]> git.p6c8.net - policy-templates.git/blob - README.md
git.p6c8.net / policy-templates.git / blob
? search:
summary | shortlog | log | commit | commitdiff | tree
history | raw | HEAD
Add pinning information.
[policy-templates.git] / README.md
1 **These policies are in active development and so might contain changes that do not work with current versions of Firefox.**
2
3 **You should use the [officially released versions](https://github.com/mozilla/policy-templates/releases) if you are deploying changes.**
4
5 Policies can be specified using the [Group Policy templates on Windows](https://github.com/mozilla/policy-templates/tree/master/windows), [Intune on Windows](https://support.mozilla.org/kb/managing-firefox-intune), [configuration profiles on macOS](https://github.com/mozilla/policy-templates/tree/master/mac), or by creating a file called `policies.json`. On Windows, create a directory called `distribution` where the EXE is located and place the file there. On Mac, the file goes into `Firefox.app/Contents/Resources/distribution`. On Linux, the file goes into `firefox/distribution`, where `firefox` is the installation directory for firefox, which varies by distribution or you can specify system-wide policy by placing the file in `/etc/firefox/policies`.
6
7 Unfortunately, JSON files do not support comments, but you can add extra entries to the JSON to use as comments. You will see an error in about:policies, but the policies will still work properly. For example:
8
9 ```
10 {
11 "policies": {
12 "Authentication": {
13 "SPNEGO": ["mydomain.com", "https://myotherdomain.com"]
14 }
15 "Authentication_Comment": "These domains are required for us"
16 }
17 }
18 ```
19
20 | Policy Name | Description
21 | --- | --- |
22 | **[`3rdparty`](#3rdparty)** | Set policies that WebExtensions can access via chrome.storage.managed.
23 | **[`AllowedDomainsForApps`](#alloweddomainsforapps)** | Define domains allowed to access Google Workspace.
24 | **[`AppAutoUpdate`](#appautoupdate)** | Enable or disable automatic application update.
25 | **[`AppUpdatePin`](#appupdatepin)** | Prevent Firefox from being updated beyond the specified version.
26 | **[`AppUpdateURL`](#appupdateurl)** | Change the URL for application update.
27 | **[`Authentication`](#authentication)** | Configure sites that support integrated authentication.
28 | **[`AutoLaunchProtocolsFromOrigins`](#autolaunchprotocolsfromorigins)** | Define a list of external protocols that can be used from listed origins without prompting the user.
29 | **[`BackgroundAppUpdate`](#backgroundappupdate)** | Enable or disable the background updater (Windows only).
30 | **[`BlockAboutAddons`](#blockaboutaddons)** | Block access to the Add-ons Manager (about:addons).
31 | **[`BlockAboutConfig`](#blockaboutconfig)** | Block access to about:config.
32 | **[`BlockAboutProfiles`](#blockaboutprofiles)** | Block access to About Profiles (about:profiles).
33 | **[`BlockAboutSupport`](#blockaboutsupport)** | Block access to Troubleshooting Information (about:support).
34 | **[`Bookmarks`](#bookmarks)** | Add bookmarks in either the bookmarks toolbar or menu.
35 | **[`CaptivePortal`](#captiveportal)** | Enable or disable the detection of captive portals.
36 | **[`Certificates`](#certificates)** |
37 | **[`Certificates -> ImportEnterpriseRoots`](#certificates--importenterpriseroots)** | Trust certificates that have been added to the operating system certificate store by a user or administrator.
38 | **[`Certificates -> Install`](#certificates--install)** | Install certificates into the Firefox certificate store.
39 | **[`Containers`](#containers)** | Set policies related to [containers](https://addons.mozilla.org/firefox/addon/multi-account-containers/).
40 | **[`Cookies`](#cookies)** | Configure cookie preferences.
41 | **[`DefaultDownloadDirectory`](#defaultdownloaddirectory)** | Set the default download directory.
42 | **[`DisableAppUpdate`](#disableappupdate)** | Turn off application updates.
43 | **[`DisableBuiltinPDFViewer`](#disablebuiltinpdfviewer)** | Disable the built in PDF viewer.
44 | **[`DisabledCiphers`](#disabledciphers)** | Disable ciphers.
45 | **[`DisableDefaultBrowserAgent`](#disabledefaultbrowseragent)** | Prevent the default browser agent from taking any actions (Windows only).
46 | **[`DisableDeveloperTools`](#disabledevelopertools)** | Remove access to all developer tools.
47 | **[`DisableFeedbackCommands`](#disablefeedbackcommands)** | Disable the menus for reporting sites.
48 | **[`DisableFirefoxAccounts`](#disablefirefoxaccounts)** | Disable Firefox Accounts integration (Sync).
49 | **[`DisableFirefoxScreenshots`](#disablefirefoxscreenshots)** | Remove access to Firefox Screenshots.
50 | **[`DisableFirefoxStudies`](#disablefirefoxstudies)** | Disable Firefox studies (Shield).
51 | **[`DisableForgetButton`](#disableforgetbutton)** | Disable the "Forget" button.
52 | **[`DisableFormHistory`](#disableformhistory)** | Turn off saving information on web forms and the search bar.
53 | **[`DisableMasterPasswordCreation`](#disablemasterpasswordcreation)** | Remove the master password functionality.
54 | **[`DisablePasswordReveal`](#disablepasswordreveal)** | Do not allow passwords to be revealed in saved logins.
55 | **[`DisablePocket`](#disablepocket)** | Remove Pocket in the Firefox UI.
56 | **[`DisablePrivateBrowsing`](#disableprivatebrowsing)** | Remove access to private browsing.
57 | **[`DisableProfileImport`](#disableprofileimport)** | Disables the "Import data from another browser" option in the bookmarks window.
58 | **[`DisableProfileRefresh`](#disableprofilerefresh)** | Disable the Refresh Firefox button on about:support and support.mozilla.org
59 | **[`DisableSafeMode`](#disablesafemode)** | Disable safe mode within the browser.
60 | **[`DisableSecurityBypass`](#disablesecuritybypass)** | Prevent the user from bypassing security in certain cases.
61 | **[`DisableSetDesktopBackground`](#disablesetdesktopbackground)** | Remove the "Set As Desktop Background..." menuitem when right clicking on an image.
62 | **[`DisableSystemAddonUpdate`](#disablesystemaddonupdate)** | Prevent system add-ons from being installed or updated.
63 | **[`DisableTelemetry`](#disabletelemetry)** | DisableTelemetry
64 | **[`DisableThirdPartyModuleBlocking`](#disablethirdpartymoduleblocking)** | Do not allow blocking third-party modules.
65 | **[`DisplayBookmarksToolbar`](#displaybookmarkstoolbar)** | Set the initial state of the bookmarks toolbar.
66 | **[`DisplayBookmarksToolbar (Deprecated)`](#displaybookmarkstoolbar-deprecated)** | Set the initial state of the bookmarks toolbar.
67 | **[`DisplayMenuBar`](#displaymenubar)** | Set the state of the menubar.
68 | **[`DisplayMenuBar (Deprecated)`](#displaymenubar-deprecated)** | Set the initial state of the menubar.
69 | **[`DNSOverHTTPS`](#dnsoverhttps)** | Configure DNS over HTTPS.
70 | **[`DontCheckDefaultBrowser`](#dontcheckdefaultbrowser)** | Don't check if Firefox is the default browser at startup.
71 | **[`DownloadDirectory`](#downloaddirectory)** | Set and lock the download directory.
72 | **[`EnableTrackingProtection`](#enabletrackingprotection)** | Configure tracking protection.
73 | **[`EncryptedMediaExtensions`](#encryptedmediaextensions)** | Enable or disable Encrypted Media Extensions and optionally lock it.
74 | **[`EnterprisePoliciesEnabled`](#enterprisepoliciesenabled)** | Enable policy support on macOS.
75 | **[`ExemptDomainFileTypePairsFromFileTypeDownloadWarnings`](#exemptdomainfiletypepairsfromfiletypedownloadwarnings)** | Disable warnings based on file extension for specific file types on domains.
76 | **[`Extensions`](#extensions)** | Control the installation, uninstallation and locking of extensions.
77 | **[`ExtensionSettings`](#extensionsettings)** | Manage all aspects of extensions.
78 | **[`ExtensionUpdate`](#extensionupdate)** | Control extension updates.
79 | **[`FirefoxHome`](#firefoxhome)** | Customize the Firefox Home page.
80 | **[`FlashPlugin (Deprecated)`](#flashplugin-deprecated)** | Configure the default Flash plugin policy as well as origins for which Flash is allowed.
81 | **[`GoToIntranetSiteForSingleWordEntryInAddressBar`](#gotointranetsiteforsinglewordentryinaddressbar)** | Force direct intranet site navigation instead of searching when typing single word entries in the address bar.
82 | **[`Handlers`](#handlers)** | Configure default application handlers.
83 | **[`HardwareAcceleration`](#hardwareacceleration)** | Control hardware acceleration.
84 | **[`Homepage`](#homepage)** | Configure the default homepage and how Firefox starts.
85 | **[`InstallAddonsPermission`](#installaddonspermission)** | Configure the default extension install policy as well as origins for extension installs are allowed.
86 | **[`LegacyProfiles`](#legacyprofiles)** | Disable the feature enforcing a separate profile for each installation.
87 | **[`LegacySameSiteCookieBehaviorEnabled`](#legacysamesitecookiebehaviorenabled)** | Enable default legacy SameSite cookie behavior setting.
88 | **[`LegacySameSiteCookieBehaviorEnabledForDomainList`](#legacysamesitecookiebehaviorenabledfordomainlist)** | Revert to legacy SameSite behavior for cookies on specified sites.
89 | **[`LocalFileLinks`](#localfilelinks)** | Enable linking to local files by origin.
90 | **[`ManagedBookmarks`](#managedbookmarks)** | Configures a list of bookmarks managed by an administrator that cannot be changed by the user.
91 | **[`ManualAppUpdateOnly`](#manualappupdateonly)** | Allow manual updates only and do not notify the user about updates.
92 | **[`NetworkPrediction`](#networkprediction)** | Enable or disable network prediction (DNS prefetching).
93 | **[`NewTabPage`](#newtabpage)** | Enable or disable the New Tab page.
94 | **[`NoDefaultBookmarks`](#nodefaultbookmarks)** | Disable the creation of default bookmarks.
95 | **[`OfferToSaveLogins`](#offertosavelogins)** | Control whether or not Firefox offers to save passwords.
96 | **[`OfferToSaveLoginsDefault`](#offertosaveloginsdefault)** | Set the default value for whether or not Firefox offers to save passwords.
97 | **[`OverrideFirstRunPage`](#overridefirstrunpage)** | Override the first run page.
98 | **[`OverridePostUpdatePage`](#overridepostupdatepage)** | Override the upgrade page.
99 | **[`PasswordManagerEnabled`](#passwordmanagerenabled)** | Remove (some) access to the password manager.
100 | **[`PasswordManagerExceptions`](#passwordmanagerexceptions)** | Prevent Firefox from saving passwords for specific sites.
101 | **[`PDFjs`](#pdfjs)** | Disable or configure PDF.js, the built-in PDF viewer.
102 | **[`Permissions`](#permissions)** | Set permissions associated with camera, microphone, location, and notifications.
103 | **[`PictureInPicture`](#pictureinpicture)** | Enable or disable Picture-in-Picture.
104 | **[`PopupBlocking`](#popupblocking)** | Configure the default pop-up window policy as well as origins for which pop-up windows are allowed.
105 | **[`Preferences`](#preferences)** | Set and lock preferences.
106 | **[`Preferences (Deprecated)`](#preferences-deprecated)** | Set and lock some preferences.
107 | **[`PrimaryPassword`](#primarypassword)** | Require or prevent using a primary (formerly master) password.
108 | **[`PromptForDownloadLocation`](#promptfordownloadlocation)** | Ask where to save each file before downloading.
109 | **[`Proxy`](#proxy)** | Configure proxy settings.
110 | **[`RequestedLocales`](#requestedlocales)** | Set the the list of requested locales for the application in order of preference.
111 | **[`SanitizeOnShutdown` (All)](#sanitizeonshutdown-all)** | Clear all data on shutdown.
112 | **[`SanitizeOnShutdown` (Selective)](#sanitizeonshutdown-selective)** | Clear data on shutdown.
113 | **[`SearchBar`](#searchbar)** | Set whether or not search bar is displayed.
114 | **[`SearchEngines`](#searchengines-this-policy-is-only-available-on-the-esr)** |
115 | **[`SearchEngines -> Add`](#searchengines--add)** | Add new search engines.
116 | **[`SearchEngines -> Default`](#searchengines--default)** | Set the default search engine.
117 | **[`SearchEngines -> PreventInstalls`](#searchengines--preventinstalls)** | Prevent installing search engines from webpages.
118 | **[`SearchEngines -> Remove`](#searchengines--remove)** | Hide built-in search engines.
119 | **[`SearchSuggestEnabled`](#searchsuggestenabled)** | Enable search suggestions.
120 | **[`SecurityDevices`](#securitydevices)** | Install PKCS #11 modules.
121 | **[`ShowHomeButton`](#showhomebutton)** | Show the home button on the toolbar.
122 | **[`SSLVersionMax`](#sslversionmax)** | Set and lock the maximum version of TLS.
123 | **[`SSLVersionMin`](#sslversionmin)** | Set and lock the minimum version of TLS.
124 | **[`StartDownloadsInTempDirectory`](#startdownloadsintempdirectory)** | Force downloads to start off in a local, temporary location rather than the default download directory.
125 | **[`SupportMenu`](#supportmenu)** | Add a menuitem to the help menu for specifying support information.
126 | **[`UserMessaging`](#usermessaging)** | Don't show certain messages to the user.
127 | **[`UseSystemPrintDialog`](#usesystemprintdialog)** | Print using the system print dialog instead of print preview.
128 | **[`WebsiteFilter`](#websitefilter)** | Block websites from being visited.
129 | **[`WindowsSSO`](#windowssso)** | Allow Windows single sign-on for Microsoft, work, and school accounts.
130
131 ### 3rdparty
132
133 Allow WebExtensions to configure policy. For more information, see [Adding policy support to your extension](https://extensionworkshop.com/documentation/enterprise/adding-policy-support-to-your-extension/).
134
135 For GPO and Intune, the extension developer should provide an ADMX file.
136
137 **Compatibility:** Firefox 68\
138 **CCK2 Equivalent:** N/A\
139 **Preferences Affected:** N/A
140
141 #### macOS
142 ```
143 <dict>
144 <key>3rdparty</key>
145 <dict>
146 <key>Extensions</key>
147 <dict>
148 <key>uBlock0@raymondhill.net</key>
149 <dict>
150 <key>adminSettings</key>
151 <dict>
152 <key>selectedFilterLists</key>
153 <array>
154 <string>ublock-privacy</string>
155 <string>ublock-badware</string>
156 <string>ublock-filters</string>
157 <string>user-filters</string>
158 </array>
159 </dict>
160 </dict>
161 </dict>
162 </dict>
163 </dict>
164 ```
165 #### policies.json
166 ```
167 {
168 "policies": {
169 "3rdparty": {
170 "Extensions": {
171 "uBlock0@raymondhill.net": {
172 "adminSettings": {
173 "selectedFilterLists": [
174 "ublock-privacy",
175 "ublock-badware",
176 "ublock-filters",
177 "user-filters"
178 ]
179 }
180 }
181 }
182 }
183 }
184 }
185 ```
186
187 ### AllowedDomainsForApps
188
189 Define domains allowed to access Google Workspace.
190
191 This policy is based on the [Chrome policy](https://chromeenterprise.google/policies/#AllowedDomainsForApps) of the same name.
192
193 If this policy is enabled, users can only access Google Workspace using accounts from the specified domains. If you want to allow Gmail, you can add ```consumer_accounts``` to the list.
194
195 **Compatibility:** Firefox 89, Firefox ESR 78.11\
196 **CCK2 Equivalent:** N/A\
197 **Preferences Affected:** N/A
198
199 #### Windows (GPO)
200 ```
201 Software\Policies\Mozilla\Firefox\AllowedDomainsForApps = "managedfirefox.com,example.com"
202 ```
203 #### Windows (Intune)
204 OMA-URI:
205 ```
206 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AllowedDomainsForApps
207 ```
208 Value (string):
209 ```
210 <enabled/>
211 <data id="AllowedDomainsForApps" value="managedfirefox.com,example.com"/>
212 ```
213 #### macOS
214 ```
215 <dict>
216 <key>AllowedDomainsForApps</key>
217 <string>managedfirefox.com,example.com</string>
218 </dict>
219 ```
220 #### policies.json
221 ```
222 {
223 "policies": {
224 "AllowedDomainsForApps": "managedfirefox.com,example.com"
225 }
226 }
227 ```
228 ### AppAutoUpdate
229
230 Enable or disable **automatic** application update.
231
232 If set to true, application updates are installed without user approval within Firefox. The operating system might still require approval.
233
234 If set to false, application updates are downloaded but the user can choose when to install the update.
235
236 If you have disabled updates via `DisableAppUpdate`, this policy has no effect.
237
238 **Compatibility:** Firefox 75, Firefox ESR 68.7\
239 **CCK2 Equivalent:** N/A\
240 **Preferences Affected:** `app.update.auto`
241
242 #### Windows (GPO)
243 ```
244 Software\Policies\Mozilla\Firefox\AppAutoUpdate = 0x1 | 0x0
245 ```
246 #### Windows (Intune)
247 OMA-URI:
248 ```
249 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AppAutoUpdate
250 ```
251 Value (string):
252 ```
253 <enabled/> or <disabled/>
254 ```
255 #### macOS
256 ```
257 <dict>
258 <key>AppAutoUpdate</key>
259 <true/> | <false/>
260 </dict>
261 ```
262 #### policies.json
263 ```
264 {
265 "policies": {
266 "AppAutoUpdate": true | false
267 }
268 }
269 ```
270 ### AppUpdatePin
271
272 Prevent Firefox from being updated beyond the specified version.
273
274 You can specify the any version as ```xx.``` and Firefox will be updated with all minor versions, but will not be updated beyond the major version.
275
276 You can also specify the version as ```xx.xx``` and Firefox will be updated with all patch versions, but will not be updated beyond the minor version.
277
278 You should specify a version that exists or is guaranteed to exist. If you specify a version that doesn't end up existing, Firefox will update beyond that version.
279
280 **Compatibility:** Firefox 102,\
281 **CCK2 Equivalent:** N/A\
282 **Preferences Affected:** N/A
283
284 #### Windows (GPO)
285 ```
286 Software\Policies\Mozilla\Firefox\AppUpdatePin = "106."
287 ```
288 #### Windows (Intune)
289 OMA-URI:
290 ```
291 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AppUpdatePin
292 ```
293 Value (string):
294 ```
295 <enabled/>
296 <data id="AppUpdatePin" value="106."/>
297 ```
298 #### macOS
299 ```
300 <dict>
301 <key>AppUpdatePin</key>
302 <string>106.</string>
303 </dict>
304 ```
305 #### policies.json
306 ```
307 {
308 "policies": {
309 "AppUpdatePin": "106."
310 }
311 }
312 ```
313 ### AppUpdateURL
314
315 Change the URL for application update if you are providing Firefox updates from a custom update server.
316
317 **Compatibility:** Firefox 62, Firefox ESR 60.2\
318 **CCK2 Equivalent:** N/A\
319 **Preferences Affected:** `app.update.url`
320
321 #### Windows (GPO)
322 ```
323 Software\Policies\Mozilla\Firefox\AppUpdateURL = "https://yoursite.com"
324 ```
325 #### Windows (Intune)
326 OMA-URI:
327 ```
328 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AppUpdateURL
329 ```
330 Value (string):
331 ```
332 <enabled/>
333 <data id="AppUpdateURL" value="https://yoursite.com"/>
334 ```
335 #### macOS
336 ```
337 <dict>
338 <key>AppUpdateURL</key>
339 <string>https://yoursite.com</string>
340 </dict>
341 ```
342 #### policies.json
343 ```
344 {
345 "policies": {
346 "AppUpdateURL": "https://yoursite.com"
347 }
348 }
349 ```
350 ### Authentication
351
352 Configure sites that support integrated authentication.
353
354 See [Integrated authentication](https://htmlpreview.github.io/?https://github.com/mdn/archived-content/blob/main/files/en-us/mozilla/integrated_authentication/raw.html) for more information.
355
356 `PrivateBrowsing` enables integrated authentication in private browsing.
357
358 **Compatibility:** Firefox 60, Firefox ESR 60 (AllowNonFQDN added in 62/60.2, AllowProxies added in 70/68.2, Locked added in 71/68.3, PrivateBrowsing added in 77/68.9)\
359 **CCK2 Equivalent:** N/A\
360 **Preferences Affected:** `network.negotiate-auth.trusted-uris`,`network.negotiate-auth.delegation-uris`,`network.automatic-ntlm-auth.trusted-uris`,`network.automatic-ntlm-auth.allow-non-fqdn`,`network.negotiate-auth.allow-non-fqdn`,`network.automatic-ntlm-auth.allow-proxies`,`network.negotiate-auth.allow-proxies`,`network.auth.private-browsing-sso`
361
362 #### Windows (GPO)
363 ```
364 Software\Policies\Mozilla\Firefox\Authentication\SPNEGO\1 = "mydomain.com"
365 Software\Policies\Mozilla\Firefox\Authentication\SPNEGO\2 = "https://myotherdomain.com"
366 Software\Policies\Mozilla\Firefox\Authentication\Delegated\1 = "mydomain.com"
367 Software\Policies\Mozilla\Firefox\Authentication\Delegated\2 = "https://myotherdomain.com"
368 Software\Policies\Mozilla\Firefox\Authentication\NTLM\1 = "mydomain.com"
369 Software\Policies\Mozilla\Firefox\Authentication\NTLM\2 = "https://myotherdomain.com"
370 Software\Policies\Mozilla\Firefox\Authentication\AllowNonFQDN\SPNEGO = 0x1 | 0x0
371 Software\Policies\Mozilla\Firefox\Authentication\AllowNonFQDN\NTLM = 0x1 | 0x0
372 Software\Policies\Mozilla\Firefox\Authentication\AllowProxies\SPNEGO = 0x1 | 0x0
373 Software\Policies\Mozilla\Firefox\Authentication\AllowProxies\NTLM = 0x1 | 0x0
374 Software\Policies\Mozilla\Firefox\Authentication\Locked = 0x1 | 0x0
375 Software\Policies\Mozilla\Firefox\Authentication\PrivateBrowsing = 0x1 | 0x0
376 ```
377 #### Windows (Intune)
378 OMA-URI:
379 ```
380 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_SPNEGO
381 ```
382 Value (string):
383 ```
384 <enabled/>
385 <data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
386 ```
387 OMA-URI:
388 ```
389 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_Delegated
390 ```
391 Value (string):
392 ```
393 <enabled/>
394 <data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
395 ```
396 OMA-URI:
397 ```
398 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_NTLM
399 ```
400 Value (string):
401 ```
402 <enabled/>
403 <data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
404 ```
405 OMA-URI:
406 ```
407 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_AllowNonFQDN
408 ```
409 Value (string):
410 ```
411 <enabled/>
412 <data id="Authentication_AllowNonFQDN_NTLM" value="true | false"/>
413 <data id="Authentication_AllowNonFQDN_SPNEGO" value="true | false"/>
414 ```
415 OMA-URI:
416 ```
417 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_Locked
418 ```
419 Value (string):
420 ```
421 <enabled/> or <disabled/>
422 ```
423 OMA-URI:
424 ```
425 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_PrivateBrowsing
426 ```
427 Value (string):
428 ```
429 <enabled/> or <disabled/>
430 ```
431 #### macOS
432 ```
433 <dict>
434 <key>Authentication</key>
435 <dict>
436 <key>SPNEGO</key>
437 <array>
438 <string>mydomain.com</string>
439 <string>https://myotherdomain.com</string>
440 </array>
441 <key>Delegated</key>
442 <array>
443 <string>mydomain.com</string>
444 <string>https://myotherdomain.com</string>
445 </array>
446 <key>NTLM</key>
447 <array>
448 <string>mydomain.com</string>
449 <string>https://myotherdomain.com</string>
450 </array>
451 <key>AllowNonFQDN</key>
452 <dict>
453 <key>SPNEGO</key>
454 <true/> | <false/>
455 <key>NTLM</key>
456 <true/> | <false/>
457 </dict>
458 <key>AllowProxies</key>
459 <dict>
460 <key>SPNEGO</key>
461 <true/> | <false/>
462 <key>NTLM</key>
463 <true/> | <false/>
464 </dict>
465 <key>Locked</key>
466 <true/> | <false/>
467 <key>PrivateBrowsing</key>
468 <true/> | <false/>
469 </dict>
470 </dict>
471 ```
472 #### policies.json
473 ```
474 {
475 "policies": {
476 "Authentication": {
477 "SPNEGO": ["mydomain.com", "https://myotherdomain.com"],
478 "Delegated": ["mydomain.com", "https://myotherdomain.com"],
479 "NTLM": ["mydomain.com", "https://myotherdomain.com"],
480 "AllowNonFQDN": {
481 "SPNEGO": true | false,
482 "NTLM": true | false
483 },
484 "AllowProxies": {
485 "SPNEGO": true | false,
486 "NTLM": true | false
487 },
488 "Locked": true | false,
489 "PrivateBrowsing": true | false
490 }
491 }
492 }
493 ```
494 ### AutoLaunchProtocolsFromOrigins
495 Define a list of external protocols that can be used from listed origins without prompting the user. The origin is the scheme plus the hostname.
496
497 The syntax of this policy is exactly the same as the [Chrome AutoLaunchProtocolsFromOrigins policy](https://cloud.google.com/docs/chrome-enterprise/policies/?policy=AutoLaunchProtocolsFromOrigins) except that you can only use valid origins (not just hostnames). This also means that you cannot specify an asterisk for all origins.
498
499 The schema is:
500 ```
501 {
502 "items": {
503 "properties": {
504 "allowed_origins": {
505 "items": {
506 "type": "string"
507 },
508 "type": "array"
509 },
510 "protocol": {
511 "type": "string"
512 }
513 },
514 "required": [
515 "protocol",
516 "allowed_origins"
517 ],
518 "type": "object"
519 },
520 "type": "array"
521 }
522 ```
523 **Compatibility:** Firefox 90, Firefox ESR 78.12\
524 **CCK2 Equivalent:** N/A\
525 **Preferences Affected:** N/A
526
527 #### Windows (GPO)
528 Software\Policies\Mozilla\Firefox\AutoLaunchProtocolsFromOrigins (REG_MULTI_SZ) =
529 ```
530 [
531 {
532 "protocol": "zoommtg",
533 "allowed_origins": [
534 "https://somesite.zoom.us"
535 ]
536 }
537 ]
538 ```
539 #### Windows (Intune)
540 OMA-URI:
541 ```
542 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AutoLaunchProtocolsFromOrigins
543 ```
544 Value (string):
545 ```
546 <enabled/>
547 <data id="JSON" value='
548 [
549 {
550 "protocol": "zoommtg",
551 "allowed_origins": [
552 "https://somesite.zoom.us"
553 ]
554 }
555 ]'/>
556 ```
557 #### macOS
558 ```
559 <dict>
560 <key>AutoLaunchProtocolsFromOrigins</key>
561 <array>
562 <dict>
563 <key>protocol</key>
564 <string>zoommtg</string>
565 <key>allowed_origins</key>
566 <array>
567 <string>https://somesite.zoom.us</string>
568 </array>
569 </dict>
570 </array>
571 </dict>
572 ```
573 #### policies.json
574 ```
575 {
576 "policies": {
577 "AutoLaunchProtocolsFromOrigins": [{
578 "protocol": "zoommtg",
579 "allowed_origins": [
580 "https://somesite.zoom.us"
581 ]
582 }]
583 }
584 }
585 ```
586 ### BackgroundAppUpdate
587
588 Enable or disable **automatic** application update **in the background**, when the application is not running.
589
590 If set to true, application updates may be installed (without user approval) in the background, even when the application is not running. The operating system might still require approval.
591
592 If set to false, the application will not try to install updates when the application is not running.
593
594 If you have disabled updates via `DisableAppUpdate` or disabled automatic updates via `AppAutoUpdate`, this policy has no effect.
595
596 **Compatibility:** Firefox 90 (Windows only)\
597 **CCK2 Equivalent:** N/A\
598 **Preferences Affected:** `app.update.background.enabled`
599
600 #### Windows (GPO)
601 ```
602 Software\Policies\Mozilla\Firefox\BackgroundAppUpdate = 0x1 | 0x0
603 ```
604 #### Windows (Intune)
605 OMA-URI:
606 ```
607 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BackgroundAppUpdate
608 ```
609 Value (string):
610 ```
611 <enabled/> or <disabled/>
612 ```
613 #### macOS
614 ```
615 <dict>
616 <key>BackgroundAppUpdate</key>
617 <true/> | <false/>
618 </dict>
619 ```
620 #### policies.json
621 ```
622 {
623 "policies": {
624 "BackgroundAppUpdate": true | false
625 }
626 }
627 ```
628 ### BlockAboutAddons
629
630 Block access to the Add-ons Manager (about:addons).
631
632 **Compatibility:** Firefox 60, Firefox ESR 60\
633 **CCK2 Equivalent:** `disableAddonsManager`\
634 **Preferences Affected:** N/A
635
636 #### Windows (GPO)
637 ```
638 Software\Policies\Mozilla\Firefox\BlockAboutAddons = 0x1 | 0x0
639 ```
640 #### Windows (Intune)
641 OMA-URI:
642 ```
643 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutAddons
644 ```
645 Value (string):
646 ```
647 <enabled/> or <disabled/>
648 ```
649 #### macOS
650 ```
651 <dict>
652 <key>BlockAboutAddons</key>
653 <true/> | <false/>
654 </dict>
655 ```
656 #### policies.json
657 ```
658 {
659 "policies": {
660 "BlockAboutAddons": true | false
661 }
662 }
663 ```
664 ### BlockAboutConfig
665
666 Block access to about:config.
667
668 **Compatibility:** Firefox 60, Firefox ESR 60\
669 **CCK2 Equivalent:** `disableAboutConfig`\
670 **Preferences Affected:** N/A
671
672 #### Windows (GPO)
673 ```
674 Software\Policies\Mozilla\Firefox\BlockAboutConfig = 0x1 | 0x0
675 ```
676 #### Windows (Intune)
677 OMA-URI:
678 ```
679 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutConfig
680 ```
681 Value (string):
682 ```
683 <enabled/> or <disabled/>
684 ```
685 #### macOS
686 ```
687 <dict>
688 <key>BlockAboutConfig</key>
689 <true/> | <false/>
690 </dict>
691 ```
692 #### policies.json
693 ```
694 {
695 "policies": {
696 "BlockAboutConfig": true | false
697 }
698 }
699 ```
700 ### BlockAboutProfiles
701
702 Block access to About Profiles (about:profiles).
703
704 **Compatibility:** Firefox 60, Firefox ESR 60\
705 **CCK2 Equivalent:** `disableAboutProfiles`\
706 **Preferences Affected:** N/A
707
708 #### Windows (GPO)
709 ```
710 Software\Policies\Mozilla\Firefox\BlockAboutProfiles = 0x1 | 0x0
711 ```
712 #### Windows (Intune)
713 OMA-URI:
714 ```
715 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutProfiles
716 ```
717 Value (string):
718 ```
719 <enabled/> or <disabled/>
720 ```
721 #### macOS
722 ```
723 <dict>
724 <key>BlockAboutProfiles</key>
725 <true/> | <false/>
726 </dict>
727 ```
728 #### policies.json
729 ```
730 {
731 "policies": {
732 "BlockAboutProfiles": true | false
733 }
734 }
735 ```
736 ### BlockAboutSupport
737
738 Block access to Troubleshooting Information (about:support).
739
740 **Compatibility:** Firefox 60, Firefox ESR 60\
741 **CCK2 Equivalent:** `disableAboutSupport`\
742 **Preferences Affected:** N/A
743
744 #### Windows (GPO)
745 ```
746 Software\Policies\Mozilla\Firefox\BlockAboutSupport = 0x1 | 0x0
747 ```
748 #### Windows (Intune)
749 OMA-URI:
750 ```
751 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutSupport
752 ```
753 Value (string):
754 ```
755 <enabled/> or <disabled/>
756 ```
757 #### macOS
758 ```
759 <dict>
760 <key>BlockAboutSupport</key>
761 <true/> | <false/>
762 </dict>
763 ```
764 #### policies.json
765 ```
766 {
767 "policies": {
768 "BlockAboutSupport": true | false
769 }
770 }
771 ```
772 ### Bookmarks
773
774 Note: [`ManagedBookmarks`](#managedbookmarks) is the new recommended way to add bookmarks. This policy will continue to be supported.
775
776 Add bookmarks in either the bookmarks toolbar or menu. Only `Title` and `URL` are required. If `Placement` is not specified, the bookmark will be placed on the toolbar. If `Folder` is specified, it is automatically created and bookmarks with the same folder name are grouped together.
777
778 If you want to clear all bookmarks set with this policy, you can set the value to an empty array (```[]```). This can be on Windows via the new Bookmarks (JSON) policy available with GPO and Intune.
779
780 **Compatibility:** Firefox 60, Firefox ESR 60\
781 **CCK2 Equivalent:** `bookmarks.toolbar`,`bookmarks.menu`\
782 **Preferences Affected:** N/A
783
784 #### Windows (GPO)
785 ```
786 Software\Policies\Mozilla\Firefox\Bookmarks\1\Title = "Example"
787 Software\Policies\Mozilla\Firefox\Bookmarks\1\URL = "https://example.com"
788 Software\Policies\Mozilla\Firefox\Bookmarks\1\Favicon = "https://example.com/favicon.ico"
789 Software\Policies\Mozilla\Firefox\Bookmarks\1\Placement = "toolbar" | "menu"
790 Software\Policies\Mozilla\Firefox\Bookmarks\1\Folder = "FolderName"
791
792 Software\Policies\Mozilla\Firefox\Bookmarks (REG_MULTI_SZ) =
793 ```
794 []
795 ```
796
797 ```
798 #### Windows (Intune)
799 OMA-URI:
800 ```
801 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Bookmarks/Bookmark01
802 ```
803 Value (string):
804 ```
805 <enabled/>
806 <data id="BookmarkTitle" value="Example"/>
807 <data id="BookmarkURL" value="https://example.com"/>
808 <data id="BookmarkFavicon" value="https://example.com/favicon.ico"/>
809 <data id="BookmarkPlacement" value="toolbar | menu"/>
810 <data id="BookmarkFolder" value="FolderName"/>
811 ```
812 OMA-URI:
813 ```
814 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Bookmarks
815 ```
816 Value (string):
817 ```
818 <enabled/>
819 <data id="JSON" value='[]'/>
820 ```
821 #### macOS
822 ```
823 <dict>
824 <key>Bookmarks</key>
825 <array>
826 <dict>
827 <key>Title</key>
828 <string>Example</string>
829 <key>URL</key>
830 <string>https://example.com</string>
831 <key>Favicon</key>
832 <string>https://example.com/favicon.ico</string>
833 <key>Placement</key>
834 <string>toolbar | menu</string>
835 <key>Folder</key>
836 <string>FolderName</string>
837 </dict>
838 </array>
839 </dict>
840 ```
841 #### policies.json
842 ```
843 {
844 "policies": {
845 "Bookmarks": [
846 {
847 "Title": "Example",
848 "URL": "https://example.com",
849 "Favicon": "https://example.com/favicon.ico",
850 "Placement": "toolbar" | "menu",
851 "Folder": "FolderName"
852 }
853 ]
854 }
855 }
856 ```
857 ### CaptivePortal
858 Enable or disable the detection of captive portals.
859
860 **Compatibility:** Firefox 67, Firefox ESR 60.7\
861 **CCK2 Equivalent:** N/A\
862 **Preferences Affected:** `network.captive-portal-service.enabled`
863
864 #### Windows (GPO)
865 ```
866 Software\Policies\Mozilla\Firefox\CaptivePortal = 0x1 | 0x0
867 ```
868 #### Windows (Intune)
869 OMA-URI:
870 ```
871 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/CaptivePortal
872 ```
873 Value (string):
874 ```
875 <enabled/> or <disabled/>
876 ```
877 #### macOS
878 ```
879 <dict>
880 <key>CaptivePortal</key>
881 <true/> | <false/>
882 </dict>
883 ```
884 #### policies.json
885 ```
886 {
887 "policies": {
888 "CaptivePortal": true | false
889 }
890 }
891 ```
892 ### Certificates
893
894 ### Certificates | ImportEnterpriseRoots
895
896 Trust certificates that have been added to the operating system certificate store by a user or administrator.
897
898 Note: This policy only works on Windows and macOS. For Linux discussion, see [bug 1600509](https://bugzilla.mozilla.org/show_bug.cgi?id=1600509).
899
900 See https://support.mozilla.org/kb/setting-certificate-authorities-firefox for more detail.
901
902 **Compatibility:** Firefox 60, Firefox ESR 60 (macOS support in Firefox 63, Firefox ESR 68)\
903 **CCK2 Equivalent:** N/A\
904 **Preferences Affected:** `security.enterprise_roots.enabled`
905
906 #### Windows (GPO)
907 ```
908 Software\Policies\Mozilla\Firefox\Certificates\ImportEnterpriseRoots = 0x1 | 0x0
909 ```
910 #### Windows (Intune)
911 OMA-URI:
912 ```
913 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Certificates/Certificates_ImportEnterpriseRoots
914 ```
915 Value (string):
916 ```
917 <enabled/> or <disabled/>
918 ```
919 #### macOS
920 ```
921 <dict>
922 <key>Certificates</key>
923 <dict>
924 <key>ImportEnterpriseRoots</key>
925 <true/> | <false/>
926 </dict>
927 </dict>
928 ```
929 #### policies.json
930 ```
931 {
932 "policies": {
933 "Certificates": {
934 "ImportEnterpriseRoots": true | false
935 }
936 }
937 }
938 ```
939 ### Certificates | Install
940
941 Install certificates into the Firefox certificate store. If only a filename is specified, Firefox searches for the file in the following locations:
942
943 - Windows
944 - %USERPROFILE%\AppData\Local\Mozilla\Certificates
945 - %USERPROFILE%\AppData\Roaming\Mozilla\Certificates
946 - macOS
947 - /Library/Application Support/Mozilla/Certificates
948 - ~/Library/Application Support/Mozilla/Certificates
949 - Linux
950 - /usr/lib/mozilla/certificates
951 - /usr/lib64/mozilla/certificates
952 - ~/.mozilla/certificates
953
954 Starting with Firefox 65, Firefox 60.5 ESR, a fully qualified path can be used, including UNC paths. You should use the native path style for your operating system. We do not support using %USERPROFILE% or other environment variables on Windows.
955
956 If you are specifying the path in the policies.json file on Windows, you need to escape your backslashes (`\\`) which means that for UNC paths, you need to escape both (`\\\\`). If you use group policy, you only need one backslash.
957
958 Certificates are installed using the trust string `CT,CT,`.
959
960 Binary (DER) and ASCII (PEM) certificates are both supported.
961
962 **Compatibility:** Firefox 64, Firefox ESR 64\
963 **CCK2 Equivalent:** `certs.ca`\
964 **Preferences Affected:** N/A
965
966 #### Windows (GPO)
967 ```
968 Software\Policies\Mozilla\Firefox\Certificates\Install\1 = "cert1.der"
969 Software\Policies\Mozilla\Firefox\Certificates\Install\2 = "C:\Users\username\cert2.pem"
970 ```
971 #### Windows (Intune)
972 OMA-URI:
973 ```
974 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Certificates/Certificates_Install
975 ```
976 Value (string):
977 ```
978 <enabled/>
979 <data id="Certificates_Install" value="1&#xF000;cert1.der&#xF000;2&#xF000;C:\Users\username\cert2.pem"/>
980 ```
981 #### macOS
982 ```
983 <dict>
984 <key>Certificates</key>
985 <dict>
986 <key>Install</key>
987 <array>
988 <string>cert1.der</string>
989 <string>/Users/username/cert2.pem</string>
990 </array>
991 </dict>
992 </dict>
993 ```
994 #### policies.json
995 ```
996 {
997 "policies": {
998 "Certificates": {
999 "Install": ["cert1.der", "/home/username/cert2.pem"]
1000 }
1001 }
1002 }
1003 ```
1004 ### Containers
1005 Set policies related to [containers](https://addons.mozilla.org/firefox/addon/multi-account-containers/).
1006
1007 Currently you can set the initial set of containers.
1008
1009 For each container, you can specify the name, icon, and color.
1010
1011 | Name | Description |
1012 | --- | --- |
1013 | `name`| Name of container
1014 | `icon` | Can be `fingerprint`, `briefcase`, `dollar`, `cart`, `vacation`, `gift`, `food`, `fruit`, `pet`, `tree`, `chill`, `circle`, `fence`
1015 | `color` | Can be `blue`, `turquoise`, `green`, `yellow`, `orange`, `red`, `pink`, `purple`, `toolbar`
1016
1017 **Compatibility:** Firefox 113\
1018 **CCK2 Equivalent:** N/A\
1019 **Preferences Affected:** N/A
1020
1021 #### Windows (GPO)
1022 Software\Policies\Mozilla\Firefox\Containers (REG_MULTI_SZ) =
1023 ```
1024 {
1025 "Default": [
1026 {
1027 "name": "My container",
1028 "icon": "pet",
1029 "color": "turquoise"
1030 }
1031 ]
1032 }
1033 ```
1034 #### Windows (Intune)
1035 OMA-URI:
1036 ```
1037 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Containers
1038 ```
1039 Value (string):
1040 ```
1041 <enabled/>
1042 <data id="JSON" value='
1043 {
1044 "Default": [
1045 {
1046 "name": "My container",
1047 "icon": "pet",
1048 "color": "turquoise"
1049 }
1050 ]
1051 }
1052 '/>
1053 ```
1054 #### macOS
1055 ```
1056 <dict>
1057 <key>Default</key>
1058 <dict>
1059 <key>Containers</key>
1060 <array>
1061 <dict>
1062 <key>name</key>
1063 <string>My container</string>
1064 <key>icon</key>
1065 <string>pet</string>
1066 <key>color</key>
1067 <string>turquoise</string>
1068 </dict>
1069 </array>
1070 </dict>
1071 </dict>
1072 ```
1073 #### policies.json
1074 ```
1075 {
1076 "policies": {
1077 "Containers": {
1078 "Default": [
1079 {
1080 "name": "My container",
1081 "icon": "pet",
1082 "color": "turquoise"
1083 }
1084 ]
1085 }
1086 }
1087 }
1088 ```
1089 ### Cookies
1090 Configure cookie preferences.
1091
1092 `Allow` is a list of origins (not domains) where cookies are always allowed. You must include http or https.
1093
1094 `AllowSession` is a list of origins (not domains) where cookies are only allowed for the current session. You must include http or https.
1095
1096 `Block` is a list of origins (not domains) where cookies are always blocked. You must include http or https.
1097
1098 `Behavior` sets the default behavior for cookies based on the values below.
1099
1100 `BehaviorPrivateBrowsing` sets the default behavior for cookies in private browsing based on the values below.
1101
1102 | Value | Description
1103 | --- | ---
1104 | accept | Accept all cookies
1105 | reject-foreign | Reject third party cookies
1106 | reject | Reject all cookies
1107 | limit-foreign | Reject third party cookies for sites you haven't visited
1108 | reject-tracker | Reject cookies for known trackers (default)
1109 | reject-tracker-and-partition-foreign | Reject cookies for known trackers and partition third-party cookies (Total Cookie Protection) (default for private browsing)
1110
1111 `Default` (Deprecated) determines whether cookies are accepted at all.
1112
1113 `AcceptThirdParty` (Deprecated) determines how third-party cookies are handled.
1114
1115 `ExpireAtSessionEnd` determines when cookies expire.
1116
1117 `RejectTracker` (Deprecated) only rejects cookies for trackers.
1118
1119 `Locked` prevents the user from changing cookie preferences.
1120
1121 **Compatibility:** Firefox 60, Firefox ESR 60 (RejectTracker added in Firefox 63, AllowSession added in Firefox 79/78.1, Behavior added in Firefox 95/91.4)\
1122 **CCK2 Equivalent:** N/A\
1123 **Preferences Affected:** `network.cookie.cookieBehavior`, `network.cookie.cookieBehavior.pbmode`, `network.cookie.lifetimePolicy`
1124
1125 #### Windows (GPO)
1126 ```
1127 Software\Policies\Mozilla\Firefox\Cookies\Allow\1 = "https://example.com"
1128 Software\Policies\Mozilla\Firefox\Cookies\AllowSession\1 = "https://example.edu"
1129 Software\Policies\Mozilla\Firefox\Cookies\Block\1 = "https://example.org"
1130 Software\Policies\Mozilla\Firefox\Cookies\Default = 0x1 | 0x0
1131 Software\Policies\Mozilla\Firefox\Cookies\AcceptThirdParty = "always" | "never" | "from-visited"
1132 Software\Policies\Mozilla\Firefox\Cookies\ExpireAtSessionEnd = 0x1 | 0x0
1133 Software\Policies\Mozilla\Firefox\Cookies\RejectTracker = 0x1 | 0x0
1134 Software\Policies\Mozilla\Firefox\Cookies\Behavior = "accept" | "reject-foreign" | "reject" | "limit-foreign" | "reject-tracker" | "reject-tracker-and-partition-foreign"
1135 Software\Policies\Mozilla\Firefox\Cookies\BehaviorPrivateBrowsing = "accept" | "reject-foreign" | "reject" | "limit-foreign" | "reject-tracker" | "reject-tracker-and-partition-foreign"
1136 Software\Policies\Mozilla\Firefox\Cookies\Locked = 0x1 | 0x0
1137 ```
1138 #### Windows (Intune)
1139 OMA-URI:
1140 ```
1141 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Allow
1142 ```
1143 Value (string):
1144 ```
1145 <enabled/>
1146 <data id="Permissions" value="1&#xF000;https://example.com"/>
1147 ```
1148 OMA-URI:
1149 ```
1150 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_AllowSession
1151 ```
1152 Value (string):
1153 ```
1154 <enabled/>
1155 <data id="Permissions" value="1&#xF000;https://example.edu"/>
1156 ```
1157 OMA-URI:
1158 ```
1159 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Block
1160 ```
1161 Value (string):
1162 ```
1163 <enabled/>
1164 <data id="Permissions" value="1&#xF000;https://example.org"/>
1165 ```
1166 OMA-URI:
1167 ```
1168 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Default
1169 ```
1170 Value (string):
1171 ```
1172 <enabled/> or <disabled/>
1173 ```
1174 OMA-URI:
1175 ```
1176 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_AcceptThirdParty
1177 ```
1178 Value (string):
1179 ```
1180 <enabled/>
1181 <data id="Cookies_AcceptThirdParty" value="always | never | from-visited"/>
1182 ```
1183 OMA-URI:
1184 ```
1185 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_ExpireAtSessionEnd
1186 ```
1187 Value (string):
1188 ```
1189 <enabled/> or <disabled/>
1190 ```
1191 OMA-URI:
1192 ```
1193 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_RejectTracker
1194 ```
1195 Value (string):
1196 ```
1197 <enabled/> or <disabled/>
1198 ```
1199 OMA-URI:
1200 ```
1201 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Locked
1202 ```
1203 Value (string):
1204 ```
1205 <enabled/> or <disabled/>
1206 ```
1207 OMA-URI:
1208 ```
1209 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Behavior
1210 ```
1211 Value (string):
1212 ```
1213 <enabled/>
1214 <data id="Cookies_Behavior" value="accept | reject-foreign | reject | limit-foreign | reject-tracker | reject-tracker-and-partition-foreign"/>
1215 ```
1216 OMA-URI:
1217 ```
1218 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_BehaviorPrivateBrowsing
1219 ```
1220 Value (string):
1221 ```
1222 <enabled/>
1223 <data id="Cookies_BehaviorPrivateBrowsing" value="accept | reject-foreign | reject | limit-foreign | reject-tracker | reject-tracker-and-partition-foreign"/>
1224 ```
1225 #### macOS
1226 ```
1227 <dict>
1228 <key>Cookies</key>
1229 <dict>
1230 <key>Allow</key>
1231 <array>
1232 <string>http://example.com</string>
1233 </array>
1234 <key>AllowSession</key>
1235 <array>
1236 <string>http://example.edu</string>
1237 </array>
1238 <key>Block</key>
1239 <array>
1240 <string>http://example.org</string>
1241 </array>
1242 <key>Default</key>
1243 <true/> | <false/>
1244 <key>AcceptThirdParty</key>
1245 <string>always | never | from-visited</string>
1246 <key>ExpireAtSessionEnd</key>
1247 <true/> | <false/>
1248 <key>RejectTracker</key>
1249 <true/> | <false/>
1250 <key>Locked</key>
1251 <true/> | <false/>
1252 <key>Behavior</key>
1253 <string>accept | reject-foreign | reject | limit-foreign | reject-tracker | reject-tracker-and-partition-foreign</string>
1254 <key>BehaviorPrivateBrowsing</key>
1255 <string>accept | reject-foreign | reject | limit-foreign | reject-tracker | reject-tracker-and-partition-foreign</string>
1256 </dict>
1257 </dict>
1258 ```
1259 #### policies.json
1260 ```
1261 {
1262 "policies": {
1263 "Cookies": {
1264 "Allow": ["http://example.org/"],
1265 "AllowSession": ["http://example.edu/"],
1266 "Block": ["http://example.edu/"],
1267 "Default": true | false,
1268 "AcceptThirdParty": "always" | "never" | "from-visited",
1269 "ExpireAtSessionEnd": true | false,
1270 "RejectTracker": true | false,
1271 "Locked": true | false,
1272 "Behavior": "accept" | "reject-foreign" | "reject" | "limit-foreign" | "reject-tracker" | "reject-tracker-and-partition-foreign",
1273 "BehaviorPrivateBrowsing": "accept" | "reject-foreign" | "reject" | "limit-foreign" | "reject-tracker" | "reject-tracker-and-partition-foreign",
1274 }
1275 }
1276 }
1277 ```
1278 ### DefaultDownloadDirectory
1279 Set the default download directory.
1280
1281 You can use ${home} for the native home directory.
1282
1283 **Compatibility:** Firefox 68, Firefox ESR 68\
1284 **CCK2 Equivalent:** N/A\
1285 **Preferences Affected:** `browser.download.dir`, `browser.download.folderList`
1286
1287 #### Windows (GPO)
1288 ```
1289 Software\Policies\Mozilla\Firefox\DefaultDownloadDirectory = "${home}\Downloads"
1290 ```
1291 #### Windows (Intune)
1292 OMA-URI:
1293 ```
1294 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DefaultDownloadDirectory
1295 ```
1296 Value (string):
1297 ```
1298 <enabled/>
1299 <data id="Preferences_String" value="${home}\Downloads"/>
1300 ```
1301 #### macOS
1302 ```
1303 <dict>
1304 <key>DefaultDownloadDirectory</key>
1305 <string>${home}/Downloads</string>
1306 </dict>
1307 ```
1308 #### policies.json (macOS and Linux)
1309 ```
1310 {
1311 "policies": {
1312 "DefaultDownloadDirectory": "${home}/Downloads"
1313 }
1314 }
1315 ```
1316 #### policies.json (Windows)
1317 ```
1318 {
1319 "policies": {
1320 "DefaultDownloadDirectory": "${home}\\Downloads"
1321 }
1322 }
1323 ```
1324 ### DisableAppUpdate
1325 Turn off application updates within Firefox.
1326
1327 **Compatibility:** Firefox 60, Firefox ESR 60\
1328 **CCK2 Equivalent:** `disableFirefoxUpdates`\
1329 **Preferences Affected:** N/A
1330
1331 #### Windows (GPO)
1332 ```
1333 Software\Policies\Mozilla\Firefox\DisableAppUpdate = 0x1 | 0x0
1334 ```
1335 #### Windows (Intune)
1336 OMA-URI:
1337 ```
1338 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableAppUpdate
1339 ```
1340 Value (string):
1341 ```
1342 <enabled/> or <disabled/>
1343 ```
1344 #### macOS
1345 ```
1346 <dict>
1347 <key>DisableAppUpdate</key>
1348 <true/> | <false/>
1349 </dict>
1350 ```
1351 #### policies.json
1352 ```
1353 {
1354 "policies": {
1355 "DisableAppUpdate": true | false
1356 }
1357 }
1358 ```
1359 ### DisableBuiltinPDFViewer
1360 Disable the built in PDF viewer. PDF files are downloaded and sent externally.
1361
1362 **Compatibility:** Firefox 60, Firefox ESR 60\
1363 **CCK2 Equivalent:** `disablePDFjs`\
1364 **Preferences Affected:** `pdfjs.disabled`
1365
1366 #### Windows (GPO)
1367 ```
1368 Software\Policies\Mozilla\Firefox\DisableBuiltinPDFViewer = 0x1 | 0x0
1369 ```
1370 #### Windows (Intune)
1371 OMA-URI:
1372 ```
1373 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableBuiltinPDFViewer
1374 ```
1375 Value (string):
1376 ```
1377 <enabled/> or <disabled/>
1378 ```
1379 #### macOS
1380 ```
1381 <dict>
1382 <key>DisableBuiltinPDFViewer</key>
1383 <true/> | <false/>
1384 </dict>
1385 ```
1386 #### policies.json
1387 ```
1388 {
1389 "policies": {
1390 "DisableBuiltinPDFViewer": true | false
1391 }
1392 }
1393 ```
1394 ### DisabledCiphers
1395 Disable specific cryptographic ciphers, listed below.
1396
1397 ```
1398 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
1399 TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
1400 TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256
1401 TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
1402 TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
1403 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
1404 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
1405 TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA
1406 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
1407 TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA
1408 TLS_DHE_RSA_WITH_AES_128_CBC_SHA
1409 TLS_DHE_RSA_WITH_AES_256_CBC_SHA
1410 TLS_RSA_WITH_AES_128_GCM_SHA256
1411 TLS_RSA_WITH_AES_256_GCM_SHA384
1412 TLS_RSA_WITH_AES_128_CBC_SHA
1413 TLS_RSA_WITH_AES_256_CBC_SHA
1414 TLS_RSA_WITH_3DES_EDE_CBC_SHA
1415 ```
1416
1417 **Preferences Affected:** `security.ssl3.ecdhe_rsa_aes_128_gcm_sha256`, `security.ssl3.ecdhe_ecdsa_aes_128_gcm_sha256`, `security.ssl3.ecdhe_ecdsa_chacha20_poly1305_sha256`, `security.ssl3.ecdhe_rsa_chacha20_poly1305_sha256`, `security.ssl3.ecdhe_ecdsa_aes_256_gcm_sha384`, `security.ssl3.ecdhe_rsa_aes_256_gcm_sha384`, `security.ssl3.ecdhe_rsa_aes_128_sha`, `security.ssl3.ecdhe_ecdsa_aes_128_sha`, `security.ssl3.ecdhe_rsa_aes_256_sha`, `security.ssl3.ecdhe_ecdsa_aes_256_sha`, `security.ssl3.dhe_rsa_aes_128_sha`, `security.ssl3.dhe_rsa_aes_256_sha`, `security.ssl3.rsa_aes_128_gcm_sha256`, `security.ssl3.rsa_aes_256_gcm_sha384`, `security.ssl3.rsa_aes_128_sha`, `security.ssl3.rsa_aes_256_sha`, `security.ssl3.deprecated.rsa_des_ede3_sha`
1418
1419 ---
1420 **Note:**
1421
1422 This policy was updated in Firefox 78 to allow enabling ciphers as well. Setting the value to true disables the cipher, setting the value to false enables the cipher. Previously setting the value to true or false disabled the cipher.
1423
1424 ---
1425 **Compatibility:** Firefox 76, Firefox ESR 68.8 (TLS_RSA_WITH_AES_128_GCM_SHA256 and TLS_RSA_WITH_AES_256_GCM_SHA384 were added in Firefox 78, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA38, TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, and TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 were added in Firefox 97 and Firefox 91.6)\
1426 **CCK2 Equivalent:** N/A\
1427 **Preferences Affected:** N/A
1428
1429 #### Windows (GPO)
1430 ```
1431 Software\Policies\Mozilla\Firefox\DisabledCiphers\CIPHER_NAME = 0x1 | 0x0
1432 ```
1433 #### Windows (Intune)
1434 OMA-URI:
1435 ```
1436 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_CIPHER_NAME
1437
1438 ```
1439 Value (string):
1440 ```
1441 <enabled/> or <disabled/>
1442 ```
1443 #### macOS
1444 ```
1445 <dict>
1446 <key>DisabledCiphers</key>
1447 <dict>
1448 <key>CIPHER_NAME</key>
1449 <true/> | <false/>
1450 </dict>
1451 </dict>
1452 ```
1453 #### policies.json
1454 ```
1455 {
1456 "policies": {
1457 "DisabledCiphers": {
1458 "CIPHER_NAME": true | false,
1459 }
1460 }
1461 }
1462 ```
1463 ### DisableDefaultBrowserAgent
1464 Prevent the default browser agent from taking any actions. Only applicable to Windows; other platforms don’t have the agent.
1465
1466 The browser agent is a Windows-only scheduled task which runs in the background to collect and submit data about the browser that the user has set as their OS default. More information is available [here](https://firefox-source-docs.mozilla.org/toolkit/mozapps/defaultagent/default-browser-agent/index.html).
1467
1468 **Compatibility:** Firefox 75, Firefox ESR 68.7 (Windows only)\
1469 **CCK2 Equivalent:** N/A\
1470 **Preferences Affected:** N/A
1471
1472 #### Windows (GPO)
1473 ```
1474 Software\Policies\Mozilla\Firefox\DisableDefaultBrowserAgent = 0x1 | 0x0
1475 ```
1476 #### Windows (Intune)
1477 OMA-URI:
1478 ```
1479 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableDefaultBrowserAgent
1480 ```
1481 Value (string):
1482 ```
1483 <enabled/> or <disabled/>
1484 ```
1485 #### policies.json
1486 ```
1487 {
1488 "policies": {
1489 "DisableDefaultBrowserAgent": true | false
1490 }
1491 }
1492 ```
1493 ### DisableDeveloperTools
1494 Remove access to all developer tools.
1495
1496 **Compatibility:** Firefox 60, Firefox ESR 60\
1497 **CCK2 Equivalent:** `removeDeveloperTools`\
1498 **Preferences Affected:** `devtools.policy.disabled`
1499
1500 #### Windows (GPO)
1501 ```
1502 Software\Policies\Mozilla\Firefox\DisableDeveloperTools = 0x1 | 0x0`
1503 ```
1504 #### Windows (Intune)
1505 OMA-URI:
1506 ```
1507 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableDeveloperTools
1508 ```
1509 Value (string):
1510 ```
1511 <enabled/> or <disabled/>
1512 ```
1513 #### macOS
1514 ```
1515 <dict>
1516 <key>DisableDeveloperTools</key>
1517 <true/> | <false/>
1518 </dict>
1519 ```
1520 #### policies.json
1521 ```
1522 {
1523 "policies": {
1524 "DisableDeveloperTools": true | false
1525 }
1526 }
1527 ```
1528 ### DisableFeedbackCommands
1529 Disable the menus for reporting sites (Submit Feedback, Report Deceptive Site).
1530
1531 **Compatibility:** Firefox 60, Firefox ESR 60\
1532 **CCK2 Equivalent:** N/A\
1533 **Preferences Affected:** N/A
1534
1535 #### Windows (GPO)
1536 ```
1537 Software\Policies\Mozilla\Firefox\DisableFeedbackCommands = 0x1 | 0x0
1538 ```
1539 #### Windows (Intune)
1540 OMA-URI:
1541 ```
1542 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFeedbackCommands
1543 ```
1544 Value (string):
1545 ```
1546 <enabled/> or <disabled/>
1547 ```
1548 #### macOS
1549 ```
1550 <dict>
1551 <key>DisableFeedbackCommands</key>
1552 <true/> | <false/>
1553 </dict>
1554 ```
1555 #### policies.json
1556 ```
1557 {
1558 "policies": {
1559 "DisableFeedbackCommands": true | false
1560 }
1561 }
1562 ```
1563 ### DisableFirefoxAccounts
1564 Disable Firefox Accounts integration (Sync).
1565
1566 **Compatibility:** Firefox 60, Firefox ESR 60\
1567 **CCK2 Equivalent:** `disableSync`\
1568 **Preferences Affected:** `identity.fxaccounts.enabled`
1569
1570 #### Windows (GPO)
1571 ```
1572 Software\Policies\Mozilla\Firefox\DisableFirefoxAccounts = 0x1 | 0x0
1573 ```
1574 #### Windows (Intune)
1575 OMA-URI:
1576 ```
1577 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxAccounts
1578 ```
1579 Value (string):
1580 ```
1581 <enabled/> or <disabled/>
1582 ```
1583 #### macOS
1584 ```
1585 <dict>
1586 <key>DisableFirefoxAccounts</key>
1587 <true/> | <false/>
1588 </dict>
1589 ```
1590 #### policies.json
1591 ```
1592 {
1593 "policies": {
1594 "DisableFirefoxAccounts": true | false
1595 }
1596 }
1597 ```
1598 ### DisableFirefoxScreenshots
1599 Remove access to Firefox Screenshots.
1600
1601 **Compatibility:** Firefox 60, Firefox ESR 60\
1602 **CCK2 Equivalent:** N/A\
1603 **Preferences Affected:** `extensions.screenshots.disabled`
1604
1605 #### Windows (GPO)
1606 ```
1607 Software\Policies\Mozilla\Firefox\DisableFirefoxScreenshots = 0x1 | 0x0
1608 ```
1609 #### Windows (Intune)
1610 OMA-URI:
1611 ```
1612 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxScreenshots
1613 ```
1614 Value (string):
1615 ```
1616 <enabled/> or <disabled/>
1617 ```
1618 #### macOS
1619 ```
1620 <dict>
1621 <key>DisableFirefoxScreenshots</key>
1622 <true/> | <false/>
1623 </dict>
1624 ```
1625 #### policies.json
1626 ```
1627 {
1628 "policies": {
1629 "DisableFirefoxScreenshots": true | false
1630 }
1631 }
1632 ```
1633 ### DisableFirefoxStudies
1634 Disable Firefox studies (Shield).
1635
1636 **Compatibility:** Firefox 60, Firefox ESR 60\
1637 **CCK2 Equivalent:** N/A\
1638 **Preferences Affected:** N/A
1639
1640 #### Windows (GPO)
1641 ```
1642 Software\Policies\Mozilla\Firefox\DisableFirefoxStudies = 0x1 | 0x0
1643 ```
1644 #### Windows (Intune)
1645 OMA-URI:
1646 ```
1647 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxStudies
1648 ```
1649 Value (string):
1650 ```
1651 <enabled/> or <disabled/>
1652 ```
1653 #### macOS
1654 ```
1655 <dict>
1656 <key>DisableFirefoxStudies</key>
1657 <true/> | <false/>
1658 </dict>
1659 ```
1660 #### policies.json
1661 ```
1662 {
1663 "policies": {
1664 "DisableFirefoxStudies": true | false
1665 }
1666 }
1667 ```
1668 ### DisableForgetButton
1669 Disable the "Forget" button.
1670
1671 **Compatibility:** Firefox 60, Firefox ESR 60\
1672 **CCK2 Equivalent:** `disableForget`\
1673 **Preferences Affected:** N/A
1674
1675 #### Windows (GPO)
1676 ```
1677 Software\Policies\Mozilla\Firefox\DisableForgetButton = 0x1 | 0x0
1678 ```
1679 #### Windows (Intune)
1680 OMA-URI:
1681 ```
1682 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableForgetButton
1683 ```
1684 Value (string):
1685 ```
1686 <enabled/> or <disabled/>
1687 ```
1688 #### macOS
1689 ```
1690 <dict>
1691 <key>DisableForgetButton</key>
1692 <true/> | <false/>
1693 </dict>
1694 ```
1695 #### policies.json
1696 ```
1697 {
1698 "policies": {
1699 "DisableForgetButton": true | false
1700 }
1701 }
1702 ```
1703 ### DisableFormHistory
1704 Turn off saving information on web forms and the search bar.
1705
1706 **Compatibility:** Firefox 60, Firefox ESR 60\
1707 **CCK2 Equivalent:** `disableFormFill`\
1708 **Preferences Affected:** `browser.formfill.enable`
1709
1710 #### Windows (GPO)
1711 ```
1712 Software\Policies\Mozilla\Firefox\DisableFormHistory = 0x1 | 0x0
1713 ```
1714 #### Windows (Intune)
1715 OMA-URI:
1716 ```
1717 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFormHistory
1718 ```
1719 Value (string):
1720 ```
1721 <enabled/> or <disabled/>
1722 ```
1723 #### macOS
1724 ```
1725 <dict>
1726 <key>DisableFormHistory</key>
1727 <true/> | <false/>
1728 </dict>
1729 ```
1730 #### policies.json
1731 ```
1732 {
1733 "policies": {
1734 "DisableFormHistory": true | false
1735 }
1736 }
1737 ```
1738 ### DisableMasterPasswordCreation
1739 Remove the master password functionality.
1740
1741 If this value is true, it works the same as setting [`PrimaryPassword`](#primarypassword) to false and removes the primary password functionality.
1742
1743 If both `DisableMasterPasswordCreation` and `PrimaryPassword` are used, `DisableMasterPasswordCreation` takes precedent.
1744
1745 **Compatibility:** Firefox 60, Firefox ESR 60\
1746 **CCK2 Equivalent:** `noMasterPassword`\
1747 **Preferences Affected:** N/A
1748
1749 #### Windows (GPO)
1750 ```
1751 Software\Policies\Mozilla\Firefox\DisableMasterPasswordCreation = 0x1 | 0x0
1752 ```
1753 #### Windows (Intune)
1754 OMA-URI:
1755 ```
1756 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableMasterPasswordCreation
1757 ```
1758 Value (string):
1759 ```
1760 <enabled/> or <disabled/>
1761 ```
1762 #### macOS
1763 ```
1764 <dict>
1765 <key>DisableMasterPasswordCreation</key>
1766 <true/> | <false/>
1767 </dict>
1768 ```
1769 #### policies.json
1770 ```
1771 {
1772 "policies": {
1773 "DisableMasterPasswordCreation": true | false
1774 }
1775 }
1776 ```
1777 ### DisablePasswordReveal
1778 Do not allow passwords to be shown in saved logins
1779
1780 **Compatibility:** Firefox 71, Firefox ESR 68.3\
1781 **CCK2 Equivalent:** N/A
1782 **Preferences Affected:** N/A
1783
1784 #### Windows (GPO)
1785 ```
1786 Software\Policies\Mozilla\Firefox\DisablePasswordReveal = 0x1 | 0x0
1787 ```
1788 #### Windows (Intune)
1789 OMA-URI:
1790 ```
1791 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePasswordReveal
1792 ```
1793 Value (string):
1794 ```
1795 <enabled/> or <disabled/>
1796 ```
1797 #### macOS
1798 ```
1799 <dict>
1800 <key>DisablePasswordReveal</key>
1801 <true/> | <false/>
1802 </dict>
1803 ```
1804 #### policies.json
1805 ```
1806 {
1807 "policies": {
1808 "DisablePasswordReveal": true | false
1809 }
1810 }
1811 ```
1812 ### DisablePocket
1813 Remove Pocket in the Firefox UI. It does not remove it from the new tab page.
1814
1815 **Compatibility:** Firefox 60, Firefox ESR 60\
1816 **CCK2 Equivalent:** `disablePocket`\
1817 **Preferences Affected:** `extensions.pocket.enabled`
1818
1819 #### Windows (GPO)
1820 ```
1821 Software\Policies\Mozilla\Firefox\DisablePocket = 0x1 | 0x0
1822 ```
1823 #### Windows (Intune)
1824 OMA-URI:
1825 ```
1826 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePocket
1827 ```
1828 Value (string):
1829 ```
1830 <enabled/> or <disabled/>
1831 ```
1832 #### macOS
1833 ```
1834 <dict>
1835 <key>DisablePocket</key>
1836 <true/> | <false/>
1837 </dict>
1838 ```
1839 #### policies.json
1840 ```
1841 {
1842 "policies": {
1843 "DisablePocket": true | false
1844 }
1845 }
1846 ```
1847 ### DisablePrivateBrowsing
1848 Remove access to private browsing.
1849
1850 **Compatibility:** Firefox 60, Firefox ESR 60\
1851 **CCK2 Equivalent:** `disablePrivateBrowsing`\
1852 **Preferences Affected:** N/A
1853
1854 #### Windows (GPO)
1855 ```
1856 Software\Policies\Mozilla\Firefox\DisablePrivateBrowsing = 0x1 | 0x0
1857 ```
1858 #### Windows (Intune)
1859 OMA-URI:
1860 ```
1861 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePrivateBrowsing
1862 ```
1863 Value (string):
1864 ```
1865 <enabled/> or <disabled/>
1866 ```
1867 #### macOS
1868 ```
1869 <dict>
1870 <key>DisablePrivateBrowsing</key>
1871 <true/> | <false/>
1872 </dict>
1873 ```
1874 #### policies.json
1875 ```
1876 {
1877 "policies": {
1878 "DisablePrivateBrowsing": true | false
1879 }
1880 }
1881 ```
1882 ### DisableProfileImport
1883 Disables the "Import data from another browser" option in the bookmarks window.
1884
1885 **Compatibility:** Firefox 60, Firefox ESR 60\
1886 **CCK2 Equivalent:** N/A\
1887 **Preferences Affected:** N/A
1888
1889 #### Windows (GPO)
1890 ```
1891 Software\Policies\Mozilla\Firefox\DisableProfileImport = 0x1 | 0x0
1892 ```
1893 #### Windows (Intune)
1894 OMA-URI:
1895 ```
1896 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableProfileImport
1897 ```
1898 Value (string):
1899 ```
1900 <enabled/> or <disabled/>
1901 ```
1902 #### macOS
1903 ```
1904 <dict>
1905 <key>DisableProfileImport</key>
1906 <true/> | <false/>
1907 </dict>
1908 ```
1909 #### policies.json
1910 ```
1911 {
1912 "policies": {
1913 "DisableProfileImport": true | false
1914 }
1915 }
1916 ```
1917 ### DisableProfileRefresh
1918 Disable the Refresh Firefox button on about:support and support.mozilla.org, as well as the prompt that displays offering to refresh Firefox when you haven't used it in a while.
1919
1920 **Compatibility:** Firefox 60, Firefox ESR 60\
1921 **CCK2 Equivalent:** `disableResetFirefox`\
1922 **Preferences Affected:** `browser.disableResetPrompt`
1923
1924 #### Windows (GPO)
1925 ```
1926 Software\Policies\Mozilla\Firefox\DisableProfileRefresh = 0x1 | 0x0
1927 ```
1928 #### Windows (Intune)
1929 OMA-URI:
1930 ```
1931 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableProfileRefresh
1932 ```
1933 Value (string):
1934 ```
1935 <enabled/> or <disabled/>
1936 ```
1937 #### macOS
1938 ```
1939 <dict>
1940 <key>DisableProfileRefresh</key>
1941 <true/> | <false/>
1942 </dict>
1943 ```
1944 #### policies.json
1945 ```
1946 {
1947 "policies": {
1948 "DisableProfileRefresh": true | false
1949 }
1950 }
1951 ```
1952 ### DisableSafeMode
1953 Disable safe mode within the browser.
1954
1955 On Windows, this disables safe mode via the command line as well.
1956
1957 **Compatibility:** Firefox 60, Firefox ESR 60 (Windows, macOS)\
1958 **CCK2 Equivalent:** `disableSafeMode`\
1959 **Preferences Affected:** N/A
1960
1961 #### Windows (GPO)
1962 ```
1963 Software\Policies\Mozilla\Firefox\DisableSafeMode = 0x1 | 0x0
1964 ```
1965 #### Windows (Intune)
1966 OMA-URI:
1967 ```
1968 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSafeMode
1969 ```
1970 Value (string):
1971 ```
1972 <enabled/> or <disabled/>
1973 ```
1974 #### macOS
1975 ```
1976 <dict>
1977 <key>DisableSafeMode</key>
1978 <true/> | <false/>
1979 </dict>
1980 ```
1981 #### policies.json
1982 ```
1983 {
1984 "policies": {
1985 "DisableSafeMode": true | false
1986 }
1987 }
1988 ```
1989 ### DisableSecurityBypass
1990 Prevent the user from bypassing security in certain cases.
1991
1992 `InvalidCertificate` prevents adding an exception when an invalid certificate is shown.
1993
1994 `SafeBrowsing` prevents selecting "ignore the risk" and visiting a harmful site anyway.
1995
1996 **Compatibility:** Firefox 60, Firefox ESR 60\
1997 **CCK2 Equivalent:** N/A\
1998 **Preferences Affected:** `security.certerror.hideAddException`, `browser.safebrowsing.allowOverride`
1999
2000 #### Windows (GPO)
2001 ```
2002 Software\Policies\Mozilla\Firefox\DisableSecurityBypass\InvalidCertificate = 0x1 | 0x0
2003 Software\Policies\Mozilla\Firefox\DisableSecurityBypass\SafeBrowsing = 0x1 | 0x0
2004 ```
2005 #### Windows (Intune)
2006 OMA-URI:
2007 ```
2008 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/P_DisableSecurityBypass_InvalidCertificate
2009 ```
2010 Value (string):
2011 ```
2012 <enabled/> or <disabled/>
2013 ```
2014 OMA-URI:
2015 ```
2016 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/P_DisableSecurityBypass_SafeBrowsing
2017 ```
2018 Value (string):
2019 ```
2020 <enabled/> or <disabled/>
2021 ```
2022
2023 #### macOS
2024 ```
2025 <dict>
2026 <key>DisableSecurityBypass</key>
2027 <dict>
2028 <key>InvalidCertificate</key>
2029 <true/> | <false/>
2030 <key>SafeBrowsing</key>
2031 <true/> | <false/>
2032 </dict>
2033 </dict>
2034 ```
2035 #### policies.json
2036 ```
2037 {
2038 "policies": {
2039 "DisableSecurityBypass": {
2040 "InvalidCertificate": true | false,
2041 "SafeBrowsing": true | false
2042 }
2043 }
2044 }
2045 ```
2046 ### DisableSetDesktopBackground
2047 Remove the "Set As Desktop Background..." menuitem when right clicking on an image.
2048
2049 **Compatibility:** Firefox 60, Firefox ESR 60\
2050 **CCK2 Equivalent:** `removeSetDesktopBackground`\
2051 **Preferences Affected:** N/A
2052
2053 #### Windows (GPO)
2054 ```
2055 Software\Policies\Mozilla\Firefox\DisableSetDesktopBackground = 0x1 | 0x0
2056 ```
2057 #### Windows (Intune)
2058 OMA-URI:
2059 ```
2060 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSetDesktopBackground
2061 ```
2062 Value (string):
2063 ```
2064 <enabled/> or <disabled/>
2065 ```
2066 #### macOS
2067 ```
2068 <dict>
2069 <key>DisableSetDesktopBackground</key>
2070 <true/> | <false/>
2071 </dict>
2072 ```
2073 #### policies.json
2074 ```
2075 {
2076 "policies": {
2077 "DisableSetDesktopBackground": true | false
2078 }
2079 }
2080 ```
2081 ### DisableSystemAddonUpdate
2082 Prevent system add-ons from being installed or updated.
2083
2084 **Compatibility:** Firefox 60, Firefox ESR 60\
2085 **CCK2 Equivalent:** N/A\
2086 **Preferences Affected:** N/A
2087
2088 #### Windows (GPO)
2089 ```
2090 Software\Policies\Mozilla\Firefox\DisableSystemAddonUpdate = 0x1 | 0x0
2091 ```
2092 #### Windows (Intune)
2093 OMA-URI:
2094 ```
2095 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSystemAddonUpdate
2096 ```
2097 Value (string):
2098 ```
2099 <enabled/> or <disabled/>
2100 ```
2101 #### macOS
2102 ```
2103 <dict>
2104 <key>DisableSystemAddonUpdate</key>
2105 <true/> | <false/>
2106 </dict>
2107 ```
2108 #### policies.json
2109 ```
2110 {
2111 "policies": {
2112 "DisableSystemAddonUpdate": true | false
2113 }
2114 }
2115 ```
2116 ### DisableTelemetry
2117 Prevent the upload of telemetry data.
2118
2119 As of Firefox 83 and Firefox ESR 78.5, local storage of telemetry data is disabled as well.
2120
2121 Mozilla recommends that you do not disable telemetry. Information collected through telemetry helps us build a better product for businesses like yours.
2122
2123 **Compatibility:** Firefox 60, Firefox ESR 60\
2124 **CCK2 Equivalent:** `disableTelemetry`\
2125 **Preferences Affected:** `datareporting.healthreport.uploadEnabled`, `datareporting.policy.dataSubmissionEnabled`, `toolkit.telemetry.archive.enabled`
2126
2127 #### Windows (GPO)
2128 ```
2129 Software\Policies\Mozilla\Firefox\DisableTelemetry = 0x1 | 0x0
2130 ```
2131 #### Windows (Intune)
2132 OMA-URI:
2133 ```
2134 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableTelemetry
2135 ```
2136 Value (string):
2137 ```
2138 <enabled/> or <disabled/>
2139 ```
2140 #### macOS
2141 ```
2142 <dict>
2143 <key>DisableTelemetry</key>
2144 <true/> | <false/>
2145 </dict>
2146 ```
2147 #### policies.json
2148 ```
2149 {
2150 "policies": {
2151 "DisableTelemetry": true | false
2152 }
2153 }
2154 ```
2155 ### DisableThirdPartyModuleBlocking
2156 Do not allow blocking third-party modules from the `about:third-party` page.
2157
2158 This policy only works on Windows through GPO (not policies.json).
2159
2160 **Compatibility:** Firefox 110 (Windows only, GPO only)\
2161 **CCK2 Equivalent:** N/A\
2162 **Preferences Affected:** N/A
2163
2164 #### Windows (GPO)
2165 ```
2166 Software\Policies\Mozilla\Firefox\DisableThirdPartyModuleBlocking = = 0x1 | 0x0
2167 ```
2168 #### Windows (Intune)
2169 OMA-URI:
2170 ```
2171 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableThirdPartyModuleBlocking
2172 ```
2173 Value (string):
2174 ```
2175 <enabled/> or <disabled/>
2176 ```
2177 ### DisplayBookmarksToolbar
2178 Set the initial state of the bookmarks toolbar. A user can still change how it is displayed.
2179
2180 `always` means the bookmarks toolbar is always shown.
2181
2182 `never` means the bookmarks toolbar is not shown.
2183
2184 `newtab` means the bookmarks toolbar is only shown on the new tab page.
2185
2186 **Compatibility:** Firefox 109, Firefox ESR 102.7\
2187 **CCK2 Equivalent:** N/A\
2188 **Preferences Affected:** N/A
2189
2190 #### Windows (GPO)
2191 ```
2192 Software\Policies\Mozilla\Firefox\DisplayBookmarksToolbar = "always", "never", "newtab"
2193 ```
2194 #### Windows (Intune)
2195 OMA-URI:
2196 ```
2197 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisplayBookmarksToolbar_Enum
2198 ```
2199 Value (string):
2200 ```
2201 <enabled/>
2202 <data id="DisplayBookmarksToolbar" value="always | never | newtab"/>
2203 ```
2204 #### macOS
2205 ```
2206 <dict>
2207 <key>DisplayBookmarksToolbar</key>
2208 <string>always | never | newtab</string>
2209 </dict>
2210 ```
2211 #### policies.json
2212 ```
2213 {
2214 "policies": {
2215 "DisplayBookmarksToolbar": "always" | "never" | "newtab"
2216 }
2217 }
2218 ```
2219 ### DisplayBookmarksToolbar (Deprecated)
2220 Set the initial state of the bookmarks toolbar. A user can still hide it and it will stay hidden.
2221
2222 **Compatibility:** Firefox 60, Firefox ESR 60\
2223 **CCK2 Equivalent:** `displayBookmarksToolbar`\
2224 **Preferences Affected:** N/A
2225
2226 #### Windows (GPO)
2227 ```
2228 Software\Policies\Mozilla\Firefox\DisplayBookmarksToolbar = 0x1 | 0x0
2229 ```
2230 #### Windows (Intune)
2231 OMA-URI:
2232 ```
2233 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisplayBookmarksToolbar
2234 ```
2235 Value (string):
2236 ```
2237 <enabled/> or <disabled/>
2238 ```
2239 #### macOS
2240 ```
2241 <dict>
2242 <key>DisplayBookmarksToolbar</key>
2243 <true/> | <false/>
2244 </dict>
2245 ```
2246 #### policies.json
2247 ```
2248 {
2249 "policies": {
2250 "DisplayBookmarksToolbar": true | false
2251 }
2252 }
2253 ```
2254 ### DisplayMenuBar
2255 Set the state of the menubar.
2256
2257 `always` means the menubar is shown and cannot be hidden.
2258
2259 `never` means the menubar is hidden and cannot be shown.
2260
2261 `default-on` means the menubar is on by default but can be hidden.
2262
2263 `default-off` means the menubar is off by default but can be shown.
2264
2265 **Compatibility:** Firefox 73, Firefox ESR 68.5 (Windows, some Linux)\
2266 **CCK2 Equivalent:** `displayMenuBar`\
2267 **Preferences Affected:** N/A
2268
2269 #### Windows (GPO)
2270 ```
2271 Software\Policies\Mozilla\Firefox\DisplayMenuBar = "always", "never", "default-on", "default-off"
2272 ```
2273 #### Windows (Intune)
2274 OMA-URI:
2275 ```
2276 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisplayMenuBar_Enum
2277 ```
2278 Value (string):
2279 ```
2280 <enabled/>
2281 <data id="DisplayMenuBar" value="always | never | default-on | default-off"/>
2282 ```
2283 #### macOS
2284 ```
2285 <dict>
2286 <key>DisplayMenuBar</key>
2287 <string>always | never | default-on | default-off</string>
2288 </dict>
2289 ```
2290 #### policies.json
2291 ```
2292 {
2293 "policies": {
2294 "DisplayMenuBar": "always", "never", "default-on", "default-off"
2295 }
2296 }
2297 ```
2298 ### DisplayMenuBar (Deprecated)
2299 Set the initial state of the menubar. A user can still hide it and it will stay hidden.
2300
2301 **Compatibility:** Firefox 60, Firefox ESR 60 (Windows, some Linux)\
2302 **CCK2 Equivalent:** `displayMenuBar`\
2303 **Preferences Affected:** N/A
2304
2305 #### Windows (GPO)
2306 ```
2307 Software\Policies\Mozilla\Firefox\DisplayMenuBar = 0x1 | 0x0
2308 ```
2309 #### macOS
2310 ```
2311 <dict>
2312 <key>DisplayMenuBar</key>
2313 <true/> | <false/>
2314 </dict>
2315 ```
2316 #### policies.json
2317 ```
2318 {
2319 "policies": {
2320 "DisplayMenuBar": true | false
2321 }
2322 }
2323 ```
2324 ### DNSOverHTTPS
2325 Configure DNS over HTTPS.
2326
2327 `Enabled` determines whether DNS over HTTPS is enabled
2328
2329 `ProviderURL` is a URL to another provider.
2330
2331 `Locked` prevents the user from changing DNS over HTTPS preferences.
2332
2333 `ExcludedDomains` excludes domains from DNS over HTTPS.
2334
2335 **Compatibility:** Firefox 63, Firefox ESR 68 (ExcludedDomains added in 75/68.7)\
2336 **CCK2 Equivalent:** N/A\
2337 **Preferences Affected:** `network.trr.mode`, `network.trr.uri`
2338
2339 #### Windows (GPO)
2340 ```
2341 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\Enabled = 0x1 | 0x0
2342 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\ProviderURL = "URL_TO_ALTERNATE_PROVIDER"
2343 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\Locked = 0x1 | 0x0
2344 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\ExcludedDomains\1 = "example.com"
2345 ```
2346 #### Windows (Intune)
2347 OMA-URI:
2348 ```
2349 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_Enabled
2350 ```
2351 Value (string):
2352 ```
2353 <enabled/> or <disabled/>
2354 ```
2355 OMA-URI:
2356 ```
2357 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_ProviderURL
2358 ```
2359 Value (string):
2360 ```
2361 <enabled/>
2362 <data id="String" value="URL_TO_ALTERNATE_PROVIDER"/>
2363 ```
2364 OMA-URI:
2365 ```
2366 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_Locked
2367 ```
2368 Value (string):
2369 ```
2370 <enabled/> or <disabled/>
2371 ```
2372 OMA-URI:
2373 ```
2374 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_ExcludedDomains
2375 ```
2376 Value (string):
2377 ```
2378 <enabled/>
2379 <data id="List" value="1&#xF000;example.com"/>
2380 ```
2381 #### macOS
2382 ```
2383 <dict>
2384 <key>DNSOverHTTPS</key>
2385 <dict>
2386 <key>Enabled</key>
2387 <true/> | <false/>
2388 <key>ProviderURL</key>
2389 <string>URL_TO_ALTERNATE_PROVIDER</string>
2390 <key>Locked</key>
2391 <true/> | <false/>
2392 <key>ExcludedDomains</key>
2393 <array>
2394 <string>example.com</string>
2395 </array>
2396 </dict>
2397 </dict>
2398 ```
2399 #### policies.json
2400 ```
2401 {
2402 "policies": {
2403 "DNSOverHTTPS": {
2404 "Enabled": true | false,
2405 "ProviderURL": "URL_TO_ALTERNATE_PROVIDER",
2406 "Locked": true | false,
2407 "ExcludedDomains": ["example.com"]
2408 }
2409 }
2410 }
2411 ```
2412 ### DontCheckDefaultBrowser
2413 Don't check if Firefox is the default browser at startup.
2414
2415 **Compatibility:** Firefox 60, Firefox ESR 60\
2416 **CCK2 Equivalent:** `dontCheckDefaultBrowser`\
2417 **Preferences Affected:** `browser.shell.checkDefaultBrowser`
2418
2419 #### Windows (GPO)
2420 ```
2421 Software\Policies\Mozilla\Firefox\DontCheckDefaultBrowser = 0x1 | 0x0
2422 ```
2423 #### Windows (Intune)
2424 OMA-URI:
2425 ```
2426 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DontCheckDefaultBrowser
2427 ```
2428 Value (string):
2429 ```
2430 <enabled/> or <disabled/>
2431 ```
2432 #### macOS
2433 ```
2434 <dict>
2435 <key>DontCheckDefaultBrowser</key>
2436 <true/> | <false/>
2437 </dict>
2438 ```
2439 #### policies.json
2440 ```
2441 {
2442 "policies": {
2443 "DontCheckDefaultBrowser": true | false
2444 }
2445 }
2446 ```
2447 ### DownloadDirectory
2448 Set and lock the download directory.
2449
2450 You can use ${home} for the native home directory.
2451
2452 **Compatibility:** Firefox 68, Firefox ESR 68\
2453 **CCK2 Equivalent:** N/A\
2454 **Preferences Affected:** `browser.download.dir`, `browser.download.folderList`, `browser.download.useDownloadDir`
2455
2456 #### Windows (GPO)
2457 ```
2458 Software\Policies\Mozilla\Firefox\DownloadDirectory = "${home}\Downloads"
2459 ```
2460 #### Windows (Intune)
2461 OMA-URI:
2462 ```
2463 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DownloadDirectory
2464 ```
2465 Value (string):
2466 ```
2467 <enabled/>
2468 <data id="Preferences_String" value="${home}\Downloads"/>
2469 ```
2470 #### macOS
2471 ```
2472 <dict>
2473 <key>DownloadDirectory</key>
2474 <string>${home}/Downloads</string>
2475 </dict>
2476 ```
2477 #### policies.json (macOS and Linux)
2478 ```
2479 {
2480 "policies": {
2481 "DownloadDirectory": "${home}/Downloads"
2482 }
2483 ```
2484 #### policies.json (Windows)
2485 ```
2486 {
2487 "policies": {
2488 "DownloadDirectory": "${home}\\Downloads"
2489 }
2490 ```
2491 ### EnableTrackingProtection
2492 Configure tracking protection.
2493
2494 If this policy is not configured, tracking protection is not enabled by default in the browser, but it is enabled by default in private browsing and the user can change it.
2495
2496 If `Value` is set to false, tracking protection is disabled and locked in both the regular browser and private browsing.
2497
2498 If `Value` is set to true, tracking protection is enabled by default in both the regular browser and private browsing and the `Locked` value determines whether or not a user can change it.
2499
2500 If `Cryptomining` is set to true, cryptomining scripts on websites are blocked.
2501
2502 If `Fingerprinting` is set to true, fingerprinting scripts on websites are blocked.
2503
2504 If `EmailTracking` is set to true, hidden email tracking pixels and scripts on websites are blocked. (Firefox 112)
2505
2506 `Exceptions` are origins for which tracking protection is not enabled.
2507
2508 **Compatibility:** Firefox 60, Firefox ESR 60 (Cryptomining and Fingerprinting added in 70/68.2, Exceptions added in 73/68.5)\
2509 **CCK2 Equivalent:** N/A\
2510 **Preferences Affected:** `privacy.trackingprotection.enabled`, `privacy.trackingprotection.pbmode.enabled`, `privacy.trackingprotection.cryptomining.enabled`, `privacy.trackingprotection.fingerprinting.enabled`
2511
2512 #### Windows (GPO)
2513 ```
2514 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Value = 0x1 | 0x0
2515 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Locked = 0x1 | 0x0
2516 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Cryptomining = 0x1 | 0x0
2517 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Fingerprinting = 0x1 | 0x0
2518 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Exceptions\1 = "https://example.com"
2519 ```
2520 #### Windows (Intune)
2521 OMA-URI:
2522 ```
2523 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/A_TrackingProtection_Value
2524 ```
2525 Value (string):
2526 ```
2527 <enabled/> or <disabled/>
2528 ```
2529 OMA-URI:
2530 ```
2531 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/B_TrackingProtection_Cryptomining
2532 ```
2533 Value (string):
2534 ```
2535 <enabled/> or <disabled/>
2536 ```
2537 OMA-URI:
2538 ```
2539 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/C_TrackingProtection_Fingerprinting
2540 ```
2541 Value (string):
2542 ```
2543 <enabled/> or <disabled/>
2544 ```
2545 OMA-URI:
2546 ```
2547 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/D_TrackingProtection_Exceptions
2548 ```
2549 Value (string):
2550 ```
2551 <enabled/>
2552 <data id="TrackingProtection_Exceptions" value="1&#xF000;https://example.com"/>
2553 ```
2554 OMA-URI:
2555 ```
2556 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/E_TrackingProtection_Locked
2557 ```
2558 Value (string):
2559 ```
2560 <enabled/> or <disabled/>
2561 ```
2562 #### macOS
2563 ```
2564 <dict>
2565 <key>EnableTrackingProtection</key>
2566 <dict>
2567 <key>Value</key>
2568 <true/> | <false/>
2569 <key>Locked</key>
2570 <true/> | <false/>
2571 <key>Cryptomining</key>
2572 <true/> | <false/>
2573 <key>Fingerprinting</key>
2574 <true/> | <false/>
2575 <key>Exceptions</key>
2576 <array>
2577 <string>https://example.com</string>
2578 </array>
2579 </dict>
2580 </dict>
2581 ```
2582 #### policies.json
2583 ```
2584 {
2585 "policies": {
2586 "EnableTrackingProtection": {
2587 "Value": true | false,
2588 "Locked": true | false,
2589 "Cryptomining": true | false,
2590 "Fingerprinting": true | false,
2591 "Exceptions": ["https://example.com"]
2592 }
2593 }
2594 }
2595 ```
2596 ### EncryptedMediaExtensions
2597 Enable or disable Encrypted Media Extensions and optionally lock it.
2598
2599 If `Enabled` is set to false, encrypted media extensions (like Widevine) are not downloaded by Firefox unless the user consents to installing them.
2600
2601 If `Locked` is set to true and `Enabled` is set to false, Firefox will not download encrypted media extensions (like Widevine) or ask the user to install them.
2602
2603 **Compatibility:** Firefox 77, Firefox ESR 68.9\
2604 **CCK2 Equivalent:** N/A\
2605 **Preferences Affected:** `media.eme.enabled`
2606
2607 #### Windows (GPO)
2608 ```
2609 Software\Policies\Mozilla\Firefox\EncryptedMediaExtensions\Enabled = 0x1 | 0x0
2610 Software\Policies\Mozilla\Firefox\EncryptedMediaExtensions\Locked = 0x1 | 0x0
2611 ```
2612 #### Windows (Intune)
2613 OMA-URI:
2614 ```
2615 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~EncryptedMediaExtensions/EncryptedMediaExtensions_Enabled
2616 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~EncryptedMediaExtensions/EncryptedMediaExtensions_Locked
2617 ```
2618 Value (string):
2619 ```
2620 <enabled/>or <disabled/>
2621 ```
2622 #### macOS
2623 ```
2624 <dict>
2625 <key>EncryptedMediaExtensions</key>
2626 <dict>
2627 <key>Enabled</key>
2628 <true/> | <false/>
2629 <key>Locked</key>
2630 <true/> | <false/>
2631 </dict>
2632 </dict>
2633 ```
2634 #### policies.json
2635 ```
2636 {
2637 "policies": {
2638 "EncryptedMediaExtensions": {
2639 "Enabled": true | false,
2640 "Locked": true | false
2641 }
2642 }
2643 }
2644 ```
2645 ### EnterprisePoliciesEnabled
2646 Enable policy support on macOS.
2647
2648 **Compatibility:** Firefox 63, Firefox ESR 60.3 (macOS only)\
2649 **CCK2 Equivalent:** N/A\
2650 **Preferences Affected:** N/A
2651
2652 #### macOS
2653 ```
2654 <dict>
2655 <key>EnterprisePoliciesEnabled</key>
2656 <true/>
2657 </dict>
2658 ```
2659 ### ExemptDomainFileTypePairsFromFileTypeDownloadWarnings
2660
2661 Disable warnings based on file extension for specific file types on domains.
2662
2663 This policy is based on the [Chrome policy](https://chromeenterprise.google/policies/#ExemptDomainFileTypePairsFromFileTypeDownloadWarnings) of the same name.
2664
2665 Important: The documentation for the policy for both Edge and Chrome is incorrect. The ```domains``` value must be a domain, not a URL pattern. Also, we do not support using ```*``` to mean all domains.
2666
2667 **Compatibility:** Firefox 102\
2668 **CCK2 Equivalent:** N/A\
2669 **Preferences Affected:** N/A
2670
2671 #### Windows (GPO)
2672 Software\Policies\Mozilla\Firefox\ExemptDomainFileTypePairsFromFileTypeDownloadWarnings (REG_MULTI_SZ) =
2673 ```
2674 [
2675 {
2676 "file_extension": "jnlp",
2677 "domains": ["example.com"]
2678 }
2679 ]
2680 ```
2681 #### Windows (Intune)
2682 OMA-URI:
2683 ```
2684 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/ExemptDomainFileTypePairsFromFileTypeDownloadWarnings
2685 ```
2686 Value (string):
2687 ```
2688 <enabled/>
2689 <data id="JSON" value='
2690 [
2691 {
2692 "file_extension": "jnlp",
2693 "domains": ["example.com"]
2694 }
2695 ]
2696 '/>
2697 ```
2698 #### macOS
2699 ```
2700 <dict>
2701 <key>ExemptDomainFileTypePairsFromFileTypeDownloadWarnings</key>
2702 <array>
2703 <dict>
2704 <key>file_extension</key>
2705 <string>jnlp</string>
2706 <key>domains</key>
2707 <array>
2708 <string>example.com</string>
2709 </array>
2710 </dict>
2711 </array>
2712 </dict>
2713 ```
2714 #### policies.json
2715 ```
2716 {
2717 "policies": {
2718 "ExemptDomainFileTypePairsFromFileTypeDownloadWarnings": [{
2719 "file_extension": "jnlp",
2720 "domains": ["example.com"]
2721 }]
2722 }
2723 }
2724 ```
2725 ### Extensions
2726 Control the installation, uninstallation and locking of extensions.
2727
2728 While this policy is not technically deprecated, it is recommended that you use the **[`ExtensionSettings`](#extensionsettings)** policy. It has the same functionality and adds more. It does not support native paths, though, so you'll have to use file:/// URLs.
2729
2730 `Install` is a list of URLs or native paths for extensions to be installed.
2731
2732 `Uninstall` is a list of extension IDs that should be uninstalled if found.
2733
2734 `Locked` is a list of extension IDs that the user cannot disable or uninstall.
2735
2736 **Compatibility:** Firefox 60, Firefox ESR 60\
2737 **CCK2 Equivalent:** `addons`\
2738 **Preferences Affected:** N/A
2739
2740 #### Windows (GPO)
2741 ```
2742 Software\Policies\Mozilla\Firefox\Extensions\Install\1 = "https://addons.mozilla.org/firefox/downloads/somefile.xpi"
2743 Software\Policies\Mozilla\Firefox\Extensions\Install\2 = "//path/to/xpi"
2744 Software\Policies\Mozilla\Firefox\Extensions\Uninstall\1 = "bad_addon_id@mozilla.org"
2745 Software\Policies\Mozilla\Firefox\Extensions\Locked\1 = "addon_id@mozilla.org"
2746 ```
2747 #### Windows (Intune)
2748 OMA-URI:
2749 ```
2750 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/Extensions_Install
2751 ```
2752 Value (string):
2753 ```
2754 <enabled/>
2755 <data id="Extensions" value="1&#xF000;https://addons.mozilla.org/firefox/downloads/somefile.xpi&#xF000;2&#xF000;//path/to/xpi"/>
2756 ```
2757 OMA-URI:
2758 ```
2759 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/Extensions_Uninstall
2760 ```
2761 Value (string):
2762 ```
2763 <enabled/>
2764 <data id="Extensions" value="1&#xF000;bad_addon_id@mozilla.org"/>
2765 ```
2766 OMA-URI:
2767 ```
2768 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/Extensions_Locked
2769 ```
2770 Value (string):
2771 ```
2772 <enabled/>
2773 <data id="Extensions" value="1&#xF000;addon_id@mozilla.org"/>
2774 ```
2775 #### macOS
2776 ```
2777 <dict>
2778 <key>Extensions</key>
2779 <dict>
2780 <key>Install</key>
2781 <array>
2782 <string>https://addons.mozilla.org/firefox/downloads/somefile.xpi</string>
2783 <string>//path/to/xpi</string>
2784 </array>
2785 <key>Uninstall</key>
2786 <array>
2787 <string>bad_addon_id@mozilla.org</string>
2788 </array>
2789 <key>Locked</key>
2790 <array>
2791 <string>addon_id@mozilla.org</string>
2792 </array>
2793 </dict>
2794 </dict>
2795 ```
2796 #### policies.json
2797 ```
2798 {
2799 "policies": {
2800 "Extensions": {
2801 "Install": ["https://addons.mozilla.org/firefox/downloads/somefile.xpi", "//path/to/xpi"],
2802 "Uninstall": ["bad_addon_id@mozilla.org"],
2803 "Locked": ["addon_id@mozilla.org"]
2804 }
2805 }
2806 }
2807 ```
2808 ### ExtensionSettings
2809 Manage all aspects of extensions. This policy is based heavily on the [Chrome policy](https://dev.chromium.org/administrators/policy-list-3/extension-settings-full) of the same name.
2810
2811 This policy maps an extension ID to its configuration. With an extension ID, the configuration will be applied to the specified extension only. A default configuration can be set for the special ID "*", which will apply to all extensions that don't have a custom configuration set in this policy.
2812
2813 To obtain an extension ID, install the extension and go to about:support. You will see the ID in the Extensions section. I've also created an extension that makes it easy to find the ID of extensions on AMO. You can download it [here](https://github.com/mkaply/queryamoid/releases/tag/v0.1).
2814
2815 The configuration for each extension is another dictionary that can contain the fields documented below.
2816
2817 | Name | Description |
2818 | --- | --- |
2819 | `installation_mode` | Maps to a string indicating the installation mode for the extension. The valid strings are `allowed`,`blocked`,`force_installed`, and `normal_installed`.
2820 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`allowed` | Allows the extension to be installed by the user. This is the default behavior. There is no need for an install_url; it will automatically be allowed based on the ID.
2821 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`blocked`| Blocks installation of the extension and removes it from the device if already installed.
2822 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`force_installed`| The extension is automatically installed and can't be removed by the user. This option is not valid for the default configuration and requires an install_url.
2823 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`normal_installed`| The extension is automatically installed but can be disabled by the user. This option is not valid for the default configuration and requires an install_url.
2824 | `install_url`| Maps to a URL indicating where Firefox can download a force_installed or normal_installed extension. If installing from the local file system, use a [```file:///``` URL](https://en.wikipedia.org/wiki/File_URI_scheme). If installing from the addons.mozilla.org, use the following URL (substituting SHORT_NAME from the URL on AMO), https://addons.mozilla.org/firefox/downloads/latest/SHORT_NAME/latest.xpi. Languages packs are available from https://releases.mozilla.org/pub/firefox/releases/VERSION/PLATFORM/xpi/LANGUAGE.xpi. If you need to update the extension, you can change the name of the extension and it will be automatically updated. Extensions installed from file URLs will additional be updated when their internal version changes.
2825 | `install_sources` | A list of sources from which installing extensions is allowed using URL match patterns. **This is unnecessary if you are only allowing the installation of certain extensions by ID.** Each item in this list is an extension-style match pattern. Users will be able to easily install items from any URL that matches an item in this list. Both the location of the *.xpi file and the page where the download is started from (i.e. the referrer) must be allowed by these patterns. This setting can be used only for the default configuration.
2826 | `allowed_types` | This setting whitelists the allowed types of extension/apps that can be installed in Firefox. The value is a list of strings, each of which should be one of the following: "extension", "theme", "dictionary", "locale" This setting can be used only for the default configuration.
2827 | `blocked_install_message` | This maps to a string specifying the error message to display to users if they're blocked from installing an extension. This setting allows you to append text to the generic error message displayed when the extension is blocked. This could be be used to direct users to your help desk, explain why a particular extension is blocked, or something else. This setting can be used only for the default configuration.
2828 | `restricted_domains` | An array of domains on which content scripts can't be run. This setting can be used only for the default configuration.
2829 | `updates_disabled` | (Firefox 89, Firefox ESR 78.11) Boolean that indicates whether or not to disable automatic updates for an individual extension.
2830 | `default_area` | (Firefox 113) This settings specifies where the extension icon should be placed. Possible values are "navbar" and "menupanel"
2831
2832 **Compatibility:** Firefox 69, Firefox ESR 68.1 (As of Firefox 85, Firefox ESR 78.7, installing a theme makes it the default.)\
2833 **CCK2 Equivalent:** N/A\
2834 **Preferences Affected:** N/A
2835
2836 #### Windows (GPO)
2837 Software\Policies\Mozilla\Firefox\ExtensionSettings (REG_MULTI_SZ) =
2838 ```
2839 {
2840 "*": {
2841 "blocked_install_message": "Custom error message.",
2842 "install_sources": ["https://yourwebsite.com/*"],
2843 "installation_mode": "blocked",
2844 "allowed_types": ["extension"]
2845 },
2846 "uBlock0@raymondhill.net": {
2847 "installation_mode": "force_installed",
2848 "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
2849 },
2850 "https-everywhere@eff.org": {
2851 "installation_mode": "allowed"
2852 }
2853 }
2854 ```
2855 #### Windows (Intune)
2856 OMA-URI:
2857 ```
2858 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/ExtensionSettings
2859 ```
2860 Value (string):
2861 ```
2862 <enabled/>
2863 <data id="ExtensionSettings" value='
2864 {
2865 "*": {
2866 "blocked_install_message": "Custom error message.",
2867 "install_sources": ["https://yourwebsite.com/*"],
2868 "installation_mode": "blocked",
2869 "allowed_types": ["extension"]
2870 },
2871 "uBlock0@raymondhill.net": {
2872 "installation_mode": "force_installed",
2873 "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
2874 },
2875 "https-everywhere@eff.org": {
2876 "installation_mode": "allowed"
2877 }
2878 }'/>
2879 ```
2880 #### macOS
2881 ```
2882 <dict>
2883 <key>ExtensionSettings</key>
2884 <dict>
2885 <key>*</key>
2886 <dict>
2887 <key>blocked_install_message</key>
2888 <string>Custom error message.</string>
2889 <key>install_sources</key>
2890 <array>
2891 <string>"https://yourwebsite.com/*"</string>
2892 </array>
2893 <key>installation_mode</key>
2894 <string>blocked</string>
2895 <key>allowed_types</key>
2896 <array>
2897 <string>extension</string>
2898 </array>
2899 </dict>
2900 <key>uBlock0@raymondhill.net</key>
2901 <dict>
2902 <key>installation_mode</key>
2903 <string>force_installed</string>
2904 <key>install_url</key>
2905 <string>https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi</string>
2906 </dict>
2907 <key>https-everywhere@eff.org</key>
2908 <dict>
2909 <key>installation_mode</key>
2910 <string>allowed</string>
2911 </dict>
2912 </dict>
2913 </dict>
2914 ```
2915 #### policies.json
2916 ```
2917 {
2918 "policies": {
2919 "ExtensionSettings": {
2920 "*": {
2921 "blocked_install_message": "Custom error message.",
2922 "install_sources": ["https://yourwebsite.com/*"],
2923 "installation_mode": "blocked",
2924 "allowed_types": ["extension"]
2925 },
2926 "uBlock0@raymondhill.net": {
2927 "installation_mode": "force_installed",
2928 "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
2929 },
2930 "https-everywhere@eff.org": {
2931 "installation_mode": "allowed"
2932 }
2933 }
2934 }
2935 }
2936 ```
2937 ### ExtensionUpdate
2938 Control extension updates.
2939
2940 **Compatibility:** Firefox 67, Firefox ESR 60.7\
2941 **CCK2 Equivalent:** N/A\
2942 **Preferences Affected:** `extensions.update.enabled`
2943
2944 #### Windows (GPO)
2945 ```
2946 Software\Policies\Mozilla\Firefox\ExtensionUpdate = 0x1 | 0x0
2947 ```
2948 #### Windows (Intune)
2949 OMA-URI:
2950 ```
2951 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/ExtensionUpdate
2952 ```
2953 Value (string):
2954 ```
2955 <enabled/> or <disabled/>
2956 ```
2957 #### macOS
2958 ```
2959 <dict>
2960 <key>ExtensionUpdate</key>
2961 <true/> | <false/>
2962 </dict>
2963 ```
2964 #### policies.json
2965 ```
2966 {
2967 "policies": {
2968 "ExtensionUpdate": true | false
2969 }
2970 }
2971 ```
2972 ### FirefoxHome
2973 Customize the Firefox Home page.
2974
2975 **Compatibility:** Firefox 68, Firefox ESR 68 (SponsoredTopSites and SponsoredPocket were added in Firefox 95, Firefox ESR 91.4)
2976 **CCK2 Equivalent:** N/A\
2977 **Preferences Affected:** `browser.newtabpage.activity-stream.showSearch`, `browser.newtabpage.activity-stream.feeds.topsites`, `browser.newtabpage.activity-stream.feeds.section.highlights`, `browser.newtabpage.activity-stream.feeds.section.topstories`, `browser.newtabpage.activity-stream.feeds.snippets`, `browser.newtabpage.activity-stream.showSponsoredTopSites`, `browser.newtabpage.activity-stream.showSponsored`
2978
2979 #### Windows (GPO)
2980 ```
2981 Software\Policies\Mozilla\Firefox\FirefoxHome\Search = 0x1 | 0x0
2982 Software\Policies\Mozilla\Firefox\FirefoxHome\TopSites = 0x1 | 0x0
2983 Software\Policies\Mozilla\Firefox\FirefoxHome\SponsoredTopSites = 0x1 | 0x0
2984 Software\Policies\Mozilla\Firefox\FirefoxHome\Highlights = 0x1 | 0x0
2985 Software\Policies\Mozilla\Firefox\FirefoxHome\Pocket = 0x1 | 0x0
2986 Software\Policies\Mozilla\Firefox\FirefoxHome\SponsoredPocket = 0x1 | 0x0
2987 Software\Policies\Mozilla\Firefox\FirefoxHome\Snippets = 0x1 | 0x0
2988 Software\Policies\Mozilla\Firefox\FirefoxHome\Locked = 0x1 | 0x0
2989 ```
2990 #### Windows (Intune)
2991 OMA-URI:
2992 ```
2993 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/CustomizeFirefoxHome
2994 ```
2995 Value (string):
2996 ```
2997 <enabled/>
2998 <data id="FirefoxHome_Search" value="true | false"/>
2999 <data id="FirefoxHome_TopSites" value="true | false"/>
3000 <data id="FirefoxHome_SponsoredTopSites" value="true | false"/>
3001 <data id="FirefoxHome_Highlights" value="true | false"/>
3002 <data id="FirefoxHome_Pocket" value="true | false"/>
3003 <data id="FirefoxHome_SponsoredPocket" value="true | false"/>
3004 <data id="FirefoxHome_Snippets" value="true | false"/>
3005 <data id="FirefoxHome_Locked" value="true | false"/>
3006 ```
3007 #### macOS
3008 ```
3009 <dict>
3010 <key>FirefoxHome</key>
3011 <dict>
3012 <key>Search</key>
3013 <true/> | <false/>
3014 <key>TopSites</key>
3015 <true/> | <false/>
3016 <key>SponsoredTopSites</key>
3017 <true/> | <false/>
3018 <key>Highlights</key>
3019 <true/> | <false/>
3020 <key>Pocket</key>
3021 <true/> | <false/>
3022 <key>SponsoredPocket</key>
3023 <true/> | <false/>
3024 <key>Snippets</key>
3025 <true/> | <false/>
3026 <key>Locked</key>
3027 <true/> | <false/>
3028 </dict>
3029 </dict>
3030 ```
3031 #### policies.json
3032 ```
3033 {
3034 "policies": {
3035 "FirefoxHome": {
3036 "Search": true | false,
3037 "TopSites": true | false,
3038 "SponsoredTopSites": true | false,
3039 "Highlights": true | false,
3040 "Pocket": true | false,
3041 "SponsoredPocket": true | false,
3042 "Snippets": true | false,
3043 "Locked": true | false
3044 }
3045 }
3046 }
3047 ```
3048 ### FlashPlugin (Deprecated)
3049 Configure the default Flash plugin policy as well as origins for which Flash is allowed.
3050
3051 `Allow` is a list of origins where Flash are allowed.
3052
3053 `Block` is a list of origins where Flash is not allowed.
3054
3055 `Default` determines whether or not Flash is allowed by default.
3056
3057 `Locked` prevents the user from changing Flash preferences.
3058
3059 **Compatibility:** Firefox 60, Firefox ESR 60\
3060 **CCK2 Equivalent:** `permissions.plugin`\
3061 **Preferences Affected:** `plugin.state.flash`
3062
3063 #### Windows (GPO)
3064 ```
3065 Software\Policies\Mozilla\Firefox\FlashPlugin\Allow\1 = "https://example.org"
3066 Software\Policies\Mozilla\Firefox\FlashPlugin\Block\1 = "https://example.edu"
3067 Software\Policies\Mozilla\Firefox\FlashPlugin\Default = 0x1 | 0x0
3068 Software\Policies\Mozilla\Firefox\FlashPlugin\Locked = 0x1 | 0x0
3069 ```
3070 #### Windows (Intune)
3071 OMA-URI:
3072 ```
3073 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Flash/FlashPlugin_Allow
3074 ```
3075 Value (string):
3076 ```
3077 <enabled/>
3078 <data id="Permissions" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
3079 ```
3080 OMA-URI:
3081 ```
3082 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Flash/FlashPlugin_Locked
3083 ```
3084 Value (string):
3085 ```
3086 <enabled/> or <disabled/>
3087 ```
3088 OMA-URI:
3089 ```
3090 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Flash/FlashPlugin_Default
3091 ```
3092 Value (string):
3093 ```
3094 <enabled/> or <disabled/>
3095 ```
3096 #### macOS
3097 ```
3098 <dict>
3099 <key>FlashPlugin</key>
3100 <dict>
3101 <key>Allow</key>
3102 <array>
3103 <string>http://example.org</string>
3104 </array>
3105 <key>Block</key>
3106 <array>
3107 <string>http://example.edu</string>
3108 </array>
3109 <key>Default</key>
3110 <true/> | <false/>
3111 <key>Locked</key>
3112 <true/> | <false/>
3113 </dict>
3114 </dict>
3115 ```
3116 #### policies.json
3117 ```
3118 {
3119 "policies": {
3120 "FlashPlugin": {
3121 "Allow": ["http://example.org/"],
3122 "Block": ["http://example.edu/"],
3123 "Default": true | false,
3124 "Locked": true | false
3125 }
3126 }
3127 }
3128 ```
3129 ### GoToIntranetSiteForSingleWordEntryInAddressBar
3130 Whether to always go through the DNS server before sending a single word search string to a search engine.
3131
3132 If the site exists, it will navigate to the website. If the intranet responds with a 404, the page will show a 404. If the intranet does not respond, the browser will attempt a search.
3133
3134 The second result in the URL bar will be a search result to allow users to conduct a web search exactly as it was entered.
3135
3136 If instead you would like to enable the ability to have your domain appear as a valid URL and to disallow the browser from ever searching that term using the first result that matches it, add the pref `browser.fixup.domainwhitelist.YOUR_DOMAIN` (where `YOUR_DOMAIN` is the name of the domain you'd like to add), and set the pref to `true`. The URL bar will then suggest `YOUR_DOMAIN` when the user fully types `YOUR_DOMAIN`. If the user attempts to load that domain and it fails to load, it will show an "Unable to connect" error page.
3137
3138 You can also whitelist a domain suffix that is not part of the [Public Suffix List](https://publicsuffix.org/) by adding the pref `browser.fixup.domainsuffixwhitelist.YOUR_DOMAIN_SUFFIX` with a value of `true`.
3139
3140 Additionally, if you want users to see a "Did you mean to go to 'YOUR_DOMAIN'" prompt below the URL bar if they land on a search results page instead of an intranet domain that provides a response, set the pref `browser.urlbar.dnsResolveSingleWordsAfterSearch` to `1`. Enabling this will cause the browser to commit a DNS check after every single word search. If the browser receives a response from the intranet, a prompt will ask the user if they'd like to instead navigate to `YOUR_DOMAIN`. If the user presses the **yes** button, `browser.fixup.domainwhitelist.YOUR_DOMAIN` will be set to `true`.
3141
3142 **Compatibility:** Firefox 104, Firefox ESR 102.2\
3143 **CCK2 Equivalent:** `N/A`\
3144 **Preferences Affected:** `browser.fixup.dns_first_for_single_words`
3145
3146 #### Windows (GPO)
3147 ```
3148 Software\Policies\Mozilla\Firefox\GoToIntranetSiteForSingleWordEntryInAddressBar = 0x1 | 0x0
3149 ```
3150 #### Windows (Intune)
3151 OMA-URI:
3152 ```
3153 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/GoToIntranetSiteForSingleWordEntryInAddressBar
3154 ```
3155 Value (string):
3156 ```
3157 <enabled/> or <disabled/>
3158 ```
3159 #### macOS
3160 ```
3161 <dict>
3162 <key>GoToIntranetSiteForSingleWordEntryInAddressBar</key>
3163 <true/> | <false/>
3164 </dict>
3165 ```
3166 #### policies.json
3167 ```
3168 {
3169 "policies": {
3170 "GoToIntranetSiteForSingleWordEntryInAddressBar": true | false
3171 }
3172 }
3173 ```
3174 ### Handlers
3175 Configure default application handlers. This policy is based on the internal format of `handlers.json`.
3176
3177 You can configure handlers based on a mime type (`mimeTypes`), a file's extension (`extensions`), or a protocol (`schemes`).
3178
3179 Within each handler type, you specify the given mimeType/extension/scheme as a key and use the following subkeys to describe how it is handled.
3180
3181 | Name | Description |
3182 | --- | --- |
3183 | `action`| Can be either `saveToDisk`, `useHelperApp`, `useSystemDefault`.
3184 | `ask` | If `true`, the user is asked if what they want to do with the file. If `false`, the action is taken without user intervention.
3185 | `handlers` | An array of handlers with the first one being the default. If you don't want to have a default handler, use an empty object for the first handler. Choose between path or uriTemplate.
3186 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`name` | The display name of the handler (might not be used).
3187 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`path`| The native path to the executable to be used.
3188 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`uriTemplate`| A url to a web based application handler. The URL must be https and contain a %s to be used for substitution.
3189
3190 **Compatibility:** Firefox 78, Firefox ESR 78\
3191 **CCK2 Equivalent:** N/A\
3192 **Preferences Affected:** N/A
3193
3194 #### Windows (GPO)
3195 Software\Policies\Mozilla\Firefox\Handlers (REG_MULTI_SZ) =
3196 ```
3197 {
3198 "mimeTypes": {
3199 "application/msword": {
3200 "action": "useSystemDefault",
3201 "ask": true | false
3202 }
3203 },
3204 "schemes": {
3205 "mailto": {
3206 "action": "useHelperApp",
3207 "ask": true | false,
3208 "handlers": [{
3209 "name": "Gmail",
3210 "uriTemplate": "https://mail.google.com/mail/?extsrc=mailto&url=%s"
3211 }]
3212 }
3213 },
3214 "extensions": {
3215 "pdf": {
3216 "action": "useHelperApp",
3217 "ask": true | false,
3218 "handlers": [{
3219 "name": "Adobe Acrobat",
3220 "path": "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32.exe"
3221 }]
3222 }
3223 }
3224 }
3225 ```
3226 #### Windows (Intune)
3227 OMA-URI:
3228 ```
3229 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Handlers
3230 ```
3231 Value (string):
3232 ```
3233 <enabled/>
3234 <data id="Handlers" value='
3235 {
3236 "mimeTypes": {
3237 "application/msword": {
3238 "action": "useSystemDefault",
3239 "ask": true | false
3240 }
3241 },
3242 "schemes": {
3243 "mailto": {
3244 "action": "useHelperApp",
3245 "ask": true | false,
3246 "handlers": [{
3247 "name": "Gmail",
3248 "uriTemplate": "https://mail.google.com/mail/?extsrc=mailto&amp;url=%s"
3249 }]
3250 }
3251 },
3252 "extensions": {
3253 "pdf": {
3254 "action": "useHelperApp",
3255 "ask": true | false,
3256 "handlers": [{
3257 "name": "Adobe Acrobat",
3258 "path": "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32.exe"
3259 }]
3260 }
3261 }
3262 }
3263 '/>
3264 ```
3265 #### macOS
3266 ```
3267 <dict>
3268 <key>Handlers</key>
3269 <dict>
3270 <key>mimeTypes</key>
3271 <dict>
3272 <key>application/msword</key>
3273 <dict>
3274 <key>action</key>
3275 <string>useSystemDefault</string>
3276 <key>ask</key>
3277 <true/> | <false/>
3278 </dict>
3279 </dict>
3280 <key>schemes</key>
3281 <dict>
3282 <key>mailto</key>
3283 <dict>
3284 <key>action</key>
3285 <string>useHelperApp</string>
3286 <key>ask</key>
3287 <true/> | <false/>
3288 <key>handlers</key>
3289 <array>
3290 <dict>
3291 <key>name</key>
3292 <string>Gmail</string>
3293 <key>uriTemplate</key>
3294 <string>https://mail.google.com/mail/?extsrc=mailto&url=%s</string>
3295 </dict>
3296 </array>
3297 </dict>
3298 </dict>
3299 <key>extensions</key>
3300 <dict>
3301 <key>pdf</key>
3302 <dict>
3303 <key>action</key>
3304 <string>useHelperApp</string>
3305 <key>ask</key>
3306 <true/> | <false/>
3307 <key>handlers</key>
3308 <array>
3309 <dict>
3310 <key>name</key>
3311 <string>Adobe Acrobat</string>
3312 <key>path</key>
3313 <string>/System/Applications/Preview.app</string>
3314 </dict>
3315 </array>
3316 </dict>
3317 </dict>
3318 </dict>
3319 </dict>
3320 ```
3321 #### policies.json
3322 ```
3323 {
3324 "policies": {
3325 "Handlers": {
3326 "mimeTypes": {
3327 "application/msword": {
3328 "action": "useSystemDefault",
3329 "ask": false
3330 }
3331 },
3332 "schemes": {
3333 "mailto": {
3334 "action": "useHelperApp",
3335 "ask": true | false,
3336 "handlers": [{
3337 "name": "Gmail",
3338 "uriTemplate": "https://mail.google.com/mail/?extsrc=mailto&url=%s"
3339 }]
3340 }
3341 },
3342 "extensions": {
3343 "pdf": {
3344 "action": "useHelperApp",
3345 "ask": true | false,
3346 "handlers": [{
3347 "name": "Adobe Acrobat",
3348 "path": "/usr/bin/acroread"
3349 }]
3350 }
3351 }
3352 }
3353 }
3354 }
3355 ```
3356 ### HardwareAcceleration
3357 Control hardware acceleration.
3358
3359 **Compatibility:** Firefox 60, Firefox ESR 60\
3360 **CCK2 Equivalent:** N/A\
3361 **Preferences Affected:** `layers.acceleration.disabled`
3362
3363 #### Windows (GPO)
3364 ```
3365 Software\Policies\Mozilla\Firefox\HardwareAcceleration = 0x1 | 0x0
3366 ```
3367 #### Windows (Intune)
3368 OMA-URI:
3369 ```
3370 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/HardwareAcceleration
3371 ```
3372 Value (string):
3373 ```
3374 <enabled/> or <disabled/>
3375 ```
3376 #### macOS
3377 ```
3378 <dict>
3379 <key>HardwareAcceleration</key>
3380 <true/> | <false/>
3381 </dict>
3382 ```
3383 #### policies.json
3384 ```
3385 {
3386 "policies": {
3387 "HardwareAcceleration": true | false
3388 }
3389 }
3390 ```
3391 ### Homepage
3392 Configure the default homepage and how Firefox starts.
3393
3394 `URL` is the default homepage.
3395
3396 `Locked` prevents the user from changing homepage preferences.
3397
3398 `Additional` allows for more than one homepage.
3399
3400 `StartPage` is how Firefox starts. The choices are no homepage, the default homepage or the previous session.
3401
3402 With Firefox 78, an additional option as added for `Startpage`, `homepage-locked`. If this is value is set for the Startpage, the user will always get the homepage at startup and cannot choose to restore their session.
3403
3404 **Compatibility:** Firefox 60, Firefox ESR 60 (StartPage was added in Firefox 60, Firefox ESR 60.4, homepage-locked added in Firefox 78)\
3405 **CCK2 Equivalent:** `homePage`,`lockHomePage`\
3406 **Preferences Affected:** `browser.startup.homepage`, `browser.startup.page`
3407
3408 #### Windows (GPO)
3409 ```
3410 Software\Policies\Mozilla\Firefox\Homepage\URL = "https://example.com"
3411 Software\Policies\Mozilla\Firefox\Homepage\Locked = 0x1 | 0x0
3412 Software\Policies\Mozilla\Firefox\Homepage\Additional\1 = "https://example.org"
3413 Software\Policies\Mozilla\Firefox\Homepage\Additional\2 = "https://example.edu"
3414 Software\Policies\Mozilla\Firefox\Homepage\StartPage = "none" | "homepage" | "previous-session" | "homepage-locked"
3415 ```
3416 #### Windows (Intune)
3417 OMA-URI:
3418 ```
3419 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageURL
3420 ```
3421 Value (string):
3422 ```
3423 <enabled/>
3424
3425 <data id="HomepageURL" value="https://example.com"/>
3426 <data id="HomepageLocked" value="true | false"/>
3427 ```
3428 OMA-URI:
3429 ```
3430 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageAdditional
3431 ```
3432 Value (string):
3433 ```
3434 <enabled/>
3435
3436 <data id="HomepageAdditional" value="1&#xF000;http://example.org&#xF000;2&#xF000;http://example.edu"/>
3437 ```
3438 OMA-URI:
3439 ```
3440 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageStartPage
3441 ```
3442 Value (string):
3443 ```
3444 <enabled/>
3445
3446 <data id="StartPage" value="none | homepage | previous-session"/>
3447 ```
3448 #### macOS
3449 ```
3450 <dict>
3451 <key>Homepage</key>
3452 <dict>
3453 <key>URL</key>
3454 <string>http://example.com</string>
3455 <key>Locked</key>
3456 <true/> | <false/>
3457 <key>Additional</key>
3458 <array>
3459 <string>http://example.org</string>
3460 <string>http://example.edu</string>
3461 </array>
3462 <key>StartPage</key>
3463 <string>none | homepage | previous-session | homepage-locked</string>
3464 </dict>
3465 </dict>
3466 ```
3467 #### policies.json
3468 ```
3469 {
3470 "policies": {
3471 "Homepage": {
3472 "URL": "http://example.com/",
3473 "Locked": true | false,
3474 "Additional": ["http://example.org/",
3475 "http://example.edu/"],
3476 "StartPage": "none" | "homepage" | "previous-session" | "homepage-locked"
3477 }
3478 }
3479 }
3480 ```
3481 ### InstallAddonsPermission
3482 Configure the default extension install policy as well as origins for extension installs are allowed. This policy does not override turning off all extension installs.
3483
3484 `Allow` is a list of origins where extension installs are allowed.
3485
3486 `Default` determines whether or not extension installs are allowed by default.
3487
3488 **Compatibility:** Firefox 60, Firefox ESR 60\
3489 **CCK2 Equivalent:** `permissions.install`\
3490 **Preferences Affected:** `xpinstall.enabled`
3491
3492 #### Windows (GPO)
3493 ```
3494 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Allow\1 = "https://example.org"
3495 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Allow\2 = "https://example.edu"
3496 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Default = 0x1 | 0x0
3497 ```
3498 #### Windows (Intune)
3499 OMA-URI:
3500 ```
3501 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Addons/InstallAddonsPermission_Allow
3502 ```
3503 Value (string):
3504 ```
3505 <enabled/>
3506 <data id="Permissions" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
3507 ```
3508 OMA-URI:
3509 ```
3510 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Addons/InstallAddonsPermission_Default
3511 ```
3512 Value (string):
3513 ```
3514 <enabled/>
3515 ```
3516 #### macOS
3517 ```
3518 <dict>
3519 <key>InstallAddonsPermission</key>
3520 <dict>
3521 <key>Allow</key>
3522 <array>
3523 <string>http://example.org</string>
3524 <string>http://example.edu</string>
3525 </array>
3526 <key>Default</key>
3527 <true/> | <false/>
3528 </dict>
3529 </dict>
3530 ```
3531 #### policies.json
3532 ```
3533 {
3534 "policies": {
3535 "InstallAddonsPermission": {
3536 "Allow": ["http://example.org/",
3537 "http://example.edu/"],
3538 "Default": true | false
3539 }
3540 }
3541 }
3542 ```
3543 ### LegacyProfiles
3544 Disable the feature enforcing a separate profile for each installation.
3545
3546 If this policy set to true, Firefox will not try to create different profiles for installations of Firefox in different directories. This is the equivalent of the MOZ_LEGACY_PROFILES environment variable.
3547
3548 If this policy set to false, Firefox will create a new profile for each unique installation of Firefox.
3549
3550 This policy only work on Windows via GPO (not policies.json).
3551
3552 **Compatibility:** Firefox 70, Firefox ESR 68.2 (Windows only, GPO only)\
3553 **CCK2 Equivalent:** N/A\
3554 **Preferences Affected:** N/A
3555
3556 #### Windows (GPO)
3557 ```
3558 Software\Policies\Mozilla\Firefox\LegacyProfiles = = 0x1 | 0x0
3559 ```
3560 #### Windows (Intune)
3561 OMA-URI:
3562 ```
3563 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/LegacyProfiles
3564 ```
3565 Value (string):
3566 ```
3567 <enabled/> or <disabled/>
3568 ```
3569 ### LegacySameSiteCookieBehaviorEnabled
3570 Enable default legacy SameSite cookie behavior setting.
3571
3572 If this policy is set to true, it reverts all cookies to legacy SameSite behavior which means that cookies that don't explicitly specify a ```SameSite``` attribute are treated as if they were ```SameSite=None```.
3573
3574 **Compatibility:** Firefox 96\
3575 **CCK2 Equivalent:** N/A\
3576 **Preferences Affected:** `network.cookie.sameSite.laxByDefault`
3577
3578 #### Windows (GPO)
3579 ```
3580 Software\Policies\Mozilla\Firefox\LegacySameSiteCookieBehaviorEnabled = = 0x1 | 0x0
3581 ```
3582 #### Windows (Intune)
3583 OMA-URI:
3584 ```
3585 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/LegacySameSiteCookieBehaviorEnabled
3586 ```
3587 Value (string):
3588 ```
3589 <enabled/> or <disabled/>
3590 ```
3591 #### macOS
3592 ```
3593 <dict>
3594 <key>LegacySameSiteCookieBehaviorEnabled</key>
3595 <true/> | <false/>
3596 </dict>
3597 ```
3598 #### policies.json
3599 ```
3600 {
3601 "policies": {
3602 "LegacySameSiteCookieBehaviorEnabled": true | false
3603 }
3604 ```
3605 ### LegacySameSiteCookieBehaviorEnabledForDomainList
3606 Revert to legacy SameSite behavior for cookies on specified sites.
3607
3608 If this policy is set to true, cookies set for domains in this list will revert to legacy SameSite behavior which means that cookies that don't explicitly specify a ```SameSite``` attribute are treated as if they were ```SameSite=None```.
3609
3610 **Compatibility:** Firefox 96\
3611 **CCK2 Equivalent:** N/A\
3612 **Preferences Affected:** `network.cookie.sameSite.laxByDefault.disabledHosts`
3613
3614 #### Windows (GPO)
3615 ```
3616 Software\Policies\Mozilla\Firefox\LegacySameSiteCookieBehaviorEnabledForDomainList\1 = "example.org"
3617 Software\Policies\Mozilla\Firefox\LegacySameSiteCookieBehaviorEnabledForDomainList\2 = "example.edu"
3618 ```
3619 #### Windows (Intune)
3620 OMA-URI:
3621 ```
3622 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/LegacySameSiteCookieBehaviorEnabledForDomainList
3623 ```
3624 Value (string):
3625 ```
3626 <enabled/>
3627 <data id="LegacySameSiteCookieBehaviorEnabledForDomainList" value="1&#xF000;example.org&#xF000;2&#xF000;example.edu"/>
3628 ```
3629 #### macOS
3630 ```
3631 <dict>
3632 <key>LegacySameSiteCookieBehaviorEnabledForDomainList</key>
3633 <array>
3634 <string>example.org</string>
3635 <string>example.edu</string>
3636 </array>
3637 </dict>
3638 ```
3639 #### policies.json
3640 ```
3641 {
3642 "policies": {
3643 "LegacySameSiteCookieBehaviorEnabledForDomainList": ["example.org",
3644 "example.edu"]
3645 }
3646 }
3647 ```
3648 ### LocalFileLinks
3649 Enable linking to local files by origin.
3650
3651 **Compatibility:** Firefox 68, Firefox ESR 68\
3652 **CCK2 Equivalent:** N/A\
3653 **Preferences Affected:** `capability.policy.localfilelinks.*`
3654
3655 #### Windows (GPO)
3656 ```
3657 Software\Policies\Mozilla\Firefox\LocalFileLinks\1 = "https://example.org"
3658 Software\Policies\Mozilla\Firefox\LocalFileLinks\2 = "https://example.edu"
3659 ```
3660 #### Windows (Intune)
3661 OMA-URI:
3662 ```
3663 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/LocalFileLinks
3664 ```
3665 Value (string):
3666 ```
3667 <enabled/>
3668 <data id="LocalFileLinks" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
3669 ```
3670 #### macOS
3671 ```
3672 <dict>
3673 <key>LocalFileLinks</key>
3674 <array>
3675 <string>http://example.org</string>
3676 <string>http://example.edu</string>
3677 </array>
3678 </dict>
3679 ```
3680 #### policies.json
3681 ```
3682 {
3683 "policies": {
3684 "LocalFileLinks": ["http://example.org/",
3685 "http://example.edu/"]
3686 }
3687 }
3688 ```
3689 ### ManagedBookmarks
3690 Configures a list of bookmarks managed by an administrator that cannot be changed by the user.
3691
3692 The bookmarks are only added as a button on the personal toolbar. They are not in the bookmarks folder.
3693
3694 The syntax of this policy is exactly the same as the [Chrome ManagedBookmarks policy](https://cloud.google.com/docs/chrome-enterprise/policies/?policy=ManagedBookmarks). The schema is:
3695 ```
3696 {
3697 "items": {
3698 "id": "BookmarkType",
3699 "properties": {
3700 "children": {
3701 "items": {
3702 "$ref": "BookmarkType"
3703 },
3704 "type": "array"
3705 },
3706 "name": {
3707 "type": "string"
3708 },
3709 "toplevel_name": {
3710 "type": "string"
3711 },
3712 "url": {
3713 "type": "string"
3714 }
3715 },
3716 "type": "object"
3717 },
3718 "type": "array"
3719 }
3720 ```
3721 **Compatibility:** Firefox 83, Firefox ESR 78.5\
3722 **CCK2 Equivalent:** N/A\
3723 **Preferences Affected:** N/A
3724
3725 #### Windows (GPO)
3726 Software\Policies\Mozilla\Firefox\ManagedBookmarks (REG_MULTI_SZ) =
3727 ```
3728 [
3729 {
3730 "toplevel_name": "My managed bookmarks folder"
3731 },
3732 {
3733 "url": "example.com",
3734 "name": "Example"
3735 },
3736 {
3737 "name": "Mozilla links",
3738 "children": [
3739 {
3740 "url": "https://mozilla.org",
3741 "name": "Mozilla.org"
3742 },
3743 {
3744 "url": "https://support.mozilla.org/",
3745 "name": "SUMO"
3746 }
3747 ]
3748 }
3749 ]
3750 ```
3751 #### Windows (Intune)
3752 OMA-URI:
3753 ```
3754 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/ManagedBookmarks
3755 ```
3756 Value (string):
3757 ```
3758 <enabled/>
3759 <data id="JSON" value='
3760 [
3761 {
3762 "toplevel_name": "My managed bookmarks folder"
3763 },
3764 {
3765 "url": "example.com",
3766 "name": "Example"
3767 },
3768 {
3769 "name": "Mozilla links",
3770 "children": [
3771 {
3772 "url": "https://mozilla.org",
3773 "name": "Mozilla.org"
3774 },
3775 {
3776 "url": "https://support.mozilla.org/",
3777 "name": "SUMO"
3778 }
3779 ]
3780 }
3781 ]'/>
3782 ```
3783 #### macOS
3784 ```
3785 <dict>
3786 <key>ManagedBookmarks</key>
3787 <array>
3788 <dict>
3789 <key>toplevel_name</key>
3790 <string>My managed bookmarks folder</string>
3791 <dict>
3792 <key>url</key>
3793 <string>example.com</string>
3794 <key>name</key>
3795 <string>Example</string>
3796 </dict>
3797 <dict>
3798 <key>name</key>
3799 <string>Mozilla links</string>
3800 <key>children</key>
3801 <array>
3802 <dict>
3803 <key>url</key>
3804 <string>https://mozilla.org</string>
3805 <key>name</key>
3806 <string>Mozilla</string>
3807 </dict>
3808 <dict>
3809 <key>url</key>
3810 <string>https://support.mozilla.org/</string>
3811 <key>name</key>
3812 <string>SUMO</string>
3813 </dict>
3814 </array>
3815 </dict>
3816 </array>
3817 </dict>
3818 ```
3819 #### policies.json
3820 ```
3821 {
3822 "policies": {
3823 "ManagedBookmarks": [
3824 {
3825 "toplevel_name": "My managed bookmarks folder"
3826 },
3827 {
3828 "url": "example.com",
3829 "name": "Example"
3830 },
3831 {
3832 "name": "Mozilla links",
3833 "children": [
3834 {
3835 "url": "https://mozilla.org",
3836 "name": "Mozilla.org"
3837 },
3838 {
3839 "url": "https://support.mozilla.org/",
3840 "name": "SUMO"
3841 }
3842 ]
3843 }
3844 ]
3845 }
3846 }
3847 ```
3848 ### ManualAppUpdateOnly
3849
3850 Switch to manual updates only.
3851
3852 If this policy is enabled:
3853 1. The user will never be prompted to install updates
3854 2. Firefox will not check for updates in the background, though it will check automatically when an update UI is displayed (such as the one in the About dialog). This check will be used to show "Update to version X" in the UI, but will not automatically download the update or prompt the user to update in any other way.
3855 3. The update UI will work as expected, unlike when using DisableAppUpdate.
3856
3857 This policy is primarily intended for advanced end users, not for enterprises.
3858
3859 **Compatibility:** Firefox 87\
3860 **CCK2 Equivalent:** N/A\
3861 **Preferences Affected:** N/A
3862
3863 #### policies.json
3864 ```
3865 {
3866 "policies": {
3867 "ManualAppUpdateOnly": true | false
3868 }
3869 }
3870 ```
3871 ### NetworkPrediction
3872 Enable or disable network prediction (DNS prefetching).
3873
3874 **Compatibility:** Firefox 67, Firefox ESR 60.7\
3875 **CCK2 Equivalent:** N/A\
3876 **Preferences Affected:** `network.dns.disablePrefetch`, `network.dns.disablePrefetchFromHTTPS`
3877
3878 #### Windows (GPO)
3879 ```
3880 Software\Policies\Mozilla\Firefox\NetworkPrediction = 0x1 | 0x0
3881 ```
3882 #### Windows (Intune)
3883 OMA-URI:
3884 ```
3885 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NetworkPrediction
3886 ```
3887 Value (string):
3888 ```
3889 <enabled/> or <disabled/>
3890 ```
3891 #### macOS
3892 ```
3893 <dict>
3894 <key>NetworkPrediction</key>
3895 <true/> | <false/>
3896 </dict>
3897 ```
3898 #### policies.json
3899 ```
3900 {
3901 "policies": {
3902 "NetworkPrediction": true | false
3903 }
3904 ```
3905 ### NewTabPage
3906 Enable or disable the New Tab page.
3907
3908 **Compatibility:** Firefox 68, Firefox ESR 68\
3909 **CCK2 Equivalent:** N/A\
3910 **Preferences Affected:** `browser.newtabpage.enabled`
3911
3912 #### Windows (GPO)
3913 ```
3914 Software\Policies\Mozilla\Firefox\NewTabPage = 0x1 | 0x0
3915 ```
3916 #### Windows (Intune)
3917 OMA-URI:
3918 ```
3919 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NewTabPage
3920 ```
3921 Value (string):
3922 ```
3923 <enabled/> or <disabled/>
3924 ```
3925 #### macOS
3926 ```
3927 <dict>
3928 <key>NewTabPage</key>
3929 <true/> | <false/>
3930 </dict>
3931 ```
3932 #### policies.json
3933 ```
3934 {
3935 "policies": {
3936 "NewTabPage": true | false
3937 }
3938 ```
3939 ### NoDefaultBookmarks
3940 Disable the creation of default bookmarks.
3941
3942 This policy is only effective if the user profile has not been created yet.
3943
3944 **Compatibility:** Firefox 60, Firefox ESR 60\
3945 **CCK2 Equivalent:** `removeDefaultBookmarks`\
3946 **Preferences Affected:** N/A
3947
3948 #### Windows (GPO)
3949 ```
3950 Software\Policies\Mozilla\Firefox\NoDefaultBookmarks = 0x1 | 0x0
3951 ```
3952 #### Windows (Intune)
3953 OMA-URI:
3954 ```
3955 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NoDefaultBookmarks
3956 ```
3957 Value (string):
3958 ```
3959 <enabled/> or <disabled/>
3960 ```
3961 #### macOS
3962 ```
3963 <dict>
3964 <key>NoDefaultBookmarks</key>
3965 <true/> | <false/>
3966 </dict>
3967 ```
3968 #### policies.json
3969 ```
3970 {
3971 "policies": {
3972 "NoDefaultBookmarks": true | false
3973 }
3974 }
3975 ```
3976 ### OfferToSaveLogins
3977 Control whether or not Firefox offers to save passwords.
3978
3979 **Compatibility:** Firefox 60, Firefox ESR 60\
3980 **CCK2 Equivalent:** `dontRememberPasswords`\
3981 **Preferences Affected:** `signon.rememberSignons`
3982
3983 #### Windows (GPO)
3984 ```
3985 Software\Policies\Mozilla\Firefox\OfferToSaveLogins = 0x1 | 0x0
3986 ```
3987 #### Windows (Intune)
3988 OMA-URI:
3989 ```
3990 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OfferToSaveLogins
3991 ```
3992 Value (string):
3993 ```
3994 <enabled/> or <disabled/>
3995 ```
3996 #### macOS
3997 ```
3998 <dict>
3999 <key>OfferToSaveLogins</key>
4000 <true/> | <false/>
4001 </dict>
4002 ```
4003 #### policies.json
4004 ```
4005 {
4006 "policies": {
4007 "OfferToSaveLogins": true | false
4008 }
4009 }
4010 ```
4011 ### OfferToSaveLoginsDefault
4012 Sets the default value of signon.rememberSignons without locking it.
4013
4014 **Compatibility:** Firefox 70, Firefox ESR 60.2\
4015 **CCK2 Equivalent:** `dontRememberPasswords`\
4016 **Preferences Affected:** `signon.rememberSignons`
4017
4018 #### Windows (GPO)
4019 ```
4020 Software\Policies\Mozilla\Firefox\OfferToSaveLoginsDefault = 0x1 | 0x0
4021 ```
4022 #### Windows (Intune)
4023 OMA-URI:
4024 ```
4025 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OfferToSaveLoginsDefault
4026 ```
4027 Value (string):
4028 ```
4029 <enabled/> or <disabled/>
4030 ```
4031 #### macOS
4032 ```
4033 <dict>
4034 <key>OfferToSaveLoginsDefault</key>
4035 <true/> | <false/>
4036 </dict>
4037 ```
4038 #### policies.json
4039 ```
4040 {
4041 "policies": {
4042 "OfferToSaveLoginsDefault": true | false
4043 }
4044 }
4045 ```
4046 ### OverrideFirstRunPage
4047 Override the first run page. If the value is an empty string (""), the first run page is not displayed.
4048
4049 Starting with Firefox 83, Firefox ESR 78.5, you can also specify multiple URLS separated by a vertical bar (|).
4050
4051 **Compatibility:** Firefox 60, Firefox ESR 60\
4052 **CCK2 Equivalent:** `welcomePage`,`noWelcomePage`\
4053 **Preferences Affected:** `startup.homepage_welcome_url`
4054
4055 #### Windows (GPO)
4056 ```
4057 Software\Policies\Mozilla\Firefox\OverrideFirstRunPage = "http://example.org"
4058 ```
4059 #### Windows (Intune)
4060 OMA-URI:
4061 ```
4062 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OverrideFirstRunPage
4063 ```
4064 Value (string):
4065 ```
4066 <enabled/>
4067 <data id="OverridePage" value="https://example.com"/>
4068 ```
4069 #### macOS
4070 ```
4071 <dict>
4072 <key>OverrideFirstRunPage</key>
4073 <string>http://example.org</string>
4074 </dict>
4075 ```
4076 #### policies.json
4077 ```
4078 {
4079 "policies": {
4080 "OverrideFirstRunPage": "http://example.org"
4081 }
4082 }
4083 ```
4084 ### OverridePostUpdatePage
4085 Override the upgrade page. If the value is an empty string (""), no extra pages are displayed when Firefox is upgraded.
4086
4087 **Compatibility:** Firefox 60, Firefox ESR 60\
4088 **CCK2 Equivalent:** `upgradePage`,`noUpgradePage`\
4089 **Preferences Affected:** `startup.homepage_override_url`
4090
4091 #### Windows (GPO)
4092 ```
4093 Software\Policies\Mozilla\Firefox\OverridePostUpdatePage = "http://example.org"
4094 ```
4095 #### Windows (Intune)
4096 OMA-URI:
4097 ```
4098 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OverridePostUpdatePage
4099 ```
4100 Value (string):
4101 ```
4102 <enabled/>
4103 <data id="OverridePage" value="https://example.com"/>
4104 ```
4105 #### macOS
4106 ```
4107 <dict>
4108 <key>OverridePostUpdatePage</key>
4109 <string>http://example.org</string>
4110 </dict>
4111 ```
4112 #### policies.json
4113 ```
4114 {
4115 "policies": {
4116 "OverridePostUpdatePage": "http://example.org"
4117 }
4118 }
4119 ```
4120 ### PasswordManagerEnabled
4121 Remove access to the password manager via preferences and blocks about:logins on Firefox 70.
4122
4123 **Compatibility:** Firefox 70, Firefox ESR 60.2\
4124 **CCK2 Equivalent:** N/A\
4125 **Preferences Affected:** `pref.privacy.disable_button.view_passwords`
4126
4127 #### Windows (GPO)
4128 ```
4129 Software\Policies\Mozilla\Firefox\PasswordManagerEnabled = 0x1 | 0x0
4130 ```
4131 #### Windows (Intune)
4132 OMA-URI:
4133 ```
4134 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PasswordManagerEnabled
4135 ```
4136 Value (string):
4137 ```
4138 <enabled/> or <disabled/>
4139 ```
4140 #### macOS
4141 ```
4142 <dict>
4143 <key>PasswordManagerEnabled</key>
4144 <true/> | <false/>
4145 </dict>
4146 ```
4147 #### policies.json
4148 ```
4149 {
4150 "policies": {
4151 "PasswordManagerEnabled": true | false
4152 }
4153 }
4154 ```
4155 ### PasswordManagerExceptions
4156 Prevent Firefox from saving passwords for specific sites.
4157
4158 The sites are specified as a list of origins.
4159
4160 **Compatibility:** Firefox 101\
4161 **CCK2 Equivalent:** N/A\
4162 **Preferences Affected:** N/A
4163
4164 #### Windows (GPO)
4165 ```
4166 Software\Policies\Mozilla\Firefox\PasswordManagerExceptions\1 = "https://example.org"
4167 Software\Policies\Mozilla\Firefox\PasswordManagerExceptions\2 = "https://example.edu"
4168 ```
4169 #### Windows (Intune)
4170 OMA-URI:
4171 ```
4172 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PasswordManagerExceptions
4173 ```
4174 Value (string):
4175 ```
4176 <enabled/>
4177 <data id="List" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
4178 ```
4179 #### macOS
4180 ```
4181 <dict>
4182 <key>PasswordManagerExceptions</key>
4183 <array>
4184 <string>https://example.org</string>
4185 <string>https://example.edu</string>
4186 </array>
4187 </dict>
4188 ```
4189 #### policies.json
4190 ```
4191 {
4192 "policies": {
4193 "PasswordManagerExceptions": ["https://example.org",
4194 "https://example.edu"]
4195 }
4196 }
4197 ```
4198
4199 ### PDFjs
4200 Disable or configure PDF.js, the built-in PDF viewer.
4201
4202 If `Enabled` is set to false, the built-in PDF viewer is disabled.
4203
4204 If `EnablePermissions` is set to true, the built-in PDF viewer will honor document permissions like preventing the copying of text.
4205
4206 Note: DisableBuiltinPDFViewer has not been deprecated. You can either continue to use it, or switch to using PDFjs->Enabled to disable the built-in PDF viewer. This new permission was added because we needed a place for PDFjs->EnabledPermissions.
4207
4208 **Compatibility:** Firefox 77, Firefox ESR 68.9\
4209 **CCK2 Equivalent:** N/A\
4210 **Preferences Affected:** `pdfjs.diabled`, `pdfjs.enablePermissions`
4211
4212 #### Windows (GPO)
4213 ```
4214 Software\Policies\Mozilla\Firefox\PDFjs\Enabled = 0x1 | 0x0
4215 Software\Policies\Mozilla\Firefox\PDFjs\EnablePermissions = 0x1 | 0x0
4216 ```
4217 #### Windows (Intune)
4218 OMA-URI:
4219 ```
4220 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PDFjs/PDFjs_Enabled
4221 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PDFjs/PDFjs_EnablePermissions
4222 ```
4223 Value (string):
4224 ```
4225 <enabled/>or <disabled/>
4226 ```
4227 #### macOS
4228 ```
4229 <dict>
4230 <key>PDFjs</key>
4231 <dict>
4232 <key>Enabled</key>
4233 <true/> | <false/>
4234 <key>EnablePermissions</key>
4235 <true/> | <false/>
4236 </dict>
4237 </dict>
4238 ```
4239 #### policies.json
4240 ```
4241 {
4242 "policies": {
4243 "PDFjs": {
4244 "Enabled": true | false,
4245 "EnablePermissions": true | false
4246 }
4247 }
4248 }
4249 ```
4250 ### Permissions
4251 Set permissions associated with camera, microphone, location, notifications, autoplay, and virtual reality. Because these are origins, not domains, entries with unique ports must be specified separately. This explicitly means that it is not possible to add wildcards. See examples below.
4252
4253 `Allow` is a list of origins where the feature is allowed.
4254
4255 `Block` is a list of origins where the feature is not allowed.
4256
4257 `BlockNewRequests` determines whether or not new requests can be made for the feature.
4258
4259 `Locked` prevents the user from changing preferences for the feature.
4260
4261 `Default` specifies the default value for Autoplay. block-audio-video is not supported on Firefox ESR 68.
4262
4263 **Compatibility:** Firefox 62, Firefox ESR 60.2 (Autoplay added in Firefox 74, Firefox ESR 68.6, Autoplay Default/Locked added in Firefox 76, Firefox ESR 68.8, VirtualReality added in Firefox 80, Firefox ESR 78.2)\
4264 **CCK2 Equivalent:** N/A\
4265 **Preferences Affected:** `permissions.default.camera`, `permissions.default.microphone`, `permissions.default.geo`, `permissions.default.desktop-notification`, `media.autoplay.default`, `permissions.default.xr`
4266
4267 #### Windows (GPO)
4268 ```
4269 Software\Policies\Mozilla\Firefox\Permissions\Camera\Allow\1 = "https://example.org"
4270 Software\Policies\Mozilla\Firefox\Permissions\Camera\Allow\2 = "https://example.org:1234"
4271 Software\Policies\Mozilla\Firefox\Permissions\Camera\Block\1 = "https://example.edu"
4272 Software\Policies\Mozilla\Firefox\Permissions\Camera\BlockNewRequests = 0x1 | 0x0
4273 Software\Policies\Mozilla\Firefox\Permissions\Camera\Locked = 0x1 | 0x0
4274 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Allow\1 = "https://example.org"
4275 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Block\1 = "https://example.edu"
4276 Software\Policies\Mozilla\Firefox\Permissions\Microphone\BlockNewRequests = 0x1 | 0x0
4277 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Locked = 0x1 | 0x0
4278 Software\Policies\Mozilla\Firefox\Permissions\Location\Allow\1 = "https://example.org"
4279 Software\Policies\Mozilla\Firefox\Permissions\Location\Block\1 = "https://example.edu"
4280 Software\Policies\Mozilla\Firefox\Permissions\Location\BlockNewRequests = 0x1 | 0x0
4281 Software\Policies\Mozilla\Firefox\Permissions\Location\Locked = 0x1 | 0x0
4282 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Allow\1 = "https://example.org"
4283 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Block\1 = "https://example.edu"
4284 Software\Policies\Mozilla\Firefox\Permissions\Notifications\BlockNewRequests = 0x1 | 0x0
4285 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Locked = 0x1 | 0x0
4286 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Allow\1 = "https://example.org"
4287 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Block\1 = "https://example.edu"
4288 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Default = "allow-audio-video" | "block-audio" | "block-audio-video"
4289 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Locked = 0x1 | 0x0
4290 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\Allow\1 = "https://example.org"
4291 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\Block\1 = "https://example.edu"
4292 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\BlockNewRequests = 0x1 | 0x0
4293 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\Locked = 0x1 | 0x0
4294 ```
4295 #### Windows (Intune)
4296 OMA-URI:
4297 ```
4298 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Location/Location_BlockNewRequests
4299 ```
4300 Value (string):
4301 ```
4302 <enabled/> or <disabled/>
4303 ```
4304 OMA-URI:
4305 ```
4306 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Location/Location_Locked
4307 ```
4308 Value (string):
4309 ```
4310 <enabled/> or <disabled/>
4311 ```
4312 OMA-URI:
4313 ```
4314 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_Allow
4315 ```
4316 Value (string):
4317 ```
4318 <enabled/>
4319 <data id="Permissions" value="1&#xF000;https://example.org"/>
4320 ```
4321 OMA-URI:
4322 ```
4323 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_BlockNewRequests
4324 ```
4325 Value (string):
4326 ```
4327 <enabled/> or <disabled/>
4328 ```
4329 OMA-URI:
4330 ```
4331 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_Locked
4332 ```
4333 Value (string):
4334 ```
4335 <enabled/> or <disabled/>
4336 ```
4337 OMA-URI:
4338 ```
4339 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Allow
4340 ```
4341 Value (string):
4342 ```
4343 <enabled/>
4344 <data id="Permissions" value="1&#xF000;https://example.org"/>
4345 ```
4346 OMA-URI:
4347 ```
4348 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Block
4349 ```
4350 Value (string):
4351 ```
4352 <enabled/>
4353 <data id="Permissions" value="1&#xF000;https://example.edu"/>
4354 ```
4355 OMA-URI:
4356 ```
4357 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Default
4358 ```
4359 Value (string):
4360 ```
4361 <enabled/>
4362 <data id="Autoplay_Default" value="allow-audio-video | block-audio | block-audio-video"/>
4363 ```
4364 OMA-URI:
4365 ```
4366 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Locked
4367 ```
4368 Value (string):
4369 ```
4370 <enabled/> or <disabled/>
4371 ```
4372 OMA-URI:
4373 ```
4374 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_Allow
4375 ```
4376 Value (string):
4377 ```
4378 <enabled/>
4379 <data id="Permissions" value="1&#xF000;https://example.org"/>
4380 ```
4381 OMA-URI:
4382 ```
4383 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_Block
4384 ```
4385 Value (string):
4386 ```
4387 <enabled/>
4388 <data id="Permissions" value="1&#xF000;https://example.edu"/>
4389 ```
4390 OMA-URI:
4391 ```
4392 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_BlockNewRequests
4393 ```
4394 Value (string):
4395 ```
4396 <enabled/> or <disabled/>
4397 ```
4398 OMA-URI:
4399 ```
4400 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_Locked
4401 ```
4402 Value (string):
4403 ```
4404 <enabled/> or <disabled/>
4405 ```
4406 #### macOS
4407 ```
4408 <dict>
4409 <key>Permissions</key>
4410 <dict>
4411 <key>Camera</key>
4412 <dict>
4413 <key>Allow</key>
4414 <array>
4415 <string>https://example.org</string>
4416 <string>https://example.org:1234</string>
4417 </array>
4418 <key>Block</key>
4419 <array>
4420 <string>https://example.edu</string>
4421 </array>
4422 <key>BlockNewRequests</key>
4423 <true/> | <false/>
4424 <key>Locked</key>
4425 <true/> | <false/>
4426 </dict>
4427 <key>Microphone</key>
4428 <dict>
4429 <key>Allow</key>
4430 <array>
4431 <string>https://example.org</string>
4432 </array>
4433 <key>Block</key>
4434 <array>
4435 <string>https://example.edu</string>
4436 </array>
4437 <key>BlockNewRequests</key>
4438 <true/> | <false/>
4439 <key>Locked</key>
4440 <true/> | <false/>
4441 </dict>
4442 <key>Location</key>
4443 <dict>
4444 <key>Allow</key>
4445 <array>
4446 <string>https://example.org</string>
4447 </array>
4448 <key>Block</key>
4449 <array>
4450 <string>https://example.edu</string>
4451 </array>
4452 <key>BlockNewRequests</key>
4453 <true/> | <false/>
4454 <key>Locked</key>
4455 <true/> | <false/>
4456 </dict>
4457 <key>Notifications</key>
4458 <dict>
4459 <key>Allow</key>
4460 <array>
4461 <string>https://example.org</string>
4462 </array>
4463 <key>Block</key>
4464 <array>
4465 <string>https://example.edu</string>
4466 </array>
4467 <key>BlockNewRequests</key>
4468 <true/>
4469 <key>Locked</key>
4470 <true/>
4471 </dict>
4472 <key>Autoplay</key>
4473 <dict>
4474 <key>Allow</key>
4475 <array>
4476 <string>https://example.org</string>
4477 </array>
4478 <key>Block</key>
4479 <array>
4480 <string>https://example.edu</string>
4481 </array>
4482 <key>Default</key>
4483 <string>allow-audio-video | block-audio | block-audio-video</string>
4484 <key>Locked</key>
4485 <true/> | <false/>
4486 </dict>
4487 </dict>
4488 </dict>
4489 ```
4490 #### policies.json
4491 ```
4492 {
4493 "policies": {
4494 "Permissions": {
4495 "Camera": {
4496 "Allow": ["https://example.org","https://example.org:1234"],
4497 "Block": ["https://example.edu"],
4498 "BlockNewRequests": true | false,
4499 "Locked": true | false
4500 },
4501 "Microphone": {
4502 "Allow": ["https://example.org"],
4503 "Block": ["https://example.edu"],
4504 "BlockNewRequests": true | false,
4505 "Locked": true | false
4506 },
4507 "Location": {
4508 "Allow": ["https://example.org"],
4509 "Block": ["https://example.edu"],
4510 "BlockNewRequests": true | false,
4511 "Locked": true | false
4512 },
4513 "Notifications": {
4514 "Allow": ["https://example.org"],
4515 "Block": ["https://example.edu"],
4516 "BlockNewRequests": true | false,
4517 "Locked": true | false
4518 },
4519 "Autoplay": {
4520 "Allow": ["https://example.org"],
4521 "Block": ["https://example.edu"],
4522 "Default": "allow-audio-video" | "block-audio" | "block-audio-video",
4523 "Locked": true | false
4524 }
4525 }
4526 }
4527 }
4528 ```
4529 ### PictureInPicture
4530
4531 Enable or disable Picture-in-Picture as well as prevent the user from enabling or disabling it (Locked).
4532
4533 **Compatibility:** Firefox 78, Firefox ESR 78\
4534 **CCK2 Equivalent:** N/A\
4535 **Preferences Affected:** `media.videocontrols.picture-in-picture.video-toggle.enabled`
4536
4537 #### Windows (GPO)
4538 ```
4539 Software\Policies\Mozilla\Firefox\PictureInPicture\Enabled = 0x1 | 0x0
4540 Software\Policies\Mozilla\Firefox\PictureInPicture\Locked = 0x1 | 0x0
4541
4542 ```
4543 #### Windows (Intune)
4544 OMA-URI:
4545 ```
4546 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PictureInPicture/PictureInPicture_Enabled
4547 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PictureInPicture/PictureInPicture_Locked
4548 ```
4549 Value (string):
4550 ```
4551 <enabled/> or <disabled/>
4552 ```
4553 #### macOS
4554 ```
4555 <dict>
4556 <key>PictureInPicture</key>
4557 <dict>
4558 <key>Enabled</key>
4559 <true/> | <false/>
4560 <key>Locked</key>
4561 <true/> | <false/>
4562 </dict>
4563 </dict>
4564 ```
4565 #### policies.json
4566 ```
4567 {
4568 "policies": {
4569 "PictureInPicture": {
4570 "Enabled": true | false,
4571 "Locked": true | false
4572 }
4573 }
4574 }
4575 ```
4576 ### PopupBlocking
4577 Configure the default pop-up window policy as well as origins for which pop-up windows are allowed.
4578
4579 `Allow` is a list of origins where popup-windows are allowed.
4580
4581 `Default` determines whether or not pop-up windows are allowed by default.
4582
4583 `Locked` prevents the user from changing pop-up preferences.
4584
4585 **Compatibility:** Firefox 60, Firefox ESR 60\
4586 **CCK2 Equivalent:** `permissions.popup`\
4587 **Preferences Affected:** `dom.disable_open_during_load`
4588
4589 #### Windows (GPO)
4590 ```
4591 Software\Policies\Mozilla\Firefox\PopupBlocking\Allow\1 = "https://example.org"
4592 Software\Policies\Mozilla\Firefox\PopupBlocking\Allow\2 = "https://example.edu"
4593 Software\Policies\Mozilla\Firefox\PopupBlocking\Default = 0x1 | 0x0
4594 Software\Policies\Mozilla\Firefox\PopupBlocking\Locked = 0x1 | 0x0
4595 ```
4596 #### Windows (Intune)
4597 OMA-URI:
4598 ```
4599 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Allow
4600 ```
4601 Value (string):
4602 ```
4603 <enabled/>
4604 <data id="Permissions" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
4605 ```
4606 OMA-URI:
4607 ```
4608 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Default
4609 ```
4610 Value (string):
4611 ```
4612 <enabled/> or <disabled/>
4613 ```
4614 OMA-URI:
4615 ```
4616 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Locked
4617 ```
4618 Value (string):
4619 ```
4620 <enabled/> or <disabled/>
4621 ```
4622 #### macOS
4623 ```
4624 <dict>
4625 <key>PopupBlocking</key>
4626 <dict>
4627 <key>Allow</key>
4628 <array>
4629 <string>http://example.org</string>
4630 <string>http://example.edu</string>
4631 </array>
4632 <key>Default</key>
4633 <true/> | <false/>
4634 <key>Locked</key>
4635 <true/> | <false/>
4636 </dict>
4637 </dict>
4638 ```
4639 #### policies.json
4640 ```
4641 {
4642 "policies": {
4643 "PopupBlocking": {
4644 "Allow": ["http://example.org/",
4645 "http://example.edu/"],
4646 "Default": true | false,
4647 "Locked": true | false
4648 }
4649 }
4650 }
4651 ```
4652 ### Preferences
4653 Set and lock preferences.
4654
4655 **NOTE** On Windows, in order to use this policy, you must clear all settings in the old **Preferences (Deprecated)** section.
4656
4657 Previously you could only set and lock a subset of preferences. Starting with Firefox 81 and Firefox ESR 78.3 you can set many more preferences. You can also set default preferences, user preferences and you can clear preferences.
4658
4659 Preferences that start with the following prefixes are supported:
4660 ```
4661 accessibility.
4662 app.update.* (Firefox 86, Firefox 78.8)
4663 browser.
4664 datareporting.policy.
4665 dom.
4666 extensions.
4667 general.autoScroll (Firefox 83, Firefox ESR 78.5)
4668 general.smoothScroll (Firefox 83, Firefox ESR 78.5)
4669 geo.
4670 gfx.
4671 intl.
4672 keyword.enabled (Firefox 95, Firefox ESR 91.4)
4673 layers.
4674 layout.
4675 media.
4676 network.
4677 pdfjs. (Firefox 84, Firefox ESR 78.6)
4678 places.
4679 print.
4680 signon. (Firefox 83, Firefox ESR 78.5)
4681 spellchecker. (Firefox 84, Firefox ESR 78.6)
4682 toolkit.legacyUserProfileCustomizations.stylesheets (Firefox 95, Firefox ESR 91.4)
4683 ui.
4684 widget.
4685 xpinstall.signatures.required (Firefox ESR 102.10, Firefox ESR only)
4686 ```
4687 as well as the following security preferences:
4688 | Preference | Type | Default
4689 | --- | --- | ---
4690 | security.default_personal_cert | string | Ask Every Time
4691 | &nbsp;&nbsp;&nbsp;&nbsp;If set to Select Automatically, Firefox automatically chooses the default personal certificate.
4692 | security.insecure_connection_text.enabled | bool | false
4693 | &nbsp;&nbsp;&nbsp;&nbsp;If set to true, adds the words "Not Secure" for insecure sites.
4694 | security.insecure_connection_text.pbmode.enabled | bool | false
4695 | &nbsp;&nbsp;&nbsp;&nbsp;If set to true, adds the words "Not Secure" for insecure sites in private browsing.
4696 | security.mixed_content.block_active_content | boolean | true
4697 | &nbsp;&nbsp;&nbsp;&nbsp;If false, mixed active content (HTTP and HTTPS) is not blocked.
4698 | security.osclientcerts.autoload | boolean | false
4699 | &nbsp;&nbsp;&nbsp;&nbsp;If true, client certificates are loaded from the operating system certificate store.
4700 | security.OCSP.enabled | integer | 1
4701 | &nbsp;&nbsp;&nbsp;&nbsp;If 0, do not fetch OCSP. If 1, fetch OCSP for DV and EV certificates. If 2, fetch OCSP only for EV certificates
4702 | security.OCSP.require | boolean | false
4703 | &nbsp;&nbsp;&nbsp;&nbsp; If true, if an OCSP request times out, the connection fails.
4704 | security.ssl.enable_ocsp_stapling | boolean | true
4705 | &nbsp;&nbsp;&nbsp;&nbsp; If false, OCSP stapling is not enabled.
4706 | security.ssl.errorReporting.enabled | boolean | true
4707 | &nbsp;&nbsp;&nbsp;&nbsp;If false, SSL errors cannot be sent to Mozilla.
4708 | security.tls.enable_0rtt_data | boolean | true
4709 | &nbsp;&nbsp;&nbsp;&nbsp;If false, TLS early data is turned off (Firefox 93, Firefox 91.2, Firefox 78.15).
4710 | security.tls.hello_downgrade_check | boolean | true
4711 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the TLS 1.3 downgrade check is disabled.
4712 | security.tls.version.enable-deprecated | boolean | false
4713 | &nbsp;&nbsp;&nbsp;&nbsp;If true, browser will accept TLS 1.0. and TLS 1.1 (Firefox 86, Firefox 78.8).
4714 | security.warn_submit_secure_to_insecure | boolean | true
4715 | &nbsp;&nbsp;&nbsp;&nbsp;If false, no warning is shown when submitting a form from https to http.
4716 &nbsp;
4717
4718 Using the preference as the key, set the `Value` to the corresponding preference value.
4719
4720 `Status` can be "default", "locked", "user" or "clear"
4721
4722 * `"default"`: Read/Write: Settings appear as default even if factory default differs.
4723 * `"locked"`: Read-Only: Settings appear as default even if factory default differs.
4724 * `"user"`: Read/Write: Settings appear as changed if it differs from factory default.
4725 * `"clear"`: Read/Write: `Value` has no effect. Resets to factory defaults on each startup.
4726
4727 `"user"` preferences persist across invocations of Firefox. It is the equivalent of a user setting the preference. They are most useful when a preference is needed very early in startup so it can't be set as default by policy. An example of this is ```toolkit.legacyUserProfileCustomizations.stylesheets```.
4728
4729 `"user"` preferences persist even if the policy is removed, so if you need to remove them, you should use the clear policy.
4730
4731 See the examples below for more detail.
4732
4733 IMPORTANT: Make sure you're only setting a particular preference using this mechanism and not some other way.
4734
4735 Status
4736 **Compatibility:** Firefox 81, Firefox ESR 78.3\
4737 **CCK2 Equivalent:** `preferences`\
4738 **Preferences Affected:** Many
4739
4740 #### Windows (GPO)
4741 Software\Policies\Mozilla\Firefox\Preferences (REG_MULTI_SZ) =
4742 ```
4743 {
4744 "accessibility.force_disabled": {
4745 "Value": 1,
4746 "Status": "default"
4747 },
4748 "browser.cache.disk.parent_directory": {
4749 "Value": "SOME_NATIVE_PATH",
4750 "Status": "user"
4751 },
4752 "browser.tabs.warnOnClose": {
4753 "Value": false,
4754 "Status": "locked"
4755 }
4756 }
4757 ```
4758 #### Windows (Intune)
4759 OMA-URI:
4760 ```
4761 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Preferences
4762 ```
4763 Value (string):
4764 ```
4765 <enabled/>
4766 <data id="JSON" value='
4767 {
4768 "accessibility.force_disabled": {
4769 "Value": 1,
4770 "Status": "default"
4771 },
4772 "browser.cache.disk.parent_directory": {
4773 "Value": "SOME_NATIVE_PATH",
4774 "Status": "user"
4775 },
4776 "browser.tabs.warnOnClose": {
4777 "Value": false,
4778 "Status": "locked"
4779 }
4780 }'/>
4781 ```
4782 #### macOS
4783 ```
4784 <dict>
4785 <key>Preferences</key>
4786 <dict>
4787 <key>accessibility.force_disabled</key>
4788 <dict>
4789 <key>Value</key>
4790 <integer>1</integer>
4791 <key>Status</key>
4792 <string>default</string>
4793 </dict>
4794 <key>browser.cache.disk.parent_directory</key>
4795 <dict>
4796 <key>Value</key>
4797 <string>SOME_NATIVE_PATH</string>
4798 <key>Status</key>
4799 <string>user</string>
4800 </dict>
4801 <key>browser.tabs.warnOnClose</key>
4802 <dict>
4803 <key>Value</key>
4804 <false/>
4805 <key>Status</key>
4806 <string>locked</string>
4807 </dict>
4808 </dict>
4809 </dict>
4810 ```
4811 #### policies.json
4812 ```
4813 {
4814 "policies": {
4815 "Preferences": {
4816 "accessibility.force_disabled": {
4817 "Value": 1,
4818 "Status": "default"
4819 },
4820 "browser.cache.disk.parent_directory": {
4821 "Value": "SOME_NATIVE_PATH",
4822 "Status": "user"
4823 },
4824 "browser.tabs.warnOnClose": {
4825 "Value": false,
4826 "Status": "locked"
4827 }
4828 }
4829 }
4830 }
4831 ```
4832 ### Preferences (Deprecated)
4833 Set and lock certain preferences.
4834
4835 **Compatibility:** See below\
4836 **CCK2 Equivalent:** `preferences`\
4837 **Preferences Affected:** See below
4838
4839 | Preference | Type | Compatibility | Default
4840 | --- | --- | --- | ---
4841 | accessibility.force_disabled | integer | Firefox 70, Firefox ESR 68.2 | 0
4842 | &nbsp;&nbsp;&nbsp;&nbsp;If set to 1, platform accessibility is disabled.
4843 | app.update.auto (Deprecated - Switch to AppAutoUpdate policy) | boolean | Firefox 68, Firefox ESR 68 | true
4844 | &nbsp;&nbsp;&nbsp;&nbsp;If false, Firefox doesn't automatically install update.
4845 | browser.bookmarks.autoExportHTML | boolean | Firefox 70, Firefox ESR 68.2 | false
4846 | &nbsp;&nbsp;&nbsp;&nbsp;If true, bookmarks are exported on shutdown.
4847 | browser.bookmarks.file | string | Firefox 70, Firefox ESR 68.2 | N/A
4848 | &nbsp;&nbsp;&nbsp;&nbsp;If set, the name of the file where bookmarks are exported and imported.
4849 | browser.bookmarks.restore_default_bookmarks | boolean | Firefox 70, Firefox ESR 68.2 | N/A
4850 | &nbsp;&nbsp;&nbsp;&nbsp;If true, bookmarks are restored to their defaults.
4851 | browser.cache.disk.enable | boolean | Firefox 68, Firefox ESR 68 | true
4852 | &nbsp;&nbsp;&nbsp;&nbsp;If false, don't store cache on the hard drive.
4853 | ~browser.cache.disk.parent_directory~ | string | Firefox 68, Firefox ESR 68 | Profile temporary directory
4854 | &nbsp;&nbsp;&nbsp;&nbsp;~If set, changes the location of the disk cache.~ This policy doesn't work. It's being worked on.
4855 | browser.fixup.dns_first_for_single_words | boolean | Firefox 68, Firefox ESR 68 | false
4856 | &nbsp;&nbsp;&nbsp;&nbsp;If true, single words are sent to DNS, not directly to search.
4857 | browser.newtabpage.activity-stream.default.sites | string | Firefox 72, ESR 68.4 | Locale dependent
4858 | &nbsp;&nbsp;&nbsp;&nbsp;If set, a list of URLs to use as the default top sites on the new tab page. Due to Firefox limitations, search sites can't be added. In addition, sites with the same name but different TLDs (example.org/example.com) will not display properly.
4859 | browser.places.importBookmarksHTML | boolean | Firefox 70, Firefox ESR 68.2
4860 | &nbsp;&nbsp;&nbsp;&nbsp;If true, bookmarks are always imported on startup.
4861 | browser.safebrowsing.phishing.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
4862 | &nbsp;&nbsp;&nbsp;&nbsp;If false, phishing protection is not enabled (Not recommended)
4863 | browser.safebrowsing.malware.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
4864 | &nbsp;&nbsp;&nbsp;&nbsp;If false, malware protection is not enabled (Not recommended)
4865 | browser.search.update | boolean | Firefox 68, Firefox ESR 68 | true
4866 | &nbsp;&nbsp;&nbsp;&nbsp;If false, updates for search engines are not checked.
4867 | browser.slowStartup.notificationDisabled | boolean | Firefox 70, Firefox ESR 68.2 | false
4868 | &nbsp;&nbsp;&nbsp;&nbsp;If true, a notification isn't shown if startup is slow.
4869 | browser.tabs.warnOnClose | boolean | Firefox 68, Firefox ESR 68 | true
4870 | &nbsp;&nbsp;&nbsp;&nbsp;If false, there is no warning when the browser is closed.
4871 | browser.taskbar.previews.enable | boolean | Firefox 70, Firefox ESR 68.2 (Windows only) | false
4872 | &nbsp;&nbsp;&nbsp;&nbsp;If true, tab previews are shown in the Windows taskbar.
4873 | browser.urlbar.suggest.bookmark | boolean | Firefox 68, Firefox ESR 68 | true
4874 | &nbsp;&nbsp;&nbsp;&nbsp;If false, bookmarks aren't suggested when typing in the URL bar.
4875 | browser.urlbar.suggest.history | boolean | Firefox 68, Firefox ESR 68 | true
4876 | &nbsp;&nbsp;&nbsp;&nbsp;If false, history isn't suggested when typing in the URL bar.
4877 | browser.urlbar.suggest.openpage | boolean | Firefox 68, Firefox ESR 68 | true
4878 | &nbsp;&nbsp;&nbsp;&nbsp;If false, open tabs aren't suggested when typing in the URL bar.
4879 | datareporting.policy.dataSubmissionPolicyBypassNotification | boolean | Firefox 68, Firefox ESR 68 | false
4880 | &nbsp;&nbsp;&nbsp;&nbsp;If true, don't show the privacy policy tab on first run.
4881 | dom.allow_scripts_to_close_windows | boolean | Firefox 70, Firefox ESR 68.2 | false
4882 | &nbsp;&nbsp;&nbsp;&nbsp;If false, web page can close windows.
4883 | dom.disable_window_flip | boolean | Firefox 68, Firefox ESR 68 | true
4884 | &nbsp;&nbsp;&nbsp;&nbsp;If false, web pages can focus and activate windows.
4885 | dom.disable_window_move_resize | boolean | Firefox 68, Firefox ESR 68 | false
4886 | &nbsp;&nbsp;&nbsp;&nbsp;If true, web pages can't move or resize windows.
4887 | dom.event.contextmenu.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4888 | &nbsp;&nbsp;&nbsp;&nbsp;If false, web pages can't override context menus.
4889 | dom.keyboardevent.keypress.hack.dispatch_non_printable_keys.addl | string | Firefox 68, Firefox ESR 68 | N/A
4890 | &nbsp;&nbsp;&nbsp;&nbsp;See https://support.mozilla.org/en-US/kb/dom-events-changes-introduced-firefox-66
4891 | dom.keyboardevent.keypress.hack.use_legacy_keycode_and_charcode.addl | string | Firefox 68, Firefox ESR 68 | N/A
4892 | &nbsp;&nbsp;&nbsp;&nbsp;See https://support.mozilla.org/en-US/kb/dom-events-changes-introduced-firefox-66
4893 | dom.xmldocument.load.enabled | boolean | Firefox ESR 68.5 | true.
4894 | &nbsp;&nbsp;&nbsp;&nbsp;If false, XMLDocument.load is not available.
4895 | dom.xmldocument.async.enabled | boolean | Firefox ESR 68.5 | true
4896 | &nbsp;&nbsp;&nbsp;&nbsp;If false, XMLDocument.async is not available.
4897 | extensions.blocklist.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
4898 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the extensions blocklist is not used (Not recommended)
4899 | extensions.getAddons.showPane | boolean | Firefox 68, Firefox ESR 68 | N/A
4900 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the Recommendations tab is not displayed in the Add-ons Manager.
4901 | extensions.htmlaboutaddons.recommendations.enabled | boolean | Firefox 72, Firefox ESR 68.4 | true
4902 | &nbsp;&nbsp;&nbsp;&nbsp;If false, recommendations are not shown on the Extensions tab in the Add-ons Manager.
4903 | geo.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
4904 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the geolocation API is disabled. | Language dependent
4905 | intl.accept_languages | string | Firefox 70, Firefox ESR 68.2
4906 | &nbsp;&nbsp;&nbsp;&nbsp;If set, preferred language for web pages.
4907 | media.eme.enabled (Deprecated - Switch to EncryptedMediaExtensions policy) | boolean | Firefox 70, Firefox ESR 68.2 | true
4908 | &nbsp;&nbsp;&nbsp;&nbsp;If false, Encrypted Media Extensions are not enabled.
4909 | media.gmp-gmpopenh264.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4910 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the OpenH264 plugin is not downloaded.
4911 | media.gmp-widevinecdm.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4912 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the Widevine plugin is not downloaded.
4913 | media.peerconnection.enabled | boolean | Firefox 72, Firefox ESR 68.4 | true
4914 | &nbsp;&nbsp;&nbsp;&nbsp;If false, WebRTC is disabled
4915 | media.peerconnection.ice.obfuscate_host_addresses.whitelist (Deprecated) | string | Firefox 72, Firefox ESR 68.4 | N/A
4916 | &nbsp;&nbsp;&nbsp;&nbsp;If set, a list of domains for which mDNS hostname obfuscation is
4917 disabled
4918 | media.peerconnection.ice.obfuscate_host_addresses.blocklist | string | Firefox 79, Firefox ESR 78.1 | N/A
4919 | &nbsp;&nbsp;&nbsp;&nbsp;If set, a list of domains for which mDNS hostname obfuscation is
4920 disabled
4921 | network.dns.disableIPv6 | boolean | Firefox 68, Firefox ESR 68 | false
4922 | &nbsp;&nbsp;&nbsp;&nbsp;If true, IPv6 DNS lokoups are disabled.
4923 | network.IDN_show_punycode | boolean | Firefox 68, Firefox ESR 68 | false
4924 | &nbsp;&nbsp;&nbsp;&nbsp;If true, display the punycode version of internationalized domain names.
4925 | places.history.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4926 | &nbsp;&nbsp;&nbsp;&nbsp;If false, history is not enabled.
4927 | print.save_print_settings | boolean | Firefox 70, Firefox ESR 68.2 | true
4928 | &nbsp;&nbsp;&nbsp;&nbsp;If false, print settings are not saved between jobs.
4929 | security.default_personal_cert | string | Firefox 68, Firefox ESR 68 | Ask Every Time
4930 | &nbsp;&nbsp;&nbsp;&nbsp;If set to Select Automatically, Firefox automatically chooses the default personal certificate.
4931 | security.mixed_content.block_active_content | boolean | Firefox 70, Firefox ESR 68.2 | true
4932 | &nbsp;&nbsp;&nbsp;&nbsp;If false, mixed active content (HTTP and HTTPS) is not blocked.
4933 | security.osclientcerts.autoload | boolean | Firefox 72 (Windows), Firefox 75 (macOS) | false
4934 | &nbsp;&nbsp;&nbsp;&nbsp;If true, client certificates are loaded from the operating system certificate store.
4935 | security.ssl.errorReporting.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4936 | &nbsp;&nbsp;&nbsp;&nbsp;If false, SSL errors cannot be sent to Mozilla.
4937 | security.tls.hello_downgrade_check | boolean | Firefox 72, Firefox ESR 68.4 | true
4938 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the TLS 1.3 downgrade check is disabled.
4939 | ui.key.menuAccessKeyFocuses | boolean | Firefox 68, Firefox ESR 68 | true
4940 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the Alt key doesn't show the menubar on Windows.
4941 | widget.content.gtk-theme-override | string | Firefox 72, Firefox ESR 68.4 (Linux only) | N/A
4942 | &nbsp;&nbsp;&nbsp;&nbsp;If set, overrides the GTK theme for widgets.
4943 #### Windows (GPO)
4944 ```
4945 Software\Policies\Mozilla\Firefox\Preferences\boolean_preference_name = 0x1 | 0x0
4946 Software\Policies\Mozilla\Firefox\Preferences\string_preference_name = "string_value"
4947 ```
4948 #### Windows (Intune)
4949 OMA-URI: (periods are replaced by underscores)
4950 ```
4951 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Preferences/boolean_preference_name
4952 ```
4953 Value (string):
4954 ```
4955 <enabled/> or <disabled/>
4956 ```
4957 OMA-URI: (periods are replaced by underscores)
4958 ```
4959 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Preferences/string_preference_name
4960 ```
4961 Value (string):
4962 ```
4963 <enabled/>
4964 <data id="Preferences_String" value="string_value"/>
4965 ```
4966 #### macOS
4967 ```
4968 <dict>
4969 <key>Preferences</key>
4970 <dict>
4971 <key>boolean_preference_name</key>
4972 <true/> | <false/>
4973 <key>string_preference_name</key>
4974 <string>string_value</string>
4975 </dict>
4976 </dict>
4977 ```
4978 #### policies.json
4979 ```
4980 {
4981 "policies": {
4982 "Preferences": {
4983 "boolean_preference_name": true | false,
4984 "string_preference_name": "string_value"
4985 }
4986 }
4987 }
4988 ```
4989 ### PrimaryPassword
4990 Require or prevent using a primary (formerly master) password.
4991
4992 If this value is true, a primary password is required. If this value is false, it works the same as if [`DisableMasterPasswordCreation`](#disablemasterpasswordcreation) was true and removes the primary password functionality.
4993
4994 If both DisableMasterPasswordCreation and PrimaryPassword are used, DisableMasterPasswordCreation takes precedent.
4995
4996 **Compatibility:** Firefox 79, Firefox ESR 78.1\
4997 **CCK2 Equivalent:** `noMasterPassword`\
4998 **Preferences Affected:** N/A
4999
5000 #### Windows (GPO)
5001 ```
5002 Software\Policies\Mozilla\Firefox\PrimaryPassword = 0x1 | 0x0
5003 ```
5004 #### Windows (Intune)
5005 OMA-URI:
5006 ```
5007 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PrimaryPassword
5008 ```
5009 Value (string):
5010 ```
5011 <enabled/> or <disabled/>
5012 ```
5013 #### macOS
5014 ```
5015 <dict>
5016 <key>PrimaryPassword</key>
5017 <true/> | <false/>
5018 </dict>
5019 ```
5020 #### policies.json
5021 ```
5022 {
5023 "policies": {
5024 "PrimaryPassword": true | false
5025 }
5026 }
5027 ```
5028 ### PromptForDownloadLocation
5029 Ask where to save each file before downloading.
5030
5031 **Compatibility:** Firefox 68, Firefox ESR 68\
5032 **CCK2 Equivalent:** N/A\
5033 **Preferences Affected:** `browser.download.useDownloadDir`
5034
5035 #### Windows (GPO)
5036 ```
5037 Software\Policies\Mozilla\Firefox\PromptForDownloadLocation = 0x1 | 0x0
5038 ```
5039 #### Windows (Intune)
5040 OMA-URI:
5041 ```
5042 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PromptForDownloadLocation
5043 ```
5044 Value (string):
5045 ```
5046 <enabled/> or <disabled/>
5047 ```
5048 #### macOS
5049 ```
5050 <dict>
5051 <key>PromptForDownloadLocation</key>
5052 <true/> | <false/>
5053 </dict>
5054 ```
5055 #### policies.json
5056 ```
5057 {
5058 "policies": {
5059 "PromptForDownloadLocation": true | false
5060 }
5061 }
5062 ```
5063 ### Proxy
5064 Configure proxy settings. These settings correspond to the connection settings in Firefox preferences.
5065 To specify ports, append them to the hostnames with a colon (:).
5066
5067 Unless you lock this policy, changes the user already has in place will take effect.
5068
5069 `Mode` is the proxy method being used.
5070
5071 `Locked` is whether or not proxy settings can be changed.
5072
5073 `HTTPProxy` is the HTTP proxy server.
5074
5075 `UseHTTPProxyForAllProtocols` is whether or not the HTTP proxy should be used for all other proxies.
5076
5077 `SSLProxy` is the SSL proxy server.
5078
5079 `FTPProxy` is the FTP proxy server.
5080
5081 `SOCKSProxy` is the SOCKS proxy server
5082
5083 `SOCKSVersion` is the SOCKS version (4 or 5)
5084
5085 `Passthrough` is list of hostnames or IP addresses that will not be proxied. Use `<local>` to bypass proxying for all hostnames which do not contain periods.
5086
5087 `AutoConfigURL` is a URL for proxy configuration (only used if Mode is autoConfig).
5088
5089 `AutoLogin` means do not prompt for authentication if password is saved.
5090
5091 `UseProxyForDNS` to use proxy DNS when using SOCKS v5.
5092
5093 **Compatibility:** Firefox 60, Firefox ESR 60\
5094 **CCK2 Equivalent:** `networkProxy*`\
5095 **Preferences Affected:** `network.proxy.type`, `network.proxy.autoconfig_url`, `network.proxy.socks_remote_dns`, `signon.autologin.proxy`, `network.proxy.socks_version`, `network.proxy.no_proxies_on`, `network.proxy.share_proxy_settings`, `network.proxy.http`, `network.proxy.http_port`, `network.proxy.ftp`, `network.proxy.ftp_port`, `network.proxy.ssl`, `network.proxy.ssl_port`, `network.proxy.socks`, `network.proxy.socks_port`
5096
5097 #### Windows (GPO)
5098 ```
5099 Software\Policies\Mozilla\Firefox\Proxy\Mode = "none" | "system" | "manual" | "autoDetect" | "autoConfig"
5100 Software\Policies\Mozilla\Firefox\Proxy\Locked = 0x1 | 0x0
5101 Software\Policies\Mozilla\Firefox\=Proxy\HTTPProxy = https://httpproxy.example.com
5102 Software\Policies\Mozilla\Firefox\Proxy\UseHTTPProxyForAllProtocols = 0x1 | 0x0
5103 Software\Policies\Mozilla\Firefox\Proxy\SSLProxy = https://sslproxy.example.com
5104 Software\Policies\Mozilla\Firefox\Proxy\FTPProxy = https://ftpproxy.example.com
5105 Software\Policies\Mozilla\Firefox\Proxy\SOCKSProxy = https://socksproxy.example.com
5106 Software\Policies\Mozilla\Firefox\Proxy\SOCKSVersion = 0x4 | 0x5
5107 Software\Policies\Mozilla\Firefox\Proxy\Passthrough = <local>
5108 Software\Policies\Mozilla\Firefox\Proxy\AutoConfigURL = URL_TO_AUTOCONFIG
5109 Software\Policies\Mozilla\Firefox\Proxy\AutoLogin = 0x1 | 0x0
5110 Software\Policies\Mozilla\Firefox\Proxy\UseProxyForDNS = 0x1 | 0x0
5111 ```
5112 #### Windows (Intune)
5113 **Note**
5114 These setttings were moved to a category to make them easier to configure via Intune.
5115
5116 OMA-URI:
5117 ```
5118 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ProxySettings/Proxy_Locked
5119 ```
5120 Value (string):
5121 ```
5122 <enabled/> or <disabled/>
5123 ```
5124 OMA-URI:
5125 ```
5126 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ProxySettings/Proxy_ConnectionType
5127 ```
5128 Value (string):
5129 ```
5130 <enabled/>
5131 <data id="Proxy_ConnectionType" value="none | system | manual | autoDetect | autoConfig"/>
5132 ```
5133 OMA-URI:
5134 ```
5135 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ProxySettings/Proxy_HTTPProxy
5136 ```
5137 Value (string):
5138 ```
5139 <enabled/>
5140 <data id="Proxy_HTTPProxy" value="httpproxy.example.com"/>
5141 ```
5142 OMA-URI:
5143 ```
5144 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ProxySettings/Proxy_UseHTTPProxyForAllProtocols
5145 ```
5146 Value (string):
5147 ```
5148 <enabled/> or <disabled/>
5149 ```
5150 OMA-URI:
5151 ```
5152 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ProxySettings/Proxy_SSLProxy
5153 ```
5154 Value (string):
5155 ```
5156 <enabled/>
5157 <data id="Proxy_SSLProxy" value="sslproxy.example.com"/>
5158 ```
5159 OMA-URI:
5160 ```
5161 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ProxySettings/Proxy_SOCKSProxy
5162 ```
5163 Value (string):
5164 ```
5165 <enabled/>
5166 <data id="Proxy_SOCKSProxy" value="socksproxy.example.com"/>
5167 <data id="Proxy_SOCKSVersion" value="4 | 5"/>
5168 ```
5169 OMA-URI:
5170 ```
5171 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ProxySettings/Proxy_AutoConfigURL
5172 ```
5173 Value (string):
5174 ```
5175 <enabled/>
5176 <data id="Proxy_AutoConfigURL" value="URL_TO_AUTOCONFIG"/>
5177 ```
5178 OMA-URI:
5179 ```
5180 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ProxySettings/Proxy_Passthrough
5181 ```
5182 Value (string):
5183 ```
5184 <enabled/>
5185 <data id="Proxy_Passthrough" value="&lt;local&gt;"/>
5186 ```
5187 OMA-URI:
5188 ```
5189 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ProxySettings/Proxy_AutoLogin
5190 ```
5191 Value (string):
5192 ```
5193 <enabled/> or <disabled/>
5194 ```
5195 OMA-URI:
5196 ```
5197 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ProxySettings/Proxy_UseProxyForDNS
5198 ```
5199 Value (string):
5200 ```
5201 <enabled/> or <disabled/>
5202 ```
5203 OMA-URI (Old way):
5204 ```
5205 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Proxy
5206 ```
5207 Value (string):
5208 ```
5209 <enabled/>
5210 <data id="ProxyLocked" value="true | false"/>
5211 <data id="ConnectionType" value="none | system | manual | autoDetect | autoConfig"/>
5212 <data id="HTTPProxy" value="httpproxy.example.com"/>
5213 <data id="UseHTTPProxyForAllProtocols" value="true | false"/>
5214 <data id="SSLProxy" value="sslproxy.example.com"/>
5215 <data id="FTPProxy" value="ftpproxy.example.com"/>
5216 <data id="SOCKSProxy" value="socksproxy.example.com"/>
5217 <data id="SOCKSVersion" value="4 | 5"/>
5218 <data id="AutoConfigURL" value="URL_TO_AUTOCONFIG"/>
5219 <data id="Passthrough" value="<local>"/>
5220 <data id="AutoLogin" value="true | false"/>
5221 <data id="UseProxyForDNS" value="true | false"/>
5222 ```
5223 #### macOS
5224 ```
5225 <dict>
5226 <key>Proxy</key>
5227 <dict>
5228 <key>Mode</key>
5229 <string>none | system | manual | autoDetect | autoConfig</string>
5230 <key>Locked</key>
5231 <true> | </false>
5232 <key>HTTPProxy</key>
5233 <string>https://httpproxy.example.com</string>
5234 <key>UseHTTPProxyForAllProtocols</key>
5235 <true> | </false>
5236 <key>SSLProxy</key>
5237 <string>https://sslproxy.example.com</string>
5238 <key>FTPProxy</key>
5239 <string>https://ftpproxy.example.com</string>
5240 <key>SOCKSProxy</key>
5241 <string>https://socksproxy.example.com</string>
5242 <key>SOCKSVersion</key>
5243 <string>4 | 5</string>
5244 <key>Passthrough</key>
5245 <string>&lt;local>&gt;</string>
5246 <key>AutoConfigURL</key>
5247 <string>URL_TO_AUTOCONFIG</string>
5248 <key>AutoLogin</key>
5249 <true> | </false>
5250 <key>UseProxyForDNS</key>
5251 <true> | </false>
5252 </dict>
5253 </dict>
5254 ```
5255 #### policies.json
5256 ```
5257 {
5258 "policies": {
5259 "Proxy": {
5260 "Mode": "none" | "system" | "manual" | "autoDetect" | "autoConfig",
5261 "Locked": true | false,
5262 "HTTPProxy": "hostname",
5263 "UseHTTPProxyForAllProtocols": true | false,
5264 "SSLProxy": "hostname",
5265 "FTPProxy": "hostname",
5266 "SOCKSProxy": "hostname",
5267 "SOCKSVersion": 4 | 5,
5268 "Passthrough": "<local>",
5269 "AutoConfigURL": "URL_TO_AUTOCONFIG",
5270 "AutoLogin": true | false,
5271 "UseProxyForDNS": true | false
5272 }
5273 }
5274 }
5275 ```
5276 ### RequestedLocales
5277 Set the the list of requested locales for the application in order of preference. It will cause the corresponding language pack to become active.
5278
5279 Note: For Firefox 68, this can now be a string so that you can specify an empty value.
5280
5281 **Compatibility:** Firefox 64, Firefox ESR 60.4, Updated in Firefox 68, Firefox ESR 68\
5282 **CCK2 Equivalent:** N/A\
5283 **Preferences Affected:** N/A
5284 #### Windows (GPO)
5285 ```
5286 Software\Policies\Mozilla\Firefox\RequestedLocales\1 = "de"
5287 Software\Policies\Mozilla\Firefox\RequestedLocales\2 = "en-US"
5288
5289 or
5290
5291 Software\Policies\Mozilla\Firefox\RequestedLocales = "de,en-US"
5292 ```
5293 #### Windows (Intune)
5294 OMA-URI:
5295 ```
5296 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/RequestedLocalesString
5297 ```
5298 Value (string):
5299 ```
5300 <enabled/>
5301 <data id="Preferences_String" value="de,en-US"/>
5302 ```
5303 #### macOS
5304 ```
5305 <dict>
5306 <key>RequestedLocales</key>
5307 <array>
5308 <string>de</string>
5309 <string>en-US</string>
5310 </array>
5311 </dict>
5312
5313 or
5314
5315 <dict>
5316 <key>RequestedLocales</key>
5317 <string>de,en-US</string>
5318 </dict>
5319
5320 ```
5321 #### policies.json
5322 ```
5323 {
5324 "policies": {
5325 "RequestedLocales": ["de", "en-US"]
5326 }
5327 }
5328
5329 or
5330
5331 {
5332 "policies": {
5333 "RequestedLocales": "de,en-US"
5334 }
5335 }
5336 ```
5337 <a name="SanitizeOnShutdown"></a>
5338
5339 ### SanitizeOnShutdown (Selective)
5340 Clear data on shutdown. Choose from Cache, Cookies, Download History, Form & Search History, Browsing History, Active Logins, Site Preferences and Offline Website Data.
5341
5342 Previously, these values were always locked. Starting with Firefox 74 and Firefox ESR 68.6, you can use the `Locked` option to either keep the values unlocked (set it to false), or lock only the values you set (set it to true). If you want the old behavior of locking everything, do not set `Locked` at all.
5343
5344 **Compatibility:** Firefox 68, Firefox ESR 68 (Locked added in 74/68.6)\
5345 **CCK2 Equivalent:** N/A\
5346 **Preferences Affected:** `privacy.sanitize.sanitizeOnShutdown`, `privacy.clearOnShutdown.cache`, `privacy.clearOnShutdown.cookies`, `privacy.clearOnShutdown.downloads`, `privacy.clearOnShutdown.formdata`, `privacy.clearOnShutdown.history`, `privacy.clearOnShutdown.sessions`, `privacy.clearOnShutdown.siteSettings`, `privacy.clearOnShutdown.offlineApps`
5347 #### Windows (GPO)
5348 ```
5349 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Cache = 0x1 | 0x0
5350 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Cookies = 0x1 | 0x0
5351 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Downloads = 0x1 | 0x0
5352 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\FormData = 0x1 | 0x0
5353 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\History = 0x1 | 0x0
5354 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Sessions = 0x1 | 0x0
5355 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\SiteSettings = 0x1 | 0x0
5356 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\OfflineApps = 0x1 | 0x0
5357 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Locked = 0x1 | 0x0
5358 ```
5359 #### Windows (Intune)
5360 OMA-URI:
5361 ```
5362 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/A_SanitizeOnShutdown_Cache
5363 ```
5364 Value (string):
5365 ```
5366 <enabled/> or <disabled/>
5367 ```
5368 OMA-URI:
5369 ```
5370 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/B_SanitizeOnShutdown_Cookies
5371 ```
5372 Value (string):
5373 ```
5374 <enabled/> or <disabled/>
5375 ```
5376 OMA-URI:
5377 ```
5378 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/C_SanitizeOnShutdown_Downloads
5379 ```
5380 Value (string):
5381 ```
5382 <enabled/> or <disabled/>
5383 ```
5384 OMA-URI:
5385 ```
5386 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/D_SanitizeOnShutdown_FormData
5387 ```
5388 Value (string):
5389 ```
5390 <enabled/> or <disabled/>
5391 ```
5392 OMA-URI:
5393 ```
5394 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/E_SanitizeOnShutdown_History
5395 ```
5396 Value (string):
5397 ```
5398 <enabled/> or <disabled/>
5399 ```
5400 OMA-URI:
5401 ```
5402 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/F_SanitizeOnShutdown_Sessions
5403 ```
5404 Value (string):
5405 ```
5406 <enabled/> or <disabled/>
5407 ```
5408 OMA-URI:
5409 ```
5410 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/G_SanitizeOnShutdown_SiteSettings
5411 ```
5412 Value (string):
5413 ```
5414 <enabled/> or <disabled/>
5415 ```
5416 OMA-URI:
5417 ```
5418 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/H_SanitizeOnShutdown_OfflineApps
5419 ```
5420 Value (string):
5421 ```
5422 <enabled/> or <disabled/>
5423 ```
5424 OMA-URI:
5425 ```
5426 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/I_SanitizeOnShutdown_Locked
5427 ```
5428 Value (string):
5429 ```
5430 <enabled/> or <disabled/>
5431 ```
5432 #### macOS
5433 ```
5434 <dict>
5435 <key>SanitizeOnShutdown</key>
5436 <dict>
5437 <key>Cache</key>
5438 <true/> | <false/>
5439 <key>Cookies</key>
5440 <true/> | <false/>
5441 <key>Downloads</key>
5442 <true/> | <false/>
5443 <key>FormData</key>
5444 <true/> | <false/>
5445 <key>History</key>
5446 <true/> | <false/>
5447 <key>Sessions</key>
5448 <true/> | <false/>
5449 <key>SiteSettings</key>
5450 <true/> | <false/>
5451 <key>OfflineApps</key>
5452 <true/> | <false/>
5453 <key>Locked</key>
5454 <true/> | <false/>
5455 </dict>
5456 </dict>
5457 ```
5458 #### policies.json
5459 ```
5460 {
5461 "policies": {
5462 "SanitizeOnShutdown": {
5463 "Cache": true | false,
5464 "Cookies": true | false,
5465 "Downloads": true | false,
5466 "FormData": true | false,
5467 "History": true | false,
5468 "Sessions": true | false,
5469 "SiteSettings": true | false,
5470 "OfflineApps": true | false,
5471 "Locked": true | false
5472 }
5473 }
5474 }
5475 ```
5476 ### SanitizeOnShutdown (All)
5477 Clear all data on shutdown, including Browsing & Download History, Cookies, Active Logins, Cache, Form & Search History, Site Preferences and Offline Website Data.
5478
5479 **Compatibility:** Firefox 60, Firefox ESR 60\
5480 **CCK2 Equivalent:** N/A\
5481 **Preferences Affected:** `privacy.sanitize.sanitizeOnShutdown`, `privacy.clearOnShutdown.cache`, `privacy.clearOnShutdown.cookies`, `privacy.clearOnShutdown.downloads`, `privacy.clearOnShutdown.formdata`, `privacy.clearOnShutdown.history`, `privacy.clearOnShutdown.sessions`, `privacy.clearOnShutdown.siteSettings`, `privacy.clearOnShutdown.offlineApps`
5482 #### Windows (GPO)
5483 ```
5484 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown = 0x1 | 0x0
5485 ```
5486 #### Windows (Intune)
5487 OMA-URI:
5488 ```
5489 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/C_SanitizeOnShutdown
5490 ```
5491 Value (string):
5492 ```
5493 <enabled/> or <disabled/>
5494 ```
5495 #### macOS
5496 ```
5497 <dict>
5498 <key>SanitizeOnShutdown</key>
5499 <true/> | <false/>
5500 </dict>
5501 ```
5502 #### policies.json
5503 ```
5504 {
5505 "policies": {
5506 "SanitizeOnShutdown": true | false
5507 }
5508 }
5509 ```
5510 ### SearchBar
5511 Set whether or not search bar is displayed.
5512
5513 **Compatibility:** Firefox 60, Firefox ESR 60\
5514 **CCK2 Equivalent:** `showSearchBar`\
5515 **Preferences Affected:** N/A
5516
5517 #### Windows (GPO)
5518 ```
5519 Software\Policies\Mozilla\Firefox\SearchBar = "unified" | "separate"
5520 ```
5521
5522 #### Windows (Intune)
5523 OMA-URI:
5524 ```
5525 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SearchBar
5526 ```
5527 Value (string):
5528 ```
5529 <enabled/>
5530 <data id="SearchBar" value="unified | separate"/>
5531 ```
5532 #### macOS
5533 ```
5534 <dict>
5535 <key>SearchBar</key>
5536 <string>unified | separate</string>
5537 </dict>
5538 ```
5539 #### policies.json
5540 ```
5541 {
5542 "policies": {
5543 "SearchBar": "unified" | "separate"
5544 }
5545 }
5546 ```
5547 <a name="SearchEngines"></a>
5548
5549 ### SearchEngines (This policy is only available on the ESR.)
5550
5551 ### SearchEngines | Add
5552
5553 Add new search engines. Although there are only five engines available in the ADMX template, there is no limit. To add more in the ADMX template, you can duplicate the XML.
5554
5555 This policy is only available on the ESR. `Name` and `URLTemplate` are required.
5556
5557 `Name` is the name of the search engine.
5558
5559 `URLTemplate` is the search URL with {searchTerms} to substitute for the search term.
5560
5561 `Method` is either GET or POST
5562
5563 `IconURL` is a URL for the icon to use.
5564
5565 `Alias` is a keyword to use for the engine.
5566
5567 `Description` is a description of the search engine.
5568
5569 `PostData` is the POST data as name value pairs separated by &.
5570
5571 `SuggestURLTemplate` is a search suggestions URL with {searchTerms} to substitute for the search term.
5572
5573 `Encoding` is the query charset for the engine. It defaults to UTF-8.
5574
5575 **Compatibility:** Firefox ESR 60 (POST support in Firefox ESR 68, Encoding support in Firefox 91)\
5576 **CCK2 Equivalent:** `searchplugins`\
5577 **Preferences Affected:** N/A
5578
5579 #### Windows (GPO)
5580 ```
5581 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Name = "Example1"
5582 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\URLTemplate = "https://www.example.org/q={searchTerms}"
5583 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Method = "GET" | "POST"
5584 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\IconURL = "https://www.example.org/favicon.ico"
5585 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Alias = "example"
5586 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Description = "Example Description"
5587 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\SuggestURLTemplate = "https://www.example.org/suggestions/q={searchTerms}"
5588 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\PostData = "name=value&q={searchTerms}"
5589 ```
5590 #### Windows (Intune)
5591 OMA-URI:
5592 ```
5593 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_1
5594 ```
5595 Value (string):
5596 ```
5597 <enabled/>
5598 <data id="SearchEngine_Name" value="Example1"/>
5599 <data id="SearchEngine_URLTemplate" value="https://www.example.org/q={searchTerms"/>
5600 <data id="SearchEngine_Method" value="GET | POST"/>
5601 <data id="SearchEngine_IconURL" value="https://www.example.org/favicon.ico"/>
5602 <data id="SearchEngine_Alias" value="example"/>
5603 <data id="SearchEngine_Description" value="Example Description"/>
5604 <data id="SearchEngine_SuggestURLTemplate" value="https://www.example.org/suggestions/q={searchTerms}"/>
5605 <data id="SearchEngine_PostData" value="name=value&amp;q={searchTerms}"/>
5606 ```
5607 #### macOS
5608 ```
5609 <dict>
5610 <key>SearchEngines</key>
5611 <dict>
5612 <key>Add</key>
5613 <array>
5614 <dict>
5615 <key>Name</key>
5616 <string>Example1</string>
5617 <key>URLTemplate</key>
5618 <string>https://www.example.org/q={searchTerms}</string>
5619 <key>Method</key>
5620 <string>GET | POST </string>
5621 <key>IconURL</key>
5622 <string>https://www.example.org/favicon.ico</string>
5623 <key>Alias</key>
5624 <string>example</string>
5625 <key>Description</key>
5626 <string>Example Description</string>
5627 <key>SuggestURLTemplate</key>
5628 <string>https://www.example.org/suggestions/q={searchTerms}</string>
5629 <key>PostData</key>
5630 <string>name=value&q={searchTerms}</string>
5631 </dict>
5632 <array>
5633 </dict>
5634 </dict>
5635 ```
5636 #### policies.json
5637 ```
5638 {
5639 "policies": {
5640 "SearchEngines": {
5641 "Add": [
5642 {
5643 "Name": "Example1",
5644 "URLTemplate": "https://www.example.org/q={searchTerms}",
5645 "Method": "GET" | "POST",
5646 "IconURL": "https://www.example.org/favicon.ico",
5647 "Alias": "example",
5648 "Description": "Description",
5649 "PostData": "name=value&q={searchTerms}",
5650 "SuggestURLTemplate": "https://www.example.org/suggestions/q={searchTerms}"
5651 }
5652 ]
5653 }
5654 }
5655 }
5656 ```
5657 ### SearchEngines | Default
5658
5659 Set the default search engine. This policy is only available on the ESR.
5660
5661 **Compatibility:** Firefox ESR 60\
5662 **CCK2 Equivalent:** `defaultSearchEngine`\
5663 **Preferences Affected:** N/A
5664
5665 #### Windows (GPO)
5666 ```
5667 Software\Policies\Mozilla\Firefox\SearchEngines\Default = NAME_OF_SEARCH_ENGINE
5668 ```
5669 #### Windows (Intune)
5670 OMA-URI:
5671 ```
5672 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_Default
5673 ```
5674 Value (string):
5675 ```
5676 <enabled/>
5677 <data id="SearchEngines_Default" value="NAME_OF_SEARCH_ENGINE"/>
5678 ```
5679 #### macOS
5680 ```
5681 <dict>
5682 <key>SearchEngines</key>
5683 <dict>
5684 <key>Default</key>
5685 <string>NAME_OF_SEARCH_ENGINE</string>
5686 </dict>
5687 </dict>
5688 ```
5689 #### policies.json
5690 ```
5691 {
5692 "policies": {
5693 "SearchEngines": {
5694 "Default": "NAME_OF_SEARCH_ENGINE"
5695 }
5696 }
5697 }
5698 ```
5699 ### SearchEngines | PreventInstalls
5700
5701 Prevent installing search engines from webpages.
5702
5703 **Compatibility:** Firefox ESR 60\
5704 **CCK2 Equivalent:** `disableSearchEngineInstall`\
5705 **Preferences Affected:** N/A
5706
5707 #### Windows (GPO)
5708 ```
5709 Software\Policies\Mozilla\Firefox\SearchEngines\PreventInstalls = 0x1 | 0x0
5710 ```
5711 #### Windows (Intune)
5712 OMA-URI:
5713 ```
5714 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_PreventInstalls
5715 ```
5716 Value (string):
5717 ```
5718 <enabled/> or <disabled/>
5719 ```
5720 #### macOS
5721 ```
5722 <dict>
5723 <key>SearchEngines</key>
5724 <dict>
5725 <key>PreventInstalls</key>
5726 <true/> | <false/>
5727 </dict>
5728 </dict>
5729 ```
5730 #### policies.json
5731 ```
5732 {
5733 "policies": {
5734 "SearchEngines": {
5735 "PreventInstalls": true | false
5736 }
5737 }
5738 }
5739 ```
5740 ### SearchEngines | Remove
5741
5742 Hide built-in search engines. This policy is only available on the ESR.
5743
5744 **Compatibility:** Firefox ESR 60.2\
5745 **CCK2 Equivalent:** `removeDefaultSearchEngines` (removed all built-in engines)\
5746 **Preferences Affected:** N/A
5747
5748 #### Windows (GPO)
5749 ```
5750 Software\Policies\Mozilla\Firefox\SearchEngines\Remove\1 = NAME_OF_SEARCH_ENGINE
5751 ```
5752 #### Windows (Intune)
5753 OMA-URI:
5754 ```
5755 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_Remove
5756 ```
5757 Value (string):
5758 ```
5759 <enabled/>
5760 <data id="SearchEngines_Remove" value="1&#xF000;NAME_OF_SEARCH_ENGINE"/>
5761 ```
5762 #### macOS
5763 ```
5764 <dict>
5765 <key>SearchEngines</key>
5766 <dict>
5767 <key>Remove</key>
5768 <array>
5769 <string>NAME_OF_SEARCH_ENGINE</string>
5770 </array>
5771 </dict>
5772 </dict>
5773 ```
5774 #### policies.json
5775 ```
5776 {
5777 "policies": {
5778 "SearchEngines": {
5779 "Remove": ["NAME_OF_SEARCH_ENGINE"]
5780 }
5781 }
5782 }
5783 ```
5784 ### SearchSuggestEnabled
5785
5786 Enable search suggestions.
5787
5788 **Compatibility:** Firefox 68, Firefox ESR 68\
5789 **CCK2 Equivalent:** N/A\
5790 **Preferences Affected:** `browser.urlbar.suggest.searches`, `browser.search.suggest.enabled`
5791
5792 #### Windows (GPO)
5793 ```
5794 Software\Policies\Mozilla\Firefox\SearchSuggestEnabled = 0x1 | 0x0
5795 ```
5796 #### Windows (Intune)
5797 OMA-URI:
5798 ```
5799 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchSuggestEnabled
5800 ```
5801 Value (string):
5802 ```
5803 <enabled/> or <disabled/>
5804 ```
5805 #### macOS
5806 ```
5807 <dict>
5808 <key>SearchSuggestEnabled</key>
5809 <true/> | <false/>
5810 </dict>
5811 ```
5812 #### policies.json
5813 ```
5814 {
5815 "policies": {
5816 "SearchSuggestEnabled": true | false
5817 }
5818 }
5819 ```
5820 ### SecurityDevices
5821
5822 Install PKCS #11 modules.
5823
5824 **Compatibility:** Firefox 64, Firefox ESR 60.4\
5825 **CCK2 Equivalent:** `certs.devices`\
5826 **Preferences Affected:** N/A
5827
5828 #### Windows (GPO)
5829 ```
5830 Software\Policies\Mozilla\Firefox\SecurityDevices\NAME_OF_DEVICE = PATH_TO_LIBRARY_FOR_DEVICE
5831 ```
5832 #### Windows (Intune)
5833 OMA-URI:
5834 ```
5835 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SecurityDevices
5836 ```
5837 Value (string):
5838 ```
5839 <enabled/>
5840 <data id="SecurityDevices" value="NAME_OF_DEVICE&#xF000;PATH_TO_LIBRARY_FOR_DEVICE"/>
5841 ```
5842 #### macOS
5843 ```
5844 <dict>
5845 <key>SecurityDevices</key>
5846 <dict>
5847 <key>NAME_OF_DEVICE</key>
5848 <string>PATH_TO_LIBRARY_FOR_DEVICE</string>
5849 </dict>
5850 </dict>
5851 ```
5852
5853 #### policies.json
5854 ```
5855 {
5856 "policies": {
5857 "SecurityDevices": {
5858 "NAME_OF_DEVICE": "PATH_TO_LIBRARY_FOR_DEVICE"
5859 }
5860 }
5861 }
5862 ```
5863 ### ShowHomeButton
5864 Show the home button on the toolbar.
5865
5866 Future versions of Firefox will not show the home button by default.
5867
5868 **Compatibility:** Firefox 88, Firefox ESR 78.10\
5869 **CCK2 Equivalent:** N/A\
5870 **Preferences Affected:** N/A
5871
5872 #### Windows (GPO)
5873 ```
5874 Software\Policies\Mozilla\Firefox\ShowHomeButton = 0x1 | 0x0
5875 ```
5876 #### Windows (Intune)
5877 OMA-URI:
5878 ```
5879 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/Homepage_ShowHomeButton
5880 ```
5881 Value (string):
5882 ```
5883 <enabled/> or <disabled/>
5884 ```
5885 #### macOS
5886 ```
5887 <dict>
5888 <key>ShowHomeButton</key>
5889 <true/> | <false/>
5890 </dict>
5891 ```
5892 #### policies.json
5893 ```
5894 {
5895 "policies": {
5896 "ShowHomeButton": true | false
5897 }
5898 }
5899 ```
5900 ### SSLVersionMax
5901
5902 Set and lock the maximum version of TLS.
5903
5904 **Compatibility:** Firefox 66, Firefox ESR 60.6\
5905 **CCK2 Equivalent:** N/A\
5906 **Preferences Affected:** `security.tls.version.max`
5907
5908 #### Windows (GPO)
5909 ```
5910 Software\Policies\Mozilla\Firefox\SSLVersionMax = "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
5911 ```
5912 #### Windows (Intune)
5913 OMA-URI:
5914 ```
5915 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SSLVersionMax
5916 ```
5917 Value (string):
5918 ```
5919 <enabled/>
5920 <data id="SSLVersion" value="tls1 | tls1.2 | tls1.3"/>
5921 ```
5922 #### macOS
5923 ```
5924 <dict>
5925 <key>SSLVersionMax</key>
5926 <string>tls1 | tls1.1 | tls1.2 | tls1.3</string>
5927 </dict>
5928 ```
5929
5930 #### policies.json
5931 ```
5932 {
5933 "policies": {
5934 "SSLVersionMax": "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
5935 }
5936 }
5937 ```
5938 ### SSLVersionMin
5939
5940 Set and lock the minimum version of TLS.
5941
5942 **Compatibility:** Firefox 66, Firefox ESR 60.6\
5943 **CCK2 Equivalent:** N/A\
5944 **Preferences Affected:** `security.tls.version.min`
5945
5946 #### Windows (GPO)
5947 ```
5948 Software\Policies\Mozilla\Firefox\SSLVersionMin = "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
5949 ```
5950 #### Windows (Intune)
5951 OMA-URI:
5952 ```
5953 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SSLVersionMin
5954 ```
5955 Value (string):
5956 ```
5957 <enabled/>
5958 <data id="SSLVersion" value="tls1 | tls1.2 | tls1.3"/>
5959 ```
5960 #### macOS
5961 ```
5962 <dict>
5963 <key>SSLVersionMin</key>
5964 <string>tls1 | tls1.1 | tls1.2 | tls1.3</string>
5965 </dict>
5966 ```
5967
5968 #### policies.json
5969 ```
5970 {
5971 "policies": {
5972 "SSLVersionMin": "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
5973 }
5974 }
5975 ```
5976 ### SupportMenu
5977 Add a menuitem to the help menu for specifying support information.
5978
5979 **Compatibility:** Firefox 68.0.1, Firefox ESR 68.0.1\
5980 **CCK2 Equivalent:** helpMenu\
5981 **Preferences Affected:** N/A
5982
5983 #### Windows (GPO)
5984 ```
5985 Software\Policies\Mozilla\Firefox\SupportMenu\Title = "Support Menu"
5986 Software\Policies\Mozilla\Firefox\SupportMenu\URL = "http://example.com/support"
5987 Software\Policies\Mozilla\Firefox\SupportMenu\AccessKey = "S"
5988 ```
5989 #### Windows (Intune)
5990 OMA-URI:
5991 ```
5992 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SupportMenu
5993 ```
5994 Value (string):
5995 ```
5996 <enabled/>
5997 <data id="SupportMenuTitle" value="Support Menu"/>
5998 <data id="SupportMenuURL" value="http://example.com/support"/>
5999 <data id="SupportMenuAccessKey" value="S"/>
6000 ```
6001 #### macOS
6002 ```
6003 <dict>
6004 <key>SupportMenu</key>
6005 <dict>
6006 <key>Title</key>
6007 <string>SupportMenu</string>
6008 <key>URL</key>
6009 <string>http://example.com/support</string>
6010 <key>AccessKey</key>
6011 <string>S</string>
6012 </dict>
6013 </dict>
6014 ```
6015 #### policies.json
6016 ```
6017 {
6018 "policies": {
6019 "SupportMenu": {
6020 "Title": "Support Menu",
6021 "URL": "http://example.com/support",
6022 "AccessKey": "S"
6023 }
6024 }
6025 }
6026 ```
6027 ### StartDownloadsInTempDirectory
6028 Force downloads to start off in a local, temporary location rather than the default download directory.
6029
6030 **Compatibility:** Firefox 102\
6031 **CCK2 Equivalent:** N/A\
6032 **Preferences Affected:** `browser.download.start_downloads_in_tmp_dir`
6033
6034 #### Windows (GPO)
6035 ```
6036 Software\Policies\Mozilla\Firefox\StartDownloadsInTempDirectory = 0x1 | 0x0
6037 ```
6038 #### Windows (Intune)
6039 OMA-URI:
6040 ```
6041 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/StartDownloadsInTempDirectory
6042 ```
6043 Value (string):
6044 ```
6045 <enabled/> or <disabled/>
6046 ```
6047 #### macOS
6048 ```
6049 <dict>
6050 <key>StartDownloadsInTempDirectory</key>
6051 <true/> | <false/>
6052 </dict>
6053 ```
6054 #### policies.json
6055 ```
6056 {
6057 "policies": {
6058 "StartDownloadsInTempDirectory": true | false
6059 }
6060 ```
6061 ### UserMessaging
6062
6063 Prevent Firefox from messaging the user in certain situations.
6064
6065 `WhatsNew` Remove the "What's New" icon and menuitem.
6066
6067 `ExtensionRecommendations` If false, don't recommend extensions while the user is visiting web pages.
6068
6069 `FeatureRecommendations` If false, don't recommend browser features.
6070
6071 `UrlbarInterventions` If false, Don't offer Firefox specific suggestions in the URL bar.
6072
6073 `SkipOnboarding` If true, don't show onboarding messages on the new tab page.
6074
6075 `MoreFromMozilla` If false, don't show the "More from Mozilla" section in Preferences. (Firefox 98)
6076
6077 **Compatibility:** Firefox 75, Firefox ESR 68.7\
6078 **CCK2 Equivalent:** N/A\
6079 **Preferences Affected:** `browser.messaging-system.whatsNewPanel.enabled`, `browser.newtabpage.activity-stream.asrouter.userprefs.cfr.addons`, `browser.newtabpage.activity-stream.asrouter.userprefs.cfr.features`, `browser.aboutwelcome.enabled`, `browser.preferences.moreFromMozilla`
6080
6081 #### Windows (GPO)
6082 ```
6083 Software\Policies\Mozilla\Firefox\UserMessaging\WhatsNew = 0x1 | 0x0
6084 Software\Policies\Mozilla\Firefox\UserMessaging\ExtensionRecommendations = 0x1 | 0x0
6085 Software\Policies\Mozilla\Firefox\UserMessaging\FeatureRecommendations = 0x1 | 0x0
6086 Software\Policies\Mozilla\Firefox\UserMessaging\UrlbarInterventions = 0x1 | 0x0
6087 Software\Policies\Mozilla\Firefox\UserMessaging\SkipOnboarding = 0x1 | 0x0
6088 Software\Policies\Mozilla\Firefox\UserMessaging\MoreFromMozilla = 0x1 | 0x0
6089 ```
6090 #### Windows (Intune)
6091 OMA-URI:
6092 ```
6093 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_WhatsNew
6094 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_ExtensionRecommendations
6095 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_FeatureRecommendations
6096 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_UrlbarInterventions
6097 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_SkipOnboarding
6098 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_MoreFromMozilla
6099 ```
6100 Value (string):
6101 ```
6102 <enabled/> or <disabled/>
6103 ```
6104 #### macOS
6105 ```
6106 <dict>
6107 <key>UserMessaging</key>
6108 <dict>
6109 <key>WhatsNew</key>
6110 <true/> | <false/>
6111 <key>ExtensionRecommendations</key>
6112 <true/> | <false/>
6113 <key>FeatureRecommendations</key>
6114 <true/> | <false/>
6115 <key>UrlbarInterventions</key>
6116 <true/> | <false/>
6117 <key>SkipOnboarding</key>
6118 <true/> | <false/>
6119 <key>MoreFromMozilla</key>
6120 <true/> | <false/>
6121 </dict>
6122 </dict>
6123 ```
6124 #### policies.json
6125 ```
6126 {
6127 "policies": {
6128 "UserMessaging": {
6129 "WhatsNew": true | false,
6130 "ExtensionRecommendations": true | false,
6131 "FeatureRecommendations": true | false,
6132 "UrlbarInterventions": true | false,
6133 "SkipOnboarding": true | false,
6134 "MoreFromMozilla": true | false
6135 }
6136 }
6137 }
6138 ```
6139 ### UseSystemPrintDialog
6140 Use the system print dialog instead of the print preview window.
6141
6142 **Compatibility:** Firefox 102\
6143 **CCK2 Equivalent:** N/A\
6144 **Preferences Affected:** `print.prefer_system_dialog`
6145
6146 #### Windows (GPO)
6147 ```
6148 Software\Policies\Mozilla\Firefox\UseSystemPrintDialog = 0x1 | 0x0
6149 ```
6150 #### Windows (Intune)
6151 OMA-URI:
6152 ```
6153 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/UseSystemPrintDialog
6154 ```
6155 Value (string):
6156 ```
6157 <enabled/> or <disabled/>
6158 ```
6159 #### macOS
6160 ```
6161 <dict>
6162 <key>UseSystemPrintDialog</key>
6163 <true/> | <false/>
6164 </dict>
6165 ```
6166 #### policies.json
6167 ```
6168 {
6169 "policies": {
6170 "UseSystemPrintDialog": true | false
6171 }
6172 }
6173 ```
6174 ### WebsiteFilter
6175 Block websites from being visited. The parameters take an array of Match Patterns, as documented in https://developer.mozilla.org/en-US/Add-ons/WebExtensions/Match_patterns.
6176 The arrays are limited to 1000 entries each.
6177
6178 If you want to block all URLs, you can use `<all_urls>` or `*://*/*`. You can't have just a `*` on the right side.
6179
6180 For specific protocols, use `https://*/*` or `http://*/*`.
6181
6182 As of Firefox 83 and Firefox ESR 78.5, file URLs are supported.
6183
6184 **Compatibility:** Firefox 60, Firefox ESR 60\
6185 **CCK2 Equivalent:** N/A\
6186 **Preferences Affected:** N/A
6187
6188 #### Windows (GPO)
6189 ```
6190 Software\Policies\Mozilla\Firefox\WebsiteFilter\Block\1 = "<all_urls>"
6191 Software\Policies\Mozilla\Firefox\WebsiteFilter\Exceptions\1 = "http://example.org/*"
6192 ```
6193 #### Windows (Intune)
6194 OMA-URI:
6195 ```
6196 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/B_WebsiteFilter_Block
6197 ```
6198 Value (string):
6199 ```
6200 <enabled/> <data id="WebsiteFilter" value="1&#xF000;&#60;all_urls&#62;"/>
6201 ```
6202 OMA-URI:
6203 ```
6204 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/B_WebsiteFilter_Exceptions
6205 ```
6206 Value (string):
6207 ```
6208 <enabled/>
6209 <data id="WebsiteFilter" value="1&#xF000;http://example.org/*"/>
6210 ```
6211 #### macOS
6212 ```
6213 <dict>
6214 <key>WebsiteFilter</key>
6215 <dict>
6216 <key>Block</key>
6217 <array>
6218 <string><all_urls></string>
6219 </array>
6220 <key>Exceptions</key>
6221 <array>
6222 <string>http://example.org/*</string>
6223 </array>
6224 </dict>
6225
6226 </dict>
6227 ```
6228 #### policies.json
6229 ```
6230 {
6231 "policies": {
6232 "WebsiteFilter": {
6233 "Block": ["<all_urls>"],
6234 "Exceptions": ["http://example.org/*"]
6235 }
6236 }
6237 }
6238 ```
6239 ### WindowsSSO
6240 Allow Windows single sign-on for Microsoft, work, and school accounts.
6241
6242 If this policy is set to true, Firefox will use credentials stored in Windows to sign in to Microsoft, work, and school accounts.
6243
6244 **Compatibility:** Firefox 91\
6245 **CCK2 Equivalent:** N/A\
6246 **Preferences Affected:** `network.http.windows-sso.enabled`
6247
6248 #### Windows (GPO)
6249 ```
6250 Software\Policies\Mozilla\Firefox\WindowsSSO = 0x1 | 0x0
6251 ```
6252 #### Windows (Intune)
6253 OMA-URI:
6254 ```
6255 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/WindowsSSO
6256 ```
6257 Value (string):
6258 ```
6259 <enabled/> or <disabled/>
6260 ```
6261 #### policies.json
6262 ```
6263 {
6264 "policies": {
6265 "WindowsSSO": true | false
6266 }
6267 }
6268 ```
My copy of the policy templates for Firefox

patrick-canterino.de