README.md

   1 **These policies are in active development and so might contain changes that do not work with current versions of Firefox.**
   2
   3 **You should use the [officially released versions](https://github.com/mozilla/policy-templates/releases) if you are deploying changes.**
   4
   5 Policies can be specified using the [Group Policy templates on Windows](https://github.com/mozilla/policy-templates/tree/master/windows), [Intune on Windows](https://support.mozilla.org/kb/managing-firefox-intune), [configuration profiles on macOS](https://github.com/mozilla/policy-templates/tree/master/mac), or by creating a file called `policies.json`. On Windows, create a directory called `distribution` where the EXE is located and place the file there. On Mac, the file goes into `Firefox.app/Contents/Resources/distribution`.  On Linux, the file goes into `firefox/distribution`, where `firefox` is the installation directory for firefox, which varies by distribution or you can specify system-wide policy by placing the file in `/etc/firefox/policies`.
   6
   7 | Policy Name | Description
   8 | --- | --- |
   9 | **[`3rdparty`](#3rdparty)** | Set policies that WebExtensions can access via chrome.storage.managed.
  10 | **[`AllowedDomainsForApps`](#alloweddomainsforapps)** | Define domains allowed to access Google Workspace.
  11 | **[`AppAutoUpdate`](#appautoupdate)** | Enable or disable automatic application update.
  12 | **[`AppUpdatePin`](#appupdatepin)** | Prevent Firefox from being updated beyond the specified version.
  13 | **[`AppUpdateURL`](#appupdateurl)** | Change the URL for application update.
  14 | **[`Authentication`](#authentication)** | Configure sites that support integrated authentication.
  15 | **[`AutoLaunchProtocolsFromOrigins`](#autolaunchprotocolsfromorigins)** | Define a list of external protocols that can be used from listed origins without prompting the user.
  16 | **[`BackgroundAppUpdate`](#backgroundappupdate)** | Enable or disable the background updater (Windows only).
  17 | **[`BlockAboutAddons`](#blockaboutaddons)** | Block access to the Add-ons Manager (about:addons).
  18 | **[`BlockAboutConfig`](#blockaboutconfig)** | Block access to about:config.
  19 | **[`BlockAboutProfiles`](#blockaboutprofiles)** | Block access to About Profiles (about:profiles).
  20 | **[`BlockAboutSupport`](#blockaboutsupport)** | Block access to Troubleshooting Information (about:support).
  21 | **[`Bookmarks`](#bookmarks)** | Add bookmarks in either the bookmarks toolbar or menu.
  22 | **[`CaptivePortal`](#captiveportal)** | Enable or disable the detection of captive portals.
  23 | **[`Certificates`](#certificates)** |
  24 | **[`Certificates -> ImportEnterpriseRoots`](#certificates--importenterpriseroots)** | Trust certificates that have been added to the operating system certificate store by a user or administrator.
  25 | **[`Certificates -> Install`](#certificates--install)** | Install certificates into the Firefox certificate store.
  26 | **[`Cookies`](#cookies)** | Configure cookie preferences.
  27 | **[`DefaultDownloadDirectory`](#defaultdownloaddirectory)** | Set the default download directory.
  28 | **[`DisableAppUpdate`](#disableappupdate)** | Turn off application updates.
  29 | **[`DisableBuiltinPDFViewer`](#disablebuiltinpdfviewer)** | Disable the built in PDF viewer.
  30 | **[`DisabledCiphers`](#disabledciphers)** | Disable ciphers.
  31 | **[`DisableDefaultBrowserAgent`](#disabledefaultbrowseragent)** | Prevent the default browser agent from taking any actions (Windows only).
  32 | **[`DisableDeveloperTools`](#disabledevelopertools)** | Remove access to all developer tools.
  33 | **[`DisableFeedbackCommands`](#disablefeedbackcommands)** | Disable the menus for reporting sites.
  34 | **[`DisableFirefoxAccounts`](#disablefirefoxaccounts)** | Disable Firefox Accounts integration (Sync).
  35 | **[`DisableFirefoxScreenshots`](#disablefirefoxscreenshots)** | Remove access to Firefox Screenshots.
  36 | **[`DisableFirefoxStudies`](#disablefirefoxstudies)** | Disable Firefox studies (Shield).
  37 | **[`DisableForgetButton`](#disableforgetbutton)** | Disable the "Forget" button.
  38 | **[`DisableFormHistory`](#disableformhistory)** | Turn off saving information on web forms and the search bar.
  39 | **[`DisableMasterPasswordCreation`](#disablemasterpasswordcreation)** | Remove the master password functionality.
  40 | **[`DisablePasswordReveal`](#disablepasswordreveal)** | Do not allow passwords to be revealed in saved logins.
  41 | **[`DisablePocket`](#disablepocket)** | Remove Pocket in the Firefox UI.
  42 | **[`DisablePrivateBrowsing`](#disableprivatebrowsing)** | Remove access to private browsing.
  43 | **[`DisableProfileImport`](#disableprofileimport)** | Disables the "Import data from another browser" option in the bookmarks window.
  44 | **[`DisableProfileRefresh`](#disableprofilerefresh)** | Disable the Refresh Firefox button on about:support and support.mozilla.org
  45 | **[`DisableSafeMode`](#disablesafemode)** | Disable safe mode within the browser.
  46 | **[`DisableSecurityBypass`](#disablesecuritybypass)** | Prevent the user from bypassing security in certain cases.
  47 | **[`DisableSetDesktopBackground`](#disablesetdesktopbackground)** | Remove the "Set As Desktop Background..." menuitem when right clicking on an image.
  48 | **[`DisableSystemAddonUpdate`](#disablesystemaddonupdate)** | Prevent system add-ons from being installed or updated.
  49 | **[`DisableTelemetry`](#disabletelemetry)** | DisableTelemetry
  50 | **[`DisableThirdPartyModuleBlocking`](#disablethirdpartymoduleblocking)** | Do not allow blocking third-party modules.
  51 | **[`DisplayBookmarksToolbar`](#displaybookmarkstoolbar)** | Set the initial state of the bookmarks toolbar.
  52 | **[`DisplayBookmarksToolbar (Deprecated)`](#displaybookmarkstoolbar-deprecated)** | Set the initial state of the bookmarks toolbar.
  53 | **[`DisplayMenuBar`](#displaymenubar)** | Set the state of the menubar.
  54 | **[`DisplayMenuBar (Deprecated)`](#displaymenubar-deprecated)** | Set the initial state of the menubar.
  55 | **[`DNSOverHTTPS`](#dnsoverhttps)** | Configure DNS over HTTPS.
  56 | **[`DontCheckDefaultBrowser`](#dontcheckdefaultbrowser)** | Don't check if Firefox is the default browser at startup.
  57 | **[`DownloadDirectory`](#downloaddirectory)** | Set and lock the download directory.
  58 | **[`EnableTrackingProtection`](#enabletrackingprotection)** | Configure tracking protection.
  59 | **[`EncryptedMediaExtensions`](#encryptedmediaextensions)** | Enable or disable Encrypted Media Extensions and optionally lock it.
  60 | **[`EnterprisePoliciesEnabled`](#enterprisepoliciesenabled)** | Enable policy support on macOS.
  61 | **[`ExemptDomainFileTypePairsFromFileTypeDownloadWarnings`](#exemptdomainfiletypepairsfromfiletypedownloadwarnings)** | Disable warnings based on file extension for specific file types on domains.
  62 | **[`Extensions`](#extensions)** | Control the installation, uninstallation and locking of extensions.
  63 | **[`ExtensionSettings`](#extensionsettings)** | Manage all aspects of extensions.
  64 | **[`ExtensionUpdate`](#extensionupdate)** | Control extension updates.
  65 | **[`FirefoxHome`](#firefoxhome)** | Customize the Firefox Home page.
  66 | **[`FlashPlugin (Deprecated)`](#flashplugin-deprecated)** | Configure the default Flash plugin policy as well as origins for which Flash is allowed.
  67 | **[`GoToIntranetSiteForSingleWordEntryInAddressBar`](#gotointranetsiteforsinglewordentryinaddressbar)** | Force direct intranet site navigation instead of searching when typing single word entries in the address bar.
  68 | **[`Handlers`](#handlers)** | Configure default application handlers.
  69 | **[`HardwareAcceleration`](#hardwareacceleration)** | Control hardware acceleration.
  70 | **[`Homepage`](#homepage)** | Configure the default homepage and how Firefox starts.
  71 | **[`InstallAddonsPermission`](#installaddonspermission)** | Configure the default extension install policy as well as origins for extension installs are allowed.
  72 | **[`LegacyProfiles`](#legacyprofiles)** | Disable the feature enforcing a separate profile for each installation.
  73 | **[`LegacySameSiteCookieBehaviorEnabled`](#legacysamesitecookiebehaviorenabled)** | Enable default legacy SameSite cookie behavior setting.
  74 | **[`LegacySameSiteCookieBehaviorEnabledForDomainList`](#legacysamesitecookiebehaviorenabledfordomainlist)** | Revert to legacy SameSite behavior for cookies on specified sites.
  75 | **[`LocalFileLinks`](#localfilelinks)** | Enable linking to local files by origin.
  76 | **[`ManagedBookmarks`](#managedbookmarks)** | Configures a list of bookmarks managed by an administrator that cannot be changed by the user.
  77 | **[`ManualAppUpdateOnly`](#manualappupdateonly)** | Allow manual updates only and do not notify the user about updates.
  78 | **[`NetworkPrediction`](#networkprediction)** | Enable or disable network prediction (DNS prefetching).
  79 | **[`NewTabPage`](#newtabpage)** | Enable or disable the New Tab page.
  80 | **[`NoDefaultBookmarks`](#nodefaultbookmarks)** | Disable the creation of default bookmarks.
  81 | **[`OfferToSaveLogins`](#offertosavelogins)** | Control whether or not Firefox offers to save passwords.
  82 | **[`OfferToSaveLoginsDefault`](#offertosaveloginsdefault)** | Set the default value for whether or not Firefox offers to save passwords.
  83 | **[`OverrideFirstRunPage`](#overridefirstrunpage)** | Override the first run page.
  84 | **[`OverridePostUpdatePage`](#overridepostupdatepage)** | Override the upgrade page.
  85 | **[`PasswordManagerEnabled`](#passwordmanagerenabled)** | Remove (some) access to the password manager.
  86 | **[`PasswordManagerExceptions`](#passwordmanagerexceptions)** | Prevent Firefox from saving passwords for specific sites.
  87 | **[`PDFjs`](#pdfjs)** | Disable or configure PDF.js, the built-in PDF viewer.
  88 | **[`Permissions`](#permissions)** | Set permissions associated with camera, microphone, location, and notifications.
  89 | **[`PictureInPicture`](#pictureinpicture)** | Enable or disable Picture-in-Picture.
  90 | **[`PopupBlocking`](#popupblocking)** | Configure the default pop-up window policy as well as origins for which pop-up windows are allowed.
  91 | **[`Preferences`](#preferences)** | Set and lock preferences.
  92 | **[`Preferences (Deprecated)`](#preferences-deprecated)** | Set and lock some preferences.
  93 | **[`PrimaryPassword`](#primarypassword)** | Require or prevent using a primary (formerly master) password.
  94 | **[`PromptForDownloadLocation`](#promptfordownloadlocation)** | Ask where to save each file before downloading.
  95 | **[`Proxy`](#proxy)** | Configure proxy settings.
  96 | **[`RequestedLocales`](#requestedlocales)** | Set the the list of requested locales for the application in order of preference.
  97 | **[`SanitizeOnShutdown` (All)](#sanitizeonshutdown-all)** | Clear all data on shutdown.
  98 | **[`SanitizeOnShutdown` (Selective)](#sanitizeonshutdown-selective)** | Clear data on shutdown.
  99 | **[`SearchBar`](#searchbar)** | Set whether or not search bar is displayed.
 100 | **[`SearchEngines`](#searchengines-this-policy-is-only-available-on-the-esr)** |
 101 | **[`SearchEngines -> Add`](#searchengines--add)** | Add new search engines.
 102 | **[`SearchEngines -> Default`](#searchengines--default)** | Set the default search engine.
 103 | **[`SearchEngines -> PreventInstalls`](#searchengines--preventinstalls)** | Prevent installing search engines from webpages.
 104 | **[`SearchEngines -> Remove`](#searchengines--remove)** | Hide built-in search engines.
 105 | **[`SearchSuggestEnabled`](#searchsuggestenabled)** | Enable search suggestions.
 106 | **[`SecurityDevices`](#securitydevices)** | Install PKCS #11 modules.
 107 | **[`ShowHomeButton`](#showhomebutton)** | Show the home button on the toolbar.
 108 | **[`SSLVersionMax`](#sslversionmax)** | Set and lock the maximum version of TLS.
 109 | **[`SSLVersionMin`](#sslversionmin)** | Set and lock the minimum version of TLS.
 110 | **[`StartDownloadsInTempDirectory`](#startdownloadsintempdirectory)** | Force downloads to start off in a local, temporary location rather than the default download directory.
 111 | **[`SupportMenu`](#supportmenu)** | Add a menuitem to the help menu for specifying support information.
 112 | **[`UserMessaging`](#usermessaging)** | Don't show certain messages to the user.
 113 | **[`UseSystemPrintDialog`](#usesystemprintdialog)** | Print using the system print dialog instead of print preview.
 114 | **[`WebsiteFilter`](#websitefilter)** | Block websites from being visited.
 115 | **[`WindowsSSO`](#windowssso)** | Allow Windows single sign-on for Microsoft, work, and school accounts.
 116
 117 ### 3rdparty
 118
 119 Allow WebExtensions to configure policy. For more information, see [Adding policy support to your extension](https://extensionworkshop.com/documentation/enterprise/adding-policy-support-to-your-extension/).
 120
 121 For GPO and Intune, the extension developer should provide an ADMX file.
 122
 123 **Compatibility:** Firefox 68\
 124 **CCK2 Equivalent:** N/A\
 125 **Preferences Affected:** N/A
 126
 127 #### macOS
 128 ```
 129 <dict>
 130   <key>3rdparty</key>
 131   <dict>
 132     <key>Extensions</key>
 133     <dict>
 134       <key>uBlock0@raymondhill.net</key>
 135       <dict>
 136         <key>adminSettings</key>
 137         <dict>
 138           <key>selectedFilterLists</key>
 139           <array>
 140             <string>ublock-privacy</string>
 141             <string>ublock-badware</string>
 142             <string>ublock-filters</string>
 143             <string>user-filters</string>
 144           </array>
 145         </dict>
 146       </dict>
 147     </dict>
 148   </dict>
 149 </dict>
 150 ```
 151 #### policies.json
 152 ```
 153 {
 154   "policies": {
 155     "3rdparty": {
 156       "Extensions": {
 157         "uBlock0@raymondhill.net": {
 158           "adminSettings": {
 159             "selectedFilterLists": [
 160               "ublock-privacy",
 161               "ublock-badware",
 162               "ublock-filters",
 163               "user-filters"
 164             ]
 165           }
 166         }
 167       }
 168     }
 169   }
 170 }
 171 ```
 172
 173 ### AllowedDomainsForApps
 174
 175 Define domains allowed to access Google Workspace.
 176
 177 This policy is based on the [Chrome policy](https://chromeenterprise.google/policies/#AllowedDomainsForApps) of the same name.
 178
 179 If this policy is enabled, users can only access Google Workspace using accounts from the specified domains. If you want to allow Gmail, you can add ```consumer_accounts``` to the list.
 180
 181 **Compatibility:** Firefox 89, Firefox ESR 78.11\
 182 **CCK2 Equivalent:** N/A\
 183 **Preferences Affected:** N/A
 184
 185 #### Windows (GPO)
 186 ```
 187 Software\Policies\Mozilla\Firefox\AllowedDomainsForApps = "managedfirefox.com,example.com"
 188 ```
 189 #### Windows (Intune)
 190 OMA-URI:
 191 ```
 192 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AllowedDomainsForApps
 193 ```
 194 Value (string):
 195 ```
 196 <enabled/>
 197 <data id="AllowedDomainsForApps" value="managedfirefox.com,example.com"/>
 198 ```
 199 #### macOS
 200 ```
 201 <dict>
 202   <key>AllowedDomainsForApps</key>
 203   <string>managedfirefox.com,example.com</string>
 204 </dict>
 205 ```
 206 #### policies.json
 207 ```
 208 {
 209   "policies": {
 210     "AllowedDomainsForApps": "managedfirefox.com,example.com"
 211   }
 212 }
 213 ```
 214 ### AppAutoUpdate
 215
 216 Enable or disable **automatic** application update.
 217
 218 If set to true, application updates are installed without user approval within Firefox. The operating system might still require approval.
 219
 220 If set to false, application updates are downloaded but the user can choose when to install the update.
 221
 222 If you have disabled updates via `DisableAppUpdate`, this policy has no effect.
 223
 224 **Compatibility:** Firefox 75, Firefox ESR 68.7\
 225 **CCK2 Equivalent:** N/A\
 226 **Preferences Affected:** `app.update.auto`
 227
 228 #### Windows (GPO)
 229 ```
 230 Software\Policies\Mozilla\Firefox\AppAutoUpdate = 0x1 | 0x0
 231 ```
 232 #### Windows (Intune)
 233 OMA-URI:
 234 ```
 235 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AppAutoUpdate
 236 ```
 237 Value (string):
 238 ```
 239 <enabled/> or <disabled/>
 240 ```
 241 #### macOS
 242 ```
 243 <dict>
 244   <key>AppAutoUpdate</key>
 245   <true/> | <false/>
 246 </dict>
 247 ```
 248 #### policies.json
 249 ```
 250 {
 251   "policies": {
 252     "AppAutoUpdate": true | false
 253   }
 254 }
 255 ```
 256 ### AppUpdatePin
 257
 258 Prevent Firefox from being updated beyond the specified version.
 259
 260 You can specify the any version as ```xx.``` and Firefox will be updated with all minor versions, but will not be updated beyond the major version.
 261
 262 You can also specify the version as ```xx.xx``` and Firefox will be updated with all patch versions, but will not be updated beyond the minor version.
 263
 264 You should specify a version that exists or is guaranteed to exist. If you specify a version that doesn't end up existing, Firefox will update beyond that version.
 265
 266 **Compatibility:** Firefox 102,\
 267 **CCK2 Equivalent:** N/A\
 268 **Preferences Affected:** N/A
 269
 270 #### Windows (GPO)
 271 ```
 272 Software\Policies\Mozilla\Firefox\AppUpdatePin = "106."
 273 ```
 274 #### Windows (Intune)
 275 OMA-URI:
 276 ```
 277 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AppUpdatePin
 278 ```
 279 Value (string):
 280 ```
 281 <enabled/>
 282 <data id="AppUpdatePin" value="106."/>
 283 ```
 284 #### macOS
 285 ```
 286 <dict>
 287   <key>AppUpdatePin</key>
 288   <string>106.</string>
 289 </dict>
 290 ```
 291 #### policies.json
 292 ```
 293 {
 294   "policies": {
 295     "AppUpdatePin": "106."
 296   }
 297 }
 298 ```
 299 ### AppUpdateURL
 300
 301 Change the URL for application update if you are providing Firefox updates from a custom update server.
 302
 303 **Compatibility:** Firefox 62, Firefox ESR 60.2\
 304 **CCK2 Equivalent:** N/A\
 305 **Preferences Affected:** `app.update.url`
 306
 307 #### Windows (GPO)
 308 ```
 309 Software\Policies\Mozilla\Firefox\AppUpdateURL = "https://yoursite.com"
 310 ```
 311 #### Windows (Intune)
 312 OMA-URI:
 313 ```
 314 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AppUpdateURL
 315 ```
 316 Value (string):
 317 ```
 318 <enabled/>
 319 <data id="AppUpdateURL" value="https://yoursite.com"/>
 320 ```
 321 #### macOS
 322 ```
 323 <dict>
 324   <key>AppUpdateURL</key>
 325   <string>https://yoursite.com</string>
 326 </dict>
 327 ```
 328 #### policies.json
 329 ```
 330 {
 331   "policies": {
 332     "AppUpdateURL": "https://yoursite.com"
 333   }
 334 }
 335 ```
 336 ### Authentication
 337
 338 Configure sites that support integrated authentication.
 339
 340 See [Integrated authentication](https://htmlpreview.github.io/?https://github.com/mdn/archived-content/blob/main/files/en-us/mozilla/integrated_authentication/raw.html) for more information.
 341
 342 `PrivateBrowsing` enables integrated authentication in private browsing.
 343
 344 **Compatibility:** Firefox 60, Firefox ESR 60 (AllowNonFQDN added in 62/60.2, AllowProxies added in 70/68.2, Locked added in 71/68.3, PrivateBrowsing added in 77/68.9)\
 345 **CCK2 Equivalent:** N/A\
 346 **Preferences Affected:** `network.negotiate-auth.trusted-uris`,`network.negotiate-auth.delegation-uris`,`network.automatic-ntlm-auth.trusted-uris`,`network.automatic-ntlm-auth.allow-non-fqdn`,`network.negotiate-auth.allow-non-fqdn`,`network.automatic-ntlm-auth.allow-proxies`,`network.negotiate-auth.allow-proxies`,`network.auth.private-browsing-sso`
 347
 348 #### Windows (GPO)
 349 ```
 350 Software\Policies\Mozilla\Firefox\Authentication\SPNEGO\1 = "mydomain.com"
 351 Software\Policies\Mozilla\Firefox\Authentication\SPNEGO\2 = "https://myotherdomain.com"
 352 Software\Policies\Mozilla\Firefox\Authentication\Delegated\1 = "mydomain.com"
 353 Software\Policies\Mozilla\Firefox\Authentication\Delegated\2 = "https://myotherdomain.com"
 354 Software\Policies\Mozilla\Firefox\Authentication\NTLM\1 = "mydomain.com"
 355 Software\Policies\Mozilla\Firefox\Authentication\NTLM\2 = "https://myotherdomain.com"
 356 Software\Policies\Mozilla\Firefox\Authentication\AllowNonFQDN\SPNEGO = 0x1 | 0x0
 357 Software\Policies\Mozilla\Firefox\Authentication\AllowNonFQDN\NTLM = 0x1 | 0x0
 358 Software\Policies\Mozilla\Firefox\Authentication\AllowProxies\SPNEGO = 0x1 | 0x0
 359 Software\Policies\Mozilla\Firefox\Authentication\AllowProxies\NTLM = 0x1 | 0x0
 360 Software\Policies\Mozilla\Firefox\Authentication\Locked = 0x1 | 0x0
 361 Software\Policies\Mozilla\Firefox\Authentication\PrivateBrowsing = 0x1 | 0x0
 362 ```
 363 #### Windows (Intune)
 364 OMA-URI:
 365 ```
 366 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_SPNEGO
 367 ```
 368 Value (string):
 369 ```
 370 <enabled/>
 371 <data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
 372 ```
 373 OMA-URI:
 374 ```
 375 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_Delegated
 376 ```
 377 Value (string):
 378 ```
 379 <enabled/>
 380 <data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
 381 ```
 382 OMA-URI:
 383 ```
 384 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_NTLM
 385 ```
 386 Value (string):
 387 ```
 388 <enabled/>
 389 <data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
 390 ```
 391 OMA-URI:
 392 ```
 393 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_AllowNonFQDN
 394 ```
 395 Value (string):
 396 ```
 397 <enabled/>
 398 <data id="Authentication_AllowNonFQDN_NTLM" value="true | false"/>
 399 <data id="Authentication_AllowNonFQDN_SPNEGO" value="true | false"/>
 400 ```
 401 OMA-URI:
 402 ```
 403 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_Locked
 404 ```
 405 Value (string):
 406 ```
 407 <enabled/> or <disabled/>
 408 ```
 409 OMA-URI:
 410 ```
 411 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_PrivateBrowsing
 412 ```
 413 Value (string):
 414 ```
 415 <enabled/> or <disabled/>
 416 ```
 417 #### macOS
 418 ```
 419 <dict>
 420   <key>Authentication</key>
 421   <dict>
 422     <key>SPNEGO</key>
 423     <array>
 424       <string>mydomain.com</string>
 425       <string>https://myotherdomain.com</string>
 426     </array>
 427     <key>Delegated</key>
 428     <array>
 429       <string>mydomain.com</string>
 430       <string>https://myotherdomain.com</string>
 431     </array>
 432     <key>NTLM</key>
 433     <array>
 434       <string>mydomain.com</string>
 435       <string>https://myotherdomain.com</string>
 436     </array>
 437     <key>AllowNonFQDN</key>
 438       <dict>
 439       <key>SPNEGO</key>
 440       <true/> | <false/>
 441       <key>NTLM</key>
 442       <true/> | <false/>
 443     </dict>
 444     <key>AllowProxies</key>
 445       <dict>
 446       <key>SPNEGO</key>
 447       <true/> | <false/>
 448       <key>NTLM</key>
 449       <true/> | <false/>
 450     </dict>
 451     <key>Locked</key>
 452     <true/> | <false/>
 453     <key>PrivateBrowsing</key>
 454     <true/> | <false/>
 455   </dict>
 456 </dict>
 457 ```
 458 #### policies.json
 459 ```
 460 {
 461   "policies": {
 462     "Authentication": {
 463       "SPNEGO": ["mydomain.com", "https://myotherdomain.com"],
 464       "Delegated": ["mydomain.com", "https://myotherdomain.com"],
 465       "NTLM": ["mydomain.com", "https://myotherdomain.com"],
 466       "AllowNonFQDN": {
 467         "SPNEGO": true | false,
 468         "NTLM": true | false
 469       },
 470       "AllowProxies": {
 471         "SPNEGO": true | false,
 472         "NTLM": true | false
 473       },
 474       "Locked": true | false,
 475       "PrivateBrowsing": true | false
 476     }
 477   }
 478 }
 479 ```
 480 ### AutoLaunchProtocolsFromOrigins
 481 Define a list of external protocols that can be used from listed origins without prompting the user. The origin is the scheme plus the hostname.
 482
 483 The syntax of this policy is exactly the same as the [Chrome AutoLaunchProtocolsFromOrigins policy](https://cloud.google.com/docs/chrome-enterprise/policies/?policy=AutoLaunchProtocolsFromOrigins) except that you can only use valid origins (not just hostnames). This also means that you cannot specify an asterisk for all origins.
 484
 485 The schema is:
 486 ```
 487 {
 488  "items": {
 489   "properties": {
 490    "allowed_origins": {
 491     "items": {
 492      "type": "string"
 493     },
 494     "type": "array"
 495    },
 496    "protocol": {
 497     "type": "string"
 498    }
 499   },
 500   "required": [
 501    "protocol",
 502    "allowed_origins"
 503   ],
 504   "type": "object"
 505  },
 506  "type": "array"
 507 }
 508 ```
 509 **Compatibility:** Firefox 90, Firefox ESR 78.12\
 510 **CCK2 Equivalent:** N/A\
 511 **Preferences Affected:** N/A
 512
 513 #### Windows (GPO)
 514 Software\Policies\Mozilla\Firefox\AutoLaunchProtocolsFromOrigins (REG_MULTI_SZ) =
 515 ```
 516 [
 517   {
 518     "protocol": "zoommtg",
 519     "allowed_origins": [
 520       "https://somesite.zoom.us"
 521     ]
 522   }
 523 ]
 524 ```
 525 #### Windows (Intune)
 526 OMA-URI:
 527 ```
 528 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AutoLaunchProtocolsFromOrigins
 529 ```
 530 Value (string):
 531 ```
 532 <enabled/>
 533 <data id="JSON" value='
 534 [
 535   {
 536     "protocol": "zoommtg",
 537     "allowed_origins": [
 538       "https://somesite.zoom.us"
 539     ]
 540   }
 541 ]'/>
 542 ```
 543 #### macOS
 544 ```
 545 <dict>
 546   <key>AutoLaunchProtocolsFromOrigins</key>
 547   <array>
 548     <dict>
 549       <key>protocol</key>
 550       <string>zoommtg</string>
 551       <key>allowed_origins</key>
 552       <array>
 553         <string>https://somesite.zoom.us</string>
 554       </array>
 555     </dict>
 556   </array>
 557 </dict>
 558 ```
 559 #### policies.json
 560 ```
 561 {
 562   "policies": {
 563     "AutoLaunchProtocolsFromOrigins": [{
 564       "protocol": "zoommtg",
 565       "allowed_origins": [
 566         "https://somesite.zoom.us"
 567       ]
 568     }]
 569   }
 570 }
 571 ```
 572 ### BackgroundAppUpdate
 573
 574 Enable or disable **automatic** application update **in the background**, when the application is not running.
 575
 576 If set to true, application updates may be installed (without user approval) in the background, even when the application is not running. The operating system might still require approval.
 577
 578 If set to false, the application will not try to install updates when the application is not running.
 579
 580 If you have disabled updates via `DisableAppUpdate` or disabled automatic updates via `AppAutoUpdate`, this policy has no effect.
 581
 582 **Compatibility:** Firefox 90 (Windows only)\
 583 **CCK2 Equivalent:** N/A\
 584 **Preferences Affected:** `app.update.background.enabled`
 585
 586 #### Windows (GPO)
 587 ```
 588 Software\Policies\Mozilla\Firefox\BackgroundAppUpdate = 0x1 | 0x0
 589 ```
 590 #### Windows (Intune)
 591 OMA-URI:
 592 ```
 593 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BackgroundAppUpdate
 594 ```
 595 Value (string):
 596 ```
 597 <enabled/> or <disabled/>
 598 ```
 599 #### macOS
 600 ```
 601 <dict>
 602   <key>BackgroundAppUpdate</key>
 603   <true/> | <false/>
 604 </dict>
 605 ```
 606 #### policies.json
 607 ```
 608 {
 609   "policies": {
 610     "BackgroundAppUpdate": true | false
 611   }
 612 }
 613 ```
 614 ### BlockAboutAddons
 615
 616 Block access to the Add-ons Manager (about:addons).
 617
 618 **Compatibility:** Firefox 60, Firefox ESR 60\
 619 **CCK2 Equivalent:** `disableAddonsManager`\
 620 **Preferences Affected:** N/A
 621
 622 #### Windows (GPO)
 623 ```
 624 Software\Policies\Mozilla\Firefox\BlockAboutAddons = 0x1 | 0x0
 625 ```
 626 #### Windows (Intune)
 627 OMA-URI:
 628 ```
 629 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutAddons
 630 ```
 631 Value (string):
 632 ```
 633 <enabled/> or <disabled/>
 634 ```
 635 #### macOS
 636 ```
 637 <dict>
 638   <key>BlockAboutAddons</key>
 639   <true/> | <false/>
 640 </dict>
 641 ```
 642 #### policies.json
 643 ```
 644 {
 645   "policies": {
 646     "BlockAboutAddons": true | false
 647   }
 648 }
 649 ```
 650 ### BlockAboutConfig
 651
 652 Block access to about:config.
 653
 654 **Compatibility:** Firefox 60, Firefox ESR 60\
 655 **CCK2 Equivalent:** `disableAboutConfig`\
 656 **Preferences Affected:** N/A
 657
 658 #### Windows (GPO)
 659 ```
 660 Software\Policies\Mozilla\Firefox\BlockAboutConfig = 0x1 | 0x0
 661 ```
 662 #### Windows (Intune)
 663 OMA-URI:
 664 ```
 665 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutConfig
 666 ```
 667 Value (string):
 668 ```
 669 <enabled/> or <disabled/>
 670 ```
 671 #### macOS
 672 ```
 673 <dict>
 674   <key>BlockAboutConfig</key>
 675   <true/> | <false/>
 676 </dict>
 677 ```
 678 #### policies.json
 679 ```
 680 {
 681   "policies": {
 682     "BlockAboutConfig": true | false
 683   }
 684 }
 685 ```
 686 ### BlockAboutProfiles
 687
 688 Block access to About Profiles (about:profiles).
 689
 690 **Compatibility:** Firefox 60, Firefox ESR 60\
 691 **CCK2 Equivalent:** `disableAboutProfiles`\
 692 **Preferences Affected:** N/A
 693
 694 #### Windows (GPO)
 695 ```
 696 Software\Policies\Mozilla\Firefox\BlockAboutProfiles = 0x1 | 0x0
 697 ```
 698 #### Windows (Intune)
 699 OMA-URI:
 700 ```
 701 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutProfiles
 702 ```
 703 Value (string):
 704 ```
 705 <enabled/> or <disabled/>
 706 ```
 707 #### macOS
 708 ```
 709 <dict>
 710   <key>BlockAboutProfiles</key>
 711   <true/> | <false/>
 712 </dict>
 713 ```
 714 #### policies.json
 715 ```
 716 {
 717   "policies": {
 718     "BlockAboutProfiles": true | false
 719   }
 720 }
 721 ```
 722 ### BlockAboutSupport
 723
 724 Block access to Troubleshooting Information (about:support).
 725
 726 **Compatibility:** Firefox 60, Firefox ESR 60\
 727 **CCK2 Equivalent:** `disableAboutSupport`\
 728 **Preferences Affected:** N/A
 729
 730 #### Windows (GPO)
 731 ```
 732 Software\Policies\Mozilla\Firefox\BlockAboutSupport = 0x1 | 0x0
 733 ```
 734 #### Windows (Intune)
 735 OMA-URI:
 736 ```
 737 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutSupport
 738 ```
 739 Value (string):
 740 ```
 741 <enabled/> or <disabled/>
 742 ```
 743 #### macOS
 744 ```
 745 <dict>
 746   <key>BlockAboutSupport</key>
 747   <true/> | <false/>
 748 </dict>
 749 ```
 750 #### policies.json
 751 ```
 752 {
 753   "policies": {
 754     "BlockAboutSupport": true | false
 755   }
 756 }
 757 ```
 758 ### Bookmarks
 759
 760 Note: [`ManagedBookmarks`](#managedbookmarks) is the new recommended way to add bookmarks. This policy will continue to be supported.
 761
 762 Add bookmarks in either the bookmarks toolbar or menu. Only `Title` and `URL` are required. If `Placement` is not specified, the bookmark will be placed on the toolbar. If `Folder` is specified, it is automatically created and bookmarks with the same folder name are grouped together.
 763
 764 If you want to clear all bookmarks set with this policy, you can set the value to an empty array (```[]```). This can be on Windows via the new Bookmarks (JSON) policy available with GPO and Intune.
 765
 766 **Compatibility:** Firefox 60, Firefox ESR 60\
 767 **CCK2 Equivalent:** `bookmarks.toolbar`,`bookmarks.menu`\
 768 **Preferences Affected:** N/A
 769
 770 #### Windows (GPO)
 771 ```
 772 Software\Policies\Mozilla\Firefox\Bookmarks\1\Title = "Example"
 773 Software\Policies\Mozilla\Firefox\Bookmarks\1\URL = "https://example.com"
 774 Software\Policies\Mozilla\Firefox\Bookmarks\1\Favicon = "https://example.com/favicon.ico"
 775 Software\Policies\Mozilla\Firefox\Bookmarks\1\Placement = "toolbar" | "menu"
 776 Software\Policies\Mozilla\Firefox\Bookmarks\1\Folder = "FolderName"
 777
 778 Software\Policies\Mozilla\Firefox\Bookmarks (REG_MULTI_SZ) =
 779 ```
 780 []
 781 ```
 782
 783 ```
 784 #### Windows (Intune)
 785 OMA-URI:
 786 ```
 787 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Bookmarks/Bookmark01
 788 ```
 789 Value (string):
 790 ```
 791 <enabled/>
 792 <data id="BookmarkTitle" value="Example"/>
 793 <data id="BookmarkURL" value="https://example.com"/>
 794 <data id="BookmarkFavicon" value="https://example.com/favicon.ico"/>
 795 <data id="BookmarkPlacement" value="toolbar | menu"/>
 796 <data id="BookmarkFolder" value="FolderName"/>
 797 ```
 798 OMA-URI:
 799 ```
 800 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Bookmarks
 801 ```
 802 Value (string):
 803 ```
 804 <enabled/>
 805 <data id="JSON" value='[]'/>
 806 ```
 807 #### macOS
 808 ```
 809 <dict>
 810   <key>Bookmarks</key>
 811   <array>
 812     <dict>
 813       <key>Title</key>
 814       <string>Example</string>
 815       <key>URL</key>
 816       <string>https://example.com</string>
 817       <key>Favicon</key>
 818       <string>https://example.com/favicon.ico</string>
 819       <key>Placement</key>
 820       <string>toolbar | menu</string>
 821       <key>Folder</key>
 822       <string>FolderName</string>
 823     </dict>
 824   </array>
 825 </dict>
 826 ```
 827 #### policies.json
 828 ```
 829 {
 830   "policies": {
 831     "Bookmarks": [
 832       {
 833         "Title": "Example",
 834         "URL": "https://example.com",
 835         "Favicon": "https://example.com/favicon.ico",
 836         "Placement": "toolbar" | "menu",
 837         "Folder": "FolderName"
 838       }
 839     ]
 840   }
 841 }
 842 ```
 843 ### CaptivePortal
 844 Enable or disable the detection of captive portals.
 845
 846 **Compatibility:** Firefox 67, Firefox ESR 60.7\
 847 **CCK2 Equivalent:** N/A\
 848 **Preferences Affected:** `network.captive-portal-service.enabled`
 849
 850 #### Windows (GPO)
 851 ```
 852 Software\Policies\Mozilla\Firefox\CaptivePortal = 0x1 | 0x0
 853 ```
 854 #### Windows (Intune)
 855 OMA-URI:
 856 ```
 857 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/CaptivePortal
 858 ```
 859 Value (string):
 860 ```
 861 <enabled/> or <disabled/>
 862 ```
 863 #### macOS
 864 ```
 865 <dict>
 866   <key>CaptivePortal</key>
 867   <true/> | <false/>
 868 </dict>
 869 ```
 870 #### policies.json
 871 ```
 872 {
 873   "policies": {
 874     "CaptivePortal": true | false
 875   }
 876 }
 877 ```
 878 ### Certificates
 879
 880 ### Certificates | ImportEnterpriseRoots
 881
 882 Trust certificates that have been added to the operating system certificate store by a user or administrator.
 883
 884 Note: This policy only works on Windows and macOS. For Linux discussion, see [bug 1600509](https://bugzilla.mozilla.org/show_bug.cgi?id=1600509).
 885
 886 See https://support.mozilla.org/kb/setting-certificate-authorities-firefox for more detail.
 887
 888 **Compatibility:** Firefox 60, Firefox ESR 60 (macOS support in Firefox 63, Firefox ESR 68)\
 889 **CCK2 Equivalent:** N/A\
 890 **Preferences Affected:** `security.enterprise_roots.enabled`
 891
 892 #### Windows (GPO)
 893 ```
 894 Software\Policies\Mozilla\Firefox\Certificates\ImportEnterpriseRoots = 0x1 | 0x0
 895 ```
 896 #### Windows (Intune)
 897 OMA-URI:
 898 ```
 899 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Certificates/Certificates_ImportEnterpriseRoots
 900 ```
 901 Value (string):
 902 ```
 903 <enabled/> or <disabled/>
 904 ```
 905 #### macOS
 906 ```
 907 <dict>
 908   <key>Certificates</key>
 909   <dict>
 910     <key>ImportEnterpriseRoots</key>
 911     <true/> | <false/>
 912   </dict>
 913 </dict>
 914 ```
 915 #### policies.json
 916 ```
 917 {
 918   "policies": {
 919     "Certificates": {
 920       "ImportEnterpriseRoots": true | false
 921     }
 922   }
 923 }
 924 ```
 925 ### Certificates | Install
 926
 927 Install certificates into the Firefox certificate store. If only a filename is specified, Firefox searches for the file in the following locations:
 928
 929 - Windows
 930   - %USERPROFILE%\AppData\Local\Mozilla\Certificates
 931   - %USERPROFILE%\AppData\Roaming\Mozilla\Certificates
 932 - macOS
 933   - /Library/Application Support/Mozilla/Certificates
 934   - ~/Library/Application Support/Mozilla/Certificates
 935 - Linux
 936   - /usr/lib/mozilla/certificates
 937   - /usr/lib64/mozilla/certificates
 938   - ~/.mozilla/certificates
 939
 940 Starting with Firefox 65, Firefox 60.5 ESR, a fully qualified path can be used, including UNC paths. You should use the native path style for your operating system. We do not support using %USERPROFILE% or other environment variables on Windows.
 941
 942 If you are specifying the path in the policies.json file on Windows, you need to escape your backslashes (`\\`) which means that for UNC paths, you need to escape both (`\\\\`). If you use group policy, you only need one backslash.
 943
 944 Certificates are installed using the trust string `CT,CT,`.
 945
 946 Binary (DER) and ASCII (PEM) certificates are both supported.
 947
 948 **Compatibility:** Firefox 64, Firefox ESR 64\
 949 **CCK2 Equivalent:** `certs.ca`\
 950 **Preferences Affected:** N/A
 951
 952 #### Windows (GPO)
 953 ```
 954 Software\Policies\Mozilla\Firefox\Certificates\Install\1 = "cert1.der"
 955 Software\Policies\Mozilla\Firefox\Certificates\Install\2 = "C:\Users\username\cert2.pem"
 956 ```
 957 #### Windows (Intune)
 958 OMA-URI:
 959 ```
 960 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Certificates/Certificates_Install
 961 ```
 962 Value (string):
 963 ```
 964 <enabled/>
 965 <data id="Certificates_Install" value="1&#xF000;cert1.der&#xF000;2&#xF000;C:\Users\username\cert2.pem"/>
 966 ```
 967 #### macOS
 968 ```
 969 <dict>
 970   <key>Certificates</key>
 971   <dict>
 972     <key>Install</key>
 973     <array>
 974       <string>cert1.der</string>
 975       <string>/Users/username/cert2.pem</string>
 976     </array>
 977   </dict>
 978 </dict>
 979 ```
 980 #### policies.json
 981 ```
 982 {
 983   "policies": {
 984     "Certificates": {
 985       "Install": ["cert1.der", "/home/username/cert2.pem"]
 986     }
 987   }
 988 }
 989 ```
 990 ### Cookies
 991 Configure cookie preferences.
 992
 993 `Allow` is a list of origins (not domains) where cookies are always allowed. You must include http or https.
 994
 995 `AllowSession` is a list of origins (not domains) where cookies are only allowed for the current session. You must include http or https.
 996
 997 `Block` is a list of origins (not domains) where cookies are always blocked. You must include http or https.
 998
 999 `Behavior` sets the default behavior for cookies based on the values below.
1000
1001 `BehaviorPrivateBrowsing` sets the default behavior for cookies in private browsing based on the values below.
1002
1003 | Value | Description
1004 | --- | ---
1005 | accept | Accept all cookies
1006 | reject-foreign | Reject third party cookies
1007 | reject | Reject all cookies
1008 | limit-foreign | Reject third party cookies for sites you haven't visited
1009 | reject-tracker | Reject cookies for known trackers (default)
1010 | reject-tracker-and-partition-foreign | Reject cookies for known trackers and partition third-party cookies (Total Cookie Protection) (default for private browsing)
1011
1012 `Default` (Deprecated) determines whether cookies are accepted at all.
1013
1014 `AcceptThirdParty` (Deprecated) determines how third-party cookies are handled.
1015
1016 `ExpireAtSessionEnd` determines when cookies expire.
1017
1018 `RejectTracker` (Deprecated) only rejects cookies for trackers.
1019
1020 `Locked` prevents the user from changing cookie preferences.
1021
1022 **Compatibility:** Firefox 60, Firefox ESR 60 (RejectTracker added in Firefox 63, AllowSession added in Firefox 79/78.1, Behavior added in Firefox 95/91.4)\
1023 **CCK2 Equivalent:** N/A\
1024 **Preferences Affected:** `network.cookie.cookieBehavior`, `network.cookie.cookieBehavior.pbmode`, `network.cookie.lifetimePolicy`
1025
1026 #### Windows (GPO)
1027 ```
1028 Software\Policies\Mozilla\Firefox\Cookies\Allow\1 = "https://example.com"
1029 Software\Policies\Mozilla\Firefox\Cookies\AllowSession\1 = "https://example.edu"
1030 Software\Policies\Mozilla\Firefox\Cookies\Block\1 = "https://example.org"
1031 Software\Policies\Mozilla\Firefox\Cookies\Default = 0x1 | 0x0
1032 Software\Policies\Mozilla\Firefox\Cookies\AcceptThirdParty = "always" | "never" | "from-visited"
1033 Software\Policies\Mozilla\Firefox\Cookies\ExpireAtSessionEnd = 0x1 | 0x0
1034 Software\Policies\Mozilla\Firefox\Cookies\RejectTracker = 0x1 | 0x0
1035 Software\Policies\Mozilla\Firefox\Cookies\Behavior = "accept" | "reject-foreign" | "reject" | "limit-foreign" | "reject-tracker" | "reject-tracker-and-partition-foreign"
1036 Software\Policies\Mozilla\Firefox\Cookies\BehaviorPrivateBrowsing = "accept" | "reject-foreign" | "reject" | "limit-foreign" | "reject-tracker" | "reject-tracker-and-partition-foreign"
1037 Software\Policies\Mozilla\Firefox\Cookies\Locked = 0x1 | 0x0
1038 ```
1039 #### Windows (Intune)
1040 OMA-URI:
1041 ```
1042 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Allow
1043 ```
1044 Value (string):
1045 ```
1046 <enabled/>
1047 <data id="Permissions" value="1&#xF000;https://example.com"/>
1048 ```
1049 OMA-URI:
1050 ```
1051 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_AllowSession
1052 ```
1053 Value (string):
1054 ```
1055 <enabled/>
1056 <data id="Permissions" value="1&#xF000;https://example.edu"/>
1057 ```
1058 OMA-URI:
1059 ```
1060 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Block
1061 ```
1062 Value (string):
1063 ```
1064 <enabled/>
1065 <data id="Permissions" value="1&#xF000;https://example.org"/>
1066 ```
1067 OMA-URI:
1068 ```
1069 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Default
1070 ```
1071 Value (string):
1072 ```
1073 <enabled/> or <disabled/>
1074 ```
1075 OMA-URI:
1076 ```
1077 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_AcceptThirdParty
1078 ```
1079 Value (string):
1080 ```
1081 <enabled/>
1082 <data id="Cookies_AcceptThirdParty" value="always | never | from-visited"/>
1083 ```
1084 OMA-URI:
1085 ```
1086 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_ExpireAtSessionEnd
1087 ```
1088 Value (string):
1089 ```
1090 <enabled/> or <disabled/>
1091 ```
1092 OMA-URI:
1093 ```
1094 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_RejectTracker
1095 ```
1096 Value (string):
1097 ```
1098 <enabled/> or <disabled/>
1099 ```
1100 OMA-URI:
1101 ```
1102 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Locked
1103 ```
1104 Value (string):
1105 ```
1106 <enabled/> or <disabled/>
1107 ```
1108 OMA-URI:
1109 ```
1110 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Behavior
1111 ```
1112 Value (string):
1113 ```
1114 <enabled/>
1115 <data id="Cookies_Behavior" value="accept | reject-foreign | reject | limit-foreign | reject-tracker | reject-tracker-and-partition-foreign"/>
1116 ```
1117 OMA-URI:
1118 ```
1119 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_BehaviorPrivateBrowsing
1120 ```
1121 Value (string):
1122 ```
1123 <enabled/>
1124 <data id="Cookies_BehaviorPrivateBrowsing" value="accept | reject-foreign | reject | limit-foreign | reject-tracker | reject-tracker-and-partition-foreign"/>
1125 ```
1126 #### macOS
1127 ```
1128 <dict>
1129   <key>Cookies</key>
1130   <dict>
1131     <key>Allow</key>
1132     <array>
1133       <string>http://example.com</string>
1134     </array>
1135     <key>AllowSession</key>
1136     <array>
1137       <string>http://example.edu</string>
1138     </array>
1139     <key>Block</key>
1140     <array>
1141       <string>http://example.org</string>
1142     </array>
1143     <key>Default</key>
1144     <true/> | <false/>
1145     <key>AcceptThirdParty</key>
1146     <string>always | never | from-visited</string>
1147     <key>ExpireAtSessionEnd</key>
1148     <true/> | <false/>
1149     <key>RejectTracker</key>
1150     <true/> | <false/>
1151     <key>Locked</key>
1152     <true/> | <false/>
1153     <key>Behavior</key>
1154     <string>accept | reject-foreign | reject | limit-foreign | reject-tracker | reject-tracker-and-partition-foreign</string>
1155     <key>BehaviorPrivateBrowsing</key>
1156     <string>accept | reject-foreign | reject | limit-foreign | reject-tracker | reject-tracker-and-partition-foreign</string>
1157   </dict>
1158 </dict>
1159 ```
1160 #### policies.json
1161 ```
1162 {
1163   "policies": {
1164     "Cookies": {
1165       "Allow": ["http://example.org/"],
1166       "AllowSession": ["http://example.edu/"],
1167       "Block": ["http://example.edu/"],
1168       "Default": true | false,
1169       "AcceptThirdParty": "always" | "never" | "from-visited",
1170       "ExpireAtSessionEnd": true | false,
1171       "RejectTracker": true | false,
1172       "Locked": true | false,
1173       "Behavior": "accept" | "reject-foreign" | "reject" | "limit-foreign" | "reject-tracker" | "reject-tracker-and-partition-foreign",
1174       "BehaviorPrivateBrowsing": "accept" | "reject-foreign" | "reject" | "limit-foreign" | "reject-tracker" | "reject-tracker-and-partition-foreign",
1175     }
1176   }
1177 }
1178 ```
1179 ### DefaultDownloadDirectory
1180 Set the default download directory.
1181
1182 You can use ${home} for the native home directory.
1183
1184 **Compatibility:** Firefox 68, Firefox ESR 68\
1185 **CCK2 Equivalent:** N/A\
1186 **Preferences Affected:** `browser.download.dir`, `browser.download.folderList`
1187
1188 #### Windows (GPO)
1189 ```
1190 Software\Policies\Mozilla\Firefox\DefaultDownloadDirectory = "${home}\Downloads"
1191 ```
1192 #### Windows (Intune)
1193 OMA-URI:
1194 ```
1195 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DefaultDownloadDirectory
1196 ```
1197 Value (string):
1198 ```
1199 <enabled/>
1200 <data id="Preferences_String" value="${home}\Downloads"/>
1201 ```
1202 #### macOS
1203 ```
1204 <dict>
1205   <key>DefaultDownloadDirectory</key>
1206   <string>${home}/Downloads</string>
1207 </dict>
1208 ```
1209 #### policies.json (macOS and Linux)
1210 ```
1211 {
1212   "policies": {
1213     "DefaultDownloadDirectory": "${home}/Downloads"
1214   }
1215 }
1216 ```
1217 #### policies.json (Windows)
1218 ```
1219 {
1220   "policies": {
1221     "DefaultDownloadDirectory": "${home}\\Downloads"
1222   }
1223 }
1224 ```
1225 ### DisableAppUpdate
1226 Turn off application updates within Firefox.
1227
1228 **Compatibility:** Firefox 60, Firefox ESR 60\
1229 **CCK2 Equivalent:** `disableFirefoxUpdates`\
1230 **Preferences Affected:** N/A
1231
1232 #### Windows (GPO)
1233 ```
1234 Software\Policies\Mozilla\Firefox\DisableAppUpdate = 0x1 | 0x0
1235 ```
1236 #### Windows (Intune)
1237 OMA-URI:
1238 ```
1239 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableAppUpdate
1240 ```
1241 Value (string):
1242 ```
1243 <enabled/> or <disabled/>
1244 ```
1245 #### macOS
1246 ```
1247 <dict>
1248   <key>DisableAppUpdate</key>
1249   <true/> | <false/>
1250 </dict>
1251 ```
1252 #### policies.json
1253 ```
1254 {
1255   "policies": {
1256     "DisableAppUpdate": true | false
1257   }
1258 }
1259 ```
1260 ### DisableBuiltinPDFViewer
1261 Disable the built in PDF viewer. PDF files are downloaded and sent externally.
1262
1263 **Compatibility:** Firefox 60, Firefox ESR 60\
1264 **CCK2 Equivalent:** `disablePDFjs`\
1265 **Preferences Affected:** `pdfjs.disabled`
1266
1267 #### Windows (GPO)
1268 ```
1269 Software\Policies\Mozilla\Firefox\DisableBuiltinPDFViewer = 0x1 | 0x0
1270 ```
1271 #### Windows (Intune)
1272 OMA-URI:
1273 ```
1274 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableBuiltinPDFViewer
1275 ```
1276 Value (string):
1277 ```
1278 <enabled/> or <disabled/>
1279 ```
1280 #### macOS
1281 ```
1282 <dict>
1283   <key>DisableBuiltinPDFViewer</key>
1284   <true/> | <false/>
1285 </dict>
1286 ```
1287 #### policies.json
1288 ```
1289 {
1290   "policies": {
1291     "DisableBuiltinPDFViewer": true | false
1292   }
1293 }
1294 ```
1295 ### DisabledCiphers
1296 Disable specific cryptographic ciphers, listed below.
1297
1298 ```
1299 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
1300 TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
1301 TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256
1302 TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
1303 TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
1304 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
1305 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
1306 TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA
1307 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
1308 TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA
1309 TLS_DHE_RSA_WITH_AES_128_CBC_SHA
1310 TLS_DHE_RSA_WITH_AES_256_CBC_SHA
1311 TLS_RSA_WITH_AES_128_GCM_SHA256
1312 TLS_RSA_WITH_AES_256_GCM_SHA384
1313 TLS_RSA_WITH_AES_128_CBC_SHA
1314 TLS_RSA_WITH_AES_256_CBC_SHA
1315 TLS_RSA_WITH_3DES_EDE_CBC_SHA
1316 ```
1317
1318 **Preferences Affected:** `security.ssl3.ecdhe_rsa_aes_128_gcm_sha256`, `security.ssl3.ecdhe_ecdsa_aes_128_gcm_sha256`, `security.ssl3.ecdhe_ecdsa_chacha20_poly1305_sha256`, `security.ssl3.ecdhe_rsa_chacha20_poly1305_sha256`, `security.ssl3.ecdhe_ecdsa_aes_256_gcm_sha384`, `security.ssl3.ecdhe_rsa_aes_256_gcm_sha384`, `security.ssl3.ecdhe_rsa_aes_128_sha`, `security.ssl3.ecdhe_ecdsa_aes_128_sha`, `security.ssl3.ecdhe_rsa_aes_256_sha`, `security.ssl3.ecdhe_ecdsa_aes_256_sha`, `security.ssl3.dhe_rsa_aes_128_sha`, `security.ssl3.dhe_rsa_aes_256_sha`, `security.ssl3.rsa_aes_128_gcm_sha256`, `security.ssl3.rsa_aes_256_gcm_sha384`, `security.ssl3.rsa_aes_128_sha`, `security.ssl3.rsa_aes_256_sha`, `security.ssl3.deprecated.rsa_des_ede3_sha`
1319
1320 ---
1321 **Note:**
1322
1323 This policy was updated in Firefox 78 to allow enabling ciphers as well. Setting the value to true disables the cipher, setting the value to false enables the cipher. Previously setting the value to true or false disabled the cipher.
1324
1325 ---
1326 **Compatibility:** Firefox 76, Firefox ESR 68.8 (TLS_RSA_WITH_AES_128_GCM_SHA256 and TLS_RSA_WITH_AES_256_GCM_SHA384 were added in Firefox 78, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA38, TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, and TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 were added in Firefox 97 and Firefox 91.6)\
1327 **CCK2 Equivalent:** N/A\
1328 **Preferences Affected:** N/A
1329
1330 #### Windows (GPO)
1331 ```
1332 Software\Policies\Mozilla\Firefox\DisabledCiphers\CIPHER_NAME = 0x1 | 0x0
1333 ```
1334 #### Windows (Intune)
1335 OMA-URI:
1336 ```
1337 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_CIPHER_NAME
1338
1339 ```
1340 Value (string):
1341 ```
1342 <enabled/> or <disabled/>
1343 ```
1344 #### macOS
1345 ```
1346 <dict>
1347   <key>DisabledCiphers</key>
1348     <dict>
1349       <key>CIPHER_NAME</key>
1350       <true/> | <false/>
1351     </dict>
1352 </dict>
1353 ```
1354 #### policies.json
1355 ```
1356 {
1357   "policies": {
1358     "DisabledCiphers": {
1359       "CIPHER_NAME": true | false,
1360     }
1361   }
1362 }
1363 ```
1364 ### DisableDefaultBrowserAgent
1365 Prevent the default browser agent from taking any actions. Only applicable to Windows; other platforms don’t have the agent.
1366
1367 The browser agent is a Windows-only scheduled task which runs in the background to collect and submit data about the browser that the user has set as their OS default. More information is available [here](https://firefox-source-docs.mozilla.org/toolkit/mozapps/defaultagent/default-browser-agent/index.html).
1368
1369 **Compatibility:** Firefox 75, Firefox ESR 68.7 (Windows only)\
1370 **CCK2 Equivalent:** N/A\
1371 **Preferences Affected:** N/A
1372
1373 #### Windows (GPO)
1374 ```
1375 Software\Policies\Mozilla\Firefox\DisableDefaultBrowserAgent = 0x1 | 0x0
1376 ```
1377 #### Windows (Intune)
1378 OMA-URI:
1379 ```
1380 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableDefaultBrowserAgent
1381 ```
1382 Value (string):
1383 ```
1384 <enabled/> or <disabled/>
1385 ```
1386 #### policies.json
1387 ```
1388 {
1389   "policies": {
1390     "DisableDefaultBrowserAgent": true | false
1391   }
1392 }
1393 ```
1394 ### DisableDeveloperTools
1395 Remove access to all developer tools.
1396
1397 **Compatibility:** Firefox 60, Firefox ESR 60\
1398 **CCK2 Equivalent:** `removeDeveloperTools`\
1399 **Preferences Affected:** `devtools.policy.disabled`
1400
1401 #### Windows (GPO)
1402 ```
1403 Software\Policies\Mozilla\Firefox\DisableDeveloperTools = 0x1 | 0x0`
1404 ```
1405 #### Windows (Intune)
1406 OMA-URI:
1407 ```
1408 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableDeveloperTools
1409 ```
1410 Value (string):
1411 ```
1412 <enabled/> or <disabled/>
1413 ```
1414 #### macOS
1415 ```
1416 <dict>
1417   <key>DisableDeveloperTools</key>
1418   <true/> | <false/>
1419 </dict>
1420 ```
1421 #### policies.json
1422 ```
1423 {
1424   "policies": {
1425     "DisableDeveloperTools": true | false
1426   }
1427 }
1428 ```
1429 ### DisableFeedbackCommands
1430 Disable the menus for reporting sites (Submit Feedback, Report Deceptive Site).
1431
1432 **Compatibility:** Firefox 60, Firefox ESR 60\
1433 **CCK2 Equivalent:** N/A\
1434 **Preferences Affected:** N/A
1435
1436 #### Windows (GPO)
1437 ```
1438 Software\Policies\Mozilla\Firefox\DisableFeedbackCommands = 0x1 | 0x0
1439 ```
1440 #### Windows (Intune)
1441 OMA-URI:
1442 ```
1443 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFeedbackCommands
1444 ```
1445 Value (string):
1446 ```
1447 <enabled/> or <disabled/>
1448 ```
1449 #### macOS
1450 ```
1451 <dict>
1452   <key>DisableFeedbackCommands</key>
1453   <true/> | <false/>
1454 </dict>
1455 ```
1456 #### policies.json
1457 ```
1458 {
1459   "policies": {
1460     "DisableFeedbackCommands": true | false
1461   }
1462 }
1463 ```
1464 ### DisableFirefoxAccounts
1465 Disable Firefox Accounts integration (Sync).
1466
1467 **Compatibility:** Firefox 60, Firefox ESR 60\
1468 **CCK2 Equivalent:** `disableSync`\
1469 **Preferences Affected:** `identity.fxaccounts.enabled`
1470
1471 #### Windows (GPO)
1472 ```
1473 Software\Policies\Mozilla\Firefox\DisableFirefoxAccounts = 0x1 | 0x0
1474 ```
1475 #### Windows (Intune)
1476 OMA-URI:
1477 ```
1478 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxAccounts
1479 ```
1480 Value (string):
1481 ```
1482 <enabled/> or <disabled/>
1483 ```
1484 #### macOS
1485 ```
1486 <dict>
1487   <key>DisableFirefoxAccounts</key>
1488   <true/> | <false/>
1489 </dict>
1490 ```
1491 #### policies.json
1492 ```
1493 {
1494   "policies": {
1495     "DisableFirefoxAccounts": true | false
1496   }
1497 }
1498 ```
1499 ### DisableFirefoxScreenshots
1500 Remove access to Firefox Screenshots.
1501
1502 **Compatibility:** Firefox 60, Firefox ESR 60\
1503 **CCK2 Equivalent:** N/A\
1504 **Preferences Affected:** `extensions.screenshots.disabled`
1505
1506 #### Windows (GPO)
1507 ```
1508 Software\Policies\Mozilla\Firefox\DisableFirefoxScreenshots = 0x1 | 0x0
1509 ```
1510 #### Windows (Intune)
1511 OMA-URI:
1512 ```
1513 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxScreenshots
1514 ```
1515 Value (string):
1516 ```
1517 <enabled/> or <disabled/>
1518 ```
1519 #### macOS
1520 ```
1521 <dict>
1522   <key>DisableFirefoxScreenshots</key>
1523   <true/> | <false/>
1524 </dict>
1525 ```
1526 #### policies.json
1527 ```
1528 {
1529   "policies": {
1530     "DisableFirefoxScreenshots": true | false
1531   }
1532 }
1533 ```
1534 ### DisableFirefoxStudies
1535 Disable Firefox studies (Shield).
1536
1537 **Compatibility:** Firefox 60, Firefox ESR 60\
1538 **CCK2 Equivalent:** N/A\
1539 **Preferences Affected:** N/A
1540
1541 #### Windows (GPO)
1542 ```
1543 Software\Policies\Mozilla\Firefox\DisableFirefoxStudies = 0x1 | 0x0
1544 ```
1545 #### Windows (Intune)
1546 OMA-URI:
1547 ```
1548 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxStudies
1549 ```
1550 Value (string):
1551 ```
1552 <enabled/> or <disabled/>
1553 ```
1554 #### macOS
1555 ```
1556 <dict>
1557   <key>DisableFirefoxStudies</key>
1558   <true/> | <false/>
1559 </dict>
1560 ```
1561 #### policies.json
1562 ```
1563 {
1564   "policies": {
1565     "DisableFirefoxStudies": true | false
1566   }
1567 }
1568 ```
1569 ### DisableForgetButton
1570 Disable the "Forget" button.
1571
1572 **Compatibility:** Firefox 60, Firefox ESR 60\
1573 **CCK2 Equivalent:** `disableForget`\
1574 **Preferences Affected:** N/A
1575
1576 #### Windows (GPO)
1577 ```
1578 Software\Policies\Mozilla\Firefox\DisableForgetButton = 0x1 | 0x0
1579 ```
1580 #### Windows (Intune)
1581 OMA-URI:
1582 ```
1583 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableForgetButton
1584 ```
1585 Value (string):
1586 ```
1587 <enabled/> or <disabled/>
1588 ```
1589 #### macOS
1590 ```
1591 <dict>
1592   <key>DisableForgetButton</key>
1593   <true/> | <false/>
1594 </dict>
1595 ```
1596 #### policies.json
1597 ```
1598 {
1599   "policies": {
1600     "DisableForgetButton": true | false
1601   }
1602 }
1603 ```
1604 ### DisableFormHistory
1605 Turn off saving information on web forms and the search bar.
1606
1607 **Compatibility:** Firefox 60, Firefox ESR 60\
1608 **CCK2 Equivalent:** `disableFormFill`\
1609 **Preferences Affected:** `browser.formfill.enable`
1610
1611 #### Windows (GPO)
1612 ```
1613 Software\Policies\Mozilla\Firefox\DisableFormHistory = 0x1 | 0x0
1614 ```
1615 #### Windows (Intune)
1616 OMA-URI:
1617 ```
1618 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFormHistory
1619 ```
1620 Value (string):
1621 ```
1622 <enabled/> or <disabled/>
1623 ```
1624 #### macOS
1625 ```
1626 <dict>
1627   <key>DisableFormHistory</key>
1628   <true/> | <false/>
1629 </dict>
1630 ```
1631 #### policies.json
1632 ```
1633 {
1634   "policies": {
1635     "DisableFormHistory": true | false
1636   }
1637 }
1638 ```
1639 ### DisableMasterPasswordCreation
1640 Remove the master password functionality.
1641
1642 If this value is true, it works the same as setting [`PrimaryPassword`](#primarypassword) to false and removes the primary password functionality.
1643
1644 If both `DisableMasterPasswordCreation` and `PrimaryPassword` are used, `DisableMasterPasswordCreation` takes precedent.
1645
1646 **Compatibility:** Firefox 60, Firefox ESR 60\
1647 **CCK2 Equivalent:** `noMasterPassword`\
1648 **Preferences Affected:** N/A
1649
1650 #### Windows (GPO)
1651 ```
1652 Software\Policies\Mozilla\Firefox\DisableMasterPasswordCreation = 0x1 | 0x0
1653 ```
1654 #### Windows (Intune)
1655 OMA-URI:
1656 ```
1657 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableMasterPasswordCreation
1658 ```
1659 Value (string):
1660 ```
1661 <enabled/> or <disabled/>
1662 ```
1663 #### macOS
1664 ```
1665 <dict>
1666   <key>DisableMasterPasswordCreation</key>
1667   <true/> | <false/>
1668 </dict>
1669 ```
1670 #### policies.json
1671 ```
1672 {
1673   "policies": {
1674     "DisableMasterPasswordCreation": true | false
1675   }
1676 }
1677 ```
1678 ### DisablePasswordReveal
1679 Do not allow passwords to be shown in saved logins
1680
1681 **Compatibility:** Firefox 71, Firefox ESR 68.3\
1682 **CCK2 Equivalent:** N/A
1683 **Preferences Affected:** N/A
1684
1685 #### Windows (GPO)
1686 ```
1687 Software\Policies\Mozilla\Firefox\DisablePasswordReveal = 0x1 | 0x0
1688 ```
1689 #### Windows (Intune)
1690 OMA-URI:
1691 ```
1692 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePasswordReveal
1693 ```
1694 Value (string):
1695 ```
1696 <enabled/> or <disabled/>
1697 ```
1698 #### macOS
1699 ```
1700 <dict>
1701   <key>DisablePasswordReveal</key>
1702   <true/> | <false/>
1703 </dict>
1704 ```
1705 #### policies.json
1706 ```
1707 {
1708   "policies": {
1709     "DisablePasswordReveal": true | false
1710   }
1711 }
1712 ```
1713 ### DisablePocket
1714 Remove Pocket in the Firefox UI. It does not remove it from the new tab page.
1715
1716 **Compatibility:** Firefox 60, Firefox ESR 60\
1717 **CCK2 Equivalent:** `disablePocket`\
1718 **Preferences Affected:** `extensions.pocket.enabled`
1719
1720 #### Windows (GPO)
1721 ```
1722 Software\Policies\Mozilla\Firefox\DisablePocket = 0x1 | 0x0
1723 ```
1724 #### Windows (Intune)
1725 OMA-URI:
1726 ```
1727 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePocket
1728 ```
1729 Value (string):
1730 ```
1731 <enabled/> or <disabled/>
1732 ```
1733 #### macOS
1734 ```
1735 <dict>
1736   <key>DisablePocket</key>
1737   <true/> | <false/>
1738 </dict>
1739 ```
1740 #### policies.json
1741 ```
1742 {
1743   "policies": {
1744     "DisablePocket": true | false
1745   }
1746 }
1747 ```
1748 ### DisablePrivateBrowsing
1749 Remove access to private browsing.
1750
1751 **Compatibility:** Firefox 60, Firefox ESR 60\
1752 **CCK2 Equivalent:** `disablePrivateBrowsing`\
1753 **Preferences Affected:** N/A
1754
1755 #### Windows (GPO)
1756 ```
1757 Software\Policies\Mozilla\Firefox\DisablePrivateBrowsing = 0x1 | 0x0
1758 ```
1759 #### Windows (Intune)
1760 OMA-URI:
1761 ```
1762 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePrivateBrowsing
1763 ```
1764 Value (string):
1765 ```
1766 <enabled/> or <disabled/>
1767 ```
1768 #### macOS
1769 ```
1770 <dict>
1771   <key>DisablePrivateBrowsing</key>
1772   <true/> | <false/>
1773 </dict>
1774 ```
1775 #### policies.json
1776 ```
1777 {
1778   "policies": {
1779     "DisablePrivateBrowsing": true | false
1780   }
1781 }
1782 ```
1783 ### DisableProfileImport
1784 Disables the "Import data from another browser" option in the bookmarks window.
1785
1786 **Compatibility:** Firefox 60, Firefox ESR 60\
1787 **CCK2 Equivalent:** N/A\
1788 **Preferences Affected:** N/A
1789
1790 #### Windows (GPO)
1791 ```
1792 Software\Policies\Mozilla\Firefox\DisableProfileImport = 0x1 | 0x0
1793 ```
1794 #### Windows (Intune)
1795 OMA-URI:
1796 ```
1797 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableProfileImport
1798 ```
1799 Value (string):
1800 ```
1801 <enabled/> or <disabled/>
1802 ```
1803 #### macOS
1804 ```
1805 <dict>
1806   <key>DisableProfileImport</key>
1807   <true/> | <false/>
1808 </dict>
1809 ```
1810 #### policies.json
1811 ```
1812 {
1813   "policies": {
1814     "DisableProfileImport": true | false
1815   }
1816 }
1817 ```
1818 ### DisableProfileRefresh
1819 Disable the Refresh Firefox button on about:support and support.mozilla.org, as well as the prompt that displays offering to refresh Firefox when you haven't used it in a while.
1820
1821 **Compatibility:** Firefox 60, Firefox ESR 60\
1822 **CCK2 Equivalent:** `disableResetFirefox`\
1823 **Preferences Affected:** `browser.disableResetPrompt`
1824
1825 #### Windows (GPO)
1826 ```
1827 Software\Policies\Mozilla\Firefox\DisableProfileRefresh = 0x1 | 0x0
1828 ```
1829 #### Windows (Intune)
1830 OMA-URI:
1831 ```
1832 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableProfileRefresh
1833 ```
1834 Value (string):
1835 ```
1836 <enabled/> or <disabled/>
1837 ```
1838 #### macOS
1839 ```
1840 <dict>
1841   <key>DisableProfileRefresh</key>
1842   <true/> | <false/>
1843 </dict>
1844 ```
1845 #### policies.json
1846 ```
1847 {
1848   "policies": {
1849     "DisableProfileRefresh": true | false
1850   }
1851 }
1852 ```
1853 ### DisableSafeMode
1854 Disable safe mode within the browser.
1855
1856 On Windows, this disables safe mode via the command line as well.
1857
1858 **Compatibility:** Firefox 60, Firefox ESR 60 (Windows, macOS)\
1859 **CCK2 Equivalent:** `disableSafeMode`\
1860 **Preferences Affected:** N/A
1861
1862 #### Windows (GPO)
1863 ```
1864 Software\Policies\Mozilla\Firefox\DisableSafeMode = 0x1 | 0x0
1865 ```
1866 #### Windows (Intune)
1867 OMA-URI:
1868 ```
1869 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSafeMode
1870 ```
1871 Value (string):
1872 ```
1873 <enabled/> or <disabled/>
1874 ```
1875 #### macOS
1876 ```
1877 <dict>
1878   <key>DisableSafeMode</key>
1879   <true/> | <false/>
1880 </dict>
1881 ```
1882 #### policies.json
1883 ```
1884 {
1885   "policies": {
1886     "DisableSafeMode": true | false
1887   }
1888 }
1889 ```
1890 ### DisableSecurityBypass
1891 Prevent the user from bypassing security in certain cases.
1892
1893 `InvalidCertificate` prevents adding an exception when an invalid certificate is shown.
1894
1895 `SafeBrowsing` prevents selecting "ignore the risk" and visiting a harmful site anyway.
1896
1897 **Compatibility:** Firefox 60, Firefox ESR 60\
1898 **CCK2 Equivalent:** N/A\
1899 **Preferences Affected:** `security.certerror.hideAddException`, `browser.safebrowsing.allowOverride`
1900
1901 #### Windows (GPO)
1902 ```
1903 Software\Policies\Mozilla\Firefox\DisableSecurityBypass\InvalidCertificate = 0x1 | 0x0
1904 Software\Policies\Mozilla\Firefox\DisableSecurityBypass\SafeBrowsing = 0x1 | 0x0
1905 ```
1906 #### Windows (Intune)
1907 OMA-URI:
1908 ```
1909 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/P_DisableSecurityBypass_InvalidCertificate
1910 ```
1911 Value (string):
1912 ```
1913 <enabled/> or <disabled/>
1914 ```
1915 OMA-URI:
1916 ```
1917 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/P_DisableSecurityBypass_SafeBrowsing
1918 ```
1919 Value (string):
1920 ```
1921 <enabled/> or <disabled/>
1922 ```
1923
1924 #### macOS
1925 ```
1926 <dict>
1927   <key>DisableSecurityBypass</key>
1928   <dict>
1929     <key>InvalidCertificate</key>
1930     <true/> | <false/>
1931     <key>SafeBrowsing</key>
1932     <true/> | <false/>
1933   </dict>
1934 </dict>
1935 ```
1936 #### policies.json
1937 ```
1938 {
1939   "policies": {
1940     "DisableSecurityBypass": {
1941       "InvalidCertificate": true | false,
1942       "SafeBrowsing": true | false
1943     }
1944   }
1945 }
1946 ```
1947 ### DisableSetDesktopBackground
1948 Remove the "Set As Desktop Background..." menuitem when right clicking on an image.
1949
1950 **Compatibility:** Firefox 60, Firefox ESR 60\
1951 **CCK2 Equivalent:** `removeSetDesktopBackground`\
1952 **Preferences Affected:** N/A
1953
1954 #### Windows (GPO)
1955 ```
1956 Software\Policies\Mozilla\Firefox\DisableSetDesktopBackground = 0x1 | 0x0
1957 ```
1958 #### Windows (Intune)
1959 OMA-URI:
1960 ```
1961 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSetDesktopBackground
1962 ```
1963 Value (string):
1964 ```
1965 <enabled/> or <disabled/>
1966 ```
1967 #### macOS
1968 ```
1969 <dict>
1970   <key>DisableSetDesktopBackground</key>
1971   <true/> | <false/>
1972 </dict>
1973 ```
1974 #### policies.json
1975 ```
1976 {
1977   "policies": {
1978     "DisableSetDesktopBackground": true | false
1979   }
1980 }
1981 ```
1982 ### DisableSystemAddonUpdate
1983 Prevent system add-ons from being installed or updated.
1984
1985 **Compatibility:** Firefox 60, Firefox ESR 60\
1986 **CCK2 Equivalent:** N/A\
1987 **Preferences Affected:** N/A
1988
1989 #### Windows (GPO)
1990 ```
1991 Software\Policies\Mozilla\Firefox\DisableSystemAddonUpdate = 0x1 | 0x0
1992 ```
1993 #### Windows (Intune)
1994 OMA-URI:
1995 ```
1996 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSystemAddonUpdate
1997 ```
1998 Value (string):
1999 ```
2000 <enabled/> or <disabled/>
2001 ```
2002 #### macOS
2003 ```
2004 <dict>
2005   <key>DisableSystemAddonUpdate</key>
2006   <true/> | <false/>
2007 </dict>
2008 ```
2009 #### policies.json
2010 ```
2011 {
2012   "policies": {
2013     "DisableSystemAddonUpdate": true | false
2014   }
2015 }
2016 ```
2017 ### DisableTelemetry
2018 Prevent the upload of telemetry data.
2019
2020 As of Firefox 83 and Firefox ESR 78.5, local storage of telemetry data is disabled as well.
2021
2022 Mozilla recommends that you do not disable telemetry. Information collected through telemetry helps us build a better product for businesses like yours.
2023
2024 **Compatibility:** Firefox 60, Firefox ESR 60\
2025 **CCK2 Equivalent:** `disableTelemetry`\
2026 **Preferences Affected:** `datareporting.healthreport.uploadEnabled`, `datareporting.policy.dataSubmissionEnabled`, `toolkit.telemetry.archive.enabled`
2027
2028 #### Windows (GPO)
2029 ```
2030 Software\Policies\Mozilla\Firefox\DisableTelemetry = 0x1 | 0x0
2031 ```
2032 #### Windows (Intune)
2033 OMA-URI:
2034 ```
2035 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableTelemetry
2036 ```
2037 Value (string):
2038 ```
2039 <enabled/> or <disabled/>
2040 ```
2041 #### macOS
2042 ```
2043 <dict>
2044   <key>DisableTelemetry</key>
2045   <true/> | <false/>
2046 </dict>
2047 ```
2048 #### policies.json
2049 ```
2050 {
2051   "policies": {
2052     "DisableTelemetry": true | false
2053   }
2054 }
2055 ```
2056 ### DisableThirdPartyModuleBlocking
2057 Do not allow blocking third-party modules from the `about:third-party` page.
2058
2059 This policy only works on Windows through GPO (not policies.json).
2060
2061 **Compatibility:** Firefox 110 (Windows only, GPO only)\
2062 **CCK2 Equivalent:** N/A\
2063 **Preferences Affected:** N/A
2064
2065 #### Windows (GPO)
2066 ```
2067 Software\Policies\Mozilla\Firefox\DisableThirdPartyModuleBlocking = = 0x1 | 0x0
2068 ```
2069 #### Windows (Intune)
2070 OMA-URI:
2071 ```
2072 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableThirdPartyModuleBlocking
2073 ```
2074 Value (string):
2075 ```
2076 <enabled/> or <disabled/>
2077 ```
2078 ### DisplayBookmarksToolbar
2079 Set the initial state of the bookmarks toolbar. A user can still change how it is displayed.
2080
2081 `always` means the bookmarks toolbar is always shown.
2082
2083 `never` means the bookmarks toolbar is not shown.
2084
2085 `newtab` means the bookmarks toolbar is only shown on the new tab page.
2086
2087 **Compatibility:** Firefox 109, Firefox ESR 102.7\
2088 **CCK2 Equivalent:** N/A\
2089 **Preferences Affected:** N/A
2090
2091 #### Windows (GPO)
2092 ```
2093 Software\Policies\Mozilla\Firefox\DisplayBookmarksToolbar = "always", "never", "newtab"
2094 ```
2095 #### Windows (Intune)
2096 OMA-URI:
2097 ```
2098 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisplayBookmarksToolbar_Enum
2099 ```
2100 Value (string):
2101 ```
2102 <enabled/>
2103 <data id="DisplayBookmarksToolbar" value="always | never | newtab"/>
2104 ```
2105 #### macOS
2106 ```
2107 <dict>
2108   <key>DisplayBookmarksToolbar</key>
2109   <string>always | never | newtab</string>
2110 </dict>
2111 ```
2112 #### policies.json
2113 ```
2114 {
2115   "policies": {
2116     "DisplayBookmarksToolbar": "always" | "never" | "newtab"
2117   }
2118 }
2119 ```
2120 ### DisplayBookmarksToolbar (Deprecated)
2121 Set the initial state of the bookmarks toolbar. A user can still hide it and it will stay hidden.
2122
2123 **Compatibility:** Firefox 60, Firefox ESR 60\
2124 **CCK2 Equivalent:** `displayBookmarksToolbar`\
2125 **Preferences Affected:** N/A
2126
2127 #### Windows (GPO)
2128 ```
2129 Software\Policies\Mozilla\Firefox\DisplayBookmarksToolbar = 0x1 | 0x0
2130 ```
2131 #### Windows (Intune)
2132 OMA-URI:
2133 ```
2134 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisplayBookmarksToolbar
2135 ```
2136 Value (string):
2137 ```
2138 <enabled/> or <disabled/>
2139 ```
2140 #### macOS
2141 ```
2142 <dict>
2143   <key>DisplayBookmarksToolbar</key>
2144   <true/> | <false/>
2145 </dict>
2146 ```
2147 #### policies.json
2148 ```
2149 {
2150   "policies": {
2151     "DisplayBookmarksToolbar": true | false
2152   }
2153 }
2154 ```
2155 ### DisplayMenuBar
2156 Set the state of the menubar.
2157
2158 `always` means the menubar is shown and cannot be hidden.
2159
2160 `never` means the menubar is hidden and cannot be shown.
2161
2162 `default-on` means the menubar is on by default but can be hidden.
2163
2164 `default-off` means the menubar is off by default but can be shown.
2165
2166 **Compatibility:** Firefox 73, Firefox ESR 68.5 (Windows, some Linux)\
2167 **CCK2 Equivalent:** `displayMenuBar`\
2168 **Preferences Affected:** N/A
2169
2170 #### Windows (GPO)
2171 ```
2172 Software\Policies\Mozilla\Firefox\DisplayMenuBar = "always", "never", "default-on", "default-off"
2173 ```
2174 #### Windows (Intune)
2175 OMA-URI:
2176 ```
2177 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisplayMenuBar_Enum
2178 ```
2179 Value (string):
2180 ```
2181 <enabled/>
2182 <data id="DisplayMenuBar" value="always | never | default-on | default-off"/>
2183 ```
2184 #### macOS
2185 ```
2186 <dict>
2187   <key>DisplayMenuBar</key>
2188   <string>always | never | default-on | default-off</string>
2189 </dict>
2190 ```
2191 #### policies.json
2192 ```
2193 {
2194   "policies": {
2195     "DisplayMenuBar": "always", "never", "default-on", "default-off"
2196   }
2197 }
2198 ```
2199 ### DisplayMenuBar (Deprecated)
2200 Set the initial state of the menubar. A user can still hide it and it will stay hidden.
2201
2202 **Compatibility:** Firefox 60, Firefox ESR 60 (Windows, some Linux)\
2203 **CCK2 Equivalent:** `displayMenuBar`\
2204 **Preferences Affected:** N/A
2205
2206 #### Windows (GPO)
2207 ```
2208 Software\Policies\Mozilla\Firefox\DisplayMenuBar = 0x1 | 0x0
2209 ```
2210 #### macOS
2211 ```
2212 <dict>
2213   <key>DisplayMenuBar</key>
2214   <true/> | <false/>
2215 </dict>
2216 ```
2217 #### policies.json
2218 ```
2219 {
2220   "policies": {
2221     "DisplayMenuBar": true | false
2222   }
2223 }
2224 ```
2225 ### DNSOverHTTPS
2226 Configure DNS over HTTPS.
2227
2228 `Enabled` determines whether DNS over HTTPS is enabled
2229
2230 `ProviderURL` is a URL to another provider.
2231
2232 `Locked` prevents the user from changing DNS over HTTPS preferences.
2233
2234 `ExcludedDomains` excludes domains from DNS over HTTPS.
2235
2236 **Compatibility:** Firefox 63, Firefox ESR 68 (ExcludedDomains added in 75/68.7)\
2237 **CCK2 Equivalent:** N/A\
2238 **Preferences Affected:** `network.trr.mode`, `network.trr.uri`
2239
2240 #### Windows (GPO)
2241 ```
2242 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\Enabled = 0x1 | 0x0
2243 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\ProviderURL = "URL_TO_ALTERNATE_PROVIDER"
2244 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\Locked = 0x1 | 0x0
2245 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\ExcludedDomains\1 = "example.com"
2246 ```
2247 #### Windows (Intune)
2248 OMA-URI:
2249 ```
2250 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_Enabled
2251 ```
2252 Value (string):
2253 ```
2254 <enabled/> or <disabled/>
2255 ```
2256 OMA-URI:
2257 ```
2258 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_ProviderURL
2259 ```
2260 Value (string):
2261 ```
2262 <enabled/>
2263 <data id="String" value="URL_TO_ALTERNATE_PROVIDER"/>
2264 ```
2265 OMA-URI:
2266 ```
2267 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_Locked
2268 ```
2269 Value (string):
2270 ```
2271 <enabled/> or <disabled/>
2272 ```
2273 OMA-URI:
2274 ```
2275 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_ExcludedDomains
2276 ```
2277 Value (string):
2278 ```
2279 <enabled/>
2280 <data id="List" value="1&#xF000;example.com"/>
2281 ```
2282 #### macOS
2283 ```
2284 <dict>
2285   <key>DNSOverHTTPS</key>
2286   <dict>
2287     <key>Enabled</key>
2288     <true/> | <false/>
2289     <key>ProviderURL</key>
2290     <string>URL_TO_ALTERNATE_PROVIDER</string>
2291     <key>Locked</key>
2292     <true/> | <false/>
2293     <key>ExcludedDomains</key>
2294     <array>
2295       <string>example.com</string>
2296     </array>
2297   </dict>
2298 </dict>
2299 ```
2300 #### policies.json
2301 ```
2302 {
2303   "policies": {
2304     "DNSOverHTTPS": {
2305       "Enabled":  true | false,
2306       "ProviderURL": "URL_TO_ALTERNATE_PROVIDER",
2307       "Locked": true | false,
2308       "ExcludedDomains": ["example.com"]
2309     }
2310   }
2311 }
2312 ```
2313 ### DontCheckDefaultBrowser
2314 Don't check if Firefox is the default browser at startup.
2315
2316 **Compatibility:** Firefox 60, Firefox ESR 60\
2317 **CCK2 Equivalent:** `dontCheckDefaultBrowser`\
2318 **Preferences Affected:** `browser.shell.checkDefaultBrowser`
2319
2320 #### Windows (GPO)
2321 ```
2322 Software\Policies\Mozilla\Firefox\DontCheckDefaultBrowser = 0x1 | 0x0
2323 ```
2324 #### Windows (Intune)
2325 OMA-URI:
2326 ```
2327 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DontCheckDefaultBrowser
2328 ```
2329 Value (string):
2330 ```
2331 <enabled/> or <disabled/>
2332 ```
2333 #### macOS
2334 ```
2335 <dict>
2336   <key>DontCheckDefaultBrowser</key>
2337   <true/> | <false/>
2338 </dict>
2339 ```
2340 #### policies.json
2341 ```
2342 {
2343   "policies": {
2344     "DontCheckDefaultBrowser": true | false
2345   }
2346 }
2347 ```
2348 ### DownloadDirectory
2349 Set and lock the download directory.
2350
2351 You can use ${home} for the native home directory.
2352
2353 **Compatibility:** Firefox 68, Firefox ESR 68\
2354 **CCK2 Equivalent:** N/A\
2355 **Preferences Affected:** `browser.download.dir`, `browser.download.folderList`, `browser.download.useDownloadDir`
2356
2357 #### Windows (GPO)
2358 ```
2359 Software\Policies\Mozilla\Firefox\DownloadDirectory = "${home}\Downloads"
2360 ```
2361 #### Windows (Intune)
2362 OMA-URI:
2363 ```
2364 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DownloadDirectory
2365 ```
2366 Value (string):
2367 ```
2368 <enabled/>
2369 <data id="Preferences_String" value="${home}\Downloads"/>
2370 ```
2371 #### macOS
2372 ```
2373 <dict>
2374   <key>DownloadDirectory</key>
2375   <string>${home}/Downloads</string>
2376 </dict>
2377 ```
2378 #### policies.json (macOS and Linux)
2379 ```
2380 {
2381   "policies": {
2382     "DownloadDirectory": "${home}/Downloads"
2383 }
2384 ```
2385 #### policies.json (Windows)
2386 ```
2387 {
2388   "policies": {
2389     "DownloadDirectory": "${home}\\Downloads"
2390 }
2391 ```
2392 ### EnableTrackingProtection
2393 Configure tracking protection.
2394
2395 If this policy is not configured, tracking protection is not enabled by default in the browser, but it is enabled by default in private browsing and the user can change it.
2396
2397 If `Value` is set to false, tracking protection is disabled and locked in both the regular browser and private browsing.
2398
2399 If `Value` is set to true, tracking protection is enabled by default in both the regular browser and private browsing and the `Locked` value determines whether or not a user can change it.
2400
2401 If `Cryptomining` is set to true, cryptomining scripts on websites are blocked.
2402
2403 If `Fingerprinting` is set to true, fingerprinting scripts on websites are blocked.
2404
2405 `Exceptions` are origins for which tracking protection is not enabled.
2406
2407 **Compatibility:** Firefox 60, Firefox ESR 60 (Cryptomining and Fingerprinting added in 70/68.2, Exceptions added in 73/68.5)\
2408 **CCK2 Equivalent:** N/A\
2409 **Preferences Affected:** `privacy.trackingprotection.enabled`, `privacy.trackingprotection.pbmode.enabled`, `privacy.trackingprotection.cryptomining.enabled`, `privacy.trackingprotection.fingerprinting.enabled`
2410
2411 #### Windows (GPO)
2412 ```
2413 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Value = 0x1 | 0x0
2414 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Locked = 0x1 | 0x0
2415 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Cryptomining = 0x1 | 0x0
2416 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Fingerprinting = 0x1 | 0x0
2417 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Exceptions\1 = "https://example.com"
2418 ```
2419 #### Windows (Intune)
2420 OMA-URI:
2421 ```
2422 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/A_TrackingProtection_Value
2423 ```
2424 Value (string):
2425 ```
2426 <enabled/> or <disabled/>
2427 ```
2428 OMA-URI:
2429 ```
2430 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/B_TrackingProtection_Cryptomining
2431 ```
2432 Value (string):
2433 ```
2434 <enabled/> or <disabled/>
2435 ```
2436 OMA-URI:
2437 ```
2438 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/C_TrackingProtection_Fingerprinting
2439 ```
2440 Value (string):
2441 ```
2442 <enabled/> or <disabled/>
2443 ```
2444 OMA-URI:
2445 ```
2446 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/D_TrackingProtection_Exceptions
2447 ```
2448 Value (string):
2449 ```
2450 <enabled/>
2451 <data id="TrackingProtection_Exceptions" value="1&#xF000;https://example.com"/>
2452 ```
2453 OMA-URI:
2454 ```
2455 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/E_TrackingProtection_Locked
2456 ```
2457 Value (string):
2458 ```
2459 <enabled/> or <disabled/>
2460 ```
2461 #### macOS
2462 ```
2463 <dict>
2464   <key>EnableTrackingProtection</key>
2465   <dict>
2466     <key>Value</key>
2467     <true/> | <false/>
2468     <key>Locked</key>
2469     <true/> | <false/>
2470     <key>Cryptomining</key>
2471     <true/> | <false/>
2472     <key>Fingerprinting</key>
2473     <true/> | <false/>
2474     <key>Exceptions</key>
2475     <array>
2476       <string>https://example.com</string>
2477     </array>
2478   </dict>
2479 </dict>
2480 ```
2481 #### policies.json
2482 ```
2483 {
2484   "policies": {
2485     "EnableTrackingProtection": {
2486       "Value": true | false,
2487       "Locked": true | false,
2488       "Cryptomining": true | false,
2489       "Fingerprinting": true | false,
2490       "Exceptions": ["https://example.com"]
2491     }
2492   }
2493 }
2494 ```
2495 ### EncryptedMediaExtensions
2496 Enable or disable Encrypted Media Extensions and optionally lock it.
2497
2498 If `Enabled` is set to false, encrypted media extensions (like Widevine) are not downloaded by Firefox unless the user consents to installing them.
2499
2500 If `Locked` is set to true and `Enabled` is set to false, Firefox will not download encrypted media extensions (like Widevine) or ask the user to install them.
2501
2502 **Compatibility:** Firefox 77, Firefox ESR 68.9\
2503 **CCK2 Equivalent:** N/A\
2504 **Preferences Affected:** `media.eme.enabled`
2505
2506 #### Windows (GPO)
2507 ```
2508 Software\Policies\Mozilla\Firefox\EncryptedMediaExtensions\Enabled = 0x1 | 0x0
2509 Software\Policies\Mozilla\Firefox\EncryptedMediaExtensions\Locked = 0x1 | 0x0
2510 ```
2511 #### Windows (Intune)
2512 OMA-URI:
2513 ```
2514 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~EncryptedMediaExtensions/EncryptedMediaExtensions_Enabled
2515 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~EncryptedMediaExtensions/EncryptedMediaExtensions_Locked
2516 ```
2517 Value (string):
2518 ```
2519 <enabled/>or <disabled/>
2520 ```
2521 #### macOS
2522 ```
2523 <dict>
2524   <key>EncryptedMediaExtensions</key>
2525   <dict>
2526     <key>Enabled</key>
2527     <true/> | <false/>
2528     <key>Locked</key>
2529     <true/> | <false/>
2530   </dict>
2531 </dict>
2532 ```
2533 #### policies.json
2534 ```
2535 {
2536   "policies": {
2537     "EncryptedMediaExtensions": {
2538       "Enabled": true | false,
2539       "Locked": true | false
2540     }
2541   }
2542 }
2543 ```
2544 ### EnterprisePoliciesEnabled
2545 Enable policy support on macOS.
2546
2547 **Compatibility:** Firefox 63, Firefox ESR 60.3 (macOS only)\
2548 **CCK2 Equivalent:** N/A\
2549 **Preferences Affected:** N/A
2550
2551 #### macOS
2552 ```
2553 <dict>
2554   <key>EnterprisePoliciesEnabled</key>
2555   <true/>
2556 </dict>
2557 ```
2558 ### ExemptDomainFileTypePairsFromFileTypeDownloadWarnings
2559
2560 Disable warnings based on file extension for specific file types on domains.
2561
2562 This policy is based on the [Chrome policy](https://chromeenterprise.google/policies/#ExemptDomainFileTypePairsFromFileTypeDownloadWarnings) of the same name.
2563
2564 Important: The documentation for the policy for both Edge and Chrome is incorrect. The ```domains``` value must be a domain, not a URL pattern. Also, we do not support using ```*``` to mean all domains.
2565
2566 **Compatibility:** Firefox 102\
2567 **CCK2 Equivalent:** N/A\
2568 **Preferences Affected:** N/A
2569
2570 #### Windows (GPO)
2571 Software\Policies\Mozilla\Firefox\ExemptDomainFileTypePairsFromFileTypeDownloadWarnings (REG_MULTI_SZ) =
2572 ```
2573 [
2574   {
2575      "file_extension": "jnlp",
2576      "domains": ["example.com"]
2577   }
2578 ]
2579 ```
2580 #### Windows (Intune)
2581 OMA-URI:
2582 ```
2583 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/ExemptDomainFileTypePairsFromFileTypeDownloadWarnings
2584 ```
2585 Value (string):
2586 ```
2587 <enabled/>
2588 <data id="JSON" value='
2589 [
2590   {
2591      "file_extension": "jnlp",
2592      "domains": ["example.com"]
2593   }
2594 ]
2595 '/>
2596 ```
2597 #### macOS
2598 ```
2599 <dict>
2600   <key>ExemptDomainFileTypePairsFromFileTypeDownloadWarnings</key>
2601   <array>
2602     <dict>
2603       <key>file_extension</key>
2604       <string>jnlp</string>
2605       <key>domains</key>
2606       <array>
2607         <string>example.com</string>
2608       </array>
2609     </dict>
2610   </array>
2611 </dict>
2612 ```
2613 #### policies.json
2614 ```
2615 {
2616   "policies": {
2617     "ExemptDomainFileTypePairsFromFileTypeDownloadWarnings": [{
2618       "file_extension": "jnlp",
2619       "domains": ["example.com"]
2620     }]
2621   }
2622 }
2623 ```
2624 ### Extensions
2625 Control the installation, uninstallation and locking of extensions.
2626
2627 While this policy is not technically deprecated, it is recommended that you use the **[`ExtensionSettings`](#extensionsettings)** policy. It has the same functionality and adds more. It does not support native paths, though, so you'll have to use file:/// URLs.
2628
2629 `Install` is a list of URLs or native paths for extensions to be installed.
2630
2631 `Uninstall` is a list of extension IDs that should be uninstalled if found.
2632
2633 `Locked` is a list of extension IDs that the user cannot disable or uninstall.
2634
2635 **Compatibility:** Firefox 60, Firefox ESR 60\
2636 **CCK2 Equivalent:** `addons`\
2637 **Preferences Affected:** N/A
2638
2639 #### Windows (GPO)
2640 ```
2641 Software\Policies\Mozilla\Firefox\Extensions\Install\1 = "https://addons.mozilla.org/firefox/downloads/somefile.xpi"
2642 Software\Policies\Mozilla\Firefox\Extensions\Install\2 = "//path/to/xpi"
2643 Software\Policies\Mozilla\Firefox\Extensions\Uninstall\1 = "bad_addon_id@mozilla.org"
2644 Software\Policies\Mozilla\Firefox\Extensions\Locked\1 = "addon_id@mozilla.org"
2645 ```
2646 #### Windows (Intune)
2647 OMA-URI:
2648 ```
2649 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/Extensions_Install
2650 ```
2651 Value (string):
2652 ```
2653 <enabled/>
2654 <data id="Extensions" value="1&#xF000;https://addons.mozilla.org/firefox/downloads/somefile.xpi&#xF000;2&#xF000;//path/to/xpi"/>
2655 ```
2656 OMA-URI:
2657 ```
2658 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/Extensions_Uninstall
2659 ```
2660 Value (string):
2661 ```
2662 <enabled/>
2663 <data id="Extensions" value="1&#xF000;bad_addon_id@mozilla.org"/>
2664 ```
2665 OMA-URI:
2666 ```
2667 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/Extensions_Locked
2668 ```
2669 Value (string):
2670 ```
2671 <enabled/>
2672 <data id="Extensions" value="1&#xF000;addon_id@mozilla.org"/>
2673 ```
2674 #### macOS
2675 ```
2676 <dict>
2677   <key>Extensions</key>
2678   <dict>
2679     <key>Install</key>
2680     <array>
2681       <string>https://addons.mozilla.org/firefox/downloads/somefile.xpi</string>
2682       <string>//path/to/xpi</string>
2683     </array>
2684     <key>Uninstall</key>
2685     <array>
2686       <string>bad_addon_id@mozilla.org</string>
2687     </array>
2688     <key>Locked</key>
2689     <array>
2690       <string>addon_id@mozilla.org</string>
2691     </array>
2692   </dict>
2693 </dict>
2694 ```
2695 #### policies.json
2696 ```
2697 {
2698   "policies": {
2699     "Extensions": {
2700       "Install": ["https://addons.mozilla.org/firefox/downloads/somefile.xpi", "//path/to/xpi"],
2701       "Uninstall": ["bad_addon_id@mozilla.org"],
2702       "Locked":  ["addon_id@mozilla.org"]
2703     }
2704   }
2705 }
2706 ```
2707 ### ExtensionSettings
2708 Manage all aspects of extensions. This policy is based heavily on the [Chrome policy](https://dev.chromium.org/administrators/policy-list-3/extension-settings-full) of the same name.
2709
2710 This policy maps an extension ID to its configuration. With an extension ID, the configuration will be applied to the specified extension only. A default configuration can be set for the special ID "*", which will apply to all extensions that don't have a custom configuration set in this policy.
2711
2712 To obtain an extension ID, install the extension and go to about:support. You will see the ID in the Extensions section. I've also created an extension that makes it easy to find the ID of extensions on AMO. You can download it [here](https://github.com/mkaply/queryamoid/releases/tag/v0.1).
2713
2714 The configuration for each extension is another dictionary that can contain the fields documented below.
2715
2716 | Name | Description |
2717 | --- | --- |
2718 | `installation_mode` | Maps to a string indicating the installation mode for the extension. The valid strings are `allowed`,`blocked`,`force_installed`, and `normal_installed`.
2719 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`allowed` | Allows the extension to be installed by the user. This is the default behavior. There is no need for an install_url; it will automatically be allowed based on the ID.
2720 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`blocked`| Blocks installation of the extension and removes it from the device if already installed.
2721 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`force_installed`| The extension is automatically installed and can't be removed by the user. This option is not valid for the default configuration and requires an install_url.
2722 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`normal_installed`| The extension is automatically installed but can be disabled by the user. This option is not valid for the default configuration and requires an install_url.
2723 | `install_url`| Maps to a URL indicating where Firefox can download a force_installed or normal_installed extension.  If installing from the local file system, use a [```file:///``` URL](https://en.wikipedia.org/wiki/File_URI_scheme). If installing from the addons.mozilla.org, use the following URL (substituting SHORT_NAME from the URL on AMO), https://addons.mozilla.org/firefox/downloads/latest/SHORT_NAME/latest.xpi. Languages packs are available from https://releases.mozilla.org/pub/firefox/releases/VERSION/PLATFORM/xpi/LANGUAGE.xpi. If you need to update the extension, you can change the name of the extension and it will be automatically updated. Extensions installed from file URLs will additional be updated when their internal version changes.
2724 | `install_sources` | A list of sources from which installing extensions is allowed using URL match patterns. **This is unnecessary if you are only allowing the installation of certain extensions by ID.** Each item in this list is an extension-style match pattern. Users will be able to easily install items from any URL that matches an item in this list. Both the location of the *.xpi file and the page where the download is started from (i.e.  the referrer) must be allowed by these patterns. This setting can be used only for the default configuration.
2725 | `allowed_types` | This setting whitelists the allowed types of extension/apps that can be installed in Firefox. The value is a list of strings, each of which should be one of the following: "extension", "theme", "dictionary", "locale" This setting can be used only for the default configuration.
2726 | `blocked_install_message` | This maps to a string specifying the error message to display to users if they're blocked from installing an extension. This setting allows you to append text to the generic error message displayed when the extension is blocked. This could be be used to direct users to your help desk, explain why a particular extension is blocked, or something else. This setting can be used only for the default configuration.
2727 | `restricted_domains` | An array of domains on which content scripts can't be run. This setting can be used only for the default configuration.
2728 | `updates_disabled` | (Firefox 89, Firefox ESR 78.11) Boolean that indicates whether or not to disable automatic updates for an individual extension.
2729
2730 **Compatibility:** Firefox 69, Firefox ESR 68.1 (As of Firefox 85, Firefox ESR 78.7, installing a theme makes it the default.)\
2731 **CCK2 Equivalent:** N/A\
2732 **Preferences Affected:** N/A
2733
2734 #### Windows (GPO)
2735 Software\Policies\Mozilla\Firefox\ExtensionSettings (REG_MULTI_SZ) =
2736 ```
2737 {
2738   "*": {
2739     "blocked_install_message": "Custom error message.",
2740     "install_sources": ["https://yourwebsite.com/*"],
2741     "installation_mode": "blocked",
2742     "allowed_types": ["extension"]
2743   },
2744   "uBlock0@raymondhill.net": {
2745     "installation_mode": "force_installed",
2746     "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
2747   },
2748   "https-everywhere@eff.org": {
2749     "installation_mode": "allowed"
2750   }
2751 }
2752 ```
2753 #### Windows (Intune)
2754 OMA-URI:
2755 ```
2756 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/ExtensionSettings
2757 ```
2758 Value (string):
2759 ```
2760 <enabled/>
2761 <data id="ExtensionSettings" value='
2762 {
2763   "*": {
2764     "blocked_install_message": "Custom error message.",
2765     "install_sources": ["https://yourwebsite.com/*"],
2766     "installation_mode": "blocked",
2767     "allowed_types": ["extension"]
2768   },
2769   "uBlock0@raymondhill.net": {
2770     "installation_mode": "force_installed",
2771     "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
2772   },
2773     "https-everywhere@eff.org": {
2774     "installation_mode": "allowed"
2775   }
2776 }'/>
2777 ```
2778 #### macOS
2779 ```
2780 <dict>
2781   <key>ExtensionSettings</key>
2782   <dict>
2783     <key>*</key>
2784     <dict>
2785       <key>blocked_install_message</key>
2786       <string>Custom error message.</string>
2787       <key>install_sources</key>
2788       <array>
2789         <string>"https://yourwebsite.com/*"</string>
2790       </array>
2791       <key>installation_mode</key>
2792       <string>blocked</string>
2793       <key>allowed_types</key>
2794       <array>
2795         <string>extension</string>
2796       </array>
2797     </dict>
2798     <key>uBlock0@raymondhill.net</key>
2799     <dict>
2800       <key>installation_mode</key>
2801        <string>force_installed</string>
2802       <key>install_url</key>
2803       <string>https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi</string>
2804     </dict>
2805     <key>https-everywhere@eff.org</key>
2806     <dict>
2807       <key>installation_mode</key>
2808        <string>allowed</string>
2809     </dict>
2810   </dict>
2811 </dict>
2812 ```
2813 #### policies.json
2814 ```
2815 {
2816   "policies": {
2817     "ExtensionSettings": {
2818       "*": {
2819         "blocked_install_message": "Custom error message.",
2820         "install_sources": ["https://yourwebsite.com/*"],
2821         "installation_mode": "blocked",
2822         "allowed_types": ["extension"]
2823       },
2824       "uBlock0@raymondhill.net": {
2825         "installation_mode": "force_installed",
2826         "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
2827       },
2828       "https-everywhere@eff.org": {
2829         "installation_mode": "allowed"
2830       }
2831     }
2832   }
2833 }
2834 ```
2835 ### ExtensionUpdate
2836 Control extension updates.
2837
2838 **Compatibility:** Firefox 67, Firefox ESR 60.7\
2839 **CCK2 Equivalent:** N/A\
2840 **Preferences Affected:** `extensions.update.enabled`
2841
2842 #### Windows (GPO)
2843 ```
2844 Software\Policies\Mozilla\Firefox\ExtensionUpdate = 0x1 | 0x0
2845 ```
2846 #### Windows (Intune)
2847 OMA-URI:
2848 ```
2849 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/ExtensionUpdate
2850 ```
2851 Value (string):
2852 ```
2853 <enabled/> or <disabled/>
2854 ```
2855 #### macOS
2856 ```
2857 <dict>
2858   <key>ExtensionUpdate</key>
2859   <true/> | <false/>
2860 </dict>
2861 ```
2862 #### policies.json
2863 ```
2864 {
2865   "policies": {
2866     "ExtensionUpdate": true | false
2867   }
2868 }
2869 ```
2870 ### FirefoxHome
2871 Customize the Firefox Home page.
2872
2873 **Compatibility:** Firefox 68, Firefox ESR 68 (SponsoredTopSites and SponsoredPocket were added in Firefox 95, Firefox ESR 91.4)
2874 **CCK2 Equivalent:** N/A\
2875 **Preferences Affected:** `browser.newtabpage.activity-stream.showSearch`, `browser.newtabpage.activity-stream.feeds.topsites`, `browser.newtabpage.activity-stream.feeds.section.highlights`, `browser.newtabpage.activity-stream.feeds.section.topstories`, `browser.newtabpage.activity-stream.feeds.snippets`, `browser.newtabpage.activity-stream.showSponsoredTopSites`, `browser.newtabpage.activity-stream.showSponsored`
2876
2877 #### Windows (GPO)
2878 ```
2879 Software\Policies\Mozilla\Firefox\FirefoxHome\Search = 0x1 | 0x0
2880 Software\Policies\Mozilla\Firefox\FirefoxHome\TopSites = 0x1 | 0x0
2881 Software\Policies\Mozilla\Firefox\FirefoxHome\SponsoredTopSites = 0x1 | 0x0
2882 Software\Policies\Mozilla\Firefox\FirefoxHome\Highlights = 0x1 | 0x0
2883 Software\Policies\Mozilla\Firefox\FirefoxHome\Pocket = 0x1 | 0x0
2884 Software\Policies\Mozilla\Firefox\FirefoxHome\SponsoredPocket = 0x1 | 0x0
2885 Software\Policies\Mozilla\Firefox\FirefoxHome\Snippets = 0x1 | 0x0
2886 Software\Policies\Mozilla\Firefox\FirefoxHome\Locked = 0x1 | 0x0
2887 ```
2888 #### Windows (Intune)
2889 OMA-URI:
2890 ```
2891 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/CustomizeFirefoxHome
2892 ```
2893 Value (string):
2894 ```
2895 <enabled/>
2896 <data id="FirefoxHome_Search"  value="true | false"/>
2897 <data id="FirefoxHome_TopSites"  value="true | false"/>
2898 <data id="FirefoxHome_SponsoredTopSites"  value="true | false"/>
2899 <data id="FirefoxHome_Highlights"  value="true | false"/>
2900 <data id="FirefoxHome_Pocket"  value="true | false"/>
2901 <data id="FirefoxHome_SponsoredPocket"  value="true | false"/>
2902 <data id="FirefoxHome_Snippets"  value="true | false"/>
2903 <data id="FirefoxHome_Locked"  value="true | false"/>
2904 ```
2905 #### macOS
2906 ```
2907 <dict>
2908   <key>FirefoxHome</key>
2909   <dict>
2910     <key>Search</key>
2911     <true/> | <false/>
2912     <key>TopSites</key>
2913     <true/> | <false/>
2914     <key>SponsoredTopSites</key>
2915     <true/> | <false/>
2916     <key>Highlights</key>
2917     <true/> | <false/>
2918     <key>Pocket</key>
2919     <true/> | <false/>
2920     <key>SponsoredPocket</key>
2921     <true/> | <false/>
2922     <key>Snippets</key>
2923     <true/> | <false/>
2924     <key>Locked</key>
2925     <true/> | <false/>
2926   </dict>
2927 </dict>
2928 ```
2929 #### policies.json
2930 ```
2931 {
2932   "policies": {
2933     "FirefoxHome": {
2934       "Search": true | false,
2935       "TopSites": true | false,
2936       "SponsoredTopSites": true | false,
2937       "Highlights": true | false,
2938       "Pocket": true | false,
2939       "SponsoredPocket": true | false,
2940       "Snippets": true | false,
2941       "Locked": true | false
2942     }
2943   }
2944 }
2945 ```
2946 ### FlashPlugin (Deprecated)
2947 Configure the default Flash plugin policy as well as origins for which Flash is allowed.
2948
2949 `Allow` is a list of origins where Flash are allowed.
2950
2951 `Block` is a list of origins where Flash is not allowed.
2952
2953 `Default` determines whether or not Flash is allowed by default.
2954
2955 `Locked` prevents the user from changing Flash preferences.
2956
2957 **Compatibility:** Firefox 60, Firefox ESR 60\
2958 **CCK2 Equivalent:** `permissions.plugin`\
2959 **Preferences Affected:** `plugin.state.flash`
2960
2961 #### Windows (GPO)
2962 ```
2963 Software\Policies\Mozilla\Firefox\FlashPlugin\Allow\1 = "https://example.org"
2964 Software\Policies\Mozilla\Firefox\FlashPlugin\Block\1 = "https://example.edu"
2965 Software\Policies\Mozilla\Firefox\FlashPlugin\Default = 0x1 | 0x0
2966 Software\Policies\Mozilla\Firefox\FlashPlugin\Locked = 0x1 | 0x0
2967 ```
2968 #### Windows (Intune)
2969 OMA-URI:
2970 ```
2971 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Flash/FlashPlugin_Allow
2972 ```
2973 Value (string):
2974 ```
2975 <enabled/>
2976 <data id="Permissions" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
2977 ```
2978 OMA-URI:
2979 ```
2980 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Flash/FlashPlugin_Locked
2981 ```
2982 Value (string):
2983 ```
2984 <enabled/> or <disabled/>
2985 ```
2986 OMA-URI:
2987 ```
2988 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Flash/FlashPlugin_Default
2989 ```
2990 Value (string):
2991 ```
2992 <enabled/> or <disabled/>
2993 ```
2994 #### macOS
2995 ```
2996 <dict>
2997   <key>FlashPlugin</key>
2998   <dict>
2999     <key>Allow</key>
3000     <array>
3001       <string>http://example.org</string>
3002     </array>
3003     <key>Block</key>
3004     <array>
3005       <string>http://example.edu</string>
3006     </array>
3007     <key>Default</key>
3008     <true/> | <false/>
3009     <key>Locked</key>
3010     <true/> | <false/>
3011   </dict>
3012 </dict>
3013 ```
3014 #### policies.json
3015 ```
3016 {
3017   "policies": {
3018     "FlashPlugin": {
3019       "Allow": ["http://example.org/"],
3020       "Block": ["http://example.edu/"],
3021       "Default": true | false,
3022       "Locked": true | false
3023     }
3024   }
3025 }
3026 ```
3027 ### GoToIntranetSiteForSingleWordEntryInAddressBar
3028 Whether to always go through the DNS server before sending a single word search string to a search engine.
3029
3030 If the site exists, it will navigate to the website. If the intranet responds with a 404, the page will show a 404. If the intranet does not respond, the browser will attempt a search.
3031
3032 The second result in the URL bar will be a search result to allow users to conduct a web search exactly as it was entered.
3033
3034 If instead you would like to enable the ability to have your domain appear as a valid URL and to disallow the browser from ever searching that term using the first result that matches it, add the pref `browser.fixup.domainwhitelist.YOUR_DOMAIN` (where `YOUR_DOMAIN` is the name of the domain you'd like to add), and set the pref to `true`. The URL bar will then suggest `YOUR_DOMAIN` when the user fully types `YOUR_DOMAIN`. If the user attempts to load that domain and it fails to load, it will show an "Unable to connect" error page.
3035
3036 You can also whitelist a domain suffix that is not part of the [Public Suffix List](https://publicsuffix.org/) by adding the pref `browser.fixup.domainsuffixwhitelist.YOUR_DOMAIN_SUFFIX` with a value of `true`.
3037
3038 Additionally, if you want users to see a "Did you mean to go to 'YOUR_DOMAIN'" prompt below the URL bar if they land on a search results page instead of an intranet domain that provides a response, set the pref `browser.urlbar.dnsResolveSingleWordsAfterSearch` to `1`. Enabling this will cause the browser to commit a DNS check after every single word search. If the browser receives a response from the intranet, a prompt will ask the user if they'd like to instead navigate to `YOUR_DOMAIN`. If the user presses the **yes** button, `browser.fixup.domainwhitelist.YOUR_DOMAIN` will be set to `true`.
3039
3040 **Compatibility:** Firefox 104, Firefox ESR 102.2\
3041 **CCK2 Equivalent:** `N/A`\
3042 **Preferences Affected:** `browser.fixup.dns_first_for_single_words`
3043
3044 #### Windows (GPO)
3045 ```
3046 Software\Policies\Mozilla\Firefox\GoToIntranetSiteForSingleWordEntryInAddressBar = 0x1 | 0x0
3047 ```
3048 #### Windows (Intune)
3049 OMA-URI:
3050 ```
3051 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/GoToIntranetSiteForSingleWordEntryInAddressBar
3052 ```
3053 Value (string):
3054 ```
3055 <enabled/> or <disabled/>
3056 ```
3057 #### macOS
3058 ```
3059 <dict>
3060   <key>GoToIntranetSiteForSingleWordEntryInAddressBar</key>
3061   <true/> | <false/>
3062 </dict>
3063 ```
3064 #### policies.json
3065 ```
3066 {
3067   "policies": {
3068     "GoToIntranetSiteForSingleWordEntryInAddressBar": true | false
3069   }
3070 }
3071 ```
3072 ### Handlers
3073 Configure default application handlers. This policy is based on the internal format of `handlers.json`.
3074
3075 You can configure handlers based on a mime type (`mimeTypes`), a file's extension (`extensions`), or a protocol (`schemes`).
3076
3077 Within each handler type, you specify the given mimeType/extension/scheme as a key and use the following subkeys to describe how it is handled.
3078
3079 | Name | Description |
3080 | --- | --- |
3081 | `action`| Can be either `saveToDisk`, `useHelperApp`, `useSystemDefault`.
3082 | `ask` | If `true`, the user is asked if what they want to do with the file. If `false`, the action is taken without user intervention.
3083 | `handlers` | An array of handlers with the first one being the default. If you don't want to have a default handler, use an empty object for the first handler. Choose between path or uriTemplate.
3084 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`name` | The display name of the handler (might not be used).
3085 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`path`| The native path to the executable to be used.
3086 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`uriTemplate`| A url to a web based application handler. The URL must be https and contain a %s to be used for substitution.
3087
3088 **Compatibility:** Firefox 78, Firefox ESR 78\
3089 **CCK2 Equivalent:** N/A\
3090 **Preferences Affected:** N/A
3091
3092 #### Windows (GPO)
3093 Software\Policies\Mozilla\Firefox\Handlers (REG_MULTI_SZ) =
3094 ```
3095 {
3096   "mimeTypes": {
3097     "application/msword": {
3098       "action": "useSystemDefault",
3099       "ask": true | false
3100     }
3101   },
3102   "schemes": {
3103     "mailto": {
3104       "action": "useHelperApp",
3105       "ask": true | false,
3106       "handlers": [{
3107         "name": "Gmail",
3108         "uriTemplate": "https://mail.google.com/mail/?extsrc=mailto&url=%s"
3109       }]
3110     }
3111   },
3112   "extensions": {
3113     "pdf": {
3114       "action": "useHelperApp",
3115       "ask": true | false,
3116       "handlers": [{
3117         "name": "Adobe Acrobat",
3118         "path": "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32.exe"
3119       }]
3120     }
3121   }
3122 }
3123 ```
3124 #### Windows (Intune)
3125 OMA-URI:
3126 ```
3127 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Handlers
3128 ```
3129 Value (string):
3130 ```
3131 <enabled/>
3132 <data id="Handlers" value='
3133 {
3134   "mimeTypes": {
3135     "application/msword": {
3136       "action": "useSystemDefault",
3137       "ask": true | false
3138     }
3139   },
3140   "schemes": {
3141     "mailto": {
3142       "action": "useHelperApp",
3143       "ask": true | false,
3144       "handlers": [{
3145         "name": "Gmail",
3146         "uriTemplate": "https://mail.google.com/mail/?extsrc=mailto&amp;url=%s"
3147       }]
3148     }
3149   },
3150   "extensions": {
3151     "pdf": {
3152       "action": "useHelperApp",
3153       "ask": true | false,
3154       "handlers": [{
3155         "name": "Adobe Acrobat",
3156         "path": "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32.exe"
3157       }]
3158     }
3159   }
3160 }
3161 '/>
3162 ```
3163 #### macOS
3164 ```
3165 <dict>
3166   <key>Handlers</key>
3167   <dict>
3168     <key>mimeTypes</key>
3169     <dict>
3170       <key>application/msword</key>
3171       <dict>
3172         <key>action</key>
3173         <string>useSystemDefault</string>
3174         <key>ask</key>
3175         <true/> | <false/>
3176       </dict>
3177     </dict>
3178     <key>schemes</key>
3179     <dict>
3180       <key>mailto</key>
3181       <dict>
3182         <key>action</key>
3183         <string>useHelperApp</string>
3184         <key>ask</key>
3185         <true/> | <false/>
3186         <key>handlers</key>
3187         <array>
3188           <dict>
3189             <key>name</key>
3190             <string>Gmail</string>
3191             <key>uriTemplate</key>
3192             <string>https://mail.google.com/mail/?extsrc=mailto&url=%s</string>
3193           </dict>
3194         </array>
3195       </dict>
3196     </dict>
3197     <key>extensions</key>
3198     <dict>
3199       <key>pdf</key>
3200       <dict>
3201         <key>action</key>
3202         <string>useHelperApp</string>
3203         <key>ask</key>
3204         <true/> | <false/>
3205         <key>handlers</key>
3206         <array>
3207           <dict>
3208             <key>name</key>
3209             <string>Adobe Acrobat</string>
3210             <key>path</key>
3211             <string>/System/Applications/Preview.app</string>
3212           </dict>
3213         </array>
3214       </dict>
3215     </dict>
3216   </dict>
3217 </dict>
3218 ```
3219 #### policies.json
3220 ```
3221 {
3222   "policies": {
3223     "Handlers": {
3224       "mimeTypes": {
3225         "application/msword": {
3226           "action": "useSystemDefault",
3227           "ask": false
3228         }
3229       },
3230       "schemes": {
3231         "mailto": {
3232           "action": "useHelperApp",
3233           "ask": true | false,
3234           "handlers": [{
3235             "name": "Gmail",
3236             "uriTemplate": "https://mail.google.com/mail/?extsrc=mailto&url=%s"
3237           }]
3238         }
3239       },
3240       "extensions": {
3241         "pdf": {
3242           "action": "useHelperApp",
3243           "ask": true | false,
3244           "handlers": [{
3245             "name": "Adobe Acrobat",
3246             "path": "/usr/bin/acroread"
3247           }]
3248         }
3249       }
3250     }
3251   }
3252 }
3253 ```
3254 ### HardwareAcceleration
3255 Control hardware acceleration.
3256
3257 **Compatibility:** Firefox 60, Firefox ESR 60\
3258 **CCK2 Equivalent:** N/A\
3259 **Preferences Affected:** `layers.acceleration.disabled`
3260
3261 #### Windows (GPO)
3262 ```
3263 Software\Policies\Mozilla\Firefox\HardwareAcceleration = 0x1 | 0x0
3264 ```
3265 #### Windows (Intune)
3266 OMA-URI:
3267 ```
3268 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/HardwareAcceleration
3269 ```
3270 Value (string):
3271 ```
3272 <enabled/> or <disabled/>
3273 ```
3274 #### macOS
3275 ```
3276 <dict>
3277   <key>HardwareAcceleration</key>
3278   <true/> | <false/>
3279 </dict>
3280 ```
3281 #### policies.json
3282 ```
3283 {
3284   "policies": {
3285     "HardwareAcceleration": true | false
3286   }
3287 }
3288 ```
3289 ### Homepage
3290 Configure the default homepage and how Firefox starts.
3291
3292 `URL` is the default homepage.
3293
3294 `Locked` prevents the user from changing homepage preferences.
3295
3296 `Additional` allows for more than one homepage.
3297
3298 `StartPage` is how Firefox starts. The choices are no homepage, the default homepage or the previous session.
3299
3300 With Firefox 78, an additional option as added for `Startpage`, `homepage-locked`. If this is value is set for the Startpage, the user will always get the homepage at startup and cannot choose to restore their session.
3301
3302 **Compatibility:** Firefox 60, Firefox ESR 60 (StartPage was added in Firefox 60, Firefox ESR 60.4, homepage-locked added in Firefox 78)\
3303 **CCK2 Equivalent:** `homePage`,`lockHomePage`\
3304 **Preferences Affected:** `browser.startup.homepage`, `browser.startup.page`
3305
3306 #### Windows (GPO)
3307 ```
3308 Software\Policies\Mozilla\Firefox\Homepage\URL = "https://example.com"
3309 Software\Policies\Mozilla\Firefox\Homepage\Locked = 0x1 | 0x0
3310 Software\Policies\Mozilla\Firefox\Homepage\Additional\1 = "https://example.org"
3311 Software\Policies\Mozilla\Firefox\Homepage\Additional\2 = "https://example.edu"
3312 Software\Policies\Mozilla\Firefox\Homepage\StartPage = "none" | "homepage" | "previous-session" | "homepage-locked"
3313 ```
3314 #### Windows (Intune)
3315 OMA-URI:
3316 ```
3317 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageURL
3318 ```
3319 Value (string):
3320 ```
3321 <enabled/>
3322
3323 <data id="HomepageURL" value="https://example.com"/>
3324 <data id="HomepageLocked" value="true | false"/>
3325 ```
3326 OMA-URI:
3327 ```
3328 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageAdditional
3329 ```
3330 Value (string):
3331 ```
3332 <enabled/>
3333
3334 <data id="HomepageAdditional" value="1&#xF000;http://example.org&#xF000;2&#xF000;http://example.edu"/>
3335 ```
3336 OMA-URI:
3337 ```
3338 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageStartPage
3339 ```
3340 Value (string):
3341 ```
3342 <enabled/>
3343
3344 <data id="StartPage" value="none | homepage | previous-session"/>
3345 ```
3346 #### macOS
3347 ```
3348 <dict>
3349   <key>Homepage</key>
3350   <dict>
3351     <key>URL</key>
3352     <string>http://example.com</string>
3353     <key>Locked</key>
3354     <true/> | <false/>
3355     <key>Additional</key>
3356     <array>
3357       <string>http://example.org</string>
3358       <string>http://example.edu</string>
3359     </array>
3360     <key>StartPage</key>
3361     <string>none | homepage | previous-session | homepage-locked</string>
3362   </dict>
3363 </dict>
3364 ```
3365 #### policies.json
3366 ```
3367 {
3368   "policies": {
3369     "Homepage": {
3370       "URL": "http://example.com/",
3371       "Locked": true | false,
3372       "Additional": ["http://example.org/",
3373                      "http://example.edu/"],
3374       "StartPage": "none" | "homepage" | "previous-session" | "homepage-locked"
3375     }
3376   }
3377 }
3378 ```
3379 ### InstallAddonsPermission
3380 Configure the default extension install policy as well as origins for extension installs are allowed. This policy does not override turning off all extension installs.
3381
3382 `Allow` is a list of origins where extension installs are allowed.
3383
3384 `Default` determines whether or not extension installs are allowed by default.
3385
3386 **Compatibility:** Firefox 60, Firefox ESR 60\
3387 **CCK2 Equivalent:** `permissions.install`\
3388 **Preferences Affected:** `xpinstall.enabled`
3389
3390 #### Windows (GPO)
3391 ```
3392 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Allow\1 = "https://example.org"
3393 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Allow\2 = "https://example.edu"
3394 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Default = 0x1 | 0x0
3395 ```
3396 #### Windows (Intune)
3397 OMA-URI:
3398 ```
3399 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Addons/InstallAddonsPermission_Allow
3400 ```
3401 Value (string):
3402 ```
3403 <enabled/>
3404 <data id="Permissions" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
3405 ```
3406 OMA-URI:
3407 ```
3408 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Addons/InstallAddonsPermission_Default
3409 ```
3410 Value (string):
3411 ```
3412 <enabled/>
3413 ```
3414 #### macOS
3415 ```
3416 <dict>
3417   <key>InstallAddonsPermission</key>
3418   <dict>
3419     <key>Allow</key>
3420     <array>
3421       <string>http://example.org</string>
3422       <string>http://example.edu</string>
3423     </array>
3424     <key>Default</key>
3425     <true/> | <false/>
3426   </dict>
3427 </dict>
3428 ```
3429 #### policies.json
3430 ```
3431 {
3432   "policies": {
3433     "InstallAddonsPermission": {
3434       "Allow": ["http://example.org/",
3435                 "http://example.edu/"],
3436       "Default": true | false
3437     }
3438   }
3439 }
3440 ```
3441 ### LegacyProfiles
3442 Disable the feature enforcing a separate profile for each installation.
3443
3444 If this policy set to true, Firefox will not try to create different profiles for installations of Firefox in different directories. This is the equivalent of the MOZ_LEGACY_PROFILES environment variable.
3445
3446 If this policy set to false, Firefox will create a new profile for each unique installation of Firefox.
3447
3448 This policy only work on Windows via GPO (not policies.json).
3449
3450 **Compatibility:** Firefox 70, Firefox ESR 68.2 (Windows only, GPO only)\
3451 **CCK2 Equivalent:** N/A\
3452 **Preferences Affected:** N/A
3453
3454 #### Windows (GPO)
3455 ```
3456 Software\Policies\Mozilla\Firefox\LegacyProfiles = = 0x1 | 0x0
3457 ```
3458 #### Windows (Intune)
3459 OMA-URI:
3460 ```
3461 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/LegacyProfiles
3462 ```
3463 Value (string):
3464 ```
3465 <enabled/> or <disabled/>
3466 ```
3467 ### LegacySameSiteCookieBehaviorEnabled
3468 Enable default legacy SameSite cookie behavior setting.
3469
3470 If this policy is set to true, it reverts all cookies to legacy SameSite behavior which means that cookies that don't explicitly specify a ```SameSite``` attribute are treated as if they were ```SameSite=None```.
3471
3472 **Compatibility:** Firefox 96\
3473 **CCK2 Equivalent:** N/A\
3474 **Preferences Affected:** `network.cookie.sameSite.laxByDefault`
3475
3476 #### Windows (GPO)
3477 ```
3478 Software\Policies\Mozilla\Firefox\LegacySameSiteCookieBehaviorEnabled = = 0x1 | 0x0
3479 ```
3480 #### Windows (Intune)
3481 OMA-URI:
3482 ```
3483 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/LegacySameSiteCookieBehaviorEnabled
3484 ```
3485 Value (string):
3486 ```
3487 <enabled/> or <disabled/>
3488 ```
3489 #### macOS
3490 ```
3491 <dict>
3492   <key>LegacySameSiteCookieBehaviorEnabled</key>
3493   <true/> | <false/>
3494 </dict>
3495 ```
3496 #### policies.json
3497 ```
3498 {
3499   "policies": {
3500     "LegacySameSiteCookieBehaviorEnabled": true | false
3501 }
3502 ```
3503 ### LegacySameSiteCookieBehaviorEnabledForDomainList
3504 Revert to legacy SameSite behavior for cookies on specified sites.
3505
3506 If this policy is set to true, cookies set for domains in this list will revert to legacy SameSite behavior which means that cookies that don't explicitly specify a ```SameSite``` attribute are treated as if they were ```SameSite=None```.
3507
3508 **Compatibility:** Firefox 96\
3509 **CCK2 Equivalent:** N/A\
3510 **Preferences Affected:** `network.cookie.sameSite.laxByDefault.disabledHosts`
3511
3512 #### Windows (GPO)
3513 ```
3514 Software\Policies\Mozilla\Firefox\LegacySameSiteCookieBehaviorEnabledForDomainList\1 = "example.org"
3515 Software\Policies\Mozilla\Firefox\LegacySameSiteCookieBehaviorEnabledForDomainList\2 = "example.edu"
3516 ```
3517 #### Windows (Intune)
3518 OMA-URI:
3519 ```
3520 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/LegacySameSiteCookieBehaviorEnabledForDomainList
3521 ```
3522 Value (string):
3523 ```
3524 <enabled/>
3525 <data id="LegacySameSiteCookieBehaviorEnabledForDomainList" value="1&#xF000;example.org&#xF000;2&#xF000;example.edu"/>
3526 ```
3527 #### macOS
3528 ```
3529 <dict>
3530   <key>LegacySameSiteCookieBehaviorEnabledForDomainList</key>
3531   <array>
3532     <string>example.org</string>
3533     <string>example.edu</string>
3534   </array>
3535 </dict>
3536 ```
3537 #### policies.json
3538 ```
3539 {
3540   "policies": {
3541     "LegacySameSiteCookieBehaviorEnabledForDomainList": ["example.org",
3542                                                          "example.edu"]
3543   }
3544 }
3545 ```
3546 ### LocalFileLinks
3547 Enable linking to local files by origin.
3548
3549 **Compatibility:** Firefox 68, Firefox ESR 68\
3550 **CCK2 Equivalent:** N/A\
3551 **Preferences Affected:** `capability.policy.localfilelinks.*`
3552
3553 #### Windows (GPO)
3554 ```
3555 Software\Policies\Mozilla\Firefox\LocalFileLinks\1 = "https://example.org"
3556 Software\Policies\Mozilla\Firefox\LocalFileLinks\2 = "https://example.edu"
3557 ```
3558 #### Windows (Intune)
3559 OMA-URI:
3560 ```
3561 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/LocalFileLinks
3562 ```
3563 Value (string):
3564 ```
3565 <enabled/>
3566 <data id="LocalFileLinks" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
3567 ```
3568 #### macOS
3569 ```
3570 <dict>
3571   <key>LocalFileLinks</key>
3572   <array>
3573     <string>http://example.org</string>
3574     <string>http://example.edu</string>
3575   </array>
3576 </dict>
3577 ```
3578 #### policies.json
3579 ```
3580 {
3581   "policies": {
3582     "LocalFileLinks": ["http://example.org/",
3583                        "http://example.edu/"]
3584   }
3585 }
3586 ```
3587 ### ManagedBookmarks
3588 Configures a list of bookmarks managed by an administrator that cannot be changed by the user.
3589
3590 The bookmarks are only added as a button on the personal toolbar. They are not in the bookmarks folder.
3591
3592 The syntax of this policy is exactly the same as the [Chrome ManagedBookmarks policy](https://cloud.google.com/docs/chrome-enterprise/policies/?policy=ManagedBookmarks). The schema is:
3593 ```
3594 {
3595  "items": {
3596   "id": "BookmarkType",
3597   "properties": {
3598    "children": {
3599     "items": {
3600      "$ref": "BookmarkType"
3601     },
3602     "type": "array"
3603    },
3604    "name": {
3605     "type": "string"
3606    },
3607    "toplevel_name": {
3608     "type": "string"
3609    },
3610    "url": {
3611     "type": "string"
3612    }
3613   },
3614   "type": "object"
3615  },
3616  "type": "array"
3617 }
3618 ```
3619 **Compatibility:** Firefox 83, Firefox ESR 78.5\
3620 **CCK2 Equivalent:** N/A\
3621 **Preferences Affected:** N/A
3622
3623 #### Windows (GPO)
3624 Software\Policies\Mozilla\Firefox\ManagedBookmarks (REG_MULTI_SZ) =
3625 ```
3626 [
3627   {
3628     "toplevel_name": "My managed bookmarks folder"
3629   },
3630   {
3631     "url": "example.com",
3632     "name": "Example"
3633   },
3634   {
3635     "name": "Mozilla links",
3636     "children": [
3637       {
3638         "url": "https://mozilla.org",
3639         "name": "Mozilla.org"
3640       },
3641       {
3642         "url": "https://support.mozilla.org/",
3643         "name": "SUMO"
3644       }
3645     ]
3646   }
3647 ]
3648 ```
3649 #### Windows (Intune)
3650 OMA-URI:
3651 ```
3652 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/ManagedBookmarks
3653 ```
3654 Value (string):
3655 ```
3656 <enabled/>
3657 <data id="JSON" value='
3658 [
3659   {
3660     "toplevel_name": "My managed bookmarks folder"
3661   },
3662   {
3663     "url": "example.com",
3664     "name": "Example"
3665   },
3666   {
3667     "name": "Mozilla links",
3668     "children": [
3669       {
3670         "url": "https://mozilla.org",
3671         "name": "Mozilla.org"
3672       },
3673       {
3674         "url": "https://support.mozilla.org/",
3675         "name": "SUMO"
3676       }
3677     ]
3678   }
3679 ]'/>
3680 ```
3681 #### macOS
3682 ```
3683 <dict>
3684   <key>ManagedBookmarks</key>
3685   <array>
3686     <dict>
3687       <key>toplevel_name</key>
3688       <string>My managed bookmarks folder</string>
3689       <dict>
3690         <key>url</key>
3691         <string>example.com</string>
3692         <key>name</key>
3693         <string>Example</string>
3694       </dict>
3695       <dict>
3696       <key>name</key>
3697       <string>Mozilla links</string>
3698       <key>children</key>
3699       <array>
3700         <dict>
3701           <key>url</key>
3702           <string>https://mozilla.org</string>
3703           <key>name</key>
3704           <string>Mozilla</string>
3705         </dict>
3706         <dict>
3707           <key>url</key>
3708           <string>https://support.mozilla.org/</string>
3709           <key>name</key>
3710           <string>SUMO</string>
3711         </dict>
3712       </array>
3713     </dict>
3714   </array>
3715 </dict>
3716 ```
3717 #### policies.json
3718 ```
3719 {
3720   "policies": {
3721     "ManagedBookmarks": [
3722       {
3723         "toplevel_name": "My managed bookmarks folder"
3724       },
3725       {
3726         "url": "example.com",
3727         "name": "Example"
3728       },
3729       {
3730         "name": "Mozilla links",
3731         "children": [
3732           {
3733             "url": "https://mozilla.org",
3734             "name": "Mozilla.org"
3735           },
3736           {
3737             "url": "https://support.mozilla.org/",
3738             "name": "SUMO"
3739           }
3740         ]
3741       }
3742     ]
3743   }
3744 }
3745 ```
3746 ### ManualAppUpdateOnly
3747
3748 Switch to manual updates only.
3749
3750 If this policy is enabled:
3751  1. The user will never be prompted to install updates
3752  2. Firefox will not check for updates in the background, though it will check automatically when an update UI is displayed (such as the one in the About dialog). This check will be used to show "Update to version X" in the UI, but will not automatically download the update or prompt the user to update in any other way.
3753  3. The update UI will work as expected, unlike when using DisableAppUpdate.
3754
3755 This policy is primarily intended for advanced end users, not for enterprises.
3756
3757 **Compatibility:** Firefox 87\
3758 **CCK2 Equivalent:** N/A\
3759 **Preferences Affected:** N/A
3760
3761 #### policies.json
3762 ```
3763 {
3764   "policies": {
3765     "ManualAppUpdateOnly": true | false
3766   }
3767 }
3768 ```
3769 ### NetworkPrediction
3770 Enable or disable network prediction (DNS prefetching).
3771
3772 **Compatibility:** Firefox 67, Firefox ESR 60.7\
3773 **CCK2 Equivalent:** N/A\
3774 **Preferences Affected:** `network.dns.disablePrefetch`, `network.dns.disablePrefetchFromHTTPS`
3775
3776 #### Windows (GPO)
3777 ```
3778 Software\Policies\Mozilla\Firefox\NetworkPrediction = 0x1 | 0x0
3779 ```
3780 #### Windows (Intune)
3781 OMA-URI:
3782 ```
3783 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NetworkPrediction
3784 ```
3785 Value (string):
3786 ```
3787 <enabled/> or <disabled/>
3788 ```
3789 #### macOS
3790 ```
3791 <dict>
3792   <key>NetworkPrediction</key>
3793   <true/> | <false/>
3794 </dict>
3795 ```
3796 #### policies.json
3797 ```
3798 {
3799   "policies": {
3800     "NetworkPrediction": true | false
3801 }
3802 ```
3803 ### NewTabPage
3804 Enable or disable the New Tab page.
3805
3806 **Compatibility:** Firefox 68, Firefox ESR 68\
3807 **CCK2 Equivalent:** N/A\
3808 **Preferences Affected:** `browser.newtabpage.enabled`
3809
3810 #### Windows (GPO)
3811 ```
3812 Software\Policies\Mozilla\Firefox\NewTabPage = 0x1 | 0x0
3813 ```
3814 #### Windows (Intune)
3815 OMA-URI:
3816 ```
3817 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NewTabPage
3818 ```
3819 Value (string):
3820 ```
3821 <enabled/> or <disabled/>
3822 ```
3823 #### macOS
3824 ```
3825 <dict>
3826   <key>NewTabPage</key>
3827   <true/> | <false/>
3828 </dict>
3829 ```
3830 #### policies.json
3831 ```
3832 {
3833   "policies": {
3834     "NewTabPage": true | false
3835 }
3836 ```
3837 ### NoDefaultBookmarks
3838 Disable the creation of default bookmarks.
3839
3840 This policy is only effective if the user profile has not been created yet.
3841
3842 **Compatibility:** Firefox 60, Firefox ESR 60\
3843 **CCK2 Equivalent:** `removeDefaultBookmarks`\
3844 **Preferences Affected:** N/A
3845
3846 #### Windows (GPO)
3847 ```
3848 Software\Policies\Mozilla\Firefox\NoDefaultBookmarks = 0x1 | 0x0
3849 ```
3850 #### Windows (Intune)
3851 OMA-URI:
3852 ```
3853 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NoDefaultBookmarks
3854 ```
3855 Value (string):
3856 ```
3857 <enabled/> or <disabled/>
3858 ```
3859 #### macOS
3860 ```
3861 <dict>
3862   <key>NoDefaultBookmarks</key>
3863   <true/> | <false/>
3864 </dict>
3865 ```
3866 #### policies.json
3867 ```
3868 {
3869   "policies": {
3870     "NoDefaultBookmarks": true | false
3871   }
3872 }
3873 ```
3874 ### OfferToSaveLogins
3875 Control whether or not Firefox offers to save passwords.
3876
3877 **Compatibility:** Firefox 60, Firefox ESR 60\
3878 **CCK2 Equivalent:** `dontRememberPasswords`\
3879 **Preferences Affected:** `signon.rememberSignons`
3880
3881 #### Windows (GPO)
3882 ```
3883 Software\Policies\Mozilla\Firefox\OfferToSaveLogins = 0x1 | 0x0
3884 ```
3885 #### Windows (Intune)
3886 OMA-URI:
3887 ```
3888 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OfferToSaveLogins
3889 ```
3890 Value (string):
3891 ```
3892 <enabled/> or <disabled/>
3893 ```
3894 #### macOS
3895 ```
3896 <dict>
3897   <key>OfferToSaveLogins</key>
3898   <true/> | <false/>
3899 </dict>
3900 ```
3901 #### policies.json
3902 ```
3903 {
3904   "policies": {
3905     "OfferToSaveLogins": true | false
3906   }
3907 }
3908 ```
3909 ### OfferToSaveLoginsDefault
3910 Sets the default value of signon.rememberSignons without locking it.
3911
3912 **Compatibility:** Firefox 70, Firefox ESR 60.2\
3913 **CCK2 Equivalent:** `dontRememberPasswords`\
3914 **Preferences Affected:** `signon.rememberSignons`
3915
3916 #### Windows (GPO)
3917 ```
3918 Software\Policies\Mozilla\Firefox\OfferToSaveLoginsDefault = 0x1 | 0x0
3919 ```
3920 #### Windows (Intune)
3921 OMA-URI:
3922 ```
3923 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OfferToSaveLoginsDefault
3924 ```
3925 Value (string):
3926 ```
3927 <enabled/> or <disabled/>
3928 ```
3929 #### macOS
3930 ```
3931 <dict>
3932   <key>OfferToSaveLoginsDefault</key>
3933   <true/> | <false/>
3934 </dict>
3935 ```
3936 #### policies.json
3937 ```
3938 {
3939   "policies": {
3940     "OfferToSaveLoginsDefault": true | false
3941   }
3942 }
3943 ```
3944 ### OverrideFirstRunPage
3945 Override the first run page. If the value is an empty string (""), the first run page is not displayed.
3946
3947 Starting with Firefox 83, Firefox ESR 78.5, you can also specify multiple URLS separated by a vertical bar (|).
3948
3949 **Compatibility:** Firefox 60, Firefox ESR 60\
3950 **CCK2 Equivalent:** `welcomePage`,`noWelcomePage`\
3951 **Preferences Affected:** `startup.homepage_welcome_url`
3952
3953 #### Windows (GPO)
3954 ```
3955 Software\Policies\Mozilla\Firefox\OverrideFirstRunPage = "http://example.org"
3956 ```
3957 #### Windows (Intune)
3958 OMA-URI:
3959 ```
3960 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OverrideFirstRunPage
3961 ```
3962 Value (string):
3963 ```
3964 <enabled/>
3965 <data id="OverridePage" value="https://example.com"/>
3966 ```
3967 #### macOS
3968 ```
3969 <dict>
3970   <key>OverrideFirstRunPage</key>
3971   <string>http://example.org</string>
3972 </dict>
3973 ```
3974 #### policies.json
3975 ```
3976 {
3977   "policies": {
3978     "OverrideFirstRunPage": "http://example.org"
3979   }
3980 }
3981 ```
3982 ### OverridePostUpdatePage
3983 Override the upgrade page. If the value is an empty string (""), no extra pages are displayed when Firefox is upgraded.
3984
3985 **Compatibility:** Firefox 60, Firefox ESR 60\
3986 **CCK2 Equivalent:** `upgradePage`,`noUpgradePage`\
3987 **Preferences Affected:** `startup.homepage_override_url`
3988
3989 #### Windows (GPO)
3990 ```
3991 Software\Policies\Mozilla\Firefox\OverridePostUpdatePage = "http://example.org"
3992 ```
3993 #### Windows (Intune)
3994 OMA-URI:
3995 ```
3996 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OverridePostUpdatePage
3997 ```
3998 Value (string):
3999 ```
4000 <enabled/>
4001 <data id="OverridePage" value="https://example.com"/>
4002 ```
4003 #### macOS
4004 ```
4005 <dict>
4006   <key>OverridePostUpdatePage</key>
4007   <string>http://example.org</string>
4008 </dict>
4009 ```
4010 #### policies.json
4011 ```
4012 {
4013   "policies": {
4014     "OverridePostUpdatePage": "http://example.org"
4015   }
4016 }
4017 ```
4018 ### PasswordManagerEnabled
4019 Remove access to the password manager via preferences and blocks about:logins on Firefox 70.
4020
4021 **Compatibility:** Firefox 70, Firefox ESR 60.2\
4022 **CCK2 Equivalent:** N/A\
4023 **Preferences Affected:** `pref.privacy.disable_button.view_passwords`
4024
4025 #### Windows (GPO)
4026 ```
4027 Software\Policies\Mozilla\Firefox\PasswordManagerEnabled = 0x1 | 0x0
4028 ```
4029 #### Windows (Intune)
4030 OMA-URI:
4031 ```
4032 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PasswordManagerEnabled
4033 ```
4034 Value (string):
4035 ```
4036 <enabled/> or <disabled/>
4037 ```
4038 #### macOS
4039 ```
4040 <dict>
4041   <key>PasswordManagerEnabled</key>
4042   <true/> | <false/>
4043 </dict>
4044 ```
4045 #### policies.json
4046 ```
4047 {
4048   "policies": {
4049     "PasswordManagerEnabled": true | false
4050   }
4051 }
4052 ```
4053 ### PasswordManagerExceptions
4054 Prevent Firefox from saving passwords for specific sites.
4055
4056 The sites are specified as a list of origins.
4057
4058 **Compatibility:** Firefox 101\
4059 **CCK2 Equivalent:** N/A\
4060 **Preferences Affected:** N/A
4061
4062 #### Windows (GPO)
4063 ```
4064 Software\Policies\Mozilla\Firefox\PasswordManagerExceptions\1 = "https://example.org"
4065 Software\Policies\Mozilla\Firefox\PasswordManagerExceptions\2 = "https://example.edu"
4066 ```
4067 #### Windows (Intune)
4068 OMA-URI:
4069 ```
4070 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PasswordManagerExceptions
4071 ```
4072 Value (string):
4073 ```
4074 <enabled/>
4075 <data id="List" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
4076 ```
4077 #### macOS
4078 ```
4079 <dict>
4080   <key>PasswordManagerExceptions</key>
4081   <array>
4082     <string>https://example.org</string>
4083     <string>https://example.edu</string>
4084   </array>
4085 </dict>
4086 ```
4087 #### policies.json
4088 ```
4089 {
4090   "policies": {
4091     "PasswordManagerExceptions": ["https://example.org",
4092                                   "https://example.edu"]
4093   }
4094 }
4095 ```
4096
4097 ### PDFjs
4098 Disable or configure PDF.js, the built-in PDF viewer.
4099
4100 If `Enabled` is set to false, the built-in PDF viewer is disabled.
4101
4102 If `EnablePermissions` is set to true, the built-in PDF viewer will honor document permissions like preventing the copying of text.
4103
4104 Note: DisableBuiltinPDFViewer has not been deprecated. You can either continue to use it, or switch to using PDFjs->Enabled to disable the built-in PDF viewer. This new permission was added because we needed a place for PDFjs->EnabledPermissions.
4105
4106 **Compatibility:** Firefox 77, Firefox ESR 68.9\
4107 **CCK2 Equivalent:** N/A\
4108 **Preferences Affected:** `pdfjs.diabled`, `pdfjs.enablePermissions`
4109
4110 #### Windows (GPO)
4111 ```
4112 Software\Policies\Mozilla\Firefox\PDFjs\Enabled = 0x1 | 0x0
4113 Software\Policies\Mozilla\Firefox\PDFjs\EnablePermissions = 0x1 | 0x0
4114 ```
4115 #### Windows (Intune)
4116 OMA-URI:
4117 ```
4118 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PDFjs/PDFjs_Enabled
4119 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PDFjs/PDFjs_EnablePermissions
4120 ```
4121 Value (string):
4122 ```
4123 <enabled/>or <disabled/>
4124 ```
4125 #### macOS
4126 ```
4127 <dict>
4128   <key>PDFjs</key>
4129   <dict>
4130     <key>Enabled</key>
4131     <true/> | <false/>
4132     <key>EnablePermissions</key>
4133     <true/> | <false/>
4134   </dict>
4135 </dict>
4136 ```
4137 #### policies.json
4138 ```
4139 {
4140   "policies": {
4141     "PDFjs": {
4142       "Enabled": true | false,
4143       "EnablePermissions": true | false
4144     }
4145   }
4146 }
4147 ```
4148 ### Permissions
4149 Set permissions associated with camera, microphone, location, notifications, autoplay, and virtual reality. Because these are origins, not domains, entries with unique ports must be specified separately. This explicitly means that it is not possible to add wildcards. See examples below.
4150
4151 `Allow` is a list of origins where the feature is allowed.
4152
4153 `Block` is a list of origins where the feature is not allowed.
4154
4155 `BlockNewRequests` determines whether or not new requests can be made for the feature.
4156
4157 `Locked` prevents the user from changing preferences for the feature.
4158
4159 `Default` specifies the default value for Autoplay. block-audio-video is not supported on Firefox ESR 68.
4160
4161 **Compatibility:** Firefox 62, Firefox ESR 60.2 (Autoplay added in Firefox 74, Firefox ESR 68.6, Autoplay Default/Locked added in Firefox 76, Firefox ESR 68.8, VirtualReality added in Firefox 80, Firefox ESR 78.2)\
4162 **CCK2 Equivalent:** N/A\
4163 **Preferences Affected:** `permissions.default.camera`, `permissions.default.microphone`, `permissions.default.geo`, `permissions.default.desktop-notification`, `media.autoplay.default`, `permissions.default.xr`
4164
4165 #### Windows (GPO)
4166 ```
4167 Software\Policies\Mozilla\Firefox\Permissions\Camera\Allow\1 = "https://example.org"
4168 Software\Policies\Mozilla\Firefox\Permissions\Camera\Allow\2 = "https://example.org:1234"
4169 Software\Policies\Mozilla\Firefox\Permissions\Camera\Block\1 = "https://example.edu"
4170 Software\Policies\Mozilla\Firefox\Permissions\Camera\BlockNewRequests = 0x1 | 0x0
4171 Software\Policies\Mozilla\Firefox\Permissions\Camera\Locked = 0x1 | 0x0
4172 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Allow\1 = "https://example.org"
4173 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Block\1 = "https://example.edu"
4174 Software\Policies\Mozilla\Firefox\Permissions\Microphone\BlockNewRequests = 0x1 | 0x0
4175 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Locked = 0x1 | 0x0
4176 Software\Policies\Mozilla\Firefox\Permissions\Location\Allow\1 = "https://example.org"
4177 Software\Policies\Mozilla\Firefox\Permissions\Location\Block\1 = "https://example.edu"
4178 Software\Policies\Mozilla\Firefox\Permissions\Location\BlockNewRequests = 0x1 | 0x0
4179 Software\Policies\Mozilla\Firefox\Permissions\Location\Locked = 0x1 | 0x0
4180 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Allow\1 = "https://example.org"
4181 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Block\1 = "https://example.edu"
4182 Software\Policies\Mozilla\Firefox\Permissions\Notifications\BlockNewRequests = 0x1 | 0x0
4183 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Locked = 0x1 | 0x0
4184 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Allow\1 = "https://example.org"
4185 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Block\1 = "https://example.edu"
4186 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Default = "allow-audio-video" | "block-audio" | "block-audio-video"
4187 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Locked = 0x1 | 0x0
4188 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\Allow\1 = "https://example.org"
4189 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\Block\1 = "https://example.edu"
4190 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\BlockNewRequests = 0x1 | 0x0
4191 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\Locked = 0x1 | 0x0
4192 ```
4193 #### Windows (Intune)
4194 OMA-URI:
4195 ```
4196 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Location/Location_BlockNewRequests
4197 ```
4198 Value (string):
4199 ```
4200 <enabled/> or <disabled/>
4201 ```
4202 OMA-URI:
4203 ```
4204 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Location/Location_Locked
4205 ```
4206 Value (string):
4207 ```
4208 <enabled/> or <disabled/>
4209 ```
4210 OMA-URI:
4211 ```
4212 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_Allow
4213 ```
4214 Value (string):
4215 ```
4216 <enabled/>
4217 <data id="Permissions" value="1&#xF000;https://example.org"/>
4218 ```
4219 OMA-URI:
4220 ```
4221 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_BlockNewRequests
4222 ```
4223 Value (string):
4224 ```
4225 <enabled/> or <disabled/>
4226 ```
4227 OMA-URI:
4228 ```
4229 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_Locked
4230 ```
4231 Value (string):
4232 ```
4233 <enabled/> or <disabled/>
4234 ```
4235 OMA-URI:
4236 ```
4237 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Allow
4238 ```
4239 Value (string):
4240 ```
4241 <enabled/>
4242 <data id="Permissions" value="1&#xF000;https://example.org"/>
4243 ```
4244 OMA-URI:
4245 ```
4246 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Block
4247 ```
4248 Value (string):
4249 ```
4250 <enabled/>
4251 <data id="Permissions" value="1&#xF000;https://example.edu"/>
4252 ```
4253 OMA-URI:
4254 ```
4255 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Default
4256 ```
4257 Value (string):
4258 ```
4259 <enabled/>
4260 <data id="Autoplay_Default" value="allow-audio-video | block-audio | block-audio-video"/>
4261 ```
4262 OMA-URI:
4263 ```
4264 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Locked
4265 ```
4266 Value (string):
4267 ```
4268 <enabled/> or <disabled/>
4269 ```
4270 OMA-URI:
4271 ```
4272 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_Allow
4273 ```
4274 Value (string):
4275 ```
4276 <enabled/>
4277 <data id="Permissions" value="1&#xF000;https://example.org"/>
4278 ```
4279 OMA-URI:
4280 ```
4281 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_Block
4282 ```
4283 Value (string):
4284 ```
4285 <enabled/>
4286 <data id="Permissions" value="1&#xF000;https://example.edu"/>
4287 ```
4288 OMA-URI:
4289 ```
4290 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_BlockNewRequests
4291 ```
4292 Value (string):
4293 ```
4294 <enabled/> or <disabled/>
4295 ```
4296 OMA-URI:
4297 ```
4298 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_Locked
4299 ```
4300 Value (string):
4301 ```
4302 <enabled/> or <disabled/>
4303 ```
4304 #### macOS
4305 ```
4306 <dict>
4307   <key>Permissions</key>
4308   <dict>
4309     <key>Camera</key>
4310     <dict>
4311       <key>Allow</key>
4312       <array>
4313         <string>https://example.org</string>
4314         <string>https://example.org:1234</string>
4315       </array>
4316       <key>Block</key>
4317       <array>
4318         <string>https://example.edu</string>
4319       </array>
4320       <key>BlockNewRequests</key>
4321       <true/> | <false/>
4322       <key>Locked</key>
4323       <true/> | <false/>
4324     </dict>
4325     <key>Microphone</key>
4326     <dict>
4327       <key>Allow</key>
4328       <array>
4329         <string>https://example.org</string>
4330       </array>
4331       <key>Block</key>
4332       <array>
4333         <string>https://example.edu</string>
4334       </array>
4335       <key>BlockNewRequests</key>
4336       <true/> | <false/>
4337       <key>Locked</key>
4338       <true/> | <false/>
4339     </dict>
4340     <key>Location</key>
4341     <dict>
4342       <key>Allow</key>
4343       <array>
4344         <string>https://example.org</string>
4345       </array>
4346       <key>Block</key>
4347       <array>
4348         <string>https://example.edu</string>
4349       </array>
4350       <key>BlockNewRequests</key>
4351       <true/> | <false/>
4352       <key>Locked</key>
4353       <true/> | <false/>
4354     </dict>
4355     <key>Notifications</key>
4356     <dict>
4357       <key>Allow</key>
4358       <array>
4359         <string>https://example.org</string>
4360       </array>
4361       <key>Block</key>
4362       <array>
4363         <string>https://example.edu</string>
4364       </array>
4365       <key>BlockNewRequests</key>
4366       <true/>
4367       <key>Locked</key>
4368       <true/>
4369     </dict>
4370     <key>Autoplay</key>
4371     <dict>
4372       <key>Allow</key>
4373       <array>
4374         <string>https://example.org</string>
4375       </array>
4376       <key>Block</key>
4377       <array>
4378         <string>https://example.edu</string>
4379       </array>
4380       <key>Default</key>
4381       <string>allow-audio-video | block-audio | block-audio-video</string>
4382       <key>Locked</key>
4383       <true/> | <false/>
4384     </dict>
4385   </dict>
4386 </dict>
4387 ```
4388 #### policies.json
4389 ```
4390 {
4391   "policies": {
4392     "Permissions": {
4393       "Camera": {
4394         "Allow": ["https://example.org","https://example.org:1234"],
4395         "Block": ["https://example.edu"],
4396         "BlockNewRequests": true | false,
4397         "Locked": true | false
4398       },
4399       "Microphone": {
4400         "Allow": ["https://example.org"],
4401         "Block": ["https://example.edu"],
4402         "BlockNewRequests": true | false,
4403         "Locked": true | false
4404       },
4405       "Location": {
4406         "Allow": ["https://example.org"],
4407         "Block": ["https://example.edu"],
4408         "BlockNewRequests": true | false,
4409         "Locked": true | false
4410       },
4411       "Notifications": {
4412         "Allow": ["https://example.org"],
4413         "Block": ["https://example.edu"],
4414         "BlockNewRequests": true | false,
4415         "Locked": true | false
4416       },
4417       "Autoplay": {
4418         "Allow": ["https://example.org"],
4419         "Block": ["https://example.edu"],
4420         "Default": "allow-audio-video" | "block-audio" | "block-audio-video",
4421         "Locked": true | false
4422       }
4423     }
4424   }
4425 }
4426 ```
4427 ### PictureInPicture
4428
4429 Enable or disable Picture-in-Picture as well as prevent the user from enabling or disabling it (Locked).
4430
4431 **Compatibility:** Firefox 78, Firefox ESR 78\
4432 **CCK2 Equivalent:** N/A\
4433 **Preferences Affected:** `media.videocontrols.picture-in-picture.video-toggle.enabled`
4434
4435 #### Windows (GPO)
4436 ```
4437 Software\Policies\Mozilla\Firefox\PictureInPicture\Enabled = 0x1 | 0x0
4438 Software\Policies\Mozilla\Firefox\PictureInPicture\Locked = 0x1 | 0x0
4439
4440 ```
4441 #### Windows (Intune)
4442 OMA-URI:
4443 ```
4444 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PictureInPicture/PictureInPicture_Enabled
4445 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PictureInPicture/PictureInPicture_Locked
4446 ```
4447 Value (string):
4448 ```
4449 <enabled/> or <disabled/>
4450 ```
4451 #### macOS
4452 ```
4453 <dict>
4454   <key>PictureInPicture</key>
4455   <dict>
4456     <key>Enabled</key>
4457     <true/> | <false/>
4458     <key>Locked</key>
4459     <true/> | <false/>
4460   </dict>
4461 </dict>
4462 ```
4463 #### policies.json
4464 ```
4465 {
4466   "policies": {
4467     "PictureInPicture": {
4468       "Enabled": true | false,
4469       "Locked": true | false
4470     }
4471   }
4472 }
4473 ```
4474 ### PopupBlocking
4475 Configure the default pop-up window policy as well as origins for which pop-up windows are allowed.
4476
4477 `Allow` is a list of origins where popup-windows are allowed.
4478
4479 `Default` determines whether or not pop-up windows are allowed by default.
4480
4481 `Locked` prevents the user from changing pop-up preferences.
4482
4483 **Compatibility:** Firefox 60, Firefox ESR 60\
4484 **CCK2 Equivalent:** `permissions.popup`\
4485 **Preferences Affected:** `dom.disable_open_during_load`
4486
4487 #### Windows (GPO)
4488 ```
4489 Software\Policies\Mozilla\Firefox\PopupBlocking\Allow\1 = "https://example.org"
4490 Software\Policies\Mozilla\Firefox\PopupBlocking\Allow\2 = "https://example.edu"
4491 Software\Policies\Mozilla\Firefox\PopupBlocking\Default = 0x1 | 0x0
4492 Software\Policies\Mozilla\Firefox\PopupBlocking\Locked = 0x1 | 0x0
4493 ```
4494 #### Windows (Intune)
4495 OMA-URI:
4496 ```
4497 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Allow
4498 ```
4499 Value (string):
4500 ```
4501 <enabled/>
4502 <data id="Permissions" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
4503 ```
4504 OMA-URI:
4505 ```
4506 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Default
4507 ```
4508 Value (string):
4509 ```
4510 <enabled/> or <disabled/>
4511 ```
4512 OMA-URI:
4513 ```
4514 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Locked
4515 ```
4516 Value (string):
4517 ```
4518 <enabled/> or <disabled/>
4519 ```
4520 #### macOS
4521 ```
4522 <dict>
4523   <key>PopupBlocking</key>
4524   <dict>
4525     <key>Allow</key>
4526     <array>
4527       <string>http://example.org</string>
4528       <string>http://example.edu</string>
4529     </array>
4530     <key>Default</key>
4531     <true/> | <false/>
4532     <key>Locked</key>
4533     <true/> | <false/>
4534   </dict>
4535 </dict>
4536 ```
4537 #### policies.json
4538 ```
4539 {
4540   "policies": {
4541     "PopupBlocking": {
4542       "Allow": ["http://example.org/",
4543                 "http://example.edu/"],
4544       "Default": true | false,
4545       "Locked": true | false
4546     }
4547   }
4548 }
4549 ```
4550 ### Preferences
4551 Set and lock preferences.
4552
4553 **NOTE** On Windows, in order to use this policy, you must clear all settings in the old **Preferences (Deprecated)** section.
4554
4555 Previously you could only set and lock a subset of preferences. Starting with Firefox 81 and Firefox ESR 78.3 you can set many more preferences. You can also set default preferences, user preferences and you can clear preferences.
4556
4557 Preferences that start with the following prefixes are supported:
4558 ```
4559 accessibility.
4560 app.update.* (Firefox 86, Firefox 78.8)
4561 browser.
4562 datareporting.policy.
4563 dom.
4564 extensions.
4565 general.autoScroll (Firefox 83, Firefox ESR 78.5)
4566 general.smoothScroll (Firefox 83, Firefox ESR 78.5)
4567 geo.
4568 gfx.
4569 intl.
4570 keyword.enabled (Firefox 95, Firefox ESR 91.4)
4571 layers.
4572 layout.
4573 media.
4574 network.
4575 pdfjs. (Firefox 84, Firefox ESR 78.6)
4576 places.
4577 print.
4578 signon. (Firefox 83, Firefox ESR 78.5)
4579 spellchecker. (Firefox 84, Firefox ESR 78.6)
4580 toolkit.legacyUserProfileCustomizations.stylesheets (Firefox 95, Firefox ESR 91.4)
4581 ui.
4582 widget.
4583 ```
4584 as well as the following security preferences:
4585 | Preference | Type | Default
4586 | --- | --- | ---
4587 | security.default_personal_cert | string | Ask Every Time
4588 | &nbsp;&nbsp;&nbsp;&nbsp;If set to Select Automatically, Firefox automatically chooses the default personal certificate.
4589 | security.insecure_connection_text.enabled | bool | false
4590 | &nbsp;&nbsp;&nbsp;&nbsp;If set to true, adds the words "Not Secure" for insecure sites.
4591 | security.insecure_connection_text.pbmode.enabled | bool | false
4592 | &nbsp;&nbsp;&nbsp;&nbsp;If set to true, adds the words "Not Secure" for insecure sites in private browsing.
4593 | security.insecure_field_warning.contextual.enabled | bool | true
4594 | &nbsp;&nbsp;&nbsp;&nbsp;If set to false, remove the warning for inscure login fields.
4595 | security.mixed_content.block_active_content | boolean | true
4596 | &nbsp;&nbsp;&nbsp;&nbsp;If false, mixed active content (HTTP and HTTPS) is not blocked.
4597 | security.osclientcerts.autoload | boolean | false
4598 | &nbsp;&nbsp;&nbsp;&nbsp;If true, client certificates are loaded from the operating system certificate store.
4599 | security.ssl.errorReporting.enabled | boolean | true
4600 | &nbsp;&nbsp;&nbsp;&nbsp;If false, SSL errors cannot be sent to Mozilla.
4601 | security.tls.enable_0rtt_data | boolean | true
4602 | &nbsp;&nbsp;&nbsp;&nbsp;If false, TLS early data is turned off (Firefox 93, Firefox 91.2, Firefox 78.15).
4603 | security.tls.hello_downgrade_check | boolean | true
4604 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the TLS 1.3 downgrade check is disabled.
4605 | security.tls.version.enable-deprecated | boolean | false
4606 | &nbsp;&nbsp;&nbsp;&nbsp;If true, browser will accept TLS 1.0. and TLS 1.1 (Firefox 86, Firefox 78.8).
4607 | security.warn_submit_secure_to_insecure | boolean | true
4608 | &nbsp;&nbsp;&nbsp;&nbsp;If false, no warning is shown when submitting a form from https to http.
4609 &nbsp;
4610
4611 Using the preference as the key, set the `Value` to the corresponding preference value.
4612
4613 `Status` can be "default", "locked", "user" or "clear"
4614
4615 * `"default"`: Read/Write: Settings appear as default even if factory default differs.
4616 * `"locked"`: Read-Only: Settings appear as default even if factory default differs.
4617 * `"user"`: Read/Write: Settings appear as changed if it differs from factory default.
4618 * `"clear"`: Read/Write: `Value` has no effect. Resets to factory defaults on each startup.
4619
4620 `"user"` preferences persist across invocations of Firefox. It is the equivalent of a user setting the preference. They are most useful when a preference is needed very early in startup so it can't be set as default by policy. An example of this is ```toolkit.legacyUserProfileCustomizations.stylesheets```.
4621
4622 `"user"` preferences persist even if the policy is removed, so if you need to remove them, you should use the clear policy.
4623
4624 See the examples below for more detail.
4625
4626 IMPORTANT: Make sure you're only setting a particular preference using this mechanism and not some other way.
4627
4628 Status
4629 **Compatibility:** Firefox 81, Firefox ESR 78.3\
4630 **CCK2 Equivalent:** `preferences`\
4631 **Preferences Affected:** Many
4632
4633 #### Windows (GPO)
4634 Software\Policies\Mozilla\Firefox\Preferences (REG_MULTI_SZ) =
4635 ```
4636 {
4637   "accessibility.force_disabled": {
4638     "Value": 1,
4639     "Status": "default"
4640   },
4641   "browser.cache.disk.parent_directory": {
4642     "Value": "SOME_NATIVE_PATH",
4643     "Status": "user"
4644   },
4645   "browser.tabs.warnOnClose": {
4646     "Value": false,
4647     "Status": "locked"
4648   }
4649 }
4650 ```
4651 #### Windows (Intune)
4652 OMA-URI:
4653 ```
4654 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Preferences
4655 ```
4656 Value (string):
4657 ```
4658 <enabled/>
4659 <data id="JSON" value='
4660 {
4661   "accessibility.force_disabled": {
4662     "Value": 1,
4663     "Status": "default"
4664   },
4665   "browser.cache.disk.parent_directory": {
4666     "Value": "SOME_NATIVE_PATH",
4667     "Status": "user"
4668   },
4669   "browser.tabs.warnOnClose": {
4670     "Value": false,
4671     "Status": "locked"
4672   }
4673 }'/>
4674 ```
4675 #### macOS
4676 ```
4677 <dict>
4678   <key>Preferences</key>
4679   <dict>
4680     <key>accessibility.force_disabled</key>
4681     <dict>
4682       <key>Value</key>
4683       <integer>1</integer>
4684       <key>Status</key>
4685       <string>default</string>
4686     </dict>
4687     <key>browser.cache.disk.parent_directory</key>
4688     <dict>
4689       <key>Value</key>
4690       <string>SOME_NATIVE_PATH</string>
4691       <key>Status</key>
4692       <string>user</string>
4693     </dict>
4694     <key>browser.tabs.warnOnClose</key>
4695     <dict>
4696       <key>Value</key>
4697       <false/>
4698       <key>Status</key>
4699       <string>locked</string>
4700     </dict>
4701   </dict>
4702 </dict>
4703 ```
4704 #### policies.json
4705 ```
4706 {
4707   "policies": {
4708     "Preferences": {
4709       "accessibility.force_disabled": {
4710         "Value": 1,
4711         "Status": "default"
4712       },
4713       "browser.cache.disk.parent_directory": {
4714         "Value": "SOME_NATIVE_PATH",
4715         "Status": "user"
4716       },
4717       "browser.tabs.warnOnClose": {
4718         "Value": false,
4719         "Status": "locked"
4720       }
4721     }
4722   }
4723 }
4724 ```
4725 ### Preferences (Deprecated)
4726 Set and lock certain preferences.
4727
4728 **Compatibility:** See below\
4729 **CCK2 Equivalent:** `preferences`\
4730 **Preferences Affected:** See below
4731
4732 | Preference | Type | Compatibility | Default
4733 | --- | --- | --- | ---
4734 | accessibility.force_disabled | integer | Firefox 70, Firefox ESR 68.2 | 0
4735 | &nbsp;&nbsp;&nbsp;&nbsp;If set to 1, platform accessibility is disabled.
4736 | app.update.auto (Deprecated - Switch to AppAutoUpdate policy) | boolean | Firefox 68, Firefox ESR 68 | true
4737 | &nbsp;&nbsp;&nbsp;&nbsp;If false, Firefox doesn't automatically install update.
4738 | browser.bookmarks.autoExportHTML | boolean | Firefox 70, Firefox ESR 68.2 | false
4739 | &nbsp;&nbsp;&nbsp;&nbsp;If true, bookmarks are exported on shutdown.
4740 | browser.bookmarks.file | string | Firefox 70, Firefox ESR 68.2 | N/A
4741 | &nbsp;&nbsp;&nbsp;&nbsp;If set, the name of the file where bookmarks are exported and imported.
4742 | browser.bookmarks.restore_default_bookmarks | boolean | Firefox 70, Firefox ESR 68.2 | N/A
4743 | &nbsp;&nbsp;&nbsp;&nbsp;If true, bookmarks are restored to their defaults.
4744 | browser.cache.disk.enable | boolean | Firefox 68, Firefox ESR 68 | true
4745 | &nbsp;&nbsp;&nbsp;&nbsp;If false, don't store cache on the hard drive.
4746 | ~browser.cache.disk.parent_directory~ | string | Firefox 68, Firefox ESR 68 | Profile temporary directory
4747 | &nbsp;&nbsp;&nbsp;&nbsp;~If set, changes the location of the disk cache.~ This policy doesn't work. It's being worked on.
4748 | browser.fixup.dns_first_for_single_words | boolean | Firefox 68, Firefox ESR 68 | false
4749 | &nbsp;&nbsp;&nbsp;&nbsp;If true, single words are sent to DNS, not directly to search.
4750 | browser.newtabpage.activity-stream.default.sites | string | Firefox 72, ESR 68.4 | Locale dependent
4751 | &nbsp;&nbsp;&nbsp;&nbsp;If set, a list of URLs to use as the default top sites on the new tab page. Due to Firefox limitations, search sites can't be added. In addition, sites with the same name but different TLDs (example.org/example.com) will not display properly.
4752 | browser.places.importBookmarksHTML | boolean | Firefox 70, Firefox ESR 68.2
4753 | &nbsp;&nbsp;&nbsp;&nbsp;If true, bookmarks are always imported on startup.
4754 | browser.safebrowsing.phishing.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
4755 | &nbsp;&nbsp;&nbsp;&nbsp;If false, phishing protection is not enabled (Not recommended)
4756 | browser.safebrowsing.malware.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
4757 | &nbsp;&nbsp;&nbsp;&nbsp;If false, malware protection is not enabled (Not recommended)
4758 | browser.search.update | boolean | Firefox 68, Firefox ESR 68 | true
4759 | &nbsp;&nbsp;&nbsp;&nbsp;If false, updates for search engines are not checked.
4760 | browser.slowStartup.notificationDisabled | boolean | Firefox 70, Firefox ESR 68.2 | false
4761 | &nbsp;&nbsp;&nbsp;&nbsp;If true, a notification isn't shown if startup is slow.
4762 | browser.tabs.warnOnClose | boolean | Firefox 68, Firefox ESR 68 | true
4763 | &nbsp;&nbsp;&nbsp;&nbsp;If false, there is no warning when the browser is closed.
4764 | browser.taskbar.previews.enable | boolean | Firefox 70, Firefox ESR 68.2 (Windows only) | false
4765 | &nbsp;&nbsp;&nbsp;&nbsp;If true, tab previews are shown in the Windows taskbar.
4766 | browser.urlbar.suggest.bookmark | boolean | Firefox 68, Firefox ESR 68 | true
4767 | &nbsp;&nbsp;&nbsp;&nbsp;If false, bookmarks aren't suggested when typing in the URL bar.
4768 | browser.urlbar.suggest.history | boolean | Firefox 68, Firefox ESR 68 | true
4769 | &nbsp;&nbsp;&nbsp;&nbsp;If false, history isn't suggested when typing in the URL bar.
4770 | browser.urlbar.suggest.openpage | boolean | Firefox 68, Firefox ESR 68 | true
4771 | &nbsp;&nbsp;&nbsp;&nbsp;If false, open tabs aren't suggested when typing in the URL bar.
4772 | datareporting.policy.dataSubmissionPolicyBypassNotification | boolean | Firefox 68, Firefox ESR 68 | false
4773 | &nbsp;&nbsp;&nbsp;&nbsp;If true, don't show the privacy policy tab on first run.
4774 | dom.allow_scripts_to_close_windows | boolean | Firefox 70, Firefox ESR 68.2 | false
4775 | &nbsp;&nbsp;&nbsp;&nbsp;If false, web page can close windows.
4776 | dom.disable_window_flip | boolean | Firefox 68, Firefox ESR 68 | true
4777 | &nbsp;&nbsp;&nbsp;&nbsp;If false, web pages can focus and activate windows.
4778 | dom.disable_window_move_resize | boolean | Firefox 68, Firefox ESR 68 | false
4779 | &nbsp;&nbsp;&nbsp;&nbsp;If true, web pages can't move or resize windows.
4780 | dom.event.contextmenu.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4781 | &nbsp;&nbsp;&nbsp;&nbsp;If false, web pages can't override context menus.
4782 | dom.keyboardevent.keypress.hack.dispatch_non_printable_keys.addl | string | Firefox 68, Firefox ESR 68 | N/A
4783 | &nbsp;&nbsp;&nbsp;&nbsp;See https://support.mozilla.org/en-US/kb/dom-events-changes-introduced-firefox-66
4784 | dom.keyboardevent.keypress.hack.use_legacy_keycode_and_charcode.addl | string | Firefox 68, Firefox ESR 68 | N/A
4785 | &nbsp;&nbsp;&nbsp;&nbsp;See https://support.mozilla.org/en-US/kb/dom-events-changes-introduced-firefox-66
4786 | dom.xmldocument.load.enabled | boolean | Firefox ESR 68.5 | true.
4787 | &nbsp;&nbsp;&nbsp;&nbsp;If false, XMLDocument.load is not available.
4788 | dom.xmldocument.async.enabled | boolean | Firefox ESR 68.5 | true
4789 | &nbsp;&nbsp;&nbsp;&nbsp;If false, XMLDocument.async is not available.
4790 | extensions.blocklist.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
4791 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the extensions blocklist is not used (Not recommended)
4792 | extensions.getAddons.showPane | boolean | Firefox 68, Firefox ESR 68 | N/A
4793 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the Recommendations tab is not displayed in the Add-ons Manager.
4794 | extensions.htmlaboutaddons.recommendations.enabled | boolean | Firefox 72, Firefox ESR 68.4 | true
4795 | &nbsp;&nbsp;&nbsp;&nbsp;If false, recommendations are not shown on the Extensions tab in the Add-ons Manager.
4796 | geo.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
4797 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the geolocation API is disabled. | Language dependent
4798 | intl.accept_languages | string | Firefox 70, Firefox ESR 68.2
4799 | &nbsp;&nbsp;&nbsp;&nbsp;If set, preferred language for web pages.
4800 | media.eme.enabled (Deprecated - Switch to EncryptedMediaExtensions policy) | boolean | Firefox 70, Firefox ESR 68.2 | true
4801 | &nbsp;&nbsp;&nbsp;&nbsp;If false, Encrypted Media Extensions are not enabled.
4802 | media.gmp-gmpopenh264.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4803 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the OpenH264  plugin is not downloaded.
4804 | media.gmp-widevinecdm.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4805 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the Widevine plugin is not downloaded.
4806 | media.peerconnection.enabled | boolean | Firefox 72, Firefox ESR 68.4 | true
4807 | &nbsp;&nbsp;&nbsp;&nbsp;If false, WebRTC is disabled
4808 | media.peerconnection.ice.obfuscate_host_addresses.whitelist (Deprecated) | string | Firefox 72, Firefox ESR 68.4 | N/A
4809 | &nbsp;&nbsp;&nbsp;&nbsp;If set, a list of domains for which mDNS hostname obfuscation is
4810 disabled
4811 | media.peerconnection.ice.obfuscate_host_addresses.blocklist | string | Firefox 79, Firefox ESR 78.1 | N/A
4812 | &nbsp;&nbsp;&nbsp;&nbsp;If set, a list of domains for which mDNS hostname obfuscation is
4813 disabled
4814 | network.dns.disableIPv6 | boolean | Firefox 68, Firefox ESR 68 | false
4815 | &nbsp;&nbsp;&nbsp;&nbsp;If true, IPv6 DNS lokoups are disabled.
4816 | network.IDN_show_punycode | boolean | Firefox 68, Firefox ESR 68 | false
4817 | &nbsp;&nbsp;&nbsp;&nbsp;If true, display the punycode version of internationalized domain names.
4818 | places.history.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4819 | &nbsp;&nbsp;&nbsp;&nbsp;If false, history is not enabled.
4820 | print.save_print_settings | boolean | Firefox 70, Firefox ESR 68.2 | true
4821 | &nbsp;&nbsp;&nbsp;&nbsp;If false, print settings are not saved between jobs.
4822 | security.default_personal_cert | string | Firefox 68, Firefox ESR 68 | Ask Every Time
4823 | &nbsp;&nbsp;&nbsp;&nbsp;If set to Select Automatically, Firefox automatically chooses the default personal certificate.
4824 | security.mixed_content.block_active_content | boolean | Firefox 70, Firefox ESR 68.2 | true
4825 | &nbsp;&nbsp;&nbsp;&nbsp;If false, mixed active content (HTTP and HTTPS) is not blocked.
4826 | security.osclientcerts.autoload | boolean | Firefox 72 (Windows), Firefox 75 (macOS)  | false
4827 | &nbsp;&nbsp;&nbsp;&nbsp;If true, client certificates are loaded from the operating system certificate store.
4828 | security.ssl.errorReporting.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4829 | &nbsp;&nbsp;&nbsp;&nbsp;If false, SSL errors cannot be sent to Mozilla.
4830 | security.tls.hello_downgrade_check | boolean | Firefox 72, Firefox ESR 68.4 | true
4831 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the TLS 1.3 downgrade check is disabled.
4832 | ui.key.menuAccessKeyFocuses | boolean | Firefox 68, Firefox ESR 68 | true
4833 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the Alt key doesn't show the menubar on Windows.
4834 | widget.content.gtk-theme-override | string | Firefox 72, Firefox ESR 68.4 (Linux only) | N/A
4835 | &nbsp;&nbsp;&nbsp;&nbsp;If set, overrides the GTK theme for widgets.
4836 #### Windows (GPO)
4837 ```
4838 Software\Policies\Mozilla\Firefox\Preferences\boolean_preference_name = 0x1 | 0x0
4839 Software\Policies\Mozilla\Firefox\Preferences\string_preference_name = "string_value"
4840 ```
4841 #### Windows (Intune)
4842 OMA-URI: (periods are replaced by underscores)
4843 ```
4844 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Preferences/boolean_preference_name
4845 ```
4846 Value (string):
4847 ```
4848 <enabled/> or <disabled/>
4849 ```
4850 OMA-URI: (periods are replaced by underscores)
4851 ```
4852 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Preferences/string_preference_name
4853 ```
4854 Value (string):
4855 ```
4856 <enabled/>
4857 <data id="Preferences_String" value="string_value"/>
4858 ```
4859 #### macOS
4860 ```
4861 <dict>
4862   <key>Preferences</key>
4863   <dict>
4864     <key>boolean_preference_name</key>
4865     <true/> | <false/>
4866     <key>string_preference_name</key>
4867     <string>string_value</string>
4868   </dict>
4869 </dict>
4870 ```
4871 #### policies.json
4872 ```
4873 {
4874   "policies": {
4875     "Preferences": {
4876       "boolean_preference_name": true | false,
4877       "string_preference_name": "string_value"
4878     }
4879   }
4880 }
4881 ```
4882 ### PrimaryPassword
4883 Require or prevent using a primary (formerly master) password.
4884
4885 If this value is true, a primary password is required. If this value is false, it works the same as if [`DisableMasterPasswordCreation`](#disablemasterpasswordcreation) was true and removes the primary password functionality.
4886
4887 If both DisableMasterPasswordCreation and PrimaryPassword are used, DisableMasterPasswordCreation takes precedent.
4888
4889 **Compatibility:** Firefox 79, Firefox ESR 78.1\
4890 **CCK2 Equivalent:** `noMasterPassword`\
4891 **Preferences Affected:** N/A
4892
4893 #### Windows (GPO)
4894 ```
4895 Software\Policies\Mozilla\Firefox\PrimaryPassword = 0x1 | 0x0
4896 ```
4897 #### Windows (Intune)
4898 OMA-URI:
4899 ```
4900 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PrimaryPassword
4901 ```
4902 Value (string):
4903 ```
4904 <enabled/> or <disabled/>
4905 ```
4906 #### macOS
4907 ```
4908 <dict>
4909   <key>PrimaryPassword</key>
4910   <true/> | <false/>
4911 </dict>
4912 ```
4913 #### policies.json
4914 ```
4915 {
4916   "policies": {
4917     "PrimaryPassword": true | false
4918   }
4919 }
4920 ```
4921 ### PromptForDownloadLocation
4922 Ask where to save each file before downloading.
4923
4924 **Compatibility:** Firefox 68, Firefox ESR 68\
4925 **CCK2 Equivalent:** N/A\
4926 **Preferences Affected:** `browser.download.useDownloadDir`
4927
4928 #### Windows (GPO)
4929 ```
4930 Software\Policies\Mozilla\Firefox\PromptForDownloadLocation = 0x1 | 0x0
4931 ```
4932 #### Windows (Intune)
4933 OMA-URI:
4934 ```
4935 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PromptForDownloadLocation
4936 ```
4937 Value (string):
4938 ```
4939 <enabled/> or <disabled/>
4940 ```
4941 #### macOS
4942 ```
4943 <dict>
4944   <key>PromptForDownloadLocation</key>
4945   <true/> | <false/>
4946 </dict>
4947 ```
4948 #### policies.json
4949 ```
4950 {
4951   "policies": {
4952     "PromptForDownloadLocation": true | false
4953   }
4954 }
4955 ```
4956 ### Proxy
4957 Configure proxy settings. These settings correspond to the connection settings in Firefox preferences.
4958 To specify ports, append them to the hostnames with a colon (:).
4959
4960 Unless you lock this policy, changes the user already has in place will take effect.
4961
4962 `Mode` is the proxy method being used.
4963
4964 `Locked` is whether or not proxy settings can be changed.
4965
4966 `HTTPProxy` is the HTTP proxy server.
4967
4968 `UseHTTPProxyForAllProtocols` is whether or not the HTTP proxy should be used for all other proxies.
4969
4970 `SSLProxy` is the SSL proxy server.
4971
4972 `FTPProxy` is the FTP proxy server.
4973
4974 `SOCKSProxy` is the SOCKS proxy server
4975
4976 `SOCKSVersion` is the SOCKS version (4 or 5)
4977
4978 `Passthrough` is list of hostnames or IP addresses that will not be proxied. Use `<local>` to bypass proxying for all hostnames which do not contain periods.
4979
4980 `AutoConfigURL` is a  URL for proxy configuration (only used if Mode is autoConfig).
4981
4982 `AutoLogin` means do not prompt for authentication if password is saved.
4983
4984 `UseProxyForDNS` to use proxy DNS when using SOCKS v5.
4985
4986 **Compatibility:** Firefox 60, Firefox ESR 60\
4987 **CCK2 Equivalent:** `networkProxy*`\
4988 **Preferences Affected:** `network.proxy.type`, `network.proxy.autoconfig_url`, `network.proxy.socks_remote_dns`, `signon.autologin.proxy`, `network.proxy.socks_version`, `network.proxy.no_proxies_on`, `network.proxy.share_proxy_settings`, `network.proxy.http`, `network.proxy.http_port`, `network.proxy.ftp`, `network.proxy.ftp_port`, `network.proxy.ssl`, `network.proxy.ssl_port`, `network.proxy.socks`, `network.proxy.socks_port`
4989
4990 #### Windows (GPO)
4991 ```
4992 Software\Policies\Mozilla\Firefox\Proxy\Mode = "none" | "system" | "manual" | "autoDetect" | "autoConfig"
4993 Software\Policies\Mozilla\Firefox\Proxy\Locked = 0x1 | 0x0
4994 Software\Policies\Mozilla\Firefox\=Proxy\HTTPProxy = https://httpproxy.example.com
4995 Software\Policies\Mozilla\Firefox\Proxy\UseHTTPProxyForAllProtocols = 0x1 | 0x0
4996 Software\Policies\Mozilla\Firefox\Proxy\SSLProxy = https://sslproxy.example.com
4997 Software\Policies\Mozilla\Firefox\Proxy\FTPProxy = https://ftpproxy.example.com
4998 Software\Policies\Mozilla\Firefox\Proxy\SOCKSProxy = https://socksproxy.example.com
4999 Software\Policies\Mozilla\Firefox\Proxy\SOCKSVersion = 0x4 | 0x5
5000 Software\Policies\Mozilla\Firefox\Proxy\Passthrough = <local>
5001 Software\Policies\Mozilla\Firefox\Proxy\AutoConfigURL = URL_TO_AUTOCONFIG
5002 Software\Policies\Mozilla\Firefox\Proxy\AutoLogin = 0x1 | 0x0
5003 Software\Policies\Mozilla\Firefox\Proxy\UseProxyForDNS = 0x1 | 0x0
5004 ```
5005 #### Windows (Intune)
5006 **Note**
5007 These setttings were moved to a category to make them easier to configure via Intune.
5008
5009 OMA-URI:
5010 ```
5011 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ProxySettings/Proxy_Locked
5012 ```
5013 Value (string):
5014 ```
5015 <enabled/> or <disabled/>
5016 ```
5017 OMA-URI:
5018 ```
5019 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ProxySettings/Proxy_ConnectionType
5020 ```
5021 Value (string):
5022 ```
5023 <enabled/>
5024 <data id="Proxy_ConnectionType" value="none | system | manual | autoDetect | autoConfig"/>
5025 ```
5026 OMA-URI:
5027 ```
5028 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ProxySettings/Proxy_HTTPProxy
5029 ```
5030 Value (string):
5031 ```
5032 <enabled/>
5033 <data id="Proxy_HTTPProxy" value="httpproxy.example.com"/>
5034 ```
5035 OMA-URI:
5036 ```
5037 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ProxySettings/Proxy_UseHTTPProxyForAllProtocols
5038 ```
5039 Value (string):
5040 ```
5041 <enabled/> or <disabled/>
5042 ```
5043 OMA-URI:
5044 ```
5045 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ProxySettings/Proxy_SSLProxy
5046 ```
5047 Value (string):
5048 ```
5049 <enabled/>
5050 <data id="Proxy_SSLProxy" value="sslproxy.example.com"/>
5051 ```
5052 OMA-URI:
5053 ```
5054 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ProxySettings/Proxy_SOCKSProxy
5055 ```
5056 Value (string):
5057 ```
5058 <enabled/>
5059 <data id="Proxy_SOCKSProxy" value="socksproxy.example.com"/>
5060 ```
5061 OMA-URI:
5062 ```
5063 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ProxySettings/Proxy_SOCKSVersion
5064 ```
5065 Value (string):
5066 ```
5067 <enabled/>
5068 <data id="Proxy_SOCKSVersion" value="4 | 5"/>
5069 ```
5070 OMA-URI:
5071 ```
5072 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ProxySettings/Proxy_AutoConfigURL
5073 ```
5074 Value (string):
5075 ```
5076 <enabled/>
5077 <data id="Proxy_AutoConfigURL" value="URL_TO_AUTOCONFIG"/>
5078 ```
5079 OMA-URI:
5080 ```
5081 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ProxySettings/Proxy_Passthrough
5082 ```
5083 Value (string):
5084 ```
5085 <enabled/>
5086 <data id="Proxy_Passthrough" value="<local>"/>
5087 ```
5088 OMA-URI:
5089 ```
5090 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ProxySettings/Proxy_AutoLogin
5091 ```
5092 Value (string):
5093 ```
5094 <enabled/> or <disabled/>
5095 ```
5096 OMA-URI:
5097 ```
5098 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ProxySettings/Proxy_UseProxyForDNS
5099 ```
5100 Value (string):
5101 ```
5102 <enabled/> or <disabled/>
5103 ```
5104 OMA-URI (Old way):
5105 ```
5106 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Proxy
5107 ```
5108 Value (string):
5109 ```
5110 <enabled/>
5111 <data id="ProxyLocked" value="true | false"/>
5112 <data id="ConnectionType" value="none | system | manual | autoDetect | autoConfig"/>
5113 <data id="HTTPProxy" value="httpproxy.example.com"/>
5114 <data id="UseHTTPProxyForAllProtocols" value="true | false"/>
5115 <data id="SSLProxy" value="sslproxy.example.com"/>
5116 <data id="FTPProxy" value="ftpproxy.example.com"/>
5117 <data id="SOCKSProxy" value="socksproxy.example.com"/>
5118 <data id="SOCKSVersion" value="4 | 5"/>
5119 <data id="AutoConfigURL" value="URL_TO_AUTOCONFIG"/>
5120 <data id="Passthrough" value="<local>"/>
5121 <data id="AutoLogin" value="true | false"/>
5122 <data id="UseProxyForDNS" value="true | false"/>
5123 ```
5124 #### macOS
5125 ```
5126 <dict>
5127   <key>Proxy</key>
5128   <dict>
5129     <key>Mode</key>
5130     <string>none | system | manual | autoDetect | autoConfig</string>
5131     <key>Locked</key>
5132     <true> | </false>
5133     <key>HTTPProxy</key>
5134     <string>https://httpproxy.example.com</string>
5135     <key>UseHTTPProxyForAllProtocols</key>
5136     <true> | </false>
5137     <key>SSLProxy</key>
5138     <string>https://sslproxy.example.com</string>
5139     <key>FTPProxy</key>
5140     <string>https://ftpproxy.example.com</string>
5141     <key>SOCKSProxy</key>
5142     <string>https://socksproxy.example.com</string>
5143     <key>SOCKSVersion</key>
5144     <string>4 | 5</string>
5145     <key>Passthrough</key>
5146     <string>&lt;local>&gt;</string>
5147     <key>AutoConfigURL</key>
5148     <string>URL_TO_AUTOCONFIG</string>
5149     <key>AutoLogin</key>
5150     <true> | </false>
5151     <key>UseProxyForDNS</key>
5152     <true> | </false>
5153   </dict>
5154 </dict>
5155 ```
5156 #### policies.json
5157 ```
5158 {
5159   "policies": {
5160     "Proxy": {
5161       "Mode": "none" | "system" | "manual" | "autoDetect" | "autoConfig",
5162       "Locked": true | false,
5163       "HTTPProxy": "hostname",
5164       "UseHTTPProxyForAllProtocols": true | false,
5165       "SSLProxy": "hostname",
5166       "FTPProxy": "hostname",
5167       "SOCKSProxy": "hostname",
5168       "SOCKSVersion": 4 | 5,
5169       "Passthrough": "<local>",
5170       "AutoConfigURL": "URL_TO_AUTOCONFIG",
5171       "AutoLogin": true | false,
5172       "UseProxyForDNS": true | false
5173     }
5174   }
5175 }
5176 ```
5177 ### RequestedLocales
5178 Set the the list of requested locales for the application in order of preference. It will cause the corresponding language pack to become active.
5179
5180 Note: For Firefox 68, this can now be a string so that you can specify an empty value.
5181
5182 **Compatibility:** Firefox 64, Firefox ESR 60.4, Updated in Firefox 68, Firefox ESR 68\
5183 **CCK2 Equivalent:** N/A\
5184 **Preferences Affected:** N/A
5185 #### Windows (GPO)
5186 ```
5187 Software\Policies\Mozilla\Firefox\RequestedLocales\1 = "de"
5188 Software\Policies\Mozilla\Firefox\RequestedLocales\2 = "en-US"
5189
5190 or
5191
5192 Software\Policies\Mozilla\Firefox\RequestedLocales = "de,en-US"
5193 ```
5194 #### Windows (Intune)
5195 OMA-URI:
5196 ```
5197 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/RequestedLocalesString
5198 ```
5199 Value (string):
5200 ```
5201 <enabled/>
5202 <data id="Preferences_String" value="de,en-US"/>
5203 ```
5204 #### macOS
5205 ```
5206 <dict>
5207   <key>RequestedLocales</key>
5208   <array>
5209     <string>de</string>
5210     <string>en-US</string>
5211   </array>
5212 </dict>
5213
5214 or
5215
5216 <dict>
5217   <key>RequestedLocales</key>
5218   <string>de,en-US</string>
5219 </dict>
5220
5221 ```
5222 #### policies.json
5223 ```
5224 {
5225   "policies": {
5226     "RequestedLocales": ["de", "en-US"]
5227   }
5228 }
5229
5230 or
5231
5232 {
5233   "policies": {
5234     "RequestedLocales": "de,en-US"
5235   }
5236 }
5237 ```
5238 <a name="SanitizeOnShutdown"></a>
5239
5240 ### SanitizeOnShutdown (Selective)
5241 Clear data on shutdown. Choose from Cache, Cookies, Download History, Form & Search History, Browsing History, Active Logins, Site Preferences and Offline Website Data.
5242
5243 Previously, these values were always locked. Starting with Firefox 74 and Firefox ESR 68.6, you can use the `Locked` option to either keep the values unlocked (set it to false), or lock only the values you set (set it to true). If you want the old behavior of locking everything, do not set `Locked` at all.
5244
5245 **Compatibility:** Firefox 68, Firefox ESR 68 (Locked added in 74/68.6)\
5246 **CCK2 Equivalent:** N/A\
5247 **Preferences Affected:** `privacy.sanitize.sanitizeOnShutdown`, `privacy.clearOnShutdown.cache`, `privacy.clearOnShutdown.cookies`, `privacy.clearOnShutdown.downloads`, `privacy.clearOnShutdown.formdata`, `privacy.clearOnShutdown.history`, `privacy.clearOnShutdown.sessions`, `privacy.clearOnShutdown.siteSettings`, `privacy.clearOnShutdown.offlineApps`
5248 #### Windows (GPO)
5249 ```
5250 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Cache = 0x1 | 0x0
5251 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Cookies = 0x1 | 0x0
5252 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Downloads = 0x1 | 0x0
5253 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\FormData = 0x1 | 0x0
5254 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\History = 0x1 | 0x0
5255 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Sessions = 0x1 | 0x0
5256 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\SiteSettings = 0x1 | 0x0
5257 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\OfflineApps = 0x1 | 0x0
5258 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Locked = 0x1 | 0x0
5259 ```
5260 #### Windows (Intune)
5261 OMA-URI:
5262 ```
5263 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/A_SanitizeOnShutdown_Cache
5264 ```
5265 Value (string):
5266 ```
5267 <enabled/> or <disabled/>
5268 ```
5269 OMA-URI:
5270 ```
5271 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/B_SanitizeOnShutdown_Cookies
5272 ```
5273 Value (string):
5274 ```
5275 <enabled/> or <disabled/>
5276 ```
5277 OMA-URI:
5278 ```
5279 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/C_SanitizeOnShutdown_Downloads
5280 ```
5281 Value (string):
5282 ```
5283 <enabled/> or <disabled/>
5284 ```
5285 OMA-URI:
5286 ```
5287 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/D_SanitizeOnShutdown_FormData
5288 ```
5289 Value (string):
5290 ```
5291 <enabled/> or <disabled/>
5292 ```
5293 OMA-URI:
5294 ```
5295 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/E_SanitizeOnShutdown_History
5296 ```
5297 Value (string):
5298 ```
5299 <enabled/> or <disabled/>
5300 ```
5301 OMA-URI:
5302 ```
5303 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/F_SanitizeOnShutdown_Sessions
5304 ```
5305 Value (string):
5306 ```
5307 <enabled/> or <disabled/>
5308 ```
5309 OMA-URI:
5310 ```
5311 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/G_SanitizeOnShutdown_SiteSettings
5312 ```
5313 Value (string):
5314 ```
5315 <enabled/> or <disabled/>
5316 ```
5317 OMA-URI:
5318 ```
5319 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/H_SanitizeOnShutdown_OfflineApps
5320 ```
5321 Value (string):
5322 ```
5323 <enabled/> or <disabled/>
5324 ```
5325 OMA-URI:
5326 ```
5327 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/I_SanitizeOnShutdown_Locked
5328 ```
5329 Value (string):
5330 ```
5331 <enabled/> or <disabled/>
5332 ```
5333 #### macOS
5334 ```
5335 <dict>
5336   <key>SanitizeOnShutdown</key>
5337   <dict>
5338     <key>Cache</key>
5339     <true/> | <false/>
5340     <key>Cookies</key>
5341     <true/> | <false/>
5342     <key>Downloads</key>
5343     <true/> | <false/>
5344     <key>FormData</key>
5345     <true/> | <false/>
5346     <key>History</key>
5347     <true/> | <false/>
5348     <key>Sessions</key>
5349     <true/> | <false/>
5350     <key>SiteSettings</key>
5351     <true/> | <false/>
5352     <key>OfflineApps</key>
5353     <true/> | <false/>
5354     <key>Locked</key>
5355     <true/> | <false/>
5356   </dict>
5357 </dict>
5358 ```
5359 #### policies.json
5360 ```
5361 {
5362   "policies": {
5363     "SanitizeOnShutdown": {
5364       "Cache": true | false,
5365       "Cookies": true | false,
5366       "Downloads": true | false,
5367       "FormData": true | false,
5368       "History": true | false,
5369       "Sessions": true | false,
5370       "SiteSettings": true | false,
5371       "OfflineApps": true | false,
5372       "Locked": true | false
5373     }
5374   }
5375 }
5376 ```
5377 ### SanitizeOnShutdown (All)
5378 Clear all data on shutdown, including Browsing & Download History, Cookies, Active Logins, Cache, Form & Search History, Site Preferences and Offline Website Data.
5379
5380 **Compatibility:** Firefox 60, Firefox ESR 60\
5381 **CCK2 Equivalent:** N/A\
5382 **Preferences Affected:** `privacy.sanitize.sanitizeOnShutdown`, `privacy.clearOnShutdown.cache`, `privacy.clearOnShutdown.cookies`, `privacy.clearOnShutdown.downloads`, `privacy.clearOnShutdown.formdata`, `privacy.clearOnShutdown.history`, `privacy.clearOnShutdown.sessions`, `privacy.clearOnShutdown.siteSettings`, `privacy.clearOnShutdown.offlineApps`
5383 #### Windows (GPO)
5384 ```
5385 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown = 0x1 | 0x0
5386 ```
5387 #### Windows (Intune)
5388 OMA-URI:
5389 ```
5390 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/C_SanitizeOnShutdown
5391 ```
5392 Value (string):
5393 ```
5394 <enabled/> or <disabled/>
5395 ```
5396 #### macOS
5397 ```
5398 <dict>
5399   <key>SanitizeOnShutdown</key>
5400   <true/> | <false/>
5401 </dict>
5402 ```
5403 #### policies.json
5404 ```
5405 {
5406   "policies": {
5407     "SanitizeOnShutdown": true | false
5408   }
5409 }
5410 ```
5411 ### SearchBar
5412 Set whether or not search bar is displayed.
5413
5414 **Compatibility:** Firefox 60, Firefox ESR 60\
5415 **CCK2 Equivalent:** `showSearchBar`\
5416 **Preferences Affected:** N/A
5417
5418 #### Windows (GPO)
5419 ```
5420 Software\Policies\Mozilla\Firefox\SearchBar = "unified" | "separate"
5421 ```
5422
5423 #### Windows (Intune)
5424 OMA-URI:
5425 ```
5426 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SearchBar
5427 ```
5428 Value (string):
5429 ```
5430 <enabled/>
5431 <data id="SearchBar" value="unified | separate"/>
5432 ```
5433 #### macOS
5434 ```
5435 <dict>
5436   <key>SearchBar</key>
5437   <string>unified | separate</string>
5438 </dict>
5439 ```
5440 #### policies.json
5441 ```
5442 {
5443   "policies": {
5444     "SearchBar": "unified" | "separate"
5445   }
5446 }
5447 ```
5448 <a name="SearchEngines"></a>
5449
5450 ### SearchEngines (This policy is only available on the ESR.)
5451
5452 ### SearchEngines | Add
5453
5454 Add new search engines. Although there are only five engines available in the ADMX template, there is no limit. To add more in the ADMX template, you can duplicate the XML.
5455
5456 This policy is only available on the ESR. `Name` and `URLTemplate` are required.
5457
5458 `Name` is the name of the search engine.
5459
5460 `URLTemplate` is the search URL with {searchTerms} to substitute for the search term.
5461
5462 `Method` is either GET or POST
5463
5464 `IconURL` is a URL for the icon to use.
5465
5466 `Alias` is a keyword to use for the engine.
5467
5468 `Description` is a description of the search engine.
5469
5470 `PostData` is the POST data as name value pairs separated by &.
5471
5472 `SuggestURLTemplate` is a search suggestions URL with {searchTerms} to substitute for the search term.
5473
5474 `Encoding` is the query charset for the engine. It defaults to UTF-8.
5475
5476 **Compatibility:** Firefox ESR 60 (POST support in Firefox ESR 68, Encoding support in Firefox 91)\
5477 **CCK2 Equivalent:** `searchplugins`\
5478 **Preferences Affected:** N/A
5479
5480 #### Windows (GPO)
5481 ```
5482 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Name = "Example1"
5483 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\URLTemplate = "https://www.example.org/q={searchTerms}"
5484 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Method = "GET" | "POST"
5485 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\IconURL = "https://www.example.org/favicon.ico"
5486 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Alias = "example"
5487 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Description = "Example Description"
5488 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\SuggestURLTemplate = "https://www.example.org/suggestions/q={searchTerms}"
5489 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\PostData = "name=value&q={searchTerms}"
5490 ```
5491 #### Windows (Intune)
5492 OMA-URI:
5493 ```
5494 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_1
5495 ```
5496 Value (string):
5497 ```
5498 <enabled/>
5499 <data id="SearchEngine_Name" value="Example1"/>
5500 <data id="SearchEngine_URLTemplate" value="https://www.example.org/q={searchTerms"/>
5501 <data id="SearchEngine_Method" value="GET | POST"/>
5502 <data id="SearchEngine_IconURL" value="https://www.example.org/favicon.ico"/>
5503 <data id="SearchEngine_Alias" value="example"/>
5504 <data id="SearchEngine_Description" value="Example Description"/>
5505 <data id="SearchEngine_SuggestURLTemplate" value="https://www.example.org/suggestions/q={searchTerms}"/>
5506 <data id="SearchEngine_PostData" value="name=value&amp;q={searchTerms}"/>
5507 ```
5508 #### macOS
5509 ```
5510 <dict>
5511   <key>SearchEngines</key>
5512   <dict>
5513     <key>Add</key>
5514     <array>
5515       <dict>
5516         <key>Name</key>
5517         <string>Example1</string>
5518         <key>URLTemplate</key>
5519         <string>https://www.example.org/q={searchTerms}</string>
5520         <key>Method</key>
5521         <string>GET | POST </string>
5522         <key>IconURL</key>
5523         <string>https://www.example.org/favicon.ico</string>
5524         <key>Alias</key>
5525         <string>example</string>
5526         <key>Description</key>
5527         <string>Example Description</string>
5528         <key>SuggestURLTemplate</key>
5529         <string>https://www.example.org/suggestions/q={searchTerms}</string>
5530         <key>PostData</key>
5531         <string>name=value&q={searchTerms}</string>
5532       </dict>
5533     <array>
5534   </dict>
5535 </dict>
5536 ```
5537 #### policies.json
5538 ```
5539 {
5540   "policies": {
5541     "SearchEngines": {
5542       "Add": [
5543         {
5544           "Name": "Example1",
5545           "URLTemplate": "https://www.example.org/q={searchTerms}",
5546           "Method": "GET" | "POST",
5547           "IconURL": "https://www.example.org/favicon.ico",
5548           "Alias": "example",
5549           "Description": "Description",
5550           "PostData": "name=value&q={searchTerms}",
5551           "SuggestURLTemplate": "https://www.example.org/suggestions/q={searchTerms}"
5552         }
5553       ]
5554     }
5555   }
5556 }
5557 ```
5558 ### SearchEngines | Default
5559
5560 Set the default search engine. This policy is only available on the ESR.
5561
5562 **Compatibility:** Firefox ESR 60\
5563 **CCK2 Equivalent:** `defaultSearchEngine`\
5564 **Preferences Affected:** N/A
5565
5566 #### Windows (GPO)
5567 ```
5568 Software\Policies\Mozilla\Firefox\SearchEngines\Default = NAME_OF_SEARCH_ENGINE
5569 ```
5570 #### Windows (Intune)
5571 OMA-URI:
5572 ```
5573 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_Default
5574 ```
5575 Value (string):
5576 ```
5577 <enabled/>
5578 <data id="SearchEngines_Default" value="NAME_OF_SEARCH_ENGINE"/>
5579 ```
5580 #### macOS
5581 ```
5582 <dict>
5583   <key>SearchEngines</key>
5584   <dict>
5585     <key>Default</key>
5586     <string>NAME_OF_SEARCH_ENGINE</string>
5587   </dict>
5588 </dict>
5589 ```
5590 #### policies.json
5591 ```
5592 {
5593   "policies": {
5594     "SearchEngines": {
5595       "Default": "NAME_OF_SEARCH_ENGINE"
5596     }
5597   }
5598 }
5599 ```
5600 ### SearchEngines | PreventInstalls
5601
5602 Prevent installing search engines from webpages.
5603
5604 **Compatibility:** Firefox ESR 60\
5605 **CCK2 Equivalent:** `disableSearchEngineInstall`\
5606 **Preferences Affected:** N/A
5607
5608 #### Windows (GPO)
5609 ```
5610 Software\Policies\Mozilla\Firefox\SearchEngines\PreventInstalls = 0x1 | 0x0
5611 ```
5612 #### Windows (Intune)
5613 OMA-URI:
5614 ```
5615 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_PreventInstalls
5616 ```
5617 Value (string):
5618 ```
5619 <enabled/> or <disabled/>
5620 ```
5621 #### macOS
5622 ```
5623 <dict>
5624   <key>SearchEngines</key>
5625   <dict>
5626     <key>PreventInstalls</key>
5627     <true/> | <false/>
5628   </dict>
5629 </dict>
5630 ```
5631 #### policies.json
5632 ```
5633 {
5634   "policies": {
5635     "SearchEngines": {
5636       "PreventInstalls": true | false
5637     }
5638   }
5639 }
5640 ```
5641 ### SearchEngines | Remove
5642
5643 Hide built-in search engines. This policy is only available on the ESR.
5644
5645 **Compatibility:** Firefox ESR 60.2\
5646 **CCK2 Equivalent:** `removeDefaultSearchEngines` (removed all built-in engines)\
5647 **Preferences Affected:** N/A
5648
5649 #### Windows (GPO)
5650 ```
5651 Software\Policies\Mozilla\Firefox\SearchEngines\Remove\1 = NAME_OF_SEARCH_ENGINE
5652 ```
5653 #### Windows (Intune)
5654 OMA-URI:
5655 ```
5656 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_Remove
5657 ```
5658 Value (string):
5659 ```
5660 <enabled/>
5661 <data id="SearchEngines_Remove" value="1&#xF000;NAME_OF_SEARCH_ENGINE"/>
5662 ```
5663 #### macOS
5664 ```
5665 <dict>
5666   <key>SearchEngines</key>
5667   <dict>
5668     <key>Remove</key>
5669     <array>
5670       <string>NAME_OF_SEARCH_ENGINE</string>
5671     </array>
5672   </dict>
5673 </dict>
5674 ```
5675 #### policies.json
5676 ```
5677 {
5678   "policies": {
5679     "SearchEngines": {
5680       "Remove": ["NAME_OF_SEARCH_ENGINE"]
5681     }
5682   }
5683 }
5684 ```
5685 ### SearchSuggestEnabled
5686
5687 Enable search suggestions.
5688
5689 **Compatibility:** Firefox 68, Firefox ESR 68\
5690 **CCK2 Equivalent:** N/A\
5691 **Preferences Affected:** `browser.urlbar.suggest.searches`, `browser.search.suggest.enabled`
5692
5693 #### Windows (GPO)
5694 ```
5695 Software\Policies\Mozilla\Firefox\SearchSuggestEnabled = 0x1 | 0x0
5696 ```
5697 #### Windows (Intune)
5698 OMA-URI:
5699 ```
5700 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchSuggestEnabled
5701 ```
5702 Value (string):
5703 ```
5704 <enabled/> or <disabled/>
5705 ```
5706 #### macOS
5707 ```
5708 <dict>
5709   <key>SearchSuggestEnabled</key>
5710   <true/> | <false/>
5711 </dict>
5712 ```
5713 #### policies.json
5714 ```
5715 {
5716   "policies": {
5717     "SearchSuggestEnabled": true | false
5718   }
5719 }
5720 ```
5721 ### SecurityDevices
5722
5723 Install PKCS #11 modules.
5724
5725 **Compatibility:** Firefox 64, Firefox ESR 60.4\
5726 **CCK2 Equivalent:** `certs.devices`\
5727 **Preferences Affected:** N/A
5728
5729 #### Windows (GPO)
5730 ```
5731 Software\Policies\Mozilla\Firefox\SecurityDevices\NAME_OF_DEVICE = PATH_TO_LIBRARY_FOR_DEVICE
5732 ```
5733 #### Windows (Intune)
5734 OMA-URI:
5735 ```
5736 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SecurityDevices
5737 ```
5738 Value (string):
5739 ```
5740 <enabled/>
5741 <data id="SecurityDevices" value="NAME_OF_DEVICE&#xF000;PATH_TO_LIBRARY_FOR_DEVICE"/>
5742 ```
5743 #### macOS
5744 ```
5745 <dict>
5746   <key>SecurityDevices</key>
5747   <dict>
5748     <key>NAME_OF_DEVICE</key>
5749     <string>PATH_TO_LIBRARY_FOR_DEVICE</string>
5750   </dict>
5751 </dict>
5752 ```
5753
5754 #### policies.json
5755 ```
5756 {
5757   "policies": {
5758     "SecurityDevices": {
5759       "NAME_OF_DEVICE": "PATH_TO_LIBRARY_FOR_DEVICE"
5760     }
5761   }
5762 }
5763 ```
5764 ### ShowHomeButton
5765 Show the home button on the toolbar.
5766
5767 Future versions of Firefox will not show the home button by default.
5768
5769 **Compatibility:** Firefox 88, Firefox ESR 78.10\
5770 **CCK2 Equivalent:** N/A\
5771 **Preferences Affected:** N/A
5772
5773 #### Windows (GPO)
5774 ```
5775 Software\Policies\Mozilla\Firefox\ShowHomeButton = 0x1 | 0x0
5776 ```
5777 #### Windows (Intune)
5778 OMA-URI:
5779 ```
5780 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/Homepage_ShowHomeButton
5781 ```
5782 Value (string):
5783 ```
5784 <enabled/> or <disabled/>
5785 ```
5786 #### macOS
5787 ```
5788 <dict>
5789   <key>ShowHomeButton</key>
5790   <true/> | <false/>
5791 </dict>
5792 ```
5793 #### policies.json
5794 ```
5795 {
5796   "policies": {
5797     "ShowHomeButton": true | false
5798   }
5799 }
5800 ```
5801 ### SSLVersionMax
5802
5803 Set and lock the maximum version of TLS.
5804
5805 **Compatibility:** Firefox 66, Firefox ESR 60.6\
5806 **CCK2 Equivalent:** N/A\
5807 **Preferences Affected:** `security.tls.version.max`
5808
5809 #### Windows (GPO)
5810 ```
5811 Software\Policies\Mozilla\Firefox\SSLVersionMax = "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
5812 ```
5813 #### Windows (Intune)
5814 OMA-URI:
5815 ```
5816 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SSLVersionMax
5817 ```
5818 Value (string):
5819 ```
5820 <enabled/>
5821 <data id="SSLVersion" value="tls1 | tls1.2 | tls1.3"/>
5822 ```
5823 #### macOS
5824 ```
5825 <dict>
5826   <key>SSLVersionMax</key>
5827   <string>tls1 | tls1.1 | tls1.2 | tls1.3</string>
5828 </dict>
5829 ```
5830
5831 #### policies.json
5832 ```
5833 {
5834   "policies": {
5835     "SSLVersionMax": "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
5836   }
5837 }
5838 ```
5839 ### SSLVersionMin
5840
5841 Set and lock the minimum version of TLS.
5842
5843 **Compatibility:** Firefox 66, Firefox ESR 60.6\
5844 **CCK2 Equivalent:** N/A\
5845 **Preferences Affected:** `security.tls.version.min`
5846
5847 #### Windows (GPO)
5848 ```
5849 Software\Policies\Mozilla\Firefox\SSLVersionMin = "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
5850 ```
5851 #### Windows (Intune)
5852 OMA-URI:
5853 ```
5854 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SSLVersionMin
5855 ```
5856 Value (string):
5857 ```
5858 <enabled/>
5859 <data id="SSLVersion" value="tls1 | tls1.2 | tls1.3"/>
5860 ```
5861 #### macOS
5862 ```
5863 <dict>
5864   <key>SSLVersionMin</key>
5865   <string>tls1 | tls1.1 | tls1.2 | tls1.3</string>
5866 </dict>
5867 ```
5868
5869 #### policies.json
5870 ```
5871 {
5872   "policies": {
5873     "SSLVersionMin": "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
5874   }
5875 }
5876 ```
5877 ### SupportMenu
5878 Add a menuitem to the help menu for specifying support information.
5879
5880 **Compatibility:** Firefox 68.0.1, Firefox ESR 68.0.1\
5881 **CCK2 Equivalent:** helpMenu\
5882 **Preferences Affected:** N/A
5883
5884 #### Windows (GPO)
5885 ```
5886 Software\Policies\Mozilla\Firefox\SupportMenu\Title = "Support Menu"
5887 Software\Policies\Mozilla\Firefox\SupportMenu\URL = "http://example.com/support"
5888 Software\Policies\Mozilla\Firefox\SupportMenu\AccessKey = "S"
5889 ```
5890 #### Windows (Intune)
5891 OMA-URI:
5892 ```
5893 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SupportMenu
5894 ```
5895 Value (string):
5896 ```
5897 <enabled/>
5898 <data id="SupportMenuTitle" value="Support Menu"/>
5899 <data id="SupportMenuURL" value="http://example.com/support"/>
5900 <data id="SupportMenuAccessKey" value="S"/>
5901 ```
5902 #### macOS
5903 ```
5904 <dict>
5905   <key>SupportMenu</key>
5906   <dict>
5907     <key>Title</key>
5908     <string>SupportMenu</string>
5909     <key>URL</key>
5910     <string>http://example.com/support</string>
5911     <key>AccessKey</key>
5912     <string>S</string>
5913   </dict>
5914 </dict>
5915 ```
5916 #### policies.json
5917 ```
5918 {
5919   "policies": {
5920     "SupportMenu": {
5921       "Title": "Support Menu",
5922       "URL": "http://example.com/support",
5923       "AccessKey": "S"
5924     }
5925   }
5926 }
5927 ```
5928 ### StartDownloadsInTempDirectory
5929 Force downloads to start off in a local, temporary location rather than the default download directory.
5930
5931 **Compatibility:** Firefox 102\
5932 **CCK2 Equivalent:** N/A\
5933 **Preferences Affected:** `browser.download.start_downloads_in_tmp_dir`
5934
5935 #### Windows (GPO)
5936 ```
5937 Software\Policies\Mozilla\Firefox\StartDownloadsInTempDirectory = 0x1 | 0x0
5938 ```
5939 #### Windows (Intune)
5940 OMA-URI:
5941 ```
5942 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/StartDownloadsInTempDirectory
5943 ```
5944 Value (string):
5945 ```
5946 <enabled/> or <disabled/>
5947 ```
5948 #### macOS
5949 ```
5950 <dict>
5951   <key>StartDownloadsInTempDirectory</key>
5952   <true/> | <false/>
5953 </dict>
5954 ```
5955 #### policies.json
5956 ```
5957 {
5958   "policies": {
5959     "StartDownloadsInTempDirectory": true | false
5960 }
5961 ```
5962 ### UserMessaging
5963
5964 Prevent Firefox from messaging the user in certain situations.
5965
5966 `WhatsNew` Remove the "What's New" icon and menuitem.
5967
5968 `ExtensionRecommendations` If false, don't recommend extensions while the user is visiting web pages.
5969
5970 `FeatureRecommendations` If false, don't recommend browser features.
5971
5972 `UrlbarInterventions` If false, Don't offer Firefox specific suggestions in the URL bar.
5973
5974 `SkipOnboarding` If true, don't show onboarding messages on the new tab page.
5975
5976 `MoreFromMozilla` If false, don't show the "More from Mozilla" section in Preferences. (Firefox 98)
5977
5978 **Compatibility:** Firefox 75, Firefox ESR 68.7\
5979 **CCK2 Equivalent:** N/A\
5980 **Preferences Affected:** `browser.messaging-system.whatsNewPanel.enabled`, `browser.newtabpage.activity-stream.asrouter.userprefs.cfr.addons`, `browser.newtabpage.activity-stream.asrouter.userprefs.cfr.features`, `browser.aboutwelcome.enabled`, `browser.preferences.moreFromMozilla`
5981
5982 #### Windows (GPO)
5983 ```
5984 Software\Policies\Mozilla\Firefox\UserMessaging\WhatsNew = 0x1 | 0x0
5985 Software\Policies\Mozilla\Firefox\UserMessaging\ExtensionRecommendations = 0x1 | 0x0
5986 Software\Policies\Mozilla\Firefox\UserMessaging\FeatureRecommendations = 0x1 | 0x0
5987 Software\Policies\Mozilla\Firefox\UserMessaging\UrlbarInterventions = 0x1 | 0x0
5988 Software\Policies\Mozilla\Firefox\UserMessaging\SkipOnboarding = 0x1 | 0x0
5989 Software\Policies\Mozilla\Firefox\UserMessaging\MoreFromMozilla = 0x1 | 0x0
5990 ```
5991 #### Windows (Intune)
5992 OMA-URI:
5993 ```
5994 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_WhatsNew
5995 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_ExtensionRecommendations
5996 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_FeatureRecommendations
5997 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_UrlbarInterventions
5998 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_SkipOnboarding
5999 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_MoreFromMozilla
6000 ```
6001 Value (string):
6002 ```
6003 <enabled/> or <disabled/>
6004 ```
6005 #### macOS
6006 ```
6007 <dict>
6008   <key>UserMessaging</key>
6009   <dict>
6010     <key>WhatsNew</key>
6011     <true/> | <false/>
6012     <key>ExtensionRecommendations</key>
6013     <true/> | <false/>
6014     <key>FeatureRecommendations</key>
6015     <true/> | <false/>
6016     <key>UrlbarInterventions</key>
6017     <true/> | <false/>
6018     <key>SkipOnboarding</key>
6019     <true/> | <false/>
6020     <key>MoreFromMozilla</key>
6021     <true/> | <false/>
6022   </dict>
6023 </dict>
6024 ```
6025 #### policies.json
6026 ```
6027 {
6028   "policies": {
6029     "UserMessaging": {
6030       "WhatsNew": true | false,
6031       "ExtensionRecommendations": true | false,
6032       "FeatureRecommendations": true | false,
6033       "UrlbarInterventions": true | false,
6034       "SkipOnboarding": true | false,
6035       "MoreFromMozilla": true | false
6036     }
6037   }
6038 }
6039 ```
6040 ### UseSystemPrintDialog
6041 Use the system print dialog instead of the print preview window.
6042
6043 **Compatibility:** Firefox 102\
6044 **CCK2 Equivalent:** N/A\
6045 **Preferences Affected:** `print.prefer_system_dialog`
6046
6047 #### Windows (GPO)
6048 ```
6049 Software\Policies\Mozilla\Firefox\UseSystemPrintDialog = 0x1 | 0x0
6050 ```
6051 #### Windows (Intune)
6052 OMA-URI:
6053 ```
6054 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/UseSystemPrintDialog
6055 ```
6056 Value (string):
6057 ```
6058 <enabled/> or <disabled/>
6059 ```
6060 #### macOS
6061 ```
6062 <dict>
6063   <key>UseSystemPrintDialog</key>
6064   <true/> | <false/>
6065 </dict>
6066 ```
6067 #### policies.json
6068 ```
6069 {
6070   "policies": {
6071     "UseSystemPrintDialog": true | false
6072   }
6073 }
6074 ```
6075 ### WebsiteFilter
6076 Block websites from being visited. The parameters take an array of Match Patterns, as documented in https://developer.mozilla.org/en-US/Add-ons/WebExtensions/Match_patterns.
6077 The arrays are limited to 1000 entries each.
6078
6079 If you want to block all URLs, you can use `<all_urls>` or `*://*/*`. You can't have just a `*` on the right side.
6080
6081 For specific protocols, use `https://*/*` or `http://*/*`.
6082
6083 As of Firefox 83 and Firefox ESR 78.5, file URLs are supported.
6084
6085 **Compatibility:** Firefox 60, Firefox ESR 60\
6086 **CCK2 Equivalent:** N/A\
6087 **Preferences Affected:** N/A
6088
6089 #### Windows (GPO)
6090 ```
6091 Software\Policies\Mozilla\Firefox\WebsiteFilter\Block\1 = "<all_urls>"
6092 Software\Policies\Mozilla\Firefox\WebsiteFilter\Exceptions\1 = "http://example.org/*"
6093 ```
6094 #### Windows (Intune)
6095 OMA-URI:
6096 ```
6097 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/B_WebsiteFilter_Block
6098 ```
6099 Value (string):
6100 ```
6101 <enabled/> <data id="WebsiteFilter" value="1&#xF000;&#60;all_urls&#62;"/>
6102 ```
6103 OMA-URI:
6104 ```
6105 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/B_WebsiteFilter_Exceptions
6106 ```
6107 Value (string):
6108 ```
6109 <enabled/>
6110 <data id="WebsiteFilter" value="1&#xF000;http://example.org/*"/>
6111 ```
6112 #### macOS
6113 ```
6114 <dict>
6115   <key>WebsiteFilter</key>
6116   <dict>
6117     <key>Block</key>
6118     <array>
6119       <string><all_urls></string>
6120     </array>
6121     <key>Exceptions</key>
6122     <array>
6123       <string>http://example.org/*</string>
6124     </array>
6125   </dict>
6126
6127 </dict>
6128 ```
6129 #### policies.json
6130 ```
6131 {
6132   "policies": {
6133     "WebsiteFilter": {
6134       "Block": ["<all_urls>"],
6135       "Exceptions": ["http://example.org/*"]
6136     }
6137   }
6138 }
6139 ```
6140 ### WindowsSSO
6141 Allow Windows single sign-on for Microsoft, work, and school accounts.
6142
6143 If this policy is set to true, Firefox will use credentials stored in Windows to sign in to Microsoft, work, and school accounts.
6144
6145 **Compatibility:** Firefox 91\
6146 **CCK2 Equivalent:** N/A\
6147 **Preferences Affected:** `network.http.windows-sso.enabled`
6148
6149 #### Windows (GPO)
6150 ```
6151 Software\Policies\Mozilla\Firefox\WindowsSSO = 0x1 | 0x0
6152 ```
6153 #### Windows (Intune)
6154 OMA-URI:
6155 ```
6156 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/WindowsSSO
6157 ```
6158 Value (string):
6159 ```
6160 <enabled/> or <disabled/>
6161 ```
6162 #### policies.json
6163 ```
6164 {
6165   "policies": {
6166     "WindowsSSO": true | false
6167   }
6168 }
6169 ```