README.md

   1 **These policies are in active development and so might contain changes that do not work with current versions of Firefox.**
   2
   3 **You should use the [officially released versions](https://github.com/mozilla/policy-templates/releases) if you are deploying changes.**
   4
   5 Policies can be specified using the [Group Policy templates on Windows](https://github.com/mozilla/policy-templates/tree/master/windows), [Intune on Windows](https://support.mozilla.org/kb/managing-firefox-intune), [configuration profiles on macOS](https://github.com/mozilla/policy-templates/tree/master/mac), or by creating a file called `policies.json`. On Windows, create a directory called `distribution` where the EXE is located and place the file there. On Mac, the file goes into `Firefox.app/Contents/Resources/distribution`.  On Linux, the file goes into `firefox/distribution`, where `firefox` is the installation directory for firefox, which varies by distribution or you can specify system-wide policy by placing the file in `/etc/firefox/policies`.
   6
   7 | Policy Name | Description
   8 | --- | --- |
   9 | **[`AppAutoUpdate`](#appautoupdate)** |  Enable or disable automatic application update.
  10 | **[`AppUpdateURL`](#appupdateurl)** | Change the URL for application update.
  11 | **[`Authentication`](#authentication)** | Configure sites that support integrated authentication.
  12 | **[`BlockAboutAddons`](#blockaboutaddons)** | Block access to the Add-ons Manager (about:addons).
  13 | **[`BlockAboutConfig`](#blockaboutconfig)** | Block access to about:config.
  14 | **[`BlockAboutProfiles`](#blockaboutprofiles)** | Block access to About Profiles (about:profiles).
  15 | **[`BlockAboutSupport`](#blockaboutsupport)** | Block access to Troubleshooting Information (about:support).
  16 | **[`Bookmarks`](#bookmarks)** | Add bookmarks in either the bookmarks toolbar or menu.
  17 | **[`CaptivePortal`](#captiveportal)** | Enable or disable the detection of captive portals.
  18 | **[`Certificates`](#certificates)** |
  19 | **[`Certificates -> ImportEnterpriseRoots`](#certificates--importenterpriseroots)** | Trust certificates that have been added to the operating system certificate store by a user or administrator.
  20 | **[`Certificates -> Install`](#certificates--install)** | Install certificates into the Firefox certificate store.
  21 | **[`Cookies`](#cookies)** | Configure cookie preferences.
  22 | **[`DisableAppUpdate`](#disableappupdate)** | Turn off application updates.
  23 | **[`DisableBuiltinPDFViewer`](#disablebuiltinpdfviewer)** | Disable the built in PDF viewer.
  24 | **[`DisabledCiphers`](#disabledciphers)** | Disable ciphers.
  25 | **[`DisableDefaultBrowserAgent`](#disabledefaultbrowseragent)** | Prevent the default browser agent from taking any actions (Windows only).
  26 | **[`DisableDeveloperTools`](#disabledevelopertools)** | Remove access to all developer tools.
  27 | **[`DisableFeedbackCommands`](#disablefeedbackcommands)** | Disable the menus for reporting sites.
  28 | **[`DisableFirefoxScreenshots`](#disablefirefoxscreenshots)** | Remove access to Firefox Screenshots.
  29 | **[`DisableFirefoxAccounts`](#disablefirefoxaccounts)** | Disable Firefox Accounts integration (Sync).
  30 | **[`DisableFirefoxStudies`](#disablefirefoxstudies)** | Disable Firefox studies (Shield).
  31 | **[`DisableForgetButton`](#disableforgetbutton)** | Disable the "Forget" button.
  32 | **[`DisableFormHistory`](#disableformhistory)** | Turn off saving information on web forms and the search bar.
  33 | **[`DisableMasterPasswordCreation`](#disablemasterpasswordcreation)** | Remove the master password functionality.
  34 | **[`DisablePasswordReveal`](#disablepasswordreveal)** | Do not allow passwords to be revealed in saved logins.
  35 | **[`DisablePocket`](#disablepocket)** | Remove Pocket in the Firefox UI.
  36 | **[`DisablePrivateBrowsing`](#disableprivatebrowsing)** | Remove access to private browsing.
  37 | **[`DisableProfileImport`](#disableprofileimport)** | Disables the "Import data from another browser" option in the bookmarks window.
  38 | **[`DisableProfileRefresh`](#disableprofilerefresh)** | Disable the Refresh Firefox button on about:support and support.mozilla.org
  39 | **[`DisableSafeMode`](#disablesafemode)** | Disable safe mode within the browser.
  40 | **[`DisableSecurityBypass`](#disablesecuritybypass)** | Prevent the user from bypassing security in certain cases.
  41 | **[`DisableSetDesktopBackground`](#disablesetdesktopbackground)** | Remove the "Set As Desktop Background..." menuitem when right clicking on an image.
  42 | **[`DisableSystemAddonUpdate`](#disablesystemaddonupdate)** | Prevent system add-ons from being installed or update.
  43 | **[`DisableTelemetry`](#disabletelemetry)** | DisableTelemetry
  44 | **[`DisplayBookmarksToolbar`](#displaybookmarkstoolbar)** | Set the initial state of the bookmarks toolbar.
  45 | **[`DisplayMenuBar (Deprecated)`](#displaymenubar-deprecated)** | Set the initial state of the menubar.
  46 | **[`DisplayMenuBar`](#displaymenubar)** | Set the state of the menubar.
  47 | **[`DNSOverHTTPS`](#dnsoverhttps)** | Configure DNS over HTTPS.
  48 | **[`DontCheckDefaultBrowser`](#dontcheckdefaultbrowser)** | Don't check if Firefox is the default browser at startup.
  49 | **[`DefaultDownloadDirectory`](#defaultdownloaddirectory)** | Set the default download directory.
  50 | **[`DownloadDirectory`](#downloaddirectory)** | Set and lock the download directory.
  51 | **[`EnableTrackingProtection`](#enabletrackingprotection)** | Configure tracking protection.
  52 | **[`EncryptedMediaExtensions`](#encryptedmediaextensions)** | Enable or disable Encrypted Media Extensions and optionally lock it.
  53 | **[`EnterprisePoliciesEnabled`](#enterprisepoliciesenabled)** | Enable policy support on macOS.
  54 | **[`Extensions`](#extensions)** | Control the installation, uninstallation and locking of extensions.
  55 | **[`ExtensionSettings`](#extensionsettings)** | Manage all aspects of extensions.
  56 | **[`ExtensionUpdate`](#extensionupdate)** | Control extension updates.
  57 | **[`FlashPlugin`](#flashplugin)** | Configure the default Flash plugin policy as well as origins for which Flash is allowed.
  58 | **[`FirefoxHome`](#firefoxhome)** | Customize the Firefox Home page.
  59 | **[`HardwareAcceleration`](#hardwareacceleration)** | Control hardware acceleration.
  60 | **[`Handlers`](#handlers)** | Configure default application handlers.
  61 | **[`Homepage`](#homepage)** | Configure the default homepage and how Firefox starts.
  62 | **[`InstallAddonsPermission`](#installaddonspermission)** | Configure the default extension install policy as well as origins for extension installs are allowed.
  63 | **[`LegacyProfiles`](#legacyprofiles)** | Disable the feature enforcing a separate profile for each installation.
  64 | **[`LocalFileLinks`](#localfilelinks)** | Enable linking to local files by origin.
  65 | **[`ManagedBookmarks`](#managedbookmarks)** | Configures a list of bookmarks managed by an administrator that cannot be changed by the user.
  66 | **[`PrimaryPassword`](#primarypassword)** | Require or prevent using a primary (formerly master) password.
  67 | **[`NetworkPrediction`](#networkprediction)** | Enable or disable network prediction (DNS prefetching).
  68 | **[`NewTabPage`](#newtabpage)** | Enable or disable the New Tab page.
  69 | **[`NoDefaultBookmarks`](#nodefaultbookmarks)** | Disable the creation of default bookmarks.
  70 | **[`OfferToSaveLogins`](#offertosavelogins)** | Control whether or not Firefox offers to save passwords.
  71 | **[`OfferToSaveLoginsDefault`](#offertosaveloginsdefault)** | Set the default value for whether or not Firefox offers to save passwords.
  72 | **[`OverrideFirstRunPage`](#overridefirstrunpage)** | Override the first run page.
  73 | **[`OverridePostUpdatePage`](#overridepostupdatepage)** | Override the upgrade page.
  74 | **[`PasswordManagerEnabled`](#passwordmanagerenabled)** | Remove (some) access to the password manager.
  75 | **[`PDFjs`](#pdfjs)** | Disable or configure PDF.js, the built-in PDF viewer.
  76 | **[`Permissions`](#permissions)** | Set permissions associated with camera, microphone, location, and notifications.
  77 | **[`PictureInPicture`](#pictureinpicture)** | Enable or disable Picture-in-Picture.
  78 | **[`PopupBlocking`](#popupblocking)** | Configure the default pop-up window policy as well as origins for which pop-up windows are allowed.
  79 | **[`Preferences`](#preferences)** | Set and lock preferences.
  80 | **[`Preferences (Deprecated)`](#preferences-deprecated)** | Set and lock some preferences.
  81 | **[`PromptForDownloadLocation`](#promptfordownloadlocation)** | Ask where to save each file before downloading.
  82 | **[`Proxy`](#proxy)** | Configure proxy settings.
  83 | **[`RequestedLocales`](#requestedlocales)** | Set the the list of requested locales for the application in order of preference.
  84 | **[`SanitizeOnShutdown` (All)](#sanitizeonshutdown-all)** | Clear all data on shutdown.
  85 | **[`SanitizeOnShutdown` (Selective)](#sanitizeonshutdown-selective)** | Clear data on shutdown.
  86 | **[`SearchBar`](#searchbar)** | Set whether or not search bar is displayed.
  87 | **[`SearchEngines`](#searchengines-this-policy-is-only-available-on-the-esr)** |
  88 | **[`SearchEngines -> Default`](#searchengines--default)** | Set the default search engine.
  89 | **[`SearchEngines -> PreventInstalls`](#searchengines--preventinstalls)** | Prevent installing search engines from webpages.
  90 | **[`SearchEngines -> Remove`](#searchengines--remove)** | Hide built-in search engines.
  91 | **[`SearchEngines -> Add`](#searchengines--add)** | Add new search engines.
  92 | **[`SearchSuggestEnabled`](#searchsuggestenabled)** | Enable search suggestions.
  93 | **[`SecurityDevices`](#securitydevices)** | Install PKCS #11 modules.
  94 | **[`SSLVersionMax`](#sslversionmax)** | Set and lock the maximum version of TLS.
  95 | **[`SSLVersionMin`](#sslversionmin)** | Set and lock the minimum version of TLS.
  96 | **[`SupportMenu`](#supportmenu)** | Add a menuitem to the help menu for specifying support information.
  97 | **[`UserMessaging`](#usermessaging)** | Don't show certain messages to the user.
  98 | **[`WebsiteFilter`](#websitefilter)** | Block websites from being visited.
  99
 100 ### AppAutoUpdate
 101
 102 Enable or disable **automatic** application update.
 103
 104 If set to true, application updates are installed without user approval.
 105
 106 If set to false, application updates are downloaded but the user can choose when to install the update.
 107
 108 If you have disabled updates via DisableAppUpdate, this policy has no effect.
 109
 110 **Compatibility:** Firefox 75, Firefox ESR 68.7\
 111 **CCK2 Equivalent:** N/A\
 112 **Preferences Affected:** app.update.auto
 113
 114 #### Windows (GPO)
 115 ```
 116 Software\Policies\Mozilla\Firefox\AppAutoUpdate = 0x1 | 0x0
 117 ```
 118 #### Windows (Intune)
 119 OMA-URI:
 120 ```
 121 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AppAutoUpdate
 122 ```
 123 Value (string):
 124 ```
 125 <enabled/> or <disabled/>
 126 ```
 127 #### macOS
 128 ```
 129 <dict>
 130   <key>AppAutoUpdate</key>
 131   <true/> | <false/>
 132 </dict>
 133 ```
 134 #### policies.json
 135 ```
 136 {
 137   "policies": {
 138     "AppAutoUpdate": true | false
 139   }
 140 }
 141 ```
 142 ### AppUpdateURL
 143
 144 Change the URL for application update.
 145
 146 **Compatibility:** Firefox 62, Firefox ESR 60.2\
 147 **CCK2 Equivalent:** N/A\
 148 **Preferences Affected:** `app.update.url`
 149
 150 #### Windows (GPO)
 151 ```
 152 Software\Policies\Mozilla\Firefox\AppUpdateURL = "https://yoursite.com"
 153 ```
 154 #### Windows (Intune)
 155 OMA-URI:
 156 ```
 157 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AppUpdateURL
 158 ```
 159 Value (string):
 160 ```
 161 <enabled/>
 162 <data id="AppUpdateURL" value="https://yoursite.com"/>
 163 ```
 164 #### macOS
 165 ```
 166 <dict>
 167   <key>AppUpdateURL</key>
 168   <string>https://yoursite.com</string>
 169 </dict>
 170 ```
 171 #### policies.json
 172 ```
 173 {
 174   "policies": {
 175     "AppUpdateURL": "https://yoursite.com"
 176   }
 177 }
 178 ```
 179 ### Authentication
 180
 181 Configure sites that support integrated authentication.
 182
 183 See https://developer.mozilla.org/en-US/docs/Mozilla/Integrated_authentication for more information.
 184
 185 `PrivateBrowsing` enables integrated authentication in private browsing.
 186
 187 **Compatibility:** Firefox 60, Firefox ESR 60 (AllowNonFQDN added in 62/60.2, AllowProxies added in 70/68.2, Locked added in 71/68.3, PrivateBrowsing added in 77/68.9)\
 188 **CCK2 Equivalent:** N/A\
 189 **Preferences Affected:** `network.negotiate-auth.trusted-uris`,`network.negotiate-auth.delegation-uris`,`network.automatic-ntlm-auth.trusted-uris`,`network.automatic-ntlm-auth.allow-non-fqdn`,`network.negotiate-auth.allow-non-fqdn`,`network.automatic-ntlm-auth.allow-proxies`,`network.negotiate-auth.allow-proxies`,`network.auth.private-browsing-sso`
 190
 191 #### Windows (GPO)
 192 ```
 193 Software\Policies\Mozilla\Firefox\Authentication\SPNEGO\1 = "mydomain.com"
 194 Software\Policies\Mozilla\Firefox\Authentication\SPNEGO\2 = "https://myotherdomain.com"
 195 Software\Policies\Mozilla\Firefox\Authentication\Delegated\1 = "mydomain.com"
 196 Software\Policies\Mozilla\Firefox\Authentication\Delegated\2 = "https://myotherdomain.com"
 197 Software\Policies\Mozilla\Firefox\Authentication\NTLM\1 = "mydomain.com"
 198 Software\Policies\Mozilla\Firefox\Authentication\NTLM\2 = "https://myotherdomain.com"
 199 Software\Policies\Mozilla\Firefox\Authentication\AllowNonFQDN\SPNEGO = 0x1 | 0x0
 200 Software\Policies\Mozilla\Firefox\Authentication\AllowNonFQDN\NTLM = 0x1 | 0x0
 201 Software\Policies\Mozilla\Firefox\Authentication\AllowProxies\SPNEGO = 0x1 | 0x0
 202 Software\Policies\Mozilla\Firefox\Authentication\AllowProxies\NTLM = 0x1 | 0x0
 203 Software\Policies\Mozilla\Firefox\Authentication\Locked = 0x1 | 0x0
 204 Software\Policies\Mozilla\Firefox\Authentication\PrivateBrowsing = 0x1 | 0x0
 205 ```
 206 #### Windows (Intune)
 207 OMA-URI:
 208 ```
 209 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_SPNEGO
 210 ```
 211 Value (string):
 212 ```
 213 <enabled/>
 214 <data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
 215 ```
 216 OMA-URI:
 217 ```
 218 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_Delegated
 219 ```
 220 Value (string):
 221 ```
 222 <enabled/>
 223 <data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
 224 ```
 225 OMA-URI:
 226 ```
 227 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_NTLM
 228 ```
 229 Value (string):
 230 ```
 231 <enabled/>
 232 <data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
 233 ```
 234 OMA-URI:
 235 ```
 236 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_AllowNonFQDN
 237 ```
 238 Value (string):
 239 ```
 240 <enabled/>
 241 <data id="Authentication_AllowNonFQDN_NTLM" value="true | false"/>
 242 <data id="Authentication_AllowNonFQDN_SPNEGO" value="true | false"/>
 243 ```
 244 OMA-URI:
 245 ```
 246 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_Locked
 247 ```
 248 Value (string):
 249 ```
 250 <enabled/> or <disabled/>
 251 ```
 252 OMA-URI:
 253 ```
 254 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_PrivateBrowsing
 255 ```
 256 Value (string):
 257 ```
 258 <enabled/> or <disabled/>
 259 ```
 260 #### macOS
 261 ```
 262 <dict>
 263   <key>Authentication</key>
 264   <dict>
 265     <key>SPNEGO</key>
 266     <array>
 267       <string>mydomain.com</string>
 268       <string>https://myotherdomain.com</string>
 269     </array>
 270     <key>Delegated</key>
 271     <array>
 272       <string>mydomain.com</string>
 273       <string>https://myotherdomain.com</string>
 274     </array>
 275     <key>NTLM</key>
 276     <array>
 277       <string>mydomain.com</string>
 278       <string>https://myotherdomain.com</string>
 279     </array>
 280     <key>AllowNonFQDN</key>
 281       <dict>
 282       <key>SPNEGO</key>
 283       <true/> | <false/>
 284       <key>NTLM</key>
 285       <true/> | <false/>
 286     </dict>
 287     <key>AllowProxies</key>
 288       <dict>
 289       <key>SPNEGO</key>
 290       <true/> | <false/>
 291       <key>NTLM</key>
 292       <true/> | <false/>
 293     </dict>
 294     <key>Locked</key>
 295     <true/> | <false/>
 296     <key>PrivateBrowsing</key>
 297     <true/> | <false/>
 298   </dict>
 299 </dict>
 300 ```
 301 #### policies.json
 302 ```
 303 {
 304   "policies": {
 305     "Authentication": {
 306       "SPNEGO": ["mydomain.com", "https://myotherdomain.com"],
 307       "Delegated": ["mydomain.com", "https://myotherdomain.com"],
 308       "NTLM": ["mydomain.com", "https://myotherdomain.com"],
 309       "AllowNonFQDN": {
 310         "SPNEGO": true | false,
 311         "NTLM": true | false
 312       },
 313       "AllowProxies": {
 314         "SPNEGO": true | false,
 315         "NTLM": true | false
 316       },
 317       "Locked": true | false,
 318       "PrivateBrowsing": true | false
 319     }
 320   }
 321 }
 322 ```
 323 ### BlockAboutAddons
 324
 325 Block access to the Add-ons Manager (about:addons).
 326
 327 **Compatibility:** Firefox 60, Firefox ESR 60\
 328 **CCK2 Equivalent:** `disableAddonsManager`\
 329 **Preferences Affected:** N/A
 330
 331 #### Windows (GPO)
 332 ```
 333 Software\Policies\Mozilla\Firefox\BlockAboutAddons = 0x1 | 0x0
 334 ```
 335 #### Windows (Intune)
 336 OMA-URI:
 337 ```
 338 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutAddons
 339 ```
 340 Value (string):
 341 ```
 342 <enabled/> or <disabled/>
 343 ```
 344 #### macOS
 345 ```
 346 <dict>
 347   <key>BlockAboutAddons</key>
 348   <true/> | <false/>
 349 </dict>
 350 ```
 351 #### policies.json
 352 ```
 353 {
 354   "policies": {
 355     "BlockAboutAddons": true | false
 356   }
 357 }
 358 ```
 359 ### BlockAboutConfig
 360
 361 Block access to about:config.
 362
 363 **Compatibility:** Firefox 60, Firefox ESR 60\
 364 **CCK2 Equivalent:** `disableAboutConfig`\
 365 **Preferences Affected:** N/A
 366
 367 #### Windows (GPO)
 368 ```
 369 Software\Policies\Mozilla\Firefox\BlockAboutConfig = 0x1 | 0x0
 370 ```
 371 #### Windows (Intune)
 372 OMA-URI:
 373 ```
 374 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutConfig
 375 ```
 376 Value (string):
 377 ```
 378 <enabled/> or <disabled/>
 379 ```
 380 #### macOS
 381 ```
 382 <dict>
 383   <key>BlockAboutConfig</key>
 384   <true/> | <false/>
 385 </dict>
 386 ```
 387 #### policies.json
 388 ```
 389 {
 390   "policies": {
 391     "BlockAboutConfig": true | false
 392   }
 393 }
 394 ```
 395 ### BlockAboutProfiles
 396
 397 Block access to About Profiles (about:profiles).
 398
 399 **Compatibility:** Firefox 60, Firefox ESR 60\
 400 **CCK2 Equivalent:** `disableAboutProfiles`\
 401 **Preferences Affected:** N/A
 402
 403 #### Windows (GPO)
 404 ```
 405 Software\Policies\Mozilla\Firefox\BlockAboutProfiles = 0x1 | 0x0
 406 ```
 407 #### Windows (Intune)
 408 OMA-URI:
 409 ```
 410 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutProfiles
 411 ```
 412 Value (string):
 413 ```
 414 <enabled/> or <disabled/>
 415 ```
 416 #### macOS
 417 ```
 418 <dict>
 419   <key>BlockAboutProfiles</key>
 420   <true/> | <false/>
 421 </dict>
 422 ```
 423 #### policies.json
 424 ```
 425 {
 426   "policies": {
 427     "BlockAboutProfiles": true | false
 428   }
 429 }
 430 ```
 431 ### BlockAboutSupport
 432
 433 Block access to Troubleshooting Information (about:support).
 434
 435 **Compatibility:** Firefox 60, Firefox ESR 60\
 436 **CCK2 Equivalent:** `disableAboutSupport`\
 437 **Preferences Affected:** N/A
 438
 439 #### Windows (GPO)
 440 ```
 441 Software\Policies\Mozilla\Firefox\BlockAboutSupport = 0x1 | 0x0
 442 ```
 443 #### Windows (Intune)
 444 OMA-URI:
 445 ```
 446 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutSupport
 447 ```
 448 Value (string):
 449 ```
 450 <enabled/> or <disabled/>
 451 ```
 452 #### macOS
 453 ```
 454 <dict>
 455   <key>BlockAboutSupport</key>
 456   <true/> | <false/>
 457 </dict>
 458 ```
 459 #### policies.json
 460 ```
 461 {
 462   "policies": {
 463     "BlockAboutSupport": true | false
 464   }
 465 }
 466 ```
 467 ### Bookmarks
 468
 469 Add bookmarks in either the bookmarks toolbar or menu. Only `Title` and `URL` are required. If `Placement` is not specified, the bookmark will be placed on the toolbar. If `Folder` is specified, it is automatically created and bookmarks with the same folder name are grouped together.
 470
 471 **Compatibility:** Firefox 60, Firefox ESR 60\
 472 **CCK2 Equivalent:** `bookmarks.toolbar`,`bookmarks.menu`\
 473 **Preferences Affected:** N/A
 474
 475 #### Windows (GPO)
 476 ```
 477 Software\Policies\Mozilla\Firefox\Bookmarks\1\Title = "Example"
 478 Software\Policies\Mozilla\Firefox\Bookmarks\1\URL = "https://example.com"
 479 Software\Policies\Mozilla\Firefox\Bookmarks\1\Favicon = "https://example.com/favicon.ico"
 480 Software\Policies\Mozilla\Firefox\Bookmarks\1\Placement = "toolbar" | "menu"
 481 Software\Policies\Mozilla\Firefox\Bookmarks\1\Folder = "FolderName"
 482 ```
 483 #### Windows (Intune)
 484 OMA-URI:
 485 ```
 486 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Bookmarks/Bookmark01
 487 ```
 488 Value (string):
 489 ```
 490 <enabled/>
 491 <data id="BookmarkTitle" value="Example"/>
 492 <data id="BookmarkURL" value="https://example.com"/>
 493 <data id="BookmarkFavicon" value="https://example.com/favicon.ico"/>
 494 <data id="BookmarkPlacement" value="toolbar | menu"/>
 495 <data id="BookmarkFolder" value="FolderName"/>
 496 ```
 497 #### macOS
 498 ```
 499 <dict>
 500   <key>Bookmarks</key>
 501   <array>
 502     <dict>
 503       <key>Title</key>
 504       <string>Example</string>
 505       <key>URL</key>
 506       <string>https://example.com</string>
 507       <key>Favicon</key>
 508       <string>https://example.com/favicon.ico</string>
 509       <key>Placement</key>
 510       <string>toolbar | menu</string>
 511       <key>Folder</key>
 512       <string>FolderName</string>
 513     </dict>
 514   </array>
 515 </dict>
 516 ```
 517 #### policies.json
 518 ```
 519 {
 520   "policies": {
 521     "Bookmarks": [
 522       {
 523         "Title": "Example",
 524         "URL": "https://example.com",
 525         "Favicon": "https://example.com/favicon.ico",
 526         "Placement": "toolbar" | "menu",
 527         "Folder": "FolderName"
 528       }
 529     ]
 530   }
 531 }
 532 ```
 533 ### CaptivePortal
 534 Enable or disable the detection of captive portals.
 535
 536 **Compatibility:** Firefox 67, Firefox ESR 60.7\
 537 **CCK2 Equivalent:** N/A\
 538 **Preferences Affected:** `network.captive-portal-service.enabled`
 539
 540 #### Windows (GPO)
 541 ```
 542 Software\Policies\Mozilla\Firefox\CaptivePortal = 0x1 | 0x0
 543 ```
 544 #### Windows (Intune)
 545 OMA-URI:
 546 ```
 547 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/CaptivePortal
 548 ```
 549 Value (string):
 550 ```
 551 <enabled/> or <disabled/>
 552 ```
 553 #### macOS
 554 ```
 555 <dict>
 556   <key>CaptivePortal</key>
 557   <true/> | <false/>
 558 </dict>
 559 ```
 560 #### policies.json
 561 ```
 562 {
 563   "policies": {
 564     "CaptivePortal": true | false
 565   }
 566 }
 567 ```
 568 ### Certificates
 569
 570 ### Certificates | ImportEnterpriseRoots
 571
 572 Trust certificates that have been added to the operating system certificate store by a user or administrator.
 573
 574 Note: This policy only works on Windows and macOS. For Linux discussion, see [bug 1600509](https://bugzilla.mozilla.org/show_bug.cgi?id=1600509).
 575
 576 See https://support.mozilla.org/kb/setting-certificate-authorities-firefox for more detail.
 577
 578 **Compatibility:** Firefox 60, Firefox ESR 60 (macOS support in Firefox 63, Firefox ESR 68)\
 579 **CCK2 Equivalent:** N/A\
 580 **Preferences Affected:** `security.enterprise_roots.enabled`
 581
 582 #### Windows (GPO)
 583 ```
 584 Software\Policies\Mozilla\Firefox\Certificates\ImportEnterpriseRoots = 0x1 | 0x0
 585 ```
 586 #### Windows (Intune)
 587 OMA-URI:
 588 ```
 589 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Certificates/Certificates_ImportEnterpriseRoots
 590 ```
 591 Value (string):
 592 ```
 593 <enabled/> or <disabled/>
 594 ```
 595 #### macOS
 596 ```
 597 <dict>
 598   <key>Certificates</key>
 599   <dict>
 600     <key>ImportEnterpriseRoots</key>
 601     <true/> | <false/>
 602   </dict>
 603 </dict>
 604 ```
 605 #### policies.json
 606 ```
 607 {
 608   "policies": {
 609     "Certificates": {
 610       "ImportEnterpriseRoots": true | false
 611     }
 612   }
 613 }
 614 ```
 615 ### Certificates | Install
 616
 617 Install certificates into the Firefox certificate store. If only a filename is specified, Firefox searches for the file in the following locations:
 618
 619 - Windows
 620   - %USERPROFILE%\AppData\Local\Mozilla\Certificates
 621   - %USERPROFILE%\AppData\Roaming\Mozilla\Certificates
 622 - macOS
 623   - /Library/Application Support/Mozilla/Certificates
 624   - ~/Library/Application Support/Mozilla/Certificates
 625 - Linux
 626   - /usr/lib/mozilla/certificates
 627   - /usr/lib64/mozilla/certificates
 628   - ~/.mozilla/certificates
 629
 630 Starting with Firefox 65, Firefox 60.5 ESR, a fully qualified path can be used, including UNC paths. You should use the native path style for your operating system. We do not support using %USERPROFILE% or other environment variables on Windows.
 631
 632 If you are specifying the path in the policies.json file on Windows, you need to escape your backslashes (`\\`) which means that for UNC paths, you need to escape both (`\\\\`). If you use group policy, you only need one backslash.
 633
 634 Certificates are installed using the trust string `CT,CT,`.
 635
 636 Binary (DER) and ASCII (PEM) certificates are both supported.
 637
 638 **Compatibility:** Firefox 64, Firefox ESR 64\
 639 **CCK2 Equivalent:** `certs.ca`\
 640 **Preferences Affected:** N/A
 641
 642 #### Windows (GPO)
 643 ```
 644 Software\Policies\Mozilla\Firefox\Certificates\Install\1 = "cert1.der"
 645 Software\Policies\Mozilla\Firefox\Certificates\Install\2 = "C:\Users\username\cert2.pem"
 646 ```
 647 #### Windows (Intune)
 648 OMA-URI:
 649 ```
 650 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Certificates/Certificates_Install
 651 ```
 652 Value (string):
 653 ```
 654 <enabled/>
 655 <data id="Certificates_Install" value="1&#xF000;cert1.der&#xF000;2&#xF000;C:\Users\username\cert2.pem"/>
 656 ```
 657 #### macOS
 658 ```
 659 <dict>
 660   <key>Certificates</key>
 661   <dict>
 662     <key>Install</key>
 663     <array>
 664       <string>cert1.der</string>
 665       <string>/Users/username/cert2.pem</string>
 666     </array>
 667   </dict>
 668 </dict>
 669 ```
 670 #### policies.json
 671 ```
 672 {
 673   "policies": {
 674     "Certificates": {
 675       "Install": ["cert1.der", "/home/username/cert2.pem"]
 676     }
 677   }
 678 }
 679 ```
 680 ### Cookies
 681 Configure cookie preferences.
 682
 683 `Allow` is a list of origins (not domains) where cookies are always allowed. You must include http or https.
 684
 685 `AllowSession` is a list of origins (not domains) where cookies are only allowed for the current session. You must include http or https.
 686
 687 `Block` is a list of origins (not domains) where cookies are always blocked. You must include http or https.
 688
 689 `Default` determines whether cookies are accepted at all.
 690
 691 `AcceptThirdParty` determines how third-party cookies are handled.
 692
 693 `ExpireAtSessionEnd` determines when cookies expire.
 694
 695 `RejectTracker` only rejects cookies for trackers.
 696
 697 `Locked` prevents the user from changing cookie preferences.
 698
 699 **Compatibility:** Firefox 60, Firefox ESR 60 (RejectTracker added in Firefox 63, AllowSession added in Firefox 79/78.1)\
 700 **CCK2 Equivalent:** N/A\
 701 **Preferences Affected:** `network.cookie.cookieBehavior`,`network.cookie.lifetimePolicy`
 702
 703 #### Windows (GPO)
 704 ```
 705 Software\Policies\Mozilla\Firefox\Cookies\Allow\1 = "https://example.com"
 706 Software\Policies\Mozilla\Firefox\Cookies\AllowSession\1 = "https://example.edu"
 707 Software\Policies\Mozilla\Firefox\Cookies\Block\1 = "https://example.org"
 708 Software\Policies\Mozilla\Firefox\Cookies\Default = 0x1 | 0x0
 709 Software\Policies\Mozilla\Firefox\Cookies\AcceptThirdParty = "always" | "never" | "from-visited"
 710 Software\Policies\Mozilla\Firefox\Cookies\ExpireAtSessionEnd = 0x1 | 0x0
 711 Software\Policies\Mozilla\Firefox\Cookies\RejectTracker = 0x1 | 0x0
 712 Software\Policies\Mozilla\Firefox\Cookies\Locked = 0x1 | 0x0
 713 ```
 714 #### Windows (Intune)
 715 OMA-URI:
 716 ```
 717 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Allow
 718 ```
 719 Value (string):
 720 ```
 721 <enabled/>
 722 <data id="Cookies_Allow" value="1&#xF000;https://example.com"/>
 723 ```
 724 OMA-URI:
 725 ```
 726 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_AllowSession
 727 ```
 728 Value (string):
 729 ```
 730 <enabled/>
 731 <data id="Cookies_Allow" value="1&#xF000;https://example.edu"/>
 732 ```
 733 OMA-URI:
 734 ```
 735 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Block
 736 ```
 737 Value (string):
 738 ```
 739 <enabled/>
 740 <data id="Cookies_Block" value="1&#xF000;https://example.org"/>
 741 ```
 742 OMA-URI:
 743 ```
 744 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Default
 745 ```
 746 Value (string):
 747 ```
 748 <enabled/> or <disabled/>
 749 ```
 750 OMA-URI:
 751 ```
 752 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_AcceptThirdParty
 753 ```
 754 Value (string):
 755 ```
 756 <enabled/>
 757 <data id="Cookies_AcceptThirdParty" value="always | never | from-visited"/>
 758 ```
 759 OMA-URI:
 760 ```
 761 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_ExpireAtSessionEnd
 762 ```
 763 Value (string):
 764 ```
 765 <enabled/> or <disabled/>
 766 ```
 767 OMA-URI:
 768 ```
 769 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_RejectTracker
 770 ```
 771 Value (string):
 772 ```
 773 <enabled/> or <disabled/>
 774 ```
 775 OMA-URI:
 776 ```
 777 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Locked
 778 ```
 779 Value (string):
 780 ```
 781 <enabled/> or <disabled/>
 782 ```
 783 #### macOS
 784 ```
 785 <dict>
 786   <key>Cookies</key>
 787   <dict>
 788     <key>Allow</key>
 789     <array>
 790       <string>http://example.com</string>
 791     </array>
 792     <key>AllowSession</key>
 793     <array>
 794       <string>http://example.edu</string>
 795     </array>
 796     <key>Block</key>
 797     <array>
 798       <string>http://example.org</string>
 799     </array>
 800     <key>Default</key>
 801     <true/> | <false/>
 802     <key>AcceptThirdParty</key>
 803     <string>always | never | from-visited</string>
 804     <key>ExpireAtSessionEnd</key>
 805     <true/> | <false/>
 806     <key>RejectTracker</key>
 807     <true/> | <false/>
 808     <key>Locked</key>
 809     <true/> | <false/>
 810   </dict>
 811 </dict>
 812 ```
 813 #### policies.json
 814 ```
 815 {
 816   "policies": {
 817     "Cookies": {
 818       "Allow": ["http://example.org/"],
 819       "AllowSession": ["http://example.edu/"],
 820       "Block": ["http://example.edu/"],
 821       "Default": true | false,
 822       "AcceptThirdParty": "always" | "never" | "from-visited",
 823       "ExpireAtSessionEnd": true | false,
 824       "RejectTracker": true | false,
 825       "Locked": true | false
 826     }
 827   }
 828 }
 829 ```
 830 ### DisableSetDesktopBackground
 831 Remove the "Set As Desktop Background..." menuitem when right clicking on an image.
 832
 833 **Compatibility:** Firefox 60, Firefox ESR 60\
 834 **CCK2 Equivalent:** `removeSetDesktopBackground`\
 835 **Preferences Affected:** N/A
 836
 837 #### Windows (GPO)
 838 ```
 839 Software\Policies\Mozilla\Firefox\DisableSetDesktopBackground = 0x1 | 0x0
 840 ```
 841 #### Windows (Intune)
 842 OMA-URI:
 843 ```
 844 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSetDesktopBackground
 845 ```
 846 Value (string):
 847 ```
 848 <enabled/> or <disabled/>
 849 ```
 850 #### macOS
 851 ```
 852 <dict>
 853   <key>DisableSetDesktopBackground</key>
 854   <true/> | <false/>
 855 </dict>
 856 ```
 857 #### policies.json
 858 ```
 859 {
 860   "policies": {
 861     "DisableSetDesktopBackground": true | false
 862   }
 863 }
 864 ```
 865 ### DisableMasterPasswordCreation
 866 Remove the master password functionality.
 867
 868 If this value is true, it works the same as setting [`PrimaryPassword`](#primarypassword) to false and removes the primary password functionality.
 869
 870 If both DisableMasterPasswordCreation and PrimaryPassword are used, DisableMasterPasswordCreation takes precedent.
 871
 872 **Compatibility:** Firefox 60, Firefox ESR 60\
 873 **CCK2 Equivalent:** `noMasterPassword`\
 874 **Preferences Affected:** N/A
 875
 876 #### Windows (GPO)
 877 ```
 878 Software\Policies\Mozilla\Firefox\DisableMasterPasswordCreation = 0x1 | 0x0
 879 ```
 880 #### Windows (Intune)
 881 OMA-URI:
 882 ```
 883 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableMasterPasswordCreation
 884 ```
 885 Value (string):
 886 ```
 887 <enabled/> or <disabled/>
 888 ```
 889 #### macOS
 890 ```
 891 <dict>
 892   <key>DisableMasterPasswordCreation</key>
 893   <true/> | <false/>
 894 </dict>
 895 ```
 896 #### policies.json
 897 ```
 898 {
 899   "policies": {
 900     "DisableMasterPasswordCreation": true | false
 901   }
 902 }
 903 ```
 904 ### DisableAppUpdate
 905 Turn off application updates.
 906
 907 **Compatibility:** Firefox 60, Firefox ESR 60\
 908 **CCK2 Equivalent:** `disableFirefoxUpdates`\
 909 **Preferences Affected:** N/A
 910
 911 #### Windows (GPO)
 912 ```
 913 Software\Policies\Mozilla\Firefox\DisableAppUpdate = 0x1 | 0x0
 914 ```
 915 #### Windows (Intune)
 916 OMA-URI:
 917 ```
 918 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableAppUpdate
 919 ```
 920 Value (string):
 921 ```
 922 <enabled/> or <disabled/>
 923 ```
 924 #### macOS
 925 ```
 926 <dict>
 927   <key>DisableAppUpdate</key>
 928   <true/> | <false/>
 929 </dict>
 930 ```
 931 #### policies.json
 932 ```
 933 {
 934   "policies": {
 935     "DisableAppUpdate": true | false
 936   }
 937 }
 938 ```
 939 ### DisableBuiltinPDFViewer
 940 Disable the built in PDF viewer. PDF files are downloaded and sent externally.
 941
 942 **Compatibility:** Firefox 60, Firefox ESR 60\
 943 **CCK2 Equivalent:** `disablePDFjs`\
 944 **Preferences Affected:** `pdfjs.disabled`
 945
 946 #### Windows (GPO)
 947 ```
 948 Software\Policies\Mozilla\Firefox\DisableBuiltinPDFViewer = 0x1 | 0x0
 949 ```
 950 #### Windows (Intune)
 951 OMA-URI:
 952 ```
 953 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableBuiltinPDFViewer
 954 ```
 955 Value (string):
 956 ```
 957 <enabled/> or <disabled/>
 958 ```
 959 #### macOS
 960 ```
 961 <dict>
 962   <key>DisableBuiltinPDFViewer</key>
 963   <true/> | <false/>
 964 </dict>
 965 ```
 966 #### policies.json
 967 ```
 968 {
 969   "policies": {
 970     "DisableBuiltinPDFViewer": true | false
 971   }
 972 }
 973 ```
 974 ### DisabledCiphers
 975 Disable specific cryptographic ciphers.
 976
 977 ---
 978 **Note:**
 979
 980 This policy was updated in Firefox 78 to allow enabling ciphers as well. Setting the value to true disables the cipher, setting the value to false enables the cipher. Previously setting the value to true or false disabled the cipher.
 981
 982 ---
 983 **Compatibility:** Firefox 76, Firefox ESR 68.8 (TLS_RSA_WITH_AES_128_GCM_SHA256 and TLS_RSA_WITH_AES_256_GCM_SHA384 were added in Firefox 78)\
 984 **CCK2 Equivalent:** N/A\
 985 **Preferences Affected:** N/A
 986
 987 #### Windows (GPO)
 988 ```
 989 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_DHE_RSA_WITH_AES_128_CBC_SHA = 0x1 | 0x0
 990 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_DHE_RSA_WITH_AES_256_CBC_SHA = 0x1 | 0x0
 991 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA = 0x1 | 0x0
 992 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA = 0x1 | 0x0
 993 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 = 0x1 | 0x0
 994 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 = 0x1 | 0x0
 995 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_RSA_WITH_AES_128_CBC_SHA = 0x1 | 0x0
 996 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_RSA_WITH_AES_256_CBC_SHA = 0x1 | 0x0
 997 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_RSA_WITH_3DES_EDE_CBC_SHA = 0x1 | 0x0
 998 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_RSA_WITH_AES_128_GCM_SHA256 = 0x1 | 0x0
 999 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_RSA_WITH_AES_256_GCM_SHA384 = 0x1 | 0x0
1000 ```
1001 #### Windows (Intune)
1002 OMA-URI:
1003 ```
1004 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_DHE_RSA_WITH_AES_128_CBC_SHA
1005 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_DHE_RSA_WITH_AES_256_CBC_SHA
1006 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
1007 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
1008 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
1009 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
1010 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_RSA_WITH_AES_128_CBC_SHA
1011 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_RSA_WITH_AES_256_CBC_SHA
1012 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_RSA_WITH_3DES_EDE_CBC_SHA
1013 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_RSA_WITH_AES_128_GCM_SHA256
1014 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_RSA_WITH_AES_256_GCM_SHA384
1015 ```
1016 Value (string):
1017 ```
1018 <enabled/> or <disabled/>
1019 ```
1020 #### macOS
1021 ```
1022 <dict>
1023   <key>DisabledCiphers</key>
1024     <dict>
1025       <key>TLS_DHE_RSA_WITH_AES_128_CBC_SHA</key>
1026       <true/> | <false/>
1027       <key>TLS_DHE_RSA_WITH_AES_256_CBC_SHA</key>
1028       <true/> | <false/>
1029       <key>TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA</key>
1030       <true/> | <false/>
1031       <key>TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA</key>
1032       <true/> | <false/>
1033       <key>TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256</key>
1034       <true/> | <false/>
1035       <key>TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256</key>
1036       <true/> | <false/>
1037       <key>TLS_RSA_WITH_AES_128_CBC_SHA</key>
1038       <true/> | <false/>
1039       <key>TLS_RSA_WITH_AES_256_CBC_SHA</key>
1040       <true/> | <false/>
1041       <key>TLS_RSA_WITH_3DES_EDE_CBC_SHA</key>
1042       <true/> | <false/>
1043       <key>TLS_RSA_WITH_AES_128_GCM_SHA256</key>
1044       <true/> | <false/>
1045       <key>TLS_RSA_WITH_AES_256_GCM_SHA384</key>
1046       <true/> | <false/>
1047     </dict>
1048 </dict>
1049 ```
1050 #### policies.json
1051 ```
1052 {
1053   "policies": {
1054     "DisabledCiphers" {
1055       "TLS_DHE_RSA_WITH_AES_128_CBC_SHA": true | false,
1056       "TLS_DHE_RSA_WITH_AES_256_CBC_SHA": true | false,
1057       "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA": true | false,
1058       "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA": true | false,
1059       "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256": true | false,
1060       "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256": true | false,
1061       "TLS_RSA_WITH_AES_128_CBC_SHA": true | false,
1062       "TLS_RSA_WITH_AES_256_CBC_SHA": true | false,
1063       "TLS_RSA_WITH_3DES_EDE_CBC_SHA": true | false
1064       "TLS_RSA_WITH_AES_128_GCM_SHA256": true | false
1065       "TLS_RSA_WITH_AES_256_GCM_SHA384": true | false
1066     }
1067   }
1068 }
1069 ```
1070 ### DisableDefaultBrowserAgent
1071 Prevent the default browser agent from taking any actions. Only applicable to Windows; other platforms don’t have the agent.
1072
1073 **Compatibility:** Firefox 75, Firefox ESR 68.7 (Windows only)\
1074 **CCK2 Equivalent:** N/A\
1075 **Preferences Affected:** N/A
1076
1077 #### Windows (GPO)
1078 ```
1079 Software\Policies\Mozilla\Firefox\DisableDefaultBrowserAgent = 0x1 | 0x0
1080 ```
1081 #### Windows (Intune)
1082 OMA-URI:
1083 ```
1084 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableDefaultBrowserAgent
1085 ```
1086 Value (string):
1087 ```
1088 <enabled/> or <disabled/>
1089 ```
1090 #### policies.json
1091 ```
1092 {
1093   "policies": {
1094     "DisableDefaultBrowserAgent": true | false
1095   }
1096 }
1097 ```
1098 ### DisableDeveloperTools
1099 Remove access to all developer tools.
1100
1101 **Compatibility:** Firefox 60, Firefox ESR 60\
1102 **CCK2 Equivalent:** `removeDeveloperTools`\
1103 **Preferences Affected:** `devtools.policy.disabled`
1104
1105 #### Windows (GPO)
1106 ```
1107 Software\Policies\Mozilla\Firefox\DisableDeveloperTools = 0x1 | 0x0`
1108 ```
1109 #### Windows (Intune)
1110 OMA-URI:
1111 ```
1112 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableDeveloperTools
1113 ```
1114 Value (string):
1115 ```
1116 <enabled/> or <disabled/>
1117 ```
1118 #### macOS
1119 ```
1120 <dict>
1121   <key>DisableDeveloperTools</key>
1122   <true/> | <false/>
1123 </dict>
1124 ```
1125 #### policies.json
1126 ```
1127 {
1128   "policies": {
1129     "DisableDeveloperTools": true | false
1130   }
1131 }
1132 ```
1133 ### DisableFeedbackCommands
1134 Disable the menus for reporting sites (Submit Feedback, Report Deceptive Site).
1135
1136 **Compatibility:** Firefox 60, Firefox ESR 60\
1137 **CCK2 Equivalent:** N/A\
1138 **Preferences Affected:** N/A
1139
1140 #### Windows (GPO)
1141 ```
1142 Software\Policies\Mozilla\Firefox\DisableFeedbackCommands = 0x1 | 0x0
1143 ```
1144 #### Windows (Intune)
1145 OMA-URI:
1146 ```
1147 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFeedbackCommands
1148 ```
1149 Value (string):
1150 ```
1151 <enabled/> or <disabled/>
1152 ```
1153 #### macOS
1154 ```
1155 <dict>
1156   <key>DisableFeedbackCommands</key>
1157   <true/> | <false/>
1158 </dict>
1159 ```
1160 #### policies.json
1161 ```
1162 {
1163   "policies": {
1164     "DisableFeedbackCommands": true | false
1165   }
1166 }
1167 ```
1168 ### DisableFirefoxScreenshots
1169 Remove access to Firefox Screenshots.
1170
1171 **Compatibility:** Firefox 60, Firefox ESR 60\
1172 **CCK2 Equivalent:** N/A\
1173 **Preferences Affected:** `extensions.screenshots.disabled`
1174
1175 #### Windows (GPO)
1176 ```
1177 Software\Policies\Mozilla\Firefox\DisableFirefoxScreenshots = 0x1 | 0x0
1178 ```
1179 #### Windows (Intune)
1180 OMA-URI:
1181 ```
1182 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxScreenshots
1183 ```
1184 Value (string):
1185 ```
1186 <enabled/> or <disabled/>
1187 ```
1188 #### macOS
1189 ```
1190 <dict>
1191   <key>DisableFirefoxScreenshots</key>
1192   <true/> | <false/>
1193 </dict>
1194 ```
1195 #### policies.json
1196 ```
1197 {
1198   "policies": {
1199     "DisableFirefoxScreenshots": true | false
1200   }
1201 }
1202 ```
1203 ### DisableFirefoxAccounts
1204 Disable Firefox Accounts integration (Sync).
1205
1206 **Compatibility:** Firefox 60, Firefox ESR 60\
1207 **CCK2 Equivalent:** `disableSync`\
1208 **Preferences Affected:** `identity.fxaccounts.enabled`
1209
1210 #### Windows (GPO)
1211 ```
1212 Software\Policies\Mozilla\Firefox\DisableFirefoxAccounts = 0x1 | 0x0
1213 ```
1214 #### Windows (Intune)
1215 OMA-URI:
1216 ```
1217 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxAccounts
1218 ```
1219 Value (string):
1220 ```
1221 <enabled/> or <disabled/>
1222 ```
1223 #### macOS
1224 ```
1225 <dict>
1226   <key>DisableFirefoxAccounts</key>
1227   <true/> | <false/>
1228 </dict>
1229 ```
1230 #### policies.json
1231 ```
1232 {
1233   "policies": {
1234     "DisableFirefoxAccounts": true | false
1235   }
1236 }
1237 ```
1238 ### DisableFirefoxStudies
1239 Disable Firefox studies (Shield).
1240
1241 **Compatibility:** Firefox 60, Firefox ESR 60\
1242 **CCK2 Equivalent:** N/A\
1243 **Preferences Affected:** N/A
1244
1245 #### Windows (GPO)
1246 ```
1247 Software\Policies\Mozilla\Firefox\DisableFirefoxStudies = 0x1 | 0x0
1248 ```
1249 #### Windows (Intune)
1250 OMA-URI:
1251 ```
1252 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxStudies
1253 ```
1254 Value (string):
1255 ```
1256 <enabled/> or <disabled/>
1257 ```
1258 #### macOS
1259 ```
1260 <dict>
1261   <key>DisableFirefoxStudies</key>
1262   <true/> | <false/>
1263 </dict>
1264 ```
1265 #### policies.json
1266 ```
1267 {
1268   "policies": {
1269     "DisableFirefoxStudies": true | false
1270   }
1271 }
1272 ```
1273 ### DisableForgetButton
1274 Disable the "Forget" button.
1275
1276 **Compatibility:** Firefox 60, Firefox ESR 60\
1277 **CCK2 Equivalent:** `disableForget`\
1278 **Preferences Affected:** N/A
1279
1280 #### Windows (GPO)
1281 ```
1282 Software\Policies\Mozilla\Firefox\DisableForgetButton = 0x1 | 0x0
1283 ```
1284 #### Windows (Intune)
1285 OMA-URI:
1286 ```
1287 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableForgetButton
1288 ```
1289 Value (string):
1290 ```
1291 <enabled/> or <disabled/>
1292 ```
1293 #### macOS
1294 ```
1295 <dict>
1296   <key>DisableForgetButton</key>
1297   <true/> | <false/>
1298 </dict>
1299 ```
1300 #### policies.json
1301 ```
1302 {
1303   "policies": {
1304     "DisableForgetButton": true | false
1305   }
1306 }
1307 ```
1308 ### DisableFormHistory
1309 Turn off saving information on web forms and the search bar.
1310
1311 **Compatibility:** Firefox 60, Firefox ESR 60\
1312 **CCK2 Equivalent:** `disableFormFill`\
1313 **Preferences Affected:** ` browser.formfill.enable`
1314
1315 #### Windows (GPO)
1316 ```
1317 Software\Policies\Mozilla\Firefox\DisableFormHistory = 0x1 | 0x0
1318 ```
1319 #### Windows (Intune)
1320 OMA-URI:
1321 ```
1322 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFormHistory
1323 ```
1324 Value (string):
1325 ```
1326 <enabled/> or <disabled/>
1327 ```
1328 #### macOS
1329 ```
1330 <dict>
1331   <key>DisableFormHistory</key>
1332   <true/> | <false/>
1333 </dict>
1334 ```
1335 #### policies.json
1336 ```
1337 {
1338   "policies": {
1339     "DisableFormHistory": true | false
1340   }
1341 }
1342 ```
1343 ### DisablePasswordReveal
1344 Do not allow passwords to be shown in saved logins
1345
1346 **Compatibility:** Firefox 71, Firefox ESR 68.3\
1347 **CCK2 Equivalent:** N/A
1348 **Preferences Affected:** N/A
1349
1350 #### Windows (GPO)
1351 ```
1352 Software\Policies\Mozilla\Firefox\DisablePasswordReveal = 0x1 | 0x0
1353 ```
1354 #### Windows (Intune)
1355 OMA-URI:
1356 ```
1357 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePasswordReveal
1358 ```
1359 Value (string):
1360 ```
1361 <enabled/> or <disabled/>
1362 ```
1363 #### macOS
1364 ```
1365 <dict>
1366   <key>DisablePasswordReveal</key>
1367   <true/> | <false/>
1368 </dict>
1369 ```
1370 #### policies.json
1371 ```
1372 {
1373   "policies": {
1374     "DisablePasswordReveal": true | false
1375   }
1376 }
1377 ```
1378 ### DisablePocket
1379 Remove Pocket in the Firefox UI. It does not remove it from the new tab page.
1380
1381 **Compatibility:** Firefox 60, Firefox ESR 60\
1382 **CCK2 Equivalent:** `disablePocket`\
1383 **Preferences Affected:** `extensions.pocket.enabled`
1384
1385 #### Windows (GPO)
1386 ```
1387 Software\Policies\Mozilla\Firefox\DisablePocket = 0x1 | 0x0
1388 ```
1389 #### Windows (Intune)
1390 OMA-URI:
1391 ```
1392 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePocket
1393 ```
1394 Value (string):
1395 ```
1396 <enabled/> or <disabled/>
1397 ```
1398 #### macOS
1399 ```
1400 <dict>
1401   <key>DisablePocket</key>
1402   <true/> | <false/>
1403 </dict>
1404 ```
1405 #### policies.json
1406 ```
1407 {
1408   "policies": {
1409     "DisablePocket": true | false
1410   }
1411 }
1412 ```
1413 ### DisablePrivateBrowsing
1414 Remove access to private browsing.
1415
1416 **Compatibility:** Firefox 60, Firefox ESR 60\
1417 **CCK2 Equivalent:** `disablePrivateBrowsing`\
1418 **Preferences Affected:** N/A
1419
1420 #### Windows (GPO)
1421 ```
1422 Software\Policies\Mozilla\Firefox\DisablePrivateBrowsing = 0x1 | 0x0
1423 ```
1424 #### Windows (Intune)
1425 OMA-URI:
1426 ```
1427 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePrivateBrowsing
1428 ```
1429 Value (string):
1430 ```
1431 <enabled/> or <disabled/>
1432 ```
1433 #### macOS
1434 ```
1435 <dict>
1436   <key>DisablePrivateBrowsing</key>
1437   <true/> | <false/>
1438 </dict>
1439 ```
1440 #### policies.json
1441 ```
1442 {
1443   "policies": {
1444     "DisablePrivateBrowsing": true | false
1445   }
1446 }
1447 ```
1448 ### DisableProfileImport
1449 Disables the "Import data from another browser" option in the bookmarks window.
1450
1451 **Compatibility:** Firefox 60, Firefox ESR 60\
1452 **CCK2 Equivalent:** N/A\
1453 **Preferences Affected:** N/A
1454
1455 #### Windows (GPO)
1456 ```
1457 Software\Policies\Mozilla\Firefox\DisableProfileImport = 0x1 | 0x0
1458 ```
1459 #### Windows (Intune)
1460 OMA-URI:
1461 ```
1462 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableProfileImport
1463 ```
1464 Value (string):
1465 ```
1466 <enabled/> or <disabled/>
1467 ```
1468 #### macOS
1469 ```
1470 <dict>
1471   <key>DisableProfileImport</key>
1472   <true/> | <false/>
1473 </dict>
1474 ```
1475 #### policies.json
1476 ```
1477 {
1478   "policies": {
1479     "DisableProfileImport": true | false
1480   }
1481 }
1482 ```
1483 ### DisableProfileRefresh
1484 Disable the Refresh Firefox button on about:support and support.mozilla.org, as well as the prompt that displays offering to refresh Firefox when you haven't used it in a while.
1485
1486 **Compatibility:** Firefox 60, Firefox ESR 60\
1487 **CCK2 Equivalent:** `disableResetFirefox`\
1488 **Preferences Affected:** `browser.disableResetPrompt`
1489
1490 #### Windows (GPO)
1491 ```
1492 Software\Policies\Mozilla\Firefox\DisableProfileRefresh = 0x1 | 0x0
1493 ```
1494 #### Windows (Intune)
1495 OMA-URI:
1496 ```
1497 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableProfileRefresh
1498 ```
1499 Value (string):
1500 ```
1501 <enabled/> or <disabled/>
1502 ```
1503 #### macOS
1504 ```
1505 <dict>
1506   <key>DisableProfileRefresh</key>
1507   <true/> | <false/>
1508 </dict>
1509 ```
1510 #### policies.json
1511 ```
1512 {
1513   "policies": {
1514     "DisableProfileRefresh": true | false
1515   }
1516 }
1517 ```
1518 ### DisableSafeMode
1519 Disable safe mode within the browser.
1520
1521 On Windows, this disables safe mode via the command line as well.
1522
1523 **Compatibility:** Firefox 60, Firefox ESR 60 (Windows, macOS)\
1524 **CCK2 Equivalent:** `disableSafeMode`\
1525 **Preferences Affected:** N/A
1526
1527 #### Windows (GPO)
1528 ```
1529 Software\Policies\Mozilla\Firefox\DisableSafeMode = 0x1 | 0x0
1530 ```
1531 #### Windows (Intune)
1532 OMA-URI:
1533 ```
1534 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSafeMode
1535 ```
1536 Value (string):
1537 ```
1538 <enabled/> or <disabled/>
1539 ```
1540 #### macOS
1541 ```
1542 <dict>
1543   <key>DisableSafeMode</key>
1544   <true/> | <false/>
1545 </dict>
1546 ```
1547 #### policies.json
1548 ```
1549 {
1550   "policies": {
1551     "DisableSafeMode": true | false
1552   }
1553 }
1554 ```
1555 ### DisableSecurityBypass
1556 Prevent the user from bypassing security in certain cases.
1557
1558 `InvalidCertificate` prevents adding an exception when an invalid certificate is shown.
1559
1560 `SafeBrowsing` prevents selecting "ignore the risk" and visiting a harmful site anyway.
1561
1562 **Compatibility:** Firefox 60, Firefox ESR 60\
1563 **CCK2 Equivalent:** N/A\
1564 **Preferences Affected:** `security.certerror.hideAddException`,`browser.safebrowsing.allowOverride`
1565
1566 #### Windows (GPO)
1567 ```
1568 Software\Policies\Mozilla\Firefox\DisableSecurityBypass\InvalidCertificate = 0x1 | 0x0
1569 Software\Policies\Mozilla\Firefox\DisableSecurityBypass\SafeBrowsing = 0x1 | 0x0
1570 ```
1571 #### Windows (Intune)
1572 OMA-URI:
1573 ```
1574 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/P_DisableSecurityBypass_InvalidCertificate
1575 ```
1576 Value (string):
1577 ```
1578 <enabled/> or <disabled/>
1579 ```
1580 OMA-URI:
1581 ```
1582 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/P_DisableSecurityBypass_SafeBrowsing
1583 ```
1584 Value (string):
1585 ```
1586 <enabled/> or <disabled/>
1587 ```
1588
1589 #### macOS
1590 ```
1591 <dict>
1592   <key>DisableSecurityBypass</key>
1593   <dict>
1594     <key>InvalidCertificate</key>
1595     <true/> | <false/>
1596     <key>SafeBrowsing</key>
1597     <true/> | <false/>
1598   </dict>
1599 </dict>
1600 ```
1601 #### policies.json
1602 ```
1603 {
1604   "policies": {
1605     "DisableSecurityBypass": {
1606       "InvalidCertificate": true | false,
1607       "SafeBrowsing": true | false
1608     }
1609   }
1610 }
1611 ```
1612 ### DisableSystemAddonUpdate
1613 Prevent system add-ons from being installed or update.
1614
1615 **Compatibility:** Firefox 60, Firefox ESR 60\
1616 **CCK2 Equivalent:** N/A\
1617 **Preferences Affected:** N/A
1618
1619 #### Windows (GPO)
1620 ```
1621 Software\Policies\Mozilla\Firefox\DisableSystemAddonUpdate = 0x1 | 0x0
1622 ```
1623 #### Windows (Intune)
1624 OMA-URI:
1625 ```
1626 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSystemAddonUpdate
1627 ```
1628 Value (string):
1629 ```
1630 <enabled/> or <disabled/>
1631 ```
1632 #### macOS
1633 ```
1634 <dict>
1635   <key>DisableSystemAddonUpdate</key>
1636   <true/> | <false/>
1637 </dict>
1638 ```
1639 #### policies.json
1640 ```
1641 {
1642   "policies": {
1643     "DisableSystemAddonUpdate": true | false
1644   }
1645 }
1646 ```
1647 ### DisableTelemetry
1648 Prevent the upload of telemetry data.
1649
1650 As of Firefox 83 and Firefox ESR 78.5, local storage of telemetry data is disabled as well.
1651
1652 Mozilla recommends that you do not disable telemetry. Information collected through telemetry helps us build a better product for businesses like yours.
1653
1654 **Compatibility:** Firefox 60, Firefox ESR 60\
1655 **CCK2 Equivalent:** `disableTelemetry`\
1656 **Preferences Affected:** `datareporting.healthreport.uploadEnabled,datareporting.policy.dataSubmissionEnabled,toolkit.telemetry.archive.enabled`
1657
1658 #### Windows (GPO)
1659 ```
1660 Software\Policies\Mozilla\Firefox\DisableTelemetry = 0x1 | 0x0
1661 ```
1662 #### Windows (Intune)
1663 OMA-URI:
1664 ```
1665 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableTelemetry
1666 ```
1667 Value (string):
1668 ```
1669 <enabled/> or <disabled/>
1670 ```
1671 #### macOS
1672 ```
1673 <dict>
1674   <key>DisableTelemetry</key>
1675   <true/> | <false/>
1676 </dict>
1677 ```
1678 #### policies.json
1679 ```
1680 {
1681   "policies": {
1682     "DisableTelemetry": true | false
1683   }
1684 }
1685 ```
1686 ### DisplayBookmarksToolbar
1687 Set the initial state of the bookmarks toolbar. A user can still hide it and it will stay hidden.
1688
1689 **Compatibility:** Firefox 60, Firefox ESR 60\
1690 **CCK2 Equivalent:** `displayBookmarksToolbar`\
1691 **Preferences Affected:** N/A
1692
1693 #### Windows (GPO)
1694 ```
1695 Software\Policies\Mozilla\Firefox\DisplayBookmarksToolbar = 0x1 | 0x0
1696 ```
1697 #### Windows (Intune)
1698 OMA-URI:
1699 ```
1700 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisplayBookmarksToolbar
1701 ```
1702 Value (string):
1703 ```
1704 <enabled/> or <disabled/>
1705 ```
1706 #### macOS
1707 ```
1708 <dict>
1709   <key>DisplayBookmarksToolbar</key>
1710   <true/> | <false/>
1711 </dict>
1712 ```
1713 #### policies.json
1714 ```
1715 {
1716   "policies": {
1717     "DisplayBookmarksToolbar": true | false
1718   }
1719 }
1720 ```
1721 ### DisplayMenuBar (Deprecated)
1722 Set the initial state of the menubar. A user can still hide it and it will stay hidden.
1723
1724 **Compatibility:** Firefox 60, Firefox ESR 60 (Windows, some Linux)\
1725 **CCK2 Equivalent:** `displayMenuBar`\
1726 **Preferences Affected:** N/A
1727
1728 #### Windows (GPO)
1729 ```
1730 Software\Policies\Mozilla\Firefox\DisplayMenuBar = 0x1 | 0x0
1731 ```
1732 #### macOS
1733 ```
1734 <dict>
1735   <key>DisplayMenuBar</key>
1736   <true/> | <false/>
1737 </dict>
1738 ```
1739 #### policies.json
1740 ```
1741 {
1742   "policies": {
1743     "DisplayMenuBar": true | false
1744   }
1745 }
1746 ```
1747 ### DisplayMenuBar
1748 Set the state of the menubar.
1749
1750 `always` means the menubar is shown and cannot be hidden.
1751
1752 `never` means the menubar is hidden and cannot be shown.
1753
1754 `default-on` means the menubar is on by default but can be hidden.
1755
1756 `default-off` means the menubar is off by default but can be shown.
1757
1758 **Compatibility:** Firefox 73, Firefox ESR 68.5 (Windows, some Linux)\
1759 **CCK2 Equivalent:** `displayMenuBar`\
1760 **Preferences Affected:** N/A
1761
1762 #### Windows (GPO)
1763 ```
1764 Software\Policies\Mozilla\Firefox\DisplayMenuBar = "always", "never", "default-on", "default-off"
1765 ```
1766 #### Windows (Intune)
1767 OMA-URI:
1768 ```
1769 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisplayMenuBar_Enum
1770 ```
1771 Value (string):
1772 ```
1773 <enabled/>
1774 <data id="DisplayMenuBar" value="always | never | default-on | default-off"/>
1775 ```
1776 #### macOS
1777 ```
1778 <dict>
1779   <key>DisplayMenuBar</key>
1780   <string>always | never | default-on | default-off</string>
1781 </dict>
1782 ```
1783 #### policies.json
1784 ```
1785 {
1786   "policies": {
1787     "DisplayMenuBar": "always", "never", "default-on", "default-off"
1788   }
1789 }
1790 ```
1791 ### DNSOverHTTPS
1792 Configure DNS over HTTPS.
1793
1794 `Enabled` determines whether DNS over HTTPS is enabled
1795
1796 `ProviderURL` is a URL to another provider.
1797
1798 `Locked` prevents the user from changing DNS over HTTPS preferences.
1799
1800 `ExcludedDomains` excludes domains from DNS over HTTPS.
1801
1802 **Compatibility:** Firefox 63, Firefox ESR 68 (ExcludedDomains added in 75/68.7)\
1803 **CCK2 Equivalent:** N/A\
1804 **Preferences Affected:** `network.trr.mode`,`network.trr.uri`
1805
1806 #### Windows (GPO)
1807 ```
1808 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\Enabled = 0x1 | 0x0
1809 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\ProviderURL = "URL_TO_ALTERNATE_PROVIDER"
1810 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\Locked = 0x1 | 0x0
1811 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\ExcludedDomains\1 = "example.com"
1812 ```
1813 #### Windows (Intune)
1814 OMA-URI:
1815 ```
1816 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_Enabled
1817 ```
1818 Value (string):
1819 ```
1820 <enabled/> or <disabled/>
1821 ```
1822 OMA-URI:
1823 ```
1824 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_ProviderURL
1825 ```
1826 Value (string):
1827 ```
1828 <enabled/>
1829 <data id="String" value="URL_TO_ALTERNATE_PROVIDER"/>
1830 ```
1831 OMA-URI:
1832 ```
1833 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_Locked
1834 ```
1835 Value (string):
1836 ```
1837 <enabled/> or <disabled/>
1838 ```
1839 OMA-URI:
1840 ```
1841 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_ExcludedDomains
1842 ```
1843 Value (string):
1844 ```
1845 <enabled/>
1846 <data id="List" value="1&#xF000;example.com"/>
1847 ```
1848 #### macOS
1849 ```
1850 <dict>
1851   <key>DNSOverHTTPS</key>
1852   <dict>
1853     <key>Enabled</key>
1854     <true/> | <false/>
1855     <key>ProviderURL</key>
1856     <string>URL_TO_ALTERNATE_PROVIDER</string>
1857     <key>Locked</key>
1858     <true/> | <false/>
1859     <key>ExcludedDomains</key>
1860     <array>
1861       <string>example.com</string>
1862     </array>
1863   </dict>
1864 </dict>
1865 ```
1866 #### policies.json
1867 ```
1868 {
1869   "policies": {
1870     "DNSOverHTTPS": {
1871       "Enabled":  true | false,
1872       "ProviderURL": "URL_TO_ALTERNATE_PROVIDER",
1873       "Locked": true | false,
1874       "ExcludedDomains": ["example.com"]
1875     }
1876   }
1877 }
1878 ```
1879 ### DontCheckDefaultBrowser
1880 Don't check if Firefox is the default browser at startup.
1881
1882 **Compatibility:** Firefox 60, Firefox ESR 60\
1883 **CCK2 Equivalent:** `dontCheckDefaultBrowser`\
1884 **Preferences Affected:** `browser.shell.checkDefaultBrowser`
1885
1886 #### Windows (GPO)
1887 ```
1888 Software\Policies\Mozilla\Firefox\DontCheckDefaultBrowser = 0x1 | 0x0
1889 ```
1890 #### Windows (Intune)
1891 OMA-URI:
1892 ```
1893 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DontCheckDefaultBrowser
1894 ```
1895 Value (string):
1896 ```
1897 <enabled/> or <disabled/>
1898 ```
1899 #### macOS
1900 ```
1901 <dict>
1902   <key>DontCheckDefaultBrowser</key>
1903   <true/> | <false/>
1904 </dict>
1905 ```
1906 #### policies.json
1907 ```
1908 {
1909   "policies": {
1910     "DontCheckDefaultBrowser": true | false
1911   }
1912 }
1913 ```
1914 ### DefaultDownloadDirectory
1915 Set the default download directory.
1916
1917 You can use ${home} for the native home directory.
1918
1919 **Compatibility:** Firefox 68, Firefox ESR 68\
1920 **CCK2 Equivalent:** N/A\
1921 **Preferences Affected:** `browser.download.dir`,`browser.download.folderList`
1922
1923 #### Windows (GPO)
1924 ```
1925 Software\Policies\Mozilla\Firefox\DefaultDownloadDirectory = "${home}\Downloads"
1926 ```
1927 #### Windows (Intune)
1928 OMA-URI:
1929 ```
1930 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DefaultDownloadDirectory
1931 ```
1932 Value (string):
1933 ```
1934 <enabled/>
1935 <data id="Preferences_String" value="${home}\Downloads"/>
1936 ```
1937 #### macOS
1938 ```
1939 <dict>
1940   <key>DefaultDownloadDirectory</key>
1941   <string>${home}/Downloads</string>
1942 </dict>
1943 ```
1944 #### policies.json (macOS and Linux)
1945 ```
1946 {
1947   "policies": {
1948     "DefaultDownloadDirectory": "${home}/Downloads"
1949 }
1950 ```
1951 #### policies.json (Windows)
1952 ```
1953 {
1954   "policies": {
1955     "DefaultDownloadDirectory": "${home}\\Downloads"
1956 }
1957 ```
1958 ### DownloadDirectory
1959 Set and lock the download directory.
1960
1961 You can use ${home} for the native home directory.
1962
1963 **Compatibility:** Firefox 68, Firefox ESR 68\
1964 **CCK2 Equivalent:** N/A\
1965 **Preferences Affected:** `browser.download.dir`,`browser.download.folderList`,`browser.download.useDownloadDir`
1966
1967 #### Windows (GPO)
1968 ```
1969 Software\Policies\Mozilla\Firefox\DownloadDirectory = "${home}\Downloads"
1970 ```
1971 #### Windows (Intune)
1972 OMA-URI:
1973 ```
1974 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DownloadDirectory
1975 ```
1976 Value (string):
1977 ```
1978 <enabled/>
1979 <data id="Preferences_String" value="${home}\Downloads"/>
1980 ```
1981 #### macOS
1982 ```
1983 <dict>
1984   <key>DownloadDirectory</key>
1985   <string>${home}/Downloads</string>
1986 </dict>
1987 ```
1988 #### policies.json (macOS and Linux)
1989 ```
1990 {
1991   "policies": {
1992     "DownloadDirectory": "${home}/Downloads"
1993 }
1994 ```
1995 #### policies.json (Windows)
1996 ```
1997 {
1998   "policies": {
1999     "DownloadDirectory": "${home}\\Downloads"
2000 }
2001 ```
2002 ### EnableTrackingProtection
2003 Configure tracking protection.
2004
2005 If this policy is not configured, tracking protection is not enabled by default in the browser, but it is enabled by default in private browsing and the user can change it.
2006
2007 If `Value` is set to false, tracking protection is disabled and locked in both the regular browser and private browsing.
2008
2009 If `Value` is set to true, tracking protection is enabled by default in both the regular browser and private browsing and the `Locked` value determines whether or not a user can change it.
2010
2011 If `Cryptomining` is set to true, cryptomining scripts on websites are blocked.
2012
2013 If `Fingerprinting` is set to true, fingerprinting scripts on websites are blocked.
2014
2015 `Exceptions` are origins for which tracking protection is not enabled.
2016
2017 **Compatibility:** Firefox 60, Firefox ESR 60 (Cryptomining and Fingerprinting added in 70/68.2, Exceptions added in 73/68.5)\
2018 **CCK2 Equivalent:** N/A\
2019 **Preferences Affected:** `privacy.trackingprotection.enabled`,`privacy.trackingprotection.pbmode.enabled`,`privacy.trackingprotection.cryptomining.enabled`,`privacy.trackingprotection.fingerprinting.enabled`
2020
2021 #### Windows (GPO)
2022 ```
2023 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Value = 0x1 | 0x0
2024 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Locked = 0x1 | 0x0
2025 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Cryptomining = 0x1 | 0x0
2026 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Fingerprinting = 0x1 | 0x0
2027 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Exceptions\1 = "https://example.com"
2028 ```
2029 #### Windows (Intune)
2030 OMA-URI:
2031 ```
2032 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/A_TrackingProtection_Value
2033 ```
2034 Value (string):
2035 ```
2036 <enabled/> or <disabled/>
2037 ```
2038 OMA-URI:
2039 ```
2040 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/B_TrackingProtection_Cryptomining
2041 ```
2042 Value (string):
2043 ```
2044 <enabled/> or <disabled/>
2045 ```
2046 OMA-URI:
2047 ```
2048 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/C_TrackingProtection_Fingerprinting
2049 ```
2050 Value (string):
2051 ```
2052 <enabled/> or <disabled/>
2053 ```
2054 OMA-URI:
2055 ```
2056 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/D_TrackingProtection_Exceptions
2057 ```
2058 Value (string):
2059 ```
2060 <data id="TrackingProtection_Exceptions" value="1&#xF000;https://example.com"/>
2061 ```
2062 OMA-URI:
2063 ```
2064 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/E_TrackingProtection_Locked
2065 ```
2066 Value (string):
2067 ```
2068 <enabled/> or <disabled/>
2069 ```
2070 #### macOS
2071 ```
2072 <dict>
2073   <key>EnableTrackingProtection</key>
2074   <dict>
2075     <key>Value</key>
2076     <true/> | <false/>
2077     <key>Locked</key>
2078     <true/> | <false/>
2079     <key>Cryptomining</key>
2080     <true/> | <false/>
2081     <key>Fingerprinting</key>
2082     <true/> | <false/>
2083     <key>Exceptions</key>
2084     <array>
2085       <string>https://example.com</string>
2086     </array>
2087   </dict>
2088 </dict>
2089 ```
2090 #### policies.json
2091 ```
2092 {
2093   "policies": {
2094     "EnableTrackingProtection": {
2095       "Value": true | false,
2096       "Locked": true | false,
2097       "Cryptomining": true | false,
2098       "Fingerprinting": true | false,
2099       "Exceptions": ["https://example.com"]
2100     }
2101 }
2102 ```
2103 ### EncryptedMediaExtensions
2104 Enable or disable Encrypted Media Extensions and optionally lock it.
2105
2106 If `Enabled` is set to false, encrypted media extensions (like Widevine) are not downloaded by Firefox unless the user consents to installing them.
2107
2108 If `Locked` is set to true and `Enabled` is set to false, Firefox will not download encrypted media extensions (like Widevine) or ask the user to install them.
2109
2110 **Compatibility:** Firefox 77, Firefox ESR 68.9\
2111 **CCK2 Equivalent:** N/A\
2112 **Preferences Affected:** `media.eme.enabled`
2113
2114 #### Windows (GPO)
2115 ```
2116 Software\Policies\Mozilla\Firefox\EncryptedMediaExtensions\Enabled = 0x1 | 0x0
2117 Software\Policies\Mozilla\Firefox\EncryptedMediaExtensions\Locked = 0x1 | 0x0
2118 ```
2119 #### Windows (Intune)
2120 OMA-URI:
2121 ```
2122 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~EncryptedMediaExtensions/EncryptedMediaExtensions_Enabled
2123 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~EncryptedMediaExtensions/EncryptedMediaExtensions_Locked
2124 ```
2125 Value (string):
2126 ```
2127 <enabled/>or <disabled/>
2128 ```
2129 #### macOS
2130 ```
2131 <dict>
2132   <key>EncryptedMediaExtensions</key>
2133   <dict>
2134     <key>Enabled</key>
2135     <true/> | <false/>
2136     <key>Locked</key>
2137     <true/> | <false/>
2138   </dict>
2139 </dict>
2140 ```
2141 #### policies.json
2142 ```
2143 {
2144   "policies": {
2145     "EncryptedMediaExtensions": {
2146       "Enabled": true | false,
2147       "Locked": true | false
2148     }
2149 }
2150 ```
2151 ### EnterprisePoliciesEnabled
2152 Enable policy support on macOS.
2153
2154 **Compatibility:** Firefox 63, Firefox ESR 60.3 (macOS only)\
2155 **CCK2 Equivalent:** N/A\
2156 **Preferences Affected:** N/A
2157
2158 #### macOS
2159 ```
2160 <dict>
2161   <key>EnterprisePoliciesEnabled</key>
2162   <true/>
2163 </dict>
2164 ```
2165 ### Extensions
2166 Control the installation, uninstallation and locking of extensions.
2167
2168 `Install` is a list of URLs or native paths for extensions to be installed.
2169
2170 `Uninstall` is a list of extension IDs that should be uninstalled if found.
2171
2172 `Locked` is a list of extension IDs that the user cannot disable or uninstall.
2173
2174 **Compatibility:** Firefox 60, Firefox ESR 60\
2175 **CCK2 Equivalent:** `addons`\
2176 **Preferences Affected:** N/A
2177
2178 #### Windows (GPO)
2179 ```
2180 Software\Policies\Mozilla\Firefox\Extensions\Install\1 = "https://addons.mozilla.org/firefox/downloads/somefile.xpi"
2181 Software\Policies\Mozilla\Firefox\Extensions\Install\2 = "//path/to/xpi"
2182 Software\Policies\Mozilla\Firefox\Extensions\Uninstall\1 = "bad_addon_id@mozilla.org"
2183 Software\Policies\Mozilla\Firefox\Extensions\Locked\1 = "addon_id@mozilla.org"
2184 ```
2185 #### Windows (Intune)
2186 OMA-URI:
2187 ```
2188 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/Extensions_Install
2189 ```
2190 Value (string):
2191 ```
2192 <enabled/>
2193 <data id="Extensions" value="1&#xF000;https://addons.mozilla.org/firefox/downloads/somefile.xpi&#xF000;2&#xF000;//path/to/xpi"/>
2194 ```
2195 OMA-URI:
2196 ```
2197 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/Extensions_Uninstall
2198 ```
2199 Value (string):
2200 ```
2201 <enabled/>
2202 <data id="Extensions" value="1&#xF000;bad_addon_id@mozilla.org"/>
2203 ```
2204 OMA-URI:
2205 ```
2206 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/Extensions_Locked
2207 ```
2208 Value (string):
2209 ```
2210 <enabled/>
2211 <data id="Extensions" value="1&#xF000;addon_id@mozilla.org"/>
2212 ```
2213 #### macOS
2214 ```
2215 <dict>
2216   <key>Extensions</key>
2217   <dict>
2218     <key>Install</key>
2219     <array>
2220       <string>https://addons.mozilla.org/firefox/downloads/somefile.xpi</string>
2221       <string>//path/to/xpi</string>
2222     </array>
2223     <key>Uninstall</key>
2224     <array>
2225       <string>bad_addon_id@mozilla.org</string>
2226     </array>
2227     <key>Locked</key>
2228     <array>
2229       <string>addon_id@mozilla.org</string>
2230     </array>
2231   </dict>
2232 </dict>
2233 ```
2234 #### policies.json
2235 ```
2236 {
2237   "policies": {
2238     "Extensions": {
2239       "Install": ["https://addons.mozilla.org/firefox/downloads/somefile.xpi", "//path/to/xpi"],
2240       "Uninstall": ["bad_addon_id@mozilla.org"],
2241       "Locked":  ["addon_id@mozilla.org"]
2242     }
2243   }
2244 }
2245 ```
2246 ### ExtensionSettings
2247 Manage all aspects of extensions. This policy is based heavily on the [Chrome policy](https://dev.chromium.org/administrators/policy-list-3/extension-settings-full) of the same name.
2248
2249 This policy maps an extension ID to its configuration. With an extension ID, the configuration will be applied to the specified extension only. A default configuration can be set for the special ID "*", which will apply to all extensions that don't have a custom configuration set in this policy.
2250
2251 To obtain an extension ID, install the extension and go to about:support. You will see the ID in the Extensions section. I've also created an extension that makes it easy to find the ID of extensions on AMO. You can download it [here](https://github.com/mkaply/queryamoid/releases/tag/v0.1).
2252
2253 The configuration for each extension is another dictionary that can contain the fields documented below.
2254
2255 | Name | Description |
2256 | --- | --- |
2257 | `installation_mode` | Maps to a string indicating the installation mode for the extension. The valid strings are `allowed`,`blocked`,`force_installed`, and `normal_installed`.
2258 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`allowed` | Allows the extension to be installed by the user. This is the default behavior. There is no need for an install_url; it will automatically be allowed based on the ID.
2259 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`blocked`| Blocks installation of the extension and removes it from the device if already installed.
2260 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`force_installed`| The extension is automatically installed and can't be removed by the user. This option is not valid for the default configuration and requires an install_url.
2261 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`normal_installed`| The extension is automatically installed but can be disabled by the user. This option is not valid for the default configuration and requires an install_url.
2262 | `install_url`| Maps to a URL indicating where Firefox can download a force_installed or normal_installed extension. If installing from the addons.mozilla.org, use the following URL (substituting SHORT_NAME from the URL on AMO), https://addons.mozilla.org/firefox/downloads/latest/SHORT_NAME/latest.xpi. If installing from the local file system, use a file:/// URL. Languages packs are available from https://releases.mozilla.org/pub/firefox/releases/VERSION/PLATFORM/xpi/LANGUAGE.xpi. If you need to update the extension, you can change the name of the extension and it will be automatically updated. Extensions installed from file URLs will additional be updated when their internal version changes.
2263 | `install_sources` | A list of sources from which installing extensions is allowed. **This is unnecessary if you are only allowing the installation of certain extensions by ID.** Each item in this list is an extension-style match pattern. Users will be able to easily install items from any URL that matches an item in this list. Both the location of the *.xpi file and the page where the download is started from (i.e.  the referrer) must be allowed by these patterns. This setting can be used only for the default configuration.
2264 | `allowed_types` | This setting whitelists the allowed types of extension/apps that can be installed in Firefox. The value is a list of strings, each of which should be one of the following: "extension", "theme", "dictionary", "locale" This setting can be used only for the default configuration.
2265 | `blocked_install_message` | This maps to a string specifying the error message to display to users if they're blocked from installing an extension. This setting allows you to append text to the generic error message displayed when the extension is blocked. This could be be used to direct users to your help desk, explain why a particular extension is blocked, or something else. This setting can be used only for the default configuration.
2266 | `restricted_domains` | An array of domains on which content scripts can't be run. This setting can be used only for the default configuration.
2267
2268 **Compatibility:** Firefox 69, Firefox ESR 68.1\
2269 **CCK2 Equivalent:** N/A\
2270 **Preferences Affected:** N/A
2271
2272 #### Windows (GPO)
2273 ```
2274 Software\Policies\Mozilla\Firefox\ExtensionSettings (REG_MULTI_SZ) =
2275 {
2276   "*": {
2277     "blocked_install_message": "Custom error message.",
2278     "install_sources": ["about:addons","https://addons.mozilla.org/"],
2279     "installation_mode": "blocked",
2280     "allowed_types": ["extension"]
2281   },
2282   "uBlock0@raymondhill.net": {
2283     "installation_mode": "force_installed",
2284     "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
2285   },
2286   "https-everywhere@eff.org": {
2287     "installation_mode": "allowed",
2288   }
2289 }
2290 ```
2291 #### Windows (Intune)
2292 OMA-URI:
2293 ```
2294 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/ExtensionSettings
2295 ```
2296 Value (string):
2297 ```
2298 <enabled/>
2299 <data id="ExtensionSettings" value='
2300 {
2301   "*": {
2302     "blocked_install_message": "Custom error message.",
2303     "install_sources": ["about:addons","https://addons.mozilla.org/"],
2304     "installation_mode": "blocked",
2305     "allowed_types": ["extension"]
2306   },
2307   "uBlock0@raymondhill.net": {
2308     "installation_mode": "force_installed",
2309     "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
2310   },
2311     "https-everywhere@eff.org": {
2312     "installation_mode": "allowed",
2313   }
2314 }'/>
2315 ```
2316 #### macOS
2317 ```
2318 <dict>
2319   <key>ExtensionSettings</key>
2320   <dict>
2321     <key>*</key>
2322     <dict>
2323       <key>blocked_install_message</key>
2324       <string>Custom error message.</string>
2325       <key>install_sources</key>
2326       <array>
2327         <string>about:addons</string>
2328         <string>https://addons.mozilla.org/</string>
2329       </array>
2330       <key>installation_mode</key>
2331       <string>blocked</string>
2332       <key>allowed_types</key>
2333       <array>
2334         <string>extension</string>
2335       </array>
2336     </dict>
2337     <key>uBlock0@raymondhill.net</key>
2338     <dict>
2339       <key>installation_mode</key>
2340        <string>force_installed</string>
2341       <key>install_url</key>
2342       <string>https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi</string>
2343     </dict>
2344     <key>https-everywhere@eff.org</key>
2345     <dict>
2346       <key>installation_mode</key>
2347        <string>allowed</string>
2348     </dict>
2349   </dict>
2350 </dict>
2351 ```
2352 #### policies.json
2353 ```
2354 {
2355   "policies": {
2356     "ExtensionSettings": {
2357       "*": {
2358         "blocked_install_message": "Custom error message.",
2359         "install_sources": ["about:addons","https://addons.mozilla.org/"],
2360         "installation_mode": "blocked",
2361         "allowed_types": ["extension"]
2362       },
2363       "uBlock0@raymondhill.net": {
2364         "installation_mode": "force_installed",
2365         "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
2366       },
2367       "https-everywhere@eff.org": {
2368         "installation_mode": "allowed"
2369       }
2370     }
2371   }
2372 }
2373 ```
2374 ### ExtensionUpdate
2375 Control extension updates.
2376
2377 **Compatibility:** Firefox 67, Firefox ESR 60.7\
2378 **CCK2 Equivalent:** N/A\
2379 **Preferences Affected:** `extensions.update.enabled`
2380
2381 #### Windows (GPO)
2382 ```
2383 Software\Policies\Mozilla\Firefox\ExtensionUpdate = 0x1 | 0x0
2384 ```
2385 #### Windows (Intune)
2386 OMA-URI:
2387 ```
2388 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/ExtensionUpdate
2389 ```
2390 Value (string):
2391 ```
2392 <enabled/> or <disabled/>
2393 ```
2394 #### macOS
2395 ```
2396 <dict>
2397   <key>ExtensionUpdate</key>
2398   <true/> | <false/>
2399 </dict>
2400 ```
2401 #### policies.json
2402 ```
2403 {
2404   "policies": {
2405     "ExtensionUpdate": true | false
2406   }
2407 }
2408 ```
2409 ### FlashPlugin
2410 Configure the default Flash plugin policy as well as origins for which Flash is allowed.
2411
2412 `Allow` is a list of origins where Flash are allowed.
2413
2414 `Block` is a list of origins where Flash is not allowed.
2415
2416 `Default` determines whether or not Flash is allowed by default.
2417
2418 `Locked` prevents the user from changing Flash preferences.
2419
2420 **Compatibility:** Firefox 60, Firefox ESR 60\
2421 **CCK2 Equivalent:** `permissions.plugin`\
2422 **Preferences Affected:** `plugin.state.flash`
2423
2424 #### Windows (GPO)
2425 ```
2426 Software\Policies\Mozilla\Firefox\FlashPlugin\Allow\1 = "https://example.org"
2427 Software\Policies\Mozilla\Firefox\FlashPlugin\Block\1 = "https://example.edu"
2428 Software\Policies\Mozilla\Firefox\FlashPlugin\Default = 0x1 | 0x0
2429 Software\Policies\Mozilla\Firefox\FlashPlugin\Locked = 0x1 | 0x0
2430 ```
2431 #### Windows (Intune)
2432 OMA-URI:
2433 ```
2434 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Flash/FlashPlugin_Allow
2435 ```
2436 Value (string):
2437 ```
2438 <enabled/>
2439 <data id="Permissions" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
2440 ```
2441 OMA-URI:
2442 ```
2443 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Flash/FlashPlugin_Locked
2444 ```
2445 Value (string):
2446 ```
2447 <enabled/> or <disabled/>
2448 ```
2449 OMA-URI:
2450 ```
2451 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Flash/FlashPlugin_Default
2452 ```
2453 Value (string):
2454 ```
2455 <enabled/> or <disabled/>
2456 ```
2457 #### macOS
2458 ```
2459 <dict>
2460   <key>FlashPlugin</key>
2461   <dict>
2462     <key>Allow</key>
2463     <array>
2464       <string>http://example.org</string>
2465     </array>
2466     <key>Block</key>
2467     <array>
2468       <string>http://example.edu</string>
2469     </array>
2470     <key>Default</key>
2471     <true/> | <false/>
2472     <key>Locked</key>
2473     <true/> | <false/>
2474   </dict>
2475 </dict>
2476 ```
2477 #### policies.json
2478 ```
2479 {
2480   "policies": {
2481     "FlashPlugin": {
2482       "Allow": ["http://example.org/"],
2483       "Block": ["http://example.edu/"],
2484       "Default": true | false,
2485       "Locked": true | false
2486     }
2487   }
2488 }
2489 ```
2490
2491
2492
2493 ### Handlers
2494 Configure default application handlers. This policy is based on the internal format of `handlers.json`.
2495
2496 You can configure handlers based on a mime type (`mimeTypes`), a file's extension (`extensions`), or a protocol (`schemes`).
2497
2498 Within each handler type, you specify the given mimeType/extension/scheme as a key and use the following subkeys to describe how it is handled.
2499
2500 | Name | Description |
2501 | --- | --- |
2502 | `action`| Can be either `saveToDisk`, `useHelperApp`, `useSystemDefault`.
2503 | `ask` | If `true`, the user is asked if what they want to do with the file. If `false`, the action is taken without user intervention.
2504 | `handlers` | An array of handlers with the first one being the default. If you don't want to have a default handler, use an empty object for the first handler. Choose between path or uriTemplate.
2505 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`name` | The display name of the handler (might not be used).
2506 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`path`| The native path to the executable to be used.
2507 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`uriTemplate`| A url to a web based application handler. The URL must be https and contain a %s to be used for substitution.
2508
2509 **Compatibility:** Firefox 78, Firefox ESR 78\
2510 **CCK2 Equivalent:** N/A\
2511 **Preferences Affected:** N/A
2512
2513 #### Windows (GPO)
2514 ```
2515 Software\Policies\Mozilla\Firefox\Handlers (REG_MULTI_SZ) =
2516 {
2517   "mimeTypes": {
2518     "application/msword": {
2519       "action": "useSystemDefault",
2520       "ask": true | false
2521     }
2522   },
2523   "schemes": {
2524     "mailto": {
2525       "action": "useHelperApp",
2526       "ask": true | false,
2527       "handlers": [{
2528         "name": "Gmail",
2529         "uriTemplate": "https://mail.google.com/mail/?extsrc=mailto&url=%s"
2530       }]
2531     }
2532   },
2533   "extensions": {
2534     "pdf": {
2535       "action": "useHelperApp",
2536       "ask": true | false,
2537       "handlers": [{
2538         "name": "Adobe Acrobat",
2539         "path": "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32.exe"
2540       }]
2541     }
2542   }
2543 }
2544 ```
2545 #### Windows (Intune)
2546 OMA-URI:
2547 ```
2548 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Handlers
2549 ```
2550 Value (string):
2551 ```
2552 <enabled/>
2553 <data id="Handlers" value='
2554 {
2555   "mimeTypes": {
2556     "application/msword": {
2557       "action": "useSystemDefault",
2558       "ask": true | false
2559     }
2560   },
2561   "schemes": {
2562     "mailto": {
2563       "action": "useHelperApp",
2564       "ask": true | false,
2565       "handlers": [{
2566         "name": "Gmail",
2567         "uriTemplate": "https://mail.google.com/mail/?extsrc=mailto&amp;url=%s"
2568       }]
2569     }
2570   },
2571   "extensions": {
2572     "pdf": {
2573       "action": "useHelperApp",
2574       "ask": true | false,
2575       "handlers": [{
2576         "name": "Adobe Acrobat",
2577         "path": "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32.exe"
2578       }]
2579     }
2580   }
2581 }
2582 '/>
2583 ```
2584 #### macOS
2585 ```
2586 <dict>
2587   <key>Handlers</key>
2588   <dict>
2589     <key>mimeTypes</key>
2590     <dict>
2591       <key>application/msword</key>
2592       <dict>
2593         <key>action</key>
2594         <string>useSystemDefault</string>
2595         <key>ask</key>
2596         <true/> | <false/>
2597       </dict>
2598     </dict>
2599     <key>schemes</key>
2600     <dict>
2601       <key>mailto</key>
2602       <dict>
2603         <key>action</key>
2604         <string>useHelperApp</string>
2605         <key>ask</key>
2606         <true/> | <false/>
2607         <key>handlers</key>
2608         <array>
2609           <dict>
2610             <key>name</key>
2611             <string>Gmail</string>
2612             <key>uriTemplate</key>
2613             <string>https://mail.google.com/mail/?extsrc=mailto&url=%s</string>
2614           </dict>
2615         </array>
2616       </dict>
2617     </dict>
2618     <key>extensions</key>
2619     <dict>
2620       <key>pdf</key>
2621       <dict>
2622         <key>action</key>
2623         <string>useHelperApp</string>
2624         <key>ask</key>
2625         <true/> | <false/>
2626         <key>handlers</key>
2627         <array>
2628           <dict>
2629             <key>name</key>
2630             <string>Adobe Acrobat</string>
2631             <key>path</key>
2632             <string>/System/Applications/Preview.app</string>
2633           </dict>
2634         </array>
2635       </dict>
2636     </dict>
2637   </dict>
2638 </dict>
2639 ```
2640 #### policies.json
2641 ```
2642 {
2643   "policies": {
2644     "Handlers": {
2645       "mimeTypes": {
2646         "application/msword": {
2647           "action": "useSystemDefault",
2648           "ask": false
2649         }
2650       },
2651       "schemes": {
2652         "mailto": {
2653           "action": "useHelperApp",
2654           "ask": true | false,
2655           "handlers": [{
2656             "name": "Gmail",
2657             "uriTemplate": "https://mail.google.com/mail/?extsrc=mailto&url=%s"
2658           }]
2659         }
2660       },
2661       "extensions": {
2662         "pdf": {
2663           "action": "useHelperApp",
2664           "ask": true | false,
2665           "handlers": [{
2666             "name": "Adobe Acrobat",
2667             "path": "/usr/bin/acroread"
2668           }]
2669         }
2670       }
2671     }
2672   }
2673 }
2674 ```
2675 ### FirefoxHome
2676 Customize the Firefox Home page.
2677
2678 **Compatibility:** Firefox 68, Firefox ESR 68\
2679 **CCK2 Equivalent:** N/A\
2680 **Preferences Affected:** `browser.newtabpage.activity-stream.showSearch`,`browser.newtabpage.activity-stream.feeds.topsites`,`browser.newtabpage.activity-stream.feeds.section.highlights`,`browser.newtabpage.activity-stream.feeds.section.topstories`,`browser.newtabpage.activity-stream.feeds.snippets`
2681
2682 #### Windows (GPO)
2683 ```
2684 Software\Policies\Mozilla\Firefox\FirefoxHome\Search = 0x1 | 0x0
2685 Software\Policies\Mozilla\Firefox\FirefoxHome\TopSites = 0x1 | 0x0
2686 Software\Policies\Mozilla\Firefox\FirefoxHome\Highlights = 0x1 | 0x0
2687 Software\Policies\Mozilla\Firefox\FirefoxHome\Pocket = 0x1 | 0x0
2688 Software\Policies\Mozilla\Firefox\FirefoxHome\Snippets = 0x1 | 0x0
2689 Software\Policies\Mozilla\Firefox\FirefoxHome\Locked = 0x1 | 0x0
2690 ```
2691 #### Windows (Intune)
2692 OMA-URI:
2693 ```
2694 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/CustomizeFirefoxHome
2695 ```
2696 Value (string):
2697 ```
2698 <enabled/>
2699 <data id="FirefoxHome_Search"  value="true | false"/>
2700 <data id="FirefoxHome_TopSites"  value="true | false"/>
2701 <data id="FirefoxHome_Highlights"  value="true | false"/>
2702 <data id="FirefoxHome_Pocket"  value="true | false"/>
2703 <data id="FirefoxHome_Snippets"  value="true | false"/>
2704 <data id="FirefoxHome_Locked"  value="true | false"/>
2705 ```
2706 #### macOS
2707 ```
2708 <dict>
2709   <key>FirefoxHome</key>
2710   <dict>
2711     <key>Search</key>
2712     <true/> | <false/>
2713     <key>TopSites</key>
2714     <true/> | <false/>
2715     <key>Highlights</key>
2716     <true/> | <false/>
2717     <key>Pocket</key>
2718     <true/> | <false/>
2719     <key>Snippets</key>
2720     <true/> | <false/>
2721     <key>Locked</key>
2722     <true/> | <false/>
2723   </dict>
2724 </dict>
2725 ```
2726 #### policies.json
2727 ```
2728 {
2729   "policies": {
2730     "FirefoxHome": {
2731       "Search": true | false,
2732       "TopSites": true | false,
2733       "Highlights": true | false,
2734       "Pocket": true | false,
2735       "Snippets": true | false,
2736       "Locked": true | false
2737     }
2738   }
2739 }
2740 ```
2741 ### HardwareAcceleration
2742 Control hardware acceleration.
2743
2744 **Compatibility:** Firefox 60, Firefox ESR 60\
2745 **CCK2 Equivalent:** N/A\
2746 **Preferences Affected:** `layers.acceleration.disabled`
2747
2748 #### Windows (GPO)
2749 ```
2750 Software\Policies\Mozilla\Firefox\HardwareAcceleration = 0x1 | 0x0
2751 ```
2752 #### Windows (Intune)
2753 OMA-URI:
2754 ```
2755 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/HardwareAcceleration
2756 ```
2757 Value (string):
2758 ```
2759 <enabled/> or <disabled/>
2760 ```
2761 #### macOS
2762 ```
2763 <dict>
2764   <key>HardwareAcceleration</key>
2765   <true/> | <false/>
2766 </dict>
2767 ```
2768 #### policies.json
2769 ```
2770 {
2771   "policies": {
2772     "HardwareAcceleration": true | false
2773   }
2774 }
2775 ```
2776 ### Homepage
2777 Configure the default homepage and how Firefox starts.
2778
2779 `URL` is the default homepage.
2780
2781 `Locked` prevents the user from changing homepage preferences.
2782
2783 `Additional` allows for more than one homepage.
2784
2785 `StartPage` is how Firefox starts. The choices are no homepage, the default homepage or the previous session.
2786
2787 With Firefox 78, an additional option as added for `Startpage`, `homepage-locked`. This allows for locking the homepage, but still allowing the user to choose whether or not they want to restore their session.
2788
2789 **Compatibility:** Firefox 60, Firefox ESR 60 (StartPage was added in Firefox 60, Firefox ESR 60.4, homepage-locked added in Firefox 78)\
2790 **CCK2 Equivalent:** `homePage`,`lockHomePage`\
2791 **Preferences Affected:** `browser.startup.homepage`,`browser.startup.page`
2792
2793 #### Windows (GPO)
2794 ```
2795 Software\Policies\Mozilla\Firefox\Homepage\URL = "https://example.com"
2796 Software\Policies\Mozilla\Firefox\Homepage\Locked = 0x1 | 0x0
2797 Software\Policies\Mozilla\Firefox\Homepage\Additional\1 = "https://example.org"
2798 Software\Policies\Mozilla\Firefox\Homepage\Additional\2 = "https://example.edu"
2799 Software\Policies\Mozilla\Firefox\Homepage\StartPage = "none" | "homepage" | "previous-session" | "homepage-locked"
2800 ```
2801 #### Windows (Intune)
2802 OMA-URI:
2803 ```
2804 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageURL
2805 ```
2806 Value (string):
2807 ```
2808 <enabled/>
2809
2810 <data id="HomepageURL" value="https://example.com"/>
2811 <data id="HomepageLocked" value="true | false"/>
2812 ```
2813 OMA-URI:
2814 ```
2815 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageAdditional
2816 ```
2817 Value (string):
2818 ```
2819 <enabled/>
2820
2821 <data id="HomepageAdditional" value="1&#xF000;http://example.org&#xF000;2&#xF000;http://example.edu"/>
2822 ```
2823 OMA-URI:
2824 ```
2825 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageStartPage
2826 ```
2827 Value (string):
2828 ```
2829 <enabled/>
2830
2831 <data id="StartPage" value="none | homepage | previous-session"/>
2832 ```
2833 #### macOS
2834 ```
2835 <dict>
2836   <key>Homepage</key>
2837   <dict>
2838     <key>URL</key>
2839     <string>http://example.com</string>
2840     <key>Locked</key>
2841     <true/> | <false/>
2842     <key>Additional</key>
2843     <array>
2844       <string>http://example.org</string>
2845       <string>http://example.edu</string>
2846     </array>
2847     <key>StartPage</key>
2848     <string>none | homepage | previous-session | homepage-locked</string>
2849   </dict>
2850 </dict>
2851 ```
2852 #### policies.json
2853 ```
2854 {
2855   "policies": {
2856     "Homepage": {
2857       "URL": "http://example.com/",
2858       "Locked": true | false,
2859       "Additional": ["http://example.org/",
2860                      "http://example.edu/"],
2861       "StartPage": "none" | "homepage" | "previous-session" | "homepage-locked"
2862     }
2863   }
2864 }
2865 ```
2866 ### InstallAddonsPermission
2867 Configure the default extension install policy as well as origins for extension installs are allowed. This policy does not override turning off all extension installs.
2868
2869 `Allow` is a list of origins where extension installs are allowed.
2870
2871 `Default` determines whether or not extension installs are allowed by default.
2872
2873 **Compatibility:** Firefox 60, Firefox ESR 60\
2874 **CCK2 Equivalent:** `permissions.install`\
2875 **Preferences Affected:** `xpinstall.enabled`
2876
2877 #### Windows (GPO)
2878 ```
2879 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Allow\1 = "https://example.org"
2880 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Allow\2 = "https://example.edu"
2881 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Default = 0x1 | 0x0
2882 ```
2883 #### Windows (Intune)
2884 OMA-URI:
2885 ```
2886 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Addons/InstallAddonsPermission_Allow
2887 ```
2888 Value (string):
2889 ```
2890 <enabled/>
2891 <data id="Permissions" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
2892 ```
2893 OMA-URI:
2894 ```
2895 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Addons/InstallAddonsPermission_Default
2896 ```
2897 Value (string):
2898 ```
2899 <enabled/>
2900 ```
2901 #### macOS
2902 ```
2903 <dict>
2904   <key>InstallAddonsPermission</key>
2905   <dict>
2906     <key>Allow</key>
2907     <array>
2908       <string>http://example.org</string>
2909       <string>http://example.edu</string>
2910     </array>
2911     <key>Default</key>
2912     <true/> | <false/>
2913   </dict>
2914 </dict>
2915 ```
2916 #### policies.json
2917 ```
2918 {
2919   "policies": {
2920     "InstallAddonsPermission": {
2921       "Allow": ["http://example.org/",
2922                 "http://example.edu/"],
2923       "Default": true | false
2924     }
2925   }
2926 }
2927 ```
2928 ### LegacyProfiles
2929 Disable the feature enforcing a separate profile for each installation.
2930
2931 If this policy set to true, Firefox will not try to create different profiles for installations of Firefox in different directories. This is the equivalent of the MOZ_LEGACY_PROFILES environment variable.
2932
2933 If this policy set to false, Firefox will create a new profile for each unique installation of Firefox.
2934
2935 This policy only work on Windows via GPO (not policies.json).
2936
2937 **Compatibility:** Firefox 70, Firefox ESR 68.2 (Windows only, GPO only)\
2938 **CCK2 Equivalent:** N/A\
2939 **Preferences Affected:** N/A
2940
2941 #### Windows (GPO)
2942 ```
2943 Software\Policies\Mozilla\Firefox\LegacyProfiles = = 0x1 | 0x0
2944 ```
2945 #### Windows (Intune)
2946 OMA-URI:
2947 ```
2948 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/LegacyProfiles
2949 ```
2950 Value (string):
2951 ```
2952 <enabled/> or <disabled/>
2953 ```
2954 ### LocalFileLinks
2955 Enable linking to local files by origin.
2956
2957 **Compatibility:** Firefox 68, Firefox ESR 68\
2958 **CCK2 Equivalent:** N/A\
2959 **Preferences Affected:** `capability.policy.localfilelinks.*`
2960
2961 #### Windows (GPO)
2962 ```
2963 Software\Policies\Mozilla\Firefox\LocalFileLinks\1 = "https://example.org"
2964 Software\Policies\Mozilla\Firefox\LocalFileLinks\2 = "https://example.edu"
2965 ```
2966 #### Windows (Intune)
2967 OMA-URI:
2968 ```
2969 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/LocalFileLinks
2970 ```
2971 Value (string):
2972 ```
2973 <enabled/>
2974 <data id="LocalFileLinks" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
2975 ```
2976 #### macOS
2977 ```
2978 <dict>
2979   <key>LocalFileLinks</key>
2980   <array>
2981     <string>http://example.org</string>
2982     <string>http://example.edu</string>
2983   </array>
2984 </dict>
2985 ```
2986 #### policies.json
2987 ```
2988 {
2989   "policies": {
2990     "LocalFileLinks": ["http://example.org/",
2991                        "http://example.edu/"]
2992   }
2993 }
2994 ```
2995 ### ManagedBookmarks
2996 Configures a list of bookmarks managed by an administrator that cannot be changed by the user.
2997
2998 The bookmarks are only added as a button on the personal toolbar. They are not in the bookmarks folder.
2999
3000 The syntax of this policy is exactly the same as the [Chrome ManagedBookmarks policy](https://cloud.google.com/docs/chrome-enterprise/policies/?policy=ManagedBookmarks). The schema is:
3001 ```
3002 {
3003  "items": {
3004   "id": "BookmarkType",
3005   "properties": {
3006    "children": {
3007     "items": {
3008      "$ref": "BookmarkType"
3009     },
3010     "type": "array"
3011    },
3012    "name": {
3013     "type": "string"
3014    },
3015    "toplevel_name": {
3016     "type": "string"
3017    },
3018    "url": {
3019     "type": "string"
3020    }
3021   },
3022   "type": "object"
3023  },
3024  "type": "array"
3025 }
3026 ```
3027 **Compatibility:** Firefox 83, Firefox ESR 78.5\
3028 **CCK2 Equivalent:** N/A\
3029 **Preferences Affected:** N/A
3030
3031 #### Windows (GPO)
3032 ```
3033 Software\Policies\Mozilla\Firefox\ManagedBookmarks (REG_MULTI_SZ) =
3034 [
3035   {
3036     "toplevel_name": "My managed bookmarks folder"
3037   },
3038   {
3039     "url": "example.com",
3040     "name": "Example"
3041   },
3042   {
3043     "name": "Mozilla links",
3044     "children": [
3045       {
3046         "url": "https://mozilla.org",
3047         "name": "Mozilla.org"
3048       },
3049       {
3050         "url": "https://support.mozilla.org/",
3051         "name": "SUMO"
3052       }
3053     ]
3054   }
3055 ]
3056 ```
3057 #### Windows (Intune)
3058 OMA-URI:
3059 ```
3060 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/ManagedBookmarks
3061 ```
3062 Value (string):
3063 ```
3064 <enabled/>
3065 <data id="JSON" value='
3066 [
3067   {
3068     "toplevel_name": "My managed bookmarks folder"
3069   },
3070   {
3071     "url": "example.com",
3072     "name": "Example"
3073   },
3074   {
3075     "name": "Mozilla links",
3076     "children": [
3077       {
3078         "url": "https://mozilla.org",
3079         "name": "Mozilla.org"
3080       },
3081       {
3082         "url": "https://support.mozilla.org/",
3083         "name": "SUMO"
3084       }
3085     ]
3086   }
3087 ]'/>
3088 ```
3089 #### macOS
3090 ```
3091 <dict>
3092   <key>ManagedBookmarks</key>
3093   <array>
3094     <dict>
3095       <key>toplevel_name</key>
3096       <string>My managed bookmarks folder</string></dict>
3097       <dict>
3098         <key>url</key>
3099         <string>example.com</string>
3100         <key>name</key>
3101         <string>Example</string>
3102       </dict>
3103       <dict>
3104       <key>name</key>
3105       <string>Mozilla links</string>
3106       <key>children</key>
3107       <array>
3108         <dict>
3109           <key>url</key>
3110           <string>https://mozilla.org</string>
3111           <key>name</key>
3112           <string>Mozilla</string>
3113         </dict>
3114         <dict>
3115           <key>url</key>
3116           <string>https://support.mozilla.org/</string>
3117           <key>name</key>
3118           <string>SUMO</string>
3119         </dict>
3120       </array>
3121     </dict>
3122   </array>
3123 </dict>
3124 ```
3125 #### policies.json
3126 ```
3127 {
3128   "policies": {
3129     "ManagedBookmarks": [
3130       {
3131         "toplevel_name": "My managed bookmarks folder"
3132       },
3133       {
3134         "url": "example.com",
3135         "name": "Example"
3136       },
3137       {
3138         "name": "Mozilla links",
3139         "children": [
3140           {
3141             "url": "https://mozilla.org",
3142             "name": "Mozilla.org"
3143           },
3144           {
3145             "url": "https://support.mozilla.org/",
3146             "name": "SUMO"
3147           }
3148         ]
3149       }
3150     ]
3151   }
3152 }
3153 ```
3154 ### PrimaryPassword
3155 Require or prevent using a primary (formerly master) password.
3156
3157 If this value is true, a primary password is required. If this value is false, it works the same as if [`DisableMasterPasswordCreation`](#disablemasterpasswordcreation) was true and removes the primary password functionality.
3158
3159 If both DisableMasterPasswordCreation and PrimaryPassword are used, DisableMasterPasswordCreation takes precedent.
3160
3161 **Compatibility:** Firefox 79, Firefox ESR 78.1\
3162 **CCK2 Equivalent:** `noMasterPassword`\
3163 **Preferences Affected:** N/A
3164
3165 #### Windows (GPO)
3166 ```
3167 Software\Policies\Mozilla\Firefox\PrimaryPassword = 0x1 | 0x0
3168 ```
3169 #### Windows (Intune)
3170 OMA-URI:
3171 ```
3172 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PrimaryPassword
3173 ```
3174 Value (string):
3175 ```
3176 <enabled/> or <disabled/>
3177 ```
3178 #### macOS
3179 ```
3180 <dict>
3181   <key>PrimaryPassword</key>
3182   <true/> | <false/>
3183 </dict>
3184 ```
3185 #### policies.json
3186 ```
3187 {
3188   "policies": {
3189     "PrimaryPassword": true | false
3190   }
3191 }
3192 ```
3193 ### NetworkPrediction
3194 Enable or disable network prediction (DNS prefetching).
3195
3196 **Compatibility:** Firefox 67, Firefox ESR 60.7\
3197 **CCK2 Equivalent:** N/A\
3198 **Preferences Affected:** `network.dns.disablePrefetch`,`network.dns.disablePrefetchFromHTTPS`
3199
3200 #### Windows (GPO)
3201 ```
3202 Software\Policies\Mozilla\Firefox\NetworkPrediction = 0x1 | 0x0
3203 ```
3204 #### Windows (Intune)
3205 OMA-URI:
3206 ```
3207 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NetworkPrediction
3208 ```
3209 Value (string):
3210 ```
3211 <enabled/> or <disabled/>
3212 ```
3213 #### macOS
3214 ```
3215 <dict>
3216   <key>NetworkPrediction</key>
3217   <true/> | <false/>
3218 </dict>
3219 ```
3220 #### policies.json
3221 ```
3222 {
3223   "policies": {
3224     "NetworkPrediction": true | false
3225 }
3226 ```
3227 ### NewTabPage
3228 Enable or disable the New Tab page.
3229
3230 **Compatibility:** Firefox 68, Firefox ESR 68\
3231 **CCK2 Equivalent:** N/A\
3232 **Preferences Affected:** `browser.newtabpage.enabled`
3233
3234 #### Windows (GPO)
3235 ```
3236 Software\Policies\Mozilla\Firefox\NewTabPage = 0x1 | 0x0
3237 ```
3238 #### Windows (Intune)
3239 OMA-URI:
3240 ```
3241 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NewTabPage
3242 ```
3243 Value (string):
3244 ```
3245 <enabled/> or <disabled/>
3246 ```
3247 #### macOS
3248 ```
3249 <dict>
3250   <key>NewTabPage</key>
3251   <true/> | <false/>
3252 </dict>
3253 ```
3254 #### policies.json
3255 ```
3256 {
3257   "policies": {
3258     "NewTabPage": true | false
3259 }
3260 ```
3261 ### NoDefaultBookmarks
3262 Disable the creation of default bookmarks.
3263
3264 This policy is only effective if the user profile has not been created yet.
3265
3266 **Compatibility:** Firefox 60, Firefox ESR 60\
3267 **CCK2 Equivalent:** `removeDefaultBookmarks`\
3268 **Preferences Affected:** N/A
3269
3270 #### Windows (GPO)
3271 ```
3272 Software\Policies\Mozilla\Firefox\NoDefaultBookmarks = 0x1 | 0x0
3273 ```
3274 #### Windows (Intune)
3275 OMA-URI:
3276 ```
3277 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NoDefaultBookmarks
3278 ```
3279 Value (string):
3280 ```
3281 <enabled/> or <disabled/>
3282 ```
3283 #### macOS
3284 ```
3285 <dict>
3286   <key>NoDefaultBookmarks</key>
3287   <true/> | <false/>
3288 </dict>
3289 ```
3290 #### policies.json
3291 ```
3292 {
3293   "policies": {
3294     "NoDefaultBookmarks": true | false
3295   }
3296 }
3297 ```
3298 ### OfferToSaveLogins
3299 Control whether or not Firefox offers to save passwords.
3300
3301 **Compatibility:** Firefox 60, Firefox ESR 60\
3302 **CCK2 Equivalent:** `dontRememberPasswords`\
3303 **Preferences Affected:** `signon.rememberSignons`
3304
3305 #### Windows (GPO)
3306 ```
3307 Software\Policies\Mozilla\Firefox\OfferToSaveLogins = 0x1 | 0x0
3308 ```
3309 #### Windows (Intune)
3310 OMA-URI:
3311 ```
3312 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OfferToSaveLogins
3313 ```
3314 Value (string):
3315 ```
3316 <enabled/> or <disabled/>
3317 ```
3318 #### macOS
3319 ```
3320 <dict>
3321   <key>OfferToSaveLogins</key>
3322   <true/> | <false/>
3323 </dict>
3324 ```
3325 #### policies.json
3326 ```
3327 {
3328   "policies": {
3329     "OfferToSaveLogins": true | false
3330   }
3331 }
3332 ```
3333 ### OfferToSaveLoginsDefault
3334 Sets the default value of signon.rememberSignons without locking it.
3335
3336 **Compatibility:** Firefox 70, Firefox ESR 60.2\
3337 **CCK2 Equivalent:** `dontRememberPasswords`\
3338 **Preferences Affected:** `signon.rememberSignons`
3339
3340 #### Windows (GPO)
3341 ```
3342 Software\Policies\Mozilla\Firefox\OfferToSaveLoginsDefault = 0x1 | 0x0
3343 ```
3344 #### Windows (Intune)
3345 OMA-URI:
3346 ```
3347 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OfferToSaveLoginsDefault
3348 ```
3349 Value (string):
3350 ```
3351 <enabled/> or <disabled/>
3352 ```
3353 #### macOS
3354 ```
3355 <dict>
3356   <key>OfferToSaveLoginsDefault</key>
3357   <true/> | <false/>
3358 </dict>
3359 ```
3360 #### policies.json
3361 ```
3362 {
3363   "policies": {
3364     "OfferToSaveLoginsDefault": true | false
3365   }
3366 }
3367 ```
3368 ### OverrideFirstRunPage
3369 Override the first run page. If the value is an empty string (""), the first run page is not displayed.
3370
3371 Starting with Firefox 83, Firefox ESR 78.5, you can also specify multiple URLS separated by a vertical bar (|).
3372
3373 **Compatibility:** Firefox 60, Firefox ESR 60\
3374 **CCK2 Equivalent:** `welcomePage`,`noWelcomePage`\
3375 **Preferences Affected:** `startup.homepage_welcome_url`
3376
3377 #### Windows (GPO)
3378 ```
3379 Software\Policies\Mozilla\Firefox\OverrideFirstRunPage = "http://example.org"
3380 ```
3381 #### Windows (Intune)
3382 OMA-URI:
3383 ```
3384 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OverrideFirstRunPage
3385 ```
3386 Value (string):
3387 ```
3388 <enabled/>
3389 <data id="OverridePage" value="https://example.com"/>
3390 ```
3391 #### macOS
3392 ```
3393 <dict>
3394   <key>OverrideFirstRunPage</key>
3395   <string>http://example.org</string>
3396 </dict>
3397 ```
3398 #### policies.json
3399 ```
3400 {
3401   "policies": {
3402     "OverrideFirstRunPage": "http://example.org"
3403 }
3404 ```
3405 ### OverridePostUpdatePage
3406 Override the upgrade page. If the value is an empty string (""), no extra pages are displayed when Firefox is upgraded.
3407
3408 **Compatibility:** Firefox 60, Firefox ESR 60\
3409 **CCK2 Equivalent:** `upgradePage`,`noUpgradePage`\
3410 **Preferences Affected:** `startup.homepage_override_url`
3411
3412 #### Windows (GPO)
3413 ```
3414 Software\Policies\Mozilla\Firefox\OverridePostUpdatePage = "http://example.org"
3415 ```
3416 #### Windows (Intune)
3417 OMA-URI:
3418 ```
3419 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OverridePostUpdatePage
3420 ```
3421 Value (string):
3422 ```
3423 <enabled/>
3424 <data id="OverridePage" value="https://example.com"/>
3425 ```
3426 #### macOS
3427 ```
3428 <dict>
3429   <key>OverridePostUpdatePage</key>
3430   <string>http://example.org</string>
3431 </dict>
3432 ```
3433 #### policies.json
3434 ```
3435 {
3436   "policies": {
3437     "OverridePostUpdatePage": "http://example.org"
3438 }
3439 ```
3440 ### PasswordManagerEnabled
3441 Remove access to the password manager via preferences and blocks about:logins on Firefox 70.
3442
3443 **Compatibility:** Firefox 70, Firefox ESR 60.2\
3444 **CCK2 Equivalent:** N/A\
3445 **Preferences Affected:** `pref.privacy.disable_button.view_passwords`
3446
3447 #### Windows (GPO)
3448 ```
3449 Software\Policies\Mozilla\Firefox\PasswordManagerEnabled = 0x1 | 0x0
3450 ```
3451 #### Windows (Intune)
3452 OMA-URI:
3453 ```
3454 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PasswordManagerEnabled
3455 ```
3456 Value (string):
3457 ```
3458 <enabled/> or <disabled/>
3459 ```
3460 #### macOS
3461 ```
3462 <dict>
3463   <key>PasswordManagerEnabled</key>
3464   <true/> | <false/>
3465 </dict>
3466 ```
3467 #### policies.json
3468 ```
3469 {
3470   "policies": {
3471     "PasswordManagerEnabled": true | false
3472   }
3473 }
3474 ```
3475 ### PDFjs
3476 Disable or configure PDF.js, the built-in PDF viewer.
3477
3478 If `Enabled` is set to false, the built-in PDF viewer is disabled.
3479
3480 If `EnablePermissions` is set to true, the built-in PDF viewer will honor document permissions like preventing the copying of text.
3481
3482 Note: DisableBuiltinPDFViewer has not been deprecated. You can either continue to use it, or switch to using PDFjs->Enabled to disable the built-in PDF viewer. This new permission was added because we needed a place for PDFjs->EnabledPermissions.
3483
3484 **Compatibility:** Firefox 77, Firefox ESR 68.9\
3485 **CCK2 Equivalent:** N/A\
3486 **Preferences Affected:** `pdfjs.diabled`,`pdfjs.enablePermissions`
3487
3488 #### Windows (GPO)
3489 ```
3490 Software\Policies\Mozilla\Firefox\PDFjs\Enabled = 0x1 | 0x0
3491 Software\Policies\Mozilla\Firefox\PDFjs\EnablePermissions = 0x1 | 0x0
3492 ```
3493 #### Windows (Intune)
3494 OMA-URI:
3495 ```
3496 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PDFjs/PDFjs_Enabled
3497 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PDFjs/PDFjs_EnablePermissions
3498 ```
3499 Value (string):
3500 ```
3501 <enabled/>or <disabled/>
3502 ```
3503 #### macOS
3504 ```
3505 <dict>
3506   <key>PDFjs</key>
3507   <dict>
3508     <key>Enabled</key>
3509     <true/> | <false/>
3510     <key>EnablePermissions</key>
3511     <true/> | <false/>
3512   </dict>
3513 </dict>
3514 ```
3515 #### policies.json
3516 ```
3517 {
3518   "policies": {
3519     "PSFjs": {
3520       "Enabled": true | false,
3521       "EnablePermissions": true | false
3522     }
3523 }
3524 ```
3525 ### Permissions
3526 Set permissions associated with camera, microphone, location, notifications, autoplay, and virtual reality. Because these are origins, not domains, entries with unique ports must be specified separately. This explicitly means that it is not possible to add wildcards. See examples below.
3527
3528 `Allow` is a list of origins where the feature is allowed.
3529
3530 `Block` is a list of origins where the feature is not allowed.
3531
3532 `BlockNewRequests` determines whether or not new requests can be made for the feature.
3533
3534 `Locked` prevents the user from changing preferences for the feature.
3535
3536 `Default` specifies the default value for Autoplay. block-audio-video is not supported on Firefox ESR 68.
3537
3538 **Compatibility:** Firefox 62, Firefox ESR 60.2 (Autoplay added in Firefox 74, Firefox ESR 68.6, Autoplay Default/Locked added in Firefox 76, Firefox ESR 68.8, VirtualReality added in Firefox 80, Firefox ESR 78.2)\
3539 **CCK2 Equivalent:** N/A\
3540 **Preferences Affected:** `permissions.default.camera`,`permissions.default.microphone`,`permissions.default.geo`,`permissions.default.desktop-notification`,`media.autoplay.default`.`permissions.default.xr`
3541
3542 #### Windows (GPO)
3543 ```
3544 Software\Policies\Mozilla\Firefox\Permissions\Camera\Allow\1 = "https://example.org"
3545 Software\Policies\Mozilla\Firefox\Permissions\Camera\Allow\2 = "https://example.org:1234"
3546 Software\Policies\Mozilla\Firefox\Permissions\Camera\Block\1 = "https://example.edu"
3547 Software\Policies\Mozilla\Firefox\Permissions\Camera\BlockNewRequests = 0x1 | 0x0
3548 Software\Policies\Mozilla\Firefox\Permissions\Camera\Locked = 0x1 | 0x0
3549 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Allow\1 = "https://example.org"
3550 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Block\1 = "https://example.edu"
3551 Software\Policies\Mozilla\Firefox\Permissions\Microphone\BlockNewRequests = 0x1 | 0x0
3552 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Locked = 0x1 | 0x0
3553 Software\Policies\Mozilla\Firefox\Permissions\Location\Allow\1 = "https://example.org"
3554 Software\Policies\Mozilla\Firefox\Permissions\Location\Block\1 = "https://example.edu"
3555 Software\Policies\Mozilla\Firefox\Permissions\Location\BlockNewRequests = 0x1 | 0x0
3556 Software\Policies\Mozilla\Firefox\Permissions\Location\Locked = 0x1 | 0x0
3557 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Allow\1 = "https://example.org"
3558 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Block\1 = "https://example.edu"
3559 Software\Policies\Mozilla\Firefox\Permissions\Notifications\BlockNewRequests = 0x1 | 0x0
3560 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Locked = 0x1 | 0x0
3561 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Allow\1 = "https://example.org"
3562 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Block\1 = "https://example.edu"
3563 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Default = "allow-audio-video" | "block-audio" | "block-audio-video"
3564 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Locked = 0x1 | 0x0
3565 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\Allow\1 = "https://example.org"
3566 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\Block\1 = "https://example.edu"
3567 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\BlockNewRequests = 0x1 | 0x0
3568 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\Locked = 0x1 | 0x0
3569 ```
3570 #### Windows (Intune)
3571 OMA-URI:
3572 ```
3573 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Location/Location_BlockNewRequests
3574 ```
3575 Value (string):
3576 ```
3577 <enabled/> or <disabled/>
3578 ```
3579 OMA-URI:
3580 ```
3581 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Location/Location_Locked
3582 ```
3583 Value (string):
3584 ```
3585 <enabled/> or <disabled/>
3586 ```
3587 OMA-URI:
3588 ```
3589 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_Allow
3590 ```
3591 Value (string):
3592 ```
3593 <enabled/>
3594 <data id="Permissions" value="1&#xF000;https://example.org"/>
3595 ```
3596 OMA-URI:
3597 ```
3598 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_BlockNewRequests
3599 ```
3600 Value (string):
3601 ```
3602 <enabled/> or <disabled/>
3603 ```
3604 OMA-URI:
3605 ```
3606 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_Locked
3607 ```
3608 Value (string):
3609 ```
3610 <enabled/> or <disabled/>
3611 ```
3612 OMA-URI:
3613 ```
3614 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Allow
3615 ```
3616 Value (string):
3617 ```
3618 <enabled/>
3619 <data id="Permissions" value="1&#xF000;https://example.org"/>
3620 ```
3621 OMA-URI:
3622 ```
3623 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Block
3624 ```
3625 Value (string):
3626 ```
3627 <enabled/>
3628 <data id="Permissions" value="1&#xF000;https://example.edu"/>
3629 ```
3630 OMA-URI:
3631 ```
3632 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Default
3633 ```
3634 Value (string):
3635 ```
3636 <enabled/>
3637 <data id="Autoplay_Default" value="allow-audio-video | block-audio | block-audio-video"/>
3638 ```
3639 OMA-URI:
3640 ```
3641 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Locked
3642 ```
3643 Value (string):
3644 ```
3645 <enabled/> or <disabled/>
3646 ```
3647 OMA-URI:
3648 ```
3649 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_Allow
3650 ```
3651 Value (string):
3652 ```
3653 <enabled/>
3654 <data id="Permissions" value="1&#xF000;https://example.org"/>
3655 ```
3656 OMA-URI:
3657 ```
3658 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_Block
3659 ```
3660 Value (string):
3661 ```
3662 <enabled/>
3663 <data id="Permissions" value="1&#xF000;https://example.edu"/>
3664 ```
3665 OMA-URI:
3666 ```
3667 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_BlockNewRequests
3668 ```
3669 Value (string):
3670 ```
3671 <enabled/> or <disabled/>
3672 ```
3673 OMA-URI:
3674 ```
3675 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_Locked
3676 ```
3677 Value (string):
3678 ```
3679 <enabled/> or <disabled/>
3680 ```
3681 #### macOS
3682 ```
3683 <dict>
3684   <key>Permissions</key>
3685   <dict>
3686     <key>Camera</key>
3687     <dict>
3688       <key>Allow</key>
3689       <array>
3690         <string>https://example.org</string>
3691         <string>https://example.org:1234</string>
3692       </array>
3693       <key>Block</key>
3694       <array>
3695         <string>https://example.edu</string>
3696       </array>
3697       <key>BlockNewRequests</key>
3698       <true/> | <false/>
3699       <key>Locked</key>
3700       <true/> | <false/>
3701     </dict>
3702     <key>Microphone</key>
3703     <dict>
3704       <key>Allow</key>
3705       <array>
3706         <string>https://example.org</string>
3707       </array>
3708       <key>Block</key>
3709       <array>
3710         <string>https://example.edu</string>
3711       </array>
3712       <key>BlockNewRequests</key>
3713       <true/> | <false/>
3714       <key>Locked</key>
3715       <true/> | <false/>
3716     </dict>
3717     <key>Location</key>
3718     <dict>
3719       <key>Allow</key>
3720       <array>
3721         <string>https://example.org</string>
3722       </array>
3723       <key>Block</key>
3724       <array>
3725         <string>https://example.edu</string>
3726       </array>
3727       <key>BlockNewRequests</key>
3728       <true/> | <false/>
3729       <key>Locked</key>
3730       <true/> | <false/>
3731     </dict>
3732     <key>Notifications</key>
3733     <dict>
3734       <key>Allow</key>
3735       <array>
3736         <string>https://example.org</string>
3737       </array>
3738       <key>Block</key>
3739       <array>
3740         <string>https://example.edu</string>
3741       </array>
3742       <key>BlockNewRequests</key>
3743       <true/>
3744       <key>Locked</key>
3745       <true/>
3746     </dict>
3747     <key>Autoplay</key>
3748     <dict>
3749       <key>Allow</key>
3750       <array>
3751         <string>https://example.org</string>
3752       </array>
3753       <key>Block</key>
3754       <array>
3755         <string>https://example.edu</string>
3756       </array>
3757       <key>Default</key>
3758       <string>allow-audio-video | block-audio | block-audio-video</string>
3759       <key>Locked</key>
3760       <true/> | <false/>
3761     </dict>
3762   </dict>
3763 </dict>
3764 ```
3765 #### policies.json
3766 ```
3767 {
3768   "policies": {
3769     "Permissions": {
3770       "Camera": {
3771         "Allow": ["https://example.org","https://example.org:1234"],
3772         "Block": ["https://example.edu"],
3773         "BlockNewRequests": true | false,
3774         "Locked": true | false
3775       },
3776       "Microphone": {
3777         "Allow": ["https://example.org"],
3778         "Block": ["https://example.edu"],
3779         "BlockNewRequests": true | false,
3780         "Locked": true | false
3781       },
3782       "Location": {
3783         "Allow": ["https://example.org"],
3784         "Block": ["https://example.edu"],
3785         "BlockNewRequests": true | false,
3786         "Locked": true | false
3787       },
3788       "Notifications": {
3789         "Allow": ["https://example.org"],
3790         "Block": ["https://example.edu"],
3791         "BlockNewRequests": true | false,
3792         "Locked": true | false
3793       },
3794       "Autoplay": {
3795         "Allow": ["https://example.org"],
3796         "Block": ["https://example.edu"],
3797         "Default": "allow-audio-video" | "block-audio" | "block-audio-video",
3798         "Locked": true | false
3799       }
3800     }
3801   }
3802 }
3803 ```
3804 ### PictureInPicture
3805
3806 Enable or disable Picture-in-Picture.
3807
3808 **Compatibility:** Firefox 78, Firefox ESR 78\
3809 **CCK2 Equivalent:** N/A\
3810 **Preferences Affected:** `media.videocontrols.picture-in-picture.video-toggle.enabled`
3811
3812 #### Windows (GPO)
3813 ```
3814 Software\Policies\Mozilla\Firefox\PictureInPicture = 0x1 | 0x0
3815 ```
3816 #### Windows (Intune)
3817 OMA-URI:
3818 ```
3819 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PictureInPicture
3820 ```
3821 Value (string):
3822 ```
3823 <enabled/> or <disabled/>
3824 ```
3825 #### macOS
3826 ```
3827 <dict>
3828   <key>PictureInPicture</key>
3829   <true/> | <false/>
3830 </dict>
3831 ```
3832 #### policies.json
3833 ```
3834 {
3835   "policies": {
3836     "PictureInPicture": true | false
3837   }
3838 }
3839 ```
3840 ### PopupBlocking
3841 Configure the default pop-up window policy as well as origins for which pop-up windows are allowed.
3842
3843 `Allow` is a list of origins where popup-windows are allowed.
3844
3845 `Default` determines whether or not pop-up windows are allowed by default.
3846
3847 `Locked` prevents the user from changing pop-up preferences.
3848
3849 **Compatibility:** Firefox 60, Firefox ESR 60\
3850 **CCK2 Equivalent:** `permissions.popup`\
3851 **Preferences Affected:** `dom.disable_open_during_load`
3852
3853 #### Windows (GPO)
3854 ```
3855 Software\Policies\Mozilla\Firefox\PopupBlocking\Allow\1 = "https://example.org"
3856 Software\Policies\Mozilla\Firefox\PopupBlocking\Allow\2 = "https://example.edu"
3857 Software\Policies\Mozilla\Firefox\PopupBlocking\Default = 0x1 | 0x0
3858 Software\Policies\Mozilla\Firefox\PopupBlocking\Locked = 0x1 | 0x0
3859 ```
3860 #### Windows (Intune)
3861 OMA-URI:
3862 ```
3863 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Allow
3864 ```
3865 Value (string):
3866 ```
3867 <enabled/>
3868 <data id="Permissions" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
3869 ```
3870 OMA-URI:
3871 ```
3872 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Default
3873 ```
3874 Value (string):
3875 ```
3876 <enabled/> or <disabled/>
3877 ```
3878 OMA-URI:
3879 ```
3880 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Locked
3881 ```
3882 Value (string):
3883 ```
3884 <enabled/> or <disabled/>
3885 ```
3886 #### macOS
3887 ```
3888 <dict>
3889   <key>PopupBlocking</key>
3890   <dict>
3891     <key>Allow</key>
3892     <array>
3893       <string>http://example.org</string>
3894       <string>http://example.edu</string>
3895     </array>
3896     <key>Default</key>
3897     <true/> | <false/>
3898     <key>Locked</key>
3899     <true/> | <false/>
3900   </dict>
3901 </dict>
3902 ```
3903 #### policies.json
3904 ```
3905 {
3906   "policies": {
3907     "PopupBlocking": {
3908       "Allow": ["http://example.org/",
3909                 "http://example.edu/"],
3910       "Default": true | false,
3911       "Locked": true | false
3912     }
3913   }
3914 }
3915 ```
3916 ### Preferences
3917 Set and lock preferences.
3918
3919 **NOTE** On Windows, in order to use this policy, you must clear all settings in the old **Preferences (Deprecated)** section.
3920
3921 Previously you could only set and lock a subset of preferences. Starting with Firefox 81 and Firefox ESR 78.3 you can set many more preferences. You can also set default preferences, user preferences and you can clear preferences.
3922
3923 Preferences that start with the following prefixes are supported:
3924 ```
3925 accessibility.
3926 browser.
3927 datareporting.policy.
3928 dom.
3929 extensions.
3930 general.autoScroll (Firefox 83, Firefox ESR 78.5)
3931 general.smoothScroll (Firefox 83, Firefox ESR 78.5)
3932 geo.
3933 intl.
3934 layout.
3935 media.
3936 network.
3937 places.
3938 print.
3939 signon. (Firefox 83, Firefox ESR 78.5)
3940 ui.
3941 widget.
3942 ```
3943 as well as the following security preferences:
3944 | Preference | Type | Default
3945 | --- | --- | ---
3946 | security.default_personal_cert | string | Ask Every Time
3947 | &nbsp;&nbsp;&nbsp;&nbsp;If set to Select Automatically, Firefox automatically chooses the default personal certificate.
3948 | security.insecure_connection_text.enabled | bool | false
3949 | &nbsp;&nbsp;&nbsp;&nbsp;If set to true, adds the words "Not Secure" for insecure sites.
3950 | security.insecure_connection_text.pbmode.enabled | bool | false
3951 | &nbsp;&nbsp;&nbsp;&nbsp;If set to true, adds the words "Not Secure" for insecure sites in private browsing.
3952 | security.insecure_field_warning.contextual.enabled | bool | true
3953 | &nbsp;&nbsp;&nbsp;&nbsp;If set to false, remove the warning for inscure login fields.
3954 | security.mixed_content.block_active_content | boolean | true
3955 | &nbsp;&nbsp;&nbsp;&nbsp;If false, mixed active content (HTTP and HTTPS) is not blocked.
3956 | security.osclientcerts.autoload | boolean | false
3957 | &nbsp;&nbsp;&nbsp;&nbsp;If true, client certificates are loaded from the operating system certificate store.
3958 | security.ssl.errorReporting.enabled | boolean | true
3959 | &nbsp;&nbsp;&nbsp;&nbsp;If false, SSL errors cannot be sent to Mozilla.
3960 | security.tls.hello_downgrade_check | boolean | true
3961 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the TLS 1.3 downgrade check is disabled.
3962 | security.warn_submit_secure_to_insecure | boolean | true
3963 | &nbsp;&nbsp;&nbsp;&nbsp;If false, no warning is shown when submitting s form from https to http.
3964 &nbsp;
3965
3966 Using the preference as the key, set the `Value` to the corresponding preference value.
3967
3968 `Status` can be "default", "locked", "user" or "clear"
3969
3970 Default preferences can be modified by the user.
3971
3972 If a value is locked, it is also set as the default.
3973
3974 User preferences persist across invocations of Firefox. It is the equivalent of a user setting the preference. They are most useful when a preference is needed very early in startup so it can't be set as default by policy.
3975
3976 User preferences persist even if the policy is removed, so if you need to remove them, you should use the clear policy.
3977
3978 See the examples below for more detail.
3979
3980 IMPORTANT: Make sure you're only setting a particular preference using this mechanism and not some other way.
3981
3982 Status
3983 **Compatibility:** Firefox 81, Firefox ESR 78.3\
3984 **CCK2 Equivalent:** `preferences`\
3985 **Preferences Affected:** Many
3986
3987 #### Windows (GPO)
3988 ```
3989 Software\Policies\Mozilla\Firefox\Preferences (REG_MULTI_SZ) =
3990 {
3991   "accessibility.force_disabled": {
3992     "Value": 1,
3993     "Status": "default"
3994   },
3995   "browser.cache.disk.parent_directory": {
3996     "Value": "SOME_NATIVE_PATH",
3997     "Status": "user"
3998   },
3999   "browser.tabs.warnOnClose": {
4000     "Value": false,
4001     "Status": "locked"
4002   }
4003 }
4004 ```
4005 #### Windows (Intune)
4006 OMA-URI:
4007 ```
4008 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Preferences
4009 ```
4010 Value (string):
4011 ```
4012 <enabled/>
4013 <data id="Preferences" value='
4014 {
4015   "accessibility.force_disabled": {
4016     "Value": 1,
4017     "Status": "default"
4018   },
4019   "browser.cache.disk.parent_directory": {
4020     "Value": "SOME_NATIVE_PATH",
4021     "Status": "user"
4022   },
4023   "browser.tabs.warnOnClose": {
4024     "Value": false,
4025     "Status": "locked"
4026   }
4027 }'/>
4028 ```
4029 #### macOS
4030 ```
4031 <dict>
4032   <key>Preferences</key>
4033   <dict>
4034     <key>accessibility.force_disabled</key>
4035     <dict>
4036       <key>Value</key>
4037       <integer>1</integer>
4038       <key>Status</key>
4039       <string>default</string>
4040     </dict>
4041     <key>browser.cache.disk.parent_directory</key>
4042     <dict>
4043       <key>Value</key>
4044       <string>SOME_NATIVE_PATH</string>
4045       <key>Status</key>
4046       <string>user</string>
4047     </dict>
4048     <key>browser.tabs.warnOnClose</key>
4049     <dict>
4050       <key>Value</key>
4051       <false/>
4052       <key>Status</key>
4053       <string>locked</string>
4054     </dict>
4055   </dict>
4056 </dict>
4057 ```
4058 #### policies.json
4059 ```
4060 {
4061   "policies": {
4062     "Preferences": {
4063       "accessibility.force_disabled": {
4064         "Value": 1,
4065         "Status": "default"
4066       },
4067       "browser.cache.disk.parent_directory": {
4068         "Value": "SOME_NATIVE_PATH",
4069         "Status": "user"
4070       },
4071       "browser.tabs.warnOnClose": {
4072         "Value": false,
4073         "Status": "locked"
4074       }
4075     }
4076   }
4077 }
4078 ```
4079 ### Preferences (Deprecated)
4080 Set and lock certain preferences.
4081
4082 **Compatibility:** See below\
4083 **CCK2 Equivalent:** `preferences`\
4084 **Preferences Affected:** See below
4085
4086 | Preference | Type | Compatibility | Default
4087 | --- | --- | --- | ---
4088 | accessibility.force_disabled | integer | Firefox 70, Firefox ESR 68.2 | 0
4089 | &nbsp;&nbsp;&nbsp;&nbsp;If set to 1, platform accessibility is disabled.
4090 | app.update.auto (Deprecated - Switch to AppAutoUpdate policy) | boolean | Firefox 68, Firefox ESR 68 | true
4091 | &nbsp;&nbsp;&nbsp;&nbsp;If false, Firefox doesn't automatically install update.
4092 | browser.bookmarks.autoExportHTML | boolean | Firefox 70, Firefox ESR 68.2 | false
4093 | &nbsp;&nbsp;&nbsp;&nbsp;If true, bookmarks are exported on shutdown.
4094 | browser.bookmarks.file | string | Firefox 70, Firefox ESR 68.2 | N/A
4095 | &nbsp;&nbsp;&nbsp;&nbsp;If set, the name of the file where bookmarks are exported and imported.
4096 | browser.bookmarks.restore_default_bookmarks | boolean | Firefox 70, Firefox ESR 68.2 | N/A
4097 | &nbsp;&nbsp;&nbsp;&nbsp;If true, bookmarks are restored to their defaults.
4098 | browser.cache.disk.enable | boolean | Firefox 68, Firefox ESR 68 | true
4099 | &nbsp;&nbsp;&nbsp;&nbsp;If false, don't store cache on the hard drive.
4100 | ~browser.cache.disk.parent_directory~ | string | Firefox 68, Firefox ESR 68 | Profile temporary directory
4101 | &nbsp;&nbsp;&nbsp;&nbsp;~If set, changes the location of the disk cache.~ This policy doesn't work. It's being worked on.
4102 | browser.fixup.dns_first_for_single_words | boolean | Firefox 68, Firefox ESR 68 | false
4103 | &nbsp;&nbsp;&nbsp;&nbsp;If true, single words are sent to DNS, not directly to search.
4104 | browser.newtabpage.activity-stream.default.sites | string | Firefox 72, ESR 68.4 | Locale dependent
4105 | &nbsp;&nbsp;&nbsp;&nbsp;If set, a list of URLs to use as the default top sites on the new tab page. Due to Firefox limitations, search sites can't be added. In addition, sites with the same name but different TLDs (example.org/example.com) will not display properly.
4106 | browser.places.importBookmarksHTML | boolean | Firefox 70, Firefox ESR 68.2
4107 | &nbsp;&nbsp;&nbsp;&nbsp;If true, bookmarks are always imported on startup.
4108 | browser.safebrowsing.phishing.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
4109 | &nbsp;&nbsp;&nbsp;&nbsp;If false, phishing protection is not enabled (Not recommended)
4110 | browser.safebrowsing.malware.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
4111 | &nbsp;&nbsp;&nbsp;&nbsp;If false, malware protection is not enabled (Not recommended)
4112 | browser.search.update | boolean | Firefox 68, Firefox ESR 68 | true
4113 | &nbsp;&nbsp;&nbsp;&nbsp;If false, updates for search engines are not checked.
4114 | browser.slowStartup.notificationDisabled | boolean | Firefox 70, Firefox ESR 68.2 | false
4115 | &nbsp;&nbsp;&nbsp;&nbsp;If true, a notification isn't shown if startup is slow.
4116 | browser.tabs.warnOnClose | boolean | Firefox 68, Firefox ESR 68 | true
4117 | &nbsp;&nbsp;&nbsp;&nbsp;If false, there is no warning when the browser is closed.
4118 | browser.taskbar.previews.enable | boolean | Firefox 70, Firefox ESR 68.2 (Windows only) | false
4119 | &nbsp;&nbsp;&nbsp;&nbsp;If true, tab previews are shown in the Windows taskbar.
4120 | browser.urlbar.suggest.bookmark | boolean | Firefox 68, Firefox ESR 68 | true
4121 | &nbsp;&nbsp;&nbsp;&nbsp;If false, bookmarks aren't suggested when typing in the URL bar.
4122 | browser.urlbar.suggest.history | boolean | Firefox 68, Firefox ESR 68 | true
4123 | &nbsp;&nbsp;&nbsp;&nbsp;If false, history isn't suggested when typing in the URL bar.
4124 | browser.urlbar.suggest.openpage | boolean | Firefox 68, Firefox ESR 68 | true
4125 | &nbsp;&nbsp;&nbsp;&nbsp;If false, open tabs aren't suggested when typing in the URL bar.
4126 | datareporting.policy.dataSubmissionPolicyBypassNotification | boolean | Firefox 68, Firefox ESR 68 | false
4127 | &nbsp;&nbsp;&nbsp;&nbsp;If true, don't show the privacy policy tab on first run.
4128 | dom.allow_scripts_to_close_windows | boolean | Firefox 70, Firefox ESR 68.2 | false
4129 | &nbsp;&nbsp;&nbsp;&nbsp;If false, web page can close windows.
4130 | dom.disable_window_flip | boolean | Firefox 68, Firefox ESR 68 | true
4131 | &nbsp;&nbsp;&nbsp;&nbsp;If false, web pages can focus and activate windows.
4132 | dom.disable_window_move_resize | boolean | Firefox 68, Firefox ESR 68 | false
4133 | &nbsp;&nbsp;&nbsp;&nbsp;If true, web pages can't move or resize windows.
4134 | dom.event.contextmenu.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4135 | &nbsp;&nbsp;&nbsp;&nbsp;If false, web pages can't override context menus.
4136 | dom.keyboardevent.keypress.hack.dispatch_non_printable_keys.addl | string | Firefox 68, Firefox ESR 68 | N/A
4137 | &nbsp;&nbsp;&nbsp;&nbsp;See https://support.mozilla.org/en-US/kb/dom-events-changes-introduced-firefox-66
4138 | dom.keyboardevent.keypress.hack.use_legacy_keycode_and_charcode.addl | string | Firefox 68, Firefox ESR 68 | N/A
4139 | &nbsp;&nbsp;&nbsp;&nbsp;See https://support.mozilla.org/en-US/kb/dom-events-changes-introduced-firefox-66
4140 | dom.xmldocument.load.enabled | boolean | Firefox ESR 68.5 | true.
4141 | &nbsp;&nbsp;&nbsp;&nbsp;If false, XMLDocument.load is not available.
4142 | dom.xmldocument.async.enabled | boolean | Firefox ESR 68.5 | true
4143 | &nbsp;&nbsp;&nbsp;&nbsp;If false, XMLDocument.async is not available.
4144 | extensions.blocklist.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
4145 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the extensions blocklist is not used (Not recommended)
4146 | extensions.getAddons.showPane | boolean | Firefox 68, Firefox ESR 68 | N/A
4147 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the Recommendations tab is not displayed in the Add-ons Manager.
4148 | extensions.htmlaboutaddons.recommendations.enabled | boolean | Firefox 72, Firefox ESR 68.4 | true
4149 | &nbsp;&nbsp;&nbsp;&nbsp;If false, recommendations are not shown on the Extensions tab in the Add-ons Manager.
4150 | geo.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
4151 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the geolocation API is disabled. | Language dependent
4152 | intl.accept_languages | string | Firefox 70, Firefox ESR 68.2
4153 | &nbsp;&nbsp;&nbsp;&nbsp;If set, preferred language for web pages.
4154 | media.eme.enabled (Deprecated - Switch to EncryptedMediaExtensions policy) | boolean | Firefox 70, Firefox ESR 68.2 | true
4155 | &nbsp;&nbsp;&nbsp;&nbsp;If false, Encrypted Media Extensions are not enabled.
4156 | media.gmp-gmpopenh264.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4157 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the OpenH264  plugin is not downloaded.
4158 | media.gmp-widevinecdm.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4159 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the Widevine plugin is not downloaded.
4160 | media.peerconnection.enabled | boolean | Firefox 72, Firefox ESR 68.4 | true
4161 | &nbsp;&nbsp;&nbsp;&nbsp;If false, WebRTC is disabled
4162 | media.peerconnection.ice.obfuscate_host_addresses.whitelist (Deprecated) | string | Firefox 72, Firefox ESR 68.4 | N/A
4163 | &nbsp;&nbsp;&nbsp;&nbsp;If set, a list of domains for which mDNS hostname obfuscation is
4164 disabled
4165 | media.peerconnection.ice.obfuscate_host_addresses.blocklist | string | Firefox 79, Firefox ESR 78.1 | N/A
4166 | &nbsp;&nbsp;&nbsp;&nbsp;If set, a list of domains for which mDNS hostname obfuscation is
4167 disabled
4168 | network.dns.disableIPv6 | boolean | Firefox 68, Firefox ESR 68 | false
4169 | &nbsp;&nbsp;&nbsp;&nbsp;If true, IPv6 DNS lokoups are disabled.
4170 | network.IDN_show_punycode | boolean | Firefox 68, Firefox ESR 68 | false
4171 | &nbsp;&nbsp;&nbsp;&nbsp;If true, display the punycode version of internationalized domain names.
4172 | places.history.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4173 | &nbsp;&nbsp;&nbsp;&nbsp;If false, history is not enabled.
4174 | print.save_print_settings | boolean | Firefox 70, Firefox ESR 68.2 | true
4175 | &nbsp;&nbsp;&nbsp;&nbsp;If false, print settings are not saved between jobs.
4176 | security.default_personal_cert | string | Firefox 68, Firefox ESR 68 | Ask Every Time
4177 | &nbsp;&nbsp;&nbsp;&nbsp;If set to Select Automatically, Firefox automatically chooses the default personal certificate.
4178 | security.mixed_content.block_active_content | boolean | Firefox 70, Firefox ESR 68.2 | true
4179 | &nbsp;&nbsp;&nbsp;&nbsp;If false, mixed active content (HTTP and HTTPS) is not blocked.
4180 | security.osclientcerts.autoload | boolean | Firefox 72 (Windows), Firefox 75 (macOS)  | false
4181 | &nbsp;&nbsp;&nbsp;&nbsp;If true, client certificates are loaded from the operating system certificate store.
4182 | security.ssl.errorReporting.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4183 | &nbsp;&nbsp;&nbsp;&nbsp;If false, SSL errors cannot be sent to Mozilla.
4184 | security.tls.hello_downgrade_check | boolean | Firefox 72, Firefox ESR 68.4 | true
4185 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the TLS 1.3 downgrade check is disabled.
4186 | ui.key.menuAccessKeyFocuses | boolean | Firefox 68, Firefox ESR 68 | true
4187 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the Alt key doesn't show the menubar on Windows.
4188 | widget.content.gtk-theme-override | string | Firefox 72, Firefox ESR 68.4 (Linux only) | N/A
4189 | &nbsp;&nbsp;&nbsp;&nbsp;If set, overrides the GTK theme for widgets.
4190 #### Windows (GPO)
4191 ```
4192 Software\Policies\Mozilla\Firefox\Preferences\boolean_preference_name = 0x1 | 0x0
4193 Software\Policies\Mozilla\Firefox\Preferences\string_preference_name = "string_value"
4194 ```
4195 #### Windows (Intune)
4196 OMA-URI: (periods are replaced by underscores)
4197 ```
4198 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Preferences/boolean_preference_name
4199 ```
4200 Value (string):
4201 ```
4202 <enabled/> or <disabled/>
4203 ```
4204 OMA-URI: (periods are replaced by underscores)
4205 ```
4206 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Preferences/string_preference_name
4207 ```
4208 Value (string):
4209 ```
4210 <enabled/>
4211 <data id="Preferences_String" value="string_value"/>
4212 ```
4213 #### macOS
4214 ```
4215 <dict>
4216   <key>Preferences</key>
4217   <dict>
4218     <key>boolean_preference_name</key>
4219     <true/> | <false/>
4220     <key>string_preference_name</key>
4221     <string>string_value</string>
4222   </dict>
4223 </dict>
4224 ```
4225 #### policies.json
4226 ```
4227 {
4228   "policies": {
4229     "Preferences": {
4230       "boolean_preference_name": true | false,
4231       "string_preference_name": "string_value"
4232     }
4233   }
4234 }
4235 ```
4236 ### PromptForDownloadLocation
4237 Ask where to save each file before downloading.
4238
4239 **Compatibility:** Firefox 68, Firefox ESR 68\
4240 **CCK2 Equivalent:** N/A\
4241 **Preferences Affected:** `browser.download.useDownloadDir`
4242
4243 #### Windows (GPO)
4244 ```
4245 Software\Policies\Mozilla\Firefox\PromptForDownloadLocation = 0x1 | 0x0
4246 ```
4247 #### Windows (Intune)
4248 OMA-URI:
4249 ```
4250 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PromptForDownloadLocation
4251 ```
4252 Value (string):
4253 ```
4254 <enabled/> or <disabled/>
4255 ```
4256 #### macOS
4257 ```
4258 <dict>
4259   <key>PromptForDownloadLocation</key>
4260   <true/> | <false/>
4261 </dict>
4262 ```
4263 #### policies.json
4264 ```
4265 {
4266   "policies": {
4267     "PromptForDownloadLocation": true | false
4268   }
4269 }
4270 ```
4271 ### Proxy
4272 Configure proxy settings. These settings correspond to the connection settings in Firefox preferences.
4273 To specify ports, append them to the hostnames with a colon (:).
4274
4275 `Mode` is the proxy method being used.
4276
4277 `Locked` is whether or not proxy settings can be changed.
4278
4279 `HTTPProxy` is the HTTP proxy server.
4280
4281 `UseHTTPProxyForAllProtocols` is whether or not the HTTP proxy should be used for all other proxies.
4282
4283 `SSLProxy` is the SSL proxy server.
4284
4285 `FTPProxy` is the FTP proxy server.
4286
4287 `SOCKSProxy` is the SOCKS proxy server
4288
4289 `SOCKSVersion` is the SOCKS version (4 or 5)
4290
4291 `Passthrough` is list of hostnames or IP addresses that will not be proxied. Use `<local>` to bypass proxying for all hostnames which do not contain periods.
4292
4293 `AutoConfigURL` is a  URL for proxy configuration (only used if Mode is autoConfig).
4294
4295 `AutoLogin` means do not prompt for authentication if password is saved.
4296
4297 `UseProxyForDNS` to use proxy DNS when using SOCKS v5.
4298
4299 **Compatibility:** Firefox 60, Firefox ESR 60\
4300 **CCK2 Equivalent:** `networkProxy*`\
4301 **Preferences Affected:** `network.proxy.type`,`network.proxy.autoconfig_url`,`network.proxy.socks_remote_dns`,`signon.autologin.proxy`,`network.proxy.socks_version`,`network.proxy.no_proxies_on`,`network.proxy.share_proxy_settings`,`network.proxy.http`,`network.proxy.http_port`,`network.proxy.ftp`,`network.proxy.ftp_port`,`network.proxy.ssl`,`network.proxy.ssl_port`,`network.proxy.socks`,`network.proxy.socks_port`
4302
4303 #### Windows (GPO)
4304 ```
4305 Software\Policies\Mozilla\Firefox\Proxy\Mode = "none" | "system" | "manual" | "autoDetect" | "autoConfig"
4306 Software\Policies\Mozilla\Firefox\Proxy\Locked = 0x1 | 0x0
4307 Software\Policies\Mozilla\Firefox\=Proxy\HTTPProxy = https://httpproxy.example.com
4308 Software\Policies\Mozilla\Firefox\Proxy\UseHTTPProxyForAllProtocols = 0x1 | 0x0
4309 Software\Policies\Mozilla\Firefox\Proxy\SSLProxy = https://sslproxy.example.com
4310 Software\Policies\Mozilla\Firefox\Proxy\FTPProxy = https://ftpproxy.example.com
4311 Software\Policies\Mozilla\Firefox\Proxy\SOCKSProxy = https://socksproxy.example.com
4312 Software\Policies\Mozilla\Firefox\Proxy\SOCKSVersion = 0x4 | 0x5
4313 Software\Policies\Mozilla\Firefox\Proxy\Passthrough = <local>
4314 Software\Policies\Mozilla\Firefox\Proxy\AutoConfigURL = URL_TO_AUTOCONFIG
4315 Software\Policies\Mozilla\Firefox\Proxy\AutoLogin = 0x1 | 0x0
4316 Software\Policies\Mozilla\Firefox\Proxy\UseProxyForDNS = 0x1 | 0x0
4317 ```
4318 #### Windows (Intune)
4319 OMA-URI:
4320 ```
4321 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Proxy
4322 ```
4323 Value (string):
4324 ```
4325 <enabled/>
4326 <data id="ProxyLocked" value="true | false"/>
4327 <data id="ConnectionType" value="none | system | manual | autoDetect | autoConfig"/>
4328 <data id="HTTPProxy" value="https://httpproxy.example.com"/>
4329 <data id="UseHTTPProxyForAllProtocols" value="true | false"/>
4330 <data id="SSLProxy" value="https://sslproxy.example.com"/>
4331 <data id="FTPProxy" value="https://ftpproxy.example.com"/>
4332 <data id="SOCKSProxy" value="https://socksproxy.example.com"/>
4333 <data id="SOCKSVersion" value="4 | 5"/>
4334 <data id="AutoConfigURL" value="URL_TO_AUTOCONFIG"/>
4335 <data id="Passthrough" value="<local>"/>
4336 <data id="AutoLogin" value="true | false"/>
4337 <data id="UseProxyForDNS" value="true | false"/>
4338 ```
4339 #### macOS
4340 ```
4341 <dict>
4342   <key>Proxy</key>
4343   <dict>
4344     <key>Mode</key>
4345     <string>none | system | manual | autoDetect | autoConfig</string>
4346     <key>Locked</key>
4347     <true> | </false>
4348     <key>HTTPProxy</key>
4349     <string>https://httpproxy.example.com</string>
4350     <key>UseHTTPProxyForAllProtocols</key>
4351     <true> | </false>
4352     <key>SSLProxy</key>
4353     <string>https://sslproxy.example.com</string>
4354     <key>FTPProxy</key>
4355     <string>https://ftpproxy.example.com</string>
4356     <key>SOCKSProxy</key>
4357     <string>https://socksproxy.example.com</string>
4358     <key>SOCKSVersion</key>
4359     <string>4 | 5</string>
4360     <key>Passthrough</key>
4361     <string>&lt;local>&gt;</string>
4362     <key>AutoConfigURL</key>
4363     <string>URL_TO_AUTOCONFIG</string>
4364     <key>AutoLogin</key>
4365     <true> | </false>
4366     <key>UseProxyForDNS</key>
4367     <true> | </false>
4368   </dict>
4369 </dict>
4370 ```
4371 #### policies.json
4372 ```
4373 {
4374   "policies": {
4375     "Proxy": {
4376       "Mode": "none" | "system" | "manual" | "autoDetect" | "autoConfig",
4377       "Locked": true | false,
4378       "HTTPProxy": "hostname",
4379       "UseHTTPProxyForAllProtocols": true | false,
4380       "SSLProxy": "hostname",
4381       "FTPProxy": "hostname",
4382       "SOCKSProxy": "hostname",
4383       "SOCKSVersion": 4 | 5
4384       "Passthrough": "<local>",
4385       "AutoConfigURL": "URL_TO_AUTOCONFIG",
4386       "AutoLogin": true | false,
4387       "UseProxyForDNS": true | false
4388     }
4389   }
4390 }
4391 ```
4392 ### RequestedLocales
4393 Set the the list of requested locales for the application in order of preference. It will cause the corresponding language pack to become active.
4394
4395 Note: For Firefox 68, this can now be a string so that you can specify an empty value.
4396
4397 **Compatibility:** Firefox 64, Firefox ESR 60.4, Updated in Firefox 68, Firefox ESR 68\
4398 **CCK2 Equivalent:** N/A\
4399 **Preferences Affected:** N/A
4400 #### Windows (GPO)
4401 ```
4402 Software\Policies\Mozilla\Firefox\RequestedLocales\1 = "de"
4403 Software\Policies\Mozilla\Firefox\RequestedLocales\2 = "en-US"
4404
4405 or
4406
4407 Software\Policies\Mozilla\Firefox\RequestedLocales = "de,en-US"
4408 ```
4409 #### Windows (Intune)
4410 OMA-URI:
4411 ```
4412 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/RequestedLocalesString
4413 ```
4414 Value (string):
4415 ```
4416 <enabled/>
4417 <data id="Preferences_String" value="de,en-US"/>
4418 ```
4419 #### macOS
4420 ```
4421 <dict>
4422   <key>RequestedLocales</key>
4423   <array>
4424     <string>de</string>
4425     <string>en-US</string>
4426   </array>
4427 </dict>
4428
4429 or
4430
4431 <dict>
4432   <key>RequestedLocales</key>
4433   <string>de,en-US</string>
4434 </dict>
4435
4436 ```
4437 #### policies.json
4438 ```
4439 {
4440   "policies": {
4441     "RequestedLocales": ["de", "en-US"]
4442   }
4443 }
4444
4445 or
4446
4447 {
4448   "policies": {
4449     "RequestedLocales": "de,en-US"
4450   }
4451 }
4452 ```
4453 <a name="SanitizeOnShutdown"></a>
4454
4455 ### SanitizeOnShutdown (Selective)
4456 Clear data on shutdown. Choose from Cache, Cookies, Download History, Form & Search History, Browsing History, Active Logins, Site Preferences and Offline Website Data.
4457
4458 Previously, these values were always locked. Starting with Firefox 74 and Firefox ESR 68.6, you can use the `Locked` option to either keep the values unlocked (set it to false), or lock only the values you set (set it to true). If you want the old behavior of locking everything, do not set `Locked` at all.
4459
4460 **Compatibility:** Firefox 68, Firefox ESR 68 (Locked added in 74/68.6)\
4461 **CCK2 Equivalent:** N/A\
4462 **Preferences Affected:** `privacy.sanitize.sanitizeOnShutdown`,`privacy.clearOnShutdown.cache`,`privacy.clearOnShutdown.cookies`,`privacy.clearOnShutdown.downloads`,`privacy.clearOnShutdown.formdata`,`privacy.clearOnShutdown.history`,`privacy.clearOnShutdown.sessions`,`privacy.clearOnShutdown.siteSettings`,`privacy.clearOnShutdown.offlineApps`
4463 #### Windows (GPO)
4464 ```
4465 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Cache = 0x1 | 0x0
4466 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Cookies = 0x1 | 0x0
4467 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Downloads = 0x1 | 0x0
4468 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\FormData = 0x1 | 0x0
4469 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\History = 0x1 | 0x0
4470 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Sessions = 0x1 | 0x0
4471 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\SiteSettings = 0x1 | 0x0
4472 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\OfflineApps = 0x1 | 0x0
4473 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Locked = 0x1 | 0x0
4474 ```
4475 #### Windows (Intune)
4476 OMA-URI:
4477 ```
4478 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/I_SanitizeOnShutdown_Locked
4479 ```
4480 Value (string):
4481 ```
4482 <enabled/> or <disabled/>
4483 ```
4484 #### macOS
4485 ```
4486 <dict>
4487   <key>SanitizeOnShutdown</key>
4488   <dict>
4489     <key>Cache</key>
4490     <true/> | <false/>
4491     <key>Cookies</key>
4492     <true/> | <false/>
4493     <key>Downloads</key>
4494     <true/> | <false/>
4495     <key>FormData</key>
4496     <true/> | <false/>
4497     <key>History</key>
4498     <true/> | <false/>
4499     <key>Sessions</key>
4500     <true/> | <false/>
4501     <key>SiteSettings</key>
4502     <true/> | <false/>
4503     <key>OfflineApps</key>
4504     <true/> | <false/>
4505     <key>Locked</key>
4506     <true/> | <false/>
4507   </dict>
4508 </dict>
4509 ```
4510 #### policies.json
4511 ```
4512 {
4513   "policies": {
4514     "SanitizeOnShutdown": {
4515       "Cache": true | false,
4516       "Cookies": true | false,
4517       "Downloads": true | false,
4518       "FormData": true | false,
4519       "History": true | false,
4520       "Sessions": true | false,
4521       "SiteSettings": true | false,
4522       "OfflineApps": true | false,
4523       "Locked": true | false
4524     }
4525   }
4526 }
4527 ```
4528 ### SanitizeOnShutdown (All)
4529 Clear all data on shutdown, including Browsing & Download History, Cookies, Active Logins, Cache, Form & Search History, Site Preferences and Offline Website Data.
4530
4531 **Compatibility:** Firefox 60, Firefox ESR 60\
4532 **CCK2 Equivalent:** N/A\
4533 **Preferences Affected:** `privacy.sanitize.sanitizeOnShutdown`,`privacy.clearOnShutdown.cache`,`privacy.clearOnShutdown.cookies`,`privacy.clearOnShutdown.downloads`,`privacy.clearOnShutdown.formdata`,`privacy.clearOnShutdown.history`,`privacy.clearOnShutdown.sessions`,`privacy.clearOnShutdown.siteSettings`,`privacy.clearOnShutdown.offlineApps`
4534 #### Windows (GPO)
4535 ```
4536 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown = 0x1 | 0x0
4537 ```
4538 #### Windows (Intune)
4539 OMA-URI:
4540 ```
4541 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/C_SanitizeOnShutdown
4542 ```
4543 Value (string):
4544 ```
4545 <enabled/> or <disabled/>
4546 ```
4547 #### macOS
4548 ```
4549 <dict>
4550   <key>SanitizeOnShutdown</key>
4551   <true/> | <false/>
4552 </dict>
4553 ```
4554 #### policies.json
4555 ```
4556 {
4557   "policies": {
4558     "SanitizeOnShutdown": true | false
4559   }
4560 }
4561 ```
4562 ### SearchBar
4563 Set whether or not search bar is displayed.
4564
4565 **Compatibility:** Firefox 60, Firefox ESR 60\
4566 **CCK2 Equivalent:** `showSearchBar`\
4567 **Preferences Affected:** N/A
4568
4569 #### Windows (GPO)
4570 ```
4571 Software\Policies\Mozilla\Firefox\SearchBar = "unified" | "separate"
4572 ```
4573
4574 #### Windows (Intune)
4575 OMA-URI:
4576 ```
4577 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SearchBar
4578 ```
4579 Value (string):
4580 ```
4581 <enabled/>
4582 <data id="Permissions" value="unified | separate"/>
4583 ```
4584 #### macOS
4585 ```
4586 <dict>
4587   <key>SearchBar</key>
4588   <string>unified | separate</string>
4589 </dict>
4590 ```
4591 #### policies.json
4592 ```
4593 {
4594   "policies": {
4595     "SearchBar": "unified" | "separate"
4596   }
4597 }
4598 ```
4599 <a name="SearchEngines"></a>
4600
4601 ### SearchEngines (This policy is only available on the ESR.)
4602
4603 ### SearchEngines | Default
4604
4605 Set the default search engine. This policy is only available on the ESR.
4606
4607 **Compatibility:** Firefox ESR 60\
4608 **CCK2 Equivalent:** `defaultSearchEngine`\
4609 **Preferences Affected:** N/A
4610
4611 #### Windows (GPO)
4612 ```
4613 Software\Policies\Mozilla\Firefox\SearchEngines\Default = NAME_OF_SEARCH_ENGINE
4614 ```
4615 #### Windows (Intune)
4616 OMA-URI:
4617 ```
4618 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_Default
4619 ```
4620 Value (string):
4621 ```
4622 <enabled/>
4623 <data id="SearchEngines_Default" value="NAME_OF_SEARCH_ENGINE"/>
4624 ```
4625 #### macOS
4626 ```
4627 <dict>
4628   <key>SearchEngines</key>
4629   <dict>
4630     <key>Default</key>
4631     <string>NAME_OF_SEARCH_ENGINE</string>
4632   </dict>
4633 </dict>
4634 ```
4635 #### policies.json
4636 ```
4637 {
4638   "policies": {
4639     "SearchEngines": {
4640       "Default": "NAME_OF_SEARCH_ENGINE"
4641     }
4642   }
4643 }
4644 ```
4645 ### SearchEngines | PreventInstalls
4646
4647 Prevent installing search engines from webpages.
4648
4649 **Compatibility:** Firefox ESR 60\
4650 **CCK2 Equivalent:** `disableSearchEngineInstall`\
4651 **Preferences Affected:** N/A
4652
4653 #### Windows (GPO)
4654 ```
4655 Software\Policies\Mozilla\Firefox\SearchEngines\PreventInstalls = 0x1 | 0x0
4656 ```
4657 #### Windows (Intune)
4658 OMA-URI:
4659 ```
4660 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_PreventInstalls
4661 ```
4662 Value (string):
4663 ```
4664 <enabled/> or <disabled/>
4665 ```
4666 #### macOS
4667 ```
4668 <dict>
4669   <key>SearchEngines</key>
4670   <dict>
4671     <key>PreventInstalls</key>
4672     <true/> | <false/>
4673   </dict>
4674 </dict>
4675 ```
4676 #### policies.json
4677 ```
4678 {
4679   "policies": {
4680     "SearchEngines": {
4681       "PreventInstalls": true | false
4682     }
4683   }
4684 }
4685 ```
4686 ### SearchEngines | Remove
4687
4688 Hide built-in search engines. This policy is only available on the ESR.
4689
4690 **Compatibility:** Firefox ESR 60.2\
4691 **CCK2 Equivalent:** `removeDefaultSearchEngines` (removed all built-in engines)\
4692 **Preferences Affected:** N/A
4693
4694 #### Windows (GPO)
4695 ```
4696 Software\Policies\Mozilla\Firefox\SearchEngines\Remove\1 = NAME_OF_SEARCH_ENGINE
4697 ```
4698 #### Windows (Intune)
4699 OMA-URI:
4700 ```
4701 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_Remove
4702 ```
4703 Value (string):
4704 ```
4705 <enabled/>
4706 <data id="SearchEngines_Remove" value="1&#xF000;NAME_OF_SEARCH_ENGINE"/>
4707 ```
4708 #### macOS
4709 ```
4710 <dict>
4711   <key>SearchEngines</key>
4712   <dict>
4713     <key>Remove</key>
4714     <array>
4715       <string>NAME_OF_SEARCH_ENGINE</string>
4716     </array>
4717   </dict>
4718 </dict>
4719 ```
4720 #### policies.json
4721 ```
4722 {
4723   "policies": {
4724     "SearchEngines": {
4725       "Remove": ["NAME_OF_SEARCH_ENGINE"]
4726     }
4727   }
4728 }
4729 ```
4730 ### SearchEngines | Add
4731
4732 Add new search engines (up to five). This policy is only available on the ESR. `Name` and `URLTemplate` are required.
4733
4734 `Name` is the name of the search engine.
4735
4736 `URLTemplate` is the search URL with {searchTerms} to substitute for the search term.
4737
4738 `Method` is either GET or POST
4739
4740 `IconURL` is a URL for the icon to use.
4741
4742 `Alias` is a keyword to use for the engine.
4743
4744 `Description` is a description of the search engine.
4745
4746 `PostData` is the POST data as name value pairs separated by &.
4747
4748 `SuggestURLTemplate` is a search suggestions URL with {searchTerms} to substitute for the search term.
4749
4750 **Compatibility:** Firefox ESR 60 (POST support in Firefox ESR 68)\
4751 **CCK2 Equivalent:** `searchplugins`\
4752 **Preferences Affected:** N/A
4753
4754 #### Windows (GPO)
4755 ```
4756 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Name = "Example1"
4757 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\URLTemplate = "https://www.example.org/q={searchTerms}"
4758 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Method = "GET" | "POST"
4759 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\IconURL = "https://www.example.org/favicon.ico"
4760 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Alias = "example"
4761 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Description = "Example Description"
4762 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\SuggestURLTemplate = "https://www.example.org/suggestions/q={searchTerms}"
4763 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\PostData = "name=value&q={searchTerms}"
4764 ```
4765 #### Windows (Intune)
4766 OMA-URI:
4767 ```
4768 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_1
4769 ```
4770 Value (string):
4771 ```
4772 <enabled/>
4773 <data id="SearchEngine_Name" value="Example1"/>
4774 <data id="SearchEngine_URLTemplate" value="https://www.example.org/q={searchTerms"/>
4775 <data id="SearchEngine_Method" value="GET | POST"/>
4776 <data id="SearchEngine_IconURL" value="https://www.example.org/favicon.ico"/>
4777 <data id="SearchEngine_Alias" value="example"/>
4778 <data id="SearchEngine_Description" value="Example Description"/>
4779 <data id="SearchEngine_SuggestURLTemplate" value="https://www.example.org/suggestions/q={searchTerms}"/>
4780 <data id="SearchEngine_PostData" value="name=value&amp;q={searchTerms}"/>
4781 ```
4782 #### macOS
4783 ```
4784 <dict>
4785   <key>SearchEngines</key>
4786   <dict>
4787     <key>Add</key>
4788     <array>
4789       <dict>
4790         <key>Name</key>
4791         <string>Example1</string>
4792         <key>URLTemplate</key>
4793         <string>https://www.example.org/q={searchTerms}</string>
4794         <key>Method</key>
4795         <string>GET | POST </string>
4796         <key>IconURL</key>
4797         <string>https://www.example.org/favicon.ico</string>
4798         <key>Alias</key>
4799         <string>example</string>
4800         <key>Description</key>
4801         <string>Example Description</string>
4802         <key>SuggestURLTemplate</key>
4803         <string>https://www.example.org/suggestions/q={searchTerms}</string>
4804         <key>PostData</key>
4805         <string>name=value&q={searchTerms}</string>
4806       </dict>
4807     <array>
4808   </dict>
4809 </dict>
4810 ```
4811 #### policies.json
4812 ```
4813 {
4814   "policies": {
4815     "SearchEngines": {
4816       "Add": [
4817         {
4818           "Name": "Example1",
4819           "URLTemplate": "https://www.example.org/q={searchTerms}",
4820           "Method": "GET" | "POST",
4821           "IconURL": "https://www.example.org/favicon.ico",
4822           "Alias": "example",
4823           "Description": "Description",
4824           "PostData": "name=value&q={searchTerms}",
4825           "SuggestURLTemplate": "https://www.example.org/suggestions/q={searchTerms}"
4826         }
4827       ]
4828     }
4829   }
4830 }
4831 ```
4832 ### SearchSuggestEnabled
4833
4834 Enable search suggestions.
4835
4836 **Compatibility:** Firefox 68, Firefox ESR 68\
4837 **CCK2 Equivalent:** N/A\
4838 **Preferences Affected:** `browser.urlbar.suggest.searches`,`browser.search.suggest.enabled`
4839
4840 #### Windows (GPO)
4841 ```
4842 Software\Policies\Mozilla\Firefox\SearchSuggestEnabled = 0x1 | 0x0
4843 ```
4844 #### Windows (Intune)
4845 OMA-URI:
4846 ```
4847 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchSuggestEnabled
4848 ```
4849 Value (string):
4850 ```
4851 <enabled/> or <disabled/>
4852 ```
4853 #### macOS
4854 ```
4855 <dict>
4856   <key>SearchSuggestEnabled</key>
4857   <true/> | <false/>
4858 </dict>
4859 ```
4860 #### policies.json
4861 ```
4862 {
4863   "policies": {
4864     "SearchSuggestEnabled": true | false
4865   }
4866 }
4867 ```
4868 ### SecurityDevices
4869
4870 Install PKCS #11 modules.
4871
4872 **Compatibility:** Firefox 64, Firefox ESR 60.4\
4873 **CCK2 Equivalent:** `certs.devices`\
4874 **Preferences Affected:** N/A
4875
4876 #### Windows (GPO)
4877 ```
4878 Software\Policies\Mozilla\Firefox\SecurityDevices\NAME_OF_DEVICE = PATH_TO_LIBRARY_FOR_DEVICE
4879 ```
4880 #### Windows (Intune)
4881 OMA-URI:
4882 ```
4883 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SecurityDevices
4884 ```
4885 Value (string):
4886 ```
4887 <enabled/>
4888 <data id="SecurityDevices" value="NAME_OF_DEVICE&#xF000;PATH_TO_LIBRARY_FOR_DEVICE"/>
4889 ```
4890 #### macOS
4891 ```
4892 <dict>
4893   <key>SecurityDevices</key>
4894   <dict>
4895     <key>NAME_OF_DEVICE</key>
4896     <string>PATH_TO_LIBRARY_FOR_DEVICE</string>
4897   </dict>
4898 </dict>
4899 ```
4900
4901 #### policies.json
4902 ```
4903 {
4904   "policies": {
4905     "SecurityDevices": {
4906       "NAME_OF_DEVICE": "PATH_TO_LIBRARY_FOR_DEVICE"
4907     }
4908   }
4909 }
4910 ```
4911 ### SSLVersionMax
4912
4913 Set and lock the maximum version of TLS.
4914
4915 **Compatibility:** Firefox 66, Firefox ESR 60.6\
4916 **CCK2 Equivalent:** N/A\
4917 **Preferences Affected:** `security.tls.version.max`
4918
4919 #### Windows (GPO)
4920 ```
4921 Software\Policies\Mozilla\Firefox\SSLVersionMax = "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
4922 ```
4923 #### Windows (Intune)
4924 OMA-URI:
4925 ```
4926 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SSLVersionMax
4927 ```
4928 Value (string):
4929 ```
4930 <enabled/>
4931 <data id="SSLVersion" value="tls1 | tls1.2 | tls1.3"/>
4932 ```
4933 #### macOS
4934 ```
4935 <dict>
4936   <key>SSLVersionMax</key>
4937   <string>tls1 | tls1.1 | tls1.2 | tls1.3</string>
4938 </dict>
4939 ```
4940
4941 #### policies.json
4942 ```
4943 {
4944   "policies": {
4945     "SSLVersionMax": "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
4946   }
4947 }
4948 ```
4949 ### SSLVersionMin
4950
4951 Set and lock the minimum version of TLS.
4952
4953 **Compatibility:** Firefox 66, Firefox ESR 60.6\
4954 **CCK2 Equivalent:** N/A\
4955 **Preferences Affected:** `security.tls.version.min`
4956
4957 #### Windows (GPO)
4958 ```
4959 Software\Policies\Mozilla\Firefox\SSLVersionMin = "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
4960 ```
4961 #### Windows (Intune)
4962 OMA-URI:
4963 ```
4964 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SSLVersionMin
4965 ```
4966 Value (string):
4967 ```
4968 <enabled/>
4969 <data id="SSLVersion" value="tls1 | tls1.2 | tls1.3"/>
4970 ```
4971 #### macOS
4972 ```
4973 <dict>
4974   <key>SSLVersionMin</key>
4975   <string>tls1 | tls1.1 | tls1.2 | tls1.3</string>
4976 </dict>
4977 ```
4978
4979 #### policies.json
4980 ```
4981 {
4982   "policies": {
4983     "SSLVersionMin": "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
4984   }
4985 }
4986 ```
4987 ### SupportMenu
4988 Add a menuitem to the help menu for specifying support information.
4989
4990 **Compatibility:** Firefox 68.0.1, Firefox ESR 68.0.1\
4991 **CCK2 Equivalent:** helpMenu\
4992 **Preferences Affected:** N/A
4993
4994 #### Windows (GPO)
4995 ```
4996 Software\Policies\Mozilla\Firefox\SupportMenu\Title = "Support Menu"
4997 Software\Policies\Mozilla\Firefox\SupportMenu\URL = "http://example.com/support"
4998 Software\Policies\Mozilla\Firefox\SupportMenu\AccessKey = "S"
4999 ```
5000 #### Windows (Intune)
5001 OMA-URI:
5002 ```
5003 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SupportMenu
5004 ```
5005 Value (string):
5006 ```
5007 <enabled/>
5008 <data id="SupportMenuTitle" value="Support Menu"/>
5009 <data id="SupportMenuURL" value="http://example.com/support"/>
5010 <data id="SupportMenuAccessKey" value="S">
5011 ```
5012 #### macOS
5013 ```
5014 <dict>
5015   <key>SupportMenu</key>
5016   <dict>
5017     <key>Title</key>
5018     <string>SupportMenu</string>
5019     <key>URL</key>
5020     <string>http://example.com/support</string>
5021     <key>AccessKey</key>
5022     <string>S</string>
5023   </dict>
5024 </dict>
5025 ```
5026 #### policies.json
5027 ```
5028 {
5029   "policies": {
5030     "SupportMenu": {
5031       "Title": "Support Menu",
5032       "URL": "http://example.com/support",
5033       "AccessKey": "S"
5034     }
5035   }
5036 }
5037 ```
5038 ### UserMessaging
5039
5040 Prevent Firefox from messaging the user in certain situations.
5041
5042 `WhatsNew` Remove the "What's New" icon and menuitem. (Firefox 75 only)
5043
5044 `ExtensionRecommendations` Don't recommend extensions while the user is visiting web pages.
5045
5046 `FeatureRecommendations` Don't recommend browser features.
5047
5048 `UrlbarInterventions` Don't offer Firefox specific suggestions in the URL bar. (Firefox 75 only)
5049
5050 **Compatibility:** Firefox 75, Firefox ESR 68.7\
5051 **CCK2 Equivalent:** N/A\
5052 **Preferences Affected:** `browser.messaging-system.whatsNewPanel.enabled`,`browser.newtabpage.activity-stream.asrouter.userprefs.cfr.addons`,`browser.newtabpage.activity-stream.asrouter.userprefs.cfr.features`
5053
5054 #### Windows (GPO)
5055 ```
5056 Software\Policies\Mozilla\Firefox\UserMessaging\WhatsNew = 0x1 | 0x0
5057 Software\Policies\Mozilla\Firefox\UserMessaging\ExtensionRecommendations = 0x1 | 0x0
5058 Software\Policies\Mozilla\Firefox\UserMessaging\FeatureRecommendations = 0x1 | 0x0
5059 Software\Policies\Mozilla\Firefox\UserMessaging\UrlbarInterventions = 0x1 | 0x0
5060 ```
5061 #### Windows (Intune)
5062 OMA-URI:
5063 ```
5064 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/UserMessaging_WhatsNew
5065 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/UserMessaging_ExtensionRecommendations
5066 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/UserMessaging_FeatureRecommendations
5067 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/UserMessaging_UrlbarInterventions
5068 ```
5069 Value (string):
5070 ```
5071 <enabled/> or <disabled/>
5072 ```
5073 #### macOS
5074 ```
5075 <dict>
5076   <key>UserMessaging</key>
5077   <dict>
5078     <key>WhatsNew</key>
5079     <true/> | <false/>
5080     <key>ExtensionRecommendations</key>
5081     <true/> | <false/>
5082     <key>FeatureRecommendations</key>
5083     <true/> | <false/>
5084     <key>UrlbarInterventions</key>
5085     <true/> | <false/>
5086   </dict>
5087 </dict>
5088 ```
5089 #### policies.json
5090 ```
5091 {
5092   "policies": {
5093     "UserMessaging": {
5094       "WhatsNew": true | false,
5095       "ExtensionRecommendations": true | false,
5096       "FeatureRecommendations": true | false,
5097       "UrlbarInterventions": true | false
5098     }
5099   }
5100 }
5101 ```
5102 ### WebsiteFilter
5103 Block websites from being visited. The parameters take an array of Match Patterns, as documented in https://developer.mozilla.org/en-US/Add-ons/WebExtensions/Match_patterns.
5104 The arrays are limited to 1000 entries each.
5105
5106 As of Firefox 83 and Firefox ESR 78.5, file URLs are supported.
5107
5108 **Compatibility:** Firefox 60, Firefox ESR 60\
5109 **CCK2 Equivalent:** N/A\
5110 **Preferences Affected:** N/A
5111
5112 #### Windows (GPO)
5113 ```
5114 Software\Policies\Mozilla\Firefox\WebsiteFilter\Block\1 = "<all_urls>"
5115 Software\Policies\Mozilla\Firefox\WebsiteFilter\Exceptions\1 = "http://example.org/*"
5116 ```
5117 #### Windows (Intune)
5118 OMA-URI:
5119 ```
5120 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/B_WebsiteFilter_Block
5121 ```
5122 Value (string):
5123 ```
5124 <enabled/>
5125 <data id="WebsiteFilter" value="1&#xF000;<all_urls>"/>
5126 ```
5127 OMA-URI:
5128 ```
5129 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/B_WebsiteFilter_Exceptions
5130 ```
5131 Value (string):
5132 ```
5133 <enabled/>
5134 <data id="WebsiteFilter" value="1&#xF000;http://example.org/*"/>
5135 ```
5136 #### macOS
5137 ```
5138 <dict>
5139   <key>WebsiteFilter</key>
5140   <dict>
5141     <key>Block</key>
5142     <array>
5143       <string><all_urls></string>
5144     </array>
5145     <key>Exceptions</key>
5146     <array>
5147       <string>http://example.org/*</string>
5148     </array>
5149   </dict>
5150
5151 </dict>
5152 ```
5153 #### policies.json
5154 ```
5155 {
5156   "policies": {
5157     "WebsiteFilter": {
5158       "Block": ["<all_urls>"],
5159       "Exceptions": ["http://example.org/*"]
5160     }
5161   }
5162 }
5163 ```