README.md

   1 **These policies are in active development and so might contain changes that do not work with current versions of Firefox.**
   2
   3 **You should use the [officially released versions](https://github.com/mozilla/policy-templates/releases) if you are deploying changes.**
   4
   5 Policies can be specified using the [Group Policy templates on Windows](https://github.com/mozilla/policy-templates/tree/master/windows), [Intune on Windows](https://support.mozilla.org/kb/managing-firefox-intune), [configuration profiles on macOS](https://github.com/mozilla/policy-templates/tree/master/mac), or by creating a file called `policies.json`. On Windows, create a directory called `distribution` where the EXE is located and place the file there. On Mac, the file goes into `Firefox.app/Contents/Resources/distribution`.  On Linux, the file goes into `firefox/distribution`, where `firefox` is the installation directory for firefox, which varies by distribution or you can specify system-wide policy by placing the file in `/etc/firefox/policies`.
   6
   7 | Policy Name | Description
   8 | --- | --- |
   9 | **[`3rdparty`](#3rdparty)** | Set policies that WebExtensions can access via chrome.storage.managed.
  10 | **[`AllowedDomainsForApps`](#alloweddomainsforapps)** | Define domains allowed to access Google Workspace.
  11 | **[`AppAutoUpdate`](#appautoupdate)** | Enable or disable automatic application update.
  12 | **[`AppUpdateURL`](#appupdateurl)** | Change the URL for application update.
  13 | **[`Authentication`](#authentication)** | Configure sites that support integrated authentication.
  14 | **[`AutoLaunchProtocolsFromOrigins`](#autolaunchprotocolsfromorigins)** | Define a list of external protocols that can be used from listed origins without prompting the user.
  15 | **[`BackgroundAppUpdate`](#backgroundappupdate)** | Enable or disable the background updater (Windows only).
  16 | **[`BlockAboutAddons`](#blockaboutaddons)** | Block access to the Add-ons Manager (about:addons).
  17 | **[`BlockAboutConfig`](#blockaboutconfig)** | Block access to about:config.
  18 | **[`BlockAboutProfiles`](#blockaboutprofiles)** | Block access to About Profiles (about:profiles).
  19 | **[`BlockAboutSupport`](#blockaboutsupport)** | Block access to Troubleshooting Information (about:support).
  20 | **[`Bookmarks`](#bookmarks)** | Add bookmarks in either the bookmarks toolbar or menu.
  21 | **[`CaptivePortal`](#captiveportal)** | Enable or disable the detection of captive portals.
  22 | **[`Certificates`](#certificates)** |
  23 | **[`Certificates -> ImportEnterpriseRoots`](#certificates--importenterpriseroots)** | Trust certificates that have been added to the operating system certificate store by a user or administrator.
  24 | **[`Certificates -> Install`](#certificates--install)** | Install certificates into the Firefox certificate store.
  25 | **[`Cookies`](#cookies)** | Configure cookie preferences.
  26 | **[`DefaultDownloadDirectory`](#defaultdownloaddirectory)** | Set the default download directory.
  27 | **[`DisableAppUpdate`](#disableappupdate)** | Turn off application updates.
  28 | **[`DisableBuiltinPDFViewer`](#disablebuiltinpdfviewer)** | Disable the built in PDF viewer.
  29 | **[`DisabledCiphers`](#disabledciphers)** | Disable ciphers.
  30 | **[`DisableDefaultBrowserAgent`](#disabledefaultbrowseragent)** | Prevent the default browser agent from taking any actions (Windows only).
  31 | **[`DisableDeveloperTools`](#disabledevelopertools)** | Remove access to all developer tools.
  32 | **[`DisableFeedbackCommands`](#disablefeedbackcommands)** | Disable the menus for reporting sites.
  33 | **[`DisableFirefoxAccounts`](#disablefirefoxaccounts)** | Disable Firefox Accounts integration (Sync).
  34 | **[`DisableFirefoxScreenshots`](#disablefirefoxscreenshots)** | Remove access to Firefox Screenshots.
  35 | **[`DisableFirefoxStudies`](#disablefirefoxstudies)** | Disable Firefox studies (Shield).
  36 | **[`DisableForgetButton`](#disableforgetbutton)** | Disable the "Forget" button.
  37 | **[`DisableFormHistory`](#disableformhistory)** | Turn off saving information on web forms and the search bar.
  38 | **[`DisableMasterPasswordCreation`](#disablemasterpasswordcreation)** | Remove the master password functionality.
  39 | **[`DisablePasswordReveal`](#disablepasswordreveal)** | Do not allow passwords to be revealed in saved logins.
  40 | **[`DisablePocket`](#disablepocket)** | Remove Pocket in the Firefox UI.
  41 | **[`DisablePrivateBrowsing`](#disableprivatebrowsing)** | Remove access to private browsing.
  42 | **[`DisableProfileImport`](#disableprofileimport)** | Disables the "Import data from another browser" option in the bookmarks window.
  43 | **[`DisableProfileRefresh`](#disableprofilerefresh)** | Disable the Refresh Firefox button on about:support and support.mozilla.org
  44 | **[`DisableSafeMode`](#disablesafemode)** | Disable safe mode within the browser.
  45 | **[`DisableSecurityBypass`](#disablesecuritybypass)** | Prevent the user from bypassing security in certain cases.
  46 | **[`DisableSetDesktopBackground`](#disablesetdesktopbackground)** | Remove the "Set As Desktop Background..." menuitem when right clicking on an image.
  47 | **[`DisableSystemAddonUpdate`](#disablesystemaddonupdate)** | Prevent system add-ons from being installed or update.
  48 | **[`DisableTelemetry`](#disabletelemetry)** | DisableTelemetry
  49 | **[`DisplayBookmarksToolbar`](#displaybookmarkstoolbar)** | Set the initial state of the bookmarks toolbar.
  50 | **[`DisplayMenuBar`](#displaymenubar)** | Set the state of the menubar.
  51 | **[`DisplayMenuBar (Deprecated)`](#displaymenubar-deprecated)** | Set the initial state of the menubar.
  52 | **[`DNSOverHTTPS`](#dnsoverhttps)** | Configure DNS over HTTPS.
  53 | **[`DontCheckDefaultBrowser`](#dontcheckdefaultbrowser)** | Don't check if Firefox is the default browser at startup.
  54 | **[`DownloadDirectory`](#downloaddirectory)** | Set and lock the download directory.
  55 | **[`EnableTrackingProtection`](#enabletrackingprotection)** | Configure tracking protection.
  56 | **[`EncryptedMediaExtensions`](#encryptedmediaextensions)** | Enable or disable Encrypted Media Extensions and optionally lock it.
  57 | **[`EnterprisePoliciesEnabled`](#enterprisepoliciesenabled)** | Enable policy support on macOS.
  58 | **[`Extensions`](#extensions)** | Control the installation, uninstallation and locking of extensions.
  59 | **[`ExtensionSettings`](#extensionsettings)** | Manage all aspects of extensions.
  60 | **[`ExtensionUpdate`](#extensionupdate)** | Control extension updates.
  61 | **[`FirefoxHome`](#firefoxhome)** | Customize the Firefox Home page.
  62 | **[`FlashPlugin`](#flashplugin)** | Configure the default Flash plugin policy as well as origins for which Flash is allowed.
  63 | **[`Handlers`](#handlers)** | Configure default application handlers.
  64 | **[`HardwareAcceleration`](#hardwareacceleration)** | Control hardware acceleration.
  65 | **[`Homepage`](#homepage)** | Configure the default homepage and how Firefox starts.
  66 | **[`InstallAddonsPermission`](#installaddonspermission)** | Configure the default extension install policy as well as origins for extension installs are allowed.
  67 | **[`LegacyProfiles`](#legacyprofiles)** | Disable the feature enforcing a separate profile for each installation.
  68 | **[`LegacySameSiteCookieBehaviorEnabled`](#legacysamesitecookiebehaviorenabled)** | Enable default legacy SameSite cookie behavior setting.
  69 | **[`LegacySameSiteCookieBehaviorEnabledForDomainList`](#legacysamesitecookiebehaviorenabledfordomainlist)** | Revert to legacy SameSite behavior for cookies on specified sites.
  70 | **[`LocalFileLinks`](#localfilelinks)** | Enable linking to local files by origin.
  71 | **[`ManagedBookmarks`](#managedbookmarks)** | Configures a list of bookmarks managed by an administrator that cannot be changed by the user.
  72 | **[`ManualAppUpdateOnly`](#manualappupdateonly)** | Allow manual updates only and do not notify the user about updates..
  73 | **[`NetworkPrediction`](#networkprediction)** | Enable or disable network prediction (DNS prefetching).
  74 | **[`NewTabPage`](#newtabpage)** | Enable or disable the New Tab page.
  75 | **[`NoDefaultBookmarks`](#nodefaultbookmarks)** | Disable the creation of default bookmarks.
  76 | **[`OfferToSaveLogins`](#offertosavelogins)** | Control whether or not Firefox offers to save passwords.
  77 | **[`OfferToSaveLoginsDefault`](#offertosaveloginsdefault)** | Set the default value for whether or not Firefox offers to save passwords.
  78 | **[`OverrideFirstRunPage`](#overridefirstrunpage)** | Override the first run page.
  79 | **[`OverridePostUpdatePage`](#overridepostupdatepage)** | Override the upgrade page.
  80 | **[`PasswordManagerEnabled`](#passwordmanagerenabled)** | Remove (some) access to the password manager.
  81 | **[`PDFjs`](#pdfjs)** | Disable or configure PDF.js, the built-in PDF viewer.
  82 | **[`Permissions`](#permissions)** | Set permissions associated with camera, microphone, location, and notifications.
  83 | **[`PictureInPicture`](#pictureinpicture)** | Enable or disable Picture-in-Picture.
  84 | **[`PopupBlocking`](#popupblocking)** | Configure the default pop-up window policy as well as origins for which pop-up windows are allowed.
  85 | **[`Preferences`](#preferences)** | Set and lock preferences.
  86 | **[`Preferences (Deprecated)`](#preferences-deprecated)** | Set and lock some preferences.
  87 | **[`PrimaryPassword`](#primarypassword)** | Require or prevent using a primary (formerly master) password.
  88 | **[`PromptForDownloadLocation`](#promptfordownloadlocation)** | Ask where to save each file before downloading.
  89 | **[`Proxy`](#proxy)** | Configure proxy settings.
  90 | **[`RequestedLocales`](#requestedlocales)** | Set the the list of requested locales for the application in order of preference.
  91 | **[`SanitizeOnShutdown` (All)](#sanitizeonshutdown-all)** | Clear all data on shutdown.
  92 | **[`SanitizeOnShutdown` (Selective)](#sanitizeonshutdown-selective)** | Clear data on shutdown.
  93 | **[`SearchBar`](#searchbar)** | Set whether or not search bar is displayed.
  94 | **[`SearchEngines`](#searchengines-this-policy-is-only-available-on-the-esr)** |
  95 | **[`SearchEngines -> Add`](#searchengines--add)** | Add new search engines.
  96 | **[`SearchEngines -> Default`](#searchengines--default)** | Set the default search engine.
  97 | **[`SearchEngines -> PreventInstalls`](#searchengines--preventinstalls)** | Prevent installing search engines from webpages.
  98 | **[`SearchEngines -> Remove`](#searchengines--remove)** | Hide built-in search engines.
  99 | **[`SearchSuggestEnabled`](#searchsuggestenabled)** | Enable search suggestions.
 100 | **[`SecurityDevices`](#securitydevices)** | Install PKCS #11 modules.
 101 | **[`ShowHomeButton`](#showhomebutton)** | Show the home button on the toolbar.
 102 | **[`SSLVersionMax`](#sslversionmax)** | Set and lock the maximum version of TLS.
 103 | **[`SSLVersionMin`](#sslversionmin)** | Set and lock the minimum version of TLS.
 104 | **[`SupportMenu`](#supportmenu)** | Add a menuitem to the help menu for specifying support information.
 105 | **[`UserMessaging`](#usermessaging)** | Don't show certain messages to the user.
 106 | **[`WebsiteFilter`](#websitefilter)** | Block websites from being visited.
 107 | **[`WindowsSSO`](#windowssso)** | Allow Windows single sign-on for Microsoft, work, and school accounts.
 108
 109 ### 3rdparty
 110
 111 Allow WebExtensions to configure policy. For more information, see [Adding policy support to your extension](https://extensionworkshop.com/documentation/enterprise/adding-policy-support-to-your-extension/).
 112
 113 #### macOS
 114 ```
 115 <dict>
 116   <key>3rdparty</key>
 117   <dict>
 118     <key>Extensions</key>
 119     <dict>
 120       <key>uBlock0@raymondhill.net</key>
 121       <dict>
 122         <key>adminSettings</key>
 123         <dict>
 124           <key>selectedFilterLists</key>
 125           <array>
 126             <string>ublock-privacy</string>
 127             <string>ublock-badware</string>
 128             <string>ublock-filters</string>
 129             <string>user-filters</string>
 130           </array>
 131         </dict>
 132       </dict>
 133     </dict>
 134   </dict>
 135 </dict>
 136 ```
 137 #### policies.json
 138 ```
 139 {
 140   "policies": {
 141     "3rdparty": {
 142       "Extensions": {
 143         "uBlock0@raymondhill.net": {
 144           "adminSettings": {
 145             "selectedFilterLists": [
 146               "ublock-privacy",
 147               "ublock-badware",
 148               "ublock-filters",
 149               "user-filters"
 150             ]
 151           }
 152         }
 153       }
 154     }
 155   }
 156 }
 157 ```
 158
 159 ### AllowedDomainsForApps
 160
 161 Define domains allowed to access Google Workspace.
 162
 163 This policy is based on the [Chrome policy](https://chromeenterprise.google/policies/#AllowedDomainsForApps) of the same name.
 164
 165 If this policy is enabled, users can only access Google Workspace using accounts from the specified domains. If you want to allow Gmail, you can add ```consumer_accounts``` to the list.
 166
 167 **Compatibility:** Firefox 89, Firefox ESR 78.11\
 168 **CCK2 Equivalent:** N/A\
 169 **Preferences Affected:** N/A
 170
 171 #### Windows (GPO)
 172 ```
 173 Software\Policies\Mozilla\Firefox\AllowedDomainsForApps = "managedfirefox.com,example.com"
 174 ```
 175 #### Windows (Intune)
 176 OMA-URI:
 177 ```
 178 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AllowedDomainsForApps
 179 ```
 180 Value (string):
 181 ```
 182 <enabled/>
 183 <data id="AllowedDomainsForApps" value="managedfirefox.com,example.com"/>
 184 ```
 185 #### macOS
 186 ```
 187 <dict>
 188   <key>AllowedDomainsForApps</key>
 189   <string>managedfirefox.com,example.com</string>
 190 </dict>
 191 ```
 192 #### policies.json
 193 ```
 194 {
 195   "policies": {
 196     "AllowedDomainsForApps": "managedfirefox.com,example.com"
 197   }
 198 }
 199 ```
 200 ### AppAutoUpdate
 201
 202 Enable or disable **automatic** application update.
 203
 204 If set to true, application updates are installed without user approval within Firefox. The operating system might still require approval.
 205
 206 If set to false, application updates are downloaded but the user can choose when to install the update.
 207
 208 If you have disabled updates via `DisableAppUpdate`, this policy has no effect.
 209
 210 **Compatibility:** Firefox 75, Firefox ESR 68.7\
 211 **CCK2 Equivalent:** N/A\
 212 **Preferences Affected:** `app.update.auto`
 213
 214 #### Windows (GPO)
 215 ```
 216 Software\Policies\Mozilla\Firefox\AppAutoUpdate = 0x1 | 0x0
 217 ```
 218 #### Windows (Intune)
 219 OMA-URI:
 220 ```
 221 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AppAutoUpdate
 222 ```
 223 Value (string):
 224 ```
 225 <enabled/> or <disabled/>
 226 ```
 227 #### macOS
 228 ```
 229 <dict>
 230   <key>AppAutoUpdate</key>
 231   <true/> | <false/>
 232 </dict>
 233 ```
 234 #### policies.json
 235 ```
 236 {
 237   "policies": {
 238     "AppAutoUpdate": true | false
 239   }
 240 }
 241 ```
 242 ### AppUpdateURL
 243
 244 Change the URL for application update if you are providing Firefox updates from a custom update server.
 245
 246 **Compatibility:** Firefox 62, Firefox ESR 60.2\
 247 **CCK2 Equivalent:** N/A\
 248 **Preferences Affected:** `app.update.url`
 249
 250 #### Windows (GPO)
 251 ```
 252 Software\Policies\Mozilla\Firefox\AppUpdateURL = "https://yoursite.com"
 253 ```
 254 #### Windows (Intune)
 255 OMA-URI:
 256 ```
 257 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AppUpdateURL
 258 ```
 259 Value (string):
 260 ```
 261 <enabled/>
 262 <data id="AppUpdateURL" value="https://yoursite.com"/>
 263 ```
 264 #### macOS
 265 ```
 266 <dict>
 267   <key>AppUpdateURL</key>
 268   <string>https://yoursite.com</string>
 269 </dict>
 270 ```
 271 #### policies.json
 272 ```
 273 {
 274   "policies": {
 275     "AppUpdateURL": "https://yoursite.com"
 276   }
 277 }
 278 ```
 279 ### Authentication
 280
 281 Configure sites that support integrated authentication.
 282
 283 See [Integrated authentication](https://htmlpreview.github.io/?https://github.com/mdn/archived-content/blob/main/files/en-us/mozilla/integrated_authentication/raw.html) for more information.
 284
 285 `PrivateBrowsing` enables integrated authentication in private browsing.
 286
 287 **Compatibility:** Firefox 60, Firefox ESR 60 (AllowNonFQDN added in 62/60.2, AllowProxies added in 70/68.2, Locked added in 71/68.3, PrivateBrowsing added in 77/68.9)\
 288 **CCK2 Equivalent:** N/A\
 289 **Preferences Affected:** `network.negotiate-auth.trusted-uris`,`network.negotiate-auth.delegation-uris`,`network.automatic-ntlm-auth.trusted-uris`,`network.automatic-ntlm-auth.allow-non-fqdn`,`network.negotiate-auth.allow-non-fqdn`,`network.automatic-ntlm-auth.allow-proxies`,`network.negotiate-auth.allow-proxies`,`network.auth.private-browsing-sso`
 290
 291 #### Windows (GPO)
 292 ```
 293 Software\Policies\Mozilla\Firefox\Authentication\SPNEGO\1 = "mydomain.com"
 294 Software\Policies\Mozilla\Firefox\Authentication\SPNEGO\2 = "https://myotherdomain.com"
 295 Software\Policies\Mozilla\Firefox\Authentication\Delegated\1 = "mydomain.com"
 296 Software\Policies\Mozilla\Firefox\Authentication\Delegated\2 = "https://myotherdomain.com"
 297 Software\Policies\Mozilla\Firefox\Authentication\NTLM\1 = "mydomain.com"
 298 Software\Policies\Mozilla\Firefox\Authentication\NTLM\2 = "https://myotherdomain.com"
 299 Software\Policies\Mozilla\Firefox\Authentication\AllowNonFQDN\SPNEGO = 0x1 | 0x0
 300 Software\Policies\Mozilla\Firefox\Authentication\AllowNonFQDN\NTLM = 0x1 | 0x0
 301 Software\Policies\Mozilla\Firefox\Authentication\AllowProxies\SPNEGO = 0x1 | 0x0
 302 Software\Policies\Mozilla\Firefox\Authentication\AllowProxies\NTLM = 0x1 | 0x0
 303 Software\Policies\Mozilla\Firefox\Authentication\Locked = 0x1 | 0x0
 304 Software\Policies\Mozilla\Firefox\Authentication\PrivateBrowsing = 0x1 | 0x0
 305 ```
 306 #### Windows (Intune)
 307 OMA-URI:
 308 ```
 309 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_SPNEGO
 310 ```
 311 Value (string):
 312 ```
 313 <enabled/>
 314 <data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
 315 ```
 316 OMA-URI:
 317 ```
 318 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_Delegated
 319 ```
 320 Value (string):
 321 ```
 322 <enabled/>
 323 <data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
 324 ```
 325 OMA-URI:
 326 ```
 327 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_NTLM
 328 ```
 329 Value (string):
 330 ```
 331 <enabled/>
 332 <data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
 333 ```
 334 OMA-URI:
 335 ```
 336 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_AllowNonFQDN
 337 ```
 338 Value (string):
 339 ```
 340 <enabled/>
 341 <data id="Authentication_AllowNonFQDN_NTLM" value="true | false"/>
 342 <data id="Authentication_AllowNonFQDN_SPNEGO" value="true | false"/>
 343 ```
 344 OMA-URI:
 345 ```
 346 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_Locked
 347 ```
 348 Value (string):
 349 ```
 350 <enabled/> or <disabled/>
 351 ```
 352 OMA-URI:
 353 ```
 354 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_PrivateBrowsing
 355 ```
 356 Value (string):
 357 ```
 358 <enabled/> or <disabled/>
 359 ```
 360 #### macOS
 361 ```
 362 <dict>
 363   <key>Authentication</key>
 364   <dict>
 365     <key>SPNEGO</key>
 366     <array>
 367       <string>mydomain.com</string>
 368       <string>https://myotherdomain.com</string>
 369     </array>
 370     <key>Delegated</key>
 371     <array>
 372       <string>mydomain.com</string>
 373       <string>https://myotherdomain.com</string>
 374     </array>
 375     <key>NTLM</key>
 376     <array>
 377       <string>mydomain.com</string>
 378       <string>https://myotherdomain.com</string>
 379     </array>
 380     <key>AllowNonFQDN</key>
 381       <dict>
 382       <key>SPNEGO</key>
 383       <true/> | <false/>
 384       <key>NTLM</key>
 385       <true/> | <false/>
 386     </dict>
 387     <key>AllowProxies</key>
 388       <dict>
 389       <key>SPNEGO</key>
 390       <true/> | <false/>
 391       <key>NTLM</key>
 392       <true/> | <false/>
 393     </dict>
 394     <key>Locked</key>
 395     <true/> | <false/>
 396     <key>PrivateBrowsing</key>
 397     <true/> | <false/>
 398   </dict>
 399 </dict>
 400 ```
 401 #### policies.json
 402 ```
 403 {
 404   "policies": {
 405     "Authentication": {
 406       "SPNEGO": ["mydomain.com", "https://myotherdomain.com"],
 407       "Delegated": ["mydomain.com", "https://myotherdomain.com"],
 408       "NTLM": ["mydomain.com", "https://myotherdomain.com"],
 409       "AllowNonFQDN": {
 410         "SPNEGO": true | false,
 411         "NTLM": true | false
 412       },
 413       "AllowProxies": {
 414         "SPNEGO": true | false,
 415         "NTLM": true | false
 416       },
 417       "Locked": true | false,
 418       "PrivateBrowsing": true | false
 419     }
 420   }
 421 }
 422 ```
 423 ### AutoLaunchProtocolsFromOrigins
 424 Define a list of external protocols that can be used from listed origins without prompting the user. The origin is the scheme plus the hostname.
 425
 426 The syntax of this policy is exactly the same as the [Chrome AutoLaunchProtocolsFromOrigins policy](https://cloud.google.com/docs/chrome-enterprise/policies/?policy=AutoLaunchProtocolsFromOrigins) except that you can only use valid origins (not just hostnames). This also means that you cannot specify an asterisk for all origins.
 427
 428 The schema is:
 429 ```
 430 {
 431  "items": {
 432   "properties": {
 433    "allowed_origins": {
 434     "items": {
 435      "type": "string"
 436     },
 437     "type": "array"
 438    },
 439    "protocol": {
 440     "type": "string"
 441    }
 442   },
 443   "required": [
 444    "protocol",
 445    "allowed_origins"
 446   ],
 447   "type": "object"
 448  },
 449  "type": "array"
 450 }
 451 ```
 452 **Compatibility:** Firefox 90, Firefox ESR 78.12\
 453 **CCK2 Equivalent:** N/A\
 454 **Preferences Affected:** N/A
 455
 456 #### Windows (GPO)
 457 Software\Policies\Mozilla\Firefox\AutoLaunchProtocolsFromOrigins (REG_MULTI_SZ) =
 458 ```
 459 [
 460   {
 461     "protocol": "zoommtg",
 462     "allowed_origins": [
 463       "https://somesite.zoom.us"
 464     ]
 465   }
 466 ]
 467 ```
 468 #### Windows (Intune)
 469 OMA-URI:
 470 ```
 471 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AutoLaunchProtocolsFromOrigins
 472 ```
 473 Value (string):
 474 ```
 475 <enabled/>
 476 <data id="JSON" value='
 477 [
 478   {
 479     "protocol": "zoommtg",
 480     "allowed_origins": [
 481       "https://somesite.zoom.us"
 482     ]
 483   }
 484 ]'/>
 485 ```
 486 #### macOS
 487 ```
 488 <dict>
 489   <key>AutoLaunchProtocolsFromOrigins</key>
 490   <array>
 491     <dict>
 492       <key>protocol</key>
 493       <string>zoommtg</string>
 494       <key>allowed_origins</key>
 495       <array>
 496         <string>https://somesite.zoom.us</string>
 497       </array>
 498     </dict>
 499   </array>
 500 </dict>
 501 ```
 502 #### policies.json
 503 ```
 504 {
 505   "policies": {
 506     "AutoLaunchProtocolsFromOrigins": [{
 507       "protocol": "zoommtg",
 508       "allowed_origins": [
 509         "https://somesite.zoom.us"
 510       ]
 511     }]
 512   }
 513 }
 514 ```
 515 ### BackgroundAppUpdate
 516
 517 Enable or disable **automatic** application update **in the background**, when the application is not running.
 518
 519 If set to true, application updates may be installed (without user approval) in the background, even when the application is not running. The operating system might still require approval.
 520
 521 If set to false, the application will not try to install updates when the application is not running.
 522
 523 If you have disabled updates via `DisableAppUpdate` or disabled automatic updates via `AppAutoUpdate`, this policy has no effect.
 524
 525 **Compatibility:** Firefox 90 (Windows only)\
 526 **CCK2 Equivalent:** N/A\
 527 **Preferences Affected:** `app.update.background.enabled`
 528
 529 #### Windows (GPO)
 530 ```
 531 Software\Policies\Mozilla\Firefox\BackgroundAppUpdate = 0x1 | 0x0
 532 ```
 533 #### Windows (Intune)
 534 OMA-URI:
 535 ```
 536 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BackgroundAppUpdate
 537 ```
 538 Value (string):
 539 ```
 540 <enabled/> or <disabled/>
 541 ```
 542 #### macOS
 543 ```
 544 <dict>
 545   <key>BackgroundAppUpdate</key>
 546   <true/> | <false/>
 547 </dict>
 548 ```
 549 #### policies.json
 550 ```
 551 {
 552   "policies": {
 553     "BackgroundAppUpdate": true | false
 554   }
 555 }
 556 ```
 557 ### BlockAboutAddons
 558
 559 Block access to the Add-ons Manager (about:addons).
 560
 561 **Compatibility:** Firefox 60, Firefox ESR 60\
 562 **CCK2 Equivalent:** `disableAddonsManager`\
 563 **Preferences Affected:** N/A
 564
 565 #### Windows (GPO)
 566 ```
 567 Software\Policies\Mozilla\Firefox\BlockAboutAddons = 0x1 | 0x0
 568 ```
 569 #### Windows (Intune)
 570 OMA-URI:
 571 ```
 572 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutAddons
 573 ```
 574 Value (string):
 575 ```
 576 <enabled/> or <disabled/>
 577 ```
 578 #### macOS
 579 ```
 580 <dict>
 581   <key>BlockAboutAddons</key>
 582   <true/> | <false/>
 583 </dict>
 584 ```
 585 #### policies.json
 586 ```
 587 {
 588   "policies": {
 589     "BlockAboutAddons": true | false
 590   }
 591 }
 592 ```
 593 ### BlockAboutConfig
 594
 595 Block access to about:config.
 596
 597 **Compatibility:** Firefox 60, Firefox ESR 60\
 598 **CCK2 Equivalent:** `disableAboutConfig`\
 599 **Preferences Affected:** N/A
 600
 601 #### Windows (GPO)
 602 ```
 603 Software\Policies\Mozilla\Firefox\BlockAboutConfig = 0x1 | 0x0
 604 ```
 605 #### Windows (Intune)
 606 OMA-URI:
 607 ```
 608 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutConfig
 609 ```
 610 Value (string):
 611 ```
 612 <enabled/> or <disabled/>
 613 ```
 614 #### macOS
 615 ```
 616 <dict>
 617   <key>BlockAboutConfig</key>
 618   <true/> | <false/>
 619 </dict>
 620 ```
 621 #### policies.json
 622 ```
 623 {
 624   "policies": {
 625     "BlockAboutConfig": true | false
 626   }
 627 }
 628 ```
 629 ### BlockAboutProfiles
 630
 631 Block access to About Profiles (about:profiles).
 632
 633 **Compatibility:** Firefox 60, Firefox ESR 60\
 634 **CCK2 Equivalent:** `disableAboutProfiles`\
 635 **Preferences Affected:** N/A
 636
 637 #### Windows (GPO)
 638 ```
 639 Software\Policies\Mozilla\Firefox\BlockAboutProfiles = 0x1 | 0x0
 640 ```
 641 #### Windows (Intune)
 642 OMA-URI:
 643 ```
 644 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutProfiles
 645 ```
 646 Value (string):
 647 ```
 648 <enabled/> or <disabled/>
 649 ```
 650 #### macOS
 651 ```
 652 <dict>
 653   <key>BlockAboutProfiles</key>
 654   <true/> | <false/>
 655 </dict>
 656 ```
 657 #### policies.json
 658 ```
 659 {
 660   "policies": {
 661     "BlockAboutProfiles": true | false
 662   }
 663 }
 664 ```
 665 ### BlockAboutSupport
 666
 667 Block access to Troubleshooting Information (about:support).
 668
 669 **Compatibility:** Firefox 60, Firefox ESR 60\
 670 **CCK2 Equivalent:** `disableAboutSupport`\
 671 **Preferences Affected:** N/A
 672
 673 #### Windows (GPO)
 674 ```
 675 Software\Policies\Mozilla\Firefox\BlockAboutSupport = 0x1 | 0x0
 676 ```
 677 #### Windows (Intune)
 678 OMA-URI:
 679 ```
 680 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutSupport
 681 ```
 682 Value (string):
 683 ```
 684 <enabled/> or <disabled/>
 685 ```
 686 #### macOS
 687 ```
 688 <dict>
 689   <key>BlockAboutSupport</key>
 690   <true/> | <false/>
 691 </dict>
 692 ```
 693 #### policies.json
 694 ```
 695 {
 696   "policies": {
 697     "BlockAboutSupport": true | false
 698   }
 699 }
 700 ```
 701 ### Bookmarks
 702
 703 Note: [`ManagedBookmarks`](#managedbookmarks) is the new recommended way to add bookmarks. This policy will continue to be supported.
 704
 705 Add bookmarks in either the bookmarks toolbar or menu. Only `Title` and `URL` are required. If `Placement` is not specified, the bookmark will be placed on the toolbar. If `Folder` is specified, it is automatically created and bookmarks with the same folder name are grouped together.
 706
 707 If you want to clear all bookmarks set with this policy, you can set the value to an empty array (```[]```). This can be on Windows via the new Bookmarks (JSON) policy available with GPO and Intune.
 708
 709 **Compatibility:** Firefox 60, Firefox ESR 60\
 710 **CCK2 Equivalent:** `bookmarks.toolbar`,`bookmarks.menu`\
 711 **Preferences Affected:** N/A
 712
 713 #### Windows (GPO)
 714 ```
 715 Software\Policies\Mozilla\Firefox\Bookmarks\1\Title = "Example"
 716 Software\Policies\Mozilla\Firefox\Bookmarks\1\URL = "https://example.com"
 717 Software\Policies\Mozilla\Firefox\Bookmarks\1\Favicon = "https://example.com/favicon.ico"
 718 Software\Policies\Mozilla\Firefox\Bookmarks\1\Placement = "toolbar" | "menu"
 719 Software\Policies\Mozilla\Firefox\Bookmarks\1\Folder = "FolderName"
 720
 721 Software\Policies\Mozilla\Firefox\Bookmarks (REG_MULTI_SZ) =
 722 ```
 723 []
 724 ```
 725
 726 ```
 727 #### Windows (Intune)
 728 OMA-URI:
 729 ```
 730 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Bookmarks/Bookmark01
 731 ```
 732 Value (string):
 733 ```
 734 <enabled/>
 735 <data id="BookmarkTitle" value="Example"/>
 736 <data id="BookmarkURL" value="https://example.com"/>
 737 <data id="BookmarkFavicon" value="https://example.com/favicon.ico"/>
 738 <data id="BookmarkPlacement" value="toolbar | menu"/>
 739 <data id="BookmarkFolder" value="FolderName"/>
 740 ```
 741 OMA-URI:
 742 ```
 743 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Bookmarks
 744 ```
 745 Value (string):
 746 ```
 747 <enabled/>
 748 <data id="JSON" value='[]'/>
 749 ```
 750 #### macOS
 751 ```
 752 <dict>
 753   <key>Bookmarks</key>
 754   <array>
 755     <dict>
 756       <key>Title</key>
 757       <string>Example</string>
 758       <key>URL</key>
 759       <string>https://example.com</string>
 760       <key>Favicon</key>
 761       <string>https://example.com/favicon.ico</string>
 762       <key>Placement</key>
 763       <string>toolbar | menu</string>
 764       <key>Folder</key>
 765       <string>FolderName</string>
 766     </dict>
 767   </array>
 768 </dict>
 769 ```
 770 #### policies.json
 771 ```
 772 {
 773   "policies": {
 774     "Bookmarks": [
 775       {
 776         "Title": "Example",
 777         "URL": "https://example.com",
 778         "Favicon": "https://example.com/favicon.ico",
 779         "Placement": "toolbar" | "menu",
 780         "Folder": "FolderName"
 781       }
 782     ]
 783   }
 784 }
 785 ```
 786 ### CaptivePortal
 787 Enable or disable the detection of captive portals.
 788
 789 **Compatibility:** Firefox 67, Firefox ESR 60.7\
 790 **CCK2 Equivalent:** N/A\
 791 **Preferences Affected:** `network.captive-portal-service.enabled`
 792
 793 #### Windows (GPO)
 794 ```
 795 Software\Policies\Mozilla\Firefox\CaptivePortal = 0x1 | 0x0
 796 ```
 797 #### Windows (Intune)
 798 OMA-URI:
 799 ```
 800 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/CaptivePortal
 801 ```
 802 Value (string):
 803 ```
 804 <enabled/> or <disabled/>
 805 ```
 806 #### macOS
 807 ```
 808 <dict>
 809   <key>CaptivePortal</key>
 810   <true/> | <false/>
 811 </dict>
 812 ```
 813 #### policies.json
 814 ```
 815 {
 816   "policies": {
 817     "CaptivePortal": true | false
 818   }
 819 }
 820 ```
 821 ### Certificates
 822
 823 ### Certificates | ImportEnterpriseRoots
 824
 825 Trust certificates that have been added to the operating system certificate store by a user or administrator.
 826
 827 Note: This policy only works on Windows and macOS. For Linux discussion, see [bug 1600509](https://bugzilla.mozilla.org/show_bug.cgi?id=1600509).
 828
 829 See https://support.mozilla.org/kb/setting-certificate-authorities-firefox for more detail.
 830
 831 **Compatibility:** Firefox 60, Firefox ESR 60 (macOS support in Firefox 63, Firefox ESR 68)\
 832 **CCK2 Equivalent:** N/A\
 833 **Preferences Affected:** `security.enterprise_roots.enabled`
 834
 835 #### Windows (GPO)
 836 ```
 837 Software\Policies\Mozilla\Firefox\Certificates\ImportEnterpriseRoots = 0x1 | 0x0
 838 ```
 839 #### Windows (Intune)
 840 OMA-URI:
 841 ```
 842 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Certificates/Certificates_ImportEnterpriseRoots
 843 ```
 844 Value (string):
 845 ```
 846 <enabled/> or <disabled/>
 847 ```
 848 #### macOS
 849 ```
 850 <dict>
 851   <key>Certificates</key>
 852   <dict>
 853     <key>ImportEnterpriseRoots</key>
 854     <true/> | <false/>
 855   </dict>
 856 </dict>
 857 ```
 858 #### policies.json
 859 ```
 860 {
 861   "policies": {
 862     "Certificates": {
 863       "ImportEnterpriseRoots": true | false
 864     }
 865   }
 866 }
 867 ```
 868 ### Certificates | Install
 869
 870 Install certificates into the Firefox certificate store. If only a filename is specified, Firefox searches for the file in the following locations:
 871
 872 - Windows
 873   - %USERPROFILE%\AppData\Local\Mozilla\Certificates
 874   - %USERPROFILE%\AppData\Roaming\Mozilla\Certificates
 875 - macOS
 876   - /Library/Application Support/Mozilla/Certificates
 877   - ~/Library/Application Support/Mozilla/Certificates
 878 - Linux
 879   - /usr/lib/mozilla/certificates
 880   - /usr/lib64/mozilla/certificates
 881   - ~/.mozilla/certificates
 882
 883 Starting with Firefox 65, Firefox 60.5 ESR, a fully qualified path can be used, including UNC paths. You should use the native path style for your operating system. We do not support using %USERPROFILE% or other environment variables on Windows.
 884
 885 If you are specifying the path in the policies.json file on Windows, you need to escape your backslashes (`\\`) which means that for UNC paths, you need to escape both (`\\\\`). If you use group policy, you only need one backslash.
 886
 887 Certificates are installed using the trust string `CT,CT,`.
 888
 889 Binary (DER) and ASCII (PEM) certificates are both supported.
 890
 891 **Compatibility:** Firefox 64, Firefox ESR 64\
 892 **CCK2 Equivalent:** `certs.ca`\
 893 **Preferences Affected:** N/A
 894
 895 #### Windows (GPO)
 896 ```
 897 Software\Policies\Mozilla\Firefox\Certificates\Install\1 = "cert1.der"
 898 Software\Policies\Mozilla\Firefox\Certificates\Install\2 = "C:\Users\username\cert2.pem"
 899 ```
 900 #### Windows (Intune)
 901 OMA-URI:
 902 ```
 903 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Certificates/Certificates_Install
 904 ```
 905 Value (string):
 906 ```
 907 <enabled/>
 908 <data id="Certificates_Install" value="1&#xF000;cert1.der&#xF000;2&#xF000;C:\Users\username\cert2.pem"/>
 909 ```
 910 #### macOS
 911 ```
 912 <dict>
 913   <key>Certificates</key>
 914   <dict>
 915     <key>Install</key>
 916     <array>
 917       <string>cert1.der</string>
 918       <string>/Users/username/cert2.pem</string>
 919     </array>
 920   </dict>
 921 </dict>
 922 ```
 923 #### policies.json
 924 ```
 925 {
 926   "policies": {
 927     "Certificates": {
 928       "Install": ["cert1.der", "/home/username/cert2.pem"]
 929     }
 930   }
 931 }
 932 ```
 933 ### Cookies
 934 Configure cookie preferences.
 935
 936 `Allow` is a list of origins (not domains) where cookies are always allowed. You must include http or https.
 937
 938 `AllowSession` is a list of origins (not domains) where cookies are only allowed for the current session. You must include http or https.
 939
 940 `Block` is a list of origins (not domains) where cookies are always blocked. You must include http or https.
 941
 942 `Behavior` sets the default behavior for cookies based on the values below.
 943
 944 `BehaviorPrivateBrowsing` sets the default behavior for cookies in private browsing based on the values below.
 945
 946 | Value | Description
 947 | --- | ---
 948 | accept | Accept all cookies
 949 | reject-foreign | Reject third party cookies
 950 | reject | Reject all cookies
 951 | limit-foreign | Reject third party cookies for sites you haven't visited
 952 | reject-tracker | Reject cookies for known trackers (default)
 953 | reject-tracker-and-partition-foreign | Reject cookies for known trackers and partition third-party cookies (Total Cookie Protection) (default for private browsing)
 954
 955 `Default` (Deprecated) determines whether cookies are accepted at all.
 956
 957 `AcceptThirdParty` (Deprecated) determines how third-party cookies are handled.
 958
 959 `ExpireAtSessionEnd` determines when cookies expire.
 960
 961 `RejectTracker` (Deprecated) only rejects cookies for trackers.
 962
 963 `Locked` prevents the user from changing cookie preferences.
 964
 965 **Compatibility:** Firefox 60, Firefox ESR 60 (RejectTracker added in Firefox 63, AllowSession added in Firefox 79/78.1, Behavior added in Firefox 95/91.4)\
 966 **CCK2 Equivalent:** N/A\
 967 **Preferences Affected:** `network.cookie.cookieBehavior`, `network.cookie.cookieBehavior.pbmode`, `network.cookie.lifetimePolicy`
 968
 969 #### Windows (GPO)
 970 ```
 971 Software\Policies\Mozilla\Firefox\Cookies\Allow\1 = "https://example.com"
 972 Software\Policies\Mozilla\Firefox\Cookies\AllowSession\1 = "https://example.edu"
 973 Software\Policies\Mozilla\Firefox\Cookies\Block\1 = "https://example.org"
 974 Software\Policies\Mozilla\Firefox\Cookies\Default = 0x1 | 0x0
 975 Software\Policies\Mozilla\Firefox\Cookies\AcceptThirdParty = "always" | "never" | "from-visited"
 976 Software\Policies\Mozilla\Firefox\Cookies\ExpireAtSessionEnd = 0x1 | 0x0
 977 Software\Policies\Mozilla\Firefox\Cookies\RejectTracker = 0x1 | 0x0
 978 Software\Policies\Mozilla\Firefox\Cookies\Behavior = "accept" | "reject-foreign" | "reject" | "limit-foreign" | "reject-tracker" | "reject-tracker-and-partition-foreign"
 979 Software\Policies\Mozilla\Firefox\Cookies\BehaviorPrivateBrowsing = "accept" | "reject-foreign" | "reject" | "limit-foreign" | "reject-tracker" | "reject-tracker-and-partition-foreign"
 980 Software\Policies\Mozilla\Firefox\Cookies\Locked = 0x1 | 0x0
 981 ```
 982 #### Windows (Intune)
 983 OMA-URI:
 984 ```
 985 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Allow
 986 ```
 987 Value (string):
 988 ```
 989 <enabled/>
 990 <data id="Cookies_Allow" value="1&#xF000;https://example.com"/>
 991 ```
 992 OMA-URI:
 993 ```
 994 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_AllowSession
 995 ```
 996 Value (string):
 997 ```
 998 <enabled/>
 999 <data id="Cookies_Allow" value="1&#xF000;https://example.edu"/>
1000 ```
1001 OMA-URI:
1002 ```
1003 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Block
1004 ```
1005 Value (string):
1006 ```
1007 <enabled/>
1008 <data id="Cookies_Block" value="1&#xF000;https://example.org"/>
1009 ```
1010 OMA-URI:
1011 ```
1012 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Default
1013 ```
1014 Value (string):
1015 ```
1016 <enabled/> or <disabled/>
1017 ```
1018 OMA-URI:
1019 ```
1020 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_AcceptThirdParty
1021 ```
1022 Value (string):
1023 ```
1024 <enabled/>
1025 <data id="Cookies_AcceptThirdParty" value="always | never | from-visited"/>
1026 ```
1027 OMA-URI:
1028 ```
1029 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_ExpireAtSessionEnd
1030 ```
1031 Value (string):
1032 ```
1033 <enabled/> or <disabled/>
1034 ```
1035 OMA-URI:
1036 ```
1037 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_RejectTracker
1038 ```
1039 Value (string):
1040 ```
1041 <enabled/> or <disabled/>
1042 ```
1043 OMA-URI:
1044 ```
1045 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Locked
1046 ```
1047 Value (string):
1048 ```
1049 <enabled/> or <disabled/>
1050 ```
1051 OMA-URI:
1052 ```
1053 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Behavior
1054 ```
1055 Value (string):
1056 ```
1057 <enabled/>
1058 <data id="Cookies_Behavior" value="accept | reject-foreign | reject | limit-foreign | reject-tracker | reject-tracker-and-partition-foreign"/>
1059 ```
1060 OMA-URI:
1061 ```
1062 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_BehaviorPrivateBrowsing
1063 ```
1064 Value (string):
1065 ```
1066 <enabled/>
1067 <data id="Cookies_BehaviorPrivateBrowsing" value="accept | reject-foreign | reject | limit-foreign | reject-tracker | reject-tracker-and-partition-foreign"/>
1068 ```
1069 #### macOS
1070 ```
1071 <dict>
1072   <key>Cookies</key>
1073   <dict>
1074     <key>Allow</key>
1075     <array>
1076       <string>http://example.com</string>
1077     </array>
1078     <key>AllowSession</key>
1079     <array>
1080       <string>http://example.edu</string>
1081     </array>
1082     <key>Block</key>
1083     <array>
1084       <string>http://example.org</string>
1085     </array>
1086     <key>Default</key>
1087     <true/> | <false/>
1088     <key>AcceptThirdParty</key>
1089     <string>always | never | from-visited</string>
1090     <key>ExpireAtSessionEnd</key>
1091     <true/> | <false/>
1092     <key>RejectTracker</key>
1093     <true/> | <false/>
1094     <key>Locked</key>
1095     <true/> | <false/>
1096     <key>Behavior</key>
1097     <string>accept | reject-foreign | reject | limit-foreign | reject-tracker | reject-tracker-and-partition-foreign</string>
1098     <key>BehaviorPrivateBrowsing</key>
1099     <string>accept | reject-foreign | reject | limit-foreign | reject-tracker | reject-tracker-and-partition-foreign</string>
1100   </dict>
1101 </dict>
1102 ```
1103 #### policies.json
1104 ```
1105 {
1106   "policies": {
1107     "Cookies": {
1108       "Allow": ["http://example.org/"],
1109       "AllowSession": ["http://example.edu/"],
1110       "Block": ["http://example.edu/"],
1111       "Default": true | false,
1112       "AcceptThirdParty": "always" | "never" | "from-visited",
1113       "ExpireAtSessionEnd": true | false,
1114       "RejectTracker": true | false,
1115       "Locked": true | false,
1116       "Behavior": "accept" | "reject-foreign" | "reject" | "limit-foreign" | "reject-tracker" | "reject-tracker-and-partition-foreign",
1117       "BehaviorPrivateBrowsing": "accept" | "reject-foreign" | "reject" | "limit-foreign" | "reject-tracker" | "reject-tracker-and-partition-foreign",
1118     }
1119   }
1120 }
1121 ```
1122 ### DefaultDownloadDirectory
1123 Set the default download directory.
1124
1125 You can use ${home} for the native home directory.
1126
1127 **Compatibility:** Firefox 68, Firefox ESR 68\
1128 **CCK2 Equivalent:** N/A\
1129 **Preferences Affected:** `browser.download.dir`, `browser.download.folderList`
1130
1131 #### Windows (GPO)
1132 ```
1133 Software\Policies\Mozilla\Firefox\DefaultDownloadDirectory = "${home}\Downloads"
1134 ```
1135 #### Windows (Intune)
1136 OMA-URI:
1137 ```
1138 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DefaultDownloadDirectory
1139 ```
1140 Value (string):
1141 ```
1142 <enabled/>
1143 <data id="Preferences_String" value="${home}\Downloads"/>
1144 ```
1145 #### macOS
1146 ```
1147 <dict>
1148   <key>DefaultDownloadDirectory</key>
1149   <string>${home}/Downloads</string>
1150 </dict>
1151 ```
1152 #### policies.json (macOS and Linux)
1153 ```
1154 {
1155   "policies": {
1156     "DefaultDownloadDirectory": "${home}/Downloads"
1157 }
1158 ```
1159 #### policies.json (Windows)
1160 ```
1161 {
1162   "policies": {
1163     "DefaultDownloadDirectory": "${home}\\Downloads"
1164 }
1165 ```
1166 ### DisableAppUpdate
1167 Turn off application updates within Firefox.
1168
1169 **Compatibility:** Firefox 60, Firefox ESR 60\
1170 **CCK2 Equivalent:** `disableFirefoxUpdates`\
1171 **Preferences Affected:** N/A
1172
1173 #### Windows (GPO)
1174 ```
1175 Software\Policies\Mozilla\Firefox\DisableAppUpdate = 0x1 | 0x0
1176 ```
1177 #### Windows (Intune)
1178 OMA-URI:
1179 ```
1180 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableAppUpdate
1181 ```
1182 Value (string):
1183 ```
1184 <enabled/> or <disabled/>
1185 ```
1186 #### macOS
1187 ```
1188 <dict>
1189   <key>DisableAppUpdate</key>
1190   <true/> | <false/>
1191 </dict>
1192 ```
1193 #### policies.json
1194 ```
1195 {
1196   "policies": {
1197     "DisableAppUpdate": true | false
1198   }
1199 }
1200 ```
1201 ### DisableBuiltinPDFViewer
1202 Disable the built in PDF viewer. PDF files are downloaded and sent externally.
1203
1204 **Compatibility:** Firefox 60, Firefox ESR 60\
1205 **CCK2 Equivalent:** `disablePDFjs`\
1206 **Preferences Affected:** `pdfjs.disabled`
1207
1208 #### Windows (GPO)
1209 ```
1210 Software\Policies\Mozilla\Firefox\DisableBuiltinPDFViewer = 0x1 | 0x0
1211 ```
1212 #### Windows (Intune)
1213 OMA-URI:
1214 ```
1215 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableBuiltinPDFViewer
1216 ```
1217 Value (string):
1218 ```
1219 <enabled/> or <disabled/>
1220 ```
1221 #### macOS
1222 ```
1223 <dict>
1224   <key>DisableBuiltinPDFViewer</key>
1225   <true/> | <false/>
1226 </dict>
1227 ```
1228 #### policies.json
1229 ```
1230 {
1231   "policies": {
1232     "DisableBuiltinPDFViewer": true | false
1233   }
1234 }
1235 ```
1236 ### DisabledCiphers
1237 Disable specific cryptographic ciphers, listed below.
1238
1239 ```
1240 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
1241 TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
1242 TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256
1243 TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
1244 TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
1245 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
1246 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
1247 TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA
1248 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
1249 TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA
1250 TLS_DHE_RSA_WITH_AES_128_CBC_SHA
1251 TLS_DHE_RSA_WITH_AES_256_CBC_SHA
1252 TLS_RSA_WITH_AES_128_GCM_SHA256
1253 TLS_RSA_WITH_AES_256_GCM_SHA384
1254 TLS_RSA_WITH_AES_128_CBC_SHA
1255 TLS_RSA_WITH_AES_256_CBC_SHA
1256 TLS_RSA_WITH_3DES_EDE_CBC_SHA
1257 ```
1258
1259 **Preferences Affected:** `security.ssl3.ecdhe_rsa_aes_128_gcm_sha256`, `security.ssl3.ecdhe_ecdsa_aes_128_gcm_sha256`, `security.ssl3.ecdhe_ecdsa_chacha20_poly1305_sha256`, `security.ssl3.ecdhe_rsa_chacha20_poly1305_sha256`, `security.ssl3.ecdhe_ecdsa_aes_256_gcm_sha384`, `security.ssl3.ecdhe_rsa_aes_256_gcm_sha384`, `security.ssl3.ecdhe_rsa_aes_128_sha`, `security.ssl3.ecdhe_ecdsa_aes_128_sha`, `security.ssl3.ecdhe_rsa_aes_256_sha`, `security.ssl3.ecdhe_ecdsa_aes_256_sha`, `security.ssl3.dhe_rsa_aes_128_sha`, `security.ssl3.dhe_rsa_aes_256_sha`, `security.ssl3.rsa_aes_128_gcm_sha256`, `security.ssl3.rsa_aes_256_gcm_sha384`, `security.ssl3.rsa_aes_128_sha`, `security.ssl3.rsa_aes_256_sha`, `security.ssl3.deprecated.rsa_des_ede3_sha`
1260
1261 ---
1262 **Note:**
1263
1264 This policy was updated in Firefox 78 to allow enabling ciphers as well. Setting the value to true disables the cipher, setting the value to false enables the cipher. Previously setting the value to true or false disabled the cipher.
1265
1266 ---
1267 **Compatibility:** Firefox 76, Firefox ESR 68.8 (TLS_RSA_WITH_AES_128_GCM_SHA256 and TLS_RSA_WITH_AES_256_GCM_SHA384 were added in Firefox 78, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA38, TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, and TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 were added in Firefox 97 and Firefox 91.6)\
1268 **CCK2 Equivalent:** N/A\
1269 **Preferences Affected:** N/A
1270
1271 #### Windows (GPO)
1272 ```
1273 Software\Policies\Mozilla\Firefox\DisabledCiphers\CIPHER_NAME = 0x1 | 0x0
1274 ```
1275 #### Windows (Intune)
1276 OMA-URI:
1277 ```
1278 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_CIPHER_NAME
1279
1280 ```
1281 Value (string):
1282 ```
1283 <enabled/> or <disabled/>
1284 ```
1285 #### macOS
1286 ```
1287 <dict>
1288   <key>DisabledCiphers</key>
1289     <dict>
1290       <key>CIPHER_NAME</key>
1291       <true/> | <false/>
1292     </dict>
1293 </dict>
1294 ```
1295 #### policies.json
1296 ```
1297 {
1298   "policies": {
1299     "DisabledCiphers": {
1300       "CIPHER_NAME": true | false,
1301     }
1302   }
1303 }
1304 ```
1305 ### DisableDefaultBrowserAgent
1306 Prevent the default browser agent from taking any actions. Only applicable to Windows; other platforms don’t have the agent.
1307
1308 The browser agent is a Windows-only scheduled task which runs in the background to collect and submit data about the browser that the user has set as their OS default. More information is available [here](https://firefox-source-docs.mozilla.org/toolkit/mozapps/defaultagent/default-browser-agent/index.html).
1309
1310 **Compatibility:** Firefox 75, Firefox ESR 68.7 (Windows only)\
1311 **CCK2 Equivalent:** N/A\
1312 **Preferences Affected:** N/A
1313
1314 #### Windows (GPO)
1315 ```
1316 Software\Policies\Mozilla\Firefox\DisableDefaultBrowserAgent = 0x1 | 0x0
1317 ```
1318 #### Windows (Intune)
1319 OMA-URI:
1320 ```
1321 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableDefaultBrowserAgent
1322 ```
1323 Value (string):
1324 ```
1325 <enabled/> or <disabled/>
1326 ```
1327 #### policies.json
1328 ```
1329 {
1330   "policies": {
1331     "DisableDefaultBrowserAgent": true | false
1332   }
1333 }
1334 ```
1335 ### DisableDeveloperTools
1336 Remove access to all developer tools.
1337
1338 **Compatibility:** Firefox 60, Firefox ESR 60\
1339 **CCK2 Equivalent:** `removeDeveloperTools`\
1340 **Preferences Affected:** `devtools.policy.disabled`
1341
1342 #### Windows (GPO)
1343 ```
1344 Software\Policies\Mozilla\Firefox\DisableDeveloperTools = 0x1 | 0x0`
1345 ```
1346 #### Windows (Intune)
1347 OMA-URI:
1348 ```
1349 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableDeveloperTools
1350 ```
1351 Value (string):
1352 ```
1353 <enabled/> or <disabled/>
1354 ```
1355 #### macOS
1356 ```
1357 <dict>
1358   <key>DisableDeveloperTools</key>
1359   <true/> | <false/>
1360 </dict>
1361 ```
1362 #### policies.json
1363 ```
1364 {
1365   "policies": {
1366     "DisableDeveloperTools": true | false
1367   }
1368 }
1369 ```
1370 ### DisableFeedbackCommands
1371 Disable the menus for reporting sites (Submit Feedback, Report Deceptive Site).
1372
1373 **Compatibility:** Firefox 60, Firefox ESR 60\
1374 **CCK2 Equivalent:** N/A\
1375 **Preferences Affected:** N/A
1376
1377 #### Windows (GPO)
1378 ```
1379 Software\Policies\Mozilla\Firefox\DisableFeedbackCommands = 0x1 | 0x0
1380 ```
1381 #### Windows (Intune)
1382 OMA-URI:
1383 ```
1384 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFeedbackCommands
1385 ```
1386 Value (string):
1387 ```
1388 <enabled/> or <disabled/>
1389 ```
1390 #### macOS
1391 ```
1392 <dict>
1393   <key>DisableFeedbackCommands</key>
1394   <true/> | <false/>
1395 </dict>
1396 ```
1397 #### policies.json
1398 ```
1399 {
1400   "policies": {
1401     "DisableFeedbackCommands": true | false
1402   }
1403 }
1404 ```
1405 ### DisableFirefoxAccounts
1406 Disable Firefox Accounts integration (Sync).
1407
1408 **Compatibility:** Firefox 60, Firefox ESR 60\
1409 **CCK2 Equivalent:** `disableSync`\
1410 **Preferences Affected:** `identity.fxaccounts.enabled`
1411
1412 #### Windows (GPO)
1413 ```
1414 Software\Policies\Mozilla\Firefox\DisableFirefoxAccounts = 0x1 | 0x0
1415 ```
1416 #### Windows (Intune)
1417 OMA-URI:
1418 ```
1419 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxAccounts
1420 ```
1421 Value (string):
1422 ```
1423 <enabled/> or <disabled/>
1424 ```
1425 #### macOS
1426 ```
1427 <dict>
1428   <key>DisableFirefoxAccounts</key>
1429   <true/> | <false/>
1430 </dict>
1431 ```
1432 #### policies.json
1433 ```
1434 {
1435   "policies": {
1436     "DisableFirefoxAccounts": true | false
1437   }
1438 }
1439 ```
1440 ### DisableFirefoxScreenshots
1441 Remove access to Firefox Screenshots.
1442
1443 **Compatibility:** Firefox 60, Firefox ESR 60\
1444 **CCK2 Equivalent:** N/A\
1445 **Preferences Affected:** `extensions.screenshots.disabled`
1446
1447 #### Windows (GPO)
1448 ```
1449 Software\Policies\Mozilla\Firefox\DisableFirefoxScreenshots = 0x1 | 0x0
1450 ```
1451 #### Windows (Intune)
1452 OMA-URI:
1453 ```
1454 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxScreenshots
1455 ```
1456 Value (string):
1457 ```
1458 <enabled/> or <disabled/>
1459 ```
1460 #### macOS
1461 ```
1462 <dict>
1463   <key>DisableFirefoxScreenshots</key>
1464   <true/> | <false/>
1465 </dict>
1466 ```
1467 #### policies.json
1468 ```
1469 {
1470   "policies": {
1471     "DisableFirefoxScreenshots": true | false
1472   }
1473 }
1474 ```
1475 ### DisableFirefoxStudies
1476 Disable Firefox studies (Shield).
1477
1478 **Compatibility:** Firefox 60, Firefox ESR 60\
1479 **CCK2 Equivalent:** N/A\
1480 **Preferences Affected:** N/A
1481
1482 #### Windows (GPO)
1483 ```
1484 Software\Policies\Mozilla\Firefox\DisableFirefoxStudies = 0x1 | 0x0
1485 ```
1486 #### Windows (Intune)
1487 OMA-URI:
1488 ```
1489 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxStudies
1490 ```
1491 Value (string):
1492 ```
1493 <enabled/> or <disabled/>
1494 ```
1495 #### macOS
1496 ```
1497 <dict>
1498   <key>DisableFirefoxStudies</key>
1499   <true/> | <false/>
1500 </dict>
1501 ```
1502 #### policies.json
1503 ```
1504 {
1505   "policies": {
1506     "DisableFirefoxStudies": true | false
1507   }
1508 }
1509 ```
1510 ### DisableForgetButton
1511 Disable the "Forget" button.
1512
1513 **Compatibility:** Firefox 60, Firefox ESR 60\
1514 **CCK2 Equivalent:** `disableForget`\
1515 **Preferences Affected:** N/A
1516
1517 #### Windows (GPO)
1518 ```
1519 Software\Policies\Mozilla\Firefox\DisableForgetButton = 0x1 | 0x0
1520 ```
1521 #### Windows (Intune)
1522 OMA-URI:
1523 ```
1524 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableForgetButton
1525 ```
1526 Value (string):
1527 ```
1528 <enabled/> or <disabled/>
1529 ```
1530 #### macOS
1531 ```
1532 <dict>
1533   <key>DisableForgetButton</key>
1534   <true/> | <false/>
1535 </dict>
1536 ```
1537 #### policies.json
1538 ```
1539 {
1540   "policies": {
1541     "DisableForgetButton": true | false
1542   }
1543 }
1544 ```
1545 ### DisableFormHistory
1546 Turn off saving information on web forms and the search bar.
1547
1548 **Compatibility:** Firefox 60, Firefox ESR 60\
1549 **CCK2 Equivalent:** `disableFormFill`\
1550 **Preferences Affected:** `browser.formfill.enable`
1551
1552 #### Windows (GPO)
1553 ```
1554 Software\Policies\Mozilla\Firefox\DisableFormHistory = 0x1 | 0x0
1555 ```
1556 #### Windows (Intune)
1557 OMA-URI:
1558 ```
1559 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFormHistory
1560 ```
1561 Value (string):
1562 ```
1563 <enabled/> or <disabled/>
1564 ```
1565 #### macOS
1566 ```
1567 <dict>
1568   <key>DisableFormHistory</key>
1569   <true/> | <false/>
1570 </dict>
1571 ```
1572 #### policies.json
1573 ```
1574 {
1575   "policies": {
1576     "DisableFormHistory": true | false
1577   }
1578 }
1579 ```
1580 ### DisableMasterPasswordCreation
1581 Remove the master password functionality.
1582
1583 If this value is true, it works the same as setting [`PrimaryPassword`](#primarypassword) to false and removes the primary password functionality.
1584
1585 If both `DisableMasterPasswordCreation` and `PrimaryPassword` are used, `DisableMasterPasswordCreation` takes precedent.
1586
1587 **Compatibility:** Firefox 60, Firefox ESR 60\
1588 **CCK2 Equivalent:** `noMasterPassword`\
1589 **Preferences Affected:** N/A
1590
1591 #### Windows (GPO)
1592 ```
1593 Software\Policies\Mozilla\Firefox\DisableMasterPasswordCreation = 0x1 | 0x0
1594 ```
1595 #### Windows (Intune)
1596 OMA-URI:
1597 ```
1598 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableMasterPasswordCreation
1599 ```
1600 Value (string):
1601 ```
1602 <enabled/> or <disabled/>
1603 ```
1604 #### macOS
1605 ```
1606 <dict>
1607   <key>DisableMasterPasswordCreation</key>
1608   <true/> | <false/>
1609 </dict>
1610 ```
1611 #### policies.json
1612 ```
1613 {
1614   "policies": {
1615     "DisableMasterPasswordCreation": true | false
1616   }
1617 }
1618 ```
1619 ### DisablePasswordReveal
1620 Do not allow passwords to be shown in saved logins
1621
1622 **Compatibility:** Firefox 71, Firefox ESR 68.3\
1623 **CCK2 Equivalent:** N/A
1624 **Preferences Affected:** N/A
1625
1626 #### Windows (GPO)
1627 ```
1628 Software\Policies\Mozilla\Firefox\DisablePasswordReveal = 0x1 | 0x0
1629 ```
1630 #### Windows (Intune)
1631 OMA-URI:
1632 ```
1633 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePasswordReveal
1634 ```
1635 Value (string):
1636 ```
1637 <enabled/> or <disabled/>
1638 ```
1639 #### macOS
1640 ```
1641 <dict>
1642   <key>DisablePasswordReveal</key>
1643   <true/> | <false/>
1644 </dict>
1645 ```
1646 #### policies.json
1647 ```
1648 {
1649   "policies": {
1650     "DisablePasswordReveal": true | false
1651   }
1652 }
1653 ```
1654 ### DisablePocket
1655 Remove Pocket in the Firefox UI. It does not remove it from the new tab page.
1656
1657 **Compatibility:** Firefox 60, Firefox ESR 60\
1658 **CCK2 Equivalent:** `disablePocket`\
1659 **Preferences Affected:** `extensions.pocket.enabled`
1660
1661 #### Windows (GPO)
1662 ```
1663 Software\Policies\Mozilla\Firefox\DisablePocket = 0x1 | 0x0
1664 ```
1665 #### Windows (Intune)
1666 OMA-URI:
1667 ```
1668 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePocket
1669 ```
1670 Value (string):
1671 ```
1672 <enabled/> or <disabled/>
1673 ```
1674 #### macOS
1675 ```
1676 <dict>
1677   <key>DisablePocket</key>
1678   <true/> | <false/>
1679 </dict>
1680 ```
1681 #### policies.json
1682 ```
1683 {
1684   "policies": {
1685     "DisablePocket": true | false
1686   }
1687 }
1688 ```
1689 ### DisablePrivateBrowsing
1690 Remove access to private browsing.
1691
1692 **Compatibility:** Firefox 60, Firefox ESR 60\
1693 **CCK2 Equivalent:** `disablePrivateBrowsing`\
1694 **Preferences Affected:** N/A
1695
1696 #### Windows (GPO)
1697 ```
1698 Software\Policies\Mozilla\Firefox\DisablePrivateBrowsing = 0x1 | 0x0
1699 ```
1700 #### Windows (Intune)
1701 OMA-URI:
1702 ```
1703 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePrivateBrowsing
1704 ```
1705 Value (string):
1706 ```
1707 <enabled/> or <disabled/>
1708 ```
1709 #### macOS
1710 ```
1711 <dict>
1712   <key>DisablePrivateBrowsing</key>
1713   <true/> | <false/>
1714 </dict>
1715 ```
1716 #### policies.json
1717 ```
1718 {
1719   "policies": {
1720     "DisablePrivateBrowsing": true | false
1721   }
1722 }
1723 ```
1724 ### DisableProfileImport
1725 Disables the "Import data from another browser" option in the bookmarks window.
1726
1727 **Compatibility:** Firefox 60, Firefox ESR 60\
1728 **CCK2 Equivalent:** N/A\
1729 **Preferences Affected:** N/A
1730
1731 #### Windows (GPO)
1732 ```
1733 Software\Policies\Mozilla\Firefox\DisableProfileImport = 0x1 | 0x0
1734 ```
1735 #### Windows (Intune)
1736 OMA-URI:
1737 ```
1738 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableProfileImport
1739 ```
1740 Value (string):
1741 ```
1742 <enabled/> or <disabled/>
1743 ```
1744 #### macOS
1745 ```
1746 <dict>
1747   <key>DisableProfileImport</key>
1748   <true/> | <false/>
1749 </dict>
1750 ```
1751 #### policies.json
1752 ```
1753 {
1754   "policies": {
1755     "DisableProfileImport": true | false
1756   }
1757 }
1758 ```
1759 ### DisableProfileRefresh
1760 Disable the Refresh Firefox button on about:support and support.mozilla.org, as well as the prompt that displays offering to refresh Firefox when you haven't used it in a while.
1761
1762 **Compatibility:** Firefox 60, Firefox ESR 60\
1763 **CCK2 Equivalent:** `disableResetFirefox`\
1764 **Preferences Affected:** `browser.disableResetPrompt`
1765
1766 #### Windows (GPO)
1767 ```
1768 Software\Policies\Mozilla\Firefox\DisableProfileRefresh = 0x1 | 0x0
1769 ```
1770 #### Windows (Intune)
1771 OMA-URI:
1772 ```
1773 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableProfileRefresh
1774 ```
1775 Value (string):
1776 ```
1777 <enabled/> or <disabled/>
1778 ```
1779 #### macOS
1780 ```
1781 <dict>
1782   <key>DisableProfileRefresh</key>
1783   <true/> | <false/>
1784 </dict>
1785 ```
1786 #### policies.json
1787 ```
1788 {
1789   "policies": {
1790     "DisableProfileRefresh": true | false
1791   }
1792 }
1793 ```
1794 ### DisableSafeMode
1795 Disable safe mode within the browser.
1796
1797 On Windows, this disables safe mode via the command line as well.
1798
1799 **Compatibility:** Firefox 60, Firefox ESR 60 (Windows, macOS)\
1800 **CCK2 Equivalent:** `disableSafeMode`\
1801 **Preferences Affected:** N/A
1802
1803 #### Windows (GPO)
1804 ```
1805 Software\Policies\Mozilla\Firefox\DisableSafeMode = 0x1 | 0x0
1806 ```
1807 #### Windows (Intune)
1808 OMA-URI:
1809 ```
1810 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSafeMode
1811 ```
1812 Value (string):
1813 ```
1814 <enabled/> or <disabled/>
1815 ```
1816 #### macOS
1817 ```
1818 <dict>
1819   <key>DisableSafeMode</key>
1820   <true/> | <false/>
1821 </dict>
1822 ```
1823 #### policies.json
1824 ```
1825 {
1826   "policies": {
1827     "DisableSafeMode": true | false
1828   }
1829 }
1830 ```
1831 ### DisableSecurityBypass
1832 Prevent the user from bypassing security in certain cases.
1833
1834 `InvalidCertificate` prevents adding an exception when an invalid certificate is shown.
1835
1836 `SafeBrowsing` prevents selecting "ignore the risk" and visiting a harmful site anyway.
1837
1838 **Compatibility:** Firefox 60, Firefox ESR 60\
1839 **CCK2 Equivalent:** N/A\
1840 **Preferences Affected:** `security.certerror.hideAddException`, `browser.safebrowsing.allowOverride`
1841
1842 #### Windows (GPO)
1843 ```
1844 Software\Policies\Mozilla\Firefox\DisableSecurityBypass\InvalidCertificate = 0x1 | 0x0
1845 Software\Policies\Mozilla\Firefox\DisableSecurityBypass\SafeBrowsing = 0x1 | 0x0
1846 ```
1847 #### Windows (Intune)
1848 OMA-URI:
1849 ```
1850 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/P_DisableSecurityBypass_InvalidCertificate
1851 ```
1852 Value (string):
1853 ```
1854 <enabled/> or <disabled/>
1855 ```
1856 OMA-URI:
1857 ```
1858 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/P_DisableSecurityBypass_SafeBrowsing
1859 ```
1860 Value (string):
1861 ```
1862 <enabled/> or <disabled/>
1863 ```
1864
1865 #### macOS
1866 ```
1867 <dict>
1868   <key>DisableSecurityBypass</key>
1869   <dict>
1870     <key>InvalidCertificate</key>
1871     <true/> | <false/>
1872     <key>SafeBrowsing</key>
1873     <true/> | <false/>
1874   </dict>
1875 </dict>
1876 ```
1877 #### policies.json
1878 ```
1879 {
1880   "policies": {
1881     "DisableSecurityBypass": {
1882       "InvalidCertificate": true | false,
1883       "SafeBrowsing": true | false
1884     }
1885   }
1886 }
1887 ```
1888 ### DisableSetDesktopBackground
1889 Remove the "Set As Desktop Background..." menuitem when right clicking on an image.
1890
1891 **Compatibility:** Firefox 60, Firefox ESR 60\
1892 **CCK2 Equivalent:** `removeSetDesktopBackground`\
1893 **Preferences Affected:** N/A
1894
1895 #### Windows (GPO)
1896 ```
1897 Software\Policies\Mozilla\Firefox\DisableSetDesktopBackground = 0x1 | 0x0
1898 ```
1899 #### Windows (Intune)
1900 OMA-URI:
1901 ```
1902 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSetDesktopBackground
1903 ```
1904 Value (string):
1905 ```
1906 <enabled/> or <disabled/>
1907 ```
1908 #### macOS
1909 ```
1910 <dict>
1911   <key>DisableSetDesktopBackground</key>
1912   <true/> | <false/>
1913 </dict>
1914 ```
1915 #### policies.json
1916 ```
1917 {
1918   "policies": {
1919     "DisableSetDesktopBackground": true | false
1920   }
1921 }
1922 ```
1923 ### DisableSystemAddonUpdate
1924 Prevent system add-ons from being installed or update.
1925
1926 **Compatibility:** Firefox 60, Firefox ESR 60\
1927 **CCK2 Equivalent:** N/A\
1928 **Preferences Affected:** N/A
1929
1930 #### Windows (GPO)
1931 ```
1932 Software\Policies\Mozilla\Firefox\DisableSystemAddonUpdate = 0x1 | 0x0
1933 ```
1934 #### Windows (Intune)
1935 OMA-URI:
1936 ```
1937 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSystemAddonUpdate
1938 ```
1939 Value (string):
1940 ```
1941 <enabled/> or <disabled/>
1942 ```
1943 #### macOS
1944 ```
1945 <dict>
1946   <key>DisableSystemAddonUpdate</key>
1947   <true/> | <false/>
1948 </dict>
1949 ```
1950 #### policies.json
1951 ```
1952 {
1953   "policies": {
1954     "DisableSystemAddonUpdate": true | false
1955   }
1956 }
1957 ```
1958 ### DisableTelemetry
1959 Prevent the upload of telemetry data.
1960
1961 As of Firefox 83 and Firefox ESR 78.5, local storage of telemetry data is disabled as well.
1962
1963 Mozilla recommends that you do not disable telemetry. Information collected through telemetry helps us build a better product for businesses like yours.
1964
1965 **Compatibility:** Firefox 60, Firefox ESR 60\
1966 **CCK2 Equivalent:** `disableTelemetry`\
1967 **Preferences Affected:** `datareporting.healthreport.uploadEnabled`, `datareporting.policy.dataSubmissionEnabled`, `toolkit.telemetry.archive.enabled`
1968
1969 #### Windows (GPO)
1970 ```
1971 Software\Policies\Mozilla\Firefox\DisableTelemetry = 0x1 | 0x0
1972 ```
1973 #### Windows (Intune)
1974 OMA-URI:
1975 ```
1976 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableTelemetry
1977 ```
1978 Value (string):
1979 ```
1980 <enabled/> or <disabled/>
1981 ```
1982 #### macOS
1983 ```
1984 <dict>
1985   <key>DisableTelemetry</key>
1986   <true/> | <false/>
1987 </dict>
1988 ```
1989 #### policies.json
1990 ```
1991 {
1992   "policies": {
1993     "DisableTelemetry": true | false
1994   }
1995 }
1996 ```
1997 ### DisplayBookmarksToolbar
1998 Set the initial state of the bookmarks toolbar. A user can still hide it and it will stay hidden.
1999
2000 **Compatibility:** Firefox 60, Firefox ESR 60\
2001 **CCK2 Equivalent:** `displayBookmarksToolbar`\
2002 **Preferences Affected:** N/A
2003
2004 #### Windows (GPO)
2005 ```
2006 Software\Policies\Mozilla\Firefox\DisplayBookmarksToolbar = 0x1 | 0x0
2007 ```
2008 #### Windows (Intune)
2009 OMA-URI:
2010 ```
2011 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisplayBookmarksToolbar
2012 ```
2013 Value (string):
2014 ```
2015 <enabled/> or <disabled/>
2016 ```
2017 #### macOS
2018 ```
2019 <dict>
2020   <key>DisplayBookmarksToolbar</key>
2021   <true/> | <false/>
2022 </dict>
2023 ```
2024 #### policies.json
2025 ```
2026 {
2027   "policies": {
2028     "DisplayBookmarksToolbar": true | false
2029   }
2030 }
2031 ```
2032 ### DisplayMenuBar
2033 Set the state of the menubar.
2034
2035 `always` means the menubar is shown and cannot be hidden.
2036
2037 `never` means the menubar is hidden and cannot be shown.
2038
2039 `default-on` means the menubar is on by default but can be hidden.
2040
2041 `default-off` means the menubar is off by default but can be shown.
2042
2043 **Compatibility:** Firefox 73, Firefox ESR 68.5 (Windows, some Linux)\
2044 **CCK2 Equivalent:** `displayMenuBar`\
2045 **Preferences Affected:** N/A
2046
2047 #### Windows (GPO)
2048 ```
2049 Software\Policies\Mozilla\Firefox\DisplayMenuBar = "always", "never", "default-on", "default-off"
2050 ```
2051 #### Windows (Intune)
2052 OMA-URI:
2053 ```
2054 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisplayMenuBar_Enum
2055 ```
2056 Value (string):
2057 ```
2058 <enabled/>
2059 <data id="DisplayMenuBar" value="always | never | default-on | default-off"/>
2060 ```
2061 #### macOS
2062 ```
2063 <dict>
2064   <key>DisplayMenuBar</key>
2065   <string>always | never | default-on | default-off</string>
2066 </dict>
2067 ```
2068 #### policies.json
2069 ```
2070 {
2071   "policies": {
2072     "DisplayMenuBar": "always", "never", "default-on", "default-off"
2073   }
2074 }
2075 ```
2076 ### DisplayMenuBar (Deprecated)
2077 Set the initial state of the menubar. A user can still hide it and it will stay hidden.
2078
2079 **Compatibility:** Firefox 60, Firefox ESR 60 (Windows, some Linux)\
2080 **CCK2 Equivalent:** `displayMenuBar`\
2081 **Preferences Affected:** N/A
2082
2083 #### Windows (GPO)
2084 ```
2085 Software\Policies\Mozilla\Firefox\DisplayMenuBar = 0x1 | 0x0
2086 ```
2087 #### macOS
2088 ```
2089 <dict>
2090   <key>DisplayMenuBar</key>
2091   <true/> | <false/>
2092 </dict>
2093 ```
2094 #### policies.json
2095 ```
2096 {
2097   "policies": {
2098     "DisplayMenuBar": true | false
2099   }
2100 }
2101 ```
2102 ### DNSOverHTTPS
2103 Configure DNS over HTTPS.
2104
2105 `Enabled` determines whether DNS over HTTPS is enabled
2106
2107 `ProviderURL` is a URL to another provider.
2108
2109 `Locked` prevents the user from changing DNS over HTTPS preferences.
2110
2111 `ExcludedDomains` excludes domains from DNS over HTTPS.
2112
2113 **Compatibility:** Firefox 63, Firefox ESR 68 (ExcludedDomains added in 75/68.7)\
2114 **CCK2 Equivalent:** N/A\
2115 **Preferences Affected:** `network.trr.mode`, `network.trr.uri`
2116
2117 #### Windows (GPO)
2118 ```
2119 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\Enabled = 0x1 | 0x0
2120 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\ProviderURL = "URL_TO_ALTERNATE_PROVIDER"
2121 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\Locked = 0x1 | 0x0
2122 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\ExcludedDomains\1 = "example.com"
2123 ```
2124 #### Windows (Intune)
2125 OMA-URI:
2126 ```
2127 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_Enabled
2128 ```
2129 Value (string):
2130 ```
2131 <enabled/> or <disabled/>
2132 ```
2133 OMA-URI:
2134 ```
2135 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_ProviderURL
2136 ```
2137 Value (string):
2138 ```
2139 <enabled/>
2140 <data id="String" value="URL_TO_ALTERNATE_PROVIDER"/>
2141 ```
2142 OMA-URI:
2143 ```
2144 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_Locked
2145 ```
2146 Value (string):
2147 ```
2148 <enabled/> or <disabled/>
2149 ```
2150 OMA-URI:
2151 ```
2152 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_ExcludedDomains
2153 ```
2154 Value (string):
2155 ```
2156 <enabled/>
2157 <data id="List" value="1&#xF000;example.com"/>
2158 ```
2159 #### macOS
2160 ```
2161 <dict>
2162   <key>DNSOverHTTPS</key>
2163   <dict>
2164     <key>Enabled</key>
2165     <true/> | <false/>
2166     <key>ProviderURL</key>
2167     <string>URL_TO_ALTERNATE_PROVIDER</string>
2168     <key>Locked</key>
2169     <true/> | <false/>
2170     <key>ExcludedDomains</key>
2171     <array>
2172       <string>example.com</string>
2173     </array>
2174   </dict>
2175 </dict>
2176 ```
2177 #### policies.json
2178 ```
2179 {
2180   "policies": {
2181     "DNSOverHTTPS": {
2182       "Enabled":  true | false,
2183       "ProviderURL": "URL_TO_ALTERNATE_PROVIDER",
2184       "Locked": true | false,
2185       "ExcludedDomains": ["example.com"]
2186     }
2187   }
2188 }
2189 ```
2190 ### DontCheckDefaultBrowser
2191 Don't check if Firefox is the default browser at startup.
2192
2193 **Compatibility:** Firefox 60, Firefox ESR 60\
2194 **CCK2 Equivalent:** `dontCheckDefaultBrowser`\
2195 **Preferences Affected:** `browser.shell.checkDefaultBrowser`
2196
2197 #### Windows (GPO)
2198 ```
2199 Software\Policies\Mozilla\Firefox\DontCheckDefaultBrowser = 0x1 | 0x0
2200 ```
2201 #### Windows (Intune)
2202 OMA-URI:
2203 ```
2204 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DontCheckDefaultBrowser
2205 ```
2206 Value (string):
2207 ```
2208 <enabled/> or <disabled/>
2209 ```
2210 #### macOS
2211 ```
2212 <dict>
2213   <key>DontCheckDefaultBrowser</key>
2214   <true/> | <false/>
2215 </dict>
2216 ```
2217 #### policies.json
2218 ```
2219 {
2220   "policies": {
2221     "DontCheckDefaultBrowser": true | false
2222   }
2223 }
2224 ```
2225 ### DownloadDirectory
2226 Set and lock the download directory.
2227
2228 You can use ${home} for the native home directory.
2229
2230 **Compatibility:** Firefox 68, Firefox ESR 68\
2231 **CCK2 Equivalent:** N/A\
2232 **Preferences Affected:** `browser.download.dir`, `browser.download.folderList`, `browser.download.useDownloadDir`
2233
2234 #### Windows (GPO)
2235 ```
2236 Software\Policies\Mozilla\Firefox\DownloadDirectory = "${home}\Downloads"
2237 ```
2238 #### Windows (Intune)
2239 OMA-URI:
2240 ```
2241 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DownloadDirectory
2242 ```
2243 Value (string):
2244 ```
2245 <enabled/>
2246 <data id="Preferences_String" value="${home}\Downloads"/>
2247 ```
2248 #### macOS
2249 ```
2250 <dict>
2251   <key>DownloadDirectory</key>
2252   <string>${home}/Downloads</string>
2253 </dict>
2254 ```
2255 #### policies.json (macOS and Linux)
2256 ```
2257 {
2258   "policies": {
2259     "DownloadDirectory": "${home}/Downloads"
2260 }
2261 ```
2262 #### policies.json (Windows)
2263 ```
2264 {
2265   "policies": {
2266     "DownloadDirectory": "${home}\\Downloads"
2267 }
2268 ```
2269 ### EnableTrackingProtection
2270 Configure tracking protection.
2271
2272 If this policy is not configured, tracking protection is not enabled by default in the browser, but it is enabled by default in private browsing and the user can change it.
2273
2274 If `Value` is set to false, tracking protection is disabled and locked in both the regular browser and private browsing.
2275
2276 If `Value` is set to true, tracking protection is enabled by default in both the regular browser and private browsing and the `Locked` value determines whether or not a user can change it.
2277
2278 If `Cryptomining` is set to true, cryptomining scripts on websites are blocked.
2279
2280 If `Fingerprinting` is set to true, fingerprinting scripts on websites are blocked.
2281
2282 `Exceptions` are origins for which tracking protection is not enabled.
2283
2284 **Compatibility:** Firefox 60, Firefox ESR 60 (Cryptomining and Fingerprinting added in 70/68.2, Exceptions added in 73/68.5)\
2285 **CCK2 Equivalent:** N/A\
2286 **Preferences Affected:** `privacy.trackingprotection.enabled`, `privacy.trackingprotection.pbmode.enabled`, `privacy.trackingprotection.cryptomining.enabled`, `privacy.trackingprotection.fingerprinting.enabled`
2287
2288 #### Windows (GPO)
2289 ```
2290 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Value = 0x1 | 0x0
2291 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Locked = 0x1 | 0x0
2292 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Cryptomining = 0x1 | 0x0
2293 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Fingerprinting = 0x1 | 0x0
2294 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Exceptions\1 = "https://example.com"
2295 ```
2296 #### Windows (Intune)
2297 OMA-URI:
2298 ```
2299 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/A_TrackingProtection_Value
2300 ```
2301 Value (string):
2302 ```
2303 <enabled/> or <disabled/>
2304 ```
2305 OMA-URI:
2306 ```
2307 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/B_TrackingProtection_Cryptomining
2308 ```
2309 Value (string):
2310 ```
2311 <enabled/> or <disabled/>
2312 ```
2313 OMA-URI:
2314 ```
2315 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/C_TrackingProtection_Fingerprinting
2316 ```
2317 Value (string):
2318 ```
2319 <enabled/> or <disabled/>
2320 ```
2321 OMA-URI:
2322 ```
2323 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/D_TrackingProtection_Exceptions
2324 ```
2325 Value (string):
2326 ```
2327 <data id="TrackingProtection_Exceptions" value="1&#xF000;https://example.com"/>
2328 ```
2329 OMA-URI:
2330 ```
2331 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/E_TrackingProtection_Locked
2332 ```
2333 Value (string):
2334 ```
2335 <enabled/> or <disabled/>
2336 ```
2337 #### macOS
2338 ```
2339 <dict>
2340   <key>EnableTrackingProtection</key>
2341   <dict>
2342     <key>Value</key>
2343     <true/> | <false/>
2344     <key>Locked</key>
2345     <true/> | <false/>
2346     <key>Cryptomining</key>
2347     <true/> | <false/>
2348     <key>Fingerprinting</key>
2349     <true/> | <false/>
2350     <key>Exceptions</key>
2351     <array>
2352       <string>https://example.com</string>
2353     </array>
2354   </dict>
2355 </dict>
2356 ```
2357 #### policies.json
2358 ```
2359 {
2360   "policies": {
2361     "EnableTrackingProtection": {
2362       "Value": true | false,
2363       "Locked": true | false,
2364       "Cryptomining": true | false,
2365       "Fingerprinting": true | false,
2366       "Exceptions": ["https://example.com"]
2367     }
2368   }
2369 }
2370 ```
2371 ### EncryptedMediaExtensions
2372 Enable or disable Encrypted Media Extensions and optionally lock it.
2373
2374 If `Enabled` is set to false, encrypted media extensions (like Widevine) are not downloaded by Firefox unless the user consents to installing them.
2375
2376 If `Locked` is set to true and `Enabled` is set to false, Firefox will not download encrypted media extensions (like Widevine) or ask the user to install them.
2377
2378 **Compatibility:** Firefox 77, Firefox ESR 68.9\
2379 **CCK2 Equivalent:** N/A\
2380 **Preferences Affected:** `media.eme.enabled`
2381
2382 #### Windows (GPO)
2383 ```
2384 Software\Policies\Mozilla\Firefox\EncryptedMediaExtensions\Enabled = 0x1 | 0x0
2385 Software\Policies\Mozilla\Firefox\EncryptedMediaExtensions\Locked = 0x1 | 0x0
2386 ```
2387 #### Windows (Intune)
2388 OMA-URI:
2389 ```
2390 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~EncryptedMediaExtensions/EncryptedMediaExtensions_Enabled
2391 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~EncryptedMediaExtensions/EncryptedMediaExtensions_Locked
2392 ```
2393 Value (string):
2394 ```
2395 <enabled/>or <disabled/>
2396 ```
2397 #### macOS
2398 ```
2399 <dict>
2400   <key>EncryptedMediaExtensions</key>
2401   <dict>
2402     <key>Enabled</key>
2403     <true/> | <false/>
2404     <key>Locked</key>
2405     <true/> | <false/>
2406   </dict>
2407 </dict>
2408 ```
2409 #### policies.json
2410 ```
2411 {
2412   "policies": {
2413     "EncryptedMediaExtensions": {
2414       "Enabled": true | false,
2415       "Locked": true | false
2416     }
2417   }
2418 }
2419 ```
2420 ### EnterprisePoliciesEnabled
2421 Enable policy support on macOS.
2422
2423 **Compatibility:** Firefox 63, Firefox ESR 60.3 (macOS only)\
2424 **CCK2 Equivalent:** N/A\
2425 **Preferences Affected:** N/A
2426
2427 #### macOS
2428 ```
2429 <dict>
2430   <key>EnterprisePoliciesEnabled</key>
2431   <true/>
2432 </dict>
2433 ```
2434 ### Extensions
2435 Control the installation, uninstallation and locking of extensions.
2436
2437 While this policy is not technically deprecated, it is recommended that you use the **[`ExtensionSettings`](#extensionsettings)** policy. It has the same functionality and adds more. It does not support native paths, though, so you'll have to use file:/// URLs.
2438
2439 `Install` is a list of URLs or native paths for extensions to be installed.
2440
2441 `Uninstall` is a list of extension IDs that should be uninstalled if found.
2442
2443 `Locked` is a list of extension IDs that the user cannot disable or uninstall.
2444
2445 **Compatibility:** Firefox 60, Firefox ESR 60\
2446 **CCK2 Equivalent:** `addons`\
2447 **Preferences Affected:** N/A
2448
2449 #### Windows (GPO)
2450 ```
2451 Software\Policies\Mozilla\Firefox\Extensions\Install\1 = "https://addons.mozilla.org/firefox/downloads/somefile.xpi"
2452 Software\Policies\Mozilla\Firefox\Extensions\Install\2 = "//path/to/xpi"
2453 Software\Policies\Mozilla\Firefox\Extensions\Uninstall\1 = "bad_addon_id@mozilla.org"
2454 Software\Policies\Mozilla\Firefox\Extensions\Locked\1 = "addon_id@mozilla.org"
2455 ```
2456 #### Windows (Intune)
2457 OMA-URI:
2458 ```
2459 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/Extensions_Install
2460 ```
2461 Value (string):
2462 ```
2463 <enabled/>
2464 <data id="Extensions" value="1&#xF000;https://addons.mozilla.org/firefox/downloads/somefile.xpi&#xF000;2&#xF000;//path/to/xpi"/>
2465 ```
2466 OMA-URI:
2467 ```
2468 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/Extensions_Uninstall
2469 ```
2470 Value (string):
2471 ```
2472 <enabled/>
2473 <data id="Extensions" value="1&#xF000;bad_addon_id@mozilla.org"/>
2474 ```
2475 OMA-URI:
2476 ```
2477 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/Extensions_Locked
2478 ```
2479 Value (string):
2480 ```
2481 <enabled/>
2482 <data id="Extensions" value="1&#xF000;addon_id@mozilla.org"/>
2483 ```
2484 #### macOS
2485 ```
2486 <dict>
2487   <key>Extensions</key>
2488   <dict>
2489     <key>Install</key>
2490     <array>
2491       <string>https://addons.mozilla.org/firefox/downloads/somefile.xpi</string>
2492       <string>//path/to/xpi</string>
2493     </array>
2494     <key>Uninstall</key>
2495     <array>
2496       <string>bad_addon_id@mozilla.org</string>
2497     </array>
2498     <key>Locked</key>
2499     <array>
2500       <string>addon_id@mozilla.org</string>
2501     </array>
2502   </dict>
2503 </dict>
2504 ```
2505 #### policies.json
2506 ```
2507 {
2508   "policies": {
2509     "Extensions": {
2510       "Install": ["https://addons.mozilla.org/firefox/downloads/somefile.xpi", "//path/to/xpi"],
2511       "Uninstall": ["bad_addon_id@mozilla.org"],
2512       "Locked":  ["addon_id@mozilla.org"]
2513     }
2514   }
2515 }
2516 ```
2517 ### ExtensionSettings
2518 Manage all aspects of extensions. This policy is based heavily on the [Chrome policy](https://dev.chromium.org/administrators/policy-list-3/extension-settings-full) of the same name.
2519
2520 This policy maps an extension ID to its configuration. With an extension ID, the configuration will be applied to the specified extension only. A default configuration can be set for the special ID "*", which will apply to all extensions that don't have a custom configuration set in this policy.
2521
2522 To obtain an extension ID, install the extension and go to about:support. You will see the ID in the Extensions section. I've also created an extension that makes it easy to find the ID of extensions on AMO. You can download it [here](https://github.com/mkaply/queryamoid/releases/tag/v0.1).
2523
2524 The configuration for each extension is another dictionary that can contain the fields documented below.
2525
2526 | Name | Description |
2527 | --- | --- |
2528 | `installation_mode` | Maps to a string indicating the installation mode for the extension. The valid strings are `allowed`,`blocked`,`force_installed`, and `normal_installed`.
2529 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`allowed` | Allows the extension to be installed by the user. This is the default behavior. There is no need for an install_url; it will automatically be allowed based on the ID.
2530 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`blocked`| Blocks installation of the extension and removes it from the device if already installed.
2531 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`force_installed`| The extension is automatically installed and can't be removed by the user. This option is not valid for the default configuration and requires an install_url.
2532 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`normal_installed`| The extension is automatically installed but can be disabled by the user. This option is not valid for the default configuration and requires an install_url.
2533 | `install_url`| Maps to a URL indicating where Firefox can download a force_installed or normal_installed extension.  If installing from the local file system, use a [```file:///``` URL](https://en.wikipedia.org/wiki/File_URI_scheme). If installing from the addons.mozilla.org, use the following URL (substituting SHORT_NAME from the URL on AMO), https://addons.mozilla.org/firefox/downloads/latest/SHORT_NAME/latest.xpi. Languages packs are available from https://releases.mozilla.org/pub/firefox/releases/VERSION/PLATFORM/xpi/LANGUAGE.xpi. If you need to update the extension, you can change the name of the extension and it will be automatically updated. Extensions installed from file URLs will additional be updated when their internal version changes.
2534 | `install_sources` | A list of sources from which installing extensions is allowed. **This is unnecessary if you are only allowing the installation of certain extensions by ID.** Each item in this list is an extension-style match pattern. Users will be able to easily install items from any URL that matches an item in this list. Both the location of the *.xpi file and the page where the download is started from (i.e.  the referrer) must be allowed by these patterns. This setting can be used only for the default configuration.
2535 | `allowed_types` | This setting whitelists the allowed types of extension/apps that can be installed in Firefox. The value is a list of strings, each of which should be one of the following: "extension", "theme", "dictionary", "locale" This setting can be used only for the default configuration.
2536 | `blocked_install_message` | This maps to a string specifying the error message to display to users if they're blocked from installing an extension. This setting allows you to append text to the generic error message displayed when the extension is blocked. This could be be used to direct users to your help desk, explain why a particular extension is blocked, or something else. This setting can be used only for the default configuration.
2537 | `restricted_domains` | An array of domains on which content scripts can't be run. This setting can be used only for the default configuration.
2538 | `updates_disabled` | (Firefox 89, Firefox ESR 78.11) Boolean that indicates whether or not to disable automatic updates for an individual extension.
2539
2540 **Compatibility:** Firefox 69, Firefox ESR 68.1 (As of Firefox 85, Firefox ESR 78.7, installing a theme makes it the default.)\
2541 **CCK2 Equivalent:** N/A\
2542 **Preferences Affected:** N/A
2543
2544 #### Windows (GPO)
2545 Software\Policies\Mozilla\Firefox\ExtensionSettings (REG_MULTI_SZ) =
2546 ```
2547 {
2548   "*": {
2549     "blocked_install_message": "Custom error message.",
2550     "install_sources": ["about:addons","https://addons.mozilla.org/"],
2551     "installation_mode": "blocked",
2552     "allowed_types": ["extension"]
2553   },
2554   "uBlock0@raymondhill.net": {
2555     "installation_mode": "force_installed",
2556     "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
2557   },
2558   "https-everywhere@eff.org": {
2559     "installation_mode": "allowed"
2560   }
2561 }
2562 ```
2563 #### Windows (Intune)
2564 OMA-URI:
2565 ```
2566 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/ExtensionSettings
2567 ```
2568 Value (string):
2569 ```
2570 <enabled/>
2571 <data id="ExtensionSettings" value='
2572 {
2573   "*": {
2574     "blocked_install_message": "Custom error message.",
2575     "install_sources": ["about:addons","https://addons.mozilla.org/"],
2576     "installation_mode": "blocked",
2577     "allowed_types": ["extension"]
2578   },
2579   "uBlock0@raymondhill.net": {
2580     "installation_mode": "force_installed",
2581     "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
2582   },
2583     "https-everywhere@eff.org": {
2584     "installation_mode": "allowed"
2585   }
2586 }'/>
2587 ```
2588 #### macOS
2589 ```
2590 <dict>
2591   <key>ExtensionSettings</key>
2592   <dict>
2593     <key>*</key>
2594     <dict>
2595       <key>blocked_install_message</key>
2596       <string>Custom error message.</string>
2597       <key>install_sources</key>
2598       <array>
2599         <string>about:addons</string>
2600         <string>https://addons.mozilla.org/</string>
2601       </array>
2602       <key>installation_mode</key>
2603       <string>blocked</string>
2604       <key>allowed_types</key>
2605       <array>
2606         <string>extension</string>
2607       </array>
2608     </dict>
2609     <key>uBlock0@raymondhill.net</key>
2610     <dict>
2611       <key>installation_mode</key>
2612        <string>force_installed</string>
2613       <key>install_url</key>
2614       <string>https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi</string>
2615     </dict>
2616     <key>https-everywhere@eff.org</key>
2617     <dict>
2618       <key>installation_mode</key>
2619        <string>allowed</string>
2620     </dict>
2621   </dict>
2622 </dict>
2623 ```
2624 #### policies.json
2625 ```
2626 {
2627   "policies": {
2628     "ExtensionSettings": {
2629       "*": {
2630         "blocked_install_message": "Custom error message.",
2631         "install_sources": ["about:addons","https://addons.mozilla.org/"],
2632         "installation_mode": "blocked",
2633         "allowed_types": ["extension"]
2634       },
2635       "uBlock0@raymondhill.net": {
2636         "installation_mode": "force_installed",
2637         "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
2638       },
2639       "https-everywhere@eff.org": {
2640         "installation_mode": "allowed"
2641       }
2642     }
2643   }
2644 }
2645 ```
2646 ### ExtensionUpdate
2647 Control extension updates.
2648
2649 **Compatibility:** Firefox 67, Firefox ESR 60.7\
2650 **CCK2 Equivalent:** N/A\
2651 **Preferences Affected:** `extensions.update.enabled`
2652
2653 #### Windows (GPO)
2654 ```
2655 Software\Policies\Mozilla\Firefox\ExtensionUpdate = 0x1 | 0x0
2656 ```
2657 #### Windows (Intune)
2658 OMA-URI:
2659 ```
2660 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/ExtensionUpdate
2661 ```
2662 Value (string):
2663 ```
2664 <enabled/> or <disabled/>
2665 ```
2666 #### macOS
2667 ```
2668 <dict>
2669   <key>ExtensionUpdate</key>
2670   <true/> | <false/>
2671 </dict>
2672 ```
2673 #### policies.json
2674 ```
2675 {
2676   "policies": {
2677     "ExtensionUpdate": true | false
2678   }
2679 }
2680 ```
2681 ### FirefoxHome
2682 Customize the Firefox Home page.
2683
2684 **Compatibility:** Firefox 68, Firefox ESR 68 (SponsoredTopSites and SponsoredPocket were added in Firefox 95, Firefox ESR 91.4)
2685 **CCK2 Equivalent:** N/A\
2686 **Preferences Affected:** `browser.newtabpage.activity-stream.showSearch`, `browser.newtabpage.activity-stream.feeds.topsites`, `browser.newtabpage.activity-stream.feeds.section.highlights`, `browser.newtabpage.activity-stream.feeds.section.topstories`, `browser.newtabpage.activity-stream.feeds.snippets`, `browser.newtabpage.activity-stream.showSponsoredTopSites`, `browser.newtabpage.activity-stream.showSponsored`
2687
2688 #### Windows (GPO)
2689 ```
2690 Software\Policies\Mozilla\Firefox\FirefoxHome\Search = 0x1 | 0x0
2691 Software\Policies\Mozilla\Firefox\FirefoxHome\TopSites = 0x1 | 0x0
2692 Software\Policies\Mozilla\Firefox\FirefoxHome\SponsoredTopSites = 0x1 | 0x0
2693 Software\Policies\Mozilla\Firefox\FirefoxHome\Highlights = 0x1 | 0x0
2694 Software\Policies\Mozilla\Firefox\FirefoxHome\Pocket = 0x1 | 0x0
2695 Software\Policies\Mozilla\Firefox\FirefoxHome\SponsoredPocket = 0x1 | 0x0
2696 Software\Policies\Mozilla\Firefox\FirefoxHome\Snippets = 0x1 | 0x0
2697 Software\Policies\Mozilla\Firefox\FirefoxHome\Locked = 0x1 | 0x0
2698 ```
2699 #### Windows (Intune)
2700 OMA-URI:
2701 ```
2702 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/CustomizeFirefoxHome
2703 ```
2704 Value (string):
2705 ```
2706 <enabled/>
2707 <data id="FirefoxHome_Search"  value="true | false"/>
2708 <data id="FirefoxHome_TopSites"  value="true | false"/>
2709 <data id="FirefoxHome_SponsoredTopSites"  value="true | false"/>
2710 <data id="FirefoxHome_Highlights"  value="true | false"/>
2711 <data id="FirefoxHome_Pocket"  value="true | false"/>
2712 <data id="FirefoxHome_SponsoredPocket"  value="true | false"/>
2713 <data id="FirefoxHome_Snippets"  value="true | false"/>
2714 <data id="FirefoxHome_Locked"  value="true | false"/>
2715 ```
2716 #### macOS
2717 ```
2718 <dict>
2719   <key>FirefoxHome</key>
2720   <dict>
2721     <key>Search</key>
2722     <true/> | <false/>
2723     <key>TopSites</key>
2724     <true/> | <false/>
2725     <key>SponsoredTopSites</key>
2726     <true/> | <false/>
2727     <key>Highlights</key>
2728     <true/> | <false/>
2729     <key>Pocket</key>
2730     <true/> | <false/>
2731     <key>SponsoredPocket</key>
2732     <true/> | <false/>
2733     <key>Snippets</key>
2734     <true/> | <false/>
2735     <key>Locked</key>
2736     <true/> | <false/>
2737   </dict>
2738 </dict>
2739 ```
2740 #### policies.json
2741 ```
2742 {
2743   "policies": {
2744     "FirefoxHome": {
2745       "Search": true | false,
2746       "TopSites": true | false,
2747       "SponsoredTopSites": true | false,
2748       "Highlights": true | false,
2749       "Pocket": true | false,
2750       "SponsoredPocket": true | false,
2751       "Snippets": true | false,
2752       "Locked": true | false
2753     }
2754   }
2755 }
2756 ```
2757 ### FlashPlugin (Deprecated)
2758 Configure the default Flash plugin policy as well as origins for which Flash is allowed.
2759
2760 `Allow` is a list of origins where Flash are allowed.
2761
2762 `Block` is a list of origins where Flash is not allowed.
2763
2764 `Default` determines whether or not Flash is allowed by default.
2765
2766 `Locked` prevents the user from changing Flash preferences.
2767
2768 **Compatibility:** Firefox 60, Firefox ESR 60\
2769 **CCK2 Equivalent:** `permissions.plugin`\
2770 **Preferences Affected:** `plugin.state.flash`
2771
2772 #### Windows (GPO)
2773 ```
2774 Software\Policies\Mozilla\Firefox\FlashPlugin\Allow\1 = "https://example.org"
2775 Software\Policies\Mozilla\Firefox\FlashPlugin\Block\1 = "https://example.edu"
2776 Software\Policies\Mozilla\Firefox\FlashPlugin\Default = 0x1 | 0x0
2777 Software\Policies\Mozilla\Firefox\FlashPlugin\Locked = 0x1 | 0x0
2778 ```
2779 #### Windows (Intune)
2780 OMA-URI:
2781 ```
2782 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Flash/FlashPlugin_Allow
2783 ```
2784 Value (string):
2785 ```
2786 <enabled/>
2787 <data id="Permissions" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
2788 ```
2789 OMA-URI:
2790 ```
2791 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Flash/FlashPlugin_Locked
2792 ```
2793 Value (string):
2794 ```
2795 <enabled/> or <disabled/>
2796 ```
2797 OMA-URI:
2798 ```
2799 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Flash/FlashPlugin_Default
2800 ```
2801 Value (string):
2802 ```
2803 <enabled/> or <disabled/>
2804 ```
2805 #### macOS
2806 ```
2807 <dict>
2808   <key>FlashPlugin</key>
2809   <dict>
2810     <key>Allow</key>
2811     <array>
2812       <string>http://example.org</string>
2813     </array>
2814     <key>Block</key>
2815     <array>
2816       <string>http://example.edu</string>
2817     </array>
2818     <key>Default</key>
2819     <true/> | <false/>
2820     <key>Locked</key>
2821     <true/> | <false/>
2822   </dict>
2823 </dict>
2824 ```
2825 #### policies.json
2826 ```
2827 {
2828   "policies": {
2829     "FlashPlugin": {
2830       "Allow": ["http://example.org/"],
2831       "Block": ["http://example.edu/"],
2832       "Default": true | false,
2833       "Locked": true | false
2834     }
2835   }
2836 }
2837 ```
2838 ### Handlers
2839 Configure default application handlers. This policy is based on the internal format of `handlers.json`.
2840
2841 You can configure handlers based on a mime type (`mimeTypes`), a file's extension (`extensions`), or a protocol (`schemes`).
2842
2843 Within each handler type, you specify the given mimeType/extension/scheme as a key and use the following subkeys to describe how it is handled.
2844
2845 | Name | Description |
2846 | --- | --- |
2847 | `action`| Can be either `saveToDisk`, `useHelperApp`, `useSystemDefault`.
2848 | `ask` | If `true`, the user is asked if what they want to do with the file. If `false`, the action is taken without user intervention.
2849 | `handlers` | An array of handlers with the first one being the default. If you don't want to have a default handler, use an empty object for the first handler. Choose between path or uriTemplate.
2850 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`name` | The display name of the handler (might not be used).
2851 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`path`| The native path to the executable to be used.
2852 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`uriTemplate`| A url to a web based application handler. The URL must be https and contain a %s to be used for substitution.
2853
2854 **Compatibility:** Firefox 78, Firefox ESR 78\
2855 **CCK2 Equivalent:** N/A\
2856 **Preferences Affected:** N/A
2857
2858 #### Windows (GPO)
2859 Software\Policies\Mozilla\Firefox\Handlers (REG_MULTI_SZ) =
2860 ```
2861 {
2862   "mimeTypes": {
2863     "application/msword": {
2864       "action": "useSystemDefault",
2865       "ask": true | false
2866     }
2867   },
2868   "schemes": {
2869     "mailto": {
2870       "action": "useHelperApp",
2871       "ask": true | false,
2872       "handlers": [{
2873         "name": "Gmail",
2874         "uriTemplate": "https://mail.google.com/mail/?extsrc=mailto&url=%s"
2875       }]
2876     }
2877   },
2878   "extensions": {
2879     "pdf": {
2880       "action": "useHelperApp",
2881       "ask": true | false,
2882       "handlers": [{
2883         "name": "Adobe Acrobat",
2884         "path": "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32.exe"
2885       }]
2886     }
2887   }
2888 }
2889 ```
2890 #### Windows (Intune)
2891 OMA-URI:
2892 ```
2893 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Handlers
2894 ```
2895 Value (string):
2896 ```
2897 <enabled/>
2898 <data id="Handlers" value='
2899 {
2900   "mimeTypes": {
2901     "application/msword": {
2902       "action": "useSystemDefault",
2903       "ask": true | false
2904     }
2905   },
2906   "schemes": {
2907     "mailto": {
2908       "action": "useHelperApp",
2909       "ask": true | false,
2910       "handlers": [{
2911         "name": "Gmail",
2912         "uriTemplate": "https://mail.google.com/mail/?extsrc=mailto&amp;url=%s"
2913       }]
2914     }
2915   },
2916   "extensions": {
2917     "pdf": {
2918       "action": "useHelperApp",
2919       "ask": true | false,
2920       "handlers": [{
2921         "name": "Adobe Acrobat",
2922         "path": "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32.exe"
2923       }]
2924     }
2925   }
2926 }
2927 '/>
2928 ```
2929 #### macOS
2930 ```
2931 <dict>
2932   <key>Handlers</key>
2933   <dict>
2934     <key>mimeTypes</key>
2935     <dict>
2936       <key>application/msword</key>
2937       <dict>
2938         <key>action</key>
2939         <string>useSystemDefault</string>
2940         <key>ask</key>
2941         <true/> | <false/>
2942       </dict>
2943     </dict>
2944     <key>schemes</key>
2945     <dict>
2946       <key>mailto</key>
2947       <dict>
2948         <key>action</key>
2949         <string>useHelperApp</string>
2950         <key>ask</key>
2951         <true/> | <false/>
2952         <key>handlers</key>
2953         <array>
2954           <dict>
2955             <key>name</key>
2956             <string>Gmail</string>
2957             <key>uriTemplate</key>
2958             <string>https://mail.google.com/mail/?extsrc=mailto&url=%s</string>
2959           </dict>
2960         </array>
2961       </dict>
2962     </dict>
2963     <key>extensions</key>
2964     <dict>
2965       <key>pdf</key>
2966       <dict>
2967         <key>action</key>
2968         <string>useHelperApp</string>
2969         <key>ask</key>
2970         <true/> | <false/>
2971         <key>handlers</key>
2972         <array>
2973           <dict>
2974             <key>name</key>
2975             <string>Adobe Acrobat</string>
2976             <key>path</key>
2977             <string>/System/Applications/Preview.app</string>
2978           </dict>
2979         </array>
2980       </dict>
2981     </dict>
2982   </dict>
2983 </dict>
2984 ```
2985 #### policies.json
2986 ```
2987 {
2988   "policies": {
2989     "Handlers": {
2990       "mimeTypes": {
2991         "application/msword": {
2992           "action": "useSystemDefault",
2993           "ask": false
2994         }
2995       },
2996       "schemes": {
2997         "mailto": {
2998           "action": "useHelperApp",
2999           "ask": true | false,
3000           "handlers": [{
3001             "name": "Gmail",
3002             "uriTemplate": "https://mail.google.com/mail/?extsrc=mailto&url=%s"
3003           }]
3004         }
3005       },
3006       "extensions": {
3007         "pdf": {
3008           "action": "useHelperApp",
3009           "ask": true | false,
3010           "handlers": [{
3011             "name": "Adobe Acrobat",
3012             "path": "/usr/bin/acroread"
3013           }]
3014         }
3015       }
3016     }
3017   }
3018 }
3019 ```
3020 ### HardwareAcceleration
3021 Control hardware acceleration.
3022
3023 **Compatibility:** Firefox 60, Firefox ESR 60\
3024 **CCK2 Equivalent:** N/A\
3025 **Preferences Affected:** `layers.acceleration.disabled`
3026
3027 #### Windows (GPO)
3028 ```
3029 Software\Policies\Mozilla\Firefox\HardwareAcceleration = 0x1 | 0x0
3030 ```
3031 #### Windows (Intune)
3032 OMA-URI:
3033 ```
3034 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/HardwareAcceleration
3035 ```
3036 Value (string):
3037 ```
3038 <enabled/> or <disabled/>
3039 ```
3040 #### macOS
3041 ```
3042 <dict>
3043   <key>HardwareAcceleration</key>
3044   <true/> | <false/>
3045 </dict>
3046 ```
3047 #### policies.json
3048 ```
3049 {
3050   "policies": {
3051     "HardwareAcceleration": true | false
3052   }
3053 }
3054 ```
3055 ### Homepage
3056 Configure the default homepage and how Firefox starts.
3057
3058 `URL` is the default homepage.
3059
3060 `Locked` prevents the user from changing homepage preferences.
3061
3062 `Additional` allows for more than one homepage.
3063
3064 `StartPage` is how Firefox starts. The choices are no homepage, the default homepage or the previous session.
3065
3066 With Firefox 78, an additional option as added for `Startpage`, `homepage-locked`. If this is value is set for the Startpage, the user will always get the homepage at startup and cannot choose to restore their session.
3067
3068 **Compatibility:** Firefox 60, Firefox ESR 60 (StartPage was added in Firefox 60, Firefox ESR 60.4, homepage-locked added in Firefox 78)\
3069 **CCK2 Equivalent:** `homePage`,`lockHomePage`\
3070 **Preferences Affected:** `browser.startup.homepage`, `browser.startup.page`
3071
3072 #### Windows (GPO)
3073 ```
3074 Software\Policies\Mozilla\Firefox\Homepage\URL = "https://example.com"
3075 Software\Policies\Mozilla\Firefox\Homepage\Locked = 0x1 | 0x0
3076 Software\Policies\Mozilla\Firefox\Homepage\Additional\1 = "https://example.org"
3077 Software\Policies\Mozilla\Firefox\Homepage\Additional\2 = "https://example.edu"
3078 Software\Policies\Mozilla\Firefox\Homepage\StartPage = "none" | "homepage" | "previous-session" | "homepage-locked"
3079 ```
3080 #### Windows (Intune)
3081 OMA-URI:
3082 ```
3083 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageURL
3084 ```
3085 Value (string):
3086 ```
3087 <enabled/>
3088
3089 <data id="HomepageURL" value="https://example.com"/>
3090 <data id="HomepageLocked" value="true | false"/>
3091 ```
3092 OMA-URI:
3093 ```
3094 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageAdditional
3095 ```
3096 Value (string):
3097 ```
3098 <enabled/>
3099
3100 <data id="HomepageAdditional" value="1&#xF000;http://example.org&#xF000;2&#xF000;http://example.edu"/>
3101 ```
3102 OMA-URI:
3103 ```
3104 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageStartPage
3105 ```
3106 Value (string):
3107 ```
3108 <enabled/>
3109
3110 <data id="StartPage" value="none | homepage | previous-session"/>
3111 ```
3112 #### macOS
3113 ```
3114 <dict>
3115   <key>Homepage</key>
3116   <dict>
3117     <key>URL</key>
3118     <string>http://example.com</string>
3119     <key>Locked</key>
3120     <true/> | <false/>
3121     <key>Additional</key>
3122     <array>
3123       <string>http://example.org</string>
3124       <string>http://example.edu</string>
3125     </array>
3126     <key>StartPage</key>
3127     <string>none | homepage | previous-session | homepage-locked</string>
3128   </dict>
3129 </dict>
3130 ```
3131 #### policies.json
3132 ```
3133 {
3134   "policies": {
3135     "Homepage": {
3136       "URL": "http://example.com/",
3137       "Locked": true | false,
3138       "Additional": ["http://example.org/",
3139                      "http://example.edu/"],
3140       "StartPage": "none" | "homepage" | "previous-session" | "homepage-locked"
3141     }
3142   }
3143 }
3144 ```
3145 ### InstallAddonsPermission
3146 Configure the default extension install policy as well as origins for extension installs are allowed. This policy does not override turning off all extension installs.
3147
3148 `Allow` is a list of origins where extension installs are allowed.
3149
3150 `Default` determines whether or not extension installs are allowed by default.
3151
3152 **Compatibility:** Firefox 60, Firefox ESR 60\
3153 **CCK2 Equivalent:** `permissions.install`\
3154 **Preferences Affected:** `xpinstall.enabled`
3155
3156 #### Windows (GPO)
3157 ```
3158 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Allow\1 = "https://example.org"
3159 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Allow\2 = "https://example.edu"
3160 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Default = 0x1 | 0x0
3161 ```
3162 #### Windows (Intune)
3163 OMA-URI:
3164 ```
3165 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Addons/InstallAddonsPermission_Allow
3166 ```
3167 Value (string):
3168 ```
3169 <enabled/>
3170 <data id="Permissions" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
3171 ```
3172 OMA-URI:
3173 ```
3174 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Addons/InstallAddonsPermission_Default
3175 ```
3176 Value (string):
3177 ```
3178 <enabled/>
3179 ```
3180 #### macOS
3181 ```
3182 <dict>
3183   <key>InstallAddonsPermission</key>
3184   <dict>
3185     <key>Allow</key>
3186     <array>
3187       <string>http://example.org</string>
3188       <string>http://example.edu</string>
3189     </array>
3190     <key>Default</key>
3191     <true/> | <false/>
3192   </dict>
3193 </dict>
3194 ```
3195 #### policies.json
3196 ```
3197 {
3198   "policies": {
3199     "InstallAddonsPermission": {
3200       "Allow": ["http://example.org/",
3201                 "http://example.edu/"],
3202       "Default": true | false
3203     }
3204   }
3205 }
3206 ```
3207 ### LegacyProfiles
3208 Disable the feature enforcing a separate profile for each installation.
3209
3210 If this policy set to true, Firefox will not try to create different profiles for installations of Firefox in different directories. This is the equivalent of the MOZ_LEGACY_PROFILES environment variable.
3211
3212 If this policy set to false, Firefox will create a new profile for each unique installation of Firefox.
3213
3214 This policy only work on Windows via GPO (not policies.json).
3215
3216 **Compatibility:** Firefox 70, Firefox ESR 68.2 (Windows only, GPO only)\
3217 **CCK2 Equivalent:** N/A\
3218 **Preferences Affected:** N/A
3219
3220 #### Windows (GPO)
3221 ```
3222 Software\Policies\Mozilla\Firefox\LegacyProfiles = = 0x1 | 0x0
3223 ```
3224 #### Windows (Intune)
3225 OMA-URI:
3226 ```
3227 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/LegacyProfiles
3228 ```
3229 Value (string):
3230 ```
3231 <enabled/> or <disabled/>
3232 ```
3233 ### LegacySameSiteCookieBehaviorEnabled
3234 Enable default legacy SameSite cookie behavior setting.
3235
3236 If this policy is set to true, it reverts all cookies to legacy SameSite behavior which means that cookies that don't explicitly specify a ```SameSite``` attribute are treated as if they were ```SameSite=None```.
3237
3238 **Compatibility:** Firefox 96\
3239 **CCK2 Equivalent:** N/A\
3240 **Preferences Affected:** `network.cookie.sameSite.laxByDefault`
3241
3242 #### Windows (GPO)
3243 ```
3244 Software\Policies\Mozilla\Firefox\LegacySameSiteCookieBehaviorEnabled = = 0x1 | 0x0
3245 ```
3246 #### Windows (Intune)
3247 OMA-URI:
3248 ```
3249 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/LegacySameSiteCookieBehaviorEnabled
3250 ```
3251 Value (string):
3252 ```
3253 <enabled/> or <disabled/>
3254 ```
3255 #### macOS
3256 ```
3257 <dict>
3258   <key>LegacySameSiteCookieBehaviorEnabled</key>
3259   <true/> | <false/>
3260 </dict>
3261 ```
3262 #### policies.json
3263 ```
3264 {
3265   "policies": {
3266     "LegacySameSiteCookieBehaviorEnabled": true | false
3267 }
3268 ```
3269 ### LegacySameSiteCookieBehaviorEnabledForDomainList
3270 Revert to legacy SameSite behavior for cookies on specified sites.
3271
3272 If this policy is set to true, cookies set for domains in this list will revert to legacy SameSite behavior which means that cookies that don't explicitly specify a ```SameSite``` attribute are treated as if they were ```SameSite=None```.
3273
3274 **Compatibility:** Firefox 96\
3275 **CCK2 Equivalent:** N/A\
3276 **Preferences Affected:** `network.cookie.sameSite.laxByDefault.disabledHosts`
3277
3278 #### Windows (GPO)
3279 ```
3280 Software\Policies\Mozilla\Firefox\LegacySameSiteCookieBehaviorEnabledForDomainList\1 = "example.org"
3281 Software\Policies\Mozilla\Firefox\LegacySameSiteCookieBehaviorEnabledForDomainList\2 = "example.edu"
3282 ```
3283 #### Windows (Intune)
3284 OMA-URI:
3285 ```
3286 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/LegacySameSiteCookieBehaviorEnabledForDomainList
3287 ```
3288 Value (string):
3289 ```
3290 <enabled/>
3291 <data id="LegacySameSiteCookieBehaviorEnabledForDomainList" value="1&#xF000;example.org&#xF000;2&#xF000;example.edu"/>
3292 ```
3293 #### macOS
3294 ```
3295 <dict>
3296   <key>LegacySameSiteCookieBehaviorEnabledForDomainList</key>
3297   <array>
3298     <string>example.org</string>
3299     <string>example.edu</string>
3300   </array>
3301 </dict>
3302 ```
3303 #### policies.json
3304 ```
3305 {
3306   "policies": {
3307     "LegacySameSiteCookieBehaviorEnabledForDomainList": ["example.org",
3308                                                          "example.edu"]
3309   }
3310 }
3311 ```
3312 ### LocalFileLinks
3313 Enable linking to local files by origin.
3314
3315 **Compatibility:** Firefox 68, Firefox ESR 68\
3316 **CCK2 Equivalent:** N/A\
3317 **Preferences Affected:** `capability.policy.localfilelinks.*`
3318
3319 #### Windows (GPO)
3320 ```
3321 Software\Policies\Mozilla\Firefox\LocalFileLinks\1 = "https://example.org"
3322 Software\Policies\Mozilla\Firefox\LocalFileLinks\2 = "https://example.edu"
3323 ```
3324 #### Windows (Intune)
3325 OMA-URI:
3326 ```
3327 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/LocalFileLinks
3328 ```
3329 Value (string):
3330 ```
3331 <enabled/>
3332 <data id="LocalFileLinks" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
3333 ```
3334 #### macOS
3335 ```
3336 <dict>
3337   <key>LocalFileLinks</key>
3338   <array>
3339     <string>http://example.org</string>
3340     <string>http://example.edu</string>
3341   </array>
3342 </dict>
3343 ```
3344 #### policies.json
3345 ```
3346 {
3347   "policies": {
3348     "LocalFileLinks": ["http://example.org/",
3349                        "http://example.edu/"]
3350   }
3351 }
3352 ```
3353 ### ManagedBookmarks
3354 Configures a list of bookmarks managed by an administrator that cannot be changed by the user.
3355
3356 The bookmarks are only added as a button on the personal toolbar. They are not in the bookmarks folder.
3357
3358 The syntax of this policy is exactly the same as the [Chrome ManagedBookmarks policy](https://cloud.google.com/docs/chrome-enterprise/policies/?policy=ManagedBookmarks). The schema is:
3359 ```
3360 {
3361  "items": {
3362   "id": "BookmarkType",
3363   "properties": {
3364    "children": {
3365     "items": {
3366      "$ref": "BookmarkType"
3367     },
3368     "type": "array"
3369    },
3370    "name": {
3371     "type": "string"
3372    },
3373    "toplevel_name": {
3374     "type": "string"
3375    },
3376    "url": {
3377     "type": "string"
3378    }
3379   },
3380   "type": "object"
3381  },
3382  "type": "array"
3383 }
3384 ```
3385 **Compatibility:** Firefox 83, Firefox ESR 78.5\
3386 **CCK2 Equivalent:** N/A\
3387 **Preferences Affected:** N/A
3388
3389 #### Windows (GPO)
3390 Software\Policies\Mozilla\Firefox\ManagedBookmarks (REG_MULTI_SZ) =
3391 ```
3392 [
3393   {
3394     "toplevel_name": "My managed bookmarks folder"
3395   },
3396   {
3397     "url": "example.com",
3398     "name": "Example"
3399   },
3400   {
3401     "name": "Mozilla links",
3402     "children": [
3403       {
3404         "url": "https://mozilla.org",
3405         "name": "Mozilla.org"
3406       },
3407       {
3408         "url": "https://support.mozilla.org/",
3409         "name": "SUMO"
3410       }
3411     ]
3412   }
3413 ]
3414 ```
3415 #### Windows (Intune)
3416 OMA-URI:
3417 ```
3418 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/ManagedBookmarks
3419 ```
3420 Value (string):
3421 ```
3422 <enabled/>
3423 <data id="JSON" value='
3424 [
3425   {
3426     "toplevel_name": "My managed bookmarks folder"
3427   },
3428   {
3429     "url": "example.com",
3430     "name": "Example"
3431   },
3432   {
3433     "name": "Mozilla links",
3434     "children": [
3435       {
3436         "url": "https://mozilla.org",
3437         "name": "Mozilla.org"
3438       },
3439       {
3440         "url": "https://support.mozilla.org/",
3441         "name": "SUMO"
3442       }
3443     ]
3444   }
3445 ]'/>
3446 ```
3447 #### macOS
3448 ```
3449 <dict>
3450   <key>ManagedBookmarks</key>
3451   <array>
3452     <dict>
3453       <key>toplevel_name</key>
3454       <string>My managed bookmarks folder</string>
3455       <dict>
3456         <key>url</key>
3457         <string>example.com</string>
3458         <key>name</key>
3459         <string>Example</string>
3460       </dict>
3461       <dict>
3462       <key>name</key>
3463       <string>Mozilla links</string>
3464       <key>children</key>
3465       <array>
3466         <dict>
3467           <key>url</key>
3468           <string>https://mozilla.org</string>
3469           <key>name</key>
3470           <string>Mozilla</string>
3471         </dict>
3472         <dict>
3473           <key>url</key>
3474           <string>https://support.mozilla.org/</string>
3475           <key>name</key>
3476           <string>SUMO</string>
3477         </dict>
3478       </array>
3479     </dict>
3480   </array>
3481 </dict>
3482 ```
3483 #### policies.json
3484 ```
3485 {
3486   "policies": {
3487     "ManagedBookmarks": [
3488       {
3489         "toplevel_name": "My managed bookmarks folder"
3490       },
3491       {
3492         "url": "example.com",
3493         "name": "Example"
3494       },
3495       {
3496         "name": "Mozilla links",
3497         "children": [
3498           {
3499             "url": "https://mozilla.org",
3500             "name": "Mozilla.org"
3501           },
3502           {
3503             "url": "https://support.mozilla.org/",
3504             "name": "SUMO"
3505           }
3506         ]
3507       }
3508     ]
3509   }
3510 }
3511 ```
3512 ### ManualAppUpdateOnly
3513
3514 Switch to manual updates only.
3515
3516 If this policy is enabled:
3517  1. The user will never be prompted to install updates
3518  2. Firefox will not check for updates in the background, though it will check automatically when an update UI is displayed (such as the one in the About dialog). This check will be used to show "Update to version X" in the UI, but will not automatically download the update or prompt the user to update in any other way.
3519  3. The update UI will work as expected, unlike when using DisableAppUpdate.
3520
3521 This policy is primarily intended for advanced end users, not for enterprises.
3522
3523 **Compatibility:** Firefox 87\
3524 **CCK2 Equivalent:** N/A\
3525 **Preferences Affected:** N/A
3526
3527 #### policies.json
3528 ```
3529 {
3530   "policies": {
3531     "ManualAppUpdateOnly": true | false
3532   }
3533 }
3534 ```
3535 ### NetworkPrediction
3536 Enable or disable network prediction (DNS prefetching).
3537
3538 **Compatibility:** Firefox 67, Firefox ESR 60.7\
3539 **CCK2 Equivalent:** N/A\
3540 **Preferences Affected:** `network.dns.disablePrefetch`, `network.dns.disablePrefetchFromHTTPS`
3541
3542 #### Windows (GPO)
3543 ```
3544 Software\Policies\Mozilla\Firefox\NetworkPrediction = 0x1 | 0x0
3545 ```
3546 #### Windows (Intune)
3547 OMA-URI:
3548 ```
3549 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NetworkPrediction
3550 ```
3551 Value (string):
3552 ```
3553 <enabled/> or <disabled/>
3554 ```
3555 #### macOS
3556 ```
3557 <dict>
3558   <key>NetworkPrediction</key>
3559   <true/> | <false/>
3560 </dict>
3561 ```
3562 #### policies.json
3563 ```
3564 {
3565   "policies": {
3566     "NetworkPrediction": true | false
3567 }
3568 ```
3569 ### NewTabPage
3570 Enable or disable the New Tab page.
3571
3572 **Compatibility:** Firefox 68, Firefox ESR 68\
3573 **CCK2 Equivalent:** N/A\
3574 **Preferences Affected:** `browser.newtabpage.enabled`
3575
3576 #### Windows (GPO)
3577 ```
3578 Software\Policies\Mozilla\Firefox\NewTabPage = 0x1 | 0x0
3579 ```
3580 #### Windows (Intune)
3581 OMA-URI:
3582 ```
3583 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NewTabPage
3584 ```
3585 Value (string):
3586 ```
3587 <enabled/> or <disabled/>
3588 ```
3589 #### macOS
3590 ```
3591 <dict>
3592   <key>NewTabPage</key>
3593   <true/> | <false/>
3594 </dict>
3595 ```
3596 #### policies.json
3597 ```
3598 {
3599   "policies": {
3600     "NewTabPage": true | false
3601 }
3602 ```
3603 ### NoDefaultBookmarks
3604 Disable the creation of default bookmarks.
3605
3606 This policy is only effective if the user profile has not been created yet.
3607
3608 **Compatibility:** Firefox 60, Firefox ESR 60\
3609 **CCK2 Equivalent:** `removeDefaultBookmarks`\
3610 **Preferences Affected:** N/A
3611
3612 #### Windows (GPO)
3613 ```
3614 Software\Policies\Mozilla\Firefox\NoDefaultBookmarks = 0x1 | 0x0
3615 ```
3616 #### Windows (Intune)
3617 OMA-URI:
3618 ```
3619 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NoDefaultBookmarks
3620 ```
3621 Value (string):
3622 ```
3623 <enabled/> or <disabled/>
3624 ```
3625 #### macOS
3626 ```
3627 <dict>
3628   <key>NoDefaultBookmarks</key>
3629   <true/> | <false/>
3630 </dict>
3631 ```
3632 #### policies.json
3633 ```
3634 {
3635   "policies": {
3636     "NoDefaultBookmarks": true | false
3637   }
3638 }
3639 ```
3640 ### OfferToSaveLogins
3641 Control whether or not Firefox offers to save passwords.
3642
3643 **Compatibility:** Firefox 60, Firefox ESR 60\
3644 **CCK2 Equivalent:** `dontRememberPasswords`\
3645 **Preferences Affected:** `signon.rememberSignons`
3646
3647 #### Windows (GPO)
3648 ```
3649 Software\Policies\Mozilla\Firefox\OfferToSaveLogins = 0x1 | 0x0
3650 ```
3651 #### Windows (Intune)
3652 OMA-URI:
3653 ```
3654 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OfferToSaveLogins
3655 ```
3656 Value (string):
3657 ```
3658 <enabled/> or <disabled/>
3659 ```
3660 #### macOS
3661 ```
3662 <dict>
3663   <key>OfferToSaveLogins</key>
3664   <true/> | <false/>
3665 </dict>
3666 ```
3667 #### policies.json
3668 ```
3669 {
3670   "policies": {
3671     "OfferToSaveLogins": true | false
3672   }
3673 }
3674 ```
3675 ### OfferToSaveLoginsDefault
3676 Sets the default value of signon.rememberSignons without locking it.
3677
3678 **Compatibility:** Firefox 70, Firefox ESR 60.2\
3679 **CCK2 Equivalent:** `dontRememberPasswords`\
3680 **Preferences Affected:** `signon.rememberSignons`
3681
3682 #### Windows (GPO)
3683 ```
3684 Software\Policies\Mozilla\Firefox\OfferToSaveLoginsDefault = 0x1 | 0x0
3685 ```
3686 #### Windows (Intune)
3687 OMA-URI:
3688 ```
3689 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OfferToSaveLoginsDefault
3690 ```
3691 Value (string):
3692 ```
3693 <enabled/> or <disabled/>
3694 ```
3695 #### macOS
3696 ```
3697 <dict>
3698   <key>OfferToSaveLoginsDefault</key>
3699   <true/> | <false/>
3700 </dict>
3701 ```
3702 #### policies.json
3703 ```
3704 {
3705   "policies": {
3706     "OfferToSaveLoginsDefault": true | false
3707   }
3708 }
3709 ```
3710 ### OverrideFirstRunPage
3711 Override the first run page. If the value is an empty string (""), the first run page is not displayed.
3712
3713 Starting with Firefox 83, Firefox ESR 78.5, you can also specify multiple URLS separated by a vertical bar (|).
3714
3715 **Compatibility:** Firefox 60, Firefox ESR 60\
3716 **CCK2 Equivalent:** `welcomePage`,`noWelcomePage`\
3717 **Preferences Affected:** `startup.homepage_welcome_url`
3718
3719 #### Windows (GPO)
3720 ```
3721 Software\Policies\Mozilla\Firefox\OverrideFirstRunPage = "http://example.org"
3722 ```
3723 #### Windows (Intune)
3724 OMA-URI:
3725 ```
3726 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OverrideFirstRunPage
3727 ```
3728 Value (string):
3729 ```
3730 <enabled/>
3731 <data id="OverridePage" value="https://example.com"/>
3732 ```
3733 #### macOS
3734 ```
3735 <dict>
3736   <key>OverrideFirstRunPage</key>
3737   <string>http://example.org</string>
3738 </dict>
3739 ```
3740 #### policies.json
3741 ```
3742 {
3743   "policies": {
3744     "OverrideFirstRunPage": "http://example.org"
3745   }
3746 }
3747 ```
3748 ### OverridePostUpdatePage
3749 Override the upgrade page. If the value is an empty string (""), no extra pages are displayed when Firefox is upgraded.
3750
3751 **Compatibility:** Firefox 60, Firefox ESR 60\
3752 **CCK2 Equivalent:** `upgradePage`,`noUpgradePage`\
3753 **Preferences Affected:** `startup.homepage_override_url`
3754
3755 #### Windows (GPO)
3756 ```
3757 Software\Policies\Mozilla\Firefox\OverridePostUpdatePage = "http://example.org"
3758 ```
3759 #### Windows (Intune)
3760 OMA-URI:
3761 ```
3762 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OverridePostUpdatePage
3763 ```
3764 Value (string):
3765 ```
3766 <enabled/>
3767 <data id="OverridePage" value="https://example.com"/>
3768 ```
3769 #### macOS
3770 ```
3771 <dict>
3772   <key>OverridePostUpdatePage</key>
3773   <string>http://example.org</string>
3774 </dict>
3775 ```
3776 #### policies.json
3777 ```
3778 {
3779   "policies": {
3780     "OverridePostUpdatePage": "http://example.org"
3781   }
3782 }
3783 ```
3784 ### PasswordManagerEnabled
3785 Remove access to the password manager via preferences and blocks about:logins on Firefox 70.
3786
3787 **Compatibility:** Firefox 70, Firefox ESR 60.2\
3788 **CCK2 Equivalent:** N/A\
3789 **Preferences Affected:** `pref.privacy.disable_button.view_passwords`
3790
3791 #### Windows (GPO)
3792 ```
3793 Software\Policies\Mozilla\Firefox\PasswordManagerEnabled = 0x1 | 0x0
3794 ```
3795 #### Windows (Intune)
3796 OMA-URI:
3797 ```
3798 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PasswordManagerEnabled
3799 ```
3800 Value (string):
3801 ```
3802 <enabled/> or <disabled/>
3803 ```
3804 #### macOS
3805 ```
3806 <dict>
3807   <key>PasswordManagerEnabled</key>
3808   <true/> | <false/>
3809 </dict>
3810 ```
3811 #### policies.json
3812 ```
3813 {
3814   "policies": {
3815     "PasswordManagerEnabled": true | false
3816   }
3817 }
3818 ```
3819 ### PDFjs
3820 Disable or configure PDF.js, the built-in PDF viewer.
3821
3822 If `Enabled` is set to false, the built-in PDF viewer is disabled.
3823
3824 If `EnablePermissions` is set to true, the built-in PDF viewer will honor document permissions like preventing the copying of text.
3825
3826 Note: DisableBuiltinPDFViewer has not been deprecated. You can either continue to use it, or switch to using PDFjs->Enabled to disable the built-in PDF viewer. This new permission was added because we needed a place for PDFjs->EnabledPermissions.
3827
3828 **Compatibility:** Firefox 77, Firefox ESR 68.9\
3829 **CCK2 Equivalent:** N/A\
3830 **Preferences Affected:** `pdfjs.diabled`, `pdfjs.enablePermissions`
3831
3832 #### Windows (GPO)
3833 ```
3834 Software\Policies\Mozilla\Firefox\PDFjs\Enabled = 0x1 | 0x0
3835 Software\Policies\Mozilla\Firefox\PDFjs\EnablePermissions = 0x1 | 0x0
3836 ```
3837 #### Windows (Intune)
3838 OMA-URI:
3839 ```
3840 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PDFjs/PDFjs_Enabled
3841 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PDFjs/PDFjs_EnablePermissions
3842 ```
3843 Value (string):
3844 ```
3845 <enabled/>or <disabled/>
3846 ```
3847 #### macOS
3848 ```
3849 <dict>
3850   <key>PDFjs</key>
3851   <dict>
3852     <key>Enabled</key>
3853     <true/> | <false/>
3854     <key>EnablePermissions</key>
3855     <true/> | <false/>
3856   </dict>
3857 </dict>
3858 ```
3859 #### policies.json
3860 ```
3861 {
3862   "policies": {
3863     "PDFjs": {
3864       "Enabled": true | false,
3865       "EnablePermissions": true | false
3866     }
3867   }
3868 }
3869 ```
3870 ### Permissions
3871 Set permissions associated with camera, microphone, location, notifications, autoplay, and virtual reality. Because these are origins, not domains, entries with unique ports must be specified separately. This explicitly means that it is not possible to add wildcards. See examples below.
3872
3873 `Allow` is a list of origins where the feature is allowed.
3874
3875 `Block` is a list of origins where the feature is not allowed.
3876
3877 `BlockNewRequests` determines whether or not new requests can be made for the feature.
3878
3879 `Locked` prevents the user from changing preferences for the feature.
3880
3881 `Default` specifies the default value for Autoplay. block-audio-video is not supported on Firefox ESR 68.
3882
3883 **Compatibility:** Firefox 62, Firefox ESR 60.2 (Autoplay added in Firefox 74, Firefox ESR 68.6, Autoplay Default/Locked added in Firefox 76, Firefox ESR 68.8, VirtualReality added in Firefox 80, Firefox ESR 78.2)\
3884 **CCK2 Equivalent:** N/A\
3885 **Preferences Affected:** `permissions.default.camera`, `permissions.default.microphone`, `permissions.default.geo`, `permissions.default.desktop-notification`, `media.autoplay.default`, `permissions.default.xr`
3886
3887 #### Windows (GPO)
3888 ```
3889 Software\Policies\Mozilla\Firefox\Permissions\Camera\Allow\1 = "https://example.org"
3890 Software\Policies\Mozilla\Firefox\Permissions\Camera\Allow\2 = "https://example.org:1234"
3891 Software\Policies\Mozilla\Firefox\Permissions\Camera\Block\1 = "https://example.edu"
3892 Software\Policies\Mozilla\Firefox\Permissions\Camera\BlockNewRequests = 0x1 | 0x0
3893 Software\Policies\Mozilla\Firefox\Permissions\Camera\Locked = 0x1 | 0x0
3894 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Allow\1 = "https://example.org"
3895 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Block\1 = "https://example.edu"
3896 Software\Policies\Mozilla\Firefox\Permissions\Microphone\BlockNewRequests = 0x1 | 0x0
3897 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Locked = 0x1 | 0x0
3898 Software\Policies\Mozilla\Firefox\Permissions\Location\Allow\1 = "https://example.org"
3899 Software\Policies\Mozilla\Firefox\Permissions\Location\Block\1 = "https://example.edu"
3900 Software\Policies\Mozilla\Firefox\Permissions\Location\BlockNewRequests = 0x1 | 0x0
3901 Software\Policies\Mozilla\Firefox\Permissions\Location\Locked = 0x1 | 0x0
3902 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Allow\1 = "https://example.org"
3903 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Block\1 = "https://example.edu"
3904 Software\Policies\Mozilla\Firefox\Permissions\Notifications\BlockNewRequests = 0x1 | 0x0
3905 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Locked = 0x1 | 0x0
3906 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Allow\1 = "https://example.org"
3907 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Block\1 = "https://example.edu"
3908 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Default = "allow-audio-video" | "block-audio" | "block-audio-video"
3909 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Locked = 0x1 | 0x0
3910 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\Allow\1 = "https://example.org"
3911 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\Block\1 = "https://example.edu"
3912 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\BlockNewRequests = 0x1 | 0x0
3913 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\Locked = 0x1 | 0x0
3914 ```
3915 #### Windows (Intune)
3916 OMA-URI:
3917 ```
3918 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Location/Location_BlockNewRequests
3919 ```
3920 Value (string):
3921 ```
3922 <enabled/> or <disabled/>
3923 ```
3924 OMA-URI:
3925 ```
3926 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Location/Location_Locked
3927 ```
3928 Value (string):
3929 ```
3930 <enabled/> or <disabled/>
3931 ```
3932 OMA-URI:
3933 ```
3934 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_Allow
3935 ```
3936 Value (string):
3937 ```
3938 <enabled/>
3939 <data id="Permissions" value="1&#xF000;https://example.org"/>
3940 ```
3941 OMA-URI:
3942 ```
3943 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_BlockNewRequests
3944 ```
3945 Value (string):
3946 ```
3947 <enabled/> or <disabled/>
3948 ```
3949 OMA-URI:
3950 ```
3951 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_Locked
3952 ```
3953 Value (string):
3954 ```
3955 <enabled/> or <disabled/>
3956 ```
3957 OMA-URI:
3958 ```
3959 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Allow
3960 ```
3961 Value (string):
3962 ```
3963 <enabled/>
3964 <data id="Permissions" value="1&#xF000;https://example.org"/>
3965 ```
3966 OMA-URI:
3967 ```
3968 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Block
3969 ```
3970 Value (string):
3971 ```
3972 <enabled/>
3973 <data id="Permissions" value="1&#xF000;https://example.edu"/>
3974 ```
3975 OMA-URI:
3976 ```
3977 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Default
3978 ```
3979 Value (string):
3980 ```
3981 <enabled/>
3982 <data id="Autoplay_Default" value="allow-audio-video | block-audio | block-audio-video"/>
3983 ```
3984 OMA-URI:
3985 ```
3986 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Locked
3987 ```
3988 Value (string):
3989 ```
3990 <enabled/> or <disabled/>
3991 ```
3992 OMA-URI:
3993 ```
3994 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_Allow
3995 ```
3996 Value (string):
3997 ```
3998 <enabled/>
3999 <data id="Permissions" value="1&#xF000;https://example.org"/>
4000 ```
4001 OMA-URI:
4002 ```
4003 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_Block
4004 ```
4005 Value (string):
4006 ```
4007 <enabled/>
4008 <data id="Permissions" value="1&#xF000;https://example.edu"/>
4009 ```
4010 OMA-URI:
4011 ```
4012 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_BlockNewRequests
4013 ```
4014 Value (string):
4015 ```
4016 <enabled/> or <disabled/>
4017 ```
4018 OMA-URI:
4019 ```
4020 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_Locked
4021 ```
4022 Value (string):
4023 ```
4024 <enabled/> or <disabled/>
4025 ```
4026 #### macOS
4027 ```
4028 <dict>
4029   <key>Permissions</key>
4030   <dict>
4031     <key>Camera</key>
4032     <dict>
4033       <key>Allow</key>
4034       <array>
4035         <string>https://example.org</string>
4036         <string>https://example.org:1234</string>
4037       </array>
4038       <key>Block</key>
4039       <array>
4040         <string>https://example.edu</string>
4041       </array>
4042       <key>BlockNewRequests</key>
4043       <true/> | <false/>
4044       <key>Locked</key>
4045       <true/> | <false/>
4046     </dict>
4047     <key>Microphone</key>
4048     <dict>
4049       <key>Allow</key>
4050       <array>
4051         <string>https://example.org</string>
4052       </array>
4053       <key>Block</key>
4054       <array>
4055         <string>https://example.edu</string>
4056       </array>
4057       <key>BlockNewRequests</key>
4058       <true/> | <false/>
4059       <key>Locked</key>
4060       <true/> | <false/>
4061     </dict>
4062     <key>Location</key>
4063     <dict>
4064       <key>Allow</key>
4065       <array>
4066         <string>https://example.org</string>
4067       </array>
4068       <key>Block</key>
4069       <array>
4070         <string>https://example.edu</string>
4071       </array>
4072       <key>BlockNewRequests</key>
4073       <true/> | <false/>
4074       <key>Locked</key>
4075       <true/> | <false/>
4076     </dict>
4077     <key>Notifications</key>
4078     <dict>
4079       <key>Allow</key>
4080       <array>
4081         <string>https://example.org</string>
4082       </array>
4083       <key>Block</key>
4084       <array>
4085         <string>https://example.edu</string>
4086       </array>
4087       <key>BlockNewRequests</key>
4088       <true/>
4089       <key>Locked</key>
4090       <true/>
4091     </dict>
4092     <key>Autoplay</key>
4093     <dict>
4094       <key>Allow</key>
4095       <array>
4096         <string>https://example.org</string>
4097       </array>
4098       <key>Block</key>
4099       <array>
4100         <string>https://example.edu</string>
4101       </array>
4102       <key>Default</key>
4103       <string>allow-audio-video | block-audio | block-audio-video</string>
4104       <key>Locked</key>
4105       <true/> | <false/>
4106     </dict>
4107   </dict>
4108 </dict>
4109 ```
4110 #### policies.json
4111 ```
4112 {
4113   "policies": {
4114     "Permissions": {
4115       "Camera": {
4116         "Allow": ["https://example.org","https://example.org:1234"],
4117         "Block": ["https://example.edu"],
4118         "BlockNewRequests": true | false,
4119         "Locked": true | false
4120       },
4121       "Microphone": {
4122         "Allow": ["https://example.org"],
4123         "Block": ["https://example.edu"],
4124         "BlockNewRequests": true | false,
4125         "Locked": true | false
4126       },
4127       "Location": {
4128         "Allow": ["https://example.org"],
4129         "Block": ["https://example.edu"],
4130         "BlockNewRequests": true | false,
4131         "Locked": true | false
4132       },
4133       "Notifications": {
4134         "Allow": ["https://example.org"],
4135         "Block": ["https://example.edu"],
4136         "BlockNewRequests": true | false,
4137         "Locked": true | false
4138       },
4139       "Autoplay": {
4140         "Allow": ["https://example.org"],
4141         "Block": ["https://example.edu"],
4142         "Default": "allow-audio-video" | "block-audio" | "block-audio-video",
4143         "Locked": true | false
4144       }
4145     }
4146   }
4147 }
4148 ```
4149 ### PictureInPicture
4150
4151 Enable or disable Picture-in-Picture as well as prevent the user from enabling or disabling it (Locked).
4152
4153 **Compatibility:** Firefox 78, Firefox ESR 78\
4154 **CCK2 Equivalent:** N/A\
4155 **Preferences Affected:** `media.videocontrols.picture-in-picture.video-toggle.enabled`
4156
4157 #### Windows (GPO)
4158 ```
4159 Software\Policies\Mozilla\Firefox\PictureInPicture\Enabled = 0x1 | 0x0
4160 Software\Policies\Mozilla\Firefox\PictureInPicture\Locked = 0x1 | 0x0
4161
4162 ```
4163 #### Windows (Intune)
4164 OMA-URI:
4165 ```
4166 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PictureInPicture/PictureInPicture_Enabled
4167 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PictureInPicture/PictureInPicture_Locked
4168 ```
4169 Value (string):
4170 ```
4171 <enabled/> or <disabled/>
4172 ```
4173 #### macOS
4174 ```
4175 <dict>
4176   <key>PictureInPicture</key>
4177   <dict>
4178     <key>Enabled</key>
4179     <true/> | <false/>
4180     <key>Locked</key>
4181     <true/> | <false/>
4182   </dict>
4183 </dict>
4184 ```
4185 #### policies.json
4186 ```
4187 {
4188   "policies": {
4189     "PictureInPicture": {
4190       "Enabled": true | false,
4191       "Locked": true | false
4192     }
4193   }
4194 }
4195 ```
4196 ### PopupBlocking
4197 Configure the default pop-up window policy as well as origins for which pop-up windows are allowed.
4198
4199 `Allow` is a list of origins where popup-windows are allowed.
4200
4201 `Default` determines whether or not pop-up windows are allowed by default.
4202
4203 `Locked` prevents the user from changing pop-up preferences.
4204
4205 **Compatibility:** Firefox 60, Firefox ESR 60\
4206 **CCK2 Equivalent:** `permissions.popup`\
4207 **Preferences Affected:** `dom.disable_open_during_load`
4208
4209 #### Windows (GPO)
4210 ```
4211 Software\Policies\Mozilla\Firefox\PopupBlocking\Allow\1 = "https://example.org"
4212 Software\Policies\Mozilla\Firefox\PopupBlocking\Allow\2 = "https://example.edu"
4213 Software\Policies\Mozilla\Firefox\PopupBlocking\Default = 0x1 | 0x0
4214 Software\Policies\Mozilla\Firefox\PopupBlocking\Locked = 0x1 | 0x0
4215 ```
4216 #### Windows (Intune)
4217 OMA-URI:
4218 ```
4219 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Allow
4220 ```
4221 Value (string):
4222 ```
4223 <enabled/>
4224 <data id="Permissions" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
4225 ```
4226 OMA-URI:
4227 ```
4228 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Default
4229 ```
4230 Value (string):
4231 ```
4232 <enabled/> or <disabled/>
4233 ```
4234 OMA-URI:
4235 ```
4236 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Locked
4237 ```
4238 Value (string):
4239 ```
4240 <enabled/> or <disabled/>
4241 ```
4242 #### macOS
4243 ```
4244 <dict>
4245   <key>PopupBlocking</key>
4246   <dict>
4247     <key>Allow</key>
4248     <array>
4249       <string>http://example.org</string>
4250       <string>http://example.edu</string>
4251     </array>
4252     <key>Default</key>
4253     <true/> | <false/>
4254     <key>Locked</key>
4255     <true/> | <false/>
4256   </dict>
4257 </dict>
4258 ```
4259 #### policies.json
4260 ```
4261 {
4262   "policies": {
4263     "PopupBlocking": {
4264       "Allow": ["http://example.org/",
4265                 "http://example.edu/"],
4266       "Default": true | false,
4267       "Locked": true | false
4268     }
4269   }
4270 }
4271 ```
4272 ### Preferences
4273 Set and lock preferences.
4274
4275 **NOTE** On Windows, in order to use this policy, you must clear all settings in the old **Preferences (Deprecated)** section.
4276
4277 Previously you could only set and lock a subset of preferences. Starting with Firefox 81 and Firefox ESR 78.3 you can set many more preferences. You can also set default preferences, user preferences and you can clear preferences.
4278
4279 Preferences that start with the following prefixes are supported:
4280 ```
4281 accessibility.
4282 app.update.* (Firefox 86, Firefox 78.8)
4283 browser.
4284 datareporting.policy.
4285 dom.
4286 extensions.
4287 general.autoScroll (Firefox 83, Firefox ESR 78.5)
4288 general.smoothScroll (Firefox 83, Firefox ESR 78.5)
4289 geo.
4290 gfx.
4291 intl.
4292 keyword.enabled (Firefox 95, Firefox ESR 91.4)
4293 layers.
4294 layout.
4295 media.
4296 network.
4297 pdfjs. (Firefox 84, Firefox ESR 78.6)
4298 places.
4299 print.
4300 signon. (Firefox 83, Firefox ESR 78.5)
4301 spellchecker. (Firefox 84, Firefox ESR 78.6)
4302 toolkit.legacyUserProfileCustomizations.stylesheets (Firefox 95, Firefox ESR 91.4)
4303 ui.
4304 widget.
4305 ```
4306 as well as the following security preferences:
4307 | Preference | Type | Default
4308 | --- | --- | ---
4309 | security.default_personal_cert | string | Ask Every Time
4310 | &nbsp;&nbsp;&nbsp;&nbsp;If set to Select Automatically, Firefox automatically chooses the default personal certificate.
4311 | security.insecure_connection_text.enabled | bool | false
4312 | &nbsp;&nbsp;&nbsp;&nbsp;If set to true, adds the words "Not Secure" for insecure sites.
4313 | security.insecure_connection_text.pbmode.enabled | bool | false
4314 | &nbsp;&nbsp;&nbsp;&nbsp;If set to true, adds the words "Not Secure" for insecure sites in private browsing.
4315 | security.insecure_field_warning.contextual.enabled | bool | true
4316 | &nbsp;&nbsp;&nbsp;&nbsp;If set to false, remove the warning for inscure login fields.
4317 | security.mixed_content.block_active_content | boolean | true
4318 | &nbsp;&nbsp;&nbsp;&nbsp;If false, mixed active content (HTTP and HTTPS) is not blocked.
4319 | security.osclientcerts.autoload | boolean | false
4320 | &nbsp;&nbsp;&nbsp;&nbsp;If true, client certificates are loaded from the operating system certificate store.
4321 | security.ssl.errorReporting.enabled | boolean | true
4322 | &nbsp;&nbsp;&nbsp;&nbsp;If false, SSL errors cannot be sent to Mozilla.
4323 | security.tls.enable_0rtt_data | boolean | true
4324 | &nbsp;&nbsp;&nbsp;&nbsp;If false, TLS early data is turned off (Firefox 93, Firefox 91.2, Firefox 78.15).
4325 | security.tls.hello_downgrade_check | boolean | true
4326 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the TLS 1.3 downgrade check is disabled.
4327 | security.tls.version.enable-deprecated | boolean | false
4328 | &nbsp;&nbsp;&nbsp;&nbsp;If true, browser will accept TLS 1.0. and TLS 1.1 (Firefox 86, Firefox 78.8).
4329 | security.warn_submit_secure_to_insecure | boolean | true
4330 | &nbsp;&nbsp;&nbsp;&nbsp;If false, no warning is shown when submitting a form from https to http.
4331 &nbsp;
4332
4333 Using the preference as the key, set the `Value` to the corresponding preference value.
4334
4335 `Status` can be "default", "locked", "user" or "clear"
4336
4337 * `"default"`: Read/Write: Settings appear as default even if factory default differs.
4338 * `"locked"`: Read-Only: Settings appear as default even if factory default differs.
4339 * `"user"`: Read/Write: Settings appear as changed if it differs from factory default.
4340 * `"clear"`: Read/Write: `Value` has no effect. Resets to factory defaults on each startup.
4341
4342 `"user"` preferences persist across invocations of Firefox. It is the equivalent of a user setting the preference. They are most useful when a preference is needed very early in startup so it can't be set as default by policy. An example of this is ```toolkit.legacyUserProfileCustomizations.stylesheets```.
4343
4344 `"user"` preferences persist even if the policy is removed, so if you need to remove them, you should use the clear policy.
4345
4346 See the examples below for more detail.
4347
4348 IMPORTANT: Make sure you're only setting a particular preference using this mechanism and not some other way.
4349
4350 Status
4351 **Compatibility:** Firefox 81, Firefox ESR 78.3\
4352 **CCK2 Equivalent:** `preferences`\
4353 **Preferences Affected:** Many
4354
4355 #### Windows (GPO)
4356 Software\Policies\Mozilla\Firefox\Preferences (REG_MULTI_SZ) =
4357 ```
4358 {
4359   "accessibility.force_disabled": {
4360     "Value": 1,
4361     "Status": "default"
4362   },
4363   "browser.cache.disk.parent_directory": {
4364     "Value": "SOME_NATIVE_PATH",
4365     "Status": "user"
4366   },
4367   "browser.tabs.warnOnClose": {
4368     "Value": false,
4369     "Status": "locked"
4370   }
4371 }
4372 ```
4373 #### Windows (Intune)
4374 OMA-URI:
4375 ```
4376 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Preferences
4377 ```
4378 Value (string):
4379 ```
4380 <enabled/>
4381 <data id="JSON" value='
4382 {
4383   "accessibility.force_disabled": {
4384     "Value": 1,
4385     "Status": "default"
4386   },
4387   "browser.cache.disk.parent_directory": {
4388     "Value": "SOME_NATIVE_PATH",
4389     "Status": "user"
4390   },
4391   "browser.tabs.warnOnClose": {
4392     "Value": false,
4393     "Status": "locked"
4394   }
4395 }'/>
4396 ```
4397 #### macOS
4398 ```
4399 <dict>
4400   <key>Preferences</key>
4401   <dict>
4402     <key>accessibility.force_disabled</key>
4403     <dict>
4404       <key>Value</key>
4405       <integer>1</integer>
4406       <key>Status</key>
4407       <string>default</string>
4408     </dict>
4409     <key>browser.cache.disk.parent_directory</key>
4410     <dict>
4411       <key>Value</key>
4412       <string>SOME_NATIVE_PATH</string>
4413       <key>Status</key>
4414       <string>user</string>
4415     </dict>
4416     <key>browser.tabs.warnOnClose</key>
4417     <dict>
4418       <key>Value</key>
4419       <false/>
4420       <key>Status</key>
4421       <string>locked</string>
4422     </dict>
4423   </dict>
4424 </dict>
4425 ```
4426 #### policies.json
4427 ```
4428 {
4429   "policies": {
4430     "Preferences": {
4431       "accessibility.force_disabled": {
4432         "Value": 1,
4433         "Status": "default"
4434       },
4435       "browser.cache.disk.parent_directory": {
4436         "Value": "SOME_NATIVE_PATH",
4437         "Status": "user"
4438       },
4439       "browser.tabs.warnOnClose": {
4440         "Value": false,
4441         "Status": "locked"
4442       }
4443     }
4444   }
4445 }
4446 ```
4447 ### Preferences (Deprecated)
4448 Set and lock certain preferences.
4449
4450 **Compatibility:** See below\
4451 **CCK2 Equivalent:** `preferences`\
4452 **Preferences Affected:** See below
4453
4454 | Preference | Type | Compatibility | Default
4455 | --- | --- | --- | ---
4456 | accessibility.force_disabled | integer | Firefox 70, Firefox ESR 68.2 | 0
4457 | &nbsp;&nbsp;&nbsp;&nbsp;If set to 1, platform accessibility is disabled.
4458 | app.update.auto (Deprecated - Switch to AppAutoUpdate policy) | boolean | Firefox 68, Firefox ESR 68 | true
4459 | &nbsp;&nbsp;&nbsp;&nbsp;If false, Firefox doesn't automatically install update.
4460 | browser.bookmarks.autoExportHTML | boolean | Firefox 70, Firefox ESR 68.2 | false
4461 | &nbsp;&nbsp;&nbsp;&nbsp;If true, bookmarks are exported on shutdown.
4462 | browser.bookmarks.file | string | Firefox 70, Firefox ESR 68.2 | N/A
4463 | &nbsp;&nbsp;&nbsp;&nbsp;If set, the name of the file where bookmarks are exported and imported.
4464 | browser.bookmarks.restore_default_bookmarks | boolean | Firefox 70, Firefox ESR 68.2 | N/A
4465 | &nbsp;&nbsp;&nbsp;&nbsp;If true, bookmarks are restored to their defaults.
4466 | browser.cache.disk.enable | boolean | Firefox 68, Firefox ESR 68 | true
4467 | &nbsp;&nbsp;&nbsp;&nbsp;If false, don't store cache on the hard drive.
4468 | ~browser.cache.disk.parent_directory~ | string | Firefox 68, Firefox ESR 68 | Profile temporary directory
4469 | &nbsp;&nbsp;&nbsp;&nbsp;~If set, changes the location of the disk cache.~ This policy doesn't work. It's being worked on.
4470 | browser.fixup.dns_first_for_single_words | boolean | Firefox 68, Firefox ESR 68 | false
4471 | &nbsp;&nbsp;&nbsp;&nbsp;If true, single words are sent to DNS, not directly to search.
4472 | browser.newtabpage.activity-stream.default.sites | string | Firefox 72, ESR 68.4 | Locale dependent
4473 | &nbsp;&nbsp;&nbsp;&nbsp;If set, a list of URLs to use as the default top sites on the new tab page. Due to Firefox limitations, search sites can't be added. In addition, sites with the same name but different TLDs (example.org/example.com) will not display properly.
4474 | browser.places.importBookmarksHTML | boolean | Firefox 70, Firefox ESR 68.2
4475 | &nbsp;&nbsp;&nbsp;&nbsp;If true, bookmarks are always imported on startup.
4476 | browser.safebrowsing.phishing.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
4477 | &nbsp;&nbsp;&nbsp;&nbsp;If false, phishing protection is not enabled (Not recommended)
4478 | browser.safebrowsing.malware.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
4479 | &nbsp;&nbsp;&nbsp;&nbsp;If false, malware protection is not enabled (Not recommended)
4480 | browser.search.update | boolean | Firefox 68, Firefox ESR 68 | true
4481 | &nbsp;&nbsp;&nbsp;&nbsp;If false, updates for search engines are not checked.
4482 | browser.slowStartup.notificationDisabled | boolean | Firefox 70, Firefox ESR 68.2 | false
4483 | &nbsp;&nbsp;&nbsp;&nbsp;If true, a notification isn't shown if startup is slow.
4484 | browser.tabs.warnOnClose | boolean | Firefox 68, Firefox ESR 68 | true
4485 | &nbsp;&nbsp;&nbsp;&nbsp;If false, there is no warning when the browser is closed.
4486 | browser.taskbar.previews.enable | boolean | Firefox 70, Firefox ESR 68.2 (Windows only) | false
4487 | &nbsp;&nbsp;&nbsp;&nbsp;If true, tab previews are shown in the Windows taskbar.
4488 | browser.urlbar.suggest.bookmark | boolean | Firefox 68, Firefox ESR 68 | true
4489 | &nbsp;&nbsp;&nbsp;&nbsp;If false, bookmarks aren't suggested when typing in the URL bar.
4490 | browser.urlbar.suggest.history | boolean | Firefox 68, Firefox ESR 68 | true
4491 | &nbsp;&nbsp;&nbsp;&nbsp;If false, history isn't suggested when typing in the URL bar.
4492 | browser.urlbar.suggest.openpage | boolean | Firefox 68, Firefox ESR 68 | true
4493 | &nbsp;&nbsp;&nbsp;&nbsp;If false, open tabs aren't suggested when typing in the URL bar.
4494 | datareporting.policy.dataSubmissionPolicyBypassNotification | boolean | Firefox 68, Firefox ESR 68 | false
4495 | &nbsp;&nbsp;&nbsp;&nbsp;If true, don't show the privacy policy tab on first run.
4496 | dom.allow_scripts_to_close_windows | boolean | Firefox 70, Firefox ESR 68.2 | false
4497 | &nbsp;&nbsp;&nbsp;&nbsp;If false, web page can close windows.
4498 | dom.disable_window_flip | boolean | Firefox 68, Firefox ESR 68 | true
4499 | &nbsp;&nbsp;&nbsp;&nbsp;If false, web pages can focus and activate windows.
4500 | dom.disable_window_move_resize | boolean | Firefox 68, Firefox ESR 68 | false
4501 | &nbsp;&nbsp;&nbsp;&nbsp;If true, web pages can't move or resize windows.
4502 | dom.event.contextmenu.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4503 | &nbsp;&nbsp;&nbsp;&nbsp;If false, web pages can't override context menus.
4504 | dom.keyboardevent.keypress.hack.dispatch_non_printable_keys.addl | string | Firefox 68, Firefox ESR 68 | N/A
4505 | &nbsp;&nbsp;&nbsp;&nbsp;See https://support.mozilla.org/en-US/kb/dom-events-changes-introduced-firefox-66
4506 | dom.keyboardevent.keypress.hack.use_legacy_keycode_and_charcode.addl | string | Firefox 68, Firefox ESR 68 | N/A
4507 | &nbsp;&nbsp;&nbsp;&nbsp;See https://support.mozilla.org/en-US/kb/dom-events-changes-introduced-firefox-66
4508 | dom.xmldocument.load.enabled | boolean | Firefox ESR 68.5 | true.
4509 | &nbsp;&nbsp;&nbsp;&nbsp;If false, XMLDocument.load is not available.
4510 | dom.xmldocument.async.enabled | boolean | Firefox ESR 68.5 | true
4511 | &nbsp;&nbsp;&nbsp;&nbsp;If false, XMLDocument.async is not available.
4512 | extensions.blocklist.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
4513 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the extensions blocklist is not used (Not recommended)
4514 | extensions.getAddons.showPane | boolean | Firefox 68, Firefox ESR 68 | N/A
4515 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the Recommendations tab is not displayed in the Add-ons Manager.
4516 | extensions.htmlaboutaddons.recommendations.enabled | boolean | Firefox 72, Firefox ESR 68.4 | true
4517 | &nbsp;&nbsp;&nbsp;&nbsp;If false, recommendations are not shown on the Extensions tab in the Add-ons Manager.
4518 | geo.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
4519 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the geolocation API is disabled. | Language dependent
4520 | intl.accept_languages | string | Firefox 70, Firefox ESR 68.2
4521 | &nbsp;&nbsp;&nbsp;&nbsp;If set, preferred language for web pages.
4522 | media.eme.enabled (Deprecated - Switch to EncryptedMediaExtensions policy) | boolean | Firefox 70, Firefox ESR 68.2 | true
4523 | &nbsp;&nbsp;&nbsp;&nbsp;If false, Encrypted Media Extensions are not enabled.
4524 | media.gmp-gmpopenh264.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4525 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the OpenH264  plugin is not downloaded.
4526 | media.gmp-widevinecdm.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4527 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the Widevine plugin is not downloaded.
4528 | media.peerconnection.enabled | boolean | Firefox 72, Firefox ESR 68.4 | true
4529 | &nbsp;&nbsp;&nbsp;&nbsp;If false, WebRTC is disabled
4530 | media.peerconnection.ice.obfuscate_host_addresses.whitelist (Deprecated) | string | Firefox 72, Firefox ESR 68.4 | N/A
4531 | &nbsp;&nbsp;&nbsp;&nbsp;If set, a list of domains for which mDNS hostname obfuscation is
4532 disabled
4533 | media.peerconnection.ice.obfuscate_host_addresses.blocklist | string | Firefox 79, Firefox ESR 78.1 | N/A
4534 | &nbsp;&nbsp;&nbsp;&nbsp;If set, a list of domains for which mDNS hostname obfuscation is
4535 disabled
4536 | network.dns.disableIPv6 | boolean | Firefox 68, Firefox ESR 68 | false
4537 | &nbsp;&nbsp;&nbsp;&nbsp;If true, IPv6 DNS lokoups are disabled.
4538 | network.IDN_show_punycode | boolean | Firefox 68, Firefox ESR 68 | false
4539 | &nbsp;&nbsp;&nbsp;&nbsp;If true, display the punycode version of internationalized domain names.
4540 | places.history.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4541 | &nbsp;&nbsp;&nbsp;&nbsp;If false, history is not enabled.
4542 | print.save_print_settings | boolean | Firefox 70, Firefox ESR 68.2 | true
4543 | &nbsp;&nbsp;&nbsp;&nbsp;If false, print settings are not saved between jobs.
4544 | security.default_personal_cert | string | Firefox 68, Firefox ESR 68 | Ask Every Time
4545 | &nbsp;&nbsp;&nbsp;&nbsp;If set to Select Automatically, Firefox automatically chooses the default personal certificate.
4546 | security.mixed_content.block_active_content | boolean | Firefox 70, Firefox ESR 68.2 | true
4547 | &nbsp;&nbsp;&nbsp;&nbsp;If false, mixed active content (HTTP and HTTPS) is not blocked.
4548 | security.osclientcerts.autoload | boolean | Firefox 72 (Windows), Firefox 75 (macOS)  | false
4549 | &nbsp;&nbsp;&nbsp;&nbsp;If true, client certificates are loaded from the operating system certificate store.
4550 | security.ssl.errorReporting.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4551 | &nbsp;&nbsp;&nbsp;&nbsp;If false, SSL errors cannot be sent to Mozilla.
4552 | security.tls.hello_downgrade_check | boolean | Firefox 72, Firefox ESR 68.4 | true
4553 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the TLS 1.3 downgrade check is disabled.
4554 | ui.key.menuAccessKeyFocuses | boolean | Firefox 68, Firefox ESR 68 | true
4555 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the Alt key doesn't show the menubar on Windows.
4556 | widget.content.gtk-theme-override | string | Firefox 72, Firefox ESR 68.4 (Linux only) | N/A
4557 | &nbsp;&nbsp;&nbsp;&nbsp;If set, overrides the GTK theme for widgets.
4558 #### Windows (GPO)
4559 ```
4560 Software\Policies\Mozilla\Firefox\Preferences\boolean_preference_name = 0x1 | 0x0
4561 Software\Policies\Mozilla\Firefox\Preferences\string_preference_name = "string_value"
4562 ```
4563 #### Windows (Intune)
4564 OMA-URI: (periods are replaced by underscores)
4565 ```
4566 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Preferences/boolean_preference_name
4567 ```
4568 Value (string):
4569 ```
4570 <enabled/> or <disabled/>
4571 ```
4572 OMA-URI: (periods are replaced by underscores)
4573 ```
4574 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Preferences/string_preference_name
4575 ```
4576 Value (string):
4577 ```
4578 <enabled/>
4579 <data id="Preferences_String" value="string_value"/>
4580 ```
4581 #### macOS
4582 ```
4583 <dict>
4584   <key>Preferences</key>
4585   <dict>
4586     <key>boolean_preference_name</key>
4587     <true/> | <false/>
4588     <key>string_preference_name</key>
4589     <string>string_value</string>
4590   </dict>
4591 </dict>
4592 ```
4593 #### policies.json
4594 ```
4595 {
4596   "policies": {
4597     "Preferences": {
4598       "boolean_preference_name": true | false,
4599       "string_preference_name": "string_value"
4600     }
4601   }
4602 }
4603 ```
4604 ### PrimaryPassword
4605 Require or prevent using a primary (formerly master) password.
4606
4607 If this value is true, a primary password is required. If this value is false, it works the same as if [`DisableMasterPasswordCreation`](#disablemasterpasswordcreation) was true and removes the primary password functionality.
4608
4609 If both DisableMasterPasswordCreation and PrimaryPassword are used, DisableMasterPasswordCreation takes precedent.
4610
4611 **Compatibility:** Firefox 79, Firefox ESR 78.1\
4612 **CCK2 Equivalent:** `noMasterPassword`\
4613 **Preferences Affected:** N/A
4614
4615 #### Windows (GPO)
4616 ```
4617 Software\Policies\Mozilla\Firefox\PrimaryPassword = 0x1 | 0x0
4618 ```
4619 #### Windows (Intune)
4620 OMA-URI:
4621 ```
4622 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PrimaryPassword
4623 ```
4624 Value (string):
4625 ```
4626 <enabled/> or <disabled/>
4627 ```
4628 #### macOS
4629 ```
4630 <dict>
4631   <key>PrimaryPassword</key>
4632   <true/> | <false/>
4633 </dict>
4634 ```
4635 #### policies.json
4636 ```
4637 {
4638   "policies": {
4639     "PrimaryPassword": true | false
4640   }
4641 }
4642 ```
4643 ### PromptForDownloadLocation
4644 Ask where to save each file before downloading.
4645
4646 **Compatibility:** Firefox 68, Firefox ESR 68\
4647 **CCK2 Equivalent:** N/A\
4648 **Preferences Affected:** `browser.download.useDownloadDir`
4649
4650 #### Windows (GPO)
4651 ```
4652 Software\Policies\Mozilla\Firefox\PromptForDownloadLocation = 0x1 | 0x0
4653 ```
4654 #### Windows (Intune)
4655 OMA-URI:
4656 ```
4657 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PromptForDownloadLocation
4658 ```
4659 Value (string):
4660 ```
4661 <enabled/> or <disabled/>
4662 ```
4663 #### macOS
4664 ```
4665 <dict>
4666   <key>PromptForDownloadLocation</key>
4667   <true/> | <false/>
4668 </dict>
4669 ```
4670 #### policies.json
4671 ```
4672 {
4673   "policies": {
4674     "PromptForDownloadLocation": true | false
4675   }
4676 }
4677 ```
4678 ### Proxy
4679 Configure proxy settings. These settings correspond to the connection settings in Firefox preferences.
4680 To specify ports, append them to the hostnames with a colon (:).
4681
4682 `Mode` is the proxy method being used.
4683
4684 `Locked` is whether or not proxy settings can be changed.
4685
4686 `HTTPProxy` is the HTTP proxy server.
4687
4688 `UseHTTPProxyForAllProtocols` is whether or not the HTTP proxy should be used for all other proxies.
4689
4690 `SSLProxy` is the SSL proxy server.
4691
4692 `FTPProxy` is the FTP proxy server.
4693
4694 `SOCKSProxy` is the SOCKS proxy server
4695
4696 `SOCKSVersion` is the SOCKS version (4 or 5)
4697
4698 `Passthrough` is list of hostnames or IP addresses that will not be proxied. Use `<local>` to bypass proxying for all hostnames which do not contain periods.
4699
4700 `AutoConfigURL` is a  URL for proxy configuration (only used if Mode is autoConfig).
4701
4702 `AutoLogin` means do not prompt for authentication if password is saved.
4703
4704 `UseProxyForDNS` to use proxy DNS when using SOCKS v5.
4705
4706 **Compatibility:** Firefox 60, Firefox ESR 60\
4707 **CCK2 Equivalent:** `networkProxy*`\
4708 **Preferences Affected:** `network.proxy.type`, `network.proxy.autoconfig_url`, `network.proxy.socks_remote_dns`, `signon.autologin.proxy`, `network.proxy.socks_version`, `network.proxy.no_proxies_on`, `network.proxy.share_proxy_settings`, `network.proxy.http`, `network.proxy.http_port`, `network.proxy.ftp`, `network.proxy.ftp_port`, `network.proxy.ssl`, `network.proxy.ssl_port`, `network.proxy.socks`, `network.proxy.socks_port`
4709
4710 #### Windows (GPO)
4711 ```
4712 Software\Policies\Mozilla\Firefox\Proxy\Mode = "none" | "system" | "manual" | "autoDetect" | "autoConfig"
4713 Software\Policies\Mozilla\Firefox\Proxy\Locked = 0x1 | 0x0
4714 Software\Policies\Mozilla\Firefox\=Proxy\HTTPProxy = https://httpproxy.example.com
4715 Software\Policies\Mozilla\Firefox\Proxy\UseHTTPProxyForAllProtocols = 0x1 | 0x0
4716 Software\Policies\Mozilla\Firefox\Proxy\SSLProxy = https://sslproxy.example.com
4717 Software\Policies\Mozilla\Firefox\Proxy\FTPProxy = https://ftpproxy.example.com
4718 Software\Policies\Mozilla\Firefox\Proxy\SOCKSProxy = https://socksproxy.example.com
4719 Software\Policies\Mozilla\Firefox\Proxy\SOCKSVersion = 0x4 | 0x5
4720 Software\Policies\Mozilla\Firefox\Proxy\Passthrough = <local>
4721 Software\Policies\Mozilla\Firefox\Proxy\AutoConfigURL = URL_TO_AUTOCONFIG
4722 Software\Policies\Mozilla\Firefox\Proxy\AutoLogin = 0x1 | 0x0
4723 Software\Policies\Mozilla\Firefox\Proxy\UseProxyForDNS = 0x1 | 0x0
4724 ```
4725 #### Windows (Intune)
4726 OMA-URI:
4727 ```
4728 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Proxy
4729 ```
4730 Value (string):
4731 ```
4732 <enabled/>
4733 <data id="ProxyLocked" value="true | false"/>
4734 <data id="ConnectionType" value="none | system | manual | autoDetect | autoConfig"/>
4735 <data id="HTTPProxy" value="https://httpproxy.example.com"/>
4736 <data id="UseHTTPProxyForAllProtocols" value="true | false"/>
4737 <data id="SSLProxy" value="https://sslproxy.example.com"/>
4738 <data id="FTPProxy" value="https://ftpproxy.example.com"/>
4739 <data id="SOCKSProxy" value="https://socksproxy.example.com"/>
4740 <data id="SOCKSVersion" value="4 | 5"/>
4741 <data id="AutoConfigURL" value="URL_TO_AUTOCONFIG"/>
4742 <data id="Passthrough" value="<local>"/>
4743 <data id="AutoLogin" value="true | false"/>
4744 <data id="UseProxyForDNS" value="true | false"/>
4745 ```
4746 #### macOS
4747 ```
4748 <dict>
4749   <key>Proxy</key>
4750   <dict>
4751     <key>Mode</key>
4752     <string>none | system | manual | autoDetect | autoConfig</string>
4753     <key>Locked</key>
4754     <true> | </false>
4755     <key>HTTPProxy</key>
4756     <string>https://httpproxy.example.com</string>
4757     <key>UseHTTPProxyForAllProtocols</key>
4758     <true> | </false>
4759     <key>SSLProxy</key>
4760     <string>https://sslproxy.example.com</string>
4761     <key>FTPProxy</key>
4762     <string>https://ftpproxy.example.com</string>
4763     <key>SOCKSProxy</key>
4764     <string>https://socksproxy.example.com</string>
4765     <key>SOCKSVersion</key>
4766     <string>4 | 5</string>
4767     <key>Passthrough</key>
4768     <string>&lt;local>&gt;</string>
4769     <key>AutoConfigURL</key>
4770     <string>URL_TO_AUTOCONFIG</string>
4771     <key>AutoLogin</key>
4772     <true> | </false>
4773     <key>UseProxyForDNS</key>
4774     <true> | </false>
4775   </dict>
4776 </dict>
4777 ```
4778 #### policies.json
4779 ```
4780 {
4781   "policies": {
4782     "Proxy": {
4783       "Mode": "none" | "system" | "manual" | "autoDetect" | "autoConfig",
4784       "Locked": true | false,
4785       "HTTPProxy": "hostname",
4786       "UseHTTPProxyForAllProtocols": true | false,
4787       "SSLProxy": "hostname",
4788       "FTPProxy": "hostname",
4789       "SOCKSProxy": "hostname",
4790       "SOCKSVersion": 4 | 5,
4791       "Passthrough": "<local>",
4792       "AutoConfigURL": "URL_TO_AUTOCONFIG",
4793       "AutoLogin": true | false,
4794       "UseProxyForDNS": true | false
4795     }
4796   }
4797 }
4798 ```
4799 ### RequestedLocales
4800 Set the the list of requested locales for the application in order of preference. It will cause the corresponding language pack to become active.
4801
4802 Note: For Firefox 68, this can now be a string so that you can specify an empty value.
4803
4804 **Compatibility:** Firefox 64, Firefox ESR 60.4, Updated in Firefox 68, Firefox ESR 68\
4805 **CCK2 Equivalent:** N/A\
4806 **Preferences Affected:** N/A
4807 #### Windows (GPO)
4808 ```
4809 Software\Policies\Mozilla\Firefox\RequestedLocales\1 = "de"
4810 Software\Policies\Mozilla\Firefox\RequestedLocales\2 = "en-US"
4811
4812 or
4813
4814 Software\Policies\Mozilla\Firefox\RequestedLocales = "de,en-US"
4815 ```
4816 #### Windows (Intune)
4817 OMA-URI:
4818 ```
4819 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/RequestedLocalesString
4820 ```
4821 Value (string):
4822 ```
4823 <enabled/>
4824 <data id="Preferences_String" value="de,en-US"/>
4825 ```
4826 #### macOS
4827 ```
4828 <dict>
4829   <key>RequestedLocales</key>
4830   <array>
4831     <string>de</string>
4832     <string>en-US</string>
4833   </array>
4834 </dict>
4835
4836 or
4837
4838 <dict>
4839   <key>RequestedLocales</key>
4840   <string>de,en-US</string>
4841 </dict>
4842
4843 ```
4844 #### policies.json
4845 ```
4846 {
4847   "policies": {
4848     "RequestedLocales": ["de", "en-US"]
4849   }
4850 }
4851
4852 or
4853
4854 {
4855   "policies": {
4856     "RequestedLocales": "de,en-US"
4857   }
4858 }
4859 ```
4860 <a name="SanitizeOnShutdown"></a>
4861
4862 ### SanitizeOnShutdown (Selective)
4863 Clear data on shutdown. Choose from Cache, Cookies, Download History, Form & Search History, Browsing History, Active Logins, Site Preferences and Offline Website Data.
4864
4865 Previously, these values were always locked. Starting with Firefox 74 and Firefox ESR 68.6, you can use the `Locked` option to either keep the values unlocked (set it to false), or lock only the values you set (set it to true). If you want the old behavior of locking everything, do not set `Locked` at all.
4866
4867 **Compatibility:** Firefox 68, Firefox ESR 68 (Locked added in 74/68.6)\
4868 **CCK2 Equivalent:** N/A\
4869 **Preferences Affected:** `privacy.sanitize.sanitizeOnShutdown`, `privacy.clearOnShutdown.cache`, `privacy.clearOnShutdown.cookies`, `privacy.clearOnShutdown.downloads`, `privacy.clearOnShutdown.formdata`, `privacy.clearOnShutdown.history`, `privacy.clearOnShutdown.sessions`, `privacy.clearOnShutdown.siteSettings`, `privacy.clearOnShutdown.offlineApps`
4870 #### Windows (GPO)
4871 ```
4872 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Cache = 0x1 | 0x0
4873 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Cookies = 0x1 | 0x0
4874 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Downloads = 0x1 | 0x0
4875 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\FormData = 0x1 | 0x0
4876 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\History = 0x1 | 0x0
4877 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Sessions = 0x1 | 0x0
4878 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\SiteSettings = 0x1 | 0x0
4879 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\OfflineApps = 0x1 | 0x0
4880 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Locked = 0x1 | 0x0
4881 ```
4882 #### Windows (Intune)
4883 OMA-URI:
4884 ```
4885 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/A_SanitizeOnShutdown_Cache
4886 ```
4887 Value (string):
4888 ```
4889 <enabled/> or <disabled/>
4890 ```
4891 OMA-URI:
4892 ```
4893 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/B_SanitizeOnShutdown_Cookies
4894 ```
4895 Value (string):
4896 ```
4897 <enabled/> or <disabled/>
4898 ```
4899 OMA-URI:
4900 ```
4901 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/C_SanitizeOnShutdown_Downloads
4902 ```
4903 Value (string):
4904 ```
4905 <enabled/> or <disabled/>
4906 ```
4907 OMA-URI:
4908 ```
4909 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/D_SanitizeOnShutdown_FormData
4910 ```
4911 Value (string):
4912 ```
4913 <enabled/> or <disabled/>
4914 ```
4915 OMA-URI:
4916 ```
4917 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/E_SanitizeOnShutdown_History
4918 ```
4919 Value (string):
4920 ```
4921 <enabled/> or <disabled/>
4922 ```
4923 OMA-URI:
4924 ```
4925 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/F_SanitizeOnShutdown_Sessions
4926 ```
4927 Value (string):
4928 ```
4929 <enabled/> or <disabled/>
4930 ```
4931 OMA-URI:
4932 ```
4933 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/G_SanitizeOnShutdown_SiteSettings
4934 ```
4935 Value (string):
4936 ```
4937 <enabled/> or <disabled/>
4938 ```
4939 OMA-URI:
4940 ```
4941 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/H_SanitizeOnShutdown_OfflineApps
4942 ```
4943 Value (string):
4944 ```
4945 <enabled/> or <disabled/>
4946 ```
4947 OMA-URI:
4948 ```
4949 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/I_SanitizeOnShutdown_Locked
4950 ```
4951 Value (string):
4952 ```
4953 <enabled/> or <disabled/>
4954 ```
4955 #### macOS
4956 ```
4957 <dict>
4958   <key>SanitizeOnShutdown</key>
4959   <dict>
4960     <key>Cache</key>
4961     <true/> | <false/>
4962     <key>Cookies</key>
4963     <true/> | <false/>
4964     <key>Downloads</key>
4965     <true/> | <false/>
4966     <key>FormData</key>
4967     <true/> | <false/>
4968     <key>History</key>
4969     <true/> | <false/>
4970     <key>Sessions</key>
4971     <true/> | <false/>
4972     <key>SiteSettings</key>
4973     <true/> | <false/>
4974     <key>OfflineApps</key>
4975     <true/> | <false/>
4976     <key>Locked</key>
4977     <true/> | <false/>
4978   </dict>
4979 </dict>
4980 ```
4981 #### policies.json
4982 ```
4983 {
4984   "policies": {
4985     "SanitizeOnShutdown": {
4986       "Cache": true | false,
4987       "Cookies": true | false,
4988       "Downloads": true | false,
4989       "FormData": true | false,
4990       "History": true | false,
4991       "Sessions": true | false,
4992       "SiteSettings": true | false,
4993       "OfflineApps": true | false,
4994       "Locked": true | false
4995     }
4996   }
4997 }
4998 ```
4999 ### SanitizeOnShutdown (All)
5000 Clear all data on shutdown, including Browsing & Download History, Cookies, Active Logins, Cache, Form & Search History, Site Preferences and Offline Website Data.
5001
5002 **Compatibility:** Firefox 60, Firefox ESR 60\
5003 **CCK2 Equivalent:** N/A\
5004 **Preferences Affected:** `privacy.sanitize.sanitizeOnShutdown`, `privacy.clearOnShutdown.cache`, `privacy.clearOnShutdown.cookies`, `privacy.clearOnShutdown.downloads`, `privacy.clearOnShutdown.formdata`, `privacy.clearOnShutdown.history`, `privacy.clearOnShutdown.sessions`, `privacy.clearOnShutdown.siteSettings`, `privacy.clearOnShutdown.offlineApps`
5005 #### Windows (GPO)
5006 ```
5007 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown = 0x1 | 0x0
5008 ```
5009 #### Windows (Intune)
5010 OMA-URI:
5011 ```
5012 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/C_SanitizeOnShutdown
5013 ```
5014 Value (string):
5015 ```
5016 <enabled/> or <disabled/>
5017 ```
5018 #### macOS
5019 ```
5020 <dict>
5021   <key>SanitizeOnShutdown</key>
5022   <true/> | <false/>
5023 </dict>
5024 ```
5025 #### policies.json
5026 ```
5027 {
5028   "policies": {
5029     "SanitizeOnShutdown": true | false
5030   }
5031 }
5032 ```
5033 ### SearchBar
5034 Set whether or not search bar is displayed.
5035
5036 **Compatibility:** Firefox 60, Firefox ESR 60\
5037 **CCK2 Equivalent:** `showSearchBar`\
5038 **Preferences Affected:** N/A
5039
5040 #### Windows (GPO)
5041 ```
5042 Software\Policies\Mozilla\Firefox\SearchBar = "unified" | "separate"
5043 ```
5044
5045 #### Windows (Intune)
5046 OMA-URI:
5047 ```
5048 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SearchBar
5049 ```
5050 Value (string):
5051 ```
5052 <enabled/>
5053 <data id="SearchBar" value="unified | separate"/>
5054 ```
5055 #### macOS
5056 ```
5057 <dict>
5058   <key>SearchBar</key>
5059   <string>unified | separate</string>
5060 </dict>
5061 ```
5062 #### policies.json
5063 ```
5064 {
5065   "policies": {
5066     "SearchBar": "unified" | "separate"
5067   }
5068 }
5069 ```
5070 <a name="SearchEngines"></a>
5071
5072 ### SearchEngines (This policy is only available on the ESR.)
5073
5074 ### SearchEngines | Add
5075
5076 Add new search engines. Although there are only five engines available in the ADMX template, there is no limit. To add more in the ADMX template, you can duplicate the XML.
5077
5078 This policy is only available on the ESR. `Name` and `URLTemplate` are required.
5079
5080 `Name` is the name of the search engine.
5081
5082 `URLTemplate` is the search URL with {searchTerms} to substitute for the search term.
5083
5084 `Method` is either GET or POST
5085
5086 `IconURL` is a URL for the icon to use.
5087
5088 `Alias` is a keyword to use for the engine.
5089
5090 `Description` is a description of the search engine.
5091
5092 `PostData` is the POST data as name value pairs separated by &.
5093
5094 `SuggestURLTemplate` is a search suggestions URL with {searchTerms} to substitute for the search term.
5095
5096 `Encoding` is the query charset for the engine. It defaults to UTF-8.
5097
5098 **Compatibility:** Firefox ESR 60 (POST support in Firefox ESR 68, Encoding support in Firefox 91)\
5099 **CCK2 Equivalent:** `searchplugins`\
5100 **Preferences Affected:** N/A
5101
5102 #### Windows (GPO)
5103 ```
5104 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Name = "Example1"
5105 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\URLTemplate = "https://www.example.org/q={searchTerms}"
5106 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Method = "GET" | "POST"
5107 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\IconURL = "https://www.example.org/favicon.ico"
5108 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Alias = "example"
5109 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Description = "Example Description"
5110 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\SuggestURLTemplate = "https://www.example.org/suggestions/q={searchTerms}"
5111 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\PostData = "name=value&q={searchTerms}"
5112 ```
5113 #### Windows (Intune)
5114 OMA-URI:
5115 ```
5116 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_1
5117 ```
5118 Value (string):
5119 ```
5120 <enabled/>
5121 <data id="SearchEngine_Name" value="Example1"/>
5122 <data id="SearchEngine_URLTemplate" value="https://www.example.org/q={searchTerms"/>
5123 <data id="SearchEngine_Method" value="GET | POST"/>
5124 <data id="SearchEngine_IconURL" value="https://www.example.org/favicon.ico"/>
5125 <data id="SearchEngine_Alias" value="example"/>
5126 <data id="SearchEngine_Description" value="Example Description"/>
5127 <data id="SearchEngine_SuggestURLTemplate" value="https://www.example.org/suggestions/q={searchTerms}"/>
5128 <data id="SearchEngine_PostData" value="name=value&amp;q={searchTerms}"/>
5129 ```
5130 #### macOS
5131 ```
5132 <dict>
5133   <key>SearchEngines</key>
5134   <dict>
5135     <key>Add</key>
5136     <array>
5137       <dict>
5138         <key>Name</key>
5139         <string>Example1</string>
5140         <key>URLTemplate</key>
5141         <string>https://www.example.org/q={searchTerms}</string>
5142         <key>Method</key>
5143         <string>GET | POST </string>
5144         <key>IconURL</key>
5145         <string>https://www.example.org/favicon.ico</string>
5146         <key>Alias</key>
5147         <string>example</string>
5148         <key>Description</key>
5149         <string>Example Description</string>
5150         <key>SuggestURLTemplate</key>
5151         <string>https://www.example.org/suggestions/q={searchTerms}</string>
5152         <key>PostData</key>
5153         <string>name=value&q={searchTerms}</string>
5154       </dict>
5155     <array>
5156   </dict>
5157 </dict>
5158 ```
5159 #### policies.json
5160 ```
5161 {
5162   "policies": {
5163     "SearchEngines": {
5164       "Add": [
5165         {
5166           "Name": "Example1",
5167           "URLTemplate": "https://www.example.org/q={searchTerms}",
5168           "Method": "GET" | "POST",
5169           "IconURL": "https://www.example.org/favicon.ico",
5170           "Alias": "example",
5171           "Description": "Description",
5172           "PostData": "name=value&q={searchTerms}",
5173           "SuggestURLTemplate": "https://www.example.org/suggestions/q={searchTerms}"
5174         }
5175       ]
5176     }
5177   }
5178 }
5179 ```
5180 ### SearchEngines | Default
5181
5182 Set the default search engine. This policy is only available on the ESR.
5183
5184 **Compatibility:** Firefox ESR 60\
5185 **CCK2 Equivalent:** `defaultSearchEngine`\
5186 **Preferences Affected:** N/A
5187
5188 #### Windows (GPO)
5189 ```
5190 Software\Policies\Mozilla\Firefox\SearchEngines\Default = NAME_OF_SEARCH_ENGINE
5191 ```
5192 #### Windows (Intune)
5193 OMA-URI:
5194 ```
5195 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_Default
5196 ```
5197 Value (string):
5198 ```
5199 <enabled/>
5200 <data id="SearchEngines_Default" value="NAME_OF_SEARCH_ENGINE"/>
5201 ```
5202 #### macOS
5203 ```
5204 <dict>
5205   <key>SearchEngines</key>
5206   <dict>
5207     <key>Default</key>
5208     <string>NAME_OF_SEARCH_ENGINE</string>
5209   </dict>
5210 </dict>
5211 ```
5212 #### policies.json
5213 ```
5214 {
5215   "policies": {
5216     "SearchEngines": {
5217       "Default": "NAME_OF_SEARCH_ENGINE"
5218     }
5219   }
5220 }
5221 ```
5222 ### SearchEngines | PreventInstalls
5223
5224 Prevent installing search engines from webpages.
5225
5226 **Compatibility:** Firefox ESR 60\
5227 **CCK2 Equivalent:** `disableSearchEngineInstall`\
5228 **Preferences Affected:** N/A
5229
5230 #### Windows (GPO)
5231 ```
5232 Software\Policies\Mozilla\Firefox\SearchEngines\PreventInstalls = 0x1 | 0x0
5233 ```
5234 #### Windows (Intune)
5235 OMA-URI:
5236 ```
5237 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_PreventInstalls
5238 ```
5239 Value (string):
5240 ```
5241 <enabled/> or <disabled/>
5242 ```
5243 #### macOS
5244 ```
5245 <dict>
5246   <key>SearchEngines</key>
5247   <dict>
5248     <key>PreventInstalls</key>
5249     <true/> | <false/>
5250   </dict>
5251 </dict>
5252 ```
5253 #### policies.json
5254 ```
5255 {
5256   "policies": {
5257     "SearchEngines": {
5258       "PreventInstalls": true | false
5259     }
5260   }
5261 }
5262 ```
5263 ### SearchEngines | Remove
5264
5265 Hide built-in search engines. This policy is only available on the ESR.
5266
5267 **Compatibility:** Firefox ESR 60.2\
5268 **CCK2 Equivalent:** `removeDefaultSearchEngines` (removed all built-in engines)\
5269 **Preferences Affected:** N/A
5270
5271 #### Windows (GPO)
5272 ```
5273 Software\Policies\Mozilla\Firefox\SearchEngines\Remove\1 = NAME_OF_SEARCH_ENGINE
5274 ```
5275 #### Windows (Intune)
5276 OMA-URI:
5277 ```
5278 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_Remove
5279 ```
5280 Value (string):
5281 ```
5282 <enabled/>
5283 <data id="SearchEngines_Remove" value="1&#xF000;NAME_OF_SEARCH_ENGINE"/>
5284 ```
5285 #### macOS
5286 ```
5287 <dict>
5288   <key>SearchEngines</key>
5289   <dict>
5290     <key>Remove</key>
5291     <array>
5292       <string>NAME_OF_SEARCH_ENGINE</string>
5293     </array>
5294   </dict>
5295 </dict>
5296 ```
5297 #### policies.json
5298 ```
5299 {
5300   "policies": {
5301     "SearchEngines": {
5302       "Remove": ["NAME_OF_SEARCH_ENGINE"]
5303     }
5304   }
5305 }
5306 ```
5307 ### SearchSuggestEnabled
5308
5309 Enable search suggestions.
5310
5311 **Compatibility:** Firefox 68, Firefox ESR 68\
5312 **CCK2 Equivalent:** N/A\
5313 **Preferences Affected:** `browser.urlbar.suggest.searches`, `browser.search.suggest.enabled`
5314
5315 #### Windows (GPO)
5316 ```
5317 Software\Policies\Mozilla\Firefox\SearchSuggestEnabled = 0x1 | 0x0
5318 ```
5319 #### Windows (Intune)
5320 OMA-URI:
5321 ```
5322 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchSuggestEnabled
5323 ```
5324 Value (string):
5325 ```
5326 <enabled/> or <disabled/>
5327 ```
5328 #### macOS
5329 ```
5330 <dict>
5331   <key>SearchSuggestEnabled</key>
5332   <true/> | <false/>
5333 </dict>
5334 ```
5335 #### policies.json
5336 ```
5337 {
5338   "policies": {
5339     "SearchSuggestEnabled": true | false
5340   }
5341 }
5342 ```
5343 ### SecurityDevices
5344
5345 Install PKCS #11 modules.
5346
5347 **Compatibility:** Firefox 64, Firefox ESR 60.4\
5348 **CCK2 Equivalent:** `certs.devices`\
5349 **Preferences Affected:** N/A
5350
5351 #### Windows (GPO)
5352 ```
5353 Software\Policies\Mozilla\Firefox\SecurityDevices\NAME_OF_DEVICE = PATH_TO_LIBRARY_FOR_DEVICE
5354 ```
5355 #### Windows (Intune)
5356 OMA-URI:
5357 ```
5358 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SecurityDevices
5359 ```
5360 Value (string):
5361 ```
5362 <enabled/>
5363 <data id="SecurityDevices" value="NAME_OF_DEVICE&#xF000;PATH_TO_LIBRARY_FOR_DEVICE"/>
5364 ```
5365 #### macOS
5366 ```
5367 <dict>
5368   <key>SecurityDevices</key>
5369   <dict>
5370     <key>NAME_OF_DEVICE</key>
5371     <string>PATH_TO_LIBRARY_FOR_DEVICE</string>
5372   </dict>
5373 </dict>
5374 ```
5375
5376 #### policies.json
5377 ```
5378 {
5379   "policies": {
5380     "SecurityDevices": {
5381       "NAME_OF_DEVICE": "PATH_TO_LIBRARY_FOR_DEVICE"
5382     }
5383   }
5384 }
5385 ```
5386 ### ShowHomeButton
5387 Show the home button on the toolbar.
5388
5389 Future versions of Firefox will not show the home button by default.
5390
5391 **Compatibility:** Firefox 88, Firefox ESR 78.10\
5392 **CCK2 Equivalent:** N/A\
5393 **Preferences Affected:** N/A
5394
5395 #### Windows (GPO)
5396 ```
5397 Software\Policies\Mozilla\Firefox\ShowHomeButton = 0x1 | 0x0
5398 ```
5399 #### Windows (Intune)
5400 OMA-URI:
5401 ```
5402 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/Homepage_ShowHomeButton
5403 ```
5404 Value (string):
5405 ```
5406 <enabled/> or <disabled/>
5407 ```
5408 #### macOS
5409 ```
5410 <dict>
5411   <key>ShowHomeButton</key>
5412   <true/> | <false/>
5413 </dict>
5414 ```
5415 #### policies.json
5416 ```
5417 {
5418   "policies": {
5419     "ShowHomeButton": true | false
5420   }
5421 }
5422 ```
5423 ### SSLVersionMax
5424
5425 Set and lock the maximum version of TLS.
5426
5427 **Compatibility:** Firefox 66, Firefox ESR 60.6\
5428 **CCK2 Equivalent:** N/A\
5429 **Preferences Affected:** `security.tls.version.max`
5430
5431 #### Windows (GPO)
5432 ```
5433 Software\Policies\Mozilla\Firefox\SSLVersionMax = "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
5434 ```
5435 #### Windows (Intune)
5436 OMA-URI:
5437 ```
5438 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SSLVersionMax
5439 ```
5440 Value (string):
5441 ```
5442 <enabled/>
5443 <data id="SSLVersion" value="tls1 | tls1.2 | tls1.3"/>
5444 ```
5445 #### macOS
5446 ```
5447 <dict>
5448   <key>SSLVersionMax</key>
5449   <string>tls1 | tls1.1 | tls1.2 | tls1.3</string>
5450 </dict>
5451 ```
5452
5453 #### policies.json
5454 ```
5455 {
5456   "policies": {
5457     "SSLVersionMax": "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
5458   }
5459 }
5460 ```
5461 ### SSLVersionMin
5462
5463 Set and lock the minimum version of TLS.
5464
5465 **Compatibility:** Firefox 66, Firefox ESR 60.6\
5466 **CCK2 Equivalent:** N/A\
5467 **Preferences Affected:** `security.tls.version.min`
5468
5469 #### Windows (GPO)
5470 ```
5471 Software\Policies\Mozilla\Firefox\SSLVersionMin = "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
5472 ```
5473 #### Windows (Intune)
5474 OMA-URI:
5475 ```
5476 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SSLVersionMin
5477 ```
5478 Value (string):
5479 ```
5480 <enabled/>
5481 <data id="SSLVersion" value="tls1 | tls1.2 | tls1.3"/>
5482 ```
5483 #### macOS
5484 ```
5485 <dict>
5486   <key>SSLVersionMin</key>
5487   <string>tls1 | tls1.1 | tls1.2 | tls1.3</string>
5488 </dict>
5489 ```
5490
5491 #### policies.json
5492 ```
5493 {
5494   "policies": {
5495     "SSLVersionMin": "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
5496   }
5497 }
5498 ```
5499 ### SupportMenu
5500 Add a menuitem to the help menu for specifying support information.
5501
5502 **Compatibility:** Firefox 68.0.1, Firefox ESR 68.0.1\
5503 **CCK2 Equivalent:** helpMenu\
5504 **Preferences Affected:** N/A
5505
5506 #### Windows (GPO)
5507 ```
5508 Software\Policies\Mozilla\Firefox\SupportMenu\Title = "Support Menu"
5509 Software\Policies\Mozilla\Firefox\SupportMenu\URL = "http://example.com/support"
5510 Software\Policies\Mozilla\Firefox\SupportMenu\AccessKey = "S"
5511 ```
5512 #### Windows (Intune)
5513 OMA-URI:
5514 ```
5515 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SupportMenu
5516 ```
5517 Value (string):
5518 ```
5519 <enabled/>
5520 <data id="SupportMenuTitle" value="Support Menu"/>
5521 <data id="SupportMenuURL" value="http://example.com/support"/>
5522 <data id="SupportMenuAccessKey" value="S">
5523 ```
5524 #### macOS
5525 ```
5526 <dict>
5527   <key>SupportMenu</key>
5528   <dict>
5529     <key>Title</key>
5530     <string>SupportMenu</string>
5531     <key>URL</key>
5532     <string>http://example.com/support</string>
5533     <key>AccessKey</key>
5534     <string>S</string>
5535   </dict>
5536 </dict>
5537 ```
5538 #### policies.json
5539 ```
5540 {
5541   "policies": {
5542     "SupportMenu": {
5543       "Title": "Support Menu",
5544       "URL": "http://example.com/support",
5545       "AccessKey": "S"
5546     }
5547   }
5548 }
5549 ```
5550 ### UserMessaging
5551
5552 Prevent Firefox from messaging the user in certain situations.
5553
5554 `WhatsNew` Remove the "What's New" icon and menuitem.
5555
5556 `ExtensionRecommendations` If false, don't recommend extensions while the user is visiting web pages.
5557
5558 `FeatureRecommendations` If false, don't recommend browser features.
5559
5560 `UrlbarInterventions` If false, Don't offer Firefox specific suggestions in the URL bar.
5561
5562 `SkipOnboarding` If true, don't show onboarding messages on the new tab page.
5563
5564 **Compatibility:** Firefox 75, Firefox ESR 68.7\
5565 **CCK2 Equivalent:** N/A\
5566 **Preferences Affected:** `browser.messaging-system.whatsNewPanel.enabled`, `browser.newtabpage.activity-stream.asrouter.userprefs.cfr.addons`, `browser.newtabpage.activity-stream.asrouter.userprefs.cfr.features`, `browser.aboutwelcome.enabled`
5567
5568 #### Windows (GPO)
5569 ```
5570 Software\Policies\Mozilla\Firefox\UserMessaging\WhatsNew = 0x1 | 0x0
5571 Software\Policies\Mozilla\Firefox\UserMessaging\ExtensionRecommendations = 0x1 | 0x0
5572 Software\Policies\Mozilla\Firefox\UserMessaging\FeatureRecommendations = 0x1 | 0x0
5573 Software\Policies\Mozilla\Firefox\UserMessaging\UrlbarInterventions = 0x1 | 0x0
5574 Software\Policies\Mozilla\Firefox\UserMessaging\SkipOnboarding = 0x1 | 0x0
5575 ```
5576 #### Windows (Intune)
5577 OMA-URI:
5578 ```
5579 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_WhatsNew
5580 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_ExtensionRecommendations
5581 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_FeatureRecommendations
5582 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_UrlbarInterventions
5583 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_SkipOnboarding
5584 ```
5585 Value (string):
5586 ```
5587 <enabled/> or <disabled/>
5588 ```
5589 #### macOS
5590 ```
5591 <dict>
5592   <key>UserMessaging</key>
5593   <dict>
5594     <key>WhatsNew</key>
5595     <true/> | <false/>
5596     <key>ExtensionRecommendations</key>
5597     <true/> | <false/>
5598     <key>FeatureRecommendations</key>
5599     <true/> | <false/>
5600     <key>UrlbarInterventions</key>
5601     <true/> | <false/>
5602     <key>SkipOnboarding</key>
5603     <true/> | <false/>
5604   </dict>
5605 </dict>
5606 ```
5607 #### policies.json
5608 ```
5609 {
5610   "policies": {
5611     "UserMessaging": {
5612       "WhatsNew": true | false,
5613       "ExtensionRecommendations": true | false,
5614       "FeatureRecommendations": true | false,
5615       "UrlbarInterventions": true | false
5616       "SkipOnboarding": true | false
5617     }
5618   }
5619 }
5620 ```
5621 ### WebsiteFilter
5622 Block websites from being visited. The parameters take an array of Match Patterns, as documented in https://developer.mozilla.org/en-US/Add-ons/WebExtensions/Match_patterns.
5623 The arrays are limited to 1000 entries each.
5624
5625 If you want to block all URLs, you can use `<all_urls>` or `*://*/*`. You can't have just a `*` on the right side.
5626
5627 For specific protocols, use `https://*/*` or `http://*/*`.
5628
5629 As of Firefox 83 and Firefox ESR 78.5, file URLs are supported.
5630
5631 **Compatibility:** Firefox 60, Firefox ESR 60\
5632 **CCK2 Equivalent:** N/A\
5633 **Preferences Affected:** N/A
5634
5635 #### Windows (GPO)
5636 ```
5637 Software\Policies\Mozilla\Firefox\WebsiteFilter\Block\1 = "<all_urls>"
5638 Software\Policies\Mozilla\Firefox\WebsiteFilter\Exceptions\1 = "http://example.org/*"
5639 ```
5640 #### Windows (Intune)
5641 OMA-URI:
5642 ```
5643 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/B_WebsiteFilter_Block
5644 ```
5645 Value (string):
5646 ```
5647 <enabled/> <data id="WebsiteFilter" value="1&#xF000;&#60;all_urls&#62;"/>
5648 ```
5649 OMA-URI:
5650 ```
5651 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/B_WebsiteFilter_Exceptions
5652 ```
5653 Value (string):
5654 ```
5655 <enabled/>
5656 <data id="WebsiteFilter" value="1&#xF000;http://example.org/*"/>
5657 ```
5658 #### macOS
5659 ```
5660 <dict>
5661   <key>WebsiteFilter</key>
5662   <dict>
5663     <key>Block</key>
5664     <array>
5665       <string><all_urls></string>
5666     </array>
5667     <key>Exceptions</key>
5668     <array>
5669       <string>http://example.org/*</string>
5670     </array>
5671   </dict>
5672
5673 </dict>
5674 ```
5675 #### policies.json
5676 ```
5677 {
5678   "policies": {
5679     "WebsiteFilter": {
5680       "Block": ["<all_urls>"],
5681       "Exceptions": ["http://example.org/*"]
5682     }
5683   }
5684 }
5685 ```
5686 ### WindowsSSO
5687 Allow Windows single sign-on for Microsoft, work, and school accounts.
5688
5689 If this policy is set to true, Firefox will use credentials stored in Windows to sign in to Microsoft, work, and school accounts.
5690
5691 **Compatibility:** Firefox 91\
5692 **CCK2 Equivalent:** N/A\
5693 **Preferences Affected:** `network.http.windows-sso.enabled`
5694
5695 #### Windows (GPO)
5696 ```
5697 Software\Policies\Mozilla\Firefox\WindowsSSO = 0x1 | 0x0
5698 ```
5699 #### Windows (Intune)
5700 OMA-URI:
5701 ```
5702 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/WindowsSSO
5703 ```
5704 Value (string):
5705 ```
5706 <enabled/> or <disabled/>
5707 ```
5708 #### policies.json
5709 ```
5710 {
5711   "policies": {
5712     "WindowsSSO": true | false
5713   }
5714 }
5715 ```