README.md

   1 **These policies are in active development and so might contain changes that do not work with current versions of Firefox.**
   2
   3 **You should use the [officially released versions](https://github.com/mozilla/policy-templates/releases) if you are deploying changes.**
   4
   5 Policies can be specified using the [Group Policy templates on Windows](https://github.com/mozilla/policy-templates/tree/master/windows), [Intune on Windows](https://support.mozilla.org/kb/managing-firefox-intune), [configuration profiles on macOS](https://github.com/mozilla/policy-templates/tree/master/mac), or by creating a file called `policies.json`. On Windows, create a directory called `distribution` where the EXE is located and place the file there. On Mac, the file goes into `Firefox.app/Contents/Resources/distribution`.  On Linux, the file goes into `firefox/distribution`, where `firefox` is the installation directory for firefox, which varies by distribution or you can specify system-wide policy by placing the file in `/etc/firefox/policies`.
   6
   7 | Policy Name | Description
   8 | --- | --- |
   9 | **[`3rdparty`](#3rdparty)** | Set policies that WebExtensions can access via chrome.storage.managed.
  10 | **[`AllowedDomainsForApps`](#alloweddomainsforapps)** | Define domains allowed to access Google Workspace.
  11 | **[`AppAutoUpdate`](#appautoupdate)** | Enable or disable automatic application update.
  12 | **[`AppUpdateURL`](#appupdateurl)** | Change the URL for application update.
  13 | **[`Authentication`](#authentication)** | Configure sites that support integrated authentication.
  14 | **[`AutoLaunchProtocolsFromOrigins`](#autolaunchprotocolsfromorigins)** | Define a list of external protocols that can be used from listed origins without prompting the user.
  15 | **[`BackgroundAppUpdate`](#backgroundappupdate)** | Enable or disable the background updater (Windows only).
  16 | **[`BlockAboutAddons`](#blockaboutaddons)** | Block access to the Add-ons Manager (about:addons).
  17 | **[`BlockAboutConfig`](#blockaboutconfig)** | Block access to about:config.
  18 | **[`BlockAboutProfiles`](#blockaboutprofiles)** | Block access to About Profiles (about:profiles).
  19 | **[`BlockAboutSupport`](#blockaboutsupport)** | Block access to Troubleshooting Information (about:support).
  20 | **[`Bookmarks`](#bookmarks)** | Add bookmarks in either the bookmarks toolbar or menu.
  21 | **[`CaptivePortal`](#captiveportal)** | Enable or disable the detection of captive portals.
  22 | **[`Certificates`](#certificates)** |
  23 | **[`Certificates -> ImportEnterpriseRoots`](#certificates--importenterpriseroots)** | Trust certificates that have been added to the operating system certificate store by a user or administrator.
  24 | **[`Certificates -> Install`](#certificates--install)** | Install certificates into the Firefox certificate store.
  25 | **[`Cookies`](#cookies)** | Configure cookie preferences.
  26 | **[`DefaultDownloadDirectory`](#defaultdownloaddirectory)** | Set the default download directory.
  27 | **[`DisableAppUpdate`](#disableappupdate)** | Turn off application updates.
  28 | **[`DisableBuiltinPDFViewer`](#disablebuiltinpdfviewer)** | Disable the built in PDF viewer.
  29 | **[`DisabledCiphers`](#disabledciphers)** | Disable ciphers.
  30 | **[`DisableDefaultBrowserAgent`](#disabledefaultbrowseragent)** | Prevent the default browser agent from taking any actions (Windows only).
  31 | **[`DisableDeveloperTools`](#disabledevelopertools)** | Remove access to all developer tools.
  32 | **[`DisableFeedbackCommands`](#disablefeedbackcommands)** | Disable the menus for reporting sites.
  33 | **[`DisableFirefoxAccounts`](#disablefirefoxaccounts)** | Disable Firefox Accounts integration (Sync).
  34 | **[`DisableFirefoxScreenshots`](#disablefirefoxscreenshots)** | Remove access to Firefox Screenshots.
  35 | **[`DisableFirefoxStudies`](#disablefirefoxstudies)** | Disable Firefox studies (Shield).
  36 | **[`DisableForgetButton`](#disableforgetbutton)** | Disable the "Forget" button.
  37 | **[`DisableFormHistory`](#disableformhistory)** | Turn off saving information on web forms and the search bar.
  38 | **[`DisableMasterPasswordCreation`](#disablemasterpasswordcreation)** | Remove the master password functionality.
  39 | **[`DisablePasswordReveal`](#disablepasswordreveal)** | Do not allow passwords to be revealed in saved logins.
  40 | **[`DisablePocket`](#disablepocket)** | Remove Pocket in the Firefox UI.
  41 | **[`DisablePrivateBrowsing`](#disableprivatebrowsing)** | Remove access to private browsing.
  42 | **[`DisableProfileImport`](#disableprofileimport)** | Disables the "Import data from another browser" option in the bookmarks window.
  43 | **[`DisableProfileRefresh`](#disableprofilerefresh)** | Disable the Refresh Firefox button on about:support and support.mozilla.org
  44 | **[`DisableSafeMode`](#disablesafemode)** | Disable safe mode within the browser.
  45 | **[`DisableSecurityBypass`](#disablesecuritybypass)** | Prevent the user from bypassing security in certain cases.
  46 | **[`DisableSetDesktopBackground`](#disablesetdesktopbackground)** | Remove the "Set As Desktop Background..." menuitem when right clicking on an image.
  47 | **[`DisableSystemAddonUpdate`](#disablesystemaddonupdate)** | Prevent system add-ons from being installed or update.
  48 | **[`DisableTelemetry`](#disabletelemetry)** | DisableTelemetry
  49 | **[`DisplayBookmarksToolbar`](#displaybookmarkstoolbar)** | Set the initial state of the bookmarks toolbar.
  50 | **[`DisplayMenuBar`](#displaymenubar)** | Set the state of the menubar.
  51 | **[`DisplayMenuBar (Deprecated)`](#displaymenubar-deprecated)** | Set the initial state of the menubar.
  52 | **[`DNSOverHTTPS`](#dnsoverhttps)** | Configure DNS over HTTPS.
  53 | **[`DontCheckDefaultBrowser`](#dontcheckdefaultbrowser)** | Don't check if Firefox is the default browser at startup.
  54 | **[`DownloadDirectory`](#downloaddirectory)** | Set and lock the download directory.
  55 | **[`EnableTrackingProtection`](#enabletrackingprotection)** | Configure tracking protection.
  56 | **[`EncryptedMediaExtensions`](#encryptedmediaextensions)** | Enable or disable Encrypted Media Extensions and optionally lock it.
  57 | **[`EnterprisePoliciesEnabled`](#enterprisepoliciesenabled)** | Enable policy support on macOS.
  58 | **[`Extensions`](#extensions)** | Control the installation, uninstallation and locking of extensions.
  59 | **[`ExtensionSettings`](#extensionsettings)** | Manage all aspects of extensions.
  60 | **[`ExtensionUpdate`](#extensionupdate)** | Control extension updates.
  61 | **[`FirefoxHome`](#firefoxhome)** | Customize the Firefox Home page.
  62 | **[`FlashPlugin`](#flashplugin)** | Configure the default Flash plugin policy as well as origins for which Flash is allowed.
  63 | **[`Handlers`](#handlers)** | Configure default application handlers.
  64 | **[`HardwareAcceleration`](#hardwareacceleration)** | Control hardware acceleration.
  65 | **[`Homepage`](#homepage)** | Configure the default homepage and how Firefox starts.
  66 | **[`InstallAddonsPermission`](#installaddonspermission)** | Configure the default extension install policy as well as origins for extension installs are allowed.
  67 | **[`LegacyProfiles`](#legacyprofiles)** | Disable the feature enforcing a separate profile for each installation.
  68 | **[`LocalFileLinks`](#localfilelinks)** | Enable linking to local files by origin.
  69 | **[`ManagedBookmarks`](#managedbookmarks)** | Configures a list of bookmarks managed by an administrator that cannot be changed by the user.
  70 | **[`ManualAppUpdateOnly`](#manualappupdateonly)** | Allow manual updates only and do not notify the user about updates..
  71 | **[`NetworkPrediction`](#networkprediction)** | Enable or disable network prediction (DNS prefetching).
  72 | **[`NewTabPage`](#newtabpage)** | Enable or disable the New Tab page.
  73 | **[`NoDefaultBookmarks`](#nodefaultbookmarks)** | Disable the creation of default bookmarks.
  74 | **[`OfferToSaveLogins`](#offertosavelogins)** | Control whether or not Firefox offers to save passwords.
  75 | **[`OfferToSaveLoginsDefault`](#offertosaveloginsdefault)** | Set the default value for whether or not Firefox offers to save passwords.
  76 | **[`OverrideFirstRunPage`](#overridefirstrunpage)** | Override the first run page.
  77 | **[`OverridePostUpdatePage`](#overridepostupdatepage)** | Override the upgrade page.
  78 | **[`PasswordManagerEnabled`](#passwordmanagerenabled)** | Remove (some) access to the password manager.
  79 | **[`PDFjs`](#pdfjs)** | Disable or configure PDF.js, the built-in PDF viewer.
  80 | **[`Permissions`](#permissions)** | Set permissions associated with camera, microphone, location, and notifications.
  81 | **[`PictureInPicture`](#pictureinpicture)** | Enable or disable Picture-in-Picture.
  82 | **[`PopupBlocking`](#popupblocking)** | Configure the default pop-up window policy as well as origins for which pop-up windows are allowed.
  83 | **[`Preferences`](#preferences)** | Set and lock preferences.
  84 | **[`Preferences (Deprecated)`](#preferences-deprecated)** | Set and lock some preferences.
  85 | **[`PrimaryPassword`](#primarypassword)** | Require or prevent using a primary (formerly master) password.
  86 | **[`PromptForDownloadLocation`](#promptfordownloadlocation)** | Ask where to save each file before downloading.
  87 | **[`Proxy`](#proxy)** | Configure proxy settings.
  88 | **[`RequestedLocales`](#requestedlocales)** | Set the the list of requested locales for the application in order of preference.
  89 | **[`SanitizeOnShutdown` (All)](#sanitizeonshutdown-all)** | Clear all data on shutdown.
  90 | **[`SanitizeOnShutdown` (Selective)](#sanitizeonshutdown-selective)** | Clear data on shutdown.
  91 | **[`SearchBar`](#searchbar)** | Set whether or not search bar is displayed.
  92 | **[`SearchEngines`](#searchengines-this-policy-is-only-available-on-the-esr)** |
  93 | **[`SearchEngines -> Default`](#searchengines--default)** | Set the default search engine.
  94 | **[`SearchEngines -> PreventInstalls`](#searchengines--preventinstalls)** | Prevent installing search engines from webpages.
  95 | **[`SearchEngines -> Remove`](#searchengines--remove)** | Hide built-in search engines.
  96 | **[`SearchEngines -> Add`](#searchengines--add)** | Add new search engines.
  97 | **[`SearchSuggestEnabled`](#searchsuggestenabled)** | Enable search suggestions.
  98 | **[`SecurityDevices`](#securitydevices)** | Install PKCS #11 modules.
  99 | **[`ShowHomeButton`](#showhomebutton)** | Show the home button on the toolbar.
 100 | **[`SSLVersionMax`](#sslversionmax)** | Set and lock the maximum version of TLS.
 101 | **[`SSLVersionMin`](#sslversionmin)** | Set and lock the minimum version of TLS.
 102 | **[`SupportMenu`](#supportmenu)** | Add a menuitem to the help menu for specifying support information.
 103 | **[`UserMessaging`](#usermessaging)** | Don't show certain messages to the user.
 104 | **[`WebsiteFilter`](#websitefilter)** | Block websites from being visited.
 105 | **[`WindowsSSO`](#windowssso)** | Allow Windows single sign-on for Microsoft, work, and school accounts.
 106
 107 ### 3rdparty
 108
 109 Allow WebExtensions to configure policy. For more information, see [Adding policy support to your extension](https://extensionworkshop.com/documentation/enterprise/adding-policy-support-to-your-extension/).
 110
 111 ### AppAutoUpdate
 112
 113 Enable or disable **automatic** application update.
 114
 115 If set to true, application updates are installed without user approval within Firefox. The operating system might still require approval.
 116
 117 If set to false, application updates are downloaded but the user can choose when to install the update.
 118
 119 If you have disabled updates via `DisableAppUpdate`, this policy has no effect.
 120
 121 **Compatibility:** Firefox 75, Firefox ESR 68.7\
 122 **CCK2 Equivalent:** N/A\
 123 **Preferences Affected:** `app.update.auto`
 124
 125 #### Windows (GPO)
 126 ```
 127 Software\Policies\Mozilla\Firefox\AppAutoUpdate = 0x1 | 0x0
 128 ```
 129 #### Windows (Intune)
 130 OMA-URI:
 131 ```
 132 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AppAutoUpdate
 133 ```
 134 Value (string):
 135 ```
 136 <enabled/> or <disabled/>
 137 ```
 138 #### macOS
 139 ```
 140 <dict>
 141   <key>AppAutoUpdate</key>
 142   <true/> | <false/>
 143 </dict>
 144 ```
 145 #### policies.json
 146 ```
 147 {
 148   "policies": {
 149     "AppAutoUpdate": true | false
 150   }
 151 }
 152 ```
 153 ### AllowedDomainsForApps
 154
 155 Define domains allowed to access Google Workspace.
 156
 157 This policy is based on the [Chrome policy](https://chromeenterprise.google/policies/#AllowedDomainsForApps) of the same name.
 158
 159 If this policy is enabled, users can only access Google Workspace using accounts from the specified domains. If you want to allow Gmail, you can add ```consumer_accounts``` to the list.
 160
 161 **Compatibility:** Firefox 89, Firefox ESR 78.11\
 162 **CCK2 Equivalent:** N/A\
 163 **Preferences Affected:** N/A
 164
 165 #### Windows (GPO)
 166 ```
 167 Software\Policies\Mozilla\Firefox\AllowedDomainsForApps = "managedfirefox.com,example.com"
 168 ```
 169 #### Windows (Intune)
 170 OMA-URI:
 171 ```
 172 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AllowedDomainsForApps
 173 ```
 174 Value (string):
 175 ```
 176 <enabled/>
 177 <data id="AllowedDomainsForApps" value="managedfirefox.com,example.com"/>
 178 ```
 179 #### macOS
 180 ```
 181 <dict>
 182   <key>AllowedDomainsForApps</key>
 183   <string>managedfirefox.com,example.com</string>
 184 </dict>
 185 ```
 186 #### policies.json
 187 ```
 188 {
 189   "policies": {
 190     "AllowedDomainsForApps": "managedfirefox.com,example.com"
 191   }
 192 }
 193 ```
 194 ### AppUpdateURL
 195
 196 Change the URL for application update if you are providing Firefox updates from a custom update server.
 197
 198 **Compatibility:** Firefox 62, Firefox ESR 60.2\
 199 **CCK2 Equivalent:** N/A\
 200 **Preferences Affected:** `app.update.url`
 201
 202 #### Windows (GPO)
 203 ```
 204 Software\Policies\Mozilla\Firefox\AppUpdateURL = "https://yoursite.com"
 205 ```
 206 #### Windows (Intune)
 207 OMA-URI:
 208 ```
 209 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AppUpdateURL
 210 ```
 211 Value (string):
 212 ```
 213 <enabled/>
 214 <data id="AppUpdateURL" value="https://yoursite.com"/>
 215 ```
 216 #### macOS
 217 ```
 218 <dict>
 219   <key>AppUpdateURL</key>
 220   <string>https://yoursite.com</string>
 221 </dict>
 222 ```
 223 #### policies.json
 224 ```
 225 {
 226   "policies": {
 227     "AppUpdateURL": "https://yoursite.com"
 228   }
 229 }
 230 ```
 231 ### Authentication
 232
 233 Configure sites that support integrated authentication.
 234
 235 See [Integrated authentication](https://htmlpreview.github.io/?https://github.com/mdn/archived-content/blob/main/files/en-us/mozilla/integrated_authentication/raw.html) for more information.
 236
 237 `PrivateBrowsing` enables integrated authentication in private browsing.
 238
 239 **Compatibility:** Firefox 60, Firefox ESR 60 (AllowNonFQDN added in 62/60.2, AllowProxies added in 70/68.2, Locked added in 71/68.3, PrivateBrowsing added in 77/68.9)\
 240 **CCK2 Equivalent:** N/A\
 241 **Preferences Affected:** `network.negotiate-auth.trusted-uris`,`network.negotiate-auth.delegation-uris`,`network.automatic-ntlm-auth.trusted-uris`,`network.automatic-ntlm-auth.allow-non-fqdn`,`network.negotiate-auth.allow-non-fqdn`,`network.automatic-ntlm-auth.allow-proxies`,`network.negotiate-auth.allow-proxies`,`network.auth.private-browsing-sso`
 242
 243 #### Windows (GPO)
 244 ```
 245 Software\Policies\Mozilla\Firefox\Authentication\SPNEGO\1 = "mydomain.com"
 246 Software\Policies\Mozilla\Firefox\Authentication\SPNEGO\2 = "https://myotherdomain.com"
 247 Software\Policies\Mozilla\Firefox\Authentication\Delegated\1 = "mydomain.com"
 248 Software\Policies\Mozilla\Firefox\Authentication\Delegated\2 = "https://myotherdomain.com"
 249 Software\Policies\Mozilla\Firefox\Authentication\NTLM\1 = "mydomain.com"
 250 Software\Policies\Mozilla\Firefox\Authentication\NTLM\2 = "https://myotherdomain.com"
 251 Software\Policies\Mozilla\Firefox\Authentication\AllowNonFQDN\SPNEGO = 0x1 | 0x0
 252 Software\Policies\Mozilla\Firefox\Authentication\AllowNonFQDN\NTLM = 0x1 | 0x0
 253 Software\Policies\Mozilla\Firefox\Authentication\AllowProxies\SPNEGO = 0x1 | 0x0
 254 Software\Policies\Mozilla\Firefox\Authentication\AllowProxies\NTLM = 0x1 | 0x0
 255 Software\Policies\Mozilla\Firefox\Authentication\Locked = 0x1 | 0x0
 256 Software\Policies\Mozilla\Firefox\Authentication\PrivateBrowsing = 0x1 | 0x0
 257 ```
 258 #### Windows (Intune)
 259 OMA-URI:
 260 ```
 261 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_SPNEGO
 262 ```
 263 Value (string):
 264 ```
 265 <enabled/>
 266 <data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
 267 ```
 268 OMA-URI:
 269 ```
 270 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_Delegated
 271 ```
 272 Value (string):
 273 ```
 274 <enabled/>
 275 <data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
 276 ```
 277 OMA-URI:
 278 ```
 279 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_NTLM
 280 ```
 281 Value (string):
 282 ```
 283 <enabled/>
 284 <data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
 285 ```
 286 OMA-URI:
 287 ```
 288 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_AllowNonFQDN
 289 ```
 290 Value (string):
 291 ```
 292 <enabled/>
 293 <data id="Authentication_AllowNonFQDN_NTLM" value="true | false"/>
 294 <data id="Authentication_AllowNonFQDN_SPNEGO" value="true | false"/>
 295 ```
 296 OMA-URI:
 297 ```
 298 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_Locked
 299 ```
 300 Value (string):
 301 ```
 302 <enabled/> or <disabled/>
 303 ```
 304 OMA-URI:
 305 ```
 306 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_PrivateBrowsing
 307 ```
 308 Value (string):
 309 ```
 310 <enabled/> or <disabled/>
 311 ```
 312 #### macOS
 313 ```
 314 <dict>
 315   <key>Authentication</key>
 316   <dict>
 317     <key>SPNEGO</key>
 318     <array>
 319       <string>mydomain.com</string>
 320       <string>https://myotherdomain.com</string>
 321     </array>
 322     <key>Delegated</key>
 323     <array>
 324       <string>mydomain.com</string>
 325       <string>https://myotherdomain.com</string>
 326     </array>
 327     <key>NTLM</key>
 328     <array>
 329       <string>mydomain.com</string>
 330       <string>https://myotherdomain.com</string>
 331     </array>
 332     <key>AllowNonFQDN</key>
 333       <dict>
 334       <key>SPNEGO</key>
 335       <true/> | <false/>
 336       <key>NTLM</key>
 337       <true/> | <false/>
 338     </dict>
 339     <key>AllowProxies</key>
 340       <dict>
 341       <key>SPNEGO</key>
 342       <true/> | <false/>
 343       <key>NTLM</key>
 344       <true/> | <false/>
 345     </dict>
 346     <key>Locked</key>
 347     <true/> | <false/>
 348     <key>PrivateBrowsing</key>
 349     <true/> | <false/>
 350   </dict>
 351 </dict>
 352 ```
 353 #### policies.json
 354 ```
 355 {
 356   "policies": {
 357     "Authentication": {
 358       "SPNEGO": ["mydomain.com", "https://myotherdomain.com"],
 359       "Delegated": ["mydomain.com", "https://myotherdomain.com"],
 360       "NTLM": ["mydomain.com", "https://myotherdomain.com"],
 361       "AllowNonFQDN": {
 362         "SPNEGO": true | false,
 363         "NTLM": true | false
 364       },
 365       "AllowProxies": {
 366         "SPNEGO": true | false,
 367         "NTLM": true | false
 368       },
 369       "Locked": true | false,
 370       "PrivateBrowsing": true | false
 371     }
 372   }
 373 }
 374 ```
 375 ### AutoLaunchProtocolsFromOrigins
 376 Define a list of external protocols that can be used from listed origins without prompting the user. The origin is the scheme plus the hostname.
 377
 378 The syntax of this policy is exactly the same as the [Chrome AutoLaunchProtocolsFromOrigins policy](https://cloud.google.com/docs/chrome-enterprise/policies/?policy=AutoLaunchProtocolsFromOrigins) except that you can only use valid origins (not just hostnames). This also means that you cannot specify an asterisk for all origins.
 379
 380 The schema is:
 381 ```
 382 {
 383  "items": {
 384   "properties": {
 385    "allowed_origins": {
 386     "items": {
 387      "type": "string"
 388     },
 389     "type": "array"
 390    },
 391    "protocol": {
 392     "type": "string"
 393    }
 394   },
 395   "required": [
 396    "protocol",
 397    "allowed_origins"
 398   ],
 399   "type": "object"
 400  },
 401  "type": "array"
 402 }
 403 ```
 404 **Compatibility:** Firefox 90, Firefox ESR 78.12\
 405 **CCK2 Equivalent:** N/A\
 406 **Preferences Affected:** N/A
 407
 408 #### Windows (GPO)
 409 Software\Policies\Mozilla\Firefox\AutoLaunchProtocolsFromOrigins (REG_MULTI_SZ) =
 410 ```
 411 [
 412   {
 413     "protocol": "zoommtg",
 414     "allowed_origins": [
 415       "https://somesite.zoom.us"
 416     ]
 417   }
 418 ]
 419 ```
 420 #### Windows (Intune)
 421 OMA-URI:
 422 ```
 423 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AutoLaunchProtocolsFromOrigins
 424 ```
 425 Value (string):
 426 ```
 427 <enabled/>
 428 <data id="JSON" value='
 429 [
 430   {
 431     "protocol": "zoommtg",
 432     "allowed_origins": [
 433       "https://somesite.zoom.us"
 434     ]
 435   }
 436 ]'/>
 437 ```
 438 #### macOS
 439 ```
 440 <dict>
 441   <key>AutoLaunchProtocolsFromOrigins</key>
 442   <array>
 443     <dict>
 444       <key>protocol</key>
 445       <string>zoommtg</string>
 446       <key>allowed_origins</key>
 447       <array>
 448         <string>https://somesite.zoom.us</string>
 449       </array>
 450     </dict>
 451   </array>
 452 </dict>
 453 ```
 454 #### policies.json
 455 ```
 456 {
 457   "policies": {
 458     "AutoLaunchProtocolsFromOrigins": [{
 459       "protocol": "zoommtg",
 460       "allowed_origins": [
 461         "https://somesite.zoom.us"
 462       ]
 463     }]
 464   }
 465 }
 466 ```
 467 ### BackgroundAppUpdate
 468
 469 Enable or disable **automatic** application update **in the background**, when the application is not running.
 470
 471 If set to true, application updates may be installed (without user approval) in the background, even when the application is not running. The operating system might still require approval.
 472
 473 If set to false, the application will not try to install updates when the application is not running.
 474
 475 If you have disabled updates via `DisableAppUpdate` or disabled automatic updates via `AppAutoUpdate`, this policy has no effect.
 476
 477 **Compatibility:** Firefox 90 (Windows only)\
 478 **CCK2 Equivalent:** N/A\
 479 **Preferences Affected:** `app.update.background.enabled`
 480
 481 #### Windows (GPO)
 482 ```
 483 Software\Policies\Mozilla\Firefox\BackgroundAppUpdate = 0x1 | 0x0
 484 ```
 485 #### Windows (Intune)
 486 OMA-URI:
 487 ```
 488 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BackgroundAppUpdate
 489 ```
 490 Value (string):
 491 ```
 492 <enabled/> or <disabled/>
 493 ```
 494 #### macOS
 495 ```
 496 <dict>
 497   <key>BackgroundAppUpdate</key>
 498   <true/> | <false/>
 499 </dict>
 500 ```
 501 #### policies.json
 502 ```
 503 {
 504   "policies": {
 505     "BackgroundAppUpdate": true | false
 506   }
 507 }
 508 ```
 509 ### BlockAboutAddons
 510
 511 Block access to the Add-ons Manager (about:addons).
 512
 513 **Compatibility:** Firefox 60, Firefox ESR 60\
 514 **CCK2 Equivalent:** `disableAddonsManager`\
 515 **Preferences Affected:** N/A
 516
 517 #### Windows (GPO)
 518 ```
 519 Software\Policies\Mozilla\Firefox\BlockAboutAddons = 0x1 | 0x0
 520 ```
 521 #### Windows (Intune)
 522 OMA-URI:
 523 ```
 524 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutAddons
 525 ```
 526 Value (string):
 527 ```
 528 <enabled/> or <disabled/>
 529 ```
 530 #### macOS
 531 ```
 532 <dict>
 533   <key>BlockAboutAddons</key>
 534   <true/> | <false/>
 535 </dict>
 536 ```
 537 #### policies.json
 538 ```
 539 {
 540   "policies": {
 541     "BlockAboutAddons": true | false
 542   }
 543 }
 544 ```
 545 ### BlockAboutConfig
 546
 547 Block access to about:config.
 548
 549 **Compatibility:** Firefox 60, Firefox ESR 60\
 550 **CCK2 Equivalent:** `disableAboutConfig`\
 551 **Preferences Affected:** N/A
 552
 553 #### Windows (GPO)
 554 ```
 555 Software\Policies\Mozilla\Firefox\BlockAboutConfig = 0x1 | 0x0
 556 ```
 557 #### Windows (Intune)
 558 OMA-URI:
 559 ```
 560 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutConfig
 561 ```
 562 Value (string):
 563 ```
 564 <enabled/> or <disabled/>
 565 ```
 566 #### macOS
 567 ```
 568 <dict>
 569   <key>BlockAboutConfig</key>
 570   <true/> | <false/>
 571 </dict>
 572 ```
 573 #### policies.json
 574 ```
 575 {
 576   "policies": {
 577     "BlockAboutConfig": true | false
 578   }
 579 }
 580 ```
 581 ### BlockAboutProfiles
 582
 583 Block access to About Profiles (about:profiles).
 584
 585 **Compatibility:** Firefox 60, Firefox ESR 60\
 586 **CCK2 Equivalent:** `disableAboutProfiles`\
 587 **Preferences Affected:** N/A
 588
 589 #### Windows (GPO)
 590 ```
 591 Software\Policies\Mozilla\Firefox\BlockAboutProfiles = 0x1 | 0x0
 592 ```
 593 #### Windows (Intune)
 594 OMA-URI:
 595 ```
 596 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutProfiles
 597 ```
 598 Value (string):
 599 ```
 600 <enabled/> or <disabled/>
 601 ```
 602 #### macOS
 603 ```
 604 <dict>
 605   <key>BlockAboutProfiles</key>
 606   <true/> | <false/>
 607 </dict>
 608 ```
 609 #### policies.json
 610 ```
 611 {
 612   "policies": {
 613     "BlockAboutProfiles": true | false
 614   }
 615 }
 616 ```
 617 ### BlockAboutSupport
 618
 619 Block access to Troubleshooting Information (about:support).
 620
 621 **Compatibility:** Firefox 60, Firefox ESR 60\
 622 **CCK2 Equivalent:** `disableAboutSupport`\
 623 **Preferences Affected:** N/A
 624
 625 #### Windows (GPO)
 626 ```
 627 Software\Policies\Mozilla\Firefox\BlockAboutSupport = 0x1 | 0x0
 628 ```
 629 #### Windows (Intune)
 630 OMA-URI:
 631 ```
 632 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutSupport
 633 ```
 634 Value (string):
 635 ```
 636 <enabled/> or <disabled/>
 637 ```
 638 #### macOS
 639 ```
 640 <dict>
 641   <key>BlockAboutSupport</key>
 642   <true/> | <false/>
 643 </dict>
 644 ```
 645 #### policies.json
 646 ```
 647 {
 648   "policies": {
 649     "BlockAboutSupport": true | false
 650   }
 651 }
 652 ```
 653 ### Bookmarks
 654
 655 Note: [`ManagedBookmarks`](#managedbookmarks) is the new recommended way to add bookmarks. This policy will continue to be supported.
 656
 657 Add bookmarks in either the bookmarks toolbar or menu. Only `Title` and `URL` are required. If `Placement` is not specified, the bookmark will be placed on the toolbar. If `Folder` is specified, it is automatically created and bookmarks with the same folder name are grouped together.
 658
 659 If you want to clear all bookmarks set with this policy, you can set the value to an empty array (```[]```). This can be on Windows via the new Bookmarks (JSON) policy available with GPO and Intune.
 660
 661 **Compatibility:** Firefox 60, Firefox ESR 60\
 662 **CCK2 Equivalent:** `bookmarks.toolbar`,`bookmarks.menu`\
 663 **Preferences Affected:** N/A
 664
 665 #### Windows (GPO)
 666 ```
 667 Software\Policies\Mozilla\Firefox\Bookmarks\1\Title = "Example"
 668 Software\Policies\Mozilla\Firefox\Bookmarks\1\URL = "https://example.com"
 669 Software\Policies\Mozilla\Firefox\Bookmarks\1\Favicon = "https://example.com/favicon.ico"
 670 Software\Policies\Mozilla\Firefox\Bookmarks\1\Placement = "toolbar" | "menu"
 671 Software\Policies\Mozilla\Firefox\Bookmarks\1\Folder = "FolderName"
 672
 673 Software\Policies\Mozilla\Firefox\Bookmarks (REG_MULTI_SZ) =
 674 ```
 675 []
 676 ```
 677
 678 ```
 679 #### Windows (Intune)
 680 OMA-URI:
 681 ```
 682 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Bookmarks/Bookmark01
 683 ```
 684 Value (string):
 685 ```
 686 <enabled/>
 687 <data id="BookmarkTitle" value="Example"/>
 688 <data id="BookmarkURL" value="https://example.com"/>
 689 <data id="BookmarkFavicon" value="https://example.com/favicon.ico"/>
 690 <data id="BookmarkPlacement" value="toolbar | menu"/>
 691 <data id="BookmarkFolder" value="FolderName"/>
 692 ```
 693 OMA-URI:
 694 ```
 695 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Bookmarks
 696 ```
 697 Value (string):
 698 ```
 699 <enabled/>
 700 <data id="JSON" value='[]'/>
 701 ```
 702 #### macOS
 703 ```
 704 <dict>
 705   <key>Bookmarks</key>
 706   <array>
 707     <dict>
 708       <key>Title</key>
 709       <string>Example</string>
 710       <key>URL</key>
 711       <string>https://example.com</string>
 712       <key>Favicon</key>
 713       <string>https://example.com/favicon.ico</string>
 714       <key>Placement</key>
 715       <string>toolbar | menu</string>
 716       <key>Folder</key>
 717       <string>FolderName</string>
 718     </dict>
 719   </array>
 720 </dict>
 721 ```
 722 #### policies.json
 723 ```
 724 {
 725   "policies": {
 726     "Bookmarks": [
 727       {
 728         "Title": "Example",
 729         "URL": "https://example.com",
 730         "Favicon": "https://example.com/favicon.ico",
 731         "Placement": "toolbar" | "menu",
 732         "Folder": "FolderName"
 733       }
 734     ]
 735   }
 736 }
 737 ```
 738 ### CaptivePortal
 739 Enable or disable the detection of captive portals.
 740
 741 **Compatibility:** Firefox 67, Firefox ESR 60.7\
 742 **CCK2 Equivalent:** N/A\
 743 **Preferences Affected:** `network.captive-portal-service.enabled`
 744
 745 #### Windows (GPO)
 746 ```
 747 Software\Policies\Mozilla\Firefox\CaptivePortal = 0x1 | 0x0
 748 ```
 749 #### Windows (Intune)
 750 OMA-URI:
 751 ```
 752 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/CaptivePortal
 753 ```
 754 Value (string):
 755 ```
 756 <enabled/> or <disabled/>
 757 ```
 758 #### macOS
 759 ```
 760 <dict>
 761   <key>CaptivePortal</key>
 762   <true/> | <false/>
 763 </dict>
 764 ```
 765 #### policies.json
 766 ```
 767 {
 768   "policies": {
 769     "CaptivePortal": true | false
 770   }
 771 }
 772 ```
 773 ### Certificates
 774
 775 ### Certificates | ImportEnterpriseRoots
 776
 777 Trust certificates that have been added to the operating system certificate store by a user or administrator.
 778
 779 Note: This policy only works on Windows and macOS. For Linux discussion, see [bug 1600509](https://bugzilla.mozilla.org/show_bug.cgi?id=1600509).
 780
 781 See https://support.mozilla.org/kb/setting-certificate-authorities-firefox for more detail.
 782
 783 **Compatibility:** Firefox 60, Firefox ESR 60 (macOS support in Firefox 63, Firefox ESR 68)\
 784 **CCK2 Equivalent:** N/A\
 785 **Preferences Affected:** `security.enterprise_roots.enabled`
 786
 787 #### Windows (GPO)
 788 ```
 789 Software\Policies\Mozilla\Firefox\Certificates\ImportEnterpriseRoots = 0x1 | 0x0
 790 ```
 791 #### Windows (Intune)
 792 OMA-URI:
 793 ```
 794 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Certificates/Certificates_ImportEnterpriseRoots
 795 ```
 796 Value (string):
 797 ```
 798 <enabled/> or <disabled/>
 799 ```
 800 #### macOS
 801 ```
 802 <dict>
 803   <key>Certificates</key>
 804   <dict>
 805     <key>ImportEnterpriseRoots</key>
 806     <true/> | <false/>
 807   </dict>
 808 </dict>
 809 ```
 810 #### policies.json
 811 ```
 812 {
 813   "policies": {
 814     "Certificates": {
 815       "ImportEnterpriseRoots": true | false
 816     }
 817   }
 818 }
 819 ```
 820 ### Certificates | Install
 821
 822 Install certificates into the Firefox certificate store. If only a filename is specified, Firefox searches for the file in the following locations:
 823
 824 - Windows
 825   - %USERPROFILE%\AppData\Local\Mozilla\Certificates
 826   - %USERPROFILE%\AppData\Roaming\Mozilla\Certificates
 827 - macOS
 828   - /Library/Application Support/Mozilla/Certificates
 829   - ~/Library/Application Support/Mozilla/Certificates
 830 - Linux
 831   - /usr/lib/mozilla/certificates
 832   - /usr/lib64/mozilla/certificates
 833   - ~/.mozilla/certificates
 834
 835 Starting with Firefox 65, Firefox 60.5 ESR, a fully qualified path can be used, including UNC paths. You should use the native path style for your operating system. We do not support using %USERPROFILE% or other environment variables on Windows.
 836
 837 If you are specifying the path in the policies.json file on Windows, you need to escape your backslashes (`\\`) which means that for UNC paths, you need to escape both (`\\\\`). If you use group policy, you only need one backslash.
 838
 839 Certificates are installed using the trust string `CT,CT,`.
 840
 841 Binary (DER) and ASCII (PEM) certificates are both supported.
 842
 843 **Compatibility:** Firefox 64, Firefox ESR 64\
 844 **CCK2 Equivalent:** `certs.ca`\
 845 **Preferences Affected:** N/A
 846
 847 #### Windows (GPO)
 848 ```
 849 Software\Policies\Mozilla\Firefox\Certificates\Install\1 = "cert1.der"
 850 Software\Policies\Mozilla\Firefox\Certificates\Install\2 = "C:\Users\username\cert2.pem"
 851 ```
 852 #### Windows (Intune)
 853 OMA-URI:
 854 ```
 855 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Certificates/Certificates_Install
 856 ```
 857 Value (string):
 858 ```
 859 <enabled/>
 860 <data id="Certificates_Install" value="1&#xF000;cert1.der&#xF000;2&#xF000;C:\Users\username\cert2.pem"/>
 861 ```
 862 #### macOS
 863 ```
 864 <dict>
 865   <key>Certificates</key>
 866   <dict>
 867     <key>Install</key>
 868     <array>
 869       <string>cert1.der</string>
 870       <string>/Users/username/cert2.pem</string>
 871     </array>
 872   </dict>
 873 </dict>
 874 ```
 875 #### policies.json
 876 ```
 877 {
 878   "policies": {
 879     "Certificates": {
 880       "Install": ["cert1.der", "/home/username/cert2.pem"]
 881     }
 882   }
 883 }
 884 ```
 885 ### Cookies
 886 Configure cookie preferences.
 887
 888 `Allow` is a list of origins (not domains) where cookies are always allowed. You must include http or https.
 889
 890 `AllowSession` is a list of origins (not domains) where cookies are only allowed for the current session. You must include http or https.
 891
 892 `Block` is a list of origins (not domains) where cookies are always blocked. You must include http or https.
 893
 894 `Behavior` sets the default behavior for cookies based on the values below.
 895
 896 `BehaviorPrivateBrowsing` sets the default behavior for cookies in private browsing based on the values below.
 897
 898 | Value | Description
 899 | --- | ---
 900 | accept | Accept all cookies
 901 | reject-foreign | Reject third party cookies
 902 | reject | Reject all cookies
 903 | limit-foreign | Reject third party cookies for sites you haven't visited
 904 | reject-tracker | Reject cookies for known trackers (default)
 905 | reject-tracker-and-partition-foreign | Reject cookies for known trackers and partition third-party cookies (Total Cookie Protection) (default for private browsing)
 906
 907 `Default` (Deprecated) determines whether cookies are accepted at all.
 908
 909 `AcceptThirdParty` (Deprecated) determines how third-party cookies are handled.
 910
 911 `ExpireAtSessionEnd` determines when cookies expire.
 912
 913 `RejectTracker` (Deprecated) only rejects cookies for trackers.
 914
 915 `Locked` prevents the user from changing cookie preferences.
 916
 917 **Compatibility:** Firefox 60, Firefox ESR 60 (RejectTracker added in Firefox 63, AllowSession added in Firefox 79/78.1, Behavior added in Firefox 95/91.4)\
 918 **CCK2 Equivalent:** N/A\
 919 **Preferences Affected:** `network.cookie.cookieBehavior`, `network.cookie.cookieBehavior.pbmode`, `network.cookie.lifetimePolicy`
 920
 921 #### Windows (GPO)
 922 ```
 923 Software\Policies\Mozilla\Firefox\Cookies\Allow\1 = "https://example.com"
 924 Software\Policies\Mozilla\Firefox\Cookies\AllowSession\1 = "https://example.edu"
 925 Software\Policies\Mozilla\Firefox\Cookies\Block\1 = "https://example.org"
 926 Software\Policies\Mozilla\Firefox\Cookies\Default = 0x1 | 0x0
 927 Software\Policies\Mozilla\Firefox\Cookies\AcceptThirdParty = "always" | "never" | "from-visited"
 928 Software\Policies\Mozilla\Firefox\Cookies\ExpireAtSessionEnd = 0x1 | 0x0
 929 Software\Policies\Mozilla\Firefox\Cookies\RejectTracker = 0x1 | 0x0
 930 Software\Policies\Mozilla\Firefox\Cookies\Behavior = "accept" | "reject-foreign" | "reject" | "limit-foreign" | "reject-tracker" | "reject-tracker-and-partition-foreign"
 931 Software\Policies\Mozilla\Firefox\Cookies\BehaviorPrivateBrowsing = "accept" | "reject-foreign" | "reject" | "limit-foreign" | "reject-tracker" | "reject-tracker-and-partition-foreign"
 932 Software\Policies\Mozilla\Firefox\Cookies\Locked = 0x1 | 0x0
 933 ```
 934 #### Windows (Intune)
 935 OMA-URI:
 936 ```
 937 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Allow
 938 ```
 939 Value (string):
 940 ```
 941 <enabled/>
 942 <data id="Cookies_Allow" value="1&#xF000;https://example.com"/>
 943 ```
 944 OMA-URI:
 945 ```
 946 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_AllowSession
 947 ```
 948 Value (string):
 949 ```
 950 <enabled/>
 951 <data id="Cookies_Allow" value="1&#xF000;https://example.edu"/>
 952 ```
 953 OMA-URI:
 954 ```
 955 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Block
 956 ```
 957 Value (string):
 958 ```
 959 <enabled/>
 960 <data id="Cookies_Block" value="1&#xF000;https://example.org"/>
 961 ```
 962 OMA-URI:
 963 ```
 964 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Default
 965 ```
 966 Value (string):
 967 ```
 968 <enabled/> or <disabled/>
 969 ```
 970 OMA-URI:
 971 ```
 972 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_AcceptThirdParty
 973 ```
 974 Value (string):
 975 ```
 976 <enabled/>
 977 <data id="Cookies_AcceptThirdParty" value="always | never | from-visited"/>
 978 ```
 979 OMA-URI:
 980 ```
 981 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_ExpireAtSessionEnd
 982 ```
 983 Value (string):
 984 ```
 985 <enabled/> or <disabled/>
 986 ```
 987 OMA-URI:
 988 ```
 989 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_RejectTracker
 990 ```
 991 Value (string):
 992 ```
 993 <enabled/> or <disabled/>
 994 ```
 995 OMA-URI:
 996 ```
 997 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Locked
 998 ```
 999 Value (string):
1000 ```
1001 <enabled/> or <disabled/>
1002 ```
1003 OMA-URI:
1004 ```
1005 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Behavior
1006 ```
1007 Value (string):
1008 ```
1009 <enabled/>
1010 <data id="Cookies_Behavior" value="accept | reject-foreign | reject | limit-foreign | reject-tracker | reject-tracker-and-partition-foreign"/>
1011 ```
1012 OMA-URI:
1013 ```
1014 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_BehaviorPrivateBrowsing
1015 ```
1016 Value (string):
1017 ```
1018 <enabled/>
1019 <data id="Cookies_BehaviorPrivateBrowsing" value="accept | reject-foreign | reject | limit-foreign | reject-tracker | reject-tracker-and-partition-foreign"/>
1020 ```
1021 #### macOS
1022 ```
1023 <dict>
1024   <key>Cookies</key>
1025   <dict>
1026     <key>Allow</key>
1027     <array>
1028       <string>http://example.com</string>
1029     </array>
1030     <key>AllowSession</key>
1031     <array>
1032       <string>http://example.edu</string>
1033     </array>
1034     <key>Block</key>
1035     <array>
1036       <string>http://example.org</string>
1037     </array>
1038     <key>Default</key>
1039     <true/> | <false/>
1040     <key>AcceptThirdParty</key>
1041     <string>always | never | from-visited</string>
1042     <key>ExpireAtSessionEnd</key>
1043     <true/> | <false/>
1044     <key>RejectTracker</key>
1045     <true/> | <false/>
1046     <key>Locked</key>
1047     <true/> | <false/>
1048     <key>Behavior</key>
1049     <string>accept | reject-foreign | reject | limit-foreign | reject-tracker | reject-tracker-and-partition-foreign</string>
1050     <key>BehaviorPrivateBrowsing</key>
1051     <string>accept | reject-foreign | reject | limit-foreign | reject-tracker | reject-tracker-and-partition-foreign</string>
1052   </dict>
1053 </dict>
1054 ```
1055 #### policies.json
1056 ```
1057 {
1058   "policies": {
1059     "Cookies": {
1060       "Allow": ["http://example.org/"],
1061       "AllowSession": ["http://example.edu/"],
1062       "Block": ["http://example.edu/"],
1063       "Default": true | false,
1064       "AcceptThirdParty": "always" | "never" | "from-visited",
1065       "ExpireAtSessionEnd": true | false,
1066       "RejectTracker": true | false,
1067       "Locked": true | false,
1068       "Behavior": "accept" | "reject-foreign" | "reject" | "limit-foreign" | "reject-tracker" | "reject-tracker-and-partition-foreign",
1069       "BehaviorPrivateBrowsing": "accept" | "reject-foreign" | "reject" | "limit-foreign" | "reject-tracker" | "reject-tracker-and-partition-foreign",
1070     }
1071   }
1072 }
1073 ```
1074 ### DisableSetDesktopBackground
1075 Remove the "Set As Desktop Background..." menuitem when right clicking on an image.
1076
1077 **Compatibility:** Firefox 60, Firefox ESR 60\
1078 **CCK2 Equivalent:** `removeSetDesktopBackground`\
1079 **Preferences Affected:** N/A
1080
1081 #### Windows (GPO)
1082 ```
1083 Software\Policies\Mozilla\Firefox\DisableSetDesktopBackground = 0x1 | 0x0
1084 ```
1085 #### Windows (Intune)
1086 OMA-URI:
1087 ```
1088 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSetDesktopBackground
1089 ```
1090 Value (string):
1091 ```
1092 <enabled/> or <disabled/>
1093 ```
1094 #### macOS
1095 ```
1096 <dict>
1097   <key>DisableSetDesktopBackground</key>
1098   <true/> | <false/>
1099 </dict>
1100 ```
1101 #### policies.json
1102 ```
1103 {
1104   "policies": {
1105     "DisableSetDesktopBackground": true | false
1106   }
1107 }
1108 ```
1109 ### DisableMasterPasswordCreation
1110 Remove the master password functionality.
1111
1112 If this value is true, it works the same as setting [`PrimaryPassword`](#primarypassword) to false and removes the primary password functionality.
1113
1114 If both `DisableMasterPasswordCreation` and `PrimaryPassword` are used, `DisableMasterPasswordCreation` takes precedent.
1115
1116 **Compatibility:** Firefox 60, Firefox ESR 60\
1117 **CCK2 Equivalent:** `noMasterPassword`\
1118 **Preferences Affected:** N/A
1119
1120 #### Windows (GPO)
1121 ```
1122 Software\Policies\Mozilla\Firefox\DisableMasterPasswordCreation = 0x1 | 0x0
1123 ```
1124 #### Windows (Intune)
1125 OMA-URI:
1126 ```
1127 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableMasterPasswordCreation
1128 ```
1129 Value (string):
1130 ```
1131 <enabled/> or <disabled/>
1132 ```
1133 #### macOS
1134 ```
1135 <dict>
1136   <key>DisableMasterPasswordCreation</key>
1137   <true/> | <false/>
1138 </dict>
1139 ```
1140 #### policies.json
1141 ```
1142 {
1143   "policies": {
1144     "DisableMasterPasswordCreation": true | false
1145   }
1146 }
1147 ```
1148 ### DefaultDownloadDirectory
1149 Set the default download directory.
1150
1151 You can use ${home} for the native home directory.
1152
1153 **Compatibility:** Firefox 68, Firefox ESR 68\
1154 **CCK2 Equivalent:** N/A\
1155 **Preferences Affected:** `browser.download.dir`, `browser.download.folderList`
1156
1157 #### Windows (GPO)
1158 ```
1159 Software\Policies\Mozilla\Firefox\DefaultDownloadDirectory = "${home}\Downloads"
1160 ```
1161 #### Windows (Intune)
1162 OMA-URI:
1163 ```
1164 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DefaultDownloadDirectory
1165 ```
1166 Value (string):
1167 ```
1168 <enabled/>
1169 <data id="Preferences_String" value="${home}\Downloads"/>
1170 ```
1171 #### macOS
1172 ```
1173 <dict>
1174   <key>DefaultDownloadDirectory</key>
1175   <string>${home}/Downloads</string>
1176 </dict>
1177 ```
1178 #### policies.json (macOS and Linux)
1179 ```
1180 {
1181   "policies": {
1182     "DefaultDownloadDirectory": "${home}/Downloads"
1183 }
1184 ```
1185 #### policies.json (Windows)
1186 ```
1187 {
1188   "policies": {
1189     "DefaultDownloadDirectory": "${home}\\Downloads"
1190 }
1191 ```
1192 ### DisableAppUpdate
1193 Turn off application updates within Firefox.
1194
1195 **Compatibility:** Firefox 60, Firefox ESR 60\
1196 **CCK2 Equivalent:** `disableFirefoxUpdates`\
1197 **Preferences Affected:** N/A
1198
1199 #### Windows (GPO)
1200 ```
1201 Software\Policies\Mozilla\Firefox\DisableAppUpdate = 0x1 | 0x0
1202 ```
1203 #### Windows (Intune)
1204 OMA-URI:
1205 ```
1206 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableAppUpdate
1207 ```
1208 Value (string):
1209 ```
1210 <enabled/> or <disabled/>
1211 ```
1212 #### macOS
1213 ```
1214 <dict>
1215   <key>DisableAppUpdate</key>
1216   <true/> | <false/>
1217 </dict>
1218 ```
1219 #### policies.json
1220 ```
1221 {
1222   "policies": {
1223     "DisableAppUpdate": true | false
1224   }
1225 }
1226 ```
1227 ### DisableBuiltinPDFViewer
1228 Disable the built in PDF viewer. PDF files are downloaded and sent externally.
1229
1230 **Compatibility:** Firefox 60, Firefox ESR 60\
1231 **CCK2 Equivalent:** `disablePDFjs`\
1232 **Preferences Affected:** `pdfjs.disabled`
1233
1234 #### Windows (GPO)
1235 ```
1236 Software\Policies\Mozilla\Firefox\DisableBuiltinPDFViewer = 0x1 | 0x0
1237 ```
1238 #### Windows (Intune)
1239 OMA-URI:
1240 ```
1241 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableBuiltinPDFViewer
1242 ```
1243 Value (string):
1244 ```
1245 <enabled/> or <disabled/>
1246 ```
1247 #### macOS
1248 ```
1249 <dict>
1250   <key>DisableBuiltinPDFViewer</key>
1251   <true/> | <false/>
1252 </dict>
1253 ```
1254 #### policies.json
1255 ```
1256 {
1257   "policies": {
1258     "DisableBuiltinPDFViewer": true | false
1259   }
1260 }
1261 ```
1262 ### DisabledCiphers
1263 Disable specific cryptographic ciphers.
1264
1265 **Preferences Affected:** `security.ssl3.dhe_rsa_aes_128_sha`, `security.ssl3.dhe_rsa_aes_256_sha`, `security.ssl3.ecdhe_ecdsa_aes_128_gcm_sha256`, `security.ssl3.ecdhe_rsa_aes_128_gcm_sha256`, `security.ssl3.ecdhe_rsa_aes_128_sha`, `security.ssl3.ecdhe_rsa_aes_256_sha`, `security.ssl3.rsa_aes_128_gcm_sha256`, `security.ssl3.rsa_aes_128_sha`, `security.ssl3.rsa_aes_256_gcm_sha384`, `security.ssl3.rsa_aes_256_sha`, `security.ssl3.rsa_des_ede3_sha`
1266
1267 ---
1268 **Note:**
1269
1270 This policy was updated in Firefox 78 to allow enabling ciphers as well. Setting the value to true disables the cipher, setting the value to false enables the cipher. Previously setting the value to true or false disabled the cipher.
1271
1272 ---
1273 **Compatibility:** Firefox 76, Firefox ESR 68.8 (TLS_RSA_WITH_AES_128_GCM_SHA256 and TLS_RSA_WITH_AES_256_GCM_SHA384 were added in Firefox 78)\
1274 **CCK2 Equivalent:** N/A\
1275 **Preferences Affected:** N/A
1276
1277 #### Windows (GPO)
1278 ```
1279 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_DHE_RSA_WITH_AES_128_CBC_SHA = 0x1 | 0x0
1280 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_DHE_RSA_WITH_AES_256_CBC_SHA = 0x1 | 0x0
1281 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA = 0x1 | 0x0
1282 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA = 0x1 | 0x0
1283 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 = 0x1 | 0x0
1284 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 = 0x1 | 0x0
1285 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_RSA_WITH_AES_128_CBC_SHA = 0x1 | 0x0
1286 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_RSA_WITH_AES_256_CBC_SHA = 0x1 | 0x0
1287 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_RSA_WITH_3DES_EDE_CBC_SHA = 0x1 | 0x0
1288 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_RSA_WITH_AES_128_GCM_SHA256 = 0x1 | 0x0
1289 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_RSA_WITH_AES_256_GCM_SHA384 = 0x1 | 0x0
1290 ```
1291 #### Windows (Intune)
1292 OMA-URI:
1293 ```
1294 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_DHE_RSA_WITH_AES_128_CBC_SHA
1295 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_DHE_RSA_WITH_AES_256_CBC_SHA
1296 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
1297 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
1298 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
1299 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
1300 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_RSA_WITH_AES_128_CBC_SHA
1301 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_RSA_WITH_AES_256_CBC_SHA
1302 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_RSA_WITH_3DES_EDE_CBC_SHA
1303 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_RSA_WITH_AES_128_GCM_SHA256
1304 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_RSA_WITH_AES_256_GCM_SHA384
1305 ```
1306 Value (string):
1307 ```
1308 <enabled/> or <disabled/>
1309 ```
1310 #### macOS
1311 ```
1312 <dict>
1313   <key>DisabledCiphers</key>
1314     <dict>
1315       <key>TLS_DHE_RSA_WITH_AES_128_CBC_SHA</key>
1316       <true/> | <false/>
1317       <key>TLS_DHE_RSA_WITH_AES_256_CBC_SHA</key>
1318       <true/> | <false/>
1319       <key>TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA</key>
1320       <true/> | <false/>
1321       <key>TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA</key>
1322       <true/> | <false/>
1323       <key>TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256</key>
1324       <true/> | <false/>
1325       <key>TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256</key>
1326       <true/> | <false/>
1327       <key>TLS_RSA_WITH_AES_128_CBC_SHA</key>
1328       <true/> | <false/>
1329       <key>TLS_RSA_WITH_AES_256_CBC_SHA</key>
1330       <true/> | <false/>
1331       <key>TLS_RSA_WITH_3DES_EDE_CBC_SHA</key>
1332       <true/> | <false/>
1333       <key>TLS_RSA_WITH_AES_128_GCM_SHA256</key>
1334       <true/> | <false/>
1335       <key>TLS_RSA_WITH_AES_256_GCM_SHA384</key>
1336       <true/> | <false/>
1337     </dict>
1338 </dict>
1339 ```
1340 #### policies.json
1341 ```
1342 {
1343   "policies": {
1344     "DisabledCiphers": {
1345       "TLS_DHE_RSA_WITH_AES_128_CBC_SHA": true | false,
1346       "TLS_DHE_RSA_WITH_AES_256_CBC_SHA": true | false,
1347       "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA": true | false,
1348       "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA": true | false,
1349       "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256": true | false,
1350       "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256": true | false,
1351       "TLS_RSA_WITH_AES_128_CBC_SHA": true | false,
1352       "TLS_RSA_WITH_AES_256_CBC_SHA": true | false,
1353       "TLS_RSA_WITH_3DES_EDE_CBC_SHA": true | false,
1354       "TLS_RSA_WITH_AES_128_GCM_SHA256": true | false,
1355       "TLS_RSA_WITH_AES_256_GCM_SHA384": true | false
1356     }
1357   }
1358 }
1359 ```
1360 ### DisableDefaultBrowserAgent
1361 Prevent the default browser agent from taking any actions. Only applicable to Windows; other platforms don’t have the agent.
1362
1363 The browser agent is a Windows-only scheduled task which runs in the background to collect and submit data about the browser that the user has set as their OS default. More information is available [here](https://firefox-source-docs.mozilla.org/toolkit/mozapps/defaultagent/default-browser-agent/index.html).
1364
1365 **Compatibility:** Firefox 75, Firefox ESR 68.7 (Windows only)\
1366 **CCK2 Equivalent:** N/A\
1367 **Preferences Affected:** N/A
1368
1369 #### Windows (GPO)
1370 ```
1371 Software\Policies\Mozilla\Firefox\DisableDefaultBrowserAgent = 0x1 | 0x0
1372 ```
1373 #### Windows (Intune)
1374 OMA-URI:
1375 ```
1376 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableDefaultBrowserAgent
1377 ```
1378 Value (string):
1379 ```
1380 <enabled/> or <disabled/>
1381 ```
1382 #### policies.json
1383 ```
1384 {
1385   "policies": {
1386     "DisableDefaultBrowserAgent": true | false
1387   }
1388 }
1389 ```
1390 ### DisableDeveloperTools
1391 Remove access to all developer tools.
1392
1393 **Compatibility:** Firefox 60, Firefox ESR 60\
1394 **CCK2 Equivalent:** `removeDeveloperTools`\
1395 **Preferences Affected:** `devtools.policy.disabled`
1396
1397 #### Windows (GPO)
1398 ```
1399 Software\Policies\Mozilla\Firefox\DisableDeveloperTools = 0x1 | 0x0`
1400 ```
1401 #### Windows (Intune)
1402 OMA-URI:
1403 ```
1404 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableDeveloperTools
1405 ```
1406 Value (string):
1407 ```
1408 <enabled/> or <disabled/>
1409 ```
1410 #### macOS
1411 ```
1412 <dict>
1413   <key>DisableDeveloperTools</key>
1414   <true/> | <false/>
1415 </dict>
1416 ```
1417 #### policies.json
1418 ```
1419 {
1420   "policies": {
1421     "DisableDeveloperTools": true | false
1422   }
1423 }
1424 ```
1425 ### DisableFeedbackCommands
1426 Disable the menus for reporting sites (Submit Feedback, Report Deceptive Site).
1427
1428 **Compatibility:** Firefox 60, Firefox ESR 60\
1429 **CCK2 Equivalent:** N/A\
1430 **Preferences Affected:** N/A
1431
1432 #### Windows (GPO)
1433 ```
1434 Software\Policies\Mozilla\Firefox\DisableFeedbackCommands = 0x1 | 0x0
1435 ```
1436 #### Windows (Intune)
1437 OMA-URI:
1438 ```
1439 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFeedbackCommands
1440 ```
1441 Value (string):
1442 ```
1443 <enabled/> or <disabled/>
1444 ```
1445 #### macOS
1446 ```
1447 <dict>
1448   <key>DisableFeedbackCommands</key>
1449   <true/> | <false/>
1450 </dict>
1451 ```
1452 #### policies.json
1453 ```
1454 {
1455   "policies": {
1456     "DisableFeedbackCommands": true | false
1457   }
1458 }
1459 ```
1460 ### DisableFirefoxAccounts
1461 Disable Firefox Accounts integration (Sync).
1462
1463 **Compatibility:** Firefox 60, Firefox ESR 60\
1464 **CCK2 Equivalent:** `disableSync`\
1465 **Preferences Affected:** `identity.fxaccounts.enabled`
1466
1467 #### Windows (GPO)
1468 ```
1469 Software\Policies\Mozilla\Firefox\DisableFirefoxAccounts = 0x1 | 0x0
1470 ```
1471 #### Windows (Intune)
1472 OMA-URI:
1473 ```
1474 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxAccounts
1475 ```
1476 Value (string):
1477 ```
1478 <enabled/> or <disabled/>
1479 ```
1480 #### macOS
1481 ```
1482 <dict>
1483   <key>DisableFirefoxAccounts</key>
1484   <true/> | <false/>
1485 </dict>
1486 ```
1487 #### policies.json
1488 ```
1489 {
1490   "policies": {
1491     "DisableFirefoxAccounts": true | false
1492   }
1493 }
1494 ```
1495 ### DisableFirefoxScreenshots
1496 Remove access to Firefox Screenshots.
1497
1498 **Compatibility:** Firefox 60, Firefox ESR 60\
1499 **CCK2 Equivalent:** N/A\
1500 **Preferences Affected:** `extensions.screenshots.disabled`
1501
1502 #### Windows (GPO)
1503 ```
1504 Software\Policies\Mozilla\Firefox\DisableFirefoxScreenshots = 0x1 | 0x0
1505 ```
1506 #### Windows (Intune)
1507 OMA-URI:
1508 ```
1509 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxScreenshots
1510 ```
1511 Value (string):
1512 ```
1513 <enabled/> or <disabled/>
1514 ```
1515 #### macOS
1516 ```
1517 <dict>
1518   <key>DisableFirefoxScreenshots</key>
1519   <true/> | <false/>
1520 </dict>
1521 ```
1522 #### policies.json
1523 ```
1524 {
1525   "policies": {
1526     "DisableFirefoxScreenshots": true | false
1527   }
1528 }
1529 ```
1530 ### DisableFirefoxStudies
1531 Disable Firefox studies (Shield).
1532
1533 **Compatibility:** Firefox 60, Firefox ESR 60\
1534 **CCK2 Equivalent:** N/A\
1535 **Preferences Affected:** N/A
1536
1537 #### Windows (GPO)
1538 ```
1539 Software\Policies\Mozilla\Firefox\DisableFirefoxStudies = 0x1 | 0x0
1540 ```
1541 #### Windows (Intune)
1542 OMA-URI:
1543 ```
1544 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxStudies
1545 ```
1546 Value (string):
1547 ```
1548 <enabled/> or <disabled/>
1549 ```
1550 #### macOS
1551 ```
1552 <dict>
1553   <key>DisableFirefoxStudies</key>
1554   <true/> | <false/>
1555 </dict>
1556 ```
1557 #### policies.json
1558 ```
1559 {
1560   "policies": {
1561     "DisableFirefoxStudies": true | false
1562   }
1563 }
1564 ```
1565 ### DisableForgetButton
1566 Disable the "Forget" button.
1567
1568 **Compatibility:** Firefox 60, Firefox ESR 60\
1569 **CCK2 Equivalent:** `disableForget`\
1570 **Preferences Affected:** N/A
1571
1572 #### Windows (GPO)
1573 ```
1574 Software\Policies\Mozilla\Firefox\DisableForgetButton = 0x1 | 0x0
1575 ```
1576 #### Windows (Intune)
1577 OMA-URI:
1578 ```
1579 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableForgetButton
1580 ```
1581 Value (string):
1582 ```
1583 <enabled/> or <disabled/>
1584 ```
1585 #### macOS
1586 ```
1587 <dict>
1588   <key>DisableForgetButton</key>
1589   <true/> | <false/>
1590 </dict>
1591 ```
1592 #### policies.json
1593 ```
1594 {
1595   "policies": {
1596     "DisableForgetButton": true | false
1597   }
1598 }
1599 ```
1600 ### DisableFormHistory
1601 Turn off saving information on web forms and the search bar.
1602
1603 **Compatibility:** Firefox 60, Firefox ESR 60\
1604 **CCK2 Equivalent:** `disableFormFill`\
1605 **Preferences Affected:** `browser.formfill.enable`
1606
1607 #### Windows (GPO)
1608 ```
1609 Software\Policies\Mozilla\Firefox\DisableFormHistory = 0x1 | 0x0
1610 ```
1611 #### Windows (Intune)
1612 OMA-URI:
1613 ```
1614 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFormHistory
1615 ```
1616 Value (string):
1617 ```
1618 <enabled/> or <disabled/>
1619 ```
1620 #### macOS
1621 ```
1622 <dict>
1623   <key>DisableFormHistory</key>
1624   <true/> | <false/>
1625 </dict>
1626 ```
1627 #### policies.json
1628 ```
1629 {
1630   "policies": {
1631     "DisableFormHistory": true | false
1632   }
1633 }
1634 ```
1635 ### DisablePasswordReveal
1636 Do not allow passwords to be shown in saved logins
1637
1638 **Compatibility:** Firefox 71, Firefox ESR 68.3\
1639 **CCK2 Equivalent:** N/A
1640 **Preferences Affected:** N/A
1641
1642 #### Windows (GPO)
1643 ```
1644 Software\Policies\Mozilla\Firefox\DisablePasswordReveal = 0x1 | 0x0
1645 ```
1646 #### Windows (Intune)
1647 OMA-URI:
1648 ```
1649 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePasswordReveal
1650 ```
1651 Value (string):
1652 ```
1653 <enabled/> or <disabled/>
1654 ```
1655 #### macOS
1656 ```
1657 <dict>
1658   <key>DisablePasswordReveal</key>
1659   <true/> | <false/>
1660 </dict>
1661 ```
1662 #### policies.json
1663 ```
1664 {
1665   "policies": {
1666     "DisablePasswordReveal": true | false
1667   }
1668 }
1669 ```
1670 ### DisablePocket
1671 Remove Pocket in the Firefox UI. It does not remove it from the new tab page.
1672
1673 **Compatibility:** Firefox 60, Firefox ESR 60\
1674 **CCK2 Equivalent:** `disablePocket`\
1675 **Preferences Affected:** `extensions.pocket.enabled`
1676
1677 #### Windows (GPO)
1678 ```
1679 Software\Policies\Mozilla\Firefox\DisablePocket = 0x1 | 0x0
1680 ```
1681 #### Windows (Intune)
1682 OMA-URI:
1683 ```
1684 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePocket
1685 ```
1686 Value (string):
1687 ```
1688 <enabled/> or <disabled/>
1689 ```
1690 #### macOS
1691 ```
1692 <dict>
1693   <key>DisablePocket</key>
1694   <true/> | <false/>
1695 </dict>
1696 ```
1697 #### policies.json
1698 ```
1699 {
1700   "policies": {
1701     "DisablePocket": true | false
1702   }
1703 }
1704 ```
1705 ### DisablePrivateBrowsing
1706 Remove access to private browsing.
1707
1708 **Compatibility:** Firefox 60, Firefox ESR 60\
1709 **CCK2 Equivalent:** `disablePrivateBrowsing`\
1710 **Preferences Affected:** N/A
1711
1712 #### Windows (GPO)
1713 ```
1714 Software\Policies\Mozilla\Firefox\DisablePrivateBrowsing = 0x1 | 0x0
1715 ```
1716 #### Windows (Intune)
1717 OMA-URI:
1718 ```
1719 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePrivateBrowsing
1720 ```
1721 Value (string):
1722 ```
1723 <enabled/> or <disabled/>
1724 ```
1725 #### macOS
1726 ```
1727 <dict>
1728   <key>DisablePrivateBrowsing</key>
1729   <true/> | <false/>
1730 </dict>
1731 ```
1732 #### policies.json
1733 ```
1734 {
1735   "policies": {
1736     "DisablePrivateBrowsing": true | false
1737   }
1738 }
1739 ```
1740 ### DisableProfileImport
1741 Disables the "Import data from another browser" option in the bookmarks window.
1742
1743 **Compatibility:** Firefox 60, Firefox ESR 60\
1744 **CCK2 Equivalent:** N/A\
1745 **Preferences Affected:** N/A
1746
1747 #### Windows (GPO)
1748 ```
1749 Software\Policies\Mozilla\Firefox\DisableProfileImport = 0x1 | 0x0
1750 ```
1751 #### Windows (Intune)
1752 OMA-URI:
1753 ```
1754 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableProfileImport
1755 ```
1756 Value (string):
1757 ```
1758 <enabled/> or <disabled/>
1759 ```
1760 #### macOS
1761 ```
1762 <dict>
1763   <key>DisableProfileImport</key>
1764   <true/> | <false/>
1765 </dict>
1766 ```
1767 #### policies.json
1768 ```
1769 {
1770   "policies": {
1771     "DisableProfileImport": true | false
1772   }
1773 }
1774 ```
1775 ### DisableProfileRefresh
1776 Disable the Refresh Firefox button on about:support and support.mozilla.org, as well as the prompt that displays offering to refresh Firefox when you haven't used it in a while.
1777
1778 **Compatibility:** Firefox 60, Firefox ESR 60\
1779 **CCK2 Equivalent:** `disableResetFirefox`\
1780 **Preferences Affected:** `browser.disableResetPrompt`
1781
1782 #### Windows (GPO)
1783 ```
1784 Software\Policies\Mozilla\Firefox\DisableProfileRefresh = 0x1 | 0x0
1785 ```
1786 #### Windows (Intune)
1787 OMA-URI:
1788 ```
1789 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableProfileRefresh
1790 ```
1791 Value (string):
1792 ```
1793 <enabled/> or <disabled/>
1794 ```
1795 #### macOS
1796 ```
1797 <dict>
1798   <key>DisableProfileRefresh</key>
1799   <true/> | <false/>
1800 </dict>
1801 ```
1802 #### policies.json
1803 ```
1804 {
1805   "policies": {
1806     "DisableProfileRefresh": true | false
1807   }
1808 }
1809 ```
1810 ### DisableSafeMode
1811 Disable safe mode within the browser.
1812
1813 On Windows, this disables safe mode via the command line as well.
1814
1815 **Compatibility:** Firefox 60, Firefox ESR 60 (Windows, macOS)\
1816 **CCK2 Equivalent:** `disableSafeMode`\
1817 **Preferences Affected:** N/A
1818
1819 #### Windows (GPO)
1820 ```
1821 Software\Policies\Mozilla\Firefox\DisableSafeMode = 0x1 | 0x0
1822 ```
1823 #### Windows (Intune)
1824 OMA-URI:
1825 ```
1826 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSafeMode
1827 ```
1828 Value (string):
1829 ```
1830 <enabled/> or <disabled/>
1831 ```
1832 #### macOS
1833 ```
1834 <dict>
1835   <key>DisableSafeMode</key>
1836   <true/> | <false/>
1837 </dict>
1838 ```
1839 #### policies.json
1840 ```
1841 {
1842   "policies": {
1843     "DisableSafeMode": true | false
1844   }
1845 }
1846 ```
1847 ### DisableSecurityBypass
1848 Prevent the user from bypassing security in certain cases.
1849
1850 `InvalidCertificate` prevents adding an exception when an invalid certificate is shown.
1851
1852 `SafeBrowsing` prevents selecting "ignore the risk" and visiting a harmful site anyway.
1853
1854 **Compatibility:** Firefox 60, Firefox ESR 60\
1855 **CCK2 Equivalent:** N/A\
1856 **Preferences Affected:** `security.certerror.hideAddException`, `browser.safebrowsing.allowOverride`
1857
1858 #### Windows (GPO)
1859 ```
1860 Software\Policies\Mozilla\Firefox\DisableSecurityBypass\InvalidCertificate = 0x1 | 0x0
1861 Software\Policies\Mozilla\Firefox\DisableSecurityBypass\SafeBrowsing = 0x1 | 0x0
1862 ```
1863 #### Windows (Intune)
1864 OMA-URI:
1865 ```
1866 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/P_DisableSecurityBypass_InvalidCertificate
1867 ```
1868 Value (string):
1869 ```
1870 <enabled/> or <disabled/>
1871 ```
1872 OMA-URI:
1873 ```
1874 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/P_DisableSecurityBypass_SafeBrowsing
1875 ```
1876 Value (string):
1877 ```
1878 <enabled/> or <disabled/>
1879 ```
1880
1881 #### macOS
1882 ```
1883 <dict>
1884   <key>DisableSecurityBypass</key>
1885   <dict>
1886     <key>InvalidCertificate</key>
1887     <true/> | <false/>
1888     <key>SafeBrowsing</key>
1889     <true/> | <false/>
1890   </dict>
1891 </dict>
1892 ```
1893 #### policies.json
1894 ```
1895 {
1896   "policies": {
1897     "DisableSecurityBypass": {
1898       "InvalidCertificate": true | false,
1899       "SafeBrowsing": true | false
1900     }
1901   }
1902 }
1903 ```
1904 ### DisableSystemAddonUpdate
1905 Prevent system add-ons from being installed or update.
1906
1907 **Compatibility:** Firefox 60, Firefox ESR 60\
1908 **CCK2 Equivalent:** N/A\
1909 **Preferences Affected:** N/A
1910
1911 #### Windows (GPO)
1912 ```
1913 Software\Policies\Mozilla\Firefox\DisableSystemAddonUpdate = 0x1 | 0x0
1914 ```
1915 #### Windows (Intune)
1916 OMA-URI:
1917 ```
1918 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSystemAddonUpdate
1919 ```
1920 Value (string):
1921 ```
1922 <enabled/> or <disabled/>
1923 ```
1924 #### macOS
1925 ```
1926 <dict>
1927   <key>DisableSystemAddonUpdate</key>
1928   <true/> | <false/>
1929 </dict>
1930 ```
1931 #### policies.json
1932 ```
1933 {
1934   "policies": {
1935     "DisableSystemAddonUpdate": true | false
1936   }
1937 }
1938 ```
1939 ### DisableTelemetry
1940 Prevent the upload of telemetry data.
1941
1942 As of Firefox 83 and Firefox ESR 78.5, local storage of telemetry data is disabled as well.
1943
1944 Mozilla recommends that you do not disable telemetry. Information collected through telemetry helps us build a better product for businesses like yours.
1945
1946 **Compatibility:** Firefox 60, Firefox ESR 60\
1947 **CCK2 Equivalent:** `disableTelemetry`\
1948 **Preferences Affected:** `datareporting.healthreport.uploadEnabled`, `datareporting.policy.dataSubmissionEnabled`, `toolkit.telemetry.archive.enabled`
1949
1950 #### Windows (GPO)
1951 ```
1952 Software\Policies\Mozilla\Firefox\DisableTelemetry = 0x1 | 0x0
1953 ```
1954 #### Windows (Intune)
1955 OMA-URI:
1956 ```
1957 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableTelemetry
1958 ```
1959 Value (string):
1960 ```
1961 <enabled/> or <disabled/>
1962 ```
1963 #### macOS
1964 ```
1965 <dict>
1966   <key>DisableTelemetry</key>
1967   <true/> | <false/>
1968 </dict>
1969 ```
1970 #### policies.json
1971 ```
1972 {
1973   "policies": {
1974     "DisableTelemetry": true | false
1975   }
1976 }
1977 ```
1978 ### DisplayBookmarksToolbar
1979 Set the initial state of the bookmarks toolbar. A user can still hide it and it will stay hidden.
1980
1981 **Compatibility:** Firefox 60, Firefox ESR 60\
1982 **CCK2 Equivalent:** `displayBookmarksToolbar`\
1983 **Preferences Affected:** N/A
1984
1985 #### Windows (GPO)
1986 ```
1987 Software\Policies\Mozilla\Firefox\DisplayBookmarksToolbar = 0x1 | 0x0
1988 ```
1989 #### Windows (Intune)
1990 OMA-URI:
1991 ```
1992 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisplayBookmarksToolbar
1993 ```
1994 Value (string):
1995 ```
1996 <enabled/> or <disabled/>
1997 ```
1998 #### macOS
1999 ```
2000 <dict>
2001   <key>DisplayBookmarksToolbar</key>
2002   <true/> | <false/>
2003 </dict>
2004 ```
2005 #### policies.json
2006 ```
2007 {
2008   "policies": {
2009     "DisplayBookmarksToolbar": true | false
2010   }
2011 }
2012 ```
2013 ### DisplayMenuBar
2014 Set the state of the menubar.
2015
2016 `always` means the menubar is shown and cannot be hidden.
2017
2018 `never` means the menubar is hidden and cannot be shown.
2019
2020 `default-on` means the menubar is on by default but can be hidden.
2021
2022 `default-off` means the menubar is off by default but can be shown.
2023
2024 **Compatibility:** Firefox 73, Firefox ESR 68.5 (Windows, some Linux)\
2025 **CCK2 Equivalent:** `displayMenuBar`\
2026 **Preferences Affected:** N/A
2027
2028 #### Windows (GPO)
2029 ```
2030 Software\Policies\Mozilla\Firefox\DisplayMenuBar = "always", "never", "default-on", "default-off"
2031 ```
2032 #### Windows (Intune)
2033 OMA-URI:
2034 ```
2035 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisplayMenuBar_Enum
2036 ```
2037 Value (string):
2038 ```
2039 <enabled/>
2040 <data id="DisplayMenuBar" value="always | never | default-on | default-off"/>
2041 ```
2042 #### macOS
2043 ```
2044 <dict>
2045   <key>DisplayMenuBar</key>
2046   <string>always | never | default-on | default-off</string>
2047 </dict>
2048 ```
2049 #### policies.json
2050 ```
2051 {
2052   "policies": {
2053     "DisplayMenuBar": "always", "never", "default-on", "default-off"
2054   }
2055 }
2056 ```
2057 ### DisplayMenuBar (Deprecated)
2058 Set the initial state of the menubar. A user can still hide it and it will stay hidden.
2059
2060 **Compatibility:** Firefox 60, Firefox ESR 60 (Windows, some Linux)\
2061 **CCK2 Equivalent:** `displayMenuBar`\
2062 **Preferences Affected:** N/A
2063
2064 #### Windows (GPO)
2065 ```
2066 Software\Policies\Mozilla\Firefox\DisplayMenuBar = 0x1 | 0x0
2067 ```
2068 #### macOS
2069 ```
2070 <dict>
2071   <key>DisplayMenuBar</key>
2072   <true/> | <false/>
2073 </dict>
2074 ```
2075 #### policies.json
2076 ```
2077 {
2078   "policies": {
2079     "DisplayMenuBar": true | false
2080   }
2081 }
2082 ```
2083 ### DNSOverHTTPS
2084 Configure DNS over HTTPS.
2085
2086 `Enabled` determines whether DNS over HTTPS is enabled
2087
2088 `ProviderURL` is a URL to another provider.
2089
2090 `Locked` prevents the user from changing DNS over HTTPS preferences.
2091
2092 `ExcludedDomains` excludes domains from DNS over HTTPS.
2093
2094 **Compatibility:** Firefox 63, Firefox ESR 68 (ExcludedDomains added in 75/68.7)\
2095 **CCK2 Equivalent:** N/A\
2096 **Preferences Affected:** `network.trr.mode`, `network.trr.uri`
2097
2098 #### Windows (GPO)
2099 ```
2100 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\Enabled = 0x1 | 0x0
2101 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\ProviderURL = "URL_TO_ALTERNATE_PROVIDER"
2102 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\Locked = 0x1 | 0x0
2103 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\ExcludedDomains\1 = "example.com"
2104 ```
2105 #### Windows (Intune)
2106 OMA-URI:
2107 ```
2108 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_Enabled
2109 ```
2110 Value (string):
2111 ```
2112 <enabled/> or <disabled/>
2113 ```
2114 OMA-URI:
2115 ```
2116 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_ProviderURL
2117 ```
2118 Value (string):
2119 ```
2120 <enabled/>
2121 <data id="String" value="URL_TO_ALTERNATE_PROVIDER"/>
2122 ```
2123 OMA-URI:
2124 ```
2125 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_Locked
2126 ```
2127 Value (string):
2128 ```
2129 <enabled/> or <disabled/>
2130 ```
2131 OMA-URI:
2132 ```
2133 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_ExcludedDomains
2134 ```
2135 Value (string):
2136 ```
2137 <enabled/>
2138 <data id="List" value="1&#xF000;example.com"/>
2139 ```
2140 #### macOS
2141 ```
2142 <dict>
2143   <key>DNSOverHTTPS</key>
2144   <dict>
2145     <key>Enabled</key>
2146     <true/> | <false/>
2147     <key>ProviderURL</key>
2148     <string>URL_TO_ALTERNATE_PROVIDER</string>
2149     <key>Locked</key>
2150     <true/> | <false/>
2151     <key>ExcludedDomains</key>
2152     <array>
2153       <string>example.com</string>
2154     </array>
2155   </dict>
2156 </dict>
2157 ```
2158 #### policies.json
2159 ```
2160 {
2161   "policies": {
2162     "DNSOverHTTPS": {
2163       "Enabled":  true | false,
2164       "ProviderURL": "URL_TO_ALTERNATE_PROVIDER",
2165       "Locked": true | false,
2166       "ExcludedDomains": ["example.com"]
2167     }
2168   }
2169 }
2170 ```
2171 ### DontCheckDefaultBrowser
2172 Don't check if Firefox is the default browser at startup.
2173
2174 **Compatibility:** Firefox 60, Firefox ESR 60\
2175 **CCK2 Equivalent:** `dontCheckDefaultBrowser`\
2176 **Preferences Affected:** `browser.shell.checkDefaultBrowser`
2177
2178 #### Windows (GPO)
2179 ```
2180 Software\Policies\Mozilla\Firefox\DontCheckDefaultBrowser = 0x1 | 0x0
2181 ```
2182 #### Windows (Intune)
2183 OMA-URI:
2184 ```
2185 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DontCheckDefaultBrowser
2186 ```
2187 Value (string):
2188 ```
2189 <enabled/> or <disabled/>
2190 ```
2191 #### macOS
2192 ```
2193 <dict>
2194   <key>DontCheckDefaultBrowser</key>
2195   <true/> | <false/>
2196 </dict>
2197 ```
2198 #### policies.json
2199 ```
2200 {
2201   "policies": {
2202     "DontCheckDefaultBrowser": true | false
2203   }
2204 }
2205 ```
2206 ### DownloadDirectory
2207 Set and lock the download directory.
2208
2209 You can use ${home} for the native home directory.
2210
2211 **Compatibility:** Firefox 68, Firefox ESR 68\
2212 **CCK2 Equivalent:** N/A\
2213 **Preferences Affected:** `browser.download.dir`, `browser.download.folderList`, `browser.download.useDownloadDir`
2214
2215 #### Windows (GPO)
2216 ```
2217 Software\Policies\Mozilla\Firefox\DownloadDirectory = "${home}\Downloads"
2218 ```
2219 #### Windows (Intune)
2220 OMA-URI:
2221 ```
2222 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DownloadDirectory
2223 ```
2224 Value (string):
2225 ```
2226 <enabled/>
2227 <data id="Preferences_String" value="${home}\Downloads"/>
2228 ```
2229 #### macOS
2230 ```
2231 <dict>
2232   <key>DownloadDirectory</key>
2233   <string>${home}/Downloads</string>
2234 </dict>
2235 ```
2236 #### policies.json (macOS and Linux)
2237 ```
2238 {
2239   "policies": {
2240     "DownloadDirectory": "${home}/Downloads"
2241 }
2242 ```
2243 #### policies.json (Windows)
2244 ```
2245 {
2246   "policies": {
2247     "DownloadDirectory": "${home}\\Downloads"
2248 }
2249 ```
2250 ### EnableTrackingProtection
2251 Configure tracking protection.
2252
2253 If this policy is not configured, tracking protection is not enabled by default in the browser, but it is enabled by default in private browsing and the user can change it.
2254
2255 If `Value` is set to false, tracking protection is disabled and locked in both the regular browser and private browsing.
2256
2257 If `Value` is set to true, tracking protection is enabled by default in both the regular browser and private browsing and the `Locked` value determines whether or not a user can change it.
2258
2259 If `Cryptomining` is set to true, cryptomining scripts on websites are blocked.
2260
2261 If `Fingerprinting` is set to true, fingerprinting scripts on websites are blocked.
2262
2263 `Exceptions` are origins for which tracking protection is not enabled.
2264
2265 **Compatibility:** Firefox 60, Firefox ESR 60 (Cryptomining and Fingerprinting added in 70/68.2, Exceptions added in 73/68.5)\
2266 **CCK2 Equivalent:** N/A\
2267 **Preferences Affected:** `privacy.trackingprotection.enabled`, `privacy.trackingprotection.pbmode.enabled`, `privacy.trackingprotection.cryptomining.enabled`, `privacy.trackingprotection.fingerprinting.enabled`
2268
2269 #### Windows (GPO)
2270 ```
2271 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Value = 0x1 | 0x0
2272 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Locked = 0x1 | 0x0
2273 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Cryptomining = 0x1 | 0x0
2274 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Fingerprinting = 0x1 | 0x0
2275 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Exceptions\1 = "https://example.com"
2276 ```
2277 #### Windows (Intune)
2278 OMA-URI:
2279 ```
2280 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/A_TrackingProtection_Value
2281 ```
2282 Value (string):
2283 ```
2284 <enabled/> or <disabled/>
2285 ```
2286 OMA-URI:
2287 ```
2288 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/B_TrackingProtection_Cryptomining
2289 ```
2290 Value (string):
2291 ```
2292 <enabled/> or <disabled/>
2293 ```
2294 OMA-URI:
2295 ```
2296 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/C_TrackingProtection_Fingerprinting
2297 ```
2298 Value (string):
2299 ```
2300 <enabled/> or <disabled/>
2301 ```
2302 OMA-URI:
2303 ```
2304 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/D_TrackingProtection_Exceptions
2305 ```
2306 Value (string):
2307 ```
2308 <data id="TrackingProtection_Exceptions" value="1&#xF000;https://example.com"/>
2309 ```
2310 OMA-URI:
2311 ```
2312 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/E_TrackingProtection_Locked
2313 ```
2314 Value (string):
2315 ```
2316 <enabled/> or <disabled/>
2317 ```
2318 #### macOS
2319 ```
2320 <dict>
2321   <key>EnableTrackingProtection</key>
2322   <dict>
2323     <key>Value</key>
2324     <true/> | <false/>
2325     <key>Locked</key>
2326     <true/> | <false/>
2327     <key>Cryptomining</key>
2328     <true/> | <false/>
2329     <key>Fingerprinting</key>
2330     <true/> | <false/>
2331     <key>Exceptions</key>
2332     <array>
2333       <string>https://example.com</string>
2334     </array>
2335   </dict>
2336 </dict>
2337 ```
2338 #### policies.json
2339 ```
2340 {
2341   "policies": {
2342     "EnableTrackingProtection": {
2343       "Value": true | false,
2344       "Locked": true | false,
2345       "Cryptomining": true | false,
2346       "Fingerprinting": true | false,
2347       "Exceptions": ["https://example.com"]
2348     }
2349   }
2350 }
2351 ```
2352 ### EncryptedMediaExtensions
2353 Enable or disable Encrypted Media Extensions and optionally lock it.
2354
2355 If `Enabled` is set to false, encrypted media extensions (like Widevine) are not downloaded by Firefox unless the user consents to installing them.
2356
2357 If `Locked` is set to true and `Enabled` is set to false, Firefox will not download encrypted media extensions (like Widevine) or ask the user to install them.
2358
2359 **Compatibility:** Firefox 77, Firefox ESR 68.9\
2360 **CCK2 Equivalent:** N/A\
2361 **Preferences Affected:** `media.eme.enabled`
2362
2363 #### Windows (GPO)
2364 ```
2365 Software\Policies\Mozilla\Firefox\EncryptedMediaExtensions\Enabled = 0x1 | 0x0
2366 Software\Policies\Mozilla\Firefox\EncryptedMediaExtensions\Locked = 0x1 | 0x0
2367 ```
2368 #### Windows (Intune)
2369 OMA-URI:
2370 ```
2371 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~EncryptedMediaExtensions/EncryptedMediaExtensions_Enabled
2372 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~EncryptedMediaExtensions/EncryptedMediaExtensions_Locked
2373 ```
2374 Value (string):
2375 ```
2376 <enabled/>or <disabled/>
2377 ```
2378 #### macOS
2379 ```
2380 <dict>
2381   <key>EncryptedMediaExtensions</key>
2382   <dict>
2383     <key>Enabled</key>
2384     <true/> | <false/>
2385     <key>Locked</key>
2386     <true/> | <false/>
2387   </dict>
2388 </dict>
2389 ```
2390 #### policies.json
2391 ```
2392 {
2393   "policies": {
2394     "EncryptedMediaExtensions": {
2395       "Enabled": true | false,
2396       "Locked": true | false
2397     }
2398   }
2399 }
2400 ```
2401 ### EnterprisePoliciesEnabled
2402 Enable policy support on macOS.
2403
2404 **Compatibility:** Firefox 63, Firefox ESR 60.3 (macOS only)\
2405 **CCK2 Equivalent:** N/A\
2406 **Preferences Affected:** N/A
2407
2408 #### macOS
2409 ```
2410 <dict>
2411   <key>EnterprisePoliciesEnabled</key>
2412   <true/>
2413 </dict>
2414 ```
2415 ### Extensions
2416 Control the installation, uninstallation and locking of extensions.
2417
2418 While this policy is not technically deprecated, it is recommended that you use the **[`ExtensionSettings`](#extensionsettings)** policy. It has the same functionality and adds more. It does not support native paths, though, so you'll have to use file:/// URLs.
2419
2420 `Install` is a list of URLs or native paths for extensions to be installed.
2421
2422 `Uninstall` is a list of extension IDs that should be uninstalled if found.
2423
2424 `Locked` is a list of extension IDs that the user cannot disable or uninstall.
2425
2426 **Compatibility:** Firefox 60, Firefox ESR 60\
2427 **CCK2 Equivalent:** `addons`\
2428 **Preferences Affected:** N/A
2429
2430 #### Windows (GPO)
2431 ```
2432 Software\Policies\Mozilla\Firefox\Extensions\Install\1 = "https://addons.mozilla.org/firefox/downloads/somefile.xpi"
2433 Software\Policies\Mozilla\Firefox\Extensions\Install\2 = "//path/to/xpi"
2434 Software\Policies\Mozilla\Firefox\Extensions\Uninstall\1 = "bad_addon_id@mozilla.org"
2435 Software\Policies\Mozilla\Firefox\Extensions\Locked\1 = "addon_id@mozilla.org"
2436 ```
2437 #### Windows (Intune)
2438 OMA-URI:
2439 ```
2440 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/Extensions_Install
2441 ```
2442 Value (string):
2443 ```
2444 <enabled/>
2445 <data id="Extensions" value="1&#xF000;https://addons.mozilla.org/firefox/downloads/somefile.xpi&#xF000;2&#xF000;//path/to/xpi"/>
2446 ```
2447 OMA-URI:
2448 ```
2449 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/Extensions_Uninstall
2450 ```
2451 Value (string):
2452 ```
2453 <enabled/>
2454 <data id="Extensions" value="1&#xF000;bad_addon_id@mozilla.org"/>
2455 ```
2456 OMA-URI:
2457 ```
2458 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/Extensions_Locked
2459 ```
2460 Value (string):
2461 ```
2462 <enabled/>
2463 <data id="Extensions" value="1&#xF000;addon_id@mozilla.org"/>
2464 ```
2465 #### macOS
2466 ```
2467 <dict>
2468   <key>Extensions</key>
2469   <dict>
2470     <key>Install</key>
2471     <array>
2472       <string>https://addons.mozilla.org/firefox/downloads/somefile.xpi</string>
2473       <string>//path/to/xpi</string>
2474     </array>
2475     <key>Uninstall</key>
2476     <array>
2477       <string>bad_addon_id@mozilla.org</string>
2478     </array>
2479     <key>Locked</key>
2480     <array>
2481       <string>addon_id@mozilla.org</string>
2482     </array>
2483   </dict>
2484 </dict>
2485 ```
2486 #### policies.json
2487 ```
2488 {
2489   "policies": {
2490     "Extensions": {
2491       "Install": ["https://addons.mozilla.org/firefox/downloads/somefile.xpi", "//path/to/xpi"],
2492       "Uninstall": ["bad_addon_id@mozilla.org"],
2493       "Locked":  ["addon_id@mozilla.org"]
2494     }
2495   }
2496 }
2497 ```
2498 ### ExtensionSettings
2499 Manage all aspects of extensions. This policy is based heavily on the [Chrome policy](https://dev.chromium.org/administrators/policy-list-3/extension-settings-full) of the same name.
2500
2501 This policy maps an extension ID to its configuration. With an extension ID, the configuration will be applied to the specified extension only. A default configuration can be set for the special ID "*", which will apply to all extensions that don't have a custom configuration set in this policy.
2502
2503 To obtain an extension ID, install the extension and go to about:support. You will see the ID in the Extensions section. I've also created an extension that makes it easy to find the ID of extensions on AMO. You can download it [here](https://github.com/mkaply/queryamoid/releases/tag/v0.1).
2504
2505 The configuration for each extension is another dictionary that can contain the fields documented below.
2506
2507 | Name | Description |
2508 | --- | --- |
2509 | `installation_mode` | Maps to a string indicating the installation mode for the extension. The valid strings are `allowed`,`blocked`,`force_installed`, and `normal_installed`.
2510 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`allowed` | Allows the extension to be installed by the user. This is the default behavior. There is no need for an install_url; it will automatically be allowed based on the ID.
2511 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`blocked`| Blocks installation of the extension and removes it from the device if already installed.
2512 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`force_installed`| The extension is automatically installed and can't be removed by the user. This option is not valid for the default configuration and requires an install_url.
2513 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`normal_installed`| The extension is automatically installed but can be disabled by the user. This option is not valid for the default configuration and requires an install_url.
2514 | `install_url`| Maps to a URL indicating where Firefox can download a force_installed or normal_installed extension.  If installing from the local file system, use a [```file:///``` URL](https://en.wikipedia.org/wiki/File_URI_scheme). If installing from the addons.mozilla.org, use the following URL (substituting SHORT_NAME from the URL on AMO), https://addons.mozilla.org/firefox/downloads/latest/SHORT_NAME/latest.xpi. Languages packs are available from https://releases.mozilla.org/pub/firefox/releases/VERSION/PLATFORM/xpi/LANGUAGE.xpi. If you need to update the extension, you can change the name of the extension and it will be automatically updated. Extensions installed from file URLs will additional be updated when their internal version changes.
2515 | `install_sources` | A list of sources from which installing extensions is allowed. **This is unnecessary if you are only allowing the installation of certain extensions by ID.** Each item in this list is an extension-style match pattern. Users will be able to easily install items from any URL that matches an item in this list. Both the location of the *.xpi file and the page where the download is started from (i.e.  the referrer) must be allowed by these patterns. This setting can be used only for the default configuration.
2516 | `allowed_types` | This setting whitelists the allowed types of extension/apps that can be installed in Firefox. The value is a list of strings, each of which should be one of the following: "extension", "theme", "dictionary", "locale" This setting can be used only for the default configuration.
2517 | `blocked_install_message` | This maps to a string specifying the error message to display to users if they're blocked from installing an extension. This setting allows you to append text to the generic error message displayed when the extension is blocked. This could be be used to direct users to your help desk, explain why a particular extension is blocked, or something else. This setting can be used only for the default configuration.
2518 | `restricted_domains` | An array of domains on which content scripts can't be run. This setting can be used only for the default configuration.
2519 | `updates_disabled` | (Firefox 89, Firefox ESR 78.11) Boolean that indicates whether or not to disable automatic updates for an individual extension.
2520
2521 **Compatibility:** Firefox 69, Firefox ESR 68.1 (As of Firefox 85, Firefox ESR 78.7, installing a theme makes it the default.)\
2522 **CCK2 Equivalent:** N/A\
2523 **Preferences Affected:** N/A
2524
2525 #### Windows (GPO)
2526 Software\Policies\Mozilla\Firefox\ExtensionSettings (REG_MULTI_SZ) =
2527 ```
2528 {
2529   "*": {
2530     "blocked_install_message": "Custom error message.",
2531     "install_sources": ["about:addons","https://addons.mozilla.org/"],
2532     "installation_mode": "blocked",
2533     "allowed_types": ["extension"]
2534   },
2535   "uBlock0@raymondhill.net": {
2536     "installation_mode": "force_installed",
2537     "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
2538   },
2539   "https-everywhere@eff.org": {
2540     "installation_mode": "allowed"
2541   }
2542 }
2543 ```
2544 #### Windows (Intune)
2545 OMA-URI:
2546 ```
2547 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/ExtensionSettings
2548 ```
2549 Value (string):
2550 ```
2551 <enabled/>
2552 <data id="ExtensionSettings" value='
2553 {
2554   "*": {
2555     "blocked_install_message": "Custom error message.",
2556     "install_sources": ["about:addons","https://addons.mozilla.org/"],
2557     "installation_mode": "blocked",
2558     "allowed_types": ["extension"]
2559   },
2560   "uBlock0@raymondhill.net": {
2561     "installation_mode": "force_installed",
2562     "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
2563   },
2564     "https-everywhere@eff.org": {
2565     "installation_mode": "allowed"
2566   }
2567 }'/>
2568 ```
2569 #### macOS
2570 ```
2571 <dict>
2572   <key>ExtensionSettings</key>
2573   <dict>
2574     <key>*</key>
2575     <dict>
2576       <key>blocked_install_message</key>
2577       <string>Custom error message.</string>
2578       <key>install_sources</key>
2579       <array>
2580         <string>about:addons</string>
2581         <string>https://addons.mozilla.org/</string>
2582       </array>
2583       <key>installation_mode</key>
2584       <string>blocked</string>
2585       <key>allowed_types</key>
2586       <array>
2587         <string>extension</string>
2588       </array>
2589     </dict>
2590     <key>uBlock0@raymondhill.net</key>
2591     <dict>
2592       <key>installation_mode</key>
2593        <string>force_installed</string>
2594       <key>install_url</key>
2595       <string>https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi</string>
2596     </dict>
2597     <key>https-everywhere@eff.org</key>
2598     <dict>
2599       <key>installation_mode</key>
2600        <string>allowed</string>
2601     </dict>
2602   </dict>
2603 </dict>
2604 ```
2605 #### policies.json
2606 ```
2607 {
2608   "policies": {
2609     "ExtensionSettings": {
2610       "*": {
2611         "blocked_install_message": "Custom error message.",
2612         "install_sources": ["about:addons","https://addons.mozilla.org/"],
2613         "installation_mode": "blocked",
2614         "allowed_types": ["extension"]
2615       },
2616       "uBlock0@raymondhill.net": {
2617         "installation_mode": "force_installed",
2618         "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
2619       },
2620       "https-everywhere@eff.org": {
2621         "installation_mode": "allowed"
2622       }
2623     }
2624   }
2625 }
2626 ```
2627 ### ExtensionUpdate
2628 Control extension updates.
2629
2630 **Compatibility:** Firefox 67, Firefox ESR 60.7\
2631 **CCK2 Equivalent:** N/A\
2632 **Preferences Affected:** `extensions.update.enabled`
2633
2634 #### Windows (GPO)
2635 ```
2636 Software\Policies\Mozilla\Firefox\ExtensionUpdate = 0x1 | 0x0
2637 ```
2638 #### Windows (Intune)
2639 OMA-URI:
2640 ```
2641 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/ExtensionUpdate
2642 ```
2643 Value (string):
2644 ```
2645 <enabled/> or <disabled/>
2646 ```
2647 #### macOS
2648 ```
2649 <dict>
2650   <key>ExtensionUpdate</key>
2651   <true/> | <false/>
2652 </dict>
2653 ```
2654 #### policies.json
2655 ```
2656 {
2657   "policies": {
2658     "ExtensionUpdate": true | false
2659   }
2660 }
2661 ```
2662 ### FirefoxHome
2663 Customize the Firefox Home page.
2664
2665 **Compatibility:** Firefox 68, Firefox ESR 68 (SponsoredTopSites and SponsoredPocket were added in Firefox 95, Firefox ESR 91.4)
2666 **CCK2 Equivalent:** N/A\
2667 **Preferences Affected:** `browser.newtabpage.activity-stream.showSearch`, `browser.newtabpage.activity-stream.feeds.topsites`, `browser.newtabpage.activity-stream.feeds.section.highlights`, `browser.newtabpage.activity-stream.feeds.section.topstories`, `browser.newtabpage.activity-stream.feeds.snippets`, `browser.newtabpage.activity-stream.showSponsoredTopSites`, `browser.newtabpage.activity-stream.showSponsored`
2668
2669 #### Windows (GPO)
2670 ```
2671 Software\Policies\Mozilla\Firefox\FirefoxHome\Search = 0x1 | 0x0
2672 Software\Policies\Mozilla\Firefox\FirefoxHome\TopSites = 0x1 | 0x0
2673 Software\Policies\Mozilla\Firefox\FirefoxHome\SponsoredTopSites = 0x1 | 0x0
2674 Software\Policies\Mozilla\Firefox\FirefoxHome\Highlights = 0x1 | 0x0
2675 Software\Policies\Mozilla\Firefox\FirefoxHome\Pocket = 0x1 | 0x0
2676 Software\Policies\Mozilla\Firefox\FirefoxHome\SponsoredPocket = 0x1 | 0x0
2677 Software\Policies\Mozilla\Firefox\FirefoxHome\Snippets = 0x1 | 0x0
2678 Software\Policies\Mozilla\Firefox\FirefoxHome\Locked = 0x1 | 0x0
2679 ```
2680 #### Windows (Intune)
2681 OMA-URI:
2682 ```
2683 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/CustomizeFirefoxHome
2684 ```
2685 Value (string):
2686 ```
2687 <enabled/>
2688 <data id="FirefoxHome_Search"  value="true | false"/>
2689 <data id="FirefoxHome_TopSites"  value="true | false"/>
2690 <data id="FirefoxHome_SponsoredTopSites"  value="true | false"/>
2691 <data id="FirefoxHome_Highlights"  value="true | false"/>
2692 <data id="FirefoxHome_Pocket"  value="true | false"/>
2693 <data id="FirefoxHome_SponsoredPocket"  value="true | false"/>
2694 <data id="FirefoxHome_Snippets"  value="true | false"/>
2695 <data id="FirefoxHome_Locked"  value="true | false"/>
2696 ```
2697 #### macOS
2698 ```
2699 <dict>
2700   <key>FirefoxHome</key>
2701   <dict>
2702     <key>Search</key>
2703     <true/> | <false/>
2704     <key>TopSites</key>
2705     <true/> | <false/>
2706     <key>SponsoredTopSites</key>
2707     <true/> | <false/>
2708     <key>Highlights</key>
2709     <true/> | <false/>
2710     <key>Pocket</key>
2711     <true/> | <false/>
2712     <key>SponsoredPocket</key>
2713     <true/> | <false/>
2714     <key>Snippets</key>
2715     <true/> | <false/>
2716     <key>Locked</key>
2717     <true/> | <false/>
2718   </dict>
2719 </dict>
2720 ```
2721 #### policies.json
2722 ```
2723 {
2724   "policies": {
2725     "FirefoxHome": {
2726       "Search": true | false,
2727       "TopSites": true | false,
2728       "SponsoredTopSites": true | false,
2729       "Highlights": true | false,
2730       "Pocket": true | false,
2731       "SponsoredPocket": true | false,
2732       "Snippets": true | false,
2733       "Locked": true | false
2734     }
2735   }
2736 }
2737 ```
2738 ### FlashPlugin (Deprecated)
2739 Configure the default Flash plugin policy as well as origins for which Flash is allowed.
2740
2741 `Allow` is a list of origins where Flash are allowed.
2742
2743 `Block` is a list of origins where Flash is not allowed.
2744
2745 `Default` determines whether or not Flash is allowed by default.
2746
2747 `Locked` prevents the user from changing Flash preferences.
2748
2749 **Compatibility:** Firefox 60, Firefox ESR 60\
2750 **CCK2 Equivalent:** `permissions.plugin`\
2751 **Preferences Affected:** `plugin.state.flash`
2752
2753 #### Windows (GPO)
2754 ```
2755 Software\Policies\Mozilla\Firefox\FlashPlugin\Allow\1 = "https://example.org"
2756 Software\Policies\Mozilla\Firefox\FlashPlugin\Block\1 = "https://example.edu"
2757 Software\Policies\Mozilla\Firefox\FlashPlugin\Default = 0x1 | 0x0
2758 Software\Policies\Mozilla\Firefox\FlashPlugin\Locked = 0x1 | 0x0
2759 ```
2760 #### Windows (Intune)
2761 OMA-URI:
2762 ```
2763 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Flash/FlashPlugin_Allow
2764 ```
2765 Value (string):
2766 ```
2767 <enabled/>
2768 <data id="Permissions" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
2769 ```
2770 OMA-URI:
2771 ```
2772 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Flash/FlashPlugin_Locked
2773 ```
2774 Value (string):
2775 ```
2776 <enabled/> or <disabled/>
2777 ```
2778 OMA-URI:
2779 ```
2780 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Flash/FlashPlugin_Default
2781 ```
2782 Value (string):
2783 ```
2784 <enabled/> or <disabled/>
2785 ```
2786 #### macOS
2787 ```
2788 <dict>
2789   <key>FlashPlugin</key>
2790   <dict>
2791     <key>Allow</key>
2792     <array>
2793       <string>http://example.org</string>
2794     </array>
2795     <key>Block</key>
2796     <array>
2797       <string>http://example.edu</string>
2798     </array>
2799     <key>Default</key>
2800     <true/> | <false/>
2801     <key>Locked</key>
2802     <true/> | <false/>
2803   </dict>
2804 </dict>
2805 ```
2806 #### policies.json
2807 ```
2808 {
2809   "policies": {
2810     "FlashPlugin": {
2811       "Allow": ["http://example.org/"],
2812       "Block": ["http://example.edu/"],
2813       "Default": true | false,
2814       "Locked": true | false
2815     }
2816   }
2817 }
2818 ```
2819 ### Handlers
2820 Configure default application handlers. This policy is based on the internal format of `handlers.json`.
2821
2822 You can configure handlers based on a mime type (`mimeTypes`), a file's extension (`extensions`), or a protocol (`schemes`).
2823
2824 Within each handler type, you specify the given mimeType/extension/scheme as a key and use the following subkeys to describe how it is handled.
2825
2826 | Name | Description |
2827 | --- | --- |
2828 | `action`| Can be either `saveToDisk`, `useHelperApp`, `useSystemDefault`.
2829 | `ask` | If `true`, the user is asked if what they want to do with the file. If `false`, the action is taken without user intervention.
2830 | `handlers` | An array of handlers with the first one being the default. If you don't want to have a default handler, use an empty object for the first handler. Choose between path or uriTemplate.
2831 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`name` | The display name of the handler (might not be used).
2832 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`path`| The native path to the executable to be used.
2833 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`uriTemplate`| A url to a web based application handler. The URL must be https and contain a %s to be used for substitution.
2834
2835 **Compatibility:** Firefox 78, Firefox ESR 78\
2836 **CCK2 Equivalent:** N/A\
2837 **Preferences Affected:** N/A
2838
2839 #### Windows (GPO)
2840 Software\Policies\Mozilla\Firefox\Handlers (REG_MULTI_SZ) =
2841 ```
2842 {
2843   "mimeTypes": {
2844     "application/msword": {
2845       "action": "useSystemDefault",
2846       "ask": true | false
2847     }
2848   },
2849   "schemes": {
2850     "mailto": {
2851       "action": "useHelperApp",
2852       "ask": true | false,
2853       "handlers": [{
2854         "name": "Gmail",
2855         "uriTemplate": "https://mail.google.com/mail/?extsrc=mailto&url=%s"
2856       }]
2857     }
2858   },
2859   "extensions": {
2860     "pdf": {
2861       "action": "useHelperApp",
2862       "ask": true | false,
2863       "handlers": [{
2864         "name": "Adobe Acrobat",
2865         "path": "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32.exe"
2866       }]
2867     }
2868   }
2869 }
2870 ```
2871 #### Windows (Intune)
2872 OMA-URI:
2873 ```
2874 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Handlers
2875 ```
2876 Value (string):
2877 ```
2878 <enabled/>
2879 <data id="Handlers" value='
2880 {
2881   "mimeTypes": {
2882     "application/msword": {
2883       "action": "useSystemDefault",
2884       "ask": true | false
2885     }
2886   },
2887   "schemes": {
2888     "mailto": {
2889       "action": "useHelperApp",
2890       "ask": true | false,
2891       "handlers": [{
2892         "name": "Gmail",
2893         "uriTemplate": "https://mail.google.com/mail/?extsrc=mailto&amp;url=%s"
2894       }]
2895     }
2896   },
2897   "extensions": {
2898     "pdf": {
2899       "action": "useHelperApp",
2900       "ask": true | false,
2901       "handlers": [{
2902         "name": "Adobe Acrobat",
2903         "path": "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32.exe"
2904       }]
2905     }
2906   }
2907 }
2908 '/>
2909 ```
2910 #### macOS
2911 ```
2912 <dict>
2913   <key>Handlers</key>
2914   <dict>
2915     <key>mimeTypes</key>
2916     <dict>
2917       <key>application/msword</key>
2918       <dict>
2919         <key>action</key>
2920         <string>useSystemDefault</string>
2921         <key>ask</key>
2922         <true/> | <false/>
2923       </dict>
2924     </dict>
2925     <key>schemes</key>
2926     <dict>
2927       <key>mailto</key>
2928       <dict>
2929         <key>action</key>
2930         <string>useHelperApp</string>
2931         <key>ask</key>
2932         <true/> | <false/>
2933         <key>handlers</key>
2934         <array>
2935           <dict>
2936             <key>name</key>
2937             <string>Gmail</string>
2938             <key>uriTemplate</key>
2939             <string>https://mail.google.com/mail/?extsrc=mailto&url=%s</string>
2940           </dict>
2941         </array>
2942       </dict>
2943     </dict>
2944     <key>extensions</key>
2945     <dict>
2946       <key>pdf</key>
2947       <dict>
2948         <key>action</key>
2949         <string>useHelperApp</string>
2950         <key>ask</key>
2951         <true/> | <false/>
2952         <key>handlers</key>
2953         <array>
2954           <dict>
2955             <key>name</key>
2956             <string>Adobe Acrobat</string>
2957             <key>path</key>
2958             <string>/System/Applications/Preview.app</string>
2959           </dict>
2960         </array>
2961       </dict>
2962     </dict>
2963   </dict>
2964 </dict>
2965 ```
2966 #### policies.json
2967 ```
2968 {
2969   "policies": {
2970     "Handlers": {
2971       "mimeTypes": {
2972         "application/msword": {
2973           "action": "useSystemDefault",
2974           "ask": false
2975         }
2976       },
2977       "schemes": {
2978         "mailto": {
2979           "action": "useHelperApp",
2980           "ask": true | false,
2981           "handlers": [{
2982             "name": "Gmail",
2983             "uriTemplate": "https://mail.google.com/mail/?extsrc=mailto&url=%s"
2984           }]
2985         }
2986       },
2987       "extensions": {
2988         "pdf": {
2989           "action": "useHelperApp",
2990           "ask": true | false,
2991           "handlers": [{
2992             "name": "Adobe Acrobat",
2993             "path": "/usr/bin/acroread"
2994           }]
2995         }
2996       }
2997     }
2998   }
2999 }
3000 ```
3001 ### HardwareAcceleration
3002 Control hardware acceleration.
3003
3004 **Compatibility:** Firefox 60, Firefox ESR 60\
3005 **CCK2 Equivalent:** N/A\
3006 **Preferences Affected:** `layers.acceleration.disabled`
3007
3008 #### Windows (GPO)
3009 ```
3010 Software\Policies\Mozilla\Firefox\HardwareAcceleration = 0x1 | 0x0
3011 ```
3012 #### Windows (Intune)
3013 OMA-URI:
3014 ```
3015 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/HardwareAcceleration
3016 ```
3017 Value (string):
3018 ```
3019 <enabled/> or <disabled/>
3020 ```
3021 #### macOS
3022 ```
3023 <dict>
3024   <key>HardwareAcceleration</key>
3025   <true/> | <false/>
3026 </dict>
3027 ```
3028 #### policies.json
3029 ```
3030 {
3031   "policies": {
3032     "HardwareAcceleration": true | false
3033   }
3034 }
3035 ```
3036 ### Homepage
3037 Configure the default homepage and how Firefox starts.
3038
3039 `URL` is the default homepage.
3040
3041 `Locked` prevents the user from changing homepage preferences.
3042
3043 `Additional` allows for more than one homepage.
3044
3045 `StartPage` is how Firefox starts. The choices are no homepage, the default homepage or the previous session.
3046
3047 With Firefox 78, an additional option as added for `Startpage`, `homepage-locked`. If this is value is set for the Startpage, the user will always get the homepage at startup and cannot choose to restore their session.
3048
3049 **Compatibility:** Firefox 60, Firefox ESR 60 (StartPage was added in Firefox 60, Firefox ESR 60.4, homepage-locked added in Firefox 78)\
3050 **CCK2 Equivalent:** `homePage`,`lockHomePage`\
3051 **Preferences Affected:** `browser.startup.homepage`, `browser.startup.page`
3052
3053 #### Windows (GPO)
3054 ```
3055 Software\Policies\Mozilla\Firefox\Homepage\URL = "https://example.com"
3056 Software\Policies\Mozilla\Firefox\Homepage\Locked = 0x1 | 0x0
3057 Software\Policies\Mozilla\Firefox\Homepage\Additional\1 = "https://example.org"
3058 Software\Policies\Mozilla\Firefox\Homepage\Additional\2 = "https://example.edu"
3059 Software\Policies\Mozilla\Firefox\Homepage\StartPage = "none" | "homepage" | "previous-session" | "homepage-locked"
3060 ```
3061 #### Windows (Intune)
3062 OMA-URI:
3063 ```
3064 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageURL
3065 ```
3066 Value (string):
3067 ```
3068 <enabled/>
3069
3070 <data id="HomepageURL" value="https://example.com"/>
3071 <data id="HomepageLocked" value="true | false"/>
3072 ```
3073 OMA-URI:
3074 ```
3075 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageAdditional
3076 ```
3077 Value (string):
3078 ```
3079 <enabled/>
3080
3081 <data id="HomepageAdditional" value="1&#xF000;http://example.org&#xF000;2&#xF000;http://example.edu"/>
3082 ```
3083 OMA-URI:
3084 ```
3085 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageStartPage
3086 ```
3087 Value (string):
3088 ```
3089 <enabled/>
3090
3091 <data id="StartPage" value="none | homepage | previous-session"/>
3092 ```
3093 #### macOS
3094 ```
3095 <dict>
3096   <key>Homepage</key>
3097   <dict>
3098     <key>URL</key>
3099     <string>http://example.com</string>
3100     <key>Locked</key>
3101     <true/> | <false/>
3102     <key>Additional</key>
3103     <array>
3104       <string>http://example.org</string>
3105       <string>http://example.edu</string>
3106     </array>
3107     <key>StartPage</key>
3108     <string>none | homepage | previous-session | homepage-locked</string>
3109   </dict>
3110 </dict>
3111 ```
3112 #### policies.json
3113 ```
3114 {
3115   "policies": {
3116     "Homepage": {
3117       "URL": "http://example.com/",
3118       "Locked": true | false,
3119       "Additional": ["http://example.org/",
3120                      "http://example.edu/"],
3121       "StartPage": "none" | "homepage" | "previous-session" | "homepage-locked"
3122     }
3123   }
3124 }
3125 ```
3126 ### InstallAddonsPermission
3127 Configure the default extension install policy as well as origins for extension installs are allowed. This policy does not override turning off all extension installs.
3128
3129 `Allow` is a list of origins where extension installs are allowed.
3130
3131 `Default` determines whether or not extension installs are allowed by default.
3132
3133 **Compatibility:** Firefox 60, Firefox ESR 60\
3134 **CCK2 Equivalent:** `permissions.install`\
3135 **Preferences Affected:** `xpinstall.enabled`
3136
3137 #### Windows (GPO)
3138 ```
3139 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Allow\1 = "https://example.org"
3140 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Allow\2 = "https://example.edu"
3141 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Default = 0x1 | 0x0
3142 ```
3143 #### Windows (Intune)
3144 OMA-URI:
3145 ```
3146 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Addons/InstallAddonsPermission_Allow
3147 ```
3148 Value (string):
3149 ```
3150 <enabled/>
3151 <data id="Permissions" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
3152 ```
3153 OMA-URI:
3154 ```
3155 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Addons/InstallAddonsPermission_Default
3156 ```
3157 Value (string):
3158 ```
3159 <enabled/>
3160 ```
3161 #### macOS
3162 ```
3163 <dict>
3164   <key>InstallAddonsPermission</key>
3165   <dict>
3166     <key>Allow</key>
3167     <array>
3168       <string>http://example.org</string>
3169       <string>http://example.edu</string>
3170     </array>
3171     <key>Default</key>
3172     <true/> | <false/>
3173   </dict>
3174 </dict>
3175 ```
3176 #### policies.json
3177 ```
3178 {
3179   "policies": {
3180     "InstallAddonsPermission": {
3181       "Allow": ["http://example.org/",
3182                 "http://example.edu/"],
3183       "Default": true | false
3184     }
3185   }
3186 }
3187 ```
3188 ### LegacyProfiles
3189 Disable the feature enforcing a separate profile for each installation.
3190
3191 If this policy set to true, Firefox will not try to create different profiles for installations of Firefox in different directories. This is the equivalent of the MOZ_LEGACY_PROFILES environment variable.
3192
3193 If this policy set to false, Firefox will create a new profile for each unique installation of Firefox.
3194
3195 This policy only work on Windows via GPO (not policies.json).
3196
3197 **Compatibility:** Firefox 70, Firefox ESR 68.2 (Windows only, GPO only)\
3198 **CCK2 Equivalent:** N/A\
3199 **Preferences Affected:** N/A
3200
3201 #### Windows (GPO)
3202 ```
3203 Software\Policies\Mozilla\Firefox\LegacyProfiles = = 0x1 | 0x0
3204 ```
3205 #### Windows (Intune)
3206 OMA-URI:
3207 ```
3208 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/LegacyProfiles
3209 ```
3210 Value (string):
3211 ```
3212 <enabled/> or <disabled/>
3213 ```
3214 ### LocalFileLinks
3215 Enable linking to local files by origin.
3216
3217 **Compatibility:** Firefox 68, Firefox ESR 68\
3218 **CCK2 Equivalent:** N/A\
3219 **Preferences Affected:** `capability.policy.localfilelinks.*`
3220
3221 #### Windows (GPO)
3222 ```
3223 Software\Policies\Mozilla\Firefox\LocalFileLinks\1 = "https://example.org"
3224 Software\Policies\Mozilla\Firefox\LocalFileLinks\2 = "https://example.edu"
3225 ```
3226 #### Windows (Intune)
3227 OMA-URI:
3228 ```
3229 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/LocalFileLinks
3230 ```
3231 Value (string):
3232 ```
3233 <enabled/>
3234 <data id="LocalFileLinks" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
3235 ```
3236 #### macOS
3237 ```
3238 <dict>
3239   <key>LocalFileLinks</key>
3240   <array>
3241     <string>http://example.org</string>
3242     <string>http://example.edu</string>
3243   </array>
3244 </dict>
3245 ```
3246 #### policies.json
3247 ```
3248 {
3249   "policies": {
3250     "LocalFileLinks": ["http://example.org/",
3251                        "http://example.edu/"]
3252   }
3253 }
3254 ```
3255 ### ManagedBookmarks
3256 Configures a list of bookmarks managed by an administrator that cannot be changed by the user.
3257
3258 The bookmarks are only added as a button on the personal toolbar. They are not in the bookmarks folder.
3259
3260 The syntax of this policy is exactly the same as the [Chrome ManagedBookmarks policy](https://cloud.google.com/docs/chrome-enterprise/policies/?policy=ManagedBookmarks). The schema is:
3261 ```
3262 {
3263  "items": {
3264   "id": "BookmarkType",
3265   "properties": {
3266    "children": {
3267     "items": {
3268      "$ref": "BookmarkType"
3269     },
3270     "type": "array"
3271    },
3272    "name": {
3273     "type": "string"
3274    },
3275    "toplevel_name": {
3276     "type": "string"
3277    },
3278    "url": {
3279     "type": "string"
3280    }
3281   },
3282   "type": "object"
3283  },
3284  "type": "array"
3285 }
3286 ```
3287 **Compatibility:** Firefox 83, Firefox ESR 78.5\
3288 **CCK2 Equivalent:** N/A\
3289 **Preferences Affected:** N/A
3290
3291 #### Windows (GPO)
3292 Software\Policies\Mozilla\Firefox\ManagedBookmarks (REG_MULTI_SZ) =
3293 ```
3294 [
3295   {
3296     "toplevel_name": "My managed bookmarks folder"
3297   },
3298   {
3299     "url": "example.com",
3300     "name": "Example"
3301   },
3302   {
3303     "name": "Mozilla links",
3304     "children": [
3305       {
3306         "url": "https://mozilla.org",
3307         "name": "Mozilla.org"
3308       },
3309       {
3310         "url": "https://support.mozilla.org/",
3311         "name": "SUMO"
3312       }
3313     ]
3314   }
3315 ]
3316 ```
3317 #### Windows (Intune)
3318 OMA-URI:
3319 ```
3320 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/ManagedBookmarks
3321 ```
3322 Value (string):
3323 ```
3324 <enabled/>
3325 <data id="JSON" value='
3326 [
3327   {
3328     "toplevel_name": "My managed bookmarks folder"
3329   },
3330   {
3331     "url": "example.com",
3332     "name": "Example"
3333   },
3334   {
3335     "name": "Mozilla links",
3336     "children": [
3337       {
3338         "url": "https://mozilla.org",
3339         "name": "Mozilla.org"
3340       },
3341       {
3342         "url": "https://support.mozilla.org/",
3343         "name": "SUMO"
3344       }
3345     ]
3346   }
3347 ]'/>
3348 ```
3349 #### macOS
3350 ```
3351 <dict>
3352   <key>ManagedBookmarks</key>
3353   <array>
3354     <dict>
3355       <key>toplevel_name</key>
3356       <string>My managed bookmarks folder</string>
3357       <dict>
3358         <key>url</key>
3359         <string>example.com</string>
3360         <key>name</key>
3361         <string>Example</string>
3362       </dict>
3363       <dict>
3364       <key>name</key>
3365       <string>Mozilla links</string>
3366       <key>children</key>
3367       <array>
3368         <dict>
3369           <key>url</key>
3370           <string>https://mozilla.org</string>
3371           <key>name</key>
3372           <string>Mozilla</string>
3373         </dict>
3374         <dict>
3375           <key>url</key>
3376           <string>https://support.mozilla.org/</string>
3377           <key>name</key>
3378           <string>SUMO</string>
3379         </dict>
3380       </array>
3381     </dict>
3382   </array>
3383 </dict>
3384 ```
3385 #### policies.json
3386 ```
3387 {
3388   "policies": {
3389     "ManagedBookmarks": [
3390       {
3391         "toplevel_name": "My managed bookmarks folder"
3392       },
3393       {
3394         "url": "example.com",
3395         "name": "Example"
3396       },
3397       {
3398         "name": "Mozilla links",
3399         "children": [
3400           {
3401             "url": "https://mozilla.org",
3402             "name": "Mozilla.org"
3403           },
3404           {
3405             "url": "https://support.mozilla.org/",
3406             "name": "SUMO"
3407           }
3408         ]
3409       }
3410     ]
3411   }
3412 }
3413 ```
3414 ### ManualAppUpdateOnly
3415
3416 Switch to manual updates only.
3417
3418 If this policy is enabled:
3419  1. The user will never be prompted to install updates
3420  2. Firefox will not check for updates in the background, though it will check automatically when an update UI is displayed (such as the one in the About dialog). This check will be used to show "Update to version X" in the UI, but will not automatically download the update or prompt the user to update in any other way.
3421  3. The update UI will work as expected, unlike when using DisableAppUpdate.
3422
3423 This policy is primarily intended for advanced end users, not for enterprises.
3424
3425 **Compatibility:** Firefox 87\
3426 **CCK2 Equivalent:** N/A\
3427 **Preferences Affected:** N/A
3428
3429 #### policies.json
3430 ```
3431 {
3432   "policies": {
3433     "ManualAppUpdateOnly": true | false
3434   }
3435 }
3436 ```
3437 ### NetworkPrediction
3438 Enable or disable network prediction (DNS prefetching).
3439
3440 **Compatibility:** Firefox 67, Firefox ESR 60.7\
3441 **CCK2 Equivalent:** N/A\
3442 **Preferences Affected:** `network.dns.disablePrefetch`, `network.dns.disablePrefetchFromHTTPS`
3443
3444 #### Windows (GPO)
3445 ```
3446 Software\Policies\Mozilla\Firefox\NetworkPrediction = 0x1 | 0x0
3447 ```
3448 #### Windows (Intune)
3449 OMA-URI:
3450 ```
3451 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NetworkPrediction
3452 ```
3453 Value (string):
3454 ```
3455 <enabled/> or <disabled/>
3456 ```
3457 #### macOS
3458 ```
3459 <dict>
3460   <key>NetworkPrediction</key>
3461   <true/> | <false/>
3462 </dict>
3463 ```
3464 #### policies.json
3465 ```
3466 {
3467   "policies": {
3468     "NetworkPrediction": true | false
3469 }
3470 ```
3471 ### NewTabPage
3472 Enable or disable the New Tab page.
3473
3474 **Compatibility:** Firefox 68, Firefox ESR 68\
3475 **CCK2 Equivalent:** N/A\
3476 **Preferences Affected:** `browser.newtabpage.enabled`
3477
3478 #### Windows (GPO)
3479 ```
3480 Software\Policies\Mozilla\Firefox\NewTabPage = 0x1 | 0x0
3481 ```
3482 #### Windows (Intune)
3483 OMA-URI:
3484 ```
3485 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NewTabPage
3486 ```
3487 Value (string):
3488 ```
3489 <enabled/> or <disabled/>
3490 ```
3491 #### macOS
3492 ```
3493 <dict>
3494   <key>NewTabPage</key>
3495   <true/> | <false/>
3496 </dict>
3497 ```
3498 #### policies.json
3499 ```
3500 {
3501   "policies": {
3502     "NewTabPage": true | false
3503 }
3504 ```
3505 ### NoDefaultBookmarks
3506 Disable the creation of default bookmarks.
3507
3508 This policy is only effective if the user profile has not been created yet.
3509
3510 **Compatibility:** Firefox 60, Firefox ESR 60\
3511 **CCK2 Equivalent:** `removeDefaultBookmarks`\
3512 **Preferences Affected:** N/A
3513
3514 #### Windows (GPO)
3515 ```
3516 Software\Policies\Mozilla\Firefox\NoDefaultBookmarks = 0x1 | 0x0
3517 ```
3518 #### Windows (Intune)
3519 OMA-URI:
3520 ```
3521 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NoDefaultBookmarks
3522 ```
3523 Value (string):
3524 ```
3525 <enabled/> or <disabled/>
3526 ```
3527 #### macOS
3528 ```
3529 <dict>
3530   <key>NoDefaultBookmarks</key>
3531   <true/> | <false/>
3532 </dict>
3533 ```
3534 #### policies.json
3535 ```
3536 {
3537   "policies": {
3538     "NoDefaultBookmarks": true | false
3539   }
3540 }
3541 ```
3542 ### OfferToSaveLogins
3543 Control whether or not Firefox offers to save passwords.
3544
3545 **Compatibility:** Firefox 60, Firefox ESR 60\
3546 **CCK2 Equivalent:** `dontRememberPasswords`\
3547 **Preferences Affected:** `signon.rememberSignons`
3548
3549 #### Windows (GPO)
3550 ```
3551 Software\Policies\Mozilla\Firefox\OfferToSaveLogins = 0x1 | 0x0
3552 ```
3553 #### Windows (Intune)
3554 OMA-URI:
3555 ```
3556 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OfferToSaveLogins
3557 ```
3558 Value (string):
3559 ```
3560 <enabled/> or <disabled/>
3561 ```
3562 #### macOS
3563 ```
3564 <dict>
3565   <key>OfferToSaveLogins</key>
3566   <true/> | <false/>
3567 </dict>
3568 ```
3569 #### policies.json
3570 ```
3571 {
3572   "policies": {
3573     "OfferToSaveLogins": true | false
3574   }
3575 }
3576 ```
3577 ### OfferToSaveLoginsDefault
3578 Sets the default value of signon.rememberSignons without locking it.
3579
3580 **Compatibility:** Firefox 70, Firefox ESR 60.2\
3581 **CCK2 Equivalent:** `dontRememberPasswords`\
3582 **Preferences Affected:** `signon.rememberSignons`
3583
3584 #### Windows (GPO)
3585 ```
3586 Software\Policies\Mozilla\Firefox\OfferToSaveLoginsDefault = 0x1 | 0x0
3587 ```
3588 #### Windows (Intune)
3589 OMA-URI:
3590 ```
3591 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OfferToSaveLoginsDefault
3592 ```
3593 Value (string):
3594 ```
3595 <enabled/> or <disabled/>
3596 ```
3597 #### macOS
3598 ```
3599 <dict>
3600   <key>OfferToSaveLoginsDefault</key>
3601   <true/> | <false/>
3602 </dict>
3603 ```
3604 #### policies.json
3605 ```
3606 {
3607   "policies": {
3608     "OfferToSaveLoginsDefault": true | false
3609   }
3610 }
3611 ```
3612 ### OverrideFirstRunPage
3613 Override the first run page. If the value is an empty string (""), the first run page is not displayed.
3614
3615 Starting with Firefox 83, Firefox ESR 78.5, you can also specify multiple URLS separated by a vertical bar (|).
3616
3617 **Compatibility:** Firefox 60, Firefox ESR 60\
3618 **CCK2 Equivalent:** `welcomePage`,`noWelcomePage`\
3619 **Preferences Affected:** `startup.homepage_welcome_url`
3620
3621 #### Windows (GPO)
3622 ```
3623 Software\Policies\Mozilla\Firefox\OverrideFirstRunPage = "http://example.org"
3624 ```
3625 #### Windows (Intune)
3626 OMA-URI:
3627 ```
3628 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OverrideFirstRunPage
3629 ```
3630 Value (string):
3631 ```
3632 <enabled/>
3633 <data id="OverridePage" value="https://example.com"/>
3634 ```
3635 #### macOS
3636 ```
3637 <dict>
3638   <key>OverrideFirstRunPage</key>
3639   <string>http://example.org</string>
3640 </dict>
3641 ```
3642 #### policies.json
3643 ```
3644 {
3645   "policies": {
3646     "OverrideFirstRunPage": "http://example.org"
3647   }
3648 }
3649 ```
3650 ### OverridePostUpdatePage
3651 Override the upgrade page. If the value is an empty string (""), no extra pages are displayed when Firefox is upgraded.
3652
3653 **Compatibility:** Firefox 60, Firefox ESR 60\
3654 **CCK2 Equivalent:** `upgradePage`,`noUpgradePage`\
3655 **Preferences Affected:** `startup.homepage_override_url`
3656
3657 #### Windows (GPO)
3658 ```
3659 Software\Policies\Mozilla\Firefox\OverridePostUpdatePage = "http://example.org"
3660 ```
3661 #### Windows (Intune)
3662 OMA-URI:
3663 ```
3664 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OverridePostUpdatePage
3665 ```
3666 Value (string):
3667 ```
3668 <enabled/>
3669 <data id="OverridePage" value="https://example.com"/>
3670 ```
3671 #### macOS
3672 ```
3673 <dict>
3674   <key>OverridePostUpdatePage</key>
3675   <string>http://example.org</string>
3676 </dict>
3677 ```
3678 #### policies.json
3679 ```
3680 {
3681   "policies": {
3682     "OverridePostUpdatePage": "http://example.org"
3683   }
3684 }
3685 ```
3686 ### PasswordManagerEnabled
3687 Remove access to the password manager via preferences and blocks about:logins on Firefox 70.
3688
3689 **Compatibility:** Firefox 70, Firefox ESR 60.2\
3690 **CCK2 Equivalent:** N/A\
3691 **Preferences Affected:** `pref.privacy.disable_button.view_passwords`
3692
3693 #### Windows (GPO)
3694 ```
3695 Software\Policies\Mozilla\Firefox\PasswordManagerEnabled = 0x1 | 0x0
3696 ```
3697 #### Windows (Intune)
3698 OMA-URI:
3699 ```
3700 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PasswordManagerEnabled
3701 ```
3702 Value (string):
3703 ```
3704 <enabled/> or <disabled/>
3705 ```
3706 #### macOS
3707 ```
3708 <dict>
3709   <key>PasswordManagerEnabled</key>
3710   <true/> | <false/>
3711 </dict>
3712 ```
3713 #### policies.json
3714 ```
3715 {
3716   "policies": {
3717     "PasswordManagerEnabled": true | false
3718   }
3719 }
3720 ```
3721 ### PDFjs
3722 Disable or configure PDF.js, the built-in PDF viewer.
3723
3724 If `Enabled` is set to false, the built-in PDF viewer is disabled.
3725
3726 If `EnablePermissions` is set to true, the built-in PDF viewer will honor document permissions like preventing the copying of text.
3727
3728 Note: DisableBuiltinPDFViewer has not been deprecated. You can either continue to use it, or switch to using PDFjs->Enabled to disable the built-in PDF viewer. This new permission was added because we needed a place for PDFjs->EnabledPermissions.
3729
3730 **Compatibility:** Firefox 77, Firefox ESR 68.9\
3731 **CCK2 Equivalent:** N/A\
3732 **Preferences Affected:** `pdfjs.diabled`, `pdfjs.enablePermissions`
3733
3734 #### Windows (GPO)
3735 ```
3736 Software\Policies\Mozilla\Firefox\PDFjs\Enabled = 0x1 | 0x0
3737 Software\Policies\Mozilla\Firefox\PDFjs\EnablePermissions = 0x1 | 0x0
3738 ```
3739 #### Windows (Intune)
3740 OMA-URI:
3741 ```
3742 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PDFjs/PDFjs_Enabled
3743 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PDFjs/PDFjs_EnablePermissions
3744 ```
3745 Value (string):
3746 ```
3747 <enabled/>or <disabled/>
3748 ```
3749 #### macOS
3750 ```
3751 <dict>
3752   <key>PDFjs</key>
3753   <dict>
3754     <key>Enabled</key>
3755     <true/> | <false/>
3756     <key>EnablePermissions</key>
3757     <true/> | <false/>
3758   </dict>
3759 </dict>
3760 ```
3761 #### policies.json
3762 ```
3763 {
3764   "policies": {
3765     "PDFjs": {
3766       "Enabled": true | false,
3767       "EnablePermissions": true | false
3768     }
3769   }
3770 }
3771 ```
3772 ### Permissions
3773 Set permissions associated with camera, microphone, location, notifications, autoplay, and virtual reality. Because these are origins, not domains, entries with unique ports must be specified separately. This explicitly means that it is not possible to add wildcards. See examples below.
3774
3775 `Allow` is a list of origins where the feature is allowed.
3776
3777 `Block` is a list of origins where the feature is not allowed.
3778
3779 `BlockNewRequests` determines whether or not new requests can be made for the feature.
3780
3781 `Locked` prevents the user from changing preferences for the feature.
3782
3783 `Default` specifies the default value for Autoplay. block-audio-video is not supported on Firefox ESR 68.
3784
3785 **Compatibility:** Firefox 62, Firefox ESR 60.2 (Autoplay added in Firefox 74, Firefox ESR 68.6, Autoplay Default/Locked added in Firefox 76, Firefox ESR 68.8, VirtualReality added in Firefox 80, Firefox ESR 78.2)\
3786 **CCK2 Equivalent:** N/A\
3787 **Preferences Affected:** `permissions.default.camera`, `permissions.default.microphone`, `permissions.default.geo`, `permissions.default.desktop-notification`, `media.autoplay.default`, `permissions.default.xr`
3788
3789 #### Windows (GPO)
3790 ```
3791 Software\Policies\Mozilla\Firefox\Permissions\Camera\Allow\1 = "https://example.org"
3792 Software\Policies\Mozilla\Firefox\Permissions\Camera\Allow\2 = "https://example.org:1234"
3793 Software\Policies\Mozilla\Firefox\Permissions\Camera\Block\1 = "https://example.edu"
3794 Software\Policies\Mozilla\Firefox\Permissions\Camera\BlockNewRequests = 0x1 | 0x0
3795 Software\Policies\Mozilla\Firefox\Permissions\Camera\Locked = 0x1 | 0x0
3796 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Allow\1 = "https://example.org"
3797 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Block\1 = "https://example.edu"
3798 Software\Policies\Mozilla\Firefox\Permissions\Microphone\BlockNewRequests = 0x1 | 0x0
3799 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Locked = 0x1 | 0x0
3800 Software\Policies\Mozilla\Firefox\Permissions\Location\Allow\1 = "https://example.org"
3801 Software\Policies\Mozilla\Firefox\Permissions\Location\Block\1 = "https://example.edu"
3802 Software\Policies\Mozilla\Firefox\Permissions\Location\BlockNewRequests = 0x1 | 0x0
3803 Software\Policies\Mozilla\Firefox\Permissions\Location\Locked = 0x1 | 0x0
3804 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Allow\1 = "https://example.org"
3805 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Block\1 = "https://example.edu"
3806 Software\Policies\Mozilla\Firefox\Permissions\Notifications\BlockNewRequests = 0x1 | 0x0
3807 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Locked = 0x1 | 0x0
3808 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Allow\1 = "https://example.org"
3809 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Block\1 = "https://example.edu"
3810 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Default = "allow-audio-video" | "block-audio" | "block-audio-video"
3811 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Locked = 0x1 | 0x0
3812 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\Allow\1 = "https://example.org"
3813 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\Block\1 = "https://example.edu"
3814 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\BlockNewRequests = 0x1 | 0x0
3815 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\Locked = 0x1 | 0x0
3816 ```
3817 #### Windows (Intune)
3818 OMA-URI:
3819 ```
3820 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Location/Location_BlockNewRequests
3821 ```
3822 Value (string):
3823 ```
3824 <enabled/> or <disabled/>
3825 ```
3826 OMA-URI:
3827 ```
3828 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Location/Location_Locked
3829 ```
3830 Value (string):
3831 ```
3832 <enabled/> or <disabled/>
3833 ```
3834 OMA-URI:
3835 ```
3836 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_Allow
3837 ```
3838 Value (string):
3839 ```
3840 <enabled/>
3841 <data id="Permissions" value="1&#xF000;https://example.org"/>
3842 ```
3843 OMA-URI:
3844 ```
3845 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_BlockNewRequests
3846 ```
3847 Value (string):
3848 ```
3849 <enabled/> or <disabled/>
3850 ```
3851 OMA-URI:
3852 ```
3853 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_Locked
3854 ```
3855 Value (string):
3856 ```
3857 <enabled/> or <disabled/>
3858 ```
3859 OMA-URI:
3860 ```
3861 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Allow
3862 ```
3863 Value (string):
3864 ```
3865 <enabled/>
3866 <data id="Permissions" value="1&#xF000;https://example.org"/>
3867 ```
3868 OMA-URI:
3869 ```
3870 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Block
3871 ```
3872 Value (string):
3873 ```
3874 <enabled/>
3875 <data id="Permissions" value="1&#xF000;https://example.edu"/>
3876 ```
3877 OMA-URI:
3878 ```
3879 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Default
3880 ```
3881 Value (string):
3882 ```
3883 <enabled/>
3884 <data id="Autoplay_Default" value="allow-audio-video | block-audio | block-audio-video"/>
3885 ```
3886 OMA-URI:
3887 ```
3888 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Locked
3889 ```
3890 Value (string):
3891 ```
3892 <enabled/> or <disabled/>
3893 ```
3894 OMA-URI:
3895 ```
3896 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_Allow
3897 ```
3898 Value (string):
3899 ```
3900 <enabled/>
3901 <data id="Permissions" value="1&#xF000;https://example.org"/>
3902 ```
3903 OMA-URI:
3904 ```
3905 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_Block
3906 ```
3907 Value (string):
3908 ```
3909 <enabled/>
3910 <data id="Permissions" value="1&#xF000;https://example.edu"/>
3911 ```
3912 OMA-URI:
3913 ```
3914 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_BlockNewRequests
3915 ```
3916 Value (string):
3917 ```
3918 <enabled/> or <disabled/>
3919 ```
3920 OMA-URI:
3921 ```
3922 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_Locked
3923 ```
3924 Value (string):
3925 ```
3926 <enabled/> or <disabled/>
3927 ```
3928 #### macOS
3929 ```
3930 <dict>
3931   <key>Permissions</key>
3932   <dict>
3933     <key>Camera</key>
3934     <dict>
3935       <key>Allow</key>
3936       <array>
3937         <string>https://example.org</string>
3938         <string>https://example.org:1234</string>
3939       </array>
3940       <key>Block</key>
3941       <array>
3942         <string>https://example.edu</string>
3943       </array>
3944       <key>BlockNewRequests</key>
3945       <true/> | <false/>
3946       <key>Locked</key>
3947       <true/> | <false/>
3948     </dict>
3949     <key>Microphone</key>
3950     <dict>
3951       <key>Allow</key>
3952       <array>
3953         <string>https://example.org</string>
3954       </array>
3955       <key>Block</key>
3956       <array>
3957         <string>https://example.edu</string>
3958       </array>
3959       <key>BlockNewRequests</key>
3960       <true/> | <false/>
3961       <key>Locked</key>
3962       <true/> | <false/>
3963     </dict>
3964     <key>Location</key>
3965     <dict>
3966       <key>Allow</key>
3967       <array>
3968         <string>https://example.org</string>
3969       </array>
3970       <key>Block</key>
3971       <array>
3972         <string>https://example.edu</string>
3973       </array>
3974       <key>BlockNewRequests</key>
3975       <true/> | <false/>
3976       <key>Locked</key>
3977       <true/> | <false/>
3978     </dict>
3979     <key>Notifications</key>
3980     <dict>
3981       <key>Allow</key>
3982       <array>
3983         <string>https://example.org</string>
3984       </array>
3985       <key>Block</key>
3986       <array>
3987         <string>https://example.edu</string>
3988       </array>
3989       <key>BlockNewRequests</key>
3990       <true/>
3991       <key>Locked</key>
3992       <true/>
3993     </dict>
3994     <key>Autoplay</key>
3995     <dict>
3996       <key>Allow</key>
3997       <array>
3998         <string>https://example.org</string>
3999       </array>
4000       <key>Block</key>
4001       <array>
4002         <string>https://example.edu</string>
4003       </array>
4004       <key>Default</key>
4005       <string>allow-audio-video | block-audio | block-audio-video</string>
4006       <key>Locked</key>
4007       <true/> | <false/>
4008     </dict>
4009   </dict>
4010 </dict>
4011 ```
4012 #### policies.json
4013 ```
4014 {
4015   "policies": {
4016     "Permissions": {
4017       "Camera": {
4018         "Allow": ["https://example.org","https://example.org:1234"],
4019         "Block": ["https://example.edu"],
4020         "BlockNewRequests": true | false,
4021         "Locked": true | false
4022       },
4023       "Microphone": {
4024         "Allow": ["https://example.org"],
4025         "Block": ["https://example.edu"],
4026         "BlockNewRequests": true | false,
4027         "Locked": true | false
4028       },
4029       "Location": {
4030         "Allow": ["https://example.org"],
4031         "Block": ["https://example.edu"],
4032         "BlockNewRequests": true | false,
4033         "Locked": true | false
4034       },
4035       "Notifications": {
4036         "Allow": ["https://example.org"],
4037         "Block": ["https://example.edu"],
4038         "BlockNewRequests": true | false,
4039         "Locked": true | false
4040       },
4041       "Autoplay": {
4042         "Allow": ["https://example.org"],
4043         "Block": ["https://example.edu"],
4044         "Default": "allow-audio-video" | "block-audio" | "block-audio-video",
4045         "Locked": true | false
4046       }
4047     }
4048   }
4049 }
4050 ```
4051 ### PictureInPicture
4052
4053 Enable or disable Picture-in-Picture as well as prevent the user from enabling or disabling it (Locked).
4054
4055 **Compatibility:** Firefox 78, Firefox ESR 78\
4056 **CCK2 Equivalent:** N/A\
4057 **Preferences Affected:** `media.videocontrols.picture-in-picture.video-toggle.enabled`
4058
4059 #### Windows (GPO)
4060 ```
4061 Software\Policies\Mozilla\Firefox\PictureInPicture\Enabled = 0x1 | 0x0
4062 Software\Policies\Mozilla\Firefox\PictureInPicture\Locked = 0x1 | 0x0
4063
4064 ```
4065 #### Windows (Intune)
4066 OMA-URI:
4067 ```
4068 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PictureInPicture/PictureInPicture_Enabled
4069 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PictureInPicture/PictureInPicture_Locked
4070 ```
4071 Value (string):
4072 ```
4073 <enabled/> or <disabled/>
4074 ```
4075 #### macOS
4076 ```
4077 <dict>
4078   <key>PictureInPicture</key>
4079   <dict>
4080     <key>Enabled</key>
4081     <true/> | <false/>
4082     <key>Locked</key>
4083     <true/> | <false/>
4084   </dict>
4085 </dict>
4086 ```
4087 #### policies.json
4088 ```
4089 {
4090   "policies": {
4091     "PictureInPicture": {
4092       "Enabled": true | false,
4093       "Locked": true | false
4094     }
4095   }
4096 }
4097 ```
4098 ### PopupBlocking
4099 Configure the default pop-up window policy as well as origins for which pop-up windows are allowed.
4100
4101 `Allow` is a list of origins where popup-windows are allowed.
4102
4103 `Default` determines whether or not pop-up windows are allowed by default.
4104
4105 `Locked` prevents the user from changing pop-up preferences.
4106
4107 **Compatibility:** Firefox 60, Firefox ESR 60\
4108 **CCK2 Equivalent:** `permissions.popup`\
4109 **Preferences Affected:** `dom.disable_open_during_load`
4110
4111 #### Windows (GPO)
4112 ```
4113 Software\Policies\Mozilla\Firefox\PopupBlocking\Allow\1 = "https://example.org"
4114 Software\Policies\Mozilla\Firefox\PopupBlocking\Allow\2 = "https://example.edu"
4115 Software\Policies\Mozilla\Firefox\PopupBlocking\Default = 0x1 | 0x0
4116 Software\Policies\Mozilla\Firefox\PopupBlocking\Locked = 0x1 | 0x0
4117 ```
4118 #### Windows (Intune)
4119 OMA-URI:
4120 ```
4121 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Allow
4122 ```
4123 Value (string):
4124 ```
4125 <enabled/>
4126 <data id="Permissions" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
4127 ```
4128 OMA-URI:
4129 ```
4130 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Default
4131 ```
4132 Value (string):
4133 ```
4134 <enabled/> or <disabled/>
4135 ```
4136 OMA-URI:
4137 ```
4138 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Locked
4139 ```
4140 Value (string):
4141 ```
4142 <enabled/> or <disabled/>
4143 ```
4144 #### macOS
4145 ```
4146 <dict>
4147   <key>PopupBlocking</key>
4148   <dict>
4149     <key>Allow</key>
4150     <array>
4151       <string>http://example.org</string>
4152       <string>http://example.edu</string>
4153     </array>
4154     <key>Default</key>
4155     <true/> | <false/>
4156     <key>Locked</key>
4157     <true/> | <false/>
4158   </dict>
4159 </dict>
4160 ```
4161 #### policies.json
4162 ```
4163 {
4164   "policies": {
4165     "PopupBlocking": {
4166       "Allow": ["http://example.org/",
4167                 "http://example.edu/"],
4168       "Default": true | false,
4169       "Locked": true | false
4170     }
4171   }
4172 }
4173 ```
4174 ### Preferences
4175 Set and lock preferences.
4176
4177 **NOTE** On Windows, in order to use this policy, you must clear all settings in the old **Preferences (Deprecated)** section.
4178
4179 Previously you could only set and lock a subset of preferences. Starting with Firefox 81 and Firefox ESR 78.3 you can set many more preferences. You can also set default preferences, user preferences and you can clear preferences.
4180
4181 Preferences that start with the following prefixes are supported:
4182 ```
4183 accessibility.
4184 app.update.* (Firefox 86, Firefox 78.8)
4185 browser.
4186 datareporting.policy.
4187 dom.
4188 extensions.
4189 general.autoScroll (Firefox 83, Firefox ESR 78.5)
4190 general.smoothScroll (Firefox 83, Firefox ESR 78.5)
4191 geo.
4192 gfx.
4193 intl.
4194 keyword.enabled (Firefox 95, Firefox ESR 91.4)
4195 layers.
4196 layout.
4197 media.
4198 network.
4199 pdfjs. (Firefox 84, Firefox ESR 78.6)
4200 places.
4201 print.
4202 signon. (Firefox 83, Firefox ESR 78.5)
4203 spellchecker. (Firefox 84, Firefox ESR 78.6)
4204 toolkit.legacyUserProfileCustomizations.stylesheets (Firefox 95, Firefox ESR 91.4)
4205 ui.
4206 widget.
4207 ```
4208 as well as the following security preferences:
4209 | Preference | Type | Default
4210 | --- | --- | ---
4211 | security.default_personal_cert | string | Ask Every Time
4212 | &nbsp;&nbsp;&nbsp;&nbsp;If set to Select Automatically, Firefox automatically chooses the default personal certificate.
4213 | security.insecure_connection_text.enabled | bool | false
4214 | &nbsp;&nbsp;&nbsp;&nbsp;If set to true, adds the words "Not Secure" for insecure sites.
4215 | security.insecure_connection_text.pbmode.enabled | bool | false
4216 | &nbsp;&nbsp;&nbsp;&nbsp;If set to true, adds the words "Not Secure" for insecure sites in private browsing.
4217 | security.insecure_field_warning.contextual.enabled | bool | true
4218 | &nbsp;&nbsp;&nbsp;&nbsp;If set to false, remove the warning for inscure login fields.
4219 | security.mixed_content.block_active_content | boolean | true
4220 | &nbsp;&nbsp;&nbsp;&nbsp;If false, mixed active content (HTTP and HTTPS) is not blocked.
4221 | security.osclientcerts.autoload | boolean | false
4222 | &nbsp;&nbsp;&nbsp;&nbsp;If true, client certificates are loaded from the operating system certificate store.
4223 | security.ssl.errorReporting.enabled | boolean | true
4224 | &nbsp;&nbsp;&nbsp;&nbsp;If false, SSL errors cannot be sent to Mozilla.
4225 | security.tls.enable_0rtt_data | boolean | true
4226 | &nbsp;&nbsp;&nbsp;&nbsp;If false, TLS early data is turned off (Firefox 93, Firefox 91.2, Firefox 78.15).
4227 | security.tls.hello_downgrade_check | boolean | true
4228 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the TLS 1.3 downgrade check is disabled.
4229 | security.tls.version.enable-deprecated | boolean | false
4230 | &nbsp;&nbsp;&nbsp;&nbsp;If true, browser will accept TLS 1.0. and TLS 1.1 (Firefox 86, Firefox 78.8).
4231 | security.warn_submit_secure_to_insecure | boolean | true
4232 | &nbsp;&nbsp;&nbsp;&nbsp;If false, no warning is shown when submitting s form from https to http.
4233 &nbsp;
4234
4235 Using the preference as the key, set the `Value` to the corresponding preference value.
4236
4237 `Status` can be "default", "locked", "user" or "clear"
4238
4239 Default preferences can be modified by the user.
4240
4241 If a value is locked, it is also set as the default.
4242
4243 User preferences persist across invocations of Firefox. It is the equivalent of a user setting the preference. They are most useful when a preference is needed very early in startup so it can't be set as default by policy. An example of this is ```toolkit.legacyUserProfileCustomizations.stylesheets```.
4244
4245 User preferences persist even if the policy is removed, so if you need to remove them, you should use the clear policy.
4246
4247 See the examples below for more detail.
4248
4249 IMPORTANT: Make sure you're only setting a particular preference using this mechanism and not some other way.
4250
4251 Status
4252 **Compatibility:** Firefox 81, Firefox ESR 78.3\
4253 **CCK2 Equivalent:** `preferences`\
4254 **Preferences Affected:** Many
4255
4256 #### Windows (GPO)
4257 Software\Policies\Mozilla\Firefox\Preferences (REG_MULTI_SZ) =
4258 ```
4259 {
4260   "accessibility.force_disabled": {
4261     "Value": 1,
4262     "Status": "default"
4263   },
4264   "browser.cache.disk.parent_directory": {
4265     "Value": "SOME_NATIVE_PATH",
4266     "Status": "user"
4267   },
4268   "browser.tabs.warnOnClose": {
4269     "Value": false,
4270     "Status": "locked"
4271   }
4272 }
4273 ```
4274 #### Windows (Intune)
4275 OMA-URI:
4276 ```
4277 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Preferences
4278 ```
4279 Value (string):
4280 ```
4281 <enabled/>
4282 <data id="JSON" value='
4283 {
4284   "accessibility.force_disabled": {
4285     "Value": 1,
4286     "Status": "default"
4287   },
4288   "browser.cache.disk.parent_directory": {
4289     "Value": "SOME_NATIVE_PATH",
4290     "Status": "user"
4291   },
4292   "browser.tabs.warnOnClose": {
4293     "Value": false,
4294     "Status": "locked"
4295   }
4296 }'/>
4297 ```
4298 #### macOS
4299 ```
4300 <dict>
4301   <key>Preferences</key>
4302   <dict>
4303     <key>accessibility.force_disabled</key>
4304     <dict>
4305       <key>Value</key>
4306       <integer>1</integer>
4307       <key>Status</key>
4308       <string>default</string>
4309     </dict>
4310     <key>browser.cache.disk.parent_directory</key>
4311     <dict>
4312       <key>Value</key>
4313       <string>SOME_NATIVE_PATH</string>
4314       <key>Status</key>
4315       <string>user</string>
4316     </dict>
4317     <key>browser.tabs.warnOnClose</key>
4318     <dict>
4319       <key>Value</key>
4320       <false/>
4321       <key>Status</key>
4322       <string>locked</string>
4323     </dict>
4324   </dict>
4325 </dict>
4326 ```
4327 #### policies.json
4328 ```
4329 {
4330   "policies": {
4331     "Preferences": {
4332       "accessibility.force_disabled": {
4333         "Value": 1,
4334         "Status": "default"
4335       },
4336       "browser.cache.disk.parent_directory": {
4337         "Value": "SOME_NATIVE_PATH",
4338         "Status": "user"
4339       },
4340       "browser.tabs.warnOnClose": {
4341         "Value": false,
4342         "Status": "locked"
4343       }
4344     }
4345   }
4346 }
4347 ```
4348 ### Preferences (Deprecated)
4349 Set and lock certain preferences.
4350
4351 **Compatibility:** See below\
4352 **CCK2 Equivalent:** `preferences`\
4353 **Preferences Affected:** See below
4354
4355 | Preference | Type | Compatibility | Default
4356 | --- | --- | --- | ---
4357 | accessibility.force_disabled | integer | Firefox 70, Firefox ESR 68.2 | 0
4358 | &nbsp;&nbsp;&nbsp;&nbsp;If set to 1, platform accessibility is disabled.
4359 | app.update.auto (Deprecated - Switch to AppAutoUpdate policy) | boolean | Firefox 68, Firefox ESR 68 | true
4360 | &nbsp;&nbsp;&nbsp;&nbsp;If false, Firefox doesn't automatically install update.
4361 | browser.bookmarks.autoExportHTML | boolean | Firefox 70, Firefox ESR 68.2 | false
4362 | &nbsp;&nbsp;&nbsp;&nbsp;If true, bookmarks are exported on shutdown.
4363 | browser.bookmarks.file | string | Firefox 70, Firefox ESR 68.2 | N/A
4364 | &nbsp;&nbsp;&nbsp;&nbsp;If set, the name of the file where bookmarks are exported and imported.
4365 | browser.bookmarks.restore_default_bookmarks | boolean | Firefox 70, Firefox ESR 68.2 | N/A
4366 | &nbsp;&nbsp;&nbsp;&nbsp;If true, bookmarks are restored to their defaults.
4367 | browser.cache.disk.enable | boolean | Firefox 68, Firefox ESR 68 | true
4368 | &nbsp;&nbsp;&nbsp;&nbsp;If false, don't store cache on the hard drive.
4369 | ~browser.cache.disk.parent_directory~ | string | Firefox 68, Firefox ESR 68 | Profile temporary directory
4370 | &nbsp;&nbsp;&nbsp;&nbsp;~If set, changes the location of the disk cache.~ This policy doesn't work. It's being worked on.
4371 | browser.fixup.dns_first_for_single_words | boolean | Firefox 68, Firefox ESR 68 | false
4372 | &nbsp;&nbsp;&nbsp;&nbsp;If true, single words are sent to DNS, not directly to search.
4373 | browser.newtabpage.activity-stream.default.sites | string | Firefox 72, ESR 68.4 | Locale dependent
4374 | &nbsp;&nbsp;&nbsp;&nbsp;If set, a list of URLs to use as the default top sites on the new tab page. Due to Firefox limitations, search sites can't be added. In addition, sites with the same name but different TLDs (example.org/example.com) will not display properly.
4375 | browser.places.importBookmarksHTML | boolean | Firefox 70, Firefox ESR 68.2
4376 | &nbsp;&nbsp;&nbsp;&nbsp;If true, bookmarks are always imported on startup.
4377 | browser.safebrowsing.phishing.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
4378 | &nbsp;&nbsp;&nbsp;&nbsp;If false, phishing protection is not enabled (Not recommended)
4379 | browser.safebrowsing.malware.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
4380 | &nbsp;&nbsp;&nbsp;&nbsp;If false, malware protection is not enabled (Not recommended)
4381 | browser.search.update | boolean | Firefox 68, Firefox ESR 68 | true
4382 | &nbsp;&nbsp;&nbsp;&nbsp;If false, updates for search engines are not checked.
4383 | browser.slowStartup.notificationDisabled | boolean | Firefox 70, Firefox ESR 68.2 | false
4384 | &nbsp;&nbsp;&nbsp;&nbsp;If true, a notification isn't shown if startup is slow.
4385 | browser.tabs.warnOnClose | boolean | Firefox 68, Firefox ESR 68 | true
4386 | &nbsp;&nbsp;&nbsp;&nbsp;If false, there is no warning when the browser is closed.
4387 | browser.taskbar.previews.enable | boolean | Firefox 70, Firefox ESR 68.2 (Windows only) | false
4388 | &nbsp;&nbsp;&nbsp;&nbsp;If true, tab previews are shown in the Windows taskbar.
4389 | browser.urlbar.suggest.bookmark | boolean | Firefox 68, Firefox ESR 68 | true
4390 | &nbsp;&nbsp;&nbsp;&nbsp;If false, bookmarks aren't suggested when typing in the URL bar.
4391 | browser.urlbar.suggest.history | boolean | Firefox 68, Firefox ESR 68 | true
4392 | &nbsp;&nbsp;&nbsp;&nbsp;If false, history isn't suggested when typing in the URL bar.
4393 | browser.urlbar.suggest.openpage | boolean | Firefox 68, Firefox ESR 68 | true
4394 | &nbsp;&nbsp;&nbsp;&nbsp;If false, open tabs aren't suggested when typing in the URL bar.
4395 | datareporting.policy.dataSubmissionPolicyBypassNotification | boolean | Firefox 68, Firefox ESR 68 | false
4396 | &nbsp;&nbsp;&nbsp;&nbsp;If true, don't show the privacy policy tab on first run.
4397 | dom.allow_scripts_to_close_windows | boolean | Firefox 70, Firefox ESR 68.2 | false
4398 | &nbsp;&nbsp;&nbsp;&nbsp;If false, web page can close windows.
4399 | dom.disable_window_flip | boolean | Firefox 68, Firefox ESR 68 | true
4400 | &nbsp;&nbsp;&nbsp;&nbsp;If false, web pages can focus and activate windows.
4401 | dom.disable_window_move_resize | boolean | Firefox 68, Firefox ESR 68 | false
4402 | &nbsp;&nbsp;&nbsp;&nbsp;If true, web pages can't move or resize windows.
4403 | dom.event.contextmenu.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4404 | &nbsp;&nbsp;&nbsp;&nbsp;If false, web pages can't override context menus.
4405 | dom.keyboardevent.keypress.hack.dispatch_non_printable_keys.addl | string | Firefox 68, Firefox ESR 68 | N/A
4406 | &nbsp;&nbsp;&nbsp;&nbsp;See https://support.mozilla.org/en-US/kb/dom-events-changes-introduced-firefox-66
4407 | dom.keyboardevent.keypress.hack.use_legacy_keycode_and_charcode.addl | string | Firefox 68, Firefox ESR 68 | N/A
4408 | &nbsp;&nbsp;&nbsp;&nbsp;See https://support.mozilla.org/en-US/kb/dom-events-changes-introduced-firefox-66
4409 | dom.xmldocument.load.enabled | boolean | Firefox ESR 68.5 | true.
4410 | &nbsp;&nbsp;&nbsp;&nbsp;If false, XMLDocument.load is not available.
4411 | dom.xmldocument.async.enabled | boolean | Firefox ESR 68.5 | true
4412 | &nbsp;&nbsp;&nbsp;&nbsp;If false, XMLDocument.async is not available.
4413 | extensions.blocklist.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
4414 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the extensions blocklist is not used (Not recommended)
4415 | extensions.getAddons.showPane | boolean | Firefox 68, Firefox ESR 68 | N/A
4416 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the Recommendations tab is not displayed in the Add-ons Manager.
4417 | extensions.htmlaboutaddons.recommendations.enabled | boolean | Firefox 72, Firefox ESR 68.4 | true
4418 | &nbsp;&nbsp;&nbsp;&nbsp;If false, recommendations are not shown on the Extensions tab in the Add-ons Manager.
4419 | geo.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
4420 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the geolocation API is disabled. | Language dependent
4421 | intl.accept_languages | string | Firefox 70, Firefox ESR 68.2
4422 | &nbsp;&nbsp;&nbsp;&nbsp;If set, preferred language for web pages.
4423 | media.eme.enabled (Deprecated - Switch to EncryptedMediaExtensions policy) | boolean | Firefox 70, Firefox ESR 68.2 | true
4424 | &nbsp;&nbsp;&nbsp;&nbsp;If false, Encrypted Media Extensions are not enabled.
4425 | media.gmp-gmpopenh264.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4426 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the OpenH264  plugin is not downloaded.
4427 | media.gmp-widevinecdm.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4428 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the Widevine plugin is not downloaded.
4429 | media.peerconnection.enabled | boolean | Firefox 72, Firefox ESR 68.4 | true
4430 | &nbsp;&nbsp;&nbsp;&nbsp;If false, WebRTC is disabled
4431 | media.peerconnection.ice.obfuscate_host_addresses.whitelist (Deprecated) | string | Firefox 72, Firefox ESR 68.4 | N/A
4432 | &nbsp;&nbsp;&nbsp;&nbsp;If set, a list of domains for which mDNS hostname obfuscation is
4433 disabled
4434 | media.peerconnection.ice.obfuscate_host_addresses.blocklist | string | Firefox 79, Firefox ESR 78.1 | N/A
4435 | &nbsp;&nbsp;&nbsp;&nbsp;If set, a list of domains for which mDNS hostname obfuscation is
4436 disabled
4437 | network.dns.disableIPv6 | boolean | Firefox 68, Firefox ESR 68 | false
4438 | &nbsp;&nbsp;&nbsp;&nbsp;If true, IPv6 DNS lokoups are disabled.
4439 | network.IDN_show_punycode | boolean | Firefox 68, Firefox ESR 68 | false
4440 | &nbsp;&nbsp;&nbsp;&nbsp;If true, display the punycode version of internationalized domain names.
4441 | places.history.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4442 | &nbsp;&nbsp;&nbsp;&nbsp;If false, history is not enabled.
4443 | print.save_print_settings | boolean | Firefox 70, Firefox ESR 68.2 | true
4444 | &nbsp;&nbsp;&nbsp;&nbsp;If false, print settings are not saved between jobs.
4445 | security.default_personal_cert | string | Firefox 68, Firefox ESR 68 | Ask Every Time
4446 | &nbsp;&nbsp;&nbsp;&nbsp;If set to Select Automatically, Firefox automatically chooses the default personal certificate.
4447 | security.mixed_content.block_active_content | boolean | Firefox 70, Firefox ESR 68.2 | true
4448 | &nbsp;&nbsp;&nbsp;&nbsp;If false, mixed active content (HTTP and HTTPS) is not blocked.
4449 | security.osclientcerts.autoload | boolean | Firefox 72 (Windows), Firefox 75 (macOS)  | false
4450 | &nbsp;&nbsp;&nbsp;&nbsp;If true, client certificates are loaded from the operating system certificate store.
4451 | security.ssl.errorReporting.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4452 | &nbsp;&nbsp;&nbsp;&nbsp;If false, SSL errors cannot be sent to Mozilla.
4453 | security.tls.hello_downgrade_check | boolean | Firefox 72, Firefox ESR 68.4 | true
4454 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the TLS 1.3 downgrade check is disabled.
4455 | ui.key.menuAccessKeyFocuses | boolean | Firefox 68, Firefox ESR 68 | true
4456 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the Alt key doesn't show the menubar on Windows.
4457 | widget.content.gtk-theme-override | string | Firefox 72, Firefox ESR 68.4 (Linux only) | N/A
4458 | &nbsp;&nbsp;&nbsp;&nbsp;If set, overrides the GTK theme for widgets.
4459 #### Windows (GPO)
4460 ```
4461 Software\Policies\Mozilla\Firefox\Preferences\boolean_preference_name = 0x1 | 0x0
4462 Software\Policies\Mozilla\Firefox\Preferences\string_preference_name = "string_value"
4463 ```
4464 #### Windows (Intune)
4465 OMA-URI: (periods are replaced by underscores)
4466 ```
4467 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Preferences/boolean_preference_name
4468 ```
4469 Value (string):
4470 ```
4471 <enabled/> or <disabled/>
4472 ```
4473 OMA-URI: (periods are replaced by underscores)
4474 ```
4475 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Preferences/string_preference_name
4476 ```
4477 Value (string):
4478 ```
4479 <enabled/>
4480 <data id="Preferences_String" value="string_value"/>
4481 ```
4482 #### macOS
4483 ```
4484 <dict>
4485   <key>Preferences</key>
4486   <dict>
4487     <key>boolean_preference_name</key>
4488     <true/> | <false/>
4489     <key>string_preference_name</key>
4490     <string>string_value</string>
4491   </dict>
4492 </dict>
4493 ```
4494 #### policies.json
4495 ```
4496 {
4497   "policies": {
4498     "Preferences": {
4499       "boolean_preference_name": true | false,
4500       "string_preference_name": "string_value"
4501     }
4502   }
4503 }
4504 ```
4505 ### PrimaryPassword
4506 Require or prevent using a primary (formerly master) password.
4507
4508 If this value is true, a primary password is required. If this value is false, it works the same as if [`DisableMasterPasswordCreation`](#disablemasterpasswordcreation) was true and removes the primary password functionality.
4509
4510 If both DisableMasterPasswordCreation and PrimaryPassword are used, DisableMasterPasswordCreation takes precedent.
4511
4512 **Compatibility:** Firefox 79, Firefox ESR 78.1\
4513 **CCK2 Equivalent:** `noMasterPassword`\
4514 **Preferences Affected:** N/A
4515
4516 #### Windows (GPO)
4517 ```
4518 Software\Policies\Mozilla\Firefox\PrimaryPassword = 0x1 | 0x0
4519 ```
4520 #### Windows (Intune)
4521 OMA-URI:
4522 ```
4523 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PrimaryPassword
4524 ```
4525 Value (string):
4526 ```
4527 <enabled/> or <disabled/>
4528 ```
4529 #### macOS
4530 ```
4531 <dict>
4532   <key>PrimaryPassword</key>
4533   <true/> | <false/>
4534 </dict>
4535 ```
4536 #### policies.json
4537 ```
4538 {
4539   "policies": {
4540     "PrimaryPassword": true | false
4541   }
4542 }
4543 ```
4544 ### PromptForDownloadLocation
4545 Ask where to save each file before downloading.
4546
4547 **Compatibility:** Firefox 68, Firefox ESR 68\
4548 **CCK2 Equivalent:** N/A\
4549 **Preferences Affected:** `browser.download.useDownloadDir`
4550
4551 #### Windows (GPO)
4552 ```
4553 Software\Policies\Mozilla\Firefox\PromptForDownloadLocation = 0x1 | 0x0
4554 ```
4555 #### Windows (Intune)
4556 OMA-URI:
4557 ```
4558 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PromptForDownloadLocation
4559 ```
4560 Value (string):
4561 ```
4562 <enabled/> or <disabled/>
4563 ```
4564 #### macOS
4565 ```
4566 <dict>
4567   <key>PromptForDownloadLocation</key>
4568   <true/> | <false/>
4569 </dict>
4570 ```
4571 #### policies.json
4572 ```
4573 {
4574   "policies": {
4575     "PromptForDownloadLocation": true | false
4576   }
4577 }
4578 ```
4579 ### Proxy
4580 Configure proxy settings. These settings correspond to the connection settings in Firefox preferences.
4581 To specify ports, append them to the hostnames with a colon (:).
4582
4583 `Mode` is the proxy method being used.
4584
4585 `Locked` is whether or not proxy settings can be changed.
4586
4587 `HTTPProxy` is the HTTP proxy server.
4588
4589 `UseHTTPProxyForAllProtocols` is whether or not the HTTP proxy should be used for all other proxies.
4590
4591 `SSLProxy` is the SSL proxy server.
4592
4593 `FTPProxy` is the FTP proxy server.
4594
4595 `SOCKSProxy` is the SOCKS proxy server
4596
4597 `SOCKSVersion` is the SOCKS version (4 or 5)
4598
4599 `Passthrough` is list of hostnames or IP addresses that will not be proxied. Use `<local>` to bypass proxying for all hostnames which do not contain periods.
4600
4601 `AutoConfigURL` is a  URL for proxy configuration (only used if Mode is autoConfig).
4602
4603 `AutoLogin` means do not prompt for authentication if password is saved.
4604
4605 `UseProxyForDNS` to use proxy DNS when using SOCKS v5.
4606
4607 **Compatibility:** Firefox 60, Firefox ESR 60\
4608 **CCK2 Equivalent:** `networkProxy*`\
4609 **Preferences Affected:** `network.proxy.type`, `network.proxy.autoconfig_url`, `network.proxy.socks_remote_dns`, `signon.autologin.proxy`, `network.proxy.socks_version`, `network.proxy.no_proxies_on`, `network.proxy.share_proxy_settings`, `network.proxy.http`, `network.proxy.http_port`, `network.proxy.ftp`, `network.proxy.ftp_port`, `network.proxy.ssl`, `network.proxy.ssl_port`, `network.proxy.socks`, `network.proxy.socks_port`
4610
4611 #### Windows (GPO)
4612 ```
4613 Software\Policies\Mozilla\Firefox\Proxy\Mode = "none" | "system" | "manual" | "autoDetect" | "autoConfig"
4614 Software\Policies\Mozilla\Firefox\Proxy\Locked = 0x1 | 0x0
4615 Software\Policies\Mozilla\Firefox\=Proxy\HTTPProxy = https://httpproxy.example.com
4616 Software\Policies\Mozilla\Firefox\Proxy\UseHTTPProxyForAllProtocols = 0x1 | 0x0
4617 Software\Policies\Mozilla\Firefox\Proxy\SSLProxy = https://sslproxy.example.com
4618 Software\Policies\Mozilla\Firefox\Proxy\FTPProxy = https://ftpproxy.example.com
4619 Software\Policies\Mozilla\Firefox\Proxy\SOCKSProxy = https://socksproxy.example.com
4620 Software\Policies\Mozilla\Firefox\Proxy\SOCKSVersion = 0x4 | 0x5
4621 Software\Policies\Mozilla\Firefox\Proxy\Passthrough = <local>
4622 Software\Policies\Mozilla\Firefox\Proxy\AutoConfigURL = URL_TO_AUTOCONFIG
4623 Software\Policies\Mozilla\Firefox\Proxy\AutoLogin = 0x1 | 0x0
4624 Software\Policies\Mozilla\Firefox\Proxy\UseProxyForDNS = 0x1 | 0x0
4625 ```
4626 #### Windows (Intune)
4627 OMA-URI:
4628 ```
4629 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Proxy
4630 ```
4631 Value (string):
4632 ```
4633 <enabled/>
4634 <data id="ProxyLocked" value="true | false"/>
4635 <data id="ConnectionType" value="none | system | manual | autoDetect | autoConfig"/>
4636 <data id="HTTPProxy" value="https://httpproxy.example.com"/>
4637 <data id="UseHTTPProxyForAllProtocols" value="true | false"/>
4638 <data id="SSLProxy" value="https://sslproxy.example.com"/>
4639 <data id="FTPProxy" value="https://ftpproxy.example.com"/>
4640 <data id="SOCKSProxy" value="https://socksproxy.example.com"/>
4641 <data id="SOCKSVersion" value="4 | 5"/>
4642 <data id="AutoConfigURL" value="URL_TO_AUTOCONFIG"/>
4643 <data id="Passthrough" value="<local>"/>
4644 <data id="AutoLogin" value="true | false"/>
4645 <data id="UseProxyForDNS" value="true | false"/>
4646 ```
4647 #### macOS
4648 ```
4649 <dict>
4650   <key>Proxy</key>
4651   <dict>
4652     <key>Mode</key>
4653     <string>none | system | manual | autoDetect | autoConfig</string>
4654     <key>Locked</key>
4655     <true> | </false>
4656     <key>HTTPProxy</key>
4657     <string>https://httpproxy.example.com</string>
4658     <key>UseHTTPProxyForAllProtocols</key>
4659     <true> | </false>
4660     <key>SSLProxy</key>
4661     <string>https://sslproxy.example.com</string>
4662     <key>FTPProxy</key>
4663     <string>https://ftpproxy.example.com</string>
4664     <key>SOCKSProxy</key>
4665     <string>https://socksproxy.example.com</string>
4666     <key>SOCKSVersion</key>
4667     <string>4 | 5</string>
4668     <key>Passthrough</key>
4669     <string>&lt;local>&gt;</string>
4670     <key>AutoConfigURL</key>
4671     <string>URL_TO_AUTOCONFIG</string>
4672     <key>AutoLogin</key>
4673     <true> | </false>
4674     <key>UseProxyForDNS</key>
4675     <true> | </false>
4676   </dict>
4677 </dict>
4678 ```
4679 #### policies.json
4680 ```
4681 {
4682   "policies": {
4683     "Proxy": {
4684       "Mode": "none" | "system" | "manual" | "autoDetect" | "autoConfig",
4685       "Locked": true | false,
4686       "HTTPProxy": "hostname",
4687       "UseHTTPProxyForAllProtocols": true | false,
4688       "SSLProxy": "hostname",
4689       "FTPProxy": "hostname",
4690       "SOCKSProxy": "hostname",
4691       "SOCKSVersion": 4 | 5,
4692       "Passthrough": "<local>",
4693       "AutoConfigURL": "URL_TO_AUTOCONFIG",
4694       "AutoLogin": true | false,
4695       "UseProxyForDNS": true | false
4696     }
4697   }
4698 }
4699 ```
4700 ### RequestedLocales
4701 Set the the list of requested locales for the application in order of preference. It will cause the corresponding language pack to become active.
4702
4703 Note: For Firefox 68, this can now be a string so that you can specify an empty value.
4704
4705 **Compatibility:** Firefox 64, Firefox ESR 60.4, Updated in Firefox 68, Firefox ESR 68\
4706 **CCK2 Equivalent:** N/A\
4707 **Preferences Affected:** N/A
4708 #### Windows (GPO)
4709 ```
4710 Software\Policies\Mozilla\Firefox\RequestedLocales\1 = "de"
4711 Software\Policies\Mozilla\Firefox\RequestedLocales\2 = "en-US"
4712
4713 or
4714
4715 Software\Policies\Mozilla\Firefox\RequestedLocales = "de,en-US"
4716 ```
4717 #### Windows (Intune)
4718 OMA-URI:
4719 ```
4720 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/RequestedLocalesString
4721 ```
4722 Value (string):
4723 ```
4724 <enabled/>
4725 <data id="Preferences_String" value="de,en-US"/>
4726 ```
4727 #### macOS
4728 ```
4729 <dict>
4730   <key>RequestedLocales</key>
4731   <array>
4732     <string>de</string>
4733     <string>en-US</string>
4734   </array>
4735 </dict>
4736
4737 or
4738
4739 <dict>
4740   <key>RequestedLocales</key>
4741   <string>de,en-US</string>
4742 </dict>
4743
4744 ```
4745 #### policies.json
4746 ```
4747 {
4748   "policies": {
4749     "RequestedLocales": ["de", "en-US"]
4750   }
4751 }
4752
4753 or
4754
4755 {
4756   "policies": {
4757     "RequestedLocales": "de,en-US"
4758   }
4759 }
4760 ```
4761 <a name="SanitizeOnShutdown"></a>
4762
4763 ### SanitizeOnShutdown (Selective)
4764 Clear data on shutdown. Choose from Cache, Cookies, Download History, Form & Search History, Browsing History, Active Logins, Site Preferences and Offline Website Data.
4765
4766 Previously, these values were always locked. Starting with Firefox 74 and Firefox ESR 68.6, you can use the `Locked` option to either keep the values unlocked (set it to false), or lock only the values you set (set it to true). If you want the old behavior of locking everything, do not set `Locked` at all.
4767
4768 **Compatibility:** Firefox 68, Firefox ESR 68 (Locked added in 74/68.6)\
4769 **CCK2 Equivalent:** N/A\
4770 **Preferences Affected:** `privacy.sanitize.sanitizeOnShutdown`, `privacy.clearOnShutdown.cache`, `privacy.clearOnShutdown.cookies`, `privacy.clearOnShutdown.downloads`, `privacy.clearOnShutdown.formdata`, `privacy.clearOnShutdown.history`, `privacy.clearOnShutdown.sessions`, `privacy.clearOnShutdown.siteSettings`, `privacy.clearOnShutdown.offlineApps`
4771 #### Windows (GPO)
4772 ```
4773 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Cache = 0x1 | 0x0
4774 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Cookies = 0x1 | 0x0
4775 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Downloads = 0x1 | 0x0
4776 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\FormData = 0x1 | 0x0
4777 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\History = 0x1 | 0x0
4778 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Sessions = 0x1 | 0x0
4779 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\SiteSettings = 0x1 | 0x0
4780 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\OfflineApps = 0x1 | 0x0
4781 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Locked = 0x1 | 0x0
4782 ```
4783 #### Windows (Intune)
4784 OMA-URI:
4785 ```
4786 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/A_SanitizeOnShutdown_Cache
4787 ```
4788 Value (string):
4789 ```
4790 <enabled/> or <disabled/>
4791 ```
4792 OMA-URI:
4793 ```
4794 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/B_SanitizeOnShutdown_Cookies
4795 ```
4796 Value (string):
4797 ```
4798 <enabled/> or <disabled/>
4799 ```
4800 OMA-URI:
4801 ```
4802 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/C_SanitizeOnShutdown_Downloads
4803 ```
4804 Value (string):
4805 ```
4806 <enabled/> or <disabled/>
4807 ```
4808 OMA-URI:
4809 ```
4810 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/D_SanitizeOnShutdown_FormData
4811 ```
4812 Value (string):
4813 ```
4814 <enabled/> or <disabled/>
4815 ```
4816 OMA-URI:
4817 ```
4818 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/E_SanitizeOnShutdown_History
4819 ```
4820 Value (string):
4821 ```
4822 <enabled/> or <disabled/>
4823 ```
4824 OMA-URI:
4825 ```
4826 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/F_SanitizeOnShutdown_Sessions
4827 ```
4828 Value (string):
4829 ```
4830 <enabled/> or <disabled/>
4831 ```
4832 OMA-URI:
4833 ```
4834 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/G_SanitizeOnShutdown_SiteSettings
4835 ```
4836 Value (string):
4837 ```
4838 <enabled/> or <disabled/>
4839 ```
4840 OMA-URI:
4841 ```
4842 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/H_SanitizeOnShutdown_OfflineApps
4843 ```
4844 Value (string):
4845 ```
4846 <enabled/> or <disabled/>
4847 ```
4848 OMA-URI:
4849 ```
4850 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/I_SanitizeOnShutdown_Locked
4851 ```
4852 Value (string):
4853 ```
4854 <enabled/> or <disabled/>
4855 ```
4856 #### macOS
4857 ```
4858 <dict>
4859   <key>SanitizeOnShutdown</key>
4860   <dict>
4861     <key>Cache</key>
4862     <true/> | <false/>
4863     <key>Cookies</key>
4864     <true/> | <false/>
4865     <key>Downloads</key>
4866     <true/> | <false/>
4867     <key>FormData</key>
4868     <true/> | <false/>
4869     <key>History</key>
4870     <true/> | <false/>
4871     <key>Sessions</key>
4872     <true/> | <false/>
4873     <key>SiteSettings</key>
4874     <true/> | <false/>
4875     <key>OfflineApps</key>
4876     <true/> | <false/>
4877     <key>Locked</key>
4878     <true/> | <false/>
4879   </dict>
4880 </dict>
4881 ```
4882 #### policies.json
4883 ```
4884 {
4885   "policies": {
4886     "SanitizeOnShutdown": {
4887       "Cache": true | false,
4888       "Cookies": true | false,
4889       "Downloads": true | false,
4890       "FormData": true | false,
4891       "History": true | false,
4892       "Sessions": true | false,
4893       "SiteSettings": true | false,
4894       "OfflineApps": true | false,
4895       "Locked": true | false
4896     }
4897   }
4898 }
4899 ```
4900 ### SanitizeOnShutdown (All)
4901 Clear all data on shutdown, including Browsing & Download History, Cookies, Active Logins, Cache, Form & Search History, Site Preferences and Offline Website Data.
4902
4903 **Compatibility:** Firefox 60, Firefox ESR 60\
4904 **CCK2 Equivalent:** N/A\
4905 **Preferences Affected:** `privacy.sanitize.sanitizeOnShutdown`, `privacy.clearOnShutdown.cache`, `privacy.clearOnShutdown.cookies`, `privacy.clearOnShutdown.downloads`, `privacy.clearOnShutdown.formdata`, `privacy.clearOnShutdown.history`, `privacy.clearOnShutdown.sessions`, `privacy.clearOnShutdown.siteSettings`, `privacy.clearOnShutdown.offlineApps`
4906 #### Windows (GPO)
4907 ```
4908 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown = 0x1 | 0x0
4909 ```
4910 #### Windows (Intune)
4911 OMA-URI:
4912 ```
4913 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/C_SanitizeOnShutdown
4914 ```
4915 Value (string):
4916 ```
4917 <enabled/> or <disabled/>
4918 ```
4919 #### macOS
4920 ```
4921 <dict>
4922   <key>SanitizeOnShutdown</key>
4923   <true/> | <false/>
4924 </dict>
4925 ```
4926 #### policies.json
4927 ```
4928 {
4929   "policies": {
4930     "SanitizeOnShutdown": true | false
4931   }
4932 }
4933 ```
4934 ### SearchBar
4935 Set whether or not search bar is displayed.
4936
4937 **Compatibility:** Firefox 60, Firefox ESR 60\
4938 **CCK2 Equivalent:** `showSearchBar`\
4939 **Preferences Affected:** N/A
4940
4941 #### Windows (GPO)
4942 ```
4943 Software\Policies\Mozilla\Firefox\SearchBar = "unified" | "separate"
4944 ```
4945
4946 #### Windows (Intune)
4947 OMA-URI:
4948 ```
4949 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SearchBar
4950 ```
4951 Value (string):
4952 ```
4953 <enabled/>
4954 <data id="SearchBar" value="unified | separate"/>
4955 ```
4956 #### macOS
4957 ```
4958 <dict>
4959   <key>SearchBar</key>
4960   <string>unified | separate</string>
4961 </dict>
4962 ```
4963 #### policies.json
4964 ```
4965 {
4966   "policies": {
4967     "SearchBar": "unified" | "separate"
4968   }
4969 }
4970 ```
4971 <a name="SearchEngines"></a>
4972
4973 ### SearchEngines (This policy is only available on the ESR.)
4974
4975 ### SearchEngines | Add
4976
4977 Add new search engines (up to five). This policy is only available on the ESR. `Name` and `URLTemplate` are required.
4978
4979 `Name` is the name of the search engine.
4980
4981 `URLTemplate` is the search URL with {searchTerms} to substitute for the search term.
4982
4983 `Method` is either GET or POST
4984
4985 `IconURL` is a URL for the icon to use.
4986
4987 `Alias` is a keyword to use for the engine.
4988
4989 `Description` is a description of the search engine.
4990
4991 `PostData` is the POST data as name value pairs separated by &.
4992
4993 `SuggestURLTemplate` is a search suggestions URL with {searchTerms} to substitute for the search term.
4994
4995 `Encoding` is the query charset for the engine. It defaults to UTF-8.
4996
4997 **Compatibility:** Firefox ESR 60 (POST support in Firefox ESR 68, Encoding support in Firefox 91)\
4998 **CCK2 Equivalent:** `searchplugins`\
4999 **Preferences Affected:** N/A
5000
5001 #### Windows (GPO)
5002 ```
5003 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Name = "Example1"
5004 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\URLTemplate = "https://www.example.org/q={searchTerms}"
5005 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Method = "GET" | "POST"
5006 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\IconURL = "https://www.example.org/favicon.ico"
5007 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Alias = "example"
5008 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Description = "Example Description"
5009 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\SuggestURLTemplate = "https://www.example.org/suggestions/q={searchTerms}"
5010 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\PostData = "name=value&q={searchTerms}"
5011 ```
5012 #### Windows (Intune)
5013 OMA-URI:
5014 ```
5015 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_1
5016 ```
5017 Value (string):
5018 ```
5019 <enabled/>
5020 <data id="SearchEngine_Name" value="Example1"/>
5021 <data id="SearchEngine_URLTemplate" value="https://www.example.org/q={searchTerms"/>
5022 <data id="SearchEngine_Method" value="GET | POST"/>
5023 <data id="SearchEngine_IconURL" value="https://www.example.org/favicon.ico"/>
5024 <data id="SearchEngine_Alias" value="example"/>
5025 <data id="SearchEngine_Description" value="Example Description"/>
5026 <data id="SearchEngine_SuggestURLTemplate" value="https://www.example.org/suggestions/q={searchTerms}"/>
5027 <data id="SearchEngine_PostData" value="name=value&amp;q={searchTerms}"/>
5028 ```
5029 #### macOS
5030 ```
5031 <dict>
5032   <key>SearchEngines</key>
5033   <dict>
5034     <key>Add</key>
5035     <array>
5036       <dict>
5037         <key>Name</key>
5038         <string>Example1</string>
5039         <key>URLTemplate</key>
5040         <string>https://www.example.org/q={searchTerms}</string>
5041         <key>Method</key>
5042         <string>GET | POST </string>
5043         <key>IconURL</key>
5044         <string>https://www.example.org/favicon.ico</string>
5045         <key>Alias</key>
5046         <string>example</string>
5047         <key>Description</key>
5048         <string>Example Description</string>
5049         <key>SuggestURLTemplate</key>
5050         <string>https://www.example.org/suggestions/q={searchTerms}</string>
5051         <key>PostData</key>
5052         <string>name=value&q={searchTerms}</string>
5053       </dict>
5054     <array>
5055   </dict>
5056 </dict>
5057 ```
5058 #### policies.json
5059 ```
5060 {
5061   "policies": {
5062     "SearchEngines": {
5063       "Add": [
5064         {
5065           "Name": "Example1",
5066           "URLTemplate": "https://www.example.org/q={searchTerms}",
5067           "Method": "GET" | "POST",
5068           "IconURL": "https://www.example.org/favicon.ico",
5069           "Alias": "example",
5070           "Description": "Description",
5071           "PostData": "name=value&q={searchTerms}",
5072           "SuggestURLTemplate": "https://www.example.org/suggestions/q={searchTerms}"
5073         }
5074       ]
5075     }
5076   }
5077 }
5078 ```
5079 ### SearchEngines | Default
5080
5081 Set the default search engine. This policy is only available on the ESR.
5082
5083 **Compatibility:** Firefox ESR 60\
5084 **CCK2 Equivalent:** `defaultSearchEngine`\
5085 **Preferences Affected:** N/A
5086
5087 #### Windows (GPO)
5088 ```
5089 Software\Policies\Mozilla\Firefox\SearchEngines\Default = NAME_OF_SEARCH_ENGINE
5090 ```
5091 #### Windows (Intune)
5092 OMA-URI:
5093 ```
5094 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_Default
5095 ```
5096 Value (string):
5097 ```
5098 <enabled/>
5099 <data id="SearchEngines_Default" value="NAME_OF_SEARCH_ENGINE"/>
5100 ```
5101 #### macOS
5102 ```
5103 <dict>
5104   <key>SearchEngines</key>
5105   <dict>
5106     <key>Default</key>
5107     <string>NAME_OF_SEARCH_ENGINE</string>
5108   </dict>
5109 </dict>
5110 ```
5111 #### policies.json
5112 ```
5113 {
5114   "policies": {
5115     "SearchEngines": {
5116       "Default": "NAME_OF_SEARCH_ENGINE"
5117     }
5118   }
5119 }
5120 ```
5121 ### SearchEngines | PreventInstalls
5122
5123 Prevent installing search engines from webpages.
5124
5125 **Compatibility:** Firefox ESR 60\
5126 **CCK2 Equivalent:** `disableSearchEngineInstall`\
5127 **Preferences Affected:** N/A
5128
5129 #### Windows (GPO)
5130 ```
5131 Software\Policies\Mozilla\Firefox\SearchEngines\PreventInstalls = 0x1 | 0x0
5132 ```
5133 #### Windows (Intune)
5134 OMA-URI:
5135 ```
5136 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_PreventInstalls
5137 ```
5138 Value (string):
5139 ```
5140 <enabled/> or <disabled/>
5141 ```
5142 #### macOS
5143 ```
5144 <dict>
5145   <key>SearchEngines</key>
5146   <dict>
5147     <key>PreventInstalls</key>
5148     <true/> | <false/>
5149   </dict>
5150 </dict>
5151 ```
5152 #### policies.json
5153 ```
5154 {
5155   "policies": {
5156     "SearchEngines": {
5157       "PreventInstalls": true | false
5158     }
5159   }
5160 }
5161 ```
5162 ### SearchEngines | Remove
5163
5164 Hide built-in search engines. This policy is only available on the ESR.
5165
5166 **Compatibility:** Firefox ESR 60.2\
5167 **CCK2 Equivalent:** `removeDefaultSearchEngines` (removed all built-in engines)\
5168 **Preferences Affected:** N/A
5169
5170 #### Windows (GPO)
5171 ```
5172 Software\Policies\Mozilla\Firefox\SearchEngines\Remove\1 = NAME_OF_SEARCH_ENGINE
5173 ```
5174 #### Windows (Intune)
5175 OMA-URI:
5176 ```
5177 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_Remove
5178 ```
5179 Value (string):
5180 ```
5181 <enabled/>
5182 <data id="SearchEngines_Remove" value="1&#xF000;NAME_OF_SEARCH_ENGINE"/>
5183 ```
5184 #### macOS
5185 ```
5186 <dict>
5187   <key>SearchEngines</key>
5188   <dict>
5189     <key>Remove</key>
5190     <array>
5191       <string>NAME_OF_SEARCH_ENGINE</string>
5192     </array>
5193   </dict>
5194 </dict>
5195 ```
5196 #### policies.json
5197 ```
5198 {
5199   "policies": {
5200     "SearchEngines": {
5201       "Remove": ["NAME_OF_SEARCH_ENGINE"]
5202     }
5203   }
5204 }
5205 ```
5206 ### SearchSuggestEnabled
5207
5208 Enable search suggestions.
5209
5210 **Compatibility:** Firefox 68, Firefox ESR 68\
5211 **CCK2 Equivalent:** N/A\
5212 **Preferences Affected:** `browser.urlbar.suggest.searches`, `browser.search.suggest.enabled`
5213
5214 #### Windows (GPO)
5215 ```
5216 Software\Policies\Mozilla\Firefox\SearchSuggestEnabled = 0x1 | 0x0
5217 ```
5218 #### Windows (Intune)
5219 OMA-URI:
5220 ```
5221 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchSuggestEnabled
5222 ```
5223 Value (string):
5224 ```
5225 <enabled/> or <disabled/>
5226 ```
5227 #### macOS
5228 ```
5229 <dict>
5230   <key>SearchSuggestEnabled</key>
5231   <true/> | <false/>
5232 </dict>
5233 ```
5234 #### policies.json
5235 ```
5236 {
5237   "policies": {
5238     "SearchSuggestEnabled": true | false
5239   }
5240 }
5241 ```
5242 ### SecurityDevices
5243
5244 Install PKCS #11 modules.
5245
5246 **Compatibility:** Firefox 64, Firefox ESR 60.4\
5247 **CCK2 Equivalent:** `certs.devices`\
5248 **Preferences Affected:** N/A
5249
5250 #### Windows (GPO)
5251 ```
5252 Software\Policies\Mozilla\Firefox\SecurityDevices\NAME_OF_DEVICE = PATH_TO_LIBRARY_FOR_DEVICE
5253 ```
5254 #### Windows (Intune)
5255 OMA-URI:
5256 ```
5257 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SecurityDevices
5258 ```
5259 Value (string):
5260 ```
5261 <enabled/>
5262 <data id="SecurityDevices" value="NAME_OF_DEVICE&#xF000;PATH_TO_LIBRARY_FOR_DEVICE"/>
5263 ```
5264 #### macOS
5265 ```
5266 <dict>
5267   <key>SecurityDevices</key>
5268   <dict>
5269     <key>NAME_OF_DEVICE</key>
5270     <string>PATH_TO_LIBRARY_FOR_DEVICE</string>
5271   </dict>
5272 </dict>
5273 ```
5274
5275 #### policies.json
5276 ```
5277 {
5278   "policies": {
5279     "SecurityDevices": {
5280       "NAME_OF_DEVICE": "PATH_TO_LIBRARY_FOR_DEVICE"
5281     }
5282   }
5283 }
5284 ```
5285 ### ShowHomeButton
5286 Show the home button on the toolbar.
5287
5288 Future versions of Firefox will not show the home button by default.
5289
5290 **Compatibility:** Firefox 88, Firefox ESR 78.10\
5291 **CCK2 Equivalent:** N/A\
5292 **Preferences Affected:** N/A
5293
5294 #### Windows (GPO)
5295 ```
5296 Software\Policies\Mozilla\Firefox\ShowHomeButton = 0x1 | 0x0
5297 ```
5298 #### Windows (Intune)
5299 OMA-URI:
5300 ```
5301 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/ShowHomeButton
5302 ```
5303 Value (string):
5304 ```
5305 <enabled/> or <disabled/>
5306 ```
5307 #### macOS
5308 ```
5309 <dict>
5310   <key>ShowHomeButton</key>
5311   <true/> | <false/>
5312 </dict>
5313 ```
5314 #### policies.json
5315 ```
5316 {
5317   "policies": {
5318     "ShowHomeButton": true | false
5319   }
5320 }
5321 ```
5322 ### SSLVersionMax
5323
5324 Set and lock the maximum version of TLS.
5325
5326 **Compatibility:** Firefox 66, Firefox ESR 60.6\
5327 **CCK2 Equivalent:** N/A\
5328 **Preferences Affected:** `security.tls.version.max`
5329
5330 #### Windows (GPO)
5331 ```
5332 Software\Policies\Mozilla\Firefox\SSLVersionMax = "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
5333 ```
5334 #### Windows (Intune)
5335 OMA-URI:
5336 ```
5337 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SSLVersionMax
5338 ```
5339 Value (string):
5340 ```
5341 <enabled/>
5342 <data id="SSLVersion" value="tls1 | tls1.2 | tls1.3"/>
5343 ```
5344 #### macOS
5345 ```
5346 <dict>
5347   <key>SSLVersionMax</key>
5348   <string>tls1 | tls1.1 | tls1.2 | tls1.3</string>
5349 </dict>
5350 ```
5351
5352 #### policies.json
5353 ```
5354 {
5355   "policies": {
5356     "SSLVersionMax": "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
5357   }
5358 }
5359 ```
5360 ### SSLVersionMin
5361
5362 Set and lock the minimum version of TLS.
5363
5364 **Compatibility:** Firefox 66, Firefox ESR 60.6\
5365 **CCK2 Equivalent:** N/A\
5366 **Preferences Affected:** `security.tls.version.min`
5367
5368 #### Windows (GPO)
5369 ```
5370 Software\Policies\Mozilla\Firefox\SSLVersionMin = "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
5371 ```
5372 #### Windows (Intune)
5373 OMA-URI:
5374 ```
5375 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SSLVersionMin
5376 ```
5377 Value (string):
5378 ```
5379 <enabled/>
5380 <data id="SSLVersion" value="tls1 | tls1.2 | tls1.3"/>
5381 ```
5382 #### macOS
5383 ```
5384 <dict>
5385   <key>SSLVersionMin</key>
5386   <string>tls1 | tls1.1 | tls1.2 | tls1.3</string>
5387 </dict>
5388 ```
5389
5390 #### policies.json
5391 ```
5392 {
5393   "policies": {
5394     "SSLVersionMin": "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
5395   }
5396 }
5397 ```
5398 ### SupportMenu
5399 Add a menuitem to the help menu for specifying support information.
5400
5401 **Compatibility:** Firefox 68.0.1, Firefox ESR 68.0.1\
5402 **CCK2 Equivalent:** helpMenu\
5403 **Preferences Affected:** N/A
5404
5405 #### Windows (GPO)
5406 ```
5407 Software\Policies\Mozilla\Firefox\SupportMenu\Title = "Support Menu"
5408 Software\Policies\Mozilla\Firefox\SupportMenu\URL = "http://example.com/support"
5409 Software\Policies\Mozilla\Firefox\SupportMenu\AccessKey = "S"
5410 ```
5411 #### Windows (Intune)
5412 OMA-URI:
5413 ```
5414 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SupportMenu
5415 ```
5416 Value (string):
5417 ```
5418 <enabled/>
5419 <data id="SupportMenuTitle" value="Support Menu"/>
5420 <data id="SupportMenuURL" value="http://example.com/support"/>
5421 <data id="SupportMenuAccessKey" value="S">
5422 ```
5423 #### macOS
5424 ```
5425 <dict>
5426   <key>SupportMenu</key>
5427   <dict>
5428     <key>Title</key>
5429     <string>SupportMenu</string>
5430     <key>URL</key>
5431     <string>http://example.com/support</string>
5432     <key>AccessKey</key>
5433     <string>S</string>
5434   </dict>
5435 </dict>
5436 ```
5437 #### policies.json
5438 ```
5439 {
5440   "policies": {
5441     "SupportMenu": {
5442       "Title": "Support Menu",
5443       "URL": "http://example.com/support",
5444       "AccessKey": "S"
5445     }
5446   }
5447 }
5448 ```
5449 ### UserMessaging
5450
5451 Prevent Firefox from messaging the user in certain situations.
5452
5453 `WhatsNew` Remove the "What's New" icon and menuitem.
5454
5455 `ExtensionRecommendations` If false, don't recommend extensions while the user is visiting web pages.
5456
5457 `FeatureRecommendations` IF false, don't recommend browser features.
5458
5459 `UrlbarInterventions` If false, Don't offer Firefox specific suggestions in the URL bar.
5460
5461 `SkipOnboarding` If true, don't show onboarding messages on the new tab page.
5462
5463 **Compatibility:** Firefox 75, Firefox ESR 68.7\
5464 **CCK2 Equivalent:** N/A\
5465 **Preferences Affected:** `browser.messaging-system.whatsNewPanel.enabled`, `browser.newtabpage.activity-stream.asrouter.userprefs.cfr.addons`, `browser.newtabpage.activity-stream.asrouter.userprefs.cfr.features`, `browser.aboutwelcome.enabled`
5466
5467 #### Windows (GPO)
5468 ```
5469 Software\Policies\Mozilla\Firefox\UserMessaging\WhatsNew = 0x1 | 0x0
5470 Software\Policies\Mozilla\Firefox\UserMessaging\ExtensionRecommendations = 0x1 | 0x0
5471 Software\Policies\Mozilla\Firefox\UserMessaging\FeatureRecommendations = 0x1 | 0x0
5472 Software\Policies\Mozilla\Firefox\UserMessaging\UrlbarInterventions = 0x1 | 0x0
5473 Software\Policies\Mozilla\Firefox\UserMessaging\SkipOnboarding = 0x1 | 0x0
5474 ```
5475 #### Windows (Intune)
5476 OMA-URI:
5477 ```
5478 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_WhatsNew
5479 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_ExtensionRecommendations
5480 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_FeatureRecommendations
5481 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_UrlbarInterventions
5482 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_SkipOnboarding
5483 ```
5484 Value (string):
5485 ```
5486 <enabled/> or <disabled/>
5487 ```
5488 #### macOS
5489 ```
5490 <dict>
5491   <key>UserMessaging</key>
5492   <dict>
5493     <key>WhatsNew</key>
5494     <true/> | <false/>
5495     <key>ExtensionRecommendations</key>
5496     <true/> | <false/>
5497     <key>FeatureRecommendations</key>
5498     <true/> | <false/>
5499     <key>UrlbarInterventions</key>
5500     <true/> | <false/>
5501     <key>SkipOnboarding</key>
5502     <true/> | <false/>
5503   </dict>
5504 </dict>
5505 ```
5506 #### policies.json
5507 ```
5508 {
5509   "policies": {
5510     "UserMessaging": {
5511       "WhatsNew": true | false,
5512       "ExtensionRecommendations": true | false,
5513       "FeatureRecommendations": true | false,
5514       "UrlbarInterventions": true | false
5515       "SkipOnboarding": true | false
5516     }
5517   }
5518 }
5519 ```
5520 ### WebsiteFilter
5521 Block websites from being visited. The parameters take an array of Match Patterns, as documented in https://developer.mozilla.org/en-US/Add-ons/WebExtensions/Match_patterns.
5522 The arrays are limited to 1000 entries each.
5523
5524 If you want to block all URLs, you can use `<all_urls>` or `*://*/*`. You can't have just a `*` on the right side.
5525
5526 For specific protocols, use `https://*/*` or `http://*/*`.
5527
5528 As of Firefox 83 and Firefox ESR 78.5, file URLs are supported.
5529
5530 **Compatibility:** Firefox 60, Firefox ESR 60\
5531 **CCK2 Equivalent:** N/A\
5532 **Preferences Affected:** N/A
5533
5534 #### Windows (GPO)
5535 ```
5536 Software\Policies\Mozilla\Firefox\WebsiteFilter\Block\1 = "<all_urls>"
5537 Software\Policies\Mozilla\Firefox\WebsiteFilter\Exceptions\1 = "http://example.org/*"
5538 ```
5539 #### Windows (Intune)
5540 OMA-URI:
5541 ```
5542 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/B_WebsiteFilter_Block
5543 ```
5544 Value (string):
5545 ```
5546 <enabled/> <data id="WebsiteFilter" value="1&#xF000;&#60;all_urls&#62;"/>
5547 ```
5548 OMA-URI:
5549 ```
5550 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/B_WebsiteFilter_Exceptions
5551 ```
5552 Value (string):
5553 ```
5554 <enabled/>
5555 <data id="WebsiteFilter" value="1&#xF000;http://example.org/*"/>
5556 ```
5557 #### macOS
5558 ```
5559 <dict>
5560   <key>WebsiteFilter</key>
5561   <dict>
5562     <key>Block</key>
5563     <array>
5564       <string><all_urls></string>
5565     </array>
5566     <key>Exceptions</key>
5567     <array>
5568       <string>http://example.org/*</string>
5569     </array>
5570   </dict>
5571
5572 </dict>
5573 ```
5574 #### policies.json
5575 ```
5576 {
5577   "policies": {
5578     "WebsiteFilter": {
5579       "Block": ["<all_urls>"],
5580       "Exceptions": ["http://example.org/*"]
5581     }
5582   }
5583 }
5584 ```
5585 ### WindowsSSO
5586 Allow Windows single sign-on for Microsoft, work, and school accounts.
5587
5588 If this policy is set to true, Firefox will use credentials stored in Windows to sign in to Microsoft, work, and school accounts.
5589
5590 **Compatibility:** Firefox 91\
5591 **CCK2 Equivalent:** N/A\
5592 **Preferences Affected:** `network.http.windows-sso.enabled`
5593
5594 #### Windows (GPO)
5595 ```
5596 Software\Policies\Mozilla\Firefox\WindowsSSO = 0x1 | 0x0
5597 ```
5598 #### Windows (Intune)
5599 OMA-URI:
5600 ```
5601 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/WindowsSSO
5602 ```
5603 Value (string):
5604 ```
5605 <enabled/> or <disabled/>
5606 ```
5607 #### policies.json
5608 ```
5609 {
5610   "policies": {
5611     "WindowsSSO": true | false
5612   }
5613 }
5614 ```