README.md

   1 **These policies are in active development and so might contain changes that do not work with current versions of Firefox.**
   2
   3 **You should use the [officially released versions](https://github.com/mozilla/policy-templates/releases) if you are deploying changes.**
   4
   5 Policies can be specified using the [Group Policy templates on Windows](https://github.com/mozilla/policy-templates/tree/master/windows), [Intune on Windows](https://support.mozilla.org/kb/managing-firefox-intune), [configuration profiles on macOS](https://github.com/mozilla/policy-templates/tree/master/mac), or by creating a file called `policies.json`. On Windows, create a directory called `distribution` where the EXE is located and place the file there. On Mac, the file goes into `Firefox.app/Contents/Resources/distribution`.  On Linux, the file goes into `firefox/distribution`, where `firefox` is the installation directory for firefox, which varies by distribution or you can specify system-wide policy by placing the file in `/etc/firefox/policies`.
   6
   7 | Policy Name | Description
   8 | --- | --- |
   9 | **[`3rdparty`](#3rdparty)** | Set policies that WebExtensions can access via chrome.storage.managed.
  10 | **[`AllowedDomainsForApps`](#alloweddomainsforapps)** | Define domains allowed to access Google Workspace.
  11 | **[`AppAutoUpdate`](#appautoupdate)** | Enable or disable automatic application update.
  12 | **[`AppUpdatePin`](#appupdatepin)** | Prevent Firefox from being updated beyond the specified version.
  13 | **[`AppUpdateURL`](#appupdateurl)** | Change the URL for application update.
  14 | **[`Authentication`](#authentication)** | Configure sites that support integrated authentication.
  15 | **[`AutoLaunchProtocolsFromOrigins`](#autolaunchprotocolsfromorigins)** | Define a list of external protocols that can be used from listed origins without prompting the user.
  16 | **[`BackgroundAppUpdate`](#backgroundappupdate)** | Enable or disable the background updater (Windows only).
  17 | **[`BlockAboutAddons`](#blockaboutaddons)** | Block access to the Add-ons Manager (about:addons).
  18 | **[`BlockAboutConfig`](#blockaboutconfig)** | Block access to about:config.
  19 | **[`BlockAboutProfiles`](#blockaboutprofiles)** | Block access to About Profiles (about:profiles).
  20 | **[`BlockAboutSupport`](#blockaboutsupport)** | Block access to Troubleshooting Information (about:support).
  21 | **[`Bookmarks`](#bookmarks)** | Add bookmarks in either the bookmarks toolbar or menu.
  22 | **[`CaptivePortal`](#captiveportal)** | Enable or disable the detection of captive portals.
  23 | **[`Certificates`](#certificates)** |
  24 | **[`Certificates -> ImportEnterpriseRoots`](#certificates--importenterpriseroots)** | Trust certificates that have been added to the operating system certificate store by a user or administrator.
  25 | **[`Certificates -> Install`](#certificates--install)** | Install certificates into the Firefox certificate store.
  26 | **[`Cookies`](#cookies)** | Configure cookie preferences.
  27 | **[`DefaultDownloadDirectory`](#defaultdownloaddirectory)** | Set the default download directory.
  28 | **[`DisableAppUpdate`](#disableappupdate)** | Turn off application updates.
  29 | **[`DisableBuiltinPDFViewer`](#disablebuiltinpdfviewer)** | Disable the built in PDF viewer.
  30 | **[`DisabledCiphers`](#disabledciphers)** | Disable ciphers.
  31 | **[`DisableDefaultBrowserAgent`](#disabledefaultbrowseragent)** | Prevent the default browser agent from taking any actions (Windows only).
  32 | **[`DisableDeveloperTools`](#disabledevelopertools)** | Remove access to all developer tools.
  33 | **[`DisableFeedbackCommands`](#disablefeedbackcommands)** | Disable the menus for reporting sites.
  34 | **[`DisableFirefoxAccounts`](#disablefirefoxaccounts)** | Disable Firefox Accounts integration (Sync).
  35 | **[`DisableFirefoxScreenshots`](#disablefirefoxscreenshots)** | Remove access to Firefox Screenshots.
  36 | **[`DisableFirefoxStudies`](#disablefirefoxstudies)** | Disable Firefox studies (Shield).
  37 | **[`DisableForgetButton`](#disableforgetbutton)** | Disable the "Forget" button.
  38 | **[`DisableFormHistory`](#disableformhistory)** | Turn off saving information on web forms and the search bar.
  39 | **[`DisableMasterPasswordCreation`](#disablemasterpasswordcreation)** | Remove the master password functionality.
  40 | **[`DisablePasswordReveal`](#disablepasswordreveal)** | Do not allow passwords to be revealed in saved logins.
  41 | **[`DisablePocket`](#disablepocket)** | Remove Pocket in the Firefox UI.
  42 | **[`DisablePrivateBrowsing`](#disableprivatebrowsing)** | Remove access to private browsing.
  43 | **[`DisableProfileImport`](#disableprofileimport)** | Disables the "Import data from another browser" option in the bookmarks window.
  44 | **[`DisableProfileRefresh`](#disableprofilerefresh)** | Disable the Refresh Firefox button on about:support and support.mozilla.org
  45 | **[`DisableSafeMode`](#disablesafemode)** | Disable safe mode within the browser.
  46 | **[`DisableSecurityBypass`](#disablesecuritybypass)** | Prevent the user from bypassing security in certain cases.
  47 | **[`DisableSetDesktopBackground`](#disablesetdesktopbackground)** | Remove the "Set As Desktop Background..." menuitem when right clicking on an image.
  48 | **[`DisableSystemAddonUpdate`](#disablesystemaddonupdate)** | Prevent system add-ons from being installed or updated.
  49 | **[`DisableTelemetry`](#disabletelemetry)** | DisableTelemetry
  50 | **[`DisplayBookmarksToolbar`](#displaybookmarkstoolbar)** | Set the initial state of the bookmarks toolbar.
  51 | **[`DisplayMenuBar`](#displaymenubar)** | Set the state of the menubar.
  52 | **[`DisplayMenuBar (Deprecated)`](#displaymenubar-deprecated)** | Set the initial state of the menubar.
  53 | **[`DNSOverHTTPS`](#dnsoverhttps)** | Configure DNS over HTTPS.
  54 | **[`DontCheckDefaultBrowser`](#dontcheckdefaultbrowser)** | Don't check if Firefox is the default browser at startup.
  55 | **[`DownloadDirectory`](#downloaddirectory)** | Set and lock the download directory.
  56 | **[`EnableTrackingProtection`](#enabletrackingprotection)** | Configure tracking protection.
  57 | **[`EncryptedMediaExtensions`](#encryptedmediaextensions)** | Enable or disable Encrypted Media Extensions and optionally lock it.
  58 | **[`EnterprisePoliciesEnabled`](#enterprisepoliciesenabled)** | Enable policy support on macOS.
  59 | **[`ExemptDomainFileTypePairsFromFileTypeDownloadWarnings`](#exemptdomainfiletypepairsfromfiletypedownloadwarnings)** | Disable warnings based on file extension for specific file types on domains.
  60 | **[`Extensions`](#extensions)** | Control the installation, uninstallation and locking of extensions.
  61 | **[`ExtensionSettings`](#extensionsettings)** | Manage all aspects of extensions.
  62 | **[`ExtensionUpdate`](#extensionupdate)** | Control extension updates.
  63 | **[`FirefoxHome`](#firefoxhome)** | Customize the Firefox Home page.
  64 | **[`FlashPlugin (Deprecated)`](#flashplugin-deprecated)** | Configure the default Flash plugin policy as well as origins for which Flash is allowed.
  65 | **[`GoToIntranetSiteForSingleWordEntryInAddressBar`](#gotointranetsiteforsinglewordentryinaddressbar)** | Force direct intranet site navigation instead of searching when typing single word entries in the address bar.
  66 | **[`Handlers`](#handlers)** | Configure default application handlers.
  67 | **[`HardwareAcceleration`](#hardwareacceleration)** | Control hardware acceleration.
  68 | **[`Homepage`](#homepage)** | Configure the default homepage and how Firefox starts.
  69 | **[`InstallAddonsPermission`](#installaddonspermission)** | Configure the default extension install policy as well as origins for extension installs are allowed.
  70 | **[`LegacyProfiles`](#legacyprofiles)** | Disable the feature enforcing a separate profile for each installation.
  71 | **[`LegacySameSiteCookieBehaviorEnabled`](#legacysamesitecookiebehaviorenabled)** | Enable default legacy SameSite cookie behavior setting.
  72 | **[`LegacySameSiteCookieBehaviorEnabledForDomainList`](#legacysamesitecookiebehaviorenabledfordomainlist)** | Revert to legacy SameSite behavior for cookies on specified sites.
  73 | **[`LocalFileLinks`](#localfilelinks)** | Enable linking to local files by origin.
  74 | **[`ManagedBookmarks`](#managedbookmarks)** | Configures a list of bookmarks managed by an administrator that cannot be changed by the user.
  75 | **[`ManualAppUpdateOnly`](#manualappupdateonly)** | Allow manual updates only and do not notify the user about updates.
  76 | **[`NetworkPrediction`](#networkprediction)** | Enable or disable network prediction (DNS prefetching).
  77 | **[`NewTabPage`](#newtabpage)** | Enable or disable the New Tab page.
  78 | **[`NoDefaultBookmarks`](#nodefaultbookmarks)** | Disable the creation of default bookmarks.
  79 | **[`OfferToSaveLogins`](#offertosavelogins)** | Control whether or not Firefox offers to save passwords.
  80 | **[`OfferToSaveLoginsDefault`](#offertosaveloginsdefault)** | Set the default value for whether or not Firefox offers to save passwords.
  81 | **[`OverrideFirstRunPage`](#overridefirstrunpage)** | Override the first run page.
  82 | **[`OverridePostUpdatePage`](#overridepostupdatepage)** | Override the upgrade page.
  83 | **[`PasswordManagerEnabled`](#passwordmanagerenabled)** | Remove (some) access to the password manager.
  84 | **[`PasswordManagerExceptions`](#passwordmanagerexceptions)** | Prevent Firefox from saving passwords for specific sites.
  85 | **[`PDFjs`](#pdfjs)** | Disable or configure PDF.js, the built-in PDF viewer.
  86 | **[`Permissions`](#permissions)** | Set permissions associated with camera, microphone, location, and notifications.
  87 | **[`PictureInPicture`](#pictureinpicture)** | Enable or disable Picture-in-Picture.
  88 | **[`PopupBlocking`](#popupblocking)** | Configure the default pop-up window policy as well as origins for which pop-up windows are allowed.
  89 | **[`Preferences`](#preferences)** | Set and lock preferences.
  90 | **[`Preferences (Deprecated)`](#preferences-deprecated)** | Set and lock some preferences.
  91 | **[`PrimaryPassword`](#primarypassword)** | Require or prevent using a primary (formerly master) password.
  92 | **[`PromptForDownloadLocation`](#promptfordownloadlocation)** | Ask where to save each file before downloading.
  93 | **[`Proxy`](#proxy)** | Configure proxy settings.
  94 | **[`RequestedLocales`](#requestedlocales)** | Set the the list of requested locales for the application in order of preference.
  95 | **[`SanitizeOnShutdown` (All)](#sanitizeonshutdown-all)** | Clear all data on shutdown.
  96 | **[`SanitizeOnShutdown` (Selective)](#sanitizeonshutdown-selective)** | Clear data on shutdown.
  97 | **[`SearchBar`](#searchbar)** | Set whether or not search bar is displayed.
  98 | **[`SearchEngines`](#searchengines-this-policy-is-only-available-on-the-esr)** |
  99 | **[`SearchEngines -> Add`](#searchengines--add)** | Add new search engines.
 100 | **[`SearchEngines -> Default`](#searchengines--default)** | Set the default search engine.
 101 | **[`SearchEngines -> PreventInstalls`](#searchengines--preventinstalls)** | Prevent installing search engines from webpages.
 102 | **[`SearchEngines -> Remove`](#searchengines--remove)** | Hide built-in search engines.
 103 | **[`SearchSuggestEnabled`](#searchsuggestenabled)** | Enable search suggestions.
 104 | **[`SecurityDevices`](#securitydevices)** | Install PKCS #11 modules.
 105 | **[`ShowHomeButton`](#showhomebutton)** | Show the home button on the toolbar.
 106 | **[`SSLVersionMax`](#sslversionmax)** | Set and lock the maximum version of TLS.
 107 | **[`SSLVersionMin`](#sslversionmin)** | Set and lock the minimum version of TLS.
 108 | **[`StartDownloadsInTempDirectory`](#startdownloadsintempdirectory)** | Force downloads to start off in a local, temporary location rather than the default download directory.
 109 | **[`SupportMenu`](#supportmenu)** | Add a menuitem to the help menu for specifying support information.
 110 | **[`UserMessaging`](#usermessaging)** | Don't show certain messages to the user.
 111 | **[`UseSystemPrintDialog`](#usesystemprintdialog)** | Print using the system print dialog instead of print preview.
 112 | **[`WebsiteFilter`](#websitefilter)** | Block websites from being visited.
 113 | **[`WindowsSSO`](#windowssso)** | Allow Windows single sign-on for Microsoft, work, and school accounts.
 114
 115 ### 3rdparty
 116
 117 Allow WebExtensions to configure policy. For more information, see [Adding policy support to your extension](https://extensionworkshop.com/documentation/enterprise/adding-policy-support-to-your-extension/).
 118
 119 For GPO and Intune, the extension developer should provide an ADMX file.
 120
 121 **Compatibility:** Firefox 68\
 122 **CCK2 Equivalent:** N/A\
 123 **Preferences Affected:** N/A
 124
 125 #### macOS
 126 ```
 127 <dict>
 128   <key>3rdparty</key>
 129   <dict>
 130     <key>Extensions</key>
 131     <dict>
 132       <key>uBlock0@raymondhill.net</key>
 133       <dict>
 134         <key>adminSettings</key>
 135         <dict>
 136           <key>selectedFilterLists</key>
 137           <array>
 138             <string>ublock-privacy</string>
 139             <string>ublock-badware</string>
 140             <string>ublock-filters</string>
 141             <string>user-filters</string>
 142           </array>
 143         </dict>
 144       </dict>
 145     </dict>
 146   </dict>
 147 </dict>
 148 ```
 149 #### policies.json
 150 ```
 151 {
 152   "policies": {
 153     "3rdparty": {
 154       "Extensions": {
 155         "uBlock0@raymondhill.net": {
 156           "adminSettings": {
 157             "selectedFilterLists": [
 158               "ublock-privacy",
 159               "ublock-badware",
 160               "ublock-filters",
 161               "user-filters"
 162             ]
 163           }
 164         }
 165       }
 166     }
 167   }
 168 }
 169 ```
 170
 171 ### AllowedDomainsForApps
 172
 173 Define domains allowed to access Google Workspace.
 174
 175 This policy is based on the [Chrome policy](https://chromeenterprise.google/policies/#AllowedDomainsForApps) of the same name.
 176
 177 If this policy is enabled, users can only access Google Workspace using accounts from the specified domains. If you want to allow Gmail, you can add ```consumer_accounts``` to the list.
 178
 179 **Compatibility:** Firefox 89, Firefox ESR 78.11\
 180 **CCK2 Equivalent:** N/A\
 181 **Preferences Affected:** N/A
 182
 183 #### Windows (GPO)
 184 ```
 185 Software\Policies\Mozilla\Firefox\AllowedDomainsForApps = "managedfirefox.com,example.com"
 186 ```
 187 #### Windows (Intune)
 188 OMA-URI:
 189 ```
 190 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AllowedDomainsForApps
 191 ```
 192 Value (string):
 193 ```
 194 <enabled/>
 195 <data id="AllowedDomainsForApps" value="managedfirefox.com,example.com"/>
 196 ```
 197 #### macOS
 198 ```
 199 <dict>
 200   <key>AllowedDomainsForApps</key>
 201   <string>managedfirefox.com,example.com</string>
 202 </dict>
 203 ```
 204 #### policies.json
 205 ```
 206 {
 207   "policies": {
 208     "AllowedDomainsForApps": "managedfirefox.com,example.com"
 209   }
 210 }
 211 ```
 212 ### AppAutoUpdate
 213
 214 Enable or disable **automatic** application update.
 215
 216 If set to true, application updates are installed without user approval within Firefox. The operating system might still require approval.
 217
 218 If set to false, application updates are downloaded but the user can choose when to install the update.
 219
 220 If you have disabled updates via `DisableAppUpdate`, this policy has no effect.
 221
 222 **Compatibility:** Firefox 75, Firefox ESR 68.7\
 223 **CCK2 Equivalent:** N/A\
 224 **Preferences Affected:** `app.update.auto`
 225
 226 #### Windows (GPO)
 227 ```
 228 Software\Policies\Mozilla\Firefox\AppAutoUpdate = 0x1 | 0x0
 229 ```
 230 #### Windows (Intune)
 231 OMA-URI:
 232 ```
 233 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AppAutoUpdate
 234 ```
 235 Value (string):
 236 ```
 237 <enabled/> or <disabled/>
 238 ```
 239 #### macOS
 240 ```
 241 <dict>
 242   <key>AppAutoUpdate</key>
 243   <true/> | <false/>
 244 </dict>
 245 ```
 246 #### policies.json
 247 ```
 248 {
 249   "policies": {
 250     "AppAutoUpdate": true | false
 251   }
 252 }
 253 ```
 254 ### AppUpdatePin
 255
 256 Prevent Firefox from being updated beyond the specified version.
 257
 258 You can specify the any version as ```xx.``` and Firefox will be updated with all minor versions, but will not be updated beyond the major version.
 259
 260 You can also specify the version as ```xx.xx``` and Firefox will be updated with all patch versions, but will not be updated beyond the minor version.
 261
 262 You should specify a version that exists or is guaranteed to exist. If you specify a version that doesn't end up existing, Firefox will update beyond that version.
 263
 264 **Compatibility:** Firefox 102,\
 265 **CCK2 Equivalent:** N/A\
 266 **Preferences Affected:** N/A
 267
 268 #### Windows (GPO)
 269 ```
 270 Software\Policies\Mozilla\Firefox\AppUpdatePin = "106."
 271 ```
 272 #### Windows (Intune)
 273 OMA-URI:
 274 ```
 275 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AppUpdatePin
 276 ```
 277 Value (string):
 278 ```
 279 <enabled/>
 280 <data id="AppUpdatePin" value="106."/>
 281 ```
 282 #### macOS
 283 ```
 284 <dict>
 285   <key>AppUpdatePin</key>
 286   <string>106.</string>
 287 </dict>
 288 ```
 289 #### policies.json
 290 ```
 291 {
 292   "policies": {
 293     "AppUpdatePin": "106."
 294   }
 295 }
 296 ```
 297 ### AppUpdateURL
 298
 299 Change the URL for application update if you are providing Firefox updates from a custom update server.
 300
 301 **Compatibility:** Firefox 62, Firefox ESR 60.2\
 302 **CCK2 Equivalent:** N/A\
 303 **Preferences Affected:** `app.update.url`
 304
 305 #### Windows (GPO)
 306 ```
 307 Software\Policies\Mozilla\Firefox\AppUpdateURL = "https://yoursite.com"
 308 ```
 309 #### Windows (Intune)
 310 OMA-URI:
 311 ```
 312 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AppUpdateURL
 313 ```
 314 Value (string):
 315 ```
 316 <enabled/>
 317 <data id="AppUpdateURL" value="https://yoursite.com"/>
 318 ```
 319 #### macOS
 320 ```
 321 <dict>
 322   <key>AppUpdateURL</key>
 323   <string>https://yoursite.com</string>
 324 </dict>
 325 ```
 326 #### policies.json
 327 ```
 328 {
 329   "policies": {
 330     "AppUpdateURL": "https://yoursite.com"
 331   }
 332 }
 333 ```
 334 ### Authentication
 335
 336 Configure sites that support integrated authentication.
 337
 338 See [Integrated authentication](https://htmlpreview.github.io/?https://github.com/mdn/archived-content/blob/main/files/en-us/mozilla/integrated_authentication/raw.html) for more information.
 339
 340 `PrivateBrowsing` enables integrated authentication in private browsing.
 341
 342 **Compatibility:** Firefox 60, Firefox ESR 60 (AllowNonFQDN added in 62/60.2, AllowProxies added in 70/68.2, Locked added in 71/68.3, PrivateBrowsing added in 77/68.9)\
 343 **CCK2 Equivalent:** N/A\
 344 **Preferences Affected:** `network.negotiate-auth.trusted-uris`,`network.negotiate-auth.delegation-uris`,`network.automatic-ntlm-auth.trusted-uris`,`network.automatic-ntlm-auth.allow-non-fqdn`,`network.negotiate-auth.allow-non-fqdn`,`network.automatic-ntlm-auth.allow-proxies`,`network.negotiate-auth.allow-proxies`,`network.auth.private-browsing-sso`
 345
 346 #### Windows (GPO)
 347 ```
 348 Software\Policies\Mozilla\Firefox\Authentication\SPNEGO\1 = "mydomain.com"
 349 Software\Policies\Mozilla\Firefox\Authentication\SPNEGO\2 = "https://myotherdomain.com"
 350 Software\Policies\Mozilla\Firefox\Authentication\Delegated\1 = "mydomain.com"
 351 Software\Policies\Mozilla\Firefox\Authentication\Delegated\2 = "https://myotherdomain.com"
 352 Software\Policies\Mozilla\Firefox\Authentication\NTLM\1 = "mydomain.com"
 353 Software\Policies\Mozilla\Firefox\Authentication\NTLM\2 = "https://myotherdomain.com"
 354 Software\Policies\Mozilla\Firefox\Authentication\AllowNonFQDN\SPNEGO = 0x1 | 0x0
 355 Software\Policies\Mozilla\Firefox\Authentication\AllowNonFQDN\NTLM = 0x1 | 0x0
 356 Software\Policies\Mozilla\Firefox\Authentication\AllowProxies\SPNEGO = 0x1 | 0x0
 357 Software\Policies\Mozilla\Firefox\Authentication\AllowProxies\NTLM = 0x1 | 0x0
 358 Software\Policies\Mozilla\Firefox\Authentication\Locked = 0x1 | 0x0
 359 Software\Policies\Mozilla\Firefox\Authentication\PrivateBrowsing = 0x1 | 0x0
 360 ```
 361 #### Windows (Intune)
 362 OMA-URI:
 363 ```
 364 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_SPNEGO
 365 ```
 366 Value (string):
 367 ```
 368 <enabled/>
 369 <data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
 370 ```
 371 OMA-URI:
 372 ```
 373 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_Delegated
 374 ```
 375 Value (string):
 376 ```
 377 <enabled/>
 378 <data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
 379 ```
 380 OMA-URI:
 381 ```
 382 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_NTLM
 383 ```
 384 Value (string):
 385 ```
 386 <enabled/>
 387 <data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
 388 ```
 389 OMA-URI:
 390 ```
 391 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_AllowNonFQDN
 392 ```
 393 Value (string):
 394 ```
 395 <enabled/>
 396 <data id="Authentication_AllowNonFQDN_NTLM" value="true | false"/>
 397 <data id="Authentication_AllowNonFQDN_SPNEGO" value="true | false"/>
 398 ```
 399 OMA-URI:
 400 ```
 401 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_Locked
 402 ```
 403 Value (string):
 404 ```
 405 <enabled/> or <disabled/>
 406 ```
 407 OMA-URI:
 408 ```
 409 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_PrivateBrowsing
 410 ```
 411 Value (string):
 412 ```
 413 <enabled/> or <disabled/>
 414 ```
 415 #### macOS
 416 ```
 417 <dict>
 418   <key>Authentication</key>
 419   <dict>
 420     <key>SPNEGO</key>
 421     <array>
 422       <string>mydomain.com</string>
 423       <string>https://myotherdomain.com</string>
 424     </array>
 425     <key>Delegated</key>
 426     <array>
 427       <string>mydomain.com</string>
 428       <string>https://myotherdomain.com</string>
 429     </array>
 430     <key>NTLM</key>
 431     <array>
 432       <string>mydomain.com</string>
 433       <string>https://myotherdomain.com</string>
 434     </array>
 435     <key>AllowNonFQDN</key>
 436       <dict>
 437       <key>SPNEGO</key>
 438       <true/> | <false/>
 439       <key>NTLM</key>
 440       <true/> | <false/>
 441     </dict>
 442     <key>AllowProxies</key>
 443       <dict>
 444       <key>SPNEGO</key>
 445       <true/> | <false/>
 446       <key>NTLM</key>
 447       <true/> | <false/>
 448     </dict>
 449     <key>Locked</key>
 450     <true/> | <false/>
 451     <key>PrivateBrowsing</key>
 452     <true/> | <false/>
 453   </dict>
 454 </dict>
 455 ```
 456 #### policies.json
 457 ```
 458 {
 459   "policies": {
 460     "Authentication": {
 461       "SPNEGO": ["mydomain.com", "https://myotherdomain.com"],
 462       "Delegated": ["mydomain.com", "https://myotherdomain.com"],
 463       "NTLM": ["mydomain.com", "https://myotherdomain.com"],
 464       "AllowNonFQDN": {
 465         "SPNEGO": true | false,
 466         "NTLM": true | false
 467       },
 468       "AllowProxies": {
 469         "SPNEGO": true | false,
 470         "NTLM": true | false
 471       },
 472       "Locked": true | false,
 473       "PrivateBrowsing": true | false
 474     }
 475   }
 476 }
 477 ```
 478 ### AutoLaunchProtocolsFromOrigins
 479 Define a list of external protocols that can be used from listed origins without prompting the user. The origin is the scheme plus the hostname.
 480
 481 The syntax of this policy is exactly the same as the [Chrome AutoLaunchProtocolsFromOrigins policy](https://cloud.google.com/docs/chrome-enterprise/policies/?policy=AutoLaunchProtocolsFromOrigins) except that you can only use valid origins (not just hostnames). This also means that you cannot specify an asterisk for all origins.
 482
 483 The schema is:
 484 ```
 485 {
 486  "items": {
 487   "properties": {
 488    "allowed_origins": {
 489     "items": {
 490      "type": "string"
 491     },
 492     "type": "array"
 493    },
 494    "protocol": {
 495     "type": "string"
 496    }
 497   },
 498   "required": [
 499    "protocol",
 500    "allowed_origins"
 501   ],
 502   "type": "object"
 503  },
 504  "type": "array"
 505 }
 506 ```
 507 **Compatibility:** Firefox 90, Firefox ESR 78.12\
 508 **CCK2 Equivalent:** N/A\
 509 **Preferences Affected:** N/A
 510
 511 #### Windows (GPO)
 512 Software\Policies\Mozilla\Firefox\AutoLaunchProtocolsFromOrigins (REG_MULTI_SZ) =
 513 ```
 514 [
 515   {
 516     "protocol": "zoommtg",
 517     "allowed_origins": [
 518       "https://somesite.zoom.us"
 519     ]
 520   }
 521 ]
 522 ```
 523 #### Windows (Intune)
 524 OMA-URI:
 525 ```
 526 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AutoLaunchProtocolsFromOrigins
 527 ```
 528 Value (string):
 529 ```
 530 <enabled/>
 531 <data id="JSON" value='
 532 [
 533   {
 534     "protocol": "zoommtg",
 535     "allowed_origins": [
 536       "https://somesite.zoom.us"
 537     ]
 538   }
 539 ]'/>
 540 ```
 541 #### macOS
 542 ```
 543 <dict>
 544   <key>AutoLaunchProtocolsFromOrigins</key>
 545   <array>
 546     <dict>
 547       <key>protocol</key>
 548       <string>zoommtg</string>
 549       <key>allowed_origins</key>
 550       <array>
 551         <string>https://somesite.zoom.us</string>
 552       </array>
 553     </dict>
 554   </array>
 555 </dict>
 556 ```
 557 #### policies.json
 558 ```
 559 {
 560   "policies": {
 561     "AutoLaunchProtocolsFromOrigins": [{
 562       "protocol": "zoommtg",
 563       "allowed_origins": [
 564         "https://somesite.zoom.us"
 565       ]
 566     }]
 567   }
 568 }
 569 ```
 570 ### BackgroundAppUpdate
 571
 572 Enable or disable **automatic** application update **in the background**, when the application is not running.
 573
 574 If set to true, application updates may be installed (without user approval) in the background, even when the application is not running. The operating system might still require approval.
 575
 576 If set to false, the application will not try to install updates when the application is not running.
 577
 578 If you have disabled updates via `DisableAppUpdate` or disabled automatic updates via `AppAutoUpdate`, this policy has no effect.
 579
 580 **Compatibility:** Firefox 90 (Windows only)\
 581 **CCK2 Equivalent:** N/A\
 582 **Preferences Affected:** `app.update.background.enabled`
 583
 584 #### Windows (GPO)
 585 ```
 586 Software\Policies\Mozilla\Firefox\BackgroundAppUpdate = 0x1 | 0x0
 587 ```
 588 #### Windows (Intune)
 589 OMA-URI:
 590 ```
 591 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BackgroundAppUpdate
 592 ```
 593 Value (string):
 594 ```
 595 <enabled/> or <disabled/>
 596 ```
 597 #### macOS
 598 ```
 599 <dict>
 600   <key>BackgroundAppUpdate</key>
 601   <true/> | <false/>
 602 </dict>
 603 ```
 604 #### policies.json
 605 ```
 606 {
 607   "policies": {
 608     "BackgroundAppUpdate": true | false
 609   }
 610 }
 611 ```
 612 ### BlockAboutAddons
 613
 614 Block access to the Add-ons Manager (about:addons).
 615
 616 **Compatibility:** Firefox 60, Firefox ESR 60\
 617 **CCK2 Equivalent:** `disableAddonsManager`\
 618 **Preferences Affected:** N/A
 619
 620 #### Windows (GPO)
 621 ```
 622 Software\Policies\Mozilla\Firefox\BlockAboutAddons = 0x1 | 0x0
 623 ```
 624 #### Windows (Intune)
 625 OMA-URI:
 626 ```
 627 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutAddons
 628 ```
 629 Value (string):
 630 ```
 631 <enabled/> or <disabled/>
 632 ```
 633 #### macOS
 634 ```
 635 <dict>
 636   <key>BlockAboutAddons</key>
 637   <true/> | <false/>
 638 </dict>
 639 ```
 640 #### policies.json
 641 ```
 642 {
 643   "policies": {
 644     "BlockAboutAddons": true | false
 645   }
 646 }
 647 ```
 648 ### BlockAboutConfig
 649
 650 Block access to about:config.
 651
 652 **Compatibility:** Firefox 60, Firefox ESR 60\
 653 **CCK2 Equivalent:** `disableAboutConfig`\
 654 **Preferences Affected:** N/A
 655
 656 #### Windows (GPO)
 657 ```
 658 Software\Policies\Mozilla\Firefox\BlockAboutConfig = 0x1 | 0x0
 659 ```
 660 #### Windows (Intune)
 661 OMA-URI:
 662 ```
 663 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutConfig
 664 ```
 665 Value (string):
 666 ```
 667 <enabled/> or <disabled/>
 668 ```
 669 #### macOS
 670 ```
 671 <dict>
 672   <key>BlockAboutConfig</key>
 673   <true/> | <false/>
 674 </dict>
 675 ```
 676 #### policies.json
 677 ```
 678 {
 679   "policies": {
 680     "BlockAboutConfig": true | false
 681   }
 682 }
 683 ```
 684 ### BlockAboutProfiles
 685
 686 Block access to About Profiles (about:profiles).
 687
 688 **Compatibility:** Firefox 60, Firefox ESR 60\
 689 **CCK2 Equivalent:** `disableAboutProfiles`\
 690 **Preferences Affected:** N/A
 691
 692 #### Windows (GPO)
 693 ```
 694 Software\Policies\Mozilla\Firefox\BlockAboutProfiles = 0x1 | 0x0
 695 ```
 696 #### Windows (Intune)
 697 OMA-URI:
 698 ```
 699 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutProfiles
 700 ```
 701 Value (string):
 702 ```
 703 <enabled/> or <disabled/>
 704 ```
 705 #### macOS
 706 ```
 707 <dict>
 708   <key>BlockAboutProfiles</key>
 709   <true/> | <false/>
 710 </dict>
 711 ```
 712 #### policies.json
 713 ```
 714 {
 715   "policies": {
 716     "BlockAboutProfiles": true | false
 717   }
 718 }
 719 ```
 720 ### BlockAboutSupport
 721
 722 Block access to Troubleshooting Information (about:support).
 723
 724 **Compatibility:** Firefox 60, Firefox ESR 60\
 725 **CCK2 Equivalent:** `disableAboutSupport`\
 726 **Preferences Affected:** N/A
 727
 728 #### Windows (GPO)
 729 ```
 730 Software\Policies\Mozilla\Firefox\BlockAboutSupport = 0x1 | 0x0
 731 ```
 732 #### Windows (Intune)
 733 OMA-URI:
 734 ```
 735 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutSupport
 736 ```
 737 Value (string):
 738 ```
 739 <enabled/> or <disabled/>
 740 ```
 741 #### macOS
 742 ```
 743 <dict>
 744   <key>BlockAboutSupport</key>
 745   <true/> | <false/>
 746 </dict>
 747 ```
 748 #### policies.json
 749 ```
 750 {
 751   "policies": {
 752     "BlockAboutSupport": true | false
 753   }
 754 }
 755 ```
 756 ### Bookmarks
 757
 758 Note: [`ManagedBookmarks`](#managedbookmarks) is the new recommended way to add bookmarks. This policy will continue to be supported.
 759
 760 Add bookmarks in either the bookmarks toolbar or menu. Only `Title` and `URL` are required. If `Placement` is not specified, the bookmark will be placed on the toolbar. If `Folder` is specified, it is automatically created and bookmarks with the same folder name are grouped together.
 761
 762 If you want to clear all bookmarks set with this policy, you can set the value to an empty array (```[]```). This can be on Windows via the new Bookmarks (JSON) policy available with GPO and Intune.
 763
 764 **Compatibility:** Firefox 60, Firefox ESR 60\
 765 **CCK2 Equivalent:** `bookmarks.toolbar`,`bookmarks.menu`\
 766 **Preferences Affected:** N/A
 767
 768 #### Windows (GPO)
 769 ```
 770 Software\Policies\Mozilla\Firefox\Bookmarks\1\Title = "Example"
 771 Software\Policies\Mozilla\Firefox\Bookmarks\1\URL = "https://example.com"
 772 Software\Policies\Mozilla\Firefox\Bookmarks\1\Favicon = "https://example.com/favicon.ico"
 773 Software\Policies\Mozilla\Firefox\Bookmarks\1\Placement = "toolbar" | "menu"
 774 Software\Policies\Mozilla\Firefox\Bookmarks\1\Folder = "FolderName"
 775
 776 Software\Policies\Mozilla\Firefox\Bookmarks (REG_MULTI_SZ) =
 777 ```
 778 []
 779 ```
 780
 781 ```
 782 #### Windows (Intune)
 783 OMA-URI:
 784 ```
 785 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Bookmarks/Bookmark01
 786 ```
 787 Value (string):
 788 ```
 789 <enabled/>
 790 <data id="BookmarkTitle" value="Example"/>
 791 <data id="BookmarkURL" value="https://example.com"/>
 792 <data id="BookmarkFavicon" value="https://example.com/favicon.ico"/>
 793 <data id="BookmarkPlacement" value="toolbar | menu"/>
 794 <data id="BookmarkFolder" value="FolderName"/>
 795 ```
 796 OMA-URI:
 797 ```
 798 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Bookmarks
 799 ```
 800 Value (string):
 801 ```
 802 <enabled/>
 803 <data id="JSON" value='[]'/>
 804 ```
 805 #### macOS
 806 ```
 807 <dict>
 808   <key>Bookmarks</key>
 809   <array>
 810     <dict>
 811       <key>Title</key>
 812       <string>Example</string>
 813       <key>URL</key>
 814       <string>https://example.com</string>
 815       <key>Favicon</key>
 816       <string>https://example.com/favicon.ico</string>
 817       <key>Placement</key>
 818       <string>toolbar | menu</string>
 819       <key>Folder</key>
 820       <string>FolderName</string>
 821     </dict>
 822   </array>
 823 </dict>
 824 ```
 825 #### policies.json
 826 ```
 827 {
 828   "policies": {
 829     "Bookmarks": [
 830       {
 831         "Title": "Example",
 832         "URL": "https://example.com",
 833         "Favicon": "https://example.com/favicon.ico",
 834         "Placement": "toolbar" | "menu",
 835         "Folder": "FolderName"
 836       }
 837     ]
 838   }
 839 }
 840 ```
 841 ### CaptivePortal
 842 Enable or disable the detection of captive portals.
 843
 844 **Compatibility:** Firefox 67, Firefox ESR 60.7\
 845 **CCK2 Equivalent:** N/A\
 846 **Preferences Affected:** `network.captive-portal-service.enabled`
 847
 848 #### Windows (GPO)
 849 ```
 850 Software\Policies\Mozilla\Firefox\CaptivePortal = 0x1 | 0x0
 851 ```
 852 #### Windows (Intune)
 853 OMA-URI:
 854 ```
 855 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/CaptivePortal
 856 ```
 857 Value (string):
 858 ```
 859 <enabled/> or <disabled/>
 860 ```
 861 #### macOS
 862 ```
 863 <dict>
 864   <key>CaptivePortal</key>
 865   <true/> | <false/>
 866 </dict>
 867 ```
 868 #### policies.json
 869 ```
 870 {
 871   "policies": {
 872     "CaptivePortal": true | false
 873   }
 874 }
 875 ```
 876 ### Certificates
 877
 878 ### Certificates | ImportEnterpriseRoots
 879
 880 Trust certificates that have been added to the operating system certificate store by a user or administrator.
 881
 882 Note: This policy only works on Windows and macOS. For Linux discussion, see [bug 1600509](https://bugzilla.mozilla.org/show_bug.cgi?id=1600509).
 883
 884 See https://support.mozilla.org/kb/setting-certificate-authorities-firefox for more detail.
 885
 886 **Compatibility:** Firefox 60, Firefox ESR 60 (macOS support in Firefox 63, Firefox ESR 68)\
 887 **CCK2 Equivalent:** N/A\
 888 **Preferences Affected:** `security.enterprise_roots.enabled`
 889
 890 #### Windows (GPO)
 891 ```
 892 Software\Policies\Mozilla\Firefox\Certificates\ImportEnterpriseRoots = 0x1 | 0x0
 893 ```
 894 #### Windows (Intune)
 895 OMA-URI:
 896 ```
 897 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Certificates/Certificates_ImportEnterpriseRoots
 898 ```
 899 Value (string):
 900 ```
 901 <enabled/> or <disabled/>
 902 ```
 903 #### macOS
 904 ```
 905 <dict>
 906   <key>Certificates</key>
 907   <dict>
 908     <key>ImportEnterpriseRoots</key>
 909     <true/> | <false/>
 910   </dict>
 911 </dict>
 912 ```
 913 #### policies.json
 914 ```
 915 {
 916   "policies": {
 917     "Certificates": {
 918       "ImportEnterpriseRoots": true | false
 919     }
 920   }
 921 }
 922 ```
 923 ### Certificates | Install
 924
 925 Install certificates into the Firefox certificate store. If only a filename is specified, Firefox searches for the file in the following locations:
 926
 927 - Windows
 928   - %USERPROFILE%\AppData\Local\Mozilla\Certificates
 929   - %USERPROFILE%\AppData\Roaming\Mozilla\Certificates
 930 - macOS
 931   - /Library/Application Support/Mozilla/Certificates
 932   - ~/Library/Application Support/Mozilla/Certificates
 933 - Linux
 934   - /usr/lib/mozilla/certificates
 935   - /usr/lib64/mozilla/certificates
 936   - ~/.mozilla/certificates
 937
 938 Starting with Firefox 65, Firefox 60.5 ESR, a fully qualified path can be used, including UNC paths. You should use the native path style for your operating system. We do not support using %USERPROFILE% or other environment variables on Windows.
 939
 940 If you are specifying the path in the policies.json file on Windows, you need to escape your backslashes (`\\`) which means that for UNC paths, you need to escape both (`\\\\`). If you use group policy, you only need one backslash.
 941
 942 Certificates are installed using the trust string `CT,CT,`.
 943
 944 Binary (DER) and ASCII (PEM) certificates are both supported.
 945
 946 **Compatibility:** Firefox 64, Firefox ESR 64\
 947 **CCK2 Equivalent:** `certs.ca`\
 948 **Preferences Affected:** N/A
 949
 950 #### Windows (GPO)
 951 ```
 952 Software\Policies\Mozilla\Firefox\Certificates\Install\1 = "cert1.der"
 953 Software\Policies\Mozilla\Firefox\Certificates\Install\2 = "C:\Users\username\cert2.pem"
 954 ```
 955 #### Windows (Intune)
 956 OMA-URI:
 957 ```
 958 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Certificates/Certificates_Install
 959 ```
 960 Value (string):
 961 ```
 962 <enabled/>
 963 <data id="Certificates_Install" value="1&#xF000;cert1.der&#xF000;2&#xF000;C:\Users\username\cert2.pem"/>
 964 ```
 965 #### macOS
 966 ```
 967 <dict>
 968   <key>Certificates</key>
 969   <dict>
 970     <key>Install</key>
 971     <array>
 972       <string>cert1.der</string>
 973       <string>/Users/username/cert2.pem</string>
 974     </array>
 975   </dict>
 976 </dict>
 977 ```
 978 #### policies.json
 979 ```
 980 {
 981   "policies": {
 982     "Certificates": {
 983       "Install": ["cert1.der", "/home/username/cert2.pem"]
 984     }
 985   }
 986 }
 987 ```
 988 ### Cookies
 989 Configure cookie preferences.
 990
 991 `Allow` is a list of origins (not domains) where cookies are always allowed. You must include http or https.
 992
 993 `AllowSession` is a list of origins (not domains) where cookies are only allowed for the current session. You must include http or https.
 994
 995 `Block` is a list of origins (not domains) where cookies are always blocked. You must include http or https.
 996
 997 `Behavior` sets the default behavior for cookies based on the values below.
 998
 999 `BehaviorPrivateBrowsing` sets the default behavior for cookies in private browsing based on the values below.
1000
1001 | Value | Description
1002 | --- | ---
1003 | accept | Accept all cookies
1004 | reject-foreign | Reject third party cookies
1005 | reject | Reject all cookies
1006 | limit-foreign | Reject third party cookies for sites you haven't visited
1007 | reject-tracker | Reject cookies for known trackers (default)
1008 | reject-tracker-and-partition-foreign | Reject cookies for known trackers and partition third-party cookies (Total Cookie Protection) (default for private browsing)
1009
1010 `Default` (Deprecated) determines whether cookies are accepted at all.
1011
1012 `AcceptThirdParty` (Deprecated) determines how third-party cookies are handled.
1013
1014 `ExpireAtSessionEnd` determines when cookies expire.
1015
1016 `RejectTracker` (Deprecated) only rejects cookies for trackers.
1017
1018 `Locked` prevents the user from changing cookie preferences.
1019
1020 **Compatibility:** Firefox 60, Firefox ESR 60 (RejectTracker added in Firefox 63, AllowSession added in Firefox 79/78.1, Behavior added in Firefox 95/91.4)\
1021 **CCK2 Equivalent:** N/A\
1022 **Preferences Affected:** `network.cookie.cookieBehavior`, `network.cookie.cookieBehavior.pbmode`, `network.cookie.lifetimePolicy`
1023
1024 #### Windows (GPO)
1025 ```
1026 Software\Policies\Mozilla\Firefox\Cookies\Allow\1 = "https://example.com"
1027 Software\Policies\Mozilla\Firefox\Cookies\AllowSession\1 = "https://example.edu"
1028 Software\Policies\Mozilla\Firefox\Cookies\Block\1 = "https://example.org"
1029 Software\Policies\Mozilla\Firefox\Cookies\Default = 0x1 | 0x0
1030 Software\Policies\Mozilla\Firefox\Cookies\AcceptThirdParty = "always" | "never" | "from-visited"
1031 Software\Policies\Mozilla\Firefox\Cookies\ExpireAtSessionEnd = 0x1 | 0x0
1032 Software\Policies\Mozilla\Firefox\Cookies\RejectTracker = 0x1 | 0x0
1033 Software\Policies\Mozilla\Firefox\Cookies\Behavior = "accept" | "reject-foreign" | "reject" | "limit-foreign" | "reject-tracker" | "reject-tracker-and-partition-foreign"
1034 Software\Policies\Mozilla\Firefox\Cookies\BehaviorPrivateBrowsing = "accept" | "reject-foreign" | "reject" | "limit-foreign" | "reject-tracker" | "reject-tracker-and-partition-foreign"
1035 Software\Policies\Mozilla\Firefox\Cookies\Locked = 0x1 | 0x0
1036 ```
1037 #### Windows (Intune)
1038 OMA-URI:
1039 ```
1040 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Allow
1041 ```
1042 Value (string):
1043 ```
1044 <enabled/>
1045 <data id="Permissions" value="1&#xF000;https://example.com"/>
1046 ```
1047 OMA-URI:
1048 ```
1049 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_AllowSession
1050 ```
1051 Value (string):
1052 ```
1053 <enabled/>
1054 <data id="Permissions" value="1&#xF000;https://example.edu"/>
1055 ```
1056 OMA-URI:
1057 ```
1058 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Block
1059 ```
1060 Value (string):
1061 ```
1062 <enabled/>
1063 <data id="Permissions" value="1&#xF000;https://example.org"/>
1064 ```
1065 OMA-URI:
1066 ```
1067 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Default
1068 ```
1069 Value (string):
1070 ```
1071 <enabled/> or <disabled/>
1072 ```
1073 OMA-URI:
1074 ```
1075 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_AcceptThirdParty
1076 ```
1077 Value (string):
1078 ```
1079 <enabled/>
1080 <data id="Cookies_AcceptThirdParty" value="always | never | from-visited"/>
1081 ```
1082 OMA-URI:
1083 ```
1084 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_ExpireAtSessionEnd
1085 ```
1086 Value (string):
1087 ```
1088 <enabled/> or <disabled/>
1089 ```
1090 OMA-URI:
1091 ```
1092 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_RejectTracker
1093 ```
1094 Value (string):
1095 ```
1096 <enabled/> or <disabled/>
1097 ```
1098 OMA-URI:
1099 ```
1100 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Locked
1101 ```
1102 Value (string):
1103 ```
1104 <enabled/> or <disabled/>
1105 ```
1106 OMA-URI:
1107 ```
1108 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Behavior
1109 ```
1110 Value (string):
1111 ```
1112 <enabled/>
1113 <data id="Cookies_Behavior" value="accept | reject-foreign | reject | limit-foreign | reject-tracker | reject-tracker-and-partition-foreign"/>
1114 ```
1115 OMA-URI:
1116 ```
1117 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_BehaviorPrivateBrowsing
1118 ```
1119 Value (string):
1120 ```
1121 <enabled/>
1122 <data id="Cookies_BehaviorPrivateBrowsing" value="accept | reject-foreign | reject | limit-foreign | reject-tracker | reject-tracker-and-partition-foreign"/>
1123 ```
1124 #### macOS
1125 ```
1126 <dict>
1127   <key>Cookies</key>
1128   <dict>
1129     <key>Allow</key>
1130     <array>
1131       <string>http://example.com</string>
1132     </array>
1133     <key>AllowSession</key>
1134     <array>
1135       <string>http://example.edu</string>
1136     </array>
1137     <key>Block</key>
1138     <array>
1139       <string>http://example.org</string>
1140     </array>
1141     <key>Default</key>
1142     <true/> | <false/>
1143     <key>AcceptThirdParty</key>
1144     <string>always | never | from-visited</string>
1145     <key>ExpireAtSessionEnd</key>
1146     <true/> | <false/>
1147     <key>RejectTracker</key>
1148     <true/> | <false/>
1149     <key>Locked</key>
1150     <true/> | <false/>
1151     <key>Behavior</key>
1152     <string>accept | reject-foreign | reject | limit-foreign | reject-tracker | reject-tracker-and-partition-foreign</string>
1153     <key>BehaviorPrivateBrowsing</key>
1154     <string>accept | reject-foreign | reject | limit-foreign | reject-tracker | reject-tracker-and-partition-foreign</string>
1155   </dict>
1156 </dict>
1157 ```
1158 #### policies.json
1159 ```
1160 {
1161   "policies": {
1162     "Cookies": {
1163       "Allow": ["http://example.org/"],
1164       "AllowSession": ["http://example.edu/"],
1165       "Block": ["http://example.edu/"],
1166       "Default": true | false,
1167       "AcceptThirdParty": "always" | "never" | "from-visited",
1168       "ExpireAtSessionEnd": true | false,
1169       "RejectTracker": true | false,
1170       "Locked": true | false,
1171       "Behavior": "accept" | "reject-foreign" | "reject" | "limit-foreign" | "reject-tracker" | "reject-tracker-and-partition-foreign",
1172       "BehaviorPrivateBrowsing": "accept" | "reject-foreign" | "reject" | "limit-foreign" | "reject-tracker" | "reject-tracker-and-partition-foreign",
1173     }
1174   }
1175 }
1176 ```
1177 ### DefaultDownloadDirectory
1178 Set the default download directory.
1179
1180 You can use ${home} for the native home directory.
1181
1182 **Compatibility:** Firefox 68, Firefox ESR 68\
1183 **CCK2 Equivalent:** N/A\
1184 **Preferences Affected:** `browser.download.dir`, `browser.download.folderList`
1185
1186 #### Windows (GPO)
1187 ```
1188 Software\Policies\Mozilla\Firefox\DefaultDownloadDirectory = "${home}\Downloads"
1189 ```
1190 #### Windows (Intune)
1191 OMA-URI:
1192 ```
1193 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DefaultDownloadDirectory
1194 ```
1195 Value (string):
1196 ```
1197 <enabled/>
1198 <data id="Preferences_String" value="${home}\Downloads"/>
1199 ```
1200 #### macOS
1201 ```
1202 <dict>
1203   <key>DefaultDownloadDirectory</key>
1204   <string>${home}/Downloads</string>
1205 </dict>
1206 ```
1207 #### policies.json (macOS and Linux)
1208 ```
1209 {
1210   "policies": {
1211     "DefaultDownloadDirectory": "${home}/Downloads"
1212 }
1213 ```
1214 #### policies.json (Windows)
1215 ```
1216 {
1217   "policies": {
1218     "DefaultDownloadDirectory": "${home}\\Downloads"
1219 }
1220 ```
1221 ### DisableAppUpdate
1222 Turn off application updates within Firefox.
1223
1224 **Compatibility:** Firefox 60, Firefox ESR 60\
1225 **CCK2 Equivalent:** `disableFirefoxUpdates`\
1226 **Preferences Affected:** N/A
1227
1228 #### Windows (GPO)
1229 ```
1230 Software\Policies\Mozilla\Firefox\DisableAppUpdate = 0x1 | 0x0
1231 ```
1232 #### Windows (Intune)
1233 OMA-URI:
1234 ```
1235 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableAppUpdate
1236 ```
1237 Value (string):
1238 ```
1239 <enabled/> or <disabled/>
1240 ```
1241 #### macOS
1242 ```
1243 <dict>
1244   <key>DisableAppUpdate</key>
1245   <true/> | <false/>
1246 </dict>
1247 ```
1248 #### policies.json
1249 ```
1250 {
1251   "policies": {
1252     "DisableAppUpdate": true | false
1253   }
1254 }
1255 ```
1256 ### DisableBuiltinPDFViewer
1257 Disable the built in PDF viewer. PDF files are downloaded and sent externally.
1258
1259 **Compatibility:** Firefox 60, Firefox ESR 60\
1260 **CCK2 Equivalent:** `disablePDFjs`\
1261 **Preferences Affected:** `pdfjs.disabled`
1262
1263 #### Windows (GPO)
1264 ```
1265 Software\Policies\Mozilla\Firefox\DisableBuiltinPDFViewer = 0x1 | 0x0
1266 ```
1267 #### Windows (Intune)
1268 OMA-URI:
1269 ```
1270 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableBuiltinPDFViewer
1271 ```
1272 Value (string):
1273 ```
1274 <enabled/> or <disabled/>
1275 ```
1276 #### macOS
1277 ```
1278 <dict>
1279   <key>DisableBuiltinPDFViewer</key>
1280   <true/> | <false/>
1281 </dict>
1282 ```
1283 #### policies.json
1284 ```
1285 {
1286   "policies": {
1287     "DisableBuiltinPDFViewer": true | false
1288   }
1289 }
1290 ```
1291 ### DisabledCiphers
1292 Disable specific cryptographic ciphers, listed below.
1293
1294 ```
1295 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
1296 TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
1297 TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256
1298 TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
1299 TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
1300 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
1301 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
1302 TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA
1303 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
1304 TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA
1305 TLS_DHE_RSA_WITH_AES_128_CBC_SHA
1306 TLS_DHE_RSA_WITH_AES_256_CBC_SHA
1307 TLS_RSA_WITH_AES_128_GCM_SHA256
1308 TLS_RSA_WITH_AES_256_GCM_SHA384
1309 TLS_RSA_WITH_AES_128_CBC_SHA
1310 TLS_RSA_WITH_AES_256_CBC_SHA
1311 TLS_RSA_WITH_3DES_EDE_CBC_SHA
1312 ```
1313
1314 **Preferences Affected:** `security.ssl3.ecdhe_rsa_aes_128_gcm_sha256`, `security.ssl3.ecdhe_ecdsa_aes_128_gcm_sha256`, `security.ssl3.ecdhe_ecdsa_chacha20_poly1305_sha256`, `security.ssl3.ecdhe_rsa_chacha20_poly1305_sha256`, `security.ssl3.ecdhe_ecdsa_aes_256_gcm_sha384`, `security.ssl3.ecdhe_rsa_aes_256_gcm_sha384`, `security.ssl3.ecdhe_rsa_aes_128_sha`, `security.ssl3.ecdhe_ecdsa_aes_128_sha`, `security.ssl3.ecdhe_rsa_aes_256_sha`, `security.ssl3.ecdhe_ecdsa_aes_256_sha`, `security.ssl3.dhe_rsa_aes_128_sha`, `security.ssl3.dhe_rsa_aes_256_sha`, `security.ssl3.rsa_aes_128_gcm_sha256`, `security.ssl3.rsa_aes_256_gcm_sha384`, `security.ssl3.rsa_aes_128_sha`, `security.ssl3.rsa_aes_256_sha`, `security.ssl3.deprecated.rsa_des_ede3_sha`
1315
1316 ---
1317 **Note:**
1318
1319 This policy was updated in Firefox 78 to allow enabling ciphers as well. Setting the value to true disables the cipher, setting the value to false enables the cipher. Previously setting the value to true or false disabled the cipher.
1320
1321 ---
1322 **Compatibility:** Firefox 76, Firefox ESR 68.8 (TLS_RSA_WITH_AES_128_GCM_SHA256 and TLS_RSA_WITH_AES_256_GCM_SHA384 were added in Firefox 78, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA38, TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, and TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 were added in Firefox 97 and Firefox 91.6)\
1323 **CCK2 Equivalent:** N/A\
1324 **Preferences Affected:** N/A
1325
1326 #### Windows (GPO)
1327 ```
1328 Software\Policies\Mozilla\Firefox\DisabledCiphers\CIPHER_NAME = 0x1 | 0x0
1329 ```
1330 #### Windows (Intune)
1331 OMA-URI:
1332 ```
1333 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_CIPHER_NAME
1334
1335 ```
1336 Value (string):
1337 ```
1338 <enabled/> or <disabled/>
1339 ```
1340 #### macOS
1341 ```
1342 <dict>
1343   <key>DisabledCiphers</key>
1344     <dict>
1345       <key>CIPHER_NAME</key>
1346       <true/> | <false/>
1347     </dict>
1348 </dict>
1349 ```
1350 #### policies.json
1351 ```
1352 {
1353   "policies": {
1354     "DisabledCiphers": {
1355       "CIPHER_NAME": true | false,
1356     }
1357   }
1358 }
1359 ```
1360 ### DisableDefaultBrowserAgent
1361 Prevent the default browser agent from taking any actions. Only applicable to Windows; other platforms don’t have the agent.
1362
1363 The browser agent is a Windows-only scheduled task which runs in the background to collect and submit data about the browser that the user has set as their OS default. More information is available [here](https://firefox-source-docs.mozilla.org/toolkit/mozapps/defaultagent/default-browser-agent/index.html).
1364
1365 **Compatibility:** Firefox 75, Firefox ESR 68.7 (Windows only)\
1366 **CCK2 Equivalent:** N/A\
1367 **Preferences Affected:** N/A
1368
1369 #### Windows (GPO)
1370 ```
1371 Software\Policies\Mozilla\Firefox\DisableDefaultBrowserAgent = 0x1 | 0x0
1372 ```
1373 #### Windows (Intune)
1374 OMA-URI:
1375 ```
1376 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableDefaultBrowserAgent
1377 ```
1378 Value (string):
1379 ```
1380 <enabled/> or <disabled/>
1381 ```
1382 #### policies.json
1383 ```
1384 {
1385   "policies": {
1386     "DisableDefaultBrowserAgent": true | false
1387   }
1388 }
1389 ```
1390 ### DisableDeveloperTools
1391 Remove access to all developer tools.
1392
1393 **Compatibility:** Firefox 60, Firefox ESR 60\
1394 **CCK2 Equivalent:** `removeDeveloperTools`\
1395 **Preferences Affected:** `devtools.policy.disabled`
1396
1397 #### Windows (GPO)
1398 ```
1399 Software\Policies\Mozilla\Firefox\DisableDeveloperTools = 0x1 | 0x0`
1400 ```
1401 #### Windows (Intune)
1402 OMA-URI:
1403 ```
1404 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableDeveloperTools
1405 ```
1406 Value (string):
1407 ```
1408 <enabled/> or <disabled/>
1409 ```
1410 #### macOS
1411 ```
1412 <dict>
1413   <key>DisableDeveloperTools</key>
1414   <true/> | <false/>
1415 </dict>
1416 ```
1417 #### policies.json
1418 ```
1419 {
1420   "policies": {
1421     "DisableDeveloperTools": true | false
1422   }
1423 }
1424 ```
1425 ### DisableFeedbackCommands
1426 Disable the menus for reporting sites (Submit Feedback, Report Deceptive Site).
1427
1428 **Compatibility:** Firefox 60, Firefox ESR 60\
1429 **CCK2 Equivalent:** N/A\
1430 **Preferences Affected:** N/A
1431
1432 #### Windows (GPO)
1433 ```
1434 Software\Policies\Mozilla\Firefox\DisableFeedbackCommands = 0x1 | 0x0
1435 ```
1436 #### Windows (Intune)
1437 OMA-URI:
1438 ```
1439 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFeedbackCommands
1440 ```
1441 Value (string):
1442 ```
1443 <enabled/> or <disabled/>
1444 ```
1445 #### macOS
1446 ```
1447 <dict>
1448   <key>DisableFeedbackCommands</key>
1449   <true/> | <false/>
1450 </dict>
1451 ```
1452 #### policies.json
1453 ```
1454 {
1455   "policies": {
1456     "DisableFeedbackCommands": true | false
1457   }
1458 }
1459 ```
1460 ### DisableFirefoxAccounts
1461 Disable Firefox Accounts integration (Sync).
1462
1463 **Compatibility:** Firefox 60, Firefox ESR 60\
1464 **CCK2 Equivalent:** `disableSync`\
1465 **Preferences Affected:** `identity.fxaccounts.enabled`
1466
1467 #### Windows (GPO)
1468 ```
1469 Software\Policies\Mozilla\Firefox\DisableFirefoxAccounts = 0x1 | 0x0
1470 ```
1471 #### Windows (Intune)
1472 OMA-URI:
1473 ```
1474 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxAccounts
1475 ```
1476 Value (string):
1477 ```
1478 <enabled/> or <disabled/>
1479 ```
1480 #### macOS
1481 ```
1482 <dict>
1483   <key>DisableFirefoxAccounts</key>
1484   <true/> | <false/>
1485 </dict>
1486 ```
1487 #### policies.json
1488 ```
1489 {
1490   "policies": {
1491     "DisableFirefoxAccounts": true | false
1492   }
1493 }
1494 ```
1495 ### DisableFirefoxScreenshots
1496 Remove access to Firefox Screenshots.
1497
1498 **Compatibility:** Firefox 60, Firefox ESR 60\
1499 **CCK2 Equivalent:** N/A\
1500 **Preferences Affected:** `extensions.screenshots.disabled`
1501
1502 #### Windows (GPO)
1503 ```
1504 Software\Policies\Mozilla\Firefox\DisableFirefoxScreenshots = 0x1 | 0x0
1505 ```
1506 #### Windows (Intune)
1507 OMA-URI:
1508 ```
1509 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxScreenshots
1510 ```
1511 Value (string):
1512 ```
1513 <enabled/> or <disabled/>
1514 ```
1515 #### macOS
1516 ```
1517 <dict>
1518   <key>DisableFirefoxScreenshots</key>
1519   <true/> | <false/>
1520 </dict>
1521 ```
1522 #### policies.json
1523 ```
1524 {
1525   "policies": {
1526     "DisableFirefoxScreenshots": true | false
1527   }
1528 }
1529 ```
1530 ### DisableFirefoxStudies
1531 Disable Firefox studies (Shield).
1532
1533 **Compatibility:** Firefox 60, Firefox ESR 60\
1534 **CCK2 Equivalent:** N/A\
1535 **Preferences Affected:** N/A
1536
1537 #### Windows (GPO)
1538 ```
1539 Software\Policies\Mozilla\Firefox\DisableFirefoxStudies = 0x1 | 0x0
1540 ```
1541 #### Windows (Intune)
1542 OMA-URI:
1543 ```
1544 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxStudies
1545 ```
1546 Value (string):
1547 ```
1548 <enabled/> or <disabled/>
1549 ```
1550 #### macOS
1551 ```
1552 <dict>
1553   <key>DisableFirefoxStudies</key>
1554   <true/> | <false/>
1555 </dict>
1556 ```
1557 #### policies.json
1558 ```
1559 {
1560   "policies": {
1561     "DisableFirefoxStudies": true | false
1562   }
1563 }
1564 ```
1565 ### DisableForgetButton
1566 Disable the "Forget" button.
1567
1568 **Compatibility:** Firefox 60, Firefox ESR 60\
1569 **CCK2 Equivalent:** `disableForget`\
1570 **Preferences Affected:** N/A
1571
1572 #### Windows (GPO)
1573 ```
1574 Software\Policies\Mozilla\Firefox\DisableForgetButton = 0x1 | 0x0
1575 ```
1576 #### Windows (Intune)
1577 OMA-URI:
1578 ```
1579 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableForgetButton
1580 ```
1581 Value (string):
1582 ```
1583 <enabled/> or <disabled/>
1584 ```
1585 #### macOS
1586 ```
1587 <dict>
1588   <key>DisableForgetButton</key>
1589   <true/> | <false/>
1590 </dict>
1591 ```
1592 #### policies.json
1593 ```
1594 {
1595   "policies": {
1596     "DisableForgetButton": true | false
1597   }
1598 }
1599 ```
1600 ### DisableFormHistory
1601 Turn off saving information on web forms and the search bar.
1602
1603 **Compatibility:** Firefox 60, Firefox ESR 60\
1604 **CCK2 Equivalent:** `disableFormFill`\
1605 **Preferences Affected:** `browser.formfill.enable`
1606
1607 #### Windows (GPO)
1608 ```
1609 Software\Policies\Mozilla\Firefox\DisableFormHistory = 0x1 | 0x0
1610 ```
1611 #### Windows (Intune)
1612 OMA-URI:
1613 ```
1614 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFormHistory
1615 ```
1616 Value (string):
1617 ```
1618 <enabled/> or <disabled/>
1619 ```
1620 #### macOS
1621 ```
1622 <dict>
1623   <key>DisableFormHistory</key>
1624   <true/> | <false/>
1625 </dict>
1626 ```
1627 #### policies.json
1628 ```
1629 {
1630   "policies": {
1631     "DisableFormHistory": true | false
1632   }
1633 }
1634 ```
1635 ### DisableMasterPasswordCreation
1636 Remove the master password functionality.
1637
1638 If this value is true, it works the same as setting [`PrimaryPassword`](#primarypassword) to false and removes the primary password functionality.
1639
1640 If both `DisableMasterPasswordCreation` and `PrimaryPassword` are used, `DisableMasterPasswordCreation` takes precedent.
1641
1642 **Compatibility:** Firefox 60, Firefox ESR 60\
1643 **CCK2 Equivalent:** `noMasterPassword`\
1644 **Preferences Affected:** N/A
1645
1646 #### Windows (GPO)
1647 ```
1648 Software\Policies\Mozilla\Firefox\DisableMasterPasswordCreation = 0x1 | 0x0
1649 ```
1650 #### Windows (Intune)
1651 OMA-URI:
1652 ```
1653 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableMasterPasswordCreation
1654 ```
1655 Value (string):
1656 ```
1657 <enabled/> or <disabled/>
1658 ```
1659 #### macOS
1660 ```
1661 <dict>
1662   <key>DisableMasterPasswordCreation</key>
1663   <true/> | <false/>
1664 </dict>
1665 ```
1666 #### policies.json
1667 ```
1668 {
1669   "policies": {
1670     "DisableMasterPasswordCreation": true | false
1671   }
1672 }
1673 ```
1674 ### DisablePasswordReveal
1675 Do not allow passwords to be shown in saved logins
1676
1677 **Compatibility:** Firefox 71, Firefox ESR 68.3\
1678 **CCK2 Equivalent:** N/A
1679 **Preferences Affected:** N/A
1680
1681 #### Windows (GPO)
1682 ```
1683 Software\Policies\Mozilla\Firefox\DisablePasswordReveal = 0x1 | 0x0
1684 ```
1685 #### Windows (Intune)
1686 OMA-URI:
1687 ```
1688 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePasswordReveal
1689 ```
1690 Value (string):
1691 ```
1692 <enabled/> or <disabled/>
1693 ```
1694 #### macOS
1695 ```
1696 <dict>
1697   <key>DisablePasswordReveal</key>
1698   <true/> | <false/>
1699 </dict>
1700 ```
1701 #### policies.json
1702 ```
1703 {
1704   "policies": {
1705     "DisablePasswordReveal": true | false
1706   }
1707 }
1708 ```
1709 ### DisablePocket
1710 Remove Pocket in the Firefox UI. It does not remove it from the new tab page.
1711
1712 **Compatibility:** Firefox 60, Firefox ESR 60\
1713 **CCK2 Equivalent:** `disablePocket`\
1714 **Preferences Affected:** `extensions.pocket.enabled`
1715
1716 #### Windows (GPO)
1717 ```
1718 Software\Policies\Mozilla\Firefox\DisablePocket = 0x1 | 0x0
1719 ```
1720 #### Windows (Intune)
1721 OMA-URI:
1722 ```
1723 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePocket
1724 ```
1725 Value (string):
1726 ```
1727 <enabled/> or <disabled/>
1728 ```
1729 #### macOS
1730 ```
1731 <dict>
1732   <key>DisablePocket</key>
1733   <true/> | <false/>
1734 </dict>
1735 ```
1736 #### policies.json
1737 ```
1738 {
1739   "policies": {
1740     "DisablePocket": true | false
1741   }
1742 }
1743 ```
1744 ### DisablePrivateBrowsing
1745 Remove access to private browsing.
1746
1747 **Compatibility:** Firefox 60, Firefox ESR 60\
1748 **CCK2 Equivalent:** `disablePrivateBrowsing`\
1749 **Preferences Affected:** N/A
1750
1751 #### Windows (GPO)
1752 ```
1753 Software\Policies\Mozilla\Firefox\DisablePrivateBrowsing = 0x1 | 0x0
1754 ```
1755 #### Windows (Intune)
1756 OMA-URI:
1757 ```
1758 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePrivateBrowsing
1759 ```
1760 Value (string):
1761 ```
1762 <enabled/> or <disabled/>
1763 ```
1764 #### macOS
1765 ```
1766 <dict>
1767   <key>DisablePrivateBrowsing</key>
1768   <true/> | <false/>
1769 </dict>
1770 ```
1771 #### policies.json
1772 ```
1773 {
1774   "policies": {
1775     "DisablePrivateBrowsing": true | false
1776   }
1777 }
1778 ```
1779 ### DisableProfileImport
1780 Disables the "Import data from another browser" option in the bookmarks window.
1781
1782 **Compatibility:** Firefox 60, Firefox ESR 60\
1783 **CCK2 Equivalent:** N/A\
1784 **Preferences Affected:** N/A
1785
1786 #### Windows (GPO)
1787 ```
1788 Software\Policies\Mozilla\Firefox\DisableProfileImport = 0x1 | 0x0
1789 ```
1790 #### Windows (Intune)
1791 OMA-URI:
1792 ```
1793 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableProfileImport
1794 ```
1795 Value (string):
1796 ```
1797 <enabled/> or <disabled/>
1798 ```
1799 #### macOS
1800 ```
1801 <dict>
1802   <key>DisableProfileImport</key>
1803   <true/> | <false/>
1804 </dict>
1805 ```
1806 #### policies.json
1807 ```
1808 {
1809   "policies": {
1810     "DisableProfileImport": true | false
1811   }
1812 }
1813 ```
1814 ### DisableProfileRefresh
1815 Disable the Refresh Firefox button on about:support and support.mozilla.org, as well as the prompt that displays offering to refresh Firefox when you haven't used it in a while.
1816
1817 **Compatibility:** Firefox 60, Firefox ESR 60\
1818 **CCK2 Equivalent:** `disableResetFirefox`\
1819 **Preferences Affected:** `browser.disableResetPrompt`
1820
1821 #### Windows (GPO)
1822 ```
1823 Software\Policies\Mozilla\Firefox\DisableProfileRefresh = 0x1 | 0x0
1824 ```
1825 #### Windows (Intune)
1826 OMA-URI:
1827 ```
1828 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableProfileRefresh
1829 ```
1830 Value (string):
1831 ```
1832 <enabled/> or <disabled/>
1833 ```
1834 #### macOS
1835 ```
1836 <dict>
1837   <key>DisableProfileRefresh</key>
1838   <true/> | <false/>
1839 </dict>
1840 ```
1841 #### policies.json
1842 ```
1843 {
1844   "policies": {
1845     "DisableProfileRefresh": true | false
1846   }
1847 }
1848 ```
1849 ### DisableSafeMode
1850 Disable safe mode within the browser.
1851
1852 On Windows, this disables safe mode via the command line as well.
1853
1854 **Compatibility:** Firefox 60, Firefox ESR 60 (Windows, macOS)\
1855 **CCK2 Equivalent:** `disableSafeMode`\
1856 **Preferences Affected:** N/A
1857
1858 #### Windows (GPO)
1859 ```
1860 Software\Policies\Mozilla\Firefox\DisableSafeMode = 0x1 | 0x0
1861 ```
1862 #### Windows (Intune)
1863 OMA-URI:
1864 ```
1865 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSafeMode
1866 ```
1867 Value (string):
1868 ```
1869 <enabled/> or <disabled/>
1870 ```
1871 #### macOS
1872 ```
1873 <dict>
1874   <key>DisableSafeMode</key>
1875   <true/> | <false/>
1876 </dict>
1877 ```
1878 #### policies.json
1879 ```
1880 {
1881   "policies": {
1882     "DisableSafeMode": true | false
1883   }
1884 }
1885 ```
1886 ### DisableSecurityBypass
1887 Prevent the user from bypassing security in certain cases.
1888
1889 `InvalidCertificate` prevents adding an exception when an invalid certificate is shown.
1890
1891 `SafeBrowsing` prevents selecting "ignore the risk" and visiting a harmful site anyway.
1892
1893 **Compatibility:** Firefox 60, Firefox ESR 60\
1894 **CCK2 Equivalent:** N/A\
1895 **Preferences Affected:** `security.certerror.hideAddException`, `browser.safebrowsing.allowOverride`
1896
1897 #### Windows (GPO)
1898 ```
1899 Software\Policies\Mozilla\Firefox\DisableSecurityBypass\InvalidCertificate = 0x1 | 0x0
1900 Software\Policies\Mozilla\Firefox\DisableSecurityBypass\SafeBrowsing = 0x1 | 0x0
1901 ```
1902 #### Windows (Intune)
1903 OMA-URI:
1904 ```
1905 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/P_DisableSecurityBypass_InvalidCertificate
1906 ```
1907 Value (string):
1908 ```
1909 <enabled/> or <disabled/>
1910 ```
1911 OMA-URI:
1912 ```
1913 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/P_DisableSecurityBypass_SafeBrowsing
1914 ```
1915 Value (string):
1916 ```
1917 <enabled/> or <disabled/>
1918 ```
1919
1920 #### macOS
1921 ```
1922 <dict>
1923   <key>DisableSecurityBypass</key>
1924   <dict>
1925     <key>InvalidCertificate</key>
1926     <true/> | <false/>
1927     <key>SafeBrowsing</key>
1928     <true/> | <false/>
1929   </dict>
1930 </dict>
1931 ```
1932 #### policies.json
1933 ```
1934 {
1935   "policies": {
1936     "DisableSecurityBypass": {
1937       "InvalidCertificate": true | false,
1938       "SafeBrowsing": true | false
1939     }
1940   }
1941 }
1942 ```
1943 ### DisableSetDesktopBackground
1944 Remove the "Set As Desktop Background..." menuitem when right clicking on an image.
1945
1946 **Compatibility:** Firefox 60, Firefox ESR 60\
1947 **CCK2 Equivalent:** `removeSetDesktopBackground`\
1948 **Preferences Affected:** N/A
1949
1950 #### Windows (GPO)
1951 ```
1952 Software\Policies\Mozilla\Firefox\DisableSetDesktopBackground = 0x1 | 0x0
1953 ```
1954 #### Windows (Intune)
1955 OMA-URI:
1956 ```
1957 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSetDesktopBackground
1958 ```
1959 Value (string):
1960 ```
1961 <enabled/> or <disabled/>
1962 ```
1963 #### macOS
1964 ```
1965 <dict>
1966   <key>DisableSetDesktopBackground</key>
1967   <true/> | <false/>
1968 </dict>
1969 ```
1970 #### policies.json
1971 ```
1972 {
1973   "policies": {
1974     "DisableSetDesktopBackground": true | false
1975   }
1976 }
1977 ```
1978 ### DisableSystemAddonUpdate
1979 Prevent system add-ons from being installed or updated.
1980
1981 **Compatibility:** Firefox 60, Firefox ESR 60\
1982 **CCK2 Equivalent:** N/A\
1983 **Preferences Affected:** N/A
1984
1985 #### Windows (GPO)
1986 ```
1987 Software\Policies\Mozilla\Firefox\DisableSystemAddonUpdate = 0x1 | 0x0
1988 ```
1989 #### Windows (Intune)
1990 OMA-URI:
1991 ```
1992 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSystemAddonUpdate
1993 ```
1994 Value (string):
1995 ```
1996 <enabled/> or <disabled/>
1997 ```
1998 #### macOS
1999 ```
2000 <dict>
2001   <key>DisableSystemAddonUpdate</key>
2002   <true/> | <false/>
2003 </dict>
2004 ```
2005 #### policies.json
2006 ```
2007 {
2008   "policies": {
2009     "DisableSystemAddonUpdate": true | false
2010   }
2011 }
2012 ```
2013 ### DisableTelemetry
2014 Prevent the upload of telemetry data.
2015
2016 As of Firefox 83 and Firefox ESR 78.5, local storage of telemetry data is disabled as well.
2017
2018 Mozilla recommends that you do not disable telemetry. Information collected through telemetry helps us build a better product for businesses like yours.
2019
2020 **Compatibility:** Firefox 60, Firefox ESR 60\
2021 **CCK2 Equivalent:** `disableTelemetry`\
2022 **Preferences Affected:** `datareporting.healthreport.uploadEnabled`, `datareporting.policy.dataSubmissionEnabled`, `toolkit.telemetry.archive.enabled`
2023
2024 #### Windows (GPO)
2025 ```
2026 Software\Policies\Mozilla\Firefox\DisableTelemetry = 0x1 | 0x0
2027 ```
2028 #### Windows (Intune)
2029 OMA-URI:
2030 ```
2031 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableTelemetry
2032 ```
2033 Value (string):
2034 ```
2035 <enabled/> or <disabled/>
2036 ```
2037 #### macOS
2038 ```
2039 <dict>
2040   <key>DisableTelemetry</key>
2041   <true/> | <false/>
2042 </dict>
2043 ```
2044 #### policies.json
2045 ```
2046 {
2047   "policies": {
2048     "DisableTelemetry": true | false
2049   }
2050 }
2051 ```
2052 ### DisplayBookmarksToolbar
2053 Set the initial state of the bookmarks toolbar. A user can still hide it and it will stay hidden.
2054
2055 **Compatibility:** Firefox 60, Firefox ESR 60\
2056 **CCK2 Equivalent:** `displayBookmarksToolbar`\
2057 **Preferences Affected:** N/A
2058
2059 #### Windows (GPO)
2060 ```
2061 Software\Policies\Mozilla\Firefox\DisplayBookmarksToolbar = 0x1 | 0x0
2062 ```
2063 #### Windows (Intune)
2064 OMA-URI:
2065 ```
2066 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisplayBookmarksToolbar
2067 ```
2068 Value (string):
2069 ```
2070 <enabled/> or <disabled/>
2071 ```
2072 #### macOS
2073 ```
2074 <dict>
2075   <key>DisplayBookmarksToolbar</key>
2076   <true/> | <false/>
2077 </dict>
2078 ```
2079 #### policies.json
2080 ```
2081 {
2082   "policies": {
2083     "DisplayBookmarksToolbar": true | false
2084   }
2085 }
2086 ```
2087 ### DisplayMenuBar
2088 Set the state of the menubar.
2089
2090 `always` means the menubar is shown and cannot be hidden.
2091
2092 `never` means the menubar is hidden and cannot be shown.
2093
2094 `default-on` means the menubar is on by default but can be hidden.
2095
2096 `default-off` means the menubar is off by default but can be shown.
2097
2098 **Compatibility:** Firefox 73, Firefox ESR 68.5 (Windows, some Linux)\
2099 **CCK2 Equivalent:** `displayMenuBar`\
2100 **Preferences Affected:** N/A
2101
2102 #### Windows (GPO)
2103 ```
2104 Software\Policies\Mozilla\Firefox\DisplayMenuBar = "always", "never", "default-on", "default-off"
2105 ```
2106 #### Windows (Intune)
2107 OMA-URI:
2108 ```
2109 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisplayMenuBar_Enum
2110 ```
2111 Value (string):
2112 ```
2113 <enabled/>
2114 <data id="DisplayMenuBar" value="always | never | default-on | default-off"/>
2115 ```
2116 #### macOS
2117 ```
2118 <dict>
2119   <key>DisplayMenuBar</key>
2120   <string>always | never | default-on | default-off</string>
2121 </dict>
2122 ```
2123 #### policies.json
2124 ```
2125 {
2126   "policies": {
2127     "DisplayMenuBar": "always", "never", "default-on", "default-off"
2128   }
2129 }
2130 ```
2131 ### DisplayMenuBar (Deprecated)
2132 Set the initial state of the menubar. A user can still hide it and it will stay hidden.
2133
2134 **Compatibility:** Firefox 60, Firefox ESR 60 (Windows, some Linux)\
2135 **CCK2 Equivalent:** `displayMenuBar`\
2136 **Preferences Affected:** N/A
2137
2138 #### Windows (GPO)
2139 ```
2140 Software\Policies\Mozilla\Firefox\DisplayMenuBar = 0x1 | 0x0
2141 ```
2142 #### macOS
2143 ```
2144 <dict>
2145   <key>DisplayMenuBar</key>
2146   <true/> | <false/>
2147 </dict>
2148 ```
2149 #### policies.json
2150 ```
2151 {
2152   "policies": {
2153     "DisplayMenuBar": true | false
2154   }
2155 }
2156 ```
2157 ### DNSOverHTTPS
2158 Configure DNS over HTTPS.
2159
2160 `Enabled` determines whether DNS over HTTPS is enabled
2161
2162 `ProviderURL` is a URL to another provider.
2163
2164 `Locked` prevents the user from changing DNS over HTTPS preferences.
2165
2166 `ExcludedDomains` excludes domains from DNS over HTTPS.
2167
2168 **Compatibility:** Firefox 63, Firefox ESR 68 (ExcludedDomains added in 75/68.7)\
2169 **CCK2 Equivalent:** N/A\
2170 **Preferences Affected:** `network.trr.mode`, `network.trr.uri`
2171
2172 #### Windows (GPO)
2173 ```
2174 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\Enabled = 0x1 | 0x0
2175 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\ProviderURL = "URL_TO_ALTERNATE_PROVIDER"
2176 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\Locked = 0x1 | 0x0
2177 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\ExcludedDomains\1 = "example.com"
2178 ```
2179 #### Windows (Intune)
2180 OMA-URI:
2181 ```
2182 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_Enabled
2183 ```
2184 Value (string):
2185 ```
2186 <enabled/> or <disabled/>
2187 ```
2188 OMA-URI:
2189 ```
2190 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_ProviderURL
2191 ```
2192 Value (string):
2193 ```
2194 <enabled/>
2195 <data id="String" value="URL_TO_ALTERNATE_PROVIDER"/>
2196 ```
2197 OMA-URI:
2198 ```
2199 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_Locked
2200 ```
2201 Value (string):
2202 ```
2203 <enabled/> or <disabled/>
2204 ```
2205 OMA-URI:
2206 ```
2207 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_ExcludedDomains
2208 ```
2209 Value (string):
2210 ```
2211 <enabled/>
2212 <data id="List" value="1&#xF000;example.com"/>
2213 ```
2214 #### macOS
2215 ```
2216 <dict>
2217   <key>DNSOverHTTPS</key>
2218   <dict>
2219     <key>Enabled</key>
2220     <true/> | <false/>
2221     <key>ProviderURL</key>
2222     <string>URL_TO_ALTERNATE_PROVIDER</string>
2223     <key>Locked</key>
2224     <true/> | <false/>
2225     <key>ExcludedDomains</key>
2226     <array>
2227       <string>example.com</string>
2228     </array>
2229   </dict>
2230 </dict>
2231 ```
2232 #### policies.json
2233 ```
2234 {
2235   "policies": {
2236     "DNSOverHTTPS": {
2237       "Enabled":  true | false,
2238       "ProviderURL": "URL_TO_ALTERNATE_PROVIDER",
2239       "Locked": true | false,
2240       "ExcludedDomains": ["example.com"]
2241     }
2242   }
2243 }
2244 ```
2245 ### DontCheckDefaultBrowser
2246 Don't check if Firefox is the default browser at startup.
2247
2248 **Compatibility:** Firefox 60, Firefox ESR 60\
2249 **CCK2 Equivalent:** `dontCheckDefaultBrowser`\
2250 **Preferences Affected:** `browser.shell.checkDefaultBrowser`
2251
2252 #### Windows (GPO)
2253 ```
2254 Software\Policies\Mozilla\Firefox\DontCheckDefaultBrowser = 0x1 | 0x0
2255 ```
2256 #### Windows (Intune)
2257 OMA-URI:
2258 ```
2259 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DontCheckDefaultBrowser
2260 ```
2261 Value (string):
2262 ```
2263 <enabled/> or <disabled/>
2264 ```
2265 #### macOS
2266 ```
2267 <dict>
2268   <key>DontCheckDefaultBrowser</key>
2269   <true/> | <false/>
2270 </dict>
2271 ```
2272 #### policies.json
2273 ```
2274 {
2275   "policies": {
2276     "DontCheckDefaultBrowser": true | false
2277   }
2278 }
2279 ```
2280 ### DownloadDirectory
2281 Set and lock the download directory.
2282
2283 You can use ${home} for the native home directory.
2284
2285 **Compatibility:** Firefox 68, Firefox ESR 68\
2286 **CCK2 Equivalent:** N/A\
2287 **Preferences Affected:** `browser.download.dir`, `browser.download.folderList`, `browser.download.useDownloadDir`
2288
2289 #### Windows (GPO)
2290 ```
2291 Software\Policies\Mozilla\Firefox\DownloadDirectory = "${home}\Downloads"
2292 ```
2293 #### Windows (Intune)
2294 OMA-URI:
2295 ```
2296 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DownloadDirectory
2297 ```
2298 Value (string):
2299 ```
2300 <enabled/>
2301 <data id="Preferences_String" value="${home}\Downloads"/>
2302 ```
2303 #### macOS
2304 ```
2305 <dict>
2306   <key>DownloadDirectory</key>
2307   <string>${home}/Downloads</string>
2308 </dict>
2309 ```
2310 #### policies.json (macOS and Linux)
2311 ```
2312 {
2313   "policies": {
2314     "DownloadDirectory": "${home}/Downloads"
2315 }
2316 ```
2317 #### policies.json (Windows)
2318 ```
2319 {
2320   "policies": {
2321     "DownloadDirectory": "${home}\\Downloads"
2322 }
2323 ```
2324 ### EnableTrackingProtection
2325 Configure tracking protection.
2326
2327 If this policy is not configured, tracking protection is not enabled by default in the browser, but it is enabled by default in private browsing and the user can change it.
2328
2329 If `Value` is set to false, tracking protection is disabled and locked in both the regular browser and private browsing.
2330
2331 If `Value` is set to true, tracking protection is enabled by default in both the regular browser and private browsing and the `Locked` value determines whether or not a user can change it.
2332
2333 If `Cryptomining` is set to true, cryptomining scripts on websites are blocked.
2334
2335 If `Fingerprinting` is set to true, fingerprinting scripts on websites are blocked.
2336
2337 `Exceptions` are origins for which tracking protection is not enabled.
2338
2339 **Compatibility:** Firefox 60, Firefox ESR 60 (Cryptomining and Fingerprinting added in 70/68.2, Exceptions added in 73/68.5)\
2340 **CCK2 Equivalent:** N/A\
2341 **Preferences Affected:** `privacy.trackingprotection.enabled`, `privacy.trackingprotection.pbmode.enabled`, `privacy.trackingprotection.cryptomining.enabled`, `privacy.trackingprotection.fingerprinting.enabled`
2342
2343 #### Windows (GPO)
2344 ```
2345 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Value = 0x1 | 0x0
2346 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Locked = 0x1 | 0x0
2347 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Cryptomining = 0x1 | 0x0
2348 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Fingerprinting = 0x1 | 0x0
2349 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Exceptions\1 = "https://example.com"
2350 ```
2351 #### Windows (Intune)
2352 OMA-URI:
2353 ```
2354 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/A_TrackingProtection_Value
2355 ```
2356 Value (string):
2357 ```
2358 <enabled/> or <disabled/>
2359 ```
2360 OMA-URI:
2361 ```
2362 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/B_TrackingProtection_Cryptomining
2363 ```
2364 Value (string):
2365 ```
2366 <enabled/> or <disabled/>
2367 ```
2368 OMA-URI:
2369 ```
2370 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/C_TrackingProtection_Fingerprinting
2371 ```
2372 Value (string):
2373 ```
2374 <enabled/> or <disabled/>
2375 ```
2376 OMA-URI:
2377 ```
2378 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/D_TrackingProtection_Exceptions
2379 ```
2380 Value (string):
2381 ```
2382 <enabled/>
2383 <data id="TrackingProtection_Exceptions" value="1&#xF000;https://example.com"/>
2384 ```
2385 OMA-URI:
2386 ```
2387 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/E_TrackingProtection_Locked
2388 ```
2389 Value (string):
2390 ```
2391 <enabled/> or <disabled/>
2392 ```
2393 #### macOS
2394 ```
2395 <dict>
2396   <key>EnableTrackingProtection</key>
2397   <dict>
2398     <key>Value</key>
2399     <true/> | <false/>
2400     <key>Locked</key>
2401     <true/> | <false/>
2402     <key>Cryptomining</key>
2403     <true/> | <false/>
2404     <key>Fingerprinting</key>
2405     <true/> | <false/>
2406     <key>Exceptions</key>
2407     <array>
2408       <string>https://example.com</string>
2409     </array>
2410   </dict>
2411 </dict>
2412 ```
2413 #### policies.json
2414 ```
2415 {
2416   "policies": {
2417     "EnableTrackingProtection": {
2418       "Value": true | false,
2419       "Locked": true | false,
2420       "Cryptomining": true | false,
2421       "Fingerprinting": true | false,
2422       "Exceptions": ["https://example.com"]
2423     }
2424   }
2425 }
2426 ```
2427 ### EncryptedMediaExtensions
2428 Enable or disable Encrypted Media Extensions and optionally lock it.
2429
2430 If `Enabled` is set to false, encrypted media extensions (like Widevine) are not downloaded by Firefox unless the user consents to installing them.
2431
2432 If `Locked` is set to true and `Enabled` is set to false, Firefox will not download encrypted media extensions (like Widevine) or ask the user to install them.
2433
2434 **Compatibility:** Firefox 77, Firefox ESR 68.9\
2435 **CCK2 Equivalent:** N/A\
2436 **Preferences Affected:** `media.eme.enabled`
2437
2438 #### Windows (GPO)
2439 ```
2440 Software\Policies\Mozilla\Firefox\EncryptedMediaExtensions\Enabled = 0x1 | 0x0
2441 Software\Policies\Mozilla\Firefox\EncryptedMediaExtensions\Locked = 0x1 | 0x0
2442 ```
2443 #### Windows (Intune)
2444 OMA-URI:
2445 ```
2446 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~EncryptedMediaExtensions/EncryptedMediaExtensions_Enabled
2447 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~EncryptedMediaExtensions/EncryptedMediaExtensions_Locked
2448 ```
2449 Value (string):
2450 ```
2451 <enabled/>or <disabled/>
2452 ```
2453 #### macOS
2454 ```
2455 <dict>
2456   <key>EncryptedMediaExtensions</key>
2457   <dict>
2458     <key>Enabled</key>
2459     <true/> | <false/>
2460     <key>Locked</key>
2461     <true/> | <false/>
2462   </dict>
2463 </dict>
2464 ```
2465 #### policies.json
2466 ```
2467 {
2468   "policies": {
2469     "EncryptedMediaExtensions": {
2470       "Enabled": true | false,
2471       "Locked": true | false
2472     }
2473   }
2474 }
2475 ```
2476 ### EnterprisePoliciesEnabled
2477 Enable policy support on macOS.
2478
2479 **Compatibility:** Firefox 63, Firefox ESR 60.3 (macOS only)\
2480 **CCK2 Equivalent:** N/A\
2481 **Preferences Affected:** N/A
2482
2483 #### macOS
2484 ```
2485 <dict>
2486   <key>EnterprisePoliciesEnabled</key>
2487   <true/>
2488 </dict>
2489 ```
2490 ### ExemptDomainFileTypePairsFromFileTypeDownloadWarnings
2491
2492 Disable warnings based on file extension for specific file types on domains.
2493
2494 This policy is based on the [Chrome policy](https://chromeenterprise.google/policies/#ExemptDomainFileTypePairsFromFileTypeDownloadWarnings) of the same name.
2495
2496 Important: The documentation for the policy for both Edge and Chrome is incorrect. The ```domains``` value must be a domain, not a URL pattern. Also, we do not support using ```*``` to mean all domains.
2497
2498 **Compatibility:** Firefox 102\
2499 **CCK2 Equivalent:** N/A\
2500 **Preferences Affected:** N/A
2501
2502 #### Windows (GPO)
2503 Software\Policies\Mozilla\Firefox\ExemptDomainFileTypePairsFromFileTypeDownloadWarnings (REG_MULTI_SZ) =
2504 ```
2505 [
2506   {
2507      "file_extension": "jnlp",
2508      "domains": ["example.com"]
2509   }
2510 ]
2511 ```
2512 #### Windows (Intune)
2513 OMA-URI:
2514 ```
2515 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/ExemptDomainFileTypePairsFromFileTypeDownloadWarnings
2516 ```
2517 Value (string):
2518 ```
2519 <enabled/>
2520 <data id="JSON" value='
2521 [
2522   {
2523      "file_extension": "jnlp",
2524      "domains": ["example.com"]
2525   }
2526 ]
2527 '/>
2528 ```
2529 #### macOS
2530 ```
2531 <dict>
2532   <key>ExemptDomainFileTypePairsFromFileTypeDownloadWarnings</key>
2533   <array>
2534     <dict>
2535       <key>file_extension</key>
2536       <string>jnlp</string>
2537       <key>domains</key>
2538       <array>
2539         <string>example.com</string>
2540       </array>
2541     </dict>
2542   </array>
2543 </dict>
2544 ```
2545 #### policies.json
2546 ```
2547 {
2548   "policies": {
2549     "ExemptDomainFileTypePairsFromFileTypeDownloadWarnings": [{
2550       "file_extension": "jnlp",
2551       "domains": ["example.com"]
2552     }]
2553   }
2554 }
2555 ```
2556 ### Extensions
2557 Control the installation, uninstallation and locking of extensions.
2558
2559 While this policy is not technically deprecated, it is recommended that you use the **[`ExtensionSettings`](#extensionsettings)** policy. It has the same functionality and adds more. It does not support native paths, though, so you'll have to use file:/// URLs.
2560
2561 `Install` is a list of URLs or native paths for extensions to be installed.
2562
2563 `Uninstall` is a list of extension IDs that should be uninstalled if found.
2564
2565 `Locked` is a list of extension IDs that the user cannot disable or uninstall.
2566
2567 **Compatibility:** Firefox 60, Firefox ESR 60\
2568 **CCK2 Equivalent:** `addons`\
2569 **Preferences Affected:** N/A
2570
2571 #### Windows (GPO)
2572 ```
2573 Software\Policies\Mozilla\Firefox\Extensions\Install\1 = "https://addons.mozilla.org/firefox/downloads/somefile.xpi"
2574 Software\Policies\Mozilla\Firefox\Extensions\Install\2 = "//path/to/xpi"
2575 Software\Policies\Mozilla\Firefox\Extensions\Uninstall\1 = "bad_addon_id@mozilla.org"
2576 Software\Policies\Mozilla\Firefox\Extensions\Locked\1 = "addon_id@mozilla.org"
2577 ```
2578 #### Windows (Intune)
2579 OMA-URI:
2580 ```
2581 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/Extensions_Install
2582 ```
2583 Value (string):
2584 ```
2585 <enabled/>
2586 <data id="Extensions" value="1&#xF000;https://addons.mozilla.org/firefox/downloads/somefile.xpi&#xF000;2&#xF000;//path/to/xpi"/>
2587 ```
2588 OMA-URI:
2589 ```
2590 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/Extensions_Uninstall
2591 ```
2592 Value (string):
2593 ```
2594 <enabled/>
2595 <data id="Extensions" value="1&#xF000;bad_addon_id@mozilla.org"/>
2596 ```
2597 OMA-URI:
2598 ```
2599 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/Extensions_Locked
2600 ```
2601 Value (string):
2602 ```
2603 <enabled/>
2604 <data id="Extensions" value="1&#xF000;addon_id@mozilla.org"/>
2605 ```
2606 #### macOS
2607 ```
2608 <dict>
2609   <key>Extensions</key>
2610   <dict>
2611     <key>Install</key>
2612     <array>
2613       <string>https://addons.mozilla.org/firefox/downloads/somefile.xpi</string>
2614       <string>//path/to/xpi</string>
2615     </array>
2616     <key>Uninstall</key>
2617     <array>
2618       <string>bad_addon_id@mozilla.org</string>
2619     </array>
2620     <key>Locked</key>
2621     <array>
2622       <string>addon_id@mozilla.org</string>
2623     </array>
2624   </dict>
2625 </dict>
2626 ```
2627 #### policies.json
2628 ```
2629 {
2630   "policies": {
2631     "Extensions": {
2632       "Install": ["https://addons.mozilla.org/firefox/downloads/somefile.xpi", "//path/to/xpi"],
2633       "Uninstall": ["bad_addon_id@mozilla.org"],
2634       "Locked":  ["addon_id@mozilla.org"]
2635     }
2636   }
2637 }
2638 ```
2639 ### ExtensionSettings
2640 Manage all aspects of extensions. This policy is based heavily on the [Chrome policy](https://dev.chromium.org/administrators/policy-list-3/extension-settings-full) of the same name.
2641
2642 This policy maps an extension ID to its configuration. With an extension ID, the configuration will be applied to the specified extension only. A default configuration can be set for the special ID "*", which will apply to all extensions that don't have a custom configuration set in this policy.
2643
2644 To obtain an extension ID, install the extension and go to about:support. You will see the ID in the Extensions section. I've also created an extension that makes it easy to find the ID of extensions on AMO. You can download it [here](https://github.com/mkaply/queryamoid/releases/tag/v0.1).
2645
2646 The configuration for each extension is another dictionary that can contain the fields documented below.
2647
2648 | Name | Description |
2649 | --- | --- |
2650 | `installation_mode` | Maps to a string indicating the installation mode for the extension. The valid strings are `allowed`,`blocked`,`force_installed`, and `normal_installed`.
2651 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`allowed` | Allows the extension to be installed by the user. This is the default behavior. There is no need for an install_url; it will automatically be allowed based on the ID.
2652 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`blocked`| Blocks installation of the extension and removes it from the device if already installed.
2653 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`force_installed`| The extension is automatically installed and can't be removed by the user. This option is not valid for the default configuration and requires an install_url.
2654 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`normal_installed`| The extension is automatically installed but can be disabled by the user. This option is not valid for the default configuration and requires an install_url.
2655 | `install_url`| Maps to a URL indicating where Firefox can download a force_installed or normal_installed extension.  If installing from the local file system, use a [```file:///``` URL](https://en.wikipedia.org/wiki/File_URI_scheme). If installing from the addons.mozilla.org, use the following URL (substituting SHORT_NAME from the URL on AMO), https://addons.mozilla.org/firefox/downloads/latest/SHORT_NAME/latest.xpi. Languages packs are available from https://releases.mozilla.org/pub/firefox/releases/VERSION/PLATFORM/xpi/LANGUAGE.xpi. If you need to update the extension, you can change the name of the extension and it will be automatically updated. Extensions installed from file URLs will additional be updated when their internal version changes.
2656 | `install_sources` | A list of sources from which installing extensions is allowed using URL match patterns. **This is unnecessary if you are only allowing the installation of certain extensions by ID.** Each item in this list is an extension-style match pattern. Users will be able to easily install items from any URL that matches an item in this list. Both the location of the *.xpi file and the page where the download is started from (i.e.  the referrer) must be allowed by these patterns. This setting can be used only for the default configuration.
2657 | `allowed_types` | This setting whitelists the allowed types of extension/apps that can be installed in Firefox. The value is a list of strings, each of which should be one of the following: "extension", "theme", "dictionary", "locale" This setting can be used only for the default configuration.
2658 | `blocked_install_message` | This maps to a string specifying the error message to display to users if they're blocked from installing an extension. This setting allows you to append text to the generic error message displayed when the extension is blocked. This could be be used to direct users to your help desk, explain why a particular extension is blocked, or something else. This setting can be used only for the default configuration.
2659 | `restricted_domains` | An array of domains on which content scripts can't be run. This setting can be used only for the default configuration.
2660 | `updates_disabled` | (Firefox 89, Firefox ESR 78.11) Boolean that indicates whether or not to disable automatic updates for an individual extension.
2661
2662 **Compatibility:** Firefox 69, Firefox ESR 68.1 (As of Firefox 85, Firefox ESR 78.7, installing a theme makes it the default.)\
2663 **CCK2 Equivalent:** N/A\
2664 **Preferences Affected:** N/A
2665
2666 #### Windows (GPO)
2667 Software\Policies\Mozilla\Firefox\ExtensionSettings (REG_MULTI_SZ) =
2668 ```
2669 {
2670   "*": {
2671     "blocked_install_message": "Custom error message.",
2672     "install_sources": ["https://yourwebsite.com/*"],
2673     "installation_mode": "blocked",
2674     "allowed_types": ["extension"]
2675   },
2676   "uBlock0@raymondhill.net": {
2677     "installation_mode": "force_installed",
2678     "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
2679   },
2680   "https-everywhere@eff.org": {
2681     "installation_mode": "allowed"
2682   }
2683 }
2684 ```
2685 #### Windows (Intune)
2686 OMA-URI:
2687 ```
2688 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/ExtensionSettings
2689 ```
2690 Value (string):
2691 ```
2692 <enabled/>
2693 <data id="ExtensionSettings" value='
2694 {
2695   "*": {
2696     "blocked_install_message": "Custom error message.",
2697     "install_sources": ["https://yourwebsite.com/*"],
2698     "installation_mode": "blocked",
2699     "allowed_types": ["extension"]
2700   },
2701   "uBlock0@raymondhill.net": {
2702     "installation_mode": "force_installed",
2703     "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
2704   },
2705     "https-everywhere@eff.org": {
2706     "installation_mode": "allowed"
2707   }
2708 }'/>
2709 ```
2710 #### macOS
2711 ```
2712 <dict>
2713   <key>ExtensionSettings</key>
2714   <dict>
2715     <key>*</key>
2716     <dict>
2717       <key>blocked_install_message</key>
2718       <string>Custom error message.</string>
2719       <key>install_sources</key>
2720       <array>
2721         <string>"https://yourwebsite.com/*"</string>
2722       </array>
2723       <key>installation_mode</key>
2724       <string>blocked</string>
2725       <key>allowed_types</key>
2726       <array>
2727         <string>extension</string>
2728       </array>
2729     </dict>
2730     <key>uBlock0@raymondhill.net</key>
2731     <dict>
2732       <key>installation_mode</key>
2733        <string>force_installed</string>
2734       <key>install_url</key>
2735       <string>https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi</string>
2736     </dict>
2737     <key>https-everywhere@eff.org</key>
2738     <dict>
2739       <key>installation_mode</key>
2740        <string>allowed</string>
2741     </dict>
2742   </dict>
2743 </dict>
2744 ```
2745 #### policies.json
2746 ```
2747 {
2748   "policies": {
2749     "ExtensionSettings": {
2750       "*": {
2751         "blocked_install_message": "Custom error message.",
2752         "install_sources": ["https://yourwebsite.com/*"],
2753         "installation_mode": "blocked",
2754         "allowed_types": ["extension"]
2755       },
2756       "uBlock0@raymondhill.net": {
2757         "installation_mode": "force_installed",
2758         "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
2759       },
2760       "https-everywhere@eff.org": {
2761         "installation_mode": "allowed"
2762       }
2763     }
2764   }
2765 }
2766 ```
2767 ### ExtensionUpdate
2768 Control extension updates.
2769
2770 **Compatibility:** Firefox 67, Firefox ESR 60.7\
2771 **CCK2 Equivalent:** N/A\
2772 **Preferences Affected:** `extensions.update.enabled`
2773
2774 #### Windows (GPO)
2775 ```
2776 Software\Policies\Mozilla\Firefox\ExtensionUpdate = 0x1 | 0x0
2777 ```
2778 #### Windows (Intune)
2779 OMA-URI:
2780 ```
2781 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/ExtensionUpdate
2782 ```
2783 Value (string):
2784 ```
2785 <enabled/> or <disabled/>
2786 ```
2787 #### macOS
2788 ```
2789 <dict>
2790   <key>ExtensionUpdate</key>
2791   <true/> | <false/>
2792 </dict>
2793 ```
2794 #### policies.json
2795 ```
2796 {
2797   "policies": {
2798     "ExtensionUpdate": true | false
2799   }
2800 }
2801 ```
2802 ### FirefoxHome
2803 Customize the Firefox Home page.
2804
2805 **Compatibility:** Firefox 68, Firefox ESR 68 (SponsoredTopSites and SponsoredPocket were added in Firefox 95, Firefox ESR 91.4)
2806 **CCK2 Equivalent:** N/A\
2807 **Preferences Affected:** `browser.newtabpage.activity-stream.showSearch`, `browser.newtabpage.activity-stream.feeds.topsites`, `browser.newtabpage.activity-stream.feeds.section.highlights`, `browser.newtabpage.activity-stream.feeds.section.topstories`, `browser.newtabpage.activity-stream.feeds.snippets`, `browser.newtabpage.activity-stream.showSponsoredTopSites`, `browser.newtabpage.activity-stream.showSponsored`
2808
2809 #### Windows (GPO)
2810 ```
2811 Software\Policies\Mozilla\Firefox\FirefoxHome\Search = 0x1 | 0x0
2812 Software\Policies\Mozilla\Firefox\FirefoxHome\TopSites = 0x1 | 0x0
2813 Software\Policies\Mozilla\Firefox\FirefoxHome\SponsoredTopSites = 0x1 | 0x0
2814 Software\Policies\Mozilla\Firefox\FirefoxHome\Highlights = 0x1 | 0x0
2815 Software\Policies\Mozilla\Firefox\FirefoxHome\Pocket = 0x1 | 0x0
2816 Software\Policies\Mozilla\Firefox\FirefoxHome\SponsoredPocket = 0x1 | 0x0
2817 Software\Policies\Mozilla\Firefox\FirefoxHome\Snippets = 0x1 | 0x0
2818 Software\Policies\Mozilla\Firefox\FirefoxHome\Locked = 0x1 | 0x0
2819 ```
2820 #### Windows (Intune)
2821 OMA-URI:
2822 ```
2823 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/CustomizeFirefoxHome
2824 ```
2825 Value (string):
2826 ```
2827 <enabled/>
2828 <data id="FirefoxHome_Search"  value="true | false"/>
2829 <data id="FirefoxHome_TopSites"  value="true | false"/>
2830 <data id="FirefoxHome_SponsoredTopSites"  value="true | false"/>
2831 <data id="FirefoxHome_Highlights"  value="true | false"/>
2832 <data id="FirefoxHome_Pocket"  value="true | false"/>
2833 <data id="FirefoxHome_SponsoredPocket"  value="true | false"/>
2834 <data id="FirefoxHome_Snippets"  value="true | false"/>
2835 <data id="FirefoxHome_Locked"  value="true | false"/>
2836 ```
2837 #### macOS
2838 ```
2839 <dict>
2840   <key>FirefoxHome</key>
2841   <dict>
2842     <key>Search</key>
2843     <true/> | <false/>
2844     <key>TopSites</key>
2845     <true/> | <false/>
2846     <key>SponsoredTopSites</key>
2847     <true/> | <false/>
2848     <key>Highlights</key>
2849     <true/> | <false/>
2850     <key>Pocket</key>
2851     <true/> | <false/>
2852     <key>SponsoredPocket</key>
2853     <true/> | <false/>
2854     <key>Snippets</key>
2855     <true/> | <false/>
2856     <key>Locked</key>
2857     <true/> | <false/>
2858   </dict>
2859 </dict>
2860 ```
2861 #### policies.json
2862 ```
2863 {
2864   "policies": {
2865     "FirefoxHome": {
2866       "Search": true | false,
2867       "TopSites": true | false,
2868       "SponsoredTopSites": true | false,
2869       "Highlights": true | false,
2870       "Pocket": true | false,
2871       "SponsoredPocket": true | false,
2872       "Snippets": true | false,
2873       "Locked": true | false
2874     }
2875   }
2876 }
2877 ```
2878 ### FlashPlugin (Deprecated)
2879 Configure the default Flash plugin policy as well as origins for which Flash is allowed.
2880
2881 `Allow` is a list of origins where Flash are allowed.
2882
2883 `Block` is a list of origins where Flash is not allowed.
2884
2885 `Default` determines whether or not Flash is allowed by default.
2886
2887 `Locked` prevents the user from changing Flash preferences.
2888
2889 **Compatibility:** Firefox 60, Firefox ESR 60\
2890 **CCK2 Equivalent:** `permissions.plugin`\
2891 **Preferences Affected:** `plugin.state.flash`
2892
2893 #### Windows (GPO)
2894 ```
2895 Software\Policies\Mozilla\Firefox\FlashPlugin\Allow\1 = "https://example.org"
2896 Software\Policies\Mozilla\Firefox\FlashPlugin\Block\1 = "https://example.edu"
2897 Software\Policies\Mozilla\Firefox\FlashPlugin\Default = 0x1 | 0x0
2898 Software\Policies\Mozilla\Firefox\FlashPlugin\Locked = 0x1 | 0x0
2899 ```
2900 #### Windows (Intune)
2901 OMA-URI:
2902 ```
2903 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Flash/FlashPlugin_Allow
2904 ```
2905 Value (string):
2906 ```
2907 <enabled/>
2908 <data id="Permissions" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
2909 ```
2910 OMA-URI:
2911 ```
2912 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Flash/FlashPlugin_Locked
2913 ```
2914 Value (string):
2915 ```
2916 <enabled/> or <disabled/>
2917 ```
2918 OMA-URI:
2919 ```
2920 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Flash/FlashPlugin_Default
2921 ```
2922 Value (string):
2923 ```
2924 <enabled/> or <disabled/>
2925 ```
2926 #### macOS
2927 ```
2928 <dict>
2929   <key>FlashPlugin</key>
2930   <dict>
2931     <key>Allow</key>
2932     <array>
2933       <string>http://example.org</string>
2934     </array>
2935     <key>Block</key>
2936     <array>
2937       <string>http://example.edu</string>
2938     </array>
2939     <key>Default</key>
2940     <true/> | <false/>
2941     <key>Locked</key>
2942     <true/> | <false/>
2943   </dict>
2944 </dict>
2945 ```
2946 #### policies.json
2947 ```
2948 {
2949   "policies": {
2950     "FlashPlugin": {
2951       "Allow": ["http://example.org/"],
2952       "Block": ["http://example.edu/"],
2953       "Default": true | false,
2954       "Locked": true | false
2955     }
2956   }
2957 }
2958 ```
2959 ### GoToIntranetSiteForSingleWordEntryInAddressBar
2960 Whether to always go through the DNS server before sending a single word search string to a search engine.
2961
2962 If the site exists, it will navigate to the website. If the intranet responds with a 404, the page will show a 404. If the intranet does not respond, the browser will attempt a search.
2963
2964 The second result in the URL bar will be a search result to allow users to conduct a web search exactly as it was entered.
2965
2966 If instead you would like to enable the ability to have your domain appear as a valid URL and to disallow the browser from ever searching that term using the first result that matches it, add the pref `browser.fixup.domainwhitelist.YOUR_DOMAIN` (where `YOUR_DOMAIN` is the name of the domain you'd like to add), and set the pref to `true`. The URL bar will then suggest `YOUR_DOMAIN` when the user fully types `YOUR_DOMAIN`. If the user attempts to load that domain and it fails to load, it will show an "Unable to connect" error page.
2967
2968 You can also whitelist a domain suffix that is not part of the [Public Suffix List](https://publicsuffix.org/) by adding the pref `browser.fixup.domainsuffixwhitelist.YOUR_DOMAIN_SUFFIX` with a value of `true`.
2969
2970 Additionally, if you want users to see a "Did you mean to go to 'YOUR_DOMAIN'" prompt below the URL bar if they land on a search results page instead of an intranet domain that provides a response, set the pref `browser.urlbar.dnsResolveSingleWordsAfterSearch` to `1`. Enabling this will cause the browser to commit a DNS check after every single word search. If the browser receives a response from the intranet, a prompt will ask the user if they'd like to instead navigate to `YOUR_DOMAIN`. If the user presses the **yes** button, `browser.fixup.domainwhitelist.YOUR_DOMAIN` will be set to `true`.
2971
2972 **Compatibility:** Firefox 104, Firefox ESR 102.2\
2973 **CCK2 Equivalent:** `N/A`\
2974 **Preferences Affected:** `browser.fixup.dns_first_for_single_words`
2975
2976 #### Windows (GPO)
2977 ```
2978 Software\Policies\Mozilla\Firefox\GoToIntranetSiteForSingleWordEntryInAddressBar = 0x1 | 0x0
2979 ```
2980 #### Windows (Intune)
2981 OMA-URI:
2982 ```
2983 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/GoToIntranetSiteForSingleWordEntryInAddressBar
2984 ```
2985 Value (string):
2986 ```
2987 <enabled/> or <disabled/>
2988 ```
2989 #### macOS
2990 ```
2991 <dict>
2992   <key>GoToIntranetSiteForSingleWordEntryInAddressBar</key>
2993   <true/> | <false/>
2994 </dict>
2995 ```
2996 #### policies.json
2997 ```
2998 {
2999   "policies": {
3000     "GoToIntranetSiteForSingleWordEntryInAddressBar": true | false
3001   }
3002 }
3003 ```
3004 ### Handlers
3005 Configure default application handlers. This policy is based on the internal format of `handlers.json`.
3006
3007 You can configure handlers based on a mime type (`mimeTypes`), a file's extension (`extensions`), or a protocol (`schemes`).
3008
3009 Within each handler type, you specify the given mimeType/extension/scheme as a key and use the following subkeys to describe how it is handled.
3010
3011 | Name | Description |
3012 | --- | --- |
3013 | `action`| Can be either `saveToDisk`, `useHelperApp`, `useSystemDefault`.
3014 | `ask` | If `true`, the user is asked if what they want to do with the file. If `false`, the action is taken without user intervention.
3015 | `handlers` | An array of handlers with the first one being the default. If you don't want to have a default handler, use an empty object for the first handler. Choose between path or uriTemplate.
3016 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`name` | The display name of the handler (might not be used).
3017 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`path`| The native path to the executable to be used.
3018 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`uriTemplate`| A url to a web based application handler. The URL must be https and contain a %s to be used for substitution.
3019
3020 **Compatibility:** Firefox 78, Firefox ESR 78\
3021 **CCK2 Equivalent:** N/A\
3022 **Preferences Affected:** N/A
3023
3024 #### Windows (GPO)
3025 Software\Policies\Mozilla\Firefox\Handlers (REG_MULTI_SZ) =
3026 ```
3027 {
3028   "mimeTypes": {
3029     "application/msword": {
3030       "action": "useSystemDefault",
3031       "ask": true | false
3032     }
3033   },
3034   "schemes": {
3035     "mailto": {
3036       "action": "useHelperApp",
3037       "ask": true | false,
3038       "handlers": [{
3039         "name": "Gmail",
3040         "uriTemplate": "https://mail.google.com/mail/?extsrc=mailto&url=%s"
3041       }]
3042     }
3043   },
3044   "extensions": {
3045     "pdf": {
3046       "action": "useHelperApp",
3047       "ask": true | false,
3048       "handlers": [{
3049         "name": "Adobe Acrobat",
3050         "path": "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32.exe"
3051       }]
3052     }
3053   }
3054 }
3055 ```
3056 #### Windows (Intune)
3057 OMA-URI:
3058 ```
3059 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Handlers
3060 ```
3061 Value (string):
3062 ```
3063 <enabled/>
3064 <data id="Handlers" value='
3065 {
3066   "mimeTypes": {
3067     "application/msword": {
3068       "action": "useSystemDefault",
3069       "ask": true | false
3070     }
3071   },
3072   "schemes": {
3073     "mailto": {
3074       "action": "useHelperApp",
3075       "ask": true | false,
3076       "handlers": [{
3077         "name": "Gmail",
3078         "uriTemplate": "https://mail.google.com/mail/?extsrc=mailto&amp;url=%s"
3079       }]
3080     }
3081   },
3082   "extensions": {
3083     "pdf": {
3084       "action": "useHelperApp",
3085       "ask": true | false,
3086       "handlers": [{
3087         "name": "Adobe Acrobat",
3088         "path": "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32.exe"
3089       }]
3090     }
3091   }
3092 }
3093 '/>
3094 ```
3095 #### macOS
3096 ```
3097 <dict>
3098   <key>Handlers</key>
3099   <dict>
3100     <key>mimeTypes</key>
3101     <dict>
3102       <key>application/msword</key>
3103       <dict>
3104         <key>action</key>
3105         <string>useSystemDefault</string>
3106         <key>ask</key>
3107         <true/> | <false/>
3108       </dict>
3109     </dict>
3110     <key>schemes</key>
3111     <dict>
3112       <key>mailto</key>
3113       <dict>
3114         <key>action</key>
3115         <string>useHelperApp</string>
3116         <key>ask</key>
3117         <true/> | <false/>
3118         <key>handlers</key>
3119         <array>
3120           <dict>
3121             <key>name</key>
3122             <string>Gmail</string>
3123             <key>uriTemplate</key>
3124             <string>https://mail.google.com/mail/?extsrc=mailto&url=%s</string>
3125           </dict>
3126         </array>
3127       </dict>
3128     </dict>
3129     <key>extensions</key>
3130     <dict>
3131       <key>pdf</key>
3132       <dict>
3133         <key>action</key>
3134         <string>useHelperApp</string>
3135         <key>ask</key>
3136         <true/> | <false/>
3137         <key>handlers</key>
3138         <array>
3139           <dict>
3140             <key>name</key>
3141             <string>Adobe Acrobat</string>
3142             <key>path</key>
3143             <string>/System/Applications/Preview.app</string>
3144           </dict>
3145         </array>
3146       </dict>
3147     </dict>
3148   </dict>
3149 </dict>
3150 ```
3151 #### policies.json
3152 ```
3153 {
3154   "policies": {
3155     "Handlers": {
3156       "mimeTypes": {
3157         "application/msword": {
3158           "action": "useSystemDefault",
3159           "ask": false
3160         }
3161       },
3162       "schemes": {
3163         "mailto": {
3164           "action": "useHelperApp",
3165           "ask": true | false,
3166           "handlers": [{
3167             "name": "Gmail",
3168             "uriTemplate": "https://mail.google.com/mail/?extsrc=mailto&url=%s"
3169           }]
3170         }
3171       },
3172       "extensions": {
3173         "pdf": {
3174           "action": "useHelperApp",
3175           "ask": true | false,
3176           "handlers": [{
3177             "name": "Adobe Acrobat",
3178             "path": "/usr/bin/acroread"
3179           }]
3180         }
3181       }
3182     }
3183   }
3184 }
3185 ```
3186 ### HardwareAcceleration
3187 Control hardware acceleration.
3188
3189 **Compatibility:** Firefox 60, Firefox ESR 60\
3190 **CCK2 Equivalent:** N/A\
3191 **Preferences Affected:** `layers.acceleration.disabled`
3192
3193 #### Windows (GPO)
3194 ```
3195 Software\Policies\Mozilla\Firefox\HardwareAcceleration = 0x1 | 0x0
3196 ```
3197 #### Windows (Intune)
3198 OMA-URI:
3199 ```
3200 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/HardwareAcceleration
3201 ```
3202 Value (string):
3203 ```
3204 <enabled/> or <disabled/>
3205 ```
3206 #### macOS
3207 ```
3208 <dict>
3209   <key>HardwareAcceleration</key>
3210   <true/> | <false/>
3211 </dict>
3212 ```
3213 #### policies.json
3214 ```
3215 {
3216   "policies": {
3217     "HardwareAcceleration": true | false
3218   }
3219 }
3220 ```
3221 ### Homepage
3222 Configure the default homepage and how Firefox starts.
3223
3224 `URL` is the default homepage.
3225
3226 `Locked` prevents the user from changing homepage preferences.
3227
3228 `Additional` allows for more than one homepage.
3229
3230 `StartPage` is how Firefox starts. The choices are no homepage, the default homepage or the previous session.
3231
3232 With Firefox 78, an additional option as added for `Startpage`, `homepage-locked`. If this is value is set for the Startpage, the user will always get the homepage at startup and cannot choose to restore their session.
3233
3234 **Compatibility:** Firefox 60, Firefox ESR 60 (StartPage was added in Firefox 60, Firefox ESR 60.4, homepage-locked added in Firefox 78)\
3235 **CCK2 Equivalent:** `homePage`,`lockHomePage`\
3236 **Preferences Affected:** `browser.startup.homepage`, `browser.startup.page`
3237
3238 #### Windows (GPO)
3239 ```
3240 Software\Policies\Mozilla\Firefox\Homepage\URL = "https://example.com"
3241 Software\Policies\Mozilla\Firefox\Homepage\Locked = 0x1 | 0x0
3242 Software\Policies\Mozilla\Firefox\Homepage\Additional\1 = "https://example.org"
3243 Software\Policies\Mozilla\Firefox\Homepage\Additional\2 = "https://example.edu"
3244 Software\Policies\Mozilla\Firefox\Homepage\StartPage = "none" | "homepage" | "previous-session" | "homepage-locked"
3245 ```
3246 #### Windows (Intune)
3247 OMA-URI:
3248 ```
3249 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageURL
3250 ```
3251 Value (string):
3252 ```
3253 <enabled/>
3254
3255 <data id="HomepageURL" value="https://example.com"/>
3256 <data id="HomepageLocked" value="true | false"/>
3257 ```
3258 OMA-URI:
3259 ```
3260 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageAdditional
3261 ```
3262 Value (string):
3263 ```
3264 <enabled/>
3265
3266 <data id="HomepageAdditional" value="1&#xF000;http://example.org&#xF000;2&#xF000;http://example.edu"/>
3267 ```
3268 OMA-URI:
3269 ```
3270 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageStartPage
3271 ```
3272 Value (string):
3273 ```
3274 <enabled/>
3275
3276 <data id="StartPage" value="none | homepage | previous-session"/>
3277 ```
3278 #### macOS
3279 ```
3280 <dict>
3281   <key>Homepage</key>
3282   <dict>
3283     <key>URL</key>
3284     <string>http://example.com</string>
3285     <key>Locked</key>
3286     <true/> | <false/>
3287     <key>Additional</key>
3288     <array>
3289       <string>http://example.org</string>
3290       <string>http://example.edu</string>
3291     </array>
3292     <key>StartPage</key>
3293     <string>none | homepage | previous-session | homepage-locked</string>
3294   </dict>
3295 </dict>
3296 ```
3297 #### policies.json
3298 ```
3299 {
3300   "policies": {
3301     "Homepage": {
3302       "URL": "http://example.com/",
3303       "Locked": true | false,
3304       "Additional": ["http://example.org/",
3305                      "http://example.edu/"],
3306       "StartPage": "none" | "homepage" | "previous-session" | "homepage-locked"
3307     }
3308   }
3309 }
3310 ```
3311 ### InstallAddonsPermission
3312 Configure the default extension install policy as well as origins for extension installs are allowed. This policy does not override turning off all extension installs.
3313
3314 `Allow` is a list of origins where extension installs are allowed.
3315
3316 `Default` determines whether or not extension installs are allowed by default.
3317
3318 **Compatibility:** Firefox 60, Firefox ESR 60\
3319 **CCK2 Equivalent:** `permissions.install`\
3320 **Preferences Affected:** `xpinstall.enabled`
3321
3322 #### Windows (GPO)
3323 ```
3324 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Allow\1 = "https://example.org"
3325 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Allow\2 = "https://example.edu"
3326 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Default = 0x1 | 0x0
3327 ```
3328 #### Windows (Intune)
3329 OMA-URI:
3330 ```
3331 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Addons/InstallAddonsPermission_Allow
3332 ```
3333 Value (string):
3334 ```
3335 <enabled/>
3336 <data id="Permissions" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
3337 ```
3338 OMA-URI:
3339 ```
3340 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Addons/InstallAddonsPermission_Default
3341 ```
3342 Value (string):
3343 ```
3344 <enabled/>
3345 ```
3346 #### macOS
3347 ```
3348 <dict>
3349   <key>InstallAddonsPermission</key>
3350   <dict>
3351     <key>Allow</key>
3352     <array>
3353       <string>http://example.org</string>
3354       <string>http://example.edu</string>
3355     </array>
3356     <key>Default</key>
3357     <true/> | <false/>
3358   </dict>
3359 </dict>
3360 ```
3361 #### policies.json
3362 ```
3363 {
3364   "policies": {
3365     "InstallAddonsPermission": {
3366       "Allow": ["http://example.org/",
3367                 "http://example.edu/"],
3368       "Default": true | false
3369     }
3370   }
3371 }
3372 ```
3373 ### LegacyProfiles
3374 Disable the feature enforcing a separate profile for each installation.
3375
3376 If this policy set to true, Firefox will not try to create different profiles for installations of Firefox in different directories. This is the equivalent of the MOZ_LEGACY_PROFILES environment variable.
3377
3378 If this policy set to false, Firefox will create a new profile for each unique installation of Firefox.
3379
3380 This policy only work on Windows via GPO (not policies.json).
3381
3382 **Compatibility:** Firefox 70, Firefox ESR 68.2 (Windows only, GPO only)\
3383 **CCK2 Equivalent:** N/A\
3384 **Preferences Affected:** N/A
3385
3386 #### Windows (GPO)
3387 ```
3388 Software\Policies\Mozilla\Firefox\LegacyProfiles = = 0x1 | 0x0
3389 ```
3390 #### Windows (Intune)
3391 OMA-URI:
3392 ```
3393 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/LegacyProfiles
3394 ```
3395 Value (string):
3396 ```
3397 <enabled/> or <disabled/>
3398 ```
3399 ### LegacySameSiteCookieBehaviorEnabled
3400 Enable default legacy SameSite cookie behavior setting.
3401
3402 If this policy is set to true, it reverts all cookies to legacy SameSite behavior which means that cookies that don't explicitly specify a ```SameSite``` attribute are treated as if they were ```SameSite=None```.
3403
3404 **Compatibility:** Firefox 96\
3405 **CCK2 Equivalent:** N/A\
3406 **Preferences Affected:** `network.cookie.sameSite.laxByDefault`
3407
3408 #### Windows (GPO)
3409 ```
3410 Software\Policies\Mozilla\Firefox\LegacySameSiteCookieBehaviorEnabled = = 0x1 | 0x0
3411 ```
3412 #### Windows (Intune)
3413 OMA-URI:
3414 ```
3415 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/LegacySameSiteCookieBehaviorEnabled
3416 ```
3417 Value (string):
3418 ```
3419 <enabled/> or <disabled/>
3420 ```
3421 #### macOS
3422 ```
3423 <dict>
3424   <key>LegacySameSiteCookieBehaviorEnabled</key>
3425   <true/> | <false/>
3426 </dict>
3427 ```
3428 #### policies.json
3429 ```
3430 {
3431   "policies": {
3432     "LegacySameSiteCookieBehaviorEnabled": true | false
3433 }
3434 ```
3435 ### LegacySameSiteCookieBehaviorEnabledForDomainList
3436 Revert to legacy SameSite behavior for cookies on specified sites.
3437
3438 If this policy is set to true, cookies set for domains in this list will revert to legacy SameSite behavior which means that cookies that don't explicitly specify a ```SameSite``` attribute are treated as if they were ```SameSite=None```.
3439
3440 **Compatibility:** Firefox 96\
3441 **CCK2 Equivalent:** N/A\
3442 **Preferences Affected:** `network.cookie.sameSite.laxByDefault.disabledHosts`
3443
3444 #### Windows (GPO)
3445 ```
3446 Software\Policies\Mozilla\Firefox\LegacySameSiteCookieBehaviorEnabledForDomainList\1 = "example.org"
3447 Software\Policies\Mozilla\Firefox\LegacySameSiteCookieBehaviorEnabledForDomainList\2 = "example.edu"
3448 ```
3449 #### Windows (Intune)
3450 OMA-URI:
3451 ```
3452 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/LegacySameSiteCookieBehaviorEnabledForDomainList
3453 ```
3454 Value (string):
3455 ```
3456 <enabled/>
3457 <data id="LegacySameSiteCookieBehaviorEnabledForDomainList" value="1&#xF000;example.org&#xF000;2&#xF000;example.edu"/>
3458 ```
3459 #### macOS
3460 ```
3461 <dict>
3462   <key>LegacySameSiteCookieBehaviorEnabledForDomainList</key>
3463   <array>
3464     <string>example.org</string>
3465     <string>example.edu</string>
3466   </array>
3467 </dict>
3468 ```
3469 #### policies.json
3470 ```
3471 {
3472   "policies": {
3473     "LegacySameSiteCookieBehaviorEnabledForDomainList": ["example.org",
3474                                                          "example.edu"]
3475   }
3476 }
3477 ```
3478 ### LocalFileLinks
3479 Enable linking to local files by origin.
3480
3481 **Compatibility:** Firefox 68, Firefox ESR 68\
3482 **CCK2 Equivalent:** N/A\
3483 **Preferences Affected:** `capability.policy.localfilelinks.*`
3484
3485 #### Windows (GPO)
3486 ```
3487 Software\Policies\Mozilla\Firefox\LocalFileLinks\1 = "https://example.org"
3488 Software\Policies\Mozilla\Firefox\LocalFileLinks\2 = "https://example.edu"
3489 ```
3490 #### Windows (Intune)
3491 OMA-URI:
3492 ```
3493 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/LocalFileLinks
3494 ```
3495 Value (string):
3496 ```
3497 <enabled/>
3498 <data id="LocalFileLinks" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
3499 ```
3500 #### macOS
3501 ```
3502 <dict>
3503   <key>LocalFileLinks</key>
3504   <array>
3505     <string>http://example.org</string>
3506     <string>http://example.edu</string>
3507   </array>
3508 </dict>
3509 ```
3510 #### policies.json
3511 ```
3512 {
3513   "policies": {
3514     "LocalFileLinks": ["http://example.org/",
3515                        "http://example.edu/"]
3516   }
3517 }
3518 ```
3519 ### ManagedBookmarks
3520 Configures a list of bookmarks managed by an administrator that cannot be changed by the user.
3521
3522 The bookmarks are only added as a button on the personal toolbar. They are not in the bookmarks folder.
3523
3524 The syntax of this policy is exactly the same as the [Chrome ManagedBookmarks policy](https://cloud.google.com/docs/chrome-enterprise/policies/?policy=ManagedBookmarks). The schema is:
3525 ```
3526 {
3527  "items": {
3528   "id": "BookmarkType",
3529   "properties": {
3530    "children": {
3531     "items": {
3532      "$ref": "BookmarkType"
3533     },
3534     "type": "array"
3535    },
3536    "name": {
3537     "type": "string"
3538    },
3539    "toplevel_name": {
3540     "type": "string"
3541    },
3542    "url": {
3543     "type": "string"
3544    }
3545   },
3546   "type": "object"
3547  },
3548  "type": "array"
3549 }
3550 ```
3551 **Compatibility:** Firefox 83, Firefox ESR 78.5\
3552 **CCK2 Equivalent:** N/A\
3553 **Preferences Affected:** N/A
3554
3555 #### Windows (GPO)
3556 Software\Policies\Mozilla\Firefox\ManagedBookmarks (REG_MULTI_SZ) =
3557 ```
3558 [
3559   {
3560     "toplevel_name": "My managed bookmarks folder"
3561   },
3562   {
3563     "url": "example.com",
3564     "name": "Example"
3565   },
3566   {
3567     "name": "Mozilla links",
3568     "children": [
3569       {
3570         "url": "https://mozilla.org",
3571         "name": "Mozilla.org"
3572       },
3573       {
3574         "url": "https://support.mozilla.org/",
3575         "name": "SUMO"
3576       }
3577     ]
3578   }
3579 ]
3580 ```
3581 #### Windows (Intune)
3582 OMA-URI:
3583 ```
3584 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/ManagedBookmarks
3585 ```
3586 Value (string):
3587 ```
3588 <enabled/>
3589 <data id="JSON" value='
3590 [
3591   {
3592     "toplevel_name": "My managed bookmarks folder"
3593   },
3594   {
3595     "url": "example.com",
3596     "name": "Example"
3597   },
3598   {
3599     "name": "Mozilla links",
3600     "children": [
3601       {
3602         "url": "https://mozilla.org",
3603         "name": "Mozilla.org"
3604       },
3605       {
3606         "url": "https://support.mozilla.org/",
3607         "name": "SUMO"
3608       }
3609     ]
3610   }
3611 ]'/>
3612 ```
3613 #### macOS
3614 ```
3615 <dict>
3616   <key>ManagedBookmarks</key>
3617   <array>
3618     <dict>
3619       <key>toplevel_name</key>
3620       <string>My managed bookmarks folder</string>
3621       <dict>
3622         <key>url</key>
3623         <string>example.com</string>
3624         <key>name</key>
3625         <string>Example</string>
3626       </dict>
3627       <dict>
3628       <key>name</key>
3629       <string>Mozilla links</string>
3630       <key>children</key>
3631       <array>
3632         <dict>
3633           <key>url</key>
3634           <string>https://mozilla.org</string>
3635           <key>name</key>
3636           <string>Mozilla</string>
3637         </dict>
3638         <dict>
3639           <key>url</key>
3640           <string>https://support.mozilla.org/</string>
3641           <key>name</key>
3642           <string>SUMO</string>
3643         </dict>
3644       </array>
3645     </dict>
3646   </array>
3647 </dict>
3648 ```
3649 #### policies.json
3650 ```
3651 {
3652   "policies": {
3653     "ManagedBookmarks": [
3654       {
3655         "toplevel_name": "My managed bookmarks folder"
3656       },
3657       {
3658         "url": "example.com",
3659         "name": "Example"
3660       },
3661       {
3662         "name": "Mozilla links",
3663         "children": [
3664           {
3665             "url": "https://mozilla.org",
3666             "name": "Mozilla.org"
3667           },
3668           {
3669             "url": "https://support.mozilla.org/",
3670             "name": "SUMO"
3671           }
3672         ]
3673       }
3674     ]
3675   }
3676 }
3677 ```
3678 ### ManualAppUpdateOnly
3679
3680 Switch to manual updates only.
3681
3682 If this policy is enabled:
3683  1. The user will never be prompted to install updates
3684  2. Firefox will not check for updates in the background, though it will check automatically when an update UI is displayed (such as the one in the About dialog). This check will be used to show "Update to version X" in the UI, but will not automatically download the update or prompt the user to update in any other way.
3685  3. The update UI will work as expected, unlike when using DisableAppUpdate.
3686
3687 This policy is primarily intended for advanced end users, not for enterprises.
3688
3689 **Compatibility:** Firefox 87\
3690 **CCK2 Equivalent:** N/A\
3691 **Preferences Affected:** N/A
3692
3693 #### policies.json
3694 ```
3695 {
3696   "policies": {
3697     "ManualAppUpdateOnly": true | false
3698   }
3699 }
3700 ```
3701 ### NetworkPrediction
3702 Enable or disable network prediction (DNS prefetching).
3703
3704 **Compatibility:** Firefox 67, Firefox ESR 60.7\
3705 **CCK2 Equivalent:** N/A\
3706 **Preferences Affected:** `network.dns.disablePrefetch`, `network.dns.disablePrefetchFromHTTPS`
3707
3708 #### Windows (GPO)
3709 ```
3710 Software\Policies\Mozilla\Firefox\NetworkPrediction = 0x1 | 0x0
3711 ```
3712 #### Windows (Intune)
3713 OMA-URI:
3714 ```
3715 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NetworkPrediction
3716 ```
3717 Value (string):
3718 ```
3719 <enabled/> or <disabled/>
3720 ```
3721 #### macOS
3722 ```
3723 <dict>
3724   <key>NetworkPrediction</key>
3725   <true/> | <false/>
3726 </dict>
3727 ```
3728 #### policies.json
3729 ```
3730 {
3731   "policies": {
3732     "NetworkPrediction": true | false
3733 }
3734 ```
3735 ### NewTabPage
3736 Enable or disable the New Tab page.
3737
3738 **Compatibility:** Firefox 68, Firefox ESR 68\
3739 **CCK2 Equivalent:** N/A\
3740 **Preferences Affected:** `browser.newtabpage.enabled`
3741
3742 #### Windows (GPO)
3743 ```
3744 Software\Policies\Mozilla\Firefox\NewTabPage = 0x1 | 0x0
3745 ```
3746 #### Windows (Intune)
3747 OMA-URI:
3748 ```
3749 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NewTabPage
3750 ```
3751 Value (string):
3752 ```
3753 <enabled/> or <disabled/>
3754 ```
3755 #### macOS
3756 ```
3757 <dict>
3758   <key>NewTabPage</key>
3759   <true/> | <false/>
3760 </dict>
3761 ```
3762 #### policies.json
3763 ```
3764 {
3765   "policies": {
3766     "NewTabPage": true | false
3767 }
3768 ```
3769 ### NoDefaultBookmarks
3770 Disable the creation of default bookmarks.
3771
3772 This policy is only effective if the user profile has not been created yet.
3773
3774 **Compatibility:** Firefox 60, Firefox ESR 60\
3775 **CCK2 Equivalent:** `removeDefaultBookmarks`\
3776 **Preferences Affected:** N/A
3777
3778 #### Windows (GPO)
3779 ```
3780 Software\Policies\Mozilla\Firefox\NoDefaultBookmarks = 0x1 | 0x0
3781 ```
3782 #### Windows (Intune)
3783 OMA-URI:
3784 ```
3785 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NoDefaultBookmarks
3786 ```
3787 Value (string):
3788 ```
3789 <enabled/> or <disabled/>
3790 ```
3791 #### macOS
3792 ```
3793 <dict>
3794   <key>NoDefaultBookmarks</key>
3795   <true/> | <false/>
3796 </dict>
3797 ```
3798 #### policies.json
3799 ```
3800 {
3801   "policies": {
3802     "NoDefaultBookmarks": true | false
3803   }
3804 }
3805 ```
3806 ### OfferToSaveLogins
3807 Control whether or not Firefox offers to save passwords.
3808
3809 **Compatibility:** Firefox 60, Firefox ESR 60\
3810 **CCK2 Equivalent:** `dontRememberPasswords`\
3811 **Preferences Affected:** `signon.rememberSignons`
3812
3813 #### Windows (GPO)
3814 ```
3815 Software\Policies\Mozilla\Firefox\OfferToSaveLogins = 0x1 | 0x0
3816 ```
3817 #### Windows (Intune)
3818 OMA-URI:
3819 ```
3820 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OfferToSaveLogins
3821 ```
3822 Value (string):
3823 ```
3824 <enabled/> or <disabled/>
3825 ```
3826 #### macOS
3827 ```
3828 <dict>
3829   <key>OfferToSaveLogins</key>
3830   <true/> | <false/>
3831 </dict>
3832 ```
3833 #### policies.json
3834 ```
3835 {
3836   "policies": {
3837     "OfferToSaveLogins": true | false
3838   }
3839 }
3840 ```
3841 ### OfferToSaveLoginsDefault
3842 Sets the default value of signon.rememberSignons without locking it.
3843
3844 **Compatibility:** Firefox 70, Firefox ESR 60.2\
3845 **CCK2 Equivalent:** `dontRememberPasswords`\
3846 **Preferences Affected:** `signon.rememberSignons`
3847
3848 #### Windows (GPO)
3849 ```
3850 Software\Policies\Mozilla\Firefox\OfferToSaveLoginsDefault = 0x1 | 0x0
3851 ```
3852 #### Windows (Intune)
3853 OMA-URI:
3854 ```
3855 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OfferToSaveLoginsDefault
3856 ```
3857 Value (string):
3858 ```
3859 <enabled/> or <disabled/>
3860 ```
3861 #### macOS
3862 ```
3863 <dict>
3864   <key>OfferToSaveLoginsDefault</key>
3865   <true/> | <false/>
3866 </dict>
3867 ```
3868 #### policies.json
3869 ```
3870 {
3871   "policies": {
3872     "OfferToSaveLoginsDefault": true | false
3873   }
3874 }
3875 ```
3876 ### OverrideFirstRunPage
3877 Override the first run page. If the value is an empty string (""), the first run page is not displayed.
3878
3879 Starting with Firefox 83, Firefox ESR 78.5, you can also specify multiple URLS separated by a vertical bar (|).
3880
3881 **Compatibility:** Firefox 60, Firefox ESR 60\
3882 **CCK2 Equivalent:** `welcomePage`,`noWelcomePage`\
3883 **Preferences Affected:** `startup.homepage_welcome_url`
3884
3885 #### Windows (GPO)
3886 ```
3887 Software\Policies\Mozilla\Firefox\OverrideFirstRunPage = "http://example.org"
3888 ```
3889 #### Windows (Intune)
3890 OMA-URI:
3891 ```
3892 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OverrideFirstRunPage
3893 ```
3894 Value (string):
3895 ```
3896 <enabled/>
3897 <data id="OverridePage" value="https://example.com"/>
3898 ```
3899 #### macOS
3900 ```
3901 <dict>
3902   <key>OverrideFirstRunPage</key>
3903   <string>http://example.org</string>
3904 </dict>
3905 ```
3906 #### policies.json
3907 ```
3908 {
3909   "policies": {
3910     "OverrideFirstRunPage": "http://example.org"
3911   }
3912 }
3913 ```
3914 ### OverridePostUpdatePage
3915 Override the upgrade page. If the value is an empty string (""), no extra pages are displayed when Firefox is upgraded.
3916
3917 **Compatibility:** Firefox 60, Firefox ESR 60\
3918 **CCK2 Equivalent:** `upgradePage`,`noUpgradePage`\
3919 **Preferences Affected:** `startup.homepage_override_url`
3920
3921 #### Windows (GPO)
3922 ```
3923 Software\Policies\Mozilla\Firefox\OverridePostUpdatePage = "http://example.org"
3924 ```
3925 #### Windows (Intune)
3926 OMA-URI:
3927 ```
3928 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OverridePostUpdatePage
3929 ```
3930 Value (string):
3931 ```
3932 <enabled/>
3933 <data id="OverridePage" value="https://example.com"/>
3934 ```
3935 #### macOS
3936 ```
3937 <dict>
3938   <key>OverridePostUpdatePage</key>
3939   <string>http://example.org</string>
3940 </dict>
3941 ```
3942 #### policies.json
3943 ```
3944 {
3945   "policies": {
3946     "OverridePostUpdatePage": "http://example.org"
3947   }
3948 }
3949 ```
3950 ### PasswordManagerEnabled
3951 Remove access to the password manager via preferences and blocks about:logins on Firefox 70.
3952
3953 **Compatibility:** Firefox 70, Firefox ESR 60.2\
3954 **CCK2 Equivalent:** N/A\
3955 **Preferences Affected:** `pref.privacy.disable_button.view_passwords`
3956
3957 #### Windows (GPO)
3958 ```
3959 Software\Policies\Mozilla\Firefox\PasswordManagerEnabled = 0x1 | 0x0
3960 ```
3961 #### Windows (Intune)
3962 OMA-URI:
3963 ```
3964 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PasswordManagerEnabled
3965 ```
3966 Value (string):
3967 ```
3968 <enabled/> or <disabled/>
3969 ```
3970 #### macOS
3971 ```
3972 <dict>
3973   <key>PasswordManagerEnabled</key>
3974   <true/> | <false/>
3975 </dict>
3976 ```
3977 #### policies.json
3978 ```
3979 {
3980   "policies": {
3981     "PasswordManagerEnabled": true | false
3982   }
3983 }
3984 ```
3985 ### PasswordManagerExceptions
3986 Prevent Firefox from saving passwords for specific sites.
3987
3988 The sites are specified as a list of origins.
3989
3990 **Compatibility:** Firefox 101\
3991 **CCK2 Equivalent:** N/A\
3992 **Preferences Affected:** N/A
3993
3994 #### Windows (GPO)
3995 ```
3996 Software\Policies\Mozilla\Firefox\PasswordManagerExceptions\1 = "https://example.org"
3997 Software\Policies\Mozilla\Firefox\PasswordManagerExceptions\2 = "https://example.edu"
3998 ```
3999 #### Windows (Intune)
4000 OMA-URI:
4001 ```
4002 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PasswordManagerExceptions
4003 ```
4004 Value (string):
4005 ```
4006 <enabled/>
4007 <data id="List" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
4008 ```
4009 #### macOS
4010 ```
4011 <dict>
4012   <key>PasswordManagerExceptions</key>
4013   <array>
4014     <string>https://example.org</string>
4015     <string>https://example.edu</string>
4016   </array>
4017 </dict>
4018 ```
4019 #### policies.json
4020 ```
4021 {
4022   "policies": {
4023     "PasswordManagerExceptions": ["https://example.org",
4024                                   "https://example.edu"]
4025   }
4026 }
4027 ```
4028
4029 ### PDFjs
4030 Disable or configure PDF.js, the built-in PDF viewer.
4031
4032 If `Enabled` is set to false, the built-in PDF viewer is disabled.
4033
4034 If `EnablePermissions` is set to true, the built-in PDF viewer will honor document permissions like preventing the copying of text.
4035
4036 Note: DisableBuiltinPDFViewer has not been deprecated. You can either continue to use it, or switch to using PDFjs->Enabled to disable the built-in PDF viewer. This new permission was added because we needed a place for PDFjs->EnabledPermissions.
4037
4038 **Compatibility:** Firefox 77, Firefox ESR 68.9\
4039 **CCK2 Equivalent:** N/A\
4040 **Preferences Affected:** `pdfjs.diabled`, `pdfjs.enablePermissions`
4041
4042 #### Windows (GPO)
4043 ```
4044 Software\Policies\Mozilla\Firefox\PDFjs\Enabled = 0x1 | 0x0
4045 Software\Policies\Mozilla\Firefox\PDFjs\EnablePermissions = 0x1 | 0x0
4046 ```
4047 #### Windows (Intune)
4048 OMA-URI:
4049 ```
4050 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PDFjs/PDFjs_Enabled
4051 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PDFjs/PDFjs_EnablePermissions
4052 ```
4053 Value (string):
4054 ```
4055 <enabled/>or <disabled/>
4056 ```
4057 #### macOS
4058 ```
4059 <dict>
4060   <key>PDFjs</key>
4061   <dict>
4062     <key>Enabled</key>
4063     <true/> | <false/>
4064     <key>EnablePermissions</key>
4065     <true/> | <false/>
4066   </dict>
4067 </dict>
4068 ```
4069 #### policies.json
4070 ```
4071 {
4072   "policies": {
4073     "PDFjs": {
4074       "Enabled": true | false,
4075       "EnablePermissions": true | false
4076     }
4077   }
4078 }
4079 ```
4080 ### Permissions
4081 Set permissions associated with camera, microphone, location, notifications, autoplay, and virtual reality. Because these are origins, not domains, entries with unique ports must be specified separately. This explicitly means that it is not possible to add wildcards. See examples below.
4082
4083 `Allow` is a list of origins where the feature is allowed.
4084
4085 `Block` is a list of origins where the feature is not allowed.
4086
4087 `BlockNewRequests` determines whether or not new requests can be made for the feature.
4088
4089 `Locked` prevents the user from changing preferences for the feature.
4090
4091 `Default` specifies the default value for Autoplay. block-audio-video is not supported on Firefox ESR 68.
4092
4093 **Compatibility:** Firefox 62, Firefox ESR 60.2 (Autoplay added in Firefox 74, Firefox ESR 68.6, Autoplay Default/Locked added in Firefox 76, Firefox ESR 68.8, VirtualReality added in Firefox 80, Firefox ESR 78.2)\
4094 **CCK2 Equivalent:** N/A\
4095 **Preferences Affected:** `permissions.default.camera`, `permissions.default.microphone`, `permissions.default.geo`, `permissions.default.desktop-notification`, `media.autoplay.default`, `permissions.default.xr`
4096
4097 #### Windows (GPO)
4098 ```
4099 Software\Policies\Mozilla\Firefox\Permissions\Camera\Allow\1 = "https://example.org"
4100 Software\Policies\Mozilla\Firefox\Permissions\Camera\Allow\2 = "https://example.org:1234"
4101 Software\Policies\Mozilla\Firefox\Permissions\Camera\Block\1 = "https://example.edu"
4102 Software\Policies\Mozilla\Firefox\Permissions\Camera\BlockNewRequests = 0x1 | 0x0
4103 Software\Policies\Mozilla\Firefox\Permissions\Camera\Locked = 0x1 | 0x0
4104 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Allow\1 = "https://example.org"
4105 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Block\1 = "https://example.edu"
4106 Software\Policies\Mozilla\Firefox\Permissions\Microphone\BlockNewRequests = 0x1 | 0x0
4107 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Locked = 0x1 | 0x0
4108 Software\Policies\Mozilla\Firefox\Permissions\Location\Allow\1 = "https://example.org"
4109 Software\Policies\Mozilla\Firefox\Permissions\Location\Block\1 = "https://example.edu"
4110 Software\Policies\Mozilla\Firefox\Permissions\Location\BlockNewRequests = 0x1 | 0x0
4111 Software\Policies\Mozilla\Firefox\Permissions\Location\Locked = 0x1 | 0x0
4112 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Allow\1 = "https://example.org"
4113 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Block\1 = "https://example.edu"
4114 Software\Policies\Mozilla\Firefox\Permissions\Notifications\BlockNewRequests = 0x1 | 0x0
4115 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Locked = 0x1 | 0x0
4116 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Allow\1 = "https://example.org"
4117 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Block\1 = "https://example.edu"
4118 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Default = "allow-audio-video" | "block-audio" | "block-audio-video"
4119 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Locked = 0x1 | 0x0
4120 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\Allow\1 = "https://example.org"
4121 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\Block\1 = "https://example.edu"
4122 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\BlockNewRequests = 0x1 | 0x0
4123 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\Locked = 0x1 | 0x0
4124 ```
4125 #### Windows (Intune)
4126 OMA-URI:
4127 ```
4128 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Location/Location_BlockNewRequests
4129 ```
4130 Value (string):
4131 ```
4132 <enabled/> or <disabled/>
4133 ```
4134 OMA-URI:
4135 ```
4136 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Location/Location_Locked
4137 ```
4138 Value (string):
4139 ```
4140 <enabled/> or <disabled/>
4141 ```
4142 OMA-URI:
4143 ```
4144 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_Allow
4145 ```
4146 Value (string):
4147 ```
4148 <enabled/>
4149 <data id="Permissions" value="1&#xF000;https://example.org"/>
4150 ```
4151 OMA-URI:
4152 ```
4153 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_BlockNewRequests
4154 ```
4155 Value (string):
4156 ```
4157 <enabled/> or <disabled/>
4158 ```
4159 OMA-URI:
4160 ```
4161 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_Locked
4162 ```
4163 Value (string):
4164 ```
4165 <enabled/> or <disabled/>
4166 ```
4167 OMA-URI:
4168 ```
4169 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Allow
4170 ```
4171 Value (string):
4172 ```
4173 <enabled/>
4174 <data id="Permissions" value="1&#xF000;https://example.org"/>
4175 ```
4176 OMA-URI:
4177 ```
4178 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Block
4179 ```
4180 Value (string):
4181 ```
4182 <enabled/>
4183 <data id="Permissions" value="1&#xF000;https://example.edu"/>
4184 ```
4185 OMA-URI:
4186 ```
4187 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Default
4188 ```
4189 Value (string):
4190 ```
4191 <enabled/>
4192 <data id="Autoplay_Default" value="allow-audio-video | block-audio | block-audio-video"/>
4193 ```
4194 OMA-URI:
4195 ```
4196 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Locked
4197 ```
4198 Value (string):
4199 ```
4200 <enabled/> or <disabled/>
4201 ```
4202 OMA-URI:
4203 ```
4204 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_Allow
4205 ```
4206 Value (string):
4207 ```
4208 <enabled/>
4209 <data id="Permissions" value="1&#xF000;https://example.org"/>
4210 ```
4211 OMA-URI:
4212 ```
4213 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_Block
4214 ```
4215 Value (string):
4216 ```
4217 <enabled/>
4218 <data id="Permissions" value="1&#xF000;https://example.edu"/>
4219 ```
4220 OMA-URI:
4221 ```
4222 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_BlockNewRequests
4223 ```
4224 Value (string):
4225 ```
4226 <enabled/> or <disabled/>
4227 ```
4228 OMA-URI:
4229 ```
4230 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_Locked
4231 ```
4232 Value (string):
4233 ```
4234 <enabled/> or <disabled/>
4235 ```
4236 #### macOS
4237 ```
4238 <dict>
4239   <key>Permissions</key>
4240   <dict>
4241     <key>Camera</key>
4242     <dict>
4243       <key>Allow</key>
4244       <array>
4245         <string>https://example.org</string>
4246         <string>https://example.org:1234</string>
4247       </array>
4248       <key>Block</key>
4249       <array>
4250         <string>https://example.edu</string>
4251       </array>
4252       <key>BlockNewRequests</key>
4253       <true/> | <false/>
4254       <key>Locked</key>
4255       <true/> | <false/>
4256     </dict>
4257     <key>Microphone</key>
4258     <dict>
4259       <key>Allow</key>
4260       <array>
4261         <string>https://example.org</string>
4262       </array>
4263       <key>Block</key>
4264       <array>
4265         <string>https://example.edu</string>
4266       </array>
4267       <key>BlockNewRequests</key>
4268       <true/> | <false/>
4269       <key>Locked</key>
4270       <true/> | <false/>
4271     </dict>
4272     <key>Location</key>
4273     <dict>
4274       <key>Allow</key>
4275       <array>
4276         <string>https://example.org</string>
4277       </array>
4278       <key>Block</key>
4279       <array>
4280         <string>https://example.edu</string>
4281       </array>
4282       <key>BlockNewRequests</key>
4283       <true/> | <false/>
4284       <key>Locked</key>
4285       <true/> | <false/>
4286     </dict>
4287     <key>Notifications</key>
4288     <dict>
4289       <key>Allow</key>
4290       <array>
4291         <string>https://example.org</string>
4292       </array>
4293       <key>Block</key>
4294       <array>
4295         <string>https://example.edu</string>
4296       </array>
4297       <key>BlockNewRequests</key>
4298       <true/>
4299       <key>Locked</key>
4300       <true/>
4301     </dict>
4302     <key>Autoplay</key>
4303     <dict>
4304       <key>Allow</key>
4305       <array>
4306         <string>https://example.org</string>
4307       </array>
4308       <key>Block</key>
4309       <array>
4310         <string>https://example.edu</string>
4311       </array>
4312       <key>Default</key>
4313       <string>allow-audio-video | block-audio | block-audio-video</string>
4314       <key>Locked</key>
4315       <true/> | <false/>
4316     </dict>
4317   </dict>
4318 </dict>
4319 ```
4320 #### policies.json
4321 ```
4322 {
4323   "policies": {
4324     "Permissions": {
4325       "Camera": {
4326         "Allow": ["https://example.org","https://example.org:1234"],
4327         "Block": ["https://example.edu"],
4328         "BlockNewRequests": true | false,
4329         "Locked": true | false
4330       },
4331       "Microphone": {
4332         "Allow": ["https://example.org"],
4333         "Block": ["https://example.edu"],
4334         "BlockNewRequests": true | false,
4335         "Locked": true | false
4336       },
4337       "Location": {
4338         "Allow": ["https://example.org"],
4339         "Block": ["https://example.edu"],
4340         "BlockNewRequests": true | false,
4341         "Locked": true | false
4342       },
4343       "Notifications": {
4344         "Allow": ["https://example.org"],
4345         "Block": ["https://example.edu"],
4346         "BlockNewRequests": true | false,
4347         "Locked": true | false
4348       },
4349       "Autoplay": {
4350         "Allow": ["https://example.org"],
4351         "Block": ["https://example.edu"],
4352         "Default": "allow-audio-video" | "block-audio" | "block-audio-video",
4353         "Locked": true | false
4354       }
4355     }
4356   }
4357 }
4358 ```
4359 ### PictureInPicture
4360
4361 Enable or disable Picture-in-Picture as well as prevent the user from enabling or disabling it (Locked).
4362
4363 **Compatibility:** Firefox 78, Firefox ESR 78\
4364 **CCK2 Equivalent:** N/A\
4365 **Preferences Affected:** `media.videocontrols.picture-in-picture.video-toggle.enabled`
4366
4367 #### Windows (GPO)
4368 ```
4369 Software\Policies\Mozilla\Firefox\PictureInPicture\Enabled = 0x1 | 0x0
4370 Software\Policies\Mozilla\Firefox\PictureInPicture\Locked = 0x1 | 0x0
4371
4372 ```
4373 #### Windows (Intune)
4374 OMA-URI:
4375 ```
4376 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PictureInPicture/PictureInPicture_Enabled
4377 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PictureInPicture/PictureInPicture_Locked
4378 ```
4379 Value (string):
4380 ```
4381 <enabled/> or <disabled/>
4382 ```
4383 #### macOS
4384 ```
4385 <dict>
4386   <key>PictureInPicture</key>
4387   <dict>
4388     <key>Enabled</key>
4389     <true/> | <false/>
4390     <key>Locked</key>
4391     <true/> | <false/>
4392   </dict>
4393 </dict>
4394 ```
4395 #### policies.json
4396 ```
4397 {
4398   "policies": {
4399     "PictureInPicture": {
4400       "Enabled": true | false,
4401       "Locked": true | false
4402     }
4403   }
4404 }
4405 ```
4406 ### PopupBlocking
4407 Configure the default pop-up window policy as well as origins for which pop-up windows are allowed.
4408
4409 `Allow` is a list of origins where popup-windows are allowed.
4410
4411 `Default` determines whether or not pop-up windows are allowed by default.
4412
4413 `Locked` prevents the user from changing pop-up preferences.
4414
4415 **Compatibility:** Firefox 60, Firefox ESR 60\
4416 **CCK2 Equivalent:** `permissions.popup`\
4417 **Preferences Affected:** `dom.disable_open_during_load`
4418
4419 #### Windows (GPO)
4420 ```
4421 Software\Policies\Mozilla\Firefox\PopupBlocking\Allow\1 = "https://example.org"
4422 Software\Policies\Mozilla\Firefox\PopupBlocking\Allow\2 = "https://example.edu"
4423 Software\Policies\Mozilla\Firefox\PopupBlocking\Default = 0x1 | 0x0
4424 Software\Policies\Mozilla\Firefox\PopupBlocking\Locked = 0x1 | 0x0
4425 ```
4426 #### Windows (Intune)
4427 OMA-URI:
4428 ```
4429 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Allow
4430 ```
4431 Value (string):
4432 ```
4433 <enabled/>
4434 <data id="Permissions" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
4435 ```
4436 OMA-URI:
4437 ```
4438 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Default
4439 ```
4440 Value (string):
4441 ```
4442 <enabled/> or <disabled/>
4443 ```
4444 OMA-URI:
4445 ```
4446 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Locked
4447 ```
4448 Value (string):
4449 ```
4450 <enabled/> or <disabled/>
4451 ```
4452 #### macOS
4453 ```
4454 <dict>
4455   <key>PopupBlocking</key>
4456   <dict>
4457     <key>Allow</key>
4458     <array>
4459       <string>http://example.org</string>
4460       <string>http://example.edu</string>
4461     </array>
4462     <key>Default</key>
4463     <true/> | <false/>
4464     <key>Locked</key>
4465     <true/> | <false/>
4466   </dict>
4467 </dict>
4468 ```
4469 #### policies.json
4470 ```
4471 {
4472   "policies": {
4473     "PopupBlocking": {
4474       "Allow": ["http://example.org/",
4475                 "http://example.edu/"],
4476       "Default": true | false,
4477       "Locked": true | false
4478     }
4479   }
4480 }
4481 ```
4482 ### Preferences
4483 Set and lock preferences.
4484
4485 **NOTE** On Windows, in order to use this policy, you must clear all settings in the old **Preferences (Deprecated)** section.
4486
4487 Previously you could only set and lock a subset of preferences. Starting with Firefox 81 and Firefox ESR 78.3 you can set many more preferences. You can also set default preferences, user preferences and you can clear preferences.
4488
4489 Preferences that start with the following prefixes are supported:
4490 ```
4491 accessibility.
4492 app.update.* (Firefox 86, Firefox 78.8)
4493 browser.
4494 datareporting.policy.
4495 dom.
4496 extensions.
4497 general.autoScroll (Firefox 83, Firefox ESR 78.5)
4498 general.smoothScroll (Firefox 83, Firefox ESR 78.5)
4499 geo.
4500 gfx.
4501 intl.
4502 keyword.enabled (Firefox 95, Firefox ESR 91.4)
4503 layers.
4504 layout.
4505 media.
4506 network.
4507 pdfjs. (Firefox 84, Firefox ESR 78.6)
4508 places.
4509 print.
4510 signon. (Firefox 83, Firefox ESR 78.5)
4511 spellchecker. (Firefox 84, Firefox ESR 78.6)
4512 toolkit.legacyUserProfileCustomizations.stylesheets (Firefox 95, Firefox ESR 91.4)
4513 ui.
4514 widget.
4515 ```
4516 as well as the following security preferences:
4517 | Preference | Type | Default
4518 | --- | --- | ---
4519 | security.default_personal_cert | string | Ask Every Time
4520 | &nbsp;&nbsp;&nbsp;&nbsp;If set to Select Automatically, Firefox automatically chooses the default personal certificate.
4521 | security.insecure_connection_text.enabled | bool | false
4522 | &nbsp;&nbsp;&nbsp;&nbsp;If set to true, adds the words "Not Secure" for insecure sites.
4523 | security.insecure_connection_text.pbmode.enabled | bool | false
4524 | &nbsp;&nbsp;&nbsp;&nbsp;If set to true, adds the words "Not Secure" for insecure sites in private browsing.
4525 | security.insecure_field_warning.contextual.enabled | bool | true
4526 | &nbsp;&nbsp;&nbsp;&nbsp;If set to false, remove the warning for inscure login fields.
4527 | security.mixed_content.block_active_content | boolean | true
4528 | &nbsp;&nbsp;&nbsp;&nbsp;If false, mixed active content (HTTP and HTTPS) is not blocked.
4529 | security.osclientcerts.autoload | boolean | false
4530 | &nbsp;&nbsp;&nbsp;&nbsp;If true, client certificates are loaded from the operating system certificate store.
4531 | security.ssl.errorReporting.enabled | boolean | true
4532 | &nbsp;&nbsp;&nbsp;&nbsp;If false, SSL errors cannot be sent to Mozilla.
4533 | security.tls.enable_0rtt_data | boolean | true
4534 | &nbsp;&nbsp;&nbsp;&nbsp;If false, TLS early data is turned off (Firefox 93, Firefox 91.2, Firefox 78.15).
4535 | security.tls.hello_downgrade_check | boolean | true
4536 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the TLS 1.3 downgrade check is disabled.
4537 | security.tls.version.enable-deprecated | boolean | false
4538 | &nbsp;&nbsp;&nbsp;&nbsp;If true, browser will accept TLS 1.0. and TLS 1.1 (Firefox 86, Firefox 78.8).
4539 | security.warn_submit_secure_to_insecure | boolean | true
4540 | &nbsp;&nbsp;&nbsp;&nbsp;If false, no warning is shown when submitting a form from https to http.
4541 &nbsp;
4542
4543 Using the preference as the key, set the `Value` to the corresponding preference value.
4544
4545 `Status` can be "default", "locked", "user" or "clear"
4546
4547 * `"default"`: Read/Write: Settings appear as default even if factory default differs.
4548 * `"locked"`: Read-Only: Settings appear as default even if factory default differs.
4549 * `"user"`: Read/Write: Settings appear as changed if it differs from factory default.
4550 * `"clear"`: Read/Write: `Value` has no effect. Resets to factory defaults on each startup.
4551
4552 `"user"` preferences persist across invocations of Firefox. It is the equivalent of a user setting the preference. They are most useful when a preference is needed very early in startup so it can't be set as default by policy. An example of this is ```toolkit.legacyUserProfileCustomizations.stylesheets```.
4553
4554 `"user"` preferences persist even if the policy is removed, so if you need to remove them, you should use the clear policy.
4555
4556 See the examples below for more detail.
4557
4558 IMPORTANT: Make sure you're only setting a particular preference using this mechanism and not some other way.
4559
4560 Status
4561 **Compatibility:** Firefox 81, Firefox ESR 78.3\
4562 **CCK2 Equivalent:** `preferences`\
4563 **Preferences Affected:** Many
4564
4565 #### Windows (GPO)
4566 Software\Policies\Mozilla\Firefox\Preferences (REG_MULTI_SZ) =
4567 ```
4568 {
4569   "accessibility.force_disabled": {
4570     "Value": 1,
4571     "Status": "default"
4572   },
4573   "browser.cache.disk.parent_directory": {
4574     "Value": "SOME_NATIVE_PATH",
4575     "Status": "user"
4576   },
4577   "browser.tabs.warnOnClose": {
4578     "Value": false,
4579     "Status": "locked"
4580   }
4581 }
4582 ```
4583 #### Windows (Intune)
4584 OMA-URI:
4585 ```
4586 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Preferences
4587 ```
4588 Value (string):
4589 ```
4590 <enabled/>
4591 <data id="JSON" value='
4592 {
4593   "accessibility.force_disabled": {
4594     "Value": 1,
4595     "Status": "default"
4596   },
4597   "browser.cache.disk.parent_directory": {
4598     "Value": "SOME_NATIVE_PATH",
4599     "Status": "user"
4600   },
4601   "browser.tabs.warnOnClose": {
4602     "Value": false,
4603     "Status": "locked"
4604   }
4605 }'/>
4606 ```
4607 #### macOS
4608 ```
4609 <dict>
4610   <key>Preferences</key>
4611   <dict>
4612     <key>accessibility.force_disabled</key>
4613     <dict>
4614       <key>Value</key>
4615       <integer>1</integer>
4616       <key>Status</key>
4617       <string>default</string>
4618     </dict>
4619     <key>browser.cache.disk.parent_directory</key>
4620     <dict>
4621       <key>Value</key>
4622       <string>SOME_NATIVE_PATH</string>
4623       <key>Status</key>
4624       <string>user</string>
4625     </dict>
4626     <key>browser.tabs.warnOnClose</key>
4627     <dict>
4628       <key>Value</key>
4629       <false/>
4630       <key>Status</key>
4631       <string>locked</string>
4632     </dict>
4633   </dict>
4634 </dict>
4635 ```
4636 #### policies.json
4637 ```
4638 {
4639   "policies": {
4640     "Preferences": {
4641       "accessibility.force_disabled": {
4642         "Value": 1,
4643         "Status": "default"
4644       },
4645       "browser.cache.disk.parent_directory": {
4646         "Value": "SOME_NATIVE_PATH",
4647         "Status": "user"
4648       },
4649       "browser.tabs.warnOnClose": {
4650         "Value": false,
4651         "Status": "locked"
4652       }
4653     }
4654   }
4655 }
4656 ```
4657 ### Preferences (Deprecated)
4658 Set and lock certain preferences.
4659
4660 **Compatibility:** See below\
4661 **CCK2 Equivalent:** `preferences`\
4662 **Preferences Affected:** See below
4663
4664 | Preference | Type | Compatibility | Default
4665 | --- | --- | --- | ---
4666 | accessibility.force_disabled | integer | Firefox 70, Firefox ESR 68.2 | 0
4667 | &nbsp;&nbsp;&nbsp;&nbsp;If set to 1, platform accessibility is disabled.
4668 | app.update.auto (Deprecated - Switch to AppAutoUpdate policy) | boolean | Firefox 68, Firefox ESR 68 | true
4669 | &nbsp;&nbsp;&nbsp;&nbsp;If false, Firefox doesn't automatically install update.
4670 | browser.bookmarks.autoExportHTML | boolean | Firefox 70, Firefox ESR 68.2 | false
4671 | &nbsp;&nbsp;&nbsp;&nbsp;If true, bookmarks are exported on shutdown.
4672 | browser.bookmarks.file | string | Firefox 70, Firefox ESR 68.2 | N/A
4673 | &nbsp;&nbsp;&nbsp;&nbsp;If set, the name of the file where bookmarks are exported and imported.
4674 | browser.bookmarks.restore_default_bookmarks | boolean | Firefox 70, Firefox ESR 68.2 | N/A
4675 | &nbsp;&nbsp;&nbsp;&nbsp;If true, bookmarks are restored to their defaults.
4676 | browser.cache.disk.enable | boolean | Firefox 68, Firefox ESR 68 | true
4677 | &nbsp;&nbsp;&nbsp;&nbsp;If false, don't store cache on the hard drive.
4678 | ~browser.cache.disk.parent_directory~ | string | Firefox 68, Firefox ESR 68 | Profile temporary directory
4679 | &nbsp;&nbsp;&nbsp;&nbsp;~If set, changes the location of the disk cache.~ This policy doesn't work. It's being worked on.
4680 | browser.fixup.dns_first_for_single_words | boolean | Firefox 68, Firefox ESR 68 | false
4681 | &nbsp;&nbsp;&nbsp;&nbsp;If true, single words are sent to DNS, not directly to search.
4682 | browser.newtabpage.activity-stream.default.sites | string | Firefox 72, ESR 68.4 | Locale dependent
4683 | &nbsp;&nbsp;&nbsp;&nbsp;If set, a list of URLs to use as the default top sites on the new tab page. Due to Firefox limitations, search sites can't be added. In addition, sites with the same name but different TLDs (example.org/example.com) will not display properly.
4684 | browser.places.importBookmarksHTML | boolean | Firefox 70, Firefox ESR 68.2
4685 | &nbsp;&nbsp;&nbsp;&nbsp;If true, bookmarks are always imported on startup.
4686 | browser.safebrowsing.phishing.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
4687 | &nbsp;&nbsp;&nbsp;&nbsp;If false, phishing protection is not enabled (Not recommended)
4688 | browser.safebrowsing.malware.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
4689 | &nbsp;&nbsp;&nbsp;&nbsp;If false, malware protection is not enabled (Not recommended)
4690 | browser.search.update | boolean | Firefox 68, Firefox ESR 68 | true
4691 | &nbsp;&nbsp;&nbsp;&nbsp;If false, updates for search engines are not checked.
4692 | browser.slowStartup.notificationDisabled | boolean | Firefox 70, Firefox ESR 68.2 | false
4693 | &nbsp;&nbsp;&nbsp;&nbsp;If true, a notification isn't shown if startup is slow.
4694 | browser.tabs.warnOnClose | boolean | Firefox 68, Firefox ESR 68 | true
4695 | &nbsp;&nbsp;&nbsp;&nbsp;If false, there is no warning when the browser is closed.
4696 | browser.taskbar.previews.enable | boolean | Firefox 70, Firefox ESR 68.2 (Windows only) | false
4697 | &nbsp;&nbsp;&nbsp;&nbsp;If true, tab previews are shown in the Windows taskbar.
4698 | browser.urlbar.suggest.bookmark | boolean | Firefox 68, Firefox ESR 68 | true
4699 | &nbsp;&nbsp;&nbsp;&nbsp;If false, bookmarks aren't suggested when typing in the URL bar.
4700 | browser.urlbar.suggest.history | boolean | Firefox 68, Firefox ESR 68 | true
4701 | &nbsp;&nbsp;&nbsp;&nbsp;If false, history isn't suggested when typing in the URL bar.
4702 | browser.urlbar.suggest.openpage | boolean | Firefox 68, Firefox ESR 68 | true
4703 | &nbsp;&nbsp;&nbsp;&nbsp;If false, open tabs aren't suggested when typing in the URL bar.
4704 | datareporting.policy.dataSubmissionPolicyBypassNotification | boolean | Firefox 68, Firefox ESR 68 | false
4705 | &nbsp;&nbsp;&nbsp;&nbsp;If true, don't show the privacy policy tab on first run.
4706 | dom.allow_scripts_to_close_windows | boolean | Firefox 70, Firefox ESR 68.2 | false
4707 | &nbsp;&nbsp;&nbsp;&nbsp;If false, web page can close windows.
4708 | dom.disable_window_flip | boolean | Firefox 68, Firefox ESR 68 | true
4709 | &nbsp;&nbsp;&nbsp;&nbsp;If false, web pages can focus and activate windows.
4710 | dom.disable_window_move_resize | boolean | Firefox 68, Firefox ESR 68 | false
4711 | &nbsp;&nbsp;&nbsp;&nbsp;If true, web pages can't move or resize windows.
4712 | dom.event.contextmenu.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4713 | &nbsp;&nbsp;&nbsp;&nbsp;If false, web pages can't override context menus.
4714 | dom.keyboardevent.keypress.hack.dispatch_non_printable_keys.addl | string | Firefox 68, Firefox ESR 68 | N/A
4715 | &nbsp;&nbsp;&nbsp;&nbsp;See https://support.mozilla.org/en-US/kb/dom-events-changes-introduced-firefox-66
4716 | dom.keyboardevent.keypress.hack.use_legacy_keycode_and_charcode.addl | string | Firefox 68, Firefox ESR 68 | N/A
4717 | &nbsp;&nbsp;&nbsp;&nbsp;See https://support.mozilla.org/en-US/kb/dom-events-changes-introduced-firefox-66
4718 | dom.xmldocument.load.enabled | boolean | Firefox ESR 68.5 | true.
4719 | &nbsp;&nbsp;&nbsp;&nbsp;If false, XMLDocument.load is not available.
4720 | dom.xmldocument.async.enabled | boolean | Firefox ESR 68.5 | true
4721 | &nbsp;&nbsp;&nbsp;&nbsp;If false, XMLDocument.async is not available.
4722 | extensions.blocklist.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
4723 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the extensions blocklist is not used (Not recommended)
4724 | extensions.getAddons.showPane | boolean | Firefox 68, Firefox ESR 68 | N/A
4725 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the Recommendations tab is not displayed in the Add-ons Manager.
4726 | extensions.htmlaboutaddons.recommendations.enabled | boolean | Firefox 72, Firefox ESR 68.4 | true
4727 | &nbsp;&nbsp;&nbsp;&nbsp;If false, recommendations are not shown on the Extensions tab in the Add-ons Manager.
4728 | geo.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
4729 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the geolocation API is disabled. | Language dependent
4730 | intl.accept_languages | string | Firefox 70, Firefox ESR 68.2
4731 | &nbsp;&nbsp;&nbsp;&nbsp;If set, preferred language for web pages.
4732 | media.eme.enabled (Deprecated - Switch to EncryptedMediaExtensions policy) | boolean | Firefox 70, Firefox ESR 68.2 | true
4733 | &nbsp;&nbsp;&nbsp;&nbsp;If false, Encrypted Media Extensions are not enabled.
4734 | media.gmp-gmpopenh264.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4735 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the OpenH264  plugin is not downloaded.
4736 | media.gmp-widevinecdm.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4737 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the Widevine plugin is not downloaded.
4738 | media.peerconnection.enabled | boolean | Firefox 72, Firefox ESR 68.4 | true
4739 | &nbsp;&nbsp;&nbsp;&nbsp;If false, WebRTC is disabled
4740 | media.peerconnection.ice.obfuscate_host_addresses.whitelist (Deprecated) | string | Firefox 72, Firefox ESR 68.4 | N/A
4741 | &nbsp;&nbsp;&nbsp;&nbsp;If set, a list of domains for which mDNS hostname obfuscation is
4742 disabled
4743 | media.peerconnection.ice.obfuscate_host_addresses.blocklist | string | Firefox 79, Firefox ESR 78.1 | N/A
4744 | &nbsp;&nbsp;&nbsp;&nbsp;If set, a list of domains for which mDNS hostname obfuscation is
4745 disabled
4746 | network.dns.disableIPv6 | boolean | Firefox 68, Firefox ESR 68 | false
4747 | &nbsp;&nbsp;&nbsp;&nbsp;If true, IPv6 DNS lokoups are disabled.
4748 | network.IDN_show_punycode | boolean | Firefox 68, Firefox ESR 68 | false
4749 | &nbsp;&nbsp;&nbsp;&nbsp;If true, display the punycode version of internationalized domain names.
4750 | places.history.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4751 | &nbsp;&nbsp;&nbsp;&nbsp;If false, history is not enabled.
4752 | print.save_print_settings | boolean | Firefox 70, Firefox ESR 68.2 | true
4753 | &nbsp;&nbsp;&nbsp;&nbsp;If false, print settings are not saved between jobs.
4754 | security.default_personal_cert | string | Firefox 68, Firefox ESR 68 | Ask Every Time
4755 | &nbsp;&nbsp;&nbsp;&nbsp;If set to Select Automatically, Firefox automatically chooses the default personal certificate.
4756 | security.mixed_content.block_active_content | boolean | Firefox 70, Firefox ESR 68.2 | true
4757 | &nbsp;&nbsp;&nbsp;&nbsp;If false, mixed active content (HTTP and HTTPS) is not blocked.
4758 | security.osclientcerts.autoload | boolean | Firefox 72 (Windows), Firefox 75 (macOS)  | false
4759 | &nbsp;&nbsp;&nbsp;&nbsp;If true, client certificates are loaded from the operating system certificate store.
4760 | security.ssl.errorReporting.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4761 | &nbsp;&nbsp;&nbsp;&nbsp;If false, SSL errors cannot be sent to Mozilla.
4762 | security.tls.hello_downgrade_check | boolean | Firefox 72, Firefox ESR 68.4 | true
4763 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the TLS 1.3 downgrade check is disabled.
4764 | ui.key.menuAccessKeyFocuses | boolean | Firefox 68, Firefox ESR 68 | true
4765 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the Alt key doesn't show the menubar on Windows.
4766 | widget.content.gtk-theme-override | string | Firefox 72, Firefox ESR 68.4 (Linux only) | N/A
4767 | &nbsp;&nbsp;&nbsp;&nbsp;If set, overrides the GTK theme for widgets.
4768 #### Windows (GPO)
4769 ```
4770 Software\Policies\Mozilla\Firefox\Preferences\boolean_preference_name = 0x1 | 0x0
4771 Software\Policies\Mozilla\Firefox\Preferences\string_preference_name = "string_value"
4772 ```
4773 #### Windows (Intune)
4774 OMA-URI: (periods are replaced by underscores)
4775 ```
4776 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Preferences/boolean_preference_name
4777 ```
4778 Value (string):
4779 ```
4780 <enabled/> or <disabled/>
4781 ```
4782 OMA-URI: (periods are replaced by underscores)
4783 ```
4784 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Preferences/string_preference_name
4785 ```
4786 Value (string):
4787 ```
4788 <enabled/>
4789 <data id="Preferences_String" value="string_value"/>
4790 ```
4791 #### macOS
4792 ```
4793 <dict>
4794   <key>Preferences</key>
4795   <dict>
4796     <key>boolean_preference_name</key>
4797     <true/> | <false/>
4798     <key>string_preference_name</key>
4799     <string>string_value</string>
4800   </dict>
4801 </dict>
4802 ```
4803 #### policies.json
4804 ```
4805 {
4806   "policies": {
4807     "Preferences": {
4808       "boolean_preference_name": true | false,
4809       "string_preference_name": "string_value"
4810     }
4811   }
4812 }
4813 ```
4814 ### PrimaryPassword
4815 Require or prevent using a primary (formerly master) password.
4816
4817 If this value is true, a primary password is required. If this value is false, it works the same as if [`DisableMasterPasswordCreation`](#disablemasterpasswordcreation) was true and removes the primary password functionality.
4818
4819 If both DisableMasterPasswordCreation and PrimaryPassword are used, DisableMasterPasswordCreation takes precedent.
4820
4821 **Compatibility:** Firefox 79, Firefox ESR 78.1\
4822 **CCK2 Equivalent:** `noMasterPassword`\
4823 **Preferences Affected:** N/A
4824
4825 #### Windows (GPO)
4826 ```
4827 Software\Policies\Mozilla\Firefox\PrimaryPassword = 0x1 | 0x0
4828 ```
4829 #### Windows (Intune)
4830 OMA-URI:
4831 ```
4832 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PrimaryPassword
4833 ```
4834 Value (string):
4835 ```
4836 <enabled/> or <disabled/>
4837 ```
4838 #### macOS
4839 ```
4840 <dict>
4841   <key>PrimaryPassword</key>
4842   <true/> | <false/>
4843 </dict>
4844 ```
4845 #### policies.json
4846 ```
4847 {
4848   "policies": {
4849     "PrimaryPassword": true | false
4850   }
4851 }
4852 ```
4853 ### PromptForDownloadLocation
4854 Ask where to save each file before downloading.
4855
4856 **Compatibility:** Firefox 68, Firefox ESR 68\
4857 **CCK2 Equivalent:** N/A\
4858 **Preferences Affected:** `browser.download.useDownloadDir`
4859
4860 #### Windows (GPO)
4861 ```
4862 Software\Policies\Mozilla\Firefox\PromptForDownloadLocation = 0x1 | 0x0
4863 ```
4864 #### Windows (Intune)
4865 OMA-URI:
4866 ```
4867 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PromptForDownloadLocation
4868 ```
4869 Value (string):
4870 ```
4871 <enabled/> or <disabled/>
4872 ```
4873 #### macOS
4874 ```
4875 <dict>
4876   <key>PromptForDownloadLocation</key>
4877   <true/> | <false/>
4878 </dict>
4879 ```
4880 #### policies.json
4881 ```
4882 {
4883   "policies": {
4884     "PromptForDownloadLocation": true | false
4885   }
4886 }
4887 ```
4888 ### Proxy
4889 Configure proxy settings. These settings correspond to the connection settings in Firefox preferences.
4890 To specify ports, append them to the hostnames with a colon (:).
4891
4892 Unless you lock this policy, changes the user already has in place will take effect.
4893
4894 `Mode` is the proxy method being used.
4895
4896 `Locked` is whether or not proxy settings can be changed.
4897
4898 `HTTPProxy` is the HTTP proxy server.
4899
4900 `UseHTTPProxyForAllProtocols` is whether or not the HTTP proxy should be used for all other proxies.
4901
4902 `SSLProxy` is the SSL proxy server.
4903
4904 `FTPProxy` is the FTP proxy server.
4905
4906 `SOCKSProxy` is the SOCKS proxy server
4907
4908 `SOCKSVersion` is the SOCKS version (4 or 5)
4909
4910 `Passthrough` is list of hostnames or IP addresses that will not be proxied. Use `<local>` to bypass proxying for all hostnames which do not contain periods.
4911
4912 `AutoConfigURL` is a  URL for proxy configuration (only used if Mode is autoConfig).
4913
4914 `AutoLogin` means do not prompt for authentication if password is saved.
4915
4916 `UseProxyForDNS` to use proxy DNS when using SOCKS v5.
4917
4918 **Compatibility:** Firefox 60, Firefox ESR 60\
4919 **CCK2 Equivalent:** `networkProxy*`\
4920 **Preferences Affected:** `network.proxy.type`, `network.proxy.autoconfig_url`, `network.proxy.socks_remote_dns`, `signon.autologin.proxy`, `network.proxy.socks_version`, `network.proxy.no_proxies_on`, `network.proxy.share_proxy_settings`, `network.proxy.http`, `network.proxy.http_port`, `network.proxy.ftp`, `network.proxy.ftp_port`, `network.proxy.ssl`, `network.proxy.ssl_port`, `network.proxy.socks`, `network.proxy.socks_port`
4921
4922 #### Windows (GPO)
4923 ```
4924 Software\Policies\Mozilla\Firefox\Proxy\Mode = "none" | "system" | "manual" | "autoDetect" | "autoConfig"
4925 Software\Policies\Mozilla\Firefox\Proxy\Locked = 0x1 | 0x0
4926 Software\Policies\Mozilla\Firefox\=Proxy\HTTPProxy = https://httpproxy.example.com
4927 Software\Policies\Mozilla\Firefox\Proxy\UseHTTPProxyForAllProtocols = 0x1 | 0x0
4928 Software\Policies\Mozilla\Firefox\Proxy\SSLProxy = https://sslproxy.example.com
4929 Software\Policies\Mozilla\Firefox\Proxy\FTPProxy = https://ftpproxy.example.com
4930 Software\Policies\Mozilla\Firefox\Proxy\SOCKSProxy = https://socksproxy.example.com
4931 Software\Policies\Mozilla\Firefox\Proxy\SOCKSVersion = 0x4 | 0x5
4932 Software\Policies\Mozilla\Firefox\Proxy\Passthrough = <local>
4933 Software\Policies\Mozilla\Firefox\Proxy\AutoConfigURL = URL_TO_AUTOCONFIG
4934 Software\Policies\Mozilla\Firefox\Proxy\AutoLogin = 0x1 | 0x0
4935 Software\Policies\Mozilla\Firefox\Proxy\UseProxyForDNS = 0x1 | 0x0
4936 ```
4937 #### Windows (Intune)
4938 OMA-URI:
4939 ```
4940 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Proxy
4941 ```
4942 Value (string):
4943 ```
4944 <enabled/>
4945 <data id="ProxyLocked" value="true | false"/>
4946 <data id="ConnectionType" value="none | system | manual | autoDetect | autoConfig"/>
4947 <data id="HTTPProxy" value="https://httpproxy.example.com"/>
4948 <data id="UseHTTPProxyForAllProtocols" value="true | false"/>
4949 <data id="SSLProxy" value="https://sslproxy.example.com"/>
4950 <data id="FTPProxy" value="https://ftpproxy.example.com"/>
4951 <data id="SOCKSProxy" value="https://socksproxy.example.com"/>
4952 <data id="SOCKSVersion" value="4 | 5"/>
4953 <data id="AutoConfigURL" value="URL_TO_AUTOCONFIG"/>
4954 <data id="Passthrough" value="<local>"/>
4955 <data id="AutoLogin" value="true | false"/>
4956 <data id="UseProxyForDNS" value="true | false"/>
4957 ```
4958 #### macOS
4959 ```
4960 <dict>
4961   <key>Proxy</key>
4962   <dict>
4963     <key>Mode</key>
4964     <string>none | system | manual | autoDetect | autoConfig</string>
4965     <key>Locked</key>
4966     <true> | </false>
4967     <key>HTTPProxy</key>
4968     <string>https://httpproxy.example.com</string>
4969     <key>UseHTTPProxyForAllProtocols</key>
4970     <true> | </false>
4971     <key>SSLProxy</key>
4972     <string>https://sslproxy.example.com</string>
4973     <key>FTPProxy</key>
4974     <string>https://ftpproxy.example.com</string>
4975     <key>SOCKSProxy</key>
4976     <string>https://socksproxy.example.com</string>
4977     <key>SOCKSVersion</key>
4978     <string>4 | 5</string>
4979     <key>Passthrough</key>
4980     <string>&lt;local>&gt;</string>
4981     <key>AutoConfigURL</key>
4982     <string>URL_TO_AUTOCONFIG</string>
4983     <key>AutoLogin</key>
4984     <true> | </false>
4985     <key>UseProxyForDNS</key>
4986     <true> | </false>
4987   </dict>
4988 </dict>
4989 ```
4990 #### policies.json
4991 ```
4992 {
4993   "policies": {
4994     "Proxy": {
4995       "Mode": "none" | "system" | "manual" | "autoDetect" | "autoConfig",
4996       "Locked": true | false,
4997       "HTTPProxy": "hostname",
4998       "UseHTTPProxyForAllProtocols": true | false,
4999       "SSLProxy": "hostname",
5000       "FTPProxy": "hostname",
5001       "SOCKSProxy": "hostname",
5002       "SOCKSVersion": 4 | 5,
5003       "Passthrough": "<local>",
5004       "AutoConfigURL": "URL_TO_AUTOCONFIG",
5005       "AutoLogin": true | false,
5006       "UseProxyForDNS": true | false
5007     }
5008   }
5009 }
5010 ```
5011 ### RequestedLocales
5012 Set the the list of requested locales for the application in order of preference. It will cause the corresponding language pack to become active.
5013
5014 Note: For Firefox 68, this can now be a string so that you can specify an empty value.
5015
5016 **Compatibility:** Firefox 64, Firefox ESR 60.4, Updated in Firefox 68, Firefox ESR 68\
5017 **CCK2 Equivalent:** N/A\
5018 **Preferences Affected:** N/A
5019 #### Windows (GPO)
5020 ```
5021 Software\Policies\Mozilla\Firefox\RequestedLocales\1 = "de"
5022 Software\Policies\Mozilla\Firefox\RequestedLocales\2 = "en-US"
5023
5024 or
5025
5026 Software\Policies\Mozilla\Firefox\RequestedLocales = "de,en-US"
5027 ```
5028 #### Windows (Intune)
5029 OMA-URI:
5030 ```
5031 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/RequestedLocalesString
5032 ```
5033 Value (string):
5034 ```
5035 <enabled/>
5036 <data id="Preferences_String" value="de,en-US"/>
5037 ```
5038 #### macOS
5039 ```
5040 <dict>
5041   <key>RequestedLocales</key>
5042   <array>
5043     <string>de</string>
5044     <string>en-US</string>
5045   </array>
5046 </dict>
5047
5048 or
5049
5050 <dict>
5051   <key>RequestedLocales</key>
5052   <string>de,en-US</string>
5053 </dict>
5054
5055 ```
5056 #### policies.json
5057 ```
5058 {
5059   "policies": {
5060     "RequestedLocales": ["de", "en-US"]
5061   }
5062 }
5063
5064 or
5065
5066 {
5067   "policies": {
5068     "RequestedLocales": "de,en-US"
5069   }
5070 }
5071 ```
5072 <a name="SanitizeOnShutdown"></a>
5073
5074 ### SanitizeOnShutdown (Selective)
5075 Clear data on shutdown. Choose from Cache, Cookies, Download History, Form & Search History, Browsing History, Active Logins, Site Preferences and Offline Website Data.
5076
5077 Previously, these values were always locked. Starting with Firefox 74 and Firefox ESR 68.6, you can use the `Locked` option to either keep the values unlocked (set it to false), or lock only the values you set (set it to true). If you want the old behavior of locking everything, do not set `Locked` at all.
5078
5079 **Compatibility:** Firefox 68, Firefox ESR 68 (Locked added in 74/68.6)\
5080 **CCK2 Equivalent:** N/A\
5081 **Preferences Affected:** `privacy.sanitize.sanitizeOnShutdown`, `privacy.clearOnShutdown.cache`, `privacy.clearOnShutdown.cookies`, `privacy.clearOnShutdown.downloads`, `privacy.clearOnShutdown.formdata`, `privacy.clearOnShutdown.history`, `privacy.clearOnShutdown.sessions`, `privacy.clearOnShutdown.siteSettings`, `privacy.clearOnShutdown.offlineApps`
5082 #### Windows (GPO)
5083 ```
5084 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Cache = 0x1 | 0x0
5085 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Cookies = 0x1 | 0x0
5086 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Downloads = 0x1 | 0x0
5087 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\FormData = 0x1 | 0x0
5088 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\History = 0x1 | 0x0
5089 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Sessions = 0x1 | 0x0
5090 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\SiteSettings = 0x1 | 0x0
5091 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\OfflineApps = 0x1 | 0x0
5092 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Locked = 0x1 | 0x0
5093 ```
5094 #### Windows (Intune)
5095 OMA-URI:
5096 ```
5097 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/A_SanitizeOnShutdown_Cache
5098 ```
5099 Value (string):
5100 ```
5101 <enabled/> or <disabled/>
5102 ```
5103 OMA-URI:
5104 ```
5105 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/B_SanitizeOnShutdown_Cookies
5106 ```
5107 Value (string):
5108 ```
5109 <enabled/> or <disabled/>
5110 ```
5111 OMA-URI:
5112 ```
5113 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/C_SanitizeOnShutdown_Downloads
5114 ```
5115 Value (string):
5116 ```
5117 <enabled/> or <disabled/>
5118 ```
5119 OMA-URI:
5120 ```
5121 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/D_SanitizeOnShutdown_FormData
5122 ```
5123 Value (string):
5124 ```
5125 <enabled/> or <disabled/>
5126 ```
5127 OMA-URI:
5128 ```
5129 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/E_SanitizeOnShutdown_History
5130 ```
5131 Value (string):
5132 ```
5133 <enabled/> or <disabled/>
5134 ```
5135 OMA-URI:
5136 ```
5137 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/F_SanitizeOnShutdown_Sessions
5138 ```
5139 Value (string):
5140 ```
5141 <enabled/> or <disabled/>
5142 ```
5143 OMA-URI:
5144 ```
5145 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/G_SanitizeOnShutdown_SiteSettings
5146 ```
5147 Value (string):
5148 ```
5149 <enabled/> or <disabled/>
5150 ```
5151 OMA-URI:
5152 ```
5153 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/H_SanitizeOnShutdown_OfflineApps
5154 ```
5155 Value (string):
5156 ```
5157 <enabled/> or <disabled/>
5158 ```
5159 OMA-URI:
5160 ```
5161 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/I_SanitizeOnShutdown_Locked
5162 ```
5163 Value (string):
5164 ```
5165 <enabled/> or <disabled/>
5166 ```
5167 #### macOS
5168 ```
5169 <dict>
5170   <key>SanitizeOnShutdown</key>
5171   <dict>
5172     <key>Cache</key>
5173     <true/> | <false/>
5174     <key>Cookies</key>
5175     <true/> | <false/>
5176     <key>Downloads</key>
5177     <true/> | <false/>
5178     <key>FormData</key>
5179     <true/> | <false/>
5180     <key>History</key>
5181     <true/> | <false/>
5182     <key>Sessions</key>
5183     <true/> | <false/>
5184     <key>SiteSettings</key>
5185     <true/> | <false/>
5186     <key>OfflineApps</key>
5187     <true/> | <false/>
5188     <key>Locked</key>
5189     <true/> | <false/>
5190   </dict>
5191 </dict>
5192 ```
5193 #### policies.json
5194 ```
5195 {
5196   "policies": {
5197     "SanitizeOnShutdown": {
5198       "Cache": true | false,
5199       "Cookies": true | false,
5200       "Downloads": true | false,
5201       "FormData": true | false,
5202       "History": true | false,
5203       "Sessions": true | false,
5204       "SiteSettings": true | false,
5205       "OfflineApps": true | false,
5206       "Locked": true | false
5207     }
5208   }
5209 }
5210 ```
5211 ### SanitizeOnShutdown (All)
5212 Clear all data on shutdown, including Browsing & Download History, Cookies, Active Logins, Cache, Form & Search History, Site Preferences and Offline Website Data.
5213
5214 **Compatibility:** Firefox 60, Firefox ESR 60\
5215 **CCK2 Equivalent:** N/A\
5216 **Preferences Affected:** `privacy.sanitize.sanitizeOnShutdown`, `privacy.clearOnShutdown.cache`, `privacy.clearOnShutdown.cookies`, `privacy.clearOnShutdown.downloads`, `privacy.clearOnShutdown.formdata`, `privacy.clearOnShutdown.history`, `privacy.clearOnShutdown.sessions`, `privacy.clearOnShutdown.siteSettings`, `privacy.clearOnShutdown.offlineApps`
5217 #### Windows (GPO)
5218 ```
5219 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown = 0x1 | 0x0
5220 ```
5221 #### Windows (Intune)
5222 OMA-URI:
5223 ```
5224 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/C_SanitizeOnShutdown
5225 ```
5226 Value (string):
5227 ```
5228 <enabled/> or <disabled/>
5229 ```
5230 #### macOS
5231 ```
5232 <dict>
5233   <key>SanitizeOnShutdown</key>
5234   <true/> | <false/>
5235 </dict>
5236 ```
5237 #### policies.json
5238 ```
5239 {
5240   "policies": {
5241     "SanitizeOnShutdown": true | false
5242   }
5243 }
5244 ```
5245 ### SearchBar
5246 Set whether or not search bar is displayed.
5247
5248 **Compatibility:** Firefox 60, Firefox ESR 60\
5249 **CCK2 Equivalent:** `showSearchBar`\
5250 **Preferences Affected:** N/A
5251
5252 #### Windows (GPO)
5253 ```
5254 Software\Policies\Mozilla\Firefox\SearchBar = "unified" | "separate"
5255 ```
5256
5257 #### Windows (Intune)
5258 OMA-URI:
5259 ```
5260 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SearchBar
5261 ```
5262 Value (string):
5263 ```
5264 <enabled/>
5265 <data id="SearchBar" value="unified | separate"/>
5266 ```
5267 #### macOS
5268 ```
5269 <dict>
5270   <key>SearchBar</key>
5271   <string>unified | separate</string>
5272 </dict>
5273 ```
5274 #### policies.json
5275 ```
5276 {
5277   "policies": {
5278     "SearchBar": "unified" | "separate"
5279   }
5280 }
5281 ```
5282 <a name="SearchEngines"></a>
5283
5284 ### SearchEngines (This policy is only available on the ESR.)
5285
5286 ### SearchEngines | Add
5287
5288 Add new search engines. Although there are only five engines available in the ADMX template, there is no limit. To add more in the ADMX template, you can duplicate the XML.
5289
5290 This policy is only available on the ESR. `Name` and `URLTemplate` are required.
5291
5292 `Name` is the name of the search engine.
5293
5294 `URLTemplate` is the search URL with {searchTerms} to substitute for the search term.
5295
5296 `Method` is either GET or POST
5297
5298 `IconURL` is a URL for the icon to use.
5299
5300 `Alias` is a keyword to use for the engine.
5301
5302 `Description` is a description of the search engine.
5303
5304 `PostData` is the POST data as name value pairs separated by &.
5305
5306 `SuggestURLTemplate` is a search suggestions URL with {searchTerms} to substitute for the search term.
5307
5308 `Encoding` is the query charset for the engine. It defaults to UTF-8.
5309
5310 **Compatibility:** Firefox ESR 60 (POST support in Firefox ESR 68, Encoding support in Firefox 91)\
5311 **CCK2 Equivalent:** `searchplugins`\
5312 **Preferences Affected:** N/A
5313
5314 #### Windows (GPO)
5315 ```
5316 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Name = "Example1"
5317 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\URLTemplate = "https://www.example.org/q={searchTerms}"
5318 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Method = "GET" | "POST"
5319 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\IconURL = "https://www.example.org/favicon.ico"
5320 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Alias = "example"
5321 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Description = "Example Description"
5322 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\SuggestURLTemplate = "https://www.example.org/suggestions/q={searchTerms}"
5323 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\PostData = "name=value&q={searchTerms}"
5324 ```
5325 #### Windows (Intune)
5326 OMA-URI:
5327 ```
5328 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_1
5329 ```
5330 Value (string):
5331 ```
5332 <enabled/>
5333 <data id="SearchEngine_Name" value="Example1"/>
5334 <data id="SearchEngine_URLTemplate" value="https://www.example.org/q={searchTerms"/>
5335 <data id="SearchEngine_Method" value="GET | POST"/>
5336 <data id="SearchEngine_IconURL" value="https://www.example.org/favicon.ico"/>
5337 <data id="SearchEngine_Alias" value="example"/>
5338 <data id="SearchEngine_Description" value="Example Description"/>
5339 <data id="SearchEngine_SuggestURLTemplate" value="https://www.example.org/suggestions/q={searchTerms}"/>
5340 <data id="SearchEngine_PostData" value="name=value&amp;q={searchTerms}"/>
5341 ```
5342 #### macOS
5343 ```
5344 <dict>
5345   <key>SearchEngines</key>
5346   <dict>
5347     <key>Add</key>
5348     <array>
5349       <dict>
5350         <key>Name</key>
5351         <string>Example1</string>
5352         <key>URLTemplate</key>
5353         <string>https://www.example.org/q={searchTerms}</string>
5354         <key>Method</key>
5355         <string>GET | POST </string>
5356         <key>IconURL</key>
5357         <string>https://www.example.org/favicon.ico</string>
5358         <key>Alias</key>
5359         <string>example</string>
5360         <key>Description</key>
5361         <string>Example Description</string>
5362         <key>SuggestURLTemplate</key>
5363         <string>https://www.example.org/suggestions/q={searchTerms}</string>
5364         <key>PostData</key>
5365         <string>name=value&q={searchTerms}</string>
5366       </dict>
5367     <array>
5368   </dict>
5369 </dict>
5370 ```
5371 #### policies.json
5372 ```
5373 {
5374   "policies": {
5375     "SearchEngines": {
5376       "Add": [
5377         {
5378           "Name": "Example1",
5379           "URLTemplate": "https://www.example.org/q={searchTerms}",
5380           "Method": "GET" | "POST",
5381           "IconURL": "https://www.example.org/favicon.ico",
5382           "Alias": "example",
5383           "Description": "Description",
5384           "PostData": "name=value&q={searchTerms}",
5385           "SuggestURLTemplate": "https://www.example.org/suggestions/q={searchTerms}"
5386         }
5387       ]
5388     }
5389   }
5390 }
5391 ```
5392 ### SearchEngines | Default
5393
5394 Set the default search engine. This policy is only available on the ESR.
5395
5396 **Compatibility:** Firefox ESR 60\
5397 **CCK2 Equivalent:** `defaultSearchEngine`\
5398 **Preferences Affected:** N/A
5399
5400 #### Windows (GPO)
5401 ```
5402 Software\Policies\Mozilla\Firefox\SearchEngines\Default = NAME_OF_SEARCH_ENGINE
5403 ```
5404 #### Windows (Intune)
5405 OMA-URI:
5406 ```
5407 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_Default
5408 ```
5409 Value (string):
5410 ```
5411 <enabled/>
5412 <data id="SearchEngines_Default" value="NAME_OF_SEARCH_ENGINE"/>
5413 ```
5414 #### macOS
5415 ```
5416 <dict>
5417   <key>SearchEngines</key>
5418   <dict>
5419     <key>Default</key>
5420     <string>NAME_OF_SEARCH_ENGINE</string>
5421   </dict>
5422 </dict>
5423 ```
5424 #### policies.json
5425 ```
5426 {
5427   "policies": {
5428     "SearchEngines": {
5429       "Default": "NAME_OF_SEARCH_ENGINE"
5430     }
5431   }
5432 }
5433 ```
5434 ### SearchEngines | PreventInstalls
5435
5436 Prevent installing search engines from webpages.
5437
5438 **Compatibility:** Firefox ESR 60\
5439 **CCK2 Equivalent:** `disableSearchEngineInstall`\
5440 **Preferences Affected:** N/A
5441
5442 #### Windows (GPO)
5443 ```
5444 Software\Policies\Mozilla\Firefox\SearchEngines\PreventInstalls = 0x1 | 0x0
5445 ```
5446 #### Windows (Intune)
5447 OMA-URI:
5448 ```
5449 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_PreventInstalls
5450 ```
5451 Value (string):
5452 ```
5453 <enabled/> or <disabled/>
5454 ```
5455 #### macOS
5456 ```
5457 <dict>
5458   <key>SearchEngines</key>
5459   <dict>
5460     <key>PreventInstalls</key>
5461     <true/> | <false/>
5462   </dict>
5463 </dict>
5464 ```
5465 #### policies.json
5466 ```
5467 {
5468   "policies": {
5469     "SearchEngines": {
5470       "PreventInstalls": true | false
5471     }
5472   }
5473 }
5474 ```
5475 ### SearchEngines | Remove
5476
5477 Hide built-in search engines. This policy is only available on the ESR.
5478
5479 **Compatibility:** Firefox ESR 60.2\
5480 **CCK2 Equivalent:** `removeDefaultSearchEngines` (removed all built-in engines)\
5481 **Preferences Affected:** N/A
5482
5483 #### Windows (GPO)
5484 ```
5485 Software\Policies\Mozilla\Firefox\SearchEngines\Remove\1 = NAME_OF_SEARCH_ENGINE
5486 ```
5487 #### Windows (Intune)
5488 OMA-URI:
5489 ```
5490 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_Remove
5491 ```
5492 Value (string):
5493 ```
5494 <enabled/>
5495 <data id="SearchEngines_Remove" value="1&#xF000;NAME_OF_SEARCH_ENGINE"/>
5496 ```
5497 #### macOS
5498 ```
5499 <dict>
5500   <key>SearchEngines</key>
5501   <dict>
5502     <key>Remove</key>
5503     <array>
5504       <string>NAME_OF_SEARCH_ENGINE</string>
5505     </array>
5506   </dict>
5507 </dict>
5508 ```
5509 #### policies.json
5510 ```
5511 {
5512   "policies": {
5513     "SearchEngines": {
5514       "Remove": ["NAME_OF_SEARCH_ENGINE"]
5515     }
5516   }
5517 }
5518 ```
5519 ### SearchSuggestEnabled
5520
5521 Enable search suggestions.
5522
5523 **Compatibility:** Firefox 68, Firefox ESR 68\
5524 **CCK2 Equivalent:** N/A\
5525 **Preferences Affected:** `browser.urlbar.suggest.searches`, `browser.search.suggest.enabled`
5526
5527 #### Windows (GPO)
5528 ```
5529 Software\Policies\Mozilla\Firefox\SearchSuggestEnabled = 0x1 | 0x0
5530 ```
5531 #### Windows (Intune)
5532 OMA-URI:
5533 ```
5534 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchSuggestEnabled
5535 ```
5536 Value (string):
5537 ```
5538 <enabled/> or <disabled/>
5539 ```
5540 #### macOS
5541 ```
5542 <dict>
5543   <key>SearchSuggestEnabled</key>
5544   <true/> | <false/>
5545 </dict>
5546 ```
5547 #### policies.json
5548 ```
5549 {
5550   "policies": {
5551     "SearchSuggestEnabled": true | false
5552   }
5553 }
5554 ```
5555 ### SecurityDevices
5556
5557 Install PKCS #11 modules.
5558
5559 **Compatibility:** Firefox 64, Firefox ESR 60.4\
5560 **CCK2 Equivalent:** `certs.devices`\
5561 **Preferences Affected:** N/A
5562
5563 #### Windows (GPO)
5564 ```
5565 Software\Policies\Mozilla\Firefox\SecurityDevices\NAME_OF_DEVICE = PATH_TO_LIBRARY_FOR_DEVICE
5566 ```
5567 #### Windows (Intune)
5568 OMA-URI:
5569 ```
5570 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SecurityDevices
5571 ```
5572 Value (string):
5573 ```
5574 <enabled/>
5575 <data id="SecurityDevices" value="NAME_OF_DEVICE&#xF000;PATH_TO_LIBRARY_FOR_DEVICE"/>
5576 ```
5577 #### macOS
5578 ```
5579 <dict>
5580   <key>SecurityDevices</key>
5581   <dict>
5582     <key>NAME_OF_DEVICE</key>
5583     <string>PATH_TO_LIBRARY_FOR_DEVICE</string>
5584   </dict>
5585 </dict>
5586 ```
5587
5588 #### policies.json
5589 ```
5590 {
5591   "policies": {
5592     "SecurityDevices": {
5593       "NAME_OF_DEVICE": "PATH_TO_LIBRARY_FOR_DEVICE"
5594     }
5595   }
5596 }
5597 ```
5598 ### ShowHomeButton
5599 Show the home button on the toolbar.
5600
5601 Future versions of Firefox will not show the home button by default.
5602
5603 **Compatibility:** Firefox 88, Firefox ESR 78.10\
5604 **CCK2 Equivalent:** N/A\
5605 **Preferences Affected:** N/A
5606
5607 #### Windows (GPO)
5608 ```
5609 Software\Policies\Mozilla\Firefox\ShowHomeButton = 0x1 | 0x0
5610 ```
5611 #### Windows (Intune)
5612 OMA-URI:
5613 ```
5614 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/Homepage_ShowHomeButton
5615 ```
5616 Value (string):
5617 ```
5618 <enabled/> or <disabled/>
5619 ```
5620 #### macOS
5621 ```
5622 <dict>
5623   <key>ShowHomeButton</key>
5624   <true/> | <false/>
5625 </dict>
5626 ```
5627 #### policies.json
5628 ```
5629 {
5630   "policies": {
5631     "ShowHomeButton": true | false
5632   }
5633 }
5634 ```
5635 ### SSLVersionMax
5636
5637 Set and lock the maximum version of TLS.
5638
5639 **Compatibility:** Firefox 66, Firefox ESR 60.6\
5640 **CCK2 Equivalent:** N/A\
5641 **Preferences Affected:** `security.tls.version.max`
5642
5643 #### Windows (GPO)
5644 ```
5645 Software\Policies\Mozilla\Firefox\SSLVersionMax = "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
5646 ```
5647 #### Windows (Intune)
5648 OMA-URI:
5649 ```
5650 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SSLVersionMax
5651 ```
5652 Value (string):
5653 ```
5654 <enabled/>
5655 <data id="SSLVersion" value="tls1 | tls1.2 | tls1.3"/>
5656 ```
5657 #### macOS
5658 ```
5659 <dict>
5660   <key>SSLVersionMax</key>
5661   <string>tls1 | tls1.1 | tls1.2 | tls1.3</string>
5662 </dict>
5663 ```
5664
5665 #### policies.json
5666 ```
5667 {
5668   "policies": {
5669     "SSLVersionMax": "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
5670   }
5671 }
5672 ```
5673 ### SSLVersionMin
5674
5675 Set and lock the minimum version of TLS.
5676
5677 **Compatibility:** Firefox 66, Firefox ESR 60.6\
5678 **CCK2 Equivalent:** N/A\
5679 **Preferences Affected:** `security.tls.version.min`
5680
5681 #### Windows (GPO)
5682 ```
5683 Software\Policies\Mozilla\Firefox\SSLVersionMin = "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
5684 ```
5685 #### Windows (Intune)
5686 OMA-URI:
5687 ```
5688 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SSLVersionMin
5689 ```
5690 Value (string):
5691 ```
5692 <enabled/>
5693 <data id="SSLVersion" value="tls1 | tls1.2 | tls1.3"/>
5694 ```
5695 #### macOS
5696 ```
5697 <dict>
5698   <key>SSLVersionMin</key>
5699   <string>tls1 | tls1.1 | tls1.2 | tls1.3</string>
5700 </dict>
5701 ```
5702
5703 #### policies.json
5704 ```
5705 {
5706   "policies": {
5707     "SSLVersionMin": "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
5708   }
5709 }
5710 ```
5711 ### SupportMenu
5712 Add a menuitem to the help menu for specifying support information.
5713
5714 **Compatibility:** Firefox 68.0.1, Firefox ESR 68.0.1\
5715 **CCK2 Equivalent:** helpMenu\
5716 **Preferences Affected:** N/A
5717
5718 #### Windows (GPO)
5719 ```
5720 Software\Policies\Mozilla\Firefox\SupportMenu\Title = "Support Menu"
5721 Software\Policies\Mozilla\Firefox\SupportMenu\URL = "http://example.com/support"
5722 Software\Policies\Mozilla\Firefox\SupportMenu\AccessKey = "S"
5723 ```
5724 #### Windows (Intune)
5725 OMA-URI:
5726 ```
5727 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SupportMenu
5728 ```
5729 Value (string):
5730 ```
5731 <enabled/>
5732 <data id="SupportMenuTitle" value="Support Menu"/>
5733 <data id="SupportMenuURL" value="http://example.com/support"/>
5734 <data id="SupportMenuAccessKey" value="S"/>
5735 ```
5736 #### macOS
5737 ```
5738 <dict>
5739   <key>SupportMenu</key>
5740   <dict>
5741     <key>Title</key>
5742     <string>SupportMenu</string>
5743     <key>URL</key>
5744     <string>http://example.com/support</string>
5745     <key>AccessKey</key>
5746     <string>S</string>
5747   </dict>
5748 </dict>
5749 ```
5750 #### policies.json
5751 ```
5752 {
5753   "policies": {
5754     "SupportMenu": {
5755       "Title": "Support Menu",
5756       "URL": "http://example.com/support",
5757       "AccessKey": "S"
5758     }
5759   }
5760 }
5761 ```
5762 ### StartDownloadsInTempDirectory
5763 Force downloads to start off in a local, temporary location rather than the default download directory.
5764
5765 **Compatibility:** Firefox 102\
5766 **CCK2 Equivalent:** N/A\
5767 **Preferences Affected:** `browser.download.start_downloads_in_tmp_dir`
5768
5769 #### Windows (GPO)
5770 ```
5771 Software\Policies\Mozilla\Firefox\StartDownloadsInTempDirectory = 0x1 | 0x0
5772 ```
5773 #### Windows (Intune)
5774 OMA-URI:
5775 ```
5776 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/StartDownloadsInTempDirectory
5777 ```
5778 Value (string):
5779 ```
5780 <enabled/> or <disabled/>
5781 ```
5782 #### macOS
5783 ```
5784 <dict>
5785   <key>StartDownloadsInTempDirectory</key>
5786   <true/> | <false/>
5787 </dict>
5788 ```
5789 #### policies.json
5790 ```
5791 {
5792   "policies": {
5793     "StartDownloadsInTempDirectory": true | false
5794 }
5795 ```
5796 ### UserMessaging
5797
5798 Prevent Firefox from messaging the user in certain situations.
5799
5800 `WhatsNew` Remove the "What's New" icon and menuitem.
5801
5802 `ExtensionRecommendations` If false, don't recommend extensions while the user is visiting web pages.
5803
5804 `FeatureRecommendations` If false, don't recommend browser features.
5805
5806 `UrlbarInterventions` If false, Don't offer Firefox specific suggestions in the URL bar.
5807
5808 `SkipOnboarding` If true, don't show onboarding messages on the new tab page.
5809
5810 `MoreFromMozilla` If false, don't show the "More from Mozilla" section in Preferences. (Firefox 98)
5811
5812 **Compatibility:** Firefox 75, Firefox ESR 68.7\
5813 **CCK2 Equivalent:** N/A\
5814 **Preferences Affected:** `browser.messaging-system.whatsNewPanel.enabled`, `browser.newtabpage.activity-stream.asrouter.userprefs.cfr.addons`, `browser.newtabpage.activity-stream.asrouter.userprefs.cfr.features`, `browser.aboutwelcome.enabled`, `browser.preferences.moreFromMozilla`
5815
5816 #### Windows (GPO)
5817 ```
5818 Software\Policies\Mozilla\Firefox\UserMessaging\WhatsNew = 0x1 | 0x0
5819 Software\Policies\Mozilla\Firefox\UserMessaging\ExtensionRecommendations = 0x1 | 0x0
5820 Software\Policies\Mozilla\Firefox\UserMessaging\FeatureRecommendations = 0x1 | 0x0
5821 Software\Policies\Mozilla\Firefox\UserMessaging\UrlbarInterventions = 0x1 | 0x0
5822 Software\Policies\Mozilla\Firefox\UserMessaging\SkipOnboarding = 0x1 | 0x0
5823 Software\Policies\Mozilla\Firefox\UserMessaging\MoreFromMozilla = 0x1 | 0x0
5824 ```
5825 #### Windows (Intune)
5826 OMA-URI:
5827 ```
5828 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_WhatsNew
5829 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_ExtensionRecommendations
5830 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_FeatureRecommendations
5831 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_UrlbarInterventions
5832 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_SkipOnboarding
5833 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_MoreFromMozilla
5834 ```
5835 Value (string):
5836 ```
5837 <enabled/> or <disabled/>
5838 ```
5839 #### macOS
5840 ```
5841 <dict>
5842   <key>UserMessaging</key>
5843   <dict>
5844     <key>WhatsNew</key>
5845     <true/> | <false/>
5846     <key>ExtensionRecommendations</key>
5847     <true/> | <false/>
5848     <key>FeatureRecommendations</key>
5849     <true/> | <false/>
5850     <key>UrlbarInterventions</key>
5851     <true/> | <false/>
5852     <key>SkipOnboarding</key>
5853     <true/> | <false/>
5854     <key>MoreFromMozilla</key>
5855     <true/> | <false/>
5856   </dict>
5857 </dict>
5858 ```
5859 #### policies.json
5860 ```
5861 {
5862   "policies": {
5863     "UserMessaging": {
5864       "WhatsNew": true | false,
5865       "ExtensionRecommendations": true | false,
5866       "FeatureRecommendations": true | false,
5867       "UrlbarInterventions": true | false,
5868       "SkipOnboarding": true | false,
5869       "MoreFromMozilla": true | false
5870     }
5871   }
5872 }
5873 ```
5874 ### UseSystemPrintDialog
5875 Use the system print dialog instead of the print preview window.
5876
5877 **Compatibility:** Firefox 102\
5878 **CCK2 Equivalent:** N/A\
5879 **Preferences Affected:** `print.prefer_system_dialog`
5880
5881 #### Windows (GPO)
5882 ```
5883 Software\Policies\Mozilla\Firefox\UseSystemPrintDialog = 0x1 | 0x0
5884 ```
5885 #### Windows (Intune)
5886 OMA-URI:
5887 ```
5888 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/UseSystemPrintDialog
5889 ```
5890 Value (string):
5891 ```
5892 <enabled/> or <disabled/>
5893 ```
5894 #### macOS
5895 ```
5896 <dict>
5897   <key>UseSystemPrintDialog</key>
5898   <true/> | <false/>
5899 </dict>
5900 ```
5901 #### policies.json
5902 ```
5903 {
5904   "policies": {
5905     "UseSystemPrintDialog": true | false
5906   }
5907 }
5908 ```
5909 ### WebsiteFilter
5910 Block websites from being visited. The parameters take an array of Match Patterns, as documented in https://developer.mozilla.org/en-US/Add-ons/WebExtensions/Match_patterns.
5911 The arrays are limited to 1000 entries each.
5912
5913 If you want to block all URLs, you can use `<all_urls>` or `*://*/*`. You can't have just a `*` on the right side.
5914
5915 For specific protocols, use `https://*/*` or `http://*/*`.
5916
5917 As of Firefox 83 and Firefox ESR 78.5, file URLs are supported.
5918
5919 **Compatibility:** Firefox 60, Firefox ESR 60\
5920 **CCK2 Equivalent:** N/A\
5921 **Preferences Affected:** N/A
5922
5923 #### Windows (GPO)
5924 ```
5925 Software\Policies\Mozilla\Firefox\WebsiteFilter\Block\1 = "<all_urls>"
5926 Software\Policies\Mozilla\Firefox\WebsiteFilter\Exceptions\1 = "http://example.org/*"
5927 ```
5928 #### Windows (Intune)
5929 OMA-URI:
5930 ```
5931 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/B_WebsiteFilter_Block
5932 ```
5933 Value (string):
5934 ```
5935 <enabled/> <data id="WebsiteFilter" value="1&#xF000;&#60;all_urls&#62;"/>
5936 ```
5937 OMA-URI:
5938 ```
5939 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/B_WebsiteFilter_Exceptions
5940 ```
5941 Value (string):
5942 ```
5943 <enabled/>
5944 <data id="WebsiteFilter" value="1&#xF000;http://example.org/*"/>
5945 ```
5946 #### macOS
5947 ```
5948 <dict>
5949   <key>WebsiteFilter</key>
5950   <dict>
5951     <key>Block</key>
5952     <array>
5953       <string><all_urls></string>
5954     </array>
5955     <key>Exceptions</key>
5956     <array>
5957       <string>http://example.org/*</string>
5958     </array>
5959   </dict>
5960
5961 </dict>
5962 ```
5963 #### policies.json
5964 ```
5965 {
5966   "policies": {
5967     "WebsiteFilter": {
5968       "Block": ["<all_urls>"],
5969       "Exceptions": ["http://example.org/*"]
5970     }
5971   }
5972 }
5973 ```
5974 ### WindowsSSO
5975 Allow Windows single sign-on for Microsoft, work, and school accounts.
5976
5977 If this policy is set to true, Firefox will use credentials stored in Windows to sign in to Microsoft, work, and school accounts.
5978
5979 **Compatibility:** Firefox 91\
5980 **CCK2 Equivalent:** N/A\
5981 **Preferences Affected:** `network.http.windows-sso.enabled`
5982
5983 #### Windows (GPO)
5984 ```
5985 Software\Policies\Mozilla\Firefox\WindowsSSO = 0x1 | 0x0
5986 ```
5987 #### Windows (Intune)
5988 OMA-URI:
5989 ```
5990 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/WindowsSSO
5991 ```
5992 Value (string):
5993 ```
5994 <enabled/> or <disabled/>
5995 ```
5996 #### policies.json
5997 ```
5998 {
5999   "policies": {
6000     "WindowsSSO": true | false
6001   }
6002 }
6003 ```