README.md

   1 **These policies are in active development and so might contain changes that do not work with current versions of Firefox.**
   2
   3 **You should use the [officially released versions](https://github.com/mozilla/policy-templates/releases) if you are deploying changes.**
   4
   5 Policies can be specified using the [Group Policy templates on Windows](https://github.com/mozilla/policy-templates/tree/master/windows), [Intune on Windows](https://support.mozilla.org/kb/managing-firefox-intune), [configuration profiles on macOS](https://github.com/mozilla/policy-templates/tree/master/mac), or by creating a file called `policies.json`. On Windows, create a directory called `distribution` where the EXE is located and place the file there. On Mac, the file goes into `Firefox.app/Contents/Resources/distribution`.  On Linux, the file goes into `firefox/distribution`, where `firefox` is the installation directory for firefox, which varies by distribution or you can specify system-wide policy by placing the file in `/etc/firefox/policies`.
   6
   7 | Policy Name | Description
   8 | --- | --- |
   9 | **[`AppAutoUpdate`](#appautoupdate)** |  Enable or disable automatic application update.
  10 | **[`AppUpdateURL`](#appupdateurl)** | Change the URL for application update.
  11 | **[`Authentication`](#authentication)** | Configure sites that support integrated authentication.
  12 | **[`BlockAboutAddons`](#blockaboutaddons)** | Block access to the Add-ons Manager (about:addons).
  13 | **[`BlockAboutConfig`](#blockaboutconfig)** | Block access to about:config.
  14 | **[`BlockAboutProfiles`](#blockaboutprofiles)** | Block access to About Profiles (about:profiles).
  15 | **[`BlockAboutSupport`](#blockaboutsupport)** | Block access to Troubleshooting Information (about:support).
  16 | **[`Bookmarks`](#bookmarks)** | Add bookmarks in either the bookmarks toolbar or menu.
  17 | **[`CaptivePortal`](#captiveportal)** | Enable or disable the detection of captive portals.
  18 | **[`Certificates`](#certificates)** |
  19 | **[`Certificates -> ImportEnterpriseRoots`](#certificates--importenterpriseroots)** | Trust certificates that have been added to the operating system certificate store by a user or administrator.
  20 | **[`Certificates -> Install`](#certificates--install)** | Install certificates into the Firefox certificate store.
  21 | **[`Cookies`](#cookies)** | Configure cookie preferences.
  22 | **[`DisableAppUpdate`](#disableappupdate)** | Turn off application updates.
  23 | **[`DisableBuiltinPDFViewer`](#disablebuiltinpdfviewer)** | Disable the built in PDF viewer.
  24 | **[`DisabledCiphers`](#disabledciphers)** | Disable ciphers.
  25 | **[`DisableDefaultBrowserAgent`](#disabledefaultbrowseragent)** | Prevent the default browser agent from taking any actions (Windows only).
  26 | **[`DisableDeveloperTools`](#disabledevelopertools)** | Remove access to all developer tools.
  27 | **[`DisableFeedbackCommands`](#disablefeedbackcommands)** | Disable the menus for reporting sites.
  28 | **[`DisableFirefoxScreenshots`](#disablefirefoxscreenshots)** | Remove access to Firefox Screenshots.
  29 | **[`DisableFirefoxAccounts`](#disablefirefoxaccounts)** | Disable Firefox Accounts integration (Sync).
  30 | **[`DisableFirefoxStudies`](#disablefirefoxstudies)** | Disable Firefox studies (Shield).
  31 | **[`DisableForgetButton`](#disableforgetbutton)** | Disable the "Forget" button.
  32 | **[`DisableFormHistory`](#disableformhistory)** | Turn off saving information on web forms and the search bar.
  33 | **[`DisableMasterPasswordCreation`](#disablemasterpasswordcreation)** | Remove the master password functionality.
  34 | **[`DisablePasswordReveal`](#disablepasswordreveal)** | Do not allow passwords to be revealed in saved logins.
  35 | **[`DisablePocket`](#disablepocket)** | Remove Pocket in the Firefox UI.
  36 | **[`DisablePrivateBrowsing`](#disableprivatebrowsing)** | Remove access to private browsing.
  37 | **[`DisableProfileImport`](#disableprofileimport)** | Disables the "Import data from another browser" option in the bookmarks window.
  38 | **[`DisableProfileRefresh`](#disableprofilerefresh)** | Disable the Refresh Firefox button on about:support and support.mozilla.org
  39 | **[`DisableSafeMode`](#disablesafemode)** | Disable safe mode within the browser.
  40 | **[`DisableSecurityBypass`](#disablesecuritybypass)** | Prevent the user from bypassing security in certain cases.
  41 | **[`DisableSetDesktopBackground`](#disablesetdesktopbackground)** | Remove the "Set As Desktop Background..." menuitem when right clicking on an image.
  42 | **[`DisableSystemAddonUpdate`](#disablesystemaddonupdate)** | Prevent system add-ons from being installed or update.
  43 | **[`DisableTelemetry`](#disabletelemetry)** | DisableTelemetry
  44 | **[`DisplayBookmarksToolbar`](#displaybookmarkstoolbar)** | Set the initial state of the bookmarks toolbar.
  45 | **[`DisplayMenuBar (Deprecated)`](#displaymenubar-deprecated)** | Set the initial state of the menubar.
  46 | **[`DisplayMenuBar`](#displaymenubar)** | Set the state of the menubar.
  47 | **[`DNSOverHTTPS`](#dnsoverhttps)** | Configure DNS over HTTPS.
  48 | **[`DontCheckDefaultBrowser`](#dontcheckdefaultbrowser)** | Don't check if Firefox is the default browser at startup.
  49 | **[`DefaultDownloadDirectory`](#defaultdownloaddirectory)** | Set the default download directory.
  50 | **[`DownloadDirectory`](#downloaddirectory)** | Set and lock the download directory.
  51 | **[`EnableTrackingProtection`](#enabletrackingprotection)** | Configure tracking protection.
  52 | **[`EncryptedMediaExtensions`](#encryptedmediaextensions)** | Enable or disable Encrypted Media Extensions and optionally lock it.
  53 | **[`EnterprisePoliciesEnabled`](#enterprisepoliciesenabled)** | Enable policy support on macOS.
  54 | **[`Extensions`](#extensions)** | Control the installation, uninstallation and locking of extensions.
  55 | **[`ExtensionSettings`](#extensionsettings)** | Manage all aspects of extensions.
  56 | **[`ExtensionUpdate`](#extensionupdate)** | Control extension updates.
  57 | **[`FlashPlugin`](#flashplugin)** | Configure the default Flash plugin policy as well as origins for which Flash is allowed.
  58 | **[`FirefoxHome`](#firefoxhome)** | Customize the Firefox Home page.
  59 | **[`HardwareAcceleration`](#hardwareacceleration)** | Control hardware acceleration.
  60 | **[`Handlers`](#handlers)** | Configure default application handlers.
  61 | **[`Homepage`](#homepage)** | Configure the default homepage and how Firefox starts.
  62 | **[`InstallAddonsPermission`](#installaddonspermission)** | Configure the default extension install policy as well as origins for extension installs are allowed.
  63 | **[`LegacyProfiles`](#legacyprofiles)** | Disable the feature enforcing a separate profile for each installation.
  64 | **[`LocalFileLinks`](#localfilelinks)** | Enable linking to local files by origin.
  65 | **[`ManagedBookmarks`](#managedbookmarks)** | Configures a list of bookmarks managed by an administrator that cannot be changed by the user.
  66 | **[`PrimaryPassword`](#primarypassword)** | Require or prevent using a primary (formerly master) password.
  67 | **[`NetworkPrediction`](#networkprediction)** | Enable or disable network prediction (DNS prefetching).
  68 | **[`NewTabPage`](#newtabpage)** | Enable or disable the New Tab page.
  69 | **[`NoDefaultBookmarks`](#nodefaultbookmarks)** | Disable the creation of default bookmarks.
  70 | **[`OfferToSaveLogins`](#offertosavelogins)** | Control whether or not Firefox offers to save passwords.
  71 | **[`OfferToSaveLoginsDefault`](#offertosaveloginsdefault)** | Set the default value for whether or not Firefox offers to save passwords.
  72 | **[`OverrideFirstRunPage`](#overridefirstrunpage)** | Override the first run page.
  73 | **[`OverridePostUpdatePage`](#overridepostupdatepage)** | Override the upgrade page.
  74 | **[`PasswordManagerEnabled`](#passwordmanagerenabled)** | Remove (some) access to the password manager.
  75 | **[`PDFjs`](#pdfjs)** | Disable or configure PDF.js, the built-in PDF viewer.
  76 | **[`Permissions`](#permissions)** | Set permissions associated with camera, microphone, location, and notifications.
  77 | **[`PictureInPicture`](#pictureinpicture)** | Enable or disable Picture-in-Picture.
  78 | **[`PopupBlocking`](#popupblocking)** | Configure the default pop-up window policy as well as origins for which pop-up windows are allowed.
  79 | **[`Preferences`](#preferences)** | Set and lock preferences.
  80 | **[`Preferences (Deprecated)`](#preferences-deprecated)** | Set and lock some preferences.
  81 | **[`PromptForDownloadLocation`](#promptfordownloadlocation)** | Ask where to save each file before downloading.
  82 | **[`Proxy`](#proxy)** | Configure proxy settings.
  83 | **[`RequestedLocales`](#requestedlocales)** | Set the the list of requested locales for the application in order of preference.
  84 | **[`SanitizeOnShutdown` (All)](#sanitizeonshutdown-all)** | Clear all data on shutdown.
  85 | **[`SanitizeOnShutdown` (Selective)](#sanitizeonshutdown-selective)** | Clear data on shutdown.
  86 | **[`SearchBar`](#searchbar)** | Set whether or not search bar is displayed.
  87 | **[`SearchEngines`](#searchengines-this-policy-is-only-available-on-the-esr)** |
  88 | **[`SearchEngines -> Default`](#searchengines--default)** | Set the default search engine.
  89 | **[`SearchEngines -> PreventInstalls`](#searchengines--preventinstalls)** | Prevent installing search engines from webpages.
  90 | **[`SearchEngines -> Remove`](#searchengines--remove)** | Hide built-in search engines.
  91 | **[`SearchEngines -> Add`](#searchengines--add)** | Add new search engines.
  92 | **[`SearchSuggestEnabled`](#searchsuggestenabled)** | Enable search suggestions.
  93 | **[`SecurityDevices`](#securitydevices)** | Install PKCS #11 modules.
  94 | **[`SSLVersionMax`](#sslversionmax)** | Set and lock the maximum version of TLS.
  95 | **[`SSLVersionMin`](#sslversionmin)** | Set and lock the minimum version of TLS.
  96 | **[`SupportMenu`](#supportmenu)** | Add a menuitem to the help menu for specifying support information.
  97 | **[`UserMessaging`](#usermessaging)** | Don't show certain messages to the user.
  98 | **[`WebsiteFilter`](#websitefilter)** | Block websites from being visited.
  99
 100 ### AppAutoUpdate
 101
 102 Enable or disable **automatic** application update.
 103
 104 If set to true, application updates are installed without user approval.
 105
 106 If set to false, application updates are downloaded but the user can choose when to install the update.
 107
 108 If you have disabled updates via DisableAppUpdate, this policy has no effect.
 109
 110 **Compatibility:** Firefox 75, Firefox ESR 68.7\
 111 **CCK2 Equivalent:** N/A\
 112 **Preferences Affected:** app.update.auto
 113
 114 #### Windows (GPO)
 115 ```
 116 Software\Policies\Mozilla\Firefox\AppAutoUpdate = 0x1 | 0x0
 117 ```
 118 #### Windows (Intune)
 119 OMA-URI:
 120 ```
 121 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AppAutoUpdate
 122 ```
 123 Value (string):
 124 ```
 125 <enabled/> or <disabled/>
 126 ```
 127 #### macOS
 128 ```
 129 <dict>
 130   <key>AppAutoUpdate</key>
 131   <true/> | <false/>
 132 </dict>
 133 ```
 134 #### policies.json
 135 ```
 136 {
 137   "policies": {
 138     "AppAutoUpdate": true | false
 139   }
 140 }
 141 ```
 142 ### AppUpdateURL
 143
 144 Change the URL for application update.
 145
 146 **Compatibility:** Firefox 62, Firefox ESR 60.2\
 147 **CCK2 Equivalent:** N/A\
 148 **Preferences Affected:** `app.update.url`
 149
 150 #### Windows (GPO)
 151 ```
 152 Software\Policies\Mozilla\Firefox\AppUpdateURL = "https://yoursite.com"
 153 ```
 154 #### Windows (Intune)
 155 OMA-URI:
 156 ```
 157 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AppUpdateURL
 158 ```
 159 Value (string):
 160 ```
 161 <enabled/>
 162 <data id="AppUpdateURL" value="https://yoursite.com"/>
 163 ```
 164 #### macOS
 165 ```
 166 <dict>
 167   <key>AppUpdateURL</key>
 168   <string>https://yoursite.com</string>
 169 </dict>
 170 ```
 171 #### policies.json
 172 ```
 173 {
 174   "policies": {
 175     "AppUpdateURL": "https://yoursite.com"
 176   }
 177 }
 178 ```
 179 ### Authentication
 180
 181 Configure sites that support integrated authentication.
 182
 183 See https://developer.mozilla.org/en-US/docs/Mozilla/Integrated_authentication for more information.
 184
 185 `PrivateBrowsing` enables integrated authentication in private browsing.
 186
 187 **Compatibility:** Firefox 60, Firefox ESR 60 (AllowNonFQDN added in 62/60.2, AllowProxies added in 70/68.2, Locked added in 71/68.3, PrivateBrowsing added in 77/68.9)\
 188 **CCK2 Equivalent:** N/A\
 189 **Preferences Affected:** `network.negotiate-auth.trusted-uris`,`network.negotiate-auth.delegation-uris`,`network.automatic-ntlm-auth.trusted-uris`,`network.automatic-ntlm-auth.allow-non-fqdn`,`network.negotiate-auth.allow-non-fqdn`,`network.automatic-ntlm-auth.allow-proxies`,`network.negotiate-auth.allow-proxies`,`network.auth.private-browsing-sso`
 190
 191 #### Windows (GPO)
 192 ```
 193 Software\Policies\Mozilla\Firefox\Authentication\SPNEGO\1 = "mydomain.com"
 194 Software\Policies\Mozilla\Firefox\Authentication\SPNEGO\2 = "https://myotherdomain.com"
 195 Software\Policies\Mozilla\Firefox\Authentication\Delegated\1 = "mydomain.com"
 196 Software\Policies\Mozilla\Firefox\Authentication\Delegated\2 = "https://myotherdomain.com"
 197 Software\Policies\Mozilla\Firefox\Authentication\NTLM\1 = "mydomain.com"
 198 Software\Policies\Mozilla\Firefox\Authentication\NTLM\2 = "https://myotherdomain.com"
 199 Software\Policies\Mozilla\Firefox\Authentication\AllowNonFQDN\SPNEGO = 0x1 | 0x0
 200 Software\Policies\Mozilla\Firefox\Authentication\AllowNonFQDN\NTLM = 0x1 | 0x0
 201 Software\Policies\Mozilla\Firefox\Authentication\AllowProxies\SPNEGO = 0x1 | 0x0
 202 Software\Policies\Mozilla\Firefox\Authentication\AllowProxies\NTLM = 0x1 | 0x0
 203 Software\Policies\Mozilla\Firefox\Authentication\Locked = 0x1 | 0x0
 204 Software\Policies\Mozilla\Firefox\Authentication\PrivateBrowsing = 0x1 | 0x0
 205 ```
 206 #### Windows (Intune)
 207 OMA-URI:
 208 ```
 209 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_SPNEGO
 210 ```
 211 Value (string):
 212 ```
 213 <enabled/>
 214 <data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
 215 ```
 216 OMA-URI:
 217 ```
 218 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_Delegated
 219 ```
 220 Value (string):
 221 ```
 222 <enabled/>
 223 <data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
 224 ```
 225 OMA-URI:
 226 ```
 227 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_NTLM
 228 ```
 229 Value (string):
 230 ```
 231 <enabled/>
 232 <data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
 233 ```
 234 OMA-URI:
 235 ```
 236 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_AllowNonFQDN
 237 ```
 238 Value (string):
 239 ```
 240 <enabled/>
 241 <data id="Authentication_AllowNonFQDN_NTLM" value="true | false"/>
 242 <data id="Authentication_AllowNonFQDN_SPNEGO" value="true | false"/>
 243 ```
 244 OMA-URI:
 245 ```
 246 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_Locked
 247 ```
 248 Value (string):
 249 ```
 250 <enabled/> or <disabled/>
 251 ```
 252 OMA-URI:
 253 ```
 254 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_PrivateBrowsing
 255 ```
 256 Value (string):
 257 ```
 258 <enabled/> or <disabled/>
 259 ```
 260 #### macOS
 261 ```
 262 <dict>
 263   <key>Authentication</key>
 264   <dict>
 265     <key>SPNEGO</key>
 266     <array>
 267       <string>mydomain.com</string>
 268       <string>https://myotherdomain.com</string>
 269     </array>
 270     <key>Delegated</key>
 271     <array>
 272       <string>mydomain.com</string>
 273       <string>https://myotherdomain.com</string>
 274     </array>
 275     <key>NTLM</key>
 276     <array>
 277       <string>mydomain.com</string>
 278       <string>https://myotherdomain.com</string>
 279     </array>
 280     <key>AllowNonFQDN</key>
 281       <dict>
 282       <key>SPNEGO</key>
 283       <true/> | <false/>
 284       <key>NTLM</key>
 285       <true/> | <false/>
 286     </dict>
 287     <key>AllowProxies</key>
 288       <dict>
 289       <key>SPNEGO</key>
 290       <true/> | <false/>
 291       <key>NTLM</key>
 292       <true/> | <false/>
 293     </dict>
 294     <key>Locked</key>
 295     <true/> | <false/>
 296     <key>PrivateBrowsing</key>
 297     <true/> | <false/>
 298   </dict>
 299 </dict>
 300 ```
 301 #### policies.json
 302 ```
 303 {
 304   "policies": {
 305     "Authentication": {
 306       "SPNEGO": ["mydomain.com", "https://myotherdomain.com"],
 307       "Delegated": ["mydomain.com", "https://myotherdomain.com"],
 308       "NTLM": ["mydomain.com", "https://myotherdomain.com"],
 309       "AllowNonFQDN": {
 310         "SPNEGO": true | false,
 311         "NTLM": true | false
 312       },
 313       "AllowProxies": {
 314         "SPNEGO": true | false,
 315         "NTLM": true | false
 316       },
 317       "Locked": true | false,
 318       "PrivateBrowsing": true | false
 319     }
 320   }
 321 }
 322 ```
 323 ### BlockAboutAddons
 324
 325 Block access to the Add-ons Manager (about:addons).
 326
 327 **Compatibility:** Firefox 60, Firefox ESR 60\
 328 **CCK2 Equivalent:** `disableAddonsManager`\
 329 **Preferences Affected:** N/A
 330
 331 #### Windows (GPO)
 332 ```
 333 Software\Policies\Mozilla\Firefox\BlockAboutAddons = 0x1 | 0x0
 334 ```
 335 #### Windows (Intune)
 336 OMA-URI:
 337 ```
 338 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutAddons
 339 ```
 340 Value (string):
 341 ```
 342 <enabled/> or <disabled/>
 343 ```
 344 #### macOS
 345 ```
 346 <dict>
 347   <key>BlockAboutAddons</key>
 348   <true/> | <false/>
 349 </dict>
 350 ```
 351 #### policies.json
 352 ```
 353 {
 354   "policies": {
 355     "BlockAboutAddons": true | false
 356   }
 357 }
 358 ```
 359 ### BlockAboutConfig
 360
 361 Block access to about:config.
 362
 363 **Compatibility:** Firefox 60, Firefox ESR 60\
 364 **CCK2 Equivalent:** `disableAboutConfig`\
 365 **Preferences Affected:** N/A
 366
 367 #### Windows (GPO)
 368 ```
 369 Software\Policies\Mozilla\Firefox\BlockAboutConfig = 0x1 | 0x0
 370 ```
 371 #### Windows (Intune)
 372 OMA-URI:
 373 ```
 374 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutConfig
 375 ```
 376 Value (string):
 377 ```
 378 <enabled/> or <disabled/>
 379 ```
 380 #### macOS
 381 ```
 382 <dict>
 383   <key>BlockAboutConfig</key>
 384   <true/> | <false/>
 385 </dict>
 386 ```
 387 #### policies.json
 388 ```
 389 {
 390   "policies": {
 391     "BlockAboutConfig": true | false
 392   }
 393 }
 394 ```
 395 ### BlockAboutProfiles
 396
 397 Block access to About Profiles (about:profiles).
 398
 399 **Compatibility:** Firefox 60, Firefox ESR 60\
 400 **CCK2 Equivalent:** `disableAboutProfiles`\
 401 **Preferences Affected:** N/A
 402
 403 #### Windows (GPO)
 404 ```
 405 Software\Policies\Mozilla\Firefox\BlockAboutProfiles = 0x1 | 0x0
 406 ```
 407 #### Windows (Intune)
 408 OMA-URI:
 409 ```
 410 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutProfiles
 411 ```
 412 Value (string):
 413 ```
 414 <enabled/> or <disabled/>
 415 ```
 416 #### macOS
 417 ```
 418 <dict>
 419   <key>BlockAboutProfiles</key>
 420   <true/> | <false/>
 421 </dict>
 422 ```
 423 #### policies.json
 424 ```
 425 {
 426   "policies": {
 427     "BlockAboutProfiles": true | false
 428   }
 429 }
 430 ```
 431 ### BlockAboutSupport
 432
 433 Block access to Troubleshooting Information (about:support).
 434
 435 **Compatibility:** Firefox 60, Firefox ESR 60\
 436 **CCK2 Equivalent:** `disableAboutSupport`\
 437 **Preferences Affected:** N/A
 438
 439 #### Windows (GPO)
 440 ```
 441 Software\Policies\Mozilla\Firefox\BlockAboutSupport = 0x1 | 0x0
 442 ```
 443 #### Windows (Intune)
 444 OMA-URI:
 445 ```
 446 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutSupport
 447 ```
 448 Value (string):
 449 ```
 450 <enabled/> or <disabled/>
 451 ```
 452 #### macOS
 453 ```
 454 <dict>
 455   <key>BlockAboutSupport</key>
 456   <true/> | <false/>
 457 </dict>
 458 ```
 459 #### policies.json
 460 ```
 461 {
 462   "policies": {
 463     "BlockAboutSupport": true | false
 464   }
 465 }
 466 ```
 467 ### Bookmarks
 468
 469 Add bookmarks in either the bookmarks toolbar or menu. Only `Title` and `URL` are required. If `Placement` is not specified, the bookmark will be placed on the toolbar. If `Folder` is specified, it is automatically created and bookmarks with the same folder name are grouped together.
 470
 471 **Compatibility:** Firefox 60, Firefox ESR 60\
 472 **CCK2 Equivalent:** `bookmarks.toolbar`,`bookmarks.menu`\
 473 **Preferences Affected:** N/A
 474
 475 #### Windows (GPO)
 476 ```
 477 Software\Policies\Mozilla\Firefox\Bookmarks\1\Title = "Example"
 478 Software\Policies\Mozilla\Firefox\Bookmarks\1\URL = "https://example.com"
 479 Software\Policies\Mozilla\Firefox\Bookmarks\1\Favicon = "https://example.com/favicon.ico"
 480 Software\Policies\Mozilla\Firefox\Bookmarks\1\Placement = "toolbar" | "menu"
 481 Software\Policies\Mozilla\Firefox\Bookmarks\1\Folder = "FolderName"
 482 ```
 483 #### Windows (Intune)
 484 OMA-URI:
 485 ```
 486 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Bookmarks/Bookmark01
 487 ```
 488 Value (string):
 489 ```
 490 <enabled/>
 491 <data id="BookmarkTitle" value="Example"/>
 492 <data id="BookmarkURL" value="https://example.com"/>
 493 <data id="BookmarkFavicon" value="https://example.com/favicon.ico"/>
 494 <data id="BookmarkPlacement" value="toolbar | menu"/>
 495 <data id="BookmarkFolder" value="FolderName"/>
 496 ```
 497 #### macOS
 498 ```
 499 <dict>
 500   <key>Bookmarks</key>
 501   <array>
 502     <dict>
 503       <key>Title</key>
 504       <string>Example</string>
 505       <key>URL</key>
 506       <string>https://example.com</string>
 507       <key>Favicon</key>
 508       <string>https://example.com/favicon.ico</string>
 509       <key>Placement</key>
 510       <string>toolbar | menu</string>
 511       <key>Folder</key>
 512       <string>FolderName</string>
 513     </dict>
 514   </array>
 515 </dict>
 516 ```
 517 #### policies.json
 518 ```
 519 {
 520   "policies": {
 521     "Bookmarks": [
 522       {
 523         "Title": "Example",
 524         "URL": "https://example.com",
 525         "Favicon": "https://example.com/favicon.ico",
 526         "Placement": "toolbar" | "menu",
 527         "Folder": "FolderName"
 528       }
 529     ]
 530   }
 531 }
 532 ```
 533 ### CaptivePortal
 534 Enable or disable the detection of captive portals.
 535
 536 **Compatibility:** Firefox 67, Firefox ESR 60.7\
 537 **CCK2 Equivalent:** N/A\
 538 **Preferences Affected:** `network.captive-portal-service.enabled`
 539
 540 #### Windows (GPO)
 541 ```
 542 Software\Policies\Mozilla\Firefox\CaptivePortal = 0x1 | 0x0
 543 ```
 544 #### Windows (Intune)
 545 OMA-URI:
 546 ```
 547 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/CaptivePortal
 548 ```
 549 Value (string):
 550 ```
 551 <enabled/> or <disabled/>
 552 ```
 553 #### macOS
 554 ```
 555 <dict>
 556   <key>CaptivePortal</key>
 557   <true/> | <false/>
 558 </dict>
 559 ```
 560 #### policies.json
 561 ```
 562 {
 563   "policies": {
 564     "CaptivePortal": true | false
 565   }
 566 }
 567 ```
 568 ### Certificates
 569
 570 ### Certificates | ImportEnterpriseRoots
 571
 572 Trust certificates that have been added to the operating system certificate store by a user or administrator.
 573
 574 Note: This policy only works on Windows and macOS. For Linux discussion, see [bug 1600509](https://bugzilla.mozilla.org/show_bug.cgi?id=1600509).
 575
 576 See https://support.mozilla.org/kb/setting-certificate-authorities-firefox for more detail.
 577
 578 **Compatibility:** Firefox 60, Firefox ESR 60 (macOS support in Firefox 63, Firefox ESR 68)\
 579 **CCK2 Equivalent:** N/A\
 580 **Preferences Affected:** `security.enterprise_roots.enabled`
 581
 582 #### Windows (GPO)
 583 ```
 584 Software\Policies\Mozilla\Firefox\Certificates\ImportEnterpriseRoots = 0x1 | 0x0
 585 ```
 586 #### Windows (Intune)
 587 OMA-URI:
 588 ```
 589 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Certificates/Certificates_ImportEnterpriseRoots
 590 ```
 591 Value (string):
 592 ```
 593 <enabled/> or <disabled/>
 594 ```
 595 #### macOS
 596 ```
 597 <dict>
 598   <key>Certificates</key>
 599   <dict>
 600     <key>ImportEnterpriseRoots</key>
 601     <true/> | <false/>
 602   </dict>
 603 </dict>
 604 ```
 605 #### policies.json
 606 ```
 607 {
 608   "policies": {
 609     "Certificates": {
 610       "ImportEnterpriseRoots": true | false
 611     }
 612   }
 613 }
 614 ```
 615 ### Certificates | Install
 616
 617 Install certificates into the Firefox certificate store. If only a filename is specified, Firefox searches for the file in the following locations:
 618
 619 - Windows
 620   - %USERPROFILE%\AppData\Local\Mozilla\Certificates
 621   - %USERPROFILE%\AppData\Roaming\Mozilla\Certificates
 622 - macOS
 623   - /Library/Application Support/Mozilla/Certificates
 624   - ~/Library/Application Support/Mozilla/Certificates
 625 - Linux
 626   - /usr/lib/mozilla/certificates
 627   - /usr/lib64/mozilla/certificates
 628   - ~/.mozilla/certificates
 629
 630 Starting with Firefox 65, Firefox 60.5 ESR, a fully qualified path can be used, including UNC paths. You should use the native path style for your operating system. We do not support using %USERPROFILE% or other environment variables on Windows.
 631
 632 If you are specifying the path in the policies.json file on Windows, you need to escape your backslashes (`\\`) which means that for UNC paths, you need to escape both (`\\\\`). If you use group policy, you only need one backslash.
 633
 634 Certificates are installed using the trust string `CT,CT,`.
 635
 636 Binary (DER) and ASCII (PEM) certificates are both supported.
 637
 638 **Compatibility:** Firefox 64, Firefox ESR 64\
 639 **CCK2 Equivalent:** `certs.ca`\
 640 **Preferences Affected:** N/A
 641
 642 #### Windows (GPO)
 643 ```
 644 Software\Policies\Mozilla\Firefox\Certificates\Install\1 = "cert1.der"
 645 Software\Policies\Mozilla\Firefox\Certificates\Install\2 = "C:\Users\username\cert2.pem"
 646 ```
 647 #### Windows (Intune)
 648 OMA-URI:
 649 ```
 650 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Certificates/Certificates_Install
 651 ```
 652 Value (string):
 653 ```
 654 <enabled/>
 655 <data id="Certificates_Install" value="1&#xF000;cert1.der&#xF000;2&#xF000;C:\Users\username\cert2.pem"/>
 656 ```
 657 #### macOS
 658 ```
 659 <dict>
 660   <key>Certificates</key>
 661   <dict>
 662     <key>Install</key>
 663     <array>
 664       <string>cert1.der</string>
 665       <string>/Users/username/cert2.pem</string>
 666     </array>
 667   </dict>
 668 </dict>
 669 ```
 670 #### policies.json
 671 ```
 672 {
 673   "policies": {
 674     "Certificates": {
 675       "Install": ["cert1.der", "/home/username/cert2.pem"]
 676     }
 677   }
 678 }
 679 ```
 680 ### Cookies
 681 Configure cookie preferences.
 682
 683 `Allow` is a list of origins (not domains) where cookies are always allowed. You must include http or https.
 684
 685 `AllowSession` is a list of origins (not domains) where cookies are only allowed for the current session. You must include http or https.
 686
 687 `Block` is a list of origins (not domains) where cookies are always blocked. You must include http or https.
 688
 689 `Default` determines whether cookies are accepted at all.
 690
 691 `AcceptThirdParty` determines how third-party cookies are handled.
 692
 693 `ExpireAtSessionEnd` determines when cookies expire.
 694
 695 `RejectTracker` only rejects cookies for trackers.
 696
 697 `Locked` prevents the user from changing cookie preferences.
 698
 699 **Compatibility:** Firefox 60, Firefox ESR 60 (RejectTracker added in Firefox 63, AllowSession added in Firefox 79/78.1)\
 700 **CCK2 Equivalent:** N/A\
 701 **Preferences Affected:** `network.cookie.cookieBehavior`,`network.cookie.lifetimePolicy`
 702
 703 #### Windows (GPO)
 704 ```
 705 Software\Policies\Mozilla\Firefox\Cookies\Allow\1 = "https://example.com"
 706 Software\Policies\Mozilla\Firefox\Cookies\AllowSession\1 = "https://example.edu"
 707 Software\Policies\Mozilla\Firefox\Cookies\Block\1 = "https://example.org"
 708 Software\Policies\Mozilla\Firefox\Cookies\Default = 0x1 | 0x0
 709 Software\Policies\Mozilla\Firefox\Cookies\AcceptThirdParty = "always" | "never" | "from-visited"
 710 Software\Policies\Mozilla\Firefox\Cookies\ExpireAtSessionEnd = 0x1 | 0x0
 711 Software\Policies\Mozilla\Firefox\Cookies\RejectTracker = 0x1 | 0x0
 712 Software\Policies\Mozilla\Firefox\Cookies\Locked = 0x1 | 0x0
 713 ```
 714 #### Windows (Intune)
 715 OMA-URI:
 716 ```
 717 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Allow
 718 ```
 719 Value (string):
 720 ```
 721 <enabled/>
 722 <data id="Cookies_Allow" value="1&#xF000;https://example.com"/>
 723 ```
 724 OMA-URI:
 725 ```
 726 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_AllowSession
 727 ```
 728 Value (string):
 729 ```
 730 <enabled/>
 731 <data id="Cookies_Allow" value="1&#xF000;https://example.edu"/>
 732 ```
 733 OMA-URI:
 734 ```
 735 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Block
 736 ```
 737 Value (string):
 738 ```
 739 <enabled/>
 740 <data id="Cookies_Block" value="1&#xF000;https://example.org"/>
 741 ```
 742 OMA-URI:
 743 ```
 744 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Default
 745 ```
 746 Value (string):
 747 ```
 748 <enabled/> or <disabled/>
 749 ```
 750 OMA-URI:
 751 ```
 752 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_AcceptThirdParty
 753 ```
 754 Value (string):
 755 ```
 756 <enabled/>
 757 <data id="Cookies_AcceptThirdParty" value="always | never | from-visited"/>
 758 ```
 759 OMA-URI:
 760 ```
 761 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_ExpireAtSessionEnd
 762 ```
 763 Value (string):
 764 ```
 765 <enabled/> or <disabled/>
 766 ```
 767 OMA-URI:
 768 ```
 769 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_RejectTracker
 770 ```
 771 Value (string):
 772 ```
 773 <enabled/> or <disabled/>
 774 ```
 775 OMA-URI:
 776 ```
 777 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Locked
 778 ```
 779 Value (string):
 780 ```
 781 <enabled/> or <disabled/>
 782 ```
 783 #### macOS
 784 ```
 785 <dict>
 786   <key>Cookies</key>
 787   <dict>
 788     <key>Allow</key>
 789     <array>
 790       <string>http://example.com</string>
 791     </array>
 792     <key>AllowSession</key>
 793     <array>
 794       <string>http://example.edu</string>
 795     </array>
 796     <key>Block</key>
 797     <array>
 798       <string>http://example.org</string>
 799     </array>
 800     <key>Default</key>
 801     <true/> | <false/>
 802     <key>AcceptThirdParty</key>
 803     <string>always | never | from-visited</string>
 804     <key>ExpireAtSessionEnd</key>
 805     <true/> | <false/>
 806     <key>RejectTracker</key>
 807     <true/> | <false/>
 808     <key>Locked</key>
 809     <true/> | <false/>
 810   </dict>
 811 </dict>
 812 ```
 813 #### policies.json
 814 ```
 815 {
 816   "policies": {
 817     "Cookies": {
 818       "Allow": ["http://example.org/"],
 819       "AllowSession": ["http://example.edu/"],
 820       "Block": ["http://example.edu/"],
 821       "Default": true | false,
 822       "AcceptThirdParty": "always" | "never" | "from-visited",
 823       "ExpireAtSessionEnd": true | false,
 824       "RejectTracker": true | false,
 825       "Locked": true | false
 826     }
 827   }
 828 }
 829 ```
 830 ### DisableSetDesktopBackground
 831 Remove the "Set As Desktop Background..." menuitem when right clicking on an image.
 832
 833 **Compatibility:** Firefox 60, Firefox ESR 60\
 834 **CCK2 Equivalent:** `removeSetDesktopBackground`\
 835 **Preferences Affected:** N/A
 836
 837 #### Windows (GPO)
 838 ```
 839 Software\Policies\Mozilla\Firefox\DisableSetDesktopBackground = 0x1 | 0x0
 840 ```
 841 #### Windows (Intune)
 842 OMA-URI:
 843 ```
 844 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSetDesktopBackground
 845 ```
 846 Value (string):
 847 ```
 848 <enabled/> or <disabled/>
 849 ```
 850 #### macOS
 851 ```
 852 <dict>
 853   <key>DisableSetDesktopBackground</key>
 854   <true/> | <false/>
 855 </dict>
 856 ```
 857 #### policies.json
 858 ```
 859 {
 860   "policies": {
 861     "DisableSetDesktopBackground": true | false
 862   }
 863 }
 864 ```
 865 ### DisableMasterPasswordCreation
 866 Remove the master password functionality.
 867
 868 If this value is true, it works the same as setting [`PrimaryPassword`](#primarypassword) to false and removes the primary password functionality.
 869
 870 If both DisableMasterPasswordCreation and PrimaryPassword are used, DisableMasterPasswordCreation takes precedent.
 871
 872 **Compatibility:** Firefox 60, Firefox ESR 60\
 873 **CCK2 Equivalent:** `noMasterPassword`\
 874 **Preferences Affected:** N/A
 875
 876 #### Windows (GPO)
 877 ```
 878 Software\Policies\Mozilla\Firefox\DisableMasterPasswordCreation = 0x1 | 0x0
 879 ```
 880 #### Windows (Intune)
 881 OMA-URI:
 882 ```
 883 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableMasterPasswordCreation
 884 ```
 885 Value (string):
 886 ```
 887 <enabled/> or <disabled/>
 888 ```
 889 #### macOS
 890 ```
 891 <dict>
 892   <key>DisableMasterPasswordCreation</key>
 893   <true/> | <false/>
 894 </dict>
 895 ```
 896 #### policies.json
 897 ```
 898 {
 899   "policies": {
 900     "DisableMasterPasswordCreation": true | false
 901   }
 902 }
 903 ```
 904 ### DisableAppUpdate
 905 Turn off application updates.
 906
 907 **Compatibility:** Firefox 60, Firefox ESR 60\
 908 **CCK2 Equivalent:** `disableFirefoxUpdates`\
 909 **Preferences Affected:** N/A
 910
 911 #### Windows (GPO)
 912 ```
 913 Software\Policies\Mozilla\Firefox\DisableAppUpdate = 0x1 | 0x0
 914 ```
 915 #### Windows (Intune)
 916 OMA-URI:
 917 ```
 918 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableAppUpdate
 919 ```
 920 Value (string):
 921 ```
 922 <enabled/> or <disabled/>
 923 ```
 924 #### macOS
 925 ```
 926 <dict>
 927   <key>DisableAppUpdate</key>
 928   <true/> | <false/>
 929 </dict>
 930 ```
 931 #### policies.json
 932 ```
 933 {
 934   "policies": {
 935     "DisableAppUpdate": true | false
 936   }
 937 }
 938 ```
 939 ### DisableBuiltinPDFViewer
 940 Disable the built in PDF viewer. PDF files are downloaded and sent externally.
 941
 942 **Compatibility:** Firefox 60, Firefox ESR 60\
 943 **CCK2 Equivalent:** `disablePDFjs`\
 944 **Preferences Affected:** `pdfjs.disabled`
 945
 946 #### Windows (GPO)
 947 ```
 948 Software\Policies\Mozilla\Firefox\DisableBuiltinPDFViewer = 0x1 | 0x0
 949 ```
 950 #### Windows (Intune)
 951 OMA-URI:
 952 ```
 953 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableBuiltinPDFViewer
 954 ```
 955 Value (string):
 956 ```
 957 <enabled/> or <disabled/>
 958 ```
 959 #### macOS
 960 ```
 961 <dict>
 962   <key>DisableBuiltinPDFViewer</key>
 963   <true/> | <false/>
 964 </dict>
 965 ```
 966 #### policies.json
 967 ```
 968 {
 969   "policies": {
 970     "DisableBuiltinPDFViewer": true | false
 971   }
 972 }
 973 ```
 974 ### DisabledCiphers
 975 Disable specific cryptographic ciphers.
 976
 977 ---
 978 **Note:**
 979
 980 This policy was updated in Firefox 78 to allow enabling ciphers as well. Setting the value to true disables the cipher, setting the value to false enables the cipher. Previously setting the value to true or false disabled the cipher.
 981
 982 ---
 983 **Compatibility:** Firefox 76, Firefox ESR 68.8 (TLS_RSA_WITH_AES_128_GCM_SHA256 and TLS_RSA_WITH_AES_256_GCM_SHA384 were added in Firefox 78)\
 984 **CCK2 Equivalent:** N/A\
 985 **Preferences Affected:** N/A
 986
 987 #### Windows (GPO)
 988 ```
 989 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_DHE_RSA_WITH_AES_128_CBC_SHA = 0x1 | 0x0
 990 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_DHE_RSA_WITH_AES_256_CBC_SHA = 0x1 | 0x0
 991 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA = 0x1 | 0x0
 992 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA = 0x1 | 0x0
 993 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 = 0x1 | 0x0
 994 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 = 0x1 | 0x0
 995 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_RSA_WITH_AES_128_CBC_SHA = 0x1 | 0x0
 996 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_RSA_WITH_AES_256_CBC_SHA = 0x1 | 0x0
 997 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_RSA_WITH_3DES_EDE_CBC_SHA = 0x1 | 0x0
 998 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_RSA_WITH_AES_128_GCM_SHA256 = 0x1 | 0x0
 999 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_RSA_WITH_AES_256_GCM_SHA384 = 0x1 | 0x0
1000 ```
1001 #### Windows (Intune)
1002 OMA-URI:
1003 ```
1004 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_DHE_RSA_WITH_AES_128_CBC_SHA
1005 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_DHE_RSA_WITH_AES_256_CBC_SHA
1006 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
1007 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
1008 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
1009 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
1010 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_RSA_WITH_AES_128_CBC_SHA
1011 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_RSA_WITH_AES_256_CBC_SHA
1012 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_RSA_WITH_3DES_EDE_CBC_SHA
1013 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_RSA_WITH_AES_128_GCM_SHA256
1014 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_RSA_WITH_AES_256_GCM_SHA384
1015 ```
1016 Value (string):
1017 ```
1018 <enabled/> or <disabled/>
1019 ```
1020 #### macOS
1021 ```
1022 <dict>
1023   <key>DisabledCiphers</key>
1024     <dict>
1025       <key>TLS_DHE_RSA_WITH_AES_128_CBC_SHA</key>
1026       <true/> | <false/>
1027       <key>TLS_DHE_RSA_WITH_AES_256_CBC_SHA</key>
1028       <true/> | <false/>
1029       <key>TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA</key>
1030       <true/> | <false/>
1031       <key>TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA</key>
1032       <true/> | <false/>
1033       <key>TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256</key>
1034       <true/> | <false/>
1035       <key>TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256</key>
1036       <true/> | <false/>
1037       <key>TLS_RSA_WITH_AES_128_CBC_SHA</key>
1038       <true/> | <false/>
1039       <key>TLS_RSA_WITH_AES_256_CBC_SHA</key>
1040       <true/> | <false/>
1041       <key>TLS_RSA_WITH_3DES_EDE_CBC_SHA</key>
1042       <true/> | <false/>
1043       <key>TLS_RSA_WITH_AES_128_GCM_SHA256</key>
1044       <true/> | <false/>
1045       <key>TLS_RSA_WITH_AES_256_GCM_SHA384</key>
1046       <true/> | <false/>
1047     </dict>
1048 </dict>
1049 ```
1050 #### policies.json
1051 ```
1052 {
1053   "policies": {
1054     "DisabledCiphers" {
1055       "TLS_DHE_RSA_WITH_AES_128_CBC_SHA": true | false,
1056       "TLS_DHE_RSA_WITH_AES_256_CBC_SHA": true | false,
1057       "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA": true | false,
1058       "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA": true | false,
1059       "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256": true | false,
1060       "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256": true | false,
1061       "TLS_RSA_WITH_AES_128_CBC_SHA": true | false,
1062       "TLS_RSA_WITH_AES_256_CBC_SHA": true | false,
1063       "TLS_RSA_WITH_3DES_EDE_CBC_SHA": true | false
1064       "TLS_RSA_WITH_AES_128_GCM_SHA256": true | false
1065       "TLS_RSA_WITH_AES_256_GCM_SHA384": true | false
1066     }
1067   }
1068 }
1069 ```
1070 ### DisableDefaultBrowserAgent
1071 Prevent the default browser agent from taking any actions. Only applicable to Windows; other platforms don’t have the agent.
1072
1073 **Compatibility:** Firefox 75, Firefox ESR 68.7 (Windows only)\
1074 **CCK2 Equivalent:** N/A\
1075 **Preferences Affected:** N/A
1076
1077 #### Windows (GPO)
1078 ```
1079 Software\Policies\Mozilla\Firefox\DisableDefaultBrowserAgent = 0x1 | 0x0
1080 ```
1081 #### Windows (Intune)
1082 OMA-URI:
1083 ```
1084 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableDefaultBrowserAgent
1085 ```
1086 Value (string):
1087 ```
1088 <enabled/> or <disabled/>
1089 ```
1090 #### policies.json
1091 ```
1092 {
1093   "policies": {
1094     "DisableDefaultBrowserAgent": true | false
1095   }
1096 }
1097 ```
1098 ### DisableDeveloperTools
1099 Remove access to all developer tools.
1100
1101 **Compatibility:** Firefox 60, Firefox ESR 60\
1102 **CCK2 Equivalent:** `removeDeveloperTools`\
1103 **Preferences Affected:** `devtools.policy.disabled`
1104
1105 #### Windows (GPO)
1106 ```
1107 Software\Policies\Mozilla\Firefox\DisableDeveloperTools = 0x1 | 0x0`
1108 ```
1109 #### Windows (Intune)
1110 OMA-URI:
1111 ```
1112 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableDeveloperTools
1113 ```
1114 Value (string):
1115 ```
1116 <enabled/> or <disabled/>
1117 ```
1118 #### macOS
1119 ```
1120 <dict>
1121   <key>DisableDeveloperTools</key>
1122   <true/> | <false/>
1123 </dict>
1124 ```
1125 #### policies.json
1126 ```
1127 {
1128   "policies": {
1129     "DisableDeveloperTools": true | false
1130   }
1131 }
1132 ```
1133 ### DisableFeedbackCommands
1134 Disable the menus for reporting sites (Submit Feedback, Report Deceptive Site).
1135
1136 **Compatibility:** Firefox 60, Firefox ESR 60\
1137 **CCK2 Equivalent:** N/A\
1138 **Preferences Affected:** N/A
1139
1140 #### Windows (GPO)
1141 ```
1142 Software\Policies\Mozilla\Firefox\DisableFeedbackCommands = 0x1 | 0x0
1143 ```
1144 #### Windows (Intune)
1145 OMA-URI:
1146 ```
1147 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFeedbackCommands
1148 ```
1149 Value (string):
1150 ```
1151 <enabled/> or <disabled/>
1152 ```
1153 #### macOS
1154 ```
1155 <dict>
1156   <key>DisableFeedbackCommands</key>
1157   <true/> | <false/>
1158 </dict>
1159 ```
1160 #### policies.json
1161 ```
1162 {
1163   "policies": {
1164     "DisableFeedbackCommands": true | false
1165   }
1166 }
1167 ```
1168 ### DisableFirefoxScreenshots
1169 Remove access to Firefox Screenshots.
1170
1171 **Compatibility:** Firefox 60, Firefox ESR 60\
1172 **CCK2 Equivalent:** N/A\
1173 **Preferences Affected:** `extensions.screenshots.disabled`
1174
1175 #### Windows (GPO)
1176 ```
1177 Software\Policies\Mozilla\Firefox\DisableFirefoxScreenshots = 0x1 | 0x0
1178 ```
1179 #### Windows (Intune)
1180 OMA-URI:
1181 ```
1182 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxScreenshots
1183 ```
1184 Value (string):
1185 ```
1186 <enabled/> or <disabled/>
1187 ```
1188 #### macOS
1189 ```
1190 <dict>
1191   <key>DisableFirefoxScreenshots</key>
1192   <true/> | <false/>
1193 </dict>
1194 ```
1195 #### policies.json
1196 ```
1197 {
1198   "policies": {
1199     "DisableFirefoxScreenshots": true | false
1200   }
1201 }
1202 ```
1203 ### DisableFirefoxAccounts
1204 Disable Firefox Accounts integration (Sync).
1205
1206 **Compatibility:** Firefox 60, Firefox ESR 60\
1207 **CCK2 Equivalent:** `disableSync`\
1208 **Preferences Affected:** `identity.fxaccounts.enabled`
1209
1210 #### Windows (GPO)
1211 ```
1212 Software\Policies\Mozilla\Firefox\DisableFirefoxAccounts = 0x1 | 0x0
1213 ```
1214 #### Windows (Intune)
1215 OMA-URI:
1216 ```
1217 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxAccounts
1218 ```
1219 Value (string):
1220 ```
1221 <enabled/> or <disabled/>
1222 ```
1223 #### macOS
1224 ```
1225 <dict>
1226   <key>DisableFirefoxAccounts</key>
1227   <true/> | <false/>
1228 </dict>
1229 ```
1230 #### policies.json
1231 ```
1232 {
1233   "policies": {
1234     "DisableFirefoxAccounts": true | false
1235   }
1236 }
1237 ```
1238 ### DisableFirefoxStudies
1239 Disable Firefox studies (Shield).
1240
1241 **Compatibility:** Firefox 60, Firefox ESR 60\
1242 **CCK2 Equivalent:** N/A\
1243 **Preferences Affected:** N/A
1244
1245 #### Windows (GPO)
1246 ```
1247 Software\Policies\Mozilla\Firefox\DisableFirefoxStudies = 0x1 | 0x0
1248 ```
1249 #### Windows (Intune)
1250 OMA-URI:
1251 ```
1252 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxStudies
1253 ```
1254 Value (string):
1255 ```
1256 <enabled/> or <disabled/>
1257 ```
1258 #### macOS
1259 ```
1260 <dict>
1261   <key>DisableFirefoxStudies</key>
1262   <true/> | <false/>
1263 </dict>
1264 ```
1265 #### policies.json
1266 ```
1267 {
1268   "policies": {
1269     "DisableFirefoxStudies": true | false
1270   }
1271 }
1272 ```
1273 ### DisableForgetButton
1274 Disable the "Forget" button.
1275
1276 **Compatibility:** Firefox 60, Firefox ESR 60\
1277 **CCK2 Equivalent:** `disableForget`\
1278 **Preferences Affected:** N/A
1279
1280 #### Windows (GPO)
1281 ```
1282 Software\Policies\Mozilla\Firefox\DisableForgetButton = 0x1 | 0x0
1283 ```
1284 #### Windows (Intune)
1285 OMA-URI:
1286 ```
1287 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableForgetButton
1288 ```
1289 Value (string):
1290 ```
1291 <enabled/> or <disabled/>
1292 ```
1293 #### macOS
1294 ```
1295 <dict>
1296   <key>DisableForgetButton</key>
1297   <true/> | <false/>
1298 </dict>
1299 ```
1300 #### policies.json
1301 ```
1302 {
1303   "policies": {
1304     "DisableForgetButton": true | false
1305   }
1306 }
1307 ```
1308 ### DisableFormHistory
1309 Turn off saving information on web forms and the search bar.
1310
1311 **Compatibility:** Firefox 60, Firefox ESR 60\
1312 **CCK2 Equivalent:** `disableFormFill`\
1313 **Preferences Affected:** ` browser.formfill.enable`
1314
1315 #### Windows (GPO)
1316 ```
1317 Software\Policies\Mozilla\Firefox\DisableFormHistory = 0x1 | 0x0
1318 ```
1319 #### Windows (Intune)
1320 OMA-URI:
1321 ```
1322 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFormHistory
1323 ```
1324 Value (string):
1325 ```
1326 <enabled/> or <disabled/>
1327 ```
1328 #### macOS
1329 ```
1330 <dict>
1331   <key>DisableFormHistory</key>
1332   <true/> | <false/>
1333 </dict>
1334 ```
1335 #### policies.json
1336 ```
1337 {
1338   "policies": {
1339     "DisableFormHistory": true | false
1340   }
1341 }
1342 ```
1343 ### DisablePasswordReveal
1344 Do not allow passwords to be shown in saved logins
1345
1346 **Compatibility:** Firefox 71, Firefox ESR 68.3\
1347 **CCK2 Equivalent:** N/A
1348 **Preferences Affected:** N/A
1349
1350 #### Windows (GPO)
1351 ```
1352 Software\Policies\Mozilla\Firefox\DisablePasswordReveal = 0x1 | 0x0
1353 ```
1354 #### Windows (Intune)
1355 OMA-URI:
1356 ```
1357 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePasswordReveal
1358 ```
1359 Value (string):
1360 ```
1361 <enabled/> or <disabled/>
1362 ```
1363 #### macOS
1364 ```
1365 <dict>
1366   <key>DisablePasswordReveal</key>
1367   <true/> | <false/>
1368 </dict>
1369 ```
1370 #### policies.json
1371 ```
1372 {
1373   "policies": {
1374     "DisablePasswordReveal": true | false
1375   }
1376 }
1377 ```
1378 ### DisablePocket
1379 Remove Pocket in the Firefox UI. It does not remove it from the new tab page.
1380
1381 **Compatibility:** Firefox 60, Firefox ESR 60\
1382 **CCK2 Equivalent:** `disablePocket`\
1383 **Preferences Affected:** `extensions.pocket.enabled`
1384
1385 #### Windows (GPO)
1386 ```
1387 Software\Policies\Mozilla\Firefox\DisablePocket = 0x1 | 0x0
1388 ```
1389 #### Windows (Intune)
1390 OMA-URI:
1391 ```
1392 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePocket
1393 ```
1394 Value (string):
1395 ```
1396 <enabled/> or <disabled/>
1397 ```
1398 #### macOS
1399 ```
1400 <dict>
1401   <key>DisablePocket</key>
1402   <true/> | <false/>
1403 </dict>
1404 ```
1405 #### policies.json
1406 ```
1407 {
1408   "policies": {
1409     "DisablePocket": true | false
1410   }
1411 }
1412 ```
1413 ### DisablePrivateBrowsing
1414 Remove access to private browsing.
1415
1416 **Compatibility:** Firefox 60, Firefox ESR 60\
1417 **CCK2 Equivalent:** `disablePrivateBrowsing`\
1418 **Preferences Affected:** N/A
1419
1420 #### Windows (GPO)
1421 ```
1422 Software\Policies\Mozilla\Firefox\DisablePrivateBrowsing = 0x1 | 0x0
1423 ```
1424 #### Windows (Intune)
1425 OMA-URI:
1426 ```
1427 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePrivateBrowsing
1428 ```
1429 Value (string):
1430 ```
1431 <enabled/> or <disabled/>
1432 ```
1433 #### macOS
1434 ```
1435 <dict>
1436   <key>DisablePrivateBrowsing</key>
1437   <true/> | <false/>
1438 </dict>
1439 ```
1440 #### policies.json
1441 ```
1442 {
1443   "policies": {
1444     "DisablePrivateBrowsing": true | false
1445   }
1446 }
1447 ```
1448 ### DisableProfileImport
1449 Disables the "Import data from another browser" option in the bookmarks window.
1450
1451 **Compatibility:** Firefox 60, Firefox ESR 60\
1452 **CCK2 Equivalent:** N/A\
1453 **Preferences Affected:** N/A
1454
1455 #### Windows (GPO)
1456 ```
1457 Software\Policies\Mozilla\Firefox\DisableProfileImport = 0x1 | 0x0
1458 ```
1459 #### Windows (Intune)
1460 OMA-URI:
1461 ```
1462 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableProfileImport
1463 ```
1464 Value (string):
1465 ```
1466 <enabled/> or <disabled/>
1467 ```
1468 #### macOS
1469 ```
1470 <dict>
1471   <key>DisableProfileImport</key>
1472   <true/> | <false/>
1473 </dict>
1474 ```
1475 #### policies.json
1476 ```
1477 {
1478   "policies": {
1479     "DisableProfileImport": true | false
1480   }
1481 }
1482 ```
1483 ### DisableProfileRefresh
1484 Disable the Refresh Firefox button on about:support and support.mozilla.org, as well as the prompt that displays offering to refresh Firefox when you haven't used it in a while.
1485
1486 **Compatibility:** Firefox 60, Firefox ESR 60\
1487 **CCK2 Equivalent:** `disableResetFirefox`\
1488 **Preferences Affected:** `browser.disableResetPrompt`
1489
1490 #### Windows (GPO)
1491 ```
1492 Software\Policies\Mozilla\Firefox\DisableProfileRefresh = 0x1 | 0x0
1493 ```
1494 #### Windows (Intune)
1495 OMA-URI:
1496 ```
1497 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableProfileRefresh
1498 ```
1499 Value (string):
1500 ```
1501 <enabled/> or <disabled/>
1502 ```
1503 #### macOS
1504 ```
1505 <dict>
1506   <key>DisableProfileRefresh</key>
1507   <true/> | <false/>
1508 </dict>
1509 ```
1510 #### policies.json
1511 ```
1512 {
1513   "policies": {
1514     "DisableProfileRefresh": true | false
1515   }
1516 }
1517 ```
1518 ### DisableSafeMode
1519 Disable safe mode within the browser.
1520
1521 On Windows, this disables safe mode via the command line as well.
1522
1523 **Compatibility:** Firefox 60, Firefox ESR 60 (Windows, macOS)\
1524 **CCK2 Equivalent:** `disableSafeMode`\
1525 **Preferences Affected:** N/A
1526
1527 #### Windows (GPO)
1528 ```
1529 Software\Policies\Mozilla\Firefox\DisableSafeMode = 0x1 | 0x0
1530 ```
1531 #### Windows (Intune)
1532 OMA-URI:
1533 ```
1534 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSafeMode
1535 ```
1536 Value (string):
1537 ```
1538 <enabled/> or <disabled/>
1539 ```
1540 #### macOS
1541 ```
1542 <dict>
1543   <key>DisableSafeMode</key>
1544   <true/> | <false/>
1545 </dict>
1546 ```
1547 #### policies.json
1548 ```
1549 {
1550   "policies": {
1551     "DisableSafeMode": true | false
1552   }
1553 }
1554 ```
1555 ### DisableSecurityBypass
1556 Prevent the user from bypassing security in certain cases.
1557
1558 `InvalidCertificate` prevents adding an exception when an invalid certificate is shown.
1559
1560 `SafeBrowsing` prevents selecting "ignore the risk" and visiting a harmful site anyway.
1561
1562 **Compatibility:** Firefox 60, Firefox ESR 60\
1563 **CCK2 Equivalent:** N/A\
1564 **Preferences Affected:** `security.certerror.hideAddException`,`browser.safebrowsing.allowOverride`
1565
1566 #### Windows (GPO)
1567 ```
1568 Software\Policies\Mozilla\Firefox\DisableSecurityBypass\InvalidCertificate = 0x1 | 0x0
1569 Software\Policies\Mozilla\Firefox\DisableSecurityBypass\SafeBrowsing = 0x1 | 0x0
1570 ```
1571 #### Windows (Intune)
1572 OMA-URI:
1573 ```
1574 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/P_DisableSecurityBypass_InvalidCertificate
1575 ```
1576 Value (string):
1577 ```
1578 <enabled/> or <disabled/>
1579 ```
1580 OMA-URI:
1581 ```
1582 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/P_DisableSecurityBypass_SafeBrowsing
1583 ```
1584 Value (string):
1585 ```
1586 <enabled/> or <disabled/>
1587 ```
1588
1589 #### macOS
1590 ```
1591 <dict>
1592   <key>DisableSecurityBypass</key>
1593   <dict>
1594     <key>InvalidCertificate</key>
1595     <true/> | <false/>
1596     <key>SafeBrowsing</key>
1597     <true/> | <false/>
1598   </dict>
1599 </dict>
1600 ```
1601 #### policies.json
1602 ```
1603 {
1604   "policies": {
1605     "DisableSecurityBypass": {
1606       "InvalidCertificate": true | false,
1607       "SafeBrowsing": true | false
1608     }
1609   }
1610 }
1611 ```
1612 ### DisableSystemAddonUpdate
1613 Prevent system add-ons from being installed or update.
1614
1615 **Compatibility:** Firefox 60, Firefox ESR 60\
1616 **CCK2 Equivalent:** N/A\
1617 **Preferences Affected:** N/A
1618
1619 #### Windows (GPO)
1620 ```
1621 Software\Policies\Mozilla\Firefox\DisableSystemAddonUpdate = 0x1 | 0x0
1622 ```
1623 #### Windows (Intune)
1624 OMA-URI:
1625 ```
1626 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSystemAddonUpdate
1627 ```
1628 Value (string):
1629 ```
1630 <enabled/> or <disabled/>
1631 ```
1632 #### macOS
1633 ```
1634 <dict>
1635   <key>DisableSystemAddonUpdate</key>
1636   <true/> | <false/>
1637 </dict>
1638 ```
1639 #### policies.json
1640 ```
1641 {
1642   "policies": {
1643     "DisableSystemAddonUpdate": true | false
1644   }
1645 }
1646 ```
1647 ### DisableTelemetry
1648 Prevent the upload of telemetry data.
1649
1650 As of Firefox 83 and Firefox ESR 78.5, local storage of telemetry data is disabled as well.
1651
1652 Mozilla recommends that you do not disable telemetry. Information collected through telemetry helps us build a better product for businesses like yours.
1653
1654 **Compatibility:** Firefox 60, Firefox ESR 60\
1655 **CCK2 Equivalent:** `disableTelemetry`\
1656 **Preferences Affected:** `datareporting.healthreport.uploadEnabled,datareporting.policy.dataSubmissionEnabled,toolkit.telemetry.archive.enabled`
1657
1658 #### Windows (GPO)
1659 ```
1660 Software\Policies\Mozilla\Firefox\DisableTelemetry = 0x1 | 0x0
1661 ```
1662 #### Windows (Intune)
1663 OMA-URI:
1664 ```
1665 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableTelemetry
1666 ```
1667 Value (string):
1668 ```
1669 <enabled/> or <disabled/>
1670 ```
1671 #### macOS
1672 ```
1673 <dict>
1674   <key>DisableTelemetry</key>
1675   <true/> | <false/>
1676 </dict>
1677 ```
1678 #### policies.json
1679 ```
1680 {
1681   "policies": {
1682     "DisableTelemetry": true | false
1683   }
1684 }
1685 ```
1686 ### DisplayBookmarksToolbar
1687 Set the initial state of the bookmarks toolbar. A user can still hide it and it will stay hidden.
1688
1689 **Compatibility:** Firefox 60, Firefox ESR 60\
1690 **CCK2 Equivalent:** `displayBookmarksToolbar`\
1691 **Preferences Affected:** N/A
1692
1693 #### Windows (GPO)
1694 ```
1695 Software\Policies\Mozilla\Firefox\DisplayBookmarksToolbar = 0x1 | 0x0
1696 ```
1697 #### Windows (Intune)
1698 OMA-URI:
1699 ```
1700 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisplayBookmarksToolbar
1701 ```
1702 Value (string):
1703 ```
1704 <enabled/> or <disabled/>
1705 ```
1706 #### macOS
1707 ```
1708 <dict>
1709   <key>DisplayBookmarksToolbar</key>
1710   <true/> | <false/>
1711 </dict>
1712 ```
1713 #### policies.json
1714 ```
1715 {
1716   "policies": {
1717     "DisplayBookmarksToolbar": true | false
1718   }
1719 }
1720 ```
1721 ### DisplayMenuBar (Deprecated)
1722 Set the initial state of the menubar. A user can still hide it and it will stay hidden.
1723
1724 **Compatibility:** Firefox 60, Firefox ESR 60 (Windows, some Linux)\
1725 **CCK2 Equivalent:** `displayMenuBar`\
1726 **Preferences Affected:** N/A
1727
1728 #### Windows (GPO)
1729 ```
1730 Software\Policies\Mozilla\Firefox\DisplayMenuBar = 0x1 | 0x0
1731 ```
1732 #### macOS
1733 ```
1734 <dict>
1735   <key>DisplayMenuBar</key>
1736   <true/> | <false/>
1737 </dict>
1738 ```
1739 #### policies.json
1740 ```
1741 {
1742   "policies": {
1743     "DisplayMenuBar": true | false
1744   }
1745 }
1746 ```
1747 ### DisplayMenuBar
1748 Set the state of the menubar.
1749
1750 `always` means the menubar is shown and cannot be hidden.
1751
1752 `never` means the menubar is hidden and cannot be shown.
1753
1754 `default-on` means the menubar is on by default but can be hidden.
1755
1756 `default-off` means the menubar is off by default but can be shown.
1757
1758 **Compatibility:** Firefox 73, Firefox ESR 68.5 (Windows, some Linux)\
1759 **CCK2 Equivalent:** `displayMenuBar`\
1760 **Preferences Affected:** N/A
1761
1762 #### Windows (GPO)
1763 ```
1764 Software\Policies\Mozilla\Firefox\DisplayMenuBar = "always", "never", "default-on", "default-off"
1765 ```
1766 #### Windows (Intune)
1767 OMA-URI:
1768 ```
1769 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisplayMenuBar_Enum
1770 ```
1771 Value (string):
1772 ```
1773 <enabled/>
1774 <data id="DisplayMenuBar" value="always | never | default-on | default-off"/>
1775 ```
1776 #### macOS
1777 ```
1778 <dict>
1779   <key>DisplayMenuBar</key>
1780   <string>always | never | default-on | default-off</string>
1781 </dict>
1782 ```
1783 #### policies.json
1784 ```
1785 {
1786   "policies": {
1787     "DisplayMenuBar": "always", "never", "default-on", "default-off"
1788   }
1789 }
1790 ```
1791 ### DNSOverHTTPS
1792 Configure DNS over HTTPS.
1793
1794 `Enabled` determines whether DNS over HTTPS is enabled
1795
1796 `ProviderURL` is a URL to another provider.
1797
1798 `Locked` prevents the user from changing DNS over HTTPS preferences.
1799
1800 `ExcludedDomains` excludes domains from DNS over HTTPS.
1801
1802 **Compatibility:** Firefox 63, Firefox ESR 68 (ExcludedDomains added in 75/68.7)\
1803 **CCK2 Equivalent:** N/A\
1804 **Preferences Affected:** `network.trr.mode`,`network.trr.uri`
1805
1806 #### Windows (GPO)
1807 ```
1808 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\Enabled = 0x1 | 0x0
1809 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\ProviderURL = "URL_TO_ALTERNATE_PROVIDER"
1810 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\Locked = 0x1 | 0x0
1811 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\ExcludedDomains\1 = "example.com"
1812 ```
1813 #### Windows (Intune)
1814 OMA-URI:
1815 ```
1816 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_Enabled
1817 ```
1818 Value (string):
1819 ```
1820 <enabled/> or <disabled/>
1821 ```
1822 OMA-URI:
1823 ```
1824 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_ProviderURL
1825 ```
1826 Value (string):
1827 ```
1828 <enabled/>
1829 <data id="String" value="URL_TO_ALTERNATE_PROVIDER"/>
1830 ```
1831 OMA-URI:
1832 ```
1833 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_Locked
1834 ```
1835 Value (string):
1836 ```
1837 <enabled/> or <disabled/>
1838 ```
1839 OMA-URI:
1840 ```
1841 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_ExcludedDomains
1842 ```
1843 Value (string):
1844 ```
1845 <enabled/>
1846 <data id="List" value="1&#xF000;example.com"/>
1847 ```
1848 #### macOS
1849 ```
1850 <dict>
1851   <key>DNSOverHTTPS</key>
1852   <dict>
1853     <key>Enabled</key>
1854     <true/> | <false/>
1855     <key>ProviderURL</key>
1856     <string>URL_TO_ALTERNATE_PROVIDER</string>
1857     <key>Locked</key>
1858     <true/> | <false/>
1859     <key>ExcludedDomains</key>
1860     <array>
1861       <string>example.com</string>
1862     </array>
1863   </dict>
1864 </dict>
1865 ```
1866 #### policies.json
1867 ```
1868 {
1869   "policies": {
1870     "DNSOverHTTPS": {
1871       "Enabled":  true | false,
1872       "ProviderURL": "URL_TO_ALTERNATE_PROVIDER",
1873       "Locked": true | false,
1874       "ExcludedDomains": ["example.com"]
1875     }
1876   }
1877 }
1878 ```
1879 ### DontCheckDefaultBrowser
1880 Don't check if Firefox is the default browser at startup.
1881
1882 **Compatibility:** Firefox 60, Firefox ESR 60\
1883 **CCK2 Equivalent:** `dontCheckDefaultBrowser`\
1884 **Preferences Affected:** `browser.shell.checkDefaultBrowser`
1885
1886 #### Windows (GPO)
1887 ```
1888 Software\Policies\Mozilla\Firefox\DontCheckDefaultBrowser = 0x1 | 0x0
1889 ```
1890 #### Windows (Intune)
1891 OMA-URI:
1892 ```
1893 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DontCheckDefaultBrowser
1894 ```
1895 Value (string):
1896 ```
1897 <enabled/> or <disabled/>
1898 ```
1899 #### macOS
1900 ```
1901 <dict>
1902   <key>DontCheckDefaultBrowser</key>
1903   <true/> | <false/>
1904 </dict>
1905 ```
1906 #### policies.json
1907 ```
1908 {
1909   "policies": {
1910     "DontCheckDefaultBrowser": true | false
1911   }
1912 }
1913 ```
1914 ### DefaultDownloadDirectory
1915 Set the default download directory.
1916
1917 You can use ${home} for the native home directory.
1918
1919 **Compatibility:** Firefox 68, Firefox ESR 68\
1920 **CCK2 Equivalent:** N/A\
1921 **Preferences Affected:** `browser.download.dir`,`browser.download.folderList`
1922
1923 #### Windows (GPO)
1924 ```
1925 Software\Policies\Mozilla\Firefox\DefaultDownloadDirectory = "${home}\Downloads"
1926 ```
1927 #### Windows (Intune)
1928 OMA-URI:
1929 ```
1930 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DefaultDownloadDirectory
1931 ```
1932 Value (string):
1933 ```
1934 <enabled/>
1935 <data id="Preferences_String" value="${home}\Downloads"/>
1936 ```
1937 #### macOS
1938 ```
1939 <dict>
1940   <key>DefaultDownloadDirectory</key>
1941   <string>${home}/Downloads</string>
1942 </dict>
1943 ```
1944 #### policies.json (macOS and Linux)
1945 ```
1946 {
1947   "policies": {
1948     "DefaultDownloadDirectory": "${home}/Downloads"
1949 }
1950 ```
1951 #### policies.json (Windows)
1952 ```
1953 {
1954   "policies": {
1955     "DefaultDownloadDirectory": "${home}\\Downloads"
1956 }
1957 ```
1958 ### DownloadDirectory
1959 Set and lock the download directory.
1960
1961 You can use ${home} for the native home directory.
1962
1963 **Compatibility:** Firefox 68, Firefox ESR 68\
1964 **CCK2 Equivalent:** N/A\
1965 **Preferences Affected:** `browser.download.dir`,`browser.download.folderList`,`browser.download.useDownloadDir`
1966
1967 #### Windows (GPO)
1968 ```
1969 Software\Policies\Mozilla\Firefox\DownloadDirectory = "${home}\Downloads"
1970 ```
1971 #### Windows (Intune)
1972 OMA-URI:
1973 ```
1974 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DownloadDirectory
1975 ```
1976 Value (string):
1977 ```
1978 <enabled/>
1979 <data id="Preferences_String" value="${home}\Downloads"/>
1980 ```
1981 #### macOS
1982 ```
1983 <dict>
1984   <key>DownloadDirectory</key>
1985   <string>${home}/Downloads</string>
1986 </dict>
1987 ```
1988 #### policies.json (macOS and Linux)
1989 ```
1990 {
1991   "policies": {
1992     "DownloadDirectory": "${home}/Downloads"
1993 }
1994 ```
1995 #### policies.json (Windows)
1996 ```
1997 {
1998   "policies": {
1999     "DownloadDirectory": "${home}\\Downloads"
2000 }
2001 ```
2002 ### EnableTrackingProtection
2003 Configure tracking protection.
2004
2005 If this policy is not configured, tracking protection is not enabled by default in the browser, but it is enabled by default in private browsing and the user can change it.
2006
2007 If `Value` is set to false, tracking protection is disabled and locked in both the regular browser and private browsing.
2008
2009 If `Value` is set to true, tracking protection is enabled by default in both the regular browser and private browsing and the `Locked` value determines whether or not a user can change it.
2010
2011 If `Cryptomining` is set to true, cryptomining scripts on websites are blocked.
2012
2013 If `Fingerprinting` is set to true, fingerprinting scripts on websites are blocked.
2014
2015 `Exceptions` are origins for which tracking protection is not enabled.
2016
2017 **Compatibility:** Firefox 60, Firefox ESR 60 (Cryptomining and Fingerprinting added in 70/68.2, Exceptions added in 73/68.5)\
2018 **CCK2 Equivalent:** N/A\
2019 **Preferences Affected:** `privacy.trackingprotection.enabled`,`privacy.trackingprotection.pbmode.enabled`,`privacy.trackingprotection.cryptomining.enabled`,`privacy.trackingprotection.fingerprinting.enabled`
2020
2021 #### Windows (GPO)
2022 ```
2023 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Value = 0x1 | 0x0
2024 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Locked = 0x1 | 0x0
2025 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Cryptomining = 0x1 | 0x0
2026 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Fingerprinting = 0x1 | 0x0
2027 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Exceptions\1 = "https://example.com"
2028 ```
2029 #### Windows (Intune)
2030 OMA-URI:
2031 ```
2032 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/A_TrackingProtection_Value
2033 ```
2034 Value (string):
2035 ```
2036 <enabled/> or <disabled/>
2037 ```
2038 OMA-URI:
2039 ```
2040 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/B_TrackingProtection_Cryptomining
2041 ```
2042 Value (string):
2043 ```
2044 <enabled/> or <disabled/>
2045 ```
2046 OMA-URI:
2047 ```
2048 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/C_TrackingProtection_Fingerprinting
2049 ```
2050 Value (string):
2051 ```
2052 <enabled/> or <disabled/>
2053 ```
2054 OMA-URI:
2055 ```
2056 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/D_TrackingProtection_Exceptions
2057 ```
2058 Value (string):
2059 ```
2060 <data id="TrackingProtection_Exceptions" value="1&#xF000;https://example.com"/>
2061 ```
2062 OMA-URI:
2063 ```
2064 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/E_TrackingProtection_Locked
2065 ```
2066 Value (string):
2067 ```
2068 <enabled/> or <disabled/>
2069 ```
2070 #### macOS
2071 ```
2072 <dict>
2073   <key>EnableTrackingProtection</key>
2074   <dict>
2075     <key>Value</key>
2076     <true/> | <false/>
2077     <key>Locked</key>
2078     <true/> | <false/>
2079     <key>Cryptomining</key>
2080     <true/> | <false/>
2081     <key>Fingerprinting</key>
2082     <true/> | <false/>
2083     <key>Exceptions</key>
2084     <array>
2085       <string>https://example.com</string>
2086     </array>
2087   </dict>
2088 </dict>
2089 ```
2090 #### policies.json
2091 ```
2092 {
2093   "policies": {
2094     "EnableTrackingProtection": {
2095       "Value": true | false,
2096       "Locked": true | false,
2097       "Cryptomining": true | false,
2098       "Fingerprinting": true | false,
2099       "Exceptions": ["https://example.com"]
2100     }
2101 }
2102 ```
2103 ### EncryptedMediaExtensions
2104 Enable or disable Encrypted Media Extensions and optionally lock it.
2105
2106 If `Enabled` is set to false, encrypted media extensions (like Widevine) are not downloaded by Firefox unless the user consents to installing them.
2107
2108 If `Locked` is set to true and `Enabled` is set to false, Firefox will not download encrypted media extensions (like Widevine) or ask the user to install them.
2109
2110 **Compatibility:** Firefox 77, Firefox ESR 68.9\
2111 **CCK2 Equivalent:** N/A\
2112 **Preferences Affected:** `media.eme.enabled`
2113
2114 #### Windows (GPO)
2115 ```
2116 Software\Policies\Mozilla\Firefox\EncryptedMediaExtensions\Enabled = 0x1 | 0x0
2117 Software\Policies\Mozilla\Firefox\EncryptedMediaExtensions\Locked = 0x1 | 0x0
2118 ```
2119 #### Windows (Intune)
2120 OMA-URI:
2121 ```
2122 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~EncryptedMediaExtensions/EncryptedMediaExtensions_Enabled
2123 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~EncryptedMediaExtensions/EncryptedMediaExtensions_Locked
2124 ```
2125 Value (string):
2126 ```
2127 <enabled/>or <disabled/>
2128 ```
2129 #### macOS
2130 ```
2131 <dict>
2132   <key>EncryptedMediaExtensions</key>
2133   <dict>
2134     <key>Enabled</key>
2135     <true/> | <false/>
2136     <key>Locked</key>
2137     <true/> | <false/>
2138   </dict>
2139 </dict>
2140 ```
2141 #### policies.json
2142 ```
2143 {
2144   "policies": {
2145     "EncryptedMediaExtensions": {
2146       "Enabled": true | false,
2147       "Locked": true | false
2148     }
2149 }
2150 ```
2151 ### EnterprisePoliciesEnabled
2152 Enable policy support on macOS.
2153
2154 **Compatibility:** Firefox 63, Firefox ESR 60.3 (macOS only)\
2155 **CCK2 Equivalent:** N/A\
2156 **Preferences Affected:** N/A
2157
2158 #### macOS
2159 ```
2160 <dict>
2161   <key>EnterprisePoliciesEnabled</key>
2162   <true/>
2163 </dict>
2164 ```
2165 ### Extensions
2166 Control the installation, uninstallation and locking of extensions.
2167
2168 `Install` is a list of URLs or native paths for extensions to be installed.
2169
2170 `Uninstall` is a list of extension IDs that should be uninstalled if found.
2171
2172 `Locked` is a list of extension IDs that the user cannot disable or uninstall.
2173
2174 **Compatibility:** Firefox 60, Firefox ESR 60\
2175 **CCK2 Equivalent:** `addons`\
2176 **Preferences Affected:** N/A
2177
2178 #### Windows (GPO)
2179 ```
2180 Software\Policies\Mozilla\Firefox\Extensions\Install\1 = "https://addons.mozilla.org/firefox/downloads/somefile.xpi"
2181 Software\Policies\Mozilla\Firefox\Extensions\Install\2 = "//path/to/xpi"
2182 Software\Policies\Mozilla\Firefox\Extensions\Uninstall\1 = "bad_addon_id@mozilla.org"
2183 Software\Policies\Mozilla\Firefox\Extensions\Locked\1 = "addon_id@mozilla.org"
2184 ```
2185 #### Windows (Intune)
2186 OMA-URI:
2187 ```
2188 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/Extensions_Install
2189 ```
2190 Value (string):
2191 ```
2192 <enabled/>
2193 <data id="Extensions" value="1&#xF000;https://addons.mozilla.org/firefox/downloads/somefile.xpi&#xF000;2&#xF000;//path/to/xpi"/>
2194 ```
2195 OMA-URI:
2196 ```
2197 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/Extensions_Uninstall
2198 ```
2199 Value (string):
2200 ```
2201 <enabled/>
2202 <data id="Extensions" value="1&#xF000;bad_addon_id@mozilla.org"/>
2203 ```
2204 OMA-URI:
2205 ```
2206 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/Extensions_Locked
2207 ```
2208 Value (string):
2209 ```
2210 <enabled/>
2211 <data id="Extensions" value="1&#xF000;addon_id@mozilla.org"/>
2212 ```
2213 #### macOS
2214 ```
2215 <dict>
2216   <key>Extensions</key>
2217   <dict>
2218     <key>Install</key>
2219     <array>
2220       <string>https://addons.mozilla.org/firefox/downloads/somefile.xpi</string>
2221       <string>//path/to/xpi</string>
2222     </array>
2223     <key>Uninstall</key>
2224     <array>
2225       <string>bad_addon_id@mozilla.org</string>
2226     </array>
2227     <key>Locked</key>
2228     <array>
2229       <string>addon_id@mozilla.org</string>
2230     </array>
2231   </dict>
2232 </dict>
2233 ```
2234 #### policies.json
2235 ```
2236 {
2237   "policies": {
2238     "Extensions": {
2239       "Install": ["https://addons.mozilla.org/firefox/downloads/somefile.xpi", "//path/to/xpi"],
2240       "Uninstall": ["bad_addon_id@mozilla.org"],
2241       "Locked":  ["addon_id@mozilla.org"]
2242     }
2243   }
2244 }
2245 ```
2246 ### ExtensionSettings
2247 Manage all aspects of extensions. This policy is based heavily on the [Chrome policy](https://dev.chromium.org/administrators/policy-list-3/extension-settings-full) of the same name.
2248
2249 This policy maps an extension ID to its configuration. With an extension ID, the configuration will be applied to the specified extension only. A default configuration can be set for the special ID "*", which will apply to all extensions that don't have a custom configuration set in this policy.
2250
2251 To obtain an extension ID, install the extension and go to about:support. You will see the ID in the Extensions section. I've also created an extension that makes it easy to find the ID of extensions on AMO. You can download it [here](https://github.com/mkaply/queryamoid/releases/tag/v0.1).
2252
2253 The configuration for each extension is another dictionary that can contain the fields documented below.
2254
2255 | Name | Description |
2256 | --- | --- |
2257 | `installation_mode` | Maps to a string indicating the installation mode for the extension. The valid strings are `allowed`,`blocked`,`force_installed`, and `normal_installed`.
2258 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`allowed` | Allows the extension to be installed by the user. This is the default behavior. There is no need for an install_url; it will automatically be allowed based on the ID.
2259 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`blocked`| Blocks installation of the extension and removes it from the device if already installed.
2260 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`force_installed`| The extension is automatically installed and can't be removed by the user. This option is not valid for the default configuration and requires an install_url.
2261 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`normal_installed`| The extension is automatically installed but can be disabled by the user. This option is not valid for the default configuration and requires an install_url.
2262 | `install_url`| Maps to a URL indicating where Firefox can download a force_installed or normal_installed extension. If installing from the addons.mozilla.org, use the following URL (substituting SHORT_NAME from the URL on AMO), https://addons.mozilla.org/firefox/downloads/latest/SHORT_NAME/latest.xpi. If installing from the local file system, use a file:/// URL. Languages packs are available from https://releases.mozilla.org/pub/firefox/releases/VERSION/PLATFORM/xpi/LANGUAGE.xpi. If you need to update the extension, you can change the name of the extension and it will be automatically updated. Extensions installed from file URLs will additional be updated when their internal version changes.
2263 | `install_sources` | A list of sources from which installing extensions is allowed. **This is unnecessary if you are only allowing the installation of certain extensions by ID.** Each item in this list is an extension-style match pattern. Users will be able to easily install items from any URL that matches an item in this list. Both the location of the *.xpi file and the page where the download is started from (i.e.  the referrer) must be allowed by these patterns. This setting can be used only for the default configuration.
2264 | `allowed_types` | This setting whitelists the allowed types of extension/apps that can be installed in Firefox. The value is a list of strings, each of which should be one of the following: "extension", "theme", "dictionary", "locale" This setting can be used only for the default configuration.
2265 | `blocked_install_message` | This maps to a string specifying the error message to display to users if they're blocked from installing an extension. This setting allows you to append text to the generic error message displayed when the extension is blocked. This could be be used to direct users to your help desk, explain why a particular extension is blocked, or something else. This setting can be used only for the default configuration.
2266 | `restricted_domains` | An array of domains on which content scripts can't be run. This setting can be used only for the default configuration.
2267
2268 **Compatibility:** Firefox 69, Firefox ESR 68.1\
2269 **CCK2 Equivalent:** N/A\
2270 **Preferences Affected:** N/A
2271
2272 #### Windows (GPO)
2273 ```
2274 Software\Policies\Mozilla\Firefox\ExtensionSettings (REG_MULTI_SZ) =
2275 {
2276   "*": {
2277     "blocked_install_message": "Custom error message.",
2278     "install_sources": ["about:addons","https://addons.mozilla.org/"],
2279     "installation_mode": "blocked",
2280     "allowed_types": ["extension"]
2281   },
2282   "uBlock0@raymondhill.net": {
2283     "installation_mode": "force_installed",
2284     "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
2285   },
2286   "https-everywhere@eff.org": {
2287     "installation_mode": "allowed",
2288   }
2289 }
2290 ```
2291 #### Windows (Intune)
2292 OMA-URI:
2293 ```
2294 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/ExtensionSettings
2295 ```
2296 Value (string):
2297 ```
2298 <enabled/>
2299 <data id="ExtensionSettings" value='
2300 {
2301   "*": {
2302     "blocked_install_message": "Custom error message.",
2303     "install_sources": ["about:addons","https://addons.mozilla.org/"],
2304     "installation_mode": "blocked",
2305     "allowed_types": ["extension"]
2306   },
2307   "uBlock0@raymondhill.net": {
2308     "installation_mode": "force_installed",
2309     "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
2310   },
2311     "https-everywhere@eff.org": {
2312     "installation_mode": "allowed",
2313   }
2314 }'/>
2315 ```
2316 #### macOS
2317 ```
2318 <dict>
2319   <key>ExtensionSettings</key>
2320   <dict>
2321     <key>*</key>
2322     <dict>
2323       <key>blocked_install_message</key>
2324       <string>Custom error message.</string>
2325       <key>install_sources</key>
2326       <array>
2327         <string>about:addons</string>
2328         <string>https://addons.mozilla.org/</string>
2329       </array>
2330       <key>installation_mode</key>
2331       <string>blocked</string>
2332       <key>allowed_types</key>
2333       <array>
2334         <string>extension</string>
2335       </array>
2336     </dict>
2337     <key>uBlock0@raymondhill.net</key>
2338     <dict>
2339       <key>installation_mode</key>
2340        <string>force_installed</string>
2341       <key>install_url</key>
2342       <string>https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi</string>
2343     </dict>
2344     <key>https-everywhere@eff.org</key>
2345     <dict>
2346       <key>installation_mode</key>
2347        <string>allowed</string>
2348     </dict>
2349   </dict>
2350 </dict>
2351 ```
2352 #### policies.json
2353 ```
2354 {
2355   "policies": {
2356     "ExtensionSettings": {
2357       "*": {
2358         "blocked_install_message": "Custom error message.",
2359         "install_sources": ["about:addons","https://addons.mozilla.org/"],
2360         "installation_mode": "blocked",
2361         "allowed_types": ["extension"]
2362       },
2363       "uBlock0@raymondhill.net": {
2364         "installation_mode": "force_installed",
2365         "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
2366       },
2367       "https-everywhere@eff.org": {
2368         "installation_mode": "allowed"
2369       }
2370     }
2371   }
2372 }
2373 ```
2374 ### ExtensionUpdate
2375 Control extension updates.
2376
2377 **Compatibility:** Firefox 67, Firefox ESR 60.7\
2378 **CCK2 Equivalent:** N/A\
2379 **Preferences Affected:** `extensions.update.enabled`
2380
2381 #### Windows (GPO)
2382 ```
2383 Software\Policies\Mozilla\Firefox\ExtensionUpdate = 0x1 | 0x0
2384 ```
2385 #### Windows (Intune)
2386 OMA-URI:
2387 ```
2388 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/ExtensionUpdate
2389 ```
2390 Value (string):
2391 ```
2392 <enabled/> or <disabled/>
2393 ```
2394 #### macOS
2395 ```
2396 <dict>
2397   <key>ExtensionUpdate</key>
2398   <true/> | <false/>
2399 </dict>
2400 ```
2401 #### policies.json
2402 ```
2403 {
2404   "policies": {
2405     "ExtensionUpdate": true | false
2406   }
2407 }
2408 ```
2409 ### FlashPlugin
2410 Configure the default Flash plugin policy as well as origins for which Flash is allowed.
2411
2412 `Allow` is a list of origins where Flash are allowed.
2413
2414 `Block` is a list of origins where Flash is not allowed.
2415
2416 `Default` determines whether or not Flash is allowed by default.
2417
2418 `Locked` prevents the user from changing Flash preferences.
2419
2420 **Compatibility:** Firefox 60, Firefox ESR 60\
2421 **CCK2 Equivalent:** `permissions.plugin`\
2422 **Preferences Affected:** `plugin.state.flash`
2423
2424 #### Windows (GPO)
2425 ```
2426 Software\Policies\Mozilla\Firefox\FlashPlugin\Allow\1 = "https://example.org"
2427 Software\Policies\Mozilla\Firefox\FlashPlugin\Block\1 = "https://example.edu"
2428 Software\Policies\Mozilla\Firefox\FlashPlugin\Default = 0x1 | 0x0
2429 Software\Policies\Mozilla\Firefox\FlashPlugin\Locked = 0x1 | 0x0
2430 ```
2431 #### Windows (Intune)
2432 OMA-URI:
2433 ```
2434 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Flash/FlashPlugin_Allow
2435 ```
2436 Value (string):
2437 ```
2438 <enabled/>
2439 <data id="Permissions" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
2440 ```
2441 OMA-URI:
2442 ```
2443 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Flash/FlashPlugin_Locked
2444 ```
2445 Value (string):
2446 ```
2447 <enabled/> or <disabled/>
2448 ```
2449 OMA-URI:
2450 ```
2451 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Flash/FlashPlugin_Default
2452 ```
2453 Value (string):
2454 ```
2455 <enabled/> or <disabled/>
2456 ```
2457 #### macOS
2458 ```
2459 <dict>
2460   <key>FlashPlugin</key>
2461   <dict>
2462     <key>Allow</key>
2463     <array>
2464       <string>http://example.org</string>
2465     </array>
2466     <key>Block</key>
2467     <array>
2468       <string>http://example.edu</string>
2469     </array>
2470     <key>Default</key>
2471     <true/> | <false/>
2472     <key>Locked</key>
2473     <true/> | <false/>
2474   </dict>
2475 </dict>
2476 ```
2477 #### policies.json
2478 ```
2479 {
2480   "policies": {
2481     "FlashPlugin": {
2482       "Allow": ["http://example.org/"],
2483       "Block": ["http://example.edu/"],
2484       "Default": true | false,
2485       "Locked": true | false
2486     }
2487   }
2488 }
2489 ```
2490
2491
2492
2493 ### Handlers
2494 Configure default application handlers. This policy is based on the internal format of `handlers.json`.
2495
2496 You can configure handlers based on a mime type (`mimeTypes`), a file's extension (`extensions`), or a protocol (`schemes`).
2497
2498 Within each handler type, you specify the given mimeType/extension/scheme as a key and use the following subkeys to describe how it is handled.
2499
2500 | Name | Description |
2501 | --- | --- |
2502 | `action`| Can be either `saveToDisk`, `useHelperApp`, `useSystemDefault`.
2503 | `ask` | If `true`, the user is asked if what they want to do with the file. If `false`, the action is taken without user intervention.
2504 | `handlers` | An array of handlers with the first one being the default. If you don't want to have a default handler, use an empty object for the first handler. Choose between path or uriTemplate.
2505 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`name` | The display name of the handler (might not be used).
2506 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`path`| The native path to the executable to be used.
2507 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`uriTemplate`| A url to a web based application handler. The URL must be https and contain a %s to be used for substitution.
2508
2509 **Compatibility:** Firefox 78, Firefox ESR 78\
2510 **CCK2 Equivalent:** N/A\
2511 **Preferences Affected:** N/A
2512
2513 #### Windows (GPO)
2514 ```
2515 Software\Policies\Mozilla\Firefox\Handlers (REG_MULTI_SZ) =
2516 {
2517   "mimeTypes": {
2518     "application/msword": {
2519       "action": "useSystemDefault",
2520       "ask": true | false
2521     }
2522   },
2523   "schemes": {
2524     "mailto": {
2525       "action": "useHelperApp",
2526       "ask": true | false,
2527       "handlers": [{
2528         "name": "Gmail",
2529         "uriTemplate": "https://mail.google.com/mail/?extsrc=mailto&url=%s"
2530       }]
2531     }
2532   },
2533   "extensions": {
2534     "pdf": {
2535       "action": "useHelperApp",
2536       "ask": true | false,
2537       "handlers": [{
2538         "name": "Adobe Acrobat",
2539         "path": "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32.exe"
2540       }]
2541     }
2542   }
2543 }
2544 ```
2545 #### Windows (Intune)
2546 OMA-URI:
2547 ```
2548 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Handlers
2549 ```
2550 Value (string):
2551 ```
2552 <enabled/>
2553 <data id="Handlers" value='
2554 {
2555   "mimeTypes": {
2556     "application/msword": {
2557       "action": "useSystemDefault",
2558       "ask": true | false
2559     }
2560   },
2561   "schemes": {
2562     "mailto": {
2563       "action": "useHelperApp",
2564       "ask": true | false,
2565       "handlers": [{
2566         "name": "Gmail",
2567         "uriTemplate": "https://mail.google.com/mail/?extsrc=mailto&amp;url=%s"
2568       }]
2569     }
2570   },
2571   "extensions": {
2572     "pdf": {
2573       "action": "useHelperApp",
2574       "ask": true | false,
2575       "handlers": [{
2576         "name": "Adobe Acrobat",
2577         "path": "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32.exe"
2578       }]
2579     }
2580   }
2581 }
2582 '/>
2583 ```
2584 #### macOS
2585 ```
2586 <dict>
2587   <key>Handlers</key>
2588   <dict>
2589     <key>mimeTypes</key>
2590     <dict>
2591       <key>application/msword</key>
2592       <dict>
2593         <key>action</key>
2594         <string>useSystemDefault</string>
2595         <key>ask</key>
2596         <true/> | <false/>
2597       </dict>
2598     </dict>
2599     <key>schemes</key>
2600     <dict>
2601       <key>mailto</key>
2602       <dict>
2603         <key>action</key>
2604         <string>useHelperApp</string>
2605         <key>ask</key>
2606         <true/> | <false/>
2607         <key>handlers</key>
2608         <array>
2609           <dict>
2610             <key>name</key>
2611             <string>Gmail</string>
2612             <key>uriTemplate</key>
2613             <string>https://mail.google.com/mail/?extsrc=mailto&url=%s</string>
2614           </dict>
2615         </array>
2616       </dict>
2617     </dict>
2618     <key>extensions</key>
2619     <dict>
2620       <key>pdf</key>
2621       <dict>
2622         <key>action</key>
2623         <string>useHelperApp</string>
2624         <key>ask</key>
2625         <true/> | <false/>
2626         <key>handlers</key>
2627         <array>
2628           <dict>
2629             <key>name</key>
2630             <string>Adobe Acrobat</string>
2631             <key>path</key>
2632             <string>/System/Applications/Preview.app</string>
2633           </dict>
2634         </array>
2635       </dict>
2636     </dict>
2637   </dict>
2638 </dict>
2639 ```
2640 #### policies.json
2641 ```
2642 {
2643   "policies": {
2644     "Handlers": {
2645       "mimeTypes": {
2646         "application/msword": {
2647           "action": "useSystemDefault",
2648           "ask": false
2649         }
2650       },
2651       "schemes": {
2652         "mailto": {
2653           "action": "useHelperApp",
2654           "ask": true | false,
2655           "handlers": [{
2656             "name": "Gmail",
2657             "uriTemplate": "https://mail.google.com/mail/?extsrc=mailto&url=%s"
2658           }]
2659         }
2660       },
2661       "extensions": {
2662         "pdf": {
2663           "action": "useHelperApp",
2664           "ask": true | false,
2665           "handlers": [{
2666             "name": "Adobe Acrobat",
2667             "path": "/usr/bin/acroread"
2668           }]
2669         }
2670       }
2671     }
2672   }
2673 }
2674 ```
2675 ### FirefoxHome
2676 Customize the Firefox Home page.
2677
2678 **Compatibility:** Firefox 68, Firefox ESR 68\
2679 **CCK2 Equivalent:** N/A\
2680 **Preferences Affected:** `browser.newtabpage.activity-stream.showSearch`,`browser.newtabpage.activity-stream.feeds.topsites`,`browser.newtabpage.activity-stream.feeds.section.highlights`,`browser.newtabpage.activity-stream.feeds.section.topstories`,`browser.newtabpage.activity-stream.feeds.snippets`
2681
2682 #### Windows (GPO)
2683 ```
2684 Software\Policies\Mozilla\Firefox\FirefoxHome\Search = 0x1 | 0x0
2685 Software\Policies\Mozilla\Firefox\FirefoxHome\TopSites = 0x1 | 0x0
2686 Software\Policies\Mozilla\Firefox\FirefoxHome\Highlights = 0x1 | 0x0
2687 Software\Policies\Mozilla\Firefox\FirefoxHome\Pocket = 0x1 | 0x0
2688 Software\Policies\Mozilla\Firefox\FirefoxHome\Snippets = 0x1 | 0x0
2689 Software\Policies\Mozilla\Firefox\FirefoxHome\Locked = 0x1 | 0x0
2690 ```
2691 #### Windows (Intune)
2692 OMA-URI:
2693 ```
2694 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/CustomizeFirefoxHome
2695 ```
2696 Value (string):
2697 ```
2698 <enabled/>
2699 <data id="FirefoxHome_Search"  value="true | false"/>
2700 <data id="FirefoxHome_TopSites"  value="true | false"/>
2701 <data id="FirefoxHome_Highlights"  value="true | false"/>
2702 <data id="FirefoxHome_Pocket"  value="true | false"/>
2703 <data id="FirefoxHome_Snippets"  value="true | false"/>
2704 <data id="FirefoxHome_Locked"  value="true | false"/>
2705 ```
2706 #### macOS
2707 ```
2708 <dict>
2709   <key>FirefoxHome</key>
2710   <dict>
2711     <key>Search</key>
2712     <true/> | <false/>
2713     <key>TopSites</key>
2714     <true/> | <false/>
2715     <key>Highlights</key>
2716     <true/> | <false/>
2717     <key>Pocket</key>
2718     <true/> | <false/>
2719     <key>Snippets</key>
2720     <true/> | <false/>
2721     <key>Locked</key>
2722     <true/> | <false/>
2723   </dict>
2724 </dict>
2725 ```
2726 #### policies.json
2727 ```
2728 {
2729   "policies": {
2730     "FirefoxHome": {
2731       "Search": true | false,
2732       "TopSites": true | false,
2733       "Highlights": true | false,
2734       "Pocket": true | false,
2735       "Snippets": true | false,
2736       "Locked": true | false
2737     }
2738   }
2739 }
2740 ```
2741 ### HardwareAcceleration
2742 Control hardware acceleration.
2743
2744 **Compatibility:** Firefox 60, Firefox ESR 60\
2745 **CCK2 Equivalent:** N/A\
2746 **Preferences Affected:** `layers.acceleration.disabled`
2747
2748 #### Windows (GPO)
2749 ```
2750 Software\Policies\Mozilla\Firefox\HardwareAcceleration = 0x1 | 0x0
2751 ```
2752 #### Windows (Intune)
2753 OMA-URI:
2754 ```
2755 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/HardwareAcceleration
2756 ```
2757 Value (string):
2758 ```
2759 <enabled/> or <disabled/>
2760 ```
2761 #### macOS
2762 ```
2763 <dict>
2764   <key>HardwareAcceleration</key>
2765   <true/> | <false/>
2766 </dict>
2767 ```
2768 #### policies.json
2769 ```
2770 {
2771   "policies": {
2772     "HardwareAcceleration": true | false
2773   }
2774 }
2775 ```
2776 ### Homepage
2777 Configure the default homepage and how Firefox starts.
2778
2779 `URL` is the default homepage.
2780
2781 `Locked` prevents the user from changing homepage preferences.
2782
2783 `Additional` allows for more than one homepage.
2784
2785 `StartPage` is how Firefox starts. The choices are no homepage, the default homepage or the previous session.
2786
2787 With Firefox 78, an additional option as added for `Startpage`, `homepage-locked`. If this is set, the homepage is locked and the user can choose to restore their session.
2788
2789 **Compatibility:** Firefox 60, Firefox ESR 60 (StartPage was added in Firefox 60, Firefox ESR 60.4, homepage-locked added in Firefox 78)\
2790 **CCK2 Equivalent:** `homePage`,`lockHomePage`\
2791 **Preferences Affected:** `browser.startup.homepage`,`browser.startup.page`
2792
2793 #### Windows (GPO)
2794 ```
2795 Software\Policies\Mozilla\Firefox\Homepage\URL = "https://example.com"
2796 Software\Policies\Mozilla\Firefox\Homepage\Locked = 0x1 | 0x0
2797 Software\Policies\Mozilla\Firefox\Homepage\Additional\1 = "https://example.org"
2798 Software\Policies\Mozilla\Firefox\Homepage\Additional\2 = "https://example.edu"
2799 Software\Policies\Mozilla\Firefox\Homepage\StartPage = "none" | "homepage" | "previous-session" | "homepage-locked"
2800 ```
2801 #### Windows (Intune)
2802 OMA-URI:
2803 ```
2804 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageURL
2805 ```
2806 Value (string):
2807 ```
2808 <enabled/>
2809
2810 <data id="HomepageURL" value="https://example.com"/>
2811 <data id="HomepageLocked" value="true | false"/>
2812 ```
2813 OMA-URI:
2814 ```
2815 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageAdditional
2816 ```
2817 Value (string):
2818 ```
2819 <enabled/>
2820
2821 <data id="HomepageAdditional" value="1&#xF000;http://example.org&#xF000;2&#xF000;http://example.edu"/>
2822 ```
2823 OMA-URI:
2824 ```
2825 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageStartPage
2826 ```
2827 Value (string):
2828 ```
2829 <enabled/>
2830
2831 <data id="StartPage" value="none | homepage | previous-session"/>
2832 ```
2833 #### macOS
2834 ```
2835 <dict>
2836   <key>Homepage</key>
2837   <dict>
2838     <key>URL</key>
2839     <string>http://example.com</string>
2840     <key>Locked</key>
2841     <true/> | <false/>
2842     <key>Additional</key>
2843     <array>
2844       <string>http://example.org</string>
2845       <string>http://example.edu</string>
2846     </array>
2847     <key>StartPage</key>
2848     <string>none | homepage | previous-session | homepage-locked</string>
2849   </dict>
2850 </dict>
2851 ```
2852 #### policies.json
2853 ```
2854 {
2855   "policies": {
2856     "Homepage": {
2857       "URL": "http://example.com/",
2858       "Locked": true | false,
2859       "Additional": ["http://example.org/",
2860                      "http://example.edu/"],
2861       "StartPage": "none" | "homepage" | "previous-session" | "homepage-locked"
2862     }
2863   }
2864 }
2865 ```
2866 ### InstallAddonsPermission
2867 Configure the default extension install policy as well as origins for extension installs are allowed. This policy does not override turning off all extension installs.
2868
2869 `Allow` is a list of origins where extension installs are allowed.
2870
2871 `Default` determines whether or not extension installs are allowed by default.
2872
2873 **Compatibility:** Firefox 60, Firefox ESR 60\
2874 **CCK2 Equivalent:** `permissions.install`\
2875 **Preferences Affected:** `xpinstall.enabled`
2876
2877 #### Windows (GPO)
2878 ```
2879 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Allow\1 = "https://example.org"
2880 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Allow\2 = "https://example.edu"
2881 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Default = 0x1 | 0x0
2882 ```
2883 #### Windows (Intune)
2884 OMA-URI:
2885 ```
2886 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Addons/InstallAddonsPermission_Allow
2887 ```
2888 Value (string):
2889 ```
2890 <enabled/>
2891 <data id="Permissions" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
2892 ```
2893 OMA-URI:
2894 ```
2895 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Addons/InstallAddonsPermission_Default
2896 ```
2897 Value (string):
2898 ```
2899 <enabled/>
2900 ```
2901 #### macOS
2902 ```
2903 <dict>
2904   <key>InstallAddonsPermission</key>
2905   <dict>
2906     <key>Allow</key>
2907     <array>
2908       <string>http://example.org</string>
2909       <string>http://example.edu</string>
2910     </array>
2911     <key>Default</key>
2912     <true/> | <false/>
2913   </dict>
2914 </dict>
2915 ```
2916 #### policies.json
2917 ```
2918 {
2919   "policies": {
2920     "InstallAddonsPermission": {
2921       "Allow": ["http://example.org/",
2922                 "http://example.edu/"],
2923       "Default": true | false
2924     }
2925   }
2926 }
2927 ```
2928 ### LegacyProfiles
2929 Disable the feature enforcing a separate profile for each installation.
2930
2931 If this policy set to true, Firefox will not try to create different profiles for installations of Firefox in different directories. This is the equivalent of the MOZ_LEGACY_PROFILES environment variable.
2932
2933 If this policy set to false, Firefox will create a new profile for each unique installation of Firefox.
2934
2935 This policy only work on Windows via GPO (not policies.json).
2936
2937 **Compatibility:** Firefox 70, Firefox ESR 68.2 (Windows only, GPO only)\
2938 **CCK2 Equivalent:** N/A\
2939 **Preferences Affected:** N/A
2940
2941 #### Windows (GPO)
2942 ```
2943 Software\Policies\Mozilla\Firefox\LegacyProfiles = = 0x1 | 0x0
2944 ```
2945 #### Windows (Intune)
2946 OMA-URI:
2947 ```
2948 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/LegacyProfiles
2949 ```
2950 Value (string):
2951 ```
2952 <enabled/> or <disabled/>
2953 ```
2954 ### LocalFileLinks
2955 Enable linking to local files by origin.
2956
2957 **Compatibility:** Firefox 68, Firefox ESR 68\
2958 **CCK2 Equivalent:** N/A\
2959 **Preferences Affected:** `capability.policy.localfilelinks.*`
2960
2961 #### Windows (GPO)
2962 ```
2963 Software\Policies\Mozilla\Firefox\LocalFileLinks\1 = "https://example.org"
2964 Software\Policies\Mozilla\Firefox\LocalFileLinks\2 = "https://example.edu"
2965 ```
2966 #### Windows (Intune)
2967 OMA-URI:
2968 ```
2969 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/LocalFileLinks
2970 ```
2971 Value (string):
2972 ```
2973 <enabled/>
2974 <data id="LocalFileLinks" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
2975 ```
2976 #### macOS
2977 ```
2978 <dict>
2979   <key>LocalFileLinks</key>
2980   <array>
2981     <string>http://example.org</string>
2982     <string>http://example.edu</string>
2983   </array>
2984 </dict>
2985 ```
2986 #### policies.json
2987 ```
2988 {
2989   "policies": {
2990     "LocalFileLinks": ["http://example.org/",
2991                        "http://example.edu/"]
2992   }
2993 }
2994 ```
2995 ### ManagedBookmarks
2996 Configures a list of bookmarks managed by an administrator that cannot be changed by the user.
2997
2998 The bookmarks are only added as a button on the personal toolbar. They are not in the bookmarks folder.
2999
3000 The syntax of this policy is exactly the same as the [Chrome ManagedBookmarks policy](https://cloud.google.com/docs/chrome-enterprise/policies/?policy=ManagedBookmarks). The schema is:
3001 ```
3002 {
3003  "items": {
3004   "id": "BookmarkType",
3005   "properties": {
3006    "children": {
3007     "items": {
3008      "$ref": "BookmarkType"
3009     },
3010     "type": "array"
3011    },
3012    "name": {
3013     "type": "string"
3014    },
3015    "toplevel_name": {
3016     "type": "string"
3017    },
3018    "url": {
3019     "type": "string"
3020    }
3021   },
3022   "type": "object"
3023  },
3024  "type": "array"
3025 }
3026 ```
3027 **Compatibility:** Firefox 83, Firefox ESR 78.5\
3028 **CCK2 Equivalent:** N/A\
3029 **Preferences Affected:** N/A
3030
3031 #### Windows (GPO)
3032 ```
3033 Software\Policies\Mozilla\Firefox\ManagedBookmarks (REG_MULTI_SZ) =
3034 [
3035   {
3036     "toplevel_name": "My managed bookmarks folder"
3037   },
3038   {
3039     "url": "example.com",
3040     "name": "Example"
3041   },
3042   {
3043     "name": "Mozilla links",
3044     "children": [
3045       {
3046         "url": "https://mozilla.org",
3047         "name": "Mozilla.org"
3048       },
3049       {
3050         "url": "https://support.mozilla.org/",
3051         "name": "SUMO"
3052       }
3053     ]
3054   }
3055 ]
3056 ```
3057 #### Windows (Intune)
3058 OMA-URI:
3059 ```
3060 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/ManagedBookmarks
3061 ```
3062 Value (string):
3063 ```
3064 <enabled/>
3065 <data id="JSON" value='
3066 [
3067   {
3068     "toplevel_name": "My managed bookmarks folder"
3069   },
3070   {
3071     "url": "example.com",
3072     "name": "Example"
3073   },
3074   {
3075     "name": "Mozilla links",
3076     "children": [
3077       {
3078         "url": "https://mozilla.org",
3079         "name": "Mozilla.org"
3080       },
3081       {
3082         "url": "https://support.mozilla.org/",
3083         "name": "SUMO"
3084       }
3085     ]
3086   }
3087 ]'/>
3088 ```
3089 #### macOS
3090 ```
3091 <dict>
3092   <key>ManagedBookmarks</key>
3093   <array>
3094     <dict>
3095       <key>toplevel_name</key>
3096       <string>My managed bookmarks folder</string></dict>
3097       <dict>
3098         <key>url</key>
3099         <string>example.com</string>
3100         <key>name</key>
3101         <string>Example</string>
3102       </dict>
3103       <dict>
3104       <key>name</key>
3105       <string>Mozilla links</string>
3106       <key>children</key>
3107       <array>
3108         <dict>
3109           <key>url</key>
3110           <string>https://mozilla.org</string>
3111           <key>name</key>
3112           <string>Mozilla</string>
3113         </dict>
3114         <dict>
3115           <key>url</key>
3116           <string>https://support.mozilla.org/</string>
3117           <key>name</key>
3118           <string>SUMO</string>
3119         </dict>
3120       </array>
3121     </dict>
3122   </array>
3123 </dict>
3124 ```
3125 #### policies.json
3126 ```
3127 {
3128   "policies": {
3129     "ManagedBookmarks": [
3130       {
3131         "toplevel_name": "My managed bookmarks folder"
3132       },
3133       {
3134         "url": "example.com",
3135         "name": "Example"
3136       },
3137       {
3138         "name": "Mozilla links",
3139         "children": [
3140           {
3141             "url": "https://mozilla.org",
3142             "name": "Mozilla.org"
3143           },
3144           {
3145             "url": "https://support.mozilla.org/",
3146             "name": "SUMO"
3147           }
3148         ]
3149       }
3150     ]
3151   }
3152 }
3153 ```
3154 ### PrimaryPassword
3155 Require or prevent using a primary (formerly master) password.
3156
3157 If this value is true, a primary password is required. If this value is false, it works the same as if [`DisableMasterPasswordCreation`](#disablemasterpasswordcreation) was true and removes the primary password functionality.
3158
3159 If both DisableMasterPasswordCreation and PrimaryPassword are used, DisableMasterPasswordCreation takes precedent.
3160
3161 **Compatibility:** Firefox 79, Firefox ESR 78.1\
3162 **CCK2 Equivalent:** `noMasterPassword`\
3163 **Preferences Affected:** N/A
3164
3165 #### Windows (GPO)
3166 ```
3167 Software\Policies\Mozilla\Firefox\PrimaryPassword = 0x1 | 0x0
3168 ```
3169 #### Windows (Intune)
3170 OMA-URI:
3171 ```
3172 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PrimaryPassword
3173 ```
3174 Value (string):
3175 ```
3176 <enabled/> or <disabled/>
3177 ```
3178 #### macOS
3179 ```
3180 <dict>
3181   <key>PrimaryPassword</key>
3182   <true/> | <false/>
3183 </dict>
3184 ```
3185 #### policies.json
3186 ```
3187 {
3188   "policies": {
3189     "PrimaryPassword": true | false
3190   }
3191 }
3192 ```
3193 ### NetworkPrediction
3194 Enable or disable network prediction (DNS prefetching).
3195
3196 **Compatibility:** Firefox 67, Firefox ESR 60.7\
3197 **CCK2 Equivalent:** N/A\
3198 **Preferences Affected:** `network.dns.disablePrefetch`,`network.dns.disablePrefetchFromHTTPS`
3199
3200 #### Windows (GPO)
3201 ```
3202 Software\Policies\Mozilla\Firefox\NetworkPrediction = 0x1 | 0x0
3203 ```
3204 #### Windows (Intune)
3205 OMA-URI:
3206 ```
3207 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NetworkPrediction
3208 ```
3209 Value (string):
3210 ```
3211 <enabled/> or <disabled/>
3212 ```
3213 #### macOS
3214 ```
3215 <dict>
3216   <key>NetworkPrediction</key>
3217   <true/> | <false/>
3218 </dict>
3219 ```
3220 #### policies.json
3221 ```
3222 {
3223   "policies": {
3224     "NetworkPrediction": true | false
3225 }
3226 ```
3227 ### NewTabPage
3228 Enable or disable the New Tab page.
3229
3230 **Compatibility:** Firefox 68, Firefox ESR 68\
3231 **CCK2 Equivalent:** N/A\
3232 **Preferences Affected:** `browser.newtabpage.enabled`
3233
3234 #### Windows (GPO)
3235 ```
3236 Software\Policies\Mozilla\Firefox\NewTabPage = 0x1 | 0x0
3237 ```
3238 #### Windows (Intune)
3239 OMA-URI:
3240 ```
3241 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NewTabPage
3242 ```
3243 Value (string):
3244 ```
3245 <enabled/> or <disabled/>
3246 ```
3247 #### macOS
3248 ```
3249 <dict>
3250   <key>NewTabPage</key>
3251   <true/> | <false/>
3252 </dict>
3253 ```
3254 #### policies.json
3255 ```
3256 {
3257   "policies": {
3258     "NewTabPage": true | false
3259 }
3260 ```
3261 ### NoDefaultBookmarks
3262 Disable the creation of default bookmarks.
3263
3264 This policy is only effective if the user profile has not been created yet.
3265
3266 **Compatibility:** Firefox 60, Firefox ESR 60\
3267 **CCK2 Equivalent:** `removeDefaultBookmarks`\
3268 **Preferences Affected:** N/A
3269
3270 #### Windows (GPO)
3271 ```
3272 Software\Policies\Mozilla\Firefox\NoDefaultBookmarks = 0x1 | 0x0
3273 ```
3274 #### Windows (Intune)
3275 OMA-URI:
3276 ```
3277 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NoDefaultBookmarks
3278 ```
3279 Value (string):
3280 ```
3281 <enabled/> or <disabled/>
3282 ```
3283 #### macOS
3284 ```
3285 <dict>
3286   <key>NoDefaultBookmarks</key>
3287   <true/> | <false/>
3288 </dict>
3289 ```
3290 #### policies.json
3291 ```
3292 {
3293   "policies": {
3294     "NoDefaultBookmarks": true | false
3295   }
3296 }
3297 ```
3298 ### OfferToSaveLogins
3299 Control whether or not Firefox offers to save passwords.
3300
3301 **Compatibility:** Firefox 60, Firefox ESR 60\
3302 **CCK2 Equivalent:** `dontRememberPasswords`\
3303 **Preferences Affected:** `signon.rememberSignons`
3304
3305 #### Windows (GPO)
3306 ```
3307 Software\Policies\Mozilla\Firefox\OfferToSaveLogins = 0x1 | 0x0
3308 ```
3309 #### Windows (Intune)
3310 OMA-URI:
3311 ```
3312 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OfferToSaveLogins
3313 ```
3314 Value (string):
3315 ```
3316 <enabled/> or <disabled/>
3317 ```
3318 #### macOS
3319 ```
3320 <dict>
3321   <key>OfferToSaveLogins</key>
3322   <true/> | <false/>
3323 </dict>
3324 ```
3325 #### policies.json
3326 ```
3327 {
3328   "policies": {
3329     "OfferToSaveLogins": true | false
3330   }
3331 }
3332 ```
3333 ### OfferToSaveLoginsDefault
3334 Sets the default value of signon.rememberSignons without locking it.
3335
3336 **Compatibility:** Firefox 70, Firefox ESR 60.2\
3337 **CCK2 Equivalent:** `dontRememberPasswords`\
3338 **Preferences Affected:** `signon.rememberSignons`
3339
3340 #### Windows (GPO)
3341 ```
3342 Software\Policies\Mozilla\Firefox\OfferToSaveLoginsDefault = 0x1 | 0x0
3343 ```
3344 #### Windows (Intune)
3345 OMA-URI:
3346 ```
3347 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OfferToSaveLoginsDefault
3348 ```
3349 Value (string):
3350 ```
3351 <enabled/> or <disabled/>
3352 ```
3353 #### macOS
3354 ```
3355 <dict>
3356   <key>OfferToSaveLoginsDefault</key>
3357   <true/> | <false/>
3358 </dict>
3359 ```
3360 #### policies.json
3361 ```
3362 {
3363   "policies": {
3364     "OfferToSaveLoginsDefault": true | false
3365   }
3366 }
3367 ```
3368 ### OverrideFirstRunPage
3369 Override the first run page. If the value is an empty string (""), the first run page is not displayed.
3370
3371 Starting with Firefox 83, Firefox ESR 78.5, you can also specify multiple URLS separated by a vertical bar (|).
3372
3373 **Compatibility:** Firefox 60, Firefox ESR 60\
3374 **CCK2 Equivalent:** `welcomePage`,`noWelcomePage`\
3375 **Preferences Affected:** `startup.homepage_welcome_url`
3376
3377 #### Windows (GPO)
3378 ```
3379 Software\Policies\Mozilla\Firefox\OverrideFirstRunPage = "http://example.org"
3380 ```
3381 #### Windows (Intune)
3382 OMA-URI:
3383 ```
3384 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OverrideFirstRunPage
3385 ```
3386 Value (string):
3387 ```
3388 <enabled/>
3389 <data id="OverridePage" value="https://example.com"/>
3390 ```
3391 #### macOS
3392 ```
3393 <dict>
3394   <key>OverrideFirstRunPage</key>
3395   <string>http://example.org</string>
3396 </dict>
3397 ```
3398 #### policies.json
3399 ```
3400 {
3401   "policies": {
3402     "OverrideFirstRunPage": "http://example.org"
3403 }
3404 ```
3405 ### OverridePostUpdatePage
3406 Override the upgrade page. If the value is an empty string (""), no extra pages are displayed when Firefox is upgraded.
3407
3408 **Compatibility:** Firefox 60, Firefox ESR 60\
3409 **CCK2 Equivalent:** `upgradePage`,`noUpgradePage`\
3410 **Preferences Affected:** `startup.homepage_override_url`
3411
3412 #### Windows (GPO)
3413 ```
3414 Software\Policies\Mozilla\Firefox\OverridePostUpdatePage = "http://example.org"
3415 ```
3416 #### Windows (Intune)
3417 OMA-URI:
3418 ```
3419 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OverridePostUpdatePage
3420 ```
3421 Value (string):
3422 ```
3423 <enabled/>
3424 <data id="OverridePage" value="https://example.com"/>
3425 ```
3426 #### macOS
3427 ```
3428 <dict>
3429   <key>OverridePostUpdatePage</key>
3430   <string>http://example.org</string>
3431 </dict>
3432 ```
3433 #### policies.json
3434 ```
3435 {
3436   "policies": {
3437     "OverridePostUpdatePage": "http://example.org"
3438 }
3439 ```
3440 ### PasswordManagerEnabled
3441 Remove access to the password manager via preferences and blocks about:logins on Firefox 70.
3442
3443 **Compatibility:** Firefox 70, Firefox ESR 60.2\
3444 **CCK2 Equivalent:** N/A\
3445 **Preferences Affected:** `pref.privacy.disable_button.view_passwords`
3446
3447 #### Windows (GPO)
3448 ```
3449 Software\Policies\Mozilla\Firefox\PasswordManagerEnabled = 0x1 | 0x0
3450 ```
3451 #### Windows (Intune)
3452 OMA-URI:
3453 ```
3454 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PasswordManagerEnabled
3455 ```
3456 Value (string):
3457 ```
3458 <enabled/> or <disabled/>
3459 ```
3460 #### macOS
3461 ```
3462 <dict>
3463   <key>PasswordManagerEnabled</key>
3464   <true/> | <false/>
3465 </dict>
3466 ```
3467 #### policies.json
3468 ```
3469 {
3470   "policies": {
3471     "PasswordManagerEnabled": true | false
3472   }
3473 }
3474 ```
3475 ### PDFjs
3476 Disable or configure PDF.js, the built-in PDF viewer.
3477
3478 If `Enabled` is set to false, the built-in PDF viewer is disabled.
3479
3480 If `EnablePermissions` is set to true, the built-in PDF viewer will honor document permissions like preventing the copying of text.
3481
3482 Note: DisableBuiltinPDFViewer has not been deprecated. You can either continue to use it, or switch to using PDFjs->Enabled to disable the built-in PDF viewer. This new permission was added because we needed a place for PDFjs->EnabledPermissions.
3483
3484 **Compatibility:** Firefox 77, Firefox ESR 68.9\
3485 **CCK2 Equivalent:** N/A\
3486 **Preferences Affected:** `pdfjs.diabled`,`pdfjs.enablePermissions`
3487
3488 #### Windows (GPO)
3489 ```
3490 Software\Policies\Mozilla\Firefox\PDFjs\Enabled = 0x1 | 0x0
3491 Software\Policies\Mozilla\Firefox\PDFjs\EnablePermissions = 0x1 | 0x0
3492 ```
3493 #### Windows (Intune)
3494 OMA-URI:
3495 ```
3496 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PDFjs/PDFjs_Enabled
3497 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PDFjs/PDFjs_EnablePermissions
3498 ```
3499 Value (string):
3500 ```
3501 <enabled/>or <disabled/>
3502 ```
3503 #### macOS
3504 ```
3505 <dict>
3506   <key>PDFjs</key>
3507   <dict>
3508     <key>Enabled</key>
3509     <true/> | <false/>
3510     <key>EnablePermissions</key>
3511     <true/> | <false/>
3512   </dict>
3513 </dict>
3514 ```
3515 #### policies.json
3516 ```
3517 {
3518   "policies": {
3519     "PSFjs": {
3520       "Enabled": true | false,
3521       "EnablePermissions": true | false
3522     }
3523 }
3524 ```
3525 ### Permissions
3526 Set permissions associated with camera, microphone, location, notifications, autoplay, and virtual reality. Because these are origins, not domains, entries with unique ports must be specified separately. This explicitly means that it is not possible to add wildcards. See examples below.
3527
3528 `Allow` is a list of origins where the feature is allowed.
3529
3530 `Block` is a list of origins where the feature is not allowed.
3531
3532 `BlockNewRequests` determines whether or not new requests can be made for the feature.
3533
3534 `Locked` prevents the user from changing preferences for the feature.
3535
3536 `Default` specifies the default value for Autoplay. block-audio-video is not supported on Firefox ESR 68.
3537
3538 **Compatibility:** Firefox 62, Firefox ESR 60.2 (Autoplay added in Firefox 74, Firefox ESR 68.6, Autoplay Default/Locked added in Firefox 76, Firefox ESR 68.8, VirtualReality added in Firefox 80, Firefox ESR 78.2)\
3539 **CCK2 Equivalent:** N/A\
3540 **Preferences Affected:** `permissions.default.camera`,`permissions.default.microphone`,`permissions.default.geo`,`permissions.default.desktop-notification`,`media.autoplay.default`.`permissions.default.xr`
3541
3542 #### Windows (GPO)
3543 ```
3544 Software\Policies\Mozilla\Firefox\Permissions\Camera\Allow\1 = "https://example.org"
3545 Software\Policies\Mozilla\Firefox\Permissions\Camera\Allow\2 = "https://example.org:1234"
3546 Software\Policies\Mozilla\Firefox\Permissions\Camera\Block\1 = "https://example.edu"
3547 Software\Policies\Mozilla\Firefox\Permissions\Camera\BlockNewRequests = 0x1 | 0x0
3548 Software\Policies\Mozilla\Firefox\Permissions\Camera\Locked = 0x1 | 0x0
3549 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Allow\1 = "https://example.org"
3550 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Block\1 = "https://example.edu"
3551 Software\Policies\Mozilla\Firefox\Permissions\Microphone\BlockNewRequests = 0x1 | 0x0
3552 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Locked = 0x1 | 0x0
3553 Software\Policies\Mozilla\Firefox\Permissions\Location\Allow\1 = "https://example.org"
3554 Software\Policies\Mozilla\Firefox\Permissions\Location\Block\1 = "https://example.edu"
3555 Software\Policies\Mozilla\Firefox\Permissions\Location\BlockNewRequests = 0x1 | 0x0
3556 Software\Policies\Mozilla\Firefox\Permissions\Location\Locked = 0x1 | 0x0
3557 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Allow\1 = "https://example.org"
3558 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Block\1 = "https://example.edu"
3559 Software\Policies\Mozilla\Firefox\Permissions\Notifications\BlockNewRequests = 0x1 | 0x0
3560 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Locked = 0x1 | 0x0
3561 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Allow\1 = "https://example.org"
3562 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Block\1 = "https://example.edu"
3563 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Default = "allow-audio-video" | "block-audio" | "block-audio-video"
3564 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Locked = 0x1 | 0x0
3565 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\Allow\1 = "https://example.org"
3566 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\Block\1 = "https://example.edu"
3567 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\BlockNewRequests = 0x1 | 0x0
3568 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\Locked = 0x1 | 0x0
3569 ```
3570 #### Windows (Intune)
3571 OMA-URI:
3572 ```
3573 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Location/Location_BlockNewRequests
3574 ```
3575 Value (string):
3576 ```
3577 <enabled/> or <disabled/>
3578 ```
3579 OMA-URI:
3580 ```
3581 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Location/Location_Locked
3582 ```
3583 Value (string):
3584 ```
3585 <enabled/> or <disabled/>
3586 ```
3587 OMA-URI:
3588 ```
3589 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_Allow
3590 ```
3591 Value (string):
3592 ```
3593 <enabled/>
3594 <data id="Permissions" value="1&#xF000;https://example.org"/>
3595 ```
3596 OMA-URI:
3597 ```
3598 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_BlockNewRequests
3599 ```
3600 Value (string):
3601 ```
3602 <enabled/> or <disabled/>
3603 ```
3604 OMA-URI:
3605 ```
3606 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_Locked
3607 ```
3608 Value (string):
3609 ```
3610 <enabled/> or <disabled/>
3611 ```
3612 OMA-URI:
3613 ```
3614 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Allow
3615 ```
3616 Value (string):
3617 ```
3618 <enabled/>
3619 <data id="Permissions" value="1&#xF000;https://example.org"/>
3620 ```
3621 OMA-URI:
3622 ```
3623 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Block
3624 ```
3625 Value (string):
3626 ```
3627 <enabled/>
3628 <data id="Permissions" value="1&#xF000;https://example.edu"/>
3629 ```
3630 OMA-URI:
3631 ```
3632 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Default
3633 ```
3634 Value (string):
3635 ```
3636 <enabled/>
3637 <data id="Autoplay_Default" value="allow-audio-video | block-audio | block-audio-video"/>
3638 ```
3639 OMA-URI:
3640 ```
3641 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Locked
3642 ```
3643 Value (string):
3644 ```
3645 <enabled/> or <disabled/>
3646 ```
3647 OMA-URI:
3648 ```
3649 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_Allow
3650 ```
3651 Value (string):
3652 ```
3653 <enabled/>
3654 <data id="Permissions" value="1&#xF000;https://example.org"/>
3655 ```
3656 OMA-URI:
3657 ```
3658 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_Block
3659 ```
3660 Value (string):
3661 ```
3662 <enabled/>
3663 <data id="Permissions" value="1&#xF000;https://example.edu"/>
3664 ```
3665 OMA-URI:
3666 ```
3667 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_BlockNewRequests
3668 ```
3669 Value (string):
3670 ```
3671 <enabled/> or <disabled/>
3672 ```
3673 OMA-URI:
3674 ```
3675 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_Locked
3676 ```
3677 Value (string):
3678 ```
3679 <enabled/> or <disabled/>
3680 ```
3681 #### macOS
3682 ```
3683 <dict>
3684   <key>Permissions</key>
3685   <dict>
3686     <key>Camera</key>
3687     <dict>
3688       <key>Allow</key>
3689       <array>
3690         <string>https://example.org</string>
3691         <string>https://example.org:1234</string>
3692       </array>
3693       <key>Block</key>
3694       <array>
3695         <string>https://example.edu</string>
3696       </array>
3697       <key>BlockNewRequests</key>
3698       <true/> | <false/>
3699       <key>Locked</key>
3700       <true/> | <false/>
3701     </dict>
3702     <key>Microphone</key>
3703     <dict>
3704       <key>Allow</key>
3705       <array>
3706         <string>https://example.org</string>
3707       </array>
3708       <key>Block</key>
3709       <array>
3710         <string>https://example.edu</string>
3711       </array>
3712       <key>BlockNewRequests</key>
3713       <true/> | <false/>
3714       <key>Locked</key>
3715       <true/> | <false/>
3716     </dict>
3717     <key>Location</key>
3718     <dict>
3719       <key>Allow</key>
3720       <array>
3721         <string>https://example.org</string>
3722       </array>
3723       <key>Block</key>
3724       <array>
3725         <string>https://example.edu</string>
3726       </array>
3727       <key>BlockNewRequests</key>
3728       <true/> | <false/>
3729       <key>Locked</key>
3730       <true/> | <false/>
3731     </dict>
3732     <key>Notifications</key>
3733     <dict>
3734       <key>Allow</key>
3735       <array>
3736         <string>https://example.org</string>
3737       </array>
3738       <key>Block</key>
3739       <array>
3740         <string>https://example.edu</string>
3741       </array>
3742       <key>BlockNewRequests</key>
3743       <true/>
3744       <key>Locked</key>
3745       <true/>
3746     </dict>
3747     <key>Autoplay</key>
3748     <dict>
3749       <key>Allow</key>
3750       <array>
3751         <string>https://example.org</string>
3752       </array>
3753       <key>Block</key>
3754       <array>
3755         <string>https://example.edu</string>
3756       </array>
3757       <key>Default</key>
3758       <string>allow-audio-video | block-audio | block-audio-video</string>
3759       <key>Locked</key>
3760       <true/> | <false/>
3761     </dict>
3762   </dict>
3763 </dict>
3764 ```
3765 #### policies.json
3766 ```
3767 {
3768   "policies": {
3769     "Permissions": {
3770       "Camera": {
3771         "Allow": ["https://example.org","https://example.org:1234"],
3772         "Block": ["https://example.edu"],
3773         "BlockNewRequests": true | false,
3774         "Locked": true | false
3775       },
3776       "Microphone": {
3777         "Allow": ["https://example.org"],
3778         "Block": ["https://example.edu"],
3779         "BlockNewRequests": true | false,
3780         "Locked": true | false
3781       },
3782       "Location": {
3783         "Allow": ["https://example.org"],
3784         "Block": ["https://example.edu"],
3785         "BlockNewRequests": true | false,
3786         "Locked": true | false
3787       },
3788       "Notifications": {
3789         "Allow": ["https://example.org"],
3790         "Block": ["https://example.edu"],
3791         "BlockNewRequests": true | false,
3792         "Locked": true | false
3793       },
3794       "Autoplay": {
3795         "Allow": ["https://example.org"],
3796         "Block": ["https://example.edu"],
3797         "Default": "allow-audio-video" | "block-audio" | "block-audio-video",
3798         "Locked": true | false
3799       }
3800     }
3801   }
3802 }
3803 ```
3804 ### PictureInPicture
3805
3806 Enable or disable Picture-in-Picture as well as lock it.
3807
3808 **Compatibility:** Firefox 78, Firefox ESR 78\
3809 **CCK2 Equivalent:** N/A\
3810 **Preferences Affected:** `media.videocontrols.picture-in-picture.video-toggle.enabled`
3811
3812 #### Windows (GPO)
3813 ```
3814 Software\Policies\Mozilla\Firefox\PictureInPicture\Enabled = 0x1 | 0x0
3815 Software\Policies\Mozilla\Firefox\PictureInPicture\Locked = 0x1 | 0x0
3816
3817 ```
3818 #### Windows (Intune)
3819 OMA-URI:
3820 ```
3821 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PictureInPicture/PictureInPicture_Enabled
3822 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PictureInPicture/PictureInPicture_Locked
3823 ```
3824 Value (string):
3825 ```
3826 <enabled/> or <disabled/>
3827 ```
3828 #### macOS
3829 ```
3830 <dict>
3831   <key>PictureInPicture</key>
3832   <dict>
3833     <key>Enabled</key>
3834     <true/> | <false/>
3835     <key>Locked</key>
3836     <true/> | <false/>
3837   </dict>
3838 </dict>
3839 ```
3840 #### policies.json
3841 ```
3842 {
3843   "policies": {
3844     "PictureInPicture": {
3845       "Enabled": true | false,
3846       "Locked": true, false
3847     }
3848   }
3849 }
3850 ```
3851 ### PopupBlocking
3852 Configure the default pop-up window policy as well as origins for which pop-up windows are allowed.
3853
3854 `Allow` is a list of origins where popup-windows are allowed.
3855
3856 `Default` determines whether or not pop-up windows are allowed by default.
3857
3858 `Locked` prevents the user from changing pop-up preferences.
3859
3860 **Compatibility:** Firefox 60, Firefox ESR 60\
3861 **CCK2 Equivalent:** `permissions.popup`\
3862 **Preferences Affected:** `dom.disable_open_during_load`
3863
3864 #### Windows (GPO)
3865 ```
3866 Software\Policies\Mozilla\Firefox\PopupBlocking\Allow\1 = "https://example.org"
3867 Software\Policies\Mozilla\Firefox\PopupBlocking\Allow\2 = "https://example.edu"
3868 Software\Policies\Mozilla\Firefox\PopupBlocking\Default = 0x1 | 0x0
3869 Software\Policies\Mozilla\Firefox\PopupBlocking\Locked = 0x1 | 0x0
3870 ```
3871 #### Windows (Intune)
3872 OMA-URI:
3873 ```
3874 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Allow
3875 ```
3876 Value (string):
3877 ```
3878 <enabled/>
3879 <data id="Permissions" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
3880 ```
3881 OMA-URI:
3882 ```
3883 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Default
3884 ```
3885 Value (string):
3886 ```
3887 <enabled/> or <disabled/>
3888 ```
3889 OMA-URI:
3890 ```
3891 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Locked
3892 ```
3893 Value (string):
3894 ```
3895 <enabled/> or <disabled/>
3896 ```
3897 #### macOS
3898 ```
3899 <dict>
3900   <key>PopupBlocking</key>
3901   <dict>
3902     <key>Allow</key>
3903     <array>
3904       <string>http://example.org</string>
3905       <string>http://example.edu</string>
3906     </array>
3907     <key>Default</key>
3908     <true/> | <false/>
3909     <key>Locked</key>
3910     <true/> | <false/>
3911   </dict>
3912 </dict>
3913 ```
3914 #### policies.json
3915 ```
3916 {
3917   "policies": {
3918     "PopupBlocking": {
3919       "Allow": ["http://example.org/",
3920                 "http://example.edu/"],
3921       "Default": true | false,
3922       "Locked": true | false
3923     }
3924   }
3925 }
3926 ```
3927 ### Preferences
3928 Set and lock preferences.
3929
3930 **NOTE** On Windows, in order to use this policy, you must clear all settings in the old **Preferences (Deprecated)** section.
3931
3932 Previously you could only set and lock a subset of preferences. Starting with Firefox 81 and Firefox ESR 78.3 you can set many more preferences. You can also set default preferences, user preferences and you can clear preferences.
3933
3934 Preferences that start with the following prefixes are supported:
3935 ```
3936 accessibility.
3937 browser.
3938 datareporting.policy.
3939 dom.
3940 extensions.
3941 general.autoScroll (Firefox 83, Firefox ESR 78.5)
3942 general.smoothScroll (Firefox 83, Firefox ESR 78.5)
3943 geo.
3944 intl.
3945 layout.
3946 media.
3947 network.
3948 places.
3949 print.
3950 signon. (Firefox 83, Firefox ESR 78.5)
3951 ui.
3952 widget.
3953 ```
3954 as well as the following security preferences:
3955 | Preference | Type | Default
3956 | --- | --- | ---
3957 | security.default_personal_cert | string | Ask Every Time
3958 | &nbsp;&nbsp;&nbsp;&nbsp;If set to Select Automatically, Firefox automatically chooses the default personal certificate.
3959 | security.insecure_connection_text.enabled | bool | false
3960 | &nbsp;&nbsp;&nbsp;&nbsp;If set to true, adds the words "Not Secure" for insecure sites.
3961 | security.insecure_connection_text.pbmode.enabled | bool | false
3962 | &nbsp;&nbsp;&nbsp;&nbsp;If set to true, adds the words "Not Secure" for insecure sites in private browsing.
3963 | security.insecure_field_warning.contextual.enabled | bool | true
3964 | &nbsp;&nbsp;&nbsp;&nbsp;If set to false, remove the warning for inscure login fields.
3965 | security.mixed_content.block_active_content | boolean | true
3966 | &nbsp;&nbsp;&nbsp;&nbsp;If false, mixed active content (HTTP and HTTPS) is not blocked.
3967 | security.osclientcerts.autoload | boolean | false
3968 | &nbsp;&nbsp;&nbsp;&nbsp;If true, client certificates are loaded from the operating system certificate store.
3969 | security.ssl.errorReporting.enabled | boolean | true
3970 | &nbsp;&nbsp;&nbsp;&nbsp;If false, SSL errors cannot be sent to Mozilla.
3971 | security.tls.hello_downgrade_check | boolean | true
3972 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the TLS 1.3 downgrade check is disabled.
3973 | security.warn_submit_secure_to_insecure | boolean | true
3974 | &nbsp;&nbsp;&nbsp;&nbsp;If false, no warning is shown when submitting s form from https to http.
3975 &nbsp;
3976
3977 Using the preference as the key, set the `Value` to the corresponding preference value.
3978
3979 `Status` can be "default", "locked", "user" or "clear"
3980
3981 Default preferences can be modified by the user.
3982
3983 If a value is locked, it is also set as the default.
3984
3985 User preferences persist across invocations of Firefox. It is the equivalent of a user setting the preference. They are most useful when a preference is needed very early in startup so it can't be set as default by policy.
3986
3987 User preferences persist even if the policy is removed, so if you need to remove them, you should use the clear policy.
3988
3989 See the examples below for more detail.
3990
3991 IMPORTANT: Make sure you're only setting a particular preference using this mechanism and not some other way.
3992
3993 Status
3994 **Compatibility:** Firefox 81, Firefox ESR 78.3\
3995 **CCK2 Equivalent:** `preferences`\
3996 **Preferences Affected:** Many
3997
3998 #### Windows (GPO)
3999 ```
4000 Software\Policies\Mozilla\Firefox\Preferences (REG_MULTI_SZ) =
4001 {
4002   "accessibility.force_disabled": {
4003     "Value": 1,
4004     "Status": "default"
4005   },
4006   "browser.cache.disk.parent_directory": {
4007     "Value": "SOME_NATIVE_PATH",
4008     "Status": "user"
4009   },
4010   "browser.tabs.warnOnClose": {
4011     "Value": false,
4012     "Status": "locked"
4013   }
4014 }
4015 ```
4016 #### Windows (Intune)
4017 OMA-URI:
4018 ```
4019 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Preferences
4020 ```
4021 Value (string):
4022 ```
4023 <enabled/>
4024 <data id="Preferences" value='
4025 {
4026   "accessibility.force_disabled": {
4027     "Value": 1,
4028     "Status": "default"
4029   },
4030   "browser.cache.disk.parent_directory": {
4031     "Value": "SOME_NATIVE_PATH",
4032     "Status": "user"
4033   },
4034   "browser.tabs.warnOnClose": {
4035     "Value": false,
4036     "Status": "locked"
4037   }
4038 }'/>
4039 ```
4040 #### macOS
4041 ```
4042 <dict>
4043   <key>Preferences</key>
4044   <dict>
4045     <key>accessibility.force_disabled</key>
4046     <dict>
4047       <key>Value</key>
4048       <integer>1</integer>
4049       <key>Status</key>
4050       <string>default</string>
4051     </dict>
4052     <key>browser.cache.disk.parent_directory</key>
4053     <dict>
4054       <key>Value</key>
4055       <string>SOME_NATIVE_PATH</string>
4056       <key>Status</key>
4057       <string>user</string>
4058     </dict>
4059     <key>browser.tabs.warnOnClose</key>
4060     <dict>
4061       <key>Value</key>
4062       <false/>
4063       <key>Status</key>
4064       <string>locked</string>
4065     </dict>
4066   </dict>
4067 </dict>
4068 ```
4069 #### policies.json
4070 ```
4071 {
4072   "policies": {
4073     "Preferences": {
4074       "accessibility.force_disabled": {
4075         "Value": 1,
4076         "Status": "default"
4077       },
4078       "browser.cache.disk.parent_directory": {
4079         "Value": "SOME_NATIVE_PATH",
4080         "Status": "user"
4081       },
4082       "browser.tabs.warnOnClose": {
4083         "Value": false,
4084         "Status": "locked"
4085       }
4086     }
4087   }
4088 }
4089 ```
4090 ### Preferences (Deprecated)
4091 Set and lock certain preferences.
4092
4093 **Compatibility:** See below\
4094 **CCK2 Equivalent:** `preferences`\
4095 **Preferences Affected:** See below
4096
4097 | Preference | Type | Compatibility | Default
4098 | --- | --- | --- | ---
4099 | accessibility.force_disabled | integer | Firefox 70, Firefox ESR 68.2 | 0
4100 | &nbsp;&nbsp;&nbsp;&nbsp;If set to 1, platform accessibility is disabled.
4101 | app.update.auto (Deprecated - Switch to AppAutoUpdate policy) | boolean | Firefox 68, Firefox ESR 68 | true
4102 | &nbsp;&nbsp;&nbsp;&nbsp;If false, Firefox doesn't automatically install update.
4103 | browser.bookmarks.autoExportHTML | boolean | Firefox 70, Firefox ESR 68.2 | false
4104 | &nbsp;&nbsp;&nbsp;&nbsp;If true, bookmarks are exported on shutdown.
4105 | browser.bookmarks.file | string | Firefox 70, Firefox ESR 68.2 | N/A
4106 | &nbsp;&nbsp;&nbsp;&nbsp;If set, the name of the file where bookmarks are exported and imported.
4107 | browser.bookmarks.restore_default_bookmarks | boolean | Firefox 70, Firefox ESR 68.2 | N/A
4108 | &nbsp;&nbsp;&nbsp;&nbsp;If true, bookmarks are restored to their defaults.
4109 | browser.cache.disk.enable | boolean | Firefox 68, Firefox ESR 68 | true
4110 | &nbsp;&nbsp;&nbsp;&nbsp;If false, don't store cache on the hard drive.
4111 | ~browser.cache.disk.parent_directory~ | string | Firefox 68, Firefox ESR 68 | Profile temporary directory
4112 | &nbsp;&nbsp;&nbsp;&nbsp;~If set, changes the location of the disk cache.~ This policy doesn't work. It's being worked on.
4113 | browser.fixup.dns_first_for_single_words | boolean | Firefox 68, Firefox ESR 68 | false
4114 | &nbsp;&nbsp;&nbsp;&nbsp;If true, single words are sent to DNS, not directly to search.
4115 | browser.newtabpage.activity-stream.default.sites | string | Firefox 72, ESR 68.4 | Locale dependent
4116 | &nbsp;&nbsp;&nbsp;&nbsp;If set, a list of URLs to use as the default top sites on the new tab page. Due to Firefox limitations, search sites can't be added. In addition, sites with the same name but different TLDs (example.org/example.com) will not display properly.
4117 | browser.places.importBookmarksHTML | boolean | Firefox 70, Firefox ESR 68.2
4118 | &nbsp;&nbsp;&nbsp;&nbsp;If true, bookmarks are always imported on startup.
4119 | browser.safebrowsing.phishing.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
4120 | &nbsp;&nbsp;&nbsp;&nbsp;If false, phishing protection is not enabled (Not recommended)
4121 | browser.safebrowsing.malware.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
4122 | &nbsp;&nbsp;&nbsp;&nbsp;If false, malware protection is not enabled (Not recommended)
4123 | browser.search.update | boolean | Firefox 68, Firefox ESR 68 | true
4124 | &nbsp;&nbsp;&nbsp;&nbsp;If false, updates for search engines are not checked.
4125 | browser.slowStartup.notificationDisabled | boolean | Firefox 70, Firefox ESR 68.2 | false
4126 | &nbsp;&nbsp;&nbsp;&nbsp;If true, a notification isn't shown if startup is slow.
4127 | browser.tabs.warnOnClose | boolean | Firefox 68, Firefox ESR 68 | true
4128 | &nbsp;&nbsp;&nbsp;&nbsp;If false, there is no warning when the browser is closed.
4129 | browser.taskbar.previews.enable | boolean | Firefox 70, Firefox ESR 68.2 (Windows only) | false
4130 | &nbsp;&nbsp;&nbsp;&nbsp;If true, tab previews are shown in the Windows taskbar.
4131 | browser.urlbar.suggest.bookmark | boolean | Firefox 68, Firefox ESR 68 | true
4132 | &nbsp;&nbsp;&nbsp;&nbsp;If false, bookmarks aren't suggested when typing in the URL bar.
4133 | browser.urlbar.suggest.history | boolean | Firefox 68, Firefox ESR 68 | true
4134 | &nbsp;&nbsp;&nbsp;&nbsp;If false, history isn't suggested when typing in the URL bar.
4135 | browser.urlbar.suggest.openpage | boolean | Firefox 68, Firefox ESR 68 | true
4136 | &nbsp;&nbsp;&nbsp;&nbsp;If false, open tabs aren't suggested when typing in the URL bar.
4137 | datareporting.policy.dataSubmissionPolicyBypassNotification | boolean | Firefox 68, Firefox ESR 68 | false
4138 | &nbsp;&nbsp;&nbsp;&nbsp;If true, don't show the privacy policy tab on first run.
4139 | dom.allow_scripts_to_close_windows | boolean | Firefox 70, Firefox ESR 68.2 | false
4140 | &nbsp;&nbsp;&nbsp;&nbsp;If false, web page can close windows.
4141 | dom.disable_window_flip | boolean | Firefox 68, Firefox ESR 68 | true
4142 | &nbsp;&nbsp;&nbsp;&nbsp;If false, web pages can focus and activate windows.
4143 | dom.disable_window_move_resize | boolean | Firefox 68, Firefox ESR 68 | false
4144 | &nbsp;&nbsp;&nbsp;&nbsp;If true, web pages can't move or resize windows.
4145 | dom.event.contextmenu.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4146 | &nbsp;&nbsp;&nbsp;&nbsp;If false, web pages can't override context menus.
4147 | dom.keyboardevent.keypress.hack.dispatch_non_printable_keys.addl | string | Firefox 68, Firefox ESR 68 | N/A
4148 | &nbsp;&nbsp;&nbsp;&nbsp;See https://support.mozilla.org/en-US/kb/dom-events-changes-introduced-firefox-66
4149 | dom.keyboardevent.keypress.hack.use_legacy_keycode_and_charcode.addl | string | Firefox 68, Firefox ESR 68 | N/A
4150 | &nbsp;&nbsp;&nbsp;&nbsp;See https://support.mozilla.org/en-US/kb/dom-events-changes-introduced-firefox-66
4151 | dom.xmldocument.load.enabled | boolean | Firefox ESR 68.5 | true.
4152 | &nbsp;&nbsp;&nbsp;&nbsp;If false, XMLDocument.load is not available.
4153 | dom.xmldocument.async.enabled | boolean | Firefox ESR 68.5 | true
4154 | &nbsp;&nbsp;&nbsp;&nbsp;If false, XMLDocument.async is not available.
4155 | extensions.blocklist.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
4156 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the extensions blocklist is not used (Not recommended)
4157 | extensions.getAddons.showPane | boolean | Firefox 68, Firefox ESR 68 | N/A
4158 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the Recommendations tab is not displayed in the Add-ons Manager.
4159 | extensions.htmlaboutaddons.recommendations.enabled | boolean | Firefox 72, Firefox ESR 68.4 | true
4160 | &nbsp;&nbsp;&nbsp;&nbsp;If false, recommendations are not shown on the Extensions tab in the Add-ons Manager.
4161 | geo.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
4162 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the geolocation API is disabled. | Language dependent
4163 | intl.accept_languages | string | Firefox 70, Firefox ESR 68.2
4164 | &nbsp;&nbsp;&nbsp;&nbsp;If set, preferred language for web pages.
4165 | media.eme.enabled (Deprecated - Switch to EncryptedMediaExtensions policy) | boolean | Firefox 70, Firefox ESR 68.2 | true
4166 | &nbsp;&nbsp;&nbsp;&nbsp;If false, Encrypted Media Extensions are not enabled.
4167 | media.gmp-gmpopenh264.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4168 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the OpenH264  plugin is not downloaded.
4169 | media.gmp-widevinecdm.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4170 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the Widevine plugin is not downloaded.
4171 | media.peerconnection.enabled | boolean | Firefox 72, Firefox ESR 68.4 | true
4172 | &nbsp;&nbsp;&nbsp;&nbsp;If false, WebRTC is disabled
4173 | media.peerconnection.ice.obfuscate_host_addresses.whitelist (Deprecated) | string | Firefox 72, Firefox ESR 68.4 | N/A
4174 | &nbsp;&nbsp;&nbsp;&nbsp;If set, a list of domains for which mDNS hostname obfuscation is
4175 disabled
4176 | media.peerconnection.ice.obfuscate_host_addresses.blocklist | string | Firefox 79, Firefox ESR 78.1 | N/A
4177 | &nbsp;&nbsp;&nbsp;&nbsp;If set, a list of domains for which mDNS hostname obfuscation is
4178 disabled
4179 | network.dns.disableIPv6 | boolean | Firefox 68, Firefox ESR 68 | false
4180 | &nbsp;&nbsp;&nbsp;&nbsp;If true, IPv6 DNS lokoups are disabled.
4181 | network.IDN_show_punycode | boolean | Firefox 68, Firefox ESR 68 | false
4182 | &nbsp;&nbsp;&nbsp;&nbsp;If true, display the punycode version of internationalized domain names.
4183 | places.history.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4184 | &nbsp;&nbsp;&nbsp;&nbsp;If false, history is not enabled.
4185 | print.save_print_settings | boolean | Firefox 70, Firefox ESR 68.2 | true
4186 | &nbsp;&nbsp;&nbsp;&nbsp;If false, print settings are not saved between jobs.
4187 | security.default_personal_cert | string | Firefox 68, Firefox ESR 68 | Ask Every Time
4188 | &nbsp;&nbsp;&nbsp;&nbsp;If set to Select Automatically, Firefox automatically chooses the default personal certificate.
4189 | security.mixed_content.block_active_content | boolean | Firefox 70, Firefox ESR 68.2 | true
4190 | &nbsp;&nbsp;&nbsp;&nbsp;If false, mixed active content (HTTP and HTTPS) is not blocked.
4191 | security.osclientcerts.autoload | boolean | Firefox 72 (Windows), Firefox 75 (macOS)  | false
4192 | &nbsp;&nbsp;&nbsp;&nbsp;If true, client certificates are loaded from the operating system certificate store.
4193 | security.ssl.errorReporting.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4194 | &nbsp;&nbsp;&nbsp;&nbsp;If false, SSL errors cannot be sent to Mozilla.
4195 | security.tls.hello_downgrade_check | boolean | Firefox 72, Firefox ESR 68.4 | true
4196 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the TLS 1.3 downgrade check is disabled.
4197 | ui.key.menuAccessKeyFocuses | boolean | Firefox 68, Firefox ESR 68 | true
4198 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the Alt key doesn't show the menubar on Windows.
4199 | widget.content.gtk-theme-override | string | Firefox 72, Firefox ESR 68.4 (Linux only) | N/A
4200 | &nbsp;&nbsp;&nbsp;&nbsp;If set, overrides the GTK theme for widgets.
4201 #### Windows (GPO)
4202 ```
4203 Software\Policies\Mozilla\Firefox\Preferences\boolean_preference_name = 0x1 | 0x0
4204 Software\Policies\Mozilla\Firefox\Preferences\string_preference_name = "string_value"
4205 ```
4206 #### Windows (Intune)
4207 OMA-URI: (periods are replaced by underscores)
4208 ```
4209 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Preferences/boolean_preference_name
4210 ```
4211 Value (string):
4212 ```
4213 <enabled/> or <disabled/>
4214 ```
4215 OMA-URI: (periods are replaced by underscores)
4216 ```
4217 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Preferences/string_preference_name
4218 ```
4219 Value (string):
4220 ```
4221 <enabled/>
4222 <data id="Preferences_String" value="string_value"/>
4223 ```
4224 #### macOS
4225 ```
4226 <dict>
4227   <key>Preferences</key>
4228   <dict>
4229     <key>boolean_preference_name</key>
4230     <true/> | <false/>
4231     <key>string_preference_name</key>
4232     <string>string_value</string>
4233   </dict>
4234 </dict>
4235 ```
4236 #### policies.json
4237 ```
4238 {
4239   "policies": {
4240     "Preferences": {
4241       "boolean_preference_name": true | false,
4242       "string_preference_name": "string_value"
4243     }
4244   }
4245 }
4246 ```
4247 ### PromptForDownloadLocation
4248 Ask where to save each file before downloading.
4249
4250 **Compatibility:** Firefox 68, Firefox ESR 68\
4251 **CCK2 Equivalent:** N/A\
4252 **Preferences Affected:** `browser.download.useDownloadDir`
4253
4254 #### Windows (GPO)
4255 ```
4256 Software\Policies\Mozilla\Firefox\PromptForDownloadLocation = 0x1 | 0x0
4257 ```
4258 #### Windows (Intune)
4259 OMA-URI:
4260 ```
4261 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PromptForDownloadLocation
4262 ```
4263 Value (string):
4264 ```
4265 <enabled/> or <disabled/>
4266 ```
4267 #### macOS
4268 ```
4269 <dict>
4270   <key>PromptForDownloadLocation</key>
4271   <true/> | <false/>
4272 </dict>
4273 ```
4274 #### policies.json
4275 ```
4276 {
4277   "policies": {
4278     "PromptForDownloadLocation": true | false
4279   }
4280 }
4281 ```
4282 ### Proxy
4283 Configure proxy settings. These settings correspond to the connection settings in Firefox preferences.
4284 To specify ports, append them to the hostnames with a colon (:).
4285
4286 `Mode` is the proxy method being used.
4287
4288 `Locked` is whether or not proxy settings can be changed.
4289
4290 `HTTPProxy` is the HTTP proxy server.
4291
4292 `UseHTTPProxyForAllProtocols` is whether or not the HTTP proxy should be used for all other proxies.
4293
4294 `SSLProxy` is the SSL proxy server.
4295
4296 `FTPProxy` is the FTP proxy server.
4297
4298 `SOCKSProxy` is the SOCKS proxy server
4299
4300 `SOCKSVersion` is the SOCKS version (4 or 5)
4301
4302 `Passthrough` is list of hostnames or IP addresses that will not be proxied. Use `<local>` to bypass proxying for all hostnames which do not contain periods.
4303
4304 `AutoConfigURL` is a  URL for proxy configuration (only used if Mode is autoConfig).
4305
4306 `AutoLogin` means do not prompt for authentication if password is saved.
4307
4308 `UseProxyForDNS` to use proxy DNS when using SOCKS v5.
4309
4310 **Compatibility:** Firefox 60, Firefox ESR 60\
4311 **CCK2 Equivalent:** `networkProxy*`\
4312 **Preferences Affected:** `network.proxy.type`,`network.proxy.autoconfig_url`,`network.proxy.socks_remote_dns`,`signon.autologin.proxy`,`network.proxy.socks_version`,`network.proxy.no_proxies_on`,`network.proxy.share_proxy_settings`,`network.proxy.http`,`network.proxy.http_port`,`network.proxy.ftp`,`network.proxy.ftp_port`,`network.proxy.ssl`,`network.proxy.ssl_port`,`network.proxy.socks`,`network.proxy.socks_port`
4313
4314 #### Windows (GPO)
4315 ```
4316 Software\Policies\Mozilla\Firefox\Proxy\Mode = "none" | "system" | "manual" | "autoDetect" | "autoConfig"
4317 Software\Policies\Mozilla\Firefox\Proxy\Locked = 0x1 | 0x0
4318 Software\Policies\Mozilla\Firefox\=Proxy\HTTPProxy = https://httpproxy.example.com
4319 Software\Policies\Mozilla\Firefox\Proxy\UseHTTPProxyForAllProtocols = 0x1 | 0x0
4320 Software\Policies\Mozilla\Firefox\Proxy\SSLProxy = https://sslproxy.example.com
4321 Software\Policies\Mozilla\Firefox\Proxy\FTPProxy = https://ftpproxy.example.com
4322 Software\Policies\Mozilla\Firefox\Proxy\SOCKSProxy = https://socksproxy.example.com
4323 Software\Policies\Mozilla\Firefox\Proxy\SOCKSVersion = 0x4 | 0x5
4324 Software\Policies\Mozilla\Firefox\Proxy\Passthrough = <local>
4325 Software\Policies\Mozilla\Firefox\Proxy\AutoConfigURL = URL_TO_AUTOCONFIG
4326 Software\Policies\Mozilla\Firefox\Proxy\AutoLogin = 0x1 | 0x0
4327 Software\Policies\Mozilla\Firefox\Proxy\UseProxyForDNS = 0x1 | 0x0
4328 ```
4329 #### Windows (Intune)
4330 OMA-URI:
4331 ```
4332 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Proxy
4333 ```
4334 Value (string):
4335 ```
4336 <enabled/>
4337 <data id="ProxyLocked" value="true | false"/>
4338 <data id="ConnectionType" value="none | system | manual | autoDetect | autoConfig"/>
4339 <data id="HTTPProxy" value="https://httpproxy.example.com"/>
4340 <data id="UseHTTPProxyForAllProtocols" value="true | false"/>
4341 <data id="SSLProxy" value="https://sslproxy.example.com"/>
4342 <data id="FTPProxy" value="https://ftpproxy.example.com"/>
4343 <data id="SOCKSProxy" value="https://socksproxy.example.com"/>
4344 <data id="SOCKSVersion" value="4 | 5"/>
4345 <data id="AutoConfigURL" value="URL_TO_AUTOCONFIG"/>
4346 <data id="Passthrough" value="<local>"/>
4347 <data id="AutoLogin" value="true | false"/>
4348 <data id="UseProxyForDNS" value="true | false"/>
4349 ```
4350 #### macOS
4351 ```
4352 <dict>
4353   <key>Proxy</key>
4354   <dict>
4355     <key>Mode</key>
4356     <string>none | system | manual | autoDetect | autoConfig</string>
4357     <key>Locked</key>
4358     <true> | </false>
4359     <key>HTTPProxy</key>
4360     <string>https://httpproxy.example.com</string>
4361     <key>UseHTTPProxyForAllProtocols</key>
4362     <true> | </false>
4363     <key>SSLProxy</key>
4364     <string>https://sslproxy.example.com</string>
4365     <key>FTPProxy</key>
4366     <string>https://ftpproxy.example.com</string>
4367     <key>SOCKSProxy</key>
4368     <string>https://socksproxy.example.com</string>
4369     <key>SOCKSVersion</key>
4370     <string>4 | 5</string>
4371     <key>Passthrough</key>
4372     <string>&lt;local>&gt;</string>
4373     <key>AutoConfigURL</key>
4374     <string>URL_TO_AUTOCONFIG</string>
4375     <key>AutoLogin</key>
4376     <true> | </false>
4377     <key>UseProxyForDNS</key>
4378     <true> | </false>
4379   </dict>
4380 </dict>
4381 ```
4382 #### policies.json
4383 ```
4384 {
4385   "policies": {
4386     "Proxy": {
4387       "Mode": "none" | "system" | "manual" | "autoDetect" | "autoConfig",
4388       "Locked": true | false,
4389       "HTTPProxy": "hostname",
4390       "UseHTTPProxyForAllProtocols": true | false,
4391       "SSLProxy": "hostname",
4392       "FTPProxy": "hostname",
4393       "SOCKSProxy": "hostname",
4394       "SOCKSVersion": 4 | 5
4395       "Passthrough": "<local>",
4396       "AutoConfigURL": "URL_TO_AUTOCONFIG",
4397       "AutoLogin": true | false,
4398       "UseProxyForDNS": true | false
4399     }
4400   }
4401 }
4402 ```
4403 ### RequestedLocales
4404 Set the the list of requested locales for the application in order of preference. It will cause the corresponding language pack to become active.
4405
4406 Note: For Firefox 68, this can now be a string so that you can specify an empty value.
4407
4408 **Compatibility:** Firefox 64, Firefox ESR 60.4, Updated in Firefox 68, Firefox ESR 68\
4409 **CCK2 Equivalent:** N/A\
4410 **Preferences Affected:** N/A
4411 #### Windows (GPO)
4412 ```
4413 Software\Policies\Mozilla\Firefox\RequestedLocales\1 = "de"
4414 Software\Policies\Mozilla\Firefox\RequestedLocales\2 = "en-US"
4415
4416 or
4417
4418 Software\Policies\Mozilla\Firefox\RequestedLocales = "de,en-US"
4419 ```
4420 #### Windows (Intune)
4421 OMA-URI:
4422 ```
4423 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/RequestedLocalesString
4424 ```
4425 Value (string):
4426 ```
4427 <enabled/>
4428 <data id="Preferences_String" value="de,en-US"/>
4429 ```
4430 #### macOS
4431 ```
4432 <dict>
4433   <key>RequestedLocales</key>
4434   <array>
4435     <string>de</string>
4436     <string>en-US</string>
4437   </array>
4438 </dict>
4439
4440 or
4441
4442 <dict>
4443   <key>RequestedLocales</key>
4444   <string>de,en-US</string>
4445 </dict>
4446
4447 ```
4448 #### policies.json
4449 ```
4450 {
4451   "policies": {
4452     "RequestedLocales": ["de", "en-US"]
4453   }
4454 }
4455
4456 or
4457
4458 {
4459   "policies": {
4460     "RequestedLocales": "de,en-US"
4461   }
4462 }
4463 ```
4464 <a name="SanitizeOnShutdown"></a>
4465
4466 ### SanitizeOnShutdown (Selective)
4467 Clear data on shutdown. Choose from Cache, Cookies, Download History, Form & Search History, Browsing History, Active Logins, Site Preferences and Offline Website Data.
4468
4469 Previously, these values were always locked. Starting with Firefox 74 and Firefox ESR 68.6, you can use the `Locked` option to either keep the values unlocked (set it to false), or lock only the values you set (set it to true). If you want the old behavior of locking everything, do not set `Locked` at all.
4470
4471 **Compatibility:** Firefox 68, Firefox ESR 68 (Locked added in 74/68.6)\
4472 **CCK2 Equivalent:** N/A\
4473 **Preferences Affected:** `privacy.sanitize.sanitizeOnShutdown`,`privacy.clearOnShutdown.cache`,`privacy.clearOnShutdown.cookies`,`privacy.clearOnShutdown.downloads`,`privacy.clearOnShutdown.formdata`,`privacy.clearOnShutdown.history`,`privacy.clearOnShutdown.sessions`,`privacy.clearOnShutdown.siteSettings`,`privacy.clearOnShutdown.offlineApps`
4474 #### Windows (GPO)
4475 ```
4476 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Cache = 0x1 | 0x0
4477 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Cookies = 0x1 | 0x0
4478 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Downloads = 0x1 | 0x0
4479 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\FormData = 0x1 | 0x0
4480 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\History = 0x1 | 0x0
4481 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Sessions = 0x1 | 0x0
4482 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\SiteSettings = 0x1 | 0x0
4483 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\OfflineApps = 0x1 | 0x0
4484 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Locked = 0x1 | 0x0
4485 ```
4486 #### Windows (Intune)
4487 OMA-URI:
4488 ```
4489 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/I_SanitizeOnShutdown_Locked
4490 ```
4491 Value (string):
4492 ```
4493 <enabled/> or <disabled/>
4494 ```
4495 #### macOS
4496 ```
4497 <dict>
4498   <key>SanitizeOnShutdown</key>
4499   <dict>
4500     <key>Cache</key>
4501     <true/> | <false/>
4502     <key>Cookies</key>
4503     <true/> | <false/>
4504     <key>Downloads</key>
4505     <true/> | <false/>
4506     <key>FormData</key>
4507     <true/> | <false/>
4508     <key>History</key>
4509     <true/> | <false/>
4510     <key>Sessions</key>
4511     <true/> | <false/>
4512     <key>SiteSettings</key>
4513     <true/> | <false/>
4514     <key>OfflineApps</key>
4515     <true/> | <false/>
4516     <key>Locked</key>
4517     <true/> | <false/>
4518   </dict>
4519 </dict>
4520 ```
4521 #### policies.json
4522 ```
4523 {
4524   "policies": {
4525     "SanitizeOnShutdown": {
4526       "Cache": true | false,
4527       "Cookies": true | false,
4528       "Downloads": true | false,
4529       "FormData": true | false,
4530       "History": true | false,
4531       "Sessions": true | false,
4532       "SiteSettings": true | false,
4533       "OfflineApps": true | false,
4534       "Locked": true | false
4535     }
4536   }
4537 }
4538 ```
4539 ### SanitizeOnShutdown (All)
4540 Clear all data on shutdown, including Browsing & Download History, Cookies, Active Logins, Cache, Form & Search History, Site Preferences and Offline Website Data.
4541
4542 **Compatibility:** Firefox 60, Firefox ESR 60\
4543 **CCK2 Equivalent:** N/A\
4544 **Preferences Affected:** `privacy.sanitize.sanitizeOnShutdown`,`privacy.clearOnShutdown.cache`,`privacy.clearOnShutdown.cookies`,`privacy.clearOnShutdown.downloads`,`privacy.clearOnShutdown.formdata`,`privacy.clearOnShutdown.history`,`privacy.clearOnShutdown.sessions`,`privacy.clearOnShutdown.siteSettings`,`privacy.clearOnShutdown.offlineApps`
4545 #### Windows (GPO)
4546 ```
4547 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown = 0x1 | 0x0
4548 ```
4549 #### Windows (Intune)
4550 OMA-URI:
4551 ```
4552 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/C_SanitizeOnShutdown
4553 ```
4554 Value (string):
4555 ```
4556 <enabled/> or <disabled/>
4557 ```
4558 #### macOS
4559 ```
4560 <dict>
4561   <key>SanitizeOnShutdown</key>
4562   <true/> | <false/>
4563 </dict>
4564 ```
4565 #### policies.json
4566 ```
4567 {
4568   "policies": {
4569     "SanitizeOnShutdown": true | false
4570   }
4571 }
4572 ```
4573 ### SearchBar
4574 Set whether or not search bar is displayed.
4575
4576 **Compatibility:** Firefox 60, Firefox ESR 60\
4577 **CCK2 Equivalent:** `showSearchBar`\
4578 **Preferences Affected:** N/A
4579
4580 #### Windows (GPO)
4581 ```
4582 Software\Policies\Mozilla\Firefox\SearchBar = "unified" | "separate"
4583 ```
4584
4585 #### Windows (Intune)
4586 OMA-URI:
4587 ```
4588 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SearchBar
4589 ```
4590 Value (string):
4591 ```
4592 <enabled/>
4593 <data id="Permissions" value="unified | separate"/>
4594 ```
4595 #### macOS
4596 ```
4597 <dict>
4598   <key>SearchBar</key>
4599   <string>unified | separate</string>
4600 </dict>
4601 ```
4602 #### policies.json
4603 ```
4604 {
4605   "policies": {
4606     "SearchBar": "unified" | "separate"
4607   }
4608 }
4609 ```
4610 <a name="SearchEngines"></a>
4611
4612 ### SearchEngines (This policy is only available on the ESR.)
4613
4614 ### SearchEngines | Default
4615
4616 Set the default search engine. This policy is only available on the ESR.
4617
4618 **Compatibility:** Firefox ESR 60\
4619 **CCK2 Equivalent:** `defaultSearchEngine`\
4620 **Preferences Affected:** N/A
4621
4622 #### Windows (GPO)
4623 ```
4624 Software\Policies\Mozilla\Firefox\SearchEngines\Default = NAME_OF_SEARCH_ENGINE
4625 ```
4626 #### Windows (Intune)
4627 OMA-URI:
4628 ```
4629 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_Default
4630 ```
4631 Value (string):
4632 ```
4633 <enabled/>
4634 <data id="SearchEngines_Default" value="NAME_OF_SEARCH_ENGINE"/>
4635 ```
4636 #### macOS
4637 ```
4638 <dict>
4639   <key>SearchEngines</key>
4640   <dict>
4641     <key>Default</key>
4642     <string>NAME_OF_SEARCH_ENGINE</string>
4643   </dict>
4644 </dict>
4645 ```
4646 #### policies.json
4647 ```
4648 {
4649   "policies": {
4650     "SearchEngines": {
4651       "Default": "NAME_OF_SEARCH_ENGINE"
4652     }
4653   }
4654 }
4655 ```
4656 ### SearchEngines | PreventInstalls
4657
4658 Prevent installing search engines from webpages.
4659
4660 **Compatibility:** Firefox ESR 60\
4661 **CCK2 Equivalent:** `disableSearchEngineInstall`\
4662 **Preferences Affected:** N/A
4663
4664 #### Windows (GPO)
4665 ```
4666 Software\Policies\Mozilla\Firefox\SearchEngines\PreventInstalls = 0x1 | 0x0
4667 ```
4668 #### Windows (Intune)
4669 OMA-URI:
4670 ```
4671 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_PreventInstalls
4672 ```
4673 Value (string):
4674 ```
4675 <enabled/> or <disabled/>
4676 ```
4677 #### macOS
4678 ```
4679 <dict>
4680   <key>SearchEngines</key>
4681   <dict>
4682     <key>PreventInstalls</key>
4683     <true/> | <false/>
4684   </dict>
4685 </dict>
4686 ```
4687 #### policies.json
4688 ```
4689 {
4690   "policies": {
4691     "SearchEngines": {
4692       "PreventInstalls": true | false
4693     }
4694   }
4695 }
4696 ```
4697 ### SearchEngines | Remove
4698
4699 Hide built-in search engines. This policy is only available on the ESR.
4700
4701 **Compatibility:** Firefox ESR 60.2\
4702 **CCK2 Equivalent:** `removeDefaultSearchEngines` (removed all built-in engines)\
4703 **Preferences Affected:** N/A
4704
4705 #### Windows (GPO)
4706 ```
4707 Software\Policies\Mozilla\Firefox\SearchEngines\Remove\1 = NAME_OF_SEARCH_ENGINE
4708 ```
4709 #### Windows (Intune)
4710 OMA-URI:
4711 ```
4712 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_Remove
4713 ```
4714 Value (string):
4715 ```
4716 <enabled/>
4717 <data id="SearchEngines_Remove" value="1&#xF000;NAME_OF_SEARCH_ENGINE"/>
4718 ```
4719 #### macOS
4720 ```
4721 <dict>
4722   <key>SearchEngines</key>
4723   <dict>
4724     <key>Remove</key>
4725     <array>
4726       <string>NAME_OF_SEARCH_ENGINE</string>
4727     </array>
4728   </dict>
4729 </dict>
4730 ```
4731 #### policies.json
4732 ```
4733 {
4734   "policies": {
4735     "SearchEngines": {
4736       "Remove": ["NAME_OF_SEARCH_ENGINE"]
4737     }
4738   }
4739 }
4740 ```
4741 ### SearchEngines | Add
4742
4743 Add new search engines (up to five). This policy is only available on the ESR. `Name` and `URLTemplate` are required.
4744
4745 `Name` is the name of the search engine.
4746
4747 `URLTemplate` is the search URL with {searchTerms} to substitute for the search term.
4748
4749 `Method` is either GET or POST
4750
4751 `IconURL` is a URL for the icon to use.
4752
4753 `Alias` is a keyword to use for the engine.
4754
4755 `Description` is a description of the search engine.
4756
4757 `PostData` is the POST data as name value pairs separated by &.
4758
4759 `SuggestURLTemplate` is a search suggestions URL with {searchTerms} to substitute for the search term.
4760
4761 **Compatibility:** Firefox ESR 60 (POST support in Firefox ESR 68)\
4762 **CCK2 Equivalent:** `searchplugins`\
4763 **Preferences Affected:** N/A
4764
4765 #### Windows (GPO)
4766 ```
4767 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Name = "Example1"
4768 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\URLTemplate = "https://www.example.org/q={searchTerms}"
4769 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Method = "GET" | "POST"
4770 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\IconURL = "https://www.example.org/favicon.ico"
4771 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Alias = "example"
4772 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Description = "Example Description"
4773 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\SuggestURLTemplate = "https://www.example.org/suggestions/q={searchTerms}"
4774 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\PostData = "name=value&q={searchTerms}"
4775 ```
4776 #### Windows (Intune)
4777 OMA-URI:
4778 ```
4779 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_1
4780 ```
4781 Value (string):
4782 ```
4783 <enabled/>
4784 <data id="SearchEngine_Name" value="Example1"/>
4785 <data id="SearchEngine_URLTemplate" value="https://www.example.org/q={searchTerms"/>
4786 <data id="SearchEngine_Method" value="GET | POST"/>
4787 <data id="SearchEngine_IconURL" value="https://www.example.org/favicon.ico"/>
4788 <data id="SearchEngine_Alias" value="example"/>
4789 <data id="SearchEngine_Description" value="Example Description"/>
4790 <data id="SearchEngine_SuggestURLTemplate" value="https://www.example.org/suggestions/q={searchTerms}"/>
4791 <data id="SearchEngine_PostData" value="name=value&amp;q={searchTerms}"/>
4792 ```
4793 #### macOS
4794 ```
4795 <dict>
4796   <key>SearchEngines</key>
4797   <dict>
4798     <key>Add</key>
4799     <array>
4800       <dict>
4801         <key>Name</key>
4802         <string>Example1</string>
4803         <key>URLTemplate</key>
4804         <string>https://www.example.org/q={searchTerms}</string>
4805         <key>Method</key>
4806         <string>GET | POST </string>
4807         <key>IconURL</key>
4808         <string>https://www.example.org/favicon.ico</string>
4809         <key>Alias</key>
4810         <string>example</string>
4811         <key>Description</key>
4812         <string>Example Description</string>
4813         <key>SuggestURLTemplate</key>
4814         <string>https://www.example.org/suggestions/q={searchTerms}</string>
4815         <key>PostData</key>
4816         <string>name=value&q={searchTerms}</string>
4817       </dict>
4818     <array>
4819   </dict>
4820 </dict>
4821 ```
4822 #### policies.json
4823 ```
4824 {
4825   "policies": {
4826     "SearchEngines": {
4827       "Add": [
4828         {
4829           "Name": "Example1",
4830           "URLTemplate": "https://www.example.org/q={searchTerms}",
4831           "Method": "GET" | "POST",
4832           "IconURL": "https://www.example.org/favicon.ico",
4833           "Alias": "example",
4834           "Description": "Description",
4835           "PostData": "name=value&q={searchTerms}",
4836           "SuggestURLTemplate": "https://www.example.org/suggestions/q={searchTerms}"
4837         }
4838       ]
4839     }
4840   }
4841 }
4842 ```
4843 ### SearchSuggestEnabled
4844
4845 Enable search suggestions.
4846
4847 **Compatibility:** Firefox 68, Firefox ESR 68\
4848 **CCK2 Equivalent:** N/A\
4849 **Preferences Affected:** `browser.urlbar.suggest.searches`,`browser.search.suggest.enabled`
4850
4851 #### Windows (GPO)
4852 ```
4853 Software\Policies\Mozilla\Firefox\SearchSuggestEnabled = 0x1 | 0x0
4854 ```
4855 #### Windows (Intune)
4856 OMA-URI:
4857 ```
4858 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchSuggestEnabled
4859 ```
4860 Value (string):
4861 ```
4862 <enabled/> or <disabled/>
4863 ```
4864 #### macOS
4865 ```
4866 <dict>
4867   <key>SearchSuggestEnabled</key>
4868   <true/> | <false/>
4869 </dict>
4870 ```
4871 #### policies.json
4872 ```
4873 {
4874   "policies": {
4875     "SearchSuggestEnabled": true | false
4876   }
4877 }
4878 ```
4879 ### SecurityDevices
4880
4881 Install PKCS #11 modules.
4882
4883 **Compatibility:** Firefox 64, Firefox ESR 60.4\
4884 **CCK2 Equivalent:** `certs.devices`\
4885 **Preferences Affected:** N/A
4886
4887 #### Windows (GPO)
4888 ```
4889 Software\Policies\Mozilla\Firefox\SecurityDevices\NAME_OF_DEVICE = PATH_TO_LIBRARY_FOR_DEVICE
4890 ```
4891 #### Windows (Intune)
4892 OMA-URI:
4893 ```
4894 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SecurityDevices
4895 ```
4896 Value (string):
4897 ```
4898 <enabled/>
4899 <data id="SecurityDevices" value="NAME_OF_DEVICE&#xF000;PATH_TO_LIBRARY_FOR_DEVICE"/>
4900 ```
4901 #### macOS
4902 ```
4903 <dict>
4904   <key>SecurityDevices</key>
4905   <dict>
4906     <key>NAME_OF_DEVICE</key>
4907     <string>PATH_TO_LIBRARY_FOR_DEVICE</string>
4908   </dict>
4909 </dict>
4910 ```
4911
4912 #### policies.json
4913 ```
4914 {
4915   "policies": {
4916     "SecurityDevices": {
4917       "NAME_OF_DEVICE": "PATH_TO_LIBRARY_FOR_DEVICE"
4918     }
4919   }
4920 }
4921 ```
4922 ### SSLVersionMax
4923
4924 Set and lock the maximum version of TLS.
4925
4926 **Compatibility:** Firefox 66, Firefox ESR 60.6\
4927 **CCK2 Equivalent:** N/A\
4928 **Preferences Affected:** `security.tls.version.max`
4929
4930 #### Windows (GPO)
4931 ```
4932 Software\Policies\Mozilla\Firefox\SSLVersionMax = "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
4933 ```
4934 #### Windows (Intune)
4935 OMA-URI:
4936 ```
4937 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SSLVersionMax
4938 ```
4939 Value (string):
4940 ```
4941 <enabled/>
4942 <data id="SSLVersion" value="tls1 | tls1.2 | tls1.3"/>
4943 ```
4944 #### macOS
4945 ```
4946 <dict>
4947   <key>SSLVersionMax</key>
4948   <string>tls1 | tls1.1 | tls1.2 | tls1.3</string>
4949 </dict>
4950 ```
4951
4952 #### policies.json
4953 ```
4954 {
4955   "policies": {
4956     "SSLVersionMax": "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
4957   }
4958 }
4959 ```
4960 ### SSLVersionMin
4961
4962 Set and lock the minimum version of TLS.
4963
4964 **Compatibility:** Firefox 66, Firefox ESR 60.6\
4965 **CCK2 Equivalent:** N/A\
4966 **Preferences Affected:** `security.tls.version.min`
4967
4968 #### Windows (GPO)
4969 ```
4970 Software\Policies\Mozilla\Firefox\SSLVersionMin = "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
4971 ```
4972 #### Windows (Intune)
4973 OMA-URI:
4974 ```
4975 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SSLVersionMin
4976 ```
4977 Value (string):
4978 ```
4979 <enabled/>
4980 <data id="SSLVersion" value="tls1 | tls1.2 | tls1.3"/>
4981 ```
4982 #### macOS
4983 ```
4984 <dict>
4985   <key>SSLVersionMin</key>
4986   <string>tls1 | tls1.1 | tls1.2 | tls1.3</string>
4987 </dict>
4988 ```
4989
4990 #### policies.json
4991 ```
4992 {
4993   "policies": {
4994     "SSLVersionMin": "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
4995   }
4996 }
4997 ```
4998 ### SupportMenu
4999 Add a menuitem to the help menu for specifying support information.
5000
5001 **Compatibility:** Firefox 68.0.1, Firefox ESR 68.0.1\
5002 **CCK2 Equivalent:** helpMenu\
5003 **Preferences Affected:** N/A
5004
5005 #### Windows (GPO)
5006 ```
5007 Software\Policies\Mozilla\Firefox\SupportMenu\Title = "Support Menu"
5008 Software\Policies\Mozilla\Firefox\SupportMenu\URL = "http://example.com/support"
5009 Software\Policies\Mozilla\Firefox\SupportMenu\AccessKey = "S"
5010 ```
5011 #### Windows (Intune)
5012 OMA-URI:
5013 ```
5014 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SupportMenu
5015 ```
5016 Value (string):
5017 ```
5018 <enabled/>
5019 <data id="SupportMenuTitle" value="Support Menu"/>
5020 <data id="SupportMenuURL" value="http://example.com/support"/>
5021 <data id="SupportMenuAccessKey" value="S">
5022 ```
5023 #### macOS
5024 ```
5025 <dict>
5026   <key>SupportMenu</key>
5027   <dict>
5028     <key>Title</key>
5029     <string>SupportMenu</string>
5030     <key>URL</key>
5031     <string>http://example.com/support</string>
5032     <key>AccessKey</key>
5033     <string>S</string>
5034   </dict>
5035 </dict>
5036 ```
5037 #### policies.json
5038 ```
5039 {
5040   "policies": {
5041     "SupportMenu": {
5042       "Title": "Support Menu",
5043       "URL": "http://example.com/support",
5044       "AccessKey": "S"
5045     }
5046   }
5047 }
5048 ```
5049 ### UserMessaging
5050
5051 Prevent Firefox from messaging the user in certain situations.
5052
5053 `WhatsNew` Remove the "What's New" icon and menuitem. (Firefox 75 only)
5054
5055 `ExtensionRecommendations` Don't recommend extensions while the user is visiting web pages.
5056
5057 `FeatureRecommendations` Don't recommend browser features.
5058
5059 `UrlbarInterventions` Don't offer Firefox specific suggestions in the URL bar. (Firefox 75 only)
5060
5061 **Compatibility:** Firefox 75, Firefox ESR 68.7\
5062 **CCK2 Equivalent:** N/A\
5063 **Preferences Affected:** `browser.messaging-system.whatsNewPanel.enabled`,`browser.newtabpage.activity-stream.asrouter.userprefs.cfr.addons`,`browser.newtabpage.activity-stream.asrouter.userprefs.cfr.features`
5064
5065 #### Windows (GPO)
5066 ```
5067 Software\Policies\Mozilla\Firefox\UserMessaging\WhatsNew = 0x1 | 0x0
5068 Software\Policies\Mozilla\Firefox\UserMessaging\ExtensionRecommendations = 0x1 | 0x0
5069 Software\Policies\Mozilla\Firefox\UserMessaging\FeatureRecommendations = 0x1 | 0x0
5070 Software\Policies\Mozilla\Firefox\UserMessaging\UrlbarInterventions = 0x1 | 0x0
5071 ```
5072 #### Windows (Intune)
5073 OMA-URI:
5074 ```
5075 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/UserMessaging_WhatsNew
5076 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/UserMessaging_ExtensionRecommendations
5077 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/UserMessaging_FeatureRecommendations
5078 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/UserMessaging_UrlbarInterventions
5079 ```
5080 Value (string):
5081 ```
5082 <enabled/> or <disabled/>
5083 ```
5084 #### macOS
5085 ```
5086 <dict>
5087   <key>UserMessaging</key>
5088   <dict>
5089     <key>WhatsNew</key>
5090     <true/> | <false/>
5091     <key>ExtensionRecommendations</key>
5092     <true/> | <false/>
5093     <key>FeatureRecommendations</key>
5094     <true/> | <false/>
5095     <key>UrlbarInterventions</key>
5096     <true/> | <false/>
5097   </dict>
5098 </dict>
5099 ```
5100 #### policies.json
5101 ```
5102 {
5103   "policies": {
5104     "UserMessaging": {
5105       "WhatsNew": true | false,
5106       "ExtensionRecommendations": true | false,
5107       "FeatureRecommendations": true | false,
5108       "UrlbarInterventions": true | false
5109     }
5110   }
5111 }
5112 ```
5113 ### WebsiteFilter
5114 Block websites from being visited. The parameters take an array of Match Patterns, as documented in https://developer.mozilla.org/en-US/Add-ons/WebExtensions/Match_patterns.
5115 The arrays are limited to 1000 entries each.
5116
5117 As of Firefox 83 and Firefox ESR 78.5, file URLs are supported.
5118
5119 **Compatibility:** Firefox 60, Firefox ESR 60\
5120 **CCK2 Equivalent:** N/A\
5121 **Preferences Affected:** N/A
5122
5123 #### Windows (GPO)
5124 ```
5125 Software\Policies\Mozilla\Firefox\WebsiteFilter\Block\1 = "<all_urls>"
5126 Software\Policies\Mozilla\Firefox\WebsiteFilter\Exceptions\1 = "http://example.org/*"
5127 ```
5128 #### Windows (Intune)
5129 OMA-URI:
5130 ```
5131 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/B_WebsiteFilter_Block
5132 ```
5133 Value (string):
5134 ```
5135 <enabled/>
5136 <data id="WebsiteFilter" value="1&#xF000;<all_urls>"/>
5137 ```
5138 OMA-URI:
5139 ```
5140 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/B_WebsiteFilter_Exceptions
5141 ```
5142 Value (string):
5143 ```
5144 <enabled/>
5145 <data id="WebsiteFilter" value="1&#xF000;http://example.org/*"/>
5146 ```
5147 #### macOS
5148 ```
5149 <dict>
5150   <key>WebsiteFilter</key>
5151   <dict>
5152     <key>Block</key>
5153     <array>
5154       <string><all_urls></string>
5155     </array>
5156     <key>Exceptions</key>
5157     <array>
5158       <string>http://example.org/*</string>
5159     </array>
5160   </dict>
5161
5162 </dict>
5163 ```
5164 #### policies.json
5165 ```
5166 {
5167   "policies": {
5168     "WebsiteFilter": {
5169       "Block": ["<all_urls>"],
5170       "Exceptions": ["http://example.org/*"]
5171     }
5172   }
5173 }
5174 ```