README.md

   1 **These policies are in active development and so might contain changes that do not work with current versions of Firefox.**
   2
   3 **You should use the [officially released versions](https://github.com/mozilla/policy-templates/releases) if you are deploying changes.**
   4
   5 Policies can be specified using the [Group Policy templates on Windows](https://github.com/mozilla/policy-templates/tree/master/windows), [Intune on Windows](https://support.mozilla.org/kb/managing-firefox-intune), [configuration profiles on macOS](https://github.com/mozilla/policy-templates/tree/master/mac), or by creating a file called `policies.json`. On Windows, create a directory called `distribution` where the EXE is located and place the file there. On Mac, the file goes into `Firefox.app/Contents/Resources/distribution`.  On Linux, the file goes into `firefox/distribution`, where `firefox` is the installation directory for firefox, which varies by distribution or you can specify system-wide policy by placing the file in `/etc/firefox/policies`.
   6
   7 | Policy Name | Description
   8 | --- | --- |
   9 | **[`3rdparty`](#3rdparty)** | Set policies that WebExtensions can access via chrome.storage.managed.
  10 | **[`AllowedDomainsForApps`](#alloweddomainsforapps)** | Define domains allowed to access Google Workspace.
  11 | **[`AppAutoUpdate`](#appautoupdate)** | Enable or disable automatic application update.
  12 | **[`AppUpdateURL`](#appupdateurl)** | Change the URL for application update.
  13 | **[`Authentication`](#authentication)** | Configure sites that support integrated authentication.
  14 | **[`AutoLaunchProtocolsFromOrigins`](#autolaunchprotocolsfromorigins)** | Define a list of external protocols that can be used from listed origins without prompting the user.
  15 | **[`BackgroundAppUpdate`](#backgroundappupdate)** | Enable or disable the background updater (Windows only).
  16 | **[`BlockAboutAddons`](#blockaboutaddons)** | Block access to the Add-ons Manager (about:addons).
  17 | **[`BlockAboutConfig`](#blockaboutconfig)** | Block access to about:config.
  18 | **[`BlockAboutProfiles`](#blockaboutprofiles)** | Block access to About Profiles (about:profiles).
  19 | **[`BlockAboutSupport`](#blockaboutsupport)** | Block access to Troubleshooting Information (about:support).
  20 | **[`Bookmarks`](#bookmarks)** | Add bookmarks in either the bookmarks toolbar or menu.
  21 | **[`CaptivePortal`](#captiveportal)** | Enable or disable the detection of captive portals.
  22 | **[`Certificates`](#certificates)** |
  23 | **[`Certificates -> ImportEnterpriseRoots`](#certificates--importenterpriseroots)** | Trust certificates that have been added to the operating system certificate store by a user or administrator.
  24 | **[`Certificates -> Install`](#certificates--install)** | Install certificates into the Firefox certificate store.
  25 | **[`Cookies`](#cookies)** | Configure cookie preferences.
  26 | **[`DefaultDownloadDirectory`](#defaultdownloaddirectory)** | Set the default download directory.
  27 | **[`DisableAppUpdate`](#disableappupdate)** | Turn off application updates.
  28 | **[`DisableBuiltinPDFViewer`](#disablebuiltinpdfviewer)** | Disable the built in PDF viewer.
  29 | **[`DisabledCiphers`](#disabledciphers)** | Disable ciphers.
  30 | **[`DisableDefaultBrowserAgent`](#disabledefaultbrowseragent)** | Prevent the default browser agent from taking any actions (Windows only).
  31 | **[`DisableDeveloperTools`](#disabledevelopertools)** | Remove access to all developer tools.
  32 | **[`DisableFeedbackCommands`](#disablefeedbackcommands)** | Disable the menus for reporting sites.
  33 | **[`DisableFirefoxAccounts`](#disablefirefoxaccounts)** | Disable Firefox Accounts integration (Sync).
  34 | **[`DisableFirefoxScreenshots`](#disablefirefoxscreenshots)** | Remove access to Firefox Screenshots.
  35 | **[`DisableFirefoxStudies`](#disablefirefoxstudies)** | Disable Firefox studies (Shield).
  36 | **[`DisableForgetButton`](#disableforgetbutton)** | Disable the "Forget" button.
  37 | **[`DisableFormHistory`](#disableformhistory)** | Turn off saving information on web forms and the search bar.
  38 | **[`DisableMasterPasswordCreation`](#disablemasterpasswordcreation)** | Remove the master password functionality.
  39 | **[`DisablePasswordReveal`](#disablepasswordreveal)** | Do not allow passwords to be revealed in saved logins.
  40 | **[`DisablePocket`](#disablepocket)** | Remove Pocket in the Firefox UI.
  41 | **[`DisablePrivateBrowsing`](#disableprivatebrowsing)** | Remove access to private browsing.
  42 | **[`DisableProfileImport`](#disableprofileimport)** | Disables the "Import data from another browser" option in the bookmarks window.
  43 | **[`DisableProfileRefresh`](#disableprofilerefresh)** | Disable the Refresh Firefox button on about:support and support.mozilla.org
  44 | **[`DisableSafeMode`](#disablesafemode)** | Disable safe mode within the browser.
  45 | **[`DisableSecurityBypass`](#disablesecuritybypass)** | Prevent the user from bypassing security in certain cases.
  46 | **[`DisableSetDesktopBackground`](#disablesetdesktopbackground)** | Remove the "Set As Desktop Background..." menuitem when right clicking on an image.
  47 | **[`DisableSystemAddonUpdate`](#disablesystemaddonupdate)** | Prevent system add-ons from being installed or update.
  48 | **[`DisableTelemetry`](#disabletelemetry)** | DisableTelemetry
  49 | **[`DisplayBookmarksToolbar`](#displaybookmarkstoolbar)** | Set the initial state of the bookmarks toolbar.
  50 | **[`DisplayMenuBar`](#displaymenubar)** | Set the state of the menubar.
  51 | **[`DisplayMenuBar (Deprecated)`](#displaymenubar-deprecated)** | Set the initial state of the menubar.
  52 | **[`DNSOverHTTPS`](#dnsoverhttps)** | Configure DNS over HTTPS.
  53 | **[`DontCheckDefaultBrowser`](#dontcheckdefaultbrowser)** | Don't check if Firefox is the default browser at startup.
  54 | **[`DownloadDirectory`](#downloaddirectory)** | Set and lock the download directory.
  55 | **[`EnableTrackingProtection`](#enabletrackingprotection)** | Configure tracking protection.
  56 | **[`EncryptedMediaExtensions`](#encryptedmediaextensions)** | Enable or disable Encrypted Media Extensions and optionally lock it.
  57 | **[`EnterprisePoliciesEnabled`](#enterprisepoliciesenabled)** | Enable policy support on macOS.
  58 | **[`Extensions`](#extensions)** | Control the installation, uninstallation and locking of extensions.
  59 | **[`ExtensionSettings`](#extensionsettings)** | Manage all aspects of extensions.
  60 | **[`ExtensionUpdate`](#extensionupdate)** | Control extension updates.
  61 | **[`FirefoxHome`](#firefoxhome)** | Customize the Firefox Home page.
  62 | **[`FlashPlugin (Deprecated)`](#flashplugin-deprecated)** | Configure the default Flash plugin policy as well as origins for which Flash is allowed.
  63 | **[`Handlers`](#handlers)** | Configure default application handlers.
  64 | **[`HardwareAcceleration`](#hardwareacceleration)** | Control hardware acceleration.
  65 | **[`Homepage`](#homepage)** | Configure the default homepage and how Firefox starts.
  66 | **[`InstallAddonsPermission`](#installaddonspermission)** | Configure the default extension install policy as well as origins for extension installs are allowed.
  67 | **[`LegacyProfiles`](#legacyprofiles)** | Disable the feature enforcing a separate profile for each installation.
  68 | **[`LegacySameSiteCookieBehaviorEnabled`](#legacysamesitecookiebehaviorenabled)** | Enable default legacy SameSite cookie behavior setting.
  69 | **[`LegacySameSiteCookieBehaviorEnabledForDomainList`](#legacysamesitecookiebehaviorenabledfordomainlist)** | Revert to legacy SameSite behavior for cookies on specified sites.
  70 | **[`LocalFileLinks`](#localfilelinks)** | Enable linking to local files by origin.
  71 | **[`ManagedBookmarks`](#managedbookmarks)** | Configures a list of bookmarks managed by an administrator that cannot be changed by the user.
  72 | **[`ManualAppUpdateOnly`](#manualappupdateonly)** | Allow manual updates only and do not notify the user about updates..
  73 | **[`NetworkPrediction`](#networkprediction)** | Enable or disable network prediction (DNS prefetching).
  74 | **[`NewTabPage`](#newtabpage)** | Enable or disable the New Tab page.
  75 | **[`NoDefaultBookmarks`](#nodefaultbookmarks)** | Disable the creation of default bookmarks.
  76 | **[`OfferToSaveLogins`](#offertosavelogins)** | Control whether or not Firefox offers to save passwords.
  77 | **[`OfferToSaveLoginsDefault`](#offertosaveloginsdefault)** | Set the default value for whether or not Firefox offers to save passwords.
  78 | **[`OverrideFirstRunPage`](#overridefirstrunpage)** | Override the first run page.
  79 | **[`OverridePostUpdatePage`](#overridepostupdatepage)** | Override the upgrade page.
  80 | **[`PasswordManagerEnabled`](#passwordmanagerenabled)** | Remove (some) access to the password manager.
  81 | **[`PDFjs`](#pdfjs)** | Disable or configure PDF.js, the built-in PDF viewer.
  82 | **[`Permissions`](#permissions)** | Set permissions associated with camera, microphone, location, and notifications.
  83 | **[`PictureInPicture`](#pictureinpicture)** | Enable or disable Picture-in-Picture.
  84 | **[`PopupBlocking`](#popupblocking)** | Configure the default pop-up window policy as well as origins for which pop-up windows are allowed.
  85 | **[`Preferences`](#preferences)** | Set and lock preferences.
  86 | **[`Preferences (Deprecated)`](#preferences-deprecated)** | Set and lock some preferences.
  87 | **[`PrimaryPassword`](#primarypassword)** | Require or prevent using a primary (formerly master) password.
  88 | **[`PromptForDownloadLocation`](#promptfordownloadlocation)** | Ask where to save each file before downloading.
  89 | **[`Proxy`](#proxy)** | Configure proxy settings.
  90 | **[`RequestedLocales`](#requestedlocales)** | Set the the list of requested locales for the application in order of preference.
  91 | **[`SanitizeOnShutdown` (All)](#sanitizeonshutdown-all)** | Clear all data on shutdown.
  92 | **[`SanitizeOnShutdown` (Selective)](#sanitizeonshutdown-selective)** | Clear data on shutdown.
  93 | **[`SearchBar`](#searchbar)** | Set whether or not search bar is displayed.
  94 | **[`SearchEngines`](#searchengines-this-policy-is-only-available-on-the-esr)** |
  95 | **[`SearchEngines -> Add`](#searchengines--add)** | Add new search engines.
  96 | **[`SearchEngines -> Default`](#searchengines--default)** | Set the default search engine.
  97 | **[`SearchEngines -> PreventInstalls`](#searchengines--preventinstalls)** | Prevent installing search engines from webpages.
  98 | **[`SearchEngines -> Remove`](#searchengines--remove)** | Hide built-in search engines.
  99 | **[`SearchSuggestEnabled`](#searchsuggestenabled)** | Enable search suggestions.
 100 | **[`SecurityDevices`](#securitydevices)** | Install PKCS #11 modules.
 101 | **[`ShowHomeButton`](#showhomebutton)** | Show the home button on the toolbar.
 102 | **[`SSLVersionMax`](#sslversionmax)** | Set and lock the maximum version of TLS.
 103 | **[`SSLVersionMin`](#sslversionmin)** | Set and lock the minimum version of TLS.
 104 | **[`SupportMenu`](#supportmenu)** | Add a menuitem to the help menu for specifying support information.
 105 | **[`UserMessaging`](#usermessaging)** | Don't show certain messages to the user.
 106 | **[`WebsiteFilter`](#websitefilter)** | Block websites from being visited.
 107 | **[`WindowsSSO`](#windowssso)** | Allow Windows single sign-on for Microsoft, work, and school accounts.
 108
 109 ### 3rdparty
 110
 111 Allow WebExtensions to configure policy. For more information, see [Adding policy support to your extension](https://extensionworkshop.com/documentation/enterprise/adding-policy-support-to-your-extension/).
 112
 113 For GPO and Intune, the extension developer should provide an ADMX file.
 114
 115 **Compatibility:** Firefox 68\
 116 **CCK2 Equivalent:** N/A\
 117 **Preferences Affected:** N/A
 118
 119 #### macOS
 120 ```
 121 <dict>
 122   <key>3rdparty</key>
 123   <dict>
 124     <key>Extensions</key>
 125     <dict>
 126       <key>uBlock0@raymondhill.net</key>
 127       <dict>
 128         <key>adminSettings</key>
 129         <dict>
 130           <key>selectedFilterLists</key>
 131           <array>
 132             <string>ublock-privacy</string>
 133             <string>ublock-badware</string>
 134             <string>ublock-filters</string>
 135             <string>user-filters</string>
 136           </array>
 137         </dict>
 138       </dict>
 139     </dict>
 140   </dict>
 141 </dict>
 142 ```
 143 #### policies.json
 144 ```
 145 {
 146   "policies": {
 147     "3rdparty": {
 148       "Extensions": {
 149         "uBlock0@raymondhill.net": {
 150           "adminSettings": {
 151             "selectedFilterLists": [
 152               "ublock-privacy",
 153               "ublock-badware",
 154               "ublock-filters",
 155               "user-filters"
 156             ]
 157           }
 158         }
 159       }
 160     }
 161   }
 162 }
 163 ```
 164
 165 ### AllowedDomainsForApps
 166
 167 Define domains allowed to access Google Workspace.
 168
 169 This policy is based on the [Chrome policy](https://chromeenterprise.google/policies/#AllowedDomainsForApps) of the same name.
 170
 171 If this policy is enabled, users can only access Google Workspace using accounts from the specified domains. If you want to allow Gmail, you can add ```consumer_accounts``` to the list.
 172
 173 **Compatibility:** Firefox 89, Firefox ESR 78.11\
 174 **CCK2 Equivalent:** N/A\
 175 **Preferences Affected:** N/A
 176
 177 #### Windows (GPO)
 178 ```
 179 Software\Policies\Mozilla\Firefox\AllowedDomainsForApps = "managedfirefox.com,example.com"
 180 ```
 181 #### Windows (Intune)
 182 OMA-URI:
 183 ```
 184 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AllowedDomainsForApps
 185 ```
 186 Value (string):
 187 ```
 188 <enabled/>
 189 <data id="AllowedDomainsForApps" value="managedfirefox.com,example.com"/>
 190 ```
 191 #### macOS
 192 ```
 193 <dict>
 194   <key>AllowedDomainsForApps</key>
 195   <string>managedfirefox.com,example.com</string>
 196 </dict>
 197 ```
 198 #### policies.json
 199 ```
 200 {
 201   "policies": {
 202     "AllowedDomainsForApps": "managedfirefox.com,example.com"
 203   }
 204 }
 205 ```
 206 ### AppAutoUpdate
 207
 208 Enable or disable **automatic** application update.
 209
 210 If set to true, application updates are installed without user approval within Firefox. The operating system might still require approval.
 211
 212 If set to false, application updates are downloaded but the user can choose when to install the update.
 213
 214 If you have disabled updates via `DisableAppUpdate`, this policy has no effect.
 215
 216 **Compatibility:** Firefox 75, Firefox ESR 68.7\
 217 **CCK2 Equivalent:** N/A\
 218 **Preferences Affected:** `app.update.auto`
 219
 220 #### Windows (GPO)
 221 ```
 222 Software\Policies\Mozilla\Firefox\AppAutoUpdate = 0x1 | 0x0
 223 ```
 224 #### Windows (Intune)
 225 OMA-URI:
 226 ```
 227 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AppAutoUpdate
 228 ```
 229 Value (string):
 230 ```
 231 <enabled/> or <disabled/>
 232 ```
 233 #### macOS
 234 ```
 235 <dict>
 236   <key>AppAutoUpdate</key>
 237   <true/> | <false/>
 238 </dict>
 239 ```
 240 #### policies.json
 241 ```
 242 {
 243   "policies": {
 244     "AppAutoUpdate": true | false
 245   }
 246 }
 247 ```
 248 ### AppUpdateURL
 249
 250 Change the URL for application update if you are providing Firefox updates from a custom update server.
 251
 252 **Compatibility:** Firefox 62, Firefox ESR 60.2\
 253 **CCK2 Equivalent:** N/A\
 254 **Preferences Affected:** `app.update.url`
 255
 256 #### Windows (GPO)
 257 ```
 258 Software\Policies\Mozilla\Firefox\AppUpdateURL = "https://yoursite.com"
 259 ```
 260 #### Windows (Intune)
 261 OMA-URI:
 262 ```
 263 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AppUpdateURL
 264 ```
 265 Value (string):
 266 ```
 267 <enabled/>
 268 <data id="AppUpdateURL" value="https://yoursite.com"/>
 269 ```
 270 #### macOS
 271 ```
 272 <dict>
 273   <key>AppUpdateURL</key>
 274   <string>https://yoursite.com</string>
 275 </dict>
 276 ```
 277 #### policies.json
 278 ```
 279 {
 280   "policies": {
 281     "AppUpdateURL": "https://yoursite.com"
 282   }
 283 }
 284 ```
 285 ### Authentication
 286
 287 Configure sites that support integrated authentication.
 288
 289 See [Integrated authentication](https://htmlpreview.github.io/?https://github.com/mdn/archived-content/blob/main/files/en-us/mozilla/integrated_authentication/raw.html) for more information.
 290
 291 `PrivateBrowsing` enables integrated authentication in private browsing.
 292
 293 **Compatibility:** Firefox 60, Firefox ESR 60 (AllowNonFQDN added in 62/60.2, AllowProxies added in 70/68.2, Locked added in 71/68.3, PrivateBrowsing added in 77/68.9)\
 294 **CCK2 Equivalent:** N/A\
 295 **Preferences Affected:** `network.negotiate-auth.trusted-uris`,`network.negotiate-auth.delegation-uris`,`network.automatic-ntlm-auth.trusted-uris`,`network.automatic-ntlm-auth.allow-non-fqdn`,`network.negotiate-auth.allow-non-fqdn`,`network.automatic-ntlm-auth.allow-proxies`,`network.negotiate-auth.allow-proxies`,`network.auth.private-browsing-sso`
 296
 297 #### Windows (GPO)
 298 ```
 299 Software\Policies\Mozilla\Firefox\Authentication\SPNEGO\1 = "mydomain.com"
 300 Software\Policies\Mozilla\Firefox\Authentication\SPNEGO\2 = "https://myotherdomain.com"
 301 Software\Policies\Mozilla\Firefox\Authentication\Delegated\1 = "mydomain.com"
 302 Software\Policies\Mozilla\Firefox\Authentication\Delegated\2 = "https://myotherdomain.com"
 303 Software\Policies\Mozilla\Firefox\Authentication\NTLM\1 = "mydomain.com"
 304 Software\Policies\Mozilla\Firefox\Authentication\NTLM\2 = "https://myotherdomain.com"
 305 Software\Policies\Mozilla\Firefox\Authentication\AllowNonFQDN\SPNEGO = 0x1 | 0x0
 306 Software\Policies\Mozilla\Firefox\Authentication\AllowNonFQDN\NTLM = 0x1 | 0x0
 307 Software\Policies\Mozilla\Firefox\Authentication\AllowProxies\SPNEGO = 0x1 | 0x0
 308 Software\Policies\Mozilla\Firefox\Authentication\AllowProxies\NTLM = 0x1 | 0x0
 309 Software\Policies\Mozilla\Firefox\Authentication\Locked = 0x1 | 0x0
 310 Software\Policies\Mozilla\Firefox\Authentication\PrivateBrowsing = 0x1 | 0x0
 311 ```
 312 #### Windows (Intune)
 313 OMA-URI:
 314 ```
 315 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_SPNEGO
 316 ```
 317 Value (string):
 318 ```
 319 <enabled/>
 320 <data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
 321 ```
 322 OMA-URI:
 323 ```
 324 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_Delegated
 325 ```
 326 Value (string):
 327 ```
 328 <enabled/>
 329 <data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
 330 ```
 331 OMA-URI:
 332 ```
 333 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_NTLM
 334 ```
 335 Value (string):
 336 ```
 337 <enabled/>
 338 <data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
 339 ```
 340 OMA-URI:
 341 ```
 342 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_AllowNonFQDN
 343 ```
 344 Value (string):
 345 ```
 346 <enabled/>
 347 <data id="Authentication_AllowNonFQDN_NTLM" value="true | false"/>
 348 <data id="Authentication_AllowNonFQDN_SPNEGO" value="true | false"/>
 349 ```
 350 OMA-URI:
 351 ```
 352 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_Locked
 353 ```
 354 Value (string):
 355 ```
 356 <enabled/> or <disabled/>
 357 ```
 358 OMA-URI:
 359 ```
 360 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_PrivateBrowsing
 361 ```
 362 Value (string):
 363 ```
 364 <enabled/> or <disabled/>
 365 ```
 366 #### macOS
 367 ```
 368 <dict>
 369   <key>Authentication</key>
 370   <dict>
 371     <key>SPNEGO</key>
 372     <array>
 373       <string>mydomain.com</string>
 374       <string>https://myotherdomain.com</string>
 375     </array>
 376     <key>Delegated</key>
 377     <array>
 378       <string>mydomain.com</string>
 379       <string>https://myotherdomain.com</string>
 380     </array>
 381     <key>NTLM</key>
 382     <array>
 383       <string>mydomain.com</string>
 384       <string>https://myotherdomain.com</string>
 385     </array>
 386     <key>AllowNonFQDN</key>
 387       <dict>
 388       <key>SPNEGO</key>
 389       <true/> | <false/>
 390       <key>NTLM</key>
 391       <true/> | <false/>
 392     </dict>
 393     <key>AllowProxies</key>
 394       <dict>
 395       <key>SPNEGO</key>
 396       <true/> | <false/>
 397       <key>NTLM</key>
 398       <true/> | <false/>
 399     </dict>
 400     <key>Locked</key>
 401     <true/> | <false/>
 402     <key>PrivateBrowsing</key>
 403     <true/> | <false/>
 404   </dict>
 405 </dict>
 406 ```
 407 #### policies.json
 408 ```
 409 {
 410   "policies": {
 411     "Authentication": {
 412       "SPNEGO": ["mydomain.com", "https://myotherdomain.com"],
 413       "Delegated": ["mydomain.com", "https://myotherdomain.com"],
 414       "NTLM": ["mydomain.com", "https://myotherdomain.com"],
 415       "AllowNonFQDN": {
 416         "SPNEGO": true | false,
 417         "NTLM": true | false
 418       },
 419       "AllowProxies": {
 420         "SPNEGO": true | false,
 421         "NTLM": true | false
 422       },
 423       "Locked": true | false,
 424       "PrivateBrowsing": true | false
 425     }
 426   }
 427 }
 428 ```
 429 ### AutoLaunchProtocolsFromOrigins
 430 Define a list of external protocols that can be used from listed origins without prompting the user. The origin is the scheme plus the hostname.
 431
 432 The syntax of this policy is exactly the same as the [Chrome AutoLaunchProtocolsFromOrigins policy](https://cloud.google.com/docs/chrome-enterprise/policies/?policy=AutoLaunchProtocolsFromOrigins) except that you can only use valid origins (not just hostnames). This also means that you cannot specify an asterisk for all origins.
 433
 434 The schema is:
 435 ```
 436 {
 437  "items": {
 438   "properties": {
 439    "allowed_origins": {
 440     "items": {
 441      "type": "string"
 442     },
 443     "type": "array"
 444    },
 445    "protocol": {
 446     "type": "string"
 447    }
 448   },
 449   "required": [
 450    "protocol",
 451    "allowed_origins"
 452   ],
 453   "type": "object"
 454  },
 455  "type": "array"
 456 }
 457 ```
 458 **Compatibility:** Firefox 90, Firefox ESR 78.12\
 459 **CCK2 Equivalent:** N/A\
 460 **Preferences Affected:** N/A
 461
 462 #### Windows (GPO)
 463 Software\Policies\Mozilla\Firefox\AutoLaunchProtocolsFromOrigins (REG_MULTI_SZ) =
 464 ```
 465 [
 466   {
 467     "protocol": "zoommtg",
 468     "allowed_origins": [
 469       "https://somesite.zoom.us"
 470     ]
 471   }
 472 ]
 473 ```
 474 #### Windows (Intune)
 475 OMA-URI:
 476 ```
 477 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AutoLaunchProtocolsFromOrigins
 478 ```
 479 Value (string):
 480 ```
 481 <enabled/>
 482 <data id="JSON" value='
 483 [
 484   {
 485     "protocol": "zoommtg",
 486     "allowed_origins": [
 487       "https://somesite.zoom.us"
 488     ]
 489   }
 490 ]'/>
 491 ```
 492 #### macOS
 493 ```
 494 <dict>
 495   <key>AutoLaunchProtocolsFromOrigins</key>
 496   <array>
 497     <dict>
 498       <key>protocol</key>
 499       <string>zoommtg</string>
 500       <key>allowed_origins</key>
 501       <array>
 502         <string>https://somesite.zoom.us</string>
 503       </array>
 504     </dict>
 505   </array>
 506 </dict>
 507 ```
 508 #### policies.json
 509 ```
 510 {
 511   "policies": {
 512     "AutoLaunchProtocolsFromOrigins": [{
 513       "protocol": "zoommtg",
 514       "allowed_origins": [
 515         "https://somesite.zoom.us"
 516       ]
 517     }]
 518   }
 519 }
 520 ```
 521 ### BackgroundAppUpdate
 522
 523 Enable or disable **automatic** application update **in the background**, when the application is not running.
 524
 525 If set to true, application updates may be installed (without user approval) in the background, even when the application is not running. The operating system might still require approval.
 526
 527 If set to false, the application will not try to install updates when the application is not running.
 528
 529 If you have disabled updates via `DisableAppUpdate` or disabled automatic updates via `AppAutoUpdate`, this policy has no effect.
 530
 531 **Compatibility:** Firefox 90 (Windows only)\
 532 **CCK2 Equivalent:** N/A\
 533 **Preferences Affected:** `app.update.background.enabled`
 534
 535 #### Windows (GPO)
 536 ```
 537 Software\Policies\Mozilla\Firefox\BackgroundAppUpdate = 0x1 | 0x0
 538 ```
 539 #### Windows (Intune)
 540 OMA-URI:
 541 ```
 542 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BackgroundAppUpdate
 543 ```
 544 Value (string):
 545 ```
 546 <enabled/> or <disabled/>
 547 ```
 548 #### macOS
 549 ```
 550 <dict>
 551   <key>BackgroundAppUpdate</key>
 552   <true/> | <false/>
 553 </dict>
 554 ```
 555 #### policies.json
 556 ```
 557 {
 558   "policies": {
 559     "BackgroundAppUpdate": true | false
 560   }
 561 }
 562 ```
 563 ### BlockAboutAddons
 564
 565 Block access to the Add-ons Manager (about:addons).
 566
 567 **Compatibility:** Firefox 60, Firefox ESR 60\
 568 **CCK2 Equivalent:** `disableAddonsManager`\
 569 **Preferences Affected:** N/A
 570
 571 #### Windows (GPO)
 572 ```
 573 Software\Policies\Mozilla\Firefox\BlockAboutAddons = 0x1 | 0x0
 574 ```
 575 #### Windows (Intune)
 576 OMA-URI:
 577 ```
 578 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutAddons
 579 ```
 580 Value (string):
 581 ```
 582 <enabled/> or <disabled/>
 583 ```
 584 #### macOS
 585 ```
 586 <dict>
 587   <key>BlockAboutAddons</key>
 588   <true/> | <false/>
 589 </dict>
 590 ```
 591 #### policies.json
 592 ```
 593 {
 594   "policies": {
 595     "BlockAboutAddons": true | false
 596   }
 597 }
 598 ```
 599 ### BlockAboutConfig
 600
 601 Block access to about:config.
 602
 603 **Compatibility:** Firefox 60, Firefox ESR 60\
 604 **CCK2 Equivalent:** `disableAboutConfig`\
 605 **Preferences Affected:** N/A
 606
 607 #### Windows (GPO)
 608 ```
 609 Software\Policies\Mozilla\Firefox\BlockAboutConfig = 0x1 | 0x0
 610 ```
 611 #### Windows (Intune)
 612 OMA-URI:
 613 ```
 614 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutConfig
 615 ```
 616 Value (string):
 617 ```
 618 <enabled/> or <disabled/>
 619 ```
 620 #### macOS
 621 ```
 622 <dict>
 623   <key>BlockAboutConfig</key>
 624   <true/> | <false/>
 625 </dict>
 626 ```
 627 #### policies.json
 628 ```
 629 {
 630   "policies": {
 631     "BlockAboutConfig": true | false
 632   }
 633 }
 634 ```
 635 ### BlockAboutProfiles
 636
 637 Block access to About Profiles (about:profiles).
 638
 639 **Compatibility:** Firefox 60, Firefox ESR 60\
 640 **CCK2 Equivalent:** `disableAboutProfiles`\
 641 **Preferences Affected:** N/A
 642
 643 #### Windows (GPO)
 644 ```
 645 Software\Policies\Mozilla\Firefox\BlockAboutProfiles = 0x1 | 0x0
 646 ```
 647 #### Windows (Intune)
 648 OMA-URI:
 649 ```
 650 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutProfiles
 651 ```
 652 Value (string):
 653 ```
 654 <enabled/> or <disabled/>
 655 ```
 656 #### macOS
 657 ```
 658 <dict>
 659   <key>BlockAboutProfiles</key>
 660   <true/> | <false/>
 661 </dict>
 662 ```
 663 #### policies.json
 664 ```
 665 {
 666   "policies": {
 667     "BlockAboutProfiles": true | false
 668   }
 669 }
 670 ```
 671 ### BlockAboutSupport
 672
 673 Block access to Troubleshooting Information (about:support).
 674
 675 **Compatibility:** Firefox 60, Firefox ESR 60\
 676 **CCK2 Equivalent:** `disableAboutSupport`\
 677 **Preferences Affected:** N/A
 678
 679 #### Windows (GPO)
 680 ```
 681 Software\Policies\Mozilla\Firefox\BlockAboutSupport = 0x1 | 0x0
 682 ```
 683 #### Windows (Intune)
 684 OMA-URI:
 685 ```
 686 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutSupport
 687 ```
 688 Value (string):
 689 ```
 690 <enabled/> or <disabled/>
 691 ```
 692 #### macOS
 693 ```
 694 <dict>
 695   <key>BlockAboutSupport</key>
 696   <true/> | <false/>
 697 </dict>
 698 ```
 699 #### policies.json
 700 ```
 701 {
 702   "policies": {
 703     "BlockAboutSupport": true | false
 704   }
 705 }
 706 ```
 707 ### Bookmarks
 708
 709 Note: [`ManagedBookmarks`](#managedbookmarks) is the new recommended way to add bookmarks. This policy will continue to be supported.
 710
 711 Add bookmarks in either the bookmarks toolbar or menu. Only `Title` and `URL` are required. If `Placement` is not specified, the bookmark will be placed on the toolbar. If `Folder` is specified, it is automatically created and bookmarks with the same folder name are grouped together.
 712
 713 If you want to clear all bookmarks set with this policy, you can set the value to an empty array (```[]```). This can be on Windows via the new Bookmarks (JSON) policy available with GPO and Intune.
 714
 715 **Compatibility:** Firefox 60, Firefox ESR 60\
 716 **CCK2 Equivalent:** `bookmarks.toolbar`,`bookmarks.menu`\
 717 **Preferences Affected:** N/A
 718
 719 #### Windows (GPO)
 720 ```
 721 Software\Policies\Mozilla\Firefox\Bookmarks\1\Title = "Example"
 722 Software\Policies\Mozilla\Firefox\Bookmarks\1\URL = "https://example.com"
 723 Software\Policies\Mozilla\Firefox\Bookmarks\1\Favicon = "https://example.com/favicon.ico"
 724 Software\Policies\Mozilla\Firefox\Bookmarks\1\Placement = "toolbar" | "menu"
 725 Software\Policies\Mozilla\Firefox\Bookmarks\1\Folder = "FolderName"
 726
 727 Software\Policies\Mozilla\Firefox\Bookmarks (REG_MULTI_SZ) =
 728 ```
 729 []
 730 ```
 731
 732 ```
 733 #### Windows (Intune)
 734 OMA-URI:
 735 ```
 736 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Bookmarks/Bookmark01
 737 ```
 738 Value (string):
 739 ```
 740 <enabled/>
 741 <data id="BookmarkTitle" value="Example"/>
 742 <data id="BookmarkURL" value="https://example.com"/>
 743 <data id="BookmarkFavicon" value="https://example.com/favicon.ico"/>
 744 <data id="BookmarkPlacement" value="toolbar | menu"/>
 745 <data id="BookmarkFolder" value="FolderName"/>
 746 ```
 747 OMA-URI:
 748 ```
 749 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Bookmarks
 750 ```
 751 Value (string):
 752 ```
 753 <enabled/>
 754 <data id="JSON" value='[]'/>
 755 ```
 756 #### macOS
 757 ```
 758 <dict>
 759   <key>Bookmarks</key>
 760   <array>
 761     <dict>
 762       <key>Title</key>
 763       <string>Example</string>
 764       <key>URL</key>
 765       <string>https://example.com</string>
 766       <key>Favicon</key>
 767       <string>https://example.com/favicon.ico</string>
 768       <key>Placement</key>
 769       <string>toolbar | menu</string>
 770       <key>Folder</key>
 771       <string>FolderName</string>
 772     </dict>
 773   </array>
 774 </dict>
 775 ```
 776 #### policies.json
 777 ```
 778 {
 779   "policies": {
 780     "Bookmarks": [
 781       {
 782         "Title": "Example",
 783         "URL": "https://example.com",
 784         "Favicon": "https://example.com/favicon.ico",
 785         "Placement": "toolbar" | "menu",
 786         "Folder": "FolderName"
 787       }
 788     ]
 789   }
 790 }
 791 ```
 792 ### CaptivePortal
 793 Enable or disable the detection of captive portals.
 794
 795 **Compatibility:** Firefox 67, Firefox ESR 60.7\
 796 **CCK2 Equivalent:** N/A\
 797 **Preferences Affected:** `network.captive-portal-service.enabled`
 798
 799 #### Windows (GPO)
 800 ```
 801 Software\Policies\Mozilla\Firefox\CaptivePortal = 0x1 | 0x0
 802 ```
 803 #### Windows (Intune)
 804 OMA-URI:
 805 ```
 806 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/CaptivePortal
 807 ```
 808 Value (string):
 809 ```
 810 <enabled/> or <disabled/>
 811 ```
 812 #### macOS
 813 ```
 814 <dict>
 815   <key>CaptivePortal</key>
 816   <true/> | <false/>
 817 </dict>
 818 ```
 819 #### policies.json
 820 ```
 821 {
 822   "policies": {
 823     "CaptivePortal": true | false
 824   }
 825 }
 826 ```
 827 ### Certificates
 828
 829 ### Certificates | ImportEnterpriseRoots
 830
 831 Trust certificates that have been added to the operating system certificate store by a user or administrator.
 832
 833 Note: This policy only works on Windows and macOS. For Linux discussion, see [bug 1600509](https://bugzilla.mozilla.org/show_bug.cgi?id=1600509).
 834
 835 See https://support.mozilla.org/kb/setting-certificate-authorities-firefox for more detail.
 836
 837 **Compatibility:** Firefox 60, Firefox ESR 60 (macOS support in Firefox 63, Firefox ESR 68)\
 838 **CCK2 Equivalent:** N/A\
 839 **Preferences Affected:** `security.enterprise_roots.enabled`
 840
 841 #### Windows (GPO)
 842 ```
 843 Software\Policies\Mozilla\Firefox\Certificates\ImportEnterpriseRoots = 0x1 | 0x0
 844 ```
 845 #### Windows (Intune)
 846 OMA-URI:
 847 ```
 848 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Certificates/Certificates_ImportEnterpriseRoots
 849 ```
 850 Value (string):
 851 ```
 852 <enabled/> or <disabled/>
 853 ```
 854 #### macOS
 855 ```
 856 <dict>
 857   <key>Certificates</key>
 858   <dict>
 859     <key>ImportEnterpriseRoots</key>
 860     <true/> | <false/>
 861   </dict>
 862 </dict>
 863 ```
 864 #### policies.json
 865 ```
 866 {
 867   "policies": {
 868     "Certificates": {
 869       "ImportEnterpriseRoots": true | false
 870     }
 871   }
 872 }
 873 ```
 874 ### Certificates | Install
 875
 876 Install certificates into the Firefox certificate store. If only a filename is specified, Firefox searches for the file in the following locations:
 877
 878 - Windows
 879   - %USERPROFILE%\AppData\Local\Mozilla\Certificates
 880   - %USERPROFILE%\AppData\Roaming\Mozilla\Certificates
 881 - macOS
 882   - /Library/Application Support/Mozilla/Certificates
 883   - ~/Library/Application Support/Mozilla/Certificates
 884 - Linux
 885   - /usr/lib/mozilla/certificates
 886   - /usr/lib64/mozilla/certificates
 887   - ~/.mozilla/certificates
 888
 889 Starting with Firefox 65, Firefox 60.5 ESR, a fully qualified path can be used, including UNC paths. You should use the native path style for your operating system. We do not support using %USERPROFILE% or other environment variables on Windows.
 890
 891 If you are specifying the path in the policies.json file on Windows, you need to escape your backslashes (`\\`) which means that for UNC paths, you need to escape both (`\\\\`). If you use group policy, you only need one backslash.
 892
 893 Certificates are installed using the trust string `CT,CT,`.
 894
 895 Binary (DER) and ASCII (PEM) certificates are both supported.
 896
 897 **Compatibility:** Firefox 64, Firefox ESR 64\
 898 **CCK2 Equivalent:** `certs.ca`\
 899 **Preferences Affected:** N/A
 900
 901 #### Windows (GPO)
 902 ```
 903 Software\Policies\Mozilla\Firefox\Certificates\Install\1 = "cert1.der"
 904 Software\Policies\Mozilla\Firefox\Certificates\Install\2 = "C:\Users\username\cert2.pem"
 905 ```
 906 #### Windows (Intune)
 907 OMA-URI:
 908 ```
 909 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Certificates/Certificates_Install
 910 ```
 911 Value (string):
 912 ```
 913 <enabled/>
 914 <data id="Certificates_Install" value="1&#xF000;cert1.der&#xF000;2&#xF000;C:\Users\username\cert2.pem"/>
 915 ```
 916 #### macOS
 917 ```
 918 <dict>
 919   <key>Certificates</key>
 920   <dict>
 921     <key>Install</key>
 922     <array>
 923       <string>cert1.der</string>
 924       <string>/Users/username/cert2.pem</string>
 925     </array>
 926   </dict>
 927 </dict>
 928 ```
 929 #### policies.json
 930 ```
 931 {
 932   "policies": {
 933     "Certificates": {
 934       "Install": ["cert1.der", "/home/username/cert2.pem"]
 935     }
 936   }
 937 }
 938 ```
 939 ### Cookies
 940 Configure cookie preferences.
 941
 942 `Allow` is a list of origins (not domains) where cookies are always allowed. You must include http or https.
 943
 944 `AllowSession` is a list of origins (not domains) where cookies are only allowed for the current session. You must include http or https.
 945
 946 `Block` is a list of origins (not domains) where cookies are always blocked. You must include http or https.
 947
 948 `Behavior` sets the default behavior for cookies based on the values below.
 949
 950 `BehaviorPrivateBrowsing` sets the default behavior for cookies in private browsing based on the values below.
 951
 952 | Value | Description
 953 | --- | ---
 954 | accept | Accept all cookies
 955 | reject-foreign | Reject third party cookies
 956 | reject | Reject all cookies
 957 | limit-foreign | Reject third party cookies for sites you haven't visited
 958 | reject-tracker | Reject cookies for known trackers (default)
 959 | reject-tracker-and-partition-foreign | Reject cookies for known trackers and partition third-party cookies (Total Cookie Protection) (default for private browsing)
 960
 961 `Default` (Deprecated) determines whether cookies are accepted at all.
 962
 963 `AcceptThirdParty` (Deprecated) determines how third-party cookies are handled.
 964
 965 `ExpireAtSessionEnd` determines when cookies expire.
 966
 967 `RejectTracker` (Deprecated) only rejects cookies for trackers.
 968
 969 `Locked` prevents the user from changing cookie preferences.
 970
 971 **Compatibility:** Firefox 60, Firefox ESR 60 (RejectTracker added in Firefox 63, AllowSession added in Firefox 79/78.1, Behavior added in Firefox 95/91.4)\
 972 **CCK2 Equivalent:** N/A\
 973 **Preferences Affected:** `network.cookie.cookieBehavior`, `network.cookie.cookieBehavior.pbmode`, `network.cookie.lifetimePolicy`
 974
 975 #### Windows (GPO)
 976 ```
 977 Software\Policies\Mozilla\Firefox\Cookies\Allow\1 = "https://example.com"
 978 Software\Policies\Mozilla\Firefox\Cookies\AllowSession\1 = "https://example.edu"
 979 Software\Policies\Mozilla\Firefox\Cookies\Block\1 = "https://example.org"
 980 Software\Policies\Mozilla\Firefox\Cookies\Default = 0x1 | 0x0
 981 Software\Policies\Mozilla\Firefox\Cookies\AcceptThirdParty = "always" | "never" | "from-visited"
 982 Software\Policies\Mozilla\Firefox\Cookies\ExpireAtSessionEnd = 0x1 | 0x0
 983 Software\Policies\Mozilla\Firefox\Cookies\RejectTracker = 0x1 | 0x0
 984 Software\Policies\Mozilla\Firefox\Cookies\Behavior = "accept" | "reject-foreign" | "reject" | "limit-foreign" | "reject-tracker" | "reject-tracker-and-partition-foreign"
 985 Software\Policies\Mozilla\Firefox\Cookies\BehaviorPrivateBrowsing = "accept" | "reject-foreign" | "reject" | "limit-foreign" | "reject-tracker" | "reject-tracker-and-partition-foreign"
 986 Software\Policies\Mozilla\Firefox\Cookies\Locked = 0x1 | 0x0
 987 ```
 988 #### Windows (Intune)
 989 OMA-URI:
 990 ```
 991 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Allow
 992 ```
 993 Value (string):
 994 ```
 995 <enabled/>
 996 <data id="Cookies_Allow" value="1&#xF000;https://example.com"/>
 997 ```
 998 OMA-URI:
 999 ```
1000 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_AllowSession
1001 ```
1002 Value (string):
1003 ```
1004 <enabled/>
1005 <data id="Cookies_Allow" value="1&#xF000;https://example.edu"/>
1006 ```
1007 OMA-URI:
1008 ```
1009 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Block
1010 ```
1011 Value (string):
1012 ```
1013 <enabled/>
1014 <data id="Cookies_Block" value="1&#xF000;https://example.org"/>
1015 ```
1016 OMA-URI:
1017 ```
1018 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Default
1019 ```
1020 Value (string):
1021 ```
1022 <enabled/> or <disabled/>
1023 ```
1024 OMA-URI:
1025 ```
1026 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_AcceptThirdParty
1027 ```
1028 Value (string):
1029 ```
1030 <enabled/>
1031 <data id="Cookies_AcceptThirdParty" value="always | never | from-visited"/>
1032 ```
1033 OMA-URI:
1034 ```
1035 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_ExpireAtSessionEnd
1036 ```
1037 Value (string):
1038 ```
1039 <enabled/> or <disabled/>
1040 ```
1041 OMA-URI:
1042 ```
1043 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_RejectTracker
1044 ```
1045 Value (string):
1046 ```
1047 <enabled/> or <disabled/>
1048 ```
1049 OMA-URI:
1050 ```
1051 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Locked
1052 ```
1053 Value (string):
1054 ```
1055 <enabled/> or <disabled/>
1056 ```
1057 OMA-URI:
1058 ```
1059 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Behavior
1060 ```
1061 Value (string):
1062 ```
1063 <enabled/>
1064 <data id="Cookies_Behavior" value="accept | reject-foreign | reject | limit-foreign | reject-tracker | reject-tracker-and-partition-foreign"/>
1065 ```
1066 OMA-URI:
1067 ```
1068 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_BehaviorPrivateBrowsing
1069 ```
1070 Value (string):
1071 ```
1072 <enabled/>
1073 <data id="Cookies_BehaviorPrivateBrowsing" value="accept | reject-foreign | reject | limit-foreign | reject-tracker | reject-tracker-and-partition-foreign"/>
1074 ```
1075 #### macOS
1076 ```
1077 <dict>
1078   <key>Cookies</key>
1079   <dict>
1080     <key>Allow</key>
1081     <array>
1082       <string>http://example.com</string>
1083     </array>
1084     <key>AllowSession</key>
1085     <array>
1086       <string>http://example.edu</string>
1087     </array>
1088     <key>Block</key>
1089     <array>
1090       <string>http://example.org</string>
1091     </array>
1092     <key>Default</key>
1093     <true/> | <false/>
1094     <key>AcceptThirdParty</key>
1095     <string>always | never | from-visited</string>
1096     <key>ExpireAtSessionEnd</key>
1097     <true/> | <false/>
1098     <key>RejectTracker</key>
1099     <true/> | <false/>
1100     <key>Locked</key>
1101     <true/> | <false/>
1102     <key>Behavior</key>
1103     <string>accept | reject-foreign | reject | limit-foreign | reject-tracker | reject-tracker-and-partition-foreign</string>
1104     <key>BehaviorPrivateBrowsing</key>
1105     <string>accept | reject-foreign | reject | limit-foreign | reject-tracker | reject-tracker-and-partition-foreign</string>
1106   </dict>
1107 </dict>
1108 ```
1109 #### policies.json
1110 ```
1111 {
1112   "policies": {
1113     "Cookies": {
1114       "Allow": ["http://example.org/"],
1115       "AllowSession": ["http://example.edu/"],
1116       "Block": ["http://example.edu/"],
1117       "Default": true | false,
1118       "AcceptThirdParty": "always" | "never" | "from-visited",
1119       "ExpireAtSessionEnd": true | false,
1120       "RejectTracker": true | false,
1121       "Locked": true | false,
1122       "Behavior": "accept" | "reject-foreign" | "reject" | "limit-foreign" | "reject-tracker" | "reject-tracker-and-partition-foreign",
1123       "BehaviorPrivateBrowsing": "accept" | "reject-foreign" | "reject" | "limit-foreign" | "reject-tracker" | "reject-tracker-and-partition-foreign",
1124     }
1125   }
1126 }
1127 ```
1128 ### DefaultDownloadDirectory
1129 Set the default download directory.
1130
1131 You can use ${home} for the native home directory.
1132
1133 **Compatibility:** Firefox 68, Firefox ESR 68\
1134 **CCK2 Equivalent:** N/A\
1135 **Preferences Affected:** `browser.download.dir`, `browser.download.folderList`
1136
1137 #### Windows (GPO)
1138 ```
1139 Software\Policies\Mozilla\Firefox\DefaultDownloadDirectory = "${home}\Downloads"
1140 ```
1141 #### Windows (Intune)
1142 OMA-URI:
1143 ```
1144 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DefaultDownloadDirectory
1145 ```
1146 Value (string):
1147 ```
1148 <enabled/>
1149 <data id="Preferences_String" value="${home}\Downloads"/>
1150 ```
1151 #### macOS
1152 ```
1153 <dict>
1154   <key>DefaultDownloadDirectory</key>
1155   <string>${home}/Downloads</string>
1156 </dict>
1157 ```
1158 #### policies.json (macOS and Linux)
1159 ```
1160 {
1161   "policies": {
1162     "DefaultDownloadDirectory": "${home}/Downloads"
1163 }
1164 ```
1165 #### policies.json (Windows)
1166 ```
1167 {
1168   "policies": {
1169     "DefaultDownloadDirectory": "${home}\\Downloads"
1170 }
1171 ```
1172 ### DisableAppUpdate
1173 Turn off application updates within Firefox.
1174
1175 **Compatibility:** Firefox 60, Firefox ESR 60\
1176 **CCK2 Equivalent:** `disableFirefoxUpdates`\
1177 **Preferences Affected:** N/A
1178
1179 #### Windows (GPO)
1180 ```
1181 Software\Policies\Mozilla\Firefox\DisableAppUpdate = 0x1 | 0x0
1182 ```
1183 #### Windows (Intune)
1184 OMA-URI:
1185 ```
1186 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableAppUpdate
1187 ```
1188 Value (string):
1189 ```
1190 <enabled/> or <disabled/>
1191 ```
1192 #### macOS
1193 ```
1194 <dict>
1195   <key>DisableAppUpdate</key>
1196   <true/> | <false/>
1197 </dict>
1198 ```
1199 #### policies.json
1200 ```
1201 {
1202   "policies": {
1203     "DisableAppUpdate": true | false
1204   }
1205 }
1206 ```
1207 ### DisableBuiltinPDFViewer
1208 Disable the built in PDF viewer. PDF files are downloaded and sent externally.
1209
1210 **Compatibility:** Firefox 60, Firefox ESR 60\
1211 **CCK2 Equivalent:** `disablePDFjs`\
1212 **Preferences Affected:** `pdfjs.disabled`
1213
1214 #### Windows (GPO)
1215 ```
1216 Software\Policies\Mozilla\Firefox\DisableBuiltinPDFViewer = 0x1 | 0x0
1217 ```
1218 #### Windows (Intune)
1219 OMA-URI:
1220 ```
1221 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableBuiltinPDFViewer
1222 ```
1223 Value (string):
1224 ```
1225 <enabled/> or <disabled/>
1226 ```
1227 #### macOS
1228 ```
1229 <dict>
1230   <key>DisableBuiltinPDFViewer</key>
1231   <true/> | <false/>
1232 </dict>
1233 ```
1234 #### policies.json
1235 ```
1236 {
1237   "policies": {
1238     "DisableBuiltinPDFViewer": true | false
1239   }
1240 }
1241 ```
1242 ### DisabledCiphers
1243 Disable specific cryptographic ciphers, listed below.
1244
1245 ```
1246 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
1247 TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
1248 TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256
1249 TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
1250 TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
1251 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
1252 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
1253 TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA
1254 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
1255 TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA
1256 TLS_DHE_RSA_WITH_AES_128_CBC_SHA
1257 TLS_DHE_RSA_WITH_AES_256_CBC_SHA
1258 TLS_RSA_WITH_AES_128_GCM_SHA256
1259 TLS_RSA_WITH_AES_256_GCM_SHA384
1260 TLS_RSA_WITH_AES_128_CBC_SHA
1261 TLS_RSA_WITH_AES_256_CBC_SHA
1262 TLS_RSA_WITH_3DES_EDE_CBC_SHA
1263 ```
1264
1265 **Preferences Affected:** `security.ssl3.ecdhe_rsa_aes_128_gcm_sha256`, `security.ssl3.ecdhe_ecdsa_aes_128_gcm_sha256`, `security.ssl3.ecdhe_ecdsa_chacha20_poly1305_sha256`, `security.ssl3.ecdhe_rsa_chacha20_poly1305_sha256`, `security.ssl3.ecdhe_ecdsa_aes_256_gcm_sha384`, `security.ssl3.ecdhe_rsa_aes_256_gcm_sha384`, `security.ssl3.ecdhe_rsa_aes_128_sha`, `security.ssl3.ecdhe_ecdsa_aes_128_sha`, `security.ssl3.ecdhe_rsa_aes_256_sha`, `security.ssl3.ecdhe_ecdsa_aes_256_sha`, `security.ssl3.dhe_rsa_aes_128_sha`, `security.ssl3.dhe_rsa_aes_256_sha`, `security.ssl3.rsa_aes_128_gcm_sha256`, `security.ssl3.rsa_aes_256_gcm_sha384`, `security.ssl3.rsa_aes_128_sha`, `security.ssl3.rsa_aes_256_sha`, `security.ssl3.deprecated.rsa_des_ede3_sha`
1266
1267 ---
1268 **Note:**
1269
1270 This policy was updated in Firefox 78 to allow enabling ciphers as well. Setting the value to true disables the cipher, setting the value to false enables the cipher. Previously setting the value to true or false disabled the cipher.
1271
1272 ---
1273 **Compatibility:** Firefox 76, Firefox ESR 68.8 (TLS_RSA_WITH_AES_128_GCM_SHA256 and TLS_RSA_WITH_AES_256_GCM_SHA384 were added in Firefox 78, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA38, TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, and TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 were added in Firefox 97 and Firefox 91.6)\
1274 **CCK2 Equivalent:** N/A\
1275 **Preferences Affected:** N/A
1276
1277 #### Windows (GPO)
1278 ```
1279 Software\Policies\Mozilla\Firefox\DisabledCiphers\CIPHER_NAME = 0x1 | 0x0
1280 ```
1281 #### Windows (Intune)
1282 OMA-URI:
1283 ```
1284 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_CIPHER_NAME
1285
1286 ```
1287 Value (string):
1288 ```
1289 <enabled/> or <disabled/>
1290 ```
1291 #### macOS
1292 ```
1293 <dict>
1294   <key>DisabledCiphers</key>
1295     <dict>
1296       <key>CIPHER_NAME</key>
1297       <true/> | <false/>
1298     </dict>
1299 </dict>
1300 ```
1301 #### policies.json
1302 ```
1303 {
1304   "policies": {
1305     "DisabledCiphers": {
1306       "CIPHER_NAME": true | false,
1307     }
1308   }
1309 }
1310 ```
1311 ### DisableDefaultBrowserAgent
1312 Prevent the default browser agent from taking any actions. Only applicable to Windows; other platforms don’t have the agent.
1313
1314 The browser agent is a Windows-only scheduled task which runs in the background to collect and submit data about the browser that the user has set as their OS default. More information is available [here](https://firefox-source-docs.mozilla.org/toolkit/mozapps/defaultagent/default-browser-agent/index.html).
1315
1316 **Compatibility:** Firefox 75, Firefox ESR 68.7 (Windows only)\
1317 **CCK2 Equivalent:** N/A\
1318 **Preferences Affected:** N/A
1319
1320 #### Windows (GPO)
1321 ```
1322 Software\Policies\Mozilla\Firefox\DisableDefaultBrowserAgent = 0x1 | 0x0
1323 ```
1324 #### Windows (Intune)
1325 OMA-URI:
1326 ```
1327 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableDefaultBrowserAgent
1328 ```
1329 Value (string):
1330 ```
1331 <enabled/> or <disabled/>
1332 ```
1333 #### policies.json
1334 ```
1335 {
1336   "policies": {
1337     "DisableDefaultBrowserAgent": true | false
1338   }
1339 }
1340 ```
1341 ### DisableDeveloperTools
1342 Remove access to all developer tools.
1343
1344 **Compatibility:** Firefox 60, Firefox ESR 60\
1345 **CCK2 Equivalent:** `removeDeveloperTools`\
1346 **Preferences Affected:** `devtools.policy.disabled`
1347
1348 #### Windows (GPO)
1349 ```
1350 Software\Policies\Mozilla\Firefox\DisableDeveloperTools = 0x1 | 0x0`
1351 ```
1352 #### Windows (Intune)
1353 OMA-URI:
1354 ```
1355 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableDeveloperTools
1356 ```
1357 Value (string):
1358 ```
1359 <enabled/> or <disabled/>
1360 ```
1361 #### macOS
1362 ```
1363 <dict>
1364   <key>DisableDeveloperTools</key>
1365   <true/> | <false/>
1366 </dict>
1367 ```
1368 #### policies.json
1369 ```
1370 {
1371   "policies": {
1372     "DisableDeveloperTools": true | false
1373   }
1374 }
1375 ```
1376 ### DisableFeedbackCommands
1377 Disable the menus for reporting sites (Submit Feedback, Report Deceptive Site).
1378
1379 **Compatibility:** Firefox 60, Firefox ESR 60\
1380 **CCK2 Equivalent:** N/A\
1381 **Preferences Affected:** N/A
1382
1383 #### Windows (GPO)
1384 ```
1385 Software\Policies\Mozilla\Firefox\DisableFeedbackCommands = 0x1 | 0x0
1386 ```
1387 #### Windows (Intune)
1388 OMA-URI:
1389 ```
1390 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFeedbackCommands
1391 ```
1392 Value (string):
1393 ```
1394 <enabled/> or <disabled/>
1395 ```
1396 #### macOS
1397 ```
1398 <dict>
1399   <key>DisableFeedbackCommands</key>
1400   <true/> | <false/>
1401 </dict>
1402 ```
1403 #### policies.json
1404 ```
1405 {
1406   "policies": {
1407     "DisableFeedbackCommands": true | false
1408   }
1409 }
1410 ```
1411 ### DisableFirefoxAccounts
1412 Disable Firefox Accounts integration (Sync).
1413
1414 **Compatibility:** Firefox 60, Firefox ESR 60\
1415 **CCK2 Equivalent:** `disableSync`\
1416 **Preferences Affected:** `identity.fxaccounts.enabled`
1417
1418 #### Windows (GPO)
1419 ```
1420 Software\Policies\Mozilla\Firefox\DisableFirefoxAccounts = 0x1 | 0x0
1421 ```
1422 #### Windows (Intune)
1423 OMA-URI:
1424 ```
1425 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxAccounts
1426 ```
1427 Value (string):
1428 ```
1429 <enabled/> or <disabled/>
1430 ```
1431 #### macOS
1432 ```
1433 <dict>
1434   <key>DisableFirefoxAccounts</key>
1435   <true/> | <false/>
1436 </dict>
1437 ```
1438 #### policies.json
1439 ```
1440 {
1441   "policies": {
1442     "DisableFirefoxAccounts": true | false
1443   }
1444 }
1445 ```
1446 ### DisableFirefoxScreenshots
1447 Remove access to Firefox Screenshots.
1448
1449 **Compatibility:** Firefox 60, Firefox ESR 60\
1450 **CCK2 Equivalent:** N/A\
1451 **Preferences Affected:** `extensions.screenshots.disabled`
1452
1453 #### Windows (GPO)
1454 ```
1455 Software\Policies\Mozilla\Firefox\DisableFirefoxScreenshots = 0x1 | 0x0
1456 ```
1457 #### Windows (Intune)
1458 OMA-URI:
1459 ```
1460 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxScreenshots
1461 ```
1462 Value (string):
1463 ```
1464 <enabled/> or <disabled/>
1465 ```
1466 #### macOS
1467 ```
1468 <dict>
1469   <key>DisableFirefoxScreenshots</key>
1470   <true/> | <false/>
1471 </dict>
1472 ```
1473 #### policies.json
1474 ```
1475 {
1476   "policies": {
1477     "DisableFirefoxScreenshots": true | false
1478   }
1479 }
1480 ```
1481 ### DisableFirefoxStudies
1482 Disable Firefox studies (Shield).
1483
1484 **Compatibility:** Firefox 60, Firefox ESR 60\
1485 **CCK2 Equivalent:** N/A\
1486 **Preferences Affected:** N/A
1487
1488 #### Windows (GPO)
1489 ```
1490 Software\Policies\Mozilla\Firefox\DisableFirefoxStudies = 0x1 | 0x0
1491 ```
1492 #### Windows (Intune)
1493 OMA-URI:
1494 ```
1495 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxStudies
1496 ```
1497 Value (string):
1498 ```
1499 <enabled/> or <disabled/>
1500 ```
1501 #### macOS
1502 ```
1503 <dict>
1504   <key>DisableFirefoxStudies</key>
1505   <true/> | <false/>
1506 </dict>
1507 ```
1508 #### policies.json
1509 ```
1510 {
1511   "policies": {
1512     "DisableFirefoxStudies": true | false
1513   }
1514 }
1515 ```
1516 ### DisableForgetButton
1517 Disable the "Forget" button.
1518
1519 **Compatibility:** Firefox 60, Firefox ESR 60\
1520 **CCK2 Equivalent:** `disableForget`\
1521 **Preferences Affected:** N/A
1522
1523 #### Windows (GPO)
1524 ```
1525 Software\Policies\Mozilla\Firefox\DisableForgetButton = 0x1 | 0x0
1526 ```
1527 #### Windows (Intune)
1528 OMA-URI:
1529 ```
1530 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableForgetButton
1531 ```
1532 Value (string):
1533 ```
1534 <enabled/> or <disabled/>
1535 ```
1536 #### macOS
1537 ```
1538 <dict>
1539   <key>DisableForgetButton</key>
1540   <true/> | <false/>
1541 </dict>
1542 ```
1543 #### policies.json
1544 ```
1545 {
1546   "policies": {
1547     "DisableForgetButton": true | false
1548   }
1549 }
1550 ```
1551 ### DisableFormHistory
1552 Turn off saving information on web forms and the search bar.
1553
1554 **Compatibility:** Firefox 60, Firefox ESR 60\
1555 **CCK2 Equivalent:** `disableFormFill`\
1556 **Preferences Affected:** `browser.formfill.enable`
1557
1558 #### Windows (GPO)
1559 ```
1560 Software\Policies\Mozilla\Firefox\DisableFormHistory = 0x1 | 0x0
1561 ```
1562 #### Windows (Intune)
1563 OMA-URI:
1564 ```
1565 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFormHistory
1566 ```
1567 Value (string):
1568 ```
1569 <enabled/> or <disabled/>
1570 ```
1571 #### macOS
1572 ```
1573 <dict>
1574   <key>DisableFormHistory</key>
1575   <true/> | <false/>
1576 </dict>
1577 ```
1578 #### policies.json
1579 ```
1580 {
1581   "policies": {
1582     "DisableFormHistory": true | false
1583   }
1584 }
1585 ```
1586 ### DisableMasterPasswordCreation
1587 Remove the master password functionality.
1588
1589 If this value is true, it works the same as setting [`PrimaryPassword`](#primarypassword) to false and removes the primary password functionality.
1590
1591 If both `DisableMasterPasswordCreation` and `PrimaryPassword` are used, `DisableMasterPasswordCreation` takes precedent.
1592
1593 **Compatibility:** Firefox 60, Firefox ESR 60\
1594 **CCK2 Equivalent:** `noMasterPassword`\
1595 **Preferences Affected:** N/A
1596
1597 #### Windows (GPO)
1598 ```
1599 Software\Policies\Mozilla\Firefox\DisableMasterPasswordCreation = 0x1 | 0x0
1600 ```
1601 #### Windows (Intune)
1602 OMA-URI:
1603 ```
1604 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableMasterPasswordCreation
1605 ```
1606 Value (string):
1607 ```
1608 <enabled/> or <disabled/>
1609 ```
1610 #### macOS
1611 ```
1612 <dict>
1613   <key>DisableMasterPasswordCreation</key>
1614   <true/> | <false/>
1615 </dict>
1616 ```
1617 #### policies.json
1618 ```
1619 {
1620   "policies": {
1621     "DisableMasterPasswordCreation": true | false
1622   }
1623 }
1624 ```
1625 ### DisablePasswordReveal
1626 Do not allow passwords to be shown in saved logins
1627
1628 **Compatibility:** Firefox 71, Firefox ESR 68.3\
1629 **CCK2 Equivalent:** N/A
1630 **Preferences Affected:** N/A
1631
1632 #### Windows (GPO)
1633 ```
1634 Software\Policies\Mozilla\Firefox\DisablePasswordReveal = 0x1 | 0x0
1635 ```
1636 #### Windows (Intune)
1637 OMA-URI:
1638 ```
1639 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePasswordReveal
1640 ```
1641 Value (string):
1642 ```
1643 <enabled/> or <disabled/>
1644 ```
1645 #### macOS
1646 ```
1647 <dict>
1648   <key>DisablePasswordReveal</key>
1649   <true/> | <false/>
1650 </dict>
1651 ```
1652 #### policies.json
1653 ```
1654 {
1655   "policies": {
1656     "DisablePasswordReveal": true | false
1657   }
1658 }
1659 ```
1660 ### DisablePocket
1661 Remove Pocket in the Firefox UI. It does not remove it from the new tab page.
1662
1663 **Compatibility:** Firefox 60, Firefox ESR 60\
1664 **CCK2 Equivalent:** `disablePocket`\
1665 **Preferences Affected:** `extensions.pocket.enabled`
1666
1667 #### Windows (GPO)
1668 ```
1669 Software\Policies\Mozilla\Firefox\DisablePocket = 0x1 | 0x0
1670 ```
1671 #### Windows (Intune)
1672 OMA-URI:
1673 ```
1674 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePocket
1675 ```
1676 Value (string):
1677 ```
1678 <enabled/> or <disabled/>
1679 ```
1680 #### macOS
1681 ```
1682 <dict>
1683   <key>DisablePocket</key>
1684   <true/> | <false/>
1685 </dict>
1686 ```
1687 #### policies.json
1688 ```
1689 {
1690   "policies": {
1691     "DisablePocket": true | false
1692   }
1693 }
1694 ```
1695 ### DisablePrivateBrowsing
1696 Remove access to private browsing.
1697
1698 **Compatibility:** Firefox 60, Firefox ESR 60\
1699 **CCK2 Equivalent:** `disablePrivateBrowsing`\
1700 **Preferences Affected:** N/A
1701
1702 #### Windows (GPO)
1703 ```
1704 Software\Policies\Mozilla\Firefox\DisablePrivateBrowsing = 0x1 | 0x0
1705 ```
1706 #### Windows (Intune)
1707 OMA-URI:
1708 ```
1709 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePrivateBrowsing
1710 ```
1711 Value (string):
1712 ```
1713 <enabled/> or <disabled/>
1714 ```
1715 #### macOS
1716 ```
1717 <dict>
1718   <key>DisablePrivateBrowsing</key>
1719   <true/> | <false/>
1720 </dict>
1721 ```
1722 #### policies.json
1723 ```
1724 {
1725   "policies": {
1726     "DisablePrivateBrowsing": true | false
1727   }
1728 }
1729 ```
1730 ### DisableProfileImport
1731 Disables the "Import data from another browser" option in the bookmarks window.
1732
1733 **Compatibility:** Firefox 60, Firefox ESR 60\
1734 **CCK2 Equivalent:** N/A\
1735 **Preferences Affected:** N/A
1736
1737 #### Windows (GPO)
1738 ```
1739 Software\Policies\Mozilla\Firefox\DisableProfileImport = 0x1 | 0x0
1740 ```
1741 #### Windows (Intune)
1742 OMA-URI:
1743 ```
1744 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableProfileImport
1745 ```
1746 Value (string):
1747 ```
1748 <enabled/> or <disabled/>
1749 ```
1750 #### macOS
1751 ```
1752 <dict>
1753   <key>DisableProfileImport</key>
1754   <true/> | <false/>
1755 </dict>
1756 ```
1757 #### policies.json
1758 ```
1759 {
1760   "policies": {
1761     "DisableProfileImport": true | false
1762   }
1763 }
1764 ```
1765 ### DisableProfileRefresh
1766 Disable the Refresh Firefox button on about:support and support.mozilla.org, as well as the prompt that displays offering to refresh Firefox when you haven't used it in a while.
1767
1768 **Compatibility:** Firefox 60, Firefox ESR 60\
1769 **CCK2 Equivalent:** `disableResetFirefox`\
1770 **Preferences Affected:** `browser.disableResetPrompt`
1771
1772 #### Windows (GPO)
1773 ```
1774 Software\Policies\Mozilla\Firefox\DisableProfileRefresh = 0x1 | 0x0
1775 ```
1776 #### Windows (Intune)
1777 OMA-URI:
1778 ```
1779 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableProfileRefresh
1780 ```
1781 Value (string):
1782 ```
1783 <enabled/> or <disabled/>
1784 ```
1785 #### macOS
1786 ```
1787 <dict>
1788   <key>DisableProfileRefresh</key>
1789   <true/> | <false/>
1790 </dict>
1791 ```
1792 #### policies.json
1793 ```
1794 {
1795   "policies": {
1796     "DisableProfileRefresh": true | false
1797   }
1798 }
1799 ```
1800 ### DisableSafeMode
1801 Disable safe mode within the browser.
1802
1803 On Windows, this disables safe mode via the command line as well.
1804
1805 **Compatibility:** Firefox 60, Firefox ESR 60 (Windows, macOS)\
1806 **CCK2 Equivalent:** `disableSafeMode`\
1807 **Preferences Affected:** N/A
1808
1809 #### Windows (GPO)
1810 ```
1811 Software\Policies\Mozilla\Firefox\DisableSafeMode = 0x1 | 0x0
1812 ```
1813 #### Windows (Intune)
1814 OMA-URI:
1815 ```
1816 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSafeMode
1817 ```
1818 Value (string):
1819 ```
1820 <enabled/> or <disabled/>
1821 ```
1822 #### macOS
1823 ```
1824 <dict>
1825   <key>DisableSafeMode</key>
1826   <true/> | <false/>
1827 </dict>
1828 ```
1829 #### policies.json
1830 ```
1831 {
1832   "policies": {
1833     "DisableSafeMode": true | false
1834   }
1835 }
1836 ```
1837 ### DisableSecurityBypass
1838 Prevent the user from bypassing security in certain cases.
1839
1840 `InvalidCertificate` prevents adding an exception when an invalid certificate is shown.
1841
1842 `SafeBrowsing` prevents selecting "ignore the risk" and visiting a harmful site anyway.
1843
1844 **Compatibility:** Firefox 60, Firefox ESR 60\
1845 **CCK2 Equivalent:** N/A\
1846 **Preferences Affected:** `security.certerror.hideAddException`, `browser.safebrowsing.allowOverride`
1847
1848 #### Windows (GPO)
1849 ```
1850 Software\Policies\Mozilla\Firefox\DisableSecurityBypass\InvalidCertificate = 0x1 | 0x0
1851 Software\Policies\Mozilla\Firefox\DisableSecurityBypass\SafeBrowsing = 0x1 | 0x0
1852 ```
1853 #### Windows (Intune)
1854 OMA-URI:
1855 ```
1856 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/P_DisableSecurityBypass_InvalidCertificate
1857 ```
1858 Value (string):
1859 ```
1860 <enabled/> or <disabled/>
1861 ```
1862 OMA-URI:
1863 ```
1864 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/P_DisableSecurityBypass_SafeBrowsing
1865 ```
1866 Value (string):
1867 ```
1868 <enabled/> or <disabled/>
1869 ```
1870
1871 #### macOS
1872 ```
1873 <dict>
1874   <key>DisableSecurityBypass</key>
1875   <dict>
1876     <key>InvalidCertificate</key>
1877     <true/> | <false/>
1878     <key>SafeBrowsing</key>
1879     <true/> | <false/>
1880   </dict>
1881 </dict>
1882 ```
1883 #### policies.json
1884 ```
1885 {
1886   "policies": {
1887     "DisableSecurityBypass": {
1888       "InvalidCertificate": true | false,
1889       "SafeBrowsing": true | false
1890     }
1891   }
1892 }
1893 ```
1894 ### DisableSetDesktopBackground
1895 Remove the "Set As Desktop Background..." menuitem when right clicking on an image.
1896
1897 **Compatibility:** Firefox 60, Firefox ESR 60\
1898 **CCK2 Equivalent:** `removeSetDesktopBackground`\
1899 **Preferences Affected:** N/A
1900
1901 #### Windows (GPO)
1902 ```
1903 Software\Policies\Mozilla\Firefox\DisableSetDesktopBackground = 0x1 | 0x0
1904 ```
1905 #### Windows (Intune)
1906 OMA-URI:
1907 ```
1908 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSetDesktopBackground
1909 ```
1910 Value (string):
1911 ```
1912 <enabled/> or <disabled/>
1913 ```
1914 #### macOS
1915 ```
1916 <dict>
1917   <key>DisableSetDesktopBackground</key>
1918   <true/> | <false/>
1919 </dict>
1920 ```
1921 #### policies.json
1922 ```
1923 {
1924   "policies": {
1925     "DisableSetDesktopBackground": true | false
1926   }
1927 }
1928 ```
1929 ### DisableSystemAddonUpdate
1930 Prevent system add-ons from being installed or update.
1931
1932 **Compatibility:** Firefox 60, Firefox ESR 60\
1933 **CCK2 Equivalent:** N/A\
1934 **Preferences Affected:** N/A
1935
1936 #### Windows (GPO)
1937 ```
1938 Software\Policies\Mozilla\Firefox\DisableSystemAddonUpdate = 0x1 | 0x0
1939 ```
1940 #### Windows (Intune)
1941 OMA-URI:
1942 ```
1943 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSystemAddonUpdate
1944 ```
1945 Value (string):
1946 ```
1947 <enabled/> or <disabled/>
1948 ```
1949 #### macOS
1950 ```
1951 <dict>
1952   <key>DisableSystemAddonUpdate</key>
1953   <true/> | <false/>
1954 </dict>
1955 ```
1956 #### policies.json
1957 ```
1958 {
1959   "policies": {
1960     "DisableSystemAddonUpdate": true | false
1961   }
1962 }
1963 ```
1964 ### DisableTelemetry
1965 Prevent the upload of telemetry data.
1966
1967 As of Firefox 83 and Firefox ESR 78.5, local storage of telemetry data is disabled as well.
1968
1969 Mozilla recommends that you do not disable telemetry. Information collected through telemetry helps us build a better product for businesses like yours.
1970
1971 **Compatibility:** Firefox 60, Firefox ESR 60\
1972 **CCK2 Equivalent:** `disableTelemetry`\
1973 **Preferences Affected:** `datareporting.healthreport.uploadEnabled`, `datareporting.policy.dataSubmissionEnabled`, `toolkit.telemetry.archive.enabled`
1974
1975 #### Windows (GPO)
1976 ```
1977 Software\Policies\Mozilla\Firefox\DisableTelemetry = 0x1 | 0x0
1978 ```
1979 #### Windows (Intune)
1980 OMA-URI:
1981 ```
1982 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableTelemetry
1983 ```
1984 Value (string):
1985 ```
1986 <enabled/> or <disabled/>
1987 ```
1988 #### macOS
1989 ```
1990 <dict>
1991   <key>DisableTelemetry</key>
1992   <true/> | <false/>
1993 </dict>
1994 ```
1995 #### policies.json
1996 ```
1997 {
1998   "policies": {
1999     "DisableTelemetry": true | false
2000   }
2001 }
2002 ```
2003 ### DisplayBookmarksToolbar
2004 Set the initial state of the bookmarks toolbar. A user can still hide it and it will stay hidden.
2005
2006 **Compatibility:** Firefox 60, Firefox ESR 60\
2007 **CCK2 Equivalent:** `displayBookmarksToolbar`\
2008 **Preferences Affected:** N/A
2009
2010 #### Windows (GPO)
2011 ```
2012 Software\Policies\Mozilla\Firefox\DisplayBookmarksToolbar = 0x1 | 0x0
2013 ```
2014 #### Windows (Intune)
2015 OMA-URI:
2016 ```
2017 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisplayBookmarksToolbar
2018 ```
2019 Value (string):
2020 ```
2021 <enabled/> or <disabled/>
2022 ```
2023 #### macOS
2024 ```
2025 <dict>
2026   <key>DisplayBookmarksToolbar</key>
2027   <true/> | <false/>
2028 </dict>
2029 ```
2030 #### policies.json
2031 ```
2032 {
2033   "policies": {
2034     "DisplayBookmarksToolbar": true | false
2035   }
2036 }
2037 ```
2038 ### DisplayMenuBar
2039 Set the state of the menubar.
2040
2041 `always` means the menubar is shown and cannot be hidden.
2042
2043 `never` means the menubar is hidden and cannot be shown.
2044
2045 `default-on` means the menubar is on by default but can be hidden.
2046
2047 `default-off` means the menubar is off by default but can be shown.
2048
2049 **Compatibility:** Firefox 73, Firefox ESR 68.5 (Windows, some Linux)\
2050 **CCK2 Equivalent:** `displayMenuBar`\
2051 **Preferences Affected:** N/A
2052
2053 #### Windows (GPO)
2054 ```
2055 Software\Policies\Mozilla\Firefox\DisplayMenuBar = "always", "never", "default-on", "default-off"
2056 ```
2057 #### Windows (Intune)
2058 OMA-URI:
2059 ```
2060 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisplayMenuBar_Enum
2061 ```
2062 Value (string):
2063 ```
2064 <enabled/>
2065 <data id="DisplayMenuBar" value="always | never | default-on | default-off"/>
2066 ```
2067 #### macOS
2068 ```
2069 <dict>
2070   <key>DisplayMenuBar</key>
2071   <string>always | never | default-on | default-off</string>
2072 </dict>
2073 ```
2074 #### policies.json
2075 ```
2076 {
2077   "policies": {
2078     "DisplayMenuBar": "always", "never", "default-on", "default-off"
2079   }
2080 }
2081 ```
2082 ### DisplayMenuBar (Deprecated)
2083 Set the initial state of the menubar. A user can still hide it and it will stay hidden.
2084
2085 **Compatibility:** Firefox 60, Firefox ESR 60 (Windows, some Linux)\
2086 **CCK2 Equivalent:** `displayMenuBar`\
2087 **Preferences Affected:** N/A
2088
2089 #### Windows (GPO)
2090 ```
2091 Software\Policies\Mozilla\Firefox\DisplayMenuBar = 0x1 | 0x0
2092 ```
2093 #### macOS
2094 ```
2095 <dict>
2096   <key>DisplayMenuBar</key>
2097   <true/> | <false/>
2098 </dict>
2099 ```
2100 #### policies.json
2101 ```
2102 {
2103   "policies": {
2104     "DisplayMenuBar": true | false
2105   }
2106 }
2107 ```
2108 ### DNSOverHTTPS
2109 Configure DNS over HTTPS.
2110
2111 `Enabled` determines whether DNS over HTTPS is enabled
2112
2113 `ProviderURL` is a URL to another provider.
2114
2115 `Locked` prevents the user from changing DNS over HTTPS preferences.
2116
2117 `ExcludedDomains` excludes domains from DNS over HTTPS.
2118
2119 **Compatibility:** Firefox 63, Firefox ESR 68 (ExcludedDomains added in 75/68.7)\
2120 **CCK2 Equivalent:** N/A\
2121 **Preferences Affected:** `network.trr.mode`, `network.trr.uri`
2122
2123 #### Windows (GPO)
2124 ```
2125 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\Enabled = 0x1 | 0x0
2126 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\ProviderURL = "URL_TO_ALTERNATE_PROVIDER"
2127 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\Locked = 0x1 | 0x0
2128 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\ExcludedDomains\1 = "example.com"
2129 ```
2130 #### Windows (Intune)
2131 OMA-URI:
2132 ```
2133 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_Enabled
2134 ```
2135 Value (string):
2136 ```
2137 <enabled/> or <disabled/>
2138 ```
2139 OMA-URI:
2140 ```
2141 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_ProviderURL
2142 ```
2143 Value (string):
2144 ```
2145 <enabled/>
2146 <data id="String" value="URL_TO_ALTERNATE_PROVIDER"/>
2147 ```
2148 OMA-URI:
2149 ```
2150 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_Locked
2151 ```
2152 Value (string):
2153 ```
2154 <enabled/> or <disabled/>
2155 ```
2156 OMA-URI:
2157 ```
2158 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_ExcludedDomains
2159 ```
2160 Value (string):
2161 ```
2162 <enabled/>
2163 <data id="List" value="1&#xF000;example.com"/>
2164 ```
2165 #### macOS
2166 ```
2167 <dict>
2168   <key>DNSOverHTTPS</key>
2169   <dict>
2170     <key>Enabled</key>
2171     <true/> | <false/>
2172     <key>ProviderURL</key>
2173     <string>URL_TO_ALTERNATE_PROVIDER</string>
2174     <key>Locked</key>
2175     <true/> | <false/>
2176     <key>ExcludedDomains</key>
2177     <array>
2178       <string>example.com</string>
2179     </array>
2180   </dict>
2181 </dict>
2182 ```
2183 #### policies.json
2184 ```
2185 {
2186   "policies": {
2187     "DNSOverHTTPS": {
2188       "Enabled":  true | false,
2189       "ProviderURL": "URL_TO_ALTERNATE_PROVIDER",
2190       "Locked": true | false,
2191       "ExcludedDomains": ["example.com"]
2192     }
2193   }
2194 }
2195 ```
2196 ### DontCheckDefaultBrowser
2197 Don't check if Firefox is the default browser at startup.
2198
2199 **Compatibility:** Firefox 60, Firefox ESR 60\
2200 **CCK2 Equivalent:** `dontCheckDefaultBrowser`\
2201 **Preferences Affected:** `browser.shell.checkDefaultBrowser`
2202
2203 #### Windows (GPO)
2204 ```
2205 Software\Policies\Mozilla\Firefox\DontCheckDefaultBrowser = 0x1 | 0x0
2206 ```
2207 #### Windows (Intune)
2208 OMA-URI:
2209 ```
2210 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DontCheckDefaultBrowser
2211 ```
2212 Value (string):
2213 ```
2214 <enabled/> or <disabled/>
2215 ```
2216 #### macOS
2217 ```
2218 <dict>
2219   <key>DontCheckDefaultBrowser</key>
2220   <true/> | <false/>
2221 </dict>
2222 ```
2223 #### policies.json
2224 ```
2225 {
2226   "policies": {
2227     "DontCheckDefaultBrowser": true | false
2228   }
2229 }
2230 ```
2231 ### DownloadDirectory
2232 Set and lock the download directory.
2233
2234 You can use ${home} for the native home directory.
2235
2236 **Compatibility:** Firefox 68, Firefox ESR 68\
2237 **CCK2 Equivalent:** N/A\
2238 **Preferences Affected:** `browser.download.dir`, `browser.download.folderList`, `browser.download.useDownloadDir`
2239
2240 #### Windows (GPO)
2241 ```
2242 Software\Policies\Mozilla\Firefox\DownloadDirectory = "${home}\Downloads"
2243 ```
2244 #### Windows (Intune)
2245 OMA-URI:
2246 ```
2247 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DownloadDirectory
2248 ```
2249 Value (string):
2250 ```
2251 <enabled/>
2252 <data id="Preferences_String" value="${home}\Downloads"/>
2253 ```
2254 #### macOS
2255 ```
2256 <dict>
2257   <key>DownloadDirectory</key>
2258   <string>${home}/Downloads</string>
2259 </dict>
2260 ```
2261 #### policies.json (macOS and Linux)
2262 ```
2263 {
2264   "policies": {
2265     "DownloadDirectory": "${home}/Downloads"
2266 }
2267 ```
2268 #### policies.json (Windows)
2269 ```
2270 {
2271   "policies": {
2272     "DownloadDirectory": "${home}\\Downloads"
2273 }
2274 ```
2275 ### EnableTrackingProtection
2276 Configure tracking protection.
2277
2278 If this policy is not configured, tracking protection is not enabled by default in the browser, but it is enabled by default in private browsing and the user can change it.
2279
2280 If `Value` is set to false, tracking protection is disabled and locked in both the regular browser and private browsing.
2281
2282 If `Value` is set to true, tracking protection is enabled by default in both the regular browser and private browsing and the `Locked` value determines whether or not a user can change it.
2283
2284 If `Cryptomining` is set to true, cryptomining scripts on websites are blocked.
2285
2286 If `Fingerprinting` is set to true, fingerprinting scripts on websites are blocked.
2287
2288 `Exceptions` are origins for which tracking protection is not enabled.
2289
2290 **Compatibility:** Firefox 60, Firefox ESR 60 (Cryptomining and Fingerprinting added in 70/68.2, Exceptions added in 73/68.5)\
2291 **CCK2 Equivalent:** N/A\
2292 **Preferences Affected:** `privacy.trackingprotection.enabled`, `privacy.trackingprotection.pbmode.enabled`, `privacy.trackingprotection.cryptomining.enabled`, `privacy.trackingprotection.fingerprinting.enabled`
2293
2294 #### Windows (GPO)
2295 ```
2296 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Value = 0x1 | 0x0
2297 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Locked = 0x1 | 0x0
2298 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Cryptomining = 0x1 | 0x0
2299 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Fingerprinting = 0x1 | 0x0
2300 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Exceptions\1 = "https://example.com"
2301 ```
2302 #### Windows (Intune)
2303 OMA-URI:
2304 ```
2305 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/A_TrackingProtection_Value
2306 ```
2307 Value (string):
2308 ```
2309 <enabled/> or <disabled/>
2310 ```
2311 OMA-URI:
2312 ```
2313 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/B_TrackingProtection_Cryptomining
2314 ```
2315 Value (string):
2316 ```
2317 <enabled/> or <disabled/>
2318 ```
2319 OMA-URI:
2320 ```
2321 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/C_TrackingProtection_Fingerprinting
2322 ```
2323 Value (string):
2324 ```
2325 <enabled/> or <disabled/>
2326 ```
2327 OMA-URI:
2328 ```
2329 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/D_TrackingProtection_Exceptions
2330 ```
2331 Value (string):
2332 ```
2333 <data id="TrackingProtection_Exceptions" value="1&#xF000;https://example.com"/>
2334 ```
2335 OMA-URI:
2336 ```
2337 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/E_TrackingProtection_Locked
2338 ```
2339 Value (string):
2340 ```
2341 <enabled/> or <disabled/>
2342 ```
2343 #### macOS
2344 ```
2345 <dict>
2346   <key>EnableTrackingProtection</key>
2347   <dict>
2348     <key>Value</key>
2349     <true/> | <false/>
2350     <key>Locked</key>
2351     <true/> | <false/>
2352     <key>Cryptomining</key>
2353     <true/> | <false/>
2354     <key>Fingerprinting</key>
2355     <true/> | <false/>
2356     <key>Exceptions</key>
2357     <array>
2358       <string>https://example.com</string>
2359     </array>
2360   </dict>
2361 </dict>
2362 ```
2363 #### policies.json
2364 ```
2365 {
2366   "policies": {
2367     "EnableTrackingProtection": {
2368       "Value": true | false,
2369       "Locked": true | false,
2370       "Cryptomining": true | false,
2371       "Fingerprinting": true | false,
2372       "Exceptions": ["https://example.com"]
2373     }
2374   }
2375 }
2376 ```
2377 ### EncryptedMediaExtensions
2378 Enable or disable Encrypted Media Extensions and optionally lock it.
2379
2380 If `Enabled` is set to false, encrypted media extensions (like Widevine) are not downloaded by Firefox unless the user consents to installing them.
2381
2382 If `Locked` is set to true and `Enabled` is set to false, Firefox will not download encrypted media extensions (like Widevine) or ask the user to install them.
2383
2384 **Compatibility:** Firefox 77, Firefox ESR 68.9\
2385 **CCK2 Equivalent:** N/A\
2386 **Preferences Affected:** `media.eme.enabled`
2387
2388 #### Windows (GPO)
2389 ```
2390 Software\Policies\Mozilla\Firefox\EncryptedMediaExtensions\Enabled = 0x1 | 0x0
2391 Software\Policies\Mozilla\Firefox\EncryptedMediaExtensions\Locked = 0x1 | 0x0
2392 ```
2393 #### Windows (Intune)
2394 OMA-URI:
2395 ```
2396 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~EncryptedMediaExtensions/EncryptedMediaExtensions_Enabled
2397 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~EncryptedMediaExtensions/EncryptedMediaExtensions_Locked
2398 ```
2399 Value (string):
2400 ```
2401 <enabled/>or <disabled/>
2402 ```
2403 #### macOS
2404 ```
2405 <dict>
2406   <key>EncryptedMediaExtensions</key>
2407   <dict>
2408     <key>Enabled</key>
2409     <true/> | <false/>
2410     <key>Locked</key>
2411     <true/> | <false/>
2412   </dict>
2413 </dict>
2414 ```
2415 #### policies.json
2416 ```
2417 {
2418   "policies": {
2419     "EncryptedMediaExtensions": {
2420       "Enabled": true | false,
2421       "Locked": true | false
2422     }
2423   }
2424 }
2425 ```
2426 ### EnterprisePoliciesEnabled
2427 Enable policy support on macOS.
2428
2429 **Compatibility:** Firefox 63, Firefox ESR 60.3 (macOS only)\
2430 **CCK2 Equivalent:** N/A\
2431 **Preferences Affected:** N/A
2432
2433 #### macOS
2434 ```
2435 <dict>
2436   <key>EnterprisePoliciesEnabled</key>
2437   <true/>
2438 </dict>
2439 ```
2440 ### Extensions
2441 Control the installation, uninstallation and locking of extensions.
2442
2443 While this policy is not technically deprecated, it is recommended that you use the **[`ExtensionSettings`](#extensionsettings)** policy. It has the same functionality and adds more. It does not support native paths, though, so you'll have to use file:/// URLs.
2444
2445 `Install` is a list of URLs or native paths for extensions to be installed.
2446
2447 `Uninstall` is a list of extension IDs that should be uninstalled if found.
2448
2449 `Locked` is a list of extension IDs that the user cannot disable or uninstall.
2450
2451 **Compatibility:** Firefox 60, Firefox ESR 60\
2452 **CCK2 Equivalent:** `addons`\
2453 **Preferences Affected:** N/A
2454
2455 #### Windows (GPO)
2456 ```
2457 Software\Policies\Mozilla\Firefox\Extensions\Install\1 = "https://addons.mozilla.org/firefox/downloads/somefile.xpi"
2458 Software\Policies\Mozilla\Firefox\Extensions\Install\2 = "//path/to/xpi"
2459 Software\Policies\Mozilla\Firefox\Extensions\Uninstall\1 = "bad_addon_id@mozilla.org"
2460 Software\Policies\Mozilla\Firefox\Extensions\Locked\1 = "addon_id@mozilla.org"
2461 ```
2462 #### Windows (Intune)
2463 OMA-URI:
2464 ```
2465 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/Extensions_Install
2466 ```
2467 Value (string):
2468 ```
2469 <enabled/>
2470 <data id="Extensions" value="1&#xF000;https://addons.mozilla.org/firefox/downloads/somefile.xpi&#xF000;2&#xF000;//path/to/xpi"/>
2471 ```
2472 OMA-URI:
2473 ```
2474 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/Extensions_Uninstall
2475 ```
2476 Value (string):
2477 ```
2478 <enabled/>
2479 <data id="Extensions" value="1&#xF000;bad_addon_id@mozilla.org"/>
2480 ```
2481 OMA-URI:
2482 ```
2483 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/Extensions_Locked
2484 ```
2485 Value (string):
2486 ```
2487 <enabled/>
2488 <data id="Extensions" value="1&#xF000;addon_id@mozilla.org"/>
2489 ```
2490 #### macOS
2491 ```
2492 <dict>
2493   <key>Extensions</key>
2494   <dict>
2495     <key>Install</key>
2496     <array>
2497       <string>https://addons.mozilla.org/firefox/downloads/somefile.xpi</string>
2498       <string>//path/to/xpi</string>
2499     </array>
2500     <key>Uninstall</key>
2501     <array>
2502       <string>bad_addon_id@mozilla.org</string>
2503     </array>
2504     <key>Locked</key>
2505     <array>
2506       <string>addon_id@mozilla.org</string>
2507     </array>
2508   </dict>
2509 </dict>
2510 ```
2511 #### policies.json
2512 ```
2513 {
2514   "policies": {
2515     "Extensions": {
2516       "Install": ["https://addons.mozilla.org/firefox/downloads/somefile.xpi", "//path/to/xpi"],
2517       "Uninstall": ["bad_addon_id@mozilla.org"],
2518       "Locked":  ["addon_id@mozilla.org"]
2519     }
2520   }
2521 }
2522 ```
2523 ### ExtensionSettings
2524 Manage all aspects of extensions. This policy is based heavily on the [Chrome policy](https://dev.chromium.org/administrators/policy-list-3/extension-settings-full) of the same name.
2525
2526 This policy maps an extension ID to its configuration. With an extension ID, the configuration will be applied to the specified extension only. A default configuration can be set for the special ID "*", which will apply to all extensions that don't have a custom configuration set in this policy.
2527
2528 To obtain an extension ID, install the extension and go to about:support. You will see the ID in the Extensions section. I've also created an extension that makes it easy to find the ID of extensions on AMO. You can download it [here](https://github.com/mkaply/queryamoid/releases/tag/v0.1).
2529
2530 The configuration for each extension is another dictionary that can contain the fields documented below.
2531
2532 | Name | Description |
2533 | --- | --- |
2534 | `installation_mode` | Maps to a string indicating the installation mode for the extension. The valid strings are `allowed`,`blocked`,`force_installed`, and `normal_installed`.
2535 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`allowed` | Allows the extension to be installed by the user. This is the default behavior. There is no need for an install_url; it will automatically be allowed based on the ID.
2536 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`blocked`| Blocks installation of the extension and removes it from the device if already installed.
2537 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`force_installed`| The extension is automatically installed and can't be removed by the user. This option is not valid for the default configuration and requires an install_url.
2538 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`normal_installed`| The extension is automatically installed but can be disabled by the user. This option is not valid for the default configuration and requires an install_url.
2539 | `install_url`| Maps to a URL indicating where Firefox can download a force_installed or normal_installed extension.  If installing from the local file system, use a [```file:///``` URL](https://en.wikipedia.org/wiki/File_URI_scheme). If installing from the addons.mozilla.org, use the following URL (substituting SHORT_NAME from the URL on AMO), https://addons.mozilla.org/firefox/downloads/latest/SHORT_NAME/latest.xpi. Languages packs are available from https://releases.mozilla.org/pub/firefox/releases/VERSION/PLATFORM/xpi/LANGUAGE.xpi. If you need to update the extension, you can change the name of the extension and it will be automatically updated. Extensions installed from file URLs will additional be updated when their internal version changes.
2540 | `install_sources` | A list of sources from which installing extensions is allowed. **This is unnecessary if you are only allowing the installation of certain extensions by ID.** Each item in this list is an extension-style match pattern. Users will be able to easily install items from any URL that matches an item in this list. Both the location of the *.xpi file and the page where the download is started from (i.e.  the referrer) must be allowed by these patterns. This setting can be used only for the default configuration.
2541 | `allowed_types` | This setting whitelists the allowed types of extension/apps that can be installed in Firefox. The value is a list of strings, each of which should be one of the following: "extension", "theme", "dictionary", "locale" This setting can be used only for the default configuration.
2542 | `blocked_install_message` | This maps to a string specifying the error message to display to users if they're blocked from installing an extension. This setting allows you to append text to the generic error message displayed when the extension is blocked. This could be be used to direct users to your help desk, explain why a particular extension is blocked, or something else. This setting can be used only for the default configuration.
2543 | `restricted_domains` | An array of domains on which content scripts can't be run. This setting can be used only for the default configuration.
2544 | `updates_disabled` | (Firefox 89, Firefox ESR 78.11) Boolean that indicates whether or not to disable automatic updates for an individual extension.
2545
2546 **Compatibility:** Firefox 69, Firefox ESR 68.1 (As of Firefox 85, Firefox ESR 78.7, installing a theme makes it the default.)\
2547 **CCK2 Equivalent:** N/A\
2548 **Preferences Affected:** N/A
2549
2550 #### Windows (GPO)
2551 Software\Policies\Mozilla\Firefox\ExtensionSettings (REG_MULTI_SZ) =
2552 ```
2553 {
2554   "*": {
2555     "blocked_install_message": "Custom error message.",
2556     "install_sources": ["about:addons","https://addons.mozilla.org/"],
2557     "installation_mode": "blocked",
2558     "allowed_types": ["extension"]
2559   },
2560   "uBlock0@raymondhill.net": {
2561     "installation_mode": "force_installed",
2562     "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
2563   },
2564   "https-everywhere@eff.org": {
2565     "installation_mode": "allowed"
2566   }
2567 }
2568 ```
2569 #### Windows (Intune)
2570 OMA-URI:
2571 ```
2572 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/ExtensionSettings
2573 ```
2574 Value (string):
2575 ```
2576 <enabled/>
2577 <data id="ExtensionSettings" value='
2578 {
2579   "*": {
2580     "blocked_install_message": "Custom error message.",
2581     "install_sources": ["about:addons","https://addons.mozilla.org/"],
2582     "installation_mode": "blocked",
2583     "allowed_types": ["extension"]
2584   },
2585   "uBlock0@raymondhill.net": {
2586     "installation_mode": "force_installed",
2587     "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
2588   },
2589     "https-everywhere@eff.org": {
2590     "installation_mode": "allowed"
2591   }
2592 }'/>
2593 ```
2594 #### macOS
2595 ```
2596 <dict>
2597   <key>ExtensionSettings</key>
2598   <dict>
2599     <key>*</key>
2600     <dict>
2601       <key>blocked_install_message</key>
2602       <string>Custom error message.</string>
2603       <key>install_sources</key>
2604       <array>
2605         <string>about:addons</string>
2606         <string>https://addons.mozilla.org/</string>
2607       </array>
2608       <key>installation_mode</key>
2609       <string>blocked</string>
2610       <key>allowed_types</key>
2611       <array>
2612         <string>extension</string>
2613       </array>
2614     </dict>
2615     <key>uBlock0@raymondhill.net</key>
2616     <dict>
2617       <key>installation_mode</key>
2618        <string>force_installed</string>
2619       <key>install_url</key>
2620       <string>https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi</string>
2621     </dict>
2622     <key>https-everywhere@eff.org</key>
2623     <dict>
2624       <key>installation_mode</key>
2625        <string>allowed</string>
2626     </dict>
2627   </dict>
2628 </dict>
2629 ```
2630 #### policies.json
2631 ```
2632 {
2633   "policies": {
2634     "ExtensionSettings": {
2635       "*": {
2636         "blocked_install_message": "Custom error message.",
2637         "install_sources": ["about:addons","https://addons.mozilla.org/"],
2638         "installation_mode": "blocked",
2639         "allowed_types": ["extension"]
2640       },
2641       "uBlock0@raymondhill.net": {
2642         "installation_mode": "force_installed",
2643         "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
2644       },
2645       "https-everywhere@eff.org": {
2646         "installation_mode": "allowed"
2647       }
2648     }
2649   }
2650 }
2651 ```
2652 ### ExtensionUpdate
2653 Control extension updates.
2654
2655 **Compatibility:** Firefox 67, Firefox ESR 60.7\
2656 **CCK2 Equivalent:** N/A\
2657 **Preferences Affected:** `extensions.update.enabled`
2658
2659 #### Windows (GPO)
2660 ```
2661 Software\Policies\Mozilla\Firefox\ExtensionUpdate = 0x1 | 0x0
2662 ```
2663 #### Windows (Intune)
2664 OMA-URI:
2665 ```
2666 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/ExtensionUpdate
2667 ```
2668 Value (string):
2669 ```
2670 <enabled/> or <disabled/>
2671 ```
2672 #### macOS
2673 ```
2674 <dict>
2675   <key>ExtensionUpdate</key>
2676   <true/> | <false/>
2677 </dict>
2678 ```
2679 #### policies.json
2680 ```
2681 {
2682   "policies": {
2683     "ExtensionUpdate": true | false
2684   }
2685 }
2686 ```
2687 ### FirefoxHome
2688 Customize the Firefox Home page.
2689
2690 **Compatibility:** Firefox 68, Firefox ESR 68 (SponsoredTopSites and SponsoredPocket were added in Firefox 95, Firefox ESR 91.4)
2691 **CCK2 Equivalent:** N/A\
2692 **Preferences Affected:** `browser.newtabpage.activity-stream.showSearch`, `browser.newtabpage.activity-stream.feeds.topsites`, `browser.newtabpage.activity-stream.feeds.section.highlights`, `browser.newtabpage.activity-stream.feeds.section.topstories`, `browser.newtabpage.activity-stream.feeds.snippets`, `browser.newtabpage.activity-stream.showSponsoredTopSites`, `browser.newtabpage.activity-stream.showSponsored`
2693
2694 #### Windows (GPO)
2695 ```
2696 Software\Policies\Mozilla\Firefox\FirefoxHome\Search = 0x1 | 0x0
2697 Software\Policies\Mozilla\Firefox\FirefoxHome\TopSites = 0x1 | 0x0
2698 Software\Policies\Mozilla\Firefox\FirefoxHome\SponsoredTopSites = 0x1 | 0x0
2699 Software\Policies\Mozilla\Firefox\FirefoxHome\Highlights = 0x1 | 0x0
2700 Software\Policies\Mozilla\Firefox\FirefoxHome\Pocket = 0x1 | 0x0
2701 Software\Policies\Mozilla\Firefox\FirefoxHome\SponsoredPocket = 0x1 | 0x0
2702 Software\Policies\Mozilla\Firefox\FirefoxHome\Snippets = 0x1 | 0x0
2703 Software\Policies\Mozilla\Firefox\FirefoxHome\Locked = 0x1 | 0x0
2704 ```
2705 #### Windows (Intune)
2706 OMA-URI:
2707 ```
2708 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/CustomizeFirefoxHome
2709 ```
2710 Value (string):
2711 ```
2712 <enabled/>
2713 <data id="FirefoxHome_Search"  value="true | false"/>
2714 <data id="FirefoxHome_TopSites"  value="true | false"/>
2715 <data id="FirefoxHome_SponsoredTopSites"  value="true | false"/>
2716 <data id="FirefoxHome_Highlights"  value="true | false"/>
2717 <data id="FirefoxHome_Pocket"  value="true | false"/>
2718 <data id="FirefoxHome_SponsoredPocket"  value="true | false"/>
2719 <data id="FirefoxHome_Snippets"  value="true | false"/>
2720 <data id="FirefoxHome_Locked"  value="true | false"/>
2721 ```
2722 #### macOS
2723 ```
2724 <dict>
2725   <key>FirefoxHome</key>
2726   <dict>
2727     <key>Search</key>
2728     <true/> | <false/>
2729     <key>TopSites</key>
2730     <true/> | <false/>
2731     <key>SponsoredTopSites</key>
2732     <true/> | <false/>
2733     <key>Highlights</key>
2734     <true/> | <false/>
2735     <key>Pocket</key>
2736     <true/> | <false/>
2737     <key>SponsoredPocket</key>
2738     <true/> | <false/>
2739     <key>Snippets</key>
2740     <true/> | <false/>
2741     <key>Locked</key>
2742     <true/> | <false/>
2743   </dict>
2744 </dict>
2745 ```
2746 #### policies.json
2747 ```
2748 {
2749   "policies": {
2750     "FirefoxHome": {
2751       "Search": true | false,
2752       "TopSites": true | false,
2753       "SponsoredTopSites": true | false,
2754       "Highlights": true | false,
2755       "Pocket": true | false,
2756       "SponsoredPocket": true | false,
2757       "Snippets": true | false,
2758       "Locked": true | false
2759     }
2760   }
2761 }
2762 ```
2763 ### FlashPlugin (Deprecated)
2764 Configure the default Flash plugin policy as well as origins for which Flash is allowed.
2765
2766 `Allow` is a list of origins where Flash are allowed.
2767
2768 `Block` is a list of origins where Flash is not allowed.
2769
2770 `Default` determines whether or not Flash is allowed by default.
2771
2772 `Locked` prevents the user from changing Flash preferences.
2773
2774 **Compatibility:** Firefox 60, Firefox ESR 60\
2775 **CCK2 Equivalent:** `permissions.plugin`\
2776 **Preferences Affected:** `plugin.state.flash`
2777
2778 #### Windows (GPO)
2779 ```
2780 Software\Policies\Mozilla\Firefox\FlashPlugin\Allow\1 = "https://example.org"
2781 Software\Policies\Mozilla\Firefox\FlashPlugin\Block\1 = "https://example.edu"
2782 Software\Policies\Mozilla\Firefox\FlashPlugin\Default = 0x1 | 0x0
2783 Software\Policies\Mozilla\Firefox\FlashPlugin\Locked = 0x1 | 0x0
2784 ```
2785 #### Windows (Intune)
2786 OMA-URI:
2787 ```
2788 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Flash/FlashPlugin_Allow
2789 ```
2790 Value (string):
2791 ```
2792 <enabled/>
2793 <data id="Permissions" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
2794 ```
2795 OMA-URI:
2796 ```
2797 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Flash/FlashPlugin_Locked
2798 ```
2799 Value (string):
2800 ```
2801 <enabled/> or <disabled/>
2802 ```
2803 OMA-URI:
2804 ```
2805 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Flash/FlashPlugin_Default
2806 ```
2807 Value (string):
2808 ```
2809 <enabled/> or <disabled/>
2810 ```
2811 #### macOS
2812 ```
2813 <dict>
2814   <key>FlashPlugin</key>
2815   <dict>
2816     <key>Allow</key>
2817     <array>
2818       <string>http://example.org</string>
2819     </array>
2820     <key>Block</key>
2821     <array>
2822       <string>http://example.edu</string>
2823     </array>
2824     <key>Default</key>
2825     <true/> | <false/>
2826     <key>Locked</key>
2827     <true/> | <false/>
2828   </dict>
2829 </dict>
2830 ```
2831 #### policies.json
2832 ```
2833 {
2834   "policies": {
2835     "FlashPlugin": {
2836       "Allow": ["http://example.org/"],
2837       "Block": ["http://example.edu/"],
2838       "Default": true | false,
2839       "Locked": true | false
2840     }
2841   }
2842 }
2843 ```
2844 ### Handlers
2845 Configure default application handlers. This policy is based on the internal format of `handlers.json`.
2846
2847 You can configure handlers based on a mime type (`mimeTypes`), a file's extension (`extensions`), or a protocol (`schemes`).
2848
2849 Within each handler type, you specify the given mimeType/extension/scheme as a key and use the following subkeys to describe how it is handled.
2850
2851 | Name | Description |
2852 | --- | --- |
2853 | `action`| Can be either `saveToDisk`, `useHelperApp`, `useSystemDefault`.
2854 | `ask` | If `true`, the user is asked if what they want to do with the file. If `false`, the action is taken without user intervention.
2855 | `handlers` | An array of handlers with the first one being the default. If you don't want to have a default handler, use an empty object for the first handler. Choose between path or uriTemplate.
2856 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`name` | The display name of the handler (might not be used).
2857 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`path`| The native path to the executable to be used.
2858 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`uriTemplate`| A url to a web based application handler. The URL must be https and contain a %s to be used for substitution.
2859
2860 **Compatibility:** Firefox 78, Firefox ESR 78\
2861 **CCK2 Equivalent:** N/A\
2862 **Preferences Affected:** N/A
2863
2864 #### Windows (GPO)
2865 Software\Policies\Mozilla\Firefox\Handlers (REG_MULTI_SZ) =
2866 ```
2867 {
2868   "mimeTypes": {
2869     "application/msword": {
2870       "action": "useSystemDefault",
2871       "ask": true | false
2872     }
2873   },
2874   "schemes": {
2875     "mailto": {
2876       "action": "useHelperApp",
2877       "ask": true | false,
2878       "handlers": [{
2879         "name": "Gmail",
2880         "uriTemplate": "https://mail.google.com/mail/?extsrc=mailto&url=%s"
2881       }]
2882     }
2883   },
2884   "extensions": {
2885     "pdf": {
2886       "action": "useHelperApp",
2887       "ask": true | false,
2888       "handlers": [{
2889         "name": "Adobe Acrobat",
2890         "path": "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32.exe"
2891       }]
2892     }
2893   }
2894 }
2895 ```
2896 #### Windows (Intune)
2897 OMA-URI:
2898 ```
2899 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Handlers
2900 ```
2901 Value (string):
2902 ```
2903 <enabled/>
2904 <data id="Handlers" value='
2905 {
2906   "mimeTypes": {
2907     "application/msword": {
2908       "action": "useSystemDefault",
2909       "ask": true | false
2910     }
2911   },
2912   "schemes": {
2913     "mailto": {
2914       "action": "useHelperApp",
2915       "ask": true | false,
2916       "handlers": [{
2917         "name": "Gmail",
2918         "uriTemplate": "https://mail.google.com/mail/?extsrc=mailto&amp;url=%s"
2919       }]
2920     }
2921   },
2922   "extensions": {
2923     "pdf": {
2924       "action": "useHelperApp",
2925       "ask": true | false,
2926       "handlers": [{
2927         "name": "Adobe Acrobat",
2928         "path": "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32.exe"
2929       }]
2930     }
2931   }
2932 }
2933 '/>
2934 ```
2935 #### macOS
2936 ```
2937 <dict>
2938   <key>Handlers</key>
2939   <dict>
2940     <key>mimeTypes</key>
2941     <dict>
2942       <key>application/msword</key>
2943       <dict>
2944         <key>action</key>
2945         <string>useSystemDefault</string>
2946         <key>ask</key>
2947         <true/> | <false/>
2948       </dict>
2949     </dict>
2950     <key>schemes</key>
2951     <dict>
2952       <key>mailto</key>
2953       <dict>
2954         <key>action</key>
2955         <string>useHelperApp</string>
2956         <key>ask</key>
2957         <true/> | <false/>
2958         <key>handlers</key>
2959         <array>
2960           <dict>
2961             <key>name</key>
2962             <string>Gmail</string>
2963             <key>uriTemplate</key>
2964             <string>https://mail.google.com/mail/?extsrc=mailto&url=%s</string>
2965           </dict>
2966         </array>
2967       </dict>
2968     </dict>
2969     <key>extensions</key>
2970     <dict>
2971       <key>pdf</key>
2972       <dict>
2973         <key>action</key>
2974         <string>useHelperApp</string>
2975         <key>ask</key>
2976         <true/> | <false/>
2977         <key>handlers</key>
2978         <array>
2979           <dict>
2980             <key>name</key>
2981             <string>Adobe Acrobat</string>
2982             <key>path</key>
2983             <string>/System/Applications/Preview.app</string>
2984           </dict>
2985         </array>
2986       </dict>
2987     </dict>
2988   </dict>
2989 </dict>
2990 ```
2991 #### policies.json
2992 ```
2993 {
2994   "policies": {
2995     "Handlers": {
2996       "mimeTypes": {
2997         "application/msword": {
2998           "action": "useSystemDefault",
2999           "ask": false
3000         }
3001       },
3002       "schemes": {
3003         "mailto": {
3004           "action": "useHelperApp",
3005           "ask": true | false,
3006           "handlers": [{
3007             "name": "Gmail",
3008             "uriTemplate": "https://mail.google.com/mail/?extsrc=mailto&url=%s"
3009           }]
3010         }
3011       },
3012       "extensions": {
3013         "pdf": {
3014           "action": "useHelperApp",
3015           "ask": true | false,
3016           "handlers": [{
3017             "name": "Adobe Acrobat",
3018             "path": "/usr/bin/acroread"
3019           }]
3020         }
3021       }
3022     }
3023   }
3024 }
3025 ```
3026 ### HardwareAcceleration
3027 Control hardware acceleration.
3028
3029 **Compatibility:** Firefox 60, Firefox ESR 60\
3030 **CCK2 Equivalent:** N/A\
3031 **Preferences Affected:** `layers.acceleration.disabled`
3032
3033 #### Windows (GPO)
3034 ```
3035 Software\Policies\Mozilla\Firefox\HardwareAcceleration = 0x1 | 0x0
3036 ```
3037 #### Windows (Intune)
3038 OMA-URI:
3039 ```
3040 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/HardwareAcceleration
3041 ```
3042 Value (string):
3043 ```
3044 <enabled/> or <disabled/>
3045 ```
3046 #### macOS
3047 ```
3048 <dict>
3049   <key>HardwareAcceleration</key>
3050   <true/> | <false/>
3051 </dict>
3052 ```
3053 #### policies.json
3054 ```
3055 {
3056   "policies": {
3057     "HardwareAcceleration": true | false
3058   }
3059 }
3060 ```
3061 ### Homepage
3062 Configure the default homepage and how Firefox starts.
3063
3064 `URL` is the default homepage.
3065
3066 `Locked` prevents the user from changing homepage preferences.
3067
3068 `Additional` allows for more than one homepage.
3069
3070 `StartPage` is how Firefox starts. The choices are no homepage, the default homepage or the previous session.
3071
3072 With Firefox 78, an additional option as added for `Startpage`, `homepage-locked`. If this is value is set for the Startpage, the user will always get the homepage at startup and cannot choose to restore their session.
3073
3074 **Compatibility:** Firefox 60, Firefox ESR 60 (StartPage was added in Firefox 60, Firefox ESR 60.4, homepage-locked added in Firefox 78)\
3075 **CCK2 Equivalent:** `homePage`,`lockHomePage`\
3076 **Preferences Affected:** `browser.startup.homepage`, `browser.startup.page`
3077
3078 #### Windows (GPO)
3079 ```
3080 Software\Policies\Mozilla\Firefox\Homepage\URL = "https://example.com"
3081 Software\Policies\Mozilla\Firefox\Homepage\Locked = 0x1 | 0x0
3082 Software\Policies\Mozilla\Firefox\Homepage\Additional\1 = "https://example.org"
3083 Software\Policies\Mozilla\Firefox\Homepage\Additional\2 = "https://example.edu"
3084 Software\Policies\Mozilla\Firefox\Homepage\StartPage = "none" | "homepage" | "previous-session" | "homepage-locked"
3085 ```
3086 #### Windows (Intune)
3087 OMA-URI:
3088 ```
3089 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageURL
3090 ```
3091 Value (string):
3092 ```
3093 <enabled/>
3094
3095 <data id="HomepageURL" value="https://example.com"/>
3096 <data id="HomepageLocked" value="true | false"/>
3097 ```
3098 OMA-URI:
3099 ```
3100 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageAdditional
3101 ```
3102 Value (string):
3103 ```
3104 <enabled/>
3105
3106 <data id="HomepageAdditional" value="1&#xF000;http://example.org&#xF000;2&#xF000;http://example.edu"/>
3107 ```
3108 OMA-URI:
3109 ```
3110 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageStartPage
3111 ```
3112 Value (string):
3113 ```
3114 <enabled/>
3115
3116 <data id="StartPage" value="none | homepage | previous-session"/>
3117 ```
3118 #### macOS
3119 ```
3120 <dict>
3121   <key>Homepage</key>
3122   <dict>
3123     <key>URL</key>
3124     <string>http://example.com</string>
3125     <key>Locked</key>
3126     <true/> | <false/>
3127     <key>Additional</key>
3128     <array>
3129       <string>http://example.org</string>
3130       <string>http://example.edu</string>
3131     </array>
3132     <key>StartPage</key>
3133     <string>none | homepage | previous-session | homepage-locked</string>
3134   </dict>
3135 </dict>
3136 ```
3137 #### policies.json
3138 ```
3139 {
3140   "policies": {
3141     "Homepage": {
3142       "URL": "http://example.com/",
3143       "Locked": true | false,
3144       "Additional": ["http://example.org/",
3145                      "http://example.edu/"],
3146       "StartPage": "none" | "homepage" | "previous-session" | "homepage-locked"
3147     }
3148   }
3149 }
3150 ```
3151 ### InstallAddonsPermission
3152 Configure the default extension install policy as well as origins for extension installs are allowed. This policy does not override turning off all extension installs.
3153
3154 `Allow` is a list of origins where extension installs are allowed.
3155
3156 `Default` determines whether or not extension installs are allowed by default.
3157
3158 **Compatibility:** Firefox 60, Firefox ESR 60\
3159 **CCK2 Equivalent:** `permissions.install`\
3160 **Preferences Affected:** `xpinstall.enabled`
3161
3162 #### Windows (GPO)
3163 ```
3164 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Allow\1 = "https://example.org"
3165 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Allow\2 = "https://example.edu"
3166 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Default = 0x1 | 0x0
3167 ```
3168 #### Windows (Intune)
3169 OMA-URI:
3170 ```
3171 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Addons/InstallAddonsPermission_Allow
3172 ```
3173 Value (string):
3174 ```
3175 <enabled/>
3176 <data id="Permissions" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
3177 ```
3178 OMA-URI:
3179 ```
3180 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Addons/InstallAddonsPermission_Default
3181 ```
3182 Value (string):
3183 ```
3184 <enabled/>
3185 ```
3186 #### macOS
3187 ```
3188 <dict>
3189   <key>InstallAddonsPermission</key>
3190   <dict>
3191     <key>Allow</key>
3192     <array>
3193       <string>http://example.org</string>
3194       <string>http://example.edu</string>
3195     </array>
3196     <key>Default</key>
3197     <true/> | <false/>
3198   </dict>
3199 </dict>
3200 ```
3201 #### policies.json
3202 ```
3203 {
3204   "policies": {
3205     "InstallAddonsPermission": {
3206       "Allow": ["http://example.org/",
3207                 "http://example.edu/"],
3208       "Default": true | false
3209     }
3210   }
3211 }
3212 ```
3213 ### LegacyProfiles
3214 Disable the feature enforcing a separate profile for each installation.
3215
3216 If this policy set to true, Firefox will not try to create different profiles for installations of Firefox in different directories. This is the equivalent of the MOZ_LEGACY_PROFILES environment variable.
3217
3218 If this policy set to false, Firefox will create a new profile for each unique installation of Firefox.
3219
3220 This policy only work on Windows via GPO (not policies.json).
3221
3222 **Compatibility:** Firefox 70, Firefox ESR 68.2 (Windows only, GPO only)\
3223 **CCK2 Equivalent:** N/A\
3224 **Preferences Affected:** N/A
3225
3226 #### Windows (GPO)
3227 ```
3228 Software\Policies\Mozilla\Firefox\LegacyProfiles = = 0x1 | 0x0
3229 ```
3230 #### Windows (Intune)
3231 OMA-URI:
3232 ```
3233 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/LegacyProfiles
3234 ```
3235 Value (string):
3236 ```
3237 <enabled/> or <disabled/>
3238 ```
3239 ### LegacySameSiteCookieBehaviorEnabled
3240 Enable default legacy SameSite cookie behavior setting.
3241
3242 If this policy is set to true, it reverts all cookies to legacy SameSite behavior which means that cookies that don't explicitly specify a ```SameSite``` attribute are treated as if they were ```SameSite=None```.
3243
3244 **Compatibility:** Firefox 96\
3245 **CCK2 Equivalent:** N/A\
3246 **Preferences Affected:** `network.cookie.sameSite.laxByDefault`
3247
3248 #### Windows (GPO)
3249 ```
3250 Software\Policies\Mozilla\Firefox\LegacySameSiteCookieBehaviorEnabled = = 0x1 | 0x0
3251 ```
3252 #### Windows (Intune)
3253 OMA-URI:
3254 ```
3255 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/LegacySameSiteCookieBehaviorEnabled
3256 ```
3257 Value (string):
3258 ```
3259 <enabled/> or <disabled/>
3260 ```
3261 #### macOS
3262 ```
3263 <dict>
3264   <key>LegacySameSiteCookieBehaviorEnabled</key>
3265   <true/> | <false/>
3266 </dict>
3267 ```
3268 #### policies.json
3269 ```
3270 {
3271   "policies": {
3272     "LegacySameSiteCookieBehaviorEnabled": true | false
3273 }
3274 ```
3275 ### LegacySameSiteCookieBehaviorEnabledForDomainList
3276 Revert to legacy SameSite behavior for cookies on specified sites.
3277
3278 If this policy is set to true, cookies set for domains in this list will revert to legacy SameSite behavior which means that cookies that don't explicitly specify a ```SameSite``` attribute are treated as if they were ```SameSite=None```.
3279
3280 **Compatibility:** Firefox 96\
3281 **CCK2 Equivalent:** N/A\
3282 **Preferences Affected:** `network.cookie.sameSite.laxByDefault.disabledHosts`
3283
3284 #### Windows (GPO)
3285 ```
3286 Software\Policies\Mozilla\Firefox\LegacySameSiteCookieBehaviorEnabledForDomainList\1 = "example.org"
3287 Software\Policies\Mozilla\Firefox\LegacySameSiteCookieBehaviorEnabledForDomainList\2 = "example.edu"
3288 ```
3289 #### Windows (Intune)
3290 OMA-URI:
3291 ```
3292 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/LegacySameSiteCookieBehaviorEnabledForDomainList
3293 ```
3294 Value (string):
3295 ```
3296 <enabled/>
3297 <data id="LegacySameSiteCookieBehaviorEnabledForDomainList" value="1&#xF000;example.org&#xF000;2&#xF000;example.edu"/>
3298 ```
3299 #### macOS
3300 ```
3301 <dict>
3302   <key>LegacySameSiteCookieBehaviorEnabledForDomainList</key>
3303   <array>
3304     <string>example.org</string>
3305     <string>example.edu</string>
3306   </array>
3307 </dict>
3308 ```
3309 #### policies.json
3310 ```
3311 {
3312   "policies": {
3313     "LegacySameSiteCookieBehaviorEnabledForDomainList": ["example.org",
3314                                                          "example.edu"]
3315   }
3316 }
3317 ```
3318 ### LocalFileLinks
3319 Enable linking to local files by origin.
3320
3321 **Compatibility:** Firefox 68, Firefox ESR 68\
3322 **CCK2 Equivalent:** N/A\
3323 **Preferences Affected:** `capability.policy.localfilelinks.*`
3324
3325 #### Windows (GPO)
3326 ```
3327 Software\Policies\Mozilla\Firefox\LocalFileLinks\1 = "https://example.org"
3328 Software\Policies\Mozilla\Firefox\LocalFileLinks\2 = "https://example.edu"
3329 ```
3330 #### Windows (Intune)
3331 OMA-URI:
3332 ```
3333 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/LocalFileLinks
3334 ```
3335 Value (string):
3336 ```
3337 <enabled/>
3338 <data id="LocalFileLinks" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
3339 ```
3340 #### macOS
3341 ```
3342 <dict>
3343   <key>LocalFileLinks</key>
3344   <array>
3345     <string>http://example.org</string>
3346     <string>http://example.edu</string>
3347   </array>
3348 </dict>
3349 ```
3350 #### policies.json
3351 ```
3352 {
3353   "policies": {
3354     "LocalFileLinks": ["http://example.org/",
3355                        "http://example.edu/"]
3356   }
3357 }
3358 ```
3359 ### ManagedBookmarks
3360 Configures a list of bookmarks managed by an administrator that cannot be changed by the user.
3361
3362 The bookmarks are only added as a button on the personal toolbar. They are not in the bookmarks folder.
3363
3364 The syntax of this policy is exactly the same as the [Chrome ManagedBookmarks policy](https://cloud.google.com/docs/chrome-enterprise/policies/?policy=ManagedBookmarks). The schema is:
3365 ```
3366 {
3367  "items": {
3368   "id": "BookmarkType",
3369   "properties": {
3370    "children": {
3371     "items": {
3372      "$ref": "BookmarkType"
3373     },
3374     "type": "array"
3375    },
3376    "name": {
3377     "type": "string"
3378    },
3379    "toplevel_name": {
3380     "type": "string"
3381    },
3382    "url": {
3383     "type": "string"
3384    }
3385   },
3386   "type": "object"
3387  },
3388  "type": "array"
3389 }
3390 ```
3391 **Compatibility:** Firefox 83, Firefox ESR 78.5\
3392 **CCK2 Equivalent:** N/A\
3393 **Preferences Affected:** N/A
3394
3395 #### Windows (GPO)
3396 Software\Policies\Mozilla\Firefox\ManagedBookmarks (REG_MULTI_SZ) =
3397 ```
3398 [
3399   {
3400     "toplevel_name": "My managed bookmarks folder"
3401   },
3402   {
3403     "url": "example.com",
3404     "name": "Example"
3405   },
3406   {
3407     "name": "Mozilla links",
3408     "children": [
3409       {
3410         "url": "https://mozilla.org",
3411         "name": "Mozilla.org"
3412       },
3413       {
3414         "url": "https://support.mozilla.org/",
3415         "name": "SUMO"
3416       }
3417     ]
3418   }
3419 ]
3420 ```
3421 #### Windows (Intune)
3422 OMA-URI:
3423 ```
3424 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/ManagedBookmarks
3425 ```
3426 Value (string):
3427 ```
3428 <enabled/>
3429 <data id="JSON" value='
3430 [
3431   {
3432     "toplevel_name": "My managed bookmarks folder"
3433   },
3434   {
3435     "url": "example.com",
3436     "name": "Example"
3437   },
3438   {
3439     "name": "Mozilla links",
3440     "children": [
3441       {
3442         "url": "https://mozilla.org",
3443         "name": "Mozilla.org"
3444       },
3445       {
3446         "url": "https://support.mozilla.org/",
3447         "name": "SUMO"
3448       }
3449     ]
3450   }
3451 ]'/>
3452 ```
3453 #### macOS
3454 ```
3455 <dict>
3456   <key>ManagedBookmarks</key>
3457   <array>
3458     <dict>
3459       <key>toplevel_name</key>
3460       <string>My managed bookmarks folder</string>
3461       <dict>
3462         <key>url</key>
3463         <string>example.com</string>
3464         <key>name</key>
3465         <string>Example</string>
3466       </dict>
3467       <dict>
3468       <key>name</key>
3469       <string>Mozilla links</string>
3470       <key>children</key>
3471       <array>
3472         <dict>
3473           <key>url</key>
3474           <string>https://mozilla.org</string>
3475           <key>name</key>
3476           <string>Mozilla</string>
3477         </dict>
3478         <dict>
3479           <key>url</key>
3480           <string>https://support.mozilla.org/</string>
3481           <key>name</key>
3482           <string>SUMO</string>
3483         </dict>
3484       </array>
3485     </dict>
3486   </array>
3487 </dict>
3488 ```
3489 #### policies.json
3490 ```
3491 {
3492   "policies": {
3493     "ManagedBookmarks": [
3494       {
3495         "toplevel_name": "My managed bookmarks folder"
3496       },
3497       {
3498         "url": "example.com",
3499         "name": "Example"
3500       },
3501       {
3502         "name": "Mozilla links",
3503         "children": [
3504           {
3505             "url": "https://mozilla.org",
3506             "name": "Mozilla.org"
3507           },
3508           {
3509             "url": "https://support.mozilla.org/",
3510             "name": "SUMO"
3511           }
3512         ]
3513       }
3514     ]
3515   }
3516 }
3517 ```
3518 ### ManualAppUpdateOnly
3519
3520 Switch to manual updates only.
3521
3522 If this policy is enabled:
3523  1. The user will never be prompted to install updates
3524  2. Firefox will not check for updates in the background, though it will check automatically when an update UI is displayed (such as the one in the About dialog). This check will be used to show "Update to version X" in the UI, but will not automatically download the update or prompt the user to update in any other way.
3525  3. The update UI will work as expected, unlike when using DisableAppUpdate.
3526
3527 This policy is primarily intended for advanced end users, not for enterprises.
3528
3529 **Compatibility:** Firefox 87\
3530 **CCK2 Equivalent:** N/A\
3531 **Preferences Affected:** N/A
3532
3533 #### policies.json
3534 ```
3535 {
3536   "policies": {
3537     "ManualAppUpdateOnly": true | false
3538   }
3539 }
3540 ```
3541 ### NetworkPrediction
3542 Enable or disable network prediction (DNS prefetching).
3543
3544 **Compatibility:** Firefox 67, Firefox ESR 60.7\
3545 **CCK2 Equivalent:** N/A\
3546 **Preferences Affected:** `network.dns.disablePrefetch`, `network.dns.disablePrefetchFromHTTPS`
3547
3548 #### Windows (GPO)
3549 ```
3550 Software\Policies\Mozilla\Firefox\NetworkPrediction = 0x1 | 0x0
3551 ```
3552 #### Windows (Intune)
3553 OMA-URI:
3554 ```
3555 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NetworkPrediction
3556 ```
3557 Value (string):
3558 ```
3559 <enabled/> or <disabled/>
3560 ```
3561 #### macOS
3562 ```
3563 <dict>
3564   <key>NetworkPrediction</key>
3565   <true/> | <false/>
3566 </dict>
3567 ```
3568 #### policies.json
3569 ```
3570 {
3571   "policies": {
3572     "NetworkPrediction": true | false
3573 }
3574 ```
3575 ### NewTabPage
3576 Enable or disable the New Tab page.
3577
3578 **Compatibility:** Firefox 68, Firefox ESR 68\
3579 **CCK2 Equivalent:** N/A\
3580 **Preferences Affected:** `browser.newtabpage.enabled`
3581
3582 #### Windows (GPO)
3583 ```
3584 Software\Policies\Mozilla\Firefox\NewTabPage = 0x1 | 0x0
3585 ```
3586 #### Windows (Intune)
3587 OMA-URI:
3588 ```
3589 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NewTabPage
3590 ```
3591 Value (string):
3592 ```
3593 <enabled/> or <disabled/>
3594 ```
3595 #### macOS
3596 ```
3597 <dict>
3598   <key>NewTabPage</key>
3599   <true/> | <false/>
3600 </dict>
3601 ```
3602 #### policies.json
3603 ```
3604 {
3605   "policies": {
3606     "NewTabPage": true | false
3607 }
3608 ```
3609 ### NoDefaultBookmarks
3610 Disable the creation of default bookmarks.
3611
3612 This policy is only effective if the user profile has not been created yet.
3613
3614 **Compatibility:** Firefox 60, Firefox ESR 60\
3615 **CCK2 Equivalent:** `removeDefaultBookmarks`\
3616 **Preferences Affected:** N/A
3617
3618 #### Windows (GPO)
3619 ```
3620 Software\Policies\Mozilla\Firefox\NoDefaultBookmarks = 0x1 | 0x0
3621 ```
3622 #### Windows (Intune)
3623 OMA-URI:
3624 ```
3625 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NoDefaultBookmarks
3626 ```
3627 Value (string):
3628 ```
3629 <enabled/> or <disabled/>
3630 ```
3631 #### macOS
3632 ```
3633 <dict>
3634   <key>NoDefaultBookmarks</key>
3635   <true/> | <false/>
3636 </dict>
3637 ```
3638 #### policies.json
3639 ```
3640 {
3641   "policies": {
3642     "NoDefaultBookmarks": true | false
3643   }
3644 }
3645 ```
3646 ### OfferToSaveLogins
3647 Control whether or not Firefox offers to save passwords.
3648
3649 **Compatibility:** Firefox 60, Firefox ESR 60\
3650 **CCK2 Equivalent:** `dontRememberPasswords`\
3651 **Preferences Affected:** `signon.rememberSignons`
3652
3653 #### Windows (GPO)
3654 ```
3655 Software\Policies\Mozilla\Firefox\OfferToSaveLogins = 0x1 | 0x0
3656 ```
3657 #### Windows (Intune)
3658 OMA-URI:
3659 ```
3660 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OfferToSaveLogins
3661 ```
3662 Value (string):
3663 ```
3664 <enabled/> or <disabled/>
3665 ```
3666 #### macOS
3667 ```
3668 <dict>
3669   <key>OfferToSaveLogins</key>
3670   <true/> | <false/>
3671 </dict>
3672 ```
3673 #### policies.json
3674 ```
3675 {
3676   "policies": {
3677     "OfferToSaveLogins": true | false
3678   }
3679 }
3680 ```
3681 ### OfferToSaveLoginsDefault
3682 Sets the default value of signon.rememberSignons without locking it.
3683
3684 **Compatibility:** Firefox 70, Firefox ESR 60.2\
3685 **CCK2 Equivalent:** `dontRememberPasswords`\
3686 **Preferences Affected:** `signon.rememberSignons`
3687
3688 #### Windows (GPO)
3689 ```
3690 Software\Policies\Mozilla\Firefox\OfferToSaveLoginsDefault = 0x1 | 0x0
3691 ```
3692 #### Windows (Intune)
3693 OMA-URI:
3694 ```
3695 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OfferToSaveLoginsDefault
3696 ```
3697 Value (string):
3698 ```
3699 <enabled/> or <disabled/>
3700 ```
3701 #### macOS
3702 ```
3703 <dict>
3704   <key>OfferToSaveLoginsDefault</key>
3705   <true/> | <false/>
3706 </dict>
3707 ```
3708 #### policies.json
3709 ```
3710 {
3711   "policies": {
3712     "OfferToSaveLoginsDefault": true | false
3713   }
3714 }
3715 ```
3716 ### OverrideFirstRunPage
3717 Override the first run page. If the value is an empty string (""), the first run page is not displayed.
3718
3719 Starting with Firefox 83, Firefox ESR 78.5, you can also specify multiple URLS separated by a vertical bar (|).
3720
3721 **Compatibility:** Firefox 60, Firefox ESR 60\
3722 **CCK2 Equivalent:** `welcomePage`,`noWelcomePage`\
3723 **Preferences Affected:** `startup.homepage_welcome_url`
3724
3725 #### Windows (GPO)
3726 ```
3727 Software\Policies\Mozilla\Firefox\OverrideFirstRunPage = "http://example.org"
3728 ```
3729 #### Windows (Intune)
3730 OMA-URI:
3731 ```
3732 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OverrideFirstRunPage
3733 ```
3734 Value (string):
3735 ```
3736 <enabled/>
3737 <data id="OverridePage" value="https://example.com"/>
3738 ```
3739 #### macOS
3740 ```
3741 <dict>
3742   <key>OverrideFirstRunPage</key>
3743   <string>http://example.org</string>
3744 </dict>
3745 ```
3746 #### policies.json
3747 ```
3748 {
3749   "policies": {
3750     "OverrideFirstRunPage": "http://example.org"
3751   }
3752 }
3753 ```
3754 ### OverridePostUpdatePage
3755 Override the upgrade page. If the value is an empty string (""), no extra pages are displayed when Firefox is upgraded.
3756
3757 **Compatibility:** Firefox 60, Firefox ESR 60\
3758 **CCK2 Equivalent:** `upgradePage`,`noUpgradePage`\
3759 **Preferences Affected:** `startup.homepage_override_url`
3760
3761 #### Windows (GPO)
3762 ```
3763 Software\Policies\Mozilla\Firefox\OverridePostUpdatePage = "http://example.org"
3764 ```
3765 #### Windows (Intune)
3766 OMA-URI:
3767 ```
3768 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OverridePostUpdatePage
3769 ```
3770 Value (string):
3771 ```
3772 <enabled/>
3773 <data id="OverridePage" value="https://example.com"/>
3774 ```
3775 #### macOS
3776 ```
3777 <dict>
3778   <key>OverridePostUpdatePage</key>
3779   <string>http://example.org</string>
3780 </dict>
3781 ```
3782 #### policies.json
3783 ```
3784 {
3785   "policies": {
3786     "OverridePostUpdatePage": "http://example.org"
3787   }
3788 }
3789 ```
3790 ### PasswordManagerEnabled
3791 Remove access to the password manager via preferences and blocks about:logins on Firefox 70.
3792
3793 **Compatibility:** Firefox 70, Firefox ESR 60.2\
3794 **CCK2 Equivalent:** N/A\
3795 **Preferences Affected:** `pref.privacy.disable_button.view_passwords`
3796
3797 #### Windows (GPO)
3798 ```
3799 Software\Policies\Mozilla\Firefox\PasswordManagerEnabled = 0x1 | 0x0
3800 ```
3801 #### Windows (Intune)
3802 OMA-URI:
3803 ```
3804 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PasswordManagerEnabled
3805 ```
3806 Value (string):
3807 ```
3808 <enabled/> or <disabled/>
3809 ```
3810 #### macOS
3811 ```
3812 <dict>
3813   <key>PasswordManagerEnabled</key>
3814   <true/> | <false/>
3815 </dict>
3816 ```
3817 #### policies.json
3818 ```
3819 {
3820   "policies": {
3821     "PasswordManagerEnabled": true | false
3822   }
3823 }
3824 ```
3825 ### PDFjs
3826 Disable or configure PDF.js, the built-in PDF viewer.
3827
3828 If `Enabled` is set to false, the built-in PDF viewer is disabled.
3829
3830 If `EnablePermissions` is set to true, the built-in PDF viewer will honor document permissions like preventing the copying of text.
3831
3832 Note: DisableBuiltinPDFViewer has not been deprecated. You can either continue to use it, or switch to using PDFjs->Enabled to disable the built-in PDF viewer. This new permission was added because we needed a place for PDFjs->EnabledPermissions.
3833
3834 **Compatibility:** Firefox 77, Firefox ESR 68.9\
3835 **CCK2 Equivalent:** N/A\
3836 **Preferences Affected:** `pdfjs.diabled`, `pdfjs.enablePermissions`
3837
3838 #### Windows (GPO)
3839 ```
3840 Software\Policies\Mozilla\Firefox\PDFjs\Enabled = 0x1 | 0x0
3841 Software\Policies\Mozilla\Firefox\PDFjs\EnablePermissions = 0x1 | 0x0
3842 ```
3843 #### Windows (Intune)
3844 OMA-URI:
3845 ```
3846 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PDFjs/PDFjs_Enabled
3847 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PDFjs/PDFjs_EnablePermissions
3848 ```
3849 Value (string):
3850 ```
3851 <enabled/>or <disabled/>
3852 ```
3853 #### macOS
3854 ```
3855 <dict>
3856   <key>PDFjs</key>
3857   <dict>
3858     <key>Enabled</key>
3859     <true/> | <false/>
3860     <key>EnablePermissions</key>
3861     <true/> | <false/>
3862   </dict>
3863 </dict>
3864 ```
3865 #### policies.json
3866 ```
3867 {
3868   "policies": {
3869     "PDFjs": {
3870       "Enabled": true | false,
3871       "EnablePermissions": true | false
3872     }
3873   }
3874 }
3875 ```
3876 ### Permissions
3877 Set permissions associated with camera, microphone, location, notifications, autoplay, and virtual reality. Because these are origins, not domains, entries with unique ports must be specified separately. This explicitly means that it is not possible to add wildcards. See examples below.
3878
3879 `Allow` is a list of origins where the feature is allowed.
3880
3881 `Block` is a list of origins where the feature is not allowed.
3882
3883 `BlockNewRequests` determines whether or not new requests can be made for the feature.
3884
3885 `Locked` prevents the user from changing preferences for the feature.
3886
3887 `Default` specifies the default value for Autoplay. block-audio-video is not supported on Firefox ESR 68.
3888
3889 **Compatibility:** Firefox 62, Firefox ESR 60.2 (Autoplay added in Firefox 74, Firefox ESR 68.6, Autoplay Default/Locked added in Firefox 76, Firefox ESR 68.8, VirtualReality added in Firefox 80, Firefox ESR 78.2)\
3890 **CCK2 Equivalent:** N/A\
3891 **Preferences Affected:** `permissions.default.camera`, `permissions.default.microphone`, `permissions.default.geo`, `permissions.default.desktop-notification`, `media.autoplay.default`, `permissions.default.xr`
3892
3893 #### Windows (GPO)
3894 ```
3895 Software\Policies\Mozilla\Firefox\Permissions\Camera\Allow\1 = "https://example.org"
3896 Software\Policies\Mozilla\Firefox\Permissions\Camera\Allow\2 = "https://example.org:1234"
3897 Software\Policies\Mozilla\Firefox\Permissions\Camera\Block\1 = "https://example.edu"
3898 Software\Policies\Mozilla\Firefox\Permissions\Camera\BlockNewRequests = 0x1 | 0x0
3899 Software\Policies\Mozilla\Firefox\Permissions\Camera\Locked = 0x1 | 0x0
3900 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Allow\1 = "https://example.org"
3901 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Block\1 = "https://example.edu"
3902 Software\Policies\Mozilla\Firefox\Permissions\Microphone\BlockNewRequests = 0x1 | 0x0
3903 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Locked = 0x1 | 0x0
3904 Software\Policies\Mozilla\Firefox\Permissions\Location\Allow\1 = "https://example.org"
3905 Software\Policies\Mozilla\Firefox\Permissions\Location\Block\1 = "https://example.edu"
3906 Software\Policies\Mozilla\Firefox\Permissions\Location\BlockNewRequests = 0x1 | 0x0
3907 Software\Policies\Mozilla\Firefox\Permissions\Location\Locked = 0x1 | 0x0
3908 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Allow\1 = "https://example.org"
3909 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Block\1 = "https://example.edu"
3910 Software\Policies\Mozilla\Firefox\Permissions\Notifications\BlockNewRequests = 0x1 | 0x0
3911 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Locked = 0x1 | 0x0
3912 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Allow\1 = "https://example.org"
3913 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Block\1 = "https://example.edu"
3914 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Default = "allow-audio-video" | "block-audio" | "block-audio-video"
3915 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Locked = 0x1 | 0x0
3916 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\Allow\1 = "https://example.org"
3917 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\Block\1 = "https://example.edu"
3918 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\BlockNewRequests = 0x1 | 0x0
3919 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\Locked = 0x1 | 0x0
3920 ```
3921 #### Windows (Intune)
3922 OMA-URI:
3923 ```
3924 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Location/Location_BlockNewRequests
3925 ```
3926 Value (string):
3927 ```
3928 <enabled/> or <disabled/>
3929 ```
3930 OMA-URI:
3931 ```
3932 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Location/Location_Locked
3933 ```
3934 Value (string):
3935 ```
3936 <enabled/> or <disabled/>
3937 ```
3938 OMA-URI:
3939 ```
3940 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_Allow
3941 ```
3942 Value (string):
3943 ```
3944 <enabled/>
3945 <data id="Permissions" value="1&#xF000;https://example.org"/>
3946 ```
3947 OMA-URI:
3948 ```
3949 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_BlockNewRequests
3950 ```
3951 Value (string):
3952 ```
3953 <enabled/> or <disabled/>
3954 ```
3955 OMA-URI:
3956 ```
3957 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_Locked
3958 ```
3959 Value (string):
3960 ```
3961 <enabled/> or <disabled/>
3962 ```
3963 OMA-URI:
3964 ```
3965 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Allow
3966 ```
3967 Value (string):
3968 ```
3969 <enabled/>
3970 <data id="Permissions" value="1&#xF000;https://example.org"/>
3971 ```
3972 OMA-URI:
3973 ```
3974 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Block
3975 ```
3976 Value (string):
3977 ```
3978 <enabled/>
3979 <data id="Permissions" value="1&#xF000;https://example.edu"/>
3980 ```
3981 OMA-URI:
3982 ```
3983 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Default
3984 ```
3985 Value (string):
3986 ```
3987 <enabled/>
3988 <data id="Autoplay_Default" value="allow-audio-video | block-audio | block-audio-video"/>
3989 ```
3990 OMA-URI:
3991 ```
3992 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Locked
3993 ```
3994 Value (string):
3995 ```
3996 <enabled/> or <disabled/>
3997 ```
3998 OMA-URI:
3999 ```
4000 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_Allow
4001 ```
4002 Value (string):
4003 ```
4004 <enabled/>
4005 <data id="Permissions" value="1&#xF000;https://example.org"/>
4006 ```
4007 OMA-URI:
4008 ```
4009 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_Block
4010 ```
4011 Value (string):
4012 ```
4013 <enabled/>
4014 <data id="Permissions" value="1&#xF000;https://example.edu"/>
4015 ```
4016 OMA-URI:
4017 ```
4018 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_BlockNewRequests
4019 ```
4020 Value (string):
4021 ```
4022 <enabled/> or <disabled/>
4023 ```
4024 OMA-URI:
4025 ```
4026 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_Locked
4027 ```
4028 Value (string):
4029 ```
4030 <enabled/> or <disabled/>
4031 ```
4032 #### macOS
4033 ```
4034 <dict>
4035   <key>Permissions</key>
4036   <dict>
4037     <key>Camera</key>
4038     <dict>
4039       <key>Allow</key>
4040       <array>
4041         <string>https://example.org</string>
4042         <string>https://example.org:1234</string>
4043       </array>
4044       <key>Block</key>
4045       <array>
4046         <string>https://example.edu</string>
4047       </array>
4048       <key>BlockNewRequests</key>
4049       <true/> | <false/>
4050       <key>Locked</key>
4051       <true/> | <false/>
4052     </dict>
4053     <key>Microphone</key>
4054     <dict>
4055       <key>Allow</key>
4056       <array>
4057         <string>https://example.org</string>
4058       </array>
4059       <key>Block</key>
4060       <array>
4061         <string>https://example.edu</string>
4062       </array>
4063       <key>BlockNewRequests</key>
4064       <true/> | <false/>
4065       <key>Locked</key>
4066       <true/> | <false/>
4067     </dict>
4068     <key>Location</key>
4069     <dict>
4070       <key>Allow</key>
4071       <array>
4072         <string>https://example.org</string>
4073       </array>
4074       <key>Block</key>
4075       <array>
4076         <string>https://example.edu</string>
4077       </array>
4078       <key>BlockNewRequests</key>
4079       <true/> | <false/>
4080       <key>Locked</key>
4081       <true/> | <false/>
4082     </dict>
4083     <key>Notifications</key>
4084     <dict>
4085       <key>Allow</key>
4086       <array>
4087         <string>https://example.org</string>
4088       </array>
4089       <key>Block</key>
4090       <array>
4091         <string>https://example.edu</string>
4092       </array>
4093       <key>BlockNewRequests</key>
4094       <true/>
4095       <key>Locked</key>
4096       <true/>
4097     </dict>
4098     <key>Autoplay</key>
4099     <dict>
4100       <key>Allow</key>
4101       <array>
4102         <string>https://example.org</string>
4103       </array>
4104       <key>Block</key>
4105       <array>
4106         <string>https://example.edu</string>
4107       </array>
4108       <key>Default</key>
4109       <string>allow-audio-video | block-audio | block-audio-video</string>
4110       <key>Locked</key>
4111       <true/> | <false/>
4112     </dict>
4113   </dict>
4114 </dict>
4115 ```
4116 #### policies.json
4117 ```
4118 {
4119   "policies": {
4120     "Permissions": {
4121       "Camera": {
4122         "Allow": ["https://example.org","https://example.org:1234"],
4123         "Block": ["https://example.edu"],
4124         "BlockNewRequests": true | false,
4125         "Locked": true | false
4126       },
4127       "Microphone": {
4128         "Allow": ["https://example.org"],
4129         "Block": ["https://example.edu"],
4130         "BlockNewRequests": true | false,
4131         "Locked": true | false
4132       },
4133       "Location": {
4134         "Allow": ["https://example.org"],
4135         "Block": ["https://example.edu"],
4136         "BlockNewRequests": true | false,
4137         "Locked": true | false
4138       },
4139       "Notifications": {
4140         "Allow": ["https://example.org"],
4141         "Block": ["https://example.edu"],
4142         "BlockNewRequests": true | false,
4143         "Locked": true | false
4144       },
4145       "Autoplay": {
4146         "Allow": ["https://example.org"],
4147         "Block": ["https://example.edu"],
4148         "Default": "allow-audio-video" | "block-audio" | "block-audio-video",
4149         "Locked": true | false
4150       }
4151     }
4152   }
4153 }
4154 ```
4155 ### PictureInPicture
4156
4157 Enable or disable Picture-in-Picture as well as prevent the user from enabling or disabling it (Locked).
4158
4159 **Compatibility:** Firefox 78, Firefox ESR 78\
4160 **CCK2 Equivalent:** N/A\
4161 **Preferences Affected:** `media.videocontrols.picture-in-picture.video-toggle.enabled`
4162
4163 #### Windows (GPO)
4164 ```
4165 Software\Policies\Mozilla\Firefox\PictureInPicture\Enabled = 0x1 | 0x0
4166 Software\Policies\Mozilla\Firefox\PictureInPicture\Locked = 0x1 | 0x0
4167
4168 ```
4169 #### Windows (Intune)
4170 OMA-URI:
4171 ```
4172 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PictureInPicture/PictureInPicture_Enabled
4173 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PictureInPicture/PictureInPicture_Locked
4174 ```
4175 Value (string):
4176 ```
4177 <enabled/> or <disabled/>
4178 ```
4179 #### macOS
4180 ```
4181 <dict>
4182   <key>PictureInPicture</key>
4183   <dict>
4184     <key>Enabled</key>
4185     <true/> | <false/>
4186     <key>Locked</key>
4187     <true/> | <false/>
4188   </dict>
4189 </dict>
4190 ```
4191 #### policies.json
4192 ```
4193 {
4194   "policies": {
4195     "PictureInPicture": {
4196       "Enabled": true | false,
4197       "Locked": true | false
4198     }
4199   }
4200 }
4201 ```
4202 ### PopupBlocking
4203 Configure the default pop-up window policy as well as origins for which pop-up windows are allowed.
4204
4205 `Allow` is a list of origins where popup-windows are allowed.
4206
4207 `Default` determines whether or not pop-up windows are allowed by default.
4208
4209 `Locked` prevents the user from changing pop-up preferences.
4210
4211 **Compatibility:** Firefox 60, Firefox ESR 60\
4212 **CCK2 Equivalent:** `permissions.popup`\
4213 **Preferences Affected:** `dom.disable_open_during_load`
4214
4215 #### Windows (GPO)
4216 ```
4217 Software\Policies\Mozilla\Firefox\PopupBlocking\Allow\1 = "https://example.org"
4218 Software\Policies\Mozilla\Firefox\PopupBlocking\Allow\2 = "https://example.edu"
4219 Software\Policies\Mozilla\Firefox\PopupBlocking\Default = 0x1 | 0x0
4220 Software\Policies\Mozilla\Firefox\PopupBlocking\Locked = 0x1 | 0x0
4221 ```
4222 #### Windows (Intune)
4223 OMA-URI:
4224 ```
4225 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Allow
4226 ```
4227 Value (string):
4228 ```
4229 <enabled/>
4230 <data id="Permissions" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
4231 ```
4232 OMA-URI:
4233 ```
4234 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Default
4235 ```
4236 Value (string):
4237 ```
4238 <enabled/> or <disabled/>
4239 ```
4240 OMA-URI:
4241 ```
4242 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Locked
4243 ```
4244 Value (string):
4245 ```
4246 <enabled/> or <disabled/>
4247 ```
4248 #### macOS
4249 ```
4250 <dict>
4251   <key>PopupBlocking</key>
4252   <dict>
4253     <key>Allow</key>
4254     <array>
4255       <string>http://example.org</string>
4256       <string>http://example.edu</string>
4257     </array>
4258     <key>Default</key>
4259     <true/> | <false/>
4260     <key>Locked</key>
4261     <true/> | <false/>
4262   </dict>
4263 </dict>
4264 ```
4265 #### policies.json
4266 ```
4267 {
4268   "policies": {
4269     "PopupBlocking": {
4270       "Allow": ["http://example.org/",
4271                 "http://example.edu/"],
4272       "Default": true | false,
4273       "Locked": true | false
4274     }
4275   }
4276 }
4277 ```
4278 ### Preferences
4279 Set and lock preferences.
4280
4281 **NOTE** On Windows, in order to use this policy, you must clear all settings in the old **Preferences (Deprecated)** section.
4282
4283 Previously you could only set and lock a subset of preferences. Starting with Firefox 81 and Firefox ESR 78.3 you can set many more preferences. You can also set default preferences, user preferences and you can clear preferences.
4284
4285 Preferences that start with the following prefixes are supported:
4286 ```
4287 accessibility.
4288 app.update.* (Firefox 86, Firefox 78.8)
4289 browser.
4290 datareporting.policy.
4291 dom.
4292 extensions.
4293 general.autoScroll (Firefox 83, Firefox ESR 78.5)
4294 general.smoothScroll (Firefox 83, Firefox ESR 78.5)
4295 geo.
4296 gfx.
4297 intl.
4298 keyword.enabled (Firefox 95, Firefox ESR 91.4)
4299 layers.
4300 layout.
4301 media.
4302 network.
4303 pdfjs. (Firefox 84, Firefox ESR 78.6)
4304 places.
4305 print.
4306 signon. (Firefox 83, Firefox ESR 78.5)
4307 spellchecker. (Firefox 84, Firefox ESR 78.6)
4308 toolkit.legacyUserProfileCustomizations.stylesheets (Firefox 95, Firefox ESR 91.4)
4309 ui.
4310 widget.
4311 ```
4312 as well as the following security preferences:
4313 | Preference | Type | Default
4314 | --- | --- | ---
4315 | security.default_personal_cert | string | Ask Every Time
4316 | &nbsp;&nbsp;&nbsp;&nbsp;If set to Select Automatically, Firefox automatically chooses the default personal certificate.
4317 | security.insecure_connection_text.enabled | bool | false
4318 | &nbsp;&nbsp;&nbsp;&nbsp;If set to true, adds the words "Not Secure" for insecure sites.
4319 | security.insecure_connection_text.pbmode.enabled | bool | false
4320 | &nbsp;&nbsp;&nbsp;&nbsp;If set to true, adds the words "Not Secure" for insecure sites in private browsing.
4321 | security.insecure_field_warning.contextual.enabled | bool | true
4322 | &nbsp;&nbsp;&nbsp;&nbsp;If set to false, remove the warning for inscure login fields.
4323 | security.mixed_content.block_active_content | boolean | true
4324 | &nbsp;&nbsp;&nbsp;&nbsp;If false, mixed active content (HTTP and HTTPS) is not blocked.
4325 | security.osclientcerts.autoload | boolean | false
4326 | &nbsp;&nbsp;&nbsp;&nbsp;If true, client certificates are loaded from the operating system certificate store.
4327 | security.ssl.errorReporting.enabled | boolean | true
4328 | &nbsp;&nbsp;&nbsp;&nbsp;If false, SSL errors cannot be sent to Mozilla.
4329 | security.tls.enable_0rtt_data | boolean | true
4330 | &nbsp;&nbsp;&nbsp;&nbsp;If false, TLS early data is turned off (Firefox 93, Firefox 91.2, Firefox 78.15).
4331 | security.tls.hello_downgrade_check | boolean | true
4332 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the TLS 1.3 downgrade check is disabled.
4333 | security.tls.version.enable-deprecated | boolean | false
4334 | &nbsp;&nbsp;&nbsp;&nbsp;If true, browser will accept TLS 1.0. and TLS 1.1 (Firefox 86, Firefox 78.8).
4335 | security.warn_submit_secure_to_insecure | boolean | true
4336 | &nbsp;&nbsp;&nbsp;&nbsp;If false, no warning is shown when submitting a form from https to http.
4337 &nbsp;
4338
4339 Using the preference as the key, set the `Value` to the corresponding preference value.
4340
4341 `Status` can be "default", "locked", "user" or "clear"
4342
4343 * `"default"`: Read/Write: Settings appear as default even if factory default differs.
4344 * `"locked"`: Read-Only: Settings appear as default even if factory default differs.
4345 * `"user"`: Read/Write: Settings appear as changed if it differs from factory default.
4346 * `"clear"`: Read/Write: `Value` has no effect. Resets to factory defaults on each startup.
4347
4348 `"user"` preferences persist across invocations of Firefox. It is the equivalent of a user setting the preference. They are most useful when a preference is needed very early in startup so it can't be set as default by policy. An example of this is ```toolkit.legacyUserProfileCustomizations.stylesheets```.
4349
4350 `"user"` preferences persist even if the policy is removed, so if you need to remove them, you should use the clear policy.
4351
4352 See the examples below for more detail.
4353
4354 IMPORTANT: Make sure you're only setting a particular preference using this mechanism and not some other way.
4355
4356 Status
4357 **Compatibility:** Firefox 81, Firefox ESR 78.3\
4358 **CCK2 Equivalent:** `preferences`\
4359 **Preferences Affected:** Many
4360
4361 #### Windows (GPO)
4362 Software\Policies\Mozilla\Firefox\Preferences (REG_MULTI_SZ) =
4363 ```
4364 {
4365   "accessibility.force_disabled": {
4366     "Value": 1,
4367     "Status": "default"
4368   },
4369   "browser.cache.disk.parent_directory": {
4370     "Value": "SOME_NATIVE_PATH",
4371     "Status": "user"
4372   },
4373   "browser.tabs.warnOnClose": {
4374     "Value": false,
4375     "Status": "locked"
4376   }
4377 }
4378 ```
4379 #### Windows (Intune)
4380 OMA-URI:
4381 ```
4382 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Preferences
4383 ```
4384 Value (string):
4385 ```
4386 <enabled/>
4387 <data id="JSON" value='
4388 {
4389   "accessibility.force_disabled": {
4390     "Value": 1,
4391     "Status": "default"
4392   },
4393   "browser.cache.disk.parent_directory": {
4394     "Value": "SOME_NATIVE_PATH",
4395     "Status": "user"
4396   },
4397   "browser.tabs.warnOnClose": {
4398     "Value": false,
4399     "Status": "locked"
4400   }
4401 }'/>
4402 ```
4403 #### macOS
4404 ```
4405 <dict>
4406   <key>Preferences</key>
4407   <dict>
4408     <key>accessibility.force_disabled</key>
4409     <dict>
4410       <key>Value</key>
4411       <integer>1</integer>
4412       <key>Status</key>
4413       <string>default</string>
4414     </dict>
4415     <key>browser.cache.disk.parent_directory</key>
4416     <dict>
4417       <key>Value</key>
4418       <string>SOME_NATIVE_PATH</string>
4419       <key>Status</key>
4420       <string>user</string>
4421     </dict>
4422     <key>browser.tabs.warnOnClose</key>
4423     <dict>
4424       <key>Value</key>
4425       <false/>
4426       <key>Status</key>
4427       <string>locked</string>
4428     </dict>
4429   </dict>
4430 </dict>
4431 ```
4432 #### policies.json
4433 ```
4434 {
4435   "policies": {
4436     "Preferences": {
4437       "accessibility.force_disabled": {
4438         "Value": 1,
4439         "Status": "default"
4440       },
4441       "browser.cache.disk.parent_directory": {
4442         "Value": "SOME_NATIVE_PATH",
4443         "Status": "user"
4444       },
4445       "browser.tabs.warnOnClose": {
4446         "Value": false,
4447         "Status": "locked"
4448       }
4449     }
4450   }
4451 }
4452 ```
4453 ### Preferences (Deprecated)
4454 Set and lock certain preferences.
4455
4456 **Compatibility:** See below\
4457 **CCK2 Equivalent:** `preferences`\
4458 **Preferences Affected:** See below
4459
4460 | Preference | Type | Compatibility | Default
4461 | --- | --- | --- | ---
4462 | accessibility.force_disabled | integer | Firefox 70, Firefox ESR 68.2 | 0
4463 | &nbsp;&nbsp;&nbsp;&nbsp;If set to 1, platform accessibility is disabled.
4464 | app.update.auto (Deprecated - Switch to AppAutoUpdate policy) | boolean | Firefox 68, Firefox ESR 68 | true
4465 | &nbsp;&nbsp;&nbsp;&nbsp;If false, Firefox doesn't automatically install update.
4466 | browser.bookmarks.autoExportHTML | boolean | Firefox 70, Firefox ESR 68.2 | false
4467 | &nbsp;&nbsp;&nbsp;&nbsp;If true, bookmarks are exported on shutdown.
4468 | browser.bookmarks.file | string | Firefox 70, Firefox ESR 68.2 | N/A
4469 | &nbsp;&nbsp;&nbsp;&nbsp;If set, the name of the file where bookmarks are exported and imported.
4470 | browser.bookmarks.restore_default_bookmarks | boolean | Firefox 70, Firefox ESR 68.2 | N/A
4471 | &nbsp;&nbsp;&nbsp;&nbsp;If true, bookmarks are restored to their defaults.
4472 | browser.cache.disk.enable | boolean | Firefox 68, Firefox ESR 68 | true
4473 | &nbsp;&nbsp;&nbsp;&nbsp;If false, don't store cache on the hard drive.
4474 | ~browser.cache.disk.parent_directory~ | string | Firefox 68, Firefox ESR 68 | Profile temporary directory
4475 | &nbsp;&nbsp;&nbsp;&nbsp;~If set, changes the location of the disk cache.~ This policy doesn't work. It's being worked on.
4476 | browser.fixup.dns_first_for_single_words | boolean | Firefox 68, Firefox ESR 68 | false
4477 | &nbsp;&nbsp;&nbsp;&nbsp;If true, single words are sent to DNS, not directly to search.
4478 | browser.newtabpage.activity-stream.default.sites | string | Firefox 72, ESR 68.4 | Locale dependent
4479 | &nbsp;&nbsp;&nbsp;&nbsp;If set, a list of URLs to use as the default top sites on the new tab page. Due to Firefox limitations, search sites can't be added. In addition, sites with the same name but different TLDs (example.org/example.com) will not display properly.
4480 | browser.places.importBookmarksHTML | boolean | Firefox 70, Firefox ESR 68.2
4481 | &nbsp;&nbsp;&nbsp;&nbsp;If true, bookmarks are always imported on startup.
4482 | browser.safebrowsing.phishing.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
4483 | &nbsp;&nbsp;&nbsp;&nbsp;If false, phishing protection is not enabled (Not recommended)
4484 | browser.safebrowsing.malware.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
4485 | &nbsp;&nbsp;&nbsp;&nbsp;If false, malware protection is not enabled (Not recommended)
4486 | browser.search.update | boolean | Firefox 68, Firefox ESR 68 | true
4487 | &nbsp;&nbsp;&nbsp;&nbsp;If false, updates for search engines are not checked.
4488 | browser.slowStartup.notificationDisabled | boolean | Firefox 70, Firefox ESR 68.2 | false
4489 | &nbsp;&nbsp;&nbsp;&nbsp;If true, a notification isn't shown if startup is slow.
4490 | browser.tabs.warnOnClose | boolean | Firefox 68, Firefox ESR 68 | true
4491 | &nbsp;&nbsp;&nbsp;&nbsp;If false, there is no warning when the browser is closed.
4492 | browser.taskbar.previews.enable | boolean | Firefox 70, Firefox ESR 68.2 (Windows only) | false
4493 | &nbsp;&nbsp;&nbsp;&nbsp;If true, tab previews are shown in the Windows taskbar.
4494 | browser.urlbar.suggest.bookmark | boolean | Firefox 68, Firefox ESR 68 | true
4495 | &nbsp;&nbsp;&nbsp;&nbsp;If false, bookmarks aren't suggested when typing in the URL bar.
4496 | browser.urlbar.suggest.history | boolean | Firefox 68, Firefox ESR 68 | true
4497 | &nbsp;&nbsp;&nbsp;&nbsp;If false, history isn't suggested when typing in the URL bar.
4498 | browser.urlbar.suggest.openpage | boolean | Firefox 68, Firefox ESR 68 | true
4499 | &nbsp;&nbsp;&nbsp;&nbsp;If false, open tabs aren't suggested when typing in the URL bar.
4500 | datareporting.policy.dataSubmissionPolicyBypassNotification | boolean | Firefox 68, Firefox ESR 68 | false
4501 | &nbsp;&nbsp;&nbsp;&nbsp;If true, don't show the privacy policy tab on first run.
4502 | dom.allow_scripts_to_close_windows | boolean | Firefox 70, Firefox ESR 68.2 | false
4503 | &nbsp;&nbsp;&nbsp;&nbsp;If false, web page can close windows.
4504 | dom.disable_window_flip | boolean | Firefox 68, Firefox ESR 68 | true
4505 | &nbsp;&nbsp;&nbsp;&nbsp;If false, web pages can focus and activate windows.
4506 | dom.disable_window_move_resize | boolean | Firefox 68, Firefox ESR 68 | false
4507 | &nbsp;&nbsp;&nbsp;&nbsp;If true, web pages can't move or resize windows.
4508 | dom.event.contextmenu.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4509 | &nbsp;&nbsp;&nbsp;&nbsp;If false, web pages can't override context menus.
4510 | dom.keyboardevent.keypress.hack.dispatch_non_printable_keys.addl | string | Firefox 68, Firefox ESR 68 | N/A
4511 | &nbsp;&nbsp;&nbsp;&nbsp;See https://support.mozilla.org/en-US/kb/dom-events-changes-introduced-firefox-66
4512 | dom.keyboardevent.keypress.hack.use_legacy_keycode_and_charcode.addl | string | Firefox 68, Firefox ESR 68 | N/A
4513 | &nbsp;&nbsp;&nbsp;&nbsp;See https://support.mozilla.org/en-US/kb/dom-events-changes-introduced-firefox-66
4514 | dom.xmldocument.load.enabled | boolean | Firefox ESR 68.5 | true.
4515 | &nbsp;&nbsp;&nbsp;&nbsp;If false, XMLDocument.load is not available.
4516 | dom.xmldocument.async.enabled | boolean | Firefox ESR 68.5 | true
4517 | &nbsp;&nbsp;&nbsp;&nbsp;If false, XMLDocument.async is not available.
4518 | extensions.blocklist.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
4519 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the extensions blocklist is not used (Not recommended)
4520 | extensions.getAddons.showPane | boolean | Firefox 68, Firefox ESR 68 | N/A
4521 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the Recommendations tab is not displayed in the Add-ons Manager.
4522 | extensions.htmlaboutaddons.recommendations.enabled | boolean | Firefox 72, Firefox ESR 68.4 | true
4523 | &nbsp;&nbsp;&nbsp;&nbsp;If false, recommendations are not shown on the Extensions tab in the Add-ons Manager.
4524 | geo.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
4525 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the geolocation API is disabled. | Language dependent
4526 | intl.accept_languages | string | Firefox 70, Firefox ESR 68.2
4527 | &nbsp;&nbsp;&nbsp;&nbsp;If set, preferred language for web pages.
4528 | media.eme.enabled (Deprecated - Switch to EncryptedMediaExtensions policy) | boolean | Firefox 70, Firefox ESR 68.2 | true
4529 | &nbsp;&nbsp;&nbsp;&nbsp;If false, Encrypted Media Extensions are not enabled.
4530 | media.gmp-gmpopenh264.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4531 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the OpenH264  plugin is not downloaded.
4532 | media.gmp-widevinecdm.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4533 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the Widevine plugin is not downloaded.
4534 | media.peerconnection.enabled | boolean | Firefox 72, Firefox ESR 68.4 | true
4535 | &nbsp;&nbsp;&nbsp;&nbsp;If false, WebRTC is disabled
4536 | media.peerconnection.ice.obfuscate_host_addresses.whitelist (Deprecated) | string | Firefox 72, Firefox ESR 68.4 | N/A
4537 | &nbsp;&nbsp;&nbsp;&nbsp;If set, a list of domains for which mDNS hostname obfuscation is
4538 disabled
4539 | media.peerconnection.ice.obfuscate_host_addresses.blocklist | string | Firefox 79, Firefox ESR 78.1 | N/A
4540 | &nbsp;&nbsp;&nbsp;&nbsp;If set, a list of domains for which mDNS hostname obfuscation is
4541 disabled
4542 | network.dns.disableIPv6 | boolean | Firefox 68, Firefox ESR 68 | false
4543 | &nbsp;&nbsp;&nbsp;&nbsp;If true, IPv6 DNS lokoups are disabled.
4544 | network.IDN_show_punycode | boolean | Firefox 68, Firefox ESR 68 | false
4545 | &nbsp;&nbsp;&nbsp;&nbsp;If true, display the punycode version of internationalized domain names.
4546 | places.history.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4547 | &nbsp;&nbsp;&nbsp;&nbsp;If false, history is not enabled.
4548 | print.save_print_settings | boolean | Firefox 70, Firefox ESR 68.2 | true
4549 | &nbsp;&nbsp;&nbsp;&nbsp;If false, print settings are not saved between jobs.
4550 | security.default_personal_cert | string | Firefox 68, Firefox ESR 68 | Ask Every Time
4551 | &nbsp;&nbsp;&nbsp;&nbsp;If set to Select Automatically, Firefox automatically chooses the default personal certificate.
4552 | security.mixed_content.block_active_content | boolean | Firefox 70, Firefox ESR 68.2 | true
4553 | &nbsp;&nbsp;&nbsp;&nbsp;If false, mixed active content (HTTP and HTTPS) is not blocked.
4554 | security.osclientcerts.autoload | boolean | Firefox 72 (Windows), Firefox 75 (macOS)  | false
4555 | &nbsp;&nbsp;&nbsp;&nbsp;If true, client certificates are loaded from the operating system certificate store.
4556 | security.ssl.errorReporting.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4557 | &nbsp;&nbsp;&nbsp;&nbsp;If false, SSL errors cannot be sent to Mozilla.
4558 | security.tls.hello_downgrade_check | boolean | Firefox 72, Firefox ESR 68.4 | true
4559 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the TLS 1.3 downgrade check is disabled.
4560 | ui.key.menuAccessKeyFocuses | boolean | Firefox 68, Firefox ESR 68 | true
4561 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the Alt key doesn't show the menubar on Windows.
4562 | widget.content.gtk-theme-override | string | Firefox 72, Firefox ESR 68.4 (Linux only) | N/A
4563 | &nbsp;&nbsp;&nbsp;&nbsp;If set, overrides the GTK theme for widgets.
4564 #### Windows (GPO)
4565 ```
4566 Software\Policies\Mozilla\Firefox\Preferences\boolean_preference_name = 0x1 | 0x0
4567 Software\Policies\Mozilla\Firefox\Preferences\string_preference_name = "string_value"
4568 ```
4569 #### Windows (Intune)
4570 OMA-URI: (periods are replaced by underscores)
4571 ```
4572 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Preferences/boolean_preference_name
4573 ```
4574 Value (string):
4575 ```
4576 <enabled/> or <disabled/>
4577 ```
4578 OMA-URI: (periods are replaced by underscores)
4579 ```
4580 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Preferences/string_preference_name
4581 ```
4582 Value (string):
4583 ```
4584 <enabled/>
4585 <data id="Preferences_String" value="string_value"/>
4586 ```
4587 #### macOS
4588 ```
4589 <dict>
4590   <key>Preferences</key>
4591   <dict>
4592     <key>boolean_preference_name</key>
4593     <true/> | <false/>
4594     <key>string_preference_name</key>
4595     <string>string_value</string>
4596   </dict>
4597 </dict>
4598 ```
4599 #### policies.json
4600 ```
4601 {
4602   "policies": {
4603     "Preferences": {
4604       "boolean_preference_name": true | false,
4605       "string_preference_name": "string_value"
4606     }
4607   }
4608 }
4609 ```
4610 ### PrimaryPassword
4611 Require or prevent using a primary (formerly master) password.
4612
4613 If this value is true, a primary password is required. If this value is false, it works the same as if [`DisableMasterPasswordCreation`](#disablemasterpasswordcreation) was true and removes the primary password functionality.
4614
4615 If both DisableMasterPasswordCreation and PrimaryPassword are used, DisableMasterPasswordCreation takes precedent.
4616
4617 **Compatibility:** Firefox 79, Firefox ESR 78.1\
4618 **CCK2 Equivalent:** `noMasterPassword`\
4619 **Preferences Affected:** N/A
4620
4621 #### Windows (GPO)
4622 ```
4623 Software\Policies\Mozilla\Firefox\PrimaryPassword = 0x1 | 0x0
4624 ```
4625 #### Windows (Intune)
4626 OMA-URI:
4627 ```
4628 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PrimaryPassword
4629 ```
4630 Value (string):
4631 ```
4632 <enabled/> or <disabled/>
4633 ```
4634 #### macOS
4635 ```
4636 <dict>
4637   <key>PrimaryPassword</key>
4638   <true/> | <false/>
4639 </dict>
4640 ```
4641 #### policies.json
4642 ```
4643 {
4644   "policies": {
4645     "PrimaryPassword": true | false
4646   }
4647 }
4648 ```
4649 ### PromptForDownloadLocation
4650 Ask where to save each file before downloading.
4651
4652 **Compatibility:** Firefox 68, Firefox ESR 68\
4653 **CCK2 Equivalent:** N/A\
4654 **Preferences Affected:** `browser.download.useDownloadDir`
4655
4656 #### Windows (GPO)
4657 ```
4658 Software\Policies\Mozilla\Firefox\PromptForDownloadLocation = 0x1 | 0x0
4659 ```
4660 #### Windows (Intune)
4661 OMA-URI:
4662 ```
4663 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PromptForDownloadLocation
4664 ```
4665 Value (string):
4666 ```
4667 <enabled/> or <disabled/>
4668 ```
4669 #### macOS
4670 ```
4671 <dict>
4672   <key>PromptForDownloadLocation</key>
4673   <true/> | <false/>
4674 </dict>
4675 ```
4676 #### policies.json
4677 ```
4678 {
4679   "policies": {
4680     "PromptForDownloadLocation": true | false
4681   }
4682 }
4683 ```
4684 ### Proxy
4685 Configure proxy settings. These settings correspond to the connection settings in Firefox preferences.
4686 To specify ports, append them to the hostnames with a colon (:).
4687
4688 `Mode` is the proxy method being used.
4689
4690 `Locked` is whether or not proxy settings can be changed.
4691
4692 `HTTPProxy` is the HTTP proxy server.
4693
4694 `UseHTTPProxyForAllProtocols` is whether or not the HTTP proxy should be used for all other proxies.
4695
4696 `SSLProxy` is the SSL proxy server.
4697
4698 `FTPProxy` is the FTP proxy server.
4699
4700 `SOCKSProxy` is the SOCKS proxy server
4701
4702 `SOCKSVersion` is the SOCKS version (4 or 5)
4703
4704 `Passthrough` is list of hostnames or IP addresses that will not be proxied. Use `<local>` to bypass proxying for all hostnames which do not contain periods.
4705
4706 `AutoConfigURL` is a  URL for proxy configuration (only used if Mode is autoConfig).
4707
4708 `AutoLogin` means do not prompt for authentication if password is saved.
4709
4710 `UseProxyForDNS` to use proxy DNS when using SOCKS v5.
4711
4712 **Compatibility:** Firefox 60, Firefox ESR 60\
4713 **CCK2 Equivalent:** `networkProxy*`\
4714 **Preferences Affected:** `network.proxy.type`, `network.proxy.autoconfig_url`, `network.proxy.socks_remote_dns`, `signon.autologin.proxy`, `network.proxy.socks_version`, `network.proxy.no_proxies_on`, `network.proxy.share_proxy_settings`, `network.proxy.http`, `network.proxy.http_port`, `network.proxy.ftp`, `network.proxy.ftp_port`, `network.proxy.ssl`, `network.proxy.ssl_port`, `network.proxy.socks`, `network.proxy.socks_port`
4715
4716 #### Windows (GPO)
4717 ```
4718 Software\Policies\Mozilla\Firefox\Proxy\Mode = "none" | "system" | "manual" | "autoDetect" | "autoConfig"
4719 Software\Policies\Mozilla\Firefox\Proxy\Locked = 0x1 | 0x0
4720 Software\Policies\Mozilla\Firefox\=Proxy\HTTPProxy = https://httpproxy.example.com
4721 Software\Policies\Mozilla\Firefox\Proxy\UseHTTPProxyForAllProtocols = 0x1 | 0x0
4722 Software\Policies\Mozilla\Firefox\Proxy\SSLProxy = https://sslproxy.example.com
4723 Software\Policies\Mozilla\Firefox\Proxy\FTPProxy = https://ftpproxy.example.com
4724 Software\Policies\Mozilla\Firefox\Proxy\SOCKSProxy = https://socksproxy.example.com
4725 Software\Policies\Mozilla\Firefox\Proxy\SOCKSVersion = 0x4 | 0x5
4726 Software\Policies\Mozilla\Firefox\Proxy\Passthrough = <local>
4727 Software\Policies\Mozilla\Firefox\Proxy\AutoConfigURL = URL_TO_AUTOCONFIG
4728 Software\Policies\Mozilla\Firefox\Proxy\AutoLogin = 0x1 | 0x0
4729 Software\Policies\Mozilla\Firefox\Proxy\UseProxyForDNS = 0x1 | 0x0
4730 ```
4731 #### Windows (Intune)
4732 OMA-URI:
4733 ```
4734 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Proxy
4735 ```
4736 Value (string):
4737 ```
4738 <enabled/>
4739 <data id="ProxyLocked" value="true | false"/>
4740 <data id="ConnectionType" value="none | system | manual | autoDetect | autoConfig"/>
4741 <data id="HTTPProxy" value="https://httpproxy.example.com"/>
4742 <data id="UseHTTPProxyForAllProtocols" value="true | false"/>
4743 <data id="SSLProxy" value="https://sslproxy.example.com"/>
4744 <data id="FTPProxy" value="https://ftpproxy.example.com"/>
4745 <data id="SOCKSProxy" value="https://socksproxy.example.com"/>
4746 <data id="SOCKSVersion" value="4 | 5"/>
4747 <data id="AutoConfigURL" value="URL_TO_AUTOCONFIG"/>
4748 <data id="Passthrough" value="<local>"/>
4749 <data id="AutoLogin" value="true | false"/>
4750 <data id="UseProxyForDNS" value="true | false"/>
4751 ```
4752 #### macOS
4753 ```
4754 <dict>
4755   <key>Proxy</key>
4756   <dict>
4757     <key>Mode</key>
4758     <string>none | system | manual | autoDetect | autoConfig</string>
4759     <key>Locked</key>
4760     <true> | </false>
4761     <key>HTTPProxy</key>
4762     <string>https://httpproxy.example.com</string>
4763     <key>UseHTTPProxyForAllProtocols</key>
4764     <true> | </false>
4765     <key>SSLProxy</key>
4766     <string>https://sslproxy.example.com</string>
4767     <key>FTPProxy</key>
4768     <string>https://ftpproxy.example.com</string>
4769     <key>SOCKSProxy</key>
4770     <string>https://socksproxy.example.com</string>
4771     <key>SOCKSVersion</key>
4772     <string>4 | 5</string>
4773     <key>Passthrough</key>
4774     <string>&lt;local>&gt;</string>
4775     <key>AutoConfigURL</key>
4776     <string>URL_TO_AUTOCONFIG</string>
4777     <key>AutoLogin</key>
4778     <true> | </false>
4779     <key>UseProxyForDNS</key>
4780     <true> | </false>
4781   </dict>
4782 </dict>
4783 ```
4784 #### policies.json
4785 ```
4786 {
4787   "policies": {
4788     "Proxy": {
4789       "Mode": "none" | "system" | "manual" | "autoDetect" | "autoConfig",
4790       "Locked": true | false,
4791       "HTTPProxy": "hostname",
4792       "UseHTTPProxyForAllProtocols": true | false,
4793       "SSLProxy": "hostname",
4794       "FTPProxy": "hostname",
4795       "SOCKSProxy": "hostname",
4796       "SOCKSVersion": 4 | 5,
4797       "Passthrough": "<local>",
4798       "AutoConfigURL": "URL_TO_AUTOCONFIG",
4799       "AutoLogin": true | false,
4800       "UseProxyForDNS": true | false
4801     }
4802   }
4803 }
4804 ```
4805 ### RequestedLocales
4806 Set the the list of requested locales for the application in order of preference. It will cause the corresponding language pack to become active.
4807
4808 Note: For Firefox 68, this can now be a string so that you can specify an empty value.
4809
4810 **Compatibility:** Firefox 64, Firefox ESR 60.4, Updated in Firefox 68, Firefox ESR 68\
4811 **CCK2 Equivalent:** N/A\
4812 **Preferences Affected:** N/A
4813 #### Windows (GPO)
4814 ```
4815 Software\Policies\Mozilla\Firefox\RequestedLocales\1 = "de"
4816 Software\Policies\Mozilla\Firefox\RequestedLocales\2 = "en-US"
4817
4818 or
4819
4820 Software\Policies\Mozilla\Firefox\RequestedLocales = "de,en-US"
4821 ```
4822 #### Windows (Intune)
4823 OMA-URI:
4824 ```
4825 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/RequestedLocalesString
4826 ```
4827 Value (string):
4828 ```
4829 <enabled/>
4830 <data id="Preferences_String" value="de,en-US"/>
4831 ```
4832 #### macOS
4833 ```
4834 <dict>
4835   <key>RequestedLocales</key>
4836   <array>
4837     <string>de</string>
4838     <string>en-US</string>
4839   </array>
4840 </dict>
4841
4842 or
4843
4844 <dict>
4845   <key>RequestedLocales</key>
4846   <string>de,en-US</string>
4847 </dict>
4848
4849 ```
4850 #### policies.json
4851 ```
4852 {
4853   "policies": {
4854     "RequestedLocales": ["de", "en-US"]
4855   }
4856 }
4857
4858 or
4859
4860 {
4861   "policies": {
4862     "RequestedLocales": "de,en-US"
4863   }
4864 }
4865 ```
4866 <a name="SanitizeOnShutdown"></a>
4867
4868 ### SanitizeOnShutdown (Selective)
4869 Clear data on shutdown. Choose from Cache, Cookies, Download History, Form & Search History, Browsing History, Active Logins, Site Preferences and Offline Website Data.
4870
4871 Previously, these values were always locked. Starting with Firefox 74 and Firefox ESR 68.6, you can use the `Locked` option to either keep the values unlocked (set it to false), or lock only the values you set (set it to true). If you want the old behavior of locking everything, do not set `Locked` at all.
4872
4873 **Compatibility:** Firefox 68, Firefox ESR 68 (Locked added in 74/68.6)\
4874 **CCK2 Equivalent:** N/A\
4875 **Preferences Affected:** `privacy.sanitize.sanitizeOnShutdown`, `privacy.clearOnShutdown.cache`, `privacy.clearOnShutdown.cookies`, `privacy.clearOnShutdown.downloads`, `privacy.clearOnShutdown.formdata`, `privacy.clearOnShutdown.history`, `privacy.clearOnShutdown.sessions`, `privacy.clearOnShutdown.siteSettings`, `privacy.clearOnShutdown.offlineApps`
4876 #### Windows (GPO)
4877 ```
4878 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Cache = 0x1 | 0x0
4879 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Cookies = 0x1 | 0x0
4880 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Downloads = 0x1 | 0x0
4881 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\FormData = 0x1 | 0x0
4882 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\History = 0x1 | 0x0
4883 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Sessions = 0x1 | 0x0
4884 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\SiteSettings = 0x1 | 0x0
4885 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\OfflineApps = 0x1 | 0x0
4886 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Locked = 0x1 | 0x0
4887 ```
4888 #### Windows (Intune)
4889 OMA-URI:
4890 ```
4891 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/A_SanitizeOnShutdown_Cache
4892 ```
4893 Value (string):
4894 ```
4895 <enabled/> or <disabled/>
4896 ```
4897 OMA-URI:
4898 ```
4899 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/B_SanitizeOnShutdown_Cookies
4900 ```
4901 Value (string):
4902 ```
4903 <enabled/> or <disabled/>
4904 ```
4905 OMA-URI:
4906 ```
4907 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/C_SanitizeOnShutdown_Downloads
4908 ```
4909 Value (string):
4910 ```
4911 <enabled/> or <disabled/>
4912 ```
4913 OMA-URI:
4914 ```
4915 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/D_SanitizeOnShutdown_FormData
4916 ```
4917 Value (string):
4918 ```
4919 <enabled/> or <disabled/>
4920 ```
4921 OMA-URI:
4922 ```
4923 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/E_SanitizeOnShutdown_History
4924 ```
4925 Value (string):
4926 ```
4927 <enabled/> or <disabled/>
4928 ```
4929 OMA-URI:
4930 ```
4931 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/F_SanitizeOnShutdown_Sessions
4932 ```
4933 Value (string):
4934 ```
4935 <enabled/> or <disabled/>
4936 ```
4937 OMA-URI:
4938 ```
4939 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/G_SanitizeOnShutdown_SiteSettings
4940 ```
4941 Value (string):
4942 ```
4943 <enabled/> or <disabled/>
4944 ```
4945 OMA-URI:
4946 ```
4947 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/H_SanitizeOnShutdown_OfflineApps
4948 ```
4949 Value (string):
4950 ```
4951 <enabled/> or <disabled/>
4952 ```
4953 OMA-URI:
4954 ```
4955 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/I_SanitizeOnShutdown_Locked
4956 ```
4957 Value (string):
4958 ```
4959 <enabled/> or <disabled/>
4960 ```
4961 #### macOS
4962 ```
4963 <dict>
4964   <key>SanitizeOnShutdown</key>
4965   <dict>
4966     <key>Cache</key>
4967     <true/> | <false/>
4968     <key>Cookies</key>
4969     <true/> | <false/>
4970     <key>Downloads</key>
4971     <true/> | <false/>
4972     <key>FormData</key>
4973     <true/> | <false/>
4974     <key>History</key>
4975     <true/> | <false/>
4976     <key>Sessions</key>
4977     <true/> | <false/>
4978     <key>SiteSettings</key>
4979     <true/> | <false/>
4980     <key>OfflineApps</key>
4981     <true/> | <false/>
4982     <key>Locked</key>
4983     <true/> | <false/>
4984   </dict>
4985 </dict>
4986 ```
4987 #### policies.json
4988 ```
4989 {
4990   "policies": {
4991     "SanitizeOnShutdown": {
4992       "Cache": true | false,
4993       "Cookies": true | false,
4994       "Downloads": true | false,
4995       "FormData": true | false,
4996       "History": true | false,
4997       "Sessions": true | false,
4998       "SiteSettings": true | false,
4999       "OfflineApps": true | false,
5000       "Locked": true | false
5001     }
5002   }
5003 }
5004 ```
5005 ### SanitizeOnShutdown (All)
5006 Clear all data on shutdown, including Browsing & Download History, Cookies, Active Logins, Cache, Form & Search History, Site Preferences and Offline Website Data.
5007
5008 **Compatibility:** Firefox 60, Firefox ESR 60\
5009 **CCK2 Equivalent:** N/A\
5010 **Preferences Affected:** `privacy.sanitize.sanitizeOnShutdown`, `privacy.clearOnShutdown.cache`, `privacy.clearOnShutdown.cookies`, `privacy.clearOnShutdown.downloads`, `privacy.clearOnShutdown.formdata`, `privacy.clearOnShutdown.history`, `privacy.clearOnShutdown.sessions`, `privacy.clearOnShutdown.siteSettings`, `privacy.clearOnShutdown.offlineApps`
5011 #### Windows (GPO)
5012 ```
5013 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown = 0x1 | 0x0
5014 ```
5015 #### Windows (Intune)
5016 OMA-URI:
5017 ```
5018 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/C_SanitizeOnShutdown
5019 ```
5020 Value (string):
5021 ```
5022 <enabled/> or <disabled/>
5023 ```
5024 #### macOS
5025 ```
5026 <dict>
5027   <key>SanitizeOnShutdown</key>
5028   <true/> | <false/>
5029 </dict>
5030 ```
5031 #### policies.json
5032 ```
5033 {
5034   "policies": {
5035     "SanitizeOnShutdown": true | false
5036   }
5037 }
5038 ```
5039 ### SearchBar
5040 Set whether or not search bar is displayed.
5041
5042 **Compatibility:** Firefox 60, Firefox ESR 60\
5043 **CCK2 Equivalent:** `showSearchBar`\
5044 **Preferences Affected:** N/A
5045
5046 #### Windows (GPO)
5047 ```
5048 Software\Policies\Mozilla\Firefox\SearchBar = "unified" | "separate"
5049 ```
5050
5051 #### Windows (Intune)
5052 OMA-URI:
5053 ```
5054 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SearchBar
5055 ```
5056 Value (string):
5057 ```
5058 <enabled/>
5059 <data id="SearchBar" value="unified | separate"/>
5060 ```
5061 #### macOS
5062 ```
5063 <dict>
5064   <key>SearchBar</key>
5065   <string>unified | separate</string>
5066 </dict>
5067 ```
5068 #### policies.json
5069 ```
5070 {
5071   "policies": {
5072     "SearchBar": "unified" | "separate"
5073   }
5074 }
5075 ```
5076 <a name="SearchEngines"></a>
5077
5078 ### SearchEngines (This policy is only available on the ESR.)
5079
5080 ### SearchEngines | Add
5081
5082 Add new search engines. Although there are only five engines available in the ADMX template, there is no limit. To add more in the ADMX template, you can duplicate the XML.
5083
5084 This policy is only available on the ESR. `Name` and `URLTemplate` are required.
5085
5086 `Name` is the name of the search engine.
5087
5088 `URLTemplate` is the search URL with {searchTerms} to substitute for the search term.
5089
5090 `Method` is either GET or POST
5091
5092 `IconURL` is a URL for the icon to use.
5093
5094 `Alias` is a keyword to use for the engine.
5095
5096 `Description` is a description of the search engine.
5097
5098 `PostData` is the POST data as name value pairs separated by &.
5099
5100 `SuggestURLTemplate` is a search suggestions URL with {searchTerms} to substitute for the search term.
5101
5102 `Encoding` is the query charset for the engine. It defaults to UTF-8.
5103
5104 **Compatibility:** Firefox ESR 60 (POST support in Firefox ESR 68, Encoding support in Firefox 91)\
5105 **CCK2 Equivalent:** `searchplugins`\
5106 **Preferences Affected:** N/A
5107
5108 #### Windows (GPO)
5109 ```
5110 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Name = "Example1"
5111 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\URLTemplate = "https://www.example.org/q={searchTerms}"
5112 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Method = "GET" | "POST"
5113 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\IconURL = "https://www.example.org/favicon.ico"
5114 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Alias = "example"
5115 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Description = "Example Description"
5116 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\SuggestURLTemplate = "https://www.example.org/suggestions/q={searchTerms}"
5117 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\PostData = "name=value&q={searchTerms}"
5118 ```
5119 #### Windows (Intune)
5120 OMA-URI:
5121 ```
5122 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_1
5123 ```
5124 Value (string):
5125 ```
5126 <enabled/>
5127 <data id="SearchEngine_Name" value="Example1"/>
5128 <data id="SearchEngine_URLTemplate" value="https://www.example.org/q={searchTerms"/>
5129 <data id="SearchEngine_Method" value="GET | POST"/>
5130 <data id="SearchEngine_IconURL" value="https://www.example.org/favicon.ico"/>
5131 <data id="SearchEngine_Alias" value="example"/>
5132 <data id="SearchEngine_Description" value="Example Description"/>
5133 <data id="SearchEngine_SuggestURLTemplate" value="https://www.example.org/suggestions/q={searchTerms}"/>
5134 <data id="SearchEngine_PostData" value="name=value&amp;q={searchTerms}"/>
5135 ```
5136 #### macOS
5137 ```
5138 <dict>
5139   <key>SearchEngines</key>
5140   <dict>
5141     <key>Add</key>
5142     <array>
5143       <dict>
5144         <key>Name</key>
5145         <string>Example1</string>
5146         <key>URLTemplate</key>
5147         <string>https://www.example.org/q={searchTerms}</string>
5148         <key>Method</key>
5149         <string>GET | POST </string>
5150         <key>IconURL</key>
5151         <string>https://www.example.org/favicon.ico</string>
5152         <key>Alias</key>
5153         <string>example</string>
5154         <key>Description</key>
5155         <string>Example Description</string>
5156         <key>SuggestURLTemplate</key>
5157         <string>https://www.example.org/suggestions/q={searchTerms}</string>
5158         <key>PostData</key>
5159         <string>name=value&q={searchTerms}</string>
5160       </dict>
5161     <array>
5162   </dict>
5163 </dict>
5164 ```
5165 #### policies.json
5166 ```
5167 {
5168   "policies": {
5169     "SearchEngines": {
5170       "Add": [
5171         {
5172           "Name": "Example1",
5173           "URLTemplate": "https://www.example.org/q={searchTerms}",
5174           "Method": "GET" | "POST",
5175           "IconURL": "https://www.example.org/favicon.ico",
5176           "Alias": "example",
5177           "Description": "Description",
5178           "PostData": "name=value&q={searchTerms}",
5179           "SuggestURLTemplate": "https://www.example.org/suggestions/q={searchTerms}"
5180         }
5181       ]
5182     }
5183   }
5184 }
5185 ```
5186 ### SearchEngines | Default
5187
5188 Set the default search engine. This policy is only available on the ESR.
5189
5190 **Compatibility:** Firefox ESR 60\
5191 **CCK2 Equivalent:** `defaultSearchEngine`\
5192 **Preferences Affected:** N/A
5193
5194 #### Windows (GPO)
5195 ```
5196 Software\Policies\Mozilla\Firefox\SearchEngines\Default = NAME_OF_SEARCH_ENGINE
5197 ```
5198 #### Windows (Intune)
5199 OMA-URI:
5200 ```
5201 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_Default
5202 ```
5203 Value (string):
5204 ```
5205 <enabled/>
5206 <data id="SearchEngines_Default" value="NAME_OF_SEARCH_ENGINE"/>
5207 ```
5208 #### macOS
5209 ```
5210 <dict>
5211   <key>SearchEngines</key>
5212   <dict>
5213     <key>Default</key>
5214     <string>NAME_OF_SEARCH_ENGINE</string>
5215   </dict>
5216 </dict>
5217 ```
5218 #### policies.json
5219 ```
5220 {
5221   "policies": {
5222     "SearchEngines": {
5223       "Default": "NAME_OF_SEARCH_ENGINE"
5224     }
5225   }
5226 }
5227 ```
5228 ### SearchEngines | PreventInstalls
5229
5230 Prevent installing search engines from webpages.
5231
5232 **Compatibility:** Firefox ESR 60\
5233 **CCK2 Equivalent:** `disableSearchEngineInstall`\
5234 **Preferences Affected:** N/A
5235
5236 #### Windows (GPO)
5237 ```
5238 Software\Policies\Mozilla\Firefox\SearchEngines\PreventInstalls = 0x1 | 0x0
5239 ```
5240 #### Windows (Intune)
5241 OMA-URI:
5242 ```
5243 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_PreventInstalls
5244 ```
5245 Value (string):
5246 ```
5247 <enabled/> or <disabled/>
5248 ```
5249 #### macOS
5250 ```
5251 <dict>
5252   <key>SearchEngines</key>
5253   <dict>
5254     <key>PreventInstalls</key>
5255     <true/> | <false/>
5256   </dict>
5257 </dict>
5258 ```
5259 #### policies.json
5260 ```
5261 {
5262   "policies": {
5263     "SearchEngines": {
5264       "PreventInstalls": true | false
5265     }
5266   }
5267 }
5268 ```
5269 ### SearchEngines | Remove
5270
5271 Hide built-in search engines. This policy is only available on the ESR.
5272
5273 **Compatibility:** Firefox ESR 60.2\
5274 **CCK2 Equivalent:** `removeDefaultSearchEngines` (removed all built-in engines)\
5275 **Preferences Affected:** N/A
5276
5277 #### Windows (GPO)
5278 ```
5279 Software\Policies\Mozilla\Firefox\SearchEngines\Remove\1 = NAME_OF_SEARCH_ENGINE
5280 ```
5281 #### Windows (Intune)
5282 OMA-URI:
5283 ```
5284 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_Remove
5285 ```
5286 Value (string):
5287 ```
5288 <enabled/>
5289 <data id="SearchEngines_Remove" value="1&#xF000;NAME_OF_SEARCH_ENGINE"/>
5290 ```
5291 #### macOS
5292 ```
5293 <dict>
5294   <key>SearchEngines</key>
5295   <dict>
5296     <key>Remove</key>
5297     <array>
5298       <string>NAME_OF_SEARCH_ENGINE</string>
5299     </array>
5300   </dict>
5301 </dict>
5302 ```
5303 #### policies.json
5304 ```
5305 {
5306   "policies": {
5307     "SearchEngines": {
5308       "Remove": ["NAME_OF_SEARCH_ENGINE"]
5309     }
5310   }
5311 }
5312 ```
5313 ### SearchSuggestEnabled
5314
5315 Enable search suggestions.
5316
5317 **Compatibility:** Firefox 68, Firefox ESR 68\
5318 **CCK2 Equivalent:** N/A\
5319 **Preferences Affected:** `browser.urlbar.suggest.searches`, `browser.search.suggest.enabled`
5320
5321 #### Windows (GPO)
5322 ```
5323 Software\Policies\Mozilla\Firefox\SearchSuggestEnabled = 0x1 | 0x0
5324 ```
5325 #### Windows (Intune)
5326 OMA-URI:
5327 ```
5328 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchSuggestEnabled
5329 ```
5330 Value (string):
5331 ```
5332 <enabled/> or <disabled/>
5333 ```
5334 #### macOS
5335 ```
5336 <dict>
5337   <key>SearchSuggestEnabled</key>
5338   <true/> | <false/>
5339 </dict>
5340 ```
5341 #### policies.json
5342 ```
5343 {
5344   "policies": {
5345     "SearchSuggestEnabled": true | false
5346   }
5347 }
5348 ```
5349 ### SecurityDevices
5350
5351 Install PKCS #11 modules.
5352
5353 **Compatibility:** Firefox 64, Firefox ESR 60.4\
5354 **CCK2 Equivalent:** `certs.devices`\
5355 **Preferences Affected:** N/A
5356
5357 #### Windows (GPO)
5358 ```
5359 Software\Policies\Mozilla\Firefox\SecurityDevices\NAME_OF_DEVICE = PATH_TO_LIBRARY_FOR_DEVICE
5360 ```
5361 #### Windows (Intune)
5362 OMA-URI:
5363 ```
5364 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SecurityDevices
5365 ```
5366 Value (string):
5367 ```
5368 <enabled/>
5369 <data id="SecurityDevices" value="NAME_OF_DEVICE&#xF000;PATH_TO_LIBRARY_FOR_DEVICE"/>
5370 ```
5371 #### macOS
5372 ```
5373 <dict>
5374   <key>SecurityDevices</key>
5375   <dict>
5376     <key>NAME_OF_DEVICE</key>
5377     <string>PATH_TO_LIBRARY_FOR_DEVICE</string>
5378   </dict>
5379 </dict>
5380 ```
5381
5382 #### policies.json
5383 ```
5384 {
5385   "policies": {
5386     "SecurityDevices": {
5387       "NAME_OF_DEVICE": "PATH_TO_LIBRARY_FOR_DEVICE"
5388     }
5389   }
5390 }
5391 ```
5392 ### ShowHomeButton
5393 Show the home button on the toolbar.
5394
5395 Future versions of Firefox will not show the home button by default.
5396
5397 **Compatibility:** Firefox 88, Firefox ESR 78.10\
5398 **CCK2 Equivalent:** N/A\
5399 **Preferences Affected:** N/A
5400
5401 #### Windows (GPO)
5402 ```
5403 Software\Policies\Mozilla\Firefox\ShowHomeButton = 0x1 | 0x0
5404 ```
5405 #### Windows (Intune)
5406 OMA-URI:
5407 ```
5408 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/Homepage_ShowHomeButton
5409 ```
5410 Value (string):
5411 ```
5412 <enabled/> or <disabled/>
5413 ```
5414 #### macOS
5415 ```
5416 <dict>
5417   <key>ShowHomeButton</key>
5418   <true/> | <false/>
5419 </dict>
5420 ```
5421 #### policies.json
5422 ```
5423 {
5424   "policies": {
5425     "ShowHomeButton": true | false
5426   }
5427 }
5428 ```
5429 ### SSLVersionMax
5430
5431 Set and lock the maximum version of TLS.
5432
5433 **Compatibility:** Firefox 66, Firefox ESR 60.6\
5434 **CCK2 Equivalent:** N/A\
5435 **Preferences Affected:** `security.tls.version.max`
5436
5437 #### Windows (GPO)
5438 ```
5439 Software\Policies\Mozilla\Firefox\SSLVersionMax = "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
5440 ```
5441 #### Windows (Intune)
5442 OMA-URI:
5443 ```
5444 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SSLVersionMax
5445 ```
5446 Value (string):
5447 ```
5448 <enabled/>
5449 <data id="SSLVersion" value="tls1 | tls1.2 | tls1.3"/>
5450 ```
5451 #### macOS
5452 ```
5453 <dict>
5454   <key>SSLVersionMax</key>
5455   <string>tls1 | tls1.1 | tls1.2 | tls1.3</string>
5456 </dict>
5457 ```
5458
5459 #### policies.json
5460 ```
5461 {
5462   "policies": {
5463     "SSLVersionMax": "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
5464   }
5465 }
5466 ```
5467 ### SSLVersionMin
5468
5469 Set and lock the minimum version of TLS.
5470
5471 **Compatibility:** Firefox 66, Firefox ESR 60.6\
5472 **CCK2 Equivalent:** N/A\
5473 **Preferences Affected:** `security.tls.version.min`
5474
5475 #### Windows (GPO)
5476 ```
5477 Software\Policies\Mozilla\Firefox\SSLVersionMin = "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
5478 ```
5479 #### Windows (Intune)
5480 OMA-URI:
5481 ```
5482 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SSLVersionMin
5483 ```
5484 Value (string):
5485 ```
5486 <enabled/>
5487 <data id="SSLVersion" value="tls1 | tls1.2 | tls1.3"/>
5488 ```
5489 #### macOS
5490 ```
5491 <dict>
5492   <key>SSLVersionMin</key>
5493   <string>tls1 | tls1.1 | tls1.2 | tls1.3</string>
5494 </dict>
5495 ```
5496
5497 #### policies.json
5498 ```
5499 {
5500   "policies": {
5501     "SSLVersionMin": "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
5502   }
5503 }
5504 ```
5505 ### SupportMenu
5506 Add a menuitem to the help menu for specifying support information.
5507
5508 **Compatibility:** Firefox 68.0.1, Firefox ESR 68.0.1\
5509 **CCK2 Equivalent:** helpMenu\
5510 **Preferences Affected:** N/A
5511
5512 #### Windows (GPO)
5513 ```
5514 Software\Policies\Mozilla\Firefox\SupportMenu\Title = "Support Menu"
5515 Software\Policies\Mozilla\Firefox\SupportMenu\URL = "http://example.com/support"
5516 Software\Policies\Mozilla\Firefox\SupportMenu\AccessKey = "S"
5517 ```
5518 #### Windows (Intune)
5519 OMA-URI:
5520 ```
5521 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SupportMenu
5522 ```
5523 Value (string):
5524 ```
5525 <enabled/>
5526 <data id="SupportMenuTitle" value="Support Menu"/>
5527 <data id="SupportMenuURL" value="http://example.com/support"/>
5528 <data id="SupportMenuAccessKey" value="S">
5529 ```
5530 #### macOS
5531 ```
5532 <dict>
5533   <key>SupportMenu</key>
5534   <dict>
5535     <key>Title</key>
5536     <string>SupportMenu</string>
5537     <key>URL</key>
5538     <string>http://example.com/support</string>
5539     <key>AccessKey</key>
5540     <string>S</string>
5541   </dict>
5542 </dict>
5543 ```
5544 #### policies.json
5545 ```
5546 {
5547   "policies": {
5548     "SupportMenu": {
5549       "Title": "Support Menu",
5550       "URL": "http://example.com/support",
5551       "AccessKey": "S"
5552     }
5553   }
5554 }
5555 ```
5556 ### UserMessaging
5557
5558 Prevent Firefox from messaging the user in certain situations.
5559
5560 `WhatsNew` Remove the "What's New" icon and menuitem.
5561
5562 `ExtensionRecommendations` If false, don't recommend extensions while the user is visiting web pages.
5563
5564 `FeatureRecommendations` If false, don't recommend browser features.
5565
5566 `UrlbarInterventions` If false, Don't offer Firefox specific suggestions in the URL bar.
5567
5568 `SkipOnboarding` If true, don't show onboarding messages on the new tab page.
5569
5570 `MoreFromMozilla` If false, don't show the "More from Mozilla" section in Preferences. (Firefox 98)
5571
5572 **Compatibility:** Firefox 75, Firefox ESR 68.7\
5573 **CCK2 Equivalent:** N/A\
5574 **Preferences Affected:** `browser.messaging-system.whatsNewPanel.enabled`, `browser.newtabpage.activity-stream.asrouter.userprefs.cfr.addons`, `browser.newtabpage.activity-stream.asrouter.userprefs.cfr.features`, `browser.aboutwelcome.enabled`, `browser.preferences.moreFromMozilla`
5575
5576 #### Windows (GPO)
5577 ```
5578 Software\Policies\Mozilla\Firefox\UserMessaging\WhatsNew = 0x1 | 0x0
5579 Software\Policies\Mozilla\Firefox\UserMessaging\ExtensionRecommendations = 0x1 | 0x0
5580 Software\Policies\Mozilla\Firefox\UserMessaging\FeatureRecommendations = 0x1 | 0x0
5581 Software\Policies\Mozilla\Firefox\UserMessaging\UrlbarInterventions = 0x1 | 0x0
5582 Software\Policies\Mozilla\Firefox\UserMessaging\SkipOnboarding = 0x1 | 0x0
5583 Software\Policies\Mozilla\Firefox\UserMessaging\MoreFromMozilla = 0x1 | 0x0
5584 ```
5585 #### Windows (Intune)
5586 OMA-URI:
5587 ```
5588 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_WhatsNew
5589 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_ExtensionRecommendations
5590 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_FeatureRecommendations
5591 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_UrlbarInterventions
5592 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_SkipOnboarding
5593 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_MoreFromMozilla
5594 ```
5595 Value (string):
5596 ```
5597 <enabled/> or <disabled/>
5598 ```
5599 #### macOS
5600 ```
5601 <dict>
5602   <key>UserMessaging</key>
5603   <dict>
5604     <key>WhatsNew</key>
5605     <true/> | <false/>
5606     <key>ExtensionRecommendations</key>
5607     <true/> | <false/>
5608     <key>FeatureRecommendations</key>
5609     <true/> | <false/>
5610     <key>UrlbarInterventions</key>
5611     <true/> | <false/>
5612     <key>SkipOnboarding</key>
5613     <true/> | <false/>
5614     <key>MoreFromMozilla</key>
5615     <true/> | <false/>
5616   </dict>
5617 </dict>
5618 ```
5619 #### policies.json
5620 ```
5621 {
5622   "policies": {
5623     "UserMessaging": {
5624       "WhatsNew": true | false,
5625       "ExtensionRecommendations": true | false,
5626       "FeatureRecommendations": true | false,
5627       "UrlbarInterventions": true | false
5628       "SkipOnboarding": true | false,
5629       "MoreFromMozilla": true | false
5630     }
5631   }
5632 }
5633 ```
5634 ### WebsiteFilter
5635 Block websites from being visited. The parameters take an array of Match Patterns, as documented in https://developer.mozilla.org/en-US/Add-ons/WebExtensions/Match_patterns.
5636 The arrays are limited to 1000 entries each.
5637
5638 If you want to block all URLs, you can use `<all_urls>` or `*://*/*`. You can't have just a `*` on the right side.
5639
5640 For specific protocols, use `https://*/*` or `http://*/*`.
5641
5642 As of Firefox 83 and Firefox ESR 78.5, file URLs are supported.
5643
5644 **Compatibility:** Firefox 60, Firefox ESR 60\
5645 **CCK2 Equivalent:** N/A\
5646 **Preferences Affected:** N/A
5647
5648 #### Windows (GPO)
5649 ```
5650 Software\Policies\Mozilla\Firefox\WebsiteFilter\Block\1 = "<all_urls>"
5651 Software\Policies\Mozilla\Firefox\WebsiteFilter\Exceptions\1 = "http://example.org/*"
5652 ```
5653 #### Windows (Intune)
5654 OMA-URI:
5655 ```
5656 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/B_WebsiteFilter_Block
5657 ```
5658 Value (string):
5659 ```
5660 <enabled/> <data id="WebsiteFilter" value="1&#xF000;&#60;all_urls&#62;"/>
5661 ```
5662 OMA-URI:
5663 ```
5664 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/B_WebsiteFilter_Exceptions
5665 ```
5666 Value (string):
5667 ```
5668 <enabled/>
5669 <data id="WebsiteFilter" value="1&#xF000;http://example.org/*"/>
5670 ```
5671 #### macOS
5672 ```
5673 <dict>
5674   <key>WebsiteFilter</key>
5675   <dict>
5676     <key>Block</key>
5677     <array>
5678       <string><all_urls></string>
5679     </array>
5680     <key>Exceptions</key>
5681     <array>
5682       <string>http://example.org/*</string>
5683     </array>
5684   </dict>
5685
5686 </dict>
5687 ```
5688 #### policies.json
5689 ```
5690 {
5691   "policies": {
5692     "WebsiteFilter": {
5693       "Block": ["<all_urls>"],
5694       "Exceptions": ["http://example.org/*"]
5695     }
5696   }
5697 }
5698 ```
5699 ### WindowsSSO
5700 Allow Windows single sign-on for Microsoft, work, and school accounts.
5701
5702 If this policy is set to true, Firefox will use credentials stored in Windows to sign in to Microsoft, work, and school accounts.
5703
5704 **Compatibility:** Firefox 91\
5705 **CCK2 Equivalent:** N/A\
5706 **Preferences Affected:** `network.http.windows-sso.enabled`
5707
5708 #### Windows (GPO)
5709 ```
5710 Software\Policies\Mozilla\Firefox\WindowsSSO = 0x1 | 0x0
5711 ```
5712 #### Windows (Intune)
5713 OMA-URI:
5714 ```
5715 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/WindowsSSO
5716 ```
5717 Value (string):
5718 ```
5719 <enabled/> or <disabled/>
5720 ```
5721 #### policies.json
5722 ```
5723 {
5724   "policies": {
5725     "WindowsSSO": true | false
5726   }
5727 }
5728 ```