docs/index.md

   1 Firefox policies can be specified using the [Group Policy templates on Windows](https://github.com/mozilla/policy-templates/tree/master/windows), [Intune on Windows](https://support.mozilla.org/kb/managing-firefox-intune), [configuration profiles on macOS](https://github.com/mozilla/policy-templates/tree/master/mac), or by creating a file called `policies.json`. On Windows, create a directory called `distribution` where the EXE is located and place the file there. On Mac, the file goes into `Firefox.app/Contents/Resources/distribution`.  On Linux, the file goes into `firefox/distribution`, where `firefox` is the installation directory for firefox, which varies by distribution or you can specify system-wide policy by placing the file in `/etc/firefox/policies`.
   2
   3 Unfortunately, JSON files do not support comments, but you can add extra entries to the JSON to use as comments. You will see an error in about:policies, but the policies will still work properly. For example:
   4
   5 ```
   6 {
   7   "policies": {
   8     "Authentication": {
   9       "SPNEGO": ["mydomain.com", "https://myotherdomain.com"]
  10     }
  11     "Authentication_Comment": "These domains are required for us"
  12   }
  13 }
  14 ```
  15
  16 | Policy Name | Description
  17 | --- | --- |
  18 | **[`3rdparty`](#3rdparty)** | Set policies that WebExtensions can access via chrome.storage.managed.
  19 | **[`AllowedDomainsForApps`](#alloweddomainsforapps)** | Define domains allowed to access Google Workspace.
  20 | **[`AllowFileSelectionDialogs`](#allowfileselectiondialogs)** | Allow file selection dialogs.
  21 | **[`AppAutoUpdate`](#appautoupdate)** | Enable or disable automatic application update.
  22 | **[`AppUpdatePin`](#appupdatepin)** | Prevent Firefox from being updated beyond the specified version.
  23 | **[`AppUpdateURL`](#appupdateurl)** | Change the URL for application update.
  24 | **[`Authentication`](#authentication)** | Configure sites that support integrated authentication.
  25 | **[`AutoLaunchProtocolsFromOrigins`](#autolaunchprotocolsfromorigins)** | Define a list of external protocols that can be used from listed origins without prompting the user.
  26 | **[`BackgroundAppUpdate`](#backgroundappupdate)** | Enable or disable the background updater (Windows only).
  27 | **[`BlockAboutAddons`](#blockaboutaddons)** | Block access to the Add-ons Manager (about:addons).
  28 | **[`BlockAboutConfig`](#blockaboutconfig)** | Block access to about:config.
  29 | **[`BlockAboutProfiles`](#blockaboutprofiles)** | Block access to About Profiles (about:profiles).
  30 | **[`BlockAboutSupport`](#blockaboutsupport)** | Block access to Troubleshooting Information (about:support).
  31 | **[`Bookmarks`](#bookmarks)** | Add bookmarks in either the bookmarks toolbar or menu.
  32 | **[`CaptivePortal`](#captiveportal)** | Enable or disable the detection of captive portals.
  33 | **[`Certificates`](#certificates)** |
  34 | **[`Certificates -> ImportEnterpriseRoots`](#certificates--importenterpriseroots)** | Trust certificates that have been added to the operating system certificate store by a user or administrator.
  35 | **[`Certificates -> Install`](#certificates--install)** | Install certificates into the Firefox certificate store.
  36 | **[`Containers`](#containers)** | Set policies related to [containers](https://addons.mozilla.org/firefox/addon/multi-account-containers/).
  37 | **[`Cookies`](#cookies)** | Configure cookie preferences.
  38 | **[`DefaultDownloadDirectory`](#defaultdownloaddirectory)** | Set the default download directory.
  39 | **[`DisableAppUpdate`](#disableappupdate)** | Turn off application updates.
  40 | **[`DisableBuiltinPDFViewer`](#disablebuiltinpdfviewer)** | Disable the built in PDF viewer.
  41 | **[`DisabledCiphers`](#disabledciphers)** | Disable ciphers.
  42 | **[`DisableDefaultBrowserAgent`](#disabledefaultbrowseragent)** | Prevent the default browser agent from taking any actions (Windows only).
  43 | **[`DisableDeveloperTools`](#disabledevelopertools)** | Remove access to all developer tools.
  44 | **[`DisableFeedbackCommands`](#disablefeedbackcommands)** | Disable the menus for reporting sites.
  45 | **[`DisableFirefoxAccounts`](#disablefirefoxaccounts)** | Disable Firefox Accounts integration (Sync).
  46 | **[`DisableFirefoxScreenshots`](#disablefirefoxscreenshots)** | Remove access to Firefox Screenshots.
  47 | **[`DisableFirefoxStudies`](#disablefirefoxstudies)** | Disable Firefox studies (Shield).
  48 | **[`DisableForgetButton`](#disableforgetbutton)** | Disable the "Forget" button.
  49 | **[`DisableFormHistory`](#disableformhistory)** | Turn off saving information on web forms and the search bar.
  50 | **[`DisableMasterPasswordCreation`](#disablemasterpasswordcreation)** | Remove the master password functionality.
  51 | **[`DisablePasswordReveal`](#disablepasswordreveal)** | Do not allow passwords to be revealed in saved logins.
  52 | **[`DisablePocket`](#disablepocket)** | Remove Pocket in the Firefox UI.
  53 | **[`DisablePrivateBrowsing`](#disableprivatebrowsing)** | Remove access to private browsing.
  54 | **[`DisableProfileImport`](#disableprofileimport)** | Disables the "Import data from another browser" option in the bookmarks window.
  55 | **[`DisableProfileRefresh`](#disableprofilerefresh)** | Disable the Refresh Firefox button on about:support and support.mozilla.org
  56 | **[`DisableSafeMode`](#disablesafemode)** | Disable safe mode within the browser.
  57 | **[`DisableSecurityBypass`](#disablesecuritybypass)** | Prevent the user from bypassing security in certain cases.
  58 | **[`DisableSetDesktopBackground`](#disablesetdesktopbackground)** | Remove the "Set As Desktop Background..." menuitem when right clicking on an image.
  59 | **[`DisableSystemAddonUpdate`](#disablesystemaddonupdate)** | Prevent system add-ons from being installed or updated.
  60 | **[`DisableTelemetry`](#disabletelemetry)** | DisableTelemetry
  61 | **[`DisableThirdPartyModuleBlocking`](#disablethirdpartymoduleblocking)** | Do not allow blocking third-party modules.
  62 | **[`DisplayBookmarksToolbar`](#displaybookmarkstoolbar)** | Set the initial state of the bookmarks toolbar.
  63 | **[`DisplayMenuBar`](#displaymenubar)** | Set the state of the menubar.
  64 | **[`DNSOverHTTPS`](#dnsoverhttps)** | Configure DNS over HTTPS.
  65 | **[`DontCheckDefaultBrowser`](#dontcheckdefaultbrowser)** | Don't check if Firefox is the default browser at startup.
  66 | **[`DownloadDirectory`](#downloaddirectory)** | Set and lock the download directory.
  67 | **[`EnableTrackingProtection`](#enabletrackingprotection)** | Configure tracking protection.
  68 | **[`EncryptedMediaExtensions`](#encryptedmediaextensions)** | Enable or disable Encrypted Media Extensions and optionally lock it.
  69 | **[`EnterprisePoliciesEnabled`](#enterprisepoliciesenabled)** | Enable policy support on macOS.
  70 | **[`ExemptDomainFileTypePairsFromFileTypeDownloadWarnings`](#exemptdomainfiletypepairsfromfiletypedownloadwarnings)** | Disable warnings based on file extension for specific file types on domains.
  71 | **[`Extensions`](#extensions)** | Control the installation, uninstallation and locking of extensions.
  72 | **[`ExtensionSettings`](#extensionsettings)** | Manage all aspects of extensions.
  73 | **[`ExtensionUpdate`](#extensionupdate)** | Control extension updates.
  74 | **[`FirefoxHome`](#firefoxhome)** | Customize the Firefox Home page.
  75 | **[`FirefoxSuggest`](#firefoxsuggest)** | Customize Firefox Suggest.
  76 | **[`GoToIntranetSiteForSingleWordEntryInAddressBar`](#gotointranetsiteforsinglewordentryinaddressbar)** | Force direct intranet site navigation instead of searching when typing single word entries in the address bar.
  77 | **[`Handlers`](#handlers)** | Configure default application handlers.
  78 | **[`HardwareAcceleration`](#hardwareacceleration)** | Control hardware acceleration.
  79 | **[`Homepage`](#homepage)** | Configure the default homepage and how Firefox starts.
  80 | **[`InstallAddonsPermission`](#installaddonspermission)** | Configure the default extension install policy as well as origins for extension installs are allowed.
  81 | **[`LegacyProfiles`](#legacyprofiles)** | Disable the feature enforcing a separate profile for each installation.
  82 | **[`LegacySameSiteCookieBehaviorEnabled`](#legacysamesitecookiebehaviorenabled)** | Enable default legacy SameSite cookie behavior setting.
  83 | **[`LegacySameSiteCookieBehaviorEnabledForDomainList`](#legacysamesitecookiebehaviorenabledfordomainlist)** | Revert to legacy SameSite behavior for cookies on specified sites.
  84 | **[`LocalFileLinks`](#localfilelinks)** | Enable linking to local files by origin.
  85 | **[`ManagedBookmarks`](#managedbookmarks)** | Configures a list of bookmarks managed by an administrator that cannot be changed by the user.
  86 | **[`ManualAppUpdateOnly`](#manualappupdateonly)** | Allow manual updates only and do not notify the user about updates.
  87 | **[`NetworkPrediction`](#networkprediction)** | Enable or disable network prediction (DNS prefetching).
  88 | **[`NewTabPage`](#newtabpage)** | Enable or disable the New Tab page.
  89 | **[`NoDefaultBookmarks`](#nodefaultbookmarks)** | Disable the creation of default bookmarks.
  90 | **[`OfferToSaveLogins`](#offertosavelogins)** | Control whether or not Firefox offers to save passwords.
  91 | **[`OfferToSaveLoginsDefault`](#offertosaveloginsdefault)** | Set the default value for whether or not Firefox offers to save passwords.
  92 | **[`OverrideFirstRunPage`](#overridefirstrunpage)** | Override the first run page.
  93 | **[`OverridePostUpdatePage`](#overridepostupdatepage)** | Override the upgrade page.
  94 | **[`PasswordManagerEnabled`](#passwordmanagerenabled)** | Remove (some) access to the password manager.
  95 | **[`PasswordManagerExceptions`](#passwordmanagerexceptions)** | Prevent Firefox from saving passwords for specific sites.
  96 | **[`PDFjs`](#pdfjs)** | Disable or configure PDF.js, the built-in PDF viewer.
  97 | **[`Permissions`](#permissions)** | Set permissions associated with camera, microphone, location, and notifications.
  98 | **[`PictureInPicture`](#pictureinpicture)** | Enable or disable Picture-in-Picture.
  99 | **[`PopupBlocking`](#popupblocking)** | Configure the default pop-up window policy as well as origins for which pop-up windows are allowed.
 100 | **[`Preferences`](#preferences)** | Set and lock preferences.
 101 | **[`PrimaryPassword`](#primarypassword)** | Require or prevent using a primary (formerly master) password.
 102 | **[`PrintingEnabled`](#printingenabled)** | Enable or disable printing.
 103 | **[`PromptForDownloadLocation`](#promptfordownloadlocation)** | Ask where to save each file before downloading.
 104 | **[`Proxy`](#proxy)** | Configure proxy settings.
 105 | **[`RequestedLocales`](#requestedlocales)** | Set the the list of requested locales for the application in order of preference.
 106 | **[`SanitizeOnShutdown` (All)](#sanitizeonshutdown-all)** | Clear all data on shutdown.
 107 | **[`SanitizeOnShutdown` (Selective)](#sanitizeonshutdown-selective)** | Clear data on shutdown.
 108 | **[`SearchBar`](#searchbar)** | Set whether or not search bar is displayed.
 109 | **[`SearchEngines`](#searchengines-this-policy-is-only-available-on-the-esr)** |
 110 | **[`SearchEngines -> Add`](#searchengines--add)** | Add new search engines.
 111 | **[`SearchEngines -> Default`](#searchengines--default)** | Set the default search engine.
 112 | **[`SearchEngines -> PreventInstalls`](#searchengines--preventinstalls)** | Prevent installing search engines from webpages.
 113 | **[`SearchEngines -> Remove`](#searchengines--remove)** | Hide built-in search engines.
 114 | **[`SearchSuggestEnabled`](#searchsuggestenabled)** | Enable search suggestions.
 115 | **[`SecurityDevices`](#securitydevices)** | Install PKCS #11 modules.
 116 | **[`ShowHomeButton`](#showhomebutton)** | Show the home button on the toolbar.
 117 | **[`SSLVersionMax`](#sslversionmax)** | Set and lock the maximum version of TLS.
 118 | **[`SSLVersionMin`](#sslversionmin)** | Set and lock the minimum version of TLS.
 119 | **[`StartDownloadsInTempDirectory`](#startdownloadsintempdirectory)** | Force downloads to start off in a local, temporary location rather than the default download directory.
 120 | **[`SupportMenu`](#supportmenu)** | Add a menuitem to the help menu for specifying support information.
 121 | **[`UserMessaging`](#usermessaging)** | Don't show certain messages to the user.
 122 | **[`UseSystemPrintDialog`](#usesystemprintdialog)** | Print using the system print dialog instead of print preview.
 123 | **[`WebsiteFilter`](#websitefilter)** | Block websites from being visited.
 124 | **[`WindowsSSO`](#windowssso)** | Allow Windows single sign-on for Microsoft, work, and school accounts.
 125
 126 ### 3rdparty
 127
 128 Allow WebExtensions to configure policy. For more information, see [Adding policy support to your extension](https://extensionworkshop.com/documentation/enterprise/adding-policy-support-to-your-extension/).
 129
 130 For GPO and Intune, the extension developer should provide an ADMX file.
 131
 132 **Compatibility:** Firefox 68\
 133 **CCK2 Equivalent:** N/A\
 134 **Preferences Affected:** N/A
 135
 136 #### macOS
 137 ```
 138 <dict>
 139   <key>3rdparty</key>
 140   <dict>
 141     <key>Extensions</key>
 142     <dict>
 143       <key>uBlock0@raymondhill.net</key>
 144       <dict>
 145         <key>adminSettings</key>
 146         <dict>
 147           <key>selectedFilterLists</key>
 148           <array>
 149             <string>ublock-privacy</string>
 150             <string>ublock-badware</string>
 151             <string>ublock-filters</string>
 152             <string>user-filters</string>
 153           </array>
 154         </dict>
 155       </dict>
 156     </dict>
 157   </dict>
 158 </dict>
 159 ```
 160 #### policies.json
 161 ```
 162 {
 163   "policies": {
 164     "3rdparty": {
 165       "Extensions": {
 166         "uBlock0@raymondhill.net": {
 167           "adminSettings": {
 168             "selectedFilterLists": [
 169               "ublock-privacy",
 170               "ublock-badware",
 171               "ublock-filters",
 172               "user-filters"
 173             ]
 174           }
 175         }
 176       }
 177     }
 178   }
 179 }
 180 ```
 181
 182 ### AllowedDomainsForApps
 183
 184 Define domains allowed to access Google Workspace.
 185
 186 This policy is based on the [Chrome policy](https://chromeenterprise.google/policies/#AllowedDomainsForApps) of the same name.
 187
 188 If this policy is enabled, users can only access Google Workspace using accounts from the specified domains. If you want to allow Gmail, you can add ```consumer_accounts``` to the list.
 189
 190 **Compatibility:** Firefox 89, Firefox ESR 78.11\
 191 **CCK2 Equivalent:** N/A\
 192 **Preferences Affected:** N/A
 193
 194 #### Windows (GPO)
 195 ```
 196 Software\Policies\Mozilla\Firefox\AllowedDomainsForApps = "managedfirefox.com,example.com"
 197 ```
 198 #### Windows (Intune)
 199 OMA-URI:
 200 ```
 201 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AllowedDomainsForApps
 202 ```
 203 Value (string):
 204 ```
 205 <enabled/>
 206 <data id="AllowedDomainsForApps" value="managedfirefox.com,example.com"/>
 207 ```
 208 #### macOS
 209 ```
 210 <dict>
 211   <key>AllowedDomainsForApps</key>
 212   <string>managedfirefox.com,example.com</string>
 213 </dict>
 214 ```
 215 #### policies.json
 216 ```
 217 {
 218   "policies": {
 219     "AllowedDomainsForApps": "managedfirefox.com,example.com"
 220   }
 221 }
 222 ```
 223 ### AllowFileSelectionDialogs
 224
 225 Enable or disable file selection dialogs.
 226
 227 **Compatibility:** Firefox 124\
 228 **CCK2 Equivalent:** N/A\
 229 **Preferences Affected:** `widget.disable_file_pickers`
 230
 231 #### Windows (GPO)
 232 ```
 233 Software\Policies\Mozilla\Firefox\AllowFileSelectionDialogs = 0x1 | 0x0
 234 ```
 235 #### Windows (Intune)
 236 OMA-URI:
 237 ```
 238 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AppAutoAllowFileSelectionDialogsUpdate
 239 ```
 240 Value (string):
 241 ```
 242 <enabled/> or <disabled/>
 243 ```
 244 #### macOS
 245 ```
 246 <dict>
 247   <key>AllowFileSelectionDialogs</key>
 248   <true/> | <false/>
 249 </dict>
 250 ```
 251 #### policies.json
 252 ```
 253 {
 254   "policies": {
 255     "AllowFileSelectionDialogs": true | false
 256   }
 257 }
 258 ```
 259 ### AppAutoUpdate
 260
 261 Enable or disable **automatic** application update.
 262
 263 If set to true, application updates are installed without user approval within Firefox. The operating system might still require approval.
 264
 265 If set to false, application updates are downloaded but the user can choose when to install the update.
 266
 267 If you have disabled updates via `DisableAppUpdate`, this policy has no effect.
 268
 269 **Compatibility:** Firefox 75, Firefox ESR 68.7\
 270 **CCK2 Equivalent:** N/A\
 271 **Preferences Affected:** `app.update.auto`
 272
 273 #### Windows (GPO)
 274 ```
 275 Software\Policies\Mozilla\Firefox\AppAutoUpdate = 0x1 | 0x0
 276 ```
 277 #### Windows (Intune)
 278 OMA-URI:
 279 ```
 280 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AppAutoUpdate
 281 ```
 282 Value (string):
 283 ```
 284 <enabled/> or <disabled/>
 285 ```
 286 #### macOS
 287 ```
 288 <dict>
 289   <key>AppAutoUpdate</key>
 290   <true/> | <false/>
 291 </dict>
 292 ```
 293 #### policies.json
 294 ```
 295 {
 296   "policies": {
 297     "AppAutoUpdate": true | false
 298   }
 299 }
 300 ```
 301 ### AppUpdatePin
 302
 303 Prevent Firefox from being updated beyond the specified version.
 304
 305 You can specify the any version as ```xx.``` and Firefox will be updated with all minor versions, but will not be updated beyond the major version.
 306
 307 You can also specify the version as ```xx.xx``` and Firefox will be updated with all patch versions, but will not be updated beyond the minor version.
 308
 309 You should specify a version that exists or is guaranteed to exist. If you specify a version that doesn't end up existing, Firefox will update beyond that version.
 310
 311 **Compatibility:** Firefox 102,\
 312 **CCK2 Equivalent:** N/A\
 313 **Preferences Affected:** N/A
 314
 315 #### Windows (GPO)
 316 ```
 317 Software\Policies\Mozilla\Firefox\AppUpdatePin = "106."
 318 ```
 319 #### Windows (Intune)
 320 OMA-URI:
 321 ```
 322 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AppUpdatePin
 323 ```
 324 Value (string):
 325 ```
 326 <enabled/>
 327 <data id="AppUpdatePin" value="106."/>
 328 ```
 329 #### macOS
 330 ```
 331 <dict>
 332   <key>AppUpdatePin</key>
 333   <string>106.</string>
 334 </dict>
 335 ```
 336 #### policies.json
 337 ```
 338 {
 339   "policies": {
 340     "AppUpdatePin": "106."
 341   }
 342 }
 343 ```
 344 ### AppUpdateURL
 345
 346 Change the URL for application update if you are providing Firefox updates from a custom update server.
 347
 348 **Compatibility:** Firefox 62, Firefox ESR 60.2\
 349 **CCK2 Equivalent:** N/A\
 350 **Preferences Affected:** `app.update.url`
 351
 352 #### Windows (GPO)
 353 ```
 354 Software\Policies\Mozilla\Firefox\AppUpdateURL = "https://yoursite.com"
 355 ```
 356 #### Windows (Intune)
 357 OMA-URI:
 358 ```
 359 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AppUpdateURL
 360 ```
 361 Value (string):
 362 ```
 363 <enabled/>
 364 <data id="AppUpdateURL" value="https://yoursite.com"/>
 365 ```
 366 #### macOS
 367 ```
 368 <dict>
 369   <key>AppUpdateURL</key>
 370   <string>https://yoursite.com</string>
 371 </dict>
 372 ```
 373 #### policies.json
 374 ```
 375 {
 376   "policies": {
 377     "AppUpdateURL": "https://yoursite.com"
 378   }
 379 }
 380 ```
 381 ### Authentication
 382
 383 Configure sites that support integrated authentication.
 384
 385 See [Integrated authentication](https://htmlpreview.github.io/?https://github.com/mdn/archived-content/blob/main/files/en-us/mozilla/integrated_authentication/raw.html) for more information.
 386
 387 `PrivateBrowsing` enables integrated authentication in private browsing.
 388
 389 **Compatibility:** Firefox 60, Firefox ESR 60 (AllowNonFQDN added in 62/60.2, AllowProxies added in 70/68.2, Locked added in 71/68.3, PrivateBrowsing added in 77/68.9)\
 390 **CCK2 Equivalent:** N/A\
 391 **Preferences Affected:** `network.negotiate-auth.trusted-uris`,`network.negotiate-auth.delegation-uris`,`network.automatic-ntlm-auth.trusted-uris`,`network.automatic-ntlm-auth.allow-non-fqdn`,`network.negotiate-auth.allow-non-fqdn`,`network.automatic-ntlm-auth.allow-proxies`,`network.negotiate-auth.allow-proxies`,`network.auth.private-browsing-sso`
 392
 393 #### Windows (GPO)
 394 ```
 395 Software\Policies\Mozilla\Firefox\Authentication\SPNEGO\1 = "mydomain.com"
 396 Software\Policies\Mozilla\Firefox\Authentication\SPNEGO\2 = "https://myotherdomain.com"
 397 Software\Policies\Mozilla\Firefox\Authentication\Delegated\1 = "mydomain.com"
 398 Software\Policies\Mozilla\Firefox\Authentication\Delegated\2 = "https://myotherdomain.com"
 399 Software\Policies\Mozilla\Firefox\Authentication\NTLM\1 = "mydomain.com"
 400 Software\Policies\Mozilla\Firefox\Authentication\NTLM\2 = "https://myotherdomain.com"
 401 Software\Policies\Mozilla\Firefox\Authentication\AllowNonFQDN\SPNEGO = 0x1 | 0x0
 402 Software\Policies\Mozilla\Firefox\Authentication\AllowNonFQDN\NTLM = 0x1 | 0x0
 403 Software\Policies\Mozilla\Firefox\Authentication\AllowProxies\SPNEGO = 0x1 | 0x0
 404 Software\Policies\Mozilla\Firefox\Authentication\AllowProxies\NTLM = 0x1 | 0x0
 405 Software\Policies\Mozilla\Firefox\Authentication\Locked = 0x1 | 0x0
 406 Software\Policies\Mozilla\Firefox\Authentication\PrivateBrowsing = 0x1 | 0x0
 407 ```
 408 #### Windows (Intune)
 409 OMA-URI:
 410 ```
 411 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_SPNEGO
 412 ```
 413 Value (string):
 414 ```
 415 <enabled/>
 416 <data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
 417 ```
 418 OMA-URI:
 419 ```
 420 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_Delegated
 421 ```
 422 Value (string):
 423 ```
 424 <enabled/>
 425 <data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
 426 ```
 427 OMA-URI:
 428 ```
 429 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_NTLM
 430 ```
 431 Value (string):
 432 ```
 433 <enabled/>
 434 <data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
 435 ```
 436 OMA-URI:
 437 ```
 438 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_AllowNonFQDN
 439 ```
 440 Value (string):
 441 ```
 442 <enabled/>
 443 <data id="Authentication_AllowNonFQDN_NTLM" value="true | false"/>
 444 <data id="Authentication_AllowNonFQDN_SPNEGO" value="true | false"/>
 445 ```
 446 OMA-URI:
 447 ```
 448 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_Locked
 449 ```
 450 Value (string):
 451 ```
 452 <enabled/> or <disabled/>
 453 ```
 454 OMA-URI:
 455 ```
 456 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_PrivateBrowsing
 457 ```
 458 Value (string):
 459 ```
 460 <enabled/> or <disabled/>
 461 ```
 462 #### macOS
 463 ```
 464 <dict>
 465   <key>Authentication</key>
 466   <dict>
 467     <key>SPNEGO</key>
 468     <array>
 469       <string>mydomain.com</string>
 470       <string>https://myotherdomain.com</string>
 471     </array>
 472     <key>Delegated</key>
 473     <array>
 474       <string>mydomain.com</string>
 475       <string>https://myotherdomain.com</string>
 476     </array>
 477     <key>NTLM</key>
 478     <array>
 479       <string>mydomain.com</string>
 480       <string>https://myotherdomain.com</string>
 481     </array>
 482     <key>AllowNonFQDN</key>
 483       <dict>
 484       <key>SPNEGO</key>
 485       <true/> | <false/>
 486       <key>NTLM</key>
 487       <true/> | <false/>
 488     </dict>
 489     <key>AllowProxies</key>
 490       <dict>
 491       <key>SPNEGO</key>
 492       <true/> | <false/>
 493       <key>NTLM</key>
 494       <true/> | <false/>
 495     </dict>
 496     <key>Locked</key>
 497     <true/> | <false/>
 498     <key>PrivateBrowsing</key>
 499     <true/> | <false/>
 500   </dict>
 501 </dict>
 502 ```
 503 #### policies.json
 504 ```
 505 {
 506   "policies": {
 507     "Authentication": {
 508       "SPNEGO": ["mydomain.com", "https://myotherdomain.com"],
 509       "Delegated": ["mydomain.com", "https://myotherdomain.com"],
 510       "NTLM": ["mydomain.com", "https://myotherdomain.com"],
 511       "AllowNonFQDN": {
 512         "SPNEGO": true | false,
 513         "NTLM": true | false
 514       },
 515       "AllowProxies": {
 516         "SPNEGO": true | false,
 517         "NTLM": true | false
 518       },
 519       "Locked": true | false,
 520       "PrivateBrowsing": true | false
 521     }
 522   }
 523 }
 524 ```
 525 ### AutoLaunchProtocolsFromOrigins
 526 Define a list of external protocols that can be used from listed origins without prompting the user. The origin is the scheme plus the hostname.
 527
 528 The syntax of this policy is exactly the same as the [Chrome AutoLaunchProtocolsFromOrigins policy](https://cloud.google.com/docs/chrome-enterprise/policies/?policy=AutoLaunchProtocolsFromOrigins) except that you can only use valid origins (not just hostnames). This also means that you cannot specify an asterisk for all origins.
 529
 530 The schema is:
 531 ```
 532 {
 533  "items": {
 534   "properties": {
 535    "allowed_origins": {
 536     "items": {
 537      "type": "string"
 538     },
 539     "type": "array"
 540    },
 541    "protocol": {
 542     "type": "string"
 543    }
 544   },
 545   "required": [
 546    "protocol",
 547    "allowed_origins"
 548   ],
 549   "type": "object"
 550  },
 551  "type": "array"
 552 }
 553 ```
 554 **Compatibility:** Firefox 90, Firefox ESR 78.12\
 555 **CCK2 Equivalent:** N/A\
 556 **Preferences Affected:** N/A
 557
 558 #### Windows (GPO)
 559 Software\Policies\Mozilla\Firefox\AutoLaunchProtocolsFromOrigins (REG_MULTI_SZ) =
 560 ```
 561 [
 562   {
 563     "protocol": "zoommtg",
 564     "allowed_origins": [
 565       "https://somesite.zoom.us"
 566     ]
 567   }
 568 ]
 569 ```
 570 #### Windows (Intune)
 571 OMA-URI:
 572 ```
 573 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AutoLaunchProtocolsFromOrigins
 574 ```
 575 Value (string):
 576 ```
 577 <enabled/>
 578 <data id="JSON" value='
 579 [
 580   {
 581     "protocol": "zoommtg",
 582     "allowed_origins": [
 583       "https://somesite.zoom.us"
 584     ]
 585   }
 586 ]'/>
 587 ```
 588 #### macOS
 589 ```
 590 <dict>
 591   <key>AutoLaunchProtocolsFromOrigins</key>
 592   <array>
 593     <dict>
 594       <key>protocol</key>
 595       <string>zoommtg</string>
 596       <key>allowed_origins</key>
 597       <array>
 598         <string>https://somesite.zoom.us</string>
 599       </array>
 600     </dict>
 601   </array>
 602 </dict>
 603 ```
 604 #### policies.json
 605 ```
 606 {
 607   "policies": {
 608     "AutoLaunchProtocolsFromOrigins": [{
 609       "protocol": "zoommtg",
 610       "allowed_origins": [
 611         "https://somesite.zoom.us"
 612       ]
 613     }]
 614   }
 615 }
 616 ```
 617 ### BackgroundAppUpdate
 618
 619 Enable or disable **automatic** application update **in the background**, when the application is not running.
 620
 621 If set to true, application updates may be installed (without user approval) in the background, even when the application is not running. The operating system might still require approval.
 622
 623 If set to false, the application will not try to install updates when the application is not running.
 624
 625 If you have disabled updates via `DisableAppUpdate` or disabled automatic updates via `AppAutoUpdate`, this policy has no effect.
 626
 627 If you are having trouble getting the background task to run, verify your configuration with the ["Requirements to run" section in this support document](https://support.mozilla.org/en-US/kb/enable-background-updates-firefox-windows).
 628
 629 **Compatibility:** Firefox 90 (Windows only)\
 630 **CCK2 Equivalent:** N/A\
 631 **Preferences Affected:** `app.update.background.enabled`
 632
 633 #### Windows (GPO)
 634 ```
 635 Software\Policies\Mozilla\Firefox\BackgroundAppUpdate = 0x1 | 0x0
 636 ```
 637 #### Windows (Intune)
 638 OMA-URI:
 639 ```
 640 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BackgroundAppUpdate
 641 ```
 642 Value (string):
 643 ```
 644 <enabled/> or <disabled/>
 645 ```
 646 #### macOS
 647 ```
 648 <dict>
 649   <key>BackgroundAppUpdate</key>
 650   <true/> | <false/>
 651 </dict>
 652 ```
 653 #### policies.json
 654 ```
 655 {
 656   "policies": {
 657     "BackgroundAppUpdate": true | false
 658   }
 659 }
 660 ```
 661 ### BlockAboutAddons
 662
 663 Block access to the Add-ons Manager (about:addons).
 664
 665 **Compatibility:** Firefox 60, Firefox ESR 60\
 666 **CCK2 Equivalent:** `disableAddonsManager`\
 667 **Preferences Affected:** N/A
 668
 669 #### Windows (GPO)
 670 ```
 671 Software\Policies\Mozilla\Firefox\BlockAboutAddons = 0x1 | 0x0
 672 ```
 673 #### Windows (Intune)
 674 OMA-URI:
 675 ```
 676 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutAddons
 677 ```
 678 Value (string):
 679 ```
 680 <enabled/> or <disabled/>
 681 ```
 682 #### macOS
 683 ```
 684 <dict>
 685   <key>BlockAboutAddons</key>
 686   <true/> | <false/>
 687 </dict>
 688 ```
 689 #### policies.json
 690 ```
 691 {
 692   "policies": {
 693     "BlockAboutAddons": true | false
 694   }
 695 }
 696 ```
 697 ### BlockAboutConfig
 698
 699 Block access to about:config.
 700
 701 **Compatibility:** Firefox 60, Firefox ESR 60\
 702 **CCK2 Equivalent:** `disableAboutConfig`\
 703 **Preferences Affected:** N/A
 704
 705 #### Windows (GPO)
 706 ```
 707 Software\Policies\Mozilla\Firefox\BlockAboutConfig = 0x1 | 0x0
 708 ```
 709 #### Windows (Intune)
 710 OMA-URI:
 711 ```
 712 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutConfig
 713 ```
 714 Value (string):
 715 ```
 716 <enabled/> or <disabled/>
 717 ```
 718 #### macOS
 719 ```
 720 <dict>
 721   <key>BlockAboutConfig</key>
 722   <true/> | <false/>
 723 </dict>
 724 ```
 725 #### policies.json
 726 ```
 727 {
 728   "policies": {
 729     "BlockAboutConfig": true | false
 730   }
 731 }
 732 ```
 733 ### BlockAboutProfiles
 734
 735 Block access to About Profiles (about:profiles).
 736
 737 **Compatibility:** Firefox 60, Firefox ESR 60\
 738 **CCK2 Equivalent:** `disableAboutProfiles`\
 739 **Preferences Affected:** N/A
 740
 741 #### Windows (GPO)
 742 ```
 743 Software\Policies\Mozilla\Firefox\BlockAboutProfiles = 0x1 | 0x0
 744 ```
 745 #### Windows (Intune)
 746 OMA-URI:
 747 ```
 748 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutProfiles
 749 ```
 750 Value (string):
 751 ```
 752 <enabled/> or <disabled/>
 753 ```
 754 #### macOS
 755 ```
 756 <dict>
 757   <key>BlockAboutProfiles</key>
 758   <true/> | <false/>
 759 </dict>
 760 ```
 761 #### policies.json
 762 ```
 763 {
 764   "policies": {
 765     "BlockAboutProfiles": true | false
 766   }
 767 }
 768 ```
 769 ### BlockAboutSupport
 770
 771 Block access to Troubleshooting Information (about:support).
 772
 773 **Compatibility:** Firefox 60, Firefox ESR 60\
 774 **CCK2 Equivalent:** `disableAboutSupport`\
 775 **Preferences Affected:** N/A
 776
 777 #### Windows (GPO)
 778 ```
 779 Software\Policies\Mozilla\Firefox\BlockAboutSupport = 0x1 | 0x0
 780 ```
 781 #### Windows (Intune)
 782 OMA-URI:
 783 ```
 784 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutSupport
 785 ```
 786 Value (string):
 787 ```
 788 <enabled/> or <disabled/>
 789 ```
 790 #### macOS
 791 ```
 792 <dict>
 793   <key>BlockAboutSupport</key>
 794   <true/> | <false/>
 795 </dict>
 796 ```
 797 #### policies.json
 798 ```
 799 {
 800   "policies": {
 801     "BlockAboutSupport": true | false
 802   }
 803 }
 804 ```
 805 ### Bookmarks
 806
 807 Note: [`ManagedBookmarks`](#managedbookmarks) is the new recommended way to add bookmarks. This policy will continue to be supported.
 808
 809 Add bookmarks in either the bookmarks toolbar or menu. Only `Title` and `URL` are required. If `Placement` is not specified, the bookmark will be placed on the toolbar. If `Folder` is specified, it is automatically created and bookmarks with the same folder name are grouped together.
 810
 811 If you want to clear all bookmarks set with this policy, you can set the value to an empty array (```[]```). This can be on Windows via the new Bookmarks (JSON) policy available with GPO and Intune.
 812
 813 **Compatibility:** Firefox 60, Firefox ESR 60\
 814 **CCK2 Equivalent:** `bookmarks.toolbar`,`bookmarks.menu`\
 815 **Preferences Affected:** N/A
 816
 817 #### Windows (GPO)
 818 ```
 819 Software\Policies\Mozilla\Firefox\Bookmarks\1\Title = "Example"
 820 Software\Policies\Mozilla\Firefox\Bookmarks\1\URL = "https://example.com"
 821 Software\Policies\Mozilla\Firefox\Bookmarks\1\Favicon = "https://example.com/favicon.ico"
 822 Software\Policies\Mozilla\Firefox\Bookmarks\1\Placement = "toolbar" | "menu"
 823 Software\Policies\Mozilla\Firefox\Bookmarks\1\Folder = "FolderName"
 824
 825 Software\Policies\Mozilla\Firefox\Bookmarks (REG_MULTI_SZ) =
 826 ```
 827 []
 828 ```
 829
 830 ```
 831 #### Windows (Intune)
 832 OMA-URI:
 833 ```
 834 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Bookmarks/Bookmark01
 835 ```
 836 Value (string):
 837 ```
 838 <enabled/>
 839 <data id="BookmarkTitle" value="Example"/>
 840 <data id="BookmarkURL" value="https://example.com"/>
 841 <data id="BookmarkFavicon" value="https://example.com/favicon.ico"/>
 842 <data id="BookmarkPlacement" value="toolbar | menu"/>
 843 <data id="BookmarkFolder" value="FolderName"/>
 844 ```
 845 OMA-URI:
 846 ```
 847 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Bookmarks
 848 ```
 849 Value (string):
 850 ```
 851 <enabled/>
 852 <data id="JSON" value='[]'/>
 853 ```
 854 #### macOS
 855 ```
 856 <dict>
 857   <key>Bookmarks</key>
 858   <array>
 859     <dict>
 860       <key>Title</key>
 861       <string>Example</string>
 862       <key>URL</key>
 863       <string>https://example.com</string>
 864       <key>Favicon</key>
 865       <string>https://example.com/favicon.ico</string>
 866       <key>Placement</key>
 867       <string>toolbar | menu</string>
 868       <key>Folder</key>
 869       <string>FolderName</string>
 870     </dict>
 871   </array>
 872 </dict>
 873 ```
 874 #### policies.json
 875 ```
 876 {
 877   "policies": {
 878     "Bookmarks": [
 879       {
 880         "Title": "Example",
 881         "URL": "https://example.com",
 882         "Favicon": "https://example.com/favicon.ico",
 883         "Placement": "toolbar" | "menu",
 884         "Folder": "FolderName"
 885       }
 886     ]
 887   }
 888 }
 889 ```
 890 ### CaptivePortal
 891 Enable or disable the detection of captive portals.
 892
 893 **Compatibility:** Firefox 67, Firefox ESR 60.7\
 894 **CCK2 Equivalent:** N/A\
 895 **Preferences Affected:** `network.captive-portal-service.enabled`
 896
 897 #### Windows (GPO)
 898 ```
 899 Software\Policies\Mozilla\Firefox\CaptivePortal = 0x1 | 0x0
 900 ```
 901 #### Windows (Intune)
 902 OMA-URI:
 903 ```
 904 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/CaptivePortal
 905 ```
 906 Value (string):
 907 ```
 908 <enabled/> or <disabled/>
 909 ```
 910 #### macOS
 911 ```
 912 <dict>
 913   <key>CaptivePortal</key>
 914   <true/> | <false/>
 915 </dict>
 916 ```
 917 #### policies.json
 918 ```
 919 {
 920   "policies": {
 921     "CaptivePortal": true | false
 922   }
 923 }
 924 ```
 925 ### Certificates
 926
 927 ### Certificates | ImportEnterpriseRoots
 928
 929 Trust certificates that have been added to the operating system certificate store by a user or administrator.
 930
 931 Note: This policy only works on Windows and macOS. For Linux discussion, see [bug 1600509](https://bugzilla.mozilla.org/show_bug.cgi?id=1600509).
 932
 933 See https://support.mozilla.org/kb/setting-certificate-authorities-firefox for more detail.
 934
 935 **Compatibility:** Firefox 60, Firefox ESR 60 (macOS support in Firefox 63, Firefox ESR 68)\
 936 **CCK2 Equivalent:** N/A\
 937 **Preferences Affected:** `security.enterprise_roots.enabled`
 938
 939 #### Windows (GPO)
 940 ```
 941 Software\Policies\Mozilla\Firefox\Certificates\ImportEnterpriseRoots = 0x1 | 0x0
 942 ```
 943 #### Windows (Intune)
 944 OMA-URI:
 945 ```
 946 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Certificates/Certificates_ImportEnterpriseRoots
 947 ```
 948 Value (string):
 949 ```
 950 <enabled/> or <disabled/>
 951 ```
 952 #### macOS
 953 ```
 954 <dict>
 955   <key>Certificates</key>
 956   <dict>
 957     <key>ImportEnterpriseRoots</key>
 958     <true/> | <false/>
 959   </dict>
 960 </dict>
 961 ```
 962 #### policies.json
 963 ```
 964 {
 965   "policies": {
 966     "Certificates": {
 967       "ImportEnterpriseRoots": true | false
 968     }
 969   }
 970 }
 971 ```
 972 ### Certificates | Install
 973
 974 Install certificates into the Firefox certificate store. If only a filename is specified, Firefox searches for the file in the following locations:
 975
 976 - Windows
 977   - %USERPROFILE%\AppData\Local\Mozilla\Certificates
 978   - %USERPROFILE%\AppData\Roaming\Mozilla\Certificates
 979 - macOS
 980   - /Library/Application Support/Mozilla/Certificates
 981   - ~/Library/Application Support/Mozilla/Certificates
 982 - Linux
 983   - /usr/lib/mozilla/certificates
 984   - /usr/lib64/mozilla/certificates
 985   - ~/.mozilla/certificates
 986
 987 Starting with Firefox 65, Firefox 60.5 ESR, a fully qualified path can be used, including UNC paths. You should use the native path style for your operating system. We do not support using %USERPROFILE% or other environment variables on Windows.
 988
 989 If you are specifying the path in the policies.json file on Windows, you need to escape your backslashes (`\\`) which means that for UNC paths, you need to escape both (`\\\\`). If you use group policy, you only need one backslash.
 990
 991 Certificates are installed using the trust string `CT,CT,`.
 992
 993 Binary (DER) and ASCII (PEM) certificates are both supported.
 994
 995 **Compatibility:** Firefox 64, Firefox ESR 64\
 996 **CCK2 Equivalent:** `certs.ca`\
 997 **Preferences Affected:** N/A
 998
 999 #### Windows (GPO)
1000 ```
1001 Software\Policies\Mozilla\Firefox\Certificates\Install\1 = "cert1.der"
1002 Software\Policies\Mozilla\Firefox\Certificates\Install\2 = "C:\Users\username\cert2.pem"
1003 ```
1004 #### Windows (Intune)
1005 OMA-URI:
1006 ```
1007 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Certificates/Certificates_Install
1008 ```
1009 Value (string):
1010 ```
1011 <enabled/>
1012 <data id="Certificates_Install" value="1&#xF000;cert1.der&#xF000;2&#xF000;C:\Users\username\cert2.pem"/>
1013 ```
1014 #### macOS
1015 ```
1016 <dict>
1017   <key>Certificates</key>
1018   <dict>
1019     <key>Install</key>
1020     <array>
1021       <string>cert1.der</string>
1022       <string>/Users/username/cert2.pem</string>
1023     </array>
1024   </dict>
1025 </dict>
1026 ```
1027 #### policies.json
1028 ```
1029 {
1030   "policies": {
1031     "Certificates": {
1032       "Install": ["cert1.der", "/home/username/cert2.pem"]
1033     }
1034   }
1035 }
1036 ```
1037 ### Containers
1038 Set policies related to [containers](https://addons.mozilla.org/firefox/addon/multi-account-containers/).
1039
1040 Currently you can set the initial set of containers.
1041
1042 For each container, you can specify the name, icon, and color.
1043
1044 | Name | Description |
1045 | --- | --- |
1046 | `name`| Name of container
1047 | `icon` | Can be `fingerprint`, `briefcase`, `dollar`, `cart`, `vacation`, `gift`, `food`, `fruit`, `pet`, `tree`, `chill`, `circle`, `fence`
1048 | `color` | Can be `blue`, `turquoise`, `green`, `yellow`, `orange`, `red`, `pink`, `purple`, `toolbar`
1049
1050 **Compatibility:** Firefox 113\
1051 **CCK2 Equivalent:** N/A\
1052 **Preferences Affected:** N/A
1053
1054 #### Windows (GPO)
1055 Software\Policies\Mozilla\Firefox\Containers (REG_MULTI_SZ) =
1056 ```
1057 {
1058   "Default": [
1059     {
1060       "name": "My container",
1061       "icon": "pet",
1062       "color": "turquoise"
1063     }
1064   ]
1065 }
1066 ```
1067 #### Windows (Intune)
1068 OMA-URI:
1069 ```
1070 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Containers
1071 ```
1072 Value (string):
1073 ```
1074 <enabled/>
1075 <data id="JSON" value='
1076 {
1077   "Default": [
1078     {
1079       "name": "My container",
1080       "icon": "pet",
1081       "color": "turquoise"
1082     }
1083   ]
1084 }
1085 '/>
1086 ```
1087 #### macOS
1088 ```
1089 <dict>
1090   <key>Default</key>
1091   <dict>
1092     <key>Containers</key>
1093     <array>
1094       <dict>
1095         <key>name</key>
1096         <string>My container</string>
1097         <key>icon</key>
1098         <string>pet</string>
1099         <key>color</key>
1100         <string>turquoise</string>
1101       </dict>
1102     </array>
1103   </dict>
1104 </dict>
1105 ```
1106 #### policies.json
1107 ```
1108 {
1109   "policies": {
1110     "Containers": {
1111       "Default": [
1112         {
1113           "name": "My container",
1114           "icon": "pet",
1115           "color": "turquoise"
1116         }
1117       ]
1118     }
1119   }
1120 }
1121 ```
1122 ### Cookies
1123 Configure cookie preferences.
1124
1125 `Allow` is a list of origins (not domains) where cookies are always allowed. You must include http or https.
1126
1127 `AllowSession` is a list of origins (not domains) where cookies are only allowed for the current session. You must include http or https.
1128
1129 `Block` is a list of origins (not domains) where cookies are always blocked. You must include http or https.
1130
1131 `Behavior` sets the default behavior for cookies based on the values below.
1132
1133 `BehaviorPrivateBrowsing` sets the default behavior for cookies in private browsing based on the values below.
1134
1135 | Value | Description
1136 | --- | --- |
1137 | accept | Accept all cookies
1138 | reject-foreign | Reject third party cookies
1139 | reject | Reject all cookies
1140 | limit-foreign | Reject third party cookies for sites you haven't visited
1141 | reject-tracker | Reject cookies for known trackers (default)
1142 | reject-tracker-and-partition-foreign | Reject cookies for known trackers and partition third-party cookies (Total Cookie Protection) (default for private browsing)
1143
1144 `Locked` prevents the user from changing cookie preferences.
1145
1146 **Compatibility:** Firefox 60, Firefox ESR 60 (RejectTracker added in Firefox 63, AllowSession added in Firefox 79/78.1, Behavior added in Firefox 95/91.4)\
1147 **CCK2 Equivalent:** N/A\
1148 **Preferences Affected:** `network.cookie.cookieBehavior`, `network.cookie.cookieBehavior.pbmode`, `network.cookie.lifetimePolicy`
1149
1150 #### Windows (GPO)
1151 ```
1152 Software\Policies\Mozilla\Firefox\Cookies\Allow\1 = "https://example.com"
1153 Software\Policies\Mozilla\Firefox\Cookies\AllowSession\1 = "https://example.edu"
1154 Software\Policies\Mozilla\Firefox\Cookies\Block\1 = "https://example.org"
1155 Software\Policies\Mozilla\Firefox\Cookies\Default = 0x1 | 0x0
1156 Software\Policies\Mozilla\Firefox\Cookies\AcceptThirdParty = "always" | "never" | "from-visited"
1157 Software\Policies\Mozilla\Firefox\Cookies\ExpireAtSessionEnd = 0x1 | 0x0
1158 Software\Policies\Mozilla\Firefox\Cookies\RejectTracker = 0x1 | 0x0
1159 Software\Policies\Mozilla\Firefox\Cookies\Behavior = "accept" | "reject-foreign" | "reject" | "limit-foreign" | "reject-tracker" | "reject-tracker-and-partition-foreign"
1160 Software\Policies\Mozilla\Firefox\Cookies\BehaviorPrivateBrowsing = "accept" | "reject-foreign" | "reject" | "limit-foreign" | "reject-tracker" | "reject-tracker-and-partition-foreign"
1161 Software\Policies\Mozilla\Firefox\Cookies\Locked = 0x1 | 0x0
1162 ```
1163 #### Windows (Intune)
1164 OMA-URI:
1165 ```
1166 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Allow
1167 ```
1168 Value (string):
1169 ```
1170 <enabled/>
1171 <data id="Permissions" value="1&#xF000;https://example.com"/>
1172 ```
1173 OMA-URI:
1174 ```
1175 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_AllowSession
1176 ```
1177 Value (string):
1178 ```
1179 <enabled/>
1180 <data id="Permissions" value="1&#xF000;https://example.edu"/>
1181 ```
1182 OMA-URI:
1183 ```
1184 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Block
1185 ```
1186 Value (string):
1187 ```
1188 <enabled/>
1189 <data id="Permissions" value="1&#xF000;https://example.org"/>
1190 ```
1191 OMA-URI:
1192 ```
1193 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Default
1194 ```
1195 Value (string):
1196 ```
1197 <enabled/> or <disabled/>
1198 ```
1199 OMA-URI:
1200 ```
1201 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_AcceptThirdParty
1202 ```
1203 Value (string):
1204 ```
1205 <enabled/>
1206 <data id="Cookies_AcceptThirdParty" value="always | never | from-visited"/>
1207 ```
1208 OMA-URI:
1209 ```
1210 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_ExpireAtSessionEnd
1211 ```
1212 Value (string):
1213 ```
1214 <enabled/> or <disabled/>
1215 ```
1216 OMA-URI:
1217 ```
1218 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_RejectTracker
1219 ```
1220 Value (string):
1221 ```
1222 <enabled/> or <disabled/>
1223 ```
1224 OMA-URI:
1225 ```
1226 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Locked
1227 ```
1228 Value (string):
1229 ```
1230 <enabled/> or <disabled/>
1231 ```
1232 OMA-URI:
1233 ```
1234 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Behavior
1235 ```
1236 Value (string):
1237 ```
1238 <enabled/>
1239 <data id="Cookies_Behavior" value="accept | reject-foreign | reject | limit-foreign | reject-tracker | reject-tracker-and-partition-foreign"/>
1240 ```
1241 OMA-URI:
1242 ```
1243 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_BehaviorPrivateBrowsing
1244 ```
1245 Value (string):
1246 ```
1247 <enabled/>
1248 <data id="Cookies_BehaviorPrivateBrowsing" value="accept | reject-foreign | reject | limit-foreign | reject-tracker | reject-tracker-and-partition-foreign"/>
1249 ```
1250 #### macOS
1251 ```
1252 <dict>
1253   <key>Cookies</key>
1254   <dict>
1255     <key>Allow</key>
1256     <array>
1257       <string>http://example.com</string>
1258     </array>
1259     <key>AllowSession</key>
1260     <array>
1261       <string>http://example.edu</string>
1262     </array>
1263     <key>Block</key>
1264     <array>
1265       <string>http://example.org</string>
1266     </array>
1267     <key>Default</key>
1268     <true/> | <false/>
1269     <key>AcceptThirdParty</key>
1270     <string>always | never | from-visited</string>
1271     <key>ExpireAtSessionEnd</key>
1272     <true/> | <false/>
1273     <key>RejectTracker</key>
1274     <true/> | <false/>
1275     <key>Locked</key>
1276     <true/> | <false/>
1277     <key>Behavior</key>
1278     <string>accept | reject-foreign | reject | limit-foreign | reject-tracker | reject-tracker-and-partition-foreign</string>
1279     <key>BehaviorPrivateBrowsing</key>
1280     <string>accept | reject-foreign | reject | limit-foreign | reject-tracker | reject-tracker-and-partition-foreign</string>
1281   </dict>
1282 </dict>
1283 ```
1284 #### policies.json
1285 ```
1286 {
1287   "policies": {
1288     "Cookies": {
1289       "Allow": ["http://example.org/"],
1290       "AllowSession": ["http://example.edu/"],
1291       "Block": ["http://example.edu/"],
1292       "Default": true | false,
1293       "AcceptThirdParty": "always" | "never" | "from-visited",
1294       "ExpireAtSessionEnd": true | false,
1295       "RejectTracker": true | false,
1296       "Locked": true | false,
1297       "Behavior": "accept" | "reject-foreign" | "reject" | "limit-foreign" | "reject-tracker" | "reject-tracker-and-partition-foreign",
1298       "BehaviorPrivateBrowsing": "accept" | "reject-foreign" | "reject" | "limit-foreign" | "reject-tracker" | "reject-tracker-and-partition-foreign",
1299     }
1300   }
1301 }
1302 ```
1303 ### DefaultDownloadDirectory
1304 Set the default download directory.
1305
1306 You can use ${home} for the native home directory.
1307
1308 **Compatibility:** Firefox 68, Firefox ESR 68\
1309 **CCK2 Equivalent:** N/A\
1310 **Preferences Affected:** `browser.download.dir`, `browser.download.folderList`
1311
1312 #### Windows (GPO)
1313 ```
1314 Software\Policies\Mozilla\Firefox\DefaultDownloadDirectory = "${home}\Downloads"
1315 ```
1316 #### Windows (Intune)
1317 OMA-URI:
1318 ```
1319 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DefaultDownloadDirectory
1320 ```
1321 Value (string):
1322 ```
1323 <enabled/>
1324 <data id="Preferences_String" value="${home}\Downloads"/>
1325 ```
1326 #### macOS
1327 ```
1328 <dict>
1329   <key>DefaultDownloadDirectory</key>
1330   <string>${home}/Downloads</string>
1331 </dict>
1332 ```
1333 #### policies.json (macOS and Linux)
1334 ```
1335 {
1336   "policies": {
1337     "DefaultDownloadDirectory": "${home}/Downloads"
1338   }
1339 }
1340 ```
1341 #### policies.json (Windows)
1342 ```
1343 {
1344   "policies": {
1345     "DefaultDownloadDirectory": "${home}\\Downloads"
1346   }
1347 }
1348 ```
1349 ### DisableAppUpdate
1350 Turn off application updates within Firefox.
1351
1352 **Compatibility:** Firefox 60, Firefox ESR 60\
1353 **CCK2 Equivalent:** `disableFirefoxUpdates`\
1354 **Preferences Affected:** N/A
1355
1356 #### Windows (GPO)
1357 ```
1358 Software\Policies\Mozilla\Firefox\DisableAppUpdate = 0x1 | 0x0
1359 ```
1360 #### Windows (Intune)
1361 OMA-URI:
1362 ```
1363 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableAppUpdate
1364 ```
1365 Value (string):
1366 ```
1367 <enabled/> or <disabled/>
1368 ```
1369 #### macOS
1370 ```
1371 <dict>
1372   <key>DisableAppUpdate</key>
1373   <true/> | <false/>
1374 </dict>
1375 ```
1376 #### policies.json
1377 ```
1378 {
1379   "policies": {
1380     "DisableAppUpdate": true | false
1381   }
1382 }
1383 ```
1384 ### DisableBuiltinPDFViewer
1385 Disable the built in PDF viewer. PDF files are downloaded and sent externally.
1386
1387 **Compatibility:** Firefox 60, Firefox ESR 60\
1388 **CCK2 Equivalent:** `disablePDFjs`\
1389 **Preferences Affected:** `pdfjs.disabled`
1390
1391 #### Windows (GPO)
1392 ```
1393 Software\Policies\Mozilla\Firefox\DisableBuiltinPDFViewer = 0x1 | 0x0
1394 ```
1395 #### Windows (Intune)
1396 OMA-URI:
1397 ```
1398 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableBuiltinPDFViewer
1399 ```
1400 Value (string):
1401 ```
1402 <enabled/> or <disabled/>
1403 ```
1404 #### macOS
1405 ```
1406 <dict>
1407   <key>DisableBuiltinPDFViewer</key>
1408   <true/> | <false/>
1409 </dict>
1410 ```
1411 #### policies.json
1412 ```
1413 {
1414   "policies": {
1415     "DisableBuiltinPDFViewer": true | false
1416   }
1417 }
1418 ```
1419 ### DisabledCiphers
1420 Disable specific cryptographic ciphers, listed below.
1421
1422 ```
1423 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
1424 TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
1425 TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256
1426 TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
1427 TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
1428 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
1429 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
1430 TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA
1431 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
1432 TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA
1433 TLS_DHE_RSA_WITH_AES_128_CBC_SHA
1434 TLS_DHE_RSA_WITH_AES_256_CBC_SHA
1435 TLS_RSA_WITH_AES_128_GCM_SHA256
1436 TLS_RSA_WITH_AES_256_GCM_SHA384
1437 TLS_RSA_WITH_AES_128_CBC_SHA
1438 TLS_RSA_WITH_AES_256_CBC_SHA
1439 TLS_RSA_WITH_3DES_EDE_CBC_SHA
1440 ```
1441
1442 **Preferences Affected:** `security.ssl3.ecdhe_rsa_aes_128_gcm_sha256`, `security.ssl3.ecdhe_ecdsa_aes_128_gcm_sha256`, `security.ssl3.ecdhe_ecdsa_chacha20_poly1305_sha256`, `security.ssl3.ecdhe_rsa_chacha20_poly1305_sha256`, `security.ssl3.ecdhe_ecdsa_aes_256_gcm_sha384`, `security.ssl3.ecdhe_rsa_aes_256_gcm_sha384`, `security.ssl3.ecdhe_rsa_aes_128_sha`, `security.ssl3.ecdhe_ecdsa_aes_128_sha`, `security.ssl3.ecdhe_rsa_aes_256_sha`, `security.ssl3.ecdhe_ecdsa_aes_256_sha`, `security.ssl3.dhe_rsa_aes_128_sha`, `security.ssl3.dhe_rsa_aes_256_sha`, `security.ssl3.rsa_aes_128_gcm_sha256`, `security.ssl3.rsa_aes_256_gcm_sha384`, `security.ssl3.rsa_aes_128_sha`, `security.ssl3.rsa_aes_256_sha`, `security.ssl3.deprecated.rsa_des_ede3_sha`
1443
1444 ---
1445 **Note:**
1446
1447 This policy was updated in Firefox 78 to allow enabling ciphers as well. Setting the value to true disables the cipher, setting the value to false enables the cipher. Previously setting the value to true or false disabled the cipher.
1448
1449 ---
1450 **Compatibility:** Firefox 76, Firefox ESR 68.8 (TLS_RSA_WITH_AES_128_GCM_SHA256 and TLS_RSA_WITH_AES_256_GCM_SHA384 were added in Firefox 78, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA38, TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, and TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 were added in Firefox 97 and Firefox 91.6)\
1451 **CCK2 Equivalent:** N/A\
1452 **Preferences Affected:** N/A
1453
1454 #### Windows (GPO)
1455 ```
1456 Software\Policies\Mozilla\Firefox\DisabledCiphers\CIPHER_NAME = 0x1 | 0x0
1457 ```
1458 #### Windows (Intune)
1459 OMA-URI:
1460 ```
1461 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_CIPHER_NAME
1462
1463 ```
1464 Value (string):
1465 ```
1466 <enabled/> or <disabled/>
1467 ```
1468 #### macOS
1469 ```
1470 <dict>
1471   <key>DisabledCiphers</key>
1472     <dict>
1473       <key>CIPHER_NAME</key>
1474       <true/> | <false/>
1475     </dict>
1476 </dict>
1477 ```
1478 #### policies.json
1479 ```
1480 {
1481   "policies": {
1482     "DisabledCiphers": {
1483       "CIPHER_NAME": true | false,
1484     }
1485   }
1486 }
1487 ```
1488 ### DisableDefaultBrowserAgent
1489 Prevent the default browser agent from taking any actions. Only applicable to Windows; other platforms don’t have the agent.
1490
1491 The browser agent is a Windows-only scheduled task which runs in the background to collect and submit data about the browser that the user has set as their OS default. More information is available [here](https://firefox-source-docs.mozilla.org/toolkit/mozapps/defaultagent/default-browser-agent/index.html).
1492
1493 **Compatibility:** Firefox 75, Firefox ESR 68.7 (Windows only)\
1494 **CCK2 Equivalent:** N/A\
1495 **Preferences Affected:** N/A
1496
1497 #### Windows (GPO)
1498 ```
1499 Software\Policies\Mozilla\Firefox\DisableDefaultBrowserAgent = 0x1 | 0x0
1500 ```
1501 #### Windows (Intune)
1502 OMA-URI:
1503 ```
1504 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableDefaultBrowserAgent
1505 ```
1506 Value (string):
1507 ```
1508 <enabled/> or <disabled/>
1509 ```
1510 #### policies.json
1511 ```
1512 {
1513   "policies": {
1514     "DisableDefaultBrowserAgent": true | false
1515   }
1516 }
1517 ```
1518 ### DisableDeveloperTools
1519 Remove access to all developer tools.
1520
1521 **Compatibility:** Firefox 60, Firefox ESR 60\
1522 **CCK2 Equivalent:** `removeDeveloperTools`\
1523 **Preferences Affected:** `devtools.policy.disabled`
1524
1525 #### Windows (GPO)
1526 ```
1527 Software\Policies\Mozilla\Firefox\DisableDeveloperTools = 0x1 | 0x0`
1528 ```
1529 #### Windows (Intune)
1530 OMA-URI:
1531 ```
1532 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableDeveloperTools
1533 ```
1534 Value (string):
1535 ```
1536 <enabled/> or <disabled/>
1537 ```
1538 #### macOS
1539 ```
1540 <dict>
1541   <key>DisableDeveloperTools</key>
1542   <true/> | <false/>
1543 </dict>
1544 ```
1545 #### policies.json
1546 ```
1547 {
1548   "policies": {
1549     "DisableDeveloperTools": true | false
1550   }
1551 }
1552 ```
1553 ### DisableFeedbackCommands
1554 Disable the menus for reporting sites (Submit Feedback, Report Deceptive Site).
1555
1556 **Compatibility:** Firefox 60, Firefox ESR 60\
1557 **CCK2 Equivalent:** N/A\
1558 **Preferences Affected:** N/A
1559
1560 #### Windows (GPO)
1561 ```
1562 Software\Policies\Mozilla\Firefox\DisableFeedbackCommands = 0x1 | 0x0
1563 ```
1564 #### Windows (Intune)
1565 OMA-URI:
1566 ```
1567 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFeedbackCommands
1568 ```
1569 Value (string):
1570 ```
1571 <enabled/> or <disabled/>
1572 ```
1573 #### macOS
1574 ```
1575 <dict>
1576   <key>DisableFeedbackCommands</key>
1577   <true/> | <false/>
1578 </dict>
1579 ```
1580 #### policies.json
1581 ```
1582 {
1583   "policies": {
1584     "DisableFeedbackCommands": true | false
1585   }
1586 }
1587 ```
1588 ### DisableFirefoxAccounts
1589 Disable Firefox Accounts integration (Sync).
1590
1591 **Compatibility:** Firefox 60, Firefox ESR 60\
1592 **CCK2 Equivalent:** `disableSync`\
1593 **Preferences Affected:** `identity.fxaccounts.enabled`
1594
1595 #### Windows (GPO)
1596 ```
1597 Software\Policies\Mozilla\Firefox\DisableFirefoxAccounts = 0x1 | 0x0
1598 ```
1599 #### Windows (Intune)
1600 OMA-URI:
1601 ```
1602 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxAccounts
1603 ```
1604 Value (string):
1605 ```
1606 <enabled/> or <disabled/>
1607 ```
1608 #### macOS
1609 ```
1610 <dict>
1611   <key>DisableFirefoxAccounts</key>
1612   <true/> | <false/>
1613 </dict>
1614 ```
1615 #### policies.json
1616 ```
1617 {
1618   "policies": {
1619     "DisableFirefoxAccounts": true | false
1620   }
1621 }
1622 ```
1623 ### DisableFirefoxScreenshots
1624 Remove access to Firefox Screenshots.
1625
1626 **Compatibility:** Firefox 60, Firefox ESR 60\
1627 **CCK2 Equivalent:** N/A\
1628 **Preferences Affected:** `extensions.screenshots.disabled`
1629
1630 #### Windows (GPO)
1631 ```
1632 Software\Policies\Mozilla\Firefox\DisableFirefoxScreenshots = 0x1 | 0x0
1633 ```
1634 #### Windows (Intune)
1635 OMA-URI:
1636 ```
1637 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxScreenshots
1638 ```
1639 Value (string):
1640 ```
1641 <enabled/> or <disabled/>
1642 ```
1643 #### macOS
1644 ```
1645 <dict>
1646   <key>DisableFirefoxScreenshots</key>
1647   <true/> | <false/>
1648 </dict>
1649 ```
1650 #### policies.json
1651 ```
1652 {
1653   "policies": {
1654     "DisableFirefoxScreenshots": true | false
1655   }
1656 }
1657 ```
1658 ### DisableFirefoxStudies
1659 Disable Firefox studies (Shield).
1660
1661 **Compatibility:** Firefox 60, Firefox ESR 60\
1662 **CCK2 Equivalent:** N/A\
1663 **Preferences Affected:** N/A
1664
1665 #### Windows (GPO)
1666 ```
1667 Software\Policies\Mozilla\Firefox\DisableFirefoxStudies = 0x1 | 0x0
1668 ```
1669 #### Windows (Intune)
1670 OMA-URI:
1671 ```
1672 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxStudies
1673 ```
1674 Value (string):
1675 ```
1676 <enabled/> or <disabled/>
1677 ```
1678 #### macOS
1679 ```
1680 <dict>
1681   <key>DisableFirefoxStudies</key>
1682   <true/> | <false/>
1683 </dict>
1684 ```
1685 #### policies.json
1686 ```
1687 {
1688   "policies": {
1689     "DisableFirefoxStudies": true | false
1690   }
1691 }
1692 ```
1693 ### DisableForgetButton
1694 Disable the "Forget" button.
1695
1696 **Compatibility:** Firefox 60, Firefox ESR 60\
1697 **CCK2 Equivalent:** `disableForget`\
1698 **Preferences Affected:** N/A
1699
1700 #### Windows (GPO)
1701 ```
1702 Software\Policies\Mozilla\Firefox\DisableForgetButton = 0x1 | 0x0
1703 ```
1704 #### Windows (Intune)
1705 OMA-URI:
1706 ```
1707 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableForgetButton
1708 ```
1709 Value (string):
1710 ```
1711 <enabled/> or <disabled/>
1712 ```
1713 #### macOS
1714 ```
1715 <dict>
1716   <key>DisableForgetButton</key>
1717   <true/> | <false/>
1718 </dict>
1719 ```
1720 #### policies.json
1721 ```
1722 {
1723   "policies": {
1724     "DisableForgetButton": true | false
1725   }
1726 }
1727 ```
1728 ### DisableFormHistory
1729 Turn off saving information on web forms and the search bar.
1730
1731 **Compatibility:** Firefox 60, Firefox ESR 60\
1732 **CCK2 Equivalent:** `disableFormFill`\
1733 **Preferences Affected:** `browser.formfill.enable`
1734
1735 #### Windows (GPO)
1736 ```
1737 Software\Policies\Mozilla\Firefox\DisableFormHistory = 0x1 | 0x0
1738 ```
1739 #### Windows (Intune)
1740 OMA-URI:
1741 ```
1742 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFormHistory
1743 ```
1744 Value (string):
1745 ```
1746 <enabled/> or <disabled/>
1747 ```
1748 #### macOS
1749 ```
1750 <dict>
1751   <key>DisableFormHistory</key>
1752   <true/> | <false/>
1753 </dict>
1754 ```
1755 #### policies.json
1756 ```
1757 {
1758   "policies": {
1759     "DisableFormHistory": true | false
1760   }
1761 }
1762 ```
1763 ### DisableMasterPasswordCreation
1764 Remove the master password functionality.
1765
1766 If this value is true, it works the same as setting [`PrimaryPassword`](#primarypassword) to false and removes the primary password functionality.
1767
1768 If both `DisableMasterPasswordCreation` and `PrimaryPassword` are used, `DisableMasterPasswordCreation` takes precedent.
1769
1770 **Compatibility:** Firefox 60, Firefox ESR 60\
1771 **CCK2 Equivalent:** `noMasterPassword`\
1772 **Preferences Affected:** N/A
1773
1774 #### Windows (GPO)
1775 ```
1776 Software\Policies\Mozilla\Firefox\DisableMasterPasswordCreation = 0x1 | 0x0
1777 ```
1778 #### Windows (Intune)
1779 OMA-URI:
1780 ```
1781 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableMasterPasswordCreation
1782 ```
1783 Value (string):
1784 ```
1785 <enabled/> or <disabled/>
1786 ```
1787 #### macOS
1788 ```
1789 <dict>
1790   <key>DisableMasterPasswordCreation</key>
1791   <true/> | <false/>
1792 </dict>
1793 ```
1794 #### policies.json
1795 ```
1796 {
1797   "policies": {
1798     "DisableMasterPasswordCreation": true | false
1799   }
1800 }
1801 ```
1802 ### DisablePasswordReveal
1803 Do not allow passwords to be shown in saved logins
1804
1805 **Compatibility:** Firefox 71, Firefox ESR 68.3\
1806 **CCK2 Equivalent:** N/A
1807 **Preferences Affected:** N/A
1808
1809 #### Windows (GPO)
1810 ```
1811 Software\Policies\Mozilla\Firefox\DisablePasswordReveal = 0x1 | 0x0
1812 ```
1813 #### Windows (Intune)
1814 OMA-URI:
1815 ```
1816 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePasswordReveal
1817 ```
1818 Value (string):
1819 ```
1820 <enabled/> or <disabled/>
1821 ```
1822 #### macOS
1823 ```
1824 <dict>
1825   <key>DisablePasswordReveal</key>
1826   <true/> | <false/>
1827 </dict>
1828 ```
1829 #### policies.json
1830 ```
1831 {
1832   "policies": {
1833     "DisablePasswordReveal": true | false
1834   }
1835 }
1836 ```
1837 ### DisablePocket
1838 Remove Pocket in the Firefox UI. It does not remove it from the new tab page.
1839
1840 **Compatibility:** Firefox 60, Firefox ESR 60\
1841 **CCK2 Equivalent:** `disablePocket`\
1842 **Preferences Affected:** `extensions.pocket.enabled`
1843
1844 #### Windows (GPO)
1845 ```
1846 Software\Policies\Mozilla\Firefox\DisablePocket = 0x1 | 0x0
1847 ```
1848 #### Windows (Intune)
1849 OMA-URI:
1850 ```
1851 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePocket
1852 ```
1853 Value (string):
1854 ```
1855 <enabled/> or <disabled/>
1856 ```
1857 #### macOS
1858 ```
1859 <dict>
1860   <key>DisablePocket</key>
1861   <true/> | <false/>
1862 </dict>
1863 ```
1864 #### policies.json
1865 ```
1866 {
1867   "policies": {
1868     "DisablePocket": true | false
1869   }
1870 }
1871 ```
1872 ### DisablePrivateBrowsing
1873 Remove access to private browsing.
1874
1875 **Compatibility:** Firefox 60, Firefox ESR 60\
1876 **CCK2 Equivalent:** `disablePrivateBrowsing`\
1877 **Preferences Affected:** N/A
1878
1879 #### Windows (GPO)
1880 ```
1881 Software\Policies\Mozilla\Firefox\DisablePrivateBrowsing = 0x1 | 0x0
1882 ```
1883 #### Windows (Intune)
1884 OMA-URI:
1885 ```
1886 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePrivateBrowsing
1887 ```
1888 Value (string):
1889 ```
1890 <enabled/> or <disabled/>
1891 ```
1892 #### macOS
1893 ```
1894 <dict>
1895   <key>DisablePrivateBrowsing</key>
1896   <true/> | <false/>
1897 </dict>
1898 ```
1899 #### policies.json
1900 ```
1901 {
1902   "policies": {
1903     "DisablePrivateBrowsing": true | false
1904   }
1905 }
1906 ```
1907 ### DisableProfileImport
1908 Disables the "Import data from another browser" option in the bookmarks window.
1909
1910 **Compatibility:** Firefox 60, Firefox ESR 60\
1911 **CCK2 Equivalent:** N/A\
1912 **Preferences Affected:** N/A
1913
1914 #### Windows (GPO)
1915 ```
1916 Software\Policies\Mozilla\Firefox\DisableProfileImport = 0x1 | 0x0
1917 ```
1918 #### Windows (Intune)
1919 OMA-URI:
1920 ```
1921 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableProfileImport
1922 ```
1923 Value (string):
1924 ```
1925 <enabled/> or <disabled/>
1926 ```
1927 #### macOS
1928 ```
1929 <dict>
1930   <key>DisableProfileImport</key>
1931   <true/> | <false/>
1932 </dict>
1933 ```
1934 #### policies.json
1935 ```
1936 {
1937   "policies": {
1938     "DisableProfileImport": true | false
1939   }
1940 }
1941 ```
1942 ### DisableProfileRefresh
1943 Disable the Refresh Firefox button on about:support and support.mozilla.org, as well as the prompt that displays offering to refresh Firefox when you haven't used it in a while.
1944
1945 **Compatibility:** Firefox 60, Firefox ESR 60\
1946 **CCK2 Equivalent:** `disableResetFirefox`\
1947 **Preferences Affected:** `browser.disableResetPrompt`
1948
1949 #### Windows (GPO)
1950 ```
1951 Software\Policies\Mozilla\Firefox\DisableProfileRefresh = 0x1 | 0x0
1952 ```
1953 #### Windows (Intune)
1954 OMA-URI:
1955 ```
1956 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableProfileRefresh
1957 ```
1958 Value (string):
1959 ```
1960 <enabled/> or <disabled/>
1961 ```
1962 #### macOS
1963 ```
1964 <dict>
1965   <key>DisableProfileRefresh</key>
1966   <true/> | <false/>
1967 </dict>
1968 ```
1969 #### policies.json
1970 ```
1971 {
1972   "policies": {
1973     "DisableProfileRefresh": true | false
1974   }
1975 }
1976 ```
1977 ### DisableSafeMode
1978 Disable safe mode within the browser.
1979
1980 On Windows, this disables safe mode via the command line as well.
1981
1982 **Compatibility:** Firefox 60, Firefox ESR 60 (Windows, macOS)\
1983 **CCK2 Equivalent:** `disableSafeMode`\
1984 **Preferences Affected:** N/A
1985
1986 #### Windows (GPO)
1987 ```
1988 Software\Policies\Mozilla\Firefox\DisableSafeMode = 0x1 | 0x0
1989 ```
1990 #### Windows (Intune)
1991 OMA-URI:
1992 ```
1993 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSafeMode
1994 ```
1995 Value (string):
1996 ```
1997 <enabled/> or <disabled/>
1998 ```
1999 #### macOS
2000 ```
2001 <dict>
2002   <key>DisableSafeMode</key>
2003   <true/> | <false/>
2004 </dict>
2005 ```
2006 #### policies.json
2007 ```
2008 {
2009   "policies": {
2010     "DisableSafeMode": true | false
2011   }
2012 }
2013 ```
2014 ### DisableSecurityBypass
2015 Prevent the user from bypassing security in certain cases.
2016
2017 `InvalidCertificate` prevents adding an exception when an invalid certificate is shown.
2018
2019 `SafeBrowsing` prevents selecting "ignore the risk" and visiting a harmful site anyway.
2020
2021 These policies only affect what happens when an error is shown, they do not affect any settings in preferences.
2022
2023 **Compatibility:** Firefox 60, Firefox ESR 60\
2024 **CCK2 Equivalent:** N/A\
2025 **Preferences Affected:** `security.certerror.hideAddException`, `browser.safebrowsing.allowOverride`
2026
2027 #### Windows (GPO)
2028 ```
2029 Software\Policies\Mozilla\Firefox\DisableSecurityBypass\InvalidCertificate = 0x1 | 0x0
2030 Software\Policies\Mozilla\Firefox\DisableSecurityBypass\SafeBrowsing = 0x1 | 0x0
2031 ```
2032 #### Windows (Intune)
2033 OMA-URI:
2034 ```
2035 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/P_DisableSecurityBypass_InvalidCertificate
2036 ```
2037 Value (string):
2038 ```
2039 <enabled/> or <disabled/>
2040 ```
2041 OMA-URI:
2042 ```
2043 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/P_DisableSecurityBypass_SafeBrowsing
2044 ```
2045 Value (string):
2046 ```
2047 <enabled/> or <disabled/>
2048 ```
2049
2050 #### macOS
2051 ```
2052 <dict>
2053   <key>DisableSecurityBypass</key>
2054   <dict>
2055     <key>InvalidCertificate</key>
2056     <true/> | <false/>
2057     <key>SafeBrowsing</key>
2058     <true/> | <false/>
2059   </dict>
2060 </dict>
2061 ```
2062 #### policies.json
2063 ```
2064 {
2065   "policies": {
2066     "DisableSecurityBypass": {
2067       "InvalidCertificate": true | false,
2068       "SafeBrowsing": true | false
2069     }
2070   }
2071 }
2072 ```
2073 ### DisableSetDesktopBackground
2074 Remove the "Set As Desktop Background..." menuitem when right clicking on an image.
2075
2076 **Compatibility:** Firefox 60, Firefox ESR 60\
2077 **CCK2 Equivalent:** `removeSetDesktopBackground`\
2078 **Preferences Affected:** N/A
2079
2080 #### Windows (GPO)
2081 ```
2082 Software\Policies\Mozilla\Firefox\DisableSetDesktopBackground = 0x1 | 0x0
2083 ```
2084 #### Windows (Intune)
2085 OMA-URI:
2086 ```
2087 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSetDesktopBackground
2088 ```
2089 Value (string):
2090 ```
2091 <enabled/> or <disabled/>
2092 ```
2093 #### macOS
2094 ```
2095 <dict>
2096   <key>DisableSetDesktopBackground</key>
2097   <true/> | <false/>
2098 </dict>
2099 ```
2100 #### policies.json
2101 ```
2102 {
2103   "policies": {
2104     "DisableSetDesktopBackground": true | false
2105   }
2106 }
2107 ```
2108 ### DisableSystemAddonUpdate
2109 Prevent system add-ons from being installed or updated.
2110
2111 **Compatibility:** Firefox 60, Firefox ESR 60\
2112 **CCK2 Equivalent:** N/A\
2113 **Preferences Affected:** N/A
2114
2115 #### Windows (GPO)
2116 ```
2117 Software\Policies\Mozilla\Firefox\DisableSystemAddonUpdate = 0x1 | 0x0
2118 ```
2119 #### Windows (Intune)
2120 OMA-URI:
2121 ```
2122 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSystemAddonUpdate
2123 ```
2124 Value (string):
2125 ```
2126 <enabled/> or <disabled/>
2127 ```
2128 #### macOS
2129 ```
2130 <dict>
2131   <key>DisableSystemAddonUpdate</key>
2132   <true/> | <false/>
2133 </dict>
2134 ```
2135 #### policies.json
2136 ```
2137 {
2138   "policies": {
2139     "DisableSystemAddonUpdate": true | false
2140   }
2141 }
2142 ```
2143 ### DisableTelemetry
2144 Prevent the upload of telemetry data.
2145
2146 As of Firefox 83 and Firefox ESR 78.5, local storage of telemetry data is disabled as well.
2147
2148 Mozilla recommends that you do not disable telemetry. Information collected through telemetry helps us build a better product for businesses like yours.
2149
2150 **Compatibility:** Firefox 60, Firefox ESR 60\
2151 **CCK2 Equivalent:** `disableTelemetry`\
2152 **Preferences Affected:** `datareporting.healthreport.uploadEnabled`, `datareporting.policy.dataSubmissionEnabled`, `toolkit.telemetry.archive.enabled`
2153
2154 #### Windows (GPO)
2155 ```
2156 Software\Policies\Mozilla\Firefox\DisableTelemetry = 0x1 | 0x0
2157 ```
2158 #### Windows (Intune)
2159 OMA-URI:
2160 ```
2161 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableTelemetry
2162 ```
2163 Value (string):
2164 ```
2165 <enabled/> or <disabled/>
2166 ```
2167 #### macOS
2168 ```
2169 <dict>
2170   <key>DisableTelemetry</key>
2171   <true/> | <false/>
2172 </dict>
2173 ```
2174 #### policies.json
2175 ```
2176 {
2177   "policies": {
2178     "DisableTelemetry": true | false
2179   }
2180 }
2181 ```
2182 ### DisableThirdPartyModuleBlocking
2183 Do not allow blocking third-party modules from the `about:third-party` page.
2184
2185 This policy only works on Windows through GPO (not policies.json).
2186
2187 **Compatibility:** Firefox 110 (Windows only, GPO only)\
2188 **CCK2 Equivalent:** N/A\
2189 **Preferences Affected:** N/A
2190
2191 #### Windows (GPO)
2192 ```
2193 Software\Policies\Mozilla\Firefox\DisableThirdPartyModuleBlocking = = 0x1 | 0x0
2194 ```
2195 #### Windows (Intune)
2196 OMA-URI:
2197 ```
2198 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableThirdPartyModuleBlocking
2199 ```
2200 Value (string):
2201 ```
2202 <enabled/> or <disabled/>
2203 ```
2204 ### DisplayBookmarksToolbar
2205 Set the initial state of the bookmarks toolbar. A user can still change how it is displayed.
2206
2207 `always` means the bookmarks toolbar is always shown.
2208
2209 `never` means the bookmarks toolbar is not shown.
2210
2211 `newtab` means the bookmarks toolbar is only shown on the new tab page.
2212
2213 **Compatibility:** Firefox 109, Firefox ESR 102.7\
2214 **CCK2 Equivalent:** N/A\
2215 **Preferences Affected:** N/A
2216
2217 #### Windows (GPO)
2218 ```
2219 Software\Policies\Mozilla\Firefox\DisplayBookmarksToolbar = "always", "never", "newtab"
2220 ```
2221 #### Windows (Intune)
2222 OMA-URI:
2223 ```
2224 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisplayBookmarksToolbar_Enum
2225 ```
2226 Value (string):
2227 ```
2228 <enabled/>
2229 <data id="DisplayBookmarksToolbar" value="always | never | newtab"/>
2230 ```
2231 #### macOS
2232 ```
2233 <dict>
2234   <key>DisplayBookmarksToolbar</key>
2235   <string>always | never | newtab</string>
2236 </dict>
2237 ```
2238 #### policies.json
2239 ```
2240 {
2241   "policies": {
2242     "DisplayBookmarksToolbar": "always" | "never" | "newtab"
2243   }
2244 }
2245 ```
2246 ### DisplayMenuBar
2247 Set the state of the menubar.
2248
2249 `always` means the menubar is shown and cannot be hidden.
2250
2251 `never` means the menubar is hidden and cannot be shown.
2252
2253 `default-on` means the menubar is on by default but can be hidden.
2254
2255 `default-off` means the menubar is off by default but can be shown.
2256
2257 **Compatibility:** Firefox 73, Firefox ESR 68.5 (Windows, some Linux)\
2258 **CCK2 Equivalent:** `displayMenuBar`\
2259 **Preferences Affected:** N/A
2260
2261 #### Windows (GPO)
2262 ```
2263 Software\Policies\Mozilla\Firefox\DisplayMenuBar = "always", "never", "default-on", "default-off"
2264 ```
2265 #### Windows (Intune)
2266 OMA-URI:
2267 ```
2268 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisplayMenuBar_Enum
2269 ```
2270 Value (string):
2271 ```
2272 <enabled/>
2273 <data id="DisplayMenuBar" value="always | never | default-on | default-off"/>
2274 ```
2275 #### macOS
2276 ```
2277 <dict>
2278   <key>DisplayMenuBar</key>
2279   <string>always | never | default-on | default-off</string>
2280 </dict>
2281 ```
2282 #### policies.json
2283 ```
2284 {
2285   "policies": {
2286     "DisplayMenuBar": "always", "never", "default-on", "default-off"
2287   }
2288 }
2289 ```
2290 ### DNSOverHTTPS
2291 Configure DNS over HTTPS.
2292
2293 `Enabled` determines whether DNS over HTTPS is enabled
2294
2295 `ProviderURL` is a URL to another provider.
2296
2297 `Locked` prevents the user from changing DNS over HTTPS preferences.
2298
2299 `ExcludedDomains` excludes domains from DNS over HTTPS.
2300
2301 `Fallback` determines whether or not Firefox will use your default DNS resolver if there is a problem with the secure DNS provider.
2302
2303 **Compatibility:** Firefox 63, Firefox ESR 68 (ExcludedDomains added in 75/68.7) (Fallback added in 124)\
2304 **CCK2 Equivalent:** N/A\
2305 **Preferences Affected:** `network.trr.mode`, `network.trr.uri`
2306
2307 #### Windows (GPO)
2308 ```
2309 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\Enabled = 0x1 | 0x0
2310 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\ProviderURL = "URL_TO_ALTERNATE_PROVIDER"
2311 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\Locked = 0x1 | 0x0
2312 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\ExcludedDomains\1 = "example.com"
2313 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\Fallback = 0x1 | 0x0
2314 ```
2315 #### Windows (Intune)
2316 OMA-URI:
2317 ```
2318 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_Enabled
2319 ```
2320 Value (string):
2321 ```
2322 <enabled/> or <disabled/>
2323 ```
2324 OMA-URI:
2325 ```
2326 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_ProviderURL
2327 ```
2328 Value (string):
2329 ```
2330 <enabled/>
2331 <data id="String" value="URL_TO_ALTERNATE_PROVIDER"/>
2332 ```
2333 OMA-URI:
2334 ```
2335 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_Locked
2336 ```
2337 Value (string):
2338 ```
2339 <enabled/> or <disabled/>
2340 ```
2341 OMA-URI:
2342 ```
2343 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_ExcludedDomains
2344 ```
2345 Value (string):
2346 ```
2347 <enabled/>
2348 <data id="List" value="1&#xF000;example.com"/>
2349 ```
2350 OMA-URI:
2351 ```
2352 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_Fallback
2353 ```
2354 Value (string):
2355 ```
2356 <enabled/> or <disabled/>
2357 ```
2358 #### macOS
2359 ```
2360 <dict>
2361   <key>DNSOverHTTPS</key>
2362   <dict>
2363     <key>Enabled</key>
2364     <true/> | <false/>
2365     <key>ProviderURL</key>
2366     <string>URL_TO_ALTERNATE_PROVIDER</string>
2367     <key>Locked</key>
2368     <true/> | <false/>
2369     <key>ExcludedDomains</key>
2370     <array>
2371       <string>example.com</string>
2372     </array>
2373     <key>Fallback</key>
2374     <true/> | <false/>
2375   </dict>
2376 </dict>
2377 ```
2378 #### policies.json
2379 ```
2380 {
2381   "policies": {
2382     "DNSOverHTTPS": {
2383       "Enabled":  true | false,
2384       "ProviderURL": "URL_TO_ALTERNATE_PROVIDER",
2385       "Locked": true | false,
2386       "ExcludedDomains": ["example.com"],
2387       "Fallback": true | false,
2388     }
2389   }
2390 }
2391 ```
2392 ### DontCheckDefaultBrowser
2393 Don't check if Firefox is the default browser at startup.
2394
2395 **Compatibility:** Firefox 60, Firefox ESR 60\
2396 **CCK2 Equivalent:** `dontCheckDefaultBrowser`\
2397 **Preferences Affected:** `browser.shell.checkDefaultBrowser`
2398
2399 #### Windows (GPO)
2400 ```
2401 Software\Policies\Mozilla\Firefox\DontCheckDefaultBrowser = 0x1 | 0x0
2402 ```
2403 #### Windows (Intune)
2404 OMA-URI:
2405 ```
2406 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DontCheckDefaultBrowser
2407 ```
2408 Value (string):
2409 ```
2410 <enabled/> or <disabled/>
2411 ```
2412 #### macOS
2413 ```
2414 <dict>
2415   <key>DontCheckDefaultBrowser</key>
2416   <true/> | <false/>
2417 </dict>
2418 ```
2419 #### policies.json
2420 ```
2421 {
2422   "policies": {
2423     "DontCheckDefaultBrowser": true | false
2424   }
2425 }
2426 ```
2427 ### DownloadDirectory
2428 Set and lock the download directory.
2429
2430 You can use ${home} for the native home directory.
2431
2432 **Compatibility:** Firefox 68, Firefox ESR 68\
2433 **CCK2 Equivalent:** N/A\
2434 **Preferences Affected:** `browser.download.dir`, `browser.download.folderList`, `browser.download.useDownloadDir`
2435
2436 #### Windows (GPO)
2437 ```
2438 Software\Policies\Mozilla\Firefox\DownloadDirectory = "${home}\Downloads"
2439 ```
2440 #### Windows (Intune)
2441 OMA-URI:
2442 ```
2443 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DownloadDirectory
2444 ```
2445 Value (string):
2446 ```
2447 <enabled/>
2448 <data id="Preferences_String" value="${home}\Downloads"/>
2449 ```
2450 #### macOS
2451 ```
2452 <dict>
2453   <key>DownloadDirectory</key>
2454   <string>${home}/Downloads</string>
2455 </dict>
2456 ```
2457 #### policies.json (macOS and Linux)
2458 ```
2459 {
2460   "policies": {
2461     "DownloadDirectory": "${home}/Downloads"
2462 }
2463 ```
2464 #### policies.json (Windows)
2465 ```
2466 {
2467   "policies": {
2468     "DownloadDirectory": "${home}\\Downloads"
2469 }
2470 ```
2471 ### EnableTrackingProtection
2472 Configure tracking protection.
2473
2474 If this policy is not configured, tracking protection is not enabled by default in the browser, but it is enabled by default in private browsing and the user can change it.
2475
2476 If `Value` is set to false, tracking protection is disabled and locked in both the regular browser and private browsing.
2477
2478 If `Value` is set to true, tracking protection is enabled by default in both the regular browser and private browsing and the `Locked` value determines whether or not a user can change it.
2479
2480 If `Cryptomining` is set to true, cryptomining scripts on websites are blocked.
2481
2482 If `Fingerprinting` is set to true, fingerprinting scripts on websites are blocked.
2483
2484 If `EmailTracking` is set to true, hidden email tracking pixels and scripts on websites are blocked. (Firefox 112)
2485
2486 `Exceptions` are origins for which tracking protection is not enabled.
2487
2488 **Compatibility:** Firefox 60, Firefox ESR 60 (Cryptomining and Fingerprinting added in 70/68.2, Exceptions added in 73/68.5)\
2489 **CCK2 Equivalent:** N/A\
2490 **Preferences Affected:** `privacy.trackingprotection.enabled`, `privacy.trackingprotection.pbmode.enabled`, `privacy.trackingprotection.cryptomining.enabled`, `privacy.trackingprotection.fingerprinting.enabled`
2491
2492 #### Windows (GPO)
2493 ```
2494 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Value = 0x1 | 0x0
2495 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Locked = 0x1 | 0x0
2496 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Cryptomining = 0x1 | 0x0
2497 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Fingerprinting = 0x1 | 0x0
2498 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Exceptions\1 = "https://example.com"
2499 ```
2500 #### Windows (Intune)
2501 OMA-URI:
2502 ```
2503 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/A_TrackingProtection_Value
2504 ```
2505 Value (string):
2506 ```
2507 <enabled/> or <disabled/>
2508 ```
2509 OMA-URI:
2510 ```
2511 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/B_TrackingProtection_Cryptomining
2512 ```
2513 Value (string):
2514 ```
2515 <enabled/> or <disabled/>
2516 ```
2517 OMA-URI:
2518 ```
2519 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/C_TrackingProtection_Fingerprinting
2520 ```
2521 Value (string):
2522 ```
2523 <enabled/> or <disabled/>
2524 ```
2525 OMA-URI:
2526 ```
2527 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/D_TrackingProtection_Exceptions
2528 ```
2529 Value (string):
2530 ```
2531 <enabled/>
2532 <data id="TrackingProtection_Exceptions" value="1&#xF000;https://example.com"/>
2533 ```
2534 OMA-URI:
2535 ```
2536 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/E_TrackingProtection_Locked
2537 ```
2538 Value (string):
2539 ```
2540 <enabled/> or <disabled/>
2541 ```
2542 #### macOS
2543 ```
2544 <dict>
2545   <key>EnableTrackingProtection</key>
2546   <dict>
2547     <key>Value</key>
2548     <true/> | <false/>
2549     <key>Locked</key>
2550     <true/> | <false/>
2551     <key>Cryptomining</key>
2552     <true/> | <false/>
2553     <key>Fingerprinting</key>
2554     <true/> | <false/>
2555     <key>Exceptions</key>
2556     <array>
2557       <string>https://example.com</string>
2558     </array>
2559   </dict>
2560 </dict>
2561 ```
2562 #### policies.json
2563 ```
2564 {
2565   "policies": {
2566     "EnableTrackingProtection": {
2567       "Value": true | false,
2568       "Locked": true | false,
2569       "Cryptomining": true | false,
2570       "Fingerprinting": true | false,
2571       "Exceptions": ["https://example.com"]
2572     }
2573   }
2574 }
2575 ```
2576 ### EncryptedMediaExtensions
2577 Enable or disable Encrypted Media Extensions and optionally lock it.
2578
2579 If `Enabled` is set to false, encrypted media extensions (like Widevine) are not downloaded by Firefox unless the user consents to installing them.
2580
2581 If `Locked` is set to true and `Enabled` is set to false, Firefox will not download encrypted media extensions (like Widevine) or ask the user to install them.
2582
2583 **Compatibility:** Firefox 77, Firefox ESR 68.9\
2584 **CCK2 Equivalent:** N/A\
2585 **Preferences Affected:** `media.eme.enabled`
2586
2587 #### Windows (GPO)
2588 ```
2589 Software\Policies\Mozilla\Firefox\EncryptedMediaExtensions\Enabled = 0x1 | 0x0
2590 Software\Policies\Mozilla\Firefox\EncryptedMediaExtensions\Locked = 0x1 | 0x0
2591 ```
2592 #### Windows (Intune)
2593 OMA-URI:
2594 ```
2595 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~EncryptedMediaExtensions/EncryptedMediaExtensions_Enabled
2596 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~EncryptedMediaExtensions/EncryptedMediaExtensions_Locked
2597 ```
2598 Value (string):
2599 ```
2600 <enabled/>or <disabled/>
2601 ```
2602 #### macOS
2603 ```
2604 <dict>
2605   <key>EncryptedMediaExtensions</key>
2606   <dict>
2607     <key>Enabled</key>
2608     <true/> | <false/>
2609     <key>Locked</key>
2610     <true/> | <false/>
2611   </dict>
2612 </dict>
2613 ```
2614 #### policies.json
2615 ```
2616 {
2617   "policies": {
2618     "EncryptedMediaExtensions": {
2619       "Enabled": true | false,
2620       "Locked": true | false
2621     }
2622   }
2623 }
2624 ```
2625 ### EnterprisePoliciesEnabled
2626 Enable policy support on macOS.
2627
2628 **Compatibility:** Firefox 63, Firefox ESR 60.3 (macOS only)\
2629 **CCK2 Equivalent:** N/A\
2630 **Preferences Affected:** N/A
2631
2632 #### macOS
2633 ```
2634 <dict>
2635   <key>EnterprisePoliciesEnabled</key>
2636   <true/>
2637 </dict>
2638 ```
2639 ### ExemptDomainFileTypePairsFromFileTypeDownloadWarnings
2640
2641 Disable warnings based on file extension for specific file types on domains.
2642
2643 This policy is based on the [Chrome policy](https://chromeenterprise.google/policies/#ExemptDomainFileTypePairsFromFileTypeDownloadWarnings) of the same name.
2644
2645 Important: The documentation for the policy for both Edge and Chrome is incorrect. The ```domains``` value must be a domain, not a URL pattern. Also, we do not support using ```*``` to mean all domains.
2646
2647 **Compatibility:** Firefox 102\
2648 **CCK2 Equivalent:** N/A\
2649 **Preferences Affected:** N/A
2650
2651 #### Windows (GPO)
2652 Software\Policies\Mozilla\Firefox\ExemptDomainFileTypePairsFromFileTypeDownloadWarnings (REG_MULTI_SZ) =
2653 ```
2654 [
2655   {
2656      "file_extension": "jnlp",
2657      "domains": ["example.com"]
2658   }
2659 ]
2660 ```
2661 #### Windows (Intune)
2662 OMA-URI:
2663 ```
2664 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/ExemptDomainFileTypePairsFromFileTypeDownloadWarnings
2665 ```
2666 Value (string):
2667 ```
2668 <enabled/>
2669 <data id="JSON" value='
2670 [
2671   {
2672      "file_extension": "jnlp",
2673      "domains": ["example.com"]
2674   }
2675 ]
2676 '/>
2677 ```
2678 #### macOS
2679 ```
2680 <dict>
2681   <key>ExemptDomainFileTypePairsFromFileTypeDownloadWarnings</key>
2682   <array>
2683     <dict>
2684       <key>file_extension</key>
2685       <string>jnlp</string>
2686       <key>domains</key>
2687       <array>
2688         <string>example.com</string>
2689       </array>
2690     </dict>
2691   </array>
2692 </dict>
2693 ```
2694 #### policies.json
2695 ```
2696 {
2697   "policies": {
2698     "ExemptDomainFileTypePairsFromFileTypeDownloadWarnings": [{
2699       "file_extension": "jnlp",
2700       "domains": ["example.com"]
2701     }]
2702   }
2703 }
2704 ```
2705 ### Extensions
2706 Control the installation, uninstallation and locking of extensions.
2707
2708 We strongly recommend that you use the **[`ExtensionSettings`](#extensionsettings)** policy. It has the same functionality and adds more. It does not support native paths, though, so you'll have to use file:/// URLs.
2709
2710 This method will be deprecated in the near future.
2711
2712 `Install` is a list of URLs or native paths for extensions to be installed.
2713
2714 `Uninstall` is a list of extension IDs that should be uninstalled if found.
2715
2716 `Locked` is a list of extension IDs that the user cannot disable or uninstall.
2717
2718 **Compatibility:** Firefox 60, Firefox ESR 60\
2719 **CCK2 Equivalent:** `addons`\
2720 **Preferences Affected:** N/A
2721
2722 #### Windows (GPO)
2723 ```
2724 Software\Policies\Mozilla\Firefox\Extensions\Install\1 = "https://addons.mozilla.org/firefox/downloads/somefile.xpi"
2725 Software\Policies\Mozilla\Firefox\Extensions\Install\2 = "//path/to/xpi"
2726 Software\Policies\Mozilla\Firefox\Extensions\Uninstall\1 = "bad_addon_id@mozilla.org"
2727 Software\Policies\Mozilla\Firefox\Extensions\Locked\1 = "addon_id@mozilla.org"
2728 ```
2729 #### Windows (Intune)
2730 OMA-URI:
2731 ```
2732 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/Extensions_Install
2733 ```
2734 Value (string):
2735 ```
2736 <enabled/>
2737 <data id="Extensions" value="1&#xF000;https://addons.mozilla.org/firefox/downloads/somefile.xpi&#xF000;2&#xF000;//path/to/xpi"/>
2738 ```
2739 OMA-URI:
2740 ```
2741 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/Extensions_Uninstall
2742 ```
2743 Value (string):
2744 ```
2745 <enabled/>
2746 <data id="Extensions" value="1&#xF000;bad_addon_id@mozilla.org"/>
2747 ```
2748 OMA-URI:
2749 ```
2750 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/Extensions_Locked
2751 ```
2752 Value (string):
2753 ```
2754 <enabled/>
2755 <data id="Extensions" value="1&#xF000;addon_id@mozilla.org"/>
2756 ```
2757 #### macOS
2758 ```
2759 <dict>
2760   <key>Extensions</key>
2761   <dict>
2762     <key>Install</key>
2763     <array>
2764       <string>https://addons.mozilla.org/firefox/downloads/somefile.xpi</string>
2765       <string>//path/to/xpi</string>
2766     </array>
2767     <key>Uninstall</key>
2768     <array>
2769       <string>bad_addon_id@mozilla.org</string>
2770     </array>
2771     <key>Locked</key>
2772     <array>
2773       <string>addon_id@mozilla.org</string>
2774     </array>
2775   </dict>
2776 </dict>
2777 ```
2778 #### policies.json
2779 ```
2780 {
2781   "policies": {
2782     "Extensions": {
2783       "Install": ["https://addons.mozilla.org/firefox/downloads/somefile.xpi", "//path/to/xpi"],
2784       "Uninstall": ["bad_addon_id@mozilla.org"],
2785       "Locked":  ["addon_id@mozilla.org"]
2786     }
2787   }
2788 }
2789 ```
2790 ### ExtensionSettings
2791 Manage all aspects of extensions. This policy is based heavily on the [Chrome policy](https://dev.chromium.org/administrators/policy-list-3/extension-settings-full) of the same name.
2792
2793 This policy maps an extension ID to its configuration. With an extension ID, the configuration will be applied to the specified extension only. A default configuration can be set for the special ID "*", which will apply to all extensions that don't have a custom configuration set in this policy.
2794
2795 To obtain an extension ID, install the extension and go to about:support. You will see the ID in the Extensions section. I've also created an extension that makes it easy to find the ID of extensions on AMO. You can download it [here](https://github.com/mkaply/queryamoid/releases/tag/v0.1).
2796
2797 The configuration for each extension is another dictionary that can contain the fields documented below.
2798
2799 | Name | Description |
2800 | --- | --- |
2801 | `installation_mode` | Maps to a string indicating the installation mode for the extension. The valid strings are `allowed`,`blocked`,`force_installed`, and `normal_installed`.
2802 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`allowed` | Allows the extension to be installed by the user. This is the default behavior. There is no need for an install_url; it will automatically be allowed based on the ID.
2803 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`blocked`| Blocks installation of the extension and removes it from the device if already installed.
2804 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`force_installed`| The extension is automatically installed and can't be removed by the user. This option is not valid for the default configuration and requires an install_url.
2805 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`normal_installed`| The extension is automatically installed but can be disabled by the user. This option is not valid for the default configuration and requires an install_url.
2806 | `install_url`| Maps to a URL indicating where Firefox can download a force_installed or normal_installed extension.  If installing from the local file system, use a [```file:///``` URL](https://en.wikipedia.org/wiki/File_URI_scheme). If installing from the addons.mozilla.org, use the following URL (substituting SHORT_NAME from the URL on AMO), https://addons.mozilla.org/firefox/downloads/latest/SHORT_NAME/latest.xpi. Languages packs are available from https://releases.mozilla.org/pub/firefox/releases/VERSION/PLATFORM/xpi/LANGUAGE.xpi. If you need to update the extension, you can change the name of the extension and it will be automatically updated. Extensions installed from file URLs will additional be updated when their internal version changes.
2807 | `install_sources` | A list of sources from which installing extensions is allowed using URL match patterns. **This is unnecessary if you are only allowing the installation of certain extensions by ID.** Each item in this list is an extension-style match pattern. Users will be able to easily install items from any URL that matches an item in this list. Both the location of the *.xpi file and the page where the download is started from (i.e.  the referrer) must be allowed by these patterns. This setting can be used only for the default configuration.
2808 | `allowed_types` | This setting whitelists the allowed types of extension/apps that can be installed in Firefox. The value is a list of strings, each of which should be one of the following: "extension", "theme", "dictionary", "locale" This setting can be used only for the default configuration.
2809 | `blocked_install_message` | This maps to a string specifying the error message to display to users if they're blocked from installing an extension. This setting allows you to append text to the generic error message displayed when the extension is blocked. This could be be used to direct users to your help desk, explain why a particular extension is blocked, or something else. This setting can be used only for the default configuration.
2810 | `restricted_domains` | An array of domains on which content scripts can't be run. This setting can be used only for the default configuration.
2811 | `updates_disabled` | (Firefox 89, Firefox ESR 78.11) Boolean that indicates whether or not to disable automatic updates for an individual extension.
2812 | `default_area` | (Firefox 113) String that indicates where to place the extension icon by default. Possible values are `navbar` and `menupanel`.
2813
2814 **Compatibility:** Firefox 69, Firefox ESR 68.1 (As of Firefox 85, Firefox ESR 78.7, installing a theme makes it the default.)\
2815 **CCK2 Equivalent:** N/A\
2816 **Preferences Affected:** N/A
2817
2818 #### Windows (GPO)
2819 Software\Policies\Mozilla\Firefox\ExtensionSettings (REG_MULTI_SZ) =
2820 ```
2821 {
2822   "*": {
2823     "blocked_install_message": "Custom error message.",
2824     "install_sources": ["https://yourwebsite.com/*"],
2825     "installation_mode": "blocked",
2826     "allowed_types": ["extension"]
2827   },
2828   "uBlock0@raymondhill.net": {
2829     "installation_mode": "force_installed",
2830     "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
2831   },
2832   "https-everywhere@eff.org": {
2833     "installation_mode": "allowed",
2834     "updates_disabled": false
2835   }
2836 }
2837 ```
2838 #### Windows (Intune)
2839 OMA-URI:
2840 ```
2841 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/ExtensionSettings
2842 ```
2843 Value (string):
2844 ```
2845 <enabled/>
2846 <data id="ExtensionSettings" value='
2847 {
2848   "*": {
2849     "blocked_install_message": "Custom error message.",
2850     "install_sources": ["https://yourwebsite.com/*"],
2851     "installation_mode": "blocked",
2852     "allowed_types": ["extension"]
2853   },
2854   "uBlock0@raymondhill.net": {
2855     "installation_mode": "force_installed",
2856     "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
2857   },
2858     "https-everywhere@eff.org": {
2859     "installation_mode": "allowed",
2860     "updates_disabled": false
2861   }
2862 }'/>
2863 ```
2864 #### macOS
2865 ```
2866 <dict>
2867   <key>ExtensionSettings</key>
2868   <dict>
2869     <key>*</key>
2870     <dict>
2871       <key>blocked_install_message</key>
2872       <string>Custom error message.</string>
2873       <key>install_sources</key>
2874       <array>
2875         <string>"https://yourwebsite.com/*"</string>
2876       </array>
2877       <key>installation_mode</key>
2878       <string>blocked</string>
2879       <key>allowed_types</key>
2880       <array>
2881         <string>extension</string>
2882       </array>
2883     </dict>
2884     <key>uBlock0@raymondhill.net</key>
2885     <dict>
2886       <key>installation_mode</key>
2887       <string>force_installed</string>
2888       <key>install_url</key>
2889       <string>https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi</string>
2890     </dict>
2891     <key>https-everywhere@eff.org</key>
2892     <dict>
2893       <key>installation_mode</key>
2894       <string>allowed</string>
2895       <key>updates_disabled</key>
2896       <true/> | <false/>
2897     </dict>
2898   </dict>
2899 </dict>
2900 ```
2901 #### policies.json
2902 ```
2903 {
2904   "policies": {
2905     "ExtensionSettings": {
2906       "*": {
2907         "blocked_install_message": "Custom error message.",
2908         "install_sources": ["https://yourwebsite.com/*"],
2909         "installation_mode": "blocked",
2910         "allowed_types": ["extension"]
2911       },
2912       "uBlock0@raymondhill.net": {
2913         "installation_mode": "force_installed",
2914         "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
2915       },
2916       "https-everywhere@eff.org": {
2917         "installation_mode": "allowed",
2918         "updates_disabled": false
2919       }
2920     }
2921   }
2922 }
2923 ```
2924 ### ExtensionUpdate
2925 Control extension updates.
2926
2927 **Compatibility:** Firefox 67, Firefox ESR 60.7\
2928 **CCK2 Equivalent:** N/A\
2929 **Preferences Affected:** `extensions.update.enabled`
2930
2931 #### Windows (GPO)
2932 ```
2933 Software\Policies\Mozilla\Firefox\ExtensionUpdate = 0x1 | 0x0
2934 ```
2935 #### Windows (Intune)
2936 OMA-URI:
2937 ```
2938 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/ExtensionUpdate
2939 ```
2940 Value (string):
2941 ```
2942 <enabled/> or <disabled/>
2943 ```
2944 #### macOS
2945 ```
2946 <dict>
2947   <key>ExtensionUpdate</key>
2948   <true/> | <false/>
2949 </dict>
2950 ```
2951 #### policies.json
2952 ```
2953 {
2954   "policies": {
2955     "ExtensionUpdate": true | false
2956   }
2957 }
2958 ```
2959 ### FirefoxHome
2960 Customize the Firefox Home page.
2961
2962 **Compatibility:** Firefox 68, Firefox ESR 68 (SponsoredTopSites and SponsoredPocket were added in Firefox 95, Firefox ESR 91.4, Snippets was deprecated in Firefox 122)
2963 **CCK2 Equivalent:** N/A\
2964 **Preferences Affected:** `browser.newtabpage.activity-stream.showSearch`, `browser.newtabpage.activity-stream.feeds.topsites`, `browser.newtabpage.activity-stream.feeds.section.highlights`, `browser.newtabpage.activity-stream.feeds.section.topstories`, `browser.newtabpage.activity-stream.feeds.snippets`, `browser.newtabpage.activity-stream.showSponsoredTopSites`, `browser.newtabpage.activity-stream.showSponsored`
2965
2966 #### Windows (GPO)
2967 ```
2968 Software\Policies\Mozilla\Firefox\FirefoxHome\Search = 0x1 | 0x0
2969 Software\Policies\Mozilla\Firefox\FirefoxHome\TopSites = 0x1 | 0x0
2970 Software\Policies\Mozilla\Firefox\FirefoxHome\SponsoredTopSites = 0x1 | 0x0
2971 Software\Policies\Mozilla\Firefox\FirefoxHome\Highlights = 0x1 | 0x0
2972 Software\Policies\Mozilla\Firefox\FirefoxHome\Pocket = 0x1 | 0x0
2973 Software\Policies\Mozilla\Firefox\FirefoxHome\SponsoredPocket = 0x1 | 0x0
2974 Software\Policies\Mozilla\Firefox\FirefoxHome\Snippets = 0x1 | 0x0
2975 Software\Policies\Mozilla\Firefox\FirefoxHome\Locked = 0x1 | 0x0
2976 ```
2977 #### Windows (Intune)
2978 OMA-URI:
2979 ```
2980 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/CustomizeFirefoxHome
2981 ```
2982 Value (string):
2983 ```
2984 <enabled/>
2985 <data id="FirefoxHome_Search"  value="true | false"/>
2986 <data id="FirefoxHome_TopSites"  value="true | false"/>
2987 <data id="FirefoxHome_SponsoredTopSites"  value="true | false"/>
2988 <data id="FirefoxHome_Highlights"  value="true | false"/>
2989 <data id="FirefoxHome_Pocket"  value="true | false"/>
2990 <data id="FirefoxHome_SponsoredPocket"  value="true | false"/>
2991 <data id="FirefoxHome_Snippets"  value="true | false"/>
2992 <data id="FirefoxHome_Locked"  value="true | false"/>
2993 ```
2994 #### macOS
2995 ```
2996 <dict>
2997   <key>FirefoxHome</key>
2998   <dict>
2999     <key>Search</key>
3000     <true/> | <false/>
3001     <key>TopSites</key>
3002     <true/> | <false/>
3003     <key>SponsoredTopSites</key>
3004     <true/> | <false/>
3005     <key>Highlights</key>
3006     <true/> | <false/>
3007     <key>Pocket</key>
3008     <true/> | <false/>
3009     <key>SponsoredPocket</key>
3010     <true/> | <false/>
3011     <key>Snippets</key>
3012     <true/> | <false/>
3013     <key>Locked</key>
3014     <true/> | <false/>
3015   </dict>
3016 </dict>
3017 ```
3018 #### policies.json
3019 ```
3020 {
3021   "policies": {
3022     "FirefoxHome": {
3023       "Search": true | false,
3024       "TopSites": true | false,
3025       "SponsoredTopSites": true | false,
3026       "Highlights": true | false,
3027       "Pocket": true | false,
3028       "SponsoredPocket": true | false,
3029       "Snippets": true | false,
3030       "Locked": true | false
3031     }
3032   }
3033 }
3034 ```
3035 ### FirefoxSuggest
3036 Customize Firefox Suggest (US only).
3037
3038 **Compatibility:** Firefox 118, Firefox ESR 115.3.
3039 **CCK2 Equivalent:** N/A\
3040 **Preferences Affected:** `browser.urlbar.suggest.quicksuggest.nonsponsored`, `browser.urlbar.suggest.quicksuggest.sponsored`, `browser.urlbar.quicksuggest.dataCollection.enabled`
3041
3042 #### Windows (GPO)
3043 ```
3044 Software\Policies\Mozilla\Firefox\FirefoxSuggest\WebSuggestions = 0x1 | 0x0
3045 Software\Policies\Mozilla\Firefox\FirefoxSuggest\SponsoredSuggestions = 0x1 | 0x0
3046 Software\Policies\Mozilla\Firefox\FirefoxSuggest\ImproveSuggest = 0x1 | 0x0
3047 Software\Policies\Mozilla\Firefox\FirefoxSuggest\Locked = 0x1 | 0x0
3048 ```
3049 #### Windows (Intune)
3050 OMA-URI:
3051 ```
3052 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~FirefoxSuggest/WebSuggestions
3053 ```
3054 Value (string):
3055 ```
3056 <enabled/> or <disabled/>
3057 ```
3058 OMA-URI:
3059 ```
3060 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~FirefoxSuggest/SponsoredSuggestions
3061 ```
3062 Value (string):
3063 ```
3064 <enabled/> or <disabled/>
3065 ```
3066 OMA-URI:
3067 ```
3068 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~FirefoxSuggest/ImproveSuggest
3069 ```
3070 Value (string):
3071 ```
3072 <enabled/> or <disabled/>
3073 ```
3074 OMA-URI:
3075 ```
3076 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~FirefoxSuggest/Locked
3077 ```
3078 Value (string):
3079 ```
3080 <enabled/> or <disabled/>
3081 ```
3082 #### macOS
3083 ```
3084 <dict>
3085   <key>FirefoxSuggest</key>
3086   <dict>
3087     <key>WebSuggestions</key>
3088     <true/> | <false/>
3089     <key>SponsoredSuggestions</key>
3090     <true/> | <false/>
3091     <key>ImproveSuggest</key>
3092     <true/> | <false/>
3093     <key>Locked</key>
3094     <true/> | <false/>
3095   </dict>
3096 </dict>
3097 ```
3098 #### policies.json
3099 ```
3100 {
3101   "policies": {
3102     "FirefoxSuggest": {
3103       "WebSuggestions": true | false,
3104       "SponsoredSuggestions": true | false,
3105       "ImproveSuggest": true | false,
3106       "Locked": true | false
3107     }
3108   }
3109 }
3110 ```
3111 ### GoToIntranetSiteForSingleWordEntryInAddressBar
3112 Whether to always go through the DNS server before sending a single word search string to a search engine.
3113
3114 If the site exists, it will navigate to the website. If the intranet responds with a 404, the page will show a 404. If the intranet does not respond, the browser will attempt a search.
3115
3116 The second result in the URL bar will be a search result to allow users to conduct a web search exactly as it was entered.
3117
3118 If instead you would like to enable the ability to have your domain appear as a valid URL and to disallow the browser from ever searching that term using the first result that matches it, add the pref `browser.fixup.domainwhitelist.YOUR_DOMAIN` (where `YOUR_DOMAIN` is the name of the domain you'd like to add), and set the pref to `true`. The URL bar will then suggest `YOUR_DOMAIN` when the user fully types `YOUR_DOMAIN`. If the user attempts to load that domain and it fails to load, it will show an "Unable to connect" error page.
3119
3120 You can also whitelist a domain suffix that is not part of the [Public Suffix List](https://publicsuffix.org/) by adding the pref `browser.fixup.domainsuffixwhitelist.YOUR_DOMAIN_SUFFIX` with a value of `true`.
3121
3122 Additionally, if you want users to see a "Did you mean to go to 'YOUR_DOMAIN'" prompt below the URL bar if they land on a search results page instead of an intranet domain that provides a response, set the pref `browser.urlbar.dnsResolveSingleWordsAfterSearch` to `1`. Enabling this will cause the browser to commit a DNS check after every single word search. If the browser receives a response from the intranet, a prompt will ask the user if they'd like to instead navigate to `YOUR_DOMAIN`. If the user presses the **yes** button, `browser.fixup.domainwhitelist.YOUR_DOMAIN` will be set to `true`.
3123
3124 **Compatibility:** Firefox 104, Firefox ESR 102.2\
3125 **CCK2 Equivalent:** `N/A`\
3126 **Preferences Affected:** `browser.fixup.dns_first_for_single_words`
3127
3128 #### Windows (GPO)
3129 ```
3130 Software\Policies\Mozilla\Firefox\GoToIntranetSiteForSingleWordEntryInAddressBar = 0x1 | 0x0
3131 ```
3132 #### Windows (Intune)
3133 OMA-URI:
3134 ```
3135 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/GoToIntranetSiteForSingleWordEntryInAddressBar
3136 ```
3137 Value (string):
3138 ```
3139 <enabled/> or <disabled/>
3140 ```
3141 #### macOS
3142 ```
3143 <dict>
3144   <key>GoToIntranetSiteForSingleWordEntryInAddressBar</key>
3145   <true/> | <false/>
3146 </dict>
3147 ```
3148 #### policies.json
3149 ```
3150 {
3151   "policies": {
3152     "GoToIntranetSiteForSingleWordEntryInAddressBar": true | false
3153   }
3154 }
3155 ```
3156 ### Handlers
3157 Configure default application handlers. This policy is based on the internal format of `handlers.json`.
3158
3159 You can configure handlers based on a mime type (`mimeTypes`), a file's extension (`extensions`), or a protocol (`schemes`).
3160
3161 Within each handler type, you specify the given mimeType/extension/scheme as a key and use the following subkeys to describe how it is handled.
3162
3163 | Name | Description |
3164 | --- | --- |
3165 | `action`| Can be either `saveToDisk`, `useHelperApp`, `useSystemDefault`.
3166 | `ask` | If `true`, the user is asked if what they want to do with the file. If `false`, the action is taken without user intervention.
3167 | `handlers` | An array of handlers with the first one being the default. If you don't want to have a default handler, use an empty object for the first handler. Choose between path or uriTemplate.
3168 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`name` | The display name of the handler (might not be used).
3169 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`path`| The native path to the executable to be used.
3170 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`uriTemplate`| A url to a web based application handler. The URL must be https and contain a %s to be used for substitution.
3171
3172 **Compatibility:** Firefox 78, Firefox ESR 78\
3173 **CCK2 Equivalent:** N/A\
3174 **Preferences Affected:** N/A
3175
3176 #### Windows (GPO)
3177 Software\Policies\Mozilla\Firefox\Handlers (REG_MULTI_SZ) =
3178 ```
3179 {
3180   "mimeTypes": {
3181     "application/msword": {
3182       "action": "useSystemDefault",
3183       "ask": true | false
3184     }
3185   },
3186   "schemes": {
3187     "mailto": {
3188       "action": "useHelperApp",
3189       "ask": true | false,
3190       "handlers": [{
3191         "name": "Gmail",
3192         "uriTemplate": "https://mail.google.com/mail/?extsrc=mailto&url=%s"
3193       }]
3194     }
3195   },
3196   "extensions": {
3197     "pdf": {
3198       "action": "useHelperApp",
3199       "ask": true | false,
3200       "handlers": [{
3201         "name": "Adobe Acrobat",
3202         "path": "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32.exe"
3203       }]
3204     }
3205   }
3206 }
3207 ```
3208 #### Windows (Intune)
3209 OMA-URI:
3210 ```
3211 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Handlers
3212 ```
3213 Value (string):
3214 ```
3215 <enabled/>
3216 <data id="Handlers" value='
3217 {
3218   "mimeTypes": {
3219     "application/msword": {
3220       "action": "useSystemDefault",
3221       "ask": true | false
3222     }
3223   },
3224   "schemes": {
3225     "mailto": {
3226       "action": "useHelperApp",
3227       "ask": true | false,
3228       "handlers": [{
3229         "name": "Gmail",
3230         "uriTemplate": "https://mail.google.com/mail/?extsrc=mailto&amp;url=%s"
3231       }]
3232     }
3233   },
3234   "extensions": {
3235     "pdf": {
3236       "action": "useHelperApp",
3237       "ask": true | false,
3238       "handlers": [{
3239         "name": "Adobe Acrobat",
3240         "path": "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32.exe"
3241       }]
3242     }
3243   }
3244 }
3245 '/>
3246 ```
3247 #### macOS
3248 ```
3249 <dict>
3250   <key>Handlers</key>
3251   <dict>
3252     <key>mimeTypes</key>
3253     <dict>
3254       <key>application/msword</key>
3255       <dict>
3256         <key>action</key>
3257         <string>useSystemDefault</string>
3258         <key>ask</key>
3259         <true/> | <false/>
3260       </dict>
3261     </dict>
3262     <key>schemes</key>
3263     <dict>
3264       <key>mailto</key>
3265       <dict>
3266         <key>action</key>
3267         <string>useHelperApp</string>
3268         <key>ask</key>
3269         <true/> | <false/>
3270         <key>handlers</key>
3271         <array>
3272           <dict>
3273             <key>name</key>
3274             <string>Gmail</string>
3275             <key>uriTemplate</key>
3276             <string>https://mail.google.com/mail/?extsrc=mailto&url=%s</string>
3277           </dict>
3278         </array>
3279       </dict>
3280     </dict>
3281     <key>extensions</key>
3282     <dict>
3283       <key>pdf</key>
3284       <dict>
3285         <key>action</key>
3286         <string>useHelperApp</string>
3287         <key>ask</key>
3288         <true/> | <false/>
3289         <key>handlers</key>
3290         <array>
3291           <dict>
3292             <key>name</key>
3293             <string>Adobe Acrobat</string>
3294             <key>path</key>
3295             <string>/System/Applications/Preview.app</string>
3296           </dict>
3297         </array>
3298       </dict>
3299     </dict>
3300   </dict>
3301 </dict>
3302 ```
3303 #### policies.json
3304 ```
3305 {
3306   "policies": {
3307     "Handlers": {
3308       "mimeTypes": {
3309         "application/msword": {
3310           "action": "useSystemDefault",
3311           "ask": false
3312         }
3313       },
3314       "schemes": {
3315         "mailto": {
3316           "action": "useHelperApp",
3317           "ask": true | false,
3318           "handlers": [{
3319             "name": "Gmail",
3320             "uriTemplate": "https://mail.google.com/mail/?extsrc=mailto&url=%s"
3321           }]
3322         }
3323       },
3324       "extensions": {
3325         "pdf": {
3326           "action": "useHelperApp",
3327           "ask": true | false,
3328           "handlers": [{
3329             "name": "Adobe Acrobat",
3330             "path": "/usr/bin/acroread"
3331           }]
3332         }
3333       }
3334     }
3335   }
3336 }
3337 ```
3338 ### HardwareAcceleration
3339 Control hardware acceleration.
3340
3341 **Compatibility:** Firefox 60, Firefox ESR 60\
3342 **CCK2 Equivalent:** N/A\
3343 **Preferences Affected:** `layers.acceleration.disabled`
3344
3345 #### Windows (GPO)
3346 ```
3347 Software\Policies\Mozilla\Firefox\HardwareAcceleration = 0x1 | 0x0
3348 ```
3349 #### Windows (Intune)
3350 OMA-URI:
3351 ```
3352 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/HardwareAcceleration
3353 ```
3354 Value (string):
3355 ```
3356 <enabled/> or <disabled/>
3357 ```
3358 #### macOS
3359 ```
3360 <dict>
3361   <key>HardwareAcceleration</key>
3362   <true/> | <false/>
3363 </dict>
3364 ```
3365 #### policies.json
3366 ```
3367 {
3368   "policies": {
3369     "HardwareAcceleration": true | false
3370   }
3371 }
3372 ```
3373 ### Homepage
3374 Configure the default homepage and how Firefox starts.
3375
3376 `URL` is the default homepage.
3377
3378 `Locked` prevents the user from changing homepage preferences.
3379
3380 `Additional` allows for more than one homepage.
3381
3382 `StartPage` is how Firefox starts. The choices are no homepage, the default homepage or the previous session.
3383
3384 With Firefox 78, an additional option as added for `Startpage`, `homepage-locked`. If this is value is set for the Startpage, the user will always get the homepage at startup and cannot choose to restore their session.
3385
3386 **Compatibility:** Firefox 60, Firefox ESR 60 (StartPage was added in Firefox 60, Firefox ESR 60.4, homepage-locked added in Firefox 78)\
3387 **CCK2 Equivalent:** `homePage`,`lockHomePage`\
3388 **Preferences Affected:** `browser.startup.homepage`, `browser.startup.page`
3389
3390 #### Windows (GPO)
3391 ```
3392 Software\Policies\Mozilla\Firefox\Homepage\URL = "https://example.com"
3393 Software\Policies\Mozilla\Firefox\Homepage\Locked = 0x1 | 0x0
3394 Software\Policies\Mozilla\Firefox\Homepage\Additional\1 = "https://example.org"
3395 Software\Policies\Mozilla\Firefox\Homepage\Additional\2 = "https://example.edu"
3396 Software\Policies\Mozilla\Firefox\Homepage\StartPage = "none" | "homepage" | "previous-session" | "homepage-locked"
3397 ```
3398 #### Windows (Intune)
3399 OMA-URI:
3400 ```
3401 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageURL
3402 ```
3403 Value (string):
3404 ```
3405 <enabled/>
3406
3407 <data id="HomepageURL" value="https://example.com"/>
3408 <data id="HomepageLocked" value="true | false"/>
3409 ```
3410 OMA-URI:
3411 ```
3412 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageAdditional
3413 ```
3414 Value (string):
3415 ```
3416 <enabled/>
3417
3418 <data id="HomepageAdditional" value="1&#xF000;http://example.org&#xF000;2&#xF000;http://example.edu"/>
3419 ```
3420 OMA-URI:
3421 ```
3422 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageStartPage
3423 ```
3424 Value (string):
3425 ```
3426 <enabled/>
3427
3428 <data id="StartPage" value="none | homepage | previous-session"/>
3429 ```
3430 #### macOS
3431 ```
3432 <dict>
3433   <key>Homepage</key>
3434   <dict>
3435     <key>URL</key>
3436     <string>http://example.com</string>
3437     <key>Locked</key>
3438     <true/> | <false/>
3439     <key>Additional</key>
3440     <array>
3441       <string>http://example.org</string>
3442       <string>http://example.edu</string>
3443     </array>
3444     <key>StartPage</key>
3445     <string>none | homepage | previous-session | homepage-locked</string>
3446   </dict>
3447 </dict>
3448 ```
3449 #### policies.json
3450 ```
3451 {
3452   "policies": {
3453     "Homepage": {
3454       "URL": "http://example.com/",
3455       "Locked": true | false,
3456       "Additional": ["http://example.org/",
3457                      "http://example.edu/"],
3458       "StartPage": "none" | "homepage" | "previous-session" | "homepage-locked"
3459     }
3460   }
3461 }
3462 ```
3463 ### InstallAddonsPermission
3464 Configure the default extension install policy as well as origins for extension installs are allowed. This policy does not override turning off all extension installs.
3465
3466 `Allow` is a list of origins where extension installs are allowed.
3467
3468 `Default` determines whether or not extension installs are allowed by default.
3469
3470 **Compatibility:** Firefox 60, Firefox ESR 60\
3471 **CCK2 Equivalent:** `permissions.install`\
3472 **Preferences Affected:** `xpinstall.enabled`
3473
3474 #### Windows (GPO)
3475 ```
3476 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Allow\1 = "https://example.org"
3477 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Allow\2 = "https://example.edu"
3478 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Default = 0x1 | 0x0
3479 ```
3480 #### Windows (Intune)
3481 OMA-URI:
3482 ```
3483 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Addons/InstallAddonsPermission_Allow
3484 ```
3485 Value (string):
3486 ```
3487 <enabled/>
3488 <data id="Permissions" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
3489 ```
3490 OMA-URI:
3491 ```
3492 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Addons/InstallAddonsPermission_Default
3493 ```
3494 Value (string):
3495 ```
3496 <enabled/>
3497 ```
3498 #### macOS
3499 ```
3500 <dict>
3501   <key>InstallAddonsPermission</key>
3502   <dict>
3503     <key>Allow</key>
3504     <array>
3505       <string>http://example.org</string>
3506       <string>http://example.edu</string>
3507     </array>
3508     <key>Default</key>
3509     <true/> | <false/>
3510   </dict>
3511 </dict>
3512 ```
3513 #### policies.json
3514 ```
3515 {
3516   "policies": {
3517     "InstallAddonsPermission": {
3518       "Allow": ["http://example.org/",
3519                 "http://example.edu/"],
3520       "Default": true | false
3521     }
3522   }
3523 }
3524 ```
3525 ### LegacyProfiles
3526 Disable the feature enforcing a separate profile for each installation.
3527
3528 If this policy set to true, Firefox will not try to create different profiles for installations of Firefox in different directories. This is the equivalent of the MOZ_LEGACY_PROFILES environment variable.
3529
3530 If this policy set to false, Firefox will create a new profile for each unique installation of Firefox.
3531
3532 This policy only work on Windows via GPO (not policies.json).
3533
3534 **Compatibility:** Firefox 70, Firefox ESR 68.2 (Windows only, GPO only)\
3535 **CCK2 Equivalent:** N/A\
3536 **Preferences Affected:** N/A
3537
3538 #### Windows (GPO)
3539 ```
3540 Software\Policies\Mozilla\Firefox\LegacyProfiles = = 0x1 | 0x0
3541 ```
3542 #### Windows (Intune)
3543 OMA-URI:
3544 ```
3545 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/LegacyProfiles
3546 ```
3547 Value (string):
3548 ```
3549 <enabled/> or <disabled/>
3550 ```
3551 ### LegacySameSiteCookieBehaviorEnabled
3552 Enable default legacy SameSite cookie behavior setting.
3553
3554 If this policy is set to true, it reverts all cookies to legacy SameSite behavior which means that cookies that don't explicitly specify a ```SameSite``` attribute are treated as if they were ```SameSite=None```.
3555
3556 **Compatibility:** Firefox 96\
3557 **CCK2 Equivalent:** N/A\
3558 **Preferences Affected:** `network.cookie.sameSite.laxByDefault`
3559
3560 #### Windows (GPO)
3561 ```
3562 Software\Policies\Mozilla\Firefox\LegacySameSiteCookieBehaviorEnabled = = 0x1 | 0x0
3563 ```
3564 #### Windows (Intune)
3565 OMA-URI:
3566 ```
3567 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/LegacySameSiteCookieBehaviorEnabled
3568 ```
3569 Value (string):
3570 ```
3571 <enabled/> or <disabled/>
3572 ```
3573 #### macOS
3574 ```
3575 <dict>
3576   <key>LegacySameSiteCookieBehaviorEnabled</key>
3577   <true/> | <false/>
3578 </dict>
3579 ```
3580 #### policies.json
3581 ```
3582 {
3583   "policies": {
3584     "LegacySameSiteCookieBehaviorEnabled": true | false
3585 }
3586 ```
3587 ### LegacySameSiteCookieBehaviorEnabledForDomainList
3588 Revert to legacy SameSite behavior for cookies on specified sites.
3589
3590 If this policy is set to true, cookies set for domains in this list will revert to legacy SameSite behavior which means that cookies that don't explicitly specify a ```SameSite``` attribute are treated as if they were ```SameSite=None```.
3591
3592 **Compatibility:** Firefox 96\
3593 **CCK2 Equivalent:** N/A\
3594 **Preferences Affected:** `network.cookie.sameSite.laxByDefault.disabledHosts`
3595
3596 #### Windows (GPO)
3597 ```
3598 Software\Policies\Mozilla\Firefox\LegacySameSiteCookieBehaviorEnabledForDomainList\1 = "example.org"
3599 Software\Policies\Mozilla\Firefox\LegacySameSiteCookieBehaviorEnabledForDomainList\2 = "example.edu"
3600 ```
3601 #### Windows (Intune)
3602 OMA-URI:
3603 ```
3604 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/LegacySameSiteCookieBehaviorEnabledForDomainList
3605 ```
3606 Value (string):
3607 ```
3608 <enabled/>
3609 <data id="LegacySameSiteCookieBehaviorEnabledForDomainList" value="1&#xF000;example.org&#xF000;2&#xF000;example.edu"/>
3610 ```
3611 #### macOS
3612 ```
3613 <dict>
3614   <key>LegacySameSiteCookieBehaviorEnabledForDomainList</key>
3615   <array>
3616     <string>example.org</string>
3617     <string>example.edu</string>
3618   </array>
3619 </dict>
3620 ```
3621 #### policies.json
3622 ```
3623 {
3624   "policies": {
3625     "LegacySameSiteCookieBehaviorEnabledForDomainList": ["example.org",
3626                                                          "example.edu"]
3627   }
3628 }
3629 ```
3630 ### LocalFileLinks
3631 Enable linking to local files by origin.
3632
3633 **Compatibility:** Firefox 68, Firefox ESR 68\
3634 **CCK2 Equivalent:** N/A\
3635 **Preferences Affected:** `capability.policy.localfilelinks.*`
3636
3637 #### Windows (GPO)
3638 ```
3639 Software\Policies\Mozilla\Firefox\LocalFileLinks\1 = "https://example.org"
3640 Software\Policies\Mozilla\Firefox\LocalFileLinks\2 = "https://example.edu"
3641 ```
3642 #### Windows (Intune)
3643 OMA-URI:
3644 ```
3645 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/LocalFileLinks
3646 ```
3647 Value (string):
3648 ```
3649 <enabled/>
3650 <data id="LocalFileLinks" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
3651 ```
3652 #### macOS
3653 ```
3654 <dict>
3655   <key>LocalFileLinks</key>
3656   <array>
3657     <string>http://example.org</string>
3658     <string>http://example.edu</string>
3659   </array>
3660 </dict>
3661 ```
3662 #### policies.json
3663 ```
3664 {
3665   "policies": {
3666     "LocalFileLinks": ["http://example.org/",
3667                        "http://example.edu/"]
3668   }
3669 }
3670 ```
3671 ### ManagedBookmarks
3672 Configures a list of bookmarks managed by an administrator that cannot be changed by the user.
3673
3674 The bookmarks are only added as a button on the personal toolbar. They are not in the bookmarks folder.
3675
3676 The syntax of this policy is exactly the same as the [Chrome ManagedBookmarks policy](https://cloud.google.com/docs/chrome-enterprise/policies/?policy=ManagedBookmarks). The schema is:
3677 ```
3678 {
3679  "items": {
3680   "id": "BookmarkType",
3681   "properties": {
3682    "children": {
3683     "items": {
3684      "$ref": "BookmarkType"
3685     },
3686     "type": "array"
3687    },
3688    "name": {
3689     "type": "string"
3690    },
3691    "toplevel_name": {
3692     "type": "string"
3693    },
3694    "url": {
3695     "type": "string"
3696    }
3697   },
3698   "type": "object"
3699  },
3700  "type": "array"
3701 }
3702 ```
3703 **Compatibility:** Firefox 83, Firefox ESR 78.5\
3704 **CCK2 Equivalent:** N/A\
3705 **Preferences Affected:** N/A
3706
3707 #### Windows (GPO)
3708 Software\Policies\Mozilla\Firefox\ManagedBookmarks (REG_MULTI_SZ) =
3709 ```
3710 [
3711   {
3712     "toplevel_name": "My managed bookmarks folder"
3713   },
3714   {
3715     "url": "example.com",
3716     "name": "Example"
3717   },
3718   {
3719     "name": "Mozilla links",
3720     "children": [
3721       {
3722         "url": "https://mozilla.org",
3723         "name": "Mozilla.org"
3724       },
3725       {
3726         "url": "https://support.mozilla.org/",
3727         "name": "SUMO"
3728       }
3729     ]
3730   }
3731 ]
3732 ```
3733 #### Windows (Intune)
3734 OMA-URI:
3735 ```
3736 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/ManagedBookmarks
3737 ```
3738 Value (string):
3739 ```
3740 <enabled/>
3741 <data id="JSON" value='
3742 [
3743   {
3744     "toplevel_name": "My managed bookmarks folder"
3745   },
3746   {
3747     "url": "example.com",
3748     "name": "Example"
3749   },
3750   {
3751     "name": "Mozilla links",
3752     "children": [
3753       {
3754         "url": "https://mozilla.org",
3755         "name": "Mozilla.org"
3756       },
3757       {
3758         "url": "https://support.mozilla.org/",
3759         "name": "SUMO"
3760       }
3761     ]
3762   }
3763 ]'/>
3764 ```
3765 #### macOS
3766 ```
3767 <dict>
3768   <key>ManagedBookmarks</key>
3769   <array>
3770     <dict>
3771       <key>toplevel_name</key>
3772       <string>My managed bookmarks folder</string>
3773       <dict>
3774         <key>url</key>
3775         <string>example.com</string>
3776         <key>name</key>
3777         <string>Example</string>
3778       </dict>
3779       <dict>
3780       <key>name</key>
3781       <string>Mozilla links</string>
3782       <key>children</key>
3783       <array>
3784         <dict>
3785           <key>url</key>
3786           <string>https://mozilla.org</string>
3787           <key>name</key>
3788           <string>Mozilla</string>
3789         </dict>
3790         <dict>
3791           <key>url</key>
3792           <string>https://support.mozilla.org/</string>
3793           <key>name</key>
3794           <string>SUMO</string>
3795         </dict>
3796       </array>
3797     </dict>
3798   </array>
3799 </dict>
3800 ```
3801 #### policies.json
3802 ```
3803 {
3804   "policies": {
3805     "ManagedBookmarks": [
3806       {
3807         "toplevel_name": "My managed bookmarks folder"
3808       },
3809       {
3810         "url": "example.com",
3811         "name": "Example"
3812       },
3813       {
3814         "name": "Mozilla links",
3815         "children": [
3816           {
3817             "url": "https://mozilla.org",
3818             "name": "Mozilla.org"
3819           },
3820           {
3821             "url": "https://support.mozilla.org/",
3822             "name": "SUMO"
3823           }
3824         ]
3825       }
3826     ]
3827   }
3828 }
3829 ```
3830 ### ManualAppUpdateOnly
3831
3832 Switch to manual updates only.
3833
3834 If this policy is enabled:
3835  1. The user will never be prompted to install updates
3836  2. Firefox will not check for updates in the background, though it will check automatically when an update UI is displayed (such as the one in the About dialog). This check will be used to show "Update to version X" in the UI, but will not automatically download the update or prompt the user to update in any other way.
3837  3. The update UI will work as expected, unlike when using DisableAppUpdate.
3838
3839 This policy is primarily intended for advanced end users, not for enterprises, but it is available via GPO.
3840
3841 **Compatibility:** Firefox 87\
3842 **CCK2 Equivalent:** N/A\
3843 **Preferences Affected:** N/A
3844
3845 #### Windows (GPO)
3846 ```
3847 Software\Policies\Mozilla\Firefox\ManualAppUpdateOnly = 0x1 | 0x0
3848 ```
3849 #### Windows (Intune)
3850 OMA-URI:
3851 ```
3852 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/ManualAppUpdateOnly
3853 ```
3854 Value (string):
3855 ```
3856 <enabled/> or <disabled/>
3857 ```
3858 #### macOS
3859 ```
3860 <dict>
3861   <key>ManualAppUpdateOnly</key>
3862   <true/> | <false/>
3863 </dict>
3864 ```
3865 #### policies.json
3866 ```
3867 {
3868   "policies": {
3869     "ManualAppUpdateOnly": true | false
3870   }
3871 }
3872 ```
3873 ### NetworkPrediction
3874 Enable or disable network prediction (DNS prefetching).
3875
3876 **Compatibility:** Firefox 67, Firefox ESR 60.7\
3877 **CCK2 Equivalent:** N/A\
3878 **Preferences Affected:** `network.dns.disablePrefetch`, `network.dns.disablePrefetchFromHTTPS`
3879
3880 #### Windows (GPO)
3881 ```
3882 Software\Policies\Mozilla\Firefox\NetworkPrediction = 0x1 | 0x0
3883 ```
3884 #### Windows (Intune)
3885 OMA-URI:
3886 ```
3887 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NetworkPrediction
3888 ```
3889 Value (string):
3890 ```
3891 <enabled/> or <disabled/>
3892 ```
3893 #### macOS
3894 ```
3895 <dict>
3896   <key>NetworkPrediction</key>
3897   <true/> | <false/>
3898 </dict>
3899 ```
3900 #### policies.json
3901 ```
3902 {
3903   "policies": {
3904     "NetworkPrediction": true | false
3905 }
3906 ```
3907 ### NewTabPage
3908 Enable or disable the New Tab page.
3909
3910 **Compatibility:** Firefox 68, Firefox ESR 68\
3911 **CCK2 Equivalent:** N/A\
3912 **Preferences Affected:** `browser.newtabpage.enabled`
3913
3914 #### Windows (GPO)
3915 ```
3916 Software\Policies\Mozilla\Firefox\NewTabPage = 0x1 | 0x0
3917 ```
3918 #### Windows (Intune)
3919 OMA-URI:
3920 ```
3921 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NewTabPage
3922 ```
3923 Value (string):
3924 ```
3925 <enabled/> or <disabled/>
3926 ```
3927 #### macOS
3928 ```
3929 <dict>
3930   <key>NewTabPage</key>
3931   <true/> | <false/>
3932 </dict>
3933 ```
3934 #### policies.json
3935 ```
3936 {
3937   "policies": {
3938     "NewTabPage": true | false
3939 }
3940 ```
3941 ### NoDefaultBookmarks
3942 Disable the creation of default bookmarks.
3943
3944 This policy is only effective if the user profile has not been created yet.
3945
3946 **Compatibility:** Firefox 60, Firefox ESR 60\
3947 **CCK2 Equivalent:** `removeDefaultBookmarks`\
3948 **Preferences Affected:** N/A
3949
3950 #### Windows (GPO)
3951 ```
3952 Software\Policies\Mozilla\Firefox\NoDefaultBookmarks = 0x1 | 0x0
3953 ```
3954 #### Windows (Intune)
3955 OMA-URI:
3956 ```
3957 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NoDefaultBookmarks
3958 ```
3959 Value (string):
3960 ```
3961 <enabled/> or <disabled/>
3962 ```
3963 #### macOS
3964 ```
3965 <dict>
3966   <key>NoDefaultBookmarks</key>
3967   <true/> | <false/>
3968 </dict>
3969 ```
3970 #### policies.json
3971 ```
3972 {
3973   "policies": {
3974     "NoDefaultBookmarks": true | false
3975   }
3976 }
3977 ```
3978 ### OfferToSaveLogins
3979 Control whether or not Firefox offers to save passwords.
3980
3981 **Compatibility:** Firefox 60, Firefox ESR 60\
3982 **CCK2 Equivalent:** `dontRememberPasswords`\
3983 **Preferences Affected:** `signon.rememberSignons`
3984
3985 #### Windows (GPO)
3986 ```
3987 Software\Policies\Mozilla\Firefox\OfferToSaveLogins = 0x1 | 0x0
3988 ```
3989 #### Windows (Intune)
3990 OMA-URI:
3991 ```
3992 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OfferToSaveLogins
3993 ```
3994 Value (string):
3995 ```
3996 <enabled/> or <disabled/>
3997 ```
3998 #### macOS
3999 ```
4000 <dict>
4001   <key>OfferToSaveLogins</key>
4002   <true/> | <false/>
4003 </dict>
4004 ```
4005 #### policies.json
4006 ```
4007 {
4008   "policies": {
4009     "OfferToSaveLogins": true | false
4010   }
4011 }
4012 ```
4013 ### OfferToSaveLoginsDefault
4014 Sets the default value of signon.rememberSignons without locking it.
4015
4016 **Compatibility:** Firefox 70, Firefox ESR 60.2\
4017 **CCK2 Equivalent:** `dontRememberPasswords`\
4018 **Preferences Affected:** `signon.rememberSignons`
4019
4020 #### Windows (GPO)
4021 ```
4022 Software\Policies\Mozilla\Firefox\OfferToSaveLoginsDefault = 0x1 | 0x0
4023 ```
4024 #### Windows (Intune)
4025 OMA-URI:
4026 ```
4027 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OfferToSaveLoginsDefault
4028 ```
4029 Value (string):
4030 ```
4031 <enabled/> or <disabled/>
4032 ```
4033 #### macOS
4034 ```
4035 <dict>
4036   <key>OfferToSaveLoginsDefault</key>
4037   <true/> | <false/>
4038 </dict>
4039 ```
4040 #### policies.json
4041 ```
4042 {
4043   "policies": {
4044     "OfferToSaveLoginsDefault": true | false
4045   }
4046 }
4047 ```
4048 ### OverrideFirstRunPage
4049 Override the first run page. If the value is an empty string (""), the first run page is not displayed.
4050
4051 Starting with Firefox 83, Firefox ESR 78.5, you can also specify multiple URLS separated by a vertical bar (|).
4052
4053 **Compatibility:** Firefox 60, Firefox ESR 60\
4054 **CCK2 Equivalent:** `welcomePage`,`noWelcomePage`\
4055 **Preferences Affected:** `startup.homepage_welcome_url`
4056
4057 #### Windows (GPO)
4058 ```
4059 Software\Policies\Mozilla\Firefox\OverrideFirstRunPage = "http://example.org"
4060 ```
4061 #### Windows (Intune)
4062 OMA-URI:
4063 ```
4064 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OverrideFirstRunPage
4065 ```
4066 Value (string):
4067 ```
4068 <enabled/>
4069 <data id="OverridePage" value="https://example.com"/>
4070 ```
4071 #### macOS
4072 ```
4073 <dict>
4074   <key>OverrideFirstRunPage</key>
4075   <string>http://example.org</string>
4076 </dict>
4077 ```
4078 #### policies.json
4079 ```
4080 {
4081   "policies": {
4082     "OverrideFirstRunPage": "http://example.org"
4083   }
4084 }
4085 ```
4086 ### OverridePostUpdatePage
4087 Override the upgrade page. If the value is an empty string (""), no extra pages are displayed when Firefox is upgraded.
4088
4089 **Compatibility:** Firefox 60, Firefox ESR 60\
4090 **CCK2 Equivalent:** `upgradePage`,`noUpgradePage`\
4091 **Preferences Affected:** `startup.homepage_override_url`
4092
4093 #### Windows (GPO)
4094 ```
4095 Software\Policies\Mozilla\Firefox\OverridePostUpdatePage = "http://example.org"
4096 ```
4097 #### Windows (Intune)
4098 OMA-URI:
4099 ```
4100 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OverridePostUpdatePage
4101 ```
4102 Value (string):
4103 ```
4104 <enabled/>
4105 <data id="OverridePage" value="https://example.com"/>
4106 ```
4107 #### macOS
4108 ```
4109 <dict>
4110   <key>OverridePostUpdatePage</key>
4111   <string>http://example.org</string>
4112 </dict>
4113 ```
4114 #### policies.json
4115 ```
4116 {
4117   "policies": {
4118     "OverridePostUpdatePage": "http://example.org"
4119   }
4120 }
4121 ```
4122 ### PasswordManagerEnabled
4123 Remove access to the password manager via preferences and blocks about:logins on Firefox 70.
4124
4125 **Compatibility:** Firefox 70, Firefox ESR 60.2\
4126 **CCK2 Equivalent:** N/A\
4127 **Preferences Affected:** `pref.privacy.disable_button.view_passwords`
4128
4129 #### Windows (GPO)
4130 ```
4131 Software\Policies\Mozilla\Firefox\PasswordManagerEnabled = 0x1 | 0x0
4132 ```
4133 #### Windows (Intune)
4134 OMA-URI:
4135 ```
4136 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PasswordManagerEnabled
4137 ```
4138 Value (string):
4139 ```
4140 <enabled/> or <disabled/>
4141 ```
4142 #### macOS
4143 ```
4144 <dict>
4145   <key>PasswordManagerEnabled</key>
4146   <true/> | <false/>
4147 </dict>
4148 ```
4149 #### policies.json
4150 ```
4151 {
4152   "policies": {
4153     "PasswordManagerEnabled": true | false
4154   }
4155 }
4156 ```
4157 ### PasswordManagerExceptions
4158 Prevent Firefox from saving passwords for specific sites.
4159
4160 The sites are specified as a list of origins.
4161
4162 **Compatibility:** Firefox 101\
4163 **CCK2 Equivalent:** N/A\
4164 **Preferences Affected:** N/A
4165
4166 #### Windows (GPO)
4167 ```
4168 Software\Policies\Mozilla\Firefox\PasswordManagerExceptions\1 = "https://example.org"
4169 Software\Policies\Mozilla\Firefox\PasswordManagerExceptions\2 = "https://example.edu"
4170 ```
4171 #### Windows (Intune)
4172 OMA-URI:
4173 ```
4174 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PasswordManagerExceptions
4175 ```
4176 Value (string):
4177 ```
4178 <enabled/>
4179 <data id="List" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
4180 ```
4181 #### macOS
4182 ```
4183 <dict>
4184   <key>PasswordManagerExceptions</key>
4185   <array>
4186     <string>https://example.org</string>
4187     <string>https://example.edu</string>
4188   </array>
4189 </dict>
4190 ```
4191 #### policies.json
4192 ```
4193 {
4194   "policies": {
4195     "PasswordManagerExceptions": ["https://example.org",
4196                                   "https://example.edu"]
4197   }
4198 }
4199 ```
4200
4201 ### PDFjs
4202 Disable or configure PDF.js, the built-in PDF viewer.
4203
4204 If `Enabled` is set to false, the built-in PDF viewer is disabled.
4205
4206 If `EnablePermissions` is set to true, the built-in PDF viewer will honor document permissions like preventing the copying of text.
4207
4208 Note: DisableBuiltinPDFViewer has not been deprecated. You can either continue to use it, or switch to using PDFjs->Enabled to disable the built-in PDF viewer. This new permission was added because we needed a place for PDFjs->EnabledPermissions.
4209
4210 **Compatibility:** Firefox 77, Firefox ESR 68.9\
4211 **CCK2 Equivalent:** N/A\
4212 **Preferences Affected:** `pdfjs.disabled`, `pdfjs.enablePermissions`
4213
4214 #### Windows (GPO)
4215 ```
4216 Software\Policies\Mozilla\Firefox\PDFjs\Enabled = 0x1 | 0x0
4217 Software\Policies\Mozilla\Firefox\PDFjs\EnablePermissions = 0x1 | 0x0
4218 ```
4219 #### Windows (Intune)
4220 OMA-URI:
4221 ```
4222 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PDFjs/PDFjs_Enabled
4223 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PDFjs/PDFjs_EnablePermissions
4224 ```
4225 Value (string):
4226 ```
4227 <enabled/>or <disabled/>
4228 ```
4229 #### macOS
4230 ```
4231 <dict>
4232   <key>PDFjs</key>
4233   <dict>
4234     <key>Enabled</key>
4235     <true/> | <false/>
4236     <key>EnablePermissions</key>
4237     <true/> | <false/>
4238   </dict>
4239 </dict>
4240 ```
4241 #### policies.json
4242 ```
4243 {
4244   "policies": {
4245     "PDFjs": {
4246       "Enabled": true | false,
4247       "EnablePermissions": true | false
4248     }
4249   }
4250 }
4251 ```
4252 ### Permissions
4253 Set permissions associated with camera, microphone, location, notifications, autoplay, and virtual reality. Because these are origins, not domains, entries with unique ports must be specified separately. This explicitly means that it is not possible to add wildcards. See examples below.
4254
4255 `Allow` is a list of origins where the feature is allowed.
4256
4257 `Block` is a list of origins where the feature is not allowed.
4258
4259 `BlockNewRequests` determines whether or not new requests can be made for the feature.
4260
4261 `Locked` prevents the user from changing preferences for the feature.
4262
4263 `Default` specifies the default value for Autoplay. block-audio-video is not supported on Firefox ESR 68.
4264
4265 **Compatibility:** Firefox 62, Firefox ESR 60.2 (Autoplay added in Firefox 74, Firefox ESR 68.6, Autoplay Default/Locked added in Firefox 76, Firefox ESR 68.8, VirtualReality added in Firefox 80, Firefox ESR 78.2)\
4266 **CCK2 Equivalent:** N/A\
4267 **Preferences Affected:** `permissions.default.camera`, `permissions.default.microphone`, `permissions.default.geo`, `permissions.default.desktop-notification`, `media.autoplay.default`, `permissions.default.xr`
4268
4269 #### Windows (GPO)
4270 ```
4271 Software\Policies\Mozilla\Firefox\Permissions\Camera\Allow\1 = "https://example.org"
4272 Software\Policies\Mozilla\Firefox\Permissions\Camera\Allow\2 = "https://example.org:1234"
4273 Software\Policies\Mozilla\Firefox\Permissions\Camera\Block\1 = "https://example.edu"
4274 Software\Policies\Mozilla\Firefox\Permissions\Camera\BlockNewRequests = 0x1 | 0x0
4275 Software\Policies\Mozilla\Firefox\Permissions\Camera\Locked = 0x1 | 0x0
4276 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Allow\1 = "https://example.org"
4277 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Block\1 = "https://example.edu"
4278 Software\Policies\Mozilla\Firefox\Permissions\Microphone\BlockNewRequests = 0x1 | 0x0
4279 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Locked = 0x1 | 0x0
4280 Software\Policies\Mozilla\Firefox\Permissions\Location\Allow\1 = "https://example.org"
4281 Software\Policies\Mozilla\Firefox\Permissions\Location\Block\1 = "https://example.edu"
4282 Software\Policies\Mozilla\Firefox\Permissions\Location\BlockNewRequests = 0x1 | 0x0
4283 Software\Policies\Mozilla\Firefox\Permissions\Location\Locked = 0x1 | 0x0
4284 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Allow\1 = "https://example.org"
4285 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Block\1 = "https://example.edu"
4286 Software\Policies\Mozilla\Firefox\Permissions\Notifications\BlockNewRequests = 0x1 | 0x0
4287 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Locked = 0x1 | 0x0
4288 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Allow\1 = "https://example.org"
4289 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Block\1 = "https://example.edu"
4290 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Default = "allow-audio-video" | "block-audio" | "block-audio-video"
4291 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Locked = 0x1 | 0x0
4292 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\Allow\1 = "https://example.org"
4293 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\Block\1 = "https://example.edu"
4294 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\BlockNewRequests = 0x1 | 0x0
4295 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\Locked = 0x1 | 0x0
4296 ```
4297 #### Windows (Intune)
4298 OMA-URI:
4299 ```
4300 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Location/Location_BlockNewRequests
4301 ```
4302 Value (string):
4303 ```
4304 <enabled/> or <disabled/>
4305 ```
4306 OMA-URI:
4307 ```
4308 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Location/Location_Locked
4309 ```
4310 Value (string):
4311 ```
4312 <enabled/> or <disabled/>
4313 ```
4314 OMA-URI:
4315 ```
4316 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_Allow
4317 ```
4318 Value (string):
4319 ```
4320 <enabled/>
4321 <data id="Permissions" value="1&#xF000;https://example.org"/>
4322 ```
4323 OMA-URI:
4324 ```
4325 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_BlockNewRequests
4326 ```
4327 Value (string):
4328 ```
4329 <enabled/> or <disabled/>
4330 ```
4331 OMA-URI:
4332 ```
4333 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_Locked
4334 ```
4335 Value (string):
4336 ```
4337 <enabled/> or <disabled/>
4338 ```
4339 OMA-URI:
4340 ```
4341 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Allow
4342 ```
4343 Value (string):
4344 ```
4345 <enabled/>
4346 <data id="Permissions" value="1&#xF000;https://example.org"/>
4347 ```
4348 OMA-URI:
4349 ```
4350 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Block
4351 ```
4352 Value (string):
4353 ```
4354 <enabled/>
4355 <data id="Permissions" value="1&#xF000;https://example.edu"/>
4356 ```
4357 OMA-URI:
4358 ```
4359 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Default
4360 ```
4361 Value (string):
4362 ```
4363 <enabled/>
4364 <data id="Autoplay_Default" value="allow-audio-video | block-audio | block-audio-video"/>
4365 ```
4366 OMA-URI:
4367 ```
4368 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Locked
4369 ```
4370 Value (string):
4371 ```
4372 <enabled/> or <disabled/>
4373 ```
4374 OMA-URI:
4375 ```
4376 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_Allow
4377 ```
4378 Value (string):
4379 ```
4380 <enabled/>
4381 <data id="Permissions" value="1&#xF000;https://example.org"/>
4382 ```
4383 OMA-URI:
4384 ```
4385 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_Block
4386 ```
4387 Value (string):
4388 ```
4389 <enabled/>
4390 <data id="Permissions" value="1&#xF000;https://example.edu"/>
4391 ```
4392 OMA-URI:
4393 ```
4394 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_BlockNewRequests
4395 ```
4396 Value (string):
4397 ```
4398 <enabled/> or <disabled/>
4399 ```
4400 OMA-URI:
4401 ```
4402 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_Locked
4403 ```
4404 Value (string):
4405 ```
4406 <enabled/> or <disabled/>
4407 ```
4408 #### macOS
4409 ```
4410 <dict>
4411   <key>Permissions</key>
4412   <dict>
4413     <key>Camera</key>
4414     <dict>
4415       <key>Allow</key>
4416       <array>
4417         <string>https://example.org</string>
4418         <string>https://example.org:1234</string>
4419       </array>
4420       <key>Block</key>
4421       <array>
4422         <string>https://example.edu</string>
4423       </array>
4424       <key>BlockNewRequests</key>
4425       <true/> | <false/>
4426       <key>Locked</key>
4427       <true/> | <false/>
4428     </dict>
4429     <key>Microphone</key>
4430     <dict>
4431       <key>Allow</key>
4432       <array>
4433         <string>https://example.org</string>
4434       </array>
4435       <key>Block</key>
4436       <array>
4437         <string>https://example.edu</string>
4438       </array>
4439       <key>BlockNewRequests</key>
4440       <true/> | <false/>
4441       <key>Locked</key>
4442       <true/> | <false/>
4443     </dict>
4444     <key>Location</key>
4445     <dict>
4446       <key>Allow</key>
4447       <array>
4448         <string>https://example.org</string>
4449       </array>
4450       <key>Block</key>
4451       <array>
4452         <string>https://example.edu</string>
4453       </array>
4454       <key>BlockNewRequests</key>
4455       <true/> | <false/>
4456       <key>Locked</key>
4457       <true/> | <false/>
4458     </dict>
4459     <key>Notifications</key>
4460     <dict>
4461       <key>Allow</key>
4462       <array>
4463         <string>https://example.org</string>
4464       </array>
4465       <key>Block</key>
4466       <array>
4467         <string>https://example.edu</string>
4468       </array>
4469       <key>BlockNewRequests</key>
4470       <true/>
4471       <key>Locked</key>
4472       <true/>
4473     </dict>
4474     <key>Autoplay</key>
4475     <dict>
4476       <key>Allow</key>
4477       <array>
4478         <string>https://example.org</string>
4479       </array>
4480       <key>Block</key>
4481       <array>
4482         <string>https://example.edu</string>
4483       </array>
4484       <key>Default</key>
4485       <string>allow-audio-video | block-audio | block-audio-video</string>
4486       <key>Locked</key>
4487       <true/> | <false/>
4488     </dict>
4489   </dict>
4490 </dict>
4491 ```
4492 #### policies.json
4493 ```
4494 {
4495   "policies": {
4496     "Permissions": {
4497       "Camera": {
4498         "Allow": ["https://example.org","https://example.org:1234"],
4499         "Block": ["https://example.edu"],
4500         "BlockNewRequests": true | false,
4501         "Locked": true | false
4502       },
4503       "Microphone": {
4504         "Allow": ["https://example.org"],
4505         "Block": ["https://example.edu"],
4506         "BlockNewRequests": true | false,
4507         "Locked": true | false
4508       },
4509       "Location": {
4510         "Allow": ["https://example.org"],
4511         "Block": ["https://example.edu"],
4512         "BlockNewRequests": true | false,
4513         "Locked": true | false
4514       },
4515       "Notifications": {
4516         "Allow": ["https://example.org"],
4517         "Block": ["https://example.edu"],
4518         "BlockNewRequests": true | false,
4519         "Locked": true | false
4520       },
4521       "Autoplay": {
4522         "Allow": ["https://example.org"],
4523         "Block": ["https://example.edu"],
4524         "Default": "allow-audio-video" | "block-audio" | "block-audio-video",
4525         "Locked": true | false
4526       }
4527     }
4528   }
4529 }
4530 ```
4531 ### PictureInPicture
4532
4533 Enable or disable Picture-in-Picture as well as prevent the user from enabling or disabling it (Locked).
4534
4535 **Compatibility:** Firefox 78, Firefox ESR 78\
4536 **CCK2 Equivalent:** N/A\
4537 **Preferences Affected:** `media.videocontrols.picture-in-picture.video-toggle.enabled`
4538
4539 #### Windows (GPO)
4540 ```
4541 Software\Policies\Mozilla\Firefox\PictureInPicture\Enabled = 0x1 | 0x0
4542 Software\Policies\Mozilla\Firefox\PictureInPicture\Locked = 0x1 | 0x0
4543
4544 ```
4545 #### Windows (Intune)
4546 OMA-URI:
4547 ```
4548 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PictureInPicture/PictureInPicture_Enabled
4549 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PictureInPicture/PictureInPicture_Locked
4550 ```
4551 Value (string):
4552 ```
4553 <enabled/> or <disabled/>
4554 ```
4555 #### macOS
4556 ```
4557 <dict>
4558   <key>PictureInPicture</key>
4559   <dict>
4560     <key>Enabled</key>
4561     <true/> | <false/>
4562     <key>Locked</key>
4563     <true/> | <false/>
4564   </dict>
4565 </dict>
4566 ```
4567 #### policies.json
4568 ```
4569 {
4570   "policies": {
4571     "PictureInPicture": {
4572       "Enabled": true | false,
4573       "Locked": true | false
4574     }
4575   }
4576 }
4577 ```
4578 ### PopupBlocking
4579 Configure the default pop-up window policy as well as origins for which pop-up windows are allowed.
4580
4581 `Allow` is a list of origins where popup-windows are allowed.
4582
4583 `Default` determines whether or not pop-up windows are allowed by default.
4584
4585 `Locked` prevents the user from changing pop-up preferences.
4586
4587 **Compatibility:** Firefox 60, Firefox ESR 60\
4588 **CCK2 Equivalent:** `permissions.popup`\
4589 **Preferences Affected:** `dom.disable_open_during_load`
4590
4591 #### Windows (GPO)
4592 ```
4593 Software\Policies\Mozilla\Firefox\PopupBlocking\Allow\1 = "https://example.org"
4594 Software\Policies\Mozilla\Firefox\PopupBlocking\Allow\2 = "https://example.edu"
4595 Software\Policies\Mozilla\Firefox\PopupBlocking\Default = 0x1 | 0x0
4596 Software\Policies\Mozilla\Firefox\PopupBlocking\Locked = 0x1 | 0x0
4597 ```
4598 #### Windows (Intune)
4599 OMA-URI:
4600 ```
4601 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Allow
4602 ```
4603 Value (string):
4604 ```
4605 <enabled/>
4606 <data id="Permissions" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
4607 ```
4608 OMA-URI:
4609 ```
4610 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Default
4611 ```
4612 Value (string):
4613 ```
4614 <enabled/> or <disabled/>
4615 ```
4616 OMA-URI:
4617 ```
4618 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Locked
4619 ```
4620 Value (string):
4621 ```
4622 <enabled/> or <disabled/>
4623 ```
4624 #### macOS
4625 ```
4626 <dict>
4627   <key>PopupBlocking</key>
4628   <dict>
4629     <key>Allow</key>
4630     <array>
4631       <string>http://example.org</string>
4632       <string>http://example.edu</string>
4633     </array>
4634     <key>Default</key>
4635     <true/> | <false/>
4636     <key>Locked</key>
4637     <true/> | <false/>
4638   </dict>
4639 </dict>
4640 ```
4641 #### policies.json
4642 ```
4643 {
4644   "policies": {
4645     "PopupBlocking": {
4646       "Allow": ["http://example.org/",
4647                 "http://example.edu/"],
4648       "Default": true | false,
4649       "Locked": true | false
4650     }
4651   }
4652 }
4653 ```
4654 ### Preferences
4655 Set and lock preferences.
4656
4657 **NOTE** On Windows, in order to use this policy, you must clear all settings in the old **Preferences (Deprecated)** section in group policy.
4658
4659 Previously you could only set and lock a subset of preferences. Starting with Firefox 81 and Firefox ESR 78.3 you can set many more preferences. You can also set default preferences, user preferences and you can clear preferences.
4660
4661 Preferences that start with the following prefixes are supported:
4662 ```
4663 accessibility.
4664 alerts.* (Firefox 122, Firefox ESR 115.7)
4665 app.update.* (Firefox 86, Firefox ESR 78.8)
4666 browser.
4667 datareporting.policy.
4668 dom.
4669 extensions.
4670 general.autoScroll (Firefox 83, Firefox ESR 78.5)
4671 general.smoothScroll (Firefox 83, Firefox ESR 78.5)
4672 geo.
4673 gfx.
4674 intl.
4675 keyword.enabled (Firefox 95, Firefox ESR 91.4)
4676 layers.
4677 layout.
4678 media.
4679 network.
4680 pdfjs. (Firefox 84, Firefox ESR 78.6)
4681 places.
4682 pref.
4683 print.
4684 signon. (Firefox 83, Firefox ESR 78.5)
4685 spellchecker. (Firefox 84, Firefox ESR 78.6)
4686 toolkit.legacyUserProfileCustomizations.stylesheets (Firefox 95, Firefox ESR 91.4)
4687 ui.
4688 widget.
4689 xpinstall.signatures.required (Firefox ESR 102.10, Firefox ESR only)
4690 xpinstall.whitelist.required (Firefox 118, Firefox ESR 115.3)
4691 ```
4692 as well as the following security preferences:
4693
4694 | Preference | Type | Default
4695 | --- | --- | --- |
4696 | security.default_personal_cert | string | Ask Every Time
4697 | &nbsp;&nbsp;&nbsp;&nbsp;If set to Select Automatically, Firefox automatically chooses the default personal certificate.
4698 | security.disable_button.openCertManager | string | N/A
4699 | &nbsp;&nbsp;&nbsp;&nbsp;If set to true and locked, the View Certificates button in preferences is disabled (Firefox 121, Firefox ESR 115.6)
4700 | security.disable_button.openDeviceManager | string | N/A
4701 | &nbsp;&nbsp;&nbsp;&nbsp;If set to true and locked, the Security Devices button in preferences is disabled (Firefox 121, Firefox ESR 115.6)
4702 | security.insecure_connection_text.enabled | bool | false
4703 | &nbsp;&nbsp;&nbsp;&nbsp;If set to true, adds the words "Not Secure" for insecure sites.
4704 | security.insecure_connection_text.pbmode.enabled | bool | false
4705 | &nbsp;&nbsp;&nbsp;&nbsp;If set to true, adds the words "Not Secure" for insecure sites in private browsing.
4706 | security.mixed_content.block_active_content | boolean | true
4707 | &nbsp;&nbsp;&nbsp;&nbsp;If false, mixed active content (HTTP and HTTPS) is not blocked.
4708 | security.osclientcerts.autoload | boolean | false
4709 | &nbsp;&nbsp;&nbsp;&nbsp;If true, client certificates are loaded from the operating system certificate store.
4710 | security.OCSP.enabled | integer | 1
4711 | &nbsp;&nbsp;&nbsp;&nbsp;If 0, do not fetch OCSP. If 1, fetch OCSP for DV and EV certificates. If 2, fetch OCSP only for EV certificates.
4712 | security.OCSP.require | boolean | false
4713 | &nbsp;&nbsp;&nbsp;&nbsp; If true, if an OCSP request times out, the connection fails.
4714 | security.osclientcerts.assume_rsa_pss_support | boolean | true
4715 | &nbsp;&nbsp;&nbsp;&nbsp; If false, we don't assume an RSA key can do RSA-PSS. (Firefox 114, Firefox ESR 102.12)
4716 | security.ssl.enable_ocsp_stapling | boolean | true
4717 | &nbsp;&nbsp;&nbsp;&nbsp; If false, OCSP stapling is not enabled.
4718 | security.ssl.errorReporting.enabled | boolean | true
4719 | &nbsp;&nbsp;&nbsp;&nbsp;If false, SSL errors cannot be sent to Mozilla.
4720 | security.ssl.require_safe_negotiation | boolean | false
4721 | &nbsp;&nbsp;&nbsp;&nbsp;If true, Firefox will only negotiate TLS connections with servers that indicate they support secure renegotiation. (Firefox 118, Firefox ESR 115.3)
4722 | security.tls.enable_0rtt_data | boolean | true
4723 | &nbsp;&nbsp;&nbsp;&nbsp;If false, TLS early data is turned off. (Firefox 93, Firefox 91.2, Firefox 78.15)
4724 | security.tls.hello_downgrade_check | boolean | true
4725 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the TLS 1.3 downgrade check is disabled.
4726 | security.tls.version.enable-deprecated | boolean | false
4727 | &nbsp;&nbsp;&nbsp;&nbsp;If true, browser will accept TLS 1.0. and TLS 1.1. (Firefox 86, Firefox 78.8)
4728 | security.warn_submit_secure_to_insecure | boolean | true
4729 | &nbsp;&nbsp;&nbsp;&nbsp;If false, no warning is shown when submitting a form from https to http.
4730
4731 Using the preference as the key, set the `Value` to the corresponding preference value.
4732
4733 `Status` can be "default", "locked", "user" or "clear"
4734
4735 * `"default"`: Read/Write: Settings appear as default even if factory default differs.
4736 * `"locked"`: Read-Only: Settings appear as default even if factory default differs.
4737 * `"user"`: Read/Write: Settings appear as changed if it differs from factory default.
4738 * `"clear"`: Read/Write: `Value` has no effect. Resets to factory defaults on each startup.
4739
4740 `"user"` preferences persist across invocations of Firefox. It is the equivalent of a user setting the preference. They are most useful when a preference is needed very early in startup so it can't be set as default by policy. An example of this is ```toolkit.legacyUserProfileCustomizations.stylesheets```.
4741
4742 `"user"` preferences persist even if the policy is removed, so if you need to remove them, you should use the clear policy.
4743
4744 You can also set the `Type` starting in Firefox 123 and Firefox ESR 115.8. It can be `number`, `boolean` or `string`. This is especially useful if you are seeing 0 or 1 values being converted to booleans when set as user preferences.
4745
4746 See the examples below for more detail.
4747
4748 IMPORTANT: Make sure you're only setting a particular preference using this mechanism and not some other way.
4749
4750 Status
4751 **Compatibility:** Firefox 81, Firefox ESR 78.3\
4752 **CCK2 Equivalent:** `preferences`\
4753 **Preferences Affected:** Many
4754
4755 #### Windows (GPO)
4756 Software\Policies\Mozilla\Firefox\Preferences (REG_MULTI_SZ) =
4757 ```
4758 {
4759   "accessibility.force_disabled": {
4760     "Value": 1,
4761     "Status": "default",
4762     "Type": "number"
4763
4764   },
4765   "browser.cache.disk.parent_directory": {
4766     "Value": "SOME_NATIVE_PATH",
4767     "Status": "user"
4768   },
4769   "browser.tabs.warnOnClose": {
4770     "Value": false,
4771     "Status": "locked"
4772   }
4773 }
4774 ```
4775 #### Windows (Intune)
4776 OMA-URI:
4777 ```
4778 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Preferences
4779 ```
4780 Value (string):
4781 ```
4782 <enabled/>
4783 <data id="JSON" value='
4784 {
4785   "accessibility.force_disabled": {
4786     "Value": 1,
4787     "Status": "default",
4788     "Type": "number"
4789   },
4790   "browser.cache.disk.parent_directory": {
4791     "Value": "SOME_NATIVE_PATH",
4792     "Status": "user"
4793   },
4794   "browser.tabs.warnOnClose": {
4795     "Value": false,
4796     "Status": "locked"
4797   }
4798 }'/>
4799 ```
4800 #### macOS
4801 ```
4802 <dict>
4803   <key>Preferences</key>
4804   <dict>
4805     <key>accessibility.force_disabled</key>
4806     <dict>
4807       <key>Value</key>
4808       <integer>1</integer>
4809       <key>Status</key>
4810       <string>default</string>
4811       <key>Type</key>
4812       <string>number</string>
4813     </dict>
4814     <key>browser.cache.disk.parent_directory</key>
4815     <dict>
4816       <key>Value</key>
4817       <string>SOME_NATIVE_PATH</string>
4818       <key>Status</key>
4819       <string>user</string>
4820     </dict>
4821     <key>browser.tabs.warnOnClose</key>
4822     <dict>
4823       <key>Value</key>
4824       <false/>
4825       <key>Status</key>
4826       <string>locked</string>
4827     </dict>
4828   </dict>
4829 </dict>
4830 ```
4831 #### policies.json
4832 ```
4833 {
4834   "policies": {
4835     "Preferences": {
4836       "accessibility.force_disabled": {
4837         "Value": 1,
4838         "Status": "default"
4839         "Type": "number"
4840       },
4841       "browser.cache.disk.parent_directory": {
4842         "Value": "SOME_NATIVE_PATH",
4843         "Status": "user"
4844       },
4845       "browser.tabs.warnOnClose": {
4846         "Value": false,
4847         "Status": "locked"
4848       }
4849     }
4850   }
4851 }
4852 ```
4853 ### PrimaryPassword
4854 Require or prevent using a primary (formerly master) password.
4855
4856 If this value is true, a primary password is required. If this value is false, it works the same as if [`DisableMasterPasswordCreation`](#disablemasterpasswordcreation) was true and removes the primary password functionality.
4857
4858 If both DisableMasterPasswordCreation and PrimaryPassword are used, DisableMasterPasswordCreation takes precedent.
4859
4860 **Compatibility:** Firefox 79, Firefox ESR 78.1\
4861 **CCK2 Equivalent:** `noMasterPassword`\
4862 **Preferences Affected:** N/A
4863
4864 #### Windows (GPO)
4865 ```
4866 Software\Policies\Mozilla\Firefox\PrimaryPassword = 0x1 | 0x0
4867 ```
4868 #### Windows (Intune)
4869 OMA-URI:
4870 ```
4871 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PrimaryPassword
4872 ```
4873 Value (string):
4874 ```
4875 <enabled/> or <disabled/>
4876 ```
4877 #### macOS
4878 ```
4879 <dict>
4880   <key>PrimaryPassword</key>
4881   <true/> | <false/>
4882 </dict>
4883 ```
4884 #### policies.json
4885 ```
4886 {
4887   "policies": {
4888     "PrimaryPassword": true | false
4889   }
4890 }
4891 ```
4892 ### PrintingEnabled
4893 Enable or disable printing.
4894
4895 **Compatibility:** Firefox 120, Firefox ESR 115.5\
4896 **CCK2 Equivalent:** N/A\
4897 **Preferences Affected:** `print.enabled`
4898
4899 #### Windows (GPO)
4900 ```
4901 Software\Policies\Mozilla\Firefox\PrintingEnabled = 0x1 | 0x0
4902 ```
4903 #### Windows (Intune)
4904 OMA-URI:
4905 ```
4906 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PrintingEnabled
4907 ```
4908 Value (string):
4909 ```
4910 <enabled/> or <disabled/>
4911 ```
4912 #### macOS
4913 ```
4914 <dict>
4915   <key>PrintingEnabled</key>
4916   <true/> | <false/>
4917 </dict>
4918 ```
4919 #### policies.json
4920 ```
4921 {
4922   "policies": {
4923     "PrintingEnabled": true | false
4924   }
4925 }
4926 ```
4927 ### PromptForDownloadLocation
4928 Ask where to save each file before downloading.
4929
4930 **Compatibility:** Firefox 68, Firefox ESR 68\
4931 **CCK2 Equivalent:** N/A\
4932 **Preferences Affected:** `browser.download.useDownloadDir`
4933
4934 #### Windows (GPO)
4935 ```
4936 Software\Policies\Mozilla\Firefox\PromptForDownloadLocation = 0x1 | 0x0
4937 ```
4938 #### Windows (Intune)
4939 OMA-URI:
4940 ```
4941 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PromptForDownloadLocation
4942 ```
4943 Value (string):
4944 ```
4945 <enabled/> or <disabled/>
4946 ```
4947 #### macOS
4948 ```
4949 <dict>
4950   <key>PromptForDownloadLocation</key>
4951   <true/> | <false/>
4952 </dict>
4953 ```
4954 #### policies.json
4955 ```
4956 {
4957   "policies": {
4958     "PromptForDownloadLocation": true | false
4959   }
4960 }
4961 ```
4962 ### Proxy
4963 Configure proxy settings. These settings correspond to the connection settings in Firefox preferences.
4964 To specify ports, append them to the hostnames with a colon (:).
4965
4966 Unless you lock this policy, changes the user already has in place will take effect.
4967
4968 `Mode` is the proxy method being used.
4969
4970 `Locked` is whether or not proxy settings can be changed.
4971
4972 `HTTPProxy` is the HTTP proxy server.
4973
4974 `UseHTTPProxyForAllProtocols` is whether or not the HTTP proxy should be used for all other proxies.
4975
4976 `SSLProxy` is the SSL proxy server.
4977
4978 `FTPProxy` is the FTP proxy server.
4979
4980 `SOCKSProxy` is the SOCKS proxy server
4981
4982 `SOCKSVersion` is the SOCKS version (4 or 5)
4983
4984 `Passthrough` is list of hostnames or IP addresses that will not be proxied. Use `<local>` to bypass proxying for all hostnames which do not contain periods.
4985
4986 `AutoConfigURL` is a  URL for proxy configuration (only used if Mode is autoConfig).
4987
4988 `AutoLogin` means do not prompt for authentication if password is saved.
4989
4990 `UseProxyForDNS` to use proxy DNS when using SOCKS v5.
4991
4992 **Compatibility:** Firefox 60, Firefox ESR 60\
4993 **CCK2 Equivalent:** `networkProxy*`\
4994 **Preferences Affected:** `network.proxy.type`, `network.proxy.autoconfig_url`, `network.proxy.socks_remote_dns`, `signon.autologin.proxy`, `network.proxy.socks_version`, `network.proxy.no_proxies_on`, `network.proxy.share_proxy_settings`, `network.proxy.http`, `network.proxy.http_port`, `network.proxy.ftp`, `network.proxy.ftp_port`, `network.proxy.ssl`, `network.proxy.ssl_port`, `network.proxy.socks`, `network.proxy.socks_port`
4995
4996 #### Windows (GPO)
4997 ```
4998 Software\Policies\Mozilla\Firefox\Proxy\Mode = "none" | "system" | "manual" | "autoDetect" | "autoConfig"
4999 Software\Policies\Mozilla\Firefox\Proxy\Locked = 0x1 | 0x0
5000 Software\Policies\Mozilla\Firefox\Proxy\HTTPProxy = https://httpproxy.example.com
5001 Software\Policies\Mozilla\Firefox\Proxy\UseHTTPProxyForAllProtocols = 0x1 | 0x0
5002 Software\Policies\Mozilla\Firefox\Proxy\SSLProxy = https://sslproxy.example.com
5003 Software\Policies\Mozilla\Firefox\Proxy\FTPProxy = https://ftpproxy.example.com
5004 Software\Policies\Mozilla\Firefox\Proxy\SOCKSProxy = https://socksproxy.example.com
5005 Software\Policies\Mozilla\Firefox\Proxy\SOCKSVersion = 0x4 | 0x5
5006 Software\Policies\Mozilla\Firefox\Proxy\Passthrough = <local>
5007 Software\Policies\Mozilla\Firefox\Proxy\AutoConfigURL = URL_TO_AUTOCONFIG
5008 Software\Policies\Mozilla\Firefox\Proxy\AutoLogin = 0x1 | 0x0
5009 Software\Policies\Mozilla\Firefox\Proxy\UseProxyForDNS = 0x1 | 0x0
5010 ```
5011 #### Windows (Intune)
5012 **Note**
5013 These setttings were moved to a category to make them easier to configure via Intune.
5014
5015 OMA-URI:
5016 ```
5017 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ProxySettings/Proxy_Locked
5018 ```
5019 Value (string):
5020 ```
5021 <enabled/> or <disabled/>
5022 ```
5023 OMA-URI:
5024 ```
5025 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ProxySettings/Proxy_ConnectionType
5026 ```
5027 Value (string):
5028 ```
5029 <enabled/>
5030 <data id="Proxy_ConnectionType" value="none | system | manual | autoDetect | autoConfig"/>
5031 ```
5032 OMA-URI:
5033 ```
5034 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ProxySettings/Proxy_HTTPProxy
5035 ```
5036 Value (string):
5037 ```
5038 <enabled/>
5039 <data id="Proxy_HTTPProxy" value="httpproxy.example.com"/>
5040 ```
5041 OMA-URI:
5042 ```
5043 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ProxySettings/Proxy_UseHTTPProxyForAllProtocols
5044 ```
5045 Value (string):
5046 ```
5047 <enabled/> or <disabled/>
5048 ```
5049 OMA-URI:
5050 ```
5051 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ProxySettings/Proxy_SSLProxy
5052 ```
5053 Value (string):
5054 ```
5055 <enabled/>
5056 <data id="Proxy_SSLProxy" value="sslproxy.example.com"/>
5057 ```
5058 OMA-URI:
5059 ```
5060 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ProxySettings/Proxy_SOCKSProxy
5061 ```
5062 Value (string):
5063 ```
5064 <enabled/>
5065 <data id="Proxy_SOCKSProxy" value="socksproxy.example.com"/>
5066 <data id="Proxy_SOCKSVersion" value="4 | 5"/>
5067 ```
5068 OMA-URI:
5069 ```
5070 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ProxySettings/Proxy_AutoConfigURL
5071 ```
5072 Value (string):
5073 ```
5074 <enabled/>
5075 <data id="Proxy_AutoConfigURL" value="URL_TO_AUTOCONFIG"/>
5076 ```
5077 OMA-URI:
5078 ```
5079 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ProxySettings/Proxy_Passthrough
5080 ```
5081 Value (string):
5082 ```
5083 <enabled/>
5084 <data id="Proxy_Passthrough" value="&lt;local&gt;"/>
5085 ```
5086 OMA-URI:
5087 ```
5088 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ProxySettings/Proxy_AutoLogin
5089 ```
5090 Value (string):
5091 ```
5092 <enabled/> or <disabled/>
5093 ```
5094 OMA-URI:
5095 ```
5096 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ProxySettings/Proxy_UseProxyForDNS
5097 ```
5098 Value (string):
5099 ```
5100 <enabled/> or <disabled/>
5101 ```
5102 OMA-URI (Old way):
5103 ```
5104 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Proxy
5105 ```
5106 Value (string):
5107 ```
5108 <enabled/>
5109 <data id="ProxyLocked" value="true | false"/>
5110 <data id="ConnectionType" value="none | system | manual | autoDetect | autoConfig"/>
5111 <data id="HTTPProxy" value="httpproxy.example.com"/>
5112 <data id="UseHTTPProxyForAllProtocols" value="true | false"/>
5113 <data id="SSLProxy" value="sslproxy.example.com"/>
5114 <data id="FTPProxy" value="ftpproxy.example.com"/>
5115 <data id="SOCKSProxy" value="socksproxy.example.com"/>
5116 <data id="SOCKSVersion" value="4 | 5"/>
5117 <data id="AutoConfigURL" value="URL_TO_AUTOCONFIG"/>
5118 <data id="Passthrough" value="<local>"/>
5119 <data id="AutoLogin" value="true | false"/>
5120 <data id="UseProxyForDNS" value="true | false"/>
5121 ```
5122 #### macOS
5123 ```
5124 <dict>
5125   <key>Proxy</key>
5126   <dict>
5127     <key>Mode</key>
5128     <string>none | system | manual | autoDetect | autoConfig</string>
5129     <key>Locked</key>
5130     <true> | </false>
5131     <key>HTTPProxy</key>
5132     <string>https://httpproxy.example.com</string>
5133     <key>UseHTTPProxyForAllProtocols</key>
5134     <true> | </false>
5135     <key>SSLProxy</key>
5136     <string>https://sslproxy.example.com</string>
5137     <key>FTPProxy</key>
5138     <string>https://ftpproxy.example.com</string>
5139     <key>SOCKSProxy</key>
5140     <string>https://socksproxy.example.com</string>
5141     <key>SOCKSVersion</key>
5142     <string>4 | 5</string>
5143     <key>Passthrough</key>
5144     <string>&lt;local>&gt;</string>
5145     <key>AutoConfigURL</key>
5146     <string>URL_TO_AUTOCONFIG</string>
5147     <key>AutoLogin</key>
5148     <true> | </false>
5149     <key>UseProxyForDNS</key>
5150     <true> | </false>
5151   </dict>
5152 </dict>
5153 ```
5154 #### policies.json
5155 ```
5156 {
5157   "policies": {
5158     "Proxy": {
5159       "Mode": "none" | "system" | "manual" | "autoDetect" | "autoConfig",
5160       "Locked": true | false,
5161       "HTTPProxy": "hostname",
5162       "UseHTTPProxyForAllProtocols": true | false,
5163       "SSLProxy": "hostname",
5164       "FTPProxy": "hostname",
5165       "SOCKSProxy": "hostname",
5166       "SOCKSVersion": 4 | 5,
5167       "Passthrough": "<local>",
5168       "AutoConfigURL": "URL_TO_AUTOCONFIG",
5169       "AutoLogin": true | false,
5170       "UseProxyForDNS": true | false
5171     }
5172   }
5173 }
5174 ```
5175 ### RequestedLocales
5176 Set the the list of requested locales for the application in order of preference. It will cause the corresponding language pack to become active.
5177
5178 Note: For Firefox 68, this can now be a string so that you can specify an empty value.
5179
5180 **Compatibility:** Firefox 64, Firefox ESR 60.4, Updated in Firefox 68, Firefox ESR 68\
5181 **CCK2 Equivalent:** N/A\
5182 **Preferences Affected:** N/A
5183 #### Windows (GPO)
5184 ```
5185 Software\Policies\Mozilla\Firefox\RequestedLocales\1 = "de"
5186 Software\Policies\Mozilla\Firefox\RequestedLocales\2 = "en-US"
5187
5188 or
5189
5190 Software\Policies\Mozilla\Firefox\RequestedLocales = "de,en-US"
5191 ```
5192 #### Windows (Intune)
5193 OMA-URI:
5194 ```
5195 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/RequestedLocalesString
5196 ```
5197 Value (string):
5198 ```
5199 <enabled/>
5200 <data id="Preferences_String" value="de,en-US"/>
5201 ```
5202 #### macOS
5203 ```
5204 <dict>
5205   <key>RequestedLocales</key>
5206   <array>
5207     <string>de</string>
5208     <string>en-US</string>
5209   </array>
5210 </dict>
5211
5212 or
5213
5214 <dict>
5215   <key>RequestedLocales</key>
5216   <string>de,en-US</string>
5217 </dict>
5218
5219 ```
5220 #### policies.json
5221 ```
5222 {
5223   "policies": {
5224     "RequestedLocales": ["de", "en-US"]
5225   }
5226 }
5227
5228 or
5229
5230 {
5231   "policies": {
5232     "RequestedLocales": "de,en-US"
5233   }
5234 }
5235 ```
5236 <a name="SanitizeOnShutdown"></a>
5237
5238 ### SanitizeOnShutdown (Selective)
5239 Clear data on shutdown. Choose from Cache, Cookies, Download History, Form & Search History, Browsing History, Active Logins, Site Preferences and Offline Website Data.
5240
5241 Previously, these values were always locked. Starting with Firefox 74 and Firefox ESR 68.6, you can use the `Locked` option to either keep the values unlocked (set it to false), or lock only the values you set (set it to true). If you want the old behavior of locking everything, do not set `Locked` at all.
5242
5243 **Compatibility:** Firefox 68, Firefox ESR 68 (Locked added in 74/68.6)\
5244 **CCK2 Equivalent:** N/A\
5245 **Preferences Affected:** `privacy.sanitize.sanitizeOnShutdown`, `privacy.clearOnShutdown.cache`, `privacy.clearOnShutdown.cookies`, `privacy.clearOnShutdown.downloads`, `privacy.clearOnShutdown.formdata`, `privacy.clearOnShutdown.history`, `privacy.clearOnShutdown.sessions`, `privacy.clearOnShutdown.siteSettings`, `privacy.clearOnShutdown.offlineApps`
5246 #### Windows (GPO)
5247 ```
5248 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Cache = 0x1 | 0x0
5249 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Cookies = 0x1 | 0x0
5250 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Downloads = 0x1 | 0x0
5251 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\FormData = 0x1 | 0x0
5252 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\History = 0x1 | 0x0
5253 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Sessions = 0x1 | 0x0
5254 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\SiteSettings = 0x1 | 0x0
5255 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\OfflineApps = 0x1 | 0x0
5256 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Locked = 0x1 | 0x0
5257 ```
5258 #### Windows (Intune)
5259 OMA-URI:
5260 ```
5261 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/A_SanitizeOnShutdown_Cache
5262 ```
5263 Value (string):
5264 ```
5265 <enabled/> or <disabled/>
5266 ```
5267 OMA-URI:
5268 ```
5269 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/B_SanitizeOnShutdown_Cookies
5270 ```
5271 Value (string):
5272 ```
5273 <enabled/> or <disabled/>
5274 ```
5275 OMA-URI:
5276 ```
5277 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/C_SanitizeOnShutdown_Downloads
5278 ```
5279 Value (string):
5280 ```
5281 <enabled/> or <disabled/>
5282 ```
5283 OMA-URI:
5284 ```
5285 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/D_SanitizeOnShutdown_FormData
5286 ```
5287 Value (string):
5288 ```
5289 <enabled/> or <disabled/>
5290 ```
5291 OMA-URI:
5292 ```
5293 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/E_SanitizeOnShutdown_History
5294 ```
5295 Value (string):
5296 ```
5297 <enabled/> or <disabled/>
5298 ```
5299 OMA-URI:
5300 ```
5301 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/F_SanitizeOnShutdown_Sessions
5302 ```
5303 Value (string):
5304 ```
5305 <enabled/> or <disabled/>
5306 ```
5307 OMA-URI:
5308 ```
5309 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/G_SanitizeOnShutdown_SiteSettings
5310 ```
5311 Value (string):
5312 ```
5313 <enabled/> or <disabled/>
5314 ```
5315 OMA-URI:
5316 ```
5317 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/H_SanitizeOnShutdown_OfflineApps
5318 ```
5319 Value (string):
5320 ```
5321 <enabled/> or <disabled/>
5322 ```
5323 OMA-URI:
5324 ```
5325 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/I_SanitizeOnShutdown_Locked
5326 ```
5327 Value (string):
5328 ```
5329 <enabled/> or <disabled/>
5330 ```
5331 #### macOS
5332 ```
5333 <dict>
5334   <key>SanitizeOnShutdown</key>
5335   <dict>
5336     <key>Cache</key>
5337     <true/> | <false/>
5338     <key>Cookies</key>
5339     <true/> | <false/>
5340     <key>Downloads</key>
5341     <true/> | <false/>
5342     <key>FormData</key>
5343     <true/> | <false/>
5344     <key>History</key>
5345     <true/> | <false/>
5346     <key>Sessions</key>
5347     <true/> | <false/>
5348     <key>SiteSettings</key>
5349     <true/> | <false/>
5350     <key>OfflineApps</key>
5351     <true/> | <false/>
5352     <key>Locked</key>
5353     <true/> | <false/>
5354   </dict>
5355 </dict>
5356 ```
5357 #### policies.json
5358 ```
5359 {
5360   "policies": {
5361     "SanitizeOnShutdown": {
5362       "Cache": true | false,
5363       "Cookies": true | false,
5364       "Downloads": true | false,
5365       "FormData": true | false,
5366       "History": true | false,
5367       "Sessions": true | false,
5368       "SiteSettings": true | false,
5369       "OfflineApps": true | false,
5370       "Locked": true | false
5371     }
5372   }
5373 }
5374 ```
5375 ### SanitizeOnShutdown (All)
5376 Clear all data on shutdown, including Browsing & Download History, Cookies, Active Logins, Cache, Form & Search History, Site Preferences and Offline Website Data.
5377
5378 **Compatibility:** Firefox 60, Firefox ESR 60\
5379 **CCK2 Equivalent:** N/A\
5380 **Preferences Affected:** `privacy.sanitize.sanitizeOnShutdown`, `privacy.clearOnShutdown.cache`, `privacy.clearOnShutdown.cookies`, `privacy.clearOnShutdown.downloads`, `privacy.clearOnShutdown.formdata`, `privacy.clearOnShutdown.history`, `privacy.clearOnShutdown.sessions`, `privacy.clearOnShutdown.siteSettings`, `privacy.clearOnShutdown.offlineApps`
5381 #### Windows (GPO)
5382 ```
5383 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown = 0x1 | 0x0
5384 ```
5385 #### Windows (Intune)
5386 OMA-URI:
5387 ```
5388 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/C_SanitizeOnShutdown
5389 ```
5390 Value (string):
5391 ```
5392 <enabled/> or <disabled/>
5393 ```
5394 #### macOS
5395 ```
5396 <dict>
5397   <key>SanitizeOnShutdown</key>
5398   <true/> | <false/>
5399 </dict>
5400 ```
5401 #### policies.json
5402 ```
5403 {
5404   "policies": {
5405     "SanitizeOnShutdown": true | false
5406   }
5407 }
5408 ```
5409 ### SearchBar
5410 Set whether or not search bar is displayed.
5411
5412 **Compatibility:** Firefox 60, Firefox ESR 60\
5413 **CCK2 Equivalent:** `showSearchBar`\
5414 **Preferences Affected:** N/A
5415
5416 #### Windows (GPO)
5417 ```
5418 Software\Policies\Mozilla\Firefox\SearchBar = "unified" | "separate"
5419 ```
5420
5421 #### Windows (Intune)
5422 OMA-URI:
5423 ```
5424 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SearchBar
5425 ```
5426 Value (string):
5427 ```
5428 <enabled/>
5429 <data id="SearchBar" value="unified | separate"/>
5430 ```
5431 #### macOS
5432 ```
5433 <dict>
5434   <key>SearchBar</key>
5435   <string>unified | separate</string>
5436 </dict>
5437 ```
5438 #### policies.json
5439 ```
5440 {
5441   "policies": {
5442     "SearchBar": "unified" | "separate"
5443   }
5444 }
5445 ```
5446 <a name="SearchEngines"></a>
5447
5448 ### SearchEngines (This policy is only available on the ESR.)
5449
5450 ### SearchEngines | Add
5451
5452 Add new search engines. Although there are only five engines available in the ADMX template, there is no limit. To add more in the ADMX template, you can duplicate the XML.
5453
5454 This policy is only available on the ESR. `Name` and `URLTemplate` are required.
5455
5456 `Name` is the name of the search engine.
5457
5458 `URLTemplate` is the search URL with {searchTerms} to substitute for the search term.
5459
5460 `Method` is either GET or POST
5461
5462 `IconURL` is a URL for the icon to use.
5463
5464 `Alias` is a keyword to use for the engine.
5465
5466 `Description` is a description of the search engine.
5467
5468 `PostData` is the POST data as name value pairs separated by &.
5469
5470 `SuggestURLTemplate` is a search suggestions URL with {searchTerms} to substitute for the search term.
5471
5472 `Encoding` is the query charset for the engine. It defaults to UTF-8.
5473
5474 **Compatibility:** Firefox ESR 60 (POST support in Firefox ESR 68, Encoding support in Firefox 91)\
5475 **CCK2 Equivalent:** `searchplugins`\
5476 **Preferences Affected:** N/A
5477
5478 #### Windows (GPO)
5479 ```
5480 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Name = "Example1"
5481 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\URLTemplate = "https://www.example.org/q={searchTerms}"
5482 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Method = "GET" | "POST"
5483 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\IconURL = "https://www.example.org/favicon.ico"
5484 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Alias = "example"
5485 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Description = "Example Description"
5486 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\SuggestURLTemplate = "https://www.example.org/suggestions/q={searchTerms}"
5487 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\PostData = "name=value&q={searchTerms}"
5488 ```
5489 #### Windows (Intune)
5490 OMA-URI:
5491 ```
5492 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_1
5493 ```
5494 Value (string):
5495 ```
5496 <enabled/>
5497 <data id="SearchEngine_Name" value="Example1"/>
5498 <data id="SearchEngine_URLTemplate" value="https://www.example.org/q={searchTerms"/>
5499 <data id="SearchEngine_Method" value="GET | POST"/>
5500 <data id="SearchEngine_IconURL" value="https://www.example.org/favicon.ico"/>
5501 <data id="SearchEngine_Alias" value="example"/>
5502 <data id="SearchEngine_Description" value="Example Description"/>
5503 <data id="SearchEngine_SuggestURLTemplate" value="https://www.example.org/suggestions/q={searchTerms}"/>
5504 <data id="SearchEngine_PostData" value="name=value&amp;q={searchTerms}"/>
5505 ```
5506 #### macOS
5507 ```
5508 <dict>
5509   <key>SearchEngines</key>
5510   <dict>
5511     <key>Add</key>
5512     <array>
5513       <dict>
5514         <key>Name</key>
5515         <string>Example1</string>
5516         <key>URLTemplate</key>
5517         <string>https://www.example.org/q={searchTerms}</string>
5518         <key>Method</key>
5519         <string>GET | POST </string>
5520         <key>IconURL</key>
5521         <string>https://www.example.org/favicon.ico</string>
5522         <key>Alias</key>
5523         <string>example</string>
5524         <key>Description</key>
5525         <string>Example Description</string>
5526         <key>SuggestURLTemplate</key>
5527         <string>https://www.example.org/suggestions/q={searchTerms}</string>
5528         <key>PostData</key>
5529         <string>name=value&q={searchTerms}</string>
5530       </dict>
5531     <array>
5532   </dict>
5533 </dict>
5534 ```
5535 #### policies.json
5536 ```
5537 {
5538   "policies": {
5539     "SearchEngines": {
5540       "Add": [
5541         {
5542           "Name": "Example1",
5543           "URLTemplate": "https://www.example.org/q={searchTerms}",
5544           "Method": "GET" | "POST",
5545           "IconURL": "https://www.example.org/favicon.ico",
5546           "Alias": "example",
5547           "Description": "Description",
5548           "PostData": "name=value&q={searchTerms}",
5549           "SuggestURLTemplate": "https://www.example.org/suggestions/q={searchTerms}"
5550         }
5551       ]
5552     }
5553   }
5554 }
5555 ```
5556 ### SearchEngines | Default
5557
5558 Set the default search engine. This policy is only available on the ESR.
5559
5560 **Compatibility:** Firefox ESR 60\
5561 **CCK2 Equivalent:** `defaultSearchEngine`\
5562 **Preferences Affected:** N/A
5563
5564 #### Windows (GPO)
5565 ```
5566 Software\Policies\Mozilla\Firefox\SearchEngines\Default = NAME_OF_SEARCH_ENGINE
5567 ```
5568 #### Windows (Intune)
5569 OMA-URI:
5570 ```
5571 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_Default
5572 ```
5573 Value (string):
5574 ```
5575 <enabled/>
5576 <data id="SearchEngines_Default" value="NAME_OF_SEARCH_ENGINE"/>
5577 ```
5578 #### macOS
5579 ```
5580 <dict>
5581   <key>SearchEngines</key>
5582   <dict>
5583     <key>Default</key>
5584     <string>NAME_OF_SEARCH_ENGINE</string>
5585   </dict>
5586 </dict>
5587 ```
5588 #### policies.json
5589 ```
5590 {
5591   "policies": {
5592     "SearchEngines": {
5593       "Default": "NAME_OF_SEARCH_ENGINE"
5594     }
5595   }
5596 }
5597 ```
5598 ### SearchEngines | PreventInstalls
5599
5600 Prevent installing search engines from webpages.
5601
5602 **Compatibility:** Firefox ESR 60\
5603 **CCK2 Equivalent:** `disableSearchEngineInstall`\
5604 **Preferences Affected:** N/A
5605
5606 #### Windows (GPO)
5607 ```
5608 Software\Policies\Mozilla\Firefox\SearchEngines\PreventInstalls = 0x1 | 0x0
5609 ```
5610 #### Windows (Intune)
5611 OMA-URI:
5612 ```
5613 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_PreventInstalls
5614 ```
5615 Value (string):
5616 ```
5617 <enabled/> or <disabled/>
5618 ```
5619 #### macOS
5620 ```
5621 <dict>
5622   <key>SearchEngines</key>
5623   <dict>
5624     <key>PreventInstalls</key>
5625     <true/> | <false/>
5626   </dict>
5627 </dict>
5628 ```
5629 #### policies.json
5630 ```
5631 {
5632   "policies": {
5633     "SearchEngines": {
5634       "PreventInstalls": true | false
5635     }
5636   }
5637 }
5638 ```
5639 ### SearchEngines | Remove
5640
5641 Hide built-in search engines. This policy is only available on the ESR.
5642
5643 **Compatibility:** Firefox ESR 60.2\
5644 **CCK2 Equivalent:** `removeDefaultSearchEngines` (removed all built-in engines)\
5645 **Preferences Affected:** N/A
5646
5647 #### Windows (GPO)
5648 ```
5649 Software\Policies\Mozilla\Firefox\SearchEngines\Remove\1 = NAME_OF_SEARCH_ENGINE
5650 ```
5651 #### Windows (Intune)
5652 OMA-URI:
5653 ```
5654 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_Remove
5655 ```
5656 Value (string):
5657 ```
5658 <enabled/>
5659 <data id="SearchEngines_Remove" value="1&#xF000;NAME_OF_SEARCH_ENGINE"/>
5660 ```
5661 #### macOS
5662 ```
5663 <dict>
5664   <key>SearchEngines</key>
5665   <dict>
5666     <key>Remove</key>
5667     <array>
5668       <string>NAME_OF_SEARCH_ENGINE</string>
5669     </array>
5670   </dict>
5671 </dict>
5672 ```
5673 #### policies.json
5674 ```
5675 {
5676   "policies": {
5677     "SearchEngines": {
5678       "Remove": ["NAME_OF_SEARCH_ENGINE"]
5679     }
5680   }
5681 }
5682 ```
5683 ### SearchSuggestEnabled
5684
5685 Enable search suggestions.
5686
5687 **Compatibility:** Firefox 68, Firefox ESR 68\
5688 **CCK2 Equivalent:** N/A\
5689 **Preferences Affected:** `browser.urlbar.suggest.searches`, `browser.search.suggest.enabled`
5690
5691 #### Windows (GPO)
5692 ```
5693 Software\Policies\Mozilla\Firefox\SearchSuggestEnabled = 0x1 | 0x0
5694 ```
5695 #### Windows (Intune)
5696 OMA-URI:
5697 ```
5698 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchSuggestEnabled
5699 ```
5700 Value (string):
5701 ```
5702 <enabled/> or <disabled/>
5703 ```
5704 #### macOS
5705 ```
5706 <dict>
5707   <key>SearchSuggestEnabled</key>
5708   <true/> | <false/>
5709 </dict>
5710 ```
5711 #### policies.json
5712 ```
5713 {
5714   "policies": {
5715     "SearchSuggestEnabled": true | false
5716   }
5717 }
5718 ```
5719 ### SecurityDevices
5720
5721 Add or delete PKCS #11 modules.
5722
5723 **Compatibility:** Firefox 114, Firefox ESR 112.12\
5724 **CCK2 Equivalent:** N/A\
5725 **Preferences Affected:** N/A
5726
5727 #### Windows (GPO)
5728 ```
5729 Software\Policies\Mozilla\Firefox\SecurityDevices\Add\NAME_OF_DEVICE_TO_ADD = PATH_TO_LIBRARY_FOR_DEVICE
5730 Software\Policies\Mozilla\Firefox\SecurityDevices\Remove\1 = NAME_OF_DEVICE_TO_REMOVE
5731 ```
5732 #### Windows (Intune)
5733 OMA-URI:
5734 ```
5735 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SecurityDevices/SecurityDevices_Add
5736 ```
5737 Value (string):
5738 ```
5739 <enabled/>
5740 <data id="SecurityDevices" value="NAME_OF_DEVICE_TO_ADD&#xF000;PATH_TO_LIBRARY_FOR_DEVICE"/>
5741 ```
5742 OMA-URI:
5743 ```
5744 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SecurityDevices/SecurityDevices_Delete
5745 ```
5746 Value (string):
5747 ```
5748 <enabled/>
5749 <data id="SecurityDevices" value="1&#xF000;NAME_OF_DEVICE_TO_REMOVE"/>
5750 ```
5751 #### macOS
5752 ```
5753 <dict>
5754   <key>SecurityDevices</key>
5755   <dict>
5756     <key>Add<key>
5757     <dict>
5758       <key>NAME_OF_DEVICE_TO_ADD</key>
5759       <string>PATH_TO_LIBRARY_FOR_DEVICE</string>
5760     </dict>
5761     <key>Delete</add>
5762     <array>
5763       <string>NAME_OF_DEVICE_TO_DELETE</string>
5764     </array>
5765   </dict>
5766 </dict>
5767 ```
5768 #### policies.json
5769 ```
5770 {
5771   "policies": {
5772     "SecurityDevices": {
5773       "Add": {
5774         "NAME_OF_DEVICE_TO_ADD": "PATH_TO_LIBRARY_FOR_DEVICE"
5775       },
5776       "Delete": ["NAME_OF_DEVICE_TO_DELETE"]
5777     }
5778   }
5779 }
5780 ```
5781 ### SecurityDevices (Deprecated)
5782
5783 Install PKCS #11 modules.
5784
5785 **Compatibility:** Firefox 64, Firefox ESR 60.4\
5786 **CCK2 Equivalent:** `certs.devices`\
5787 **Preferences Affected:** N/A
5788
5789 #### Windows (GPO)
5790 ```
5791 Software\Policies\Mozilla\Firefox\SecurityDevices\NAME_OF_DEVICE = PATH_TO_LIBRARY_FOR_DEVICE
5792 ```
5793 #### Windows (Intune)
5794 OMA-URI:
5795 ```
5796 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SecurityDevices
5797 ```
5798 Value (string):
5799 ```
5800 <enabled/>
5801 <data id="SecurityDevices" value="NAME_OF_DEVICE&#xF000;PATH_TO_LIBRARY_FOR_DEVICE"/>
5802 ```
5803 #### macOS
5804 ```
5805 <dict>
5806   <key>SecurityDevices</key>
5807   <dict>
5808     <key>NAME_OF_DEVICE</key>
5809     <string>PATH_TO_LIBRARY_FOR_DEVICE</string>
5810   </dict>
5811 </dict>
5812 ```
5813 #### policies.json
5814 ```
5815 {
5816   "policies": {
5817     "SecurityDevices": {
5818       "NAME_OF_DEVICE": "PATH_TO_LIBRARY_FOR_DEVICE"
5819     }
5820   }
5821 }
5822 ```
5823 ### ShowHomeButton
5824 Show the home button on the toolbar.
5825
5826 Future versions of Firefox will not show the home button by default.
5827
5828 **Compatibility:** Firefox 88, Firefox ESR 78.10\
5829 **CCK2 Equivalent:** N/A\
5830 **Preferences Affected:** N/A
5831
5832 #### Windows (GPO)
5833 ```
5834 Software\Policies\Mozilla\Firefox\ShowHomeButton = 0x1 | 0x0
5835 ```
5836 #### Windows (Intune)
5837 OMA-URI:
5838 ```
5839 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/Homepage_ShowHomeButton
5840 ```
5841 Value (string):
5842 ```
5843 <enabled/> or <disabled/>
5844 ```
5845 #### macOS
5846 ```
5847 <dict>
5848   <key>ShowHomeButton</key>
5849   <true/> | <false/>
5850 </dict>
5851 ```
5852 #### policies.json
5853 ```
5854 {
5855   "policies": {
5856     "ShowHomeButton": true | false
5857   }
5858 }
5859 ```
5860 ### SSLVersionMax
5861
5862 Set and lock the maximum version of TLS. (Firefox defaults to a maximum of TLS 1.3.)
5863
5864 **Compatibility:** Firefox 66, Firefox ESR 60.6\
5865 **CCK2 Equivalent:** N/A\
5866 **Preferences Affected:** `security.tls.version.max`
5867
5868 #### Windows (GPO)
5869 ```
5870 Software\Policies\Mozilla\Firefox\SSLVersionMax = "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
5871 ```
5872 #### Windows (Intune)
5873 OMA-URI:
5874 ```
5875 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SSLVersionMax
5876 ```
5877 Value (string):
5878 ```
5879 <enabled/>
5880 <data id="SSLVersion" value="tls1 | tls1.2 | tls1.3"/>
5881 ```
5882 #### macOS
5883 ```
5884 <dict>
5885   <key>SSLVersionMax</key>
5886   <string>tls1 | tls1.1 | tls1.2 | tls1.3</string>
5887 </dict>
5888 ```
5889
5890 #### policies.json
5891 ```
5892 {
5893   "policies": {
5894     "SSLVersionMax": "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
5895   }
5896 }
5897 ```
5898 ### SSLVersionMin
5899
5900 Set and lock the minimum version of TLS. (Firefox defaults to a minimum of TLS 1.2.)
5901
5902 **Compatibility:** Firefox 66, Firefox ESR 60.6\
5903 **CCK2 Equivalent:** N/A\
5904 **Preferences Affected:** `security.tls.version.min`
5905
5906 #### Windows (GPO)
5907 ```
5908 Software\Policies\Mozilla\Firefox\SSLVersionMin = "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
5909 ```
5910 #### Windows (Intune)
5911 OMA-URI:
5912 ```
5913 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SSLVersionMin
5914 ```
5915 Value (string):
5916 ```
5917 <enabled/>
5918 <data id="SSLVersion" value="tls1 | tls1.2 | tls1.3"/>
5919 ```
5920 #### macOS
5921 ```
5922 <dict>
5923   <key>SSLVersionMin</key>
5924   <string>tls1 | tls1.1 | tls1.2 | tls1.3</string>
5925 </dict>
5926 ```
5927
5928 #### policies.json
5929 ```
5930 {
5931   "policies": {
5932     "SSLVersionMin": "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
5933   }
5934 }
5935 ```
5936 ### SupportMenu
5937 Add a menuitem to the help menu for specifying support information.
5938
5939 **Compatibility:** Firefox 68.0.1, Firefox ESR 68.0.1\
5940 **CCK2 Equivalent:** helpMenu\
5941 **Preferences Affected:** N/A
5942
5943 #### Windows (GPO)
5944 ```
5945 Software\Policies\Mozilla\Firefox\SupportMenu\Title = "Support Menu"
5946 Software\Policies\Mozilla\Firefox\SupportMenu\URL = "http://example.com/support"
5947 Software\Policies\Mozilla\Firefox\SupportMenu\AccessKey = "S"
5948 ```
5949 #### Windows (Intune)
5950 OMA-URI:
5951 ```
5952 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SupportMenu
5953 ```
5954 Value (string):
5955 ```
5956 <enabled/>
5957 <data id="SupportMenuTitle" value="Support Menu"/>
5958 <data id="SupportMenuURL" value="http://example.com/support"/>
5959 <data id="SupportMenuAccessKey" value="S"/>
5960 ```
5961 #### macOS
5962 ```
5963 <dict>
5964   <key>SupportMenu</key>
5965   <dict>
5966     <key>Title</key>
5967     <string>SupportMenu</string>
5968     <key>URL</key>
5969     <string>http://example.com/support</string>
5970     <key>AccessKey</key>
5971     <string>S</string>
5972   </dict>
5973 </dict>
5974 ```
5975 #### policies.json
5976 ```
5977 {
5978   "policies": {
5979     "SupportMenu": {
5980       "Title": "Support Menu",
5981       "URL": "http://example.com/support",
5982       "AccessKey": "S"
5983     }
5984   }
5985 }
5986 ```
5987 ### StartDownloadsInTempDirectory
5988 Force downloads to start off in a local, temporary location rather than the default download directory.
5989
5990 **Compatibility:** Firefox 102\
5991 **CCK2 Equivalent:** N/A\
5992 **Preferences Affected:** `browser.download.start_downloads_in_tmp_dir`
5993
5994 #### Windows (GPO)
5995 ```
5996 Software\Policies\Mozilla\Firefox\StartDownloadsInTempDirectory = 0x1 | 0x0
5997 ```
5998 #### Windows (Intune)
5999 OMA-URI:
6000 ```
6001 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/StartDownloadsInTempDirectory
6002 ```
6003 Value (string):
6004 ```
6005 <enabled/> or <disabled/>
6006 ```
6007 #### macOS
6008 ```
6009 <dict>
6010   <key>StartDownloadsInTempDirectory</key>
6011   <true/> | <false/>
6012 </dict>
6013 ```
6014 #### policies.json
6015 ```
6016 {
6017   "policies": {
6018     "StartDownloadsInTempDirectory": true | false
6019 }
6020 ```
6021 ### UserMessaging
6022
6023 Prevent Firefox from messaging the user in certain situations.
6024
6025 `WhatsNew` Remove the "What's New" icon and menuitem.
6026
6027 `ExtensionRecommendations` If false, don't recommend extensions while the user is visiting web pages.
6028
6029 `FeatureRecommendations` If false, don't recommend browser features.
6030
6031 `UrlbarInterventions` If false, Don't offer Firefox specific suggestions in the URL bar.
6032
6033 `SkipOnboarding` If true, don't show onboarding messages on the new tab page.
6034
6035 `MoreFromMozilla` If false, don't show the "More from Mozilla" section in Preferences. (Firefox 98)
6036
6037 `Locked` prevents the user from changing user messaging preferences.
6038
6039 **Compatibility:** Firefox 75, Firefox ESR 68.7\
6040 **CCK2 Equivalent:** N/A\
6041 **Preferences Affected:** `browser.messaging-system.whatsNewPanel.enabled`, `browser.newtabpage.activity-stream.asrouter.userprefs.cfr.addons`, `browser.newtabpage.activity-stream.asrouter.userprefs.cfr.features`, `browser.aboutwelcome.enabled`, `browser.preferences.moreFromMozilla`
6042
6043 #### Windows (GPO)
6044 ```
6045 Software\Policies\Mozilla\Firefox\UserMessaging\WhatsNew = 0x1 | 0x0
6046 Software\Policies\Mozilla\Firefox\UserMessaging\ExtensionRecommendations = 0x1 | 0x0
6047 Software\Policies\Mozilla\Firefox\UserMessaging\FeatureRecommendations = 0x1 | 0x0
6048 Software\Policies\Mozilla\Firefox\UserMessaging\UrlbarInterventions = 0x1 | 0x0
6049 Software\Policies\Mozilla\Firefox\UserMessaging\SkipOnboarding = 0x1 | 0x0
6050 Software\Policies\Mozilla\Firefox\UserMessaging\MoreFromMozilla = 0x1 | 0x0
6051 Software\Policies\Mozilla\Firefox\UserMessaging\Locked = 0x1 | 0x0
6052 ```
6053 #### Windows (Intune)
6054 OMA-URI:
6055 ```
6056 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_WhatsNew
6057 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_ExtensionRecommendations
6058 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_FeatureRecommendations
6059 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_UrlbarInterventions
6060 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_SkipOnboarding
6061 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_MoreFromMozilla
6062 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_Locked
6063 ```
6064 Value (string):
6065 ```
6066 <enabled/> or <disabled/>
6067 ```
6068 #### macOS
6069 ```
6070 <dict>
6071   <key>UserMessaging</key>
6072   <dict>
6073     <key>WhatsNew</key>
6074     <true/> | <false/>
6075     <key>ExtensionRecommendations</key>
6076     <true/> | <false/>
6077     <key>FeatureRecommendations</key>
6078     <true/> | <false/>
6079     <key>UrlbarInterventions</key>
6080     <true/> | <false/>
6081     <key>SkipOnboarding</key>
6082     <true/> | <false/>
6083     <key>MoreFromMozilla</key>
6084     <true/> | <false/>
6085     <key>Locked</key>
6086     <true/> | <false/>
6087   </dict>
6088 </dict>
6089 ```
6090 #### policies.json
6091 ```
6092 {
6093   "policies": {
6094     "UserMessaging": {
6095       "WhatsNew": true | false,
6096       "ExtensionRecommendations": true | false,
6097       "FeatureRecommendations": true | false,
6098       "UrlbarInterventions": true | false,
6099       "SkipOnboarding": true | false,
6100       "MoreFromMozilla": true | false,
6101       "Locked": true | false
6102     }
6103   }
6104 }
6105 ```
6106 ### UseSystemPrintDialog
6107 Use the system print dialog instead of the print preview window.
6108
6109 **Compatibility:** Firefox 102\
6110 **CCK2 Equivalent:** N/A\
6111 **Preferences Affected:** `print.prefer_system_dialog`
6112
6113 #### Windows (GPO)
6114 ```
6115 Software\Policies\Mozilla\Firefox\UseSystemPrintDialog = 0x1 | 0x0
6116 ```
6117 #### Windows (Intune)
6118 OMA-URI:
6119 ```
6120 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/UseSystemPrintDialog
6121 ```
6122 Value (string):
6123 ```
6124 <enabled/> or <disabled/>
6125 ```
6126 #### macOS
6127 ```
6128 <dict>
6129   <key>UseSystemPrintDialog</key>
6130   <true/> | <false/>
6131 </dict>
6132 ```
6133 #### policies.json
6134 ```
6135 {
6136   "policies": {
6137     "UseSystemPrintDialog": true | false
6138   }
6139 }
6140 ```
6141 ### WebsiteFilter
6142 Block websites from being visited. The parameters take an array of Match Patterns, as documented in https://developer.mozilla.org/en-US/Add-ons/WebExtensions/Match_patterns.
6143 The arrays are limited to 1000 entries each.
6144
6145 If you want to block all URLs, you can use `<all_urls>` or `*://*/*`. You can't have just a `*` on the right side.
6146
6147 For specific protocols, use `https://*/*` or `http://*/*`.
6148
6149 As of Firefox 83 and Firefox ESR 78.5, file URLs are supported.
6150
6151 **Compatibility:** Firefox 60, Firefox ESR 60\
6152 **CCK2 Equivalent:** N/A\
6153 **Preferences Affected:** N/A
6154
6155 #### Windows (GPO)
6156 ```
6157 Software\Policies\Mozilla\Firefox\WebsiteFilter\Block\1 = "<all_urls>"
6158 Software\Policies\Mozilla\Firefox\WebsiteFilter\Exceptions\1 = "http://example.org/*"
6159 ```
6160 #### Windows (Intune)
6161 OMA-URI:
6162 ```
6163 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/B_WebsiteFilter_Block
6164 ```
6165 Value (string):
6166 ```
6167 <enabled/> <data id="WebsiteFilter" value="1&#xF000;&#60;all_urls&#62;"/>
6168 ```
6169 OMA-URI:
6170 ```
6171 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/B_WebsiteFilter_Exceptions
6172 ```
6173 Value (string):
6174 ```
6175 <enabled/>
6176 <data id="WebsiteFilter" value="1&#xF000;http://example.org/*"/>
6177 ```
6178 #### macOS
6179 ```
6180 <dict>
6181   <key>WebsiteFilter</key>
6182   <dict>
6183     <key>Block</key>
6184     <array>
6185       <string><all_urls></string>
6186     </array>
6187     <key>Exceptions</key>
6188     <array>
6189       <string>http://example.org/*</string>
6190     </array>
6191   </dict>
6192
6193 </dict>
6194 ```
6195 #### policies.json
6196 ```
6197 {
6198   "policies": {
6199     "WebsiteFilter": {
6200       "Block": ["<all_urls>"],
6201       "Exceptions": ["http://example.org/*"]
6202     }
6203   }
6204 }
6205 ```
6206 ### WindowsSSO
6207 Allow Windows single sign-on for Microsoft, work, and school accounts.
6208
6209 If this policy is set to true, Firefox will use credentials stored in Windows to sign in to Microsoft, work, and school accounts.
6210
6211 **Compatibility:** Firefox 91\
6212 **CCK2 Equivalent:** N/A\
6213 **Preferences Affected:** `network.http.windows-sso.enabled`
6214
6215 #### Windows (GPO)
6216 ```
6217 Software\Policies\Mozilla\Firefox\WindowsSSO = 0x1 | 0x0
6218 ```
6219 #### Windows (Intune)
6220 OMA-URI:
6221 ```
6222 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/WindowsSSO
6223 ```
6224 Value (string):
6225 ```
6226 <enabled/> or <disabled/>
6227 ```
6228 #### policies.json
6229 ```
6230 {
6231   "policies": {
6232     "WindowsSSO": true | false
6233   }
6234 }
6235 ```