1 **IMPORTANT**: This file is in active development along with the policies in Firefox. Make sure to check the compatibility section to see if a policy is available in a specific version of Firefox. To get the policy information that corresponds to a specific release, go to https://github.com/mozilla/policy-templates/releases.
3 Policies can be specified using the Group Policy templates on Windows (https://github.com/mozilla/policy-templates/tree/master/windows), configuration profiles on macOS (https://github.com/mozilla/policy-templates/tree/master/mac), or by creating a file called `policies.json`. On Windows, create a directory called `distribution` where the EXE is located and place the file there. On Mac, the file goes into `Firefox.app/Contents/Resources/distribution`. On Linux, the file goes into `firefox/distribution`, where `firefox` is the installation directory for firefox, which varies by distribution.
5 | Policy Name | Description
7 | **[`AppUpdateURL`](#AppUpdateURL)** | Change the URL for application update.
8 | **[`Authentication`](#Authentication)** | Configure sites that support integrated authentication.
9 | **[`BlockAboutAddons`](#blockaboutaddons)** | Block access to the Add-ons Manager (about:addons).
10 | **[`BlockAboutConfig`](#blockaboutconfig)** | Block access to about:config.
11 | **[`BlockAboutProfiles`](#blockaboutprofiles)** | Block access to About Profiles (about:profiles).
12 | **[`BlockAboutSupport`](#blockaboutsupport)** | Block access to Troubleshooting Information (about:support).
13 | **[`Bookmarks`](#bookmarks)** | Add bookmarks in either the bookmarks toolbar or menu.
14 | **[`CaptivePortal`](#captiveportal)** | Enable or disable the detection of captive portals.
15 | **[`Certificates`](#certificates)** |
16 | **[`Certificates -> ImportEnterpriseRoots`](#certificates--importenterpriseroots)** | Trust certificates that have been added to the operating system certificate store by a user or administrator.
17 | **[`Certificates -> Install`](#certificates--install)** | Install certificates into the Firefox certificate store.
18 | **[`Cookies`](#cookies)** | Configure cookie preferences.
19 | **[`DisableSetDesktopBackground`](#disablesetdesktopbackground)** | Remove the "Set As Desktop Background..." menuitem when right clicking on an image.
20 | **[`DisableMasterPasswordCreation`](#disablemasterpasswordcreation)** | Remove the master password functionality.
21 | **[`DisableAppUpdate`](#disableappupdate)** | Turn off application updates.
22 | **[`DisableBuiltinPDFViewer`](#disablebuiltinpdfviewer)** | Disable the built in PDF viewer.
23 | **[`DisableDeveloperTools`](#disabledevelopertools)** | Remove access to all developer tools.
24 | **[`DisableFeedbackCommands`](#disablefeedbackcommands)** | Disable the menus for reporting sites.
25 | **[`DisableFirefoxScreenshots`](#disablefirefoxscreenshots)** | Remove access to Firefox Screenshots.
26 | **[`DisableFirefoxAccounts`](#disablefirefoxaccounts)** | Disable Firefox Accounts integration (Sync).
27 | **[`DisableFirefoxStudies`](#disablefirefoxstudies)** | Disable Firefox studies (Shield).
28 | **[`DisableForgetButton`](#disableforgetbutton)** | Disable the "Forget" button.
29 | **[`DisableFormHistory`](#disableformhistory)** | Turn off saving information on web forms and the search bar.
30 | **[`DisablePocket`](#disablepocket)** | Remove Pocket in the Firefox UI.
31 | **[`DisablePrivateBrowsing`](#disableprivatebrowsing)** | Remove access to private browsing.
32 | **[`DisableProfileImport`](#disableprofileimport)** | Disables the "Import data from another browser" option in the bookmarks window.
33 | **[`DisableProfileRefresh`](#disableprofilerefresh)** | Disable the Refresh Firefox button on about:support and support.mozilla.org
34 | **[`DisableSafeMode`](#disablesafemode)** | Disable safe mode.
35 | **[`DisableSecurityBypass`](#disablesecuritybypass)** | Prevent the user from bypassing security in certain cases.
36 | **[`DisableSystemAddonUpdate`](#disablesystemaddonupdate)** | Prevent system add-ons from being installed or update.
37 | **[`DisableTelemetry`](#disabletelemetry)** | DisableTelemetry
38 | **[`DisplayBookmarksToolbar`](#displaybookmarkstoolbar)** | Set the initial state of the bookmarks toolbar.
39 | **[`DisplayMenuBar`](#displaymenubar)** | Set the initial state of the menubar
40 | **[`DNSOverHTTPS`](#dnsoverhttps)** | Configure DNS over HTTPS.
41 | **[`DontCheckDefaultBrowser`](#dontcheckdefaultbrowser)** | Don't check if Firefox is the default browser at startup.
42 | **[`EnableTrackingProtection`](#enabletrackingprotection)** | Configure tracking protection.
43 | **[`Extensions`](#extensions)** | Control the installation, uninstallation and locking of extensions.
44 | **[`ExtensionUpdate`](#extensionupdate)** | Control extension updates.
45 | **[`FlashPlugin`](#flashplugin)** | Configure the default Flash plugin policy as well as origins for which Flash is allowed.
46 | **[`HardwareAcceleration`](#hardwareacceleration)** | Control hardware acceleration.
47 | **[`Homepage`](#homepage)** | Configure the default homepage and how Firefox starts.
48 | **[`InstallAddonsPermission`](#installaddonspermission)** | Configure the default extension install policy as well as origins for extension installs are allowed.
49 | **[`NetworkPrediction`](#networkprediction)** | Enable or disable network prediction (DNS prefetching).
50 | **[`NoDefaultBookmarks`](#nodefaultbookmarks)** | Disable the creation of default bookmarks.
51 | **[`OfferToSaveLogins`](#offertosavelogins)** | Control whether or not Firefox offers to save passwords.
52 | **[`OverrideFirstRunPage`](#overridefirstrunpage)** | Override the first run page.
53 | **[`OverridePostUpdatePage`](#overridepostupdatepage)** | Override the upgrade page.
54 | **[`PopupBlocking`](#popupblocking)** | Configure the default pop-up window policy as well as origins for which pop-up windows are allowed.
55 | **[`Permissions`](#permissions)** | Set permissions associated with camera, microphone, location, and notifications.
56 | **[`Proxy`](#proxy)** | Configure proxy settings.
57 | **[`RequestedLocales`](#requestedlocales)** | Set the the list of requested locales for the application in order of preference.
58 | **[`SanitizeOnShutdown`](#sanitizeonshutdown)** | Clear all data on shutdown.
59 | **[`SearchBar`](#searchbar)** | Set whether or not search bar is displayed.
60 | **[`SearchEngines`](#searchengines-this-policy-is-only-available-on-the-esr)** |
61 | **[`SearchEngines -> Default`](#searchengines--default)** | Set the default search engine.
62 | **[`SearchEngines -> PreventInstalls`](#searchengines--preventinstalls)** | Prevent installing search engines from webpages.
63 | **[`SearchEngines -> Remove`](#searchengines--remove)** | Hide built-in search engines.
64 | **[`SearchEngines -> Add`](#searchengines--add)** | Add new search engines.
65 | **[`SecurityDevices`](#securitydevices)** | Install PKCS #11 modules.
66 | **[`SSLVersionMax`](#sslversionmax)** | Set and lock the maximum version of TLS.
67 | **[`SSLVersionMin`](#sslversionmin)** | Set and lock the minimum version of TLS.
68 | **[`WebsiteFilter`](#websitefilter)** | Block websites from being visited.
73 Change the URL for application update.
75 **Compatibility:** Firefox 62, Firefox ESR 60.2\
76 **CCK2 Equivalent:** N/A\
77 **Preferences Affected:** `app.update.url`
81 Software\Policies\Mozilla\Firefox\AppUpdateURL = "https://yoursite.com"
86 <key>AppUpdateURL</key>
87 <string>https://yoursite.com</string>
94 "AppUpdateURL": "https://yoursite.com"
100 Configure sites that support integrated authentication.
102 See https://developer.mozilla.org/en-US/docs/Mozilla/Integrated_authentication for more information.
104 **Compatibility:** Firefox 60, Firefox ESR 60 (AllowNonFQDN added in 62/60.2)\
105 **CCK2 Equivalent:** N/A\
106 **Preferences Affected:** `network.negotiate-auth.trusted-uris`, `network.negotiate-auth.delegation-uris`, `network.automatic-ntlm-auth.trusted-uris`, `network.automatic-ntlm-auth.allow-non-fqdn`, `network.negotiate-auth.allow-non-fqdn`
110 Software\Policies\Mozilla\Firefox\Authentication\SPNEGO\1 = "mydomain.com"
111 Software\Policies\Mozilla\Firefox\Authentication\SPNEGO\2 = "https://myotherdomain.com"
112 Software\Policies\Mozilla\Firefox\Authentication\Delegated\1 = "mydomain.com"
113 Software\Policies\Mozilla\Firefox\Authentication\Delegated\2 = "https://myotherdomain.com"
114 Software\Policies\Mozilla\Firefox\Authentication\NTLM\1 = "mydomain.com"
115 Software\Policies\Mozilla\Firefox\Authentication\NTLM\2 = "https://myotherdomain.com"
116 Software\Policies\Mozilla\Firefox\Authentication\AllowNonFQDN\SPNEGO = 0x1 | 0x0
117 Software\Policies\Mozilla\Firefox\Authentication\AllowNonFQDN\NTLM = 0x1 | 0x0
122 <key>Authentication</key>
126 <string>mydomain.com</string>
127 <string>https://myotherdomain.com</string>
131 <string>mydomain.com</string>
132 <string>https://myotherdomain.com</string>
136 <string>mydomain.com</string>
137 <string>https://myotherdomain.com</string>
139 <key>AllowNonFQDN</key>
154 "SPNEGO": ["mydomain.com", "https://myotherdomain.com"],
155 "Delegated": ["mydomain.com", "https://myotherdomain.com"],
156 "NTLM": ["mydomain.com", "https://myotherdomain.com"],
158 "SPNEGO": true | false,
167 Block access to the Add-ons Manager (about:addons).
169 **Compatibility:** Firefox 60, Firefox ESR 60\
170 **CCK2 Equivalent:** `disableAddonsManager`\
171 **Preferences Affected:** N/A
175 Software\Policies\Mozilla\Firefox\BlockAboutAddons = 0x1 | 0x0
180 <key>BlockAboutAddons</key>
188 "BlockAboutAddons": true | false
194 Block access to about:config.
196 **Compatibility:** Firefox 60, Firefox ESR 60\
197 **CCK2 Equivalent:** `disableAboutConfig`\
198 **Preferences Affected:** N/A
202 Software\Policies\Mozilla\Firefox\BlockAboutConfig = 0x1 | 0x0
207 <key>BlockAboutConfig</key>
215 "BlockAboutConfig": true | false
219 ### BlockAboutProfiles
221 Block access to About Profiles (about:profiles).
223 **Compatibility:** Firefox 60, Firefox ESR 60\
224 **CCK2 Equivalent:** `disableAboutProfiles`\
225 **Preferences Affected:** N/A
229 Software\Policies\Mozilla\Firefox\BlockAboutProfiles = 0x1 | 0x0
234 <key>BlockAboutProfiles</key>
242 "BlockAboutProfiles": true | false
246 ### BlockAboutSupport
248 Block access to Troubleshooting Information (about:support).
250 **Compatibility:** Firefox 60, Firefox ESR 60\
251 **CCK2 Equivalent:** `disableAboutSupport`\
252 **Preferences Affected:** N/A
256 Software\Policies\Mozilla\Firefox\BlockAboutSupport = 0x1 | 0x0
261 <key>BlockAboutSupport</key>
269 "BlockAboutSupport": true | false
275 Add bookmarks in either the bookmarks toolbar or menu. Only `Title` and `URL` are required. If `Placement` is not specified, the bookmark will be placed on the toolbar. If `Folder` is specified, it is automatically created and bookmarks with the same folder name are grouped together.
277 **Compatibility:** Firefox 60, Firefox ESR 60\
278 **CCK2 Equivalent:** `bookmarks.toolbar`,`bookmarks.menu`\
279 **Preferences Affected:** N/A
283 Software\Policies\Mozilla\Firefox\Bookmarks\1\Title = "Example"
284 Software\Policies\Mozilla\Firefox\Bookmarks\1\URL = "https://example.com"
285 Software\Policies\Mozilla\Firefox\Bookmarks\1\Favicon = "https://example.com/favicon.ico"
286 Software\Policies\Mozilla\Firefox\Bookmarks\1\Placement = "toolbar" | "menu"
287 Software\Policies\Mozilla\Firefox\Bookmarks\1\Folder = "FolderName"
296 <string>Example</string>
298 <string>https://example.com</string>
300 <string>https://example.com/favicon.ico</string>
302 <string>toolbar | menu</string>
304 <string>FolderName</string>
316 "URL": "https://example.com",
317 "Favicon": "https://example.com/favicon.ico",
318 "Placement": "toolbar" | "menu",
319 "Folder": "FolderName"
326 Enable or disable the detection of captive portals.
328 **Compatibility:** Firefox 67, Firefox ESR 60.7\
329 **CCK2 Equivalent:** N/A\
330 **Preferences Affected:** `network.captive-portal-service.enabled`
334 Software\Policies\Mozilla\Firefox\CaptivePortal = 0x1 | 0x0
339 <key>CaptivePortal</key>
347 "CaptivePortal": true | false
353 ### Certificates | ImportEnterpriseRoots
355 Trust certificates that have been added to the operating system certificate store by a user or administrator.
357 See https://support.mozilla.org/kb/setting-certificate-authorities-firefox for more detail.
359 **Compatibility:** Firefox 60, Firefox ESR 60 (macOS support in Firefox 63, Firefox ESR 68)\
360 **CCK2 Equivalent:** N/A\
361 **Preferences Affected:** `security.enterprise_roots.enabled`
365 Software\Policies\Mozilla\Firefox\Certificates\ImportEnterpriseRoots = 0x1 | 0x0
370 <key>Certificates</key>
372 <key>ImportEnterpriseRoots</key>
382 "ImportEnterpriseRoots": true | false
387 ### Certificates | Install
389 Install certificates into the Firefox certificate store. If only a filename is specified, Firefox searches for the file in the following locations:
392 - %USERPROFILE%\AppData\Local\Mozilla\Certificates
393 - %USERPROFILE%\AppData\Roaming\Mozilla\Certificates
395 - /Library/Application Support/Mozilla/Certificates
396 - ~/Library/Application Support/Mozilla/Certificates
398 - /usr/lib/mozilla/certificates
399 - /usr/lib64/mozilla/certificates
400 - ~/.mozilla/certificates
402 Starting with Firefox 65, Firefox 60.5 ESR, a fully qualified path can be used, including UNC paths. You should use the native path style for your operating system. We do not support using %USERPROFILE% or other environment variables on Windows.
404 If you are specifying the path in the policies.json file on Windows, you need to escape your backslashes (`\\`) which means that for UNC paths, you need to escape both (`\\\\`). If you use group policy, you only need one backslash.
406 Certificates are installed using the trust string `CT,CT,`.
408 Binary (DER) and ASCII (PEM) certificates are both supported.
410 **Compatibility:** Firefox 64, Firefox ESR 64\
411 **CCK2 Equivalent:** `certs.ca`\
412 **Preferences Affected:** N/A
416 Software\Policies\Mozilla\Firefox\Certificates\Install\1 = "cert1.der"
417 Software\Policies\Mozilla\Firefox\Certificates\Install\2 = "C:\Users\username\cert2.pem"
422 <key>Certificates</key>
426 <string>cert1.der</string>
427 <string>/Users/username/cert2.pem</string>
437 "Install": ["cert1.der", "/home/username/cert2.pem"]
443 Configure cookie preferences.
445 `Allow` is a list of origins (not domains) where cookies are always allowed. You must include http or https.
447 `Block` is a list of origins (not domains) where cookies are always blocked. You must include http or https.
449 `Default` determines whether cookies are accepted at all.
451 `AcceptThirdParty` determines how third-party cookies are handled.
453 `ExpireAtSessionEnd` determines when cookies expire.
455 `RejectTracker` only rejects cookies for trackers.
457 `Locked` prevents the user from changing cookie preferences.
459 **Compatibility:** Firefox 60, Firefox ESR 60 (RejectTracker was added in Firefox 63)\
460 **CCK2 Equivalent:** N/A\
461 **Preferences Affected:** `network.cookie.cookieBehavior`,`network.cookie.lifetimePolicy`
465 Software\Policies\Mozilla\Firefox\Cookies\Allow\1 = "https://example.com"
466 Software\Policies\Mozilla\Firefox\Cookies\Block\1 = "https://example.org"
467 Software\Policies\Mozilla\Firefox\Cookies\Default = 0x1 | 0x0
468 Software\Policies\Mozilla\Firefox\Cookies\AcceptThirdParty = "always" | "never" |"from-visited"
469 Software\Policies\Mozilla\Firefox\Cookies\ExpireAtSessionEnd = 0x1 | 0x0
470 Software\Policies\Mozilla\Firefox\Cookies\RejectTracker = 0x1 | 0x0
471 Software\Policies\Mozilla\Firefox\Cookies\Locked = 0x1 | 0x0
480 <string>http://example.com</string>
484 <string>http://example.org</string>
488 <key>AcceptThirdParty</key>
489 <string>always | never | from-visited</string>
490 <key>ExpireAtSessionEnd</key>
492 <key>RejectTracker</key>
504 "Allow": ["http://example.org/"],
505 "Block": ["http://example.edu/"],
506 "Default": true | false,
507 "AcceptThirdParty": "always" | "never" | "from-visited"],
508 "ExpireAtSessionEnd": true | false,
509 "RejectTracker": true | false,
510 "Locked": true | false
515 ### DisableSetDesktopBackground
516 Remove the "Set As Desktop Background..." menuitem when right clicking on an image.
518 **Compatibility:** Firefox 60, Firefox ESR 60\
519 **CCK2 Equivalent:** `removeSetDesktopBackground`\
520 **Preferences Affected:** N/A
524 Software\Policies\Mozilla\Firefox\DisableSetDesktopBackground = 0x1 | 0x0
530 <key>DisableSetDesktopBackground</key>
538 "DisableSetDesktopBackground": true | false
542 ### DisableMasterPasswordCreation
543 Remove the master password functionality.
545 **Compatibility:** Firefox 60, Firefox ESR 60\
546 **CCK2 Equivalent:** `noMasterPassword`\
547 **Preferences Affected:** N/A
551 Software\Policies\Mozilla\Firefox\DisableMasterPasswordCreation = 0x1 | 0x0
557 <key>DisableMasterPasswordCreation</key>
565 "DisableMasterPasswordCreation": true | false
570 Turn off application updates.
572 **Compatibility:** Firefox 60, Firefox ESR 60\
573 **CCK2 Equivalent:** `disableFirefoxUpdates`\
574 **Preferences Affected:** N/A
578 Software\Policies\Mozilla\Firefox\DisableAppUpdate = 0x1 | 0x0
583 <key>DisableAppUpdate</key>
591 "DisableAppUpdate": true | false
595 ### DisableBuiltinPDFViewer
596 Disable the built in PDF viewer. PDF files are downloaded and sent externally.
598 **Compatibility:** Firefox 60, Firefox ESR 60\
599 **CCK2 Equivalent:** `disablePDFjs`\
600 **Preferences Affected:** `pdfjs.disabled`
604 Software\Policies\Mozilla\Firefox\DisableBuiltinPDFViewer = 0x1 | 0x0
610 <key>DisableBuiltinPDFViewer</key>
618 "DisableBuiltinPDFViewer": true | false
622 ### DisableDeveloperTools
623 Remove access to all developer tools.
625 **Compatibility:** Firefox 60, Firefox ESR 60\
626 **CCK2 Equivalent:** `removeDeveloperTools`\
627 **Preferences Affected:** `devtools.policy.disabled`
631 Software\Policies\Mozilla\Firefox\DisableDeveloperTools = 0x1 | 0x0`
637 <key>DisableDeveloperTools</key>
645 "DisableDeveloperTools": true | false
649 ### DisableFeedbackCommands
650 Disable the menus for reporting sites (Submit Feedback, Report Deceptive Site).
652 **Compatibility:** Firefox 60, Firefox ESR 60\
653 **CCK2 Equivalent:** N/A\
654 **Preferences Affected:** N/A
658 Software\Policies\Mozilla\Firefox\DisableFeedbackCommands = 0x1 | 0x0
663 <key>DisableFeedbackCommands</key>
671 "DisableFeedbackCommands": true | false
675 ### DisableFirefoxScreenshots
676 Remove access to Firefox Screenshots.
678 **Compatibility:** Firefox 60, Firefox ESR 60\
679 **CCK2 Equivalent:** N/A\
680 **Preferences Affected:** `extensions.screenshots.disabled`
684 Software\Policies\Mozilla\Firefox\DisableFirefoxScreenshots = 0x1 | 0x0
689 <key>DisableFirefoxScreenshots</key>
697 "DisableFirefoxScreenshots": true | false
701 ### DisableFirefoxAccounts
702 Disable Firefox Accounts integration (Sync).
704 **Compatibility:** Firefox 60, Firefox ESR 60\
705 **CCK2 Equivalent:** `disableSync`\
706 **Preferences Affected:** `identity.fxaccounts.enabled`
710 Software\Policies\Mozilla\Firefox\DisableFirefoxAccounts = 0x1 | 0x0
715 <key>DisableFirefoxAccounts</key>
723 "DisableFirefoxAccounts": true | false
727 ### DisableFirefoxStudies
728 Disable Firefox studies (Shield).
730 **Compatibility:** Firefox 60, Firefox ESR 60\
731 **CCK2 Equivalent:** `disableForget`\
732 **Preferences Affected:** N/A
736 Software\Policies\Mozilla\Firefox\DisableFirefoxStudies = 0x1 | 0x0
741 <key>DisableFirefoxStudies</key>
749 "DisableFirefoxStudies": true | false
753 ### DisableForgetButton
754 Disable the "Forget" button.
756 **Compatibility:** Firefox 60, Firefox ESR 60\
757 **CCK2 Equivalent:** `disableForget`\
758 **Preferences Affected:** N/A
762 Software\Policies\Mozilla\Firefox\DisableForgetButton = 0x1 | 0x0
767 <key>DisableForgetButton</key>
775 "DisableForgetButton": true | false
779 ### DisableFormHistory
780 Turn off saving information on web forms and the search bar.
782 **Compatibility:** Firefox 60, Firefox ESR 60\
783 **CCK2 Equivalent:** `disableFormFill`\
784 **Preferences Affected:** ` browser.formfill.enable`
788 Software\Policies\Mozilla\Firefox\DisableFormHistory = 0x1 | 0x0
793 <key>DisableFormHistory</key>
801 "DisableFormHistory": true | false
806 Remove Pocket in the Firefox UI. It does not remove it from the new tab page.
808 **Compatibility:** Firefox 60, Firefox ESR 60\
809 **CCK2 Equivalent:** `disablePocket`\
810 **Preferences Affected:** `extensions.pocket.enabled`
814 Software\Policies\Mozilla\Firefox\DisablePocket = 0x1 | 0x0
819 <key>DisablePocket</key>
827 "DisablePocket": true | false
831 ### DisablePrivateBrowsing
832 Remove access to private browsing.
834 **Compatibility:** Firefox 60, Firefox ESR 60\
835 **CCK2 Equivalent:** `disablePrivateBrowsing`\
836 **Preferences Affected:** N/A
840 Software\Policies\Mozilla\Firefox\DisablePrivateBrowsing = 0x1 | 0x0
845 <key>DisablePrivateBrowsing</key>
853 "DisablePrivateBrowsing": true | false
857 ### DisableProfileImport
858 Disables the "Import data from another browser" option in the bookmarks window.
860 **Compatibility:** Firefox 60, Firefox ESR 60\
861 **CCK2 Equivalent:** N/A\
862 **Preferences Affected:** N/A
866 Software\Policies\Mozilla\Firefox\DisableProfileImport = 0x1 | 0x0
871 <key>DisableProfileImport</key>
879 "DisableProfileImport": true | false
883 ### DisableProfileRefresh
884 Disable the Refresh Firefox button on about:support and support.mozilla.org, as well as the prompt that displays offering to refresh Firefox when you haven't used it in a while.
886 **Compatibility:** Firefox 60, Firefox ESR 60\
887 **CCK2 Equivalent:** `disableResetFirefox`\
888 **Preferences Affected:** `browser.disableResetPrompt`
892 Software\Policies\Mozilla\Firefox\DisableProfileRefresh = 0x1 | 0x0
897 <key>DisableProfileRefresh</key>
905 "DisableProfileRefresh": true | false
912 **Compatibility:** Firefox 60, Firefox ESR 60 (Windows, macOS)\
913 **CCK2 Equivalent:** `disableSafeMode`\
914 **Preferences Affected:** N/A
918 Software\Policies\Mozilla\Firefox\DisableSafeMode = 0x1 | 0x0
923 <key>DisableSafeMode</key>
931 "DisableSafeMode": true | false
935 ### DisableSecurityBypass
936 Prevent the user from bypassing security in certain cases.
938 `InvalidCertificate` prevents adding an exception when an invalid certificate is shown.
940 `SafeBrowsing` prevents selecting "ignore the risk" and visiting a harmful site anyway.
942 **Compatibility:** Firefox 60, Firefox ESR 60\
943 **CCK2 Equivalent:** N/A\
944 **Preferences Affected:** `security.certerror.hideAddException`,`browser.safebrowsing.allowOverride`
948 Software\Policies\Mozilla\Firefox\DisableSecurityBypass\InvalidCertificate = 0x1 | 0x0
949 Software\Policies\Mozilla\Firefox\DisableSecurityBypass\SafeBrowsing = 0x1 | 0x0
954 <key>DisableSecurityBypass</key>
956 <key>InvalidCertificate</key>
958 <key><SafeBrowsing/key>
967 "DisableSecurityBypass": {
968 "InvalidCertificate": true false,
969 "SafeBrowsing": true false
974 ### DisableSystemAddonUpdate
975 Prevent system add-ons from being installed or update.
977 **Compatibility:** Firefox 60, Firefox ESR 60\
978 **CCK2 Equivalent:** N/A\
979 **Preferences Affected:** N/A
982 ```Software\Policies\Mozilla\Firefox\DisableSystemAddonUpdate = 0x1 | 0x0
987 <key>DisableSystemAddonUpdate</key>
995 "DisableSystemAddonUpdate": true | false
1000 Prevent the upload of telemetry data.
1002 Mozilla recommends that you do not disable telemetry. Information collected through telemetry helps us build a better product for businesses like yours.
1004 **Compatibility:** Firefox 60, Firefox ESR 60\
1005 **CCK2 Equivalent:** `disableTelemetry`\
1006 **Preferences Affected:** `datareporting.healthreport.uploadEnabled,datareporting.policy.dataSubmissionEnabled`
1010 Software\Policies\Mozilla\Firefox\DisableTelemetry = 0x1 | 0x0
1015 <key>DisableTelemetry</key>
1023 "DisableTelemetry": true | false
1027 ### DisplayBookmarksToolbar
1028 Set the initial state of the bookmarks toolbar. A user can still hide it and it will stay hidden.
1030 **Compatibility:** Firefox 60, Firefox ESR 60\
1031 **CCK2 Equivalent:** `displayBookmarksToolbar`\
1032 **Preferences Affected:** N/A
1036 Software\Policies\Mozilla\Firefox\DisplayBookmarksToolbar = 0x1 | 0x0
1041 <key>DisplayBookmarksToolbar</key>
1049 "DisplayBookmarksToolbar": true | false
1054 Set the initial state of the menubar. A user can still hide it and it will stay hidden.
1056 **Compatibility:** Firefox 60, Firefox ESR 60 (Windows, some Linux)\
1057 **CCK2 Equivalent:** `displayMenuBar`\
1058 **Preferences Affected:** N/A
1062 Software\Policies\Mozilla\Firefox\DisplayMenuBar = 0x1 | 0x0
1067 <key>DisplayMenuBar</key>
1075 "DisplayMenuBar": true | false
1080 Configure DNS over HTTPS.
1082 `Enabled` determines whether DNS over HTTPS is enabled
1084 `ProviderURL` is a URL to another provider.
1086 `Locked` prevents the user from changing DNS over HTTPS preferences.
1088 **Compatibility:** Firefox 63, Firefox ESR 68\
1089 **CCK2 Equivalent:** N/A\
1090 **Preferences Affected:** `network.trr.mode`,`network.trr.uri`
1094 Software\Policies\Mozilla\Firefox\Cookies\Enabled = 0x1 | 0x0
1095 Software\Policies\Mozilla\Firefox\Cookies\ProviderURL = "URL_TO_ALTERNATE_PROVIDER"
1096 Software\Policies\Mozilla\Firefox\Cookies\Locked = 0x1 | 0x0
1105 <key>ProviderURL</key>
1106 <string>URL_TO_ALTERNATE_PROVIDER</string>
1117 "Enabled": true | false,
1118 "ProviderURL": "URL_TO_ALTERNATE_PROVIDER",
1119 "Locked": true | false
1124 ### DontCheckDefaultBrowser
1125 Don't check if Firefox is the default browser at startup.
1127 **Compatibility:** Firefox 60, Firefox ESR 60\
1128 **CCK2 Equivalent:** `dontCheckDefaultBrowser`\
1129 **Preferences Affected:** `browser.shell.checkDefaultBrowser`
1133 Software\Policies\Mozilla\Firefox\DontCheckDefaultBrowser = 0x1 | 0x0
1138 <key>DontCheckDefaultBrowser</key>
1146 "DontCheckDefaultBrowser": true | false
1150 ### EnableTrackingProtection
1151 Configure tracking protection.
1153 If this policy is not configured, tracking protection is not enabled by default in the browser, but it is enabled by default in private browsing and the user can change it.
1155 If `Value` is set to false, tracking protection is disabled and locked in both the regular browser and private browsing.
1157 If `Value` is set to true, tracking protection is enabled by default in both the regular browser and private browsing and the `Locked` value determines whether or not a user can change it.
1159 **Compatibility:** Firefox 60, Firefox ESR 60\
1160 **CCK2 Equivalent:** `dontCheckDefaultBrowser`\
1161 **Preferences Affected:** `privacy.trackingprotection.enabled`,`privacy.trackingprotection.pbmode.enabled`
1165 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Value = 0x1 | 0x0
1166 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Locked = 0x1 | 0x0
1171 <key>EnableTrackingProtection</key>
1185 "EnableTrackingProtection": {
1186 "Value": [true, false],
1187 "Locked": [true, false]
1192 Control the installation, uninstallation and locking of extensions.
1194 `Install` is a list of URLs or native paths for extensions to be installed.
1196 `Uninstall` is a list of extension IDs that should be uninstalled if found.
1198 `Locked` is a list of extension IDs that the user cannot disable or uninstall.
1200 **Compatibility:** Firefox 60, Firefox ESR 60\
1201 **CCK2 Equivalent:** `addons`\
1202 **Preferences Affected:** N/A
1206 Software\Policies\Mozilla\Firefox\Extensions\Install\1 = "https://addons.mozilla.org/firefox/downloads/somefile.xpi"
1207 Software\Policies\Mozilla\Firefox\Extensions\Install\2 = "//path/to/xpi"
1208 Software\Policies\Mozilla\Firefox\Extensions\Uninstall\1 = "bad_addon_id@mozilla.org"
1209 Software\Policies\Mozilla\Firefox\Extensions\Locked\1 = "addon_id@mozilla.org"
1214 <key>Extensions</key>
1218 <string>https://addons.mozilla.org/firefox/downloads/somefile.xpi</string>
1219 <string>//path/to/xpi</string>
1221 <key>Uninstall</key>
1223 <string>bad_addon_id@mozilla.org</string>
1227 <string>addon_id@mozilla.org</string>
1239 "Install": ["https://addons.mozilla.org/firefox/downloads/somefile.xpi", "//path/to/xpi"],
1240 "Uninstall": ["bad_addon_id@mozilla.org"],
1241 "Locked": ["addon_id@mozilla.org"]
1247 Control extension updates.
1249 **Compatibility:** Firefox 67, Firefox ESR 60.7\
1250 **CCK2 Equivalent:** N/A\
1251 **Preferences Affected:** `extensions.update.enabled`
1255 Software\Policies\Mozilla\Firefox\ExtensionUpdate = 0x1 | 0x0
1260 <key>ExtensionUpdate</key>
1268 "ExtensionUpdate": true | false
1273 Configure the default Flash plugin policy as well as origins for which Flash is allowed.
1275 `Allow` is a list of origins where Flash are allowed.
1277 `Block` is a list of origins where Flash is not allowed.
1279 `Default` determines whether or not Flash is allowed by default.
1281 `Locked` prevents the user from changing Flash preferences.
1283 **Compatibility:** Firefox 60, Firefox ESR 60\
1284 **CCK2 Equivalent:** `permissions.plugin`\
1285 **Preferences Affected:** `plugin.state.flash`
1289 Software\Policies\Mozilla\Firefox\FlashPlugin\Allow\1 = "https://example.org"
1290 Software\Policies\Mozilla\Firefox\FlashPlugin\Block\1 = "https://example.edu"
1291 Software\Policies\Mozilla\Firefox\FlashPlugin\Default = 0x1 | 0x0
1292 Software\Policies\Mozilla\Firefox\FlashPlugin\Locked = 0x1 | 0x0
1297 <key>FlashPlugin</key>
1301 <string>http://example.org</string>
1305 <string>http://example.edu</string>
1319 "Allow": ["http://example.org/"],
1320 "Block": ["http://example.edu/"],
1321 "Default": true | false,
1322 "Locked": true | false
1327 ### HardwareAcceleration
1328 Control hardware acceleration.
1330 **Compatibility:** Firefox 60, Firefox ESR 60\
1331 **CCK2 Equivalent:** N/A\
1332 **Preferences Affected:** `layers.acceleration.disabled`
1336 Software\Policies\Mozilla\Firefox\HardwareAcceleration = 0x1 | 0x0
1341 <key>HardwareAcceleration</key>
1349 "HardwareAcceleration": true | false
1354 Configure the default homepage and how Firefox starts.
1356 `URL` is the default homepage.
1358 `Locked` prevents the user from changing homepage preferences.
1360 `Additional` allows for more than one homepage.
1362 `StartPage` is how Firefox starts. The choices are no homepage, the default homepage or the previous session.
1364 **Compatibility:** Firefox 60, Firefox ESR 60 (StartPage was added in Firefox 60, Firefox ESR 60.4)\
1365 **CCK2 Equivalent:** `homePage`,`lockHomePage`\
1366 **Preferences Affected:** `browser.startup.homepage`,`browser.startup.page`
1370 Software\Policies\Mozilla\Firefox\Homepage\URL = "https://example.com"
1371 Software\Policies\Mozilla\Firefox\Homepage\Locked = 0x1 | 0x0
1372 Software\Policies\Mozilla\Firefox\Homepage\Additional\1 = "https://example.org"
1373 Software\Policies\Mozilla\Firefox\Homepage\Additional\2 = "https://example.edu"
1374 Software\Policies\Mozilla\Firefox\Homepage\StartPage = "none" | "homepage" | "previous-session"
1382 <string>http://example.com</string>
1385 <key>Additional</key>
1387 <string>http://example.org</string>
1388 <string>http://example.edu</string>
1390 <key>StartPage</key>
1391 <string>always | never | from-visited</string>
1400 "URL": "http://example.com/",
1401 "Locked": true | false,
1402 "Additional": ["http://example.org/",
1403 "http://example.edu/"],
1404 "StartPage": "none" | "homepage" | "previous-session"
1409 ### InstallAddonsPermission
1410 Configure the default extension install policy as well as origins for extension installs are allowed. This policy does not override turning off all extension installs.
1412 `Allow` is a list of origins where extension installs are allowed.
1414 `Default` determines whether or not extension installs are allowed by default.
1416 **Compatibility:** Firefox 60, Firefox ESR 60\
1417 **CCK2 Equivalent:** `permissions.install`\
1418 **Preferences Affected:** `xpinstall.enabled`
1422 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Allow\1 = "https://example.org"
1423 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Allow\2 = "https://example.edu"
1424 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Default = 0x1 | 0x0
1429 <key>InstallAddonsPermission</key>
1433 <string>http://example.org</string>
1434 <string>http://example.edu</string>
1445 "InstallAddonsPermission": {
1446 "Allow": ["http://example.org/",
1447 "http://example.edu/"],
1448 "Default": true | false
1453 ### NoDefaultBookmarks
1454 Disable the creation of default bookmarks.
1456 This policy is only effective if the user profile has not been created yet.
1458 **Compatibility:** Firefox 60, Firefox ESR 60\
1459 **CCK2 Equivalent:** `removeDefaultBookmarks`\
1460 **Preferences Affected:** N/A
1464 Software\Policies\Mozilla\Firefox\NoDefaultBookmarks = 0x1 | 0x0
1469 <key>NoDefaultBookmarks</key>
1477 "NoDefaultBookmarks": true | false
1481 ### NetworkPrediction
1482 Enable or disable network prediction (DNS prefetching).
1484 **Compatibility:** Firefox 67, Firefox ESR 60.7\
1485 **CCK2 Equivalent:** N/A\
1486 **Preferences Affected:** `network.dns.disablePrefetch`,`network.dns.disablePrefetchFromHTTPS`
1490 Software\Policies\Mozilla\Firefox\NetworkPrediction = 0x1 | 0x0
1495 <key>NetworkPrediction</key>
1503 "NetworkPrediction": true | false
1506 ### OfferToSaveLogins
1507 Control whether or not Firefox offers to save passwords.
1509 **Compatibility:** Firefox 60, Firefox ESR 60\
1510 **CCK2 Equivalent:** `dontRememberPasswords`\
1511 **Preferences Affected:** `signon.rememberSignons`
1515 Software\Policies\Mozilla\Firefox\OfferToSaveLogins = 0x1 | 0x0
1520 <key>OfferToSaveLogins</key>
1528 "OfferToSaveLogins": true | false
1532 ### OverrideFirstRunPage
1533 Override the first run page. If the value is blank, no first run page is displayed.
1535 **Compatibility:** Firefox 60, Firefox ESR 60\
1536 **CCK2 Equivalent:** `welcomePage`,`noWelcomePage`\
1537 **Preferences Affected:** `startup.homepage_welcome_url`
1541 Software\Policies\Mozilla\Firefox\OverrideFirstRunPage = "http://example.org"
1546 <key>OverrideFirstRunPage</key>
1547 <string>http://example.org</string>
1554 "OverrideFirstRunPage": ""http://example.org""
1557 ### OverridePostUpdatePage
1558 Override the upgrade page. If the value is blank, no upgrade page is displayed.
1560 **Compatibility:** Firefox 60, Firefox ESR 60\
1561 **CCK2 Equivalent:** `upgradePage`,`noUpgradePage`\
1562 **Preferences Affected:** `startup.homepage_override_url`
1566 Software\Policies\Mozilla\Firefox\OverridePostUpdatePage = "http://example.org"
1571 <key>OverridePostUpdatePage</key>
1572 <string>http://example.org</string>
1579 "OverridePostUpdatePage": ""http://example.org""
1583 Set permissions associated with camera, microphone, location, and notifications
1585 `Allow` is a list of origins where the feature is allowed.
1587 `Block` is a list of origins where the feature is not allowed.
1589 `BlockNewRequests` determines whether or not new requests can be made for the feature.
1591 `Locked` prevents the user from changing preferences for the feature.
1593 **Compatibility:** Firefox 62, Firefox ESR 60.2\
1594 **CCK2 Equivalent:** N/A\
1595 **Preferences Affected:** `permissions.default.camera`,`permissions.default.microphone`,`permissions.default.geo`,`permissions.default.desktop-notification`
1599 Software\Policies\Mozilla\Firefox\Permissions\Camera\Allow\1 = "https://example.org"
1600 Software\Policies\Mozilla\Firefox\Permissions\Camera\Block\1 = "https://example.edu"
1601 Software\Policies\Mozilla\Firefox\Permissions\Camera\BlockNewRequests = 0x1 | 0x0
1602 Software\Policies\Mozilla\Firefox\Permissions\Camera\Locked = 0x1 | 0x0
1603 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Allow\1 = "https://example.org"
1604 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Block\1 = "https://example.edu"
1605 Software\Policies\Mozilla\Firefox\Permissions\Microphone\BlockNewRequests = 0x1 | 0x0
1606 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Locked = 0x1 | 0x0
1607 Software\Policies\Mozilla\Firefox\Permissions\Location\Allow\1 = "https://example.org"
1608 Software\Policies\Mozilla\Firefox\Permissions\Location\Block\1 = "https://example.edu"
1609 Software\Policies\Mozilla\Firefox\Permissions\Location\BlockNewRequests = 0x1 | 0x0
1610 Software\Policies\Mozilla\Firefox\Permissions\Location\Locked = 0x1 | 0x0
1611 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Allow\1 = "https://example.org"
1612 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Block\1 = "https://example.edu"
1613 Software\Policies\Mozilla\Firefox\Permissions\Notifications\BlockNewRequests = 0x1 | 0x0
1614 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Locked = 0x1 | 0x0
1619 <key>Permissions</key>
1625 <string>https://example.org</string>
1629 <string>https://example.edu</string>
1631 <key>BlockNewRequests</key>
1636 <key>Microphone</key>
1640 <string>https://example.org</string>
1644 <string>https://example.edu</string>
1646 <key>BlockNewRequests</key>
1655 <string>https://example.org</string>
1659 <string>https://example.edu</string>
1661 <key>BlockNewRequests</key>
1666 <key>Notifications</key>
1670 <string>https://example.org</string>
1674 <string>https://example.edu</string>
1676 <key>BlockNewRequests</key>
1690 "Allow": ["https://example.org"],
1691 "Block": ["https://example.edu"],
1692 "BlockNewRequests": true | false,
1693 "Locked": true | false
1696 "Allow": ["https://example.org"],
1697 "Block": ["https://example.edu"],
1698 "BlockNewRequests": true | false,
1699 "Locked": true | false
1702 "Allow": ["https://example.org"],
1703 "Block": ["https://example.edu"],
1704 "BlockNewRequests": true | false,
1705 "Locked": true | false
1708 "Allow": ["https://example.org"],
1709 "Block": ["https://example.edu"],
1710 "BlockNewRequests": true | false,
1711 "Locked": true | false
1718 Configure the default pop-up window policy as well as origins for which pop-up windows are allowed.
1720 `Allow` is a list of origins where popup-windows are allowed.
1722 `Default` determines whether or not pop-up windows are allowed by default.
1724 `Locked` prevents the user from changing pop-up preferences.
1726 **Compatibility:** Firefox 60, Firefox ESR 60\
1727 **CCK2 Equivalent:** `permissions.popup`\
1728 **Preferences Affected:** `dom.disable_open_during_load`
1732 Software\Policies\Mozilla\Firefox\PopupBlocking\Allow\1 = "https://example.org"
1733 Software\Policies\Mozilla\Firefox\PopupBlocking\Allow\2 = "https://example.edu"
1734 Software\Policies\Mozilla\Firefox\PopupBlocking\Default = 0x1 | 0x0
1735 Software\Policies\Mozilla\Firefox\PopupBlocking\Locked = 0x1 | 0x0
1740 <key>PopupBlocking</key>
1744 <string>http://example.org</string>
1745 <string>http://example.edu</string>
1759 "Allow": ["http://example.org/",
1760 "http://example.edu/"],
1761 "Default": true | false,
1762 "Locked": true | false
1768 Configugre proxy settings. These settings correspond to the connection settings in Firefox preferences.
1769 To specify ports, append them to the hostnames with a colon (:).
1771 `Mode` is the proxy method being used.
1773 `Locked` is whether or not proxy settings can be changed.
1775 `HTTPProxy` is the HTTP proxy server.
1777 `UseHTTPProxyForAllProtocols` is whether or not the HTTP proxy should be used for all other proxies.
1779 `SSLProxy` is the SSL proxy server.
1781 `FTPProxy` is the FTP proxy server.
1783 `SOCKSProxy` is the SOCKS proxy server
1785 `SOCKSVersion` is the SOCKS version (4 or 5)
1787 `Passthrough` is list of hostnames or IP addresses that will not be proxied. Use `<local>` to bypass proxying for all hostnames which do not contain periods.
1789 `AutoConfigURL` is a URL for proxy configuration (only used if Mode is autoConfig).
1791 `AutoLogin` means do not prompt for authentication if password is saved.
1793 `UseProxyForDNS` to use proxy DNS when using SOCKS v5.
1795 **Compatibility:** Firefoox 60, Firefox ESR 60\
1796 **CCK2 Equivalent:** `networkProxy*`\
1797 **Preferences Affected:** `network.proxy.type`,`network.proxy.autoconfig_url`,`network.proxy.socks_remote_dns`,`signon.autologin.proxy`,`network.proxy.socks_version`,`network.proxy.no_proxies_on`,`network.proxy.share_proxy_settings`,`network.proxy.http`,`network.proxy.http_port`,`network.proxy.ftp`,`network.proxy.ftp_port`,`network.proxy.ssl`,`network.proxy.ssl_port`,`network.proxy.socks`,`network.proxy.socks_port`
1801 Software\Policies\Mozilla\Firefox\Proxy\Mode = "none", "system", "manual", "autoDetect", "autoConfig"
1802 Software\Policies\Mozilla\Firefox\Proxy\Locked = 0x1 | 0x0
1803 Software\Policies\Mozilla\Firefox\=Proxy\HTTPProxy = https://httpproxy.example.com
1804 Software\Policies\Mozilla\Firefox\Proxy\UseHTTPProxyForAllProtocols = 0x1 | 0x0
1805 Software\Policies\Mozilla\Firefox\Proxy\SSLProxy = https://sslproxy.example.com
1806 Software\Policies\Mozilla\Firefox\Proxy\FTPProxy = https://ftpproxy.example.com
1807 Software\Policies\Mozilla\Firefox\Proxy\SOCKSProxy = https://socksproxy.example.com
1808 Software\Policies\Mozilla\Firefox\Proxy\SOCKSVersion = 0x4 | 0x5
1809 Software\Policies\Mozilla\Firefox\Proxy\Passthrough = <local>
1810 Software\Policies\Mozilla\Firefox\Proxy\AutoConfigURL = URL_TO_AUTOCONFIG
1811 Software\Policies\Mozilla\Firefox\Proxy\AutoLogin = 0x1 | 0x0
1812 Software\Policies\Mozilla\Firefox\Proxy\UseProxyForDNS = 0x1 | 0x0
1820 <string>none | system | manual | autoDetect| autoConfig</string>
1823 <key>HTTPProxy</key>
1824 <string>https://httpproxy.example.com</string>
1825 <key>UseHTTPProxyForAllProtocols</key>
1828 <string>https://sslproxy.example.com</string>
1830 <string>https://ftpproxy.example.com</string>
1831 <key>SOCKSProxy</key>
1832 <string>https://socksproxy.example.com</string>
1833 <key>SOCKSVersion</key>
1834 <string>4 | 5</string>
1835 <key>Passthrough</key>
1836 <string><local>></string>
1837 <key>AutoConfigURL</key>
1838 <string>URL_TO_AUTOCONFIG</string>
1839 <key>AutoLogin</key>
1841 <key>UseProxyForDNS</key>
1851 "Mode": "none", "system", "manual", "autoDetect", "autoConfig",
1852 "Locked": [true, false],
1853 "HTTPProxy": "hostname",
1854 "UseHTTPProxyForAllProtocols": [true, false],
1855 "SSLProxy": "hostname",
1856 "FTPProxy": "hostname",
1857 "SOCKSProxy": "hostname",
1858 "SOCKSVersion": 4 | 5
1859 "Passthrough": "<local>",
1860 "AutoConfigURL": "URL_TO_AUTOCONFIG",
1861 "AutoLogin": [true, false],
1862 "UseProxyForDNS": [true, false]
1867 ### RequestedLocales
1868 Set the the list of requested locales for the application in order of preference. It will cause the corresponding language pack to become active.
1870 **Compatibility:** Firefox 64, Firefox ESR 60.4\
1871 **CCK2 Equivalent:** N/A\
1872 **Preferences Affected:** N/A
1875 Software\Policies\Mozilla\Firefox\RequestedLocales\1 = "de"
1876 Software\Policies\Mozilla\Firefox\RequestedLocales\2 = "en-US"
1881 <key>RequestedLocales</key>
1884 <string>en-US</string>
1892 "RequestedLocales": ["de", "en-US"]
1896 ### SanitizeOnShutdown
1897 Clear all data on shutdown, including Browsing & Download History, Cookies, Active Logins, Cache, Form & Search History, Site Preferences and Offline Website Data.
1899 **Compatibility:** Firefox 60, Firefox ESR 60\
1900 **CCK2 Equivalent:** N/A\
1901 **Preferences Affected:** `privacy.sanitize.sanitizeOnShutdown,privacy.clearOnShutdown.cache,privacy.clearOnShutdown.cookies,privacy.clearOnShutdown.downloads,privacy.clearOnShutdown.formdata,privacy.clearOnShutdown.history,privacy.clearOnShutdown.sessions,privacy.clearOnShutdown.siteSettings,privacy.clearOnShutdown.offlineApps`
1904 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown = 0x1 | 0x0
1909 <key>SanitizeOnShutdown</key>
1917 "SanitizeOnShutdown": true | false
1922 Set whether or not search bar is displayed.
1924 **Compatibility:** Firefox 60, Firefox ESR 60\
1925 **CCK2 Equivalent:** `showSearchBar`\
1926 **Preferences Affected:** N/A
1930 Software\Policies\Mozilla\Firefox\SearchBar = "unified" | "separate"
1935 <key>SearchBar</key>
1936 <string>unified | separate</string>
1944 "SearchBar": "unified" | "separate"
1953 ### SearchEngines (This policy is only available on the ESR.)
1955 ### SearchEngines | Default
1957 Set the default search engine. This policy is only available on the ESR.
1959 **Compatibility:** Firefox ESR 60\
1960 **CCK2 Equivalent:** `defaultSearchEngine`\
1961 **Preferences Affected:** N/A
1965 Software\Policies\Mozilla\Firefox\SearchEngines\Default = NAME_OF_SEARCH_ENGINE
1970 <key>SearchEngines</key>
1973 <string>NAME_OF_SEARCH_ENGINE</string>
1982 "Default": "NAME_OF_SEARCH_ENGINE"
1987 ### SearchEngines | PreventInstalls
1989 Prevent installing search engines from webpages.
1991 **Compatibility:** Firefox ESR 60\
1992 **CCK2 Equivalent:** `disableSearchEngineInstall`\
1993 **Preferences Affected:** N/A
1997 Software\Policies\Mozilla\Firefox\SearchEngines\PreventInstalls = 0x1 | 0x0
2002 <key>SearchEngines</key>
2004 <key>PreventInstalls</key>
2014 "PreventInstalls": true | false
2019 ### SearchEngines | Remove
2021 Hide built-in search engines. This policy is only available on the ESR.
2023 **Compatibility:** Firefox ESR 60.2\
2024 **CCK2 Equivalent:** `removeDefaultSearchEngines` (removed all built-in engines)\
2025 **Preferences Affected:** N/A
2029 Software\Policies\Mozilla\Firefox\SearchEngines\Remove\1 = NAME_OF_SEARCH_ENGINE
2034 <key>SearchEngines</key>
2038 <string>NAME_OF_SEARCH_ENGINE</string>
2048 "Remove": ["NAME_OF_SEARCH_ENGINE"]
2053 ### SearchEngines | Add
2055 Adddd new search engines (up to five). This policy is only available on the ESR. `Name` and `URLTemplate` are required.
2057 `Name` is the name of the search engine.
2059 `URLTemplate` is the search URL with {searchTerms} to substitute for the search term.
2061 `Method` is either GET or POST
2063 `IconURL` is a URL for the icon to use.
2065 `Alias` is a keyword to use for the engine.
2067 `Description` is a description of the search engine.
2069 `SuggestURLTemplate` is a search suggestions URL with {searchTerms} to substitute for the search term.
2071 **Compatibility:** Firefox ESR 60\
2072 **CCK2 Equivalent:** `searchplugins`\
2073 **Preferences Affected:** N/A
2076 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Name = "Example1"
2077 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\URLTemplate = "https://www.example.org/q={searchTerms}"
2078 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Method = "GET" | "POST"
2079 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\IconURL = "https://www.example.org/favicon.ico"
2080 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Alias = "example"
2081 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Description = "Example Description"
2082 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\SuggestURLTemplate = "https://www.example.org/suggestions/q={searchTerms}"
2087 <key>SearchEngines</key>
2093 <string>Example1</string>
2094 <key>URLTemplate</key>
2095 <string>https://www.example.org/q={searchTerms}</string>
2097 <string>GET | POST </string>
2099 <string>https://www.example.org/favicon.ico</string>
2101 <string>example</string>
2102 <key>Description</key>
2103 <string>Example Description</string>
2104 <key>SuggestURLTemplate</key>
2105 <string>https://www.example.org/suggestions/q={searchTerms}</string>
2119 "URLTemplate": "https://www.example.org/q={searchTerms}",
2120 "Method": "GET" | "POST",
2121 "IconURL": "https://www.example.org/favicon.ico",
2123 "Description": "Description",
2124 "SuggestURLTemplate": "https://www.example.org/suggestions/q={searchTerms}"
2133 Install PKCS #11 modules.
2135 **Compatibility:** Firefox 64, Firefox ESR 60.4\
2136 **CCK2 Equivalent:** `certs.devices`\
2137 **Preferences Affected:** N/A
2141 Software\Policies\Mozilla\Firefox\SecurityDevices\NAME_OF_DEVICE = PATH_TO_LIBRARY_FOR_DEVICE
2146 <key>SecurityDevices</key>
2148 <key>NAME_OF_DEVICE</key>
2149 <string>PATH_TO_LIBRARY_FOR_DEVICE</string>
2158 "SecurityDevices": {
2159 "NAME_OF_DEVICE": "PATH_TO_LIBRARY_FOR_DEVICE"
2166 Set and lock the maximum version of TLS.
2168 **Compatibility:** Firefox 66, Firefox ESR 60.6\
2169 **CCK2 Equivalent:** N/A\
2170 **Preferences Affected:** `security.tls.version.max`
2174 Software\Policies\Mozilla\Firefox\SSLVersionMax = "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
2179 <key>SSLVersionMax</key>
2180 <string>tls1 | tls1.1 | tls1.2 | tls1.3</string>
2188 "SSLVersionMax": "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
2194 Set and lock the minimum version of TLS.
2196 **Compatibility:** Firefox 66, Firefox ESR 60.6\
2197 **CCK2 Equivalent:** N/A\
2198 **Preferences Affected:** `security.tls.version.min`
2202 Software\Policies\Mozilla\Firefox\SSLVersionMin = "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
2207 <key>SSLVersionMin</key>
2208 <string>tls1 | tls1.1 | tls1.2 | tls1.3</string>
2216 "SSLVersionMin": "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
2221 Block websites from being visited. The parameters take an array of Match Patterns, as documented in https://developer.mozilla.org/en-US/Add-ons/WebExtensions/Match_patterns. Only http/https addresses are supported at the moment. The arrays are limited to 1000 entries each.
2223 **Compatibility:** Firefox 60, Firefox ESR 60\
2224 **CCK2 Equivalent:** N/A\
2225 **Preferences Affected:** N/A
2229 Software\Policies\Mozilla\Firefox\WebsiteFilters\Block\1 = "<all_urls>"
2230 Software\Policies\Mozilla\Firefox\WebsiteFilters\Exceptions\1 = "http://example.org/*"
2235 <key>WebsiteFilter</key>
2239 <string><all_urls></string>
2241 <key>Exceptions</key>
2243 <string>http://example.org/*</string>
2254 "Block": ["<all_urls>"],
2255 "Exceptions": ["http://example.org/*"]