README.md

   1 **These policies are in active development and so might contain changes that do not work with current versions of Firefox.**
   2
   3 **You should use the [officially released versions](https://github.com/mozilla/policy-templates/releases) if you are deploying changes.**
   4
   5 Policies can be specified using the [Group Policy templates on Windows](https://github.com/mozilla/policy-templates/tree/master/windows), [Intune on Windows](https://support.mozilla.org/kb/managing-firefox-intune), [configuration profiles on macOS](https://github.com/mozilla/policy-templates/tree/master/mac), or by creating a file called `policies.json`. On Windows, create a directory called `distribution` where the EXE is located and place the file there. On Mac, the file goes into `Firefox.app/Contents/Resources/distribution`.  On Linux, the file goes into `firefox/distribution`, where `firefox` is the installation directory for firefox, which varies by distribution or you can specify system-wide policy by placing the file in `/etc/firefox/policies`.
   6
   7 | Policy Name | Description
   8 | --- | --- |
   9 | **[`AppAutoUpdate`](#appautoupdate)** |  Enable or disable automatic application update.
  10 | **[`AppUpdateURL`](#appupdateurl)** | Change the URL for application update.
  11 | **[`Authentication`](#authentication)** | Configure sites that support integrated authentication.
  12 | **[`BlockAboutAddons`](#blockaboutaddons)** | Block access to the Add-ons Manager (about:addons).
  13 | **[`BlockAboutConfig`](#blockaboutconfig)** | Block access to about:config.
  14 | **[`BlockAboutProfiles`](#blockaboutprofiles)** | Block access to About Profiles (about:profiles).
  15 | **[`BlockAboutSupport`](#blockaboutsupport)** | Block access to Troubleshooting Information (about:support).
  16 | **[`Bookmarks`](#bookmarks)** | Add bookmarks in either the bookmarks toolbar or menu.
  17 | **[`CaptivePortal`](#captiveportal)** | Enable or disable the detection of captive portals.
  18 | **[`Certificates`](#certificates)** |
  19 | **[`Certificates -> ImportEnterpriseRoots`](#certificates--importenterpriseroots)** | Trust certificates that have been added to the operating system certificate store by a user or administrator.
  20 | **[`Certificates -> Install`](#certificates--install)** | Install certificates into the Firefox certificate store.
  21 | **[`Cookies`](#cookies)** | Configure cookie preferences.
  22 | **[`DisableAppUpdate`](#disableappupdate)** | Turn off application updates.
  23 | **[`DisableBuiltinPDFViewer`](#disablebuiltinpdfviewer)** | Disable the built in PDF viewer.
  24 | **[`DisabledCiphers`](#disabledciphers)** | Disable ciphers.
  25 | **[`DisableDefaultBrowserAgent`](#disabledefaultbrowseragent)** | Prevent the default browser agent from taking any actions (Windows only).
  26 | **[`DisableDeveloperTools`](#disabledevelopertools)** | Remove access to all developer tools.
  27 | **[`DisableFeedbackCommands`](#disablefeedbackcommands)** | Disable the menus for reporting sites.
  28 | **[`DisableFirefoxScreenshots`](#disablefirefoxscreenshots)** | Remove access to Firefox Screenshots.
  29 | **[`DisableFirefoxAccounts`](#disablefirefoxaccounts)** | Disable Firefox Accounts integration (Sync).
  30 | **[`DisableFirefoxStudies`](#disablefirefoxstudies)** | Disable Firefox studies (Shield).
  31 | **[`DisableForgetButton`](#disableforgetbutton)** | Disable the "Forget" button.
  32 | **[`DisableFormHistory`](#disableformhistory)** | Turn off saving information on web forms and the search bar.
  33 | **[`DisableMasterPasswordCreation`](#disablemasterpasswordcreation)** | Remove the master password functionality.
  34 | **[`DisablePasswordReveal`](#disablepasswordreveal)** | Do not allow passwords to be revealed in saved logins.
  35 | **[`DisablePocket`](#disablepocket)** | Remove Pocket in the Firefox UI.
  36 | **[`DisablePrivateBrowsing`](#disableprivatebrowsing)** | Remove access to private browsing.
  37 | **[`DisableProfileImport`](#disableprofileimport)** | Disables the "Import data from another browser" option in the bookmarks window.
  38 | **[`DisableProfileRefresh`](#disableprofilerefresh)** | Disable the Refresh Firefox button on about:support and support.mozilla.org
  39 | **[`DisableSafeMode`](#disablesafemode)** | Disable safe mode within the browser.
  40 | **[`DisableSecurityBypass`](#disablesecuritybypass)** | Prevent the user from bypassing security in certain cases.
  41 | **[`DisableSetDesktopBackground`](#disablesetdesktopbackground)** | Remove the "Set As Desktop Background..." menuitem when right clicking on an image.
  42 | **[`DisableSystemAddonUpdate`](#disablesystemaddonupdate)** | Prevent system add-ons from being installed or update.
  43 | **[`DisableTelemetry`](#disabletelemetry)** | DisableTelemetry
  44 | **[`DisplayBookmarksToolbar`](#displaybookmarkstoolbar)** | Set the initial state of the bookmarks toolbar.
  45 | **[`DisplayMenuBar (Deprecated)`](#displaymenubar-deprecated)** | Set the initial state of the menubar.
  46 | **[`DisplayMenuBar`](#displaymenubar)** | Set the state of the menubar.
  47 | **[`DNSOverHTTPS`](#dnsoverhttps)** | Configure DNS over HTTPS.
  48 | **[`DontCheckDefaultBrowser`](#dontcheckdefaultbrowser)** | Don't check if Firefox is the default browser at startup.
  49 | **[`DefaultDownloadDirectory`](#defaultdownloaddirectory)** | Set the default download directory.
  50 | **[`DownloadDirectory`](#downloaddirectory)** | Set and lock the download directory.
  51 | **[`EnableTrackingProtection`](#enabletrackingprotection)** | Configure tracking protection.
  52 | **[`EncryptedMediaExtensions`](#encryptedmediaextensions)** | Enable or disable Encrypted Media Extensions and optionally lock it.
  53 | **[`EnterprisePoliciesEnabled`](#enterprisepoliciesenabled)** | Enable policy support on macOS.
  54 | **[`Extensions`](#extensions)** | Control the installation, uninstallation and locking of extensions.
  55 | **[`ExtensionSettings`](#extensionsettings)** | Manage all aspects of extensions.
  56 | **[`ExtensionUpdate`](#extensionupdate)** | Control extension updates.
  57 | **[`FlashPlugin`](#flashplugin)** | Configure the default Flash plugin policy as well as origins for which Flash is allowed.
  58 | **[`FirefoxHome`](#firefoxhome)** | Customize the Firefox Home page.
  59 | **[`HardwareAcceleration`](#hardwareacceleration)** | Control hardware acceleration.
  60 | **[`Handlers`](#handlers)** | Configure default application handlers.
  61 | **[`Homepage`](#homepage)** | Configure the default homepage and how Firefox starts.
  62 | **[`InstallAddonsPermission`](#installaddonspermission)** | Configure the default extension install policy as well as origins for extension installs are allowed.
  63 | **[`LegacyProfiles`](#legacyprofiles)** | Disable the feature enforcing a separate profile for each installation.
  64 | **[`LocalFileLinks`](#localfilelinks)** | Enable linking to local files by origin.
  65 | **[`ManagedBookmarks`](#managedbookmarks)** | Configures a list of bookmarks managed by an administrator that cannot be changed by the user.
  66 | **[`PrimaryPassword`](#primarypassword)** | Require or prevent using a primary (formerly master) password.
  67 | **[`NetworkPrediction`](#networkprediction)** | Enable or disable network prediction (DNS prefetching).
  68 | **[`NewTabPage`](#newtabpage)** | Enable or disable the New Tab page.
  69 | **[`NoDefaultBookmarks`](#nodefaultbookmarks)** | Disable the creation of default bookmarks.
  70 | **[`OfferToSaveLogins`](#offertosavelogins)** | Control whether or not Firefox offers to save passwords.
  71 | **[`OfferToSaveLoginsDefault`](#offertosaveloginsdefault)** | Set the default value for whether or not Firefox offers to save passwords.
  72 | **[`OverrideFirstRunPage`](#overridefirstrunpage)** | Override the first run page.
  73 | **[`OverridePostUpdatePage`](#overridepostupdatepage)** | Override the upgrade page.
  74 | **[`PasswordManagerEnabled`](#passwordmanagerenabled)** | Remove (some) access to the password manager.
  75 | **[`PDFjs`](#pdfjs)** | Disable or configure PDF.js, the built-in PDF viewer.
  76 | **[`Permissions`](#permissions)** | Set permissions associated with camera, microphone, location, and notifications.
  77 | **[`PictureInPicture`](#pictureinpicture)** | Enable or disable Picture-in-Picture.
  78 | **[`PopupBlocking`](#popupblocking)** | Configure the default pop-up window policy as well as origins for which pop-up windows are allowed.
  79 | **[`Preferences`](#preferences)** | Set and lock preferences.
  80 | **[`Preferences (Deprecated)`](#preferences-deprecated)** | Set and lock some preferences.
  81 | **[`PromptForDownloadLocation`](#promptfordownloadlocation)** | Ask where to save each file before downloading.
  82 | **[`Proxy`](#proxy)** | Configure proxy settings.
  83 | **[`RequestedLocales`](#requestedlocales)** | Set the the list of requested locales for the application in order of preference.
  84 | **[`SanitizeOnShutdown` (All)](#sanitizeonshutdown-all)** | Clear all data on shutdown.
  85 | **[`SanitizeOnShutdown` (Selective)](#sanitizeonshutdown-selective)** | Clear data on shutdown.
  86 | **[`SearchBar`](#searchbar)** | Set whether or not search bar is displayed.
  87 | **[`SearchEngines`](#searchengines-this-policy-is-only-available-on-the-esr)** |
  88 | **[`SearchEngines -> Default`](#searchengines--default)** | Set the default search engine.
  89 | **[`SearchEngines -> PreventInstalls`](#searchengines--preventinstalls)** | Prevent installing search engines from webpages.
  90 | **[`SearchEngines -> Remove`](#searchengines--remove)** | Hide built-in search engines.
  91 | **[`SearchEngines -> Add`](#searchengines--add)** | Add new search engines.
  92 | **[`SearchSuggestEnabled`](#searchsuggestenabled)** | Enable search suggestions.
  93 | **[`SecurityDevices`](#securitydevices)** | Install PKCS #11 modules.
  94 | **[`SSLVersionMax`](#sslversionmax)** | Set and lock the maximum version of TLS.
  95 | **[`SSLVersionMin`](#sslversionmin)** | Set and lock the minimum version of TLS.
  96 | **[`SupportMenu`](#supportmenu)** | Add a menuitem to the help menu for specifying support information.
  97 | **[`UserMessaging`](#usermessaging)** | Don't show certain messages to the user.
  98 | **[`WebsiteFilter`](#websitefilter)** | Block websites from being visited.
  99
 100 ### AppAutoUpdate
 101
 102 Enable or disable **automatic** application update.
 103
 104 If set to true, application updates are installed without user approval.
 105
 106 If set to false, application updates are downloaded but the user can choose when to install the update.
 107
 108 If you have disabled updates via DisableAppUpdate, this policy has no effect.
 109
 110 **Compatibility:** Firefox 75, Firefox ESR 68.7\
 111 **CCK2 Equivalent:** N/A\
 112 **Preferences Affected:** app.update.auto
 113
 114 #### Windows (GPO)
 115 ```
 116 Software\Policies\Mozilla\Firefox\AppAutoUpdate = 0x1 | 0x0
 117 ```
 118 #### Windows (Intune)
 119 OMA-URI:
 120 ```
 121 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AppAutoUpdate
 122 ```
 123 Value (string):
 124 ```
 125 <enabled/> or <disabled/>
 126 ```
 127 #### macOS
 128 ```
 129 <dict>
 130   <key>AppAutoUpdate</key>
 131   <true/> | <false/>
 132 </dict>
 133 ```
 134 #### policies.json
 135 ```
 136 {
 137   "policies": {
 138     "AppAutoUpdate": true | false
 139   }
 140 }
 141 ```
 142 ### AppUpdateURL
 143
 144 Change the URL for application update.
 145
 146 **Compatibility:** Firefox 62, Firefox ESR 60.2\
 147 **CCK2 Equivalent:** N/A\
 148 **Preferences Affected:** `app.update.url`
 149
 150 #### Windows (GPO)
 151 ```
 152 Software\Policies\Mozilla\Firefox\AppUpdateURL = "https://yoursite.com"
 153 ```
 154 #### Windows (Intune)
 155 OMA-URI:
 156 ```
 157 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AppUpdateURL
 158 ```
 159 Value (string):
 160 ```
 161 <enabled/>
 162 <data id="AppUpdateURL" value="https://yoursite.com"/>
 163 ```
 164 #### macOS
 165 ```
 166 <dict>
 167   <key>AppUpdateURL</key>
 168   <string>https://yoursite.com</string>
 169 </dict>
 170 ```
 171 #### policies.json
 172 ```
 173 {
 174   "policies": {
 175     "AppUpdateURL": "https://yoursite.com"
 176   }
 177 }
 178 ```
 179 ### Authentication
 180
 181 Configure sites that support integrated authentication.
 182
 183 See https://developer.mozilla.org/en-US/docs/Mozilla/Integrated_authentication for more information.
 184
 185 `PrivateBrowsing` enables integrated authentication in private browsing.
 186
 187 **Compatibility:** Firefox 60, Firefox ESR 60 (AllowNonFQDN added in 62/60.2, AllowProxies added in 70/68.2, Locked added in 71/68.3, PrivateBrowsing added in 77/68.9)\
 188 **CCK2 Equivalent:** N/A\
 189 **Preferences Affected:** `network.negotiate-auth.trusted-uris`,`network.negotiate-auth.delegation-uris`,`network.automatic-ntlm-auth.trusted-uris`,`network.automatic-ntlm-auth.allow-non-fqdn`,`network.negotiate-auth.allow-non-fqdn`,`network.automatic-ntlm-auth.allow-proxies`,`network.negotiate-auth.allow-proxies`,`network.auth.private-browsing-sso`
 190
 191 #### Windows (GPO)
 192 ```
 193 Software\Policies\Mozilla\Firefox\Authentication\SPNEGO\1 = "mydomain.com"
 194 Software\Policies\Mozilla\Firefox\Authentication\SPNEGO\2 = "https://myotherdomain.com"
 195 Software\Policies\Mozilla\Firefox\Authentication\Delegated\1 = "mydomain.com"
 196 Software\Policies\Mozilla\Firefox\Authentication\Delegated\2 = "https://myotherdomain.com"
 197 Software\Policies\Mozilla\Firefox\Authentication\NTLM\1 = "mydomain.com"
 198 Software\Policies\Mozilla\Firefox\Authentication\NTLM\2 = "https://myotherdomain.com"
 199 Software\Policies\Mozilla\Firefox\Authentication\AllowNonFQDN\SPNEGO = 0x1 | 0x0
 200 Software\Policies\Mozilla\Firefox\Authentication\AllowNonFQDN\NTLM = 0x1 | 0x0
 201 Software\Policies\Mozilla\Firefox\Authentication\AllowProxies\SPNEGO = 0x1 | 0x0
 202 Software\Policies\Mozilla\Firefox\Authentication\AllowProxies\NTLM = 0x1 | 0x0
 203 Software\Policies\Mozilla\Firefox\Authentication\Locked = 0x1 | 0x0
 204 Software\Policies\Mozilla\Firefox\Authentication\PrivateBrowsing = 0x1 | 0x0
 205 ```
 206 #### Windows (Intune)
 207 OMA-URI:
 208 ```
 209 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_SPNEGO
 210 ```
 211 Value (string):
 212 ```
 213 <enabled/>
 214 <data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
 215 ```
 216 OMA-URI:
 217 ```
 218 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_Delegated
 219 ```
 220 Value (string):
 221 ```
 222 <enabled/>
 223 <data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
 224 ```
 225 OMA-URI:
 226 ```
 227 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_NTLM
 228 ```
 229 Value (string):
 230 ```
 231 <enabled/>
 232 <data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
 233 ```
 234 OMA-URI:
 235 ```
 236 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_AllowNonFQDN
 237 ```
 238 Value (string):
 239 ```
 240 <enabled/>
 241 <data id="Authentication_AllowNonFQDN_NTLM" value="true | false"/>
 242 <data id="Authentication_AllowNonFQDN_SPNEGO" value="true | false"/>
 243 ```
 244 OMA-URI:
 245 ```
 246 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_Locked
 247 ```
 248 Value (string):
 249 ```
 250 <enabled/> or <disabled/>
 251 ```
 252 OMA-URI:
 253 ```
 254 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_PrivateBrowsing
 255 ```
 256 Value (string):
 257 ```
 258 <enabled/> or <disabled/>
 259 ```
 260 #### macOS
 261 ```
 262 <dict>
 263   <key>Authentication</key>
 264   <dict>
 265     <key>SPNEGO</key>
 266     <array>
 267       <string>mydomain.com</string>
 268       <string>https://myotherdomain.com</string>
 269     </array>
 270     <key>Delegated</key>
 271     <array>
 272       <string>mydomain.com</string>
 273       <string>https://myotherdomain.com</string>
 274     </array>
 275     <key>NTLM</key>
 276     <array>
 277       <string>mydomain.com</string>
 278       <string>https://myotherdomain.com</string>
 279     </array>
 280     <key>AllowNonFQDN</key>
 281       <dict>
 282       <key>SPNEGO</key>
 283       <true/> | <false/>
 284       <key>NTLM</key>
 285       <true/> | <false/>
 286     </dict>
 287     <key>AllowProxies</key>
 288       <dict>
 289       <key>SPNEGO</key>
 290       <true/> | <false/>
 291       <key>NTLM</key>
 292       <true/> | <false/>
 293     </dict>
 294     <key>Locked</key>
 295     <true/> | <false/>
 296     <key>PrivateBrowsing</key>
 297     <true/> | <false/>
 298   </dict>
 299 </dict>
 300 ```
 301 #### policies.json
 302 ```
 303 {
 304   "policies": {
 305     "Authentication": {
 306       "SPNEGO": ["mydomain.com", "https://myotherdomain.com"],
 307       "Delegated": ["mydomain.com", "https://myotherdomain.com"],
 308       "NTLM": ["mydomain.com", "https://myotherdomain.com"],
 309       "AllowNonFQDN": {
 310         "SPNEGO": true | false,
 311         "NTLM": true | false
 312       },
 313       "AllowProxies": {
 314         "SPNEGO": true | false,
 315         "NTLM": true | false
 316       },
 317       "Locked": true | false,
 318       "PrivateBrowsing": true | false
 319     }
 320   }
 321 }
 322 ```
 323 ### BlockAboutAddons
 324
 325 Block access to the Add-ons Manager (about:addons).
 326
 327 **Compatibility:** Firefox 60, Firefox ESR 60\
 328 **CCK2 Equivalent:** `disableAddonsManager`\
 329 **Preferences Affected:** N/A
 330
 331 #### Windows (GPO)
 332 ```
 333 Software\Policies\Mozilla\Firefox\BlockAboutAddons = 0x1 | 0x0
 334 ```
 335 #### Windows (Intune)
 336 OMA-URI:
 337 ```
 338 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutAddons
 339 ```
 340 Value (string):
 341 ```
 342 <enabled/> or <disabled/>
 343 ```
 344 #### macOS
 345 ```
 346 <dict>
 347   <key>BlockAboutAddons</key>
 348   <true/> | <false/>
 349 </dict>
 350 ```
 351 #### policies.json
 352 ```
 353 {
 354   "policies": {
 355     "BlockAboutAddons": true | false
 356   }
 357 }
 358 ```
 359 ### BlockAboutConfig
 360
 361 Block access to about:config.
 362
 363 **Compatibility:** Firefox 60, Firefox ESR 60\
 364 **CCK2 Equivalent:** `disableAboutConfig`\
 365 **Preferences Affected:** N/A
 366
 367 #### Windows (GPO)
 368 ```
 369 Software\Policies\Mozilla\Firefox\BlockAboutConfig = 0x1 | 0x0
 370 ```
 371 #### Windows (Intune)
 372 OMA-URI:
 373 ```
 374 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutConfig
 375 ```
 376 Value (string):
 377 ```
 378 <enabled/> or <disabled/>
 379 ```
 380 #### macOS
 381 ```
 382 <dict>
 383   <key>BlockAboutConfig</key>
 384   <true/> | <false/>
 385 </dict>
 386 ```
 387 #### policies.json
 388 ```
 389 {
 390   "policies": {
 391     "BlockAboutConfig": true | false
 392   }
 393 }
 394 ```
 395 ### BlockAboutProfiles
 396
 397 Block access to About Profiles (about:profiles).
 398
 399 **Compatibility:** Firefox 60, Firefox ESR 60\
 400 **CCK2 Equivalent:** `disableAboutProfiles`\
 401 **Preferences Affected:** N/A
 402
 403 #### Windows (GPO)
 404 ```
 405 Software\Policies\Mozilla\Firefox\BlockAboutProfiles = 0x1 | 0x0
 406 ```
 407 #### Windows (Intune)
 408 OMA-URI:
 409 ```
 410 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutProfiles
 411 ```
 412 Value (string):
 413 ```
 414 <enabled/> or <disabled/>
 415 ```
 416 #### macOS
 417 ```
 418 <dict>
 419   <key>BlockAboutProfiles</key>
 420   <true/> | <false/>
 421 </dict>
 422 ```
 423 #### policies.json
 424 ```
 425 {
 426   "policies": {
 427     "BlockAboutProfiles": true | false
 428   }
 429 }
 430 ```
 431 ### BlockAboutSupport
 432
 433 Block access to Troubleshooting Information (about:support).
 434
 435 **Compatibility:** Firefox 60, Firefox ESR 60\
 436 **CCK2 Equivalent:** `disableAboutSupport`\
 437 **Preferences Affected:** N/A
 438
 439 #### Windows (GPO)
 440 ```
 441 Software\Policies\Mozilla\Firefox\BlockAboutSupport = 0x1 | 0x0
 442 ```
 443 #### Windows (Intune)
 444 OMA-URI:
 445 ```
 446 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutSupport
 447 ```
 448 Value (string):
 449 ```
 450 <enabled/> or <disabled/>
 451 ```
 452 #### macOS
 453 ```
 454 <dict>
 455   <key>BlockAboutSupport</key>
 456   <true/> | <false/>
 457 </dict>
 458 ```
 459 #### policies.json
 460 ```
 461 {
 462   "policies": {
 463     "BlockAboutSupport": true | false
 464   }
 465 }
 466 ```
 467 ### Bookmarks
 468
 469 Add bookmarks in either the bookmarks toolbar or menu. Only `Title` and `URL` are required. If `Placement` is not specified, the bookmark will be placed on the toolbar. If `Folder` is specified, it is automatically created and bookmarks with the same folder name are grouped together.
 470
 471 **Compatibility:** Firefox 60, Firefox ESR 60\
 472 **CCK2 Equivalent:** `bookmarks.toolbar`,`bookmarks.menu`\
 473 **Preferences Affected:** N/A
 474
 475 #### Windows (GPO)
 476 ```
 477 Software\Policies\Mozilla\Firefox\Bookmarks\1\Title = "Example"
 478 Software\Policies\Mozilla\Firefox\Bookmarks\1\URL = "https://example.com"
 479 Software\Policies\Mozilla\Firefox\Bookmarks\1\Favicon = "https://example.com/favicon.ico"
 480 Software\Policies\Mozilla\Firefox\Bookmarks\1\Placement = "toolbar" | "menu"
 481 Software\Policies\Mozilla\Firefox\Bookmarks\1\Folder = "FolderName"
 482 ```
 483 #### Windows (Intune)
 484 OMA-URI:
 485 ```
 486 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Bookmarks/Bookmark01
 487 ```
 488 Value (string):
 489 ```
 490 <enabled/>
 491 <data id="BookmarkTitle" value="Example"/>
 492 <data id="BookmarkURL" value="https://example.com"/>
 493 <data id="BookmarkFavicon" value="https://example.com/favicon.ico"/>
 494 <data id="BookmarkPlacement" value="toolbar | menu"/>
 495 <data id="BookmarkFolder" value="FolderName"/>
 496 ```
 497 #### macOS
 498 ```
 499 <dict>
 500   <key>Bookmarks</key>
 501   <array>
 502     <dict>
 503       <key>Title</key>
 504       <string>Example</string>
 505       <key>URL</key>
 506       <string>https://example.com</string>
 507       <key>Favicon</key>
 508       <string>https://example.com/favicon.ico</string>
 509       <key>Placement</key>
 510       <string>toolbar | menu</string>
 511       <key>Folder</key>
 512       <string>FolderName</string>
 513     </dict>
 514   </array>
 515 </dict>
 516 ```
 517 #### policies.json
 518 ```
 519 {
 520   "policies": {
 521     "Bookmarks": [
 522       {
 523         "Title": "Example",
 524         "URL": "https://example.com",
 525         "Favicon": "https://example.com/favicon.ico",
 526         "Placement": "toolbar" | "menu",
 527         "Folder": "FolderName"
 528       }
 529     ]
 530   }
 531 }
 532 ```
 533 ### CaptivePortal
 534 Enable or disable the detection of captive portals.
 535
 536 **Compatibility:** Firefox 67, Firefox ESR 60.7\
 537 **CCK2 Equivalent:** N/A\
 538 **Preferences Affected:** `network.captive-portal-service.enabled`
 539
 540 #### Windows (GPO)
 541 ```
 542 Software\Policies\Mozilla\Firefox\CaptivePortal = 0x1 | 0x0
 543 ```
 544 #### Windows (Intune)
 545 OMA-URI:
 546 ```
 547 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/CaptivePortal
 548 ```
 549 Value (string):
 550 ```
 551 <enabled/> or <disabled/>
 552 ```
 553 #### macOS
 554 ```
 555 <dict>
 556   <key>CaptivePortal</key>
 557   <true/> | <false/>
 558 </dict>
 559 ```
 560 #### policies.json
 561 ```
 562 {
 563   "policies": {
 564     "CaptivePortal": true | false
 565   }
 566 }
 567 ```
 568 ### Certificates
 569
 570 ### Certificates | ImportEnterpriseRoots
 571
 572 Trust certificates that have been added to the operating system certificate store by a user or administrator.
 573
 574 Note: This policy only works on Windows and macOS. For Linux discussion, see [bug 1600509](https://bugzilla.mozilla.org/show_bug.cgi?id=1600509).
 575
 576 See https://support.mozilla.org/kb/setting-certificate-authorities-firefox for more detail.
 577
 578 **Compatibility:** Firefox 60, Firefox ESR 60 (macOS support in Firefox 63, Firefox ESR 68)\
 579 **CCK2 Equivalent:** N/A\
 580 **Preferences Affected:** `security.enterprise_roots.enabled`
 581
 582 #### Windows (GPO)
 583 ```
 584 Software\Policies\Mozilla\Firefox\Certificates\ImportEnterpriseRoots = 0x1 | 0x0
 585 ```
 586 #### Windows (Intune)
 587 OMA-URI:
 588 ```
 589 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Certificates/Certificates_ImportEnterpriseRoots
 590 ```
 591 Value (string):
 592 ```
 593 <enabled/> or <disabled/>
 594 ```
 595 #### macOS
 596 ```
 597 <dict>
 598   <key>Certificates</key>
 599   <dict>
 600     <key>ImportEnterpriseRoots</key>
 601     <true/> | <false/>
 602   </dict>
 603 </dict>
 604 ```
 605 #### policies.json
 606 ```
 607 {
 608   "policies": {
 609     "Certificates": {
 610       "ImportEnterpriseRoots": true | false
 611     }
 612   }
 613 }
 614 ```
 615 ### Certificates | Install
 616
 617 Install certificates into the Firefox certificate store. If only a filename is specified, Firefox searches for the file in the following locations:
 618
 619 - Windows
 620   - %USERPROFILE%\AppData\Local\Mozilla\Certificates
 621   - %USERPROFILE%\AppData\Roaming\Mozilla\Certificates
 622 - macOS
 623   - /Library/Application Support/Mozilla/Certificates
 624   - ~/Library/Application Support/Mozilla/Certificates
 625 - Linux
 626   - /usr/lib/mozilla/certificates
 627   - /usr/lib64/mozilla/certificates
 628   - ~/.mozilla/certificates
 629
 630 Starting with Firefox 65, Firefox 60.5 ESR, a fully qualified path can be used, including UNC paths. You should use the native path style for your operating system. We do not support using %USERPROFILE% or other environment variables on Windows.
 631
 632 If you are specifying the path in the policies.json file on Windows, you need to escape your backslashes (`\\`) which means that for UNC paths, you need to escape both (`\\\\`). If you use group policy, you only need one backslash.
 633
 634 Certificates are installed using the trust string `CT,CT,`.
 635
 636 Binary (DER) and ASCII (PEM) certificates are both supported.
 637
 638 **Compatibility:** Firefox 64, Firefox ESR 64\
 639 **CCK2 Equivalent:** `certs.ca`\
 640 **Preferences Affected:** N/A
 641
 642 #### Windows (GPO)
 643 ```
 644 Software\Policies\Mozilla\Firefox\Certificates\Install\1 = "cert1.der"
 645 Software\Policies\Mozilla\Firefox\Certificates\Install\2 = "C:\Users\username\cert2.pem"
 646 ```
 647 #### Windows (Intune)
 648 OMA-URI:
 649 ```
 650 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Certificates/Certificates_Install
 651 ```
 652 Value (string):
 653 ```
 654 <enabled/>
 655 <data id="Certificates_Install" value="1&#xF000;cert1.der&#xF000;2&#xF000;C:\Users\username\cert2.pem"/>
 656 ```
 657 #### macOS
 658 ```
 659 <dict>
 660   <key>Certificates</key>
 661   <dict>
 662     <key>Install</key>
 663     <array>
 664       <string>cert1.der</string>
 665       <string>/Users/username/cert2.pem</string>
 666     </array>
 667   </dict>
 668 </dict>
 669 ```
 670 #### policies.json
 671 ```
 672 {
 673   "policies": {
 674     "Certificates": {
 675       "Install": ["cert1.der", "/home/username/cert2.pem"]
 676     }
 677   }
 678 }
 679 ```
 680 ### Cookies
 681 Configure cookie preferences.
 682
 683 `Allow` is a list of origins (not domains) where cookies are always allowed. You must include http or https.
 684
 685 `AllowSession` is a list of origins (not domains) where cookies are only allowed for the current session. You must include http or https.
 686
 687 `Block` is a list of origins (not domains) where cookies are always blocked. You must include http or https.
 688
 689 `Default` determines whether cookies are accepted at all.
 690
 691 `AcceptThirdParty` determines how third-party cookies are handled.
 692
 693 `ExpireAtSessionEnd` determines when cookies expire.
 694
 695 `RejectTracker` only rejects cookies for trackers.
 696
 697 `Locked` prevents the user from changing cookie preferences.
 698
 699 **Compatibility:** Firefox 60, Firefox ESR 60 (RejectTracker added in Firefox 63, AllowSession added in Firefox 79/78.1)\
 700 **CCK2 Equivalent:** N/A\
 701 **Preferences Affected:** `network.cookie.cookieBehavior`,`network.cookie.lifetimePolicy`
 702
 703 #### Windows (GPO)
 704 ```
 705 Software\Policies\Mozilla\Firefox\Cookies\Allow\1 = "https://example.com"
 706 Software\Policies\Mozilla\Firefox\Cookies\AllowSession\1 = "https://example.edu"
 707 Software\Policies\Mozilla\Firefox\Cookies\Block\1 = "https://example.org"
 708 Software\Policies\Mozilla\Firefox\Cookies\Default = 0x1 | 0x0
 709 Software\Policies\Mozilla\Firefox\Cookies\AcceptThirdParty = "always" | "never" | "from-visited"
 710 Software\Policies\Mozilla\Firefox\Cookies\ExpireAtSessionEnd = 0x1 | 0x0
 711 Software\Policies\Mozilla\Firefox\Cookies\RejectTracker = 0x1 | 0x0
 712 Software\Policies\Mozilla\Firefox\Cookies\Locked = 0x1 | 0x0
 713 ```
 714 #### Windows (Intune)
 715 OMA-URI:
 716 ```
 717 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Allow
 718 ```
 719 Value (string):
 720 ```
 721 <enabled/>
 722 <data id="Cookies_Allow" value="1&#xF000;https://example.com"/>
 723 ```
 724 OMA-URI:
 725 ```
 726 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_AllowSession
 727 ```
 728 Value (string):
 729 ```
 730 <enabled/>
 731 <data id="Cookies_Allow" value="1&#xF000;https://example.edu"/>
 732 ```
 733 OMA-URI:
 734 ```
 735 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Block
 736 ```
 737 Value (string):
 738 ```
 739 <enabled/>
 740 <data id="Cookies_Block" value="1&#xF000;https://example.org"/>
 741 ```
 742 OMA-URI:
 743 ```
 744 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Default
 745 ```
 746 Value (string):
 747 ```
 748 <enabled/> or <disabled/>
 749 ```
 750 OMA-URI:
 751 ```
 752 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_AcceptThirdParty
 753 ```
 754 Value (string):
 755 ```
 756 <enabled/>
 757 <data id="Cookies_AcceptThirdParty" value="always | never | from-visited"/>
 758 ```
 759 OMA-URI:
 760 ```
 761 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_ExpireAtSessionEnd
 762 ```
 763 Value (string):
 764 ```
 765 <enabled/> or <disabled/>
 766 ```
 767 OMA-URI:
 768 ```
 769 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_RejectTracker
 770 ```
 771 Value (string):
 772 ```
 773 <enabled/> or <disabled/>
 774 ```
 775 OMA-URI:
 776 ```
 777 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Locked
 778 ```
 779 Value (string):
 780 ```
 781 <enabled/> or <disabled/>
 782 ```
 783 #### macOS
 784 ```
 785 <dict>
 786   <key>Cookies</key>
 787   <dict>
 788     <key>Allow</key>
 789     <array>
 790       <string>http://example.com</string>
 791     </array>
 792     <key>AllowSession</key>
 793     <array>
 794       <string>http://example.edu</string>
 795     </array>
 796     <key>Block</key>
 797     <array>
 798       <string>http://example.org</string>
 799     </array>
 800     <key>Default</key>
 801     <true/> | <false/>
 802     <key>AcceptThirdParty</key>
 803     <string>always | never | from-visited</string>
 804     <key>ExpireAtSessionEnd</key>
 805     <true/> | <false/>
 806     <key>RejectTracker</key>
 807     <true/> | <false/>
 808     <key>Locked</key>
 809     <true/> | <false/>
 810   </dict>
 811 </dict>
 812 ```
 813 #### policies.json
 814 ```
 815 {
 816   "policies": {
 817     "Cookies": {
 818       "Allow": ["http://example.org/"],
 819       "AllowSession": ["http://example.edu/"],
 820       "Block": ["http://example.edu/"],
 821       "Default": true | false,
 822       "AcceptThirdParty": "always" | "never" | "from-visited",
 823       "ExpireAtSessionEnd": true | false,
 824       "RejectTracker": true | false,
 825       "Locked": true | false
 826     }
 827   }
 828 }
 829 ```
 830 ### DisableSetDesktopBackground
 831 Remove the "Set As Desktop Background..." menuitem when right clicking on an image.
 832
 833 **Compatibility:** Firefox 60, Firefox ESR 60\
 834 **CCK2 Equivalent:** `removeSetDesktopBackground`\
 835 **Preferences Affected:** N/A
 836
 837 #### Windows (GPO)
 838 ```
 839 Software\Policies\Mozilla\Firefox\DisableSetDesktopBackground = 0x1 | 0x0
 840 ```
 841 #### Windows (Intune)
 842 OMA-URI:
 843 ```
 844 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSetDesktopBackground
 845 ```
 846 Value (string):
 847 ```
 848 <enabled/> or <disabled/>
 849 ```
 850 #### macOS
 851 ```
 852 <dict>
 853   <key>DisableSetDesktopBackground</key>
 854   <true/> | <false/>
 855 </dict>
 856 ```
 857 #### policies.json
 858 ```
 859 {
 860   "policies": {
 861     "DisableSetDesktopBackground": true | false
 862   }
 863 }
 864 ```
 865 ### DisableMasterPasswordCreation
 866 Remove the master password functionality.
 867
 868 If this value is true, it works the same as setting [`PrimaryPassword`](#primarypassword) to false and removes the primary password functionality.
 869
 870 If both DisableMasterPasswordCreation and PrimaryPassword are used, DisableMasterPasswordCreation takes precedent.
 871
 872 **Compatibility:** Firefox 60, Firefox ESR 60\
 873 **CCK2 Equivalent:** `noMasterPassword`\
 874 **Preferences Affected:** N/A
 875
 876 #### Windows (GPO)
 877 ```
 878 Software\Policies\Mozilla\Firefox\DisableMasterPasswordCreation = 0x1 | 0x0
 879 ```
 880 #### Windows (Intune)
 881 OMA-URI:
 882 ```
 883 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableMasterPasswordCreation
 884 ```
 885 Value (string):
 886 ```
 887 <enabled/> or <disabled/>
 888 ```
 889 #### macOS
 890 ```
 891 <dict>
 892   <key>DisableMasterPasswordCreation</key>
 893   <true/> | <false/>
 894 </dict>
 895 ```
 896 #### policies.json
 897 ```
 898 {
 899   "policies": {
 900     "DisableMasterPasswordCreation": true | false
 901   }
 902 }
 903 ```
 904 ### DisableAppUpdate
 905 Turn off application updates.
 906
 907 **Compatibility:** Firefox 60, Firefox ESR 60\
 908 **CCK2 Equivalent:** `disableFirefoxUpdates`\
 909 **Preferences Affected:** N/A
 910
 911 #### Windows (GPO)
 912 ```
 913 Software\Policies\Mozilla\Firefox\DisableAppUpdate = 0x1 | 0x0
 914 ```
 915 #### Windows (Intune)
 916 OMA-URI:
 917 ```
 918 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableAppUpdate
 919 ```
 920 Value (string):
 921 ```
 922 <enabled/> or <disabled/>
 923 ```
 924 #### macOS
 925 ```
 926 <dict>
 927   <key>DisableAppUpdate</key>
 928   <true/> | <false/>
 929 </dict>
 930 ```
 931 #### policies.json
 932 ```
 933 {
 934   "policies": {
 935     "DisableAppUpdate": true | false
 936   }
 937 }
 938 ```
 939 ### DisableBuiltinPDFViewer
 940 Disable the built in PDF viewer. PDF files are downloaded and sent externally.
 941
 942 **Compatibility:** Firefox 60, Firefox ESR 60\
 943 **CCK2 Equivalent:** `disablePDFjs`\
 944 **Preferences Affected:** `pdfjs.disabled`
 945
 946 #### Windows (GPO)
 947 ```
 948 Software\Policies\Mozilla\Firefox\DisableBuiltinPDFViewer = 0x1 | 0x0
 949 ```
 950 #### Windows (Intune)
 951 OMA-URI:
 952 ```
 953 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableBuiltinPDFViewer
 954 ```
 955 Value (string):
 956 ```
 957 <enabled/> or <disabled/>
 958 ```
 959 #### macOS
 960 ```
 961 <dict>
 962   <key>DisableBuiltinPDFViewer</key>
 963   <true/> | <false/>
 964 </dict>
 965 ```
 966 #### policies.json
 967 ```
 968 {
 969   "policies": {
 970     "DisableBuiltinPDFViewer": true | false
 971   }
 972 }
 973 ```
 974 ### DisabledCiphers
 975 Disable specific cryptographic ciphers.
 976
 977 ---
 978 **Note:**
 979
 980 This policy was updated in Firefox 78 to allow enabling ciphers as well. Setting the value to true disables the cipher, setting the value to false enables the cipher. Previously setting the value to true or false disabled the cipher.
 981
 982 ---
 983 **Compatibility:** Firefox 76, Firefox ESR 68.8 (TLS_RSA_WITH_AES_128_GCM_SHA256 and TLS_RSA_WITH_AES_256_GCM_SHA384 were added in Firefox 78)\
 984 **CCK2 Equivalent:** N/A\
 985 **Preferences Affected:** N/A
 986
 987 #### Windows (GPO)
 988 ```
 989 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_DHE_RSA_WITH_AES_128_CBC_SHA = 0x1 | 0x0
 990 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_DHE_RSA_WITH_AES_256_CBC_SHA = 0x1 | 0x0
 991 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA = 0x1 | 0x0
 992 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA = 0x1 | 0x0
 993 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 = 0x1 | 0x0
 994 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 = 0x1 | 0x0
 995 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_RSA_WITH_AES_128_CBC_SHA = 0x1 | 0x0
 996 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_RSA_WITH_AES_256_CBC_SHA = 0x1 | 0x0
 997 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_RSA_WITH_3DES_EDE_CBC_SHA = 0x1 | 0x0
 998 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_RSA_WITH_AES_128_GCM_SHA256 = 0x1 | 0x0
 999 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_RSA_WITH_AES_256_GCM_SHA384 = 0x1 | 0x0
1000 ```
1001 #### Windows (Intune)
1002 OMA-URI:
1003 ```
1004 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_DHE_RSA_WITH_AES_128_CBC_SHA
1005 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_DHE_RSA_WITH_AES_256_CBC_SHA
1006 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
1007 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
1008 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
1009 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
1010 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_RSA_WITH_AES_128_CBC_SHA
1011 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_RSA_WITH_AES_256_CBC_SHA
1012 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_RSA_WITH_3DES_EDE_CBC_SHA
1013 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_RSA_WITH_AES_128_GCM_SHA256
1014 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_RSA_WITH_AES_256_GCM_SHA384
1015 ```
1016 Value (string):
1017 ```
1018 <enabled/> or <disabled/>
1019 ```
1020 #### macOS
1021 ```
1022 <dict>
1023   <key>DisabledCiphers</key>
1024     <dict>
1025       <key>TLS_DHE_RSA_WITH_AES_128_CBC_SHA</key>
1026       <true/> | <false/>
1027       <key>TLS_DHE_RSA_WITH_AES_256_CBC_SHA</key>
1028       <true/> | <false/>
1029       <key>TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA</key>
1030       <true/> | <false/>
1031       <key>TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA</key>
1032       <true/> | <false/>
1033       <key>TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256</key>
1034       <true/> | <false/>
1035       <key>TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256</key>
1036       <true/> | <false/>
1037       <key>TLS_RSA_WITH_AES_128_CBC_SHA</key>
1038       <true/> | <false/>
1039       <key>TLS_RSA_WITH_AES_256_CBC_SHA</key>
1040       <true/> | <false/>
1041       <key>TLS_RSA_WITH_3DES_EDE_CBC_SHA</key>
1042       <true/> | <false/>
1043       <key>TLS_RSA_WITH_AES_128_GCM_SHA256</key>
1044       <true/> | <false/>
1045       <key>TLS_RSA_WITH_AES_256_GCM_SHA384</key>
1046       <true/> | <false/>
1047     </dict>
1048 </dict>
1049 ```
1050 #### policies.json
1051 ```
1052 {
1053   "policies": {
1054     "DisabledCiphers" {
1055       "TLS_DHE_RSA_WITH_AES_128_CBC_SHA": true | false,
1056       "TLS_DHE_RSA_WITH_AES_256_CBC_SHA": true | false,
1057       "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA": true | false,
1058       "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA": true | false,
1059       "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256": true | false,
1060       "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256": true | false,
1061       "TLS_RSA_WITH_AES_128_CBC_SHA": true | false,
1062       "TLS_RSA_WITH_AES_256_CBC_SHA": true | false,
1063       "TLS_RSA_WITH_3DES_EDE_CBC_SHA": true | false
1064       "TLS_RSA_WITH_AES_128_GCM_SHA256": true | false
1065       "TLS_RSA_WITH_AES_256_GCM_SHA384": true | false
1066     }
1067   }
1068 }
1069 ```
1070 ### DisableDefaultBrowserAgent
1071 Prevent the default browser agent from taking any actions. Only applicable to Windows; other platforms don’t have the agent.
1072
1073 **Compatibility:** Firefox 75, Firefox ESR 68.7 (Windows only)\
1074 **CCK2 Equivalent:** N/A\
1075 **Preferences Affected:** N/A
1076
1077 #### Windows (GPO)
1078 ```
1079 Software\Policies\Mozilla\Firefox\DisableDefaultBrowserAgent = 0x1 | 0x0
1080 ```
1081 #### Windows (Intune)
1082 OMA-URI:
1083 ```
1084 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableDefaultBrowserAgent
1085 ```
1086 Value (string):
1087 ```
1088 <enabled/> or <disabled/>
1089 ```
1090 #### policies.json
1091 ```
1092 {
1093   "policies": {
1094     "DisableDefaultBrowserAgent": true | false
1095   }
1096 }
1097 ```
1098 ### DisableDeveloperTools
1099 Remove access to all developer tools.
1100
1101 **Compatibility:** Firefox 60, Firefox ESR 60\
1102 **CCK2 Equivalent:** `removeDeveloperTools`\
1103 **Preferences Affected:** `devtools.policy.disabled`
1104
1105 #### Windows (GPO)
1106 ```
1107 Software\Policies\Mozilla\Firefox\DisableDeveloperTools = 0x1 | 0x0`
1108 ```
1109 #### Windows (Intune)
1110 OMA-URI:
1111 ```
1112 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableDeveloperTools
1113 ```
1114 Value (string):
1115 ```
1116 <enabled/> or <disabled/>
1117 ```
1118 #### macOS
1119 ```
1120 <dict>
1121   <key>DisableDeveloperTools</key>
1122   <true/> | <false/>
1123 </dict>
1124 ```
1125 #### policies.json
1126 ```
1127 {
1128   "policies": {
1129     "DisableDeveloperTools": true | false
1130   }
1131 }
1132 ```
1133 ### DisableFeedbackCommands
1134 Disable the menus for reporting sites (Submit Feedback, Report Deceptive Site).
1135
1136 **Compatibility:** Firefox 60, Firefox ESR 60\
1137 **CCK2 Equivalent:** N/A\
1138 **Preferences Affected:** N/A
1139
1140 #### Windows (GPO)
1141 ```
1142 Software\Policies\Mozilla\Firefox\DisableFeedbackCommands = 0x1 | 0x0
1143 ```
1144 #### Windows (Intune)
1145 OMA-URI:
1146 ```
1147 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFeedbackCommands
1148 ```
1149 Value (string):
1150 ```
1151 <enabled/> or <disabled/>
1152 ```
1153 #### macOS
1154 ```
1155 <dict>
1156   <key>DisableFeedbackCommands</key>
1157   <true/> | <false/>
1158 </dict>
1159 ```
1160 #### policies.json
1161 ```
1162 {
1163   "policies": {
1164     "DisableFeedbackCommands": true | false
1165   }
1166 }
1167 ```
1168 ### DisableFirefoxScreenshots
1169 Remove access to Firefox Screenshots.
1170
1171 **Compatibility:** Firefox 60, Firefox ESR 60\
1172 **CCK2 Equivalent:** N/A\
1173 **Preferences Affected:** `extensions.screenshots.disabled`
1174
1175 #### Windows (GPO)
1176 ```
1177 Software\Policies\Mozilla\Firefox\DisableFirefoxScreenshots = 0x1 | 0x0
1178 ```
1179 #### Windows (Intune)
1180 OMA-URI:
1181 ```
1182 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxScreenshots
1183 ```
1184 Value (string):
1185 ```
1186 <enabled/> or <disabled/>
1187 ```
1188 #### macOS
1189 ```
1190 <dict>
1191   <key>DisableFirefoxScreenshots</key>
1192   <true/> | <false/>
1193 </dict>
1194 ```
1195 #### policies.json
1196 ```
1197 {
1198   "policies": {
1199     "DisableFirefoxScreenshots": true | false
1200   }
1201 }
1202 ```
1203 ### DisableFirefoxAccounts
1204 Disable Firefox Accounts integration (Sync).
1205
1206 **Compatibility:** Firefox 60, Firefox ESR 60\
1207 **CCK2 Equivalent:** `disableSync`\
1208 **Preferences Affected:** `identity.fxaccounts.enabled`
1209
1210 #### Windows (GPO)
1211 ```
1212 Software\Policies\Mozilla\Firefox\DisableFirefoxAccounts = 0x1 | 0x0
1213 ```
1214 #### Windows (Intune)
1215 OMA-URI:
1216 ```
1217 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxAccounts
1218 ```
1219 Value (string):
1220 ```
1221 <enabled/> or <disabled/>
1222 ```
1223 #### macOS
1224 ```
1225 <dict>
1226   <key>DisableFirefoxAccounts</key>
1227   <true/> | <false/>
1228 </dict>
1229 ```
1230 #### policies.json
1231 ```
1232 {
1233   "policies": {
1234     "DisableFirefoxAccounts": true | false
1235   }
1236 }
1237 ```
1238 ### DisableFirefoxStudies
1239 Disable Firefox studies (Shield).
1240
1241 **Compatibility:** Firefox 60, Firefox ESR 60\
1242 **CCK2 Equivalent:** N/A\
1243 **Preferences Affected:** N/A
1244
1245 #### Windows (GPO)
1246 ```
1247 Software\Policies\Mozilla\Firefox\DisableFirefoxStudies = 0x1 | 0x0
1248 ```
1249 #### Windows (Intune)
1250 OMA-URI:
1251 ```
1252 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxStudies
1253 ```
1254 Value (string):
1255 ```
1256 <enabled/> or <disabled/>
1257 ```
1258 #### macOS
1259 ```
1260 <dict>
1261   <key>DisableFirefoxStudies</key>
1262   <true/> | <false/>
1263 </dict>
1264 ```
1265 #### policies.json
1266 ```
1267 {
1268   "policies": {
1269     "DisableFirefoxStudies": true | false
1270   }
1271 }
1272 ```
1273 ### DisableForgetButton
1274 Disable the "Forget" button.
1275
1276 **Compatibility:** Firefox 60, Firefox ESR 60\
1277 **CCK2 Equivalent:** `disableForget`\
1278 **Preferences Affected:** N/A
1279
1280 #### Windows (GPO)
1281 ```
1282 Software\Policies\Mozilla\Firefox\DisableForgetButton = 0x1 | 0x0
1283 ```
1284 #### Windows (Intune)
1285 OMA-URI:
1286 ```
1287 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableForgetButton
1288 ```
1289 Value (string):
1290 ```
1291 <enabled/> or <disabled/>
1292 ```
1293 #### macOS
1294 ```
1295 <dict>
1296   <key>DisableForgetButton</key>
1297   <true/> | <false/>
1298 </dict>
1299 ```
1300 #### policies.json
1301 ```
1302 {
1303   "policies": {
1304     "DisableForgetButton": true | false
1305   }
1306 }
1307 ```
1308 ### DisableFormHistory
1309 Turn off saving information on web forms and the search bar.
1310
1311 **Compatibility:** Firefox 60, Firefox ESR 60\
1312 **CCK2 Equivalent:** `disableFormFill`\
1313 **Preferences Affected:** ` browser.formfill.enable`
1314
1315 #### Windows (GPO)
1316 ```
1317 Software\Policies\Mozilla\Firefox\DisableFormHistory = 0x1 | 0x0
1318 ```
1319 #### Windows (Intune)
1320 OMA-URI:
1321 ```
1322 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFormHistory
1323 ```
1324 Value (string):
1325 ```
1326 <enabled/> or <disabled/>
1327 ```
1328 #### macOS
1329 ```
1330 <dict>
1331   <key>DisableFormHistory</key>
1332   <true/> | <false/>
1333 </dict>
1334 ```
1335 #### policies.json
1336 ```
1337 {
1338   "policies": {
1339     "DisableFormHistory": true | false
1340   }
1341 }
1342 ```
1343 ### DisablePasswordReveal
1344 Do not allow passwords to be shown in saved logins
1345
1346 **Compatibility:** Firefox 71, Firefox ESR 68.3\
1347 **CCK2 Equivalent:** N/A
1348 **Preferences Affected:** N/A
1349
1350 #### Windows (GPO)
1351 ```
1352 Software\Policies\Mozilla\Firefox\DisablePasswordReveal = 0x1 | 0x0
1353 ```
1354 #### Windows (Intune)
1355 OMA-URI:
1356 ```
1357 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePasswordReveal
1358 ```
1359 Value (string):
1360 ```
1361 <enabled/> or <disabled/>
1362 ```
1363 #### macOS
1364 ```
1365 <dict>
1366   <key>DisablePasswordReveal</key>
1367   <true/> | <false/>
1368 </dict>
1369 ```
1370 #### policies.json
1371 ```
1372 {
1373   "policies": {
1374     "DisablePasswordReveal": true | false
1375   }
1376 }
1377 ```
1378 ### DisablePocket
1379 Remove Pocket in the Firefox UI. It does not remove it from the new tab page.
1380
1381 **Compatibility:** Firefox 60, Firefox ESR 60\
1382 **CCK2 Equivalent:** `disablePocket`\
1383 **Preferences Affected:** `extensions.pocket.enabled`
1384
1385 #### Windows (GPO)
1386 ```
1387 Software\Policies\Mozilla\Firefox\DisablePocket = 0x1 | 0x0
1388 ```
1389 #### Windows (Intune)
1390 OMA-URI:
1391 ```
1392 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePocket
1393 ```
1394 Value (string):
1395 ```
1396 <enabled/> or <disabled/>
1397 ```
1398 #### macOS
1399 ```
1400 <dict>
1401   <key>DisablePocket</key>
1402   <true/> | <false/>
1403 </dict>
1404 ```
1405 #### policies.json
1406 ```
1407 {
1408   "policies": {
1409     "DisablePocket": true | false
1410   }
1411 }
1412 ```
1413 ### DisablePrivateBrowsing
1414 Remove access to private browsing.
1415
1416 **Compatibility:** Firefox 60, Firefox ESR 60\
1417 **CCK2 Equivalent:** `disablePrivateBrowsing`\
1418 **Preferences Affected:** N/A
1419
1420 #### Windows (GPO)
1421 ```
1422 Software\Policies\Mozilla\Firefox\DisablePrivateBrowsing = 0x1 | 0x0
1423 ```
1424 #### Windows (Intune)
1425 OMA-URI:
1426 ```
1427 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePrivateBrowsing
1428 ```
1429 Value (string):
1430 ```
1431 <enabled/> or <disabled/>
1432 ```
1433 #### macOS
1434 ```
1435 <dict>
1436   <key>DisablePrivateBrowsing</key>
1437   <true/> | <false/>
1438 </dict>
1439 ```
1440 #### policies.json
1441 ```
1442 {
1443   "policies": {
1444     "DisablePrivateBrowsing": true | false
1445   }
1446 }
1447 ```
1448 ### DisableProfileImport
1449 Disables the "Import data from another browser" option in the bookmarks window.
1450
1451 **Compatibility:** Firefox 60, Firefox ESR 60\
1452 **CCK2 Equivalent:** N/A\
1453 **Preferences Affected:** N/A
1454
1455 #### Windows (GPO)
1456 ```
1457 Software\Policies\Mozilla\Firefox\DisableProfileImport = 0x1 | 0x0
1458 ```
1459 #### Windows (Intune)
1460 OMA-URI:
1461 ```
1462 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableProfileImport
1463 ```
1464 Value (string):
1465 ```
1466 <enabled/> or <disabled/>
1467 ```
1468 #### macOS
1469 ```
1470 <dict>
1471   <key>DisableProfileImport</key>
1472   <true/> | <false/>
1473 </dict>
1474 ```
1475 #### policies.json
1476 ```
1477 {
1478   "policies": {
1479     "DisableProfileImport": true | false
1480   }
1481 }
1482 ```
1483 ### DisableProfileRefresh
1484 Disable the Refresh Firefox button on about:support and support.mozilla.org, as well as the prompt that displays offering to refresh Firefox when you haven't used it in a while.
1485
1486 **Compatibility:** Firefox 60, Firefox ESR 60\
1487 **CCK2 Equivalent:** `disableResetFirefox`\
1488 **Preferences Affected:** `browser.disableResetPrompt`
1489
1490 #### Windows (GPO)
1491 ```
1492 Software\Policies\Mozilla\Firefox\DisableProfileRefresh = 0x1 | 0x0
1493 ```
1494 #### Windows (Intune)
1495 OMA-URI:
1496 ```
1497 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableProfileRefresh
1498 ```
1499 Value (string):
1500 ```
1501 <enabled/> or <disabled/>
1502 ```
1503 #### macOS
1504 ```
1505 <dict>
1506   <key>DisableProfileRefresh</key>
1507   <true/> | <false/>
1508 </dict>
1509 ```
1510 #### policies.json
1511 ```
1512 {
1513   "policies": {
1514     "DisableProfileRefresh": true | false
1515   }
1516 }
1517 ```
1518 ### DisableSafeMode
1519 Disable safe mode within the browser.
1520
1521 On Windows, this disables safe mode via the command line as well.
1522
1523 **Compatibility:** Firefox 60, Firefox ESR 60 (Windows, macOS)\
1524 **CCK2 Equivalent:** `disableSafeMode`\
1525 **Preferences Affected:** N/A
1526
1527 #### Windows (GPO)
1528 ```
1529 Software\Policies\Mozilla\Firefox\DisableSafeMode = 0x1 | 0x0
1530 ```
1531 #### Windows (Intune)
1532 OMA-URI:
1533 ```
1534 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSafeMode
1535 ```
1536 Value (string):
1537 ```
1538 <enabled/> or <disabled/>
1539 ```
1540 #### macOS
1541 ```
1542 <dict>
1543   <key>DisableSafeMode</key>
1544   <true/> | <false/>
1545 </dict>
1546 ```
1547 #### policies.json
1548 ```
1549 {
1550   "policies": {
1551     "DisableSafeMode": true | false
1552   }
1553 }
1554 ```
1555 ### DisableSecurityBypass
1556 Prevent the user from bypassing security in certain cases.
1557
1558 `InvalidCertificate` prevents adding an exception when an invalid certificate is shown.
1559
1560 `SafeBrowsing` prevents selecting "ignore the risk" and visiting a harmful site anyway.
1561
1562 **Compatibility:** Firefox 60, Firefox ESR 60\
1563 **CCK2 Equivalent:** N/A\
1564 **Preferences Affected:** `security.certerror.hideAddException`,`browser.safebrowsing.allowOverride`
1565
1566 #### Windows (GPO)
1567 ```
1568 Software\Policies\Mozilla\Firefox\DisableSecurityBypass\InvalidCertificate = 0x1 | 0x0
1569 Software\Policies\Mozilla\Firefox\DisableSecurityBypass\SafeBrowsing = 0x1 | 0x0
1570 ```
1571 #### Windows (Intune)
1572 OMA-URI:
1573 ```
1574 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/P_DisableSecurityBypass_InvalidCertificate
1575 ```
1576 Value (string):
1577 ```
1578 <enabled/> or <disabled/>
1579 ```
1580 OMA-URI:
1581 ```
1582 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/P_DisableSecurityBypass_SafeBrowsing
1583 ```
1584 Value (string):
1585 ```
1586 <enabled/> or <disabled/>
1587 ```
1588
1589 #### macOS
1590 ```
1591 <dict>
1592   <key>DisableSecurityBypass</key>
1593   <dict>
1594     <key>InvalidCertificate</key>
1595     <true/> | <false/>
1596     <key>SafeBrowsing</key>
1597     <true/> | <false/>
1598   </dict>
1599 </dict>
1600 ```
1601 #### policies.json
1602 ```
1603 {
1604   "policies": {
1605     "DisableSecurityBypass": {
1606       "InvalidCertificate": true | false,
1607       "SafeBrowsing": true | false
1608     }
1609   }
1610 }
1611 ```
1612 ### DisableSystemAddonUpdate
1613 Prevent system add-ons from being installed or update.
1614
1615 **Compatibility:** Firefox 60, Firefox ESR 60\
1616 **CCK2 Equivalent:** N/A\
1617 **Preferences Affected:** N/A
1618
1619 #### Windows (GPO)
1620 ```
1621 Software\Policies\Mozilla\Firefox\DisableSystemAddonUpdate = 0x1 | 0x0
1622 ```
1623 #### Windows (Intune)
1624 OMA-URI:
1625 ```
1626 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSystemAddonUpdate
1627 ```
1628 Value (string):
1629 ```
1630 <enabled/> or <disabled/>
1631 ```
1632 #### macOS
1633 ```
1634 <dict>
1635   <key>DisableSystemAddonUpdate</key>
1636   <true/> | <false/>
1637 </dict>
1638 ```
1639 #### policies.json
1640 ```
1641 {
1642   "policies": {
1643     "DisableSystemAddonUpdate": true | false
1644   }
1645 }
1646 ```
1647 ### DisableTelemetry
1648 Prevent the upload of telemetry data.
1649
1650 As of Firefox 83 and Firefox ESR 78.5, local storage of telemetry data is disabled as well.
1651
1652 Mozilla recommends that you do not disable telemetry. Information collected through telemetry helps us build a better product for businesses like yours.
1653
1654 **Compatibility:** Firefox 60, Firefox ESR 60\
1655 **CCK2 Equivalent:** `disableTelemetry`\
1656 **Preferences Affected:** `datareporting.healthreport.uploadEnabled,datareporting.policy.dataSubmissionEnabled,toolkit.telemetry.archive.enabled`
1657
1658 #### Windows (GPO)
1659 ```
1660 Software\Policies\Mozilla\Firefox\DisableTelemetry = 0x1 | 0x0
1661 ```
1662 #### Windows (Intune)
1663 OMA-URI:
1664 ```
1665 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableTelemetry
1666 ```
1667 Value (string):
1668 ```
1669 <enabled/> or <disabled/>
1670 ```
1671 #### macOS
1672 ```
1673 <dict>
1674   <key>DisableTelemetry</key>
1675   <true/> | <false/>
1676 </dict>
1677 ```
1678 #### policies.json
1679 ```
1680 {
1681   "policies": {
1682     "DisableTelemetry": true | false
1683   }
1684 }
1685 ```
1686 ### DisplayBookmarksToolbar
1687 Set the initial state of the bookmarks toolbar. A user can still hide it and it will stay hidden.
1688
1689 **Compatibility:** Firefox 60, Firefox ESR 60\
1690 **CCK2 Equivalent:** `displayBookmarksToolbar`\
1691 **Preferences Affected:** N/A
1692
1693 #### Windows (GPO)
1694 ```
1695 Software\Policies\Mozilla\Firefox\DisplayBookmarksToolbar = 0x1 | 0x0
1696 ```
1697 #### Windows (Intune)
1698 OMA-URI:
1699 ```
1700 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisplayBookmarksToolbar
1701 ```
1702 Value (string):
1703 ```
1704 <enabled/> or <disabled/>
1705 ```
1706 #### macOS
1707 ```
1708 <dict>
1709   <key>DisplayBookmarksToolbar</key>
1710   <true/> | <false/>
1711 </dict>
1712 ```
1713 #### policies.json
1714 ```
1715 {
1716   "policies": {
1717     "DisplayBookmarksToolbar": true | false
1718   }
1719 }
1720 ```
1721 ### DisplayMenuBar (Deprecated)
1722 Set the initial state of the menubar. A user can still hide it and it will stay hidden.
1723
1724 **Compatibility:** Firefox 60, Firefox ESR 60 (Windows, some Linux)\
1725 **CCK2 Equivalent:** `displayMenuBar`\
1726 **Preferences Affected:** N/A
1727
1728 #### Windows (GPO)
1729 ```
1730 Software\Policies\Mozilla\Firefox\DisplayMenuBar = 0x1 | 0x0
1731 ```
1732 #### macOS
1733 ```
1734 <dict>
1735   <key>DisplayMenuBar</key>
1736   <true/> | <false/>
1737 </dict>
1738 ```
1739 #### policies.json
1740 ```
1741 {
1742   "policies": {
1743     "DisplayMenuBar": true | false
1744   }
1745 }
1746 ```
1747 ### DisplayMenuBar
1748 Set the state of the menubar.
1749
1750 `always` means the menubar is shown and cannot be hidden.
1751
1752 `never` means the menubar is hidden and cannot be shown.
1753
1754 `default-on` means the menubar is on by default but can be hidden.
1755
1756 `default-off` means the menubar is off by default but can be shown.
1757
1758 **Compatibility:** Firefox 73, Firefox ESR 68.5 (Windows, some Linux)\
1759 **CCK2 Equivalent:** `displayMenuBar`\
1760 **Preferences Affected:** N/A
1761
1762 #### Windows (GPO)
1763 ```
1764 Software\Policies\Mozilla\Firefox\DisplayMenuBar = "always", "never", "default-on", "default-off"
1765 ```
1766 #### Windows (Intune)
1767 OMA-URI:
1768 ```
1769 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisplayMenuBar_Enum
1770 ```
1771 Value (string):
1772 ```
1773 <enabled/>
1774 <data id="DisplayMenuBar" value="always | never | default-on | default-off"/>
1775 ```
1776 #### macOS
1777 ```
1778 <dict>
1779   <key>DisplayMenuBar</key>
1780   <string>always | never | default-on | default-off</string>
1781 </dict>
1782 ```
1783 #### policies.json
1784 ```
1785 {
1786   "policies": {
1787     "DisplayMenuBar": "always", "never", "default-on", "default-off"
1788   }
1789 }
1790 ```
1791 ### DNSOverHTTPS
1792 Configure DNS over HTTPS.
1793
1794 `Enabled` determines whether DNS over HTTPS is enabled
1795
1796 `ProviderURL` is a URL to another provider.
1797
1798 `Locked` prevents the user from changing DNS over HTTPS preferences.
1799
1800 `ExcludedDomains` excludes domains from DNS over HTTPS.
1801
1802 **Compatibility:** Firefox 63, Firefox ESR 68 (ExcludedDomains added in 75/68.7)\
1803 **CCK2 Equivalent:** N/A\
1804 **Preferences Affected:** `network.trr.mode`,`network.trr.uri`
1805
1806 #### Windows (GPO)
1807 ```
1808 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\Enabled = 0x1 | 0x0
1809 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\ProviderURL = "URL_TO_ALTERNATE_PROVIDER"
1810 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\Locked = 0x1 | 0x0
1811 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\ExcludedDomains\1 = "example.com"
1812 ```
1813 #### Windows (Intune)
1814 OMA-URI:
1815 ```
1816 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_Enabled
1817 ```
1818 Value (string):
1819 ```
1820 <enabled/> or <disabled/>
1821 ```
1822 OMA-URI:
1823 ```
1824 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_ProviderURL
1825 ```
1826 Value (string):
1827 ```
1828 <enabled/>
1829 <data id="String" value="URL_TO_ALTERNATE_PROVIDER"/>
1830 ```
1831 OMA-URI:
1832 ```
1833 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_Locked
1834 ```
1835 Value (string):
1836 ```
1837 <enabled/> or <disabled/>
1838 ```
1839 OMA-URI:
1840 ```
1841 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_ExcludedDomains
1842 ```
1843 Value (string):
1844 ```
1845 <enabled/>
1846 <data id="List" value="1&#xF000;example.com"/>
1847 ```
1848 #### macOS
1849 ```
1850 <dict>
1851   <key>DNSOverHTTPS</key>
1852   <dict>
1853     <key>Enabled</key>
1854     <true/> | <false/>
1855     <key>ProviderURL</key>
1856     <string>URL_TO_ALTERNATE_PROVIDER</string>
1857     <key>Locked</key>
1858     <true/> | <false/>
1859     <key>ExcludedDomains</key>
1860     <array>
1861       <string>example.com</string>
1862     </array>
1863   </dict>
1864 </dict>
1865 ```
1866 #### policies.json
1867 ```
1868 {
1869   "policies": {
1870     "DNSOverHTTPS": {
1871       "Enabled":  true | false,
1872       "ProviderURL": "URL_TO_ALTERNATE_PROVIDER",
1873       "Locked": true | false,
1874       "ExcludedDomains": ["example.com"]
1875     }
1876   }
1877 }
1878 ```
1879 ### DontCheckDefaultBrowser
1880 Don't check if Firefox is the default browser at startup.
1881
1882 **Compatibility:** Firefox 60, Firefox ESR 60\
1883 **CCK2 Equivalent:** `dontCheckDefaultBrowser`\
1884 **Preferences Affected:** `browser.shell.checkDefaultBrowser`
1885
1886 #### Windows (GPO)
1887 ```
1888 Software\Policies\Mozilla\Firefox\DontCheckDefaultBrowser = 0x1 | 0x0
1889 ```
1890 #### Windows (Intune)
1891 OMA-URI:
1892 ```
1893 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DontCheckDefaultBrowser
1894 ```
1895 Value (string):
1896 ```
1897 <enabled/> or <disabled/>
1898 ```
1899 #### macOS
1900 ```
1901 <dict>
1902   <key>DontCheckDefaultBrowser</key>
1903   <true/> | <false/>
1904 </dict>
1905 ```
1906 #### policies.json
1907 ```
1908 {
1909   "policies": {
1910     "DontCheckDefaultBrowser": true | false
1911   }
1912 }
1913 ```
1914 ### DefaultDownloadDirectory
1915 Set the default download directory.
1916
1917 You can use ${home} for the native home directory.
1918
1919 **Compatibility:** Firefox 68, Firefox ESR 68\
1920 **CCK2 Equivalent:** N/A\
1921 **Preferences Affected:** `browser.download.dir`,`browser.download.folderList`
1922
1923 #### Windows (GPO)
1924 ```
1925 Software\Policies\Mozilla\Firefox\DefaultDownloadDirectory = "${home}\Downloads"
1926 ```
1927 #### Windows (Intune)
1928 OMA-URI:
1929 ```
1930 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DefaultDownloadDirectory
1931 ```
1932 Value (string):
1933 ```
1934 <enabled/>
1935 <data id="Preferences_String" value="${home}\Downloads"/>
1936 ```
1937 #### macOS
1938 ```
1939 <dict>
1940   <key>DefaultDownloadDirectory</key>
1941   <string>${home}/Downloads</string>
1942 </dict>
1943 ```
1944 #### policies.json (macOS and Linux)
1945 ```
1946 {
1947   "policies": {
1948     "DefaultDownloadDirectory": "${home}/Downloads"
1949 }
1950 ```
1951 #### policies.json (Windows)
1952 ```
1953 {
1954   "policies": {
1955     "DefaultDownloadDirectory": "${home}\\Downloads"
1956 }
1957 ```
1958 ### DownloadDirectory
1959 Set and lock the download directory.
1960
1961 You can use ${home} for the native home directory.
1962
1963 **Compatibility:** Firefox 68, Firefox ESR 68\
1964 **CCK2 Equivalent:** N/A\
1965 **Preferences Affected:** `browser.download.dir`,`browser.download.folderList`,`browser.download.useDownloadDir`
1966
1967 #### Windows (GPO)
1968 ```
1969 Software\Policies\Mozilla\Firefox\DownloadDirectory = "${home}\Downloads"
1970 ```
1971 #### Windows (Intune)
1972 OMA-URI:
1973 ```
1974 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DownloadDirectory
1975 ```
1976 Value (string):
1977 ```
1978 <enabled/>
1979 <data id="Preferences_String" value="${home}\Downloads"/>
1980 ```
1981 #### macOS
1982 ```
1983 <dict>
1984   <key>DownloadDirectory</key>
1985   <string>${home}/Downloads</string>
1986 </dict>
1987 ```
1988 #### policies.json (macOS and Linux)
1989 ```
1990 {
1991   "policies": {
1992     "DownloadDirectory": "${home}/Downloads"
1993 }
1994 ```
1995 #### policies.json (Windows)
1996 ```
1997 {
1998   "policies": {
1999     "DownloadDirectory": "${home}\\Downloads"
2000 }
2001 ```
2002 ### EnableTrackingProtection
2003 Configure tracking protection.
2004
2005 If this policy is not configured, tracking protection is not enabled by default in the browser, but it is enabled by default in private browsing and the user can change it.
2006
2007 If `Value` is set to false, tracking protection is disabled and locked in both the regular browser and private browsing.
2008
2009 If `Value` is set to true, tracking protection is enabled by default in both the regular browser and private browsing and the `Locked` value determines whether or not a user can change it.
2010
2011 If `Cryptomining` is set to true, cryptomining scripts on websites are blocked.
2012
2013 If `Fingerprinting` is set to true, fingerprinting scripts on websites are blocked.
2014
2015 `Exceptions` are origins for which tracking protection is not enabled.
2016
2017 **Compatibility:** Firefox 60, Firefox ESR 60 (Cryptomining and Fingerprinting added in 70/68.2, Exceptions added in 73/68.5)\
2018 **CCK2 Equivalent:** N/A\
2019 **Preferences Affected:** `privacy.trackingprotection.enabled`,`privacy.trackingprotection.pbmode.enabled`,`privacy.trackingprotection.cryptomining.enabled`,`privacy.trackingprotection.fingerprinting.enabled`
2020
2021 #### Windows (GPO)
2022 ```
2023 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Value = 0x1 | 0x0
2024 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Locked = 0x1 | 0x0
2025 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Cryptomining = 0x1 | 0x0
2026 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Fingerprinting = 0x1 | 0x0
2027 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Exceptions\1 = "https://example.com"
2028 ```
2029 #### Windows (Intune)
2030 OMA-URI:
2031 ```
2032 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/A_TrackingProtection_Value
2033 ```
2034 Value (string):
2035 ```
2036 <enabled/> or <disabled/>
2037 ```
2038 OMA-URI:
2039 ```
2040 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/B_TrackingProtection_Cryptomining
2041 ```
2042 Value (string):
2043 ```
2044 <enabled/> or <disabled/>
2045 ```
2046 OMA-URI:
2047 ```
2048 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/C_TrackingProtection_Fingerprinting
2049 ```
2050 Value (string):
2051 ```
2052 <enabled/> or <disabled/>
2053 ```
2054 OMA-URI:
2055 ```
2056 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/D_TrackingProtection_Exceptions
2057 ```
2058 Value (string):
2059 ```
2060 <data id="TrackingProtection_Exceptions" value="1&#xF000;https://example.com"/>
2061 ```
2062 OMA-URI:
2063 ```
2064 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/E_TrackingProtection_Locked
2065 ```
2066 Value (string):
2067 ```
2068 <enabled/> or <disabled/>
2069 ```
2070 #### macOS
2071 ```
2072 <dict>
2073   <key>EnableTrackingProtection</key>
2074   <dict>
2075     <key>Value</key>
2076     <true/> | <false/>
2077     <key>Locked</key>
2078     <true/> | <false/>
2079     <key>Cryptomining</key>
2080     <true/> | <false/>
2081     <key>Fingerprinting</key>
2082     <true/> | <false/>
2083     <key>Exceptions</key>
2084     <array>
2085       <string>https://example.com</string>
2086     </array>
2087   </dict>
2088 </dict>
2089 ```
2090 #### policies.json
2091 ```
2092 {
2093   "policies": {
2094     "EnableTrackingProtection": {
2095       "Value": true | false,
2096       "Locked": true | false,
2097       "Cryptomining": true | false,
2098       "Fingerprinting": true | false,
2099       "Exceptions": ["https://example.com"]
2100     }
2101 }
2102 ```
2103 ### EncryptedMediaExtensions
2104 Enable or disable Encrypted Media Extensions and optionally lock it.
2105
2106 If `Enabled` is set to false, encrypted media extensions (like Widevine) are not downloaded by Firefox unless the user consents to installing them.
2107
2108 If `Locked` is set to true and `Enabled` is set to false, Firefox will not download encrypted media extensions (like Widevine) or ask the user to install them.
2109
2110 **Compatibility:** Firefox 77, Firefox ESR 68.9\
2111 **CCK2 Equivalent:** N/A\
2112 **Preferences Affected:** `media.eme.enabled`
2113
2114 #### Windows (GPO)
2115 ```
2116 Software\Policies\Mozilla\Firefox\EncryptedMediaExtensions\Enabled = 0x1 | 0x0
2117 Software\Policies\Mozilla\Firefox\EncryptedMediaExtensions\Locked = 0x1 | 0x0
2118 ```
2119 #### Windows (Intune)
2120 OMA-URI:
2121 ```
2122 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~EncryptedMediaExtensions/EncryptedMediaExtensions_Enabled
2123 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~EncryptedMediaExtensions/EncryptedMediaExtensions_Locked
2124 ```
2125 Value (string):
2126 ```
2127 <enabled/>or <disabled/>
2128 ```
2129 #### macOS
2130 ```
2131 <dict>
2132   <key>EncryptedMediaExtensions</key>
2133   <dict>
2134     <key>Enabled</key>
2135     <true/> | <false/>
2136     <key>Locked</key>
2137     <true/> | <false/>
2138   </dict>
2139 </dict>
2140 ```
2141 #### policies.json
2142 ```
2143 {
2144   "policies": {
2145     "EncryptedMediaExtensions": {
2146       "Enabled": true | false,
2147       "Locked": true | false
2148     }
2149 }
2150 ```
2151 ### EnterprisePoliciesEnabled
2152 Enable policy support on macOS.
2153
2154 **Compatibility:** Firefox 63, Firefox ESR 60.3 (macOS only)\
2155 **CCK2 Equivalent:** N/A\
2156 **Preferences Affected:** N/A
2157
2158 #### macOS
2159 ```
2160 <dict>
2161   <key>EnterprisePoliciesEnabled</key>
2162   <true/>
2163 </dict>
2164 ```
2165 ### Extensions
2166 Control the installation, uninstallation and locking of extensions.
2167
2168 `Install` is a list of URLs or native paths for extensions to be installed.
2169
2170 `Uninstall` is a list of extension IDs that should be uninstalled if found.
2171
2172 `Locked` is a list of extension IDs that the user cannot disable or uninstall.
2173
2174 **Compatibility:** Firefox 60, Firefox ESR 60\
2175 **CCK2 Equivalent:** `addons`\
2176 **Preferences Affected:** N/A
2177
2178 #### Windows (GPO)
2179 ```
2180 Software\Policies\Mozilla\Firefox\Extensions\Install\1 = "https://addons.mozilla.org/firefox/downloads/somefile.xpi"
2181 Software\Policies\Mozilla\Firefox\Extensions\Install\2 = "//path/to/xpi"
2182 Software\Policies\Mozilla\Firefox\Extensions\Uninstall\1 = "bad_addon_id@mozilla.org"
2183 Software\Policies\Mozilla\Firefox\Extensions\Locked\1 = "addon_id@mozilla.org"
2184 ```
2185 #### Windows (Intune)
2186 OMA-URI:
2187 ```
2188 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/Extensions_Install
2189 ```
2190 Value (string):
2191 ```
2192 <enabled/>
2193 <data id="Extensions" value="1&#xF000;https://addons.mozilla.org/firefox/downloads/somefile.xpi&#xF000;2&#xF000;//path/to/xpi"/>
2194 ```
2195 OMA-URI:
2196 ```
2197 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/Extensions_Uninstall
2198 ```
2199 Value (string):
2200 ```
2201 <enabled/>
2202 <data id="Extensions" value="1&#xF000;bad_addon_id@mozilla.org"/>
2203 ```
2204 OMA-URI:
2205 ```
2206 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/Extensions_Locked
2207 ```
2208 Value (string):
2209 ```
2210 <enabled/>
2211 <data id="Extensions" value="1&#xF000;addon_id@mozilla.org"/>
2212 ```
2213 #### macOS
2214 ```
2215 <dict>
2216   <key>Extensions</key>
2217   <dict>
2218     <key>Install</key>
2219     <array>
2220       <string>https://addons.mozilla.org/firefox/downloads/somefile.xpi</string>
2221       <string>//path/to/xpi</string>
2222     </array>
2223     <key>Uninstall</key>
2224     <array>
2225       <string>bad_addon_id@mozilla.org</string>
2226     </array>
2227     <key>Locked</key>
2228     <array>
2229       <string>addon_id@mozilla.org</string>
2230     </array>
2231   </dict>
2232 </dict>
2233 ```
2234 #### policies.json
2235 ```
2236 {
2237   "policies": {
2238     "Extensions": {
2239       "Install": ["https://addons.mozilla.org/firefox/downloads/somefile.xpi", "//path/to/xpi"],
2240       "Uninstall": ["bad_addon_id@mozilla.org"],
2241       "Locked":  ["addon_id@mozilla.org"]
2242     }
2243   }
2244 }
2245 ```
2246 ### ExtensionSettings
2247 Manage all aspects of extensions. This policy is based heavily on the [Chrome policy](https://dev.chromium.org/administrators/policy-list-3/extension-settings-full) of the same name.
2248
2249 This policy maps an extension ID to its configuration. With an extension ID, the configuration will be applied to the specified extension only. A default configuration can be set for the special ID "*", which will apply to all extensions that don't have a custom configuration set in this policy.
2250
2251 To obtain an extension ID, install the extension and go to about:support. You will see the ID in the Extensions section. I've also created an extension that makes it easy to find the ID of extensions on AMO. You can download it [here](https://github.com/mkaply/queryamoid/releases/tag/v0.1).
2252
2253 The configuration for each extension is another dictionary that can contain the fields documented below.
2254
2255 | Name | Description |
2256 | --- | --- |
2257 | `installation_mode` | Maps to a string indicating the installation mode for the extension. The valid strings are `allowed`,`blocked`,`force_installed`, and `normal_installed`.
2258 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`allowed` | Allows the extension to be installed by the user. This is the default behavior. There is no need for an install_url; it will automatically be allowed based on the ID.
2259 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`blocked`| Blocks installation of the extension and removes it from the device if already installed.
2260 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`force_installed`| The extension is automatically installed and can't be removed by the user. This option is not valid for the default configuration and requires an install_url.
2261 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`normal_installed`| The extension is automatically installed but can be disabled by the user. This option is not valid for the default configuration and requires an install_url.
2262 | `install_url`| Maps to a URL indicating where Firefox can download a force_installed or normal_installed extension. If installing from the addons.mozilla.org, use the following URL (substituting SHORT_NAME from the URL on AMO), https://addons.mozilla.org/firefox/downloads/latest/SHORT_NAME/latest.xpi. If installing from the local file system, use a file:/// URL. Languages packs are available from https://releases.mozilla.org/pub/firefox/releases/VERSION/PLATFORM/xpi/LANGUAGE.xpi. If you need to update the extension, you can change the name of the extension and it will be automatically updated. Extensions installed from file URLs will additional be updated when their internal version changes.
2263 | `install_sources` | A list of sources from which installing extensions is allowed. **This is unnecessary if you are only allowing the installation of certain extensions by ID.** Each item in this list is an extension-style match pattern. Users will be able to easily install items from any URL that matches an item in this list. Both the location of the *.xpi file and the page where the download is started from (i.e.  the referrer) must be allowed by these patterns. This setting can be used only for the default configuration.
2264 | `allowed_types` | This setting whitelists the allowed types of extension/apps that can be installed in Firefox. The value is a list of strings, each of which should be one of the following: "extension", "theme", "dictionary", "locale" This setting can be used only for the default configuration.
2265 | `blocked_install_message` | This maps to a string specifying the error message to display to users if they're blocked from installing an extension. This setting allows you to append text to the generic error message displayed when the extension is blocked. This could be be used to direct users to your help desk, explain why a particular extension is blocked, or something else. This setting can be used only for the default configuration.
2266 | `restricted_domains` | An array of domains on which content scripts can't be run. This setting can be used only for the default configuration.
2267
2268 **Compatibility:** Firefox 69, Firefox ESR 68.1\
2269 **CCK2 Equivalent:** N/A\
2270 **Preferences Affected:** N/A
2271
2272 #### Windows (GPO)
2273 ```
2274 Software\Policies\Mozilla\Firefox\ExtensionSettings (REG_MULTI_SZ) =
2275 {
2276   "*": {
2277     "blocked_install_message": "Custom error message.",
2278     "install_sources": ["about:addons","https://addons.mozilla.org/"],
2279     "installation_mode": "blocked",
2280     "allowed_types": ["extension"]
2281   },
2282   "uBlock0@raymondhill.net": {
2283     "installation_mode": "force_installed",
2284     "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
2285   },
2286   "https-everywhere@eff.org": {
2287     "installation_mode": "allowed",
2288   }
2289 }
2290 ```
2291 #### Windows (Intune)
2292 OMA-URI:
2293 ```
2294 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/ExtensionSettings
2295 ```
2296 Value (string):
2297 ```
2298 <enabled/>
2299 <data id="ExtensionSettings" value='
2300 {
2301   "*": {
2302     "blocked_install_message": "Custom error message.",
2303     "install_sources": ["about:addons","https://addons.mozilla.org/"],
2304     "installation_mode": "blocked",
2305     "allowed_types": ["extension"]
2306   },
2307   "uBlock0@raymondhill.net": {
2308     "installation_mode": "force_installed",
2309     "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
2310   },
2311     "https-everywhere@eff.org": {
2312     "installation_mode": "allowed",
2313   }
2314 }'/>
2315 ```
2316 #### macOS
2317 ```
2318 <dict>
2319   <key>ExtensionSettings</key>
2320   <dict>
2321     <key>*</key>
2322     <dict>
2323       <key>blocked_install_message</key>
2324       <string>Custom error message.</string>
2325       <key>install_sources</key>
2326       <array>
2327         <string>about:addons</string>
2328         <string>https://addons.mozilla.org/</string>
2329       </array>
2330       <key>installation_mode</key>
2331       <string>blocked</string>
2332       <key>allowed_types</key>
2333       <array>
2334         <string>extension</string>
2335       </array>
2336     </dict>
2337     <key>uBlock0@raymondhill.net</key>
2338     <dict>
2339       <key>installation_mode</key>
2340        <string>force_installed</string>
2341       <key>install_url</key>
2342       <string>https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi</string>
2343     </dict>
2344     <key>https-everywhere@eff.org</key>
2345     <dict>
2346       <key>installation_mode</key>
2347        <string>allowed</string>
2348     </dict>
2349   </dict>
2350 </dict>
2351 ```
2352 #### policies.json
2353 ```
2354 {
2355   "policies": {
2356     "ExtensionSettings": {
2357       "*": {
2358         "blocked_install_message": "Custom error message.",
2359         "install_sources": ["about:addons","https://addons.mozilla.org/"],
2360         "installation_mode": "blocked",
2361         "allowed_types": ["extension"]
2362       },
2363       "uBlock0@raymondhill.net": {
2364         "installation_mode": "force_installed",
2365         "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
2366       },
2367       "https-everywhere@eff.org": {
2368         "installation_mode": "allowed"
2369       }
2370     }
2371   }
2372 }
2373 ```
2374 ### ExtensionUpdate
2375 Control extension updates.
2376
2377 **Compatibility:** Firefox 67, Firefox ESR 60.7\
2378 **CCK2 Equivalent:** N/A\
2379 **Preferences Affected:** `extensions.update.enabled`
2380
2381 #### Windows (GPO)
2382 ```
2383 Software\Policies\Mozilla\Firefox\ExtensionUpdate = 0x1 | 0x0
2384 ```
2385 #### Windows (Intune)
2386 OMA-URI:
2387 ```
2388 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/ExtensionUpdate
2389 ```
2390 Value (string):
2391 ```
2392 <enabled/> or <disabled/>
2393 ```
2394 #### macOS
2395 ```
2396 <dict>
2397   <key>ExtensionUpdate</key>
2398   <true/> | <false/>
2399 </dict>
2400 ```
2401 #### policies.json
2402 ```
2403 {
2404   "policies": {
2405     "ExtensionUpdate": true | false
2406   }
2407 }
2408 ```
2409 ### FlashPlugin
2410 Configure the default Flash plugin policy as well as origins for which Flash is allowed.
2411
2412 `Allow` is a list of origins where Flash are allowed.
2413
2414 `Block` is a list of origins where Flash is not allowed.
2415
2416 `Default` determines whether or not Flash is allowed by default.
2417
2418 `Locked` prevents the user from changing Flash preferences.
2419
2420 **Compatibility:** Firefox 60, Firefox ESR 60\
2421 **CCK2 Equivalent:** `permissions.plugin`\
2422 **Preferences Affected:** `plugin.state.flash`
2423
2424 #### Windows (GPO)
2425 ```
2426 Software\Policies\Mozilla\Firefox\FlashPlugin\Allow\1 = "https://example.org"
2427 Software\Policies\Mozilla\Firefox\FlashPlugin\Block\1 = "https://example.edu"
2428 Software\Policies\Mozilla\Firefox\FlashPlugin\Default = 0x1 | 0x0
2429 Software\Policies\Mozilla\Firefox\FlashPlugin\Locked = 0x1 | 0x0
2430 ```
2431 #### Windows (Intune)
2432 OMA-URI:
2433 ```
2434 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Flash/FlashPlugin_Allow
2435 ```
2436 Value (string):
2437 ```
2438 <enabled/>
2439 <data id="Permissions" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
2440 ```
2441 OMA-URI:
2442 ```
2443 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Flash/FlashPlugin_Locked
2444 ```
2445 Value (string):
2446 ```
2447 <enabled/> or <disabled/>
2448 ```
2449 OMA-URI:
2450 ```
2451 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Flash/FlashPlugin_Default
2452 ```
2453 Value (string):
2454 ```
2455 <enabled/> or <disabled/>
2456 ```
2457 #### macOS
2458 ```
2459 <dict>
2460   <key>FlashPlugin</key>
2461   <dict>
2462     <key>Allow</key>
2463     <array>
2464       <string>http://example.org</string>
2465     </array>
2466     <key>Block</key>
2467     <array>
2468       <string>http://example.edu</string>
2469     </array>
2470     <key>Default</key>
2471     <true/> | <false/>
2472     <key>Locked</key>
2473     <true/> | <false/>
2474   </dict>
2475 </dict>
2476 ```
2477 #### policies.json
2478 ```
2479 {
2480   "policies": {
2481     "FlashPlugin": {
2482       "Allow": ["http://example.org/"],
2483       "Block": ["http://example.edu/"],
2484       "Default": true | false,
2485       "Locked": true | false
2486     }
2487   }
2488 }
2489 ```
2490
2491
2492
2493 ### Handlers
2494 Configure default application handlers. This policy is based on the internal format of `handlers.json`.
2495
2496 You can configure handlers based on a mime type (`mimeTypes`), a file's extension (`extensions`), or a protocol (`schemes`).
2497
2498 Within each handler type, you specify the given mimeType/extension/scheme as a key and use the following subkeys to describe how it is handled.
2499
2500 | Name | Description |
2501 | --- | --- |
2502 | `action`| Can be either `saveToDisk`, `useHelperApp`, `useSystemDefault`.
2503 | `ask` | If `true`, the user is asked if what they want to do with the file. If `false`, the action is taken without user intervention.
2504 | `handlers` | An array of handlers with the first one being the default. If you don't want to have a default handler, use an empty object for the first handler. Choose between path or uriTemplate.
2505 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`name` | The display name of the handler (might not be used).
2506 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`path`| The native path to the executable to be used.
2507 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`uriTemplate`| A url to a web based application handler. The URL must be https and contain a %s to be used for substitution.
2508
2509 **Compatibility:** Firefox 78, Firefox ESR 78\
2510 **CCK2 Equivalent:** N/A\
2511 **Preferences Affected:** N/A
2512
2513 #### Windows (GPO)
2514 ```
2515 Software\Policies\Mozilla\Firefox\Handlers (REG_MULTI_SZ) =
2516 {
2517   "mimeTypes": {
2518     "application/msword": {
2519       "action": "useSystemDefault",
2520       "ask": true | false
2521     }
2522   },
2523   "schemes": {
2524     "mailto": {
2525       "action": "useHelperApp",
2526       "ask": true | false,
2527       "handlers": [{
2528         "name": "Gmail",
2529         "uriTemplate": "https://mail.google.com/mail/?extsrc=mailto&url=%s"
2530       }]
2531     }
2532   },
2533   "extensions": {
2534     "pdf": {
2535       "action": "useHelperApp",
2536       "ask": true | false,
2537       "handlers": [{
2538         "name": "Adobe Acrobat",
2539         "path": "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32.exe"
2540       }]
2541     }
2542   }
2543 }
2544 ```
2545 #### Windows (Intune)
2546 OMA-URI:
2547 ```
2548 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Handlers
2549 ```
2550 Value (string):
2551 ```
2552 <enabled/>
2553 <data id="Handlers" value='
2554 {
2555   "mimeTypes": {
2556     "application/msword": {
2557       "action": "useSystemDefault",
2558       "ask": true | false
2559     }
2560   },
2561   "schemes": {
2562     "mailto": {
2563       "action": "useHelperApp",
2564       "ask": true | false,
2565       "handlers": [{
2566         "name": "Gmail",
2567         "uriTemplate": "https://mail.google.com/mail/?extsrc=mailto&amp;url=%s"
2568       }]
2569     }
2570   },
2571   "extensions": {
2572     "pdf": {
2573       "action": "useHelperApp",
2574       "ask": true | false,
2575       "handlers": [{
2576         "name": "Adobe Acrobat",
2577         "path": "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32.exe"
2578       }]
2579     }
2580   }
2581 }
2582 '/>
2583 ```
2584 #### macOS
2585 ```
2586 <dict>
2587   <key>Handlers</key>
2588   <dict>
2589     <key>mimeTypes</key>
2590     <dict>
2591       <key>application/msword</key>
2592       <dict>
2593         <key>action</key>
2594         <string>useSystemDefault</string>
2595         <key>ask</key>
2596         <true/> | <false/>
2597       </dict>
2598     </dict>
2599     <key>schemes</key>
2600     <dict>
2601       <key>mailto</key>
2602       <dict>
2603         <key>action</key>
2604         <string>useHelperApp</string>
2605         <key>ask</key>
2606         <true/> | <false/>
2607         <key>handlers</key>
2608         <array>
2609           <dict>
2610             <key>name</key>
2611             <string>Gmail</string>
2612             <key>uriTemplate</key>
2613             <string>https://mail.google.com/mail/?extsrc=mailto&url=%s</string>
2614           </dict>
2615         </array>
2616       </dict>
2617     </dict>
2618     <key>extensions</key>
2619     <dict>
2620       <key>pdf</key>
2621       <dict>
2622         <key>action</key>
2623         <string>useHelperApp</string>
2624         <key>ask</key>
2625         <true/> | <false/>
2626         <key>handlers</key>
2627         <array>
2628           <dict>
2629             <key>name</key>
2630             <string>Adobe Acrobat</string>
2631             <key>path</key>
2632             <string>/System/Applications/Preview.app</string>
2633           </dict>
2634         </array>
2635       </dict>
2636     </dict>
2637   </dict>
2638 </dict>
2639 ```
2640 #### policies.json
2641 ```
2642 {
2643   "policies": {
2644     "Handlers": {
2645       "mimeTypes": {
2646         "application/msword": {
2647           "action": "useSystemDefault",
2648           "ask": false
2649         }
2650       },
2651       "schemes": {
2652         "mailto": {
2653           "action": "useHelperApp",
2654           "ask": true | false,
2655           "handlers": [{
2656             "name": "Gmail",
2657             "uriTemplate": "https://mail.google.com/mail/?extsrc=mailto&url=%s"
2658           }]
2659         }
2660       },
2661       "extensions": {
2662         "pdf": {
2663           "action": "useHelperApp",
2664           "ask": true | false,
2665           "handlers": [{
2666             "name": "Adobe Acrobat",
2667             "path": "/usr/bin/acroread"
2668           }]
2669         }
2670       }
2671     }
2672   }
2673 }
2674 ```
2675 ### FirefoxHome
2676 Customize the Firefox Home page.
2677
2678 **Compatibility:** Firefox 68, Firefox ESR 68\
2679 **CCK2 Equivalent:** N/A\
2680 **Preferences Affected:** `browser.newtabpage.activity-stream.showSearch`,`browser.newtabpage.activity-stream.feeds.topsites`,`browser.newtabpage.activity-stream.feeds.section.highlights`,`browser.newtabpage.activity-stream.feeds.section.topstories`,`browser.newtabpage.activity-stream.feeds.snippets`
2681
2682 #### Windows (GPO)
2683 ```
2684 Software\Policies\Mozilla\Firefox\FirefoxHome\Search = 0x1 | 0x0
2685 Software\Policies\Mozilla\Firefox\FirefoxHome\TopSites = 0x1 | 0x0
2686 Software\Policies\Mozilla\Firefox\FirefoxHome\Highlights = 0x1 | 0x0
2687 Software\Policies\Mozilla\Firefox\FirefoxHome\Pocket = 0x1 | 0x0
2688 Software\Policies\Mozilla\Firefox\FirefoxHome\Snippets = 0x1 | 0x0
2689 Software\Policies\Mozilla\Firefox\FirefoxHome\Locked = 0x1 | 0x0
2690 ```
2691 #### Windows (Intune)
2692 OMA-URI:
2693 ```
2694 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/CustomizeFirefoxHome
2695 ```
2696 Value (string):
2697 ```
2698 <enabled/>
2699 <data id="FirefoxHome_Search"  value="true | false"/>
2700 <data id="FirefoxHome_TopSites"  value="true | false"/>
2701 <data id="FirefoxHome_Highlights"  value="true | false"/>
2702 <data id="FirefoxHome_Pocket"  value="true | false"/>
2703 <data id="FirefoxHome_Snippets"  value="true | false"/>
2704 <data id="FirefoxHome_Locked"  value="true | false"/>
2705 ```
2706 #### macOS
2707 ```
2708 <dict>
2709   <key>FirefoxHome</key>
2710   <dict>
2711     <key>Search</key>
2712     <true/> | <false/>
2713     <key>TopSites</key>
2714     <true/> | <false/>
2715     <key>Highlights</key>
2716     <true/> | <false/>
2717     <key>Pocket</key>
2718     <true/> | <false/>
2719     <key>Snippets</key>
2720     <true/> | <false/>
2721     <key>Locked</key>
2722     <true/> | <false/>
2723   </dict>
2724 </dict>
2725 ```
2726 #### policies.json
2727 ```
2728 {
2729   "policies": {
2730     "FirefoxHome": {
2731       "Search": true | false,
2732       "TopSites": true | false,
2733       "Highlights": true | false,
2734       "Pocket": true | false,
2735       "Snippets": true | false,
2736       "Locked": true | false
2737     }
2738   }
2739 }
2740 ```
2741 ### HardwareAcceleration
2742 Control hardware acceleration.
2743
2744 **Compatibility:** Firefox 60, Firefox ESR 60\
2745 **CCK2 Equivalent:** N/A\
2746 **Preferences Affected:** `layers.acceleration.disabled`
2747
2748 #### Windows (GPO)
2749 ```
2750 Software\Policies\Mozilla\Firefox\HardwareAcceleration = 0x1 | 0x0
2751 ```
2752 #### Windows (Intune)
2753 OMA-URI:
2754 ```
2755 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/HardwareAcceleration
2756 ```
2757 Value (string):
2758 ```
2759 <enabled/> or <disabled/>
2760 ```
2761 #### macOS
2762 ```
2763 <dict>
2764   <key>HardwareAcceleration</key>
2765   <true/> | <false/>
2766 </dict>
2767 ```
2768 #### policies.json
2769 ```
2770 {
2771   "policies": {
2772     "HardwareAcceleration": true | false
2773   }
2774 }
2775 ```
2776 ### Homepage
2777 Configure the default homepage and how Firefox starts.
2778
2779 `URL` is the default homepage.
2780
2781 `Locked` prevents the user from changing homepage preferences.
2782
2783 `Additional` allows for more than one homepage.
2784
2785 `StartPage` is how Firefox starts. The choices are no homepage, the default homepage or the previous session.
2786
2787 With Firefox 78, an additional option as added for `Startpage`, `homepage-locked`. This allows for locking the homepage, but still allowing the user to choose whether or not they want to restore their session.
2788
2789 **Compatibility:** Firefox 60, Firefox ESR 60 (StartPage was added in Firefox 60, Firefox ESR 60.4, homepage-locked added in Firefox 78)\
2790 **CCK2 Equivalent:** `homePage`,`lockHomePage`\
2791 **Preferences Affected:** `browser.startup.homepage`,`browser.startup.page`
2792
2793 #### Windows (GPO)
2794 ```
2795 Software\Policies\Mozilla\Firefox\Homepage\URL = "https://example.com"
2796 Software\Policies\Mozilla\Firefox\Homepage\Locked = 0x1 | 0x0
2797 Software\Policies\Mozilla\Firefox\Homepage\Additional\1 = "https://example.org"
2798 Software\Policies\Mozilla\Firefox\Homepage\Additional\2 = "https://example.edu"
2799 Software\Policies\Mozilla\Firefox\Homepage\StartPage = "none" | "homepage" | "previous-session" | "homepage-locked"
2800 ```
2801 #### Windows (Intune)
2802 OMA-URI:
2803 ```
2804 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageURL
2805 ```
2806 Value (string):
2807 ```
2808 <enabled/>
2809
2810 <data id="HomepageURL" value="https://example.com"/>
2811 <data id="HomepageLocked" value="true | false"/>
2812 ```
2813 OMA-URI:
2814 ```
2815 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageAdditional
2816 ```
2817 Value (string):
2818 ```
2819 <enabled/>
2820
2821 <data id="HomepageAdditional" value="1&#xF000;http://example.org&#xF000;2&#xF000;http://example.edu"/>
2822 ```
2823 OMA-URI:
2824 ```
2825 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageStartPage
2826 ```
2827 Value (string):
2828 ```
2829 <enabled/>
2830
2831 <data id="StartPage" value="none | homepage | previous-session"/>
2832 ```
2833 #### macOS
2834 ```
2835 <dict>
2836   <key>Homepage</key>
2837   <dict>
2838     <key>URL</key>
2839     <string>http://example.com</string>
2840     <key>Locked</key>
2841     <true/> | <false/>
2842     <key>Additional</key>
2843     <array>
2844       <string>http://example.org</string>
2845       <string>http://example.edu</string>
2846     </array>
2847     <key>StartPage</key>
2848     <string>none | homepage | previous-session | homepage-locked</string>
2849   </dict>
2850 </dict>
2851 ```
2852 #### policies.json
2853 ```
2854 {
2855   "policies": {
2856     "Homepage": {
2857       "URL": "http://example.com/",
2858       "Locked": true | false,
2859       "Additional": ["http://example.org/",
2860                      "http://example.edu/"],
2861       "StartPage": "none" | "homepage" | "previous-session" | "homepage-locked"
2862     }
2863   }
2864 }
2865 ```
2866 ### InstallAddonsPermission
2867 Configure the default extension install policy as well as origins for extension installs are allowed. This policy does not override turning off all extension installs.
2868
2869 `Allow` is a list of origins where extension installs are allowed.
2870
2871 `Default` determines whether or not extension installs are allowed by default.
2872
2873 **Compatibility:** Firefox 60, Firefox ESR 60\
2874 **CCK2 Equivalent:** `permissions.install`\
2875 **Preferences Affected:** `xpinstall.enabled`
2876
2877 #### Windows (GPO)
2878 ```
2879 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Allow\1 = "https://example.org"
2880 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Allow\2 = "https://example.edu"
2881 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Default = 0x1 | 0x0
2882 ```
2883 #### Windows (Intune)
2884 OMA-URI:
2885 ```
2886 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Addons/InstallAddonsPermission_Allow
2887 ```
2888 Value (string):
2889 ```
2890 <enabled/>
2891 <data id="Permissions" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
2892 ```
2893 OMA-URI:
2894 ```
2895 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Addons/InstallAddonsPermission_Default
2896 ```
2897 Value (string):
2898 ```
2899 <enabled/>
2900 ```
2901 #### macOS
2902 ```
2903 <dict>
2904   <key>InstallAddonsPermission</key>
2905   <dict>
2906     <key>Allow</key>
2907     <array>
2908       <string>http://example.org</string>
2909       <string>http://example.edu</string>
2910     </array>
2911     <key>Default</key>
2912     <true/> | <false/>
2913   </dict>
2914 </dict>
2915 ```
2916 #### policies.json
2917 ```
2918 {
2919   "policies": {
2920     "InstallAddonsPermission": {
2921       "Allow": ["http://example.org/",
2922                 "http://example.edu/"],
2923       "Default": true | false
2924     }
2925   }
2926 }
2927 ```
2928 ### LegacyProfiles
2929 Disable the feature enforcing a separate profile for each installation.
2930
2931 If this policy set to true, Firefox will not try to create different profiles for installations of Firefox in different directories. This is the equivalent of the MOZ_LEGACY_PROFILES environment variable.
2932
2933 If this policy set to false, Firefox will create a new profile for each unique installation of Firefox.
2934
2935 This policy only work on Windows via GPO (not policies.json).
2936
2937 **Compatibility:** Firefox 70, Firefox ESR 68.2 (Windows only, GPO only)\
2938 **CCK2 Equivalent:** N/A\
2939 **Preferences Affected:** N/A
2940
2941 #### Windows (GPO)
2942 ```
2943 Software\Policies\Mozilla\Firefox\LegacyProfiles = = 0x1 | 0x0
2944 ```
2945 #### Windows (Intune)
2946 OMA-URI:
2947 ```
2948 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/LegacyProfiles
2949 ```
2950 Value (string):
2951 ```
2952 <enabled/> or <disabled/>
2953 ```
2954 ### LocalFileLinks
2955 Enable linking to local files by origin.
2956
2957 **Compatibility:** Firefox 68, Firefox ESR 68\
2958 **CCK2 Equivalent:** N/A\
2959 **Preferences Affected:** `capability.policy.localfilelinks.*`
2960
2961 #### Windows (GPO)
2962 ```
2963 Software\Policies\Mozilla\Firefox\LocalFileLinks\1 = "https://example.org"
2964 Software\Policies\Mozilla\Firefox\LocalFileLinks\2 = "https://example.edu"
2965 ```
2966 #### Windows (Intune)
2967 OMA-URI:
2968 ```
2969 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/LocalFileLinks
2970 ```
2971 Value (string):
2972 ```
2973 <enabled/>
2974 <data id="LocalFileLinks" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
2975 ```
2976 #### macOS
2977 ```
2978 <dict>
2979   <key>LocalFileLinks</key>
2980   <array>
2981     <string>http://example.org</string>
2982     <string>http://example.edu</string>
2983   </array>
2984 </dict>
2985 ```
2986 #### policies.json
2987 ```
2988 {
2989   "policies": {
2990     "LocalFileLinks": ["http://example.org/",
2991                        "http://example.edu/"]
2992   }
2993 }
2994 ```
2995 ### ManagedBookmarks
2996 Configures a list of bookmarks managed by an administrator that cannot be changed by the user.
2997
2998 **Compatibility:** Firefox 83, Firefox ESR 78.5\
2999 **CCK2 Equivalent:** N/A\
3000 **Preferences Affected:** N/A
3001
3002 #### Windows (GPO)
3003 ```
3004 Software\Policies\Mozilla\Firefox\ManagedBookmarks (REG_MULTI_SZ) =
3005 [
3006   {
3007     "toplevel_name": "My managed bookmarks folder"
3008   },
3009   {
3010     "url": "example.com",
3011     "name": "Example"
3012   },
3013   {
3014     "name": "Mozilla links",
3015     "children": [
3016       {
3017         "url": "https://mozilla.org",
3018         "name": "Mozilla.org"
3019       },
3020       {
3021         "url": "https://support.mozilla.org/",
3022         "name": "SUMO"
3023       }
3024     ]
3025   }
3026 ]
3027 ```
3028 #### Windows (Intune)
3029 OMA-URI:
3030 ```
3031 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/ManagedBookmarks
3032 ```
3033 Value (string):
3034 ```
3035 <enabled/>
3036 <data id="ManagedBookmarks" value='
3037 [
3038   {
3039     "toplevel_name": "My managed bookmarks folder"
3040   },
3041   {
3042     "url": "example.com",
3043     "name": "Example"
3044   },
3045   {
3046     "name": "Mozilla links",
3047     "children": [
3048       {
3049         "url": "https://mozilla.org",
3050         "name": "Mozilla.org"
3051       },
3052       {
3053         "url": "https://support.mozilla.org/",
3054         "name": "SUMO"
3055       }
3056     ]
3057   }
3058 ]'/>
3059 ```
3060 #### macOS
3061 ```
3062 <dict>
3063   <key>ManagedBookmarks</key>
3064   <array>
3065     <dict>
3066       <key>toplevel_name</key>
3067       <string>My managed bookmarks folder</string></dict>
3068       <dict>
3069         <key>url</key>
3070         <string>example.com</string>
3071         <key>name</key>
3072         <string>Example</string>
3073       </dict>
3074       <dict>
3075       <key>name</key>
3076       <string>Mozilla links</string>
3077       <key>children</key>
3078       <array>
3079         <dict>
3080           <key>url</key>
3081           <string>https://mozilla.org</string>
3082           <key>name</key>
3083           <string>Mozilla</string>
3084         </dict>
3085         <dict>
3086           <key>url</key>
3087           <string>https://support.mozilla.org/</string>
3088           <key>name</key>
3089           <string>SUMO</string>
3090         </dict>
3091       </array>
3092     </dict>
3093   </array>
3094 </dict>
3095 ```
3096 #### policies.json
3097 ```
3098 {
3099   "policies": {
3100     "ManagedBookmarks": [
3101       {
3102         "toplevel_name": "My managed bookmarks folder"
3103       },
3104       {
3105         "url": "example.com",
3106         "name": "Example"
3107       },
3108       {
3109         "name": "Mozilla links",
3110         "children": [
3111           {
3112             "url": "https://mozilla.org",
3113             "name": "Mozilla.org"
3114           },
3115           {
3116             "url": "https://support.mozilla.org/",
3117             "name": "SUMO"
3118           }
3119         ]
3120       }
3121     ]
3122   }
3123 }
3124 ```
3125 ### PrimaryPassword
3126 Require or prevent using a primary (formerly master) password.
3127
3128 If this value is true, a primary password is required. If this value is false, it works the same as if [`DisableMasterPasswordCreation`](#disablemasterpasswordcreation) was true and removes the primary password functionality.
3129
3130 If both DisableMasterPasswordCreation and PrimaryPassword are used, DisableMasterPasswordCreation takes precedent.
3131
3132 **Compatibility:** Firefox 79, Firefox ESR 78.1\
3133 **CCK2 Equivalent:** `noMasterPassword`\
3134 **Preferences Affected:** N/A
3135
3136 #### Windows (GPO)
3137 ```
3138 Software\Policies\Mozilla\Firefox\PrimaryPassword = 0x1 | 0x0
3139 ```
3140 #### Windows (Intune)
3141 OMA-URI:
3142 ```
3143 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PrimaryPassword
3144 ```
3145 Value (string):
3146 ```
3147 <enabled/> or <disabled/>
3148 ```
3149 #### macOS
3150 ```
3151 <dict>
3152   <key>PrimaryPassword</key>
3153   <true/> | <false/>
3154 </dict>
3155 ```
3156 #### policies.json
3157 ```
3158 {
3159   "policies": {
3160     "PrimaryPassword": true | false
3161   }
3162 }
3163 ```
3164 ### NetworkPrediction
3165 Enable or disable network prediction (DNS prefetching).
3166
3167 **Compatibility:** Firefox 67, Firefox ESR 60.7\
3168 **CCK2 Equivalent:** N/A\
3169 **Preferences Affected:** `network.dns.disablePrefetch`,`network.dns.disablePrefetchFromHTTPS`
3170
3171 #### Windows (GPO)
3172 ```
3173 Software\Policies\Mozilla\Firefox\NetworkPrediction = 0x1 | 0x0
3174 ```
3175 #### Windows (Intune)
3176 OMA-URI:
3177 ```
3178 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NetworkPrediction
3179 ```
3180 Value (string):
3181 ```
3182 <enabled/> or <disabled/>
3183 ```
3184 #### macOS
3185 ```
3186 <dict>
3187   <key>NetworkPrediction</key>
3188   <true/> | <false/>
3189 </dict>
3190 ```
3191 #### policies.json
3192 ```
3193 {
3194   "policies": {
3195     "NetworkPrediction": true | false
3196 }
3197 ```
3198 ### NewTabPage
3199 Enable or disable the New Tab page.
3200
3201 **Compatibility:** Firefox 68, Firefox ESR 68\
3202 **CCK2 Equivalent:** N/A\
3203 **Preferences Affected:** `browser.newtabpage.enabled`
3204
3205 #### Windows (GPO)
3206 ```
3207 Software\Policies\Mozilla\Firefox\NewTabPage = 0x1 | 0x0
3208 ```
3209 #### Windows (Intune)
3210 OMA-URI:
3211 ```
3212 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NewTabPage
3213 ```
3214 Value (string):
3215 ```
3216 <enabled/> or <disabled/>
3217 ```
3218 #### macOS
3219 ```
3220 <dict>
3221   <key>NewTabPage</key>
3222   <true/> | <false/>
3223 </dict>
3224 ```
3225 #### policies.json
3226 ```
3227 {
3228   "policies": {
3229     "NewTabPage": true | false
3230 }
3231 ```
3232 ### NoDefaultBookmarks
3233 Disable the creation of default bookmarks.
3234
3235 This policy is only effective if the user profile has not been created yet.
3236
3237 **Compatibility:** Firefox 60, Firefox ESR 60\
3238 **CCK2 Equivalent:** `removeDefaultBookmarks`\
3239 **Preferences Affected:** N/A
3240
3241 #### Windows (GPO)
3242 ```
3243 Software\Policies\Mozilla\Firefox\NoDefaultBookmarks = 0x1 | 0x0
3244 ```
3245 #### Windows (Intune)
3246 OMA-URI:
3247 ```
3248 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NoDefaultBookmarks
3249 ```
3250 Value (string):
3251 ```
3252 <enabled/> or <disabled/>
3253 ```
3254 #### macOS
3255 ```
3256 <dict>
3257   <key>NoDefaultBookmarks</key>
3258   <true/> | <false/>
3259 </dict>
3260 ```
3261 #### policies.json
3262 ```
3263 {
3264   "policies": {
3265     "NoDefaultBookmarks": true | false
3266   }
3267 }
3268 ```
3269 ### OfferToSaveLogins
3270 Control whether or not Firefox offers to save passwords.
3271
3272 **Compatibility:** Firefox 60, Firefox ESR 60\
3273 **CCK2 Equivalent:** `dontRememberPasswords`\
3274 **Preferences Affected:** `signon.rememberSignons`
3275
3276 #### Windows (GPO)
3277 ```
3278 Software\Policies\Mozilla\Firefox\OfferToSaveLogins = 0x1 | 0x0
3279 ```
3280 #### Windows (Intune)
3281 OMA-URI:
3282 ```
3283 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OfferToSaveLogins
3284 ```
3285 Value (string):
3286 ```
3287 <enabled/> or <disabled/>
3288 ```
3289 #### macOS
3290 ```
3291 <dict>
3292   <key>OfferToSaveLogins</key>
3293   <true/> | <false/>
3294 </dict>
3295 ```
3296 #### policies.json
3297 ```
3298 {
3299   "policies": {
3300     "OfferToSaveLogins": true | false
3301   }
3302 }
3303 ```
3304 ### OfferToSaveLoginsDefault
3305 Sets the default value of signon.rememberSignons without locking it.
3306
3307 **Compatibility:** Firefox 70, Firefox ESR 60.2\
3308 **CCK2 Equivalent:** `dontRememberPasswords`\
3309 **Preferences Affected:** `signon.rememberSignons`
3310
3311 #### Windows (GPO)
3312 ```
3313 Software\Policies\Mozilla\Firefox\OfferToSaveLoginsDefault = 0x1 | 0x0
3314 ```
3315 #### Windows (Intune)
3316 OMA-URI:
3317 ```
3318 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OfferToSaveLoginsDefault
3319 ```
3320 Value (string):
3321 ```
3322 <enabled/> or <disabled/>
3323 ```
3324 #### macOS
3325 ```
3326 <dict>
3327   <key>OfferToSaveLoginsDefault</key>
3328   <true/> | <false/>
3329 </dict>
3330 ```
3331 #### policies.json
3332 ```
3333 {
3334   "policies": {
3335     "OfferToSaveLoginsDefault": true | false
3336   }
3337 }
3338 ```
3339 ### OverrideFirstRunPage
3340 Override the first run page. If the value is an empty string (""), the first run page is not displayed.
3341
3342 Starting with Firefox 83, Firefox ESR 78.5, you can also specify multiple URLS separated by a vertical bar (|).
3343
3344 **Compatibility:** Firefox 60, Firefox ESR 60\
3345 **CCK2 Equivalent:** `welcomePage`,`noWelcomePage`\
3346 **Preferences Affected:** `startup.homepage_welcome_url`
3347
3348 #### Windows (GPO)
3349 ```
3350 Software\Policies\Mozilla\Firefox\OverrideFirstRunPage = "http://example.org"
3351 ```
3352 #### Windows (Intune)
3353 OMA-URI:
3354 ```
3355 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OverrideFirstRunPage
3356 ```
3357 Value (string):
3358 ```
3359 <enabled/>
3360 <data id="OverridePage" value="https://example.com"/>
3361 ```
3362 #### macOS
3363 ```
3364 <dict>
3365   <key>OverrideFirstRunPage</key>
3366   <string>http://example.org</string>
3367 </dict>
3368 ```
3369 #### policies.json
3370 ```
3371 {
3372   "policies": {
3373     "OverrideFirstRunPage": "http://example.org"
3374 }
3375 ```
3376 ### OverridePostUpdatePage
3377 Override the upgrade page. If the value is an empty string (""), no extra pages are displayed when Firefox is upgraded.
3378
3379 **Compatibility:** Firefox 60, Firefox ESR 60\
3380 **CCK2 Equivalent:** `upgradePage`,`noUpgradePage`\
3381 **Preferences Affected:** `startup.homepage_override_url`
3382
3383 #### Windows (GPO)
3384 ```
3385 Software\Policies\Mozilla\Firefox\OverridePostUpdatePage = "http://example.org"
3386 ```
3387 #### Windows (Intune)
3388 OMA-URI:
3389 ```
3390 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OverridePostUpdatePage
3391 ```
3392 Value (string):
3393 ```
3394 <enabled/>
3395 <data id="OverridePage" value="https://example.com"/>
3396 ```
3397 #### macOS
3398 ```
3399 <dict>
3400   <key>OverridePostUpdatePage</key>
3401   <string>http://example.org</string>
3402 </dict>
3403 ```
3404 #### policies.json
3405 ```
3406 {
3407   "policies": {
3408     "OverridePostUpdatePage": "http://example.org"
3409 }
3410 ```
3411 ### PasswordManagerEnabled
3412 Remove access to the password manager via preferences and blocks about:logins on Firefox 70.
3413
3414 **Compatibility:** Firefox 70, Firefox ESR 60.2\
3415 **CCK2 Equivalent:** N/A\
3416 **Preferences Affected:** `pref.privacy.disable_button.view_passwords`
3417
3418 #### Windows (GPO)
3419 ```
3420 Software\Policies\Mozilla\Firefox\PasswordManagerEnabled = 0x1 | 0x0
3421 ```
3422 #### Windows (Intune)
3423 OMA-URI:
3424 ```
3425 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PasswordManagerEnabled
3426 ```
3427 Value (string):
3428 ```
3429 <enabled/> or <disabled/>
3430 ```
3431 #### macOS
3432 ```
3433 <dict>
3434   <key>PasswordManagerEnabled</key>
3435   <true/> | <false/>
3436 </dict>
3437 ```
3438 #### policies.json
3439 ```
3440 {
3441   "policies": {
3442     "PasswordManagerEnabled": true | false
3443   }
3444 }
3445 ```
3446 ### PDFjs
3447 Disable or configure PDF.js, the built-in PDF viewer.
3448
3449 If `Enabled` is set to false, the built-in PDF viewer is disabled.
3450
3451 If `EnablePermissions` is set to true, the built-in PDF viewer will honor document permissions like preventing the copying of text.
3452
3453 Note: DisableBuiltinPDFViewer has not been deprecated. You can either continue to use it, or switch to using PDFjs->Enabled to disable the built-in PDF viewer. This new permission was added because we needed a place for PDFjs->EnabledPermissions.
3454
3455 **Compatibility:** Firefox 77, Firefox ESR 68.9\
3456 **CCK2 Equivalent:** N/A\
3457 **Preferences Affected:** `pdfjs.diabled`,`pdfjs.enablePermissions`
3458
3459 #### Windows (GPO)
3460 ```
3461 Software\Policies\Mozilla\Firefox\PDFjs\Enabled = 0x1 | 0x0
3462 Software\Policies\Mozilla\Firefox\PDFjs\EnablePermissions = 0x1 | 0x0
3463 ```
3464 #### Windows (Intune)
3465 OMA-URI:
3466 ```
3467 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PDFjs/PDFjs_Enabled
3468 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PDFjs/PDFjs_EnablePermissions
3469 ```
3470 Value (string):
3471 ```
3472 <enabled/>or <disabled/>
3473 ```
3474 #### macOS
3475 ```
3476 <dict>
3477   <key>PDFjs</key>
3478   <dict>
3479     <key>Enabled</key>
3480     <true/> | <false/>
3481     <key>EnablePermissions</key>
3482     <true/> | <false/>
3483   </dict>
3484 </dict>
3485 ```
3486 #### policies.json
3487 ```
3488 {
3489   "policies": {
3490     "PSFjs": {
3491       "Enabled": true | false,
3492       "EnablePermissions": true | false
3493     }
3494 }
3495 ```
3496 ### Permissions
3497 Set permissions associated with camera, microphone, location, notifications, autoplay, and virtual reality. Because these are origins, not domains, entries with unique ports must be specified separately. This explicitly means that it is not possible to add wildcards. See examples below.
3498
3499 `Allow` is a list of origins where the feature is allowed.
3500
3501 `Block` is a list of origins where the feature is not allowed.
3502
3503 `BlockNewRequests` determines whether or not new requests can be made for the feature.
3504
3505 `Locked` prevents the user from changing preferences for the feature.
3506
3507 `Default` specifies the default value for Autoplay. block-audio-video is not supported on Firefox ESR 68.
3508
3509 **Compatibility:** Firefox 62, Firefox ESR 60.2 (Autoplay added in Firefox 74, Firefox ESR 68.6, Autoplay Default/Locked added in Firefox 76, Firefox ESR 68.8, VirtualReality added in Firefox 80, Firefox ESR 78.2)\
3510 **CCK2 Equivalent:** N/A\
3511 **Preferences Affected:** `permissions.default.camera`,`permissions.default.microphone`,`permissions.default.geo`,`permissions.default.desktop-notification`,`media.autoplay.default`.`permissions.default.xr`
3512
3513 #### Windows (GPO)
3514 ```
3515 Software\Policies\Mozilla\Firefox\Permissions\Camera\Allow\1 = "https://example.org"
3516 Software\Policies\Mozilla\Firefox\Permissions\Camera\Allow\2 = "https://example.org:1234"
3517 Software\Policies\Mozilla\Firefox\Permissions\Camera\Block\1 = "https://example.edu"
3518 Software\Policies\Mozilla\Firefox\Permissions\Camera\BlockNewRequests = 0x1 | 0x0
3519 Software\Policies\Mozilla\Firefox\Permissions\Camera\Locked = 0x1 | 0x0
3520 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Allow\1 = "https://example.org"
3521 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Block\1 = "https://example.edu"
3522 Software\Policies\Mozilla\Firefox\Permissions\Microphone\BlockNewRequests = 0x1 | 0x0
3523 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Locked = 0x1 | 0x0
3524 Software\Policies\Mozilla\Firefox\Permissions\Location\Allow\1 = "https://example.org"
3525 Software\Policies\Mozilla\Firefox\Permissions\Location\Block\1 = "https://example.edu"
3526 Software\Policies\Mozilla\Firefox\Permissions\Location\BlockNewRequests = 0x1 | 0x0
3527 Software\Policies\Mozilla\Firefox\Permissions\Location\Locked = 0x1 | 0x0
3528 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Allow\1 = "https://example.org"
3529 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Block\1 = "https://example.edu"
3530 Software\Policies\Mozilla\Firefox\Permissions\Notifications\BlockNewRequests = 0x1 | 0x0
3531 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Locked = 0x1 | 0x0
3532 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Allow\1 = "https://example.org"
3533 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Block\1 = "https://example.edu"
3534 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Default = "allow-audio-video" | "block-audio" | "block-audio-video"
3535 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Locked = 0x1 | 0x0
3536 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\Allow\1 = "https://example.org"
3537 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\Block\1 = "https://example.edu"
3538 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\BlockNewRequests = 0x1 | 0x0
3539 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\Locked = 0x1 | 0x0
3540 ```
3541 #### Windows (Intune)
3542 OMA-URI:
3543 ```
3544 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Location/Location_BlockNewRequests
3545 ```
3546 Value (string):
3547 ```
3548 <enabled/> or <disabled/>
3549 ```
3550 OMA-URI:
3551 ```
3552 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Location/Location_Locked
3553 ```
3554 Value (string):
3555 ```
3556 <enabled/> or <disabled/>
3557 ```
3558 OMA-URI:
3559 ```
3560 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_Allow
3561 ```
3562 Value (string):
3563 ```
3564 <enabled/>
3565 <data id="Permissions" value="1&#xF000;https://example.org"/>
3566 ```
3567 OMA-URI:
3568 ```
3569 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_BlockNewRequests
3570 ```
3571 Value (string):
3572 ```
3573 <enabled/> or <disabled/>
3574 ```
3575 OMA-URI:
3576 ```
3577 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_Locked
3578 ```
3579 Value (string):
3580 ```
3581 <enabled/> or <disabled/>
3582 ```
3583 OMA-URI:
3584 ```
3585 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Allow
3586 ```
3587 Value (string):
3588 ```
3589 <enabled/>
3590 <data id="Permissions" value="1&#xF000;https://example.org"/>
3591 ```
3592 OMA-URI:
3593 ```
3594 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Block
3595 ```
3596 Value (string):
3597 ```
3598 <enabled/>
3599 <data id="Permissions" value="1&#xF000;https://example.edu"/>
3600 ```
3601 OMA-URI:
3602 ```
3603 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Default
3604 ```
3605 Value (string):
3606 ```
3607 <enabled/>
3608 <data id="Autoplay_Default" value="allow-audio-video | block-audio | block-audio-video"/>
3609 ```
3610 OMA-URI:
3611 ```
3612 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Locked
3613 ```
3614 Value (string):
3615 ```
3616 <enabled/> or <disabled/>
3617 ```
3618 OMA-URI:
3619 ```
3620 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_Allow
3621 ```
3622 Value (string):
3623 ```
3624 <enabled/>
3625 <data id="Permissions" value="1&#xF000;https://example.org"/>
3626 ```
3627 OMA-URI:
3628 ```
3629 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_Block
3630 ```
3631 Value (string):
3632 ```
3633 <enabled/>
3634 <data id="Permissions" value="1&#xF000;https://example.edu"/>
3635 ```
3636 OMA-URI:
3637 ```
3638 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_BlockNewRequests
3639 ```
3640 Value (string):
3641 ```
3642 <enabled/> or <disabled/>
3643 ```
3644 OMA-URI:
3645 ```
3646 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_Locked
3647 ```
3648 Value (string):
3649 ```
3650 <enabled/> or <disabled/>
3651 ```
3652 #### macOS
3653 ```
3654 <dict>
3655   <key>Permissions</key>
3656   <dict>
3657     <key>Camera</key>
3658     <dict>
3659       <key>Allow</key>
3660       <array>
3661         <string>https://example.org</string>
3662         <string>https://example.org:1234</string>
3663       </array>
3664       <key>Block</key>
3665       <array>
3666         <string>https://example.edu</string>
3667       </array>
3668       <key>BlockNewRequests</key>
3669       <true/> | <false/>
3670       <key>Locked</key>
3671       <true/> | <false/>
3672     </dict>
3673     <key>Microphone</key>
3674     <dict>
3675       <key>Allow</key>
3676       <array>
3677         <string>https://example.org</string>
3678       </array>
3679       <key>Block</key>
3680       <array>
3681         <string>https://example.edu</string>
3682       </array>
3683       <key>BlockNewRequests</key>
3684       <true/> | <false/>
3685       <key>Locked</key>
3686       <true/> | <false/>
3687     </dict>
3688     <key>Location</key>
3689     <dict>
3690       <key>Allow</key>
3691       <array>
3692         <string>https://example.org</string>
3693       </array>
3694       <key>Block</key>
3695       <array>
3696         <string>https://example.edu</string>
3697       </array>
3698       <key>BlockNewRequests</key>
3699       <true/> | <false/>
3700       <key>Locked</key>
3701       <true/> | <false/>
3702     </dict>
3703     <key>Notifications</key>
3704     <dict>
3705       <key>Allow</key>
3706       <array>
3707         <string>https://example.org</string>
3708       </array>
3709       <key>Block</key>
3710       <array>
3711         <string>https://example.edu</string>
3712       </array>
3713       <key>BlockNewRequests</key>
3714       <true/>
3715       <key>Locked</key>
3716       <true/>
3717     </dict>
3718     <key>Autoplay</key>
3719     <dict>
3720       <key>Allow</key>
3721       <array>
3722         <string>https://example.org</string>
3723       </array>
3724       <key>Block</key>
3725       <array>
3726         <string>https://example.edu</string>
3727       </array>
3728       <key>Default</key>
3729       <string>allow-audio-video | block-audio | block-audio-video</string>
3730       <key>Locked</key>
3731       <true/> | <false/>
3732     </dict>
3733   </dict>
3734 </dict>
3735 ```
3736 #### policies.json
3737 ```
3738 {
3739   "policies": {
3740     "Permissions": {
3741       "Camera": {
3742         "Allow": ["https://example.org","https://example.org:1234"],
3743         "Block": ["https://example.edu"],
3744         "BlockNewRequests": true | false,
3745         "Locked": true | false
3746       },
3747       "Microphone": {
3748         "Allow": ["https://example.org"],
3749         "Block": ["https://example.edu"],
3750         "BlockNewRequests": true | false,
3751         "Locked": true | false
3752       },
3753       "Location": {
3754         "Allow": ["https://example.org"],
3755         "Block": ["https://example.edu"],
3756         "BlockNewRequests": true | false,
3757         "Locked": true | false
3758       },
3759       "Notifications": {
3760         "Allow": ["https://example.org"],
3761         "Block": ["https://example.edu"],
3762         "BlockNewRequests": true | false,
3763         "Locked": true | false
3764       },
3765       "Autoplay": {
3766         "Allow": ["https://example.org"],
3767         "Block": ["https://example.edu"],
3768         "Default": "allow-audio-video" | "block-audio" | "block-audio-video",
3769         "Locked": true | false
3770       }
3771     }
3772   }
3773 }
3774 ```
3775 ### PictureInPicture
3776
3777 Enable or disable Picture-in-Picture.
3778
3779 **Compatibility:** Firefox 78, Firefox ESR 78\
3780 **CCK2 Equivalent:** N/A\
3781 **Preferences Affected:** `media.videocontrols.picture-in-picture.video-toggle.enabled`
3782
3783 #### Windows (GPO)
3784 ```
3785 Software\Policies\Mozilla\Firefox\PictureInPicture = 0x1 | 0x0
3786 ```
3787 #### Windows (Intune)
3788 OMA-URI:
3789 ```
3790 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PictureInPicture
3791 ```
3792 Value (string):
3793 ```
3794 <enabled/> or <disabled/>
3795 ```
3796 #### macOS
3797 ```
3798 <dict>
3799   <key>PictureInPicture</key>
3800   <true/> | <false/>
3801 </dict>
3802 ```
3803 #### policies.json
3804 ```
3805 {
3806   "policies": {
3807     "PictureInPicture": true | false
3808   }
3809 }
3810 ```
3811 ### PopupBlocking
3812 Configure the default pop-up window policy as well as origins for which pop-up windows are allowed.
3813
3814 `Allow` is a list of origins where popup-windows are allowed.
3815
3816 `Default` determines whether or not pop-up windows are allowed by default.
3817
3818 `Locked` prevents the user from changing pop-up preferences.
3819
3820 **Compatibility:** Firefox 60, Firefox ESR 60\
3821 **CCK2 Equivalent:** `permissions.popup`\
3822 **Preferences Affected:** `dom.disable_open_during_load`
3823
3824 #### Windows (GPO)
3825 ```
3826 Software\Policies\Mozilla\Firefox\PopupBlocking\Allow\1 = "https://example.org"
3827 Software\Policies\Mozilla\Firefox\PopupBlocking\Allow\2 = "https://example.edu"
3828 Software\Policies\Mozilla\Firefox\PopupBlocking\Default = 0x1 | 0x0
3829 Software\Policies\Mozilla\Firefox\PopupBlocking\Locked = 0x1 | 0x0
3830 ```
3831 #### Windows (Intune)
3832 OMA-URI:
3833 ```
3834 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Allow
3835 ```
3836 Value (string):
3837 ```
3838 <enabled/>
3839 <data id="Permissions" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
3840 ```
3841 OMA-URI:
3842 ```
3843 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Default
3844 ```
3845 Value (string):
3846 ```
3847 <enabled/> or <disabled/>
3848 ```
3849 OMA-URI:
3850 ```
3851 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Locked
3852 ```
3853 Value (string):
3854 ```
3855 <enabled/> or <disabled/>
3856 ```
3857 #### macOS
3858 ```
3859 <dict>
3860   <key>PopupBlocking</key>
3861   <dict>
3862     <key>Allow</key>
3863     <array>
3864       <string>http://example.org</string>
3865       <string>http://example.edu</string>
3866     </array>
3867     <key>Default</key>
3868     <true/> | <false/>
3869     <key>Locked</key>
3870     <true/> | <false/>
3871   </dict>
3872 </dict>
3873 ```
3874 #### policies.json
3875 ```
3876 {
3877   "policies": {
3878     "PopupBlocking": {
3879       "Allow": ["http://example.org/",
3880                 "http://example.edu/"],
3881       "Default": true | false,
3882       "Locked": true | false
3883     }
3884   }
3885 }
3886 ```
3887 ### Preferences
3888 Set and lock preferences.
3889
3890 **NOTE** On Windows, in order to use this policy, you must clear all settings in the old **Preferences (Deprecated)** section.
3891
3892 Previously you could only set and lock a subset of preferences. Starting with Firefox 81 and Firefox ESR 78.3 you can set many more preferences. You can also set default preferences, user preferences and you can clear preferences.
3893
3894 Preferences that start with the following prefixes are supported:
3895 ```
3896 accessibility.
3897 browser.
3898 datareporting.policy.
3899 dom.
3900 extensions.
3901 general.autoScroll (Firefox 83, Firefox ESR 78.5)
3902 general.smoothScroll (Firefox 83, Firefox ESR 78.5)
3903 geo.
3904 intl.
3905 layout.
3906 media.
3907 network.
3908 places.
3909 print.
3910 signon. (Firefox 83, Firefox ESR 78.5)
3911 ui.
3912 widget.
3913 ```
3914 as well as the following security preferences:
3915 | Preference | Type | Default
3916 | --- | --- | ---
3917 | security.default_personal_cert | string | Ask Every Time
3918 | &nbsp;&nbsp;&nbsp;&nbsp;If set to Select Automatically, Firefox automatically chooses the default personal certificate.
3919 | security.insecure_connection_text.enabled | bool | false
3920 | &nbsp;&nbsp;&nbsp;&nbsp;If set to true, adds the words "Not Secure" for insecure sites.
3921 | security.insecure_connection_text.pbmode.enabled | bool | false
3922 | &nbsp;&nbsp;&nbsp;&nbsp;If set to true, adds the words "Not Secure" for insecure sites in private browsing.
3923 | security.insecure_field_warning.contextual.enabled | bool | true
3924 | &nbsp;&nbsp;&nbsp;&nbsp;If set to false, remove the warning for inscure login fields.
3925 | security.mixed_content.block_active_content | boolean | true
3926 | &nbsp;&nbsp;&nbsp;&nbsp;If false, mixed active content (HTTP and HTTPS) is not blocked.
3927 | security.osclientcerts.autoload | boolean | false
3928 | &nbsp;&nbsp;&nbsp;&nbsp;If true, client certificates are loaded from the operating system certificate store.
3929 | security.ssl.errorReporting.enabled | boolean | true
3930 | &nbsp;&nbsp;&nbsp;&nbsp;If false, SSL errors cannot be sent to Mozilla.
3931 | security.tls.hello_downgrade_check | boolean | true
3932 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the TLS 1.3 downgrade check is disabled.
3933 | security.warn_submit_secure_to_insecure | boolean | true
3934 | &nbsp;&nbsp;&nbsp;&nbsp;If false, no warning is shown when submitting s form from https to http.
3935 &nbsp;
3936
3937 Using the preference as the key, set the `Value` to the corresponding preference value.
3938
3939 `Status` can be "default", "locked", "user" or "clear"
3940
3941 Default preferences can be modified by the user.
3942
3943 If a value is locked, it is also set as the default.
3944
3945 User preferences persist across invocations of Firefox. It is the equivalent of a user setting the preference. They are most useful when a preference is needed very early in startup so it can't be set as default by policy.
3946
3947 User preferences persist even if the policy is removed, so if you need to remove them, you should use the clear policy.
3948
3949 See the examples below for more detail.
3950
3951 IMPORTANT: Make sure you're only setting a particular preference using this mechanism and not some other way.
3952
3953 Status
3954 **Compatibility:** Firefox 81, Firefox ESR 78.3\
3955 **CCK2 Equivalent:** `preferences`\
3956 **Preferences Affected:** Many
3957
3958 #### Windows (GPO)
3959 ```
3960 Software\Policies\Mozilla\Firefox\Preferences (REG_MULTI_SZ) =
3961 {
3962   "accessibility.force_disabled": {
3963     "Value": 1,
3964     "Status": "default"
3965   },
3966   "browser.cache.disk.parent_directory": {
3967     "Value": "SOME_NATIVE_PATH",
3968     "Status": "user"
3969   },
3970   "browser.tabs.warnOnClose": {
3971     "Value": false,
3972     "Status": "locked"
3973   }
3974 }
3975 ```
3976 #### Windows (Intune)
3977 OMA-URI:
3978 ```
3979 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Preferences
3980 ```
3981 Value (string):
3982 ```
3983 <enabled/>
3984 <data id="Preferences" value='
3985 {
3986   "accessibility.force_disabled": {
3987     "Value": 1,
3988     "Status": "default"
3989   },
3990   "browser.cache.disk.parent_directory": {
3991     "Value": "SOME_NATIVE_PATH",
3992     "Status": "user"
3993   },
3994   "browser.tabs.warnOnClose": {
3995     "Value": false,
3996     "Status": "locked"
3997   }
3998 }'/>
3999 ```
4000 #### macOS
4001 ```
4002 <dict>
4003   <key>Preferences</key>
4004   <dict>
4005     <key>accessibility.force_disabled</key>
4006     <dict>
4007       <key>Value</key>
4008       <integer>1</integer>
4009       <key>Status</key>
4010       <string>default</string>
4011     </dict>
4012     <key>browser.cache.disk.parent_directory</key>
4013     <dict>
4014       <key>Value</key>
4015       <string>SOME_NATIVE_PATH</string>
4016       <key>Status</key>
4017       <string>user</string>
4018     </dict>
4019     <key>browser.tabs.warnOnClose</key>
4020     <dict>
4021       <key>Value</key>
4022       <false/>
4023       <key>Status</key>
4024       <string>locked</string>
4025     </dict>
4026   </dict>
4027 </dict>
4028 ```
4029 #### policies.json
4030 ```
4031 {
4032   "policies": {
4033     "Preferences": {
4034       "accessibility.force_disabled": {
4035         "Value": 1,
4036         "Status": "default"
4037       },
4038       "browser.cache.disk.parent_directory": {
4039         "Value": "SOME_NATIVE_PATH",
4040         "Status": "user"
4041       },
4042       "browser.tabs.warnOnClose": {
4043         "Value": false,
4044         "Status": "locked"
4045       }
4046     }
4047   }
4048 }
4049 ```
4050 ### Preferences (Deprecated)
4051 Set and lock certain preferences.
4052
4053 **Compatibility:** See below\
4054 **CCK2 Equivalent:** `preferences`\
4055 **Preferences Affected:** See below
4056
4057 | Preference | Type | Compatibility | Default
4058 | --- | --- | --- | ---
4059 | accessibility.force_disabled | integer | Firefox 70, Firefox ESR 68.2 | 0
4060 | &nbsp;&nbsp;&nbsp;&nbsp;If set to 1, platform accessibility is disabled.
4061 | app.update.auto (Deprecated - Switch to AppAutoUpdate policy) | boolean | Firefox 68, Firefox ESR 68 | true
4062 | &nbsp;&nbsp;&nbsp;&nbsp;If false, Firefox doesn't automatically install update.
4063 | browser.bookmarks.autoExportHTML | boolean | Firefox 70, Firefox ESR 68.2 | false
4064 | &nbsp;&nbsp;&nbsp;&nbsp;If true, bookmarks are exported on shutdown.
4065 | browser.bookmarks.file | string | Firefox 70, Firefox ESR 68.2 | N/A
4066 | &nbsp;&nbsp;&nbsp;&nbsp;If set, the name of the file where bookmarks are exported and imported.
4067 | browser.bookmarks.restore_default_bookmarks | boolean | Firefox 70, Firefox ESR 68.2 | N/A
4068 | &nbsp;&nbsp;&nbsp;&nbsp;If true, bookmarks are restored to their defaults.
4069 | browser.cache.disk.enable | boolean | Firefox 68, Firefox ESR 68 | true
4070 | &nbsp;&nbsp;&nbsp;&nbsp;If false, don't store cache on the hard drive.
4071 | ~browser.cache.disk.parent_directory~ | string | Firefox 68, Firefox ESR 68 | Profile temporary directory
4072 | &nbsp;&nbsp;&nbsp;&nbsp;~If set, changes the location of the disk cache.~ This policy doesn't work. It's being worked on.
4073 | browser.fixup.dns_first_for_single_words | boolean | Firefox 68, Firefox ESR 68 | false
4074 | &nbsp;&nbsp;&nbsp;&nbsp;If true, single words are sent to DNS, not directly to search.
4075 | browser.newtabpage.activity-stream.default.sites | string | Firefox 72, ESR 68.4 | Locale dependent
4076 | &nbsp;&nbsp;&nbsp;&nbsp;If set, a list of URLs to use as the default top sites on the new tab page. Due to Firefox limitations, search sites can't be added. In addition, sites with the same name but different TLDs (example.org/example.com) will not display properly.
4077 | browser.places.importBookmarksHTML | boolean | Firefox 70, Firefox ESR 68.2
4078 | &nbsp;&nbsp;&nbsp;&nbsp;If true, bookmarks are always imported on startup.
4079 | browser.safebrowsing.phishing.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
4080 | &nbsp;&nbsp;&nbsp;&nbsp;If false, phishing protection is not enabled (Not recommended)
4081 | browser.safebrowsing.malware.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
4082 | &nbsp;&nbsp;&nbsp;&nbsp;If false, malware protection is not enabled (Not recommended)
4083 | browser.search.update | boolean | Firefox 68, Firefox ESR 68 | true
4084 | &nbsp;&nbsp;&nbsp;&nbsp;If false, updates for search engines are not checked.
4085 | browser.slowStartup.notificationDisabled | boolean | Firefox 70, Firefox ESR 68.2 | false
4086 | &nbsp;&nbsp;&nbsp;&nbsp;If true, a notification isn't shown if startup is slow.
4087 | browser.tabs.warnOnClose | boolean | Firefox 68, Firefox ESR 68 | true
4088 | &nbsp;&nbsp;&nbsp;&nbsp;If false, there is no warning when the browser is closed.
4089 | browser.taskbar.previews.enable | boolean | Firefox 70, Firefox ESR 68.2 (Windows only) | false
4090 | &nbsp;&nbsp;&nbsp;&nbsp;If true, tab previews are shown in the Windows taskbar.
4091 | browser.urlbar.suggest.bookmark | boolean | Firefox 68, Firefox ESR 68 | true
4092 | &nbsp;&nbsp;&nbsp;&nbsp;If false, bookmarks aren't suggested when typing in the URL bar.
4093 | browser.urlbar.suggest.history | boolean | Firefox 68, Firefox ESR 68 | true
4094 | &nbsp;&nbsp;&nbsp;&nbsp;If false, history isn't suggested when typing in the URL bar.
4095 | browser.urlbar.suggest.openpage | boolean | Firefox 68, Firefox ESR 68 | true
4096 | &nbsp;&nbsp;&nbsp;&nbsp;If false, open tabs aren't suggested when typing in the URL bar.
4097 | datareporting.policy.dataSubmissionPolicyBypassNotification | boolean | Firefox 68, Firefox ESR 68 | false
4098 | &nbsp;&nbsp;&nbsp;&nbsp;If true, don't show the privacy policy tab on first run.
4099 | dom.allow_scripts_to_close_windows | boolean | Firefox 70, Firefox ESR 68.2 | false
4100 | &nbsp;&nbsp;&nbsp;&nbsp;If false, web page can close windows.
4101 | dom.disable_window_flip | boolean | Firefox 68, Firefox ESR 68 | true
4102 | &nbsp;&nbsp;&nbsp;&nbsp;If false, web pages can focus and activate windows.
4103 | dom.disable_window_move_resize | boolean | Firefox 68, Firefox ESR 68 | false
4104 | &nbsp;&nbsp;&nbsp;&nbsp;If true, web pages can't move or resize windows.
4105 | dom.event.contextmenu.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4106 | &nbsp;&nbsp;&nbsp;&nbsp;If false, web pages can't override context menus.
4107 | dom.keyboardevent.keypress.hack.dispatch_non_printable_keys.addl | string | Firefox 68, Firefox ESR 68 | N/A
4108 | &nbsp;&nbsp;&nbsp;&nbsp;See https://support.mozilla.org/en-US/kb/dom-events-changes-introduced-firefox-66
4109 | dom.keyboardevent.keypress.hack.use_legacy_keycode_and_charcode.addl | string | Firefox 68, Firefox ESR 68 | N/A
4110 | &nbsp;&nbsp;&nbsp;&nbsp;See https://support.mozilla.org/en-US/kb/dom-events-changes-introduced-firefox-66
4111 | dom.xmldocument.load.enabled | boolean | Firefox ESR 68.5 | true.
4112 | &nbsp;&nbsp;&nbsp;&nbsp;If false, XMLDocument.load is not available.
4113 | dom.xmldocument.async.enabled | boolean | Firefox ESR 68.5 | true
4114 | &nbsp;&nbsp;&nbsp;&nbsp;If false, XMLDocument.async is not available.
4115 | extensions.blocklist.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
4116 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the extensions blocklist is not used (Not recommended)
4117 | extensions.getAddons.showPane | boolean | Firefox 68, Firefox ESR 68 | N/A
4118 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the Recommendations tab is not displayed in the Add-ons Manager.
4119 | extensions.htmlaboutaddons.recommendations.enabled | boolean | Firefox 72, Firefox ESR 68.4 | true
4120 | &nbsp;&nbsp;&nbsp;&nbsp;If false, recommendations are not shown on the Extensions tab in the Add-ons Manager.
4121 | geo.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
4122 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the geolocation API is disabled. | Language dependent
4123 | intl.accept_languages | string | Firefox 70, Firefox ESR 68.2
4124 | &nbsp;&nbsp;&nbsp;&nbsp;If set, preferred language for web pages.
4125 | media.eme.enabled (Deprecated - Switch to EncryptedMediaExtensions policy) | boolean | Firefox 70, Firefox ESR 68.2 | true
4126 | &nbsp;&nbsp;&nbsp;&nbsp;If false, Encrypted Media Extensions are not enabled.
4127 | media.gmp-gmpopenh264.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4128 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the OpenH264  plugin is not downloaded.
4129 | media.gmp-widevinecdm.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4130 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the Widevine plugin is not downloaded.
4131 | media.peerconnection.enabled | boolean | Firefox 72, Firefox ESR 68.4 | true
4132 | &nbsp;&nbsp;&nbsp;&nbsp;If false, WebRTC is disabled
4133 | media.peerconnection.ice.obfuscate_host_addresses.whitelist (Deprecated) | string | Firefox 72, Firefox ESR 68.4 | N/A
4134 | &nbsp;&nbsp;&nbsp;&nbsp;If set, a list of domains for which mDNS hostname obfuscation is
4135 disabled
4136 | media.peerconnection.ice.obfuscate_host_addresses.blocklist | string | Firefox 79, Firefox ESR 78.1 | N/A
4137 | &nbsp;&nbsp;&nbsp;&nbsp;If set, a list of domains for which mDNS hostname obfuscation is
4138 disabled
4139 | network.dns.disableIPv6 | boolean | Firefox 68, Firefox ESR 68 | false
4140 | &nbsp;&nbsp;&nbsp;&nbsp;If true, IPv6 DNS lokoups are disabled.
4141 | network.IDN_show_punycode | boolean | Firefox 68, Firefox ESR 68 | false
4142 | &nbsp;&nbsp;&nbsp;&nbsp;If true, display the punycode version of internationalized domain names.
4143 | places.history.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4144 | &nbsp;&nbsp;&nbsp;&nbsp;If false, history is not enabled.
4145 | print.save_print_settings | boolean | Firefox 70, Firefox ESR 68.2 | true
4146 | &nbsp;&nbsp;&nbsp;&nbsp;If false, print settings are not saved between jobs.
4147 | security.default_personal_cert | string | Firefox 68, Firefox ESR 68 | Ask Every Time
4148 | &nbsp;&nbsp;&nbsp;&nbsp;If set to Select Automatically, Firefox automatically chooses the default personal certificate.
4149 | security.mixed_content.block_active_content | boolean | Firefox 70, Firefox ESR 68.2 | true
4150 | &nbsp;&nbsp;&nbsp;&nbsp;If false, mixed active content (HTTP and HTTPS) is not blocked.
4151 | security.osclientcerts.autoload | boolean | Firefox 72 (Windows), Firefox 75 (macOS)  | false
4152 | &nbsp;&nbsp;&nbsp;&nbsp;If true, client certificates are loaded from the operating system certificate store.
4153 | security.ssl.errorReporting.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4154 | &nbsp;&nbsp;&nbsp;&nbsp;If false, SSL errors cannot be sent to Mozilla.
4155 | security.tls.hello_downgrade_check | boolean | Firefox 72, Firefox ESR 68.4 | true
4156 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the TLS 1.3 downgrade check is disabled.
4157 | ui.key.menuAccessKeyFocuses | boolean | Firefox 68, Firefox ESR 68 | true
4158 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the Alt key doesn't show the menubar on Windows.
4159 | widget.content.gtk-theme-override | string | Firefox 72, Firefox ESR 68.4 (Linux only) | N/A
4160 | &nbsp;&nbsp;&nbsp;&nbsp;If set, overrides the GTK theme for widgets.
4161 #### Windows (GPO)
4162 ```
4163 Software\Policies\Mozilla\Firefox\Preferences\boolean_preference_name = 0x1 | 0x0
4164 Software\Policies\Mozilla\Firefox\Preferences\string_preference_name = "string_value"
4165 ```
4166 #### Windows (Intune)
4167 OMA-URI: (periods are replaced by underscores)
4168 ```
4169 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Preferences/boolean_preference_name
4170 ```
4171 Value (string):
4172 ```
4173 <enabled/> or <disabled/>
4174 ```
4175 OMA-URI: (periods are replaced by underscores)
4176 ```
4177 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Preferences/string_preference_name
4178 ```
4179 Value (string):
4180 ```
4181 <enabled/>
4182 <data id="Preferences_String" value="string_value"/>
4183 ```
4184 #### macOS
4185 ```
4186 <dict>
4187   <key>Preferences</key>
4188   <dict>
4189     <key>boolean_preference_name</key>
4190     <true/> | <false/>
4191     <key>string_preference_name</key>
4192     <string>string_value</string>
4193   </dict>
4194 </dict>
4195 ```
4196 #### policies.json
4197 ```
4198 {
4199   "policies": {
4200     "Preferences": {
4201       "boolean_preference_name": true | false,
4202       "string_preference_name": "string_value"
4203     }
4204   }
4205 }
4206 ```
4207 ### PromptForDownloadLocation
4208 Ask where to save each file before downloading.
4209
4210 **Compatibility:** Firefox 68, Firefox ESR 68\
4211 **CCK2 Equivalent:** N/A\
4212 **Preferences Affected:** `browser.download.useDownloadDir`
4213
4214 #### Windows (GPO)
4215 ```
4216 Software\Policies\Mozilla\Firefox\PromptForDownloadLocation = 0x1 | 0x0
4217 ```
4218 #### Windows (Intune)
4219 OMA-URI:
4220 ```
4221 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PromptForDownloadLocation
4222 ```
4223 Value (string):
4224 ```
4225 <enabled/> or <disabled/>
4226 ```
4227 #### macOS
4228 ```
4229 <dict>
4230   <key>PromptForDownloadLocation</key>
4231   <true/> | <false/>
4232 </dict>
4233 ```
4234 #### policies.json
4235 ```
4236 {
4237   "policies": {
4238     "PromptForDownloadLocation": true | false
4239   }
4240 }
4241 ```
4242 ### Proxy
4243 Configure proxy settings. These settings correspond to the connection settings in Firefox preferences.
4244 To specify ports, append them to the hostnames with a colon (:).
4245
4246 `Mode` is the proxy method being used.
4247
4248 `Locked` is whether or not proxy settings can be changed.
4249
4250 `HTTPProxy` is the HTTP proxy server.
4251
4252 `UseHTTPProxyForAllProtocols` is whether or not the HTTP proxy should be used for all other proxies.
4253
4254 `SSLProxy` is the SSL proxy server.
4255
4256 `FTPProxy` is the FTP proxy server.
4257
4258 `SOCKSProxy` is the SOCKS proxy server
4259
4260 `SOCKSVersion` is the SOCKS version (4 or 5)
4261
4262 `Passthrough` is list of hostnames or IP addresses that will not be proxied. Use `<local>` to bypass proxying for all hostnames which do not contain periods.
4263
4264 `AutoConfigURL` is a  URL for proxy configuration (only used if Mode is autoConfig).
4265
4266 `AutoLogin` means do not prompt for authentication if password is saved.
4267
4268 `UseProxyForDNS` to use proxy DNS when using SOCKS v5.
4269
4270 **Compatibility:** Firefox 60, Firefox ESR 60\
4271 **CCK2 Equivalent:** `networkProxy*`\
4272 **Preferences Affected:** `network.proxy.type`,`network.proxy.autoconfig_url`,`network.proxy.socks_remote_dns`,`signon.autologin.proxy`,`network.proxy.socks_version`,`network.proxy.no_proxies_on`,`network.proxy.share_proxy_settings`,`network.proxy.http`,`network.proxy.http_port`,`network.proxy.ftp`,`network.proxy.ftp_port`,`network.proxy.ssl`,`network.proxy.ssl_port`,`network.proxy.socks`,`network.proxy.socks_port`
4273
4274 #### Windows (GPO)
4275 ```
4276 Software\Policies\Mozilla\Firefox\Proxy\Mode = "none" | "system" | "manual" | "autoDetect" | "autoConfig"
4277 Software\Policies\Mozilla\Firefox\Proxy\Locked = 0x1 | 0x0
4278 Software\Policies\Mozilla\Firefox\=Proxy\HTTPProxy = https://httpproxy.example.com
4279 Software\Policies\Mozilla\Firefox\Proxy\UseHTTPProxyForAllProtocols = 0x1 | 0x0
4280 Software\Policies\Mozilla\Firefox\Proxy\SSLProxy = https://sslproxy.example.com
4281 Software\Policies\Mozilla\Firefox\Proxy\FTPProxy = https://ftpproxy.example.com
4282 Software\Policies\Mozilla\Firefox\Proxy\SOCKSProxy = https://socksproxy.example.com
4283 Software\Policies\Mozilla\Firefox\Proxy\SOCKSVersion = 0x4 | 0x5
4284 Software\Policies\Mozilla\Firefox\Proxy\Passthrough = <local>
4285 Software\Policies\Mozilla\Firefox\Proxy\AutoConfigURL = URL_TO_AUTOCONFIG
4286 Software\Policies\Mozilla\Firefox\Proxy\AutoLogin = 0x1 | 0x0
4287 Software\Policies\Mozilla\Firefox\Proxy\UseProxyForDNS = 0x1 | 0x0
4288 ```
4289 #### Windows (Intune)
4290 OMA-URI:
4291 ```
4292 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Proxy
4293 ```
4294 Value (string):
4295 ```
4296 <enabled/>
4297 <data id="ProxyLocked" value="true | false"/>
4298 <data id="ConnectionType" value="none | system | manual | autoDetect | autoConfig"/>
4299 <data id="HTTPProxy" value="https://httpproxy.example.com"/>
4300 <data id="UseHTTPProxyForAllProtocols" value="true | false"/>
4301 <data id="SSLProxy" value="https://sslproxy.example.com"/>
4302 <data id="FTPProxy" value="https://ftpproxy.example.com"/>
4303 <data id="SOCKSProxy" value="https://socksproxy.example.com"/>
4304 <data id="SOCKSVersion" value="4 | 5"/>
4305 <data id="AutoConfigURL" value="URL_TO_AUTOCONFIG"/>
4306 <data id="Passthrough" value="<local>"/>
4307 <data id="AutoLogin" value="true | false"/>
4308 <data id="UseProxyForDNS" value="true | false"/>
4309 ```
4310 #### macOS
4311 ```
4312 <dict>
4313   <key>Proxy</key>
4314   <dict>
4315     <key>Mode</key>
4316     <string>none | system | manual | autoDetect | autoConfig</string>
4317     <key>Locked</key>
4318     <true> | </false>
4319     <key>HTTPProxy</key>
4320     <string>https://httpproxy.example.com</string>
4321     <key>UseHTTPProxyForAllProtocols</key>
4322     <true> | </false>
4323     <key>SSLProxy</key>
4324     <string>https://sslproxy.example.com</string>
4325     <key>FTPProxy</key>
4326     <string>https://ftpproxy.example.com</string>
4327     <key>SOCKSProxy</key>
4328     <string>https://socksproxy.example.com</string>
4329     <key>SOCKSVersion</key>
4330     <string>4 | 5</string>
4331     <key>Passthrough</key>
4332     <string>&lt;local>&gt;</string>
4333     <key>AutoConfigURL</key>
4334     <string>URL_TO_AUTOCONFIG</string>
4335     <key>AutoLogin</key>
4336     <true> | </false>
4337     <key>UseProxyForDNS</key>
4338     <true> | </false>
4339   </dict>
4340 </dict>
4341 ```
4342 #### policies.json
4343 ```
4344 {
4345   "policies": {
4346     "Proxy": {
4347       "Mode": "none" | "system" | "manual" | "autoDetect" | "autoConfig",
4348       "Locked": true | false,
4349       "HTTPProxy": "hostname",
4350       "UseHTTPProxyForAllProtocols": true | false,
4351       "SSLProxy": "hostname",
4352       "FTPProxy": "hostname",
4353       "SOCKSProxy": "hostname",
4354       "SOCKSVersion": 4 | 5
4355       "Passthrough": "<local>",
4356       "AutoConfigURL": "URL_TO_AUTOCONFIG",
4357       "AutoLogin": true | false,
4358       "UseProxyForDNS": true | false
4359     }
4360   }
4361 }
4362 ```
4363 ### RequestedLocales
4364 Set the the list of requested locales for the application in order of preference. It will cause the corresponding language pack to become active.
4365
4366 Note: For Firefox 68, this can now be a string so that you can specify an empty value.
4367
4368 **Compatibility:** Firefox 64, Firefox ESR 60.4, Updated in Firefox 68, Firefox ESR 68\
4369 **CCK2 Equivalent:** N/A\
4370 **Preferences Affected:** N/A
4371 #### Windows (GPO)
4372 ```
4373 Software\Policies\Mozilla\Firefox\RequestedLocales\1 = "de"
4374 Software\Policies\Mozilla\Firefox\RequestedLocales\2 = "en-US"
4375
4376 or
4377
4378 Software\Policies\Mozilla\Firefox\RequestedLocales = "de,en-US"
4379 ```
4380 #### Windows (Intune)
4381 OMA-URI:
4382 ```
4383 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/RequestedLocalesString
4384 ```
4385 Value (string):
4386 ```
4387 <enabled/>
4388 <data id="Preferences_String" value="de,en-US"/>
4389 ```
4390 #### macOS
4391 ```
4392 <dict>
4393   <key>RequestedLocales</key>
4394   <array>
4395     <string>de</string>
4396     <string>en-US</string>
4397   </array>
4398 </dict>
4399
4400 or
4401
4402 <dict>
4403   <key>RequestedLocales</key>
4404   <string>de,en-US</string>
4405 </dict>
4406
4407 ```
4408 #### policies.json
4409 ```
4410 {
4411   "policies": {
4412     "RequestedLocales": ["de", "en-US"]
4413   }
4414 }
4415
4416 or
4417
4418 {
4419   "policies": {
4420     "RequestedLocales": "de,en-US"
4421   }
4422 }
4423 ```
4424 <a name="SanitizeOnShutdown"></a>
4425
4426 ### SanitizeOnShutdown (Selective)
4427 Clear data on shutdown. Choose from Cache, Cookies, Download History, Form & Search History, Browsing History, Active Logins, Site Preferences and Offline Website Data.
4428
4429 Previously, these values were always locked. Starting with Firefox 74 and Firefox ESR 68.6, you can use the `Locked` option to either keep the values unlocked (set it to false), or lock only the values you set (set it to true). If you want the old behavior of locking everything, do not set `Locked` at all.
4430
4431 **Compatibility:** Firefox 68, Firefox ESR 68 (Locked added in 74/68.6)\
4432 **CCK2 Equivalent:** N/A\
4433 **Preferences Affected:** `privacy.sanitize.sanitizeOnShutdown`,`privacy.clearOnShutdown.cache`,`privacy.clearOnShutdown.cookies`,`privacy.clearOnShutdown.downloads`,`privacy.clearOnShutdown.formdata`,`privacy.clearOnShutdown.history`,`privacy.clearOnShutdown.sessions`,`privacy.clearOnShutdown.siteSettings`,`privacy.clearOnShutdown.offlineApps`
4434 #### Windows (GPO)
4435 ```
4436 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Cache = 0x1 | 0x0
4437 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Cookies = 0x1 | 0x0
4438 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Downloads = 0x1 | 0x0
4439 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\FormData = 0x1 | 0x0
4440 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\History = 0x1 | 0x0
4441 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Sessions = 0x1 | 0x0
4442 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\SiteSettings = 0x1 | 0x0
4443 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\OfflineApps = 0x1 | 0x0
4444 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Locked = 0x1 | 0x0
4445 ```
4446 #### Windows (Intune)
4447 OMA-URI:
4448 ```
4449 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/I_SanitizeOnShutdown_Locked
4450 ```
4451 Value (string):
4452 ```
4453 <enabled/> or <disabled/>
4454 ```
4455 #### macOS
4456 ```
4457 <dict>
4458   <key>SanitizeOnShutdown</key>
4459   <dict>
4460     <key>Cache</key>
4461     <true/> | <false/>
4462     <key>Cookies</key>
4463     <true/> | <false/>
4464     <key>Downloads</key>
4465     <true/> | <false/>
4466     <key>FormData</key>
4467     <true/> | <false/>
4468     <key>History</key>
4469     <true/> | <false/>
4470     <key>Sessions</key>
4471     <true/> | <false/>
4472     <key>SiteSettings</key>
4473     <true/> | <false/>
4474     <key>OfflineApps</key>
4475     <true/> | <false/>
4476     <key>Locked</key>
4477     <true/> | <false/>
4478   </dict>
4479 </dict>
4480 ```
4481 #### policies.json
4482 ```
4483 {
4484   "policies": {
4485     "SanitizeOnShutdown": {
4486       "Cache": true | false,
4487       "Cookies": true | false,
4488       "Downloads": true | false,
4489       "FormData": true | false,
4490       "History": true | false,
4491       "Sessions": true | false,
4492       "SiteSettings": true | false,
4493       "OfflineApps": true | false,
4494       "Locked": true | false
4495     }
4496   }
4497 }
4498 ```
4499 ### SanitizeOnShutdown (All)
4500 Clear all data on shutdown, including Browsing & Download History, Cookies, Active Logins, Cache, Form & Search History, Site Preferences and Offline Website Data.
4501
4502 **Compatibility:** Firefox 60, Firefox ESR 60\
4503 **CCK2 Equivalent:** N/A\
4504 **Preferences Affected:** `privacy.sanitize.sanitizeOnShutdown`,`privacy.clearOnShutdown.cache`,`privacy.clearOnShutdown.cookies`,`privacy.clearOnShutdown.downloads`,`privacy.clearOnShutdown.formdata`,`privacy.clearOnShutdown.history`,`privacy.clearOnShutdown.sessions`,`privacy.clearOnShutdown.siteSettings`,`privacy.clearOnShutdown.offlineApps`
4505 #### Windows (GPO)
4506 ```
4507 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown = 0x1 | 0x0
4508 ```
4509 #### Windows (Intune)
4510 OMA-URI:
4511 ```
4512 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/C_SanitizeOnShutdown
4513 ```
4514 Value (string):
4515 ```
4516 <enabled/> or <disabled/>
4517 ```
4518 #### macOS
4519 ```
4520 <dict>
4521   <key>SanitizeOnShutdown</key>
4522   <true/> | <false/>
4523 </dict>
4524 ```
4525 #### policies.json
4526 ```
4527 {
4528   "policies": {
4529     "SanitizeOnShutdown": true | false
4530   }
4531 }
4532 ```
4533 ### SearchBar
4534 Set whether or not search bar is displayed.
4535
4536 **Compatibility:** Firefox 60, Firefox ESR 60\
4537 **CCK2 Equivalent:** `showSearchBar`\
4538 **Preferences Affected:** N/A
4539
4540 #### Windows (GPO)
4541 ```
4542 Software\Policies\Mozilla\Firefox\SearchBar = "unified" | "separate"
4543 ```
4544
4545 #### Windows (Intune)
4546 OMA-URI:
4547 ```
4548 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SearchBar
4549 ```
4550 Value (string):
4551 ```
4552 <enabled/>
4553 <data id="Permissions" value="unified | separate"/>
4554 ```
4555 #### macOS
4556 ```
4557 <dict>
4558   <key>SearchBar</key>
4559   <string>unified | separate</string>
4560 </dict>
4561 ```
4562 #### policies.json
4563 ```
4564 {
4565   "policies": {
4566     "SearchBar": "unified" | "separate"
4567   }
4568 }
4569 ```
4570 <a name="SearchEngines"></a>
4571
4572 ### SearchEngines (This policy is only available on the ESR.)
4573
4574 ### SearchEngines | Default
4575
4576 Set the default search engine. This policy is only available on the ESR.
4577
4578 **Compatibility:** Firefox ESR 60\
4579 **CCK2 Equivalent:** `defaultSearchEngine`\
4580 **Preferences Affected:** N/A
4581
4582 #### Windows (GPO)
4583 ```
4584 Software\Policies\Mozilla\Firefox\SearchEngines\Default = NAME_OF_SEARCH_ENGINE
4585 ```
4586 #### Windows (Intune)
4587 OMA-URI:
4588 ```
4589 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_Default
4590 ```
4591 Value (string):
4592 ```
4593 <enabled/>
4594 <data id="SearchEngines_Default" value="NAME_OF_SEARCH_ENGINE"/>
4595 ```
4596 #### macOS
4597 ```
4598 <dict>
4599   <key>SearchEngines</key>
4600   <dict>
4601     <key>Default</key>
4602     <string>NAME_OF_SEARCH_ENGINE</string>
4603   </dict>
4604 </dict>
4605 ```
4606 #### policies.json
4607 ```
4608 {
4609   "policies": {
4610     "SearchEngines": {
4611       "Default": "NAME_OF_SEARCH_ENGINE"
4612     }
4613   }
4614 }
4615 ```
4616 ### SearchEngines | PreventInstalls
4617
4618 Prevent installing search engines from webpages.
4619
4620 **Compatibility:** Firefox ESR 60\
4621 **CCK2 Equivalent:** `disableSearchEngineInstall`\
4622 **Preferences Affected:** N/A
4623
4624 #### Windows (GPO)
4625 ```
4626 Software\Policies\Mozilla\Firefox\SearchEngines\PreventInstalls = 0x1 | 0x0
4627 ```
4628 #### Windows (Intune)
4629 OMA-URI:
4630 ```
4631 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_PreventInstalls
4632 ```
4633 Value (string):
4634 ```
4635 <enabled/> or <disabled/>
4636 ```
4637 #### macOS
4638 ```
4639 <dict>
4640   <key>SearchEngines</key>
4641   <dict>
4642     <key>PreventInstalls</key>
4643     <true/> | <false/>
4644   </dict>
4645 </dict>
4646 ```
4647 #### policies.json
4648 ```
4649 {
4650   "policies": {
4651     "SearchEngines": {
4652       "PreventInstalls": true | false
4653     }
4654   }
4655 }
4656 ```
4657 ### SearchEngines | Remove
4658
4659 Hide built-in search engines. This policy is only available on the ESR.
4660
4661 **Compatibility:** Firefox ESR 60.2\
4662 **CCK2 Equivalent:** `removeDefaultSearchEngines` (removed all built-in engines)\
4663 **Preferences Affected:** N/A
4664
4665 #### Windows (GPO)
4666 ```
4667 Software\Policies\Mozilla\Firefox\SearchEngines\Remove\1 = NAME_OF_SEARCH_ENGINE
4668 ```
4669 #### Windows (Intune)
4670 OMA-URI:
4671 ```
4672 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_Remove
4673 ```
4674 Value (string):
4675 ```
4676 <enabled/>
4677 <data id="SearchEngines_Remove" value="1&#xF000;NAME_OF_SEARCH_ENGINE"/>
4678 ```
4679 #### macOS
4680 ```
4681 <dict>
4682   <key>SearchEngines</key>
4683   <dict>
4684     <key>Remove</key>
4685     <array>
4686       <string>NAME_OF_SEARCH_ENGINE</string>
4687     </array>
4688   </dict>
4689 </dict>
4690 ```
4691 #### policies.json
4692 ```
4693 {
4694   "policies": {
4695     "SearchEngines": {
4696       "Remove": ["NAME_OF_SEARCH_ENGINE"]
4697     }
4698   }
4699 }
4700 ```
4701 ### SearchEngines | Add
4702
4703 Add new search engines (up to five). This policy is only available on the ESR. `Name` and `URLTemplate` are required.
4704
4705 `Name` is the name of the search engine.
4706
4707 `URLTemplate` is the search URL with {searchTerms} to substitute for the search term.
4708
4709 `Method` is either GET or POST
4710
4711 `IconURL` is a URL for the icon to use.
4712
4713 `Alias` is a keyword to use for the engine.
4714
4715 `Description` is a description of the search engine.
4716
4717 `PostData` is the POST data as name value pairs separated by &.
4718
4719 `SuggestURLTemplate` is a search suggestions URL with {searchTerms} to substitute for the search term.
4720
4721 **Compatibility:** Firefox ESR 60 (POST support in Firefox ESR 68)\
4722 **CCK2 Equivalent:** `searchplugins`\
4723 **Preferences Affected:** N/A
4724
4725 #### Windows (GPO)
4726 ```
4727 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Name = "Example1"
4728 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\URLTemplate = "https://www.example.org/q={searchTerms}"
4729 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Method = "GET" | "POST"
4730 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\IconURL = "https://www.example.org/favicon.ico"
4731 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Alias = "example"
4732 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Description = "Example Description"
4733 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\SuggestURLTemplate = "https://www.example.org/suggestions/q={searchTerms}"
4734 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\PostData = "name=value&q={searchTerms}"
4735 ```
4736 #### Windows (Intune)
4737 OMA-URI:
4738 ```
4739 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_1
4740 ```
4741 Value (string):
4742 ```
4743 <enabled/>
4744 <data id="SearchEngine_Name" value="Example1"/>
4745 <data id="SearchEngine_URLTemplate" value="https://www.example.org/q={searchTerms"/>
4746 <data id="SearchEngine_Method" value="GET | POST"/>
4747 <data id="SearchEngine_IconURL" value="https://www.example.org/favicon.ico"/>
4748 <data id="SearchEngine_Alias" value="example"/>
4749 <data id="SearchEngine_Description" value="Example Description"/>
4750 <data id="SearchEngine_SuggestURLTemplate" value="https://www.example.org/suggestions/q={searchTerms}"/>
4751 <data id="SearchEngine_PostData" value="name=value&amp;q={searchTerms}"/>
4752 ```
4753 #### macOS
4754 ```
4755 <dict>
4756   <key>SearchEngines</key>
4757   <dict>
4758     <key>Add</key>
4759     <array>
4760       <dict>
4761         <key>Name</key>
4762         <string>Example1</string>
4763         <key>URLTemplate</key>
4764         <string>https://www.example.org/q={searchTerms}</string>
4765         <key>Method</key>
4766         <string>GET | POST </string>
4767         <key>IconURL</key>
4768         <string>https://www.example.org/favicon.ico</string>
4769         <key>Alias</key>
4770         <string>example</string>
4771         <key>Description</key>
4772         <string>Example Description</string>
4773         <key>SuggestURLTemplate</key>
4774         <string>https://www.example.org/suggestions/q={searchTerms}</string>
4775         <key>PostData</key>
4776         <string>name=value&q={searchTerms}</string>
4777       </dict>
4778     <array>
4779   </dict>
4780 </dict>
4781 ```
4782 #### policies.json
4783 ```
4784 {
4785   "policies": {
4786     "SearchEngines": {
4787       "Add": [
4788         {
4789           "Name": "Example1",
4790           "URLTemplate": "https://www.example.org/q={searchTerms}",
4791           "Method": "GET" | "POST",
4792           "IconURL": "https://www.example.org/favicon.ico",
4793           "Alias": "example",
4794           "Description": "Description",
4795           "PostData": "name=value&q={searchTerms}",
4796           "SuggestURLTemplate": "https://www.example.org/suggestions/q={searchTerms}"
4797         }
4798       ]
4799     }
4800   }
4801 }
4802 ```
4803 ### SearchSuggestEnabled
4804
4805 Enable search suggestions.
4806
4807 **Compatibility:** Firefox 68, Firefox ESR 68\
4808 **CCK2 Equivalent:** N/A\
4809 **Preferences Affected:** `browser.urlbar.suggest.searches`,`browser.search.suggest.enabled`
4810
4811 #### Windows (GPO)
4812 ```
4813 Software\Policies\Mozilla\Firefox\SearchSuggestEnabled = 0x1 | 0x0
4814 ```
4815 #### Windows (Intune)
4816 OMA-URI:
4817 ```
4818 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchSuggestEnabled
4819 ```
4820 Value (string):
4821 ```
4822 <enabled/> or <disabled/>
4823 ```
4824 #### macOS
4825 ```
4826 <dict>
4827   <key>SearchSuggestEnabled</key>
4828   <true/> | <false/>
4829 </dict>
4830 ```
4831 #### policies.json
4832 ```
4833 {
4834   "policies": {
4835     "SearchSuggestEnabled": true | false
4836   }
4837 }
4838 ```
4839 ### SecurityDevices
4840
4841 Install PKCS #11 modules.
4842
4843 **Compatibility:** Firefox 64, Firefox ESR 60.4\
4844 **CCK2 Equivalent:** `certs.devices`\
4845 **Preferences Affected:** N/A
4846
4847 #### Windows (GPO)
4848 ```
4849 Software\Policies\Mozilla\Firefox\SecurityDevices\NAME_OF_DEVICE = PATH_TO_LIBRARY_FOR_DEVICE
4850 ```
4851 #### Windows (Intune)
4852 OMA-URI:
4853 ```
4854 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SecurityDevices
4855 ```
4856 Value (string):
4857 ```
4858 <enabled/>
4859 <data id="SecurityDevices" value="NAME_OF_DEVICE&#xF000;PATH_TO_LIBRARY_FOR_DEVICE"/>
4860 ```
4861 #### macOS
4862 ```
4863 <dict>
4864   <key>SecurityDevices</key>
4865   <dict>
4866     <key>NAME_OF_DEVICE</key>
4867     <string>PATH_TO_LIBRARY_FOR_DEVICE</string>
4868   </dict>
4869 </dict>
4870 ```
4871
4872 #### policies.json
4873 ```
4874 {
4875   "policies": {
4876     "SecurityDevices": {
4877       "NAME_OF_DEVICE": "PATH_TO_LIBRARY_FOR_DEVICE"
4878     }
4879   }
4880 }
4881 ```
4882 ### SSLVersionMax
4883
4884 Set and lock the maximum version of TLS.
4885
4886 **Compatibility:** Firefox 66, Firefox ESR 60.6\
4887 **CCK2 Equivalent:** N/A\
4888 **Preferences Affected:** `security.tls.version.max`
4889
4890 #### Windows (GPO)
4891 ```
4892 Software\Policies\Mozilla\Firefox\SSLVersionMax = "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
4893 ```
4894 #### Windows (Intune)
4895 OMA-URI:
4896 ```
4897 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SSLVersionMax
4898 ```
4899 Value (string):
4900 ```
4901 <enabled/>
4902 <data id="SSLVersion" value="tls1 | tls1.2 | tls1.3"/>
4903 ```
4904 #### macOS
4905 ```
4906 <dict>
4907   <key>SSLVersionMax</key>
4908   <string>tls1 | tls1.1 | tls1.2 | tls1.3</string>
4909 </dict>
4910 ```
4911
4912 #### policies.json
4913 ```
4914 {
4915   "policies": {
4916     "SSLVersionMax": "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
4917   }
4918 }
4919 ```
4920 ### SSLVersionMin
4921
4922 Set and lock the minimum version of TLS.
4923
4924 **Compatibility:** Firefox 66, Firefox ESR 60.6\
4925 **CCK2 Equivalent:** N/A\
4926 **Preferences Affected:** `security.tls.version.min`
4927
4928 #### Windows (GPO)
4929 ```
4930 Software\Policies\Mozilla\Firefox\SSLVersionMin = "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
4931 ```
4932 #### Windows (Intune)
4933 OMA-URI:
4934 ```
4935 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SSLVersionMin
4936 ```
4937 Value (string):
4938 ```
4939 <enabled/>
4940 <data id="SSLVersion" value="tls1 | tls1.2 | tls1.3"/>
4941 ```
4942 #### macOS
4943 ```
4944 <dict>
4945   <key>SSLVersionMin</key>
4946   <string>tls1 | tls1.1 | tls1.2 | tls1.3</string>
4947 </dict>
4948 ```
4949
4950 #### policies.json
4951 ```
4952 {
4953   "policies": {
4954     "SSLVersionMin": "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
4955   }
4956 }
4957 ```
4958 ### SupportMenu
4959 Add a menuitem to the help menu for specifying support information.
4960
4961 **Compatibility:** Firefox 68.0.1, Firefox ESR 68.0.1\
4962 **CCK2 Equivalent:** helpMenu\
4963 **Preferences Affected:** N/A
4964
4965 #### Windows (GPO)
4966 ```
4967 Software\Policies\Mozilla\Firefox\SupportMenu\Title = "Support Menu"
4968 Software\Policies\Mozilla\Firefox\SupportMenu\URL = "http://example.com/support"
4969 Software\Policies\Mozilla\Firefox\SupportMenu\AccessKey = "S"
4970 ```
4971 #### Windows (Intune)
4972 OMA-URI:
4973 ```
4974 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SupportMenu
4975 ```
4976 Value (string):
4977 ```
4978 <enabled/>
4979 <data id="SupportMenuTitle" value="Support Menu"/>
4980 <data id="SupportMenuURL" value="http://example.com/support"/>
4981 <data id="SupportMenuAccessKey" value="S">
4982 ```
4983 #### macOS
4984 ```
4985 <dict>
4986   <key>SupportMenu</key>
4987   <dict>
4988     <key>Title</key>
4989     <string>SupportMenu</string>
4990     <key>URL</key>
4991     <string>http://example.com/support</string>
4992     <key>AccessKey</key>
4993     <string>S</string>
4994   </dict>
4995 </dict>
4996 ```
4997 #### policies.json
4998 ```
4999 {
5000   "policies": {
5001     "SupportMenu": {
5002       "Title": "Support Menu",
5003       "URL": "http://example.com/support",
5004       "AccessKey": "S"
5005     }
5006   }
5007 }
5008 ```
5009 ### UserMessaging
5010
5011 Prevent Firefox from messaging the user in certain situations.
5012
5013 `WhatsNew` Remove the "What's New" icon and menuitem. (Firefox 75 only)
5014
5015 `ExtensionRecommendations` Don't recommend extensions while the user is visiting web pages.
5016
5017 `FeatureRecommendations` Don't recommend browser features.
5018
5019 `UrlbarInterventions` Don't offer Firefox specific suggestions in the URL bar. (Firefox 75 only)
5020
5021 **Compatibility:** Firefox 75, Firefox ESR 68.7\
5022 **CCK2 Equivalent:** N/A\
5023 **Preferences Affected:** `browser.messaging-system.whatsNewPanel.enabled`,`browser.newtabpage.activity-stream.asrouter.userprefs.cfr.addons`,`browser.newtabpage.activity-stream.asrouter.userprefs.cfr.features`
5024
5025 #### Windows (GPO)
5026 ```
5027 Software\Policies\Mozilla\Firefox\UserMessaging\WhatsNew = 0x1 | 0x0
5028 Software\Policies\Mozilla\Firefox\UserMessaging\ExtensionRecommendations = 0x1 | 0x0
5029 Software\Policies\Mozilla\Firefox\UserMessaging\FeatureRecommendations = 0x1 | 0x0
5030 Software\Policies\Mozilla\Firefox\UserMessaging\UrlbarInterventions = 0x1 | 0x0
5031 ```
5032 #### Windows (Intune)
5033 OMA-URI:
5034 ```
5035 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/UserMessaging_WhatsNew
5036 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/UserMessaging_ExtensionRecommendations
5037 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/UserMessaging_FeatureRecommendations
5038 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/UserMessaging_UrlbarInterventions
5039 ```
5040 Value (string):
5041 ```
5042 <enabled/> or <disabled/>
5043 ```
5044 #### macOS
5045 ```
5046 <dict>
5047   <key>UserMessaging</key>
5048   <dict>
5049     <key>WhatsNew</key>
5050     <true/> | <false/>
5051     <key>ExtensionRecommendations</key>
5052     <true/> | <false/>
5053     <key>FeatureRecommendations</key>
5054     <true/> | <false/>
5055     <key>UrlbarInterventions</key>
5056     <true/> | <false/>
5057   </dict>
5058 </dict>
5059 ```
5060 #### policies.json
5061 ```
5062 {
5063   "policies": {
5064     "UserMessaging": {
5065       "WhatsNew": true | false,
5066       "ExtensionRecommendations": true | false,
5067       "FeatureRecommendations": true | false,
5068       "UrlbarInterventions": true | false
5069     }
5070   }
5071 }
5072 ```
5073 ### WebsiteFilter
5074 Block websites from being visited. The parameters take an array of Match Patterns, as documented in https://developer.mozilla.org/en-US/Add-ons/WebExtensions/Match_patterns.
5075 The arrays are limited to 1000 entries each.
5076
5077 As of Firefox 83 and Firefox ESR 78.5, file URLs are supported.
5078
5079 **Compatibility:** Firefox 60, Firefox ESR 60\
5080 **CCK2 Equivalent:** N/A\
5081 **Preferences Affected:** N/A
5082
5083 #### Windows (GPO)
5084 ```
5085 Software\Policies\Mozilla\Firefox\WebsiteFilter\Block\1 = "<all_urls>"
5086 Software\Policies\Mozilla\Firefox\WebsiteFilter\Exceptions\1 = "http://example.org/*"
5087 ```
5088 #### Windows (Intune)
5089 OMA-URI:
5090 ```
5091 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/B_WebsiteFilter_Block
5092 ```
5093 Value (string):
5094 ```
5095 <enabled/>
5096 <data id="WebsiteFilter" value="1&#xF000;<all_urls>"/>
5097 ```
5098 OMA-URI:
5099 ```
5100 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/B_WebsiteFilter_Exceptions
5101 ```
5102 Value (string):
5103 ```
5104 <enabled/>
5105 <data id="WebsiteFilter" value="1&#xF000;http://example.org/*"/>
5106 ```
5107 #### macOS
5108 ```
5109 <dict>
5110   <key>WebsiteFilter</key>
5111   <dict>
5112     <key>Block</key>
5113     <array>
5114       <string><all_urls></string>
5115     </array>
5116     <key>Exceptions</key>
5117     <array>
5118       <string>http://example.org/*</string>
5119     </array>
5120   </dict>
5121
5122 </dict>
5123 ```
5124 #### policies.json
5125 ```
5126 {
5127   "policies": {
5128     "WebsiteFilter": {
5129       "Block": ["<all_urls>"],
5130       "Exceptions": ["http://example.org/*"]
5131     }
5132   }
5133 }
5134 ```