docs/index.md

   1 Firefox policies can be specified using the [Group Policy templates on Windows](https://github.com/mozilla/policy-templates/tree/master/windows), [Intune on Windows](https://support.mozilla.org/kb/managing-firefox-intune), [configuration profiles on macOS](https://github.com/mozilla/policy-templates/tree/master/mac), or by creating a file called `policies.json`. On Windows, create a directory called `distribution` where the EXE is located and place the file there. On Mac, the file goes into `Firefox.app/Contents/Resources/distribution`.  On Linux, the file goes into `firefox/distribution`, where `firefox` is the installation directory for firefox, which varies by distribution or you can specify system-wide policy by placing the file in `/etc/firefox/policies`.
   2
   3 Unfortunately, JSON files do not support comments, but you can add extra entries to the JSON to use as comments. You will see an error in about:policies, but the policies will still work properly. For example:
   4
   5 ```
   6 {
   7   "policies": {
   8     "Authentication": {
   9       "SPNEGO": ["mydomain.com", "https://myotherdomain.com"]
  10     }
  11     "Authentication_Comment": "These domains are required for us"
  12   }
  13 }
  14 ```
  15
  16 | Policy Name | Description
  17 | --- | --- |
  18 | **[`3rdparty`](#3rdparty)** | Set policies that WebExtensions can access via chrome.storage.managed.
  19 | **[`AllowedDomainsForApps`](#alloweddomainsforapps)** | Define domains allowed to access Google Workspace.
  20 | **[`AllowFileSelectionDialogs`](#allowfileselectiondialogs)** | Allow file selection dialogs.
  21 | **[`AppAutoUpdate`](#appautoupdate)** | Enable or disable automatic application update.
  22 | **[`AppUpdatePin`](#appupdatepin)** | Prevent Firefox from being updated beyond the specified version.
  23 | **[`AppUpdateURL`](#appupdateurl)** | Change the URL for application update.
  24 | **[`Authentication`](#authentication)** | Configure sites that support integrated authentication.
  25 | **[`AutofillAddressEnabled`](#autofilladdressenabled)** | Enable autofill for addresses.
  26 | **[`AutofillCreditCardEnabled`](#autofillcreditcardenabled)** | Enable autofill for payment methods.
  27 | **[`AutoLaunchProtocolsFromOrigins`](#autolaunchprotocolsfromorigins)** | Define a list of external protocols that can be used from listed origins without prompting the user.
  28 | **[`BackgroundAppUpdate`](#backgroundappupdate)** | Enable or disable the background updater (Windows only).
  29 | **[`BlockAboutAddons`](#blockaboutaddons)** | Block access to the Add-ons Manager (about:addons).
  30 | **[`BlockAboutConfig`](#blockaboutconfig)** | Block access to about:config.
  31 | **[`BlockAboutProfiles`](#blockaboutprofiles)** | Block access to About Profiles (about:profiles).
  32 | **[`BlockAboutSupport`](#blockaboutsupport)** | Block access to Troubleshooting Information (about:support).
  33 | **[`Bookmarks`](#bookmarks)** | Add bookmarks in either the bookmarks toolbar or menu.
  34 | **[`CaptivePortal`](#captiveportal)** | Enable or disable the detection of captive portals.
  35 | **[`Certificates`](#certificates)** |
  36 | **[`Certificates -> ImportEnterpriseRoots`](#certificates--importenterpriseroots)** | Trust certificates that have been added to the operating system certificate store by a user or administrator.
  37 | **[`Certificates -> Install`](#certificates--install)** | Install certificates into the Firefox certificate store.
  38 | **[`Containers`](#containers)** | Set policies related to [containers](https://addons.mozilla.org/firefox/addon/multi-account-containers/).
  39 | **[`Cookies`](#cookies)** | Configure cookie preferences.
  40 | **[`DefaultDownloadDirectory`](#defaultdownloaddirectory)** | Set the default download directory.
  41 | **[`DisableAppUpdate`](#disableappupdate)** | Turn off application updates.
  42 | **[`DisableBuiltinPDFViewer`](#disablebuiltinpdfviewer)** | Disable the built in PDF viewer.
  43 | **[`DisabledCiphers`](#disabledciphers)** | Disable ciphers.
  44 | **[`DisableDefaultBrowserAgent`](#disabledefaultbrowseragent)** | Prevent the default browser agent from taking any actions (Windows only).
  45 | **[`DisableDeveloperTools`](#disabledevelopertools)** | Remove access to all developer tools.
  46 | **[`DisableFeedbackCommands`](#disablefeedbackcommands)** | Disable the menus for reporting sites.
  47 | **[`DisableFirefoxAccounts`](#disablefirefoxaccounts)** | Disable Firefox Accounts integration (Sync).
  48 | **[`DisableFirefoxScreenshots`](#disablefirefoxscreenshots)** | Remove access to Firefox Screenshots.
  49 | **[`DisableFirefoxStudies`](#disablefirefoxstudies)** | Disable Firefox studies (Shield).
  50 | **[`DisableForgetButton`](#disableforgetbutton)** | Disable the "Forget" button.
  51 | **[`DisableFormHistory`](#disableformhistory)** | Turn off saving information on web forms and the search bar.
  52 | **[`DisableMasterPasswordCreation`](#disablemasterpasswordcreation)** | Remove the master password functionality.
  53 | **[`DisablePasswordReveal`](#disablepasswordreveal)** | Do not allow passwords to be revealed in saved logins.
  54 | **[`DisablePocket`](#disablepocket)** | Remove Pocket in the Firefox UI.
  55 | **[`DisablePrivateBrowsing`](#disableprivatebrowsing)** | Remove access to private browsing.
  56 | **[`DisableProfileImport`](#disableprofileimport)** | Disables the "Import data from another browser" option in the bookmarks window.
  57 | **[`DisableProfileRefresh`](#disableprofilerefresh)** | Disable the Refresh Firefox button on about:support and support.mozilla.org
  58 | **[`DisableSafeMode`](#disablesafemode)** | Disable safe mode within the browser.
  59 | **[`DisableSecurityBypass`](#disablesecuritybypass)** | Prevent the user from bypassing security in certain cases.
  60 | **[`DisableSetDesktopBackground`](#disablesetdesktopbackground)** | Remove the "Set As Desktop Background..." menuitem when right clicking on an image.
  61 | **[`DisableSystemAddonUpdate`](#disablesystemaddonupdate)** | Prevent system add-ons from being installed or updated.
  62 | **[`DisableTelemetry`](#disabletelemetry)** | DisableTelemetry
  63 | **[`DisableThirdPartyModuleBlocking`](#disablethirdpartymoduleblocking)** | Do not allow blocking third-party modules.
  64 | **[`DisplayBookmarksToolbar`](#displaybookmarkstoolbar)** | Set the initial state of the bookmarks toolbar.
  65 | **[`DisplayMenuBar`](#displaymenubar)** | Set the state of the menubar.
  66 | **[`DNSOverHTTPS`](#dnsoverhttps)** | Configure DNS over HTTPS.
  67 | **[`DontCheckDefaultBrowser`](#dontcheckdefaultbrowser)** | Don't check if Firefox is the default browser at startup.
  68 | **[`DownloadDirectory`](#downloaddirectory)** | Set and lock the download directory.
  69 | **[`EnableTrackingProtection`](#enabletrackingprotection)** | Configure tracking protection.
  70 | **[`EncryptedMediaExtensions`](#encryptedmediaextensions)** | Enable or disable Encrypted Media Extensions and optionally lock it.
  71 | **[`EnterprisePoliciesEnabled`](#enterprisepoliciesenabled)** | Enable policy support on macOS.
  72 | **[`ExemptDomainFileTypePairsFromFileTypeDownloadWarnings`](#exemptdomainfiletypepairsfromfiletypedownloadwarnings)** | Disable warnings based on file extension for specific file types on domains.
  73 | **[`Extensions`](#extensions)** | Control the installation, uninstallation and locking of extensions.
  74 | **[`ExtensionSettings`](#extensionsettings)** | Manage all aspects of extensions.
  75 | **[`ExtensionUpdate`](#extensionupdate)** | Control extension updates.
  76 | **[`FirefoxHome`](#firefoxhome)** | Customize the Firefox Home page.
  77 | **[`FirefoxSuggest`](#firefoxsuggest)** | Customize Firefox Suggest.
  78 | **[`GoToIntranetSiteForSingleWordEntryInAddressBar`](#gotointranetsiteforsinglewordentryinaddressbar)** | Force direct intranet site navigation instead of searching when typing single word entries in the address bar.
  79 | **[`Handlers`](#handlers)** | Configure default application handlers.
  80 | **[`HardwareAcceleration`](#hardwareacceleration)** | Control hardware acceleration.
  81 | **[`Homepage`](#homepage)** | Configure the default homepage and how Firefox starts.
  82 | **[`InstallAddonsPermission`](#installaddonspermission)** | Configure the default extension install policy as well as origins for extension installs are allowed.
  83 | **[`LegacyProfiles`](#legacyprofiles)** | Disable the feature enforcing a separate profile for each installation.
  84 | **[`LegacySameSiteCookieBehaviorEnabled`](#legacysamesitecookiebehaviorenabled)** | Enable default legacy SameSite cookie behavior setting.
  85 | **[`LegacySameSiteCookieBehaviorEnabledForDomainList`](#legacysamesitecookiebehaviorenabledfordomainlist)** | Revert to legacy SameSite behavior for cookies on specified sites.
  86 | **[`LocalFileLinks`](#localfilelinks)** | Enable linking to local files by origin.
  87 | **[`ManagedBookmarks`](#managedbookmarks)** | Configures a list of bookmarks managed by an administrator that cannot be changed by the user.
  88 | **[`ManualAppUpdateOnly`](#manualappupdateonly)** | Allow manual updates only and do not notify the user about updates.
  89 | **[`NetworkPrediction`](#networkprediction)** | Enable or disable network prediction (DNS prefetching).
  90 | **[`NewTabPage`](#newtabpage)** | Enable or disable the New Tab page.
  91 | **[`NoDefaultBookmarks`](#nodefaultbookmarks)** | Disable the creation of default bookmarks.
  92 | **[`OfferToSaveLogins`](#offertosavelogins)** | Control whether or not Firefox offers to save passwords.
  93 | **[`OfferToSaveLoginsDefault`](#offertosaveloginsdefault)** | Set the default value for whether or not Firefox offers to save passwords.
  94 | **[`OverrideFirstRunPage`](#overridefirstrunpage)** | Override the first run page.
  95 | **[`OverridePostUpdatePage`](#overridepostupdatepage)** | Override the upgrade page.
  96 | **[`PasswordManagerEnabled`](#passwordmanagerenabled)** | Remove (some) access to the password manager.
  97 | **[`PasswordManagerExceptions`](#passwordmanagerexceptions)** | Prevent Firefox from saving passwords for specific sites.
  98 | **[`PDFjs`](#pdfjs)** | Disable or configure PDF.js, the built-in PDF viewer.
  99 | **[`Permissions`](#permissions)** | Set permissions associated with camera, microphone, location, and notifications.
 100 | **[`PictureInPicture`](#pictureinpicture)** | Enable or disable Picture-in-Picture.
 101 | **[`PopupBlocking`](#popupblocking)** | Configure the default pop-up window policy as well as origins for which pop-up windows are allowed.
 102 | **[`Preferences`](#preferences)** | Set and lock preferences.
 103 | **[`PrimaryPassword`](#primarypassword)** | Require or prevent using a primary (formerly master) password.
 104 | **[`PrintingEnabled`](#printingenabled)** | Enable or disable printing.
 105 | **[`PromptForDownloadLocation`](#promptfordownloadlocation)** | Ask where to save each file before downloading.
 106 | **[`Proxy`](#proxy)** | Configure proxy settings.
 107 | **[`RequestedLocales`](#requestedlocales)** | Set the the list of requested locales for the application in order of preference.
 108 | **[`SanitizeOnShutdown` (All)](#sanitizeonshutdown-all)** | Clear all data on shutdown.
 109 | **[`SanitizeOnShutdown` (Selective)](#sanitizeonshutdown-selective)** | Clear data on shutdown.
 110 | **[`SearchBar`](#searchbar)** | Set whether or not search bar is displayed.
 111 | **[`SearchEngines`](#searchengines-this-policy-is-only-available-on-the-esr)** |
 112 | **[`SearchEngines -> Add`](#searchengines--add)** | Add new search engines.
 113 | **[`SearchEngines -> Default`](#searchengines--default)** | Set the default search engine.
 114 | **[`SearchEngines -> PreventInstalls`](#searchengines--preventinstalls)** | Prevent installing search engines from webpages.
 115 | **[`SearchEngines -> Remove`](#searchengines--remove)** | Hide built-in search engines.
 116 | **[`SearchSuggestEnabled`](#searchsuggestenabled)** | Enable search suggestions.
 117 | **[`SecurityDevices`](#securitydevices)** | Install PKCS #11 modules.
 118 | **[`ShowHomeButton`](#showhomebutton)** | Show the home button on the toolbar.
 119 | **[`SSLVersionMax`](#sslversionmax)** | Set and lock the maximum version of TLS.
 120 | **[`SSLVersionMin`](#sslversionmin)** | Set and lock the minimum version of TLS.
 121 | **[`StartDownloadsInTempDirectory`](#startdownloadsintempdirectory)** | Force downloads to start off in a local, temporary location rather than the default download directory.
 122 | **[`SupportMenu`](#supportmenu)** | Add a menuitem to the help menu for specifying support information.
 123 | **[`UserMessaging`](#usermessaging)** | Don't show certain messages to the user.
 124 | **[`UseSystemPrintDialog`](#usesystemprintdialog)** | Print using the system print dialog instead of print preview.
 125 | **[`WebsiteFilter`](#websitefilter)** | Block websites from being visited.
 126 | **[`WindowsSSO`](#windowssso)** | Allow Windows single sign-on for Microsoft, work, and school accounts.
 127
 128 ### 3rdparty
 129
 130 Allow WebExtensions to configure policy. For more information, see [Adding policy support to your extension](https://extensionworkshop.com/documentation/enterprise/adding-policy-support-to-your-extension/).
 131
 132 For GPO and Intune, the extension developer should provide an ADMX file.
 133
 134 **Compatibility:** Firefox 68\
 135 **CCK2 Equivalent:** N/A\
 136 **Preferences Affected:** N/A
 137
 138 #### macOS
 139 ```
 140 <dict>
 141   <key>3rdparty</key>
 142   <dict>
 143     <key>Extensions</key>
 144     <dict>
 145       <key>uBlock0@raymondhill.net</key>
 146       <dict>
 147         <key>adminSettings</key>
 148         <dict>
 149           <key>selectedFilterLists</key>
 150           <array>
 151             <string>ublock-privacy</string>
 152             <string>ublock-badware</string>
 153             <string>ublock-filters</string>
 154             <string>user-filters</string>
 155           </array>
 156         </dict>
 157       </dict>
 158     </dict>
 159   </dict>
 160 </dict>
 161 ```
 162 #### policies.json
 163 ```
 164 {
 165   "policies": {
 166     "3rdparty": {
 167       "Extensions": {
 168         "uBlock0@raymondhill.net": {
 169           "adminSettings": {
 170             "selectedFilterLists": [
 171               "ublock-privacy",
 172               "ublock-badware",
 173               "ublock-filters",
 174               "user-filters"
 175             ]
 176           }
 177         }
 178       }
 179     }
 180   }
 181 }
 182 ```
 183
 184 ### AllowedDomainsForApps
 185
 186 Define domains allowed to access Google Workspace.
 187
 188 This policy is based on the [Chrome policy](https://chromeenterprise.google/policies/#AllowedDomainsForApps) of the same name.
 189
 190 If this policy is enabled, users can only access Google Workspace using accounts from the specified domains. If you want to allow Gmail, you can add ```consumer_accounts``` to the list.
 191
 192 **Compatibility:** Firefox 89, Firefox ESR 78.11\
 193 **CCK2 Equivalent:** N/A\
 194 **Preferences Affected:** N/A
 195
 196 #### Windows (GPO)
 197 ```
 198 Software\Policies\Mozilla\Firefox\AllowedDomainsForApps = "managedfirefox.com,example.com"
 199 ```
 200 #### Windows (Intune)
 201 OMA-URI:
 202 ```
 203 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AllowedDomainsForApps
 204 ```
 205 Value (string):
 206 ```
 207 <enabled/>
 208 <data id="AllowedDomainsForApps" value="managedfirefox.com,example.com"/>
 209 ```
 210 #### macOS
 211 ```
 212 <dict>
 213   <key>AllowedDomainsForApps</key>
 214   <string>managedfirefox.com,example.com</string>
 215 </dict>
 216 ```
 217 #### policies.json
 218 ```
 219 {
 220   "policies": {
 221     "AllowedDomainsForApps": "managedfirefox.com,example.com"
 222   }
 223 }
 224 ```
 225 ### AllowFileSelectionDialogs
 226
 227 Enable or disable file selection dialogs.
 228
 229 **Compatibility:** Firefox 124\
 230 **CCK2 Equivalent:** N/A\
 231 **Preferences Affected:** `widget.disable_file_pickers`
 232
 233 #### Windows (GPO)
 234 ```
 235 Software\Policies\Mozilla\Firefox\AllowFileSelectionDialogs = 0x1 | 0x0
 236 ```
 237 #### Windows (Intune)
 238 OMA-URI:
 239 ```
 240 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AppAutoAllowFileSelectionDialogsUpdate
 241 ```
 242 Value (string):
 243 ```
 244 <enabled/> or <disabled/>
 245 ```
 246 #### macOS
 247 ```
 248 <dict>
 249   <key>AllowFileSelectionDialogs</key>
 250   <true/> | <false/>
 251 </dict>
 252 ```
 253 #### policies.json
 254 ```
 255 {
 256   "policies": {
 257     "AllowFileSelectionDialogs": true | false
 258   }
 259 }
 260 ```
 261 ### AppAutoUpdate
 262
 263 Enable or disable **automatic** application update.
 264
 265 If set to true, application updates are installed without user approval within Firefox. The operating system might still require approval.
 266
 267 If set to false, application updates are downloaded but the user can choose when to install the update.
 268
 269 If you have disabled updates via `DisableAppUpdate`, this policy has no effect.
 270
 271 **Compatibility:** Firefox 75, Firefox ESR 68.7\
 272 **CCK2 Equivalent:** N/A\
 273 **Preferences Affected:** `app.update.auto`
 274
 275 #### Windows (GPO)
 276 ```
 277 Software\Policies\Mozilla\Firefox\AppAutoUpdate = 0x1 | 0x0
 278 ```
 279 #### Windows (Intune)
 280 OMA-URI:
 281 ```
 282 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AppAutoUpdate
 283 ```
 284 Value (string):
 285 ```
 286 <enabled/> or <disabled/>
 287 ```
 288 #### macOS
 289 ```
 290 <dict>
 291   <key>AppAutoUpdate</key>
 292   <true/> | <false/>
 293 </dict>
 294 ```
 295 #### policies.json
 296 ```
 297 {
 298   "policies": {
 299     "AppAutoUpdate": true | false
 300   }
 301 }
 302 ```
 303 ### AppUpdatePin
 304
 305 Prevent Firefox from being updated beyond the specified version.
 306
 307 You can specify the any version as ```xx.``` and Firefox will be updated with all minor versions, but will not be updated beyond the major version.
 308
 309 You can also specify the version as ```xx.xx``` and Firefox will be updated with all patch versions, but will not be updated beyond the minor version.
 310
 311 You should specify a version that exists or is guaranteed to exist. If you specify a version that doesn't end up existing, Firefox will update beyond that version.
 312
 313 **Compatibility:** Firefox 102,\
 314 **CCK2 Equivalent:** N/A\
 315 **Preferences Affected:** N/A
 316
 317 #### Windows (GPO)
 318 ```
 319 Software\Policies\Mozilla\Firefox\AppUpdatePin = "106."
 320 ```
 321 #### Windows (Intune)
 322 OMA-URI:
 323 ```
 324 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AppUpdatePin
 325 ```
 326 Value (string):
 327 ```
 328 <enabled/>
 329 <data id="AppUpdatePin" value="106."/>
 330 ```
 331 #### macOS
 332 ```
 333 <dict>
 334   <key>AppUpdatePin</key>
 335   <string>106.</string>
 336 </dict>
 337 ```
 338 #### policies.json
 339 ```
 340 {
 341   "policies": {
 342     "AppUpdatePin": "106."
 343   }
 344 }
 345 ```
 346 ### AppUpdateURL
 347
 348 Change the URL for application update if you are providing Firefox updates from a custom update server.
 349
 350 **Compatibility:** Firefox 62, Firefox ESR 60.2\
 351 **CCK2 Equivalent:** N/A\
 352 **Preferences Affected:** `app.update.url`
 353
 354 #### Windows (GPO)
 355 ```
 356 Software\Policies\Mozilla\Firefox\AppUpdateURL = "https://yoursite.com"
 357 ```
 358 #### Windows (Intune)
 359 OMA-URI:
 360 ```
 361 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AppUpdateURL
 362 ```
 363 Value (string):
 364 ```
 365 <enabled/>
 366 <data id="AppUpdateURL" value="https://yoursite.com"/>
 367 ```
 368 #### macOS
 369 ```
 370 <dict>
 371   <key>AppUpdateURL</key>
 372   <string>https://yoursite.com</string>
 373 </dict>
 374 ```
 375 #### policies.json
 376 ```
 377 {
 378   "policies": {
 379     "AppUpdateURL": "https://yoursite.com"
 380   }
 381 }
 382 ```
 383 ### Authentication
 384
 385 Configure sites that support integrated authentication.
 386
 387 See [Integrated authentication](https://htmlpreview.github.io/?https://github.com/mdn/archived-content/blob/main/files/en-us/mozilla/integrated_authentication/raw.html) for more information.
 388
 389 `PrivateBrowsing` enables integrated authentication in private browsing.
 390
 391 **Compatibility:** Firefox 60, Firefox ESR 60 (AllowNonFQDN added in 62/60.2, AllowProxies added in 70/68.2, Locked added in 71/68.3, PrivateBrowsing added in 77/68.9)\
 392 **CCK2 Equivalent:** N/A\
 393 **Preferences Affected:** `network.negotiate-auth.trusted-uris`,`network.negotiate-auth.delegation-uris`,`network.automatic-ntlm-auth.trusted-uris`,`network.automatic-ntlm-auth.allow-non-fqdn`,`network.negotiate-auth.allow-non-fqdn`,`network.automatic-ntlm-auth.allow-proxies`,`network.negotiate-auth.allow-proxies`,`network.auth.private-browsing-sso`
 394
 395 #### Windows (GPO)
 396 ```
 397 Software\Policies\Mozilla\Firefox\Authentication\SPNEGO\1 = "mydomain.com"
 398 Software\Policies\Mozilla\Firefox\Authentication\SPNEGO\2 = "https://myotherdomain.com"
 399 Software\Policies\Mozilla\Firefox\Authentication\Delegated\1 = "mydomain.com"
 400 Software\Policies\Mozilla\Firefox\Authentication\Delegated\2 = "https://myotherdomain.com"
 401 Software\Policies\Mozilla\Firefox\Authentication\NTLM\1 = "mydomain.com"
 402 Software\Policies\Mozilla\Firefox\Authentication\NTLM\2 = "https://myotherdomain.com"
 403 Software\Policies\Mozilla\Firefox\Authentication\AllowNonFQDN\SPNEGO = 0x1 | 0x0
 404 Software\Policies\Mozilla\Firefox\Authentication\AllowNonFQDN\NTLM = 0x1 | 0x0
 405 Software\Policies\Mozilla\Firefox\Authentication\AllowProxies\SPNEGO = 0x1 | 0x0
 406 Software\Policies\Mozilla\Firefox\Authentication\AllowProxies\NTLM = 0x1 | 0x0
 407 Software\Policies\Mozilla\Firefox\Authentication\Locked = 0x1 | 0x0
 408 Software\Policies\Mozilla\Firefox\Authentication\PrivateBrowsing = 0x1 | 0x0
 409 ```
 410 #### Windows (Intune)
 411 OMA-URI:
 412 ```
 413 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_SPNEGO
 414 ```
 415 Value (string):
 416 ```
 417 <enabled/>
 418 <data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
 419 ```
 420 OMA-URI:
 421 ```
 422 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_Delegated
 423 ```
 424 Value (string):
 425 ```
 426 <enabled/>
 427 <data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
 428 ```
 429 OMA-URI:
 430 ```
 431 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_NTLM
 432 ```
 433 Value (string):
 434 ```
 435 <enabled/>
 436 <data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
 437 ```
 438 OMA-URI:
 439 ```
 440 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_AllowNonFQDN
 441 ```
 442 Value (string):
 443 ```
 444 <enabled/>
 445 <data id="Authentication_AllowNonFQDN_NTLM" value="true | false"/>
 446 <data id="Authentication_AllowNonFQDN_SPNEGO" value="true | false"/>
 447 ```
 448 OMA-URI:
 449 ```
 450 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_Locked
 451 ```
 452 Value (string):
 453 ```
 454 <enabled/> or <disabled/>
 455 ```
 456 OMA-URI:
 457 ```
 458 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_PrivateBrowsing
 459 ```
 460 Value (string):
 461 ```
 462 <enabled/> or <disabled/>
 463 ```
 464 #### macOS
 465 ```
 466 <dict>
 467   <key>Authentication</key>
 468   <dict>
 469     <key>SPNEGO</key>
 470     <array>
 471       <string>mydomain.com</string>
 472       <string>https://myotherdomain.com</string>
 473     </array>
 474     <key>Delegated</key>
 475     <array>
 476       <string>mydomain.com</string>
 477       <string>https://myotherdomain.com</string>
 478     </array>
 479     <key>NTLM</key>
 480     <array>
 481       <string>mydomain.com</string>
 482       <string>https://myotherdomain.com</string>
 483     </array>
 484     <key>AllowNonFQDN</key>
 485       <dict>
 486       <key>SPNEGO</key>
 487       <true/> | <false/>
 488       <key>NTLM</key>
 489       <true/> | <false/>
 490     </dict>
 491     <key>AllowProxies</key>
 492       <dict>
 493       <key>SPNEGO</key>
 494       <true/> | <false/>
 495       <key>NTLM</key>
 496       <true/> | <false/>
 497     </dict>
 498     <key>Locked</key>
 499     <true/> | <false/>
 500     <key>PrivateBrowsing</key>
 501     <true/> | <false/>
 502   </dict>
 503 </dict>
 504 ```
 505 #### policies.json
 506 ```
 507 {
 508   "policies": {
 509     "Authentication": {
 510       "SPNEGO": ["mydomain.com", "https://myotherdomain.com"],
 511       "Delegated": ["mydomain.com", "https://myotherdomain.com"],
 512       "NTLM": ["mydomain.com", "https://myotherdomain.com"],
 513       "AllowNonFQDN": {
 514         "SPNEGO": true | false,
 515         "NTLM": true | false
 516       },
 517       "AllowProxies": {
 518         "SPNEGO": true | false,
 519         "NTLM": true | false
 520       },
 521       "Locked": true | false,
 522       "PrivateBrowsing": true | false
 523     }
 524   }
 525 }
 526 ```
 527 ### AutofillAddressEnabled
 528
 529 Enables or disables autofill for addresses.
 530
 531 This only applies when address autofill is enabled for a particular Firefox version or region. See [this page](https://support.mozilla.org/kb/automatically-fill-your-address-web-forms) for more information.
 532
 533 **Compatibility:** Firefox 125, Firefox ESR 115.10\
 534 **CCK2 Equivalent:** N/A\
 535 **Preferences Affected:** `extensions.formautofill.addresses.enabled`
 536
 537 #### Windows (GPO)
 538 ```
 539 Software\Policies\Mozilla\Firefox\AutofillAddressEnabled = 0x1 | 0x0
 540 ```
 541 #### Windows (Intune)
 542 OMA-URI:
 543 ```
 544 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AutofillAddressEnabled
 545 ```
 546 Value (string):
 547 ```
 548 <enabled/> or <disabled/>
 549 ```
 550 #### macOS
 551 ```
 552 <dict>
 553   <key>AutofillAddressEnabled</key>
 554   <true/> | <false/>
 555 </dict>
 556 ```
 557 #### policies.json
 558 ```
 559 {
 560   "policies": {
 561     "AutofillAddressEnabled": true | false
 562   }
 563 }
 564 ```
 565 ### AutofillCreditCardEnabled
 566
 567 Enables or disables autofill for payment methods.
 568
 569 This only applies when payment method autofill is enabled for a particular Firefox version or region. See [this page](https://support.mozilla.org/kb/credit-card-autofill) for more information.
 570
 571 **Compatibility:** Firefox 125, Firefox ESR 115.10\
 572 **CCK2 Equivalent:** N/A\
 573 **Preferences Affected:** `extensions.formautofill.creditCards.enabled`
 574
 575 #### Windows (GPO)
 576 ```
 577 Software\Policies\Mozilla\Firefox\AutofillCreditCardEnabled = 0x1 | 0x0
 578 ```
 579 #### Windows (Intune)
 580 OMA-URI:
 581 ```
 582 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AutofillCreditCardEnabled
 583 ```
 584 Value (string):
 585 ```
 586 <enabled/> or <disabled/>
 587 ```
 588 #### macOS
 589 ```
 590 <dict>
 591   <key>AutofillCreditCardEnabled</key>
 592   <true/> | <false/>
 593 </dict>
 594 ```
 595 #### policies.json
 596 ```
 597 {
 598   "policies": {
 599     "AutofillCreditCardEnabled": true | false
 600   }
 601 }
 602 ```
 603 ### AutoLaunchProtocolsFromOrigins
 604 Define a list of external protocols that can be used from listed origins without prompting the user. The origin is the scheme plus the hostname.
 605
 606 The syntax of this policy is exactly the same as the [Chrome AutoLaunchProtocolsFromOrigins policy](https://cloud.google.com/docs/chrome-enterprise/policies/?policy=AutoLaunchProtocolsFromOrigins) except that you can only use valid origins (not just hostnames). This also means that you cannot specify an asterisk for all origins.
 607
 608 The schema is:
 609 ```
 610 {
 611  "items": {
 612   "properties": {
 613    "allowed_origins": {
 614     "items": {
 615      "type": "string"
 616     },
 617     "type": "array"
 618    },
 619    "protocol": {
 620     "type": "string"
 621    }
 622   },
 623   "required": [
 624    "protocol",
 625    "allowed_origins"
 626   ],
 627   "type": "object"
 628  },
 629  "type": "array"
 630 }
 631 ```
 632 **Compatibility:** Firefox 90, Firefox ESR 78.12\
 633 **CCK2 Equivalent:** N/A\
 634 **Preferences Affected:** N/A
 635
 636 #### Windows (GPO)
 637 Software\Policies\Mozilla\Firefox\AutoLaunchProtocolsFromOrigins (REG_MULTI_SZ) =
 638 ```
 639 [
 640   {
 641     "protocol": "zoommtg",
 642     "allowed_origins": [
 643       "https://somesite.zoom.us"
 644     ]
 645   }
 646 ]
 647 ```
 648 #### Windows (Intune)
 649 OMA-URI:
 650 ```
 651 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AutoLaunchProtocolsFromOrigins
 652 ```
 653 Value (string):
 654 ```
 655 <enabled/>
 656 <data id="JSON" value='
 657 [
 658   {
 659     "protocol": "zoommtg",
 660     "allowed_origins": [
 661       "https://somesite.zoom.us"
 662     ]
 663   }
 664 ]'/>
 665 ```
 666 #### macOS
 667 ```
 668 <dict>
 669   <key>AutoLaunchProtocolsFromOrigins</key>
 670   <array>
 671     <dict>
 672       <key>protocol</key>
 673       <string>zoommtg</string>
 674       <key>allowed_origins</key>
 675       <array>
 676         <string>https://somesite.zoom.us</string>
 677       </array>
 678     </dict>
 679   </array>
 680 </dict>
 681 ```
 682 #### policies.json
 683 ```
 684 {
 685   "policies": {
 686     "AutoLaunchProtocolsFromOrigins": [{
 687       "protocol": "zoommtg",
 688       "allowed_origins": [
 689         "https://somesite.zoom.us"
 690       ]
 691     }]
 692   }
 693 }
 694 ```
 695 ### BackgroundAppUpdate
 696
 697 Enable or disable **automatic** application update **in the background**, when the application is not running.
 698
 699 If set to true, application updates may be installed (without user approval) in the background, even when the application is not running. The operating system might still require approval.
 700
 701 If set to false, the application will not try to install updates when the application is not running.
 702
 703 If you have disabled updates via `DisableAppUpdate` or disabled automatic updates via `AppAutoUpdate`, this policy has no effect.
 704
 705 If you are having trouble getting the background task to run, verify your configuration with the ["Requirements to run" section in this support document](https://support.mozilla.org/en-US/kb/enable-background-updates-firefox-windows).
 706
 707 **Compatibility:** Firefox 90 (Windows only)\
 708 **CCK2 Equivalent:** N/A\
 709 **Preferences Affected:** `app.update.background.enabled`
 710
 711 #### Windows (GPO)
 712 ```
 713 Software\Policies\Mozilla\Firefox\BackgroundAppUpdate = 0x1 | 0x0
 714 ```
 715 #### Windows (Intune)
 716 OMA-URI:
 717 ```
 718 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BackgroundAppUpdate
 719 ```
 720 Value (string):
 721 ```
 722 <enabled/> or <disabled/>
 723 ```
 724 #### macOS
 725 ```
 726 <dict>
 727   <key>BackgroundAppUpdate</key>
 728   <true/> | <false/>
 729 </dict>
 730 ```
 731 #### policies.json
 732 ```
 733 {
 734   "policies": {
 735     "BackgroundAppUpdate": true | false
 736   }
 737 }
 738 ```
 739 ### BlockAboutAddons
 740
 741 Block access to the Add-ons Manager (about:addons).
 742
 743 **Compatibility:** Firefox 60, Firefox ESR 60\
 744 **CCK2 Equivalent:** `disableAddonsManager`\
 745 **Preferences Affected:** N/A
 746
 747 #### Windows (GPO)
 748 ```
 749 Software\Policies\Mozilla\Firefox\BlockAboutAddons = 0x1 | 0x0
 750 ```
 751 #### Windows (Intune)
 752 OMA-URI:
 753 ```
 754 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutAddons
 755 ```
 756 Value (string):
 757 ```
 758 <enabled/> or <disabled/>
 759 ```
 760 #### macOS
 761 ```
 762 <dict>
 763   <key>BlockAboutAddons</key>
 764   <true/> | <false/>
 765 </dict>
 766 ```
 767 #### policies.json
 768 ```
 769 {
 770   "policies": {
 771     "BlockAboutAddons": true | false
 772   }
 773 }
 774 ```
 775 ### BlockAboutConfig
 776
 777 Block access to about:config.
 778
 779 **Compatibility:** Firefox 60, Firefox ESR 60\
 780 **CCK2 Equivalent:** `disableAboutConfig`\
 781 **Preferences Affected:** N/A
 782
 783 #### Windows (GPO)
 784 ```
 785 Software\Policies\Mozilla\Firefox\BlockAboutConfig = 0x1 | 0x0
 786 ```
 787 #### Windows (Intune)
 788 OMA-URI:
 789 ```
 790 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutConfig
 791 ```
 792 Value (string):
 793 ```
 794 <enabled/> or <disabled/>
 795 ```
 796 #### macOS
 797 ```
 798 <dict>
 799   <key>BlockAboutConfig</key>
 800   <true/> | <false/>
 801 </dict>
 802 ```
 803 #### policies.json
 804 ```
 805 {
 806   "policies": {
 807     "BlockAboutConfig": true | false
 808   }
 809 }
 810 ```
 811 ### BlockAboutProfiles
 812
 813 Block access to About Profiles (about:profiles).
 814
 815 **Compatibility:** Firefox 60, Firefox ESR 60\
 816 **CCK2 Equivalent:** `disableAboutProfiles`\
 817 **Preferences Affected:** N/A
 818
 819 #### Windows (GPO)
 820 ```
 821 Software\Policies\Mozilla\Firefox\BlockAboutProfiles = 0x1 | 0x0
 822 ```
 823 #### Windows (Intune)
 824 OMA-URI:
 825 ```
 826 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutProfiles
 827 ```
 828 Value (string):
 829 ```
 830 <enabled/> or <disabled/>
 831 ```
 832 #### macOS
 833 ```
 834 <dict>
 835   <key>BlockAboutProfiles</key>
 836   <true/> | <false/>
 837 </dict>
 838 ```
 839 #### policies.json
 840 ```
 841 {
 842   "policies": {
 843     "BlockAboutProfiles": true | false
 844   }
 845 }
 846 ```
 847 ### BlockAboutSupport
 848
 849 Block access to Troubleshooting Information (about:support).
 850
 851 **Compatibility:** Firefox 60, Firefox ESR 60\
 852 **CCK2 Equivalent:** `disableAboutSupport`\
 853 **Preferences Affected:** N/A
 854
 855 #### Windows (GPO)
 856 ```
 857 Software\Policies\Mozilla\Firefox\BlockAboutSupport = 0x1 | 0x0
 858 ```
 859 #### Windows (Intune)
 860 OMA-URI:
 861 ```
 862 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutSupport
 863 ```
 864 Value (string):
 865 ```
 866 <enabled/> or <disabled/>
 867 ```
 868 #### macOS
 869 ```
 870 <dict>
 871   <key>BlockAboutSupport</key>
 872   <true/> | <false/>
 873 </dict>
 874 ```
 875 #### policies.json
 876 ```
 877 {
 878   "policies": {
 879     "BlockAboutSupport": true | false
 880   }
 881 }
 882 ```
 883 ### Bookmarks
 884
 885 Note: [`ManagedBookmarks`](#managedbookmarks) is the new recommended way to add bookmarks. This policy will continue to be supported.
 886
 887 Add bookmarks in either the bookmarks toolbar or menu. Only `Title` and `URL` are required. If `Placement` is not specified, the bookmark will be placed on the toolbar. If `Folder` is specified, it is automatically created and bookmarks with the same folder name are grouped together.
 888
 889 If you want to clear all bookmarks set with this policy, you can set the value to an empty array (```[]```). This can be on Windows via the new Bookmarks (JSON) policy available with GPO and Intune.
 890
 891 **Compatibility:** Firefox 60, Firefox ESR 60\
 892 **CCK2 Equivalent:** `bookmarks.toolbar`,`bookmarks.menu`\
 893 **Preferences Affected:** N/A
 894
 895 #### Windows (GPO)
 896 ```
 897 Software\Policies\Mozilla\Firefox\Bookmarks\1\Title = "Example"
 898 Software\Policies\Mozilla\Firefox\Bookmarks\1\URL = "https://example.com"
 899 Software\Policies\Mozilla\Firefox\Bookmarks\1\Favicon = "https://example.com/favicon.ico"
 900 Software\Policies\Mozilla\Firefox\Bookmarks\1\Placement = "toolbar" | "menu"
 901 Software\Policies\Mozilla\Firefox\Bookmarks\1\Folder = "FolderName"
 902
 903 Software\Policies\Mozilla\Firefox\Bookmarks (REG_MULTI_SZ) =
 904 ```
 905 []
 906 ```
 907
 908 ```
 909 #### Windows (Intune)
 910 OMA-URI:
 911 ```
 912 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Bookmarks/Bookmark01
 913 ```
 914 Value (string):
 915 ```
 916 <enabled/>
 917 <data id="BookmarkTitle" value="Example"/>
 918 <data id="BookmarkURL" value="https://example.com"/>
 919 <data id="BookmarkFavicon" value="https://example.com/favicon.ico"/>
 920 <data id="BookmarkPlacement" value="toolbar | menu"/>
 921 <data id="BookmarkFolder" value="FolderName"/>
 922 ```
 923 OMA-URI:
 924 ```
 925 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Bookmarks
 926 ```
 927 Value (string):
 928 ```
 929 <enabled/>
 930 <data id="JSON" value='[]'/>
 931 ```
 932 #### macOS
 933 ```
 934 <dict>
 935   <key>Bookmarks</key>
 936   <array>
 937     <dict>
 938       <key>Title</key>
 939       <string>Example</string>
 940       <key>URL</key>
 941       <string>https://example.com</string>
 942       <key>Favicon</key>
 943       <string>https://example.com/favicon.ico</string>
 944       <key>Placement</key>
 945       <string>toolbar | menu</string>
 946       <key>Folder</key>
 947       <string>FolderName</string>
 948     </dict>
 949   </array>
 950 </dict>
 951 ```
 952 #### policies.json
 953 ```
 954 {
 955   "policies": {
 956     "Bookmarks": [
 957       {
 958         "Title": "Example",
 959         "URL": "https://example.com",
 960         "Favicon": "https://example.com/favicon.ico",
 961         "Placement": "toolbar" | "menu",
 962         "Folder": "FolderName"
 963       }
 964     ]
 965   }
 966 }
 967 ```
 968 ### CaptivePortal
 969 Enable or disable the detection of captive portals.
 970
 971 **Compatibility:** Firefox 67, Firefox ESR 60.7\
 972 **CCK2 Equivalent:** N/A\
 973 **Preferences Affected:** `network.captive-portal-service.enabled`
 974
 975 #### Windows (GPO)
 976 ```
 977 Software\Policies\Mozilla\Firefox\CaptivePortal = 0x1 | 0x0
 978 ```
 979 #### Windows (Intune)
 980 OMA-URI:
 981 ```
 982 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/CaptivePortal
 983 ```
 984 Value (string):
 985 ```
 986 <enabled/> or <disabled/>
 987 ```
 988 #### macOS
 989 ```
 990 <dict>
 991   <key>CaptivePortal</key>
 992   <true/> | <false/>
 993 </dict>
 994 ```
 995 #### policies.json
 996 ```
 997 {
 998   "policies": {
 999     "CaptivePortal": true | false
1000   }
1001 }
1002 ```
1003 ### Certificates
1004
1005 ### Certificates | ImportEnterpriseRoots
1006
1007 Trust certificates that have been added to the operating system certificate store by a user or administrator.
1008
1009 Note: This policy only works on Windows and macOS. For Linux discussion, see [bug 1600509](https://bugzilla.mozilla.org/show_bug.cgi?id=1600509).
1010
1011 See https://support.mozilla.org/kb/setting-certificate-authorities-firefox for more detail.
1012
1013 **Compatibility:** Firefox 60, Firefox ESR 60 (macOS support in Firefox 63, Firefox ESR 68)\
1014 **CCK2 Equivalent:** N/A\
1015 **Preferences Affected:** `security.enterprise_roots.enabled`
1016
1017 #### Windows (GPO)
1018 ```
1019 Software\Policies\Mozilla\Firefox\Certificates\ImportEnterpriseRoots = 0x1 | 0x0
1020 ```
1021 #### Windows (Intune)
1022 OMA-URI:
1023 ```
1024 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Certificates/Certificates_ImportEnterpriseRoots
1025 ```
1026 Value (string):
1027 ```
1028 <enabled/> or <disabled/>
1029 ```
1030 #### macOS
1031 ```
1032 <dict>
1033   <key>Certificates</key>
1034   <dict>
1035     <key>ImportEnterpriseRoots</key>
1036     <true/> | <false/>
1037   </dict>
1038 </dict>
1039 ```
1040 #### policies.json
1041 ```
1042 {
1043   "policies": {
1044     "Certificates": {
1045       "ImportEnterpriseRoots": true | false
1046     }
1047   }
1048 }
1049 ```
1050 ### Certificates | Install
1051
1052 Install certificates into the Firefox certificate store. If only a filename is specified, Firefox searches for the file in the following locations:
1053
1054 - Windows
1055   - %USERPROFILE%\AppData\Local\Mozilla\Certificates
1056   - %USERPROFILE%\AppData\Roaming\Mozilla\Certificates
1057 - macOS
1058   - /Library/Application Support/Mozilla/Certificates
1059   - ~/Library/Application Support/Mozilla/Certificates
1060 - Linux
1061   - /usr/lib/mozilla/certificates
1062   - /usr/lib64/mozilla/certificates
1063   - ~/.mozilla/certificates
1064
1065 Starting with Firefox 65, Firefox 60.5 ESR, a fully qualified path can be used, including UNC paths. You should use the native path style for your operating system. We do not support using %USERPROFILE% or other environment variables on Windows.
1066
1067 If you are specifying the path in the policies.json file on Windows, you need to escape your backslashes (`\\`) which means that for UNC paths, you need to escape both (`\\\\`). If you use group policy, you only need one backslash.
1068
1069 Certificates are installed using the trust string `CT,CT,`.
1070
1071 Binary (DER) and ASCII (PEM) certificates are both supported.
1072
1073 **Compatibility:** Firefox 64, Firefox ESR 64\
1074 **CCK2 Equivalent:** `certs.ca`\
1075 **Preferences Affected:** N/A
1076
1077 #### Windows (GPO)
1078 ```
1079 Software\Policies\Mozilla\Firefox\Certificates\Install\1 = "cert1.der"
1080 Software\Policies\Mozilla\Firefox\Certificates\Install\2 = "C:\Users\username\cert2.pem"
1081 ```
1082 #### Windows (Intune)
1083 OMA-URI:
1084 ```
1085 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Certificates/Certificates_Install
1086 ```
1087 Value (string):
1088 ```
1089 <enabled/>
1090 <data id="Certificates_Install" value="1&#xF000;cert1.der&#xF000;2&#xF000;C:\Users\username\cert2.pem"/>
1091 ```
1092 #### macOS
1093 ```
1094 <dict>
1095   <key>Certificates</key>
1096   <dict>
1097     <key>Install</key>
1098     <array>
1099       <string>cert1.der</string>
1100       <string>/Users/username/cert2.pem</string>
1101     </array>
1102   </dict>
1103 </dict>
1104 ```
1105 #### policies.json
1106 ```
1107 {
1108   "policies": {
1109     "Certificates": {
1110       "Install": ["cert1.der", "/home/username/cert2.pem"]
1111     }
1112   }
1113 }
1114 ```
1115 ### Containers
1116 Set policies related to [containers](https://addons.mozilla.org/firefox/addon/multi-account-containers/).
1117
1118 Currently you can set the initial set of containers.
1119
1120 For each container, you can specify the name, icon, and color.
1121
1122 | Name | Description |
1123 | --- | --- |
1124 | `name`| Name of container
1125 | `icon` | Can be `fingerprint`, `briefcase`, `dollar`, `cart`, `vacation`, `gift`, `food`, `fruit`, `pet`, `tree`, `chill`, `circle`, `fence`
1126 | `color` | Can be `blue`, `turquoise`, `green`, `yellow`, `orange`, `red`, `pink`, `purple`, `toolbar`
1127
1128 **Compatibility:** Firefox 113\
1129 **CCK2 Equivalent:** N/A\
1130 **Preferences Affected:** N/A
1131
1132 #### Windows (GPO)
1133 Software\Policies\Mozilla\Firefox\Containers (REG_MULTI_SZ) =
1134 ```
1135 {
1136   "Default": [
1137     {
1138       "name": "My container",
1139       "icon": "pet",
1140       "color": "turquoise"
1141     }
1142   ]
1143 }
1144 ```
1145 #### Windows (Intune)
1146 OMA-URI:
1147 ```
1148 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Containers
1149 ```
1150 Value (string):
1151 ```
1152 <enabled/>
1153 <data id="JSON" value='
1154 {
1155   "Default": [
1156     {
1157       "name": "My container",
1158       "icon": "pet",
1159       "color": "turquoise"
1160     }
1161   ]
1162 }
1163 '/>
1164 ```
1165 #### macOS
1166 ```
1167 <dict>
1168   <key>Default</key>
1169   <dict>
1170     <key>Containers</key>
1171     <array>
1172       <dict>
1173         <key>name</key>
1174         <string>My container</string>
1175         <key>icon</key>
1176         <string>pet</string>
1177         <key>color</key>
1178         <string>turquoise</string>
1179       </dict>
1180     </array>
1181   </dict>
1182 </dict>
1183 ```
1184 #### policies.json
1185 ```
1186 {
1187   "policies": {
1188     "Containers": {
1189       "Default": [
1190         {
1191           "name": "My container",
1192           "icon": "pet",
1193           "color": "turquoise"
1194         }
1195       ]
1196     }
1197   }
1198 }
1199 ```
1200 ### Cookies
1201 Configure cookie preferences.
1202
1203 `Allow` is a list of origins (not domains) where cookies are always allowed. You must include http or https.
1204
1205 `AllowSession` is a list of origins (not domains) where cookies are only allowed for the current session. You must include http or https.
1206
1207 `Block` is a list of origins (not domains) where cookies are always blocked. You must include http or https.
1208
1209 `Behavior` sets the default behavior for cookies based on the values below.
1210
1211 `BehaviorPrivateBrowsing` sets the default behavior for cookies in private browsing based on the values below.
1212
1213 | Value | Description
1214 | --- | --- |
1215 | accept | Accept all cookies
1216 | reject-foreign | Reject third party cookies
1217 | reject | Reject all cookies
1218 | limit-foreign | Reject third party cookies for sites you haven't visited
1219 | reject-tracker | Reject cookies for known trackers (default)
1220 | reject-tracker-and-partition-foreign | Reject cookies for known trackers and partition third-party cookies (Total Cookie Protection) (default for private browsing)
1221
1222 `Locked` prevents the user from changing cookie preferences.
1223
1224 **Compatibility:** Firefox 60, Firefox ESR 60 (RejectTracker added in Firefox 63, AllowSession added in Firefox 79/78.1, Behavior added in Firefox 95/91.4)\
1225 **CCK2 Equivalent:** N/A\
1226 **Preferences Affected:** `network.cookie.cookieBehavior`, `network.cookie.cookieBehavior.pbmode`, `network.cookie.lifetimePolicy`
1227
1228 #### Windows (GPO)
1229 ```
1230 Software\Policies\Mozilla\Firefox\Cookies\Allow\1 = "https://example.com"
1231 Software\Policies\Mozilla\Firefox\Cookies\AllowSession\1 = "https://example.edu"
1232 Software\Policies\Mozilla\Firefox\Cookies\Block\1 = "https://example.org"
1233 Software\Policies\Mozilla\Firefox\Cookies\Default = 0x1 | 0x0
1234 Software\Policies\Mozilla\Firefox\Cookies\AcceptThirdParty = "always" | "never" | "from-visited"
1235 Software\Policies\Mozilla\Firefox\Cookies\ExpireAtSessionEnd = 0x1 | 0x0
1236 Software\Policies\Mozilla\Firefox\Cookies\RejectTracker = 0x1 | 0x0
1237 Software\Policies\Mozilla\Firefox\Cookies\Behavior = "accept" | "reject-foreign" | "reject" | "limit-foreign" | "reject-tracker" | "reject-tracker-and-partition-foreign"
1238 Software\Policies\Mozilla\Firefox\Cookies\BehaviorPrivateBrowsing = "accept" | "reject-foreign" | "reject" | "limit-foreign" | "reject-tracker" | "reject-tracker-and-partition-foreign"
1239 Software\Policies\Mozilla\Firefox\Cookies\Locked = 0x1 | 0x0
1240 ```
1241 #### Windows (Intune)
1242 OMA-URI:
1243 ```
1244 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Allow
1245 ```
1246 Value (string):
1247 ```
1248 <enabled/>
1249 <data id="Permissions" value="1&#xF000;https://example.com"/>
1250 ```
1251 OMA-URI:
1252 ```
1253 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_AllowSession
1254 ```
1255 Value (string):
1256 ```
1257 <enabled/>
1258 <data id="Permissions" value="1&#xF000;https://example.edu"/>
1259 ```
1260 OMA-URI:
1261 ```
1262 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Block
1263 ```
1264 Value (string):
1265 ```
1266 <enabled/>
1267 <data id="Permissions" value="1&#xF000;https://example.org"/>
1268 ```
1269 OMA-URI:
1270 ```
1271 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Default
1272 ```
1273 Value (string):
1274 ```
1275 <enabled/> or <disabled/>
1276 ```
1277 OMA-URI:
1278 ```
1279 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_AcceptThirdParty
1280 ```
1281 Value (string):
1282 ```
1283 <enabled/>
1284 <data id="Cookies_AcceptThirdParty" value="always | never | from-visited"/>
1285 ```
1286 OMA-URI:
1287 ```
1288 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_ExpireAtSessionEnd
1289 ```
1290 Value (string):
1291 ```
1292 <enabled/> or <disabled/>
1293 ```
1294 OMA-URI:
1295 ```
1296 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_RejectTracker
1297 ```
1298 Value (string):
1299 ```
1300 <enabled/> or <disabled/>
1301 ```
1302 OMA-URI:
1303 ```
1304 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Locked
1305 ```
1306 Value (string):
1307 ```
1308 <enabled/> or <disabled/>
1309 ```
1310 OMA-URI:
1311 ```
1312 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Behavior
1313 ```
1314 Value (string):
1315 ```
1316 <enabled/>
1317 <data id="Cookies_Behavior" value="accept | reject-foreign | reject | limit-foreign | reject-tracker | reject-tracker-and-partition-foreign"/>
1318 ```
1319 OMA-URI:
1320 ```
1321 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_BehaviorPrivateBrowsing
1322 ```
1323 Value (string):
1324 ```
1325 <enabled/>
1326 <data id="Cookies_BehaviorPrivateBrowsing" value="accept | reject-foreign | reject | limit-foreign | reject-tracker | reject-tracker-and-partition-foreign"/>
1327 ```
1328 #### macOS
1329 ```
1330 <dict>
1331   <key>Cookies</key>
1332   <dict>
1333     <key>Allow</key>
1334     <array>
1335       <string>http://example.com</string>
1336     </array>
1337     <key>AllowSession</key>
1338     <array>
1339       <string>http://example.edu</string>
1340     </array>
1341     <key>Block</key>
1342     <array>
1343       <string>http://example.org</string>
1344     </array>
1345     <key>Default</key>
1346     <true/> | <false/>
1347     <key>AcceptThirdParty</key>
1348     <string>always | never | from-visited</string>
1349     <key>ExpireAtSessionEnd</key>
1350     <true/> | <false/>
1351     <key>RejectTracker</key>
1352     <true/> | <false/>
1353     <key>Locked</key>
1354     <true/> | <false/>
1355     <key>Behavior</key>
1356     <string>accept | reject-foreign | reject | limit-foreign | reject-tracker | reject-tracker-and-partition-foreign</string>
1357     <key>BehaviorPrivateBrowsing</key>
1358     <string>accept | reject-foreign | reject | limit-foreign | reject-tracker | reject-tracker-and-partition-foreign</string>
1359   </dict>
1360 </dict>
1361 ```
1362 #### policies.json
1363 ```
1364 {
1365   "policies": {
1366     "Cookies": {
1367       "Allow": ["http://example.org/"],
1368       "AllowSession": ["http://example.edu/"],
1369       "Block": ["http://example.edu/"],
1370       "Default": true | false,
1371       "AcceptThirdParty": "always" | "never" | "from-visited",
1372       "ExpireAtSessionEnd": true | false,
1373       "RejectTracker": true | false,
1374       "Locked": true | false,
1375       "Behavior": "accept" | "reject-foreign" | "reject" | "limit-foreign" | "reject-tracker" | "reject-tracker-and-partition-foreign",
1376       "BehaviorPrivateBrowsing": "accept" | "reject-foreign" | "reject" | "limit-foreign" | "reject-tracker" | "reject-tracker-and-partition-foreign",
1377     }
1378   }
1379 }
1380 ```
1381 ### DefaultDownloadDirectory
1382 Set the default download directory.
1383
1384 You can use ${home} for the native home directory.
1385
1386 **Compatibility:** Firefox 68, Firefox ESR 68\
1387 **CCK2 Equivalent:** N/A\
1388 **Preferences Affected:** `browser.download.dir`, `browser.download.folderList`
1389
1390 #### Windows (GPO)
1391 ```
1392 Software\Policies\Mozilla\Firefox\DefaultDownloadDirectory = "${home}\Downloads"
1393 ```
1394 #### Windows (Intune)
1395 OMA-URI:
1396 ```
1397 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DefaultDownloadDirectory
1398 ```
1399 Value (string):
1400 ```
1401 <enabled/>
1402 <data id="Preferences_String" value="${home}\Downloads"/>
1403 ```
1404 #### macOS
1405 ```
1406 <dict>
1407   <key>DefaultDownloadDirectory</key>
1408   <string>${home}/Downloads</string>
1409 </dict>
1410 ```
1411 #### policies.json (macOS and Linux)
1412 ```
1413 {
1414   "policies": {
1415     "DefaultDownloadDirectory": "${home}/Downloads"
1416   }
1417 }
1418 ```
1419 #### policies.json (Windows)
1420 ```
1421 {
1422   "policies": {
1423     "DefaultDownloadDirectory": "${home}\\Downloads"
1424   }
1425 }
1426 ```
1427 ### DisableAppUpdate
1428 Turn off application updates within Firefox.
1429
1430 **Compatibility:** Firefox 60, Firefox ESR 60\
1431 **CCK2 Equivalent:** `disableFirefoxUpdates`\
1432 **Preferences Affected:** N/A
1433
1434 #### Windows (GPO)
1435 ```
1436 Software\Policies\Mozilla\Firefox\DisableAppUpdate = 0x1 | 0x0
1437 ```
1438 #### Windows (Intune)
1439 OMA-URI:
1440 ```
1441 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableAppUpdate
1442 ```
1443 Value (string):
1444 ```
1445 <enabled/> or <disabled/>
1446 ```
1447 #### macOS
1448 ```
1449 <dict>
1450   <key>DisableAppUpdate</key>
1451   <true/> | <false/>
1452 </dict>
1453 ```
1454 #### policies.json
1455 ```
1456 {
1457   "policies": {
1458     "DisableAppUpdate": true | false
1459   }
1460 }
1461 ```
1462 ### DisableBuiltinPDFViewer
1463 Disable the built in PDF viewer. PDF files are downloaded and sent externally.
1464
1465 **Compatibility:** Firefox 60, Firefox ESR 60\
1466 **CCK2 Equivalent:** `disablePDFjs`\
1467 **Preferences Affected:** `pdfjs.disabled`
1468
1469 #### Windows (GPO)
1470 ```
1471 Software\Policies\Mozilla\Firefox\DisableBuiltinPDFViewer = 0x1 | 0x0
1472 ```
1473 #### Windows (Intune)
1474 OMA-URI:
1475 ```
1476 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableBuiltinPDFViewer
1477 ```
1478 Value (string):
1479 ```
1480 <enabled/> or <disabled/>
1481 ```
1482 #### macOS
1483 ```
1484 <dict>
1485   <key>DisableBuiltinPDFViewer</key>
1486   <true/> | <false/>
1487 </dict>
1488 ```
1489 #### policies.json
1490 ```
1491 {
1492   "policies": {
1493     "DisableBuiltinPDFViewer": true | false
1494   }
1495 }
1496 ```
1497 ### DisabledCiphers
1498 Disable specific cryptographic ciphers, listed below.
1499
1500 ```
1501 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
1502 TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
1503 TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256
1504 TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
1505 TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
1506 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
1507 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
1508 TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA
1509 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
1510 TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA
1511 TLS_DHE_RSA_WITH_AES_128_CBC_SHA
1512 TLS_DHE_RSA_WITH_AES_256_CBC_SHA
1513 TLS_RSA_WITH_AES_128_GCM_SHA256
1514 TLS_RSA_WITH_AES_256_GCM_SHA384
1515 TLS_RSA_WITH_AES_128_CBC_SHA
1516 TLS_RSA_WITH_AES_256_CBC_SHA
1517 TLS_RSA_WITH_3DES_EDE_CBC_SHA
1518 ```
1519
1520 **Preferences Affected:** `security.ssl3.ecdhe_rsa_aes_128_gcm_sha256`, `security.ssl3.ecdhe_ecdsa_aes_128_gcm_sha256`, `security.ssl3.ecdhe_ecdsa_chacha20_poly1305_sha256`, `security.ssl3.ecdhe_rsa_chacha20_poly1305_sha256`, `security.ssl3.ecdhe_ecdsa_aes_256_gcm_sha384`, `security.ssl3.ecdhe_rsa_aes_256_gcm_sha384`, `security.ssl3.ecdhe_rsa_aes_128_sha`, `security.ssl3.ecdhe_ecdsa_aes_128_sha`, `security.ssl3.ecdhe_rsa_aes_256_sha`, `security.ssl3.ecdhe_ecdsa_aes_256_sha`, `security.ssl3.dhe_rsa_aes_128_sha`, `security.ssl3.dhe_rsa_aes_256_sha`, `security.ssl3.rsa_aes_128_gcm_sha256`, `security.ssl3.rsa_aes_256_gcm_sha384`, `security.ssl3.rsa_aes_128_sha`, `security.ssl3.rsa_aes_256_sha`, `security.ssl3.deprecated.rsa_des_ede3_sha`
1521
1522 ---
1523 **Note:**
1524
1525 This policy was updated in Firefox 78 to allow enabling ciphers as well. Setting the value to true disables the cipher, setting the value to false enables the cipher. Previously setting the value to true or false disabled the cipher.
1526
1527 ---
1528 **Compatibility:** Firefox 76, Firefox ESR 68.8 (TLS_RSA_WITH_AES_128_GCM_SHA256 and TLS_RSA_WITH_AES_256_GCM_SHA384 were added in Firefox 78, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA38, TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, and TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 were added in Firefox 97 and Firefox 91.6)\
1529 **CCK2 Equivalent:** N/A\
1530 **Preferences Affected:** N/A
1531
1532 #### Windows (GPO)
1533 ```
1534 Software\Policies\Mozilla\Firefox\DisabledCiphers\CIPHER_NAME = 0x1 | 0x0
1535 ```
1536 #### Windows (Intune)
1537 OMA-URI:
1538 ```
1539 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_CIPHER_NAME
1540
1541 ```
1542 Value (string):
1543 ```
1544 <enabled/> or <disabled/>
1545 ```
1546 #### macOS
1547 ```
1548 <dict>
1549   <key>DisabledCiphers</key>
1550     <dict>
1551       <key>CIPHER_NAME</key>
1552       <true/> | <false/>
1553     </dict>
1554 </dict>
1555 ```
1556 #### policies.json
1557 ```
1558 {
1559   "policies": {
1560     "DisabledCiphers": {
1561       "CIPHER_NAME": true | false,
1562     }
1563   }
1564 }
1565 ```
1566 ### DisableDefaultBrowserAgent
1567 Prevent the default browser agent from taking any actions. Only applicable to Windows; other platforms don’t have the agent.
1568
1569 The browser agent is a Windows-only scheduled task which runs in the background to collect and submit data about the browser that the user has set as their OS default. More information is available [here](https://firefox-source-docs.mozilla.org/toolkit/mozapps/defaultagent/default-browser-agent/index.html).
1570
1571 **Compatibility:** Firefox 75, Firefox ESR 68.7 (Windows only)\
1572 **CCK2 Equivalent:** N/A\
1573 **Preferences Affected:** N/A
1574
1575 #### Windows (GPO)
1576 ```
1577 Software\Policies\Mozilla\Firefox\DisableDefaultBrowserAgent = 0x1 | 0x0
1578 ```
1579 #### Windows (Intune)
1580 OMA-URI:
1581 ```
1582 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableDefaultBrowserAgent
1583 ```
1584 Value (string):
1585 ```
1586 <enabled/> or <disabled/>
1587 ```
1588 #### policies.json
1589 ```
1590 {
1591   "policies": {
1592     "DisableDefaultBrowserAgent": true | false
1593   }
1594 }
1595 ```
1596 ### DisableDeveloperTools
1597 Remove access to all developer tools.
1598
1599 **Compatibility:** Firefox 60, Firefox ESR 60\
1600 **CCK2 Equivalent:** `removeDeveloperTools`\
1601 **Preferences Affected:** `devtools.policy.disabled`
1602
1603 #### Windows (GPO)
1604 ```
1605 Software\Policies\Mozilla\Firefox\DisableDeveloperTools = 0x1 | 0x0`
1606 ```
1607 #### Windows (Intune)
1608 OMA-URI:
1609 ```
1610 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableDeveloperTools
1611 ```
1612 Value (string):
1613 ```
1614 <enabled/> or <disabled/>
1615 ```
1616 #### macOS
1617 ```
1618 <dict>
1619   <key>DisableDeveloperTools</key>
1620   <true/> | <false/>
1621 </dict>
1622 ```
1623 #### policies.json
1624 ```
1625 {
1626   "policies": {
1627     "DisableDeveloperTools": true | false
1628   }
1629 }
1630 ```
1631 ### DisableFeedbackCommands
1632 Disable the menus for reporting sites (Submit Feedback, Report Deceptive Site).
1633
1634 **Compatibility:** Firefox 60, Firefox ESR 60\
1635 **CCK2 Equivalent:** N/A\
1636 **Preferences Affected:** N/A
1637
1638 #### Windows (GPO)
1639 ```
1640 Software\Policies\Mozilla\Firefox\DisableFeedbackCommands = 0x1 | 0x0
1641 ```
1642 #### Windows (Intune)
1643 OMA-URI:
1644 ```
1645 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFeedbackCommands
1646 ```
1647 Value (string):
1648 ```
1649 <enabled/> or <disabled/>
1650 ```
1651 #### macOS
1652 ```
1653 <dict>
1654   <key>DisableFeedbackCommands</key>
1655   <true/> | <false/>
1656 </dict>
1657 ```
1658 #### policies.json
1659 ```
1660 {
1661   "policies": {
1662     "DisableFeedbackCommands": true | false
1663   }
1664 }
1665 ```
1666 ### DisableFirefoxAccounts
1667 Disable Firefox Accounts integration (Sync).
1668
1669 **Compatibility:** Firefox 60, Firefox ESR 60\
1670 **CCK2 Equivalent:** `disableSync`\
1671 **Preferences Affected:** `identity.fxaccounts.enabled`
1672
1673 #### Windows (GPO)
1674 ```
1675 Software\Policies\Mozilla\Firefox\DisableFirefoxAccounts = 0x1 | 0x0
1676 ```
1677 #### Windows (Intune)
1678 OMA-URI:
1679 ```
1680 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxAccounts
1681 ```
1682 Value (string):
1683 ```
1684 <enabled/> or <disabled/>
1685 ```
1686 #### macOS
1687 ```
1688 <dict>
1689   <key>DisableFirefoxAccounts</key>
1690   <true/> | <false/>
1691 </dict>
1692 ```
1693 #### policies.json
1694 ```
1695 {
1696   "policies": {
1697     "DisableFirefoxAccounts": true | false
1698   }
1699 }
1700 ```
1701 ### DisableFirefoxScreenshots
1702 Remove access to Firefox Screenshots.
1703
1704 **Compatibility:** Firefox 60, Firefox ESR 60\
1705 **CCK2 Equivalent:** N/A\
1706 **Preferences Affected:** `extensions.screenshots.disabled`
1707
1708 #### Windows (GPO)
1709 ```
1710 Software\Policies\Mozilla\Firefox\DisableFirefoxScreenshots = 0x1 | 0x0
1711 ```
1712 #### Windows (Intune)
1713 OMA-URI:
1714 ```
1715 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxScreenshots
1716 ```
1717 Value (string):
1718 ```
1719 <enabled/> or <disabled/>
1720 ```
1721 #### macOS
1722 ```
1723 <dict>
1724   <key>DisableFirefoxScreenshots</key>
1725   <true/> | <false/>
1726 </dict>
1727 ```
1728 #### policies.json
1729 ```
1730 {
1731   "policies": {
1732     "DisableFirefoxScreenshots": true | false
1733   }
1734 }
1735 ```
1736 ### DisableFirefoxStudies
1737 Disable Firefox studies (Shield).
1738
1739 **Compatibility:** Firefox 60, Firefox ESR 60\
1740 **CCK2 Equivalent:** N/A\
1741 **Preferences Affected:** `browser.newtabpage.activity-stream.asrouter.userprefs.cfr.addons`, `browser.newtabpage.activity-stream.asrouter.userprefs.cfr.features`
1742
1743 #### Windows (GPO)
1744 ```
1745 Software\Policies\Mozilla\Firefox\DisableFirefoxStudies = 0x1 | 0x0
1746 ```
1747 #### Windows (Intune)
1748 OMA-URI:
1749 ```
1750 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxStudies
1751 ```
1752 Value (string):
1753 ```
1754 <enabled/> or <disabled/>
1755 ```
1756 #### macOS
1757 ```
1758 <dict>
1759   <key>DisableFirefoxStudies</key>
1760   <true/> | <false/>
1761 </dict>
1762 ```
1763 #### policies.json
1764 ```
1765 {
1766   "policies": {
1767     "DisableFirefoxStudies": true | false
1768   }
1769 }
1770 ```
1771 ### DisableForgetButton
1772 Disable the "Forget" button.
1773
1774 **Compatibility:** Firefox 60, Firefox ESR 60\
1775 **CCK2 Equivalent:** `disableForget`\
1776 **Preferences Affected:** N/A
1777
1778 #### Windows (GPO)
1779 ```
1780 Software\Policies\Mozilla\Firefox\DisableForgetButton = 0x1 | 0x0
1781 ```
1782 #### Windows (Intune)
1783 OMA-URI:
1784 ```
1785 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableForgetButton
1786 ```
1787 Value (string):
1788 ```
1789 <enabled/> or <disabled/>
1790 ```
1791 #### macOS
1792 ```
1793 <dict>
1794   <key>DisableForgetButton</key>
1795   <true/> | <false/>
1796 </dict>
1797 ```
1798 #### policies.json
1799 ```
1800 {
1801   "policies": {
1802     "DisableForgetButton": true | false
1803   }
1804 }
1805 ```
1806 ### DisableFormHistory
1807 Turn off saving information on web forms and the search bar.
1808
1809 **Compatibility:** Firefox 60, Firefox ESR 60\
1810 **CCK2 Equivalent:** `disableFormFill`\
1811 **Preferences Affected:** `browser.formfill.enable`
1812
1813 #### Windows (GPO)
1814 ```
1815 Software\Policies\Mozilla\Firefox\DisableFormHistory = 0x1 | 0x0
1816 ```
1817 #### Windows (Intune)
1818 OMA-URI:
1819 ```
1820 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFormHistory
1821 ```
1822 Value (string):
1823 ```
1824 <enabled/> or <disabled/>
1825 ```
1826 #### macOS
1827 ```
1828 <dict>
1829   <key>DisableFormHistory</key>
1830   <true/> | <false/>
1831 </dict>
1832 ```
1833 #### policies.json
1834 ```
1835 {
1836   "policies": {
1837     "DisableFormHistory": true | false
1838   }
1839 }
1840 ```
1841 ### DisableMasterPasswordCreation
1842 Remove the master password functionality.
1843
1844 If this value is true, it works the same as setting [`PrimaryPassword`](#primarypassword) to false and removes the primary password functionality.
1845
1846 If both `DisableMasterPasswordCreation` and `PrimaryPassword` are used, `DisableMasterPasswordCreation` takes precedent.
1847
1848 **Compatibility:** Firefox 60, Firefox ESR 60\
1849 **CCK2 Equivalent:** `noMasterPassword`\
1850 **Preferences Affected:** N/A
1851
1852 #### Windows (GPO)
1853 ```
1854 Software\Policies\Mozilla\Firefox\DisableMasterPasswordCreation = 0x1 | 0x0
1855 ```
1856 #### Windows (Intune)
1857 OMA-URI:
1858 ```
1859 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableMasterPasswordCreation
1860 ```
1861 Value (string):
1862 ```
1863 <enabled/> or <disabled/>
1864 ```
1865 #### macOS
1866 ```
1867 <dict>
1868   <key>DisableMasterPasswordCreation</key>
1869   <true/> | <false/>
1870 </dict>
1871 ```
1872 #### policies.json
1873 ```
1874 {
1875   "policies": {
1876     "DisableMasterPasswordCreation": true | false
1877   }
1878 }
1879 ```
1880 ### DisablePasswordReveal
1881 Do not allow passwords to be shown in saved logins
1882
1883 **Compatibility:** Firefox 71, Firefox ESR 68.3\
1884 **CCK2 Equivalent:** N/A
1885 **Preferences Affected:** N/A
1886
1887 #### Windows (GPO)
1888 ```
1889 Software\Policies\Mozilla\Firefox\DisablePasswordReveal = 0x1 | 0x0
1890 ```
1891 #### Windows (Intune)
1892 OMA-URI:
1893 ```
1894 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePasswordReveal
1895 ```
1896 Value (string):
1897 ```
1898 <enabled/> or <disabled/>
1899 ```
1900 #### macOS
1901 ```
1902 <dict>
1903   <key>DisablePasswordReveal</key>
1904   <true/> | <false/>
1905 </dict>
1906 ```
1907 #### policies.json
1908 ```
1909 {
1910   "policies": {
1911     "DisablePasswordReveal": true | false
1912   }
1913 }
1914 ```
1915 ### DisablePocket
1916 Remove Pocket in the Firefox UI. It does not remove it from the new tab page.
1917
1918 **Compatibility:** Firefox 60, Firefox ESR 60\
1919 **CCK2 Equivalent:** `disablePocket`\
1920 **Preferences Affected:** `extensions.pocket.enabled`
1921
1922 #### Windows (GPO)
1923 ```
1924 Software\Policies\Mozilla\Firefox\DisablePocket = 0x1 | 0x0
1925 ```
1926 #### Windows (Intune)
1927 OMA-URI:
1928 ```
1929 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePocket
1930 ```
1931 Value (string):
1932 ```
1933 <enabled/> or <disabled/>
1934 ```
1935 #### macOS
1936 ```
1937 <dict>
1938   <key>DisablePocket</key>
1939   <true/> | <false/>
1940 </dict>
1941 ```
1942 #### policies.json
1943 ```
1944 {
1945   "policies": {
1946     "DisablePocket": true | false
1947   }
1948 }
1949 ```
1950 ### DisablePrivateBrowsing
1951 Remove access to private browsing.
1952
1953 **Compatibility:** Firefox 60, Firefox ESR 60\
1954 **CCK2 Equivalent:** `disablePrivateBrowsing`\
1955 **Preferences Affected:** N/A
1956
1957 #### Windows (GPO)
1958 ```
1959 Software\Policies\Mozilla\Firefox\DisablePrivateBrowsing = 0x1 | 0x0
1960 ```
1961 #### Windows (Intune)
1962 OMA-URI:
1963 ```
1964 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePrivateBrowsing
1965 ```
1966 Value (string):
1967 ```
1968 <enabled/> or <disabled/>
1969 ```
1970 #### macOS
1971 ```
1972 <dict>
1973   <key>DisablePrivateBrowsing</key>
1974   <true/> | <false/>
1975 </dict>
1976 ```
1977 #### policies.json
1978 ```
1979 {
1980   "policies": {
1981     "DisablePrivateBrowsing": true | false
1982   }
1983 }
1984 ```
1985 ### DisableProfileImport
1986 Disables the "Import data from another browser" option in the bookmarks window.
1987
1988 **Compatibility:** Firefox 60, Firefox ESR 60\
1989 **CCK2 Equivalent:** N/A\
1990 **Preferences Affected:** N/A
1991
1992 #### Windows (GPO)
1993 ```
1994 Software\Policies\Mozilla\Firefox\DisableProfileImport = 0x1 | 0x0
1995 ```
1996 #### Windows (Intune)
1997 OMA-URI:
1998 ```
1999 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableProfileImport
2000 ```
2001 Value (string):
2002 ```
2003 <enabled/> or <disabled/>
2004 ```
2005 #### macOS
2006 ```
2007 <dict>
2008   <key>DisableProfileImport</key>
2009   <true/> | <false/>
2010 </dict>
2011 ```
2012 #### policies.json
2013 ```
2014 {
2015   "policies": {
2016     "DisableProfileImport": true | false
2017   }
2018 }
2019 ```
2020 ### DisableProfileRefresh
2021 Disable the Refresh Firefox button on about:support and support.mozilla.org, as well as the prompt that displays offering to refresh Firefox when you haven't used it in a while.
2022
2023 **Compatibility:** Firefox 60, Firefox ESR 60\
2024 **CCK2 Equivalent:** `disableResetFirefox`\
2025 **Preferences Affected:** `browser.disableResetPrompt`
2026
2027 #### Windows (GPO)
2028 ```
2029 Software\Policies\Mozilla\Firefox\DisableProfileRefresh = 0x1 | 0x0
2030 ```
2031 #### Windows (Intune)
2032 OMA-URI:
2033 ```
2034 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableProfileRefresh
2035 ```
2036 Value (string):
2037 ```
2038 <enabled/> or <disabled/>
2039 ```
2040 #### macOS
2041 ```
2042 <dict>
2043   <key>DisableProfileRefresh</key>
2044   <true/> | <false/>
2045 </dict>
2046 ```
2047 #### policies.json
2048 ```
2049 {
2050   "policies": {
2051     "DisableProfileRefresh": true | false
2052   }
2053 }
2054 ```
2055 ### DisableSafeMode
2056 Disable safe mode within the browser.
2057
2058 On Windows, this disables safe mode via the command line as well.
2059
2060 **Compatibility:** Firefox 60, Firefox ESR 60 (Windows, macOS)\
2061 **CCK2 Equivalent:** `disableSafeMode`\
2062 **Preferences Affected:** N/A
2063
2064 #### Windows (GPO)
2065 ```
2066 Software\Policies\Mozilla\Firefox\DisableSafeMode = 0x1 | 0x0
2067 ```
2068 #### Windows (Intune)
2069 OMA-URI:
2070 ```
2071 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSafeMode
2072 ```
2073 Value (string):
2074 ```
2075 <enabled/> or <disabled/>
2076 ```
2077 #### macOS
2078 ```
2079 <dict>
2080   <key>DisableSafeMode</key>
2081   <true/> | <false/>
2082 </dict>
2083 ```
2084 #### policies.json
2085 ```
2086 {
2087   "policies": {
2088     "DisableSafeMode": true | false
2089   }
2090 }
2091 ```
2092 ### DisableSecurityBypass
2093 Prevent the user from bypassing security in certain cases.
2094
2095 `InvalidCertificate` prevents adding an exception when an invalid certificate is shown.
2096
2097 `SafeBrowsing` prevents selecting "ignore the risk" and visiting a harmful site anyway.
2098
2099 These policies only affect what happens when an error is shown, they do not affect any settings in preferences.
2100
2101 **Compatibility:** Firefox 60, Firefox ESR 60\
2102 **CCK2 Equivalent:** N/A\
2103 **Preferences Affected:** `security.certerror.hideAddException`, `browser.safebrowsing.allowOverride`
2104
2105 #### Windows (GPO)
2106 ```
2107 Software\Policies\Mozilla\Firefox\DisableSecurityBypass\InvalidCertificate = 0x1 | 0x0
2108 Software\Policies\Mozilla\Firefox\DisableSecurityBypass\SafeBrowsing = 0x1 | 0x0
2109 ```
2110 #### Windows (Intune)
2111 OMA-URI:
2112 ```
2113 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/P_DisableSecurityBypass_InvalidCertificate
2114 ```
2115 Value (string):
2116 ```
2117 <enabled/> or <disabled/>
2118 ```
2119 OMA-URI:
2120 ```
2121 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/P_DisableSecurityBypass_SafeBrowsing
2122 ```
2123 Value (string):
2124 ```
2125 <enabled/> or <disabled/>
2126 ```
2127
2128 #### macOS
2129 ```
2130 <dict>
2131   <key>DisableSecurityBypass</key>
2132   <dict>
2133     <key>InvalidCertificate</key>
2134     <true/> | <false/>
2135     <key>SafeBrowsing</key>
2136     <true/> | <false/>
2137   </dict>
2138 </dict>
2139 ```
2140 #### policies.json
2141 ```
2142 {
2143   "policies": {
2144     "DisableSecurityBypass": {
2145       "InvalidCertificate": true | false,
2146       "SafeBrowsing": true | false
2147     }
2148   }
2149 }
2150 ```
2151 ### DisableSetDesktopBackground
2152 Remove the "Set As Desktop Background..." menuitem when right clicking on an image.
2153
2154 **Compatibility:** Firefox 60, Firefox ESR 60\
2155 **CCK2 Equivalent:** `removeSetDesktopBackground`\
2156 **Preferences Affected:** N/A
2157
2158 #### Windows (GPO)
2159 ```
2160 Software\Policies\Mozilla\Firefox\DisableSetDesktopBackground = 0x1 | 0x0
2161 ```
2162 #### Windows (Intune)
2163 OMA-URI:
2164 ```
2165 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSetDesktopBackground
2166 ```
2167 Value (string):
2168 ```
2169 <enabled/> or <disabled/>
2170 ```
2171 #### macOS
2172 ```
2173 <dict>
2174   <key>DisableSetDesktopBackground</key>
2175   <true/> | <false/>
2176 </dict>
2177 ```
2178 #### policies.json
2179 ```
2180 {
2181   "policies": {
2182     "DisableSetDesktopBackground": true | false
2183   }
2184 }
2185 ```
2186 ### DisableSystemAddonUpdate
2187 Prevent system add-ons from being installed or updated.
2188
2189 **Compatibility:** Firefox 60, Firefox ESR 60\
2190 **CCK2 Equivalent:** N/A\
2191 **Preferences Affected:** N/A
2192
2193 #### Windows (GPO)
2194 ```
2195 Software\Policies\Mozilla\Firefox\DisableSystemAddonUpdate = 0x1 | 0x0
2196 ```
2197 #### Windows (Intune)
2198 OMA-URI:
2199 ```
2200 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSystemAddonUpdate
2201 ```
2202 Value (string):
2203 ```
2204 <enabled/> or <disabled/>
2205 ```
2206 #### macOS
2207 ```
2208 <dict>
2209   <key>DisableSystemAddonUpdate</key>
2210   <true/> | <false/>
2211 </dict>
2212 ```
2213 #### policies.json
2214 ```
2215 {
2216   "policies": {
2217     "DisableSystemAddonUpdate": true | false
2218   }
2219 }
2220 ```
2221 ### DisableTelemetry
2222 Prevent the upload of telemetry data.
2223
2224 As of Firefox 83 and Firefox ESR 78.5, local storage of telemetry data is disabled as well.
2225
2226 Mozilla recommends that you do not disable telemetry. Information collected through telemetry helps us build a better product for businesses like yours.
2227
2228 **Compatibility:** Firefox 60, Firefox ESR 60\
2229 **CCK2 Equivalent:** `disableTelemetry`\
2230 **Preferences Affected:** `datareporting.healthreport.uploadEnabled`, `datareporting.policy.dataSubmissionEnabled`, `toolkit.telemetry.archive.enabled`
2231
2232 #### Windows (GPO)
2233 ```
2234 Software\Policies\Mozilla\Firefox\DisableTelemetry = 0x1 | 0x0
2235 ```
2236 #### Windows (Intune)
2237 OMA-URI:
2238 ```
2239 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableTelemetry
2240 ```
2241 Value (string):
2242 ```
2243 <enabled/> or <disabled/>
2244 ```
2245 #### macOS
2246 ```
2247 <dict>
2248   <key>DisableTelemetry</key>
2249   <true/> | <false/>
2250 </dict>
2251 ```
2252 #### policies.json
2253 ```
2254 {
2255   "policies": {
2256     "DisableTelemetry": true | false
2257   }
2258 }
2259 ```
2260 ### DisableThirdPartyModuleBlocking
2261 Do not allow blocking third-party modules from the `about:third-party` page.
2262
2263 This policy only works on Windows through GPO (not policies.json).
2264
2265 **Compatibility:** Firefox 110 (Windows only, GPO only)\
2266 **CCK2 Equivalent:** N/A\
2267 **Preferences Affected:** N/A
2268
2269 #### Windows (GPO)
2270 ```
2271 Software\Policies\Mozilla\Firefox\DisableThirdPartyModuleBlocking = = 0x1 | 0x0
2272 ```
2273 #### Windows (Intune)
2274 OMA-URI:
2275 ```
2276 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableThirdPartyModuleBlocking
2277 ```
2278 Value (string):
2279 ```
2280 <enabled/> or <disabled/>
2281 ```
2282 ### DisplayBookmarksToolbar
2283 Set the initial state of the bookmarks toolbar. A user can still change how it is displayed.
2284
2285 `always` means the bookmarks toolbar is always shown.
2286
2287 `never` means the bookmarks toolbar is not shown.
2288
2289 `newtab` means the bookmarks toolbar is only shown on the new tab page.
2290
2291 **Compatibility:** Firefox 109, Firefox ESR 102.7\
2292 **CCK2 Equivalent:** N/A\
2293 **Preferences Affected:** N/A
2294
2295 #### Windows (GPO)
2296 ```
2297 Software\Policies\Mozilla\Firefox\DisplayBookmarksToolbar = "always", "never", "newtab"
2298 ```
2299 #### Windows (Intune)
2300 OMA-URI:
2301 ```
2302 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisplayBookmarksToolbar_Enum
2303 ```
2304 Value (string):
2305 ```
2306 <enabled/>
2307 <data id="DisplayBookmarksToolbar" value="always | never | newtab"/>
2308 ```
2309 #### macOS
2310 ```
2311 <dict>
2312   <key>DisplayBookmarksToolbar</key>
2313   <string>always | never | newtab</string>
2314 </dict>
2315 ```
2316 #### policies.json
2317 ```
2318 {
2319   "policies": {
2320     "DisplayBookmarksToolbar": "always" | "never" | "newtab"
2321   }
2322 }
2323 ```
2324 ### DisplayMenuBar
2325 Set the state of the menubar.
2326
2327 `always` means the menubar is shown and cannot be hidden.
2328
2329 `never` means the menubar is hidden and cannot be shown.
2330
2331 `default-on` means the menubar is on by default but can be hidden.
2332
2333 `default-off` means the menubar is off by default but can be shown.
2334
2335 **Compatibility:** Firefox 73, Firefox ESR 68.5 (Windows, some Linux)\
2336 **CCK2 Equivalent:** `displayMenuBar`\
2337 **Preferences Affected:** N/A
2338
2339 #### Windows (GPO)
2340 ```
2341 Software\Policies\Mozilla\Firefox\DisplayMenuBar = "always", "never", "default-on", "default-off"
2342 ```
2343 #### Windows (Intune)
2344 OMA-URI:
2345 ```
2346 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisplayMenuBar_Enum
2347 ```
2348 Value (string):
2349 ```
2350 <enabled/>
2351 <data id="DisplayMenuBar" value="always | never | default-on | default-off"/>
2352 ```
2353 #### macOS
2354 ```
2355 <dict>
2356   <key>DisplayMenuBar</key>
2357   <string>always | never | default-on | default-off</string>
2358 </dict>
2359 ```
2360 #### policies.json
2361 ```
2362 {
2363   "policies": {
2364     "DisplayMenuBar": "always", "never", "default-on", "default-off"
2365   }
2366 }
2367 ```
2368 ### DNSOverHTTPS
2369 Configure DNS over HTTPS.
2370
2371 `Enabled` determines whether DNS over HTTPS is enabled
2372
2373 `ProviderURL` is a URL to another provider.
2374
2375 `Locked` prevents the user from changing DNS over HTTPS preferences.
2376
2377 `ExcludedDomains` excludes domains from DNS over HTTPS.
2378
2379 `Fallback` determines whether or not Firefox will use your default DNS resolver if there is a problem with the secure DNS provider.
2380
2381 **Compatibility:** Firefox 63, Firefox ESR 68 (ExcludedDomains added in 75/68.7) (Fallback added in 124)\
2382 **CCK2 Equivalent:** N/A\
2383 **Preferences Affected:** `network.trr.mode`, `network.trr.uri`
2384
2385 #### Windows (GPO)
2386 ```
2387 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\Enabled = 0x1 | 0x0
2388 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\ProviderURL = "URL_TO_ALTERNATE_PROVIDER"
2389 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\Locked = 0x1 | 0x0
2390 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\ExcludedDomains\1 = "example.com"
2391 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\Fallback = 0x1 | 0x0
2392 ```
2393 #### Windows (Intune)
2394 OMA-URI:
2395 ```
2396 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_Enabled
2397 ```
2398 Value (string):
2399 ```
2400 <enabled/> or <disabled/>
2401 ```
2402 OMA-URI:
2403 ```
2404 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_ProviderURL
2405 ```
2406 Value (string):
2407 ```
2408 <enabled/>
2409 <data id="String" value="URL_TO_ALTERNATE_PROVIDER"/>
2410 ```
2411 OMA-URI:
2412 ```
2413 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_Locked
2414 ```
2415 Value (string):
2416 ```
2417 <enabled/> or <disabled/>
2418 ```
2419 OMA-URI:
2420 ```
2421 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_ExcludedDomains
2422 ```
2423 Value (string):
2424 ```
2425 <enabled/>
2426 <data id="List" value="1&#xF000;example.com"/>
2427 ```
2428 OMA-URI:
2429 ```
2430 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_Fallback
2431 ```
2432 Value (string):
2433 ```
2434 <enabled/> or <disabled/>
2435 ```
2436 #### macOS
2437 ```
2438 <dict>
2439   <key>DNSOverHTTPS</key>
2440   <dict>
2441     <key>Enabled</key>
2442     <true/> | <false/>
2443     <key>ProviderURL</key>
2444     <string>URL_TO_ALTERNATE_PROVIDER</string>
2445     <key>Locked</key>
2446     <true/> | <false/>
2447     <key>ExcludedDomains</key>
2448     <array>
2449       <string>example.com</string>
2450     </array>
2451     <key>Fallback</key>
2452     <true/> | <false/>
2453   </dict>
2454 </dict>
2455 ```
2456 #### policies.json
2457 ```
2458 {
2459   "policies": {
2460     "DNSOverHTTPS": {
2461       "Enabled":  true | false,
2462       "ProviderURL": "URL_TO_ALTERNATE_PROVIDER",
2463       "Locked": true | false,
2464       "ExcludedDomains": ["example.com"],
2465       "Fallback": true | false,
2466     }
2467   }
2468 }
2469 ```
2470 ### DontCheckDefaultBrowser
2471 Don't check if Firefox is the default browser at startup.
2472
2473 **Compatibility:** Firefox 60, Firefox ESR 60\
2474 **CCK2 Equivalent:** `dontCheckDefaultBrowser`\
2475 **Preferences Affected:** `browser.shell.checkDefaultBrowser`
2476
2477 #### Windows (GPO)
2478 ```
2479 Software\Policies\Mozilla\Firefox\DontCheckDefaultBrowser = 0x1 | 0x0
2480 ```
2481 #### Windows (Intune)
2482 OMA-URI:
2483 ```
2484 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DontCheckDefaultBrowser
2485 ```
2486 Value (string):
2487 ```
2488 <enabled/> or <disabled/>
2489 ```
2490 #### macOS
2491 ```
2492 <dict>
2493   <key>DontCheckDefaultBrowser</key>
2494   <true/> | <false/>
2495 </dict>
2496 ```
2497 #### policies.json
2498 ```
2499 {
2500   "policies": {
2501     "DontCheckDefaultBrowser": true | false
2502   }
2503 }
2504 ```
2505 ### DownloadDirectory
2506 Set and lock the download directory.
2507
2508 You can use ${home} for the native home directory.
2509
2510 **Compatibility:** Firefox 68, Firefox ESR 68\
2511 **CCK2 Equivalent:** N/A\
2512 **Preferences Affected:** `browser.download.dir`, `browser.download.folderList`, `browser.download.useDownloadDir`
2513
2514 #### Windows (GPO)
2515 ```
2516 Software\Policies\Mozilla\Firefox\DownloadDirectory = "${home}\Downloads"
2517 ```
2518 #### Windows (Intune)
2519 OMA-URI:
2520 ```
2521 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DownloadDirectory
2522 ```
2523 Value (string):
2524 ```
2525 <enabled/>
2526 <data id="Preferences_String" value="${home}\Downloads"/>
2527 ```
2528 #### macOS
2529 ```
2530 <dict>
2531   <key>DownloadDirectory</key>
2532   <string>${home}/Downloads</string>
2533 </dict>
2534 ```
2535 #### policies.json (macOS and Linux)
2536 ```
2537 {
2538   "policies": {
2539     "DownloadDirectory": "${home}/Downloads"
2540 }
2541 ```
2542 #### policies.json (Windows)
2543 ```
2544 {
2545   "policies": {
2546     "DownloadDirectory": "${home}\\Downloads"
2547 }
2548 ```
2549 ### EnableTrackingProtection
2550 Configure tracking protection.
2551
2552 If this policy is not configured, tracking protection is not enabled by default in the browser, but it is enabled by default in private browsing and the user can change it.
2553
2554 If `Value` is set to false, tracking protection is disabled and locked in both the regular browser and private browsing.
2555
2556 If `Value` is set to true, tracking protection is enabled by default in both the regular browser and private browsing and the `Locked` value determines whether or not a user can change it.
2557
2558 If `Cryptomining` is set to true, cryptomining scripts on websites are blocked.
2559
2560 If `Fingerprinting` is set to true, fingerprinting scripts on websites are blocked.
2561
2562 If `EmailTracking` is set to true, hidden email tracking pixels and scripts on websites are blocked. (Firefox 112)
2563
2564 `Exceptions` are origins for which tracking protection is not enabled.
2565
2566 **Compatibility:** Firefox 60, Firefox ESR 60 (Cryptomining and Fingerprinting added in 70/68.2, Exceptions added in 73/68.5)\
2567 **CCK2 Equivalent:** N/A\
2568 **Preferences Affected:** `privacy.trackingprotection.enabled`, `privacy.trackingprotection.pbmode.enabled`, `privacy.trackingprotection.cryptomining.enabled`, `privacy.trackingprotection.fingerprinting.enabled`
2569
2570 #### Windows (GPO)
2571 ```
2572 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Value = 0x1 | 0x0
2573 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Locked = 0x1 | 0x0
2574 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Cryptomining = 0x1 | 0x0
2575 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Fingerprinting = 0x1 | 0x0
2576 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Exceptions\1 = "https://example.com"
2577 ```
2578 #### Windows (Intune)
2579 OMA-URI:
2580 ```
2581 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/A_TrackingProtection_Value
2582 ```
2583 Value (string):
2584 ```
2585 <enabled/> or <disabled/>
2586 ```
2587 OMA-URI:
2588 ```
2589 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/B_TrackingProtection_Cryptomining
2590 ```
2591 Value (string):
2592 ```
2593 <enabled/> or <disabled/>
2594 ```
2595 OMA-URI:
2596 ```
2597 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/C_TrackingProtection_Fingerprinting
2598 ```
2599 Value (string):
2600 ```
2601 <enabled/> or <disabled/>
2602 ```
2603 OMA-URI:
2604 ```
2605 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/D_TrackingProtection_Exceptions
2606 ```
2607 Value (string):
2608 ```
2609 <enabled/>
2610 <data id="TrackingProtection_Exceptions" value="1&#xF000;https://example.com"/>
2611 ```
2612 OMA-URI:
2613 ```
2614 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/E_TrackingProtection_Locked
2615 ```
2616 Value (string):
2617 ```
2618 <enabled/> or <disabled/>
2619 ```
2620 #### macOS
2621 ```
2622 <dict>
2623   <key>EnableTrackingProtection</key>
2624   <dict>
2625     <key>Value</key>
2626     <true/> | <false/>
2627     <key>Locked</key>
2628     <true/> | <false/>
2629     <key>Cryptomining</key>
2630     <true/> | <false/>
2631     <key>Fingerprinting</key>
2632     <true/> | <false/>
2633     <key>Exceptions</key>
2634     <array>
2635       <string>https://example.com</string>
2636     </array>
2637   </dict>
2638 </dict>
2639 ```
2640 #### policies.json
2641 ```
2642 {
2643   "policies": {
2644     "EnableTrackingProtection": {
2645       "Value": true | false,
2646       "Locked": true | false,
2647       "Cryptomining": true | false,
2648       "Fingerprinting": true | false,
2649       "Exceptions": ["https://example.com"]
2650     }
2651   }
2652 }
2653 ```
2654 ### EncryptedMediaExtensions
2655 Enable or disable Encrypted Media Extensions and optionally lock it.
2656
2657 If `Enabled` is set to false, encrypted media extensions (like Widevine) are not downloaded by Firefox unless the user consents to installing them.
2658
2659 If `Locked` is set to true and `Enabled` is set to false, Firefox will not download encrypted media extensions (like Widevine) or ask the user to install them.
2660
2661 **Compatibility:** Firefox 77, Firefox ESR 68.9\
2662 **CCK2 Equivalent:** N/A\
2663 **Preferences Affected:** `media.eme.enabled`
2664
2665 #### Windows (GPO)
2666 ```
2667 Software\Policies\Mozilla\Firefox\EncryptedMediaExtensions\Enabled = 0x1 | 0x0
2668 Software\Policies\Mozilla\Firefox\EncryptedMediaExtensions\Locked = 0x1 | 0x0
2669 ```
2670 #### Windows (Intune)
2671 OMA-URI:
2672 ```
2673 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~EncryptedMediaExtensions/EncryptedMediaExtensions_Enabled
2674 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~EncryptedMediaExtensions/EncryptedMediaExtensions_Locked
2675 ```
2676 Value (string):
2677 ```
2678 <enabled/>or <disabled/>
2679 ```
2680 #### macOS
2681 ```
2682 <dict>
2683   <key>EncryptedMediaExtensions</key>
2684   <dict>
2685     <key>Enabled</key>
2686     <true/> | <false/>
2687     <key>Locked</key>
2688     <true/> | <false/>
2689   </dict>
2690 </dict>
2691 ```
2692 #### policies.json
2693 ```
2694 {
2695   "policies": {
2696     "EncryptedMediaExtensions": {
2697       "Enabled": true | false,
2698       "Locked": true | false
2699     }
2700   }
2701 }
2702 ```
2703 ### EnterprisePoliciesEnabled
2704 Enable policy support on macOS.
2705
2706 **Compatibility:** Firefox 63, Firefox ESR 60.3 (macOS only)\
2707 **CCK2 Equivalent:** N/A\
2708 **Preferences Affected:** N/A
2709
2710 #### macOS
2711 ```
2712 <dict>
2713   <key>EnterprisePoliciesEnabled</key>
2714   <true/>
2715 </dict>
2716 ```
2717 ### ExemptDomainFileTypePairsFromFileTypeDownloadWarnings
2718
2719 Disable warnings based on file extension for specific file types on domains.
2720
2721 This policy is based on the [Chrome policy](https://chromeenterprise.google/policies/#ExemptDomainFileTypePairsFromFileTypeDownloadWarnings) of the same name.
2722
2723 Important: The documentation for the policy for both Edge and Chrome is incorrect. The ```domains``` value must be a domain, not a URL pattern. Also, we do not support using ```*``` to mean all domains.
2724
2725 **Compatibility:** Firefox 102\
2726 **CCK2 Equivalent:** N/A\
2727 **Preferences Affected:** N/A
2728
2729 #### Windows (GPO)
2730 Software\Policies\Mozilla\Firefox\ExemptDomainFileTypePairsFromFileTypeDownloadWarnings (REG_MULTI_SZ) =
2731 ```
2732 [
2733   {
2734      "file_extension": "jnlp",
2735      "domains": ["example.com"]
2736   }
2737 ]
2738 ```
2739 #### Windows (Intune)
2740 OMA-URI:
2741 ```
2742 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/ExemptDomainFileTypePairsFromFileTypeDownloadWarnings
2743 ```
2744 Value (string):
2745 ```
2746 <enabled/>
2747 <data id="JSON" value='
2748 [
2749   {
2750      "file_extension": "jnlp",
2751      "domains": ["example.com"]
2752   }
2753 ]
2754 '/>
2755 ```
2756 #### macOS
2757 ```
2758 <dict>
2759   <key>ExemptDomainFileTypePairsFromFileTypeDownloadWarnings</key>
2760   <array>
2761     <dict>
2762       <key>file_extension</key>
2763       <string>jnlp</string>
2764       <key>domains</key>
2765       <array>
2766         <string>example.com</string>
2767       </array>
2768     </dict>
2769   </array>
2770 </dict>
2771 ```
2772 #### policies.json
2773 ```
2774 {
2775   "policies": {
2776     "ExemptDomainFileTypePairsFromFileTypeDownloadWarnings": [{
2777       "file_extension": "jnlp",
2778       "domains": ["example.com"]
2779     }]
2780   }
2781 }
2782 ```
2783 ### Extensions
2784 Control the installation, uninstallation and locking of extensions.
2785
2786 We strongly recommend that you use the **[`ExtensionSettings`](#extensionsettings)** policy. It has the same functionality and adds more. It does not support native paths, though, so you'll have to use file:/// URLs.
2787
2788 This method will be deprecated in the near future.
2789
2790 `Install` is a list of URLs or native paths for extensions to be installed.
2791
2792 `Uninstall` is a list of extension IDs that should be uninstalled if found.
2793
2794 `Locked` is a list of extension IDs that the user cannot disable or uninstall.
2795
2796 **Compatibility:** Firefox 60, Firefox ESR 60\
2797 **CCK2 Equivalent:** `addons`\
2798 **Preferences Affected:** N/A
2799
2800 #### Windows (GPO)
2801 ```
2802 Software\Policies\Mozilla\Firefox\Extensions\Install\1 = "https://addons.mozilla.org/firefox/downloads/somefile.xpi"
2803 Software\Policies\Mozilla\Firefox\Extensions\Install\2 = "//path/to/xpi"
2804 Software\Policies\Mozilla\Firefox\Extensions\Uninstall\1 = "bad_addon_id@mozilla.org"
2805 Software\Policies\Mozilla\Firefox\Extensions\Locked\1 = "addon_id@mozilla.org"
2806 ```
2807 #### Windows (Intune)
2808 OMA-URI:
2809 ```
2810 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/Extensions_Install
2811 ```
2812 Value (string):
2813 ```
2814 <enabled/>
2815 <data id="Extensions" value="1&#xF000;https://addons.mozilla.org/firefox/downloads/somefile.xpi&#xF000;2&#xF000;//path/to/xpi"/>
2816 ```
2817 OMA-URI:
2818 ```
2819 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/Extensions_Uninstall
2820 ```
2821 Value (string):
2822 ```
2823 <enabled/>
2824 <data id="Extensions" value="1&#xF000;bad_addon_id@mozilla.org"/>
2825 ```
2826 OMA-URI:
2827 ```
2828 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/Extensions_Locked
2829 ```
2830 Value (string):
2831 ```
2832 <enabled/>
2833 <data id="Extensions" value="1&#xF000;addon_id@mozilla.org"/>
2834 ```
2835 #### macOS
2836 ```
2837 <dict>
2838   <key>Extensions</key>
2839   <dict>
2840     <key>Install</key>
2841     <array>
2842       <string>https://addons.mozilla.org/firefox/downloads/somefile.xpi</string>
2843       <string>//path/to/xpi</string>
2844     </array>
2845     <key>Uninstall</key>
2846     <array>
2847       <string>bad_addon_id@mozilla.org</string>
2848     </array>
2849     <key>Locked</key>
2850     <array>
2851       <string>addon_id@mozilla.org</string>
2852     </array>
2853   </dict>
2854 </dict>
2855 ```
2856 #### policies.json
2857 ```
2858 {
2859   "policies": {
2860     "Extensions": {
2861       "Install": ["https://addons.mozilla.org/firefox/downloads/somefile.xpi", "//path/to/xpi"],
2862       "Uninstall": ["bad_addon_id@mozilla.org"],
2863       "Locked":  ["addon_id@mozilla.org"]
2864     }
2865   }
2866 }
2867 ```
2868 ### ExtensionSettings
2869 Manage all aspects of extensions. This policy is based heavily on the [Chrome policy](https://dev.chromium.org/administrators/policy-list-3/extension-settings-full) of the same name.
2870
2871 This policy maps an extension ID to its configuration. With an extension ID, the configuration will be applied to the specified extension only. A default configuration can be set for the special ID "*", which will apply to all extensions that don't have a custom configuration set in this policy.
2872
2873 To obtain an extension ID, install the extension and go to about:support. You will see the ID in the Extensions section. I've also created an extension that makes it easy to find the ID of extensions on AMO. You can download it [here](https://github.com/mkaply/queryamoid/releases/tag/v0.1).
2874
2875 The configuration for each extension is another dictionary that can contain the fields documented below.
2876
2877 | Name | Description |
2878 | --- | --- |
2879 | `installation_mode` | Maps to a string indicating the installation mode for the extension. The valid strings are `allowed`,`blocked`,`force_installed`, and `normal_installed`.
2880 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`allowed` | Allows the extension to be installed by the user. This is the default behavior. There is no need for an install_url; it will automatically be allowed based on the ID.
2881 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`blocked`| Blocks installation of the extension and removes it from the device if already installed.
2882 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`force_installed`| The extension is automatically installed and can't be removed by the user. This option is not valid for the default configuration and requires an install_url.
2883 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`normal_installed`| The extension is automatically installed but can be disabled by the user. This option is not valid for the default configuration and requires an install_url.
2884 | `install_url`| Maps to a URL indicating where Firefox can download a force_installed or normal_installed extension.  If installing from the local file system, use a [```file:///``` URL](https://en.wikipedia.org/wiki/File_URI_scheme). If installing from the addons.mozilla.org, use the following URL (substituting SHORT_NAME from the URL on AMO), https://addons.mozilla.org/firefox/downloads/latest/SHORT_NAME/latest.xpi. Languages packs are available from https://releases.mozilla.org/pub/firefox/releases/VERSION/PLATFORM/xpi/LANGUAGE.xpi. If you need to update the extension, you can change the name of the extension and it will be automatically updated. Extensions installed from file URLs will additional be updated when their internal version changes.
2885 | `install_sources` | A list of sources from which installing extensions is allowed using URL match patterns. **This is unnecessary if you are only allowing the installation of certain extensions by ID.** Each item in this list is an extension-style match pattern. Users will be able to easily install items from any URL that matches an item in this list. Both the location of the *.xpi file and the page where the download is started from (i.e.  the referrer) must be allowed by these patterns. This setting can be used only for the default configuration.
2886 | `allowed_types` | This setting whitelists the allowed types of extension/apps that can be installed in Firefox. The value is a list of strings, each of which should be one of the following: "extension", "theme", "dictionary", "locale" This setting can be used only for the default configuration.
2887 | `blocked_install_message` | This maps to a string specifying the error message to display to users if they're blocked from installing an extension. This setting allows you to append text to the generic error message displayed when the extension is blocked. This could be be used to direct users to your help desk, explain why a particular extension is blocked, or something else. This setting can be used only for the default configuration.
2888 | `restricted_domains` | An array of domains on which content scripts can't be run. This setting can be used only for the default configuration.
2889 | `updates_disabled` | (Firefox 89, Firefox ESR 78.11) Boolean that indicates whether or not to disable automatic updates for an individual extension.
2890 | `default_area` | (Firefox 113) String that indicates where to place the extension icon by default. Possible values are `navbar` and `menupanel`.
2891
2892 **Compatibility:** Firefox 69, Firefox ESR 68.1 (As of Firefox 85, Firefox ESR 78.7, installing a theme makes it the default.)\
2893 **CCK2 Equivalent:** N/A\
2894 **Preferences Affected:** N/A
2895
2896 #### Windows (GPO)
2897 Software\Policies\Mozilla\Firefox\ExtensionSettings (REG_MULTI_SZ) =
2898 ```
2899 {
2900   "*": {
2901     "blocked_install_message": "Custom error message.",
2902     "install_sources": ["https://yourwebsite.com/*"],
2903     "installation_mode": "blocked",
2904     "allowed_types": ["extension"]
2905   },
2906   "uBlock0@raymondhill.net": {
2907     "installation_mode": "force_installed",
2908     "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
2909   },
2910   "https-everywhere@eff.org": {
2911     "installation_mode": "allowed",
2912     "updates_disabled": false
2913   }
2914 }
2915 ```
2916 #### Windows (Intune)
2917 OMA-URI:
2918 ```
2919 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/ExtensionSettings
2920 ```
2921 Value (string):
2922 ```
2923 <enabled/>
2924 <data id="ExtensionSettings" value='
2925 {
2926   "*": {
2927     "blocked_install_message": "Custom error message.",
2928     "install_sources": ["https://yourwebsite.com/*"],
2929     "installation_mode": "blocked",
2930     "allowed_types": ["extension"]
2931   },
2932   "uBlock0@raymondhill.net": {
2933     "installation_mode": "force_installed",
2934     "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
2935   },
2936     "https-everywhere@eff.org": {
2937     "installation_mode": "allowed",
2938     "updates_disabled": false
2939   }
2940 }'/>
2941 ```
2942 #### macOS
2943 ```
2944 <dict>
2945   <key>ExtensionSettings</key>
2946   <dict>
2947     <key>*</key>
2948     <dict>
2949       <key>blocked_install_message</key>
2950       <string>Custom error message.</string>
2951       <key>install_sources</key>
2952       <array>
2953         <string>"https://yourwebsite.com/*"</string>
2954       </array>
2955       <key>installation_mode</key>
2956       <string>blocked</string>
2957       <key>allowed_types</key>
2958       <array>
2959         <string>extension</string>
2960       </array>
2961     </dict>
2962     <key>uBlock0@raymondhill.net</key>
2963     <dict>
2964       <key>installation_mode</key>
2965       <string>force_installed</string>
2966       <key>install_url</key>
2967       <string>https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi</string>
2968     </dict>
2969     <key>https-everywhere@eff.org</key>
2970     <dict>
2971       <key>installation_mode</key>
2972       <string>allowed</string>
2973       <key>updates_disabled</key>
2974       <true/> | <false/>
2975     </dict>
2976   </dict>
2977 </dict>
2978 ```
2979 #### policies.json
2980 ```
2981 {
2982   "policies": {
2983     "ExtensionSettings": {
2984       "*": {
2985         "blocked_install_message": "Custom error message.",
2986         "install_sources": ["https://yourwebsite.com/*"],
2987         "installation_mode": "blocked",
2988         "allowed_types": ["extension"]
2989       },
2990       "uBlock0@raymondhill.net": {
2991         "installation_mode": "force_installed",
2992         "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
2993       },
2994       "https-everywhere@eff.org": {
2995         "installation_mode": "allowed",
2996         "updates_disabled": false
2997       }
2998     }
2999   }
3000 }
3001 ```
3002 ### ExtensionUpdate
3003 Control extension updates.
3004
3005 **Compatibility:** Firefox 67, Firefox ESR 60.7\
3006 **CCK2 Equivalent:** N/A\
3007 **Preferences Affected:** `extensions.update.enabled`
3008
3009 #### Windows (GPO)
3010 ```
3011 Software\Policies\Mozilla\Firefox\ExtensionUpdate = 0x1 | 0x0
3012 ```
3013 #### Windows (Intune)
3014 OMA-URI:
3015 ```
3016 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/ExtensionUpdate
3017 ```
3018 Value (string):
3019 ```
3020 <enabled/> or <disabled/>
3021 ```
3022 #### macOS
3023 ```
3024 <dict>
3025   <key>ExtensionUpdate</key>
3026   <true/> | <false/>
3027 </dict>
3028 ```
3029 #### policies.json
3030 ```
3031 {
3032   "policies": {
3033     "ExtensionUpdate": true | false
3034   }
3035 }
3036 ```
3037 ### FirefoxHome
3038 Customize the Firefox Home page.
3039
3040 **Compatibility:** Firefox 68, Firefox ESR 68 (SponsoredTopSites and SponsoredPocket were added in Firefox 95, Firefox ESR 91.4, Snippets was deprecated in Firefox 122)
3041 **CCK2 Equivalent:** N/A\
3042 **Preferences Affected:** `browser.newtabpage.activity-stream.showSearch`, `browser.newtabpage.activity-stream.feeds.topsites`, `browser.newtabpage.activity-stream.feeds.section.highlights`, `browser.newtabpage.activity-stream.feeds.section.topstories`, `browser.newtabpage.activity-stream.feeds.snippets`, `browser.newtabpage.activity-stream.showSponsoredTopSites`, `browser.newtabpage.activity-stream.showSponsored`
3043
3044 #### Windows (GPO)
3045 ```
3046 Software\Policies\Mozilla\Firefox\FirefoxHome\Search = 0x1 | 0x0
3047 Software\Policies\Mozilla\Firefox\FirefoxHome\TopSites = 0x1 | 0x0
3048 Software\Policies\Mozilla\Firefox\FirefoxHome\SponsoredTopSites = 0x1 | 0x0
3049 Software\Policies\Mozilla\Firefox\FirefoxHome\Highlights = 0x1 | 0x0
3050 Software\Policies\Mozilla\Firefox\FirefoxHome\Pocket = 0x1 | 0x0
3051 Software\Policies\Mozilla\Firefox\FirefoxHome\SponsoredPocket = 0x1 | 0x0
3052 Software\Policies\Mozilla\Firefox\FirefoxHome\Snippets = 0x1 | 0x0
3053 Software\Policies\Mozilla\Firefox\FirefoxHome\Locked = 0x1 | 0x0
3054 ```
3055 #### Windows (Intune)
3056 OMA-URI:
3057 ```
3058 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/CustomizeFirefoxHome
3059 ```
3060 Value (string):
3061 ```
3062 <enabled/>
3063 <data id="FirefoxHome_Search"  value="true | false"/>
3064 <data id="FirefoxHome_TopSites"  value="true | false"/>
3065 <data id="FirefoxHome_SponsoredTopSites"  value="true | false"/>
3066 <data id="FirefoxHome_Highlights"  value="true | false"/>
3067 <data id="FirefoxHome_Pocket"  value="true | false"/>
3068 <data id="FirefoxHome_SponsoredPocket"  value="true | false"/>
3069 <data id="FirefoxHome_Snippets"  value="true | false"/>
3070 <data id="FirefoxHome_Locked"  value="true | false"/>
3071 ```
3072 #### macOS
3073 ```
3074 <dict>
3075   <key>FirefoxHome</key>
3076   <dict>
3077     <key>Search</key>
3078     <true/> | <false/>
3079     <key>TopSites</key>
3080     <true/> | <false/>
3081     <key>SponsoredTopSites</key>
3082     <true/> | <false/>
3083     <key>Highlights</key>
3084     <true/> | <false/>
3085     <key>Pocket</key>
3086     <true/> | <false/>
3087     <key>SponsoredPocket</key>
3088     <true/> | <false/>
3089     <key>Snippets</key>
3090     <true/> | <false/>
3091     <key>Locked</key>
3092     <true/> | <false/>
3093   </dict>
3094 </dict>
3095 ```
3096 #### policies.json
3097 ```
3098 {
3099   "policies": {
3100     "FirefoxHome": {
3101       "Search": true | false,
3102       "TopSites": true | false,
3103       "SponsoredTopSites": true | false,
3104       "Highlights": true | false,
3105       "Pocket": true | false,
3106       "SponsoredPocket": true | false,
3107       "Snippets": true | false,
3108       "Locked": true | false
3109     }
3110   }
3111 }
3112 ```
3113 ### FirefoxSuggest
3114 Customize Firefox Suggest (US only).
3115
3116 **Compatibility:** Firefox 118, Firefox ESR 115.3.
3117 **CCK2 Equivalent:** N/A\
3118 **Preferences Affected:** `browser.urlbar.suggest.quicksuggest.nonsponsored`, `browser.urlbar.suggest.quicksuggest.sponsored`, `browser.urlbar.quicksuggest.dataCollection.enabled`
3119
3120 #### Windows (GPO)
3121 ```
3122 Software\Policies\Mozilla\Firefox\FirefoxSuggest\WebSuggestions = 0x1 | 0x0
3123 Software\Policies\Mozilla\Firefox\FirefoxSuggest\SponsoredSuggestions = 0x1 | 0x0
3124 Software\Policies\Mozilla\Firefox\FirefoxSuggest\ImproveSuggest = 0x1 | 0x0
3125 Software\Policies\Mozilla\Firefox\FirefoxSuggest\Locked = 0x1 | 0x0
3126 ```
3127 #### Windows (Intune)
3128 OMA-URI:
3129 ```
3130 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~FirefoxSuggest/WebSuggestions
3131 ```
3132 Value (string):
3133 ```
3134 <enabled/> or <disabled/>
3135 ```
3136 OMA-URI:
3137 ```
3138 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~FirefoxSuggest/SponsoredSuggestions
3139 ```
3140 Value (string):
3141 ```
3142 <enabled/> or <disabled/>
3143 ```
3144 OMA-URI:
3145 ```
3146 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~FirefoxSuggest/ImproveSuggest
3147 ```
3148 Value (string):
3149 ```
3150 <enabled/> or <disabled/>
3151 ```
3152 OMA-URI:
3153 ```
3154 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~FirefoxSuggest/Locked
3155 ```
3156 Value (string):
3157 ```
3158 <enabled/> or <disabled/>
3159 ```
3160 #### macOS
3161 ```
3162 <dict>
3163   <key>FirefoxSuggest</key>
3164   <dict>
3165     <key>WebSuggestions</key>
3166     <true/> | <false/>
3167     <key>SponsoredSuggestions</key>
3168     <true/> | <false/>
3169     <key>ImproveSuggest</key>
3170     <true/> | <false/>
3171     <key>Locked</key>
3172     <true/> | <false/>
3173   </dict>
3174 </dict>
3175 ```
3176 #### policies.json
3177 ```
3178 {
3179   "policies": {
3180     "FirefoxSuggest": {
3181       "WebSuggestions": true | false,
3182       "SponsoredSuggestions": true | false,
3183       "ImproveSuggest": true | false,
3184       "Locked": true | false
3185     }
3186   }
3187 }
3188 ```
3189 ### GoToIntranetSiteForSingleWordEntryInAddressBar
3190 Whether to always go through the DNS server before sending a single word search string to a search engine.
3191
3192 If the site exists, it will navigate to the website. If the intranet responds with a 404, the page will show a 404. If the intranet does not respond, the browser will attempt a search.
3193
3194 The second result in the URL bar will be a search result to allow users to conduct a web search exactly as it was entered.
3195
3196 If instead you would like to enable the ability to have your domain appear as a valid URL and to disallow the browser from ever searching that term using the first result that matches it, add the pref `browser.fixup.domainwhitelist.YOUR_DOMAIN` (where `YOUR_DOMAIN` is the name of the domain you'd like to add), and set the pref to `true`. The URL bar will then suggest `YOUR_DOMAIN` when the user fully types `YOUR_DOMAIN`. If the user attempts to load that domain and it fails to load, it will show an "Unable to connect" error page.
3197
3198 You can also whitelist a domain suffix that is not part of the [Public Suffix List](https://publicsuffix.org/) by adding the pref `browser.fixup.domainsuffixwhitelist.YOUR_DOMAIN_SUFFIX` with a value of `true`.
3199
3200 Additionally, if you want users to see a "Did you mean to go to 'YOUR_DOMAIN'" prompt below the URL bar if they land on a search results page instead of an intranet domain that provides a response, set the pref `browser.urlbar.dnsResolveSingleWordsAfterSearch` to `1`. Enabling this will cause the browser to commit a DNS check after every single word search. If the browser receives a response from the intranet, a prompt will ask the user if they'd like to instead navigate to `YOUR_DOMAIN`. If the user presses the **yes** button, `browser.fixup.domainwhitelist.YOUR_DOMAIN` will be set to `true`.
3201
3202 **Compatibility:** Firefox 104, Firefox ESR 102.2\
3203 **CCK2 Equivalent:** `N/A`\
3204 **Preferences Affected:** `browser.fixup.dns_first_for_single_words`
3205
3206 #### Windows (GPO)
3207 ```
3208 Software\Policies\Mozilla\Firefox\GoToIntranetSiteForSingleWordEntryInAddressBar = 0x1 | 0x0
3209 ```
3210 #### Windows (Intune)
3211 OMA-URI:
3212 ```
3213 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/GoToIntranetSiteForSingleWordEntryInAddressBar
3214 ```
3215 Value (string):
3216 ```
3217 <enabled/> or <disabled/>
3218 ```
3219 #### macOS
3220 ```
3221 <dict>
3222   <key>GoToIntranetSiteForSingleWordEntryInAddressBar</key>
3223   <true/> | <false/>
3224 </dict>
3225 ```
3226 #### policies.json
3227 ```
3228 {
3229   "policies": {
3230     "GoToIntranetSiteForSingleWordEntryInAddressBar": true | false
3231   }
3232 }
3233 ```
3234 ### Handlers
3235 Configure default application handlers. This policy is based on the internal format of `handlers.json`.
3236
3237 You can configure handlers based on a mime type (`mimeTypes`), a file's extension (`extensions`), or a protocol (`schemes`).
3238
3239 Within each handler type, you specify the given mimeType/extension/scheme as a key and use the following subkeys to describe how it is handled.
3240
3241 | Name | Description |
3242 | --- | --- |
3243 | `action`| Can be either `saveToDisk`, `useHelperApp`, `useSystemDefault`.
3244 | `ask` | If `true`, the user is asked if what they want to do with the file. If `false`, the action is taken without user intervention.
3245 | `handlers` | An array of handlers with the first one being the default. If you don't want to have a default handler, use an empty object for the first handler. Choose between path or uriTemplate.
3246 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`name` | The display name of the handler (might not be used).
3247 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`path`| The native path to the executable to be used.
3248 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`uriTemplate`| A url to a web based application handler. The URL must be https and contain a %s to be used for substitution.
3249
3250 **Compatibility:** Firefox 78, Firefox ESR 78\
3251 **CCK2 Equivalent:** N/A\
3252 **Preferences Affected:** N/A
3253
3254 #### Windows (GPO)
3255 Software\Policies\Mozilla\Firefox\Handlers (REG_MULTI_SZ) =
3256 ```
3257 {
3258   "mimeTypes": {
3259     "application/msword": {
3260       "action": "useSystemDefault",
3261       "ask": true | false
3262     }
3263   },
3264   "schemes": {
3265     "mailto": {
3266       "action": "useHelperApp",
3267       "ask": true | false,
3268       "handlers": [{
3269         "name": "Gmail",
3270         "uriTemplate": "https://mail.google.com/mail/?extsrc=mailto&url=%s"
3271       }]
3272     }
3273   },
3274   "extensions": {
3275     "pdf": {
3276       "action": "useHelperApp",
3277       "ask": true | false,
3278       "handlers": [{
3279         "name": "Adobe Acrobat",
3280         "path": "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32.exe"
3281       }]
3282     }
3283   }
3284 }
3285 ```
3286 #### Windows (Intune)
3287 OMA-URI:
3288 ```
3289 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Handlers
3290 ```
3291 Value (string):
3292 ```
3293 <enabled/>
3294 <data id="Handlers" value='
3295 {
3296   "mimeTypes": {
3297     "application/msword": {
3298       "action": "useSystemDefault",
3299       "ask": true | false
3300     }
3301   },
3302   "schemes": {
3303     "mailto": {
3304       "action": "useHelperApp",
3305       "ask": true | false,
3306       "handlers": [{
3307         "name": "Gmail",
3308         "uriTemplate": "https://mail.google.com/mail/?extsrc=mailto&amp;url=%s"
3309       }]
3310     }
3311   },
3312   "extensions": {
3313     "pdf": {
3314       "action": "useHelperApp",
3315       "ask": true | false,
3316       "handlers": [{
3317         "name": "Adobe Acrobat",
3318         "path": "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32.exe"
3319       }]
3320     }
3321   }
3322 }
3323 '/>
3324 ```
3325 #### macOS
3326 ```
3327 <dict>
3328   <key>Handlers</key>
3329   <dict>
3330     <key>mimeTypes</key>
3331     <dict>
3332       <key>application/msword</key>
3333       <dict>
3334         <key>action</key>
3335         <string>useSystemDefault</string>
3336         <key>ask</key>
3337         <true/> | <false/>
3338       </dict>
3339     </dict>
3340     <key>schemes</key>
3341     <dict>
3342       <key>mailto</key>
3343       <dict>
3344         <key>action</key>
3345         <string>useHelperApp</string>
3346         <key>ask</key>
3347         <true/> | <false/>
3348         <key>handlers</key>
3349         <array>
3350           <dict>
3351             <key>name</key>
3352             <string>Gmail</string>
3353             <key>uriTemplate</key>
3354             <string>https://mail.google.com/mail/?extsrc=mailto&url=%s</string>
3355           </dict>
3356         </array>
3357       </dict>
3358     </dict>
3359     <key>extensions</key>
3360     <dict>
3361       <key>pdf</key>
3362       <dict>
3363         <key>action</key>
3364         <string>useHelperApp</string>
3365         <key>ask</key>
3366         <true/> | <false/>
3367         <key>handlers</key>
3368         <array>
3369           <dict>
3370             <key>name</key>
3371             <string>Adobe Acrobat</string>
3372             <key>path</key>
3373             <string>/System/Applications/Preview.app</string>
3374           </dict>
3375         </array>
3376       </dict>
3377     </dict>
3378   </dict>
3379 </dict>
3380 ```
3381 #### policies.json
3382 ```
3383 {
3384   "policies": {
3385     "Handlers": {
3386       "mimeTypes": {
3387         "application/msword": {
3388           "action": "useSystemDefault",
3389           "ask": false
3390         }
3391       },
3392       "schemes": {
3393         "mailto": {
3394           "action": "useHelperApp",
3395           "ask": true | false,
3396           "handlers": [{
3397             "name": "Gmail",
3398             "uriTemplate": "https://mail.google.com/mail/?extsrc=mailto&url=%s"
3399           }]
3400         }
3401       },
3402       "extensions": {
3403         "pdf": {
3404           "action": "useHelperApp",
3405           "ask": true | false,
3406           "handlers": [{
3407             "name": "Adobe Acrobat",
3408             "path": "/usr/bin/acroread"
3409           }]
3410         }
3411       }
3412     }
3413   }
3414 }
3415 ```
3416 ### HardwareAcceleration
3417 Control hardware acceleration.
3418
3419 **Compatibility:** Firefox 60, Firefox ESR 60\
3420 **CCK2 Equivalent:** N/A\
3421 **Preferences Affected:** `layers.acceleration.disabled`
3422
3423 #### Windows (GPO)
3424 ```
3425 Software\Policies\Mozilla\Firefox\HardwareAcceleration = 0x1 | 0x0
3426 ```
3427 #### Windows (Intune)
3428 OMA-URI:
3429 ```
3430 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/HardwareAcceleration
3431 ```
3432 Value (string):
3433 ```
3434 <enabled/> or <disabled/>
3435 ```
3436 #### macOS
3437 ```
3438 <dict>
3439   <key>HardwareAcceleration</key>
3440   <true/> | <false/>
3441 </dict>
3442 ```
3443 #### policies.json
3444 ```
3445 {
3446   "policies": {
3447     "HardwareAcceleration": true | false
3448   }
3449 }
3450 ```
3451 ### Homepage
3452 Configure the default homepage and how Firefox starts.
3453
3454 `URL` is the default homepage.
3455
3456 `Locked` prevents the user from changing homepage preferences.
3457
3458 `Additional` allows for more than one homepage.
3459
3460 `StartPage` is how Firefox starts. The choices are no homepage, the default homepage or the previous session.
3461
3462 With Firefox 78, an additional option as added for `Startpage`, `homepage-locked`. If this is value is set for the Startpage, the user will always get the homepage at startup and cannot choose to restore their session.
3463
3464 **Compatibility:** Firefox 60, Firefox ESR 60 (StartPage was added in Firefox 60, Firefox ESR 60.4, homepage-locked added in Firefox 78)\
3465 **CCK2 Equivalent:** `homePage`,`lockHomePage`\
3466 **Preferences Affected:** `browser.startup.homepage`, `browser.startup.page`
3467
3468 #### Windows (GPO)
3469 ```
3470 Software\Policies\Mozilla\Firefox\Homepage\URL = "https://example.com"
3471 Software\Policies\Mozilla\Firefox\Homepage\Locked = 0x1 | 0x0
3472 Software\Policies\Mozilla\Firefox\Homepage\Additional\1 = "https://example.org"
3473 Software\Policies\Mozilla\Firefox\Homepage\Additional\2 = "https://example.edu"
3474 Software\Policies\Mozilla\Firefox\Homepage\StartPage = "none" | "homepage" | "previous-session" | "homepage-locked"
3475 ```
3476 #### Windows (Intune)
3477 OMA-URI:
3478 ```
3479 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageURL
3480 ```
3481 Value (string):
3482 ```
3483 <enabled/>
3484
3485 <data id="HomepageURL" value="https://example.com"/>
3486 <data id="HomepageLocked" value="true | false"/>
3487 ```
3488 OMA-URI:
3489 ```
3490 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageAdditional
3491 ```
3492 Value (string):
3493 ```
3494 <enabled/>
3495
3496 <data id="HomepageAdditional" value="1&#xF000;http://example.org&#xF000;2&#xF000;http://example.edu"/>
3497 ```
3498 OMA-URI:
3499 ```
3500 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageStartPage
3501 ```
3502 Value (string):
3503 ```
3504 <enabled/>
3505
3506 <data id="StartPage" value="none | homepage | previous-session"/>
3507 ```
3508 #### macOS
3509 ```
3510 <dict>
3511   <key>Homepage</key>
3512   <dict>
3513     <key>URL</key>
3514     <string>http://example.com</string>
3515     <key>Locked</key>
3516     <true/> | <false/>
3517     <key>Additional</key>
3518     <array>
3519       <string>http://example.org</string>
3520       <string>http://example.edu</string>
3521     </array>
3522     <key>StartPage</key>
3523     <string>none | homepage | previous-session | homepage-locked</string>
3524   </dict>
3525 </dict>
3526 ```
3527 #### policies.json
3528 ```
3529 {
3530   "policies": {
3531     "Homepage": {
3532       "URL": "http://example.com/",
3533       "Locked": true | false,
3534       "Additional": ["http://example.org/",
3535                      "http://example.edu/"],
3536       "StartPage": "none" | "homepage" | "previous-session" | "homepage-locked"
3537     }
3538   }
3539 }
3540 ```
3541 ### InstallAddonsPermission
3542 Configure the default extension install policy as well as origins for extension installs are allowed. This policy does not override turning off all extension installs.
3543
3544 `Allow` is a list of origins where extension installs are allowed.
3545
3546 `Default` determines whether or not extension installs are allowed by default.
3547
3548 **Compatibility:** Firefox 60, Firefox ESR 60\
3549 **CCK2 Equivalent:** `permissions.install`\
3550 **Preferences Affected:** `xpinstall.enabled`, `browser.newtabpage.activity-stream.asrouter.userprefs.cfr.addons`, `browser.newtabpage.activity-stream.asrouter.userprefs.cfr.features`
3551
3552 #### Windows (GPO)
3553 ```
3554 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Allow\1 = "https://example.org"
3555 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Allow\2 = "https://example.edu"
3556 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Default = 0x1 | 0x0
3557 ```
3558 #### Windows (Intune)
3559 OMA-URI:
3560 ```
3561 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Addons/InstallAddonsPermission_Allow
3562 ```
3563 Value (string):
3564 ```
3565 <enabled/>
3566 <data id="Permissions" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
3567 ```
3568 OMA-URI:
3569 ```
3570 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Addons/InstallAddonsPermission_Default
3571 ```
3572 Value (string):
3573 ```
3574 <enabled/>
3575 ```
3576 #### macOS
3577 ```
3578 <dict>
3579   <key>InstallAddonsPermission</key>
3580   <dict>
3581     <key>Allow</key>
3582     <array>
3583       <string>http://example.org</string>
3584       <string>http://example.edu</string>
3585     </array>
3586     <key>Default</key>
3587     <true/> | <false/>
3588   </dict>
3589 </dict>
3590 ```
3591 #### policies.json
3592 ```
3593 {
3594   "policies": {
3595     "InstallAddonsPermission": {
3596       "Allow": ["http://example.org/",
3597                 "http://example.edu/"],
3598       "Default": true | false
3599     }
3600   }
3601 }
3602 ```
3603 ### LegacyProfiles
3604 Disable the feature enforcing a separate profile for each installation.
3605
3606 If this policy set to true, Firefox will not try to create different profiles for installations of Firefox in different directories. This is the equivalent of the MOZ_LEGACY_PROFILES environment variable.
3607
3608 If this policy set to false, Firefox will create a new profile for each unique installation of Firefox.
3609
3610 This policy only work on Windows via GPO (not policies.json).
3611
3612 **Compatibility:** Firefox 70, Firefox ESR 68.2 (Windows only, GPO only)\
3613 **CCK2 Equivalent:** N/A\
3614 **Preferences Affected:** N/A
3615
3616 #### Windows (GPO)
3617 ```
3618 Software\Policies\Mozilla\Firefox\LegacyProfiles = = 0x1 | 0x0
3619 ```
3620 #### Windows (Intune)
3621 OMA-URI:
3622 ```
3623 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/LegacyProfiles
3624 ```
3625 Value (string):
3626 ```
3627 <enabled/> or <disabled/>
3628 ```
3629 ### LegacySameSiteCookieBehaviorEnabled
3630 Enable default legacy SameSite cookie behavior setting.
3631
3632 If this policy is set to true, it reverts all cookies to legacy SameSite behavior which means that cookies that don't explicitly specify a ```SameSite``` attribute are treated as if they were ```SameSite=None```.
3633
3634 **Compatibility:** Firefox 96\
3635 **CCK2 Equivalent:** N/A\
3636 **Preferences Affected:** `network.cookie.sameSite.laxByDefault`
3637
3638 #### Windows (GPO)
3639 ```
3640 Software\Policies\Mozilla\Firefox\LegacySameSiteCookieBehaviorEnabled = = 0x1 | 0x0
3641 ```
3642 #### Windows (Intune)
3643 OMA-URI:
3644 ```
3645 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/LegacySameSiteCookieBehaviorEnabled
3646 ```
3647 Value (string):
3648 ```
3649 <enabled/> or <disabled/>
3650 ```
3651 #### macOS
3652 ```
3653 <dict>
3654   <key>LegacySameSiteCookieBehaviorEnabled</key>
3655   <true/> | <false/>
3656 </dict>
3657 ```
3658 #### policies.json
3659 ```
3660 {
3661   "policies": {
3662     "LegacySameSiteCookieBehaviorEnabled": true | false
3663 }
3664 ```
3665 ### LegacySameSiteCookieBehaviorEnabledForDomainList
3666 Revert to legacy SameSite behavior for cookies on specified sites.
3667
3668 If this policy is set to true, cookies set for domains in this list will revert to legacy SameSite behavior which means that cookies that don't explicitly specify a ```SameSite``` attribute are treated as if they were ```SameSite=None```.
3669
3670 **Compatibility:** Firefox 96\
3671 **CCK2 Equivalent:** N/A\
3672 **Preferences Affected:** `network.cookie.sameSite.laxByDefault.disabledHosts`
3673
3674 #### Windows (GPO)
3675 ```
3676 Software\Policies\Mozilla\Firefox\LegacySameSiteCookieBehaviorEnabledForDomainList\1 = "example.org"
3677 Software\Policies\Mozilla\Firefox\LegacySameSiteCookieBehaviorEnabledForDomainList\2 = "example.edu"
3678 ```
3679 #### Windows (Intune)
3680 OMA-URI:
3681 ```
3682 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/LegacySameSiteCookieBehaviorEnabledForDomainList
3683 ```
3684 Value (string):
3685 ```
3686 <enabled/>
3687 <data id="LegacySameSiteCookieBehaviorEnabledForDomainList" value="1&#xF000;example.org&#xF000;2&#xF000;example.edu"/>
3688 ```
3689 #### macOS
3690 ```
3691 <dict>
3692   <key>LegacySameSiteCookieBehaviorEnabledForDomainList</key>
3693   <array>
3694     <string>example.org</string>
3695     <string>example.edu</string>
3696   </array>
3697 </dict>
3698 ```
3699 #### policies.json
3700 ```
3701 {
3702   "policies": {
3703     "LegacySameSiteCookieBehaviorEnabledForDomainList": ["example.org",
3704                                                          "example.edu"]
3705   }
3706 }
3707 ```
3708 ### LocalFileLinks
3709 Enable linking to local files by origin.
3710
3711 **Compatibility:** Firefox 68, Firefox ESR 68\
3712 **CCK2 Equivalent:** N/A\
3713 **Preferences Affected:** `capability.policy.localfilelinks.*`
3714
3715 #### Windows (GPO)
3716 ```
3717 Software\Policies\Mozilla\Firefox\LocalFileLinks\1 = "https://example.org"
3718 Software\Policies\Mozilla\Firefox\LocalFileLinks\2 = "https://example.edu"
3719 ```
3720 #### Windows (Intune)
3721 OMA-URI:
3722 ```
3723 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/LocalFileLinks
3724 ```
3725 Value (string):
3726 ```
3727 <enabled/>
3728 <data id="LocalFileLinks" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
3729 ```
3730 #### macOS
3731 ```
3732 <dict>
3733   <key>LocalFileLinks</key>
3734   <array>
3735     <string>http://example.org</string>
3736     <string>http://example.edu</string>
3737   </array>
3738 </dict>
3739 ```
3740 #### policies.json
3741 ```
3742 {
3743   "policies": {
3744     "LocalFileLinks": ["http://example.org/",
3745                        "http://example.edu/"]
3746   }
3747 }
3748 ```
3749 ### ManagedBookmarks
3750 Configures a list of bookmarks managed by an administrator that cannot be changed by the user.
3751
3752 The bookmarks are only added as a button on the personal toolbar. They are not in the bookmarks folder.
3753
3754 The syntax of this policy is exactly the same as the [Chrome ManagedBookmarks policy](https://cloud.google.com/docs/chrome-enterprise/policies/?policy=ManagedBookmarks). The schema is:
3755 ```
3756 {
3757  "items": {
3758   "id": "BookmarkType",
3759   "properties": {
3760    "children": {
3761     "items": {
3762      "$ref": "BookmarkType"
3763     },
3764     "type": "array"
3765    },
3766    "name": {
3767     "type": "string"
3768    },
3769    "toplevel_name": {
3770     "type": "string"
3771    },
3772    "url": {
3773     "type": "string"
3774    }
3775   },
3776   "type": "object"
3777  },
3778  "type": "array"
3779 }
3780 ```
3781 **Compatibility:** Firefox 83, Firefox ESR 78.5\
3782 **CCK2 Equivalent:** N/A\
3783 **Preferences Affected:** N/A
3784
3785 #### Windows (GPO)
3786 Software\Policies\Mozilla\Firefox\ManagedBookmarks (REG_MULTI_SZ) =
3787 ```
3788 [
3789   {
3790     "toplevel_name": "My managed bookmarks folder"
3791   },
3792   {
3793     "url": "example.com",
3794     "name": "Example"
3795   },
3796   {
3797     "name": "Mozilla links",
3798     "children": [
3799       {
3800         "url": "https://mozilla.org",
3801         "name": "Mozilla.org"
3802       },
3803       {
3804         "url": "https://support.mozilla.org/",
3805         "name": "SUMO"
3806       }
3807     ]
3808   }
3809 ]
3810 ```
3811 #### Windows (Intune)
3812 OMA-URI:
3813 ```
3814 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/ManagedBookmarks
3815 ```
3816 Value (string):
3817 ```
3818 <enabled/>
3819 <data id="JSON" value='
3820 [
3821   {
3822     "toplevel_name": "My managed bookmarks folder"
3823   },
3824   {
3825     "url": "example.com",
3826     "name": "Example"
3827   },
3828   {
3829     "name": "Mozilla links",
3830     "children": [
3831       {
3832         "url": "https://mozilla.org",
3833         "name": "Mozilla.org"
3834       },
3835       {
3836         "url": "https://support.mozilla.org/",
3837         "name": "SUMO"
3838       }
3839     ]
3840   }
3841 ]'/>
3842 ```
3843 #### macOS
3844 ```
3845 <dict>
3846   <key>ManagedBookmarks</key>
3847   <array>
3848     <dict>
3849       <key>toplevel_name</key>
3850       <string>My managed bookmarks folder</string>
3851       <dict>
3852         <key>url</key>
3853         <string>example.com</string>
3854         <key>name</key>
3855         <string>Example</string>
3856       </dict>
3857       <dict>
3858       <key>name</key>
3859       <string>Mozilla links</string>
3860       <key>children</key>
3861       <array>
3862         <dict>
3863           <key>url</key>
3864           <string>https://mozilla.org</string>
3865           <key>name</key>
3866           <string>Mozilla</string>
3867         </dict>
3868         <dict>
3869           <key>url</key>
3870           <string>https://support.mozilla.org/</string>
3871           <key>name</key>
3872           <string>SUMO</string>
3873         </dict>
3874       </array>
3875     </dict>
3876   </array>
3877 </dict>
3878 ```
3879 #### policies.json
3880 ```
3881 {
3882   "policies": {
3883     "ManagedBookmarks": [
3884       {
3885         "toplevel_name": "My managed bookmarks folder"
3886       },
3887       {
3888         "url": "example.com",
3889         "name": "Example"
3890       },
3891       {
3892         "name": "Mozilla links",
3893         "children": [
3894           {
3895             "url": "https://mozilla.org",
3896             "name": "Mozilla.org"
3897           },
3898           {
3899             "url": "https://support.mozilla.org/",
3900             "name": "SUMO"
3901           }
3902         ]
3903       }
3904     ]
3905   }
3906 }
3907 ```
3908 ### ManualAppUpdateOnly
3909
3910 Switch to manual updates only.
3911
3912 If this policy is enabled:
3913  1. The user will never be prompted to install updates
3914  2. Firefox will not check for updates in the background, though it will check automatically when an update UI is displayed (such as the one in the About dialog). This check will be used to show "Update to version X" in the UI, but will not automatically download the update or prompt the user to update in any other way.
3915  3. The update UI will work as expected, unlike when using DisableAppUpdate.
3916
3917 This policy is primarily intended for advanced end users, not for enterprises, but it is available via GPO.
3918
3919 **Compatibility:** Firefox 87\
3920 **CCK2 Equivalent:** N/A\
3921 **Preferences Affected:** N/A
3922
3923 #### Windows (GPO)
3924 ```
3925 Software\Policies\Mozilla\Firefox\ManualAppUpdateOnly = 0x1 | 0x0
3926 ```
3927 #### Windows (Intune)
3928 OMA-URI:
3929 ```
3930 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/ManualAppUpdateOnly
3931 ```
3932 Value (string):
3933 ```
3934 <enabled/> or <disabled/>
3935 ```
3936 #### macOS
3937 ```
3938 <dict>
3939   <key>ManualAppUpdateOnly</key>
3940   <true/> | <false/>
3941 </dict>
3942 ```
3943 #### policies.json
3944 ```
3945 {
3946   "policies": {
3947     "ManualAppUpdateOnly": true | false
3948   }
3949 }
3950 ```
3951 ### NetworkPrediction
3952 Enable or disable network prediction (DNS prefetching).
3953
3954 **Compatibility:** Firefox 67, Firefox ESR 60.7\
3955 **CCK2 Equivalent:** N/A\
3956 **Preferences Affected:** `network.dns.disablePrefetch`, `network.dns.disablePrefetchFromHTTPS`
3957
3958 #### Windows (GPO)
3959 ```
3960 Software\Policies\Mozilla\Firefox\NetworkPrediction = 0x1 | 0x0
3961 ```
3962 #### Windows (Intune)
3963 OMA-URI:
3964 ```
3965 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NetworkPrediction
3966 ```
3967 Value (string):
3968 ```
3969 <enabled/> or <disabled/>
3970 ```
3971 #### macOS
3972 ```
3973 <dict>
3974   <key>NetworkPrediction</key>
3975   <true/> | <false/>
3976 </dict>
3977 ```
3978 #### policies.json
3979 ```
3980 {
3981   "policies": {
3982     "NetworkPrediction": true | false
3983 }
3984 ```
3985 ### NewTabPage
3986 Enable or disable the New Tab page.
3987
3988 **Compatibility:** Firefox 68, Firefox ESR 68\
3989 **CCK2 Equivalent:** N/A\
3990 **Preferences Affected:** `browser.newtabpage.enabled`
3991
3992 #### Windows (GPO)
3993 ```
3994 Software\Policies\Mozilla\Firefox\NewTabPage = 0x1 | 0x0
3995 ```
3996 #### Windows (Intune)
3997 OMA-URI:
3998 ```
3999 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NewTabPage
4000 ```
4001 Value (string):
4002 ```
4003 <enabled/> or <disabled/>
4004 ```
4005 #### macOS
4006 ```
4007 <dict>
4008   <key>NewTabPage</key>
4009   <true/> | <false/>
4010 </dict>
4011 ```
4012 #### policies.json
4013 ```
4014 {
4015   "policies": {
4016     "NewTabPage": true | false
4017 }
4018 ```
4019 ### NoDefaultBookmarks
4020 Disable the creation of default bookmarks.
4021
4022 This policy is only effective if the user profile has not been created yet.
4023
4024 **Compatibility:** Firefox 60, Firefox ESR 60\
4025 **CCK2 Equivalent:** `removeDefaultBookmarks`\
4026 **Preferences Affected:** N/A
4027
4028 #### Windows (GPO)
4029 ```
4030 Software\Policies\Mozilla\Firefox\NoDefaultBookmarks = 0x1 | 0x0
4031 ```
4032 #### Windows (Intune)
4033 OMA-URI:
4034 ```
4035 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NoDefaultBookmarks
4036 ```
4037 Value (string):
4038 ```
4039 <enabled/> or <disabled/>
4040 ```
4041 #### macOS
4042 ```
4043 <dict>
4044   <key>NoDefaultBookmarks</key>
4045   <true/> | <false/>
4046 </dict>
4047 ```
4048 #### policies.json
4049 ```
4050 {
4051   "policies": {
4052     "NoDefaultBookmarks": true | false
4053   }
4054 }
4055 ```
4056 ### OfferToSaveLogins
4057 Control whether or not Firefox offers to save passwords.
4058
4059 **Compatibility:** Firefox 60, Firefox ESR 60\
4060 **CCK2 Equivalent:** `dontRememberPasswords`\
4061 **Preferences Affected:** `signon.rememberSignons`
4062
4063 #### Windows (GPO)
4064 ```
4065 Software\Policies\Mozilla\Firefox\OfferToSaveLogins = 0x1 | 0x0
4066 ```
4067 #### Windows (Intune)
4068 OMA-URI:
4069 ```
4070 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OfferToSaveLogins
4071 ```
4072 Value (string):
4073 ```
4074 <enabled/> or <disabled/>
4075 ```
4076 #### macOS
4077 ```
4078 <dict>
4079   <key>OfferToSaveLogins</key>
4080   <true/> | <false/>
4081 </dict>
4082 ```
4083 #### policies.json
4084 ```
4085 {
4086   "policies": {
4087     "OfferToSaveLogins": true | false
4088   }
4089 }
4090 ```
4091 ### OfferToSaveLoginsDefault
4092 Sets the default value of signon.rememberSignons without locking it.
4093
4094 **Compatibility:** Firefox 70, Firefox ESR 60.2\
4095 **CCK2 Equivalent:** `dontRememberPasswords`\
4096 **Preferences Affected:** `signon.rememberSignons`
4097
4098 #### Windows (GPO)
4099 ```
4100 Software\Policies\Mozilla\Firefox\OfferToSaveLoginsDefault = 0x1 | 0x0
4101 ```
4102 #### Windows (Intune)
4103 OMA-URI:
4104 ```
4105 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OfferToSaveLoginsDefault
4106 ```
4107 Value (string):
4108 ```
4109 <enabled/> or <disabled/>
4110 ```
4111 #### macOS
4112 ```
4113 <dict>
4114   <key>OfferToSaveLoginsDefault</key>
4115   <true/> | <false/>
4116 </dict>
4117 ```
4118 #### policies.json
4119 ```
4120 {
4121   "policies": {
4122     "OfferToSaveLoginsDefault": true | false
4123   }
4124 }
4125 ```
4126 ### OverrideFirstRunPage
4127 Override the first run page. If the value is an empty string (""), the first run page is not displayed.
4128
4129 Starting with Firefox 83, Firefox ESR 78.5, you can also specify multiple URLS separated by a vertical bar (|).
4130
4131 **Compatibility:** Firefox 60, Firefox ESR 60\
4132 **CCK2 Equivalent:** `welcomePage`,`noWelcomePage`\
4133 **Preferences Affected:** `startup.homepage_welcome_url`
4134
4135 #### Windows (GPO)
4136 ```
4137 Software\Policies\Mozilla\Firefox\OverrideFirstRunPage = "http://example.org"
4138 ```
4139 #### Windows (Intune)
4140 OMA-URI:
4141 ```
4142 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OverrideFirstRunPage
4143 ```
4144 Value (string):
4145 ```
4146 <enabled/>
4147 <data id="OverridePage" value="https://example.com"/>
4148 ```
4149 #### macOS
4150 ```
4151 <dict>
4152   <key>OverrideFirstRunPage</key>
4153   <string>http://example.org</string>
4154 </dict>
4155 ```
4156 #### policies.json
4157 ```
4158 {
4159   "policies": {
4160     "OverrideFirstRunPage": "http://example.org"
4161   }
4162 }
4163 ```
4164 ### OverridePostUpdatePage
4165 Override the upgrade page. If the value is an empty string (""), no extra pages are displayed when Firefox is upgraded.
4166
4167 **Compatibility:** Firefox 60, Firefox ESR 60\
4168 **CCK2 Equivalent:** `upgradePage`,`noUpgradePage`\
4169 **Preferences Affected:** `startup.homepage_override_url`
4170
4171 #### Windows (GPO)
4172 ```
4173 Software\Policies\Mozilla\Firefox\OverridePostUpdatePage = "http://example.org"
4174 ```
4175 #### Windows (Intune)
4176 OMA-URI:
4177 ```
4178 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OverridePostUpdatePage
4179 ```
4180 Value (string):
4181 ```
4182 <enabled/>
4183 <data id="OverridePage" value="https://example.com"/>
4184 ```
4185 #### macOS
4186 ```
4187 <dict>
4188   <key>OverridePostUpdatePage</key>
4189   <string>http://example.org</string>
4190 </dict>
4191 ```
4192 #### policies.json
4193 ```
4194 {
4195   "policies": {
4196     "OverridePostUpdatePage": "http://example.org"
4197   }
4198 }
4199 ```
4200 ### PasswordManagerEnabled
4201 Remove access to the password manager via preferences and blocks about:logins on Firefox 70.
4202
4203 **Compatibility:** Firefox 70, Firefox ESR 60.2\
4204 **CCK2 Equivalent:** N/A\
4205 **Preferences Affected:** `pref.privacy.disable_button.view_passwords`
4206
4207 #### Windows (GPO)
4208 ```
4209 Software\Policies\Mozilla\Firefox\PasswordManagerEnabled = 0x1 | 0x0
4210 ```
4211 #### Windows (Intune)
4212 OMA-URI:
4213 ```
4214 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PasswordManagerEnabled
4215 ```
4216 Value (string):
4217 ```
4218 <enabled/> or <disabled/>
4219 ```
4220 #### macOS
4221 ```
4222 <dict>
4223   <key>PasswordManagerEnabled</key>
4224   <true/> | <false/>
4225 </dict>
4226 ```
4227 #### policies.json
4228 ```
4229 {
4230   "policies": {
4231     "PasswordManagerEnabled": true | false
4232   }
4233 }
4234 ```
4235 ### PasswordManagerExceptions
4236 Prevent Firefox from saving passwords for specific sites.
4237
4238 The sites are specified as a list of origins.
4239
4240 **Compatibility:** Firefox 101\
4241 **CCK2 Equivalent:** N/A\
4242 **Preferences Affected:** N/A
4243
4244 #### Windows (GPO)
4245 ```
4246 Software\Policies\Mozilla\Firefox\PasswordManagerExceptions\1 = "https://example.org"
4247 Software\Policies\Mozilla\Firefox\PasswordManagerExceptions\2 = "https://example.edu"
4248 ```
4249 #### Windows (Intune)
4250 OMA-URI:
4251 ```
4252 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PasswordManagerExceptions
4253 ```
4254 Value (string):
4255 ```
4256 <enabled/>
4257 <data id="List" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
4258 ```
4259 #### macOS
4260 ```
4261 <dict>
4262   <key>PasswordManagerExceptions</key>
4263   <array>
4264     <string>https://example.org</string>
4265     <string>https://example.edu</string>
4266   </array>
4267 </dict>
4268 ```
4269 #### policies.json
4270 ```
4271 {
4272   "policies": {
4273     "PasswordManagerExceptions": ["https://example.org",
4274                                   "https://example.edu"]
4275   }
4276 }
4277 ```
4278
4279 ### PDFjs
4280 Disable or configure PDF.js, the built-in PDF viewer.
4281
4282 If `Enabled` is set to false, the built-in PDF viewer is disabled.
4283
4284 If `EnablePermissions` is set to true, the built-in PDF viewer will honor document permissions like preventing the copying of text.
4285
4286 Note: DisableBuiltinPDFViewer has not been deprecated. You can either continue to use it, or switch to using PDFjs->Enabled to disable the built-in PDF viewer. This new permission was added because we needed a place for PDFjs->EnabledPermissions.
4287
4288 **Compatibility:** Firefox 77, Firefox ESR 68.9\
4289 **CCK2 Equivalent:** N/A\
4290 **Preferences Affected:** `pdfjs.disabled`, `pdfjs.enablePermissions`
4291
4292 #### Windows (GPO)
4293 ```
4294 Software\Policies\Mozilla\Firefox\PDFjs\Enabled = 0x1 | 0x0
4295 Software\Policies\Mozilla\Firefox\PDFjs\EnablePermissions = 0x1 | 0x0
4296 ```
4297 #### Windows (Intune)
4298 OMA-URI:
4299 ```
4300 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PDFjs/PDFjs_Enabled
4301 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PDFjs/PDFjs_EnablePermissions
4302 ```
4303 Value (string):
4304 ```
4305 <enabled/>or <disabled/>
4306 ```
4307 #### macOS
4308 ```
4309 <dict>
4310   <key>PDFjs</key>
4311   <dict>
4312     <key>Enabled</key>
4313     <true/> | <false/>
4314     <key>EnablePermissions</key>
4315     <true/> | <false/>
4316   </dict>
4317 </dict>
4318 ```
4319 #### policies.json
4320 ```
4321 {
4322   "policies": {
4323     "PDFjs": {
4324       "Enabled": true | false,
4325       "EnablePermissions": true | false
4326     }
4327   }
4328 }
4329 ```
4330 ### Permissions
4331 Set permissions associated with camera, microphone, location, notifications, autoplay, and virtual reality. Because these are origins, not domains, entries with unique ports must be specified separately. This explicitly means that it is not possible to add wildcards. See examples below.
4332
4333 `Allow` is a list of origins where the feature is allowed.
4334
4335 `Block` is a list of origins where the feature is not allowed.
4336
4337 `BlockNewRequests` determines whether or not new requests can be made for the feature.
4338
4339 `Locked` prevents the user from changing preferences for the feature.
4340
4341 `Default` specifies the default value for Autoplay. block-audio-video is not supported on Firefox ESR 68.
4342
4343 **Compatibility:** Firefox 62, Firefox ESR 60.2 (Autoplay added in Firefox 74, Firefox ESR 68.6, Autoplay Default/Locked added in Firefox 76, Firefox ESR 68.8, VirtualReality added in Firefox 80, Firefox ESR 78.2)\
4344 **CCK2 Equivalent:** N/A\
4345 **Preferences Affected:** `permissions.default.camera`, `permissions.default.microphone`, `permissions.default.geo`, `permissions.default.desktop-notification`, `media.autoplay.default`, `permissions.default.xr`
4346
4347 #### Windows (GPO)
4348 ```
4349 Software\Policies\Mozilla\Firefox\Permissions\Camera\Allow\1 = "https://example.org"
4350 Software\Policies\Mozilla\Firefox\Permissions\Camera\Allow\2 = "https://example.org:1234"
4351 Software\Policies\Mozilla\Firefox\Permissions\Camera\Block\1 = "https://example.edu"
4352 Software\Policies\Mozilla\Firefox\Permissions\Camera\BlockNewRequests = 0x1 | 0x0
4353 Software\Policies\Mozilla\Firefox\Permissions\Camera\Locked = 0x1 | 0x0
4354 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Allow\1 = "https://example.org"
4355 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Block\1 = "https://example.edu"
4356 Software\Policies\Mozilla\Firefox\Permissions\Microphone\BlockNewRequests = 0x1 | 0x0
4357 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Locked = 0x1 | 0x0
4358 Software\Policies\Mozilla\Firefox\Permissions\Location\Allow\1 = "https://example.org"
4359 Software\Policies\Mozilla\Firefox\Permissions\Location\Block\1 = "https://example.edu"
4360 Software\Policies\Mozilla\Firefox\Permissions\Location\BlockNewRequests = 0x1 | 0x0
4361 Software\Policies\Mozilla\Firefox\Permissions\Location\Locked = 0x1 | 0x0
4362 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Allow\1 = "https://example.org"
4363 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Block\1 = "https://example.edu"
4364 Software\Policies\Mozilla\Firefox\Permissions\Notifications\BlockNewRequests = 0x1 | 0x0
4365 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Locked = 0x1 | 0x0
4366 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Allow\1 = "https://example.org"
4367 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Block\1 = "https://example.edu"
4368 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Default = "allow-audio-video" | "block-audio" | "block-audio-video"
4369 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Locked = 0x1 | 0x0
4370 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\Allow\1 = "https://example.org"
4371 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\Block\1 = "https://example.edu"
4372 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\BlockNewRequests = 0x1 | 0x0
4373 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\Locked = 0x1 | 0x0
4374 ```
4375 #### Windows (Intune)
4376 OMA-URI:
4377 ```
4378 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Location/Location_BlockNewRequests
4379 ```
4380 Value (string):
4381 ```
4382 <enabled/> or <disabled/>
4383 ```
4384 OMA-URI:
4385 ```
4386 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Location/Location_Locked
4387 ```
4388 Value (string):
4389 ```
4390 <enabled/> or <disabled/>
4391 ```
4392 OMA-URI:
4393 ```
4394 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_Allow
4395 ```
4396 Value (string):
4397 ```
4398 <enabled/>
4399 <data id="Permissions" value="1&#xF000;https://example.org"/>
4400 ```
4401 OMA-URI:
4402 ```
4403 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_BlockNewRequests
4404 ```
4405 Value (string):
4406 ```
4407 <enabled/> or <disabled/>
4408 ```
4409 OMA-URI:
4410 ```
4411 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_Locked
4412 ```
4413 Value (string):
4414 ```
4415 <enabled/> or <disabled/>
4416 ```
4417 OMA-URI:
4418 ```
4419 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Allow
4420 ```
4421 Value (string):
4422 ```
4423 <enabled/>
4424 <data id="Permissions" value="1&#xF000;https://example.org"/>
4425 ```
4426 OMA-URI:
4427 ```
4428 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Block
4429 ```
4430 Value (string):
4431 ```
4432 <enabled/>
4433 <data id="Permissions" value="1&#xF000;https://example.edu"/>
4434 ```
4435 OMA-URI:
4436 ```
4437 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Default
4438 ```
4439 Value (string):
4440 ```
4441 <enabled/>
4442 <data id="Autoplay_Default" value="allow-audio-video | block-audio | block-audio-video"/>
4443 ```
4444 OMA-URI:
4445 ```
4446 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Locked
4447 ```
4448 Value (string):
4449 ```
4450 <enabled/> or <disabled/>
4451 ```
4452 OMA-URI:
4453 ```
4454 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_Allow
4455 ```
4456 Value (string):
4457 ```
4458 <enabled/>
4459 <data id="Permissions" value="1&#xF000;https://example.org"/>
4460 ```
4461 OMA-URI:
4462 ```
4463 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_Block
4464 ```
4465 Value (string):
4466 ```
4467 <enabled/>
4468 <data id="Permissions" value="1&#xF000;https://example.edu"/>
4469 ```
4470 OMA-URI:
4471 ```
4472 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_BlockNewRequests
4473 ```
4474 Value (string):
4475 ```
4476 <enabled/> or <disabled/>
4477 ```
4478 OMA-URI:
4479 ```
4480 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_Locked
4481 ```
4482 Value (string):
4483 ```
4484 <enabled/> or <disabled/>
4485 ```
4486 #### macOS
4487 ```
4488 <dict>
4489   <key>Permissions</key>
4490   <dict>
4491     <key>Camera</key>
4492     <dict>
4493       <key>Allow</key>
4494       <array>
4495         <string>https://example.org</string>
4496         <string>https://example.org:1234</string>
4497       </array>
4498       <key>Block</key>
4499       <array>
4500         <string>https://example.edu</string>
4501       </array>
4502       <key>BlockNewRequests</key>
4503       <true/> | <false/>
4504       <key>Locked</key>
4505       <true/> | <false/>
4506     </dict>
4507     <key>Microphone</key>
4508     <dict>
4509       <key>Allow</key>
4510       <array>
4511         <string>https://example.org</string>
4512       </array>
4513       <key>Block</key>
4514       <array>
4515         <string>https://example.edu</string>
4516       </array>
4517       <key>BlockNewRequests</key>
4518       <true/> | <false/>
4519       <key>Locked</key>
4520       <true/> | <false/>
4521     </dict>
4522     <key>Location</key>
4523     <dict>
4524       <key>Allow</key>
4525       <array>
4526         <string>https://example.org</string>
4527       </array>
4528       <key>Block</key>
4529       <array>
4530         <string>https://example.edu</string>
4531       </array>
4532       <key>BlockNewRequests</key>
4533       <true/> | <false/>
4534       <key>Locked</key>
4535       <true/> | <false/>
4536     </dict>
4537     <key>Notifications</key>
4538     <dict>
4539       <key>Allow</key>
4540       <array>
4541         <string>https://example.org</string>
4542       </array>
4543       <key>Block</key>
4544       <array>
4545         <string>https://example.edu</string>
4546       </array>
4547       <key>BlockNewRequests</key>
4548       <true/>
4549       <key>Locked</key>
4550       <true/>
4551     </dict>
4552     <key>Autoplay</key>
4553     <dict>
4554       <key>Allow</key>
4555       <array>
4556         <string>https://example.org</string>
4557       </array>
4558       <key>Block</key>
4559       <array>
4560         <string>https://example.edu</string>
4561       </array>
4562       <key>Default</key>
4563       <string>allow-audio-video | block-audio | block-audio-video</string>
4564       <key>Locked</key>
4565       <true/> | <false/>
4566     </dict>
4567   </dict>
4568 </dict>
4569 ```
4570 #### policies.json
4571 ```
4572 {
4573   "policies": {
4574     "Permissions": {
4575       "Camera": {
4576         "Allow": ["https://example.org","https://example.org:1234"],
4577         "Block": ["https://example.edu"],
4578         "BlockNewRequests": true | false,
4579         "Locked": true | false
4580       },
4581       "Microphone": {
4582         "Allow": ["https://example.org"],
4583         "Block": ["https://example.edu"],
4584         "BlockNewRequests": true | false,
4585         "Locked": true | false
4586       },
4587       "Location": {
4588         "Allow": ["https://example.org"],
4589         "Block": ["https://example.edu"],
4590         "BlockNewRequests": true | false,
4591         "Locked": true | false
4592       },
4593       "Notifications": {
4594         "Allow": ["https://example.org"],
4595         "Block": ["https://example.edu"],
4596         "BlockNewRequests": true | false,
4597         "Locked": true | false
4598       },
4599       "Autoplay": {
4600         "Allow": ["https://example.org"],
4601         "Block": ["https://example.edu"],
4602         "Default": "allow-audio-video" | "block-audio" | "block-audio-video",
4603         "Locked": true | false
4604       }
4605     }
4606   }
4607 }
4608 ```
4609 ### PictureInPicture
4610
4611 Enable or disable Picture-in-Picture as well as prevent the user from enabling or disabling it (Locked).
4612
4613 **Compatibility:** Firefox 78, Firefox ESR 78\
4614 **CCK2 Equivalent:** N/A\
4615 **Preferences Affected:** `media.videocontrols.picture-in-picture.video-toggle.enabled`
4616
4617 #### Windows (GPO)
4618 ```
4619 Software\Policies\Mozilla\Firefox\PictureInPicture\Enabled = 0x1 | 0x0
4620 Software\Policies\Mozilla\Firefox\PictureInPicture\Locked = 0x1 | 0x0
4621
4622 ```
4623 #### Windows (Intune)
4624 OMA-URI:
4625 ```
4626 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PictureInPicture/PictureInPicture_Enabled
4627 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PictureInPicture/PictureInPicture_Locked
4628 ```
4629 Value (string):
4630 ```
4631 <enabled/> or <disabled/>
4632 ```
4633 #### macOS
4634 ```
4635 <dict>
4636   <key>PictureInPicture</key>
4637   <dict>
4638     <key>Enabled</key>
4639     <true/> | <false/>
4640     <key>Locked</key>
4641     <true/> | <false/>
4642   </dict>
4643 </dict>
4644 ```
4645 #### policies.json
4646 ```
4647 {
4648   "policies": {
4649     "PictureInPicture": {
4650       "Enabled": true | false,
4651       "Locked": true | false
4652     }
4653   }
4654 }
4655 ```
4656 ### PopupBlocking
4657 Configure the default pop-up window policy as well as origins for which pop-up windows are allowed.
4658
4659 `Allow` is a list of origins where popup-windows are allowed.
4660
4661 `Default` determines whether or not pop-up windows are allowed by default.
4662
4663 `Locked` prevents the user from changing pop-up preferences.
4664
4665 **Compatibility:** Firefox 60, Firefox ESR 60\
4666 **CCK2 Equivalent:** `permissions.popup`\
4667 **Preferences Affected:** `dom.disable_open_during_load`
4668
4669 #### Windows (GPO)
4670 ```
4671 Software\Policies\Mozilla\Firefox\PopupBlocking\Allow\1 = "https://example.org"
4672 Software\Policies\Mozilla\Firefox\PopupBlocking\Allow\2 = "https://example.edu"
4673 Software\Policies\Mozilla\Firefox\PopupBlocking\Default = 0x1 | 0x0
4674 Software\Policies\Mozilla\Firefox\PopupBlocking\Locked = 0x1 | 0x0
4675 ```
4676 #### Windows (Intune)
4677 OMA-URI:
4678 ```
4679 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Allow
4680 ```
4681 Value (string):
4682 ```
4683 <enabled/>
4684 <data id="Permissions" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
4685 ```
4686 OMA-URI:
4687 ```
4688 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Default
4689 ```
4690 Value (string):
4691 ```
4692 <enabled/> or <disabled/>
4693 ```
4694 OMA-URI:
4695 ```
4696 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Locked
4697 ```
4698 Value (string):
4699 ```
4700 <enabled/> or <disabled/>
4701 ```
4702 #### macOS
4703 ```
4704 <dict>
4705   <key>PopupBlocking</key>
4706   <dict>
4707     <key>Allow</key>
4708     <array>
4709       <string>http://example.org</string>
4710       <string>http://example.edu</string>
4711     </array>
4712     <key>Default</key>
4713     <true/> | <false/>
4714     <key>Locked</key>
4715     <true/> | <false/>
4716   </dict>
4717 </dict>
4718 ```
4719 #### policies.json
4720 ```
4721 {
4722   "policies": {
4723     "PopupBlocking": {
4724       "Allow": ["http://example.org/",
4725                 "http://example.edu/"],
4726       "Default": true | false,
4727       "Locked": true | false
4728     }
4729   }
4730 }
4731 ```
4732 ### Preferences
4733 Set and lock preferences.
4734
4735 **NOTE** On Windows, in order to use this policy, you must clear all settings in the old **Preferences (Deprecated)** section in group policy.
4736
4737 Previously you could only set and lock a subset of preferences. Starting with Firefox 81 and Firefox ESR 78.3 you can set many more preferences. You can also set default preferences, user preferences and you can clear preferences.
4738
4739 Preferences that start with the following prefixes are supported:
4740 ```
4741 accessibility.
4742 alerts.* (Firefox 122, Firefox ESR 115.7)
4743 app.update.* (Firefox 86, Firefox ESR 78.8)
4744 browser.
4745 datareporting.policy.
4746 dom.
4747 extensions.
4748 general.autoScroll (Firefox 83, Firefox ESR 78.5)
4749 general.smoothScroll (Firefox 83, Firefox ESR 78.5)
4750 geo.
4751 gfx.
4752 intl.
4753 keyword.enabled (Firefox 95, Firefox ESR 91.4)
4754 layers.
4755 layout.
4756 media.
4757 network.
4758 pdfjs. (Firefox 84, Firefox ESR 78.6)
4759 places.
4760 pref.
4761 print.
4762 privacy.userContext.enabled (Firefox 126, Firefox ESR 115.11)
4763 privacy.userContext.ui.enabled (Firefox 126, Firefox ESR 115.11)
4764 signon. (Firefox 83, Firefox ESR 78.5)
4765 spellchecker. (Firefox 84, Firefox ESR 78.6)
4766 toolkit.legacyUserProfileCustomizations.stylesheets (Firefox 95, Firefox ESR 91.4)
4767 ui.
4768 widget.
4769 xpinstall.signatures.required (Firefox ESR 102.10, Firefox ESR only)
4770 xpinstall.whitelist.required (Firefox 118, Firefox ESR 115.3)
4771 ```
4772 as well as the following security preferences:
4773
4774 | Preference | Type | Default
4775 | --- | --- | --- |
4776 | security.default_personal_cert | string | Ask Every Time
4777 | &nbsp;&nbsp;&nbsp;&nbsp;If set to Select Automatically, Firefox automatically chooses the default personal certificate.
4778 | security.disable_button.openCertManager | string | N/A
4779 | &nbsp;&nbsp;&nbsp;&nbsp;If set to true and locked, the View Certificates button in preferences is disabled (Firefox 121, Firefox ESR 115.6)
4780 | security.disable_button.openDeviceManager | string | N/A
4781 | &nbsp;&nbsp;&nbsp;&nbsp;If set to true and locked, the Security Devices button in preferences is disabled (Firefox 121, Firefox ESR 115.6)
4782 | security.insecure_connection_text.enabled | bool | false
4783 | &nbsp;&nbsp;&nbsp;&nbsp;If set to true, adds the words "Not Secure" for insecure sites.
4784 | security.insecure_connection_text.pbmode.enabled | bool | false
4785 | &nbsp;&nbsp;&nbsp;&nbsp;If set to true, adds the words "Not Secure" for insecure sites in private browsing.
4786 | security.mixed_content.block_active_content | boolean | true
4787 | &nbsp;&nbsp;&nbsp;&nbsp;If false, mixed active content (HTTP and HTTPS) is not blocked.
4788 | security.osclientcerts.autoload | boolean | false
4789 | &nbsp;&nbsp;&nbsp;&nbsp;If true, client certificates are loaded from the operating system certificate store.
4790 | security.OCSP.enabled | integer | 1
4791 | &nbsp;&nbsp;&nbsp;&nbsp;If 0, do not fetch OCSP. If 1, fetch OCSP for DV and EV certificates. If 2, fetch OCSP only for EV certificates.
4792 | security.OCSP.require | boolean | false
4793 | &nbsp;&nbsp;&nbsp;&nbsp; If true, if an OCSP request times out, the connection fails.
4794 | security.osclientcerts.assume_rsa_pss_support | boolean | true
4795 | &nbsp;&nbsp;&nbsp;&nbsp; If false, we don't assume an RSA key can do RSA-PSS. (Firefox 114, Firefox ESR 102.12)
4796 | security.ssl.enable_ocsp_stapling | boolean | true
4797 | &nbsp;&nbsp;&nbsp;&nbsp; If false, OCSP stapling is not enabled.
4798 | security.ssl.errorReporting.enabled | boolean | true
4799 | &nbsp;&nbsp;&nbsp;&nbsp;If false, SSL errors cannot be sent to Mozilla.
4800 | security.ssl.require_safe_negotiation | boolean | false
4801 | &nbsp;&nbsp;&nbsp;&nbsp;If true, Firefox will only negotiate TLS connections with servers that indicate they support secure renegotiation. (Firefox 118, Firefox ESR 115.3)
4802 | security.tls.enable_0rtt_data | boolean | true
4803 | &nbsp;&nbsp;&nbsp;&nbsp;If false, TLS early data is turned off. (Firefox 93, Firefox 91.2, Firefox 78.15)
4804 | security.tls.hello_downgrade_check | boolean | true
4805 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the TLS 1.3 downgrade check is disabled.
4806 | security.tls.version.enable-deprecated | boolean | false
4807 | &nbsp;&nbsp;&nbsp;&nbsp;If true, browser will accept TLS 1.0. and TLS 1.1. (Firefox 86, Firefox 78.8)
4808 | security.warn_submit_secure_to_insecure | boolean | true
4809 | &nbsp;&nbsp;&nbsp;&nbsp;If false, no warning is shown when submitting a form from https to http.
4810
4811 Using the preference as the key, set the `Value` to the corresponding preference value.
4812
4813 `Status` can be "default", "locked", "user" or "clear"
4814
4815 * `"default"`: Read/Write: Settings appear as default even if factory default differs.
4816 * `"locked"`: Read-Only: Settings appear as default even if factory default differs.
4817 * `"user"`: Read/Write: Settings appear as changed if it differs from factory default.
4818 * `"clear"`: Read/Write: `Value` has no effect. Resets to factory defaults on each startup.
4819
4820 `"user"` preferences persist across invocations of Firefox. It is the equivalent of a user setting the preference. They are most useful when a preference is needed very early in startup so it can't be set as default by policy. An example of this is ```toolkit.legacyUserProfileCustomizations.stylesheets```.
4821
4822 `"user"` preferences persist even if the policy is removed, so if you need to remove them, you should use the clear policy.
4823
4824 You can also set the `Type` starting in Firefox 123 and Firefox ESR 115.8. It can be `number`, `boolean` or `string`. This is especially useful if you are seeing 0 or 1 values being converted to booleans when set as user preferences.
4825
4826 See the examples below for more detail.
4827
4828 IMPORTANT: Make sure you're only setting a particular preference using this mechanism and not some other way.
4829
4830 Status
4831 **Compatibility:** Firefox 81, Firefox ESR 78.3\
4832 **CCK2 Equivalent:** `preferences`\
4833 **Preferences Affected:** Many
4834
4835 #### Windows (GPO)
4836 Software\Policies\Mozilla\Firefox\Preferences (REG_MULTI_SZ) =
4837 ```
4838 {
4839   "accessibility.force_disabled": {
4840     "Value": 1,
4841     "Status": "default",
4842     "Type": "number"
4843
4844   },
4845   "browser.cache.disk.parent_directory": {
4846     "Value": "SOME_NATIVE_PATH",
4847     "Status": "user"
4848   },
4849   "browser.tabs.warnOnClose": {
4850     "Value": false,
4851     "Status": "locked"
4852   }
4853 }
4854 ```
4855 #### Windows (Intune)
4856 OMA-URI:
4857 ```
4858 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Preferences
4859 ```
4860 Value (string):
4861 ```
4862 <enabled/>
4863 <data id="JSON" value='
4864 {
4865   "accessibility.force_disabled": {
4866     "Value": 1,
4867     "Status": "default",
4868     "Type": "number"
4869   },
4870   "browser.cache.disk.parent_directory": {
4871     "Value": "SOME_NATIVE_PATH",
4872     "Status": "user"
4873   },
4874   "browser.tabs.warnOnClose": {
4875     "Value": false,
4876     "Status": "locked"
4877   }
4878 }'/>
4879 ```
4880 #### macOS
4881 ```
4882 <dict>
4883   <key>Preferences</key>
4884   <dict>
4885     <key>accessibility.force_disabled</key>
4886     <dict>
4887       <key>Value</key>
4888       <integer>1</integer>
4889       <key>Status</key>
4890       <string>default</string>
4891       <key>Type</key>
4892       <string>number</string>
4893     </dict>
4894     <key>browser.cache.disk.parent_directory</key>
4895     <dict>
4896       <key>Value</key>
4897       <string>SOME_NATIVE_PATH</string>
4898       <key>Status</key>
4899       <string>user</string>
4900     </dict>
4901     <key>browser.tabs.warnOnClose</key>
4902     <dict>
4903       <key>Value</key>
4904       <false/>
4905       <key>Status</key>
4906       <string>locked</string>
4907     </dict>
4908   </dict>
4909 </dict>
4910 ```
4911 #### policies.json
4912 ```
4913 {
4914   "policies": {
4915     "Preferences": {
4916       "accessibility.force_disabled": {
4917         "Value": 1,
4918         "Status": "default"
4919         "Type": "number"
4920       },
4921       "browser.cache.disk.parent_directory": {
4922         "Value": "SOME_NATIVE_PATH",
4923         "Status": "user"
4924       },
4925       "browser.tabs.warnOnClose": {
4926         "Value": false,
4927         "Status": "locked"
4928       }
4929     }
4930   }
4931 }
4932 ```
4933 ### PrimaryPassword
4934 Require or prevent using a primary (formerly master) password.
4935
4936 If this value is true, a primary password is required. If this value is false, it works the same as if [`DisableMasterPasswordCreation`](#disablemasterpasswordcreation) was true and removes the primary password functionality.
4937
4938 If both DisableMasterPasswordCreation and PrimaryPassword are used, DisableMasterPasswordCreation takes precedent.
4939
4940 **Compatibility:** Firefox 79, Firefox ESR 78.1\
4941 **CCK2 Equivalent:** `noMasterPassword`\
4942 **Preferences Affected:** N/A
4943
4944 #### Windows (GPO)
4945 ```
4946 Software\Policies\Mozilla\Firefox\PrimaryPassword = 0x1 | 0x0
4947 ```
4948 #### Windows (Intune)
4949 OMA-URI:
4950 ```
4951 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PrimaryPassword
4952 ```
4953 Value (string):
4954 ```
4955 <enabled/> or <disabled/>
4956 ```
4957 #### macOS
4958 ```
4959 <dict>
4960   <key>PrimaryPassword</key>
4961   <true/> | <false/>
4962 </dict>
4963 ```
4964 #### policies.json
4965 ```
4966 {
4967   "policies": {
4968     "PrimaryPassword": true | false
4969   }
4970 }
4971 ```
4972 ### PrintingEnabled
4973 Enable or disable printing.
4974
4975 **Compatibility:** Firefox 120, Firefox ESR 115.5\
4976 **CCK2 Equivalent:** N/A\
4977 **Preferences Affected:** `print.enabled`
4978
4979 #### Windows (GPO)
4980 ```
4981 Software\Policies\Mozilla\Firefox\PrintingEnabled = 0x1 | 0x0
4982 ```
4983 #### Windows (Intune)
4984 OMA-URI:
4985 ```
4986 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PrintingEnabled
4987 ```
4988 Value (string):
4989 ```
4990 <enabled/> or <disabled/>
4991 ```
4992 #### macOS
4993 ```
4994 <dict>
4995   <key>PrintingEnabled</key>
4996   <true/> | <false/>
4997 </dict>
4998 ```
4999 #### policies.json
5000 ```
5001 {
5002   "policies": {
5003     "PrintingEnabled": true | false
5004   }
5005 }
5006 ```
5007 ### PromptForDownloadLocation
5008 Ask where to save each file before downloading.
5009
5010 **Compatibility:** Firefox 68, Firefox ESR 68\
5011 **CCK2 Equivalent:** N/A\
5012 **Preferences Affected:** `browser.download.useDownloadDir`
5013
5014 #### Windows (GPO)
5015 ```
5016 Software\Policies\Mozilla\Firefox\PromptForDownloadLocation = 0x1 | 0x0
5017 ```
5018 #### Windows (Intune)
5019 OMA-URI:
5020 ```
5021 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PromptForDownloadLocation
5022 ```
5023 Value (string):
5024 ```
5025 <enabled/> or <disabled/>
5026 ```
5027 #### macOS
5028 ```
5029 <dict>
5030   <key>PromptForDownloadLocation</key>
5031   <true/> | <false/>
5032 </dict>
5033 ```
5034 #### policies.json
5035 ```
5036 {
5037   "policies": {
5038     "PromptForDownloadLocation": true | false
5039   }
5040 }
5041 ```
5042 ### Proxy
5043 Configure proxy settings. These settings correspond to the connection settings in Firefox preferences.
5044 To specify ports, append them to the hostnames with a colon (:).
5045
5046 Unless you lock this policy, changes the user already has in place will take effect.
5047
5048 `Mode` is the proxy method being used.
5049
5050 `Locked` is whether or not proxy settings can be changed.
5051
5052 `HTTPProxy` is the HTTP proxy server.
5053
5054 `UseHTTPProxyForAllProtocols` is whether or not the HTTP proxy should be used for all other proxies.
5055
5056 `SSLProxy` is the SSL proxy server.
5057
5058 `FTPProxy` is the FTP proxy server.
5059
5060 `SOCKSProxy` is the SOCKS proxy server
5061
5062 `SOCKSVersion` is the SOCKS version (4 or 5)
5063
5064 `Passthrough` is list of hostnames or IP addresses that will not be proxied. Use `<local>` to bypass proxying for all hostnames which do not contain periods.
5065
5066 `AutoConfigURL` is a  URL for proxy configuration (only used if Mode is autoConfig).
5067
5068 `AutoLogin` means do not prompt for authentication if password is saved.
5069
5070 `UseProxyForDNS` to use proxy DNS when using SOCKS v5.
5071
5072 **Compatibility:** Firefox 60, Firefox ESR 60\
5073 **CCK2 Equivalent:** `networkProxy*`\
5074 **Preferences Affected:** `network.proxy.type`, `network.proxy.autoconfig_url`, `network.proxy.socks_remote_dns`, `signon.autologin.proxy`, `network.proxy.socks_version`, `network.proxy.no_proxies_on`, `network.proxy.share_proxy_settings`, `network.proxy.http`, `network.proxy.http_port`, `network.proxy.ftp`, `network.proxy.ftp_port`, `network.proxy.ssl`, `network.proxy.ssl_port`, `network.proxy.socks`, `network.proxy.socks_port`
5075
5076 #### Windows (GPO)
5077 ```
5078 Software\Policies\Mozilla\Firefox\Proxy\Mode = "none" | "system" | "manual" | "autoDetect" | "autoConfig"
5079 Software\Policies\Mozilla\Firefox\Proxy\Locked = 0x1 | 0x0
5080 Software\Policies\Mozilla\Firefox\Proxy\HTTPProxy = https://httpproxy.example.com
5081 Software\Policies\Mozilla\Firefox\Proxy\UseHTTPProxyForAllProtocols = 0x1 | 0x0
5082 Software\Policies\Mozilla\Firefox\Proxy\SSLProxy = https://sslproxy.example.com
5083 Software\Policies\Mozilla\Firefox\Proxy\FTPProxy = https://ftpproxy.example.com
5084 Software\Policies\Mozilla\Firefox\Proxy\SOCKSProxy = https://socksproxy.example.com
5085 Software\Policies\Mozilla\Firefox\Proxy\SOCKSVersion = 0x4 | 0x5
5086 Software\Policies\Mozilla\Firefox\Proxy\Passthrough = <local>
5087 Software\Policies\Mozilla\Firefox\Proxy\AutoConfigURL = URL_TO_AUTOCONFIG
5088 Software\Policies\Mozilla\Firefox\Proxy\AutoLogin = 0x1 | 0x0
5089 Software\Policies\Mozilla\Firefox\Proxy\UseProxyForDNS = 0x1 | 0x0
5090 ```
5091 #### Windows (Intune)
5092 **Note**
5093 These setttings were moved to a category to make them easier to configure via Intune.
5094
5095 OMA-URI:
5096 ```
5097 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ProxySettings/Proxy_Locked
5098 ```
5099 Value (string):
5100 ```
5101 <enabled/> or <disabled/>
5102 ```
5103 OMA-URI:
5104 ```
5105 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ProxySettings/Proxy_ConnectionType
5106 ```
5107 Value (string):
5108 ```
5109 <enabled/>
5110 <data id="Proxy_ConnectionType" value="none | system | manual | autoDetect | autoConfig"/>
5111 ```
5112 OMA-URI:
5113 ```
5114 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ProxySettings/Proxy_HTTPProxy
5115 ```
5116 Value (string):
5117 ```
5118 <enabled/>
5119 <data id="Proxy_HTTPProxy" value="httpproxy.example.com"/>
5120 ```
5121 OMA-URI:
5122 ```
5123 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ProxySettings/Proxy_UseHTTPProxyForAllProtocols
5124 ```
5125 Value (string):
5126 ```
5127 <enabled/> or <disabled/>
5128 ```
5129 OMA-URI:
5130 ```
5131 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ProxySettings/Proxy_SSLProxy
5132 ```
5133 Value (string):
5134 ```
5135 <enabled/>
5136 <data id="Proxy_SSLProxy" value="sslproxy.example.com"/>
5137 ```
5138 OMA-URI:
5139 ```
5140 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ProxySettings/Proxy_SOCKSProxy
5141 ```
5142 Value (string):
5143 ```
5144 <enabled/>
5145 <data id="Proxy_SOCKSProxy" value="socksproxy.example.com"/>
5146 <data id="Proxy_SOCKSVersion" value="4 | 5"/>
5147 ```
5148 OMA-URI:
5149 ```
5150 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ProxySettings/Proxy_AutoConfigURL
5151 ```
5152 Value (string):
5153 ```
5154 <enabled/>
5155 <data id="Proxy_AutoConfigURL" value="URL_TO_AUTOCONFIG"/>
5156 ```
5157 OMA-URI:
5158 ```
5159 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ProxySettings/Proxy_Passthrough
5160 ```
5161 Value (string):
5162 ```
5163 <enabled/>
5164 <data id="Proxy_Passthrough" value="&lt;local&gt;"/>
5165 ```
5166 OMA-URI:
5167 ```
5168 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ProxySettings/Proxy_AutoLogin
5169 ```
5170 Value (string):
5171 ```
5172 <enabled/> or <disabled/>
5173 ```
5174 OMA-URI:
5175 ```
5176 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ProxySettings/Proxy_UseProxyForDNS
5177 ```
5178 Value (string):
5179 ```
5180 <enabled/> or <disabled/>
5181 ```
5182 OMA-URI (Old way):
5183 ```
5184 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Proxy
5185 ```
5186 Value (string):
5187 ```
5188 <enabled/>
5189 <data id="ProxyLocked" value="true | false"/>
5190 <data id="ConnectionType" value="none | system | manual | autoDetect | autoConfig"/>
5191 <data id="HTTPProxy" value="httpproxy.example.com"/>
5192 <data id="UseHTTPProxyForAllProtocols" value="true | false"/>
5193 <data id="SSLProxy" value="sslproxy.example.com"/>
5194 <data id="FTPProxy" value="ftpproxy.example.com"/>
5195 <data id="SOCKSProxy" value="socksproxy.example.com"/>
5196 <data id="SOCKSVersion" value="4 | 5"/>
5197 <data id="AutoConfigURL" value="URL_TO_AUTOCONFIG"/>
5198 <data id="Passthrough" value="<local>"/>
5199 <data id="AutoLogin" value="true | false"/>
5200 <data id="UseProxyForDNS" value="true | false"/>
5201 ```
5202 #### macOS
5203 ```
5204 <dict>
5205   <key>Proxy</key>
5206   <dict>
5207     <key>Mode</key>
5208     <string>none | system | manual | autoDetect | autoConfig</string>
5209     <key>Locked</key>
5210     <true> | </false>
5211     <key>HTTPProxy</key>
5212     <string>https://httpproxy.example.com</string>
5213     <key>UseHTTPProxyForAllProtocols</key>
5214     <true> | </false>
5215     <key>SSLProxy</key>
5216     <string>https://sslproxy.example.com</string>
5217     <key>FTPProxy</key>
5218     <string>https://ftpproxy.example.com</string>
5219     <key>SOCKSProxy</key>
5220     <string>https://socksproxy.example.com</string>
5221     <key>SOCKSVersion</key>
5222     <string>4 | 5</string>
5223     <key>Passthrough</key>
5224     <string>&lt;local>&gt;</string>
5225     <key>AutoConfigURL</key>
5226     <string>URL_TO_AUTOCONFIG</string>
5227     <key>AutoLogin</key>
5228     <true> | </false>
5229     <key>UseProxyForDNS</key>
5230     <true> | </false>
5231   </dict>
5232 </dict>
5233 ```
5234 #### policies.json
5235 ```
5236 {
5237   "policies": {
5238     "Proxy": {
5239       "Mode": "none" | "system" | "manual" | "autoDetect" | "autoConfig",
5240       "Locked": true | false,
5241       "HTTPProxy": "hostname",
5242       "UseHTTPProxyForAllProtocols": true | false,
5243       "SSLProxy": "hostname",
5244       "FTPProxy": "hostname",
5245       "SOCKSProxy": "hostname",
5246       "SOCKSVersion": 4 | 5,
5247       "Passthrough": "<local>",
5248       "AutoConfigURL": "URL_TO_AUTOCONFIG",
5249       "AutoLogin": true | false,
5250       "UseProxyForDNS": true | false
5251     }
5252   }
5253 }
5254 ```
5255 ### RequestedLocales
5256 Set the the list of requested locales for the application in order of preference. It will cause the corresponding language pack to become active.
5257
5258 Note: For Firefox 68, this can now be a string so that you can specify an empty value.
5259
5260 **Compatibility:** Firefox 64, Firefox ESR 60.4, Updated in Firefox 68, Firefox ESR 68\
5261 **CCK2 Equivalent:** N/A\
5262 **Preferences Affected:** N/A
5263 #### Windows (GPO)
5264 ```
5265 Software\Policies\Mozilla\Firefox\RequestedLocales\1 = "de"
5266 Software\Policies\Mozilla\Firefox\RequestedLocales\2 = "en-US"
5267
5268 or
5269
5270 Software\Policies\Mozilla\Firefox\RequestedLocales = "de,en-US"
5271 ```
5272 #### Windows (Intune)
5273 OMA-URI:
5274 ```
5275 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/RequestedLocalesString
5276 ```
5277 Value (string):
5278 ```
5279 <enabled/>
5280 <data id="Preferences_String" value="de,en-US"/>
5281 ```
5282 #### macOS
5283 ```
5284 <dict>
5285   <key>RequestedLocales</key>
5286   <array>
5287     <string>de</string>
5288     <string>en-US</string>
5289   </array>
5290 </dict>
5291
5292 or
5293
5294 <dict>
5295   <key>RequestedLocales</key>
5296   <string>de,en-US</string>
5297 </dict>
5298
5299 ```
5300 #### policies.json
5301 ```
5302 {
5303   "policies": {
5304     "RequestedLocales": ["de", "en-US"]
5305   }
5306 }
5307
5308 or
5309
5310 {
5311   "policies": {
5312     "RequestedLocales": "de,en-US"
5313   }
5314 }
5315 ```
5316 <a name="SanitizeOnShutdown"></a>
5317
5318 ### SanitizeOnShutdown (Selective)
5319 Clear data on shutdown. Choose from Cache, Cookies, Download History, Form & Search History, Browsing History, Active Logins, Site Preferences and Offline Website Data.
5320
5321 Previously, these values were always locked. Starting with Firefox 74 and Firefox ESR 68.6, you can use the `Locked` option to either keep the values unlocked (set it to false), or lock only the values you set (set it to true). If you want the old behavior of locking everything, do not set `Locked` at all.
5322
5323 **Compatibility:** Firefox 68, Firefox ESR 68 (Locked added in 74/68.6)\
5324 **CCK2 Equivalent:** N/A\
5325 **Preferences Affected:** `privacy.sanitize.sanitizeOnShutdown`, `privacy.clearOnShutdown.cache`, `privacy.clearOnShutdown.cookies`, `privacy.clearOnShutdown.downloads`, `privacy.clearOnShutdown.formdata`, `privacy.clearOnShutdown.history`, `privacy.clearOnShutdown.sessions`, `privacy.clearOnShutdown.siteSettings`, `privacy.clearOnShutdown.offlineApps`
5326 #### Windows (GPO)
5327 ```
5328 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Cache = 0x1 | 0x0
5329 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Cookies = 0x1 | 0x0
5330 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Downloads = 0x1 | 0x0
5331 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\FormData = 0x1 | 0x0
5332 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\History = 0x1 | 0x0
5333 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Sessions = 0x1 | 0x0
5334 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\SiteSettings = 0x1 | 0x0
5335 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\OfflineApps = 0x1 | 0x0
5336 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Locked = 0x1 | 0x0
5337 ```
5338 #### Windows (Intune)
5339 OMA-URI:
5340 ```
5341 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/A_SanitizeOnShutdown_Cache
5342 ```
5343 Value (string):
5344 ```
5345 <enabled/> or <disabled/>
5346 ```
5347 OMA-URI:
5348 ```
5349 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/B_SanitizeOnShutdown_Cookies
5350 ```
5351 Value (string):
5352 ```
5353 <enabled/> or <disabled/>
5354 ```
5355 OMA-URI:
5356 ```
5357 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/C_SanitizeOnShutdown_Downloads
5358 ```
5359 Value (string):
5360 ```
5361 <enabled/> or <disabled/>
5362 ```
5363 OMA-URI:
5364 ```
5365 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/D_SanitizeOnShutdown_FormData
5366 ```
5367 Value (string):
5368 ```
5369 <enabled/> or <disabled/>
5370 ```
5371 OMA-URI:
5372 ```
5373 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/E_SanitizeOnShutdown_History
5374 ```
5375 Value (string):
5376 ```
5377 <enabled/> or <disabled/>
5378 ```
5379 OMA-URI:
5380 ```
5381 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/F_SanitizeOnShutdown_Sessions
5382 ```
5383 Value (string):
5384 ```
5385 <enabled/> or <disabled/>
5386 ```
5387 OMA-URI:
5388 ```
5389 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/G_SanitizeOnShutdown_SiteSettings
5390 ```
5391 Value (string):
5392 ```
5393 <enabled/> or <disabled/>
5394 ```
5395 OMA-URI:
5396 ```
5397 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/H_SanitizeOnShutdown_OfflineApps
5398 ```
5399 Value (string):
5400 ```
5401 <enabled/> or <disabled/>
5402 ```
5403 OMA-URI:
5404 ```
5405 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/I_SanitizeOnShutdown_Locked
5406 ```
5407 Value (string):
5408 ```
5409 <enabled/> or <disabled/>
5410 ```
5411 #### macOS
5412 ```
5413 <dict>
5414   <key>SanitizeOnShutdown</key>
5415   <dict>
5416     <key>Cache</key>
5417     <true/> | <false/>
5418     <key>Cookies</key>
5419     <true/> | <false/>
5420     <key>Downloads</key>
5421     <true/> | <false/>
5422     <key>FormData</key>
5423     <true/> | <false/>
5424     <key>History</key>
5425     <true/> | <false/>
5426     <key>Sessions</key>
5427     <true/> | <false/>
5428     <key>SiteSettings</key>
5429     <true/> | <false/>
5430     <key>OfflineApps</key>
5431     <true/> | <false/>
5432     <key>Locked</key>
5433     <true/> | <false/>
5434   </dict>
5435 </dict>
5436 ```
5437 #### policies.json
5438 ```
5439 {
5440   "policies": {
5441     "SanitizeOnShutdown": {
5442       "Cache": true | false,
5443       "Cookies": true | false,
5444       "Downloads": true | false,
5445       "FormData": true | false,
5446       "History": true | false,
5447       "Sessions": true | false,
5448       "SiteSettings": true | false,
5449       "OfflineApps": true | false,
5450       "Locked": true | false
5451     }
5452   }
5453 }
5454 ```
5455 ### SanitizeOnShutdown (All)
5456 Clear all data on shutdown, including Browsing & Download History, Cookies, Active Logins, Cache, Form & Search History, Site Preferences and Offline Website Data.
5457
5458 **Compatibility:** Firefox 60, Firefox ESR 60\
5459 **CCK2 Equivalent:** N/A\
5460 **Preferences Affected:** `privacy.sanitize.sanitizeOnShutdown`, `privacy.clearOnShutdown.cache`, `privacy.clearOnShutdown.cookies`, `privacy.clearOnShutdown.downloads`, `privacy.clearOnShutdown.formdata`, `privacy.clearOnShutdown.history`, `privacy.clearOnShutdown.sessions`, `privacy.clearOnShutdown.siteSettings`, `privacy.clearOnShutdown.offlineApps`
5461 #### Windows (GPO)
5462 ```
5463 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown = 0x1 | 0x0
5464 ```
5465 #### Windows (Intune)
5466 OMA-URI:
5467 ```
5468 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/C_SanitizeOnShutdown
5469 ```
5470 Value (string):
5471 ```
5472 <enabled/> or <disabled/>
5473 ```
5474 #### macOS
5475 ```
5476 <dict>
5477   <key>SanitizeOnShutdown</key>
5478   <true/> | <false/>
5479 </dict>
5480 ```
5481 #### policies.json
5482 ```
5483 {
5484   "policies": {
5485     "SanitizeOnShutdown": true | false
5486   }
5487 }
5488 ```
5489 ### SearchBar
5490 Set whether or not search bar is displayed.
5491
5492 **Compatibility:** Firefox 60, Firefox ESR 60\
5493 **CCK2 Equivalent:** `showSearchBar`\
5494 **Preferences Affected:** N/A
5495
5496 #### Windows (GPO)
5497 ```
5498 Software\Policies\Mozilla\Firefox\SearchBar = "unified" | "separate"
5499 ```
5500
5501 #### Windows (Intune)
5502 OMA-URI:
5503 ```
5504 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SearchBar
5505 ```
5506 Value (string):
5507 ```
5508 <enabled/>
5509 <data id="SearchBar" value="unified | separate"/>
5510 ```
5511 #### macOS
5512 ```
5513 <dict>
5514   <key>SearchBar</key>
5515   <string>unified | separate</string>
5516 </dict>
5517 ```
5518 #### policies.json
5519 ```
5520 {
5521   "policies": {
5522     "SearchBar": "unified" | "separate"
5523   }
5524 }
5525 ```
5526 <a name="SearchEngines"></a>
5527
5528 ### SearchEngines (This policy is only available on the ESR.)
5529
5530 ### SearchEngines | Add
5531
5532 Add new search engines. Although there are only five engines available in the ADMX template, there is no limit. To add more in the ADMX template, you can duplicate the XML.
5533
5534 This policy is only available on the ESR. `Name` and `URLTemplate` are required.
5535
5536 `Name` is the name of the search engine.
5537
5538 `URLTemplate` is the search URL with {searchTerms} to substitute for the search term.
5539
5540 `Method` is either GET or POST
5541
5542 `IconURL` is a URL for the icon to use.
5543
5544 `Alias` is a keyword to use for the engine.
5545
5546 `Description` is a description of the search engine.
5547
5548 `PostData` is the POST data as name value pairs separated by &.
5549
5550 `SuggestURLTemplate` is a search suggestions URL with {searchTerms} to substitute for the search term.
5551
5552 `Encoding` is the query charset for the engine. It defaults to UTF-8.
5553
5554 **Compatibility:** Firefox ESR 60 (POST support in Firefox ESR 68, Encoding support in Firefox 91)\
5555 **CCK2 Equivalent:** `searchplugins`\
5556 **Preferences Affected:** N/A
5557
5558 #### Windows (GPO)
5559 ```
5560 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Name = "Example1"
5561 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\URLTemplate = "https://www.example.org/q={searchTerms}"
5562 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Method = "GET" | "POST"
5563 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\IconURL = "https://www.example.org/favicon.ico"
5564 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Alias = "example"
5565 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Description = "Example Description"
5566 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\SuggestURLTemplate = "https://www.example.org/suggestions/q={searchTerms}"
5567 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\PostData = "name=value&q={searchTerms}"
5568 ```
5569 #### Windows (Intune)
5570 OMA-URI:
5571 ```
5572 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_1
5573 ```
5574 Value (string):
5575 ```
5576 <enabled/>
5577 <data id="SearchEngine_Name" value="Example1"/>
5578 <data id="SearchEngine_URLTemplate" value="https://www.example.org/q={searchTerms"/>
5579 <data id="SearchEngine_Method" value="GET | POST"/>
5580 <data id="SearchEngine_IconURL" value="https://www.example.org/favicon.ico"/>
5581 <data id="SearchEngine_Alias" value="example"/>
5582 <data id="SearchEngine_Description" value="Example Description"/>
5583 <data id="SearchEngine_SuggestURLTemplate" value="https://www.example.org/suggestions/q={searchTerms}"/>
5584 <data id="SearchEngine_PostData" value="name=value&amp;q={searchTerms}"/>
5585 ```
5586 #### macOS
5587 ```
5588 <dict>
5589   <key>SearchEngines</key>
5590   <dict>
5591     <key>Add</key>
5592     <array>
5593       <dict>
5594         <key>Name</key>
5595         <string>Example1</string>
5596         <key>URLTemplate</key>
5597         <string>https://www.example.org/q={searchTerms}</string>
5598         <key>Method</key>
5599         <string>GET | POST </string>
5600         <key>IconURL</key>
5601         <string>https://www.example.org/favicon.ico</string>
5602         <key>Alias</key>
5603         <string>example</string>
5604         <key>Description</key>
5605         <string>Example Description</string>
5606         <key>SuggestURLTemplate</key>
5607         <string>https://www.example.org/suggestions/q={searchTerms}</string>
5608         <key>PostData</key>
5609         <string>name=value&q={searchTerms}</string>
5610       </dict>
5611     <array>
5612   </dict>
5613 </dict>
5614 ```
5615 #### policies.json
5616 ```
5617 {
5618   "policies": {
5619     "SearchEngines": {
5620       "Add": [
5621         {
5622           "Name": "Example1",
5623           "URLTemplate": "https://www.example.org/q={searchTerms}",
5624           "Method": "GET" | "POST",
5625           "IconURL": "https://www.example.org/favicon.ico",
5626           "Alias": "example",
5627           "Description": "Description",
5628           "PostData": "name=value&q={searchTerms}",
5629           "SuggestURLTemplate": "https://www.example.org/suggestions/q={searchTerms}"
5630         }
5631       ]
5632     }
5633   }
5634 }
5635 ```
5636 ### SearchEngines | Default
5637
5638 Set the default search engine. This policy is only available on the ESR.
5639
5640 **Compatibility:** Firefox ESR 60\
5641 **CCK2 Equivalent:** `defaultSearchEngine`\
5642 **Preferences Affected:** N/A
5643
5644 #### Windows (GPO)
5645 ```
5646 Software\Policies\Mozilla\Firefox\SearchEngines\Default = NAME_OF_SEARCH_ENGINE
5647 ```
5648 #### Windows (Intune)
5649 OMA-URI:
5650 ```
5651 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_Default
5652 ```
5653 Value (string):
5654 ```
5655 <enabled/>
5656 <data id="SearchEngines_Default" value="NAME_OF_SEARCH_ENGINE"/>
5657 ```
5658 #### macOS
5659 ```
5660 <dict>
5661   <key>SearchEngines</key>
5662   <dict>
5663     <key>Default</key>
5664     <string>NAME_OF_SEARCH_ENGINE</string>
5665   </dict>
5666 </dict>
5667 ```
5668 #### policies.json
5669 ```
5670 {
5671   "policies": {
5672     "SearchEngines": {
5673       "Default": "NAME_OF_SEARCH_ENGINE"
5674     }
5675   }
5676 }
5677 ```
5678 ### SearchEngines | PreventInstalls
5679
5680 Prevent installing search engines from webpages.
5681
5682 **Compatibility:** Firefox ESR 60\
5683 **CCK2 Equivalent:** `disableSearchEngineInstall`\
5684 **Preferences Affected:** N/A
5685
5686 #### Windows (GPO)
5687 ```
5688 Software\Policies\Mozilla\Firefox\SearchEngines\PreventInstalls = 0x1 | 0x0
5689 ```
5690 #### Windows (Intune)
5691 OMA-URI:
5692 ```
5693 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_PreventInstalls
5694 ```
5695 Value (string):
5696 ```
5697 <enabled/> or <disabled/>
5698 ```
5699 #### macOS
5700 ```
5701 <dict>
5702   <key>SearchEngines</key>
5703   <dict>
5704     <key>PreventInstalls</key>
5705     <true/> | <false/>
5706   </dict>
5707 </dict>
5708 ```
5709 #### policies.json
5710 ```
5711 {
5712   "policies": {
5713     "SearchEngines": {
5714       "PreventInstalls": true | false
5715     }
5716   }
5717 }
5718 ```
5719 ### SearchEngines | Remove
5720
5721 Hide built-in search engines. This policy is only available on the ESR.
5722
5723 **Compatibility:** Firefox ESR 60.2\
5724 **CCK2 Equivalent:** `removeDefaultSearchEngines` (removed all built-in engines)\
5725 **Preferences Affected:** N/A
5726
5727 #### Windows (GPO)
5728 ```
5729 Software\Policies\Mozilla\Firefox\SearchEngines\Remove\1 = NAME_OF_SEARCH_ENGINE
5730 ```
5731 #### Windows (Intune)
5732 OMA-URI:
5733 ```
5734 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_Remove
5735 ```
5736 Value (string):
5737 ```
5738 <enabled/>
5739 <data id="SearchEngines_Remove" value="1&#xF000;NAME_OF_SEARCH_ENGINE"/>
5740 ```
5741 #### macOS
5742 ```
5743 <dict>
5744   <key>SearchEngines</key>
5745   <dict>
5746     <key>Remove</key>
5747     <array>
5748       <string>NAME_OF_SEARCH_ENGINE</string>
5749     </array>
5750   </dict>
5751 </dict>
5752 ```
5753 #### policies.json
5754 ```
5755 {
5756   "policies": {
5757     "SearchEngines": {
5758       "Remove": ["NAME_OF_SEARCH_ENGINE"]
5759     }
5760   }
5761 }
5762 ```
5763 ### SearchSuggestEnabled
5764
5765 Enable search suggestions.
5766
5767 **Compatibility:** Firefox 68, Firefox ESR 68\
5768 **CCK2 Equivalent:** N/A\
5769 **Preferences Affected:** `browser.urlbar.suggest.searches`, `browser.search.suggest.enabled`
5770
5771 #### Windows (GPO)
5772 ```
5773 Software\Policies\Mozilla\Firefox\SearchSuggestEnabled = 0x1 | 0x0
5774 ```
5775 #### Windows (Intune)
5776 OMA-URI:
5777 ```
5778 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchSuggestEnabled
5779 ```
5780 Value (string):
5781 ```
5782 <enabled/> or <disabled/>
5783 ```
5784 #### macOS
5785 ```
5786 <dict>
5787   <key>SearchSuggestEnabled</key>
5788   <true/> | <false/>
5789 </dict>
5790 ```
5791 #### policies.json
5792 ```
5793 {
5794   "policies": {
5795     "SearchSuggestEnabled": true | false
5796   }
5797 }
5798 ```
5799 ### SecurityDevices
5800
5801 Add or delete PKCS #11 modules.
5802
5803 **Compatibility:** Firefox 114, Firefox ESR 112.12\
5804 **CCK2 Equivalent:** N/A\
5805 **Preferences Affected:** N/A
5806
5807 #### Windows (GPO)
5808 ```
5809 Software\Policies\Mozilla\Firefox\SecurityDevices\Add\NAME_OF_DEVICE_TO_ADD = PATH_TO_LIBRARY_FOR_DEVICE
5810 Software\Policies\Mozilla\Firefox\SecurityDevices\Remove\1 = NAME_OF_DEVICE_TO_REMOVE
5811 ```
5812 #### Windows (Intune)
5813 OMA-URI:
5814 ```
5815 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SecurityDevices/SecurityDevices_Add
5816 ```
5817 Value (string):
5818 ```
5819 <enabled/>
5820 <data id="SecurityDevices" value="NAME_OF_DEVICE_TO_ADD&#xF000;PATH_TO_LIBRARY_FOR_DEVICE"/>
5821 ```
5822 OMA-URI:
5823 ```
5824 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SecurityDevices/SecurityDevices_Delete
5825 ```
5826 Value (string):
5827 ```
5828 <enabled/>
5829 <data id="SecurityDevices" value="1&#xF000;NAME_OF_DEVICE_TO_REMOVE"/>
5830 ```
5831 #### macOS
5832 ```
5833 <dict>
5834   <key>SecurityDevices</key>
5835   <dict>
5836     <key>Add<key>
5837     <dict>
5838       <key>NAME_OF_DEVICE_TO_ADD</key>
5839       <string>PATH_TO_LIBRARY_FOR_DEVICE</string>
5840     </dict>
5841     <key>Delete</add>
5842     <array>
5843       <string>NAME_OF_DEVICE_TO_DELETE</string>
5844     </array>
5845   </dict>
5846 </dict>
5847 ```
5848 #### policies.json
5849 ```
5850 {
5851   "policies": {
5852     "SecurityDevices": {
5853       "Add": {
5854         "NAME_OF_DEVICE_TO_ADD": "PATH_TO_LIBRARY_FOR_DEVICE"
5855       },
5856       "Delete": ["NAME_OF_DEVICE_TO_DELETE"]
5857     }
5858   }
5859 }
5860 ```
5861 ### SecurityDevices (Deprecated)
5862
5863 Install PKCS #11 modules.
5864
5865 **Compatibility:** Firefox 64, Firefox ESR 60.4\
5866 **CCK2 Equivalent:** `certs.devices`\
5867 **Preferences Affected:** N/A
5868
5869 #### Windows (GPO)
5870 ```
5871 Software\Policies\Mozilla\Firefox\SecurityDevices\NAME_OF_DEVICE = PATH_TO_LIBRARY_FOR_DEVICE
5872 ```
5873 #### Windows (Intune)
5874 OMA-URI:
5875 ```
5876 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SecurityDevices
5877 ```
5878 Value (string):
5879 ```
5880 <enabled/>
5881 <data id="SecurityDevices" value="NAME_OF_DEVICE&#xF000;PATH_TO_LIBRARY_FOR_DEVICE"/>
5882 ```
5883 #### macOS
5884 ```
5885 <dict>
5886   <key>SecurityDevices</key>
5887   <dict>
5888     <key>NAME_OF_DEVICE</key>
5889     <string>PATH_TO_LIBRARY_FOR_DEVICE</string>
5890   </dict>
5891 </dict>
5892 ```
5893 #### policies.json
5894 ```
5895 {
5896   "policies": {
5897     "SecurityDevices": {
5898       "NAME_OF_DEVICE": "PATH_TO_LIBRARY_FOR_DEVICE"
5899     }
5900   }
5901 }
5902 ```
5903 ### ShowHomeButton
5904 Show the home button on the toolbar.
5905
5906 Future versions of Firefox will not show the home button by default.
5907
5908 **Compatibility:** Firefox 88, Firefox ESR 78.10\
5909 **CCK2 Equivalent:** N/A\
5910 **Preferences Affected:** N/A
5911
5912 #### Windows (GPO)
5913 ```
5914 Software\Policies\Mozilla\Firefox\ShowHomeButton = 0x1 | 0x0
5915 ```
5916 #### Windows (Intune)
5917 OMA-URI:
5918 ```
5919 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/Homepage_ShowHomeButton
5920 ```
5921 Value (string):
5922 ```
5923 <enabled/> or <disabled/>
5924 ```
5925 #### macOS
5926 ```
5927 <dict>
5928   <key>ShowHomeButton</key>
5929   <true/> | <false/>
5930 </dict>
5931 ```
5932 #### policies.json
5933 ```
5934 {
5935   "policies": {
5936     "ShowHomeButton": true | false
5937   }
5938 }
5939 ```
5940 ### SSLVersionMax
5941
5942 Set and lock the maximum version of TLS. (Firefox defaults to a maximum of TLS 1.3.)
5943
5944 **Compatibility:** Firefox 66, Firefox ESR 60.6\
5945 **CCK2 Equivalent:** N/A\
5946 **Preferences Affected:** `security.tls.version.max`
5947
5948 #### Windows (GPO)
5949 ```
5950 Software\Policies\Mozilla\Firefox\SSLVersionMax = "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
5951 ```
5952 #### Windows (Intune)
5953 OMA-URI:
5954 ```
5955 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SSLVersionMax
5956 ```
5957 Value (string):
5958 ```
5959 <enabled/>
5960 <data id="SSLVersion" value="tls1 | tls1.2 | tls1.3"/>
5961 ```
5962 #### macOS
5963 ```
5964 <dict>
5965   <key>SSLVersionMax</key>
5966   <string>tls1 | tls1.1 | tls1.2 | tls1.3</string>
5967 </dict>
5968 ```
5969
5970 #### policies.json
5971 ```
5972 {
5973   "policies": {
5974     "SSLVersionMax": "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
5975   }
5976 }
5977 ```
5978 ### SSLVersionMin
5979
5980 Set and lock the minimum version of TLS. (Firefox defaults to a minimum of TLS 1.2.)
5981
5982 **Compatibility:** Firefox 66, Firefox ESR 60.6\
5983 **CCK2 Equivalent:** N/A\
5984 **Preferences Affected:** `security.tls.version.min`
5985
5986 #### Windows (GPO)
5987 ```
5988 Software\Policies\Mozilla\Firefox\SSLVersionMin = "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
5989 ```
5990 #### Windows (Intune)
5991 OMA-URI:
5992 ```
5993 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SSLVersionMin
5994 ```
5995 Value (string):
5996 ```
5997 <enabled/>
5998 <data id="SSLVersion" value="tls1 | tls1.2 | tls1.3"/>
5999 ```
6000 #### macOS
6001 ```
6002 <dict>
6003   <key>SSLVersionMin</key>
6004   <string>tls1 | tls1.1 | tls1.2 | tls1.3</string>
6005 </dict>
6006 ```
6007
6008 #### policies.json
6009 ```
6010 {
6011   "policies": {
6012     "SSLVersionMin": "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
6013   }
6014 }
6015 ```
6016 ### SupportMenu
6017 Add a menuitem to the help menu for specifying support information.
6018
6019 **Compatibility:** Firefox 68.0.1, Firefox ESR 68.0.1\
6020 **CCK2 Equivalent:** helpMenu\
6021 **Preferences Affected:** N/A
6022
6023 #### Windows (GPO)
6024 ```
6025 Software\Policies\Mozilla\Firefox\SupportMenu\Title = "Support Menu"
6026 Software\Policies\Mozilla\Firefox\SupportMenu\URL = "http://example.com/support"
6027 Software\Policies\Mozilla\Firefox\SupportMenu\AccessKey = "S"
6028 ```
6029 #### Windows (Intune)
6030 OMA-URI:
6031 ```
6032 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SupportMenu
6033 ```
6034 Value (string):
6035 ```
6036 <enabled/>
6037 <data id="SupportMenuTitle" value="Support Menu"/>
6038 <data id="SupportMenuURL" value="http://example.com/support"/>
6039 <data id="SupportMenuAccessKey" value="S"/>
6040 ```
6041 #### macOS
6042 ```
6043 <dict>
6044   <key>SupportMenu</key>
6045   <dict>
6046     <key>Title</key>
6047     <string>SupportMenu</string>
6048     <key>URL</key>
6049     <string>http://example.com/support</string>
6050     <key>AccessKey</key>
6051     <string>S</string>
6052   </dict>
6053 </dict>
6054 ```
6055 #### policies.json
6056 ```
6057 {
6058   "policies": {
6059     "SupportMenu": {
6060       "Title": "Support Menu",
6061       "URL": "http://example.com/support",
6062       "AccessKey": "S"
6063     }
6064   }
6065 }
6066 ```
6067 ### StartDownloadsInTempDirectory
6068 Force downloads to start off in a local, temporary location rather than the default download directory.
6069
6070 **Compatibility:** Firefox 102\
6071 **CCK2 Equivalent:** N/A\
6072 **Preferences Affected:** `browser.download.start_downloads_in_tmp_dir`
6073
6074 #### Windows (GPO)
6075 ```
6076 Software\Policies\Mozilla\Firefox\StartDownloadsInTempDirectory = 0x1 | 0x0
6077 ```
6078 #### Windows (Intune)
6079 OMA-URI:
6080 ```
6081 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/StartDownloadsInTempDirectory
6082 ```
6083 Value (string):
6084 ```
6085 <enabled/> or <disabled/>
6086 ```
6087 #### macOS
6088 ```
6089 <dict>
6090   <key>StartDownloadsInTempDirectory</key>
6091   <true/> | <false/>
6092 </dict>
6093 ```
6094 #### policies.json
6095 ```
6096 {
6097   "policies": {
6098     "StartDownloadsInTempDirectory": true | false
6099 }
6100 ```
6101 ### UserMessaging
6102
6103 Prevent Firefox from messaging the user in certain situations.
6104
6105 `WhatsNew` Remove the "What's New" icon and menuitem.
6106
6107 `ExtensionRecommendations` If false, don't recommend extensions while the user is visiting web pages.
6108
6109 `FeatureRecommendations` If false, don't recommend browser features.
6110
6111 `UrlbarInterventions` If false, Don't offer Firefox specific suggestions in the URL bar.
6112
6113 `SkipOnboarding` If true, don't show onboarding messages on the new tab page.
6114
6115 `MoreFromMozilla` If false, don't show the "More from Mozilla" section in Preferences. (Firefox 98)
6116
6117 `Locked` prevents the user from changing user messaging preferences.
6118
6119 **Compatibility:** Firefox 75, Firefox ESR 68.7\
6120 **CCK2 Equivalent:** N/A\
6121 **Preferences Affected:** `browser.messaging-system.whatsNewPanel.enabled`, `browser.newtabpage.activity-stream.asrouter.userprefs.cfr.addons`, `browser.newtabpage.activity-stream.asrouter.userprefs.cfr.features`, `browser.aboutwelcome.enabled`, `browser.preferences.moreFromMozilla`
6122
6123 #### Windows (GPO)
6124 ```
6125 Software\Policies\Mozilla\Firefox\UserMessaging\WhatsNew = 0x1 | 0x0
6126 Software\Policies\Mozilla\Firefox\UserMessaging\ExtensionRecommendations = 0x1 | 0x0
6127 Software\Policies\Mozilla\Firefox\UserMessaging\FeatureRecommendations = 0x1 | 0x0
6128 Software\Policies\Mozilla\Firefox\UserMessaging\UrlbarInterventions = 0x1 | 0x0
6129 Software\Policies\Mozilla\Firefox\UserMessaging\SkipOnboarding = 0x1 | 0x0
6130 Software\Policies\Mozilla\Firefox\UserMessaging\MoreFromMozilla = 0x1 | 0x0
6131 Software\Policies\Mozilla\Firefox\UserMessaging\Locked = 0x1 | 0x0
6132 ```
6133 #### Windows (Intune)
6134 OMA-URI:
6135 ```
6136 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_WhatsNew
6137 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_ExtensionRecommendations
6138 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_FeatureRecommendations
6139 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_UrlbarInterventions
6140 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_SkipOnboarding
6141 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_MoreFromMozilla
6142 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_Locked
6143 ```
6144 Value (string):
6145 ```
6146 <enabled/> or <disabled/>
6147 ```
6148 #### macOS
6149 ```
6150 <dict>
6151   <key>UserMessaging</key>
6152   <dict>
6153     <key>WhatsNew</key>
6154     <true/> | <false/>
6155     <key>ExtensionRecommendations</key>
6156     <true/> | <false/>
6157     <key>FeatureRecommendations</key>
6158     <true/> | <false/>
6159     <key>UrlbarInterventions</key>
6160     <true/> | <false/>
6161     <key>SkipOnboarding</key>
6162     <true/> | <false/>
6163     <key>MoreFromMozilla</key>
6164     <true/> | <false/>
6165     <key>Locked</key>
6166     <true/> | <false/>
6167   </dict>
6168 </dict>
6169 ```
6170 #### policies.json
6171 ```
6172 {
6173   "policies": {
6174     "UserMessaging": {
6175       "WhatsNew": true | false,
6176       "ExtensionRecommendations": true | false,
6177       "FeatureRecommendations": true | false,
6178       "UrlbarInterventions": true | false,
6179       "SkipOnboarding": true | false,
6180       "MoreFromMozilla": true | false,
6181       "Locked": true | false
6182     }
6183   }
6184 }
6185 ```
6186 ### UseSystemPrintDialog
6187 Use the system print dialog instead of the print preview window.
6188
6189 **Compatibility:** Firefox 102\
6190 **CCK2 Equivalent:** N/A\
6191 **Preferences Affected:** `print.prefer_system_dialog`
6192
6193 #### Windows (GPO)
6194 ```
6195 Software\Policies\Mozilla\Firefox\UseSystemPrintDialog = 0x1 | 0x0
6196 ```
6197 #### Windows (Intune)
6198 OMA-URI:
6199 ```
6200 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/UseSystemPrintDialog
6201 ```
6202 Value (string):
6203 ```
6204 <enabled/> or <disabled/>
6205 ```
6206 #### macOS
6207 ```
6208 <dict>
6209   <key>UseSystemPrintDialog</key>
6210   <true/> | <false/>
6211 </dict>
6212 ```
6213 #### policies.json
6214 ```
6215 {
6216   "policies": {
6217     "UseSystemPrintDialog": true | false
6218   }
6219 }
6220 ```
6221 ### WebsiteFilter
6222 Block websites from being visited. The parameters take an array of Match Patterns, as documented in https://developer.mozilla.org/en-US/Add-ons/WebExtensions/Match_patterns.
6223 The arrays are limited to 1000 entries each.
6224
6225 If you want to block all URLs, you can use `<all_urls>` or `*://*/*`. You can't have just a `*` on the right side.
6226
6227 For specific protocols, use `https://*/*` or `http://*/*`.
6228
6229 As of Firefox 83 and Firefox ESR 78.5, file URLs are supported.
6230
6231 **Compatibility:** Firefox 60, Firefox ESR 60\
6232 **CCK2 Equivalent:** N/A\
6233 **Preferences Affected:** N/A
6234
6235 #### Windows (GPO)
6236 ```
6237 Software\Policies\Mozilla\Firefox\WebsiteFilter\Block\1 = "<all_urls>"
6238 Software\Policies\Mozilla\Firefox\WebsiteFilter\Exceptions\1 = "http://example.org/*"
6239 ```
6240 #### Windows (Intune)
6241 OMA-URI:
6242 ```
6243 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/B_WebsiteFilter_Block
6244 ```
6245 Value (string):
6246 ```
6247 <enabled/> <data id="WebsiteFilter" value="1&#xF000;&#60;all_urls&#62;"/>
6248 ```
6249 OMA-URI:
6250 ```
6251 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/B_WebsiteFilter_Exceptions
6252 ```
6253 Value (string):
6254 ```
6255 <enabled/>
6256 <data id="WebsiteFilter" value="1&#xF000;http://example.org/*"/>
6257 ```
6258 #### macOS
6259 ```
6260 <dict>
6261   <key>WebsiteFilter</key>
6262   <dict>
6263     <key>Block</key>
6264     <array>
6265       <string><all_urls></string>
6266     </array>
6267     <key>Exceptions</key>
6268     <array>
6269       <string>http://example.org/*</string>
6270     </array>
6271   </dict>
6272
6273 </dict>
6274 ```
6275 #### policies.json
6276 ```
6277 {
6278   "policies": {
6279     "WebsiteFilter": {
6280       "Block": ["<all_urls>"],
6281       "Exceptions": ["http://example.org/*"]
6282     }
6283   }
6284 }
6285 ```
6286 ### WindowsSSO
6287 Allow Windows single sign-on for Microsoft, work, and school accounts.
6288
6289 If this policy is set to true, Firefox will use credentials stored in Windows to sign in to Microsoft, work, and school accounts.
6290
6291 **Compatibility:** Firefox 91\
6292 **CCK2 Equivalent:** N/A\
6293 **Preferences Affected:** `network.http.windows-sso.enabled`
6294
6295 #### Windows (GPO)
6296 ```
6297 Software\Policies\Mozilla\Firefox\WindowsSSO = 0x1 | 0x0
6298 ```
6299 #### Windows (Intune)
6300 OMA-URI:
6301 ```
6302 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/WindowsSSO
6303 ```
6304 Value (string):
6305 ```
6306 <enabled/> or <disabled/>
6307 ```
6308 #### policies.json
6309 ```
6310 {
6311   "policies": {
6312     "WindowsSSO": true | false
6313   }
6314 }
6315 ```