README.md

   1 **These policies are in active development and so might contain changes that do not work with current versions of Firefox.**
   2
   3 **You should use the [officially released versions](https://github.com/mozilla/policy-templates/releases) if you are deploying changes.**
   4
   5 Policies can be specified using the [Group Policy templates on Windows](https://github.com/mozilla/policy-templates/tree/master/windows), [Intune on Windows](https://support.mozilla.org/kb/managing-firefox-intune), [configuration profiles on macOS](https://github.com/mozilla/policy-templates/tree/master/mac), or by creating a file called `policies.json`. On Windows, create a directory called `distribution` where the EXE is located and place the file there. On Mac, the file goes into `Firefox.app/Contents/Resources/distribution`.  On Linux, the file goes into `firefox/distribution`, where `firefox` is the installation directory for firefox, which varies by distribution or you can specify system-wide policy by placing the file in `/etc/firefox/policies`.
   6
   7 | Policy Name | Description
   8 | --- | --- |
   9 | **[`3rdparty`](#3rdparty)** | Set policies that WebExtensions can access via chrome.storage.managed.
  10 | **[`AllowedDomainsForApps`](#alloweddomainsforapps)** | Define domains allowed to access Google Workspace.
  11 | **[`AppAutoUpdate`](#appautoupdate)** | Enable or disable automatic application update.
  12 | **[`AppUpdatePin`](#appupdatepin)** | Prevent Firefox from being updated beyond the specified version.
  13 | **[`AppUpdateURL`](#appupdateurl)** | Change the URL for application update.
  14 | **[`Authentication`](#authentication)** | Configure sites that support integrated authentication.
  15 | **[`AutoLaunchProtocolsFromOrigins`](#autolaunchprotocolsfromorigins)** | Define a list of external protocols that can be used from listed origins without prompting the user.
  16 | **[`BackgroundAppUpdate`](#backgroundappupdate)** | Enable or disable the background updater (Windows only).
  17 | **[`BlockAboutAddons`](#blockaboutaddons)** | Block access to the Add-ons Manager (about:addons).
  18 | **[`BlockAboutConfig`](#blockaboutconfig)** | Block access to about:config.
  19 | **[`BlockAboutProfiles`](#blockaboutprofiles)** | Block access to About Profiles (about:profiles).
  20 | **[`BlockAboutSupport`](#blockaboutsupport)** | Block access to Troubleshooting Information (about:support).
  21 | **[`Bookmarks`](#bookmarks)** | Add bookmarks in either the bookmarks toolbar or menu.
  22 | **[`CaptivePortal`](#captiveportal)** | Enable or disable the detection of captive portals.
  23 | **[`Certificates`](#certificates)** |
  24 | **[`Certificates -> ImportEnterpriseRoots`](#certificates--importenterpriseroots)** | Trust certificates that have been added to the operating system certificate store by a user or administrator.
  25 | **[`Certificates -> Install`](#certificates--install)** | Install certificates into the Firefox certificate store.
  26 | **[`Cookies`](#cookies)** | Configure cookie preferences.
  27 | **[`DefaultDownloadDirectory`](#defaultdownloaddirectory)** | Set the default download directory.
  28 | **[`DisableAppUpdate`](#disableappupdate)** | Turn off application updates.
  29 | **[`DisableBuiltinPDFViewer`](#disablebuiltinpdfviewer)** | Disable the built in PDF viewer.
  30 | **[`DisabledCiphers`](#disabledciphers)** | Disable ciphers.
  31 | **[`DisableDefaultBrowserAgent`](#disabledefaultbrowseragent)** | Prevent the default browser agent from taking any actions (Windows only).
  32 | **[`DisableDeveloperTools`](#disabledevelopertools)** | Remove access to all developer tools.
  33 | **[`DisableFeedbackCommands`](#disablefeedbackcommands)** | Disable the menus for reporting sites.
  34 | **[`DisableFirefoxAccounts`](#disablefirefoxaccounts)** | Disable Firefox Accounts integration (Sync).
  35 | **[`DisableFirefoxScreenshots`](#disablefirefoxscreenshots)** | Remove access to Firefox Screenshots.
  36 | **[`DisableFirefoxStudies`](#disablefirefoxstudies)** | Disable Firefox studies (Shield).
  37 | **[`DisableForgetButton`](#disableforgetbutton)** | Disable the "Forget" button.
  38 | **[`DisableFormHistory`](#disableformhistory)** | Turn off saving information on web forms and the search bar.
  39 | **[`DisableMasterPasswordCreation`](#disablemasterpasswordcreation)** | Remove the master password functionality.
  40 | **[`DisablePasswordReveal`](#disablepasswordreveal)** | Do not allow passwords to be revealed in saved logins.
  41 | **[`DisablePocket`](#disablepocket)** | Remove Pocket in the Firefox UI.
  42 | **[`DisablePrivateBrowsing`](#disableprivatebrowsing)** | Remove access to private browsing.
  43 | **[`DisableProfileImport`](#disableprofileimport)** | Disables the "Import data from another browser" option in the bookmarks window.
  44 | **[`DisableProfileRefresh`](#disableprofilerefresh)** | Disable the Refresh Firefox button on about:support and support.mozilla.org
  45 | **[`DisableSafeMode`](#disablesafemode)** | Disable safe mode within the browser.
  46 | **[`DisableSecurityBypass`](#disablesecuritybypass)** | Prevent the user from bypassing security in certain cases.
  47 | **[`DisableSetDesktopBackground`](#disablesetdesktopbackground)** | Remove the "Set As Desktop Background..." menuitem when right clicking on an image.
  48 | **[`DisableSystemAddonUpdate`](#disablesystemaddonupdate)** | Prevent system add-ons from being installed or updated.
  49 | **[`DisableTelemetry`](#disabletelemetry)** | DisableTelemetry
  50 | **[`DisplayBookmarksToolbar`](#displaybookmarkstoolbar)** | Set the initial state of the bookmarks toolbar.
  51 | **[`DisplayBookmarksToolbar (Deprecated)`](#displaybookmarkstoolbar-deprecated)** | Set the initial state of the bookmarks toolbar.
  52 | **[`DisplayMenuBar`](#displaymenubar)** | Set the state of the menubar.
  53 | **[`DisplayMenuBar (Deprecated)`](#displaymenubar-deprecated)** | Set the initial state of the menubar.
  54 | **[`DNSOverHTTPS`](#dnsoverhttps)** | Configure DNS over HTTPS.
  55 | **[`DontCheckDefaultBrowser`](#dontcheckdefaultbrowser)** | Don't check if Firefox is the default browser at startup.
  56 | **[`DownloadDirectory`](#downloaddirectory)** | Set and lock the download directory.
  57 | **[`EnableTrackingProtection`](#enabletrackingprotection)** | Configure tracking protection.
  58 | **[`EncryptedMediaExtensions`](#encryptedmediaextensions)** | Enable or disable Encrypted Media Extensions and optionally lock it.
  59 | **[`EnterprisePoliciesEnabled`](#enterprisepoliciesenabled)** | Enable policy support on macOS.
  60 | **[`ExemptDomainFileTypePairsFromFileTypeDownloadWarnings`](#exemptdomainfiletypepairsfromfiletypedownloadwarnings)** | Disable warnings based on file extension for specific file types on domains.
  61 | **[`Extensions`](#extensions)** | Control the installation, uninstallation and locking of extensions.
  62 | **[`ExtensionSettings`](#extensionsettings)** | Manage all aspects of extensions.
  63 | **[`ExtensionUpdate`](#extensionupdate)** | Control extension updates.
  64 | **[`FirefoxHome`](#firefoxhome)** | Customize the Firefox Home page.
  65 | **[`FlashPlugin (Deprecated)`](#flashplugin-deprecated)** | Configure the default Flash plugin policy as well as origins for which Flash is allowed.
  66 | **[`GoToIntranetSiteForSingleWordEntryInAddressBar`](#gotointranetsiteforsinglewordentryinaddressbar)** | Force direct intranet site navigation instead of searching when typing single word entries in the address bar.
  67 | **[`Handlers`](#handlers)** | Configure default application handlers.
  68 | **[`HardwareAcceleration`](#hardwareacceleration)** | Control hardware acceleration.
  69 | **[`Homepage`](#homepage)** | Configure the default homepage and how Firefox starts.
  70 | **[`InstallAddonsPermission`](#installaddonspermission)** | Configure the default extension install policy as well as origins for extension installs are allowed.
  71 | **[`LegacyProfiles`](#legacyprofiles)** | Disable the feature enforcing a separate profile for each installation.
  72 | **[`LegacySameSiteCookieBehaviorEnabled`](#legacysamesitecookiebehaviorenabled)** | Enable default legacy SameSite cookie behavior setting.
  73 | **[`LegacySameSiteCookieBehaviorEnabledForDomainList`](#legacysamesitecookiebehaviorenabledfordomainlist)** | Revert to legacy SameSite behavior for cookies on specified sites.
  74 | **[`LocalFileLinks`](#localfilelinks)** | Enable linking to local files by origin.
  75 | **[`ManagedBookmarks`](#managedbookmarks)** | Configures a list of bookmarks managed by an administrator that cannot be changed by the user.
  76 | **[`ManualAppUpdateOnly`](#manualappupdateonly)** | Allow manual updates only and do not notify the user about updates.
  77 | **[`NetworkPrediction`](#networkprediction)** | Enable or disable network prediction (DNS prefetching).
  78 | **[`NewTabPage`](#newtabpage)** | Enable or disable the New Tab page.
  79 | **[`NoDefaultBookmarks`](#nodefaultbookmarks)** | Disable the creation of default bookmarks.
  80 | **[`OfferToSaveLogins`](#offertosavelogins)** | Control whether or not Firefox offers to save passwords.
  81 | **[`OfferToSaveLoginsDefault`](#offertosaveloginsdefault)** | Set the default value for whether or not Firefox offers to save passwords.
  82 | **[`OverrideFirstRunPage`](#overridefirstrunpage)** | Override the first run page.
  83 | **[`OverridePostUpdatePage`](#overridepostupdatepage)** | Override the upgrade page.
  84 | **[`PasswordManagerEnabled`](#passwordmanagerenabled)** | Remove (some) access to the password manager.
  85 | **[`PasswordManagerExceptions`](#passwordmanagerexceptions)** | Prevent Firefox from saving passwords for specific sites.
  86 | **[`PDFjs`](#pdfjs)** | Disable or configure PDF.js, the built-in PDF viewer.
  87 | **[`Permissions`](#permissions)** | Set permissions associated with camera, microphone, location, and notifications.
  88 | **[`PictureInPicture`](#pictureinpicture)** | Enable or disable Picture-in-Picture.
  89 | **[`PopupBlocking`](#popupblocking)** | Configure the default pop-up window policy as well as origins for which pop-up windows are allowed.
  90 | **[`Preferences`](#preferences)** | Set and lock preferences.
  91 | **[`Preferences (Deprecated)`](#preferences-deprecated)** | Set and lock some preferences.
  92 | **[`PrimaryPassword`](#primarypassword)** | Require or prevent using a primary (formerly master) password.
  93 | **[`PromptForDownloadLocation`](#promptfordownloadlocation)** | Ask where to save each file before downloading.
  94 | **[`Proxy`](#proxy)** | Configure proxy settings.
  95 | **[`RequestedLocales`](#requestedlocales)** | Set the the list of requested locales for the application in order of preference.
  96 | **[`SanitizeOnShutdown` (All)](#sanitizeonshutdown-all)** | Clear all data on shutdown.
  97 | **[`SanitizeOnShutdown` (Selective)](#sanitizeonshutdown-selective)** | Clear data on shutdown.
  98 | **[`SearchBar`](#searchbar)** | Set whether or not search bar is displayed.
  99 | **[`SearchEngines`](#searchengines-this-policy-is-only-available-on-the-esr)** |
 100 | **[`SearchEngines -> Add`](#searchengines--add)** | Add new search engines.
 101 | **[`SearchEngines -> Default`](#searchengines--default)** | Set the default search engine.
 102 | **[`SearchEngines -> PreventInstalls`](#searchengines--preventinstalls)** | Prevent installing search engines from webpages.
 103 | **[`SearchEngines -> Remove`](#searchengines--remove)** | Hide built-in search engines.
 104 | **[`SearchSuggestEnabled`](#searchsuggestenabled)** | Enable search suggestions.
 105 | **[`SecurityDevices`](#securitydevices)** | Install PKCS #11 modules.
 106 | **[`ShowHomeButton`](#showhomebutton)** | Show the home button on the toolbar.
 107 | **[`SSLVersionMax`](#sslversionmax)** | Set and lock the maximum version of TLS.
 108 | **[`SSLVersionMin`](#sslversionmin)** | Set and lock the minimum version of TLS.
 109 | **[`StartDownloadsInTempDirectory`](#startdownloadsintempdirectory)** | Force downloads to start off in a local, temporary location rather than the default download directory.
 110 | **[`SupportMenu`](#supportmenu)** | Add a menuitem to the help menu for specifying support information.
 111 | **[`UserMessaging`](#usermessaging)** | Don't show certain messages to the user.
 112 | **[`UseSystemPrintDialog`](#usesystemprintdialog)** | Print using the system print dialog instead of print preview.
 113 | **[`WebsiteFilter`](#websitefilter)** | Block websites from being visited.
 114 | **[`WindowsSSO`](#windowssso)** | Allow Windows single sign-on for Microsoft, work, and school accounts.
 115
 116 ### 3rdparty
 117
 118 Allow WebExtensions to configure policy. For more information, see [Adding policy support to your extension](https://extensionworkshop.com/documentation/enterprise/adding-policy-support-to-your-extension/).
 119
 120 For GPO and Intune, the extension developer should provide an ADMX file.
 121
 122 **Compatibility:** Firefox 68\
 123 **CCK2 Equivalent:** N/A\
 124 **Preferences Affected:** N/A
 125
 126 #### macOS
 127 ```
 128 <dict>
 129   <key>3rdparty</key>
 130   <dict>
 131     <key>Extensions</key>
 132     <dict>
 133       <key>uBlock0@raymondhill.net</key>
 134       <dict>
 135         <key>adminSettings</key>
 136         <dict>
 137           <key>selectedFilterLists</key>
 138           <array>
 139             <string>ublock-privacy</string>
 140             <string>ublock-badware</string>
 141             <string>ublock-filters</string>
 142             <string>user-filters</string>
 143           </array>
 144         </dict>
 145       </dict>
 146     </dict>
 147   </dict>
 148 </dict>
 149 ```
 150 #### policies.json
 151 ```
 152 {
 153   "policies": {
 154     "3rdparty": {
 155       "Extensions": {
 156         "uBlock0@raymondhill.net": {
 157           "adminSettings": {
 158             "selectedFilterLists": [
 159               "ublock-privacy",
 160               "ublock-badware",
 161               "ublock-filters",
 162               "user-filters"
 163             ]
 164           }
 165         }
 166       }
 167     }
 168   }
 169 }
 170 ```
 171
 172 ### AllowedDomainsForApps
 173
 174 Define domains allowed to access Google Workspace.
 175
 176 This policy is based on the [Chrome policy](https://chromeenterprise.google/policies/#AllowedDomainsForApps) of the same name.
 177
 178 If this policy is enabled, users can only access Google Workspace using accounts from the specified domains. If you want to allow Gmail, you can add ```consumer_accounts``` to the list.
 179
 180 **Compatibility:** Firefox 89, Firefox ESR 78.11\
 181 **CCK2 Equivalent:** N/A\
 182 **Preferences Affected:** N/A
 183
 184 #### Windows (GPO)
 185 ```
 186 Software\Policies\Mozilla\Firefox\AllowedDomainsForApps = "managedfirefox.com,example.com"
 187 ```
 188 #### Windows (Intune)
 189 OMA-URI:
 190 ```
 191 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AllowedDomainsForApps
 192 ```
 193 Value (string):
 194 ```
 195 <enabled/>
 196 <data id="AllowedDomainsForApps" value="managedfirefox.com,example.com"/>
 197 ```
 198 #### macOS
 199 ```
 200 <dict>
 201   <key>AllowedDomainsForApps</key>
 202   <string>managedfirefox.com,example.com</string>
 203 </dict>
 204 ```
 205 #### policies.json
 206 ```
 207 {
 208   "policies": {
 209     "AllowedDomainsForApps": "managedfirefox.com,example.com"
 210   }
 211 }
 212 ```
 213 ### AppAutoUpdate
 214
 215 Enable or disable **automatic** application update.
 216
 217 If set to true, application updates are installed without user approval within Firefox. The operating system might still require approval.
 218
 219 If set to false, application updates are downloaded but the user can choose when to install the update.
 220
 221 If you have disabled updates via `DisableAppUpdate`, this policy has no effect.
 222
 223 **Compatibility:** Firefox 75, Firefox ESR 68.7\
 224 **CCK2 Equivalent:** N/A\
 225 **Preferences Affected:** `app.update.auto`
 226
 227 #### Windows (GPO)
 228 ```
 229 Software\Policies\Mozilla\Firefox\AppAutoUpdate = 0x1 | 0x0
 230 ```
 231 #### Windows (Intune)
 232 OMA-URI:
 233 ```
 234 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AppAutoUpdate
 235 ```
 236 Value (string):
 237 ```
 238 <enabled/> or <disabled/>
 239 ```
 240 #### macOS
 241 ```
 242 <dict>
 243   <key>AppAutoUpdate</key>
 244   <true/> | <false/>
 245 </dict>
 246 ```
 247 #### policies.json
 248 ```
 249 {
 250   "policies": {
 251     "AppAutoUpdate": true | false
 252   }
 253 }
 254 ```
 255 ### AppUpdatePin
 256
 257 Prevent Firefox from being updated beyond the specified version.
 258
 259 You can specify the any version as ```xx.``` and Firefox will be updated with all minor versions, but will not be updated beyond the major version.
 260
 261 You can also specify the version as ```xx.xx``` and Firefox will be updated with all patch versions, but will not be updated beyond the minor version.
 262
 263 You should specify a version that exists or is guaranteed to exist. If you specify a version that doesn't end up existing, Firefox will update beyond that version.
 264
 265 **Compatibility:** Firefox 102,\
 266 **CCK2 Equivalent:** N/A\
 267 **Preferences Affected:** N/A
 268
 269 #### Windows (GPO)
 270 ```
 271 Software\Policies\Mozilla\Firefox\AppUpdatePin = "106."
 272 ```
 273 #### Windows (Intune)
 274 OMA-URI:
 275 ```
 276 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AppUpdatePin
 277 ```
 278 Value (string):
 279 ```
 280 <enabled/>
 281 <data id="AppUpdatePin" value="106."/>
 282 ```
 283 #### macOS
 284 ```
 285 <dict>
 286   <key>AppUpdatePin</key>
 287   <string>106.</string>
 288 </dict>
 289 ```
 290 #### policies.json
 291 ```
 292 {
 293   "policies": {
 294     "AppUpdatePin": "106."
 295   }
 296 }
 297 ```
 298 ### AppUpdateURL
 299
 300 Change the URL for application update if you are providing Firefox updates from a custom update server.
 301
 302 **Compatibility:** Firefox 62, Firefox ESR 60.2\
 303 **CCK2 Equivalent:** N/A\
 304 **Preferences Affected:** `app.update.url`
 305
 306 #### Windows (GPO)
 307 ```
 308 Software\Policies\Mozilla\Firefox\AppUpdateURL = "https://yoursite.com"
 309 ```
 310 #### Windows (Intune)
 311 OMA-URI:
 312 ```
 313 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AppUpdateURL
 314 ```
 315 Value (string):
 316 ```
 317 <enabled/>
 318 <data id="AppUpdateURL" value="https://yoursite.com"/>
 319 ```
 320 #### macOS
 321 ```
 322 <dict>
 323   <key>AppUpdateURL</key>
 324   <string>https://yoursite.com</string>
 325 </dict>
 326 ```
 327 #### policies.json
 328 ```
 329 {
 330   "policies": {
 331     "AppUpdateURL": "https://yoursite.com"
 332   }
 333 }
 334 ```
 335 ### Authentication
 336
 337 Configure sites that support integrated authentication.
 338
 339 See [Integrated authentication](https://htmlpreview.github.io/?https://github.com/mdn/archived-content/blob/main/files/en-us/mozilla/integrated_authentication/raw.html) for more information.
 340
 341 `PrivateBrowsing` enables integrated authentication in private browsing.
 342
 343 **Compatibility:** Firefox 60, Firefox ESR 60 (AllowNonFQDN added in 62/60.2, AllowProxies added in 70/68.2, Locked added in 71/68.3, PrivateBrowsing added in 77/68.9)\
 344 **CCK2 Equivalent:** N/A\
 345 **Preferences Affected:** `network.negotiate-auth.trusted-uris`,`network.negotiate-auth.delegation-uris`,`network.automatic-ntlm-auth.trusted-uris`,`network.automatic-ntlm-auth.allow-non-fqdn`,`network.negotiate-auth.allow-non-fqdn`,`network.automatic-ntlm-auth.allow-proxies`,`network.negotiate-auth.allow-proxies`,`network.auth.private-browsing-sso`
 346
 347 #### Windows (GPO)
 348 ```
 349 Software\Policies\Mozilla\Firefox\Authentication\SPNEGO\1 = "mydomain.com"
 350 Software\Policies\Mozilla\Firefox\Authentication\SPNEGO\2 = "https://myotherdomain.com"
 351 Software\Policies\Mozilla\Firefox\Authentication\Delegated\1 = "mydomain.com"
 352 Software\Policies\Mozilla\Firefox\Authentication\Delegated\2 = "https://myotherdomain.com"
 353 Software\Policies\Mozilla\Firefox\Authentication\NTLM\1 = "mydomain.com"
 354 Software\Policies\Mozilla\Firefox\Authentication\NTLM\2 = "https://myotherdomain.com"
 355 Software\Policies\Mozilla\Firefox\Authentication\AllowNonFQDN\SPNEGO = 0x1 | 0x0
 356 Software\Policies\Mozilla\Firefox\Authentication\AllowNonFQDN\NTLM = 0x1 | 0x0
 357 Software\Policies\Mozilla\Firefox\Authentication\AllowProxies\SPNEGO = 0x1 | 0x0
 358 Software\Policies\Mozilla\Firefox\Authentication\AllowProxies\NTLM = 0x1 | 0x0
 359 Software\Policies\Mozilla\Firefox\Authentication\Locked = 0x1 | 0x0
 360 Software\Policies\Mozilla\Firefox\Authentication\PrivateBrowsing = 0x1 | 0x0
 361 ```
 362 #### Windows (Intune)
 363 OMA-URI:
 364 ```
 365 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_SPNEGO
 366 ```
 367 Value (string):
 368 ```
 369 <enabled/>
 370 <data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
 371 ```
 372 OMA-URI:
 373 ```
 374 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_Delegated
 375 ```
 376 Value (string):
 377 ```
 378 <enabled/>
 379 <data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
 380 ```
 381 OMA-URI:
 382 ```
 383 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_NTLM
 384 ```
 385 Value (string):
 386 ```
 387 <enabled/>
 388 <data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
 389 ```
 390 OMA-URI:
 391 ```
 392 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_AllowNonFQDN
 393 ```
 394 Value (string):
 395 ```
 396 <enabled/>
 397 <data id="Authentication_AllowNonFQDN_NTLM" value="true | false"/>
 398 <data id="Authentication_AllowNonFQDN_SPNEGO" value="true | false"/>
 399 ```
 400 OMA-URI:
 401 ```
 402 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_Locked
 403 ```
 404 Value (string):
 405 ```
 406 <enabled/> or <disabled/>
 407 ```
 408 OMA-URI:
 409 ```
 410 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_PrivateBrowsing
 411 ```
 412 Value (string):
 413 ```
 414 <enabled/> or <disabled/>
 415 ```
 416 #### macOS
 417 ```
 418 <dict>
 419   <key>Authentication</key>
 420   <dict>
 421     <key>SPNEGO</key>
 422     <array>
 423       <string>mydomain.com</string>
 424       <string>https://myotherdomain.com</string>
 425     </array>
 426     <key>Delegated</key>
 427     <array>
 428       <string>mydomain.com</string>
 429       <string>https://myotherdomain.com</string>
 430     </array>
 431     <key>NTLM</key>
 432     <array>
 433       <string>mydomain.com</string>
 434       <string>https://myotherdomain.com</string>
 435     </array>
 436     <key>AllowNonFQDN</key>
 437       <dict>
 438       <key>SPNEGO</key>
 439       <true/> | <false/>
 440       <key>NTLM</key>
 441       <true/> | <false/>
 442     </dict>
 443     <key>AllowProxies</key>
 444       <dict>
 445       <key>SPNEGO</key>
 446       <true/> | <false/>
 447       <key>NTLM</key>
 448       <true/> | <false/>
 449     </dict>
 450     <key>Locked</key>
 451     <true/> | <false/>
 452     <key>PrivateBrowsing</key>
 453     <true/> | <false/>
 454   </dict>
 455 </dict>
 456 ```
 457 #### policies.json
 458 ```
 459 {
 460   "policies": {
 461     "Authentication": {
 462       "SPNEGO": ["mydomain.com", "https://myotherdomain.com"],
 463       "Delegated": ["mydomain.com", "https://myotherdomain.com"],
 464       "NTLM": ["mydomain.com", "https://myotherdomain.com"],
 465       "AllowNonFQDN": {
 466         "SPNEGO": true | false,
 467         "NTLM": true | false
 468       },
 469       "AllowProxies": {
 470         "SPNEGO": true | false,
 471         "NTLM": true | false
 472       },
 473       "Locked": true | false,
 474       "PrivateBrowsing": true | false
 475     }
 476   }
 477 }
 478 ```
 479 ### AutoLaunchProtocolsFromOrigins
 480 Define a list of external protocols that can be used from listed origins without prompting the user. The origin is the scheme plus the hostname.
 481
 482 The syntax of this policy is exactly the same as the [Chrome AutoLaunchProtocolsFromOrigins policy](https://cloud.google.com/docs/chrome-enterprise/policies/?policy=AutoLaunchProtocolsFromOrigins) except that you can only use valid origins (not just hostnames). This also means that you cannot specify an asterisk for all origins.
 483
 484 The schema is:
 485 ```
 486 {
 487  "items": {
 488   "properties": {
 489    "allowed_origins": {
 490     "items": {
 491      "type": "string"
 492     },
 493     "type": "array"
 494    },
 495    "protocol": {
 496     "type": "string"
 497    }
 498   },
 499   "required": [
 500    "protocol",
 501    "allowed_origins"
 502   ],
 503   "type": "object"
 504  },
 505  "type": "array"
 506 }
 507 ```
 508 **Compatibility:** Firefox 90, Firefox ESR 78.12\
 509 **CCK2 Equivalent:** N/A\
 510 **Preferences Affected:** N/A
 511
 512 #### Windows (GPO)
 513 Software\Policies\Mozilla\Firefox\AutoLaunchProtocolsFromOrigins (REG_MULTI_SZ) =
 514 ```
 515 [
 516   {
 517     "protocol": "zoommtg",
 518     "allowed_origins": [
 519       "https://somesite.zoom.us"
 520     ]
 521   }
 522 ]
 523 ```
 524 #### Windows (Intune)
 525 OMA-URI:
 526 ```
 527 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AutoLaunchProtocolsFromOrigins
 528 ```
 529 Value (string):
 530 ```
 531 <enabled/>
 532 <data id="JSON" value='
 533 [
 534   {
 535     "protocol": "zoommtg",
 536     "allowed_origins": [
 537       "https://somesite.zoom.us"
 538     ]
 539   }
 540 ]'/>
 541 ```
 542 #### macOS
 543 ```
 544 <dict>
 545   <key>AutoLaunchProtocolsFromOrigins</key>
 546   <array>
 547     <dict>
 548       <key>protocol</key>
 549       <string>zoommtg</string>
 550       <key>allowed_origins</key>
 551       <array>
 552         <string>https://somesite.zoom.us</string>
 553       </array>
 554     </dict>
 555   </array>
 556 </dict>
 557 ```
 558 #### policies.json
 559 ```
 560 {
 561   "policies": {
 562     "AutoLaunchProtocolsFromOrigins": [{
 563       "protocol": "zoommtg",
 564       "allowed_origins": [
 565         "https://somesite.zoom.us"
 566       ]
 567     }]
 568   }
 569 }
 570 ```
 571 ### BackgroundAppUpdate
 572
 573 Enable or disable **automatic** application update **in the background**, when the application is not running.
 574
 575 If set to true, application updates may be installed (without user approval) in the background, even when the application is not running. The operating system might still require approval.
 576
 577 If set to false, the application will not try to install updates when the application is not running.
 578
 579 If you have disabled updates via `DisableAppUpdate` or disabled automatic updates via `AppAutoUpdate`, this policy has no effect.
 580
 581 **Compatibility:** Firefox 90 (Windows only)\
 582 **CCK2 Equivalent:** N/A\
 583 **Preferences Affected:** `app.update.background.enabled`
 584
 585 #### Windows (GPO)
 586 ```
 587 Software\Policies\Mozilla\Firefox\BackgroundAppUpdate = 0x1 | 0x0
 588 ```
 589 #### Windows (Intune)
 590 OMA-URI:
 591 ```
 592 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BackgroundAppUpdate
 593 ```
 594 Value (string):
 595 ```
 596 <enabled/> or <disabled/>
 597 ```
 598 #### macOS
 599 ```
 600 <dict>
 601   <key>BackgroundAppUpdate</key>
 602   <true/> | <false/>
 603 </dict>
 604 ```
 605 #### policies.json
 606 ```
 607 {
 608   "policies": {
 609     "BackgroundAppUpdate": true | false
 610   }
 611 }
 612 ```
 613 ### BlockAboutAddons
 614
 615 Block access to the Add-ons Manager (about:addons).
 616
 617 **Compatibility:** Firefox 60, Firefox ESR 60\
 618 **CCK2 Equivalent:** `disableAddonsManager`\
 619 **Preferences Affected:** N/A
 620
 621 #### Windows (GPO)
 622 ```
 623 Software\Policies\Mozilla\Firefox\BlockAboutAddons = 0x1 | 0x0
 624 ```
 625 #### Windows (Intune)
 626 OMA-URI:
 627 ```
 628 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutAddons
 629 ```
 630 Value (string):
 631 ```
 632 <enabled/> or <disabled/>
 633 ```
 634 #### macOS
 635 ```
 636 <dict>
 637   <key>BlockAboutAddons</key>
 638   <true/> | <false/>
 639 </dict>
 640 ```
 641 #### policies.json
 642 ```
 643 {
 644   "policies": {
 645     "BlockAboutAddons": true | false
 646   }
 647 }
 648 ```
 649 ### BlockAboutConfig
 650
 651 Block access to about:config.
 652
 653 **Compatibility:** Firefox 60, Firefox ESR 60\
 654 **CCK2 Equivalent:** `disableAboutConfig`\
 655 **Preferences Affected:** N/A
 656
 657 #### Windows (GPO)
 658 ```
 659 Software\Policies\Mozilla\Firefox\BlockAboutConfig = 0x1 | 0x0
 660 ```
 661 #### Windows (Intune)
 662 OMA-URI:
 663 ```
 664 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutConfig
 665 ```
 666 Value (string):
 667 ```
 668 <enabled/> or <disabled/>
 669 ```
 670 #### macOS
 671 ```
 672 <dict>
 673   <key>BlockAboutConfig</key>
 674   <true/> | <false/>
 675 </dict>
 676 ```
 677 #### policies.json
 678 ```
 679 {
 680   "policies": {
 681     "BlockAboutConfig": true | false
 682   }
 683 }
 684 ```
 685 ### BlockAboutProfiles
 686
 687 Block access to About Profiles (about:profiles).
 688
 689 **Compatibility:** Firefox 60, Firefox ESR 60\
 690 **CCK2 Equivalent:** `disableAboutProfiles`\
 691 **Preferences Affected:** N/A
 692
 693 #### Windows (GPO)
 694 ```
 695 Software\Policies\Mozilla\Firefox\BlockAboutProfiles = 0x1 | 0x0
 696 ```
 697 #### Windows (Intune)
 698 OMA-URI:
 699 ```
 700 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutProfiles
 701 ```
 702 Value (string):
 703 ```
 704 <enabled/> or <disabled/>
 705 ```
 706 #### macOS
 707 ```
 708 <dict>
 709   <key>BlockAboutProfiles</key>
 710   <true/> | <false/>
 711 </dict>
 712 ```
 713 #### policies.json
 714 ```
 715 {
 716   "policies": {
 717     "BlockAboutProfiles": true | false
 718   }
 719 }
 720 ```
 721 ### BlockAboutSupport
 722
 723 Block access to Troubleshooting Information (about:support).
 724
 725 **Compatibility:** Firefox 60, Firefox ESR 60\
 726 **CCK2 Equivalent:** `disableAboutSupport`\
 727 **Preferences Affected:** N/A
 728
 729 #### Windows (GPO)
 730 ```
 731 Software\Policies\Mozilla\Firefox\BlockAboutSupport = 0x1 | 0x0
 732 ```
 733 #### Windows (Intune)
 734 OMA-URI:
 735 ```
 736 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutSupport
 737 ```
 738 Value (string):
 739 ```
 740 <enabled/> or <disabled/>
 741 ```
 742 #### macOS
 743 ```
 744 <dict>
 745   <key>BlockAboutSupport</key>
 746   <true/> | <false/>
 747 </dict>
 748 ```
 749 #### policies.json
 750 ```
 751 {
 752   "policies": {
 753     "BlockAboutSupport": true | false
 754   }
 755 }
 756 ```
 757 ### Bookmarks
 758
 759 Note: [`ManagedBookmarks`](#managedbookmarks) is the new recommended way to add bookmarks. This policy will continue to be supported.
 760
 761 Add bookmarks in either the bookmarks toolbar or menu. Only `Title` and `URL` are required. If `Placement` is not specified, the bookmark will be placed on the toolbar. If `Folder` is specified, it is automatically created and bookmarks with the same folder name are grouped together.
 762
 763 If you want to clear all bookmarks set with this policy, you can set the value to an empty array (```[]```). This can be on Windows via the new Bookmarks (JSON) policy available with GPO and Intune.
 764
 765 **Compatibility:** Firefox 60, Firefox ESR 60\
 766 **CCK2 Equivalent:** `bookmarks.toolbar`,`bookmarks.menu`\
 767 **Preferences Affected:** N/A
 768
 769 #### Windows (GPO)
 770 ```
 771 Software\Policies\Mozilla\Firefox\Bookmarks\1\Title = "Example"
 772 Software\Policies\Mozilla\Firefox\Bookmarks\1\URL = "https://example.com"
 773 Software\Policies\Mozilla\Firefox\Bookmarks\1\Favicon = "https://example.com/favicon.ico"
 774 Software\Policies\Mozilla\Firefox\Bookmarks\1\Placement = "toolbar" | "menu"
 775 Software\Policies\Mozilla\Firefox\Bookmarks\1\Folder = "FolderName"
 776
 777 Software\Policies\Mozilla\Firefox\Bookmarks (REG_MULTI_SZ) =
 778 ```
 779 []
 780 ```
 781
 782 ```
 783 #### Windows (Intune)
 784 OMA-URI:
 785 ```
 786 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Bookmarks/Bookmark01
 787 ```
 788 Value (string):
 789 ```
 790 <enabled/>
 791 <data id="BookmarkTitle" value="Example"/>
 792 <data id="BookmarkURL" value="https://example.com"/>
 793 <data id="BookmarkFavicon" value="https://example.com/favicon.ico"/>
 794 <data id="BookmarkPlacement" value="toolbar | menu"/>
 795 <data id="BookmarkFolder" value="FolderName"/>
 796 ```
 797 OMA-URI:
 798 ```
 799 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Bookmarks
 800 ```
 801 Value (string):
 802 ```
 803 <enabled/>
 804 <data id="JSON" value='[]'/>
 805 ```
 806 #### macOS
 807 ```
 808 <dict>
 809   <key>Bookmarks</key>
 810   <array>
 811     <dict>
 812       <key>Title</key>
 813       <string>Example</string>
 814       <key>URL</key>
 815       <string>https://example.com</string>
 816       <key>Favicon</key>
 817       <string>https://example.com/favicon.ico</string>
 818       <key>Placement</key>
 819       <string>toolbar | menu</string>
 820       <key>Folder</key>
 821       <string>FolderName</string>
 822     </dict>
 823   </array>
 824 </dict>
 825 ```
 826 #### policies.json
 827 ```
 828 {
 829   "policies": {
 830     "Bookmarks": [
 831       {
 832         "Title": "Example",
 833         "URL": "https://example.com",
 834         "Favicon": "https://example.com/favicon.ico",
 835         "Placement": "toolbar" | "menu",
 836         "Folder": "FolderName"
 837       }
 838     ]
 839   }
 840 }
 841 ```
 842 ### CaptivePortal
 843 Enable or disable the detection of captive portals.
 844
 845 **Compatibility:** Firefox 67, Firefox ESR 60.7\
 846 **CCK2 Equivalent:** N/A\
 847 **Preferences Affected:** `network.captive-portal-service.enabled`
 848
 849 #### Windows (GPO)
 850 ```
 851 Software\Policies\Mozilla\Firefox\CaptivePortal = 0x1 | 0x0
 852 ```
 853 #### Windows (Intune)
 854 OMA-URI:
 855 ```
 856 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/CaptivePortal
 857 ```
 858 Value (string):
 859 ```
 860 <enabled/> or <disabled/>
 861 ```
 862 #### macOS
 863 ```
 864 <dict>
 865   <key>CaptivePortal</key>
 866   <true/> | <false/>
 867 </dict>
 868 ```
 869 #### policies.json
 870 ```
 871 {
 872   "policies": {
 873     "CaptivePortal": true | false
 874   }
 875 }
 876 ```
 877 ### Certificates
 878
 879 ### Certificates | ImportEnterpriseRoots
 880
 881 Trust certificates that have been added to the operating system certificate store by a user or administrator.
 882
 883 Note: This policy only works on Windows and macOS. For Linux discussion, see [bug 1600509](https://bugzilla.mozilla.org/show_bug.cgi?id=1600509).
 884
 885 See https://support.mozilla.org/kb/setting-certificate-authorities-firefox for more detail.
 886
 887 **Compatibility:** Firefox 60, Firefox ESR 60 (macOS support in Firefox 63, Firefox ESR 68)\
 888 **CCK2 Equivalent:** N/A\
 889 **Preferences Affected:** `security.enterprise_roots.enabled`
 890
 891 #### Windows (GPO)
 892 ```
 893 Software\Policies\Mozilla\Firefox\Certificates\ImportEnterpriseRoots = 0x1 | 0x0
 894 ```
 895 #### Windows (Intune)
 896 OMA-URI:
 897 ```
 898 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Certificates/Certificates_ImportEnterpriseRoots
 899 ```
 900 Value (string):
 901 ```
 902 <enabled/> or <disabled/>
 903 ```
 904 #### macOS
 905 ```
 906 <dict>
 907   <key>Certificates</key>
 908   <dict>
 909     <key>ImportEnterpriseRoots</key>
 910     <true/> | <false/>
 911   </dict>
 912 </dict>
 913 ```
 914 #### policies.json
 915 ```
 916 {
 917   "policies": {
 918     "Certificates": {
 919       "ImportEnterpriseRoots": true | false
 920     }
 921   }
 922 }
 923 ```
 924 ### Certificates | Install
 925
 926 Install certificates into the Firefox certificate store. If only a filename is specified, Firefox searches for the file in the following locations:
 927
 928 - Windows
 929   - %USERPROFILE%\AppData\Local\Mozilla\Certificates
 930   - %USERPROFILE%\AppData\Roaming\Mozilla\Certificates
 931 - macOS
 932   - /Library/Application Support/Mozilla/Certificates
 933   - ~/Library/Application Support/Mozilla/Certificates
 934 - Linux
 935   - /usr/lib/mozilla/certificates
 936   - /usr/lib64/mozilla/certificates
 937   - ~/.mozilla/certificates
 938
 939 Starting with Firefox 65, Firefox 60.5 ESR, a fully qualified path can be used, including UNC paths. You should use the native path style for your operating system. We do not support using %USERPROFILE% or other environment variables on Windows.
 940
 941 If you are specifying the path in the policies.json file on Windows, you need to escape your backslashes (`\\`) which means that for UNC paths, you need to escape both (`\\\\`). If you use group policy, you only need one backslash.
 942
 943 Certificates are installed using the trust string `CT,CT,`.
 944
 945 Binary (DER) and ASCII (PEM) certificates are both supported.
 946
 947 **Compatibility:** Firefox 64, Firefox ESR 64\
 948 **CCK2 Equivalent:** `certs.ca`\
 949 **Preferences Affected:** N/A
 950
 951 #### Windows (GPO)
 952 ```
 953 Software\Policies\Mozilla\Firefox\Certificates\Install\1 = "cert1.der"
 954 Software\Policies\Mozilla\Firefox\Certificates\Install\2 = "C:\Users\username\cert2.pem"
 955 ```
 956 #### Windows (Intune)
 957 OMA-URI:
 958 ```
 959 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Certificates/Certificates_Install
 960 ```
 961 Value (string):
 962 ```
 963 <enabled/>
 964 <data id="Certificates_Install" value="1&#xF000;cert1.der&#xF000;2&#xF000;C:\Users\username\cert2.pem"/>
 965 ```
 966 #### macOS
 967 ```
 968 <dict>
 969   <key>Certificates</key>
 970   <dict>
 971     <key>Install</key>
 972     <array>
 973       <string>cert1.der</string>
 974       <string>/Users/username/cert2.pem</string>
 975     </array>
 976   </dict>
 977 </dict>
 978 ```
 979 #### policies.json
 980 ```
 981 {
 982   "policies": {
 983     "Certificates": {
 984       "Install": ["cert1.der", "/home/username/cert2.pem"]
 985     }
 986   }
 987 }
 988 ```
 989 ### Cookies
 990 Configure cookie preferences.
 991
 992 `Allow` is a list of origins (not domains) where cookies are always allowed. You must include http or https.
 993
 994 `AllowSession` is a list of origins (not domains) where cookies are only allowed for the current session. You must include http or https.
 995
 996 `Block` is a list of origins (not domains) where cookies are always blocked. You must include http or https.
 997
 998 `Behavior` sets the default behavior for cookies based on the values below.
 999
1000 `BehaviorPrivateBrowsing` sets the default behavior for cookies in private browsing based on the values below.
1001
1002 | Value | Description
1003 | --- | ---
1004 | accept | Accept all cookies
1005 | reject-foreign | Reject third party cookies
1006 | reject | Reject all cookies
1007 | limit-foreign | Reject third party cookies for sites you haven't visited
1008 | reject-tracker | Reject cookies for known trackers (default)
1009 | reject-tracker-and-partition-foreign | Reject cookies for known trackers and partition third-party cookies (Total Cookie Protection) (default for private browsing)
1010
1011 `Default` (Deprecated) determines whether cookies are accepted at all.
1012
1013 `AcceptThirdParty` (Deprecated) determines how third-party cookies are handled.
1014
1015 `ExpireAtSessionEnd` determines when cookies expire.
1016
1017 `RejectTracker` (Deprecated) only rejects cookies for trackers.
1018
1019 `Locked` prevents the user from changing cookie preferences.
1020
1021 **Compatibility:** Firefox 60, Firefox ESR 60 (RejectTracker added in Firefox 63, AllowSession added in Firefox 79/78.1, Behavior added in Firefox 95/91.4)\
1022 **CCK2 Equivalent:** N/A\
1023 **Preferences Affected:** `network.cookie.cookieBehavior`, `network.cookie.cookieBehavior.pbmode`, `network.cookie.lifetimePolicy`
1024
1025 #### Windows (GPO)
1026 ```
1027 Software\Policies\Mozilla\Firefox\Cookies\Allow\1 = "https://example.com"
1028 Software\Policies\Mozilla\Firefox\Cookies\AllowSession\1 = "https://example.edu"
1029 Software\Policies\Mozilla\Firefox\Cookies\Block\1 = "https://example.org"
1030 Software\Policies\Mozilla\Firefox\Cookies\Default = 0x1 | 0x0
1031 Software\Policies\Mozilla\Firefox\Cookies\AcceptThirdParty = "always" | "never" | "from-visited"
1032 Software\Policies\Mozilla\Firefox\Cookies\ExpireAtSessionEnd = 0x1 | 0x0
1033 Software\Policies\Mozilla\Firefox\Cookies\RejectTracker = 0x1 | 0x0
1034 Software\Policies\Mozilla\Firefox\Cookies\Behavior = "accept" | "reject-foreign" | "reject" | "limit-foreign" | "reject-tracker" | "reject-tracker-and-partition-foreign"
1035 Software\Policies\Mozilla\Firefox\Cookies\BehaviorPrivateBrowsing = "accept" | "reject-foreign" | "reject" | "limit-foreign" | "reject-tracker" | "reject-tracker-and-partition-foreign"
1036 Software\Policies\Mozilla\Firefox\Cookies\Locked = 0x1 | 0x0
1037 ```
1038 #### Windows (Intune)
1039 OMA-URI:
1040 ```
1041 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Allow
1042 ```
1043 Value (string):
1044 ```
1045 <enabled/>
1046 <data id="Permissions" value="1&#xF000;https://example.com"/>
1047 ```
1048 OMA-URI:
1049 ```
1050 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_AllowSession
1051 ```
1052 Value (string):
1053 ```
1054 <enabled/>
1055 <data id="Permissions" value="1&#xF000;https://example.edu"/>
1056 ```
1057 OMA-URI:
1058 ```
1059 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Block
1060 ```
1061 Value (string):
1062 ```
1063 <enabled/>
1064 <data id="Permissions" value="1&#xF000;https://example.org"/>
1065 ```
1066 OMA-URI:
1067 ```
1068 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Default
1069 ```
1070 Value (string):
1071 ```
1072 <enabled/> or <disabled/>
1073 ```
1074 OMA-URI:
1075 ```
1076 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_AcceptThirdParty
1077 ```
1078 Value (string):
1079 ```
1080 <enabled/>
1081 <data id="Cookies_AcceptThirdParty" value="always | never | from-visited"/>
1082 ```
1083 OMA-URI:
1084 ```
1085 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_ExpireAtSessionEnd
1086 ```
1087 Value (string):
1088 ```
1089 <enabled/> or <disabled/>
1090 ```
1091 OMA-URI:
1092 ```
1093 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_RejectTracker
1094 ```
1095 Value (string):
1096 ```
1097 <enabled/> or <disabled/>
1098 ```
1099 OMA-URI:
1100 ```
1101 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Locked
1102 ```
1103 Value (string):
1104 ```
1105 <enabled/> or <disabled/>
1106 ```
1107 OMA-URI:
1108 ```
1109 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Behavior
1110 ```
1111 Value (string):
1112 ```
1113 <enabled/>
1114 <data id="Cookies_Behavior" value="accept | reject-foreign | reject | limit-foreign | reject-tracker | reject-tracker-and-partition-foreign"/>
1115 ```
1116 OMA-URI:
1117 ```
1118 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_BehaviorPrivateBrowsing
1119 ```
1120 Value (string):
1121 ```
1122 <enabled/>
1123 <data id="Cookies_BehaviorPrivateBrowsing" value="accept | reject-foreign | reject | limit-foreign | reject-tracker | reject-tracker-and-partition-foreign"/>
1124 ```
1125 #### macOS
1126 ```
1127 <dict>
1128   <key>Cookies</key>
1129   <dict>
1130     <key>Allow</key>
1131     <array>
1132       <string>http://example.com</string>
1133     </array>
1134     <key>AllowSession</key>
1135     <array>
1136       <string>http://example.edu</string>
1137     </array>
1138     <key>Block</key>
1139     <array>
1140       <string>http://example.org</string>
1141     </array>
1142     <key>Default</key>
1143     <true/> | <false/>
1144     <key>AcceptThirdParty</key>
1145     <string>always | never | from-visited</string>
1146     <key>ExpireAtSessionEnd</key>
1147     <true/> | <false/>
1148     <key>RejectTracker</key>
1149     <true/> | <false/>
1150     <key>Locked</key>
1151     <true/> | <false/>
1152     <key>Behavior</key>
1153     <string>accept | reject-foreign | reject | limit-foreign | reject-tracker | reject-tracker-and-partition-foreign</string>
1154     <key>BehaviorPrivateBrowsing</key>
1155     <string>accept | reject-foreign | reject | limit-foreign | reject-tracker | reject-tracker-and-partition-foreign</string>
1156   </dict>
1157 </dict>
1158 ```
1159 #### policies.json
1160 ```
1161 {
1162   "policies": {
1163     "Cookies": {
1164       "Allow": ["http://example.org/"],
1165       "AllowSession": ["http://example.edu/"],
1166       "Block": ["http://example.edu/"],
1167       "Default": true | false,
1168       "AcceptThirdParty": "always" | "never" | "from-visited",
1169       "ExpireAtSessionEnd": true | false,
1170       "RejectTracker": true | false,
1171       "Locked": true | false,
1172       "Behavior": "accept" | "reject-foreign" | "reject" | "limit-foreign" | "reject-tracker" | "reject-tracker-and-partition-foreign",
1173       "BehaviorPrivateBrowsing": "accept" | "reject-foreign" | "reject" | "limit-foreign" | "reject-tracker" | "reject-tracker-and-partition-foreign",
1174     }
1175   }
1176 }
1177 ```
1178 ### DefaultDownloadDirectory
1179 Set the default download directory.
1180
1181 You can use ${home} for the native home directory.
1182
1183 **Compatibility:** Firefox 68, Firefox ESR 68\
1184 **CCK2 Equivalent:** N/A\
1185 **Preferences Affected:** `browser.download.dir`, `browser.download.folderList`
1186
1187 #### Windows (GPO)
1188 ```
1189 Software\Policies\Mozilla\Firefox\DefaultDownloadDirectory = "${home}\Downloads"
1190 ```
1191 #### Windows (Intune)
1192 OMA-URI:
1193 ```
1194 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DefaultDownloadDirectory
1195 ```
1196 Value (string):
1197 ```
1198 <enabled/>
1199 <data id="Preferences_String" value="${home}\Downloads"/>
1200 ```
1201 #### macOS
1202 ```
1203 <dict>
1204   <key>DefaultDownloadDirectory</key>
1205   <string>${home}/Downloads</string>
1206 </dict>
1207 ```
1208 #### policies.json (macOS and Linux)
1209 ```
1210 {
1211   "policies": {
1212     "DefaultDownloadDirectory": "${home}/Downloads"
1213   }
1214 }
1215 ```
1216 #### policies.json (Windows)
1217 ```
1218 {
1219   "policies": {
1220     "DefaultDownloadDirectory": "${home}\\Downloads"
1221   }
1222 }
1223 ```
1224 ### DisableAppUpdate
1225 Turn off application updates within Firefox.
1226
1227 **Compatibility:** Firefox 60, Firefox ESR 60\
1228 **CCK2 Equivalent:** `disableFirefoxUpdates`\
1229 **Preferences Affected:** N/A
1230
1231 #### Windows (GPO)
1232 ```
1233 Software\Policies\Mozilla\Firefox\DisableAppUpdate = 0x1 | 0x0
1234 ```
1235 #### Windows (Intune)
1236 OMA-URI:
1237 ```
1238 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableAppUpdate
1239 ```
1240 Value (string):
1241 ```
1242 <enabled/> or <disabled/>
1243 ```
1244 #### macOS
1245 ```
1246 <dict>
1247   <key>DisableAppUpdate</key>
1248   <true/> | <false/>
1249 </dict>
1250 ```
1251 #### policies.json
1252 ```
1253 {
1254   "policies": {
1255     "DisableAppUpdate": true | false
1256   }
1257 }
1258 ```
1259 ### DisableBuiltinPDFViewer
1260 Disable the built in PDF viewer. PDF files are downloaded and sent externally.
1261
1262 **Compatibility:** Firefox 60, Firefox ESR 60\
1263 **CCK2 Equivalent:** `disablePDFjs`\
1264 **Preferences Affected:** `pdfjs.disabled`
1265
1266 #### Windows (GPO)
1267 ```
1268 Software\Policies\Mozilla\Firefox\DisableBuiltinPDFViewer = 0x1 | 0x0
1269 ```
1270 #### Windows (Intune)
1271 OMA-URI:
1272 ```
1273 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableBuiltinPDFViewer
1274 ```
1275 Value (string):
1276 ```
1277 <enabled/> or <disabled/>
1278 ```
1279 #### macOS
1280 ```
1281 <dict>
1282   <key>DisableBuiltinPDFViewer</key>
1283   <true/> | <false/>
1284 </dict>
1285 ```
1286 #### policies.json
1287 ```
1288 {
1289   "policies": {
1290     "DisableBuiltinPDFViewer": true | false
1291   }
1292 }
1293 ```
1294 ### DisabledCiphers
1295 Disable specific cryptographic ciphers, listed below.
1296
1297 ```
1298 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
1299 TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
1300 TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256
1301 TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
1302 TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
1303 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
1304 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
1305 TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA
1306 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
1307 TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA
1308 TLS_DHE_RSA_WITH_AES_128_CBC_SHA
1309 TLS_DHE_RSA_WITH_AES_256_CBC_SHA
1310 TLS_RSA_WITH_AES_128_GCM_SHA256
1311 TLS_RSA_WITH_AES_256_GCM_SHA384
1312 TLS_RSA_WITH_AES_128_CBC_SHA
1313 TLS_RSA_WITH_AES_256_CBC_SHA
1314 TLS_RSA_WITH_3DES_EDE_CBC_SHA
1315 ```
1316
1317 **Preferences Affected:** `security.ssl3.ecdhe_rsa_aes_128_gcm_sha256`, `security.ssl3.ecdhe_ecdsa_aes_128_gcm_sha256`, `security.ssl3.ecdhe_ecdsa_chacha20_poly1305_sha256`, `security.ssl3.ecdhe_rsa_chacha20_poly1305_sha256`, `security.ssl3.ecdhe_ecdsa_aes_256_gcm_sha384`, `security.ssl3.ecdhe_rsa_aes_256_gcm_sha384`, `security.ssl3.ecdhe_rsa_aes_128_sha`, `security.ssl3.ecdhe_ecdsa_aes_128_sha`, `security.ssl3.ecdhe_rsa_aes_256_sha`, `security.ssl3.ecdhe_ecdsa_aes_256_sha`, `security.ssl3.dhe_rsa_aes_128_sha`, `security.ssl3.dhe_rsa_aes_256_sha`, `security.ssl3.rsa_aes_128_gcm_sha256`, `security.ssl3.rsa_aes_256_gcm_sha384`, `security.ssl3.rsa_aes_128_sha`, `security.ssl3.rsa_aes_256_sha`, `security.ssl3.deprecated.rsa_des_ede3_sha`
1318
1319 ---
1320 **Note:**
1321
1322 This policy was updated in Firefox 78 to allow enabling ciphers as well. Setting the value to true disables the cipher, setting the value to false enables the cipher. Previously setting the value to true or false disabled the cipher.
1323
1324 ---
1325 **Compatibility:** Firefox 76, Firefox ESR 68.8 (TLS_RSA_WITH_AES_128_GCM_SHA256 and TLS_RSA_WITH_AES_256_GCM_SHA384 were added in Firefox 78, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA38, TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, and TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 were added in Firefox 97 and Firefox 91.6)\
1326 **CCK2 Equivalent:** N/A\
1327 **Preferences Affected:** N/A
1328
1329 #### Windows (GPO)
1330 ```
1331 Software\Policies\Mozilla\Firefox\DisabledCiphers\CIPHER_NAME = 0x1 | 0x0
1332 ```
1333 #### Windows (Intune)
1334 OMA-URI:
1335 ```
1336 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_CIPHER_NAME
1337
1338 ```
1339 Value (string):
1340 ```
1341 <enabled/> or <disabled/>
1342 ```
1343 #### macOS
1344 ```
1345 <dict>
1346   <key>DisabledCiphers</key>
1347     <dict>
1348       <key>CIPHER_NAME</key>
1349       <true/> | <false/>
1350     </dict>
1351 </dict>
1352 ```
1353 #### policies.json
1354 ```
1355 {
1356   "policies": {
1357     "DisabledCiphers": {
1358       "CIPHER_NAME": true | false,
1359     }
1360   }
1361 }
1362 ```
1363 ### DisableDefaultBrowserAgent
1364 Prevent the default browser agent from taking any actions. Only applicable to Windows; other platforms don’t have the agent.
1365
1366 The browser agent is a Windows-only scheduled task which runs in the background to collect and submit data about the browser that the user has set as their OS default. More information is available [here](https://firefox-source-docs.mozilla.org/toolkit/mozapps/defaultagent/default-browser-agent/index.html).
1367
1368 **Compatibility:** Firefox 75, Firefox ESR 68.7 (Windows only)\
1369 **CCK2 Equivalent:** N/A\
1370 **Preferences Affected:** N/A
1371
1372 #### Windows (GPO)
1373 ```
1374 Software\Policies\Mozilla\Firefox\DisableDefaultBrowserAgent = 0x1 | 0x0
1375 ```
1376 #### Windows (Intune)
1377 OMA-URI:
1378 ```
1379 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableDefaultBrowserAgent
1380 ```
1381 Value (string):
1382 ```
1383 <enabled/> or <disabled/>
1384 ```
1385 #### policies.json
1386 ```
1387 {
1388   "policies": {
1389     "DisableDefaultBrowserAgent": true | false
1390   }
1391 }
1392 ```
1393 ### DisableDeveloperTools
1394 Remove access to all developer tools.
1395
1396 **Compatibility:** Firefox 60, Firefox ESR 60\
1397 **CCK2 Equivalent:** `removeDeveloperTools`\
1398 **Preferences Affected:** `devtools.policy.disabled`
1399
1400 #### Windows (GPO)
1401 ```
1402 Software\Policies\Mozilla\Firefox\DisableDeveloperTools = 0x1 | 0x0`
1403 ```
1404 #### Windows (Intune)
1405 OMA-URI:
1406 ```
1407 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableDeveloperTools
1408 ```
1409 Value (string):
1410 ```
1411 <enabled/> or <disabled/>
1412 ```
1413 #### macOS
1414 ```
1415 <dict>
1416   <key>DisableDeveloperTools</key>
1417   <true/> | <false/>
1418 </dict>
1419 ```
1420 #### policies.json
1421 ```
1422 {
1423   "policies": {
1424     "DisableDeveloperTools": true | false
1425   }
1426 }
1427 ```
1428 ### DisableFeedbackCommands
1429 Disable the menus for reporting sites (Submit Feedback, Report Deceptive Site).
1430
1431 **Compatibility:** Firefox 60, Firefox ESR 60\
1432 **CCK2 Equivalent:** N/A\
1433 **Preferences Affected:** N/A
1434
1435 #### Windows (GPO)
1436 ```
1437 Software\Policies\Mozilla\Firefox\DisableFeedbackCommands = 0x1 | 0x0
1438 ```
1439 #### Windows (Intune)
1440 OMA-URI:
1441 ```
1442 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFeedbackCommands
1443 ```
1444 Value (string):
1445 ```
1446 <enabled/> or <disabled/>
1447 ```
1448 #### macOS
1449 ```
1450 <dict>
1451   <key>DisableFeedbackCommands</key>
1452   <true/> | <false/>
1453 </dict>
1454 ```
1455 #### policies.json
1456 ```
1457 {
1458   "policies": {
1459     "DisableFeedbackCommands": true | false
1460   }
1461 }
1462 ```
1463 ### DisableFirefoxAccounts
1464 Disable Firefox Accounts integration (Sync).
1465
1466 **Compatibility:** Firefox 60, Firefox ESR 60\
1467 **CCK2 Equivalent:** `disableSync`\
1468 **Preferences Affected:** `identity.fxaccounts.enabled`
1469
1470 #### Windows (GPO)
1471 ```
1472 Software\Policies\Mozilla\Firefox\DisableFirefoxAccounts = 0x1 | 0x0
1473 ```
1474 #### Windows (Intune)
1475 OMA-URI:
1476 ```
1477 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxAccounts
1478 ```
1479 Value (string):
1480 ```
1481 <enabled/> or <disabled/>
1482 ```
1483 #### macOS
1484 ```
1485 <dict>
1486   <key>DisableFirefoxAccounts</key>
1487   <true/> | <false/>
1488 </dict>
1489 ```
1490 #### policies.json
1491 ```
1492 {
1493   "policies": {
1494     "DisableFirefoxAccounts": true | false
1495   }
1496 }
1497 ```
1498 ### DisableFirefoxScreenshots
1499 Remove access to Firefox Screenshots.
1500
1501 **Compatibility:** Firefox 60, Firefox ESR 60\
1502 **CCK2 Equivalent:** N/A\
1503 **Preferences Affected:** `extensions.screenshots.disabled`
1504
1505 #### Windows (GPO)
1506 ```
1507 Software\Policies\Mozilla\Firefox\DisableFirefoxScreenshots = 0x1 | 0x0
1508 ```
1509 #### Windows (Intune)
1510 OMA-URI:
1511 ```
1512 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxScreenshots
1513 ```
1514 Value (string):
1515 ```
1516 <enabled/> or <disabled/>
1517 ```
1518 #### macOS
1519 ```
1520 <dict>
1521   <key>DisableFirefoxScreenshots</key>
1522   <true/> | <false/>
1523 </dict>
1524 ```
1525 #### policies.json
1526 ```
1527 {
1528   "policies": {
1529     "DisableFirefoxScreenshots": true | false
1530   }
1531 }
1532 ```
1533 ### DisableFirefoxStudies
1534 Disable Firefox studies (Shield).
1535
1536 **Compatibility:** Firefox 60, Firefox ESR 60\
1537 **CCK2 Equivalent:** N/A\
1538 **Preferences Affected:** N/A
1539
1540 #### Windows (GPO)
1541 ```
1542 Software\Policies\Mozilla\Firefox\DisableFirefoxStudies = 0x1 | 0x0
1543 ```
1544 #### Windows (Intune)
1545 OMA-URI:
1546 ```
1547 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxStudies
1548 ```
1549 Value (string):
1550 ```
1551 <enabled/> or <disabled/>
1552 ```
1553 #### macOS
1554 ```
1555 <dict>
1556   <key>DisableFirefoxStudies</key>
1557   <true/> | <false/>
1558 </dict>
1559 ```
1560 #### policies.json
1561 ```
1562 {
1563   "policies": {
1564     "DisableFirefoxStudies": true | false
1565   }
1566 }
1567 ```
1568 ### DisableForgetButton
1569 Disable the "Forget" button.
1570
1571 **Compatibility:** Firefox 60, Firefox ESR 60\
1572 **CCK2 Equivalent:** `disableForget`\
1573 **Preferences Affected:** N/A
1574
1575 #### Windows (GPO)
1576 ```
1577 Software\Policies\Mozilla\Firefox\DisableForgetButton = 0x1 | 0x0
1578 ```
1579 #### Windows (Intune)
1580 OMA-URI:
1581 ```
1582 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableForgetButton
1583 ```
1584 Value (string):
1585 ```
1586 <enabled/> or <disabled/>
1587 ```
1588 #### macOS
1589 ```
1590 <dict>
1591   <key>DisableForgetButton</key>
1592   <true/> | <false/>
1593 </dict>
1594 ```
1595 #### policies.json
1596 ```
1597 {
1598   "policies": {
1599     "DisableForgetButton": true | false
1600   }
1601 }
1602 ```
1603 ### DisableFormHistory
1604 Turn off saving information on web forms and the search bar.
1605
1606 **Compatibility:** Firefox 60, Firefox ESR 60\
1607 **CCK2 Equivalent:** `disableFormFill`\
1608 **Preferences Affected:** `browser.formfill.enable`
1609
1610 #### Windows (GPO)
1611 ```
1612 Software\Policies\Mozilla\Firefox\DisableFormHistory = 0x1 | 0x0
1613 ```
1614 #### Windows (Intune)
1615 OMA-URI:
1616 ```
1617 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFormHistory
1618 ```
1619 Value (string):
1620 ```
1621 <enabled/> or <disabled/>
1622 ```
1623 #### macOS
1624 ```
1625 <dict>
1626   <key>DisableFormHistory</key>
1627   <true/> | <false/>
1628 </dict>
1629 ```
1630 #### policies.json
1631 ```
1632 {
1633   "policies": {
1634     "DisableFormHistory": true | false
1635   }
1636 }
1637 ```
1638 ### DisableMasterPasswordCreation
1639 Remove the master password functionality.
1640
1641 If this value is true, it works the same as setting [`PrimaryPassword`](#primarypassword) to false and removes the primary password functionality.
1642
1643 If both `DisableMasterPasswordCreation` and `PrimaryPassword` are used, `DisableMasterPasswordCreation` takes precedent.
1644
1645 **Compatibility:** Firefox 60, Firefox ESR 60\
1646 **CCK2 Equivalent:** `noMasterPassword`\
1647 **Preferences Affected:** N/A
1648
1649 #### Windows (GPO)
1650 ```
1651 Software\Policies\Mozilla\Firefox\DisableMasterPasswordCreation = 0x1 | 0x0
1652 ```
1653 #### Windows (Intune)
1654 OMA-URI:
1655 ```
1656 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableMasterPasswordCreation
1657 ```
1658 Value (string):
1659 ```
1660 <enabled/> or <disabled/>
1661 ```
1662 #### macOS
1663 ```
1664 <dict>
1665   <key>DisableMasterPasswordCreation</key>
1666   <true/> | <false/>
1667 </dict>
1668 ```
1669 #### policies.json
1670 ```
1671 {
1672   "policies": {
1673     "DisableMasterPasswordCreation": true | false
1674   }
1675 }
1676 ```
1677 ### DisablePasswordReveal
1678 Do not allow passwords to be shown in saved logins
1679
1680 **Compatibility:** Firefox 71, Firefox ESR 68.3\
1681 **CCK2 Equivalent:** N/A
1682 **Preferences Affected:** N/A
1683
1684 #### Windows (GPO)
1685 ```
1686 Software\Policies\Mozilla\Firefox\DisablePasswordReveal = 0x1 | 0x0
1687 ```
1688 #### Windows (Intune)
1689 OMA-URI:
1690 ```
1691 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePasswordReveal
1692 ```
1693 Value (string):
1694 ```
1695 <enabled/> or <disabled/>
1696 ```
1697 #### macOS
1698 ```
1699 <dict>
1700   <key>DisablePasswordReveal</key>
1701   <true/> | <false/>
1702 </dict>
1703 ```
1704 #### policies.json
1705 ```
1706 {
1707   "policies": {
1708     "DisablePasswordReveal": true | false
1709   }
1710 }
1711 ```
1712 ### DisablePocket
1713 Remove Pocket in the Firefox UI. It does not remove it from the new tab page.
1714
1715 **Compatibility:** Firefox 60, Firefox ESR 60\
1716 **CCK2 Equivalent:** `disablePocket`\
1717 **Preferences Affected:** `extensions.pocket.enabled`
1718
1719 #### Windows (GPO)
1720 ```
1721 Software\Policies\Mozilla\Firefox\DisablePocket = 0x1 | 0x0
1722 ```
1723 #### Windows (Intune)
1724 OMA-URI:
1725 ```
1726 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePocket
1727 ```
1728 Value (string):
1729 ```
1730 <enabled/> or <disabled/>
1731 ```
1732 #### macOS
1733 ```
1734 <dict>
1735   <key>DisablePocket</key>
1736   <true/> | <false/>
1737 </dict>
1738 ```
1739 #### policies.json
1740 ```
1741 {
1742   "policies": {
1743     "DisablePocket": true | false
1744   }
1745 }
1746 ```
1747 ### DisablePrivateBrowsing
1748 Remove access to private browsing.
1749
1750 **Compatibility:** Firefox 60, Firefox ESR 60\
1751 **CCK2 Equivalent:** `disablePrivateBrowsing`\
1752 **Preferences Affected:** N/A
1753
1754 #### Windows (GPO)
1755 ```
1756 Software\Policies\Mozilla\Firefox\DisablePrivateBrowsing = 0x1 | 0x0
1757 ```
1758 #### Windows (Intune)
1759 OMA-URI:
1760 ```
1761 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePrivateBrowsing
1762 ```
1763 Value (string):
1764 ```
1765 <enabled/> or <disabled/>
1766 ```
1767 #### macOS
1768 ```
1769 <dict>
1770   <key>DisablePrivateBrowsing</key>
1771   <true/> | <false/>
1772 </dict>
1773 ```
1774 #### policies.json
1775 ```
1776 {
1777   "policies": {
1778     "DisablePrivateBrowsing": true | false
1779   }
1780 }
1781 ```
1782 ### DisableProfileImport
1783 Disables the "Import data from another browser" option in the bookmarks window.
1784
1785 **Compatibility:** Firefox 60, Firefox ESR 60\
1786 **CCK2 Equivalent:** N/A\
1787 **Preferences Affected:** N/A
1788
1789 #### Windows (GPO)
1790 ```
1791 Software\Policies\Mozilla\Firefox\DisableProfileImport = 0x1 | 0x0
1792 ```
1793 #### Windows (Intune)
1794 OMA-URI:
1795 ```
1796 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableProfileImport
1797 ```
1798 Value (string):
1799 ```
1800 <enabled/> or <disabled/>
1801 ```
1802 #### macOS
1803 ```
1804 <dict>
1805   <key>DisableProfileImport</key>
1806   <true/> | <false/>
1807 </dict>
1808 ```
1809 #### policies.json
1810 ```
1811 {
1812   "policies": {
1813     "DisableProfileImport": true | false
1814   }
1815 }
1816 ```
1817 ### DisableProfileRefresh
1818 Disable the Refresh Firefox button on about:support and support.mozilla.org, as well as the prompt that displays offering to refresh Firefox when you haven't used it in a while.
1819
1820 **Compatibility:** Firefox 60, Firefox ESR 60\
1821 **CCK2 Equivalent:** `disableResetFirefox`\
1822 **Preferences Affected:** `browser.disableResetPrompt`
1823
1824 #### Windows (GPO)
1825 ```
1826 Software\Policies\Mozilla\Firefox\DisableProfileRefresh = 0x1 | 0x0
1827 ```
1828 #### Windows (Intune)
1829 OMA-URI:
1830 ```
1831 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableProfileRefresh
1832 ```
1833 Value (string):
1834 ```
1835 <enabled/> or <disabled/>
1836 ```
1837 #### macOS
1838 ```
1839 <dict>
1840   <key>DisableProfileRefresh</key>
1841   <true/> | <false/>
1842 </dict>
1843 ```
1844 #### policies.json
1845 ```
1846 {
1847   "policies": {
1848     "DisableProfileRefresh": true | false
1849   }
1850 }
1851 ```
1852 ### DisableSafeMode
1853 Disable safe mode within the browser.
1854
1855 On Windows, this disables safe mode via the command line as well.
1856
1857 **Compatibility:** Firefox 60, Firefox ESR 60 (Windows, macOS)\
1858 **CCK2 Equivalent:** `disableSafeMode`\
1859 **Preferences Affected:** N/A
1860
1861 #### Windows (GPO)
1862 ```
1863 Software\Policies\Mozilla\Firefox\DisableSafeMode = 0x1 | 0x0
1864 ```
1865 #### Windows (Intune)
1866 OMA-URI:
1867 ```
1868 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSafeMode
1869 ```
1870 Value (string):
1871 ```
1872 <enabled/> or <disabled/>
1873 ```
1874 #### macOS
1875 ```
1876 <dict>
1877   <key>DisableSafeMode</key>
1878   <true/> | <false/>
1879 </dict>
1880 ```
1881 #### policies.json
1882 ```
1883 {
1884   "policies": {
1885     "DisableSafeMode": true | false
1886   }
1887 }
1888 ```
1889 ### DisableSecurityBypass
1890 Prevent the user from bypassing security in certain cases.
1891
1892 `InvalidCertificate` prevents adding an exception when an invalid certificate is shown.
1893
1894 `SafeBrowsing` prevents selecting "ignore the risk" and visiting a harmful site anyway.
1895
1896 **Compatibility:** Firefox 60, Firefox ESR 60\
1897 **CCK2 Equivalent:** N/A\
1898 **Preferences Affected:** `security.certerror.hideAddException`, `browser.safebrowsing.allowOverride`
1899
1900 #### Windows (GPO)
1901 ```
1902 Software\Policies\Mozilla\Firefox\DisableSecurityBypass\InvalidCertificate = 0x1 | 0x0
1903 Software\Policies\Mozilla\Firefox\DisableSecurityBypass\SafeBrowsing = 0x1 | 0x0
1904 ```
1905 #### Windows (Intune)
1906 OMA-URI:
1907 ```
1908 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/P_DisableSecurityBypass_InvalidCertificate
1909 ```
1910 Value (string):
1911 ```
1912 <enabled/> or <disabled/>
1913 ```
1914 OMA-URI:
1915 ```
1916 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/P_DisableSecurityBypass_SafeBrowsing
1917 ```
1918 Value (string):
1919 ```
1920 <enabled/> or <disabled/>
1921 ```
1922
1923 #### macOS
1924 ```
1925 <dict>
1926   <key>DisableSecurityBypass</key>
1927   <dict>
1928     <key>InvalidCertificate</key>
1929     <true/> | <false/>
1930     <key>SafeBrowsing</key>
1931     <true/> | <false/>
1932   </dict>
1933 </dict>
1934 ```
1935 #### policies.json
1936 ```
1937 {
1938   "policies": {
1939     "DisableSecurityBypass": {
1940       "InvalidCertificate": true | false,
1941       "SafeBrowsing": true | false
1942     }
1943   }
1944 }
1945 ```
1946 ### DisableSetDesktopBackground
1947 Remove the "Set As Desktop Background..." menuitem when right clicking on an image.
1948
1949 **Compatibility:** Firefox 60, Firefox ESR 60\
1950 **CCK2 Equivalent:** `removeSetDesktopBackground`\
1951 **Preferences Affected:** N/A
1952
1953 #### Windows (GPO)
1954 ```
1955 Software\Policies\Mozilla\Firefox\DisableSetDesktopBackground = 0x1 | 0x0
1956 ```
1957 #### Windows (Intune)
1958 OMA-URI:
1959 ```
1960 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSetDesktopBackground
1961 ```
1962 Value (string):
1963 ```
1964 <enabled/> or <disabled/>
1965 ```
1966 #### macOS
1967 ```
1968 <dict>
1969   <key>DisableSetDesktopBackground</key>
1970   <true/> | <false/>
1971 </dict>
1972 ```
1973 #### policies.json
1974 ```
1975 {
1976   "policies": {
1977     "DisableSetDesktopBackground": true | false
1978   }
1979 }
1980 ```
1981 ### DisableSystemAddonUpdate
1982 Prevent system add-ons from being installed or updated.
1983
1984 **Compatibility:** Firefox 60, Firefox ESR 60\
1985 **CCK2 Equivalent:** N/A\
1986 **Preferences Affected:** N/A
1987
1988 #### Windows (GPO)
1989 ```
1990 Software\Policies\Mozilla\Firefox\DisableSystemAddonUpdate = 0x1 | 0x0
1991 ```
1992 #### Windows (Intune)
1993 OMA-URI:
1994 ```
1995 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSystemAddonUpdate
1996 ```
1997 Value (string):
1998 ```
1999 <enabled/> or <disabled/>
2000 ```
2001 #### macOS
2002 ```
2003 <dict>
2004   <key>DisableSystemAddonUpdate</key>
2005   <true/> | <false/>
2006 </dict>
2007 ```
2008 #### policies.json
2009 ```
2010 {
2011   "policies": {
2012     "DisableSystemAddonUpdate": true | false
2013   }
2014 }
2015 ```
2016 ### DisableTelemetry
2017 Prevent the upload of telemetry data.
2018
2019 As of Firefox 83 and Firefox ESR 78.5, local storage of telemetry data is disabled as well.
2020
2021 Mozilla recommends that you do not disable telemetry. Information collected through telemetry helps us build a better product for businesses like yours.
2022
2023 **Compatibility:** Firefox 60, Firefox ESR 60\
2024 **CCK2 Equivalent:** `disableTelemetry`\
2025 **Preferences Affected:** `datareporting.healthreport.uploadEnabled`, `datareporting.policy.dataSubmissionEnabled`, `toolkit.telemetry.archive.enabled`
2026
2027 #### Windows (GPO)
2028 ```
2029 Software\Policies\Mozilla\Firefox\DisableTelemetry = 0x1 | 0x0
2030 ```
2031 #### Windows (Intune)
2032 OMA-URI:
2033 ```
2034 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableTelemetry
2035 ```
2036 Value (string):
2037 ```
2038 <enabled/> or <disabled/>
2039 ```
2040 #### macOS
2041 ```
2042 <dict>
2043   <key>DisableTelemetry</key>
2044   <true/> | <false/>
2045 </dict>
2046 ```
2047 #### policies.json
2048 ```
2049 {
2050   "policies": {
2051     "DisableTelemetry": true | false
2052   }
2053 }
2054 ```
2055 ### DisplayBookmarksToolbar
2056 Set the initial state of the bookmarks toolbar. A user can still change how it is displayed.
2057
2058 `always` means the bookmarks toolbar is always shown.
2059
2060 `never` means the bookmarks toolbar is not shown.
2061
2062 `newtab` means the bookmarks toolbar is only shown on the new tab page.
2063
2064 **Compatibility:** Firefox 109, Firefox ESR 102.7\
2065 **CCK2 Equivalent:** N/A\
2066 **Preferences Affected:** N/A
2067
2068 #### Windows (GPO)
2069 ```
2070 Software\Policies\Mozilla\Firefox\DisplayBookmarksToolbar = "always", "never", "newtab"
2071 ```
2072 #### Windows (Intune)
2073 OMA-URI:
2074 ```
2075 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisplayBookmarksToolbar_Enum
2076 ```
2077 Value (string):
2078 ```
2079 <enabled/>
2080 <data id="DisplayBookmarksToolbar" value="always | never | newtab"/>
2081 ```
2082 #### macOS
2083 ```
2084 <dict>
2085   <key>DisplayBookmarksToolbar</key>
2086   <string>always | never | newtab</string>
2087 </dict>
2088 ```
2089 #### policies.json
2090 ```
2091 {
2092   "policies": {
2093     "DisplayBookmarksToolbar": "always" | "never" | "newtab"
2094   }
2095 }
2096 ```
2097 ### DisplayBookmarksToolbar (Deprecated)
2098 Set the initial state of the bookmarks toolbar. A user can still hide it and it will stay hidden.
2099
2100 **Compatibility:** Firefox 60, Firefox ESR 60\
2101 **CCK2 Equivalent:** `displayBookmarksToolbar`\
2102 **Preferences Affected:** N/A
2103
2104 #### Windows (GPO)
2105 ```
2106 Software\Policies\Mozilla\Firefox\DisplayBookmarksToolbar = 0x1 | 0x0
2107 ```
2108 #### Windows (Intune)
2109 OMA-URI:
2110 ```
2111 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisplayBookmarksToolbar
2112 ```
2113 Value (string):
2114 ```
2115 <enabled/> or <disabled/>
2116 ```
2117 #### macOS
2118 ```
2119 <dict>
2120   <key>DisplayBookmarksToolbar</key>
2121   <true/> | <false/>
2122 </dict>
2123 ```
2124 #### policies.json
2125 ```
2126 {
2127   "policies": {
2128     "DisplayBookmarksToolbar": true | false
2129   }
2130 }
2131 ```
2132 ### DisplayMenuBar
2133 Set the state of the menubar.
2134
2135 `always` means the menubar is shown and cannot be hidden.
2136
2137 `never` means the menubar is hidden and cannot be shown.
2138
2139 `default-on` means the menubar is on by default but can be hidden.
2140
2141 `default-off` means the menubar is off by default but can be shown.
2142
2143 **Compatibility:** Firefox 73, Firefox ESR 68.5 (Windows, some Linux)\
2144 **CCK2 Equivalent:** `displayMenuBar`\
2145 **Preferences Affected:** N/A
2146
2147 #### Windows (GPO)
2148 ```
2149 Software\Policies\Mozilla\Firefox\DisplayMenuBar = "always", "never", "default-on", "default-off"
2150 ```
2151 #### Windows (Intune)
2152 OMA-URI:
2153 ```
2154 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisplayMenuBar_Enum
2155 ```
2156 Value (string):
2157 ```
2158 <enabled/>
2159 <data id="DisplayMenuBar" value="always | never | default-on | default-off"/>
2160 ```
2161 #### macOS
2162 ```
2163 <dict>
2164   <key>DisplayMenuBar</key>
2165   <string>always | never | default-on | default-off</string>
2166 </dict>
2167 ```
2168 #### policies.json
2169 ```
2170 {
2171   "policies": {
2172     "DisplayMenuBar": "always", "never", "default-on", "default-off"
2173   }
2174 }
2175 ```
2176 ### DisplayMenuBar (Deprecated)
2177 Set the initial state of the menubar. A user can still hide it and it will stay hidden.
2178
2179 **Compatibility:** Firefox 60, Firefox ESR 60 (Windows, some Linux)\
2180 **CCK2 Equivalent:** `displayMenuBar`\
2181 **Preferences Affected:** N/A
2182
2183 #### Windows (GPO)
2184 ```
2185 Software\Policies\Mozilla\Firefox\DisplayMenuBar = 0x1 | 0x0
2186 ```
2187 #### macOS
2188 ```
2189 <dict>
2190   <key>DisplayMenuBar</key>
2191   <true/> | <false/>
2192 </dict>
2193 ```
2194 #### policies.json
2195 ```
2196 {
2197   "policies": {
2198     "DisplayMenuBar": true | false
2199   }
2200 }
2201 ```
2202 ### DNSOverHTTPS
2203 Configure DNS over HTTPS.
2204
2205 `Enabled` determines whether DNS over HTTPS is enabled
2206
2207 `ProviderURL` is a URL to another provider.
2208
2209 `Locked` prevents the user from changing DNS over HTTPS preferences.
2210
2211 `ExcludedDomains` excludes domains from DNS over HTTPS.
2212
2213 **Compatibility:** Firefox 63, Firefox ESR 68 (ExcludedDomains added in 75/68.7)\
2214 **CCK2 Equivalent:** N/A\
2215 **Preferences Affected:** `network.trr.mode`, `network.trr.uri`
2216
2217 #### Windows (GPO)
2218 ```
2219 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\Enabled = 0x1 | 0x0
2220 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\ProviderURL = "URL_TO_ALTERNATE_PROVIDER"
2221 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\Locked = 0x1 | 0x0
2222 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\ExcludedDomains\1 = "example.com"
2223 ```
2224 #### Windows (Intune)
2225 OMA-URI:
2226 ```
2227 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_Enabled
2228 ```
2229 Value (string):
2230 ```
2231 <enabled/> or <disabled/>
2232 ```
2233 OMA-URI:
2234 ```
2235 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_ProviderURL
2236 ```
2237 Value (string):
2238 ```
2239 <enabled/>
2240 <data id="String" value="URL_TO_ALTERNATE_PROVIDER"/>
2241 ```
2242 OMA-URI:
2243 ```
2244 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_Locked
2245 ```
2246 Value (string):
2247 ```
2248 <enabled/> or <disabled/>
2249 ```
2250 OMA-URI:
2251 ```
2252 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_ExcludedDomains
2253 ```
2254 Value (string):
2255 ```
2256 <enabled/>
2257 <data id="List" value="1&#xF000;example.com"/>
2258 ```
2259 #### macOS
2260 ```
2261 <dict>
2262   <key>DNSOverHTTPS</key>
2263   <dict>
2264     <key>Enabled</key>
2265     <true/> | <false/>
2266     <key>ProviderURL</key>
2267     <string>URL_TO_ALTERNATE_PROVIDER</string>
2268     <key>Locked</key>
2269     <true/> | <false/>
2270     <key>ExcludedDomains</key>
2271     <array>
2272       <string>example.com</string>
2273     </array>
2274   </dict>
2275 </dict>
2276 ```
2277 #### policies.json
2278 ```
2279 {
2280   "policies": {
2281     "DNSOverHTTPS": {
2282       "Enabled":  true | false,
2283       "ProviderURL": "URL_TO_ALTERNATE_PROVIDER",
2284       "Locked": true | false,
2285       "ExcludedDomains": ["example.com"]
2286     }
2287   }
2288 }
2289 ```
2290 ### DontCheckDefaultBrowser
2291 Don't check if Firefox is the default browser at startup.
2292
2293 **Compatibility:** Firefox 60, Firefox ESR 60\
2294 **CCK2 Equivalent:** `dontCheckDefaultBrowser`\
2295 **Preferences Affected:** `browser.shell.checkDefaultBrowser`
2296
2297 #### Windows (GPO)
2298 ```
2299 Software\Policies\Mozilla\Firefox\DontCheckDefaultBrowser = 0x1 | 0x0
2300 ```
2301 #### Windows (Intune)
2302 OMA-URI:
2303 ```
2304 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DontCheckDefaultBrowser
2305 ```
2306 Value (string):
2307 ```
2308 <enabled/> or <disabled/>
2309 ```
2310 #### macOS
2311 ```
2312 <dict>
2313   <key>DontCheckDefaultBrowser</key>
2314   <true/> | <false/>
2315 </dict>
2316 ```
2317 #### policies.json
2318 ```
2319 {
2320   "policies": {
2321     "DontCheckDefaultBrowser": true | false
2322   }
2323 }
2324 ```
2325 ### DownloadDirectory
2326 Set and lock the download directory.
2327
2328 You can use ${home} for the native home directory.
2329
2330 **Compatibility:** Firefox 68, Firefox ESR 68\
2331 **CCK2 Equivalent:** N/A\
2332 **Preferences Affected:** `browser.download.dir`, `browser.download.folderList`, `browser.download.useDownloadDir`
2333
2334 #### Windows (GPO)
2335 ```
2336 Software\Policies\Mozilla\Firefox\DownloadDirectory = "${home}\Downloads"
2337 ```
2338 #### Windows (Intune)
2339 OMA-URI:
2340 ```
2341 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DownloadDirectory
2342 ```
2343 Value (string):
2344 ```
2345 <enabled/>
2346 <data id="Preferences_String" value="${home}\Downloads"/>
2347 ```
2348 #### macOS
2349 ```
2350 <dict>
2351   <key>DownloadDirectory</key>
2352   <string>${home}/Downloads</string>
2353 </dict>
2354 ```
2355 #### policies.json (macOS and Linux)
2356 ```
2357 {
2358   "policies": {
2359     "DownloadDirectory": "${home}/Downloads"
2360 }
2361 ```
2362 #### policies.json (Windows)
2363 ```
2364 {
2365   "policies": {
2366     "DownloadDirectory": "${home}\\Downloads"
2367 }
2368 ```
2369 ### EnableTrackingProtection
2370 Configure tracking protection.
2371
2372 If this policy is not configured, tracking protection is not enabled by default in the browser, but it is enabled by default in private browsing and the user can change it.
2373
2374 If `Value` is set to false, tracking protection is disabled and locked in both the regular browser and private browsing.
2375
2376 If `Value` is set to true, tracking protection is enabled by default in both the regular browser and private browsing and the `Locked` value determines whether or not a user can change it.
2377
2378 If `Cryptomining` is set to true, cryptomining scripts on websites are blocked.
2379
2380 If `Fingerprinting` is set to true, fingerprinting scripts on websites are blocked.
2381
2382 `Exceptions` are origins for which tracking protection is not enabled.
2383
2384 **Compatibility:** Firefox 60, Firefox ESR 60 (Cryptomining and Fingerprinting added in 70/68.2, Exceptions added in 73/68.5)\
2385 **CCK2 Equivalent:** N/A\
2386 **Preferences Affected:** `privacy.trackingprotection.enabled`, `privacy.trackingprotection.pbmode.enabled`, `privacy.trackingprotection.cryptomining.enabled`, `privacy.trackingprotection.fingerprinting.enabled`
2387
2388 #### Windows (GPO)
2389 ```
2390 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Value = 0x1 | 0x0
2391 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Locked = 0x1 | 0x0
2392 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Cryptomining = 0x1 | 0x0
2393 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Fingerprinting = 0x1 | 0x0
2394 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Exceptions\1 = "https://example.com"
2395 ```
2396 #### Windows (Intune)
2397 OMA-URI:
2398 ```
2399 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/A_TrackingProtection_Value
2400 ```
2401 Value (string):
2402 ```
2403 <enabled/> or <disabled/>
2404 ```
2405 OMA-URI:
2406 ```
2407 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/B_TrackingProtection_Cryptomining
2408 ```
2409 Value (string):
2410 ```
2411 <enabled/> or <disabled/>
2412 ```
2413 OMA-URI:
2414 ```
2415 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/C_TrackingProtection_Fingerprinting
2416 ```
2417 Value (string):
2418 ```
2419 <enabled/> or <disabled/>
2420 ```
2421 OMA-URI:
2422 ```
2423 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/D_TrackingProtection_Exceptions
2424 ```
2425 Value (string):
2426 ```
2427 <enabled/>
2428 <data id="TrackingProtection_Exceptions" value="1&#xF000;https://example.com"/>
2429 ```
2430 OMA-URI:
2431 ```
2432 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/E_TrackingProtection_Locked
2433 ```
2434 Value (string):
2435 ```
2436 <enabled/> or <disabled/>
2437 ```
2438 #### macOS
2439 ```
2440 <dict>
2441   <key>EnableTrackingProtection</key>
2442   <dict>
2443     <key>Value</key>
2444     <true/> | <false/>
2445     <key>Locked</key>
2446     <true/> | <false/>
2447     <key>Cryptomining</key>
2448     <true/> | <false/>
2449     <key>Fingerprinting</key>
2450     <true/> | <false/>
2451     <key>Exceptions</key>
2452     <array>
2453       <string>https://example.com</string>
2454     </array>
2455   </dict>
2456 </dict>
2457 ```
2458 #### policies.json
2459 ```
2460 {
2461   "policies": {
2462     "EnableTrackingProtection": {
2463       "Value": true | false,
2464       "Locked": true | false,
2465       "Cryptomining": true | false,
2466       "Fingerprinting": true | false,
2467       "Exceptions": ["https://example.com"]
2468     }
2469   }
2470 }
2471 ```
2472 ### EncryptedMediaExtensions
2473 Enable or disable Encrypted Media Extensions and optionally lock it.
2474
2475 If `Enabled` is set to false, encrypted media extensions (like Widevine) are not downloaded by Firefox unless the user consents to installing them.
2476
2477 If `Locked` is set to true and `Enabled` is set to false, Firefox will not download encrypted media extensions (like Widevine) or ask the user to install them.
2478
2479 **Compatibility:** Firefox 77, Firefox ESR 68.9\
2480 **CCK2 Equivalent:** N/A\
2481 **Preferences Affected:** `media.eme.enabled`
2482
2483 #### Windows (GPO)
2484 ```
2485 Software\Policies\Mozilla\Firefox\EncryptedMediaExtensions\Enabled = 0x1 | 0x0
2486 Software\Policies\Mozilla\Firefox\EncryptedMediaExtensions\Locked = 0x1 | 0x0
2487 ```
2488 #### Windows (Intune)
2489 OMA-URI:
2490 ```
2491 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~EncryptedMediaExtensions/EncryptedMediaExtensions_Enabled
2492 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~EncryptedMediaExtensions/EncryptedMediaExtensions_Locked
2493 ```
2494 Value (string):
2495 ```
2496 <enabled/>or <disabled/>
2497 ```
2498 #### macOS
2499 ```
2500 <dict>
2501   <key>EncryptedMediaExtensions</key>
2502   <dict>
2503     <key>Enabled</key>
2504     <true/> | <false/>
2505     <key>Locked</key>
2506     <true/> | <false/>
2507   </dict>
2508 </dict>
2509 ```
2510 #### policies.json
2511 ```
2512 {
2513   "policies": {
2514     "EncryptedMediaExtensions": {
2515       "Enabled": true | false,
2516       "Locked": true | false
2517     }
2518   }
2519 }
2520 ```
2521 ### EnterprisePoliciesEnabled
2522 Enable policy support on macOS.
2523
2524 **Compatibility:** Firefox 63, Firefox ESR 60.3 (macOS only)\
2525 **CCK2 Equivalent:** N/A\
2526 **Preferences Affected:** N/A
2527
2528 #### macOS
2529 ```
2530 <dict>
2531   <key>EnterprisePoliciesEnabled</key>
2532   <true/>
2533 </dict>
2534 ```
2535 ### ExemptDomainFileTypePairsFromFileTypeDownloadWarnings
2536
2537 Disable warnings based on file extension for specific file types on domains.
2538
2539 This policy is based on the [Chrome policy](https://chromeenterprise.google/policies/#ExemptDomainFileTypePairsFromFileTypeDownloadWarnings) of the same name.
2540
2541 Important: The documentation for the policy for both Edge and Chrome is incorrect. The ```domains``` value must be a domain, not a URL pattern. Also, we do not support using ```*``` to mean all domains.
2542
2543 **Compatibility:** Firefox 102\
2544 **CCK2 Equivalent:** N/A\
2545 **Preferences Affected:** N/A
2546
2547 #### Windows (GPO)
2548 Software\Policies\Mozilla\Firefox\ExemptDomainFileTypePairsFromFileTypeDownloadWarnings (REG_MULTI_SZ) =
2549 ```
2550 [
2551   {
2552      "file_extension": "jnlp",
2553      "domains": ["example.com"]
2554   }
2555 ]
2556 ```
2557 #### Windows (Intune)
2558 OMA-URI:
2559 ```
2560 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/ExemptDomainFileTypePairsFromFileTypeDownloadWarnings
2561 ```
2562 Value (string):
2563 ```
2564 <enabled/>
2565 <data id="JSON" value='
2566 [
2567   {
2568      "file_extension": "jnlp",
2569      "domains": ["example.com"]
2570   }
2571 ]
2572 '/>
2573 ```
2574 #### macOS
2575 ```
2576 <dict>
2577   <key>ExemptDomainFileTypePairsFromFileTypeDownloadWarnings</key>
2578   <array>
2579     <dict>
2580       <key>file_extension</key>
2581       <string>jnlp</string>
2582       <key>domains</key>
2583       <array>
2584         <string>example.com</string>
2585       </array>
2586     </dict>
2587   </array>
2588 </dict>
2589 ```
2590 #### policies.json
2591 ```
2592 {
2593   "policies": {
2594     "ExemptDomainFileTypePairsFromFileTypeDownloadWarnings": [{
2595       "file_extension": "jnlp",
2596       "domains": ["example.com"]
2597     }]
2598   }
2599 }
2600 ```
2601 ### Extensions
2602 Control the installation, uninstallation and locking of extensions.
2603
2604 While this policy is not technically deprecated, it is recommended that you use the **[`ExtensionSettings`](#extensionsettings)** policy. It has the same functionality and adds more. It does not support native paths, though, so you'll have to use file:/// URLs.
2605
2606 `Install` is a list of URLs or native paths for extensions to be installed.
2607
2608 `Uninstall` is a list of extension IDs that should be uninstalled if found.
2609
2610 `Locked` is a list of extension IDs that the user cannot disable or uninstall.
2611
2612 **Compatibility:** Firefox 60, Firefox ESR 60\
2613 **CCK2 Equivalent:** `addons`\
2614 **Preferences Affected:** N/A
2615
2616 #### Windows (GPO)
2617 ```
2618 Software\Policies\Mozilla\Firefox\Extensions\Install\1 = "https://addons.mozilla.org/firefox/downloads/somefile.xpi"
2619 Software\Policies\Mozilla\Firefox\Extensions\Install\2 = "//path/to/xpi"
2620 Software\Policies\Mozilla\Firefox\Extensions\Uninstall\1 = "bad_addon_id@mozilla.org"
2621 Software\Policies\Mozilla\Firefox\Extensions\Locked\1 = "addon_id@mozilla.org"
2622 ```
2623 #### Windows (Intune)
2624 OMA-URI:
2625 ```
2626 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/Extensions_Install
2627 ```
2628 Value (string):
2629 ```
2630 <enabled/>
2631 <data id="Extensions" value="1&#xF000;https://addons.mozilla.org/firefox/downloads/somefile.xpi&#xF000;2&#xF000;//path/to/xpi"/>
2632 ```
2633 OMA-URI:
2634 ```
2635 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/Extensions_Uninstall
2636 ```
2637 Value (string):
2638 ```
2639 <enabled/>
2640 <data id="Extensions" value="1&#xF000;bad_addon_id@mozilla.org"/>
2641 ```
2642 OMA-URI:
2643 ```
2644 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/Extensions_Locked
2645 ```
2646 Value (string):
2647 ```
2648 <enabled/>
2649 <data id="Extensions" value="1&#xF000;addon_id@mozilla.org"/>
2650 ```
2651 #### macOS
2652 ```
2653 <dict>
2654   <key>Extensions</key>
2655   <dict>
2656     <key>Install</key>
2657     <array>
2658       <string>https://addons.mozilla.org/firefox/downloads/somefile.xpi</string>
2659       <string>//path/to/xpi</string>
2660     </array>
2661     <key>Uninstall</key>
2662     <array>
2663       <string>bad_addon_id@mozilla.org</string>
2664     </array>
2665     <key>Locked</key>
2666     <array>
2667       <string>addon_id@mozilla.org</string>
2668     </array>
2669   </dict>
2670 </dict>
2671 ```
2672 #### policies.json
2673 ```
2674 {
2675   "policies": {
2676     "Extensions": {
2677       "Install": ["https://addons.mozilla.org/firefox/downloads/somefile.xpi", "//path/to/xpi"],
2678       "Uninstall": ["bad_addon_id@mozilla.org"],
2679       "Locked":  ["addon_id@mozilla.org"]
2680     }
2681   }
2682 }
2683 ```
2684 ### ExtensionSettings
2685 Manage all aspects of extensions. This policy is based heavily on the [Chrome policy](https://dev.chromium.org/administrators/policy-list-3/extension-settings-full) of the same name.
2686
2687 This policy maps an extension ID to its configuration. With an extension ID, the configuration will be applied to the specified extension only. A default configuration can be set for the special ID "*", which will apply to all extensions that don't have a custom configuration set in this policy.
2688
2689 To obtain an extension ID, install the extension and go to about:support. You will see the ID in the Extensions section. I've also created an extension that makes it easy to find the ID of extensions on AMO. You can download it [here](https://github.com/mkaply/queryamoid/releases/tag/v0.1).
2690
2691 The configuration for each extension is another dictionary that can contain the fields documented below.
2692
2693 | Name | Description |
2694 | --- | --- |
2695 | `installation_mode` | Maps to a string indicating the installation mode for the extension. The valid strings are `allowed`,`blocked`,`force_installed`, and `normal_installed`.
2696 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`allowed` | Allows the extension to be installed by the user. This is the default behavior. There is no need for an install_url; it will automatically be allowed based on the ID.
2697 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`blocked`| Blocks installation of the extension and removes it from the device if already installed.
2698 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`force_installed`| The extension is automatically installed and can't be removed by the user. This option is not valid for the default configuration and requires an install_url.
2699 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`normal_installed`| The extension is automatically installed but can be disabled by the user. This option is not valid for the default configuration and requires an install_url.
2700 | `install_url`| Maps to a URL indicating where Firefox can download a force_installed or normal_installed extension.  If installing from the local file system, use a [```file:///``` URL](https://en.wikipedia.org/wiki/File_URI_scheme). If installing from the addons.mozilla.org, use the following URL (substituting SHORT_NAME from the URL on AMO), https://addons.mozilla.org/firefox/downloads/latest/SHORT_NAME/latest.xpi. Languages packs are available from https://releases.mozilla.org/pub/firefox/releases/VERSION/PLATFORM/xpi/LANGUAGE.xpi. If you need to update the extension, you can change the name of the extension and it will be automatically updated. Extensions installed from file URLs will additional be updated when their internal version changes.
2701 | `install_sources` | A list of sources from which installing extensions is allowed using URL match patterns. **This is unnecessary if you are only allowing the installation of certain extensions by ID.** Each item in this list is an extension-style match pattern. Users will be able to easily install items from any URL that matches an item in this list. Both the location of the *.xpi file and the page where the download is started from (i.e.  the referrer) must be allowed by these patterns. This setting can be used only for the default configuration.
2702 | `allowed_types` | This setting whitelists the allowed types of extension/apps that can be installed in Firefox. The value is a list of strings, each of which should be one of the following: "extension", "theme", "dictionary", "locale" This setting can be used only for the default configuration.
2703 | `blocked_install_message` | This maps to a string specifying the error message to display to users if they're blocked from installing an extension. This setting allows you to append text to the generic error message displayed when the extension is blocked. This could be be used to direct users to your help desk, explain why a particular extension is blocked, or something else. This setting can be used only for the default configuration.
2704 | `restricted_domains` | An array of domains on which content scripts can't be run. This setting can be used only for the default configuration.
2705 | `updates_disabled` | (Firefox 89, Firefox ESR 78.11) Boolean that indicates whether or not to disable automatic updates for an individual extension.
2706
2707 **Compatibility:** Firefox 69, Firefox ESR 68.1 (As of Firefox 85, Firefox ESR 78.7, installing a theme makes it the default.)\
2708 **CCK2 Equivalent:** N/A\
2709 **Preferences Affected:** N/A
2710
2711 #### Windows (GPO)
2712 Software\Policies\Mozilla\Firefox\ExtensionSettings (REG_MULTI_SZ) =
2713 ```
2714 {
2715   "*": {
2716     "blocked_install_message": "Custom error message.",
2717     "install_sources": ["https://yourwebsite.com/*"],
2718     "installation_mode": "blocked",
2719     "allowed_types": ["extension"]
2720   },
2721   "uBlock0@raymondhill.net": {
2722     "installation_mode": "force_installed",
2723     "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
2724   },
2725   "https-everywhere@eff.org": {
2726     "installation_mode": "allowed"
2727   }
2728 }
2729 ```
2730 #### Windows (Intune)
2731 OMA-URI:
2732 ```
2733 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/ExtensionSettings
2734 ```
2735 Value (string):
2736 ```
2737 <enabled/>
2738 <data id="ExtensionSettings" value='
2739 {
2740   "*": {
2741     "blocked_install_message": "Custom error message.",
2742     "install_sources": ["https://yourwebsite.com/*"],
2743     "installation_mode": "blocked",
2744     "allowed_types": ["extension"]
2745   },
2746   "uBlock0@raymondhill.net": {
2747     "installation_mode": "force_installed",
2748     "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
2749   },
2750     "https-everywhere@eff.org": {
2751     "installation_mode": "allowed"
2752   }
2753 }'/>
2754 ```
2755 #### macOS
2756 ```
2757 <dict>
2758   <key>ExtensionSettings</key>
2759   <dict>
2760     <key>*</key>
2761     <dict>
2762       <key>blocked_install_message</key>
2763       <string>Custom error message.</string>
2764       <key>install_sources</key>
2765       <array>
2766         <string>"https://yourwebsite.com/*"</string>
2767       </array>
2768       <key>installation_mode</key>
2769       <string>blocked</string>
2770       <key>allowed_types</key>
2771       <array>
2772         <string>extension</string>
2773       </array>
2774     </dict>
2775     <key>uBlock0@raymondhill.net</key>
2776     <dict>
2777       <key>installation_mode</key>
2778        <string>force_installed</string>
2779       <key>install_url</key>
2780       <string>https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi</string>
2781     </dict>
2782     <key>https-everywhere@eff.org</key>
2783     <dict>
2784       <key>installation_mode</key>
2785        <string>allowed</string>
2786     </dict>
2787   </dict>
2788 </dict>
2789 ```
2790 #### policies.json
2791 ```
2792 {
2793   "policies": {
2794     "ExtensionSettings": {
2795       "*": {
2796         "blocked_install_message": "Custom error message.",
2797         "install_sources": ["https://yourwebsite.com/*"],
2798         "installation_mode": "blocked",
2799         "allowed_types": ["extension"]
2800       },
2801       "uBlock0@raymondhill.net": {
2802         "installation_mode": "force_installed",
2803         "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
2804       },
2805       "https-everywhere@eff.org": {
2806         "installation_mode": "allowed"
2807       }
2808     }
2809   }
2810 }
2811 ```
2812 ### ExtensionUpdate
2813 Control extension updates.
2814
2815 **Compatibility:** Firefox 67, Firefox ESR 60.7\
2816 **CCK2 Equivalent:** N/A\
2817 **Preferences Affected:** `extensions.update.enabled`
2818
2819 #### Windows (GPO)
2820 ```
2821 Software\Policies\Mozilla\Firefox\ExtensionUpdate = 0x1 | 0x0
2822 ```
2823 #### Windows (Intune)
2824 OMA-URI:
2825 ```
2826 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/ExtensionUpdate
2827 ```
2828 Value (string):
2829 ```
2830 <enabled/> or <disabled/>
2831 ```
2832 #### macOS
2833 ```
2834 <dict>
2835   <key>ExtensionUpdate</key>
2836   <true/> | <false/>
2837 </dict>
2838 ```
2839 #### policies.json
2840 ```
2841 {
2842   "policies": {
2843     "ExtensionUpdate": true | false
2844   }
2845 }
2846 ```
2847 ### FirefoxHome
2848 Customize the Firefox Home page.
2849
2850 **Compatibility:** Firefox 68, Firefox ESR 68 (SponsoredTopSites and SponsoredPocket were added in Firefox 95, Firefox ESR 91.4)
2851 **CCK2 Equivalent:** N/A\
2852 **Preferences Affected:** `browser.newtabpage.activity-stream.showSearch`, `browser.newtabpage.activity-stream.feeds.topsites`, `browser.newtabpage.activity-stream.feeds.section.highlights`, `browser.newtabpage.activity-stream.feeds.section.topstories`, `browser.newtabpage.activity-stream.feeds.snippets`, `browser.newtabpage.activity-stream.showSponsoredTopSites`, `browser.newtabpage.activity-stream.showSponsored`
2853
2854 #### Windows (GPO)
2855 ```
2856 Software\Policies\Mozilla\Firefox\FirefoxHome\Search = 0x1 | 0x0
2857 Software\Policies\Mozilla\Firefox\FirefoxHome\TopSites = 0x1 | 0x0
2858 Software\Policies\Mozilla\Firefox\FirefoxHome\SponsoredTopSites = 0x1 | 0x0
2859 Software\Policies\Mozilla\Firefox\FirefoxHome\Highlights = 0x1 | 0x0
2860 Software\Policies\Mozilla\Firefox\FirefoxHome\Pocket = 0x1 | 0x0
2861 Software\Policies\Mozilla\Firefox\FirefoxHome\SponsoredPocket = 0x1 | 0x0
2862 Software\Policies\Mozilla\Firefox\FirefoxHome\Snippets = 0x1 | 0x0
2863 Software\Policies\Mozilla\Firefox\FirefoxHome\Locked = 0x1 | 0x0
2864 ```
2865 #### Windows (Intune)
2866 OMA-URI:
2867 ```
2868 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/CustomizeFirefoxHome
2869 ```
2870 Value (string):
2871 ```
2872 <enabled/>
2873 <data id="FirefoxHome_Search"  value="true | false"/>
2874 <data id="FirefoxHome_TopSites"  value="true | false"/>
2875 <data id="FirefoxHome_SponsoredTopSites"  value="true | false"/>
2876 <data id="FirefoxHome_Highlights"  value="true | false"/>
2877 <data id="FirefoxHome_Pocket"  value="true | false"/>
2878 <data id="FirefoxHome_SponsoredPocket"  value="true | false"/>
2879 <data id="FirefoxHome_Snippets"  value="true | false"/>
2880 <data id="FirefoxHome_Locked"  value="true | false"/>
2881 ```
2882 #### macOS
2883 ```
2884 <dict>
2885   <key>FirefoxHome</key>
2886   <dict>
2887     <key>Search</key>
2888     <true/> | <false/>
2889     <key>TopSites</key>
2890     <true/> | <false/>
2891     <key>SponsoredTopSites</key>
2892     <true/> | <false/>
2893     <key>Highlights</key>
2894     <true/> | <false/>
2895     <key>Pocket</key>
2896     <true/> | <false/>
2897     <key>SponsoredPocket</key>
2898     <true/> | <false/>
2899     <key>Snippets</key>
2900     <true/> | <false/>
2901     <key>Locked</key>
2902     <true/> | <false/>
2903   </dict>
2904 </dict>
2905 ```
2906 #### policies.json
2907 ```
2908 {
2909   "policies": {
2910     "FirefoxHome": {
2911       "Search": true | false,
2912       "TopSites": true | false,
2913       "SponsoredTopSites": true | false,
2914       "Highlights": true | false,
2915       "Pocket": true | false,
2916       "SponsoredPocket": true | false,
2917       "Snippets": true | false,
2918       "Locked": true | false
2919     }
2920   }
2921 }
2922 ```
2923 ### FlashPlugin (Deprecated)
2924 Configure the default Flash plugin policy as well as origins for which Flash is allowed.
2925
2926 `Allow` is a list of origins where Flash are allowed.
2927
2928 `Block` is a list of origins where Flash is not allowed.
2929
2930 `Default` determines whether or not Flash is allowed by default.
2931
2932 `Locked` prevents the user from changing Flash preferences.
2933
2934 **Compatibility:** Firefox 60, Firefox ESR 60\
2935 **CCK2 Equivalent:** `permissions.plugin`\
2936 **Preferences Affected:** `plugin.state.flash`
2937
2938 #### Windows (GPO)
2939 ```
2940 Software\Policies\Mozilla\Firefox\FlashPlugin\Allow\1 = "https://example.org"
2941 Software\Policies\Mozilla\Firefox\FlashPlugin\Block\1 = "https://example.edu"
2942 Software\Policies\Mozilla\Firefox\FlashPlugin\Default = 0x1 | 0x0
2943 Software\Policies\Mozilla\Firefox\FlashPlugin\Locked = 0x1 | 0x0
2944 ```
2945 #### Windows (Intune)
2946 OMA-URI:
2947 ```
2948 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Flash/FlashPlugin_Allow
2949 ```
2950 Value (string):
2951 ```
2952 <enabled/>
2953 <data id="Permissions" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
2954 ```
2955 OMA-URI:
2956 ```
2957 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Flash/FlashPlugin_Locked
2958 ```
2959 Value (string):
2960 ```
2961 <enabled/> or <disabled/>
2962 ```
2963 OMA-URI:
2964 ```
2965 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Flash/FlashPlugin_Default
2966 ```
2967 Value (string):
2968 ```
2969 <enabled/> or <disabled/>
2970 ```
2971 #### macOS
2972 ```
2973 <dict>
2974   <key>FlashPlugin</key>
2975   <dict>
2976     <key>Allow</key>
2977     <array>
2978       <string>http://example.org</string>
2979     </array>
2980     <key>Block</key>
2981     <array>
2982       <string>http://example.edu</string>
2983     </array>
2984     <key>Default</key>
2985     <true/> | <false/>
2986     <key>Locked</key>
2987     <true/> | <false/>
2988   </dict>
2989 </dict>
2990 ```
2991 #### policies.json
2992 ```
2993 {
2994   "policies": {
2995     "FlashPlugin": {
2996       "Allow": ["http://example.org/"],
2997       "Block": ["http://example.edu/"],
2998       "Default": true | false,
2999       "Locked": true | false
3000     }
3001   }
3002 }
3003 ```
3004 ### GoToIntranetSiteForSingleWordEntryInAddressBar
3005 Whether to always go through the DNS server before sending a single word search string to a search engine.
3006
3007 If the site exists, it will navigate to the website. If the intranet responds with a 404, the page will show a 404. If the intranet does not respond, the browser will attempt a search.
3008
3009 The second result in the URL bar will be a search result to allow users to conduct a web search exactly as it was entered.
3010
3011 If instead you would like to enable the ability to have your domain appear as a valid URL and to disallow the browser from ever searching that term using the first result that matches it, add the pref `browser.fixup.domainwhitelist.YOUR_DOMAIN` (where `YOUR_DOMAIN` is the name of the domain you'd like to add), and set the pref to `true`. The URL bar will then suggest `YOUR_DOMAIN` when the user fully types `YOUR_DOMAIN`. If the user attempts to load that domain and it fails to load, it will show an "Unable to connect" error page.
3012
3013 You can also whitelist a domain suffix that is not part of the [Public Suffix List](https://publicsuffix.org/) by adding the pref `browser.fixup.domainsuffixwhitelist.YOUR_DOMAIN_SUFFIX` with a value of `true`.
3014
3015 Additionally, if you want users to see a "Did you mean to go to 'YOUR_DOMAIN'" prompt below the URL bar if they land on a search results page instead of an intranet domain that provides a response, set the pref `browser.urlbar.dnsResolveSingleWordsAfterSearch` to `1`. Enabling this will cause the browser to commit a DNS check after every single word search. If the browser receives a response from the intranet, a prompt will ask the user if they'd like to instead navigate to `YOUR_DOMAIN`. If the user presses the **yes** button, `browser.fixup.domainwhitelist.YOUR_DOMAIN` will be set to `true`.
3016
3017 **Compatibility:** Firefox 104, Firefox ESR 102.2\
3018 **CCK2 Equivalent:** `N/A`\
3019 **Preferences Affected:** `browser.fixup.dns_first_for_single_words`
3020
3021 #### Windows (GPO)
3022 ```
3023 Software\Policies\Mozilla\Firefox\GoToIntranetSiteForSingleWordEntryInAddressBar = 0x1 | 0x0
3024 ```
3025 #### Windows (Intune)
3026 OMA-URI:
3027 ```
3028 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/GoToIntranetSiteForSingleWordEntryInAddressBar
3029 ```
3030 Value (string):
3031 ```
3032 <enabled/> or <disabled/>
3033 ```
3034 #### macOS
3035 ```
3036 <dict>
3037   <key>GoToIntranetSiteForSingleWordEntryInAddressBar</key>
3038   <true/> | <false/>
3039 </dict>
3040 ```
3041 #### policies.json
3042 ```
3043 {
3044   "policies": {
3045     "GoToIntranetSiteForSingleWordEntryInAddressBar": true | false
3046   }
3047 }
3048 ```
3049 ### Handlers
3050 Configure default application handlers. This policy is based on the internal format of `handlers.json`.
3051
3052 You can configure handlers based on a mime type (`mimeTypes`), a file's extension (`extensions`), or a protocol (`schemes`).
3053
3054 Within each handler type, you specify the given mimeType/extension/scheme as a key and use the following subkeys to describe how it is handled.
3055
3056 | Name | Description |
3057 | --- | --- |
3058 | `action`| Can be either `saveToDisk`, `useHelperApp`, `useSystemDefault`.
3059 | `ask` | If `true`, the user is asked if what they want to do with the file. If `false`, the action is taken without user intervention.
3060 | `handlers` | An array of handlers with the first one being the default. If you don't want to have a default handler, use an empty object for the first handler. Choose between path or uriTemplate.
3061 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`name` | The display name of the handler (might not be used).
3062 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`path`| The native path to the executable to be used.
3063 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`uriTemplate`| A url to a web based application handler. The URL must be https and contain a %s to be used for substitution.
3064
3065 **Compatibility:** Firefox 78, Firefox ESR 78\
3066 **CCK2 Equivalent:** N/A\
3067 **Preferences Affected:** N/A
3068
3069 #### Windows (GPO)
3070 Software\Policies\Mozilla\Firefox\Handlers (REG_MULTI_SZ) =
3071 ```
3072 {
3073   "mimeTypes": {
3074     "application/msword": {
3075       "action": "useSystemDefault",
3076       "ask": true | false
3077     }
3078   },
3079   "schemes": {
3080     "mailto": {
3081       "action": "useHelperApp",
3082       "ask": true | false,
3083       "handlers": [{
3084         "name": "Gmail",
3085         "uriTemplate": "https://mail.google.com/mail/?extsrc=mailto&url=%s"
3086       }]
3087     }
3088   },
3089   "extensions": {
3090     "pdf": {
3091       "action": "useHelperApp",
3092       "ask": true | false,
3093       "handlers": [{
3094         "name": "Adobe Acrobat",
3095         "path": "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32.exe"
3096       }]
3097     }
3098   }
3099 }
3100 ```
3101 #### Windows (Intune)
3102 OMA-URI:
3103 ```
3104 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Handlers
3105 ```
3106 Value (string):
3107 ```
3108 <enabled/>
3109 <data id="Handlers" value='
3110 {
3111   "mimeTypes": {
3112     "application/msword": {
3113       "action": "useSystemDefault",
3114       "ask": true | false
3115     }
3116   },
3117   "schemes": {
3118     "mailto": {
3119       "action": "useHelperApp",
3120       "ask": true | false,
3121       "handlers": [{
3122         "name": "Gmail",
3123         "uriTemplate": "https://mail.google.com/mail/?extsrc=mailto&amp;url=%s"
3124       }]
3125     }
3126   },
3127   "extensions": {
3128     "pdf": {
3129       "action": "useHelperApp",
3130       "ask": true | false,
3131       "handlers": [{
3132         "name": "Adobe Acrobat",
3133         "path": "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32.exe"
3134       }]
3135     }
3136   }
3137 }
3138 '/>
3139 ```
3140 #### macOS
3141 ```
3142 <dict>
3143   <key>Handlers</key>
3144   <dict>
3145     <key>mimeTypes</key>
3146     <dict>
3147       <key>application/msword</key>
3148       <dict>
3149         <key>action</key>
3150         <string>useSystemDefault</string>
3151         <key>ask</key>
3152         <true/> | <false/>
3153       </dict>
3154     </dict>
3155     <key>schemes</key>
3156     <dict>
3157       <key>mailto</key>
3158       <dict>
3159         <key>action</key>
3160         <string>useHelperApp</string>
3161         <key>ask</key>
3162         <true/> | <false/>
3163         <key>handlers</key>
3164         <array>
3165           <dict>
3166             <key>name</key>
3167             <string>Gmail</string>
3168             <key>uriTemplate</key>
3169             <string>https://mail.google.com/mail/?extsrc=mailto&url=%s</string>
3170           </dict>
3171         </array>
3172       </dict>
3173     </dict>
3174     <key>extensions</key>
3175     <dict>
3176       <key>pdf</key>
3177       <dict>
3178         <key>action</key>
3179         <string>useHelperApp</string>
3180         <key>ask</key>
3181         <true/> | <false/>
3182         <key>handlers</key>
3183         <array>
3184           <dict>
3185             <key>name</key>
3186             <string>Adobe Acrobat</string>
3187             <key>path</key>
3188             <string>/System/Applications/Preview.app</string>
3189           </dict>
3190         </array>
3191       </dict>
3192     </dict>
3193   </dict>
3194 </dict>
3195 ```
3196 #### policies.json
3197 ```
3198 {
3199   "policies": {
3200     "Handlers": {
3201       "mimeTypes": {
3202         "application/msword": {
3203           "action": "useSystemDefault",
3204           "ask": false
3205         }
3206       },
3207       "schemes": {
3208         "mailto": {
3209           "action": "useHelperApp",
3210           "ask": true | false,
3211           "handlers": [{
3212             "name": "Gmail",
3213             "uriTemplate": "https://mail.google.com/mail/?extsrc=mailto&url=%s"
3214           }]
3215         }
3216       },
3217       "extensions": {
3218         "pdf": {
3219           "action": "useHelperApp",
3220           "ask": true | false,
3221           "handlers": [{
3222             "name": "Adobe Acrobat",
3223             "path": "/usr/bin/acroread"
3224           }]
3225         }
3226       }
3227     }
3228   }
3229 }
3230 ```
3231 ### HardwareAcceleration
3232 Control hardware acceleration.
3233
3234 **Compatibility:** Firefox 60, Firefox ESR 60\
3235 **CCK2 Equivalent:** N/A\
3236 **Preferences Affected:** `layers.acceleration.disabled`
3237
3238 #### Windows (GPO)
3239 ```
3240 Software\Policies\Mozilla\Firefox\HardwareAcceleration = 0x1 | 0x0
3241 ```
3242 #### Windows (Intune)
3243 OMA-URI:
3244 ```
3245 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/HardwareAcceleration
3246 ```
3247 Value (string):
3248 ```
3249 <enabled/> or <disabled/>
3250 ```
3251 #### macOS
3252 ```
3253 <dict>
3254   <key>HardwareAcceleration</key>
3255   <true/> | <false/>
3256 </dict>
3257 ```
3258 #### policies.json
3259 ```
3260 {
3261   "policies": {
3262     "HardwareAcceleration": true | false
3263   }
3264 }
3265 ```
3266 ### Homepage
3267 Configure the default homepage and how Firefox starts.
3268
3269 `URL` is the default homepage.
3270
3271 `Locked` prevents the user from changing homepage preferences.
3272
3273 `Additional` allows for more than one homepage.
3274
3275 `StartPage` is how Firefox starts. The choices are no homepage, the default homepage or the previous session.
3276
3277 With Firefox 78, an additional option as added for `Startpage`, `homepage-locked`. If this is value is set for the Startpage, the user will always get the homepage at startup and cannot choose to restore their session.
3278
3279 **Compatibility:** Firefox 60, Firefox ESR 60 (StartPage was added in Firefox 60, Firefox ESR 60.4, homepage-locked added in Firefox 78)\
3280 **CCK2 Equivalent:** `homePage`,`lockHomePage`\
3281 **Preferences Affected:** `browser.startup.homepage`, `browser.startup.page`
3282
3283 #### Windows (GPO)
3284 ```
3285 Software\Policies\Mozilla\Firefox\Homepage\URL = "https://example.com"
3286 Software\Policies\Mozilla\Firefox\Homepage\Locked = 0x1 | 0x0
3287 Software\Policies\Mozilla\Firefox\Homepage\Additional\1 = "https://example.org"
3288 Software\Policies\Mozilla\Firefox\Homepage\Additional\2 = "https://example.edu"
3289 Software\Policies\Mozilla\Firefox\Homepage\StartPage = "none" | "homepage" | "previous-session" | "homepage-locked"
3290 ```
3291 #### Windows (Intune)
3292 OMA-URI:
3293 ```
3294 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageURL
3295 ```
3296 Value (string):
3297 ```
3298 <enabled/>
3299
3300 <data id="HomepageURL" value="https://example.com"/>
3301 <data id="HomepageLocked" value="true | false"/>
3302 ```
3303 OMA-URI:
3304 ```
3305 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageAdditional
3306 ```
3307 Value (string):
3308 ```
3309 <enabled/>
3310
3311 <data id="HomepageAdditional" value="1&#xF000;http://example.org&#xF000;2&#xF000;http://example.edu"/>
3312 ```
3313 OMA-URI:
3314 ```
3315 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageStartPage
3316 ```
3317 Value (string):
3318 ```
3319 <enabled/>
3320
3321 <data id="StartPage" value="none | homepage | previous-session"/>
3322 ```
3323 #### macOS
3324 ```
3325 <dict>
3326   <key>Homepage</key>
3327   <dict>
3328     <key>URL</key>
3329     <string>http://example.com</string>
3330     <key>Locked</key>
3331     <true/> | <false/>
3332     <key>Additional</key>
3333     <array>
3334       <string>http://example.org</string>
3335       <string>http://example.edu</string>
3336     </array>
3337     <key>StartPage</key>
3338     <string>none | homepage | previous-session | homepage-locked</string>
3339   </dict>
3340 </dict>
3341 ```
3342 #### policies.json
3343 ```
3344 {
3345   "policies": {
3346     "Homepage": {
3347       "URL": "http://example.com/",
3348       "Locked": true | false,
3349       "Additional": ["http://example.org/",
3350                      "http://example.edu/"],
3351       "StartPage": "none" | "homepage" | "previous-session" | "homepage-locked"
3352     }
3353   }
3354 }
3355 ```
3356 ### InstallAddonsPermission
3357 Configure the default extension install policy as well as origins for extension installs are allowed. This policy does not override turning off all extension installs.
3358
3359 `Allow` is a list of origins where extension installs are allowed.
3360
3361 `Default` determines whether or not extension installs are allowed by default.
3362
3363 **Compatibility:** Firefox 60, Firefox ESR 60\
3364 **CCK2 Equivalent:** `permissions.install`\
3365 **Preferences Affected:** `xpinstall.enabled`
3366
3367 #### Windows (GPO)
3368 ```
3369 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Allow\1 = "https://example.org"
3370 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Allow\2 = "https://example.edu"
3371 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Default = 0x1 | 0x0
3372 ```
3373 #### Windows (Intune)
3374 OMA-URI:
3375 ```
3376 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Addons/InstallAddonsPermission_Allow
3377 ```
3378 Value (string):
3379 ```
3380 <enabled/>
3381 <data id="Permissions" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
3382 ```
3383 OMA-URI:
3384 ```
3385 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Addons/InstallAddonsPermission_Default
3386 ```
3387 Value (string):
3388 ```
3389 <enabled/>
3390 ```
3391 #### macOS
3392 ```
3393 <dict>
3394   <key>InstallAddonsPermission</key>
3395   <dict>
3396     <key>Allow</key>
3397     <array>
3398       <string>http://example.org</string>
3399       <string>http://example.edu</string>
3400     </array>
3401     <key>Default</key>
3402     <true/> | <false/>
3403   </dict>
3404 </dict>
3405 ```
3406 #### policies.json
3407 ```
3408 {
3409   "policies": {
3410     "InstallAddonsPermission": {
3411       "Allow": ["http://example.org/",
3412                 "http://example.edu/"],
3413       "Default": true | false
3414     }
3415   }
3416 }
3417 ```
3418 ### LegacyProfiles
3419 Disable the feature enforcing a separate profile for each installation.
3420
3421 If this policy set to true, Firefox will not try to create different profiles for installations of Firefox in different directories. This is the equivalent of the MOZ_LEGACY_PROFILES environment variable.
3422
3423 If this policy set to false, Firefox will create a new profile for each unique installation of Firefox.
3424
3425 This policy only work on Windows via GPO (not policies.json).
3426
3427 **Compatibility:** Firefox 70, Firefox ESR 68.2 (Windows only, GPO only)\
3428 **CCK2 Equivalent:** N/A\
3429 **Preferences Affected:** N/A
3430
3431 #### Windows (GPO)
3432 ```
3433 Software\Policies\Mozilla\Firefox\LegacyProfiles = = 0x1 | 0x0
3434 ```
3435 #### Windows (Intune)
3436 OMA-URI:
3437 ```
3438 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/LegacyProfiles
3439 ```
3440 Value (string):
3441 ```
3442 <enabled/> or <disabled/>
3443 ```
3444 ### LegacySameSiteCookieBehaviorEnabled
3445 Enable default legacy SameSite cookie behavior setting.
3446
3447 If this policy is set to true, it reverts all cookies to legacy SameSite behavior which means that cookies that don't explicitly specify a ```SameSite``` attribute are treated as if they were ```SameSite=None```.
3448
3449 **Compatibility:** Firefox 96\
3450 **CCK2 Equivalent:** N/A\
3451 **Preferences Affected:** `network.cookie.sameSite.laxByDefault`
3452
3453 #### Windows (GPO)
3454 ```
3455 Software\Policies\Mozilla\Firefox\LegacySameSiteCookieBehaviorEnabled = = 0x1 | 0x0
3456 ```
3457 #### Windows (Intune)
3458 OMA-URI:
3459 ```
3460 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/LegacySameSiteCookieBehaviorEnabled
3461 ```
3462 Value (string):
3463 ```
3464 <enabled/> or <disabled/>
3465 ```
3466 #### macOS
3467 ```
3468 <dict>
3469   <key>LegacySameSiteCookieBehaviorEnabled</key>
3470   <true/> | <false/>
3471 </dict>
3472 ```
3473 #### policies.json
3474 ```
3475 {
3476   "policies": {
3477     "LegacySameSiteCookieBehaviorEnabled": true | false
3478 }
3479 ```
3480 ### LegacySameSiteCookieBehaviorEnabledForDomainList
3481 Revert to legacy SameSite behavior for cookies on specified sites.
3482
3483 If this policy is set to true, cookies set for domains in this list will revert to legacy SameSite behavior which means that cookies that don't explicitly specify a ```SameSite``` attribute are treated as if they were ```SameSite=None```.
3484
3485 **Compatibility:** Firefox 96\
3486 **CCK2 Equivalent:** N/A\
3487 **Preferences Affected:** `network.cookie.sameSite.laxByDefault.disabledHosts`
3488
3489 #### Windows (GPO)
3490 ```
3491 Software\Policies\Mozilla\Firefox\LegacySameSiteCookieBehaviorEnabledForDomainList\1 = "example.org"
3492 Software\Policies\Mozilla\Firefox\LegacySameSiteCookieBehaviorEnabledForDomainList\2 = "example.edu"
3493 ```
3494 #### Windows (Intune)
3495 OMA-URI:
3496 ```
3497 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/LegacySameSiteCookieBehaviorEnabledForDomainList
3498 ```
3499 Value (string):
3500 ```
3501 <enabled/>
3502 <data id="LegacySameSiteCookieBehaviorEnabledForDomainList" value="1&#xF000;example.org&#xF000;2&#xF000;example.edu"/>
3503 ```
3504 #### macOS
3505 ```
3506 <dict>
3507   <key>LegacySameSiteCookieBehaviorEnabledForDomainList</key>
3508   <array>
3509     <string>example.org</string>
3510     <string>example.edu</string>
3511   </array>
3512 </dict>
3513 ```
3514 #### policies.json
3515 ```
3516 {
3517   "policies": {
3518     "LegacySameSiteCookieBehaviorEnabledForDomainList": ["example.org",
3519                                                          "example.edu"]
3520   }
3521 }
3522 ```
3523 ### LocalFileLinks
3524 Enable linking to local files by origin.
3525
3526 **Compatibility:** Firefox 68, Firefox ESR 68\
3527 **CCK2 Equivalent:** N/A\
3528 **Preferences Affected:** `capability.policy.localfilelinks.*`
3529
3530 #### Windows (GPO)
3531 ```
3532 Software\Policies\Mozilla\Firefox\LocalFileLinks\1 = "https://example.org"
3533 Software\Policies\Mozilla\Firefox\LocalFileLinks\2 = "https://example.edu"
3534 ```
3535 #### Windows (Intune)
3536 OMA-URI:
3537 ```
3538 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/LocalFileLinks
3539 ```
3540 Value (string):
3541 ```
3542 <enabled/>
3543 <data id="LocalFileLinks" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
3544 ```
3545 #### macOS
3546 ```
3547 <dict>
3548   <key>LocalFileLinks</key>
3549   <array>
3550     <string>http://example.org</string>
3551     <string>http://example.edu</string>
3552   </array>
3553 </dict>
3554 ```
3555 #### policies.json
3556 ```
3557 {
3558   "policies": {
3559     "LocalFileLinks": ["http://example.org/",
3560                        "http://example.edu/"]
3561   }
3562 }
3563 ```
3564 ### ManagedBookmarks
3565 Configures a list of bookmarks managed by an administrator that cannot be changed by the user.
3566
3567 The bookmarks are only added as a button on the personal toolbar. They are not in the bookmarks folder.
3568
3569 The syntax of this policy is exactly the same as the [Chrome ManagedBookmarks policy](https://cloud.google.com/docs/chrome-enterprise/policies/?policy=ManagedBookmarks). The schema is:
3570 ```
3571 {
3572  "items": {
3573   "id": "BookmarkType",
3574   "properties": {
3575    "children": {
3576     "items": {
3577      "$ref": "BookmarkType"
3578     },
3579     "type": "array"
3580    },
3581    "name": {
3582     "type": "string"
3583    },
3584    "toplevel_name": {
3585     "type": "string"
3586    },
3587    "url": {
3588     "type": "string"
3589    }
3590   },
3591   "type": "object"
3592  },
3593  "type": "array"
3594 }
3595 ```
3596 **Compatibility:** Firefox 83, Firefox ESR 78.5\
3597 **CCK2 Equivalent:** N/A\
3598 **Preferences Affected:** N/A
3599
3600 #### Windows (GPO)
3601 Software\Policies\Mozilla\Firefox\ManagedBookmarks (REG_MULTI_SZ) =
3602 ```
3603 [
3604   {
3605     "toplevel_name": "My managed bookmarks folder"
3606   },
3607   {
3608     "url": "example.com",
3609     "name": "Example"
3610   },
3611   {
3612     "name": "Mozilla links",
3613     "children": [
3614       {
3615         "url": "https://mozilla.org",
3616         "name": "Mozilla.org"
3617       },
3618       {
3619         "url": "https://support.mozilla.org/",
3620         "name": "SUMO"
3621       }
3622     ]
3623   }
3624 ]
3625 ```
3626 #### Windows (Intune)
3627 OMA-URI:
3628 ```
3629 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/ManagedBookmarks
3630 ```
3631 Value (string):
3632 ```
3633 <enabled/>
3634 <data id="JSON" value='
3635 [
3636   {
3637     "toplevel_name": "My managed bookmarks folder"
3638   },
3639   {
3640     "url": "example.com",
3641     "name": "Example"
3642   },
3643   {
3644     "name": "Mozilla links",
3645     "children": [
3646       {
3647         "url": "https://mozilla.org",
3648         "name": "Mozilla.org"
3649       },
3650       {
3651         "url": "https://support.mozilla.org/",
3652         "name": "SUMO"
3653       }
3654     ]
3655   }
3656 ]'/>
3657 ```
3658 #### macOS
3659 ```
3660 <dict>
3661   <key>ManagedBookmarks</key>
3662   <array>
3663     <dict>
3664       <key>toplevel_name</key>
3665       <string>My managed bookmarks folder</string>
3666       <dict>
3667         <key>url</key>
3668         <string>example.com</string>
3669         <key>name</key>
3670         <string>Example</string>
3671       </dict>
3672       <dict>
3673       <key>name</key>
3674       <string>Mozilla links</string>
3675       <key>children</key>
3676       <array>
3677         <dict>
3678           <key>url</key>
3679           <string>https://mozilla.org</string>
3680           <key>name</key>
3681           <string>Mozilla</string>
3682         </dict>
3683         <dict>
3684           <key>url</key>
3685           <string>https://support.mozilla.org/</string>
3686           <key>name</key>
3687           <string>SUMO</string>
3688         </dict>
3689       </array>
3690     </dict>
3691   </array>
3692 </dict>
3693 ```
3694 #### policies.json
3695 ```
3696 {
3697   "policies": {
3698     "ManagedBookmarks": [
3699       {
3700         "toplevel_name": "My managed bookmarks folder"
3701       },
3702       {
3703         "url": "example.com",
3704         "name": "Example"
3705       },
3706       {
3707         "name": "Mozilla links",
3708         "children": [
3709           {
3710             "url": "https://mozilla.org",
3711             "name": "Mozilla.org"
3712           },
3713           {
3714             "url": "https://support.mozilla.org/",
3715             "name": "SUMO"
3716           }
3717         ]
3718       }
3719     ]
3720   }
3721 }
3722 ```
3723 ### ManualAppUpdateOnly
3724
3725 Switch to manual updates only.
3726
3727 If this policy is enabled:
3728  1. The user will never be prompted to install updates
3729  2. Firefox will not check for updates in the background, though it will check automatically when an update UI is displayed (such as the one in the About dialog). This check will be used to show "Update to version X" in the UI, but will not automatically download the update or prompt the user to update in any other way.
3730  3. The update UI will work as expected, unlike when using DisableAppUpdate.
3731
3732 This policy is primarily intended for advanced end users, not for enterprises.
3733
3734 **Compatibility:** Firefox 87\
3735 **CCK2 Equivalent:** N/A\
3736 **Preferences Affected:** N/A
3737
3738 #### policies.json
3739 ```
3740 {
3741   "policies": {
3742     "ManualAppUpdateOnly": true | false
3743   }
3744 }
3745 ```
3746 ### NetworkPrediction
3747 Enable or disable network prediction (DNS prefetching).
3748
3749 **Compatibility:** Firefox 67, Firefox ESR 60.7\
3750 **CCK2 Equivalent:** N/A\
3751 **Preferences Affected:** `network.dns.disablePrefetch`, `network.dns.disablePrefetchFromHTTPS`
3752
3753 #### Windows (GPO)
3754 ```
3755 Software\Policies\Mozilla\Firefox\NetworkPrediction = 0x1 | 0x0
3756 ```
3757 #### Windows (Intune)
3758 OMA-URI:
3759 ```
3760 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NetworkPrediction
3761 ```
3762 Value (string):
3763 ```
3764 <enabled/> or <disabled/>
3765 ```
3766 #### macOS
3767 ```
3768 <dict>
3769   <key>NetworkPrediction</key>
3770   <true/> | <false/>
3771 </dict>
3772 ```
3773 #### policies.json
3774 ```
3775 {
3776   "policies": {
3777     "NetworkPrediction": true | false
3778 }
3779 ```
3780 ### NewTabPage
3781 Enable or disable the New Tab page.
3782
3783 **Compatibility:** Firefox 68, Firefox ESR 68\
3784 **CCK2 Equivalent:** N/A\
3785 **Preferences Affected:** `browser.newtabpage.enabled`
3786
3787 #### Windows (GPO)
3788 ```
3789 Software\Policies\Mozilla\Firefox\NewTabPage = 0x1 | 0x0
3790 ```
3791 #### Windows (Intune)
3792 OMA-URI:
3793 ```
3794 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NewTabPage
3795 ```
3796 Value (string):
3797 ```
3798 <enabled/> or <disabled/>
3799 ```
3800 #### macOS
3801 ```
3802 <dict>
3803   <key>NewTabPage</key>
3804   <true/> | <false/>
3805 </dict>
3806 ```
3807 #### policies.json
3808 ```
3809 {
3810   "policies": {
3811     "NewTabPage": true | false
3812 }
3813 ```
3814 ### NoDefaultBookmarks
3815 Disable the creation of default bookmarks.
3816
3817 This policy is only effective if the user profile has not been created yet.
3818
3819 **Compatibility:** Firefox 60, Firefox ESR 60\
3820 **CCK2 Equivalent:** `removeDefaultBookmarks`\
3821 **Preferences Affected:** N/A
3822
3823 #### Windows (GPO)
3824 ```
3825 Software\Policies\Mozilla\Firefox\NoDefaultBookmarks = 0x1 | 0x0
3826 ```
3827 #### Windows (Intune)
3828 OMA-URI:
3829 ```
3830 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NoDefaultBookmarks
3831 ```
3832 Value (string):
3833 ```
3834 <enabled/> or <disabled/>
3835 ```
3836 #### macOS
3837 ```
3838 <dict>
3839   <key>NoDefaultBookmarks</key>
3840   <true/> | <false/>
3841 </dict>
3842 ```
3843 #### policies.json
3844 ```
3845 {
3846   "policies": {
3847     "NoDefaultBookmarks": true | false
3848   }
3849 }
3850 ```
3851 ### OfferToSaveLogins
3852 Control whether or not Firefox offers to save passwords.
3853
3854 **Compatibility:** Firefox 60, Firefox ESR 60\
3855 **CCK2 Equivalent:** `dontRememberPasswords`\
3856 **Preferences Affected:** `signon.rememberSignons`
3857
3858 #### Windows (GPO)
3859 ```
3860 Software\Policies\Mozilla\Firefox\OfferToSaveLogins = 0x1 | 0x0
3861 ```
3862 #### Windows (Intune)
3863 OMA-URI:
3864 ```
3865 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OfferToSaveLogins
3866 ```
3867 Value (string):
3868 ```
3869 <enabled/> or <disabled/>
3870 ```
3871 #### macOS
3872 ```
3873 <dict>
3874   <key>OfferToSaveLogins</key>
3875   <true/> | <false/>
3876 </dict>
3877 ```
3878 #### policies.json
3879 ```
3880 {
3881   "policies": {
3882     "OfferToSaveLogins": true | false
3883   }
3884 }
3885 ```
3886 ### OfferToSaveLoginsDefault
3887 Sets the default value of signon.rememberSignons without locking it.
3888
3889 **Compatibility:** Firefox 70, Firefox ESR 60.2\
3890 **CCK2 Equivalent:** `dontRememberPasswords`\
3891 **Preferences Affected:** `signon.rememberSignons`
3892
3893 #### Windows (GPO)
3894 ```
3895 Software\Policies\Mozilla\Firefox\OfferToSaveLoginsDefault = 0x1 | 0x0
3896 ```
3897 #### Windows (Intune)
3898 OMA-URI:
3899 ```
3900 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OfferToSaveLoginsDefault
3901 ```
3902 Value (string):
3903 ```
3904 <enabled/> or <disabled/>
3905 ```
3906 #### macOS
3907 ```
3908 <dict>
3909   <key>OfferToSaveLoginsDefault</key>
3910   <true/> | <false/>
3911 </dict>
3912 ```
3913 #### policies.json
3914 ```
3915 {
3916   "policies": {
3917     "OfferToSaveLoginsDefault": true | false
3918   }
3919 }
3920 ```
3921 ### OverrideFirstRunPage
3922 Override the first run page. If the value is an empty string (""), the first run page is not displayed.
3923
3924 Starting with Firefox 83, Firefox ESR 78.5, you can also specify multiple URLS separated by a vertical bar (|).
3925
3926 **Compatibility:** Firefox 60, Firefox ESR 60\
3927 **CCK2 Equivalent:** `welcomePage`,`noWelcomePage`\
3928 **Preferences Affected:** `startup.homepage_welcome_url`
3929
3930 #### Windows (GPO)
3931 ```
3932 Software\Policies\Mozilla\Firefox\OverrideFirstRunPage = "http://example.org"
3933 ```
3934 #### Windows (Intune)
3935 OMA-URI:
3936 ```
3937 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OverrideFirstRunPage
3938 ```
3939 Value (string):
3940 ```
3941 <enabled/>
3942 <data id="OverridePage" value="https://example.com"/>
3943 ```
3944 #### macOS
3945 ```
3946 <dict>
3947   <key>OverrideFirstRunPage</key>
3948   <string>http://example.org</string>
3949 </dict>
3950 ```
3951 #### policies.json
3952 ```
3953 {
3954   "policies": {
3955     "OverrideFirstRunPage": "http://example.org"
3956   }
3957 }
3958 ```
3959 ### OverridePostUpdatePage
3960 Override the upgrade page. If the value is an empty string (""), no extra pages are displayed when Firefox is upgraded.
3961
3962 **Compatibility:** Firefox 60, Firefox ESR 60\
3963 **CCK2 Equivalent:** `upgradePage`,`noUpgradePage`\
3964 **Preferences Affected:** `startup.homepage_override_url`
3965
3966 #### Windows (GPO)
3967 ```
3968 Software\Policies\Mozilla\Firefox\OverridePostUpdatePage = "http://example.org"
3969 ```
3970 #### Windows (Intune)
3971 OMA-URI:
3972 ```
3973 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OverridePostUpdatePage
3974 ```
3975 Value (string):
3976 ```
3977 <enabled/>
3978 <data id="OverridePage" value="https://example.com"/>
3979 ```
3980 #### macOS
3981 ```
3982 <dict>
3983   <key>OverridePostUpdatePage</key>
3984   <string>http://example.org</string>
3985 </dict>
3986 ```
3987 #### policies.json
3988 ```
3989 {
3990   "policies": {
3991     "OverridePostUpdatePage": "http://example.org"
3992   }
3993 }
3994 ```
3995 ### PasswordManagerEnabled
3996 Remove access to the password manager via preferences and blocks about:logins on Firefox 70.
3997
3998 **Compatibility:** Firefox 70, Firefox ESR 60.2\
3999 **CCK2 Equivalent:** N/A\
4000 **Preferences Affected:** `pref.privacy.disable_button.view_passwords`
4001
4002 #### Windows (GPO)
4003 ```
4004 Software\Policies\Mozilla\Firefox\PasswordManagerEnabled = 0x1 | 0x0
4005 ```
4006 #### Windows (Intune)
4007 OMA-URI:
4008 ```
4009 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PasswordManagerEnabled
4010 ```
4011 Value (string):
4012 ```
4013 <enabled/> or <disabled/>
4014 ```
4015 #### macOS
4016 ```
4017 <dict>
4018   <key>PasswordManagerEnabled</key>
4019   <true/> | <false/>
4020 </dict>
4021 ```
4022 #### policies.json
4023 ```
4024 {
4025   "policies": {
4026     "PasswordManagerEnabled": true | false
4027   }
4028 }
4029 ```
4030 ### PasswordManagerExceptions
4031 Prevent Firefox from saving passwords for specific sites.
4032
4033 The sites are specified as a list of origins.
4034
4035 **Compatibility:** Firefox 101\
4036 **CCK2 Equivalent:** N/A\
4037 **Preferences Affected:** N/A
4038
4039 #### Windows (GPO)
4040 ```
4041 Software\Policies\Mozilla\Firefox\PasswordManagerExceptions\1 = "https://example.org"
4042 Software\Policies\Mozilla\Firefox\PasswordManagerExceptions\2 = "https://example.edu"
4043 ```
4044 #### Windows (Intune)
4045 OMA-URI:
4046 ```
4047 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PasswordManagerExceptions
4048 ```
4049 Value (string):
4050 ```
4051 <enabled/>
4052 <data id="List" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
4053 ```
4054 #### macOS
4055 ```
4056 <dict>
4057   <key>PasswordManagerExceptions</key>
4058   <array>
4059     <string>https://example.org</string>
4060     <string>https://example.edu</string>
4061   </array>
4062 </dict>
4063 ```
4064 #### policies.json
4065 ```
4066 {
4067   "policies": {
4068     "PasswordManagerExceptions": ["https://example.org",
4069                                   "https://example.edu"]
4070   }
4071 }
4072 ```
4073
4074 ### PDFjs
4075 Disable or configure PDF.js, the built-in PDF viewer.
4076
4077 If `Enabled` is set to false, the built-in PDF viewer is disabled.
4078
4079 If `EnablePermissions` is set to true, the built-in PDF viewer will honor document permissions like preventing the copying of text.
4080
4081 Note: DisableBuiltinPDFViewer has not been deprecated. You can either continue to use it, or switch to using PDFjs->Enabled to disable the built-in PDF viewer. This new permission was added because we needed a place for PDFjs->EnabledPermissions.
4082
4083 **Compatibility:** Firefox 77, Firefox ESR 68.9\
4084 **CCK2 Equivalent:** N/A\
4085 **Preferences Affected:** `pdfjs.diabled`, `pdfjs.enablePermissions`
4086
4087 #### Windows (GPO)
4088 ```
4089 Software\Policies\Mozilla\Firefox\PDFjs\Enabled = 0x1 | 0x0
4090 Software\Policies\Mozilla\Firefox\PDFjs\EnablePermissions = 0x1 | 0x0
4091 ```
4092 #### Windows (Intune)
4093 OMA-URI:
4094 ```
4095 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PDFjs/PDFjs_Enabled
4096 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PDFjs/PDFjs_EnablePermissions
4097 ```
4098 Value (string):
4099 ```
4100 <enabled/>or <disabled/>
4101 ```
4102 #### macOS
4103 ```
4104 <dict>
4105   <key>PDFjs</key>
4106   <dict>
4107     <key>Enabled</key>
4108     <true/> | <false/>
4109     <key>EnablePermissions</key>
4110     <true/> | <false/>
4111   </dict>
4112 </dict>
4113 ```
4114 #### policies.json
4115 ```
4116 {
4117   "policies": {
4118     "PDFjs": {
4119       "Enabled": true | false,
4120       "EnablePermissions": true | false
4121     }
4122   }
4123 }
4124 ```
4125 ### Permissions
4126 Set permissions associated with camera, microphone, location, notifications, autoplay, and virtual reality. Because these are origins, not domains, entries with unique ports must be specified separately. This explicitly means that it is not possible to add wildcards. See examples below.
4127
4128 `Allow` is a list of origins where the feature is allowed.
4129
4130 `Block` is a list of origins where the feature is not allowed.
4131
4132 `BlockNewRequests` determines whether or not new requests can be made for the feature.
4133
4134 `Locked` prevents the user from changing preferences for the feature.
4135
4136 `Default` specifies the default value for Autoplay. block-audio-video is not supported on Firefox ESR 68.
4137
4138 **Compatibility:** Firefox 62, Firefox ESR 60.2 (Autoplay added in Firefox 74, Firefox ESR 68.6, Autoplay Default/Locked added in Firefox 76, Firefox ESR 68.8, VirtualReality added in Firefox 80, Firefox ESR 78.2)\
4139 **CCK2 Equivalent:** N/A\
4140 **Preferences Affected:** `permissions.default.camera`, `permissions.default.microphone`, `permissions.default.geo`, `permissions.default.desktop-notification`, `media.autoplay.default`, `permissions.default.xr`
4141
4142 #### Windows (GPO)
4143 ```
4144 Software\Policies\Mozilla\Firefox\Permissions\Camera\Allow\1 = "https://example.org"
4145 Software\Policies\Mozilla\Firefox\Permissions\Camera\Allow\2 = "https://example.org:1234"
4146 Software\Policies\Mozilla\Firefox\Permissions\Camera\Block\1 = "https://example.edu"
4147 Software\Policies\Mozilla\Firefox\Permissions\Camera\BlockNewRequests = 0x1 | 0x0
4148 Software\Policies\Mozilla\Firefox\Permissions\Camera\Locked = 0x1 | 0x0
4149 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Allow\1 = "https://example.org"
4150 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Block\1 = "https://example.edu"
4151 Software\Policies\Mozilla\Firefox\Permissions\Microphone\BlockNewRequests = 0x1 | 0x0
4152 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Locked = 0x1 | 0x0
4153 Software\Policies\Mozilla\Firefox\Permissions\Location\Allow\1 = "https://example.org"
4154 Software\Policies\Mozilla\Firefox\Permissions\Location\Block\1 = "https://example.edu"
4155 Software\Policies\Mozilla\Firefox\Permissions\Location\BlockNewRequests = 0x1 | 0x0
4156 Software\Policies\Mozilla\Firefox\Permissions\Location\Locked = 0x1 | 0x0
4157 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Allow\1 = "https://example.org"
4158 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Block\1 = "https://example.edu"
4159 Software\Policies\Mozilla\Firefox\Permissions\Notifications\BlockNewRequests = 0x1 | 0x0
4160 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Locked = 0x1 | 0x0
4161 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Allow\1 = "https://example.org"
4162 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Block\1 = "https://example.edu"
4163 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Default = "allow-audio-video" | "block-audio" | "block-audio-video"
4164 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Locked = 0x1 | 0x0
4165 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\Allow\1 = "https://example.org"
4166 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\Block\1 = "https://example.edu"
4167 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\BlockNewRequests = 0x1 | 0x0
4168 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\Locked = 0x1 | 0x0
4169 ```
4170 #### Windows (Intune)
4171 OMA-URI:
4172 ```
4173 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Location/Location_BlockNewRequests
4174 ```
4175 Value (string):
4176 ```
4177 <enabled/> or <disabled/>
4178 ```
4179 OMA-URI:
4180 ```
4181 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Location/Location_Locked
4182 ```
4183 Value (string):
4184 ```
4185 <enabled/> or <disabled/>
4186 ```
4187 OMA-URI:
4188 ```
4189 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_Allow
4190 ```
4191 Value (string):
4192 ```
4193 <enabled/>
4194 <data id="Permissions" value="1&#xF000;https://example.org"/>
4195 ```
4196 OMA-URI:
4197 ```
4198 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_BlockNewRequests
4199 ```
4200 Value (string):
4201 ```
4202 <enabled/> or <disabled/>
4203 ```
4204 OMA-URI:
4205 ```
4206 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_Locked
4207 ```
4208 Value (string):
4209 ```
4210 <enabled/> or <disabled/>
4211 ```
4212 OMA-URI:
4213 ```
4214 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Allow
4215 ```
4216 Value (string):
4217 ```
4218 <enabled/>
4219 <data id="Permissions" value="1&#xF000;https://example.org"/>
4220 ```
4221 OMA-URI:
4222 ```
4223 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Block
4224 ```
4225 Value (string):
4226 ```
4227 <enabled/>
4228 <data id="Permissions" value="1&#xF000;https://example.edu"/>
4229 ```
4230 OMA-URI:
4231 ```
4232 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Default
4233 ```
4234 Value (string):
4235 ```
4236 <enabled/>
4237 <data id="Autoplay_Default" value="allow-audio-video | block-audio | block-audio-video"/>
4238 ```
4239 OMA-URI:
4240 ```
4241 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Locked
4242 ```
4243 Value (string):
4244 ```
4245 <enabled/> or <disabled/>
4246 ```
4247 OMA-URI:
4248 ```
4249 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_Allow
4250 ```
4251 Value (string):
4252 ```
4253 <enabled/>
4254 <data id="Permissions" value="1&#xF000;https://example.org"/>
4255 ```
4256 OMA-URI:
4257 ```
4258 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_Block
4259 ```
4260 Value (string):
4261 ```
4262 <enabled/>
4263 <data id="Permissions" value="1&#xF000;https://example.edu"/>
4264 ```
4265 OMA-URI:
4266 ```
4267 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_BlockNewRequests
4268 ```
4269 Value (string):
4270 ```
4271 <enabled/> or <disabled/>
4272 ```
4273 OMA-URI:
4274 ```
4275 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_Locked
4276 ```
4277 Value (string):
4278 ```
4279 <enabled/> or <disabled/>
4280 ```
4281 #### macOS
4282 ```
4283 <dict>
4284   <key>Permissions</key>
4285   <dict>
4286     <key>Camera</key>
4287     <dict>
4288       <key>Allow</key>
4289       <array>
4290         <string>https://example.org</string>
4291         <string>https://example.org:1234</string>
4292       </array>
4293       <key>Block</key>
4294       <array>
4295         <string>https://example.edu</string>
4296       </array>
4297       <key>BlockNewRequests</key>
4298       <true/> | <false/>
4299       <key>Locked</key>
4300       <true/> | <false/>
4301     </dict>
4302     <key>Microphone</key>
4303     <dict>
4304       <key>Allow</key>
4305       <array>
4306         <string>https://example.org</string>
4307       </array>
4308       <key>Block</key>
4309       <array>
4310         <string>https://example.edu</string>
4311       </array>
4312       <key>BlockNewRequests</key>
4313       <true/> | <false/>
4314       <key>Locked</key>
4315       <true/> | <false/>
4316     </dict>
4317     <key>Location</key>
4318     <dict>
4319       <key>Allow</key>
4320       <array>
4321         <string>https://example.org</string>
4322       </array>
4323       <key>Block</key>
4324       <array>
4325         <string>https://example.edu</string>
4326       </array>
4327       <key>BlockNewRequests</key>
4328       <true/> | <false/>
4329       <key>Locked</key>
4330       <true/> | <false/>
4331     </dict>
4332     <key>Notifications</key>
4333     <dict>
4334       <key>Allow</key>
4335       <array>
4336         <string>https://example.org</string>
4337       </array>
4338       <key>Block</key>
4339       <array>
4340         <string>https://example.edu</string>
4341       </array>
4342       <key>BlockNewRequests</key>
4343       <true/>
4344       <key>Locked</key>
4345       <true/>
4346     </dict>
4347     <key>Autoplay</key>
4348     <dict>
4349       <key>Allow</key>
4350       <array>
4351         <string>https://example.org</string>
4352       </array>
4353       <key>Block</key>
4354       <array>
4355         <string>https://example.edu</string>
4356       </array>
4357       <key>Default</key>
4358       <string>allow-audio-video | block-audio | block-audio-video</string>
4359       <key>Locked</key>
4360       <true/> | <false/>
4361     </dict>
4362   </dict>
4363 </dict>
4364 ```
4365 #### policies.json
4366 ```
4367 {
4368   "policies": {
4369     "Permissions": {
4370       "Camera": {
4371         "Allow": ["https://example.org","https://example.org:1234"],
4372         "Block": ["https://example.edu"],
4373         "BlockNewRequests": true | false,
4374         "Locked": true | false
4375       },
4376       "Microphone": {
4377         "Allow": ["https://example.org"],
4378         "Block": ["https://example.edu"],
4379         "BlockNewRequests": true | false,
4380         "Locked": true | false
4381       },
4382       "Location": {
4383         "Allow": ["https://example.org"],
4384         "Block": ["https://example.edu"],
4385         "BlockNewRequests": true | false,
4386         "Locked": true | false
4387       },
4388       "Notifications": {
4389         "Allow": ["https://example.org"],
4390         "Block": ["https://example.edu"],
4391         "BlockNewRequests": true | false,
4392         "Locked": true | false
4393       },
4394       "Autoplay": {
4395         "Allow": ["https://example.org"],
4396         "Block": ["https://example.edu"],
4397         "Default": "allow-audio-video" | "block-audio" | "block-audio-video",
4398         "Locked": true | false
4399       }
4400     }
4401   }
4402 }
4403 ```
4404 ### PictureInPicture
4405
4406 Enable or disable Picture-in-Picture as well as prevent the user from enabling or disabling it (Locked).
4407
4408 **Compatibility:** Firefox 78, Firefox ESR 78\
4409 **CCK2 Equivalent:** N/A\
4410 **Preferences Affected:** `media.videocontrols.picture-in-picture.video-toggle.enabled`
4411
4412 #### Windows (GPO)
4413 ```
4414 Software\Policies\Mozilla\Firefox\PictureInPicture\Enabled = 0x1 | 0x0
4415 Software\Policies\Mozilla\Firefox\PictureInPicture\Locked = 0x1 | 0x0
4416
4417 ```
4418 #### Windows (Intune)
4419 OMA-URI:
4420 ```
4421 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PictureInPicture/PictureInPicture_Enabled
4422 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PictureInPicture/PictureInPicture_Locked
4423 ```
4424 Value (string):
4425 ```
4426 <enabled/> or <disabled/>
4427 ```
4428 #### macOS
4429 ```
4430 <dict>
4431   <key>PictureInPicture</key>
4432   <dict>
4433     <key>Enabled</key>
4434     <true/> | <false/>
4435     <key>Locked</key>
4436     <true/> | <false/>
4437   </dict>
4438 </dict>
4439 ```
4440 #### policies.json
4441 ```
4442 {
4443   "policies": {
4444     "PictureInPicture": {
4445       "Enabled": true | false,
4446       "Locked": true | false
4447     }
4448   }
4449 }
4450 ```
4451 ### PopupBlocking
4452 Configure the default pop-up window policy as well as origins for which pop-up windows are allowed.
4453
4454 `Allow` is a list of origins where popup-windows are allowed.
4455
4456 `Default` determines whether or not pop-up windows are allowed by default.
4457
4458 `Locked` prevents the user from changing pop-up preferences.
4459
4460 **Compatibility:** Firefox 60, Firefox ESR 60\
4461 **CCK2 Equivalent:** `permissions.popup`\
4462 **Preferences Affected:** `dom.disable_open_during_load`
4463
4464 #### Windows (GPO)
4465 ```
4466 Software\Policies\Mozilla\Firefox\PopupBlocking\Allow\1 = "https://example.org"
4467 Software\Policies\Mozilla\Firefox\PopupBlocking\Allow\2 = "https://example.edu"
4468 Software\Policies\Mozilla\Firefox\PopupBlocking\Default = 0x1 | 0x0
4469 Software\Policies\Mozilla\Firefox\PopupBlocking\Locked = 0x1 | 0x0
4470 ```
4471 #### Windows (Intune)
4472 OMA-URI:
4473 ```
4474 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Allow
4475 ```
4476 Value (string):
4477 ```
4478 <enabled/>
4479 <data id="Permissions" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
4480 ```
4481 OMA-URI:
4482 ```
4483 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Default
4484 ```
4485 Value (string):
4486 ```
4487 <enabled/> or <disabled/>
4488 ```
4489 OMA-URI:
4490 ```
4491 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Locked
4492 ```
4493 Value (string):
4494 ```
4495 <enabled/> or <disabled/>
4496 ```
4497 #### macOS
4498 ```
4499 <dict>
4500   <key>PopupBlocking</key>
4501   <dict>
4502     <key>Allow</key>
4503     <array>
4504       <string>http://example.org</string>
4505       <string>http://example.edu</string>
4506     </array>
4507     <key>Default</key>
4508     <true/> | <false/>
4509     <key>Locked</key>
4510     <true/> | <false/>
4511   </dict>
4512 </dict>
4513 ```
4514 #### policies.json
4515 ```
4516 {
4517   "policies": {
4518     "PopupBlocking": {
4519       "Allow": ["http://example.org/",
4520                 "http://example.edu/"],
4521       "Default": true | false,
4522       "Locked": true | false
4523     }
4524   }
4525 }
4526 ```
4527 ### Preferences
4528 Set and lock preferences.
4529
4530 **NOTE** On Windows, in order to use this policy, you must clear all settings in the old **Preferences (Deprecated)** section.
4531
4532 Previously you could only set and lock a subset of preferences. Starting with Firefox 81 and Firefox ESR 78.3 you can set many more preferences. You can also set default preferences, user preferences and you can clear preferences.
4533
4534 Preferences that start with the following prefixes are supported:
4535 ```
4536 accessibility.
4537 app.update.* (Firefox 86, Firefox 78.8)
4538 browser.
4539 datareporting.policy.
4540 dom.
4541 extensions.
4542 general.autoScroll (Firefox 83, Firefox ESR 78.5)
4543 general.smoothScroll (Firefox 83, Firefox ESR 78.5)
4544 geo.
4545 gfx.
4546 intl.
4547 keyword.enabled (Firefox 95, Firefox ESR 91.4)
4548 layers.
4549 layout.
4550 media.
4551 network.
4552 pdfjs. (Firefox 84, Firefox ESR 78.6)
4553 places.
4554 print.
4555 signon. (Firefox 83, Firefox ESR 78.5)
4556 spellchecker. (Firefox 84, Firefox ESR 78.6)
4557 toolkit.legacyUserProfileCustomizations.stylesheets (Firefox 95, Firefox ESR 91.4)
4558 ui.
4559 widget.
4560 ```
4561 as well as the following security preferences:
4562 | Preference | Type | Default
4563 | --- | --- | ---
4564 | security.default_personal_cert | string | Ask Every Time
4565 | &nbsp;&nbsp;&nbsp;&nbsp;If set to Select Automatically, Firefox automatically chooses the default personal certificate.
4566 | security.insecure_connection_text.enabled | bool | false
4567 | &nbsp;&nbsp;&nbsp;&nbsp;If set to true, adds the words "Not Secure" for insecure sites.
4568 | security.insecure_connection_text.pbmode.enabled | bool | false
4569 | &nbsp;&nbsp;&nbsp;&nbsp;If set to true, adds the words "Not Secure" for insecure sites in private browsing.
4570 | security.insecure_field_warning.contextual.enabled | bool | true
4571 | &nbsp;&nbsp;&nbsp;&nbsp;If set to false, remove the warning for inscure login fields.
4572 | security.mixed_content.block_active_content | boolean | true
4573 | &nbsp;&nbsp;&nbsp;&nbsp;If false, mixed active content (HTTP and HTTPS) is not blocked.
4574 | security.osclientcerts.autoload | boolean | false
4575 | &nbsp;&nbsp;&nbsp;&nbsp;If true, client certificates are loaded from the operating system certificate store.
4576 | security.ssl.errorReporting.enabled | boolean | true
4577 | &nbsp;&nbsp;&nbsp;&nbsp;If false, SSL errors cannot be sent to Mozilla.
4578 | security.tls.enable_0rtt_data | boolean | true
4579 | &nbsp;&nbsp;&nbsp;&nbsp;If false, TLS early data is turned off (Firefox 93, Firefox 91.2, Firefox 78.15).
4580 | security.tls.hello_downgrade_check | boolean | true
4581 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the TLS 1.3 downgrade check is disabled.
4582 | security.tls.version.enable-deprecated | boolean | false
4583 | &nbsp;&nbsp;&nbsp;&nbsp;If true, browser will accept TLS 1.0. and TLS 1.1 (Firefox 86, Firefox 78.8).
4584 | security.warn_submit_secure_to_insecure | boolean | true
4585 | &nbsp;&nbsp;&nbsp;&nbsp;If false, no warning is shown when submitting a form from https to http.
4586 &nbsp;
4587
4588 Using the preference as the key, set the `Value` to the corresponding preference value.
4589
4590 `Status` can be "default", "locked", "user" or "clear"
4591
4592 * `"default"`: Read/Write: Settings appear as default even if factory default differs.
4593 * `"locked"`: Read-Only: Settings appear as default even if factory default differs.
4594 * `"user"`: Read/Write: Settings appear as changed if it differs from factory default.
4595 * `"clear"`: Read/Write: `Value` has no effect. Resets to factory defaults on each startup.
4596
4597 `"user"` preferences persist across invocations of Firefox. It is the equivalent of a user setting the preference. They are most useful when a preference is needed very early in startup so it can't be set as default by policy. An example of this is ```toolkit.legacyUserProfileCustomizations.stylesheets```.
4598
4599 `"user"` preferences persist even if the policy is removed, so if you need to remove them, you should use the clear policy.
4600
4601 See the examples below for more detail.
4602
4603 IMPORTANT: Make sure you're only setting a particular preference using this mechanism and not some other way.
4604
4605 Status
4606 **Compatibility:** Firefox 81, Firefox ESR 78.3\
4607 **CCK2 Equivalent:** `preferences`\
4608 **Preferences Affected:** Many
4609
4610 #### Windows (GPO)
4611 Software\Policies\Mozilla\Firefox\Preferences (REG_MULTI_SZ) =
4612 ```
4613 {
4614   "accessibility.force_disabled": {
4615     "Value": 1,
4616     "Status": "default"
4617   },
4618   "browser.cache.disk.parent_directory": {
4619     "Value": "SOME_NATIVE_PATH",
4620     "Status": "user"
4621   },
4622   "browser.tabs.warnOnClose": {
4623     "Value": false,
4624     "Status": "locked"
4625   }
4626 }
4627 ```
4628 #### Windows (Intune)
4629 OMA-URI:
4630 ```
4631 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Preferences
4632 ```
4633 Value (string):
4634 ```
4635 <enabled/>
4636 <data id="JSON" value='
4637 {
4638   "accessibility.force_disabled": {
4639     "Value": 1,
4640     "Status": "default"
4641   },
4642   "browser.cache.disk.parent_directory": {
4643     "Value": "SOME_NATIVE_PATH",
4644     "Status": "user"
4645   },
4646   "browser.tabs.warnOnClose": {
4647     "Value": false,
4648     "Status": "locked"
4649   }
4650 }'/>
4651 ```
4652 #### macOS
4653 ```
4654 <dict>
4655   <key>Preferences</key>
4656   <dict>
4657     <key>accessibility.force_disabled</key>
4658     <dict>
4659       <key>Value</key>
4660       <integer>1</integer>
4661       <key>Status</key>
4662       <string>default</string>
4663     </dict>
4664     <key>browser.cache.disk.parent_directory</key>
4665     <dict>
4666       <key>Value</key>
4667       <string>SOME_NATIVE_PATH</string>
4668       <key>Status</key>
4669       <string>user</string>
4670     </dict>
4671     <key>browser.tabs.warnOnClose</key>
4672     <dict>
4673       <key>Value</key>
4674       <false/>
4675       <key>Status</key>
4676       <string>locked</string>
4677     </dict>
4678   </dict>
4679 </dict>
4680 ```
4681 #### policies.json
4682 ```
4683 {
4684   "policies": {
4685     "Preferences": {
4686       "accessibility.force_disabled": {
4687         "Value": 1,
4688         "Status": "default"
4689       },
4690       "browser.cache.disk.parent_directory": {
4691         "Value": "SOME_NATIVE_PATH",
4692         "Status": "user"
4693       },
4694       "browser.tabs.warnOnClose": {
4695         "Value": false,
4696         "Status": "locked"
4697       }
4698     }
4699   }
4700 }
4701 ```
4702 ### Preferences (Deprecated)
4703 Set and lock certain preferences.
4704
4705 **Compatibility:** See below\
4706 **CCK2 Equivalent:** `preferences`\
4707 **Preferences Affected:** See below
4708
4709 | Preference | Type | Compatibility | Default
4710 | --- | --- | --- | ---
4711 | accessibility.force_disabled | integer | Firefox 70, Firefox ESR 68.2 | 0
4712 | &nbsp;&nbsp;&nbsp;&nbsp;If set to 1, platform accessibility is disabled.
4713 | app.update.auto (Deprecated - Switch to AppAutoUpdate policy) | boolean | Firefox 68, Firefox ESR 68 | true
4714 | &nbsp;&nbsp;&nbsp;&nbsp;If false, Firefox doesn't automatically install update.
4715 | browser.bookmarks.autoExportHTML | boolean | Firefox 70, Firefox ESR 68.2 | false
4716 | &nbsp;&nbsp;&nbsp;&nbsp;If true, bookmarks are exported on shutdown.
4717 | browser.bookmarks.file | string | Firefox 70, Firefox ESR 68.2 | N/A
4718 | &nbsp;&nbsp;&nbsp;&nbsp;If set, the name of the file where bookmarks are exported and imported.
4719 | browser.bookmarks.restore_default_bookmarks | boolean | Firefox 70, Firefox ESR 68.2 | N/A
4720 | &nbsp;&nbsp;&nbsp;&nbsp;If true, bookmarks are restored to their defaults.
4721 | browser.cache.disk.enable | boolean | Firefox 68, Firefox ESR 68 | true
4722 | &nbsp;&nbsp;&nbsp;&nbsp;If false, don't store cache on the hard drive.
4723 | ~browser.cache.disk.parent_directory~ | string | Firefox 68, Firefox ESR 68 | Profile temporary directory
4724 | &nbsp;&nbsp;&nbsp;&nbsp;~If set, changes the location of the disk cache.~ This policy doesn't work. It's being worked on.
4725 | browser.fixup.dns_first_for_single_words | boolean | Firefox 68, Firefox ESR 68 | false
4726 | &nbsp;&nbsp;&nbsp;&nbsp;If true, single words are sent to DNS, not directly to search.
4727 | browser.newtabpage.activity-stream.default.sites | string | Firefox 72, ESR 68.4 | Locale dependent
4728 | &nbsp;&nbsp;&nbsp;&nbsp;If set, a list of URLs to use as the default top sites on the new tab page. Due to Firefox limitations, search sites can't be added. In addition, sites with the same name but different TLDs (example.org/example.com) will not display properly.
4729 | browser.places.importBookmarksHTML | boolean | Firefox 70, Firefox ESR 68.2
4730 | &nbsp;&nbsp;&nbsp;&nbsp;If true, bookmarks are always imported on startup.
4731 | browser.safebrowsing.phishing.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
4732 | &nbsp;&nbsp;&nbsp;&nbsp;If false, phishing protection is not enabled (Not recommended)
4733 | browser.safebrowsing.malware.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
4734 | &nbsp;&nbsp;&nbsp;&nbsp;If false, malware protection is not enabled (Not recommended)
4735 | browser.search.update | boolean | Firefox 68, Firefox ESR 68 | true
4736 | &nbsp;&nbsp;&nbsp;&nbsp;If false, updates for search engines are not checked.
4737 | browser.slowStartup.notificationDisabled | boolean | Firefox 70, Firefox ESR 68.2 | false
4738 | &nbsp;&nbsp;&nbsp;&nbsp;If true, a notification isn't shown if startup is slow.
4739 | browser.tabs.warnOnClose | boolean | Firefox 68, Firefox ESR 68 | true
4740 | &nbsp;&nbsp;&nbsp;&nbsp;If false, there is no warning when the browser is closed.
4741 | browser.taskbar.previews.enable | boolean | Firefox 70, Firefox ESR 68.2 (Windows only) | false
4742 | &nbsp;&nbsp;&nbsp;&nbsp;If true, tab previews are shown in the Windows taskbar.
4743 | browser.urlbar.suggest.bookmark | boolean | Firefox 68, Firefox ESR 68 | true
4744 | &nbsp;&nbsp;&nbsp;&nbsp;If false, bookmarks aren't suggested when typing in the URL bar.
4745 | browser.urlbar.suggest.history | boolean | Firefox 68, Firefox ESR 68 | true
4746 | &nbsp;&nbsp;&nbsp;&nbsp;If false, history isn't suggested when typing in the URL bar.
4747 | browser.urlbar.suggest.openpage | boolean | Firefox 68, Firefox ESR 68 | true
4748 | &nbsp;&nbsp;&nbsp;&nbsp;If false, open tabs aren't suggested when typing in the URL bar.
4749 | datareporting.policy.dataSubmissionPolicyBypassNotification | boolean | Firefox 68, Firefox ESR 68 | false
4750 | &nbsp;&nbsp;&nbsp;&nbsp;If true, don't show the privacy policy tab on first run.
4751 | dom.allow_scripts_to_close_windows | boolean | Firefox 70, Firefox ESR 68.2 | false
4752 | &nbsp;&nbsp;&nbsp;&nbsp;If false, web page can close windows.
4753 | dom.disable_window_flip | boolean | Firefox 68, Firefox ESR 68 | true
4754 | &nbsp;&nbsp;&nbsp;&nbsp;If false, web pages can focus and activate windows.
4755 | dom.disable_window_move_resize | boolean | Firefox 68, Firefox ESR 68 | false
4756 | &nbsp;&nbsp;&nbsp;&nbsp;If true, web pages can't move or resize windows.
4757 | dom.event.contextmenu.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4758 | &nbsp;&nbsp;&nbsp;&nbsp;If false, web pages can't override context menus.
4759 | dom.keyboardevent.keypress.hack.dispatch_non_printable_keys.addl | string | Firefox 68, Firefox ESR 68 | N/A
4760 | &nbsp;&nbsp;&nbsp;&nbsp;See https://support.mozilla.org/en-US/kb/dom-events-changes-introduced-firefox-66
4761 | dom.keyboardevent.keypress.hack.use_legacy_keycode_and_charcode.addl | string | Firefox 68, Firefox ESR 68 | N/A
4762 | &nbsp;&nbsp;&nbsp;&nbsp;See https://support.mozilla.org/en-US/kb/dom-events-changes-introduced-firefox-66
4763 | dom.xmldocument.load.enabled | boolean | Firefox ESR 68.5 | true.
4764 | &nbsp;&nbsp;&nbsp;&nbsp;If false, XMLDocument.load is not available.
4765 | dom.xmldocument.async.enabled | boolean | Firefox ESR 68.5 | true
4766 | &nbsp;&nbsp;&nbsp;&nbsp;If false, XMLDocument.async is not available.
4767 | extensions.blocklist.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
4768 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the extensions blocklist is not used (Not recommended)
4769 | extensions.getAddons.showPane | boolean | Firefox 68, Firefox ESR 68 | N/A
4770 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the Recommendations tab is not displayed in the Add-ons Manager.
4771 | extensions.htmlaboutaddons.recommendations.enabled | boolean | Firefox 72, Firefox ESR 68.4 | true
4772 | &nbsp;&nbsp;&nbsp;&nbsp;If false, recommendations are not shown on the Extensions tab in the Add-ons Manager.
4773 | geo.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
4774 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the geolocation API is disabled. | Language dependent
4775 | intl.accept_languages | string | Firefox 70, Firefox ESR 68.2
4776 | &nbsp;&nbsp;&nbsp;&nbsp;If set, preferred language for web pages.
4777 | media.eme.enabled (Deprecated - Switch to EncryptedMediaExtensions policy) | boolean | Firefox 70, Firefox ESR 68.2 | true
4778 | &nbsp;&nbsp;&nbsp;&nbsp;If false, Encrypted Media Extensions are not enabled.
4779 | media.gmp-gmpopenh264.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4780 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the OpenH264  plugin is not downloaded.
4781 | media.gmp-widevinecdm.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4782 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the Widevine plugin is not downloaded.
4783 | media.peerconnection.enabled | boolean | Firefox 72, Firefox ESR 68.4 | true
4784 | &nbsp;&nbsp;&nbsp;&nbsp;If false, WebRTC is disabled
4785 | media.peerconnection.ice.obfuscate_host_addresses.whitelist (Deprecated) | string | Firefox 72, Firefox ESR 68.4 | N/A
4786 | &nbsp;&nbsp;&nbsp;&nbsp;If set, a list of domains for which mDNS hostname obfuscation is
4787 disabled
4788 | media.peerconnection.ice.obfuscate_host_addresses.blocklist | string | Firefox 79, Firefox ESR 78.1 | N/A
4789 | &nbsp;&nbsp;&nbsp;&nbsp;If set, a list of domains for which mDNS hostname obfuscation is
4790 disabled
4791 | network.dns.disableIPv6 | boolean | Firefox 68, Firefox ESR 68 | false
4792 | &nbsp;&nbsp;&nbsp;&nbsp;If true, IPv6 DNS lokoups are disabled.
4793 | network.IDN_show_punycode | boolean | Firefox 68, Firefox ESR 68 | false
4794 | &nbsp;&nbsp;&nbsp;&nbsp;If true, display the punycode version of internationalized domain names.
4795 | places.history.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4796 | &nbsp;&nbsp;&nbsp;&nbsp;If false, history is not enabled.
4797 | print.save_print_settings | boolean | Firefox 70, Firefox ESR 68.2 | true
4798 | &nbsp;&nbsp;&nbsp;&nbsp;If false, print settings are not saved between jobs.
4799 | security.default_personal_cert | string | Firefox 68, Firefox ESR 68 | Ask Every Time
4800 | &nbsp;&nbsp;&nbsp;&nbsp;If set to Select Automatically, Firefox automatically chooses the default personal certificate.
4801 | security.mixed_content.block_active_content | boolean | Firefox 70, Firefox ESR 68.2 | true
4802 | &nbsp;&nbsp;&nbsp;&nbsp;If false, mixed active content (HTTP and HTTPS) is not blocked.
4803 | security.osclientcerts.autoload | boolean | Firefox 72 (Windows), Firefox 75 (macOS)  | false
4804 | &nbsp;&nbsp;&nbsp;&nbsp;If true, client certificates are loaded from the operating system certificate store.
4805 | security.ssl.errorReporting.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4806 | &nbsp;&nbsp;&nbsp;&nbsp;If false, SSL errors cannot be sent to Mozilla.
4807 | security.tls.hello_downgrade_check | boolean | Firefox 72, Firefox ESR 68.4 | true
4808 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the TLS 1.3 downgrade check is disabled.
4809 | ui.key.menuAccessKeyFocuses | boolean | Firefox 68, Firefox ESR 68 | true
4810 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the Alt key doesn't show the menubar on Windows.
4811 | widget.content.gtk-theme-override | string | Firefox 72, Firefox ESR 68.4 (Linux only) | N/A
4812 | &nbsp;&nbsp;&nbsp;&nbsp;If set, overrides the GTK theme for widgets.
4813 #### Windows (GPO)
4814 ```
4815 Software\Policies\Mozilla\Firefox\Preferences\boolean_preference_name = 0x1 | 0x0
4816 Software\Policies\Mozilla\Firefox\Preferences\string_preference_name = "string_value"
4817 ```
4818 #### Windows (Intune)
4819 OMA-URI: (periods are replaced by underscores)
4820 ```
4821 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Preferences/boolean_preference_name
4822 ```
4823 Value (string):
4824 ```
4825 <enabled/> or <disabled/>
4826 ```
4827 OMA-URI: (periods are replaced by underscores)
4828 ```
4829 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Preferences/string_preference_name
4830 ```
4831 Value (string):
4832 ```
4833 <enabled/>
4834 <data id="Preferences_String" value="string_value"/>
4835 ```
4836 #### macOS
4837 ```
4838 <dict>
4839   <key>Preferences</key>
4840   <dict>
4841     <key>boolean_preference_name</key>
4842     <true/> | <false/>
4843     <key>string_preference_name</key>
4844     <string>string_value</string>
4845   </dict>
4846 </dict>
4847 ```
4848 #### policies.json
4849 ```
4850 {
4851   "policies": {
4852     "Preferences": {
4853       "boolean_preference_name": true | false,
4854       "string_preference_name": "string_value"
4855     }
4856   }
4857 }
4858 ```
4859 ### PrimaryPassword
4860 Require or prevent using a primary (formerly master) password.
4861
4862 If this value is true, a primary password is required. If this value is false, it works the same as if [`DisableMasterPasswordCreation`](#disablemasterpasswordcreation) was true and removes the primary password functionality.
4863
4864 If both DisableMasterPasswordCreation and PrimaryPassword are used, DisableMasterPasswordCreation takes precedent.
4865
4866 **Compatibility:** Firefox 79, Firefox ESR 78.1\
4867 **CCK2 Equivalent:** `noMasterPassword`\
4868 **Preferences Affected:** N/A
4869
4870 #### Windows (GPO)
4871 ```
4872 Software\Policies\Mozilla\Firefox\PrimaryPassword = 0x1 | 0x0
4873 ```
4874 #### Windows (Intune)
4875 OMA-URI:
4876 ```
4877 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PrimaryPassword
4878 ```
4879 Value (string):
4880 ```
4881 <enabled/> or <disabled/>
4882 ```
4883 #### macOS
4884 ```
4885 <dict>
4886   <key>PrimaryPassword</key>
4887   <true/> | <false/>
4888 </dict>
4889 ```
4890 #### policies.json
4891 ```
4892 {
4893   "policies": {
4894     "PrimaryPassword": true | false
4895   }
4896 }
4897 ```
4898 ### PromptForDownloadLocation
4899 Ask where to save each file before downloading.
4900
4901 **Compatibility:** Firefox 68, Firefox ESR 68\
4902 **CCK2 Equivalent:** N/A\
4903 **Preferences Affected:** `browser.download.useDownloadDir`
4904
4905 #### Windows (GPO)
4906 ```
4907 Software\Policies\Mozilla\Firefox\PromptForDownloadLocation = 0x1 | 0x0
4908 ```
4909 #### Windows (Intune)
4910 OMA-URI:
4911 ```
4912 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PromptForDownloadLocation
4913 ```
4914 Value (string):
4915 ```
4916 <enabled/> or <disabled/>
4917 ```
4918 #### macOS
4919 ```
4920 <dict>
4921   <key>PromptForDownloadLocation</key>
4922   <true/> | <false/>
4923 </dict>
4924 ```
4925 #### policies.json
4926 ```
4927 {
4928   "policies": {
4929     "PromptForDownloadLocation": true | false
4930   }
4931 }
4932 ```
4933 ### Proxy
4934 Configure proxy settings. These settings correspond to the connection settings in Firefox preferences.
4935 To specify ports, append them to the hostnames with a colon (:).
4936
4937 Unless you lock this policy, changes the user already has in place will take effect.
4938
4939 `Mode` is the proxy method being used.
4940
4941 `Locked` is whether or not proxy settings can be changed.
4942
4943 `HTTPProxy` is the HTTP proxy server.
4944
4945 `UseHTTPProxyForAllProtocols` is whether or not the HTTP proxy should be used for all other proxies.
4946
4947 `SSLProxy` is the SSL proxy server.
4948
4949 `FTPProxy` is the FTP proxy server.
4950
4951 `SOCKSProxy` is the SOCKS proxy server
4952
4953 `SOCKSVersion` is the SOCKS version (4 or 5)
4954
4955 `Passthrough` is list of hostnames or IP addresses that will not be proxied. Use `<local>` to bypass proxying for all hostnames which do not contain periods.
4956
4957 `AutoConfigURL` is a  URL for proxy configuration (only used if Mode is autoConfig).
4958
4959 `AutoLogin` means do not prompt for authentication if password is saved.
4960
4961 `UseProxyForDNS` to use proxy DNS when using SOCKS v5.
4962
4963 **Compatibility:** Firefox 60, Firefox ESR 60\
4964 **CCK2 Equivalent:** `networkProxy*`\
4965 **Preferences Affected:** `network.proxy.type`, `network.proxy.autoconfig_url`, `network.proxy.socks_remote_dns`, `signon.autologin.proxy`, `network.proxy.socks_version`, `network.proxy.no_proxies_on`, `network.proxy.share_proxy_settings`, `network.proxy.http`, `network.proxy.http_port`, `network.proxy.ftp`, `network.proxy.ftp_port`, `network.proxy.ssl`, `network.proxy.ssl_port`, `network.proxy.socks`, `network.proxy.socks_port`
4966
4967 #### Windows (GPO)
4968 ```
4969 Software\Policies\Mozilla\Firefox\Proxy\Mode = "none" | "system" | "manual" | "autoDetect" | "autoConfig"
4970 Software\Policies\Mozilla\Firefox\Proxy\Locked = 0x1 | 0x0
4971 Software\Policies\Mozilla\Firefox\=Proxy\HTTPProxy = https://httpproxy.example.com
4972 Software\Policies\Mozilla\Firefox\Proxy\UseHTTPProxyForAllProtocols = 0x1 | 0x0
4973 Software\Policies\Mozilla\Firefox\Proxy\SSLProxy = https://sslproxy.example.com
4974 Software\Policies\Mozilla\Firefox\Proxy\FTPProxy = https://ftpproxy.example.com
4975 Software\Policies\Mozilla\Firefox\Proxy\SOCKSProxy = https://socksproxy.example.com
4976 Software\Policies\Mozilla\Firefox\Proxy\SOCKSVersion = 0x4 | 0x5
4977 Software\Policies\Mozilla\Firefox\Proxy\Passthrough = <local>
4978 Software\Policies\Mozilla\Firefox\Proxy\AutoConfigURL = URL_TO_AUTOCONFIG
4979 Software\Policies\Mozilla\Firefox\Proxy\AutoLogin = 0x1 | 0x0
4980 Software\Policies\Mozilla\Firefox\Proxy\UseProxyForDNS = 0x1 | 0x0
4981 ```
4982 #### Windows (Intune)
4983 OMA-URI:
4984 ```
4985 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Proxy
4986 ```
4987 Value (string):
4988 ```
4989 <enabled/>
4990 <data id="ProxyLocked" value="true | false"/>
4991 <data id="ConnectionType" value="none | system | manual | autoDetect | autoConfig"/>
4992 <data id="HTTPProxy" value="https://httpproxy.example.com"/>
4993 <data id="UseHTTPProxyForAllProtocols" value="true | false"/>
4994 <data id="SSLProxy" value="https://sslproxy.example.com"/>
4995 <data id="FTPProxy" value="https://ftpproxy.example.com"/>
4996 <data id="SOCKSProxy" value="https://socksproxy.example.com"/>
4997 <data id="SOCKSVersion" value="4 | 5"/>
4998 <data id="AutoConfigURL" value="URL_TO_AUTOCONFIG"/>
4999 <data id="Passthrough" value="<local>"/>
5000 <data id="AutoLogin" value="true | false"/>
5001 <data id="UseProxyForDNS" value="true | false"/>
5002 ```
5003 #### macOS
5004 ```
5005 <dict>
5006   <key>Proxy</key>
5007   <dict>
5008     <key>Mode</key>
5009     <string>none | system | manual | autoDetect | autoConfig</string>
5010     <key>Locked</key>
5011     <true> | </false>
5012     <key>HTTPProxy</key>
5013     <string>https://httpproxy.example.com</string>
5014     <key>UseHTTPProxyForAllProtocols</key>
5015     <true> | </false>
5016     <key>SSLProxy</key>
5017     <string>https://sslproxy.example.com</string>
5018     <key>FTPProxy</key>
5019     <string>https://ftpproxy.example.com</string>
5020     <key>SOCKSProxy</key>
5021     <string>https://socksproxy.example.com</string>
5022     <key>SOCKSVersion</key>
5023     <string>4 | 5</string>
5024     <key>Passthrough</key>
5025     <string>&lt;local>&gt;</string>
5026     <key>AutoConfigURL</key>
5027     <string>URL_TO_AUTOCONFIG</string>
5028     <key>AutoLogin</key>
5029     <true> | </false>
5030     <key>UseProxyForDNS</key>
5031     <true> | </false>
5032   </dict>
5033 </dict>
5034 ```
5035 #### policies.json
5036 ```
5037 {
5038   "policies": {
5039     "Proxy": {
5040       "Mode": "none" | "system" | "manual" | "autoDetect" | "autoConfig",
5041       "Locked": true | false,
5042       "HTTPProxy": "hostname",
5043       "UseHTTPProxyForAllProtocols": true | false,
5044       "SSLProxy": "hostname",
5045       "FTPProxy": "hostname",
5046       "SOCKSProxy": "hostname",
5047       "SOCKSVersion": 4 | 5,
5048       "Passthrough": "<local>",
5049       "AutoConfigURL": "URL_TO_AUTOCONFIG",
5050       "AutoLogin": true | false,
5051       "UseProxyForDNS": true | false
5052     }
5053   }
5054 }
5055 ```
5056 ### RequestedLocales
5057 Set the the list of requested locales for the application in order of preference. It will cause the corresponding language pack to become active.
5058
5059 Note: For Firefox 68, this can now be a string so that you can specify an empty value.
5060
5061 **Compatibility:** Firefox 64, Firefox ESR 60.4, Updated in Firefox 68, Firefox ESR 68\
5062 **CCK2 Equivalent:** N/A\
5063 **Preferences Affected:** N/A
5064 #### Windows (GPO)
5065 ```
5066 Software\Policies\Mozilla\Firefox\RequestedLocales\1 = "de"
5067 Software\Policies\Mozilla\Firefox\RequestedLocales\2 = "en-US"
5068
5069 or
5070
5071 Software\Policies\Mozilla\Firefox\RequestedLocales = "de,en-US"
5072 ```
5073 #### Windows (Intune)
5074 OMA-URI:
5075 ```
5076 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/RequestedLocalesString
5077 ```
5078 Value (string):
5079 ```
5080 <enabled/>
5081 <data id="Preferences_String" value="de,en-US"/>
5082 ```
5083 #### macOS
5084 ```
5085 <dict>
5086   <key>RequestedLocales</key>
5087   <array>
5088     <string>de</string>
5089     <string>en-US</string>
5090   </array>
5091 </dict>
5092
5093 or
5094
5095 <dict>
5096   <key>RequestedLocales</key>
5097   <string>de,en-US</string>
5098 </dict>
5099
5100 ```
5101 #### policies.json
5102 ```
5103 {
5104   "policies": {
5105     "RequestedLocales": ["de", "en-US"]
5106   }
5107 }
5108
5109 or
5110
5111 {
5112   "policies": {
5113     "RequestedLocales": "de,en-US"
5114   }
5115 }
5116 ```
5117 <a name="SanitizeOnShutdown"></a>
5118
5119 ### SanitizeOnShutdown (Selective)
5120 Clear data on shutdown. Choose from Cache, Cookies, Download History, Form & Search History, Browsing History, Active Logins, Site Preferences and Offline Website Data.
5121
5122 Previously, these values were always locked. Starting with Firefox 74 and Firefox ESR 68.6, you can use the `Locked` option to either keep the values unlocked (set it to false), or lock only the values you set (set it to true). If you want the old behavior of locking everything, do not set `Locked` at all.
5123
5124 **Compatibility:** Firefox 68, Firefox ESR 68 (Locked added in 74/68.6)\
5125 **CCK2 Equivalent:** N/A\
5126 **Preferences Affected:** `privacy.sanitize.sanitizeOnShutdown`, `privacy.clearOnShutdown.cache`, `privacy.clearOnShutdown.cookies`, `privacy.clearOnShutdown.downloads`, `privacy.clearOnShutdown.formdata`, `privacy.clearOnShutdown.history`, `privacy.clearOnShutdown.sessions`, `privacy.clearOnShutdown.siteSettings`, `privacy.clearOnShutdown.offlineApps`
5127 #### Windows (GPO)
5128 ```
5129 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Cache = 0x1 | 0x0
5130 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Cookies = 0x1 | 0x0
5131 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Downloads = 0x1 | 0x0
5132 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\FormData = 0x1 | 0x0
5133 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\History = 0x1 | 0x0
5134 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Sessions = 0x1 | 0x0
5135 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\SiteSettings = 0x1 | 0x0
5136 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\OfflineApps = 0x1 | 0x0
5137 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Locked = 0x1 | 0x0
5138 ```
5139 #### Windows (Intune)
5140 OMA-URI:
5141 ```
5142 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/A_SanitizeOnShutdown_Cache
5143 ```
5144 Value (string):
5145 ```
5146 <enabled/> or <disabled/>
5147 ```
5148 OMA-URI:
5149 ```
5150 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/B_SanitizeOnShutdown_Cookies
5151 ```
5152 Value (string):
5153 ```
5154 <enabled/> or <disabled/>
5155 ```
5156 OMA-URI:
5157 ```
5158 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/C_SanitizeOnShutdown_Downloads
5159 ```
5160 Value (string):
5161 ```
5162 <enabled/> or <disabled/>
5163 ```
5164 OMA-URI:
5165 ```
5166 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/D_SanitizeOnShutdown_FormData
5167 ```
5168 Value (string):
5169 ```
5170 <enabled/> or <disabled/>
5171 ```
5172 OMA-URI:
5173 ```
5174 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/E_SanitizeOnShutdown_History
5175 ```
5176 Value (string):
5177 ```
5178 <enabled/> or <disabled/>
5179 ```
5180 OMA-URI:
5181 ```
5182 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/F_SanitizeOnShutdown_Sessions
5183 ```
5184 Value (string):
5185 ```
5186 <enabled/> or <disabled/>
5187 ```
5188 OMA-URI:
5189 ```
5190 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/G_SanitizeOnShutdown_SiteSettings
5191 ```
5192 Value (string):
5193 ```
5194 <enabled/> or <disabled/>
5195 ```
5196 OMA-URI:
5197 ```
5198 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/H_SanitizeOnShutdown_OfflineApps
5199 ```
5200 Value (string):
5201 ```
5202 <enabled/> or <disabled/>
5203 ```
5204 OMA-URI:
5205 ```
5206 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/I_SanitizeOnShutdown_Locked
5207 ```
5208 Value (string):
5209 ```
5210 <enabled/> or <disabled/>
5211 ```
5212 #### macOS
5213 ```
5214 <dict>
5215   <key>SanitizeOnShutdown</key>
5216   <dict>
5217     <key>Cache</key>
5218     <true/> | <false/>
5219     <key>Cookies</key>
5220     <true/> | <false/>
5221     <key>Downloads</key>
5222     <true/> | <false/>
5223     <key>FormData</key>
5224     <true/> | <false/>
5225     <key>History</key>
5226     <true/> | <false/>
5227     <key>Sessions</key>
5228     <true/> | <false/>
5229     <key>SiteSettings</key>
5230     <true/> | <false/>
5231     <key>OfflineApps</key>
5232     <true/> | <false/>
5233     <key>Locked</key>
5234     <true/> | <false/>
5235   </dict>
5236 </dict>
5237 ```
5238 #### policies.json
5239 ```
5240 {
5241   "policies": {
5242     "SanitizeOnShutdown": {
5243       "Cache": true | false,
5244       "Cookies": true | false,
5245       "Downloads": true | false,
5246       "FormData": true | false,
5247       "History": true | false,
5248       "Sessions": true | false,
5249       "SiteSettings": true | false,
5250       "OfflineApps": true | false,
5251       "Locked": true | false
5252     }
5253   }
5254 }
5255 ```
5256 ### SanitizeOnShutdown (All)
5257 Clear all data on shutdown, including Browsing & Download History, Cookies, Active Logins, Cache, Form & Search History, Site Preferences and Offline Website Data.
5258
5259 **Compatibility:** Firefox 60, Firefox ESR 60\
5260 **CCK2 Equivalent:** N/A\
5261 **Preferences Affected:** `privacy.sanitize.sanitizeOnShutdown`, `privacy.clearOnShutdown.cache`, `privacy.clearOnShutdown.cookies`, `privacy.clearOnShutdown.downloads`, `privacy.clearOnShutdown.formdata`, `privacy.clearOnShutdown.history`, `privacy.clearOnShutdown.sessions`, `privacy.clearOnShutdown.siteSettings`, `privacy.clearOnShutdown.offlineApps`
5262 #### Windows (GPO)
5263 ```
5264 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown = 0x1 | 0x0
5265 ```
5266 #### Windows (Intune)
5267 OMA-URI:
5268 ```
5269 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/C_SanitizeOnShutdown
5270 ```
5271 Value (string):
5272 ```
5273 <enabled/> or <disabled/>
5274 ```
5275 #### macOS
5276 ```
5277 <dict>
5278   <key>SanitizeOnShutdown</key>
5279   <true/> | <false/>
5280 </dict>
5281 ```
5282 #### policies.json
5283 ```
5284 {
5285   "policies": {
5286     "SanitizeOnShutdown": true | false
5287   }
5288 }
5289 ```
5290 ### SearchBar
5291 Set whether or not search bar is displayed.
5292
5293 **Compatibility:** Firefox 60, Firefox ESR 60\
5294 **CCK2 Equivalent:** `showSearchBar`\
5295 **Preferences Affected:** N/A
5296
5297 #### Windows (GPO)
5298 ```
5299 Software\Policies\Mozilla\Firefox\SearchBar = "unified" | "separate"
5300 ```
5301
5302 #### Windows (Intune)
5303 OMA-URI:
5304 ```
5305 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SearchBar
5306 ```
5307 Value (string):
5308 ```
5309 <enabled/>
5310 <data id="SearchBar" value="unified | separate"/>
5311 ```
5312 #### macOS
5313 ```
5314 <dict>
5315   <key>SearchBar</key>
5316   <string>unified | separate</string>
5317 </dict>
5318 ```
5319 #### policies.json
5320 ```
5321 {
5322   "policies": {
5323     "SearchBar": "unified" | "separate"
5324   }
5325 }
5326 ```
5327 <a name="SearchEngines"></a>
5328
5329 ### SearchEngines (This policy is only available on the ESR.)
5330
5331 ### SearchEngines | Add
5332
5333 Add new search engines. Although there are only five engines available in the ADMX template, there is no limit. To add more in the ADMX template, you can duplicate the XML.
5334
5335 This policy is only available on the ESR. `Name` and `URLTemplate` are required.
5336
5337 `Name` is the name of the search engine.
5338
5339 `URLTemplate` is the search URL with {searchTerms} to substitute for the search term.
5340
5341 `Method` is either GET or POST
5342
5343 `IconURL` is a URL for the icon to use.
5344
5345 `Alias` is a keyword to use for the engine.
5346
5347 `Description` is a description of the search engine.
5348
5349 `PostData` is the POST data as name value pairs separated by &.
5350
5351 `SuggestURLTemplate` is a search suggestions URL with {searchTerms} to substitute for the search term.
5352
5353 `Encoding` is the query charset for the engine. It defaults to UTF-8.
5354
5355 **Compatibility:** Firefox ESR 60 (POST support in Firefox ESR 68, Encoding support in Firefox 91)\
5356 **CCK2 Equivalent:** `searchplugins`\
5357 **Preferences Affected:** N/A
5358
5359 #### Windows (GPO)
5360 ```
5361 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Name = "Example1"
5362 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\URLTemplate = "https://www.example.org/q={searchTerms}"
5363 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Method = "GET" | "POST"
5364 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\IconURL = "https://www.example.org/favicon.ico"
5365 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Alias = "example"
5366 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Description = "Example Description"
5367 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\SuggestURLTemplate = "https://www.example.org/suggestions/q={searchTerms}"
5368 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\PostData = "name=value&q={searchTerms}"
5369 ```
5370 #### Windows (Intune)
5371 OMA-URI:
5372 ```
5373 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_1
5374 ```
5375 Value (string):
5376 ```
5377 <enabled/>
5378 <data id="SearchEngine_Name" value="Example1"/>
5379 <data id="SearchEngine_URLTemplate" value="https://www.example.org/q={searchTerms"/>
5380 <data id="SearchEngine_Method" value="GET | POST"/>
5381 <data id="SearchEngine_IconURL" value="https://www.example.org/favicon.ico"/>
5382 <data id="SearchEngine_Alias" value="example"/>
5383 <data id="SearchEngine_Description" value="Example Description"/>
5384 <data id="SearchEngine_SuggestURLTemplate" value="https://www.example.org/suggestions/q={searchTerms}"/>
5385 <data id="SearchEngine_PostData" value="name=value&amp;q={searchTerms}"/>
5386 ```
5387 #### macOS
5388 ```
5389 <dict>
5390   <key>SearchEngines</key>
5391   <dict>
5392     <key>Add</key>
5393     <array>
5394       <dict>
5395         <key>Name</key>
5396         <string>Example1</string>
5397         <key>URLTemplate</key>
5398         <string>https://www.example.org/q={searchTerms}</string>
5399         <key>Method</key>
5400         <string>GET | POST </string>
5401         <key>IconURL</key>
5402         <string>https://www.example.org/favicon.ico</string>
5403         <key>Alias</key>
5404         <string>example</string>
5405         <key>Description</key>
5406         <string>Example Description</string>
5407         <key>SuggestURLTemplate</key>
5408         <string>https://www.example.org/suggestions/q={searchTerms}</string>
5409         <key>PostData</key>
5410         <string>name=value&q={searchTerms}</string>
5411       </dict>
5412     <array>
5413   </dict>
5414 </dict>
5415 ```
5416 #### policies.json
5417 ```
5418 {
5419   "policies": {
5420     "SearchEngines": {
5421       "Add": [
5422         {
5423           "Name": "Example1",
5424           "URLTemplate": "https://www.example.org/q={searchTerms}",
5425           "Method": "GET" | "POST",
5426           "IconURL": "https://www.example.org/favicon.ico",
5427           "Alias": "example",
5428           "Description": "Description",
5429           "PostData": "name=value&q={searchTerms}",
5430           "SuggestURLTemplate": "https://www.example.org/suggestions/q={searchTerms}"
5431         }
5432       ]
5433     }
5434   }
5435 }
5436 ```
5437 ### SearchEngines | Default
5438
5439 Set the default search engine. This policy is only available on the ESR.
5440
5441 **Compatibility:** Firefox ESR 60\
5442 **CCK2 Equivalent:** `defaultSearchEngine`\
5443 **Preferences Affected:** N/A
5444
5445 #### Windows (GPO)
5446 ```
5447 Software\Policies\Mozilla\Firefox\SearchEngines\Default = NAME_OF_SEARCH_ENGINE
5448 ```
5449 #### Windows (Intune)
5450 OMA-URI:
5451 ```
5452 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_Default
5453 ```
5454 Value (string):
5455 ```
5456 <enabled/>
5457 <data id="SearchEngines_Default" value="NAME_OF_SEARCH_ENGINE"/>
5458 ```
5459 #### macOS
5460 ```
5461 <dict>
5462   <key>SearchEngines</key>
5463   <dict>
5464     <key>Default</key>
5465     <string>NAME_OF_SEARCH_ENGINE</string>
5466   </dict>
5467 </dict>
5468 ```
5469 #### policies.json
5470 ```
5471 {
5472   "policies": {
5473     "SearchEngines": {
5474       "Default": "NAME_OF_SEARCH_ENGINE"
5475     }
5476   }
5477 }
5478 ```
5479 ### SearchEngines | PreventInstalls
5480
5481 Prevent installing search engines from webpages.
5482
5483 **Compatibility:** Firefox ESR 60\
5484 **CCK2 Equivalent:** `disableSearchEngineInstall`\
5485 **Preferences Affected:** N/A
5486
5487 #### Windows (GPO)
5488 ```
5489 Software\Policies\Mozilla\Firefox\SearchEngines\PreventInstalls = 0x1 | 0x0
5490 ```
5491 #### Windows (Intune)
5492 OMA-URI:
5493 ```
5494 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_PreventInstalls
5495 ```
5496 Value (string):
5497 ```
5498 <enabled/> or <disabled/>
5499 ```
5500 #### macOS
5501 ```
5502 <dict>
5503   <key>SearchEngines</key>
5504   <dict>
5505     <key>PreventInstalls</key>
5506     <true/> | <false/>
5507   </dict>
5508 </dict>
5509 ```
5510 #### policies.json
5511 ```
5512 {
5513   "policies": {
5514     "SearchEngines": {
5515       "PreventInstalls": true | false
5516     }
5517   }
5518 }
5519 ```
5520 ### SearchEngines | Remove
5521
5522 Hide built-in search engines. This policy is only available on the ESR.
5523
5524 **Compatibility:** Firefox ESR 60.2\
5525 **CCK2 Equivalent:** `removeDefaultSearchEngines` (removed all built-in engines)\
5526 **Preferences Affected:** N/A
5527
5528 #### Windows (GPO)
5529 ```
5530 Software\Policies\Mozilla\Firefox\SearchEngines\Remove\1 = NAME_OF_SEARCH_ENGINE
5531 ```
5532 #### Windows (Intune)
5533 OMA-URI:
5534 ```
5535 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_Remove
5536 ```
5537 Value (string):
5538 ```
5539 <enabled/>
5540 <data id="SearchEngines_Remove" value="1&#xF000;NAME_OF_SEARCH_ENGINE"/>
5541 ```
5542 #### macOS
5543 ```
5544 <dict>
5545   <key>SearchEngines</key>
5546   <dict>
5547     <key>Remove</key>
5548     <array>
5549       <string>NAME_OF_SEARCH_ENGINE</string>
5550     </array>
5551   </dict>
5552 </dict>
5553 ```
5554 #### policies.json
5555 ```
5556 {
5557   "policies": {
5558     "SearchEngines": {
5559       "Remove": ["NAME_OF_SEARCH_ENGINE"]
5560     }
5561   }
5562 }
5563 ```
5564 ### SearchSuggestEnabled
5565
5566 Enable search suggestions.
5567
5568 **Compatibility:** Firefox 68, Firefox ESR 68\
5569 **CCK2 Equivalent:** N/A\
5570 **Preferences Affected:** `browser.urlbar.suggest.searches`, `browser.search.suggest.enabled`
5571
5572 #### Windows (GPO)
5573 ```
5574 Software\Policies\Mozilla\Firefox\SearchSuggestEnabled = 0x1 | 0x0
5575 ```
5576 #### Windows (Intune)
5577 OMA-URI:
5578 ```
5579 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchSuggestEnabled
5580 ```
5581 Value (string):
5582 ```
5583 <enabled/> or <disabled/>
5584 ```
5585 #### macOS
5586 ```
5587 <dict>
5588   <key>SearchSuggestEnabled</key>
5589   <true/> | <false/>
5590 </dict>
5591 ```
5592 #### policies.json
5593 ```
5594 {
5595   "policies": {
5596     "SearchSuggestEnabled": true | false
5597   }
5598 }
5599 ```
5600 ### SecurityDevices
5601
5602 Install PKCS #11 modules.
5603
5604 **Compatibility:** Firefox 64, Firefox ESR 60.4\
5605 **CCK2 Equivalent:** `certs.devices`\
5606 **Preferences Affected:** N/A
5607
5608 #### Windows (GPO)
5609 ```
5610 Software\Policies\Mozilla\Firefox\SecurityDevices\NAME_OF_DEVICE = PATH_TO_LIBRARY_FOR_DEVICE
5611 ```
5612 #### Windows (Intune)
5613 OMA-URI:
5614 ```
5615 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SecurityDevices
5616 ```
5617 Value (string):
5618 ```
5619 <enabled/>
5620 <data id="SecurityDevices" value="NAME_OF_DEVICE&#xF000;PATH_TO_LIBRARY_FOR_DEVICE"/>
5621 ```
5622 #### macOS
5623 ```
5624 <dict>
5625   <key>SecurityDevices</key>
5626   <dict>
5627     <key>NAME_OF_DEVICE</key>
5628     <string>PATH_TO_LIBRARY_FOR_DEVICE</string>
5629   </dict>
5630 </dict>
5631 ```
5632
5633 #### policies.json
5634 ```
5635 {
5636   "policies": {
5637     "SecurityDevices": {
5638       "NAME_OF_DEVICE": "PATH_TO_LIBRARY_FOR_DEVICE"
5639     }
5640   }
5641 }
5642 ```
5643 ### ShowHomeButton
5644 Show the home button on the toolbar.
5645
5646 Future versions of Firefox will not show the home button by default.
5647
5648 **Compatibility:** Firefox 88, Firefox ESR 78.10\
5649 **CCK2 Equivalent:** N/A\
5650 **Preferences Affected:** N/A
5651
5652 #### Windows (GPO)
5653 ```
5654 Software\Policies\Mozilla\Firefox\ShowHomeButton = 0x1 | 0x0
5655 ```
5656 #### Windows (Intune)
5657 OMA-URI:
5658 ```
5659 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/Homepage_ShowHomeButton
5660 ```
5661 Value (string):
5662 ```
5663 <enabled/> or <disabled/>
5664 ```
5665 #### macOS
5666 ```
5667 <dict>
5668   <key>ShowHomeButton</key>
5669   <true/> | <false/>
5670 </dict>
5671 ```
5672 #### policies.json
5673 ```
5674 {
5675   "policies": {
5676     "ShowHomeButton": true | false
5677   }
5678 }
5679 ```
5680 ### SSLVersionMax
5681
5682 Set and lock the maximum version of TLS.
5683
5684 **Compatibility:** Firefox 66, Firefox ESR 60.6\
5685 **CCK2 Equivalent:** N/A\
5686 **Preferences Affected:** `security.tls.version.max`
5687
5688 #### Windows (GPO)
5689 ```
5690 Software\Policies\Mozilla\Firefox\SSLVersionMax = "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
5691 ```
5692 #### Windows (Intune)
5693 OMA-URI:
5694 ```
5695 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SSLVersionMax
5696 ```
5697 Value (string):
5698 ```
5699 <enabled/>
5700 <data id="SSLVersion" value="tls1 | tls1.2 | tls1.3"/>
5701 ```
5702 #### macOS
5703 ```
5704 <dict>
5705   <key>SSLVersionMax</key>
5706   <string>tls1 | tls1.1 | tls1.2 | tls1.3</string>
5707 </dict>
5708 ```
5709
5710 #### policies.json
5711 ```
5712 {
5713   "policies": {
5714     "SSLVersionMax": "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
5715   }
5716 }
5717 ```
5718 ### SSLVersionMin
5719
5720 Set and lock the minimum version of TLS.
5721
5722 **Compatibility:** Firefox 66, Firefox ESR 60.6\
5723 **CCK2 Equivalent:** N/A\
5724 **Preferences Affected:** `security.tls.version.min`
5725
5726 #### Windows (GPO)
5727 ```
5728 Software\Policies\Mozilla\Firefox\SSLVersionMin = "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
5729 ```
5730 #### Windows (Intune)
5731 OMA-URI:
5732 ```
5733 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SSLVersionMin
5734 ```
5735 Value (string):
5736 ```
5737 <enabled/>
5738 <data id="SSLVersion" value="tls1 | tls1.2 | tls1.3"/>
5739 ```
5740 #### macOS
5741 ```
5742 <dict>
5743   <key>SSLVersionMin</key>
5744   <string>tls1 | tls1.1 | tls1.2 | tls1.3</string>
5745 </dict>
5746 ```
5747
5748 #### policies.json
5749 ```
5750 {
5751   "policies": {
5752     "SSLVersionMin": "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
5753   }
5754 }
5755 ```
5756 ### SupportMenu
5757 Add a menuitem to the help menu for specifying support information.
5758
5759 **Compatibility:** Firefox 68.0.1, Firefox ESR 68.0.1\
5760 **CCK2 Equivalent:** helpMenu\
5761 **Preferences Affected:** N/A
5762
5763 #### Windows (GPO)
5764 ```
5765 Software\Policies\Mozilla\Firefox\SupportMenu\Title = "Support Menu"
5766 Software\Policies\Mozilla\Firefox\SupportMenu\URL = "http://example.com/support"
5767 Software\Policies\Mozilla\Firefox\SupportMenu\AccessKey = "S"
5768 ```
5769 #### Windows (Intune)
5770 OMA-URI:
5771 ```
5772 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SupportMenu
5773 ```
5774 Value (string):
5775 ```
5776 <enabled/>
5777 <data id="SupportMenuTitle" value="Support Menu"/>
5778 <data id="SupportMenuURL" value="http://example.com/support"/>
5779 <data id="SupportMenuAccessKey" value="S"/>
5780 ```
5781 #### macOS
5782 ```
5783 <dict>
5784   <key>SupportMenu</key>
5785   <dict>
5786     <key>Title</key>
5787     <string>SupportMenu</string>
5788     <key>URL</key>
5789     <string>http://example.com/support</string>
5790     <key>AccessKey</key>
5791     <string>S</string>
5792   </dict>
5793 </dict>
5794 ```
5795 #### policies.json
5796 ```
5797 {
5798   "policies": {
5799     "SupportMenu": {
5800       "Title": "Support Menu",
5801       "URL": "http://example.com/support",
5802       "AccessKey": "S"
5803     }
5804   }
5805 }
5806 ```
5807 ### StartDownloadsInTempDirectory
5808 Force downloads to start off in a local, temporary location rather than the default download directory.
5809
5810 **Compatibility:** Firefox 102\
5811 **CCK2 Equivalent:** N/A\
5812 **Preferences Affected:** `browser.download.start_downloads_in_tmp_dir`
5813
5814 #### Windows (GPO)
5815 ```
5816 Software\Policies\Mozilla\Firefox\StartDownloadsInTempDirectory = 0x1 | 0x0
5817 ```
5818 #### Windows (Intune)
5819 OMA-URI:
5820 ```
5821 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/StartDownloadsInTempDirectory
5822 ```
5823 Value (string):
5824 ```
5825 <enabled/> or <disabled/>
5826 ```
5827 #### macOS
5828 ```
5829 <dict>
5830   <key>StartDownloadsInTempDirectory</key>
5831   <true/> | <false/>
5832 </dict>
5833 ```
5834 #### policies.json
5835 ```
5836 {
5837   "policies": {
5838     "StartDownloadsInTempDirectory": true | false
5839 }
5840 ```
5841 ### UserMessaging
5842
5843 Prevent Firefox from messaging the user in certain situations.
5844
5845 `WhatsNew` Remove the "What's New" icon and menuitem.
5846
5847 `ExtensionRecommendations` If false, don't recommend extensions while the user is visiting web pages.
5848
5849 `FeatureRecommendations` If false, don't recommend browser features.
5850
5851 `UrlbarInterventions` If false, Don't offer Firefox specific suggestions in the URL bar.
5852
5853 `SkipOnboarding` If true, don't show onboarding messages on the new tab page.
5854
5855 `MoreFromMozilla` If false, don't show the "More from Mozilla" section in Preferences. (Firefox 98)
5856
5857 **Compatibility:** Firefox 75, Firefox ESR 68.7\
5858 **CCK2 Equivalent:** N/A\
5859 **Preferences Affected:** `browser.messaging-system.whatsNewPanel.enabled`, `browser.newtabpage.activity-stream.asrouter.userprefs.cfr.addons`, `browser.newtabpage.activity-stream.asrouter.userprefs.cfr.features`, `browser.aboutwelcome.enabled`, `browser.preferences.moreFromMozilla`
5860
5861 #### Windows (GPO)
5862 ```
5863 Software\Policies\Mozilla\Firefox\UserMessaging\WhatsNew = 0x1 | 0x0
5864 Software\Policies\Mozilla\Firefox\UserMessaging\ExtensionRecommendations = 0x1 | 0x0
5865 Software\Policies\Mozilla\Firefox\UserMessaging\FeatureRecommendations = 0x1 | 0x0
5866 Software\Policies\Mozilla\Firefox\UserMessaging\UrlbarInterventions = 0x1 | 0x0
5867 Software\Policies\Mozilla\Firefox\UserMessaging\SkipOnboarding = 0x1 | 0x0
5868 Software\Policies\Mozilla\Firefox\UserMessaging\MoreFromMozilla = 0x1 | 0x0
5869 ```
5870 #### Windows (Intune)
5871 OMA-URI:
5872 ```
5873 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_WhatsNew
5874 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_ExtensionRecommendations
5875 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_FeatureRecommendations
5876 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_UrlbarInterventions
5877 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_SkipOnboarding
5878 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_MoreFromMozilla
5879 ```
5880 Value (string):
5881 ```
5882 <enabled/> or <disabled/>
5883 ```
5884 #### macOS
5885 ```
5886 <dict>
5887   <key>UserMessaging</key>
5888   <dict>
5889     <key>WhatsNew</key>
5890     <true/> | <false/>
5891     <key>ExtensionRecommendations</key>
5892     <true/> | <false/>
5893     <key>FeatureRecommendations</key>
5894     <true/> | <false/>
5895     <key>UrlbarInterventions</key>
5896     <true/> | <false/>
5897     <key>SkipOnboarding</key>
5898     <true/> | <false/>
5899     <key>MoreFromMozilla</key>
5900     <true/> | <false/>
5901   </dict>
5902 </dict>
5903 ```
5904 #### policies.json
5905 ```
5906 {
5907   "policies": {
5908     "UserMessaging": {
5909       "WhatsNew": true | false,
5910       "ExtensionRecommendations": true | false,
5911       "FeatureRecommendations": true | false,
5912       "UrlbarInterventions": true | false,
5913       "SkipOnboarding": true | false,
5914       "MoreFromMozilla": true | false
5915     }
5916   }
5917 }
5918 ```
5919 ### UseSystemPrintDialog
5920 Use the system print dialog instead of the print preview window.
5921
5922 **Compatibility:** Firefox 102\
5923 **CCK2 Equivalent:** N/A\
5924 **Preferences Affected:** `print.prefer_system_dialog`
5925
5926 #### Windows (GPO)
5927 ```
5928 Software\Policies\Mozilla\Firefox\UseSystemPrintDialog = 0x1 | 0x0
5929 ```
5930 #### Windows (Intune)
5931 OMA-URI:
5932 ```
5933 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/UseSystemPrintDialog
5934 ```
5935 Value (string):
5936 ```
5937 <enabled/> or <disabled/>
5938 ```
5939 #### macOS
5940 ```
5941 <dict>
5942   <key>UseSystemPrintDialog</key>
5943   <true/> | <false/>
5944 </dict>
5945 ```
5946 #### policies.json
5947 ```
5948 {
5949   "policies": {
5950     "UseSystemPrintDialog": true | false
5951   }
5952 }
5953 ```
5954 ### WebsiteFilter
5955 Block websites from being visited. The parameters take an array of Match Patterns, as documented in https://developer.mozilla.org/en-US/Add-ons/WebExtensions/Match_patterns.
5956 The arrays are limited to 1000 entries each.
5957
5958 If you want to block all URLs, you can use `<all_urls>` or `*://*/*`. You can't have just a `*` on the right side.
5959
5960 For specific protocols, use `https://*/*` or `http://*/*`.
5961
5962 As of Firefox 83 and Firefox ESR 78.5, file URLs are supported.
5963
5964 **Compatibility:** Firefox 60, Firefox ESR 60\
5965 **CCK2 Equivalent:** N/A\
5966 **Preferences Affected:** N/A
5967
5968 #### Windows (GPO)
5969 ```
5970 Software\Policies\Mozilla\Firefox\WebsiteFilter\Block\1 = "<all_urls>"
5971 Software\Policies\Mozilla\Firefox\WebsiteFilter\Exceptions\1 = "http://example.org/*"
5972 ```
5973 #### Windows (Intune)
5974 OMA-URI:
5975 ```
5976 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/B_WebsiteFilter_Block
5977 ```
5978 Value (string):
5979 ```
5980 <enabled/> <data id="WebsiteFilter" value="1&#xF000;&#60;all_urls&#62;"/>
5981 ```
5982 OMA-URI:
5983 ```
5984 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/B_WebsiteFilter_Exceptions
5985 ```
5986 Value (string):
5987 ```
5988 <enabled/>
5989 <data id="WebsiteFilter" value="1&#xF000;http://example.org/*"/>
5990 ```
5991 #### macOS
5992 ```
5993 <dict>
5994   <key>WebsiteFilter</key>
5995   <dict>
5996     <key>Block</key>
5997     <array>
5998       <string><all_urls></string>
5999     </array>
6000     <key>Exceptions</key>
6001     <array>
6002       <string>http://example.org/*</string>
6003     </array>
6004   </dict>
6005
6006 </dict>
6007 ```
6008 #### policies.json
6009 ```
6010 {
6011   "policies": {
6012     "WebsiteFilter": {
6013       "Block": ["<all_urls>"],
6014       "Exceptions": ["http://example.org/*"]
6015     }
6016   }
6017 }
6018 ```
6019 ### WindowsSSO
6020 Allow Windows single sign-on for Microsoft, work, and school accounts.
6021
6022 If this policy is set to true, Firefox will use credentials stored in Windows to sign in to Microsoft, work, and school accounts.
6023
6024 **Compatibility:** Firefox 91\
6025 **CCK2 Equivalent:** N/A\
6026 **Preferences Affected:** `network.http.windows-sso.enabled`
6027
6028 #### Windows (GPO)
6029 ```
6030 Software\Policies\Mozilla\Firefox\WindowsSSO = 0x1 | 0x0
6031 ```
6032 #### Windows (Intune)
6033 OMA-URI:
6034 ```
6035 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/WindowsSSO
6036 ```
6037 Value (string):
6038 ```
6039 <enabled/> or <disabled/>
6040 ```
6041 #### policies.json
6042 ```
6043 {
6044   "policies": {
6045     "WindowsSSO": true | false
6046   }
6047 }
6048 ```