README.md

   1 **These policies are in active development and so might contain changes that do not work with current versions of Firefox.**
   2
   3 **You should use the [officially released versions](https://github.com/mozilla/policy-templates/releases) if you are deploying changes.**
   4
   5 Policies can be specified using the [Group Policy templates on Windows](https://github.com/mozilla/policy-templates/tree/master/windows), [Intune on Windows](https://support.mozilla.org/kb/managing-firefox-intune), [configuration profiles on macOS](https://github.com/mozilla/policy-templates/tree/master/mac), or by creating a file called `policies.json`. On Windows, create a directory called `distribution` where the EXE is located and place the file there. On Mac, the file goes into `Firefox.app/Contents/Resources/distribution`.  On Linux, the file goes into `firefox/distribution`, where `firefox` is the installation directory for firefox, which varies by distribution or you can specify system-wide policy by placing the file in `/etc/firefox/policies`.
   6
   7 | Policy Name | Description
   8 | --- | --- |
   9 | **[`AppAutoUpdate`](#appautoupdate)** |  Enable or disable automatic application update.
  10 | **[`AppUpdateURL`](#appupdateurl)** | Change the URL for application update.
  11 | **[`Authentication`](#authentication)** | Configure sites that support integrated authentication.
  12 | **[`BlockAboutAddons`](#blockaboutaddons)** | Block access to the Add-ons Manager (about:addons).
  13 | **[`BlockAboutConfig`](#blockaboutconfig)** | Block access to about:config.
  14 | **[`BlockAboutProfiles`](#blockaboutprofiles)** | Block access to About Profiles (about:profiles).
  15 | **[`BlockAboutSupport`](#blockaboutsupport)** | Block access to Troubleshooting Information (about:support).
  16 | **[`Bookmarks`](#bookmarks)** | Add bookmarks in either the bookmarks toolbar or menu.
  17 | **[`CaptivePortal`](#captiveportal)** | Enable or disable the detection of captive portals.
  18 | **[`Certificates`](#certificates)** |
  19 | **[`Certificates -> ImportEnterpriseRoots`](#certificates--importenterpriseroots)** | Trust certificates that have been added to the operating system certificate store by a user or administrator.
  20 | **[`Certificates -> Install`](#certificates--install)** | Install certificates into the Firefox certificate store.
  21 | **[`Cookies`](#cookies)** | Configure cookie preferences.
  22 | **[`DisableAppUpdate`](#disableappupdate)** | Turn off application updates.
  23 | **[`DisableBuiltinPDFViewer`](#disablebuiltinpdfviewer)** | Disable the built in PDF viewer.
  24 | **[`DisabledCiphers`](#disabledciphers)** | Disable ciphers.
  25 | **[`DisableDefaultBrowserAgent`](#disabledefaultbrowseragent)** | Prevent the default browser agent from taking any actions (Windows only).
  26 | **[`DisableDeveloperTools`](#disabledevelopertools)** | Remove access to all developer tools.
  27 | **[`DisableFeedbackCommands`](#disablefeedbackcommands)** | Disable the menus for reporting sites.
  28 | **[`DisableFirefoxScreenshots`](#disablefirefoxscreenshots)** | Remove access to Firefox Screenshots.
  29 | **[`DisableFirefoxAccounts`](#disablefirefoxaccounts)** | Disable Firefox Accounts integration (Sync).
  30 | **[`DisableFirefoxStudies`](#disablefirefoxstudies)** | Disable Firefox studies (Shield).
  31 | **[`DisableForgetButton`](#disableforgetbutton)** | Disable the "Forget" button.
  32 | **[`DisableFormHistory`](#disableformhistory)** | Turn off saving information on web forms and the search bar.
  33 | **[`DisableMasterPasswordCreation`](#disablemasterpasswordcreation)** | Remove the master password functionality.
  34 | **[`DisablePasswordReveal`](#disablepasswordreveal)** | Do not allow passwords to be revealed in saved logins.
  35 | **[`DisablePocket`](#disablepocket)** | Remove Pocket in the Firefox UI.
  36 | **[`DisablePrivateBrowsing`](#disableprivatebrowsing)** | Remove access to private browsing.
  37 | **[`DisableProfileImport`](#disableprofileimport)** | Disables the "Import data from another browser" option in the bookmarks window.
  38 | **[`DisableProfileRefresh`](#disableprofilerefresh)** | Disable the Refresh Firefox button on about:support and support.mozilla.org
  39 | **[`DisableSafeMode`](#disablesafemode)** | Disable safe mode within the browser.
  40 | **[`DisableSecurityBypass`](#disablesecuritybypass)** | Prevent the user from bypassing security in certain cases.
  41 | **[`DisableSetDesktopBackground`](#disablesetdesktopbackground)** | Remove the "Set As Desktop Background..." menuitem when right clicking on an image.
  42 | **[`DisableSystemAddonUpdate`](#disablesystemaddonupdate)** | Prevent system add-ons from being installed or update.
  43 | **[`DisableTelemetry`](#disabletelemetry)** | DisableTelemetry
  44 | **[`DisplayBookmarksToolbar`](#displaybookmarkstoolbar)** | Set the initial state of the bookmarks toolbar.
  45 | **[`DisplayMenuBar (Deprecated)`](#displaymenubar-deprecated)** | Set the initial state of the menubar.
  46 | **[`DisplayMenuBar`](#displaymenubar)** | Set the state of the menubar.
  47 | **[`DNSOverHTTPS`](#dnsoverhttps)** | Configure DNS over HTTPS.
  48 | **[`DontCheckDefaultBrowser`](#dontcheckdefaultbrowser)** | Don't check if Firefox is the default browser at startup.
  49 | **[`DefaultDownloadDirectory`](#defaultdownloaddirectory)** | Set the default download directory.
  50 | **[`DownloadDirectory`](#downloaddirectory)** | Set and lock the download directory.
  51 | **[`EnableTrackingProtection`](#enabletrackingprotection)** | Configure tracking protection.
  52 | **[`EncryptedMediaExtensions`](#encryptedmediaextensions)** | Enable or disable Encrypted Media Extensions and optionally lock it.
  53 | **[`EnterprisePoliciesEnabled`](#enterprisepoliciesenabled)** | Enable policy support on macOS.
  54 | **[`Extensions`](#extensions)** | Control the installation, uninstallation and locking of extensions.
  55 | **[`ExtensionSettings`](#extensionsettings)** | Manage all aspects of extensions.
  56 | **[`ExtensionUpdate`](#extensionupdate)** | Control extension updates.
  57 | **[`FlashPlugin`](#flashplugin)** | Configure the default Flash plugin policy as well as origins for which Flash is allowed.
  58 | **[`FirefoxHome`](#firefoxhome)** | Customize the Firefox Home page.
  59 | **[`HardwareAcceleration`](#hardwareacceleration)** | Control hardware acceleration.
  60 | **[`Handlers`](#handlers)** | Configure default application handlers.
  61 | **[`Homepage`](#homepage)** | Configure the default homepage and how Firefox starts.
  62 | **[`InstallAddonsPermission`](#installaddonspermission)** | Configure the default extension install policy as well as origins for extension installs are allowed.
  63 | **[`LegacyProfiles`](#legacyprofiles)** | Disable the feature enforcing a separate profile for each installation.
  64 | **[`LocalFileLinks`](#localfilelinks)** | Enable linking to local files by origin.
  65 | **[`PrimaryPassword`](#primarypassword)** | Require or prevent using a primary (formerly master) password.
  66 | **[`NetworkPrediction`](#networkprediction)** | Enable or disable network prediction (DNS prefetching).
  67 | **[`NewTabPage`](#newtabpage)** | Enable or disable the New Tab page.
  68 | **[`NoDefaultBookmarks`](#nodefaultbookmarks)** | Disable the creation of default bookmarks.
  69 | **[`OfferToSaveLogins`](#offertosavelogins)** | Control whether or not Firefox offers to save passwords.
  70 | **[`OfferToSaveLoginsDefault`](#offertosaveloginsdefault)** | Set the default value for whether or not Firefox offers to save passwords.
  71 | **[`OverrideFirstRunPage`](#overridefirstrunpage)** | Override the first run page.
  72 | **[`OverridePostUpdatePage`](#overridepostupdatepage)** | Override the upgrade page.
  73 | **[`PasswordManagerEnabled`](#passwordmanagerenabled)** | Remove (some) access to the password manager.
  74 | **[`PDFjs`](#pdfjs)** | Disable or configure PDF.js, the built-in PDF viewer.
  75 | **[`Permissions`](#permissions)** | Set permissions associated with camera, microphone, location, and notifications.
  76 | **[`PictureInPicture`](#pictureinpicture)** | Enable or disable Picture-in-Picture.
  77 | **[`PopupBlocking`](#popupblocking)** | Configure the default pop-up window policy as well as origins for which pop-up windows are allowed.
  78 | **[`Preferences`](#preferences)** | Set and lock some preferences.
  79 | **[`PromptForDownloadLocation`](#promptfordownloadlocation)** | Ask where to save each file before downloading.
  80 | **[`Proxy`](#proxy)** | Configure proxy settings.
  81 | **[`RequestedLocales`](#requestedlocales)** | Set the the list of requested locales for the application in order of preference.
  82 | **[`SanitizeOnShutdown` (All)](#sanitizeonshutdown-all)** | Clear all data on shutdown.
  83 | **[`SanitizeOnShutdown` (Selective)](#sanitizeonshutdown-selective)** | Clear data on shutdown.
  84 | **[`SearchBar`](#searchbar)** | Set whether or not search bar is displayed.
  85 | **[`SearchEngines`](#searchengines-this-policy-is-only-available-on-the-esr)** |
  86 | **[`SearchEngines -> Default`](#searchengines--default)** | Set the default search engine.
  87 | **[`SearchEngines -> PreventInstalls`](#searchengines--preventinstalls)** | Prevent installing search engines from webpages.
  88 | **[`SearchEngines -> Remove`](#searchengines--remove)** | Hide built-in search engines.
  89 | **[`SearchEngines -> Add`](#searchengines--add)** | Add new search engines.
  90 | **[`SearchSuggestEnabled`](#searchsuggestenabled)** | Enable search suggestions.
  91 | **[`SecurityDevices`](#securitydevices)** | Install PKCS #11 modules.
  92 | **[`SSLVersionMax`](#sslversionmax)** | Set and lock the maximum version of TLS.
  93 | **[`SSLVersionMin`](#sslversionmin)** | Set and lock the minimum version of TLS.
  94 | **[`SupportMenu`](#supportmenu)** | Add a menuitem to the help menu for specifying support information.
  95 | **[`UserMessaging`](#usermessaging)** | Don't show certain messages to the user.
  96 | **[`WebsiteFilter`](#websitefilter)** | Block websites from being visited.
  97
  98 ### AppAutoUpdate
  99
 100 Enable or disable **automatic** application update.
 101
 102 If set to true, application updates are installed without user approval.
 103
 104 If set to false, application updates are downloaded but the user can choose when to install the update.
 105
 106 If you have disabled updates via DisableAppUpdate, this policy has no effect.
 107
 108 **Compatibility:** Firefox 75, Firefox ESR 68.7\
 109 **CCK2 Equivalent:** N/A\
 110 **Preferences Affected:** app.update.auto
 111
 112 #### Windows (GPO)
 113 ```
 114 Software\Policies\Mozilla\Firefox\AppAutoUpdate = 0x1 | 0x0
 115 ```
 116 #### Windows (Intune)
 117 OMA-URI:
 118 ```
 119 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AppAutoUpdate
 120 ```
 121 Value (string):
 122 ```
 123 <enabled/> or <disabled/>
 124 ```
 125 #### macOS
 126 ```
 127 <dict>
 128   <key>AppAutoUpdate</key>
 129   <true/> | <false/>
 130 </dict>
 131 ```
 132 #### policies.json
 133 ```
 134 {
 135   "policies": {
 136     "AppAutoUpdate": true | false
 137   }
 138 }
 139 ```
 140 ### AppUpdateURL
 141
 142 Change the URL for application update.
 143
 144 **Compatibility:** Firefox 62, Firefox ESR 60.2\
 145 **CCK2 Equivalent:** N/A\
 146 **Preferences Affected:** `app.update.url`
 147
 148 #### Windows (GPO)
 149 ```
 150 Software\Policies\Mozilla\Firefox\AppUpdateURL = "https://yoursite.com"
 151 ```
 152 #### Windows (Intune)
 153 OMA-URI:
 154 ```
 155 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AppUpdateURL
 156 ```
 157 Value (string):
 158 ```
 159 <enabled/>
 160 <data id="AppUpdateURL" value="https://yoursite.com"/>
 161 ```
 162 #### macOS
 163 ```
 164 <dict>
 165   <key>AppUpdateURL</key>
 166   <string>https://yoursite.com</string>
 167 </dict>
 168 ```
 169 #### policies.json
 170 ```
 171 {
 172   "policies": {
 173     "AppUpdateURL": "https://yoursite.com"
 174   }
 175 }
 176 ```
 177 ### Authentication
 178
 179 Configure sites that support integrated authentication.
 180
 181 See https://developer.mozilla.org/en-US/docs/Mozilla/Integrated_authentication for more information.
 182
 183 `PrivateBrowsing` enables integrated authentication in prviate browsing.
 184
 185 **Compatibility:** Firefox 60, Firefox ESR 60 (AllowNonFQDN added in 62/60.2, AllowProxies added in 70/68.2, Locked added in 71/68.3, PrivateBrowsing added in 77/68.9)\
 186 **CCK2 Equivalent:** N/A\
 187 **Preferences Affected:** `network.negotiate-auth.trusted-uris`,`network.negotiate-auth.delegation-uris`,`network.automatic-ntlm-auth.trusted-uris`,`network.automatic-ntlm-auth.allow-non-fqdn`,`network.negotiate-auth.allow-non-fqdn`,`network.automatic-ntlm-auth.allow-proxies`,`network.negotiate-auth.allow-proxies`,`network.auth.private-browsing-sso`
 188
 189 #### Windows (GPO)
 190 ```
 191 Software\Policies\Mozilla\Firefox\Authentication\SPNEGO\1 = "mydomain.com"
 192 Software\Policies\Mozilla\Firefox\Authentication\SPNEGO\2 = "https://myotherdomain.com"
 193 Software\Policies\Mozilla\Firefox\Authentication\Delegated\1 = "mydomain.com"
 194 Software\Policies\Mozilla\Firefox\Authentication\Delegated\2 = "https://myotherdomain.com"
 195 Software\Policies\Mozilla\Firefox\Authentication\NTLM\1 = "mydomain.com"
 196 Software\Policies\Mozilla\Firefox\Authentication\NTLM\2 = "https://myotherdomain.com"
 197 Software\Policies\Mozilla\Firefox\Authentication\AllowNonFQDN\SPNEGO = 0x1 | 0x0
 198 Software\Policies\Mozilla\Firefox\Authentication\AllowNonFQDN\NTLM = 0x1 | 0x0
 199 Software\Policies\Mozilla\Firefox\Authentication\AllowProxies\SPNEGO = 0x1 | 0x0
 200 Software\Policies\Mozilla\Firefox\Authentication\AllowProxies\NTLM = 0x1 | 0x0
 201 Software\Policies\Mozilla\Firefox\Authentication\Locked = 0x1 | 0x0
 202 Software\Policies\Mozilla\Firefox\Authentication\PrivateBrowsing = 0x1 | 0x0
 203 ```
 204 #### Windows (Intune)
 205 OMA-URI:
 206 ```
 207 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_SPNEGO
 208 ```
 209 Value (string):
 210 ```
 211 <enabled/>
 212 <data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
 213 ```
 214 OMA-URI:
 215 ```
 216 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_Delegated
 217 ```
 218 Value (string):
 219 ```
 220 <enabled/>
 221 <data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
 222 ```
 223 OMA-URI:
 224 ```
 225 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_NTLM
 226 ```
 227 Value (string):
 228 ```
 229 <enabled/>
 230 <data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
 231 ```
 232 OMA-URI:
 233 ```
 234 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_AllowNonFQDN
 235 ```
 236 Value (string):
 237 ```
 238 <enabled/>
 239 <data id="Authentication_AllowNonFQDN_NTLM" value="true | false"/>
 240 <data id="Authentication_AllowNonFQDN_SPNEGO" value="true | false"/>
 241 ```
 242 OMA-URI:
 243 ```
 244 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_Locked
 245 ```
 246 Value (string):
 247 ```
 248 <enabled/> or <disabled/>
 249 ```
 250 OMA-URI:
 251 ```
 252 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_PrivateBrowsing
 253 ```
 254 Value (string):
 255 ```
 256 <enabled/> or <disabled/>
 257 ```
 258 #### macOS
 259 ```
 260 <dict>
 261   <key>Authentication</key>
 262   <dict>
 263     <key>SPNEGO</key>
 264     <array>
 265       <string>mydomain.com</string>
 266       <string>https://myotherdomain.com</string>
 267     </array>
 268     <key>Delegated</key>
 269     <array>
 270       <string>mydomain.com</string>
 271       <string>https://myotherdomain.com</string>
 272     </array>
 273     <key>NTLM</key>
 274     <array>
 275       <string>mydomain.com</string>
 276       <string>https://myotherdomain.com</string>
 277     </array>
 278     <key>AllowNonFQDN</key>
 279       <dict>
 280       <key>SPNEGO</key>
 281       <true/> | <false/>
 282       <key>NTLM</key>
 283       <true/> | <false/>
 284     </dict>
 285     <key>AllowProxies</key>
 286       <dict>
 287       <key>SPNEGO</key>
 288       <true/> | <false/>
 289       <key>NTLM</key>
 290       <true/> | <false/>
 291     </dict>
 292     <key>Locked</key>
 293     <true/> | <false/>
 294     <key>PrivateBrowsing</key>
 295     <true/> | <false/>
 296   </dict>
 297 </dict>
 298 ```
 299 #### policies.json
 300 ```
 301 {
 302   "policies": {
 303     "Authentication": {
 304       "SPNEGO": ["mydomain.com", "https://myotherdomain.com"],
 305       "Delegated": ["mydomain.com", "https://myotherdomain.com"],
 306       "NTLM": ["mydomain.com", "https://myotherdomain.com"],
 307       "AllowNonFQDN": {
 308         "SPNEGO": true | false,
 309         "NTLM": true | false
 310       },
 311       "AllowProxies": {
 312         "SPNEGO": true | false,
 313         "NTLM": true | false
 314       },
 315       "Locked": true | false,
 316       "PrivateBrowsing": true | false
 317     }
 318   }
 319 }
 320 ```
 321 ### BlockAboutAddons
 322
 323 Block access to the Add-ons Manager (about:addons).
 324
 325 **Compatibility:** Firefox 60, Firefox ESR 60\
 326 **CCK2 Equivalent:** `disableAddonsManager`\
 327 **Preferences Affected:** N/A
 328
 329 #### Windows (GPO)
 330 ```
 331 Software\Policies\Mozilla\Firefox\BlockAboutAddons = 0x1 | 0x0
 332 ```
 333 #### Windows (Intune)
 334 OMA-URI:
 335 ```
 336 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutAddons
 337 ```
 338 Value (string):
 339 ```
 340 <enabled/> or <disabled/>
 341 ```
 342 #### macOS
 343 ```
 344 <dict>
 345   <key>BlockAboutAddons</key>
 346   <true/> | <false/>
 347 </dict>
 348 ```
 349 #### policies.json
 350 ```
 351 {
 352   "policies": {
 353     "BlockAboutAddons": true | false
 354   }
 355 }
 356 ```
 357 ### BlockAboutConfig
 358
 359 Block access to about:config.
 360
 361 **Compatibility:** Firefox 60, Firefox ESR 60\
 362 **CCK2 Equivalent:** `disableAboutConfig`\
 363 **Preferences Affected:** N/A
 364
 365 #### Windows (GPO)
 366 ```
 367 Software\Policies\Mozilla\Firefox\BlockAboutConfig = 0x1 | 0x0
 368 ```
 369 #### Windows (Intune)
 370 OMA-URI:
 371 ```
 372 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutConfig
 373 ```
 374 Value (string):
 375 ```
 376 <enabled/> or <disabled/>
 377 ```
 378 #### macOS
 379 ```
 380 <dict>
 381   <key>BlockAboutConfig</key>
 382   <true/> | <false/>
 383 </dict>
 384 ```
 385 #### policies.json
 386 ```
 387 {
 388   "policies": {
 389     "BlockAboutConfig": true | false
 390   }
 391 }
 392 ```
 393 ### BlockAboutProfiles
 394
 395 Block access to About Profiles (about:profiles).
 396
 397 **Compatibility:** Firefox 60, Firefox ESR 60\
 398 **CCK2 Equivalent:** `disableAboutProfiles`\
 399 **Preferences Affected:** N/A
 400
 401 #### Windows (GPO)
 402 ```
 403 Software\Policies\Mozilla\Firefox\BlockAboutProfiles = 0x1 | 0x0
 404 ```
 405 #### Windows (Intune)
 406 OMA-URI:
 407 ```
 408 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutProfiles
 409 ```
 410 Value (string):
 411 ```
 412 <enabled/> or <disabled/>
 413 ```
 414 #### macOS
 415 ```
 416 <dict>
 417   <key>BlockAboutProfiles</key>
 418   <true/> | <false/>
 419 </dict>
 420 ```
 421 #### policies.json
 422 ```
 423 {
 424   "policies": {
 425     "BlockAboutProfiles": true | false
 426   }
 427 }
 428 ```
 429 ### BlockAboutSupport
 430
 431 Block access to Troubleshooting Information (about:support).
 432
 433 **Compatibility:** Firefox 60, Firefox ESR 60\
 434 **CCK2 Equivalent:** `disableAboutSupport`\
 435 **Preferences Affected:** N/A
 436
 437 #### Windows (GPO)
 438 ```
 439 Software\Policies\Mozilla\Firefox\BlockAboutSupport = 0x1 | 0x0
 440 ```
 441 #### Windows (Intune)
 442 OMA-URI:
 443 ```
 444 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutSupport
 445 ```
 446 Value (string):
 447 ```
 448 <enabled/> or <disabled/>
 449 ```
 450 #### macOS
 451 ```
 452 <dict>
 453   <key>BlockAboutSupport</key>
 454   <true/> | <false/>
 455 </dict>
 456 ```
 457 #### policies.json
 458 ```
 459 {
 460   "policies": {
 461     "BlockAboutSupport": true | false
 462   }
 463 }
 464 ```
 465 ### Bookmarks
 466
 467 Add bookmarks in either the bookmarks toolbar or menu. Only `Title` and `URL` are required. If `Placement` is not specified, the bookmark will be placed on the toolbar. If `Folder` is specified, it is automatically created and bookmarks with the same folder name are grouped together.
 468
 469 **Compatibility:** Firefox 60, Firefox ESR 60\
 470 **CCK2 Equivalent:** `bookmarks.toolbar`,`bookmarks.menu`\
 471 **Preferences Affected:** N/A
 472
 473 #### Windows (GPO)
 474 ```
 475 Software\Policies\Mozilla\Firefox\Bookmarks\1\Title = "Example"
 476 Software\Policies\Mozilla\Firefox\Bookmarks\1\URL = "https://example.com"
 477 Software\Policies\Mozilla\Firefox\Bookmarks\1\Favicon = "https://example.com/favicon.ico"
 478 Software\Policies\Mozilla\Firefox\Bookmarks\1\Placement = "toolbar" | "menu"
 479 Software\Policies\Mozilla\Firefox\Bookmarks\1\Folder = "FolderName"
 480 ```
 481 #### Windows (Intune)
 482 OMA-URI:
 483 ```
 484 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Bookmarks/Bookmark01
 485 ```
 486 Value (string):
 487 ```
 488 <enabled/>
 489 <data id="BookmarkTitle" value="Example"/>
 490 <data id="BookmarkURL" value="https://example.com"/>
 491 <data id="BookmarkFavicon" value="https://example.com/favicon.ico"/>
 492 <data id="BookmarkPlacement" value="toolbar | menu"/>
 493 <data id="BookmarkFolder" value="FolderName"/>
 494 ```
 495 #### macOS
 496 ```
 497 <dict>
 498   <key>Bookmarks</key>
 499   <array>
 500     <dict>
 501       <key>Title</key>
 502       <string>Example</string>
 503       <key>URL</key>
 504       <string>https://example.com</string>
 505       <key>Favicon</key>
 506       <string>https://example.com/favicon.ico</string>
 507       <key>Placement</key>
 508       <string>toolbar | menu</string>
 509       <key>Folder</key>
 510       <string>FolderName</string>
 511     </dict>
 512   </array>
 513 </dict>
 514 ```
 515 #### policies.json
 516 ```
 517 {
 518   "policies": {
 519     "Bookmarks": [
 520       {
 521         "Title": "Example",
 522         "URL": "https://example.com",
 523         "Favicon": "https://example.com/favicon.ico",
 524         "Placement": "toolbar" | "menu",
 525         "Folder": "FolderName"
 526       }
 527     ]
 528   }
 529 }
 530 ```
 531 ### CaptivePortal
 532 Enable or disable the detection of captive portals.
 533
 534 **Compatibility:** Firefox 67, Firefox ESR 60.7\
 535 **CCK2 Equivalent:** N/A\
 536 **Preferences Affected:** `network.captive-portal-service.enabled`
 537
 538 #### Windows (GPO)
 539 ```
 540 Software\Policies\Mozilla\Firefox\CaptivePortal = 0x1 | 0x0
 541 ```
 542 #### Windows (Intune)
 543 OMA-URI:
 544 ```
 545 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/CaptivePortal
 546 ```
 547 Value (string):
 548 ```
 549 <enabled/> or <disabled/>
 550 ```
 551 #### macOS
 552 ```
 553 <dict>
 554   <key>CaptivePortal</key>
 555   <true/> | <false/>
 556 </dict>
 557 ```
 558 #### policies.json
 559 ```
 560 {
 561   "policies": {
 562     "CaptivePortal": true | false
 563   }
 564 }
 565 ```
 566 ### Certificates
 567
 568 ### Certificates | ImportEnterpriseRoots
 569
 570 Trust certificates that have been added to the operating system certificate store by a user or administrator.
 571
 572 Note: This policy only works on Windows and macOS. For Linux discussion, see [bug 1600509](https://bugzilla.mozilla.org/show_bug.cgi?id=1600509).
 573
 574 See https://support.mozilla.org/kb/setting-certificate-authorities-firefox for more detail.
 575
 576 **Compatibility:** Firefox 60, Firefox ESR 60 (macOS support in Firefox 63, Firefox ESR 68)\
 577 **CCK2 Equivalent:** N/A\
 578 **Preferences Affected:** `security.enterprise_roots.enabled`
 579
 580 #### Windows (GPO)
 581 ```
 582 Software\Policies\Mozilla\Firefox\Certificates\ImportEnterpriseRoots = 0x1 | 0x0
 583 ```
 584 #### Windows (Intune)
 585 OMA-URI:
 586 ```
 587 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Certificates/Certificates_ImportEnterpriseRoots
 588 ```
 589 Value (string):
 590 ```
 591 <enabled/> or <disabled/>
 592 ```
 593 #### macOS
 594 ```
 595 <dict>
 596   <key>Certificates</key>
 597   <dict>
 598     <key>ImportEnterpriseRoots</key>
 599     <true/> | <false/>
 600   </dict>
 601 </dict>
 602 ```
 603 #### policies.json
 604 ```
 605 {
 606   "policies": {
 607     "Certificates": {
 608       "ImportEnterpriseRoots": true | false
 609     }
 610   }
 611 }
 612 ```
 613 ### Certificates | Install
 614
 615 Install certificates into the Firefox certificate store. If only a filename is specified, Firefox searches for the file in the following locations:
 616
 617 - Windows
 618   - %USERPROFILE%\AppData\Local\Mozilla\Certificates
 619   - %USERPROFILE%\AppData\Roaming\Mozilla\Certificates
 620 - macOS
 621   - /Library/Application Support/Mozilla/Certificates
 622   - ~/Library/Application Support/Mozilla/Certificates
 623 - Linux
 624   - /usr/lib/mozilla/certificates
 625   - /usr/lib64/mozilla/certificates
 626   - ~/.mozilla/certificates
 627
 628 Starting with Firefox 65, Firefox 60.5 ESR, a fully qualified path can be used, including UNC paths. You should use the native path style for your operating system. We do not support using %USERPROFILE% or other environment variables on Windows.
 629
 630 If you are specifying the path in the policies.json file on Windows, you need to escape your backslashes (`\\`) which means that for UNC paths, you need to escape both (`\\\\`). If you use group policy, you only need one backslash.
 631
 632 Certificates are installed using the trust string `CT,CT,`.
 633
 634 Binary (DER) and ASCII (PEM) certificates are both supported.
 635
 636 **Compatibility:** Firefox 64, Firefox ESR 64\
 637 **CCK2 Equivalent:** `certs.ca`\
 638 **Preferences Affected:** N/A
 639
 640 #### Windows (GPO)
 641 ```
 642 Software\Policies\Mozilla\Firefox\Certificates\Install\1 = "cert1.der"
 643 Software\Policies\Mozilla\Firefox\Certificates\Install\2 = "C:\Users\username\cert2.pem"
 644 ```
 645 #### Windows (Intune)
 646 OMA-URI:
 647 ```
 648 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Certificates/Certificates_Install
 649 ```
 650 Value (string):
 651 ```
 652 <enabled/>
 653 <data id="Certificates_Install" value="1&#xF000;cert1.der&#xF000;2&#xF000;C:\Users\username\cert2.pem"/>
 654 ```
 655 #### macOS
 656 ```
 657 <dict>
 658   <key>Certificates</key>
 659   <dict>
 660     <key>Install</key>
 661     <array>
 662       <string>cert1.der</string>
 663       <string>/Users/username/cert2.pem</string>
 664     </array>
 665   </dict>
 666 </dict>
 667 ```
 668 #### policies.json
 669 ```
 670 {
 671   "policies": {
 672     "Certificates": {
 673       "Install": ["cert1.der", "/home/username/cert2.pem"]
 674     }
 675   }
 676 }
 677 ```
 678 ### Cookies
 679 Configure cookie preferences.
 680
 681 `Allow` is a list of origins (not domains) where cookies are always allowed. You must include http or https.
 682
 683 `AllowSession` is a list of origins (not domains) where cookies are only allowed for the current session. You must include http or https.
 684
 685 `Block` is a list of origins (not domains) where cookies are always blocked. You must include http or https.
 686
 687 `Default` determines whether cookies are accepted at all.
 688
 689 `AcceptThirdParty` determines how third-party cookies are handled.
 690
 691 `ExpireAtSessionEnd` determines when cookies expire.
 692
 693 `RejectTracker` only rejects cookies for trackers.
 694
 695 `Locked` prevents the user from changing cookie preferences.
 696
 697 **Compatibility:** Firefox 60, Firefox ESR 60 (RejectTracker added in Firefox 63, AllowSession added in Firefox 79/78.1)\
 698 **CCK2 Equivalent:** N/A\
 699 **Preferences Affected:** `network.cookie.cookieBehavior`,`network.cookie.lifetimePolicy`
 700
 701 #### Windows (GPO)
 702 ```
 703 Software\Policies\Mozilla\Firefox\Cookies\Allow\1 = "https://example.com"
 704 Software\Policies\Mozilla\Firefox\Cookies\AllowSession\1 = "https://example.edu"
 705 Software\Policies\Mozilla\Firefox\Cookies\Block\1 = "https://example.org"
 706 Software\Policies\Mozilla\Firefox\Cookies\Default = 0x1 | 0x0
 707 Software\Policies\Mozilla\Firefox\Cookies\AcceptThirdParty = "always" | "never" | "from-visited"
 708 Software\Policies\Mozilla\Firefox\Cookies\ExpireAtSessionEnd = 0x1 | 0x0
 709 Software\Policies\Mozilla\Firefox\Cookies\RejectTracker = 0x1 | 0x0
 710 Software\Policies\Mozilla\Firefox\Cookies\Locked = 0x1 | 0x0
 711 ```
 712 #### Windows (Intune)
 713 OMA-URI:
 714 ```
 715 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Allow
 716 ```
 717 Value (string):
 718 ```
 719 <enabled/>
 720 <data id="Cookies_Allow" value="1&#xF000;https://example.com"/>
 721 ```
 722 OMA-URI:
 723 ```
 724 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_AllowSession
 725 ```
 726 Value (string):
 727 ```
 728 <enabled/>
 729 <data id="Cookies_Allow" value="1&#xF000;https://example.edu"/>
 730 ```
 731 OMA-URI:
 732 ```
 733 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Block
 734 ```
 735 Value (string):
 736 ```
 737 <enabled/>
 738 <data id="Cookies_Block" value="1&#xF000;https://example.org"/>
 739 ```
 740 OMA-URI:
 741 ```
 742 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Default
 743 ```
 744 Value (string):
 745 ```
 746 <enabled/> or <disabled/>
 747 ```
 748 OMA-URI:
 749 ```
 750 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_AcceptThirdParty
 751 ```
 752 Value (string):
 753 ```
 754 <enabled/>
 755 <data id="Cookies_AcceptThirdParty" value="always | never | from-visited"/>
 756 ```
 757 OMA-URI:
 758 ```
 759 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_ExpireAtSessionEnd
 760 ```
 761 Value (string):
 762 ```
 763 <enabled/> or <disabled/>
 764 ```
 765 OMA-URI:
 766 ```
 767 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_RejectTracker
 768 ```
 769 Value (string):
 770 ```
 771 <enabled/> or <disabled/>
 772 ```
 773 OMA-URI:
 774 ```
 775 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Locked
 776 ```
 777 Value (string):
 778 ```
 779 <enabled/> or <disabled/>
 780 ```
 781 #### macOS
 782 ```
 783 <dict>
 784   <key>Cookies</key>
 785   <dict>
 786     <key>Allow</key>
 787     <array>
 788       <string>http://example.com</string>
 789     </array>
 790     <key>AllowSession</key>
 791     <array>
 792       <string>http://example.edu</string>
 793     </array>
 794     <key>Block</key>
 795     <array>
 796       <string>http://example.org</string>
 797     </array>
 798     <key>Default</key>
 799     <true/> | <false/>
 800     <key>AcceptThirdParty</key>
 801     <string>always | never | from-visited</string>
 802     <key>ExpireAtSessionEnd</key>
 803     <true/> | <false/>
 804     <key>RejectTracker</key>
 805     <true/> | <false/>
 806     <key>Locked</key>
 807     <true/> | <false/>
 808   </dict>
 809 </dict>
 810 ```
 811 #### policies.json
 812 ```
 813 {
 814   "policies": {
 815     "Cookies": {
 816       "Allow": ["http://example.org/"],
 817       "AllowSession": ["http://example.edu/"],
 818       "Block": ["http://example.edu/"],
 819       "Default": true | false,
 820       "AcceptThirdParty": "always" | "never" | "from-visited",
 821       "ExpireAtSessionEnd": true | false,
 822       "RejectTracker": true | false,
 823       "Locked": true | false
 824     }
 825   }
 826 }
 827 ```
 828 ### DisableSetDesktopBackground
 829 Remove the "Set As Desktop Background..." menuitem when right clicking on an image.
 830
 831 **Compatibility:** Firefox 60, Firefox ESR 60\
 832 **CCK2 Equivalent:** `removeSetDesktopBackground`\
 833 **Preferences Affected:** N/A
 834
 835 #### Windows (GPO)
 836 ```
 837 Software\Policies\Mozilla\Firefox\DisableSetDesktopBackground = 0x1 | 0x0
 838 ```
 839 #### Windows (Intune)
 840 OMA-URI:
 841 ```
 842 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSetDesktopBackground
 843 ```
 844 Value (string):
 845 ```
 846 <enabled/> or <disabled/>
 847 ```
 848 #### macOS
 849 ```
 850 <dict>
 851   <key>DisableSetDesktopBackground</key>
 852   <true/> | <false/>
 853 </dict>
 854 ```
 855 #### policies.json
 856 ```
 857 {
 858   "policies": {
 859     "DisableSetDesktopBackground": true | false
 860   }
 861 }
 862 ```
 863 ### DisableMasterPasswordCreation
 864 Remove the master password functionality.
 865
 866 If this value is true, it works the same as setting [`PrimaryPassword`](#primarypassword) to false and removes the primary password functionality.
 867
 868 If both DisableMasterPasswordCreation and PrimaryPassword are used, DisableMasterPasswordCreation takes precedent.
 869
 870 **Compatibility:** Firefox 60, Firefox ESR 60\
 871 **CCK2 Equivalent:** `noMasterPassword`\
 872 **Preferences Affected:** N/A
 873
 874 #### Windows (GPO)
 875 ```
 876 Software\Policies\Mozilla\Firefox\DisableMasterPasswordCreation = 0x1 | 0x0
 877 ```
 878 #### Windows (Intune)
 879 OMA-URI:
 880 ```
 881 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableMasterPasswordCreation
 882 ```
 883 Value (string):
 884 ```
 885 <enabled/> or <disabled/>
 886 ```
 887 #### macOS
 888 ```
 889 <dict>
 890   <key>DisableMasterPasswordCreation</key>
 891   <true/> | <false/>
 892 </dict>
 893 ```
 894 #### policies.json
 895 ```
 896 {
 897   "policies": {
 898     "DisableMasterPasswordCreation": true | false
 899   }
 900 }
 901 ```
 902 ### DisableAppUpdate
 903 Turn off application updates.
 904
 905 **Compatibility:** Firefox 60, Firefox ESR 60\
 906 **CCK2 Equivalent:** `disableFirefoxUpdates`\
 907 **Preferences Affected:** N/A
 908
 909 #### Windows (GPO)
 910 ```
 911 Software\Policies\Mozilla\Firefox\DisableAppUpdate = 0x1 | 0x0
 912 ```
 913 #### Windows (Intune)
 914 OMA-URI:
 915 ```
 916 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableAppUpdate
 917 ```
 918 Value (string):
 919 ```
 920 <enabled/> or <disabled/>
 921 ```
 922 #### macOS
 923 ```
 924 <dict>
 925   <key>DisableAppUpdate</key>
 926   <true/> | <false/>
 927 </dict>
 928 ```
 929 #### policies.json
 930 ```
 931 {
 932   "policies": {
 933     "DisableAppUpdate": true | false
 934   }
 935 }
 936 ```
 937 ### DisableBuiltinPDFViewer
 938 Disable the built in PDF viewer. PDF files are downloaded and sent externally.
 939
 940 **Compatibility:** Firefox 60, Firefox ESR 60\
 941 **CCK2 Equivalent:** `disablePDFjs`\
 942 **Preferences Affected:** `pdfjs.disabled`
 943
 944 #### Windows (GPO)
 945 ```
 946 Software\Policies\Mozilla\Firefox\DisableBuiltinPDFViewer = 0x1 | 0x0
 947 ```
 948 #### Windows (Intune)
 949 OMA-URI:
 950 ```
 951 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableBuiltinPDFViewer
 952 ```
 953 Value (string):
 954 ```
 955 <enabled/> or <disabled/>
 956 ```
 957 #### macOS
 958 ```
 959 <dict>
 960   <key>DisableBuiltinPDFViewer</key>
 961   <true/> | <false/>
 962 </dict>
 963 ```
 964 #### policies.json
 965 ```
 966 {
 967   "policies": {
 968     "DisableBuiltinPDFViewer": true | false
 969   }
 970 }
 971 ```
 972 ### DisabledCiphers
 973 Disable specific cryptographic ciphers.
 974
 975 ---
 976 **Note:**
 977
 978 This policy was updated in Firefox 78 to allow enabling ciphers as well. Setting the value to true disables the cipher, setting the value to false enables the cipher. Previously setting the value to true or false disabled the cipher.
 979
 980 ---
 981 **Compatibility:** Firefox 76, Firefox ESR 68.8 (TLS_RSA_WITH_AES_128_GCM_SHA256 and TLS_RSA_WITH_AES_256_GCM_SHA384 were added in Firefox 78)\
 982 **CCK2 Equivalent:** N/A\
 983 **Preferences Affected:** N/A
 984
 985 #### Windows (GPO)
 986 ```
 987 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_DHE_RSA_WITH_AES_128_CBC_SHA = 0x1 | 0x0
 988 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_DHE_RSA_WITH_AES_256_CBC_SHA = 0x1 | 0x0
 989 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA = 0x1 | 0x0
 990 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA = 0x1 | 0x0
 991 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 = 0x1 | 0x0
 992 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 = 0x1 | 0x0
 993 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_RSA_WITH_AES_128_CBC_SHA = 0x1 | 0x0
 994 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_RSA_WITH_AES_256_CBC_SHA = 0x1 | 0x0
 995 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_RSA_WITH_3DES_EDE_CBC_SHA = 0x1 | 0x0
 996 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_RSA_WITH_AES_128_GCM_SHA256 = 0x1 | 0x0
 997 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_RSA_WITH_AES_256_GCM_SHA384 = 0x1 | 0x0
 998 ```
 999 #### Windows (Intune)
1000 OMA-URI:
1001 ```
1002 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_DHE_RSA_WITH_AES_128_CBC_SHA
1003 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_DHE_RSA_WITH_AES_256_CBC_SHA
1004 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
1005 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
1006 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
1007 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
1008 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_RSA_WITH_AES_128_CBC_SHA
1009 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_RSA_WITH_AES_256_CBC_SHA
1010 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_RSA_WITH_3DES_EDE_CBC_SHA
1011 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_RSA_WITH_AES_128_GCM_SHA256
1012 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_RSA_WITH_AES_256_GCM_SHA384
1013 ```
1014 Value (string):
1015 ```
1016 <enabled/> or <disabled/>
1017 ```
1018 #### macOS
1019 ```
1020 <dict>
1021   <key>DisabledCiphers</key>
1022     <dict>
1023       <key>TLS_DHE_RSA_WITH_AES_128_CBC_SHA</key>
1024       <true/> | <false/>
1025       <key>TLS_DHE_RSA_WITH_AES_256_CBC_SHA</key>
1026       <true/> | <false/>
1027       <key>TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA</key>
1028       <true/> | <false/>
1029       <key>TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA</key>
1030       <true/> | <false/>
1031       <key>TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256</key>
1032       <true/> | <false/>
1033       <key>TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256</key>
1034       <true/> | <false/>
1035       <key>TLS_RSA_WITH_AES_128_CBC_SHA</key>
1036       <true/> | <false/>
1037       <key>TLS_RSA_WITH_AES_256_CBC_SHA</key>
1038       <true/> | <false/>
1039       <key>TLS_RSA_WITH_3DES_EDE_CBC_SHA</key>
1040       <true/> | <false/>
1041       <key>TLS_RSA_WITH_AES_128_GCM_SHA256</key>
1042       <true/> | <false/>
1043       <key>TLS_RSA_WITH_AES_256_GCM_SHA384</key>
1044       <true/> | <false/>
1045     </dict>
1046 </dict>
1047 ```
1048 #### policies.json
1049 ```
1050 {
1051   "policies": {
1052     "DisabledCiphers" {
1053       "TLS_DHE_RSA_WITH_AES_128_CBC_SHA": true | false,
1054       "TLS_DHE_RSA_WITH_AES_256_CBC_SHA": true | false,
1055       "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA": true | false,
1056       "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA": true | false,
1057       "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256": true | false,
1058       "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256": true | false,
1059       "TLS_RSA_WITH_AES_128_CBC_SHA": true | false,
1060       "TLS_RSA_WITH_AES_256_CBC_SHA": true | false,
1061       "TLS_RSA_WITH_3DES_EDE_CBC_SHA": true | false
1062       "TLS_RSA_WITH_AES_128_GCM_SHA256": true | false
1063       "TLS_RSA_WITH_AES_256_GCM_SHA384": true | false
1064     }
1065   }
1066 }
1067 ```
1068 ### DisableDefaultBrowserAgent
1069 Prevent the default browser agent from taking any actions. Only applicable to Windows; other platforms don’t have the agent.
1070
1071 **Compatibility:** Firefox 75, Firefox ESR 68.7 (Windows only)\
1072 **CCK2 Equivalent:** N/A\
1073 **Preferences Affected:** N/A
1074
1075 #### Windows (GPO)
1076 ```
1077 Software\Policies\Mozilla\Firefox\DisableDefaultBrowserAgent = 0x1 | 0x0
1078 ```
1079 #### Windows (Intune)
1080 OMA-URI:
1081 ```
1082 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableDefaultBrowserAgent
1083 ```
1084 Value (string):
1085 ```
1086 <enabled/> or <disabled/>
1087 ```
1088 #### policies.json
1089 ```
1090 {
1091   "policies": {
1092     "DisableDefaultBrowserAgent": true | false
1093   }
1094 }
1095 ```
1096 ### DisableDeveloperTools
1097 Remove access to all developer tools.
1098
1099 **Compatibility:** Firefox 60, Firefox ESR 60\
1100 **CCK2 Equivalent:** `removeDeveloperTools`\
1101 **Preferences Affected:** `devtools.policy.disabled`
1102
1103 #### Windows (GPO)
1104 ```
1105 Software\Policies\Mozilla\Firefox\DisableDeveloperTools = 0x1 | 0x0`
1106 ```
1107 #### Windows (Intune)
1108 OMA-URI:
1109 ```
1110 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableDeveloperTools
1111 ```
1112 Value (string):
1113 ```
1114 <enabled/> or <disabled/>
1115 ```
1116 #### macOS
1117 ```
1118 <dict>
1119   <key>DisableDeveloperTools</key>
1120   <true/> | <false/>
1121 </dict>
1122 ```
1123 #### policies.json
1124 ```
1125 {
1126   "policies": {
1127     "DisableDeveloperTools": true | false
1128   }
1129 }
1130 ```
1131 ### DisableFeedbackCommands
1132 Disable the menus for reporting sites (Submit Feedback, Report Deceptive Site).
1133
1134 **Compatibility:** Firefox 60, Firefox ESR 60\
1135 **CCK2 Equivalent:** N/A\
1136 **Preferences Affected:** N/A
1137
1138 #### Windows (GPO)
1139 ```
1140 Software\Policies\Mozilla\Firefox\DisableFeedbackCommands = 0x1 | 0x0
1141 ```
1142 #### Windows (Intune)
1143 OMA-URI:
1144 ```
1145 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFeedbackCommands
1146 ```
1147 Value (string):
1148 ```
1149 <enabled/> or <disabled/>
1150 ```
1151 #### macOS
1152 ```
1153 <dict>
1154   <key>DisableFeedbackCommands</key>
1155   <true/> | <false/>
1156 </dict>
1157 ```
1158 #### policies.json
1159 ```
1160 {
1161   "policies": {
1162     "DisableFeedbackCommands": true | false
1163   }
1164 }
1165 ```
1166 ### DisableFirefoxScreenshots
1167 Remove access to Firefox Screenshots.
1168
1169 **Compatibility:** Firefox 60, Firefox ESR 60\
1170 **CCK2 Equivalent:** N/A\
1171 **Preferences Affected:** `extensions.screenshots.disabled`
1172
1173 #### Windows (GPO)
1174 ```
1175 Software\Policies\Mozilla\Firefox\DisableFirefoxScreenshots = 0x1 | 0x0
1176 ```
1177 #### Windows (Intune)
1178 OMA-URI:
1179 ```
1180 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxScreenshots
1181 ```
1182 Value (string):
1183 ```
1184 <enabled/> or <disabled/>
1185 ```
1186 #### macOS
1187 ```
1188 <dict>
1189   <key>DisableFirefoxScreenshots</key>
1190   <true/> | <false/>
1191 </dict>
1192 ```
1193 #### policies.json
1194 ```
1195 {
1196   "policies": {
1197     "DisableFirefoxScreenshots": true | false
1198   }
1199 }
1200 ```
1201 ### DisableFirefoxAccounts
1202 Disable Firefox Accounts integration (Sync).
1203
1204 **Compatibility:** Firefox 60, Firefox ESR 60\
1205 **CCK2 Equivalent:** `disableSync`\
1206 **Preferences Affected:** `identity.fxaccounts.enabled`
1207
1208 #### Windows (GPO)
1209 ```
1210 Software\Policies\Mozilla\Firefox\DisableFirefoxAccounts = 0x1 | 0x0
1211 ```
1212 #### Windows (Intune)
1213 OMA-URI:
1214 ```
1215 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxAccounts
1216 ```
1217 Value (string):
1218 ```
1219 <enabled/> or <disabled/>
1220 ```
1221 #### macOS
1222 ```
1223 <dict>
1224   <key>DisableFirefoxAccounts</key>
1225   <true/> | <false/>
1226 </dict>
1227 ```
1228 #### policies.json
1229 ```
1230 {
1231   "policies": {
1232     "DisableFirefoxAccounts": true | false
1233   }
1234 }
1235 ```
1236 ### DisableFirefoxStudies
1237 Disable Firefox studies (Shield).
1238
1239 **Compatibility:** Firefox 60, Firefox ESR 60\
1240 **CCK2 Equivalent:** N/A\
1241 **Preferences Affected:** N/A
1242
1243 #### Windows (GPO)
1244 ```
1245 Software\Policies\Mozilla\Firefox\DisableFirefoxStudies = 0x1 | 0x0
1246 ```
1247 #### Windows (Intune)
1248 OMA-URI:
1249 ```
1250 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxStudies
1251 ```
1252 Value (string):
1253 ```
1254 <enabled/> or <disabled/>
1255 ```
1256 #### macOS
1257 ```
1258 <dict>
1259   <key>DisableFirefoxStudies</key>
1260   <true/> | <false/>
1261 </dict>
1262 ```
1263 #### policies.json
1264 ```
1265 {
1266   "policies": {
1267     "DisableFirefoxStudies": true | false
1268   }
1269 }
1270 ```
1271 ### DisableForgetButton
1272 Disable the "Forget" button.
1273
1274 **Compatibility:** Firefox 60, Firefox ESR 60\
1275 **CCK2 Equivalent:** `disableForget`\
1276 **Preferences Affected:** N/A
1277
1278 #### Windows (GPO)
1279 ```
1280 Software\Policies\Mozilla\Firefox\DisableForgetButton = 0x1 | 0x0
1281 ```
1282 #### Windows (Intune)
1283 OMA-URI:
1284 ```
1285 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableForgetButton
1286 ```
1287 Value (string):
1288 ```
1289 <enabled/> or <disabled/>
1290 ```
1291 #### macOS
1292 ```
1293 <dict>
1294   <key>DisableForgetButton</key>
1295   <true/> | <false/>
1296 </dict>
1297 ```
1298 #### policies.json
1299 ```
1300 {
1301   "policies": {
1302     "DisableForgetButton": true | false
1303   }
1304 }
1305 ```
1306 ### DisableFormHistory
1307 Turn off saving information on web forms and the search bar.
1308
1309 **Compatibility:** Firefox 60, Firefox ESR 60\
1310 **CCK2 Equivalent:** `disableFormFill`\
1311 **Preferences Affected:** ` browser.formfill.enable`
1312
1313 #### Windows (GPO)
1314 ```
1315 Software\Policies\Mozilla\Firefox\DisableFormHistory = 0x1 | 0x0
1316 ```
1317 #### Windows (Intune)
1318 OMA-URI:
1319 ```
1320 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFormHistory
1321 ```
1322 Value (string):
1323 ```
1324 <enabled/> or <disabled/>
1325 ```
1326 #### macOS
1327 ```
1328 <dict>
1329   <key>DisableFormHistory</key>
1330   <true/> | <false/>
1331 </dict>
1332 ```
1333 #### policies.json
1334 ```
1335 {
1336   "policies": {
1337     "DisableFormHistory": true | false
1338   }
1339 }
1340 ```
1341 ### DisablePasswordReveal
1342 Do not allow passwords to be shown in saved logins
1343
1344 **Compatibility:** Firefox 71, Firefox ESR 68.3\
1345 **CCK2 Equivalent:** N/A
1346 **Preferences Affected:** N/A
1347
1348 #### Windows (GPO)
1349 ```
1350 Software\Policies\Mozilla\Firefox\DisablePasswordReveal = 0x1 | 0x0
1351 ```
1352 #### Windows (Intune)
1353 OMA-URI:
1354 ```
1355 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePasswordReveal
1356 ```
1357 Value (string):
1358 ```
1359 <enabled/> or <disabled/>
1360 ```
1361 #### macOS
1362 ```
1363 <dict>
1364   <key>DisablePasswordReveal</key>
1365   <true/> | <false/>
1366 </dict>
1367 ```
1368 #### policies.json
1369 ```
1370 {
1371   "policies": {
1372     "DisablePasswordReveal": true | false
1373   }
1374 }
1375 ```
1376 ### DisablePocket
1377 Remove Pocket in the Firefox UI. It does not remove it from the new tab page.
1378
1379 **Compatibility:** Firefox 60, Firefox ESR 60\
1380 **CCK2 Equivalent:** `disablePocket`\
1381 **Preferences Affected:** `extensions.pocket.enabled`
1382
1383 #### Windows (GPO)
1384 ```
1385 Software\Policies\Mozilla\Firefox\DisablePocket = 0x1 | 0x0
1386 ```
1387 #### Windows (Intune)
1388 OMA-URI:
1389 ```
1390 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePocket
1391 ```
1392 Value (string):
1393 ```
1394 <enabled/> or <disabled/>
1395 ```
1396 #### macOS
1397 ```
1398 <dict>
1399   <key>DisablePocket</key>
1400   <true/> | <false/>
1401 </dict>
1402 ```
1403 #### policies.json
1404 ```
1405 {
1406   "policies": {
1407     "DisablePocket": true | false
1408   }
1409 }
1410 ```
1411 ### DisablePrivateBrowsing
1412 Remove access to private browsing.
1413
1414 **Compatibility:** Firefox 60, Firefox ESR 60\
1415 **CCK2 Equivalent:** `disablePrivateBrowsing`\
1416 **Preferences Affected:** N/A
1417
1418 #### Windows (GPO)
1419 ```
1420 Software\Policies\Mozilla\Firefox\DisablePrivateBrowsing = 0x1 | 0x0
1421 ```
1422 #### Windows (Intune)
1423 OMA-URI:
1424 ```
1425 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePrivateBrowsing
1426 ```
1427 Value (string):
1428 ```
1429 <enabled/> or <disabled/>
1430 ```
1431 #### macOS
1432 ```
1433 <dict>
1434   <key>DisablePrivateBrowsing</key>
1435   <true/> | <false/>
1436 </dict>
1437 ```
1438 #### policies.json
1439 ```
1440 {
1441   "policies": {
1442     "DisablePrivateBrowsing": true | false
1443   }
1444 }
1445 ```
1446 ### DisableProfileImport
1447 Disables the "Import data from another browser" option in the bookmarks window.
1448
1449 **Compatibility:** Firefox 60, Firefox ESR 60\
1450 **CCK2 Equivalent:** N/A\
1451 **Preferences Affected:** N/A
1452
1453 #### Windows (GPO)
1454 ```
1455 Software\Policies\Mozilla\Firefox\DisableProfileImport = 0x1 | 0x0
1456 ```
1457 #### Windows (Intune)
1458 OMA-URI:
1459 ```
1460 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableProfileImport
1461 ```
1462 Value (string):
1463 ```
1464 <enabled/> or <disabled/>
1465 ```
1466 #### macOS
1467 ```
1468 <dict>
1469   <key>DisableProfileImport</key>
1470   <true/> | <false/>
1471 </dict>
1472 ```
1473 #### policies.json
1474 ```
1475 {
1476   "policies": {
1477     "DisableProfileImport": true | false
1478   }
1479 }
1480 ```
1481 ### DisableProfileRefresh
1482 Disable the Refresh Firefox button on about:support and support.mozilla.org, as well as the prompt that displays offering to refresh Firefox when you haven't used it in a while.
1483
1484 **Compatibility:** Firefox 60, Firefox ESR 60\
1485 **CCK2 Equivalent:** `disableResetFirefox`\
1486 **Preferences Affected:** `browser.disableResetPrompt`
1487
1488 #### Windows (GPO)
1489 ```
1490 Software\Policies\Mozilla\Firefox\DisableProfileRefresh = 0x1 | 0x0
1491 ```
1492 #### Windows (Intune)
1493 OMA-URI:
1494 ```
1495 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableProfileRefresh
1496 ```
1497 Value (string):
1498 ```
1499 <enabled/> or <disabled/>
1500 ```
1501 #### macOS
1502 ```
1503 <dict>
1504   <key>DisableProfileRefresh</key>
1505   <true/> | <false/>
1506 </dict>
1507 ```
1508 #### policies.json
1509 ```
1510 {
1511   "policies": {
1512     "DisableProfileRefresh": true | false
1513   }
1514 }
1515 ```
1516 ### DisableSafeMode
1517 Disable safe mode within the browser.
1518
1519 On Windows, this disables safe mode via the command line as well.
1520
1521 **Compatibility:** Firefox 60, Firefox ESR 60 (Windows, macOS)\
1522 **CCK2 Equivalent:** `disableSafeMode`\
1523 **Preferences Affected:** N/A
1524
1525 #### Windows (GPO)
1526 ```
1527 Software\Policies\Mozilla\Firefox\DisableSafeMode = 0x1 | 0x0
1528 ```
1529 #### Windows (Intune)
1530 OMA-URI:
1531 ```
1532 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSafeMode
1533 ```
1534 Value (string):
1535 ```
1536 <enabled/> or <disabled/>
1537 ```
1538 #### macOS
1539 ```
1540 <dict>
1541   <key>DisableSafeMode</key>
1542   <true/> | <false/>
1543 </dict>
1544 ```
1545 #### policies.json
1546 ```
1547 {
1548   "policies": {
1549     "DisableSafeMode": true | false
1550   }
1551 }
1552 ```
1553 ### DisableSecurityBypass
1554 Prevent the user from bypassing security in certain cases.
1555
1556 `InvalidCertificate` prevents adding an exception when an invalid certificate is shown.
1557
1558 `SafeBrowsing` prevents selecting "ignore the risk" and visiting a harmful site anyway.
1559
1560 **Compatibility:** Firefox 60, Firefox ESR 60\
1561 **CCK2 Equivalent:** N/A\
1562 **Preferences Affected:** `security.certerror.hideAddException`,`browser.safebrowsing.allowOverride`
1563
1564 #### Windows (GPO)
1565 ```
1566 Software\Policies\Mozilla\Firefox\DisableSecurityBypass\InvalidCertificate = 0x1 | 0x0
1567 Software\Policies\Mozilla\Firefox\DisableSecurityBypass\SafeBrowsing = 0x1 | 0x0
1568 ```
1569 #### Windows (Intune)
1570 OMA-URI:
1571 ```
1572 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/P_DisableSecurityBypass_InvalidCertificate
1573 ```
1574 Value (string):
1575 ```
1576 <enabled/> or <disabled/>
1577 ```
1578 OMA-URI:
1579 ```
1580 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/P_DisableSecurityBypass_SafeBrowsing
1581 ```
1582 Value (string):
1583 ```
1584 <enabled/> or <disabled/>
1585 ```
1586
1587 #### macOS
1588 ```
1589 <dict>
1590   <key>DisableSecurityBypass</key>
1591   <dict>
1592     <key>InvalidCertificate</key>
1593     <true/> | <false/>
1594     <key><SafeBrowsing/key>
1595     <true/> | <false/>
1596   </dict>
1597 </dict>
1598 ```
1599 #### policies.json
1600 ```
1601 {
1602   "policies": {
1603     "DisableSecurityBypass": {
1604       "InvalidCertificate": true | false,
1605       "SafeBrowsing": true | false
1606     }
1607   }
1608 }
1609 ```
1610 ### DisableSystemAddonUpdate
1611 Prevent system add-ons from being installed or update.
1612
1613 **Compatibility:** Firefox 60, Firefox ESR 60\
1614 **CCK2 Equivalent:** N/A\
1615 **Preferences Affected:** N/A
1616
1617 #### Windows (GPO)
1618 ```
1619 Software\Policies\Mozilla\Firefox\DisableSystemAddonUpdate = 0x1 | 0x0
1620 ```
1621 #### Windows (Intune)
1622 OMA-URI:
1623 ```
1624 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSystemAddonUpdate
1625 ```
1626 Value (string):
1627 ```
1628 <enabled/> or <disabled/>
1629 ```
1630 #### macOS
1631 ```
1632 <dict>
1633   <key>DisableSystemAddonUpdate</key>
1634   <true/> | <false/>
1635 </dict>
1636 ```
1637 #### policies.json
1638 ```
1639 {
1640   "policies": {
1641     "DisableSystemAddonUpdate": true | false
1642   }
1643 }
1644 ```
1645 ### DisableTelemetry
1646 Prevent the upload of telemetry data.
1647
1648 Mozilla recommends that you do not disable telemetry. Information collected through telemetry helps us build a better product for businesses like yours.
1649
1650 **Compatibility:** Firefox 60, Firefox ESR 60\
1651 **CCK2 Equivalent:** `disableTelemetry`\
1652 **Preferences Affected:** `datareporting.healthreport.uploadEnabled,datareporting.policy.dataSubmissionEnabled`
1653
1654 #### Windows (GPO)
1655 ```
1656 Software\Policies\Mozilla\Firefox\DisableTelemetry = 0x1 | 0x0
1657 ```
1658 #### Windows (Intune)
1659 OMA-URI:
1660 ```
1661 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableTelemetry
1662 ```
1663 Value (string):
1664 ```
1665 <enabled/> or <disabled/>
1666 ```
1667 #### macOS
1668 ```
1669 <dict>
1670   <key>DisableTelemetry</key>
1671   <true/> | <false/>
1672 </dict>
1673 ```
1674 #### policies.json
1675 ```
1676 {
1677   "policies": {
1678     "DisableTelemetry": true | false
1679   }
1680 }
1681 ```
1682 ### DisplayBookmarksToolbar
1683 Set the initial state of the bookmarks toolbar. A user can still hide it and it will stay hidden.
1684
1685 **Compatibility:** Firefox 60, Firefox ESR 60\
1686 **CCK2 Equivalent:** `displayBookmarksToolbar`\
1687 **Preferences Affected:** N/A
1688
1689 #### Windows (GPO)
1690 ```
1691 Software\Policies\Mozilla\Firefox\DisplayBookmarksToolbar = 0x1 | 0x0
1692 ```
1693 #### Windows (Intune)
1694 OMA-URI:
1695 ```
1696 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisplayBookmarksToolbar
1697 ```
1698 Value (string):
1699 ```
1700 <enabled/> or <disabled/>
1701 ```
1702 #### macOS
1703 ```
1704 <dict>
1705   <key>DisplayBookmarksToolbar</key>
1706   <true/> | <false/>
1707 </dict>
1708 ```
1709 #### policies.json
1710 ```
1711 {
1712   "policies": {
1713     "DisplayBookmarksToolbar": true | false
1714   }
1715 }
1716 ```
1717 ### DisplayMenuBar (Deprecated)
1718 Set the initial state of the menubar. A user can still hide it and it will stay hidden.
1719
1720 **Compatibility:** Firefox 60, Firefox ESR 60 (Windows, some Linux)\
1721 **CCK2 Equivalent:** `displayMenuBar`\
1722 **Preferences Affected:** N/A
1723
1724 #### Windows (GPO)
1725 ```
1726 Software\Policies\Mozilla\Firefox\DisplayMenuBar = 0x1 | 0x0
1727 ```
1728 #### macOS
1729 ```
1730 <dict>
1731   <key>DisplayMenuBar</key>
1732   <true/> | <false/>
1733 </dict>
1734 ```
1735 #### policies.json
1736 ```
1737 {
1738   "policies": {
1739     "DisplayMenuBar": true | false
1740   }
1741 }
1742 ```
1743 ### DisplayMenuBar
1744 Set the state of the menubar.
1745
1746 `always` means the menubar is shown and cannot be hidden.
1747
1748 `never` means the menubar is hidden and cannot be shown.
1749
1750 `default-on` means the menubar is on by default but can be hidden.
1751
1752 `default-off` means the menubar is off by default but can be shown.
1753
1754 **Compatibility:** Firefox 73, Firefox ESR 68.5 (Windows, some Linux)\
1755 **CCK2 Equivalent:** `displayMenuBar`\
1756 **Preferences Affected:** N/A
1757
1758 #### Windows (GPO)
1759 ```
1760 Software\Policies\Mozilla\Firefox\DisplayMenuBar = "always", "never", "default-on", "default-off"
1761 ```
1762 #### Windows (Intune)
1763 OMA-URI:
1764 ```
1765 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisplayMenuBar_Enum
1766 ```
1767 Value (string):
1768 ```
1769 <enabled/>
1770 <data id="DisplayMenuBar" value="always | never | default-on | default-off"/>
1771 ```
1772 #### macOS
1773 ```
1774 <dict>
1775   <key>DisplayMenuBar</key>
1776   <string>always | never | default-on | default-off</string>
1777 </dict>
1778 ```
1779 #### policies.json
1780 ```
1781 {
1782   "policies": {
1783     "DisplayMenuBar": "always", "never", "default-on", "default-off"
1784   }
1785 }
1786 ```
1787 ### DNSOverHTTPS
1788 Configure DNS over HTTPS.
1789
1790 `Enabled` determines whether DNS over HTTPS is enabled
1791
1792 `ProviderURL` is a URL to another provider.
1793
1794 `Locked` prevents the user from changing DNS over HTTPS preferences.
1795
1796 `ExcludedDomains` excludes domains from DNS over HTTPS.
1797
1798 **Compatibility:** Firefox 63, Firefox ESR 68 (ExcludedDomains added in 75/68.7)\
1799 **CCK2 Equivalent:** N/A\
1800 **Preferences Affected:** `network.trr.mode`,`network.trr.uri`
1801
1802 #### Windows (GPO)
1803 ```
1804 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\Enabled = 0x1 | 0x0
1805 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\ProviderURL = "URL_TO_ALTERNATE_PROVIDER"
1806 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\Locked = 0x1 | 0x0
1807 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\ExcludedDomains\1 = "example.com"
1808 ```
1809 #### Windows (Intune)
1810 OMA-URI:
1811 ```
1812 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_Enabled
1813 ```
1814 Value (string):
1815 ```
1816 <enabled/> or <disabled/>
1817 ```
1818 OMA-URI:
1819 ```
1820 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_ProviderURL
1821 ```
1822 Value (string):
1823 ```
1824 <enabled/>
1825 <data id="String" value="URL_TO_ALTERNATE_PROVIDER"/>
1826 ```
1827 OMA-URI:
1828 ```
1829 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_Locked
1830 ```
1831 Value (string):
1832 ```
1833 <enabled/> or <disabled/>
1834 ```
1835 OMA-URI:
1836 ```
1837 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_ExcludedDomains
1838 ```
1839 Value (string):
1840 ```
1841 <enabled/>
1842 <data id="List" value="1&#xF000;example.com"/>
1843 ```
1844 #### macOS
1845 ```
1846 <dict>
1847   <key>DNSOverHTTPS</key>
1848   <dict>
1849     <key>Enabled</key>
1850     <true/> | <false/>
1851     <key>ProviderURL</key>
1852     <string>URL_TO_ALTERNATE_PROVIDER</string>
1853     <key>Locked</key>
1854     <true/> | <false/>
1855     <key>ExcludedDomains</key>
1856     <array>
1857       <string>example.com</string>
1858     </array>
1859   </dict>
1860 </dict>
1861 ```
1862 #### policies.json
1863 ```
1864 {
1865   "policies": {
1866     "DNSOverHTTPS": {
1867       "Enabled":  true | false,
1868       "ProviderURL": "URL_TO_ALTERNATE_PROVIDER",
1869       "Locked": true | false,
1870       "ExcludedDomains": ["example.com"]
1871     }
1872   }
1873 }
1874 ```
1875 ### DontCheckDefaultBrowser
1876 Don't check if Firefox is the default browser at startup.
1877
1878 **Compatibility:** Firefox 60, Firefox ESR 60\
1879 **CCK2 Equivalent:** `dontCheckDefaultBrowser`\
1880 **Preferences Affected:** `browser.shell.checkDefaultBrowser`
1881
1882 #### Windows (GPO)
1883 ```
1884 Software\Policies\Mozilla\Firefox\DontCheckDefaultBrowser = 0x1 | 0x0
1885 ```
1886 #### Windows (Intune)
1887 OMA-URI:
1888 ```
1889 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DontCheckDefaultBrowser
1890 ```
1891 Value (string):
1892 ```
1893 <enabled/> or <disabled/>
1894 ```
1895 #### macOS
1896 ```
1897 <dict>
1898   <key>DontCheckDefaultBrowser</key>
1899   <true/> | <false/>
1900 </dict>
1901 ```
1902 #### policies.json
1903 ```
1904 {
1905   "policies": {
1906     "DontCheckDefaultBrowser": true | false
1907   }
1908 }
1909 ```
1910 ### DefaultDownloadDirectory
1911 Set the default download directory.
1912
1913 You can use ${home} for the native home directory.
1914
1915 **Compatibility:** Firefox 68, Firefox ESR 68\
1916 **CCK2 Equivalent:** N/A\
1917 **Preferences Affected:** `browser.download.dir`,`browser.download.folderList`
1918
1919 #### Windows (GPO)
1920 ```
1921 Software\Policies\Mozilla\Firefox\DefaultDownloadDirectory = "${home}\Downloads"
1922 ```
1923 #### Windows (Intune)
1924 OMA-URI:
1925 ```
1926 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DefaultDownloadDirectory
1927 ```
1928 Value (string):
1929 ```
1930 <enabled/>
1931 <data id="Preferences_String" value="${home}\Downloads"/>
1932 ```
1933 #### macOS
1934 ```
1935 <dict>
1936   <key>DefaultDownloadDirectory</key>
1937   <string>${home}/Downloads</string>
1938 </dict>
1939 ```
1940 #### policies.json (macOS and Linux)
1941 ```
1942 {
1943   "policies": {
1944     "DefaultDownloadDirectory": "${home}/Downloads"
1945 }
1946 ```
1947 #### policies.json (Windows)
1948 ```
1949 {
1950   "policies": {
1951     "DefaultDownloadDirectory": "${home}\\Downloads"
1952 }
1953 ```
1954 ### DownloadDirectory
1955 Set and lock the download directory.
1956
1957 You can use ${home} for the native home directory.
1958
1959 **Compatibility:** Firefox 68, Firefox ESR 68\
1960 **CCK2 Equivalent:** N/A\
1961 **Preferences Affected:** `browser.download.dir`,`browser.download.folderList`,`browser.download.useDownloadDir`
1962
1963 #### Windows (GPO)
1964 ```
1965 Software\Policies\Mozilla\Firefox\DownloadDirectory = "${home}\Downloads"
1966 ```
1967 #### Windows (Intune)
1968 OMA-URI:
1969 ```
1970 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DownloadDirectory
1971 ```
1972 Value (string):
1973 ```
1974 <enabled/>
1975 <data id="Preferences_String" value="${home}\Downloads"/>
1976 ```
1977 #### macOS
1978 ```
1979 <dict>
1980   <key>DownloadDirectory</key>
1981   <string>${home}/Downloads</string>
1982 </dict>
1983 ```
1984 #### policies.json (macOS and Linux)
1985 ```
1986 {
1987   "policies": {
1988     "DownloadDirectory": "${home}/Downloads"
1989 }
1990 ```
1991 #### policies.json (Windows)
1992 ```
1993 {
1994   "policies": {
1995     "DownloadDirectory": "${home}\\Downloads"
1996 }
1997 ```
1998 ### EnableTrackingProtection
1999 Configure tracking protection.
2000
2001 If this policy is not configured, tracking protection is not enabled by default in the browser, but it is enabled by default in private browsing and the user can change it.
2002
2003 If `Value` is set to false, tracking protection is disabled and locked in both the regular browser and private browsing.
2004
2005 If `Value` is set to true, tracking protection is enabled by default in both the regular browser and private browsing and the `Locked` value determines whether or not a user can change it.
2006
2007 If `Cryptomining` is set to true, cryptomining scripts on websites are blocked.
2008
2009 If `Fingerprinting` is set to true, fingerprinting scripts on websites are blocked.
2010
2011 `Exceptions` are origins for which tracking protection is not enabled.
2012
2013 **Compatibility:** Firefox 60, Firefox ESR 60 (Cryptomining and Fingerprinting added in 70/68.2, Exceptions added in 73/68.5)\
2014 **CCK2 Equivalent:** N/A\
2015 **Preferences Affected:** `privacy.trackingprotection.enabled`,`privacy.trackingprotection.pbmode.enabled`,`privacy.trackingprotection.cryptomining.enabled`,`privacy.trackingprotection.fingerprinting.enabled`
2016
2017 #### Windows (GPO)
2018 ```
2019 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Value = 0x1 | 0x0
2020 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Locked = 0x1 | 0x0
2021 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Cryptomining = 0x1 | 0x0
2022 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Fingerprinting = 0x1 | 0x0
2023 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Exceptions\1 = "https://example.com"
2024 ```
2025 #### Windows (Intune)
2026 OMA-URI:
2027 ```
2028 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/A_TrackingProtection_Value
2029 ```
2030 Value (string):
2031 ```
2032 <enabled/>or <disabled/>
2033 ```
2034 OMA-URI:
2035 ```
2036 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/B_TrackingProtection_Cryptomining
2037 ```
2038 Value (string):
2039 ```
2040 <enabled/>or <disabled/>
2041 ```
2042 OMA-URI:
2043 ```
2044 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/C_TrackingProtection_Fingerprinting
2045 ```
2046 Value (string):
2047 ```
2048 <enabled/>or <disabled/>
2049 ```
2050 OMA-URI:
2051 ```
2052 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/D_TrackingProtection_Exceptions
2053 ```
2054 Value (string):
2055 ```
2056 <data id="TrackingProtection_Exceptions" value="1&#xF000;https://example.com"/>
2057 ```
2058 OMA-URI:
2059 ```
2060 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/E_TrackingProtection_Locked
2061 ```
2062 Value (string):
2063 ```
2064 <enabled/>or <disabled/>
2065 ```
2066 #### macOS
2067 ```
2068 <dict>
2069   <key>EnableTrackingProtection</key>
2070   <dict>
2071     <key>Value</key>
2072     <true/> | <false/>
2073     <key><Locked</key>
2074     <true/> | <false/>
2075     <key><Cryptomining</key>
2076     <true/> | <false/>
2077     <key><Fingerprinting</key>
2078     <true/> | <false/>
2079     <key>Exceptions</key>
2080     <array>
2081       <string>https://example.com</string>
2082     </array>
2083   </dict>
2084 </dict>
2085 ```
2086 #### policies.json
2087 ```
2088 {
2089   "policies": {
2090     "EnableTrackingProtection": {
2091       "Value": true | false,
2092       "Locked": true | false,
2093       "Cryptomining": true | false,
2094       "Fingerprinting": true | false,
2095       "Exceptions": ["https://example.com"]
2096     }
2097 }
2098 ```
2099 ### EncryptedMediaExtensions
2100 Enable or disable Encrypted Media Extensions and optionally lock it.
2101
2102 If `Enabled` is set to false, encrypted media extensions (like Widevine) are not downloaded by Firefox unless the user consents to installing them.
2103
2104 If `Locked` is set to true and `Enabled` is set to false, Firefox will not download encrypted media extensions (like Widevine) or ask the user to install them.
2105
2106 **Compatibility:** Firefox 77, Firefox ESR 68.9\
2107 **CCK2 Equivalent:** N/A\
2108 **Preferences Affected:** `media.eme.enabled`
2109
2110 #### Windows (GPO)
2111 ```
2112 Software\Policies\Mozilla\Firefox\EncryptedMediaExtensions\Enabled = 0x1 | 0x0
2113 Software\Policies\Mozilla\Firefox\EncryptedMediaExtensions\Locked = 0x1 | 0x0
2114 ```
2115 #### Windows (Intune)
2116 OMA-URI:
2117 ```
2118 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~EncryptedMediaExtensions/EncryptedMediaExtensions_Enabled
2119 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~EncryptedMediaExtensions/EncryptedMediaExtensions_Locked
2120 ```
2121 Value (string):
2122 ```
2123 <enabled/>or <disabled/>
2124 ```
2125 #### macOS
2126 ```
2127 <dict>
2128   <key>EncryptedMediaExtensions</key>
2129   <dict>
2130     <key>Enabled</key>
2131     <true/> | <false/>
2132     <key><Locked</key>
2133     <true/> | <false/>
2134   </dict>
2135 </dict>
2136 ```
2137 #### policies.json
2138 ```
2139 {
2140   "policies": {
2141     "EncryptedMediaExtensions": {
2142       "Enabled": true | false,
2143       "Locked": true | false
2144     }
2145 }
2146 ```
2147 ### EnterprisePoliciesEnabled
2148 Enable policy support on macOS.
2149
2150 **Compatibility:** Firefox 63, Firefox ESR 60.3 (macOS only)\
2151 **CCK2 Equivalent:** N/A\
2152 **Preferences Affected:** N/A
2153
2154 #### macOS
2155 ```
2156 <dict>
2157   <key>EnterprisePoliciesEnabled</key>
2158   <true/>
2159 </dict>
2160 ```
2161 ### Extensions
2162 Control the installation, uninstallation and locking of extensions.
2163
2164 `Install` is a list of URLs or native paths for extensions to be installed.
2165
2166 `Uninstall` is a list of extension IDs that should be uninstalled if found.
2167
2168 `Locked` is a list of extension IDs that the user cannot disable or uninstall.
2169
2170 **Compatibility:** Firefox 60, Firefox ESR 60\
2171 **CCK2 Equivalent:** `addons`\
2172 **Preferences Affected:** N/A
2173
2174 #### Windows (GPO)
2175 ```
2176 Software\Policies\Mozilla\Firefox\Extensions\Install\1 = "https://addons.mozilla.org/firefox/downloads/somefile.xpi"
2177 Software\Policies\Mozilla\Firefox\Extensions\Install\2 = "//path/to/xpi"
2178 Software\Policies\Mozilla\Firefox\Extensions\Uninstall\1 = "bad_addon_id@mozilla.org"
2179 Software\Policies\Mozilla\Firefox\Extensions\Locked\1 = "addon_id@mozilla.org"
2180 ```
2181 #### Windows (Intune)
2182 OMA-URI:
2183 ```
2184 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/Extensions_Install
2185 ```
2186 Value (string):
2187 ```
2188 <enabled/>
2189 <data id="Extensions" value="1&#xF000;https://addons.mozilla.org/firefox/downloads/somefile.xpi&#xF000;2&#xF000;//path/to/xpi"/>
2190 ```
2191 OMA-URI:
2192 ```
2193 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/Extensions_Uninstall
2194 ```
2195 Value (string):
2196 ```
2197 <enabled/>
2198 <data id="Extensions" value="1&#xF000;bad_addon_id@mozilla.org"/>
2199 ```
2200 OMA-URI:
2201 ```
2202 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/Extensions_Locked
2203 ```
2204 Value (string):
2205 ```
2206 <enabled/>
2207 <data id="Extensions" value="1&#xF000;addon_id@mozilla.org"/>
2208 ```
2209 #### macOS
2210 ```
2211 <dict>
2212   <key>Extensions</key>
2213   <dict>
2214     <key>Install</key>
2215     <array>
2216       <string>https://addons.mozilla.org/firefox/downloads/somefile.xpi</string>
2217       <string>//path/to/xpi</string>
2218     </array>
2219     <key>Uninstall</key>
2220     <array>
2221       <string>bad_addon_id@mozilla.org</string>
2222     </array>
2223     <key>Locked</key>
2224     <array>
2225       <string>addon_id@mozilla.org</string>
2226     </array>
2227   </dict>
2228 </dict>
2229 ```
2230 #### policies.json
2231 ```
2232 {
2233   "policies": {
2234     "Extensions": {
2235       "Install": ["https://addons.mozilla.org/firefox/downloads/somefile.xpi", "//path/to/xpi"],
2236       "Uninstall": ["bad_addon_id@mozilla.org"],
2237       "Locked":  ["addon_id@mozilla.org"]
2238     }
2239   }
2240 }
2241 ```
2242 ### ExtensionSettings
2243 Manage all aspects of extensions. This policy is based heavily on the [Chrome policy](https://dev.chromium.org/administrators/policy-list-3/extension-settings-full) of the same name.
2244
2245 This policy maps an extension ID to its configuration. With an extension ID, the configuration will be applied to the specified extension only. A default configuration can be set for the special ID "*", which will apply to all extensions that don't have a custom configuration set in this policy.
2246
2247 To obtain an extension ID, install the extension and go to about:support. You will see the ID in the Extensions section. I've also created an extension that makes it easy to find the ID of extensions on AMO. You can download it [here](https://github.com/mkaply/queryamoid/releases/tag/v0.1).
2248
2249 The configuration for each extension is another dictionary that can contain the fields documented below.
2250
2251 | Name | Description |
2252 | --- | --- |
2253 | `installation_mode` | Maps to a string indicating the installation mode for the extension. The valid strings are `allowed`,`blocked`,`force_installed`, and `normal_installed`.
2254 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`allowed` | Allows the extension to be installed by the user. This is the default behavior. There is no need for an install_url; it will automatically be allowed based on the ID.
2255 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`blocked`| Blocks installation of the extension and removes it from the device if already installed.
2256 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`force_installed`| The extension is automatically installed and can't be removed by the user. This option is not valid for the default configuration and requires an install_url.
2257 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`normal_installed`| The extension is automatically installed but can be disabled by the user. This option is not valid for the default configuration and requires an install_url.
2258 | `install_url`| Maps to a URL indicating where Firefox can download a force_installed or normal_installed extension. If installing from the addons.mozilla.org, use the following URL (substituting SHORT_NAME from the URL on AMO), https://addons.mozilla.org/firefox/downloads/latest/SHORT_NAME/latest.xpi. If installing from the local file system, use a file:/// URL. Languages packs are available from https://releases.mozilla.org/pub/firefox/releases/VERSION/PLATFORM/xpi/LANGUAGE.xpi. If you need to update the extension, you can change the name of the extension and it will be automatically updated. Extensions installed from file URLs will additional be updated when their internal version changes.
2259 | `install_sources` | A list of sources from which installing extensions is allowed. **This is unnecessary if you are only allowing the installation of certain extensions by ID.** Each item in this list is an extension-style match pattern. Users will be able to easily install items from any URL that matches an item in this list. Both the location of the *.xpi file and the page where the download is started from (i.e.  the referrer) must be allowed by these patterns. This setting can be used only for the default configuration. If you want to allow the install of extensions from the recommended add-ons page, you must add `about:addons` to this list.
2260 | `allowed_types` | This setting whitelists the allowed types of extension/apps that can be installed in Firefox. The value is a list of strings, each of which should be one of the following: "extension", "theme", "dictionary", "langpack" This setting can be used only for the default configuration.
2261 | `blocked_install_message` | This maps to a string specifying the error message to display to users if they're blocked from installing an extension. This setting allows you to append text to the generic error message displayed when the extension is blocked. This could be be used to direct users to your help desk, explain why a particular extension is blocked, or something else. This setting can be used only for the default configuration.
2262 | `restricted_domains` | An array of domains on which content scripts can't be run. This setting can be used only for the default configuration.
2263
2264 **Compatibility:** Firefox 69, Firefox ESR 68.1\
2265 **CCK2 Equivalent:** N/A\
2266 **Preferences Affected:** N/A
2267
2268 #### Windows (GPO)
2269 ```
2270 Software\Policies\Mozilla\Firefox\ExtensionSettings (REG_MULTI_SZ) =
2271 {
2272   "*": {
2273     "blocked_install_message": "Custom error message.",
2274     "install_sources": ["about:addons","https://addons.mozilla.org/"],
2275     "installation_mode": "blocked",
2276     "allowed_types": ["extension"]
2277   },
2278   "uBlock0@raymondhill.net": {
2279     "installation_mode": "force_installed",
2280     "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
2281   },
2282   "https-everywhere@eff.org": {
2283     "installation_mode": "allowed",
2284   }
2285 }
2286 ```
2287 #### Windows (Intune)
2288 OMA-URI:
2289 ```
2290 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/ExtensionSettings
2291 ```
2292 Value (string):
2293 ```
2294 <enabled/>
2295 <data id="ExtensionSettings" value='
2296   "*": {
2297     "blocked_install_message": "Custom error message.",
2298     "install_sources": ["about:addons","https://addons.mozilla.org/"],
2299     "installation_mode": "blocked",
2300     "allowed_types": ["extension"]
2301   },
2302   "uBlock0@raymondhill.net": {
2303     "installation_mode": "force_installed",
2304     "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
2305   },
2306     "https-everywhere@eff.org": {
2307     "installation_mode": "allowed",
2308   }'/>
2309 ```
2310 #### macOS
2311 ```
2312 <dict>
2313   <key>ExtensionSettings</key>
2314   <dict>
2315     <key>*</key>
2316     <dict>
2317       <key>blocked_install_message</key>
2318       <string>Custom error message.</string>
2319       <key>install_sources</key>
2320       <array>
2321         <string>about:addons</string>
2322         <string>https://addons.mozilla.org/</string>
2323       </array>
2324       <key>installation_mode</key>
2325       <string>blocked</string>
2326       <key>allowed_types</key>
2327       <array>
2328         <string>extension</string>
2329       </array>
2330     </dict>
2331     <key>uBlock0@raymondhill.net</key>
2332     <dict>
2333       <key>installation_mode</key>
2334        <string>force_installed</string>
2335       <key>install_url</key>
2336       <string>https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi</string>
2337     </dict>
2338     <key>https-everywhere@eff.org</key>
2339     <dict>
2340       <key>installation_mode</key>
2341        <string>allowed</string>
2342     </dict>
2343   </dict>
2344 </dict>
2345 ```
2346 #### policies.json
2347 ```
2348 {
2349   "policies": {
2350     "ExtensionSettings": {
2351       "*": {
2352         "blocked_install_message": "Custom error message.",
2353         "install_sources": ["about:addons","https://addons.mozilla.org/"],
2354         "installation_mode": "blocked",
2355         "allowed_types": ["extension"]
2356       },
2357       "uBlock0@raymondhill.net": {
2358         "installation_mode": "force_installed",
2359         "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
2360       },
2361       "https-everywhere@eff.org": {
2362         "installation_mode": "allowed"
2363       }
2364     }
2365   }
2366 }
2367 ```
2368 ### ExtensionUpdate
2369 Control extension updates.
2370
2371 **Compatibility:** Firefox 67, Firefox ESR 60.7\
2372 **CCK2 Equivalent:** N/A\
2373 **Preferences Affected:** `extensions.update.enabled`
2374
2375 #### Windows (GPO)
2376 ```
2377 Software\Policies\Mozilla\Firefox\ExtensionUpdate = 0x1 | 0x0
2378 ```
2379 #### Windows (Intune)
2380 OMA-URI:
2381 ```
2382 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/ExtensionUpdate
2383 ```
2384 Value (string):
2385 ```
2386 <enabled/> or <disabled/>
2387 ```
2388 #### macOS
2389 ```
2390 <dict>
2391   <key>ExtensionUpdate</key>
2392   <true/> | <false/>
2393 </dict>
2394 ```
2395 #### policies.json
2396 ```
2397 {
2398   "policies": {
2399     "ExtensionUpdate": true | false
2400   }
2401 }
2402 ```
2403 ### FlashPlugin
2404 Configure the default Flash plugin policy as well as origins for which Flash is allowed.
2405
2406 `Allow` is a list of origins where Flash are allowed.
2407
2408 `Block` is a list of origins where Flash is not allowed.
2409
2410 `Default` determines whether or not Flash is allowed by default.
2411
2412 `Locked` prevents the user from changing Flash preferences.
2413
2414 **Compatibility:** Firefox 60, Firefox ESR 60\
2415 **CCK2 Equivalent:** `permissions.plugin`\
2416 **Preferences Affected:** `plugin.state.flash`
2417
2418 #### Windows (GPO)
2419 ```
2420 Software\Policies\Mozilla\Firefox\FlashPlugin\Allow\1 = "https://example.org"
2421 Software\Policies\Mozilla\Firefox\FlashPlugin\Block\1 = "https://example.edu"
2422 Software\Policies\Mozilla\Firefox\FlashPlugin\Default = 0x1 | 0x0
2423 Software\Policies\Mozilla\Firefox\FlashPlugin\Locked = 0x1 | 0x0
2424 ```
2425 #### Windows (Intune)
2426 OMA-URI:
2427 ```
2428 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Flash/FlashPlugin_Allow
2429 ```
2430 Value (string):
2431 ```
2432 <enabled/>
2433 <data id="Permissions" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
2434 ```
2435 OMA-URI:
2436 ```
2437 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Flash/FlashPlugin_Locked
2438 ```
2439 Value (string):
2440 ```
2441 <enabled/> or <disabled/>
2442 ```
2443 OMA-URI:
2444 ```
2445 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Flash/FlashPlugin_Default
2446 ```
2447 Value (string):
2448 ```
2449 <enabled/> or <disabled/>
2450 ```
2451 #### macOS
2452 ```
2453 <dict>
2454   <key>FlashPlugin</key>
2455   <dict>
2456     <key>Allow</key>
2457     <array>
2458       <string>http://example.org</string>
2459     </array>
2460     <key>Block</key>
2461     <array>
2462       <string>http://example.edu</string>
2463     </array>
2464     <key>Default</key>
2465     <true/> | <false/>
2466     <key>Locked</key>
2467     <true/> | <false/>
2468   </dict>
2469 </dict>
2470 ```
2471 #### policies.json
2472 ```
2473 {
2474   "policies": {
2475     "FlashPlugin": {
2476       "Allow": ["http://example.org/"],
2477       "Block": ["http://example.edu/"],
2478       "Default": true | false,
2479       "Locked": true | false
2480     }
2481   }
2482 }
2483 ```
2484
2485
2486
2487 ### Handlers
2488 Configure default application handlers. This policy is based on the internal format of `handlers.json`.
2489
2490 You can configure handlers based on a mime type (`mimeTypes`), a file's extension (`extensions`), or a protocol (`schemes`).
2491
2492 Within each handler type, you specify the given mimeType/extension/scheme as a key and use the following subkeys to describe how it is handled.
2493
2494 | Name | Description |
2495 | --- | --- |
2496 | `action`| Can be either `saveToDisk`, `useHelperApp`, `useSystemDefault`.
2497 | `ask` | If `true`, the user is asked if what they want to do with the file. If `false`, the action is taken without user intervention.
2498 | `handlers` | An array of handlers with the first one being the default. If you don't want to have a default handler, use an empty object for the first handler. Choose between path or uriTemplate.
2499 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`name` | The display name of the handler (might not be used).
2500 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`path`| The native path to the executable to be used.
2501 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`uriTemplate`| A url to a web based application handler. The URL must be https and contain a %s to be used for substitution.
2502
2503 **Compatibility:** Firefox 78, Firefox ESR 78\
2504 **CCK2 Equivalent:** N/A\
2505 **Preferences Affected:** N/A
2506
2507 #### Windows (GPO)
2508 ```
2509 Software\Policies\Mozilla\Firefox\Handlers (REG_MULTI_SZ) =
2510 {
2511   "mimeTypes": {
2512     "application/msword": {
2513       "action": "useSystemDefault",
2514       "ask": true | false
2515     }
2516   },
2517   "schemes": {
2518     "mailto": {
2519       "action": "useHelperApp",
2520       "ask": true | false,
2521       "handlers": [{
2522         "name": "Gmail",
2523         "uriTemplate": "https://mail.google.com/mail/?extsrc=mailto&url=%s"
2524       }]
2525     }
2526   },
2527   "extensions": {
2528     "pdf": {
2529       "action": "useHelperApp",
2530       "ask": true | false,
2531       "handlers": [{
2532         "name": "Adobe Acrobat",
2533         "path": "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32.exe"
2534       }]
2535     }
2536   }
2537 }
2538 ```
2539 #### Windows (Intune)
2540 OMA-URI:
2541 ```
2542 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Handlers
2543 ```
2544 Value (string):
2545 ```
2546 <enabled/>
2547 <data id="Handlers" value='
2548 {
2549   "mimeTypes": {
2550     "application/msword": {
2551       "action": "useSystemDefault",
2552       "ask": true | false
2553     }
2554   },
2555   "schemes": {
2556     "mailto": {
2557       "action": "useHelperApp",
2558       "ask": true | false,
2559       "handlers": [{
2560         "name": "Gmail",
2561         "uriTemplate": "https://mail.google.com/mail/?extsrc=mailto&amp;url=%s"
2562       }]
2563     }
2564   },
2565   "extensions": {
2566     "pdf": {
2567       "action": "useHelperApp",
2568       "ask": true | false,
2569       "handlers": [{
2570         "name": "Adobe Acrobat",
2571         "path": "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32.exe"
2572       }]
2573     }
2574   }
2575 }
2576 '/>
2577 ```
2578 #### macOS
2579 ```
2580 <dict>
2581   <key>Handlers</key>
2582   <dict>
2583     <key>mimeTypes</key>
2584     <dict>
2585       <key>application/msword</key>
2586       <dict>
2587         <key>action</key>
2588         <string>useSystemDefault</string>
2589         <key>ask</key>
2590         <true/> | <false/>
2591       </dict>
2592     </dict>
2593     <key>schemes</key>
2594     <dict>
2595       <key>mailto</key>
2596       <dict>
2597         <key>action</key>
2598         <string>useHelperApp</string>
2599         <key>ask</key>
2600         <true/> | <false/>
2601         <key>handlers</key>
2602         <array>
2603           <dict>
2604             <key>name</key>
2605             <string>Gmail</string>
2606             <key>uriTemplate</key>
2607             <string>https://mail.google.com/mail/?extsrc=mailto&url=%s</string>
2608           </dict>
2609         </array>
2610       </dict>
2611     </dict>
2612     <key>extensions</key>
2613     <dict>
2614       <key>pdf</key>
2615       <dict>
2616         <key>action</key>
2617         <string>useHelperApp</string>
2618         <key>ask</key>
2619         <true/> | <false/>
2620         <key>handlers</key>
2621         <array>
2622           <dict>
2623             <key>name</key>
2624             <string>Adobe Acrobat</string>
2625             <key>path</key>
2626             <string>/System/Applications/Preview.app</string>
2627           </dict>
2628         </array>
2629       </dict>
2630     </dict>
2631   </dict>
2632 </dict>
2633 ```
2634 #### policies.json
2635 ```
2636 {
2637   "policies": {
2638     "Handlers": {
2639       "mimeTypes": {
2640         "application/msword": {
2641           "action": "useSystemDefault",
2642           "ask": false
2643         }
2644       },
2645       "schemes": {
2646         "mailto": {
2647           "action": "useHelperApp",
2648           "ask": true | false,
2649           "handlers": [{
2650             "name": "Gmail",
2651             "uriTemplate": "https://mail.google.com/mail/?extsrc=mailto&url=%s"
2652           }]
2653         }
2654       },
2655       "extensions": {
2656         "pdf": {
2657           "action": "useHelperApp",
2658           "ask": true | false,
2659           "handlers": [{
2660             "name": "Adobe Acrobat",
2661             "path": "/usr/bin/acroread"
2662           }]
2663         }
2664       }
2665     }
2666   }
2667 }
2668 ```
2669 ### FirefoxHome
2670 Customize the Firefox Home page.
2671
2672 **Compatibility:** Firefox 68, Firefox ESR 68\
2673 **CCK2 Equivalent:** N/A\
2674 **Preferences Affected:** `browser.newtabpage.activity-stream.showSearch`,`browser.newtabpage.activity-stream.feeds.topsites`,`browser.newtabpage.activity-stream.feeds.section.highlights`,`browser.newtabpage.activity-stream.feeds.section.topstories`,`browser.newtabpage.activity-stream.feeds.snippets`
2675
2676 #### Windows (GPO)
2677 ```
2678 Software\Policies\Mozilla\Firefox\FirefoxHome\Search = 0x1 | 0x0
2679 Software\Policies\Mozilla\Firefox\FirefoxHome\TopSites = 0x1 | 0x0
2680 Software\Policies\Mozilla\Firefox\FirefoxHome\Highlights = 0x1 | 0x0
2681 Software\Policies\Mozilla\Firefox\FirefoxHome\Pocket = 0x1 | 0x0
2682 Software\Policies\Mozilla\Firefox\FirefoxHome\Snippets = 0x1 | 0x0
2683 Software\Policies\Mozilla\Firefox\FirefoxHome\Locked = 0x1 | 0x0
2684 ```
2685 #### Windows (Intune)
2686 OMA-URI:
2687 ```
2688 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/CustomizeFirefoxHome
2689 ```
2690 Value (string):
2691 ```
2692 <enabled/>
2693 <data id="FirefoxHome_Search"  value="true | false"/>
2694 <data id="FirefoxHome_TopSites"  value="true | false"/>
2695 <data id="FirefoxHome_Highlights"  value="true | false"/>
2696 <data id="FirefoxHome_Pocket"  value="true | false"/>
2697 <data id="FirefoxHome_Snippets"  value="true | false"/>
2698 <data id="FirefoxHome_Locked"  value="true | false"/>
2699 ```
2700 #### macOS
2701 ```
2702 <dict>
2703   <key>FirefoxHome</key>
2704   <dict>
2705     <key>Search</key>
2706     <true/> | <false/>
2707     <key>TopSites</key>
2708     <true/> | <false/>
2709     <key>Highlights</key>
2710     <true/> | <false/>
2711     <key>Pocket</key>
2712     <true/> | <false/>
2713     <key>Snippets</key>
2714     <true/> | <false/>
2715     <key>Locked</key>
2716     <true/> | <false/>
2717   </dict>
2718 </dict>
2719 ```
2720 #### policies.json
2721 ```
2722 {
2723   "policies": {
2724     "FirefoxHome": {
2725       "Search": true | false,
2726       "TopSites": true | false,
2727       "Highlights": true | false,
2728       "Pocket": true | false,
2729       "Snippets": true | false,
2730       "Locked": true | false
2731     }
2732   }
2733 }
2734 ```
2735 ### HardwareAcceleration
2736 Control hardware acceleration.
2737
2738 **Compatibility:** Firefox 60, Firefox ESR 60\
2739 **CCK2 Equivalent:** N/A\
2740 **Preferences Affected:** `layers.acceleration.disabled`
2741
2742 #### Windows (GPO)
2743 ```
2744 Software\Policies\Mozilla\Firefox\HardwareAcceleration = 0x1 | 0x0
2745 ```
2746 #### Windows (Intune)
2747 OMA-URI:
2748 ```
2749 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/HardwareAcceleration
2750 ```
2751 Value (string):
2752 ```
2753 <enabled/> or <disabled/>
2754 ```
2755 #### macOS
2756 ```
2757 <dict>
2758   <key>HardwareAcceleration</key>
2759   <true/> | <false/>
2760 </dict>
2761 ```
2762 #### policies.json
2763 ```
2764 {
2765   "policies": {
2766     "HardwareAcceleration": true | false
2767   }
2768 }
2769 ```
2770 ### Homepage
2771 Configure the default homepage and how Firefox starts.
2772
2773 `URL` is the default homepage.
2774
2775 `Locked` prevents the user from changing homepage preferences.
2776
2777 `Additional` allows for more than one homepage.
2778
2779 `StartPage` is how Firefox starts. The choices are no homepage, the default homepage or the previous session.
2780
2781 With Firefox 78, an additional option as added for `Startpage`, `homepage-locked`. This allows for locking the homepage, but still allowing the user to choose whether or not they want to restore their session.
2782
2783 **Compatibility:** Firefox 60, Firefox ESR 60 (StartPage was added in Firefox 60, Firefox ESR 60.4, homepage-locked added in Firefox 78)\
2784 **CCK2 Equivalent:** `homePage`,`lockHomePage`\
2785 **Preferences Affected:** `browser.startup.homepage`,`browser.startup.page`
2786
2787 #### Windows (GPO)
2788 ```
2789 Software\Policies\Mozilla\Firefox\Homepage\URL = "https://example.com"
2790 Software\Policies\Mozilla\Firefox\Homepage\Locked = 0x1 | 0x0
2791 Software\Policies\Mozilla\Firefox\Homepage\Additional\1 = "https://example.org"
2792 Software\Policies\Mozilla\Firefox\Homepage\Additional\2 = "https://example.edu"
2793 Software\Policies\Mozilla\Firefox\Homepage\StartPage = "none" | "homepage" | "previous-session" | "homepage-locked"
2794 ```
2795 #### Windows (Intune)
2796 OMA-URI:
2797 ```
2798 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageURL
2799 ```
2800 Value (string):
2801 ```
2802 <enabled/>
2803
2804 <data id="HomepageURL" value="https://example.com"/>
2805 <data id="HomepageLocked" value="true | false"/>
2806 ```
2807 OMA-URI:
2808 ```
2809 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageAdditional
2810 ```
2811 Value (string):
2812 ```
2813 <enabled/>
2814
2815 <data id="HomepageAdditional" value="1&#xF000;http://example.org&#xF000;2&#xF000;http://example.edu"/>
2816 ```
2817 OMA-URI:
2818 ```
2819 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageStartPage
2820 ```
2821 Value (string):
2822 ```
2823 <enabled/>
2824
2825 <data id="StartPage" value="none | homepage | previous-session"/>
2826 ```
2827 #### macOS
2828 ```
2829 <dict>
2830   <key>Homepage</key>
2831   <dict>
2832     <key>URL</key>
2833     <string>http://example.com</string>
2834     <key>Locked</key>
2835     <true/> | <false/>
2836     <key>Additional</key>
2837     <array>
2838       <string>http://example.org</string>
2839       <string>http://example.edu</string>
2840     </array>
2841     <key>StartPage</key>
2842     <string>none | homepage | previous-session | homepage-locked</string>
2843   </dict>
2844 </dict>
2845 ```
2846 #### policies.json
2847 ```
2848 {
2849   "policies": {
2850     "Homepage": {
2851       "URL": "http://example.com/",
2852       "Locked": true | false,
2853       "Additional": ["http://example.org/",
2854                      "http://example.edu/"],
2855       "StartPage": "none" | "homepage" | "previous-session" | "homepage-locked"
2856     }
2857   }
2858 }
2859 ```
2860 ### InstallAddonsPermission
2861 Configure the default extension install policy as well as origins for extension installs are allowed. This policy does not override turning off all extension installs.
2862
2863 `Allow` is a list of origins where extension installs are allowed.
2864
2865 `Default` determines whether or not extension installs are allowed by default.
2866
2867 **Compatibility:** Firefox 60, Firefox ESR 60\
2868 **CCK2 Equivalent:** `permissions.install`\
2869 **Preferences Affected:** `xpinstall.enabled`
2870
2871 #### Windows (GPO)
2872 ```
2873 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Allow\1 = "https://example.org"
2874 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Allow\2 = "https://example.edu"
2875 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Default = 0x1 | 0x0
2876 ```
2877 #### Windows (Intune)
2878 OMA-URI:
2879 ```
2880 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Addons/InstallAddonsPermission_Allow
2881 ```
2882 Value (string):
2883 ```
2884 <enabled/>
2885 <data id="Permissions" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
2886 ```
2887 OMA-URI:
2888 ```
2889 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Addons/InstallAddonsPermission_Default
2890 ```
2891 Value (string):
2892 ```
2893 <enabled/>
2894 ```
2895 #### macOS
2896 ```
2897 <dict>
2898   <key>InstallAddonsPermission</key>
2899   <dict>
2900     <key>Allow</key>
2901     <array>
2902       <string>http://example.org</string>
2903       <string>http://example.edu</string>
2904     </array>
2905     <key>Default</key>
2906     <true/> | <false/>
2907   </dict>
2908 </dict>
2909 ```
2910 #### policies.json
2911 ```
2912 {
2913   "policies": {
2914     "InstallAddonsPermission": {
2915       "Allow": ["http://example.org/",
2916                 "http://example.edu/"],
2917       "Default": true | false
2918     }
2919   }
2920 }
2921 ```
2922 ### LegacyProfiles
2923 Disable the feature enforcing a separate profile for each installation.
2924
2925 If this policy set to true, Firefox will not try to create different profiles for installations of Firefox in different directories. This is the equivalent of the MOZ_LEGACY_PROFILES environment variable.
2926
2927 If this policy set to false, Firefox will create a new profile for each unique installation of Firefox.
2928
2929 This policy only work on Windows via GPO (not policies.json).
2930
2931 **Compatibility:** Firefox 70, Firefox ESR 68.2 (Windows only, GPO only)\
2932 **CCK2 Equivalent:** N/A\
2933 **Preferences Affected:** N/A
2934
2935 #### Windows (GPO)
2936 ```
2937 Software\Policies\Mozilla\Firefox\LegacyProfiles = = 0x1 | 0x0
2938 ```
2939 #### Windows (Intune)
2940 OMA-URI:
2941 ```
2942 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/LegacyProfiles
2943 ```
2944 Value (string):
2945 ```
2946 <enabled/> or <disabled/>
2947 ```
2948 ### LocalFileLinks
2949 Enable linking to local files by origin.
2950
2951 **Compatibility:** Firefox 68, Firefox ESR 68\
2952 **CCK2 Equivalent:** N/A\
2953 **Preferences Affected:** `capability.policy.localfilelinks.*`
2954
2955 #### Windows (GPO)
2956 ```
2957 Software\Policies\Mozilla\Firefox\LocalFileLinks\1 = "https://example.org"
2958 Software\Policies\Mozilla\Firefox\LocalFileLinks\2 = "https://example.edu"
2959 ```
2960 #### Windows (Intune)
2961 OMA-URI:
2962 ```
2963 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/LocalFileLinks
2964 ```
2965 Value (string):
2966 ```
2967 <enabled/>
2968 <data id="LocalFileLinks" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
2969 ```
2970 #### macOS
2971 ```
2972 <dict>
2973   <key>LocalFileLinks</key>
2974   <array>
2975     <string>http://example.org</string>
2976     <string>http://example.edu</string>
2977   </array>
2978 </dict>
2979 ```
2980 #### policies.json
2981 ```
2982 {
2983   "policies": {
2984     "LocalFileLinks": ["http://example.org/",
2985                        "http://example.edu/"]
2986   }
2987 }
2988 ```
2989 ### PrimaryPassword
2990 Require or prevent using a primary (formerly master) password.
2991
2992 If this value is true, a primary password is required. If this value is false, it works the same as if [`DisableMasterPasswordCreation`](#disablemasterpasswordcreation) was true and removes the primary password functionality.
2993
2994 If both DisableMasterPasswordCreation and PrimaryPassword are used, DisableMasterPasswordCreation takes precedent.
2995
2996 **Compatibility:** Firefox 79, Firefox ESR 78.1\
2997 **CCK2 Equivalent:** `noMasterPassword`\
2998 **Preferences Affected:** N/A
2999
3000 #### Windows (GPO)
3001 ```
3002 Software\Policies\Mozilla\Firefox\PrimaryPassword = 0x1 | 0x0
3003 ```
3004 #### Windows (Intune)
3005 OMA-URI:
3006 ```
3007 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PrimaryPassword
3008 ```
3009 Value (string):
3010 ```
3011 <enabled/> or <disabled/>
3012 ```
3013 #### macOS
3014 ```
3015 <dict>
3016   <key>PrimaryPassword</key>
3017   <true/> | <false/>
3018 </dict>
3019 ```
3020 #### policies.json
3021 ```
3022 {
3023   "policies": {
3024     "PrimaryPassword": true | false
3025   }
3026 }
3027 ```
3028 ### NetworkPrediction
3029 Enable or disable network prediction (DNS prefetching).
3030
3031 **Compatibility:** Firefox 67, Firefox ESR 60.7\
3032 **CCK2 Equivalent:** N/A\
3033 **Preferences Affected:** `network.dns.disablePrefetch`,`network.dns.disablePrefetchFromHTTPS`
3034
3035 #### Windows (GPO)
3036 ```
3037 Software\Policies\Mozilla\Firefox\NetworkPrediction = 0x1 | 0x0
3038 ```
3039 #### Windows (Intune)
3040 OMA-URI:
3041 ```
3042 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NetworkPrediction
3043 ```
3044 Value (string):
3045 ```
3046 <enabled/> or <disabled/>
3047 ```
3048 #### macOS
3049 ```
3050 <dict>
3051   <key>NetworkPrediction</key>
3052   <true/> | <false/>
3053 </dict>
3054 ```
3055 #### policies.json
3056 ```
3057 {
3058   "policies": {
3059     "NetworkPrediction": true | false
3060 }
3061 ```
3062 ### NewTabPage
3063 Enable or disable the New Tab page.
3064
3065 **Compatibility:** Firefox 68, Firefox ESR 68\
3066 **CCK2 Equivalent:** N/A\
3067 **Preferences Affected:** `browser.newtabpage.enabled`
3068
3069 #### Windows (GPO)
3070 ```
3071 Software\Policies\Mozilla\Firefox\NewTabPage = 0x1 | 0x0
3072 ```
3073 #### Windows (Intune)
3074 OMA-URI:
3075 ```
3076 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NewTabPage
3077 ```
3078 Value (string):
3079 ```
3080 <enabled/> or <disabled/>
3081 ```
3082 #### macOS
3083 ```
3084 <dict>
3085   <key>NewTabPage</key>
3086   <true/> | <false/>
3087 </dict>
3088 ```
3089 #### policies.json
3090 ```
3091 {
3092   "policies": {
3093     "NewTabPage": true | false
3094 }
3095 ```
3096 ### NoDefaultBookmarks
3097 Disable the creation of default bookmarks.
3098
3099 This policy is only effective if the user profile has not been created yet.
3100
3101 **Compatibility:** Firefox 60, Firefox ESR 60\
3102 **CCK2 Equivalent:** `removeDefaultBookmarks`\
3103 **Preferences Affected:** N/A
3104
3105 #### Windows (GPO)
3106 ```
3107 Software\Policies\Mozilla\Firefox\NoDefaultBookmarks = 0x1 | 0x0
3108 ```
3109 #### Windows (Intune)
3110 OMA-URI:
3111 ```
3112 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NoDefaultBookmarks
3113 ```
3114 Value (string):
3115 ```
3116 <enabled/> or <disabled/>
3117 ```
3118 #### macOS
3119 ```
3120 <dict>
3121   <key>NoDefaultBookmarks</key>
3122   <true/> | <false/>
3123 </dict>
3124 ```
3125 #### policies.json
3126 ```
3127 {
3128   "policies": {
3129     "NoDefaultBookmarks": true | false
3130   }
3131 }
3132 ```
3133 ### OfferToSaveLogins
3134 Control whether or not Firefox offers to save passwords.
3135
3136 **Compatibility:** Firefox 60, Firefox ESR 60\
3137 **CCK2 Equivalent:** `dontRememberPasswords`\
3138 **Preferences Affected:** `signon.rememberSignons`
3139
3140 #### Windows (GPO)
3141 ```
3142 Software\Policies\Mozilla\Firefox\OfferToSaveLogins = 0x1 | 0x0
3143 ```
3144 #### Windows (Intune)
3145 OMA-URI:
3146 ```
3147 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OfferToSaveLogins
3148 ```
3149 Value (string):
3150 ```
3151 <enabled/> or <disabled/>
3152 ```
3153 #### macOS
3154 ```
3155 <dict>
3156   <key>OfferToSaveLogins</key>
3157   <true/> | <false/>
3158 </dict>
3159 ```
3160 #### policies.json
3161 ```
3162 {
3163   "policies": {
3164     "OfferToSaveLogins": true | false
3165   }
3166 }
3167 ```
3168 ### OfferToSaveLoginsDefault
3169 Sets the default value of signon.rememberSignons without locking it.
3170
3171 **Compatibility:** Firefox 70, Firefox ESR 60.2\
3172 **CCK2 Equivalent:** `dontRememberPasswords`\
3173 **Preferences Affected:** `signon.rememberSignons`
3174
3175 #### Windows (GPO)
3176 ```
3177 Software\Policies\Mozilla\Firefox\OfferToSaveLoginsDefault = 0x1 | 0x0
3178 ```
3179 #### Windows (Intune)
3180 OMA-URI:
3181 ```
3182 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OfferToSaveLoginsDefault
3183 ```
3184 Value (string):
3185 ```
3186 <enabled/> or <disabled/>
3187 ```
3188 #### macOS
3189 ```
3190 <dict>
3191   <key>OfferToSaveLoginsDefault</key>
3192   <true/> | <false/>
3193 </dict>
3194 ```
3195 #### policies.json
3196 ```
3197 {
3198   "policies": {
3199     "OfferToSaveLoginsDefault": true | false
3200   }
3201 }
3202 ```
3203 ### OverrideFirstRunPage
3204 Override the first run page. If the value is blank, no first run page is displayed.
3205
3206 **Compatibility:** Firefox 60, Firefox ESR 60\
3207 **CCK2 Equivalent:** `welcomePage`,`noWelcomePage`\
3208 **Preferences Affected:** `startup.homepage_welcome_url`
3209
3210 #### Windows (GPO)
3211 ```
3212 Software\Policies\Mozilla\Firefox\OverrideFirstRunPage = "http://example.org"
3213 ```
3214 #### Windows (Intune)
3215 OMA-URI:
3216 ```
3217 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OverrideFirstRunPage
3218 ```
3219 Value (string):
3220 ```
3221 <enabled/>
3222 <data id="OverridePage" value="https://example.com"/>
3223 ```
3224 #### macOS
3225 ```
3226 <dict>
3227   <key>OverrideFirstRunPage</key>
3228   <string>http://example.org</string>
3229 </dict>
3230 ```
3231 #### policies.json
3232 ```
3233 {
3234   "policies": {
3235     "OverrideFirstRunPage": "http://example.org"
3236 }
3237 ```
3238 ### OverridePostUpdatePage
3239 Override the upgrade page. If the value is blank, no upgrade page is displayed.
3240
3241 **Compatibility:** Firefox 60, Firefox ESR 60\
3242 **CCK2 Equivalent:** `upgradePage`,`noUpgradePage`\
3243 **Preferences Affected:** `startup.homepage_override_url`
3244
3245 #### Windows (GPO)
3246 ```
3247 Software\Policies\Mozilla\Firefox\OverridePostUpdatePage = "http://example.org"
3248 ```
3249 #### Windows (Intune)
3250 OMA-URI:
3251 ```
3252 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OverridePostUpdatePage
3253 ```
3254 Value (string):
3255 ```
3256 <enabled/>
3257 <data id="OverridePage" value="https://example.com"/>
3258 ```
3259 #### macOS
3260 ```
3261 <dict>
3262   <key>OverridePostUpdatePage</key>
3263   <string>http://example.org</string>
3264 </dict>
3265 ```
3266 #### policies.json
3267 ```
3268 {
3269   "policies": {
3270     "OverridePostUpdatePage": "http://example.org"
3271 }
3272 ```
3273 ### PasswordManagerEnabled
3274 Remove access to the password manager via preferences and blocks about:logins on Firefox 70.
3275
3276 **Compatibility:** Firefox 70, Firefox ESR 60.2\
3277 **CCK2 Equivalent:** N/A\
3278 **Preferences Affected:** `pref.privacy.disable_button.view_passwords`
3279
3280 #### Windows (GPO)
3281 ```
3282 Software\Policies\Mozilla\Firefox\PasswordManagerEnabled = 0x1 | 0x0
3283 ```
3284 #### Windows (Intune)
3285 OMA-URI:
3286 ```
3287 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PasswordManagerEnabled
3288 ```
3289 Value (string):
3290 ```
3291 <enabled/> or <disabled/>
3292 ```
3293 #### macOS
3294 ```
3295 <dict>
3296   <key>PasswordManagerEnabled</key>
3297   <true/> | <false/>
3298 </dict>
3299 ```
3300 #### policies.json
3301 ```
3302 {
3303   "policies": {
3304     "PasswordManagerEnabled": true | false
3305   }
3306 }
3307 ```
3308 ### PDFjs
3309 Disable or configure PDF.js, the built-in PDF viewer.
3310
3311 If `Enabled` is set to false, the built-in PDF viewer is disabled.
3312
3313 If `EnablePermissions` is set to true, the built-in PDF viewer will honor document permissions like preventing the copying of text.
3314
3315 Note: DisableBuiltinPDFViewer has not been deprecated. You can either continue to use it, or switch to using PDFjs->Enabled to disable the built-in PDF viewer. This new permission was added because we needed a place for PDFjs->EnabledPermissions.
3316
3317 **Compatibility:** Firefox 77, Firefox ESR 68.9\
3318 **CCK2 Equivalent:** N/A\
3319 **Preferences Affected:** `pdfjs.diabled`,`pdfjs.enablePermissions`
3320
3321 #### Windows (GPO)
3322 ```
3323 Software\Policies\Mozilla\Firefox\PDFjs\Enabled = 0x1 | 0x0
3324 Software\Policies\Mozilla\Firefox\PDFjs\EnablePermissions = 0x1 | 0x0
3325 ```
3326 #### Windows (Intune)
3327 OMA-URI:
3328 ```
3329 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PDFjs/PDFjs_Enabled
3330 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PDFjs/PDFjs_EnablePermissions
3331 ```
3332 Value (string):
3333 ```
3334 <enabled/>or <disabled/>
3335 ```
3336 #### macOS
3337 ```
3338 <dict>
3339   <key>PDFjs</key>
3340   <dict>
3341     <key>Enabled</key>
3342     <true/> | <false/>
3343     <key><EnablePermissions</key>
3344     <true/> | <false/>
3345   </dict>
3346 </dict>
3347 ```
3348 #### policies.json
3349 ```
3350 {
3351   "policies": {
3352     "PSFjs": {
3353       "Enabled": true | false,
3354       "EnablePermissions": true | false
3355     }
3356 }
3357 ```
3358 ### Permissions
3359 Set permissions associated with camera, microphone, location, notifications, autoplay, and virtual reality. Because these are origins, not domains, entries with unique ports must be specified separately. See examples below.
3360
3361 `Allow` is a list of origins where the feature is allowed.
3362
3363 `Block` is a list of origins where the feature is not allowed.
3364
3365 `BlockNewRequests` determines whether or not new requests can be made for the feature.
3366
3367 `Locked` prevents the user from changing preferences for the feature.
3368
3369 `Default` specifies the default value for Autoplay. block-audio-video is not supported on Firefox ESR 68.
3370
3371 **Compatibility:** Firefox 62, Firefox ESR 60.2 (Autoplay added in Firefox 74, Firefox ESR 68.6, Autoplay Default/Locked added in Firefox 76, Firefox ESR 68.8, VirtualReality added in Firefox 80, Firefox ESR 78.2)\
3372 **CCK2 Equivalent:** N/A\
3373 **Preferences Affected:** `permissions.default.camera`,`permissions.default.microphone`,`permissions.default.geo`,`permissions.default.desktop-notification`,`media.autoplay.default`.`permissions.default.xr`
3374
3375 #### Windows (GPO)
3376 ```
3377 Software\Policies\Mozilla\Firefox\Permissions\Camera\Allow\1 = "https://example.org"
3378 Software\Policies\Mozilla\Firefox\Permissions\Camera\Allow\2 = "https://example.org:1234"
3379 Software\Policies\Mozilla\Firefox\Permissions\Camera\Block\1 = "https://example.edu"
3380 Software\Policies\Mozilla\Firefox\Permissions\Camera\BlockNewRequests = 0x1 | 0x0
3381 Software\Policies\Mozilla\Firefox\Permissions\Camera\Locked = 0x1 | 0x0
3382 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Allow\1 = "https://example.org"
3383 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Block\1 = "https://example.edu"
3384 Software\Policies\Mozilla\Firefox\Permissions\Microphone\BlockNewRequests = 0x1 | 0x0
3385 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Locked = 0x1 | 0x0
3386 Software\Policies\Mozilla\Firefox\Permissions\Location\Allow\1 = "https://example.org"
3387 Software\Policies\Mozilla\Firefox\Permissions\Location\Block\1 = "https://example.edu"
3388 Software\Policies\Mozilla\Firefox\Permissions\Location\BlockNewRequests = 0x1 | 0x0
3389 Software\Policies\Mozilla\Firefox\Permissions\Location\Locked = 0x1 | 0x0
3390 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Allow\1 = "https://example.org"
3391 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Block\1 = "https://example.edu"
3392 Software\Policies\Mozilla\Firefox\Permissions\Notifications\BlockNewRequests = 0x1 | 0x0
3393 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Locked = 0x1 | 0x0
3394 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Allow\1 = "https://example.org"
3395 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Block\1 = "https://example.edu"
3396 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Default = "allow-audio-video" | "block-audio" | "block-audio-video"
3397 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Locked = 0x1 | 0x0
3398 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\Allow\1 = "https://example.org"
3399 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\Block\1 = "https://example.edu"
3400 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\BlockNewRequests = 0x1 | 0x0
3401 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\Locked = 0x1 | 0x0
3402 ```
3403 #### Windows (Intune)
3404 OMA-URI:
3405 ```
3406 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Location/Location_BlockNewRequests
3407 ```
3408 Value (string):
3409 ```
3410 <enabled/> or <disabled/>
3411 ```
3412 OMA-URI:
3413 ```
3414 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Location/Location_Locked
3415 ```
3416 Value (string):
3417 ```
3418 <enabled/> or <disabled/>
3419 ```
3420 OMA-URI:
3421 ```
3422 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_Allow
3423 ```
3424 Value (string):
3425 ```
3426 <enabled/>
3427 <data id="Permissions" value="1&#xF000;https://example.org"/>
3428 ```
3429 OMA-URI:
3430 ```
3431 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_BlockNewRequests
3432 ```
3433 Value (string):
3434 ```
3435 <enabled/> or <disabled/>
3436 ```
3437 OMA-URI:
3438 ```
3439 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_Locked
3440 ```
3441 Value (string):
3442 ```
3443 <enabled/> or <disabled/>
3444 ```
3445 OMA-URI:
3446 ```
3447 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Allow
3448 ```
3449 Value (string):
3450 ```
3451 <enabled/>
3452 <data id="Permissions" value="1&#xF000;https://example.org"/>
3453 ```
3454 OMA-URI:
3455 ```
3456 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Block
3457 ```
3458 Value (string):
3459 ```
3460 <enabled/>
3461 <data id="Permissions" value="1&#xF000;https://example.edu"/>
3462 ```
3463 OMA-URI:
3464 ```
3465 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Default
3466 ```
3467 Value (string):
3468 ```
3469 <enabled/>
3470 <data id="Autoplay_Default" value="allow-audio-video | block-audio | block-audio-video"/>
3471 ```
3472 OMA-URI:
3473 ```
3474 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Locked
3475 ```
3476 Value (string):
3477 ```
3478 <enabled/> or <disabled/>
3479 ```
3480 OMA-URI:
3481 ```
3482 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_Allow
3483 ```
3484 Value (string):
3485 ```
3486 <enabled/>
3487 <data id="Permissions" value="1&#xF000;https://example.org"/>
3488 ```
3489 OMA-URI:
3490 ```
3491 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_Block
3492 ```
3493 Value (string):
3494 ```
3495 <enabled/>
3496 <data id="Permissions" value="1&#xF000;https://example.edu"/>
3497 ```
3498 OMA-URI:
3499 ```
3500 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_BlockNewRequests
3501 ```
3502 Value (string):
3503 ```
3504 <enabled/> or <disabled/>
3505 ```
3506 OMA-URI:
3507 ```
3508 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_Locked
3509 ```
3510 Value (string):
3511 ```
3512 <enabled/> or <disabled/>
3513 ```
3514 #### macOS
3515 ```
3516 <dict>
3517   <key>Permissions</key>
3518   <dict>
3519     <key>Camera</key>
3520     <dict>
3521       <key>Allow</key>
3522       <array>
3523         <string>https://example.org</string>
3524         <string>https://example.org:1234</string>
3525       </array>
3526       <key>Block</key>
3527       <array>
3528         <string>https://example.edu</string>
3529       </array>
3530       <key>BlockNewRequests</key>
3531       <true/> | <false/>
3532       <key>Locked</key>
3533       <true/> | <false/>
3534     </dict>
3535     <key>Microphone</key>
3536     <dict>
3537       <key>Allow</key>
3538       <array>
3539         <string>https://example.org</string>
3540       </array>
3541       <key>Block</key>
3542       <array>
3543         <string>https://example.edu</string>
3544       </array>
3545       <key>BlockNewRequests</key>
3546       <true/> | <false/>
3547       <key>Locked</key>
3548       <true/> | <false/>
3549     </dict>
3550     <key>Location</key>
3551     <dict>
3552       <key>Allow</key>
3553       <array>
3554         <string>https://example.org</string>
3555       </array>
3556       <key>Block</key>
3557       <array>
3558         <string>https://example.edu</string>
3559       </array>
3560       <key>BlockNewRequests</key>
3561       <true/> | <false/>
3562       <key>Locked</key>
3563       <true/> | <false/>
3564     </dict>
3565     <key>Notifications</key>
3566     <dict>
3567       <key>Allow</key>
3568       <array>
3569         <string>https://example.org</string>
3570       </array>
3571       <key>Block</key>
3572       <array>
3573         <string>https://example.edu</string>
3574       </array>
3575       <key>BlockNewRequests</key>
3576       <true/>
3577       <key>Locked</key>
3578       <true/>
3579     </dict>
3580     <key>Autoplay</key>
3581     <dict>
3582       <key>Allow</key>
3583       <array>
3584         <string>https://example.org</string>
3585       </array>
3586       <key>Block</key>
3587       <array>
3588         <string>https://example.edu</string>
3589       </array>
3590       <key>Default</key>
3591       <string>allow-audio-video | block-audio | block-audio-video</string>
3592       <key>Locked</key>
3593       <true/> | <false/>
3594     </dict>
3595   </dict>
3596 </dict>
3597 ```
3598 #### policies.json
3599 ```
3600 {
3601   "policies": {
3602     "Permissions": {
3603       "Camera": {
3604         "Allow": ["https://example.org","https://example.org:1234"],
3605         "Block": ["https://example.edu"],
3606         "BlockNewRequests": true | false,
3607         "Locked": true | false
3608       },
3609       "Microphone": {
3610         "Allow": ["https://example.org"],
3611         "Block": ["https://example.edu"],
3612         "BlockNewRequests": true | false,
3613         "Locked": true | false
3614       },
3615       "Location": {
3616         "Allow": ["https://example.org"],
3617         "Block": ["https://example.edu"],
3618         "BlockNewRequests": true | false,
3619         "Locked": true | false
3620       },
3621       "Notifications": {
3622         "Allow": ["https://example.org"],
3623         "Block": ["https://example.edu"],
3624         "BlockNewRequests": true | false,
3625         "Locked": true | false
3626       },
3627       "Autoplay": {
3628         "Allow": ["https://example.org"],
3629         "Block": ["https://example.edu"],
3630         "Default": "allow-audio-video" | "block-audio" | "block-audio-video",
3631         "Locked": true | false
3632       }
3633     }
3634   }
3635 }
3636 ```
3637 ### PictureInPicture
3638
3639 Enable or disable Picture-in-Picture.
3640
3641 **Compatibility:** Firefox 78, Firefox ESR 78\
3642 **CCK2 Equivalent:** N/A\
3643 **Preferences Affected:** `media.videocontrols.picture-in-picture.video-toggle.enabled`
3644
3645 #### Windows (GPO)
3646 ```
3647 Software\Policies\Mozilla\Firefox\PictureInPicture = 0x1 | 0x0
3648 ```
3649 #### Windows (Intune)
3650 OMA-URI:
3651 ```
3652 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PictureInPicture
3653 ```
3654 Value (string):
3655 ```
3656 <enabled/> or <disabled/>
3657 ```
3658 #### macOS
3659 ```
3660 <dict>
3661   <key>PictureInPicture</key>
3662   <true/> | <false/>
3663 </dict>
3664 ```
3665 #### policies.json
3666 ```
3667 {
3668   "policies": {
3669     "PictureInPicture": true | false
3670   }
3671 }
3672 ```
3673 ### PopupBlocking
3674 Configure the default pop-up window policy as well as origins for which pop-up windows are allowed.
3675
3676 `Allow` is a list of origins where popup-windows are allowed.
3677
3678 `Default` determines whether or not pop-up windows are allowed by default.
3679
3680 `Locked` prevents the user from changing pop-up preferences.
3681
3682 **Compatibility:** Firefox 60, Firefox ESR 60\
3683 **CCK2 Equivalent:** `permissions.popup`\
3684 **Preferences Affected:** `dom.disable_open_during_load`
3685
3686 #### Windows (GPO)
3687 ```
3688 Software\Policies\Mozilla\Firefox\PopupBlocking\Allow\1 = "https://example.org"
3689 Software\Policies\Mozilla\Firefox\PopupBlocking\Allow\2 = "https://example.edu"
3690 Software\Policies\Mozilla\Firefox\PopupBlocking\Default = 0x1 | 0x0
3691 Software\Policies\Mozilla\Firefox\PopupBlocking\Locked = 0x1 | 0x0
3692 ```
3693 #### Windows (Intune)
3694 OMA-URI:
3695 ```
3696 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Allow
3697 ```
3698 Value (string):
3699 ```
3700 <enabled/>
3701 <data id="Permissions" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
3702 ```
3703 OMA-URI:
3704 ```
3705 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Default
3706 ```
3707 Value (string):
3708 ```
3709 <enabled/> or <disabled/>
3710 ```
3711 OMA-URI:
3712 ```
3713 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Locked
3714 ```
3715 Value (string):
3716 ```
3717 <enabled/> or <disabled/>
3718 ```
3719 #### macOS
3720 ```
3721 <dict>
3722   <key>PopupBlocking</key>
3723   <dict>
3724     <key>Allow</key>
3725     <array>
3726       <string>http://example.org</string>
3727       <string>http://example.edu</string>
3728     </array>
3729     <key>Default</key>
3730     <true/> | <false/>
3731     <key>Locked</key>
3732     <true/> | <false/>
3733   </dict>
3734 </dict>
3735 ```
3736 #### policies.json
3737 ```
3738 {
3739   "policies": {
3740     "PopupBlocking": {
3741       "Allow": ["http://example.org/",
3742                 "http://example.edu/"],
3743       "Default": true | false,
3744       "Locked": true | false
3745     }
3746   }
3747 }
3748 ```
3749 ### Preferences
3750 Set and lock certain preferences.
3751
3752 **Compatibility:** See below\
3753 **CCK2 Equivalent:** `preferences`\
3754 **Preferences Affected:** See below
3755
3756 | Preference | Type | Compatibility | Default
3757 | --- | --- | --- | ---
3758 | accessibility.force_disabled | integer | Firefox 70, Firefox ESR 68.2 | 0
3759 | &nbsp;&nbsp;&nbsp;&nbsp;If set to 1, platform accessibility is disabled.
3760 | app.update.auto (Deprecated - Switch to AppAutoUpdate policy) | boolean | Firefox 68, Firefox ESR 68 | true
3761 | &nbsp;&nbsp;&nbsp;&nbsp;If false, Firefox doesn't automatically install update.
3762 | browser.bookmarks.autoExportHTML | boolean | Firefox 70, Firefox ESR 68.2 | false
3763 | &nbsp;&nbsp;&nbsp;&nbsp;If true, bookmarks are exported on shutdown.
3764 | browser.bookmarks.file | string | Firefox 70, Firefox ESR 68.2 | N/A
3765 | &nbsp;&nbsp;&nbsp;&nbsp;If set, the name of the file where bookmarks are exported and imported.
3766 | browser.bookmarks.restore_default_bookmarks | boolean | Firefox 70, Firefox ESR 68.2 | N/A
3767 | &nbsp;&nbsp;&nbsp;&nbsp;If true, bookmarks are restored to their defaults.
3768 | browser.cache.disk.enable | boolean | Firefox 68, Firefox ESR 68 | true
3769 | &nbsp;&nbsp;&nbsp;&nbsp;If false, don't store cache on the hard drive.
3770 | ~browser.cache.disk.parent_directory~ | string | Firefox 68, Firefox ESR 68 | Profile temporary directory
3771 | &nbsp;&nbsp;&nbsp;&nbsp;~If set, changes the location of the disk cache.~ This policy doesn't work. It's being worked on.
3772 | browser.fixup.dns_first_for_single_words | boolean | Firefox 68, Firefox ESR 68 | false
3773 | &nbsp;&nbsp;&nbsp;&nbsp;If true, single words are sent to DNS, not directly to search.
3774 | browser.newtabpage.activity-stream.default.sites | string | Firefox 72, ESR 68.4 | Locale dependent
3775 | &nbsp;&nbsp;&nbsp;&nbsp;If set, a list of URLs to use as the default top sites on the new tab page.
3776 | browser.places.importBookmarksHTML | boolean | Firefox 70, Firefox ESR 68.2
3777 | &nbsp;&nbsp;&nbsp;&nbsp;If true, bookmarks are always imported on startup.
3778 | browser.safebrowsing.phishing.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
3779 | &nbsp;&nbsp;&nbsp;&nbsp;If false, phishing protection is not enabled (Not recommended)
3780 | browser.safebrowsing.malware.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
3781 | &nbsp;&nbsp;&nbsp;&nbsp;If false, malware protection is not enabled (Not recommended)
3782 | browser.search.update | boolean | Firefox 68, Firefox ESR 68 | true
3783 | &nbsp;&nbsp;&nbsp;&nbsp;If false, updates for search engines are not checked.
3784 | browser.slowStartup.notificationDisabled | boolean | Firefox 70, Firefox ESR 68.2 | false
3785 | &nbsp;&nbsp;&nbsp;&nbsp;If true, a notification isn't shown if startup is slow.
3786 | browser.tabs.warnOnClose | boolean | Firefox 68, Firefox ESR 68 | true
3787 | &nbsp;&nbsp;&nbsp;&nbsp;If false, there is no warning when the browser is closed.
3788 | browser.taskbar.previews.enable | boolean | Firefox 70, Firefox ESR 68.2 (Windows only) | false
3789 | &nbsp;&nbsp;&nbsp;&nbsp;If true, tab previews are shown in the Windows taskbar.
3790 | browser.urlbar.suggest.bookmark | boolean | Firefox 68, Firefox ESR 68 | true
3791 | &nbsp;&nbsp;&nbsp;&nbsp;If false, bookmarks aren't suggested when typing in the URL bar.
3792 | browser.urlbar.suggest.history | boolean | Firefox 68, Firefox ESR 68 | true
3793 | &nbsp;&nbsp;&nbsp;&nbsp;If false, history isn't suggested when typing in the URL bar.
3794 | browser.urlbar.suggest.openpage | boolean | Firefox 68, Firefox ESR 68 | true
3795 | &nbsp;&nbsp;&nbsp;&nbsp;If false, open tabs aren't suggested when typing in the URL bar.
3796 | datareporting.policy.dataSubmissionPolicyBypassNotification | boolean | Firefox 68, Firefox ESR 68 | false
3797 | &nbsp;&nbsp;&nbsp;&nbsp;If true, don't show the privacy policy tab on first run.
3798 | dom.allow_scripts_to_close_windows | boolean | Firefox 70, Firefox ESR 68.2 | false
3799 | &nbsp;&nbsp;&nbsp;&nbsp;If false, web page can close windows.
3800 | dom.disable_window_flip | boolean | Firefox 68, Firefox ESR 68 | true
3801 | &nbsp;&nbsp;&nbsp;&nbsp;If false, web pages can focus and activate windows.
3802 | dom.disable_window_move_resize | boolean | Firefox 68, Firefox ESR 68 | false
3803 | &nbsp;&nbsp;&nbsp;&nbsp;If true, web pages can't move or resize windows.
3804 | dom.event.contextmenu.enabled | boolean | Firefox 68, Firefox ESR 68 | true
3805 | &nbsp;&nbsp;&nbsp;&nbsp;If false, web pages can't override context menus.
3806 | dom.keyboardevent.keypress.hack.dispatch_non_printable_keys.addl | string | Firefox 68, Firefox ESR 68 | N/A
3807 | &nbsp;&nbsp;&nbsp;&nbsp;See https://support.mozilla.org/en-US/kb/dom-events-changes-introduced-firefox-66
3808 | dom.keyboardevent.keypress.hack.use_legacy_keycode_and_charcode.addl | string | Firefox 68, Firefox ESR 68 | N/A
3809 | &nbsp;&nbsp;&nbsp;&nbsp;See https://support.mozilla.org/en-US/kb/dom-events-changes-introduced-firefox-66
3810 | dom.xmldocument.load.enabled | boolean | Firefox ESR 68.5 | true.
3811 | &nbsp;&nbsp;&nbsp;&nbsp;If false, XMLDocument.load is not available.
3812 | dom.xmldocument.async.enabled | boolean | Firefox ESR 68.5 | true
3813 | &nbsp;&nbsp;&nbsp;&nbsp;If false, XMLDocument.async is not available.
3814 | extensions.blocklist.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
3815 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the extensions blocklist is not used (Not recommended)
3816 | extensions.getAddons.showPane | boolean | Firefox 68, Firefox ESR 68 | N/A
3817 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the Recommendations tab is not displayed in the Add-ons Manager.
3818 | extensions.htmlaboutaddons.recommendations.enabled | boolean | Firefox 72, Firefox ESR 68.4 | true
3819 | &nbsp;&nbsp;&nbsp;&nbsp;If false, recommendations are not shown on the Extensions tab in the Add-ons Manager.
3820 | geo.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
3821 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the geolocation API is disabled. | Language dependent
3822 | intl.accept_languages | string | Firefox 70, Firefox ESR 68.2
3823 | &nbsp;&nbsp;&nbsp;&nbsp;If set, preferred language for web pages.
3824 | media.eme.enabled (Deprecated - Switch to EncryptedMediaExtensions policy) | boolean | Firefox 70, Firefox ESR 68.2 | true
3825 | &nbsp;&nbsp;&nbsp;&nbsp;If false, Encrypted Media Extensions are not enabled.
3826 | media.gmp-gmpopenh264.enabled | boolean | Firefox 68, Firefox ESR 68 | true
3827 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the OpenH264  plugin is not downloaded.
3828 | media.gmp-widevinecdm.enabled | boolean | Firefox 68, Firefox ESR 68 | true
3829 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the Widevine plugin is not downloaded.
3830 | media.peerconnection.enabled | boolean | Firefox 72, Firefox ESR 68.4 | true
3831 | &nbsp;&nbsp;&nbsp;&nbsp;If false, WebRTC is disabled
3832 | media.peerconnection.ice.obfuscate_host_addresses.whitelist (Deprecated) | string | Firefox 72, Firefox ESR 68.4 | N/A
3833 | &nbsp;&nbsp;&nbsp;&nbsp;If set, a list of domains for which mDNS hostname obfuscation is
3834 disabled
3835 | media.peerconnection.ice.obfuscate_host_addresses.blocklist | string | Firefox 79, Firefox ESR 78.1 | N/A
3836 | &nbsp;&nbsp;&nbsp;&nbsp;If set, a list of domains for which mDNS hostname obfuscation is
3837 disabled
3838 | network.dns.disableIPv6 | boolean | Firefox 68, Firefox ESR 68 | false
3839 | &nbsp;&nbsp;&nbsp;&nbsp;If true, IPv6 DNS lokoups are disabled.
3840 | network.IDN_show_punycode | boolean | Firefox 68, Firefox ESR 68 | false
3841 | &nbsp;&nbsp;&nbsp;&nbsp;If true, display the punycode version of internationalized domain names.
3842 | places.history.enabled | boolean | Firefox 68, Firefox ESR 68 | true
3843 | &nbsp;&nbsp;&nbsp;&nbsp;If false, history is not enabled.
3844 | print.save_print_settings | boolean | Firefox 70, Firefox ESR 68.2 | true
3845 | &nbsp;&nbsp;&nbsp;&nbsp;If false, print settings are not saved between jobs.
3846 | security.default_personal_cert | string | Firefox 68, Firefox ESR 68 | Ask Every Time
3847 | &nbsp;&nbsp;&nbsp;&nbsp;If set to Select Automatically, Firefox automatically chooses the default personal certificate.
3848 | security.mixed_content.block_active_content | boolean | Firefox 70, Firefox ESR 68.2 | true
3849 | &nbsp;&nbsp;&nbsp;&nbsp;If false, mixed active content (HTTP and HTTPS) is not blocked.
3850 | security.osclientcerts.autoload | boolean | Firefox 72 (Windows), Firefox 75 (macOS)  | false
3851 | &nbsp;&nbsp;&nbsp;&nbsp;If true, client certificates are loaded from the operating system certificate store.
3852 | security.ssl.errorReporting.enabled | boolean | Firefox 68, Firefox ESR 68 | true
3853 | &nbsp;&nbsp;&nbsp;&nbsp;If false, SSL errors cannot be sent to Mozilla.
3854 | security.tls.hello_downgrade_check | boolean | Firefox 72, Firefox ESR 68.4 | true
3855 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the TLS 1.3 downgrade check is disabled.
3856 | ui.key.menuAccessKeyFocuses | boolean | Firefox 68, Firefox ESR 68 | true
3857 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the Alt key doesn't show the menubar on Windows.
3858 | widget.content.gtk-theme-override | string | Firefox 72, Firefox ESR 68.4 (Linux only) | N/A
3859 | &nbsp;&nbsp;&nbsp;&nbsp;If set, overrides the GTK theme for widgets.
3860 #### Windows (GPO)
3861 ```
3862 Software\Policies\Mozilla\Firefox\Preferences\boolean_preference_name = 0x1 | 0x0
3863 Software\Policies\Mozilla\Firefox\Preferences\string_preference_name = "string_value"
3864 ```
3865 #### Windows (Intune)
3866 OMA-URI: (periods are replaced by underscores)
3867 ```
3868 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Preferences/boolean_preference_name
3869 ```
3870 Value (string):
3871 ```
3872 <enabled/> or <disabled/>
3873 ```
3874 OMA-URI: (periods are replaced by underscores)
3875 ```
3876 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Preferences/string_preference_name
3877 ```
3878 Value (string):
3879 ```
3880 <enabled/>
3881 <data id="Preferences_String" value="string_value"/>
3882 ```
3883 #### macOS
3884 ```
3885 <dict>
3886   <key>Preferences</key>
3887   <dict>
3888     <key>boolean_preference_name</key>
3889     <true/> | <false/>
3890     <key>string_preference_name</key>
3891     <string>string_value</string>
3892   </dict>
3893 </dict>
3894 ```
3895 #### policies.json
3896 ```
3897 {
3898   "policies": {
3899     "Preferences": {
3900       "boolean_preference_name": true | false,
3901       "string_preference_name": "string_value"
3902     }
3903   }
3904 }
3905 ```
3906 ### PromptForDownloadLocation
3907 Ask where to save each file before downloading.
3908
3909 **Compatibility:** Firefox 68, Firefox ESR 68\
3910 **CCK2 Equivalent:** N/A\
3911 **Preferences Affected:** `browser.download.useDownloadDir`
3912
3913 #### Windows (GPO)
3914 ```
3915 Software\Policies\Mozilla\Firefox\PromptForDownloadLocation = 0x1 | 0x0
3916 ```
3917 #### Windows (Intune)
3918 OMA-URI:
3919 ```
3920 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PromptForDownloadLocation
3921 ```
3922 Value (string):
3923 ```
3924 <enabled/> or <disabled/>
3925 ```
3926 #### macOS
3927 ```
3928 <dict>
3929   <key>PromptForDownloadLocation</key>
3930   <true/> | <false/>
3931 </dict>
3932 ```
3933 #### policies.json
3934 ```
3935 {
3936   "policies": {
3937     "PromptForDownloadLocation": true | false
3938   }
3939 }
3940 ```
3941 ### Proxy
3942 Configure proxy settings. These settings correspond to the connection settings in Firefox preferences.
3943 To specify ports, append them to the hostnames with a colon (:).
3944
3945 `Mode` is the proxy method being used.
3946
3947 `Locked` is whether or not proxy settings can be changed.
3948
3949 `HTTPProxy` is the HTTP proxy server.
3950
3951 `UseHTTPProxyForAllProtocols` is whether or not the HTTP proxy should be used for all other proxies.
3952
3953 `SSLProxy` is the SSL proxy server.
3954
3955 `FTPProxy` is the FTP proxy server.
3956
3957 `SOCKSProxy` is the SOCKS proxy server
3958
3959 `SOCKSVersion` is the SOCKS version (4 or 5)
3960
3961 `Passthrough` is list of hostnames or IP addresses that will not be proxied. Use `<local>` to bypass proxying for all hostnames which do not contain periods.
3962
3963 `AutoConfigURL` is a  URL for proxy configuration (only used if Mode is autoConfig).
3964
3965 `AutoLogin` means do not prompt for authentication if password is saved.
3966
3967 `UseProxyForDNS` to use proxy DNS when using SOCKS v5.
3968
3969 **Compatibility:** Firefox 60, Firefox ESR 60\
3970 **CCK2 Equivalent:** `networkProxy*`\
3971 **Preferences Affected:** `network.proxy.type`,`network.proxy.autoconfig_url`,`network.proxy.socks_remote_dns`,`signon.autologin.proxy`,`network.proxy.socks_version`,`network.proxy.no_proxies_on`,`network.proxy.share_proxy_settings`,`network.proxy.http`,`network.proxy.http_port`,`network.proxy.ftp`,`network.proxy.ftp_port`,`network.proxy.ssl`,`network.proxy.ssl_port`,`network.proxy.socks`,`network.proxy.socks_port`
3972
3973 #### Windows (GPO)
3974 ```
3975 Software\Policies\Mozilla\Firefox\Proxy\Mode = "none" | "system" | "manual" | "autoDetect" | "autoConfig"
3976 Software\Policies\Mozilla\Firefox\Proxy\Locked = 0x1 | 0x0
3977 Software\Policies\Mozilla\Firefox\=Proxy\HTTPProxy = https://httpproxy.example.com
3978 Software\Policies\Mozilla\Firefox\Proxy\UseHTTPProxyForAllProtocols = 0x1 | 0x0
3979 Software\Policies\Mozilla\Firefox\Proxy\SSLProxy = https://sslproxy.example.com
3980 Software\Policies\Mozilla\Firefox\Proxy\FTPProxy = https://ftpproxy.example.com
3981 Software\Policies\Mozilla\Firefox\Proxy\SOCKSProxy = https://socksproxy.example.com
3982 Software\Policies\Mozilla\Firefox\Proxy\SOCKSVersion = 0x4 | 0x5
3983 Software\Policies\Mozilla\Firefox\Proxy\Passthrough = <local>
3984 Software\Policies\Mozilla\Firefox\Proxy\AutoConfigURL = URL_TO_AUTOCONFIG
3985 Software\Policies\Mozilla\Firefox\Proxy\AutoLogin = 0x1 | 0x0
3986 Software\Policies\Mozilla\Firefox\Proxy\UseProxyForDNS = 0x1 | 0x0
3987 ```
3988 #### Windows (Intune)
3989 OMA-URI:
3990 ```
3991 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Proxy
3992 ```
3993 Value (string):
3994 ```
3995 <enabled/>
3996 <data id="ProxyLocked" value="true | false"/>
3997 <data id="ConnectionType" value="none | system | manual | autoDetect | autoConfig"/>
3998 <data id="HTTPProxy" value="https://httpproxy.example.com"/>
3999 <data id="UseHTTPProxyForAllProtocols" value="true | false"/>
4000 <data id="SSLProxy" value="https://sslproxy.example.com"/>
4001 <data id="FTPProxy" value="https://ftpproxy.example.com"/>
4002 <data id="SOCKSProxy" value="https://socksproxy.example.com"/>
4003 <data id="SOCKSVersion" value="4 | 5"/>
4004 <data id="AutoConfigURL" value="URL_TO_AUTOCONFIG"/>
4005 <data id="Passthrough" value="<local>"/>
4006 <data id="AutoLogin" value="true | false"/>
4007 <data id="UseProxyForDNS" value="true | false"/>
4008 ```
4009 #### macOS
4010 ```
4011 <dict>
4012   <key>Proxy</key>
4013   <dict>
4014     <key>Mode</key>
4015     <string>none | system | manual | autoDetect | autoConfig</string>
4016     <key>Locked</key>
4017     <true> | </false>
4018     <key>HTTPProxy</key>
4019     <string>https://httpproxy.example.com</string>
4020     <key>UseHTTPProxyForAllProtocols</key>
4021     <true> | </false>
4022     <key>SSLProxy</key>
4023     <string>https://sslproxy.example.com</string>
4024     <key>FTPProxy</key>
4025     <string>https://ftpproxy.example.com</string>
4026     <key>SOCKSProxy</key>
4027     <string>https://socksproxy.example.com</string>
4028     <key>SOCKSVersion</key>
4029     <string>4 | 5</string>
4030     <key>Passthrough</key>
4031     <string>&lt;local>&gt;</string>
4032     <key>AutoConfigURL</key>
4033     <string>URL_TO_AUTOCONFIG</string>
4034     <key>AutoLogin</key>
4035     <true> | </false>
4036     <key>UseProxyForDNS</key>
4037     <true> | </false>
4038   </dict>
4039 </dict>
4040 ```
4041 #### policies.json
4042 ```
4043 {
4044   "policies": {
4045     "Proxy": {
4046       "Mode": "none" | "system" | "manual" | "autoDetect" | "autoConfig",
4047       "Locked": true | false,
4048       "HTTPProxy": "hostname",
4049       "UseHTTPProxyForAllProtocols": true | false,
4050       "SSLProxy": "hostname",
4051       "FTPProxy": "hostname",
4052       "SOCKSProxy": "hostname",
4053       "SOCKSVersion": 4 | 5
4054       "Passthrough": "<local>",
4055       "AutoConfigURL": "URL_TO_AUTOCONFIG",
4056       "AutoLogin": true | false,
4057       "UseProxyForDNS": true | false
4058     }
4059   }
4060 }
4061 ```
4062 ### RequestedLocales
4063 Set the the list of requested locales for the application in order of preference. It will cause the corresponding language pack to become active.
4064
4065 Note: For Firefox 68, this can now be a string so that you can specify an empty value.
4066
4067 **Compatibility:** Firefox 64, Firefox ESR 60.4, Updated in Firefox 68, Firefox ESR 68\
4068 **CCK2 Equivalent:** N/A\
4069 **Preferences Affected:** N/A
4070 #### Windows (GPO)
4071 ```
4072 Software\Policies\Mozilla\Firefox\RequestedLocales\1 = "de"
4073 Software\Policies\Mozilla\Firefox\RequestedLocales\2 = "en-US"
4074
4075 or
4076
4077 Software\Policies\Mozilla\Firefox\RequestedLocales = "de,en-US"
4078 ```
4079 #### Windows (Intune)
4080 OMA-URI:
4081 ```
4082 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/RequestedLocalesString
4083 ```
4084 Value (string):
4085 ```
4086 <enabled/>
4087 <data id="Preferences_String" value="de,en-US"/>
4088 ```
4089 #### macOS
4090 ```
4091 <dict>
4092   <key>RequestedLocales</key>
4093   <array>
4094     <string>de</string>
4095     <string>en-US</string>
4096   </array>
4097 </dict>
4098
4099 or
4100
4101 <dict>
4102   <key>RequestedLocales</key>
4103   <string>de,en-US</string>
4104 </dict>
4105
4106 ```
4107 #### policies.json
4108 ```
4109 {
4110   "policies": {
4111     "RequestedLocales": ["de", "en-US"]
4112   }
4113 }
4114
4115 or
4116
4117 {
4118   "policies": {
4119     "RequestedLocales": "de,en-US"
4120   }
4121 }
4122 ```
4123 <a name="SanitizeOnShutdown"></a>
4124
4125 ### SanitizeOnShutdown (Selective)
4126 Clear data on shutdown. Choose from Cache, Cookies, Download History, Form & Search History, Browsing History, Active Logins, Site Preferences and Offline Website Data.
4127
4128 Previously, these values were always locked. Starting with Firefox 74 and Firefox ESR 68.6, you can use the `Locked` option to either keep the values unlocked (set it to false), or lock only the values you set (set it to true). If you want the old behavior of locking everything, do not set `Locked` at all.
4129
4130 **Compatibility:** Firefox 68, Firefox ESR 68 (Locked added in 74/68.6)\
4131 **CCK2 Equivalent:** N/A\
4132 **Preferences Affected:** `privacy.sanitize.sanitizeOnShutdown`,`privacy.clearOnShutdown.cache`,`privacy.clearOnShutdown.cookies`,`privacy.clearOnShutdown.downloads`,`privacy.clearOnShutdown.formdata`,`privacy.clearOnShutdown.history`,`privacy.clearOnShutdown.sessions`,`privacy.clearOnShutdown.siteSettings`,`privacy.clearOnShutdown.offlineApps`
4133 #### Windows (GPO)
4134 ```
4135 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Cache = 0x1 | 0x0
4136 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Cookies = 0x1 | 0x0
4137 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Downloads = 0x1 | 0x0
4138 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\FormData = 0x1 | 0x0
4139 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\History = 0x1 | 0x0
4140 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Sessions = 0x1 | 0x0
4141 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\SiteSettings = 0x1 | 0x0
4142 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\OfflineApps = 0x1 | 0x0
4143 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Locked = 0x1 | 0x0
4144 ```
4145 #### Windows (Intune)
4146 OMA-URI:
4147 ```
4148 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/I_SanitizeOnShutdown_Locked
4149 ```
4150 Value (string):
4151 ```
4152 <enabled/> or <disabled/>
4153 ```
4154 #### macOS
4155 ```
4156 <dict>
4157   <key>SanitizeOnShutdown</key>
4158   <dict>
4159     <key>Cache</key>
4160     <true/> | <false/>
4161     <key>Cookies</key>
4162     <true/> | <false/>
4163     <key>Downloads</key>
4164     <true/> | <false/>
4165     <key>FormData</key>
4166     <true/> | <false/>
4167     <key>History</key>
4168     <true/> | <false/>
4169     <key>Sessions</key>
4170     <true/> | <false/>
4171     <key>SiteSettings</key>
4172     <true/> | <false/>
4173     <key>OfflineApps</key>
4174     <true/> | <false/>
4175     <key>Locked</key>
4176     <true/> | <false/>
4177   </dict>
4178 </dict>
4179 ```
4180 #### policies.json
4181 ```
4182 {
4183   "policies": {
4184     "SanitizeOnShutdown": {
4185       "Cache": true | false,
4186       "Cookies": true | false,
4187       "Downloads": true | false,
4188       "FormData": true | false,
4189       "History": true | false,
4190       "Sessions": true | false,
4191       "SiteSettings": true | false,
4192       "OfflineApps": true | false,
4193       "Locked": true | false
4194     }
4195   }
4196 }
4197 ```
4198 ### SanitizeOnShutdown (All)
4199 Clear all data on shutdown, including Browsing & Download History, Cookies, Active Logins, Cache, Form & Search History, Site Preferences and Offline Website Data.
4200
4201 **Compatibility:** Firefox 60, Firefox ESR 60\
4202 **CCK2 Equivalent:** N/A\
4203 **Preferences Affected:** `privacy.sanitize.sanitizeOnShutdown`,`privacy.clearOnShutdown.cache`,`privacy.clearOnShutdown.cookies`,`privacy.clearOnShutdown.downloads`,`privacy.clearOnShutdown.formdata`,`privacy.clearOnShutdown.history`,`privacy.clearOnShutdown.sessions`,`privacy.clearOnShutdown.siteSettings`,`privacy.clearOnShutdown.offlineApps`
4204 #### Windows (GPO)
4205 ```
4206 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown = 0x1 | 0x0
4207 ```
4208 #### Windows (Intune)
4209 OMA-URI:
4210 ```
4211 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/C_SanitizeOnShutdown
4212 ```
4213 Value (string):
4214 ```
4215 <enabled/> or <disabled/>
4216 ```
4217 #### macOS
4218 ```
4219 <dict>
4220   <key>SanitizeOnShutdown</key>
4221   <true/> | <false/>
4222 </dict>
4223 ```
4224 #### policies.json
4225 ```
4226 {
4227   "policies": {
4228     "SanitizeOnShutdown": true | false
4229   }
4230 }
4231 ```
4232 ### SearchBar
4233 Set whether or not search bar is displayed.
4234
4235 **Compatibility:** Firefox 60, Firefox ESR 60\
4236 **CCK2 Equivalent:** `showSearchBar`\
4237 **Preferences Affected:** N/A
4238
4239 #### Windows (GPO)
4240 ```
4241 Software\Policies\Mozilla\Firefox\SearchBar = "unified" | "separate"
4242 ```
4243
4244 #### Windows (Intune)
4245 OMA-URI:
4246 ```
4247 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SearchBar
4248 ```
4249 Value (string):
4250 ```
4251 <enabled/>
4252 <data id="Permissions" value="unified | separate"/>
4253 ```
4254 #### macOS
4255 ```
4256 <dict>
4257   <key>SearchBar</key>
4258   <string>unified | separate</string>
4259 </dict>
4260 ```
4261 #### policies.json
4262 ```
4263 {
4264   "policies": {
4265     "SearchBar": "unified" | "separate"
4266   }
4267 }
4268 ```
4269 <a name="SearchEngines"></a>
4270
4271 ### SearchEngines (This policy is only available on the ESR.)
4272
4273 ### SearchEngines | Default
4274
4275 Set the default search engine. This policy is only available on the ESR.
4276
4277 **Compatibility:** Firefox ESR 60\
4278 **CCK2 Equivalent:** `defaultSearchEngine`\
4279 **Preferences Affected:** N/A
4280
4281 #### Windows (GPO)
4282 ```
4283 Software\Policies\Mozilla\Firefox\SearchEngines\Default = NAME_OF_SEARCH_ENGINE
4284 ```
4285 #### Windows (Intune)
4286 OMA-URI:
4287 ```
4288 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_Default
4289 ```
4290 Value (string):
4291 ```
4292 <enabled/>
4293 <data id="SearchEngines_Default" value="NAME_OF_SEARCH_ENGINE"/>
4294 ```
4295 #### macOS
4296 ```
4297 <dict>
4298   <key>SearchEngines</key>
4299   <dict>
4300     <key>Default</key>
4301     <string>NAME_OF_SEARCH_ENGINE</string>
4302   </dict>
4303 </dict>
4304 ```
4305 #### policies.json
4306 ```
4307 {
4308   "policies": {
4309     "SearchEngines": {
4310       "Default": "NAME_OF_SEARCH_ENGINE"
4311     }
4312   }
4313 }
4314 ```
4315 ### SearchEngines | PreventInstalls
4316
4317 Prevent installing search engines from webpages.
4318
4319 **Compatibility:** Firefox ESR 60\
4320 **CCK2 Equivalent:** `disableSearchEngineInstall`\
4321 **Preferences Affected:** N/A
4322
4323 #### Windows (GPO)
4324 ```
4325 Software\Policies\Mozilla\Firefox\SearchEngines\PreventInstalls = 0x1 | 0x0
4326 ```
4327 #### Windows (Intune)
4328 OMA-URI:
4329 ```
4330 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_PreventInstalls
4331 ```
4332 Value (string):
4333 ```
4334 <enabled/> or <disabled/>
4335 ```
4336 #### macOS
4337 ```
4338 <dict>
4339   <key>SearchEngines</key>
4340   <dict>
4341     <key>PreventInstalls</key>
4342     <true/> | <false/>
4343   </dict>
4344 </dict>
4345 ```
4346 #### policies.json
4347 ```
4348 {
4349   "policies": {
4350     "SearchEngines": {
4351       "PreventInstalls": true | false
4352     }
4353   }
4354 }
4355 ```
4356 ### SearchEngines | Remove
4357
4358 Hide built-in search engines. This policy is only available on the ESR.
4359
4360 **Compatibility:** Firefox ESR 60.2\
4361 **CCK2 Equivalent:** `removeDefaultSearchEngines` (removed all built-in engines)\
4362 **Preferences Affected:** N/A
4363
4364 #### Windows (GPO)
4365 ```
4366 Software\Policies\Mozilla\Firefox\SearchEngines\Remove\1 = NAME_OF_SEARCH_ENGINE
4367 ```
4368 #### Windows (Intune)
4369 OMA-URI:
4370 ```
4371 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_Remove
4372 ```
4373 Value (string):
4374 ```
4375 <enabled/>
4376 <data id="SearchEngines_Remove" value="1&#xF000;NAME_OF_SEARCH_ENGINE"/>
4377 ```
4378 #### macOS
4379 ```
4380 <dict>
4381   <key>SearchEngines</key>
4382   <dict>
4383     <key>Remove</key>
4384     <array>
4385       <string>NAME_OF_SEARCH_ENGINE</string>
4386     </array>
4387   </dict>
4388 </dict>
4389 ```
4390 #### policies.json
4391 ```
4392 {
4393   "policies": {
4394     "SearchEngines": {
4395       "Remove": ["NAME_OF_SEARCH_ENGINE"]
4396     }
4397   }
4398 }
4399 ```
4400 ### SearchEngines | Add
4401
4402 Add new search engines (up to five). This policy is only available on the ESR. `Name` and `URLTemplate` are required.
4403
4404 `Name` is the name of the search engine.
4405
4406 `URLTemplate` is the search URL with {searchTerms} to substitute for the search term.
4407
4408 `Method` is either GET or POST
4409
4410 `IconURL` is a URL for the icon to use.
4411
4412 `Alias` is a keyword to use for the engine.
4413
4414 `Description` is a description of the search engine.
4415
4416 `PostData` is the POST data as name value pairs separated by &.
4417
4418 `SuggestURLTemplate` is a search suggestions URL with {searchTerms} to substitute for the search term.
4419
4420 **Compatibility:** Firefox ESR 60 (POST support in Firefox ESR 68)\
4421 **CCK2 Equivalent:** `searchplugins`\
4422 **Preferences Affected:** N/A
4423
4424 #### Windows (GPO)
4425 ```
4426 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Name = "Example1"
4427 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\URLTemplate = "https://www.example.org/q={searchTerms}"
4428 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Method = "GET" | "POST"
4429 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\IconURL = "https://www.example.org/favicon.ico"
4430 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Alias = "example"
4431 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Description = "Example Description"
4432 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\SuggestURLTemplate = "https://www.example.org/suggestions/q={searchTerms}"
4433 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\PostData = "name=value&q={searchTerms}"
4434 ```
4435 #### Windows (Intune)
4436 OMA-URI:
4437 ```
4438 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_1
4439 ```
4440 Value (string):
4441 ```
4442 <enabled/>
4443 <data id="SearchEngine_Name" value="Example1"/>
4444 <data id="SearchEngine_URLTemplate" value="https://www.example.org/q={searchTerms"/>
4445 <data id="SearchEngine_Method" value="GET | POST"/>
4446 <data id="SearchEngine_IconURL" value="https://www.example.org/favicon.ico"/>
4447 <data id="SearchEngine_Alias" value="example"/>
4448 <data id="SearchEngine_Description" value="Example Description"/>
4449 <data id="SearchEngine_SuggestURLTemplate" value="https://www.example.org/suggestions/q={searchTerms}"/>
4450 <data id="SearchEngine_PostData" value="name=value&amp;q={searchTerms}"/>
4451 ```
4452 #### macOS
4453 ```
4454 <dict>
4455   <key>SearchEngines</key>
4456   <dict>
4457     <key>Add</key>
4458     <array>
4459       <dict>
4460         <key>Name</key>
4461         <string>Example1</string>
4462         <key>URLTemplate</key>
4463         <string>https://www.example.org/q={searchTerms}</string>
4464         <key>Method</key>
4465         <string>GET | POST </string>
4466         <key>IconURL</key>
4467         <string>https://www.example.org/favicon.ico</string>
4468         <key>Alias</key>
4469         <string>example</string>
4470         <key>Description</key>
4471         <string>Example Description</string>
4472         <key>SuggestURLTemplate</key>
4473         <string>https://www.example.org/suggestions/q={searchTerms}</string>
4474         <key>PostData</key>
4475         <string>name=value&q={searchTerms}</string>
4476       </dict>
4477     <array>
4478   </dict>
4479 </dict>
4480 ```
4481 #### policies.json
4482 ```
4483 {
4484   "policies": {
4485     "SearchEngines": {
4486       "Add": [
4487         {
4488           "Name": "Example1",
4489           "URLTemplate": "https://www.example.org/q={searchTerms}",
4490           "Method": "GET" | "POST",
4491           "IconURL": "https://www.example.org/favicon.ico",
4492           "Alias": "example",
4493           "Description": "Description",
4494           "PostData": "name=value&q={searchTerms}",
4495           "SuggestURLTemplate": "https://www.example.org/suggestions/q={searchTerms}"
4496         }
4497       ]
4498     }
4499   }
4500 }
4501 ```
4502 ### SearchSuggestEnabled
4503
4504 Enable search suggestions.
4505
4506 **Compatibility:** Firefox 68, Firefox ESR 68\
4507 **CCK2 Equivalent:** N/A\
4508 **Preferences Affected:** `browser.urlbar.suggest.searches`,`browser.search.suggest.enabled`
4509
4510 #### Windows (GPO)
4511 ```
4512 Software\Policies\Mozilla\Firefox\SearchSuggestEnabled = 0x1 | 0x0
4513 ```
4514 #### Windows (Intune)
4515 OMA-URI:
4516 ```
4517 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchSuggestEnabled
4518 ```
4519 Value (string):
4520 ```
4521 <enabled/> or <disabled/>
4522 ```
4523 #### macOS
4524 ```
4525 <dict>
4526   <key>SearchSuggestEnabled</key>
4527   <true/> | <false/>
4528 </dict>
4529 ```
4530 #### policies.json
4531 ```
4532 {
4533   "policies": {
4534     "SearchSuggestEnabled": true | false
4535   }
4536 }
4537 ```
4538 ### SecurityDevices
4539
4540 Install PKCS #11 modules.
4541
4542 **Compatibility:** Firefox 64, Firefox ESR 60.4\
4543 **CCK2 Equivalent:** `certs.devices`\
4544 **Preferences Affected:** N/A
4545
4546 #### Windows (GPO)
4547 ```
4548 Software\Policies\Mozilla\Firefox\SecurityDevices\NAME_OF_DEVICE = PATH_TO_LIBRARY_FOR_DEVICE
4549 ```
4550 #### Windows (Intune)
4551 OMA-URI:
4552 ```
4553 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SecurityDevices
4554 ```
4555 Value (string):
4556 ```
4557 <enabled/>
4558 <data id="SecurityDevices" value="NAME_OF_DEVICE&#xF000;PATH_TO_LIBRARY_FOR_DEVICE"/>
4559 ```
4560 #### macOS
4561 ```
4562 <dict>
4563   <key>SecurityDevices</key>
4564   <dict>
4565     <key>NAME_OF_DEVICE</key>
4566     <string>PATH_TO_LIBRARY_FOR_DEVICE</string>
4567   </dict>
4568 </dict>
4569 ```
4570
4571 #### policies.json
4572 ```
4573 {
4574   "policies": {
4575     "SecurityDevices": {
4576       "NAME_OF_DEVICE": "PATH_TO_LIBRARY_FOR_DEVICE"
4577     }
4578   }
4579 }
4580 ```
4581 ### SSLVersionMax
4582
4583 Set and lock the maximum version of TLS.
4584
4585 **Compatibility:** Firefox 66, Firefox ESR 60.6\
4586 **CCK2 Equivalent:** N/A\
4587 **Preferences Affected:** `security.tls.version.max`
4588
4589 #### Windows (GPO)
4590 ```
4591 Software\Policies\Mozilla\Firefox\SSLVersionMax = "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
4592 ```
4593 #### Windows (Intune)
4594 OMA-URI:
4595 ```
4596 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SSLVersionMax
4597 ```
4598 Value (string):
4599 ```
4600 <enabled/>
4601 <data id="SSLVersion" value="tls1 | tls1.2 | tls1.3"/>
4602 ```
4603 #### macOS
4604 ```
4605 <dict>
4606   <key>SSLVersionMax</key>
4607   <string>tls1 | tls1.1 | tls1.2 | tls1.3</string>
4608 </dict>
4609 ```
4610
4611 #### policies.json
4612 ```
4613 {
4614   "policies": {
4615     "SSLVersionMax": "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
4616   }
4617 }
4618 ```
4619 ### SSLVersionMin
4620
4621 Set and lock the minimum version of TLS.
4622
4623 **Compatibility:** Firefox 66, Firefox ESR 60.6\
4624 **CCK2 Equivalent:** N/A\
4625 **Preferences Affected:** `security.tls.version.min`
4626
4627 #### Windows (GPO)
4628 ```
4629 Software\Policies\Mozilla\Firefox\SSLVersionMin = "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
4630 ```
4631 #### Windows (Intune)
4632 OMA-URI:
4633 ```
4634 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SSLVersionMin
4635 ```
4636 Value (string):
4637 ```
4638 <enabled/>
4639 <data id="SSLVersion" value="tls1 | tls1.2 | tls1.3"/>
4640 ```
4641 #### macOS
4642 ```
4643 <dict>
4644   <key>SSLVersionMin</key>
4645   <string>tls1 | tls1.1 | tls1.2 | tls1.3</string>
4646 </dict>
4647 ```
4648
4649 #### policies.json
4650 ```
4651 {
4652   "policies": {
4653     "SSLVersionMin": "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
4654   }
4655 }
4656 ```
4657 ### SupportMenu
4658 Add a menuitem to the help menu for specifying support information.
4659
4660 **Compatibility:** Firefox 68.0.1, Firefox ESR 68.0.1\
4661 **CCK2 Equivalent:** helpMenu\
4662 **Preferences Affected:** N/A
4663
4664 #### Windows (GPO)
4665 ```
4666 Software\Policies\Mozilla\Firefox\SupportMenu\Title = "Support Menu"
4667 Software\Policies\Mozilla\Firefox\SupportMenu\URL = "http://example.com/support"
4668 Software\Policies\Mozilla\Firefox\SupportMenu\AccessKey = "S"
4669 ```
4670 #### Windows (Intune)
4671 OMA-URI:
4672 ```
4673 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SupportMenu
4674 ```
4675 Value (string):
4676 ```
4677 <enabled/>
4678 <data id="SupportMenuTitle" value="Support Menu"/>
4679 <data id="SupportMenuURL" value="http://example.com/support"/>
4680 <data id="SupportMenuAccessKey" value="S">
4681 ```
4682 #### macOS
4683 ```
4684 <dict>
4685   <key>SupportMenu</key>
4686   <dict>
4687     <key>Title</key>
4688     <string>SupportMenu</string>
4689     <key>URL</key>
4690     <string>http://example.com/support</string>
4691     <key>AccessKey</key>
4692     <string>S</string>
4693   </dict>
4694 </dict>
4695 ```
4696 #### policies.json
4697 ```
4698 {
4699   "policies": {
4700     "SupportMenu": {
4701       "Title": "Support Menu",
4702       "URL": "http://example.com/support",
4703       "AccessKey": "S"
4704     }
4705   }
4706 }
4707 ```
4708 ### UserMessaging
4709
4710 Prevent Firefox from messaging the user in certain situations.
4711
4712 `WhatsNew` Remove the "What's New" icon and menuitem. (Firefox 75 only)
4713
4714 `ExtensionRecommendations` Don't recommend extensions while the user is visiting web pages.
4715
4716 `FeatureRecommendations` Don't recommend browser features.
4717
4718 `UrlbarInterventions` Don't offer Firefox specific suggestions in the URL bar. (Firefox 75 only)
4719
4720 **Compatibility:** Firefox 75, Firefox ESR 68.7\
4721 **CCK2 Equivalent:** N/A\
4722 **Preferences Affected:** `browser.messaging-system.whatsNewPanel.enabled`,`browser.newtabpage.activity-stream.asrouter.userprefs.cfr.addons`,`browser.newtabpage.activity-stream.asrouter.userprefs.cfr.features`
4723
4724 #### Windows (GPO)
4725 ```
4726 Software\Policies\Mozilla\Firefox\UserMessaging\WhatsNew = 0x1 | 0x0
4727 Software\Policies\Mozilla\Firefox\UserMessaging\ExtensionRecommendations = 0x1 | 0x0
4728 Software\Policies\Mozilla\Firefox\UserMessaging\FeatureRecommendations = 0x1 | 0x0
4729 Software\Policies\Mozilla\Firefox\UserMessaging\UrlbarInterventions = 0x1 | 0x0
4730 ```
4731 #### Windows (Intune)
4732 OMA-URI:
4733 ```
4734 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/UserMessaging_WhatsNew
4735 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/UserMessaging_ExtensionRecommendations
4736 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/UserMessaging_FeatureRecommendations
4737 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/UserMessaging_UrlbarInterventions
4738 ```
4739 Value (string):
4740 ```
4741 <enabled/> or <disabled/>
4742 ```
4743 #### macOS
4744 ```
4745 <dict>
4746   <key>UserMessaging</key>
4747   <dict>
4748     <key>WhatsNew</key>
4749     <true/> | <false/>
4750     <key>ExtensionRecommendations</key>
4751     <true/> | <false/>
4752     <key>FeatureRecommendations</key>
4753     <true/> | <false/>
4754     <key>UrlbarInterventions</key>
4755     <true/> | <false/>
4756   </dict>
4757 </dict>
4758 ```
4759 #### policies.json
4760 ```
4761 {
4762   "policies": {
4763     "UserMessaging": {
4764       "WhatsNew": true | false,
4765       "ExtensionRecommendations": true | false,
4766       "FeatureRecommendations": true | false,
4767       "UrlbarInterventions": true | false
4768     }
4769   }
4770 }
4771 ```
4772 ### WebsiteFilter
4773 Block websites from being visited. The parameters take an array of Match Patterns, as documented in https://developer.mozilla.org/en-US/Add-ons/WebExtensions/Match_patterns. Only http/https addresses are supported at the moment. The arrays are limited to 1000 entries each.
4774
4775 **Compatibility:** Firefox 60, Firefox ESR 60\
4776 **CCK2 Equivalent:** N/A\
4777 **Preferences Affected:** N/A
4778
4779 #### Windows (GPO)
4780 ```
4781 Software\Policies\Mozilla\Firefox\WebsiteFilter\Block\1 = "<all_urls>"
4782 Software\Policies\Mozilla\Firefox\WebsiteFilter\Exceptions\1 = "http://example.org/*"
4783 ```
4784 #### Windows (Intune)
4785 OMA-URI:
4786 ```
4787 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/B_WebsiteFilter_Block
4788 ```
4789 Value (string):
4790 ```
4791 <enabled/>
4792 <data id="WebsiteFilter" value="1&#xF000;<all_urls>"/>
4793 ```
4794 OMA-URI:
4795 ```
4796 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/B_WebsiteFilter_Exceptions
4797 ```
4798 Value (string):
4799 ```
4800 <enabled/>
4801 <data id="WebsiteFilter" value="1&#xF000;http://example.org/*"/>
4802 ```
4803 #### macOS
4804 ```
4805 <dict>
4806   <key>WebsiteFilter</key>
4807   <dict>
4808     <key>Block</key>
4809     <array>
4810       <string><all_urls></string>
4811     </array>
4812     <key>Exceptions</key>
4813     <array>
4814       <string>http://example.org/*</string>
4815     </array>
4816   </dict>
4817
4818 </dict>
4819 ```
4820 #### policies.json
4821 ```
4822 {
4823   "policies": {
4824     "WebsiteFilter": {
4825       "Block": ["<all_urls>"],
4826       "Exceptions": ["http://example.org/*"]
4827     }
4828   }
4829 }
4830 ```