]> git.p6c8.net - policy-templates.git/blob - README.md
git.p6c8.net / policy-templates.git / blob
? search:
summary | shortlog | log | commit | commitdiff | tree
history | raw | HEAD
Update firefox.adml
[policy-templates.git] / README.md
1 **These policies are in active development and so might contain changes that do not work with current versions of Firefox.**
2
3 **You should use the [officially released versions](https://github.com/mozilla/policy-templates/releases) if you are deploying changes.**
4
5 Policies can be specified using the [Group Policy templates on Windows](https://github.com/mozilla/policy-templates/tree/master/windows), [Intune on Windows](https://support.mozilla.org/kb/managing-firefox-intune), [configuration profiles on macOS](https://github.com/mozilla/policy-templates/tree/master/mac), or by creating a file called `policies.json`. On Windows, create a directory called `distribution` where the EXE is located and place the file there. On Mac, the file goes into `Firefox.app/Contents/Resources/distribution`. On Linux, the file goes into `firefox/distribution`, where `firefox` is the installation directory for firefox, which varies by distribution or you can specify system-wide policy by placing the file in `/etc/firefox/policies`.
6
7 | Policy Name | Description
8 | --- | --- |
9 | **[`3rdparty`](#3rdparty)** | Set policies that WebExtensions can access via chrome.storage.managed.
10 | **[`AllowedDomainsForApps`](#alloweddomainsforapps)** | Define domains allowed to access Google Workspace.
11 | **[`AppAutoUpdate`](#appautoupdate)** | Enable or disable automatic application update.
12 | **[`AppUpdateURL`](#appupdateurl)** | Change the URL for application update.
13 | **[`Authentication`](#authentication)** | Configure sites that support integrated authentication.
14 | **[`AutoLaunchProtocolsFromOrigins`](#autolaunchprotocolsfromorigins)** | Define a list of external protocols that can be used from listed origins without prompting the user.
15 | **[`BackgroundAppUpdate`](#backgroundappupdate)** | Enable or disable the background updater (Windows only).
16 | **[`BlockAboutAddons`](#blockaboutaddons)** | Block access to the Add-ons Manager (about:addons).
17 | **[`BlockAboutConfig`](#blockaboutconfig)** | Block access to about:config.
18 | **[`BlockAboutProfiles`](#blockaboutprofiles)** | Block access to About Profiles (about:profiles).
19 | **[`BlockAboutSupport`](#blockaboutsupport)** | Block access to Troubleshooting Information (about:support).
20 | **[`Bookmarks`](#bookmarks)** | Add bookmarks in either the bookmarks toolbar or menu.
21 | **[`CaptivePortal`](#captiveportal)** | Enable or disable the detection of captive portals.
22 | **[`Certificates`](#certificates)** |
23 | **[`Certificates -> ImportEnterpriseRoots`](#certificates--importenterpriseroots)** | Trust certificates that have been added to the operating system certificate store by a user or administrator.
24 | **[`Certificates -> Install`](#certificates--install)** | Install certificates into the Firefox certificate store.
25 | **[`Cookies`](#cookies)** | Configure cookie preferences.
26 | **[`DefaultDownloadDirectory`](#defaultdownloaddirectory)** | Set the default download directory.
27 | **[`DisableAppUpdate`](#disableappupdate)** | Turn off application updates.
28 | **[`DisableBuiltinPDFViewer`](#disablebuiltinpdfviewer)** | Disable the built in PDF viewer.
29 | **[`DisabledCiphers`](#disabledciphers)** | Disable ciphers.
30 | **[`DisableDefaultBrowserAgent`](#disabledefaultbrowseragent)** | Prevent the default browser agent from taking any actions (Windows only).
31 | **[`DisableDeveloperTools`](#disabledevelopertools)** | Remove access to all developer tools.
32 | **[`DisableFeedbackCommands`](#disablefeedbackcommands)** | Disable the menus for reporting sites.
33 | **[`DisableFirefoxAccounts`](#disablefirefoxaccounts)** | Disable Firefox Accounts integration (Sync).
34 | **[`DisableFirefoxScreenshots`](#disablefirefoxscreenshots)** | Remove access to Firefox Screenshots.
35 | **[`DisableFirefoxStudies`](#disablefirefoxstudies)** | Disable Firefox studies (Shield).
36 | **[`DisableForgetButton`](#disableforgetbutton)** | Disable the "Forget" button.
37 | **[`DisableFormHistory`](#disableformhistory)** | Turn off saving information on web forms and the search bar.
38 | **[`DisableMasterPasswordCreation`](#disablemasterpasswordcreation)** | Remove the master password functionality.
39 | **[`DisablePasswordReveal`](#disablepasswordreveal)** | Do not allow passwords to be revealed in saved logins.
40 | **[`DisablePocket`](#disablepocket)** | Remove Pocket in the Firefox UI.
41 | **[`DisablePrivateBrowsing`](#disableprivatebrowsing)** | Remove access to private browsing.
42 | **[`DisableProfileImport`](#disableprofileimport)** | Disables the "Import data from another browser" option in the bookmarks window.
43 | **[`DisableProfileRefresh`](#disableprofilerefresh)** | Disable the Refresh Firefox button on about:support and support.mozilla.org
44 | **[`DisableSafeMode`](#disablesafemode)** | Disable safe mode within the browser.
45 | **[`DisableSecurityBypass`](#disablesecuritybypass)** | Prevent the user from bypassing security in certain cases.
46 | **[`DisableSetDesktopBackground`](#disablesetdesktopbackground)** | Remove the "Set As Desktop Background..." menuitem when right clicking on an image.
47 | **[`DisableSystemAddonUpdate`](#disablesystemaddonupdate)** | Prevent system add-ons from being installed or updated.
48 | **[`DisableTelemetry`](#disabletelemetry)** | DisableTelemetry
49 | **[`DisplayBookmarksToolbar`](#displaybookmarkstoolbar)** | Set the initial state of the bookmarks toolbar.
50 | **[`DisplayMenuBar`](#displaymenubar)** | Set the state of the menubar.
51 | **[`DisplayMenuBar (Deprecated)`](#displaymenubar-deprecated)** | Set the initial state of the menubar.
52 | **[`DNSOverHTTPS`](#dnsoverhttps)** | Configure DNS over HTTPS.
53 | **[`DontCheckDefaultBrowser`](#dontcheckdefaultbrowser)** | Don't check if Firefox is the default browser at startup.
54 | **[`DownloadDirectory`](#downloaddirectory)** | Set and lock the download directory.
55 | **[`EnableTrackingProtection`](#enabletrackingprotection)** | Configure tracking protection.
56 | **[`EncryptedMediaExtensions`](#encryptedmediaextensions)** | Enable or disable Encrypted Media Extensions and optionally lock it.
57 | **[`EnterprisePoliciesEnabled`](#enterprisepoliciesenabled)** | Enable policy support on macOS.
58 | **[`ExemptDomainFileTypePairsFromFileTypeDownloadWarnings`](#exemptdomainfiletypepairsfromfiletypedownloadwarnings)** | Disable warnings based on file extension for specific file types on domains.
59 | **[`Extensions`](#extensions)** | Control the installation, uninstallation and locking of extensions.
60 | **[`ExtensionSettings`](#extensionsettings)** | Manage all aspects of extensions.
61 | **[`ExtensionUpdate`](#extensionupdate)** | Control extension updates.
62 | **[`FirefoxHome`](#firefoxhome)** | Customize the Firefox Home page.
63 | **[`FlashPlugin (Deprecated)`](#flashplugin-deprecated)** | Configure the default Flash plugin policy as well as origins for which Flash is allowed.
64 | **[`Handlers`](#handlers)** | Configure default application handlers.
65 | **[`HardwareAcceleration`](#hardwareacceleration)** | Control hardware acceleration.
66 | **[`Homepage`](#homepage)** | Configure the default homepage and how Firefox starts.
67 | **[`InstallAddonsPermission`](#installaddonspermission)** | Configure the default extension install policy as well as origins for extension installs are allowed.
68 | **[`LegacyProfiles`](#legacyprofiles)** | Disable the feature enforcing a separate profile for each installation.
69 | **[`LegacySameSiteCookieBehaviorEnabled`](#legacysamesitecookiebehaviorenabled)** | Enable default legacy SameSite cookie behavior setting.
70 | **[`LegacySameSiteCookieBehaviorEnabledForDomainList`](#legacysamesitecookiebehaviorenabledfordomainlist)** | Revert to legacy SameSite behavior for cookies on specified sites.
71 | **[`LocalFileLinks`](#localfilelinks)** | Enable linking to local files by origin.
72 | **[`ManagedBookmarks`](#managedbookmarks)** | Configures a list of bookmarks managed by an administrator that cannot be changed by the user.
73 | **[`ManualAppUpdateOnly`](#manualappupdateonly)** | Allow manual updates only and do not notify the user about updates.
74 | **[`NetworkPrediction`](#networkprediction)** | Enable or disable network prediction (DNS prefetching).
75 | **[`NewTabPage`](#newtabpage)** | Enable or disable the New Tab page.
76 | **[`NoDefaultBookmarks`](#nodefaultbookmarks)** | Disable the creation of default bookmarks.
77 | **[`OfferToSaveLogins`](#offertosavelogins)** | Control whether or not Firefox offers to save passwords.
78 | **[`OfferToSaveLoginsDefault`](#offertosaveloginsdefault)** | Set the default value for whether or not Firefox offers to save passwords.
79 | **[`OverrideFirstRunPage`](#overridefirstrunpage)** | Override the first run page.
80 | **[`OverridePostUpdatePage`](#overridepostupdatepage)** | Override the upgrade page.
81 | **[`PasswordManagerEnabled`](#passwordmanagerenabled)** | Remove (some) access to the password manager.
82 | **[`PasswordManagerExceptions`](#passwordmanagerexceptions)** | Prevent Firefox from saving passwords for specific sites.
83 | **[`PDFjs`](#pdfjs)** | Disable or configure PDF.js, the built-in PDF viewer.
84 | **[`Permissions`](#permissions)** | Set permissions associated with camera, microphone, location, and notifications.
85 | **[`PictureInPicture`](#pictureinpicture)** | Enable or disable Picture-in-Picture.
86 | **[`PopupBlocking`](#popupblocking)** | Configure the default pop-up window policy as well as origins for which pop-up windows are allowed.
87 | **[`Preferences`](#preferences)** | Set and lock preferences.
88 | **[`Preferences (Deprecated)`](#preferences-deprecated)** | Set and lock some preferences.
89 | **[`PrimaryPassword`](#primarypassword)** | Require or prevent using a primary (formerly master) password.
90 | **[`PromptForDownloadLocation`](#promptfordownloadlocation)** | Ask where to save each file before downloading.
91 | **[`Proxy`](#proxy)** | Configure proxy settings.
92 | **[`RequestedLocales`](#requestedlocales)** | Set the the list of requested locales for the application in order of preference.
93 | **[`SanitizeOnShutdown` (All)](#sanitizeonshutdown-all)** | Clear all data on shutdown.
94 | **[`SanitizeOnShutdown` (Selective)](#sanitizeonshutdown-selective)** | Clear data on shutdown.
95 | **[`SearchBar`](#searchbar)** | Set whether or not search bar is displayed.
96 | **[`SearchEngines`](#searchengines-this-policy-is-only-available-on-the-esr)** |
97 | **[`SearchEngines -> Add`](#searchengines--add)** | Add new search engines.
98 | **[`SearchEngines -> Default`](#searchengines--default)** | Set the default search engine.
99 | **[`SearchEngines -> PreventInstalls`](#searchengines--preventinstalls)** | Prevent installing search engines from webpages.
100 | **[`SearchEngines -> Remove`](#searchengines--remove)** | Hide built-in search engines.
101 | **[`SearchSuggestEnabled`](#searchsuggestenabled)** | Enable search suggestions.
102 | **[`SecurityDevices`](#securitydevices)** | Install PKCS #11 modules.
103 | **[`ShowHomeButton`](#showhomebutton)** | Show the home button on the toolbar.
104 | **[`SSLVersionMax`](#sslversionmax)** | Set and lock the maximum version of TLS.
105 | **[`SSLVersionMin`](#sslversionmin)** | Set and lock the minimum version of TLS.
106 | **[`SupportMenu`](#supportmenu)** | Add a menuitem to the help menu for specifying support information.
107 | **[`UserMessaging`](#usermessaging)** | Don't show certain messages to the user.
108 | **[`UseSystemPrintDialog`](#usesystemprintdialog)** | Print using the system print dialog instead of print preview.
109 | **[`WebsiteFilter`](#websitefilter)** | Block websites from being visited.
110 | **[`WindowsSSO`](#windowssso)** | Allow Windows single sign-on for Microsoft, work, and school accounts.
111
112 ### 3rdparty
113
114 Allow WebExtensions to configure policy. For more information, see [Adding policy support to your extension](https://extensionworkshop.com/documentation/enterprise/adding-policy-support-to-your-extension/).
115
116 For GPO and Intune, the extension developer should provide an ADMX file.
117
118 **Compatibility:** Firefox 68\
119 **CCK2 Equivalent:** N/A\
120 **Preferences Affected:** N/A
121
122 #### macOS
123 ```
124 <dict>
125 <key>3rdparty</key>
126 <dict>
127 <key>Extensions</key>
128 <dict>
129 <key>uBlock0@raymondhill.net</key>
130 <dict>
131 <key>adminSettings</key>
132 <dict>
133 <key>selectedFilterLists</key>
134 <array>
135 <string>ublock-privacy</string>
136 <string>ublock-badware</string>
137 <string>ublock-filters</string>
138 <string>user-filters</string>
139 </array>
140 </dict>
141 </dict>
142 </dict>
143 </dict>
144 </dict>
145 ```
146 #### policies.json
147 ```
148 {
149 "policies": {
150 "3rdparty": {
151 "Extensions": {
152 "uBlock0@raymondhill.net": {
153 "adminSettings": {
154 "selectedFilterLists": [
155 "ublock-privacy",
156 "ublock-badware",
157 "ublock-filters",
158 "user-filters"
159 ]
160 }
161 }
162 }
163 }
164 }
165 }
166 ```
167
168 ### AllowedDomainsForApps
169
170 Define domains allowed to access Google Workspace.
171
172 This policy is based on the [Chrome policy](https://chromeenterprise.google/policies/#AllowedDomainsForApps) of the same name.
173
174 If this policy is enabled, users can only access Google Workspace using accounts from the specified domains. If you want to allow Gmail, you can add ```consumer_accounts``` to the list.
175
176 **Compatibility:** Firefox 89, Firefox ESR 78.11\
177 **CCK2 Equivalent:** N/A\
178 **Preferences Affected:** N/A
179
180 #### Windows (GPO)
181 ```
182 Software\Policies\Mozilla\Firefox\AllowedDomainsForApps = "managedfirefox.com,example.com"
183 ```
184 #### Windows (Intune)
185 OMA-URI:
186 ```
187 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AllowedDomainsForApps
188 ```
189 Value (string):
190 ```
191 <enabled/>
192 <data id="AllowedDomainsForApps" value="managedfirefox.com,example.com"/>
193 ```
194 #### macOS
195 ```
196 <dict>
197 <key>AllowedDomainsForApps</key>
198 <string>managedfirefox.com,example.com</string>
199 </dict>
200 ```
201 #### policies.json
202 ```
203 {
204 "policies": {
205 "AllowedDomainsForApps": "managedfirefox.com,example.com"
206 }
207 }
208 ```
209 ### AppAutoUpdate
210
211 Enable or disable **automatic** application update.
212
213 If set to true, application updates are installed without user approval within Firefox. The operating system might still require approval.
214
215 If set to false, application updates are downloaded but the user can choose when to install the update.
216
217 If you have disabled updates via `DisableAppUpdate`, this policy has no effect.
218
219 **Compatibility:** Firefox 75, Firefox ESR 68.7\
220 **CCK2 Equivalent:** N/A\
221 **Preferences Affected:** `app.update.auto`
222
223 #### Windows (GPO)
224 ```
225 Software\Policies\Mozilla\Firefox\AppAutoUpdate = 0x1 | 0x0
226 ```
227 #### Windows (Intune)
228 OMA-URI:
229 ```
230 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AppAutoUpdate
231 ```
232 Value (string):
233 ```
234 <enabled/> or <disabled/>
235 ```
236 #### macOS
237 ```
238 <dict>
239 <key>AppAutoUpdate</key>
240 <true/> | <false/>
241 </dict>
242 ```
243 #### policies.json
244 ```
245 {
246 "policies": {
247 "AppAutoUpdate": true | false
248 }
249 }
250 ```
251 ### AppUpdateURL
252
253 Change the URL for application update if you are providing Firefox updates from a custom update server.
254
255 **Compatibility:** Firefox 62, Firefox ESR 60.2\
256 **CCK2 Equivalent:** N/A\
257 **Preferences Affected:** `app.update.url`
258
259 #### Windows (GPO)
260 ```
261 Software\Policies\Mozilla\Firefox\AppUpdateURL = "https://yoursite.com"
262 ```
263 #### Windows (Intune)
264 OMA-URI:
265 ```
266 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AppUpdateURL
267 ```
268 Value (string):
269 ```
270 <enabled/>
271 <data id="AppUpdateURL" value="https://yoursite.com"/>
272 ```
273 #### macOS
274 ```
275 <dict>
276 <key>AppUpdateURL</key>
277 <string>https://yoursite.com</string>
278 </dict>
279 ```
280 #### policies.json
281 ```
282 {
283 "policies": {
284 "AppUpdateURL": "https://yoursite.com"
285 }
286 }
287 ```
288 ### Authentication
289
290 Configure sites that support integrated authentication.
291
292 See [Integrated authentication](https://htmlpreview.github.io/?https://github.com/mdn/archived-content/blob/main/files/en-us/mozilla/integrated_authentication/raw.html) for more information.
293
294 `PrivateBrowsing` enables integrated authentication in private browsing.
295
296 **Compatibility:** Firefox 60, Firefox ESR 60 (AllowNonFQDN added in 62/60.2, AllowProxies added in 70/68.2, Locked added in 71/68.3, PrivateBrowsing added in 77/68.9)\
297 **CCK2 Equivalent:** N/A\
298 **Preferences Affected:** `network.negotiate-auth.trusted-uris`,`network.negotiate-auth.delegation-uris`,`network.automatic-ntlm-auth.trusted-uris`,`network.automatic-ntlm-auth.allow-non-fqdn`,`network.negotiate-auth.allow-non-fqdn`,`network.automatic-ntlm-auth.allow-proxies`,`network.negotiate-auth.allow-proxies`,`network.auth.private-browsing-sso`
299
300 #### Windows (GPO)
301 ```
302 Software\Policies\Mozilla\Firefox\Authentication\SPNEGO\1 = "mydomain.com"
303 Software\Policies\Mozilla\Firefox\Authentication\SPNEGO\2 = "https://myotherdomain.com"
304 Software\Policies\Mozilla\Firefox\Authentication\Delegated\1 = "mydomain.com"
305 Software\Policies\Mozilla\Firefox\Authentication\Delegated\2 = "https://myotherdomain.com"
306 Software\Policies\Mozilla\Firefox\Authentication\NTLM\1 = "mydomain.com"
307 Software\Policies\Mozilla\Firefox\Authentication\NTLM\2 = "https://myotherdomain.com"
308 Software\Policies\Mozilla\Firefox\Authentication\AllowNonFQDN\SPNEGO = 0x1 | 0x0
309 Software\Policies\Mozilla\Firefox\Authentication\AllowNonFQDN\NTLM = 0x1 | 0x0
310 Software\Policies\Mozilla\Firefox\Authentication\AllowProxies\SPNEGO = 0x1 | 0x0
311 Software\Policies\Mozilla\Firefox\Authentication\AllowProxies\NTLM = 0x1 | 0x0
312 Software\Policies\Mozilla\Firefox\Authentication\Locked = 0x1 | 0x0
313 Software\Policies\Mozilla\Firefox\Authentication\PrivateBrowsing = 0x1 | 0x0
314 ```
315 #### Windows (Intune)
316 OMA-URI:
317 ```
318 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_SPNEGO
319 ```
320 Value (string):
321 ```
322 <enabled/>
323 <data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
324 ```
325 OMA-URI:
326 ```
327 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_Delegated
328 ```
329 Value (string):
330 ```
331 <enabled/>
332 <data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
333 ```
334 OMA-URI:
335 ```
336 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_NTLM
337 ```
338 Value (string):
339 ```
340 <enabled/>
341 <data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
342 ```
343 OMA-URI:
344 ```
345 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_AllowNonFQDN
346 ```
347 Value (string):
348 ```
349 <enabled/>
350 <data id="Authentication_AllowNonFQDN_NTLM" value="true | false"/>
351 <data id="Authentication_AllowNonFQDN_SPNEGO" value="true | false"/>
352 ```
353 OMA-URI:
354 ```
355 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_Locked
356 ```
357 Value (string):
358 ```
359 <enabled/> or <disabled/>
360 ```
361 OMA-URI:
362 ```
363 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_PrivateBrowsing
364 ```
365 Value (string):
366 ```
367 <enabled/> or <disabled/>
368 ```
369 #### macOS
370 ```
371 <dict>
372 <key>Authentication</key>
373 <dict>
374 <key>SPNEGO</key>
375 <array>
376 <string>mydomain.com</string>
377 <string>https://myotherdomain.com</string>
378 </array>
379 <key>Delegated</key>
380 <array>
381 <string>mydomain.com</string>
382 <string>https://myotherdomain.com</string>
383 </array>
384 <key>NTLM</key>
385 <array>
386 <string>mydomain.com</string>
387 <string>https://myotherdomain.com</string>
388 </array>
389 <key>AllowNonFQDN</key>
390 <dict>
391 <key>SPNEGO</key>
392 <true/> | <false/>
393 <key>NTLM</key>
394 <true/> | <false/>
395 </dict>
396 <key>AllowProxies</key>
397 <dict>
398 <key>SPNEGO</key>
399 <true/> | <false/>
400 <key>NTLM</key>
401 <true/> | <false/>
402 </dict>
403 <key>Locked</key>
404 <true/> | <false/>
405 <key>PrivateBrowsing</key>
406 <true/> | <false/>
407 </dict>
408 </dict>
409 ```
410 #### policies.json
411 ```
412 {
413 "policies": {
414 "Authentication": {
415 "SPNEGO": ["mydomain.com", "https://myotherdomain.com"],
416 "Delegated": ["mydomain.com", "https://myotherdomain.com"],
417 "NTLM": ["mydomain.com", "https://myotherdomain.com"],
418 "AllowNonFQDN": {
419 "SPNEGO": true | false,
420 "NTLM": true | false
421 },
422 "AllowProxies": {
423 "SPNEGO": true | false,
424 "NTLM": true | false
425 },
426 "Locked": true | false,
427 "PrivateBrowsing": true | false
428 }
429 }
430 }
431 ```
432 ### AutoLaunchProtocolsFromOrigins
433 Define a list of external protocols that can be used from listed origins without prompting the user. The origin is the scheme plus the hostname.
434
435 The syntax of this policy is exactly the same as the [Chrome AutoLaunchProtocolsFromOrigins policy](https://cloud.google.com/docs/chrome-enterprise/policies/?policy=AutoLaunchProtocolsFromOrigins) except that you can only use valid origins (not just hostnames). This also means that you cannot specify an asterisk for all origins.
436
437 The schema is:
438 ```
439 {
440 "items": {
441 "properties": {
442 "allowed_origins": {
443 "items": {
444 "type": "string"
445 },
446 "type": "array"
447 },
448 "protocol": {
449 "type": "string"
450 }
451 },
452 "required": [
453 "protocol",
454 "allowed_origins"
455 ],
456 "type": "object"
457 },
458 "type": "array"
459 }
460 ```
461 **Compatibility:** Firefox 90, Firefox ESR 78.12\
462 **CCK2 Equivalent:** N/A\
463 **Preferences Affected:** N/A
464
465 #### Windows (GPO)
466 Software\Policies\Mozilla\Firefox\AutoLaunchProtocolsFromOrigins (REG_MULTI_SZ) =
467 ```
468 [
469 {
470 "protocol": "zoommtg",
471 "allowed_origins": [
472 "https://somesite.zoom.us"
473 ]
474 }
475 ]
476 ```
477 #### Windows (Intune)
478 OMA-URI:
479 ```
480 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AutoLaunchProtocolsFromOrigins
481 ```
482 Value (string):
483 ```
484 <enabled/>
485 <data id="JSON" value='
486 [
487 {
488 "protocol": "zoommtg",
489 "allowed_origins": [
490 "https://somesite.zoom.us"
491 ]
492 }
493 ]'/>
494 ```
495 #### macOS
496 ```
497 <dict>
498 <key>AutoLaunchProtocolsFromOrigins</key>
499 <array>
500 <dict>
501 <key>protocol</key>
502 <string>zoommtg</string>
503 <key>allowed_origins</key>
504 <array>
505 <string>https://somesite.zoom.us</string>
506 </array>
507 </dict>
508 </array>
509 </dict>
510 ```
511 #### policies.json
512 ```
513 {
514 "policies": {
515 "AutoLaunchProtocolsFromOrigins": [{
516 "protocol": "zoommtg",
517 "allowed_origins": [
518 "https://somesite.zoom.us"
519 ]
520 }]
521 }
522 }
523 ```
524 ### BackgroundAppUpdate
525
526 Enable or disable **automatic** application update **in the background**, when the application is not running.
527
528 If set to true, application updates may be installed (without user approval) in the background, even when the application is not running. The operating system might still require approval.
529
530 If set to false, the application will not try to install updates when the application is not running.
531
532 If you have disabled updates via `DisableAppUpdate` or disabled automatic updates via `AppAutoUpdate`, this policy has no effect.
533
534 **Compatibility:** Firefox 90 (Windows only)\
535 **CCK2 Equivalent:** N/A\
536 **Preferences Affected:** `app.update.background.enabled`
537
538 #### Windows (GPO)
539 ```
540 Software\Policies\Mozilla\Firefox\BackgroundAppUpdate = 0x1 | 0x0
541 ```
542 #### Windows (Intune)
543 OMA-URI:
544 ```
545 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BackgroundAppUpdate
546 ```
547 Value (string):
548 ```
549 <enabled/> or <disabled/>
550 ```
551 #### macOS
552 ```
553 <dict>
554 <key>BackgroundAppUpdate</key>
555 <true/> | <false/>
556 </dict>
557 ```
558 #### policies.json
559 ```
560 {
561 "policies": {
562 "BackgroundAppUpdate": true | false
563 }
564 }
565 ```
566 ### BlockAboutAddons
567
568 Block access to the Add-ons Manager (about:addons).
569
570 **Compatibility:** Firefox 60, Firefox ESR 60\
571 **CCK2 Equivalent:** `disableAddonsManager`\
572 **Preferences Affected:** N/A
573
574 #### Windows (GPO)
575 ```
576 Software\Policies\Mozilla\Firefox\BlockAboutAddons = 0x1 | 0x0
577 ```
578 #### Windows (Intune)
579 OMA-URI:
580 ```
581 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutAddons
582 ```
583 Value (string):
584 ```
585 <enabled/> or <disabled/>
586 ```
587 #### macOS
588 ```
589 <dict>
590 <key>BlockAboutAddons</key>
591 <true/> | <false/>
592 </dict>
593 ```
594 #### policies.json
595 ```
596 {
597 "policies": {
598 "BlockAboutAddons": true | false
599 }
600 }
601 ```
602 ### BlockAboutConfig
603
604 Block access to about:config.
605
606 **Compatibility:** Firefox 60, Firefox ESR 60\
607 **CCK2 Equivalent:** `disableAboutConfig`\
608 **Preferences Affected:** N/A
609
610 #### Windows (GPO)
611 ```
612 Software\Policies\Mozilla\Firefox\BlockAboutConfig = 0x1 | 0x0
613 ```
614 #### Windows (Intune)
615 OMA-URI:
616 ```
617 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutConfig
618 ```
619 Value (string):
620 ```
621 <enabled/> or <disabled/>
622 ```
623 #### macOS
624 ```
625 <dict>
626 <key>BlockAboutConfig</key>
627 <true/> | <false/>
628 </dict>
629 ```
630 #### policies.json
631 ```
632 {
633 "policies": {
634 "BlockAboutConfig": true | false
635 }
636 }
637 ```
638 ### BlockAboutProfiles
639
640 Block access to About Profiles (about:profiles).
641
642 **Compatibility:** Firefox 60, Firefox ESR 60\
643 **CCK2 Equivalent:** `disableAboutProfiles`\
644 **Preferences Affected:** N/A
645
646 #### Windows (GPO)
647 ```
648 Software\Policies\Mozilla\Firefox\BlockAboutProfiles = 0x1 | 0x0
649 ```
650 #### Windows (Intune)
651 OMA-URI:
652 ```
653 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutProfiles
654 ```
655 Value (string):
656 ```
657 <enabled/> or <disabled/>
658 ```
659 #### macOS
660 ```
661 <dict>
662 <key>BlockAboutProfiles</key>
663 <true/> | <false/>
664 </dict>
665 ```
666 #### policies.json
667 ```
668 {
669 "policies": {
670 "BlockAboutProfiles": true | false
671 }
672 }
673 ```
674 ### BlockAboutSupport
675
676 Block access to Troubleshooting Information (about:support).
677
678 **Compatibility:** Firefox 60, Firefox ESR 60\
679 **CCK2 Equivalent:** `disableAboutSupport`\
680 **Preferences Affected:** N/A
681
682 #### Windows (GPO)
683 ```
684 Software\Policies\Mozilla\Firefox\BlockAboutSupport = 0x1 | 0x0
685 ```
686 #### Windows (Intune)
687 OMA-URI:
688 ```
689 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutSupport
690 ```
691 Value (string):
692 ```
693 <enabled/> or <disabled/>
694 ```
695 #### macOS
696 ```
697 <dict>
698 <key>BlockAboutSupport</key>
699 <true/> | <false/>
700 </dict>
701 ```
702 #### policies.json
703 ```
704 {
705 "policies": {
706 "BlockAboutSupport": true | false
707 }
708 }
709 ```
710 ### Bookmarks
711
712 Note: [`ManagedBookmarks`](#managedbookmarks) is the new recommended way to add bookmarks. This policy will continue to be supported.
713
714 Add bookmarks in either the bookmarks toolbar or menu. Only `Title` and `URL` are required. If `Placement` is not specified, the bookmark will be placed on the toolbar. If `Folder` is specified, it is automatically created and bookmarks with the same folder name are grouped together.
715
716 If you want to clear all bookmarks set with this policy, you can set the value to an empty array (```[]```). This can be on Windows via the new Bookmarks (JSON) policy available with GPO and Intune.
717
718 **Compatibility:** Firefox 60, Firefox ESR 60\
719 **CCK2 Equivalent:** `bookmarks.toolbar`,`bookmarks.menu`\
720 **Preferences Affected:** N/A
721
722 #### Windows (GPO)
723 ```
724 Software\Policies\Mozilla\Firefox\Bookmarks\1\Title = "Example"
725 Software\Policies\Mozilla\Firefox\Bookmarks\1\URL = "https://example.com"
726 Software\Policies\Mozilla\Firefox\Bookmarks\1\Favicon = "https://example.com/favicon.ico"
727 Software\Policies\Mozilla\Firefox\Bookmarks\1\Placement = "toolbar" | "menu"
728 Software\Policies\Mozilla\Firefox\Bookmarks\1\Folder = "FolderName"
729
730 Software\Policies\Mozilla\Firefox\Bookmarks (REG_MULTI_SZ) =
731 ```
732 []
733 ```
734
735 ```
736 #### Windows (Intune)
737 OMA-URI:
738 ```
739 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Bookmarks/Bookmark01
740 ```
741 Value (string):
742 ```
743 <enabled/>
744 <data id="BookmarkTitle" value="Example"/>
745 <data id="BookmarkURL" value="https://example.com"/>
746 <data id="BookmarkFavicon" value="https://example.com/favicon.ico"/>
747 <data id="BookmarkPlacement" value="toolbar | menu"/>
748 <data id="BookmarkFolder" value="FolderName"/>
749 ```
750 OMA-URI:
751 ```
752 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Bookmarks
753 ```
754 Value (string):
755 ```
756 <enabled/>
757 <data id="JSON" value='[]'/>
758 ```
759 #### macOS
760 ```
761 <dict>
762 <key>Bookmarks</key>
763 <array>
764 <dict>
765 <key>Title</key>
766 <string>Example</string>
767 <key>URL</key>
768 <string>https://example.com</string>
769 <key>Favicon</key>
770 <string>https://example.com/favicon.ico</string>
771 <key>Placement</key>
772 <string>toolbar | menu</string>
773 <key>Folder</key>
774 <string>FolderName</string>
775 </dict>
776 </array>
777 </dict>
778 ```
779 #### policies.json
780 ```
781 {
782 "policies": {
783 "Bookmarks": [
784 {
785 "Title": "Example",
786 "URL": "https://example.com",
787 "Favicon": "https://example.com/favicon.ico",
788 "Placement": "toolbar" | "menu",
789 "Folder": "FolderName"
790 }
791 ]
792 }
793 }
794 ```
795 ### CaptivePortal
796 Enable or disable the detection of captive portals.
797
798 **Compatibility:** Firefox 67, Firefox ESR 60.7\
799 **CCK2 Equivalent:** N/A\
800 **Preferences Affected:** `network.captive-portal-service.enabled`
801
802 #### Windows (GPO)
803 ```
804 Software\Policies\Mozilla\Firefox\CaptivePortal = 0x1 | 0x0
805 ```
806 #### Windows (Intune)
807 OMA-URI:
808 ```
809 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/CaptivePortal
810 ```
811 Value (string):
812 ```
813 <enabled/> or <disabled/>
814 ```
815 #### macOS
816 ```
817 <dict>
818 <key>CaptivePortal</key>
819 <true/> | <false/>
820 </dict>
821 ```
822 #### policies.json
823 ```
824 {
825 "policies": {
826 "CaptivePortal": true | false
827 }
828 }
829 ```
830 ### Certificates
831
832 ### Certificates | ImportEnterpriseRoots
833
834 Trust certificates that have been added to the operating system certificate store by a user or administrator.
835
836 Note: This policy only works on Windows and macOS. For Linux discussion, see [bug 1600509](https://bugzilla.mozilla.org/show_bug.cgi?id=1600509).
837
838 See https://support.mozilla.org/kb/setting-certificate-authorities-firefox for more detail.
839
840 **Compatibility:** Firefox 60, Firefox ESR 60 (macOS support in Firefox 63, Firefox ESR 68)\
841 **CCK2 Equivalent:** N/A\
842 **Preferences Affected:** `security.enterprise_roots.enabled`
843
844 #### Windows (GPO)
845 ```
846 Software\Policies\Mozilla\Firefox\Certificates\ImportEnterpriseRoots = 0x1 | 0x0
847 ```
848 #### Windows (Intune)
849 OMA-URI:
850 ```
851 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Certificates/Certificates_ImportEnterpriseRoots
852 ```
853 Value (string):
854 ```
855 <enabled/> or <disabled/>
856 ```
857 #### macOS
858 ```
859 <dict>
860 <key>Certificates</key>
861 <dict>
862 <key>ImportEnterpriseRoots</key>
863 <true/> | <false/>
864 </dict>
865 </dict>
866 ```
867 #### policies.json
868 ```
869 {
870 "policies": {
871 "Certificates": {
872 "ImportEnterpriseRoots": true | false
873 }
874 }
875 }
876 ```
877 ### Certificates | Install
878
879 Install certificates into the Firefox certificate store. If only a filename is specified, Firefox searches for the file in the following locations:
880
881 - Windows
882 - %USERPROFILE%\AppData\Local\Mozilla\Certificates
883 - %USERPROFILE%\AppData\Roaming\Mozilla\Certificates
884 - macOS
885 - /Library/Application Support/Mozilla/Certificates
886 - ~/Library/Application Support/Mozilla/Certificates
887 - Linux
888 - /usr/lib/mozilla/certificates
889 - /usr/lib64/mozilla/certificates
890 - ~/.mozilla/certificates
891
892 Starting with Firefox 65, Firefox 60.5 ESR, a fully qualified path can be used, including UNC paths. You should use the native path style for your operating system. We do not support using %USERPROFILE% or other environment variables on Windows.
893
894 If you are specifying the path in the policies.json file on Windows, you need to escape your backslashes (`\\`) which means that for UNC paths, you need to escape both (`\\\\`). If you use group policy, you only need one backslash.
895
896 Certificates are installed using the trust string `CT,CT,`.
897
898 Binary (DER) and ASCII (PEM) certificates are both supported.
899
900 **Compatibility:** Firefox 64, Firefox ESR 64\
901 **CCK2 Equivalent:** `certs.ca`\
902 **Preferences Affected:** N/A
903
904 #### Windows (GPO)
905 ```
906 Software\Policies\Mozilla\Firefox\Certificates\Install\1 = "cert1.der"
907 Software\Policies\Mozilla\Firefox\Certificates\Install\2 = "C:\Users\username\cert2.pem"
908 ```
909 #### Windows (Intune)
910 OMA-URI:
911 ```
912 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Certificates/Certificates_Install
913 ```
914 Value (string):
915 ```
916 <enabled/>
917 <data id="Certificates_Install" value="1&#xF000;cert1.der&#xF000;2&#xF000;C:\Users\username\cert2.pem"/>
918 ```
919 #### macOS
920 ```
921 <dict>
922 <key>Certificates</key>
923 <dict>
924 <key>Install</key>
925 <array>
926 <string>cert1.der</string>
927 <string>/Users/username/cert2.pem</string>
928 </array>
929 </dict>
930 </dict>
931 ```
932 #### policies.json
933 ```
934 {
935 "policies": {
936 "Certificates": {
937 "Install": ["cert1.der", "/home/username/cert2.pem"]
938 }
939 }
940 }
941 ```
942 ### Cookies
943 Configure cookie preferences.
944
945 `Allow` is a list of origins (not domains) where cookies are always allowed. You must include http or https.
946
947 `AllowSession` is a list of origins (not domains) where cookies are only allowed for the current session. You must include http or https.
948
949 `Block` is a list of origins (not domains) where cookies are always blocked. You must include http or https.
950
951 `Behavior` sets the default behavior for cookies based on the values below.
952
953 `BehaviorPrivateBrowsing` sets the default behavior for cookies in private browsing based on the values below.
954
955 | Value | Description
956 | --- | ---
957 | accept | Accept all cookies
958 | reject-foreign | Reject third party cookies
959 | reject | Reject all cookies
960 | limit-foreign | Reject third party cookies for sites you haven't visited
961 | reject-tracker | Reject cookies for known trackers (default)
962 | reject-tracker-and-partition-foreign | Reject cookies for known trackers and partition third-party cookies (Total Cookie Protection) (default for private browsing)
963
964 `Default` (Deprecated) determines whether cookies are accepted at all.
965
966 `AcceptThirdParty` (Deprecated) determines how third-party cookies are handled.
967
968 `ExpireAtSessionEnd` determines when cookies expire.
969
970 `RejectTracker` (Deprecated) only rejects cookies for trackers.
971
972 `Locked` prevents the user from changing cookie preferences.
973
974 **Compatibility:** Firefox 60, Firefox ESR 60 (RejectTracker added in Firefox 63, AllowSession added in Firefox 79/78.1, Behavior added in Firefox 95/91.4)\
975 **CCK2 Equivalent:** N/A\
976 **Preferences Affected:** `network.cookie.cookieBehavior`, `network.cookie.cookieBehavior.pbmode`, `network.cookie.lifetimePolicy`
977
978 #### Windows (GPO)
979 ```
980 Software\Policies\Mozilla\Firefox\Cookies\Allow\1 = "https://example.com"
981 Software\Policies\Mozilla\Firefox\Cookies\AllowSession\1 = "https://example.edu"
982 Software\Policies\Mozilla\Firefox\Cookies\Block\1 = "https://example.org"
983 Software\Policies\Mozilla\Firefox\Cookies\Default = 0x1 | 0x0
984 Software\Policies\Mozilla\Firefox\Cookies\AcceptThirdParty = "always" | "never" | "from-visited"
985 Software\Policies\Mozilla\Firefox\Cookies\ExpireAtSessionEnd = 0x1 | 0x0
986 Software\Policies\Mozilla\Firefox\Cookies\RejectTracker = 0x1 | 0x0
987 Software\Policies\Mozilla\Firefox\Cookies\Behavior = "accept" | "reject-foreign" | "reject" | "limit-foreign" | "reject-tracker" | "reject-tracker-and-partition-foreign"
988 Software\Policies\Mozilla\Firefox\Cookies\BehaviorPrivateBrowsing = "accept" | "reject-foreign" | "reject" | "limit-foreign" | "reject-tracker" | "reject-tracker-and-partition-foreign"
989 Software\Policies\Mozilla\Firefox\Cookies\Locked = 0x1 | 0x0
990 ```
991 #### Windows (Intune)
992 OMA-URI:
993 ```
994 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Allow
995 ```
996 Value (string):
997 ```
998 <enabled/>
999 <data id="Permissions" value="1&#xF000;https://example.com"/>
1000 ```
1001 OMA-URI:
1002 ```
1003 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_AllowSession
1004 ```
1005 Value (string):
1006 ```
1007 <enabled/>
1008 <data id="Permissions" value="1&#xF000;https://example.edu"/>
1009 ```
1010 OMA-URI:
1011 ```
1012 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Block
1013 ```
1014 Value (string):
1015 ```
1016 <enabled/>
1017 <data id="Permissions" value="1&#xF000;https://example.org"/>
1018 ```
1019 OMA-URI:
1020 ```
1021 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Default
1022 ```
1023 Value (string):
1024 ```
1025 <enabled/> or <disabled/>
1026 ```
1027 OMA-URI:
1028 ```
1029 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_AcceptThirdParty
1030 ```
1031 Value (string):
1032 ```
1033 <enabled/>
1034 <data id="Cookies_AcceptThirdParty" value="always | never | from-visited"/>
1035 ```
1036 OMA-URI:
1037 ```
1038 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_ExpireAtSessionEnd
1039 ```
1040 Value (string):
1041 ```
1042 <enabled/> or <disabled/>
1043 ```
1044 OMA-URI:
1045 ```
1046 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_RejectTracker
1047 ```
1048 Value (string):
1049 ```
1050 <enabled/> or <disabled/>
1051 ```
1052 OMA-URI:
1053 ```
1054 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Locked
1055 ```
1056 Value (string):
1057 ```
1058 <enabled/> or <disabled/>
1059 ```
1060 OMA-URI:
1061 ```
1062 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Behavior
1063 ```
1064 Value (string):
1065 ```
1066 <enabled/>
1067 <data id="Cookies_Behavior" value="accept | reject-foreign | reject | limit-foreign | reject-tracker | reject-tracker-and-partition-foreign"/>
1068 ```
1069 OMA-URI:
1070 ```
1071 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_BehaviorPrivateBrowsing
1072 ```
1073 Value (string):
1074 ```
1075 <enabled/>
1076 <data id="Cookies_BehaviorPrivateBrowsing" value="accept | reject-foreign | reject | limit-foreign | reject-tracker | reject-tracker-and-partition-foreign"/>
1077 ```
1078 #### macOS
1079 ```
1080 <dict>
1081 <key>Cookies</key>
1082 <dict>
1083 <key>Allow</key>
1084 <array>
1085 <string>http://example.com</string>
1086 </array>
1087 <key>AllowSession</key>
1088 <array>
1089 <string>http://example.edu</string>
1090 </array>
1091 <key>Block</key>
1092 <array>
1093 <string>http://example.org</string>
1094 </array>
1095 <key>Default</key>
1096 <true/> | <false/>
1097 <key>AcceptThirdParty</key>
1098 <string>always | never | from-visited</string>
1099 <key>ExpireAtSessionEnd</key>
1100 <true/> | <false/>
1101 <key>RejectTracker</key>
1102 <true/> | <false/>
1103 <key>Locked</key>
1104 <true/> | <false/>
1105 <key>Behavior</key>
1106 <string>accept | reject-foreign | reject | limit-foreign | reject-tracker | reject-tracker-and-partition-foreign</string>
1107 <key>BehaviorPrivateBrowsing</key>
1108 <string>accept | reject-foreign | reject | limit-foreign | reject-tracker | reject-tracker-and-partition-foreign</string>
1109 </dict>
1110 </dict>
1111 ```
1112 #### policies.json
1113 ```
1114 {
1115 "policies": {
1116 "Cookies": {
1117 "Allow": ["http://example.org/"],
1118 "AllowSession": ["http://example.edu/"],
1119 "Block": ["http://example.edu/"],
1120 "Default": true | false,
1121 "AcceptThirdParty": "always" | "never" | "from-visited",
1122 "ExpireAtSessionEnd": true | false,
1123 "RejectTracker": true | false,
1124 "Locked": true | false,
1125 "Behavior": "accept" | "reject-foreign" | "reject" | "limit-foreign" | "reject-tracker" | "reject-tracker-and-partition-foreign",
1126 "BehaviorPrivateBrowsing": "accept" | "reject-foreign" | "reject" | "limit-foreign" | "reject-tracker" | "reject-tracker-and-partition-foreign",
1127 }
1128 }
1129 }
1130 ```
1131 ### DefaultDownloadDirectory
1132 Set the default download directory.
1133
1134 You can use ${home} for the native home directory.
1135
1136 **Compatibility:** Firefox 68, Firefox ESR 68\
1137 **CCK2 Equivalent:** N/A\
1138 **Preferences Affected:** `browser.download.dir`, `browser.download.folderList`
1139
1140 #### Windows (GPO)
1141 ```
1142 Software\Policies\Mozilla\Firefox\DefaultDownloadDirectory = "${home}\Downloads"
1143 ```
1144 #### Windows (Intune)
1145 OMA-URI:
1146 ```
1147 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DefaultDownloadDirectory
1148 ```
1149 Value (string):
1150 ```
1151 <enabled/>
1152 <data id="Preferences_String" value="${home}\Downloads"/>
1153 ```
1154 #### macOS
1155 ```
1156 <dict>
1157 <key>DefaultDownloadDirectory</key>
1158 <string>${home}/Downloads</string>
1159 </dict>
1160 ```
1161 #### policies.json (macOS and Linux)
1162 ```
1163 {
1164 "policies": {
1165 "DefaultDownloadDirectory": "${home}/Downloads"
1166 }
1167 ```
1168 #### policies.json (Windows)
1169 ```
1170 {
1171 "policies": {
1172 "DefaultDownloadDirectory": "${home}\\Downloads"
1173 }
1174 ```
1175 ### DisableAppUpdate
1176 Turn off application updates within Firefox.
1177
1178 **Compatibility:** Firefox 60, Firefox ESR 60\
1179 **CCK2 Equivalent:** `disableFirefoxUpdates`\
1180 **Preferences Affected:** N/A
1181
1182 #### Windows (GPO)
1183 ```
1184 Software\Policies\Mozilla\Firefox\DisableAppUpdate = 0x1 | 0x0
1185 ```
1186 #### Windows (Intune)
1187 OMA-URI:
1188 ```
1189 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableAppUpdate
1190 ```
1191 Value (string):
1192 ```
1193 <enabled/> or <disabled/>
1194 ```
1195 #### macOS
1196 ```
1197 <dict>
1198 <key>DisableAppUpdate</key>
1199 <true/> | <false/>
1200 </dict>
1201 ```
1202 #### policies.json
1203 ```
1204 {
1205 "policies": {
1206 "DisableAppUpdate": true | false
1207 }
1208 }
1209 ```
1210 ### DisableBuiltinPDFViewer
1211 Disable the built in PDF viewer. PDF files are downloaded and sent externally.
1212
1213 **Compatibility:** Firefox 60, Firefox ESR 60\
1214 **CCK2 Equivalent:** `disablePDFjs`\
1215 **Preferences Affected:** `pdfjs.disabled`
1216
1217 #### Windows (GPO)
1218 ```
1219 Software\Policies\Mozilla\Firefox\DisableBuiltinPDFViewer = 0x1 | 0x0
1220 ```
1221 #### Windows (Intune)
1222 OMA-URI:
1223 ```
1224 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableBuiltinPDFViewer
1225 ```
1226 Value (string):
1227 ```
1228 <enabled/> or <disabled/>
1229 ```
1230 #### macOS
1231 ```
1232 <dict>
1233 <key>DisableBuiltinPDFViewer</key>
1234 <true/> | <false/>
1235 </dict>
1236 ```
1237 #### policies.json
1238 ```
1239 {
1240 "policies": {
1241 "DisableBuiltinPDFViewer": true | false
1242 }
1243 }
1244 ```
1245 ### DisabledCiphers
1246 Disable specific cryptographic ciphers, listed below.
1247
1248 ```
1249 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
1250 TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
1251 TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256
1252 TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
1253 TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
1254 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
1255 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
1256 TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA
1257 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
1258 TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA
1259 TLS_DHE_RSA_WITH_AES_128_CBC_SHA
1260 TLS_DHE_RSA_WITH_AES_256_CBC_SHA
1261 TLS_RSA_WITH_AES_128_GCM_SHA256
1262 TLS_RSA_WITH_AES_256_GCM_SHA384
1263 TLS_RSA_WITH_AES_128_CBC_SHA
1264 TLS_RSA_WITH_AES_256_CBC_SHA
1265 TLS_RSA_WITH_3DES_EDE_CBC_SHA
1266 ```
1267
1268 **Preferences Affected:** `security.ssl3.ecdhe_rsa_aes_128_gcm_sha256`, `security.ssl3.ecdhe_ecdsa_aes_128_gcm_sha256`, `security.ssl3.ecdhe_ecdsa_chacha20_poly1305_sha256`, `security.ssl3.ecdhe_rsa_chacha20_poly1305_sha256`, `security.ssl3.ecdhe_ecdsa_aes_256_gcm_sha384`, `security.ssl3.ecdhe_rsa_aes_256_gcm_sha384`, `security.ssl3.ecdhe_rsa_aes_128_sha`, `security.ssl3.ecdhe_ecdsa_aes_128_sha`, `security.ssl3.ecdhe_rsa_aes_256_sha`, `security.ssl3.ecdhe_ecdsa_aes_256_sha`, `security.ssl3.dhe_rsa_aes_128_sha`, `security.ssl3.dhe_rsa_aes_256_sha`, `security.ssl3.rsa_aes_128_gcm_sha256`, `security.ssl3.rsa_aes_256_gcm_sha384`, `security.ssl3.rsa_aes_128_sha`, `security.ssl3.rsa_aes_256_sha`, `security.ssl3.deprecated.rsa_des_ede3_sha`
1269
1270 ---
1271 **Note:**
1272
1273 This policy was updated in Firefox 78 to allow enabling ciphers as well. Setting the value to true disables the cipher, setting the value to false enables the cipher. Previously setting the value to true or false disabled the cipher.
1274
1275 ---
1276 **Compatibility:** Firefox 76, Firefox ESR 68.8 (TLS_RSA_WITH_AES_128_GCM_SHA256 and TLS_RSA_WITH_AES_256_GCM_SHA384 were added in Firefox 78, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA38, TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, and TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 were added in Firefox 97 and Firefox 91.6)\
1277 **CCK2 Equivalent:** N/A\
1278 **Preferences Affected:** N/A
1279
1280 #### Windows (GPO)
1281 ```
1282 Software\Policies\Mozilla\Firefox\DisabledCiphers\CIPHER_NAME = 0x1 | 0x0
1283 ```
1284 #### Windows (Intune)
1285 OMA-URI:
1286 ```
1287 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_CIPHER_NAME
1288
1289 ```
1290 Value (string):
1291 ```
1292 <enabled/> or <disabled/>
1293 ```
1294 #### macOS
1295 ```
1296 <dict>
1297 <key>DisabledCiphers</key>
1298 <dict>
1299 <key>CIPHER_NAME</key>
1300 <true/> | <false/>
1301 </dict>
1302 </dict>
1303 ```
1304 #### policies.json
1305 ```
1306 {
1307 "policies": {
1308 "DisabledCiphers": {
1309 "CIPHER_NAME": true | false,
1310 }
1311 }
1312 }
1313 ```
1314 ### DisableDefaultBrowserAgent
1315 Prevent the default browser agent from taking any actions. Only applicable to Windows; other platforms don’t have the agent.
1316
1317 The browser agent is a Windows-only scheduled task which runs in the background to collect and submit data about the browser that the user has set as their OS default. More information is available [here](https://firefox-source-docs.mozilla.org/toolkit/mozapps/defaultagent/default-browser-agent/index.html).
1318
1319 **Compatibility:** Firefox 75, Firefox ESR 68.7 (Windows only)\
1320 **CCK2 Equivalent:** N/A\
1321 **Preferences Affected:** N/A
1322
1323 #### Windows (GPO)
1324 ```
1325 Software\Policies\Mozilla\Firefox\DisableDefaultBrowserAgent = 0x1 | 0x0
1326 ```
1327 #### Windows (Intune)
1328 OMA-URI:
1329 ```
1330 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableDefaultBrowserAgent
1331 ```
1332 Value (string):
1333 ```
1334 <enabled/> or <disabled/>
1335 ```
1336 #### policies.json
1337 ```
1338 {
1339 "policies": {
1340 "DisableDefaultBrowserAgent": true | false
1341 }
1342 }
1343 ```
1344 ### DisableDeveloperTools
1345 Remove access to all developer tools.
1346
1347 **Compatibility:** Firefox 60, Firefox ESR 60\
1348 **CCK2 Equivalent:** `removeDeveloperTools`\
1349 **Preferences Affected:** `devtools.policy.disabled`
1350
1351 #### Windows (GPO)
1352 ```
1353 Software\Policies\Mozilla\Firefox\DisableDeveloperTools = 0x1 | 0x0`
1354 ```
1355 #### Windows (Intune)
1356 OMA-URI:
1357 ```
1358 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableDeveloperTools
1359 ```
1360 Value (string):
1361 ```
1362 <enabled/> or <disabled/>
1363 ```
1364 #### macOS
1365 ```
1366 <dict>
1367 <key>DisableDeveloperTools</key>
1368 <true/> | <false/>
1369 </dict>
1370 ```
1371 #### policies.json
1372 ```
1373 {
1374 "policies": {
1375 "DisableDeveloperTools": true | false
1376 }
1377 }
1378 ```
1379 ### DisableFeedbackCommands
1380 Disable the menus for reporting sites (Submit Feedback, Report Deceptive Site).
1381
1382 **Compatibility:** Firefox 60, Firefox ESR 60\
1383 **CCK2 Equivalent:** N/A\
1384 **Preferences Affected:** N/A
1385
1386 #### Windows (GPO)
1387 ```
1388 Software\Policies\Mozilla\Firefox\DisableFeedbackCommands = 0x1 | 0x0
1389 ```
1390 #### Windows (Intune)
1391 OMA-URI:
1392 ```
1393 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFeedbackCommands
1394 ```
1395 Value (string):
1396 ```
1397 <enabled/> or <disabled/>
1398 ```
1399 #### macOS
1400 ```
1401 <dict>
1402 <key>DisableFeedbackCommands</key>
1403 <true/> | <false/>
1404 </dict>
1405 ```
1406 #### policies.json
1407 ```
1408 {
1409 "policies": {
1410 "DisableFeedbackCommands": true | false
1411 }
1412 }
1413 ```
1414 ### DisableFirefoxAccounts
1415 Disable Firefox Accounts integration (Sync).
1416
1417 **Compatibility:** Firefox 60, Firefox ESR 60\
1418 **CCK2 Equivalent:** `disableSync`\
1419 **Preferences Affected:** `identity.fxaccounts.enabled`
1420
1421 #### Windows (GPO)
1422 ```
1423 Software\Policies\Mozilla\Firefox\DisableFirefoxAccounts = 0x1 | 0x0
1424 ```
1425 #### Windows (Intune)
1426 OMA-URI:
1427 ```
1428 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxAccounts
1429 ```
1430 Value (string):
1431 ```
1432 <enabled/> or <disabled/>
1433 ```
1434 #### macOS
1435 ```
1436 <dict>
1437 <key>DisableFirefoxAccounts</key>
1438 <true/> | <false/>
1439 </dict>
1440 ```
1441 #### policies.json
1442 ```
1443 {
1444 "policies": {
1445 "DisableFirefoxAccounts": true | false
1446 }
1447 }
1448 ```
1449 ### DisableFirefoxScreenshots
1450 Remove access to Firefox Screenshots.
1451
1452 **Compatibility:** Firefox 60, Firefox ESR 60\
1453 **CCK2 Equivalent:** N/A\
1454 **Preferences Affected:** `extensions.screenshots.disabled`
1455
1456 #### Windows (GPO)
1457 ```
1458 Software\Policies\Mozilla\Firefox\DisableFirefoxScreenshots = 0x1 | 0x0
1459 ```
1460 #### Windows (Intune)
1461 OMA-URI:
1462 ```
1463 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxScreenshots
1464 ```
1465 Value (string):
1466 ```
1467 <enabled/> or <disabled/>
1468 ```
1469 #### macOS
1470 ```
1471 <dict>
1472 <key>DisableFirefoxScreenshots</key>
1473 <true/> | <false/>
1474 </dict>
1475 ```
1476 #### policies.json
1477 ```
1478 {
1479 "policies": {
1480 "DisableFirefoxScreenshots": true | false
1481 }
1482 }
1483 ```
1484 ### DisableFirefoxStudies
1485 Disable Firefox studies (Shield).
1486
1487 **Compatibility:** Firefox 60, Firefox ESR 60\
1488 **CCK2 Equivalent:** N/A\
1489 **Preferences Affected:** N/A
1490
1491 #### Windows (GPO)
1492 ```
1493 Software\Policies\Mozilla\Firefox\DisableFirefoxStudies = 0x1 | 0x0
1494 ```
1495 #### Windows (Intune)
1496 OMA-URI:
1497 ```
1498 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxStudies
1499 ```
1500 Value (string):
1501 ```
1502 <enabled/> or <disabled/>
1503 ```
1504 #### macOS
1505 ```
1506 <dict>
1507 <key>DisableFirefoxStudies</key>
1508 <true/> | <false/>
1509 </dict>
1510 ```
1511 #### policies.json
1512 ```
1513 {
1514 "policies": {
1515 "DisableFirefoxStudies": true | false
1516 }
1517 }
1518 ```
1519 ### DisableForgetButton
1520 Disable the "Forget" button.
1521
1522 **Compatibility:** Firefox 60, Firefox ESR 60\
1523 **CCK2 Equivalent:** `disableForget`\
1524 **Preferences Affected:** N/A
1525
1526 #### Windows (GPO)
1527 ```
1528 Software\Policies\Mozilla\Firefox\DisableForgetButton = 0x1 | 0x0
1529 ```
1530 #### Windows (Intune)
1531 OMA-URI:
1532 ```
1533 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableForgetButton
1534 ```
1535 Value (string):
1536 ```
1537 <enabled/> or <disabled/>
1538 ```
1539 #### macOS
1540 ```
1541 <dict>
1542 <key>DisableForgetButton</key>
1543 <true/> | <false/>
1544 </dict>
1545 ```
1546 #### policies.json
1547 ```
1548 {
1549 "policies": {
1550 "DisableForgetButton": true | false
1551 }
1552 }
1553 ```
1554 ### DisableFormHistory
1555 Turn off saving information on web forms and the search bar.
1556
1557 **Compatibility:** Firefox 60, Firefox ESR 60\
1558 **CCK2 Equivalent:** `disableFormFill`\
1559 **Preferences Affected:** `browser.formfill.enable`
1560
1561 #### Windows (GPO)
1562 ```
1563 Software\Policies\Mozilla\Firefox\DisableFormHistory = 0x1 | 0x0
1564 ```
1565 #### Windows (Intune)
1566 OMA-URI:
1567 ```
1568 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFormHistory
1569 ```
1570 Value (string):
1571 ```
1572 <enabled/> or <disabled/>
1573 ```
1574 #### macOS
1575 ```
1576 <dict>
1577 <key>DisableFormHistory</key>
1578 <true/> | <false/>
1579 </dict>
1580 ```
1581 #### policies.json
1582 ```
1583 {
1584 "policies": {
1585 "DisableFormHistory": true | false
1586 }
1587 }
1588 ```
1589 ### DisableMasterPasswordCreation
1590 Remove the master password functionality.
1591
1592 If this value is true, it works the same as setting [`PrimaryPassword`](#primarypassword) to false and removes the primary password functionality.
1593
1594 If both `DisableMasterPasswordCreation` and `PrimaryPassword` are used, `DisableMasterPasswordCreation` takes precedent.
1595
1596 **Compatibility:** Firefox 60, Firefox ESR 60\
1597 **CCK2 Equivalent:** `noMasterPassword`\
1598 **Preferences Affected:** N/A
1599
1600 #### Windows (GPO)
1601 ```
1602 Software\Policies\Mozilla\Firefox\DisableMasterPasswordCreation = 0x1 | 0x0
1603 ```
1604 #### Windows (Intune)
1605 OMA-URI:
1606 ```
1607 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableMasterPasswordCreation
1608 ```
1609 Value (string):
1610 ```
1611 <enabled/> or <disabled/>
1612 ```
1613 #### macOS
1614 ```
1615 <dict>
1616 <key>DisableMasterPasswordCreation</key>
1617 <true/> | <false/>
1618 </dict>
1619 ```
1620 #### policies.json
1621 ```
1622 {
1623 "policies": {
1624 "DisableMasterPasswordCreation": true | false
1625 }
1626 }
1627 ```
1628 ### DisablePasswordReveal
1629 Do not allow passwords to be shown in saved logins
1630
1631 **Compatibility:** Firefox 71, Firefox ESR 68.3\
1632 **CCK2 Equivalent:** N/A
1633 **Preferences Affected:** N/A
1634
1635 #### Windows (GPO)
1636 ```
1637 Software\Policies\Mozilla\Firefox\DisablePasswordReveal = 0x1 | 0x0
1638 ```
1639 #### Windows (Intune)
1640 OMA-URI:
1641 ```
1642 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePasswordReveal
1643 ```
1644 Value (string):
1645 ```
1646 <enabled/> or <disabled/>
1647 ```
1648 #### macOS
1649 ```
1650 <dict>
1651 <key>DisablePasswordReveal</key>
1652 <true/> | <false/>
1653 </dict>
1654 ```
1655 #### policies.json
1656 ```
1657 {
1658 "policies": {
1659 "DisablePasswordReveal": true | false
1660 }
1661 }
1662 ```
1663 ### DisablePocket
1664 Remove Pocket in the Firefox UI. It does not remove it from the new tab page.
1665
1666 **Compatibility:** Firefox 60, Firefox ESR 60\
1667 **CCK2 Equivalent:** `disablePocket`\
1668 **Preferences Affected:** `extensions.pocket.enabled`
1669
1670 #### Windows (GPO)
1671 ```
1672 Software\Policies\Mozilla\Firefox\DisablePocket = 0x1 | 0x0
1673 ```
1674 #### Windows (Intune)
1675 OMA-URI:
1676 ```
1677 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePocket
1678 ```
1679 Value (string):
1680 ```
1681 <enabled/> or <disabled/>
1682 ```
1683 #### macOS
1684 ```
1685 <dict>
1686 <key>DisablePocket</key>
1687 <true/> | <false/>
1688 </dict>
1689 ```
1690 #### policies.json
1691 ```
1692 {
1693 "policies": {
1694 "DisablePocket": true | false
1695 }
1696 }
1697 ```
1698 ### DisablePrivateBrowsing
1699 Remove access to private browsing.
1700
1701 **Compatibility:** Firefox 60, Firefox ESR 60\
1702 **CCK2 Equivalent:** `disablePrivateBrowsing`\
1703 **Preferences Affected:** N/A
1704
1705 #### Windows (GPO)
1706 ```
1707 Software\Policies\Mozilla\Firefox\DisablePrivateBrowsing = 0x1 | 0x0
1708 ```
1709 #### Windows (Intune)
1710 OMA-URI:
1711 ```
1712 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePrivateBrowsing
1713 ```
1714 Value (string):
1715 ```
1716 <enabled/> or <disabled/>
1717 ```
1718 #### macOS
1719 ```
1720 <dict>
1721 <key>DisablePrivateBrowsing</key>
1722 <true/> | <false/>
1723 </dict>
1724 ```
1725 #### policies.json
1726 ```
1727 {
1728 "policies": {
1729 "DisablePrivateBrowsing": true | false
1730 }
1731 }
1732 ```
1733 ### DisableProfileImport
1734 Disables the "Import data from another browser" option in the bookmarks window.
1735
1736 **Compatibility:** Firefox 60, Firefox ESR 60\
1737 **CCK2 Equivalent:** N/A\
1738 **Preferences Affected:** N/A
1739
1740 #### Windows (GPO)
1741 ```
1742 Software\Policies\Mozilla\Firefox\DisableProfileImport = 0x1 | 0x0
1743 ```
1744 #### Windows (Intune)
1745 OMA-URI:
1746 ```
1747 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableProfileImport
1748 ```
1749 Value (string):
1750 ```
1751 <enabled/> or <disabled/>
1752 ```
1753 #### macOS
1754 ```
1755 <dict>
1756 <key>DisableProfileImport</key>
1757 <true/> | <false/>
1758 </dict>
1759 ```
1760 #### policies.json
1761 ```
1762 {
1763 "policies": {
1764 "DisableProfileImport": true | false
1765 }
1766 }
1767 ```
1768 ### DisableProfileRefresh
1769 Disable the Refresh Firefox button on about:support and support.mozilla.org, as well as the prompt that displays offering to refresh Firefox when you haven't used it in a while.
1770
1771 **Compatibility:** Firefox 60, Firefox ESR 60\
1772 **CCK2 Equivalent:** `disableResetFirefox`\
1773 **Preferences Affected:** `browser.disableResetPrompt`
1774
1775 #### Windows (GPO)
1776 ```
1777 Software\Policies\Mozilla\Firefox\DisableProfileRefresh = 0x1 | 0x0
1778 ```
1779 #### Windows (Intune)
1780 OMA-URI:
1781 ```
1782 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableProfileRefresh
1783 ```
1784 Value (string):
1785 ```
1786 <enabled/> or <disabled/>
1787 ```
1788 #### macOS
1789 ```
1790 <dict>
1791 <key>DisableProfileRefresh</key>
1792 <true/> | <false/>
1793 </dict>
1794 ```
1795 #### policies.json
1796 ```
1797 {
1798 "policies": {
1799 "DisableProfileRefresh": true | false
1800 }
1801 }
1802 ```
1803 ### DisableSafeMode
1804 Disable safe mode within the browser.
1805
1806 On Windows, this disables safe mode via the command line as well.
1807
1808 **Compatibility:** Firefox 60, Firefox ESR 60 (Windows, macOS)\
1809 **CCK2 Equivalent:** `disableSafeMode`\
1810 **Preferences Affected:** N/A
1811
1812 #### Windows (GPO)
1813 ```
1814 Software\Policies\Mozilla\Firefox\DisableSafeMode = 0x1 | 0x0
1815 ```
1816 #### Windows (Intune)
1817 OMA-URI:
1818 ```
1819 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSafeMode
1820 ```
1821 Value (string):
1822 ```
1823 <enabled/> or <disabled/>
1824 ```
1825 #### macOS
1826 ```
1827 <dict>
1828 <key>DisableSafeMode</key>
1829 <true/> | <false/>
1830 </dict>
1831 ```
1832 #### policies.json
1833 ```
1834 {
1835 "policies": {
1836 "DisableSafeMode": true | false
1837 }
1838 }
1839 ```
1840 ### DisableSecurityBypass
1841 Prevent the user from bypassing security in certain cases.
1842
1843 `InvalidCertificate` prevents adding an exception when an invalid certificate is shown.
1844
1845 `SafeBrowsing` prevents selecting "ignore the risk" and visiting a harmful site anyway.
1846
1847 **Compatibility:** Firefox 60, Firefox ESR 60\
1848 **CCK2 Equivalent:** N/A\
1849 **Preferences Affected:** `security.certerror.hideAddException`, `browser.safebrowsing.allowOverride`
1850
1851 #### Windows (GPO)
1852 ```
1853 Software\Policies\Mozilla\Firefox\DisableSecurityBypass\InvalidCertificate = 0x1 | 0x0
1854 Software\Policies\Mozilla\Firefox\DisableSecurityBypass\SafeBrowsing = 0x1 | 0x0
1855 ```
1856 #### Windows (Intune)
1857 OMA-URI:
1858 ```
1859 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/P_DisableSecurityBypass_InvalidCertificate
1860 ```
1861 Value (string):
1862 ```
1863 <enabled/> or <disabled/>
1864 ```
1865 OMA-URI:
1866 ```
1867 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/P_DisableSecurityBypass_SafeBrowsing
1868 ```
1869 Value (string):
1870 ```
1871 <enabled/> or <disabled/>
1872 ```
1873
1874 #### macOS
1875 ```
1876 <dict>
1877 <key>DisableSecurityBypass</key>
1878 <dict>
1879 <key>InvalidCertificate</key>
1880 <true/> | <false/>
1881 <key>SafeBrowsing</key>
1882 <true/> | <false/>
1883 </dict>
1884 </dict>
1885 ```
1886 #### policies.json
1887 ```
1888 {
1889 "policies": {
1890 "DisableSecurityBypass": {
1891 "InvalidCertificate": true | false,
1892 "SafeBrowsing": true | false
1893 }
1894 }
1895 }
1896 ```
1897 ### DisableSetDesktopBackground
1898 Remove the "Set As Desktop Background..." menuitem when right clicking on an image.
1899
1900 **Compatibility:** Firefox 60, Firefox ESR 60\
1901 **CCK2 Equivalent:** `removeSetDesktopBackground`\
1902 **Preferences Affected:** N/A
1903
1904 #### Windows (GPO)
1905 ```
1906 Software\Policies\Mozilla\Firefox\DisableSetDesktopBackground = 0x1 | 0x0
1907 ```
1908 #### Windows (Intune)
1909 OMA-URI:
1910 ```
1911 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSetDesktopBackground
1912 ```
1913 Value (string):
1914 ```
1915 <enabled/> or <disabled/>
1916 ```
1917 #### macOS
1918 ```
1919 <dict>
1920 <key>DisableSetDesktopBackground</key>
1921 <true/> | <false/>
1922 </dict>
1923 ```
1924 #### policies.json
1925 ```
1926 {
1927 "policies": {
1928 "DisableSetDesktopBackground": true | false
1929 }
1930 }
1931 ```
1932 ### DisableSystemAddonUpdate
1933 Prevent system add-ons from being installed or updated.
1934
1935 **Compatibility:** Firefox 60, Firefox ESR 60\
1936 **CCK2 Equivalent:** N/A\
1937 **Preferences Affected:** N/A
1938
1939 #### Windows (GPO)
1940 ```
1941 Software\Policies\Mozilla\Firefox\DisableSystemAddonUpdate = 0x1 | 0x0
1942 ```
1943 #### Windows (Intune)
1944 OMA-URI:
1945 ```
1946 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSystemAddonUpdate
1947 ```
1948 Value (string):
1949 ```
1950 <enabled/> or <disabled/>
1951 ```
1952 #### macOS
1953 ```
1954 <dict>
1955 <key>DisableSystemAddonUpdate</key>
1956 <true/> | <false/>
1957 </dict>
1958 ```
1959 #### policies.json
1960 ```
1961 {
1962 "policies": {
1963 "DisableSystemAddonUpdate": true | false
1964 }
1965 }
1966 ```
1967 ### DisableTelemetry
1968 Prevent the upload of telemetry data.
1969
1970 As of Firefox 83 and Firefox ESR 78.5, local storage of telemetry data is disabled as well.
1971
1972 Mozilla recommends that you do not disable telemetry. Information collected through telemetry helps us build a better product for businesses like yours.
1973
1974 **Compatibility:** Firefox 60, Firefox ESR 60\
1975 **CCK2 Equivalent:** `disableTelemetry`\
1976 **Preferences Affected:** `datareporting.healthreport.uploadEnabled`, `datareporting.policy.dataSubmissionEnabled`, `toolkit.telemetry.archive.enabled`
1977
1978 #### Windows (GPO)
1979 ```
1980 Software\Policies\Mozilla\Firefox\DisableTelemetry = 0x1 | 0x0
1981 ```
1982 #### Windows (Intune)
1983 OMA-URI:
1984 ```
1985 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableTelemetry
1986 ```
1987 Value (string):
1988 ```
1989 <enabled/> or <disabled/>
1990 ```
1991 #### macOS
1992 ```
1993 <dict>
1994 <key>DisableTelemetry</key>
1995 <true/> | <false/>
1996 </dict>
1997 ```
1998 #### policies.json
1999 ```
2000 {
2001 "policies": {
2002 "DisableTelemetry": true | false
2003 }
2004 }
2005 ```
2006 ### DisplayBookmarksToolbar
2007 Set the initial state of the bookmarks toolbar. A user can still hide it and it will stay hidden.
2008
2009 **Compatibility:** Firefox 60, Firefox ESR 60\
2010 **CCK2 Equivalent:** `displayBookmarksToolbar`\
2011 **Preferences Affected:** N/A
2012
2013 #### Windows (GPO)
2014 ```
2015 Software\Policies\Mozilla\Firefox\DisplayBookmarksToolbar = 0x1 | 0x0
2016 ```
2017 #### Windows (Intune)
2018 OMA-URI:
2019 ```
2020 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisplayBookmarksToolbar
2021 ```
2022 Value (string):
2023 ```
2024 <enabled/> or <disabled/>
2025 ```
2026 #### macOS
2027 ```
2028 <dict>
2029 <key>DisplayBookmarksToolbar</key>
2030 <true/> | <false/>
2031 </dict>
2032 ```
2033 #### policies.json
2034 ```
2035 {
2036 "policies": {
2037 "DisplayBookmarksToolbar": true | false
2038 }
2039 }
2040 ```
2041 ### DisplayMenuBar
2042 Set the state of the menubar.
2043
2044 `always` means the menubar is shown and cannot be hidden.
2045
2046 `never` means the menubar is hidden and cannot be shown.
2047
2048 `default-on` means the menubar is on by default but can be hidden.
2049
2050 `default-off` means the menubar is off by default but can be shown.
2051
2052 **Compatibility:** Firefox 73, Firefox ESR 68.5 (Windows, some Linux)\
2053 **CCK2 Equivalent:** `displayMenuBar`\
2054 **Preferences Affected:** N/A
2055
2056 #### Windows (GPO)
2057 ```
2058 Software\Policies\Mozilla\Firefox\DisplayMenuBar = "always", "never", "default-on", "default-off"
2059 ```
2060 #### Windows (Intune)
2061 OMA-URI:
2062 ```
2063 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisplayMenuBar_Enum
2064 ```
2065 Value (string):
2066 ```
2067 <enabled/>
2068 <data id="DisplayMenuBar" value="always | never | default-on | default-off"/>
2069 ```
2070 #### macOS
2071 ```
2072 <dict>
2073 <key>DisplayMenuBar</key>
2074 <string>always | never | default-on | default-off</string>
2075 </dict>
2076 ```
2077 #### policies.json
2078 ```
2079 {
2080 "policies": {
2081 "DisplayMenuBar": "always", "never", "default-on", "default-off"
2082 }
2083 }
2084 ```
2085 ### DisplayMenuBar (Deprecated)
2086 Set the initial state of the menubar. A user can still hide it and it will stay hidden.
2087
2088 **Compatibility:** Firefox 60, Firefox ESR 60 (Windows, some Linux)\
2089 **CCK2 Equivalent:** `displayMenuBar`\
2090 **Preferences Affected:** N/A
2091
2092 #### Windows (GPO)
2093 ```
2094 Software\Policies\Mozilla\Firefox\DisplayMenuBar = 0x1 | 0x0
2095 ```
2096 #### macOS
2097 ```
2098 <dict>
2099 <key>DisplayMenuBar</key>
2100 <true/> | <false/>
2101 </dict>
2102 ```
2103 #### policies.json
2104 ```
2105 {
2106 "policies": {
2107 "DisplayMenuBar": true | false
2108 }
2109 }
2110 ```
2111 ### DNSOverHTTPS
2112 Configure DNS over HTTPS.
2113
2114 `Enabled` determines whether DNS over HTTPS is enabled
2115
2116 `ProviderURL` is a URL to another provider.
2117
2118 `Locked` prevents the user from changing DNS over HTTPS preferences.
2119
2120 `ExcludedDomains` excludes domains from DNS over HTTPS.
2121
2122 **Compatibility:** Firefox 63, Firefox ESR 68 (ExcludedDomains added in 75/68.7)\
2123 **CCK2 Equivalent:** N/A\
2124 **Preferences Affected:** `network.trr.mode`, `network.trr.uri`
2125
2126 #### Windows (GPO)
2127 ```
2128 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\Enabled = 0x1 | 0x0
2129 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\ProviderURL = "URL_TO_ALTERNATE_PROVIDER"
2130 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\Locked = 0x1 | 0x0
2131 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\ExcludedDomains\1 = "example.com"
2132 ```
2133 #### Windows (Intune)
2134 OMA-URI:
2135 ```
2136 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_Enabled
2137 ```
2138 Value (string):
2139 ```
2140 <enabled/> or <disabled/>
2141 ```
2142 OMA-URI:
2143 ```
2144 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_ProviderURL
2145 ```
2146 Value (string):
2147 ```
2148 <enabled/>
2149 <data id="String" value="URL_TO_ALTERNATE_PROVIDER"/>
2150 ```
2151 OMA-URI:
2152 ```
2153 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_Locked
2154 ```
2155 Value (string):
2156 ```
2157 <enabled/> or <disabled/>
2158 ```
2159 OMA-URI:
2160 ```
2161 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_ExcludedDomains
2162 ```
2163 Value (string):
2164 ```
2165 <enabled/>
2166 <data id="List" value="1&#xF000;example.com"/>
2167 ```
2168 #### macOS
2169 ```
2170 <dict>
2171 <key>DNSOverHTTPS</key>
2172 <dict>
2173 <key>Enabled</key>
2174 <true/> | <false/>
2175 <key>ProviderURL</key>
2176 <string>URL_TO_ALTERNATE_PROVIDER</string>
2177 <key>Locked</key>
2178 <true/> | <false/>
2179 <key>ExcludedDomains</key>
2180 <array>
2181 <string>example.com</string>
2182 </array>
2183 </dict>
2184 </dict>
2185 ```
2186 #### policies.json
2187 ```
2188 {
2189 "policies": {
2190 "DNSOverHTTPS": {
2191 "Enabled": true | false,
2192 "ProviderURL": "URL_TO_ALTERNATE_PROVIDER",
2193 "Locked": true | false,
2194 "ExcludedDomains": ["example.com"]
2195 }
2196 }
2197 }
2198 ```
2199 ### DontCheckDefaultBrowser
2200 Don't check if Firefox is the default browser at startup.
2201
2202 **Compatibility:** Firefox 60, Firefox ESR 60\
2203 **CCK2 Equivalent:** `dontCheckDefaultBrowser`\
2204 **Preferences Affected:** `browser.shell.checkDefaultBrowser`
2205
2206 #### Windows (GPO)
2207 ```
2208 Software\Policies\Mozilla\Firefox\DontCheckDefaultBrowser = 0x1 | 0x0
2209 ```
2210 #### Windows (Intune)
2211 OMA-URI:
2212 ```
2213 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DontCheckDefaultBrowser
2214 ```
2215 Value (string):
2216 ```
2217 <enabled/> or <disabled/>
2218 ```
2219 #### macOS
2220 ```
2221 <dict>
2222 <key>DontCheckDefaultBrowser</key>
2223 <true/> | <false/>
2224 </dict>
2225 ```
2226 #### policies.json
2227 ```
2228 {
2229 "policies": {
2230 "DontCheckDefaultBrowser": true | false
2231 }
2232 }
2233 ```
2234 ### DownloadDirectory
2235 Set and lock the download directory.
2236
2237 You can use ${home} for the native home directory.
2238
2239 **Compatibility:** Firefox 68, Firefox ESR 68\
2240 **CCK2 Equivalent:** N/A\
2241 **Preferences Affected:** `browser.download.dir`, `browser.download.folderList`, `browser.download.useDownloadDir`
2242
2243 #### Windows (GPO)
2244 ```
2245 Software\Policies\Mozilla\Firefox\DownloadDirectory = "${home}\Downloads"
2246 ```
2247 #### Windows (Intune)
2248 OMA-URI:
2249 ```
2250 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DownloadDirectory
2251 ```
2252 Value (string):
2253 ```
2254 <enabled/>
2255 <data id="Preferences_String" value="${home}\Downloads"/>
2256 ```
2257 #### macOS
2258 ```
2259 <dict>
2260 <key>DownloadDirectory</key>
2261 <string>${home}/Downloads</string>
2262 </dict>
2263 ```
2264 #### policies.json (macOS and Linux)
2265 ```
2266 {
2267 "policies": {
2268 "DownloadDirectory": "${home}/Downloads"
2269 }
2270 ```
2271 #### policies.json (Windows)
2272 ```
2273 {
2274 "policies": {
2275 "DownloadDirectory": "${home}\\Downloads"
2276 }
2277 ```
2278 ### EnableTrackingProtection
2279 Configure tracking protection.
2280
2281 If this policy is not configured, tracking protection is not enabled by default in the browser, but it is enabled by default in private browsing and the user can change it.
2282
2283 If `Value` is set to false, tracking protection is disabled and locked in both the regular browser and private browsing.
2284
2285 If `Value` is set to true, tracking protection is enabled by default in both the regular browser and private browsing and the `Locked` value determines whether or not a user can change it.
2286
2287 If `Cryptomining` is set to true, cryptomining scripts on websites are blocked.
2288
2289 If `Fingerprinting` is set to true, fingerprinting scripts on websites are blocked.
2290
2291 `Exceptions` are origins for which tracking protection is not enabled.
2292
2293 **Compatibility:** Firefox 60, Firefox ESR 60 (Cryptomining and Fingerprinting added in 70/68.2, Exceptions added in 73/68.5)\
2294 **CCK2 Equivalent:** N/A\
2295 **Preferences Affected:** `privacy.trackingprotection.enabled`, `privacy.trackingprotection.pbmode.enabled`, `privacy.trackingprotection.cryptomining.enabled`, `privacy.trackingprotection.fingerprinting.enabled`
2296
2297 #### Windows (GPO)
2298 ```
2299 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Value = 0x1 | 0x0
2300 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Locked = 0x1 | 0x0
2301 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Cryptomining = 0x1 | 0x0
2302 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Fingerprinting = 0x1 | 0x0
2303 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Exceptions\1 = "https://example.com"
2304 ```
2305 #### Windows (Intune)
2306 OMA-URI:
2307 ```
2308 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/A_TrackingProtection_Value
2309 ```
2310 Value (string):
2311 ```
2312 <enabled/> or <disabled/>
2313 ```
2314 OMA-URI:
2315 ```
2316 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/B_TrackingProtection_Cryptomining
2317 ```
2318 Value (string):
2319 ```
2320 <enabled/> or <disabled/>
2321 ```
2322 OMA-URI:
2323 ```
2324 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/C_TrackingProtection_Fingerprinting
2325 ```
2326 Value (string):
2327 ```
2328 <enabled/> or <disabled/>
2329 ```
2330 OMA-URI:
2331 ```
2332 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/D_TrackingProtection_Exceptions
2333 ```
2334 Value (string):
2335 ```
2336 <data id="TrackingProtection_Exceptions" value="1&#xF000;https://example.com"/>
2337 ```
2338 OMA-URI:
2339 ```
2340 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/E_TrackingProtection_Locked
2341 ```
2342 Value (string):
2343 ```
2344 <enabled/> or <disabled/>
2345 ```
2346 #### macOS
2347 ```
2348 <dict>
2349 <key>EnableTrackingProtection</key>
2350 <dict>
2351 <key>Value</key>
2352 <true/> | <false/>
2353 <key>Locked</key>
2354 <true/> | <false/>
2355 <key>Cryptomining</key>
2356 <true/> | <false/>
2357 <key>Fingerprinting</key>
2358 <true/> | <false/>
2359 <key>Exceptions</key>
2360 <array>
2361 <string>https://example.com</string>
2362 </array>
2363 </dict>
2364 </dict>
2365 ```
2366 #### policies.json
2367 ```
2368 {
2369 "policies": {
2370 "EnableTrackingProtection": {
2371 "Value": true | false,
2372 "Locked": true | false,
2373 "Cryptomining": true | false,
2374 "Fingerprinting": true | false,
2375 "Exceptions": ["https://example.com"]
2376 }
2377 }
2378 }
2379 ```
2380 ### EncryptedMediaExtensions
2381 Enable or disable Encrypted Media Extensions and optionally lock it.
2382
2383 If `Enabled` is set to false, encrypted media extensions (like Widevine) are not downloaded by Firefox unless the user consents to installing them.
2384
2385 If `Locked` is set to true and `Enabled` is set to false, Firefox will not download encrypted media extensions (like Widevine) or ask the user to install them.
2386
2387 **Compatibility:** Firefox 77, Firefox ESR 68.9\
2388 **CCK2 Equivalent:** N/A\
2389 **Preferences Affected:** `media.eme.enabled`
2390
2391 #### Windows (GPO)
2392 ```
2393 Software\Policies\Mozilla\Firefox\EncryptedMediaExtensions\Enabled = 0x1 | 0x0
2394 Software\Policies\Mozilla\Firefox\EncryptedMediaExtensions\Locked = 0x1 | 0x0
2395 ```
2396 #### Windows (Intune)
2397 OMA-URI:
2398 ```
2399 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~EncryptedMediaExtensions/EncryptedMediaExtensions_Enabled
2400 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~EncryptedMediaExtensions/EncryptedMediaExtensions_Locked
2401 ```
2402 Value (string):
2403 ```
2404 <enabled/>or <disabled/>
2405 ```
2406 #### macOS
2407 ```
2408 <dict>
2409 <key>EncryptedMediaExtensions</key>
2410 <dict>
2411 <key>Enabled</key>
2412 <true/> | <false/>
2413 <key>Locked</key>
2414 <true/> | <false/>
2415 </dict>
2416 </dict>
2417 ```
2418 #### policies.json
2419 ```
2420 {
2421 "policies": {
2422 "EncryptedMediaExtensions": {
2423 "Enabled": true | false,
2424 "Locked": true | false
2425 }
2426 }
2427 }
2428 ```
2429 ### EnterprisePoliciesEnabled
2430 Enable policy support on macOS.
2431
2432 **Compatibility:** Firefox 63, Firefox ESR 60.3 (macOS only)\
2433 **CCK2 Equivalent:** N/A\
2434 **Preferences Affected:** N/A
2435
2436 #### macOS
2437 ```
2438 <dict>
2439 <key>EnterprisePoliciesEnabled</key>
2440 <true/>
2441 </dict>
2442 ```
2443 ### ExemptDomainFileTypePairsFromFileTypeDownloadWarnings
2444
2445 Disable warnings based on file extension for specific file types on domains.
2446
2447 This policy is based on the [Chrome policy](https://chromeenterprise.google/policies/#ExemptDomainFileTypePairsFromFileTypeDownloadWarnings) of the same name.
2448
2449 Important: The documentation for the policy for both Edge and Chrome is incorrect. The ```domains``` value must be a domain, not a URL pattern. Also, we do not support using ```*``` to mean all domains.
2450
2451 **Compatibility:** Firefox 102\
2452 **CCK2 Equivalent:** N/A\
2453 **Preferences Affected:** N/A
2454
2455 #### Windows (GPO)
2456 Software\Policies\Mozilla\Firefox\Handlers (REG_MULTI_SZ) =
2457 ```
2458 [
2459 {
2460 "file_extension": "jnlp",
2461 "domains": ["example.com"]
2462 }
2463 ]
2464 ```
2465 #### Windows (Intune)
2466 OMA-URI:
2467 ```
2468 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/ExemptDomainFileTypePairsFromFileTypeDownloadWarnings
2469 ```
2470 Value (string):
2471 ```
2472 <enabled/>
2473 <data id="JSON" value='
2474 [
2475 {
2476 "file_extension": "jnlp",
2477 "domains": ["example.com"]
2478 }
2479 ]
2480 '/>
2481 ```
2482 #### macOS
2483 ```
2484 <dict>
2485 <key>ExemptDomainFileTypePairsFromFileTypeDownloadWarnings</key>
2486 <array>
2487 <dict>
2488 <key>file_extension</key>
2489 <string>jnlp</string>
2490 <key>domains</key>
2491 <array>
2492 <string>example.com</string>
2493 </array>
2494 </dict>
2495 </array>
2496 </dict>
2497 ```
2498 #### policies.json
2499 ```
2500 {
2501 "policies": {
2502 "ExemptDomainFileTypePairsFromFileTypeDownloadWarnings": [{
2503 "file_extension": "jnlp",
2504 "domains": ["example.com"]
2505 }]
2506 }
2507 }
2508 ```
2509 ### Extensions
2510 Control the installation, uninstallation and locking of extensions.
2511
2512 While this policy is not technically deprecated, it is recommended that you use the **[`ExtensionSettings`](#extensionsettings)** policy. It has the same functionality and adds more. It does not support native paths, though, so you'll have to use file:/// URLs.
2513
2514 `Install` is a list of URLs or native paths for extensions to be installed.
2515
2516 `Uninstall` is a list of extension IDs that should be uninstalled if found.
2517
2518 `Locked` is a list of extension IDs that the user cannot disable or uninstall.
2519
2520 **Compatibility:** Firefox 60, Firefox ESR 60\
2521 **CCK2 Equivalent:** `addons`\
2522 **Preferences Affected:** N/A
2523
2524 #### Windows (GPO)
2525 ```
2526 Software\Policies\Mozilla\Firefox\Extensions\Install\1 = "https://addons.mozilla.org/firefox/downloads/somefile.xpi"
2527 Software\Policies\Mozilla\Firefox\Extensions\Install\2 = "//path/to/xpi"
2528 Software\Policies\Mozilla\Firefox\Extensions\Uninstall\1 = "bad_addon_id@mozilla.org"
2529 Software\Policies\Mozilla\Firefox\Extensions\Locked\1 = "addon_id@mozilla.org"
2530 ```
2531 #### Windows (Intune)
2532 OMA-URI:
2533 ```
2534 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/Extensions_Install
2535 ```
2536 Value (string):
2537 ```
2538 <enabled/>
2539 <data id="Extensions" value="1&#xF000;https://addons.mozilla.org/firefox/downloads/somefile.xpi&#xF000;2&#xF000;//path/to/xpi"/>
2540 ```
2541 OMA-URI:
2542 ```
2543 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/Extensions_Uninstall
2544 ```
2545 Value (string):
2546 ```
2547 <enabled/>
2548 <data id="Extensions" value="1&#xF000;bad_addon_id@mozilla.org"/>
2549 ```
2550 OMA-URI:
2551 ```
2552 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/Extensions_Locked
2553 ```
2554 Value (string):
2555 ```
2556 <enabled/>
2557 <data id="Extensions" value="1&#xF000;addon_id@mozilla.org"/>
2558 ```
2559 #### macOS
2560 ```
2561 <dict>
2562 <key>Extensions</key>
2563 <dict>
2564 <key>Install</key>
2565 <array>
2566 <string>https://addons.mozilla.org/firefox/downloads/somefile.xpi</string>
2567 <string>//path/to/xpi</string>
2568 </array>
2569 <key>Uninstall</key>
2570 <array>
2571 <string>bad_addon_id@mozilla.org</string>
2572 </array>
2573 <key>Locked</key>
2574 <array>
2575 <string>addon_id@mozilla.org</string>
2576 </array>
2577 </dict>
2578 </dict>
2579 ```
2580 #### policies.json
2581 ```
2582 {
2583 "policies": {
2584 "Extensions": {
2585 "Install": ["https://addons.mozilla.org/firefox/downloads/somefile.xpi", "//path/to/xpi"],
2586 "Uninstall": ["bad_addon_id@mozilla.org"],
2587 "Locked": ["addon_id@mozilla.org"]
2588 }
2589 }
2590 }
2591 ```
2592 ### ExtensionSettings
2593 Manage all aspects of extensions. This policy is based heavily on the [Chrome policy](https://dev.chromium.org/administrators/policy-list-3/extension-settings-full) of the same name.
2594
2595 This policy maps an extension ID to its configuration. With an extension ID, the configuration will be applied to the specified extension only. A default configuration can be set for the special ID "*", which will apply to all extensions that don't have a custom configuration set in this policy.
2596
2597 To obtain an extension ID, install the extension and go to about:support. You will see the ID in the Extensions section. I've also created an extension that makes it easy to find the ID of extensions on AMO. You can download it [here](https://github.com/mkaply/queryamoid/releases/tag/v0.1).
2598
2599 The configuration for each extension is another dictionary that can contain the fields documented below.
2600
2601 | Name | Description |
2602 | --- | --- |
2603 | `installation_mode` | Maps to a string indicating the installation mode for the extension. The valid strings are `allowed`,`blocked`,`force_installed`, and `normal_installed`.
2604 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`allowed` | Allows the extension to be installed by the user. This is the default behavior. There is no need for an install_url; it will automatically be allowed based on the ID.
2605 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`blocked`| Blocks installation of the extension and removes it from the device if already installed.
2606 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`force_installed`| The extension is automatically installed and can't be removed by the user. This option is not valid for the default configuration and requires an install_url.
2607 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`normal_installed`| The extension is automatically installed but can be disabled by the user. This option is not valid for the default configuration and requires an install_url.
2608 | `install_url`| Maps to a URL indicating where Firefox can download a force_installed or normal_installed extension. If installing from the local file system, use a [```file:///``` URL](https://en.wikipedia.org/wiki/File_URI_scheme). If installing from the addons.mozilla.org, use the following URL (substituting SHORT_NAME from the URL on AMO), https://addons.mozilla.org/firefox/downloads/latest/SHORT_NAME/latest.xpi. Languages packs are available from https://releases.mozilla.org/pub/firefox/releases/VERSION/PLATFORM/xpi/LANGUAGE.xpi. If you need to update the extension, you can change the name of the extension and it will be automatically updated. Extensions installed from file URLs will additional be updated when their internal version changes.
2609 | `install_sources` | A list of sources from which installing extensions is allowed. **This is unnecessary if you are only allowing the installation of certain extensions by ID.** Each item in this list is an extension-style match pattern. Users will be able to easily install items from any URL that matches an item in this list. Both the location of the *.xpi file and the page where the download is started from (i.e. the referrer) must be allowed by these patterns. This setting can be used only for the default configuration.
2610 | `allowed_types` | This setting whitelists the allowed types of extension/apps that can be installed in Firefox. The value is a list of strings, each of which should be one of the following: "extension", "theme", "dictionary", "locale" This setting can be used only for the default configuration.
2611 | `blocked_install_message` | This maps to a string specifying the error message to display to users if they're blocked from installing an extension. This setting allows you to append text to the generic error message displayed when the extension is blocked. This could be be used to direct users to your help desk, explain why a particular extension is blocked, or something else. This setting can be used only for the default configuration.
2612 | `restricted_domains` | An array of domains on which content scripts can't be run. This setting can be used only for the default configuration.
2613 | `updates_disabled` | (Firefox 89, Firefox ESR 78.11) Boolean that indicates whether or not to disable automatic updates for an individual extension.
2614
2615 **Compatibility:** Firefox 69, Firefox ESR 68.1 (As of Firefox 85, Firefox ESR 78.7, installing a theme makes it the default.)\
2616 **CCK2 Equivalent:** N/A\
2617 **Preferences Affected:** N/A
2618
2619 #### Windows (GPO)
2620 Software\Policies\Mozilla\Firefox\ExtensionSettings (REG_MULTI_SZ) =
2621 ```
2622 {
2623 "*": {
2624 "blocked_install_message": "Custom error message.",
2625 "install_sources": ["about:addons","https://addons.mozilla.org/"],
2626 "installation_mode": "blocked",
2627 "allowed_types": ["extension"]
2628 },
2629 "uBlock0@raymondhill.net": {
2630 "installation_mode": "force_installed",
2631 "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
2632 },
2633 "https-everywhere@eff.org": {
2634 "installation_mode": "allowed"
2635 }
2636 }
2637 ```
2638 #### Windows (Intune)
2639 OMA-URI:
2640 ```
2641 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/ExtensionSettings
2642 ```
2643 Value (string):
2644 ```
2645 <enabled/>
2646 <data id="ExtensionSettings" value='
2647 {
2648 "*": {
2649 "blocked_install_message": "Custom error message.",
2650 "install_sources": ["about:addons","https://addons.mozilla.org/"],
2651 "installation_mode": "blocked",
2652 "allowed_types": ["extension"]
2653 },
2654 "uBlock0@raymondhill.net": {
2655 "installation_mode": "force_installed",
2656 "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
2657 },
2658 "https-everywhere@eff.org": {
2659 "installation_mode": "allowed"
2660 }
2661 }'/>
2662 ```
2663 #### macOS
2664 ```
2665 <dict>
2666 <key>ExtensionSettings</key>
2667 <dict>
2668 <key>*</key>
2669 <dict>
2670 <key>blocked_install_message</key>
2671 <string>Custom error message.</string>
2672 <key>install_sources</key>
2673 <array>
2674 <string>about:addons</string>
2675 <string>https://addons.mozilla.org/</string>
2676 </array>
2677 <key>installation_mode</key>
2678 <string>blocked</string>
2679 <key>allowed_types</key>
2680 <array>
2681 <string>extension</string>
2682 </array>
2683 </dict>
2684 <key>uBlock0@raymondhill.net</key>
2685 <dict>
2686 <key>installation_mode</key>
2687 <string>force_installed</string>
2688 <key>install_url</key>
2689 <string>https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi</string>
2690 </dict>
2691 <key>https-everywhere@eff.org</key>
2692 <dict>
2693 <key>installation_mode</key>
2694 <string>allowed</string>
2695 </dict>
2696 </dict>
2697 </dict>
2698 ```
2699 #### policies.json
2700 ```
2701 {
2702 "policies": {
2703 "ExtensionSettings": {
2704 "*": {
2705 "blocked_install_message": "Custom error message.",
2706 "install_sources": ["about:addons","https://addons.mozilla.org/"],
2707 "installation_mode": "blocked",
2708 "allowed_types": ["extension"]
2709 },
2710 "uBlock0@raymondhill.net": {
2711 "installation_mode": "force_installed",
2712 "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
2713 },
2714 "https-everywhere@eff.org": {
2715 "installation_mode": "allowed"
2716 }
2717 }
2718 }
2719 }
2720 ```
2721 ### ExtensionUpdate
2722 Control extension updates.
2723
2724 **Compatibility:** Firefox 67, Firefox ESR 60.7\
2725 **CCK2 Equivalent:** N/A\
2726 **Preferences Affected:** `extensions.update.enabled`
2727
2728 #### Windows (GPO)
2729 ```
2730 Software\Policies\Mozilla\Firefox\ExtensionUpdate = 0x1 | 0x0
2731 ```
2732 #### Windows (Intune)
2733 OMA-URI:
2734 ```
2735 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/ExtensionUpdate
2736 ```
2737 Value (string):
2738 ```
2739 <enabled/> or <disabled/>
2740 ```
2741 #### macOS
2742 ```
2743 <dict>
2744 <key>ExtensionUpdate</key>
2745 <true/> | <false/>
2746 </dict>
2747 ```
2748 #### policies.json
2749 ```
2750 {
2751 "policies": {
2752 "ExtensionUpdate": true | false
2753 }
2754 }
2755 ```
2756 ### FirefoxHome
2757 Customize the Firefox Home page.
2758
2759 **Compatibility:** Firefox 68, Firefox ESR 68 (SponsoredTopSites and SponsoredPocket were added in Firefox 95, Firefox ESR 91.4)
2760 **CCK2 Equivalent:** N/A\
2761 **Preferences Affected:** `browser.newtabpage.activity-stream.showSearch`, `browser.newtabpage.activity-stream.feeds.topsites`, `browser.newtabpage.activity-stream.feeds.section.highlights`, `browser.newtabpage.activity-stream.feeds.section.topstories`, `browser.newtabpage.activity-stream.feeds.snippets`, `browser.newtabpage.activity-stream.showSponsoredTopSites`, `browser.newtabpage.activity-stream.showSponsored`
2762
2763 #### Windows (GPO)
2764 ```
2765 Software\Policies\Mozilla\Firefox\FirefoxHome\Search = 0x1 | 0x0
2766 Software\Policies\Mozilla\Firefox\FirefoxHome\TopSites = 0x1 | 0x0
2767 Software\Policies\Mozilla\Firefox\FirefoxHome\SponsoredTopSites = 0x1 | 0x0
2768 Software\Policies\Mozilla\Firefox\FirefoxHome\Highlights = 0x1 | 0x0
2769 Software\Policies\Mozilla\Firefox\FirefoxHome\Pocket = 0x1 | 0x0
2770 Software\Policies\Mozilla\Firefox\FirefoxHome\SponsoredPocket = 0x1 | 0x0
2771 Software\Policies\Mozilla\Firefox\FirefoxHome\Snippets = 0x1 | 0x0
2772 Software\Policies\Mozilla\Firefox\FirefoxHome\Locked = 0x1 | 0x0
2773 ```
2774 #### Windows (Intune)
2775 OMA-URI:
2776 ```
2777 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/CustomizeFirefoxHome
2778 ```
2779 Value (string):
2780 ```
2781 <enabled/>
2782 <data id="FirefoxHome_Search" value="true | false"/>
2783 <data id="FirefoxHome_TopSites" value="true | false"/>
2784 <data id="FirefoxHome_SponsoredTopSites" value="true | false"/>
2785 <data id="FirefoxHome_Highlights" value="true | false"/>
2786 <data id="FirefoxHome_Pocket" value="true | false"/>
2787 <data id="FirefoxHome_SponsoredPocket" value="true | false"/>
2788 <data id="FirefoxHome_Snippets" value="true | false"/>
2789 <data id="FirefoxHome_Locked" value="true | false"/>
2790 ```
2791 #### macOS
2792 ```
2793 <dict>
2794 <key>FirefoxHome</key>
2795 <dict>
2796 <key>Search</key>
2797 <true/> | <false/>
2798 <key>TopSites</key>
2799 <true/> | <false/>
2800 <key>SponsoredTopSites</key>
2801 <true/> | <false/>
2802 <key>Highlights</key>
2803 <true/> | <false/>
2804 <key>Pocket</key>
2805 <true/> | <false/>
2806 <key>SponsoredPocket</key>
2807 <true/> | <false/>
2808 <key>Snippets</key>
2809 <true/> | <false/>
2810 <key>Locked</key>
2811 <true/> | <false/>
2812 </dict>
2813 </dict>
2814 ```
2815 #### policies.json
2816 ```
2817 {
2818 "policies": {
2819 "FirefoxHome": {
2820 "Search": true | false,
2821 "TopSites": true | false,
2822 "SponsoredTopSites": true | false,
2823 "Highlights": true | false,
2824 "Pocket": true | false,
2825 "SponsoredPocket": true | false,
2826 "Snippets": true | false,
2827 "Locked": true | false
2828 }
2829 }
2830 }
2831 ```
2832 ### FlashPlugin (Deprecated)
2833 Configure the default Flash plugin policy as well as origins for which Flash is allowed.
2834
2835 `Allow` is a list of origins where Flash are allowed.
2836
2837 `Block` is a list of origins where Flash is not allowed.
2838
2839 `Default` determines whether or not Flash is allowed by default.
2840
2841 `Locked` prevents the user from changing Flash preferences.
2842
2843 **Compatibility:** Firefox 60, Firefox ESR 60\
2844 **CCK2 Equivalent:** `permissions.plugin`\
2845 **Preferences Affected:** `plugin.state.flash`
2846
2847 #### Windows (GPO)
2848 ```
2849 Software\Policies\Mozilla\Firefox\FlashPlugin\Allow\1 = "https://example.org"
2850 Software\Policies\Mozilla\Firefox\FlashPlugin\Block\1 = "https://example.edu"
2851 Software\Policies\Mozilla\Firefox\FlashPlugin\Default = 0x1 | 0x0
2852 Software\Policies\Mozilla\Firefox\FlashPlugin\Locked = 0x1 | 0x0
2853 ```
2854 #### Windows (Intune)
2855 OMA-URI:
2856 ```
2857 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Flash/FlashPlugin_Allow
2858 ```
2859 Value (string):
2860 ```
2861 <enabled/>
2862 <data id="Permissions" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
2863 ```
2864 OMA-URI:
2865 ```
2866 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Flash/FlashPlugin_Locked
2867 ```
2868 Value (string):
2869 ```
2870 <enabled/> or <disabled/>
2871 ```
2872 OMA-URI:
2873 ```
2874 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Flash/FlashPlugin_Default
2875 ```
2876 Value (string):
2877 ```
2878 <enabled/> or <disabled/>
2879 ```
2880 #### macOS
2881 ```
2882 <dict>
2883 <key>FlashPlugin</key>
2884 <dict>
2885 <key>Allow</key>
2886 <array>
2887 <string>http://example.org</string>
2888 </array>
2889 <key>Block</key>
2890 <array>
2891 <string>http://example.edu</string>
2892 </array>
2893 <key>Default</key>
2894 <true/> | <false/>
2895 <key>Locked</key>
2896 <true/> | <false/>
2897 </dict>
2898 </dict>
2899 ```
2900 #### policies.json
2901 ```
2902 {
2903 "policies": {
2904 "FlashPlugin": {
2905 "Allow": ["http://example.org/"],
2906 "Block": ["http://example.edu/"],
2907 "Default": true | false,
2908 "Locked": true | false
2909 }
2910 }
2911 }
2912 ```
2913 ### Handlers
2914 Configure default application handlers. This policy is based on the internal format of `handlers.json`.
2915
2916 You can configure handlers based on a mime type (`mimeTypes`), a file's extension (`extensions`), or a protocol (`schemes`).
2917
2918 Within each handler type, you specify the given mimeType/extension/scheme as a key and use the following subkeys to describe how it is handled.
2919
2920 | Name | Description |
2921 | --- | --- |
2922 | `action`| Can be either `saveToDisk`, `useHelperApp`, `useSystemDefault`.
2923 | `ask` | If `true`, the user is asked if what they want to do with the file. If `false`, the action is taken without user intervention.
2924 | `handlers` | An array of handlers with the first one being the default. If you don't want to have a default handler, use an empty object for the first handler. Choose between path or uriTemplate.
2925 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`name` | The display name of the handler (might not be used).
2926 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`path`| The native path to the executable to be used.
2927 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`uriTemplate`| A url to a web based application handler. The URL must be https and contain a %s to be used for substitution.
2928
2929 **Compatibility:** Firefox 78, Firefox ESR 78\
2930 **CCK2 Equivalent:** N/A\
2931 **Preferences Affected:** N/A
2932
2933 #### Windows (GPO)
2934 Software\Policies\Mozilla\Firefox\Handlers (REG_MULTI_SZ) =
2935 ```
2936 {
2937 "mimeTypes": {
2938 "application/msword": {
2939 "action": "useSystemDefault",
2940 "ask": true | false
2941 }
2942 },
2943 "schemes": {
2944 "mailto": {
2945 "action": "useHelperApp",
2946 "ask": true | false,
2947 "handlers": [{
2948 "name": "Gmail",
2949 "uriTemplate": "https://mail.google.com/mail/?extsrc=mailto&url=%s"
2950 }]
2951 }
2952 },
2953 "extensions": {
2954 "pdf": {
2955 "action": "useHelperApp",
2956 "ask": true | false,
2957 "handlers": [{
2958 "name": "Adobe Acrobat",
2959 "path": "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32.exe"
2960 }]
2961 }
2962 }
2963 }
2964 ```
2965 #### Windows (Intune)
2966 OMA-URI:
2967 ```
2968 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Handlers
2969 ```
2970 Value (string):
2971 ```
2972 <enabled/>
2973 <data id="Handlers" value='
2974 {
2975 "mimeTypes": {
2976 "application/msword": {
2977 "action": "useSystemDefault",
2978 "ask": true | false
2979 }
2980 },
2981 "schemes": {
2982 "mailto": {
2983 "action": "useHelperApp",
2984 "ask": true | false,
2985 "handlers": [{
2986 "name": "Gmail",
2987 "uriTemplate": "https://mail.google.com/mail/?extsrc=mailto&amp;url=%s"
2988 }]
2989 }
2990 },
2991 "extensions": {
2992 "pdf": {
2993 "action": "useHelperApp",
2994 "ask": true | false,
2995 "handlers": [{
2996 "name": "Adobe Acrobat",
2997 "path": "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32.exe"
2998 }]
2999 }
3000 }
3001 }
3002 '/>
3003 ```
3004 #### macOS
3005 ```
3006 <dict>
3007 <key>Handlers</key>
3008 <dict>
3009 <key>mimeTypes</key>
3010 <dict>
3011 <key>application/msword</key>
3012 <dict>
3013 <key>action</key>
3014 <string>useSystemDefault</string>
3015 <key>ask</key>
3016 <true/> | <false/>
3017 </dict>
3018 </dict>
3019 <key>schemes</key>
3020 <dict>
3021 <key>mailto</key>
3022 <dict>
3023 <key>action</key>
3024 <string>useHelperApp</string>
3025 <key>ask</key>
3026 <true/> | <false/>
3027 <key>handlers</key>
3028 <array>
3029 <dict>
3030 <key>name</key>
3031 <string>Gmail</string>
3032 <key>uriTemplate</key>
3033 <string>https://mail.google.com/mail/?extsrc=mailto&url=%s</string>
3034 </dict>
3035 </array>
3036 </dict>
3037 </dict>
3038 <key>extensions</key>
3039 <dict>
3040 <key>pdf</key>
3041 <dict>
3042 <key>action</key>
3043 <string>useHelperApp</string>
3044 <key>ask</key>
3045 <true/> | <false/>
3046 <key>handlers</key>
3047 <array>
3048 <dict>
3049 <key>name</key>
3050 <string>Adobe Acrobat</string>
3051 <key>path</key>
3052 <string>/System/Applications/Preview.app</string>
3053 </dict>
3054 </array>
3055 </dict>
3056 </dict>
3057 </dict>
3058 </dict>
3059 ```
3060 #### policies.json
3061 ```
3062 {
3063 "policies": {
3064 "Handlers": {
3065 "mimeTypes": {
3066 "application/msword": {
3067 "action": "useSystemDefault",
3068 "ask": false
3069 }
3070 },
3071 "schemes": {
3072 "mailto": {
3073 "action": "useHelperApp",
3074 "ask": true | false,
3075 "handlers": [{
3076 "name": "Gmail",
3077 "uriTemplate": "https://mail.google.com/mail/?extsrc=mailto&url=%s"
3078 }]
3079 }
3080 },
3081 "extensions": {
3082 "pdf": {
3083 "action": "useHelperApp",
3084 "ask": true | false,
3085 "handlers": [{
3086 "name": "Adobe Acrobat",
3087 "path": "/usr/bin/acroread"
3088 }]
3089 }
3090 }
3091 }
3092 }
3093 }
3094 ```
3095 ### HardwareAcceleration
3096 Control hardware acceleration.
3097
3098 **Compatibility:** Firefox 60, Firefox ESR 60\
3099 **CCK2 Equivalent:** N/A\
3100 **Preferences Affected:** `layers.acceleration.disabled`
3101
3102 #### Windows (GPO)
3103 ```
3104 Software\Policies\Mozilla\Firefox\HardwareAcceleration = 0x1 | 0x0
3105 ```
3106 #### Windows (Intune)
3107 OMA-URI:
3108 ```
3109 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/HardwareAcceleration
3110 ```
3111 Value (string):
3112 ```
3113 <enabled/> or <disabled/>
3114 ```
3115 #### macOS
3116 ```
3117 <dict>
3118 <key>HardwareAcceleration</key>
3119 <true/> | <false/>
3120 </dict>
3121 ```
3122 #### policies.json
3123 ```
3124 {
3125 "policies": {
3126 "HardwareAcceleration": true | false
3127 }
3128 }
3129 ```
3130 ### Homepage
3131 Configure the default homepage and how Firefox starts.
3132
3133 `URL` is the default homepage.
3134
3135 `Locked` prevents the user from changing homepage preferences.
3136
3137 `Additional` allows for more than one homepage.
3138
3139 `StartPage` is how Firefox starts. The choices are no homepage, the default homepage or the previous session.
3140
3141 With Firefox 78, an additional option as added for `Startpage`, `homepage-locked`. If this is value is set for the Startpage, the user will always get the homepage at startup and cannot choose to restore their session.
3142
3143 **Compatibility:** Firefox 60, Firefox ESR 60 (StartPage was added in Firefox 60, Firefox ESR 60.4, homepage-locked added in Firefox 78)\
3144 **CCK2 Equivalent:** `homePage`,`lockHomePage`\
3145 **Preferences Affected:** `browser.startup.homepage`, `browser.startup.page`
3146
3147 #### Windows (GPO)
3148 ```
3149 Software\Policies\Mozilla\Firefox\Homepage\URL = "https://example.com"
3150 Software\Policies\Mozilla\Firefox\Homepage\Locked = 0x1 | 0x0
3151 Software\Policies\Mozilla\Firefox\Homepage\Additional\1 = "https://example.org"
3152 Software\Policies\Mozilla\Firefox\Homepage\Additional\2 = "https://example.edu"
3153 Software\Policies\Mozilla\Firefox\Homepage\StartPage = "none" | "homepage" | "previous-session" | "homepage-locked"
3154 ```
3155 #### Windows (Intune)
3156 OMA-URI:
3157 ```
3158 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageURL
3159 ```
3160 Value (string):
3161 ```
3162 <enabled/>
3163
3164 <data id="HomepageURL" value="https://example.com"/>
3165 <data id="HomepageLocked" value="true | false"/>
3166 ```
3167 OMA-URI:
3168 ```
3169 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageAdditional
3170 ```
3171 Value (string):
3172 ```
3173 <enabled/>
3174
3175 <data id="HomepageAdditional" value="1&#xF000;http://example.org&#xF000;2&#xF000;http://example.edu"/>
3176 ```
3177 OMA-URI:
3178 ```
3179 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageStartPage
3180 ```
3181 Value (string):
3182 ```
3183 <enabled/>
3184
3185 <data id="StartPage" value="none | homepage | previous-session"/>
3186 ```
3187 #### macOS
3188 ```
3189 <dict>
3190 <key>Homepage</key>
3191 <dict>
3192 <key>URL</key>
3193 <string>http://example.com</string>
3194 <key>Locked</key>
3195 <true/> | <false/>
3196 <key>Additional</key>
3197 <array>
3198 <string>http://example.org</string>
3199 <string>http://example.edu</string>
3200 </array>
3201 <key>StartPage</key>
3202 <string>none | homepage | previous-session | homepage-locked</string>
3203 </dict>
3204 </dict>
3205 ```
3206 #### policies.json
3207 ```
3208 {
3209 "policies": {
3210 "Homepage": {
3211 "URL": "http://example.com/",
3212 "Locked": true | false,
3213 "Additional": ["http://example.org/",
3214 "http://example.edu/"],
3215 "StartPage": "none" | "homepage" | "previous-session" | "homepage-locked"
3216 }
3217 }
3218 }
3219 ```
3220 ### InstallAddonsPermission
3221 Configure the default extension install policy as well as origins for extension installs are allowed. This policy does not override turning off all extension installs.
3222
3223 `Allow` is a list of origins where extension installs are allowed.
3224
3225 `Default` determines whether or not extension installs are allowed by default.
3226
3227 **Compatibility:** Firefox 60, Firefox ESR 60\
3228 **CCK2 Equivalent:** `permissions.install`\
3229 **Preferences Affected:** `xpinstall.enabled`
3230
3231 #### Windows (GPO)
3232 ```
3233 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Allow\1 = "https://example.org"
3234 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Allow\2 = "https://example.edu"
3235 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Default = 0x1 | 0x0
3236 ```
3237 #### Windows (Intune)
3238 OMA-URI:
3239 ```
3240 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Addons/InstallAddonsPermission_Allow
3241 ```
3242 Value (string):
3243 ```
3244 <enabled/>
3245 <data id="Permissions" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
3246 ```
3247 OMA-URI:
3248 ```
3249 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Addons/InstallAddonsPermission_Default
3250 ```
3251 Value (string):
3252 ```
3253 <enabled/>
3254 ```
3255 #### macOS
3256 ```
3257 <dict>
3258 <key>InstallAddonsPermission</key>
3259 <dict>
3260 <key>Allow</key>
3261 <array>
3262 <string>http://example.org</string>
3263 <string>http://example.edu</string>
3264 </array>
3265 <key>Default</key>
3266 <true/> | <false/>
3267 </dict>
3268 </dict>
3269 ```
3270 #### policies.json
3271 ```
3272 {
3273 "policies": {
3274 "InstallAddonsPermission": {
3275 "Allow": ["http://example.org/",
3276 "http://example.edu/"],
3277 "Default": true | false
3278 }
3279 }
3280 }
3281 ```
3282 ### LegacyProfiles
3283 Disable the feature enforcing a separate profile for each installation.
3284
3285 If this policy set to true, Firefox will not try to create different profiles for installations of Firefox in different directories. This is the equivalent of the MOZ_LEGACY_PROFILES environment variable.
3286
3287 If this policy set to false, Firefox will create a new profile for each unique installation of Firefox.
3288
3289 This policy only work on Windows via GPO (not policies.json).
3290
3291 **Compatibility:** Firefox 70, Firefox ESR 68.2 (Windows only, GPO only)\
3292 **CCK2 Equivalent:** N/A\
3293 **Preferences Affected:** N/A
3294
3295 #### Windows (GPO)
3296 ```
3297 Software\Policies\Mozilla\Firefox\LegacyProfiles = = 0x1 | 0x0
3298 ```
3299 #### Windows (Intune)
3300 OMA-URI:
3301 ```
3302 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/LegacyProfiles
3303 ```
3304 Value (string):
3305 ```
3306 <enabled/> or <disabled/>
3307 ```
3308 ### LegacySameSiteCookieBehaviorEnabled
3309 Enable default legacy SameSite cookie behavior setting.
3310
3311 If this policy is set to true, it reverts all cookies to legacy SameSite behavior which means that cookies that don't explicitly specify a ```SameSite``` attribute are treated as if they were ```SameSite=None```.
3312
3313 **Compatibility:** Firefox 96\
3314 **CCK2 Equivalent:** N/A\
3315 **Preferences Affected:** `network.cookie.sameSite.laxByDefault`
3316
3317 #### Windows (GPO)
3318 ```
3319 Software\Policies\Mozilla\Firefox\LegacySameSiteCookieBehaviorEnabled = = 0x1 | 0x0
3320 ```
3321 #### Windows (Intune)
3322 OMA-URI:
3323 ```
3324 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/LegacySameSiteCookieBehaviorEnabled
3325 ```
3326 Value (string):
3327 ```
3328 <enabled/> or <disabled/>
3329 ```
3330 #### macOS
3331 ```
3332 <dict>
3333 <key>LegacySameSiteCookieBehaviorEnabled</key>
3334 <true/> | <false/>
3335 </dict>
3336 ```
3337 #### policies.json
3338 ```
3339 {
3340 "policies": {
3341 "LegacySameSiteCookieBehaviorEnabled": true | false
3342 }
3343 ```
3344 ### LegacySameSiteCookieBehaviorEnabledForDomainList
3345 Revert to legacy SameSite behavior for cookies on specified sites.
3346
3347 If this policy is set to true, cookies set for domains in this list will revert to legacy SameSite behavior which means that cookies that don't explicitly specify a ```SameSite``` attribute are treated as if they were ```SameSite=None```.
3348
3349 **Compatibility:** Firefox 96\
3350 **CCK2 Equivalent:** N/A\
3351 **Preferences Affected:** `network.cookie.sameSite.laxByDefault.disabledHosts`
3352
3353 #### Windows (GPO)
3354 ```
3355 Software\Policies\Mozilla\Firefox\LegacySameSiteCookieBehaviorEnabledForDomainList\1 = "example.org"
3356 Software\Policies\Mozilla\Firefox\LegacySameSiteCookieBehaviorEnabledForDomainList\2 = "example.edu"
3357 ```
3358 #### Windows (Intune)
3359 OMA-URI:
3360 ```
3361 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/LegacySameSiteCookieBehaviorEnabledForDomainList
3362 ```
3363 Value (string):
3364 ```
3365 <enabled/>
3366 <data id="LegacySameSiteCookieBehaviorEnabledForDomainList" value="1&#xF000;example.org&#xF000;2&#xF000;example.edu"/>
3367 ```
3368 #### macOS
3369 ```
3370 <dict>
3371 <key>LegacySameSiteCookieBehaviorEnabledForDomainList</key>
3372 <array>
3373 <string>example.org</string>
3374 <string>example.edu</string>
3375 </array>
3376 </dict>
3377 ```
3378 #### policies.json
3379 ```
3380 {
3381 "policies": {
3382 "LegacySameSiteCookieBehaviorEnabledForDomainList": ["example.org",
3383 "example.edu"]
3384 }
3385 }
3386 ```
3387 ### LocalFileLinks
3388 Enable linking to local files by origin.
3389
3390 **Compatibility:** Firefox 68, Firefox ESR 68\
3391 **CCK2 Equivalent:** N/A\
3392 **Preferences Affected:** `capability.policy.localfilelinks.*`
3393
3394 #### Windows (GPO)
3395 ```
3396 Software\Policies\Mozilla\Firefox\LocalFileLinks\1 = "https://example.org"
3397 Software\Policies\Mozilla\Firefox\LocalFileLinks\2 = "https://example.edu"
3398 ```
3399 #### Windows (Intune)
3400 OMA-URI:
3401 ```
3402 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/LocalFileLinks
3403 ```
3404 Value (string):
3405 ```
3406 <enabled/>
3407 <data id="LocalFileLinks" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
3408 ```
3409 #### macOS
3410 ```
3411 <dict>
3412 <key>LocalFileLinks</key>
3413 <array>
3414 <string>http://example.org</string>
3415 <string>http://example.edu</string>
3416 </array>
3417 </dict>
3418 ```
3419 #### policies.json
3420 ```
3421 {
3422 "policies": {
3423 "LocalFileLinks": ["http://example.org/",
3424 "http://example.edu/"]
3425 }
3426 }
3427 ```
3428 ### ManagedBookmarks
3429 Configures a list of bookmarks managed by an administrator that cannot be changed by the user.
3430
3431 The bookmarks are only added as a button on the personal toolbar. They are not in the bookmarks folder.
3432
3433 The syntax of this policy is exactly the same as the [Chrome ManagedBookmarks policy](https://cloud.google.com/docs/chrome-enterprise/policies/?policy=ManagedBookmarks). The schema is:
3434 ```
3435 {
3436 "items": {
3437 "id": "BookmarkType",
3438 "properties": {
3439 "children": {
3440 "items": {
3441 "$ref": "BookmarkType"
3442 },
3443 "type": "array"
3444 },
3445 "name": {
3446 "type": "string"
3447 },
3448 "toplevel_name": {
3449 "type": "string"
3450 },
3451 "url": {
3452 "type": "string"
3453 }
3454 },
3455 "type": "object"
3456 },
3457 "type": "array"
3458 }
3459 ```
3460 **Compatibility:** Firefox 83, Firefox ESR 78.5\
3461 **CCK2 Equivalent:** N/A\
3462 **Preferences Affected:** N/A
3463
3464 #### Windows (GPO)
3465 Software\Policies\Mozilla\Firefox\ManagedBookmarks (REG_MULTI_SZ) =
3466 ```
3467 [
3468 {
3469 "toplevel_name": "My managed bookmarks folder"
3470 },
3471 {
3472 "url": "example.com",
3473 "name": "Example"
3474 },
3475 {
3476 "name": "Mozilla links",
3477 "children": [
3478 {
3479 "url": "https://mozilla.org",
3480 "name": "Mozilla.org"
3481 },
3482 {
3483 "url": "https://support.mozilla.org/",
3484 "name": "SUMO"
3485 }
3486 ]
3487 }
3488 ]
3489 ```
3490 #### Windows (Intune)
3491 OMA-URI:
3492 ```
3493 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/ManagedBookmarks
3494 ```
3495 Value (string):
3496 ```
3497 <enabled/>
3498 <data id="JSON" value='
3499 [
3500 {
3501 "toplevel_name": "My managed bookmarks folder"
3502 },
3503 {
3504 "url": "example.com",
3505 "name": "Example"
3506 },
3507 {
3508 "name": "Mozilla links",
3509 "children": [
3510 {
3511 "url": "https://mozilla.org",
3512 "name": "Mozilla.org"
3513 },
3514 {
3515 "url": "https://support.mozilla.org/",
3516 "name": "SUMO"
3517 }
3518 ]
3519 }
3520 ]'/>
3521 ```
3522 #### macOS
3523 ```
3524 <dict>
3525 <key>ManagedBookmarks</key>
3526 <array>
3527 <dict>
3528 <key>toplevel_name</key>
3529 <string>My managed bookmarks folder</string>
3530 <dict>
3531 <key>url</key>
3532 <string>example.com</string>
3533 <key>name</key>
3534 <string>Example</string>
3535 </dict>
3536 <dict>
3537 <key>name</key>
3538 <string>Mozilla links</string>
3539 <key>children</key>
3540 <array>
3541 <dict>
3542 <key>url</key>
3543 <string>https://mozilla.org</string>
3544 <key>name</key>
3545 <string>Mozilla</string>
3546 </dict>
3547 <dict>
3548 <key>url</key>
3549 <string>https://support.mozilla.org/</string>
3550 <key>name</key>
3551 <string>SUMO</string>
3552 </dict>
3553 </array>
3554 </dict>
3555 </array>
3556 </dict>
3557 ```
3558 #### policies.json
3559 ```
3560 {
3561 "policies": {
3562 "ManagedBookmarks": [
3563 {
3564 "toplevel_name": "My managed bookmarks folder"
3565 },
3566 {
3567 "url": "example.com",
3568 "name": "Example"
3569 },
3570 {
3571 "name": "Mozilla links",
3572 "children": [
3573 {
3574 "url": "https://mozilla.org",
3575 "name": "Mozilla.org"
3576 },
3577 {
3578 "url": "https://support.mozilla.org/",
3579 "name": "SUMO"
3580 }
3581 ]
3582 }
3583 ]
3584 }
3585 }
3586 ```
3587 ### ManualAppUpdateOnly
3588
3589 Switch to manual updates only.
3590
3591 If this policy is enabled:
3592 1. The user will never be prompted to install updates
3593 2. Firefox will not check for updates in the background, though it will check automatically when an update UI is displayed (such as the one in the About dialog). This check will be used to show "Update to version X" in the UI, but will not automatically download the update or prompt the user to update in any other way.
3594 3. The update UI will work as expected, unlike when using DisableAppUpdate.
3595
3596 This policy is primarily intended for advanced end users, not for enterprises.
3597
3598 **Compatibility:** Firefox 87\
3599 **CCK2 Equivalent:** N/A\
3600 **Preferences Affected:** N/A
3601
3602 #### policies.json
3603 ```
3604 {
3605 "policies": {
3606 "ManualAppUpdateOnly": true | false
3607 }
3608 }
3609 ```
3610 ### NetworkPrediction
3611 Enable or disable network prediction (DNS prefetching).
3612
3613 **Compatibility:** Firefox 67, Firefox ESR 60.7\
3614 **CCK2 Equivalent:** N/A\
3615 **Preferences Affected:** `network.dns.disablePrefetch`, `network.dns.disablePrefetchFromHTTPS`
3616
3617 #### Windows (GPO)
3618 ```
3619 Software\Policies\Mozilla\Firefox\NetworkPrediction = 0x1 | 0x0
3620 ```
3621 #### Windows (Intune)
3622 OMA-URI:
3623 ```
3624 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NetworkPrediction
3625 ```
3626 Value (string):
3627 ```
3628 <enabled/> or <disabled/>
3629 ```
3630 #### macOS
3631 ```
3632 <dict>
3633 <key>NetworkPrediction</key>
3634 <true/> | <false/>
3635 </dict>
3636 ```
3637 #### policies.json
3638 ```
3639 {
3640 "policies": {
3641 "NetworkPrediction": true | false
3642 }
3643 ```
3644 ### NewTabPage
3645 Enable or disable the New Tab page.
3646
3647 **Compatibility:** Firefox 68, Firefox ESR 68\
3648 **CCK2 Equivalent:** N/A\
3649 **Preferences Affected:** `browser.newtabpage.enabled`
3650
3651 #### Windows (GPO)
3652 ```
3653 Software\Policies\Mozilla\Firefox\NewTabPage = 0x1 | 0x0
3654 ```
3655 #### Windows (Intune)
3656 OMA-URI:
3657 ```
3658 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NewTabPage
3659 ```
3660 Value (string):
3661 ```
3662 <enabled/> or <disabled/>
3663 ```
3664 #### macOS
3665 ```
3666 <dict>
3667 <key>NewTabPage</key>
3668 <true/> | <false/>
3669 </dict>
3670 ```
3671 #### policies.json
3672 ```
3673 {
3674 "policies": {
3675 "NewTabPage": true | false
3676 }
3677 ```
3678 ### NoDefaultBookmarks
3679 Disable the creation of default bookmarks.
3680
3681 This policy is only effective if the user profile has not been created yet.
3682
3683 **Compatibility:** Firefox 60, Firefox ESR 60\
3684 **CCK2 Equivalent:** `removeDefaultBookmarks`\
3685 **Preferences Affected:** N/A
3686
3687 #### Windows (GPO)
3688 ```
3689 Software\Policies\Mozilla\Firefox\NoDefaultBookmarks = 0x1 | 0x0
3690 ```
3691 #### Windows (Intune)
3692 OMA-URI:
3693 ```
3694 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NoDefaultBookmarks
3695 ```
3696 Value (string):
3697 ```
3698 <enabled/> or <disabled/>
3699 ```
3700 #### macOS
3701 ```
3702 <dict>
3703 <key>NoDefaultBookmarks</key>
3704 <true/> | <false/>
3705 </dict>
3706 ```
3707 #### policies.json
3708 ```
3709 {
3710 "policies": {
3711 "NoDefaultBookmarks": true | false
3712 }
3713 }
3714 ```
3715 ### OfferToSaveLogins
3716 Control whether or not Firefox offers to save passwords.
3717
3718 **Compatibility:** Firefox 60, Firefox ESR 60\
3719 **CCK2 Equivalent:** `dontRememberPasswords`\
3720 **Preferences Affected:** `signon.rememberSignons`
3721
3722 #### Windows (GPO)
3723 ```
3724 Software\Policies\Mozilla\Firefox\OfferToSaveLogins = 0x1 | 0x0
3725 ```
3726 #### Windows (Intune)
3727 OMA-URI:
3728 ```
3729 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OfferToSaveLogins
3730 ```
3731 Value (string):
3732 ```
3733 <enabled/> or <disabled/>
3734 ```
3735 #### macOS
3736 ```
3737 <dict>
3738 <key>OfferToSaveLogins</key>
3739 <true/> | <false/>
3740 </dict>
3741 ```
3742 #### policies.json
3743 ```
3744 {
3745 "policies": {
3746 "OfferToSaveLogins": true | false
3747 }
3748 }
3749 ```
3750 ### OfferToSaveLoginsDefault
3751 Sets the default value of signon.rememberSignons without locking it.
3752
3753 **Compatibility:** Firefox 70, Firefox ESR 60.2\
3754 **CCK2 Equivalent:** `dontRememberPasswords`\
3755 **Preferences Affected:** `signon.rememberSignons`
3756
3757 #### Windows (GPO)
3758 ```
3759 Software\Policies\Mozilla\Firefox\OfferToSaveLoginsDefault = 0x1 | 0x0
3760 ```
3761 #### Windows (Intune)
3762 OMA-URI:
3763 ```
3764 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OfferToSaveLoginsDefault
3765 ```
3766 Value (string):
3767 ```
3768 <enabled/> or <disabled/>
3769 ```
3770 #### macOS
3771 ```
3772 <dict>
3773 <key>OfferToSaveLoginsDefault</key>
3774 <true/> | <false/>
3775 </dict>
3776 ```
3777 #### policies.json
3778 ```
3779 {
3780 "policies": {
3781 "OfferToSaveLoginsDefault": true | false
3782 }
3783 }
3784 ```
3785 ### OverrideFirstRunPage
3786 Override the first run page. If the value is an empty string (""), the first run page is not displayed.
3787
3788 Starting with Firefox 83, Firefox ESR 78.5, you can also specify multiple URLS separated by a vertical bar (|).
3789
3790 **Compatibility:** Firefox 60, Firefox ESR 60\
3791 **CCK2 Equivalent:** `welcomePage`,`noWelcomePage`\
3792 **Preferences Affected:** `startup.homepage_welcome_url`
3793
3794 #### Windows (GPO)
3795 ```
3796 Software\Policies\Mozilla\Firefox\OverrideFirstRunPage = "http://example.org"
3797 ```
3798 #### Windows (Intune)
3799 OMA-URI:
3800 ```
3801 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OverrideFirstRunPage
3802 ```
3803 Value (string):
3804 ```
3805 <enabled/>
3806 <data id="OverridePage" value="https://example.com"/>
3807 ```
3808 #### macOS
3809 ```
3810 <dict>
3811 <key>OverrideFirstRunPage</key>
3812 <string>http://example.org</string>
3813 </dict>
3814 ```
3815 #### policies.json
3816 ```
3817 {
3818 "policies": {
3819 "OverrideFirstRunPage": "http://example.org"
3820 }
3821 }
3822 ```
3823 ### OverridePostUpdatePage
3824 Override the upgrade page. If the value is an empty string (""), no extra pages are displayed when Firefox is upgraded.
3825
3826 **Compatibility:** Firefox 60, Firefox ESR 60\
3827 **CCK2 Equivalent:** `upgradePage`,`noUpgradePage`\
3828 **Preferences Affected:** `startup.homepage_override_url`
3829
3830 #### Windows (GPO)
3831 ```
3832 Software\Policies\Mozilla\Firefox\OverridePostUpdatePage = "http://example.org"
3833 ```
3834 #### Windows (Intune)
3835 OMA-URI:
3836 ```
3837 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OverridePostUpdatePage
3838 ```
3839 Value (string):
3840 ```
3841 <enabled/>
3842 <data id="OverridePage" value="https://example.com"/>
3843 ```
3844 #### macOS
3845 ```
3846 <dict>
3847 <key>OverridePostUpdatePage</key>
3848 <string>http://example.org</string>
3849 </dict>
3850 ```
3851 #### policies.json
3852 ```
3853 {
3854 "policies": {
3855 "OverridePostUpdatePage": "http://example.org"
3856 }
3857 }
3858 ```
3859 ### PasswordManagerEnabled
3860 Remove access to the password manager via preferences and blocks about:logins on Firefox 70.
3861
3862 **Compatibility:** Firefox 70, Firefox ESR 60.2\
3863 **CCK2 Equivalent:** N/A\
3864 **Preferences Affected:** `pref.privacy.disable_button.view_passwords`
3865
3866 #### Windows (GPO)
3867 ```
3868 Software\Policies\Mozilla\Firefox\PasswordManagerEnabled = 0x1 | 0x0
3869 ```
3870 #### Windows (Intune)
3871 OMA-URI:
3872 ```
3873 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PasswordManagerEnabled
3874 ```
3875 Value (string):
3876 ```
3877 <enabled/> or <disabled/>
3878 ```
3879 #### macOS
3880 ```
3881 <dict>
3882 <key>PasswordManagerEnabled</key>
3883 <true/> | <false/>
3884 </dict>
3885 ```
3886 #### policies.json
3887 ```
3888 {
3889 "policies": {
3890 "PasswordManagerEnabled": true | false
3891 }
3892 }
3893 ```
3894 ### PasswordManagerExceptions
3895 Prevent Firefox from saving passwords for specific sites.
3896
3897 The sites are specified as a list of origins.
3898
3899 **Compatibility:** Firefox 101\
3900 **CCK2 Equivalent:** N/A\
3901 **Preferences Affected:** N/A
3902
3903 #### Windows (GPO)
3904 ```
3905 Software\Policies\Mozilla\Firefox\PasswordManagerExceptions\1 = "https://example.org"
3906 Software\Policies\Mozilla\Firefox\PasswordManagerExceptions\2 = "https://example.edu"
3907 ```
3908 #### Windows (Intune)
3909 OMA-URI:
3910 ```
3911 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PasswordManagerExceptions
3912 ```
3913 Value (string):
3914 ```
3915 <enabled/>
3916 <data id="List" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
3917 ```
3918 #### macOS
3919 ```
3920 <dict>
3921 <key>PasswordManagerExceptions</key>
3922 <array>
3923 <string>https://example.org</string>
3924 <string>https://example.edu</string>
3925 </array>
3926 </dict>
3927 ```
3928 #### policies.json
3929 ```
3930 {
3931 "policies": {
3932 "PasswordManagerExceptions": ["https://example.org",
3933 "https://example.edu"]
3934 }
3935 }
3936 ```
3937
3938 ### PDFjs
3939 Disable or configure PDF.js, the built-in PDF viewer.
3940
3941 If `Enabled` is set to false, the built-in PDF viewer is disabled.
3942
3943 If `EnablePermissions` is set to true, the built-in PDF viewer will honor document permissions like preventing the copying of text.
3944
3945 Note: DisableBuiltinPDFViewer has not been deprecated. You can either continue to use it, or switch to using PDFjs->Enabled to disable the built-in PDF viewer. This new permission was added because we needed a place for PDFjs->EnabledPermissions.
3946
3947 **Compatibility:** Firefox 77, Firefox ESR 68.9\
3948 **CCK2 Equivalent:** N/A\
3949 **Preferences Affected:** `pdfjs.diabled`, `pdfjs.enablePermissions`
3950
3951 #### Windows (GPO)
3952 ```
3953 Software\Policies\Mozilla\Firefox\PDFjs\Enabled = 0x1 | 0x0
3954 Software\Policies\Mozilla\Firefox\PDFjs\EnablePermissions = 0x1 | 0x0
3955 ```
3956 #### Windows (Intune)
3957 OMA-URI:
3958 ```
3959 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PDFjs/PDFjs_Enabled
3960 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PDFjs/PDFjs_EnablePermissions
3961 ```
3962 Value (string):
3963 ```
3964 <enabled/>or <disabled/>
3965 ```
3966 #### macOS
3967 ```
3968 <dict>
3969 <key>PDFjs</key>
3970 <dict>
3971 <key>Enabled</key>
3972 <true/> | <false/>
3973 <key>EnablePermissions</key>
3974 <true/> | <false/>
3975 </dict>
3976 </dict>
3977 ```
3978 #### policies.json
3979 ```
3980 {
3981 "policies": {
3982 "PDFjs": {
3983 "Enabled": true | false,
3984 "EnablePermissions": true | false
3985 }
3986 }
3987 }
3988 ```
3989 ### Permissions
3990 Set permissions associated with camera, microphone, location, notifications, autoplay, and virtual reality. Because these are origins, not domains, entries with unique ports must be specified separately. This explicitly means that it is not possible to add wildcards. See examples below.
3991
3992 `Allow` is a list of origins where the feature is allowed.
3993
3994 `Block` is a list of origins where the feature is not allowed.
3995
3996 `BlockNewRequests` determines whether or not new requests can be made for the feature.
3997
3998 `Locked` prevents the user from changing preferences for the feature.
3999
4000 `Default` specifies the default value for Autoplay. block-audio-video is not supported on Firefox ESR 68.
4001
4002 **Compatibility:** Firefox 62, Firefox ESR 60.2 (Autoplay added in Firefox 74, Firefox ESR 68.6, Autoplay Default/Locked added in Firefox 76, Firefox ESR 68.8, VirtualReality added in Firefox 80, Firefox ESR 78.2)\
4003 **CCK2 Equivalent:** N/A\
4004 **Preferences Affected:** `permissions.default.camera`, `permissions.default.microphone`, `permissions.default.geo`, `permissions.default.desktop-notification`, `media.autoplay.default`, `permissions.default.xr`
4005
4006 #### Windows (GPO)
4007 ```
4008 Software\Policies\Mozilla\Firefox\Permissions\Camera\Allow\1 = "https://example.org"
4009 Software\Policies\Mozilla\Firefox\Permissions\Camera\Allow\2 = "https://example.org:1234"
4010 Software\Policies\Mozilla\Firefox\Permissions\Camera\Block\1 = "https://example.edu"
4011 Software\Policies\Mozilla\Firefox\Permissions\Camera\BlockNewRequests = 0x1 | 0x0
4012 Software\Policies\Mozilla\Firefox\Permissions\Camera\Locked = 0x1 | 0x0
4013 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Allow\1 = "https://example.org"
4014 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Block\1 = "https://example.edu"
4015 Software\Policies\Mozilla\Firefox\Permissions\Microphone\BlockNewRequests = 0x1 | 0x0
4016 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Locked = 0x1 | 0x0
4017 Software\Policies\Mozilla\Firefox\Permissions\Location\Allow\1 = "https://example.org"
4018 Software\Policies\Mozilla\Firefox\Permissions\Location\Block\1 = "https://example.edu"
4019 Software\Policies\Mozilla\Firefox\Permissions\Location\BlockNewRequests = 0x1 | 0x0
4020 Software\Policies\Mozilla\Firefox\Permissions\Location\Locked = 0x1 | 0x0
4021 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Allow\1 = "https://example.org"
4022 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Block\1 = "https://example.edu"
4023 Software\Policies\Mozilla\Firefox\Permissions\Notifications\BlockNewRequests = 0x1 | 0x0
4024 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Locked = 0x1 | 0x0
4025 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Allow\1 = "https://example.org"
4026 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Block\1 = "https://example.edu"
4027 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Default = "allow-audio-video" | "block-audio" | "block-audio-video"
4028 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Locked = 0x1 | 0x0
4029 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\Allow\1 = "https://example.org"
4030 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\Block\1 = "https://example.edu"
4031 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\BlockNewRequests = 0x1 | 0x0
4032 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\Locked = 0x1 | 0x0
4033 ```
4034 #### Windows (Intune)
4035 OMA-URI:
4036 ```
4037 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Location/Location_BlockNewRequests
4038 ```
4039 Value (string):
4040 ```
4041 <enabled/> or <disabled/>
4042 ```
4043 OMA-URI:
4044 ```
4045 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Location/Location_Locked
4046 ```
4047 Value (string):
4048 ```
4049 <enabled/> or <disabled/>
4050 ```
4051 OMA-URI:
4052 ```
4053 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_Allow
4054 ```
4055 Value (string):
4056 ```
4057 <enabled/>
4058 <data id="Permissions" value="1&#xF000;https://example.org"/>
4059 ```
4060 OMA-URI:
4061 ```
4062 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_BlockNewRequests
4063 ```
4064 Value (string):
4065 ```
4066 <enabled/> or <disabled/>
4067 ```
4068 OMA-URI:
4069 ```
4070 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_Locked
4071 ```
4072 Value (string):
4073 ```
4074 <enabled/> or <disabled/>
4075 ```
4076 OMA-URI:
4077 ```
4078 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Allow
4079 ```
4080 Value (string):
4081 ```
4082 <enabled/>
4083 <data id="Permissions" value="1&#xF000;https://example.org"/>
4084 ```
4085 OMA-URI:
4086 ```
4087 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Block
4088 ```
4089 Value (string):
4090 ```
4091 <enabled/>
4092 <data id="Permissions" value="1&#xF000;https://example.edu"/>
4093 ```
4094 OMA-URI:
4095 ```
4096 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Default
4097 ```
4098 Value (string):
4099 ```
4100 <enabled/>
4101 <data id="Autoplay_Default" value="allow-audio-video | block-audio | block-audio-video"/>
4102 ```
4103 OMA-URI:
4104 ```
4105 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Locked
4106 ```
4107 Value (string):
4108 ```
4109 <enabled/> or <disabled/>
4110 ```
4111 OMA-URI:
4112 ```
4113 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_Allow
4114 ```
4115 Value (string):
4116 ```
4117 <enabled/>
4118 <data id="Permissions" value="1&#xF000;https://example.org"/>
4119 ```
4120 OMA-URI:
4121 ```
4122 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_Block
4123 ```
4124 Value (string):
4125 ```
4126 <enabled/>
4127 <data id="Permissions" value="1&#xF000;https://example.edu"/>
4128 ```
4129 OMA-URI:
4130 ```
4131 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_BlockNewRequests
4132 ```
4133 Value (string):
4134 ```
4135 <enabled/> or <disabled/>
4136 ```
4137 OMA-URI:
4138 ```
4139 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_Locked
4140 ```
4141 Value (string):
4142 ```
4143 <enabled/> or <disabled/>
4144 ```
4145 #### macOS
4146 ```
4147 <dict>
4148 <key>Permissions</key>
4149 <dict>
4150 <key>Camera</key>
4151 <dict>
4152 <key>Allow</key>
4153 <array>
4154 <string>https://example.org</string>
4155 <string>https://example.org:1234</string>
4156 </array>
4157 <key>Block</key>
4158 <array>
4159 <string>https://example.edu</string>
4160 </array>
4161 <key>BlockNewRequests</key>
4162 <true/> | <false/>
4163 <key>Locked</key>
4164 <true/> | <false/>
4165 </dict>
4166 <key>Microphone</key>
4167 <dict>
4168 <key>Allow</key>
4169 <array>
4170 <string>https://example.org</string>
4171 </array>
4172 <key>Block</key>
4173 <array>
4174 <string>https://example.edu</string>
4175 </array>
4176 <key>BlockNewRequests</key>
4177 <true/> | <false/>
4178 <key>Locked</key>
4179 <true/> | <false/>
4180 </dict>
4181 <key>Location</key>
4182 <dict>
4183 <key>Allow</key>
4184 <array>
4185 <string>https://example.org</string>
4186 </array>
4187 <key>Block</key>
4188 <array>
4189 <string>https://example.edu</string>
4190 </array>
4191 <key>BlockNewRequests</key>
4192 <true/> | <false/>
4193 <key>Locked</key>
4194 <true/> | <false/>
4195 </dict>
4196 <key>Notifications</key>
4197 <dict>
4198 <key>Allow</key>
4199 <array>
4200 <string>https://example.org</string>
4201 </array>
4202 <key>Block</key>
4203 <array>
4204 <string>https://example.edu</string>
4205 </array>
4206 <key>BlockNewRequests</key>
4207 <true/>
4208 <key>Locked</key>
4209 <true/>
4210 </dict>
4211 <key>Autoplay</key>
4212 <dict>
4213 <key>Allow</key>
4214 <array>
4215 <string>https://example.org</string>
4216 </array>
4217 <key>Block</key>
4218 <array>
4219 <string>https://example.edu</string>
4220 </array>
4221 <key>Default</key>
4222 <string>allow-audio-video | block-audio | block-audio-video</string>
4223 <key>Locked</key>
4224 <true/> | <false/>
4225 </dict>
4226 </dict>
4227 </dict>
4228 ```
4229 #### policies.json
4230 ```
4231 {
4232 "policies": {
4233 "Permissions": {
4234 "Camera": {
4235 "Allow": ["https://example.org","https://example.org:1234"],
4236 "Block": ["https://example.edu"],
4237 "BlockNewRequests": true | false,
4238 "Locked": true | false
4239 },
4240 "Microphone": {
4241 "Allow": ["https://example.org"],
4242 "Block": ["https://example.edu"],
4243 "BlockNewRequests": true | false,
4244 "Locked": true | false
4245 },
4246 "Location": {
4247 "Allow": ["https://example.org"],
4248 "Block": ["https://example.edu"],
4249 "BlockNewRequests": true | false,
4250 "Locked": true | false
4251 },
4252 "Notifications": {
4253 "Allow": ["https://example.org"],
4254 "Block": ["https://example.edu"],
4255 "BlockNewRequests": true | false,
4256 "Locked": true | false
4257 },
4258 "Autoplay": {
4259 "Allow": ["https://example.org"],
4260 "Block": ["https://example.edu"],
4261 "Default": "allow-audio-video" | "block-audio" | "block-audio-video",
4262 "Locked": true | false
4263 }
4264 }
4265 }
4266 }
4267 ```
4268 ### PictureInPicture
4269
4270 Enable or disable Picture-in-Picture as well as prevent the user from enabling or disabling it (Locked).
4271
4272 **Compatibility:** Firefox 78, Firefox ESR 78\
4273 **CCK2 Equivalent:** N/A\
4274 **Preferences Affected:** `media.videocontrols.picture-in-picture.video-toggle.enabled`
4275
4276 #### Windows (GPO)
4277 ```
4278 Software\Policies\Mozilla\Firefox\PictureInPicture\Enabled = 0x1 | 0x0
4279 Software\Policies\Mozilla\Firefox\PictureInPicture\Locked = 0x1 | 0x0
4280
4281 ```
4282 #### Windows (Intune)
4283 OMA-URI:
4284 ```
4285 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PictureInPicture/PictureInPicture_Enabled
4286 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PictureInPicture/PictureInPicture_Locked
4287 ```
4288 Value (string):
4289 ```
4290 <enabled/> or <disabled/>
4291 ```
4292 #### macOS
4293 ```
4294 <dict>
4295 <key>PictureInPicture</key>
4296 <dict>
4297 <key>Enabled</key>
4298 <true/> | <false/>
4299 <key>Locked</key>
4300 <true/> | <false/>
4301 </dict>
4302 </dict>
4303 ```
4304 #### policies.json
4305 ```
4306 {
4307 "policies": {
4308 "PictureInPicture": {
4309 "Enabled": true | false,
4310 "Locked": true | false
4311 }
4312 }
4313 }
4314 ```
4315 ### PopupBlocking
4316 Configure the default pop-up window policy as well as origins for which pop-up windows are allowed.
4317
4318 `Allow` is a list of origins where popup-windows are allowed.
4319
4320 `Default` determines whether or not pop-up windows are allowed by default.
4321
4322 `Locked` prevents the user from changing pop-up preferences.
4323
4324 **Compatibility:** Firefox 60, Firefox ESR 60\
4325 **CCK2 Equivalent:** `permissions.popup`\
4326 **Preferences Affected:** `dom.disable_open_during_load`
4327
4328 #### Windows (GPO)
4329 ```
4330 Software\Policies\Mozilla\Firefox\PopupBlocking\Allow\1 = "https://example.org"
4331 Software\Policies\Mozilla\Firefox\PopupBlocking\Allow\2 = "https://example.edu"
4332 Software\Policies\Mozilla\Firefox\PopupBlocking\Default = 0x1 | 0x0
4333 Software\Policies\Mozilla\Firefox\PopupBlocking\Locked = 0x1 | 0x0
4334 ```
4335 #### Windows (Intune)
4336 OMA-URI:
4337 ```
4338 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Allow
4339 ```
4340 Value (string):
4341 ```
4342 <enabled/>
4343 <data id="Permissions" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
4344 ```
4345 OMA-URI:
4346 ```
4347 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Default
4348 ```
4349 Value (string):
4350 ```
4351 <enabled/> or <disabled/>
4352 ```
4353 OMA-URI:
4354 ```
4355 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Locked
4356 ```
4357 Value (string):
4358 ```
4359 <enabled/> or <disabled/>
4360 ```
4361 #### macOS
4362 ```
4363 <dict>
4364 <key>PopupBlocking</key>
4365 <dict>
4366 <key>Allow</key>
4367 <array>
4368 <string>http://example.org</string>
4369 <string>http://example.edu</string>
4370 </array>
4371 <key>Default</key>
4372 <true/> | <false/>
4373 <key>Locked</key>
4374 <true/> | <false/>
4375 </dict>
4376 </dict>
4377 ```
4378 #### policies.json
4379 ```
4380 {
4381 "policies": {
4382 "PopupBlocking": {
4383 "Allow": ["http://example.org/",
4384 "http://example.edu/"],
4385 "Default": true | false,
4386 "Locked": true | false
4387 }
4388 }
4389 }
4390 ```
4391 ### Preferences
4392 Set and lock preferences.
4393
4394 **NOTE** On Windows, in order to use this policy, you must clear all settings in the old **Preferences (Deprecated)** section.
4395
4396 Previously you could only set and lock a subset of preferences. Starting with Firefox 81 and Firefox ESR 78.3 you can set many more preferences. You can also set default preferences, user preferences and you can clear preferences.
4397
4398 Preferences that start with the following prefixes are supported:
4399 ```
4400 accessibility.
4401 app.update.* (Firefox 86, Firefox 78.8)
4402 browser.
4403 datareporting.policy.
4404 dom.
4405 extensions.
4406 general.autoScroll (Firefox 83, Firefox ESR 78.5)
4407 general.smoothScroll (Firefox 83, Firefox ESR 78.5)
4408 geo.
4409 gfx.
4410 intl.
4411 keyword.enabled (Firefox 95, Firefox ESR 91.4)
4412 layers.
4413 layout.
4414 media.
4415 network.
4416 pdfjs. (Firefox 84, Firefox ESR 78.6)
4417 places.
4418 print.
4419 signon. (Firefox 83, Firefox ESR 78.5)
4420 spellchecker. (Firefox 84, Firefox ESR 78.6)
4421 toolkit.legacyUserProfileCustomizations.stylesheets (Firefox 95, Firefox ESR 91.4)
4422 ui.
4423 widget.
4424 ```
4425 as well as the following security preferences:
4426 | Preference | Type | Default
4427 | --- | --- | ---
4428 | security.default_personal_cert | string | Ask Every Time
4429 | &nbsp;&nbsp;&nbsp;&nbsp;If set to Select Automatically, Firefox automatically chooses the default personal certificate.
4430 | security.insecure_connection_text.enabled | bool | false
4431 | &nbsp;&nbsp;&nbsp;&nbsp;If set to true, adds the words "Not Secure" for insecure sites.
4432 | security.insecure_connection_text.pbmode.enabled | bool | false
4433 | &nbsp;&nbsp;&nbsp;&nbsp;If set to true, adds the words "Not Secure" for insecure sites in private browsing.
4434 | security.insecure_field_warning.contextual.enabled | bool | true
4435 | &nbsp;&nbsp;&nbsp;&nbsp;If set to false, remove the warning for inscure login fields.
4436 | security.mixed_content.block_active_content | boolean | true
4437 | &nbsp;&nbsp;&nbsp;&nbsp;If false, mixed active content (HTTP and HTTPS) is not blocked.
4438 | security.osclientcerts.autoload | boolean | false
4439 | &nbsp;&nbsp;&nbsp;&nbsp;If true, client certificates are loaded from the operating system certificate store.
4440 | security.ssl.errorReporting.enabled | boolean | true
4441 | &nbsp;&nbsp;&nbsp;&nbsp;If false, SSL errors cannot be sent to Mozilla.
4442 | security.tls.enable_0rtt_data | boolean | true
4443 | &nbsp;&nbsp;&nbsp;&nbsp;If false, TLS early data is turned off (Firefox 93, Firefox 91.2, Firefox 78.15).
4444 | security.tls.hello_downgrade_check | boolean | true
4445 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the TLS 1.3 downgrade check is disabled.
4446 | security.tls.version.enable-deprecated | boolean | false
4447 | &nbsp;&nbsp;&nbsp;&nbsp;If true, browser will accept TLS 1.0. and TLS 1.1 (Firefox 86, Firefox 78.8).
4448 | security.warn_submit_secure_to_insecure | boolean | true
4449 | &nbsp;&nbsp;&nbsp;&nbsp;If false, no warning is shown when submitting a form from https to http.
4450 &nbsp;
4451
4452 Using the preference as the key, set the `Value` to the corresponding preference value.
4453
4454 `Status` can be "default", "locked", "user" or "clear"
4455
4456 * `"default"`: Read/Write: Settings appear as default even if factory default differs.
4457 * `"locked"`: Read-Only: Settings appear as default even if factory default differs.
4458 * `"user"`: Read/Write: Settings appear as changed if it differs from factory default.
4459 * `"clear"`: Read/Write: `Value` has no effect. Resets to factory defaults on each startup.
4460
4461 `"user"` preferences persist across invocations of Firefox. It is the equivalent of a user setting the preference. They are most useful when a preference is needed very early in startup so it can't be set as default by policy. An example of this is ```toolkit.legacyUserProfileCustomizations.stylesheets```.
4462
4463 `"user"` preferences persist even if the policy is removed, so if you need to remove them, you should use the clear policy.
4464
4465 See the examples below for more detail.
4466
4467 IMPORTANT: Make sure you're only setting a particular preference using this mechanism and not some other way.
4468
4469 Status
4470 **Compatibility:** Firefox 81, Firefox ESR 78.3\
4471 **CCK2 Equivalent:** `preferences`\
4472 **Preferences Affected:** Many
4473
4474 #### Windows (GPO)
4475 Software\Policies\Mozilla\Firefox\Preferences (REG_MULTI_SZ) =
4476 ```
4477 {
4478 "accessibility.force_disabled": {
4479 "Value": 1,
4480 "Status": "default"
4481 },
4482 "browser.cache.disk.parent_directory": {
4483 "Value": "SOME_NATIVE_PATH",
4484 "Status": "user"
4485 },
4486 "browser.tabs.warnOnClose": {
4487 "Value": false,
4488 "Status": "locked"
4489 }
4490 }
4491 ```
4492 #### Windows (Intune)
4493 OMA-URI:
4494 ```
4495 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Preferences
4496 ```
4497 Value (string):
4498 ```
4499 <enabled/>
4500 <data id="JSON" value='
4501 {
4502 "accessibility.force_disabled": {
4503 "Value": 1,
4504 "Status": "default"
4505 },
4506 "browser.cache.disk.parent_directory": {
4507 "Value": "SOME_NATIVE_PATH",
4508 "Status": "user"
4509 },
4510 "browser.tabs.warnOnClose": {
4511 "Value": false,
4512 "Status": "locked"
4513 }
4514 }'/>
4515 ```
4516 #### macOS
4517 ```
4518 <dict>
4519 <key>Preferences</key>
4520 <dict>
4521 <key>accessibility.force_disabled</key>
4522 <dict>
4523 <key>Value</key>
4524 <integer>1</integer>
4525 <key>Status</key>
4526 <string>default</string>
4527 </dict>
4528 <key>browser.cache.disk.parent_directory</key>
4529 <dict>
4530 <key>Value</key>
4531 <string>SOME_NATIVE_PATH</string>
4532 <key>Status</key>
4533 <string>user</string>
4534 </dict>
4535 <key>browser.tabs.warnOnClose</key>
4536 <dict>
4537 <key>Value</key>
4538 <false/>
4539 <key>Status</key>
4540 <string>locked</string>
4541 </dict>
4542 </dict>
4543 </dict>
4544 ```
4545 #### policies.json
4546 ```
4547 {
4548 "policies": {
4549 "Preferences": {
4550 "accessibility.force_disabled": {
4551 "Value": 1,
4552 "Status": "default"
4553 },
4554 "browser.cache.disk.parent_directory": {
4555 "Value": "SOME_NATIVE_PATH",
4556 "Status": "user"
4557 },
4558 "browser.tabs.warnOnClose": {
4559 "Value": false,
4560 "Status": "locked"
4561 }
4562 }
4563 }
4564 }
4565 ```
4566 ### Preferences (Deprecated)
4567 Set and lock certain preferences.
4568
4569 **Compatibility:** See below\
4570 **CCK2 Equivalent:** `preferences`\
4571 **Preferences Affected:** See below
4572
4573 | Preference | Type | Compatibility | Default
4574 | --- | --- | --- | ---
4575 | accessibility.force_disabled | integer | Firefox 70, Firefox ESR 68.2 | 0
4576 | &nbsp;&nbsp;&nbsp;&nbsp;If set to 1, platform accessibility is disabled.
4577 | app.update.auto (Deprecated - Switch to AppAutoUpdate policy) | boolean | Firefox 68, Firefox ESR 68 | true
4578 | &nbsp;&nbsp;&nbsp;&nbsp;If false, Firefox doesn't automatically install update.
4579 | browser.bookmarks.autoExportHTML | boolean | Firefox 70, Firefox ESR 68.2 | false
4580 | &nbsp;&nbsp;&nbsp;&nbsp;If true, bookmarks are exported on shutdown.
4581 | browser.bookmarks.file | string | Firefox 70, Firefox ESR 68.2 | N/A
4582 | &nbsp;&nbsp;&nbsp;&nbsp;If set, the name of the file where bookmarks are exported and imported.
4583 | browser.bookmarks.restore_default_bookmarks | boolean | Firefox 70, Firefox ESR 68.2 | N/A
4584 | &nbsp;&nbsp;&nbsp;&nbsp;If true, bookmarks are restored to their defaults.
4585 | browser.cache.disk.enable | boolean | Firefox 68, Firefox ESR 68 | true
4586 | &nbsp;&nbsp;&nbsp;&nbsp;If false, don't store cache on the hard drive.
4587 | ~browser.cache.disk.parent_directory~ | string | Firefox 68, Firefox ESR 68 | Profile temporary directory
4588 | &nbsp;&nbsp;&nbsp;&nbsp;~If set, changes the location of the disk cache.~ This policy doesn't work. It's being worked on.
4589 | browser.fixup.dns_first_for_single_words | boolean | Firefox 68, Firefox ESR 68 | false
4590 | &nbsp;&nbsp;&nbsp;&nbsp;If true, single words are sent to DNS, not directly to search.
4591 | browser.newtabpage.activity-stream.default.sites | string | Firefox 72, ESR 68.4 | Locale dependent
4592 | &nbsp;&nbsp;&nbsp;&nbsp;If set, a list of URLs to use as the default top sites on the new tab page. Due to Firefox limitations, search sites can't be added. In addition, sites with the same name but different TLDs (example.org/example.com) will not display properly.
4593 | browser.places.importBookmarksHTML | boolean | Firefox 70, Firefox ESR 68.2
4594 | &nbsp;&nbsp;&nbsp;&nbsp;If true, bookmarks are always imported on startup.
4595 | browser.safebrowsing.phishing.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
4596 | &nbsp;&nbsp;&nbsp;&nbsp;If false, phishing protection is not enabled (Not recommended)
4597 | browser.safebrowsing.malware.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
4598 | &nbsp;&nbsp;&nbsp;&nbsp;If false, malware protection is not enabled (Not recommended)
4599 | browser.search.update | boolean | Firefox 68, Firefox ESR 68 | true
4600 | &nbsp;&nbsp;&nbsp;&nbsp;If false, updates for search engines are not checked.
4601 | browser.slowStartup.notificationDisabled | boolean | Firefox 70, Firefox ESR 68.2 | false
4602 | &nbsp;&nbsp;&nbsp;&nbsp;If true, a notification isn't shown if startup is slow.
4603 | browser.tabs.warnOnClose | boolean | Firefox 68, Firefox ESR 68 | true
4604 | &nbsp;&nbsp;&nbsp;&nbsp;If false, there is no warning when the browser is closed.
4605 | browser.taskbar.previews.enable | boolean | Firefox 70, Firefox ESR 68.2 (Windows only) | false
4606 | &nbsp;&nbsp;&nbsp;&nbsp;If true, tab previews are shown in the Windows taskbar.
4607 | browser.urlbar.suggest.bookmark | boolean | Firefox 68, Firefox ESR 68 | true
4608 | &nbsp;&nbsp;&nbsp;&nbsp;If false, bookmarks aren't suggested when typing in the URL bar.
4609 | browser.urlbar.suggest.history | boolean | Firefox 68, Firefox ESR 68 | true
4610 | &nbsp;&nbsp;&nbsp;&nbsp;If false, history isn't suggested when typing in the URL bar.
4611 | browser.urlbar.suggest.openpage | boolean | Firefox 68, Firefox ESR 68 | true
4612 | &nbsp;&nbsp;&nbsp;&nbsp;If false, open tabs aren't suggested when typing in the URL bar.
4613 | datareporting.policy.dataSubmissionPolicyBypassNotification | boolean | Firefox 68, Firefox ESR 68 | false
4614 | &nbsp;&nbsp;&nbsp;&nbsp;If true, don't show the privacy policy tab on first run.
4615 | dom.allow_scripts_to_close_windows | boolean | Firefox 70, Firefox ESR 68.2 | false
4616 | &nbsp;&nbsp;&nbsp;&nbsp;If false, web page can close windows.
4617 | dom.disable_window_flip | boolean | Firefox 68, Firefox ESR 68 | true
4618 | &nbsp;&nbsp;&nbsp;&nbsp;If false, web pages can focus and activate windows.
4619 | dom.disable_window_move_resize | boolean | Firefox 68, Firefox ESR 68 | false
4620 | &nbsp;&nbsp;&nbsp;&nbsp;If true, web pages can't move or resize windows.
4621 | dom.event.contextmenu.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4622 | &nbsp;&nbsp;&nbsp;&nbsp;If false, web pages can't override context menus.
4623 | dom.keyboardevent.keypress.hack.dispatch_non_printable_keys.addl | string | Firefox 68, Firefox ESR 68 | N/A
4624 | &nbsp;&nbsp;&nbsp;&nbsp;See https://support.mozilla.org/en-US/kb/dom-events-changes-introduced-firefox-66
4625 | dom.keyboardevent.keypress.hack.use_legacy_keycode_and_charcode.addl | string | Firefox 68, Firefox ESR 68 | N/A
4626 | &nbsp;&nbsp;&nbsp;&nbsp;See https://support.mozilla.org/en-US/kb/dom-events-changes-introduced-firefox-66
4627 | dom.xmldocument.load.enabled | boolean | Firefox ESR 68.5 | true.
4628 | &nbsp;&nbsp;&nbsp;&nbsp;If false, XMLDocument.load is not available.
4629 | dom.xmldocument.async.enabled | boolean | Firefox ESR 68.5 | true
4630 | &nbsp;&nbsp;&nbsp;&nbsp;If false, XMLDocument.async is not available.
4631 | extensions.blocklist.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
4632 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the extensions blocklist is not used (Not recommended)
4633 | extensions.getAddons.showPane | boolean | Firefox 68, Firefox ESR 68 | N/A
4634 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the Recommendations tab is not displayed in the Add-ons Manager.
4635 | extensions.htmlaboutaddons.recommendations.enabled | boolean | Firefox 72, Firefox ESR 68.4 | true
4636 | &nbsp;&nbsp;&nbsp;&nbsp;If false, recommendations are not shown on the Extensions tab in the Add-ons Manager.
4637 | geo.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
4638 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the geolocation API is disabled. | Language dependent
4639 | intl.accept_languages | string | Firefox 70, Firefox ESR 68.2
4640 | &nbsp;&nbsp;&nbsp;&nbsp;If set, preferred language for web pages.
4641 | media.eme.enabled (Deprecated - Switch to EncryptedMediaExtensions policy) | boolean | Firefox 70, Firefox ESR 68.2 | true
4642 | &nbsp;&nbsp;&nbsp;&nbsp;If false, Encrypted Media Extensions are not enabled.
4643 | media.gmp-gmpopenh264.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4644 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the OpenH264 plugin is not downloaded.
4645 | media.gmp-widevinecdm.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4646 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the Widevine plugin is not downloaded.
4647 | media.peerconnection.enabled | boolean | Firefox 72, Firefox ESR 68.4 | true
4648 | &nbsp;&nbsp;&nbsp;&nbsp;If false, WebRTC is disabled
4649 | media.peerconnection.ice.obfuscate_host_addresses.whitelist (Deprecated) | string | Firefox 72, Firefox ESR 68.4 | N/A
4650 | &nbsp;&nbsp;&nbsp;&nbsp;If set, a list of domains for which mDNS hostname obfuscation is
4651 disabled
4652 | media.peerconnection.ice.obfuscate_host_addresses.blocklist | string | Firefox 79, Firefox ESR 78.1 | N/A
4653 | &nbsp;&nbsp;&nbsp;&nbsp;If set, a list of domains for which mDNS hostname obfuscation is
4654 disabled
4655 | network.dns.disableIPv6 | boolean | Firefox 68, Firefox ESR 68 | false
4656 | &nbsp;&nbsp;&nbsp;&nbsp;If true, IPv6 DNS lokoups are disabled.
4657 | network.IDN_show_punycode | boolean | Firefox 68, Firefox ESR 68 | false
4658 | &nbsp;&nbsp;&nbsp;&nbsp;If true, display the punycode version of internationalized domain names.
4659 | places.history.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4660 | &nbsp;&nbsp;&nbsp;&nbsp;If false, history is not enabled.
4661 | print.save_print_settings | boolean | Firefox 70, Firefox ESR 68.2 | true
4662 | &nbsp;&nbsp;&nbsp;&nbsp;If false, print settings are not saved between jobs.
4663 | security.default_personal_cert | string | Firefox 68, Firefox ESR 68 | Ask Every Time
4664 | &nbsp;&nbsp;&nbsp;&nbsp;If set to Select Automatically, Firefox automatically chooses the default personal certificate.
4665 | security.mixed_content.block_active_content | boolean | Firefox 70, Firefox ESR 68.2 | true
4666 | &nbsp;&nbsp;&nbsp;&nbsp;If false, mixed active content (HTTP and HTTPS) is not blocked.
4667 | security.osclientcerts.autoload | boolean | Firefox 72 (Windows), Firefox 75 (macOS) | false
4668 | &nbsp;&nbsp;&nbsp;&nbsp;If true, client certificates are loaded from the operating system certificate store.
4669 | security.ssl.errorReporting.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4670 | &nbsp;&nbsp;&nbsp;&nbsp;If false, SSL errors cannot be sent to Mozilla.
4671 | security.tls.hello_downgrade_check | boolean | Firefox 72, Firefox ESR 68.4 | true
4672 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the TLS 1.3 downgrade check is disabled.
4673 | ui.key.menuAccessKeyFocuses | boolean | Firefox 68, Firefox ESR 68 | true
4674 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the Alt key doesn't show the menubar on Windows.
4675 | widget.content.gtk-theme-override | string | Firefox 72, Firefox ESR 68.4 (Linux only) | N/A
4676 | &nbsp;&nbsp;&nbsp;&nbsp;If set, overrides the GTK theme for widgets.
4677 #### Windows (GPO)
4678 ```
4679 Software\Policies\Mozilla\Firefox\Preferences\boolean_preference_name = 0x1 | 0x0
4680 Software\Policies\Mozilla\Firefox\Preferences\string_preference_name = "string_value"
4681 ```
4682 #### Windows (Intune)
4683 OMA-URI: (periods are replaced by underscores)
4684 ```
4685 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Preferences/boolean_preference_name
4686 ```
4687 Value (string):
4688 ```
4689 <enabled/> or <disabled/>
4690 ```
4691 OMA-URI: (periods are replaced by underscores)
4692 ```
4693 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Preferences/string_preference_name
4694 ```
4695 Value (string):
4696 ```
4697 <enabled/>
4698 <data id="Preferences_String" value="string_value"/>
4699 ```
4700 #### macOS
4701 ```
4702 <dict>
4703 <key>Preferences</key>
4704 <dict>
4705 <key>boolean_preference_name</key>
4706 <true/> | <false/>
4707 <key>string_preference_name</key>
4708 <string>string_value</string>
4709 </dict>
4710 </dict>
4711 ```
4712 #### policies.json
4713 ```
4714 {
4715 "policies": {
4716 "Preferences": {
4717 "boolean_preference_name": true | false,
4718 "string_preference_name": "string_value"
4719 }
4720 }
4721 }
4722 ```
4723 ### PrimaryPassword
4724 Require or prevent using a primary (formerly master) password.
4725
4726 If this value is true, a primary password is required. If this value is false, it works the same as if [`DisableMasterPasswordCreation`](#disablemasterpasswordcreation) was true and removes the primary password functionality.
4727
4728 If both DisableMasterPasswordCreation and PrimaryPassword are used, DisableMasterPasswordCreation takes precedent.
4729
4730 **Compatibility:** Firefox 79, Firefox ESR 78.1\
4731 **CCK2 Equivalent:** `noMasterPassword`\
4732 **Preferences Affected:** N/A
4733
4734 #### Windows (GPO)
4735 ```
4736 Software\Policies\Mozilla\Firefox\PrimaryPassword = 0x1 | 0x0
4737 ```
4738 #### Windows (Intune)
4739 OMA-URI:
4740 ```
4741 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PrimaryPassword
4742 ```
4743 Value (string):
4744 ```
4745 <enabled/> or <disabled/>
4746 ```
4747 #### macOS
4748 ```
4749 <dict>
4750 <key>PrimaryPassword</key>
4751 <true/> | <false/>
4752 </dict>
4753 ```
4754 #### policies.json
4755 ```
4756 {
4757 "policies": {
4758 "PrimaryPassword": true | false
4759 }
4760 }
4761 ```
4762 ### PromptForDownloadLocation
4763 Ask where to save each file before downloading.
4764
4765 **Compatibility:** Firefox 68, Firefox ESR 68\
4766 **CCK2 Equivalent:** N/A\
4767 **Preferences Affected:** `browser.download.useDownloadDir`
4768
4769 #### Windows (GPO)
4770 ```
4771 Software\Policies\Mozilla\Firefox\PromptForDownloadLocation = 0x1 | 0x0
4772 ```
4773 #### Windows (Intune)
4774 OMA-URI:
4775 ```
4776 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PromptForDownloadLocation
4777 ```
4778 Value (string):
4779 ```
4780 <enabled/> or <disabled/>
4781 ```
4782 #### macOS
4783 ```
4784 <dict>
4785 <key>PromptForDownloadLocation</key>
4786 <true/> | <false/>
4787 </dict>
4788 ```
4789 #### policies.json
4790 ```
4791 {
4792 "policies": {
4793 "PromptForDownloadLocation": true | false
4794 }
4795 }
4796 ```
4797 ### Proxy
4798 Configure proxy settings. These settings correspond to the connection settings in Firefox preferences.
4799 To specify ports, append them to the hostnames with a colon (:).
4800
4801 `Mode` is the proxy method being used.
4802
4803 `Locked` is whether or not proxy settings can be changed.
4804
4805 `HTTPProxy` is the HTTP proxy server.
4806
4807 `UseHTTPProxyForAllProtocols` is whether or not the HTTP proxy should be used for all other proxies.
4808
4809 `SSLProxy` is the SSL proxy server.
4810
4811 `FTPProxy` is the FTP proxy server.
4812
4813 `SOCKSProxy` is the SOCKS proxy server
4814
4815 `SOCKSVersion` is the SOCKS version (4 or 5)
4816
4817 `Passthrough` is list of hostnames or IP addresses that will not be proxied. Use `<local>` to bypass proxying for all hostnames which do not contain periods.
4818
4819 `AutoConfigURL` is a URL for proxy configuration (only used if Mode is autoConfig).
4820
4821 `AutoLogin` means do not prompt for authentication if password is saved.
4822
4823 `UseProxyForDNS` to use proxy DNS when using SOCKS v5.
4824
4825 **Compatibility:** Firefox 60, Firefox ESR 60\
4826 **CCK2 Equivalent:** `networkProxy*`\
4827 **Preferences Affected:** `network.proxy.type`, `network.proxy.autoconfig_url`, `network.proxy.socks_remote_dns`, `signon.autologin.proxy`, `network.proxy.socks_version`, `network.proxy.no_proxies_on`, `network.proxy.share_proxy_settings`, `network.proxy.http`, `network.proxy.http_port`, `network.proxy.ftp`, `network.proxy.ftp_port`, `network.proxy.ssl`, `network.proxy.ssl_port`, `network.proxy.socks`, `network.proxy.socks_port`
4828
4829 #### Windows (GPO)
4830 ```
4831 Software\Policies\Mozilla\Firefox\Proxy\Mode = "none" | "system" | "manual" | "autoDetect" | "autoConfig"
4832 Software\Policies\Mozilla\Firefox\Proxy\Locked = 0x1 | 0x0
4833 Software\Policies\Mozilla\Firefox\=Proxy\HTTPProxy = https://httpproxy.example.com
4834 Software\Policies\Mozilla\Firefox\Proxy\UseHTTPProxyForAllProtocols = 0x1 | 0x0
4835 Software\Policies\Mozilla\Firefox\Proxy\SSLProxy = https://sslproxy.example.com
4836 Software\Policies\Mozilla\Firefox\Proxy\FTPProxy = https://ftpproxy.example.com
4837 Software\Policies\Mozilla\Firefox\Proxy\SOCKSProxy = https://socksproxy.example.com
4838 Software\Policies\Mozilla\Firefox\Proxy\SOCKSVersion = 0x4 | 0x5
4839 Software\Policies\Mozilla\Firefox\Proxy\Passthrough = <local>
4840 Software\Policies\Mozilla\Firefox\Proxy\AutoConfigURL = URL_TO_AUTOCONFIG
4841 Software\Policies\Mozilla\Firefox\Proxy\AutoLogin = 0x1 | 0x0
4842 Software\Policies\Mozilla\Firefox\Proxy\UseProxyForDNS = 0x1 | 0x0
4843 ```
4844 #### Windows (Intune)
4845 OMA-URI:
4846 ```
4847 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Proxy
4848 ```
4849 Value (string):
4850 ```
4851 <enabled/>
4852 <data id="ProxyLocked" value="true | false"/>
4853 <data id="ConnectionType" value="none | system | manual | autoDetect | autoConfig"/>
4854 <data id="HTTPProxy" value="https://httpproxy.example.com"/>
4855 <data id="UseHTTPProxyForAllProtocols" value="true | false"/>
4856 <data id="SSLProxy" value="https://sslproxy.example.com"/>
4857 <data id="FTPProxy" value="https://ftpproxy.example.com"/>
4858 <data id="SOCKSProxy" value="https://socksproxy.example.com"/>
4859 <data id="SOCKSVersion" value="4 | 5"/>
4860 <data id="AutoConfigURL" value="URL_TO_AUTOCONFIG"/>
4861 <data id="Passthrough" value="<local>"/>
4862 <data id="AutoLogin" value="true | false"/>
4863 <data id="UseProxyForDNS" value="true | false"/>
4864 ```
4865 #### macOS
4866 ```
4867 <dict>
4868 <key>Proxy</key>
4869 <dict>
4870 <key>Mode</key>
4871 <string>none | system | manual | autoDetect | autoConfig</string>
4872 <key>Locked</key>
4873 <true> | </false>
4874 <key>HTTPProxy</key>
4875 <string>https://httpproxy.example.com</string>
4876 <key>UseHTTPProxyForAllProtocols</key>
4877 <true> | </false>
4878 <key>SSLProxy</key>
4879 <string>https://sslproxy.example.com</string>
4880 <key>FTPProxy</key>
4881 <string>https://ftpproxy.example.com</string>
4882 <key>SOCKSProxy</key>
4883 <string>https://socksproxy.example.com</string>
4884 <key>SOCKSVersion</key>
4885 <string>4 | 5</string>
4886 <key>Passthrough</key>
4887 <string>&lt;local>&gt;</string>
4888 <key>AutoConfigURL</key>
4889 <string>URL_TO_AUTOCONFIG</string>
4890 <key>AutoLogin</key>
4891 <true> | </false>
4892 <key>UseProxyForDNS</key>
4893 <true> | </false>
4894 </dict>
4895 </dict>
4896 ```
4897 #### policies.json
4898 ```
4899 {
4900 "policies": {
4901 "Proxy": {
4902 "Mode": "none" | "system" | "manual" | "autoDetect" | "autoConfig",
4903 "Locked": true | false,
4904 "HTTPProxy": "hostname",
4905 "UseHTTPProxyForAllProtocols": true | false,
4906 "SSLProxy": "hostname",
4907 "FTPProxy": "hostname",
4908 "SOCKSProxy": "hostname",
4909 "SOCKSVersion": 4 | 5,
4910 "Passthrough": "<local>",
4911 "AutoConfigURL": "URL_TO_AUTOCONFIG",
4912 "AutoLogin": true | false,
4913 "UseProxyForDNS": true | false
4914 }
4915 }
4916 }
4917 ```
4918 ### RequestedLocales
4919 Set the the list of requested locales for the application in order of preference. It will cause the corresponding language pack to become active.
4920
4921 Note: For Firefox 68, this can now be a string so that you can specify an empty value.
4922
4923 **Compatibility:** Firefox 64, Firefox ESR 60.4, Updated in Firefox 68, Firefox ESR 68\
4924 **CCK2 Equivalent:** N/A\
4925 **Preferences Affected:** N/A
4926 #### Windows (GPO)
4927 ```
4928 Software\Policies\Mozilla\Firefox\RequestedLocales\1 = "de"
4929 Software\Policies\Mozilla\Firefox\RequestedLocales\2 = "en-US"
4930
4931 or
4932
4933 Software\Policies\Mozilla\Firefox\RequestedLocales = "de,en-US"
4934 ```
4935 #### Windows (Intune)
4936 OMA-URI:
4937 ```
4938 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/RequestedLocalesString
4939 ```
4940 Value (string):
4941 ```
4942 <enabled/>
4943 <data id="Preferences_String" value="de,en-US"/>
4944 ```
4945 #### macOS
4946 ```
4947 <dict>
4948 <key>RequestedLocales</key>
4949 <array>
4950 <string>de</string>
4951 <string>en-US</string>
4952 </array>
4953 </dict>
4954
4955 or
4956
4957 <dict>
4958 <key>RequestedLocales</key>
4959 <string>de,en-US</string>
4960 </dict>
4961
4962 ```
4963 #### policies.json
4964 ```
4965 {
4966 "policies": {
4967 "RequestedLocales": ["de", "en-US"]
4968 }
4969 }
4970
4971 or
4972
4973 {
4974 "policies": {
4975 "RequestedLocales": "de,en-US"
4976 }
4977 }
4978 ```
4979 <a name="SanitizeOnShutdown"></a>
4980
4981 ### SanitizeOnShutdown (Selective)
4982 Clear data on shutdown. Choose from Cache, Cookies, Download History, Form & Search History, Browsing History, Active Logins, Site Preferences and Offline Website Data.
4983
4984 Previously, these values were always locked. Starting with Firefox 74 and Firefox ESR 68.6, you can use the `Locked` option to either keep the values unlocked (set it to false), or lock only the values you set (set it to true). If you want the old behavior of locking everything, do not set `Locked` at all.
4985
4986 **Compatibility:** Firefox 68, Firefox ESR 68 (Locked added in 74/68.6)\
4987 **CCK2 Equivalent:** N/A\
4988 **Preferences Affected:** `privacy.sanitize.sanitizeOnShutdown`, `privacy.clearOnShutdown.cache`, `privacy.clearOnShutdown.cookies`, `privacy.clearOnShutdown.downloads`, `privacy.clearOnShutdown.formdata`, `privacy.clearOnShutdown.history`, `privacy.clearOnShutdown.sessions`, `privacy.clearOnShutdown.siteSettings`, `privacy.clearOnShutdown.offlineApps`
4989 #### Windows (GPO)
4990 ```
4991 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Cache = 0x1 | 0x0
4992 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Cookies = 0x1 | 0x0
4993 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Downloads = 0x1 | 0x0
4994 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\FormData = 0x1 | 0x0
4995 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\History = 0x1 | 0x0
4996 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Sessions = 0x1 | 0x0
4997 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\SiteSettings = 0x1 | 0x0
4998 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\OfflineApps = 0x1 | 0x0
4999 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Locked = 0x1 | 0x0
5000 ```
5001 #### Windows (Intune)
5002 OMA-URI:
5003 ```
5004 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/A_SanitizeOnShutdown_Cache
5005 ```
5006 Value (string):
5007 ```
5008 <enabled/> or <disabled/>
5009 ```
5010 OMA-URI:
5011 ```
5012 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/B_SanitizeOnShutdown_Cookies
5013 ```
5014 Value (string):
5015 ```
5016 <enabled/> or <disabled/>
5017 ```
5018 OMA-URI:
5019 ```
5020 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/C_SanitizeOnShutdown_Downloads
5021 ```
5022 Value (string):
5023 ```
5024 <enabled/> or <disabled/>
5025 ```
5026 OMA-URI:
5027 ```
5028 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/D_SanitizeOnShutdown_FormData
5029 ```
5030 Value (string):
5031 ```
5032 <enabled/> or <disabled/>
5033 ```
5034 OMA-URI:
5035 ```
5036 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/E_SanitizeOnShutdown_History
5037 ```
5038 Value (string):
5039 ```
5040 <enabled/> or <disabled/>
5041 ```
5042 OMA-URI:
5043 ```
5044 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/F_SanitizeOnShutdown_Sessions
5045 ```
5046 Value (string):
5047 ```
5048 <enabled/> or <disabled/>
5049 ```
5050 OMA-URI:
5051 ```
5052 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/G_SanitizeOnShutdown_SiteSettings
5053 ```
5054 Value (string):
5055 ```
5056 <enabled/> or <disabled/>
5057 ```
5058 OMA-URI:
5059 ```
5060 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/H_SanitizeOnShutdown_OfflineApps
5061 ```
5062 Value (string):
5063 ```
5064 <enabled/> or <disabled/>
5065 ```
5066 OMA-URI:
5067 ```
5068 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/I_SanitizeOnShutdown_Locked
5069 ```
5070 Value (string):
5071 ```
5072 <enabled/> or <disabled/>
5073 ```
5074 #### macOS
5075 ```
5076 <dict>
5077 <key>SanitizeOnShutdown</key>
5078 <dict>
5079 <key>Cache</key>
5080 <true/> | <false/>
5081 <key>Cookies</key>
5082 <true/> | <false/>
5083 <key>Downloads</key>
5084 <true/> | <false/>
5085 <key>FormData</key>
5086 <true/> | <false/>
5087 <key>History</key>
5088 <true/> | <false/>
5089 <key>Sessions</key>
5090 <true/> | <false/>
5091 <key>SiteSettings</key>
5092 <true/> | <false/>
5093 <key>OfflineApps</key>
5094 <true/> | <false/>
5095 <key>Locked</key>
5096 <true/> | <false/>
5097 </dict>
5098 </dict>
5099 ```
5100 #### policies.json
5101 ```
5102 {
5103 "policies": {
5104 "SanitizeOnShutdown": {
5105 "Cache": true | false,
5106 "Cookies": true | false,
5107 "Downloads": true | false,
5108 "FormData": true | false,
5109 "History": true | false,
5110 "Sessions": true | false,
5111 "SiteSettings": true | false,
5112 "OfflineApps": true | false,
5113 "Locked": true | false
5114 }
5115 }
5116 }
5117 ```
5118 ### SanitizeOnShutdown (All)
5119 Clear all data on shutdown, including Browsing & Download History, Cookies, Active Logins, Cache, Form & Search History, Site Preferences and Offline Website Data.
5120
5121 **Compatibility:** Firefox 60, Firefox ESR 60\
5122 **CCK2 Equivalent:** N/A\
5123 **Preferences Affected:** `privacy.sanitize.sanitizeOnShutdown`, `privacy.clearOnShutdown.cache`, `privacy.clearOnShutdown.cookies`, `privacy.clearOnShutdown.downloads`, `privacy.clearOnShutdown.formdata`, `privacy.clearOnShutdown.history`, `privacy.clearOnShutdown.sessions`, `privacy.clearOnShutdown.siteSettings`, `privacy.clearOnShutdown.offlineApps`
5124 #### Windows (GPO)
5125 ```
5126 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown = 0x1 | 0x0
5127 ```
5128 #### Windows (Intune)
5129 OMA-URI:
5130 ```
5131 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/C_SanitizeOnShutdown
5132 ```
5133 Value (string):
5134 ```
5135 <enabled/> or <disabled/>
5136 ```
5137 #### macOS
5138 ```
5139 <dict>
5140 <key>SanitizeOnShutdown</key>
5141 <true/> | <false/>
5142 </dict>
5143 ```
5144 #### policies.json
5145 ```
5146 {
5147 "policies": {
5148 "SanitizeOnShutdown": true | false
5149 }
5150 }
5151 ```
5152 ### SearchBar
5153 Set whether or not search bar is displayed.
5154
5155 **Compatibility:** Firefox 60, Firefox ESR 60\
5156 **CCK2 Equivalent:** `showSearchBar`\
5157 **Preferences Affected:** N/A
5158
5159 #### Windows (GPO)
5160 ```
5161 Software\Policies\Mozilla\Firefox\SearchBar = "unified" | "separate"
5162 ```
5163
5164 #### Windows (Intune)
5165 OMA-URI:
5166 ```
5167 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SearchBar
5168 ```
5169 Value (string):
5170 ```
5171 <enabled/>
5172 <data id="SearchBar" value="unified | separate"/>
5173 ```
5174 #### macOS
5175 ```
5176 <dict>
5177 <key>SearchBar</key>
5178 <string>unified | separate</string>
5179 </dict>
5180 ```
5181 #### policies.json
5182 ```
5183 {
5184 "policies": {
5185 "SearchBar": "unified" | "separate"
5186 }
5187 }
5188 ```
5189 <a name="SearchEngines"></a>
5190
5191 ### SearchEngines (This policy is only available on the ESR.)
5192
5193 ### SearchEngines | Add
5194
5195 Add new search engines. Although there are only five engines available in the ADMX template, there is no limit. To add more in the ADMX template, you can duplicate the XML.
5196
5197 This policy is only available on the ESR. `Name` and `URLTemplate` are required.
5198
5199 `Name` is the name of the search engine.
5200
5201 `URLTemplate` is the search URL with {searchTerms} to substitute for the search term.
5202
5203 `Method` is either GET or POST
5204
5205 `IconURL` is a URL for the icon to use.
5206
5207 `Alias` is a keyword to use for the engine.
5208
5209 `Description` is a description of the search engine.
5210
5211 `PostData` is the POST data as name value pairs separated by &.
5212
5213 `SuggestURLTemplate` is a search suggestions URL with {searchTerms} to substitute for the search term.
5214
5215 `Encoding` is the query charset for the engine. It defaults to UTF-8.
5216
5217 **Compatibility:** Firefox ESR 60 (POST support in Firefox ESR 68, Encoding support in Firefox 91)\
5218 **CCK2 Equivalent:** `searchplugins`\
5219 **Preferences Affected:** N/A
5220
5221 #### Windows (GPO)
5222 ```
5223 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Name = "Example1"
5224 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\URLTemplate = "https://www.example.org/q={searchTerms}"
5225 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Method = "GET" | "POST"
5226 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\IconURL = "https://www.example.org/favicon.ico"
5227 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Alias = "example"
5228 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Description = "Example Description"
5229 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\SuggestURLTemplate = "https://www.example.org/suggestions/q={searchTerms}"
5230 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\PostData = "name=value&q={searchTerms}"
5231 ```
5232 #### Windows (Intune)
5233 OMA-URI:
5234 ```
5235 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_1
5236 ```
5237 Value (string):
5238 ```
5239 <enabled/>
5240 <data id="SearchEngine_Name" value="Example1"/>
5241 <data id="SearchEngine_URLTemplate" value="https://www.example.org/q={searchTerms"/>
5242 <data id="SearchEngine_Method" value="GET | POST"/>
5243 <data id="SearchEngine_IconURL" value="https://www.example.org/favicon.ico"/>
5244 <data id="SearchEngine_Alias" value="example"/>
5245 <data id="SearchEngine_Description" value="Example Description"/>
5246 <data id="SearchEngine_SuggestURLTemplate" value="https://www.example.org/suggestions/q={searchTerms}"/>
5247 <data id="SearchEngine_PostData" value="name=value&amp;q={searchTerms}"/>
5248 ```
5249 #### macOS
5250 ```
5251 <dict>
5252 <key>SearchEngines</key>
5253 <dict>
5254 <key>Add</key>
5255 <array>
5256 <dict>
5257 <key>Name</key>
5258 <string>Example1</string>
5259 <key>URLTemplate</key>
5260 <string>https://www.example.org/q={searchTerms}</string>
5261 <key>Method</key>
5262 <string>GET | POST </string>
5263 <key>IconURL</key>
5264 <string>https://www.example.org/favicon.ico</string>
5265 <key>Alias</key>
5266 <string>example</string>
5267 <key>Description</key>
5268 <string>Example Description</string>
5269 <key>SuggestURLTemplate</key>
5270 <string>https://www.example.org/suggestions/q={searchTerms}</string>
5271 <key>PostData</key>
5272 <string>name=value&q={searchTerms}</string>
5273 </dict>
5274 <array>
5275 </dict>
5276 </dict>
5277 ```
5278 #### policies.json
5279 ```
5280 {
5281 "policies": {
5282 "SearchEngines": {
5283 "Add": [
5284 {
5285 "Name": "Example1",
5286 "URLTemplate": "https://www.example.org/q={searchTerms}",
5287 "Method": "GET" | "POST",
5288 "IconURL": "https://www.example.org/favicon.ico",
5289 "Alias": "example",
5290 "Description": "Description",
5291 "PostData": "name=value&q={searchTerms}",
5292 "SuggestURLTemplate": "https://www.example.org/suggestions/q={searchTerms}"
5293 }
5294 ]
5295 }
5296 }
5297 }
5298 ```
5299 ### SearchEngines | Default
5300
5301 Set the default search engine. This policy is only available on the ESR.
5302
5303 **Compatibility:** Firefox ESR 60\
5304 **CCK2 Equivalent:** `defaultSearchEngine`\
5305 **Preferences Affected:** N/A
5306
5307 #### Windows (GPO)
5308 ```
5309 Software\Policies\Mozilla\Firefox\SearchEngines\Default = NAME_OF_SEARCH_ENGINE
5310 ```
5311 #### Windows (Intune)
5312 OMA-URI:
5313 ```
5314 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_Default
5315 ```
5316 Value (string):
5317 ```
5318 <enabled/>
5319 <data id="SearchEngines_Default" value="NAME_OF_SEARCH_ENGINE"/>
5320 ```
5321 #### macOS
5322 ```
5323 <dict>
5324 <key>SearchEngines</key>
5325 <dict>
5326 <key>Default</key>
5327 <string>NAME_OF_SEARCH_ENGINE</string>
5328 </dict>
5329 </dict>
5330 ```
5331 #### policies.json
5332 ```
5333 {
5334 "policies": {
5335 "SearchEngines": {
5336 "Default": "NAME_OF_SEARCH_ENGINE"
5337 }
5338 }
5339 }
5340 ```
5341 ### SearchEngines | PreventInstalls
5342
5343 Prevent installing search engines from webpages.
5344
5345 **Compatibility:** Firefox ESR 60\
5346 **CCK2 Equivalent:** `disableSearchEngineInstall`\
5347 **Preferences Affected:** N/A
5348
5349 #### Windows (GPO)
5350 ```
5351 Software\Policies\Mozilla\Firefox\SearchEngines\PreventInstalls = 0x1 | 0x0
5352 ```
5353 #### Windows (Intune)
5354 OMA-URI:
5355 ```
5356 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_PreventInstalls
5357 ```
5358 Value (string):
5359 ```
5360 <enabled/> or <disabled/>
5361 ```
5362 #### macOS
5363 ```
5364 <dict>
5365 <key>SearchEngines</key>
5366 <dict>
5367 <key>PreventInstalls</key>
5368 <true/> | <false/>
5369 </dict>
5370 </dict>
5371 ```
5372 #### policies.json
5373 ```
5374 {
5375 "policies": {
5376 "SearchEngines": {
5377 "PreventInstalls": true | false
5378 }
5379 }
5380 }
5381 ```
5382 ### SearchEngines | Remove
5383
5384 Hide built-in search engines. This policy is only available on the ESR.
5385
5386 **Compatibility:** Firefox ESR 60.2\
5387 **CCK2 Equivalent:** `removeDefaultSearchEngines` (removed all built-in engines)\
5388 **Preferences Affected:** N/A
5389
5390 #### Windows (GPO)
5391 ```
5392 Software\Policies\Mozilla\Firefox\SearchEngines\Remove\1 = NAME_OF_SEARCH_ENGINE
5393 ```
5394 #### Windows (Intune)
5395 OMA-URI:
5396 ```
5397 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_Remove
5398 ```
5399 Value (string):
5400 ```
5401 <enabled/>
5402 <data id="SearchEngines_Remove" value="1&#xF000;NAME_OF_SEARCH_ENGINE"/>
5403 ```
5404 #### macOS
5405 ```
5406 <dict>
5407 <key>SearchEngines</key>
5408 <dict>
5409 <key>Remove</key>
5410 <array>
5411 <string>NAME_OF_SEARCH_ENGINE</string>
5412 </array>
5413 </dict>
5414 </dict>
5415 ```
5416 #### policies.json
5417 ```
5418 {
5419 "policies": {
5420 "SearchEngines": {
5421 "Remove": ["NAME_OF_SEARCH_ENGINE"]
5422 }
5423 }
5424 }
5425 ```
5426 ### SearchSuggestEnabled
5427
5428 Enable search suggestions.
5429
5430 **Compatibility:** Firefox 68, Firefox ESR 68\
5431 **CCK2 Equivalent:** N/A\
5432 **Preferences Affected:** `browser.urlbar.suggest.searches`, `browser.search.suggest.enabled`
5433
5434 #### Windows (GPO)
5435 ```
5436 Software\Policies\Mozilla\Firefox\SearchSuggestEnabled = 0x1 | 0x0
5437 ```
5438 #### Windows (Intune)
5439 OMA-URI:
5440 ```
5441 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchSuggestEnabled
5442 ```
5443 Value (string):
5444 ```
5445 <enabled/> or <disabled/>
5446 ```
5447 #### macOS
5448 ```
5449 <dict>
5450 <key>SearchSuggestEnabled</key>
5451 <true/> | <false/>
5452 </dict>
5453 ```
5454 #### policies.json
5455 ```
5456 {
5457 "policies": {
5458 "SearchSuggestEnabled": true | false
5459 }
5460 }
5461 ```
5462 ### SecurityDevices
5463
5464 Install PKCS #11 modules.
5465
5466 **Compatibility:** Firefox 64, Firefox ESR 60.4\
5467 **CCK2 Equivalent:** `certs.devices`\
5468 **Preferences Affected:** N/A
5469
5470 #### Windows (GPO)
5471 ```
5472 Software\Policies\Mozilla\Firefox\SecurityDevices\NAME_OF_DEVICE = PATH_TO_LIBRARY_FOR_DEVICE
5473 ```
5474 #### Windows (Intune)
5475 OMA-URI:
5476 ```
5477 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SecurityDevices
5478 ```
5479 Value (string):
5480 ```
5481 <enabled/>
5482 <data id="SecurityDevices" value="NAME_OF_DEVICE&#xF000;PATH_TO_LIBRARY_FOR_DEVICE"/>
5483 ```
5484 #### macOS
5485 ```
5486 <dict>
5487 <key>SecurityDevices</key>
5488 <dict>
5489 <key>NAME_OF_DEVICE</key>
5490 <string>PATH_TO_LIBRARY_FOR_DEVICE</string>
5491 </dict>
5492 </dict>
5493 ```
5494
5495 #### policies.json
5496 ```
5497 {
5498 "policies": {
5499 "SecurityDevices": {
5500 "NAME_OF_DEVICE": "PATH_TO_LIBRARY_FOR_DEVICE"
5501 }
5502 }
5503 }
5504 ```
5505 ### ShowHomeButton
5506 Show the home button on the toolbar.
5507
5508 Future versions of Firefox will not show the home button by default.
5509
5510 **Compatibility:** Firefox 88, Firefox ESR 78.10\
5511 **CCK2 Equivalent:** N/A\
5512 **Preferences Affected:** N/A
5513
5514 #### Windows (GPO)
5515 ```
5516 Software\Policies\Mozilla\Firefox\ShowHomeButton = 0x1 | 0x0
5517 ```
5518 #### Windows (Intune)
5519 OMA-URI:
5520 ```
5521 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/Homepage_ShowHomeButton
5522 ```
5523 Value (string):
5524 ```
5525 <enabled/> or <disabled/>
5526 ```
5527 #### macOS
5528 ```
5529 <dict>
5530 <key>ShowHomeButton</key>
5531 <true/> | <false/>
5532 </dict>
5533 ```
5534 #### policies.json
5535 ```
5536 {
5537 "policies": {
5538 "ShowHomeButton": true | false
5539 }
5540 }
5541 ```
5542 ### SSLVersionMax
5543
5544 Set and lock the maximum version of TLS.
5545
5546 **Compatibility:** Firefox 66, Firefox ESR 60.6\
5547 **CCK2 Equivalent:** N/A\
5548 **Preferences Affected:** `security.tls.version.max`
5549
5550 #### Windows (GPO)
5551 ```
5552 Software\Policies\Mozilla\Firefox\SSLVersionMax = "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
5553 ```
5554 #### Windows (Intune)
5555 OMA-URI:
5556 ```
5557 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SSLVersionMax
5558 ```
5559 Value (string):
5560 ```
5561 <enabled/>
5562 <data id="SSLVersion" value="tls1 | tls1.2 | tls1.3"/>
5563 ```
5564 #### macOS
5565 ```
5566 <dict>
5567 <key>SSLVersionMax</key>
5568 <string>tls1 | tls1.1 | tls1.2 | tls1.3</string>
5569 </dict>
5570 ```
5571
5572 #### policies.json
5573 ```
5574 {
5575 "policies": {
5576 "SSLVersionMax": "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
5577 }
5578 }
5579 ```
5580 ### SSLVersionMin
5581
5582 Set and lock the minimum version of TLS.
5583
5584 **Compatibility:** Firefox 66, Firefox ESR 60.6\
5585 **CCK2 Equivalent:** N/A\
5586 **Preferences Affected:** `security.tls.version.min`
5587
5588 #### Windows (GPO)
5589 ```
5590 Software\Policies\Mozilla\Firefox\SSLVersionMin = "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
5591 ```
5592 #### Windows (Intune)
5593 OMA-URI:
5594 ```
5595 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SSLVersionMin
5596 ```
5597 Value (string):
5598 ```
5599 <enabled/>
5600 <data id="SSLVersion" value="tls1 | tls1.2 | tls1.3"/>
5601 ```
5602 #### macOS
5603 ```
5604 <dict>
5605 <key>SSLVersionMin</key>
5606 <string>tls1 | tls1.1 | tls1.2 | tls1.3</string>
5607 </dict>
5608 ```
5609
5610 #### policies.json
5611 ```
5612 {
5613 "policies": {
5614 "SSLVersionMin": "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
5615 }
5616 }
5617 ```
5618 ### SupportMenu
5619 Add a menuitem to the help menu for specifying support information.
5620
5621 **Compatibility:** Firefox 68.0.1, Firefox ESR 68.0.1\
5622 **CCK2 Equivalent:** helpMenu\
5623 **Preferences Affected:** N/A
5624
5625 #### Windows (GPO)
5626 ```
5627 Software\Policies\Mozilla\Firefox\SupportMenu\Title = "Support Menu"
5628 Software\Policies\Mozilla\Firefox\SupportMenu\URL = "http://example.com/support"
5629 Software\Policies\Mozilla\Firefox\SupportMenu\AccessKey = "S"
5630 ```
5631 #### Windows (Intune)
5632 OMA-URI:
5633 ```
5634 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SupportMenu
5635 ```
5636 Value (string):
5637 ```
5638 <enabled/>
5639 <data id="SupportMenuTitle" value="Support Menu"/>
5640 <data id="SupportMenuURL" value="http://example.com/support"/>
5641 <data id="SupportMenuAccessKey" value="S">
5642 ```
5643 #### macOS
5644 ```
5645 <dict>
5646 <key>SupportMenu</key>
5647 <dict>
5648 <key>Title</key>
5649 <string>SupportMenu</string>
5650 <key>URL</key>
5651 <string>http://example.com/support</string>
5652 <key>AccessKey</key>
5653 <string>S</string>
5654 </dict>
5655 </dict>
5656 ```
5657 #### policies.json
5658 ```
5659 {
5660 "policies": {
5661 "SupportMenu": {
5662 "Title": "Support Menu",
5663 "URL": "http://example.com/support",
5664 "AccessKey": "S"
5665 }
5666 }
5667 }
5668 ```
5669 ### UserMessaging
5670
5671 Prevent Firefox from messaging the user in certain situations.
5672
5673 `WhatsNew` Remove the "What's New" icon and menuitem.
5674
5675 `ExtensionRecommendations` If false, don't recommend extensions while the user is visiting web pages.
5676
5677 `FeatureRecommendations` If false, don't recommend browser features.
5678
5679 `UrlbarInterventions` If false, Don't offer Firefox specific suggestions in the URL bar.
5680
5681 `SkipOnboarding` If true, don't show onboarding messages on the new tab page.
5682
5683 `MoreFromMozilla` If false, don't show the "More from Mozilla" section in Preferences. (Firefox 98)
5684
5685 **Compatibility:** Firefox 75, Firefox ESR 68.7\
5686 **CCK2 Equivalent:** N/A\
5687 **Preferences Affected:** `browser.messaging-system.whatsNewPanel.enabled`, `browser.newtabpage.activity-stream.asrouter.userprefs.cfr.addons`, `browser.newtabpage.activity-stream.asrouter.userprefs.cfr.features`, `browser.aboutwelcome.enabled`, `browser.preferences.moreFromMozilla`
5688
5689 #### Windows (GPO)
5690 ```
5691 Software\Policies\Mozilla\Firefox\UserMessaging\WhatsNew = 0x1 | 0x0
5692 Software\Policies\Mozilla\Firefox\UserMessaging\ExtensionRecommendations = 0x1 | 0x0
5693 Software\Policies\Mozilla\Firefox\UserMessaging\FeatureRecommendations = 0x1 | 0x0
5694 Software\Policies\Mozilla\Firefox\UserMessaging\UrlbarInterventions = 0x1 | 0x0
5695 Software\Policies\Mozilla\Firefox\UserMessaging\SkipOnboarding = 0x1 | 0x0
5696 Software\Policies\Mozilla\Firefox\UserMessaging\MoreFromMozilla = 0x1 | 0x0
5697 ```
5698 #### Windows (Intune)
5699 OMA-URI:
5700 ```
5701 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_WhatsNew
5702 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_ExtensionRecommendations
5703 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_FeatureRecommendations
5704 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_UrlbarInterventions
5705 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_SkipOnboarding
5706 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_MoreFromMozilla
5707 ```
5708 Value (string):
5709 ```
5710 <enabled/> or <disabled/>
5711 ```
5712 #### macOS
5713 ```
5714 <dict>
5715 <key>UserMessaging</key>
5716 <dict>
5717 <key>WhatsNew</key>
5718 <true/> | <false/>
5719 <key>ExtensionRecommendations</key>
5720 <true/> | <false/>
5721 <key>FeatureRecommendations</key>
5722 <true/> | <false/>
5723 <key>UrlbarInterventions</key>
5724 <true/> | <false/>
5725 <key>SkipOnboarding</key>
5726 <true/> | <false/>
5727 <key>MoreFromMozilla</key>
5728 <true/> | <false/>
5729 </dict>
5730 </dict>
5731 ```
5732 #### policies.json
5733 ```
5734 {
5735 "policies": {
5736 "UserMessaging": {
5737 "WhatsNew": true | false,
5738 "ExtensionRecommendations": true | false,
5739 "FeatureRecommendations": true | false,
5740 "UrlbarInterventions": true | false,
5741 "SkipOnboarding": true | false,
5742 "MoreFromMozilla": true | false
5743 }
5744 }
5745 }
5746 ```
5747 ### UseSystemPrintDialog
5748 Use the system print dialog instead of the print preview window.
5749
5750 **Compatibility:** Firefox 102\
5751 **CCK2 Equivalent:** N/A\
5752 **Preferences Affected:** `print.prefer_system_dialog`
5753
5754 #### Windows (GPO)
5755 ```
5756 Software\Policies\Mozilla\Firefox\UseSystemPrintDialog = 0x1 | 0x0
5757 ```
5758 #### Windows (Intune)
5759 OMA-URI:
5760 ```
5761 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/UseSystemPrintDialog
5762 ```
5763 Value (string):
5764 ```
5765 <enabled/> or <disabled/>
5766 ```
5767 #### macOS
5768 ```
5769 <dict>
5770 <key>UseSystemPrintDialog</key>
5771 <true/> | <false/>
5772 </dict>
5773 ```
5774 #### policies.json
5775 ```
5776 {
5777 "policies": {
5778 "UseSystemPrintDialog": true | false
5779 }
5780 }
5781 ```
5782 ### WebsiteFilter
5783 Block websites from being visited. The parameters take an array of Match Patterns, as documented in https://developer.mozilla.org/en-US/Add-ons/WebExtensions/Match_patterns.
5784 The arrays are limited to 1000 entries each.
5785
5786 If you want to block all URLs, you can use `<all_urls>` or `*://*/*`. You can't have just a `*` on the right side.
5787
5788 For specific protocols, use `https://*/*` or `http://*/*`.
5789
5790 As of Firefox 83 and Firefox ESR 78.5, file URLs are supported.
5791
5792 **Compatibility:** Firefox 60, Firefox ESR 60\
5793 **CCK2 Equivalent:** N/A\
5794 **Preferences Affected:** N/A
5795
5796 #### Windows (GPO)
5797 ```
5798 Software\Policies\Mozilla\Firefox\WebsiteFilter\Block\1 = "<all_urls>"
5799 Software\Policies\Mozilla\Firefox\WebsiteFilter\Exceptions\1 = "http://example.org/*"
5800 ```
5801 #### Windows (Intune)
5802 OMA-URI:
5803 ```
5804 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/B_WebsiteFilter_Block
5805 ```
5806 Value (string):
5807 ```
5808 <enabled/> <data id="WebsiteFilter" value="1&#xF000;&#60;all_urls&#62;"/>
5809 ```
5810 OMA-URI:
5811 ```
5812 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/B_WebsiteFilter_Exceptions
5813 ```
5814 Value (string):
5815 ```
5816 <enabled/>
5817 <data id="WebsiteFilter" value="1&#xF000;http://example.org/*"/>
5818 ```
5819 #### macOS
5820 ```
5821 <dict>
5822 <key>WebsiteFilter</key>
5823 <dict>
5824 <key>Block</key>
5825 <array>
5826 <string><all_urls></string>
5827 </array>
5828 <key>Exceptions</key>
5829 <array>
5830 <string>http://example.org/*</string>
5831 </array>
5832 </dict>
5833
5834 </dict>
5835 ```
5836 #### policies.json
5837 ```
5838 {
5839 "policies": {
5840 "WebsiteFilter": {
5841 "Block": ["<all_urls>"],
5842 "Exceptions": ["http://example.org/*"]
5843 }
5844 }
5845 }
5846 ```
5847 ### WindowsSSO
5848 Allow Windows single sign-on for Microsoft, work, and school accounts.
5849
5850 If this policy is set to true, Firefox will use credentials stored in Windows to sign in to Microsoft, work, and school accounts.
5851
5852 **Compatibility:** Firefox 91\
5853 **CCK2 Equivalent:** N/A\
5854 **Preferences Affected:** `network.http.windows-sso.enabled`
5855
5856 #### Windows (GPO)
5857 ```
5858 Software\Policies\Mozilla\Firefox\WindowsSSO = 0x1 | 0x0
5859 ```
5860 #### Windows (Intune)
5861 OMA-URI:
5862 ```
5863 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/WindowsSSO
5864 ```
5865 Value (string):
5866 ```
5867 <enabled/> or <disabled/>
5868 ```
5869 #### policies.json
5870 ```
5871 {
5872 "policies": {
5873 "WindowsSSO": true | false
5874 }
5875 }
5876 ```
My copy of the policy templates for Firefox

patrick-canterino.de