docs/index.md

   1 Firefox policies can be specified using the [Group Policy templates on Windows](https://github.com/mozilla/policy-templates/tree/master/windows), [Intune on Windows](https://support.mozilla.org/kb/managing-firefox-intune), [configuration profiles on macOS](https://github.com/mozilla/policy-templates/tree/master/mac), or by creating a file called `policies.json`. On Windows, create a directory called `distribution` where the EXE is located and place the file there. On Mac, the file goes into `Firefox.app/Contents/Resources/distribution`.  On Linux, the file goes into `firefox/distribution`, where `firefox` is the installation directory for firefox, which varies by distribution or you can specify system-wide policy by placing the file in `/etc/firefox/policies`.
   2
   3 Unfortunately, JSON files do not support comments, but you can add extra entries to the JSON to use as comments. You will see an error in about:policies, but the policies will still work properly. For example:
   4
   5 ```
   6 {
   7   "policies": {
   8     "Authentication": {
   9       "SPNEGO": ["mydomain.com", "https://myotherdomain.com"]
  10     }
  11     "Authentication_Comment": "These domains are required for us"
  12   }
  13 }
  14 ```
  15
  16 | Policy Name | Description
  17 | --- | --- |
  18 | **[`3rdparty`](#3rdparty)** | Set policies that WebExtensions can access via chrome.storage.managed.
  19 | **[`AllowedDomainsForApps`](#alloweddomainsforapps)** | Define domains allowed to access Google Workspace.
  20 | **[`AppAutoUpdate`](#appautoupdate)** | Enable or disable automatic application update.
  21 | **[`AppUpdatePin`](#appupdatepin)** | Prevent Firefox from being updated beyond the specified version.
  22 | **[`AppUpdateURL`](#appupdateurl)** | Change the URL for application update.
  23 | **[`Authentication`](#authentication)** | Configure sites that support integrated authentication.
  24 | **[`AutoLaunchProtocolsFromOrigins`](#autolaunchprotocolsfromorigins)** | Define a list of external protocols that can be used from listed origins without prompting the user.
  25 | **[`BackgroundAppUpdate`](#backgroundappupdate)** | Enable or disable the background updater (Windows only).
  26 | **[`BlockAboutAddons`](#blockaboutaddons)** | Block access to the Add-ons Manager (about:addons).
  27 | **[`BlockAboutConfig`](#blockaboutconfig)** | Block access to about:config.
  28 | **[`BlockAboutProfiles`](#blockaboutprofiles)** | Block access to About Profiles (about:profiles).
  29 | **[`BlockAboutSupport`](#blockaboutsupport)** | Block access to Troubleshooting Information (about:support).
  30 | **[`Bookmarks`](#bookmarks)** | Add bookmarks in either the bookmarks toolbar or menu.
  31 | **[`CaptivePortal`](#captiveportal)** | Enable or disable the detection of captive portals.
  32 | **[`Certificates`](#certificates)** |
  33 | **[`Certificates -> ImportEnterpriseRoots`](#certificates--importenterpriseroots)** | Trust certificates that have been added to the operating system certificate store by a user or administrator.
  34 | **[`Certificates -> Install`](#certificates--install)** | Install certificates into the Firefox certificate store.
  35 | **[`Containers`](#containers)** | Set policies related to [containers](https://addons.mozilla.org/firefox/addon/multi-account-containers/).
  36 | **[`Cookies`](#cookies)** | Configure cookie preferences.
  37 | **[`DefaultDownloadDirectory`](#defaultdownloaddirectory)** | Set the default download directory.
  38 | **[`DisableAppUpdate`](#disableappupdate)** | Turn off application updates.
  39 | **[`DisableBuiltinPDFViewer`](#disablebuiltinpdfviewer)** | Disable the built in PDF viewer.
  40 | **[`DisabledCiphers`](#disabledciphers)** | Disable ciphers.
  41 | **[`DisableDefaultBrowserAgent`](#disabledefaultbrowseragent)** | Prevent the default browser agent from taking any actions (Windows only).
  42 | **[`DisableDeveloperTools`](#disabledevelopertools)** | Remove access to all developer tools.
  43 | **[`DisableFeedbackCommands`](#disablefeedbackcommands)** | Disable the menus for reporting sites.
  44 | **[`DisableFirefoxAccounts`](#disablefirefoxaccounts)** | Disable Firefox Accounts integration (Sync).
  45 | **[`DisableFirefoxScreenshots`](#disablefirefoxscreenshots)** | Remove access to Firefox Screenshots.
  46 | **[`DisableFirefoxStudies`](#disablefirefoxstudies)** | Disable Firefox studies (Shield).
  47 | **[`DisableForgetButton`](#disableforgetbutton)** | Disable the "Forget" button.
  48 | **[`DisableFormHistory`](#disableformhistory)** | Turn off saving information on web forms and the search bar.
  49 | **[`DisableMasterPasswordCreation`](#disablemasterpasswordcreation)** | Remove the master password functionality.
  50 | **[`DisablePasswordReveal`](#disablepasswordreveal)** | Do not allow passwords to be revealed in saved logins.
  51 | **[`DisablePocket`](#disablepocket)** | Remove Pocket in the Firefox UI.
  52 | **[`DisablePrivateBrowsing`](#disableprivatebrowsing)** | Remove access to private browsing.
  53 | **[`DisableProfileImport`](#disableprofileimport)** | Disables the "Import data from another browser" option in the bookmarks window.
  54 | **[`DisableProfileRefresh`](#disableprofilerefresh)** | Disable the Refresh Firefox button on about:support and support.mozilla.org
  55 | **[`DisableSafeMode`](#disablesafemode)** | Disable safe mode within the browser.
  56 | **[`DisableSecurityBypass`](#disablesecuritybypass)** | Prevent the user from bypassing security in certain cases.
  57 | **[`DisableSetDesktopBackground`](#disablesetdesktopbackground)** | Remove the "Set As Desktop Background..." menuitem when right clicking on an image.
  58 | **[`DisableSystemAddonUpdate`](#disablesystemaddonupdate)** | Prevent system add-ons from being installed or updated.
  59 | **[`DisableTelemetry`](#disabletelemetry)** | DisableTelemetry
  60 | **[`DisableThirdPartyModuleBlocking`](#disablethirdpartymoduleblocking)** | Do not allow blocking third-party modules.
  61 | **[`DisplayBookmarksToolbar`](#displaybookmarkstoolbar)** | Set the initial state of the bookmarks toolbar.
  62 | **[`DisplayMenuBar`](#displaymenubar)** | Set the state of the menubar.
  63 | **[`DNSOverHTTPS`](#dnsoverhttps)** | Configure DNS over HTTPS.
  64 | **[`DontCheckDefaultBrowser`](#dontcheckdefaultbrowser)** | Don't check if Firefox is the default browser at startup.
  65 | **[`DownloadDirectory`](#downloaddirectory)** | Set and lock the download directory.
  66 | **[`EnableTrackingProtection`](#enabletrackingprotection)** | Configure tracking protection.
  67 | **[`EncryptedMediaExtensions`](#encryptedmediaextensions)** | Enable or disable Encrypted Media Extensions and optionally lock it.
  68 | **[`EnterprisePoliciesEnabled`](#enterprisepoliciesenabled)** | Enable policy support on macOS.
  69 | **[`ExemptDomainFileTypePairsFromFileTypeDownloadWarnings`](#exemptdomainfiletypepairsfromfiletypedownloadwarnings)** | Disable warnings based on file extension for specific file types on domains.
  70 | **[`Extensions`](#extensions)** | Control the installation, uninstallation and locking of extensions.
  71 | **[`ExtensionSettings`](#extensionsettings)** | Manage all aspects of extensions.
  72 | **[`ExtensionUpdate`](#extensionupdate)** | Control extension updates.
  73 | **[`FirefoxHome`](#firefoxhome)** | Customize the Firefox Home page.
  74 | **[`FirefoxSuggest`](#firefoxsuggest)** | Customize Firefox Suggest.
  75 | **[`GoToIntranetSiteForSingleWordEntryInAddressBar`](#gotointranetsiteforsinglewordentryinaddressbar)** | Force direct intranet site navigation instead of searching when typing single word entries in the address bar.
  76 | **[`Handlers`](#handlers)** | Configure default application handlers.
  77 | **[`HardwareAcceleration`](#hardwareacceleration)** | Control hardware acceleration.
  78 | **[`Homepage`](#homepage)** | Configure the default homepage and how Firefox starts.
  79 | **[`InstallAddonsPermission`](#installaddonspermission)** | Configure the default extension install policy as well as origins for extension installs are allowed.
  80 | **[`LegacyProfiles`](#legacyprofiles)** | Disable the feature enforcing a separate profile for each installation.
  81 | **[`LegacySameSiteCookieBehaviorEnabled`](#legacysamesitecookiebehaviorenabled)** | Enable default legacy SameSite cookie behavior setting.
  82 | **[`LegacySameSiteCookieBehaviorEnabledForDomainList`](#legacysamesitecookiebehaviorenabledfordomainlist)** | Revert to legacy SameSite behavior for cookies on specified sites.
  83 | **[`LocalFileLinks`](#localfilelinks)** | Enable linking to local files by origin.
  84 | **[`ManagedBookmarks`](#managedbookmarks)** | Configures a list of bookmarks managed by an administrator that cannot be changed by the user.
  85 | **[`ManualAppUpdateOnly`](#manualappupdateonly)** | Allow manual updates only and do not notify the user about updates.
  86 | **[`NetworkPrediction`](#networkprediction)** | Enable or disable network prediction (DNS prefetching).
  87 | **[`NewTabPage`](#newtabpage)** | Enable or disable the New Tab page.
  88 | **[`NoDefaultBookmarks`](#nodefaultbookmarks)** | Disable the creation of default bookmarks.
  89 | **[`OfferToSaveLogins`](#offertosavelogins)** | Control whether or not Firefox offers to save passwords.
  90 | **[`OfferToSaveLoginsDefault`](#offertosaveloginsdefault)** | Set the default value for whether or not Firefox offers to save passwords.
  91 | **[`OverrideFirstRunPage`](#overridefirstrunpage)** | Override the first run page.
  92 | **[`OverridePostUpdatePage`](#overridepostupdatepage)** | Override the upgrade page.
  93 | **[`PasswordManagerEnabled`](#passwordmanagerenabled)** | Remove (some) access to the password manager.
  94 | **[`PasswordManagerExceptions`](#passwordmanagerexceptions)** | Prevent Firefox from saving passwords for specific sites.
  95 | **[`PDFjs`](#pdfjs)** | Disable or configure PDF.js, the built-in PDF viewer.
  96 | **[`Permissions`](#permissions)** | Set permissions associated with camera, microphone, location, and notifications.
  97 | **[`PictureInPicture`](#pictureinpicture)** | Enable or disable Picture-in-Picture.
  98 | **[`PopupBlocking`](#popupblocking)** | Configure the default pop-up window policy as well as origins for which pop-up windows are allowed.
  99 | **[`Preferences`](#preferences)** | Set and lock preferences.
 100 | **[`PrimaryPassword`](#primarypassword)** | Require or prevent using a primary (formerly master) password.
 101 | **[`PrintingEnabled`](#printingenabled)** | Enable or disable printing.
 102 | **[`PromptForDownloadLocation`](#promptfordownloadlocation)** | Ask where to save each file before downloading.
 103 | **[`Proxy`](#proxy)** | Configure proxy settings.
 104 | **[`RequestedLocales`](#requestedlocales)** | Set the the list of requested locales for the application in order of preference.
 105 | **[`SanitizeOnShutdown` (All)](#sanitizeonshutdown-all)** | Clear all data on shutdown.
 106 | **[`SanitizeOnShutdown` (Selective)](#sanitizeonshutdown-selective)** | Clear data on shutdown.
 107 | **[`SearchBar`](#searchbar)** | Set whether or not search bar is displayed.
 108 | **[`SearchEngines`](#searchengines-this-policy-is-only-available-on-the-esr)** |
 109 | **[`SearchEngines -> Add`](#searchengines--add)** | Add new search engines.
 110 | **[`SearchEngines -> Default`](#searchengines--default)** | Set the default search engine.
 111 | **[`SearchEngines -> PreventInstalls`](#searchengines--preventinstalls)** | Prevent installing search engines from webpages.
 112 | **[`SearchEngines -> Remove`](#searchengines--remove)** | Hide built-in search engines.
 113 | **[`SearchSuggestEnabled`](#searchsuggestenabled)** | Enable search suggestions.
 114 | **[`SecurityDevices`](#securitydevices)** | Install PKCS #11 modules.
 115 | **[`ShowHomeButton`](#showhomebutton)** | Show the home button on the toolbar.
 116 | **[`SSLVersionMax`](#sslversionmax)** | Set and lock the maximum version of TLS.
 117 | **[`SSLVersionMin`](#sslversionmin)** | Set and lock the minimum version of TLS.
 118 | **[`StartDownloadsInTempDirectory`](#startdownloadsintempdirectory)** | Force downloads to start off in a local, temporary location rather than the default download directory.
 119 | **[`SupportMenu`](#supportmenu)** | Add a menuitem to the help menu for specifying support information.
 120 | **[`UserMessaging`](#usermessaging)** | Don't show certain messages to the user.
 121 | **[`UseSystemPrintDialog`](#usesystemprintdialog)** | Print using the system print dialog instead of print preview.
 122 | **[`WebsiteFilter`](#websitefilter)** | Block websites from being visited.
 123 | **[`WindowsSSO`](#windowssso)** | Allow Windows single sign-on for Microsoft, work, and school accounts.
 124
 125 ### 3rdparty
 126
 127 Allow WebExtensions to configure policy. For more information, see [Adding policy support to your extension](https://extensionworkshop.com/documentation/enterprise/adding-policy-support-to-your-extension/).
 128
 129 For GPO and Intune, the extension developer should provide an ADMX file.
 130
 131 **Compatibility:** Firefox 68\
 132 **CCK2 Equivalent:** N/A\
 133 **Preferences Affected:** N/A
 134
 135 #### macOS
 136 ```
 137 <dict>
 138   <key>3rdparty</key>
 139   <dict>
 140     <key>Extensions</key>
 141     <dict>
 142       <key>uBlock0@raymondhill.net</key>
 143       <dict>
 144         <key>adminSettings</key>
 145         <dict>
 146           <key>selectedFilterLists</key>
 147           <array>
 148             <string>ublock-privacy</string>
 149             <string>ublock-badware</string>
 150             <string>ublock-filters</string>
 151             <string>user-filters</string>
 152           </array>
 153         </dict>
 154       </dict>
 155     </dict>
 156   </dict>
 157 </dict>
 158 ```
 159 #### policies.json
 160 ```
 161 {
 162   "policies": {
 163     "3rdparty": {
 164       "Extensions": {
 165         "uBlock0@raymondhill.net": {
 166           "adminSettings": {
 167             "selectedFilterLists": [
 168               "ublock-privacy",
 169               "ublock-badware",
 170               "ublock-filters",
 171               "user-filters"
 172             ]
 173           }
 174         }
 175       }
 176     }
 177   }
 178 }
 179 ```
 180
 181 ### AllowedDomainsForApps
 182
 183 Define domains allowed to access Google Workspace.
 184
 185 This policy is based on the [Chrome policy](https://chromeenterprise.google/policies/#AllowedDomainsForApps) of the same name.
 186
 187 If this policy is enabled, users can only access Google Workspace using accounts from the specified domains. If you want to allow Gmail, you can add ```consumer_accounts``` to the list.
 188
 189 **Compatibility:** Firefox 89, Firefox ESR 78.11\
 190 **CCK2 Equivalent:** N/A\
 191 **Preferences Affected:** N/A
 192
 193 #### Windows (GPO)
 194 ```
 195 Software\Policies\Mozilla\Firefox\AllowedDomainsForApps = "managedfirefox.com,example.com"
 196 ```
 197 #### Windows (Intune)
 198 OMA-URI:
 199 ```
 200 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AllowedDomainsForApps
 201 ```
 202 Value (string):
 203 ```
 204 <enabled/>
 205 <data id="AllowedDomainsForApps" value="managedfirefox.com,example.com"/>
 206 ```
 207 #### macOS
 208 ```
 209 <dict>
 210   <key>AllowedDomainsForApps</key>
 211   <string>managedfirefox.com,example.com</string>
 212 </dict>
 213 ```
 214 #### policies.json
 215 ```
 216 {
 217   "policies": {
 218     "AllowedDomainsForApps": "managedfirefox.com,example.com"
 219   }
 220 }
 221 ```
 222 ### AppAutoUpdate
 223
 224 Enable or disable **automatic** application update.
 225
 226 If set to true, application updates are installed without user approval within Firefox. The operating system might still require approval.
 227
 228 If set to false, application updates are downloaded but the user can choose when to install the update.
 229
 230 If you have disabled updates via `DisableAppUpdate`, this policy has no effect.
 231
 232 **Compatibility:** Firefox 75, Firefox ESR 68.7\
 233 **CCK2 Equivalent:** N/A\
 234 **Preferences Affected:** `app.update.auto`
 235
 236 #### Windows (GPO)
 237 ```
 238 Software\Policies\Mozilla\Firefox\AppAutoUpdate = 0x1 | 0x0
 239 ```
 240 #### Windows (Intune)
 241 OMA-URI:
 242 ```
 243 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AppAutoUpdate
 244 ```
 245 Value (string):
 246 ```
 247 <enabled/> or <disabled/>
 248 ```
 249 #### macOS
 250 ```
 251 <dict>
 252   <key>AppAutoUpdate</key>
 253   <true/> | <false/>
 254 </dict>
 255 ```
 256 #### policies.json
 257 ```
 258 {
 259   "policies": {
 260     "AppAutoUpdate": true | false
 261   }
 262 }
 263 ```
 264 ### AppUpdatePin
 265
 266 Prevent Firefox from being updated beyond the specified version.
 267
 268 You can specify the any version as ```xx.``` and Firefox will be updated with all minor versions, but will not be updated beyond the major version.
 269
 270 You can also specify the version as ```xx.xx``` and Firefox will be updated with all patch versions, but will not be updated beyond the minor version.
 271
 272 You should specify a version that exists or is guaranteed to exist. If you specify a version that doesn't end up existing, Firefox will update beyond that version.
 273
 274 **Compatibility:** Firefox 102,\
 275 **CCK2 Equivalent:** N/A\
 276 **Preferences Affected:** N/A
 277
 278 #### Windows (GPO)
 279 ```
 280 Software\Policies\Mozilla\Firefox\AppUpdatePin = "106."
 281 ```
 282 #### Windows (Intune)
 283 OMA-URI:
 284 ```
 285 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AppUpdatePin
 286 ```
 287 Value (string):
 288 ```
 289 <enabled/>
 290 <data id="AppUpdatePin" value="106."/>
 291 ```
 292 #### macOS
 293 ```
 294 <dict>
 295   <key>AppUpdatePin</key>
 296   <string>106.</string>
 297 </dict>
 298 ```
 299 #### policies.json
 300 ```
 301 {
 302   "policies": {
 303     "AppUpdatePin": "106."
 304   }
 305 }
 306 ```
 307 ### AppUpdateURL
 308
 309 Change the URL for application update if you are providing Firefox updates from a custom update server.
 310
 311 **Compatibility:** Firefox 62, Firefox ESR 60.2\
 312 **CCK2 Equivalent:** N/A\
 313 **Preferences Affected:** `app.update.url`
 314
 315 #### Windows (GPO)
 316 ```
 317 Software\Policies\Mozilla\Firefox\AppUpdateURL = "https://yoursite.com"
 318 ```
 319 #### Windows (Intune)
 320 OMA-URI:
 321 ```
 322 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AppUpdateURL
 323 ```
 324 Value (string):
 325 ```
 326 <enabled/>
 327 <data id="AppUpdateURL" value="https://yoursite.com"/>
 328 ```
 329 #### macOS
 330 ```
 331 <dict>
 332   <key>AppUpdateURL</key>
 333   <string>https://yoursite.com</string>
 334 </dict>
 335 ```
 336 #### policies.json
 337 ```
 338 {
 339   "policies": {
 340     "AppUpdateURL": "https://yoursite.com"
 341   }
 342 }
 343 ```
 344 ### Authentication
 345
 346 Configure sites that support integrated authentication.
 347
 348 See [Integrated authentication](https://htmlpreview.github.io/?https://github.com/mdn/archived-content/blob/main/files/en-us/mozilla/integrated_authentication/raw.html) for more information.
 349
 350 `PrivateBrowsing` enables integrated authentication in private browsing.
 351
 352 **Compatibility:** Firefox 60, Firefox ESR 60 (AllowNonFQDN added in 62/60.2, AllowProxies added in 70/68.2, Locked added in 71/68.3, PrivateBrowsing added in 77/68.9)\
 353 **CCK2 Equivalent:** N/A\
 354 **Preferences Affected:** `network.negotiate-auth.trusted-uris`,`network.negotiate-auth.delegation-uris`,`network.automatic-ntlm-auth.trusted-uris`,`network.automatic-ntlm-auth.allow-non-fqdn`,`network.negotiate-auth.allow-non-fqdn`,`network.automatic-ntlm-auth.allow-proxies`,`network.negotiate-auth.allow-proxies`,`network.auth.private-browsing-sso`
 355
 356 #### Windows (GPO)
 357 ```
 358 Software\Policies\Mozilla\Firefox\Authentication\SPNEGO\1 = "mydomain.com"
 359 Software\Policies\Mozilla\Firefox\Authentication\SPNEGO\2 = "https://myotherdomain.com"
 360 Software\Policies\Mozilla\Firefox\Authentication\Delegated\1 = "mydomain.com"
 361 Software\Policies\Mozilla\Firefox\Authentication\Delegated\2 = "https://myotherdomain.com"
 362 Software\Policies\Mozilla\Firefox\Authentication\NTLM\1 = "mydomain.com"
 363 Software\Policies\Mozilla\Firefox\Authentication\NTLM\2 = "https://myotherdomain.com"
 364 Software\Policies\Mozilla\Firefox\Authentication\AllowNonFQDN\SPNEGO = 0x1 | 0x0
 365 Software\Policies\Mozilla\Firefox\Authentication\AllowNonFQDN\NTLM = 0x1 | 0x0
 366 Software\Policies\Mozilla\Firefox\Authentication\AllowProxies\SPNEGO = 0x1 | 0x0
 367 Software\Policies\Mozilla\Firefox\Authentication\AllowProxies\NTLM = 0x1 | 0x0
 368 Software\Policies\Mozilla\Firefox\Authentication\Locked = 0x1 | 0x0
 369 Software\Policies\Mozilla\Firefox\Authentication\PrivateBrowsing = 0x1 | 0x0
 370 ```
 371 #### Windows (Intune)
 372 OMA-URI:
 373 ```
 374 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_SPNEGO
 375 ```
 376 Value (string):
 377 ```
 378 <enabled/>
 379 <data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
 380 ```
 381 OMA-URI:
 382 ```
 383 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_Delegated
 384 ```
 385 Value (string):
 386 ```
 387 <enabled/>
 388 <data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
 389 ```
 390 OMA-URI:
 391 ```
 392 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_NTLM
 393 ```
 394 Value (string):
 395 ```
 396 <enabled/>
 397 <data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
 398 ```
 399 OMA-URI:
 400 ```
 401 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_AllowNonFQDN
 402 ```
 403 Value (string):
 404 ```
 405 <enabled/>
 406 <data id="Authentication_AllowNonFQDN_NTLM" value="true | false"/>
 407 <data id="Authentication_AllowNonFQDN_SPNEGO" value="true | false"/>
 408 ```
 409 OMA-URI:
 410 ```
 411 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_Locked
 412 ```
 413 Value (string):
 414 ```
 415 <enabled/> or <disabled/>
 416 ```
 417 OMA-URI:
 418 ```
 419 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_PrivateBrowsing
 420 ```
 421 Value (string):
 422 ```
 423 <enabled/> or <disabled/>
 424 ```
 425 #### macOS
 426 ```
 427 <dict>
 428   <key>Authentication</key>
 429   <dict>
 430     <key>SPNEGO</key>
 431     <array>
 432       <string>mydomain.com</string>
 433       <string>https://myotherdomain.com</string>
 434     </array>
 435     <key>Delegated</key>
 436     <array>
 437       <string>mydomain.com</string>
 438       <string>https://myotherdomain.com</string>
 439     </array>
 440     <key>NTLM</key>
 441     <array>
 442       <string>mydomain.com</string>
 443       <string>https://myotherdomain.com</string>
 444     </array>
 445     <key>AllowNonFQDN</key>
 446       <dict>
 447       <key>SPNEGO</key>
 448       <true/> | <false/>
 449       <key>NTLM</key>
 450       <true/> | <false/>
 451     </dict>
 452     <key>AllowProxies</key>
 453       <dict>
 454       <key>SPNEGO</key>
 455       <true/> | <false/>
 456       <key>NTLM</key>
 457       <true/> | <false/>
 458     </dict>
 459     <key>Locked</key>
 460     <true/> | <false/>
 461     <key>PrivateBrowsing</key>
 462     <true/> | <false/>
 463   </dict>
 464 </dict>
 465 ```
 466 #### policies.json
 467 ```
 468 {
 469   "policies": {
 470     "Authentication": {
 471       "SPNEGO": ["mydomain.com", "https://myotherdomain.com"],
 472       "Delegated": ["mydomain.com", "https://myotherdomain.com"],
 473       "NTLM": ["mydomain.com", "https://myotherdomain.com"],
 474       "AllowNonFQDN": {
 475         "SPNEGO": true | false,
 476         "NTLM": true | false
 477       },
 478       "AllowProxies": {
 479         "SPNEGO": true | false,
 480         "NTLM": true | false
 481       },
 482       "Locked": true | false,
 483       "PrivateBrowsing": true | false
 484     }
 485   }
 486 }
 487 ```
 488 ### AutoLaunchProtocolsFromOrigins
 489 Define a list of external protocols that can be used from listed origins without prompting the user. The origin is the scheme plus the hostname.
 490
 491 The syntax of this policy is exactly the same as the [Chrome AutoLaunchProtocolsFromOrigins policy](https://cloud.google.com/docs/chrome-enterprise/policies/?policy=AutoLaunchProtocolsFromOrigins) except that you can only use valid origins (not just hostnames). This also means that you cannot specify an asterisk for all origins.
 492
 493 The schema is:
 494 ```
 495 {
 496  "items": {
 497   "properties": {
 498    "allowed_origins": {
 499     "items": {
 500      "type": "string"
 501     },
 502     "type": "array"
 503    },
 504    "protocol": {
 505     "type": "string"
 506    }
 507   },
 508   "required": [
 509    "protocol",
 510    "allowed_origins"
 511   ],
 512   "type": "object"
 513  },
 514  "type": "array"
 515 }
 516 ```
 517 **Compatibility:** Firefox 90, Firefox ESR 78.12\
 518 **CCK2 Equivalent:** N/A\
 519 **Preferences Affected:** N/A
 520
 521 #### Windows (GPO)
 522 Software\Policies\Mozilla\Firefox\AutoLaunchProtocolsFromOrigins (REG_MULTI_SZ) =
 523 ```
 524 [
 525   {
 526     "protocol": "zoommtg",
 527     "allowed_origins": [
 528       "https://somesite.zoom.us"
 529     ]
 530   }
 531 ]
 532 ```
 533 #### Windows (Intune)
 534 OMA-URI:
 535 ```
 536 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AutoLaunchProtocolsFromOrigins
 537 ```
 538 Value (string):
 539 ```
 540 <enabled/>
 541 <data id="JSON" value='
 542 [
 543   {
 544     "protocol": "zoommtg",
 545     "allowed_origins": [
 546       "https://somesite.zoom.us"
 547     ]
 548   }
 549 ]'/>
 550 ```
 551 #### macOS
 552 ```
 553 <dict>
 554   <key>AutoLaunchProtocolsFromOrigins</key>
 555   <array>
 556     <dict>
 557       <key>protocol</key>
 558       <string>zoommtg</string>
 559       <key>allowed_origins</key>
 560       <array>
 561         <string>https://somesite.zoom.us</string>
 562       </array>
 563     </dict>
 564   </array>
 565 </dict>
 566 ```
 567 #### policies.json
 568 ```
 569 {
 570   "policies": {
 571     "AutoLaunchProtocolsFromOrigins": [{
 572       "protocol": "zoommtg",
 573       "allowed_origins": [
 574         "https://somesite.zoom.us"
 575       ]
 576     }]
 577   }
 578 }
 579 ```
 580 ### BackgroundAppUpdate
 581
 582 Enable or disable **automatic** application update **in the background**, when the application is not running.
 583
 584 If set to true, application updates may be installed (without user approval) in the background, even when the application is not running. The operating system might still require approval.
 585
 586 If set to false, the application will not try to install updates when the application is not running.
 587
 588 If you have disabled updates via `DisableAppUpdate` or disabled automatic updates via `AppAutoUpdate`, this policy has no effect.
 589
 590 If you are having trouble getting the background task to run, verify your configuration with the ["Requirements to run" section in this support document](https://support.mozilla.org/en-US/kb/enable-background-updates-firefox-windows).
 591
 592 **Compatibility:** Firefox 90 (Windows only)\
 593 **CCK2 Equivalent:** N/A\
 594 **Preferences Affected:** `app.update.background.enabled`
 595
 596 #### Windows (GPO)
 597 ```
 598 Software\Policies\Mozilla\Firefox\BackgroundAppUpdate = 0x1 | 0x0
 599 ```
 600 #### Windows (Intune)
 601 OMA-URI:
 602 ```
 603 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BackgroundAppUpdate
 604 ```
 605 Value (string):
 606 ```
 607 <enabled/> or <disabled/>
 608 ```
 609 #### macOS
 610 ```
 611 <dict>
 612   <key>BackgroundAppUpdate</key>
 613   <true/> | <false/>
 614 </dict>
 615 ```
 616 #### policies.json
 617 ```
 618 {
 619   "policies": {
 620     "BackgroundAppUpdate": true | false
 621   }
 622 }
 623 ```
 624 ### BlockAboutAddons
 625
 626 Block access to the Add-ons Manager (about:addons).
 627
 628 **Compatibility:** Firefox 60, Firefox ESR 60\
 629 **CCK2 Equivalent:** `disableAddonsManager`\
 630 **Preferences Affected:** N/A
 631
 632 #### Windows (GPO)
 633 ```
 634 Software\Policies\Mozilla\Firefox\BlockAboutAddons = 0x1 | 0x0
 635 ```
 636 #### Windows (Intune)
 637 OMA-URI:
 638 ```
 639 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutAddons
 640 ```
 641 Value (string):
 642 ```
 643 <enabled/> or <disabled/>
 644 ```
 645 #### macOS
 646 ```
 647 <dict>
 648   <key>BlockAboutAddons</key>
 649   <true/> | <false/>
 650 </dict>
 651 ```
 652 #### policies.json
 653 ```
 654 {
 655   "policies": {
 656     "BlockAboutAddons": true | false
 657   }
 658 }
 659 ```
 660 ### BlockAboutConfig
 661
 662 Block access to about:config.
 663
 664 **Compatibility:** Firefox 60, Firefox ESR 60\
 665 **CCK2 Equivalent:** `disableAboutConfig`\
 666 **Preferences Affected:** N/A
 667
 668 #### Windows (GPO)
 669 ```
 670 Software\Policies\Mozilla\Firefox\BlockAboutConfig = 0x1 | 0x0
 671 ```
 672 #### Windows (Intune)
 673 OMA-URI:
 674 ```
 675 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutConfig
 676 ```
 677 Value (string):
 678 ```
 679 <enabled/> or <disabled/>
 680 ```
 681 #### macOS
 682 ```
 683 <dict>
 684   <key>BlockAboutConfig</key>
 685   <true/> | <false/>
 686 </dict>
 687 ```
 688 #### policies.json
 689 ```
 690 {
 691   "policies": {
 692     "BlockAboutConfig": true | false
 693   }
 694 }
 695 ```
 696 ### BlockAboutProfiles
 697
 698 Block access to About Profiles (about:profiles).
 699
 700 **Compatibility:** Firefox 60, Firefox ESR 60\
 701 **CCK2 Equivalent:** `disableAboutProfiles`\
 702 **Preferences Affected:** N/A
 703
 704 #### Windows (GPO)
 705 ```
 706 Software\Policies\Mozilla\Firefox\BlockAboutProfiles = 0x1 | 0x0
 707 ```
 708 #### Windows (Intune)
 709 OMA-URI:
 710 ```
 711 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutProfiles
 712 ```
 713 Value (string):
 714 ```
 715 <enabled/> or <disabled/>
 716 ```
 717 #### macOS
 718 ```
 719 <dict>
 720   <key>BlockAboutProfiles</key>
 721   <true/> | <false/>
 722 </dict>
 723 ```
 724 #### policies.json
 725 ```
 726 {
 727   "policies": {
 728     "BlockAboutProfiles": true | false
 729   }
 730 }
 731 ```
 732 ### BlockAboutSupport
 733
 734 Block access to Troubleshooting Information (about:support).
 735
 736 **Compatibility:** Firefox 60, Firefox ESR 60\
 737 **CCK2 Equivalent:** `disableAboutSupport`\
 738 **Preferences Affected:** N/A
 739
 740 #### Windows (GPO)
 741 ```
 742 Software\Policies\Mozilla\Firefox\BlockAboutSupport = 0x1 | 0x0
 743 ```
 744 #### Windows (Intune)
 745 OMA-URI:
 746 ```
 747 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutSupport
 748 ```
 749 Value (string):
 750 ```
 751 <enabled/> or <disabled/>
 752 ```
 753 #### macOS
 754 ```
 755 <dict>
 756   <key>BlockAboutSupport</key>
 757   <true/> | <false/>
 758 </dict>
 759 ```
 760 #### policies.json
 761 ```
 762 {
 763   "policies": {
 764     "BlockAboutSupport": true | false
 765   }
 766 }
 767 ```
 768 ### Bookmarks
 769
 770 Note: [`ManagedBookmarks`](#managedbookmarks) is the new recommended way to add bookmarks. This policy will continue to be supported.
 771
 772 Add bookmarks in either the bookmarks toolbar or menu. Only `Title` and `URL` are required. If `Placement` is not specified, the bookmark will be placed on the toolbar. If `Folder` is specified, it is automatically created and bookmarks with the same folder name are grouped together.
 773
 774 If you want to clear all bookmarks set with this policy, you can set the value to an empty array (```[]```). This can be on Windows via the new Bookmarks (JSON) policy available with GPO and Intune.
 775
 776 **Compatibility:** Firefox 60, Firefox ESR 60\
 777 **CCK2 Equivalent:** `bookmarks.toolbar`,`bookmarks.menu`\
 778 **Preferences Affected:** N/A
 779
 780 #### Windows (GPO)
 781 ```
 782 Software\Policies\Mozilla\Firefox\Bookmarks\1\Title = "Example"
 783 Software\Policies\Mozilla\Firefox\Bookmarks\1\URL = "https://example.com"
 784 Software\Policies\Mozilla\Firefox\Bookmarks\1\Favicon = "https://example.com/favicon.ico"
 785 Software\Policies\Mozilla\Firefox\Bookmarks\1\Placement = "toolbar" | "menu"
 786 Software\Policies\Mozilla\Firefox\Bookmarks\1\Folder = "FolderName"
 787
 788 Software\Policies\Mozilla\Firefox\Bookmarks (REG_MULTI_SZ) =
 789 ```
 790 []
 791 ```
 792
 793 ```
 794 #### Windows (Intune)
 795 OMA-URI:
 796 ```
 797 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Bookmarks/Bookmark01
 798 ```
 799 Value (string):
 800 ```
 801 <enabled/>
 802 <data id="BookmarkTitle" value="Example"/>
 803 <data id="BookmarkURL" value="https://example.com"/>
 804 <data id="BookmarkFavicon" value="https://example.com/favicon.ico"/>
 805 <data id="BookmarkPlacement" value="toolbar | menu"/>
 806 <data id="BookmarkFolder" value="FolderName"/>
 807 ```
 808 OMA-URI:
 809 ```
 810 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Bookmarks
 811 ```
 812 Value (string):
 813 ```
 814 <enabled/>
 815 <data id="JSON" value='[]'/>
 816 ```
 817 #### macOS
 818 ```
 819 <dict>
 820   <key>Bookmarks</key>
 821   <array>
 822     <dict>
 823       <key>Title</key>
 824       <string>Example</string>
 825       <key>URL</key>
 826       <string>https://example.com</string>
 827       <key>Favicon</key>
 828       <string>https://example.com/favicon.ico</string>
 829       <key>Placement</key>
 830       <string>toolbar | menu</string>
 831       <key>Folder</key>
 832       <string>FolderName</string>
 833     </dict>
 834   </array>
 835 </dict>
 836 ```
 837 #### policies.json
 838 ```
 839 {
 840   "policies": {
 841     "Bookmarks": [
 842       {
 843         "Title": "Example",
 844         "URL": "https://example.com",
 845         "Favicon": "https://example.com/favicon.ico",
 846         "Placement": "toolbar" | "menu",
 847         "Folder": "FolderName"
 848       }
 849     ]
 850   }
 851 }
 852 ```
 853 ### CaptivePortal
 854 Enable or disable the detection of captive portals.
 855
 856 **Compatibility:** Firefox 67, Firefox ESR 60.7\
 857 **CCK2 Equivalent:** N/A\
 858 **Preferences Affected:** `network.captive-portal-service.enabled`
 859
 860 #### Windows (GPO)
 861 ```
 862 Software\Policies\Mozilla\Firefox\CaptivePortal = 0x1 | 0x0
 863 ```
 864 #### Windows (Intune)
 865 OMA-URI:
 866 ```
 867 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/CaptivePortal
 868 ```
 869 Value (string):
 870 ```
 871 <enabled/> or <disabled/>
 872 ```
 873 #### macOS
 874 ```
 875 <dict>
 876   <key>CaptivePortal</key>
 877   <true/> | <false/>
 878 </dict>
 879 ```
 880 #### policies.json
 881 ```
 882 {
 883   "policies": {
 884     "CaptivePortal": true | false
 885   }
 886 }
 887 ```
 888 ### Certificates
 889
 890 ### Certificates | ImportEnterpriseRoots
 891
 892 Trust certificates that have been added to the operating system certificate store by a user or administrator.
 893
 894 Note: This policy only works on Windows and macOS. For Linux discussion, see [bug 1600509](https://bugzilla.mozilla.org/show_bug.cgi?id=1600509).
 895
 896 See https://support.mozilla.org/kb/setting-certificate-authorities-firefox for more detail.
 897
 898 **Compatibility:** Firefox 60, Firefox ESR 60 (macOS support in Firefox 63, Firefox ESR 68)\
 899 **CCK2 Equivalent:** N/A\
 900 **Preferences Affected:** `security.enterprise_roots.enabled`
 901
 902 #### Windows (GPO)
 903 ```
 904 Software\Policies\Mozilla\Firefox\Certificates\ImportEnterpriseRoots = 0x1 | 0x0
 905 ```
 906 #### Windows (Intune)
 907 OMA-URI:
 908 ```
 909 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Certificates/Certificates_ImportEnterpriseRoots
 910 ```
 911 Value (string):
 912 ```
 913 <enabled/> or <disabled/>
 914 ```
 915 #### macOS
 916 ```
 917 <dict>
 918   <key>Certificates</key>
 919   <dict>
 920     <key>ImportEnterpriseRoots</key>
 921     <true/> | <false/>
 922   </dict>
 923 </dict>
 924 ```
 925 #### policies.json
 926 ```
 927 {
 928   "policies": {
 929     "Certificates": {
 930       "ImportEnterpriseRoots": true | false
 931     }
 932   }
 933 }
 934 ```
 935 ### Certificates | Install
 936
 937 Install certificates into the Firefox certificate store. If only a filename is specified, Firefox searches for the file in the following locations:
 938
 939 - Windows
 940   - %USERPROFILE%\AppData\Local\Mozilla\Certificates
 941   - %USERPROFILE%\AppData\Roaming\Mozilla\Certificates
 942 - macOS
 943   - /Library/Application Support/Mozilla/Certificates
 944   - ~/Library/Application Support/Mozilla/Certificates
 945 - Linux
 946   - /usr/lib/mozilla/certificates
 947   - /usr/lib64/mozilla/certificates
 948   - ~/.mozilla/certificates
 949
 950 Starting with Firefox 65, Firefox 60.5 ESR, a fully qualified path can be used, including UNC paths. You should use the native path style for your operating system. We do not support using %USERPROFILE% or other environment variables on Windows.
 951
 952 If you are specifying the path in the policies.json file on Windows, you need to escape your backslashes (`\\`) which means that for UNC paths, you need to escape both (`\\\\`). If you use group policy, you only need one backslash.
 953
 954 Certificates are installed using the trust string `CT,CT,`.
 955
 956 Binary (DER) and ASCII (PEM) certificates are both supported.
 957
 958 **Compatibility:** Firefox 64, Firefox ESR 64\
 959 **CCK2 Equivalent:** `certs.ca`\
 960 **Preferences Affected:** N/A
 961
 962 #### Windows (GPO)
 963 ```
 964 Software\Policies\Mozilla\Firefox\Certificates\Install\1 = "cert1.der"
 965 Software\Policies\Mozilla\Firefox\Certificates\Install\2 = "C:\Users\username\cert2.pem"
 966 ```
 967 #### Windows (Intune)
 968 OMA-URI:
 969 ```
 970 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Certificates/Certificates_Install
 971 ```
 972 Value (string):
 973 ```
 974 <enabled/>
 975 <data id="Certificates_Install" value="1&#xF000;cert1.der&#xF000;2&#xF000;C:\Users\username\cert2.pem"/>
 976 ```
 977 #### macOS
 978 ```
 979 <dict>
 980   <key>Certificates</key>
 981   <dict>
 982     <key>Install</key>
 983     <array>
 984       <string>cert1.der</string>
 985       <string>/Users/username/cert2.pem</string>
 986     </array>
 987   </dict>
 988 </dict>
 989 ```
 990 #### policies.json
 991 ```
 992 {
 993   "policies": {
 994     "Certificates": {
 995       "Install": ["cert1.der", "/home/username/cert2.pem"]
 996     }
 997   }
 998 }
 999 ```
1000 ### Containers
1001 Set policies related to [containers](https://addons.mozilla.org/firefox/addon/multi-account-containers/).
1002
1003 Currently you can set the initial set of containers.
1004
1005 For each container, you can specify the name, icon, and color.
1006
1007 | Name | Description |
1008 | --- | --- |
1009 | `name`| Name of container
1010 | `icon` | Can be `fingerprint`, `briefcase`, `dollar`, `cart`, `vacation`, `gift`, `food`, `fruit`, `pet`, `tree`, `chill`, `circle`, `fence`
1011 | `color` | Can be `blue`, `turquoise`, `green`, `yellow`, `orange`, `red`, `pink`, `purple`, `toolbar`
1012
1013 **Compatibility:** Firefox 113\
1014 **CCK2 Equivalent:** N/A\
1015 **Preferences Affected:** N/A
1016
1017 #### Windows (GPO)
1018 Software\Policies\Mozilla\Firefox\Containers (REG_MULTI_SZ) =
1019 ```
1020 {
1021   "Default": [
1022     {
1023       "name": "My container",
1024       "icon": "pet",
1025       "color": "turquoise"
1026     }
1027   ]
1028 }
1029 ```
1030 #### Windows (Intune)
1031 OMA-URI:
1032 ```
1033 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Containers
1034 ```
1035 Value (string):
1036 ```
1037 <enabled/>
1038 <data id="JSON" value='
1039 {
1040   "Default": [
1041     {
1042       "name": "My container",
1043       "icon": "pet",
1044       "color": "turquoise"
1045     }
1046   ]
1047 }
1048 '/>
1049 ```
1050 #### macOS
1051 ```
1052 <dict>
1053   <key>Default</key>
1054   <dict>
1055     <key>Containers</key>
1056     <array>
1057       <dict>
1058         <key>name</key>
1059         <string>My container</string>
1060         <key>icon</key>
1061         <string>pet</string>
1062         <key>color</key>
1063         <string>turquoise</string>
1064       </dict>
1065     </array>
1066   </dict>
1067 </dict>
1068 ```
1069 #### policies.json
1070 ```
1071 {
1072   "policies": {
1073     "Containers": {
1074       "Default": [
1075         {
1076           "name": "My container",
1077           "icon": "pet",
1078           "color": "turquoise"
1079         }
1080       ]
1081     }
1082   }
1083 }
1084 ```
1085 ### Cookies
1086 Configure cookie preferences.
1087
1088 `Allow` is a list of origins (not domains) where cookies are always allowed. You must include http or https.
1089
1090 `AllowSession` is a list of origins (not domains) where cookies are only allowed for the current session. You must include http or https.
1091
1092 `Block` is a list of origins (not domains) where cookies are always blocked. You must include http or https.
1093
1094 `Behavior` sets the default behavior for cookies based on the values below.
1095
1096 `BehaviorPrivateBrowsing` sets the default behavior for cookies in private browsing based on the values below.
1097
1098 | Value | Description
1099 | --- | --- |
1100 | accept | Accept all cookies
1101 | reject-foreign | Reject third party cookies
1102 | reject | Reject all cookies
1103 | limit-foreign | Reject third party cookies for sites you haven't visited
1104 | reject-tracker | Reject cookies for known trackers (default)
1105 | reject-tracker-and-partition-foreign | Reject cookies for known trackers and partition third-party cookies (Total Cookie Protection) (default for private browsing)
1106
1107 `Locked` prevents the user from changing cookie preferences.
1108
1109 **Compatibility:** Firefox 60, Firefox ESR 60 (RejectTracker added in Firefox 63, AllowSession added in Firefox 79/78.1, Behavior added in Firefox 95/91.4)\
1110 **CCK2 Equivalent:** N/A\
1111 **Preferences Affected:** `network.cookie.cookieBehavior`, `network.cookie.cookieBehavior.pbmode`, `network.cookie.lifetimePolicy`
1112
1113 #### Windows (GPO)
1114 ```
1115 Software\Policies\Mozilla\Firefox\Cookies\Allow\1 = "https://example.com"
1116 Software\Policies\Mozilla\Firefox\Cookies\AllowSession\1 = "https://example.edu"
1117 Software\Policies\Mozilla\Firefox\Cookies\Block\1 = "https://example.org"
1118 Software\Policies\Mozilla\Firefox\Cookies\Default = 0x1 | 0x0
1119 Software\Policies\Mozilla\Firefox\Cookies\AcceptThirdParty = "always" | "never" | "from-visited"
1120 Software\Policies\Mozilla\Firefox\Cookies\ExpireAtSessionEnd = 0x1 | 0x0
1121 Software\Policies\Mozilla\Firefox\Cookies\RejectTracker = 0x1 | 0x0
1122 Software\Policies\Mozilla\Firefox\Cookies\Behavior = "accept" | "reject-foreign" | "reject" | "limit-foreign" | "reject-tracker" | "reject-tracker-and-partition-foreign"
1123 Software\Policies\Mozilla\Firefox\Cookies\BehaviorPrivateBrowsing = "accept" | "reject-foreign" | "reject" | "limit-foreign" | "reject-tracker" | "reject-tracker-and-partition-foreign"
1124 Software\Policies\Mozilla\Firefox\Cookies\Locked = 0x1 | 0x0
1125 ```
1126 #### Windows (Intune)
1127 OMA-URI:
1128 ```
1129 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Allow
1130 ```
1131 Value (string):
1132 ```
1133 <enabled/>
1134 <data id="Permissions" value="1&#xF000;https://example.com"/>
1135 ```
1136 OMA-URI:
1137 ```
1138 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_AllowSession
1139 ```
1140 Value (string):
1141 ```
1142 <enabled/>
1143 <data id="Permissions" value="1&#xF000;https://example.edu"/>
1144 ```
1145 OMA-URI:
1146 ```
1147 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Block
1148 ```
1149 Value (string):
1150 ```
1151 <enabled/>
1152 <data id="Permissions" value="1&#xF000;https://example.org"/>
1153 ```
1154 OMA-URI:
1155 ```
1156 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Default
1157 ```
1158 Value (string):
1159 ```
1160 <enabled/> or <disabled/>
1161 ```
1162 OMA-URI:
1163 ```
1164 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_AcceptThirdParty
1165 ```
1166 Value (string):
1167 ```
1168 <enabled/>
1169 <data id="Cookies_AcceptThirdParty" value="always | never | from-visited"/>
1170 ```
1171 OMA-URI:
1172 ```
1173 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_ExpireAtSessionEnd
1174 ```
1175 Value (string):
1176 ```
1177 <enabled/> or <disabled/>
1178 ```
1179 OMA-URI:
1180 ```
1181 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_RejectTracker
1182 ```
1183 Value (string):
1184 ```
1185 <enabled/> or <disabled/>
1186 ```
1187 OMA-URI:
1188 ```
1189 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Locked
1190 ```
1191 Value (string):
1192 ```
1193 <enabled/> or <disabled/>
1194 ```
1195 OMA-URI:
1196 ```
1197 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Behavior
1198 ```
1199 Value (string):
1200 ```
1201 <enabled/>
1202 <data id="Cookies_Behavior" value="accept | reject-foreign | reject | limit-foreign | reject-tracker | reject-tracker-and-partition-foreign"/>
1203 ```
1204 OMA-URI:
1205 ```
1206 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_BehaviorPrivateBrowsing
1207 ```
1208 Value (string):
1209 ```
1210 <enabled/>
1211 <data id="Cookies_BehaviorPrivateBrowsing" value="accept | reject-foreign | reject | limit-foreign | reject-tracker | reject-tracker-and-partition-foreign"/>
1212 ```
1213 #### macOS
1214 ```
1215 <dict>
1216   <key>Cookies</key>
1217   <dict>
1218     <key>Allow</key>
1219     <array>
1220       <string>http://example.com</string>
1221     </array>
1222     <key>AllowSession</key>
1223     <array>
1224       <string>http://example.edu</string>
1225     </array>
1226     <key>Block</key>
1227     <array>
1228       <string>http://example.org</string>
1229     </array>
1230     <key>Default</key>
1231     <true/> | <false/>
1232     <key>AcceptThirdParty</key>
1233     <string>always | never | from-visited</string>
1234     <key>ExpireAtSessionEnd</key>
1235     <true/> | <false/>
1236     <key>RejectTracker</key>
1237     <true/> | <false/>
1238     <key>Locked</key>
1239     <true/> | <false/>
1240     <key>Behavior</key>
1241     <string>accept | reject-foreign | reject | limit-foreign | reject-tracker | reject-tracker-and-partition-foreign</string>
1242     <key>BehaviorPrivateBrowsing</key>
1243     <string>accept | reject-foreign | reject | limit-foreign | reject-tracker | reject-tracker-and-partition-foreign</string>
1244   </dict>
1245 </dict>
1246 ```
1247 #### policies.json
1248 ```
1249 {
1250   "policies": {
1251     "Cookies": {
1252       "Allow": ["http://example.org/"],
1253       "AllowSession": ["http://example.edu/"],
1254       "Block": ["http://example.edu/"],
1255       "Default": true | false,
1256       "AcceptThirdParty": "always" | "never" | "from-visited",
1257       "ExpireAtSessionEnd": true | false,
1258       "RejectTracker": true | false,
1259       "Locked": true | false,
1260       "Behavior": "accept" | "reject-foreign" | "reject" | "limit-foreign" | "reject-tracker" | "reject-tracker-and-partition-foreign",
1261       "BehaviorPrivateBrowsing": "accept" | "reject-foreign" | "reject" | "limit-foreign" | "reject-tracker" | "reject-tracker-and-partition-foreign",
1262     }
1263   }
1264 }
1265 ```
1266 ### DefaultDownloadDirectory
1267 Set the default download directory.
1268
1269 You can use ${home} for the native home directory.
1270
1271 **Compatibility:** Firefox 68, Firefox ESR 68\
1272 **CCK2 Equivalent:** N/A\
1273 **Preferences Affected:** `browser.download.dir`, `browser.download.folderList`
1274
1275 #### Windows (GPO)
1276 ```
1277 Software\Policies\Mozilla\Firefox\DefaultDownloadDirectory = "${home}\Downloads"
1278 ```
1279 #### Windows (Intune)
1280 OMA-URI:
1281 ```
1282 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DefaultDownloadDirectory
1283 ```
1284 Value (string):
1285 ```
1286 <enabled/>
1287 <data id="Preferences_String" value="${home}\Downloads"/>
1288 ```
1289 #### macOS
1290 ```
1291 <dict>
1292   <key>DefaultDownloadDirectory</key>
1293   <string>${home}/Downloads</string>
1294 </dict>
1295 ```
1296 #### policies.json (macOS and Linux)
1297 ```
1298 {
1299   "policies": {
1300     "DefaultDownloadDirectory": "${home}/Downloads"
1301   }
1302 }
1303 ```
1304 #### policies.json (Windows)
1305 ```
1306 {
1307   "policies": {
1308     "DefaultDownloadDirectory": "${home}\\Downloads"
1309   }
1310 }
1311 ```
1312 ### DisableAppUpdate
1313 Turn off application updates within Firefox.
1314
1315 **Compatibility:** Firefox 60, Firefox ESR 60\
1316 **CCK2 Equivalent:** `disableFirefoxUpdates`\
1317 **Preferences Affected:** N/A
1318
1319 #### Windows (GPO)
1320 ```
1321 Software\Policies\Mozilla\Firefox\DisableAppUpdate = 0x1 | 0x0
1322 ```
1323 #### Windows (Intune)
1324 OMA-URI:
1325 ```
1326 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableAppUpdate
1327 ```
1328 Value (string):
1329 ```
1330 <enabled/> or <disabled/>
1331 ```
1332 #### macOS
1333 ```
1334 <dict>
1335   <key>DisableAppUpdate</key>
1336   <true/> | <false/>
1337 </dict>
1338 ```
1339 #### policies.json
1340 ```
1341 {
1342   "policies": {
1343     "DisableAppUpdate": true | false
1344   }
1345 }
1346 ```
1347 ### DisableBuiltinPDFViewer
1348 Disable the built in PDF viewer. PDF files are downloaded and sent externally.
1349
1350 **Compatibility:** Firefox 60, Firefox ESR 60\
1351 **CCK2 Equivalent:** `disablePDFjs`\
1352 **Preferences Affected:** `pdfjs.disabled`
1353
1354 #### Windows (GPO)
1355 ```
1356 Software\Policies\Mozilla\Firefox\DisableBuiltinPDFViewer = 0x1 | 0x0
1357 ```
1358 #### Windows (Intune)
1359 OMA-URI:
1360 ```
1361 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableBuiltinPDFViewer
1362 ```
1363 Value (string):
1364 ```
1365 <enabled/> or <disabled/>
1366 ```
1367 #### macOS
1368 ```
1369 <dict>
1370   <key>DisableBuiltinPDFViewer</key>
1371   <true/> | <false/>
1372 </dict>
1373 ```
1374 #### policies.json
1375 ```
1376 {
1377   "policies": {
1378     "DisableBuiltinPDFViewer": true | false
1379   }
1380 }
1381 ```
1382 ### DisabledCiphers
1383 Disable specific cryptographic ciphers, listed below.
1384
1385 ```
1386 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
1387 TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
1388 TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256
1389 TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
1390 TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
1391 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
1392 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
1393 TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA
1394 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
1395 TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA
1396 TLS_DHE_RSA_WITH_AES_128_CBC_SHA
1397 TLS_DHE_RSA_WITH_AES_256_CBC_SHA
1398 TLS_RSA_WITH_AES_128_GCM_SHA256
1399 TLS_RSA_WITH_AES_256_GCM_SHA384
1400 TLS_RSA_WITH_AES_128_CBC_SHA
1401 TLS_RSA_WITH_AES_256_CBC_SHA
1402 TLS_RSA_WITH_3DES_EDE_CBC_SHA
1403 ```
1404
1405 **Preferences Affected:** `security.ssl3.ecdhe_rsa_aes_128_gcm_sha256`, `security.ssl3.ecdhe_ecdsa_aes_128_gcm_sha256`, `security.ssl3.ecdhe_ecdsa_chacha20_poly1305_sha256`, `security.ssl3.ecdhe_rsa_chacha20_poly1305_sha256`, `security.ssl3.ecdhe_ecdsa_aes_256_gcm_sha384`, `security.ssl3.ecdhe_rsa_aes_256_gcm_sha384`, `security.ssl3.ecdhe_rsa_aes_128_sha`, `security.ssl3.ecdhe_ecdsa_aes_128_sha`, `security.ssl3.ecdhe_rsa_aes_256_sha`, `security.ssl3.ecdhe_ecdsa_aes_256_sha`, `security.ssl3.dhe_rsa_aes_128_sha`, `security.ssl3.dhe_rsa_aes_256_sha`, `security.ssl3.rsa_aes_128_gcm_sha256`, `security.ssl3.rsa_aes_256_gcm_sha384`, `security.ssl3.rsa_aes_128_sha`, `security.ssl3.rsa_aes_256_sha`, `security.ssl3.deprecated.rsa_des_ede3_sha`
1406
1407 ---
1408 **Note:**
1409
1410 This policy was updated in Firefox 78 to allow enabling ciphers as well. Setting the value to true disables the cipher, setting the value to false enables the cipher. Previously setting the value to true or false disabled the cipher.
1411
1412 ---
1413 **Compatibility:** Firefox 76, Firefox ESR 68.8 (TLS_RSA_WITH_AES_128_GCM_SHA256 and TLS_RSA_WITH_AES_256_GCM_SHA384 were added in Firefox 78, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA38, TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, and TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 were added in Firefox 97 and Firefox 91.6)\
1414 **CCK2 Equivalent:** N/A\
1415 **Preferences Affected:** N/A
1416
1417 #### Windows (GPO)
1418 ```
1419 Software\Policies\Mozilla\Firefox\DisabledCiphers\CIPHER_NAME = 0x1 | 0x0
1420 ```
1421 #### Windows (Intune)
1422 OMA-URI:
1423 ```
1424 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_CIPHER_NAME
1425
1426 ```
1427 Value (string):
1428 ```
1429 <enabled/> or <disabled/>
1430 ```
1431 #### macOS
1432 ```
1433 <dict>
1434   <key>DisabledCiphers</key>
1435     <dict>
1436       <key>CIPHER_NAME</key>
1437       <true/> | <false/>
1438     </dict>
1439 </dict>
1440 ```
1441 #### policies.json
1442 ```
1443 {
1444   "policies": {
1445     "DisabledCiphers": {
1446       "CIPHER_NAME": true | false,
1447     }
1448   }
1449 }
1450 ```
1451 ### DisableDefaultBrowserAgent
1452 Prevent the default browser agent from taking any actions. Only applicable to Windows; other platforms don’t have the agent.
1453
1454 The browser agent is a Windows-only scheduled task which runs in the background to collect and submit data about the browser that the user has set as their OS default. More information is available [here](https://firefox-source-docs.mozilla.org/toolkit/mozapps/defaultagent/default-browser-agent/index.html).
1455
1456 **Compatibility:** Firefox 75, Firefox ESR 68.7 (Windows only)\
1457 **CCK2 Equivalent:** N/A\
1458 **Preferences Affected:** N/A
1459
1460 #### Windows (GPO)
1461 ```
1462 Software\Policies\Mozilla\Firefox\DisableDefaultBrowserAgent = 0x1 | 0x0
1463 ```
1464 #### Windows (Intune)
1465 OMA-URI:
1466 ```
1467 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableDefaultBrowserAgent
1468 ```
1469 Value (string):
1470 ```
1471 <enabled/> or <disabled/>
1472 ```
1473 #### policies.json
1474 ```
1475 {
1476   "policies": {
1477     "DisableDefaultBrowserAgent": true | false
1478   }
1479 }
1480 ```
1481 ### DisableDeveloperTools
1482 Remove access to all developer tools.
1483
1484 **Compatibility:** Firefox 60, Firefox ESR 60\
1485 **CCK2 Equivalent:** `removeDeveloperTools`\
1486 **Preferences Affected:** `devtools.policy.disabled`
1487
1488 #### Windows (GPO)
1489 ```
1490 Software\Policies\Mozilla\Firefox\DisableDeveloperTools = 0x1 | 0x0`
1491 ```
1492 #### Windows (Intune)
1493 OMA-URI:
1494 ```
1495 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableDeveloperTools
1496 ```
1497 Value (string):
1498 ```
1499 <enabled/> or <disabled/>
1500 ```
1501 #### macOS
1502 ```
1503 <dict>
1504   <key>DisableDeveloperTools</key>
1505   <true/> | <false/>
1506 </dict>
1507 ```
1508 #### policies.json
1509 ```
1510 {
1511   "policies": {
1512     "DisableDeveloperTools": true | false
1513   }
1514 }
1515 ```
1516 ### DisableFeedbackCommands
1517 Disable the menus for reporting sites (Submit Feedback, Report Deceptive Site).
1518
1519 **Compatibility:** Firefox 60, Firefox ESR 60\
1520 **CCK2 Equivalent:** N/A\
1521 **Preferences Affected:** N/A
1522
1523 #### Windows (GPO)
1524 ```
1525 Software\Policies\Mozilla\Firefox\DisableFeedbackCommands = 0x1 | 0x0
1526 ```
1527 #### Windows (Intune)
1528 OMA-URI:
1529 ```
1530 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFeedbackCommands
1531 ```
1532 Value (string):
1533 ```
1534 <enabled/> or <disabled/>
1535 ```
1536 #### macOS
1537 ```
1538 <dict>
1539   <key>DisableFeedbackCommands</key>
1540   <true/> | <false/>
1541 </dict>
1542 ```
1543 #### policies.json
1544 ```
1545 {
1546   "policies": {
1547     "DisableFeedbackCommands": true | false
1548   }
1549 }
1550 ```
1551 ### DisableFirefoxAccounts
1552 Disable Firefox Accounts integration (Sync).
1553
1554 **Compatibility:** Firefox 60, Firefox ESR 60\
1555 **CCK2 Equivalent:** `disableSync`\
1556 **Preferences Affected:** `identity.fxaccounts.enabled`
1557
1558 #### Windows (GPO)
1559 ```
1560 Software\Policies\Mozilla\Firefox\DisableFirefoxAccounts = 0x1 | 0x0
1561 ```
1562 #### Windows (Intune)
1563 OMA-URI:
1564 ```
1565 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxAccounts
1566 ```
1567 Value (string):
1568 ```
1569 <enabled/> or <disabled/>
1570 ```
1571 #### macOS
1572 ```
1573 <dict>
1574   <key>DisableFirefoxAccounts</key>
1575   <true/> | <false/>
1576 </dict>
1577 ```
1578 #### policies.json
1579 ```
1580 {
1581   "policies": {
1582     "DisableFirefoxAccounts": true | false
1583   }
1584 }
1585 ```
1586 ### DisableFirefoxScreenshots
1587 Remove access to Firefox Screenshots.
1588
1589 **Compatibility:** Firefox 60, Firefox ESR 60\
1590 **CCK2 Equivalent:** N/A\
1591 **Preferences Affected:** `extensions.screenshots.disabled`
1592
1593 #### Windows (GPO)
1594 ```
1595 Software\Policies\Mozilla\Firefox\DisableFirefoxScreenshots = 0x1 | 0x0
1596 ```
1597 #### Windows (Intune)
1598 OMA-URI:
1599 ```
1600 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxScreenshots
1601 ```
1602 Value (string):
1603 ```
1604 <enabled/> or <disabled/>
1605 ```
1606 #### macOS
1607 ```
1608 <dict>
1609   <key>DisableFirefoxScreenshots</key>
1610   <true/> | <false/>
1611 </dict>
1612 ```
1613 #### policies.json
1614 ```
1615 {
1616   "policies": {
1617     "DisableFirefoxScreenshots": true | false
1618   }
1619 }
1620 ```
1621 ### DisableFirefoxStudies
1622 Disable Firefox studies (Shield).
1623
1624 **Compatibility:** Firefox 60, Firefox ESR 60\
1625 **CCK2 Equivalent:** N/A\
1626 **Preferences Affected:** N/A
1627
1628 #### Windows (GPO)
1629 ```
1630 Software\Policies\Mozilla\Firefox\DisableFirefoxStudies = 0x1 | 0x0
1631 ```
1632 #### Windows (Intune)
1633 OMA-URI:
1634 ```
1635 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxStudies
1636 ```
1637 Value (string):
1638 ```
1639 <enabled/> or <disabled/>
1640 ```
1641 #### macOS
1642 ```
1643 <dict>
1644   <key>DisableFirefoxStudies</key>
1645   <true/> | <false/>
1646 </dict>
1647 ```
1648 #### policies.json
1649 ```
1650 {
1651   "policies": {
1652     "DisableFirefoxStudies": true | false
1653   }
1654 }
1655 ```
1656 ### DisableForgetButton
1657 Disable the "Forget" button.
1658
1659 **Compatibility:** Firefox 60, Firefox ESR 60\
1660 **CCK2 Equivalent:** `disableForget`\
1661 **Preferences Affected:** N/A
1662
1663 #### Windows (GPO)
1664 ```
1665 Software\Policies\Mozilla\Firefox\DisableForgetButton = 0x1 | 0x0
1666 ```
1667 #### Windows (Intune)
1668 OMA-URI:
1669 ```
1670 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableForgetButton
1671 ```
1672 Value (string):
1673 ```
1674 <enabled/> or <disabled/>
1675 ```
1676 #### macOS
1677 ```
1678 <dict>
1679   <key>DisableForgetButton</key>
1680   <true/> | <false/>
1681 </dict>
1682 ```
1683 #### policies.json
1684 ```
1685 {
1686   "policies": {
1687     "DisableForgetButton": true | false
1688   }
1689 }
1690 ```
1691 ### DisableFormHistory
1692 Turn off saving information on web forms and the search bar.
1693
1694 **Compatibility:** Firefox 60, Firefox ESR 60\
1695 **CCK2 Equivalent:** `disableFormFill`\
1696 **Preferences Affected:** `browser.formfill.enable`
1697
1698 #### Windows (GPO)
1699 ```
1700 Software\Policies\Mozilla\Firefox\DisableFormHistory = 0x1 | 0x0
1701 ```
1702 #### Windows (Intune)
1703 OMA-URI:
1704 ```
1705 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFormHistory
1706 ```
1707 Value (string):
1708 ```
1709 <enabled/> or <disabled/>
1710 ```
1711 #### macOS
1712 ```
1713 <dict>
1714   <key>DisableFormHistory</key>
1715   <true/> | <false/>
1716 </dict>
1717 ```
1718 #### policies.json
1719 ```
1720 {
1721   "policies": {
1722     "DisableFormHistory": true | false
1723   }
1724 }
1725 ```
1726 ### DisableMasterPasswordCreation
1727 Remove the master password functionality.
1728
1729 If this value is true, it works the same as setting [`PrimaryPassword`](#primarypassword) to false and removes the primary password functionality.
1730
1731 If both `DisableMasterPasswordCreation` and `PrimaryPassword` are used, `DisableMasterPasswordCreation` takes precedent.
1732
1733 **Compatibility:** Firefox 60, Firefox ESR 60\
1734 **CCK2 Equivalent:** `noMasterPassword`\
1735 **Preferences Affected:** N/A
1736
1737 #### Windows (GPO)
1738 ```
1739 Software\Policies\Mozilla\Firefox\DisableMasterPasswordCreation = 0x1 | 0x0
1740 ```
1741 #### Windows (Intune)
1742 OMA-URI:
1743 ```
1744 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableMasterPasswordCreation
1745 ```
1746 Value (string):
1747 ```
1748 <enabled/> or <disabled/>
1749 ```
1750 #### macOS
1751 ```
1752 <dict>
1753   <key>DisableMasterPasswordCreation</key>
1754   <true/> | <false/>
1755 </dict>
1756 ```
1757 #### policies.json
1758 ```
1759 {
1760   "policies": {
1761     "DisableMasterPasswordCreation": true | false
1762   }
1763 }
1764 ```
1765 ### DisablePasswordReveal
1766 Do not allow passwords to be shown in saved logins
1767
1768 **Compatibility:** Firefox 71, Firefox ESR 68.3\
1769 **CCK2 Equivalent:** N/A
1770 **Preferences Affected:** N/A
1771
1772 #### Windows (GPO)
1773 ```
1774 Software\Policies\Mozilla\Firefox\DisablePasswordReveal = 0x1 | 0x0
1775 ```
1776 #### Windows (Intune)
1777 OMA-URI:
1778 ```
1779 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePasswordReveal
1780 ```
1781 Value (string):
1782 ```
1783 <enabled/> or <disabled/>
1784 ```
1785 #### macOS
1786 ```
1787 <dict>
1788   <key>DisablePasswordReveal</key>
1789   <true/> | <false/>
1790 </dict>
1791 ```
1792 #### policies.json
1793 ```
1794 {
1795   "policies": {
1796     "DisablePasswordReveal": true | false
1797   }
1798 }
1799 ```
1800 ### DisablePocket
1801 Remove Pocket in the Firefox UI. It does not remove it from the new tab page.
1802
1803 **Compatibility:** Firefox 60, Firefox ESR 60\
1804 **CCK2 Equivalent:** `disablePocket`\
1805 **Preferences Affected:** `extensions.pocket.enabled`
1806
1807 #### Windows (GPO)
1808 ```
1809 Software\Policies\Mozilla\Firefox\DisablePocket = 0x1 | 0x0
1810 ```
1811 #### Windows (Intune)
1812 OMA-URI:
1813 ```
1814 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePocket
1815 ```
1816 Value (string):
1817 ```
1818 <enabled/> or <disabled/>
1819 ```
1820 #### macOS
1821 ```
1822 <dict>
1823   <key>DisablePocket</key>
1824   <true/> | <false/>
1825 </dict>
1826 ```
1827 #### policies.json
1828 ```
1829 {
1830   "policies": {
1831     "DisablePocket": true | false
1832   }
1833 }
1834 ```
1835 ### DisablePrivateBrowsing
1836 Remove access to private browsing.
1837
1838 **Compatibility:** Firefox 60, Firefox ESR 60\
1839 **CCK2 Equivalent:** `disablePrivateBrowsing`\
1840 **Preferences Affected:** N/A
1841
1842 #### Windows (GPO)
1843 ```
1844 Software\Policies\Mozilla\Firefox\DisablePrivateBrowsing = 0x1 | 0x0
1845 ```
1846 #### Windows (Intune)
1847 OMA-URI:
1848 ```
1849 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePrivateBrowsing
1850 ```
1851 Value (string):
1852 ```
1853 <enabled/> or <disabled/>
1854 ```
1855 #### macOS
1856 ```
1857 <dict>
1858   <key>DisablePrivateBrowsing</key>
1859   <true/> | <false/>
1860 </dict>
1861 ```
1862 #### policies.json
1863 ```
1864 {
1865   "policies": {
1866     "DisablePrivateBrowsing": true | false
1867   }
1868 }
1869 ```
1870 ### DisableProfileImport
1871 Disables the "Import data from another browser" option in the bookmarks window.
1872
1873 **Compatibility:** Firefox 60, Firefox ESR 60\
1874 **CCK2 Equivalent:** N/A\
1875 **Preferences Affected:** N/A
1876
1877 #### Windows (GPO)
1878 ```
1879 Software\Policies\Mozilla\Firefox\DisableProfileImport = 0x1 | 0x0
1880 ```
1881 #### Windows (Intune)
1882 OMA-URI:
1883 ```
1884 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableProfileImport
1885 ```
1886 Value (string):
1887 ```
1888 <enabled/> or <disabled/>
1889 ```
1890 #### macOS
1891 ```
1892 <dict>
1893   <key>DisableProfileImport</key>
1894   <true/> | <false/>
1895 </dict>
1896 ```
1897 #### policies.json
1898 ```
1899 {
1900   "policies": {
1901     "DisableProfileImport": true | false
1902   }
1903 }
1904 ```
1905 ### DisableProfileRefresh
1906 Disable the Refresh Firefox button on about:support and support.mozilla.org, as well as the prompt that displays offering to refresh Firefox when you haven't used it in a while.
1907
1908 **Compatibility:** Firefox 60, Firefox ESR 60\
1909 **CCK2 Equivalent:** `disableResetFirefox`\
1910 **Preferences Affected:** `browser.disableResetPrompt`
1911
1912 #### Windows (GPO)
1913 ```
1914 Software\Policies\Mozilla\Firefox\DisableProfileRefresh = 0x1 | 0x0
1915 ```
1916 #### Windows (Intune)
1917 OMA-URI:
1918 ```
1919 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableProfileRefresh
1920 ```
1921 Value (string):
1922 ```
1923 <enabled/> or <disabled/>
1924 ```
1925 #### macOS
1926 ```
1927 <dict>
1928   <key>DisableProfileRefresh</key>
1929   <true/> | <false/>
1930 </dict>
1931 ```
1932 #### policies.json
1933 ```
1934 {
1935   "policies": {
1936     "DisableProfileRefresh": true | false
1937   }
1938 }
1939 ```
1940 ### DisableSafeMode
1941 Disable safe mode within the browser.
1942
1943 On Windows, this disables safe mode via the command line as well.
1944
1945 **Compatibility:** Firefox 60, Firefox ESR 60 (Windows, macOS)\
1946 **CCK2 Equivalent:** `disableSafeMode`\
1947 **Preferences Affected:** N/A
1948
1949 #### Windows (GPO)
1950 ```
1951 Software\Policies\Mozilla\Firefox\DisableSafeMode = 0x1 | 0x0
1952 ```
1953 #### Windows (Intune)
1954 OMA-URI:
1955 ```
1956 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSafeMode
1957 ```
1958 Value (string):
1959 ```
1960 <enabled/> or <disabled/>
1961 ```
1962 #### macOS
1963 ```
1964 <dict>
1965   <key>DisableSafeMode</key>
1966   <true/> | <false/>
1967 </dict>
1968 ```
1969 #### policies.json
1970 ```
1971 {
1972   "policies": {
1973     "DisableSafeMode": true | false
1974   }
1975 }
1976 ```
1977 ### DisableSecurityBypass
1978 Prevent the user from bypassing security in certain cases.
1979
1980 `InvalidCertificate` prevents adding an exception when an invalid certificate is shown.
1981
1982 `SafeBrowsing` prevents selecting "ignore the risk" and visiting a harmful site anyway.
1983
1984 These policies only affect what happens when an error is shown, they do not affect any settings in preferences.
1985
1986 **Compatibility:** Firefox 60, Firefox ESR 60\
1987 **CCK2 Equivalent:** N/A\
1988 **Preferences Affected:** `security.certerror.hideAddException`, `browser.safebrowsing.allowOverride`
1989
1990 #### Windows (GPO)
1991 ```
1992 Software\Policies\Mozilla\Firefox\DisableSecurityBypass\InvalidCertificate = 0x1 | 0x0
1993 Software\Policies\Mozilla\Firefox\DisableSecurityBypass\SafeBrowsing = 0x1 | 0x0
1994 ```
1995 #### Windows (Intune)
1996 OMA-URI:
1997 ```
1998 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/P_DisableSecurityBypass_InvalidCertificate
1999 ```
2000 Value (string):
2001 ```
2002 <enabled/> or <disabled/>
2003 ```
2004 OMA-URI:
2005 ```
2006 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/P_DisableSecurityBypass_SafeBrowsing
2007 ```
2008 Value (string):
2009 ```
2010 <enabled/> or <disabled/>
2011 ```
2012
2013 #### macOS
2014 ```
2015 <dict>
2016   <key>DisableSecurityBypass</key>
2017   <dict>
2018     <key>InvalidCertificate</key>
2019     <true/> | <false/>
2020     <key>SafeBrowsing</key>
2021     <true/> | <false/>
2022   </dict>
2023 </dict>
2024 ```
2025 #### policies.json
2026 ```
2027 {
2028   "policies": {
2029     "DisableSecurityBypass": {
2030       "InvalidCertificate": true | false,
2031       "SafeBrowsing": true | false
2032     }
2033   }
2034 }
2035 ```
2036 ### DisableSetDesktopBackground
2037 Remove the "Set As Desktop Background..." menuitem when right clicking on an image.
2038
2039 **Compatibility:** Firefox 60, Firefox ESR 60\
2040 **CCK2 Equivalent:** `removeSetDesktopBackground`\
2041 **Preferences Affected:** N/A
2042
2043 #### Windows (GPO)
2044 ```
2045 Software\Policies\Mozilla\Firefox\DisableSetDesktopBackground = 0x1 | 0x0
2046 ```
2047 #### Windows (Intune)
2048 OMA-URI:
2049 ```
2050 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSetDesktopBackground
2051 ```
2052 Value (string):
2053 ```
2054 <enabled/> or <disabled/>
2055 ```
2056 #### macOS
2057 ```
2058 <dict>
2059   <key>DisableSetDesktopBackground</key>
2060   <true/> | <false/>
2061 </dict>
2062 ```
2063 #### policies.json
2064 ```
2065 {
2066   "policies": {
2067     "DisableSetDesktopBackground": true | false
2068   }
2069 }
2070 ```
2071 ### DisableSystemAddonUpdate
2072 Prevent system add-ons from being installed or updated.
2073
2074 **Compatibility:** Firefox 60, Firefox ESR 60\
2075 **CCK2 Equivalent:** N/A\
2076 **Preferences Affected:** N/A
2077
2078 #### Windows (GPO)
2079 ```
2080 Software\Policies\Mozilla\Firefox\DisableSystemAddonUpdate = 0x1 | 0x0
2081 ```
2082 #### Windows (Intune)
2083 OMA-URI:
2084 ```
2085 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSystemAddonUpdate
2086 ```
2087 Value (string):
2088 ```
2089 <enabled/> or <disabled/>
2090 ```
2091 #### macOS
2092 ```
2093 <dict>
2094   <key>DisableSystemAddonUpdate</key>
2095   <true/> | <false/>
2096 </dict>
2097 ```
2098 #### policies.json
2099 ```
2100 {
2101   "policies": {
2102     "DisableSystemAddonUpdate": true | false
2103   }
2104 }
2105 ```
2106 ### DisableTelemetry
2107 Prevent the upload of telemetry data.
2108
2109 As of Firefox 83 and Firefox ESR 78.5, local storage of telemetry data is disabled as well.
2110
2111 Mozilla recommends that you do not disable telemetry. Information collected through telemetry helps us build a better product for businesses like yours.
2112
2113 **Compatibility:** Firefox 60, Firefox ESR 60\
2114 **CCK2 Equivalent:** `disableTelemetry`\
2115 **Preferences Affected:** `datareporting.healthreport.uploadEnabled`, `datareporting.policy.dataSubmissionEnabled`, `toolkit.telemetry.archive.enabled`
2116
2117 #### Windows (GPO)
2118 ```
2119 Software\Policies\Mozilla\Firefox\DisableTelemetry = 0x1 | 0x0
2120 ```
2121 #### Windows (Intune)
2122 OMA-URI:
2123 ```
2124 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableTelemetry
2125 ```
2126 Value (string):
2127 ```
2128 <enabled/> or <disabled/>
2129 ```
2130 #### macOS
2131 ```
2132 <dict>
2133   <key>DisableTelemetry</key>
2134   <true/> | <false/>
2135 </dict>
2136 ```
2137 #### policies.json
2138 ```
2139 {
2140   "policies": {
2141     "DisableTelemetry": true | false
2142   }
2143 }
2144 ```
2145 ### DisableThirdPartyModuleBlocking
2146 Do not allow blocking third-party modules from the `about:third-party` page.
2147
2148 This policy only works on Windows through GPO (not policies.json).
2149
2150 **Compatibility:** Firefox 110 (Windows only, GPO only)\
2151 **CCK2 Equivalent:** N/A\
2152 **Preferences Affected:** N/A
2153
2154 #### Windows (GPO)
2155 ```
2156 Software\Policies\Mozilla\Firefox\DisableThirdPartyModuleBlocking = = 0x1 | 0x0
2157 ```
2158 #### Windows (Intune)
2159 OMA-URI:
2160 ```
2161 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableThirdPartyModuleBlocking
2162 ```
2163 Value (string):
2164 ```
2165 <enabled/> or <disabled/>
2166 ```
2167 ### DisplayBookmarksToolbar
2168 Set the initial state of the bookmarks toolbar. A user can still change how it is displayed.
2169
2170 `always` means the bookmarks toolbar is always shown.
2171
2172 `never` means the bookmarks toolbar is not shown.
2173
2174 `newtab` means the bookmarks toolbar is only shown on the new tab page.
2175
2176 **Compatibility:** Firefox 109, Firefox ESR 102.7\
2177 **CCK2 Equivalent:** N/A\
2178 **Preferences Affected:** N/A
2179
2180 #### Windows (GPO)
2181 ```
2182 Software\Policies\Mozilla\Firefox\DisplayBookmarksToolbar = "always", "never", "newtab"
2183 ```
2184 #### Windows (Intune)
2185 OMA-URI:
2186 ```
2187 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisplayBookmarksToolbar_Enum
2188 ```
2189 Value (string):
2190 ```
2191 <enabled/>
2192 <data id="DisplayBookmarksToolbar" value="always | never | newtab"/>
2193 ```
2194 #### macOS
2195 ```
2196 <dict>
2197   <key>DisplayBookmarksToolbar</key>
2198   <string>always | never | newtab</string>
2199 </dict>
2200 ```
2201 #### policies.json
2202 ```
2203 {
2204   "policies": {
2205     "DisplayBookmarksToolbar": "always" | "never" | "newtab"
2206   }
2207 }
2208 ```
2209 ### DisplayMenuBar
2210 Set the state of the menubar.
2211
2212 `always` means the menubar is shown and cannot be hidden.
2213
2214 `never` means the menubar is hidden and cannot be shown.
2215
2216 `default-on` means the menubar is on by default but can be hidden.
2217
2218 `default-off` means the menubar is off by default but can be shown.
2219
2220 **Compatibility:** Firefox 73, Firefox ESR 68.5 (Windows, some Linux)\
2221 **CCK2 Equivalent:** `displayMenuBar`\
2222 **Preferences Affected:** N/A
2223
2224 #### Windows (GPO)
2225 ```
2226 Software\Policies\Mozilla\Firefox\DisplayMenuBar = "always", "never", "default-on", "default-off"
2227 ```
2228 #### Windows (Intune)
2229 OMA-URI:
2230 ```
2231 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisplayMenuBar_Enum
2232 ```
2233 Value (string):
2234 ```
2235 <enabled/>
2236 <data id="DisplayMenuBar" value="always | never | default-on | default-off"/>
2237 ```
2238 #### macOS
2239 ```
2240 <dict>
2241   <key>DisplayMenuBar</key>
2242   <string>always | never | default-on | default-off</string>
2243 </dict>
2244 ```
2245 #### policies.json
2246 ```
2247 {
2248   "policies": {
2249     "DisplayMenuBar": "always", "never", "default-on", "default-off"
2250   }
2251 }
2252 ```
2253 ### DNSOverHTTPS
2254 Configure DNS over HTTPS.
2255
2256 `Enabled` determines whether DNS over HTTPS is enabled
2257
2258 `ProviderURL` is a URL to another provider.
2259
2260 `Locked` prevents the user from changing DNS over HTTPS preferences.
2261
2262 `ExcludedDomains` excludes domains from DNS over HTTPS.
2263
2264 `Fallback` determines whether or not Firefox will use your default DNS resolver if there is a problem with the secure DNS provider.
2265
2266 **Compatibility:** Firefox 63, Firefox ESR 68 (ExcludedDomains added in 75/68.7) (Fallback added in 124)\
2267 **CCK2 Equivalent:** N/A\
2268 **Preferences Affected:** `network.trr.mode`, `network.trr.uri`
2269
2270 #### Windows (GPO)
2271 ```
2272 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\Enabled = 0x1 | 0x0
2273 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\ProviderURL = "URL_TO_ALTERNATE_PROVIDER"
2274 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\Locked = 0x1 | 0x0
2275 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\ExcludedDomains\1 = "example.com"
2276 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\Fallback = 0x1 | 0x0
2277 ```
2278 #### Windows (Intune)
2279 OMA-URI:
2280 ```
2281 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_Enabled
2282 ```
2283 Value (string):
2284 ```
2285 <enabled/> or <disabled/>
2286 ```
2287 OMA-URI:
2288 ```
2289 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_ProviderURL
2290 ```
2291 Value (string):
2292 ```
2293 <enabled/>
2294 <data id="String" value="URL_TO_ALTERNATE_PROVIDER"/>
2295 ```
2296 OMA-URI:
2297 ```
2298 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_Locked
2299 ```
2300 Value (string):
2301 ```
2302 <enabled/> or <disabled/>
2303 ```
2304 OMA-URI:
2305 ```
2306 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_ExcludedDomains
2307 ```
2308 Value (string):
2309 ```
2310 <enabled/>
2311 <data id="List" value="1&#xF000;example.com"/>
2312 ```
2313 OMA-URI:
2314 ```
2315 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_Fallback
2316 ```
2317 Value (string):
2318 ```
2319 <enabled/> or <disabled/>
2320 ```
2321 #### macOS
2322 ```
2323 <dict>
2324   <key>DNSOverHTTPS</key>
2325   <dict>
2326     <key>Enabled</key>
2327     <true/> | <false/>
2328     <key>ProviderURL</key>
2329     <string>URL_TO_ALTERNATE_PROVIDER</string>
2330     <key>Locked</key>
2331     <true/> | <false/>
2332     <key>ExcludedDomains</key>
2333     <array>
2334       <string>example.com</string>
2335     </array>
2336     <key>Fallback</key>
2337     <true/> | <false/>
2338   </dict>
2339 </dict>
2340 ```
2341 #### policies.json
2342 ```
2343 {
2344   "policies": {
2345     "DNSOverHTTPS": {
2346       "Enabled":  true | false,
2347       "ProviderURL": "URL_TO_ALTERNATE_PROVIDER",
2348       "Locked": true | false,
2349       "ExcludedDomains": ["example.com"],
2350       "Fallback": true | false,
2351     }
2352   }
2353 }
2354 ```
2355 ### DontCheckDefaultBrowser
2356 Don't check if Firefox is the default browser at startup.
2357
2358 **Compatibility:** Firefox 60, Firefox ESR 60\
2359 **CCK2 Equivalent:** `dontCheckDefaultBrowser`\
2360 **Preferences Affected:** `browser.shell.checkDefaultBrowser`
2361
2362 #### Windows (GPO)
2363 ```
2364 Software\Policies\Mozilla\Firefox\DontCheckDefaultBrowser = 0x1 | 0x0
2365 ```
2366 #### Windows (Intune)
2367 OMA-URI:
2368 ```
2369 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DontCheckDefaultBrowser
2370 ```
2371 Value (string):
2372 ```
2373 <enabled/> or <disabled/>
2374 ```
2375 #### macOS
2376 ```
2377 <dict>
2378   <key>DontCheckDefaultBrowser</key>
2379   <true/> | <false/>
2380 </dict>
2381 ```
2382 #### policies.json
2383 ```
2384 {
2385   "policies": {
2386     "DontCheckDefaultBrowser": true | false
2387   }
2388 }
2389 ```
2390 ### DownloadDirectory
2391 Set and lock the download directory.
2392
2393 You can use ${home} for the native home directory.
2394
2395 **Compatibility:** Firefox 68, Firefox ESR 68\
2396 **CCK2 Equivalent:** N/A\
2397 **Preferences Affected:** `browser.download.dir`, `browser.download.folderList`, `browser.download.useDownloadDir`
2398
2399 #### Windows (GPO)
2400 ```
2401 Software\Policies\Mozilla\Firefox\DownloadDirectory = "${home}\Downloads"
2402 ```
2403 #### Windows (Intune)
2404 OMA-URI:
2405 ```
2406 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DownloadDirectory
2407 ```
2408 Value (string):
2409 ```
2410 <enabled/>
2411 <data id="Preferences_String" value="${home}\Downloads"/>
2412 ```
2413 #### macOS
2414 ```
2415 <dict>
2416   <key>DownloadDirectory</key>
2417   <string>${home}/Downloads</string>
2418 </dict>
2419 ```
2420 #### policies.json (macOS and Linux)
2421 ```
2422 {
2423   "policies": {
2424     "DownloadDirectory": "${home}/Downloads"
2425 }
2426 ```
2427 #### policies.json (Windows)
2428 ```
2429 {
2430   "policies": {
2431     "DownloadDirectory": "${home}\\Downloads"
2432 }
2433 ```
2434 ### EnableTrackingProtection
2435 Configure tracking protection.
2436
2437 If this policy is not configured, tracking protection is not enabled by default in the browser, but it is enabled by default in private browsing and the user can change it.
2438
2439 If `Value` is set to false, tracking protection is disabled and locked in both the regular browser and private browsing.
2440
2441 If `Value` is set to true, tracking protection is enabled by default in both the regular browser and private browsing and the `Locked` value determines whether or not a user can change it.
2442
2443 If `Cryptomining` is set to true, cryptomining scripts on websites are blocked.
2444
2445 If `Fingerprinting` is set to true, fingerprinting scripts on websites are blocked.
2446
2447 If `EmailTracking` is set to true, hidden email tracking pixels and scripts on websites are blocked. (Firefox 112)
2448
2449 `Exceptions` are origins for which tracking protection is not enabled.
2450
2451 **Compatibility:** Firefox 60, Firefox ESR 60 (Cryptomining and Fingerprinting added in 70/68.2, Exceptions added in 73/68.5)\
2452 **CCK2 Equivalent:** N/A\
2453 **Preferences Affected:** `privacy.trackingprotection.enabled`, `privacy.trackingprotection.pbmode.enabled`, `privacy.trackingprotection.cryptomining.enabled`, `privacy.trackingprotection.fingerprinting.enabled`
2454
2455 #### Windows (GPO)
2456 ```
2457 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Value = 0x1 | 0x0
2458 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Locked = 0x1 | 0x0
2459 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Cryptomining = 0x1 | 0x0
2460 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Fingerprinting = 0x1 | 0x0
2461 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Exceptions\1 = "https://example.com"
2462 ```
2463 #### Windows (Intune)
2464 OMA-URI:
2465 ```
2466 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/A_TrackingProtection_Value
2467 ```
2468 Value (string):
2469 ```
2470 <enabled/> or <disabled/>
2471 ```
2472 OMA-URI:
2473 ```
2474 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/B_TrackingProtection_Cryptomining
2475 ```
2476 Value (string):
2477 ```
2478 <enabled/> or <disabled/>
2479 ```
2480 OMA-URI:
2481 ```
2482 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/C_TrackingProtection_Fingerprinting
2483 ```
2484 Value (string):
2485 ```
2486 <enabled/> or <disabled/>
2487 ```
2488 OMA-URI:
2489 ```
2490 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/D_TrackingProtection_Exceptions
2491 ```
2492 Value (string):
2493 ```
2494 <enabled/>
2495 <data id="TrackingProtection_Exceptions" value="1&#xF000;https://example.com"/>
2496 ```
2497 OMA-URI:
2498 ```
2499 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/E_TrackingProtection_Locked
2500 ```
2501 Value (string):
2502 ```
2503 <enabled/> or <disabled/>
2504 ```
2505 #### macOS
2506 ```
2507 <dict>
2508   <key>EnableTrackingProtection</key>
2509   <dict>
2510     <key>Value</key>
2511     <true/> | <false/>
2512     <key>Locked</key>
2513     <true/> | <false/>
2514     <key>Cryptomining</key>
2515     <true/> | <false/>
2516     <key>Fingerprinting</key>
2517     <true/> | <false/>
2518     <key>Exceptions</key>
2519     <array>
2520       <string>https://example.com</string>
2521     </array>
2522   </dict>
2523 </dict>
2524 ```
2525 #### policies.json
2526 ```
2527 {
2528   "policies": {
2529     "EnableTrackingProtection": {
2530       "Value": true | false,
2531       "Locked": true | false,
2532       "Cryptomining": true | false,
2533       "Fingerprinting": true | false,
2534       "Exceptions": ["https://example.com"]
2535     }
2536   }
2537 }
2538 ```
2539 ### EncryptedMediaExtensions
2540 Enable or disable Encrypted Media Extensions and optionally lock it.
2541
2542 If `Enabled` is set to false, encrypted media extensions (like Widevine) are not downloaded by Firefox unless the user consents to installing them.
2543
2544 If `Locked` is set to true and `Enabled` is set to false, Firefox will not download encrypted media extensions (like Widevine) or ask the user to install them.
2545
2546 **Compatibility:** Firefox 77, Firefox ESR 68.9\
2547 **CCK2 Equivalent:** N/A\
2548 **Preferences Affected:** `media.eme.enabled`
2549
2550 #### Windows (GPO)
2551 ```
2552 Software\Policies\Mozilla\Firefox\EncryptedMediaExtensions\Enabled = 0x1 | 0x0
2553 Software\Policies\Mozilla\Firefox\EncryptedMediaExtensions\Locked = 0x1 | 0x0
2554 ```
2555 #### Windows (Intune)
2556 OMA-URI:
2557 ```
2558 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~EncryptedMediaExtensions/EncryptedMediaExtensions_Enabled
2559 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~EncryptedMediaExtensions/EncryptedMediaExtensions_Locked
2560 ```
2561 Value (string):
2562 ```
2563 <enabled/>or <disabled/>
2564 ```
2565 #### macOS
2566 ```
2567 <dict>
2568   <key>EncryptedMediaExtensions</key>
2569   <dict>
2570     <key>Enabled</key>
2571     <true/> | <false/>
2572     <key>Locked</key>
2573     <true/> | <false/>
2574   </dict>
2575 </dict>
2576 ```
2577 #### policies.json
2578 ```
2579 {
2580   "policies": {
2581     "EncryptedMediaExtensions": {
2582       "Enabled": true | false,
2583       "Locked": true | false
2584     }
2585   }
2586 }
2587 ```
2588 ### EnterprisePoliciesEnabled
2589 Enable policy support on macOS.
2590
2591 **Compatibility:** Firefox 63, Firefox ESR 60.3 (macOS only)\
2592 **CCK2 Equivalent:** N/A\
2593 **Preferences Affected:** N/A
2594
2595 #### macOS
2596 ```
2597 <dict>
2598   <key>EnterprisePoliciesEnabled</key>
2599   <true/>
2600 </dict>
2601 ```
2602 ### ExemptDomainFileTypePairsFromFileTypeDownloadWarnings
2603
2604 Disable warnings based on file extension for specific file types on domains.
2605
2606 This policy is based on the [Chrome policy](https://chromeenterprise.google/policies/#ExemptDomainFileTypePairsFromFileTypeDownloadWarnings) of the same name.
2607
2608 Important: The documentation for the policy for both Edge and Chrome is incorrect. The ```domains``` value must be a domain, not a URL pattern. Also, we do not support using ```*``` to mean all domains.
2609
2610 **Compatibility:** Firefox 102\
2611 **CCK2 Equivalent:** N/A\
2612 **Preferences Affected:** N/A
2613
2614 #### Windows (GPO)
2615 Software\Policies\Mozilla\Firefox\ExemptDomainFileTypePairsFromFileTypeDownloadWarnings (REG_MULTI_SZ) =
2616 ```
2617 [
2618   {
2619      "file_extension": "jnlp",
2620      "domains": ["example.com"]
2621   }
2622 ]
2623 ```
2624 #### Windows (Intune)
2625 OMA-URI:
2626 ```
2627 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/ExemptDomainFileTypePairsFromFileTypeDownloadWarnings
2628 ```
2629 Value (string):
2630 ```
2631 <enabled/>
2632 <data id="JSON" value='
2633 [
2634   {
2635      "file_extension": "jnlp",
2636      "domains": ["example.com"]
2637   }
2638 ]
2639 '/>
2640 ```
2641 #### macOS
2642 ```
2643 <dict>
2644   <key>ExemptDomainFileTypePairsFromFileTypeDownloadWarnings</key>
2645   <array>
2646     <dict>
2647       <key>file_extension</key>
2648       <string>jnlp</string>
2649       <key>domains</key>
2650       <array>
2651         <string>example.com</string>
2652       </array>
2653     </dict>
2654   </array>
2655 </dict>
2656 ```
2657 #### policies.json
2658 ```
2659 {
2660   "policies": {
2661     "ExemptDomainFileTypePairsFromFileTypeDownloadWarnings": [{
2662       "file_extension": "jnlp",
2663       "domains": ["example.com"]
2664     }]
2665   }
2666 }
2667 ```
2668 ### Extensions
2669 Control the installation, uninstallation and locking of extensions.
2670
2671 We strongly recommend that you use the **[`ExtensionSettings`](#extensionsettings)** policy. It has the same functionality and adds more. It does not support native paths, though, so you'll have to use file:/// URLs.
2672
2673 This method will be deprecated in the near future.
2674
2675 `Install` is a list of URLs or native paths for extensions to be installed.
2676
2677 `Uninstall` is a list of extension IDs that should be uninstalled if found.
2678
2679 `Locked` is a list of extension IDs that the user cannot disable or uninstall.
2680
2681 **Compatibility:** Firefox 60, Firefox ESR 60\
2682 **CCK2 Equivalent:** `addons`\
2683 **Preferences Affected:** N/A
2684
2685 #### Windows (GPO)
2686 ```
2687 Software\Policies\Mozilla\Firefox\Extensions\Install\1 = "https://addons.mozilla.org/firefox/downloads/somefile.xpi"
2688 Software\Policies\Mozilla\Firefox\Extensions\Install\2 = "//path/to/xpi"
2689 Software\Policies\Mozilla\Firefox\Extensions\Uninstall\1 = "bad_addon_id@mozilla.org"
2690 Software\Policies\Mozilla\Firefox\Extensions\Locked\1 = "addon_id@mozilla.org"
2691 ```
2692 #### Windows (Intune)
2693 OMA-URI:
2694 ```
2695 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/Extensions_Install
2696 ```
2697 Value (string):
2698 ```
2699 <enabled/>
2700 <data id="Extensions" value="1&#xF000;https://addons.mozilla.org/firefox/downloads/somefile.xpi&#xF000;2&#xF000;//path/to/xpi"/>
2701 ```
2702 OMA-URI:
2703 ```
2704 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/Extensions_Uninstall
2705 ```
2706 Value (string):
2707 ```
2708 <enabled/>
2709 <data id="Extensions" value="1&#xF000;bad_addon_id@mozilla.org"/>
2710 ```
2711 OMA-URI:
2712 ```
2713 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/Extensions_Locked
2714 ```
2715 Value (string):
2716 ```
2717 <enabled/>
2718 <data id="Extensions" value="1&#xF000;addon_id@mozilla.org"/>
2719 ```
2720 #### macOS
2721 ```
2722 <dict>
2723   <key>Extensions</key>
2724   <dict>
2725     <key>Install</key>
2726     <array>
2727       <string>https://addons.mozilla.org/firefox/downloads/somefile.xpi</string>
2728       <string>//path/to/xpi</string>
2729     </array>
2730     <key>Uninstall</key>
2731     <array>
2732       <string>bad_addon_id@mozilla.org</string>
2733     </array>
2734     <key>Locked</key>
2735     <array>
2736       <string>addon_id@mozilla.org</string>
2737     </array>
2738   </dict>
2739 </dict>
2740 ```
2741 #### policies.json
2742 ```
2743 {
2744   "policies": {
2745     "Extensions": {
2746       "Install": ["https://addons.mozilla.org/firefox/downloads/somefile.xpi", "//path/to/xpi"],
2747       "Uninstall": ["bad_addon_id@mozilla.org"],
2748       "Locked":  ["addon_id@mozilla.org"]
2749     }
2750   }
2751 }
2752 ```
2753 ### ExtensionSettings
2754 Manage all aspects of extensions. This policy is based heavily on the [Chrome policy](https://dev.chromium.org/administrators/policy-list-3/extension-settings-full) of the same name.
2755
2756 This policy maps an extension ID to its configuration. With an extension ID, the configuration will be applied to the specified extension only. A default configuration can be set for the special ID "*", which will apply to all extensions that don't have a custom configuration set in this policy.
2757
2758 To obtain an extension ID, install the extension and go to about:support. You will see the ID in the Extensions section. I've also created an extension that makes it easy to find the ID of extensions on AMO. You can download it [here](https://github.com/mkaply/queryamoid/releases/tag/v0.1).
2759
2760 The configuration for each extension is another dictionary that can contain the fields documented below.
2761
2762 | Name | Description |
2763 | --- | --- |
2764 | `installation_mode` | Maps to a string indicating the installation mode for the extension. The valid strings are `allowed`,`blocked`,`force_installed`, and `normal_installed`.
2765 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`allowed` | Allows the extension to be installed by the user. This is the default behavior. There is no need for an install_url; it will automatically be allowed based on the ID.
2766 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`blocked`| Blocks installation of the extension and removes it from the device if already installed.
2767 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`force_installed`| The extension is automatically installed and can't be removed by the user. This option is not valid for the default configuration and requires an install_url.
2768 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`normal_installed`| The extension is automatically installed but can be disabled by the user. This option is not valid for the default configuration and requires an install_url.
2769 | `install_url`| Maps to a URL indicating where Firefox can download a force_installed or normal_installed extension.  If installing from the local file system, use a [```file:///``` URL](https://en.wikipedia.org/wiki/File_URI_scheme). If installing from the addons.mozilla.org, use the following URL (substituting SHORT_NAME from the URL on AMO), https://addons.mozilla.org/firefox/downloads/latest/SHORT_NAME/latest.xpi. Languages packs are available from https://releases.mozilla.org/pub/firefox/releases/VERSION/PLATFORM/xpi/LANGUAGE.xpi. If you need to update the extension, you can change the name of the extension and it will be automatically updated. Extensions installed from file URLs will additional be updated when their internal version changes.
2770 | `install_sources` | A list of sources from which installing extensions is allowed using URL match patterns. **This is unnecessary if you are only allowing the installation of certain extensions by ID.** Each item in this list is an extension-style match pattern. Users will be able to easily install items from any URL that matches an item in this list. Both the location of the *.xpi file and the page where the download is started from (i.e.  the referrer) must be allowed by these patterns. This setting can be used only for the default configuration.
2771 | `allowed_types` | This setting whitelists the allowed types of extension/apps that can be installed in Firefox. The value is a list of strings, each of which should be one of the following: "extension", "theme", "dictionary", "locale" This setting can be used only for the default configuration.
2772 | `blocked_install_message` | This maps to a string specifying the error message to display to users if they're blocked from installing an extension. This setting allows you to append text to the generic error message displayed when the extension is blocked. This could be be used to direct users to your help desk, explain why a particular extension is blocked, or something else. This setting can be used only for the default configuration.
2773 | `restricted_domains` | An array of domains on which content scripts can't be run. This setting can be used only for the default configuration.
2774 | `updates_disabled` | (Firefox 89, Firefox ESR 78.11) Boolean that indicates whether or not to disable automatic updates for an individual extension.
2775 | `default_area` | (Firefox 113) String that indicates where to place the extension icon by default. Possible values are `navbar` and `menupanel`.
2776
2777 **Compatibility:** Firefox 69, Firefox ESR 68.1 (As of Firefox 85, Firefox ESR 78.7, installing a theme makes it the default.)\
2778 **CCK2 Equivalent:** N/A\
2779 **Preferences Affected:** N/A
2780
2781 #### Windows (GPO)
2782 Software\Policies\Mozilla\Firefox\ExtensionSettings (REG_MULTI_SZ) =
2783 ```
2784 {
2785   "*": {
2786     "blocked_install_message": "Custom error message.",
2787     "install_sources": ["https://yourwebsite.com/*"],
2788     "installation_mode": "blocked",
2789     "allowed_types": ["extension"]
2790   },
2791   "uBlock0@raymondhill.net": {
2792     "installation_mode": "force_installed",
2793     "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
2794   },
2795   "https-everywhere@eff.org": {
2796     "installation_mode": "allowed",
2797     "updates_disabled": false
2798   }
2799 }
2800 ```
2801 #### Windows (Intune)
2802 OMA-URI:
2803 ```
2804 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/ExtensionSettings
2805 ```
2806 Value (string):
2807 ```
2808 <enabled/>
2809 <data id="ExtensionSettings" value='
2810 {
2811   "*": {
2812     "blocked_install_message": "Custom error message.",
2813     "install_sources": ["https://yourwebsite.com/*"],
2814     "installation_mode": "blocked",
2815     "allowed_types": ["extension"]
2816   },
2817   "uBlock0@raymondhill.net": {
2818     "installation_mode": "force_installed",
2819     "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
2820   },
2821     "https-everywhere@eff.org": {
2822     "installation_mode": "allowed",
2823     "updates_disabled": false
2824   }
2825 }'/>
2826 ```
2827 #### macOS
2828 ```
2829 <dict>
2830   <key>ExtensionSettings</key>
2831   <dict>
2832     <key>*</key>
2833     <dict>
2834       <key>blocked_install_message</key>
2835       <string>Custom error message.</string>
2836       <key>install_sources</key>
2837       <array>
2838         <string>"https://yourwebsite.com/*"</string>
2839       </array>
2840       <key>installation_mode</key>
2841       <string>blocked</string>
2842       <key>allowed_types</key>
2843       <array>
2844         <string>extension</string>
2845       </array>
2846     </dict>
2847     <key>uBlock0@raymondhill.net</key>
2848     <dict>
2849       <key>installation_mode</key>
2850       <string>force_installed</string>
2851       <key>install_url</key>
2852       <string>https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi</string>
2853     </dict>
2854     <key>https-everywhere@eff.org</key>
2855     <dict>
2856       <key>installation_mode</key>
2857       <string>allowed</string>
2858       <key>updates_disabled</key>
2859       <true/> | <false/>
2860     </dict>
2861   </dict>
2862 </dict>
2863 ```
2864 #### policies.json
2865 ```
2866 {
2867   "policies": {
2868     "ExtensionSettings": {
2869       "*": {
2870         "blocked_install_message": "Custom error message.",
2871         "install_sources": ["https://yourwebsite.com/*"],
2872         "installation_mode": "blocked",
2873         "allowed_types": ["extension"]
2874       },
2875       "uBlock0@raymondhill.net": {
2876         "installation_mode": "force_installed",
2877         "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
2878       },
2879       "https-everywhere@eff.org": {
2880         "installation_mode": "allowed",
2881         "updates_disabled": false
2882       }
2883     }
2884   }
2885 }
2886 ```
2887 ### ExtensionUpdate
2888 Control extension updates.
2889
2890 **Compatibility:** Firefox 67, Firefox ESR 60.7\
2891 **CCK2 Equivalent:** N/A\
2892 **Preferences Affected:** `extensions.update.enabled`
2893
2894 #### Windows (GPO)
2895 ```
2896 Software\Policies\Mozilla\Firefox\ExtensionUpdate = 0x1 | 0x0
2897 ```
2898 #### Windows (Intune)
2899 OMA-URI:
2900 ```
2901 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/ExtensionUpdate
2902 ```
2903 Value (string):
2904 ```
2905 <enabled/> or <disabled/>
2906 ```
2907 #### macOS
2908 ```
2909 <dict>
2910   <key>ExtensionUpdate</key>
2911   <true/> | <false/>
2912 </dict>
2913 ```
2914 #### policies.json
2915 ```
2916 {
2917   "policies": {
2918     "ExtensionUpdate": true | false
2919   }
2920 }
2921 ```
2922 ### FirefoxHome
2923 Customize the Firefox Home page.
2924
2925 **Compatibility:** Firefox 68, Firefox ESR 68 (SponsoredTopSites and SponsoredPocket were added in Firefox 95, Firefox ESR 91.4, Snippets was deprecated in Firefox 122)
2926 **CCK2 Equivalent:** N/A\
2927 **Preferences Affected:** `browser.newtabpage.activity-stream.showSearch`, `browser.newtabpage.activity-stream.feeds.topsites`, `browser.newtabpage.activity-stream.feeds.section.highlights`, `browser.newtabpage.activity-stream.feeds.section.topstories`, `browser.newtabpage.activity-stream.feeds.snippets`, `browser.newtabpage.activity-stream.showSponsoredTopSites`, `browser.newtabpage.activity-stream.showSponsored`
2928
2929 #### Windows (GPO)
2930 ```
2931 Software\Policies\Mozilla\Firefox\FirefoxHome\Search = 0x1 | 0x0
2932 Software\Policies\Mozilla\Firefox\FirefoxHome\TopSites = 0x1 | 0x0
2933 Software\Policies\Mozilla\Firefox\FirefoxHome\SponsoredTopSites = 0x1 | 0x0
2934 Software\Policies\Mozilla\Firefox\FirefoxHome\Highlights = 0x1 | 0x0
2935 Software\Policies\Mozilla\Firefox\FirefoxHome\Pocket = 0x1 | 0x0
2936 Software\Policies\Mozilla\Firefox\FirefoxHome\SponsoredPocket = 0x1 | 0x0
2937 Software\Policies\Mozilla\Firefox\FirefoxHome\Snippets = 0x1 | 0x0
2938 Software\Policies\Mozilla\Firefox\FirefoxHome\Locked = 0x1 | 0x0
2939 ```
2940 #### Windows (Intune)
2941 OMA-URI:
2942 ```
2943 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/CustomizeFirefoxHome
2944 ```
2945 Value (string):
2946 ```
2947 <enabled/>
2948 <data id="FirefoxHome_Search"  value="true | false"/>
2949 <data id="FirefoxHome_TopSites"  value="true | false"/>
2950 <data id="FirefoxHome_SponsoredTopSites"  value="true | false"/>
2951 <data id="FirefoxHome_Highlights"  value="true | false"/>
2952 <data id="FirefoxHome_Pocket"  value="true | false"/>
2953 <data id="FirefoxHome_SponsoredPocket"  value="true | false"/>
2954 <data id="FirefoxHome_Snippets"  value="true | false"/>
2955 <data id="FirefoxHome_Locked"  value="true | false"/>
2956 ```
2957 #### macOS
2958 ```
2959 <dict>
2960   <key>FirefoxHome</key>
2961   <dict>
2962     <key>Search</key>
2963     <true/> | <false/>
2964     <key>TopSites</key>
2965     <true/> | <false/>
2966     <key>SponsoredTopSites</key>
2967     <true/> | <false/>
2968     <key>Highlights</key>
2969     <true/> | <false/>
2970     <key>Pocket</key>
2971     <true/> | <false/>
2972     <key>SponsoredPocket</key>
2973     <true/> | <false/>
2974     <key>Snippets</key>
2975     <true/> | <false/>
2976     <key>Locked</key>
2977     <true/> | <false/>
2978   </dict>
2979 </dict>
2980 ```
2981 #### policies.json
2982 ```
2983 {
2984   "policies": {
2985     "FirefoxHome": {
2986       "Search": true | false,
2987       "TopSites": true | false,
2988       "SponsoredTopSites": true | false,
2989       "Highlights": true | false,
2990       "Pocket": true | false,
2991       "SponsoredPocket": true | false,
2992       "Snippets": true | false,
2993       "Locked": true | false
2994     }
2995   }
2996 }
2997 ```
2998 ### FirefoxSuggest
2999 Customize Firefox Suggest (US only).
3000
3001 **Compatibility:** Firefox 118, Firefox ESR 115.3.
3002 **CCK2 Equivalent:** N/A\
3003 **Preferences Affected:** `browser.urlbar.suggest.quicksuggest.nonsponsored`, `browser.urlbar.suggest.quicksuggest.sponsored`, `browser.urlbar.quicksuggest.dataCollection.enabled`
3004
3005 #### Windows (GPO)
3006 ```
3007 Software\Policies\Mozilla\Firefox\FirefoxSuggest\WebSuggestions = 0x1 | 0x0
3008 Software\Policies\Mozilla\Firefox\FirefoxSuggest\SponsoredSuggestions = 0x1 | 0x0
3009 Software\Policies\Mozilla\Firefox\FirefoxSuggest\ImproveSuggest = 0x1 | 0x0
3010 Software\Policies\Mozilla\Firefox\FirefoxSuggest\Locked = 0x1 | 0x0
3011 ```
3012 #### Windows (Intune)
3013 OMA-URI:
3014 ```
3015 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~FirefoxSuggest/WebSuggestions
3016 ```
3017 Value (string):
3018 ```
3019 <enabled/> or <disabled/>
3020 ```
3021 OMA-URI:
3022 ```
3023 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~FirefoxSuggest/SponsoredSuggestions
3024 ```
3025 Value (string):
3026 ```
3027 <enabled/> or <disabled/>
3028 ```
3029 OMA-URI:
3030 ```
3031 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~FirefoxSuggest/ImproveSuggest
3032 ```
3033 Value (string):
3034 ```
3035 <enabled/> or <disabled/>
3036 ```
3037 OMA-URI:
3038 ```
3039 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~FirefoxSuggest/Locked
3040 ```
3041 Value (string):
3042 ```
3043 <enabled/> or <disabled/>
3044 ```
3045 #### macOS
3046 ```
3047 <dict>
3048   <key>FirefoxSuggest</key>
3049   <dict>
3050     <key>WebSuggestions</key>
3051     <true/> | <false/>
3052     <key>SponsoredSuggestions</key>
3053     <true/> | <false/>
3054     <key>ImproveSuggest</key>
3055     <true/> | <false/>
3056     <key>Locked</key>
3057     <true/> | <false/>
3058   </dict>
3059 </dict>
3060 ```
3061 #### policies.json
3062 ```
3063 {
3064   "policies": {
3065     "FirefoxSuggest": {
3066       "WebSuggestions": true | false,
3067       "SponsoredSuggestions": true | false,
3068       "ImproveSuggest": true | false,
3069       "Locked": true | false
3070     }
3071   }
3072 }
3073 ```
3074 ### GoToIntranetSiteForSingleWordEntryInAddressBar
3075 Whether to always go through the DNS server before sending a single word search string to a search engine.
3076
3077 If the site exists, it will navigate to the website. If the intranet responds with a 404, the page will show a 404. If the intranet does not respond, the browser will attempt a search.
3078
3079 The second result in the URL bar will be a search result to allow users to conduct a web search exactly as it was entered.
3080
3081 If instead you would like to enable the ability to have your domain appear as a valid URL and to disallow the browser from ever searching that term using the first result that matches it, add the pref `browser.fixup.domainwhitelist.YOUR_DOMAIN` (where `YOUR_DOMAIN` is the name of the domain you'd like to add), and set the pref to `true`. The URL bar will then suggest `YOUR_DOMAIN` when the user fully types `YOUR_DOMAIN`. If the user attempts to load that domain and it fails to load, it will show an "Unable to connect" error page.
3082
3083 You can also whitelist a domain suffix that is not part of the [Public Suffix List](https://publicsuffix.org/) by adding the pref `browser.fixup.domainsuffixwhitelist.YOUR_DOMAIN_SUFFIX` with a value of `true`.
3084
3085 Additionally, if you want users to see a "Did you mean to go to 'YOUR_DOMAIN'" prompt below the URL bar if they land on a search results page instead of an intranet domain that provides a response, set the pref `browser.urlbar.dnsResolveSingleWordsAfterSearch` to `1`. Enabling this will cause the browser to commit a DNS check after every single word search. If the browser receives a response from the intranet, a prompt will ask the user if they'd like to instead navigate to `YOUR_DOMAIN`. If the user presses the **yes** button, `browser.fixup.domainwhitelist.YOUR_DOMAIN` will be set to `true`.
3086
3087 **Compatibility:** Firefox 104, Firefox ESR 102.2\
3088 **CCK2 Equivalent:** `N/A`\
3089 **Preferences Affected:** `browser.fixup.dns_first_for_single_words`
3090
3091 #### Windows (GPO)
3092 ```
3093 Software\Policies\Mozilla\Firefox\GoToIntranetSiteForSingleWordEntryInAddressBar = 0x1 | 0x0
3094 ```
3095 #### Windows (Intune)
3096 OMA-URI:
3097 ```
3098 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/GoToIntranetSiteForSingleWordEntryInAddressBar
3099 ```
3100 Value (string):
3101 ```
3102 <enabled/> or <disabled/>
3103 ```
3104 #### macOS
3105 ```
3106 <dict>
3107   <key>GoToIntranetSiteForSingleWordEntryInAddressBar</key>
3108   <true/> | <false/>
3109 </dict>
3110 ```
3111 #### policies.json
3112 ```
3113 {
3114   "policies": {
3115     "GoToIntranetSiteForSingleWordEntryInAddressBar": true | false
3116   }
3117 }
3118 ```
3119 ### Handlers
3120 Configure default application handlers. This policy is based on the internal format of `handlers.json`.
3121
3122 You can configure handlers based on a mime type (`mimeTypes`), a file's extension (`extensions`), or a protocol (`schemes`).
3123
3124 Within each handler type, you specify the given mimeType/extension/scheme as a key and use the following subkeys to describe how it is handled.
3125
3126 | Name | Description |
3127 | --- | --- |
3128 | `action`| Can be either `saveToDisk`, `useHelperApp`, `useSystemDefault`.
3129 | `ask` | If `true`, the user is asked if what they want to do with the file. If `false`, the action is taken without user intervention.
3130 | `handlers` | An array of handlers with the first one being the default. If you don't want to have a default handler, use an empty object for the first handler. Choose between path or uriTemplate.
3131 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`name` | The display name of the handler (might not be used).
3132 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`path`| The native path to the executable to be used.
3133 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`uriTemplate`| A url to a web based application handler. The URL must be https and contain a %s to be used for substitution.
3134
3135 **Compatibility:** Firefox 78, Firefox ESR 78\
3136 **CCK2 Equivalent:** N/A\
3137 **Preferences Affected:** N/A
3138
3139 #### Windows (GPO)
3140 Software\Policies\Mozilla\Firefox\Handlers (REG_MULTI_SZ) =
3141 ```
3142 {
3143   "mimeTypes": {
3144     "application/msword": {
3145       "action": "useSystemDefault",
3146       "ask": true | false
3147     }
3148   },
3149   "schemes": {
3150     "mailto": {
3151       "action": "useHelperApp",
3152       "ask": true | false,
3153       "handlers": [{
3154         "name": "Gmail",
3155         "uriTemplate": "https://mail.google.com/mail/?extsrc=mailto&url=%s"
3156       }]
3157     }
3158   },
3159   "extensions": {
3160     "pdf": {
3161       "action": "useHelperApp",
3162       "ask": true | false,
3163       "handlers": [{
3164         "name": "Adobe Acrobat",
3165         "path": "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32.exe"
3166       }]
3167     }
3168   }
3169 }
3170 ```
3171 #### Windows (Intune)
3172 OMA-URI:
3173 ```
3174 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Handlers
3175 ```
3176 Value (string):
3177 ```
3178 <enabled/>
3179 <data id="Handlers" value='
3180 {
3181   "mimeTypes": {
3182     "application/msword": {
3183       "action": "useSystemDefault",
3184       "ask": true | false
3185     }
3186   },
3187   "schemes": {
3188     "mailto": {
3189       "action": "useHelperApp",
3190       "ask": true | false,
3191       "handlers": [{
3192         "name": "Gmail",
3193         "uriTemplate": "https://mail.google.com/mail/?extsrc=mailto&amp;url=%s"
3194       }]
3195     }
3196   },
3197   "extensions": {
3198     "pdf": {
3199       "action": "useHelperApp",
3200       "ask": true | false,
3201       "handlers": [{
3202         "name": "Adobe Acrobat",
3203         "path": "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32.exe"
3204       }]
3205     }
3206   }
3207 }
3208 '/>
3209 ```
3210 #### macOS
3211 ```
3212 <dict>
3213   <key>Handlers</key>
3214   <dict>
3215     <key>mimeTypes</key>
3216     <dict>
3217       <key>application/msword</key>
3218       <dict>
3219         <key>action</key>
3220         <string>useSystemDefault</string>
3221         <key>ask</key>
3222         <true/> | <false/>
3223       </dict>
3224     </dict>
3225     <key>schemes</key>
3226     <dict>
3227       <key>mailto</key>
3228       <dict>
3229         <key>action</key>
3230         <string>useHelperApp</string>
3231         <key>ask</key>
3232         <true/> | <false/>
3233         <key>handlers</key>
3234         <array>
3235           <dict>
3236             <key>name</key>
3237             <string>Gmail</string>
3238             <key>uriTemplate</key>
3239             <string>https://mail.google.com/mail/?extsrc=mailto&url=%s</string>
3240           </dict>
3241         </array>
3242       </dict>
3243     </dict>
3244     <key>extensions</key>
3245     <dict>
3246       <key>pdf</key>
3247       <dict>
3248         <key>action</key>
3249         <string>useHelperApp</string>
3250         <key>ask</key>
3251         <true/> | <false/>
3252         <key>handlers</key>
3253         <array>
3254           <dict>
3255             <key>name</key>
3256             <string>Adobe Acrobat</string>
3257             <key>path</key>
3258             <string>/System/Applications/Preview.app</string>
3259           </dict>
3260         </array>
3261       </dict>
3262     </dict>
3263   </dict>
3264 </dict>
3265 ```
3266 #### policies.json
3267 ```
3268 {
3269   "policies": {
3270     "Handlers": {
3271       "mimeTypes": {
3272         "application/msword": {
3273           "action": "useSystemDefault",
3274           "ask": false
3275         }
3276       },
3277       "schemes": {
3278         "mailto": {
3279           "action": "useHelperApp",
3280           "ask": true | false,
3281           "handlers": [{
3282             "name": "Gmail",
3283             "uriTemplate": "https://mail.google.com/mail/?extsrc=mailto&url=%s"
3284           }]
3285         }
3286       },
3287       "extensions": {
3288         "pdf": {
3289           "action": "useHelperApp",
3290           "ask": true | false,
3291           "handlers": [{
3292             "name": "Adobe Acrobat",
3293             "path": "/usr/bin/acroread"
3294           }]
3295         }
3296       }
3297     }
3298   }
3299 }
3300 ```
3301 ### HardwareAcceleration
3302 Control hardware acceleration.
3303
3304 **Compatibility:** Firefox 60, Firefox ESR 60\
3305 **CCK2 Equivalent:** N/A\
3306 **Preferences Affected:** `layers.acceleration.disabled`
3307
3308 #### Windows (GPO)
3309 ```
3310 Software\Policies\Mozilla\Firefox\HardwareAcceleration = 0x1 | 0x0
3311 ```
3312 #### Windows (Intune)
3313 OMA-URI:
3314 ```
3315 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/HardwareAcceleration
3316 ```
3317 Value (string):
3318 ```
3319 <enabled/> or <disabled/>
3320 ```
3321 #### macOS
3322 ```
3323 <dict>
3324   <key>HardwareAcceleration</key>
3325   <true/> | <false/>
3326 </dict>
3327 ```
3328 #### policies.json
3329 ```
3330 {
3331   "policies": {
3332     "HardwareAcceleration": true | false
3333   }
3334 }
3335 ```
3336 ### Homepage
3337 Configure the default homepage and how Firefox starts.
3338
3339 `URL` is the default homepage.
3340
3341 `Locked` prevents the user from changing homepage preferences.
3342
3343 `Additional` allows for more than one homepage.
3344
3345 `StartPage` is how Firefox starts. The choices are no homepage, the default homepage or the previous session.
3346
3347 With Firefox 78, an additional option as added for `Startpage`, `homepage-locked`. If this is value is set for the Startpage, the user will always get the homepage at startup and cannot choose to restore their session.
3348
3349 **Compatibility:** Firefox 60, Firefox ESR 60 (StartPage was added in Firefox 60, Firefox ESR 60.4, homepage-locked added in Firefox 78)\
3350 **CCK2 Equivalent:** `homePage`,`lockHomePage`\
3351 **Preferences Affected:** `browser.startup.homepage`, `browser.startup.page`
3352
3353 #### Windows (GPO)
3354 ```
3355 Software\Policies\Mozilla\Firefox\Homepage\URL = "https://example.com"
3356 Software\Policies\Mozilla\Firefox\Homepage\Locked = 0x1 | 0x0
3357 Software\Policies\Mozilla\Firefox\Homepage\Additional\1 = "https://example.org"
3358 Software\Policies\Mozilla\Firefox\Homepage\Additional\2 = "https://example.edu"
3359 Software\Policies\Mozilla\Firefox\Homepage\StartPage = "none" | "homepage" | "previous-session" | "homepage-locked"
3360 ```
3361 #### Windows (Intune)
3362 OMA-URI:
3363 ```
3364 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageURL
3365 ```
3366 Value (string):
3367 ```
3368 <enabled/>
3369
3370 <data id="HomepageURL" value="https://example.com"/>
3371 <data id="HomepageLocked" value="true | false"/>
3372 ```
3373 OMA-URI:
3374 ```
3375 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageAdditional
3376 ```
3377 Value (string):
3378 ```
3379 <enabled/>
3380
3381 <data id="HomepageAdditional" value="1&#xF000;http://example.org&#xF000;2&#xF000;http://example.edu"/>
3382 ```
3383 OMA-URI:
3384 ```
3385 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageStartPage
3386 ```
3387 Value (string):
3388 ```
3389 <enabled/>
3390
3391 <data id="StartPage" value="none | homepage | previous-session"/>
3392 ```
3393 #### macOS
3394 ```
3395 <dict>
3396   <key>Homepage</key>
3397   <dict>
3398     <key>URL</key>
3399     <string>http://example.com</string>
3400     <key>Locked</key>
3401     <true/> | <false/>
3402     <key>Additional</key>
3403     <array>
3404       <string>http://example.org</string>
3405       <string>http://example.edu</string>
3406     </array>
3407     <key>StartPage</key>
3408     <string>none | homepage | previous-session | homepage-locked</string>
3409   </dict>
3410 </dict>
3411 ```
3412 #### policies.json
3413 ```
3414 {
3415   "policies": {
3416     "Homepage": {
3417       "URL": "http://example.com/",
3418       "Locked": true | false,
3419       "Additional": ["http://example.org/",
3420                      "http://example.edu/"],
3421       "StartPage": "none" | "homepage" | "previous-session" | "homepage-locked"
3422     }
3423   }
3424 }
3425 ```
3426 ### InstallAddonsPermission
3427 Configure the default extension install policy as well as origins for extension installs are allowed. This policy does not override turning off all extension installs.
3428
3429 `Allow` is a list of origins where extension installs are allowed.
3430
3431 `Default` determines whether or not extension installs are allowed by default.
3432
3433 **Compatibility:** Firefox 60, Firefox ESR 60\
3434 **CCK2 Equivalent:** `permissions.install`\
3435 **Preferences Affected:** `xpinstall.enabled`
3436
3437 #### Windows (GPO)
3438 ```
3439 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Allow\1 = "https://example.org"
3440 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Allow\2 = "https://example.edu"
3441 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Default = 0x1 | 0x0
3442 ```
3443 #### Windows (Intune)
3444 OMA-URI:
3445 ```
3446 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Addons/InstallAddonsPermission_Allow
3447 ```
3448 Value (string):
3449 ```
3450 <enabled/>
3451 <data id="Permissions" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
3452 ```
3453 OMA-URI:
3454 ```
3455 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Addons/InstallAddonsPermission_Default
3456 ```
3457 Value (string):
3458 ```
3459 <enabled/>
3460 ```
3461 #### macOS
3462 ```
3463 <dict>
3464   <key>InstallAddonsPermission</key>
3465   <dict>
3466     <key>Allow</key>
3467     <array>
3468       <string>http://example.org</string>
3469       <string>http://example.edu</string>
3470     </array>
3471     <key>Default</key>
3472     <true/> | <false/>
3473   </dict>
3474 </dict>
3475 ```
3476 #### policies.json
3477 ```
3478 {
3479   "policies": {
3480     "InstallAddonsPermission": {
3481       "Allow": ["http://example.org/",
3482                 "http://example.edu/"],
3483       "Default": true | false
3484     }
3485   }
3486 }
3487 ```
3488 ### LegacyProfiles
3489 Disable the feature enforcing a separate profile for each installation.
3490
3491 If this policy set to true, Firefox will not try to create different profiles for installations of Firefox in different directories. This is the equivalent of the MOZ_LEGACY_PROFILES environment variable.
3492
3493 If this policy set to false, Firefox will create a new profile for each unique installation of Firefox.
3494
3495 This policy only work on Windows via GPO (not policies.json).
3496
3497 **Compatibility:** Firefox 70, Firefox ESR 68.2 (Windows only, GPO only)\
3498 **CCK2 Equivalent:** N/A\
3499 **Preferences Affected:** N/A
3500
3501 #### Windows (GPO)
3502 ```
3503 Software\Policies\Mozilla\Firefox\LegacyProfiles = = 0x1 | 0x0
3504 ```
3505 #### Windows (Intune)
3506 OMA-URI:
3507 ```
3508 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/LegacyProfiles
3509 ```
3510 Value (string):
3511 ```
3512 <enabled/> or <disabled/>
3513 ```
3514 ### LegacySameSiteCookieBehaviorEnabled
3515 Enable default legacy SameSite cookie behavior setting.
3516
3517 If this policy is set to true, it reverts all cookies to legacy SameSite behavior which means that cookies that don't explicitly specify a ```SameSite``` attribute are treated as if they were ```SameSite=None```.
3518
3519 **Compatibility:** Firefox 96\
3520 **CCK2 Equivalent:** N/A\
3521 **Preferences Affected:** `network.cookie.sameSite.laxByDefault`
3522
3523 #### Windows (GPO)
3524 ```
3525 Software\Policies\Mozilla\Firefox\LegacySameSiteCookieBehaviorEnabled = = 0x1 | 0x0
3526 ```
3527 #### Windows (Intune)
3528 OMA-URI:
3529 ```
3530 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/LegacySameSiteCookieBehaviorEnabled
3531 ```
3532 Value (string):
3533 ```
3534 <enabled/> or <disabled/>
3535 ```
3536 #### macOS
3537 ```
3538 <dict>
3539   <key>LegacySameSiteCookieBehaviorEnabled</key>
3540   <true/> | <false/>
3541 </dict>
3542 ```
3543 #### policies.json
3544 ```
3545 {
3546   "policies": {
3547     "LegacySameSiteCookieBehaviorEnabled": true | false
3548 }
3549 ```
3550 ### LegacySameSiteCookieBehaviorEnabledForDomainList
3551 Revert to legacy SameSite behavior for cookies on specified sites.
3552
3553 If this policy is set to true, cookies set for domains in this list will revert to legacy SameSite behavior which means that cookies that don't explicitly specify a ```SameSite``` attribute are treated as if they were ```SameSite=None```.
3554
3555 **Compatibility:** Firefox 96\
3556 **CCK2 Equivalent:** N/A\
3557 **Preferences Affected:** `network.cookie.sameSite.laxByDefault.disabledHosts`
3558
3559 #### Windows (GPO)
3560 ```
3561 Software\Policies\Mozilla\Firefox\LegacySameSiteCookieBehaviorEnabledForDomainList\1 = "example.org"
3562 Software\Policies\Mozilla\Firefox\LegacySameSiteCookieBehaviorEnabledForDomainList\2 = "example.edu"
3563 ```
3564 #### Windows (Intune)
3565 OMA-URI:
3566 ```
3567 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/LegacySameSiteCookieBehaviorEnabledForDomainList
3568 ```
3569 Value (string):
3570 ```
3571 <enabled/>
3572 <data id="LegacySameSiteCookieBehaviorEnabledForDomainList" value="1&#xF000;example.org&#xF000;2&#xF000;example.edu"/>
3573 ```
3574 #### macOS
3575 ```
3576 <dict>
3577   <key>LegacySameSiteCookieBehaviorEnabledForDomainList</key>
3578   <array>
3579     <string>example.org</string>
3580     <string>example.edu</string>
3581   </array>
3582 </dict>
3583 ```
3584 #### policies.json
3585 ```
3586 {
3587   "policies": {
3588     "LegacySameSiteCookieBehaviorEnabledForDomainList": ["example.org",
3589                                                          "example.edu"]
3590   }
3591 }
3592 ```
3593 ### LocalFileLinks
3594 Enable linking to local files by origin.
3595
3596 **Compatibility:** Firefox 68, Firefox ESR 68\
3597 **CCK2 Equivalent:** N/A\
3598 **Preferences Affected:** `capability.policy.localfilelinks.*`
3599
3600 #### Windows (GPO)
3601 ```
3602 Software\Policies\Mozilla\Firefox\LocalFileLinks\1 = "https://example.org"
3603 Software\Policies\Mozilla\Firefox\LocalFileLinks\2 = "https://example.edu"
3604 ```
3605 #### Windows (Intune)
3606 OMA-URI:
3607 ```
3608 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/LocalFileLinks
3609 ```
3610 Value (string):
3611 ```
3612 <enabled/>
3613 <data id="LocalFileLinks" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
3614 ```
3615 #### macOS
3616 ```
3617 <dict>
3618   <key>LocalFileLinks</key>
3619   <array>
3620     <string>http://example.org</string>
3621     <string>http://example.edu</string>
3622   </array>
3623 </dict>
3624 ```
3625 #### policies.json
3626 ```
3627 {
3628   "policies": {
3629     "LocalFileLinks": ["http://example.org/",
3630                        "http://example.edu/"]
3631   }
3632 }
3633 ```
3634 ### ManagedBookmarks
3635 Configures a list of bookmarks managed by an administrator that cannot be changed by the user.
3636
3637 The bookmarks are only added as a button on the personal toolbar. They are not in the bookmarks folder.
3638
3639 The syntax of this policy is exactly the same as the [Chrome ManagedBookmarks policy](https://cloud.google.com/docs/chrome-enterprise/policies/?policy=ManagedBookmarks). The schema is:
3640 ```
3641 {
3642  "items": {
3643   "id": "BookmarkType",
3644   "properties": {
3645    "children": {
3646     "items": {
3647      "$ref": "BookmarkType"
3648     },
3649     "type": "array"
3650    },
3651    "name": {
3652     "type": "string"
3653    },
3654    "toplevel_name": {
3655     "type": "string"
3656    },
3657    "url": {
3658     "type": "string"
3659    }
3660   },
3661   "type": "object"
3662  },
3663  "type": "array"
3664 }
3665 ```
3666 **Compatibility:** Firefox 83, Firefox ESR 78.5\
3667 **CCK2 Equivalent:** N/A\
3668 **Preferences Affected:** N/A
3669
3670 #### Windows (GPO)
3671 Software\Policies\Mozilla\Firefox\ManagedBookmarks (REG_MULTI_SZ) =
3672 ```
3673 [
3674   {
3675     "toplevel_name": "My managed bookmarks folder"
3676   },
3677   {
3678     "url": "example.com",
3679     "name": "Example"
3680   },
3681   {
3682     "name": "Mozilla links",
3683     "children": [
3684       {
3685         "url": "https://mozilla.org",
3686         "name": "Mozilla.org"
3687       },
3688       {
3689         "url": "https://support.mozilla.org/",
3690         "name": "SUMO"
3691       }
3692     ]
3693   }
3694 ]
3695 ```
3696 #### Windows (Intune)
3697 OMA-URI:
3698 ```
3699 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/ManagedBookmarks
3700 ```
3701 Value (string):
3702 ```
3703 <enabled/>
3704 <data id="JSON" value='
3705 [
3706   {
3707     "toplevel_name": "My managed bookmarks folder"
3708   },
3709   {
3710     "url": "example.com",
3711     "name": "Example"
3712   },
3713   {
3714     "name": "Mozilla links",
3715     "children": [
3716       {
3717         "url": "https://mozilla.org",
3718         "name": "Mozilla.org"
3719       },
3720       {
3721         "url": "https://support.mozilla.org/",
3722         "name": "SUMO"
3723       }
3724     ]
3725   }
3726 ]'/>
3727 ```
3728 #### macOS
3729 ```
3730 <dict>
3731   <key>ManagedBookmarks</key>
3732   <array>
3733     <dict>
3734       <key>toplevel_name</key>
3735       <string>My managed bookmarks folder</string>
3736       <dict>
3737         <key>url</key>
3738         <string>example.com</string>
3739         <key>name</key>
3740         <string>Example</string>
3741       </dict>
3742       <dict>
3743       <key>name</key>
3744       <string>Mozilla links</string>
3745       <key>children</key>
3746       <array>
3747         <dict>
3748           <key>url</key>
3749           <string>https://mozilla.org</string>
3750           <key>name</key>
3751           <string>Mozilla</string>
3752         </dict>
3753         <dict>
3754           <key>url</key>
3755           <string>https://support.mozilla.org/</string>
3756           <key>name</key>
3757           <string>SUMO</string>
3758         </dict>
3759       </array>
3760     </dict>
3761   </array>
3762 </dict>
3763 ```
3764 #### policies.json
3765 ```
3766 {
3767   "policies": {
3768     "ManagedBookmarks": [
3769       {
3770         "toplevel_name": "My managed bookmarks folder"
3771       },
3772       {
3773         "url": "example.com",
3774         "name": "Example"
3775       },
3776       {
3777         "name": "Mozilla links",
3778         "children": [
3779           {
3780             "url": "https://mozilla.org",
3781             "name": "Mozilla.org"
3782           },
3783           {
3784             "url": "https://support.mozilla.org/",
3785             "name": "SUMO"
3786           }
3787         ]
3788       }
3789     ]
3790   }
3791 }
3792 ```
3793 ### ManualAppUpdateOnly
3794
3795 Switch to manual updates only.
3796
3797 If this policy is enabled:
3798  1. The user will never be prompted to install updates
3799  2. Firefox will not check for updates in the background, though it will check automatically when an update UI is displayed (such as the one in the About dialog). This check will be used to show "Update to version X" in the UI, but will not automatically download the update or prompt the user to update in any other way.
3800  3. The update UI will work as expected, unlike when using DisableAppUpdate.
3801
3802 This policy is primarily intended for advanced end users, not for enterprises, but it is available via GPO.
3803
3804 **Compatibility:** Firefox 87\
3805 **CCK2 Equivalent:** N/A\
3806 **Preferences Affected:** N/A
3807
3808 #### Windows (GPO)
3809 ```
3810 Software\Policies\Mozilla\Firefox\ManualAppUpdateOnly = 0x1 | 0x0
3811 ```
3812 #### Windows (Intune)
3813 OMA-URI:
3814 ```
3815 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/ManualAppUpdateOnly
3816 ```
3817 Value (string):
3818 ```
3819 <enabled/> or <disabled/>
3820 ```
3821 #### macOS
3822 ```
3823 <dict>
3824   <key>ManualAppUpdateOnly</key>
3825   <true/> | <false/>
3826 </dict>
3827 ```
3828 #### policies.json
3829 ```
3830 {
3831   "policies": {
3832     "ManualAppUpdateOnly": true | false
3833   }
3834 }
3835 ```
3836 ### NetworkPrediction
3837 Enable or disable network prediction (DNS prefetching).
3838
3839 **Compatibility:** Firefox 67, Firefox ESR 60.7\
3840 **CCK2 Equivalent:** N/A\
3841 **Preferences Affected:** `network.dns.disablePrefetch`, `network.dns.disablePrefetchFromHTTPS`
3842
3843 #### Windows (GPO)
3844 ```
3845 Software\Policies\Mozilla\Firefox\NetworkPrediction = 0x1 | 0x0
3846 ```
3847 #### Windows (Intune)
3848 OMA-URI:
3849 ```
3850 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NetworkPrediction
3851 ```
3852 Value (string):
3853 ```
3854 <enabled/> or <disabled/>
3855 ```
3856 #### macOS
3857 ```
3858 <dict>
3859   <key>NetworkPrediction</key>
3860   <true/> | <false/>
3861 </dict>
3862 ```
3863 #### policies.json
3864 ```
3865 {
3866   "policies": {
3867     "NetworkPrediction": true | false
3868 }
3869 ```
3870 ### NewTabPage
3871 Enable or disable the New Tab page.
3872
3873 **Compatibility:** Firefox 68, Firefox ESR 68\
3874 **CCK2 Equivalent:** N/A\
3875 **Preferences Affected:** `browser.newtabpage.enabled`
3876
3877 #### Windows (GPO)
3878 ```
3879 Software\Policies\Mozilla\Firefox\NewTabPage = 0x1 | 0x0
3880 ```
3881 #### Windows (Intune)
3882 OMA-URI:
3883 ```
3884 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NewTabPage
3885 ```
3886 Value (string):
3887 ```
3888 <enabled/> or <disabled/>
3889 ```
3890 #### macOS
3891 ```
3892 <dict>
3893   <key>NewTabPage</key>
3894   <true/> | <false/>
3895 </dict>
3896 ```
3897 #### policies.json
3898 ```
3899 {
3900   "policies": {
3901     "NewTabPage": true | false
3902 }
3903 ```
3904 ### NoDefaultBookmarks
3905 Disable the creation of default bookmarks.
3906
3907 This policy is only effective if the user profile has not been created yet.
3908
3909 **Compatibility:** Firefox 60, Firefox ESR 60\
3910 **CCK2 Equivalent:** `removeDefaultBookmarks`\
3911 **Preferences Affected:** N/A
3912
3913 #### Windows (GPO)
3914 ```
3915 Software\Policies\Mozilla\Firefox\NoDefaultBookmarks = 0x1 | 0x0
3916 ```
3917 #### Windows (Intune)
3918 OMA-URI:
3919 ```
3920 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NoDefaultBookmarks
3921 ```
3922 Value (string):
3923 ```
3924 <enabled/> or <disabled/>
3925 ```
3926 #### macOS
3927 ```
3928 <dict>
3929   <key>NoDefaultBookmarks</key>
3930   <true/> | <false/>
3931 </dict>
3932 ```
3933 #### policies.json
3934 ```
3935 {
3936   "policies": {
3937     "NoDefaultBookmarks": true | false
3938   }
3939 }
3940 ```
3941 ### OfferToSaveLogins
3942 Control whether or not Firefox offers to save passwords.
3943
3944 **Compatibility:** Firefox 60, Firefox ESR 60\
3945 **CCK2 Equivalent:** `dontRememberPasswords`\
3946 **Preferences Affected:** `signon.rememberSignons`
3947
3948 #### Windows (GPO)
3949 ```
3950 Software\Policies\Mozilla\Firefox\OfferToSaveLogins = 0x1 | 0x0
3951 ```
3952 #### Windows (Intune)
3953 OMA-URI:
3954 ```
3955 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OfferToSaveLogins
3956 ```
3957 Value (string):
3958 ```
3959 <enabled/> or <disabled/>
3960 ```
3961 #### macOS
3962 ```
3963 <dict>
3964   <key>OfferToSaveLogins</key>
3965   <true/> | <false/>
3966 </dict>
3967 ```
3968 #### policies.json
3969 ```
3970 {
3971   "policies": {
3972     "OfferToSaveLogins": true | false
3973   }
3974 }
3975 ```
3976 ### OfferToSaveLoginsDefault
3977 Sets the default value of signon.rememberSignons without locking it.
3978
3979 **Compatibility:** Firefox 70, Firefox ESR 60.2\
3980 **CCK2 Equivalent:** `dontRememberPasswords`\
3981 **Preferences Affected:** `signon.rememberSignons`
3982
3983 #### Windows (GPO)
3984 ```
3985 Software\Policies\Mozilla\Firefox\OfferToSaveLoginsDefault = 0x1 | 0x0
3986 ```
3987 #### Windows (Intune)
3988 OMA-URI:
3989 ```
3990 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OfferToSaveLoginsDefault
3991 ```
3992 Value (string):
3993 ```
3994 <enabled/> or <disabled/>
3995 ```
3996 #### macOS
3997 ```
3998 <dict>
3999   <key>OfferToSaveLoginsDefault</key>
4000   <true/> | <false/>
4001 </dict>
4002 ```
4003 #### policies.json
4004 ```
4005 {
4006   "policies": {
4007     "OfferToSaveLoginsDefault": true | false
4008   }
4009 }
4010 ```
4011 ### OverrideFirstRunPage
4012 Override the first run page. If the value is an empty string (""), the first run page is not displayed.
4013
4014 Starting with Firefox 83, Firefox ESR 78.5, you can also specify multiple URLS separated by a vertical bar (|).
4015
4016 **Compatibility:** Firefox 60, Firefox ESR 60\
4017 **CCK2 Equivalent:** `welcomePage`,`noWelcomePage`\
4018 **Preferences Affected:** `startup.homepage_welcome_url`
4019
4020 #### Windows (GPO)
4021 ```
4022 Software\Policies\Mozilla\Firefox\OverrideFirstRunPage = "http://example.org"
4023 ```
4024 #### Windows (Intune)
4025 OMA-URI:
4026 ```
4027 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OverrideFirstRunPage
4028 ```
4029 Value (string):
4030 ```
4031 <enabled/>
4032 <data id="OverridePage" value="https://example.com"/>
4033 ```
4034 #### macOS
4035 ```
4036 <dict>
4037   <key>OverrideFirstRunPage</key>
4038   <string>http://example.org</string>
4039 </dict>
4040 ```
4041 #### policies.json
4042 ```
4043 {
4044   "policies": {
4045     "OverrideFirstRunPage": "http://example.org"
4046   }
4047 }
4048 ```
4049 ### OverridePostUpdatePage
4050 Override the upgrade page. If the value is an empty string (""), no extra pages are displayed when Firefox is upgraded.
4051
4052 **Compatibility:** Firefox 60, Firefox ESR 60\
4053 **CCK2 Equivalent:** `upgradePage`,`noUpgradePage`\
4054 **Preferences Affected:** `startup.homepage_override_url`
4055
4056 #### Windows (GPO)
4057 ```
4058 Software\Policies\Mozilla\Firefox\OverridePostUpdatePage = "http://example.org"
4059 ```
4060 #### Windows (Intune)
4061 OMA-URI:
4062 ```
4063 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OverridePostUpdatePage
4064 ```
4065 Value (string):
4066 ```
4067 <enabled/>
4068 <data id="OverridePage" value="https://example.com"/>
4069 ```
4070 #### macOS
4071 ```
4072 <dict>
4073   <key>OverridePostUpdatePage</key>
4074   <string>http://example.org</string>
4075 </dict>
4076 ```
4077 #### policies.json
4078 ```
4079 {
4080   "policies": {
4081     "OverridePostUpdatePage": "http://example.org"
4082   }
4083 }
4084 ```
4085 ### PasswordManagerEnabled
4086 Remove access to the password manager via preferences and blocks about:logins on Firefox 70.
4087
4088 **Compatibility:** Firefox 70, Firefox ESR 60.2\
4089 **CCK2 Equivalent:** N/A\
4090 **Preferences Affected:** `pref.privacy.disable_button.view_passwords`
4091
4092 #### Windows (GPO)
4093 ```
4094 Software\Policies\Mozilla\Firefox\PasswordManagerEnabled = 0x1 | 0x0
4095 ```
4096 #### Windows (Intune)
4097 OMA-URI:
4098 ```
4099 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PasswordManagerEnabled
4100 ```
4101 Value (string):
4102 ```
4103 <enabled/> or <disabled/>
4104 ```
4105 #### macOS
4106 ```
4107 <dict>
4108   <key>PasswordManagerEnabled</key>
4109   <true/> | <false/>
4110 </dict>
4111 ```
4112 #### policies.json
4113 ```
4114 {
4115   "policies": {
4116     "PasswordManagerEnabled": true | false
4117   }
4118 }
4119 ```
4120 ### PasswordManagerExceptions
4121 Prevent Firefox from saving passwords for specific sites.
4122
4123 The sites are specified as a list of origins.
4124
4125 **Compatibility:** Firefox 101\
4126 **CCK2 Equivalent:** N/A\
4127 **Preferences Affected:** N/A
4128
4129 #### Windows (GPO)
4130 ```
4131 Software\Policies\Mozilla\Firefox\PasswordManagerExceptions\1 = "https://example.org"
4132 Software\Policies\Mozilla\Firefox\PasswordManagerExceptions\2 = "https://example.edu"
4133 ```
4134 #### Windows (Intune)
4135 OMA-URI:
4136 ```
4137 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PasswordManagerExceptions
4138 ```
4139 Value (string):
4140 ```
4141 <enabled/>
4142 <data id="List" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
4143 ```
4144 #### macOS
4145 ```
4146 <dict>
4147   <key>PasswordManagerExceptions</key>
4148   <array>
4149     <string>https://example.org</string>
4150     <string>https://example.edu</string>
4151   </array>
4152 </dict>
4153 ```
4154 #### policies.json
4155 ```
4156 {
4157   "policies": {
4158     "PasswordManagerExceptions": ["https://example.org",
4159                                   "https://example.edu"]
4160   }
4161 }
4162 ```
4163
4164 ### PDFjs
4165 Disable or configure PDF.js, the built-in PDF viewer.
4166
4167 If `Enabled` is set to false, the built-in PDF viewer is disabled.
4168
4169 If `EnablePermissions` is set to true, the built-in PDF viewer will honor document permissions like preventing the copying of text.
4170
4171 Note: DisableBuiltinPDFViewer has not been deprecated. You can either continue to use it, or switch to using PDFjs->Enabled to disable the built-in PDF viewer. This new permission was added because we needed a place for PDFjs->EnabledPermissions.
4172
4173 **Compatibility:** Firefox 77, Firefox ESR 68.9\
4174 **CCK2 Equivalent:** N/A\
4175 **Preferences Affected:** `pdfjs.disabled`, `pdfjs.enablePermissions`
4176
4177 #### Windows (GPO)
4178 ```
4179 Software\Policies\Mozilla\Firefox\PDFjs\Enabled = 0x1 | 0x0
4180 Software\Policies\Mozilla\Firefox\PDFjs\EnablePermissions = 0x1 | 0x0
4181 ```
4182 #### Windows (Intune)
4183 OMA-URI:
4184 ```
4185 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PDFjs/PDFjs_Enabled
4186 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PDFjs/PDFjs_EnablePermissions
4187 ```
4188 Value (string):
4189 ```
4190 <enabled/>or <disabled/>
4191 ```
4192 #### macOS
4193 ```
4194 <dict>
4195   <key>PDFjs</key>
4196   <dict>
4197     <key>Enabled</key>
4198     <true/> | <false/>
4199     <key>EnablePermissions</key>
4200     <true/> | <false/>
4201   </dict>
4202 </dict>
4203 ```
4204 #### policies.json
4205 ```
4206 {
4207   "policies": {
4208     "PDFjs": {
4209       "Enabled": true | false,
4210       "EnablePermissions": true | false
4211     }
4212   }
4213 }
4214 ```
4215 ### Permissions
4216 Set permissions associated with camera, microphone, location, notifications, autoplay, and virtual reality. Because these are origins, not domains, entries with unique ports must be specified separately. This explicitly means that it is not possible to add wildcards. See examples below.
4217
4218 `Allow` is a list of origins where the feature is allowed.
4219
4220 `Block` is a list of origins where the feature is not allowed.
4221
4222 `BlockNewRequests` determines whether or not new requests can be made for the feature.
4223
4224 `Locked` prevents the user from changing preferences for the feature.
4225
4226 `Default` specifies the default value for Autoplay. block-audio-video is not supported on Firefox ESR 68.
4227
4228 **Compatibility:** Firefox 62, Firefox ESR 60.2 (Autoplay added in Firefox 74, Firefox ESR 68.6, Autoplay Default/Locked added in Firefox 76, Firefox ESR 68.8, VirtualReality added in Firefox 80, Firefox ESR 78.2)\
4229 **CCK2 Equivalent:** N/A\
4230 **Preferences Affected:** `permissions.default.camera`, `permissions.default.microphone`, `permissions.default.geo`, `permissions.default.desktop-notification`, `media.autoplay.default`, `permissions.default.xr`
4231
4232 #### Windows (GPO)
4233 ```
4234 Software\Policies\Mozilla\Firefox\Permissions\Camera\Allow\1 = "https://example.org"
4235 Software\Policies\Mozilla\Firefox\Permissions\Camera\Allow\2 = "https://example.org:1234"
4236 Software\Policies\Mozilla\Firefox\Permissions\Camera\Block\1 = "https://example.edu"
4237 Software\Policies\Mozilla\Firefox\Permissions\Camera\BlockNewRequests = 0x1 | 0x0
4238 Software\Policies\Mozilla\Firefox\Permissions\Camera\Locked = 0x1 | 0x0
4239 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Allow\1 = "https://example.org"
4240 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Block\1 = "https://example.edu"
4241 Software\Policies\Mozilla\Firefox\Permissions\Microphone\BlockNewRequests = 0x1 | 0x0
4242 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Locked = 0x1 | 0x0
4243 Software\Policies\Mozilla\Firefox\Permissions\Location\Allow\1 = "https://example.org"
4244 Software\Policies\Mozilla\Firefox\Permissions\Location\Block\1 = "https://example.edu"
4245 Software\Policies\Mozilla\Firefox\Permissions\Location\BlockNewRequests = 0x1 | 0x0
4246 Software\Policies\Mozilla\Firefox\Permissions\Location\Locked = 0x1 | 0x0
4247 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Allow\1 = "https://example.org"
4248 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Block\1 = "https://example.edu"
4249 Software\Policies\Mozilla\Firefox\Permissions\Notifications\BlockNewRequests = 0x1 | 0x0
4250 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Locked = 0x1 | 0x0
4251 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Allow\1 = "https://example.org"
4252 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Block\1 = "https://example.edu"
4253 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Default = "allow-audio-video" | "block-audio" | "block-audio-video"
4254 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Locked = 0x1 | 0x0
4255 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\Allow\1 = "https://example.org"
4256 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\Block\1 = "https://example.edu"
4257 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\BlockNewRequests = 0x1 | 0x0
4258 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\Locked = 0x1 | 0x0
4259 ```
4260 #### Windows (Intune)
4261 OMA-URI:
4262 ```
4263 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Location/Location_BlockNewRequests
4264 ```
4265 Value (string):
4266 ```
4267 <enabled/> or <disabled/>
4268 ```
4269 OMA-URI:
4270 ```
4271 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Location/Location_Locked
4272 ```
4273 Value (string):
4274 ```
4275 <enabled/> or <disabled/>
4276 ```
4277 OMA-URI:
4278 ```
4279 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_Allow
4280 ```
4281 Value (string):
4282 ```
4283 <enabled/>
4284 <data id="Permissions" value="1&#xF000;https://example.org"/>
4285 ```
4286 OMA-URI:
4287 ```
4288 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_BlockNewRequests
4289 ```
4290 Value (string):
4291 ```
4292 <enabled/> or <disabled/>
4293 ```
4294 OMA-URI:
4295 ```
4296 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_Locked
4297 ```
4298 Value (string):
4299 ```
4300 <enabled/> or <disabled/>
4301 ```
4302 OMA-URI:
4303 ```
4304 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Allow
4305 ```
4306 Value (string):
4307 ```
4308 <enabled/>
4309 <data id="Permissions" value="1&#xF000;https://example.org"/>
4310 ```
4311 OMA-URI:
4312 ```
4313 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Block
4314 ```
4315 Value (string):
4316 ```
4317 <enabled/>
4318 <data id="Permissions" value="1&#xF000;https://example.edu"/>
4319 ```
4320 OMA-URI:
4321 ```
4322 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Default
4323 ```
4324 Value (string):
4325 ```
4326 <enabled/>
4327 <data id="Autoplay_Default" value="allow-audio-video | block-audio | block-audio-video"/>
4328 ```
4329 OMA-URI:
4330 ```
4331 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Locked
4332 ```
4333 Value (string):
4334 ```
4335 <enabled/> or <disabled/>
4336 ```
4337 OMA-URI:
4338 ```
4339 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_Allow
4340 ```
4341 Value (string):
4342 ```
4343 <enabled/>
4344 <data id="Permissions" value="1&#xF000;https://example.org"/>
4345 ```
4346 OMA-URI:
4347 ```
4348 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_Block
4349 ```
4350 Value (string):
4351 ```
4352 <enabled/>
4353 <data id="Permissions" value="1&#xF000;https://example.edu"/>
4354 ```
4355 OMA-URI:
4356 ```
4357 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_BlockNewRequests
4358 ```
4359 Value (string):
4360 ```
4361 <enabled/> or <disabled/>
4362 ```
4363 OMA-URI:
4364 ```
4365 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_Locked
4366 ```
4367 Value (string):
4368 ```
4369 <enabled/> or <disabled/>
4370 ```
4371 #### macOS
4372 ```
4373 <dict>
4374   <key>Permissions</key>
4375   <dict>
4376     <key>Camera</key>
4377     <dict>
4378       <key>Allow</key>
4379       <array>
4380         <string>https://example.org</string>
4381         <string>https://example.org:1234</string>
4382       </array>
4383       <key>Block</key>
4384       <array>
4385         <string>https://example.edu</string>
4386       </array>
4387       <key>BlockNewRequests</key>
4388       <true/> | <false/>
4389       <key>Locked</key>
4390       <true/> | <false/>
4391     </dict>
4392     <key>Microphone</key>
4393     <dict>
4394       <key>Allow</key>
4395       <array>
4396         <string>https://example.org</string>
4397       </array>
4398       <key>Block</key>
4399       <array>
4400         <string>https://example.edu</string>
4401       </array>
4402       <key>BlockNewRequests</key>
4403       <true/> | <false/>
4404       <key>Locked</key>
4405       <true/> | <false/>
4406     </dict>
4407     <key>Location</key>
4408     <dict>
4409       <key>Allow</key>
4410       <array>
4411         <string>https://example.org</string>
4412       </array>
4413       <key>Block</key>
4414       <array>
4415         <string>https://example.edu</string>
4416       </array>
4417       <key>BlockNewRequests</key>
4418       <true/> | <false/>
4419       <key>Locked</key>
4420       <true/> | <false/>
4421     </dict>
4422     <key>Notifications</key>
4423     <dict>
4424       <key>Allow</key>
4425       <array>
4426         <string>https://example.org</string>
4427       </array>
4428       <key>Block</key>
4429       <array>
4430         <string>https://example.edu</string>
4431       </array>
4432       <key>BlockNewRequests</key>
4433       <true/>
4434       <key>Locked</key>
4435       <true/>
4436     </dict>
4437     <key>Autoplay</key>
4438     <dict>
4439       <key>Allow</key>
4440       <array>
4441         <string>https://example.org</string>
4442       </array>
4443       <key>Block</key>
4444       <array>
4445         <string>https://example.edu</string>
4446       </array>
4447       <key>Default</key>
4448       <string>allow-audio-video | block-audio | block-audio-video</string>
4449       <key>Locked</key>
4450       <true/> | <false/>
4451     </dict>
4452   </dict>
4453 </dict>
4454 ```
4455 #### policies.json
4456 ```
4457 {
4458   "policies": {
4459     "Permissions": {
4460       "Camera": {
4461         "Allow": ["https://example.org","https://example.org:1234"],
4462         "Block": ["https://example.edu"],
4463         "BlockNewRequests": true | false,
4464         "Locked": true | false
4465       },
4466       "Microphone": {
4467         "Allow": ["https://example.org"],
4468         "Block": ["https://example.edu"],
4469         "BlockNewRequests": true | false,
4470         "Locked": true | false
4471       },
4472       "Location": {
4473         "Allow": ["https://example.org"],
4474         "Block": ["https://example.edu"],
4475         "BlockNewRequests": true | false,
4476         "Locked": true | false
4477       },
4478       "Notifications": {
4479         "Allow": ["https://example.org"],
4480         "Block": ["https://example.edu"],
4481         "BlockNewRequests": true | false,
4482         "Locked": true | false
4483       },
4484       "Autoplay": {
4485         "Allow": ["https://example.org"],
4486         "Block": ["https://example.edu"],
4487         "Default": "allow-audio-video" | "block-audio" | "block-audio-video",
4488         "Locked": true | false
4489       }
4490     }
4491   }
4492 }
4493 ```
4494 ### PictureInPicture
4495
4496 Enable or disable Picture-in-Picture as well as prevent the user from enabling or disabling it (Locked).
4497
4498 **Compatibility:** Firefox 78, Firefox ESR 78\
4499 **CCK2 Equivalent:** N/A\
4500 **Preferences Affected:** `media.videocontrols.picture-in-picture.video-toggle.enabled`
4501
4502 #### Windows (GPO)
4503 ```
4504 Software\Policies\Mozilla\Firefox\PictureInPicture\Enabled = 0x1 | 0x0
4505 Software\Policies\Mozilla\Firefox\PictureInPicture\Locked = 0x1 | 0x0
4506
4507 ```
4508 #### Windows (Intune)
4509 OMA-URI:
4510 ```
4511 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PictureInPicture/PictureInPicture_Enabled
4512 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PictureInPicture/PictureInPicture_Locked
4513 ```
4514 Value (string):
4515 ```
4516 <enabled/> or <disabled/>
4517 ```
4518 #### macOS
4519 ```
4520 <dict>
4521   <key>PictureInPicture</key>
4522   <dict>
4523     <key>Enabled</key>
4524     <true/> | <false/>
4525     <key>Locked</key>
4526     <true/> | <false/>
4527   </dict>
4528 </dict>
4529 ```
4530 #### policies.json
4531 ```
4532 {
4533   "policies": {
4534     "PictureInPicture": {
4535       "Enabled": true | false,
4536       "Locked": true | false
4537     }
4538   }
4539 }
4540 ```
4541 ### PopupBlocking
4542 Configure the default pop-up window policy as well as origins for which pop-up windows are allowed.
4543
4544 `Allow` is a list of origins where popup-windows are allowed.
4545
4546 `Default` determines whether or not pop-up windows are allowed by default.
4547
4548 `Locked` prevents the user from changing pop-up preferences.
4549
4550 **Compatibility:** Firefox 60, Firefox ESR 60\
4551 **CCK2 Equivalent:** `permissions.popup`\
4552 **Preferences Affected:** `dom.disable_open_during_load`
4553
4554 #### Windows (GPO)
4555 ```
4556 Software\Policies\Mozilla\Firefox\PopupBlocking\Allow\1 = "https://example.org"
4557 Software\Policies\Mozilla\Firefox\PopupBlocking\Allow\2 = "https://example.edu"
4558 Software\Policies\Mozilla\Firefox\PopupBlocking\Default = 0x1 | 0x0
4559 Software\Policies\Mozilla\Firefox\PopupBlocking\Locked = 0x1 | 0x0
4560 ```
4561 #### Windows (Intune)
4562 OMA-URI:
4563 ```
4564 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Allow
4565 ```
4566 Value (string):
4567 ```
4568 <enabled/>
4569 <data id="Permissions" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
4570 ```
4571 OMA-URI:
4572 ```
4573 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Default
4574 ```
4575 Value (string):
4576 ```
4577 <enabled/> or <disabled/>
4578 ```
4579 OMA-URI:
4580 ```
4581 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Locked
4582 ```
4583 Value (string):
4584 ```
4585 <enabled/> or <disabled/>
4586 ```
4587 #### macOS
4588 ```
4589 <dict>
4590   <key>PopupBlocking</key>
4591   <dict>
4592     <key>Allow</key>
4593     <array>
4594       <string>http://example.org</string>
4595       <string>http://example.edu</string>
4596     </array>
4597     <key>Default</key>
4598     <true/> | <false/>
4599     <key>Locked</key>
4600     <true/> | <false/>
4601   </dict>
4602 </dict>
4603 ```
4604 #### policies.json
4605 ```
4606 {
4607   "policies": {
4608     "PopupBlocking": {
4609       "Allow": ["http://example.org/",
4610                 "http://example.edu/"],
4611       "Default": true | false,
4612       "Locked": true | false
4613     }
4614   }
4615 }
4616 ```
4617 ### Preferences
4618 Set and lock preferences.
4619
4620 **NOTE** On Windows, in order to use this policy, you must clear all settings in the old **Preferences (Deprecated)** section in group policy.
4621
4622 Previously you could only set and lock a subset of preferences. Starting with Firefox 81 and Firefox ESR 78.3 you can set many more preferences. You can also set default preferences, user preferences and you can clear preferences.
4623
4624 Preferences that start with the following prefixes are supported:
4625 ```
4626 accessibility.
4627 alerts.* (Firefox 122, Firefox ESR 115.7)
4628 app.update.* (Firefox 86, Firefox ESR 78.8)
4629 browser.
4630 datareporting.policy.
4631 dom.
4632 extensions.
4633 general.autoScroll (Firefox 83, Firefox ESR 78.5)
4634 general.smoothScroll (Firefox 83, Firefox ESR 78.5)
4635 geo.
4636 gfx.
4637 intl.
4638 keyword.enabled (Firefox 95, Firefox ESR 91.4)
4639 layers.
4640 layout.
4641 media.
4642 network.
4643 pdfjs. (Firefox 84, Firefox ESR 78.6)
4644 places.
4645 pref.
4646 print.
4647 signon. (Firefox 83, Firefox ESR 78.5)
4648 spellchecker. (Firefox 84, Firefox ESR 78.6)
4649 toolkit.legacyUserProfileCustomizations.stylesheets (Firefox 95, Firefox ESR 91.4)
4650 ui.
4651 widget.
4652 xpinstall.signatures.required (Firefox ESR 102.10, Firefox ESR only)
4653 xpinstall.whitelist.required (Firefox 118, Firefox ESR 115.3)
4654 ```
4655 as well as the following security preferences:
4656
4657 | Preference | Type | Default
4658 | --- | --- | --- |
4659 | security.default_personal_cert | string | Ask Every Time
4660 | &nbsp;&nbsp;&nbsp;&nbsp;If set to Select Automatically, Firefox automatically chooses the default personal certificate.
4661 | security.disable_button.openCertManager | string | N/A
4662 | &nbsp;&nbsp;&nbsp;&nbsp;If set to true and locked, the View Certificates button in preferences is disabled (Firefox 121, Firefox ESR 115.6)
4663 | security.disable_button.openDeviceManager | string | N/A
4664 | &nbsp;&nbsp;&nbsp;&nbsp;If set to true and locked, the Security Devices button in preferences is disabled (Firefox 121, Firefox ESR 115.6)
4665 | security.insecure_connection_text.enabled | bool | false
4666 | &nbsp;&nbsp;&nbsp;&nbsp;If set to true, adds the words "Not Secure" for insecure sites.
4667 | security.insecure_connection_text.pbmode.enabled | bool | false
4668 | &nbsp;&nbsp;&nbsp;&nbsp;If set to true, adds the words "Not Secure" for insecure sites in private browsing.
4669 | security.mixed_content.block_active_content | boolean | true
4670 | &nbsp;&nbsp;&nbsp;&nbsp;If false, mixed active content (HTTP and HTTPS) is not blocked.
4671 | security.osclientcerts.autoload | boolean | false
4672 | &nbsp;&nbsp;&nbsp;&nbsp;If true, client certificates are loaded from the operating system certificate store.
4673 | security.OCSP.enabled | integer | 1
4674 | &nbsp;&nbsp;&nbsp;&nbsp;If 0, do not fetch OCSP. If 1, fetch OCSP for DV and EV certificates. If 2, fetch OCSP only for EV certificates.
4675 | security.OCSP.require | boolean | false
4676 | &nbsp;&nbsp;&nbsp;&nbsp; If true, if an OCSP request times out, the connection fails.
4677 | security.osclientcerts.assume_rsa_pss_support | boolean | true
4678 | &nbsp;&nbsp;&nbsp;&nbsp; If false, we don't assume an RSA key can do RSA-PSS. (Firefox 114, Firefox ESR 102.12)
4679 | security.ssl.enable_ocsp_stapling | boolean | true
4680 | &nbsp;&nbsp;&nbsp;&nbsp; If false, OCSP stapling is not enabled.
4681 | security.ssl.errorReporting.enabled | boolean | true
4682 | &nbsp;&nbsp;&nbsp;&nbsp;If false, SSL errors cannot be sent to Mozilla.
4683 | security.ssl.require_safe_negotiation | boolean | false
4684 | &nbsp;&nbsp;&nbsp;&nbsp;If true, Firefox will only negotiate TLS connections with servers that indicate they support secure renegotiation. (Firefox 118, Firefox ESR 115.3)
4685 | security.tls.enable_0rtt_data | boolean | true
4686 | &nbsp;&nbsp;&nbsp;&nbsp;If false, TLS early data is turned off. (Firefox 93, Firefox 91.2, Firefox 78.15)
4687 | security.tls.hello_downgrade_check | boolean | true
4688 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the TLS 1.3 downgrade check is disabled.
4689 | security.tls.version.enable-deprecated | boolean | false
4690 | &nbsp;&nbsp;&nbsp;&nbsp;If true, browser will accept TLS 1.0. and TLS 1.1. (Firefox 86, Firefox 78.8)
4691 | security.warn_submit_secure_to_insecure | boolean | true
4692 | &nbsp;&nbsp;&nbsp;&nbsp;If false, no warning is shown when submitting a form from https to http.
4693
4694 Using the preference as the key, set the `Value` to the corresponding preference value.
4695
4696 `Status` can be "default", "locked", "user" or "clear"
4697
4698 * `"default"`: Read/Write: Settings appear as default even if factory default differs.
4699 * `"locked"`: Read-Only: Settings appear as default even if factory default differs.
4700 * `"user"`: Read/Write: Settings appear as changed if it differs from factory default.
4701 * `"clear"`: Read/Write: `Value` has no effect. Resets to factory defaults on each startup.
4702
4703 `"user"` preferences persist across invocations of Firefox. It is the equivalent of a user setting the preference. They are most useful when a preference is needed very early in startup so it can't be set as default by policy. An example of this is ```toolkit.legacyUserProfileCustomizations.stylesheets```.
4704
4705 `"user"` preferences persist even if the policy is removed, so if you need to remove them, you should use the clear policy.
4706
4707 You can also set the `Type` starting in Firefox 123 and Firefox ESR 115.8. It can be `number`, `boolean` or `string`. This is especially useful if you are seeing 0 or 1 values being converted to booleans when set as user preferences.
4708
4709 See the examples below for more detail.
4710
4711 IMPORTANT: Make sure you're only setting a particular preference using this mechanism and not some other way.
4712
4713 Status
4714 **Compatibility:** Firefox 81, Firefox ESR 78.3\
4715 **CCK2 Equivalent:** `preferences`\
4716 **Preferences Affected:** Many
4717
4718 #### Windows (GPO)
4719 Software\Policies\Mozilla\Firefox\Preferences (REG_MULTI_SZ) =
4720 ```
4721 {
4722   "accessibility.force_disabled": {
4723     "Value": 1,
4724     "Status": "default",
4725     "Type": "number"
4726
4727   },
4728   "browser.cache.disk.parent_directory": {
4729     "Value": "SOME_NATIVE_PATH",
4730     "Status": "user"
4731   },
4732   "browser.tabs.warnOnClose": {
4733     "Value": false,
4734     "Status": "locked"
4735   }
4736 }
4737 ```
4738 #### Windows (Intune)
4739 OMA-URI:
4740 ```
4741 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Preferences
4742 ```
4743 Value (string):
4744 ```
4745 <enabled/>
4746 <data id="JSON" value='
4747 {
4748   "accessibility.force_disabled": {
4749     "Value": 1,
4750     "Status": "default",
4751     "Type": "number"
4752   },
4753   "browser.cache.disk.parent_directory": {
4754     "Value": "SOME_NATIVE_PATH",
4755     "Status": "user"
4756   },
4757   "browser.tabs.warnOnClose": {
4758     "Value": false,
4759     "Status": "locked"
4760   }
4761 }'/>
4762 ```
4763 #### macOS
4764 ```
4765 <dict>
4766   <key>Preferences</key>
4767   <dict>
4768     <key>accessibility.force_disabled</key>
4769     <dict>
4770       <key>Value</key>
4771       <integer>1</integer>
4772       <key>Status</key>
4773       <string>default</string>
4774       <key>Type</key>
4775       <string>number</string>
4776     </dict>
4777     <key>browser.cache.disk.parent_directory</key>
4778     <dict>
4779       <key>Value</key>
4780       <string>SOME_NATIVE_PATH</string>
4781       <key>Status</key>
4782       <string>user</string>
4783     </dict>
4784     <key>browser.tabs.warnOnClose</key>
4785     <dict>
4786       <key>Value</key>
4787       <false/>
4788       <key>Status</key>
4789       <string>locked</string>
4790     </dict>
4791   </dict>
4792 </dict>
4793 ```
4794 #### policies.json
4795 ```
4796 {
4797   "policies": {
4798     "Preferences": {
4799       "accessibility.force_disabled": {
4800         "Value": 1,
4801         "Status": "default"
4802         "Type": "number"
4803       },
4804       "browser.cache.disk.parent_directory": {
4805         "Value": "SOME_NATIVE_PATH",
4806         "Status": "user"
4807       },
4808       "browser.tabs.warnOnClose": {
4809         "Value": false,
4810         "Status": "locked"
4811       }
4812     }
4813   }
4814 }
4815 ```
4816 ### PrimaryPassword
4817 Require or prevent using a primary (formerly master) password.
4818
4819 If this value is true, a primary password is required. If this value is false, it works the same as if [`DisableMasterPasswordCreation`](#disablemasterpasswordcreation) was true and removes the primary password functionality.
4820
4821 If both DisableMasterPasswordCreation and PrimaryPassword are used, DisableMasterPasswordCreation takes precedent.
4822
4823 **Compatibility:** Firefox 79, Firefox ESR 78.1\
4824 **CCK2 Equivalent:** `noMasterPassword`\
4825 **Preferences Affected:** N/A
4826
4827 #### Windows (GPO)
4828 ```
4829 Software\Policies\Mozilla\Firefox\PrimaryPassword = 0x1 | 0x0
4830 ```
4831 #### Windows (Intune)
4832 OMA-URI:
4833 ```
4834 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PrimaryPassword
4835 ```
4836 Value (string):
4837 ```
4838 <enabled/> or <disabled/>
4839 ```
4840 #### macOS
4841 ```
4842 <dict>
4843   <key>PrimaryPassword</key>
4844   <true/> | <false/>
4845 </dict>
4846 ```
4847 #### policies.json
4848 ```
4849 {
4850   "policies": {
4851     "PrimaryPassword": true | false
4852   }
4853 }
4854 ```
4855 ### PrintingEnabled
4856 Enable or disable printing.
4857
4858 **Compatibility:** Firefox 120, Firefox ESR 115.5\
4859 **CCK2 Equivalent:** N/A\
4860 **Preferences Affected:** `print.enabled`
4861
4862 #### Windows (GPO)
4863 ```
4864 Software\Policies\Mozilla\Firefox\PrintingEnabled = 0x1 | 0x0
4865 ```
4866 #### Windows (Intune)
4867 OMA-URI:
4868 ```
4869 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PrintingEnabled
4870 ```
4871 Value (string):
4872 ```
4873 <enabled/> or <disabled/>
4874 ```
4875 #### macOS
4876 ```
4877 <dict>
4878   <key>PrintingEnabled</key>
4879   <true/> | <false/>
4880 </dict>
4881 ```
4882 #### policies.json
4883 ```
4884 {
4885   "policies": {
4886     "PrintingEnabled": true | false
4887   }
4888 }
4889 ```
4890 ### PromptForDownloadLocation
4891 Ask where to save each file before downloading.
4892
4893 **Compatibility:** Firefox 68, Firefox ESR 68\
4894 **CCK2 Equivalent:** N/A\
4895 **Preferences Affected:** `browser.download.useDownloadDir`
4896
4897 #### Windows (GPO)
4898 ```
4899 Software\Policies\Mozilla\Firefox\PromptForDownloadLocation = 0x1 | 0x0
4900 ```
4901 #### Windows (Intune)
4902 OMA-URI:
4903 ```
4904 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PromptForDownloadLocation
4905 ```
4906 Value (string):
4907 ```
4908 <enabled/> or <disabled/>
4909 ```
4910 #### macOS
4911 ```
4912 <dict>
4913   <key>PromptForDownloadLocation</key>
4914   <true/> | <false/>
4915 </dict>
4916 ```
4917 #### policies.json
4918 ```
4919 {
4920   "policies": {
4921     "PromptForDownloadLocation": true | false
4922   }
4923 }
4924 ```
4925 ### Proxy
4926 Configure proxy settings. These settings correspond to the connection settings in Firefox preferences.
4927 To specify ports, append them to the hostnames with a colon (:).
4928
4929 Unless you lock this policy, changes the user already has in place will take effect.
4930
4931 `Mode` is the proxy method being used.
4932
4933 `Locked` is whether or not proxy settings can be changed.
4934
4935 `HTTPProxy` is the HTTP proxy server.
4936
4937 `UseHTTPProxyForAllProtocols` is whether or not the HTTP proxy should be used for all other proxies.
4938
4939 `SSLProxy` is the SSL proxy server.
4940
4941 `FTPProxy` is the FTP proxy server.
4942
4943 `SOCKSProxy` is the SOCKS proxy server
4944
4945 `SOCKSVersion` is the SOCKS version (4 or 5)
4946
4947 `Passthrough` is list of hostnames or IP addresses that will not be proxied. Use `<local>` to bypass proxying for all hostnames which do not contain periods.
4948
4949 `AutoConfigURL` is a  URL for proxy configuration (only used if Mode is autoConfig).
4950
4951 `AutoLogin` means do not prompt for authentication if password is saved.
4952
4953 `UseProxyForDNS` to use proxy DNS when using SOCKS v5.
4954
4955 **Compatibility:** Firefox 60, Firefox ESR 60\
4956 **CCK2 Equivalent:** `networkProxy*`\
4957 **Preferences Affected:** `network.proxy.type`, `network.proxy.autoconfig_url`, `network.proxy.socks_remote_dns`, `signon.autologin.proxy`, `network.proxy.socks_version`, `network.proxy.no_proxies_on`, `network.proxy.share_proxy_settings`, `network.proxy.http`, `network.proxy.http_port`, `network.proxy.ftp`, `network.proxy.ftp_port`, `network.proxy.ssl`, `network.proxy.ssl_port`, `network.proxy.socks`, `network.proxy.socks_port`
4958
4959 #### Windows (GPO)
4960 ```
4961 Software\Policies\Mozilla\Firefox\Proxy\Mode = "none" | "system" | "manual" | "autoDetect" | "autoConfig"
4962 Software\Policies\Mozilla\Firefox\Proxy\Locked = 0x1 | 0x0
4963 Software\Policies\Mozilla\Firefox\Proxy\HTTPProxy = https://httpproxy.example.com
4964 Software\Policies\Mozilla\Firefox\Proxy\UseHTTPProxyForAllProtocols = 0x1 | 0x0
4965 Software\Policies\Mozilla\Firefox\Proxy\SSLProxy = https://sslproxy.example.com
4966 Software\Policies\Mozilla\Firefox\Proxy\FTPProxy = https://ftpproxy.example.com
4967 Software\Policies\Mozilla\Firefox\Proxy\SOCKSProxy = https://socksproxy.example.com
4968 Software\Policies\Mozilla\Firefox\Proxy\SOCKSVersion = 0x4 | 0x5
4969 Software\Policies\Mozilla\Firefox\Proxy\Passthrough = <local>
4970 Software\Policies\Mozilla\Firefox\Proxy\AutoConfigURL = URL_TO_AUTOCONFIG
4971 Software\Policies\Mozilla\Firefox\Proxy\AutoLogin = 0x1 | 0x0
4972 Software\Policies\Mozilla\Firefox\Proxy\UseProxyForDNS = 0x1 | 0x0
4973 ```
4974 #### Windows (Intune)
4975 **Note**
4976 These setttings were moved to a category to make them easier to configure via Intune.
4977
4978 OMA-URI:
4979 ```
4980 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ProxySettings/Proxy_Locked
4981 ```
4982 Value (string):
4983 ```
4984 <enabled/> or <disabled/>
4985 ```
4986 OMA-URI:
4987 ```
4988 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ProxySettings/Proxy_ConnectionType
4989 ```
4990 Value (string):
4991 ```
4992 <enabled/>
4993 <data id="Proxy_ConnectionType" value="none | system | manual | autoDetect | autoConfig"/>
4994 ```
4995 OMA-URI:
4996 ```
4997 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ProxySettings/Proxy_HTTPProxy
4998 ```
4999 Value (string):
5000 ```
5001 <enabled/>
5002 <data id="Proxy_HTTPProxy" value="httpproxy.example.com"/>
5003 ```
5004 OMA-URI:
5005 ```
5006 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ProxySettings/Proxy_UseHTTPProxyForAllProtocols
5007 ```
5008 Value (string):
5009 ```
5010 <enabled/> or <disabled/>
5011 ```
5012 OMA-URI:
5013 ```
5014 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ProxySettings/Proxy_SSLProxy
5015 ```
5016 Value (string):
5017 ```
5018 <enabled/>
5019 <data id="Proxy_SSLProxy" value="sslproxy.example.com"/>
5020 ```
5021 OMA-URI:
5022 ```
5023 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ProxySettings/Proxy_SOCKSProxy
5024 ```
5025 Value (string):
5026 ```
5027 <enabled/>
5028 <data id="Proxy_SOCKSProxy" value="socksproxy.example.com"/>
5029 <data id="Proxy_SOCKSVersion" value="4 | 5"/>
5030 ```
5031 OMA-URI:
5032 ```
5033 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ProxySettings/Proxy_AutoConfigURL
5034 ```
5035 Value (string):
5036 ```
5037 <enabled/>
5038 <data id="Proxy_AutoConfigURL" value="URL_TO_AUTOCONFIG"/>
5039 ```
5040 OMA-URI:
5041 ```
5042 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ProxySettings/Proxy_Passthrough
5043 ```
5044 Value (string):
5045 ```
5046 <enabled/>
5047 <data id="Proxy_Passthrough" value="&lt;local&gt;"/>
5048 ```
5049 OMA-URI:
5050 ```
5051 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ProxySettings/Proxy_AutoLogin
5052 ```
5053 Value (string):
5054 ```
5055 <enabled/> or <disabled/>
5056 ```
5057 OMA-URI:
5058 ```
5059 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ProxySettings/Proxy_UseProxyForDNS
5060 ```
5061 Value (string):
5062 ```
5063 <enabled/> or <disabled/>
5064 ```
5065 OMA-URI (Old way):
5066 ```
5067 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Proxy
5068 ```
5069 Value (string):
5070 ```
5071 <enabled/>
5072 <data id="ProxyLocked" value="true | false"/>
5073 <data id="ConnectionType" value="none | system | manual | autoDetect | autoConfig"/>
5074 <data id="HTTPProxy" value="httpproxy.example.com"/>
5075 <data id="UseHTTPProxyForAllProtocols" value="true | false"/>
5076 <data id="SSLProxy" value="sslproxy.example.com"/>
5077 <data id="FTPProxy" value="ftpproxy.example.com"/>
5078 <data id="SOCKSProxy" value="socksproxy.example.com"/>
5079 <data id="SOCKSVersion" value="4 | 5"/>
5080 <data id="AutoConfigURL" value="URL_TO_AUTOCONFIG"/>
5081 <data id="Passthrough" value="<local>"/>
5082 <data id="AutoLogin" value="true | false"/>
5083 <data id="UseProxyForDNS" value="true | false"/>
5084 ```
5085 #### macOS
5086 ```
5087 <dict>
5088   <key>Proxy</key>
5089   <dict>
5090     <key>Mode</key>
5091     <string>none | system | manual | autoDetect | autoConfig</string>
5092     <key>Locked</key>
5093     <true> | </false>
5094     <key>HTTPProxy</key>
5095     <string>https://httpproxy.example.com</string>
5096     <key>UseHTTPProxyForAllProtocols</key>
5097     <true> | </false>
5098     <key>SSLProxy</key>
5099     <string>https://sslproxy.example.com</string>
5100     <key>FTPProxy</key>
5101     <string>https://ftpproxy.example.com</string>
5102     <key>SOCKSProxy</key>
5103     <string>https://socksproxy.example.com</string>
5104     <key>SOCKSVersion</key>
5105     <string>4 | 5</string>
5106     <key>Passthrough</key>
5107     <string>&lt;local>&gt;</string>
5108     <key>AutoConfigURL</key>
5109     <string>URL_TO_AUTOCONFIG</string>
5110     <key>AutoLogin</key>
5111     <true> | </false>
5112     <key>UseProxyForDNS</key>
5113     <true> | </false>
5114   </dict>
5115 </dict>
5116 ```
5117 #### policies.json
5118 ```
5119 {
5120   "policies": {
5121     "Proxy": {
5122       "Mode": "none" | "system" | "manual" | "autoDetect" | "autoConfig",
5123       "Locked": true | false,
5124       "HTTPProxy": "hostname",
5125       "UseHTTPProxyForAllProtocols": true | false,
5126       "SSLProxy": "hostname",
5127       "FTPProxy": "hostname",
5128       "SOCKSProxy": "hostname",
5129       "SOCKSVersion": 4 | 5,
5130       "Passthrough": "<local>",
5131       "AutoConfigURL": "URL_TO_AUTOCONFIG",
5132       "AutoLogin": true | false,
5133       "UseProxyForDNS": true | false
5134     }
5135   }
5136 }
5137 ```
5138 ### RequestedLocales
5139 Set the the list of requested locales for the application in order of preference. It will cause the corresponding language pack to become active.
5140
5141 Note: For Firefox 68, this can now be a string so that you can specify an empty value.
5142
5143 **Compatibility:** Firefox 64, Firefox ESR 60.4, Updated in Firefox 68, Firefox ESR 68\
5144 **CCK2 Equivalent:** N/A\
5145 **Preferences Affected:** N/A
5146 #### Windows (GPO)
5147 ```
5148 Software\Policies\Mozilla\Firefox\RequestedLocales\1 = "de"
5149 Software\Policies\Mozilla\Firefox\RequestedLocales\2 = "en-US"
5150
5151 or
5152
5153 Software\Policies\Mozilla\Firefox\RequestedLocales = "de,en-US"
5154 ```
5155 #### Windows (Intune)
5156 OMA-URI:
5157 ```
5158 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/RequestedLocalesString
5159 ```
5160 Value (string):
5161 ```
5162 <enabled/>
5163 <data id="Preferences_String" value="de,en-US"/>
5164 ```
5165 #### macOS
5166 ```
5167 <dict>
5168   <key>RequestedLocales</key>
5169   <array>
5170     <string>de</string>
5171     <string>en-US</string>
5172   </array>
5173 </dict>
5174
5175 or
5176
5177 <dict>
5178   <key>RequestedLocales</key>
5179   <string>de,en-US</string>
5180 </dict>
5181
5182 ```
5183 #### policies.json
5184 ```
5185 {
5186   "policies": {
5187     "RequestedLocales": ["de", "en-US"]
5188   }
5189 }
5190
5191 or
5192
5193 {
5194   "policies": {
5195     "RequestedLocales": "de,en-US"
5196   }
5197 }
5198 ```
5199 <a name="SanitizeOnShutdown"></a>
5200
5201 ### SanitizeOnShutdown (Selective)
5202 Clear data on shutdown. Choose from Cache, Cookies, Download History, Form & Search History, Browsing History, Active Logins, Site Preferences and Offline Website Data.
5203
5204 Previously, these values were always locked. Starting with Firefox 74 and Firefox ESR 68.6, you can use the `Locked` option to either keep the values unlocked (set it to false), or lock only the values you set (set it to true). If you want the old behavior of locking everything, do not set `Locked` at all.
5205
5206 **Compatibility:** Firefox 68, Firefox ESR 68 (Locked added in 74/68.6)\
5207 **CCK2 Equivalent:** N/A\
5208 **Preferences Affected:** `privacy.sanitize.sanitizeOnShutdown`, `privacy.clearOnShutdown.cache`, `privacy.clearOnShutdown.cookies`, `privacy.clearOnShutdown.downloads`, `privacy.clearOnShutdown.formdata`, `privacy.clearOnShutdown.history`, `privacy.clearOnShutdown.sessions`, `privacy.clearOnShutdown.siteSettings`, `privacy.clearOnShutdown.offlineApps`
5209 #### Windows (GPO)
5210 ```
5211 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Cache = 0x1 | 0x0
5212 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Cookies = 0x1 | 0x0
5213 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Downloads = 0x1 | 0x0
5214 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\FormData = 0x1 | 0x0
5215 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\History = 0x1 | 0x0
5216 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Sessions = 0x1 | 0x0
5217 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\SiteSettings = 0x1 | 0x0
5218 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\OfflineApps = 0x1 | 0x0
5219 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Locked = 0x1 | 0x0
5220 ```
5221 #### Windows (Intune)
5222 OMA-URI:
5223 ```
5224 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/A_SanitizeOnShutdown_Cache
5225 ```
5226 Value (string):
5227 ```
5228 <enabled/> or <disabled/>
5229 ```
5230 OMA-URI:
5231 ```
5232 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/B_SanitizeOnShutdown_Cookies
5233 ```
5234 Value (string):
5235 ```
5236 <enabled/> or <disabled/>
5237 ```
5238 OMA-URI:
5239 ```
5240 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/C_SanitizeOnShutdown_Downloads
5241 ```
5242 Value (string):
5243 ```
5244 <enabled/> or <disabled/>
5245 ```
5246 OMA-URI:
5247 ```
5248 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/D_SanitizeOnShutdown_FormData
5249 ```
5250 Value (string):
5251 ```
5252 <enabled/> or <disabled/>
5253 ```
5254 OMA-URI:
5255 ```
5256 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/E_SanitizeOnShutdown_History
5257 ```
5258 Value (string):
5259 ```
5260 <enabled/> or <disabled/>
5261 ```
5262 OMA-URI:
5263 ```
5264 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/F_SanitizeOnShutdown_Sessions
5265 ```
5266 Value (string):
5267 ```
5268 <enabled/> or <disabled/>
5269 ```
5270 OMA-URI:
5271 ```
5272 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/G_SanitizeOnShutdown_SiteSettings
5273 ```
5274 Value (string):
5275 ```
5276 <enabled/> or <disabled/>
5277 ```
5278 OMA-URI:
5279 ```
5280 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/H_SanitizeOnShutdown_OfflineApps
5281 ```
5282 Value (string):
5283 ```
5284 <enabled/> or <disabled/>
5285 ```
5286 OMA-URI:
5287 ```
5288 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/I_SanitizeOnShutdown_Locked
5289 ```
5290 Value (string):
5291 ```
5292 <enabled/> or <disabled/>
5293 ```
5294 #### macOS
5295 ```
5296 <dict>
5297   <key>SanitizeOnShutdown</key>
5298   <dict>
5299     <key>Cache</key>
5300     <true/> | <false/>
5301     <key>Cookies</key>
5302     <true/> | <false/>
5303     <key>Downloads</key>
5304     <true/> | <false/>
5305     <key>FormData</key>
5306     <true/> | <false/>
5307     <key>History</key>
5308     <true/> | <false/>
5309     <key>Sessions</key>
5310     <true/> | <false/>
5311     <key>SiteSettings</key>
5312     <true/> | <false/>
5313     <key>OfflineApps</key>
5314     <true/> | <false/>
5315     <key>Locked</key>
5316     <true/> | <false/>
5317   </dict>
5318 </dict>
5319 ```
5320 #### policies.json
5321 ```
5322 {
5323   "policies": {
5324     "SanitizeOnShutdown": {
5325       "Cache": true | false,
5326       "Cookies": true | false,
5327       "Downloads": true | false,
5328       "FormData": true | false,
5329       "History": true | false,
5330       "Sessions": true | false,
5331       "SiteSettings": true | false,
5332       "OfflineApps": true | false,
5333       "Locked": true | false
5334     }
5335   }
5336 }
5337 ```
5338 ### SanitizeOnShutdown (All)
5339 Clear all data on shutdown, including Browsing & Download History, Cookies, Active Logins, Cache, Form & Search History, Site Preferences and Offline Website Data.
5340
5341 **Compatibility:** Firefox 60, Firefox ESR 60\
5342 **CCK2 Equivalent:** N/A\
5343 **Preferences Affected:** `privacy.sanitize.sanitizeOnShutdown`, `privacy.clearOnShutdown.cache`, `privacy.clearOnShutdown.cookies`, `privacy.clearOnShutdown.downloads`, `privacy.clearOnShutdown.formdata`, `privacy.clearOnShutdown.history`, `privacy.clearOnShutdown.sessions`, `privacy.clearOnShutdown.siteSettings`, `privacy.clearOnShutdown.offlineApps`
5344 #### Windows (GPO)
5345 ```
5346 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown = 0x1 | 0x0
5347 ```
5348 #### Windows (Intune)
5349 OMA-URI:
5350 ```
5351 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/C_SanitizeOnShutdown
5352 ```
5353 Value (string):
5354 ```
5355 <enabled/> or <disabled/>
5356 ```
5357 #### macOS
5358 ```
5359 <dict>
5360   <key>SanitizeOnShutdown</key>
5361   <true/> | <false/>
5362 </dict>
5363 ```
5364 #### policies.json
5365 ```
5366 {
5367   "policies": {
5368     "SanitizeOnShutdown": true | false
5369   }
5370 }
5371 ```
5372 ### SearchBar
5373 Set whether or not search bar is displayed.
5374
5375 **Compatibility:** Firefox 60, Firefox ESR 60\
5376 **CCK2 Equivalent:** `showSearchBar`\
5377 **Preferences Affected:** N/A
5378
5379 #### Windows (GPO)
5380 ```
5381 Software\Policies\Mozilla\Firefox\SearchBar = "unified" | "separate"
5382 ```
5383
5384 #### Windows (Intune)
5385 OMA-URI:
5386 ```
5387 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SearchBar
5388 ```
5389 Value (string):
5390 ```
5391 <enabled/>
5392 <data id="SearchBar" value="unified | separate"/>
5393 ```
5394 #### macOS
5395 ```
5396 <dict>
5397   <key>SearchBar</key>
5398   <string>unified | separate</string>
5399 </dict>
5400 ```
5401 #### policies.json
5402 ```
5403 {
5404   "policies": {
5405     "SearchBar": "unified" | "separate"
5406   }
5407 }
5408 ```
5409 <a name="SearchEngines"></a>
5410
5411 ### SearchEngines (This policy is only available on the ESR.)
5412
5413 ### SearchEngines | Add
5414
5415 Add new search engines. Although there are only five engines available in the ADMX template, there is no limit. To add more in the ADMX template, you can duplicate the XML.
5416
5417 This policy is only available on the ESR. `Name` and `URLTemplate` are required.
5418
5419 `Name` is the name of the search engine.
5420
5421 `URLTemplate` is the search URL with {searchTerms} to substitute for the search term.
5422
5423 `Method` is either GET or POST
5424
5425 `IconURL` is a URL for the icon to use.
5426
5427 `Alias` is a keyword to use for the engine.
5428
5429 `Description` is a description of the search engine.
5430
5431 `PostData` is the POST data as name value pairs separated by &.
5432
5433 `SuggestURLTemplate` is a search suggestions URL with {searchTerms} to substitute for the search term.
5434
5435 `Encoding` is the query charset for the engine. It defaults to UTF-8.
5436
5437 **Compatibility:** Firefox ESR 60 (POST support in Firefox ESR 68, Encoding support in Firefox 91)\
5438 **CCK2 Equivalent:** `searchplugins`\
5439 **Preferences Affected:** N/A
5440
5441 #### Windows (GPO)
5442 ```
5443 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Name = "Example1"
5444 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\URLTemplate = "https://www.example.org/q={searchTerms}"
5445 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Method = "GET" | "POST"
5446 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\IconURL = "https://www.example.org/favicon.ico"
5447 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Alias = "example"
5448 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Description = "Example Description"
5449 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\SuggestURLTemplate = "https://www.example.org/suggestions/q={searchTerms}"
5450 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\PostData = "name=value&q={searchTerms}"
5451 ```
5452 #### Windows (Intune)
5453 OMA-URI:
5454 ```
5455 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_1
5456 ```
5457 Value (string):
5458 ```
5459 <enabled/>
5460 <data id="SearchEngine_Name" value="Example1"/>
5461 <data id="SearchEngine_URLTemplate" value="https://www.example.org/q={searchTerms"/>
5462 <data id="SearchEngine_Method" value="GET | POST"/>
5463 <data id="SearchEngine_IconURL" value="https://www.example.org/favicon.ico"/>
5464 <data id="SearchEngine_Alias" value="example"/>
5465 <data id="SearchEngine_Description" value="Example Description"/>
5466 <data id="SearchEngine_SuggestURLTemplate" value="https://www.example.org/suggestions/q={searchTerms}"/>
5467 <data id="SearchEngine_PostData" value="name=value&amp;q={searchTerms}"/>
5468 ```
5469 #### macOS
5470 ```
5471 <dict>
5472   <key>SearchEngines</key>
5473   <dict>
5474     <key>Add</key>
5475     <array>
5476       <dict>
5477         <key>Name</key>
5478         <string>Example1</string>
5479         <key>URLTemplate</key>
5480         <string>https://www.example.org/q={searchTerms}</string>
5481         <key>Method</key>
5482         <string>GET | POST </string>
5483         <key>IconURL</key>
5484         <string>https://www.example.org/favicon.ico</string>
5485         <key>Alias</key>
5486         <string>example</string>
5487         <key>Description</key>
5488         <string>Example Description</string>
5489         <key>SuggestURLTemplate</key>
5490         <string>https://www.example.org/suggestions/q={searchTerms}</string>
5491         <key>PostData</key>
5492         <string>name=value&q={searchTerms}</string>
5493       </dict>
5494     <array>
5495   </dict>
5496 </dict>
5497 ```
5498 #### policies.json
5499 ```
5500 {
5501   "policies": {
5502     "SearchEngines": {
5503       "Add": [
5504         {
5505           "Name": "Example1",
5506           "URLTemplate": "https://www.example.org/q={searchTerms}",
5507           "Method": "GET" | "POST",
5508           "IconURL": "https://www.example.org/favicon.ico",
5509           "Alias": "example",
5510           "Description": "Description",
5511           "PostData": "name=value&q={searchTerms}",
5512           "SuggestURLTemplate": "https://www.example.org/suggestions/q={searchTerms}"
5513         }
5514       ]
5515     }
5516   }
5517 }
5518 ```
5519 ### SearchEngines | Default
5520
5521 Set the default search engine. This policy is only available on the ESR.
5522
5523 **Compatibility:** Firefox ESR 60\
5524 **CCK2 Equivalent:** `defaultSearchEngine`\
5525 **Preferences Affected:** N/A
5526
5527 #### Windows (GPO)
5528 ```
5529 Software\Policies\Mozilla\Firefox\SearchEngines\Default = NAME_OF_SEARCH_ENGINE
5530 ```
5531 #### Windows (Intune)
5532 OMA-URI:
5533 ```
5534 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_Default
5535 ```
5536 Value (string):
5537 ```
5538 <enabled/>
5539 <data id="SearchEngines_Default" value="NAME_OF_SEARCH_ENGINE"/>
5540 ```
5541 #### macOS
5542 ```
5543 <dict>
5544   <key>SearchEngines</key>
5545   <dict>
5546     <key>Default</key>
5547     <string>NAME_OF_SEARCH_ENGINE</string>
5548   </dict>
5549 </dict>
5550 ```
5551 #### policies.json
5552 ```
5553 {
5554   "policies": {
5555     "SearchEngines": {
5556       "Default": "NAME_OF_SEARCH_ENGINE"
5557     }
5558   }
5559 }
5560 ```
5561 ### SearchEngines | PreventInstalls
5562
5563 Prevent installing search engines from webpages.
5564
5565 **Compatibility:** Firefox ESR 60\
5566 **CCK2 Equivalent:** `disableSearchEngineInstall`\
5567 **Preferences Affected:** N/A
5568
5569 #### Windows (GPO)
5570 ```
5571 Software\Policies\Mozilla\Firefox\SearchEngines\PreventInstalls = 0x1 | 0x0
5572 ```
5573 #### Windows (Intune)
5574 OMA-URI:
5575 ```
5576 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_PreventInstalls
5577 ```
5578 Value (string):
5579 ```
5580 <enabled/> or <disabled/>
5581 ```
5582 #### macOS
5583 ```
5584 <dict>
5585   <key>SearchEngines</key>
5586   <dict>
5587     <key>PreventInstalls</key>
5588     <true/> | <false/>
5589   </dict>
5590 </dict>
5591 ```
5592 #### policies.json
5593 ```
5594 {
5595   "policies": {
5596     "SearchEngines": {
5597       "PreventInstalls": true | false
5598     }
5599   }
5600 }
5601 ```
5602 ### SearchEngines | Remove
5603
5604 Hide built-in search engines. This policy is only available on the ESR.
5605
5606 **Compatibility:** Firefox ESR 60.2\
5607 **CCK2 Equivalent:** `removeDefaultSearchEngines` (removed all built-in engines)\
5608 **Preferences Affected:** N/A
5609
5610 #### Windows (GPO)
5611 ```
5612 Software\Policies\Mozilla\Firefox\SearchEngines\Remove\1 = NAME_OF_SEARCH_ENGINE
5613 ```
5614 #### Windows (Intune)
5615 OMA-URI:
5616 ```
5617 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_Remove
5618 ```
5619 Value (string):
5620 ```
5621 <enabled/>
5622 <data id="SearchEngines_Remove" value="1&#xF000;NAME_OF_SEARCH_ENGINE"/>
5623 ```
5624 #### macOS
5625 ```
5626 <dict>
5627   <key>SearchEngines</key>
5628   <dict>
5629     <key>Remove</key>
5630     <array>
5631       <string>NAME_OF_SEARCH_ENGINE</string>
5632     </array>
5633   </dict>
5634 </dict>
5635 ```
5636 #### policies.json
5637 ```
5638 {
5639   "policies": {
5640     "SearchEngines": {
5641       "Remove": ["NAME_OF_SEARCH_ENGINE"]
5642     }
5643   }
5644 }
5645 ```
5646 ### SearchSuggestEnabled
5647
5648 Enable search suggestions.
5649
5650 **Compatibility:** Firefox 68, Firefox ESR 68\
5651 **CCK2 Equivalent:** N/A\
5652 **Preferences Affected:** `browser.urlbar.suggest.searches`, `browser.search.suggest.enabled`
5653
5654 #### Windows (GPO)
5655 ```
5656 Software\Policies\Mozilla\Firefox\SearchSuggestEnabled = 0x1 | 0x0
5657 ```
5658 #### Windows (Intune)
5659 OMA-URI:
5660 ```
5661 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchSuggestEnabled
5662 ```
5663 Value (string):
5664 ```
5665 <enabled/> or <disabled/>
5666 ```
5667 #### macOS
5668 ```
5669 <dict>
5670   <key>SearchSuggestEnabled</key>
5671   <true/> | <false/>
5672 </dict>
5673 ```
5674 #### policies.json
5675 ```
5676 {
5677   "policies": {
5678     "SearchSuggestEnabled": true | false
5679   }
5680 }
5681 ```
5682 ### SecurityDevices
5683
5684 Add or delete PKCS #11 modules.
5685
5686 **Compatibility:** Firefox 114, Firefox ESR 112.12\
5687 **CCK2 Equivalent:** N/A\
5688 **Preferences Affected:** N/A
5689
5690 #### Windows (GPO)
5691 ```
5692 Software\Policies\Mozilla\Firefox\SecurityDevices\Add\NAME_OF_DEVICE_TO_ADD = PATH_TO_LIBRARY_FOR_DEVICE
5693 Software\Policies\Mozilla\Firefox\SecurityDevices\Remove\1 = NAME_OF_DEVICE_TO_REMOVE
5694 ```
5695 #### Windows (Intune)
5696 OMA-URI:
5697 ```
5698 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SecurityDevices/SecurityDevices_Add
5699 ```
5700 Value (string):
5701 ```
5702 <enabled/>
5703 <data id="SecurityDevices" value="NAME_OF_DEVICE_TO_ADD&#xF000;PATH_TO_LIBRARY_FOR_DEVICE"/>
5704 ```
5705 OMA-URI:
5706 ```
5707 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SecurityDevices/SecurityDevices_Delete
5708 ```
5709 Value (string):
5710 ```
5711 <enabled/>
5712 <data id="SecurityDevices" value="1&#xF000;NAME_OF_DEVICE_TO_REMOVE"/>
5713 ```
5714 #### macOS
5715 ```
5716 <dict>
5717   <key>SecurityDevices</key>
5718   <dict>
5719     <key>Add<key>
5720     <dict>
5721       <key>NAME_OF_DEVICE_TO_ADD</key>
5722       <string>PATH_TO_LIBRARY_FOR_DEVICE</string>
5723     </dict>
5724     <key>Delete</add>
5725     <array>
5726       <string>NAME_OF_DEVICE_TO_DELETE</string>
5727     </array>
5728   </dict>
5729 </dict>
5730 ```
5731 #### policies.json
5732 ```
5733 {
5734   "policies": {
5735     "SecurityDevices": {
5736       "Add": {
5737         "NAME_OF_DEVICE_TO_ADD": "PATH_TO_LIBRARY_FOR_DEVICE"
5738       },
5739       "Delete": ["NAME_OF_DEVICE_TO_DELETE"]
5740     }
5741   }
5742 }
5743 ```
5744 ### SecurityDevices (Deprecated)
5745
5746 Install PKCS #11 modules.
5747
5748 **Compatibility:** Firefox 64, Firefox ESR 60.4\
5749 **CCK2 Equivalent:** `certs.devices`\
5750 **Preferences Affected:** N/A
5751
5752 #### Windows (GPO)
5753 ```
5754 Software\Policies\Mozilla\Firefox\SecurityDevices\NAME_OF_DEVICE = PATH_TO_LIBRARY_FOR_DEVICE
5755 ```
5756 #### Windows (Intune)
5757 OMA-URI:
5758 ```
5759 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SecurityDevices
5760 ```
5761 Value (string):
5762 ```
5763 <enabled/>
5764 <data id="SecurityDevices" value="NAME_OF_DEVICE&#xF000;PATH_TO_LIBRARY_FOR_DEVICE"/>
5765 ```
5766 #### macOS
5767 ```
5768 <dict>
5769   <key>SecurityDevices</key>
5770   <dict>
5771     <key>NAME_OF_DEVICE</key>
5772     <string>PATH_TO_LIBRARY_FOR_DEVICE</string>
5773   </dict>
5774 </dict>
5775 ```
5776 #### policies.json
5777 ```
5778 {
5779   "policies": {
5780     "SecurityDevices": {
5781       "NAME_OF_DEVICE": "PATH_TO_LIBRARY_FOR_DEVICE"
5782     }
5783   }
5784 }
5785 ```
5786 ### ShowHomeButton
5787 Show the home button on the toolbar.
5788
5789 Future versions of Firefox will not show the home button by default.
5790
5791 **Compatibility:** Firefox 88, Firefox ESR 78.10\
5792 **CCK2 Equivalent:** N/A\
5793 **Preferences Affected:** N/A
5794
5795 #### Windows (GPO)
5796 ```
5797 Software\Policies\Mozilla\Firefox\ShowHomeButton = 0x1 | 0x0
5798 ```
5799 #### Windows (Intune)
5800 OMA-URI:
5801 ```
5802 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/Homepage_ShowHomeButton
5803 ```
5804 Value (string):
5805 ```
5806 <enabled/> or <disabled/>
5807 ```
5808 #### macOS
5809 ```
5810 <dict>
5811   <key>ShowHomeButton</key>
5812   <true/> | <false/>
5813 </dict>
5814 ```
5815 #### policies.json
5816 ```
5817 {
5818   "policies": {
5819     "ShowHomeButton": true | false
5820   }
5821 }
5822 ```
5823 ### SSLVersionMax
5824
5825 Set and lock the maximum version of TLS. (Firefox defaults to a maximum of TLS 1.3.)
5826
5827 **Compatibility:** Firefox 66, Firefox ESR 60.6\
5828 **CCK2 Equivalent:** N/A\
5829 **Preferences Affected:** `security.tls.version.max`
5830
5831 #### Windows (GPO)
5832 ```
5833 Software\Policies\Mozilla\Firefox\SSLVersionMax = "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
5834 ```
5835 #### Windows (Intune)
5836 OMA-URI:
5837 ```
5838 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SSLVersionMax
5839 ```
5840 Value (string):
5841 ```
5842 <enabled/>
5843 <data id="SSLVersion" value="tls1 | tls1.2 | tls1.3"/>
5844 ```
5845 #### macOS
5846 ```
5847 <dict>
5848   <key>SSLVersionMax</key>
5849   <string>tls1 | tls1.1 | tls1.2 | tls1.3</string>
5850 </dict>
5851 ```
5852
5853 #### policies.json
5854 ```
5855 {
5856   "policies": {
5857     "SSLVersionMax": "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
5858   }
5859 }
5860 ```
5861 ### SSLVersionMin
5862
5863 Set and lock the minimum version of TLS. (Firefox defaults to a minimum of TLS 1.2.)
5864
5865 **Compatibility:** Firefox 66, Firefox ESR 60.6\
5866 **CCK2 Equivalent:** N/A\
5867 **Preferences Affected:** `security.tls.version.min`
5868
5869 #### Windows (GPO)
5870 ```
5871 Software\Policies\Mozilla\Firefox\SSLVersionMin = "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
5872 ```
5873 #### Windows (Intune)
5874 OMA-URI:
5875 ```
5876 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SSLVersionMin
5877 ```
5878 Value (string):
5879 ```
5880 <enabled/>
5881 <data id="SSLVersion" value="tls1 | tls1.2 | tls1.3"/>
5882 ```
5883 #### macOS
5884 ```
5885 <dict>
5886   <key>SSLVersionMin</key>
5887   <string>tls1 | tls1.1 | tls1.2 | tls1.3</string>
5888 </dict>
5889 ```
5890
5891 #### policies.json
5892 ```
5893 {
5894   "policies": {
5895     "SSLVersionMin": "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
5896   }
5897 }
5898 ```
5899 ### SupportMenu
5900 Add a menuitem to the help menu for specifying support information.
5901
5902 **Compatibility:** Firefox 68.0.1, Firefox ESR 68.0.1\
5903 **CCK2 Equivalent:** helpMenu\
5904 **Preferences Affected:** N/A
5905
5906 #### Windows (GPO)
5907 ```
5908 Software\Policies\Mozilla\Firefox\SupportMenu\Title = "Support Menu"
5909 Software\Policies\Mozilla\Firefox\SupportMenu\URL = "http://example.com/support"
5910 Software\Policies\Mozilla\Firefox\SupportMenu\AccessKey = "S"
5911 ```
5912 #### Windows (Intune)
5913 OMA-URI:
5914 ```
5915 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SupportMenu
5916 ```
5917 Value (string):
5918 ```
5919 <enabled/>
5920 <data id="SupportMenuTitle" value="Support Menu"/>
5921 <data id="SupportMenuURL" value="http://example.com/support"/>
5922 <data id="SupportMenuAccessKey" value="S"/>
5923 ```
5924 #### macOS
5925 ```
5926 <dict>
5927   <key>SupportMenu</key>
5928   <dict>
5929     <key>Title</key>
5930     <string>SupportMenu</string>
5931     <key>URL</key>
5932     <string>http://example.com/support</string>
5933     <key>AccessKey</key>
5934     <string>S</string>
5935   </dict>
5936 </dict>
5937 ```
5938 #### policies.json
5939 ```
5940 {
5941   "policies": {
5942     "SupportMenu": {
5943       "Title": "Support Menu",
5944       "URL": "http://example.com/support",
5945       "AccessKey": "S"
5946     }
5947   }
5948 }
5949 ```
5950 ### StartDownloadsInTempDirectory
5951 Force downloads to start off in a local, temporary location rather than the default download directory.
5952
5953 **Compatibility:** Firefox 102\
5954 **CCK2 Equivalent:** N/A\
5955 **Preferences Affected:** `browser.download.start_downloads_in_tmp_dir`
5956
5957 #### Windows (GPO)
5958 ```
5959 Software\Policies\Mozilla\Firefox\StartDownloadsInTempDirectory = 0x1 | 0x0
5960 ```
5961 #### Windows (Intune)
5962 OMA-URI:
5963 ```
5964 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/StartDownloadsInTempDirectory
5965 ```
5966 Value (string):
5967 ```
5968 <enabled/> or <disabled/>
5969 ```
5970 #### macOS
5971 ```
5972 <dict>
5973   <key>StartDownloadsInTempDirectory</key>
5974   <true/> | <false/>
5975 </dict>
5976 ```
5977 #### policies.json
5978 ```
5979 {
5980   "policies": {
5981     "StartDownloadsInTempDirectory": true | false
5982 }
5983 ```
5984 ### UserMessaging
5985
5986 Prevent Firefox from messaging the user in certain situations.
5987
5988 `WhatsNew` Remove the "What's New" icon and menuitem.
5989
5990 `ExtensionRecommendations` If false, don't recommend extensions while the user is visiting web pages.
5991
5992 `FeatureRecommendations` If false, don't recommend browser features.
5993
5994 `UrlbarInterventions` If false, Don't offer Firefox specific suggestions in the URL bar.
5995
5996 `SkipOnboarding` If true, don't show onboarding messages on the new tab page.
5997
5998 `MoreFromMozilla` If false, don't show the "More from Mozilla" section in Preferences. (Firefox 98)
5999
6000 `Locked` prevents the user from changing user messaging preferences.
6001
6002 **Compatibility:** Firefox 75, Firefox ESR 68.7\
6003 **CCK2 Equivalent:** N/A\
6004 **Preferences Affected:** `browser.messaging-system.whatsNewPanel.enabled`, `browser.newtabpage.activity-stream.asrouter.userprefs.cfr.addons`, `browser.newtabpage.activity-stream.asrouter.userprefs.cfr.features`, `browser.aboutwelcome.enabled`, `browser.preferences.moreFromMozilla`
6005
6006 #### Windows (GPO)
6007 ```
6008 Software\Policies\Mozilla\Firefox\UserMessaging\WhatsNew = 0x1 | 0x0
6009 Software\Policies\Mozilla\Firefox\UserMessaging\ExtensionRecommendations = 0x1 | 0x0
6010 Software\Policies\Mozilla\Firefox\UserMessaging\FeatureRecommendations = 0x1 | 0x0
6011 Software\Policies\Mozilla\Firefox\UserMessaging\UrlbarInterventions = 0x1 | 0x0
6012 Software\Policies\Mozilla\Firefox\UserMessaging\SkipOnboarding = 0x1 | 0x0
6013 Software\Policies\Mozilla\Firefox\UserMessaging\MoreFromMozilla = 0x1 | 0x0
6014 Software\Policies\Mozilla\Firefox\UserMessaging\Locked = 0x1 | 0x0
6015 ```
6016 #### Windows (Intune)
6017 OMA-URI:
6018 ```
6019 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_WhatsNew
6020 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_ExtensionRecommendations
6021 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_FeatureRecommendations
6022 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_UrlbarInterventions
6023 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_SkipOnboarding
6024 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_MoreFromMozilla
6025 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_Locked
6026 ```
6027 Value (string):
6028 ```
6029 <enabled/> or <disabled/>
6030 ```
6031 #### macOS
6032 ```
6033 <dict>
6034   <key>UserMessaging</key>
6035   <dict>
6036     <key>WhatsNew</key>
6037     <true/> | <false/>
6038     <key>ExtensionRecommendations</key>
6039     <true/> | <false/>
6040     <key>FeatureRecommendations</key>
6041     <true/> | <false/>
6042     <key>UrlbarInterventions</key>
6043     <true/> | <false/>
6044     <key>SkipOnboarding</key>
6045     <true/> | <false/>
6046     <key>MoreFromMozilla</key>
6047     <true/> | <false/>
6048     <key>Locked</key>
6049     <true/> | <false/>
6050   </dict>
6051 </dict>
6052 ```
6053 #### policies.json
6054 ```
6055 {
6056   "policies": {
6057     "UserMessaging": {
6058       "WhatsNew": true | false,
6059       "ExtensionRecommendations": true | false,
6060       "FeatureRecommendations": true | false,
6061       "UrlbarInterventions": true | false,
6062       "SkipOnboarding": true | false,
6063       "MoreFromMozilla": true | false,
6064       "Locked": true | false
6065     }
6066   }
6067 }
6068 ```
6069 ### UseSystemPrintDialog
6070 Use the system print dialog instead of the print preview window.
6071
6072 **Compatibility:** Firefox 102\
6073 **CCK2 Equivalent:** N/A\
6074 **Preferences Affected:** `print.prefer_system_dialog`
6075
6076 #### Windows (GPO)
6077 ```
6078 Software\Policies\Mozilla\Firefox\UseSystemPrintDialog = 0x1 | 0x0
6079 ```
6080 #### Windows (Intune)
6081 OMA-URI:
6082 ```
6083 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/UseSystemPrintDialog
6084 ```
6085 Value (string):
6086 ```
6087 <enabled/> or <disabled/>
6088 ```
6089 #### macOS
6090 ```
6091 <dict>
6092   <key>UseSystemPrintDialog</key>
6093   <true/> | <false/>
6094 </dict>
6095 ```
6096 #### policies.json
6097 ```
6098 {
6099   "policies": {
6100     "UseSystemPrintDialog": true | false
6101   }
6102 }
6103 ```
6104 ### WebsiteFilter
6105 Block websites from being visited. The parameters take an array of Match Patterns, as documented in https://developer.mozilla.org/en-US/Add-ons/WebExtensions/Match_patterns.
6106 The arrays are limited to 1000 entries each.
6107
6108 If you want to block all URLs, you can use `<all_urls>` or `*://*/*`. You can't have just a `*` on the right side.
6109
6110 For specific protocols, use `https://*/*` or `http://*/*`.
6111
6112 As of Firefox 83 and Firefox ESR 78.5, file URLs are supported.
6113
6114 **Compatibility:** Firefox 60, Firefox ESR 60\
6115 **CCK2 Equivalent:** N/A\
6116 **Preferences Affected:** N/A
6117
6118 #### Windows (GPO)
6119 ```
6120 Software\Policies\Mozilla\Firefox\WebsiteFilter\Block\1 = "<all_urls>"
6121 Software\Policies\Mozilla\Firefox\WebsiteFilter\Exceptions\1 = "http://example.org/*"
6122 ```
6123 #### Windows (Intune)
6124 OMA-URI:
6125 ```
6126 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/B_WebsiteFilter_Block
6127 ```
6128 Value (string):
6129 ```
6130 <enabled/> <data id="WebsiteFilter" value="1&#xF000;&#60;all_urls&#62;"/>
6131 ```
6132 OMA-URI:
6133 ```
6134 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/B_WebsiteFilter_Exceptions
6135 ```
6136 Value (string):
6137 ```
6138 <enabled/>
6139 <data id="WebsiteFilter" value="1&#xF000;http://example.org/*"/>
6140 ```
6141 #### macOS
6142 ```
6143 <dict>
6144   <key>WebsiteFilter</key>
6145   <dict>
6146     <key>Block</key>
6147     <array>
6148       <string><all_urls></string>
6149     </array>
6150     <key>Exceptions</key>
6151     <array>
6152       <string>http://example.org/*</string>
6153     </array>
6154   </dict>
6155
6156 </dict>
6157 ```
6158 #### policies.json
6159 ```
6160 {
6161   "policies": {
6162     "WebsiteFilter": {
6163       "Block": ["<all_urls>"],
6164       "Exceptions": ["http://example.org/*"]
6165     }
6166   }
6167 }
6168 ```
6169 ### WindowsSSO
6170 Allow Windows single sign-on for Microsoft, work, and school accounts.
6171
6172 If this policy is set to true, Firefox will use credentials stored in Windows to sign in to Microsoft, work, and school accounts.
6173
6174 **Compatibility:** Firefox 91\
6175 **CCK2 Equivalent:** N/A\
6176 **Preferences Affected:** `network.http.windows-sso.enabled`
6177
6178 #### Windows (GPO)
6179 ```
6180 Software\Policies\Mozilla\Firefox\WindowsSSO = 0x1 | 0x0
6181 ```
6182 #### Windows (Intune)
6183 OMA-URI:
6184 ```
6185 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/WindowsSSO
6186 ```
6187 Value (string):
6188 ```
6189 <enabled/> or <disabled/>
6190 ```
6191 #### policies.json
6192 ```
6193 {
6194   "policies": {
6195     "WindowsSSO": true | false
6196   }
6197 }
6198 ```