README.md

   1 **These policies are in active development and so might contain changes that do not work with current versions of Firefox.**
   2
   3 **You should use the [officially released versions](https://github.com/mozilla/policy-templates/releases) if you are deploying changes.**
   4
   5 Policies can be specified using the [Group Policy templates on Windows](https://github.com/mozilla/policy-templates/tree/master/windows), [Intune on Windows](https://support.mozilla.org/kb/managing-firefox-intune), [configuration profiles on macOS](https://github.com/mozilla/policy-templates/tree/master/mac), or by creating a file called `policies.json`. On Windows, create a directory called `distribution` where the EXE is located and place the file there. On Mac, the file goes into `Firefox.app/Contents/Resources/distribution`.  On Linux, the file goes into `firefox/distribution`, where `firefox` is the installation directory for firefox, which varies by distribution or you can specify system-wide policy by placing the file in `/etc/firefox/policies`.
   6
   7 | Policy Name | Description
   8 | --- | --- |
   9 | **[`AppAutoUpdate`](#appautoupdate)** |  Enable or disable automatic application update.
  10 | **[`AppUpdateURL`](#appupdateurl)** | Change the URL for application update.
  11 | **[`Authentication`](#authentication)** | Configure sites that support integrated authentication.
  12 | **[`BlockAboutAddons`](#blockaboutaddons)** | Block access to the Add-ons Manager (about:addons).
  13 | **[`BlockAboutConfig`](#blockaboutconfig)** | Block access to about:config.
  14 | **[`BlockAboutProfiles`](#blockaboutprofiles)** | Block access to About Profiles (about:profiles).
  15 | **[`BlockAboutSupport`](#blockaboutsupport)** | Block access to Troubleshooting Information (about:support).
  16 | **[`Bookmarks`](#bookmarks)** | Add bookmarks in either the bookmarks toolbar or menu.
  17 | **[`CaptivePortal`](#captiveportal)** | Enable or disable the detection of captive portals.
  18 | **[`Certificates`](#certificates)** |
  19 | **[`Certificates -> ImportEnterpriseRoots`](#certificates--importenterpriseroots)** | Trust certificates that have been added to the operating system certificate store by a user or administrator.
  20 | **[`Certificates -> Install`](#certificates--install)** | Install certificates into the Firefox certificate store.
  21 | **[`Cookies`](#cookies)** | Configure cookie preferences.
  22 | **[`DisableSetDesktopBackground`](#disablesetdesktopbackground)** | Remove the "Set As Desktop Background..." menuitem when right clicking on an image.
  23 | **[`DisableMasterPasswordCreation`](#disablemasterpasswordcreation)** | Remove the master password functionality.
  24 | **[`DisableAppUpdate`](#disableappupdate)** | Turn off application updates.
  25 | **[`DisableBuiltinPDFViewer`](#disablebuiltinpdfviewer)** | Disable the built in PDF viewer.
  26 | **[`DisabledCiphers`](#disabledciphers)** | Disable ciphers.
  27 | **[`DisableDefaultBrowserAgent`](#disabledefaultbrowseragent)** | Prevent the default browser agent from taking any actions (Windows only).
  28 | **[`DisableDeveloperTools`](#disabledevelopertools)** | Remove access to all developer tools.
  29 | **[`DisableFeedbackCommands`](#disablefeedbackcommands)** | Disable the menus for reporting sites.
  30 | **[`DisableFirefoxScreenshots`](#disablefirefoxscreenshots)** | Remove access to Firefox Screenshots.
  31 | **[`DisableFirefoxAccounts`](#disablefirefoxaccounts)** | Disable Firefox Accounts integration (Sync).
  32 | **[`DisableFirefoxStudies`](#disablefirefoxstudies)** | Disable Firefox studies (Shield).
  33 | **[`DisableForgetButton`](#disableforgetbutton)** | Disable the "Forget" button.
  34 | **[`DisableFormHistory`](#disableformhistory)** | Turn off saving information on web forms and the search bar.
  35 | **[`DisablePasswordReveal`](#disablepasswordreveal)** | Do not allow passwords to be revealed in saved logins.
  36 | **[`DisablePocket`](#disablepocket)** | Remove Pocket in the Firefox UI.
  37 | **[`DisablePrivateBrowsing`](#disableprivatebrowsing)** | Remove access to private browsing.
  38 | **[`DisableProfileImport`](#disableprofileimport)** | Disables the "Import data from another browser" option in the bookmarks window.
  39 | **[`DisableProfileRefresh`](#disableprofilerefresh)** | Disable the Refresh Firefox button on about:support and support.mozilla.org
  40 | **[`DisableSafeMode`](#disablesafemode)** | Disable safe mode within the browser.
  41 | **[`DisableSecurityBypass`](#disablesecuritybypass)** | Prevent the user from bypassing security in certain cases.
  42 | **[`DisableSystemAddonUpdate`](#disablesystemaddonupdate)** | Prevent system add-ons from being installed or update.
  43 | **[`DisableTelemetry`](#disabletelemetry)** | DisableTelemetry
  44 | **[`DisplayBookmarksToolbar`](#displaybookmarkstoolbar)** | Set the initial state of the bookmarks toolbar.
  45 | **[`DisplayMenuBar (Deprecated)`](#displaymenubar-deprecated)** | Set the initial state of the menubar.
  46 | **[`DisplayMenuBar`](#displaymenubar)** | Set the state of the menubar.
  47 | **[`DNSOverHTTPS`](#dnsoverhttps)** | Configure DNS over HTTPS.
  48 | **[`DontCheckDefaultBrowser`](#dontcheckdefaultbrowser)** | Don't check if Firefox is the default browser at startup.
  49 | **[`DefaultDownloadDirectory`](#defaultdownloaddirectory)** | Set the default download directory.
  50 | **[`DownloadDirectory`](#downloaddirectory)** | Set and lock the download directory.
  51 | **[`EnableTrackingProtection`](#enabletrackingprotection)** | Configure tracking protection.
  52 | **[`EncryptedMediaExtensions`](#encryptedmediaextensions)** | Enable or disable Encrypted Media Extensions and optionally lock it.
  53 | **[`EnterprisePoliciesEnabled`](#enterprisepoliciesenabled)** | Enable policy support on macOS.
  54 | **[`Extensions`](#extensions)** | Control the installation, uninstallation and locking of extensions.
  55 | **[`ExtensionSettings`](#extensionsettings)** | Manage all aspects of extensions.
  56 | **[`ExtensionUpdate`](#extensionupdate)** | Control extension updates.
  57 | **[`FlashPlugin`](#flashplugin)** | Configure the default Flash plugin policy as well as origins for which Flash is allowed.
  58 | **[`FirefoxHome`](#firefoxhome)** | Customize the Firefox Home page.
  59 | **[`HardwareAcceleration`](#hardwareacceleration)** | Control hardware acceleration.
  60 | **[`Homepage`](#homepage)** | Configure the default homepage and how Firefox starts.
  61 | **[`InstallAddonsPermission`](#installaddonspermission)** | Configure the default extension install policy as well as origins for extension installs are allowed.
  62 | **[`LegacyProfiles`](#legacyprofiles)** | Disable the feature enforcing a separate profile for each installation.
  63 | **[`LocalFileLinks`](#localfilelinks)** | Enable linking to local files by origin.
  64 | **[`NetworkPrediction`](#networkprediction)** | Enable or disable network prediction (DNS prefetching).
  65 | **[`NewTabPage`](#newtabpage)** | Enable or disable the New Tab page.
  66 | **[`NoDefaultBookmarks`](#nodefaultbookmarks)** | Disable the creation of default bookmarks.
  67 | **[`OfferToSaveLogins`](#offertosavelogins)** | Control whether or not Firefox offers to save passwords.
  68 | **[`OfferToSaveLoginsDefault`](#offertosaveloginsdefault)** | Set the default value for whether or not Firefox offers to save passwords.
  69 | **[`OverrideFirstRunPage`](#overridefirstrunpage)** | Override the first run page.
  70 | **[`OverridePostUpdatePage`](#overridepostupdatepage)** | Override the upgrade page.
  71 | **[`PasswordManagerEnabled`](#passwordmanagerenabled)** | Remove (some) access to the password manager.
  72 | **[`PDFjs`](#pdfjs)** | Disable or configure PDF.js, the built-in PDF viewer.
  73 | **[`Permissions`](#permissions)** | Set permissions associated with camera, microphone, location, and notifications.
  74 | **[`PopupBlocking`](#popupblocking)** | Configure the default pop-up window policy as well as origins for which pop-up windows are allowed.
  75 | **[`Preferences`](#preferences)** | Set and lock some preferences.
  76 | **[`PromptForDownloadLocation`](#promptfordownloadlocation)** | Ask where to save each file before downloading.
  77 | **[`Proxy`](#proxy)** | Configure proxy settings.
  78 | **[`RequestedLocales`](#requestedlocales)** | Set the the list of requested locales for the application in order of preference.
  79 | **[`SanitizeOnShutdown` (All)](#sanitizeonshutdown-all)** | Clear all data on shutdown.
  80 | **[`SanitizeOnShutdown` (Selective)](#sanitizeonshutdown-selective)** | Clear data on shutdown.
  81 | **[`SearchBar`](#searchbar)** | Set whether or not search bar is displayed.
  82 | **[`SearchEngines`](#searchengines-this-policy-is-only-available-on-the-esr)** |
  83 | **[`SearchEngines -> Default`](#searchengines--default)** | Set the default search engine.
  84 | **[`SearchEngines -> PreventInstalls`](#searchengines--preventinstalls)** | Prevent installing search engines from webpages.
  85 | **[`SearchEngines -> Remove`](#searchengines--remove)** | Hide built-in search engines.
  86 | **[`SearchEngines -> Add`](#searchengines--add)** | Add new search engines.
  87 | **[`SearchSuggestEnabled`](#searchsuggestenabled)** | Enable search suggestions.
  88 | **[`SecurityDevices`](#securitydevices)** | Install PKCS #11 modules.
  89 | **[`SSLVersionMax`](#sslversionmax)** | Set and lock the maximum version of TLS.
  90 | **[`SSLVersionMin`](#sslversionmin)** | Set and lock the minimum version of TLS.
  91 | **[`SupportMenu`](#supportmenu)** | Add a menuitem to the help menu for specifying support information.
  92 | **[`UserMessaging`](#usermessaging)** | Don't show certain messages to the user.
  93 | **[`WebsiteFilter`](#websitefilter)** | Block websites from being visited.
  94
  95 ### AppAutoUpdate
  96
  97 Enable or disable **automatic** application update.
  98
  99 If set to true, application updates are installed without user approval.
 100
 101 If set to false, application updates are downloaded but the user can choose when to install the update.
 102
 103 If you have disabled updates via DisableAppUpdate, this policy has no effect.
 104
 105 **Compatibility:** Firefox 75, Firefox ESR 68.7\
 106 **CCK2 Equivalent:** N/A\
 107 **Preferences Affected:** app.update.auto
 108
 109 #### Windows (GPO)
 110 ```
 111 Software\Policies\Mozilla\Firefox\AppAutoUpdate = 0x1 | 0x0
 112 ```
 113 #### Windows (Intune)
 114 OMA-URI:
 115 ```
 116 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AppAutoUpdate
 117 ```
 118 Value (string):
 119 ```
 120 <enabled/> or <disabled/>
 121 ```
 122 #### macOS
 123 ```
 124 <dict>
 125   <key>AppAutoUpdate</key>
 126   <true/> | <false/>
 127 </dict>
 128 ```
 129 #### policies.json
 130 ```
 131 {
 132   "policies": {
 133     "AppAutoUpdate": true | false
 134   }
 135 }
 136 ```
 137 ### AppUpdateURL
 138
 139 Change the URL for application update.
 140
 141 **Compatibility:** Firefox 62, Firefox ESR 60.2\
 142 **CCK2 Equivalent:** N/A\
 143 **Preferences Affected:** `app.update.url`
 144
 145 #### Windows (GPO)
 146 ```
 147 Software\Policies\Mozilla\Firefox\AppUpdateURL = "https://yoursite.com"
 148 ```
 149 #### Windows (Intune)
 150 OMA-URI:
 151 ```
 152 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AppUpdateURL
 153 ```
 154 Value (string):
 155 ```
 156 <enabled/>
 157 <data id="AppUpdateURL" value="https://yoursite.com"/>
 158 ```
 159 #### macOS
 160 ```
 161 <dict>
 162   <key>AppUpdateURL</key>
 163   <string>https://yoursite.com</string>
 164 </dict>
 165 ```
 166 #### policies.json
 167 ```
 168 {
 169   "policies": {
 170     "AppUpdateURL": "https://yoursite.com"
 171   }
 172 }
 173 ```
 174 ### Authentication
 175
 176 Configure sites that support integrated authentication.
 177
 178 See https://developer.mozilla.org/en-US/docs/Mozilla/Integrated_authentication for more information.
 179
 180 `PrivateBrowsing` enables integrated authentication in prviate browsing.
 181
 182 **Compatibility:** Firefox 60, Firefox ESR 60 (AllowNonFQDN added in 62/60.2, AllowProxies added in 70/68.2, Locked added in 71/68.3, PrivateBrowsing added in 77/68.9)\
 183 **CCK2 Equivalent:** N/A\
 184 **Preferences Affected:** `network.negotiate-auth.trusted-uris`,`network.negotiate-auth.delegation-uris`,`network.automatic-ntlm-auth.trusted-uris`,`network.automatic-ntlm-auth.allow-non-fqdn`,`network.negotiate-auth.allow-non-fqdn`,`network.automatic-ntlm-auth.allow-proxies`,`network.negotiate-auth.allow-proxies`,`network.auth.private-browsing-sso`
 185
 186 #### Windows (GPO)
 187 ```
 188 Software\Policies\Mozilla\Firefox\Authentication\SPNEGO\1 = "mydomain.com"
 189 Software\Policies\Mozilla\Firefox\Authentication\SPNEGO\2 = "https://myotherdomain.com"
 190 Software\Policies\Mozilla\Firefox\Authentication\Delegated\1 = "mydomain.com"
 191 Software\Policies\Mozilla\Firefox\Authentication\Delegated\2 = "https://myotherdomain.com"
 192 Software\Policies\Mozilla\Firefox\Authentication\NTLM\1 = "mydomain.com"
 193 Software\Policies\Mozilla\Firefox\Authentication\NTLM\2 = "https://myotherdomain.com"
 194 Software\Policies\Mozilla\Firefox\Authentication\AllowNonFQDN\SPNEGO = 0x1 | 0x0
 195 Software\Policies\Mozilla\Firefox\Authentication\AllowNonFQDN\NTLM = 0x1 | 0x0
 196 Software\Policies\Mozilla\Firefox\Authentication\AllowProxies\SPNEGO = 0x1 | 0x0
 197 Software\Policies\Mozilla\Firefox\Authentication\AllowProxies\NTLM = 0x1 | 0x0
 198 Software\Policies\Mozilla\Firefox\Authentication\Locked = 0x1 | 0x0
 199 Software\Policies\Mozilla\Firefox\Authentication\PrivateBrowsing = 0x1 | 0x0
 200 ```
 201 #### Windows (Intune)
 202 OMA-URI:
 203 ```
 204 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_SPNEGO
 205 ```
 206 Value (string):
 207 ```
 208 <enabled/>
 209 <data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
 210 ```
 211 OMA-URI:
 212 ```
 213 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_Delegated
 214 ```
 215 Value (string):
 216 ```
 217 <enabled/>
 218 <data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
 219 ```
 220 OMA-URI:
 221 ```
 222 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_NTLM
 223 ```
 224 Value (string):
 225 ```
 226 <enabled/>
 227 <data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
 228 ```
 229 OMA-URI:
 230 ```
 231 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_AllowNonFQDN
 232 ```
 233 Value (string):
 234 ```
 235 <enabled/>
 236 <data id="Authentication_AllowNonFQDN_NTLM" value="true | false"/>
 237 <data id="Authentication_AllowNonFQDN_SPNEGO" value="true | false"/>
 238 ```
 239 OMA-URI:
 240 ```
 241 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_Locked
 242 ```
 243 Value (string):
 244 ```
 245 <enabled/> or <disabled/>
 246 ```
 247 OMA-URI:
 248 ```
 249 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_PrivateBrowsing
 250 ```
 251 Value (string):
 252 ```
 253 <enabled/> or <disabled/>
 254 ```
 255 #### macOS
 256 ```
 257 <dict>
 258   <key>Authentication</key>
 259   <dict>
 260     <key>SPNEGO</key>
 261     <array>
 262       <string>mydomain.com</string>
 263       <string>https://myotherdomain.com</string>
 264     </array>
 265     <key>Delegated</key>
 266     <array>
 267       <string>mydomain.com</string>
 268       <string>https://myotherdomain.com</string>
 269     </array>
 270     <key>NTLM</key>
 271     <array>
 272       <string>mydomain.com</string>
 273       <string>https://myotherdomain.com</string>
 274     </array>
 275     <key>AllowNonFQDN</key>
 276       <dict>
 277       <key>SPNEGO</key>
 278       <true/> | <false/>
 279       <key>NTLM</key>
 280       <true/> | <false/>
 281     </dict>
 282     <key>AllowProxies</key>
 283       <dict>
 284       <key>SPNEGO</key>
 285       <true/> | <false/>
 286       <key>NTLM</key>
 287       <true/> | <false/>
 288     </dict>
 289     <key>Locked</key>
 290     <true/> | <false/>
 291     <key>PrivateBrowsing</key>
 292     <true/> | <false/>
 293   </dict>
 294 </dict>
 295 ```
 296 #### policies.json
 297 ```
 298 {
 299   "policies": {
 300     "Authentication": {
 301       "SPNEGO": ["mydomain.com", "https://myotherdomain.com"],
 302       "Delegated": ["mydomain.com", "https://myotherdomain.com"],
 303       "NTLM": ["mydomain.com", "https://myotherdomain.com"],
 304       "AllowNonFQDN": {
 305         "SPNEGO": true | false,
 306         "NTLM": true | false
 307       },
 308       "AllowProxies": {
 309         "SPNEGO": true | false,
 310         "NTLM": true | false
 311       },
 312       "Locked": true | false,
 313       "PrivateBrowsing": true | false
 314     }
 315   }
 316 }
 317 ```
 318 ### BlockAboutAddons
 319
 320 Block access to the Add-ons Manager (about:addons).
 321
 322 **Compatibility:** Firefox 60, Firefox ESR 60\
 323 **CCK2 Equivalent:** `disableAddonsManager`\
 324 **Preferences Affected:** N/A
 325
 326 #### Windows (GPO)
 327 ```
 328 Software\Policies\Mozilla\Firefox\BlockAboutAddons = 0x1 | 0x0
 329 ```
 330 #### Windows (Intune)
 331 OMA-URI:
 332 ```
 333 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutAddons
 334 ```
 335 Value (string):
 336 ```
 337 <enabled/> or <disabled/>
 338 ```
 339 #### macOS
 340 ```
 341 <dict>
 342   <key>BlockAboutAddons</key>
 343   <true/> | <false/>
 344 </dict>
 345 ```
 346 #### policies.json
 347 ```
 348 {
 349   "policies": {
 350     "BlockAboutAddons": true | false
 351   }
 352 }
 353 ```
 354 ### BlockAboutConfig
 355
 356 Block access to about:config.
 357
 358 **Compatibility:** Firefox 60, Firefox ESR 60\
 359 **CCK2 Equivalent:** `disableAboutConfig`\
 360 **Preferences Affected:** N/A
 361
 362 #### Windows (GPO)
 363 ```
 364 Software\Policies\Mozilla\Firefox\BlockAboutConfig = 0x1 | 0x0
 365 ```
 366 #### Windows (Intune)
 367 OMA-URI:
 368 ```
 369 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutConfig
 370 ```
 371 Value (string):
 372 ```
 373 <enabled/> or <disabled/>
 374 ```
 375 #### macOS
 376 ```
 377 <dict>
 378   <key>BlockAboutConfig</key>
 379   <true/> | <false/>
 380 </dict>
 381 ```
 382 #### policies.json
 383 ```
 384 {
 385   "policies": {
 386     "BlockAboutConfig": true | false
 387   }
 388 }
 389 ```
 390 ### BlockAboutProfiles
 391
 392 Block access to About Profiles (about:profiles).
 393
 394 **Compatibility:** Firefox 60, Firefox ESR 60\
 395 **CCK2 Equivalent:** `disableAboutProfiles`\
 396 **Preferences Affected:** N/A
 397
 398 #### Windows (GPO)
 399 ```
 400 Software\Policies\Mozilla\Firefox\BlockAboutProfiles = 0x1 | 0x0
 401 ```
 402 #### Windows (Intune)
 403 OMA-URI:
 404 ```
 405 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutProfiles
 406 ```
 407 Value (string):
 408 ```
 409 <enabled/> or <disabled/>
 410 ```
 411 #### macOS
 412 ```
 413 <dict>
 414   <key>BlockAboutProfiles</key>
 415   <true/> | <false/>
 416 </dict>
 417 ```
 418 #### policies.json
 419 ```
 420 {
 421   "policies": {
 422     "BlockAboutProfiles": true | false
 423   }
 424 }
 425 ```
 426 ### BlockAboutSupport
 427
 428 Block access to Troubleshooting Information (about:support).
 429
 430 **Compatibility:** Firefox 60, Firefox ESR 60\
 431 **CCK2 Equivalent:** `disableAboutSupport`\
 432 **Preferences Affected:** N/A
 433
 434 #### Windows (GPO)
 435 ```
 436 Software\Policies\Mozilla\Firefox\BlockAboutSupport = 0x1 | 0x0
 437 ```
 438 #### Windows (Intune)
 439 OMA-URI:
 440 ```
 441 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutSupport
 442 ```
 443 Value (string):
 444 ```
 445 <enabled/> or <disabled/>
 446 ```
 447 #### macOS
 448 ```
 449 <dict>
 450   <key>BlockAboutSupport</key>
 451   <true/> | <false/>
 452 </dict>
 453 ```
 454 #### policies.json
 455 ```
 456 {
 457   "policies": {
 458     "BlockAboutSupport": true | false
 459   }
 460 }
 461 ```
 462 ### Bookmarks
 463
 464 Add bookmarks in either the bookmarks toolbar or menu. Only `Title` and `URL` are required. If `Placement` is not specified, the bookmark will be placed on the toolbar. If `Folder` is specified, it is automatically created and bookmarks with the same folder name are grouped together.
 465
 466 **Compatibility:** Firefox 60, Firefox ESR 60\
 467 **CCK2 Equivalent:** `bookmarks.toolbar`,`bookmarks.menu`\
 468 **Preferences Affected:** N/A
 469
 470 #### Windows (GPO)
 471 ```
 472 Software\Policies\Mozilla\Firefox\Bookmarks\1\Title = "Example"
 473 Software\Policies\Mozilla\Firefox\Bookmarks\1\URL = "https://example.com"
 474 Software\Policies\Mozilla\Firefox\Bookmarks\1\Favicon = "https://example.com/favicon.ico"
 475 Software\Policies\Mozilla\Firefox\Bookmarks\1\Placement = "toolbar" | "menu"
 476 Software\Policies\Mozilla\Firefox\Bookmarks\1\Folder = "FolderName"
 477 ```
 478 #### Windows (Intune)
 479 OMA-URI:
 480 ```
 481 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Bookmarks/Bookmark01
 482 ```
 483 Value (string):
 484 ```
 485 <enabled/>
 486 <data id="BookmarkTitle" value="Example"/>
 487 <data id="BookmarkURL" value="https://example.com"/>
 488 <data id="BookmarkFavicon" value="https://example.com/favicon.ico"/>
 489 <data id="BookmarkPlacement" value="toolbar | menu"/>
 490 <data id="BookmarkFolder" value="FolderName"/>
 491 ```
 492 #### macOS
 493 ```
 494 <dict>
 495   <key>Bookmarks</key>
 496   <array>
 497     <dict>
 498       <key>Title</key>
 499       <string>Example</string>
 500       <key>URL</key>
 501       <string>https://example.com</string>
 502       <key>Favicon</key>
 503       <string>https://example.com/favicon.ico</string>
 504       <key>Placement</key>
 505       <string>toolbar | menu</string>
 506       <key>Folder</key>
 507       <string>FolderName</string>
 508     </dict>
 509   </array>
 510 </dict>
 511 ```
 512 #### policies.json
 513 ```
 514 {
 515   "policies": {
 516     "Bookmarks": [
 517       {
 518         "Title": "Example",
 519         "URL": "https://example.com",
 520         "Favicon": "https://example.com/favicon.ico",
 521         "Placement": "toolbar" | "menu",
 522         "Folder": "FolderName"
 523       }
 524     ]
 525   }
 526 }
 527 ```
 528 ### CaptivePortal
 529 Enable or disable the detection of captive portals.
 530
 531 **Compatibility:** Firefox 67, Firefox ESR 60.7\
 532 **CCK2 Equivalent:** N/A\
 533 **Preferences Affected:** `network.captive-portal-service.enabled`
 534
 535 #### Windows (GPO)
 536 ```
 537 Software\Policies\Mozilla\Firefox\CaptivePortal = 0x1 | 0x0
 538 ```
 539 #### Windows (Intune)
 540 OMA-URI:
 541 ```
 542 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/CaptivePortal
 543 ```
 544 Value (string):
 545 ```
 546 <enabled/> or <disabled/>
 547 ```
 548 #### macOS
 549 ```
 550 <dict>
 551   <key>CaptivePortal</key>
 552   <true/> | <false/>
 553 </dict>
 554 ```
 555 #### policies.json
 556 ```
 557 {
 558   "policies": {
 559     "CaptivePortal": true | false
 560   }
 561 }
 562 ```
 563 ### Certificates
 564
 565 ### Certificates | ImportEnterpriseRoots
 566
 567 Trust certificates that have been added to the operating system certificate store by a user or administrator.
 568
 569 See https://support.mozilla.org/kb/setting-certificate-authorities-firefox for more detail.
 570
 571 **Compatibility:** Firefox 60, Firefox ESR 60 (macOS support in Firefox 63, Firefox ESR 68)\
 572 **CCK2 Equivalent:** N/A\
 573 **Preferences Affected:** `security.enterprise_roots.enabled`
 574
 575 #### Windows (GPO)
 576 ```
 577 Software\Policies\Mozilla\Firefox\Certificates\ImportEnterpriseRoots = 0x1 | 0x0
 578 ```
 579 #### Windows (Intune)
 580 OMA-URI:
 581 ```
 582 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Certificates/Certificates_ImportEnterpriseRoots
 583 ```
 584 Value (string):
 585 ```
 586 <enabled/> or <disabled/>
 587 ```
 588 #### macOS
 589 ```
 590 <dict>
 591   <key>Certificates</key>
 592   <dict>
 593     <key>ImportEnterpriseRoots</key>
 594     <true/> | <false/>
 595   </dict>
 596 </dict>
 597 ```
 598 #### policies.json
 599 ```
 600 {
 601   "policies": {
 602     "Certificates": {
 603       "ImportEnterpriseRoots": true | false
 604     }
 605   }
 606 }
 607 ```
 608 ### Certificates | Install
 609
 610 Install certificates into the Firefox certificate store. If only a filename is specified, Firefox searches for the file in the following locations:
 611
 612 - Windows
 613   - %USERPROFILE%\AppData\Local\Mozilla\Certificates
 614   - %USERPROFILE%\AppData\Roaming\Mozilla\Certificates
 615 - macOS
 616   - /Library/Application Support/Mozilla/Certificates
 617   - ~/Library/Application Support/Mozilla/Certificates
 618 - Linux
 619   - /usr/lib/mozilla/certificates
 620   - /usr/lib64/mozilla/certificates
 621   - ~/.mozilla/certificates
 622
 623 Starting with Firefox 65, Firefox 60.5 ESR, a fully qualified path can be used, including UNC paths. You should use the native path style for your operating system. We do not support using %USERPROFILE% or other environment variables on Windows.
 624
 625 If you are specifying the path in the policies.json file on Windows, you need to escape your backslashes (`\\`) which means that for UNC paths, you need to escape both (`\\\\`). If you use group policy, you only need one backslash.
 626
 627 Certificates are installed using the trust string `CT,CT,`.
 628
 629 Binary (DER) and ASCII (PEM) certificates are both supported.
 630
 631 **Compatibility:** Firefox 64, Firefox ESR 64\
 632 **CCK2 Equivalent:** `certs.ca`\
 633 **Preferences Affected:** N/A
 634
 635 #### Windows (GPO)
 636 ```
 637 Software\Policies\Mozilla\Firefox\Certificates\Install\1 = "cert1.der"
 638 Software\Policies\Mozilla\Firefox\Certificates\Install\2 = "C:\Users\username\cert2.pem"
 639 ```
 640 #### Windows (Intune)
 641 OMA-URI:
 642 ```
 643 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Certificates/Certificates_Install
 644 ```
 645 Value (string):
 646 ```
 647 <enabled/>
 648 <data id="Certificates_Install" value="1&#xF000;cert1.der&#xF000;2&#xF000;C:\Users\username\cert2.pem"/>
 649 ```
 650 #### macOS
 651 ```
 652 <dict>
 653   <key>Certificates</key>
 654   <dict>
 655     <key>Install</key>
 656     <array>
 657       <string>cert1.der</string>
 658       <string>/Users/username/cert2.pem</string>
 659     </array>
 660   </dict>
 661 </dict>
 662 ```
 663 #### policies.json
 664 ```
 665 {
 666   "policies": {
 667     "Certificates": {
 668       "Install": ["cert1.der", "/home/username/cert2.pem"]
 669     }
 670   }
 671 }
 672 ```
 673 ### Cookies
 674 Configure cookie preferences.
 675
 676 `Allow` is a list of origins (not domains) where cookies are always allowed. You must include http or https.
 677
 678 `Block` is a list of origins (not domains) where cookies are always blocked. You must include http or https.
 679
 680 `Default` determines whether cookies are accepted at all.
 681
 682 `AcceptThirdParty` determines how third-party cookies are handled.
 683
 684 `ExpireAtSessionEnd` determines when cookies expire.
 685
 686 `RejectTracker` only rejects cookies for trackers.
 687
 688 `Locked` prevents the user from changing cookie preferences.
 689
 690 **Compatibility:** Firefox 60, Firefox ESR 60 (RejectTracker was added in Firefox 63)\
 691 **CCK2 Equivalent:** N/A\
 692 **Preferences Affected:** `network.cookie.cookieBehavior`,`network.cookie.lifetimePolicy`
 693
 694 #### Windows (GPO)
 695 ```
 696 Software\Policies\Mozilla\Firefox\Cookies\Allow\1 = "https://example.com"
 697 Software\Policies\Mozilla\Firefox\Cookies\Block\1 = "https://example.org"
 698 Software\Policies\Mozilla\Firefox\Cookies\Default = 0x1 | 0x0
 699 Software\Policies\Mozilla\Firefox\Cookies\AcceptThirdParty = "always" | "never" | "from-visited"
 700 Software\Policies\Mozilla\Firefox\Cookies\ExpireAtSessionEnd = 0x1 | 0x0
 701 Software\Policies\Mozilla\Firefox\Cookies\RejectTracker = 0x1 | 0x0
 702 Software\Policies\Mozilla\Firefox\Cookies\Locked = 0x1 | 0x0
 703 ```
 704 #### Windows (Intune)
 705 OMA-URI:
 706 ```
 707 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Allow
 708 ```
 709 Value (string):
 710 ```
 711 <enabled/>
 712 <data id="Cookies_Allow" value="1&#xF000;https://example.com"/>
 713 ```
 714 OMA-URI:
 715 ```
 716 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Block
 717 ```
 718 Value (string):
 719 ```
 720 <enabled/>
 721 <data id="Cookies_Block" value="1&#xF000;https://example.org"/>
 722 ```
 723 OMA-URI:
 724 ```
 725 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Default
 726 ```
 727 Value (string):
 728 ```
 729 <enabled/> or <disabled/>
 730 ```
 731 OMA-URI:
 732 ```
 733 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_AcceptThirdParty
 734 ```
 735 Value (string):
 736 ```
 737 <enabled/>
 738 <data id="Cookies_AcceptThirdParty" value="always | never | from-visited"/>
 739 ```
 740 OMA-URI:
 741 ```
 742 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_ExpireAtSessionEnd
 743 ```
 744 Value (string):
 745 ```
 746 <enabled/> or <disabled/>
 747 ```
 748 OMA-URI:
 749 ```
 750 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_RejectTracker
 751 ```
 752 Value (string):
 753 ```
 754 <enabled/> or <disabled/>
 755 ```
 756 OMA-URI:
 757 ```
 758 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Locked
 759 ```
 760 Value (string):
 761 ```
 762 <enabled/> or <disabled/>
 763 ```
 764 #### macOS
 765 ```
 766 <dict>
 767   <key>Cookies</key>
 768   <dict>
 769     <key>Allow</key>
 770     <array>
 771       <string>http://example.com</string>
 772     </array>
 773     <key>Block</key>
 774     <array>
 775       <string>http://example.org</string>
 776     </array>
 777     <key>Default</key>
 778     <true/> | <false/>
 779     <key>AcceptThirdParty</key>
 780     <string>always | never | from-visited</string>
 781     <key>ExpireAtSessionEnd</key>
 782     <true/> | <false/>
 783     <key>RejectTracker</key>
 784     <true/> | <false/>
 785     <key>Locked</key>
 786     <true/> | <false/>
 787   </dict>
 788 </dict>
 789 ```
 790 #### policies.json
 791 ```
 792 {
 793   "policies": {
 794     "Cookies": {
 795       "Allow": ["http://example.org/"],
 796       "Block": ["http://example.edu/"],
 797       "Default": true | false,
 798       "AcceptThirdParty": "always" | "never" | "from-visited",
 799       "ExpireAtSessionEnd": true | false,
 800       "RejectTracker": true | false,
 801       "Locked": true | false
 802     }
 803   }
 804 }
 805 ```
 806 ### DisableSetDesktopBackground
 807 Remove the "Set As Desktop Background..." menuitem when right clicking on an image.
 808
 809 **Compatibility:** Firefox 60, Firefox ESR 60\
 810 **CCK2 Equivalent:** `removeSetDesktopBackground`\
 811 **Preferences Affected:** N/A
 812
 813 #### Windows (GPO)
 814 ```
 815 Software\Policies\Mozilla\Firefox\DisableSetDesktopBackground = 0x1 | 0x0
 816 ```
 817 #### Windows (Intune)
 818 OMA-URI:
 819 ```
 820 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSetDesktopBackground
 821 ```
 822 Value (string):
 823 ```
 824 <enabled/> or <disabled/>
 825 ```
 826 #### macOS
 827 ```
 828 <dict>
 829   <key>DisableSetDesktopBackground</key>
 830   <true/> | <false/>
 831 </dict>
 832 ```
 833 #### policies.json
 834 ```
 835 {
 836   "policies": {
 837     "DisableSetDesktopBackground": true | false
 838   }
 839 }
 840 ```
 841 ### DisableMasterPasswordCreation
 842 Remove the master password functionality.
 843
 844 **Compatibility:** Firefox 60, Firefox ESR 60\
 845 **CCK2 Equivalent:** `noMasterPassword`\
 846 **Preferences Affected:** N/A
 847
 848 #### Windows (GPO)
 849 ```
 850 Software\Policies\Mozilla\Firefox\DisableMasterPasswordCreation = 0x1 | 0x0
 851 ```
 852 #### Windows (Intune)
 853 OMA-URI:
 854 ```
 855 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableMasterPasswordCreation
 856 ```
 857 Value (string):
 858 ```
 859 <enabled/> or <disabled/>
 860 ```
 861 #### macOS
 862 ```
 863 <dict>
 864   <key>DisableMasterPasswordCreation</key>
 865   <true/> | <false/>
 866 </dict>
 867 ```
 868 #### policies.json
 869 ```
 870 {
 871   "policies": {
 872     "DisableMasterPasswordCreation": true | false
 873   }
 874 }
 875 ```
 876 ### DisableAppUpdate
 877 Turn off application updates.
 878
 879 **Compatibility:** Firefox 60, Firefox ESR 60\
 880 **CCK2 Equivalent:** `disableFirefoxUpdates`\
 881 **Preferences Affected:** N/A
 882
 883 #### Windows (GPO)
 884 ```
 885 Software\Policies\Mozilla\Firefox\DisableAppUpdate = 0x1 | 0x0
 886 ```
 887 #### Windows (Intune)
 888 OMA-URI:
 889 ```
 890 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableAppUpdate
 891 ```
 892 Value (string):
 893 ```
 894 <enabled/> or <disabled/>
 895 ```
 896 #### macOS
 897 ```
 898 <dict>
 899   <key>DisableAppUpdate</key>
 900   <true/> | <false/>
 901 </dict>
 902 ```
 903 #### policies.json
 904 ```
 905 {
 906   "policies": {
 907     "DisableAppUpdate": true | false
 908   }
 909 }
 910 ```
 911 ### DisableBuiltinPDFViewer
 912 Disable the built in PDF viewer. PDF files are downloaded and sent externally.
 913
 914 **Compatibility:** Firefox 60, Firefox ESR 60\
 915 **CCK2 Equivalent:** `disablePDFjs`\
 916 **Preferences Affected:** `pdfjs.disabled`
 917
 918 #### Windows (GPO)
 919 ```
 920 Software\Policies\Mozilla\Firefox\DisableBuiltinPDFViewer = 0x1 | 0x0
 921 ```
 922 #### Windows (Intune)
 923 OMA-URI:
 924 ```
 925 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableBuiltinPDFViewer
 926 ```
 927 Value (string):
 928 ```
 929 <enabled/> or <disabled/>
 930 ```
 931 #### macOS
 932 ```
 933 <dict>
 934   <key>DisableBuiltinPDFViewer</key>
 935   <true/> | <false/>
 936 </dict>
 937 ```
 938 #### policies.json
 939 ```
 940 {
 941   "policies": {
 942     "DisableBuiltinPDFViewer": true | false
 943   }
 944 }
 945 ```
 946 ### DisabledCiphers
 947 Disable specific cryptographic ciphers.
 948
 949 **Compatibility:** Firefox 76, Firefox ESR 68.8\
 950 **CCK2 Equivalent:** N/A\
 951 **Preferences Affected:** N/A
 952
 953 #### Windows (GPO)
 954 ```
 955 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_DHE_RSA_WITH_AES_128_CBC_SHA = 0x1 | 0x0
 956 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_DHE_RSA_WITH_AES_256_CBC_SHA = 0x1 | 0x0
 957 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA = 0x1 | 0x0
 958 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA = 0x1 | 0x0
 959 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 = 0x1 | 0x0
 960 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 = 0x1 | 0x0
 961 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_RSA_WITH_AES_128_CBC_SHA = 0x1 | 0x0
 962 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_RSA_WITH_AES_256_CBC_SHA = 0x1 | 0x0
 963 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_RSA_WITH_3DES_EDE_CBC_SHA = 0x1 | 0x0
 964 ```
 965 #### Windows (Intune)
 966 OMA-URI:
 967 ```
 968 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_DHE_RSA_WITH_AES_128_CBC_SHA
 969 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_DHE_RSA_WITH_AES_256_CBC_SHA
 970 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
 971 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
 972 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
 973 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
 974 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_RSA_WITH_AES_128_CBC_SHA
 975 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_RSA_WITH_AES_256_CBC_SHA
 976 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_RSA_WITH_3DES_EDE_CBC_SHA
 977 ```
 978 Value (string):
 979 ```
 980 <enabled/> or <disabled/>
 981 ```
 982 #### macOS
 983 ```
 984 <dict>
 985   <key>DisabledCiphers</key>
 986     <dict>
 987       <key>TLS_DHE_RSA_WITH_AES_128_CBC_SHA</key>
 988       <true/> | <false/>
 989       <key>TLS_DHE_RSA_WITH_AES_256_CBC_SHA</key>
 990       <true/> | <false/>
 991       <key>TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA</key>
 992       <true/> | <false/>
 993       <key>TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA</key>
 994       <true/> | <false/>
 995       <key>TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256</key>
 996       <true/> | <false/>
 997       <key>TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256</key>
 998       <true/> | <false/>
 999       <key>TLS_RSA_WITH_AES_128_CBC_SHA</key>
1000       <true/> | <false/>
1001       <key>TLS_RSA_WITH_AES_256_CBC_SHA</key>
1002       <true/> | <false/>
1003       <key>TLS_RSA_WITH_3DES_EDE_CBC_SHA</key>
1004       <true/> | <false/>
1005     </dict>
1006 </dict>
1007 ```
1008 #### policies.json
1009 ```
1010 {
1011   "policies": {
1012     "DisabledCiphers" {
1013       "TLS_DHE_RSA_WITH_AES_128_CBC_SHA": true | false,
1014       "TLS_DHE_RSA_WITH_AES_256_CBC_SHA": true | false,
1015       "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA": true | false,
1016       "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA": true | false,
1017       "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256": true | false,
1018       "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256": true | false,
1019       "TLS_RSA_WITH_AES_128_CBC_SHA": true | false,
1020       "TLS_RSA_WITH_AES_256_CBC_SHA": true | false,
1021       "TLS_RSA_WITH_3DES_EDE_CBC_SHA": true | false
1022     }
1023   }
1024 }
1025 ```
1026 ### DisableDefaultBrowserAgent
1027 Prevent the default browser agent from taking any actions. Only applicable to Windows; other platforms don’t have the agent.
1028
1029 **Compatibility:** Firefox 75, Firefox ESR 68.7 (Windows only)\
1030 **CCK2 Equivalent:** N/A\
1031 **Preferences Affected:** N/A
1032
1033 #### Windows (GPO)
1034 ```
1035 Software\Policies\Mozilla\Firefox\DisableDefaultBrowserAgent = 0x1 | 0x0
1036 ```
1037 #### Windows (Intune)
1038 OMA-URI:
1039 ```
1040 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableDefaultBrowserAgent
1041 ```
1042 Value (string):
1043 ```
1044 <enabled/> or <disabled/>
1045 ```
1046 #### policies.json
1047 ```
1048 {
1049   "policies": {
1050     "DisableDefaultBrowserAgent": true | false
1051   }
1052 }
1053 ```
1054 ### DisableDeveloperTools
1055 Remove access to all developer tools.
1056
1057 **Compatibility:** Firefox 60, Firefox ESR 60\
1058 **CCK2 Equivalent:** `removeDeveloperTools`\
1059 **Preferences Affected:** `devtools.policy.disabled`
1060
1061 #### Windows (GPO)
1062 ```
1063 Software\Policies\Mozilla\Firefox\DisableDeveloperTools = 0x1 | 0x0`
1064 ```
1065 #### Windows (Intune)
1066 OMA-URI:
1067 ```
1068 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableDeveloperTools
1069 ```
1070 Value (string):
1071 ```
1072 <enabled/> or <disabled/>
1073 ```
1074 #### macOS
1075 ```
1076 <dict>
1077   <key>DisableDeveloperTools</key>
1078   <true/> | <false/>
1079 </dict>
1080 ```
1081 #### policies.json
1082 ```
1083 {
1084   "policies": {
1085     "DisableDeveloperTools": true | false
1086   }
1087 }
1088 ```
1089 ### DisableFeedbackCommands
1090 Disable the menus for reporting sites (Submit Feedback, Report Deceptive Site).
1091
1092 **Compatibility:** Firefox 60, Firefox ESR 60\
1093 **CCK2 Equivalent:** N/A\
1094 **Preferences Affected:** N/A
1095
1096 #### Windows (GPO)
1097 ```
1098 Software\Policies\Mozilla\Firefox\DisableFeedbackCommands = 0x1 | 0x0
1099 ```
1100 #### Windows (Intune)
1101 OMA-URI:
1102 ```
1103 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFeedbackCommands
1104 ```
1105 Value (string):
1106 ```
1107 <enabled/> or <disabled/>
1108 ```
1109 #### macOS
1110 ```
1111 <dict>
1112   <key>DisableFeedbackCommands</key>
1113   <true/> | <false/>
1114 </dict>
1115 ```
1116 #### policies.json
1117 ```
1118 {
1119   "policies": {
1120     "DisableFeedbackCommands": true | false
1121   }
1122 }
1123 ```
1124 ### DisableFirefoxScreenshots
1125 Remove access to Firefox Screenshots.
1126
1127 **Compatibility:** Firefox 60, Firefox ESR 60\
1128 **CCK2 Equivalent:** N/A\
1129 **Preferences Affected:** `extensions.screenshots.disabled`
1130
1131 #### Windows (GPO)
1132 ```
1133 Software\Policies\Mozilla\Firefox\DisableFirefoxScreenshots = 0x1 | 0x0
1134 ```
1135 #### Windows (Intune)
1136 OMA-URI:
1137 ```
1138 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxScreenshots
1139 ```
1140 Value (string):
1141 ```
1142 <enabled/> or <disabled/>
1143 ```
1144 #### macOS
1145 ```
1146 <dict>
1147   <key>DisableFirefoxScreenshots</key>
1148   <true/> | <false/>
1149 </dict>
1150 ```
1151 #### policies.json
1152 ```
1153 {
1154   "policies": {
1155     "DisableFirefoxScreenshots": true | false
1156   }
1157 }
1158 ```
1159 ### DisableFirefoxAccounts
1160 Disable Firefox Accounts integration (Sync).
1161
1162 **Compatibility:** Firefox 60, Firefox ESR 60\
1163 **CCK2 Equivalent:** `disableSync`\
1164 **Preferences Affected:** `identity.fxaccounts.enabled`
1165
1166 #### Windows (GPO)
1167 ```
1168 Software\Policies\Mozilla\Firefox\DisableFirefoxAccounts = 0x1 | 0x0
1169 ```
1170 #### Windows (Intune)
1171 OMA-URI:
1172 ```
1173 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxAccounts
1174 ```
1175 Value (string):
1176 ```
1177 <enabled/> or <disabled/>
1178 ```
1179 #### macOS
1180 ```
1181 <dict>
1182   <key>DisableFirefoxAccounts</key>
1183   <true/> | <false/>
1184 </dict>
1185 ```
1186 #### policies.json
1187 ```
1188 {
1189   "policies": {
1190     "DisableFirefoxAccounts": true | false
1191   }
1192 }
1193 ```
1194 ### DisableFirefoxStudies
1195 Disable Firefox studies (Shield).
1196
1197 **Compatibility:** Firefox 60, Firefox ESR 60\
1198 **CCK2 Equivalent:** N/A\
1199 **Preferences Affected:** N/A
1200
1201 #### Windows (GPO)
1202 ```
1203 Software\Policies\Mozilla\Firefox\DisableFirefoxStudies = 0x1 | 0x0
1204 ```
1205 #### Windows (Intune)
1206 OMA-URI:
1207 ```
1208 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxStudies
1209 ```
1210 Value (string):
1211 ```
1212 <enabled/> or <disabled/>
1213 ```
1214 #### macOS
1215 ```
1216 <dict>
1217   <key>DisableFirefoxStudies</key>
1218   <true/> | <false/>
1219 </dict>
1220 ```
1221 #### policies.json
1222 ```
1223 {
1224   "policies": {
1225     "DisableFirefoxStudies": true | false
1226   }
1227 }
1228 ```
1229 ### DisableForgetButton
1230 Disable the "Forget" button.
1231
1232 **Compatibility:** Firefox 60, Firefox ESR 60\
1233 **CCK2 Equivalent:** `disableForget`\
1234 **Preferences Affected:** N/A
1235
1236 #### Windows (GPO)
1237 ```
1238 Software\Policies\Mozilla\Firefox\DisableForgetButton = 0x1 | 0x0
1239 ```
1240 #### Windows (Intune)
1241 OMA-URI:
1242 ```
1243 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableForgetButton
1244 ```
1245 Value (string):
1246 ```
1247 <enabled/> or <disabled/>
1248 ```
1249 #### macOS
1250 ```
1251 <dict>
1252   <key>DisableForgetButton</key>
1253   <true/> | <false/>
1254 </dict>
1255 ```
1256 #### policies.json
1257 ```
1258 {
1259   "policies": {
1260     "DisableForgetButton": true | false
1261   }
1262 }
1263 ```
1264 ### DisableFormHistory
1265 Turn off saving information on web forms and the search bar.
1266
1267 **Compatibility:** Firefox 60, Firefox ESR 60\
1268 **CCK2 Equivalent:** `disableFormFill`\
1269 **Preferences Affected:** ` browser.formfill.enable`
1270
1271 #### Windows (GPO)
1272 ```
1273 Software\Policies\Mozilla\Firefox\DisableFormHistory = 0x1 | 0x0
1274 ```
1275 #### Windows (Intune)
1276 OMA-URI:
1277 ```
1278 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFormHistory
1279 ```
1280 Value (string):
1281 ```
1282 <enabled/> or <disabled/>
1283 ```
1284 #### macOS
1285 ```
1286 <dict>
1287   <key>DisableFormHistory</key>
1288   <true/> | <false/>
1289 </dict>
1290 ```
1291 #### policies.json
1292 ```
1293 {
1294   "policies": {
1295     "DisableFormHistory": true | false
1296   }
1297 }
1298 ```
1299 ### DisablePasswordReveal
1300 Do not allow passwords to be shown in saved logins
1301
1302 **Compatibility:** Firefox 71, Firefox ESR 68.3\
1303 **CCK2 Equivalent:** N/A
1304 **Preferences Affected:** N/A
1305
1306 #### Windows (GPO)
1307 ```
1308 Software\Policies\Mozilla\Firefox\DisablePasswordReveal = 0x1 | 0x0
1309 ```
1310 #### Windows (Intune)
1311 OMA-URI:
1312 ```
1313 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePasswordReveal
1314 ```
1315 Value (string):
1316 ```
1317 <enabled/> or <disabled/>
1318 ```
1319 #### macOS
1320 ```
1321 <dict>
1322   <key>DisablePasswordReveal</key>
1323   <true/> | <false/>
1324 </dict>
1325 ```
1326 #### policies.json
1327 ```
1328 {
1329   "policies": {
1330     "DisablePasswordReveal": true | false
1331   }
1332 }
1333 ```
1334 ### DisablePocket
1335 Remove Pocket in the Firefox UI. It does not remove it from the new tab page.
1336
1337 **Compatibility:** Firefox 60, Firefox ESR 60\
1338 **CCK2 Equivalent:** `disablePocket`\
1339 **Preferences Affected:** `extensions.pocket.enabled`
1340
1341 #### Windows (GPO)
1342 ```
1343 Software\Policies\Mozilla\Firefox\DisablePocket = 0x1 | 0x0
1344 ```
1345 #### Windows (Intune)
1346 OMA-URI:
1347 ```
1348 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePocket
1349 ```
1350 Value (string):
1351 ```
1352 <enabled/> or <disabled/>
1353 ```
1354 #### macOS
1355 ```
1356 <dict>
1357   <key>DisablePocket</key>
1358   <true/> | <false/>
1359 </dict>
1360 ```
1361 #### policies.json
1362 ```
1363 {
1364   "policies": {
1365     "DisablePocket": true | false
1366   }
1367 }
1368 ```
1369 ### DisablePrivateBrowsing
1370 Remove access to private browsing.
1371
1372 **Compatibility:** Firefox 60, Firefox ESR 60\
1373 **CCK2 Equivalent:** `disablePrivateBrowsing`\
1374 **Preferences Affected:** N/A
1375
1376 #### Windows (GPO)
1377 ```
1378 Software\Policies\Mozilla\Firefox\DisablePrivateBrowsing = 0x1 | 0x0
1379 ```
1380 #### Windows (Intune)
1381 OMA-URI:
1382 ```
1383 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePrivateBrowsing
1384 ```
1385 Value (string):
1386 ```
1387 <enabled/> or <disabled/>
1388 ```
1389 #### macOS
1390 ```
1391 <dict>
1392   <key>DisablePrivateBrowsing</key>
1393   <true/> | <false/>
1394 </dict>
1395 ```
1396 #### policies.json
1397 ```
1398 {
1399   "policies": {
1400     "DisablePrivateBrowsing": true | false
1401   }
1402 }
1403 ```
1404 ### DisableProfileImport
1405 Disables the "Import data from another browser" option in the bookmarks window.
1406
1407 **Compatibility:** Firefox 60, Firefox ESR 60\
1408 **CCK2 Equivalent:** N/A\
1409 **Preferences Affected:** N/A
1410
1411 #### Windows (GPO)
1412 ```
1413 Software\Policies\Mozilla\Firefox\DisableProfileImport = 0x1 | 0x0
1414 ```
1415 #### Windows (Intune)
1416 OMA-URI:
1417 ```
1418 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableProfileImport
1419 ```
1420 Value (string):
1421 ```
1422 <enabled/> or <disabled/>
1423 ```
1424 #### macOS
1425 ```
1426 <dict>
1427   <key>DisableProfileImport</key>
1428   <true/> | <false/>
1429 </dict>
1430 ```
1431 #### policies.json
1432 ```
1433 {
1434   "policies": {
1435     "DisableProfileImport": true | false
1436   }
1437 }
1438 ```
1439 ### DisableProfileRefresh
1440 Disable the Refresh Firefox button on about:support and support.mozilla.org, as well as the prompt that displays offering to refresh Firefox when you haven't used it in a while.
1441
1442 **Compatibility:** Firefox 60, Firefox ESR 60\
1443 **CCK2 Equivalent:** `disableResetFirefox`\
1444 **Preferences Affected:** `browser.disableResetPrompt`
1445
1446 #### Windows (GPO)
1447 ```
1448 Software\Policies\Mozilla\Firefox\DisableProfileRefresh = 0x1 | 0x0
1449 ```
1450 #### Windows (Intune)
1451 OMA-URI:
1452 ```
1453 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableProfileRefresh
1454 ```
1455 Value (string):
1456 ```
1457 <enabled/> or <disabled/>
1458 ```
1459 #### macOS
1460 ```
1461 <dict>
1462   <key>DisableProfileRefresh</key>
1463   <true/> | <false/>
1464 </dict>
1465 ```
1466 #### policies.json
1467 ```
1468 {
1469   "policies": {
1470     "DisableProfileRefresh": true | false
1471   }
1472 }
1473 ```
1474 ### DisableSafeMode
1475 Disable safe mode within the browser.
1476
1477 On Windows, this disables safe mode via the command line as well.
1478
1479 **Compatibility:** Firefox 60, Firefox ESR 60 (Windows, macOS)\
1480 **CCK2 Equivalent:** `disableSafeMode`\
1481 **Preferences Affected:** N/A
1482
1483 #### Windows (GPO)
1484 ```
1485 Software\Policies\Mozilla\Firefox\DisableSafeMode = 0x1 | 0x0
1486 ```
1487 #### Windows (Intune)
1488 OMA-URI:
1489 ```
1490 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSafeMode
1491 ```
1492 Value (string):
1493 ```
1494 <enabled/> or <disabled/>
1495 ```
1496 #### macOS
1497 ```
1498 <dict>
1499   <key>DisableSafeMode</key>
1500   <true/> | <false/>
1501 </dict>
1502 ```
1503 #### policies.json
1504 ```
1505 {
1506   "policies": {
1507     "DisableSafeMode": true | false
1508   }
1509 }
1510 ```
1511 ### DisableSecurityBypass
1512 Prevent the user from bypassing security in certain cases.
1513
1514 `InvalidCertificate` prevents adding an exception when an invalid certificate is shown.
1515
1516 `SafeBrowsing` prevents selecting "ignore the risk" and visiting a harmful site anyway.
1517
1518 **Compatibility:** Firefox 60, Firefox ESR 60\
1519 **CCK2 Equivalent:** N/A\
1520 **Preferences Affected:** `security.certerror.hideAddException`,`browser.safebrowsing.allowOverride`
1521
1522 #### Windows (GPO)
1523 ```
1524 Software\Policies\Mozilla\Firefox\DisableSecurityBypass\InvalidCertificate = 0x1 | 0x0
1525 Software\Policies\Mozilla\Firefox\DisableSecurityBypass\SafeBrowsing = 0x1 | 0x0
1526 ```
1527 #### Windows (Intune)
1528 OMA-URI:
1529 ```
1530 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/P_DisableSecurityBypass_InvalidCertificate
1531 ```
1532 Value (string):
1533 ```
1534 <enabled/> or <disabled/>
1535 ```
1536 OMA-URI:
1537 ```
1538 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/P_DisableSecurityBypass_SafeBrowsing
1539 ```
1540 Value (string):
1541 ```
1542 <enabled/> or <disabled/>
1543 ```
1544
1545 #### macOS
1546 ```
1547 <dict>
1548   <key>DisableSecurityBypass</key>
1549   <dict>
1550     <key>InvalidCertificate</key>
1551     <true/> | <false/>
1552     <key><SafeBrowsing/key>
1553     <true/> | <false/>
1554   </dict>
1555 </dict>
1556 ```
1557 #### policies.json
1558 ```
1559 {
1560   "policies": {
1561     "DisableSecurityBypass": {
1562       "InvalidCertificate": true | false,
1563       "SafeBrowsing": true | false
1564     }
1565   }
1566 }
1567 ```
1568 ### DisableSystemAddonUpdate
1569 Prevent system add-ons from being installed or update.
1570
1571 **Compatibility:** Firefox 60, Firefox ESR 60\
1572 **CCK2 Equivalent:** N/A\
1573 **Preferences Affected:** N/A
1574
1575 #### Windows (GPO)
1576 ```
1577 Software\Policies\Mozilla\Firefox\DisableSystemAddonUpdate = 0x1 | 0x0
1578 ```
1579 #### Windows (Intune)
1580 OMA-URI:
1581 ```
1582 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSystemAddonUpdate
1583 ```
1584 Value (string):
1585 ```
1586 <enabled/> or <disabled/>
1587 ```
1588 #### macOS
1589 ```
1590 <dict>
1591   <key>DisableSystemAddonUpdate</key>
1592   <true/> | <false/>
1593 </dict>
1594 ```
1595 #### policies.json
1596 ```
1597 {
1598   "policies": {
1599     "DisableSystemAddonUpdate": true | false
1600   }
1601 }
1602 ```
1603 ### DisableTelemetry
1604 Prevent the upload of telemetry data.
1605
1606 Mozilla recommends that you do not disable telemetry. Information collected through telemetry helps us build a better product for businesses like yours.
1607
1608 **Compatibility:** Firefox 60, Firefox ESR 60\
1609 **CCK2 Equivalent:** `disableTelemetry`\
1610 **Preferences Affected:** `datareporting.healthreport.uploadEnabled,datareporting.policy.dataSubmissionEnabled`
1611
1612 #### Windows (GPO)
1613 ```
1614 Software\Policies\Mozilla\Firefox\DisableTelemetry = 0x1 | 0x0
1615 ```
1616 #### Windows (Intune)
1617 OMA-URI:
1618 ```
1619 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableTelemetry
1620 ```
1621 Value (string):
1622 ```
1623 <enabled/> or <disabled/>
1624 ```
1625 #### macOS
1626 ```
1627 <dict>
1628   <key>DisableTelemetry</key>
1629   <true/> | <false/>
1630 </dict>
1631 ```
1632 #### policies.json
1633 ```
1634 {
1635   "policies": {
1636     "DisableTelemetry": true | false
1637   }
1638 }
1639 ```
1640 ### DisplayBookmarksToolbar
1641 Set the initial state of the bookmarks toolbar. A user can still hide it and it will stay hidden.
1642
1643 **Compatibility:** Firefox 60, Firefox ESR 60\
1644 **CCK2 Equivalent:** `displayBookmarksToolbar`\
1645 **Preferences Affected:** N/A
1646
1647 #### Windows (GPO)
1648 ```
1649 Software\Policies\Mozilla\Firefox\DisplayBookmarksToolbar = 0x1 | 0x0
1650 ```
1651 #### Windows (Intune)
1652 OMA-URI:
1653 ```
1654 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisplayBookmarksToolbar
1655 ```
1656 Value (string):
1657 ```
1658 <enabled/> or <disabled/>
1659 ```
1660 #### macOS
1661 ```
1662 <dict>
1663   <key>DisplayBookmarksToolbar</key>
1664   <true/> | <false/>
1665 </dict>
1666 ```
1667 #### policies.json
1668 ```
1669 {
1670   "policies": {
1671     "DisplayBookmarksToolbar": true | false
1672   }
1673 }
1674 ```
1675 ### DisplayMenuBar (Deprecated)
1676 Set the initial state of the menubar. A user can still hide it and it will stay hidden.
1677
1678 **Compatibility:** Firefox 60, Firefox ESR 60 (Windows, some Linux)\
1679 **CCK2 Equivalent:** `displayMenuBar`\
1680 **Preferences Affected:** N/A
1681
1682 #### Windows (GPO)
1683 ```
1684 Software\Policies\Mozilla\Firefox\DisplayMenuBar = 0x1 | 0x0
1685 ```
1686 #### macOS
1687 ```
1688 <dict>
1689   <key>DisplayMenuBar</key>
1690   <true/> | <false/>
1691 </dict>
1692 ```
1693 #### policies.json
1694 ```
1695 {
1696   "policies": {
1697     "DisplayMenuBar": true | false
1698   }
1699 }
1700 ```
1701 ### DisplayMenuBar
1702 Set the state of the menubar.
1703
1704 `always` means the menubar is shown and cannot be hidden.
1705
1706 `never` means the menubar is hidden and cannot be shown.
1707
1708 `default-on` means the menubar is on by default but can be hidden.
1709
1710 `default-off` means the menubar is off by default but can be shown.
1711
1712 **Compatibility:** Firefox 73, Firefox ESR 68.5 (Windows, some Linux)\
1713 **CCK2 Equivalent:** `displayMenuBar`\
1714 **Preferences Affected:** N/A
1715
1716 #### Windows (GPO)
1717 ```
1718 Software\Policies\Mozilla\Firefox\DisplayMenuBar = "always", "never", "default-on", "default-off"
1719 ```
1720 #### Windows (Intune)
1721 OMA-URI:
1722 ```
1723 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisplayMenuBar_Enum
1724 ```
1725 Value (string):
1726 ```
1727 <enabled/>
1728 <data id="DisplayMenuBar" value="always | never | default-on | default-off"/>
1729 ```
1730 #### macOS
1731 ```
1732 <dict>
1733   <key>DisplayMenuBar</key>
1734   <string>always | never | default-on | default-off</string>
1735 </dict>
1736 ```
1737 #### policies.json
1738 ```
1739 {
1740   "policies": {
1741     "DisplayMenuBar": "always", "never", "default-on", "default-off"
1742   }
1743 }
1744 ```
1745 ### DNSOverHTTPS
1746 Configure DNS over HTTPS.
1747
1748 `Enabled` determines whether DNS over HTTPS is enabled
1749
1750 `ProviderURL` is a URL to another provider.
1751
1752 `Locked` prevents the user from changing DNS over HTTPS preferences.
1753
1754 `ExcludedDomains` excludes domains from DNS over HTTPS.
1755
1756 **Compatibility:** Firefox 63, Firefox ESR 68 (ExcludedDomains added in 75/68.7)\
1757 **CCK2 Equivalent:** N/A\
1758 **Preferences Affected:** `network.trr.mode`,`network.trr.uri`
1759
1760 #### Windows (GPO)
1761 ```
1762 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\Enabled = 0x1 | 0x0
1763 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\ProviderURL = "URL_TO_ALTERNATE_PROVIDER"
1764 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\Locked = 0x1 | 0x0
1765 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\ExcludedDomains\1 = "example.com"
1766 ```
1767 #### Windows (Intune)
1768 OMA-URI:
1769 ```
1770 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_Enabled
1771 ```
1772 Value (string):
1773 ```
1774 <enabled/> or <disabled/>
1775 ```
1776 OMA-URI:
1777 ```
1778 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_ProviderURL
1779 ```
1780 Value (string):
1781 ```
1782 <enabled/>
1783 <data id="String" value="URL_TO_ALTERNATE_PROVIDER"/>
1784 ```
1785 OMA-URI:
1786 ```
1787 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_Locked
1788 ```
1789 Value (string):
1790 ```
1791 <enabled/> or <disabled/>
1792 ```
1793 OMA-URI:
1794 ```
1795 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_ExcludedDomains
1796 ```
1797 Value (string):
1798 ```
1799 <enabled/>
1800 <data id="List" value="1&#xF000;example.com"/>
1801 ```
1802 #### macOS
1803 ```
1804 <dict>
1805   <key>DNSOverHTTPS</key>
1806   <dict>
1807     <key>Enabled</key>
1808     <true/> | <false/>
1809     <key>ProviderURL</key>
1810     <string>URL_TO_ALTERNATE_PROVIDER</string>
1811     <key>Locked</key>
1812     <true/> | <false/>
1813     <key>ExcludedDomains</key>
1814     <array>
1815       <string>example.com</string>
1816     </array>
1817   </dict>
1818 </dict>
1819 ```
1820 #### policies.json
1821 ```
1822 {
1823   "policies": {
1824     "DNSOverHTTPS": {
1825       "Enabled":  true | false,
1826       "ProviderURL": "URL_TO_ALTERNATE_PROVIDER",
1827       "Locked": true | false,
1828       "ExcludedDomains": ["example.com"]
1829     }
1830   }
1831 }
1832 ```
1833 ### DontCheckDefaultBrowser
1834 Don't check if Firefox is the default browser at startup.
1835
1836 **Compatibility:** Firefox 60, Firefox ESR 60\
1837 **CCK2 Equivalent:** `dontCheckDefaultBrowser`\
1838 **Preferences Affected:** `browser.shell.checkDefaultBrowser`
1839
1840 #### Windows (GPO)
1841 ```
1842 Software\Policies\Mozilla\Firefox\DontCheckDefaultBrowser = 0x1 | 0x0
1843 ```
1844 #### Windows (Intune)
1845 OMA-URI:
1846 ```
1847 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DontCheckDefaultBrowser
1848 ```
1849 Value (string):
1850 ```
1851 <enabled/> or <disabled/>
1852 ```
1853 #### macOS
1854 ```
1855 <dict>
1856   <key>DontCheckDefaultBrowser</key>
1857   <true/> | <false/>
1858 </dict>
1859 ```
1860 #### policies.json
1861 ```
1862 {
1863   "policies": {
1864     "DontCheckDefaultBrowser": true | false
1865   }
1866 }
1867 ```
1868 ### DefaultDownloadDirectory
1869 Set the default download directory.
1870
1871 You can use ${home} for the native home directory.
1872
1873 **Compatibility:** Firefox 68, Firefox ESR 68\
1874 **CCK2 Equivalent:** N/A\
1875 **Preferences Affected:** `browser.download.dir`,`browser.download.folderList`
1876
1877 #### Windows (GPO)
1878 ```
1879 Software\Policies\Mozilla\Firefox\DefaultDownloadDirectory = "${home}\Downloads"
1880 ```
1881 #### Windows (Intune)
1882 OMA-URI:
1883 ```
1884 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DefaultDownloadDirectory
1885 ```
1886 Value (string):
1887 ```
1888 <enabled/>
1889 <data id="Preferences_String" value="${home}\Downloads"/>
1890 ```
1891 #### macOS
1892 ```
1893 <dict>
1894   <key>DefaultDownloadDirectory</key>
1895   <string>${home}/Downloads</string>
1896 </dict>
1897 ```
1898 #### policies.json (macOS and Linux)
1899 ```
1900 {
1901   "policies": {
1902     "DefaultDownloadDirectory": "${home}/Downloads"
1903 }
1904 ```
1905 #### policies.json (Windows)
1906 ```
1907 {
1908   "policies": {
1909     "DefaultDownloadDirectory": "${home}\\Downloads"
1910 }
1911 ```
1912 ### DownloadDirectory
1913 Set and lock the download directory.
1914
1915 You can use ${home} for the native home directory.
1916
1917 **Compatibility:** Firefox 68, Firefox ESR 68\
1918 **CCK2 Equivalent:** N/A\
1919 **Preferences Affected:** `browser.download.dir`,`browser.download.folderList`,`browser.download.useDownloadDir`
1920
1921 #### Windows (GPO)
1922 ```
1923 Software\Policies\Mozilla\Firefox\DownloadDirectory = "${home}\Downloads"
1924 ```
1925 #### Windows (Intune)
1926 OMA-URI:
1927 ```
1928 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DownloadDirectory
1929 ```
1930 Value (string):
1931 ```
1932 <enabled/>
1933 <data id="Preferences_String" value="${home}\Downloads"/>
1934 ```
1935 #### macOS
1936 ```
1937 <dict>
1938   <key>DownloadDirectory</key>
1939   <string>${home}/Downloads</string>
1940 </dict>
1941 ```
1942 #### policies.json (macOS and Linux)
1943 ```
1944 {
1945   "policies": {
1946     "DownloadDirectory": "${home}/Downloads"
1947 }
1948 ```
1949 #### policies.json (Windows)
1950 ```
1951 {
1952   "policies": {
1953     "DownloadDirectory": "${home}\\Downloads"
1954 }
1955 ```
1956 ### EnableTrackingProtection
1957 Configure tracking protection.
1958
1959 If this policy is not configured, tracking protection is not enabled by default in the browser, but it is enabled by default in private browsing and the user can change it.
1960
1961 If `Value` is set to false, tracking protection is disabled and locked in both the regular browser and private browsing.
1962
1963 If `Value` is set to true, tracking protection is enabled by default in both the regular browser and private browsing and the `Locked` value determines whether or not a user can change it.
1964
1965 If `Cryptomining` is set to true, cryptomining scripts on websites are blocked.
1966
1967 If `Fingerprinting` is set to true, fingerprinting scripts on websites are blocked.
1968
1969 `Exceptions` are origins for which tracking protection is not enabled.
1970
1971 **Compatibility:** Firefox 60, Firefox ESR 60 (Cryptomining and Fingerprinting added in 70/68.2, Exceptions added in 73/68.5)\
1972 **CCK2 Equivalent:** N/A\
1973 **Preferences Affected:** `privacy.trackingprotection.enabled`,`privacy.trackingprotection.pbmode.enabled`,`privacy.trackingprotection.cryptomining.enabled`,`privacy.trackingprotection.fingerprinting.enabled`
1974
1975 #### Windows (GPO)
1976 ```
1977 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Value = 0x1 | 0x0
1978 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Locked = 0x1 | 0x0
1979 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Cryptomining = 0x1 | 0x0
1980 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Fingerprinting = 0x1 | 0x0
1981 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Exceptions\1 = "https://example.com"
1982 ```
1983 #### Windows (Intune)
1984 OMA-URI:
1985 ```
1986 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/TrackingProtection
1987 ```
1988 Value (string):
1989 ```
1990 <enabled/>
1991 <data id="TrackingProtectionLocked" value="true | false"/>
1992 <data id="Cryptomining" value="true | false"/>
1993 <data id="Fingerprinting" value="true | false"/>
1994 <data id=TrackingProtection_Exceptions" value="1&#xF000;https://example.com"/>
1995 ```
1996 #### macOS
1997 ```
1998 <dict>
1999   <key>EnableTrackingProtection</key>
2000   <dict>
2001     <key>Value</key>
2002     <true/> | <false/>
2003     <key><Locked</key>
2004     <true/> | <false/>
2005     <key><Cryptomining</key>
2006     <true/> | <false/>
2007     <key><Fingerprinting</key>
2008     <true/> | <false/>
2009     <key>Exceptions</key>
2010     <array>
2011       <string>https://example.com</string>
2012     </array>
2013   </dict>
2014 </dict>
2015 ```
2016 #### policies.json
2017 ```
2018 {
2019   "policies": {
2020     "EnableTrackingProtection": {
2021       "Value": true | false,
2022       "Locked": true | false,
2023       "Cryptomining": true | false,
2024       "Fingerprinting": true | false,
2025       "Exceptions": ["https://example.com"]
2026     }
2027 }
2028 ```
2029 ### EncryptedMediaExtensions
2030 Enable or disable Encrypted Media Extensions and optionally lock it.
2031
2032 If `Enabled` is set to false, encrypted media extensions (like Widevine) are not downloaded by Firefox unless the user consents to installing them.
2033
2034 If `Locked` is set to true and `Enabled` is set to false, Firefox will not download encrypted media extensions (like Widevine) or ask the user to install them.
2035
2036 **Compatibility:** Firefox 77, Firefox ESR 68.9\
2037 **CCK2 Equivalent:** N/A\
2038 **Preferences Affected:** `media.eme.enabled`
2039
2040 #### Windows (GPO)
2041 ```
2042 Software\Policies\Mozilla\Firefox\EncryptedMediaExtensions\Enabled = 0x1 | 0x0
2043 Software\Policies\Mozilla\Firefox\EncryptedMediaExtensions\Locked = 0x1 | 0x0
2044 ```
2045 #### Windows (Intune)
2046 OMA-URI:
2047 ```
2048 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~EncryptedMediaExtensions/EncryptedMediaExtensions_Enabled
2049 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~EncryptedMediaExtensions/EncryptedMediaExtensions_Locked
2050 ```
2051 Value (string):
2052 ```
2053 <enabled/>or <disabled/>
2054 ```
2055 #### macOS
2056 ```
2057 <dict>
2058   <key>EncryptedMediaExtensions</key>
2059   <dict>
2060     <key>Enabled</key>
2061     <true/> | <false/>
2062     <key><Locked</key>
2063     <true/> | <false/>
2064   </dict>
2065 </dict>
2066 ```
2067 #### policies.json
2068 ```
2069 {
2070   "policies": {
2071     "EncryptedMediaExtensions": {
2072       "Enabled": true | false,
2073       "Locked": true | false
2074     }
2075 }
2076 ```
2077 ### EnterprisePoliciesEnabled
2078 Enable policy support on macOS.
2079
2080 **Compatibility:** Firefox 63, Firefox ESR 60.3 (macOS only)\
2081 **CCK2 Equivalent:** N/A\
2082 **Preferences Affected:** N/A
2083
2084 #### macOS
2085 ```
2086 <dict>
2087   <key>EnterprisePoliciesEnabled</key>
2088   <true/>
2089 </dict>
2090 ```
2091 ### Extensions
2092 Control the installation, uninstallation and locking of extensions.
2093
2094 `Install` is a list of URLs or native paths for extensions to be installed.
2095
2096 `Uninstall` is a list of extension IDs that should be uninstalled if found.
2097
2098 `Locked` is a list of extension IDs that the user cannot disable or uninstall.
2099
2100 **Compatibility:** Firefox 60, Firefox ESR 60\
2101 **CCK2 Equivalent:** `addons`\
2102 **Preferences Affected:** N/A
2103
2104 #### Windows (GPO)
2105 ```
2106 Software\Policies\Mozilla\Firefox\Extensions\Install\1 = "https://addons.mozilla.org/firefox/downloads/somefile.xpi"
2107 Software\Policies\Mozilla\Firefox\Extensions\Install\2 = "//path/to/xpi"
2108 Software\Policies\Mozilla\Firefox\Extensions\Uninstall\1 = "bad_addon_id@mozilla.org"
2109 Software\Policies\Mozilla\Firefox\Extensions\Locked\1 = "addon_id@mozilla.org"
2110 ```
2111 #### macOS
2112 ```
2113 <dict>
2114   <key>Extensions</key>
2115   <dict>
2116     <key>Install</key>
2117     <array>
2118       <string>https://addons.mozilla.org/firefox/downloads/somefile.xpi</string>
2119       <string>//path/to/xpi</string>
2120     </array>
2121     <key>Uninstall</key>
2122     <array>
2123       <string>bad_addon_id@mozilla.org</string>
2124     </array>
2125     <key>Locked</key>
2126     <array>
2127       <string>addon_id@mozilla.org</string>
2128     </array>
2129   </dict>
2130 </dict>
2131 ```
2132 #### policies.json
2133 ```
2134 {
2135   "policies": {
2136     "Extensions": {
2137       "Install": ["https://addons.mozilla.org/firefox/downloads/somefile.xpi", "//path/to/xpi"],
2138       "Uninstall": ["bad_addon_id@mozilla.org"],
2139       "Locked":  ["addon_id@mozilla.org"]
2140     }
2141   }
2142 }
2143 ```
2144 ### ExtensionSettings
2145 Manage all aspects of extensions. This policy is based heavily on the [Chrome policy](https://dev.chromium.org/administrators/policy-list-3/extension-settings-full) of the same name.
2146
2147 This policy maps an extension ID to its configuration. With an extension ID, the configuration will be applied to the specified extension only. A default configuration can be set for the special ID "*", which will apply to all extensions that don't have a custom configuration set in this policy.
2148
2149 To obtain an extension ID, install the extension and go to about:support. You will see the ID in the Extensions section.
2150
2151 The configuration for each extension is another dictionary that can contain the fields documented below.
2152
2153 | Name | Description |
2154 | --- | --- |
2155 | `installation_mode` | Maps to a string indicating the installation mode for the extension. The valid strings are `allowed`,`blocked`,`force_installed`, and `normal_installed`.
2156 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`allowed` | Allows the extension to be installed by the user. This is the default behavior.
2157 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`blocked`| Blocks installation of the extension and removes it from the device if already installed.
2158 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`force_installed`| The extension is automatically installed and can't be removed by the user. This option is not valid for the default configuration and requires an install_url.
2159 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`normal_installed`| The extension is automatically installed but can be disabled by the user. This option is not valid for the default configuration and requires an install_url.
2160 | `install_url`| Maps to a URL indicating where Firefox can download a force_installed or normal_installed extension. If installing from the addons.mozilla.org, use the following URL (substituting SHORT_NAME from the URL on AMO), https://addons.mozilla.org/firefox/downloads/latest/SHORT_NAME/latest.xpi. If installing from the local file system, use a file:/// URL. Languages packs are available from https://releases.mozilla.org/pub/firefox/releases/VERSION/PLATFORM/xpi/LANGUAGE.xpi.
2161 | `install_sources` | Each item in this list is an extension-style match pattern. Users will be able to easily install items from any URL that matches an item in this list. Both the location of the *.xpi file and the page where the download is started from (i.e.  the referrer) must be allowed by these patterns. This setting can be used only for the default configuration.
2162 | `allowed_types` | This setting whitelists the allowed types of extension/apps that can be installed in Firefox. The value is a list of strings, each of which should be one of the following: "extension", "theme", "dictionary", "langpack" This setting can be used only for the default configuration.
2163 | `blocked_install_message` | This maps to a string specifying the error message to display to users if they're blocked from installing an extension. This setting allows you to append text to the generic error message displayed when the extension is blocked. This could be be used to direct users to your help desk, explain why a particular extension is blocked, or something else.
2164
2165 **Compatibility:** Firefox 69, Firefox ESR 68.1\
2166 **CCK2 Equivalent:** N/A\
2167 **Preferences Affected:** N/A
2168
2169 #### Windows (GPO)
2170 ```
2171 Software\Policies\Mozilla\Firefox\ExtensionSettings (REG_MULTI_SZ) =
2172 {
2173   "*": {
2174     "blocked_install_message": "Custom error message.",
2175     "install_sources": ["https://addons.mozilla.org/"],
2176     "installation_mode": "blocked",
2177     "allowed_types": ["extension"]
2178   },
2179   "uBlock0@raymondhill.net": {
2180     "installation_mode": "force_installed",
2181     "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
2182   }
2183 }
2184 ```
2185 #### Windows (Intune)
2186 OMA-URI:
2187 ```
2188 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/ExtensionSettings
2189 ```
2190 Value (string):
2191 ```
2192 <enabled/>
2193 <data id="ExtensionSettings" value='
2194   "*": {
2195       "blocked_install_message": "Custom error message.",
2196       "install_sources": ["https://addons.mozilla.org/"],
2197       "installation_mode": "blocked",
2198       "allowed_types": ["extension"]
2199     },
2200     "uBlock0@raymondhill.net": {
2201       "installation_mode": "force_installed",
2202       "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
2203     }'/>
2204 ```
2205 #### macOS
2206 ```
2207 <dict>
2208   <key>ExtensionSettings</key>
2209   <dict>
2210     <key>*</key>
2211     <dict>
2212       <key>blocked_install_message</key>
2213       <string>Custom error message.</string>
2214       <key>install_sources</key>
2215       <array>
2216         <string>https://addons.mozilla.org/</string>
2217       </array>
2218       <key>installation_mode</key>
2219       <string>blocked</string>
2220       <key>allowed_types</key>
2221       <array>
2222         <string>extension</string>
2223       </array>
2224     </dict>
2225     <key>uBlock0@raymondhill.net</key>
2226     <dict>
2227       <key>installation_mode</key>
2228        <string>force_installed</string>
2229       <key>install_url</key>
2230       <string>https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi</string>
2231     </dict>
2232   </dict>
2233 </dict>
2234 ```
2235 #### policies.json
2236 ```
2237 {
2238   "policies": {
2239     "ExtensionSettings": {
2240       "*": {
2241         "blocked_install_message": "Custom error message.",
2242         "install_sources": ["https://addons.mozilla.org/"],
2243         "installation_mode": "blocked",
2244         "allowed_types": ["extension"]
2245       },
2246       "uBlock0@raymondhill.net": {
2247         "installation_mode": "force_installed",
2248         "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
2249       }
2250     }
2251   }
2252 }
2253 ```
2254 ### ExtensionUpdate
2255 Control extension updates.
2256
2257 **Compatibility:** Firefox 67, Firefox ESR 60.7\
2258 **CCK2 Equivalent:** N/A\
2259 **Preferences Affected:** `extensions.update.enabled`
2260
2261 #### Windows (GPO)
2262 ```
2263 Software\Policies\Mozilla\Firefox\ExtensionUpdate = 0x1 | 0x0
2264 ```
2265 #### Windows (Intune)
2266 OMA-URI:
2267 ```
2268 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/ExtensionUpdate
2269 ```
2270 Value (string):
2271 ```
2272 <enabled/> or <disabled/>
2273 ```
2274 #### macOS
2275 ```
2276 <dict>
2277   <key>ExtensionUpdate</key>
2278   <true/> | <false/>
2279 </dict>
2280 ```
2281 #### policies.json
2282 ```
2283 {
2284   "policies": {
2285     "ExtensionUpdate": true | false
2286   }
2287 }
2288 ```
2289 ### FlashPlugin
2290 Configure the default Flash plugin policy as well as origins for which Flash is allowed.
2291
2292 `Allow` is a list of origins where Flash are allowed.
2293
2294 `Block` is a list of origins where Flash is not allowed.
2295
2296 `Default` determines whether or not Flash is allowed by default.
2297
2298 `Locked` prevents the user from changing Flash preferences.
2299
2300 **Compatibility:** Firefox 60, Firefox ESR 60\
2301 **CCK2 Equivalent:** `permissions.plugin`\
2302 **Preferences Affected:** `plugin.state.flash`
2303
2304 #### Windows (GPO)
2305 ```
2306 Software\Policies\Mozilla\Firefox\FlashPlugin\Allow\1 = "https://example.org"
2307 Software\Policies\Mozilla\Firefox\FlashPlugin\Block\1 = "https://example.edu"
2308 Software\Policies\Mozilla\Firefox\FlashPlugin\Default = 0x1 | 0x0
2309 Software\Policies\Mozilla\Firefox\FlashPlugin\Locked = 0x1 | 0x0
2310 ```
2311 #### Windows (Intune)
2312 OMA-URI:
2313 ```
2314 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Flash/FlashPlugin_Allow
2315 ```
2316 Value (string):
2317 ```
2318 <enabled/>
2319 <data id="Permissions" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
2320 ```
2321 OMA-URI:
2322 ```
2323 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Flash/FlashPlugin_Locked
2324 ```
2325 Value (string):
2326 ```
2327 <enabled/> or <disabled/>
2328 ```
2329 OMA-URI:
2330 ```
2331 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Flash/FlashPlugin_Default
2332 ```
2333 Value (string):
2334 ```
2335 <enabled/> or <disabled/>
2336 ```
2337 #### macOS
2338 ```
2339 <dict>
2340   <key>FlashPlugin</key>
2341   <dict>
2342     <key>Allow</key>
2343     <array>
2344       <string>http://example.org</string>
2345     </array>
2346     <key>Block</key>
2347     <array>
2348       <string>http://example.edu</string>
2349     </array>
2350     <key>Default</key>
2351     <true/> | <false/>
2352     <key>Locked</key>
2353     <true/> | <false/>
2354   </dict>
2355 </dict>
2356 ```
2357 #### policies.json
2358 ```
2359 {
2360   "policies": {
2361     "FlashPlugin": {
2362       "Allow": ["http://example.org/"],
2363       "Block": ["http://example.edu/"],
2364       "Default": true | false,
2365       "Locked": true | false
2366     }
2367   }
2368 }
2369 ```
2370 ### FirefoxHome
2371 Customize the Firefox Home page.
2372
2373 **Compatibility:** Firefox 68, Firefox ESR 68\
2374 **CCK2 Equivalent:** N/A\
2375 **Preferences Affected:** `browser.newtabpage.activity-stream.showSearch`,`browser.newtabpage.activity-stream.feeds.topsites`,`browser.newtabpage.activity-stream.feeds.section.highlights`,`browser.newtabpage.activity-stream.feeds.section.topstories`,`browser.newtabpage.activity-stream.feeds.snippets`
2376
2377 #### Windows (GPO)
2378 ```
2379 Software\Policies\Mozilla\Firefox\FirefoxHome\Search = 0x1 | 0x0
2380 Software\Policies\Mozilla\Firefox\FirefoxHome\TopSites = 0x1 | 0x0
2381 Software\Policies\Mozilla\Firefox\FirefoxHome\Highlights = 0x1 | 0x0
2382 Software\Policies\Mozilla\Firefox\FirefoxHome\Pocket = 0x1 | 0x0
2383 Software\Policies\Mozilla\Firefox\FirefoxHome\Snippets = 0x1 | 0x0
2384 Software\Policies\Mozilla\Firefox\FirefoxHome\Locked = 0x1 | 0x0
2385 ```
2386 #### Windows (Intune)
2387 OMA-URI:
2388 ```
2389 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/CustomizeFirefoxHome
2390 ```
2391 Value (string):
2392 ```
2393 <enabled/>
2394 <data id="FirefoxHome_Search"  value="true | false"/>
2395 <data id="FirefoxHome_TopSites"  value="true | false"/>
2396 <data id="FirefoxHome_Highlights"  value="true | false"/>
2397 <data id="FirefoxHome_Pocket"  value="true | false"/>
2398 <data id="FirefoxHome_Snippets"  value="true | false"/>
2399 <data id="FirefoxHome_Locked"  value="true | false"/>
2400 ```
2401 #### macOS
2402 ```
2403 <dict>
2404   <key>FirefoxHome</key>
2405   <dict>
2406     <key>Search</key>
2407     <true/> | <false/>
2408     <key>TopSites</key>
2409     <true/> | <false/>
2410     <key>Highlights</key>
2411     <true/> | <false/>
2412     <key>Pocket</key>
2413     <true/> | <false/>
2414     <key>Snippets</key>
2415     <true/> | <false/>
2416     <key>Locked</key>
2417     <true/> | <false/>
2418   </dict>
2419 </dict>
2420 ```
2421 #### policies.json
2422 ```
2423 {
2424   "policies": {
2425     "FirefoxHome": {
2426       "Search": true | false,
2427       "TopSites": true | false,
2428       "Highlights": true | false,
2429       "Pocket": true | false,
2430       "Snippets": true | false,
2431       "Locked": true | false
2432     }
2433   }
2434 }
2435 ```
2436 ### HardwareAcceleration
2437 Control hardware acceleration.
2438
2439 **Compatibility:** Firefox 60, Firefox ESR 60\
2440 **CCK2 Equivalent:** N/A\
2441 **Preferences Affected:** `layers.acceleration.disabled`
2442
2443 #### Windows (GPO)
2444 ```
2445 Software\Policies\Mozilla\Firefox\HardwareAcceleration = 0x1 | 0x0
2446 ```
2447 #### Windows (Intune)
2448 OMA-URI:
2449 ```
2450 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/HardwareAcceleration
2451 ```
2452 Value (string):
2453 ```
2454 <enabled/> or <disabled/>
2455 ```
2456 #### macOS
2457 ```
2458 <dict>
2459   <key>HardwareAcceleration</key>
2460   <true/> | <false/>
2461 </dict>
2462 ```
2463 #### policies.json
2464 ```
2465 {
2466   "policies": {
2467     "HardwareAcceleration": true | false
2468   }
2469 }
2470 ```
2471 ### Homepage
2472 Configure the default homepage and how Firefox starts.
2473
2474 `URL` is the default homepage.
2475
2476 `Locked` prevents the user from changing homepage preferences.
2477
2478 `Additional` allows for more than one homepage.
2479
2480 `StartPage` is how Firefox starts. The choices are no homepage, the default homepage or the previous session.
2481
2482 With Firefox 78, an additional option as added for `Startpage`, `homepage-locked`. This allows for locking the homepage, but still allowing the user to choose whether or not they want to restore their session.
2483
2484 **Compatibility:** Firefox 60, Firefox ESR 60 (StartPage was added in Firefox 60, Firefox ESR 60.4, homepage-locked added in Firefox 78)\
2485 **CCK2 Equivalent:** `homePage`,`lockHomePage`\
2486 **Preferences Affected:** `browser.startup.homepage`,`browser.startup.page`
2487
2488 #### Windows (GPO)
2489 ```
2490 Software\Policies\Mozilla\Firefox\Homepage\URL = "https://example.com"
2491 Software\Policies\Mozilla\Firefox\Homepage\Locked = 0x1 | 0x0
2492 Software\Policies\Mozilla\Firefox\Homepage\Additional\1 = "https://example.org"
2493 Software\Policies\Mozilla\Firefox\Homepage\Additional\2 = "https://example.edu"
2494 Software\Policies\Mozilla\Firefox\Homepage\StartPage = "none" | "homepage" | "previous-session" | "homepage-locked"
2495 ```
2496 #### Windows (Intune)
2497 OMA-URI:
2498 ```
2499 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageURL
2500 ```
2501 Value (string):
2502 ```
2503 <enabled/>
2504
2505 <data id="HomepageURL" value="https://example.com"/>
2506 <data id="HomepageLocked" value="true | false"/>
2507 ```
2508 OMA-URI:
2509 ```
2510 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageAdditional
2511 ```
2512 Value (string):
2513 ```
2514 <enabled/>
2515
2516 <data id="HomepageAdditional" value="1&#xF000;http://example.org&#xF000;2&#xF000;http://example.edu"/>
2517 ```
2518 OMA-URI:
2519 ```
2520 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageStartPage
2521 ```
2522 Value (string):
2523 ```
2524 <enabled/>
2525
2526 <data id="StartPage" value="none | homepage | previous-session"/>
2527 ```
2528 #### macOS
2529 ```
2530 <dict>
2531   <key>Homepage</key>
2532   <dict>
2533     <key>URL</key>
2534     <string>http://example.com</string>
2535     <key>Locked</key>
2536     <true/> | <false/>
2537     <key>Additional</key>
2538     <array>
2539       <string>http://example.org</string>
2540       <string>http://example.edu</string>
2541     </array>
2542     <key>StartPage</key>
2543     <string>none | homepage | previous-session | homepage-locked</string>
2544   </dict>
2545 </dict>
2546 ```
2547 #### policies.json
2548 ```
2549 {
2550   "policies": {
2551     "Homepage": {
2552       "URL": "http://example.com/",
2553       "Locked": true | false,
2554       "Additional": ["http://example.org/",
2555                      "http://example.edu/"],
2556       "StartPage": "none" | "homepage" | "previous-session" | "homepage-locked"
2557     }
2558   }
2559 }
2560 ```
2561 ### InstallAddonsPermission
2562 Configure the default extension install policy as well as origins for extension installs are allowed. This policy does not override turning off all extension installs.
2563
2564 `Allow` is a list of origins where extension installs are allowed.
2565
2566 `Default` determines whether or not extension installs are allowed by default.
2567
2568 **Compatibility:** Firefox 60, Firefox ESR 60\
2569 **CCK2 Equivalent:** `permissions.install`\
2570 **Preferences Affected:** `xpinstall.enabled`
2571
2572 #### Windows (GPO)
2573 ```
2574 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Allow\1 = "https://example.org"
2575 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Allow\2 = "https://example.edu"
2576 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Default = 0x1 | 0x0
2577 ```
2578 #### Windows (Intune)
2579 OMA-URI:
2580 ```
2581 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Addons/InstallAddonsPermission_Allow
2582 ```
2583 Value (string):
2584 ```
2585 <enabled/>
2586 <data id="Permissions" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
2587 ```
2588 OMA-URI:
2589 ```
2590 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Addons/InstallAddonsPermission_Default
2591 ```
2592 Value (string):
2593 ```
2594 <enabled/>
2595 ```
2596 #### macOS
2597 ```
2598 <dict>
2599   <key>InstallAddonsPermission</key>
2600   <dict>
2601     <key>Allow</key>
2602     <array>
2603       <string>http://example.org</string>
2604       <string>http://example.edu</string>
2605     </array>
2606     <key>Default</key>
2607     <true/> | <false/>
2608   </dict>
2609 </dict>
2610 ```
2611 #### policies.json
2612 ```
2613 {
2614   "policies": {
2615     "InstallAddonsPermission": {
2616       "Allow": ["http://example.org/",
2617                 "http://example.edu/"],
2618       "Default": true | false
2619     }
2620   }
2621 }
2622 ```
2623 ### LegacyProfiles
2624 Disable the feature enforcing a separate profile for each installation.
2625
2626 If this policy set to true, Firefox will not try to create different profiles for installations of Firefox in different directories. This is the equivalent of the MOZ_LEGACY_PROFILES environment variable.
2627
2628 If this policy set to false, Firefox will create a new profile for each unique installation of Firefox.
2629
2630 This policy only work on Windows via GPO (not policies.json).
2631
2632 **Compatibility:** Firefox 70, Firefox ESR 68.2 (Windows only, GPO only)\
2633 **CCK2 Equivalent:** N/A\
2634 **Preferences Affected:** N/A
2635
2636 #### Windows (GPO)
2637 ```
2638 Software\Policies\Mozilla\Firefox\LegacyProfiles = = 0x1 | 0x0
2639 ```
2640 #### Windows (Intune)
2641 OMA-URI:
2642 ```
2643 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/LegacyProfiles
2644 ```
2645 Value (string):
2646 ```
2647 <enabled/> or <disabled/>
2648 ```
2649 ### LocalFileLinks
2650 Enable linking to local files by origin.
2651
2652 **Compatibility:** Firefox 68, Firefox ESR 68\
2653 **CCK2 Equivalent:** N/A\
2654 **Preferences Affected:** `capability.policy.localfilelinks.*`
2655
2656 #### Windows (GPO)
2657 ```
2658 Software\Policies\Mozilla\Firefox\LocalFileLinks\1 = "https://example.org"
2659 Software\Policies\Mozilla\Firefox\LocalFileLinks\2 = "https://example.edu"
2660 ```
2661 #### Windows (Intune)
2662 OMA-URI:
2663 ```
2664 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/LocalFileLinks
2665 ```
2666 Value (string):
2667 ```
2668 <enabled/>
2669 <data id="LocalFileLinks" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
2670 ```
2671 #### macOS
2672 ```
2673 <dict>
2674   <key>LocalFileLinks</key>
2675   <array>
2676     <string>http://example.org</string>
2677     <string>http://example.edu</string>
2678   </array>
2679 </dict>
2680 ```
2681 #### policies.json
2682 ```
2683 {
2684   "policies": {
2685     "LocalFileLinks": ["http://example.org/",
2686                        "http://example.edu/"]
2687   }
2688 }
2689 ```
2690 ### NetworkPrediction
2691 Enable or disable network prediction (DNS prefetching).
2692
2693 **Compatibility:** Firefox 67, Firefox ESR 60.7\
2694 **CCK2 Equivalent:** N/A\
2695 **Preferences Affected:** `network.dns.disablePrefetch`,`network.dns.disablePrefetchFromHTTPS`
2696
2697 #### Windows (GPO)
2698 ```
2699 Software\Policies\Mozilla\Firefox\NetworkPrediction = 0x1 | 0x0
2700 ```
2701 #### Windows (Intune)
2702 OMA-URI:
2703 ```
2704 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NetworkPrediction
2705 ```
2706 Value (string):
2707 ```
2708 <enabled/> or <disabled/>
2709 ```
2710 #### macOS
2711 ```
2712 <dict>
2713   <key>NetworkPrediction</key>
2714   <true/> | <false/>
2715 </dict>
2716 ```
2717 #### policies.json
2718 ```
2719 {
2720   "policies": {
2721     "NetworkPrediction": true | false
2722 }
2723 ```
2724 ### NewTabPage
2725 Enable or disable the New Tab page.
2726
2727 **Compatibility:** Firefox 68, Firefox ESR 68\
2728 **CCK2 Equivalent:** N/A\
2729 **Preferences Affected:** `browser.newtabpage.enabled`
2730
2731 #### Windows (GPO)
2732 ```
2733 Software\Policies\Mozilla\Firefox\NewTabPage = 0x1 | 0x0
2734 ```
2735 #### Windows (Intune)
2736 OMA-URI:
2737 ```
2738 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NewTabPage
2739 ```
2740 Value (string):
2741 ```
2742 <enabled/> or <disabled/>
2743 ```
2744 #### macOS
2745 ```
2746 <dict>
2747   <key>NewTabPage</key>
2748   <true/> | <false/>
2749 </dict>
2750 ```
2751 #### policies.json
2752 ```
2753 {
2754   "policies": {
2755     "NewTabPage": true | false
2756 }
2757 ```
2758 ### NoDefaultBookmarks
2759 Disable the creation of default bookmarks.
2760
2761 This policy is only effective if the user profile has not been created yet.
2762
2763 **Compatibility:** Firefox 60, Firefox ESR 60\
2764 **CCK2 Equivalent:** `removeDefaultBookmarks`\
2765 **Preferences Affected:** N/A
2766
2767 #### Windows (GPO)
2768 ```
2769 Software\Policies\Mozilla\Firefox\NoDefaultBookmarks = 0x1 | 0x0
2770 ```
2771 #### Windows (Intune)
2772 OMA-URI:
2773 ```
2774 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NoDefaultBookmarks
2775 ```
2776 Value (string):
2777 ```
2778 <enabled/> or <disabled/>
2779 ```
2780 #### macOS
2781 ```
2782 <dict>
2783   <key>NoDefaultBookmarks</key>
2784   <true/> | <false/>
2785 </dict>
2786 ```
2787 #### policies.json
2788 ```
2789 {
2790   "policies": {
2791     "NoDefaultBookmarks": true | false
2792   }
2793 }
2794 ```
2795 ### OfferToSaveLogins
2796 Control whether or not Firefox offers to save passwords.
2797
2798 **Compatibility:** Firefox 60, Firefox ESR 60\
2799 **CCK2 Equivalent:** `dontRememberPasswords`\
2800 **Preferences Affected:** `signon.rememberSignons`
2801
2802 #### Windows (GPO)
2803 ```
2804 Software\Policies\Mozilla\Firefox\OfferToSaveLogins = 0x1 | 0x0
2805 ```
2806 #### Windows (Intune)
2807 OMA-URI:
2808 ```
2809 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OfferToSaveLogins
2810 ```
2811 Value (string):
2812 ```
2813 <enabled/> or <disabled/>
2814 ```
2815 #### macOS
2816 ```
2817 <dict>
2818   <key>OfferToSaveLogins</key>
2819   <true/> | <false/>
2820 </dict>
2821 ```
2822 #### policies.json
2823 ```
2824 {
2825   "policies": {
2826     "OfferToSaveLogins": true | false
2827   }
2828 }
2829 ```
2830 ### OfferToSaveLoginsDefault
2831 Sets the default value of signon.rememberSignons without locking it.
2832
2833 **Compatibility:** Firefox 70, Firefox ESR 60.2\
2834 **CCK2 Equivalent:** `dontRememberPasswords`\
2835 **Preferences Affected:** `signon.rememberSignons`
2836
2837 #### Windows (GPO)
2838 ```
2839 Software\Policies\Mozilla\Firefox\OfferToSaveLoginsDefault = 0x1 | 0x0
2840 ```
2841 #### Windows (Intune)
2842 OMA-URI:
2843 ```
2844 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OfferToSaveLoginsDefault
2845 ```
2846 Value (string):
2847 ```
2848 <enabled/> or <disabled/>
2849 ```
2850 #### macOS
2851 ```
2852 <dict>
2853   <key>OfferToSaveLoginsDefault</key>
2854   <true/> | <false/>
2855 </dict>
2856 ```
2857 #### policies.json
2858 ```
2859 {
2860   "policies": {
2861     "OfferToSaveLoginsDefault": true | false
2862   }
2863 }
2864 ```
2865 ### OverrideFirstRunPage
2866 Override the first run page. If the value is blank, no first run page is displayed.
2867
2868 **Compatibility:** Firefox 60, Firefox ESR 60\
2869 **CCK2 Equivalent:** `welcomePage`,`noWelcomePage`\
2870 **Preferences Affected:** `startup.homepage_welcome_url`
2871
2872 #### Windows (GPO)
2873 ```
2874 Software\Policies\Mozilla\Firefox\OverrideFirstRunPage = "http://example.org"
2875 ```
2876 #### Windows (Intune)
2877 OMA-URI:
2878 ```
2879 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OverrideFirstRunPage
2880 ```
2881 Value (string):
2882 ```
2883 <enabled/>
2884 <data id="OverridePage" value="https://example.com"/>
2885 ```
2886 #### macOS
2887 ```
2888 <dict>
2889   <key>OverrideFirstRunPage</key>
2890   <string>http://example.org</string>
2891 </dict>
2892 ```
2893 #### policies.json
2894 ```
2895 {
2896   "policies": {
2897     "OverrideFirstRunPage": "http://example.org"
2898 }
2899 ```
2900 ### OverridePostUpdatePage
2901 Override the upgrade page. If the value is blank, no upgrade page is displayed.
2902
2903 **Compatibility:** Firefox 60, Firefox ESR 60\
2904 **CCK2 Equivalent:** `upgradePage`,`noUpgradePage`\
2905 **Preferences Affected:** `startup.homepage_override_url`
2906
2907 #### Windows (GPO)
2908 ```
2909 Software\Policies\Mozilla\Firefox\OverridePostUpdatePage = "http://example.org"
2910 ```
2911 #### Windows (Intune)
2912 OMA-URI:
2913 ```
2914 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OverridePostUpdatePage
2915 ```
2916 Value (string):
2917 ```
2918 <enabled/>
2919 <data id="OverridePage" value="https://example.com"/>
2920 ```
2921 #### macOS
2922 ```
2923 <dict>
2924   <key>OverridePostUpdatePage</key>
2925   <string>http://example.org</string>
2926 </dict>
2927 ```
2928 #### policies.json
2929 ```
2930 {
2931   "policies": {
2932     "OverridePostUpdatePage": "http://example.org"
2933 }
2934 ```
2935 ### PasswordManagerEnabled
2936 Remove access to the password manager via preferences and blocks about:logins on Firefox 70.
2937
2938 **Compatibility:** Firefox 70, Firefox ESR 60.2\
2939 **CCK2 Equivalent:** N/A\
2940 **Preferences Affected:** `pref.privacy.disable_button.view_passwords`
2941
2942 #### Windows (GPO)
2943 ```
2944 Software\Policies\Mozilla\Firefox\PasswordManagerEnabled = 0x1 | 0x0
2945 ```
2946 #### Windows (Intune)
2947 OMA-URI:
2948 ```
2949 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PasswordManagerEnabled
2950 ```
2951 Value (string):
2952 ```
2953 <enabled/> or <disabled/>
2954 ```
2955 #### macOS
2956 ```
2957 <dict>
2958   <key>PasswordManagerEnabled</key>
2959   <true/> | <false/>
2960 </dict>
2961 ```
2962 #### policies.json
2963 ```
2964 {
2965   "policies": {
2966     "PasswordManagerEnabled": true | false
2967   }
2968 }
2969 ```
2970 ### PDFjs
2971 Disable or configure PDF.js, the built-in PDF viewer.
2972
2973 If `Enabled` is set to false, the built-in PDF viewer is disabled.
2974
2975 If `EnablePermissions` is set to true, the built-in PDF viewer will honor document permissions like preventing the copying of text.
2976
2977 Note: DisableBuiltinPDFViewer has not been deprecated. You can either continue to use it, or switch to using PDFjs->Enabled to disable the built-in PDF viewer. This new permission was added because we needed a place for PDFjs->EnabledPermissions.
2978
2979 **Compatibility:** Firefox 77, Firefox ESR 68.9\
2980 **CCK2 Equivalent:** N/A\
2981 **Preferences Affected:** `pdfjs.diabled`,`pdfjs.enablePermissions`
2982
2983 #### Windows (GPO)
2984 ```
2985 Software\Policies\Mozilla\Firefox\PDFjs\Enabled = 0x1 | 0x0
2986 Software\Policies\Mozilla\Firefox\PDFjs\EnablePermissions = 0x1 | 0x0
2987 ```
2988 #### Windows (Intune)
2989 OMA-URI:
2990 ```
2991 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PDFjs/PDFjs_Enabled
2992 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PDFjs/PDFjs_EnablePermissions
2993 ```
2994 Value (string):
2995 ```
2996 <enabled/>or <disabled/>
2997 ```
2998 #### macOS
2999 ```
3000 <dict>
3001   <key>PDFjs</key>
3002   <dict>
3003     <key>Enabled</key>
3004     <true/> | <false/>
3005     <key><EnablePermissions</key>
3006     <true/> | <false/>
3007   </dict>
3008 </dict>
3009 ```
3010 #### policies.json
3011 ```
3012 {
3013   "policies": {
3014     "PSFjs": {
3015       "Enabled": true | false,
3016       "EnablePermissions": true | false
3017     }
3018 }
3019 ```
3020 ### Permissions
3021 Set permissions associated with camera, microphone, location, notifications, and autoplay. Because these are origins, not domains, entries with unique ports must be specified separately. See examples below.
3022
3023 `Allow` is a list of origins where the feature is allowed.
3024
3025 `Block` is a list of origins where the feature is not allowed.
3026
3027 `BlockNewRequests` determines whether or not new requests can be made for the feature.
3028
3029 `Locked` prevents the user from changing preferences for the feature.
3030
3031 `Default` specifies the default value for Autoplay. block-audio-video is not supported on Firefox ESR 68.
3032
3033 **Compatibility:** Firefox 62, Firefox ESR 60.2 (Autoplay added in Firefox 74, Firefox ESR 68.6, Autoplay Default/Locked added in Firefox 76, Firefox ESR 68.8)\
3034 **CCK2 Equivalent:** N/A\
3035 **Preferences Affected:** `permissions.default.camera`,`permissions.default.microphone`,`permissions.default.geo`,`permissions.default.desktop-notification`,`media.autoplay.default`
3036
3037 #### Windows (GPO)
3038 ```
3039 Software\Policies\Mozilla\Firefox\Permissions\Camera\Allow\1 = "https://example.org"
3040 Software\Policies\Mozilla\Firefox\Permissions\Camera\Allow\2 = "https://example.org:1234"
3041 Software\Policies\Mozilla\Firefox\Permissions\Camera\Block\1 = "https://example.edu"
3042 Software\Policies\Mozilla\Firefox\Permissions\Camera\BlockNewRequests = 0x1 | 0x0
3043 Software\Policies\Mozilla\Firefox\Permissions\Camera\Locked = 0x1 | 0x0
3044 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Allow\1 = "https://example.org"
3045 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Block\1 = "https://example.edu"
3046 Software\Policies\Mozilla\Firefox\Permissions\Microphone\BlockNewRequests = 0x1 | 0x0
3047 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Locked = 0x1 | 0x0
3048 Software\Policies\Mozilla\Firefox\Permissions\Location\Allow\1 = "https://example.org"
3049 Software\Policies\Mozilla\Firefox\Permissions\Location\Block\1 = "https://example.edu"
3050 Software\Policies\Mozilla\Firefox\Permissions\Location\BlockNewRequests = 0x1 | 0x0
3051 Software\Policies\Mozilla\Firefox\Permissions\Location\Locked = 0x1 | 0x0
3052 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Allow\1 = "https://example.org"
3053 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Block\1 = "https://example.edu"
3054 Software\Policies\Mozilla\Firefox\Permissions\Notifications\BlockNewRequests = 0x1 | 0x0
3055 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Locked = 0x1 | 0x0
3056 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Allow\1 = "https://example.org"
3057 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Block\1 = "https://example.edu"
3058 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Default = "allow-audio-video" | "block-audio" | "block-audio-video"
3059 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Locked = 0x1 | 0x0
3060 ```
3061 #### Windows (Intune)
3062 OMA-URI:
3063 ```
3064 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Location/Location_BlockNewRequests
3065 ```
3066 Value (string):
3067 ```
3068 <enabled/> or <disabled/>
3069 ```
3070 OMA-URI:
3071 ```
3072 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Location/Location_Locked
3073 ```
3074 Value (string):
3075 ```
3076 <enabled/> or <disabled/>
3077 ```
3078 OMA-URI:
3079 ```
3080 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_Allow
3081 ```
3082 Value (string):
3083 ```
3084 <enabled/>
3085 <data id="Permissions" value="1&#xF000;https://example.org"/>
3086 ```
3087 OMA-URI:
3088 ```
3089 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_BlockNewRequests
3090 ```
3091 Value (string):
3092 ```
3093 <enabled/> or <disabled/>
3094 ```
3095 OMA-URI:
3096 ```
3097 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_Locked
3098 ```
3099 Value (string):
3100 ```
3101 <enabled/> or <disabled/>
3102 ```
3103 OMA-URI:
3104 ```
3105 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Allow
3106 ```
3107 Value (string):
3108 ```
3109 <enabled/>
3110 <data id="Permissions" value="1&#xF000;https://example.org"/>
3111 ```
3112 OMA-URI:
3113 ```
3114 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Block
3115 ```
3116 Value (string):
3117 ```
3118 <enabled/>
3119 <data id="Permissions" value="1&#xF000;https://example.edu"/>
3120 ```
3121 OMA-URI:
3122 ```
3123 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Default
3124 ```
3125 Value (string):
3126 ```
3127 <enabled/>
3128 <data id="Autoplay_Default" value="allow-audio-video | block-audio | block-audio-video"/>
3129 ```
3130 OMA-URI:
3131 ```
3132 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Locked
3133 ```
3134 Value (string):
3135 ```
3136 <enabled/> or <disabled/>
3137 ```
3138 #### macOS
3139 ```
3140 <dict>
3141   <key>Permissions</key>
3142   <dict>
3143     <key>Camera</key>
3144     <dict>
3145       <key>Allow</key>
3146       <array>
3147         <string>https://example.org</string>
3148         <string>https://example.org:1234</string>
3149       </array>
3150       <key>Block</key>
3151       <array>
3152         <string>https://example.edu</string>
3153       </array>
3154       <key>BlockNewRequests</key>
3155       <true/> | <false/>
3156       <key>Locked</key>
3157       <true/> | <false/>
3158     </dict>
3159     <key>Microphone</key>
3160     <dict>
3161       <key>Allow</key>
3162       <array>
3163         <string>https://example.org</string>
3164       </array>
3165       <key>Block</key>
3166       <array>
3167         <string>https://example.edu</string>
3168       </array>
3169       <key>BlockNewRequests</key>
3170       <true/> | <false/>
3171       <key>Locked</key>
3172       <true/> | <false/>
3173     </dict>
3174     <key>Location</key>
3175     <dict>
3176       <key>Allow</key>
3177       <array>
3178         <string>https://example.org</string>
3179       </array>
3180       <key>Block</key>
3181       <array>
3182         <string>https://example.edu</string>
3183       </array>
3184       <key>BlockNewRequests</key>
3185       <true/> | <false/>
3186       <key>Locked</key>
3187       <true/> | <false/>
3188     </dict>
3189     <key>Notifications</key>
3190     <dict>
3191       <key>Allow</key>
3192       <array>
3193         <string>https://example.org</string>
3194       </array>
3195       <key>Block</key>
3196       <array>
3197         <string>https://example.edu</string>
3198       </array>
3199       <key>BlockNewRequests</key>
3200       <true/>
3201       <key>Locked</key>
3202       <true/>
3203     </dict>
3204     <key>Autoplay</key>
3205     <dict>
3206       <key>Allow</key>
3207       <array>
3208         <string>https://example.org</string>
3209       </array>
3210       <key>Block</key>
3211       <array>
3212         <string>https://example.edu</string>
3213       </array>
3214       <key>Default</key>
3215       <string>allow-audio-video | block-audio | block-audio-video</string>
3216       <key>Locked</key>
3217       <true/> | <false/>
3218     </dict>
3219   </dict>
3220 </dict>
3221 ```
3222 #### policies.json
3223 ```
3224 {
3225   "policies": {
3226     "Permissions": {
3227       "Camera": {
3228         "Allow": ["https://example.org","https://example.org:1234"],
3229         "Block": ["https://example.edu"],
3230         "BlockNewRequests": true | false,
3231         "Locked": true | false
3232       },
3233       "Microphone": {
3234         "Allow": ["https://example.org"],
3235         "Block": ["https://example.edu"],
3236         "BlockNewRequests": true | false,
3237         "Locked": true | false
3238       },
3239       "Location": {
3240         "Allow": ["https://example.org"],
3241         "Block": ["https://example.edu"],
3242         "BlockNewRequests": true | false,
3243         "Locked": true | false
3244       },
3245       "Notifications": {
3246         "Allow": ["https://example.org"],
3247         "Block": ["https://example.edu"],
3248         "BlockNewRequests": true | false,
3249         "Locked": true | false
3250       },
3251       "Autoplay": {
3252         "Allow": ["https://example.org"],
3253         "Block": ["https://example.edu"],
3254         "Default": "allow-audio-video" | "block-audio" | "block-audio-video",
3255         "Locked": true | false
3256       }
3257     }
3258   }
3259 }
3260 ```
3261 ### PopupBlocking
3262 Configure the default pop-up window policy as well as origins for which pop-up windows are allowed.
3263
3264 `Allow` is a list of origins where popup-windows are allowed.
3265
3266 `Default` determines whether or not pop-up windows are allowed by default.
3267
3268 `Locked` prevents the user from changing pop-up preferences.
3269
3270 **Compatibility:** Firefox 60, Firefox ESR 60\
3271 **CCK2 Equivalent:** `permissions.popup`\
3272 **Preferences Affected:** `dom.disable_open_during_load`
3273
3274 #### Windows (GPO)
3275 ```
3276 Software\Policies\Mozilla\Firefox\PopupBlocking\Allow\1 = "https://example.org"
3277 Software\Policies\Mozilla\Firefox\PopupBlocking\Allow\2 = "https://example.edu"
3278 Software\Policies\Mozilla\Firefox\PopupBlocking\Default = 0x1 | 0x0
3279 Software\Policies\Mozilla\Firefox\PopupBlocking\Locked = 0x1 | 0x0
3280 ```
3281 #### Windows (Intune)
3282 OMA-URI:
3283 ```
3284 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Allow
3285 ```
3286 Value (string):
3287 ```
3288 <enabled/>
3289 <data id="Permissions" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
3290 ```
3291 OMA-URI:
3292 ```
3293 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Default
3294 ```
3295 Value (string):
3296 ```
3297 <enabled/> or <disabled/>
3298 ```
3299 OMA-URI:
3300 ```
3301 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Locked
3302 ```
3303 Value (string):
3304 ```
3305 <enabled/> or <disabled/>
3306 ```
3307 #### macOS
3308 ```
3309 <dict>
3310   <key>PopupBlocking</key>
3311   <dict>
3312     <key>Allow</key>
3313     <array>
3314       <string>http://example.org</string>
3315       <string>http://example.edu</string>
3316     </array>
3317     <key>Default</key>
3318     <true/> | <false/>
3319     <key>Locked</key>
3320     <true/> | <false/>
3321   </dict>
3322 </dict>
3323 ```
3324 #### policies.json
3325 ```
3326 {
3327   "policies": {
3328     "PopupBlocking": {
3329       "Allow": ["http://example.org/",
3330                 "http://example.edu/"],
3331       "Default": true | false,
3332       "Locked": true | false
3333     }
3334   }
3335 }
3336 ```
3337 ### Preferences
3338 Set and lock certain preferences.
3339
3340 **Compatibility:** See below\
3341 **CCK2 Equivalent:** `preferences`\
3342 **Preferences Affected:** See below
3343
3344 | Preference | Type | Compatibility | Default
3345 | --- | --- | --- | ---
3346 | accessibility.force_disabled | integer | Firefox 70, Firefox ESR 68.2 | 0
3347 | &nbsp;&nbsp;&nbsp;&nbsp;If set to 1, platform accessibility is disabled.
3348 | app.update.auto (Deprecated - Switch to AppAutoUpdate policy) | boolean | Firefox 68, Firefox ESR 68 | true
3349 | &nbsp;&nbsp;&nbsp;&nbsp;If false, Firefox doesn't automatically install update.
3350 | browser.bookmarks.autoExportHTML | boolean | Firefox 70, Firefox ESR 68.2 | false
3351 | &nbsp;&nbsp;&nbsp;&nbsp;If true, bookmarks are exported on shutdown.
3352 | browser.bookmarks.file | string | Firefox 70, Firefox ESR 68.2 | N/A
3353 | &nbsp;&nbsp;&nbsp;&nbsp;If set, the name of the file where bookmarks are exported and imported.
3354 | browser.bookmarks.restore_default_bookmarks | boolean | Firefox 70, Firefox ESR 68.2 | N/A
3355 | &nbsp;&nbsp;&nbsp;&nbsp;If true, bookmarks are restored to their defaults.
3356 | browser.cache.disk.enable | boolean | Firefox 68, Firefox ESR 68 | true
3357 | &nbsp;&nbsp;&nbsp;&nbsp;If false, don't store cache on the hard drive.
3358 | ~browser.cache.disk.parent_directory~ | string | Firefox 68, Firefox ESR 68 | Profile temporary directory
3359 | &nbsp;&nbsp;&nbsp;&nbsp;~If set, changes the location of the disk cache.~ This policy doesn't work. It's being worked on.
3360 | browser.fixup.dns_first_for_single_words | boolean | Firefox 68, Firefox ESR 68 | false
3361 | &nbsp;&nbsp;&nbsp;&nbsp;If true, single words are sent to DNS, not directly to search.
3362 | browser.newtabpage.activity-stream.default.sites | string | Firefox 72, ESR 68.4 | Locale dependent
3363 | &nbsp;&nbsp;&nbsp;&nbsp;If set, a list of URLs to use as the default top sites on the new tab page.
3364 | browser.places.importBookmarksHTML | boolean | Firefox 70, Firefox ESR 68.2
3365 | &nbsp;&nbsp;&nbsp;&nbsp;If true, bookmarks are always imported on startup.
3366 | browser.safebrowsing.phishing.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
3367 | &nbsp;&nbsp;&nbsp;&nbsp;If false, phishing protection is not enabled (Not recommended)
3368 | browser.safebrowsing.malware.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
3369 | &nbsp;&nbsp;&nbsp;&nbsp;If false, malware protection is not enabled (Not recommended)
3370 | browser.search.update | boolean | Firefox 68, Firefox ESR 68 | true
3371 | &nbsp;&nbsp;&nbsp;&nbsp;If false, updates for search engines are not checked.
3372 | browser.slowStartup.notificationDisabled | boolean | Firefox 70, Firefox ESR 68.2 | false
3373 | &nbsp;&nbsp;&nbsp;&nbsp;If true, a notification isn't shown if startup is slow.
3374 | browser.tabs.warnOnClose | boolean | Firefox 68, Firefox ESR 68 | true
3375 | &nbsp;&nbsp;&nbsp;&nbsp;If false, there is no warning when the browser is closed.
3376 | browser.taskbar.previews.enable | boolean | Firefox 70, Firefox ESR 68.2 (Windows only) | false
3377 | &nbsp;&nbsp;&nbsp;&nbsp;If true, tab previews are shown in the Windows taskbar.
3378 | browser.urlbar.suggest.bookmark | boolean | Firefox 68, Firefox ESR 68 | true
3379 | &nbsp;&nbsp;&nbsp;&nbsp;If false, bookmarks aren't suggested when typing in the URL bar.
3380 | browser.urlbar.suggest.history | boolean | Firefox 68, Firefox ESR 68 | true
3381 | &nbsp;&nbsp;&nbsp;&nbsp;If false, history isn't suggested when typing in the URL bar.
3382 | browser.urlbar.suggest.openpage | boolean | Firefox 68, Firefox ESR 68 | true
3383 | &nbsp;&nbsp;&nbsp;&nbsp;If false, open tabs aren't suggested when typing in the URL bar.
3384 | datareporting.policy.dataSubmissionPolicyBypassNotification | boolean | Firefox 68, Firefox ESR 68 | false
3385 | &nbsp;&nbsp;&nbsp;&nbsp;If true, don't show the privacy policy tab on first run.
3386 | dom.allow_scripts_to_close_windows | boolean | Firefox 70, Firefox ESR 68.2 | false
3387 | &nbsp;&nbsp;&nbsp;&nbsp;If false, web page can close windows.
3388 | dom.disable_window_flip | boolean | Firefox 68, Firefox ESR 68 | true
3389 | &nbsp;&nbsp;&nbsp;&nbsp;If false, web pages can focus and activate windows.
3390 | dom.disable_window_move_resize | boolean | Firefox 68, Firefox ESR 68 | false
3391 | &nbsp;&nbsp;&nbsp;&nbsp;If true, web pages can't move or resize windows.
3392 | dom.event.contextmenu.enabled | boolean | Firefox 68, Firefox ESR 68 | true
3393 | &nbsp;&nbsp;&nbsp;&nbsp;If false, web pages can't override context menus.
3394 | dom.keyboardevent.keypress.hack.dispatch_non_printable_keys.addl | string | Firefox 68, Firefox ESR 68 | N/A
3395 | &nbsp;&nbsp;&nbsp;&nbsp;See https://support.mozilla.org/en-US/kb/dom-events-changes-introduced-firefox-66
3396 | dom.keyboardevent.keypress.hack.use_legacy_keycode_and_charcode.addl | string | Firefox 68, Firefox ESR 68 | N/A
3397 | &nbsp;&nbsp;&nbsp;&nbsp;See https://support.mozilla.org/en-US/kb/dom-events-changes-introduced-firefox-66
3398 | dom.xmldocument.load.enabled | boolean | Firefox ESR 68.5 | true.
3399 | &nbsp;&nbsp;&nbsp;&nbsp;If false, XMLDocument.load is not available.
3400 | dom.xmldocument.async.enabled | boolean | Firefox ESR 68.5 | true
3401 | &nbsp;&nbsp;&nbsp;&nbsp;If false, XMLDocument.async is not available.
3402 | extensions.blocklist.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
3403 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the extensions blocklist is not used (Not recommended)
3404 | extensions.getAddons.showPane | boolean | Firefox 68, Firefox ESR 68 | N/A
3405 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the Recommendations tab is not displayed in the Add-ons Manager.
3406 | extensions.htmlaboutaddons.recommendations.enabled | boolean | Firefox 72, Firefox ESR 68.4 | true
3407 | &nbsp;&nbsp;&nbsp;&nbsp;If false, recommendations are not shown on the Extensions tab in the Add-ons Manager.
3408 | geo.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
3409 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the geolocation API is disabled. | Language dependent
3410 | intl.accept_languages | string | Firefox 70, Firefox ESR 68.2
3411 | &nbsp;&nbsp;&nbsp;&nbsp;If set, preferred language for web pages.
3412 | media.eme.enabled (Deprecated - Switch to EncryptedMediaExtensions policy) | boolean | Firefox 70, Firefox ESR 68.2 | true
3413 | &nbsp;&nbsp;&nbsp;&nbsp;If false, Encrypted Media Extensions are not enabled.
3414 | media.gmp-gmpopenh264.enabled | boolean | Firefox 68, Firefox ESR 68 | true
3415 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the OpenH264  plugin is not downloaded.
3416 | media.gmp-widevinecdm.enabled | boolean | Firefox 68, Firefox ESR 68 | true
3417 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the Widevine plugin is not downloaded.
3418 | media.peerconnection.enabled | boolean | Firefox 72, Firefox ESR 68.4 | true
3419 | &nbsp;&nbsp;&nbsp;&nbsp;If false, WebRTC is disabled
3420 | media.peerconnection.ice.obfuscate_host_addresses.whitelist | string | Firefox 72, Firefox ESR 68.4 | N/A
3421 | &nbsp;&nbsp;&nbsp;&nbsp;If set, a list of domains for which mDNS hostname obfuscation is
3422 disabled
3423 | network.dns.disableIPv6 | boolean | Firefox 68, Firefox ESR 68 | false
3424 | &nbsp;&nbsp;&nbsp;&nbsp;If true, IPv6 DNS lokoups are disabled.
3425 | network.IDN_show_punycode | boolean | Firefox 68, Firefox ESR 68 | false
3426 | &nbsp;&nbsp;&nbsp;&nbsp;If true, display the punycode version of internationalized domain names.
3427 | places.history.enabled | boolean | Firefox 68, Firefox ESR 68 | true
3428 | &nbsp;&nbsp;&nbsp;&nbsp;If false, history is not enabled.
3429 | print.save_print_settings | boolean | Firefox 70, Firefox ESR 68.2 | true
3430 | &nbsp;&nbsp;&nbsp;&nbsp;If false, print settings are not saved between jobs.
3431 | security.default_personal_cert | string | Firefox 68, Firefox ESR 68 | Ask Every Time
3432 | &nbsp;&nbsp;&nbsp;&nbsp;If set to Select Automatically, Firefox automatically chooses the default personal certificate.
3433 | security.mixed_content.block_active_content | boolean | Firefox 70, Firefox ESR 68.2 | true
3434 | &nbsp;&nbsp;&nbsp;&nbsp;If false, mixed active content (HTTP and HTTPS) is not blocked.
3435 | security.osclientcerts.autoload | boolean | Firefox 72 (Windows), Firefox 75 (macOS)  | false
3436 | &nbsp;&nbsp;&nbsp;&nbsp;If true, client certificates are loaded from the operating system certificate store.
3437 | security.ssl.errorReporting.enabled | boolean | Firefox 68, Firefox ESR 68 | true
3438 | &nbsp;&nbsp;&nbsp;&nbsp;If false, SSL errors cannot be sent to Mozilla.
3439 | security.tls.hello_downgrade_check | boolean | Firefox 72, Firefox ESR 68.4 | true
3440 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the TLS 1.3 downgrade check is disabled.
3441 | ui.key.menuAccessKeyFocuses | boolean | Firefox 68, Firefox ESR 68 | true
3442 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the Alt key doesn't show the menubar on Windows.
3443 | widget.content.gtk-theme-override | string | Firefox 72, Firefox ESR 68.4 (Linux only) | N/A
3444 | &nbsp;&nbsp;&nbsp;&nbsp;If set, overrides the GTK theme for widgets.
3445 #### Windows (GPO)
3446 ```
3447 Software\Policies\Mozilla\Firefox\Preferences\boolean_preference_name = 0x1 | 0x0
3448 Software\Policies\Mozilla\Firefox\Preferences\string_preference_name = "string_value"
3449 ```
3450 #### Windows (Intune)
3451 OMA-URI: (periods are replaced by underscores)
3452 ```
3453 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Preferences/boolean_preference_name
3454 ```
3455 Value (string):
3456 ```
3457 <enabled/> or <disabled/>
3458 ```
3459 #### macOS
3460 ```
3461 <dict>
3462   <key>Preferences</key>
3463   <dict>
3464     <key>boolean_preference_name</key>
3465     <true/> | <false/>
3466     <key>string_preference_name</key>
3467     <string>string_value</string>
3468   </dict>
3469 </dict>
3470 ```
3471 #### policies.json
3472 ```
3473 {
3474   "policies": {
3475     "Preferences": {
3476       "boolean_preference_name": true | false,
3477       "string_preference_name": "string_value"
3478     }
3479   }
3480 }
3481 ```
3482 ### PromptForDownloadLocation
3483 Ask where to save each file before downloading.
3484
3485 **Compatibility:** Firefox 68, Firefox ESR 68\
3486 **CCK2 Equivalent:** N/A\
3487 **Preferences Affected:** `browser.download.useDownloadDir`
3488
3489 #### Windows (GPO)
3490 ```
3491 Software\Policies\Mozilla\Firefox\PromptForDownloadLocation = 0x1 | 0x0
3492 ```
3493 #### Windows (Intune)
3494 OMA-URI:
3495 ```
3496 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PromptForDownloadLocation
3497 ```
3498 Value (string):
3499 ```
3500 <enabled/> or <disabled/>
3501 ```
3502 #### macOS
3503 ```
3504 <dict>
3505   <key>PromptForDownloadLocation</key>
3506   <true/> | <false/>
3507 </dict>
3508 ```
3509 #### policies.json
3510 ```
3511 {
3512   "policies": {
3513     "PromptForDownloadLocation": true | false
3514   }
3515 }
3516 ```
3517 ### Proxy
3518 Configure proxy settings. These settings correspond to the connection settings in Firefox preferences.
3519 To specify ports, append them to the hostnames with a colon (:).
3520
3521 `Mode` is the proxy method being used.
3522
3523 `Locked` is whether or not proxy settings can be changed.
3524
3525 `HTTPProxy` is the HTTP proxy server.
3526
3527 `UseHTTPProxyForAllProtocols` is whether or not the HTTP proxy should be used for all other proxies.
3528
3529 `SSLProxy` is the SSL proxy server.
3530
3531 `FTPProxy` is the FTP proxy server.
3532
3533 `SOCKSProxy` is the SOCKS proxy server
3534
3535 `SOCKSVersion` is the SOCKS version (4 or 5)
3536
3537 `Passthrough` is list of hostnames or IP addresses that will not be proxied. Use `<local>` to bypass proxying for all hostnames which do not contain periods.
3538
3539 `AutoConfigURL` is a  URL for proxy configuration (only used if Mode is autoConfig).
3540
3541 `AutoLogin` means do not prompt for authentication if password is saved.
3542
3543 `UseProxyForDNS` to use proxy DNS when using SOCKS v5.
3544
3545 **Compatibility:** Firefox 60, Firefox ESR 60\
3546 **CCK2 Equivalent:** `networkProxy*`\
3547 **Preferences Affected:** `network.proxy.type`,`network.proxy.autoconfig_url`,`network.proxy.socks_remote_dns`,`signon.autologin.proxy`,`network.proxy.socks_version`,`network.proxy.no_proxies_on`,`network.proxy.share_proxy_settings`,`network.proxy.http`,`network.proxy.http_port`,`network.proxy.ftp`,`network.proxy.ftp_port`,`network.proxy.ssl`,`network.proxy.ssl_port`,`network.proxy.socks`,`network.proxy.socks_port`
3548
3549 #### Windows (GPO)
3550 ```
3551 Software\Policies\Mozilla\Firefox\Proxy\Mode = "none", "system", "manual", "autoDetect", "autoConfig"
3552 Software\Policies\Mozilla\Firefox\Proxy\Locked = 0x1 | 0x0
3553 Software\Policies\Mozilla\Firefox\=Proxy\HTTPProxy = https://httpproxy.example.com
3554 Software\Policies\Mozilla\Firefox\Proxy\UseHTTPProxyForAllProtocols = 0x1 | 0x0
3555 Software\Policies\Mozilla\Firefox\Proxy\SSLProxy = https://sslproxy.example.com
3556 Software\Policies\Mozilla\Firefox\Proxy\FTPProxy = https://ftpproxy.example.com
3557 Software\Policies\Mozilla\Firefox\Proxy\SOCKSProxy = https://socksproxy.example.com
3558 Software\Policies\Mozilla\Firefox\Proxy\SOCKSVersion = 0x4 | 0x5
3559 Software\Policies\Mozilla\Firefox\Proxy\Passthrough = <local>
3560 Software\Policies\Mozilla\Firefox\Proxy\AutoConfigURL = URL_TO_AUTOCONFIG
3561 Software\Policies\Mozilla\Firefox\Proxy\AutoLogin = 0x1 | 0x0
3562 Software\Policies\Mozilla\Firefox\Proxy\UseProxyForDNS = 0x1 | 0x0
3563 ```
3564 #### Windows (Intune)
3565 OMA-URI:
3566 ```
3567 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Proxy
3568 ```
3569 Value (string):
3570 ```
3571 <enabled/>
3572 <data id="ProxyLocked" value="true | false"/>
3573 <data id="ConnectionType" value="none | system | manual | autoDetect | autoConfig"/>
3574 <data id="HTTPProxy" value="https://httpproxy.example.com"/>
3575 <data id="UseHTTPProxyForAllProtocols" value="true | false"/>
3576 <data id="SSLProxy" value="https://sslproxy.example.com"/>
3577 <data id="FTPProxy" value="https://ftpproxy.example.com"/>
3578 <data id="SOCKSProxy" value="https://socksproxy.example.com"/>
3579 <data id="SOCKSVersion" value="4 | 5"/>
3580 <data id="AutoConfigURL" value="URL_TO_AUTOCONFIG"/>
3581 <data id="Passthrough" value="<local>"/>
3582 <data id="AutoLogin" value="true | false"/>
3583 <data id="UseProxyForDNS" value="true | false"/>
3584 ```
3585 #### macOS
3586 ```
3587 <dict>
3588   <key>Proxy</key>
3589   <dict>
3590     <key>Mode</key>
3591     <string>none | system | manual | autoDetect | autoConfig</string>
3592     <key>Locked</key>
3593     <true> | </false>
3594     <key>HTTPProxy</key>
3595     <string>https://httpproxy.example.com</string>
3596     <key>UseHTTPProxyForAllProtocols</key>
3597     <true> | </false>
3598     <key>SSLProxy</key>
3599     <string>https://sslproxy.example.com</string>
3600     <key>FTPProxy</key>
3601     <string>https://ftpproxy.example.com</string>
3602     <key>SOCKSProxy</key>
3603     <string>https://socksproxy.example.com</string>
3604     <key>SOCKSVersion</key>
3605     <string>4 | 5</string>
3606     <key>Passthrough</key>
3607     <string>&lt;local>&gt;</string>
3608     <key>AutoConfigURL</key>
3609     <string>URL_TO_AUTOCONFIG</string>
3610     <key>AutoLogin</key>
3611     <true> | </false>
3612     <key>UseProxyForDNS</key>
3613     <true> | </false>
3614   </dict>
3615 </dict>
3616 ```
3617 #### policies.json
3618 ```
3619 {
3620   "policies": {
3621     "Proxy": {
3622       "Mode": "none", "system", "manual", "autoDetect", "autoConfig",
3623       "Locked": true | false,
3624       "HTTPProxy": "hostname",
3625       "UseHTTPProxyForAllProtocols": true | false,
3626       "SSLProxy": "hostname",
3627       "FTPProxy": "hostname",
3628       "SOCKSProxy": "hostname",
3629       "SOCKSVersion": 4 | 5
3630       "Passthrough": "<local>",
3631       "AutoConfigURL": "URL_TO_AUTOCONFIG",
3632       "AutoLogin": true | false,
3633       "UseProxyForDNS": true | false
3634     }
3635   }
3636 }
3637 ```
3638 ### RequestedLocales
3639 Set the the list of requested locales for the application in order of preference. It will cause the corresponding language pack to become active.
3640
3641 Note: For Firefox 68, this can now be a string so that you can specify an empty value.
3642
3643 **Compatibility:** Firefox 64, Firefox ESR 60.4, Updated in Firefox 68, Firefox ESR 68\
3644 **CCK2 Equivalent:** N/A\
3645 **Preferences Affected:** N/A
3646 #### Windows (GPO)
3647 ```
3648 Software\Policies\Mozilla\Firefox\RequestedLocales\1 = "de"
3649 Software\Policies\Mozilla\Firefox\RequestedLocales\2 = "en-US"
3650
3651 or
3652
3653 Software\Policies\Mozilla\Firefox\RequestedLocales = "de,en-US"
3654 ```
3655 #### Windows (Intune)
3656 OMA-URI:
3657 ```
3658 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/RequestedLocalesString
3659 ```
3660 Value (string):
3661 ```
3662 <enabled/>
3663 <data id="Preferences_String" value="de,en-US"/>
3664 ```
3665 #### macOS
3666 ```
3667 <dict>
3668   <key>RequestedLocales</key>
3669   <array>
3670     <string>de</string>
3671     <string>en-US</string>
3672   </array>
3673 </dict>
3674
3675 or
3676
3677 <dict>
3678   <key>RequestedLocales</key>
3679   <string>de,en-US</string>
3680 </dict>
3681
3682 ```
3683 #### policies.json
3684 ```
3685 {
3686   "policies": {
3687     "RequestedLocales": ["de", "en-US"]
3688   }
3689 }
3690
3691 or
3692
3693 {
3694   "policies": {
3695     "RequestedLocales": "de,en-US"
3696   }
3697 }
3698 ```
3699 <a name="SanitizeOnShutdown"></a>
3700
3701 ### SanitizeOnShutdown (Selective)
3702 Clear data on shutdown. Choose from Cache, Cookies, Download History, Form & Search History, Browsing History, Active Logins, Site Preferences and Offline Website Data.
3703
3704 Previously, these values were always locked. Starting with Firefox 74 and Firefox ESR 68.6, you can use the `Locked` option to either keep the values unlocked (set it to false), or lock only the values you set (set it to true). If you want the old behavior of locking everything, do not set `Locked` at all.
3705
3706 **Compatibility:** Firefox 68, Firefox ESR 68 (Locked added in 74/68.6)\
3707 **CCK2 Equivalent:** N/A\
3708 **Preferences Affected:** `privacy.sanitize.sanitizeOnShutdown`,`privacy.clearOnShutdown.cache`,`privacy.clearOnShutdown.cookies`,`privacy.clearOnShutdown.downloads`,`privacy.clearOnShutdown.formdata`,`privacy.clearOnShutdown.history`,`privacy.clearOnShutdown.sessions`,`privacy.clearOnShutdown.siteSettings`,`privacy.clearOnShutdown.offlineApps`
3709 #### Windows (GPO)
3710 ```
3711 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Cache = 0x1 | 0x0
3712 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Cookies = 0x1 | 0x0
3713 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Downloads = 0x1 | 0x0
3714 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\FormData = 0x1 | 0x0
3715 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\History = 0x1 | 0x0
3716 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Sessions = 0x1 | 0x0
3717 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\SiteSettings = 0x1 | 0x0
3718 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\OfflineApps = 0x1 | 0x0
3719 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Locked = 0x1 | 0x0
3720 ```
3721 #### Windows (Intune)
3722 OMA-URI:
3723 ```
3724 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/I_SanitizeOnShutdown_Locked
3725 ```
3726 Value (string):
3727 ```
3728 <enabled/> or <disabled/>
3729 ```
3730 #### macOS
3731 ```
3732 <dict>
3733   <key>SanitizeOnShutdown</key>
3734   <dict>
3735     <key>Cache</key>
3736     <true/> | <false/>
3737     <key>Cookies</key>
3738     <true/> | <false/>
3739     <key>Downloads</key>
3740     <true/> | <false/>
3741     <key>FormData</key>
3742     <true/> | <false/>
3743     <key>History</key>
3744     <true/> | <false/>
3745     <key>Sessions</key>
3746     <true/> | <false/>
3747     <key>SiteSettings</key>
3748     <true/> | <false/>
3749     <key>OfflineApps</key>
3750     <true/> | <false/>
3751     <key>Locked</key>
3752     <true/> | <false/>
3753   </dict>
3754 </dict>
3755 ```
3756 #### policies.json
3757 ```
3758 {
3759   "policies": {
3760     "SanitizeOnShutdown": {
3761       "Cache": true | false,
3762       "Cookies": true | false,
3763       "Downloads": true | false,
3764       "FormData": true | false,
3765       "History": true | false,
3766       "Sessions": true | false,
3767       "SiteSettings": true | false,
3768       "OfflineApps": true | false,
3769       "Locked": true | false
3770     }
3771   }
3772 }
3773 ```
3774 ### SanitizeOnShutdown (All)
3775 Clear all data on shutdown, including Browsing & Download History, Cookies, Active Logins, Cache, Form & Search History, Site Preferences and Offline Website Data.
3776
3777 **Compatibility:** Firefox 60, Firefox ESR 60\
3778 **CCK2 Equivalent:** N/A\
3779 **Preferences Affected:** `privacy.sanitize.sanitizeOnShutdown`,`privacy.clearOnShutdown.cache`,`privacy.clearOnShutdown.cookies`,`privacy.clearOnShutdown.downloads`,`privacy.clearOnShutdown.formdata`,`privacy.clearOnShutdown.history`,`privacy.clearOnShutdown.sessions`,`privacy.clearOnShutdown.siteSettings`,`privacy.clearOnShutdown.offlineApps`
3780 #### Windows (GPO)
3781 ```
3782 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown = 0x1 | 0x0
3783 ```
3784 #### Windows (Intune)
3785 OMA-URI:
3786 ```
3787 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/C_SanitizeOnShutdown
3788 ```
3789 Value (string):
3790 ```
3791 <enabled/> or <disabled/>
3792 ```
3793 #### macOS
3794 ```
3795 <dict>
3796   <key>SanitizeOnShutdown</key>
3797   <true/> | <false/>
3798 </dict>
3799 ```
3800 #### policies.json
3801 ```
3802 {
3803   "policies": {
3804     "SanitizeOnShutdown": true | false
3805   }
3806 }
3807 ```
3808 ### SearchBar
3809 Set whether or not search bar is displayed.
3810
3811 **Compatibility:** Firefox 60, Firefox ESR 60\
3812 **CCK2 Equivalent:** `showSearchBar`\
3813 **Preferences Affected:** N/A
3814
3815 #### Windows (GPO)
3816 ```
3817 Software\Policies\Mozilla\Firefox\SearchBar = "unified" | "separate"
3818 ```
3819
3820 #### Windows (Intune)
3821 OMA-URI:
3822 ```
3823 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SearchBar
3824 ```
3825 Value (string):
3826 ```
3827 <enabled/>
3828 <data id="Permissions" value="unified | separate"/>
3829 #### macOS
3830 ```
3831 <dict>
3832   <key>SearchBar</key>
3833   <string>unified | separate</string>
3834 </dict>
3835 ```
3836 #### policies.json
3837 ```
3838 {
3839   "policies": {
3840     "SearchBar": "unified" | "separate"
3841   }
3842 }
3843 ```
3844 <a name="SearchEngines"></a>
3845
3846 ### SearchEngines (This policy is only available on the ESR.)
3847
3848 ### SearchEngines | Default
3849
3850 Set the default search engine. This policy is only available on the ESR.
3851
3852 **Compatibility:** Firefox ESR 60\
3853 **CCK2 Equivalent:** `defaultSearchEngine`\
3854 **Preferences Affected:** N/A
3855
3856 #### Windows (GPO)
3857 ```
3858 Software\Policies\Mozilla\Firefox\SearchEngines\Default = NAME_OF_SEARCH_ENGINE
3859 ```
3860 #### Windows (Intune)
3861 OMA-URI:
3862 ```
3863 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_Default
3864 ```
3865 Value (string):
3866 ```
3867 <enabled/>
3868 <data id="SearchEngines_Default" value="NAME_OF_SEARCH_ENGINE"/>
3869 ```
3870 #### macOS
3871 ```
3872 <dict>
3873   <key>SearchEngines</key>
3874   <dict>
3875     <key>Default</key>
3876     <string>NAME_OF_SEARCH_ENGINE</string>
3877   </dict>
3878 </dict>
3879 ```
3880 #### policies.json
3881 ```
3882 {
3883   "policies": {
3884     "SearchEngines": {
3885       "Default": "NAME_OF_SEARCH_ENGINE"
3886     }
3887   }
3888 }
3889 ```
3890 ### SearchEngines | PreventInstalls
3891
3892 Prevent installing search engines from webpages.
3893
3894 **Compatibility:** Firefox ESR 60\
3895 **CCK2 Equivalent:** `disableSearchEngineInstall`\
3896 **Preferences Affected:** N/A
3897
3898 #### Windows (GPO)
3899 ```
3900 Software\Policies\Mozilla\Firefox\SearchEngines\PreventInstalls = 0x1 | 0x0
3901 ```
3902 #### Windows (Intune)
3903 OMA-URI:
3904 ```
3905 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_PreventInstalls
3906 ```
3907 Value (string):
3908 ```
3909 <enabled/> or <disabled/>
3910 ```
3911 #### macOS
3912 ```
3913 <dict>
3914   <key>SearchEngines</key>
3915   <dict>
3916     <key>PreventInstalls</key>
3917     <true/> | <false/>
3918   </dict>
3919 </dict>
3920 ```
3921 #### policies.json
3922 ```
3923 {
3924   "policies": {
3925     "SearchEngines": {
3926       "PreventInstalls": true | false
3927     }
3928   }
3929 }
3930 ```
3931 ### SearchEngines | Remove
3932
3933 Hide built-in search engines. This policy is only available on the ESR.
3934
3935 **Compatibility:** Firefox ESR 60.2\
3936 **CCK2 Equivalent:** `removeDefaultSearchEngines` (removed all built-in engines)\
3937 **Preferences Affected:** N/A
3938
3939 #### Windows (GPO)
3940 ```
3941 Software\Policies\Mozilla\Firefox\SearchEngines\Remove\1 = NAME_OF_SEARCH_ENGINE
3942 ```
3943 #### Windows (Intune)
3944 OMA-URI:
3945 ```
3946 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_Remove
3947 ```
3948 Value (string):
3949 ```
3950 <enabled/>
3951 <data id="SearchEngines_Remove" value="1&#xF000;NAME_OF_SEARCH_ENGINE"/>
3952 ```
3953 #### macOS
3954 ```
3955 <dict>
3956   <key>SearchEngines</key>
3957   <dict>
3958     <key>Remove</key>
3959     <array>
3960       <string>NAME_OF_SEARCH_ENGINE</string>
3961     </array>
3962   </dict>
3963 </dict>
3964 ```
3965 #### policies.json
3966 ```
3967 {
3968   "policies": {
3969     "SearchEngines": {
3970       "Remove": ["NAME_OF_SEARCH_ENGINE"]
3971     }
3972   }
3973 }
3974 ```
3975 ### SearchEngines | Add
3976
3977 Add new search engines (up to five). This policy is only available on the ESR. `Name` and `URLTemplate` are required.
3978
3979 `Name` is the name of the search engine.
3980
3981 `URLTemplate` is the search URL with {searchTerms} to substitute for the search term.
3982
3983 `Method` is either GET or POST
3984
3985 `IconURL` is a URL for the icon to use.
3986
3987 `Alias` is a keyword to use for the engine.
3988
3989 `Description` is a description of the search engine.
3990
3991 `PostData` is the POST data as name value pairs separated by &.
3992
3993 `SuggestURLTemplate` is a search suggestions URL with {searchTerms} to substitute for the search term.
3994
3995 **Compatibility:** Firefox ESR 60 (POST support in Firefox ESR 68)\
3996 **CCK2 Equivalent:** `searchplugins`\
3997 **Preferences Affected:** N/A
3998
3999 #### Windows (GPO)
4000 ```
4001 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Name = "Example1"
4002 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\URLTemplate = "https://www.example.org/q={searchTerms}"
4003 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Method = "GET" | "POST"
4004 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\IconURL = "https://www.example.org/favicon.ico"
4005 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Alias = "example"
4006 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Description = "Example Description"
4007 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\SuggestURLTemplate = "https://www.example.org/suggestions/q={searchTerms}"
4008 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\PostData = "name=value&q={searchTerms}"
4009 ```
4010 #### Windows (Intune)
4011 OMA-URI:
4012 ```
4013 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_1
4014 ```
4015 Value (string):
4016 ```
4017 <enabled/>
4018 <data id="SearchEngine_Name" value="Example1"/>
4019 <data id="SearchEngine_URLTemplate" value="https://www.example.org/q={searchTerms"/>
4020 <data id="SearchEngine_Method" value="GET | POST"/>
4021 <data id="SearchEngine_IconURL" value="https://www.example.org/favicon.ico"/>
4022 <data id="SearchEngine_Alias" value="example"/>
4023 <data id="SearchEngine_Description" value="Example Description"/>
4024 <data id="SearchEngine_SuggestURLTemplate" value="https://www.example.org/suggestions/q={searchTerms}"/>
4025 <data id="SearchEngine_PostData" value="name=value&amp;q={searchTerms}"/>
4026 ```
4027 #### macOS
4028 ```
4029 <dict>
4030   <key>SearchEngines</key>
4031   <dict>
4032     <key>Add</key>
4033     <array>
4034       <dict>
4035         <key>Name</key>
4036         <string>Example1</string>
4037         <key>URLTemplate</key>
4038         <string>https://www.example.org/q={searchTerms}</string>
4039         <key>Method</key>
4040         <string>GET | POST </string>
4041         <key>IconURL</key>
4042         <string>https://www.example.org/favicon.ico</string>
4043         <key>Alias</key>
4044         <string>example</string>
4045         <key>Description</key>
4046         <string>Example Description</string>
4047         <key>SuggestURLTemplate</key>
4048         <string>https://www.example.org/suggestions/q={searchTerms}</string>
4049         <key>PostData</key>
4050         <string>name=value&q={searchTerms}</string>
4051       </dict>
4052     <array>
4053   </dict>
4054 </dict>
4055 ```
4056 #### policies.json
4057 ```
4058 {
4059   "policies": {
4060     "SearchEngines": {
4061       "Add": [
4062         {
4063           "Name": "Example1",
4064           "URLTemplate": "https://www.example.org/q={searchTerms}",
4065           "Method": "GET" | "POST",
4066           "IconURL": "https://www.example.org/favicon.ico",
4067           "Alias": "example",
4068           "Description": "Description",
4069           "PostData": "name=value&q={searchTerms}",
4070           "SuggestURLTemplate": "https://www.example.org/suggestions/q={searchTerms}"
4071         }
4072       ]
4073     }
4074   }
4075 }
4076 ```
4077 ### SearchSuggestEnabled
4078
4079 Enable search suggestions.
4080
4081 **Compatibility:** Firefox 68, Firefox ESR 68\
4082 **CCK2 Equivalent:** N/A\
4083 **Preferences Affected:** `browser.urlbar.suggest.searches`,`browser.search.suggest.enabled`
4084
4085 #### Windows (GPO)
4086 ```
4087 Software\Policies\Mozilla\Firefox\SearchSuggestEnabled = 0x1 | 0x0
4088 ```
4089 #### Windows (Intune)
4090 OMA-URI:
4091 ```
4092 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SearchSuggestEnabled
4093 ```
4094 Value (string):
4095 ```
4096 <enabled/> or <disabled/>
4097 ```
4098 #### macOS
4099 ```
4100 <dict>
4101   <key>SearchSuggestEnabled</key>
4102   <true/> | <false/>
4103 </dict>
4104 ```
4105 #### policies.json
4106 ```
4107 {
4108   "policies": {
4109     "SearchSuggestEnabled": true | false
4110   }
4111 }
4112 ```
4113 ### SecurityDevices
4114
4115 Install PKCS #11 modules.
4116
4117 **Compatibility:** Firefox 64, Firefox ESR 60.4\
4118 **CCK2 Equivalent:** `certs.devices`\
4119 **Preferences Affected:** N/A
4120
4121 #### Windows (GPO)
4122 ```
4123 Software\Policies\Mozilla\Firefox\SecurityDevices\NAME_OF_DEVICE = PATH_TO_LIBRARY_FOR_DEVICE
4124 ```
4125 #### Windows (Intune)
4126 OMA-URI:
4127 ```
4128 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SecurityDevices
4129 ```
4130 Value (string):
4131 ```
4132 <enabled/>
4133 <data id="SecurityDevices" value="NAME_OF_DEVICE&#xF000;PATH_TO_LIBRARY_FOR_DEVICE"/>
4134 ```
4135 #### macOS
4136 ```
4137 <dict>
4138   <key>SecurityDevices</key>
4139   <dict>
4140     <key>NAME_OF_DEVICE</key>
4141     <string>PATH_TO_LIBRARY_FOR_DEVICE</string>
4142   </dict>
4143 </dict>
4144 ```
4145
4146 #### policies.json
4147 ```
4148 {
4149   "policies": {
4150     "SecurityDevices": {
4151       "NAME_OF_DEVICE": "PATH_TO_LIBRARY_FOR_DEVICE"
4152     }
4153   }
4154 }
4155 ```
4156 ### SSLVersionMax
4157
4158 Set and lock the maximum version of TLS.
4159
4160 **Compatibility:** Firefox 66, Firefox ESR 60.6\
4161 **CCK2 Equivalent:** N/A\
4162 **Preferences Affected:** `security.tls.version.max`
4163
4164 #### Windows (GPO)
4165 ```
4166 Software\Policies\Mozilla\Firefox\SSLVersionMax = "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
4167 ```
4168 #### Windows (Intune)
4169 OMA-URI:
4170 ```
4171 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SSLVersionMax
4172 ```
4173 Value (string):
4174 ```
4175 <enabled/>
4176 <data id="SSLVersion" value="tls1 | tls1.2 | tls1.3"/>
4177 ```
4178 #### macOS
4179 ```
4180 <dict>
4181   <key>SSLVersionMax</key>
4182   <string>tls1 | tls1.1 | tls1.2 | tls1.3</string>
4183 </dict>
4184 ```
4185
4186 #### policies.json
4187 ```
4188 {
4189   "policies": {
4190     "SSLVersionMax": "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
4191   }
4192 }
4193 ```
4194 ### SSLVersionMin
4195
4196 Set and lock the minimum version of TLS.
4197
4198 **Compatibility:** Firefox 66, Firefox ESR 60.6\
4199 **CCK2 Equivalent:** N/A\
4200 **Preferences Affected:** `security.tls.version.min`
4201
4202 #### Windows (GPO)
4203 ```
4204 Software\Policies\Mozilla\Firefox\SSLVersionMin = "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
4205 ```
4206 #### Windows (Intune)
4207 OMA-URI:
4208 ```
4209 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SSLVersionMin
4210 ```
4211 Value (string):
4212 ```
4213 <enabled/>
4214 <data id="SSLVersion" value="tls1 | tls1.2 | tls1.3"/>
4215 ```
4216 #### macOS
4217 ```
4218 <dict>
4219   <key>SSLVersionMin</key>
4220   <string>tls1 | tls1.1 | tls1.2 | tls1.3</string>
4221 </dict>
4222 ```
4223
4224 #### policies.json
4225 ```
4226 {
4227   "policies": {
4228     "SSLVersionMin": "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
4229   }
4230 }
4231 ```
4232 ### SupportMenu
4233 Add a menuitem to the help menu for specifying support information.
4234
4235 **Compatibility:** Firefox 68.0.1, Firefox ESR 68.0.1\
4236 **CCK2 Equivalent:** helpMenu\
4237 **Preferences Affected:** N/A
4238
4239 #### Windows (GPO)
4240 ```
4241 Software\Policies\Mozilla\Firefox\SupportMenu\Title = "Support Menu"
4242 Software\Policies\Mozilla\Firefox\SupportMenu\URL = "http://example.com/support"
4243 Software\Policies\Mozilla\Firefox\SupportMenu\AccessKey = "S"
4244 ```
4245 #### Windows (Intune)
4246 OMA-URI:
4247 ```
4248 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SupportMenu
4249 ```
4250 Value (string):
4251 ```
4252 <enabled/>
4253 <data id="SupportMenuTitle" value="Support Menu"/>
4254 <data id="SupportMenuURL" value="http://example.com/support"/>
4255 <data id="SupportMenuAccessKey" value="S">
4256 ```
4257 #### macOS
4258 ```
4259 <dict>
4260   <key>SupportMenu</key>
4261   <dict>
4262     <key>Title</key>
4263     <string>SupportMenu</string>
4264     <key>URL</key>
4265     <string>http://example.com/support</string>
4266     <key>AccessKey</key>
4267     <string>S</string>
4268   </dict>
4269 </dict>
4270 ```
4271 #### policies.json
4272 ```
4273 {
4274   "policies": {
4275     "SupportMenu": {
4276       "Title": "Support Menu",
4277       "URL": "http://example.com/support",
4278       "AccessKey": "S"
4279     }
4280   }
4281 }
4282 ```
4283 ### UserMessaging
4284
4285 Prevent installing search engines from webpages.
4286
4287 `WhatsNew` Remove the "What's New" icon and menuitem. (Firefox 75 only)
4288
4289 `ExtensionRecommendations` Don't recommend extensions.
4290
4291 `FeatureRecommendations` Don't recommend browser features.
4292
4293 `UrlbarInterventions` Don't offer Firefox specific suggestions in the URL bar. (Firefox 75 only)
4294
4295 **Compatibility:** Firefox 75, Firefox ESR 68.7\
4296 **CCK2 Equivalent:** N/A\
4297 **Preferences Affected:** `browser.messaging-system.whatsNewPanel.enabled`,`browser.newtabpage.activity-stream.asrouter.userprefs.cfr.addons`,`browser.newtabpage.activity-stream.asrouter.userprefs.cfr.features`
4298
4299 #### Windows (GPO)
4300 ```
4301 Software\Policies\Mozilla\Firefox\UserMessaging\WhatsNew = 0x1 | 0x0
4302 Software\Policies\Mozilla\Firefox\UserMessaging\ExtensionRecommendations = 0x1 | 0x0
4303 Software\Policies\Mozilla\Firefox\UserMessaging\FeatureRecommendations = 0x1 | 0x0
4304 Software\Policies\Mozilla\Firefox\UserMessaging\UrlbarInterventions = 0x1 | 0x0
4305 ```
4306 #### Windows (Intune)
4307 OMA-URI:
4308 ```
4309 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/UserMessaging_WhatsNew
4310 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/UserMessaging_ExtensionRecommendations
4311 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/UserMessaging_FeatureRecommendations
4312 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/UserMessaging_UrlbarInterventions
4313 ```
4314 Value (string):
4315 ```
4316 <enabled/> or <disabled/>
4317 ```
4318 #### macOS
4319 ```
4320 <dict>
4321   <key>UserMessaging</key>
4322   <dict>
4323     <key>WhatsNew</key>
4324     <true/> | <false/>
4325     <key>ExtensionRecommendations</key>
4326     <true/> | <false/>
4327     <key>FeatureRecommendations</key>
4328     <true/> | <false/>
4329     <key>UrlbarInterventions</key>
4330     <true/> | <false/>
4331   </dict>
4332 </dict>
4333 ```
4334 #### policies.json
4335 ```
4336 {
4337   "policies": {
4338     "UserMessaging": {
4339       "WhatsNew": true | false,
4340       "ExtensionRecommendations": true | false,
4341       "FeatureRecommendations": true | false,
4342       "UrlbarInterventions": true | false
4343     }
4344   }
4345 }
4346 ```
4347 ### WebsiteFilter
4348 Block websites from being visited. The parameters take an array of Match Patterns, as documented in https://developer.mozilla.org/en-US/Add-ons/WebExtensions/Match_patterns. Only http/https addresses are supported at the moment. The arrays are limited to 1000 entries each.
4349
4350 **Compatibility:** Firefox 60, Firefox ESR 60\
4351 **CCK2 Equivalent:** N/A\
4352 **Preferences Affected:** N/A
4353
4354 #### Windows (GPO)
4355 ```
4356 Software\Policies\Mozilla\Firefox\WebsiteFilter\Block\1 = "<all_urls>"
4357 Software\Policies\Mozilla\Firefox\WebsiteFilter\Exceptions\1 = "http://example.org/*"
4358 ```
4359 #### Windows (Intune)
4360 OMA-URI:
4361 ```
4362 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/B_WebsiteFilter_Block
4363 ```
4364 Value (string):
4365 ```
4366 <enabled/>
4367 <data id="WebsiteFilter" value="1&#xF000;<all_urls>"/>
4368 ```
4369 OMA-URI:
4370 ```
4371 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/B_WebsiteFilter_Exceptions
4372 ```
4373 Value (string):
4374 ```
4375 <enabled/>
4376 <data id="WebsiteFilter" value="1&#xF000;http://example.org/*"/>
4377 ```
4378 #### macOS
4379 ```
4380 <dict>
4381   <key>WebsiteFilter</key>
4382   <dict>
4383     <key>Block</key>
4384     <array>
4385       <string><all_urls></string>
4386     </array>
4387     <key>Exceptions</key>
4388     <array>
4389       <string>http://example.org/*</string>
4390     </array>
4391   </dict>
4392
4393 </dict>
4394 ```
4395 #### policies.json
4396 ```
4397 {
4398   "policies": {
4399     "WebsiteFilter": {
4400       "Block": ["<all_urls>"],
4401       "Exceptions": ["http://example.org/*"]
4402     }
4403   }
4404 }
4405 ```