]> git.p6c8.net - policy-templates.git/blob - README.md
git.p6c8.net / policy-templates.git / blob
? search:


98565f0e599b9af30defccdfe65d3a798c0dac17
[policy-templates.git] / README.md
1 **These policies are in active development and so might contain changes that do not work with current versions of Firefox.**
2
3 **You should use the [officially released versions](https://github.com/mozilla/policy-templates/releases) if you are deploying changes.**
4
5 Policies can be specified using the [Group Policy templates on Windows](https://github.com/mozilla/policy-templates/tree/master/windows), [Intune on Windows](https://support.mozilla.org/kb/managing-firefox-intune), [configuration profiles on macOS](https://github.com/mozilla/policy-templates/tree/master/mac), or by creating a file called `policies.json`. On Windows, create a directory called `distribution` where the EXE is located and place the file there. On Mac, the file goes into `Firefox.app/Contents/Resources/distribution`. On Linux, the file goes into `firefox/distribution`, where `firefox` is the installation directory for firefox, which varies by distribution.
6
7 | Policy Name | Description
8 | --- | --- |
9 | **[`AppAutoUpdate`](#appautoupdate)** | Enable or disable automatic application update.
10 | **[`AppUpdateURL`](#appupdateurl)** | Change the URL for application update.
11 | **[`Authentication`](#authentication)** | Configure sites that support integrated authentication.
12 | **[`BlockAboutAddons`](#blockaboutaddons)** | Block access to the Add-ons Manager (about:addons).
13 | **[`BlockAboutConfig`](#blockaboutconfig)** | Block access to about:config.
14 | **[`BlockAboutProfiles`](#blockaboutprofiles)** | Block access to About Profiles (about:profiles).
15 | **[`BlockAboutSupport`](#blockaboutsupport)** | Block access to Troubleshooting Information (about:support).
16 | **[`Bookmarks`](#bookmarks)** | Add bookmarks in either the bookmarks toolbar or menu.
17 | **[`CaptivePortal`](#captiveportal)** | Enable or disable the detection of captive portals.
18 | **[`Certificates`](#certificates)** |
19 | **[`Certificates -> ImportEnterpriseRoots`](#certificates--importenterpriseroots)** | Trust certificates that have been added to the operating system certificate store by a user or administrator.
20 | **[`Certificates -> Install`](#certificates--install)** | Install certificates into the Firefox certificate store.
21 | **[`Cookies`](#cookies)** | Configure cookie preferences.
22 | **[`DisableSetDesktopBackground`](#disablesetdesktopbackground)** | Remove the "Set As Desktop Background..." menuitem when right clicking on an image.
23 | **[`DisableMasterPasswordCreation`](#disablemasterpasswordcreation)** | Remove the master password functionality.
24 | **[`DisableAppUpdate`](#disableappupdate)** | Turn off application updates.
25 | **[`DisableBuiltinPDFViewer`](#disablebuiltinpdfviewer)** | Disable the built in PDF viewer.
26 | **[`DisabledCiphers`](#disabledciphers)** | Disable ciphers.
27 | **[`DisableDefaultBrowserAgent`](#disabledefaultbrowseragent)** | Prevent the default browser agent from taking any actions (Windows only).
28 | **[`DisableDeveloperTools`](#disabledevelopertools)** | Remove access to all developer tools.
29 | **[`DisableFeedbackCommands`](#disablefeedbackcommands)** | Disable the menus for reporting sites.
30 | **[`DisableFirefoxScreenshots`](#disablefirefoxscreenshots)** | Remove access to Firefox Screenshots.
31 | **[`DisableFirefoxAccounts`](#disablefirefoxaccounts)** | Disable Firefox Accounts integration (Sync).
32 | **[`DisableFirefoxStudies`](#disablefirefoxstudies)** | Disable Firefox studies (Shield).
33 | **[`DisableForgetButton`](#disableforgetbutton)** | Disable the "Forget" button.
34 | **[`DisableFormHistory`](#disableformhistory)** | Turn off saving information on web forms and the search bar.
35 | **[`DisablePasswordReveal`](#disablepasswordreveal)** | Do not allow passwords to be revealed in saved logins.
36 | **[`DisablePocket`](#disablepocket)** | Remove Pocket in the Firefox UI.
37 | **[`DisablePrivateBrowsing`](#disableprivatebrowsing)** | Remove access to private browsing.
38 | **[`DisableProfileImport`](#disableprofileimport)** | Disables the "Import data from another browser" option in the bookmarks window.
39 | **[`DisableProfileRefresh`](#disableprofilerefresh)** | Disable the Refresh Firefox button on about:support and support.mozilla.org
40 | **[`DisableSafeMode`](#disablesafemode)** | Disable safe mode within the browser.
41 | **[`DisableSecurityBypass`](#disablesecuritybypass)** | Prevent the user from bypassing security in certain cases.
42 | **[`DisableSystemAddonUpdate`](#disablesystemaddonupdate)** | Prevent system add-ons from being installed or update.
43 | **[`DisableTelemetry`](#disabletelemetry)** | DisableTelemetry
44 | **[`DisplayBookmarksToolbar`](#displaybookmarkstoolbar)** | Set the initial state of the bookmarks toolbar.
45 | **[`DisplayMenuBar (Deprecated)`](#displaymenubar-deprecated)** | Set the initial state of the menubar.
46 | **[`DisplayMenuBar`](#displaymenubar)** | Set the state of the menubar.
47 | **[`DNSOverHTTPS`](#dnsoverhttps)** | Configure DNS over HTTPS.
48 | **[`DontCheckDefaultBrowser`](#dontcheckdefaultbrowser)** | Don't check if Firefox is the default browser at startup.
49 | **[`DefaultDownloadDirectory`](#defaultdownloaddirectory)** | Set the default download directory.
50 | **[`DownloadDirectory`](#downloaddirectory)** | Set and lock the download directory.
51 | **[`EnableTrackingProtection`](#enabletrackingprotection)** | Configure tracking protection.
52 | **[`EncryptedMediaExtensions`](#encryptedmediaextensions)** | Enable or disable Encrypted Media Extensions and optionally lock it.
53 | **[`EnterprisePoliciesEnabled`](#enterprisepoliciesenabled)** | Enable policy support on macOS.
54 | **[`Extensions`](#extensions)** | Control the installation, uninstallation and locking of extensions.
55 | **[`ExtensionSettings`](#extensionsettings)** | Manage all aspects of extensions.
56 | **[`ExtensionUpdate`](#extensionupdate)** | Control extension updates.
57 | **[`FlashPlugin`](#flashplugin)** | Configure the default Flash plugin policy as well as origins for which Flash is allowed.
58 | **[`FirefoxHome`](#firefoxhome)** | Customize the Firefox Home page.
59 | **[`HardwareAcceleration`](#hardwareacceleration)** | Control hardware acceleration.
60 | **[`Homepage`](#homepage)** | Configure the default homepage and how Firefox starts.
61 | **[`InstallAddonsPermission`](#installaddonspermission)** | Configure the default extension install policy as well as origins for extension installs are allowed.
62 | **[`LegacyProfiles`](#legacyprofiles)** | Disable the feature enforcing a separate profile for each installation.
63 | **[`LocalFileLinks`](#localfilelinks)** | Enable linking to local files by origin.
64 | **[`NetworkPrediction`](#networkprediction)** | Enable or disable network prediction (DNS prefetching).
65 | **[`NewTabPage`](#newtabpage)** | Enable or disable the New Tab page.
66 | **[`NoDefaultBookmarks`](#nodefaultbookmarks)** | Disable the creation of default bookmarks.
67 | **[`OfferToSaveLogins`](#offertosavelogins)** | Control whether or not Firefox offers to save passwords.
68 | **[`OfferToSaveLoginsDefault`](#offertosaveloginsdefault)** | Set the default value for whether or not Firefox offers to save passwords.
69 | **[`OverrideFirstRunPage`](#overridefirstrunpage)** | Override the first run page.
70 | **[`OverridePostUpdatePage`](#overridepostupdatepage)** | Override the upgrade page.
71 | **[`PasswordManagerEnabled`](#passwordmanagerenabled)** | Remove (some) access to the password manager.
72 | **[`PDFjs`](#pdfjs)** | Disable or configure PDF.js, the built-in PDF viewer.
73 | **[`Permissions`](#permissions)** | Set permissions associated with camera, microphone, location, and notifications.
74 | **[`PopupBlocking`](#popupblocking)** | Configure the default pop-up window policy as well as origins for which pop-up windows are allowed.
75 | **[`Preferences`](#preferences)** | Set and lock some preferences.
76 | **[`PromptForDownloadLocation`](#promptfordownloadlocation)** | Ask where to save each file before downloading.
77 | **[`Proxy`](#proxy)** | Configure proxy settings.
78 | **[`RequestedLocales`](#requestedlocales)** | Set the the list of requested locales for the application in order of preference.
79 | **[`SanitizeOnShutdown` (All)](#sanitizeonshutdown-all)** | Clear all data on shutdown.
80 | **[`SanitizeOnShutdown` (Selective)](#sanitizeonshutdown-selective)** | Clear data on shutdown.
81 | **[`SearchBar`](#searchbar)** | Set whether or not search bar is displayed.
82 | **[`SearchEngines`](#searchengines-this-policy-is-only-available-on-the-esr)** |
83 | **[`SearchEngines -> Default`](#searchengines--default)** | Set the default search engine.
84 | **[`SearchEngines -> PreventInstalls`](#searchengines--preventinstalls)** | Prevent installing search engines from webpages.
85 | **[`SearchEngines -> Remove`](#searchengines--remove)** | Hide built-in search engines.
86 | **[`SearchEngines -> Add`](#searchengines--add)** | Add new search engines.
87 | **[`SearchSuggestEnabled`](#searchsuggestenabled)** | Enable search suggestions.
88 | **[`SecurityDevices`](#securitydevices)** | Install PKCS #11 modules.
89 | **[`SSLVersionMax`](#sslversionmax)** | Set and lock the maximum version of TLS.
90 | **[`SSLVersionMin`](#sslversionmin)** | Set and lock the minimum version of TLS.
91 | **[`SupportMenu`](#supportmenu)** | Add a menuitem to the help menu for specifying support information.
92 | **[`UserMessaging`](#usermessaging)** | Don't show certain messages to the user.
93 | **[`WebsiteFilter`](#websitefilter)** | Block websites from being visited.
94
95 ### AppAutoUpdate
96
97 Enable or disable **automatic** application update.
98
99 If set to true, application updates are installed without user approval.
100
101 If set to false, application updates are downloaded but the user can choose when to install the update.
102
103 If you have disabled updates via DisableAppUpdate, this policy has no effect.
104
105 **Compatibility:** Firefox 75, Firefox ESR 68.7\
106 **CCK2 Equivalent:** N/A\
107 **Preferences Affected:** app.update.auto
108
109 #### Windows (GPO)
110 ```
111 Software\Policies\Mozilla\Firefox\AppAutoUpdate = 0x1 | 0x0
112 ```
113 #### Windows (Intune)
114 OMA-URI:
115 ```
116 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AppAutoUpdate
117 ```
118 Value (string):
119 ```
120 <enabled/> or <disabled/>
121 ```
122 #### macOS
123 ```
124 <dict>
125 <key>AppAutoUpdate</key>
126 <true/> | <false/>
127 </dict>
128 ```
129 #### policies.json
130 ```
131 {
132 "policies": {
133 "AppAutoUpdate": true | false
134 }
135 }
136 ```
137 ### AppUpdateURL
138
139 Change the URL for application update.
140
141 **Compatibility:** Firefox 62, Firefox ESR 60.2\
142 **CCK2 Equivalent:** N/A\
143 **Preferences Affected:** `app.update.url`
144
145 #### Windows (GPO)
146 ```
147 Software\Policies\Mozilla\Firefox\AppUpdateURL = "https://yoursite.com"
148 ```
149 #### Windows (Intune)
150 OMA-URI:
151 ```
152 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AppUpdateURL
153 ```
154 Value (string):
155 ```
156 <enabled/>
157 <data id="AppUpdateURL" value="https://yoursite.com"/>
158 ```
159 #### macOS
160 ```
161 <dict>
162 <key>AppUpdateURL</key>
163 <string>https://yoursite.com</string>
164 </dict>
165 ```
166 #### policies.json
167 ```
168 {
169 "policies": {
170 "AppUpdateURL": "https://yoursite.com"
171 }
172 }
173 ```
174 ### Authentication
175
176 Configure sites that support integrated authentication.
177
178 See https://developer.mozilla.org/en-US/docs/Mozilla/Integrated_authentication for more information.
179
180 `PrivateBrowsing` enables integrated authentication in prviate browsing.
181
182 **Compatibility:** Firefox 60, Firefox ESR 60 (AllowNonFQDN added in 62/60.2, AllowProxies added in 70/68.2, Locked added in 71/68.3, PrivateBrowsing added in 77/68.9)\
183 **CCK2 Equivalent:** N/A\
184 **Preferences Affected:** `network.negotiate-auth.trusted-uris`,`network.negotiate-auth.delegation-uris`,`network.automatic-ntlm-auth.trusted-uris`,`network.automatic-ntlm-auth.allow-non-fqdn`,`network.negotiate-auth.allow-non-fqdn`,`network.automatic-ntlm-auth.allow-proxies`,`network.negotiate-auth.allow-proxies`,`network.auth.private-browsing-sso`
185
186 #### Windows (GPO)
187 ```
188 Software\Policies\Mozilla\Firefox\Authentication\SPNEGO\1 = "mydomain.com"
189 Software\Policies\Mozilla\Firefox\Authentication\SPNEGO\2 = "https://myotherdomain.com"
190 Software\Policies\Mozilla\Firefox\Authentication\Delegated\1 = "mydomain.com"
191 Software\Policies\Mozilla\Firefox\Authentication\Delegated\2 = "https://myotherdomain.com"
192 Software\Policies\Mozilla\Firefox\Authentication\NTLM\1 = "mydomain.com"
193 Software\Policies\Mozilla\Firefox\Authentication\NTLM\2 = "https://myotherdomain.com"
194 Software\Policies\Mozilla\Firefox\Authentication\AllowNonFQDN\SPNEGO = 0x1 | 0x0
195 Software\Policies\Mozilla\Firefox\Authentication\AllowNonFQDN\NTLM = 0x1 | 0x0
196 Software\Policies\Mozilla\Firefox\Authentication\AllowProxies\SPNEGO = 0x1 | 0x0
197 Software\Policies\Mozilla\Firefox\Authentication\AllowProxies\NTLM = 0x1 | 0x0
198 Software\Policies\Mozilla\Firefox\Authentication\Locked = 0x1 | 0x0
199 Software\Policies\Mozilla\Firefox\Authentication\PrivateBrowsing = 0x1 | 0x0
200 ```
201 #### Windows (Intune)
202 OMA-URI:
203 ```
204 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_SPNEGO
205 ```
206 Value (string):
207 ```
208 <enabled/>
209 <data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
210 ```
211 OMA-URI:
212 ```
213 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_Delegated
214 ```
215 Value (string):
216 ```
217 <enabled/>
218 <data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
219 ```
220 OMA-URI:
221 ```
222 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_NTLM
223 ```
224 Value (string):
225 ```
226 <enabled/>
227 <data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
228 ```
229 OMA-URI:
230 ```
231 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_AllowNonFQDN
232 ```
233 Value (string):
234 ```
235 <enabled/>
236 <data id="Authentication_AllowNonFQDN_NTLM" value="true | false"/>
237 <data id="Authentication_AllowNonFQDN_SPNEGO" value="true | false"/>
238 ```
239 OMA-URI:
240 ```
241 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_Locked
242 ```
243 Value (string):
244 ```
245 <enabled/> or <disabled/>
246 ```
247 OMA-URI:
248 ```
249 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_PrivateBrowsing
250 ```
251 Value (string):
252 ```
253 <enabled/> or <disabled/>
254 ```
255 #### macOS
256 ```
257 <dict>
258 <key>Authentication</key>
259 <dict>
260 <key>SPNEGO</key>
261 <array>
262 <string>mydomain.com</string>
263 <string>https://myotherdomain.com</string>
264 </array>
265 <key>Delegated</key>
266 <array>
267 <string>mydomain.com</string>
268 <string>https://myotherdomain.com</string>
269 </array>
270 <key>NTLM</key>
271 <array>
272 <string>mydomain.com</string>
273 <string>https://myotherdomain.com</string>
274 </array>
275 <key>AllowNonFQDN</key>
276 <dict>
277 <key>SPNEGO</key>
278 <true/> | <false/>
279 <key>NTLM</key>
280 <true/> | <false/>
281 </dict>
282 <key>AllowProxies</key>
283 <dict>
284 <key>SPNEGO</key>
285 <true/> | <false/>
286 <key>NTLM</key>
287 <true/> | <false/>
288 </dict>
289 <key>Locked</key>
290 <true/> | <false/>
291 <key>PrivateBrowsing</key>
292 <true/> | <false/>
293 </dict>
294 </dict>
295 ```
296 #### policies.json
297 ```
298 {
299 "policies": {
300 "Authentication": {
301 "SPNEGO": ["mydomain.com", "https://myotherdomain.com"],
302 "Delegated": ["mydomain.com", "https://myotherdomain.com"],
303 "NTLM": ["mydomain.com", "https://myotherdomain.com"],
304 "AllowNonFQDN": {
305 "SPNEGO": true | false,
306 "NTLM": true | false
307 },
308 "AllowProxies": {
309 "SPNEGO": true | false,
310 "NTLM": true | false
311 },
312 "Locked": true | false,
313 "PrivateBrowsing": true | false
314 }
315 }
316 }
317 ```
318 ### BlockAboutAddons
319
320 Block access to the Add-ons Manager (about:addons).
321
322 **Compatibility:** Firefox 60, Firefox ESR 60\
323 **CCK2 Equivalent:** `disableAddonsManager`\
324 **Preferences Affected:** N/A
325
326 #### Windows (GPO)
327 ```
328 Software\Policies\Mozilla\Firefox\BlockAboutAddons = 0x1 | 0x0
329 ```
330 #### Windows (Intune)
331 OMA-URI:
332 ```
333 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutAddons
334 ```
335 Value (string):
336 ```
337 <enabled/> or <disabled/>
338 ```
339 #### macOS
340 ```
341 <dict>
342 <key>BlockAboutAddons</key>
343 <true/> | <false/>
344 </dict>
345 ```
346 #### policies.json
347 ```
348 {
349 "policies": {
350 "BlockAboutAddons": true | false
351 }
352 }
353 ```
354 ### BlockAboutConfig
355
356 Block access to about:config.
357
358 **Compatibility:** Firefox 60, Firefox ESR 60\
359 **CCK2 Equivalent:** `disableAboutConfig`\
360 **Preferences Affected:** N/A
361
362 #### Windows (GPO)
363 ```
364 Software\Policies\Mozilla\Firefox\BlockAboutConfig = 0x1 | 0x0
365 ```
366 #### Windows (Intune)
367 OMA-URI:
368 ```
369 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutConfig
370 ```
371 Value (string):
372 ```
373 <enabled/> or <disabled/>
374 ```
375 #### macOS
376 ```
377 <dict>
378 <key>BlockAboutConfig</key>
379 <true/> | <false/>
380 </dict>
381 ```
382 #### policies.json
383 ```
384 {
385 "policies": {
386 "BlockAboutConfig": true | false
387 }
388 }
389 ```
390 ### BlockAboutProfiles
391
392 Block access to About Profiles (about:profiles).
393
394 **Compatibility:** Firefox 60, Firefox ESR 60\
395 **CCK2 Equivalent:** `disableAboutProfiles`\
396 **Preferences Affected:** N/A
397
398 #### Windows (GPO)
399 ```
400 Software\Policies\Mozilla\Firefox\BlockAboutProfiles = 0x1 | 0x0
401 ```
402 #### Windows (Intune)
403 OMA-URI:
404 ```
405 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutProfiles
406 ```
407 Value (string):
408 ```
409 <enabled/> or <disabled/>
410 ```
411 #### macOS
412 ```
413 <dict>
414 <key>BlockAboutProfiles</key>
415 <true/> | <false/>
416 </dict>
417 ```
418 #### policies.json
419 ```
420 {
421 "policies": {
422 "BlockAboutProfiles": true | false
423 }
424 }
425 ```
426 ### BlockAboutSupport
427
428 Block access to Troubleshooting Information (about:support).
429
430 **Compatibility:** Firefox 60, Firefox ESR 60\
431 **CCK2 Equivalent:** `disableAboutSupport`\
432 **Preferences Affected:** N/A
433
434 #### Windows (GPO)
435 ```
436 Software\Policies\Mozilla\Firefox\BlockAboutSupport = 0x1 | 0x0
437 ```
438 #### Windows (Intune)
439 OMA-URI:
440 ```
441 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutSupport
442 ```
443 Value (string):
444 ```
445 <enabled/> or <disabled/>
446 ```
447 #### macOS
448 ```
449 <dict>
450 <key>BlockAboutSupport</key>
451 <true/> | <false/>
452 </dict>
453 ```
454 #### policies.json
455 ```
456 {
457 "policies": {
458 "BlockAboutSupport": true | false
459 }
460 }
461 ```
462 ### Bookmarks
463
464 Add bookmarks in either the bookmarks toolbar or menu. Only `Title` and `URL` are required. If `Placement` is not specified, the bookmark will be placed on the toolbar. If `Folder` is specified, it is automatically created and bookmarks with the same folder name are grouped together.
465
466 **Compatibility:** Firefox 60, Firefox ESR 60\
467 **CCK2 Equivalent:** `bookmarks.toolbar`,`bookmarks.menu`\
468 **Preferences Affected:** N/A
469
470 #### Windows (GPO)
471 ```
472 Software\Policies\Mozilla\Firefox\Bookmarks\1\Title = "Example"
473 Software\Policies\Mozilla\Firefox\Bookmarks\1\URL = "https://example.com"
474 Software\Policies\Mozilla\Firefox\Bookmarks\1\Favicon = "https://example.com/favicon.ico"
475 Software\Policies\Mozilla\Firefox\Bookmarks\1\Placement = "toolbar" | "menu"
476 Software\Policies\Mozilla\Firefox\Bookmarks\1\Folder = "FolderName"
477 ```
478 #### Windows (Intune)
479 OMA-URI:
480 ```
481 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Bookmarks/Bookmark01
482 ```
483 Value (string):
484 ```
485 <enabled/>
486 <data id="BookmarkTitle" value="Example"/>
487 <data id="BookmarkURL" value="https://example.com"/>
488 <data id="BookmarkFavicon" value="https://example.com/favicon.ico"/>
489 <data id="BookmarkPlacement" value="toolbar | menu"/>
490 <data id="BookmarkFolder" value="FolderName"/>
491 ```
492 #### macOS
493 ```
494 <dict>
495 <key>Bookmarks</key>
496 <array>
497 <dict>
498 <key>Title</key>
499 <string>Example</string>
500 <key>URL</key>
501 <string>https://example.com</string>
502 <key>Favicon</key>
503 <string>https://example.com/favicon.ico</string>
504 <key>Placement</key>
505 <string>toolbar | menu</string>
506 <key>Folder</key>
507 <string>FolderName</string>
508 </dict>
509 </array>
510 </dict>
511 ```
512 #### policies.json
513 ```
514 {
515 "policies": {
516 "Bookmarks": [
517 {
518 "Title": "Example",
519 "URL": "https://example.com",
520 "Favicon": "https://example.com/favicon.ico",
521 "Placement": "toolbar" | "menu",
522 "Folder": "FolderName"
523 }
524 ]
525 }
526 }
527 ```
528 ### CaptivePortal
529 Enable or disable the detection of captive portals.
530
531 **Compatibility:** Firefox 67, Firefox ESR 60.7\
532 **CCK2 Equivalent:** N/A\
533 **Preferences Affected:** `network.captive-portal-service.enabled`
534
535 #### Windows (GPO)
536 ```
537 Software\Policies\Mozilla\Firefox\CaptivePortal = 0x1 | 0x0
538 ```
539 #### Windows (Intune)
540 OMA-URI:
541 ```
542 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/CaptivePortal
543 ```
544 Value (string):
545 ```
546 <enabled/> or <disabled/>
547 ```
548 #### macOS
549 ```
550 <dict>
551 <key>CaptivePortal</key>
552 <true/> | <false/>
553 </dict>
554 ```
555 #### policies.json
556 ```
557 {
558 "policies": {
559 "CaptivePortal": true | false
560 }
561 }
562 ```
563 ### Certificates
564
565 ### Certificates | ImportEnterpriseRoots
566
567 Trust certificates that have been added to the operating system certificate store by a user or administrator.
568
569 See https://support.mozilla.org/kb/setting-certificate-authorities-firefox for more detail.
570
571 **Compatibility:** Firefox 60, Firefox ESR 60 (macOS support in Firefox 63, Firefox ESR 68)\
572 **CCK2 Equivalent:** N/A\
573 **Preferences Affected:** `security.enterprise_roots.enabled`
574
575 #### Windows (GPO)
576 ```
577 Software\Policies\Mozilla\Firefox\Certificates\ImportEnterpriseRoots = 0x1 | 0x0
578 ```
579 #### Windows (Intune)
580 OMA-URI:
581 ```
582 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Certificates/Certificates_ImportEnterpriseRoots
583 ```
584 Value (string):
585 ```
586 <enabled/> or <disabled/>
587 ```
588 #### macOS
589 ```
590 <dict>
591 <key>Certificates</key>
592 <dict>
593 <key>ImportEnterpriseRoots</key>
594 <true/> | <false/>
595 </dict>
596 </dict>
597 ```
598 #### policies.json
599 ```
600 {
601 "policies": {
602 "Certificates": {
603 "ImportEnterpriseRoots": true | false
604 }
605 }
606 }
607 ```
608 ### Certificates | Install
609
610 Install certificates into the Firefox certificate store. If only a filename is specified, Firefox searches for the file in the following locations:
611
612 - Windows
613 - %USERPROFILE%\AppData\Local\Mozilla\Certificates
614 - %USERPROFILE%\AppData\Roaming\Mozilla\Certificates
615 - macOS
616 - /Library/Application Support/Mozilla/Certificates
617 - ~/Library/Application Support/Mozilla/Certificates
618 - Linux
619 - /usr/lib/mozilla/certificates
620 - /usr/lib64/mozilla/certificates
621 - ~/.mozilla/certificates
622
623 Starting with Firefox 65, Firefox 60.5 ESR, a fully qualified path can be used, including UNC paths. You should use the native path style for your operating system. We do not support using %USERPROFILE% or other environment variables on Windows.
624
625 If you are specifying the path in the policies.json file on Windows, you need to escape your backslashes (`\\`) which means that for UNC paths, you need to escape both (`\\\\`). If you use group policy, you only need one backslash.
626
627 Certificates are installed using the trust string `CT,CT,`.
628
629 Binary (DER) and ASCII (PEM) certificates are both supported.
630
631 **Compatibility:** Firefox 64, Firefox ESR 64\
632 **CCK2 Equivalent:** `certs.ca`\
633 **Preferences Affected:** N/A
634
635 #### Windows (GPO)
636 ```
637 Software\Policies\Mozilla\Firefox\Certificates\Install\1 = "cert1.der"
638 Software\Policies\Mozilla\Firefox\Certificates\Install\2 = "C:\Users\username\cert2.pem"
639 ```
640 #### Windows (Intune)
641 OMA-URI:
642 ```
643 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Certificates/Certificates_Install
644 ```
645 Value (string):
646 ```
647 <enabled/>
648 <data id="Certificates_Install" value="1&#xF000;cert1.der&#xF000;2&#xF000;C:\Users\username\cert2.pem"/>
649 ```
650 #### macOS
651 ```
652 <dict>
653 <key>Certificates</key>
654 <dict>
655 <key>Install</key>
656 <array>
657 <string>cert1.der</string>
658 <string>/Users/username/cert2.pem</string>
659 </array>
660 </dict>
661 </dict>
662 ```
663 #### policies.json
664 ```
665 {
666 "policies": {
667 "Certificates": {
668 "Install": ["cert1.der", "/home/username/cert2.pem"]
669 }
670 }
671 }
672 ```
673 ### Cookies
674 Configure cookie preferences.
675
676 `Allow` is a list of origins (not domains) where cookies are always allowed. You must include http or https.
677
678 `Block` is a list of origins (not domains) where cookies are always blocked. You must include http or https.
679
680 `Default` determines whether cookies are accepted at all.
681
682 `AcceptThirdParty` determines how third-party cookies are handled.
683
684 `ExpireAtSessionEnd` determines when cookies expire.
685
686 `RejectTracker` only rejects cookies for trackers.
687
688 `Locked` prevents the user from changing cookie preferences.
689
690 **Compatibility:** Firefox 60, Firefox ESR 60 (RejectTracker was added in Firefox 63)\
691 **CCK2 Equivalent:** N/A\
692 **Preferences Affected:** `network.cookie.cookieBehavior`,`network.cookie.lifetimePolicy`
693
694 #### Windows (GPO)
695 ```
696 Software\Policies\Mozilla\Firefox\Cookies\Allow\1 = "https://example.com"
697 Software\Policies\Mozilla\Firefox\Cookies\Block\1 = "https://example.org"
698 Software\Policies\Mozilla\Firefox\Cookies\Default = 0x1 | 0x0
699 Software\Policies\Mozilla\Firefox\Cookies\AcceptThirdParty = "always" | "never" | "from-visited"
700 Software\Policies\Mozilla\Firefox\Cookies\ExpireAtSessionEnd = 0x1 | 0x0
701 Software\Policies\Mozilla\Firefox\Cookies\RejectTracker = 0x1 | 0x0
702 Software\Policies\Mozilla\Firefox\Cookies\Locked = 0x1 | 0x0
703 ```
704 #### Windows (Intune)
705 OMA-URI:
706 ```
707 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Allow
708 ```
709 Value (string):
710 ```
711 <enabled/>
712 <data id="Cookies_Allow" value="1&#xF000;https://example.com"/>
713 ```
714 OMA-URI:
715 ```
716 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Block
717 ```
718 Value (string):
719 ```
720 <enabled/>
721 <data id="Cookies_Block" value="1&#xF000;https://example.org"/>
722 ```
723 OMA-URI:
724 ```
725 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Default
726 ```
727 Value (string):
728 ```
729 <enabled/> or <disabled/>
730 ```
731 OMA-URI:
732 ```
733 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_AcceptThirdParty
734 ```
735 Value (string):
736 ```
737 <enabled/>
738 <data id="Cookies_AcceptThirdParty" value="always | never | from-visited"/>
739 ```
740 OMA-URI:
741 ```
742 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_ExpireAtSessionEnd
743 ```
744 Value (string):
745 ```
746 <enabled/> or <disabled/>
747 ```
748 OMA-URI:
749 ```
750 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_RejectTracker
751 ```
752 Value (string):
753 ```
754 <enabled/> or <disabled/>
755 ```
756 OMA-URI:
757 ```
758 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Locked
759 ```
760 Value (string):
761 ```
762 <enabled/> or <disabled/>
763 ```
764 #### macOS
765 ```
766 <dict>
767 <key>Cookies</key>
768 <dict>
769 <key>Allow</key>
770 <array>
771 <string>http://example.com</string>
772 </array>
773 <key>Block</key>
774 <array>
775 <string>http://example.org</string>
776 </array>
777 <key>Default</key>
778 <true/> | <false/>
779 <key>AcceptThirdParty</key>
780 <string>always | never | from-visited</string>
781 <key>ExpireAtSessionEnd</key>
782 <true/> | <false/>
783 <key>RejectTracker</key>
784 <true/> | <false/>
785 <key>Locked</key>
786 <true/> | <false/>
787 </dict>
788 </dict>
789 ```
790 #### policies.json
791 ```
792 {
793 "policies": {
794 "Cookies": {
795 "Allow": ["http://example.org/"],
796 "Block": ["http://example.edu/"],
797 "Default": true | false,
798 "AcceptThirdParty": "always" | "never" | "from-visited",
799 "ExpireAtSessionEnd": true | false,
800 "RejectTracker": true | false,
801 "Locked": true | false
802 }
803 }
804 }
805 ```
806 ### DisableSetDesktopBackground
807 Remove the "Set As Desktop Background..." menuitem when right clicking on an image.
808
809 **Compatibility:** Firefox 60, Firefox ESR 60\
810 **CCK2 Equivalent:** `removeSetDesktopBackground`\
811 **Preferences Affected:** N/A
812
813 #### Windows (GPO)
814 ```
815 Software\Policies\Mozilla\Firefox\DisableSetDesktopBackground = 0x1 | 0x0
816 ```
817 #### Windows (Intune)
818 OMA-URI:
819 ```
820 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSetDesktopBackground
821 ```
822 Value (string):
823 ```
824 <enabled/> or <disabled/>
825 ```
826 #### macOS
827 ```
828 <dict>
829 <key>DisableSetDesktopBackground</key>
830 <true/> | <false/>
831 </dict>
832 ```
833 #### policies.json
834 ```
835 {
836 "policies": {
837 "DisableSetDesktopBackground": true | false
838 }
839 }
840 ```
841 ### DisableMasterPasswordCreation
842 Remove the master password functionality.
843
844 **Compatibility:** Firefox 60, Firefox ESR 60\
845 **CCK2 Equivalent:** `noMasterPassword`\
846 **Preferences Affected:** N/A
847
848 #### Windows (GPO)
849 ```
850 Software\Policies\Mozilla\Firefox\DisableMasterPasswordCreation = 0x1 | 0x0
851 ```
852 #### Windows (Intune)
853 OMA-URI:
854 ```
855 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableMasterPasswordCreation
856 ```
857 Value (string):
858 ```
859 <enabled/> or <disabled/>
860 ```
861 #### macOS
862 ```
863 <dict>
864 <key>DisableMasterPasswordCreation</key>
865 <true/> | <false/>
866 </dict>
867 ```
868 #### policies.json
869 ```
870 {
871 "policies": {
872 "DisableMasterPasswordCreation": true | false
873 }
874 }
875 ```
876 ### DisableAppUpdate
877 Turn off application updates.
878
879 **Compatibility:** Firefox 60, Firefox ESR 60\
880 **CCK2 Equivalent:** `disableFirefoxUpdates`\
881 **Preferences Affected:** N/A
882
883 #### Windows (GPO)
884 ```
885 Software\Policies\Mozilla\Firefox\DisableAppUpdate = 0x1 | 0x0
886 ```
887 #### Windows (Intune)
888 OMA-URI:
889 ```
890 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableAppUpdate
891 ```
892 Value (string):
893 ```
894 <enabled/> or <disabled/>
895 ```
896 #### macOS
897 ```
898 <dict>
899 <key>DisableAppUpdate</key>
900 <true/> | <false/>
901 </dict>
902 ```
903 #### policies.json
904 ```
905 {
906 "policies": {
907 "DisableAppUpdate": true | false
908 }
909 }
910 ```
911 ### DisableBuiltinPDFViewer
912 Disable the built in PDF viewer. PDF files are downloaded and sent externally.
913
914 **Compatibility:** Firefox 60, Firefox ESR 60\
915 **CCK2 Equivalent:** `disablePDFjs`\
916 **Preferences Affected:** `pdfjs.disabled`
917
918 #### Windows (GPO)
919 ```
920 Software\Policies\Mozilla\Firefox\DisableBuiltinPDFViewer = 0x1 | 0x0
921 ```
922 #### Windows (Intune)
923 OMA-URI:
924 ```
925 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableBuiltinPDFViewer
926 ```
927 Value (string):
928 ```
929 <enabled/> or <disabled/>
930 ```
931 #### macOS
932 ```
933 <dict>
934 <key>DisableBuiltinPDFViewer</key>
935 <true/> | <false/>
936 </dict>
937 ```
938 #### policies.json
939 ```
940 {
941 "policies": {
942 "DisableBuiltinPDFViewer": true | false
943 }
944 }
945 ```
946 ### DisabledCiphers
947 Disable specific cryptographic ciphers.
948
949 **Compatibility:** Firefox 76, Firefox ESR 68.8\
950 **CCK2 Equivalent:** N/A\
951 **Preferences Affected:** N/A
952
953 #### Windows (GPO)
954 ```
955 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_DHE_RSA_WITH_AES_128_CBC_SHA = 0x1 | 0x0
956 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_DHE_RSA_WITH_AES_256_CBC_SHA = 0x1 | 0x0
957 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA = 0x1 | 0x0
958 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA = 0x1 | 0x0
959 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 = 0x1 | 0x0
960 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 = 0x1 | 0x0
961 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_RSA_WITH_AES_128_CBC_SHA = 0x1 | 0x0
962 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_RSA_WITH_AES_256_CBC_SHA = 0x1 | 0x0
963 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_RSA_WITH_3DES_EDE_CBC_SHA = 0x1 | 0x0
964 ```
965 #### Windows (Intune)
966 OMA-URI:
967 ```
968 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_DHE_RSA_WITH_AES_128_CBC_SHA
969 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_DHE_RSA_WITH_AES_256_CBC_SHA
970 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
971 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
972 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
973 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
974 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_RSA_WITH_AES_128_CBC_SHA
975 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_RSA_WITH_AES_256_CBC_SHA
976 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_RSA_WITH_3DES_EDE_CBC_SHA
977 ```
978 Value (string):
979 ```
980 <enabled/> or <disabled/>
981 ```
982 #### macOS
983 ```
984 <dict>
985 <key>DisabledCiphers</key>
986 <dict>
987 <key>TLS_DHE_RSA_WITH_AES_128_CBC_SHA</key>
988 <true/> | <false/>
989 <key>TLS_DHE_RSA_WITH_AES_256_CBC_SHA</key>
990 <true/> | <false/>
991 <key>TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA</key>
992 <true/> | <false/>
993 <key>TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA</key>
994 <true/> | <false/>
995 <key>TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256</key>
996 <true/> | <false/>
997 <key>TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256</key>
998 <true/> | <false/>
999 <key>TLS_RSA_WITH_AES_128_CBC_SHA</key>
1000 <true/> | <false/>
1001 <key>TLS_RSA_WITH_AES_256_CBC_SHA</key>
1002 <true/> | <false/>
1003 <key>TLS_RSA_WITH_3DES_EDE_CBC_SHA</key>
1004 <true/> | <false/>
1005 </dict>
1006 </dict>
1007 ```
1008 #### policies.json
1009 ```
1010 {
1011 "policies": {
1012 "DisabledCiphers" {
1013 "TLS_DHE_RSA_WITH_AES_128_CBC_SHA": true | false,
1014 "TLS_DHE_RSA_WITH_AES_256_CBC_SHA": true | false,
1015 "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA": true | false,
1016 "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA": true | false,
1017 "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256": true | false,
1018 "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256": true | false,
1019 "TLS_RSA_WITH_AES_128_CBC_SHA": true | false,
1020 "TLS_RSA_WITH_AES_256_CBC_SHA": true | false,
1021 "TLS_RSA_WITH_3DES_EDE_CBC_SHA": true | false
1022 }
1023 }
1024 }
1025 ```
1026 ### DisableDefaultBrowserAgent
1027 Prevent the default browser agent from taking any actions. Only applicable to Windows; other platforms don’t have the agent.
1028
1029 **Compatibility:** Firefox 75, Firefox ESR 68.7 (Windows only)\
1030 **CCK2 Equivalent:** N/A\
1031 **Preferences Affected:** N/A
1032
1033 #### Windows (GPO)
1034 ```
1035 Software\Policies\Mozilla\Firefox\DisableDefaultBrowserAgent = 0x1 | 0x0
1036 ```
1037 #### Windows (Intune)
1038 OMA-URI:
1039 ```
1040 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableDefaultBrowserAgent
1041 ```
1042 Value (string):
1043 ```
1044 <enabled/> or <disabled/>
1045 ```
1046 #### policies.json
1047 ```
1048 {
1049 "policies": {
1050 "DisableDefaultBrowserAgent": true | false
1051 }
1052 }
1053 ```
1054 ### DisableDeveloperTools
1055 Remove access to all developer tools.
1056
1057 **Compatibility:** Firefox 60, Firefox ESR 60\
1058 **CCK2 Equivalent:** `removeDeveloperTools`\
1059 **Preferences Affected:** `devtools.policy.disabled`
1060
1061 #### Windows (GPO)
1062 ```
1063 Software\Policies\Mozilla\Firefox\DisableDeveloperTools = 0x1 | 0x0`
1064 ```
1065 #### Windows (Intune)
1066 OMA-URI:
1067 ```
1068 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableDeveloperTools
1069 ```
1070 Value (string):
1071 ```
1072 <enabled/> or <disabled/>
1073 ```
1074 #### macOS
1075 ```
1076 <dict>
1077 <key>DisableDeveloperTools</key>
1078 <true/> | <false/>
1079 </dict>
1080 ```
1081 #### policies.json
1082 ```
1083 {
1084 "policies": {
1085 "DisableDeveloperTools": true | false
1086 }
1087 }
1088 ```
1089 ### DisableFeedbackCommands
1090 Disable the menus for reporting sites (Submit Feedback, Report Deceptive Site).
1091
1092 **Compatibility:** Firefox 60, Firefox ESR 60\
1093 **CCK2 Equivalent:** N/A\
1094 **Preferences Affected:** N/A
1095
1096 #### Windows (GPO)
1097 ```
1098 Software\Policies\Mozilla\Firefox\DisableFeedbackCommands = 0x1 | 0x0
1099 ```
1100 #### Windows (Intune)
1101 OMA-URI:
1102 ```
1103 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFeedbackCommands
1104 ```
1105 Value (string):
1106 ```
1107 <enabled/> or <disabled/>
1108 ```
1109 #### macOS
1110 ```
1111 <dict>
1112 <key>DisableFeedbackCommands</key>
1113 <true/> | <false/>
1114 </dict>
1115 ```
1116 #### policies.json
1117 ```
1118 {
1119 "policies": {
1120 "DisableFeedbackCommands": true | false
1121 }
1122 }
1123 ```
1124 ### DisableFirefoxScreenshots
1125 Remove access to Firefox Screenshots.
1126
1127 **Compatibility:** Firefox 60, Firefox ESR 60\
1128 **CCK2 Equivalent:** N/A\
1129 **Preferences Affected:** `extensions.screenshots.disabled`
1130
1131 #### Windows (GPO)
1132 ```
1133 Software\Policies\Mozilla\Firefox\DisableFirefoxScreenshots = 0x1 | 0x0
1134 ```
1135 #### Windows (Intune)
1136 OMA-URI:
1137 ```
1138 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxScreenshots
1139 ```
1140 Value (string):
1141 ```
1142 <enabled/> or <disabled/>
1143 ```
1144 #### macOS
1145 ```
1146 <dict>
1147 <key>DisableFirefoxScreenshots</key>
1148 <true/> | <false/>
1149 </dict>
1150 ```
1151 #### policies.json
1152 ```
1153 {
1154 "policies": {
1155 "DisableFirefoxScreenshots": true | false
1156 }
1157 }
1158 ```
1159 ### DisableFirefoxAccounts
1160 Disable Firefox Accounts integration (Sync).
1161
1162 **Compatibility:** Firefox 60, Firefox ESR 60\
1163 **CCK2 Equivalent:** `disableSync`\
1164 **Preferences Affected:** `identity.fxaccounts.enabled`
1165
1166 #### Windows (GPO)
1167 ```
1168 Software\Policies\Mozilla\Firefox\DisableFirefoxAccounts = 0x1 | 0x0
1169 ```
1170 #### Windows (Intune)
1171 OMA-URI:
1172 ```
1173 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxAccounts
1174 ```
1175 Value (string):
1176 ```
1177 <enabled/> or <disabled/>
1178 ```
1179 #### macOS
1180 ```
1181 <dict>
1182 <key>DisableFirefoxAccounts</key>
1183 <true/> | <false/>
1184 </dict>
1185 ```
1186 #### policies.json
1187 ```
1188 {
1189 "policies": {
1190 "DisableFirefoxAccounts": true | false
1191 }
1192 }
1193 ```
1194 ### DisableFirefoxStudies
1195 Disable Firefox studies (Shield).
1196
1197 **Compatibility:** Firefox 60, Firefox ESR 60\
1198 **CCK2 Equivalent:** N/A\
1199 **Preferences Affected:** N/A
1200
1201 #### Windows (GPO)
1202 ```
1203 Software\Policies\Mozilla\Firefox\DisableFirefoxStudies = 0x1 | 0x0
1204 ```
1205 #### Windows (Intune)
1206 OMA-URI:
1207 ```
1208 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxStudies
1209 ```
1210 Value (string):
1211 ```
1212 <enabled/> or <disabled/>
1213 ```
1214 #### macOS
1215 ```
1216 <dict>
1217 <key>DisableFirefoxStudies</key>
1218 <true/> | <false/>
1219 </dict>
1220 ```
1221 #### policies.json
1222 ```
1223 {
1224 "policies": {
1225 "DisableFirefoxStudies": true | false
1226 }
1227 }
1228 ```
1229 ### DisableForgetButton
1230 Disable the "Forget" button.
1231
1232 **Compatibility:** Firefox 60, Firefox ESR 60\
1233 **CCK2 Equivalent:** `disableForget`\
1234 **Preferences Affected:** N/A
1235
1236 #### Windows (GPO)
1237 ```
1238 Software\Policies\Mozilla\Firefox\DisableForgetButton = 0x1 | 0x0
1239 ```
1240 #### Windows (Intune)
1241 OMA-URI:
1242 ```
1243 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableForgetButton
1244 ```
1245 Value (string):
1246 ```
1247 <enabled/> or <disabled/>
1248 ```
1249 #### macOS
1250 ```
1251 <dict>
1252 <key>DisableForgetButton</key>
1253 <true/> | <false/>
1254 </dict>
1255 ```
1256 #### policies.json
1257 ```
1258 {
1259 "policies": {
1260 "DisableForgetButton": true | false
1261 }
1262 }
1263 ```
1264 ### DisableFormHistory
1265 Turn off saving information on web forms and the search bar.
1266
1267 **Compatibility:** Firefox 60, Firefox ESR 60\
1268 **CCK2 Equivalent:** `disableFormFill`\
1269 **Preferences Affected:** ` browser.formfill.enable`
1270
1271 #### Windows (GPO)
1272 ```
1273 Software\Policies\Mozilla\Firefox\DisableFormHistory = 0x1 | 0x0
1274 ```
1275 #### Windows (Intune)
1276 OMA-URI:
1277 ```
1278 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFormHistory
1279 ```
1280 Value (string):
1281 ```
1282 <enabled/> or <disabled/>
1283 ```
1284 #### macOS
1285 ```
1286 <dict>
1287 <key>DisableFormHistory</key>
1288 <true/> | <false/>
1289 </dict>
1290 ```
1291 #### policies.json
1292 ```
1293 {
1294 "policies": {
1295 "DisableFormHistory": true | false
1296 }
1297 }
1298 ```
1299 ### DisablePasswordReveal
1300 Do not allow passwords to be shown in saved logins
1301
1302 **Compatibility:** Firefox 71, Firefox ESR 68.3\
1303 **CCK2 Equivalent:** N/A
1304 **Preferences Affected:** N/A
1305
1306 #### Windows (GPO)
1307 ```
1308 Software\Policies\Mozilla\Firefox\DisablePasswordReveal = 0x1 | 0x0
1309 ```
1310 #### Windows (Intune)
1311 OMA-URI:
1312 ```
1313 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePasswordReveal
1314 ```
1315 Value (string):
1316 ```
1317 <enabled/> or <disabled/>
1318 ```
1319 #### macOS
1320 ```
1321 <dict>
1322 <key>DisablePasswordReveal</key>
1323 <true/> | <false/>
1324 </dict>
1325 ```
1326 #### policies.json
1327 ```
1328 {
1329 "policies": {
1330 "DisablePasswordReveal": true | false
1331 }
1332 }
1333 ```
1334 ### DisablePocket
1335 Remove Pocket in the Firefox UI. It does not remove it from the new tab page.
1336
1337 **Compatibility:** Firefox 60, Firefox ESR 60\
1338 **CCK2 Equivalent:** `disablePocket`\
1339 **Preferences Affected:** `extensions.pocket.enabled`
1340
1341 #### Windows (GPO)
1342 ```
1343 Software\Policies\Mozilla\Firefox\DisablePocket = 0x1 | 0x0
1344 ```
1345 #### Windows (Intune)
1346 OMA-URI:
1347 ```
1348 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePocket
1349 ```
1350 Value (string):
1351 ```
1352 <enabled/> or <disabled/>
1353 ```
1354 #### macOS
1355 ```
1356 <dict>
1357 <key>DisablePocket</key>
1358 <true/> | <false/>
1359 </dict>
1360 ```
1361 #### policies.json
1362 ```
1363 {
1364 "policies": {
1365 "DisablePocket": true | false
1366 }
1367 }
1368 ```
1369 ### DisablePrivateBrowsing
1370 Remove access to private browsing.
1371
1372 **Compatibility:** Firefox 60, Firefox ESR 60\
1373 **CCK2 Equivalent:** `disablePrivateBrowsing`\
1374 **Preferences Affected:** N/A
1375
1376 #### Windows (GPO)
1377 ```
1378 Software\Policies\Mozilla\Firefox\DisablePrivateBrowsing = 0x1 | 0x0
1379 ```
1380 #### Windows (Intune)
1381 OMA-URI:
1382 ```
1383 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePrivateBrowsing
1384 ```
1385 Value (string):
1386 ```
1387 <enabled/> or <disabled/>
1388 ```
1389 #### macOS
1390 ```
1391 <dict>
1392 <key>DisablePrivateBrowsing</key>
1393 <true/> | <false/>
1394 </dict>
1395 ```
1396 #### policies.json
1397 ```
1398 {
1399 "policies": {
1400 "DisablePrivateBrowsing": true | false
1401 }
1402 }
1403 ```
1404 ### DisableProfileImport
1405 Disables the "Import data from another browser" option in the bookmarks window.
1406
1407 **Compatibility:** Firefox 60, Firefox ESR 60\
1408 **CCK2 Equivalent:** N/A\
1409 **Preferences Affected:** N/A
1410
1411 #### Windows (GPO)
1412 ```
1413 Software\Policies\Mozilla\Firefox\DisableProfileImport = 0x1 | 0x0
1414 ```
1415 #### Windows (Intune)
1416 OMA-URI:
1417 ```
1418 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableProfileImport
1419 ```
1420 Value (string):
1421 ```
1422 <enabled/> or <disabled/>
1423 ```
1424 #### macOS
1425 ```
1426 <dict>
1427 <key>DisableProfileImport</key>
1428 <true/> | <false/>
1429 </dict>
1430 ```
1431 #### policies.json
1432 ```
1433 {
1434 "policies": {
1435 "DisableProfileImport": true | false
1436 }
1437 }
1438 ```
1439 ### DisableProfileRefresh
1440 Disable the Refresh Firefox button on about:support and support.mozilla.org, as well as the prompt that displays offering to refresh Firefox when you haven't used it in a while.
1441
1442 **Compatibility:** Firefox 60, Firefox ESR 60\
1443 **CCK2 Equivalent:** `disableResetFirefox`\
1444 **Preferences Affected:** `browser.disableResetPrompt`
1445
1446 #### Windows (GPO)
1447 ```
1448 Software\Policies\Mozilla\Firefox\DisableProfileRefresh = 0x1 | 0x0
1449 ```
1450 #### Windows (Intune)
1451 OMA-URI:
1452 ```
1453 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableProfileRefresh
1454 ```
1455 Value (string):
1456 ```
1457 <enabled/> or <disabled/>
1458 ```
1459 #### macOS
1460 ```
1461 <dict>
1462 <key>DisableProfileRefresh</key>
1463 <true/> | <false/>
1464 </dict>
1465 ```
1466 #### policies.json
1467 ```
1468 {
1469 "policies": {
1470 "DisableProfileRefresh": true | false
1471 }
1472 }
1473 ```
1474 ### DisableSafeMode
1475 Disable safe mode within the browser.
1476
1477 On Windows, this disables safe mode via the command line as well.
1478
1479 **Compatibility:** Firefox 60, Firefox ESR 60 (Windows, macOS)\
1480 **CCK2 Equivalent:** `disableSafeMode`\
1481 **Preferences Affected:** N/A
1482
1483 #### Windows (GPO)
1484 ```
1485 Software\Policies\Mozilla\Firefox\DisableSafeMode = 0x1 | 0x0
1486 ```
1487 #### Windows (Intune)
1488 OMA-URI:
1489 ```
1490 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSafeMode
1491 ```
1492 Value (string):
1493 ```
1494 <enabled/> or <disabled/>
1495 ```
1496 #### macOS
1497 ```
1498 <dict>
1499 <key>DisableSafeMode</key>
1500 <true/> | <false/>
1501 </dict>
1502 ```
1503 #### policies.json
1504 ```
1505 {
1506 "policies": {
1507 "DisableSafeMode": true | false
1508 }
1509 }
1510 ```
1511 ### DisableSecurityBypass
1512 Prevent the user from bypassing security in certain cases.
1513
1514 `InvalidCertificate` prevents adding an exception when an invalid certificate is shown.
1515
1516 `SafeBrowsing` prevents selecting "ignore the risk" and visiting a harmful site anyway.
1517
1518 **Compatibility:** Firefox 60, Firefox ESR 60\
1519 **CCK2 Equivalent:** N/A\
1520 **Preferences Affected:** `security.certerror.hideAddException`,`browser.safebrowsing.allowOverride`
1521
1522 #### Windows (GPO)
1523 ```
1524 Software\Policies\Mozilla\Firefox\DisableSecurityBypass\InvalidCertificate = 0x1 | 0x0
1525 Software\Policies\Mozilla\Firefox\DisableSecurityBypass\SafeBrowsing = 0x1 | 0x0
1526 ```
1527 #### Windows (Intune)
1528 OMA-URI:
1529 ```
1530 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/P_DisableSecurityBypass_InvalidCertificate
1531 ```
1532 Value (string):
1533 ```
1534 <enabled/> or <disabled/>
1535 ```
1536 OMA-URI:
1537 ```
1538 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/P_DisableSecurityBypass_SafeBrowsing
1539 ```
1540 Value (string):
1541 ```
1542 <enabled/> or <disabled/>
1543 ```
1544
1545 #### macOS
1546 ```
1547 <dict>
1548 <key>DisableSecurityBypass</key>
1549 <dict>
1550 <key>InvalidCertificate</key>
1551 <true/> | <false/>
1552 <key><SafeBrowsing/key>
1553 <true/> | <false/>
1554 </dict>
1555 </dict>
1556 ```
1557 #### policies.json
1558 ```
1559 {
1560 "policies": {
1561 "DisableSecurityBypass": {
1562 "InvalidCertificate": true | false,
1563 "SafeBrowsing": true | false
1564 }
1565 }
1566 }
1567 ```
1568 ### DisableSystemAddonUpdate
1569 Prevent system add-ons from being installed or update.
1570
1571 **Compatibility:** Firefox 60, Firefox ESR 60\
1572 **CCK2 Equivalent:** N/A\
1573 **Preferences Affected:** N/A
1574
1575 #### Windows (GPO)
1576 ```
1577 Software\Policies\Mozilla\Firefox\DisableSystemAddonUpdate = 0x1 | 0x0
1578 ```
1579 #### Windows (Intune)
1580 OMA-URI:
1581 ```
1582 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSystemAddonUpdate
1583 ```
1584 Value (string):
1585 ```
1586 <enabled/> or <disabled/>
1587 ```
1588 #### macOS
1589 ```
1590 <dict>
1591 <key>DisableSystemAddonUpdate</key>
1592 <true/> | <false/>
1593 </dict>
1594 ```
1595 #### policies.json
1596 ```
1597 {
1598 "policies": {
1599 "DisableSystemAddonUpdate": true | false
1600 }
1601 }
1602 ```
1603 ### DisableTelemetry
1604 Prevent the upload of telemetry data.
1605
1606 Mozilla recommends that you do not disable telemetry. Information collected through telemetry helps us build a better product for businesses like yours.
1607
1608 **Compatibility:** Firefox 60, Firefox ESR 60\
1609 **CCK2 Equivalent:** `disableTelemetry`\
1610 **Preferences Affected:** `datareporting.healthreport.uploadEnabled,datareporting.policy.dataSubmissionEnabled`
1611
1612 #### Windows (GPO)
1613 ```
1614 Software\Policies\Mozilla\Firefox\DisableTelemetry = 0x1 | 0x0
1615 ```
1616 #### Windows (Intune)
1617 OMA-URI:
1618 ```
1619 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableTelemetry
1620 ```
1621 Value (string):
1622 ```
1623 <enabled/> or <disabled/>
1624 ```
1625 #### macOS
1626 ```
1627 <dict>
1628 <key>DisableTelemetry</key>
1629 <true/> | <false/>
1630 </dict>
1631 ```
1632 #### policies.json
1633 ```
1634 {
1635 "policies": {
1636 "DisableTelemetry": true | false
1637 }
1638 }
1639 ```
1640 ### DisplayBookmarksToolbar
1641 Set the initial state of the bookmarks toolbar. A user can still hide it and it will stay hidden.
1642
1643 **Compatibility:** Firefox 60, Firefox ESR 60\
1644 **CCK2 Equivalent:** `displayBookmarksToolbar`\
1645 **Preferences Affected:** N/A
1646
1647 #### Windows (GPO)
1648 ```
1649 Software\Policies\Mozilla\Firefox\DisplayBookmarksToolbar = 0x1 | 0x0
1650 ```
1651 #### Windows (Intune)
1652 OMA-URI:
1653 ```
1654 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisplayBookmarksToolbar
1655 ```
1656 Value (string):
1657 ```
1658 <enabled/> or <disabled/>
1659 ```
1660 #### macOS
1661 ```
1662 <dict>
1663 <key>DisplayBookmarksToolbar</key>
1664 <true/> | <false/>
1665 </dict>
1666 ```
1667 #### policies.json
1668 ```
1669 {
1670 "policies": {
1671 "DisplayBookmarksToolbar": true | false
1672 }
1673 }
1674 ```
1675 ### DisplayMenuBar (Deprecated)
1676 Set the initial state of the menubar. A user can still hide it and it will stay hidden.
1677
1678 **Compatibility:** Firefox 60, Firefox ESR 60 (Windows, some Linux)\
1679 **CCK2 Equivalent:** `displayMenuBar`\
1680 **Preferences Affected:** N/A
1681
1682 #### Windows (GPO)
1683 ```
1684 Software\Policies\Mozilla\Firefox\DisplayMenuBar = 0x1 | 0x0
1685 ```
1686 #### macOS
1687 ```
1688 <dict>
1689 <key>DisplayMenuBar</key>
1690 <true/> | <false/>
1691 </dict>
1692 ```
1693 #### policies.json
1694 ```
1695 {
1696 "policies": {
1697 "DisplayMenuBar": true | false
1698 }
1699 }
1700 ```
1701 ### DisplayMenuBar
1702 Set the state of the menubar.
1703
1704 `always` means the menubar is shown and cannot be hidden.
1705
1706 `never` means the menubar is hidden and cannot be shown.
1707
1708 `default-on` means the menubar is on by default but can be hidden.
1709
1710 `default-off` means the menubar is off by default but can be shown.
1711
1712 **Compatibility:** Firefox 73, Firefox ESR 68.5 (Windows, some Linux)\
1713 **CCK2 Equivalent:** `displayMenuBar`\
1714 **Preferences Affected:** N/A
1715
1716 #### Windows (GPO)
1717 ```
1718 Software\Policies\Mozilla\Firefox\DisplayMenuBar = "always", "never", "default-on", "default-off"
1719 ```
1720 #### Windows (Intune)
1721 OMA-URI:
1722 ```
1723 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisplayMenuBar_Enum
1724 ```
1725 Value (string):
1726 ```
1727 <enabled/>
1728 <data id="DisplayMenuBar" value="always | never | default-on | default-off"/>
1729 ```
1730 #### macOS
1731 ```
1732 <dict>
1733 <key>DisplayMenuBar</key>
1734 <string>always | never | default-on | default-off</string>
1735 </dict>
1736 ```
1737 #### policies.json
1738 ```
1739 {
1740 "policies": {
1741 "DisplayMenuBar": "always", "never", "default-on", "default-off"
1742 }
1743 }
1744 ```
1745 ### DNSOverHTTPS
1746 Configure DNS over HTTPS.
1747
1748 `Enabled` determines whether DNS over HTTPS is enabled
1749
1750 `ProviderURL` is a URL to another provider.
1751
1752 `Locked` prevents the user from changing DNS over HTTPS preferences.
1753
1754 `ExcludedDomains` excludes domains from DNS over HTTPS.
1755
1756 **Compatibility:** Firefox 63, Firefox ESR 68 (ExcludedDomains added in 75/68.7)\
1757 **CCK2 Equivalent:** N/A\
1758 **Preferences Affected:** `network.trr.mode`,`network.trr.uri`
1759
1760 #### Windows (GPO)
1761 ```
1762 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\Enabled = 0x1 | 0x0
1763 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\ProviderURL = "URL_TO_ALTERNATE_PROVIDER"
1764 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\Locked = 0x1 | 0x0
1765 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\ExcludedDomains\1 = "example.com"
1766 ```
1767 #### Windows (Intune)
1768 OMA-URI:
1769 ```
1770 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_Enabled
1771 ```
1772 Value (string):
1773 ```
1774 <enabled/> or <disabled/>
1775 ```
1776 OMA-URI:
1777 ```
1778 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_ProviderURL
1779 ```
1780 Value (string):
1781 ```
1782 <enabled/>
1783 <data id="String" value="URL_TO_ALTERNATE_PROVIDER"/>
1784 ```
1785 OMA-URI:
1786 ```
1787 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_Locked
1788 ```
1789 Value (string):
1790 ```
1791 <enabled/> or <disabled/>
1792 ```
1793 OMA-URI:
1794 ```
1795 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_ExcludedDomains
1796 ```
1797 Value (string):
1798 ```
1799 <enabled/>
1800 <data id="List" value="1&#xF000;example.com"/>
1801 ```
1802 #### macOS
1803 ```
1804 <dict>
1805 <key>DNSOverHTTPS</key>
1806 <dict>
1807 <key>Enabled</key>
1808 <true/> | <false/>
1809 <key>ProviderURL</key>
1810 <string>URL_TO_ALTERNATE_PROVIDER</string>
1811 <key>Locked</key>
1812 <true/> | <false/>
1813 <key>ExcludedDomains</key>
1814 <array>
1815 <string>example.com</string>
1816 </array>
1817 </dict>
1818 </dict>
1819 ```
1820 #### policies.json
1821 ```
1822 {
1823 "policies": {
1824 "DNSOverHTTPS": {
1825 "Enabled": true | false,
1826 "ProviderURL": "URL_TO_ALTERNATE_PROVIDER",
1827 "Locked": true | false,
1828 "ExcludedDomains": ["example.com"]
1829 }
1830 }
1831 }
1832 ```
1833 ### DontCheckDefaultBrowser
1834 Don't check if Firefox is the default browser at startup.
1835
1836 **Compatibility:** Firefox 60, Firefox ESR 60\
1837 **CCK2 Equivalent:** `dontCheckDefaultBrowser`\
1838 **Preferences Affected:** `browser.shell.checkDefaultBrowser`
1839
1840 #### Windows (GPO)
1841 ```
1842 Software\Policies\Mozilla\Firefox\DontCheckDefaultBrowser = 0x1 | 0x0
1843 ```
1844 #### Windows (Intune)
1845 OMA-URI:
1846 ```
1847 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DontCheckDefaultBrowser
1848 ```
1849 Value (string):
1850 ```
1851 <enabled/> or <disabled/>
1852 ```
1853 #### macOS
1854 ```
1855 <dict>
1856 <key>DontCheckDefaultBrowser</key>
1857 <true/> | <false/>
1858 </dict>
1859 ```
1860 #### policies.json
1861 ```
1862 {
1863 "policies": {
1864 "DontCheckDefaultBrowser": true | false
1865 }
1866 }
1867 ```
1868 ### DefaultDownloadDirectory
1869 Set the default download directory.
1870
1871 You can use ${home} for the native home directory.
1872
1873 **Compatibility:** Firefox 68, Firefox ESR 68\
1874 **CCK2 Equivalent:** N/A\
1875 **Preferences Affected:** `browser.download.dir`,`browser.download.folderList`
1876
1877 #### Windows (GPO)
1878 ```
1879 Software\Policies\Mozilla\Firefox\DefaultDownloadDirectory = "${home}\Downloads"
1880 ```
1881 #### Windows (Intune)
1882 OMA-URI:
1883 ```
1884 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DefaultDownloadDirectory
1885 ```
1886 Value (string):
1887 ```
1888 <enabled/>
1889 <data id="Preferences_String" value="${home}\Downloads"/>
1890 ```
1891 #### macOS
1892 ```
1893 <dict>
1894 <key>DefaultDownloadDirectory</key>
1895 <string>${home}/Downloads</string>
1896 </dict>
1897 ```
1898 #### policies.json (macOS and Linux)
1899 ```
1900 {
1901 "policies": {
1902 "DefaultDownloadDirectory": "${home}/Downloads"
1903 }
1904 ```
1905 #### policies.json (Windows)
1906 ```
1907 {
1908 "policies": {
1909 "DefaultDownloadDirectory": "${home}\\Downloads"
1910 }
1911 ```
1912 ### DownloadDirectory
1913 Set and lock the download directory.
1914
1915 You can use ${home} for the native home directory.
1916
1917 **Compatibility:** Firefox 68, Firefox ESR 68\
1918 **CCK2 Equivalent:** N/A\
1919 **Preferences Affected:** `browser.download.dir`,`browser.download.folderList`,`browser.download.useDownloadDir`
1920
1921 #### Windows (GPO)
1922 ```
1923 Software\Policies\Mozilla\Firefox\DownloadDirectory = "${home}\Downloads"
1924 ```
1925 #### Windows (Intune)
1926 OMA-URI:
1927 ```
1928 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DownloadDirectory
1929 ```
1930 Value (string):
1931 ```
1932 <enabled/>
1933 <data id="Preferences_String" value="${home}\Downloads"/>
1934 ```
1935 #### macOS
1936 ```
1937 <dict>
1938 <key>DownloadDirectory</key>
1939 <string>${home}/Downloads</string>
1940 </dict>
1941 ```
1942 #### policies.json (macOS and Linux)
1943 ```
1944 {
1945 "policies": {
1946 "DownloadDirectory": "${home}/Downloads"
1947 }
1948 ```
1949 #### policies.json (Windows)
1950 ```
1951 {
1952 "policies": {
1953 "DownloadDirectory": "${home}\\Downloads"
1954 }
1955 ```
1956 ### EnableTrackingProtection
1957 Configure tracking protection.
1958
1959 If this policy is not configured, tracking protection is not enabled by default in the browser, but it is enabled by default in private browsing and the user can change it.
1960
1961 If `Value` is set to false, tracking protection is disabled and locked in both the regular browser and private browsing.
1962
1963 If `Value` is set to true, tracking protection is enabled by default in both the regular browser and private browsing and the `Locked` value determines whether or not a user can change it.
1964
1965 If `Cryptomining` is set to true, cryptomining scripts on websites are blocked.
1966
1967 If `Fingerprinting` is set to true, fingerprinting scripts on websites are blocked.
1968
1969 `Exceptions` are origins for which tracking protection is not enabled.
1970
1971 **Compatibility:** Firefox 60, Firefox ESR 60 (Cryptomining and Fingerprinting added in 70/68.2, Exceptions added in 73/68.5)\
1972 **CCK2 Equivalent:** N/A\
1973 **Preferences Affected:** `privacy.trackingprotection.enabled`,`privacy.trackingprotection.pbmode.enabled`,`privacy.trackingprotection.cryptomining.enabled`,`privacy.trackingprotection.fingerprinting.enabled`
1974
1975 #### Windows (GPO)
1976 ```
1977 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Value = 0x1 | 0x0
1978 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Locked = 0x1 | 0x0
1979 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Cryptomining = 0x1 | 0x0
1980 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Fingerprinting = 0x1 | 0x0
1981 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Exceptions\1 = "https://example.com"
1982 ```
1983 #### Windows (Intune)
1984 OMA-URI:
1985 ```
1986 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/TrackingProtection
1987 ```
1988 Value (string):
1989 ```
1990 <enabled/>
1991 <data id="TrackingProtectionLocked" value="true | false"/>
1992 <data id="Cryptomining" value="true | false"/>
1993 <data id="Fingerprinting" value="true | false"/>
1994 <data id=TrackingProtection_Exceptions" value="1&#xF000;https://example.com"/>
1995 ```
1996 #### macOS
1997 ```
1998 <dict>
1999 <key>EnableTrackingProtection</key>
2000 <dict>
2001 <key>Value</key>
2002 <true/> | <false/>
2003 <key><Locked</key>
2004 <true/> | <false/>
2005 <key><Cryptomining</key>
2006 <true/> | <false/>
2007 <key><Fingerprinting</key>
2008 <true/> | <false/>
2009 <key>Exceptions</key>
2010 <array>
2011 <string>https://example.com</string>
2012 </array>
2013 </dict>
2014 </dict>
2015 ```
2016 #### policies.json
2017 ```
2018 {
2019 "policies": {
2020 "EnableTrackingProtection": {
2021 "Value": true | false,
2022 "Locked": true | false,
2023 "Cryptomining": true | false,
2024 "Fingerprinting": true | false,
2025 "Exceptions": ["https://example.com"]
2026 }
2027 }
2028 ```
2029 ### EncryptedMediaExtensions
2030 Enable or disable Encrypted Media Extensions and optionally lock it.
2031
2032 If `Enabled` is set to false, encrypted media extensions (like Widevine) are not downloaded by Firefox unless the user consents to installing them.
2033
2034 If `Locked` is set to true and `Enabled` is set to false, Firefox will not download encrypted media extensions (like Widevine) or ask the user to install them.
2035
2036 **Compatibility:** Firefox 77, Firefox ESR 68.9\
2037 **CCK2 Equivalent:** N/A\
2038 **Preferences Affected:** `media.eme.enabled`
2039
2040 #### Windows (GPO)
2041 ```
2042 Software\Policies\Mozilla\Firefox\EncryptedMediaExtensions\Enabled = 0x1 | 0x0
2043 Software\Policies\Mozilla\Firefox\EncryptedMediaExtensions\Locked = 0x1 | 0x0
2044 ```
2045 #### Windows (Intune)
2046 OMA-URI:
2047 ```
2048 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~EncryptedMediaExtensions/EncryptedMediaExtensions_Enabled
2049 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~EncryptedMediaExtensions/EncryptedMediaExtensions_Locked
2050 ```
2051 Value (string):
2052 ```
2053 <enabled/>or <disabled/>
2054 ```
2055 #### macOS
2056 ```
2057 <dict>
2058 <key>EncryptedMediaExtensions</key>
2059 <dict>
2060 <key>Enabled</key>
2061 <true/> | <false/>
2062 <key><Locked</key>
2063 <true/> | <false/>
2064 </dict>
2065 </dict>
2066 ```
2067 #### policies.json
2068 ```
2069 {
2070 "policies": {
2071 "EncryptedMediaExtensions": {
2072 "Enabled": true | false,
2073 "Locked": true | false
2074 }
2075 }
2076 ```
2077 ### EnterprisePoliciesEnabled
2078 Enable policy support on macOS.
2079
2080 **Compatibility:** Firefox 63, Firefox ESR 60.3 (macOS only)\
2081 **CCK2 Equivalent:** N/A\
2082 **Preferences Affected:** N/A
2083
2084 #### macOS
2085 ```
2086 <dict>
2087 <key>EnterprisePoliciesEnabled</key>
2088 <true/>
2089 </dict>
2090 ```
2091 ### Extensions
2092 Control the installation, uninstallation and locking of extensions.
2093
2094 `Install` is a list of URLs or native paths for extensions to be installed.
2095
2096 `Uninstall` is a list of extension IDs that should be uninstalled if found.
2097
2098 `Locked` is a list of extension IDs that the user cannot disable or uninstall.
2099
2100 **Compatibility:** Firefox 60, Firefox ESR 60\
2101 **CCK2 Equivalent:** `addons`\
2102 **Preferences Affected:** N/A
2103
2104 #### Windows (GPO)
2105 ```
2106 Software\Policies\Mozilla\Firefox\Extensions\Install\1 = "https://addons.mozilla.org/firefox/downloads/somefile.xpi"
2107 Software\Policies\Mozilla\Firefox\Extensions\Install\2 = "//path/to/xpi"
2108 Software\Policies\Mozilla\Firefox\Extensions\Uninstall\1 = "bad_addon_id@mozilla.org"
2109 Software\Policies\Mozilla\Firefox\Extensions\Locked\1 = "addon_id@mozilla.org"
2110 ```
2111 #### macOS
2112 ```
2113 <dict>
2114 <key>Extensions</key>
2115 <dict>
2116 <key>Install</key>
2117 <array>
2118 <string>https://addons.mozilla.org/firefox/downloads/somefile.xpi</string>
2119 <string>//path/to/xpi</string>
2120 </array>
2121 <key>Uninstall</key>
2122 <array>
2123 <string>bad_addon_id@mozilla.org</string>
2124 </array>
2125 <key>Locked</key>
2126 <array>
2127 <string>addon_id@mozilla.org</string>
2128 </array>
2129 </dict>
2130 </dict>
2131 ```
2132 #### policies.json
2133 ```
2134 {
2135 "policies": {
2136 "Extensions": {
2137 "Install": ["https://addons.mozilla.org/firefox/downloads/somefile.xpi", "//path/to/xpi"],
2138 "Uninstall": ["bad_addon_id@mozilla.org"],
2139 "Locked": ["addon_id@mozilla.org"]
2140 }
2141 }
2142 }
2143 ```
2144 ### ExtensionSettings
2145 Manage all aspects of extensions. This policy is based heavily on the [Chrome policy](https://dev.chromium.org/administrators/policy-list-3/extension-settings-full) of the same name.
2146
2147 This policy maps an extension ID to its configuration. With an extension ID, the configuration will be applied to the specified extension only. A default configuration can be set for the special ID "*", which will apply to all extensions that don't have a custom configuration set in this policy.
2148
2149 To obtain an extension ID, install the extension and go to about:support. You will see the ID in the Extensions section.
2150
2151 The configuration for each extension is another dictionary that can contain the fields documented below.
2152
2153 | Name | Description |
2154 | --- | --- |
2155 | `installation_mode` | Maps to a string indicating the installation mode for the extension. The valid strings are `allowed`,`blocked`,`force_installed`, and `normal_installed`.
2156 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`allowed` | Allows the extension to be installed by the user. This is the default behavior.
2157 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`blocked`| Blocks installation of the extension and removes it from the device if already installed.
2158 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`force_installed`| The extension is automatically installed and can't be removed by the user. This option is not valid for the default configuration and requires an install_url.
2159 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`normal_installed`| The extension is automatically installed but can be disabled by the user. This option is not valid for the default configuration and requires an install_url.
2160 | `install_url`| Maps to a URL indicating where Firefox can download a force_installed or normal_installed extension. If installing from the addons.mozilla.org, use the following URL (substituting SHORT_NAME from the URL on AMO), https://addons.mozilla.org/firefox/downloads/latest/SHORT_NAME/latest.xpi. If installing from the local file system, use a file:/// URL. Languages packs are available from https://releases.mozilla.org/pub/firefox/releases/VERSION/PLATFORM/xpi/LANGUAGE.xpi.
2161 | `install_sources` | Each item in this list is an extension-style match pattern. Users will be able to easily install items from any URL that matches an item in this list. Both the location of the *.xpi file and the page where the download is started from (i.e. the referrer) must be allowed by these patterns. This setting can be used only for the default configuration.
2162 | `allowed_types` | This setting whitelists the allowed types of extension/apps that can be installed in Firefox. The value is a list of strings, each of which should be one of the following: "extension", "theme", "dictionary", "langpack" This setting can be used only for the default configuration.
2163 | `blocked_install_message` | This maps to a string specifying the error message to display to users if they're blocked from installing an extension. This setting allows you to append text to the generic error message displayed when the extension is blocked. This could be be used to direct users to your help desk, explain why a particular extension is blocked, or something else.
2164
2165 **Compatibility:** Firefox 69, Firefox ESR 68.1\
2166 **CCK2 Equivalent:** N/A\
2167 **Preferences Affected:** N/A
2168
2169 #### Windows (GPO)
2170 ```
2171 Software\Policies\Mozilla\Firefox\ExtensionSettings (REG_MULTI_SZ) =
2172 {
2173 "*": {
2174 "blocked_install_message": "Custom error message.",
2175 "install_sources": ["https://addons.mozilla.org/"],
2176 "installation_mode": "blocked",
2177 "allowed_types": ["extension"]
2178 },
2179 "uBlock0@raymondhill.net": {
2180 "installation_mode": "force_installed",
2181 "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
2182 }
2183 }
2184 ```
2185 #### Windows (Intune)
2186 OMA-URI:
2187 ```
2188 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/ExtensionSettings
2189 ```
2190 Value (string):
2191 ```
2192 <enabled/>
2193 <data id="ExtensionSettings" value='
2194 "*": {
2195 "blocked_install_message": "Custom error message.",
2196 "install_sources": ["https://addons.mozilla.org/"],
2197 "installation_mode": "blocked",
2198 "allowed_types": ["extension"]
2199 },
2200 "uBlock0@raymondhill.net": {
2201 "installation_mode": "force_installed",
2202 "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
2203 }'/>
2204 ```
2205 #### macOS
2206 ```
2207 <dict>
2208 <key>ExtensionSettings</key>
2209 <dict>
2210 <key>*</key>
2211 <dict>
2212 <key>blocked_install_message</key>
2213 <string>Custom error message.</string>
2214 <key>install_sources</key>
2215 <array>
2216 <string>https://addons.mozilla.org/</string>
2217 </array>
2218 <key>installation_mode</key>
2219 <string>blocked</string>
2220 <key>allowed_types</key>
2221 <array>
2222 <string>extension</string>
2223 </array>
2224 </dict>
2225 <key>uBlock0@raymondhill.net</key>
2226 <dict>
2227 <key>installation_mode</key>
2228 <string>force_installed</string>
2229 <key>install_url</key>
2230 <string>https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi</string>
2231 </dict>
2232 </dict>
2233 </dict>
2234 ```
2235 #### policies.json
2236 ```
2237 {
2238 "policies": {
2239 "ExtensionSettings": {
2240 "*": {
2241 "blocked_install_message": "Custom error message.",
2242 "install_sources": ["https://addons.mozilla.org/"],
2243 "installation_mode": "blocked",
2244 "allowed_types": ["extension"]
2245 },
2246 "uBlock0@raymondhill.net": {
2247 "installation_mode": "force_installed",
2248 "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
2249 }
2250 }
2251 }
2252 }
2253 ```
2254 ### ExtensionUpdate
2255 Control extension updates.
2256
2257 **Compatibility:** Firefox 67, Firefox ESR 60.7\
2258 **CCK2 Equivalent:** N/A\
2259 **Preferences Affected:** `extensions.update.enabled`
2260
2261 #### Windows (GPO)
2262 ```
2263 Software\Policies\Mozilla\Firefox\ExtensionUpdate = 0x1 | 0x0
2264 ```
2265 #### Windows (Intune)
2266 OMA-URI:
2267 ```
2268 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/ExtensionUpdate
2269 ```
2270 Value (string):
2271 ```
2272 <enabled/> or <disabled/>
2273 ```
2274 #### macOS
2275 ```
2276 <dict>
2277 <key>ExtensionUpdate</key>
2278 <true/> | <false/>
2279 </dict>
2280 ```
2281 #### policies.json
2282 ```
2283 {
2284 "policies": {
2285 "ExtensionUpdate": true | false
2286 }
2287 }
2288 ```
2289 ### FlashPlugin
2290 Configure the default Flash plugin policy as well as origins for which Flash is allowed.
2291
2292 `Allow` is a list of origins where Flash are allowed.
2293
2294 `Block` is a list of origins where Flash is not allowed.
2295
2296 `Default` determines whether or not Flash is allowed by default.
2297
2298 `Locked` prevents the user from changing Flash preferences.
2299
2300 **Compatibility:** Firefox 60, Firefox ESR 60\
2301 **CCK2 Equivalent:** `permissions.plugin`\
2302 **Preferences Affected:** `plugin.state.flash`
2303
2304 #### Windows (GPO)
2305 ```
2306 Software\Policies\Mozilla\Firefox\FlashPlugin\Allow\1 = "https://example.org"
2307 Software\Policies\Mozilla\Firefox\FlashPlugin\Block\1 = "https://example.edu"
2308 Software\Policies\Mozilla\Firefox\FlashPlugin\Default = 0x1 | 0x0
2309 Software\Policies\Mozilla\Firefox\FlashPlugin\Locked = 0x1 | 0x0
2310 ```
2311 #### Windows (Intune)
2312 OMA-URI:
2313 ```
2314 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Flash/FlashPlugin_Allow
2315 ```
2316 Value (string):
2317 ```
2318 <enabled/>
2319 <data id="Permissions" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
2320 ```
2321 OMA-URI:
2322 ```
2323 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Flash/FlashPlugin_Locked
2324 ```
2325 Value (string):
2326 ```
2327 <enabled/> or <disabled/>
2328 ```
2329 OMA-URI:
2330 ```
2331 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Flash/FlashPlugin_Default
2332 ```
2333 Value (string):
2334 ```
2335 <enabled/> or <disabled/>
2336 ```
2337 #### macOS
2338 ```
2339 <dict>
2340 <key>FlashPlugin</key>
2341 <dict>
2342 <key>Allow</key>
2343 <array>
2344 <string>http://example.org</string>
2345 </array>
2346 <key>Block</key>
2347 <array>
2348 <string>http://example.edu</string>
2349 </array>
2350 <key>Default</key>
2351 <true/> | <false/>
2352 <key>Locked</key>
2353 <true/> | <false/>
2354 </dict>
2355 </dict>
2356 ```
2357 #### policies.json
2358 ```
2359 {
2360 "policies": {
2361 "FlashPlugin": {
2362 "Allow": ["http://example.org/"],
2363 "Block": ["http://example.edu/"],
2364 "Default": true | false,
2365 "Locked": true | false
2366 }
2367 }
2368 }
2369 ```
2370 ### FirefoxHome
2371 Customize the Firefox Home page.
2372
2373 **Compatibility:** Firefox 68, Firefox ESR 68\
2374 **CCK2 Equivalent:** N/A\
2375 **Preferences Affected:** `browser.newtabpage.activity-stream.showSearch`,`browser.newtabpage.activity-stream.feeds.topsites`,`browser.newtabpage.activity-stream.feeds.section.highlights`,`browser.newtabpage.activity-stream.feeds.section.topstories`,`browser.newtabpage.activity-stream.feeds.snippets`
2376
2377 #### Windows (GPO)
2378 ```
2379 Software\Policies\Mozilla\Firefox\FirefoxHome\Search = 0x1 | 0x0
2380 Software\Policies\Mozilla\Firefox\FirefoxHome\TopSites = 0x1 | 0x0
2381 Software\Policies\Mozilla\Firefox\FirefoxHome\Highlights = 0x1 | 0x0
2382 Software\Policies\Mozilla\Firefox\FirefoxHome\Pocket = 0x1 | 0x0
2383 Software\Policies\Mozilla\Firefox\FirefoxHome\Snippets = 0x1 | 0x0
2384 Software\Policies\Mozilla\Firefox\FirefoxHome\Locked = 0x1 | 0x0
2385 ```
2386 #### Windows (Intune)
2387 OMA-URI:
2388 ```
2389 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/CustomizeFirefoxHome
2390 ```
2391 Value (string):
2392 ```
2393 <enabled/>
2394 <data id="FirefoxHome_Search" value="true | false"/>
2395 <data id="FirefoxHome_TopSites" value="true | false"/>
2396 <data id="FirefoxHome_Highlights" value="true | false"/>
2397 <data id="FirefoxHome_Pocket" value="true | false"/>
2398 <data id="FirefoxHome_Snippets" value="true | false"/>
2399 <data id="FirefoxHome_Locked" value="true | false"/>
2400 ```
2401 #### macOS
2402 ```
2403 <dict>
2404 <key>FirefoxHome</key>
2405 <dict>
2406 <key>Search</key>
2407 <true/> | <false/>
2408 <key>TopSites</key>
2409 <true/> | <false/>
2410 <key>Highlights</key>
2411 <true/> | <false/>
2412 <key>Pocket</key>
2413 <true/> | <false/>
2414 <key>Snippets</key>
2415 <true/> | <false/>
2416 <key>Locked</key>
2417 <true/> | <false/>
2418 </dict>
2419 </dict>
2420 ```
2421 #### policies.json
2422 ```
2423 {
2424 "policies": {
2425 "FirefoxHome": {
2426 "Search": true | false,
2427 "TopSites": true | false,
2428 "Highlights": true | false,
2429 "Pocket": true | false,
2430 "Snippets": true | false,
2431 "Locked": true | false
2432 }
2433 }
2434 }
2435 ```
2436 ### HardwareAcceleration
2437 Control hardware acceleration.
2438
2439 **Compatibility:** Firefox 60, Firefox ESR 60\
2440 **CCK2 Equivalent:** N/A\
2441 **Preferences Affected:** `layers.acceleration.disabled`
2442
2443 #### Windows (GPO)
2444 ```
2445 Software\Policies\Mozilla\Firefox\HardwareAcceleration = 0x1 | 0x0
2446 ```
2447 #### Windows (Intune)
2448 OMA-URI:
2449 ```
2450 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/HardwareAcceleration
2451 ```
2452 Value (string):
2453 ```
2454 <enabled/> or <disabled/>
2455 ```
2456 #### macOS
2457 ```
2458 <dict>
2459 <key>HardwareAcceleration</key>
2460 <true/> | <false/>
2461 </dict>
2462 ```
2463 #### policies.json
2464 ```
2465 {
2466 "policies": {
2467 "HardwareAcceleration": true | false
2468 }
2469 }
2470 ```
2471 ### Homepage
2472 Configure the default homepage and how Firefox starts.
2473
2474 `URL` is the default homepage.
2475
2476 `Locked` prevents the user from changing homepage preferences.
2477
2478 `Additional` allows for more than one homepage.
2479
2480 `StartPage` is how Firefox starts. The choices are no homepage, the default homepage or the previous session.
2481
2482 **Compatibility:** Firefox 60, Firefox ESR 60 (StartPage was added in Firefox 60, Firefox ESR 60.4)\
2483 **CCK2 Equivalent:** `homePage`,`lockHomePage`\
2484 **Preferences Affected:** `browser.startup.homepage`,`browser.startup.page`
2485
2486 #### Windows (GPO)
2487 ```
2488 Software\Policies\Mozilla\Firefox\Homepage\URL = "https://example.com"
2489 Software\Policies\Mozilla\Firefox\Homepage\Locked = 0x1 | 0x0
2490 Software\Policies\Mozilla\Firefox\Homepage\Additional\1 = "https://example.org"
2491 Software\Policies\Mozilla\Firefox\Homepage\Additional\2 = "https://example.edu"
2492 Software\Policies\Mozilla\Firefox\Homepage\StartPage = "none" | "homepage" | "previous-session"
2493 ```
2494 #### Windows (Intune)
2495 OMA-URI:
2496 ```
2497 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageURL
2498 ```
2499 Value (string):
2500 ```
2501 <enabled/>
2502
2503 <data id="HomepageURL" value="https://example.com"/>
2504 <data id="HomepageLocked" value="true | false"/>
2505 ```
2506 OMA-URI:
2507 ```
2508 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageAdditional
2509 ```
2510 Value (string):
2511 ```
2512 <enabled/>
2513
2514 <data id="HomepageAdditional" value="1&#xF000;http://example.org&#xF000;2&#xF000;http://example.edu"/>
2515 ```
2516 OMA-URI:
2517 ```
2518 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageStartPage
2519 ```
2520 Value (string):
2521 ```
2522 <enabled/>
2523
2524 <data id="StartPage" value="none | homepage | previous-session"/>
2525 ```
2526 #### macOS
2527 ```
2528 <dict>
2529 <key>Homepage</key>
2530 <dict>
2531 <key>URL</key>
2532 <string>http://example.com</string>
2533 <key>Locked</key>
2534 <true/> | <false/>
2535 <key>Additional</key>
2536 <array>
2537 <string>http://example.org</string>
2538 <string>http://example.edu</string>
2539 </array>
2540 <key>StartPage</key>
2541 <string>none | homepage | previous-session</string>
2542 </dict>
2543 </dict>
2544 ```
2545 #### policies.json
2546 ```
2547 {
2548 "policies": {
2549 "Homepage": {
2550 "URL": "http://example.com/",
2551 "Locked": true | false,
2552 "Additional": ["http://example.org/",
2553 "http://example.edu/"],
2554 "StartPage": "none" | "homepage" | "previous-session"
2555 }
2556 }
2557 }
2558 ```
2559 ### InstallAddonsPermission
2560 Configure the default extension install policy as well as origins for extension installs are allowed. This policy does not override turning off all extension installs.
2561
2562 `Allow` is a list of origins where extension installs are allowed.
2563
2564 `Default` determines whether or not extension installs are allowed by default.
2565
2566 **Compatibility:** Firefox 60, Firefox ESR 60\
2567 **CCK2 Equivalent:** `permissions.install`\
2568 **Preferences Affected:** `xpinstall.enabled`
2569
2570 #### Windows (GPO)
2571 ```
2572 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Allow\1 = "https://example.org"
2573 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Allow\2 = "https://example.edu"
2574 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Default = 0x1 | 0x0
2575 ```
2576 #### Windows (Intune)
2577 OMA-URI:
2578 ```
2579 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Addons/InstallAddonsPermission_Allow
2580 ```
2581 Value (string):
2582 ```
2583 <enabled/>
2584 <data id="Permissions" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
2585 ```
2586 OMA-URI:
2587 ```
2588 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Addons/InstallAddonsPermission_Default
2589 ```
2590 Value (string):
2591 ```
2592 <enabled/>
2593 ```
2594 #### macOS
2595 ```
2596 <dict>
2597 <key>InstallAddonsPermission</key>
2598 <dict>
2599 <key>Allow</key>
2600 <array>
2601 <string>http://example.org</string>
2602 <string>http://example.edu</string>
2603 </array>
2604 <key>Default</key>
2605 <true/> | <false/>
2606 </dict>
2607 </dict>
2608 ```
2609 #### policies.json
2610 ```
2611 {
2612 "policies": {
2613 "InstallAddonsPermission": {
2614 "Allow": ["http://example.org/",
2615 "http://example.edu/"],
2616 "Default": true | false
2617 }
2618 }
2619 }
2620 ```
2621 ### LegacyProfiles
2622 Disable the feature enforcing a separate profile for each installation.
2623
2624 If this policy set to true, Firefox will not try to create different profiles for installations of Firefox in different directories. This is the equivalent of the MOZ_LEGACY_PROFILES environment variable.
2625
2626 If this policy set to false, Firefox will create a new profile for each unique installation of Firefox.
2627
2628 This policy only work on Windows via GPO (not policies.json).
2629
2630 **Compatibility:** Firefox 70, Firefox ESR 68.2 (Windows only, GPO only)\
2631 **CCK2 Equivalent:** N/A\
2632 **Preferences Affected:** N/A
2633
2634 #### Windows (GPO)
2635 ```
2636 Software\Policies\Mozilla\Firefox\LegacyProfiles = = 0x1 | 0x0
2637 ```
2638 #### Windows (Intune)
2639 OMA-URI:
2640 ```
2641 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/LegacyProfiles
2642 ```
2643 Value (string):
2644 ```
2645 <enabled/> or <disabled/>
2646 ```
2647 ### LocalFileLinks
2648 Enable linking to local files by origin.
2649
2650 **Compatibility:** Firefox 68, Firefox ESR 68\
2651 **CCK2 Equivalent:** N/A\
2652 **Preferences Affected:** `capability.policy.localfilelinks.*`
2653
2654 #### Windows (GPO)
2655 ```
2656 Software\Policies\Mozilla\Firefox\LocalFileLinks\1 = "https://example.org"
2657 Software\Policies\Mozilla\Firefox\LocalFileLinks\2 = "https://example.edu"
2658 ```
2659 #### Windows (Intune)
2660 OMA-URI:
2661 ```
2662 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/LocalFileLinks
2663 ```
2664 Value (string):
2665 ```
2666 <enabled/>
2667 <data id="LocalFileLinks" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
2668 ```
2669 #### macOS
2670 ```
2671 <dict>
2672 <key>LocalFileLinks</key>
2673 <array>
2674 <string>http://example.org</string>
2675 <string>http://example.edu</string>
2676 </array>
2677 </dict>
2678 ```
2679 #### policies.json
2680 ```
2681 {
2682 "policies": {
2683 "LocalFileLinks": ["http://example.org/",
2684 "http://example.edu/"]
2685 }
2686 }
2687 ```
2688 ### NetworkPrediction
2689 Enable or disable network prediction (DNS prefetching).
2690
2691 **Compatibility:** Firefox 67, Firefox ESR 60.7\
2692 **CCK2 Equivalent:** N/A\
2693 **Preferences Affected:** `network.dns.disablePrefetch`,`network.dns.disablePrefetchFromHTTPS`
2694
2695 #### Windows (GPO)
2696 ```
2697 Software\Policies\Mozilla\Firefox\NetworkPrediction = 0x1 | 0x0
2698 ```
2699 #### Windows (Intune)
2700 OMA-URI:
2701 ```
2702 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NetworkPrediction
2703 ```
2704 Value (string):
2705 ```
2706 <enabled/> or <disabled/>
2707 ```
2708 #### macOS
2709 ```
2710 <dict>
2711 <key>NetworkPrediction</key>
2712 <true/> | <false/>
2713 </dict>
2714 ```
2715 #### policies.json
2716 ```
2717 {
2718 "policies": {
2719 "NetworkPrediction": true | false
2720 }
2721 ```
2722 ### NewTabPage
2723 Enable or disable the New Tab page.
2724
2725 **Compatibility:** Firefox 68, Firefox ESR 68\
2726 **CCK2 Equivalent:** N/A\
2727 **Preferences Affected:** `browser.newtabpage.enabled`
2728
2729 #### Windows (GPO)
2730 ```
2731 Software\Policies\Mozilla\Firefox\NewTabPage = 0x1 | 0x0
2732 ```
2733 #### Windows (Intune)
2734 OMA-URI:
2735 ```
2736 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NewTabPage
2737 ```
2738 Value (string):
2739 ```
2740 <enabled/> or <disabled/>
2741 ```
2742 #### macOS
2743 ```
2744 <dict>
2745 <key>NewTabPage</key>
2746 <true/> | <false/>
2747 </dict>
2748 ```
2749 #### policies.json
2750 ```
2751 {
2752 "policies": {
2753 "NewTabPage": true | false
2754 }
2755 ```
2756 ### NoDefaultBookmarks
2757 Disable the creation of default bookmarks.
2758
2759 This policy is only effective if the user profile has not been created yet.
2760
2761 **Compatibility:** Firefox 60, Firefox ESR 60\
2762 **CCK2 Equivalent:** `removeDefaultBookmarks`\
2763 **Preferences Affected:** N/A
2764
2765 #### Windows (GPO)
2766 ```
2767 Software\Policies\Mozilla\Firefox\NoDefaultBookmarks = 0x1 | 0x0
2768 ```
2769 #### Windows (Intune)
2770 OMA-URI:
2771 ```
2772 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NoDefaultBookmarks
2773 ```
2774 Value (string):
2775 ```
2776 <enabled/> or <disabled/>
2777 ```
2778 #### macOS
2779 ```
2780 <dict>
2781 <key>NoDefaultBookmarks</key>
2782 <true/> | <false/>
2783 </dict>
2784 ```
2785 #### policies.json
2786 ```
2787 {
2788 "policies": {
2789 "NoDefaultBookmarks": true | false
2790 }
2791 }
2792 ```
2793 ### OfferToSaveLogins
2794 Control whether or not Firefox offers to save passwords.
2795
2796 **Compatibility:** Firefox 60, Firefox ESR 60\
2797 **CCK2 Equivalent:** `dontRememberPasswords`\
2798 **Preferences Affected:** `signon.rememberSignons`
2799
2800 #### Windows (GPO)
2801 ```
2802 Software\Policies\Mozilla\Firefox\OfferToSaveLogins = 0x1 | 0x0
2803 ```
2804 #### Windows (Intune)
2805 OMA-URI:
2806 ```
2807 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OfferToSaveLogins
2808 ```
2809 Value (string):
2810 ```
2811 <enabled/> or <disabled/>
2812 ```
2813 #### macOS
2814 ```
2815 <dict>
2816 <key>OfferToSaveLogins</key>
2817 <true/> | <false/>
2818 </dict>
2819 ```
2820 #### policies.json
2821 ```
2822 {
2823 "policies": {
2824 "OfferToSaveLogins": true | false
2825 }
2826 }
2827 ```
2828 ### OfferToSaveLoginsDefault
2829 Sets the default value of signon.rememberSignons without locking it.
2830
2831 **Compatibility:** Firefox 70, Firefox ESR 60.2\
2832 **CCK2 Equivalent:** `dontRememberPasswords`\
2833 **Preferences Affected:** `signon.rememberSignons`
2834
2835 #### Windows (GPO)
2836 ```
2837 Software\Policies\Mozilla\Firefox\OfferToSaveLoginsDefault = 0x1 | 0x0
2838 ```
2839 #### Windows (Intune)
2840 OMA-URI:
2841 ```
2842 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OfferToSaveLoginsDefault
2843 ```
2844 Value (string):
2845 ```
2846 <enabled/> or <disabled/>
2847 ```
2848 #### macOS
2849 ```
2850 <dict>
2851 <key>OfferToSaveLoginsDefault</key>
2852 <true/> | <false/>
2853 </dict>
2854 ```
2855 #### policies.json
2856 ```
2857 {
2858 "policies": {
2859 "OfferToSaveLoginsDefault": true | false
2860 }
2861 }
2862 ```
2863 ### OverrideFirstRunPage
2864 Override the first run page. If the value is blank, no first run page is displayed.
2865
2866 **Compatibility:** Firefox 60, Firefox ESR 60\
2867 **CCK2 Equivalent:** `welcomePage`,`noWelcomePage`\
2868 **Preferences Affected:** `startup.homepage_welcome_url`
2869
2870 #### Windows (GPO)
2871 ```
2872 Software\Policies\Mozilla\Firefox\OverrideFirstRunPage = "http://example.org"
2873 ```
2874 #### Windows (Intune)
2875 OMA-URI:
2876 ```
2877 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OverrideFirstRunPage
2878 ```
2879 Value (string):
2880 ```
2881 <enabled/>
2882 <data id="OverridePage" value="https://example.com"/>
2883 ```
2884 #### macOS
2885 ```
2886 <dict>
2887 <key>OverrideFirstRunPage</key>
2888 <string>http://example.org</string>
2889 </dict>
2890 ```
2891 #### policies.json
2892 ```
2893 {
2894 "policies": {
2895 "OverrideFirstRunPage": "http://example.org"
2896 }
2897 ```
2898 ### OverridePostUpdatePage
2899 Override the upgrade page. If the value is blank, no upgrade page is displayed.
2900
2901 **Compatibility:** Firefox 60, Firefox ESR 60\
2902 **CCK2 Equivalent:** `upgradePage`,`noUpgradePage`\
2903 **Preferences Affected:** `startup.homepage_override_url`
2904
2905 #### Windows (GPO)
2906 ```
2907 Software\Policies\Mozilla\Firefox\OverridePostUpdatePage = "http://example.org"
2908 ```
2909 #### Windows (Intune)
2910 OMA-URI:
2911 ```
2912 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OverridePostUpdatePage
2913 ```
2914 Value (string):
2915 ```
2916 <enabled/>
2917 <data id="OverridePage" value="https://example.com"/>
2918 ```
2919 #### macOS
2920 ```
2921 <dict>
2922 <key>OverridePostUpdatePage</key>
2923 <string>http://example.org</string>
2924 </dict>
2925 ```
2926 #### policies.json
2927 ```
2928 {
2929 "policies": {
2930 "OverridePostUpdatePage": "http://example.org"
2931 }
2932 ```
2933 ### PasswordManagerEnabled
2934 Remove access to the password manager via preferences and blocks about:logins on Firefox 70.
2935
2936 **Compatibility:** Firefox 70, Firefox ESR 60.2\
2937 **CCK2 Equivalent:** N/A\
2938 **Preferences Affected:** `pref.privacy.disable_button.view_passwords`
2939
2940 #### Windows (GPO)
2941 ```
2942 Software\Policies\Mozilla\Firefox\PasswordManagerEnabled = 0x1 | 0x0
2943 ```
2944 #### Windows (Intune)
2945 OMA-URI:
2946 ```
2947 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PasswordManagerEnabled
2948 ```
2949 Value (string):
2950 ```
2951 <enabled/> or <disabled/>
2952 ```
2953 #### macOS
2954 ```
2955 <dict>
2956 <key>PasswordManagerEnabled</key>
2957 <true/> | <false/>
2958 </dict>
2959 ```
2960 #### policies.json
2961 ```
2962 {
2963 "policies": {
2964 "PasswordManagerEnabled": true | false
2965 }
2966 }
2967 ```
2968 ### PDFjs
2969 Disable or configure PDF.js, the built-in PDF viewer.
2970
2971 If `Enabled` is set to false, the built-in PDF viewer is disabled.
2972
2973 If `EnablePermissions` is set to true, the built-in PDF viewer will honor document permissions like preventing the copying of text.
2974
2975 Note: DisableBuiltinPDFViewer has not been deprecated. You can either continue to use it, or switch to using PDFjs->Enabled to disable the built-in PDF viewer. This new permission was added because we needed a place for PDFjs->EnabledPermissions.
2976
2977 **Compatibility:** Firefox 77, Firefox ESR 68.9\
2978 **CCK2 Equivalent:** N/A\
2979 **Preferences Affected:** `pdfjs.diabled`,`pdfjs.enablePermissions`
2980
2981 #### Windows (GPO)
2982 ```
2983 Software\Policies\Mozilla\Firefox\PDFjs\Enabled = 0x1 | 0x0
2984 Software\Policies\Mozilla\Firefox\PDFjs\EnablePermissions = 0x1 | 0x0
2985 ```
2986 #### Windows (Intune)
2987 OMA-URI:
2988 ```
2989 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PDFjs/PDFjs_Enabled
2990 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PDFjs/PDFjs_EnablePermissions
2991 ```
2992 Value (string):
2993 ```
2994 <enabled/>or <disabled/>
2995 ```
2996 #### macOS
2997 ```
2998 <dict>
2999 <key>PDFjs</key>
3000 <dict>
3001 <key>Enabled</key>
3002 <true/> | <false/>
3003 <key><EnablePermissions</key>
3004 <true/> | <false/>
3005 </dict>
3006 </dict>
3007 ```
3008 #### policies.json
3009 ```
3010 {
3011 "policies": {
3012 "PSFjs": {
3013 "Enabled": true | false,
3014 "EnablePermissions": true | false
3015 }
3016 }
3017 ```
3018 ### Permissions
3019 Set permissions associated with camera, microphone, location, notifications, and autoplay. Because these are origins, not domains, entries with unique ports must be specified separately. See examples below.
3020
3021 `Allow` is a list of origins where the feature is allowed.
3022
3023 `Block` is a list of origins where the feature is not allowed.
3024
3025 `BlockNewRequests` determines whether or not new requests can be made for the feature.
3026
3027 `Locked` prevents the user from changing preferences for the feature.
3028
3029 `Default` specifies the default value for Autoplay. block-audio-video is not supported on Firefox ESR 68.
3030
3031 **Compatibility:** Firefox 62, Firefox ESR 60.2 (Autoplay added in Firefox 74, Firefox ESR 68.6, Autoplay Default/Locked added in Firefox 76, Firefox ESR 68.8)\
3032 **CCK2 Equivalent:** N/A\
3033 **Preferences Affected:** `permissions.default.camera`,`permissions.default.microphone`,`permissions.default.geo`,`permissions.default.desktop-notification`,`media.autoplay.default`
3034
3035 #### Windows (GPO)
3036 ```
3037 Software\Policies\Mozilla\Firefox\Permissions\Camera\Allow\1 = "https://example.org"
3038 Software\Policies\Mozilla\Firefox\Permissions\Camera\Allow\2 = "https://example.org:1234"
3039 Software\Policies\Mozilla\Firefox\Permissions\Camera\Block\1 = "https://example.edu"
3040 Software\Policies\Mozilla\Firefox\Permissions\Camera\BlockNewRequests = 0x1 | 0x0
3041 Software\Policies\Mozilla\Firefox\Permissions\Camera\Locked = 0x1 | 0x0
3042 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Allow\1 = "https://example.org"
3043 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Block\1 = "https://example.edu"
3044 Software\Policies\Mozilla\Firefox\Permissions\Microphone\BlockNewRequests = 0x1 | 0x0
3045 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Locked = 0x1 | 0x0
3046 Software\Policies\Mozilla\Firefox\Permissions\Location\Allow\1 = "https://example.org"
3047 Software\Policies\Mozilla\Firefox\Permissions\Location\Block\1 = "https://example.edu"
3048 Software\Policies\Mozilla\Firefox\Permissions\Location\BlockNewRequests = 0x1 | 0x0
3049 Software\Policies\Mozilla\Firefox\Permissions\Location\Locked = 0x1 | 0x0
3050 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Allow\1 = "https://example.org"
3051 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Block\1 = "https://example.edu"
3052 Software\Policies\Mozilla\Firefox\Permissions\Notifications\BlockNewRequests = 0x1 | 0x0
3053 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Locked = 0x1 | 0x0
3054 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Allow\1 = "https://example.org"
3055 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Block\1 = "https://example.edu"
3056 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Default = "allow-audio-video" | "block-audio" | "block-audio-video"
3057 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Locked = 0x1 | 0x0
3058 ```
3059 #### Windows (Intune)
3060 OMA-URI:
3061 ```
3062 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Location/Location_BlockNewRequests
3063 ```
3064 Value (string):
3065 ```
3066 <enabled/> or <disabled/>
3067 ```
3068 OMA-URI:
3069 ```
3070 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Location/Location_Locked
3071 ```
3072 Value (string):
3073 ```
3074 <enabled/> or <disabled/>
3075 ```
3076 OMA-URI:
3077 ```
3078 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_Allow
3079 ```
3080 Value (string):
3081 ```
3082 <enabled/>
3083 <data id="Permissions" value="1&#xF000;https://example.org"/>
3084 ```
3085 OMA-URI:
3086 ```
3087 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_BlockNewRequests
3088 ```
3089 Value (string):
3090 ```
3091 <enabled/> or <disabled/>
3092 ```
3093 OMA-URI:
3094 ```
3095 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_Locked
3096 ```
3097 Value (string):
3098 ```
3099 <enabled/> or <disabled/>
3100 ```
3101 OMA-URI:
3102 ```
3103 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Allow
3104 ```
3105 Value (string):
3106 ```
3107 <enabled/>
3108 <data id="Permissions" value="1&#xF000;https://example.org"/>
3109 ```
3110 OMA-URI:
3111 ```
3112 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Block
3113 ```
3114 Value (string):
3115 ```
3116 <enabled/>
3117 <data id="Permissions" value="1&#xF000;https://example.edu"/>
3118 ```
3119 OMA-URI:
3120 ```
3121 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Default
3122 ```
3123 Value (string):
3124 ```
3125 <enabled/>
3126 <data id="Autoplay_Default" value="allow-audio-video | block-audio | block-audio-video"/>
3127 ```
3128 OMA-URI:
3129 ```
3130 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Locked
3131 ```
3132 Value (string):
3133 ```
3134 <enabled/> or <disabled/>
3135 ```
3136 #### macOS
3137 ```
3138 <dict>
3139 <key>Permissions</key>
3140 <dict>
3141 <key>Camera</key>
3142 <dict>
3143 <key>Allow</key>
3144 <array>
3145 <string>https://example.org</string>
3146 <string>https://example.org:1234</string>
3147 </array>
3148 <key>Block</key>
3149 <array>
3150 <string>https://example.edu</string>
3151 </array>
3152 <key>BlockNewRequests</key>
3153 <true/> | <false/>
3154 <key>Locked</key>
3155 <true/> | <false/>
3156 </dict>
3157 <key>Microphone</key>
3158 <dict>
3159 <key>Allow</key>
3160 <array>
3161 <string>https://example.org</string>
3162 </array>
3163 <key>Block</key>
3164 <array>
3165 <string>https://example.edu</string>
3166 </array>
3167 <key>BlockNewRequests</key>
3168 <true/> | <false/>
3169 <key>Locked</key>
3170 <true/> | <false/>
3171 </dict>
3172 <key>Location</key>
3173 <dict>
3174 <key>Allow</key>
3175 <array>
3176 <string>https://example.org</string>
3177 </array>
3178 <key>Block</key>
3179 <array>
3180 <string>https://example.edu</string>
3181 </array>
3182 <key>BlockNewRequests</key>
3183 <true/> | <false/>
3184 <key>Locked</key>
3185 <true/> | <false/>
3186 </dict>
3187 <key>Notifications</key>
3188 <dict>
3189 <key>Allow</key>
3190 <array>
3191 <string>https://example.org</string>
3192 </array>
3193 <key>Block</key>
3194 <array>
3195 <string>https://example.edu</string>
3196 </array>
3197 <key>BlockNewRequests</key>
3198 <true/>
3199 <key>Locked</key>
3200 <true/>
3201 </dict>
3202 <key>Autoplay</key>
3203 <dict>
3204 <key>Allow</key>
3205 <array>
3206 <string>https://example.org</string>
3207 </array>
3208 <key>Block</key>
3209 <array>
3210 <string>https://example.edu</string>
3211 </array>
3212 <key>Default</key>
3213 <string>allow-audio-video | block-audio | block-audio-video</string>
3214 <key>Locked</key>
3215 <true/> | <false/>
3216 </dict>
3217 </dict>
3218 </dict>
3219 ```
3220 #### policies.json
3221 ```
3222 {
3223 "policies": {
3224 "Permissions": {
3225 "Camera": {
3226 "Allow": ["https://example.org","https://example.org:1234"],
3227 "Block": ["https://example.edu"],
3228 "BlockNewRequests": true | false,
3229 "Locked": true | false
3230 },
3231 "Microphone": {
3232 "Allow": ["https://example.org"],
3233 "Block": ["https://example.edu"],
3234 "BlockNewRequests": true | false,
3235 "Locked": true | false
3236 },
3237 "Location": {
3238 "Allow": ["https://example.org"],
3239 "Block": ["https://example.edu"],
3240 "BlockNewRequests": true | false,
3241 "Locked": true | false
3242 },
3243 "Notifications": {
3244 "Allow": ["https://example.org"],
3245 "Block": ["https://example.edu"],
3246 "BlockNewRequests": true | false,
3247 "Locked": true | false
3248 },
3249 "Autoplay": {
3250 "Allow": ["https://example.org"],
3251 "Block": ["https://example.edu"],
3252 "Default": "allow-audio-video" | "block-audio" | "block-audio-video",
3253 "Locked": true | false
3254 }
3255 }
3256 }
3257 }
3258 ```
3259 ### PopupBlocking
3260 Configure the default pop-up window policy as well as origins for which pop-up windows are allowed.
3261
3262 `Allow` is a list of origins where popup-windows are allowed.
3263
3264 `Default` determines whether or not pop-up windows are allowed by default.
3265
3266 `Locked` prevents the user from changing pop-up preferences.
3267
3268 **Compatibility:** Firefox 60, Firefox ESR 60\
3269 **CCK2 Equivalent:** `permissions.popup`\
3270 **Preferences Affected:** `dom.disable_open_during_load`
3271
3272 #### Windows (GPO)
3273 ```
3274 Software\Policies\Mozilla\Firefox\PopupBlocking\Allow\1 = "https://example.org"
3275 Software\Policies\Mozilla\Firefox\PopupBlocking\Allow\2 = "https://example.edu"
3276 Software\Policies\Mozilla\Firefox\PopupBlocking\Default = 0x1 | 0x0
3277 Software\Policies\Mozilla\Firefox\PopupBlocking\Locked = 0x1 | 0x0
3278 ```
3279 #### Windows (Intune)
3280 OMA-URI:
3281 ```
3282 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Allow
3283 ```
3284 Value (string):
3285 ```
3286 <enabled/>
3287 <data id="Permissions" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
3288 ```
3289 OMA-URI:
3290 ```
3291 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Default
3292 ```
3293 Value (string):
3294 ```
3295 <enabled/> or <disabled/>
3296 ```
3297 OMA-URI:
3298 ```
3299 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Locked
3300 ```
3301 Value (string):
3302 ```
3303 <enabled/> or <disabled/>
3304 ```
3305 #### macOS
3306 ```
3307 <dict>
3308 <key>PopupBlocking</key>
3309 <dict>
3310 <key>Allow</key>
3311 <array>
3312 <string>http://example.org</string>
3313 <string>http://example.edu</string>
3314 </array>
3315 <key>Default</key>
3316 <true/> | <false/>
3317 <key>Locked</key>
3318 <true/> | <false/>
3319 </dict>
3320 </dict>
3321 ```
3322 #### policies.json
3323 ```
3324 {
3325 "policies": {
3326 "PopupBlocking": {
3327 "Allow": ["http://example.org/",
3328 "http://example.edu/"],
3329 "Default": true | false,
3330 "Locked": true | false
3331 }
3332 }
3333 }
3334 ```
3335 ### Preferences
3336 Set and lock certain preferences.
3337
3338 **Compatibility:** See below\
3339 **CCK2 Equivalent:** `preferences`\
3340 **Preferences Affected:** See below
3341
3342 | Preference | Type | Compatibility | Default
3343 | --- | --- | --- | ---
3344 | accessibility.force_disabled | integer | Firefox 70, Firefox ESR 68.2 | 0
3345 | &nbsp;&nbsp;&nbsp;&nbsp;If set to 1, platform accessibility is disabled.
3346 | app.update.auto (Deprecated - Switch to AppAutoUpdate policy) | boolean | Firefox 68, Firefox ESR 68 | true
3347 | &nbsp;&nbsp;&nbsp;&nbsp;If false, Firefox doesn't automatically install update.
3348 | browser.bookmarks.autoExportHTML | boolean | Firefox 70, Firefox ESR 68.2 | false
3349 | &nbsp;&nbsp;&nbsp;&nbsp;If true, bookmarks are exported on shutdown.
3350 | browser.bookmarks.file | string | Firefox 70, Firefox ESR 68.2 | N/A
3351 | &nbsp;&nbsp;&nbsp;&nbsp;If set, the name of the file where bookmarks are exported and imported.
3352 | browser.bookmarks.restore_default_bookmarks | boolean | Firefox 70, Firefox ESR 68.2 | N/A
3353 | &nbsp;&nbsp;&nbsp;&nbsp;If true, bookmarks are restored to their defaults.
3354 | browser.cache.disk.enable | boolean | Firefox 68, Firefox ESR 68 | true
3355 | &nbsp;&nbsp;&nbsp;&nbsp;If false, don't store cache on the hard drive.
3356 | ~browser.cache.disk.parent_directory~ | string | Firefox 68, Firefox ESR 68 | Profile temporary directory
3357 | &nbsp;&nbsp;&nbsp;&nbsp;~If set, changes the location of the disk cache.~ This policy doesn't work. It's being worked on.
3358 | browser.fixup.dns_first_for_single_words | boolean | Firefox 68, Firefox ESR 68 | false
3359 | &nbsp;&nbsp;&nbsp;&nbsp;If true, single words are sent to DNS, not directly to search.
3360 | browser.newtabpage.activity-stream.default.sites | string | Firefox 72, ESR 68.4 | Locale dependent
3361 | &nbsp;&nbsp;&nbsp;&nbsp;If set, a list of URLs to use as the default top sites on the new tab page.
3362 | browser.places.importBookmarksHTML | boolean | Firefox 70, Firefox ESR 68.2
3363 | &nbsp;&nbsp;&nbsp;&nbsp;If true, bookmarks are always imported on startup.
3364 | browser.safebrowsing.phishing.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
3365 | &nbsp;&nbsp;&nbsp;&nbsp;If false, phishing protection is not enabled (Not recommended)
3366 | browser.safebrowsing.malware.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
3367 | &nbsp;&nbsp;&nbsp;&nbsp;If false, malware protection is not enabled (Not recommended)
3368 | browser.search.update | boolean | Firefox 68, Firefox ESR 68 | true
3369 | &nbsp;&nbsp;&nbsp;&nbsp;If false, updates for search engines are not checked.
3370 | browser.slowStartup.notificationDisabled | boolean | Firefox 70, Firefox ESR 68.2 | false
3371 | &nbsp;&nbsp;&nbsp;&nbsp;If true, a notification isn't shown if startup is slow.
3372 | browser.tabs.warnOnClose | boolean | Firefox 68, Firefox ESR 68 | true
3373 | &nbsp;&nbsp;&nbsp;&nbsp;If false, there is no warning when the browser is closed.
3374 | browser.taskbar.previews.enable | boolean | Firefox 70, Firefox ESR 68.2 (Windows only) | false
3375 | &nbsp;&nbsp;&nbsp;&nbsp;If true, tab previews are shown in the Windows taskbar.
3376 | browser.urlbar.suggest.bookmark | boolean | Firefox 68, Firefox ESR 68 | true
3377 | &nbsp;&nbsp;&nbsp;&nbsp;If false, bookmarks aren't suggested when typing in the URL bar.
3378 | browser.urlbar.suggest.history | boolean | Firefox 68, Firefox ESR 68 | true
3379 | &nbsp;&nbsp;&nbsp;&nbsp;If false, history isn't suggested when typing in the URL bar.
3380 | browser.urlbar.suggest.openpage | boolean | Firefox 68, Firefox ESR 68 | true
3381 | &nbsp;&nbsp;&nbsp;&nbsp;If false, open tabs aren't suggested when typing in the URL bar.
3382 | datareporting.policy.dataSubmissionPolicyBypassNotification | boolean | Firefox 68, Firefox ESR 68 | false
3383 | &nbsp;&nbsp;&nbsp;&nbsp;If true, don't show the privacy policy tab on first run.
3384 | dom.allow_scripts_to_close_windows | boolean | Firefox 70, Firefox ESR 68.2 | false
3385 | &nbsp;&nbsp;&nbsp;&nbsp;If false, web page can close windows.
3386 | dom.disable_window_flip | boolean | Firefox 68, Firefox ESR 68 | true
3387 | &nbsp;&nbsp;&nbsp;&nbsp;If false, web pages can focus and activate windows.
3388 | dom.disable_window_move_resize | boolean | Firefox 68, Firefox ESR 68 | false
3389 | &nbsp;&nbsp;&nbsp;&nbsp;If true, web pages can't move or resize windows.
3390 | dom.event.contextmenu.enabled | boolean | Firefox 68, Firefox ESR 68 | true
3391 | &nbsp;&nbsp;&nbsp;&nbsp;If false, web pages can't override context menus.
3392 | dom.keyboardevent.keypress.hack.dispatch_non_printable_keys.addl | string | Firefox 68, Firefox ESR 68 | N/A
3393 | &nbsp;&nbsp;&nbsp;&nbsp;See https://support.mozilla.org/en-US/kb/dom-events-changes-introduced-firefox-66
3394 | dom.keyboardevent.keypress.hack.use_legacy_keycode_and_charcode.addl | string | Firefox 68, Firefox ESR 68 | N/A
3395 | &nbsp;&nbsp;&nbsp;&nbsp;See https://support.mozilla.org/en-US/kb/dom-events-changes-introduced-firefox-66
3396 | dom.xmldocument.load.enabled | boolean | Firefox ESR 68.5 | true.
3397 | &nbsp;&nbsp;&nbsp;&nbsp;If false, XMLDocument.load is not available.
3398 | dom.xmldocument.async.enabled | boolean | Firefox ESR 68.5 | true
3399 | &nbsp;&nbsp;&nbsp;&nbsp;If false, XMLDocument.async is not available.
3400 | extensions.blocklist.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
3401 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the extensions blocklist is not used (Not recommended)
3402 | extensions.getAddons.showPane | boolean | Firefox 68, Firefox ESR 68 | N/A
3403 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the Recommendations tab is not displayed in the Add-ons Manager.
3404 | extensions.htmlaboutaddons.recommendations.enabled | boolean | Firefox 72, Firefox ESR 68.4 | true
3405 | &nbsp;&nbsp;&nbsp;&nbsp;If false, recommendations are not shown on the Extensions tab in the Add-ons Manager.
3406 | geo.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
3407 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the geolocation API is disabled. | Language dependent
3408 | intl.accept_languages | string | Firefox 70, Firefox ESR 68.2
3409 | &nbsp;&nbsp;&nbsp;&nbsp;If set, preferred language for web pages.
3410 | media.eme.enabled (Deprecated - Switch to EncryptedMediaExtensions policy) | boolean | Firefox 70, Firefox ESR 68.2 | true
3411 | &nbsp;&nbsp;&nbsp;&nbsp;If false, Encrypted Media Extensions are not enabled.
3412 | media.gmp-gmpopenh264.enabled | boolean | Firefox 68, Firefox ESR 68 | true
3413 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the OpenH264 plugin is not downloaded.
3414 | media.gmp-widevinecdm.enabled | boolean | Firefox 68, Firefox ESR 68 | true
3415 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the Widevine plugin is not downloaded.
3416 | media.peerconnection.enabled | boolean | Firefox 72, Firefox ESR 68.4 | true
3417 | &nbsp;&nbsp;&nbsp;&nbsp;If false, WebRTC is disabled
3418 | media.peerconnection.ice.obfuscate_host_addresses.whitelist | string | Firefox 72, Firefox ESR 68.4 | N/A
3419 | &nbsp;&nbsp;&nbsp;&nbsp;If set, a list of domains for which mDNS hostname obfuscation is
3420 disabled
3421 | network.dns.disableIPv6 | boolean | Firefox 68, Firefox ESR 68 | false
3422 | &nbsp;&nbsp;&nbsp;&nbsp;If true, IPv6 DNS lokoups are disabled.
3423 | network.IDN_show_punycode | boolean | Firefox 68, Firefox ESR 68 | false
3424 | &nbsp;&nbsp;&nbsp;&nbsp;If true, display the punycode version of internationalized domain names.
3425 | places.history.enabled | boolean | Firefox 68, Firefox ESR 68 | true
3426 | &nbsp;&nbsp;&nbsp;&nbsp;If false, history is not enabled.
3427 | print.save_print_settings | boolean | Firefox 70, Firefox ESR 68.2 | true
3428 | &nbsp;&nbsp;&nbsp;&nbsp;If false, print settings are not saved between jobs.
3429 | security.default_personal_cert | string | Firefox 68, Firefox ESR 68 | Ask Every Time
3430 | &nbsp;&nbsp;&nbsp;&nbsp;If set to Select Automatically, Firefox automatically chooses the default personal certificate.
3431 | security.mixed_content.block_active_content | boolean | Firefox 70, Firefox ESR 68.2 | true
3432 | &nbsp;&nbsp;&nbsp;&nbsp;If false, mixed active content (HTTP and HTTPS) is not blocked.
3433 | security.osclientcerts.autoload | boolean | Firefox 72 (Windows), Firefox 75 (macOS) | false
3434 | &nbsp;&nbsp;&nbsp;&nbsp;If true, client certificates are loaded from the operating system certificate store.
3435 | security.ssl.errorReporting.enabled | boolean | Firefox 68, Firefox ESR 68 | true
3436 | &nbsp;&nbsp;&nbsp;&nbsp;If false, SSL errors cannot be sent to Mozilla.
3437 | security.tls.hello_downgrade_check | boolean | Firefox 72, Firefox ESR 68.4 | true
3438 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the TLS 1.3 downgrade check is disabled.
3439 | ui.key.menuAccessKeyFocuses | boolean | Firefox 68, Firefox ESR 68 | true
3440 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the Alt key doesn't show the menubar on Windows.
3441 | widget.content.gtk-theme-override | string | Firefox 72, Firefox ESR 68.4 (Linux only) | N/A
3442 | &nbsp;&nbsp;&nbsp;&nbsp;If set, overrides the GTK theme for widgets.
3443 #### Windows (GPO)
3444 ```
3445 Software\Policies\Mozilla\Firefox\Preferences\boolean_preference_name = 0x1 | 0x0
3446 Software\Policies\Mozilla\Firefox\Preferences\string_preference_name = "string_value"
3447 ```
3448 #### Windows (Intune)
3449 OMA-URI: (periods are replaced by underscores)
3450 ```
3451 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Preferences/boolean_preference_name
3452 ```
3453 Value (string):
3454 ```
3455 <enabled/> or <disabled/>
3456 ```
3457 #### macOS
3458 ```
3459 <dict>
3460 <key>Preferences</key>
3461 <dict>
3462 <key>boolean_preference_name</key>
3463 <true/> | <false/>
3464 <key>string_preference_name</key>
3465 <string>string_value</string>
3466 </dict>
3467 </dict>
3468 ```
3469 #### policies.json
3470 ```
3471 {
3472 "policies": {
3473 "Preferences": {
3474 "boolean_preference_name": true | false,
3475 "string_preference_name": "string_value"
3476 }
3477 }
3478 }
3479 ```
3480 ### PromptForDownloadLocation
3481 Ask where to save each file before downloading.
3482
3483 **Compatibility:** Firefox 68, Firefox ESR 68\
3484 **CCK2 Equivalent:** N/A\
3485 **Preferences Affected:** `browser.download.useDownloadDir`
3486
3487 #### Windows (GPO)
3488 ```
3489 Software\Policies\Mozilla\Firefox\PromptForDownloadLocation = 0x1 | 0x0
3490 ```
3491 #### Windows (Intune)
3492 OMA-URI:
3493 ```
3494 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PromptForDownloadLocation
3495 ```
3496 Value (string):
3497 ```
3498 <enabled/> or <disabled/>
3499 ```
3500 #### macOS
3501 ```
3502 <dict>
3503 <key>PromptForDownloadLocation</key>
3504 <true/> | <false/>
3505 </dict>
3506 ```
3507 #### policies.json
3508 ```
3509 {
3510 "policies": {
3511 "PromptForDownloadLocation": true | false
3512 }
3513 }
3514 ```
3515 ### Proxy
3516 Configure proxy settings. These settings correspond to the connection settings in Firefox preferences.
3517 To specify ports, append them to the hostnames with a colon (:).
3518
3519 `Mode` is the proxy method being used.
3520
3521 `Locked` is whether or not proxy settings can be changed.
3522
3523 `HTTPProxy` is the HTTP proxy server.
3524
3525 `UseHTTPProxyForAllProtocols` is whether or not the HTTP proxy should be used for all other proxies.
3526
3527 `SSLProxy` is the SSL proxy server.
3528
3529 `FTPProxy` is the FTP proxy server.
3530
3531 `SOCKSProxy` is the SOCKS proxy server
3532
3533 `SOCKSVersion` is the SOCKS version (4 or 5)
3534
3535 `Passthrough` is list of hostnames or IP addresses that will not be proxied. Use `<local>` to bypass proxying for all hostnames which do not contain periods.
3536
3537 `AutoConfigURL` is a URL for proxy configuration (only used if Mode is autoConfig).
3538
3539 `AutoLogin` means do not prompt for authentication if password is saved.
3540
3541 `UseProxyForDNS` to use proxy DNS when using SOCKS v5.
3542
3543 **Compatibility:** Firefox 60, Firefox ESR 60\
3544 **CCK2 Equivalent:** `networkProxy*`\
3545 **Preferences Affected:** `network.proxy.type`,`network.proxy.autoconfig_url`,`network.proxy.socks_remote_dns`,`signon.autologin.proxy`,`network.proxy.socks_version`,`network.proxy.no_proxies_on`,`network.proxy.share_proxy_settings`,`network.proxy.http`,`network.proxy.http_port`,`network.proxy.ftp`,`network.proxy.ftp_port`,`network.proxy.ssl`,`network.proxy.ssl_port`,`network.proxy.socks`,`network.proxy.socks_port`
3546
3547 #### Windows (GPO)
3548 ```
3549 Software\Policies\Mozilla\Firefox\Proxy\Mode = "none", "system", "manual", "autoDetect", "autoConfig"
3550 Software\Policies\Mozilla\Firefox\Proxy\Locked = 0x1 | 0x0
3551 Software\Policies\Mozilla\Firefox\=Proxy\HTTPProxy = https://httpproxy.example.com
3552 Software\Policies\Mozilla\Firefox\Proxy\UseHTTPProxyForAllProtocols = 0x1 | 0x0
3553 Software\Policies\Mozilla\Firefox\Proxy\SSLProxy = https://sslproxy.example.com
3554 Software\Policies\Mozilla\Firefox\Proxy\FTPProxy = https://ftpproxy.example.com
3555 Software\Policies\Mozilla\Firefox\Proxy\SOCKSProxy = https://socksproxy.example.com
3556 Software\Policies\Mozilla\Firefox\Proxy\SOCKSVersion = 0x4 | 0x5
3557 Software\Policies\Mozilla\Firefox\Proxy\Passthrough = <local>
3558 Software\Policies\Mozilla\Firefox\Proxy\AutoConfigURL = URL_TO_AUTOCONFIG
3559 Software\Policies\Mozilla\Firefox\Proxy\AutoLogin = 0x1 | 0x0
3560 Software\Policies\Mozilla\Firefox\Proxy\UseProxyForDNS = 0x1 | 0x0
3561 ```
3562 #### Windows (Intune)
3563 OMA-URI:
3564 ```
3565 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Proxy
3566 ```
3567 Value (string):
3568 ```
3569 <enabled/>
3570 <data id="ProxyLocked" value="true | false"/>
3571 <data id="ConnectionType" value="none | system | manual | autoDetect | autoConfig"/>
3572 <data id="HTTPProxy" value="https://httpproxy.example.com"/>
3573 <data id="UseHTTPProxyForAllProtocols" value="true | false"/>
3574 <data id="SSLProxy" value="https://sslproxy.example.com"/>
3575 <data id="FTPProxy" value="https://ftpproxy.example.com"/>
3576 <data id="SOCKSProxy" value="https://socksproxy.example.com"/>
3577 <data id="SOCKSVersion" value="4 | 5"/>
3578 <data id="AutoConfigURL" value="URL_TO_AUTOCONFIG"/>
3579 <data id="Passthrough" value="<local>"/>
3580 <data id="AutoLogin" value="true | false"/>
3581 <data id="UseProxyForDNS" value="true | false"/>
3582 ```
3583 #### macOS
3584 ```
3585 <dict>
3586 <key>Proxy</key>
3587 <dict>
3588 <key>Mode</key>
3589 <string>none | system | manual | autoDetect | autoConfig</string>
3590 <key>Locked</key>
3591 <true> | </false>
3592 <key>HTTPProxy</key>
3593 <string>https://httpproxy.example.com</string>
3594 <key>UseHTTPProxyForAllProtocols</key>
3595 <true> | </false>
3596 <key>SSLProxy</key>
3597 <string>https://sslproxy.example.com</string>
3598 <key>FTPProxy</key>
3599 <string>https://ftpproxy.example.com</string>
3600 <key>SOCKSProxy</key>
3601 <string>https://socksproxy.example.com</string>
3602 <key>SOCKSVersion</key>
3603 <string>4 | 5</string>
3604 <key>Passthrough</key>
3605 <string>&lt;local>&gt;</string>
3606 <key>AutoConfigURL</key>
3607 <string>URL_TO_AUTOCONFIG</string>
3608 <key>AutoLogin</key>
3609 <true> | </false>
3610 <key>UseProxyForDNS</key>
3611 <true> | </false>
3612 </dict>
3613 </dict>
3614 ```
3615 #### policies.json
3616 ```
3617 {
3618 "policies": {
3619 "Proxy": {
3620 "Mode": "none", "system", "manual", "autoDetect", "autoConfig",
3621 "Locked": true | false,
3622 "HTTPProxy": "hostname",
3623 "UseHTTPProxyForAllProtocols": true | false,
3624 "SSLProxy": "hostname",
3625 "FTPProxy": "hostname",
3626 "SOCKSProxy": "hostname",
3627 "SOCKSVersion": 4 | 5
3628 "Passthrough": "<local>",
3629 "AutoConfigURL": "URL_TO_AUTOCONFIG",
3630 "AutoLogin": true | false,
3631 "UseProxyForDNS": true | false
3632 }
3633 }
3634 }
3635 ```
3636 ### RequestedLocales
3637 Set the the list of requested locales for the application in order of preference. It will cause the corresponding language pack to become active.
3638
3639 Note: For Firefox 68, this can now be a string so that you can specify an empty value.
3640
3641 **Compatibility:** Firefox 64, Firefox ESR 60.4, Updated in Firefox 68, Firefox ESR 68\
3642 **CCK2 Equivalent:** N/A\
3643 **Preferences Affected:** N/A
3644 #### Windows (GPO)
3645 ```
3646 Software\Policies\Mozilla\Firefox\RequestedLocales\1 = "de"
3647 Software\Policies\Mozilla\Firefox\RequestedLocales\2 = "en-US"
3648
3649 or
3650
3651 Software\Policies\Mozilla\Firefox\RequestedLocales = "de,en-US"
3652 ```
3653 #### Windows (Intune)
3654 OMA-URI:
3655 ```
3656 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/RequestedLocalesString
3657 ```
3658 Value (string):
3659 ```
3660 <enabled/>
3661 <data id="Preferences_String" value="de,en-US"/>
3662 ```
3663 #### macOS
3664 ```
3665 <dict>
3666 <key>RequestedLocales</key>
3667 <array>
3668 <string>de</string>
3669 <string>en-US</string>
3670 </array>
3671 </dict>
3672
3673 or
3674
3675 <dict>
3676 <key>RequestedLocales</key>
3677 <string>de,en-US</string>
3678 </dict>
3679
3680 ```
3681 #### policies.json
3682 ```
3683 {
3684 "policies": {
3685 "RequestedLocales": ["de", "en-US"]
3686 }
3687 }
3688
3689 or
3690
3691 {
3692 "policies": {
3693 "RequestedLocales": "de,en-US"
3694 }
3695 }
3696 ```
3697 <a name="SanitizeOnShutdown"></a>
3698
3699 ### SanitizeOnShutdown (Selective)
3700 Clear data on shutdown. Choose from Cache, Cookies, Download History, Form & Search History, Browsing History, Active Logins, Site Preferences and Offline Website Data.
3701
3702 Previously, these values were always locked. Starting with Firefox 74 and Firefox ESR 68.6, you can use the `Locked` option to either keep the values unlocked (set it to false), or lock only the values you set (set it to true). If you want the old behavior of locking everything, do not set `Locked` at all.
3703
3704 **Compatibility:** Firefox 68, Firefox ESR 68 (Locked added in 74/68.6)\
3705 **CCK2 Equivalent:** N/A\
3706 **Preferences Affected:** `privacy.sanitize.sanitizeOnShutdown`,`privacy.clearOnShutdown.cache`,`privacy.clearOnShutdown.cookies`,`privacy.clearOnShutdown.downloads`,`privacy.clearOnShutdown.formdata`,`privacy.clearOnShutdown.history`,`privacy.clearOnShutdown.sessions`,`privacy.clearOnShutdown.siteSettings`,`privacy.clearOnShutdown.offlineApps`
3707 #### Windows (GPO)
3708 ```
3709 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Cache = 0x1 | 0x0
3710 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Cookies = 0x1 | 0x0
3711 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Downloads = 0x1 | 0x0
3712 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\FormData = 0x1 | 0x0
3713 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\History = 0x1 | 0x0
3714 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Sessions = 0x1 | 0x0
3715 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\SiteSettings = 0x1 | 0x0
3716 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\OfflineApps = 0x1 | 0x0
3717 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Locked = 0x1 | 0x0
3718 ```
3719 #### Windows (Intune)
3720 OMA-URI:
3721 ```
3722 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/I_SanitizeOnShutdown_Locked
3723 ```
3724 Value (string):
3725 ```
3726 <enabled/> or <disabled/>
3727 ```
3728 #### macOS
3729 ```
3730 <dict>
3731 <key>SanitizeOnShutdown</key>
3732 <dict>
3733 <key>Cache</key>
3734 <true/> | <false/>
3735 <key>Cookies</key>
3736 <true/> | <false/>
3737 <key>Downloads</key>
3738 <true/> | <false/>
3739 <key>FormData</key>
3740 <true/> | <false/>
3741 <key>History</key>
3742 <true/> | <false/>
3743 <key>Sessions</key>
3744 <true/> | <false/>
3745 <key>SiteSettings</key>
3746 <true/> | <false/>
3747 <key>OfflineApps</key>
3748 <true/> | <false/>
3749 <key>Locked</key>
3750 <true/> | <false/>
3751 </dict>
3752 </dict>
3753 ```
3754 #### policies.json
3755 ```
3756 {
3757 "policies": {
3758 "SanitizeOnShutdown": {
3759 "Cache": true | false,
3760 "Cookies": true | false,
3761 "Downloads": true | false,
3762 "FormData": true | false,
3763 "History": true | false,
3764 "Sessions": true | false,
3765 "SiteSettings": true | false,
3766 "OfflineApps": true | false,
3767 "Locked": true | false
3768 }
3769 }
3770 }
3771 ```
3772 ### SanitizeOnShutdown (All)
3773 Clear all data on shutdown, including Browsing & Download History, Cookies, Active Logins, Cache, Form & Search History, Site Preferences and Offline Website Data.
3774
3775 **Compatibility:** Firefox 60, Firefox ESR 60\
3776 **CCK2 Equivalent:** N/A\
3777 **Preferences Affected:** `privacy.sanitize.sanitizeOnShutdown`,`privacy.clearOnShutdown.cache`,`privacy.clearOnShutdown.cookies`,`privacy.clearOnShutdown.downloads`,`privacy.clearOnShutdown.formdata`,`privacy.clearOnShutdown.history`,`privacy.clearOnShutdown.sessions`,`privacy.clearOnShutdown.siteSettings`,`privacy.clearOnShutdown.offlineApps`
3778 #### Windows (GPO)
3779 ```
3780 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown = 0x1 | 0x0
3781 ```
3782 #### Windows (Intune)
3783 OMA-URI:
3784 ```
3785 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/C_SanitizeOnShutdown
3786 ```
3787 Value (string):
3788 ```
3789 <enabled/> or <disabled/>
3790 ```
3791 #### macOS
3792 ```
3793 <dict>
3794 <key>SanitizeOnShutdown</key>
3795 <true/> | <false/>
3796 </dict>
3797 ```
3798 #### policies.json
3799 ```
3800 {
3801 "policies": {
3802 "SanitizeOnShutdown": true | false
3803 }
3804 }
3805 ```
3806 ### SearchBar
3807 Set whether or not search bar is displayed.
3808
3809 **Compatibility:** Firefox 60, Firefox ESR 60\
3810 **CCK2 Equivalent:** `showSearchBar`\
3811 **Preferences Affected:** N/A
3812
3813 #### Windows (GPO)
3814 ```
3815 Software\Policies\Mozilla\Firefox\SearchBar = "unified" | "separate"
3816 ```
3817
3818 #### Windows (Intune)
3819 OMA-URI:
3820 ```
3821 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SearchBar
3822 ```
3823 Value (string):
3824 ```
3825 <enabled/>
3826 <data id="Permissions" value="unified | separate"/>
3827 #### macOS
3828 ```
3829 <dict>
3830 <key>SearchBar</key>
3831 <string>unified | separate</string>
3832 </dict>
3833 ```
3834 #### policies.json
3835 ```
3836 {
3837 "policies": {
3838 "SearchBar": "unified" | "separate"
3839 }
3840 }
3841 ```
3842 <a name="SearchEngines"></a>
3843
3844 ### SearchEngines (This policy is only available on the ESR.)
3845
3846 ### SearchEngines | Default
3847
3848 Set the default search engine. This policy is only available on the ESR.
3849
3850 **Compatibility:** Firefox ESR 60\
3851 **CCK2 Equivalent:** `defaultSearchEngine`\
3852 **Preferences Affected:** N/A
3853
3854 #### Windows (GPO)
3855 ```
3856 Software\Policies\Mozilla\Firefox\SearchEngines\Default = NAME_OF_SEARCH_ENGINE
3857 ```
3858 #### Windows (Intune)
3859 OMA-URI:
3860 ```
3861 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_Default
3862 ```
3863 Value (string):
3864 ```
3865 <enabled/>
3866 <data id="SearchEngines_Default" value="NAME_OF_SEARCH_ENGINE"/>
3867 ```
3868 #### macOS
3869 ```
3870 <dict>
3871 <key>SearchEngines</key>
3872 <dict>
3873 <key>Default</key>
3874 <string>NAME_OF_SEARCH_ENGINE</string>
3875 </dict>
3876 </dict>
3877 ```
3878 #### policies.json
3879 ```
3880 {
3881 "policies": {
3882 "SearchEngines": {
3883 "Default": "NAME_OF_SEARCH_ENGINE"
3884 }
3885 }
3886 }
3887 ```
3888 ### SearchEngines | PreventInstalls
3889
3890 Prevent installing search engines from webpages.
3891
3892 **Compatibility:** Firefox ESR 60\
3893 **CCK2 Equivalent:** `disableSearchEngineInstall`\
3894 **Preferences Affected:** N/A
3895
3896 #### Windows (GPO)
3897 ```
3898 Software\Policies\Mozilla\Firefox\SearchEngines\PreventInstalls = 0x1 | 0x0
3899 ```
3900 #### Windows (Intune)
3901 OMA-URI:
3902 ```
3903 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_PreventInstalls
3904 ```
3905 Value (string):
3906 ```
3907 <enabled/> or <disabled/>
3908 ```
3909 #### macOS
3910 ```
3911 <dict>
3912 <key>SearchEngines</key>
3913 <dict>
3914 <key>PreventInstalls</key>
3915 <true/> | <false/>
3916 </dict>
3917 </dict>
3918 ```
3919 #### policies.json
3920 ```
3921 {
3922 "policies": {
3923 "SearchEngines": {
3924 "PreventInstalls": true | false
3925 }
3926 }
3927 }
3928 ```
3929 ### SearchEngines | Remove
3930
3931 Hide built-in search engines. This policy is only available on the ESR.
3932
3933 **Compatibility:** Firefox ESR 60.2\
3934 **CCK2 Equivalent:** `removeDefaultSearchEngines` (removed all built-in engines)\
3935 **Preferences Affected:** N/A
3936
3937 #### Windows (GPO)
3938 ```
3939 Software\Policies\Mozilla\Firefox\SearchEngines\Remove\1 = NAME_OF_SEARCH_ENGINE
3940 ```
3941 #### Windows (Intune)
3942 OMA-URI:
3943 ```
3944 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_Remove
3945 ```
3946 Value (string):
3947 ```
3948 <enabled/>
3949 <data id="SearchEngines_Remove" value="1&#xF000;NAME_OF_SEARCH_ENGINE"/>
3950 ```
3951 #### macOS
3952 ```
3953 <dict>
3954 <key>SearchEngines</key>
3955 <dict>
3956 <key>Remove</key>
3957 <array>
3958 <string>NAME_OF_SEARCH_ENGINE</string>
3959 </array>
3960 </dict>
3961 </dict>
3962 ```
3963 #### policies.json
3964 ```
3965 {
3966 "policies": {
3967 "SearchEngines": {
3968 "Remove": ["NAME_OF_SEARCH_ENGINE"]
3969 }
3970 }
3971 }
3972 ```
3973 ### SearchEngines | Add
3974
3975 Add new search engines (up to five). This policy is only available on the ESR. `Name` and `URLTemplate` are required.
3976
3977 `Name` is the name of the search engine.
3978
3979 `URLTemplate` is the search URL with {searchTerms} to substitute for the search term.
3980
3981 `Method` is either GET or POST
3982
3983 `IconURL` is a URL for the icon to use.
3984
3985 `Alias` is a keyword to use for the engine.
3986
3987 `Description` is a description of the search engine.
3988
3989 `PostData` is the POST data as name value pairs separated by &.
3990
3991 `SuggestURLTemplate` is a search suggestions URL with {searchTerms} to substitute for the search term.
3992
3993 **Compatibility:** Firefox ESR 60 (POST support in Firefox ESR 68)\
3994 **CCK2 Equivalent:** `searchplugins`\
3995 **Preferences Affected:** N/A
3996
3997 #### Windows (GPO)
3998 ```
3999 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Name = "Example1"
4000 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\URLTemplate = "https://www.example.org/q={searchTerms}"
4001 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Method = "GET" | "POST"
4002 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\IconURL = "https://www.example.org/favicon.ico"
4003 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Alias = "example"
4004 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Description = "Example Description"
4005 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\SuggestURLTemplate = "https://www.example.org/suggestions/q={searchTerms}"
4006 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\PostData = "name=value&q={searchTerms}"
4007 ```
4008 #### Windows (Intune)
4009 OMA-URI:
4010 ```
4011 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_1
4012 ```
4013 Value (string):
4014 ```
4015 <enabled/>
4016 <data id="SearchEngine_Name" value="Example1"/>
4017 <data id="SearchEngine_URLTemplate" value="https://www.example.org/q={searchTerms"/>
4018 <data id="SearchEngine_Method" value="GET | POST"/>
4019 <data id="SearchEngine_IconURL" value="https://www.example.org/favicon.ico"/>
4020 <data id="SearchEngine_Alias" value="example"/>
4021 <data id="SearchEngine_Description" value="Example Description"/>
4022 <data id="SearchEngine_SuggestURLTemplate" value="https://www.example.org/suggestions/q={searchTerms}"/>
4023 <data id="SearchEngine_PostData" value="name=value&amp;q={searchTerms}"/>
4024 ```
4025 #### macOS
4026 ```
4027 <dict>
4028 <key>SearchEngines</key>
4029 <dict>
4030 <key>Add</key>
4031 <array>
4032 <dict>
4033 <key>Name</key>
4034 <string>Example1</string>
4035 <key>URLTemplate</key>
4036 <string>https://www.example.org/q={searchTerms}</string>
4037 <key>Method</key>
4038 <string>GET | POST </string>
4039 <key>IconURL</key>
4040 <string>https://www.example.org/favicon.ico</string>
4041 <key>Alias</key>
4042 <string>example</string>
4043 <key>Description</key>
4044 <string>Example Description</string>
4045 <key>SuggestURLTemplate</key>
4046 <string>https://www.example.org/suggestions/q={searchTerms}</string>
4047 <key>PostData</key>
4048 <string>name=value&q={searchTerms}</string>
4049 </dict>
4050 <array>
4051 </dict>
4052 </dict>
4053 ```
4054 #### policies.json
4055 ```
4056 {
4057 "policies": {
4058 "SearchEngines": {
4059 "Add": [
4060 {
4061 "Name": "Example1",
4062 "URLTemplate": "https://www.example.org/q={searchTerms}",
4063 "Method": "GET" | "POST",
4064 "IconURL": "https://www.example.org/favicon.ico",
4065 "Alias": "example",
4066 "Description": "Description",
4067 "PostData": "name=value&q={searchTerms}",
4068 "SuggestURLTemplate": "https://www.example.org/suggestions/q={searchTerms}"
4069 }
4070 ]
4071 }
4072 }
4073 }
4074 ```
4075 ### SearchSuggestEnabled
4076
4077 Enable search suggestions.
4078
4079 **Compatibility:** Firefox 68, Firefox ESR 68\
4080 **CCK2 Equivalent:** N/A\
4081 **Preferences Affected:** `browser.urlbar.suggest.searches`,`browser.search.suggest.enabled`
4082
4083 #### Windows (GPO)
4084 ```
4085 Software\Policies\Mozilla\Firefox\SearchSuggestEnabled = 0x1 | 0x0
4086 ```
4087 #### Windows (Intune)
4088 OMA-URI:
4089 ```
4090 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SearchSuggestEnabled
4091 ```
4092 Value (string):
4093 ```
4094 <enabled/> or <disabled/>
4095 ```
4096 #### macOS
4097 ```
4098 <dict>
4099 <key>SearchSuggestEnabled</key>
4100 <true/> | <false/>
4101 </dict>
4102 ```
4103 #### policies.json
4104 ```
4105 {
4106 "policies": {
4107 "SearchSuggestEnabled": true | false
4108 }
4109 }
4110 ```
4111 ### SecurityDevices
4112
4113 Install PKCS #11 modules.
4114
4115 **Compatibility:** Firefox 64, Firefox ESR 60.4\
4116 **CCK2 Equivalent:** `certs.devices`\
4117 **Preferences Affected:** N/A
4118
4119 #### Windows (GPO)
4120 ```
4121 Software\Policies\Mozilla\Firefox\SecurityDevices\NAME_OF_DEVICE = PATH_TO_LIBRARY_FOR_DEVICE
4122 ```
4123 #### Windows (Intune)
4124 OMA-URI:
4125 ```
4126 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SecurityDevices
4127 ```
4128 Value (string):
4129 ```
4130 <enabled/>
4131 <data id="SecurityDevices" value="NAME_OF_DEVICE&#xF000;PATH_TO_LIBRARY_FOR_DEVICE"/>
4132 ```
4133 #### macOS
4134 ```
4135 <dict>
4136 <key>SecurityDevices</key>
4137 <dict>
4138 <key>NAME_OF_DEVICE</key>
4139 <string>PATH_TO_LIBRARY_FOR_DEVICE</string>
4140 </dict>
4141 </dict>
4142 ```
4143
4144 #### policies.json
4145 ```
4146 {
4147 "policies": {
4148 "SecurityDevices": {
4149 "NAME_OF_DEVICE": "PATH_TO_LIBRARY_FOR_DEVICE"
4150 }
4151 }
4152 }
4153 ```
4154 ### SSLVersionMax
4155
4156 Set and lock the maximum version of TLS.
4157
4158 **Compatibility:** Firefox 66, Firefox ESR 60.6\
4159 **CCK2 Equivalent:** N/A\
4160 **Preferences Affected:** `security.tls.version.max`
4161
4162 #### Windows (GPO)
4163 ```
4164 Software\Policies\Mozilla\Firefox\SSLVersionMax = "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
4165 ```
4166 #### Windows (Intune)
4167 OMA-URI:
4168 ```
4169 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SSLVersionMax
4170 ```
4171 Value (string):
4172 ```
4173 <enabled/>
4174 <data id="SSLVersion" value="tls1 | tls1.2 | tls1.3"/>
4175 ```
4176 #### macOS
4177 ```
4178 <dict>
4179 <key>SSLVersionMax</key>
4180 <string>tls1 | tls1.1 | tls1.2 | tls1.3</string>
4181 </dict>
4182 ```
4183
4184 #### policies.json
4185 ```
4186 {
4187 "policies": {
4188 "SSLVersionMax": "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
4189 }
4190 }
4191 ```
4192 ### SSLVersionMin
4193
4194 Set and lock the minimum version of TLS.
4195
4196 **Compatibility:** Firefox 66, Firefox ESR 60.6\
4197 **CCK2 Equivalent:** N/A\
4198 **Preferences Affected:** `security.tls.version.min`
4199
4200 #### Windows (GPO)
4201 ```
4202 Software\Policies\Mozilla\Firefox\SSLVersionMin = "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
4203 ```
4204 #### Windows (Intune)
4205 OMA-URI:
4206 ```
4207 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SSLVersionMin
4208 ```
4209 Value (string):
4210 ```
4211 <enabled/>
4212 <data id="SSLVersion" value="tls1 | tls1.2 | tls1.3"/>
4213 ```
4214 #### macOS
4215 ```
4216 <dict>
4217 <key>SSLVersionMin</key>
4218 <string>tls1 | tls1.1 | tls1.2 | tls1.3</string>
4219 </dict>
4220 ```
4221
4222 #### policies.json
4223 ```
4224 {
4225 "policies": {
4226 "SSLVersionMin": "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
4227 }
4228 }
4229 ```
4230 ### SupportMenu
4231 Add a menuitem to the help menu for specifying support information.
4232
4233 **Compatibility:** Firefox 68.0.1, Firefox ESR 68.0.1\
4234 **CCK2 Equivalent:** helpMenu\
4235 **Preferences Affected:** N/A
4236
4237 #### Windows (GPO)
4238 ```
4239 Software\Policies\Mozilla\Firefox\SupportMenu\Title = "Support Menu"
4240 Software\Policies\Mozilla\Firefox\SupportMenu\URL = "http://example.com/support"
4241 Software\Policies\Mozilla\Firefox\SupportMenu\AccessKey = "S"
4242 ```
4243 #### Windows (Intune)
4244 OMA-URI:
4245 ```
4246 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SupportMenu
4247 ```
4248 Value (string):
4249 ```
4250 <enabled/>
4251 <data id="SupportMenuTitle" value="Support Menu"/>
4252 <data id="SupportMenuURL" value="http://example.com/support"/>
4253 <data id="SupportMenuAccessKey" value="S">
4254 ```
4255 #### macOS
4256 ```
4257 <dict>
4258 <key>SupportMenu</key>
4259 <dict>
4260 <key>Title</key>
4261 <string>SupportMenu</string>
4262 <key>URL</key>
4263 <string>http://example.com/support</string>
4264 <key>AccessKey</key>
4265 <string>S</string>
4266 </dict>
4267 </dict>
4268 ```
4269 #### policies.json
4270 ```
4271 {
4272 "policies": {
4273 "SupportMenu": {
4274 "Title": "Support Menu",
4275 "URL": "http://example.com/support",
4276 "AccessKey": "S"
4277 }
4278 }
4279 }
4280 ```
4281 ### UserMessaging
4282
4283 Prevent installing search engines from webpages.
4284
4285 `WhatsNew` Remove the "What's New" icon and menuitem. (Firefox 75 only)
4286
4287 `ExtensionRecommendations` Don't recommend extensions.
4288
4289 `FeatureRecommendations` Don't recommend browser features.
4290
4291 `UrlbarInterventions` Don't offer Firefox specific suggestions in the URL bar. (Firefox 75 only)
4292
4293 **Compatibility:** Firefox 75, Firefox ESR 68.7\
4294 **CCK2 Equivalent:** N/A\
4295 **Preferences Affected:** `browser.messaging-system.whatsNewPanel.enabled`,`browser.newtabpage.activity-stream.asrouter.userprefs.cfr.addons`,`browser.newtabpage.activity-stream.asrouter.userprefs.cfr.features`
4296
4297 #### Windows (GPO)
4298 ```
4299 Software\Policies\Mozilla\Firefox\UserMessaging\WhatsNew = 0x1 | 0x0
4300 Software\Policies\Mozilla\Firefox\UserMessaging\ExtensionRecommendations = 0x1 | 0x0
4301 Software\Policies\Mozilla\Firefox\UserMessaging\FeatureRecommendations = 0x1 | 0x0
4302 Software\Policies\Mozilla\Firefox\UserMessaging\UrlbarInterventions = 0x1 | 0x0
4303 ```
4304 #### Windows (Intune)
4305 OMA-URI:
4306 ```
4307 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/UserMessaging_WhatsNew
4308 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/UserMessaging_ExtensionRecommendations
4309 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/UserMessaging_FeatureRecommendations
4310 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/UserMessaging_UrlbarInterventions
4311 ```
4312 Value (string):
4313 ```
4314 <enabled/> or <disabled/>
4315 ```
4316 #### macOS
4317 ```
4318 <dict>
4319 <key>UserMessaging</key>
4320 <dict>
4321 <key>WhatsNew</key>
4322 <true/> | <false/>
4323 <key>ExtensionRecommendations</key>
4324 <true/> | <false/>
4325 <key>FeatureRecommendations</key>
4326 <true/> | <false/>
4327 <key>UrlbarInterventions</key>
4328 <true/> | <false/>
4329 </dict>
4330 </dict>
4331 ```
4332 #### policies.json
4333 ```
4334 {
4335 "policies": {
4336 "UserMessaging": {
4337 "WhatsNew": true | false,
4338 "ExtensionRecommendations": true | false,
4339 "FeatureRecommendations": true | false,
4340 "UrlbarInterventions": true | false
4341 }
4342 }
4343 }
4344 ```
4345 ### WebsiteFilter
4346 Block websites from being visited. The parameters take an array of Match Patterns, as documented in https://developer.mozilla.org/en-US/Add-ons/WebExtensions/Match_patterns. Only http/https addresses are supported at the moment. The arrays are limited to 1000 entries each.
4347
4348 **Compatibility:** Firefox 60, Firefox ESR 60\
4349 **CCK2 Equivalent:** N/A\
4350 **Preferences Affected:** N/A
4351
4352 #### Windows (GPO)
4353 ```
4354 Software\Policies\Mozilla\Firefox\WebsiteFilter\Block\1 = "<all_urls>"
4355 Software\Policies\Mozilla\Firefox\WebsiteFilter\Exceptions\1 = "http://example.org/*"
4356 ```
4357 #### Windows (Intune)
4358 OMA-URI:
4359 ```
4360 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/B_WebsiteFilter_Block
4361 ```
4362 Value (string):
4363 ```
4364 <enabled/>
4365 <data id="WebsiteFilter" value="1&#xF000;<all_urls>"/>
4366 ```
4367 OMA-URI:
4368 ```
4369 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/B_WebsiteFilter_Exceptions
4370 ```
4371 Value (string):
4372 ```
4373 <enabled/>
4374 <data id="WebsiteFilter" value="1&#xF000;http://example.org/*"/>
4375 ```
4376 #### macOS
4377 ```
4378 <dict>
4379 <key>WebsiteFilter</key>
4380 <dict>
4381 <key>Block</key>
4382 <array>
4383 <string><all_urls></string>
4384 </array>
4385 <key>Exceptions</key>
4386 <array>
4387 <string>http://example.org/*</string>
4388 </array>
4389 </dict>
4390
4391 </dict>
4392 ```
4393 #### policies.json
4394 ```
4395 {
4396 "policies": {
4397 "WebsiteFilter": {
4398 "Block": ["<all_urls>"],
4399 "Exceptions": ["http://example.org/*"]
4400 }
4401 }
4402 }
4403 ```
My copy of the policy templates for Firefox

patrick-canterino.de