README.md

   1 **These policies are in active development and so might contain changes that do not work with current versions of Firefox.**
   2
   3 **You should use the [officially released versions](https://github.com/mozilla/policy-templates/releases) if you are deploying changes.**
   4
   5 Policies can be specified using the [Group Policy templates on Windows](https://github.com/mozilla/policy-templates/tree/master/windows), [Intune on Windows](https://support.mozilla.org/kb/managing-firefox-intune), [configuration profiles on macOS](https://github.com/mozilla/policy-templates/tree/master/mac), or by creating a file called `policies.json`. On Windows, create a directory called `distribution` where the EXE is located and place the file there. On Mac, the file goes into `Firefox.app/Contents/Resources/distribution`.  On Linux, the file goes into `firefox/distribution`, where `firefox` is the installation directory for firefox, which varies by distribution or you can specify system-wide policy by placing the file in `/etc/firefox/policies`.
   6
   7 | Policy Name | Description
   8 | --- | --- |
   9 | **[`AppAutoUpdate`](#appautoupdate)** |  Enable or disable automatic application update.
  10 | **[`AppUpdateURL`](#appupdateurl)** | Change the URL for application update.
  11 | **[`Authentication`](#authentication)** | Configure sites that support integrated authentication.
  12 | **[`BlockAboutAddons`](#blockaboutaddons)** | Block access to the Add-ons Manager (about:addons).
  13 | **[`BlockAboutConfig`](#blockaboutconfig)** | Block access to about:config.
  14 | **[`BlockAboutProfiles`](#blockaboutprofiles)** | Block access to About Profiles (about:profiles).
  15 | **[`BlockAboutSupport`](#blockaboutsupport)** | Block access to Troubleshooting Information (about:support).
  16 | **[`Bookmarks`](#bookmarks)** | Add bookmarks in either the bookmarks toolbar or menu.
  17 | **[`CaptivePortal`](#captiveportal)** | Enable or disable the detection of captive portals.
  18 | **[`Certificates`](#certificates)** |
  19 | **[`Certificates -> ImportEnterpriseRoots`](#certificates--importenterpriseroots)** | Trust certificates that have been added to the operating system certificate store by a user or administrator.
  20 | **[`Certificates -> Install`](#certificates--install)** | Install certificates into the Firefox certificate store.
  21 | **[`Cookies`](#cookies)** | Configure cookie preferences.
  22 | **[`DisableSetDesktopBackground`](#disablesetdesktopbackground)** | Remove the "Set As Desktop Background..." menuitem when right clicking on an image.
  23 | **[`DisableMasterPasswordCreation`](#disablemasterpasswordcreation)** | Remove the master password functionality.
  24 | **[`DisableAppUpdate`](#disableappupdate)** | Turn off application updates.
  25 | **[`DisableBuiltinPDFViewer`](#disablebuiltinpdfviewer)** | Disable the built in PDF viewer.
  26 | **[`DisabledCiphers`](#disabledciphers)** | Disable ciphers.
  27 | **[`DisableDefaultBrowserAgent`](#disabledefaultbrowseragent)** | Prevent the default browser agent from taking any actions (Windows only).
  28 | **[`DisableDeveloperTools`](#disabledevelopertools)** | Remove access to all developer tools.
  29 | **[`DisableFeedbackCommands`](#disablefeedbackcommands)** | Disable the menus for reporting sites.
  30 | **[`DisableFirefoxScreenshots`](#disablefirefoxscreenshots)** | Remove access to Firefox Screenshots.
  31 | **[`DisableFirefoxAccounts`](#disablefirefoxaccounts)** | Disable Firefox Accounts integration (Sync).
  32 | **[`DisableFirefoxStudies`](#disablefirefoxstudies)** | Disable Firefox studies (Shield).
  33 | **[`DisableForgetButton`](#disableforgetbutton)** | Disable the "Forget" button.
  34 | **[`DisableFormHistory`](#disableformhistory)** | Turn off saving information on web forms and the search bar.
  35 | **[`DisablePasswordReveal`](#disablepasswordreveal)** | Do not allow passwords to be revealed in saved logins.
  36 | **[`DisablePocket`](#disablepocket)** | Remove Pocket in the Firefox UI.
  37 | **[`DisablePrivateBrowsing`](#disableprivatebrowsing)** | Remove access to private browsing.
  38 | **[`DisableProfileImport`](#disableprofileimport)** | Disables the "Import data from another browser" option in the bookmarks window.
  39 | **[`DisableProfileRefresh`](#disableprofilerefresh)** | Disable the Refresh Firefox button on about:support and support.mozilla.org
  40 | **[`DisableSafeMode`](#disablesafemode)** | Disable safe mode within the browser.
  41 | **[`DisableSecurityBypass`](#disablesecuritybypass)** | Prevent the user from bypassing security in certain cases.
  42 | **[`DisableSystemAddonUpdate`](#disablesystemaddonupdate)** | Prevent system add-ons from being installed or update.
  43 | **[`DisableTelemetry`](#disabletelemetry)** | DisableTelemetry
  44 | **[`DisplayBookmarksToolbar`](#displaybookmarkstoolbar)** | Set the initial state of the bookmarks toolbar.
  45 | **[`DisplayMenuBar (Deprecated)`](#displaymenubar-deprecated)** | Set the initial state of the menubar.
  46 | **[`DisplayMenuBar`](#displaymenubar)** | Set the state of the menubar.
  47 | **[`DNSOverHTTPS`](#dnsoverhttps)** | Configure DNS over HTTPS.
  48 | **[`DontCheckDefaultBrowser`](#dontcheckdefaultbrowser)** | Don't check if Firefox is the default browser at startup.
  49 | **[`DefaultDownloadDirectory`](#defaultdownloaddirectory)** | Set the default download directory.
  50 | **[`DownloadDirectory`](#downloaddirectory)** | Set and lock the download directory.
  51 | **[`EnableTrackingProtection`](#enabletrackingprotection)** | Configure tracking protection.
  52 | **[`EncryptedMediaExtensions`](#encryptedmediaextensions)** | Enable or disable Encrypted Media Extensions and optionally lock it.
  53 | **[`EnterprisePoliciesEnabled`](#enterprisepoliciesenabled)** | Enable policy support on macOS.
  54 | **[`Extensions`](#extensions)** | Control the installation, uninstallation and locking of extensions.
  55 | **[`ExtensionSettings`](#extensionsettings)** | Manage all aspects of extensions.
  56 | **[`ExtensionUpdate`](#extensionupdate)** | Control extension updates.
  57 | **[`FlashPlugin`](#flashplugin)** | Configure the default Flash plugin policy as well as origins for which Flash is allowed.
  58 | **[`FirefoxHome`](#firefoxhome)** | Customize the Firefox Home page.
  59 | **[`HardwareAcceleration`](#hardwareacceleration)** | Control hardware acceleration.
  60 | **[`Homepage`](#homepage)** | Configure the default homepage and how Firefox starts.
  61 | **[`InstallAddonsPermission`](#installaddonspermission)** | Configure the default extension install policy as well as origins for extension installs are allowed.
  62 | **[`LegacyProfiles`](#legacyprofiles)** | Disable the feature enforcing a separate profile for each installation.
  63 | **[`LocalFileLinks`](#localfilelinks)** | Enable linking to local files by origin.
  64 | **[`NetworkPrediction`](#networkprediction)** | Enable or disable network prediction (DNS prefetching).
  65 | **[`NewTabPage`](#newtabpage)** | Enable or disable the New Tab page.
  66 | **[`NoDefaultBookmarks`](#nodefaultbookmarks)** | Disable the creation of default bookmarks.
  67 | **[`OfferToSaveLogins`](#offertosavelogins)** | Control whether or not Firefox offers to save passwords.
  68 | **[`OfferToSaveLoginsDefault`](#offertosaveloginsdefault)** | Set the default value for whether or not Firefox offers to save passwords.
  69 | **[`OverrideFirstRunPage`](#overridefirstrunpage)** | Override the first run page.
  70 | **[`OverridePostUpdatePage`](#overridepostupdatepage)** | Override the upgrade page.
  71 | **[`PasswordManagerEnabled`](#passwordmanagerenabled)** | Remove (some) access to the password manager.
  72 | **[`PDFjs`](#pdfjs)** | Disable or configure PDF.js, the built-in PDF viewer.
  73 | **[`Permissions`](#permissions)** | Set permissions associated with camera, microphone, location, and notifications.
  74 | **[`PopupBlocking`](#popupblocking)** | Configure the default pop-up window policy as well as origins for which pop-up windows are allowed.
  75 | **[`Preferences`](#preferences)** | Set and lock some preferences.
  76 | **[`PromptForDownloadLocation`](#promptfordownloadlocation)** | Ask where to save each file before downloading.
  77 | **[`Proxy`](#proxy)** | Configure proxy settings.
  78 | **[`RequestedLocales`](#requestedlocales)** | Set the the list of requested locales for the application in order of preference.
  79 | **[`SanitizeOnShutdown` (All)](#sanitizeonshutdown-all)** | Clear all data on shutdown.
  80 | **[`SanitizeOnShutdown` (Selective)](#sanitizeonshutdown-selective)** | Clear data on shutdown.
  81 | **[`SearchBar`](#searchbar)** | Set whether or not search bar is displayed.
  82 | **[`SearchEngines`](#searchengines-this-policy-is-only-available-on-the-esr)** |
  83 | **[`SearchEngines -> Default`](#searchengines--default)** | Set the default search engine.
  84 | **[`SearchEngines -> PreventInstalls`](#searchengines--preventinstalls)** | Prevent installing search engines from webpages.
  85 | **[`SearchEngines -> Remove`](#searchengines--remove)** | Hide built-in search engines.
  86 | **[`SearchEngines -> Add`](#searchengines--add)** | Add new search engines.
  87 | **[`SearchSuggestEnabled`](#searchsuggestenabled)** | Enable search suggestions.
  88 | **[`SecurityDevices`](#securitydevices)** | Install PKCS #11 modules.
  89 | **[`SSLVersionMax`](#sslversionmax)** | Set and lock the maximum version of TLS.
  90 | **[`SSLVersionMin`](#sslversionmin)** | Set and lock the minimum version of TLS.
  91 | **[`SupportMenu`](#supportmenu)** | Add a menuitem to the help menu for specifying support information.
  92 | **[`UserMessaging`](#usermessaging)** | Don't show certain messages to the user.
  93 | **[`WebsiteFilter`](#websitefilter)** | Block websites from being visited.
  94
  95 ### AppAutoUpdate
  96
  97 Enable or disable **automatic** application update.
  98
  99 If set to true, application updates are installed without user approval.
 100
 101 If set to false, application updates are downloaded but the user can choose when to install the update.
 102
 103 If you have disabled updates via DisableAppUpdate, this policy has no effect.
 104
 105 **Compatibility:** Firefox 75, Firefox ESR 68.7\
 106 **CCK2 Equivalent:** N/A\
 107 **Preferences Affected:** app.update.auto
 108
 109 #### Windows (GPO)
 110 ```
 111 Software\Policies\Mozilla\Firefox\AppAutoUpdate = 0x1 | 0x0
 112 ```
 113 #### Windows (Intune)
 114 OMA-URI:
 115 ```
 116 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AppAutoUpdate
 117 ```
 118 Value (string):
 119 ```
 120 <enabled/> or <disabled/>
 121 ```
 122 #### macOS
 123 ```
 124 <dict>
 125   <key>AppAutoUpdate</key>
 126   <true/> | <false/>
 127 </dict>
 128 ```
 129 #### policies.json
 130 ```
 131 {
 132   "policies": {
 133     "AppAutoUpdate": true | false
 134   }
 135 }
 136 ```
 137 ### AppUpdateURL
 138
 139 Change the URL for application update.
 140
 141 **Compatibility:** Firefox 62, Firefox ESR 60.2\
 142 **CCK2 Equivalent:** N/A\
 143 **Preferences Affected:** `app.update.url`
 144
 145 #### Windows (GPO)
 146 ```
 147 Software\Policies\Mozilla\Firefox\AppUpdateURL = "https://yoursite.com"
 148 ```
 149 #### Windows (Intune)
 150 OMA-URI:
 151 ```
 152 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AppUpdateURL
 153 ```
 154 Value (string):
 155 ```
 156 <enabled/>
 157 <data id="AppUpdateURL" value="https://yoursite.com"/>
 158 ```
 159 #### macOS
 160 ```
 161 <dict>
 162   <key>AppUpdateURL</key>
 163   <string>https://yoursite.com</string>
 164 </dict>
 165 ```
 166 #### policies.json
 167 ```
 168 {
 169   "policies": {
 170     "AppUpdateURL": "https://yoursite.com"
 171   }
 172 }
 173 ```
 174 ### Authentication
 175
 176 Configure sites that support integrated authentication.
 177
 178 See https://developer.mozilla.org/en-US/docs/Mozilla/Integrated_authentication for more information.
 179
 180 `PrivateBrowsing` enables integrated authentication in prviate browsing.
 181
 182 **Compatibility:** Firefox 60, Firefox ESR 60 (AllowNonFQDN added in 62/60.2, AllowProxies added in 70/68.2, Locked added in 71/68.3, PrivateBrowsing added in 77/68.9)\
 183 **CCK2 Equivalent:** N/A\
 184 **Preferences Affected:** `network.negotiate-auth.trusted-uris`,`network.negotiate-auth.delegation-uris`,`network.automatic-ntlm-auth.trusted-uris`,`network.automatic-ntlm-auth.allow-non-fqdn`,`network.negotiate-auth.allow-non-fqdn`,`network.automatic-ntlm-auth.allow-proxies`,`network.negotiate-auth.allow-proxies`,`network.auth.private-browsing-sso`
 185
 186 #### Windows (GPO)
 187 ```
 188 Software\Policies\Mozilla\Firefox\Authentication\SPNEGO\1 = "mydomain.com"
 189 Software\Policies\Mozilla\Firefox\Authentication\SPNEGO\2 = "https://myotherdomain.com"
 190 Software\Policies\Mozilla\Firefox\Authentication\Delegated\1 = "mydomain.com"
 191 Software\Policies\Mozilla\Firefox\Authentication\Delegated\2 = "https://myotherdomain.com"
 192 Software\Policies\Mozilla\Firefox\Authentication\NTLM\1 = "mydomain.com"
 193 Software\Policies\Mozilla\Firefox\Authentication\NTLM\2 = "https://myotherdomain.com"
 194 Software\Policies\Mozilla\Firefox\Authentication\AllowNonFQDN\SPNEGO = 0x1 | 0x0
 195 Software\Policies\Mozilla\Firefox\Authentication\AllowNonFQDN\NTLM = 0x1 | 0x0
 196 Software\Policies\Mozilla\Firefox\Authentication\AllowProxies\SPNEGO = 0x1 | 0x0
 197 Software\Policies\Mozilla\Firefox\Authentication\AllowProxies\NTLM = 0x1 | 0x0
 198 Software\Policies\Mozilla\Firefox\Authentication\Locked = 0x1 | 0x0
 199 Software\Policies\Mozilla\Firefox\Authentication\PrivateBrowsing = 0x1 | 0x0
 200 ```
 201 #### Windows (Intune)
 202 OMA-URI:
 203 ```
 204 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_SPNEGO
 205 ```
 206 Value (string):
 207 ```
 208 <enabled/>
 209 <data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
 210 ```
 211 OMA-URI:
 212 ```
 213 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_Delegated
 214 ```
 215 Value (string):
 216 ```
 217 <enabled/>
 218 <data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
 219 ```
 220 OMA-URI:
 221 ```
 222 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_NTLM
 223 ```
 224 Value (string):
 225 ```
 226 <enabled/>
 227 <data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
 228 ```
 229 OMA-URI:
 230 ```
 231 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_AllowNonFQDN
 232 ```
 233 Value (string):
 234 ```
 235 <enabled/>
 236 <data id="Authentication_AllowNonFQDN_NTLM" value="true | false"/>
 237 <data id="Authentication_AllowNonFQDN_SPNEGO" value="true | false"/>
 238 ```
 239 OMA-URI:
 240 ```
 241 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_Locked
 242 ```
 243 Value (string):
 244 ```
 245 <enabled/> or <disabled/>
 246 ```
 247 OMA-URI:
 248 ```
 249 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_PrivateBrowsing
 250 ```
 251 Value (string):
 252 ```
 253 <enabled/> or <disabled/>
 254 ```
 255 #### macOS
 256 ```
 257 <dict>
 258   <key>Authentication</key>
 259   <dict>
 260     <key>SPNEGO</key>
 261     <array>
 262       <string>mydomain.com</string>
 263       <string>https://myotherdomain.com</string>
 264     </array>
 265     <key>Delegated</key>
 266     <array>
 267       <string>mydomain.com</string>
 268       <string>https://myotherdomain.com</string>
 269     </array>
 270     <key>NTLM</key>
 271     <array>
 272       <string>mydomain.com</string>
 273       <string>https://myotherdomain.com</string>
 274     </array>
 275     <key>AllowNonFQDN</key>
 276       <dict>
 277       <key>SPNEGO</key>
 278       <true/> | <false/>
 279       <key>NTLM</key>
 280       <true/> | <false/>
 281     </dict>
 282     <key>AllowProxies</key>
 283       <dict>
 284       <key>SPNEGO</key>
 285       <true/> | <false/>
 286       <key>NTLM</key>
 287       <true/> | <false/>
 288     </dict>
 289     <key>Locked</key>
 290     <true/> | <false/>
 291     <key>PrivateBrowsing</key>
 292     <true/> | <false/>
 293   </dict>
 294 </dict>
 295 ```
 296 #### policies.json
 297 ```
 298 {
 299   "policies": {
 300     "Authentication": {
 301       "SPNEGO": ["mydomain.com", "https://myotherdomain.com"],
 302       "Delegated": ["mydomain.com", "https://myotherdomain.com"],
 303       "NTLM": ["mydomain.com", "https://myotherdomain.com"],
 304       "AllowNonFQDN": {
 305         "SPNEGO": true | false,
 306         "NTLM": true | false
 307       },
 308       "AllowProxies": {
 309         "SPNEGO": true | false,
 310         "NTLM": true | false
 311       },
 312       "Locked": true | false,
 313       "PrivateBrowsing": true | false
 314     }
 315   }
 316 }
 317 ```
 318 ### BlockAboutAddons
 319
 320 Block access to the Add-ons Manager (about:addons).
 321
 322 **Compatibility:** Firefox 60, Firefox ESR 60\
 323 **CCK2 Equivalent:** `disableAddonsManager`\
 324 **Preferences Affected:** N/A
 325
 326 #### Windows (GPO)
 327 ```
 328 Software\Policies\Mozilla\Firefox\BlockAboutAddons = 0x1 | 0x0
 329 ```
 330 #### Windows (Intune)
 331 OMA-URI:
 332 ```
 333 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutAddons
 334 ```
 335 Value (string):
 336 ```
 337 <enabled/> or <disabled/>
 338 ```
 339 #### macOS
 340 ```
 341 <dict>
 342   <key>BlockAboutAddons</key>
 343   <true/> | <false/>
 344 </dict>
 345 ```
 346 #### policies.json
 347 ```
 348 {
 349   "policies": {
 350     "BlockAboutAddons": true | false
 351   }
 352 }
 353 ```
 354 ### BlockAboutConfig
 355
 356 Block access to about:config.
 357
 358 **Compatibility:** Firefox 60, Firefox ESR 60\
 359 **CCK2 Equivalent:** `disableAboutConfig`\
 360 **Preferences Affected:** N/A
 361
 362 #### Windows (GPO)
 363 ```
 364 Software\Policies\Mozilla\Firefox\BlockAboutConfig = 0x1 | 0x0
 365 ```
 366 #### Windows (Intune)
 367 OMA-URI:
 368 ```
 369 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutConfig
 370 ```
 371 Value (string):
 372 ```
 373 <enabled/> or <disabled/>
 374 ```
 375 #### macOS
 376 ```
 377 <dict>
 378   <key>BlockAboutConfig</key>
 379   <true/> | <false/>
 380 </dict>
 381 ```
 382 #### policies.json
 383 ```
 384 {
 385   "policies": {
 386     "BlockAboutConfig": true | false
 387   }
 388 }
 389 ```
 390 ### BlockAboutProfiles
 391
 392 Block access to About Profiles (about:profiles).
 393
 394 **Compatibility:** Firefox 60, Firefox ESR 60\
 395 **CCK2 Equivalent:** `disableAboutProfiles`\
 396 **Preferences Affected:** N/A
 397
 398 #### Windows (GPO)
 399 ```
 400 Software\Policies\Mozilla\Firefox\BlockAboutProfiles = 0x1 | 0x0
 401 ```
 402 #### Windows (Intune)
 403 OMA-URI:
 404 ```
 405 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutProfiles
 406 ```
 407 Value (string):
 408 ```
 409 <enabled/> or <disabled/>
 410 ```
 411 #### macOS
 412 ```
 413 <dict>
 414   <key>BlockAboutProfiles</key>
 415   <true/> | <false/>
 416 </dict>
 417 ```
 418 #### policies.json
 419 ```
 420 {
 421   "policies": {
 422     "BlockAboutProfiles": true | false
 423   }
 424 }
 425 ```
 426 ### BlockAboutSupport
 427
 428 Block access to Troubleshooting Information (about:support).
 429
 430 **Compatibility:** Firefox 60, Firefox ESR 60\
 431 **CCK2 Equivalent:** `disableAboutSupport`\
 432 **Preferences Affected:** N/A
 433
 434 #### Windows (GPO)
 435 ```
 436 Software\Policies\Mozilla\Firefox\BlockAboutSupport = 0x1 | 0x0
 437 ```
 438 #### Windows (Intune)
 439 OMA-URI:
 440 ```
 441 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutSupport
 442 ```
 443 Value (string):
 444 ```
 445 <enabled/> or <disabled/>
 446 ```
 447 #### macOS
 448 ```
 449 <dict>
 450   <key>BlockAboutSupport</key>
 451   <true/> | <false/>
 452 </dict>
 453 ```
 454 #### policies.json
 455 ```
 456 {
 457   "policies": {
 458     "BlockAboutSupport": true | false
 459   }
 460 }
 461 ```
 462 ### Bookmarks
 463
 464 Add bookmarks in either the bookmarks toolbar or menu. Only `Title` and `URL` are required. If `Placement` is not specified, the bookmark will be placed on the toolbar. If `Folder` is specified, it is automatically created and bookmarks with the same folder name are grouped together.
 465
 466 **Compatibility:** Firefox 60, Firefox ESR 60\
 467 **CCK2 Equivalent:** `bookmarks.toolbar`,`bookmarks.menu`\
 468 **Preferences Affected:** N/A
 469
 470 #### Windows (GPO)
 471 ```
 472 Software\Policies\Mozilla\Firefox\Bookmarks\1\Title = "Example"
 473 Software\Policies\Mozilla\Firefox\Bookmarks\1\URL = "https://example.com"
 474 Software\Policies\Mozilla\Firefox\Bookmarks\1\Favicon = "https://example.com/favicon.ico"
 475 Software\Policies\Mozilla\Firefox\Bookmarks\1\Placement = "toolbar" | "menu"
 476 Software\Policies\Mozilla\Firefox\Bookmarks\1\Folder = "FolderName"
 477 ```
 478 #### Windows (Intune)
 479 OMA-URI:
 480 ```
 481 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Bookmarks/Bookmark01
 482 ```
 483 Value (string):
 484 ```
 485 <enabled/>
 486 <data id="BookmarkTitle" value="Example"/>
 487 <data id="BookmarkURL" value="https://example.com"/>
 488 <data id="BookmarkFavicon" value="https://example.com/favicon.ico"/>
 489 <data id="BookmarkPlacement" value="toolbar | menu"/>
 490 <data id="BookmarkFolder" value="FolderName"/>
 491 ```
 492 #### macOS
 493 ```
 494 <dict>
 495   <key>Bookmarks</key>
 496   <array>
 497     <dict>
 498       <key>Title</key>
 499       <string>Example</string>
 500       <key>URL</key>
 501       <string>https://example.com</string>
 502       <key>Favicon</key>
 503       <string>https://example.com/favicon.ico</string>
 504       <key>Placement</key>
 505       <string>toolbar | menu</string>
 506       <key>Folder</key>
 507       <string>FolderName</string>
 508     </dict>
 509   </array>
 510 </dict>
 511 ```
 512 #### policies.json
 513 ```
 514 {
 515   "policies": {
 516     "Bookmarks": [
 517       {
 518         "Title": "Example",
 519         "URL": "https://example.com",
 520         "Favicon": "https://example.com/favicon.ico",
 521         "Placement": "toolbar" | "menu",
 522         "Folder": "FolderName"
 523       }
 524     ]
 525   }
 526 }
 527 ```
 528 ### CaptivePortal
 529 Enable or disable the detection of captive portals.
 530
 531 **Compatibility:** Firefox 67, Firefox ESR 60.7\
 532 **CCK2 Equivalent:** N/A\
 533 **Preferences Affected:** `network.captive-portal-service.enabled`
 534
 535 #### Windows (GPO)
 536 ```
 537 Software\Policies\Mozilla\Firefox\CaptivePortal = 0x1 | 0x0
 538 ```
 539 #### Windows (Intune)
 540 OMA-URI:
 541 ```
 542 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/CaptivePortal
 543 ```
 544 Value (string):
 545 ```
 546 <enabled/> or <disabled/>
 547 ```
 548 #### macOS
 549 ```
 550 <dict>
 551   <key>CaptivePortal</key>
 552   <true/> | <false/>
 553 </dict>
 554 ```
 555 #### policies.json
 556 ```
 557 {
 558   "policies": {
 559     "CaptivePortal": true | false
 560   }
 561 }
 562 ```
 563 ### Certificates
 564
 565 ### Certificates | ImportEnterpriseRoots
 566
 567 Trust certificates that have been added to the operating system certificate store by a user or administrator.
 568
 569 See https://support.mozilla.org/kb/setting-certificate-authorities-firefox for more detail.
 570
 571 **Compatibility:** Firefox 60, Firefox ESR 60 (macOS support in Firefox 63, Firefox ESR 68)\
 572 **CCK2 Equivalent:** N/A\
 573 **Preferences Affected:** `security.enterprise_roots.enabled`
 574
 575 #### Windows (GPO)
 576 ```
 577 Software\Policies\Mozilla\Firefox\Certificates\ImportEnterpriseRoots = 0x1 | 0x0
 578 ```
 579 #### Windows (Intune)
 580 OMA-URI:
 581 ```
 582 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Certificates/Certificates_ImportEnterpriseRoots
 583 ```
 584 Value (string):
 585 ```
 586 <enabled/> or <disabled/>
 587 ```
 588 #### macOS
 589 ```
 590 <dict>
 591   <key>Certificates</key>
 592   <dict>
 593     <key>ImportEnterpriseRoots</key>
 594     <true/> | <false/>
 595   </dict>
 596 </dict>
 597 ```
 598 #### policies.json
 599 ```
 600 {
 601   "policies": {
 602     "Certificates": {
 603       "ImportEnterpriseRoots": true | false
 604     }
 605   }
 606 }
 607 ```
 608 ### Certificates | Install
 609
 610 Install certificates into the Firefox certificate store. If only a filename is specified, Firefox searches for the file in the following locations:
 611
 612 - Windows
 613   - %USERPROFILE%\AppData\Local\Mozilla\Certificates
 614   - %USERPROFILE%\AppData\Roaming\Mozilla\Certificates
 615 - macOS
 616   - /Library/Application Support/Mozilla/Certificates
 617   - ~/Library/Application Support/Mozilla/Certificates
 618 - Linux
 619   - /usr/lib/mozilla/certificates
 620   - /usr/lib64/mozilla/certificates
 621   - ~/.mozilla/certificates
 622
 623 Starting with Firefox 65, Firefox 60.5 ESR, a fully qualified path can be used, including UNC paths. You should use the native path style for your operating system. We do not support using %USERPROFILE% or other environment variables on Windows.
 624
 625 If you are specifying the path in the policies.json file on Windows, you need to escape your backslashes (`\\`) which means that for UNC paths, you need to escape both (`\\\\`). If you use group policy, you only need one backslash.
 626
 627 Certificates are installed using the trust string `CT,CT,`.
 628
 629 Binary (DER) and ASCII (PEM) certificates are both supported.
 630
 631 **Compatibility:** Firefox 64, Firefox ESR 64\
 632 **CCK2 Equivalent:** `certs.ca`\
 633 **Preferences Affected:** N/A
 634
 635 #### Windows (GPO)
 636 ```
 637 Software\Policies\Mozilla\Firefox\Certificates\Install\1 = "cert1.der"
 638 Software\Policies\Mozilla\Firefox\Certificates\Install\2 = "C:\Users\username\cert2.pem"
 639 ```
 640 #### Windows (Intune)
 641 OMA-URI:
 642 ```
 643 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Certificates/Certificates_Install
 644 ```
 645 Value (string):
 646 ```
 647 <enabled/>
 648 <data id="Certificates_Install" value="1&#xF000;cert1.der&#xF000;2&#xF000;C:\Users\username\cert2.pem"/>
 649 ```
 650 #### macOS
 651 ```
 652 <dict>
 653   <key>Certificates</key>
 654   <dict>
 655     <key>Install</key>
 656     <array>
 657       <string>cert1.der</string>
 658       <string>/Users/username/cert2.pem</string>
 659     </array>
 660   </dict>
 661 </dict>
 662 ```
 663 #### policies.json
 664 ```
 665 {
 666   "policies": {
 667     "Certificates": {
 668       "Install": ["cert1.der", "/home/username/cert2.pem"]
 669     }
 670   }
 671 }
 672 ```
 673 ### Cookies
 674 Configure cookie preferences.
 675
 676 `Allow` is a list of origins (not domains) where cookies are always allowed. You must include http or https.
 677
 678 `Block` is a list of origins (not domains) where cookies are always blocked. You must include http or https.
 679
 680 `Default` determines whether cookies are accepted at all.
 681
 682 `AcceptThirdParty` determines how third-party cookies are handled.
 683
 684 `ExpireAtSessionEnd` determines when cookies expire.
 685
 686 `RejectTracker` only rejects cookies for trackers.
 687
 688 `Locked` prevents the user from changing cookie preferences.
 689
 690 **Compatibility:** Firefox 60, Firefox ESR 60 (RejectTracker was added in Firefox 63)\
 691 **CCK2 Equivalent:** N/A\
 692 **Preferences Affected:** `network.cookie.cookieBehavior`,`network.cookie.lifetimePolicy`
 693
 694 #### Windows (GPO)
 695 ```
 696 Software\Policies\Mozilla\Firefox\Cookies\Allow\1 = "https://example.com"
 697 Software\Policies\Mozilla\Firefox\Cookies\Block\1 = "https://example.org"
 698 Software\Policies\Mozilla\Firefox\Cookies\Default = 0x1 | 0x0
 699 Software\Policies\Mozilla\Firefox\Cookies\AcceptThirdParty = "always" | "never" | "from-visited"
 700 Software\Policies\Mozilla\Firefox\Cookies\ExpireAtSessionEnd = 0x1 | 0x0
 701 Software\Policies\Mozilla\Firefox\Cookies\RejectTracker = 0x1 | 0x0
 702 Software\Policies\Mozilla\Firefox\Cookies\Locked = 0x1 | 0x0
 703 ```
 704 #### Windows (Intune)
 705 OMA-URI:
 706 ```
 707 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Allow
 708 ```
 709 Value (string):
 710 ```
 711 <enabled/>
 712 <data id="Cookies_Allow" value="1&#xF000;https://example.com"/>
 713 ```
 714 OMA-URI:
 715 ```
 716 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Block
 717 ```
 718 Value (string):
 719 ```
 720 <enabled/>
 721 <data id="Cookies_Block" value="1&#xF000;https://example.org"/>
 722 ```
 723 OMA-URI:
 724 ```
 725 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Default
 726 ```
 727 Value (string):
 728 ```
 729 <enabled/> or <disabled/>
 730 ```
 731 OMA-URI:
 732 ```
 733 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_AcceptThirdParty
 734 ```
 735 Value (string):
 736 ```
 737 <enabled/>
 738 <data id="Cookies_AcceptThirdParty" value="always | never | from-visited"/>
 739 ```
 740 OMA-URI:
 741 ```
 742 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_ExpireAtSessionEnd
 743 ```
 744 Value (string):
 745 ```
 746 <enabled/> or <disabled/>
 747 ```
 748 OMA-URI:
 749 ```
 750 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_RejectTracker
 751 ```
 752 Value (string):
 753 ```
 754 <enabled/> or <disabled/>
 755 ```
 756 OMA-URI:
 757 ```
 758 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Locked
 759 ```
 760 Value (string):
 761 ```
 762 <enabled/> or <disabled/>
 763 ```
 764 #### macOS
 765 ```
 766 <dict>
 767   <key>Cookies</key>
 768   <dict>
 769     <key>Allow</key>
 770     <array>
 771       <string>http://example.com</string>
 772     </array>
 773     <key>Block</key>
 774     <array>
 775       <string>http://example.org</string>
 776     </array>
 777     <key>Default</key>
 778     <true/> | <false/>
 779     <key>AcceptThirdParty</key>
 780     <string>always | never | from-visited</string>
 781     <key>ExpireAtSessionEnd</key>
 782     <true/> | <false/>
 783     <key>RejectTracker</key>
 784     <true/> | <false/>
 785     <key>Locked</key>
 786     <true/> | <false/>
 787   </dict>
 788 </dict>
 789 ```
 790 #### policies.json
 791 ```
 792 {
 793   "policies": {
 794     "Cookies": {
 795       "Allow": ["http://example.org/"],
 796       "Block": ["http://example.edu/"],
 797       "Default": true | false,
 798       "AcceptThirdParty": "always" | "never" | "from-visited",
 799       "ExpireAtSessionEnd": true | false,
 800       "RejectTracker": true | false,
 801       "Locked": true | false
 802     }
 803   }
 804 }
 805 ```
 806 ### DisableSetDesktopBackground
 807 Remove the "Set As Desktop Background..." menuitem when right clicking on an image.
 808
 809 **Compatibility:** Firefox 60, Firefox ESR 60\
 810 **CCK2 Equivalent:** `removeSetDesktopBackground`\
 811 **Preferences Affected:** N/A
 812
 813 #### Windows (GPO)
 814 ```
 815 Software\Policies\Mozilla\Firefox\DisableSetDesktopBackground = 0x1 | 0x0
 816 ```
 817 #### Windows (Intune)
 818 OMA-URI:
 819 ```
 820 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSetDesktopBackground
 821 ```
 822 Value (string):
 823 ```
 824 <enabled/> or <disabled/>
 825 ```
 826 #### macOS
 827 ```
 828 <dict>
 829   <key>DisableSetDesktopBackground</key>
 830   <true/> | <false/>
 831 </dict>
 832 ```
 833 #### policies.json
 834 ```
 835 {
 836   "policies": {
 837     "DisableSetDesktopBackground": true | false
 838   }
 839 }
 840 ```
 841 ### DisableMasterPasswordCreation
 842 Remove the master password functionality.
 843
 844 **Compatibility:** Firefox 60, Firefox ESR 60\
 845 **CCK2 Equivalent:** `noMasterPassword`\
 846 **Preferences Affected:** N/A
 847
 848 #### Windows (GPO)
 849 ```
 850 Software\Policies\Mozilla\Firefox\DisableMasterPasswordCreation = 0x1 | 0x0
 851 ```
 852 #### Windows (Intune)
 853 OMA-URI:
 854 ```
 855 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableMasterPasswordCreation
 856 ```
 857 Value (string):
 858 ```
 859 <enabled/> or <disabled/>
 860 ```
 861 #### macOS
 862 ```
 863 <dict>
 864   <key>DisableMasterPasswordCreation</key>
 865   <true/> | <false/>
 866 </dict>
 867 ```
 868 #### policies.json
 869 ```
 870 {
 871   "policies": {
 872     "DisableMasterPasswordCreation": true | false
 873   }
 874 }
 875 ```
 876 ### DisableAppUpdate
 877 Turn off application updates.
 878
 879 **Compatibility:** Firefox 60, Firefox ESR 60\
 880 **CCK2 Equivalent:** `disableFirefoxUpdates`\
 881 **Preferences Affected:** N/A
 882
 883 #### Windows (GPO)
 884 ```
 885 Software\Policies\Mozilla\Firefox\DisableAppUpdate = 0x1 | 0x0
 886 ```
 887 #### Windows (Intune)
 888 OMA-URI:
 889 ```
 890 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableAppUpdate
 891 ```
 892 Value (string):
 893 ```
 894 <enabled/> or <disabled/>
 895 ```
 896 #### macOS
 897 ```
 898 <dict>
 899   <key>DisableAppUpdate</key>
 900   <true/> | <false/>
 901 </dict>
 902 ```
 903 #### policies.json
 904 ```
 905 {
 906   "policies": {
 907     "DisableAppUpdate": true | false
 908   }
 909 }
 910 ```
 911 ### DisableBuiltinPDFViewer
 912 Disable the built in PDF viewer. PDF files are downloaded and sent externally.
 913
 914 **Compatibility:** Firefox 60, Firefox ESR 60\
 915 **CCK2 Equivalent:** `disablePDFjs`\
 916 **Preferences Affected:** `pdfjs.disabled`
 917
 918 #### Windows (GPO)
 919 ```
 920 Software\Policies\Mozilla\Firefox\DisableBuiltinPDFViewer = 0x1 | 0x0
 921 ```
 922 #### Windows (Intune)
 923 OMA-URI:
 924 ```
 925 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableBuiltinPDFViewer
 926 ```
 927 Value (string):
 928 ```
 929 <enabled/> or <disabled/>
 930 ```
 931 #### macOS
 932 ```
 933 <dict>
 934   <key>DisableBuiltinPDFViewer</key>
 935   <true/> | <false/>
 936 </dict>
 937 ```
 938 #### policies.json
 939 ```
 940 {
 941   "policies": {
 942     "DisableBuiltinPDFViewer": true | false
 943   }
 944 }
 945 ```
 946 ### DisabledCiphers
 947 Disable specific cryptographic ciphers.
 948
 949 **Compatibility:** Firefox 76, Firefox ESR 68.8\
 950 **CCK2 Equivalent:** N/A\
 951 **Preferences Affected:** N/A
 952
 953 #### Windows (GPO)
 954 ```
 955 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_DHE_RSA_WITH_AES_128_CBC_SHA = 0x1 | 0x0
 956 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_DHE_RSA_WITH_AES_256_CBC_SHA = 0x1 | 0x0
 957 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA = 0x1 | 0x0
 958 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA = 0x1 | 0x0
 959 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 = 0x1 | 0x0
 960 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 = 0x1 | 0x0
 961 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_RSA_WITH_AES_128_CBC_SHA = 0x1 | 0x0
 962 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_RSA_WITH_AES_256_CBC_SHA = 0x1 | 0x0
 963 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_RSA_WITH_3DES_EDE_CBC_SHA = 0x1 | 0x0
 964 ```
 965 #### Windows (Intune)
 966 OMA-URI:
 967 ```
 968 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_DHE_RSA_WITH_AES_128_CBC_SHA
 969 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_DHE_RSA_WITH_AES_256_CBC_SHA
 970 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
 971 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
 972 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
 973 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
 974 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_RSA_WITH_AES_128_CBC_SHA
 975 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_RSA_WITH_AES_256_CBC_SHA
 976 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_RSA_WITH_3DES_EDE_CBC_SHA
 977 ```
 978 Value (string):
 979 ```
 980 <enabled/> or <disabled/>
 981 ```
 982 #### macOS
 983 ```
 984 <dict>
 985   <key>DisabledCiphers</key>
 986     <dict>
 987       <key>TLS_DHE_RSA_WITH_AES_128_CBC_SHA</key>
 988       <true/> | <false/>
 989       <key>TLS_DHE_RSA_WITH_AES_256_CBC_SHA</key>
 990       <true/> | <false/>
 991       <key>TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA</key>
 992       <true/> | <false/>
 993       <key>TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA</key>
 994       <true/> | <false/>
 995       <key>TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256</key>
 996       <true/> | <false/>
 997       <key>TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256</key>
 998       <true/> | <false/>
 999       <key>TLS_RSA_WITH_AES_128_CBC_SHA</key>
1000       <true/> | <false/>
1001       <key>TLS_RSA_WITH_AES_256_CBC_SHA</key>
1002       <true/> | <false/>
1003       <key>TLS_RSA_WITH_3DES_EDE_CBC_SHA</key>
1004       <true/> | <false/>
1005     </dict>
1006 </dict>
1007 ```
1008 #### policies.json
1009 ```
1010 {
1011   "policies": {
1012     "DisabledCiphers" {
1013       "TLS_DHE_RSA_WITH_AES_128_CBC_SHA": true | false,
1014       "TLS_DHE_RSA_WITH_AES_256_CBC_SHA": true | false,
1015       "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA": true | false,
1016       "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA": true | false,
1017       "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256": true | false,
1018       "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256": true | false,
1019       "TLS_RSA_WITH_AES_128_CBC_SHA": true | false,
1020       "TLS_RSA_WITH_AES_256_CBC_SHA": true | false,
1021       "TLS_RSA_WITH_3DES_EDE_CBC_SHA": true | false
1022     }
1023   }
1024 }
1025 ```
1026 ### DisableDefaultBrowserAgent
1027 Prevent the default browser agent from taking any actions. Only applicable to Windows; other platforms don’t have the agent.
1028
1029 **Compatibility:** Firefox 75, Firefox ESR 68.7 (Windows only)\
1030 **CCK2 Equivalent:** N/A\
1031 **Preferences Affected:** N/A
1032
1033 #### Windows (GPO)
1034 ```
1035 Software\Policies\Mozilla\Firefox\DisableDefaultBrowserAgent = 0x1 | 0x0
1036 ```
1037 #### Windows (Intune)
1038 OMA-URI:
1039 ```
1040 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableDefaultBrowserAgent
1041 ```
1042 Value (string):
1043 ```
1044 <enabled/> or <disabled/>
1045 ```
1046 #### policies.json
1047 ```
1048 {
1049   "policies": {
1050     "DisableDefaultBrowserAgent": true | false
1051   }
1052 }
1053 ```
1054 ### DisableDeveloperTools
1055 Remove access to all developer tools.
1056
1057 **Compatibility:** Firefox 60, Firefox ESR 60\
1058 **CCK2 Equivalent:** `removeDeveloperTools`\
1059 **Preferences Affected:** `devtools.policy.disabled`
1060
1061 #### Windows (GPO)
1062 ```
1063 Software\Policies\Mozilla\Firefox\DisableDeveloperTools = 0x1 | 0x0`
1064 ```
1065 #### Windows (Intune)
1066 OMA-URI:
1067 ```
1068 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableDeveloperTools
1069 ```
1070 Value (string):
1071 ```
1072 <enabled/> or <disabled/>
1073 ```
1074 #### macOS
1075 ```
1076 <dict>
1077   <key>DisableDeveloperTools</key>
1078   <true/> | <false/>
1079 </dict>
1080 ```
1081 #### policies.json
1082 ```
1083 {
1084   "policies": {
1085     "DisableDeveloperTools": true | false
1086   }
1087 }
1088 ```
1089 ### DisableFeedbackCommands
1090 Disable the menus for reporting sites (Submit Feedback, Report Deceptive Site).
1091
1092 **Compatibility:** Firefox 60, Firefox ESR 60\
1093 **CCK2 Equivalent:** N/A\
1094 **Preferences Affected:** N/A
1095
1096 #### Windows (GPO)
1097 ```
1098 Software\Policies\Mozilla\Firefox\DisableFeedbackCommands = 0x1 | 0x0
1099 ```
1100 #### Windows (Intune)
1101 OMA-URI:
1102 ```
1103 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFeedbackCommands
1104 ```
1105 Value (string):
1106 ```
1107 <enabled/> or <disabled/>
1108 ```
1109 #### macOS
1110 ```
1111 <dict>
1112   <key>DisableFeedbackCommands</key>
1113   <true/> | <false/>
1114 </dict>
1115 ```
1116 #### policies.json
1117 ```
1118 {
1119   "policies": {
1120     "DisableFeedbackCommands": true | false
1121   }
1122 }
1123 ```
1124 ### DisableFirefoxScreenshots
1125 Remove access to Firefox Screenshots.
1126
1127 **Compatibility:** Firefox 60, Firefox ESR 60\
1128 **CCK2 Equivalent:** N/A\
1129 **Preferences Affected:** `extensions.screenshots.disabled`
1130
1131 #### Windows (GPO)
1132 ```
1133 Software\Policies\Mozilla\Firefox\DisableFirefoxScreenshots = 0x1 | 0x0
1134 ```
1135 #### Windows (Intune)
1136 OMA-URI:
1137 ```
1138 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxScreenshots
1139 ```
1140 Value (string):
1141 ```
1142 <enabled/> or <disabled/>
1143 ```
1144 #### macOS
1145 ```
1146 <dict>
1147   <key>DisableFirefoxScreenshots</key>
1148   <true/> | <false/>
1149 </dict>
1150 ```
1151 #### policies.json
1152 ```
1153 {
1154   "policies": {
1155     "DisableFirefoxScreenshots": true | false
1156   }
1157 }
1158 ```
1159 ### DisableFirefoxAccounts
1160 Disable Firefox Accounts integration (Sync).
1161
1162 **Compatibility:** Firefox 60, Firefox ESR 60\
1163 **CCK2 Equivalent:** `disableSync`\
1164 **Preferences Affected:** `identity.fxaccounts.enabled`
1165
1166 #### Windows (GPO)
1167 ```
1168 Software\Policies\Mozilla\Firefox\DisableFirefoxAccounts = 0x1 | 0x0
1169 ```
1170 #### Windows (Intune)
1171 OMA-URI:
1172 ```
1173 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxAccounts
1174 ```
1175 Value (string):
1176 ```
1177 <enabled/> or <disabled/>
1178 ```
1179 #### macOS
1180 ```
1181 <dict>
1182   <key>DisableFirefoxAccounts</key>
1183   <true/> | <false/>
1184 </dict>
1185 ```
1186 #### policies.json
1187 ```
1188 {
1189   "policies": {
1190     "DisableFirefoxAccounts": true | false
1191   }
1192 }
1193 ```
1194 ### DisableFirefoxStudies
1195 Disable Firefox studies (Shield).
1196
1197 **Compatibility:** Firefox 60, Firefox ESR 60\
1198 **CCK2 Equivalent:** N/A\
1199 **Preferences Affected:** N/A
1200
1201 #### Windows (GPO)
1202 ```
1203 Software\Policies\Mozilla\Firefox\DisableFirefoxStudies = 0x1 | 0x0
1204 ```
1205 #### Windows (Intune)
1206 OMA-URI:
1207 ```
1208 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxStudies
1209 ```
1210 Value (string):
1211 ```
1212 <enabled/> or <disabled/>
1213 ```
1214 #### macOS
1215 ```
1216 <dict>
1217   <key>DisableFirefoxStudies</key>
1218   <true/> | <false/>
1219 </dict>
1220 ```
1221 #### policies.json
1222 ```
1223 {
1224   "policies": {
1225     "DisableFirefoxStudies": true | false
1226   }
1227 }
1228 ```
1229 ### DisableForgetButton
1230 Disable the "Forget" button.
1231
1232 **Compatibility:** Firefox 60, Firefox ESR 60\
1233 **CCK2 Equivalent:** `disableForget`\
1234 **Preferences Affected:** N/A
1235
1236 #### Windows (GPO)
1237 ```
1238 Software\Policies\Mozilla\Firefox\DisableForgetButton = 0x1 | 0x0
1239 ```
1240 #### Windows (Intune)
1241 OMA-URI:
1242 ```
1243 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableForgetButton
1244 ```
1245 Value (string):
1246 ```
1247 <enabled/> or <disabled/>
1248 ```
1249 #### macOS
1250 ```
1251 <dict>
1252   <key>DisableForgetButton</key>
1253   <true/> | <false/>
1254 </dict>
1255 ```
1256 #### policies.json
1257 ```
1258 {
1259   "policies": {
1260     "DisableForgetButton": true | false
1261   }
1262 }
1263 ```
1264 ### DisableFormHistory
1265 Turn off saving information on web forms and the search bar.
1266
1267 **Compatibility:** Firefox 60, Firefox ESR 60\
1268 **CCK2 Equivalent:** `disableFormFill`\
1269 **Preferences Affected:** ` browser.formfill.enable`
1270
1271 #### Windows (GPO)
1272 ```
1273 Software\Policies\Mozilla\Firefox\DisableFormHistory = 0x1 | 0x0
1274 ```
1275 #### Windows (Intune)
1276 OMA-URI:
1277 ```
1278 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFormHistory
1279 ```
1280 Value (string):
1281 ```
1282 <enabled/> or <disabled/>
1283 ```
1284 #### macOS
1285 ```
1286 <dict>
1287   <key>DisableFormHistory</key>
1288   <true/> | <false/>
1289 </dict>
1290 ```
1291 #### policies.json
1292 ```
1293 {
1294   "policies": {
1295     "DisableFormHistory": true | false
1296   }
1297 }
1298 ```
1299 ### DisablePasswordReveal
1300 Do not allow passwords to be shown in saved logins
1301
1302 **Compatibility:** Firefox 71, Firefox ESR 68.3\
1303 **CCK2 Equivalent:** N/A
1304 **Preferences Affected:** N/A
1305
1306 #### Windows (GPO)
1307 ```
1308 Software\Policies\Mozilla\Firefox\DisablePasswordReveal = 0x1 | 0x0
1309 ```
1310 #### Windows (Intune)
1311 OMA-URI:
1312 ```
1313 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePasswordReveal
1314 ```
1315 Value (string):
1316 ```
1317 <enabled/> or <disabled/>
1318 ```
1319 #### macOS
1320 ```
1321 <dict>
1322   <key>DisablePasswordReveal</key>
1323   <true/> | <false/>
1324 </dict>
1325 ```
1326 #### policies.json
1327 ```
1328 {
1329   "policies": {
1330     "DisablePasswordReveal": true | false
1331   }
1332 }
1333 ```
1334 ### DisablePocket
1335 Remove Pocket in the Firefox UI. It does not remove it from the new tab page.
1336
1337 **Compatibility:** Firefox 60, Firefox ESR 60\
1338 **CCK2 Equivalent:** `disablePocket`\
1339 **Preferences Affected:** `extensions.pocket.enabled`
1340
1341 #### Windows (GPO)
1342 ```
1343 Software\Policies\Mozilla\Firefox\DisablePocket = 0x1 | 0x0
1344 ```
1345 #### Windows (Intune)
1346 OMA-URI:
1347 ```
1348 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePocket
1349 ```
1350 Value (string):
1351 ```
1352 <enabled/> or <disabled/>
1353 ```
1354 #### macOS
1355 ```
1356 <dict>
1357   <key>DisablePocket</key>
1358   <true/> | <false/>
1359 </dict>
1360 ```
1361 #### policies.json
1362 ```
1363 {
1364   "policies": {
1365     "DisablePocket": true | false
1366   }
1367 }
1368 ```
1369 ### DisablePrivateBrowsing
1370 Remove access to private browsing.
1371
1372 **Compatibility:** Firefox 60, Firefox ESR 60\
1373 **CCK2 Equivalent:** `disablePrivateBrowsing`\
1374 **Preferences Affected:** N/A
1375
1376 #### Windows (GPO)
1377 ```
1378 Software\Policies\Mozilla\Firefox\DisablePrivateBrowsing = 0x1 | 0x0
1379 ```
1380 #### Windows (Intune)
1381 OMA-URI:
1382 ```
1383 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePrivateBrowsing
1384 ```
1385 Value (string):
1386 ```
1387 <enabled/> or <disabled/>
1388 ```
1389 #### macOS
1390 ```
1391 <dict>
1392   <key>DisablePrivateBrowsing</key>
1393   <true/> | <false/>
1394 </dict>
1395 ```
1396 #### policies.json
1397 ```
1398 {
1399   "policies": {
1400     "DisablePrivateBrowsing": true | false
1401   }
1402 }
1403 ```
1404 ### DisableProfileImport
1405 Disables the "Import data from another browser" option in the bookmarks window.
1406
1407 **Compatibility:** Firefox 60, Firefox ESR 60\
1408 **CCK2 Equivalent:** N/A\
1409 **Preferences Affected:** N/A
1410
1411 #### Windows (GPO)
1412 ```
1413 Software\Policies\Mozilla\Firefox\DisableProfileImport = 0x1 | 0x0
1414 ```
1415 #### Windows (Intune)
1416 OMA-URI:
1417 ```
1418 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableProfileImport
1419 ```
1420 Value (string):
1421 ```
1422 <enabled/> or <disabled/>
1423 ```
1424 #### macOS
1425 ```
1426 <dict>
1427   <key>DisableProfileImport</key>
1428   <true/> | <false/>
1429 </dict>
1430 ```
1431 #### policies.json
1432 ```
1433 {
1434   "policies": {
1435     "DisableProfileImport": true | false
1436   }
1437 }
1438 ```
1439 ### DisableProfileRefresh
1440 Disable the Refresh Firefox button on about:support and support.mozilla.org, as well as the prompt that displays offering to refresh Firefox when you haven't used it in a while.
1441
1442 **Compatibility:** Firefox 60, Firefox ESR 60\
1443 **CCK2 Equivalent:** `disableResetFirefox`\
1444 **Preferences Affected:** `browser.disableResetPrompt`
1445
1446 #### Windows (GPO)
1447 ```
1448 Software\Policies\Mozilla\Firefox\DisableProfileRefresh = 0x1 | 0x0
1449 ```
1450 #### Windows (Intune)
1451 OMA-URI:
1452 ```
1453 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableProfileRefresh
1454 ```
1455 Value (string):
1456 ```
1457 <enabled/> or <disabled/>
1458 ```
1459 #### macOS
1460 ```
1461 <dict>
1462   <key>DisableProfileRefresh</key>
1463   <true/> | <false/>
1464 </dict>
1465 ```
1466 #### policies.json
1467 ```
1468 {
1469   "policies": {
1470     "DisableProfileRefresh": true | false
1471   }
1472 }
1473 ```
1474 ### DisableSafeMode
1475 Disable safe mode within the browser.
1476
1477 On Windows, this disables safe mode via the command line as well.
1478
1479 **Compatibility:** Firefox 60, Firefox ESR 60 (Windows, macOS)\
1480 **CCK2 Equivalent:** `disableSafeMode`\
1481 **Preferences Affected:** N/A
1482
1483 #### Windows (GPO)
1484 ```
1485 Software\Policies\Mozilla\Firefox\DisableSafeMode = 0x1 | 0x0
1486 ```
1487 #### Windows (Intune)
1488 OMA-URI:
1489 ```
1490 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSafeMode
1491 ```
1492 Value (string):
1493 ```
1494 <enabled/> or <disabled/>
1495 ```
1496 #### macOS
1497 ```
1498 <dict>
1499   <key>DisableSafeMode</key>
1500   <true/> | <false/>
1501 </dict>
1502 ```
1503 #### policies.json
1504 ```
1505 {
1506   "policies": {
1507     "DisableSafeMode": true | false
1508   }
1509 }
1510 ```
1511 ### DisableSecurityBypass
1512 Prevent the user from bypassing security in certain cases.
1513
1514 `InvalidCertificate` prevents adding an exception when an invalid certificate is shown.
1515
1516 `SafeBrowsing` prevents selecting "ignore the risk" and visiting a harmful site anyway.
1517
1518 **Compatibility:** Firefox 60, Firefox ESR 60\
1519 **CCK2 Equivalent:** N/A\
1520 **Preferences Affected:** `security.certerror.hideAddException`,`browser.safebrowsing.allowOverride`
1521
1522 #### Windows (GPO)
1523 ```
1524 Software\Policies\Mozilla\Firefox\DisableSecurityBypass\InvalidCertificate = 0x1 | 0x0
1525 Software\Policies\Mozilla\Firefox\DisableSecurityBypass\SafeBrowsing = 0x1 | 0x0
1526 ```
1527 #### Windows (Intune)
1528 OMA-URI:
1529 ```
1530 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/P_DisableSecurityBypass_InvalidCertificate
1531 ```
1532 Value (string):
1533 ```
1534 <enabled/> or <disabled/>
1535 ```
1536 OMA-URI:
1537 ```
1538 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/P_DisableSecurityBypass_SafeBrowsing
1539 ```
1540 Value (string):
1541 ```
1542 <enabled/> or <disabled/>
1543 ```
1544
1545 #### macOS
1546 ```
1547 <dict>
1548   <key>DisableSecurityBypass</key>
1549   <dict>
1550     <key>InvalidCertificate</key>
1551     <true/> | <false/>
1552     <key><SafeBrowsing/key>
1553     <true/> | <false/>
1554   </dict>
1555 </dict>
1556 ```
1557 #### policies.json
1558 ```
1559 {
1560   "policies": {
1561     "DisableSecurityBypass": {
1562       "InvalidCertificate": true | false,
1563       "SafeBrowsing": true | false
1564     }
1565   }
1566 }
1567 ```
1568 ### DisableSystemAddonUpdate
1569 Prevent system add-ons from being installed or update.
1570
1571 **Compatibility:** Firefox 60, Firefox ESR 60\
1572 **CCK2 Equivalent:** N/A\
1573 **Preferences Affected:** N/A
1574
1575 #### Windows (GPO)
1576 ```
1577 Software\Policies\Mozilla\Firefox\DisableSystemAddonUpdate = 0x1 | 0x0
1578 ```
1579 #### Windows (Intune)
1580 OMA-URI:
1581 ```
1582 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSystemAddonUpdate
1583 ```
1584 Value (string):
1585 ```
1586 <enabled/> or <disabled/>
1587 ```
1588 #### macOS
1589 ```
1590 <dict>
1591   <key>DisableSystemAddonUpdate</key>
1592   <true/> | <false/>
1593 </dict>
1594 ```
1595 #### policies.json
1596 ```
1597 {
1598   "policies": {
1599     "DisableSystemAddonUpdate": true | false
1600   }
1601 }
1602 ```
1603 ### DisableTelemetry
1604 Prevent the upload of telemetry data.
1605
1606 Mozilla recommends that you do not disable telemetry. Information collected through telemetry helps us build a better product for businesses like yours.
1607
1608 **Compatibility:** Firefox 60, Firefox ESR 60\
1609 **CCK2 Equivalent:** `disableTelemetry`\
1610 **Preferences Affected:** `datareporting.healthreport.uploadEnabled,datareporting.policy.dataSubmissionEnabled`
1611
1612 #### Windows (GPO)
1613 ```
1614 Software\Policies\Mozilla\Firefox\DisableTelemetry = 0x1 | 0x0
1615 ```
1616 #### Windows (Intune)
1617 OMA-URI:
1618 ```
1619 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableTelemetry
1620 ```
1621 Value (string):
1622 ```
1623 <enabled/> or <disabled/>
1624 ```
1625 #### macOS
1626 ```
1627 <dict>
1628   <key>DisableTelemetry</key>
1629   <true/> | <false/>
1630 </dict>
1631 ```
1632 #### policies.json
1633 ```
1634 {
1635   "policies": {
1636     "DisableTelemetry": true | false
1637   }
1638 }
1639 ```
1640 ### DisplayBookmarksToolbar
1641 Set the initial state of the bookmarks toolbar. A user can still hide it and it will stay hidden.
1642
1643 **Compatibility:** Firefox 60, Firefox ESR 60\
1644 **CCK2 Equivalent:** `displayBookmarksToolbar`\
1645 **Preferences Affected:** N/A
1646
1647 #### Windows (GPO)
1648 ```
1649 Software\Policies\Mozilla\Firefox\DisplayBookmarksToolbar = 0x1 | 0x0
1650 ```
1651 #### Windows (Intune)
1652 OMA-URI:
1653 ```
1654 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisplayBookmarksToolbar
1655 ```
1656 Value (string):
1657 ```
1658 <enabled/> or <disabled/>
1659 ```
1660 #### macOS
1661 ```
1662 <dict>
1663   <key>DisplayBookmarksToolbar</key>
1664   <true/> | <false/>
1665 </dict>
1666 ```
1667 #### policies.json
1668 ```
1669 {
1670   "policies": {
1671     "DisplayBookmarksToolbar": true | false
1672   }
1673 }
1674 ```
1675 ### DisplayMenuBar (Deprecated)
1676 Set the initial state of the menubar. A user can still hide it and it will stay hidden.
1677
1678 **Compatibility:** Firefox 60, Firefox ESR 60 (Windows, some Linux)\
1679 **CCK2 Equivalent:** `displayMenuBar`\
1680 **Preferences Affected:** N/A
1681
1682 #### Windows (GPO)
1683 ```
1684 Software\Policies\Mozilla\Firefox\DisplayMenuBar = 0x1 | 0x0
1685 ```
1686 #### macOS
1687 ```
1688 <dict>
1689   <key>DisplayMenuBar</key>
1690   <true/> | <false/>
1691 </dict>
1692 ```
1693 #### policies.json
1694 ```
1695 {
1696   "policies": {
1697     "DisplayMenuBar": true | false
1698   }
1699 }
1700 ```
1701 ### DisplayMenuBar
1702 Set the state of the menubar.
1703
1704 `always` means the menubar is shown and cannot be hidden.
1705
1706 `never` means the menubar is hidden and cannot be shown.
1707
1708 `default-on` means the menubar is on by default but can be hidden.
1709
1710 `default-off` means the menubar is off by default but can be shown.
1711
1712 **Compatibility:** Firefox 73, Firefox ESR 68.5 (Windows, some Linux)\
1713 **CCK2 Equivalent:** `displayMenuBar`\
1714 **Preferences Affected:** N/A
1715
1716 #### Windows (GPO)
1717 ```
1718 Software\Policies\Mozilla\Firefox\DisplayMenuBar = "always", "never", "default-on", "default-off"
1719 ```
1720 #### Windows (Intune)
1721 OMA-URI:
1722 ```
1723 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisplayMenuBar_Enum
1724 ```
1725 Value (string):
1726 ```
1727 <enabled/>
1728 <data id="DisplayMenuBar" value="always | never | default-on | default-off"/>
1729 ```
1730 #### macOS
1731 ```
1732 <dict>
1733   <key>DisplayMenuBar</key>
1734   <string>always | never | default-on | default-off</string>
1735 </dict>
1736 ```
1737 #### policies.json
1738 ```
1739 {
1740   "policies": {
1741     "DisplayMenuBar": "always", "never", "default-on", "default-off"
1742   }
1743 }
1744 ```
1745 ### DNSOverHTTPS
1746 Configure DNS over HTTPS.
1747
1748 `Enabled` determines whether DNS over HTTPS is enabled
1749
1750 `ProviderURL` is a URL to another provider.
1751
1752 `Locked` prevents the user from changing DNS over HTTPS preferences.
1753
1754 `ExcludedDomains` excludes domains from DNS over HTTPS.
1755
1756 **Compatibility:** Firefox 63, Firefox ESR 68 (ExcludedDomains added in 75/68.7)\
1757 **CCK2 Equivalent:** N/A\
1758 **Preferences Affected:** `network.trr.mode`,`network.trr.uri`
1759
1760 #### Windows (GPO)
1761 ```
1762 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\Enabled = 0x1 | 0x0
1763 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\ProviderURL = "URL_TO_ALTERNATE_PROVIDER"
1764 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\Locked = 0x1 | 0x0
1765 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\ExcludedDomains\1 = "example.com"
1766 ```
1767 #### Windows (Intune)
1768 OMA-URI:
1769 ```
1770 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_Enabled
1771 ```
1772 Value (string):
1773 ```
1774 <enabled/> or <disabled/>
1775 ```
1776 OMA-URI:
1777 ```
1778 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_ProviderURL
1779 ```
1780 Value (string):
1781 ```
1782 <enabled/>
1783 <data id="String" value="URL_TO_ALTERNATE_PROVIDER"/>
1784 ```
1785 OMA-URI:
1786 ```
1787 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_Locked
1788 ```
1789 Value (string):
1790 ```
1791 <enabled/> or <disabled/>
1792 ```
1793 OMA-URI:
1794 ```
1795 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_ExcludedDomains
1796 ```
1797 Value (string):
1798 ```
1799 <enabled/>
1800 <data id="List" value="1&#xF000;example.com"/>
1801 ```
1802 #### macOS
1803 ```
1804 <dict>
1805   <key>DNSOverHTTPS</key>
1806   <dict>
1807     <key>Enabled</key>
1808     <true/> | <false/>
1809     <key>ProviderURL</key>
1810     <string>URL_TO_ALTERNATE_PROVIDER</string>
1811     <key>Locked</key>
1812     <true/> | <false/>
1813     <key>ExcludedDomains</key>
1814     <array>
1815       <string>example.com</string>
1816     </array>
1817   </dict>
1818 </dict>
1819 ```
1820 #### policies.json
1821 ```
1822 {
1823   "policies": {
1824     "DNSOverHTTPS": {
1825       "Enabled":  true | false,
1826       "ProviderURL": "URL_TO_ALTERNATE_PROVIDER",
1827       "Locked": true | false,
1828       "ExcludedDomains": ["example.com"]
1829     }
1830   }
1831 }
1832 ```
1833 ### DontCheckDefaultBrowser
1834 Don't check if Firefox is the default browser at startup.
1835
1836 **Compatibility:** Firefox 60, Firefox ESR 60\
1837 **CCK2 Equivalent:** `dontCheckDefaultBrowser`\
1838 **Preferences Affected:** `browser.shell.checkDefaultBrowser`
1839
1840 #### Windows (GPO)
1841 ```
1842 Software\Policies\Mozilla\Firefox\DontCheckDefaultBrowser = 0x1 | 0x0
1843 ```
1844 #### Windows (Intune)
1845 OMA-URI:
1846 ```
1847 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DontCheckDefaultBrowser
1848 ```
1849 Value (string):
1850 ```
1851 <enabled/> or <disabled/>
1852 ```
1853 #### macOS
1854 ```
1855 <dict>
1856   <key>DontCheckDefaultBrowser</key>
1857   <true/> | <false/>
1858 </dict>
1859 ```
1860 #### policies.json
1861 ```
1862 {
1863   "policies": {
1864     "DontCheckDefaultBrowser": true | false
1865   }
1866 }
1867 ```
1868 ### DefaultDownloadDirectory
1869 Set the default download directory.
1870
1871 You can use ${home} for the native home directory.
1872
1873 **Compatibility:** Firefox 68, Firefox ESR 68\
1874 **CCK2 Equivalent:** N/A\
1875 **Preferences Affected:** `browser.download.dir`,`browser.download.folderList`
1876
1877 #### Windows (GPO)
1878 ```
1879 Software\Policies\Mozilla\Firefox\DefaultDownloadDirectory = "${home}\Downloads"
1880 ```
1881 #### Windows (Intune)
1882 OMA-URI:
1883 ```
1884 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DefaultDownloadDirectory
1885 ```
1886 Value (string):
1887 ```
1888 <enabled/>
1889 <data id="Preferences_String" value="${home}\Downloads"/>
1890 ```
1891 #### macOS
1892 ```
1893 <dict>
1894   <key>DefaultDownloadDirectory</key>
1895   <string>${home}/Downloads</string>
1896 </dict>
1897 ```
1898 #### policies.json (macOS and Linux)
1899 ```
1900 {
1901   "policies": {
1902     "DefaultDownloadDirectory": "${home}/Downloads"
1903 }
1904 ```
1905 #### policies.json (Windows)
1906 ```
1907 {
1908   "policies": {
1909     "DefaultDownloadDirectory": "${home}\\Downloads"
1910 }
1911 ```
1912 ### DownloadDirectory
1913 Set and lock the download directory.
1914
1915 You can use ${home} for the native home directory.
1916
1917 **Compatibility:** Firefox 68, Firefox ESR 68\
1918 **CCK2 Equivalent:** N/A\
1919 **Preferences Affected:** `browser.download.dir`,`browser.download.folderList`,`browser.download.useDownloadDir`
1920
1921 #### Windows (GPO)
1922 ```
1923 Software\Policies\Mozilla\Firefox\DownloadDirectory = "${home}\Downloads"
1924 ```
1925 #### Windows (Intune)
1926 OMA-URI:
1927 ```
1928 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DownloadDirectory
1929 ```
1930 Value (string):
1931 ```
1932 <enabled/>
1933 <data id="Preferences_String" value="${home}\Downloads"/>
1934 ```
1935 #### macOS
1936 ```
1937 <dict>
1938   <key>DownloadDirectory</key>
1939   <string>${home}/Downloads</string>
1940 </dict>
1941 ```
1942 #### policies.json (macOS and Linux)
1943 ```
1944 {
1945   "policies": {
1946     "DownloadDirectory": "${home}/Downloads"
1947 }
1948 ```
1949 #### policies.json (Windows)
1950 ```
1951 {
1952   "policies": {
1953     "DownloadDirectory": "${home}\\Downloads"
1954 }
1955 ```
1956 ### EnableTrackingProtection
1957 Configure tracking protection.
1958
1959 If this policy is not configured, tracking protection is not enabled by default in the browser, but it is enabled by default in private browsing and the user can change it.
1960
1961 If `Value` is set to false, tracking protection is disabled and locked in both the regular browser and private browsing.
1962
1963 If `Value` is set to true, tracking protection is enabled by default in both the regular browser and private browsing and the `Locked` value determines whether or not a user can change it.
1964
1965 If `Cryptomining` is set to true, cryptomining scripts on websites are blocked.
1966
1967 If `Fingerprinting` is set to true, fingerprinting scripts on websites are blocked.
1968
1969 `Exceptions` are origins for which tracking protection is not enabled.
1970
1971 **Compatibility:** Firefox 60, Firefox ESR 60 (Cryptomining and Fingerprinting added in 70/68.2, Exceptions added in 73/68.5)\
1972 **CCK2 Equivalent:** N/A\
1973 **Preferences Affected:** `privacy.trackingprotection.enabled`,`privacy.trackingprotection.pbmode.enabled`,`privacy.trackingprotection.cryptomining.enabled`,`privacy.trackingprotection.fingerprinting.enabled`
1974
1975 #### Windows (GPO)
1976 ```
1977 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Value = 0x1 | 0x0
1978 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Locked = 0x1 | 0x0
1979 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Cryptomining = 0x1 | 0x0
1980 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Fingerprinting = 0x1 | 0x0
1981 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Exceptions\1 = "https://example.com"
1982 ```
1983 #### Windows (Intune)
1984 OMA-URI:
1985 ```
1986 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/TrackingProtection
1987 ```
1988 Value (string):
1989 ```
1990 <enabled/>
1991 <data id="TrackingProtectionLocked" value="true | false"/>
1992 <data id="Cryptomining" value="true | false"/>
1993 <data id="Fingerprinting" value="true | false"/>
1994 <data id=TrackingProtection_Exceptions" value="1&#xF000;https://example.com"/>
1995 ```
1996 #### macOS
1997 ```
1998 <dict>
1999   <key>EnableTrackingProtection</key>
2000   <dict>
2001     <key>Value</key>
2002     <true/> | <false/>
2003     <key><Locked</key>
2004     <true/> | <false/>
2005     <key><Cryptomining</key>
2006     <true/> | <false/>
2007     <key><Fingerprinting</key>
2008     <true/> | <false/>
2009     <key>Exceptions</key>
2010     <array>
2011       <string>https://example.com</string>
2012     </array>
2013   </dict>
2014 </dict>
2015 ```
2016 #### policies.json
2017 ```
2018 {
2019   "policies": {
2020     "EnableTrackingProtection": {
2021       "Value": true | false,
2022       "Locked": true | false,
2023       "Cryptomining": true | false,
2024       "Fingerprinting": true | false,
2025       "Exceptions": ["https://example.com"]
2026     }
2027 }
2028 ```
2029 ### EncryptedMediaExtensions
2030 Enable or disable Encrypted Media Extensions and optionally lock it.
2031
2032 If `Enabled` is set to false, encrypted media extensions (like Widevine) are not downloaded by Firefox unless the user consents to installing them.
2033
2034 If `Locked` is set to true and `Enabled` is set to false, Firefox will not download encrypted media extensions (like Widevine) or ask the user to install them.
2035
2036 **Compatibility:** Firefox 77, Firefox ESR 68.9\
2037 **CCK2 Equivalent:** N/A\
2038 **Preferences Affected:** `media.eme.enabled`
2039
2040 #### Windows (GPO)
2041 ```
2042 Software\Policies\Mozilla\Firefox\EncryptedMediaExtensions\Enabled = 0x1 | 0x0
2043 Software\Policies\Mozilla\Firefox\EncryptedMediaExtensions\Locked = 0x1 | 0x0
2044 ```
2045 #### Windows (Intune)
2046 OMA-URI:
2047 ```
2048 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~EncryptedMediaExtensions/EncryptedMediaExtensions_Enabled
2049 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~EncryptedMediaExtensions/EncryptedMediaExtensions_Locked
2050 ```
2051 Value (string):
2052 ```
2053 <enabled/>or <disabled/>
2054 ```
2055 #### macOS
2056 ```
2057 <dict>
2058   <key>EncryptedMediaExtensions</key>
2059   <dict>
2060     <key>Enabled</key>
2061     <true/> | <false/>
2062     <key><Locked</key>
2063     <true/> | <false/>
2064   </dict>
2065 </dict>
2066 ```
2067 #### policies.json
2068 ```
2069 {
2070   "policies": {
2071     "EncryptedMediaExtensions": {
2072       "Enabled": true | false,
2073       "Locked": true | false
2074     }
2075 }
2076 ```
2077 ### EnterprisePoliciesEnabled
2078 Enable policy support on macOS.
2079
2080 **Compatibility:** Firefox 63, Firefox ESR 60.3 (macOS only)\
2081 **CCK2 Equivalent:** N/A\
2082 **Preferences Affected:** N/A
2083
2084 #### macOS
2085 ```
2086 <dict>
2087   <key>EnterprisePoliciesEnabled</key>
2088   <true/>
2089 </dict>
2090 ```
2091 ### Extensions
2092 Control the installation, uninstallation and locking of extensions.
2093
2094 `Install` is a list of URLs or native paths for extensions to be installed.
2095
2096 `Uninstall` is a list of extension IDs that should be uninstalled if found.
2097
2098 `Locked` is a list of extension IDs that the user cannot disable or uninstall.
2099
2100 **Compatibility:** Firefox 60, Firefox ESR 60\
2101 **CCK2 Equivalent:** `addons`\
2102 **Preferences Affected:** N/A
2103
2104 #### Windows (GPO)
2105 ```
2106 Software\Policies\Mozilla\Firefox\Extensions\Install\1 = "https://addons.mozilla.org/firefox/downloads/somefile.xpi"
2107 Software\Policies\Mozilla\Firefox\Extensions\Install\2 = "//path/to/xpi"
2108 Software\Policies\Mozilla\Firefox\Extensions\Uninstall\1 = "bad_addon_id@mozilla.org"
2109 Software\Policies\Mozilla\Firefox\Extensions\Locked\1 = "addon_id@mozilla.org"
2110 ```
2111 #### macOS
2112 ```
2113 <dict>
2114   <key>Extensions</key>
2115   <dict>
2116     <key>Install</key>
2117     <array>
2118       <string>https://addons.mozilla.org/firefox/downloads/somefile.xpi</string>
2119       <string>//path/to/xpi</string>
2120     </array>
2121     <key>Uninstall</key>
2122     <array>
2123       <string>bad_addon_id@mozilla.org</string>
2124     </array>
2125     <key>Locked</key>
2126     <array>
2127       <string>addon_id@mozilla.org</string>
2128     </array>
2129   </dict>
2130 </dict>
2131 ```
2132 #### policies.json
2133 ```
2134 {
2135   "policies": {
2136     "Extensions": {
2137       "Install": ["https://addons.mozilla.org/firefox/downloads/somefile.xpi", "//path/to/xpi"],
2138       "Uninstall": ["bad_addon_id@mozilla.org"],
2139       "Locked":  ["addon_id@mozilla.org"]
2140     }
2141   }
2142 }
2143 ```
2144 ### ExtensionSettings
2145 Manage all aspects of extensions. This policy is based heavily on the [Chrome policy](https://dev.chromium.org/administrators/policy-list-3/extension-settings-full) of the same name.
2146
2147 This policy maps an extension ID to its configuration. With an extension ID, the configuration will be applied to the specified extension only. A default configuration can be set for the special ID "*", which will apply to all extensions that don't have a custom configuration set in this policy.
2148
2149 To obtain an extension ID, install the extension and go to about:support. You will see the ID in the Extensions section.
2150
2151 The configuration for each extension is another dictionary that can contain the fields documented below.
2152
2153 | Name | Description |
2154 | --- | --- |
2155 | `installation_mode` | Maps to a string indicating the installation mode for the extension. The valid strings are `allowed`,`blocked`,`force_installed`, and `normal_installed`.
2156 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`allowed` | Allows the extension to be installed by the user. This is the default behavior.
2157 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`blocked`| Blocks installation of the extension and removes it from the device if already installed.
2158 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`force_installed`| The extension is automatically installed and can't be removed by the user. This option is not valid for the default configuration and requires an install_url.
2159 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`normal_installed`| The extension is automatically installed but can be disabled by the user. This option is not valid for the default configuration and requires an install_url.
2160 | `install_url`| Maps to a URL indicating where Firefox can download a force_installed or normal_installed extension. If installing from the addons.mozilla.org, use the following URL (substituting SHORT_NAME from the URL on AMO), https://addons.mozilla.org/firefox/downloads/latest/SHORT_NAME/latest.xpi. If installing from the local file system, use a file:/// URL. Languages packs are available from https://releases.mozilla.org/pub/firefox/releases/VERSION/PLATFORM/xpi/LANGUAGE.xpi.
2161 | `install_sources` | Each item in this list is an extension-style match pattern. Users will be able to easily install items from any URL that matches an item in this list. Both the location of the *.xpi file and the page where the download is started from (i.e.  the referrer) must be allowed by these patterns. This setting can be used only for the default configuration.
2162 | `allowed_types` | This setting whitelists the allowed types of extension/apps that can be installed in Firefox. The value is a list of strings, each of which should be one of the following: "extension", "theme", "dictionary", "langpack" This setting can be used only for the default configuration.
2163 | `blocked_install_message` | This maps to a string specifying the error message to display to users if they're blocked from installing an extension. This setting allows you to append text to the generic error message displayed when the extension is blocked. This could be be used to direct users to your help desk, explain why a particular extension is blocked, or something else.
2164
2165 **Compatibility:** Firefox 69, Firefox ESR 68.1\
2166 **CCK2 Equivalent:** N/A\
2167 **Preferences Affected:** N/A
2168
2169 #### Windows (GPO)
2170 ```
2171 Software\Policies\Mozilla\Firefox\ExtensionSettings (REG_MULTI_SZ) =
2172 {
2173   "*": {
2174     "blocked_install_message": "Custom error message.",
2175     "install_sources": ["https://addons.mozilla.org/"],
2176     "installation_mode": "blocked",
2177     "allowed_types": ["extension"]
2178   },
2179   "uBlock0@raymondhill.net": {
2180     "installation_mode": "force_installed",
2181     "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
2182   }
2183 }
2184 ```
2185 #### Windows (Intune)
2186 OMA-URI:
2187 ```
2188 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/ExtensionSettings
2189 ```
2190 Value (string):
2191 ```
2192 <enabled/>
2193 <data id="ExtensionSettings" value='
2194   "*": {
2195       "blocked_install_message": "Custom error message.",
2196       "install_sources": ["https://addons.mozilla.org/"],
2197       "installation_mode": "blocked",
2198       "allowed_types": ["extension"]
2199     },
2200     "uBlock0@raymondhill.net": {
2201       "installation_mode": "force_installed",
2202       "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
2203     }'/>
2204 ```
2205 #### macOS
2206 ```
2207 <dict>
2208   <key>ExtensionSettings</key>
2209   <dict>
2210     <key>*</key>
2211     <dict>
2212       <key>blocked_install_message</key>
2213       <string>Custom error message.</string>
2214       <key>install_sources</key>
2215       <array>
2216         <string>https://addons.mozilla.org/</string>
2217       </array>
2218       <key>installation_mode</key>
2219       <string>blocked</string>
2220       <key>allowed_types</key>
2221       <array>
2222         <string>extension</string>
2223       </array>
2224     </dict>
2225     <key>uBlock0@raymondhill.net</key>
2226     <dict>
2227       <key>installation_mode</key>
2228        <string>force_installed</string>
2229       <key>install_url</key>
2230       <string>https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi</string>
2231     </dict>
2232   </dict>
2233 </dict>
2234 ```
2235 #### policies.json
2236 ```
2237 {
2238   "policies": {
2239     "ExtensionSettings": {
2240       "*": {
2241         "blocked_install_message": "Custom error message.",
2242         "install_sources": ["https://addons.mozilla.org/"],
2243         "installation_mode": "blocked",
2244         "allowed_types": ["extension"]
2245       },
2246       "uBlock0@raymondhill.net": {
2247         "installation_mode": "force_installed",
2248         "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
2249       }
2250     }
2251   }
2252 }
2253 ```
2254 ### ExtensionUpdate
2255 Control extension updates.
2256
2257 **Compatibility:** Firefox 67, Firefox ESR 60.7\
2258 **CCK2 Equivalent:** N/A\
2259 **Preferences Affected:** `extensions.update.enabled`
2260
2261 #### Windows (GPO)
2262 ```
2263 Software\Policies\Mozilla\Firefox\ExtensionUpdate = 0x1 | 0x0
2264 ```
2265 #### Windows (Intune)
2266 OMA-URI:
2267 ```
2268 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/ExtensionUpdate
2269 ```
2270 Value (string):
2271 ```
2272 <enabled/> or <disabled/>
2273 ```
2274 #### macOS
2275 ```
2276 <dict>
2277   <key>ExtensionUpdate</key>
2278   <true/> | <false/>
2279 </dict>
2280 ```
2281 #### policies.json
2282 ```
2283 {
2284   "policies": {
2285     "ExtensionUpdate": true | false
2286   }
2287 }
2288 ```
2289 ### FlashPlugin
2290 Configure the default Flash plugin policy as well as origins for which Flash is allowed.
2291
2292 `Allow` is a list of origins where Flash are allowed.
2293
2294 `Block` is a list of origins where Flash is not allowed.
2295
2296 `Default` determines whether or not Flash is allowed by default.
2297
2298 `Locked` prevents the user from changing Flash preferences.
2299
2300 **Compatibility:** Firefox 60, Firefox ESR 60\
2301 **CCK2 Equivalent:** `permissions.plugin`\
2302 **Preferences Affected:** `plugin.state.flash`
2303
2304 #### Windows (GPO)
2305 ```
2306 Software\Policies\Mozilla\Firefox\FlashPlugin\Allow\1 = "https://example.org"
2307 Software\Policies\Mozilla\Firefox\FlashPlugin\Block\1 = "https://example.edu"
2308 Software\Policies\Mozilla\Firefox\FlashPlugin\Default = 0x1 | 0x0
2309 Software\Policies\Mozilla\Firefox\FlashPlugin\Locked = 0x1 | 0x0
2310 ```
2311 #### Windows (Intune)
2312 OMA-URI:
2313 ```
2314 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Flash/FlashPlugin_Allow
2315 ```
2316 Value (string):
2317 ```
2318 <enabled/>
2319 <data id="Permissions" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
2320 ```
2321 OMA-URI:
2322 ```
2323 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Flash/FlashPlugin_Locked
2324 ```
2325 Value (string):
2326 ```
2327 <enabled/> or <disabled/>
2328 ```
2329 OMA-URI:
2330 ```
2331 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Flash/FlashPlugin_Default
2332 ```
2333 Value (string):
2334 ```
2335 <enabled/> or <disabled/>
2336 ```
2337 #### macOS
2338 ```
2339 <dict>
2340   <key>FlashPlugin</key>
2341   <dict>
2342     <key>Allow</key>
2343     <array>
2344       <string>http://example.org</string>
2345     </array>
2346     <key>Block</key>
2347     <array>
2348       <string>http://example.edu</string>
2349     </array>
2350     <key>Default</key>
2351     <true/> | <false/>
2352     <key>Locked</key>
2353     <true/> | <false/>
2354   </dict>
2355 </dict>
2356 ```
2357 #### policies.json
2358 ```
2359 {
2360   "policies": {
2361     "FlashPlugin": {
2362       "Allow": ["http://example.org/"],
2363       "Block": ["http://example.edu/"],
2364       "Default": true | false,
2365       "Locked": true | false
2366     }
2367   }
2368 }
2369 ```
2370 ### FirefoxHome
2371 Customize the Firefox Home page.
2372
2373 **Compatibility:** Firefox 68, Firefox ESR 68\
2374 **CCK2 Equivalent:** N/A\
2375 **Preferences Affected:** `browser.newtabpage.activity-stream.showSearch`,`browser.newtabpage.activity-stream.feeds.topsites`,`browser.newtabpage.activity-stream.feeds.section.highlights`,`browser.newtabpage.activity-stream.feeds.section.topstories`,`browser.newtabpage.activity-stream.feeds.snippets`
2376
2377 #### Windows (GPO)
2378 ```
2379 Software\Policies\Mozilla\Firefox\FirefoxHome\Search = 0x1 | 0x0
2380 Software\Policies\Mozilla\Firefox\FirefoxHome\TopSites = 0x1 | 0x0
2381 Software\Policies\Mozilla\Firefox\FirefoxHome\Highlights = 0x1 | 0x0
2382 Software\Policies\Mozilla\Firefox\FirefoxHome\Pocket = 0x1 | 0x0
2383 Software\Policies\Mozilla\Firefox\FirefoxHome\Snippets = 0x1 | 0x0
2384 Software\Policies\Mozilla\Firefox\FirefoxHome\Locked = 0x1 | 0x0
2385 ```
2386 #### Windows (Intune)
2387 OMA-URI:
2388 ```
2389 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/CustomizeFirefoxHome
2390 ```
2391 Value (string):
2392 ```
2393 <enabled/>
2394 <data id="FirefoxHome_Search"  value="true | false"/>
2395 <data id="FirefoxHome_TopSites"  value="true | false"/>
2396 <data id="FirefoxHome_Highlights"  value="true | false"/>
2397 <data id="FirefoxHome_Pocket"  value="true | false"/>
2398 <data id="FirefoxHome_Snippets"  value="true | false"/>
2399 <data id="FirefoxHome_Locked"  value="true | false"/>
2400 ```
2401 #### macOS
2402 ```
2403 <dict>
2404   <key>FirefoxHome</key>
2405   <dict>
2406     <key>Search</key>
2407     <true/> | <false/>
2408     <key>TopSites</key>
2409     <true/> | <false/>
2410     <key>Highlights</key>
2411     <true/> | <false/>
2412     <key>Pocket</key>
2413     <true/> | <false/>
2414     <key>Snippets</key>
2415     <true/> | <false/>
2416     <key>Locked</key>
2417     <true/> | <false/>
2418   </dict>
2419 </dict>
2420 ```
2421 #### policies.json
2422 ```
2423 {
2424   "policies": {
2425     "FirefoxHome": {
2426       "Search": true | false,
2427       "TopSites": true | false,
2428       "Highlights": true | false,
2429       "Pocket": true | false,
2430       "Snippets": true | false,
2431       "Locked": true | false
2432     }
2433   }
2434 }
2435 ```
2436 ### HardwareAcceleration
2437 Control hardware acceleration.
2438
2439 **Compatibility:** Firefox 60, Firefox ESR 60\
2440 **CCK2 Equivalent:** N/A\
2441 **Preferences Affected:** `layers.acceleration.disabled`
2442
2443 #### Windows (GPO)
2444 ```
2445 Software\Policies\Mozilla\Firefox\HardwareAcceleration = 0x1 | 0x0
2446 ```
2447 #### Windows (Intune)
2448 OMA-URI:
2449 ```
2450 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/HardwareAcceleration
2451 ```
2452 Value (string):
2453 ```
2454 <enabled/> or <disabled/>
2455 ```
2456 #### macOS
2457 ```
2458 <dict>
2459   <key>HardwareAcceleration</key>
2460   <true/> | <false/>
2461 </dict>
2462 ```
2463 #### policies.json
2464 ```
2465 {
2466   "policies": {
2467     "HardwareAcceleration": true | false
2468   }
2469 }
2470 ```
2471 ### Homepage
2472 Configure the default homepage and how Firefox starts.
2473
2474 `URL` is the default homepage.
2475
2476 `Locked` prevents the user from changing homepage preferences.
2477
2478 `Additional` allows for more than one homepage.
2479
2480 `StartPage` is how Firefox starts. The choices are no homepage, the default homepage or the previous session.
2481
2482 **Compatibility:** Firefox 60, Firefox ESR 60 (StartPage was added in Firefox 60, Firefox ESR 60.4)\
2483 **CCK2 Equivalent:** `homePage`,`lockHomePage`\
2484 **Preferences Affected:** `browser.startup.homepage`,`browser.startup.page`
2485
2486 #### Windows (GPO)
2487 ```
2488 Software\Policies\Mozilla\Firefox\Homepage\URL = "https://example.com"
2489 Software\Policies\Mozilla\Firefox\Homepage\Locked = 0x1 | 0x0
2490 Software\Policies\Mozilla\Firefox\Homepage\Additional\1 = "https://example.org"
2491 Software\Policies\Mozilla\Firefox\Homepage\Additional\2 = "https://example.edu"
2492 Software\Policies\Mozilla\Firefox\Homepage\StartPage = "none" | "homepage" |  "previous-session"
2493 ```
2494 #### Windows (Intune)
2495 OMA-URI:
2496 ```
2497 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageURL
2498 ```
2499 Value (string):
2500 ```
2501 <enabled/>
2502
2503 <data id="HomepageURL" value="https://example.com"/>
2504 <data id="HomepageLocked" value="true | false"/>
2505 ```
2506 OMA-URI:
2507 ```
2508 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageAdditional
2509 ```
2510 Value (string):
2511 ```
2512 <enabled/>
2513
2514 <data id="HomepageAdditional" value="1&#xF000;http://example.org&#xF000;2&#xF000;http://example.edu"/>
2515 ```
2516 OMA-URI:
2517 ```
2518 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageStartPage
2519 ```
2520 Value (string):
2521 ```
2522 <enabled/>
2523
2524 <data id="StartPage" value="none | homepage | previous-session"/>
2525 ```
2526 #### macOS
2527 ```
2528 <dict>
2529   <key>Homepage</key>
2530   <dict>
2531     <key>URL</key>
2532     <string>http://example.com</string>
2533     <key>Locked</key>
2534     <true/> | <false/>
2535     <key>Additional</key>
2536     <array>
2537       <string>http://example.org</string>
2538       <string>http://example.edu</string>
2539     </array>
2540     <key>StartPage</key>
2541     <string>none | homepage | previous-session</string>
2542   </dict>
2543 </dict>
2544 ```
2545 #### policies.json
2546 ```
2547 {
2548   "policies": {
2549     "Homepage": {
2550       "URL": "http://example.com/",
2551       "Locked": true | false,
2552       "Additional": ["http://example.org/",
2553                      "http://example.edu/"],
2554       "StartPage": "none" | "homepage" | "previous-session"
2555     }
2556   }
2557 }
2558 ```
2559 ### InstallAddonsPermission
2560 Configure the default extension install policy as well as origins for extension installs are allowed. This policy does not override turning off all extension installs.
2561
2562 `Allow` is a list of origins where extension installs are allowed.
2563
2564 `Default` determines whether or not extension installs are allowed by default.
2565
2566 **Compatibility:** Firefox 60, Firefox ESR 60\
2567 **CCK2 Equivalent:** `permissions.install`\
2568 **Preferences Affected:** `xpinstall.enabled`
2569
2570 #### Windows (GPO)
2571 ```
2572 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Allow\1 = "https://example.org"
2573 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Allow\2 = "https://example.edu"
2574 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Default = 0x1 | 0x0
2575 ```
2576 #### Windows (Intune)
2577 OMA-URI:
2578 ```
2579 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Addons/InstallAddonsPermission_Allow
2580 ```
2581 Value (string):
2582 ```
2583 <enabled/>
2584 <data id="Permissions" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
2585 ```
2586 OMA-URI:
2587 ```
2588 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Addons/InstallAddonsPermission_Default
2589 ```
2590 Value (string):
2591 ```
2592 <enabled/>
2593 ```
2594 #### macOS
2595 ```
2596 <dict>
2597   <key>InstallAddonsPermission</key>
2598   <dict>
2599     <key>Allow</key>
2600     <array>
2601       <string>http://example.org</string>
2602       <string>http://example.edu</string>
2603     </array>
2604     <key>Default</key>
2605     <true/> | <false/>
2606   </dict>
2607 </dict>
2608 ```
2609 #### policies.json
2610 ```
2611 {
2612   "policies": {
2613     "InstallAddonsPermission": {
2614       "Allow": ["http://example.org/",
2615                 "http://example.edu/"],
2616       "Default": true | false
2617     }
2618   }
2619 }
2620 ```
2621 ### LegacyProfiles
2622 Disable the feature enforcing a separate profile for each installation.
2623
2624 If this policy set to true, Firefox will not try to create different profiles for installations of Firefox in different directories. This is the equivalent of the MOZ_LEGACY_PROFILES environment variable.
2625
2626 If this policy set to false, Firefox will create a new profile for each unique installation of Firefox.
2627
2628 This policy only work on Windows via GPO (not policies.json).
2629
2630 **Compatibility:** Firefox 70, Firefox ESR 68.2 (Windows only, GPO only)\
2631 **CCK2 Equivalent:** N/A\
2632 **Preferences Affected:** N/A
2633
2634 #### Windows (GPO)
2635 ```
2636 Software\Policies\Mozilla\Firefox\LegacyProfiles = = 0x1 | 0x0
2637 ```
2638 #### Windows (Intune)
2639 OMA-URI:
2640 ```
2641 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/LegacyProfiles
2642 ```
2643 Value (string):
2644 ```
2645 <enabled/> or <disabled/>
2646 ```
2647 ### LocalFileLinks
2648 Enable linking to local files by origin.
2649
2650 **Compatibility:** Firefox 68, Firefox ESR 68\
2651 **CCK2 Equivalent:** N/A\
2652 **Preferences Affected:** `capability.policy.localfilelinks.*`
2653
2654 #### Windows (GPO)
2655 ```
2656 Software\Policies\Mozilla\Firefox\LocalFileLinks\1 = "https://example.org"
2657 Software\Policies\Mozilla\Firefox\LocalFileLinks\2 = "https://example.edu"
2658 ```
2659 #### Windows (Intune)
2660 OMA-URI:
2661 ```
2662 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/LocalFileLinks
2663 ```
2664 Value (string):
2665 ```
2666 <enabled/>
2667 <data id="LocalFileLinks" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
2668 ```
2669 #### macOS
2670 ```
2671 <dict>
2672   <key>LocalFileLinks</key>
2673   <array>
2674     <string>http://example.org</string>
2675     <string>http://example.edu</string>
2676   </array>
2677 </dict>
2678 ```
2679 #### policies.json
2680 ```
2681 {
2682   "policies": {
2683     "LocalFileLinks": ["http://example.org/",
2684                        "http://example.edu/"]
2685   }
2686 }
2687 ```
2688 ### NetworkPrediction
2689 Enable or disable network prediction (DNS prefetching).
2690
2691 **Compatibility:** Firefox 67, Firefox ESR 60.7\
2692 **CCK2 Equivalent:** N/A\
2693 **Preferences Affected:** `network.dns.disablePrefetch`,`network.dns.disablePrefetchFromHTTPS`
2694
2695 #### Windows (GPO)
2696 ```
2697 Software\Policies\Mozilla\Firefox\NetworkPrediction = 0x1 | 0x0
2698 ```
2699 #### Windows (Intune)
2700 OMA-URI:
2701 ```
2702 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NetworkPrediction
2703 ```
2704 Value (string):
2705 ```
2706 <enabled/> or <disabled/>
2707 ```
2708 #### macOS
2709 ```
2710 <dict>
2711   <key>NetworkPrediction</key>
2712   <true/> | <false/>
2713 </dict>
2714 ```
2715 #### policies.json
2716 ```
2717 {
2718   "policies": {
2719     "NetworkPrediction": true | false
2720 }
2721 ```
2722 ### NewTabPage
2723 Enable or disable the New Tab page.
2724
2725 **Compatibility:** Firefox 68, Firefox ESR 68\
2726 **CCK2 Equivalent:** N/A\
2727 **Preferences Affected:** `browser.newtabpage.enabled`
2728
2729 #### Windows (GPO)
2730 ```
2731 Software\Policies\Mozilla\Firefox\NewTabPage = 0x1 | 0x0
2732 ```
2733 #### Windows (Intune)
2734 OMA-URI:
2735 ```
2736 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NewTabPage
2737 ```
2738 Value (string):
2739 ```
2740 <enabled/> or <disabled/>
2741 ```
2742 #### macOS
2743 ```
2744 <dict>
2745   <key>NewTabPage</key>
2746   <true/> | <false/>
2747 </dict>
2748 ```
2749 #### policies.json
2750 ```
2751 {
2752   "policies": {
2753     "NewTabPage": true | false
2754 }
2755 ```
2756 ### NoDefaultBookmarks
2757 Disable the creation of default bookmarks.
2758
2759 This policy is only effective if the user profile has not been created yet.
2760
2761 **Compatibility:** Firefox 60, Firefox ESR 60\
2762 **CCK2 Equivalent:** `removeDefaultBookmarks`\
2763 **Preferences Affected:** N/A
2764
2765 #### Windows (GPO)
2766 ```
2767 Software\Policies\Mozilla\Firefox\NoDefaultBookmarks = 0x1 | 0x0
2768 ```
2769 #### Windows (Intune)
2770 OMA-URI:
2771 ```
2772 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NoDefaultBookmarks
2773 ```
2774 Value (string):
2775 ```
2776 <enabled/> or <disabled/>
2777 ```
2778 #### macOS
2779 ```
2780 <dict>
2781   <key>NoDefaultBookmarks</key>
2782   <true/> | <false/>
2783 </dict>
2784 ```
2785 #### policies.json
2786 ```
2787 {
2788   "policies": {
2789     "NoDefaultBookmarks": true | false
2790   }
2791 }
2792 ```
2793 ### OfferToSaveLogins
2794 Control whether or not Firefox offers to save passwords.
2795
2796 **Compatibility:** Firefox 60, Firefox ESR 60\
2797 **CCK2 Equivalent:** `dontRememberPasswords`\
2798 **Preferences Affected:** `signon.rememberSignons`
2799
2800 #### Windows (GPO)
2801 ```
2802 Software\Policies\Mozilla\Firefox\OfferToSaveLogins = 0x1 | 0x0
2803 ```
2804 #### Windows (Intune)
2805 OMA-URI:
2806 ```
2807 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OfferToSaveLogins
2808 ```
2809 Value (string):
2810 ```
2811 <enabled/> or <disabled/>
2812 ```
2813 #### macOS
2814 ```
2815 <dict>
2816   <key>OfferToSaveLogins</key>
2817   <true/> | <false/>
2818 </dict>
2819 ```
2820 #### policies.json
2821 ```
2822 {
2823   "policies": {
2824     "OfferToSaveLogins": true | false
2825   }
2826 }
2827 ```
2828 ### OfferToSaveLoginsDefault
2829 Sets the default value of signon.rememberSignons without locking it.
2830
2831 **Compatibility:** Firefox 70, Firefox ESR 60.2\
2832 **CCK2 Equivalent:** `dontRememberPasswords`\
2833 **Preferences Affected:** `signon.rememberSignons`
2834
2835 #### Windows (GPO)
2836 ```
2837 Software\Policies\Mozilla\Firefox\OfferToSaveLoginsDefault = 0x1 | 0x0
2838 ```
2839 #### Windows (Intune)
2840 OMA-URI:
2841 ```
2842 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OfferToSaveLoginsDefault
2843 ```
2844 Value (string):
2845 ```
2846 <enabled/> or <disabled/>
2847 ```
2848 #### macOS
2849 ```
2850 <dict>
2851   <key>OfferToSaveLoginsDefault</key>
2852   <true/> | <false/>
2853 </dict>
2854 ```
2855 #### policies.json
2856 ```
2857 {
2858   "policies": {
2859     "OfferToSaveLoginsDefault": true | false
2860   }
2861 }
2862 ```
2863 ### OverrideFirstRunPage
2864 Override the first run page. If the value is blank, no first run page is displayed.
2865
2866 **Compatibility:** Firefox 60, Firefox ESR 60\
2867 **CCK2 Equivalent:** `welcomePage`,`noWelcomePage`\
2868 **Preferences Affected:** `startup.homepage_welcome_url`
2869
2870 #### Windows (GPO)
2871 ```
2872 Software\Policies\Mozilla\Firefox\OverrideFirstRunPage = "http://example.org"
2873 ```
2874 #### Windows (Intune)
2875 OMA-URI:
2876 ```
2877 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OverrideFirstRunPage
2878 ```
2879 Value (string):
2880 ```
2881 <enabled/>
2882 <data id="OverridePage" value="https://example.com"/>
2883 ```
2884 #### macOS
2885 ```
2886 <dict>
2887   <key>OverrideFirstRunPage</key>
2888   <string>http://example.org</string>
2889 </dict>
2890 ```
2891 #### policies.json
2892 ```
2893 {
2894   "policies": {
2895     "OverrideFirstRunPage": "http://example.org"
2896 }
2897 ```
2898 ### OverridePostUpdatePage
2899 Override the upgrade page. If the value is blank, no upgrade page is displayed.
2900
2901 **Compatibility:** Firefox 60, Firefox ESR 60\
2902 **CCK2 Equivalent:** `upgradePage`,`noUpgradePage`\
2903 **Preferences Affected:** `startup.homepage_override_url`
2904
2905 #### Windows (GPO)
2906 ```
2907 Software\Policies\Mozilla\Firefox\OverridePostUpdatePage = "http://example.org"
2908 ```
2909 #### Windows (Intune)
2910 OMA-URI:
2911 ```
2912 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OverridePostUpdatePage
2913 ```
2914 Value (string):
2915 ```
2916 <enabled/>
2917 <data id="OverridePage" value="https://example.com"/>
2918 ```
2919 #### macOS
2920 ```
2921 <dict>
2922   <key>OverridePostUpdatePage</key>
2923   <string>http://example.org</string>
2924 </dict>
2925 ```
2926 #### policies.json
2927 ```
2928 {
2929   "policies": {
2930     "OverridePostUpdatePage": "http://example.org"
2931 }
2932 ```
2933 ### PasswordManagerEnabled
2934 Remove access to the password manager via preferences and blocks about:logins on Firefox 70.
2935
2936 **Compatibility:** Firefox 70, Firefox ESR 60.2\
2937 **CCK2 Equivalent:** N/A\
2938 **Preferences Affected:** `pref.privacy.disable_button.view_passwords`
2939
2940 #### Windows (GPO)
2941 ```
2942 Software\Policies\Mozilla\Firefox\PasswordManagerEnabled = 0x1 | 0x0
2943 ```
2944 #### Windows (Intune)
2945 OMA-URI:
2946 ```
2947 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PasswordManagerEnabled
2948 ```
2949 Value (string):
2950 ```
2951 <enabled/> or <disabled/>
2952 ```
2953 #### macOS
2954 ```
2955 <dict>
2956   <key>PasswordManagerEnabled</key>
2957   <true/> | <false/>
2958 </dict>
2959 ```
2960 #### policies.json
2961 ```
2962 {
2963   "policies": {
2964     "PasswordManagerEnabled": true | false
2965   }
2966 }
2967 ```
2968 ### PDFjs
2969 Disable or configure PDF.js, the built-in PDF viewer.
2970
2971 If `Enabled` is set to false, the built-in PDF viewer is disabled.
2972
2973 If `EnablePermissions` is set to true, the built-in PDF viewer will honor document permissions like preventing the copying of text.
2974
2975 Note: DisableBuiltinPDFViewer has not been deprecated. You can either continue to use it, or switch to using PDFjs->Enabled to disable the built-in PDF viewer. This new permission was added because we needed a place for PDFjs->EnabledPermissions.
2976
2977 **Compatibility:** Firefox 77, Firefox ESR 68.9\
2978 **CCK2 Equivalent:** N/A\
2979 **Preferences Affected:** `pdfjs.diabled`,`pdfjs.enablePermissions`
2980
2981 #### Windows (GPO)
2982 ```
2983 Software\Policies\Mozilla\Firefox\PDFjs\Enabled = 0x1 | 0x0
2984 Software\Policies\Mozilla\Firefox\PDFjs\EnablePermissions = 0x1 | 0x0
2985 ```
2986 #### Windows (Intune)
2987 OMA-URI:
2988 ```
2989 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PDFjs/PDFjs_Enabled
2990 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PDFjs/PDFjs_EnablePermissions
2991 ```
2992 Value (string):
2993 ```
2994 <enabled/>or <disabled/>
2995 ```
2996 #### macOS
2997 ```
2998 <dict>
2999   <key>PDFjs</key>
3000   <dict>
3001     <key>Enabled</key>
3002     <true/> | <false/>
3003     <key><EnablePermissions</key>
3004     <true/> | <false/>
3005   </dict>
3006 </dict>
3007 ```
3008 #### policies.json
3009 ```
3010 {
3011   "policies": {
3012     "PSFjs": {
3013       "Enabled": true | false,
3014       "EnablePermissions": true | false
3015     }
3016 }
3017 ```
3018 ### Permissions
3019 Set permissions associated with camera, microphone, location, notifications, and autoplay. Because these are origins, not domains, entries with unique ports must be specified separately. See examples below.
3020
3021 `Allow` is a list of origins where the feature is allowed.
3022
3023 `Block` is a list of origins where the feature is not allowed.
3024
3025 `BlockNewRequests` determines whether or not new requests can be made for the feature.
3026
3027 `Locked` prevents the user from changing preferences for the feature.
3028
3029 `Default` specifies the default value for Autoplay. block-audio-video is not supported on Firefox ESR 68.
3030
3031 **Compatibility:** Firefox 62, Firefox ESR 60.2 (Autoplay added in Firefox 74, Firefox ESR 68.6, Autoplay Default/Locked added in Firefox 76, Firefox ESR 68.8)\
3032 **CCK2 Equivalent:** N/A\
3033 **Preferences Affected:** `permissions.default.camera`,`permissions.default.microphone`,`permissions.default.geo`,`permissions.default.desktop-notification`,`media.autoplay.default`
3034
3035 #### Windows (GPO)
3036 ```
3037 Software\Policies\Mozilla\Firefox\Permissions\Camera\Allow\1 = "https://example.org"
3038 Software\Policies\Mozilla\Firefox\Permissions\Camera\Allow\2 = "https://example.org:1234"
3039 Software\Policies\Mozilla\Firefox\Permissions\Camera\Block\1 = "https://example.edu"
3040 Software\Policies\Mozilla\Firefox\Permissions\Camera\BlockNewRequests = 0x1 | 0x0
3041 Software\Policies\Mozilla\Firefox\Permissions\Camera\Locked = 0x1 | 0x0
3042 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Allow\1 = "https://example.org"
3043 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Block\1 = "https://example.edu"
3044 Software\Policies\Mozilla\Firefox\Permissions\Microphone\BlockNewRequests = 0x1 | 0x0
3045 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Locked = 0x1 | 0x0
3046 Software\Policies\Mozilla\Firefox\Permissions\Location\Allow\1 = "https://example.org"
3047 Software\Policies\Mozilla\Firefox\Permissions\Location\Block\1 = "https://example.edu"
3048 Software\Policies\Mozilla\Firefox\Permissions\Location\BlockNewRequests = 0x1 | 0x0
3049 Software\Policies\Mozilla\Firefox\Permissions\Location\Locked = 0x1 | 0x0
3050 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Allow\1 = "https://example.org"
3051 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Block\1 = "https://example.edu"
3052 Software\Policies\Mozilla\Firefox\Permissions\Notifications\BlockNewRequests = 0x1 | 0x0
3053 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Locked = 0x1 | 0x0
3054 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Allow\1 = "https://example.org"
3055 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Block\1 = "https://example.edu"
3056 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Default = "allow-audio-video" | "block-audio" | "block-audio-video"
3057 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Locked = 0x1 | 0x0
3058 ```
3059 #### Windows (Intune)
3060 OMA-URI:
3061 ```
3062 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Location/Location_BlockNewRequests
3063 ```
3064 Value (string):
3065 ```
3066 <enabled/> or <disabled/>
3067 ```
3068 OMA-URI:
3069 ```
3070 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Location/Location_Locked
3071 ```
3072 Value (string):
3073 ```
3074 <enabled/> or <disabled/>
3075 ```
3076 OMA-URI:
3077 ```
3078 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_Allow
3079 ```
3080 Value (string):
3081 ```
3082 <enabled/>
3083 <data id="Permissions" value="1&#xF000;https://example.org"/>
3084 ```
3085 OMA-URI:
3086 ```
3087 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_BlockNewRequests
3088 ```
3089 Value (string):
3090 ```
3091 <enabled/> or <disabled/>
3092 ```
3093 OMA-URI:
3094 ```
3095 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_Locked
3096 ```
3097 Value (string):
3098 ```
3099 <enabled/> or <disabled/>
3100 ```
3101 OMA-URI:
3102 ```
3103 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Allow
3104 ```
3105 Value (string):
3106 ```
3107 <enabled/>
3108 <data id="Permissions" value="1&#xF000;https://example.org"/>
3109 ```
3110 OMA-URI:
3111 ```
3112 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Block
3113 ```
3114 Value (string):
3115 ```
3116 <enabled/>
3117 <data id="Permissions" value="1&#xF000;https://example.edu"/>
3118 ```
3119 OMA-URI:
3120 ```
3121 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Default
3122 ```
3123 Value (string):
3124 ```
3125 <enabled/>
3126 <data id="Autoplay_Default" value="allow-audio-video | block-audio | block-audio-video"/>
3127 ```
3128 OMA-URI:
3129 ```
3130 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Locked
3131 ```
3132 Value (string):
3133 ```
3134 <enabled/> or <disabled/>
3135 ```
3136 #### macOS
3137 ```
3138 <dict>
3139   <key>Permissions</key>
3140   <dict>
3141     <key>Camera</key>
3142     <dict>
3143       <key>Allow</key>
3144       <array>
3145         <string>https://example.org</string>
3146         <string>https://example.org:1234</string>
3147       </array>
3148       <key>Block</key>
3149       <array>
3150         <string>https://example.edu</string>
3151       </array>
3152       <key>BlockNewRequests</key>
3153       <true/> | <false/>
3154       <key>Locked</key>
3155       <true/> | <false/>
3156     </dict>
3157     <key>Microphone</key>
3158     <dict>
3159       <key>Allow</key>
3160       <array>
3161         <string>https://example.org</string>
3162       </array>
3163       <key>Block</key>
3164       <array>
3165         <string>https://example.edu</string>
3166       </array>
3167       <key>BlockNewRequests</key>
3168       <true/> | <false/>
3169       <key>Locked</key>
3170       <true/> | <false/>
3171     </dict>
3172     <key>Location</key>
3173     <dict>
3174       <key>Allow</key>
3175       <array>
3176         <string>https://example.org</string>
3177       </array>
3178       <key>Block</key>
3179       <array>
3180         <string>https://example.edu</string>
3181       </array>
3182       <key>BlockNewRequests</key>
3183       <true/> | <false/>
3184       <key>Locked</key>
3185       <true/> | <false/>
3186     </dict>
3187     <key>Notifications</key>
3188     <dict>
3189       <key>Allow</key>
3190       <array>
3191         <string>https://example.org</string>
3192       </array>
3193       <key>Block</key>
3194       <array>
3195         <string>https://example.edu</string>
3196       </array>
3197       <key>BlockNewRequests</key>
3198       <true/>
3199       <key>Locked</key>
3200       <true/>
3201     </dict>
3202     <key>Autoplay</key>
3203     <dict>
3204       <key>Allow</key>
3205       <array>
3206         <string>https://example.org</string>
3207       </array>
3208       <key>Block</key>
3209       <array>
3210         <string>https://example.edu</string>
3211       </array>
3212       <key>Default</key>
3213       <string>allow-audio-video | block-audio | block-audio-video</string>
3214       <key>Locked</key>
3215       <true/> | <false/>
3216     </dict>
3217   </dict>
3218 </dict>
3219 ```
3220 #### policies.json
3221 ```
3222 {
3223   "policies": {
3224     "Permissions": {
3225       "Camera": {
3226         "Allow": ["https://example.org","https://example.org:1234"],
3227         "Block": ["https://example.edu"],
3228         "BlockNewRequests": true | false,
3229         "Locked": true | false
3230       },
3231       "Microphone": {
3232         "Allow": ["https://example.org"],
3233         "Block": ["https://example.edu"],
3234         "BlockNewRequests": true | false,
3235         "Locked": true | false
3236       },
3237       "Location": {
3238         "Allow": ["https://example.org"],
3239         "Block": ["https://example.edu"],
3240         "BlockNewRequests": true | false,
3241         "Locked": true | false
3242       },
3243       "Notifications": {
3244         "Allow": ["https://example.org"],
3245         "Block": ["https://example.edu"],
3246         "BlockNewRequests": true | false,
3247         "Locked": true | false
3248       },
3249       "Autoplay": {
3250         "Allow": ["https://example.org"],
3251         "Block": ["https://example.edu"],
3252         "Default": "allow-audio-video" | "block-audio" | "block-audio-video",
3253         "Locked": true | false
3254       }
3255     }
3256   }
3257 }
3258 ```
3259 ### PictureInPicture
3260
3261 Enable or disable Picture-in-Picture.
3262
3263 **Compatibility:** Firefox 78, Firefox ESR 78\
3264 **CCK2 Equivalent:** N/A\
3265 **Preferences Affected:** `media.videocontrols.picture-in-picture.video-toggle.enabled`
3266
3267 #### Windows (GPO)
3268 ```
3269 Software\Policies\Mozilla\Firefox\PictureInPicture = 0x1 | 0x0
3270 ```
3271 #### Windows (Intune)
3272 OMA-URI:
3273 ```
3274 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PictureInPicture
3275 ```
3276 Value (string):
3277 ```
3278 <enabled/> or <disabled/>
3279 ```
3280 #### macOS
3281 ```
3282 <dict>
3283   <key>PictureInPicture</key>
3284   <true/> | <false/>
3285 </dict>
3286 ```
3287 #### policies.json
3288 ```
3289 {
3290   "policies": {
3291     "PictureInPicture": true | false
3292   }
3293 }
3294 ```
3295 ### PopupBlocking
3296 Configure the default pop-up window policy as well as origins for which pop-up windows are allowed.
3297
3298 `Allow` is a list of origins where popup-windows are allowed.
3299
3300 `Default` determines whether or not pop-up windows are allowed by default.
3301
3302 `Locked` prevents the user from changing pop-up preferences.
3303
3304 **Compatibility:** Firefox 60, Firefox ESR 60\
3305 **CCK2 Equivalent:** `permissions.popup`\
3306 **Preferences Affected:** `dom.disable_open_during_load`
3307
3308 #### Windows (GPO)
3309 ```
3310 Software\Policies\Mozilla\Firefox\PopupBlocking\Allow\1 = "https://example.org"
3311 Software\Policies\Mozilla\Firefox\PopupBlocking\Allow\2 = "https://example.edu"
3312 Software\Policies\Mozilla\Firefox\PopupBlocking\Default = 0x1 | 0x0
3313 Software\Policies\Mozilla\Firefox\PopupBlocking\Locked = 0x1 | 0x0
3314 ```
3315 #### Windows (Intune)
3316 OMA-URI:
3317 ```
3318 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Allow
3319 ```
3320 Value (string):
3321 ```
3322 <enabled/>
3323 <data id="Permissions" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
3324 ```
3325 OMA-URI:
3326 ```
3327 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Default
3328 ```
3329 Value (string):
3330 ```
3331 <enabled/> or <disabled/>
3332 ```
3333 OMA-URI:
3334 ```
3335 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Locked
3336 ```
3337 Value (string):
3338 ```
3339 <enabled/> or <disabled/>
3340 ```
3341 #### macOS
3342 ```
3343 <dict>
3344   <key>PopupBlocking</key>
3345   <dict>
3346     <key>Allow</key>
3347     <array>
3348       <string>http://example.org</string>
3349       <string>http://example.edu</string>
3350     </array>
3351     <key>Default</key>
3352     <true/> | <false/>
3353     <key>Locked</key>
3354     <true/> | <false/>
3355   </dict>
3356 </dict>
3357 ```
3358 #### policies.json
3359 ```
3360 {
3361   "policies": {
3362     "PopupBlocking": {
3363       "Allow": ["http://example.org/",
3364                 "http://example.edu/"],
3365       "Default": true | false,
3366       "Locked": true | false
3367     }
3368   }
3369 }
3370 ```
3371 ### Preferences
3372 Set and lock certain preferences.
3373
3374 **Compatibility:** See below\
3375 **CCK2 Equivalent:** `preferences`\
3376 **Preferences Affected:** See below
3377
3378 | Preference | Type | Compatibility | Default
3379 | --- | --- | --- | ---
3380 | accessibility.force_disabled | integer | Firefox 70, Firefox ESR 68.2 | 0
3381 | &nbsp;&nbsp;&nbsp;&nbsp;If set to 1, platform accessibility is disabled.
3382 | app.update.auto (Deprecated - Switch to AppAutoUpdate policy) | boolean | Firefox 68, Firefox ESR 68 | true
3383 | &nbsp;&nbsp;&nbsp;&nbsp;If false, Firefox doesn't automatically install update.
3384 | browser.bookmarks.autoExportHTML | boolean | Firefox 70, Firefox ESR 68.2 | false
3385 | &nbsp;&nbsp;&nbsp;&nbsp;If true, bookmarks are exported on shutdown.
3386 | browser.bookmarks.file | string | Firefox 70, Firefox ESR 68.2 | N/A
3387 | &nbsp;&nbsp;&nbsp;&nbsp;If set, the name of the file where bookmarks are exported and imported.
3388 | browser.bookmarks.restore_default_bookmarks | boolean | Firefox 70, Firefox ESR 68.2 | N/A
3389 | &nbsp;&nbsp;&nbsp;&nbsp;If true, bookmarks are restored to their defaults.
3390 | browser.cache.disk.enable | boolean | Firefox 68, Firefox ESR 68 | true
3391 | &nbsp;&nbsp;&nbsp;&nbsp;If false, don't store cache on the hard drive.
3392 | ~browser.cache.disk.parent_directory~ | string | Firefox 68, Firefox ESR 68 | Profile temporary directory
3393 | &nbsp;&nbsp;&nbsp;&nbsp;~If set, changes the location of the disk cache.~ This policy doesn't work. It's being worked on.
3394 | browser.fixup.dns_first_for_single_words | boolean | Firefox 68, Firefox ESR 68 | false
3395 | &nbsp;&nbsp;&nbsp;&nbsp;If true, single words are sent to DNS, not directly to search.
3396 | browser.newtabpage.activity-stream.default.sites | string | Firefox 72, ESR 68.4 | Locale dependent
3397 | &nbsp;&nbsp;&nbsp;&nbsp;If set, a list of URLs to use as the default top sites on the new tab page.
3398 | browser.places.importBookmarksHTML | boolean | Firefox 70, Firefox ESR 68.2
3399 | &nbsp;&nbsp;&nbsp;&nbsp;If true, bookmarks are always imported on startup.
3400 | browser.safebrowsing.phishing.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
3401 | &nbsp;&nbsp;&nbsp;&nbsp;If false, phishing protection is not enabled (Not recommended)
3402 | browser.safebrowsing.malware.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
3403 | &nbsp;&nbsp;&nbsp;&nbsp;If false, malware protection is not enabled (Not recommended)
3404 | browser.search.update | boolean | Firefox 68, Firefox ESR 68 | true
3405 | &nbsp;&nbsp;&nbsp;&nbsp;If false, updates for search engines are not checked.
3406 | browser.slowStartup.notificationDisabled | boolean | Firefox 70, Firefox ESR 68.2 | false
3407 | &nbsp;&nbsp;&nbsp;&nbsp;If true, a notification isn't shown if startup is slow.
3408 | browser.tabs.warnOnClose | boolean | Firefox 68, Firefox ESR 68 | true
3409 | &nbsp;&nbsp;&nbsp;&nbsp;If false, there is no warning when the browser is closed.
3410 | browser.taskbar.previews.enable | boolean | Firefox 70, Firefox ESR 68.2 (Windows only) | false
3411 | &nbsp;&nbsp;&nbsp;&nbsp;If true, tab previews are shown in the Windows taskbar.
3412 | browser.urlbar.suggest.bookmark | boolean | Firefox 68, Firefox ESR 68 | true
3413 | &nbsp;&nbsp;&nbsp;&nbsp;If false, bookmarks aren't suggested when typing in the URL bar.
3414 | browser.urlbar.suggest.history | boolean | Firefox 68, Firefox ESR 68 | true
3415 | &nbsp;&nbsp;&nbsp;&nbsp;If false, history isn't suggested when typing in the URL bar.
3416 | browser.urlbar.suggest.openpage | boolean | Firefox 68, Firefox ESR 68 | true
3417 | &nbsp;&nbsp;&nbsp;&nbsp;If false, open tabs aren't suggested when typing in the URL bar.
3418 | datareporting.policy.dataSubmissionPolicyBypassNotification | boolean | Firefox 68, Firefox ESR 68 | false
3419 | &nbsp;&nbsp;&nbsp;&nbsp;If true, don't show the privacy policy tab on first run.
3420 | dom.allow_scripts_to_close_windows | boolean | Firefox 70, Firefox ESR 68.2 | false
3421 | &nbsp;&nbsp;&nbsp;&nbsp;If false, web page can close windows.
3422 | dom.disable_window_flip | boolean | Firefox 68, Firefox ESR 68 | true
3423 | &nbsp;&nbsp;&nbsp;&nbsp;If false, web pages can focus and activate windows.
3424 | dom.disable_window_move_resize | boolean | Firefox 68, Firefox ESR 68 | false
3425 | &nbsp;&nbsp;&nbsp;&nbsp;If true, web pages can't move or resize windows.
3426 | dom.event.contextmenu.enabled | boolean | Firefox 68, Firefox ESR 68 | true
3427 | &nbsp;&nbsp;&nbsp;&nbsp;If false, web pages can't override context menus.
3428 | dom.keyboardevent.keypress.hack.dispatch_non_printable_keys.addl | string | Firefox 68, Firefox ESR 68 | N/A
3429 | &nbsp;&nbsp;&nbsp;&nbsp;See https://support.mozilla.org/en-US/kb/dom-events-changes-introduced-firefox-66
3430 | dom.keyboardevent.keypress.hack.use_legacy_keycode_and_charcode.addl | string | Firefox 68, Firefox ESR 68 | N/A
3431 | &nbsp;&nbsp;&nbsp;&nbsp;See https://support.mozilla.org/en-US/kb/dom-events-changes-introduced-firefox-66
3432 | dom.xmldocument.load.enabled | boolean | Firefox ESR 68.5 | true.
3433 | &nbsp;&nbsp;&nbsp;&nbsp;If false, XMLDocument.load is not available.
3434 | dom.xmldocument.async.enabled | boolean | Firefox ESR 68.5 | true
3435 | &nbsp;&nbsp;&nbsp;&nbsp;If false, XMLDocument.async is not available.
3436 | extensions.blocklist.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
3437 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the extensions blocklist is not used (Not recommended)
3438 | extensions.getAddons.showPane | boolean | Firefox 68, Firefox ESR 68 | N/A
3439 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the Recommendations tab is not displayed in the Add-ons Manager.
3440 | extensions.htmlaboutaddons.recommendations.enabled | boolean | Firefox 72, Firefox ESR 68.4 | true
3441 | &nbsp;&nbsp;&nbsp;&nbsp;If false, recommendations are not shown on the Extensions tab in the Add-ons Manager.
3442 | geo.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
3443 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the geolocation API is disabled. | Language dependent
3444 | intl.accept_languages | string | Firefox 70, Firefox ESR 68.2
3445 | &nbsp;&nbsp;&nbsp;&nbsp;If set, preferred language for web pages.
3446 | media.eme.enabled (Deprecated - Switch to EncryptedMediaExtensions policy) | boolean | Firefox 70, Firefox ESR 68.2 | true
3447 | &nbsp;&nbsp;&nbsp;&nbsp;If false, Encrypted Media Extensions are not enabled.
3448 | media.gmp-gmpopenh264.enabled | boolean | Firefox 68, Firefox ESR 68 | true
3449 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the OpenH264  plugin is not downloaded.
3450 | media.gmp-widevinecdm.enabled | boolean | Firefox 68, Firefox ESR 68 | true
3451 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the Widevine plugin is not downloaded.
3452 | media.peerconnection.enabled | boolean | Firefox 72, Firefox ESR 68.4 | true
3453 | &nbsp;&nbsp;&nbsp;&nbsp;If false, WebRTC is disabled
3454 | media.peerconnection.ice.obfuscate_host_addresses.whitelist | string | Firefox 72, Firefox ESR 68.4 | N/A
3455 | &nbsp;&nbsp;&nbsp;&nbsp;If set, a list of domains for which mDNS hostname obfuscation is
3456 disabled
3457 | network.dns.disableIPv6 | boolean | Firefox 68, Firefox ESR 68 | false
3458 | &nbsp;&nbsp;&nbsp;&nbsp;If true, IPv6 DNS lokoups are disabled.
3459 | network.IDN_show_punycode | boolean | Firefox 68, Firefox ESR 68 | false
3460 | &nbsp;&nbsp;&nbsp;&nbsp;If true, display the punycode version of internationalized domain names.
3461 | places.history.enabled | boolean | Firefox 68, Firefox ESR 68 | true
3462 | &nbsp;&nbsp;&nbsp;&nbsp;If false, history is not enabled.
3463 | print.save_print_settings | boolean | Firefox 70, Firefox ESR 68.2 | true
3464 | &nbsp;&nbsp;&nbsp;&nbsp;If false, print settings are not saved between jobs.
3465 | security.default_personal_cert | string | Firefox 68, Firefox ESR 68 | Ask Every Time
3466 | &nbsp;&nbsp;&nbsp;&nbsp;If set to Select Automatically, Firefox automatically chooses the default personal certificate.
3467 | security.mixed_content.block_active_content | boolean | Firefox 70, Firefox ESR 68.2 | true
3468 | &nbsp;&nbsp;&nbsp;&nbsp;If false, mixed active content (HTTP and HTTPS) is not blocked.
3469 | security.osclientcerts.autoload | boolean | Firefox 72 (Windows), Firefox 75 (macOS)  | false
3470 | &nbsp;&nbsp;&nbsp;&nbsp;If true, client certificates are loaded from the operating system certificate store.
3471 | security.ssl.errorReporting.enabled | boolean | Firefox 68, Firefox ESR 68 | true
3472 | &nbsp;&nbsp;&nbsp;&nbsp;If false, SSL errors cannot be sent to Mozilla.
3473 | security.tls.hello_downgrade_check | boolean | Firefox 72, Firefox ESR 68.4 | true
3474 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the TLS 1.3 downgrade check is disabled.
3475 | ui.key.menuAccessKeyFocuses | boolean | Firefox 68, Firefox ESR 68 | true
3476 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the Alt key doesn't show the menubar on Windows.
3477 | widget.content.gtk-theme-override | string | Firefox 72, Firefox ESR 68.4 (Linux only) | N/A
3478 | &nbsp;&nbsp;&nbsp;&nbsp;If set, overrides the GTK theme for widgets.
3479 #### Windows (GPO)
3480 ```
3481 Software\Policies\Mozilla\Firefox\Preferences\boolean_preference_name = 0x1 | 0x0
3482 Software\Policies\Mozilla\Firefox\Preferences\string_preference_name = "string_value"
3483 ```
3484 #### Windows (Intune)
3485 OMA-URI: (periods are replaced by underscores)
3486 ```
3487 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Preferences/boolean_preference_name
3488 ```
3489 Value (string):
3490 ```
3491 <enabled/> or <disabled/>
3492 ```
3493 #### macOS
3494 ```
3495 <dict>
3496   <key>Preferences</key>
3497   <dict>
3498     <key>boolean_preference_name</key>
3499     <true/> | <false/>
3500     <key>string_preference_name</key>
3501     <string>string_value</string>
3502   </dict>
3503 </dict>
3504 ```
3505 #### policies.json
3506 ```
3507 {
3508   "policies": {
3509     "Preferences": {
3510       "boolean_preference_name": true | false,
3511       "string_preference_name": "string_value"
3512     }
3513   }
3514 }
3515 ```
3516 ### PromptForDownloadLocation
3517 Ask where to save each file before downloading.
3518
3519 **Compatibility:** Firefox 68, Firefox ESR 68\
3520 **CCK2 Equivalent:** N/A\
3521 **Preferences Affected:** `browser.download.useDownloadDir`
3522
3523 #### Windows (GPO)
3524 ```
3525 Software\Policies\Mozilla\Firefox\PromptForDownloadLocation = 0x1 | 0x0
3526 ```
3527 #### Windows (Intune)
3528 OMA-URI:
3529 ```
3530 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PromptForDownloadLocation
3531 ```
3532 Value (string):
3533 ```
3534 <enabled/> or <disabled/>
3535 ```
3536 #### macOS
3537 ```
3538 <dict>
3539   <key>PromptForDownloadLocation</key>
3540   <true/> | <false/>
3541 </dict>
3542 ```
3543 #### policies.json
3544 ```
3545 {
3546   "policies": {
3547     "PromptForDownloadLocation": true | false
3548   }
3549 }
3550 ```
3551 ### Proxy
3552 Configure proxy settings. These settings correspond to the connection settings in Firefox preferences.
3553 To specify ports, append them to the hostnames with a colon (:).
3554
3555 `Mode` is the proxy method being used.
3556
3557 `Locked` is whether or not proxy settings can be changed.
3558
3559 `HTTPProxy` is the HTTP proxy server.
3560
3561 `UseHTTPProxyForAllProtocols` is whether or not the HTTP proxy should be used for all other proxies.
3562
3563 `SSLProxy` is the SSL proxy server.
3564
3565 `FTPProxy` is the FTP proxy server.
3566
3567 `SOCKSProxy` is the SOCKS proxy server
3568
3569 `SOCKSVersion` is the SOCKS version (4 or 5)
3570
3571 `Passthrough` is list of hostnames or IP addresses that will not be proxied. Use `<local>` to bypass proxying for all hostnames which do not contain periods.
3572
3573 `AutoConfigURL` is a  URL for proxy configuration (only used if Mode is autoConfig).
3574
3575 `AutoLogin` means do not prompt for authentication if password is saved.
3576
3577 `UseProxyForDNS` to use proxy DNS when using SOCKS v5.
3578
3579 **Compatibility:** Firefox 60, Firefox ESR 60\
3580 **CCK2 Equivalent:** `networkProxy*`\
3581 **Preferences Affected:** `network.proxy.type`,`network.proxy.autoconfig_url`,`network.proxy.socks_remote_dns`,`signon.autologin.proxy`,`network.proxy.socks_version`,`network.proxy.no_proxies_on`,`network.proxy.share_proxy_settings`,`network.proxy.http`,`network.proxy.http_port`,`network.proxy.ftp`,`network.proxy.ftp_port`,`network.proxy.ssl`,`network.proxy.ssl_port`,`network.proxy.socks`,`network.proxy.socks_port`
3582
3583 #### Windows (GPO)
3584 ```
3585 Software\Policies\Mozilla\Firefox\Proxy\Mode = "none", "system", "manual", "autoDetect", "autoConfig"
3586 Software\Policies\Mozilla\Firefox\Proxy\Locked = 0x1 | 0x0
3587 Software\Policies\Mozilla\Firefox\=Proxy\HTTPProxy = https://httpproxy.example.com
3588 Software\Policies\Mozilla\Firefox\Proxy\UseHTTPProxyForAllProtocols = 0x1 | 0x0
3589 Software\Policies\Mozilla\Firefox\Proxy\SSLProxy = https://sslproxy.example.com
3590 Software\Policies\Mozilla\Firefox\Proxy\FTPProxy = https://ftpproxy.example.com
3591 Software\Policies\Mozilla\Firefox\Proxy\SOCKSProxy = https://socksproxy.example.com
3592 Software\Policies\Mozilla\Firefox\Proxy\SOCKSVersion = 0x4 | 0x5
3593 Software\Policies\Mozilla\Firefox\Proxy\Passthrough = <local>
3594 Software\Policies\Mozilla\Firefox\Proxy\AutoConfigURL = URL_TO_AUTOCONFIG
3595 Software\Policies\Mozilla\Firefox\Proxy\AutoLogin = 0x1 | 0x0
3596 Software\Policies\Mozilla\Firefox\Proxy\UseProxyForDNS = 0x1 | 0x0
3597 ```
3598 #### Windows (Intune)
3599 OMA-URI:
3600 ```
3601 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Proxy
3602 ```
3603 Value (string):
3604 ```
3605 <enabled/>
3606 <data id="ProxyLocked" value="true | false"/>
3607 <data id="ConnectionType" value="none | system | manual | autoDetect | autoConfig"/>
3608 <data id="HTTPProxy" value="https://httpproxy.example.com"/>
3609 <data id="UseHTTPProxyForAllProtocols" value="true | false"/>
3610 <data id="SSLProxy" value="https://sslproxy.example.com"/>
3611 <data id="FTPProxy" value="https://ftpproxy.example.com"/>
3612 <data id="SOCKSProxy" value="https://socksproxy.example.com"/>
3613 <data id="SOCKSVersion" value="4 | 5"/>
3614 <data id="AutoConfigURL" value="URL_TO_AUTOCONFIG"/>
3615 <data id="Passthrough" value="<local>"/>
3616 <data id="AutoLogin" value="true | false"/>
3617 <data id="UseProxyForDNS" value="true | false"/>
3618 ```
3619 #### macOS
3620 ```
3621 <dict>
3622   <key>Proxy</key>
3623   <dict>
3624     <key>Mode</key>
3625     <string>none | system | manual | autoDetect | autoConfig</string>
3626     <key>Locked</key>
3627     <true> | </false>
3628     <key>HTTPProxy</key>
3629     <string>https://httpproxy.example.com</string>
3630     <key>UseHTTPProxyForAllProtocols</key>
3631     <true> | </false>
3632     <key>SSLProxy</key>
3633     <string>https://sslproxy.example.com</string>
3634     <key>FTPProxy</key>
3635     <string>https://ftpproxy.example.com</string>
3636     <key>SOCKSProxy</key>
3637     <string>https://socksproxy.example.com</string>
3638     <key>SOCKSVersion</key>
3639     <string>4 | 5</string>
3640     <key>Passthrough</key>
3641     <string>&lt;local>&gt;</string>
3642     <key>AutoConfigURL</key>
3643     <string>URL_TO_AUTOCONFIG</string>
3644     <key>AutoLogin</key>
3645     <true> | </false>
3646     <key>UseProxyForDNS</key>
3647     <true> | </false>
3648   </dict>
3649 </dict>
3650 ```
3651 #### policies.json
3652 ```
3653 {
3654   "policies": {
3655     "Proxy": {
3656       "Mode": "none", "system", "manual", "autoDetect", "autoConfig",
3657       "Locked": true | false,
3658       "HTTPProxy": "hostname",
3659       "UseHTTPProxyForAllProtocols": true | false,
3660       "SSLProxy": "hostname",
3661       "FTPProxy": "hostname",
3662       "SOCKSProxy": "hostname",
3663       "SOCKSVersion": 4 | 5
3664       "Passthrough": "<local>",
3665       "AutoConfigURL": "URL_TO_AUTOCONFIG",
3666       "AutoLogin": true | false,
3667       "UseProxyForDNS": true | false
3668     }
3669   }
3670 }
3671 ```
3672 ### RequestedLocales
3673 Set the the list of requested locales for the application in order of preference. It will cause the corresponding language pack to become active.
3674
3675 Note: For Firefox 68, this can now be a string so that you can specify an empty value.
3676
3677 **Compatibility:** Firefox 64, Firefox ESR 60.4, Updated in Firefox 68, Firefox ESR 68\
3678 **CCK2 Equivalent:** N/A\
3679 **Preferences Affected:** N/A
3680 #### Windows (GPO)
3681 ```
3682 Software\Policies\Mozilla\Firefox\RequestedLocales\1 = "de"
3683 Software\Policies\Mozilla\Firefox\RequestedLocales\2 = "en-US"
3684
3685 or
3686
3687 Software\Policies\Mozilla\Firefox\RequestedLocales = "de,en-US"
3688 ```
3689 #### Windows (Intune)
3690 OMA-URI:
3691 ```
3692 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/RequestedLocalesString
3693 ```
3694 Value (string):
3695 ```
3696 <enabled/>
3697 <data id="Preferences_String" value="de,en-US"/>
3698 ```
3699 #### macOS
3700 ```
3701 <dict>
3702   <key>RequestedLocales</key>
3703   <array>
3704     <string>de</string>
3705     <string>en-US</string>
3706   </array>
3707 </dict>
3708
3709 or
3710
3711 <dict>
3712   <key>RequestedLocales</key>
3713   <string>de,en-US</string>
3714 </dict>
3715
3716 ```
3717 #### policies.json
3718 ```
3719 {
3720   "policies": {
3721     "RequestedLocales": ["de", "en-US"]
3722   }
3723 }
3724
3725 or
3726
3727 {
3728   "policies": {
3729     "RequestedLocales": "de,en-US"
3730   }
3731 }
3732 ```
3733 <a name="SanitizeOnShutdown"></a>
3734
3735 ### SanitizeOnShutdown (Selective)
3736 Clear data on shutdown. Choose from Cache, Cookies, Download History, Form & Search History, Browsing History, Active Logins, Site Preferences and Offline Website Data.
3737
3738 Previously, these values were always locked. Starting with Firefox 74 and Firefox ESR 68.6, you can use the `Locked` option to either keep the values unlocked (set it to false), or lock only the values you set (set it to true). If you want the old behavior of locking everything, do not set `Locked` at all.
3739
3740 **Compatibility:** Firefox 68, Firefox ESR 68 (Locked added in 74/68.6)\
3741 **CCK2 Equivalent:** N/A\
3742 **Preferences Affected:** `privacy.sanitize.sanitizeOnShutdown`,`privacy.clearOnShutdown.cache`,`privacy.clearOnShutdown.cookies`,`privacy.clearOnShutdown.downloads`,`privacy.clearOnShutdown.formdata`,`privacy.clearOnShutdown.history`,`privacy.clearOnShutdown.sessions`,`privacy.clearOnShutdown.siteSettings`,`privacy.clearOnShutdown.offlineApps`
3743 #### Windows (GPO)
3744 ```
3745 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Cache = 0x1 | 0x0
3746 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Cookies = 0x1 | 0x0
3747 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Downloads = 0x1 | 0x0
3748 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\FormData = 0x1 | 0x0
3749 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\History = 0x1 | 0x0
3750 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Sessions = 0x1 | 0x0
3751 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\SiteSettings = 0x1 | 0x0
3752 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\OfflineApps = 0x1 | 0x0
3753 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Locked = 0x1 | 0x0
3754 ```
3755 #### Windows (Intune)
3756 OMA-URI:
3757 ```
3758 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/I_SanitizeOnShutdown_Locked
3759 ```
3760 Value (string):
3761 ```
3762 <enabled/> or <disabled/>
3763 ```
3764 #### macOS
3765 ```
3766 <dict>
3767   <key>SanitizeOnShutdown</key>
3768   <dict>
3769     <key>Cache</key>
3770     <true/> | <false/>
3771     <key>Cookies</key>
3772     <true/> | <false/>
3773     <key>Downloads</key>
3774     <true/> | <false/>
3775     <key>FormData</key>
3776     <true/> | <false/>
3777     <key>History</key>
3778     <true/> | <false/>
3779     <key>Sessions</key>
3780     <true/> | <false/>
3781     <key>SiteSettings</key>
3782     <true/> | <false/>
3783     <key>OfflineApps</key>
3784     <true/> | <false/>
3785     <key>Locked</key>
3786     <true/> | <false/>
3787   </dict>
3788 </dict>
3789 ```
3790 #### policies.json
3791 ```
3792 {
3793   "policies": {
3794     "SanitizeOnShutdown": {
3795       "Cache": true | false,
3796       "Cookies": true | false,
3797       "Downloads": true | false,
3798       "FormData": true | false,
3799       "History": true | false,
3800       "Sessions": true | false,
3801       "SiteSettings": true | false,
3802       "OfflineApps": true | false,
3803       "Locked": true | false
3804     }
3805   }
3806 }
3807 ```
3808 ### SanitizeOnShutdown (All)
3809 Clear all data on shutdown, including Browsing & Download History, Cookies, Active Logins, Cache, Form & Search History, Site Preferences and Offline Website Data.
3810
3811 **Compatibility:** Firefox 60, Firefox ESR 60\
3812 **CCK2 Equivalent:** N/A\
3813 **Preferences Affected:** `privacy.sanitize.sanitizeOnShutdown`,`privacy.clearOnShutdown.cache`,`privacy.clearOnShutdown.cookies`,`privacy.clearOnShutdown.downloads`,`privacy.clearOnShutdown.formdata`,`privacy.clearOnShutdown.history`,`privacy.clearOnShutdown.sessions`,`privacy.clearOnShutdown.siteSettings`,`privacy.clearOnShutdown.offlineApps`
3814 #### Windows (GPO)
3815 ```
3816 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown = 0x1 | 0x0
3817 ```
3818 #### Windows (Intune)
3819 OMA-URI:
3820 ```
3821 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/C_SanitizeOnShutdown
3822 ```
3823 Value (string):
3824 ```
3825 <enabled/> or <disabled/>
3826 ```
3827 #### macOS
3828 ```
3829 <dict>
3830   <key>SanitizeOnShutdown</key>
3831   <true/> | <false/>
3832 </dict>
3833 ```
3834 #### policies.json
3835 ```
3836 {
3837   "policies": {
3838     "SanitizeOnShutdown": true | false
3839   }
3840 }
3841 ```
3842 ### SearchBar
3843 Set whether or not search bar is displayed.
3844
3845 **Compatibility:** Firefox 60, Firefox ESR 60\
3846 **CCK2 Equivalent:** `showSearchBar`\
3847 **Preferences Affected:** N/A
3848
3849 #### Windows (GPO)
3850 ```
3851 Software\Policies\Mozilla\Firefox\SearchBar = "unified" | "separate"
3852 ```
3853
3854 #### Windows (Intune)
3855 OMA-URI:
3856 ```
3857 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SearchBar
3858 ```
3859 Value (string):
3860 ```
3861 <enabled/>
3862 <data id="Permissions" value="unified | separate"/>
3863 #### macOS
3864 ```
3865 <dict>
3866   <key>SearchBar</key>
3867   <string>unified | separate</string>
3868 </dict>
3869 ```
3870 #### policies.json
3871 ```
3872 {
3873   "policies": {
3874     "SearchBar": "unified" | "separate"
3875   }
3876 }
3877 ```
3878 <a name="SearchEngines"></a>
3879
3880 ### SearchEngines (This policy is only available on the ESR.)
3881
3882 ### SearchEngines | Default
3883
3884 Set the default search engine. This policy is only available on the ESR.
3885
3886 **Compatibility:** Firefox ESR 60\
3887 **CCK2 Equivalent:** `defaultSearchEngine`\
3888 **Preferences Affected:** N/A
3889
3890 #### Windows (GPO)
3891 ```
3892 Software\Policies\Mozilla\Firefox\SearchEngines\Default = NAME_OF_SEARCH_ENGINE
3893 ```
3894 #### Windows (Intune)
3895 OMA-URI:
3896 ```
3897 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_Default
3898 ```
3899 Value (string):
3900 ```
3901 <enabled/>
3902 <data id="SearchEngines_Default" value="NAME_OF_SEARCH_ENGINE"/>
3903 ```
3904 #### macOS
3905 ```
3906 <dict>
3907   <key>SearchEngines</key>
3908   <dict>
3909     <key>Default</key>
3910     <string>NAME_OF_SEARCH_ENGINE</string>
3911   </dict>
3912 </dict>
3913 ```
3914 #### policies.json
3915 ```
3916 {
3917   "policies": {
3918     "SearchEngines": {
3919       "Default": "NAME_OF_SEARCH_ENGINE"
3920     }
3921   }
3922 }
3923 ```
3924 ### SearchEngines | PreventInstalls
3925
3926 Prevent installing search engines from webpages.
3927
3928 **Compatibility:** Firefox ESR 60\
3929 **CCK2 Equivalent:** `disableSearchEngineInstall`\
3930 **Preferences Affected:** N/A
3931
3932 #### Windows (GPO)
3933 ```
3934 Software\Policies\Mozilla\Firefox\SearchEngines\PreventInstalls = 0x1 | 0x0
3935 ```
3936 #### Windows (Intune)
3937 OMA-URI:
3938 ```
3939 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_PreventInstalls
3940 ```
3941 Value (string):
3942 ```
3943 <enabled/> or <disabled/>
3944 ```
3945 #### macOS
3946 ```
3947 <dict>
3948   <key>SearchEngines</key>
3949   <dict>
3950     <key>PreventInstalls</key>
3951     <true/> | <false/>
3952   </dict>
3953 </dict>
3954 ```
3955 #### policies.json
3956 ```
3957 {
3958   "policies": {
3959     "SearchEngines": {
3960       "PreventInstalls": true | false
3961     }
3962   }
3963 }
3964 ```
3965 ### SearchEngines | Remove
3966
3967 Hide built-in search engines. This policy is only available on the ESR.
3968
3969 **Compatibility:** Firefox ESR 60.2\
3970 **CCK2 Equivalent:** `removeDefaultSearchEngines` (removed all built-in engines)\
3971 **Preferences Affected:** N/A
3972
3973 #### Windows (GPO)
3974 ```
3975 Software\Policies\Mozilla\Firefox\SearchEngines\Remove\1 = NAME_OF_SEARCH_ENGINE
3976 ```
3977 #### Windows (Intune)
3978 OMA-URI:
3979 ```
3980 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_Remove
3981 ```
3982 Value (string):
3983 ```
3984 <enabled/>
3985 <data id="SearchEngines_Remove" value="1&#xF000;NAME_OF_SEARCH_ENGINE"/>
3986 ```
3987 #### macOS
3988 ```
3989 <dict>
3990   <key>SearchEngines</key>
3991   <dict>
3992     <key>Remove</key>
3993     <array>
3994       <string>NAME_OF_SEARCH_ENGINE</string>
3995     </array>
3996   </dict>
3997 </dict>
3998 ```
3999 #### policies.json
4000 ```
4001 {
4002   "policies": {
4003     "SearchEngines": {
4004       "Remove": ["NAME_OF_SEARCH_ENGINE"]
4005     }
4006   }
4007 }
4008 ```
4009 ### SearchEngines | Add
4010
4011 Add new search engines (up to five). This policy is only available on the ESR. `Name` and `URLTemplate` are required.
4012
4013 `Name` is the name of the search engine.
4014
4015 `URLTemplate` is the search URL with {searchTerms} to substitute for the search term.
4016
4017 `Method` is either GET or POST
4018
4019 `IconURL` is a URL for the icon to use.
4020
4021 `Alias` is a keyword to use for the engine.
4022
4023 `Description` is a description of the search engine.
4024
4025 `PostData` is the POST data as name value pairs separated by &.
4026
4027 `SuggestURLTemplate` is a search suggestions URL with {searchTerms} to substitute for the search term.
4028
4029 **Compatibility:** Firefox ESR 60 (POST support in Firefox ESR 68)\
4030 **CCK2 Equivalent:** `searchplugins`\
4031 **Preferences Affected:** N/A
4032
4033 #### Windows (GPO)
4034 ```
4035 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Name = "Example1"
4036 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\URLTemplate = "https://www.example.org/q={searchTerms}"
4037 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Method = "GET" | "POST"
4038 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\IconURL = "https://www.example.org/favicon.ico"
4039 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Alias = "example"
4040 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Description = "Example Description"
4041 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\SuggestURLTemplate = "https://www.example.org/suggestions/q={searchTerms}"
4042 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\PostData = "name=value&q={searchTerms}"
4043 ```
4044 #### Windows (Intune)
4045 OMA-URI:
4046 ```
4047 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_1
4048 ```
4049 Value (string):
4050 ```
4051 <enabled/>
4052 <data id="SearchEngine_Name" value="Example1"/>
4053 <data id="SearchEngine_URLTemplate" value="https://www.example.org/q={searchTerms"/>
4054 <data id="SearchEngine_Method" value="GET | POST"/>
4055 <data id="SearchEngine_IconURL" value="https://www.example.org/favicon.ico"/>
4056 <data id="SearchEngine_Alias" value="example"/>
4057 <data id="SearchEngine_Description" value="Example Description"/>
4058 <data id="SearchEngine_SuggestURLTemplate" value="https://www.example.org/suggestions/q={searchTerms}"/>
4059 <data id="SearchEngine_PostData" value="name=value&amp;q={searchTerms}"/>
4060 ```
4061 #### macOS
4062 ```
4063 <dict>
4064   <key>SearchEngines</key>
4065   <dict>
4066     <key>Add</key>
4067     <array>
4068       <dict>
4069         <key>Name</key>
4070         <string>Example1</string>
4071         <key>URLTemplate</key>
4072         <string>https://www.example.org/q={searchTerms}</string>
4073         <key>Method</key>
4074         <string>GET | POST </string>
4075         <key>IconURL</key>
4076         <string>https://www.example.org/favicon.ico</string>
4077         <key>Alias</key>
4078         <string>example</string>
4079         <key>Description</key>
4080         <string>Example Description</string>
4081         <key>SuggestURLTemplate</key>
4082         <string>https://www.example.org/suggestions/q={searchTerms}</string>
4083         <key>PostData</key>
4084         <string>name=value&q={searchTerms}</string>
4085       </dict>
4086     <array>
4087   </dict>
4088 </dict>
4089 ```
4090 #### policies.json
4091 ```
4092 {
4093   "policies": {
4094     "SearchEngines": {
4095       "Add": [
4096         {
4097           "Name": "Example1",
4098           "URLTemplate": "https://www.example.org/q={searchTerms}",
4099           "Method": "GET" | "POST",
4100           "IconURL": "https://www.example.org/favicon.ico",
4101           "Alias": "example",
4102           "Description": "Description",
4103           "PostData": "name=value&q={searchTerms}",
4104           "SuggestURLTemplate": "https://www.example.org/suggestions/q={searchTerms}"
4105         }
4106       ]
4107     }
4108   }
4109 }
4110 ```
4111 ### SearchSuggestEnabled
4112
4113 Enable search suggestions.
4114
4115 **Compatibility:** Firefox 68, Firefox ESR 68\
4116 **CCK2 Equivalent:** N/A\
4117 **Preferences Affected:** `browser.urlbar.suggest.searches`,`browser.search.suggest.enabled`
4118
4119 #### Windows (GPO)
4120 ```
4121 Software\Policies\Mozilla\Firefox\SearchSuggestEnabled = 0x1 | 0x0
4122 ```
4123 #### Windows (Intune)
4124 OMA-URI:
4125 ```
4126 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SearchSuggestEnabled
4127 ```
4128 Value (string):
4129 ```
4130 <enabled/> or <disabled/>
4131 ```
4132 #### macOS
4133 ```
4134 <dict>
4135   <key>SearchSuggestEnabled</key>
4136   <true/> | <false/>
4137 </dict>
4138 ```
4139 #### policies.json
4140 ```
4141 {
4142   "policies": {
4143     "SearchSuggestEnabled": true | false
4144   }
4145 }
4146 ```
4147 ### SecurityDevices
4148
4149 Install PKCS #11 modules.
4150
4151 **Compatibility:** Firefox 64, Firefox ESR 60.4\
4152 **CCK2 Equivalent:** `certs.devices`\
4153 **Preferences Affected:** N/A
4154
4155 #### Windows (GPO)
4156 ```
4157 Software\Policies\Mozilla\Firefox\SecurityDevices\NAME_OF_DEVICE = PATH_TO_LIBRARY_FOR_DEVICE
4158 ```
4159 #### Windows (Intune)
4160 OMA-URI:
4161 ```
4162 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SecurityDevices
4163 ```
4164 Value (string):
4165 ```
4166 <enabled/>
4167 <data id="SecurityDevices" value="NAME_OF_DEVICE&#xF000;PATH_TO_LIBRARY_FOR_DEVICE"/>
4168 ```
4169 #### macOS
4170 ```
4171 <dict>
4172   <key>SecurityDevices</key>
4173   <dict>
4174     <key>NAME_OF_DEVICE</key>
4175     <string>PATH_TO_LIBRARY_FOR_DEVICE</string>
4176   </dict>
4177 </dict>
4178 ```
4179
4180 #### policies.json
4181 ```
4182 {
4183   "policies": {
4184     "SecurityDevices": {
4185       "NAME_OF_DEVICE": "PATH_TO_LIBRARY_FOR_DEVICE"
4186     }
4187   }
4188 }
4189 ```
4190 ### SSLVersionMax
4191
4192 Set and lock the maximum version of TLS.
4193
4194 **Compatibility:** Firefox 66, Firefox ESR 60.6\
4195 **CCK2 Equivalent:** N/A\
4196 **Preferences Affected:** `security.tls.version.max`
4197
4198 #### Windows (GPO)
4199 ```
4200 Software\Policies\Mozilla\Firefox\SSLVersionMax = "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
4201 ```
4202 #### Windows (Intune)
4203 OMA-URI:
4204 ```
4205 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SSLVersionMax
4206 ```
4207 Value (string):
4208 ```
4209 <enabled/>
4210 <data id="SSLVersion" value="tls1 | tls1.2 | tls1.3"/>
4211 ```
4212 #### macOS
4213 ```
4214 <dict>
4215   <key>SSLVersionMax</key>
4216   <string>tls1 | tls1.1 | tls1.2 | tls1.3</string>
4217 </dict>
4218 ```
4219
4220 #### policies.json
4221 ```
4222 {
4223   "policies": {
4224     "SSLVersionMax": "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
4225   }
4226 }
4227 ```
4228 ### SSLVersionMin
4229
4230 Set and lock the minimum version of TLS.
4231
4232 **Compatibility:** Firefox 66, Firefox ESR 60.6\
4233 **CCK2 Equivalent:** N/A\
4234 **Preferences Affected:** `security.tls.version.min`
4235
4236 #### Windows (GPO)
4237 ```
4238 Software\Policies\Mozilla\Firefox\SSLVersionMin = "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
4239 ```
4240 #### Windows (Intune)
4241 OMA-URI:
4242 ```
4243 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SSLVersionMin
4244 ```
4245 Value (string):
4246 ```
4247 <enabled/>
4248 <data id="SSLVersion" value="tls1 | tls1.2 | tls1.3"/>
4249 ```
4250 #### macOS
4251 ```
4252 <dict>
4253   <key>SSLVersionMin</key>
4254   <string>tls1 | tls1.1 | tls1.2 | tls1.3</string>
4255 </dict>
4256 ```
4257
4258 #### policies.json
4259 ```
4260 {
4261   "policies": {
4262     "SSLVersionMin": "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
4263   }
4264 }
4265 ```
4266 ### SupportMenu
4267 Add a menuitem to the help menu for specifying support information.
4268
4269 **Compatibility:** Firefox 68.0.1, Firefox ESR 68.0.1\
4270 **CCK2 Equivalent:** helpMenu\
4271 **Preferences Affected:** N/A
4272
4273 #### Windows (GPO)
4274 ```
4275 Software\Policies\Mozilla\Firefox\SupportMenu\Title = "Support Menu"
4276 Software\Policies\Mozilla\Firefox\SupportMenu\URL = "http://example.com/support"
4277 Software\Policies\Mozilla\Firefox\SupportMenu\AccessKey = "S"
4278 ```
4279 #### Windows (Intune)
4280 OMA-URI:
4281 ```
4282 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SupportMenu
4283 ```
4284 Value (string):
4285 ```
4286 <enabled/>
4287 <data id="SupportMenuTitle" value="Support Menu"/>
4288 <data id="SupportMenuURL" value="http://example.com/support"/>
4289 <data id="SupportMenuAccessKey" value="S">
4290 ```
4291 #### macOS
4292 ```
4293 <dict>
4294   <key>SupportMenu</key>
4295   <dict>
4296     <key>Title</key>
4297     <string>SupportMenu</string>
4298     <key>URL</key>
4299     <string>http://example.com/support</string>
4300     <key>AccessKey</key>
4301     <string>S</string>
4302   </dict>
4303 </dict>
4304 ```
4305 #### policies.json
4306 ```
4307 {
4308   "policies": {
4309     "SupportMenu": {
4310       "Title": "Support Menu",
4311       "URL": "http://example.com/support",
4312       "AccessKey": "S"
4313     }
4314   }
4315 }
4316 ```
4317 ### UserMessaging
4318
4319 Prevent installing search engines from webpages.
4320
4321 `WhatsNew` Remove the "What's New" icon and menuitem. (Firefox 75 only)
4322
4323 `ExtensionRecommendations` Don't recommend extensions.
4324
4325 `FeatureRecommendations` Don't recommend browser features.
4326
4327 `UrlbarInterventions` Don't offer Firefox specific suggestions in the URL bar. (Firefox 75 only)
4328
4329 **Compatibility:** Firefox 75, Firefox ESR 68.7\
4330 **CCK2 Equivalent:** N/A\
4331 **Preferences Affected:** `browser.messaging-system.whatsNewPanel.enabled`,`browser.newtabpage.activity-stream.asrouter.userprefs.cfr.addons`,`browser.newtabpage.activity-stream.asrouter.userprefs.cfr.features`
4332
4333 #### Windows (GPO)
4334 ```
4335 Software\Policies\Mozilla\Firefox\UserMessaging\WhatsNew = 0x1 | 0x0
4336 Software\Policies\Mozilla\Firefox\UserMessaging\ExtensionRecommendations = 0x1 | 0x0
4337 Software\Policies\Mozilla\Firefox\UserMessaging\FeatureRecommendations = 0x1 | 0x0
4338 Software\Policies\Mozilla\Firefox\UserMessaging\UrlbarInterventions = 0x1 | 0x0
4339 ```
4340 #### Windows (Intune)
4341 OMA-URI:
4342 ```
4343 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/UserMessaging_WhatsNew
4344 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/UserMessaging_ExtensionRecommendations
4345 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/UserMessaging_FeatureRecommendations
4346 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/UserMessaging_UrlbarInterventions
4347 ```
4348 Value (string):
4349 ```
4350 <enabled/> or <disabled/>
4351 ```
4352 #### macOS
4353 ```
4354 <dict>
4355   <key>UserMessaging</key>
4356   <dict>
4357     <key>WhatsNew</key>
4358     <true/> | <false/>
4359     <key>ExtensionRecommendations</key>
4360     <true/> | <false/>
4361     <key>FeatureRecommendations</key>
4362     <true/> | <false/>
4363     <key>UrlbarInterventions</key>
4364     <true/> | <false/>
4365   </dict>
4366 </dict>
4367 ```
4368 #### policies.json
4369 ```
4370 {
4371   "policies": {
4372     "UserMessaging": {
4373       "WhatsNew": true | false,
4374       "ExtensionRecommendations": true | false,
4375       "FeatureRecommendations": true | false,
4376       "UrlbarInterventions": true | false
4377     }
4378   }
4379 }
4380 ```
4381 ### WebsiteFilter
4382 Block websites from being visited. The parameters take an array of Match Patterns, as documented in https://developer.mozilla.org/en-US/Add-ons/WebExtensions/Match_patterns. Only http/https addresses are supported at the moment. The arrays are limited to 1000 entries each.
4383
4384 **Compatibility:** Firefox 60, Firefox ESR 60\
4385 **CCK2 Equivalent:** N/A\
4386 **Preferences Affected:** N/A
4387
4388 #### Windows (GPO)
4389 ```
4390 Software\Policies\Mozilla\Firefox\WebsiteFilter\Block\1 = "<all_urls>"
4391 Software\Policies\Mozilla\Firefox\WebsiteFilter\Exceptions\1 = "http://example.org/*"
4392 ```
4393 #### Windows (Intune)
4394 OMA-URI:
4395 ```
4396 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/B_WebsiteFilter_Block
4397 ```
4398 Value (string):
4399 ```
4400 <enabled/>
4401 <data id="WebsiteFilter" value="1&#xF000;<all_urls>"/>
4402 ```
4403 OMA-URI:
4404 ```
4405 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/B_WebsiteFilter_Exceptions
4406 ```
4407 Value (string):
4408 ```
4409 <enabled/>
4410 <data id="WebsiteFilter" value="1&#xF000;http://example.org/*"/>
4411 ```
4412 #### macOS
4413 ```
4414 <dict>
4415   <key>WebsiteFilter</key>
4416   <dict>
4417     <key>Block</key>
4418     <array>
4419       <string><all_urls></string>
4420     </array>
4421     <key>Exceptions</key>
4422     <array>
4423       <string>http://example.org/*</string>
4424     </array>
4425   </dict>
4426
4427 </dict>
4428 ```
4429 #### policies.json
4430 ```
4431 {
4432   "policies": {
4433     "WebsiteFilter": {
4434       "Block": ["<all_urls>"],
4435       "Exceptions": ["http://example.org/*"]
4436     }
4437   }
4438 }
4439 ```