example.com"
 486 Software\Policies\Mozilla\Firefox\Bookmarks\1\Favicon = "https://example.com/favicon.ico"
 487 Software\Policies\Mozilla\Firefox\Bookmarks\1\Placement = "toolbar" | "menu"
 488 Software\Policies\Mozilla\Firefox\Bookmarks\1\Folder = "FolderName"
 489 ```
 490 #### Windows (Intune)
 491 OMA-URI:
 492 ```
 493 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Bookmarks/Bookmark01
 494 ```
 495 Value (string):
 496 ```
 497 <enabled/>
 498 <data id="BookmarkTitle" value="Example"/>
 499 <data id="BookmarkURL" value="https://example.com"/>
 500 <data id="BookmarkFavicon" value="https://example.com/favicon.ico"/>
 501 <data id="BookmarkPlacement" value="toolbar | menu"/>
 502 <data id="BookmarkFolder" value="FolderName"/>
 503 ```
 504 #### macOS
 505 ```
 506 <dict>
 507   <key>Bookmarks</key>
 508   <array>
 509     <dict>
 510       <key>Title</key>
 511       <string>Example</string>
 512       <key>URL</key>
 513       <string>https://example.com</string>
 514       <key>Favicon</key>
 515       <string>https://example.com/favicon.ico</string>
 516       <key>Placement</key>
 517       <string>toolbar | menu</string>
 518       <key>Folder</key>
 519       <string>FolderName</string>
 520     </dict>
 521   </array>
 522 </dict>
 523 ```
 524 #### policies.json
 525 ```
 526 {
 527   "policies": {
 528     "Bookmarks": [
 529       {
 530         "Title": "Example",
 531         "URL": "https://example.com",
 532         "Favicon": "https://example.com/favicon.ico",
 533         "Placement": "toolbar" | "menu",
 534         "Folder": "FolderName"
 535       }
 536     ]
 537   }
 538 }
 539 ```
 540 ### CaptivePortal
 541 Enable or disable the detection of captive portals.
 542
 543 **Compatibility:** Firefox 67, Firefox ESR 60.7\
 544 **CCK2 Equivalent:** N/A\
 545 **Preferences Affected:** `network.captive-portal-service.enabled`
 546
 547 #### Windows (GPO)
 548 ```
 549 Software\Policies\Mozilla\Firefox\CaptivePortal = 0x1 | 0x0
 550 ```
 551 #### Windows (Intune)
 552 OMA-URI:
 553 ```
 554 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/CaptivePortal
 555 ```
 556 Value (string):
 557 ```
 558 <enabled/> or <disabled/>
 559 ```
 560 #### macOS
 561 ```
 562 <dict>
 563   <key>CaptivePortal</key>
 564   <true/> | <false/>
 565 </dict>
 566 ```
 567 #### policies.json
 568 ```
 569 {
 570   "policies": {
 571     "CaptivePortal": true | false
 572   }
 573 }
 574 ```
 575 ### Certificates
 576
 577 ### Certificates | ImportEnterpriseRoots
 578
 579 Trust certificates that have been added to the operating system certificate store by a user or administrator.
 580
 581 Note: This policy only works on Windows and macOS. For Linux discussion, see [bug 1600509](https://bugzilla.mozilla.org/show_bug.cgi?id=1600509).
 582
 583 See https://support.mozilla.org/kb/setting-certificate-authorities-firefox for more detail.
 584
 585 **Compatibility:** Firefox 60, Firefox ESR 60 (macOS support in Firefox 63, Firefox ESR 68)\
 586 **CCK2 Equivalent:** N/A\
 587 **Preferences Affected:** `security.enterprise_roots.enabled`
 588
 589 #### Windows (GPO)
 590 ```
 591 Software\Policies\Mozilla\Firefox\Certificates\ImportEnterpriseRoots = 0x1 | 0x0
 592 ```
 593 #### Windows (Intune)
 594 OMA-URI:
 595 ```
 596 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Certificates/Certificates_ImportEnterpriseRoots
 597 ```
 598 Value (string):
 599 ```
 600 <enabled/> or <disabled/>
 601 ```
 602 #### macOS
 603 ```
 604 <dict>
 605   <key>Certificates</key>
 606   <dict>
 607     <key>ImportEnterpriseRoots</key>
 608     <true/> | <false/>
 609   </dict>
 610 </dict>
 611 ```
 612 #### policies.json
 613 ```
 614 {
 615   "policies": {
 616     "Certificates": {
 617       "ImportEnterpriseRoots": true | false
 618     }
 619   }
 620 }
 621 ```
 622 ### Certificates | Install
 623
 624 Install certificates into the Firefox certificate store. If only a filename is specified, Firefox searches for the file in the following locations:
 625
 626 - Windows
 627   - %USERPROFILE%\AppData\Local\Mozilla\Certificates
 628   - %USERPROFILE%\AppData\Roaming\Mozilla\Certificates
 629 - macOS
 630   - /Library/Application Support/Mozilla/Certificates
 631   - ~/Library/Application Support/Mozilla/Certificates
 632 - Linux
 633   - /usr/lib/mozilla/certificates
 634   - /usr/lib64/mozilla/certificates
 635   - ~/.mozilla/certificates
 636
 637 Starting with Firefox 65, Firefox 60.5 ESR, a fully qualified path can be used, including UNC paths. You should use the native path style for your operating system. We do not support using %USERPROFILE% or other environment variables on Windows.
 638
 639 If you are specifying the path in the policies.json file on Windows, you need to escape your backslashes (`\\`) which means that for UNC paths, you need to escape both (`\\\\`). If you use group policy, you only need one backslash.
 640
 641 Certificates are installed using the trust string `CT,CT,`.
 642
 643 Binary (DER) and ASCII (PEM) certificates are both supported.
 644
 645 **Compatibility:** Firefox 64, Firefox ESR 64\
 646 **CCK2 Equivalent:** `certs.ca`\
 647 **Preferences Affected:** N/A
 648
 649 #### Windows (GPO)
 650 ```
 651 Software\Policies\Mozilla\Firefox\Certificates\Install\1 = "cert1.der"
 652 Software\Policies\Mozilla\Firefox\Certificates\Install\2 = "C:\Users\username\cert2.pem"
 653 ```
 654 #### Windows (Intune)
 655 OMA-URI:
 656 ```
 657 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Certificates/Certificates_Install
 658 ```
 659 Value (string):
 660 ```
 661 <enabled/>
 662 <data id="Certificates_Install" value="1&#xF000;cert1.der&#xF000;2&#xF000;C:\Users\username\cert2.pem"/>
 663 ```
 664 #### macOS
 665 ```
 666 <dict>
 667   <key>Certificates</key>
 668   <dict>
 669     <key>Install</key>
 670     <array>
 671       <string>cert1.der</string>
 672       <string>/Users/username/cert2.pem</string>
 673     </array>
 674   </dict>
 675 </dict>
 676 ```
 677 #### policies.json
 678 ```
 679 {
 680   "policies": {
 681     "Certificates": {
 682       "Install": ["cert1.der", "/home/username/cert2.pem"]
 683     }
 684   }
 685 }
 686 ```
 687 ### Cookies
 688 Configure cookie preferences.
 689
 690 `Allow` is a list of origins (not domains) where cookies are always allowed. You must include http or https.
 691
 692 `AllowSession` is a list of origins (not domains) where cookies are only allowed for the current session. You must include http or https.
 693
 694 `Block` is a list of origins (not domains) where cookies are always blocked. You must include http or https.
 695
 696 `Default` determines whether cookies are accepted at all.
 697
 698 `AcceptThirdParty` determines how third-party cookies are handled.
 699
 700 `ExpireAtSessionEnd` determines when cookies expire.
 701
 702 `RejectTracker` only rejects cookies for trackers.
 703
 704 `Locked` prevents the user from changing cookie preferences.
 705
 706 **Compatibility:** Firefox 60, Firefox ESR 60 (RejectTracker added in Firefox 63, AllowSession added in Firefox 79/78.1)\
 707 **CCK2 Equivalent:** N/A\
 708 **Preferences Affected:** `network.cookie.cookieBehavior`,`network.cookie.lifetimePolicy`
 709
 710 #### Windows (GPO)
 711 ```
 712 Software\Policies\Mozilla\Firefox\Cookies\Allow\1 = "https://example.com"
 713 Software\Policies\Mozilla\Firefox\Cookies\AllowSession\1 = "https://example.edu"
 714 Software\Policies\Mozilla\Firefox\Cookies\Block\1 = "https://example.org"
 715 Software\Policies\Mozilla\Firefox\Cookies\Default = 0x1 | 0x0
 716 Software\Policies\Mozilla\Firefox\Cookies\AcceptThirdParty = "always" | "never" | "from-visited"
 717 Software\Policies\Mozilla\Firefox\Cookies\ExpireAtSessionEnd = 0x1 | 0x0
 718 Software\Policies\Mozilla\Firefox\Cookies\RejectTracker = 0x1 | 0x0
 719 Software\Policies\Mozilla\Firefox\Cookies\Locked = 0x1 | 0x0
 720 ```
 721 #### Windows (Intune)
 722 OMA-URI:
 723 ```
 724 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Allow
 725 ```
 726 Value (string):
 727 ```
 728 <enabled/>
 729 <data id="Cookies_Allow" value="1&#xF000;https://example.com"/>
 730 ```
 731 OMA-URI:
 732 ```
 733 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_AllowSession
 734 ```
 735 Value (string):
 736 ```
 737 <enabled/>
 738 <data id="Cookies_Allow" value="1&#xF000;https://example.edu"/>
 739 ```
 740 OMA-URI:
 741 ```
 742 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Block
 743 ```
 744 Value (string):
 745 ```
 746 <enabled/>
 747 <data id="Cookies_Block" value="1&#xF000;https://example.org"/>
 748 ```
 749 OMA-URI:
 750 ```
 751 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Default
 752 ```
 753 Value (string):
 754 ```
 755 <enabled/> or <disabled/>
 756 ```
 757 OMA-URI:
 758 ```
 759 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_AcceptThirdParty
 760 ```
 761 Value (string):
 762 ```
 763 <enabled/>
 764 <data id="Cookies_AcceptThirdParty" value="always | never | from-visited"/>
 765 ```
 766 OMA-URI:
 767 ```
 768 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_ExpireAtSessionEnd
 769 ```
 770 Value (string):
 771 ```
 772 <enabled/> or <disabled/>
 773 ```
 774 OMA-URI:
 775 ```
 776 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_RejectTracker
 777 ```
 778 Value (string):
 779 ```
 780 <enabled/> or <disabled/>
 781 ```
 782 OMA-URI:
 783 ```
 784 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Locked
 785 ```
 786 Value (string):
 787 ```
 788 <enabled/> or <disabled/>
 789 ```
 790 #### macOS
 791 ```
 792 <dict>
 793   <key>Cookies</key>
 794   <dict>
 795     <key>Allow</key>
 796     <array>
 797       <string>http://example.com</string>
 798     </array>
 799     <key>AllowSession</key>
 800     <array>
 801       <string>http://example.edu</string>
 802     </array>
 803     <key>Block</key>
 804     <array>
 805       <string>http://example.org</string>
 806     </array>
 807     <key>Default</key>
 808     <true/> | <false/>
 809     <key>AcceptThirdParty</key>
 810     <string>always | never | from-visited</string>
 811     <key>ExpireAtSessionEnd</key>
 812     <true/> | <false/>
 813     <key>RejectTracker</key>
 814     <true/> | <false/>
 815     <key>Locked</key>
 816     <true/> | <false/>
 817   </dict>
 818 </dict>
 819 ```
 820 #### policies.json
 821 ```
 822 {
 823   "policies": {
 824     "Cookies": {
 825       "Allow": ["http://example.org/"],
 826       "AllowSession": ["http://example.edu/"],
 827       "Block": ["http://example.edu/"],
 828       "Default": true | false,
 829       "AcceptThirdParty": "always" | "never" | "from-visited",
 830       "ExpireAtSessionEnd": true | false,
 831       "RejectTracker": true | false,
 832       "Locked": true | false
 833     }
 834   }
 835 }
 836 ```
 837 ### DisableSetDesktopBackground
 838 Remove the "Set As Desktop Background..." menuitem when right clicking on an image.
 839
 840 **Compatibility:** Firefox 60, Firefox ESR 60\
 841 **CCK2 Equivalent:** `removeSetDesktopBackground`\
 842 **Preferences Affected:** N/A
 843
 844 #### Windows (GPO)
 845 ```
 846 Software\Policies\Mozilla\Firefox\DisableSetDesktopBackground = 0x1 | 0x0
 847 ```
 848 #### Windows (Intune)
 849 OMA-URI:
 850 ```
 851 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSetDesktopBackground
 852 ```
 853 Value (string):
 854 ```
 855 <enabled/> or <disabled/>
 856 ```
 857 #### macOS
 858 ```
 859 <dict>
 860   <key>DisableSetDesktopBackground</key>
 861   <true/> | <false/>
 862 </dict>
 863 ```
 864 #### policies.json
 865 ```
 866 {
 867   "policies": {
 868     "DisableSetDesktopBackground": true | false
 869   }
 870 }
 871 ```
 872 ### DisableMasterPasswordCreation
 873 Remove the master password functionality.
 874
 875 If this value is true, it works the same as setting [`PrimaryPassword`](#primarypassword) to false and removes the primary password functionality.
 876
 877 If both DisableMasterPasswordCreation and PrimaryPassword are used, DisableMasterPasswordCreation takes precedent.
 878
 879 **Compatibility:** Firefox 60, Firefox ESR 60\
 880 **CCK2 Equivalent:** `noMasterPassword`\
 881 **Preferences Affected:** N/A
 882
 883 #### Windows (GPO)
 884 ```
 885 Software\Policies\Mozilla\Firefox\DisableMasterPasswordCreation = 0x1 | 0x0
 886 ```
 887 #### Windows (Intune)
 888 OMA-URI:
 889 ```
 890 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableMasterPasswordCreation
 891 ```
 892 Value (string):
 893 ```
 894 <enabled/> or <disabled/>
 895 ```
 896 #### macOS
 897 ```
 898 <dict>
 899   <key>DisableMasterPasswordCreation</key>
 900   <true/> | <false/>
 901 </dict>
 902 ```
 903 #### policies.json
 904 ```
 905 {
 906   "policies": {
 907     "DisableMasterPasswordCreation": true | false
 908   }
 909 }
 910 ```
 911 ### DisableAppUpdate
 912 Turn off application updates within Firefox.
 913
 914 **Compatibility:** Firefox 60, Firefox ESR 60\
 915 **CCK2 Equivalent:** `disableFirefoxUpdates`\
 916 **Preferences Affected:** N/A
 917
 918 #### Windows (GPO)
 919 ```
 920 Software\Policies\Mozilla\Firefox\DisableAppUpdate = 0x1 | 0x0
 921 ```
 922 #### Windows (Intune)
 923 OMA-URI:
 924 ```
 925 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableAppUpdate
 926 ```
 927 Value (string):
 928 ```
 929 <enabled/> or <disabled/>
 930 ```
 931 #### macOS
 932 ```
 933 <dict>
 934   <key>DisableAppUpdate</key>
 935   <true/> | <false/>
 936 </dict>
 937 ```
 938 #### policies.json
 939 ```
 940 {
 941   "policies": {
 942     "DisableAppUpdate": true | false
 943   }
 944 }
 945 ```
 946 ### DisableBuiltinPDFViewer
 947 Disable the built in PDF viewer. PDF files are downloaded and sent externally.
 948
 949 **Compatibility:** Firefox 60, Firefox ESR 60\
 950 **CCK2 Equivalent:** `disablePDFjs`\
 951 **Preferences Affected:** `pdfjs.disabled`
 952
 953 #### Windows (GPO)
 954 ```
 955 Software\Policies\Mozilla\Firefox\DisableBuiltinPDFViewer = 0x1 | 0x0
 956 ```
 957 #### Windows (Intune)
 958 OMA-URI:
 959 ```
 960 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableBuiltinPDFViewer
 961 ```
 962 Value (string):
 963 ```
 964 <enabled/> or <disabled/>
 965 ```
 966 #### macOS
 967 ```
 968 <dict>
 969   <key>DisableBuiltinPDFViewer</key>
 970   <true/> | <false/>
 971 </dict>
 972 ```
 973 #### policies.json
 974 ```
 975 {
 976   "policies": {
 977     "DisableBuiltinPDFViewer": true | false
 978   }
 979 }
 980 ```
 981 ### DisabledCiphers
 982 Disable specific cryptographic ciphers.
 983
 984 ---
 985 **Note:**
 986
 987 This policy was updated in Firefox 78 to allow enabling ciphers as well. Setting the value to true disables the cipher, setting the value to false enables the cipher. Previously setting the value to true or false disabled the cipher.
 988
 989 ---
 990 **Compatibility:** Firefox 76, Firefox ESR 68.8 (TLS_RSA_WITH_AES_128_GCM_SHA256 and TLS_RSA_WITH_AES_256_GCM_SHA384 were added in Firefox 78)\
 991 **CCK2 Equivalent:** N/A\
 992 **Preferences Affected:** N/A
 993
 994 #### Windows (GPO)
 995 ```
 996 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_DHE_RSA_WITH_AES_128_CBC_SHA = 0x1 | 0x0
 997 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_DHE_RSA_WITH_AES_256_CBC_SHA = 0x1 | 0x0
 998 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA = 0x1 | 0x0
 999 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA = 0x1 | 0x0
1000 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 = 0x1 | 0x0
1001 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 = 0x1 | 0x0
1002 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_RSA_WITH_AES_128_CBC_SHA = 0x1 | 0x0
1003 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_RSA_WITH_AES_256_CBC_SHA = 0x1 | 0x0
1004 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_RSA_WITH_3DES_EDE_CBC_SHA = 0x1 | 0x0
1005 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_RSA_WITH_AES_128_GCM_SHA256 = 0x1 | 0x0
1006 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_RSA_WITH_AES_256_GCM_SHA384 = 0x1 | 0x0
1007 ```
1008 #### Windows (Intune)
1009 OMA-URI:
1010 ```
1011 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_DHE_RSA_WITH_AES_128_CBC_SHA
1012 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_DHE_RSA_WITH_AES_256_CBC_SHA
1013 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
1014 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
1015 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
1016 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
1017 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_RSA_WITH_AES_128_CBC_SHA
1018 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_RSA_WITH_AES_256_CBC_SHA
1019 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_RSA_WITH_3DES_EDE_CBC_SHA
1020 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_RSA_WITH_AES_128_GCM_SHA256
1021 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_RSA_WITH_AES_256_GCM_SHA384
1022 ```
1023 Value (string):
1024 ```
1025 <enabled/> or <disabled/>
1026 ```
1027 #### macOS
1028 ```
1029 <dict>
1030   <key>DisabledCiphers</key>
1031     <dict>
1032       <key>TLS_DHE_RSA_WITH_AES_128_CBC_SHA</key>
1033       <true/> | <false/>
1034       <key>TLS_DHE_RSA_WITH_AES_256_CBC_SHA</key>
1035       <true/> | <false/>
1036       <key>TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA</key>
1037       <true/> | <false/>
1038       <key>TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA</key>
1039       <true/> | <false/>
1040       <key>TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256</key>
1041       <true/> | <false/>
1042       <key>TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256</key>
1043       <true/> | <false/>
1044       <key>TLS_RSA_WITH_AES_128_CBC_SHA</key>
1045       <true/> | <false/>
1046       <key>TLS_RSA_WITH_AES_256_CBC_SHA</key>
1047       <true/> | <false/>
1048       <key>TLS_RSA_WITH_3DES_EDE_CBC_SHA</key>
1049       <true/> | <false/>
1050       <key>TLS_RSA_WITH_AES_128_GCM_SHA256</key>
1051       <true/> | <false/>
1052       <key>TLS_RSA_WITH_AES_256_GCM_SHA384</key>
1053       <true/> | <false/>
1054     </dict>
1055 </dict>
1056 ```
1057 #### policies.json
1058 ```
1059 {
1060   "policies": {
1061     "DisabledCiphers": {
1062       "TLS_DHE_RSA_WITH_AES_128_CBC_SHA": true | false,
1063       "TLS_DHE_RSA_WITH_AES_256_CBC_SHA": true | false,
1064       "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA": true | false,
1065       "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA": true | false,
1066       "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256": true | false,
1067       "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256": true | false,
1068       "TLS_RSA_WITH_AES_128_CBC_SHA": true | false,
1069       "TLS_RSA_WITH_AES_256_CBC_SHA": true | false,
1070       "TLS_RSA_WITH_3DES_EDE_CBC_SHA": true | false,
1071       "TLS_RSA_WITH_AES_128_GCM_SHA256": true | false,
1072       "TLS_RSA_WITH_AES_256_GCM_SHA384": true | false
1073     }
1074   }
1075 }
1076 ```
1077 ### DisableDefaultBrowserAgent
1078 Prevent the default browser agent from taking any actions. Only applicable to Windows; other platforms don’t have the agent.
1079
1080 The browser agent is a Windows-only scheduled task which runs in the background to collect and submit data about the browser that the user has set as their OS default. More information is available [here](https://firefox-source-docs.mozilla.org/toolkit/mozapps/defaultagent/default-browser-agent/index.html).
1081
1082 **Compatibility:** Firefox 75, Firefox ESR 68.7 (Windows only)\
1083 **CCK2 Equivalent:** N/A\
1084 **Preferences Affected:** N/A
1085
1086 #### Windows (GPO)
1087 ```
1088 Software\Policies\Mozilla\Firefox\DisableDefaultBrowserAgent = 0x1 | 0x0
1089 ```
1090 #### Windows (Intune)
1091 OMA-URI:
1092 ```
1093 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableDefaultBrowserAgent
1094 ```
1095 Value (string):
1096 ```
1097 <enabled/> or <disabled/>
1098 ```
1099 #### policies.json
1100 ```
1101 {
1102   "policies": {
1103     "DisableDefaultBrowserAgent": true | false
1104   }
1105 }
1106 ```
1107 ### DisableDeveloperTools
1108 Remove access to all developer tools.
1109
1110 **Compatibility:** Firefox 60, Firefox ESR 60\
1111 **CCK2 Equivalent:** `removeDeveloperTools`\
1112 **Preferences Affected:** `devtools.policy.disabled`
1113
1114 #### Windows (GPO)
1115 ```
1116 Software\Policies\Mozilla\Firefox\DisableDeveloperTools = 0x1 | 0x0`
1117 ```
1118 #### Windows (Intune)
1119 OMA-URI:
1120 ```
1121 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableDeveloperTools
1122 ```
1123 Value (string):
1124 ```
1125 <enabled/> or <disabled/>
1126 ```
1127 #### macOS
1128 ```
1129 <dict>
1130   <key>DisableDeveloperTools</key>
1131   <true/> | <false/>
1132 </dict>
1133 ```
1134 #### policies.json
1135 ```
1136 {
1137   "policies": {
1138     "DisableDeveloperTools": true | false
1139   }
1140 }
1141 ```
1142 ### DisableFeedbackCommands
1143 Disable the menus for reporting sites (Submit Feedback, Report Deceptive Site).
1144
1145 **Compatibility:** Firefox 60, Firefox ESR 60\
1146 **CCK2 Equivalent:** N/A\
1147 **Preferences Affected:** N/A
1148
1149 #### Windows (GPO)
1150 ```
1151 Software\Policies\Mozilla\Firefox\DisableFeedbackCommands = 0x1 | 0x0
1152 ```
1153 #### Windows (Intune)
1154 OMA-URI:
1155 ```
1156 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFeedbackCommands
1157 ```
1158 Value (string):
1159 ```
1160 <enabled/> or <disabled/>
1161 ```
1162 #### macOS
1163 ```
1164 <dict>
1165   <key>DisableFeedbackCommands</key>
1166   <true/> | <false/>
1167 </dict>
1168 ```
1169 #### policies.json
1170 ```
1171 {
1172   "policies": {
1173     "DisableFeedbackCommands": true | false
1174   }
1175 }
1176 ```
1177 ### DisableFirefoxScreenshots
1178 Remove access to Firefox Screenshots.
1179
1180 **Compatibility:** Firefox 60, Firefox ESR 60\
1181 **CCK2 Equivalent:** N/A\
1182 **Preferences Affected:** `extensions.screenshots.disabled`
1183
1184 #### Windows (GPO)
1185 ```
1186 Software\Policies\Mozilla\Firefox\DisableFirefoxScreenshots = 0x1 | 0x0
1187 ```
1188 #### Windows (Intune)
1189 OMA-URI:
1190 ```
1191 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxScreenshots
1192 ```
1193 Value (string):
1194 ```
1195 <enabled/> or <disabled/>
1196 ```
1197 #### macOS
1198 ```
1199 <dict>
1200   <key>DisableFirefoxScreenshots</key>
1201   <true/> | <false/>
1202 </dict>
1203 ```
1204 #### policies.json
1205 ```
1206 {
1207   "policies": {
1208     "DisableFirefoxScreenshots": true | false
1209   }
1210 }
1211 ```
1212 ### DisableFirefoxAccounts
1213 Disable Firefox Accounts integration (Sync).
1214
1215 **Compatibility:** Firefox 60, Firefox ESR 60\
1216 **CCK2 Equivalent:** `disableSync`\
1217 **Preferences Affected:** `identity.fxaccounts.enabled`
1218
1219 #### Windows (GPO)
1220 ```
1221 Software\Policies\Mozilla\Firefox\DisableFirefoxAccounts = 0x1 | 0x0
1222 ```
1223 #### Windows (Intune)
1224 OMA-URI:
1225 ```
1226 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxAccounts
1227 ```
1228 Value (string):
1229 ```
1230 <enabled/> or <disabled/>
1231 ```
1232 #### macOS
1233 ```
1234 <dict>
1235   <key>DisableFirefoxAccounts</key>
1236   <true/> | <false/>
1237 </dict>
1238 ```
1239 #### policies.json
1240 ```
1241 {
1242   "policies": {
1243     "DisableFirefoxAccounts": true | false
1244   }
1245 }
1246 ```
1247 ### DisableFirefoxStudies
1248 Disable Firefox studies (Shield).
1249
1250 **Compatibility:** Firefox 60, Firefox ESR 60\
1251 **CCK2 Equivalent:** N/A\
1252 **Preferences Affected:** N/A
1253
1254 #### Windows (GPO)
1255 ```
1256 Software\Policies\Mozilla\Firefox\DisableFirefoxStudies = 0x1 | 0x0
1257 ```
1258 #### Windows (Intune)
1259 OMA-URI:
1260 ```
1261 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxStudies
1262 ```
1263 Value (string):
1264 ```
1265 <enabled/> or <disabled/>
1266 ```
1267 #### macOS
1268 ```
1269 <dict>
1270   <key>DisableFirefoxStudies</key>
1271   <true/> | <false/>
1272 </dict>
1273 ```
1274 #### policies.json
1275 ```
1276 {
1277   "policies": {
1278     "DisableFirefoxStudies": true | false
1279   }
1280 }
1281 ```
1282 ### DisableForgetButton
1283 Disable the "Forget" button.
1284
1285 **Compatibility:** Firefox 60, Firefox ESR 60\
1286 **CCK2 Equivalent:** `disableForget`\
1287 **Preferences Affected:** N/A
1288
1289 #### Windows (GPO)
1290 ```
1291 Software\Policies\Mozilla\Firefox\DisableForgetButton = 0x1 | 0x0
1292 ```
1293 #### Windows (Intune)
1294 OMA-URI:
1295 ```
1296 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableForgetButton
1297 ```
1298 Value (string):
1299 ```
1300 <enabled/> or <disabled/>
1301 ```
1302 #### macOS
1303 ```
1304 <dict>
1305   <key>DisableForgetButton</key>
1306   <true/> | <false/>
1307 </dict>
1308 ```
1309 #### policies.json
1310 ```
1311 {
1312   "policies": {
1313     "DisableForgetButton": true | false
1314   }
1315 }
1316 ```
1317 ### DisableFormHistory
1318 Turn off saving information on web forms and the search bar.
1319
1320 **Compatibility:** Firefox 60, Firefox ESR 60\
1321 **CCK2 Equivalent:** `disableFormFill`\
1322 **Preferences Affected:** ` browser.formfill.enable`
1323
1324 #### Windows (GPO)
1325 ```
1326 Software\Policies\Mozilla\Firefox\DisableFormHistory = 0x1 | 0x0
1327 ```
1328 #### Windows (Intune)
1329 OMA-URI:
1330 ```
1331 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFormHistory
1332 ```
1333 Value (string):
1334 ```
1335 <enabled/> or <disabled/>
1336 ```
1337 #### macOS
1338 ```
1339 <dict>
1340   <key>DisableFormHistory</key>
1341   <true/> | <false/>
1342 </dict>
1343 ```
1344 #### policies.json
1345 ```
1346 {
1347   "policies": {
1348     "DisableFormHistory": true | false
1349   }
1350 }
1351 ```
1352 ### DisablePasswordReveal
1353 Do not allow passwords to be shown in saved logins
1354
1355 **Compatibility:** Firefox 71, Firefox ESR 68.3\
1356 **CCK2 Equivalent:** N/A
1357 **Preferences Affected:** N/A
1358
1359 #### Windows (GPO)
1360 ```
1361 Software\Policies\Mozilla\Firefox\DisablePasswordReveal = 0x1 | 0x0
1362 ```
1363 #### Windows (Intune)
1364 OMA-URI:
1365 ```
1366 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePasswordReveal
1367 ```
1368 Value (string):
1369 ```
1370 <enabled/> or <disabled/>
1371 ```
1372 #### macOS
1373 ```
1374 <dict>
1375   <key>DisablePasswordReveal</key>
1376   <true/> | <false/>
1377 </dict>
1378 ```
1379 #### policies.json
1380 ```
1381 {
1382   "policies": {
1383     "DisablePasswordReveal": true | false
1384   }
1385 }
1386 ```
1387 ### DisablePocket
1388 Remove Pocket in the Firefox UI. It does not remove it from the new tab page.
1389
1390 **Compatibility:** Firefox 60, Firefox ESR 60\
1391 **CCK2 Equivalent:** `disablePocket`\
1392 **Preferences Affected:** `extensions.pocket.enabled`
1393
1394 #### Windows (GPO)
1395 ```
1396 Software\Policies\Mozilla\Firefox\DisablePocket = 0x1 | 0x0
1397 ```
1398 #### Windows (Intune)
1399 OMA-URI:
1400 ```
1401 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePocket
1402 ```
1403 Value (string):
1404 ```
1405 <enabled/> or <disabled/>
1406 ```
1407 #### macOS
1408 ```
1409 <dict>
1410   <key>DisablePocket</key>
1411   <true/> | <false/>
1412 </dict>
1413 ```
1414 #### policies.json
1415 ```
1416 {
1417   "policies": {
1418     "DisablePocket": true | false
1419   }
1420 }
1421 ```
1422 ### DisablePrivateBrowsing
1423 Remove access to private browsing.
1424
1425 **Compatibility:** Firefox 60, Firefox ESR 60\
1426 **CCK2 Equivalent:** `disablePrivateBrowsing`\
1427 **Preferences Affected:** N/A
1428
1429 #### Windows (GPO)
1430 ```
1431 Software\Policies\Mozilla\Firefox\DisablePrivateBrowsing = 0x1 | 0x0
1432 ```
1433 #### Windows (Intune)
1434 OMA-URI:
1435 ```
1436 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePrivateBrowsing
1437 ```
1438 Value (string):
1439 ```
1440 <enabled/> or <disabled/>
1441 ```
1442 #### macOS
1443 ```
1444 <dict>
1445   <key>DisablePrivateBrowsing</key>
1446   <true/> | <false/>
1447 </dict>
1448 ```
1449 #### policies.json
1450 ```
1451 {
1452   "policies": {
1453     "DisablePrivateBrowsing": true | false
1454   }
1455 }
1456 ```
1457 ### DisableProfileImport
1458 Disables the "Import data from another browser" option in the bookmarks window.
1459
1460 **Compatibility:** Firefox 60, Firefox ESR 60\
1461 **CCK2 Equivalent:** N/A\
1462 **Preferences Affected:** N/A
1463
1464 #### Windows (GPO)
1465 ```
1466 Software\Policies\Mozilla\Firefox\DisableProfileImport = 0x1 | 0x0
1467 ```
1468 #### Windows (Intune)
1469 OMA-URI:
1470 ```
1471 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableProfileImport
1472 ```
1473 Value (string):
1474 ```
1475 <enabled/> or <disabled/>
1476 ```
1477 #### macOS
1478 ```
1479 <dict>
1480   <key>DisableProfileImport</key>
1481   <true/> | <false/>
1482 </dict>
1483 ```
1484 #### policies.json
1485 ```
1486 {
1487   "policies": {
1488     "DisableProfileImport": true | false
1489   }
1490 }
1491 ```
1492 ### DisableProfileRefresh
1493 Disable the Refresh Firefox button on about:support and support.mozilla.org, as well as the prompt that displays offering to refresh Firefox when you haven't used it in a while.
1494
1495 **Compatibility:** Firefox 60, Firefox ESR 60\
1496 **CCK2 Equivalent:** `disableResetFirefox`\
1497 **Preferences Affected:** `browser.disableResetPrompt`
1498
1499 #### Windows (GPO)
1500 ```
1501 Software\Policies\Mozilla\Firefox\DisableProfileRefresh = 0x1 | 0x0
1502 ```
1503 #### Windows (Intune)
1504 OMA-URI:
1505 ```
1506 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableProfileRefresh
1507 ```
1508 Value (string):
1509 ```
1510 <enabled/> or <disabled/>
1511 ```
1512 #### macOS
1513 ```
1514 <dict>
1515   <key>DisableProfileRefresh</key>
1516   <true/> | <false/>
1517 </dict>
1518 ```
1519 #### policies.json
1520 ```
1521 {
1522   "policies": {
1523     "DisableProfileRefresh": true | false
1524   }
1525 }
1526 ```
1527 ### DisableSafeMode
1528 Disable safe mode within the browser.
1529
1530 On Windows, this disables safe mode via the command line as well.
1531
1532 **Compatibility:** Firefox 60, Firefox ESR 60 (Windows, macOS)\
1533 **CCK2 Equivalent:** `disableSafeMode`\
1534 **Preferences Affected:** N/A
1535
1536 #### Windows (GPO)
1537 ```
1538 Software\Policies\Mozilla\Firefox\DisableSafeMode = 0x1 | 0x0
1539 ```
1540 #### Windows (Intune)
1541 OMA-URI:
1542 ```
1543 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSafeMode
1544 ```
1545 Value (string):
1546 ```
1547 <enabled/> or <disabled/>
1548 ```
1549 #### macOS
1550 ```
1551 <dict>
1552   <key>DisableSafeMode</key>
1553   <true/> | <false/>
1554 </dict>
1555 ```
1556 #### policies.json
1557 ```
1558 {
1559   "policies": {
1560     "DisableSafeMode": true | false
1561   }
1562 }
1563 ```
1564 ### DisableSecurityBypass
1565 Prevent the user from bypassing security in certain cases.
1566
1567 `InvalidCertificate` prevents adding an exception when an invalid certificate is shown.
1568
1569 `SafeBrowsing` prevents selecting "ignore the risk" and visiting a harmful site anyway.
1570
1571 **Compatibility:** Firefox 60, Firefox ESR 60\
1572 **CCK2 Equivalent:** N/A\
1573 **Preferences Affected:** `security.certerror.hideAddException`,`browser.safebrowsing.allowOverride`
1574
1575 #### Windows (GPO)
1576 ```
1577 Software\Policies\Mozilla\Firefox\DisableSecurityBypass\InvalidCertificate = 0x1 | 0x0
1578 Software\Policies\Mozilla\Firefox\DisableSecurityBypass\SafeBrowsing = 0x1 | 0x0
1579 ```
1580 #### Windows (Intune)
1581 OMA-URI:
1582 ```
1583 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/P_DisableSecurityBypass_InvalidCertificate
1584 ```
1585 Value (string):
1586 ```
1587 <enabled/> or <disabled/>
1588 ```
1589 OMA-URI:
1590 ```
1591 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/P_DisableSecurityBypass_SafeBrowsing
1592 ```
1593 Value (string):
1594 ```
1595 <enabled/> or <disabled/>
1596 ```
1597
1598 #### macOS
1599 ```
1600 <dict>
1601   <key>DisableSecurityBypass</key>
1602   <dict>
1603     <key>InvalidCertificate</key>
1604     <true/> | <false/>
1605     <key>SafeBrowsing</key>
1606     <true/> | <false/>
1607   </dict>
1608 </dict>
1609 ```
1610 #### policies.json
1611 ```
1612 {
1613   "policies": {
1614     "DisableSecurityBypass": {
1615       "InvalidCertificate": true | false,
1616       "SafeBrowsing": true | false
1617     }
1618   }
1619 }
1620 ```
1621 ### DisableSystemAddonUpdate
1622 Prevent system add-ons from being installed or update.
1623
1624 **Compatibility:** Firefox 60, Firefox ESR 60\
1625 **CCK2 Equivalent:** N/A\
1626 **Preferences Affected:** N/A
1627
1628 #### Windows (GPO)
1629 ```
1630 Software\Policies\Mozilla\Firefox\DisableSystemAddonUpdate = 0x1 | 0x0
1631 ```
1632 #### Windows (Intune)
1633 OMA-URI:
1634 ```
1635 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSystemAddonUpdate
1636 ```
1637 Value (string):
1638 ```
1639 <enabled/> or <disabled/>
1640 ```
1641 #### macOS
1642 ```
1643 <dict>
1644   <key>DisableSystemAddonUpdate</key>
1645   <true/> | <false/>
1646 </dict>
1647 ```
1648 #### policies.json
1649 ```
1650 {
1651   "policies": {
1652     "DisableSystemAddonUpdate": true | false
1653   }
1654 }
1655 ```
1656 ### DisableTelemetry
1657 Prevent the upload of telemetry data.
1658
1659 As of Firefox 83 and Firefox ESR 78.5, local storage of telemetry data is disabled as well.
1660
1661 Mozilla recommends that you do not disable telemetry. Information collected through telemetry helps us build a better product for businesses like yours.
1662
1663 **Compatibility:** Firefox 60, Firefox ESR 60\
1664 **CCK2 Equivalent:** `disableTelemetry`\
1665 **Preferences Affected:** `datareporting.healthreport.uploadEnabled,datareporting.policy.dataSubmissionEnabled,toolkit.telemetry.archive.enabled`
1666
1667 #### Windows (GPO)
1668 ```
1669 Software\Policies\Mozilla\Firefox\DisableTelemetry = 0x1 | 0x0
1670 ```
1671 #### Windows (Intune)
1672 OMA-URI:
1673 ```
1674 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableTelemetry
1675 ```
1676 Value (string):
1677 ```
1678 <enabled/> or <disabled/>
1679 ```
1680 #### macOS
1681 ```
1682 <dict>
1683   <key>DisableTelemetry</key>
1684   <true/> | <false/>
1685 </dict>
1686 ```
1687 #### policies.json
1688 ```
1689 {
1690   "policies": {
1691     "DisableTelemetry": true | false
1692   }
1693 }
1694 ```
1695 ### DisplayBookmarksToolbar
1696 Set the initial state of the bookmarks toolbar. A user can still hide it and it will stay hidden.
1697
1698 **Compatibility:** Firefox 60, Firefox ESR 60\
1699 **CCK2 Equivalent:** `displayBookmarksToolbar`\
1700 **Preferences Affected:** N/A
1701
1702 #### Windows (GPO)
1703 ```
1704 Software\Policies\Mozilla\Firefox\DisplayBookmarksToolbar = 0x1 | 0x0
1705 ```
1706 #### Windows (Intune)
1707 OMA-URI:
1708 ```
1709 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisplayBookmarksToolbar
1710 ```
1711 Value (string):
1712 ```
1713 <enabled/> or <disabled/>
1714 ```
1715 #### macOS
1716 ```
1717 <dict>
1718   <key>DisplayBookmarksToolbar</key>
1719   <true/> | <false/>
1720 </dict>
1721 ```
1722 #### policies.json
1723 ```
1724 {
1725   "policies": {
1726     "DisplayBookmarksToolbar": true | false
1727   }
1728 }
1729 ```
1730 ### DisplayMenuBar (Deprecated)
1731 Set the initial state of the menubar. A user can still hide it and it will stay hidden.
1732
1733 **Compatibility:** Firefox 60, Firefox ESR 60 (Windows, some Linux)\
1734 **CCK2 Equivalent:** `displayMenuBar`\
1735 **Preferences Affected:** N/A
1736
1737 #### Windows (GPO)
1738 ```
1739 Software\Policies\Mozilla\Firefox\DisplayMenuBar = 0x1 | 0x0
1740 ```
1741 #### macOS
1742 ```
1743 <dict>
1744   <key>DisplayMenuBar</key>
1745   <true/> | <false/>
1746 </dict>
1747 ```
1748 #### policies.json
1749 ```
1750 {
1751   "policies": {
1752     "DisplayMenuBar": true | false
1753   }
1754 }
1755 ```
1756 ### DisplayMenuBar
1757 Set the state of the menubar.
1758
1759 `always` means the menubar is shown and cannot be hidden.
1760
1761 `never` means the menubar is hidden and cannot be shown.
1762
1763 `default-on` means the menubar is on by default but can be hidden.
1764
1765 `default-off` means the menubar is off by default but can be shown.
1766
1767 **Compatibility:** Firefox 73, Firefox ESR 68.5 (Windows, some Linux)\
1768 **CCK2 Equivalent:** `displayMenuBar`\
1769 **Preferences Affected:** N/A
1770
1771 #### Windows (GPO)
1772 ```
1773 Software\Policies\Mozilla\Firefox\DisplayMenuBar = "always", "never", "default-on", "default-off"
1774 ```
1775 #### Windows (Intune)
1776 OMA-URI:
1777 ```
1778 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisplayMenuBar_Enum
1779 ```
1780 Value (string):
1781 ```
1782 <enabled/>
1783 <data id="DisplayMenuBar" value="always | never | default-on | default-off"/>
1784 ```
1785 #### macOS
1786 ```
1787 <dict>
1788   <key>DisplayMenuBar</key>
1789   <string>always | never | default-on | default-off</string>
1790 </dict>
1791 ```
1792 #### policies.json
1793 ```
1794 {
1795   "policies": {
1796     "DisplayMenuBar": "always", "never", "default-on", "default-off"
1797   }
1798 }
1799 ```
1800 ### DNSOverHTTPS
1801 Configure DNS over HTTPS.
1802
1803 `Enabled` determines whether DNS over HTTPS is enabled
1804
1805 `ProviderURL` is a URL to another provider.
1806
1807 `Locked` prevents the user from changing DNS over HTTPS preferences.
1808
1809 `ExcludedDomains` excludes domains from DNS over HTTPS.
1810
1811 **Compatibility:** Firefox 63, Firefox ESR 68 (ExcludedDomains added in 75/68.7)\
1812 **CCK2 Equivalent:** N/A\
1813 **Preferences Affected:** `network.trr.mode`,`network.trr.uri`
1814
1815 #### Windows (GPO)
1816 ```
1817 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\Enabled = 0x1 | 0x0
1818 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\ProviderURL = "URL_TO_ALTERNATE_PROVIDER"
1819 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\Locked = 0x1 | 0x0
1820 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\ExcludedDomains\1 = "example.com"
1821 ```
1822 #### Windows (Intune)
1823 OMA-URI:
1824 ```
1825 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_Enabled
1826 ```
1827 Value (string):
1828 ```
1829 <enabled/> or <disabled/>
1830 ```
1831 OMA-URI:
1832 ```
1833 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_ProviderURL
1834 ```
1835 Value (string):
1836 ```
1837 <enabled/>
1838 <data id="String" value="URL_TO_ALTERNATE_PROVIDER"/>
1839 ```
1840 OMA-URI:
1841 ```
1842 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_Locked
1843 ```
1844 Value (string):
1845 ```
1846 <enabled/> or <disabled/>
1847 ```
1848 OMA-URI:
1849 ```
1850 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_ExcludedDomains
1851 ```
1852 Value (string):
1853 ```
1854 <enabled/>
1855 <data id="List" value="1&#xF000;example.com"/>
1856 ```
1857 #### macOS
1858 ```
1859 <dict>
1860   <key>DNSOverHTTPS</key>
1861   <dict>
1862     <key>Enabled</key>
1863     <true/> | <false/>
1864     <key>ProviderURL</key>
1865     <string>URL_TO_ALTERNATE_PROVIDER</string>
1866     <key>Locked</key>
1867     <true/> | <false/>
1868     <key>ExcludedDomains</key>
1869     <array>
1870       <string>example.com</string>
1871     </array>
1872   </dict>
1873 </dict>
1874 ```
1875 #### policies.json
1876 ```
1877 {
1878   "policies": {
1879     "DNSOverHTTPS": {
1880       "Enabled":  true | false,
1881       "ProviderURL": "URL_TO_ALTERNATE_PROVIDER",
1882       "Locked": true | false,
1883       "ExcludedDomains": ["example.com"]
1884     }
1885   }
1886 }
1887 ```
1888 ### DontCheckDefaultBrowser
1889 Don't check if Firefox is the default browser at startup.
1890
1891 **Compatibility:** Firefox 60, Firefox ESR 60\
1892 **CCK2 Equivalent:** `dontCheckDefaultBrowser`\
1893 **Preferences Affected:** `browser.shell.checkDefaultBrowser`
1894
1895 #### Windows (GPO)
1896 ```
1897 Software\Policies\Mozilla\Firefox\DontCheckDefaultBrowser = 0x1 | 0x0
1898 ```
1899 #### Windows (Intune)
1900 OMA-URI:
1901 ```
1902 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DontCheckDefaultBrowser
1903 ```
1904 Value (string):
1905 ```
1906 <enabled/> or <disabled/>
1907 ```
1908 #### macOS
1909 ```
1910 <dict>
1911   <key>DontCheckDefaultBrowser</key>
1912   <true/> | <false/>
1913 </dict>
1914 ```
1915 #### policies.json
1916 ```
1917 {
1918   "policies": {
1919     "DontCheckDefaultBrowser": true | false
1920   }
1921 }
1922 ```
1923 ### DefaultDownloadDirectory
1924 Set the default download directory.
1925
1926 You can use ${home} for the native home directory.
1927
1928 **Compatibility:** Firefox 68, Firefox ESR 68\
1929 **CCK2 Equivalent:** N/A\
1930 **Preferences Affected:** `browser.download.dir`,`browser.download.folderList`
1931
1932 #### Windows (GPO)
1933 ```
1934 Software\Policies\Mozilla\Firefox\DefaultDownloadDirectory = "${home}\Downloads"
1935 ```
1936 #### Windows (Intune)
1937 OMA-URI:
1938 ```
1939 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DefaultDownloadDirectory
1940 ```
1941 Value (string):
1942 ```
1943 <enabled/>
1944 <data id="Preferences_String" value="${home}\Downloads"/>
1945 ```
1946 #### macOS
1947 ```
1948 <dict>
1949   <key>DefaultDownloadDirectory</key>
1950   <string>${home}/Downloads</string>
1951 </dict>
1952 ```
1953 #### policies.json (macOS and Linux)
1954 ```
1955 {
1956   "policies": {
1957     "DefaultDownloadDirectory": "${home}/Downloads"
1958 }
1959 ```
1960 #### policies.json (Windows)
1961 ```
1962 {
1963   "policies": {
1964     "DefaultDownloadDirectory": "${home}\\Downloads"
1965 }
1966 ```
1967 ### DownloadDirectory
1968 Set and lock the download directory.
1969
1970 You can use ${home} for the native home directory.
1971
1972 **Compatibility:** Firefox 68, Firefox ESR 68\
1973 **CCK2 Equivalent:** N/A\
1974 **Preferences Affected:** `browser.download.dir`,`browser.download.folderList`,`browser.download.useDownloadDir`
1975
1976 #### Windows (GPO)
1977 ```
1978 Software\Policies\Mozilla\Firefox\DownloadDirectory = "${home}\Downloads"
1979 ```
1980 #### Windows (Intune)
1981 OMA-URI:
1982 ```
1983 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DownloadDirectory
1984 ```
1985 Value (string):
1986 ```
1987 <enabled/>
1988 <data id="Preferences_String" value="${home}\Downloads"/>
1989 ```
1990 #### macOS
1991 ```
1992 <dict>
1993   <key>DownloadDirectory</key>
1994   <string>${home}/Downloads</string>
1995 </dict>
1996 ```
1997 #### policies.json (macOS and Linux)
1998 ```
1999 {
2000   "policies": {
2001     "DownloadDirectory": "${home}/Downloads"
2002 }
2003 ```
2004 #### policies.json (Windows)
2005 ```
2006 {
2007   "policies": {
2008     "DownloadDirectory": "${home}\\Downloads"
2009 }
2010 ```
2011 ### EnableTrackingProtection
2012 Configure tracking protection.
2013
2014 If this policy is not configured, tracking protection is not enabled by default in the browser, but it is enabled by default in private browsing and the user can change it.
2015
2016 If `Value` is set to false, tracking protection is disabled and locked in both the regular browser and private browsing.
2017
2018 If `Value` is set to true, tracking protection is enabled by default in both the regular browser and private browsing and the `Locked` value determines whether or not a user can change it.
2019
2020 If `Cryptomining` is set to true, cryptomining scripts on websites are blocked.
2021
2022 If `Fingerprinting` is set to true, fingerprinting scripts on websites are blocked.
2023
2024 `Exceptions` are origins for which tracking protection is not enabled.
2025
2026 **Compatibility:** Firefox 60, Firefox ESR 60 (Cryptomining and Fingerprinting added in 70/68.2, Exceptions added in 73/68.5)\
2027 **CCK2 Equivalent:** N/A\
2028 **Preferences Affected:** `privacy.trackingprotection.enabled`,`privacy.trackingprotection.pbmode.enabled`,`privacy.trackingprotection.cryptomining.enabled`,`privacy.trackingprotection.fingerprinting.enabled`
2029
2030 #### Windows (GPO)
2031 ```
2032 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Value = 0x1 | 0x0
2033 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Locked = 0x1 | 0x0
2034 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Cryptomining = 0x1 | 0x0
2035 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Fingerprinting = 0x1 | 0x0
2036 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Exceptions\1 = "https://example.com"
2037 ```
2038 #### Windows (Intune)
2039 OMA-URI:
2040 ```
2041 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/A_TrackingProtection_Value
2042 ```
2043 Value (string):
2044 ```
2045 <enabled/> or <disabled/>
2046 ```
2047 OMA-URI:
2048 ```
2049 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/B_TrackingProtection_Cryptomining
2050 ```
2051 Value (string):
2052 ```
2053 <enabled/> or <disabled/>
2054 ```
2055 OMA-URI:
2056 ```
2057 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/C_TrackingProtection_Fingerprinting
2058 ```
2059 Value (string):
2060 ```
2061 <enabled/> or <disabled/>
2062 ```
2063 OMA-URI:
2064 ```
2065 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/D_TrackingProtection_Exceptions
2066 ```
2067 Value (string):
2068 ```
2069 <data id="TrackingProtection_Exceptions" value="1&#xF000;https://example.com"/>
2070 ```
2071 OMA-URI:
2072 ```
2073 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/E_TrackingProtection_Locked
2074 ```
2075 Value (string):
2076 ```
2077 <enabled/> or <disabled/>
2078 ```
2079 #### macOS
2080 ```
2081 <dict>
2082   <key>EnableTrackingProtection</key>
2083   <dict>
2084     <key>Value</key>
2085     <true/> | <false/>
2086     <key>Locked</key>
2087     <true/> | <false/>
2088     <key>Cryptomining</key>
2089     <true/> | <false/>
2090     <key>Fingerprinting</key>
2091     <true/> | <false/>
2092     <key>Exceptions</key>
2093     <array>
2094       <string>https://example.com</string>
2095     </array>
2096   </dict>
2097 </dict>
2098 ```
2099 #### policies.json
2100 ```
2101 {
2102   "policies": {
2103     "EnableTrackingProtection": {
2104       "Value": true | false,
2105       "Locked": true | false,
2106       "Cryptomining": true | false,
2107       "Fingerprinting": true | false,
2108       "Exceptions": ["https://example.com"]
2109     }
2110 }
2111 ```
2112 ### EncryptedMediaExtensions
2113 Enable or disable Encrypted Media Extensions and optionally lock it.
2114
2115 If `Enabled` is set to false, encrypted media extensions (like Widevine) are not downloaded by Firefox unless the user consents to installing them.
2116
2117 If `Locked` is set to true and `Enabled` is set to false, Firefox will not download encrypted media extensions (like Widevine) or ask the user to install them.
2118
2119 **Compatibility:** Firefox 77, Firefox ESR 68.9\
2120 **CCK2 Equivalent:** N/A\
2121 **Preferences Affected:** `media.eme.enabled`
2122
2123 #### Windows (GPO)
2124 ```
2125 Software\Policies\Mozilla\Firefox\EncryptedMediaExtensions\Enabled = 0x1 | 0x0
2126 Software\Policies\Mozilla\Firefox\EncryptedMediaExtensions\Locked = 0x1 | 0x0
2127 ```
2128 #### Windows (Intune)
2129 OMA-URI:
2130 ```
2131 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~EncryptedMediaExtensions/EncryptedMediaExtensions_Enabled
2132 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~EncryptedMediaExtensions/EncryptedMediaExtensions_Locked
2133 ```
2134 Value (string):
2135 ```
2136 <enabled/>or <disabled/>
2137 ```
2138 #### macOS
2139 ```
2140 <dict>
2141   <key>EncryptedMediaExtensions</key>
2142   <dict>
2143     <key>Enabled</key>
2144     <true/> | <false/>
2145     <key>Locked</key>
2146     <true/> | <false/>
2147   </dict>
2148 </dict>
2149 ```
2150 #### policies.json
2151 ```
2152 {
2153   "policies": {
2154     "EncryptedMediaExtensions": {
2155       "Enabled": true | false,
2156       "Locked": true | false
2157     }
2158 }
2159 ```
2160 ### EnterprisePoliciesEnabled
2161 Enable policy support on macOS.
2162
2163 **Compatibility:** Firefox 63, Firefox ESR 60.3 (macOS only)\
2164 **CCK2 Equivalent:** N/A\
2165 **Preferences Affected:** N/A
2166
2167 #### macOS
2168 ```
2169 <dict>
2170   <key>EnterprisePoliciesEnabled</key>
2171   <true/>
2172 </dict>
2173 ```
2174 ### Extensions
2175 Control the installation, uninstallation and locking of extensions.
2176
2177 While this policy is not technically deprecated, it is recommended that you use the **[`ExtensionSettings`](#extensionsettings)** policy. It has the same functionality and adds more. It does not support native paths, though, so you'll have to use file:/// URLs.
2178
2179 `Install` is a list of URLs or native paths for extensions to be installed.
2180
2181 `Uninstall` is a list of extension IDs that should be uninstalled if found.
2182
2183 `Locked` is a list of extension IDs that the user cannot disable or uninstall.
2184
2185 **Compatibility:** Firefox 60, Firefox ESR 60\
2186 **CCK2 Equivalent:** `addons`\
2187 **Preferences Affected:** N/A
2188
2189 #### Windows (GPO)
2190 ```
2191 Software\Policies\Mozilla\Firefox\Extensions\Install\1 = "https://addons.mozilla.org/firefox/downloads/somefile.xpi"
2192 Software\Policies\Mozilla\Firefox\Extensions\Install\2 = "//path/to/xpi"
2193 Software\Policies\Mozilla\Firefox\Extensions\Uninstall\1 = "bad_addon_id@mozilla.org"
2194 Software\Policies\Mozilla\Firefox\Extensions\Locked\1 = "addon_id@mozilla.org"
2195 ```
2196 #### Windows (Intune)
2197 OMA-URI:
2198 ```
2199 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/Extensions_Install
2200 ```
2201 Value (string):
2202 ```
2203 <enabled/>
2204 <data id="Extensions" value="1&#xF000;https://addons.mozilla.org/firefox/downloads/somefile.xpi&#xF000;2&#xF000;//path/to/xpi"/>
2205 ```
2206 OMA-URI:
2207 ```
2208 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/Extensions_Uninstall
2209 ```
2210 Value (string):
2211 ```
2212 <enabled/>
2213 <data id="Extensions" value="1&#xF000;bad_addon_id@mozilla.org"/>
2214 ```
2215 OMA-URI:
2216 ```
2217 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/Extensions_Locked
2218 ```
2219 Value (string):
2220 ```
2221 <enabled/>
2222 <data id="Extensions" value="1&#xF000;addon_id@mozilla.org"/>
2223 ```
2224 #### macOS
2225 ```
2226 <dict>
2227   <key>Extensions</key>
2228   <dict>
2229     <key>Install</key>
2230     <array>
2231       <string>https://addons.mozilla.org/firefox/downloads/somefile.xpi</string>
2232       <string>//path/to/xpi</string>
2233     </array>
2234     <key>Uninstall</key>
2235     <array>
2236       <string>bad_addon_id@mozilla.org</string>
2237     </array>
2238     <key>Locked</key>
2239     <array>
2240       <string>addon_id@mozilla.org</string>
2241     </array>
2242   </dict>
2243 </dict>
2244 ```
2245 #### policies.json
2246 ```
2247 {
2248   "policies": {
2249     "Extensions": {
2250       "Install": ["https://addons.mozilla.org/firefox/downloads/somefile.xpi", "//path/to/xpi"],
2251       "Uninstall": ["bad_addon_id@mozilla.org"],
2252       "Locked":  ["addon_id@mozilla.org"]
2253     }
2254   }
2255 }
2256 ```
2257 ### ExtensionSettings
2258 Manage all aspects of extensions. This policy is based heavily on the [Chrome policy](https://dev.chromium.org/administrators/policy-list-3/extension-settings-full) of the same name.
2259
2260 This policy maps an extension ID to its configuration. With an extension ID, the configuration will be applied to the specified extension only. A default configuration can be set for the special ID "*", which will apply to all extensions that don't have a custom configuration set in this policy.
2261
2262 To obtain an extension ID, install the extension and go to about:support. You will see the ID in the Extensions section. I've also created an extension that makes it easy to find the ID of extensions on AMO. You can download it [here](https://github.com/mkaply/queryamoid/releases/tag/v0.1).
2263
2264 The configuration for each extension is another dictionary that can contain the fields documented below.
2265
2266 | Name | Description |
2267 | --- | --- |
2268 | `installation_mode` | Maps to a string indicating the installation mode for the extension. The valid strings are `allowed`,`blocked`,`force_installed`, and `normal_installed`.
2269 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`allowed` | Allows the extension to be installed by the user. This is the default behavior. There is no need for an install_url; it will automatically be allowed based on the ID.
2270 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`blocked`| Blocks installation of the extension and removes it from the device if already installed.
2271 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`force_installed`| The extension is automatically installed and can't be removed by the user. This option is not valid for the default configuration and requires an install_url.
2272 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`normal_installed`| The extension is automatically installed but can be disabled by the user. This option is not valid for the default configuration and requires an install_url.
2273 | `install_url`| Maps to a URL indicating where Firefox can download a force_installed or normal_installed extension.  If installing from the local file system, use a [```file:///``` URL](https://en.wikipedia.org/wiki/File_URI_scheme). If installing from the addons.mozilla.org, use the following URL (substituting SHORT_NAME from the URL on AMO), https://addons.mozilla.org/firefox/downloads/latest/SHORT_NAME/latest.xpi. Languages packs are available from https://releases.mozilla.org/pub/firefox/releases/VERSION/PLATFORM/xpi/LANGUAGE.xpi. If you need to update the extension, you can change the name of the extension and it will be automatically updated. Extensions installed from file URLs will additional be updated when their internal version changes.
2274 | `install_sources` | A list of sources from which installing extensions is allowed. **This is unnecessary if you are only allowing the installation of certain extensions by ID.** Each item in this list is an extension-style match pattern. Users will be able to easily install items from any URL that matches an item in this list. Both the location of the *.xpi file and the page where the download is started from (i.e.  the referrer) must be allowed by these patterns. This setting can be used only for the default configuration.
2275 | `allowed_types` | This setting whitelists the allowed types of extension/apps that can be installed in Firefox. The value is a list of strings, each of which should be one of the following: "extension", "theme", "dictionary", "locale" This setting can be used only for the default configuration.
2276 | `blocked_install_message` | This maps to a string specifying the error message to display to users if they're blocked from installing an extension. This setting allows you to append text to the generic error message displayed when the extension is blocked. This could be be used to direct users to your help desk, explain why a particular extension is blocked, or something else. This setting can be used only for the default configuration.
2277 | `restricted_domains` | An array of domains on which content scripts can't be run. This setting can be used only for the default configuration.
2278
2279 **Compatibility:** Firefox 69, Firefox ESR 68.1 (As of Firefox 85, Firefox ESR 78.7, installing a theme makes it the default.)\
2280 **CCK2 Equivalent:** N/A\
2281 **Preferences Affected:** N/A
2282
2283 #### Windows (GPO)
2284 Software\Policies\Mozilla\Firefox\ExtensionSettings (REG_MULTI_SZ) =
2285 ```
2286 {
2287   "*": {
2288     "blocked_install_message": "Custom error message.",
2289     "install_sources": ["about:addons","https://addons.mozilla.org/"],
2290     "installation_mode": "blocked",
2291     "allowed_types": ["extension"]
2292   },
2293   "uBlock0@raymondhill.net": {
2294     "installation_mode": "force_installed",
2295     "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
2296   },
2297   "https-everywhere@eff.org": {
2298     "installation_mode": "allowed",
2299   }
2300 }
2301 ```
2302 #### Windows (Intune)
2303 OMA-URI:
2304 ```
2305 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/ExtensionSettings
2306 ```
2307 Value (string):
2308 ```
2309 <enabled/>
2310 <data id="ExtensionSettings" value='
2311 {
2312   "*": {
2313     "blocked_install_message": "Custom error message.",
2314     "install_sources": ["about:addons","https://addons.mozilla.org/"],
2315     "installation_mode": "blocked",
2316     "allowed_types": ["extension"]
2317   },
2318   "uBlock0@raymondhill.net": {
2319     "installation_mode": "force_installed",
2320     "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
2321   },
2322     "https-everywhere@eff.org": {
2323     "installation_mode": "allowed",
2324   }
2325 }'/>
2326 ```
2327 #### macOS
2328 ```
2329 <dict>
2330   <key>ExtensionSettings</key>
2331   <dict>
2332     <key>*</key>
2333     <dict>
2334       <key>blocked_install_message</key>
2335       <string>Custom error message.</string>
2336       <key>install_sources</key>
2337       <array>
2338         <string>about:addons</string>
2339         <string>https://addons.mozilla.org/</string>
2340       </array>
2341       <key>installation_mode</key>
2342       <string>blocked</string>
2343       <key>allowed_types</key>
2344       <array>
2345         <string>extension</string>
2346       </array>
2347     </dict>
2348     <key>uBlock0@raymondhill.net</key>
2349     <dict>
2350       <key>installation_mode</key>
2351        <string>force_installed</string>
2352       <key>install_url</key>
2353       <string>https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi</string>
2354     </dict>
2355     <key>https-everywhere@eff.org</key>
2356     <dict>
2357       <key>installation_mode</key>
2358        <string>allowed</string>
2359     </dict>
2360   </dict>
2361 </dict>
2362 ```
2363 #### policies.json
2364 ```
2365 {
2366   "policies": {
2367     "ExtensionSettings": {
2368       "*": {
2369         "blocked_install_message": "Custom error message.",
2370         "install_sources": ["about:addons","https://addons.mozilla.org/"],
2371         "installation_mode": "blocked",
2372         "allowed_types": ["extension"]
2373       },
2374       "uBlock0@raymondhill.net": {
2375         "installation_mode": "force_installed",
2376         "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
2377       },
2378       "https-everywhere@eff.org": {
2379         "installation_mode": "allowed"
2380       }
2381     }
2382   }
2383 }
2384 ```
2385 ### ExtensionUpdate
2386 Control extension updates.
2387
2388 **Compatibility:** Firefox 67, Firefox ESR 60.7\
2389 **CCK2 Equivalent:** N/A\
2390 **Preferences Affected:** `extensions.update.enabled`
2391
2392 #### Windows (GPO)
2393 ```
2394 Software\Policies\Mozilla\Firefox\ExtensionUpdate = 0x1 | 0x0
2395 ```
2396 #### Windows (Intune)
2397 OMA-URI:
2398 ```
2399 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/ExtensionUpdate
2400 ```
2401 Value (string):
2402 ```
2403 <enabled/> or <disabled/>
2404 ```
2405 #### macOS
2406 ```
2407 <dict>
2408   <key>ExtensionUpdate</key>
2409   <true/> | <false/>
2410 </dict>
2411 ```
2412 #### policies.json
2413 ```
2414 {
2415   "policies": {
2416     "ExtensionUpdate": true | false
2417   }
2418 }
2419 ```
2420 ### FlashPlugin
2421 Configure the default Flash plugin policy as well as origins for which Flash is allowed.
2422
2423 `Allow` is a list of origins where Flash are allowed.
2424
2425 `Block` is a list of origins where Flash is not allowed.
2426
2427 `Default` determines whether or not Flash is allowed by default.
2428
2429 `Locked` prevents the user from changing Flash preferences.
2430
2431 **Compatibility:** Firefox 60, Firefox ESR 60\
2432 **CCK2 Equivalent:** `permissions.plugin`\
2433 **Preferences Affected:** `plugin.state.flash`
2434
2435 #### Windows (GPO)
2436 ```
2437 Software\Policies\Mozilla\Firefox\FlashPlugin\Allow\1 = "https://example.org"
2438 Software\Policies\Mozilla\Firefox\FlashPlugin\Block\1 = "https://example.edu"
2439 Software\Policies\Mozilla\Firefox\FlashPlugin\Default = 0x1 | 0x0
2440 Software\Policies\Mozilla\Firefox\FlashPlugin\Locked = 0x1 | 0x0
2441 ```
2442 #### Windows (Intune)
2443 OMA-URI:
2444 ```
2445 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Flash/FlashPlugin_Allow
2446 ```
2447 Value (string):
2448 ```
2449 <enabled/>
2450 <data id="Permissions" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
2451 ```
2452 OMA-URI:
2453 ```
2454 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Flash/FlashPlugin_Locked
2455 ```
2456 Value (string):
2457 ```
2458 <enabled/> or <disabled/>
2459 ```
2460 OMA-URI:
2461 ```
2462 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Flash/FlashPlugin_Default
2463 ```
2464 Value (string):
2465 ```
2466 <enabled/> or <disabled/>
2467 ```
2468 #### macOS
2469 ```
2470 <dict>
2471   <key>FlashPlugin</key>
2472   <dict>
2473     <key>Allow</key>
2474     <array>
2475       <string>http://example.org</string>
2476     </array>
2477     <key>Block</key>
2478     <array>
2479       <string>http://example.edu</string>
2480     </array>
2481     <key>Default</key>
2482     <true/> | <false/>
2483     <key>Locked</key>
2484     <true/> | <false/>
2485   </dict>
2486 </dict>
2487 ```
2488 #### policies.json
2489 ```
2490 {
2491   "policies": {
2492     "FlashPlugin": {
2493       "Allow": ["http://example.org/"],
2494       "Block": ["http://example.edu/"],
2495       "Default": true | false,
2496       "Locked": true | false
2497     }
2498   }
2499 }
2500 ```
2501
2502
2503
2504 ### Handlers
2505 Configure default application handlers. This policy is based on the internal format of `handlers.json`.
2506
2507 You can configure handlers based on a mime type (`mimeTypes`), a file's extension (`extensions`), or a protocol (`schemes`).
2508
2509 Within each handler type, you specify the given mimeType/extension/scheme as a key and use the following subkeys to describe how it is handled.
2510
2511 | Name | Description |
2512 | --- | --- |
2513 | `action`| Can be either `saveToDisk`, `useHelperApp`, `useSystemDefault`.
2514 | `ask` | If `true`, the user is asked if what they want to do with the file. If `false`, the action is taken without user intervention.
2515 | `handlers` | An array of handlers with the first one being the default. If you don't want to have a default handler, use an empty object for the first handler. Choose between path or uriTemplate.
2516 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`name` | The display name of the handler (might not be used).
2517 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`path`| The native path to the executable to be used.
2518 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`uriTemplate`| A url to a web based application handler. The URL must be https and contain a %s to be used for substitution.
2519
2520 **Compatibility:** Firefox 78, Firefox ESR 78\
2521 **CCK2 Equivalent:** N/A\
2522 **Preferences Affected:** N/A
2523
2524 #### Windows (GPO)
2525 Software\Policies\Mozilla\Firefox\Handlers (REG_MULTI_SZ) =
2526 ```
2527 {
2528   "mimeTypes": {
2529     "application/msword": {
2530       "action": "useSystemDefault",
2531       "ask": true | false
2532     }
2533   },
2534   "schemes": {
2535     "mailto": {
2536       "action": "useHelperApp",
2537       "ask": true | false,
2538       "handlers": [{
2539         "name": "Gmail",
2540         "uriTemplate": "https://mail.google.com/mail/?extsrc=mailto&url=%s"
2541       }]
2542     }
2543   },
2544   "extensions": {
2545     "pdf": {
2546       "action": "useHelperApp",
2547       "ask": true | false,
2548       "handlers": [{
2549         "name": "Adobe Acrobat",
2550         "path": "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32.exe"
2551       }]
2552     }
2553   }
2554 }
2555 ```
2556 #### Windows (Intune)
2557 OMA-URI:
2558 ```
2559 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Handlers
2560 ```
2561 Value (string):
2562 ```
2563 <enabled/>
2564 <data id="Handlers" value='
2565 {
2566   "mimeTypes": {
2567     "application/msword": {
2568       "action": "useSystemDefault",
2569       "ask": true | false
2570     }
2571   },
2572   "schemes": {
2573     "mailto": {
2574       "action": "useHelperApp",
2575       "ask": true | false,
2576       "handlers": [{
2577         "name": "Gmail",
2578         "uriTemplate": "https://mail.google.com/mail/?extsrc=mailto&amp;url=%s"
2579       }]
2580     }
2581   },
2582   "extensions": {
2583     "pdf": {
2584       "action": "useHelperApp",
2585       "ask": true | false,
2586       "handlers": [{
2587         "name": "Adobe Acrobat",
2588         "path": "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32.exe"
2589       }]
2590     }
2591   }
2592 }
2593 '/>
2594 ```
2595 #### macOS
2596 ```
2597 <dict>
2598   <key>Handlers</key>
2599   <dict>
2600     <key>mimeTypes</key>
2601     <dict>
2602       <key>application/msword</key>
2603       <dict>
2604         <key>action</key>
2605         <string>useSystemDefault</string>
2606         <key>ask</key>
2607         <true/> | <false/>
2608       </dict>
2609     </dict>
2610     <key>schemes</key>
2611     <dict>
2612       <key>mailto</key>
2613       <dict>
2614         <key>action</key>
2615         <string>useHelperApp</string>
2616         <key>ask</key>
2617         <true/> | <false/>
2618         <key>handlers</key>
2619         <array>
2620           <dict>
2621             <key>name</key>
2622             <string>Gmail</string>
2623             <key>uriTemplate</key>
2624             <string>https://mail.google.com/mail/?extsrc=mailto&url=%s</string>
2625           </dict>
2626         </array>
2627       </dict>
2628     </dict>
2629     <key>extensions</key>
2630     <dict>
2631       <key>pdf</key>
2632       <dict>
2633         <key>action</key>
2634         <string>useHelperApp</string>
2635         <key>ask</key>
2636         <true/> | <false/>
2637         <key>handlers</key>
2638         <array>
2639           <dict>
2640             <key>name</key>
2641             <string>Adobe Acrobat</string>
2642             <key>path</key>
2643             <string>/System/Applications/Preview.app</string>
2644           </dict>
2645         </array>
2646       </dict>
2647     </dict>
2648   </dict>
2649 </dict>
2650 ```
2651 #### policies.json
2652 ```
2653 {
2654   "policies": {
2655     "Handlers": {
2656       "mimeTypes": {
2657         "application/msword": {
2658           "action": "useSystemDefault",
2659           "ask": false
2660         }
2661       },
2662       "schemes": {
2663         "mailto": {
2664           "action": "useHelperApp",
2665           "ask": true | false,
2666           "handlers": [{
2667             "name": "Gmail",
2668             "uriTemplate": "https://mail.google.com/mail/?extsrc=mailto&url=%s"
2669           }]
2670         }
2671       },
2672       "extensions": {
2673         "pdf": {
2674           "action": "useHelperApp",
2675           "ask": true | false,
2676           "handlers": [{
2677             "name": "Adobe Acrobat",
2678             "path": "/usr/bin/acroread"
2679           }]
2680         }
2681       }
2682     }
2683   }
2684 }
2685 ```
2686 ### FirefoxHome
2687 Customize the Firefox Home page.
2688
2689 **Compatibility:** Firefox 68, Firefox ESR 68\
2690 **CCK2 Equivalent:** N/A\
2691 **Preferences Affected:** `browser.newtabpage.activity-stream.showSearch`,`browser.newtabpage.activity-stream.feeds.topsites`,`browser.newtabpage.activity-stream.feeds.section.highlights`,`browser.newtabpage.activity-stream.feeds.section.topstories`,`browser.newtabpage.activity-stream.feeds.snippets`
2692
2693 #### Windows (GPO)
2694 ```
2695 Software\Policies\Mozilla\Firefox\FirefoxHome\Search = 0x1 | 0x0
2696 Software\Policies\Mozilla\Firefox\FirefoxHome\TopSites = 0x1 | 0x0
2697 Software\Policies\Mozilla\Firefox\FirefoxHome\Highlights = 0x1 | 0x0
2698 Software\Policies\Mozilla\Firefox\FirefoxHome\Pocket = 0x1 | 0x0
2699 Software\Policies\Mozilla\Firefox\FirefoxHome\Snippets = 0x1 | 0x0
2700 Software\Policies\Mozilla\Firefox\FirefoxHome\Locked = 0x1 | 0x0
2701 ```
2702 #### Windows (Intune)
2703 OMA-URI:
2704 ```
2705 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/CustomizeFirefoxHome
2706 ```
2707 Value (string):
2708 ```
2709 <enabled/>
2710 <data id="FirefoxHome_Search"  value="true | false"/>
2711 <data id="FirefoxHome_TopSites"  value="true | false"/>
2712 <data id="FirefoxHome_Highlights"  value="true | false"/>
2713 <data id="FirefoxHome_Pocket"  value="true | false"/>
2714 <data id="FirefoxHome_Snippets"  value="true | false"/>
2715 <data id="FirefoxHome_Locked"  value="true | false"/>
2716 ```
2717 #### macOS
2718 ```
2719 <dict>
2720   <key>FirefoxHome</key>
2721   <dict>
2722     <key>Search</key>
2723     <true/> | <false/>
2724     <key>TopSites</key>
2725     <true/> | <false/>
2726     <key>Highlights</key>
2727     <true/> | <false/>
2728     <key>Pocket</key>
2729     <true/> | <false/>
2730     <key>Snippets</key>
2731     <true/> | <false/>
2732     <key>Locked</key>
2733     <true/> | <false/>
2734   </dict>
2735 </dict>
2736 ```
2737 #### policies.json
2738 ```
2739 {
2740   "policies": {
2741     "FirefoxHome": {
2742       "Search": true | false,
2743       "TopSites": true | false,
2744       "Highlights": true | false,
2745       "Pocket": true | false,
2746       "Snippets": true | false,
2747       "Locked": true | false
2748     }
2749   }
2750 }
2751 ```
2752 ### HardwareAcceleration
2753 Control hardware acceleration.
2754
2755 **Compatibility:** Firefox 60, Firefox ESR 60\
2756 **CCK2 Equivalent:** N/A\
2757 **Preferences Affected:** `layers.acceleration.disabled`
2758
2759 #### Windows (GPO)
2760 ```
2761 Software\Policies\Mozilla\Firefox\HardwareAcceleration = 0x1 | 0x0
2762 ```
2763 #### Windows (Intune)
2764 OMA-URI:
2765 ```
2766 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/HardwareAcceleration
2767 ```
2768 Value (string):
2769 ```
2770 <enabled/> or <disabled/>
2771 ```
2772 #### macOS
2773 ```
2774 <dict>
2775   <key>HardwareAcceleration</key>
2776   <true/> | <false/>
2777 </dict>
2778 ```
2779 #### policies.json
2780 ```
2781 {
2782   "policies": {
2783     "HardwareAcceleration": true | false
2784   }
2785 }
2786 ```
2787 ### Homepage
2788 Configure the default homepage and how Firefox starts.
2789
2790 `URL` is the default homepage.
2791
2792 `Locked` prevents the user from changing homepage preferences.
2793
2794 `Additional` allows for more than one homepage.
2795
2796 `StartPage` is how Firefox starts. The choices are no homepage, the default homepage or the previous session.
2797
2798 With Firefox 78, an additional option as added for `Startpage`, `homepage-locked`. If this is value is set for the Startpage, the user will always get the homepage at startup and cannot choose to restore their session.
2799
2800 **Compatibility:** Firefox 60, Firefox ESR 60 (StartPage was added in Firefox 60, Firefox ESR 60.4, homepage-locked added in Firefox 78)\
2801 **CCK2 Equivalent:** `homePage`,`lockHomePage`\
2802 **Preferences Affected:** `browser.startup.homepage`,`browser.startup.page`
2803
2804 #### Windows (GPO)
2805 ```
2806 Software\Policies\Mozilla\Firefox\Homepage\URL = "https://example.com"
2807 Software\Policies\Mozilla\Firefox\Homepage\Locked = 0x1 | 0x0
2808 Software\Policies\Mozilla\Firefox\Homepage\Additional\1 = "https://example.org"
2809 Software\Policies\Mozilla\Firefox\Homepage\Additional\2 = "https://example.edu"
2810 Software\Policies\Mozilla\Firefox\Homepage\StartPage = "none" | "homepage" | "previous-session" | "homepage-locked"
2811 ```
2812 #### Windows (Intune)
2813 OMA-URI:
2814 ```
2815 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageURL
2816 ```
2817 Value (string):
2818 ```
2819 <enabled/>
2820
2821 <data id="HomepageURL" value="https://example.com"/>
2822 <data id="HomepageLocked" value="true | false"/>
2823 ```
2824 OMA-URI:
2825 ```
2826 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageAdditional
2827 ```
2828 Value (string):
2829 ```
2830 <enabled/>
2831
2832 <data id="HomepageAdditional" value="1&#xF000;http://example.org&#xF000;2&#xF000;http://example.edu"/>
2833 ```
2834 OMA-URI:
2835 ```
2836 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageStartPage
2837 ```
2838 Value (string):
2839 ```
2840 <enabled/>
2841
2842 <data id="StartPage" value="none | homepage | previous-session"/>
2843 ```
2844 #### macOS
2845 ```
2846 <dict>
2847   <key>Homepage</key>
2848   <dict>
2849     <key>URL</key>
2850     <string>http://example.com</string>
2851     <key>Locked</key>
2852     <true/> | <false/>
2853     <key>Additional</key>
2854     <array>
2855       <string>http://example.org</string>
2856       <string>http://example.edu</string>
2857     </array>
2858     <key>StartPage</key>
2859     <string>none | homepage | previous-session | homepage-locked</string>
2860   </dict>
2861 </dict>
2862 ```
2863 #### policies.json
2864 ```
2865 {
2866   "policies": {
2867     "Homepage": {
2868       "URL": "http://example.com/",
2869       "Locked": true | false,
2870       "Additional": ["http://example.org/",
2871                      "http://example.edu/"],
2872       "StartPage": "none" | "homepage" | "previous-session" | "homepage-locked"
2873     }
2874   }
2875 }
2876 ```
2877 ### InstallAddonsPermission
2878 Configure the default extension install policy as well as origins for extension installs are allowed. This policy does not override turning off all extension installs.
2879
2880 `Allow` is a list of origins where extension installs are allowed.
2881
2882 `Default` determines whether or not extension installs are allowed by default.
2883
2884 **Compatibility:** Firefox 60, Firefox ESR 60\
2885 **CCK2 Equivalent:** `permissions.install`\
2886 **Preferences Affected:** `xpinstall.enabled`
2887
2888 #### Windows (GPO)
2889 ```
2890 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Allow\1 = "https://example.org"
2891 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Allow\2 = "https://example.edu"
2892 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Default = 0x1 | 0x0
2893 ```
2894 #### Windows (Intune)
2895 OMA-URI:
2896 ```
2897 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Addons/InstallAddonsPermission_Allow
2898 ```
2899 Value (string):
2900 ```
2901 <enabled/>
2902 <data id="Permissions" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
2903 ```
2904 OMA-URI:
2905 ```
2906 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Addons/InstallAddonsPermission_Default
2907 ```
2908 Value (string):
2909 ```
2910 <enabled/>
2911 ```
2912 #### macOS
2913 ```
2914 <dict>
2915   <key>InstallAddonsPermission</key>
2916   <dict>
2917     <key>Allow</key>
2918     <array>
2919       <string>http://example.org</string>
2920       <string>http://example.edu</string>
2921     </array>
2922     <key>Default</key>
2923     <true/> | <false/>
2924   </dict>
2925 </dict>
2926 ```
2927 #### policies.json
2928 ```
2929 {
2930   "policies": {
2931     "InstallAddonsPermission": {
2932       "Allow": ["http://example.org/",
2933                 "http://example.edu/"],
2934       "Default": true | false
2935     }
2936   }
2937 }
2938 ```
2939 ### LegacyProfiles
2940 Disable the feature enforcing a separate profile for each installation.
2941
2942 If this policy set to true, Firefox will not try to create different profiles for installations of Firefox in different directories. This is the equivalent of the MOZ_LEGACY_PROFILES environment variable.
2943
2944 If this policy set to false, Firefox will create a new profile for each unique installation of Firefox.
2945
2946 This policy only work on Windows via GPO (not policies.json).
2947
2948 **Compatibility:** Firefox 70, Firefox ESR 68.2 (Windows only, GPO only)\
2949 **CCK2 Equivalent:** N/A\
2950 **Preferences Affected:** N/A
2951
2952 #### Windows (GPO)
2953 ```
2954 Software\Policies\Mozilla\Firefox\LegacyProfiles = = 0x1 | 0x0
2955 ```
2956 #### Windows (Intune)
2957 OMA-URI:
2958 ```
2959 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/LegacyProfiles
2960 ```
2961 Value (string):
2962 ```
2963 <enabled/> or <disabled/>
2964 ```
2965 ### LocalFileLinks
2966 Enable linking to local files by origin.
2967
2968 **Compatibility:** Firefox 68, Firefox ESR 68\
2969 **CCK2 Equivalent:** N/A\
2970 **Preferences Affected:** `capability.policy.localfilelinks.*`
2971
2972 #### Windows (GPO)
2973 ```
2974 Software\Policies\Mozilla\Firefox\LocalFileLinks\1 = "https://example.org"
2975 Software\Policies\Mozilla\Firefox\LocalFileLinks\2 = "https://example.edu"
2976 ```
2977 #### Windows (Intune)
2978 OMA-URI:
2979 ```
2980 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/LocalFileLinks
2981 ```
2982 Value (string):
2983 ```
2984 <enabled/>
2985 <data id="LocalFileLinks" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
2986 ```
2987 #### macOS
2988 ```
2989 <dict>
2990   <key>LocalFileLinks</key>
2991   <array>
2992     <string>http://example.org</string>
2993     <string>http://example.edu</string>
2994   </array>
2995 </dict>
2996 ```
2997 #### policies.json
2998 ```
2999 {
3000   "policies": {
3001     "LocalFileLinks": ["http://example.org/",
3002                        "http://example.edu/"]
3003   }
3004 }
3005 ```
3006 ### ManagedBookmarks
3007 Configures a list of bookmarks managed by an administrator that cannot be changed by the user.
3008
3009 The bookmarks are only added as a button on the personal toolbar. They are not in the bookmarks folder.
3010
3011 The syntax of this policy is exactly the same as the [Chrome ManagedBookmarks policy](https://cloud.google.com/docs/chrome-enterprise/policies/?policy=ManagedBookmarks). The schema is:
3012 ```
3013 {
3014  "items": {
3015   "id": "BookmarkType",
3016   "properties": {
3017    "children": {
3018     "items": {
3019      "$ref": "BookmarkType"
3020     },
3021     "type": "array"
3022    },
3023    "name": {
3024     "type": "string"
3025    },
3026    "toplevel_name": {
3027     "type": "string"
3028    },
3029    "url": {
3030     "type": "string"
3031    }
3032   },
3033   "type": "object"
3034  },
3035  "type": "array"
3036 }
3037 ```
3038 **Compatibility:** Firefox 83, Firefox ESR 78.5\
3039 **CCK2 Equivalent:** N/A\
3040 **Preferences Affected:** N/A
3041
3042 #### Windows (GPO)
3043 Software\Policies\Mozilla\Firefox\ManagedBookmarks (REG_MULTI_SZ) =
3044 ```
3045 [
3046   {
3047     "toplevel_name": "My managed bookmarks folder"
3048   },
3049   {
3050     "url": "example.com",
3051     "name": "Example"
3052   },
3053   {
3054     "name": "Mozilla links",
3055     "children": [
3056       {
3057         "url": "https://mozilla.org",
3058         "name": "Mozilla.org"
3059       },
3060       {
3061         "url": "https://support.mozilla.org/",
3062         "name": "SUMO"
3063       }
3064     ]
3065   }
3066 ]
3067 ```
3068 #### Windows (Intune)
3069 OMA-URI:
3070 ```
3071 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/ManagedBookmarks
3072 ```
3073 Value (string):
3074 ```
3075 <enabled/>
3076 <data id="JSON" value='
3077 [
3078   {
3079     "toplevel_name": "My managed bookmarks folder"
3080   },
3081   {
3082     "url": "example.com",
3083     "name": "Example"
3084   },
3085   {
3086     "name": "Mozilla links",
3087     "children": [
3088       {
3089         "url": "https://mozilla.org",
3090         "name": "Mozilla.org"
3091       },
3092       {
3093         "url": "https://support.mozilla.org/",
3094         "name": "SUMO"
3095       }
3096     ]
3097   }
3098 ]'/>
3099 ```
3100 #### macOS
3101 ```
3102 <dict>
3103   <key>ManagedBookmarks</key>
3104   <array>
3105     <dict>
3106       <key>toplevel_name</key>
3107       <string>My managed bookmarks folder</string></dict>
3108       <dict>
3109         <key>url</key>
3110         <string>example.com</string>
3111         <key>name</key>
3112         <string>Example</string>
3113       </dict>
3114       <dict>
3115       <key>name</key>
3116       <string>Mozilla links</string>
3117       <key>children</key>
3118       <array>
3119         <dict>
3120           <key>url</key>
3121           <string>https://mozilla.org</string>
3122           <key>name</key>
3123           <string>Mozilla</string>
3124         </dict>
3125         <dict>
3126           <key>url</key>
3127           <string>https://support.mozilla.org/</string>
3128           <key>name</key>
3129           <string>SUMO</string>
3130         </dict>
3131       </array>
3132     </dict>
3133   </array>
3134 </dict>
3135 ```
3136 #### policies.json
3137 ```
3138 {
3139   "policies": {
3140     "ManagedBookmarks": [
3141       {
3142         "toplevel_name": "My managed bookmarks folder"
3143       },
3144       {
3145         "url": "example.com",
3146         "name": "Example"
3147       },
3148       {
3149         "name": "Mozilla links",
3150         "children": [
3151           {
3152             "url": "https://mozilla.org",
3153             "name": "Mozilla.org"
3154           },
3155           {
3156             "url": "https://support.mozilla.org/",
3157             "name": "SUMO"
3158           }
3159         ]
3160       }
3161     ]
3162   }
3163 }
3164 ```
3165 ### PrimaryPassword
3166 Require or prevent using a primary (formerly master) password.
3167
3168 If this value is true, a primary password is required. If this value is false, it works the same as if [`DisableMasterPasswordCreation`](#disablemasterpasswordcreation) was true and removes the primary password functionality.
3169
3170 If both DisableMasterPasswordCreation and PrimaryPassword are used, DisableMasterPasswordCreation takes precedent.
3171
3172 **Compatibility:** Firefox 79, Firefox ESR 78.1\
3173 **CCK2 Equivalent:** `noMasterPassword`\
3174 **Preferences Affected:** N/A
3175
3176 #### Windows (GPO)
3177 ```
3178 Software\Policies\Mozilla\Firefox\PrimaryPassword = 0x1 | 0x0
3179 ```
3180 #### Windows (Intune)
3181 OMA-URI:
3182 ```
3183 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PrimaryPassword
3184 ```
3185 Value (string):
3186 ```
3187 <enabled/> or <disabled/>
3188 ```
3189 #### macOS
3190 ```
3191 <dict>
3192   <key>PrimaryPassword</key>
3193   <true/> | <false/>
3194 </dict>
3195 ```
3196 #### policies.json
3197 ```
3198 {
3199   "policies": {
3200     "PrimaryPassword": true | false
3201   }
3202 }
3203 ```
3204 ### NetworkPrediction
3205 Enable or disable network prediction (DNS prefetching).
3206
3207 **Compatibility:** Firefox 67, Firefox ESR 60.7\
3208 **CCK2 Equivalent:** N/A\
3209 **Preferences Affected:** `network.dns.disablePrefetch`,`network.dns.disablePrefetchFromHTTPS`
3210
3211 #### Windows (GPO)
3212 ```
3213 Software\Policies\Mozilla\Firefox\NetworkPrediction = 0x1 | 0x0
3214 ```
3215 #### Windows (Intune)
3216 OMA-URI:
3217 ```
3218 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NetworkPrediction
3219 ```
3220 Value (string):
3221 ```
3222 <enabled/> or <disabled/>
3223 ```
3224 #### macOS
3225 ```
3226 <dict>
3227   <key>NetworkPrediction</key>
3228   <true/> | <false/>
3229 </dict>
3230 ```
3231 #### policies.json
3232 ```
3233 {
3234   "policies": {
3235     "NetworkPrediction": true | false
3236 }
3237 ```
3238 ### NewTabPage
3239 Enable or disable the New Tab page.
3240
3241 **Compatibility:** Firefox 68, Firefox ESR 68\
3242 **CCK2 Equivalent:** N/A\
3243 **Preferences Affected:** `browser.newtabpage.enabled`
3244
3245 #### Windows (GPO)
3246 ```
3247 Software\Policies\Mozilla\Firefox\NewTabPage = 0x1 | 0x0
3248 ```
3249 #### Windows (Intune)
3250 OMA-URI:
3251 ```
3252 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NewTabPage
3253 ```
3254 Value (string):
3255 ```
3256 <enabled/> or <disabled/>
3257 ```
3258 #### macOS
3259 ```
3260 <dict>
3261   <key>NewTabPage</key>
3262   <true/> | <false/>
3263 </dict>
3264 ```
3265 #### policies.json
3266 ```
3267 {
3268   "policies": {
3269     "NewTabPage": true | false
3270 }
3271 ```
3272 ### NoDefaultBookmarks
3273 Disable the creation of default bookmarks.
3274
3275 This policy is only effective if the user profile has not been created yet.
3276
3277 **Compatibility:** Firefox 60, Firefox ESR 60\
3278 **CCK2 Equivalent:** `removeDefaultBookmarks`\
3279 **Preferences Affected:** N/A
3280
3281 #### Windows (GPO)
3282 ```
3283 Software\Policies\Mozilla\Firefox\NoDefaultBookmarks = 0x1 | 0x0
3284 ```
3285 #### Windows (Intune)
3286 OMA-URI:
3287 ```
3288 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NoDefaultBookmarks
3289 ```
3290 Value (string):
3291 ```
3292 <enabled/> or <disabled/>
3293 ```
3294 #### macOS
3295 ```
3296 <dict>
3297   <key>NoDefaultBookmarks</key>
3298   <true/> | <false/>
3299 </dict>
3300 ```
3301 #### policies.json
3302 ```
3303 {
3304   "policies": {
3305     "NoDefaultBookmarks": true | false
3306   }
3307 }
3308 ```
3309 ### OfferToSaveLogins
3310 Control whether or not Firefox offers to save passwords.
3311
3312 **Compatibility:** Firefox 60, Firefox ESR 60\
3313 **CCK2 Equivalent:** `dontRememberPasswords`\
3314 **Preferences Affected:** `signon.rememberSignons`
3315
3316 #### Windows (GPO)
3317 ```
3318 Software\Policies\Mozilla\Firefox\OfferToSaveLogins = 0x1 | 0x0
3319 ```
3320 #### Windows (Intune)
3321 OMA-URI:
3322 ```
3323 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OfferToSaveLogins
3324 ```
3325 Value (string):
3326 ```
3327 <enabled/> or <disabled/>
3328 ```
3329 #### macOS
3330 ```
3331 <dict>
3332   <key>OfferToSaveLogins</key>
3333   <true/> | <false/>
3334 </dict>
3335 ```
3336 #### policies.json
3337 ```
3338 {
3339   "policies": {
3340     "OfferToSaveLogins": true | false
3341   }
3342 }
3343 ```
3344 ### OfferToSaveLoginsDefault
3345 Sets the default value of signon.rememberSignons without locking it.
3346
3347 **Compatibility:** Firefox 70, Firefox ESR 60.2\
3348 **CCK2 Equivalent:** `dontRememberPasswords`\
3349 **Preferences Affected:** `signon.rememberSignons`
3350
3351 #### Windows (GPO)
3352 ```
3353 Software\Policies\Mozilla\Firefox\OfferToSaveLoginsDefault = 0x1 | 0x0
3354 ```
3355 #### Windows (Intune)
3356 OMA-URI:
3357 ```
3358 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OfferToSaveLoginsDefault
3359 ```
3360 Value (string):
3361 ```
3362 <enabled/> or <disabled/>
3363 ```
3364 #### macOS
3365 ```
3366 <dict>
3367   <key>OfferToSaveLoginsDefault</key>
3368   <true/> | <false/>
3369 </dict>
3370 ```
3371 #### policies.json
3372 ```
3373 {
3374   "policies": {
3375     "OfferToSaveLoginsDefault": true | false
3376   }
3377 }
3378 ```
3379 ### OverrideFirstRunPage
3380 Override the first run page. If the value is an empty string (""), the first run page is not displayed.
3381
3382 Starting with Firefox 83, Firefox ESR 78.5, you can also specify multiple URLS separated by a vertical bar (|).
3383
3384 **Compatibility:** Firefox 60, Firefox ESR 60\
3385 **CCK2 Equivalent:** `welcomePage`,`noWelcomePage`\
3386 **Preferences Affected:** `startup.homepage_welcome_url`
3387
3388 #### Windows (GPO)
3389 ```
3390 Software\Policies\Mozilla\Firefox\OverrideFirstRunPage = "http://example.org"
3391 ```
3392 #### Windows (Intune)
3393 OMA-URI:
3394 ```
3395 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OverrideFirstRunPage
3396 ```
3397 Value (string):
3398 ```
3399 <enabled/>
3400 <data id="OverridePage" value="https://example.com"/>
3401 ```
3402 #### macOS
3403 ```
3404 <dict>
3405   <key>OverrideFirstRunPage</key>
3406   <string>http://example.org</string>
3407 </dict>
3408 ```
3409 #### policies.json
3410 ```
3411 {
3412   "policies": {
3413     "OverrideFirstRunPage": "http://example.org"
3414 }
3415 ```
3416 ### OverridePostUpdatePage
3417 Override the upgrade page. If the value is an empty string (""), no extra pages are displayed when Firefox is upgraded.
3418
3419 **Compatibility:** Firefox 60, Firefox ESR 60\
3420 **CCK2 Equivalent:** `upgradePage`,`noUpgradePage`\
3421 **Preferences Affected:** `startup.homepage_override_url`
3422
3423 #### Windows (GPO)
3424 ```
3425 Software\Policies\Mozilla\Firefox\OverridePostUpdatePage = "http://example.org"
3426 ```
3427 #### Windows (Intune)
3428 OMA-URI:
3429 ```
3430 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OverridePostUpdatePage
3431 ```
3432 Value (string):
3433 ```
3434 <enabled/>
3435 <data id="OverridePage" value="https://example.com"/>
3436 ```
3437 #### macOS
3438 ```
3439 <dict>
3440   <key>OverridePostUpdatePage</key>
3441   <string>http://example.org</string>
3442 </dict>
3443 ```
3444 #### policies.json
3445 ```
3446 {
3447   "policies": {
3448     "OverridePostUpdatePage": "http://example.org"
3449 }
3450 ```
3451 ### PasswordManagerEnabled
3452 Remove access to the password manager via preferences and blocks about:logins on Firefox 70.
3453
3454 **Compatibility:** Firefox 70, Firefox ESR 60.2\
3455 **CCK2 Equivalent:** N/A\
3456 **Preferences Affected:** `pref.privacy.disable_button.view_passwords`
3457
3458 #### Windows (GPO)
3459 ```
3460 Software\Policies\Mozilla\Firefox\PasswordManagerEnabled = 0x1 | 0x0
3461 ```
3462 #### Windows (Intune)
3463 OMA-URI:
3464 ```
3465 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PasswordManagerEnabled
3466 ```
3467 Value (string):
3468 ```
3469 <enabled/> or <disabled/>
3470 ```
3471 #### macOS
3472 ```
3473 <dict>
3474   <key>PasswordManagerEnabled</key>
3475   <true/> | <false/>
3476 </dict>
3477 ```
3478 #### policies.json
3479 ```
3480 {
3481   "policies": {
3482     "PasswordManagerEnabled": true | false
3483   }
3484 }
3485 ```
3486 ### PDFjs
3487 Disable or configure PDF.js, the built-in PDF viewer.
3488
3489 If `Enabled` is set to false, the built-in PDF viewer is disabled.
3490
3491 If `EnablePermissions` is set to true, the built-in PDF viewer will honor document permissions like preventing the copying of text.
3492
3493 Note: DisableBuiltinPDFViewer has not been deprecated. You can either continue to use it, or switch to using PDFjs->Enabled to disable the built-in PDF viewer. This new permission was added because we needed a place for PDFjs->EnabledPermissions.
3494
3495 **Compatibility:** Firefox 77, Firefox ESR 68.9\
3496 **CCK2 Equivalent:** N/A\
3497 **Preferences Affected:** `pdfjs.diabled`,`pdfjs.enablePermissions`
3498
3499 #### Windows (GPO)
3500 ```
3501 Software\Policies\Mozilla\Firefox\PDFjs\Enabled = 0x1 | 0x0
3502 Software\Policies\Mozilla\Firefox\PDFjs\EnablePermissions = 0x1 | 0x0
3503 ```
3504 #### Windows (Intune)
3505 OMA-URI:
3506 ```
3507 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PDFjs/PDFjs_Enabled
3508 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PDFjs/PDFjs_EnablePermissions
3509 ```
3510 Value (string):
3511 ```
3512 <enabled/>or <disabled/>
3513 ```
3514 #### macOS
3515 ```
3516 <dict>
3517   <key>PDFjs</key>
3518   <dict>
3519     <key>Enabled</key>
3520     <true/> | <false/>
3521     <key>EnablePermissions</key>
3522     <true/> | <false/>
3523   </dict>
3524 </dict>
3525 ```
3526 #### policies.json
3527 ```
3528 {
3529   "policies": {
3530     "PSFjs": {
3531       "Enabled": true | false,
3532       "EnablePermissions": true | false
3533     }
3534 }
3535 ```
3536 ### Permissions
3537 Set permissions associated with camera, microphone, location, notifications, autoplay, and virtual reality. Because these are origins, not domains, entries with unique ports must be specified separately. This explicitly means that it is not possible to add wildcards. See examples below.
3538
3539 `Allow` is a list of origins where the feature is allowed.
3540
3541 `Block` is a list of origins where the feature is not allowed.
3542
3543 `BlockNewRequests` determines whether or not new requests can be made for the feature.
3544
3545 `Locked` prevents the user from changing preferences for the feature.
3546
3547 `Default` specifies the default value for Autoplay. block-audio-video is not supported on Firefox ESR 68.
3548
3549 **Compatibility:** Firefox 62, Firefox ESR 60.2 (Autoplay added in Firefox 74, Firefox ESR 68.6, Autoplay Default/Locked added in Firefox 76, Firefox ESR 68.8, VirtualReality added in Firefox 80, Firefox ESR 78.2)\
3550 **CCK2 Equivalent:** N/A\
3551 **Preferences Affected:** `permissions.default.camera`,`permissions.default.microphone`,`permissions.default.geo`,`permissions.default.desktop-notification`,`media.autoplay.default`.`permissions.default.xr`
3552
3553 #### Windows (GPO)
3554 ```
3555 Software\Policies\Mozilla\Firefox\Permissions\Camera\Allow\1 = "https://example.org"
3556 Software\Policies\Mozilla\Firefox\Permissions\Camera\Allow\2 = "https://example.org:1234"
3557 Software\Policies\Mozilla\Firefox\Permissions\Camera\Block\1 = "https://example.edu"
3558 Software\Policies\Mozilla\Firefox\Permissions\Camera\BlockNewRequests = 0x1 | 0x0
3559 Software\Policies\Mozilla\Firefox\Permissions\Camera\Locked = 0x1 | 0x0
3560 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Allow\1 = "https://example.org"
3561 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Block\1 = "https://example.edu"
3562 Software\Policies\Mozilla\Firefox\Permissions\Microphone\BlockNewRequests = 0x1 | 0x0
3563 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Locked = 0x1 | 0x0
3564 Software\Policies\Mozilla\Firefox\Permissions\Location\Allow\1 = "https://example.org"
3565 Software\Policies\Mozilla\Firefox\Permissions\Location\Block\1 = "https://example.edu"
3566 Software\Policies\Mozilla\Firefox\Permissions\Location\BlockNewRequests = 0x1 | 0x0
3567 Software\Policies\Mozilla\Firefox\Permissions\Location\Locked = 0x1 | 0x0
3568 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Allow\1 = "https://example.org"
3569 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Block\1 = "https://example.edu"
3570 Software\Policies\Mozilla\Firefox\Permissions\Notifications\BlockNewRequests = 0x1 | 0x0
3571 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Locked = 0x1 | 0x0
3572 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Allow\1 = "https://example.org"
3573 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Block\1 = "https://example.edu"
3574 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Default = "allow-audio-video" | "block-audio" | "block-audio-video"
3575 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Locked = 0x1 | 0x0
3576 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\Allow\1 = "https://example.org"
3577 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\Block\1 = "https://example.edu"
3578 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\BlockNewRequests = 0x1 | 0x0
3579 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\Locked = 0x1 | 0x0
3580 ```
3581 #### Windows (Intune)
3582 OMA-URI:
3583 ```
3584 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Location/Location_BlockNewRequests
3585 ```
3586 Value (string):
3587 ```
3588 <enabled/> or <disabled/>
3589 ```
3590 OMA-URI:
3591 ```
3592 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Location/Location_Locked
3593 ```
3594 Value (string):
3595 ```
3596 <enabled/> or <disabled/>
3597 ```
3598 OMA-URI:
3599 ```
3600 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_Allow
3601 ```
3602 Value (string):
3603 ```
3604 <enabled/>
3605 <data id="Permissions" value="1&#xF000;https://example.org"/>
3606 ```
3607 OMA-URI:
3608 ```
3609 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_BlockNewRequests
3610 ```
3611 Value (string):
3612 ```
3613 <enabled/> or <disabled/>
3614 ```
3615 OMA-URI:
3616 ```
3617 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_Locked
3618 ```
3619 Value (string):
3620 ```
3621 <enabled/> or <disabled/>
3622 ```
3623 OMA-URI:
3624 ```
3625 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Allow
3626 ```
3627 Value (string):
3628 ```
3629 <enabled/>
3630 <data id="Permissions" value="1&#xF000;https://example.org"/>
3631 ```
3632 OMA-URI:
3633 ```
3634 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Block
3635 ```
3636 Value (string):
3637 ```
3638 <enabled/>
3639 <data id="Permissions" value="1&#xF000;https://example.edu"/>
3640 ```
3641 OMA-URI:
3642 ```
3643 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Default
3644 ```
3645 Value (string):
3646 ```
3647 <enabled/>
3648 <data id="Autoplay_Default" value="allow-audio-video | block-audio | block-audio-video"/>
3649 ```
3650 OMA-URI:
3651 ```
3652 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Locked
3653 ```
3654 Value (string):
3655 ```
3656 <enabled/> or <disabled/>
3657 ```
3658 OMA-URI:
3659 ```
3660 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_Allow
3661 ```
3662 Value (string):
3663 ```
3664 <enabled/>
3665 <data id="Permissions" value="1&#xF000;https://example.org"/>
3666 ```
3667 OMA-URI:
3668 ```
3669 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_Block
3670 ```
3671 Value (string):
3672 ```
3673 <enabled/>
3674 <data id="Permissions" value="1&#xF000;https://example.edu"/>
3675 ```
3676 OMA-URI:
3677 ```
3678 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_BlockNewRequests
3679 ```
3680 Value (string):
3681 ```
3682 <enabled/> or <disabled/>
3683 ```
3684 OMA-URI:
3685 ```
3686 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_Locked
3687 ```
3688 Value (string):
3689 ```
3690 <enabled/> or <disabled/>
3691 ```
3692 #### macOS
3693 ```
3694 <dict>
3695   <key>Permissions</key>
3696   <dict>
3697     <key>Camera</key>
3698     <dict>
3699       <key>Allow</key>
3700       <array>
3701         <string>https://example.org</string>
3702         <string>https://example.org:1234</string>
3703       </array>
3704       <key>Block</key>
3705       <array>
3706         <string>https://example.edu</string>
3707       </array>
3708       <key>BlockNewRequests</key>
3709       <true/> | <false/>
3710       <key>Locked</key>
3711       <true/> | <false/>
3712     </dict>
3713     <key>Microphone</key>
3714     <dict>
3715       <key>Allow</key>
3716       <array>
3717         <string>https://example.org</string>
3718       </array>
3719       <key>Block</key>
3720       <array>
3721         <string>https://example.edu</string>
3722       </array>
3723       <key>BlockNewRequests</key>
3724       <true/> | <false/>
3725       <key>Locked</key>
3726       <true/> | <false/>
3727     </dict>
3728     <key>Location</key>
3729     <dict>
3730       <key>Allow</key>
3731       <array>
3732         <string>https://example.org</string>
3733       </array>
3734       <key>Block</key>
3735       <array>
3736         <string>https://example.edu</string>
3737       </array>
3738       <key>BlockNewRequests</key>
3739       <true/> | <false/>
3740       <key>Locked</key>
3741       <true/> | <false/>
3742     </dict>
3743     <key>Notifications</key>
3744     <dict>
3745       <key>Allow</key>
3746       <array>
3747         <string>https://example.org</string>
3748       </array>
3749       <key>Block</key>
3750       <array>
3751         <string>https://example.edu</string>
3752       </array>
3753       <key>BlockNewRequests</key>
3754       <true/>
3755       <key>Locked</key>
3756       <true/>
3757     </dict>
3758     <key>Autoplay</key>
3759     <dict>
3760       <key>Allow</key>
3761       <array>
3762         <string>https://example.org</string>
3763       </array>
3764       <key>Block</key>
3765       <array>
3766         <string>https://example.edu</string>
3767       </array>
3768       <key>Default</key>
3769       <string>allow-audio-video | block-audio | block-audio-video</string>
3770       <key>Locked</key>
3771       <true/> | <false/>
3772     </dict>
3773   </dict>
3774 </dict>
3775 ```
3776 #### policies.json
3777 ```
3778 {
3779   "policies": {
3780     "Permissions": {
3781       "Camera": {
3782         "Allow": ["https://example.org","https://example.org:1234"],
3783         "Block": ["https://example.edu"],
3784         "BlockNewRequests": true | false,
3785         "Locked": true | false
3786       },
3787       "Microphone": {
3788         "Allow": ["https://example.org"],
3789         "Block": ["https://example.edu"],
3790         "BlockNewRequests": true | false,
3791         "Locked": true | false
3792       },
3793       "Location": {
3794         "Allow": ["https://example.org"],
3795         "Block": ["https://example.edu"],
3796         "BlockNewRequests": true | false,
3797         "Locked": true | false
3798       },
3799       "Notifications": {
3800         "Allow": ["https://example.org"],
3801         "Block": ["https://example.edu"],
3802         "BlockNewRequests": true | false,
3803         "Locked": true | false
3804       },
3805       "Autoplay": {
3806         "Allow": ["https://example.org"],
3807         "Block": ["https://example.edu"],
3808         "Default": "allow-audio-video" | "block-audio" | "block-audio-video",
3809         "Locked": true | false
3810       }
3811     }
3812   }
3813 }
3814 ```
3815 ### PictureInPicture
3816
3817 Enable or disable Picture-in-Picture as well as prevent the user from enabling or disabling it (Locked).
3818
3819 **Compatibility:** Firefox 78, Firefox ESR 78\
3820 **CCK2 Equivalent:** N/A\
3821 **Preferences Affected:** `media.videocontrols.picture-in-picture.video-toggle.enabled`
3822
3823 #### Windows (GPO)
3824 ```
3825 Software\Policies\Mozilla\Firefox\PictureInPicture\Enabled = 0x1 | 0x0
3826 Software\Policies\Mozilla\Firefox\PictureInPicture\Locked = 0x1 | 0x0
3827
3828 ```
3829 #### Windows (Intune)
3830 OMA-URI:
3831 ```
3832 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PictureInPicture/PictureInPicture_Enabled
3833 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PictureInPicture/PictureInPicture_Locked
3834 ```
3835 Value (string):
3836 ```
3837 <enabled/> or <disabled/>
3838 ```
3839 #### macOS
3840 ```
3841 <dict>
3842   <key>PictureInPicture</key>
3843   <dict>
3844     <key>Enabled</key>
3845     <true/> | <false/>
3846     <key>Locked</key>
3847     <true/> | <false/>
3848   </dict>
3849 </dict>
3850 ```
3851 #### policies.json
3852 ```
3853 {
3854   "policies": {
3855     "PictureInPicture": {
3856       "Enabled": true | false,
3857       "Locked": true, false
3858     }
3859   }
3860 }
3861 ```
3862 ### PopupBlocking
3863 Configure the default pop-up window policy as well as origins for which pop-up windows are allowed.
3864
3865 `Allow` is a list of origins where popup-windows are allowed.
3866
3867 `Default` determines whether or not pop-up windows are allowed by default.
3868
3869 `Locked` prevents the user from changing pop-up preferences.
3870
3871 **Compatibility:** Firefox 60, Firefox ESR 60\
3872 **CCK2 Equivalent:** `permissions.popup`\
3873 **Preferences Affected:** `dom.disable_open_during_load`
3874
3875 #### Windows (GPO)
3876 ```
3877 Software\Policies\Mozilla\Firefox\PopupBlocking\Allow\1 = "https://example.org"
3878 Software\Policies\Mozilla\Firefox\PopupBlocking\Allow\2 = "https://example.edu"
3879 Software\Policies\Mozilla\Firefox\PopupBlocking\Default = 0x1 | 0x0
3880 Software\Policies\Mozilla\Firefox\PopupBlocking\Locked = 0x1 | 0x0
3881 ```
3882 #### Windows (Intune)
3883 OMA-URI:
3884 ```
3885 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Allow
3886 ```
3887 Value (string):
3888 ```
3889 <enabled/>
3890 <data id="Permissions" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
3891 ```
3892 OMA-URI:
3893 ```
3894 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Default
3895 ```
3896 Value (string):
3897 ```
3898 <enabled/> or <disabled/>
3899 ```
3900 OMA-URI:
3901 ```
3902 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Locked
3903 ```
3904 Value (string):
3905 ```
3906 <enabled/> or <disabled/>
3907 ```
3908 #### macOS
3909 ```
3910 <dict>
3911   <key>PopupBlocking</key>
3912   <dict>
3913     <key>Allow</key>
3914     <array>
3915       <string>http://example.org</string>
3916       <string>http://example.edu</string>
3917     </array>
3918     <key>Default</key>
3919     <true/> | <false/>
3920     <key>Locked</key>
3921     <true/> | <false/>
3922   </dict>
3923 </dict>
3924 ```
3925 #### policies.json
3926 ```
3927 {
3928   "policies": {
3929     "PopupBlocking": {
3930       "Allow": ["http://example.org/",
3931                 "http://example.edu/"],
3932       "Default": true | false,
3933       "Locked": true | false
3934     }
3935   }
3936 }
3937 ```
3938 ### Preferences
3939 Set and lock preferences.
3940
3941 **NOTE** On Windows, in order to use this policy, you must clear all settings in the old **Preferences (Deprecated)** section.
3942
3943 Previously you could only set and lock a subset of preferences. Starting with Firefox 81 and Firefox ESR 78.3 you can set many more preferences. You can also set default preferences, user preferences and you can clear preferences.
3944
3945 Preferences that start with the following prefixes are supported:
3946 ```
3947 accessibility.
3948 browser.
3949 datareporting.policy.
3950 dom.
3951 extensions.
3952 general.autoScroll (Firefox 83, Firefox ESR 78.5)
3953 general.smoothScroll (Firefox 83, Firefox ESR 78.5)
3954 geo.
3955 intl.
3956 layout.
3957 media.
3958 network.
3959 pdfjs. (Firefox 84, Firefox ESR 78.6)
3960 places.
3961 print.
3962 signon. (Firefox 83, Firefox ESR 78.5)
3963 spellchecker. (Firefox 84, Firefox ESR 78.6)
3964 ui.
3965 widget.
3966 ```
3967 as well as the following security preferences:
3968 | Preference | Type | Default
3969 | --- | --- | ---
3970 | security.default_personal_cert | string | Ask Every Time
3971 | &nbsp;&nbsp;&nbsp;&nbsp;If set to Select Automatically, Firefox automatically chooses the default personal certificate.
3972 | security.insecure_connection_text.enabled | bool | false
3973 | &nbsp;&nbsp;&nbsp;&nbsp;If set to true, adds the words "Not Secure" for insecure sites.
3974 | security.insecure_connection_text.pbmode.enabled | bool | false
3975 | &nbsp;&nbsp;&nbsp;&nbsp;If set to true, adds the words "Not Secure" for insecure sites in private browsing.
3976 | security.insecure_field_warning.contextual.enabled | bool | true
3977 | &nbsp;&nbsp;&nbsp;&nbsp;If set to false, remove the warning for inscure login fields.
3978 | security.mixed_content.block_active_content | boolean | true
3979 | &nbsp;&nbsp;&nbsp;&nbsp;If false, mixed active content (HTTP and HTTPS) is not blocked.
3980 | security.osclientcerts.autoload | boolean | false
3981 | &nbsp;&nbsp;&nbsp;&nbsp;If true, client certificates are loaded from the operating system certificate store.
3982 | security.ssl.errorReporting.enabled | boolean | true
3983 | &nbsp;&nbsp;&nbsp;&nbsp;If false, SSL errors cannot be sent to Mozilla.
3984 | security.tls.hello_downgrade_check | boolean | true
3985 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the TLS 1.3 downgrade check is disabled.
3986 | security.warn_submit_secure_to_insecure | boolean | true
3987 | &nbsp;&nbsp;&nbsp;&nbsp;If false, no warning is shown when submitting s form from https to http.
3988 &nbsp;
3989
3990 Using the preference as the key, set the `Value` to the corresponding preference value.
3991
3992 `Status` can be "default", "locked", "user" or "clear"
3993
3994 Default preferences can be modified by the user.
3995
3996 If a value is locked, it is also set as the default.
3997
3998 User preferences persist across invocations of Firefox. It is the equivalent of a user setting the preference. They are most useful when a preference is needed very early in startup so it can't be set as default by policy.
3999
4000 User preferences persist even if the policy is removed, so if you need to remove them, you should use the clear policy.
4001
4002 See the examples below for more detail.
4003
4004 IMPORTANT: Make sure you're only setting a particular preference using this mechanism and not some other way.
4005
4006 Status
4007 **Compatibility:** Firefox 81, Firefox ESR 78.3\
4008 **CCK2 Equivalent:** `preferences`\
4009 **Preferences Affected:** Many
4010
4011 #### Windows (GPO)
4012 Software\Policies\Mozilla\Firefox\Preferences (REG_MULTI_SZ) =
4013 ```
4014 {
4015   "accessibility.force_disabled": {
4016     "Value": 1,
4017     "Status": "default"
4018   },
4019   "browser.cache.disk.parent_directory": {
4020     "Value": "SOME_NATIVE_PATH",
4021     "Status": "user"
4022   },
4023   "browser.tabs.warnOnClose": {
4024     "Value": false,
4025     "Status": "locked"
4026   }
4027 }
4028 ```
4029 #### Windows (Intune)
4030 OMA-URI:
4031 ```
4032 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Preferences
4033 ```
4034 Value (string):
4035 ```
4036 <enabled/>
4037 <data id="JSON" value='
4038 {
4039   "accessibility.force_disabled": {
4040     "Value": 1,
4041     "Status": "default"
4042   },
4043   "browser.cache.disk.parent_directory": {
4044     "Value": "SOME_NATIVE_PATH",
4045     "Status": "user"
4046   },
4047   "browser.tabs.warnOnClose": {
4048     "Value": false,
4049     "Status": "locked"
4050   }
4051 }'/>
4052 ```
4053 #### macOS
4054 ```
4055 <dict>
4056   <key>Preferences</key>
4057   <dict>
4058     <key>accessibility.force_disabled</key>
4059     <dict>
4060       <key>Value</key>
4061       <integer>1</integer>
4062       <key>Status</key>
4063       <string>default</string>
4064     </dict>
4065     <key>browser.cache.disk.parent_directory</key>
4066     <dict>
4067       <key>Value</key>
4068       <string>SOME_NATIVE_PATH</string>
4069       <key>Status</key>
4070       <string>user</string>
4071     </dict>
4072     <key>browser.tabs.warnOnClose</key>
4073     <dict>
4074       <key>Value</key>
4075       <false/>
4076       <key>Status</key>
4077       <string>locked</string>
4078     </dict>
4079   </dict>
4080 </dict>
4081 ```
4082 #### policies.json
4083 ```
4084 {
4085   "policies": {
4086     "Preferences": {
4087       "accessibility.force_disabled": {
4088         "Value": 1,
4089         "Status": "default"
4090       },
4091       "browser.cache.disk.parent_directory": {
4092         "Value": "SOME_NATIVE_PATH",
4093         "Status": "user"
4094       },
4095       "browser.tabs.warnOnClose": {
4096         "Value": false,
4097         "Status": "locked"
4098       }
4099     }
4100   }
4101 }
4102 ```
4103 ### Preferences (Deprecated)
4104 Set and lock certain preferences.
4105
4106 **Compatibility:** See below\
4107 **CCK2 Equivalent:** `preferences`\
4108 **Preferences Affected:** See below
4109
4110 | Preference | Type | Compatibility | Default
4111 | --- | --- | --- | ---
4112 | accessibility.force_disabled | integer | Firefox 70, Firefox ESR 68.2 | 0
4113 | &nbsp;&nbsp;&nbsp;&nbsp;If set to 1, platform accessibility is disabled.
4114 | app.update.auto (Deprecated - Switch to AppAutoUpdate policy) | boolean | Firefox 68, Firefox ESR 68 | true
4115 | &nbsp;&nbsp;&nbsp;&nbsp;If false, Firefox doesn't automatically install update.
4116 | browser.bookmarks.autoExportHTML | boolean | Firefox 70, Firefox ESR 68.2 | false
4117 | &nbsp;&nbsp;&nbsp;&nbsp;If true, bookmarks are exported on shutdown.
4118 | browser.bookmarks.file | string | Firefox 70, Firefox ESR 68.2 | N/A
4119 | &nbsp;&nbsp;&nbsp;&nbsp;If set, the name of the file where bookmarks are exported and imported.
4120 | browser.bookmarks.restore_default_bookmarks | boolean | Firefox 70, Firefox ESR 68.2 | N/A
4121 | &nbsp;&nbsp;&nbsp;&nbsp;If true, bookmarks are restored to their defaults.
4122 | browser.cache.disk.enable | boolean | Firefox 68, Firefox ESR 68 | true
4123 | &nbsp;&nbsp;&nbsp;&nbsp;If false, don't store cache on the hard drive.
4124 | ~browser.cache.disk.parent_directory~ | string | Firefox 68, Firefox ESR 68 | Profile temporary directory
4125 | &nbsp;&nbsp;&nbsp;&nbsp;~If set, changes the location of the disk cache.~ This policy doesn't work. It's being worked on.
4126 | browser.fixup.dns_first_for_single_words | boolean | Firefox 68, Firefox ESR 68 | false
4127 | &nbsp;&nbsp;&nbsp;&nbsp;If true, single words are sent to DNS, not directly to search.
4128 | browser.newtabpage.activity-stream.default.sites | string | Firefox 72, ESR 68.4 | Locale dependent
4129 | &nbsp;&nbsp;&nbsp;&nbsp;If set, a list of URLs to use as the default top sites on the new tab page. Due to Firefox limitations, search sites can't be added. In addition, sites with the same name but different TLDs (example.org/example.com) will not display properly.
4130 | browser.places.importBookmarksHTML | boolean | Firefox 70, Firefox ESR 68.2
4131 | &nbsp;&nbsp;&nbsp;&nbsp;If true, bookmarks are always imported on startup.
4132 | browser.safebrowsing.phishing.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
4133 | &nbsp;&nbsp;&nbsp;&nbsp;If false, phishing protection is not enabled (Not recommended)
4134 | browser.safebrowsing.malware.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
4135 | &nbsp;&nbsp;&nbsp;&nbsp;If false, malware protection is not enabled (Not recommended)
4136 | browser.search.update | boolean | Firefox 68, Firefox ESR 68 | true
4137 | &nbsp;&nbsp;&nbsp;&nbsp;If false, updates for search engines are not checked.
4138 | browser.slowStartup.notificationDisabled | boolean | Firefox 70, Firefox ESR 68.2 | false
4139 | &nbsp;&nbsp;&nbsp;&nbsp;If true, a notification isn't shown if startup is slow.
4140 | browser.tabs.warnOnClose | boolean | Firefox 68, Firefox ESR 68 | true
4141 | &nbsp;&nbsp;&nbsp;&nbsp;If false, there is no warning when the browser is closed.
4142 | browser.taskbar.previews.enable | boolean | Firefox 70, Firefox ESR 68.2 (Windows only) | false
4143 | &nbsp;&nbsp;&nbsp;&nbsp;If true, tab previews are shown in the Windows taskbar.
4144 | browser.urlbar.suggest.bookmark | boolean | Firefox 68, Firefox ESR 68 | true
4145 | &nbsp;&nbsp;&nbsp;&nbsp;If false, bookmarks aren't suggested when typing in the URL bar.
4146 | browser.urlbar.suggest.history | boolean | Firefox 68, Firefox ESR 68 | true
4147 | &nbsp;&nbsp;&nbsp;&nbsp;If false, history isn't suggested when typing in the URL bar.
4148 | browser.urlbar.suggest.openpage | boolean | Firefox 68, Firefox ESR 68 | true
4149 | &nbsp;&nbsp;&nbsp;&nbsp;If false, open tabs aren't suggested when typing in the URL bar.
4150 | datareporting.policy.dataSubmissionPolicyBypassNotification | boolean | Firefox 68, Firefox ESR 68 | false
4151 | &nbsp;&nbsp;&nbsp;&nbsp;If true, don't show the privacy policy tab on first run.
4152 | dom.allow_scripts_to_close_windows | boolean | Firefox 70, Firefox ESR 68.2 | false
4153 | &nbsp;&nbsp;&nbsp;&nbsp;If false, web page can close windows.
4154 | dom.disable_window_flip | boolean | Firefox 68, Firefox ESR 68 | true
4155 | &nbsp;&nbsp;&nbsp;&nbsp;If false, web pages can focus and activate windows.
4156 | dom.disable_window_move_resize | boolean | Firefox 68, Firefox ESR 68 | false
4157 | &nbsp;&nbsp;&nbsp;&nbsp;If true, web pages can't move or resize windows.
4158 | dom.event.contextmenu.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4159 | &nbsp;&nbsp;&nbsp;&nbsp;If false, web pages can't override context menus.
4160 | dom.keyboardevent.keypress.hack.dispatch_non_printable_keys.addl | string | Firefox 68, Firefox ESR 68 | N/A
4161 | &nbsp;&nbsp;&nbsp;&nbsp;See https://support.mozilla.org/en-US/kb/dom-events-changes-introduced-firefox-66
4162 | dom.keyboardevent.keypress.hack.use_legacy_keycode_and_charcode.addl | string | Firefox 68, Firefox ESR 68 | N/A
4163 | &nbsp;&nbsp;&nbsp;&nbsp;See https://support.mozilla.org/en-US/kb/dom-events-changes-introduced-firefox-66
4164 | dom.xmldocument.load.enabled | boolean | Firefox ESR 68.5 | true.
4165 | &nbsp;&nbsp;&nbsp;&nbsp;If false, XMLDocument.load is not available.
4166 | dom.xmldocument.async.enabled | boolean | Firefox ESR 68.5 | true
4167 | &nbsp;&nbsp;&nbsp;&nbsp;If false, XMLDocument.async is not available.
4168 | extensions.blocklist.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
4169 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the extensions blocklist is not used (Not recommended)
4170 | extensions.getAddons.showPane | boolean | Firefox 68, Firefox ESR 68 | N/A
4171 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the Recommendations tab is not displayed in the Add-ons Manager.
4172 | extensions.htmlaboutaddons.recommendations.enabled | boolean | Firefox 72, Firefox ESR 68.4 | true
4173 | &nbsp;&nbsp;&nbsp;&nbsp;If false, recommendations are not shown on the Extensions tab in the Add-ons Manager.
4174 | geo.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
4175 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the geolocation API is disabled. | Language dependent
4176 | intl.accept_languages | string | Firefox 70, Firefox ESR 68.2
4177 | &nbsp;&nbsp;&nbsp;&nbsp;If set, preferred language for web pages.
4178 | media.eme.enabled (Deprecated - Switch to EncryptedMediaExtensions policy) | boolean | Firefox 70, Firefox ESR 68.2 | true
4179 | &nbsp;&nbsp;&nbsp;&nbsp;If false, Encrypted Media Extensions are not enabled.
4180 | media.gmp-gmpopenh264.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4181 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the OpenH264  plugin is not downloaded.
4182 | media.gmp-widevinecdm.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4183 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the Widevine plugin is not downloaded.
4184 | media.peerconnection.enabled | boolean | Firefox 72, Firefox ESR 68.4 | true
4185 | &nbsp;&nbsp;&nbsp;&nbsp;If false, WebRTC is disabled
4186 | media.peerconnection.ice.obfuscate_host_addresses.whitelist (Deprecated) | string | Firefox 72, Firefox ESR 68.4 | N/A
4187 | &nbsp;&nbsp;&nbsp;&nbsp;If set, a list of domains for which mDNS hostname obfuscation is
4188 disabled
4189 | media.peerconnection.ice.obfuscate_host_addresses.blocklist | string | Firefox 79, Firefox ESR 78.1 | N/A
4190 | &nbsp;&nbsp;&nbsp;&nbsp;If set, a list of domains for which mDNS hostname obfuscation is
4191 disabled
4192 | network.dns.disableIPv6 | boolean | Firefox 68, Firefox ESR 68 | false
4193 | &nbsp;&nbsp;&nbsp;&nbsp;If true, IPv6 DNS lokoups are disabled.
4194 | network.IDN_show_punycode | boolean | Firefox 68, Firefox ESR 68 | false
4195 | &nbsp;&nbsp;&nbsp;&nbsp;If true, display the punycode version of internationalized domain names.
4196 | places.history.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4197 | &nbsp;&nbsp;&nbsp;&nbsp;If false, history is not enabled.
4198 | print.save_print_settings | boolean | Firefox 70, Firefox ESR 68.2 | true
4199 | &nbsp;&nbsp;&nbsp;&nbsp;If false, print settings are not saved between jobs.
4200 | security.default_personal_cert | string | Firefox 68, Firefox ESR 68 | Ask Every Time
4201 | &nbsp;&nbsp;&nbsp;&nbsp;If set to Select Automatically, Firefox automatically chooses the default personal certificate.
4202 | security.mixed_content.block_active_content | boolean | Firefox 70, Firefox ESR 68.2 | true
4203 | &nbsp;&nbsp;&nbsp;&nbsp;If false, mixed active content (HTTP and HTTPS) is not blocked.
4204 | security.osclientcerts.autoload | boolean | Firefox 72 (Windows), Firefox 75 (macOS)  | false
4205 | &nbsp;&nbsp;&nbsp;&nbsp;If true, client certificates are loaded from the operating system certificate store.
4206 | security.ssl.errorReporting.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4207 | &nbsp;&nbsp;&nbsp;&nbsp;If false, SSL errors cannot be sent to Mozilla.
4208 | security.tls.hello_downgrade_check | boolean | Firefox 72, Firefox ESR 68.4 | true
4209 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the TLS 1.3 downgrade check is disabled.
4210 | ui.key.menuAccessKeyFocuses | boolean | Firefox 68, Firefox ESR 68 | true
4211 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the Alt key doesn't show the menubar on Windows.
4212 | widget.content.gtk-theme-override | string | Firefox 72, Firefox ESR 68.4 (Linux only) | N/A
4213 | &nbsp;&nbsp;&nbsp;&nbsp;If set, overrides the GTK theme for widgets.
4214 #### Windows (GPO)
4215 ```
4216 Software\Policies\Mozilla\Firefox\Preferences\boolean_preference_name = 0x1 | 0x0
4217 Software\Policies\Mozilla\Firefox\Preferences\string_preference_name = "string_value"
4218 ```
4219 #### Windows (Intune)
4220 OMA-URI: (periods are replaced by underscores)
4221 ```
4222 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Preferences/boolean_preference_name
4223 ```
4224 Value (string):
4225 ```
4226 <enabled/> or <disabled/>
4227 ```
4228 OMA-URI: (periods are replaced by underscores)
4229 ```
4230 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Preferences/string_preference_name
4231 ```
4232 Value (string):
4233 ```
4234 <enabled/>
4235 <data id="Preferences_String" value="string_value"/>
4236 ```
4237 #### macOS
4238 ```
4239 <dict>
4240   <key>Preferences</key>
4241   <dict>
4242     <key>boolean_preference_name</key>
4243     <true/> | <false/>
4244     <key>string_preference_name</key>
4245     <string>string_value</string>
4246   </dict>
4247 </dict>
4248 ```
4249 #### policies.json
4250 ```
4251 {
4252   "policies": {
4253     "Preferences": {
4254       "boolean_preference_name": true | false,
4255       "string_preference_name": "string_value"
4256     }
4257   }
4258 }
4259 ```
4260 ### PromptForDownloadLocation
4261 Ask where to save each file before downloading.
4262
4263 **Compatibility:** Firefox 68, Firefox ESR 68\
4264 **CCK2 Equivalent:** N/A\
4265 **Preferences Affected:** `browser.download.useDownloadDir`
4266
4267 #### Windows (GPO)
4268 ```
4269 Software\Policies\Mozilla\Firefox\PromptForDownloadLocation = 0x1 | 0x0
4270 ```
4271 #### Windows (Intune)
4272 OMA-URI:
4273 ```
4274 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PromptForDownloadLocation
4275 ```
4276 Value (string):
4277 ```
4278 <enabled/> or <disabled/>
4279 ```
4280 #### macOS
4281 ```
4282 <dict>
4283   <key>PromptForDownloadLocation</key>
4284   <true/> | <false/>
4285 </dict>
4286 ```
4287 #### policies.json
4288 ```
4289 {
4290   "policies": {
4291     "PromptForDownloadLocation": true | false
4292   }
4293 }
4294 ```
4295 ### Proxy
4296 Configure proxy settings. These settings correspond to the connection settings in Firefox preferences.
4297 To specify ports, append them to the hostnames with a colon (:).
4298
4299 `Mode` is the proxy method being used.
4300
4301 `Locked` is whether or not proxy settings can be changed.
4302
4303 `HTTPProxy` is the HTTP proxy server.
4304
4305 `UseHTTPProxyForAllProtocols` is whether or not the HTTP proxy should be used for all other proxies.
4306
4307 `SSLProxy` is the SSL proxy server.
4308
4309 `FTPProxy` is the FTP proxy server.
4310
4311 `SOCKSProxy` is the SOCKS proxy server
4312
4313 `SOCKSVersion` is the SOCKS version (4 or 5)
4314
4315 `Passthrough` is list of hostnames or IP addresses that will not be proxied. Use `<local>` to bypass proxying for all hostnames which do not contain periods.
4316
4317 `AutoConfigURL` is a  URL for proxy configuration (only used if Mode is autoConfig).
4318
4319 `AutoLogin` means do not prompt for authentication if password is saved.
4320
4321 `UseProxyForDNS` to use proxy DNS when using SOCKS v5.
4322
4323 **Compatibility:** Firefox 60, Firefox ESR 60\
4324 **CCK2 Equivalent:** `networkProxy*`\
4325 **Preferences Affected:** `network.proxy.type`,`network.proxy.autoconfig_url`,`network.proxy.socks_remote_dns`,`signon.autologin.proxy`,`network.proxy.socks_version`,`network.proxy.no_proxies_on`,`network.proxy.share_proxy_settings`,`network.proxy.http`,`network.proxy.http_port`,`network.proxy.ftp`,`network.proxy.ftp_port`,`network.proxy.ssl`,`network.proxy.ssl_port`,`network.proxy.socks`,`network.proxy.socks_port`
4326
4327 #### Windows (GPO)
4328 ```
4329 Software\Policies\Mozilla\Firefox\Proxy\Mode = "none" | "system" | "manual" | "autoDetect" | "autoConfig"
4330 Software\Policies\Mozilla\Firefox\Proxy\Locked = 0x1 | 0x0
4331 Software\Policies\Mozilla\Firefox\=Proxy\HTTPProxy = https://httpproxy.example.com
4332 Software\Policies\Mozilla\Firefox\Proxy\UseHTTPProxyForAllProtocols = 0x1 | 0x0
4333 Software\Policies\Mozilla\Firefox\Proxy\SSLProxy = https://sslproxy.example.com
4334 Software\Policies\Mozilla\Firefox\Proxy\FTPProxy = https://ftpproxy.example.com
4335 Software\Policies\Mozilla\Firefox\Proxy\SOCKSProxy = https://socksproxy.example.com
4336 Software\Policies\Mozilla\Firefox\Proxy\SOCKSVersion = 0x4 | 0x5
4337 Software\Policies\Mozilla\Firefox\Proxy\Passthrough = <local>
4338 Software\Policies\Mozilla\Firefox\Proxy\AutoConfigURL = URL_TO_AUTOCONFIG
4339 Software\Policies\Mozilla\Firefox\Proxy\AutoLogin = 0x1 | 0x0
4340 Software\Policies\Mozilla\Firefox\Proxy\UseProxyForDNS = 0x1 | 0x0
4341 ```
4342 #### Windows (Intune)
4343 OMA-URI:
4344 ```
4345 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Proxy
4346 ```
4347 Value (string):
4348 ```
4349 <enabled/>
4350 <data id="ProxyLocked" value="true | false"/>
4351 <data id="ConnectionType" value="none | system | manual | autoDetect | autoConfig"/>
4352 <data id="HTTPProxy" value="https://httpproxy.example.com"/>
4353 <data id="UseHTTPProxyForAllProtocols" value="true | false"/>
4354 <data id="SSLProxy" value="https://sslproxy.example.com"/>
4355 <data id="FTPProxy" value="https://ftpproxy.example.com"/>
4356 <data id="SOCKSProxy" value="https://socksproxy.example.com"/>
4357 <data id="SOCKSVersion" value="4 | 5"/>
4358 <data id="AutoConfigURL" value="URL_TO_AUTOCONFIG"/>
4359 <data id="Passthrough" value="<local>"/>
4360 <data id="AutoLogin" value="true | false"/>
4361 <data id="UseProxyForDNS" value="true | false"/>
4362 ```
4363 #### macOS
4364 ```
4365 <dict>
4366   <key>Proxy</key>
4367   <dict>
4368     <key>Mode</key>
4369     <string>none | system | manual | autoDetect | autoConfig</string>
4370     <key>Locked</key>
4371     <true> | </false>
4372     <key>HTTPProxy</key>
4373     <string>https://httpproxy.example.com</string>
4374     <key>UseHTTPProxyForAllProtocols</key>
4375     <true> | </false>
4376     <key>SSLProxy</key>
4377     <string>https://sslproxy.example.com</string>
4378     <key>FTPProxy</key>
4379     <string>https://ftpproxy.example.com</string>
4380     <key>SOCKSProxy</key>
4381     <string>https://socksproxy.example.com</string>
4382     <key>SOCKSVersion</key>
4383     <string>4 | 5</string>
4384     <key>Passthrough</key>
4385     <string>&lt;local>&gt;</string>
4386     <key>AutoConfigURL</key>
4387     <string>URL_TO_AUTOCONFIG</string>
4388     <key>AutoLogin</key>
4389     <true> | </false>
4390     <key>UseProxyForDNS</key>
4391     <true> | </false>
4392   </dict>
4393 </dict>
4394 ```
4395 #### policies.json
4396 ```
4397 {
4398   "policies": {
4399     "Proxy": {
4400       "Mode": "none" | "system" | "manual" | "autoDetect" | "autoConfig",
4401       "Locked": true | false,
4402       "HTTPProxy": "hostname",
4403       "UseHTTPProxyForAllProtocols": true | false,
4404       "SSLProxy": "hostname",
4405       "FTPProxy": "hostname",
4406       "SOCKSProxy": "hostname",
4407       "SOCKSVersion": 4 | 5
4408       "Passthrough": "<local>",
4409       "AutoConfigURL": "URL_TO_AUTOCONFIG",
4410       "AutoLogin": true | false,
4411       "UseProxyForDNS": true | false
4412     }
4413   }
4414 }
4415 ```
4416 ### RequestedLocales
4417 Set the the list of requested locales for the application in order of preference. It will cause the corresponding language pack to become active.
4418
4419 Note: For Firefox 68, this can now be a string so that you can specify an empty value.
4420
4421 **Compatibility:** Firefox 64, Firefox ESR 60.4, Updated in Firefox 68, Firefox ESR 68\
4422 **CCK2 Equivalent:** N/A\
4423 **Preferences Affected:** N/A
4424 #### Windows (GPO)
4425 ```
4426 Software\Policies\Mozilla\Firefox\RequestedLocales\1 = "de"
4427 Software\Policies\Mozilla\Firefox\RequestedLocales\2 = "en-US"
4428
4429 or
4430
4431 Software\Policies\Mozilla\Firefox\RequestedLocales = "de,en-US"
4432 ```
4433 #### Windows (Intune)
4434 OMA-URI:
4435 ```
4436 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/RequestedLocalesString
4437 ```
4438 Value (string):
4439 ```
4440 <enabled/>
4441 <data id="Preferences_String" value="de,en-US"/>
4442 ```
4443 #### macOS
4444 ```
4445 <dict>
4446   <key>RequestedLocales</key>
4447   <array>
4448     <string>de</string>
4449     <string>en-US</string>
4450   </array>
4451 </dict>
4452
4453 or
4454
4455 <dict>
4456   <key>RequestedLocales</key>
4457   <string>de,en-US</string>
4458 </dict>
4459
4460 ```
4461 #### policies.json
4462 ```
4463 {
4464   "policies": {
4465     "RequestedLocales": ["de", "en-US"]
4466   }
4467 }
4468
4469 or
4470
4471 {
4472   "policies": {
4473     "RequestedLocales": "de,en-US"
4474   }
4475 }
4476 ```
4477 <a name="SanitizeOnShutdown"></a>
4478
4479 ### SanitizeOnShutdown (Selective)
4480 Clear data on shutdown. Choose from Cache, Cookies, Download History, Form & Search History, Browsing History, Active Logins, Site Preferences and Offline Website Data.
4481
4482 Previously, these values were always locked. Starting with Firefox 74 and Firefox ESR 68.6, you can use the `Locked` option to either keep the values unlocked (set it to false), or lock only the values you set (set it to true). If you want the old behavior of locking everything, do not set `Locked` at all.
4483
4484 **Compatibility:** Firefox 68, Firefox ESR 68 (Locked added in 74/68.6)\
4485 **CCK2 Equivalent:** N/A\
4486 **Preferences Affected:** `privacy.sanitize.sanitizeOnShutdown`,`privacy.clearOnShutdown.cache`,`privacy.clearOnShutdown.cookies`,`privacy.clearOnShutdown.downloads`,`privacy.clearOnShutdown.formdata`,`privacy.clearOnShutdown.history`,`privacy.clearOnShutdown.sessions`,`privacy.clearOnShutdown.siteSettings`,`privacy.clearOnShutdown.offlineApps`
4487 #### Windows (GPO)
4488 ```
4489 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Cache = 0x1 | 0x0
4490 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Cookies = 0x1 | 0x0
4491 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Downloads = 0x1 | 0x0
4492 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\FormData = 0x1 | 0x0
4493 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\History = 0x1 | 0x0
4494 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Sessions = 0x1 | 0x0
4495 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\SiteSettings = 0x1 | 0x0
4496 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\OfflineApps = 0x1 | 0x0
4497 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Locked = 0x1 | 0x0
4498 ```
4499 #### Windows (Intune)
4500 OMA-URI:
4501 ```
4502 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/A_SanitizeOnShutdown_Cache
4503 ```
4504 Value (string):
4505 ```
4506 <enabled/> or <disabled/>
4507 ```
4508 OMA-URI:
4509 ```
4510 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/B_SanitizeOnShutdown_Cookies
4511 ```
4512 Value (string):
4513 ```
4514 <enabled/> or <disabled/>
4515 ```
4516 OMA-URI:
4517 ```
4518 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/C_SanitizeOnShutdown_Downloads
4519 ```
4520 Value (string):
4521 ```
4522 <enabled/> or <disabled/>
4523 ```
4524 OMA-URI:
4525 ```
4526 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/D_SanitizeOnShutdown_FormData
4527 ```
4528 Value (string):
4529 ```
4530 <enabled/> or <disabled/>
4531 ```
4532 OMA-URI:
4533 ```
4534 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/E_SanitizeOnShutdown_History
4535 ```
4536 Value (string):
4537 ```
4538 <enabled/> or <disabled/>
4539 ```
4540 OMA-URI:
4541 ```
4542 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/F_SanitizeOnShutdown_Sessions
4543 ```
4544 Value (string):
4545 ```
4546 <enabled/> or <disabled/>
4547 ```
4548 OMA-URI:
4549 ```
4550 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/G_SanitizeOnShutdown_SiteSettings
4551 ```
4552 Value (string):
4553 ```
4554 <enabled/> or <disabled/>
4555 ```
4556 OMA-URI:
4557 ```
4558 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/H_SanitizeOnShutdown_OfflineApps
4559 ```
4560 Value (string):
4561 ```
4562 <enabled/> or <disabled/>
4563 ```
4564 OMA-URI:
4565 ```
4566 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/I_SanitizeOnShutdown_Locked
4567 ```
4568 Value (string):
4569 ```
4570 <enabled/> or <disabled/>
4571 ```
4572 #### macOS
4573 ```
4574 <dict>
4575   <key>SanitizeOnShutdown</key>
4576   <dict>
4577     <key>Cache</key>
4578     <true/> | <false/>
4579     <key>Cookies</key>
4580     <true/> | <false/>
4581     <key>Downloads</key>
4582     <true/> | <false/>
4583     <key>FormData</key>
4584     <true/> | <false/>
4585     <key>History</key>
4586     <true/> | <false/>
4587     <key>Sessions</key>
4588     <true/> | <false/>
4589     <key>SiteSettings</key>
4590     <true/> | <false/>
4591     <key>OfflineApps</key>
4592     <true/> | <false/>
4593     <key>Locked</key>
4594     <true/> | <false/>
4595   </dict>
4596 </dict>
4597 ```
4598 #### policies.json
4599 ```
4600 {
4601   "policies": {
4602     "SanitizeOnShutdown": {
4603       "Cache": true | false,
4604       "Cookies": true | false,
4605       "Downloads": true | false,
4606       "FormData": true | false,
4607       "History": true | false,
4608       "Sessions": true | false,
4609       "SiteSettings": true | false,
4610       "OfflineApps": true | false,
4611       "Locked": true | false
4612     }
4613   }
4614 }
4615 ```
4616 ### SanitizeOnShutdown (All)
4617 Clear all data on shutdown, including Browsing & Download History, Cookies, Active Logins, Cache, Form & Search History, Site Preferences and Offline Website Data.
4618
4619 **Compatibility:** Firefox 60, Firefox ESR 60\
4620 **CCK2 Equivalent:** N/A\
4621 **Preferences Affected:** `privacy.sanitize.sanitizeOnShutdown`,`privacy.clearOnShutdown.cache`,`privacy.clearOnShutdown.cookies`,`privacy.clearOnShutdown.downloads`,`privacy.clearOnShutdown.formdata`,`privacy.clearOnShutdown.history`,`privacy.clearOnShutdown.sessions`,`privacy.clearOnShutdown.siteSettings`,`privacy.clearOnShutdown.offlineApps`
4622 #### Windows (GPO)
4623 ```
4624 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown = 0x1 | 0x0
4625 ```
4626 #### Windows (Intune)
4627 OMA-URI:
4628 ```
4629 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/C_SanitizeOnShutdown
4630 ```
4631 Value (string):
4632 ```
4633 <enabled/> or <disabled/>
4634 ```
4635 #### macOS
4636 ```
4637 <dict>
4638   <key>SanitizeOnShutdown</key>
4639   <true/> | <false/>
4640 </dict>
4641 ```
4642 #### policies.json
4643 ```
4644 {
4645   "policies": {
4646     "SanitizeOnShutdown": true | false
4647   }
4648 }
4649 ```
4650 ### SearchBar
4651 Set whether or not search bar is displayed.
4652
4653 **Compatibility:** Firefox 60, Firefox ESR 60\
4654 **CCK2 Equivalent:** `showSearchBar`\
4655 **Preferences Affected:** N/A
4656
4657 #### Windows (GPO)
4658 ```
4659 Software\Policies\Mozilla\Firefox\SearchBar = "unified" | "separate"
4660 ```
4661
4662 #### Windows (Intune)
4663 OMA-URI:
4664 ```
4665 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SearchBar
4666 ```
4667 Value (string):
4668 ```
4669 <enabled/>
4670 <data id="Permissions" value="unified | separate"/>
4671 ```
4672 #### macOS
4673 ```
4674 <dict>
4675   <key>SearchBar</key>
4676   <string>unified | separate</string>
4677 </dict>
4678 ```
4679 #### policies.json
4680 ```
4681 {
4682   "policies": {
4683     "SearchBar": "unified" | "separate"
4684   }
4685 }
4686 ```
4687 <a name="SearchEngines"></a>
4688
4689 ### SearchEngines (This policy is only available on the ESR.)
4690
4691 ### SearchEngines | Default
4692
4693 Set the default search engine. This policy is only available on the ESR.
4694
4695 **Compatibility:** Firefox ESR 60\
4696 **CCK2 Equivalent:** `defaultSearchEngine`\
4697 **Preferences Affected:** N/A
4698
4699 #### Windows (GPO)
4700 ```
4701 Software\Policies\Mozilla\Firefox\SearchEngines\Default = NAME_OF_SEARCH_ENGINE
4702 ```
4703 #### Windows (Intune)
4704 OMA-URI:
4705 ```
4706 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_Default
4707 ```
4708 Value (string):
4709 ```
4710 <enabled/>
4711 <data id="SearchEngines_Default" value="NAME_OF_SEARCH_ENGINE"/>
4712 ```
4713 #### macOS
4714 ```
4715 <dict>
4716   <key>SearchEngines</key>
4717   <dict>
4718     <key>Default</key>
4719     <string>NAME_OF_SEARCH_ENGINE</string>
4720   </dict>
4721 </dict>
4722 ```
4723 #### policies.json
4724 ```
4725 {
4726   "policies": {
4727     "SearchEngines": {
4728       "Default": "NAME_OF_SEARCH_ENGINE"
4729     }
4730   }
4731 }
4732 ```
4733 ### SearchEngines | PreventInstalls
4734
4735 Prevent installing search engines from webpages.
4736
4737 **Compatibility:** Firefox ESR 60\
4738 **CCK2 Equivalent:** `disableSearchEngineInstall`\
4739 **Preferences Affected:** N/A
4740
4741 #### Windows (GPO)
4742 ```
4743 Software\Policies\Mozilla\Firefox\SearchEngines\PreventInstalls = 0x1 | 0x0
4744 ```
4745 #### Windows (Intune)
4746 OMA-URI:
4747 ```
4748 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_PreventInstalls
4749 ```
4750 Value (string):
4751 ```
4752 <enabled/> or <disabled/>
4753 ```
4754 #### macOS
4755 ```
4756 <dict>
4757   <key>SearchEngines</key>
4758   <dict>
4759     <key>PreventInstalls</key>
4760     <true/> | <false/>
4761   </dict>
4762 </dict>
4763 ```
4764 #### policies.json
4765 ```
4766 {
4767   "policies": {
4768     "SearchEngines": {
4769       "PreventInstalls": true | false
4770     }
4771   }
4772 }
4773 ```
4774 ### SearchEngines | Remove
4775
4776 Hide built-in search engines. This policy is only available on the ESR.
4777
4778 **Compatibility:** Firefox ESR 60.2\
4779 **CCK2 Equivalent:** `removeDefaultSearchEngines` (removed all built-in engines)\
4780 **Preferences Affected:** N/A
4781
4782 #### Windows (GPO)
4783 ```
4784 Software\Policies\Mozilla\Firefox\SearchEngines\Remove\1 = NAME_OF_SEARCH_ENGINE
4785 ```
4786 #### Windows (Intune)
4787 OMA-URI:
4788 ```
4789 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_Remove
4790 ```
4791 Value (string):
4792 ```
4793 <enabled/>
4794 <data id="SearchEngines_Remove" value="1&#xF000;NAME_OF_SEARCH_ENGINE"/>
4795 ```
4796 #### macOS
4797 ```
4798 <dict>
4799   <key>SearchEngines</key>
4800   <dict>
4801     <key>Remove</key>
4802     <array>
4803       <string>NAME_OF_SEARCH_ENGINE</string>
4804     </array>
4805   </dict>
4806 </dict>
4807 ```
4808 #### policies.json
4809 ```
4810 {
4811   "policies": {
4812     "SearchEngines": {
4813       "Remove": ["NAME_OF_SEARCH_ENGINE"]
4814     }
4815   }
4816 }
4817 ```
4818 ### SearchEngines | Add
4819
4820 Add new search engines (up to five). This policy is only available on the ESR. `Name` and `URLTemplate` are required.
4821
4822 `Name` is the name of the search engine.
4823
4824 `URLTemplate` is the search URL with {searchTerms} to substitute for the search term.
4825
4826 `Method` is either GET or POST
4827
4828 `IconURL` is a URL for the icon to use.
4829
4830 `Alias` is a keyword to use for the engine.
4831
4832 `Description` is a description of the search engine.
4833
4834 `PostData` is the POST data as name value pairs separated by &.
4835
4836 `SuggestURLTemplate` is a search suggestions URL with {searchTerms} to substitute for the search term.
4837
4838 **Compatibility:** Firefox ESR 60 (POST support in Firefox ESR 68)\
4839 **CCK2 Equivalent:** `searchplugins`\
4840 **Preferences Affected:** N/A
4841
4842 #### Windows (GPO)
4843 ```
4844 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Name = "Example1"
4845 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\URLTemplate = "https://www.example.org/q={searchTerms}"
4846 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Method = "GET" | "POST"
4847 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\IconURL = "https://www.example.org/favicon.ico"
4848 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Alias = "example"
4849 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Description = "Example Description"
4850 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\SuggestURLTemplate = "https://www.example.org/suggestions/q={searchTerms}"
4851 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\PostData = "name=value&q={searchTerms}"
4852 ```
4853 #### Windows (Intune)
4854 OMA-URI:
4855 ```
4856 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_1
4857 ```
4858 Value (string):
4859 ```
4860 <enabled/>
4861 <data id="SearchEngine_Name" value="Example1"/>
4862 <data id="SearchEngine_URLTemplate" value="https://www.example.org/q={searchTerms"/>
4863 <data id="SearchEngine_Method" value="GET | POST"/>
4864 <data id="SearchEngine_IconURL" value="https://www.example.org/favicon.ico"/>
4865 <data id="SearchEngine_Alias" value="example"/>
4866 <data id="SearchEngine_Description" value="Example Description"/>
4867 <data id="SearchEngine_SuggestURLTemplate" value="https://www.example.org/suggestions/q={searchTerms}"/>
4868 <data id="SearchEngine_PostData" value="name=value&amp;q={searchTerms}"/>
4869 ```
4870 #### macOS
4871 ```
4872 <dict>
4873   <key>SearchEngines</key>
4874   <dict>
4875     <key>Add</key>
4876     <array>
4877       <dict>
4878         <key>Name</key>
4879         <string>Example1</string>
4880         <key>URLTemplate</key>
4881         <string>https://www.example.org/q={searchTerms}</string>
4882         <key>Method</key>
4883         <string>GET | POST </string>
4884         <key>IconURL</key>
4885         <string>https://www.example.org/favicon.ico</string>
4886         <key>Alias</key>
4887         <string>example</string>
4888         <key>Description</key>
4889         <string>Example Description</string>
4890         <key>SuggestURLTemplate</key>
4891         <string>https://www.example.org/suggestions/q={searchTerms}</string>
4892         <key>PostData</key>
4893         <string>name=value&q={searchTerms}</string>
4894       </dict>
4895     <array>
4896   </dict>
4897 </dict>
4898 ```
4899 #### policies.json
4900 ```
4901 {
4902   "policies": {
4903     "SearchEngines": {
4904       "Add": [
4905         {
4906           "Name": "Example1",
4907           "URLTemplate": "https://www.example.org/q={searchTerms}",
4908           "Method": "GET" | "POST",
4909           "IconURL": "https://www.example.org/favicon.ico",
4910           "Alias": "example",
4911           "Description": "Description",
4912           "PostData": "name=value&q={searchTerms}",
4913           "SuggestURLTemplate": "https://www.example.org/suggestions/q={searchTerms}"
4914         }
4915       ]
4916     }
4917   }
4918 }
4919 ```
4920 ### SearchSuggestEnabled
4921
4922 Enable search suggestions.
4923
4924 **Compatibility:** Firefox 68, Firefox ESR 68\
4925 **CCK2 Equivalent:** N/A\
4926 **Preferences Affected:** `browser.urlbar.suggest.searches`,`browser.search.suggest.enabled`
4927
4928 #### Windows (GPO)
4929 ```
4930 Software\Policies\Mozilla\Firefox\SearchSuggestEnabled = 0x1 | 0x0
4931 ```
4932 #### Windows (Intune)
4933 OMA-URI:
4934 ```
4935 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchSuggestEnabled
4936 ```
4937 Value (string):
4938 ```
4939 <enabled/> or <disabled/>
4940 ```
4941 #### macOS
4942 ```
4943 <dict>
4944   <key>SearchSuggestEnabled</key>
4945   <true/> | <false/>
4946 </dict>
4947 ```
4948 #### policies.json
4949 ```
4950 {
4951   "policies": {
4952     "SearchSuggestEnabled": true | false
4953   }
4954 }
4955 ```
4956 ### SecurityDevices
4957
4958 Install PKCS #11 modules.
4959
4960 **Compatibility:** Firefox 64, Firefox ESR 60.4\
4961 **CCK2 Equivalent:** `certs.devices`\
4962 **Preferences Affected:** N/A
4963
4964 #### Windows (GPO)
4965 ```
4966 Software\Policies\Mozilla\Firefox\SecurityDevices\NAME_OF_DEVICE = PATH_TO_LIBRARY_FOR_DEVICE
4967 ```
4968 #### Windows (Intune)
4969 OMA-URI:
4970 ```
4971 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SecurityDevices
4972 ```
4973 Value (string):
4974 ```
4975 <enabled/>
4976 <data id="SecurityDevices" value="NAME_OF_DEVICE&#xF000;PATH_TO_LIBRARY_FOR_DEVICE"/>
4977 ```
4978 #### macOS
4979 ```
4980 <dict>
4981   <key>SecurityDevices</key>
4982   <dict>
4983     <key>NAME_OF_DEVICE</key>
4984     <string>PATH_TO_LIBRARY_FOR_DEVICE</string>
4985   </dict>
4986 </dict>
4987 ```
4988
4989 #### policies.json
4990 ```
4991 {
4992   "policies": {
4993     "SecurityDevices": {
4994       "NAME_OF_DEVICE": "PATH_TO_LIBRARY_FOR_DEVICE"
4995     }
4996   }
4997 }
4998 ```
4999 ### SSLVersionMax
5000
5001 Set and lock the maximum version of TLS.
5002
5003 **Compatibility:** Firefox 66, Firefox ESR 60.6\
5004 **CCK2 Equivalent:** N/A\
5005 **Preferences Affected:** `security.tls.version.max`
5006
5007 #### Windows (GPO)
5008 ```
5009 Software\Policies\Mozilla\Firefox\SSLVersionMax = "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
5010 ```
5011 #### Windows (Intune)
5012 OMA-URI:
5013 ```
5014 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SSLVersionMax
5015 ```
5016 Value (string):
5017 ```
5018 <enabled/>
5019 <data id="SSLVersion" value="tls1 | tls1.2 | tls1.3"/>
5020 ```
5021 #### macOS
5022 ```
5023 <dict>
5024   <key>SSLVersionMax</key>
5025   <string>tls1 | tls1.1 | tls1.2 | tls1.3</string>
5026 </dict>
5027 ```
5028
5029 #### policies.json
5030 ```
5031 {
5032   "policies": {
5033     "SSLVersionMax": "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
5034   }
5035 }
5036 ```
5037 ### SSLVersionMin
5038
5039 Set and lock the minimum version of TLS.
5040
5041 **Compatibility:** Firefox 66, Firefox ESR 60.6\
5042 **CCK2 Equivalent:** N/A\
5043 **Preferences Affected:** `security.tls.version.min`
5044
5045 #### Windows (GPO)
5046 ```
5047 Software\Policies\Mozilla\Firefox\SSLVersionMin = "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
5048 ```
5049 #### Windows (Intune)
5050 OMA-URI:
5051 ```
5052 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SSLVersionMin
5053 ```
5054 Value (string):
5055 ```
5056 <enabled/>
5057 <data id="SSLVersion" value="tls1 | tls1.2 | tls1.3"/>
5058 ```
5059 #### macOS
5060 ```
5061 <dict>
5062   <key>SSLVersionMin</key>
5063   <string>tls1 | tls1.1 | tls1.2 | tls1.3</string>
5064 </dict>
5065 ```
5066
5067 #### policies.json
5068 ```
5069 {
5070   "policies": {
5071     "SSLVersionMin": "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
5072   }
5073 }
5074 ```
5075 ### SupportMenu
5076 Add a menuitem to the help menu for specifying support information.
5077
5078 **Compatibility:** Firefox 68.0.1, Firefox ESR 68.0.1\
5079 **CCK2 Equivalent:** helpMenu\
5080 **Preferences Affected:** N/A
5081
5082 #### Windows (GPO)
5083 ```
5084 Software\Policies\Mozilla\Firefox\SupportMenu\Title = "Support Menu"
5085 Software\Policies\Mozilla\Firefox\SupportMenu\URL = "http://example.com/support"
5086 Software\Policies\Mozilla\Firefox\SupportMenu\AccessKey = "S"
5087 ```
5088 #### Windows (Intune)
5089 OMA-URI:
5090 ```
5091 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SupportMenu
5092 ```
5093 Value (string):
5094 ```
5095 <enabled/>
5096 <data id="SupportMenuTitle" value="Support Menu"/>
5097 <data id="SupportMenuURL" value="http://example.com/support"/>
5098 <data id="SupportMenuAccessKey" value="S">
5099 ```
5100 #### macOS
5101 ```
5102 <dict>
5103   <key>SupportMenu</key>
5104   <dict>
5105     <key>Title</key>
5106     <string>SupportMenu</string>
5107     <key>URL</key>
5108     <string>http://example.com/support</string>
5109     <key>AccessKey</key>
5110     <string>S</string>
5111   </dict>
5112 </dict>
5113 ```
5114 #### policies.json
5115 ```
5116 {
5117   "policies": {
5118     "SupportMenu": {
5119       "Title": "Support Menu",
5120       "URL": "http://example.com/support",
5121       "AccessKey": "S"
5122     }
5123   }
5124 }
5125 ```
5126 ### UserMessaging
5127
5128 Prevent Firefox from messaging the user in certain situations.
5129
5130 `WhatsNew` Remove the "What's New" icon and menuitem. (Firefox 75 only)
5131
5132 `ExtensionRecommendations` Don't recommend extensions while the user is visiting web pages.
5133
5134 `FeatureRecommendations` Don't recommend browser features.
5135
5136 `UrlbarInterventions` Don't offer Firefox specific suggestions in the URL bar. (Firefox 75 only)
5137
5138 **Compatibility:** Firefox 75, Firefox ESR 68.7\
5139 **CCK2 Equivalent:** N/A\
5140 **Preferences Affected:** `browser.messaging-system.whatsNewPanel.enabled`,`browser.newtabpage.activity-stream.asrouter.userprefs.cfr.addons`,`browser.newtabpage.activity-stream.asrouter.userprefs.cfr.features`
5141
5142 #### Windows (GPO)
5143 ```
5144 Software\Policies\Mozilla\Firefox\UserMessaging\WhatsNew = 0x1 | 0x0
5145 Software\Policies\Mozilla\Firefox\UserMessaging\ExtensionRecommendations = 0x1 | 0x0
5146 Software\Policies\Mozilla\Firefox\UserMessaging\FeatureRecommendations = 0x1 | 0x0
5147 Software\Policies\Mozilla\Firefox\UserMessaging\UrlbarInterventions = 0x1 | 0x0
5148 ```
5149 #### Windows (Intune)
5150 OMA-URI:
5151 ```
5152 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/UserMessaging_WhatsNew
5153 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/UserMessaging_ExtensionRecommendations
5154 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/UserMessaging_FeatureRecommendations
5155 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/UserMessaging_UrlbarInterventions
5156 ```
5157 Value (string):
5158 ```
5159 <enabled/> or <disabled/>
5160 ```
5161 #### macOS
5162 ```
5163 <dict>
5164   <key>UserMessaging</key>
5165   <dict>
5166     <key>WhatsNew</key>
5167     <true/> | <false/>
5168     <key>ExtensionRecommendations</key>
5169     <true/> | <false/>
5170     <key>FeatureRecommendations</key>
5171     <true/> | <false/>
5172     <key>UrlbarInterventions</key>
5173     <true/> | <false/>
5174   </dict>
5175 </dict>
5176 ```
5177 #### policies.json
5178 ```
5179 {
5180   "policies": {
5181     "UserMessaging": {
5182       "WhatsNew": true | false,
5183       "ExtensionRecommendations": true | false,
5184       "FeatureRecommendations": true | false,
5185       "UrlbarInterventions": true | false
5186     }
5187   }
5188 }
5189 ```
5190 ### WebsiteFilter
5191 Block websites from being visited. The parameters take an array of Match Patterns, as documented in https://developer.mozilla.org/en-US/Add-ons/WebExtensions/Match_patterns.
5192 The arrays are limited to 1000 entries each.
5193
5194 As of Firefox 83 and Firefox ESR 78.5, file URLs are supported.
5195
5196 **Compatibility:** Firefox 60, Firefox ESR 60\
5197 **CCK2 Equivalent:** N/A\
5198 **Preferences Affected:** N/A
5199
5200 #### Windows (GPO)
5201 ```
5202 Software\Policies\Mozilla\Firefox\WebsiteFilter\Block\1 = "<all_urls>"
5203 Software\Policies\Mozilla\Firefox\WebsiteFilter\Exceptions\1 = "http://example.org/*"
5204 ```
5205 #### Windows (Intune)
5206 OMA-URI:
5207 ```
5208 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/B_WebsiteFilter_Block
5209 ```
5210 Value (string):
5211 ```
5212 <enabled/>
5213 <data id="WebsiteFilter" value="1&#xF000;<all_urls>"/>
5214 ```
5215 OMA-URI:
5216 ```
5217 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/B_WebsiteFilter_Exceptions
5218 ```
5219 Value (string):
5220 ```
5221 <enabled/>
5222 <data id="WebsiteFilter" value="1&#xF000;http://example.org/*"/>
5223 ```
5224 #### macOS
5225 ```
5226 <dict>
5227   <key>WebsiteFilter</key>
5228   <dict>
5229     <key>Block</key>
5230     <array>
5231       <string><all_urls></string>
5232     </array>
5233     <key>Exceptions</key>
5234     <array>
5235       <string>http://example.org/*</string>
5236     </array>
5237   </dict>
5238
5239 </dict>
5240 ```
5241 #### policies.json
5242 ```
5243 {
5244   "policies": {
5245     "WebsiteFilter": {
5246       "Block": ["<all_urls>"],
5247       "Exceptions": ["http://example.org/*"]
5248     }
5249   }
5250 }
5251 ```