README.md

   1 **These policies are in active development and so might contain changes that do not work with current versions of Firefox.**
   2
   3 **You should use the [officially released versions](https://github.com/mozilla/policy-templates/releases) if you are deploying changes.**
   4
   5 Policies can be specified using the [Group Policy templates on Windows](https://github.com/mozilla/policy-templates/tree/master/windows), [Intune on Windows](https://support.mozilla.org/kb/managing-firefox-intune), [configuration profiles on macOS](https://github.com/mozilla/policy-templates/tree/master/mac), or by creating a file called `policies.json`. On Windows, create a directory called `distribution` where the EXE is located and place the file there. On Mac, the file goes into `Firefox.app/Contents/Resources/distribution`.  On Linux, the file goes into `firefox/distribution`, where `firefox` is the installation directory for firefox, which varies by distribution or you can specify system-wide policy by placing the file in `/etc/firefox/policies`.
   6
   7 | Policy Name | Description
   8 | --- | --- |
   9 | **[`3rdparty`](#3rdparty)** | Set policies that WebExtensions can access via chrome.storage.managed.
  10 | **[`AllowedDomainsForApps`](#alloweddomainsforapps)** | Define domains allowed to access Google Workspace.
  11 | **[`AppAutoUpdate`](#appautoupdate)** | Enable or disable automatic application update.
  12 | **[`AppUpdateURL`](#appupdateurl)** | Change the URL for application update.
  13 | **[`Authentication`](#authentication)** | Configure sites that support integrated authentication.
  14 | **[`AutoLaunchProtocolsFromOrigins`](#autolaunchprotocolsfromorigins)** | Define a list of external protocols that can be used from listed origins without prompting the user.
  15 | **[`BackgroundAppUpdate`](#backgroundappupdate)** | Enable or disable the background updater (Windows only).
  16 | **[`BlockAboutAddons`](#blockaboutaddons)** | Block access to the Add-ons Manager (about:addons).
  17 | **[`BlockAboutConfig`](#blockaboutconfig)** | Block access to about:config.
  18 | **[`BlockAboutProfiles`](#blockaboutprofiles)** | Block access to About Profiles (about:profiles).
  19 | **[`BlockAboutSupport`](#blockaboutsupport)** | Block access to Troubleshooting Information (about:support).
  20 | **[`Bookmarks`](#bookmarks)** | Add bookmarks in either the bookmarks toolbar or menu.
  21 | **[`CaptivePortal`](#captiveportal)** | Enable or disable the detection of captive portals.
  22 | **[`Certificates`](#certificates)** |
  23 | **[`Certificates -> ImportEnterpriseRoots`](#certificates--importenterpriseroots)** | Trust certificates that have been added to the operating system certificate store by a user or administrator.
  24 | **[`Certificates -> Install`](#certificates--install)** | Install certificates into the Firefox certificate store.
  25 | **[`Cookies`](#cookies)** | Configure cookie preferences.
  26 | **[`DefaultDownloadDirectory`](#defaultdownloaddirectory)** | Set the default download directory.
  27 | **[`DisableAppUpdate`](#disableappupdate)** | Turn off application updates.
  28 | **[`DisableBuiltinPDFViewer`](#disablebuiltinpdfviewer)** | Disable the built in PDF viewer.
  29 | **[`DisabledCiphers`](#disabledciphers)** | Disable ciphers.
  30 | **[`DisableDefaultBrowserAgent`](#disabledefaultbrowseragent)** | Prevent the default browser agent from taking any actions (Windows only).
  31 | **[`DisableDeveloperTools`](#disabledevelopertools)** | Remove access to all developer tools.
  32 | **[`DisableFeedbackCommands`](#disablefeedbackcommands)** | Disable the menus for reporting sites.
  33 | **[`DisableFirefoxAccounts`](#disablefirefoxaccounts)** | Disable Firefox Accounts integration (Sync).
  34 | **[`DisableFirefoxScreenshots`](#disablefirefoxscreenshots)** | Remove access to Firefox Screenshots.
  35 | **[`DisableFirefoxStudies`](#disablefirefoxstudies)** | Disable Firefox studies (Shield).
  36 | **[`DisableForgetButton`](#disableforgetbutton)** | Disable the "Forget" button.
  37 | **[`DisableFormHistory`](#disableformhistory)** | Turn off saving information on web forms and the search bar.
  38 | **[`DisableMasterPasswordCreation`](#disablemasterpasswordcreation)** | Remove the master password functionality.
  39 | **[`DisablePasswordReveal`](#disablepasswordreveal)** | Do not allow passwords to be revealed in saved logins.
  40 | **[`DisablePocket`](#disablepocket)** | Remove Pocket in the Firefox UI.
  41 | **[`DisablePrivateBrowsing`](#disableprivatebrowsing)** | Remove access to private browsing.
  42 | **[`DisableProfileImport`](#disableprofileimport)** | Disables the "Import data from another browser" option in the bookmarks window.
  43 | **[`DisableProfileRefresh`](#disableprofilerefresh)** | Disable the Refresh Firefox button on about:support and support.mozilla.org
  44 | **[`DisableSafeMode`](#disablesafemode)** | Disable safe mode within the browser.
  45 | **[`DisableSecurityBypass`](#disablesecuritybypass)** | Prevent the user from bypassing security in certain cases.
  46 | **[`DisableSetDesktopBackground`](#disablesetdesktopbackground)** | Remove the "Set As Desktop Background..." menuitem when right clicking on an image.
  47 | **[`DisableSystemAddonUpdate`](#disablesystemaddonupdate)** | Prevent system add-ons from being installed or update.
  48 | **[`DisableTelemetry`](#disabletelemetry)** | DisableTelemetry
  49 | **[`DisplayBookmarksToolbar`](#displaybookmarkstoolbar)** | Set the initial state of the bookmarks toolbar.
  50 | **[`DisplayMenuBar`](#displaymenubar)** | Set the state of the menubar.
  51 | **[`DisplayMenuBar (Deprecated)`](#displaymenubar-deprecated)** | Set the initial state of the menubar.
  52 | **[`DNSOverHTTPS`](#dnsoverhttps)** | Configure DNS over HTTPS.
  53 | **[`DontCheckDefaultBrowser`](#dontcheckdefaultbrowser)** | Don't check if Firefox is the default browser at startup.
  54 | **[`DownloadDirectory`](#downloaddirectory)** | Set and lock the download directory.
  55 | **[`EnableTrackingProtection`](#enabletrackingprotection)** | Configure tracking protection.
  56 | **[`EncryptedMediaExtensions`](#encryptedmediaextensions)** | Enable or disable Encrypted Media Extensions and optionally lock it.
  57 | **[`EnterprisePoliciesEnabled`](#enterprisepoliciesenabled)** | Enable policy support on macOS.
  58 | **[`Extensions`](#extensions)** | Control the installation, uninstallation and locking of extensions.
  59 | **[`ExtensionSettings`](#extensionsettings)** | Manage all aspects of extensions.
  60 | **[`ExtensionUpdate`](#extensionupdate)** | Control extension updates.
  61 | **[`FirefoxHome`](#firefoxhome)** | Customize the Firefox Home page.
  62 | **[`FlashPlugin`](#flashplugin)** | Configure the default Flash plugin policy as well as origins for which Flash is allowed.
  63 | **[`Handlers`](#handlers)** | Configure default application handlers.
  64 | **[`HardwareAcceleration`](#hardwareacceleration)** | Control hardware acceleration.
  65 | **[`Homepage`](#homepage)** | Configure the default homepage and how Firefox starts.
  66 | **[`InstallAddonsPermission`](#installaddonspermission)** | Configure the default extension install policy as well as origins for extension installs are allowed.
  67 | **[`LegacyProfiles`](#legacyprofiles)** | Disable the feature enforcing a separate profile for each installation.
  68 | **[`LegacySameSiteCookieBehaviorEnabled`](#legacysamesitecookiebehaviorenabled)** | Enable default legacy SameSite cookie behavior setting.
  69 | **[`LegacySameSiteCookieBehaviorEnabledForDomainList`](#legacysamesitecookiebehaviorenabledfordomainlist)** | Revert to legacy SameSite behavior for cookies on specified sites.
  70 | **[`LocalFileLinks`](#localfilelinks)** | Enable linking to local files by origin.
  71 | **[`ManagedBookmarks`](#managedbookmarks)** | Configures a list of bookmarks managed by an administrator that cannot be changed by the user.
  72 | **[`ManualAppUpdateOnly`](#manualappupdateonly)** | Allow manual updates only and do not notify the user about updates..
  73 | **[`NetworkPrediction`](#networkprediction)** | Enable or disable network prediction (DNS prefetching).
  74 | **[`NewTabPage`](#newtabpage)** | Enable or disable the New Tab page.
  75 | **[`NoDefaultBookmarks`](#nodefaultbookmarks)** | Disable the creation of default bookmarks.
  76 | **[`OfferToSaveLogins`](#offertosavelogins)** | Control whether or not Firefox offers to save passwords.
  77 | **[`OfferToSaveLoginsDefault`](#offertosaveloginsdefault)** | Set the default value for whether or not Firefox offers to save passwords.
  78 | **[`OverrideFirstRunPage`](#overridefirstrunpage)** | Override the first run page.
  79 | **[`OverridePostUpdatePage`](#overridepostupdatepage)** | Override the upgrade page.
  80 | **[`PasswordManagerEnabled`](#passwordmanagerenabled)** | Remove (some) access to the password manager.
  81 | **[`PDFjs`](#pdfjs)** | Disable or configure PDF.js, the built-in PDF viewer.
  82 | **[`Permissions`](#permissions)** | Set permissions associated with camera, microphone, location, and notifications.
  83 | **[`PictureInPicture`](#pictureinpicture)** | Enable or disable Picture-in-Picture.
  84 | **[`PopupBlocking`](#popupblocking)** | Configure the default pop-up window policy as well as origins for which pop-up windows are allowed.
  85 | **[`Preferences`](#preferences)** | Set and lock preferences.
  86 | **[`Preferences (Deprecated)`](#preferences-deprecated)** | Set and lock some preferences.
  87 | **[`PrimaryPassword`](#primarypassword)** | Require or prevent using a primary (formerly master) password.
  88 | **[`PromptForDownloadLocation`](#promptfordownloadlocation)** | Ask where to save each file before downloading.
  89 | **[`Proxy`](#proxy)** | Configure proxy settings.
  90 | **[`RequestedLocales`](#requestedlocales)** | Set the the list of requested locales for the application in order of preference.
  91 | **[`SanitizeOnShutdown` (All)](#sanitizeonshutdown-all)** | Clear all data on shutdown.
  92 | **[`SanitizeOnShutdown` (Selective)](#sanitizeonshutdown-selective)** | Clear data on shutdown.
  93 | **[`SearchBar`](#searchbar)** | Set whether or not search bar is displayed.
  94 | **[`SearchEngines`](#searchengines-this-policy-is-only-available-on-the-esr)** |
  95 | **[`SearchEngines -> Add`](#searchengines--add)** | Add new search engines.
  96 | **[`SearchEngines -> Default`](#searchengines--default)** | Set the default search engine.
  97 | **[`SearchEngines -> PreventInstalls`](#searchengines--preventinstalls)** | Prevent installing search engines from webpages.
  98 | **[`SearchEngines -> Remove`](#searchengines--remove)** | Hide built-in search engines.
  99 | **[`SearchSuggestEnabled`](#searchsuggestenabled)** | Enable search suggestions.
 100 | **[`SecurityDevices`](#securitydevices)** | Install PKCS #11 modules.
 101 | **[`ShowHomeButton`](#showhomebutton)** | Show the home button on the toolbar.
 102 | **[`SSLVersionMax`](#sslversionmax)** | Set and lock the maximum version of TLS.
 103 | **[`SSLVersionMin`](#sslversionmin)** | Set and lock the minimum version of TLS.
 104 | **[`SupportMenu`](#supportmenu)** | Add a menuitem to the help menu for specifying support information.
 105 | **[`UserMessaging`](#usermessaging)** | Don't show certain messages to the user.
 106 | **[`WebsiteFilter`](#websitefilter)** | Block websites from being visited.
 107 | **[`WindowsSSO`](#windowssso)** | Allow Windows single sign-on for Microsoft, work, and school accounts.
 108
 109 ### 3rdparty
 110
 111 Allow WebExtensions to configure policy. For more information, see [Adding policy support to your extension](https://extensionworkshop.com/documentation/enterprise/adding-policy-support-to-your-extension/).
 112
 113 ### AllowedDomainsForApps
 114
 115 Define domains allowed to access Google Workspace.
 116
 117 This policy is based on the [Chrome policy](https://chromeenterprise.google/policies/#AllowedDomainsForApps) of the same name.
 118
 119 If this policy is enabled, users can only access Google Workspace using accounts from the specified domains. If you want to allow Gmail, you can add ```consumer_accounts``` to the list.
 120
 121 **Compatibility:** Firefox 89, Firefox ESR 78.11\
 122 **CCK2 Equivalent:** N/A\
 123 **Preferences Affected:** N/A
 124
 125 #### Windows (GPO)
 126 ```
 127 Software\Policies\Mozilla\Firefox\AllowedDomainsForApps = "managedfirefox.com,example.com"
 128 ```
 129 #### Windows (Intune)
 130 OMA-URI:
 131 ```
 132 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AllowedDomainsForApps
 133 ```
 134 Value (string):
 135 ```
 136 <enabled/>
 137 <data id="AllowedDomainsForApps" value="managedfirefox.com,example.com"/>
 138 ```
 139 #### macOS
 140 ```
 141 <dict>
 142   <key>AllowedDomainsForApps</key>
 143   <string>managedfirefox.com,example.com</string>
 144 </dict>
 145 ```
 146 #### policies.json
 147 ```
 148 {
 149   "policies": {
 150     "AllowedDomainsForApps": "managedfirefox.com,example.com"
 151   }
 152 }
 153 ```
 154 ### AppAutoUpdate
 155
 156 Enable or disable **automatic** application update.
 157
 158 If set to true, application updates are installed without user approval within Firefox. The operating system might still require approval.
 159
 160 If set to false, application updates are downloaded but the user can choose when to install the update.
 161
 162 If you have disabled updates via `DisableAppUpdate`, this policy has no effect.
 163
 164 **Compatibility:** Firefox 75, Firefox ESR 68.7\
 165 **CCK2 Equivalent:** N/A\
 166 **Preferences Affected:** `app.update.auto`
 167
 168 #### Windows (GPO)
 169 ```
 170 Software\Policies\Mozilla\Firefox\AppAutoUpdate = 0x1 | 0x0
 171 ```
 172 #### Windows (Intune)
 173 OMA-URI:
 174 ```
 175 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AppAutoUpdate
 176 ```
 177 Value (string):
 178 ```
 179 <enabled/> or <disabled/>
 180 ```
 181 #### macOS
 182 ```
 183 <dict>
 184   <key>AppAutoUpdate</key>
 185   <true/> | <false/>
 186 </dict>
 187 ```
 188 #### policies.json
 189 ```
 190 {
 191   "policies": {
 192     "AppAutoUpdate": true | false
 193   }
 194 }
 195 ```
 196 ### AppUpdateURL
 197
 198 Change the URL for application update if you are providing Firefox updates from a custom update server.
 199
 200 **Compatibility:** Firefox 62, Firefox ESR 60.2\
 201 **CCK2 Equivalent:** N/A\
 202 **Preferences Affected:** `app.update.url`
 203
 204 #### Windows (GPO)
 205 ```
 206 Software\Policies\Mozilla\Firefox\AppUpdateURL = "https://yoursite.com"
 207 ```
 208 #### Windows (Intune)
 209 OMA-URI:
 210 ```
 211 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AppUpdateURL
 212 ```
 213 Value (string):
 214 ```
 215 <enabled/>
 216 <data id="AppUpdateURL" value="https://yoursite.com"/>
 217 ```
 218 #### macOS
 219 ```
 220 <dict>
 221   <key>AppUpdateURL</key>
 222   <string>https://yoursite.com</string>
 223 </dict>
 224 ```
 225 #### policies.json
 226 ```
 227 {
 228   "policies": {
 229     "AppUpdateURL": "https://yoursite.com"
 230   }
 231 }
 232 ```
 233 ### Authentication
 234
 235 Configure sites that support integrated authentication.
 236
 237 See [Integrated authentication](https://htmlpreview.github.io/?https://github.com/mdn/archived-content/blob/main/files/en-us/mozilla/integrated_authentication/raw.html) for more information.
 238
 239 `PrivateBrowsing` enables integrated authentication in private browsing.
 240
 241 **Compatibility:** Firefox 60, Firefox ESR 60 (AllowNonFQDN added in 62/60.2, AllowProxies added in 70/68.2, Locked added in 71/68.3, PrivateBrowsing added in 77/68.9)\
 242 **CCK2 Equivalent:** N/A\
 243 **Preferences Affected:** `network.negotiate-auth.trusted-uris`,`network.negotiate-auth.delegation-uris`,`network.automatic-ntlm-auth.trusted-uris`,`network.automatic-ntlm-auth.allow-non-fqdn`,`network.negotiate-auth.allow-non-fqdn`,`network.automatic-ntlm-auth.allow-proxies`,`network.negotiate-auth.allow-proxies`,`network.auth.private-browsing-sso`
 244
 245 #### Windows (GPO)
 246 ```
 247 Software\Policies\Mozilla\Firefox\Authentication\SPNEGO\1 = "mydomain.com"
 248 Software\Policies\Mozilla\Firefox\Authentication\SPNEGO\2 = "https://myotherdomain.com"
 249 Software\Policies\Mozilla\Firefox\Authentication\Delegated\1 = "mydomain.com"
 250 Software\Policies\Mozilla\Firefox\Authentication\Delegated\2 = "https://myotherdomain.com"
 251 Software\Policies\Mozilla\Firefox\Authentication\NTLM\1 = "mydomain.com"
 252 Software\Policies\Mozilla\Firefox\Authentication\NTLM\2 = "https://myotherdomain.com"
 253 Software\Policies\Mozilla\Firefox\Authentication\AllowNonFQDN\SPNEGO = 0x1 | 0x0
 254 Software\Policies\Mozilla\Firefox\Authentication\AllowNonFQDN\NTLM = 0x1 | 0x0
 255 Software\Policies\Mozilla\Firefox\Authentication\AllowProxies\SPNEGO = 0x1 | 0x0
 256 Software\Policies\Mozilla\Firefox\Authentication\AllowProxies\NTLM = 0x1 | 0x0
 257 Software\Policies\Mozilla\Firefox\Authentication\Locked = 0x1 | 0x0
 258 Software\Policies\Mozilla\Firefox\Authentication\PrivateBrowsing = 0x1 | 0x0
 259 ```
 260 #### Windows (Intune)
 261 OMA-URI:
 262 ```
 263 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_SPNEGO
 264 ```
 265 Value (string):
 266 ```
 267 <enabled/>
 268 <data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
 269 ```
 270 OMA-URI:
 271 ```
 272 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_Delegated
 273 ```
 274 Value (string):
 275 ```
 276 <enabled/>
 277 <data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
 278 ```
 279 OMA-URI:
 280 ```
 281 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_NTLM
 282 ```
 283 Value (string):
 284 ```
 285 <enabled/>
 286 <data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
 287 ```
 288 OMA-URI:
 289 ```
 290 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_AllowNonFQDN
 291 ```
 292 Value (string):
 293 ```
 294 <enabled/>
 295 <data id="Authentication_AllowNonFQDN_NTLM" value="true | false"/>
 296 <data id="Authentication_AllowNonFQDN_SPNEGO" value="true | false"/>
 297 ```
 298 OMA-URI:
 299 ```
 300 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_Locked
 301 ```
 302 Value (string):
 303 ```
 304 <enabled/> or <disabled/>
 305 ```
 306 OMA-URI:
 307 ```
 308 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_PrivateBrowsing
 309 ```
 310 Value (string):
 311 ```
 312 <enabled/> or <disabled/>
 313 ```
 314 #### macOS
 315 ```
 316 <dict>
 317   <key>Authentication</key>
 318   <dict>
 319     <key>SPNEGO</key>
 320     <array>
 321       <string>mydomain.com</string>
 322       <string>https://myotherdomain.com</string>
 323     </array>
 324     <key>Delegated</key>
 325     <array>
 326       <string>mydomain.com</string>
 327       <string>https://myotherdomain.com</string>
 328     </array>
 329     <key>NTLM</key>
 330     <array>
 331       <string>mydomain.com</string>
 332       <string>https://myotherdomain.com</string>
 333     </array>
 334     <key>AllowNonFQDN</key>
 335       <dict>
 336       <key>SPNEGO</key>
 337       <true/> | <false/>
 338       <key>NTLM</key>
 339       <true/> | <false/>
 340     </dict>
 341     <key>AllowProxies</key>
 342       <dict>
 343       <key>SPNEGO</key>
 344       <true/> | <false/>
 345       <key>NTLM</key>
 346       <true/> | <false/>
 347     </dict>
 348     <key>Locked</key>
 349     <true/> | <false/>
 350     <key>PrivateBrowsing</key>
 351     <true/> | <false/>
 352   </dict>
 353 </dict>
 354 ```
 355 #### policies.json
 356 ```
 357 {
 358   "policies": {
 359     "Authentication": {
 360       "SPNEGO": ["mydomain.com", "https://myotherdomain.com"],
 361       "Delegated": ["mydomain.com", "https://myotherdomain.com"],
 362       "NTLM": ["mydomain.com", "https://myotherdomain.com"],
 363       "AllowNonFQDN": {
 364         "SPNEGO": true | false,
 365         "NTLM": true | false
 366       },
 367       "AllowProxies": {
 368         "SPNEGO": true | false,
 369         "NTLM": true | false
 370       },
 371       "Locked": true | false,
 372       "PrivateBrowsing": true | false
 373     }
 374   }
 375 }
 376 ```
 377 ### AutoLaunchProtocolsFromOrigins
 378 Define a list of external protocols that can be used from listed origins without prompting the user. The origin is the scheme plus the hostname.
 379
 380 The syntax of this policy is exactly the same as the [Chrome AutoLaunchProtocolsFromOrigins policy](https://cloud.google.com/docs/chrome-enterprise/policies/?policy=AutoLaunchProtocolsFromOrigins) except that you can only use valid origins (not just hostnames). This also means that you cannot specify an asterisk for all origins.
 381
 382 The schema is:
 383 ```
 384 {
 385  "items": {
 386   "properties": {
 387    "allowed_origins": {
 388     "items": {
 389      "type": "string"
 390     },
 391     "type": "array"
 392    },
 393    "protocol": {
 394     "type": "string"
 395    }
 396   },
 397   "required": [
 398    "protocol",
 399    "allowed_origins"
 400   ],
 401   "type": "object"
 402  },
 403  "type": "array"
 404 }
 405 ```
 406 **Compatibility:** Firefox 90, Firefox ESR 78.12\
 407 **CCK2 Equivalent:** N/A\
 408 **Preferences Affected:** N/A
 409
 410 #### Windows (GPO)
 411 Software\Policies\Mozilla\Firefox\AutoLaunchProtocolsFromOrigins (REG_MULTI_SZ) =
 412 ```
 413 [
 414   {
 415     "protocol": "zoommtg",
 416     "allowed_origins": [
 417       "https://somesite.zoom.us"
 418     ]
 419   }
 420 ]
 421 ```
 422 #### Windows (Intune)
 423 OMA-URI:
 424 ```
 425 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AutoLaunchProtocolsFromOrigins
 426 ```
 427 Value (string):
 428 ```
 429 <enabled/>
 430 <data id="JSON" value='
 431 [
 432   {
 433     "protocol": "zoommtg",
 434     "allowed_origins": [
 435       "https://somesite.zoom.us"
 436     ]
 437   }
 438 ]'/>
 439 ```
 440 #### macOS
 441 ```
 442 <dict>
 443   <key>AutoLaunchProtocolsFromOrigins</key>
 444   <array>
 445     <dict>
 446       <key>protocol</key>
 447       <string>zoommtg</string>
 448       <key>allowed_origins</key>
 449       <array>
 450         <string>https://somesite.zoom.us</string>
 451       </array>
 452     </dict>
 453   </array>
 454 </dict>
 455 ```
 456 #### policies.json
 457 ```
 458 {
 459   "policies": {
 460     "AutoLaunchProtocolsFromOrigins": [{
 461       "protocol": "zoommtg",
 462       "allowed_origins": [
 463         "https://somesite.zoom.us"
 464       ]
 465     }]
 466   }
 467 }
 468 ```
 469 ### BackgroundAppUpdate
 470
 471 Enable or disable **automatic** application update **in the background**, when the application is not running.
 472
 473 If set to true, application updates may be installed (without user approval) in the background, even when the application is not running. The operating system might still require approval.
 474
 475 If set to false, the application will not try to install updates when the application is not running.
 476
 477 If you have disabled updates via `DisableAppUpdate` or disabled automatic updates via `AppAutoUpdate`, this policy has no effect.
 478
 479 **Compatibility:** Firefox 90 (Windows only)\
 480 **CCK2 Equivalent:** N/A\
 481 **Preferences Affected:** `app.update.background.enabled`
 482
 483 #### Windows (GPO)
 484 ```
 485 Software\Policies\Mozilla\Firefox\BackgroundAppUpdate = 0x1 | 0x0
 486 ```
 487 #### Windows (Intune)
 488 OMA-URI:
 489 ```
 490 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BackgroundAppUpdate
 491 ```
 492 Value (string):
 493 ```
 494 <enabled/> or <disabled/>
 495 ```
 496 #### macOS
 497 ```
 498 <dict>
 499   <key>BackgroundAppUpdate</key>
 500   <true/> | <false/>
 501 </dict>
 502 ```
 503 #### policies.json
 504 ```
 505 {
 506   "policies": {
 507     "BackgroundAppUpdate": true | false
 508   }
 509 }
 510 ```
 511 ### BlockAboutAddons
 512
 513 Block access to the Add-ons Manager (about:addons).
 514
 515 **Compatibility:** Firefox 60, Firefox ESR 60\
 516 **CCK2 Equivalent:** `disableAddonsManager`\
 517 **Preferences Affected:** N/A
 518
 519 #### Windows (GPO)
 520 ```
 521 Software\Policies\Mozilla\Firefox\BlockAboutAddons = 0x1 | 0x0
 522 ```
 523 #### Windows (Intune)
 524 OMA-URI:
 525 ```
 526 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutAddons
 527 ```
 528 Value (string):
 529 ```
 530 <enabled/> or <disabled/>
 531 ```
 532 #### macOS
 533 ```
 534 <dict>
 535   <key>BlockAboutAddons</key>
 536   <true/> | <false/>
 537 </dict>
 538 ```
 539 #### policies.json
 540 ```
 541 {
 542   "policies": {
 543     "BlockAboutAddons": true | false
 544   }
 545 }
 546 ```
 547 ### BlockAboutConfig
 548
 549 Block access to about:config.
 550
 551 **Compatibility:** Firefox 60, Firefox ESR 60\
 552 **CCK2 Equivalent:** `disableAboutConfig`\
 553 **Preferences Affected:** N/A
 554
 555 #### Windows (GPO)
 556 ```
 557 Software\Policies\Mozilla\Firefox\BlockAboutConfig = 0x1 | 0x0
 558 ```
 559 #### Windows (Intune)
 560 OMA-URI:
 561 ```
 562 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutConfig
 563 ```
 564 Value (string):
 565 ```
 566 <enabled/> or <disabled/>
 567 ```
 568 #### macOS
 569 ```
 570 <dict>
 571   <key>BlockAboutConfig</key>
 572   <true/> | <false/>
 573 </dict>
 574 ```
 575 #### policies.json
 576 ```
 577 {
 578   "policies": {
 579     "BlockAboutConfig": true | false
 580   }
 581 }
 582 ```
 583 ### BlockAboutProfiles
 584
 585 Block access to About Profiles (about:profiles).
 586
 587 **Compatibility:** Firefox 60, Firefox ESR 60\
 588 **CCK2 Equivalent:** `disableAboutProfiles`\
 589 **Preferences Affected:** N/A
 590
 591 #### Windows (GPO)
 592 ```
 593 Software\Policies\Mozilla\Firefox\BlockAboutProfiles = 0x1 | 0x0
 594 ```
 595 #### Windows (Intune)
 596 OMA-URI:
 597 ```
 598 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutProfiles
 599 ```
 600 Value (string):
 601 ```
 602 <enabled/> or <disabled/>
 603 ```
 604 #### macOS
 605 ```
 606 <dict>
 607   <key>BlockAboutProfiles</key>
 608   <true/> | <false/>
 609 </dict>
 610 ```
 611 #### policies.json
 612 ```
 613 {
 614   "policies": {
 615     "BlockAboutProfiles": true | false
 616   }
 617 }
 618 ```
 619 ### BlockAboutSupport
 620
 621 Block access to Troubleshooting Information (about:support).
 622
 623 **Compatibility:** Firefox 60, Firefox ESR 60\
 624 **CCK2 Equivalent:** `disableAboutSupport`\
 625 **Preferences Affected:** N/A
 626
 627 #### Windows (GPO)
 628 ```
 629 Software\Policies\Mozilla\Firefox\BlockAboutSupport = 0x1 | 0x0
 630 ```
 631 #### Windows (Intune)
 632 OMA-URI:
 633 ```
 634 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutSupport
 635 ```
 636 Value (string):
 637 ```
 638 <enabled/> or <disabled/>
 639 ```
 640 #### macOS
 641 ```
 642 <dict>
 643   <key>BlockAboutSupport</key>
 644   <true/> | <false/>
 645 </dict>
 646 ```
 647 #### policies.json
 648 ```
 649 {
 650   "policies": {
 651     "BlockAboutSupport": true | false
 652   }
 653 }
 654 ```
 655 ### Bookmarks
 656
 657 Note: [`ManagedBookmarks`](#managedbookmarks) is the new recommended way to add bookmarks. This policy will continue to be supported.
 658
 659 Add bookmarks in either the bookmarks toolbar or menu. Only `Title` and `URL` are required. If `Placement` is not specified, the bookmark will be placed on the toolbar. If `Folder` is specified, it is automatically created and bookmarks with the same folder name are grouped together.
 660
 661 If you want to clear all bookmarks set with this policy, you can set the value to an empty array (```[]```). This can be on Windows via the new Bookmarks (JSON) policy available with GPO and Intune.
 662
 663 **Compatibility:** Firefox 60, Firefox ESR 60\
 664 **CCK2 Equivalent:** `bookmarks.toolbar`,`bookmarks.menu`\
 665 **Preferences Affected:** N/A
 666
 667 #### Windows (GPO)
 668 ```
 669 Software\Policies\Mozilla\Firefox\Bookmarks\1\Title = "Example"
 670 Software\Policies\Mozilla\Firefox\Bookmarks\1\URL = "https://example.com"
 671 Software\Policies\Mozilla\Firefox\Bookmarks\1\Favicon = "https://example.com/favicon.ico"
 672 Software\Policies\Mozilla\Firefox\Bookmarks\1\Placement = "toolbar" | "menu"
 673 Software\Policies\Mozilla\Firefox\Bookmarks\1\Folder = "FolderName"
 674
 675 Software\Policies\Mozilla\Firefox\Bookmarks (REG_MULTI_SZ) =
 676 ```
 677 []
 678 ```
 679
 680 ```
 681 #### Windows (Intune)
 682 OMA-URI:
 683 ```
 684 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Bookmarks/Bookmark01
 685 ```
 686 Value (string):
 687 ```
 688 <enabled/>
 689 <data id="BookmarkTitle" value="Example"/>
 690 <data id="BookmarkURL" value="https://example.com"/>
 691 <data id="BookmarkFavicon" value="https://example.com/favicon.ico"/>
 692 <data id="BookmarkPlacement" value="toolbar | menu"/>
 693 <data id="BookmarkFolder" value="FolderName"/>
 694 ```
 695 OMA-URI:
 696 ```
 697 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Bookmarks
 698 ```
 699 Value (string):
 700 ```
 701 <enabled/>
 702 <data id="JSON" value='[]'/>
 703 ```
 704 #### macOS
 705 ```
 706 <dict>
 707   <key>Bookmarks</key>
 708   <array>
 709     <dict>
 710       <key>Title</key>
 711       <string>Example</string>
 712       <key>URL</key>
 713       <string>https://example.com</string>
 714       <key>Favicon</key>
 715       <string>https://example.com/favicon.ico</string>
 716       <key>Placement</key>
 717       <string>toolbar | menu</string>
 718       <key>Folder</key>
 719       <string>FolderName</string>
 720     </dict>
 721   </array>
 722 </dict>
 723 ```
 724 #### policies.json
 725 ```
 726 {
 727   "policies": {
 728     "Bookmarks": [
 729       {
 730         "Title": "Example",
 731         "URL": "https://example.com",
 732         "Favicon": "https://example.com/favicon.ico",
 733         "Placement": "toolbar" | "menu",
 734         "Folder": "FolderName"
 735       }
 736     ]
 737   }
 738 }
 739 ```
 740 ### CaptivePortal
 741 Enable or disable the detection of captive portals.
 742
 743 **Compatibility:** Firefox 67, Firefox ESR 60.7\
 744 **CCK2 Equivalent:** N/A\
 745 **Preferences Affected:** `network.captive-portal-service.enabled`
 746
 747 #### Windows (GPO)
 748 ```
 749 Software\Policies\Mozilla\Firefox\CaptivePortal = 0x1 | 0x0
 750 ```
 751 #### Windows (Intune)
 752 OMA-URI:
 753 ```
 754 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/CaptivePortal
 755 ```
 756 Value (string):
 757 ```
 758 <enabled/> or <disabled/>
 759 ```
 760 #### macOS
 761 ```
 762 <dict>
 763   <key>CaptivePortal</key>
 764   <true/> | <false/>
 765 </dict>
 766 ```
 767 #### policies.json
 768 ```
 769 {
 770   "policies": {
 771     "CaptivePortal": true | false
 772   }
 773 }
 774 ```
 775 ### Certificates
 776
 777 ### Certificates | ImportEnterpriseRoots
 778
 779 Trust certificates that have been added to the operating system certificate store by a user or administrator.
 780
 781 Note: This policy only works on Windows and macOS. For Linux discussion, see [bug 1600509](https://bugzilla.mozilla.org/show_bug.cgi?id=1600509).
 782
 783 See https://support.mozilla.org/kb/setting-certificate-authorities-firefox for more detail.
 784
 785 **Compatibility:** Firefox 60, Firefox ESR 60 (macOS support in Firefox 63, Firefox ESR 68)\
 786 **CCK2 Equivalent:** N/A\
 787 **Preferences Affected:** `security.enterprise_roots.enabled`
 788
 789 #### Windows (GPO)
 790 ```
 791 Software\Policies\Mozilla\Firefox\Certificates\ImportEnterpriseRoots = 0x1 | 0x0
 792 ```
 793 #### Windows (Intune)
 794 OMA-URI:
 795 ```
 796 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Certificates/Certificates_ImportEnterpriseRoots
 797 ```
 798 Value (string):
 799 ```
 800 <enabled/> or <disabled/>
 801 ```
 802 #### macOS
 803 ```
 804 <dict>
 805   <key>Certificates</key>
 806   <dict>
 807     <key>ImportEnterpriseRoots</key>
 808     <true/> | <false/>
 809   </dict>
 810 </dict>
 811 ```
 812 #### policies.json
 813 ```
 814 {
 815   "policies": {
 816     "Certificates": {
 817       "ImportEnterpriseRoots": true | false
 818     }
 819   }
 820 }
 821 ```
 822 ### Certificates | Install
 823
 824 Install certificates into the Firefox certificate store. If only a filename is specified, Firefox searches for the file in the following locations:
 825
 826 - Windows
 827   - %USERPROFILE%\AppData\Local\Mozilla\Certificates
 828   - %USERPROFILE%\AppData\Roaming\Mozilla\Certificates
 829 - macOS
 830   - /Library/Application Support/Mozilla/Certificates
 831   - ~/Library/Application Support/Mozilla/Certificates
 832 - Linux
 833   - /usr/lib/mozilla/certificates
 834   - /usr/lib64/mozilla/certificates
 835   - ~/.mozilla/certificates
 836
 837 Starting with Firefox 65, Firefox 60.5 ESR, a fully qualified path can be used, including UNC paths. You should use the native path style for your operating system. We do not support using %USERPROFILE% or other environment variables on Windows.
 838
 839 If you are specifying the path in the policies.json file on Windows, you need to escape your backslashes (`\\`) which means that for UNC paths, you need to escape both (`\\\\`). If you use group policy, you only need one backslash.
 840
 841 Certificates are installed using the trust string `CT,CT,`.
 842
 843 Binary (DER) and ASCII (PEM) certificates are both supported.
 844
 845 **Compatibility:** Firefox 64, Firefox ESR 64\
 846 **CCK2 Equivalent:** `certs.ca`\
 847 **Preferences Affected:** N/A
 848
 849 #### Windows (GPO)
 850 ```
 851 Software\Policies\Mozilla\Firefox\Certificates\Install\1 = "cert1.der"
 852 Software\Policies\Mozilla\Firefox\Certificates\Install\2 = "C:\Users\username\cert2.pem"
 853 ```
 854 #### Windows (Intune)
 855 OMA-URI:
 856 ```
 857 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Certificates/Certificates_Install
 858 ```
 859 Value (string):
 860 ```
 861 <enabled/>
 862 <data id="Certificates_Install" value="1&#xF000;cert1.der&#xF000;2&#xF000;C:\Users\username\cert2.pem"/>
 863 ```
 864 #### macOS
 865 ```
 866 <dict>
 867   <key>Certificates</key>
 868   <dict>
 869     <key>Install</key>
 870     <array>
 871       <string>cert1.der</string>
 872       <string>/Users/username/cert2.pem</string>
 873     </array>
 874   </dict>
 875 </dict>
 876 ```
 877 #### policies.json
 878 ```
 879 {
 880   "policies": {
 881     "Certificates": {
 882       "Install": ["cert1.der", "/home/username/cert2.pem"]
 883     }
 884   }
 885 }
 886 ```
 887 ### Cookies
 888 Configure cookie preferences.
 889
 890 `Allow` is a list of origins (not domains) where cookies are always allowed. You must include http or https.
 891
 892 `AllowSession` is a list of origins (not domains) where cookies are only allowed for the current session. You must include http or https.
 893
 894 `Block` is a list of origins (not domains) where cookies are always blocked. You must include http or https.
 895
 896 `Behavior` sets the default behavior for cookies based on the values below.
 897
 898 `BehaviorPrivateBrowsing` sets the default behavior for cookies in private browsing based on the values below.
 899
 900 | Value | Description
 901 | --- | ---
 902 | accept | Accept all cookies
 903 | reject-foreign | Reject third party cookies
 904 | reject | Reject all cookies
 905 | limit-foreign | Reject third party cookies for sites you haven't visited
 906 | reject-tracker | Reject cookies for known trackers (default)
 907 | reject-tracker-and-partition-foreign | Reject cookies for known trackers and partition third-party cookies (Total Cookie Protection) (default for private browsing)
 908
 909 `Default` (Deprecated) determines whether cookies are accepted at all.
 910
 911 `AcceptThirdParty` (Deprecated) determines how third-party cookies are handled.
 912
 913 `ExpireAtSessionEnd` determines when cookies expire.
 914
 915 `RejectTracker` (Deprecated) only rejects cookies for trackers.
 916
 917 `Locked` prevents the user from changing cookie preferences.
 918
 919 **Compatibility:** Firefox 60, Firefox ESR 60 (RejectTracker added in Firefox 63, AllowSession added in Firefox 79/78.1, Behavior added in Firefox 95/91.4)\
 920 **CCK2 Equivalent:** N/A\
 921 **Preferences Affected:** `network.cookie.cookieBehavior`, `network.cookie.cookieBehavior.pbmode`, `network.cookie.lifetimePolicy`
 922
 923 #### Windows (GPO)
 924 ```
 925 Software\Policies\Mozilla\Firefox\Cookies\Allow\1 = "https://example.com"
 926 Software\Policies\Mozilla\Firefox\Cookies\AllowSession\1 = "https://example.edu"
 927 Software\Policies\Mozilla\Firefox\Cookies\Block\1 = "https://example.org"
 928 Software\Policies\Mozilla\Firefox\Cookies\Default = 0x1 | 0x0
 929 Software\Policies\Mozilla\Firefox\Cookies\AcceptThirdParty = "always" | "never" | "from-visited"
 930 Software\Policies\Mozilla\Firefox\Cookies\ExpireAtSessionEnd = 0x1 | 0x0
 931 Software\Policies\Mozilla\Firefox\Cookies\RejectTracker = 0x1 | 0x0
 932 Software\Policies\Mozilla\Firefox\Cookies\Behavior = "accept" | "reject-foreign" | "reject" | "limit-foreign" | "reject-tracker" | "reject-tracker-and-partition-foreign"
 933 Software\Policies\Mozilla\Firefox\Cookies\BehaviorPrivateBrowsing = "accept" | "reject-foreign" | "reject" | "limit-foreign" | "reject-tracker" | "reject-tracker-and-partition-foreign"
 934 Software\Policies\Mozilla\Firefox\Cookies\Locked = 0x1 | 0x0
 935 ```
 936 #### Windows (Intune)
 937 OMA-URI:
 938 ```
 939 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Allow
 940 ```
 941 Value (string):
 942 ```
 943 <enabled/>
 944 <data id="Cookies_Allow" value="1&#xF000;https://example.com"/>
 945 ```
 946 OMA-URI:
 947 ```
 948 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_AllowSession
 949 ```
 950 Value (string):
 951 ```
 952 <enabled/>
 953 <data id="Cookies_Allow" value="1&#xF000;https://example.edu"/>
 954 ```
 955 OMA-URI:
 956 ```
 957 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Block
 958 ```
 959 Value (string):
 960 ```
 961 <enabled/>
 962 <data id="Cookies_Block" value="1&#xF000;https://example.org"/>
 963 ```
 964 OMA-URI:
 965 ```
 966 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Default
 967 ```
 968 Value (string):
 969 ```
 970 <enabled/> or <disabled/>
 971 ```
 972 OMA-URI:
 973 ```
 974 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_AcceptThirdParty
 975 ```
 976 Value (string):
 977 ```
 978 <enabled/>
 979 <data id="Cookies_AcceptThirdParty" value="always | never | from-visited"/>
 980 ```
 981 OMA-URI:
 982 ```
 983 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_ExpireAtSessionEnd
 984 ```
 985 Value (string):
 986 ```
 987 <enabled/> or <disabled/>
 988 ```
 989 OMA-URI:
 990 ```
 991 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_RejectTracker
 992 ```
 993 Value (string):
 994 ```
 995 <enabled/> or <disabled/>
 996 ```
 997 OMA-URI:
 998 ```
 999 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Locked
1000 ```
1001 Value (string):
1002 ```
1003 <enabled/> or <disabled/>
1004 ```
1005 OMA-URI:
1006 ```
1007 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Behavior
1008 ```
1009 Value (string):
1010 ```
1011 <enabled/>
1012 <data id="Cookies_Behavior" value="accept | reject-foreign | reject | limit-foreign | reject-tracker | reject-tracker-and-partition-foreign"/>
1013 ```
1014 OMA-URI:
1015 ```
1016 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_BehaviorPrivateBrowsing
1017 ```
1018 Value (string):
1019 ```
1020 <enabled/>
1021 <data id="Cookies_BehaviorPrivateBrowsing" value="accept | reject-foreign | reject | limit-foreign | reject-tracker | reject-tracker-and-partition-foreign"/>
1022 ```
1023 #### macOS
1024 ```
1025 <dict>
1026   <key>Cookies</key>
1027   <dict>
1028     <key>Allow</key>
1029     <array>
1030       <string>http://example.com</string>
1031     </array>
1032     <key>AllowSession</key>
1033     <array>
1034       <string>http://example.edu</string>
1035     </array>
1036     <key>Block</key>
1037     <array>
1038       <string>http://example.org</string>
1039     </array>
1040     <key>Default</key>
1041     <true/> | <false/>
1042     <key>AcceptThirdParty</key>
1043     <string>always | never | from-visited</string>
1044     <key>ExpireAtSessionEnd</key>
1045     <true/> | <false/>
1046     <key>RejectTracker</key>
1047     <true/> | <false/>
1048     <key>Locked</key>
1049     <true/> | <false/>
1050     <key>Behavior</key>
1051     <string>accept | reject-foreign | reject | limit-foreign | reject-tracker | reject-tracker-and-partition-foreign</string>
1052     <key>BehaviorPrivateBrowsing</key>
1053     <string>accept | reject-foreign | reject | limit-foreign | reject-tracker | reject-tracker-and-partition-foreign</string>
1054   </dict>
1055 </dict>
1056 ```
1057 #### policies.json
1058 ```
1059 {
1060   "policies": {
1061     "Cookies": {
1062       "Allow": ["http://example.org/"],
1063       "AllowSession": ["http://example.edu/"],
1064       "Block": ["http://example.edu/"],
1065       "Default": true | false,
1066       "AcceptThirdParty": "always" | "never" | "from-visited",
1067       "ExpireAtSessionEnd": true | false,
1068       "RejectTracker": true | false,
1069       "Locked": true | false,
1070       "Behavior": "accept" | "reject-foreign" | "reject" | "limit-foreign" | "reject-tracker" | "reject-tracker-and-partition-foreign",
1071       "BehaviorPrivateBrowsing": "accept" | "reject-foreign" | "reject" | "limit-foreign" | "reject-tracker" | "reject-tracker-and-partition-foreign",
1072     }
1073   }
1074 }
1075 ```
1076 ### DisableSetDesktopBackground
1077 Remove the "Set As Desktop Background..." menuitem when right clicking on an image.
1078
1079 **Compatibility:** Firefox 60, Firefox ESR 60\
1080 **CCK2 Equivalent:** `removeSetDesktopBackground`\
1081 **Preferences Affected:** N/A
1082
1083 #### Windows (GPO)
1084 ```
1085 Software\Policies\Mozilla\Firefox\DisableSetDesktopBackground = 0x1 | 0x0
1086 ```
1087 #### Windows (Intune)
1088 OMA-URI:
1089 ```
1090 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSetDesktopBackground
1091 ```
1092 Value (string):
1093 ```
1094 <enabled/> or <disabled/>
1095 ```
1096 #### macOS
1097 ```
1098 <dict>
1099   <key>DisableSetDesktopBackground</key>
1100   <true/> | <false/>
1101 </dict>
1102 ```
1103 #### policies.json
1104 ```
1105 {
1106   "policies": {
1107     "DisableSetDesktopBackground": true | false
1108   }
1109 }
1110 ```
1111 ### DisableMasterPasswordCreation
1112 Remove the master password functionality.
1113
1114 If this value is true, it works the same as setting [`PrimaryPassword`](#primarypassword) to false and removes the primary password functionality.
1115
1116 If both `DisableMasterPasswordCreation` and `PrimaryPassword` are used, `DisableMasterPasswordCreation` takes precedent.
1117
1118 **Compatibility:** Firefox 60, Firefox ESR 60\
1119 **CCK2 Equivalent:** `noMasterPassword`\
1120 **Preferences Affected:** N/A
1121
1122 #### Windows (GPO)
1123 ```
1124 Software\Policies\Mozilla\Firefox\DisableMasterPasswordCreation = 0x1 | 0x0
1125 ```
1126 #### Windows (Intune)
1127 OMA-URI:
1128 ```
1129 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableMasterPasswordCreation
1130 ```
1131 Value (string):
1132 ```
1133 <enabled/> or <disabled/>
1134 ```
1135 #### macOS
1136 ```
1137 <dict>
1138   <key>DisableMasterPasswordCreation</key>
1139   <true/> | <false/>
1140 </dict>
1141 ```
1142 #### policies.json
1143 ```
1144 {
1145   "policies": {
1146     "DisableMasterPasswordCreation": true | false
1147   }
1148 }
1149 ```
1150 ### DefaultDownloadDirectory
1151 Set the default download directory.
1152
1153 You can use ${home} for the native home directory.
1154
1155 **Compatibility:** Firefox 68, Firefox ESR 68\
1156 **CCK2 Equivalent:** N/A\
1157 **Preferences Affected:** `browser.download.dir`, `browser.download.folderList`
1158
1159 #### Windows (GPO)
1160 ```
1161 Software\Policies\Mozilla\Firefox\DefaultDownloadDirectory = "${home}\Downloads"
1162 ```
1163 #### Windows (Intune)
1164 OMA-URI:
1165 ```
1166 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DefaultDownloadDirectory
1167 ```
1168 Value (string):
1169 ```
1170 <enabled/>
1171 <data id="Preferences_String" value="${home}\Downloads"/>
1172 ```
1173 #### macOS
1174 ```
1175 <dict>
1176   <key>DefaultDownloadDirectory</key>
1177   <string>${home}/Downloads</string>
1178 </dict>
1179 ```
1180 #### policies.json (macOS and Linux)
1181 ```
1182 {
1183   "policies": {
1184     "DefaultDownloadDirectory": "${home}/Downloads"
1185 }
1186 ```
1187 #### policies.json (Windows)
1188 ```
1189 {
1190   "policies": {
1191     "DefaultDownloadDirectory": "${home}\\Downloads"
1192 }
1193 ```
1194 ### DisableAppUpdate
1195 Turn off application updates within Firefox.
1196
1197 **Compatibility:** Firefox 60, Firefox ESR 60\
1198 **CCK2 Equivalent:** `disableFirefoxUpdates`\
1199 **Preferences Affected:** N/A
1200
1201 #### Windows (GPO)
1202 ```
1203 Software\Policies\Mozilla\Firefox\DisableAppUpdate = 0x1 | 0x0
1204 ```
1205 #### Windows (Intune)
1206 OMA-URI:
1207 ```
1208 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableAppUpdate
1209 ```
1210 Value (string):
1211 ```
1212 <enabled/> or <disabled/>
1213 ```
1214 #### macOS
1215 ```
1216 <dict>
1217   <key>DisableAppUpdate</key>
1218   <true/> | <false/>
1219 </dict>
1220 ```
1221 #### policies.json
1222 ```
1223 {
1224   "policies": {
1225     "DisableAppUpdate": true | false
1226   }
1227 }
1228 ```
1229 ### DisableBuiltinPDFViewer
1230 Disable the built in PDF viewer. PDF files are downloaded and sent externally.
1231
1232 **Compatibility:** Firefox 60, Firefox ESR 60\
1233 **CCK2 Equivalent:** `disablePDFjs`\
1234 **Preferences Affected:** `pdfjs.disabled`
1235
1236 #### Windows (GPO)
1237 ```
1238 Software\Policies\Mozilla\Firefox\DisableBuiltinPDFViewer = 0x1 | 0x0
1239 ```
1240 #### Windows (Intune)
1241 OMA-URI:
1242 ```
1243 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableBuiltinPDFViewer
1244 ```
1245 Value (string):
1246 ```
1247 <enabled/> or <disabled/>
1248 ```
1249 #### macOS
1250 ```
1251 <dict>
1252   <key>DisableBuiltinPDFViewer</key>
1253   <true/> | <false/>
1254 </dict>
1255 ```
1256 #### policies.json
1257 ```
1258 {
1259   "policies": {
1260     "DisableBuiltinPDFViewer": true | false
1261   }
1262 }
1263 ```
1264 ### DisabledCiphers
1265 Disable specific cryptographic ciphers.
1266
1267 **Preferences Affected:** `security.ssl3.dhe_rsa_aes_128_sha`, `security.ssl3.dhe_rsa_aes_256_sha`, `security.ssl3.ecdhe_ecdsa_aes_128_gcm_sha256`, `security.ssl3.ecdhe_rsa_aes_128_gcm_sha256`, `security.ssl3.ecdhe_rsa_aes_128_sha`, `security.ssl3.ecdhe_rsa_aes_256_sha`, `security.ssl3.rsa_aes_128_gcm_sha256`, `security.ssl3.rsa_aes_128_sha`, `security.ssl3.rsa_aes_256_gcm_sha384`, `security.ssl3.rsa_aes_256_sha`, `security.ssl3.rsa_des_ede3_sha`
1268
1269 ---
1270 **Note:**
1271
1272 This policy was updated in Firefox 78 to allow enabling ciphers as well. Setting the value to true disables the cipher, setting the value to false enables the cipher. Previously setting the value to true or false disabled the cipher.
1273
1274 ---
1275 **Compatibility:** Firefox 76, Firefox ESR 68.8 (TLS_RSA_WITH_AES_128_GCM_SHA256 and TLS_RSA_WITH_AES_256_GCM_SHA384 were added in Firefox 78)\
1276 **CCK2 Equivalent:** N/A\
1277 **Preferences Affected:** N/A
1278
1279 #### Windows (GPO)
1280 ```
1281 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_DHE_RSA_WITH_AES_128_CBC_SHA = 0x1 | 0x0
1282 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_DHE_RSA_WITH_AES_256_CBC_SHA = 0x1 | 0x0
1283 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA = 0x1 | 0x0
1284 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA = 0x1 | 0x0
1285 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 = 0x1 | 0x0
1286 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 = 0x1 | 0x0
1287 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_RSA_WITH_AES_128_CBC_SHA = 0x1 | 0x0
1288 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_RSA_WITH_AES_256_CBC_SHA = 0x1 | 0x0
1289 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_RSA_WITH_3DES_EDE_CBC_SHA = 0x1 | 0x0
1290 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_RSA_WITH_AES_128_GCM_SHA256 = 0x1 | 0x0
1291 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_RSA_WITH_AES_256_GCM_SHA384 = 0x1 | 0x0
1292 ```
1293 #### Windows (Intune)
1294 OMA-URI:
1295 ```
1296 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_DHE_RSA_WITH_AES_128_CBC_SHA
1297 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_DHE_RSA_WITH_AES_256_CBC_SHA
1298 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
1299 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
1300 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
1301 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
1302 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_RSA_WITH_AES_128_CBC_SHA
1303 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_RSA_WITH_AES_256_CBC_SHA
1304 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_RSA_WITH_3DES_EDE_CBC_SHA
1305 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_RSA_WITH_AES_128_GCM_SHA256
1306 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_RSA_WITH_AES_256_GCM_SHA384
1307 ```
1308 Value (string):
1309 ```
1310 <enabled/> or <disabled/>
1311 ```
1312 #### macOS
1313 ```
1314 <dict>
1315   <key>DisabledCiphers</key>
1316     <dict>
1317       <key>TLS_DHE_RSA_WITH_AES_128_CBC_SHA</key>
1318       <true/> | <false/>
1319       <key>TLS_DHE_RSA_WITH_AES_256_CBC_SHA</key>
1320       <true/> | <false/>
1321       <key>TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA</key>
1322       <true/> | <false/>
1323       <key>TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA</key>
1324       <true/> | <false/>
1325       <key>TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256</key>
1326       <true/> | <false/>
1327       <key>TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256</key>
1328       <true/> | <false/>
1329       <key>TLS_RSA_WITH_AES_128_CBC_SHA</key>
1330       <true/> | <false/>
1331       <key>TLS_RSA_WITH_AES_256_CBC_SHA</key>
1332       <true/> | <false/>
1333       <key>TLS_RSA_WITH_3DES_EDE_CBC_SHA</key>
1334       <true/> | <false/>
1335       <key>TLS_RSA_WITH_AES_128_GCM_SHA256</key>
1336       <true/> | <false/>
1337       <key>TLS_RSA_WITH_AES_256_GCM_SHA384</key>
1338       <true/> | <false/>
1339     </dict>
1340 </dict>
1341 ```
1342 #### policies.json
1343 ```
1344 {
1345   "policies": {
1346     "DisabledCiphers": {
1347       "TLS_DHE_RSA_WITH_AES_128_CBC_SHA": true | false,
1348       "TLS_DHE_RSA_WITH_AES_256_CBC_SHA": true | false,
1349       "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA": true | false,
1350       "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA": true | false,
1351       "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256": true | false,
1352       "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256": true | false,
1353       "TLS_RSA_WITH_AES_128_CBC_SHA": true | false,
1354       "TLS_RSA_WITH_AES_256_CBC_SHA": true | false,
1355       "TLS_RSA_WITH_3DES_EDE_CBC_SHA": true | false,
1356       "TLS_RSA_WITH_AES_128_GCM_SHA256": true | false,
1357       "TLS_RSA_WITH_AES_256_GCM_SHA384": true | false
1358     }
1359   }
1360 }
1361 ```
1362 ### DisableDefaultBrowserAgent
1363 Prevent the default browser agent from taking any actions. Only applicable to Windows; other platforms don’t have the agent.
1364
1365 The browser agent is a Windows-only scheduled task which runs in the background to collect and submit data about the browser that the user has set as their OS default. More information is available [here](https://firefox-source-docs.mozilla.org/toolkit/mozapps/defaultagent/default-browser-agent/index.html).
1366
1367 **Compatibility:** Firefox 75, Firefox ESR 68.7 (Windows only)\
1368 **CCK2 Equivalent:** N/A\
1369 **Preferences Affected:** N/A
1370
1371 #### Windows (GPO)
1372 ```
1373 Software\Policies\Mozilla\Firefox\DisableDefaultBrowserAgent = 0x1 | 0x0
1374 ```
1375 #### Windows (Intune)
1376 OMA-URI:
1377 ```
1378 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableDefaultBrowserAgent
1379 ```
1380 Value (string):
1381 ```
1382 <enabled/> or <disabled/>
1383 ```
1384 #### policies.json
1385 ```
1386 {
1387   "policies": {
1388     "DisableDefaultBrowserAgent": true | false
1389   }
1390 }
1391 ```
1392 ### DisableDeveloperTools
1393 Remove access to all developer tools.
1394
1395 **Compatibility:** Firefox 60, Firefox ESR 60\
1396 **CCK2 Equivalent:** `removeDeveloperTools`\
1397 **Preferences Affected:** `devtools.policy.disabled`
1398
1399 #### Windows (GPO)
1400 ```
1401 Software\Policies\Mozilla\Firefox\DisableDeveloperTools = 0x1 | 0x0`
1402 ```
1403 #### Windows (Intune)
1404 OMA-URI:
1405 ```
1406 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableDeveloperTools
1407 ```
1408 Value (string):
1409 ```
1410 <enabled/> or <disabled/>
1411 ```
1412 #### macOS
1413 ```
1414 <dict>
1415   <key>DisableDeveloperTools</key>
1416   <true/> | <false/>
1417 </dict>
1418 ```
1419 #### policies.json
1420 ```
1421 {
1422   "policies": {
1423     "DisableDeveloperTools": true | false
1424   }
1425 }
1426 ```
1427 ### DisableFeedbackCommands
1428 Disable the menus for reporting sites (Submit Feedback, Report Deceptive Site).
1429
1430 **Compatibility:** Firefox 60, Firefox ESR 60\
1431 **CCK2 Equivalent:** N/A\
1432 **Preferences Affected:** N/A
1433
1434 #### Windows (GPO)
1435 ```
1436 Software\Policies\Mozilla\Firefox\DisableFeedbackCommands = 0x1 | 0x0
1437 ```
1438 #### Windows (Intune)
1439 OMA-URI:
1440 ```
1441 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFeedbackCommands
1442 ```
1443 Value (string):
1444 ```
1445 <enabled/> or <disabled/>
1446 ```
1447 #### macOS
1448 ```
1449 <dict>
1450   <key>DisableFeedbackCommands</key>
1451   <true/> | <false/>
1452 </dict>
1453 ```
1454 #### policies.json
1455 ```
1456 {
1457   "policies": {
1458     "DisableFeedbackCommands": true | false
1459   }
1460 }
1461 ```
1462 ### DisableFirefoxAccounts
1463 Disable Firefox Accounts integration (Sync).
1464
1465 **Compatibility:** Firefox 60, Firefox ESR 60\
1466 **CCK2 Equivalent:** `disableSync`\
1467 **Preferences Affected:** `identity.fxaccounts.enabled`
1468
1469 #### Windows (GPO)
1470 ```
1471 Software\Policies\Mozilla\Firefox\DisableFirefoxAccounts = 0x1 | 0x0
1472 ```
1473 #### Windows (Intune)
1474 OMA-URI:
1475 ```
1476 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxAccounts
1477 ```
1478 Value (string):
1479 ```
1480 <enabled/> or <disabled/>
1481 ```
1482 #### macOS
1483 ```
1484 <dict>
1485   <key>DisableFirefoxAccounts</key>
1486   <true/> | <false/>
1487 </dict>
1488 ```
1489 #### policies.json
1490 ```
1491 {
1492   "policies": {
1493     "DisableFirefoxAccounts": true | false
1494   }
1495 }
1496 ```
1497 ### DisableFirefoxScreenshots
1498 Remove access to Firefox Screenshots.
1499
1500 **Compatibility:** Firefox 60, Firefox ESR 60\
1501 **CCK2 Equivalent:** N/A\
1502 **Preferences Affected:** `extensions.screenshots.disabled`
1503
1504 #### Windows (GPO)
1505 ```
1506 Software\Policies\Mozilla\Firefox\DisableFirefoxScreenshots = 0x1 | 0x0
1507 ```
1508 #### Windows (Intune)
1509 OMA-URI:
1510 ```
1511 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxScreenshots
1512 ```
1513 Value (string):
1514 ```
1515 <enabled/> or <disabled/>
1516 ```
1517 #### macOS
1518 ```
1519 <dict>
1520   <key>DisableFirefoxScreenshots</key>
1521   <true/> | <false/>
1522 </dict>
1523 ```
1524 #### policies.json
1525 ```
1526 {
1527   "policies": {
1528     "DisableFirefoxScreenshots": true | false
1529   }
1530 }
1531 ```
1532 ### DisableFirefoxStudies
1533 Disable Firefox studies (Shield).
1534
1535 **Compatibility:** Firefox 60, Firefox ESR 60\
1536 **CCK2 Equivalent:** N/A\
1537 **Preferences Affected:** N/A
1538
1539 #### Windows (GPO)
1540 ```
1541 Software\Policies\Mozilla\Firefox\DisableFirefoxStudies = 0x1 | 0x0
1542 ```
1543 #### Windows (Intune)
1544 OMA-URI:
1545 ```
1546 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxStudies
1547 ```
1548 Value (string):
1549 ```
1550 <enabled/> or <disabled/>
1551 ```
1552 #### macOS
1553 ```
1554 <dict>
1555   <key>DisableFirefoxStudies</key>
1556   <true/> | <false/>
1557 </dict>
1558 ```
1559 #### policies.json
1560 ```
1561 {
1562   "policies": {
1563     "DisableFirefoxStudies": true | false
1564   }
1565 }
1566 ```
1567 ### DisableForgetButton
1568 Disable the "Forget" button.
1569
1570 **Compatibility:** Firefox 60, Firefox ESR 60\
1571 **CCK2 Equivalent:** `disableForget`\
1572 **Preferences Affected:** N/A
1573
1574 #### Windows (GPO)
1575 ```
1576 Software\Policies\Mozilla\Firefox\DisableForgetButton = 0x1 | 0x0
1577 ```
1578 #### Windows (Intune)
1579 OMA-URI:
1580 ```
1581 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableForgetButton
1582 ```
1583 Value (string):
1584 ```
1585 <enabled/> or <disabled/>
1586 ```
1587 #### macOS
1588 ```
1589 <dict>
1590   <key>DisableForgetButton</key>
1591   <true/> | <false/>
1592 </dict>
1593 ```
1594 #### policies.json
1595 ```
1596 {
1597   "policies": {
1598     "DisableForgetButton": true | false
1599   }
1600 }
1601 ```
1602 ### DisableFormHistory
1603 Turn off saving information on web forms and the search bar.
1604
1605 **Compatibility:** Firefox 60, Firefox ESR 60\
1606 **CCK2 Equivalent:** `disableFormFill`\
1607 **Preferences Affected:** `browser.formfill.enable`
1608
1609 #### Windows (GPO)
1610 ```
1611 Software\Policies\Mozilla\Firefox\DisableFormHistory = 0x1 | 0x0
1612 ```
1613 #### Windows (Intune)
1614 OMA-URI:
1615 ```
1616 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFormHistory
1617 ```
1618 Value (string):
1619 ```
1620 <enabled/> or <disabled/>
1621 ```
1622 #### macOS
1623 ```
1624 <dict>
1625   <key>DisableFormHistory</key>
1626   <true/> | <false/>
1627 </dict>
1628 ```
1629 #### policies.json
1630 ```
1631 {
1632   "policies": {
1633     "DisableFormHistory": true | false
1634   }
1635 }
1636 ```
1637 ### DisablePasswordReveal
1638 Do not allow passwords to be shown in saved logins
1639
1640 **Compatibility:** Firefox 71, Firefox ESR 68.3\
1641 **CCK2 Equivalent:** N/A
1642 **Preferences Affected:** N/A
1643
1644 #### Windows (GPO)
1645 ```
1646 Software\Policies\Mozilla\Firefox\DisablePasswordReveal = 0x1 | 0x0
1647 ```
1648 #### Windows (Intune)
1649 OMA-URI:
1650 ```
1651 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePasswordReveal
1652 ```
1653 Value (string):
1654 ```
1655 <enabled/> or <disabled/>
1656 ```
1657 #### macOS
1658 ```
1659 <dict>
1660   <key>DisablePasswordReveal</key>
1661   <true/> | <false/>
1662 </dict>
1663 ```
1664 #### policies.json
1665 ```
1666 {
1667   "policies": {
1668     "DisablePasswordReveal": true | false
1669   }
1670 }
1671 ```
1672 ### DisablePocket
1673 Remove Pocket in the Firefox UI. It does not remove it from the new tab page.
1674
1675 **Compatibility:** Firefox 60, Firefox ESR 60\
1676 **CCK2 Equivalent:** `disablePocket`\
1677 **Preferences Affected:** `extensions.pocket.enabled`
1678
1679 #### Windows (GPO)
1680 ```
1681 Software\Policies\Mozilla\Firefox\DisablePocket = 0x1 | 0x0
1682 ```
1683 #### Windows (Intune)
1684 OMA-URI:
1685 ```
1686 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePocket
1687 ```
1688 Value (string):
1689 ```
1690 <enabled/> or <disabled/>
1691 ```
1692 #### macOS
1693 ```
1694 <dict>
1695   <key>DisablePocket</key>
1696   <true/> | <false/>
1697 </dict>
1698 ```
1699 #### policies.json
1700 ```
1701 {
1702   "policies": {
1703     "DisablePocket": true | false
1704   }
1705 }
1706 ```
1707 ### DisablePrivateBrowsing
1708 Remove access to private browsing.
1709
1710 **Compatibility:** Firefox 60, Firefox ESR 60\
1711 **CCK2 Equivalent:** `disablePrivateBrowsing`\
1712 **Preferences Affected:** N/A
1713
1714 #### Windows (GPO)
1715 ```
1716 Software\Policies\Mozilla\Firefox\DisablePrivateBrowsing = 0x1 | 0x0
1717 ```
1718 #### Windows (Intune)
1719 OMA-URI:
1720 ```
1721 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePrivateBrowsing
1722 ```
1723 Value (string):
1724 ```
1725 <enabled/> or <disabled/>
1726 ```
1727 #### macOS
1728 ```
1729 <dict>
1730   <key>DisablePrivateBrowsing</key>
1731   <true/> | <false/>
1732 </dict>
1733 ```
1734 #### policies.json
1735 ```
1736 {
1737   "policies": {
1738     "DisablePrivateBrowsing": true | false
1739   }
1740 }
1741 ```
1742 ### DisableProfileImport
1743 Disables the "Import data from another browser" option in the bookmarks window.
1744
1745 **Compatibility:** Firefox 60, Firefox ESR 60\
1746 **CCK2 Equivalent:** N/A\
1747 **Preferences Affected:** N/A
1748
1749 #### Windows (GPO)
1750 ```
1751 Software\Policies\Mozilla\Firefox\DisableProfileImport = 0x1 | 0x0
1752 ```
1753 #### Windows (Intune)
1754 OMA-URI:
1755 ```
1756 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableProfileImport
1757 ```
1758 Value (string):
1759 ```
1760 <enabled/> or <disabled/>
1761 ```
1762 #### macOS
1763 ```
1764 <dict>
1765   <key>DisableProfileImport</key>
1766   <true/> | <false/>
1767 </dict>
1768 ```
1769 #### policies.json
1770 ```
1771 {
1772   "policies": {
1773     "DisableProfileImport": true | false
1774   }
1775 }
1776 ```
1777 ### DisableProfileRefresh
1778 Disable the Refresh Firefox button on about:support and support.mozilla.org, as well as the prompt that displays offering to refresh Firefox when you haven't used it in a while.
1779
1780 **Compatibility:** Firefox 60, Firefox ESR 60\
1781 **CCK2 Equivalent:** `disableResetFirefox`\
1782 **Preferences Affected:** `browser.disableResetPrompt`
1783
1784 #### Windows (GPO)
1785 ```
1786 Software\Policies\Mozilla\Firefox\DisableProfileRefresh = 0x1 | 0x0
1787 ```
1788 #### Windows (Intune)
1789 OMA-URI:
1790 ```
1791 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableProfileRefresh
1792 ```
1793 Value (string):
1794 ```
1795 <enabled/> or <disabled/>
1796 ```
1797 #### macOS
1798 ```
1799 <dict>
1800   <key>DisableProfileRefresh</key>
1801   <true/> | <false/>
1802 </dict>
1803 ```
1804 #### policies.json
1805 ```
1806 {
1807   "policies": {
1808     "DisableProfileRefresh": true | false
1809   }
1810 }
1811 ```
1812 ### DisableSafeMode
1813 Disable safe mode within the browser.
1814
1815 On Windows, this disables safe mode via the command line as well.
1816
1817 **Compatibility:** Firefox 60, Firefox ESR 60 (Windows, macOS)\
1818 **CCK2 Equivalent:** `disableSafeMode`\
1819 **Preferences Affected:** N/A
1820
1821 #### Windows (GPO)
1822 ```
1823 Software\Policies\Mozilla\Firefox\DisableSafeMode = 0x1 | 0x0
1824 ```
1825 #### Windows (Intune)
1826 OMA-URI:
1827 ```
1828 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSafeMode
1829 ```
1830 Value (string):
1831 ```
1832 <enabled/> or <disabled/>
1833 ```
1834 #### macOS
1835 ```
1836 <dict>
1837   <key>DisableSafeMode</key>
1838   <true/> | <false/>
1839 </dict>
1840 ```
1841 #### policies.json
1842 ```
1843 {
1844   "policies": {
1845     "DisableSafeMode": true | false
1846   }
1847 }
1848 ```
1849 ### DisableSecurityBypass
1850 Prevent the user from bypassing security in certain cases.
1851
1852 `InvalidCertificate` prevents adding an exception when an invalid certificate is shown.
1853
1854 `SafeBrowsing` prevents selecting "ignore the risk" and visiting a harmful site anyway.
1855
1856 **Compatibility:** Firefox 60, Firefox ESR 60\
1857 **CCK2 Equivalent:** N/A\
1858 **Preferences Affected:** `security.certerror.hideAddException`, `browser.safebrowsing.allowOverride`
1859
1860 #### Windows (GPO)
1861 ```
1862 Software\Policies\Mozilla\Firefox\DisableSecurityBypass\InvalidCertificate = 0x1 | 0x0
1863 Software\Policies\Mozilla\Firefox\DisableSecurityBypass\SafeBrowsing = 0x1 | 0x0
1864 ```
1865 #### Windows (Intune)
1866 OMA-URI:
1867 ```
1868 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/P_DisableSecurityBypass_InvalidCertificate
1869 ```
1870 Value (string):
1871 ```
1872 <enabled/> or <disabled/>
1873 ```
1874 OMA-URI:
1875 ```
1876 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/P_DisableSecurityBypass_SafeBrowsing
1877 ```
1878 Value (string):
1879 ```
1880 <enabled/> or <disabled/>
1881 ```
1882
1883 #### macOS
1884 ```
1885 <dict>
1886   <key>DisableSecurityBypass</key>
1887   <dict>
1888     <key>InvalidCertificate</key>
1889     <true/> | <false/>
1890     <key>SafeBrowsing</key>
1891     <true/> | <false/>
1892   </dict>
1893 </dict>
1894 ```
1895 #### policies.json
1896 ```
1897 {
1898   "policies": {
1899     "DisableSecurityBypass": {
1900       "InvalidCertificate": true | false,
1901       "SafeBrowsing": true | false
1902     }
1903   }
1904 }
1905 ```
1906 ### DisableSystemAddonUpdate
1907 Prevent system add-ons from being installed or update.
1908
1909 **Compatibility:** Firefox 60, Firefox ESR 60\
1910 **CCK2 Equivalent:** N/A\
1911 **Preferences Affected:** N/A
1912
1913 #### Windows (GPO)
1914 ```
1915 Software\Policies\Mozilla\Firefox\DisableSystemAddonUpdate = 0x1 | 0x0
1916 ```
1917 #### Windows (Intune)
1918 OMA-URI:
1919 ```
1920 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSystemAddonUpdate
1921 ```
1922 Value (string):
1923 ```
1924 <enabled/> or <disabled/>
1925 ```
1926 #### macOS
1927 ```
1928 <dict>
1929   <key>DisableSystemAddonUpdate</key>
1930   <true/> | <false/>
1931 </dict>
1932 ```
1933 #### policies.json
1934 ```
1935 {
1936   "policies": {
1937     "DisableSystemAddonUpdate": true | false
1938   }
1939 }
1940 ```
1941 ### DisableTelemetry
1942 Prevent the upload of telemetry data.
1943
1944 As of Firefox 83 and Firefox ESR 78.5, local storage of telemetry data is disabled as well.
1945
1946 Mozilla recommends that you do not disable telemetry. Information collected through telemetry helps us build a better product for businesses like yours.
1947
1948 **Compatibility:** Firefox 60, Firefox ESR 60\
1949 **CCK2 Equivalent:** `disableTelemetry`\
1950 **Preferences Affected:** `datareporting.healthreport.uploadEnabled`, `datareporting.policy.dataSubmissionEnabled`, `toolkit.telemetry.archive.enabled`
1951
1952 #### Windows (GPO)
1953 ```
1954 Software\Policies\Mozilla\Firefox\DisableTelemetry = 0x1 | 0x0
1955 ```
1956 #### Windows (Intune)
1957 OMA-URI:
1958 ```
1959 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableTelemetry
1960 ```
1961 Value (string):
1962 ```
1963 <enabled/> or <disabled/>
1964 ```
1965 #### macOS
1966 ```
1967 <dict>
1968   <key>DisableTelemetry</key>
1969   <true/> | <false/>
1970 </dict>
1971 ```
1972 #### policies.json
1973 ```
1974 {
1975   "policies": {
1976     "DisableTelemetry": true | false
1977   }
1978 }
1979 ```
1980 ### DisplayBookmarksToolbar
1981 Set the initial state of the bookmarks toolbar. A user can still hide it and it will stay hidden.
1982
1983 **Compatibility:** Firefox 60, Firefox ESR 60\
1984 **CCK2 Equivalent:** `displayBookmarksToolbar`\
1985 **Preferences Affected:** N/A
1986
1987 #### Windows (GPO)
1988 ```
1989 Software\Policies\Mozilla\Firefox\DisplayBookmarksToolbar = 0x1 | 0x0
1990 ```
1991 #### Windows (Intune)
1992 OMA-URI:
1993 ```
1994 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisplayBookmarksToolbar
1995 ```
1996 Value (string):
1997 ```
1998 <enabled/> or <disabled/>
1999 ```
2000 #### macOS
2001 ```
2002 <dict>
2003   <key>DisplayBookmarksToolbar</key>
2004   <true/> | <false/>
2005 </dict>
2006 ```
2007 #### policies.json
2008 ```
2009 {
2010   "policies": {
2011     "DisplayBookmarksToolbar": true | false
2012   }
2013 }
2014 ```
2015 ### DisplayMenuBar
2016 Set the state of the menubar.
2017
2018 `always` means the menubar is shown and cannot be hidden.
2019
2020 `never` means the menubar is hidden and cannot be shown.
2021
2022 `default-on` means the menubar is on by default but can be hidden.
2023
2024 `default-off` means the menubar is off by default but can be shown.
2025
2026 **Compatibility:** Firefox 73, Firefox ESR 68.5 (Windows, some Linux)\
2027 **CCK2 Equivalent:** `displayMenuBar`\
2028 **Preferences Affected:** N/A
2029
2030 #### Windows (GPO)
2031 ```
2032 Software\Policies\Mozilla\Firefox\DisplayMenuBar = "always", "never", "default-on", "default-off"
2033 ```
2034 #### Windows (Intune)
2035 OMA-URI:
2036 ```
2037 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisplayMenuBar_Enum
2038 ```
2039 Value (string):
2040 ```
2041 <enabled/>
2042 <data id="DisplayMenuBar" value="always | never | default-on | default-off"/>
2043 ```
2044 #### macOS
2045 ```
2046 <dict>
2047   <key>DisplayMenuBar</key>
2048   <string>always | never | default-on | default-off</string>
2049 </dict>
2050 ```
2051 #### policies.json
2052 ```
2053 {
2054   "policies": {
2055     "DisplayMenuBar": "always", "never", "default-on", "default-off"
2056   }
2057 }
2058 ```
2059 ### DisplayMenuBar (Deprecated)
2060 Set the initial state of the menubar. A user can still hide it and it will stay hidden.
2061
2062 **Compatibility:** Firefox 60, Firefox ESR 60 (Windows, some Linux)\
2063 **CCK2 Equivalent:** `displayMenuBar`\
2064 **Preferences Affected:** N/A
2065
2066 #### Windows (GPO)
2067 ```
2068 Software\Policies\Mozilla\Firefox\DisplayMenuBar = 0x1 | 0x0
2069 ```
2070 #### macOS
2071 ```
2072 <dict>
2073   <key>DisplayMenuBar</key>
2074   <true/> | <false/>
2075 </dict>
2076 ```
2077 #### policies.json
2078 ```
2079 {
2080   "policies": {
2081     "DisplayMenuBar": true | false
2082   }
2083 }
2084 ```
2085 ### DNSOverHTTPS
2086 Configure DNS over HTTPS.
2087
2088 `Enabled` determines whether DNS over HTTPS is enabled
2089
2090 `ProviderURL` is a URL to another provider.
2091
2092 `Locked` prevents the user from changing DNS over HTTPS preferences.
2093
2094 `ExcludedDomains` excludes domains from DNS over HTTPS.
2095
2096 **Compatibility:** Firefox 63, Firefox ESR 68 (ExcludedDomains added in 75/68.7)\
2097 **CCK2 Equivalent:** N/A\
2098 **Preferences Affected:** `network.trr.mode`, `network.trr.uri`
2099
2100 #### Windows (GPO)
2101 ```
2102 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\Enabled = 0x1 | 0x0
2103 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\ProviderURL = "URL_TO_ALTERNATE_PROVIDER"
2104 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\Locked = 0x1 | 0x0
2105 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\ExcludedDomains\1 = "example.com"
2106 ```
2107 #### Windows (Intune)
2108 OMA-URI:
2109 ```
2110 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_Enabled
2111 ```
2112 Value (string):
2113 ```
2114 <enabled/> or <disabled/>
2115 ```
2116 OMA-URI:
2117 ```
2118 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_ProviderURL
2119 ```
2120 Value (string):
2121 ```
2122 <enabled/>
2123 <data id="String" value="URL_TO_ALTERNATE_PROVIDER"/>
2124 ```
2125 OMA-URI:
2126 ```
2127 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_Locked
2128 ```
2129 Value (string):
2130 ```
2131 <enabled/> or <disabled/>
2132 ```
2133 OMA-URI:
2134 ```
2135 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_ExcludedDomains
2136 ```
2137 Value (string):
2138 ```
2139 <enabled/>
2140 <data id="List" value="1&#xF000;example.com"/>
2141 ```
2142 #### macOS
2143 ```
2144 <dict>
2145   <key>DNSOverHTTPS</key>
2146   <dict>
2147     <key>Enabled</key>
2148     <true/> | <false/>
2149     <key>ProviderURL</key>
2150     <string>URL_TO_ALTERNATE_PROVIDER</string>
2151     <key>Locked</key>
2152     <true/> | <false/>
2153     <key>ExcludedDomains</key>
2154     <array>
2155       <string>example.com</string>
2156     </array>
2157   </dict>
2158 </dict>
2159 ```
2160 #### policies.json
2161 ```
2162 {
2163   "policies": {
2164     "DNSOverHTTPS": {
2165       "Enabled":  true | false,
2166       "ProviderURL": "URL_TO_ALTERNATE_PROVIDER",
2167       "Locked": true | false,
2168       "ExcludedDomains": ["example.com"]
2169     }
2170   }
2171 }
2172 ```
2173 ### DontCheckDefaultBrowser
2174 Don't check if Firefox is the default browser at startup.
2175
2176 **Compatibility:** Firefox 60, Firefox ESR 60\
2177 **CCK2 Equivalent:** `dontCheckDefaultBrowser`\
2178 **Preferences Affected:** `browser.shell.checkDefaultBrowser`
2179
2180 #### Windows (GPO)
2181 ```
2182 Software\Policies\Mozilla\Firefox\DontCheckDefaultBrowser = 0x1 | 0x0
2183 ```
2184 #### Windows (Intune)
2185 OMA-URI:
2186 ```
2187 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DontCheckDefaultBrowser
2188 ```
2189 Value (string):
2190 ```
2191 <enabled/> or <disabled/>
2192 ```
2193 #### macOS
2194 ```
2195 <dict>
2196   <key>DontCheckDefaultBrowser</key>
2197   <true/> | <false/>
2198 </dict>
2199 ```
2200 #### policies.json
2201 ```
2202 {
2203   "policies": {
2204     "DontCheckDefaultBrowser": true | false
2205   }
2206 }
2207 ```
2208 ### DownloadDirectory
2209 Set and lock the download directory.
2210
2211 You can use ${home} for the native home directory.
2212
2213 **Compatibility:** Firefox 68, Firefox ESR 68\
2214 **CCK2 Equivalent:** N/A\
2215 **Preferences Affected:** `browser.download.dir`, `browser.download.folderList`, `browser.download.useDownloadDir`
2216
2217 #### Windows (GPO)
2218 ```
2219 Software\Policies\Mozilla\Firefox\DownloadDirectory = "${home}\Downloads"
2220 ```
2221 #### Windows (Intune)
2222 OMA-URI:
2223 ```
2224 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DownloadDirectory
2225 ```
2226 Value (string):
2227 ```
2228 <enabled/>
2229 <data id="Preferences_String" value="${home}\Downloads"/>
2230 ```
2231 #### macOS
2232 ```
2233 <dict>
2234   <key>DownloadDirectory</key>
2235   <string>${home}/Downloads</string>
2236 </dict>
2237 ```
2238 #### policies.json (macOS and Linux)
2239 ```
2240 {
2241   "policies": {
2242     "DownloadDirectory": "${home}/Downloads"
2243 }
2244 ```
2245 #### policies.json (Windows)
2246 ```
2247 {
2248   "policies": {
2249     "DownloadDirectory": "${home}\\Downloads"
2250 }
2251 ```
2252 ### EnableTrackingProtection
2253 Configure tracking protection.
2254
2255 If this policy is not configured, tracking protection is not enabled by default in the browser, but it is enabled by default in private browsing and the user can change it.
2256
2257 If `Value` is set to false, tracking protection is disabled and locked in both the regular browser and private browsing.
2258
2259 If `Value` is set to true, tracking protection is enabled by default in both the regular browser and private browsing and the `Locked` value determines whether or not a user can change it.
2260
2261 If `Cryptomining` is set to true, cryptomining scripts on websites are blocked.
2262
2263 If `Fingerprinting` is set to true, fingerprinting scripts on websites are blocked.
2264
2265 `Exceptions` are origins for which tracking protection is not enabled.
2266
2267 **Compatibility:** Firefox 60, Firefox ESR 60 (Cryptomining and Fingerprinting added in 70/68.2, Exceptions added in 73/68.5)\
2268 **CCK2 Equivalent:** N/A\
2269 **Preferences Affected:** `privacy.trackingprotection.enabled`, `privacy.trackingprotection.pbmode.enabled`, `privacy.trackingprotection.cryptomining.enabled`, `privacy.trackingprotection.fingerprinting.enabled`
2270
2271 #### Windows (GPO)
2272 ```
2273 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Value = 0x1 | 0x0
2274 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Locked = 0x1 | 0x0
2275 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Cryptomining = 0x1 | 0x0
2276 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Fingerprinting = 0x1 | 0x0
2277 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Exceptions\1 = "https://example.com"
2278 ```
2279 #### Windows (Intune)
2280 OMA-URI:
2281 ```
2282 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/A_TrackingProtection_Value
2283 ```
2284 Value (string):
2285 ```
2286 <enabled/> or <disabled/>
2287 ```
2288 OMA-URI:
2289 ```
2290 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/B_TrackingProtection_Cryptomining
2291 ```
2292 Value (string):
2293 ```
2294 <enabled/> or <disabled/>
2295 ```
2296 OMA-URI:
2297 ```
2298 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/C_TrackingProtection_Fingerprinting
2299 ```
2300 Value (string):
2301 ```
2302 <enabled/> or <disabled/>
2303 ```
2304 OMA-URI:
2305 ```
2306 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/D_TrackingProtection_Exceptions
2307 ```
2308 Value (string):
2309 ```
2310 <data id="TrackingProtection_Exceptions" value="1&#xF000;https://example.com"/>
2311 ```
2312 OMA-URI:
2313 ```
2314 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/E_TrackingProtection_Locked
2315 ```
2316 Value (string):
2317 ```
2318 <enabled/> or <disabled/>
2319 ```
2320 #### macOS
2321 ```
2322 <dict>
2323   <key>EnableTrackingProtection</key>
2324   <dict>
2325     <key>Value</key>
2326     <true/> | <false/>
2327     <key>Locked</key>
2328     <true/> | <false/>
2329     <key>Cryptomining</key>
2330     <true/> | <false/>
2331     <key>Fingerprinting</key>
2332     <true/> | <false/>
2333     <key>Exceptions</key>
2334     <array>
2335       <string>https://example.com</string>
2336     </array>
2337   </dict>
2338 </dict>
2339 ```
2340 #### policies.json
2341 ```
2342 {
2343   "policies": {
2344     "EnableTrackingProtection": {
2345       "Value": true | false,
2346       "Locked": true | false,
2347       "Cryptomining": true | false,
2348       "Fingerprinting": true | false,
2349       "Exceptions": ["https://example.com"]
2350     }
2351   }
2352 }
2353 ```
2354 ### EncryptedMediaExtensions
2355 Enable or disable Encrypted Media Extensions and optionally lock it.
2356
2357 If `Enabled` is set to false, encrypted media extensions (like Widevine) are not downloaded by Firefox unless the user consents to installing them.
2358
2359 If `Locked` is set to true and `Enabled` is set to false, Firefox will not download encrypted media extensions (like Widevine) or ask the user to install them.
2360
2361 **Compatibility:** Firefox 77, Firefox ESR 68.9\
2362 **CCK2 Equivalent:** N/A\
2363 **Preferences Affected:** `media.eme.enabled`
2364
2365 #### Windows (GPO)
2366 ```
2367 Software\Policies\Mozilla\Firefox\EncryptedMediaExtensions\Enabled = 0x1 | 0x0
2368 Software\Policies\Mozilla\Firefox\EncryptedMediaExtensions\Locked = 0x1 | 0x0
2369 ```
2370 #### Windows (Intune)
2371 OMA-URI:
2372 ```
2373 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~EncryptedMediaExtensions/EncryptedMediaExtensions_Enabled
2374 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~EncryptedMediaExtensions/EncryptedMediaExtensions_Locked
2375 ```
2376 Value (string):
2377 ```
2378 <enabled/>or <disabled/>
2379 ```
2380 #### macOS
2381 ```
2382 <dict>
2383   <key>EncryptedMediaExtensions</key>
2384   <dict>
2385     <key>Enabled</key>
2386     <true/> | <false/>
2387     <key>Locked</key>
2388     <true/> | <false/>
2389   </dict>
2390 </dict>
2391 ```
2392 #### policies.json
2393 ```
2394 {
2395   "policies": {
2396     "EncryptedMediaExtensions": {
2397       "Enabled": true | false,
2398       "Locked": true | false
2399     }
2400   }
2401 }
2402 ```
2403 ### EnterprisePoliciesEnabled
2404 Enable policy support on macOS.
2405
2406 **Compatibility:** Firefox 63, Firefox ESR 60.3 (macOS only)\
2407 **CCK2 Equivalent:** N/A\
2408 **Preferences Affected:** N/A
2409
2410 #### macOS
2411 ```
2412 <dict>
2413   <key>EnterprisePoliciesEnabled</key>
2414   <true/>
2415 </dict>
2416 ```
2417 ### Extensions
2418 Control the installation, uninstallation and locking of extensions.
2419
2420 While this policy is not technically deprecated, it is recommended that you use the **[`ExtensionSettings`](#extensionsettings)** policy. It has the same functionality and adds more. It does not support native paths, though, so you'll have to use file:/// URLs.
2421
2422 `Install` is a list of URLs or native paths for extensions to be installed.
2423
2424 `Uninstall` is a list of extension IDs that should be uninstalled if found.
2425
2426 `Locked` is a list of extension IDs that the user cannot disable or uninstall.
2427
2428 **Compatibility:** Firefox 60, Firefox ESR 60\
2429 **CCK2 Equivalent:** `addons`\
2430 **Preferences Affected:** N/A
2431
2432 #### Windows (GPO)
2433 ```
2434 Software\Policies\Mozilla\Firefox\Extensions\Install\1 = "https://addons.mozilla.org/firefox/downloads/somefile.xpi"
2435 Software\Policies\Mozilla\Firefox\Extensions\Install\2 = "//path/to/xpi"
2436 Software\Policies\Mozilla\Firefox\Extensions\Uninstall\1 = "bad_addon_id@mozilla.org"
2437 Software\Policies\Mozilla\Firefox\Extensions\Locked\1 = "addon_id@mozilla.org"
2438 ```
2439 #### Windows (Intune)
2440 OMA-URI:
2441 ```
2442 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/Extensions_Install
2443 ```
2444 Value (string):
2445 ```
2446 <enabled/>
2447 <data id="Extensions" value="1&#xF000;https://addons.mozilla.org/firefox/downloads/somefile.xpi&#xF000;2&#xF000;//path/to/xpi"/>
2448 ```
2449 OMA-URI:
2450 ```
2451 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/Extensions_Uninstall
2452 ```
2453 Value (string):
2454 ```
2455 <enabled/>
2456 <data id="Extensions" value="1&#xF000;bad_addon_id@mozilla.org"/>
2457 ```
2458 OMA-URI:
2459 ```
2460 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/Extensions_Locked
2461 ```
2462 Value (string):
2463 ```
2464 <enabled/>
2465 <data id="Extensions" value="1&#xF000;addon_id@mozilla.org"/>
2466 ```
2467 #### macOS
2468 ```
2469 <dict>
2470   <key>Extensions</key>
2471   <dict>
2472     <key>Install</key>
2473     <array>
2474       <string>https://addons.mozilla.org/firefox/downloads/somefile.xpi</string>
2475       <string>//path/to/xpi</string>
2476     </array>
2477     <key>Uninstall</key>
2478     <array>
2479       <string>bad_addon_id@mozilla.org</string>
2480     </array>
2481     <key>Locked</key>
2482     <array>
2483       <string>addon_id@mozilla.org</string>
2484     </array>
2485   </dict>
2486 </dict>
2487 ```
2488 #### policies.json
2489 ```
2490 {
2491   "policies": {
2492     "Extensions": {
2493       "Install": ["https://addons.mozilla.org/firefox/downloads/somefile.xpi", "//path/to/xpi"],
2494       "Uninstall": ["bad_addon_id@mozilla.org"],
2495       "Locked":  ["addon_id@mozilla.org"]
2496     }
2497   }
2498 }
2499 ```
2500 ### ExtensionSettings
2501 Manage all aspects of extensions. This policy is based heavily on the [Chrome policy](https://dev.chromium.org/administrators/policy-list-3/extension-settings-full) of the same name.
2502
2503 This policy maps an extension ID to its configuration. With an extension ID, the configuration will be applied to the specified extension only. A default configuration can be set for the special ID "*", which will apply to all extensions that don't have a custom configuration set in this policy.
2504
2505 To obtain an extension ID, install the extension and go to about:support. You will see the ID in the Extensions section. I've also created an extension that makes it easy to find the ID of extensions on AMO. You can download it [here](https://github.com/mkaply/queryamoid/releases/tag/v0.1).
2506
2507 The configuration for each extension is another dictionary that can contain the fields documented below.
2508
2509 | Name | Description |
2510 | --- | --- |
2511 | `installation_mode` | Maps to a string indicating the installation mode for the extension. The valid strings are `allowed`,`blocked`,`force_installed`, and `normal_installed`.
2512 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`allowed` | Allows the extension to be installed by the user. This is the default behavior. There is no need for an install_url; it will automatically be allowed based on the ID.
2513 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`blocked`| Blocks installation of the extension and removes it from the device if already installed.
2514 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`force_installed`| The extension is automatically installed and can't be removed by the user. This option is not valid for the default configuration and requires an install_url.
2515 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`normal_installed`| The extension is automatically installed but can be disabled by the user. This option is not valid for the default configuration and requires an install_url.
2516 | `install_url`| Maps to a URL indicating where Firefox can download a force_installed or normal_installed extension.  If installing from the local file system, use a [```file:///``` URL](https://en.wikipedia.org/wiki/File_URI_scheme). If installing from the addons.mozilla.org, use the following URL (substituting SHORT_NAME from the URL on AMO), https://addons.mozilla.org/firefox/downloads/latest/SHORT_NAME/latest.xpi. Languages packs are available from https://releases.mozilla.org/pub/firefox/releases/VERSION/PLATFORM/xpi/LANGUAGE.xpi. If you need to update the extension, you can change the name of the extension and it will be automatically updated. Extensions installed from file URLs will additional be updated when their internal version changes.
2517 | `install_sources` | A list of sources from which installing extensions is allowed. **This is unnecessary if you are only allowing the installation of certain extensions by ID.** Each item in this list is an extension-style match pattern. Users will be able to easily install items from any URL that matches an item in this list. Both the location of the *.xpi file and the page where the download is started from (i.e.  the referrer) must be allowed by these patterns. This setting can be used only for the default configuration.
2518 | `allowed_types` | This setting whitelists the allowed types of extension/apps that can be installed in Firefox. The value is a list of strings, each of which should be one of the following: "extension", "theme", "dictionary", "locale" This setting can be used only for the default configuration.
2519 | `blocked_install_message` | This maps to a string specifying the error message to display to users if they're blocked from installing an extension. This setting allows you to append text to the generic error message displayed when the extension is blocked. This could be be used to direct users to your help desk, explain why a particular extension is blocked, or something else. This setting can be used only for the default configuration.
2520 | `restricted_domains` | An array of domains on which content scripts can't be run. This setting can be used only for the default configuration.
2521 | `updates_disabled` | (Firefox 89, Firefox ESR 78.11) Boolean that indicates whether or not to disable automatic updates for an individual extension.
2522
2523 **Compatibility:** Firefox 69, Firefox ESR 68.1 (As of Firefox 85, Firefox ESR 78.7, installing a theme makes it the default.)\
2524 **CCK2 Equivalent:** N/A\
2525 **Preferences Affected:** N/A
2526
2527 #### Windows (GPO)
2528 Software\Policies\Mozilla\Firefox\ExtensionSettings (REG_MULTI_SZ) =
2529 ```
2530 {
2531   "*": {
2532     "blocked_install_message": "Custom error message.",
2533     "install_sources": ["about:addons","https://addons.mozilla.org/"],
2534     "installation_mode": "blocked",
2535     "allowed_types": ["extension"]
2536   },
2537   "uBlock0@raymondhill.net": {
2538     "installation_mode": "force_installed",
2539     "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
2540   },
2541   "https-everywhere@eff.org": {
2542     "installation_mode": "allowed"
2543   }
2544 }
2545 ```
2546 #### Windows (Intune)
2547 OMA-URI:
2548 ```
2549 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/ExtensionSettings
2550 ```
2551 Value (string):
2552 ```
2553 <enabled/>
2554 <data id="ExtensionSettings" value='
2555 {
2556   "*": {
2557     "blocked_install_message": "Custom error message.",
2558     "install_sources": ["about:addons","https://addons.mozilla.org/"],
2559     "installation_mode": "blocked",
2560     "allowed_types": ["extension"]
2561   },
2562   "uBlock0@raymondhill.net": {
2563     "installation_mode": "force_installed",
2564     "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
2565   },
2566     "https-everywhere@eff.org": {
2567     "installation_mode": "allowed"
2568   }
2569 }'/>
2570 ```
2571 #### macOS
2572 ```
2573 <dict>
2574   <key>ExtensionSettings</key>
2575   <dict>
2576     <key>*</key>
2577     <dict>
2578       <key>blocked_install_message</key>
2579       <string>Custom error message.</string>
2580       <key>install_sources</key>
2581       <array>
2582         <string>about:addons</string>
2583         <string>https://addons.mozilla.org/</string>
2584       </array>
2585       <key>installation_mode</key>
2586       <string>blocked</string>
2587       <key>allowed_types</key>
2588       <array>
2589         <string>extension</string>
2590       </array>
2591     </dict>
2592     <key>uBlock0@raymondhill.net</key>
2593     <dict>
2594       <key>installation_mode</key>
2595        <string>force_installed</string>
2596       <key>install_url</key>
2597       <string>https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi</string>
2598     </dict>
2599     <key>https-everywhere@eff.org</key>
2600     <dict>
2601       <key>installation_mode</key>
2602        <string>allowed</string>
2603     </dict>
2604   </dict>
2605 </dict>
2606 ```
2607 #### policies.json
2608 ```
2609 {
2610   "policies": {
2611     "ExtensionSettings": {
2612       "*": {
2613         "blocked_install_message": "Custom error message.",
2614         "install_sources": ["about:addons","https://addons.mozilla.org/"],
2615         "installation_mode": "blocked",
2616         "allowed_types": ["extension"]
2617       },
2618       "uBlock0@raymondhill.net": {
2619         "installation_mode": "force_installed",
2620         "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
2621       },
2622       "https-everywhere@eff.org": {
2623         "installation_mode": "allowed"
2624       }
2625     }
2626   }
2627 }
2628 ```
2629 ### ExtensionUpdate
2630 Control extension updates.
2631
2632 **Compatibility:** Firefox 67, Firefox ESR 60.7\
2633 **CCK2 Equivalent:** N/A\
2634 **Preferences Affected:** `extensions.update.enabled`
2635
2636 #### Windows (GPO)
2637 ```
2638 Software\Policies\Mozilla\Firefox\ExtensionUpdate = 0x1 | 0x0
2639 ```
2640 #### Windows (Intune)
2641 OMA-URI:
2642 ```
2643 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/ExtensionUpdate
2644 ```
2645 Value (string):
2646 ```
2647 <enabled/> or <disabled/>
2648 ```
2649 #### macOS
2650 ```
2651 <dict>
2652   <key>ExtensionUpdate</key>
2653   <true/> | <false/>
2654 </dict>
2655 ```
2656 #### policies.json
2657 ```
2658 {
2659   "policies": {
2660     "ExtensionUpdate": true | false
2661   }
2662 }
2663 ```
2664 ### FirefoxHome
2665 Customize the Firefox Home page.
2666
2667 **Compatibility:** Firefox 68, Firefox ESR 68 (SponsoredTopSites and SponsoredPocket were added in Firefox 95, Firefox ESR 91.4)
2668 **CCK2 Equivalent:** N/A\
2669 **Preferences Affected:** `browser.newtabpage.activity-stream.showSearch`, `browser.newtabpage.activity-stream.feeds.topsites`, `browser.newtabpage.activity-stream.feeds.section.highlights`, `browser.newtabpage.activity-stream.feeds.section.topstories`, `browser.newtabpage.activity-stream.feeds.snippets`, `browser.newtabpage.activity-stream.showSponsoredTopSites`, `browser.newtabpage.activity-stream.showSponsored`
2670
2671 #### Windows (GPO)
2672 ```
2673 Software\Policies\Mozilla\Firefox\FirefoxHome\Search = 0x1 | 0x0
2674 Software\Policies\Mozilla\Firefox\FirefoxHome\TopSites = 0x1 | 0x0
2675 Software\Policies\Mozilla\Firefox\FirefoxHome\SponsoredTopSites = 0x1 | 0x0
2676 Software\Policies\Mozilla\Firefox\FirefoxHome\Highlights = 0x1 | 0x0
2677 Software\Policies\Mozilla\Firefox\FirefoxHome\Pocket = 0x1 | 0x0
2678 Software\Policies\Mozilla\Firefox\FirefoxHome\SponsoredPocket = 0x1 | 0x0
2679 Software\Policies\Mozilla\Firefox\FirefoxHome\Snippets = 0x1 | 0x0
2680 Software\Policies\Mozilla\Firefox\FirefoxHome\Locked = 0x1 | 0x0
2681 ```
2682 #### Windows (Intune)
2683 OMA-URI:
2684 ```
2685 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/CustomizeFirefoxHome
2686 ```
2687 Value (string):
2688 ```
2689 <enabled/>
2690 <data id="FirefoxHome_Search"  value="true | false"/>
2691 <data id="FirefoxHome_TopSites"  value="true | false"/>
2692 <data id="FirefoxHome_SponsoredTopSites"  value="true | false"/>
2693 <data id="FirefoxHome_Highlights"  value="true | false"/>
2694 <data id="FirefoxHome_Pocket"  value="true | false"/>
2695 <data id="FirefoxHome_SponsoredPocket"  value="true | false"/>
2696 <data id="FirefoxHome_Snippets"  value="true | false"/>
2697 <data id="FirefoxHome_Locked"  value="true | false"/>
2698 ```
2699 #### macOS
2700 ```
2701 <dict>
2702   <key>FirefoxHome</key>
2703   <dict>
2704     <key>Search</key>
2705     <true/> | <false/>
2706     <key>TopSites</key>
2707     <true/> | <false/>
2708     <key>SponsoredTopSites</key>
2709     <true/> | <false/>
2710     <key>Highlights</key>
2711     <true/> | <false/>
2712     <key>Pocket</key>
2713     <true/> | <false/>
2714     <key>SponsoredPocket</key>
2715     <true/> | <false/>
2716     <key>Snippets</key>
2717     <true/> | <false/>
2718     <key>Locked</key>
2719     <true/> | <false/>
2720   </dict>
2721 </dict>
2722 ```
2723 #### policies.json
2724 ```
2725 {
2726   "policies": {
2727     "FirefoxHome": {
2728       "Search": true | false,
2729       "TopSites": true | false,
2730       "SponsoredTopSites": true | false,
2731       "Highlights": true | false,
2732       "Pocket": true | false,
2733       "SponsoredPocket": true | false,
2734       "Snippets": true | false,
2735       "Locked": true | false
2736     }
2737   }
2738 }
2739 ```
2740 ### FlashPlugin (Deprecated)
2741 Configure the default Flash plugin policy as well as origins for which Flash is allowed.
2742
2743 `Allow` is a list of origins where Flash are allowed.
2744
2745 `Block` is a list of origins where Flash is not allowed.
2746
2747 `Default` determines whether or not Flash is allowed by default.
2748
2749 `Locked` prevents the user from changing Flash preferences.
2750
2751 **Compatibility:** Firefox 60, Firefox ESR 60\
2752 **CCK2 Equivalent:** `permissions.plugin`\
2753 **Preferences Affected:** `plugin.state.flash`
2754
2755 #### Windows (GPO)
2756 ```
2757 Software\Policies\Mozilla\Firefox\FlashPlugin\Allow\1 = "https://example.org"
2758 Software\Policies\Mozilla\Firefox\FlashPlugin\Block\1 = "https://example.edu"
2759 Software\Policies\Mozilla\Firefox\FlashPlugin\Default = 0x1 | 0x0
2760 Software\Policies\Mozilla\Firefox\FlashPlugin\Locked = 0x1 | 0x0
2761 ```
2762 #### Windows (Intune)
2763 OMA-URI:
2764 ```
2765 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Flash/FlashPlugin_Allow
2766 ```
2767 Value (string):
2768 ```
2769 <enabled/>
2770 <data id="Permissions" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
2771 ```
2772 OMA-URI:
2773 ```
2774 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Flash/FlashPlugin_Locked
2775 ```
2776 Value (string):
2777 ```
2778 <enabled/> or <disabled/>
2779 ```
2780 OMA-URI:
2781 ```
2782 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Flash/FlashPlugin_Default
2783 ```
2784 Value (string):
2785 ```
2786 <enabled/> or <disabled/>
2787 ```
2788 #### macOS
2789 ```
2790 <dict>
2791   <key>FlashPlugin</key>
2792   <dict>
2793     <key>Allow</key>
2794     <array>
2795       <string>http://example.org</string>
2796     </array>
2797     <key>Block</key>
2798     <array>
2799       <string>http://example.edu</string>
2800     </array>
2801     <key>Default</key>
2802     <true/> | <false/>
2803     <key>Locked</key>
2804     <true/> | <false/>
2805   </dict>
2806 </dict>
2807 ```
2808 #### policies.json
2809 ```
2810 {
2811   "policies": {
2812     "FlashPlugin": {
2813       "Allow": ["http://example.org/"],
2814       "Block": ["http://example.edu/"],
2815       "Default": true | false,
2816       "Locked": true | false
2817     }
2818   }
2819 }
2820 ```
2821 ### Handlers
2822 Configure default application handlers. This policy is based on the internal format of `handlers.json`.
2823
2824 You can configure handlers based on a mime type (`mimeTypes`), a file's extension (`extensions`), or a protocol (`schemes`).
2825
2826 Within each handler type, you specify the given mimeType/extension/scheme as a key and use the following subkeys to describe how it is handled.
2827
2828 | Name | Description |
2829 | --- | --- |
2830 | `action`| Can be either `saveToDisk`, `useHelperApp`, `useSystemDefault`.
2831 | `ask` | If `true`, the user is asked if what they want to do with the file. If `false`, the action is taken without user intervention.
2832 | `handlers` | An array of handlers with the first one being the default. If you don't want to have a default handler, use an empty object for the first handler. Choose between path or uriTemplate.
2833 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`name` | The display name of the handler (might not be used).
2834 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`path`| The native path to the executable to be used.
2835 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`uriTemplate`| A url to a web based application handler. The URL must be https and contain a %s to be used for substitution.
2836
2837 **Compatibility:** Firefox 78, Firefox ESR 78\
2838 **CCK2 Equivalent:** N/A\
2839 **Preferences Affected:** N/A
2840
2841 #### Windows (GPO)
2842 Software\Policies\Mozilla\Firefox\Handlers (REG_MULTI_SZ) =
2843 ```
2844 {
2845   "mimeTypes": {
2846     "application/msword": {
2847       "action": "useSystemDefault",
2848       "ask": true | false
2849     }
2850   },
2851   "schemes": {
2852     "mailto": {
2853       "action": "useHelperApp",
2854       "ask": true | false,
2855       "handlers": [{
2856         "name": "Gmail",
2857         "uriTemplate": "https://mail.google.com/mail/?extsrc=mailto&url=%s"
2858       }]
2859     }
2860   },
2861   "extensions": {
2862     "pdf": {
2863       "action": "useHelperApp",
2864       "ask": true | false,
2865       "handlers": [{
2866         "name": "Adobe Acrobat",
2867         "path": "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32.exe"
2868       }]
2869     }
2870   }
2871 }
2872 ```
2873 #### Windows (Intune)
2874 OMA-URI:
2875 ```
2876 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Handlers
2877 ```
2878 Value (string):
2879 ```
2880 <enabled/>
2881 <data id="Handlers" value='
2882 {
2883   "mimeTypes": {
2884     "application/msword": {
2885       "action": "useSystemDefault",
2886       "ask": true | false
2887     }
2888   },
2889   "schemes": {
2890     "mailto": {
2891       "action": "useHelperApp",
2892       "ask": true | false,
2893       "handlers": [{
2894         "name": "Gmail",
2895         "uriTemplate": "https://mail.google.com/mail/?extsrc=mailto&amp;url=%s"
2896       }]
2897     }
2898   },
2899   "extensions": {
2900     "pdf": {
2901       "action": "useHelperApp",
2902       "ask": true | false,
2903       "handlers": [{
2904         "name": "Adobe Acrobat",
2905         "path": "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32.exe"
2906       }]
2907     }
2908   }
2909 }
2910 '/>
2911 ```
2912 #### macOS
2913 ```
2914 <dict>
2915   <key>Handlers</key>
2916   <dict>
2917     <key>mimeTypes</key>
2918     <dict>
2919       <key>application/msword</key>
2920       <dict>
2921         <key>action</key>
2922         <string>useSystemDefault</string>
2923         <key>ask</key>
2924         <true/> | <false/>
2925       </dict>
2926     </dict>
2927     <key>schemes</key>
2928     <dict>
2929       <key>mailto</key>
2930       <dict>
2931         <key>action</key>
2932         <string>useHelperApp</string>
2933         <key>ask</key>
2934         <true/> | <false/>
2935         <key>handlers</key>
2936         <array>
2937           <dict>
2938             <key>name</key>
2939             <string>Gmail</string>
2940             <key>uriTemplate</key>
2941             <string>https://mail.google.com/mail/?extsrc=mailto&url=%s</string>
2942           </dict>
2943         </array>
2944       </dict>
2945     </dict>
2946     <key>extensions</key>
2947     <dict>
2948       <key>pdf</key>
2949       <dict>
2950         <key>action</key>
2951         <string>useHelperApp</string>
2952         <key>ask</key>
2953         <true/> | <false/>
2954         <key>handlers</key>
2955         <array>
2956           <dict>
2957             <key>name</key>
2958             <string>Adobe Acrobat</string>
2959             <key>path</key>
2960             <string>/System/Applications/Preview.app</string>
2961           </dict>
2962         </array>
2963       </dict>
2964     </dict>
2965   </dict>
2966 </dict>
2967 ```
2968 #### policies.json
2969 ```
2970 {
2971   "policies": {
2972     "Handlers": {
2973       "mimeTypes": {
2974         "application/msword": {
2975           "action": "useSystemDefault",
2976           "ask": false
2977         }
2978       },
2979       "schemes": {
2980         "mailto": {
2981           "action": "useHelperApp",
2982           "ask": true | false,
2983           "handlers": [{
2984             "name": "Gmail",
2985             "uriTemplate": "https://mail.google.com/mail/?extsrc=mailto&url=%s"
2986           }]
2987         }
2988       },
2989       "extensions": {
2990         "pdf": {
2991           "action": "useHelperApp",
2992           "ask": true | false,
2993           "handlers": [{
2994             "name": "Adobe Acrobat",
2995             "path": "/usr/bin/acroread"
2996           }]
2997         }
2998       }
2999     }
3000   }
3001 }
3002 ```
3003 ### HardwareAcceleration
3004 Control hardware acceleration.
3005
3006 **Compatibility:** Firefox 60, Firefox ESR 60\
3007 **CCK2 Equivalent:** N/A\
3008 **Preferences Affected:** `layers.acceleration.disabled`
3009
3010 #### Windows (GPO)
3011 ```
3012 Software\Policies\Mozilla\Firefox\HardwareAcceleration = 0x1 | 0x0
3013 ```
3014 #### Windows (Intune)
3015 OMA-URI:
3016 ```
3017 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/HardwareAcceleration
3018 ```
3019 Value (string):
3020 ```
3021 <enabled/> or <disabled/>
3022 ```
3023 #### macOS
3024 ```
3025 <dict>
3026   <key>HardwareAcceleration</key>
3027   <true/> | <false/>
3028 </dict>
3029 ```
3030 #### policies.json
3031 ```
3032 {
3033   "policies": {
3034     "HardwareAcceleration": true | false
3035   }
3036 }
3037 ```
3038 ### Homepage
3039 Configure the default homepage and how Firefox starts.
3040
3041 `URL` is the default homepage.
3042
3043 `Locked` prevents the user from changing homepage preferences.
3044
3045 `Additional` allows for more than one homepage.
3046
3047 `StartPage` is how Firefox starts. The choices are no homepage, the default homepage or the previous session.
3048
3049 With Firefox 78, an additional option as added for `Startpage`, `homepage-locked`. If this is value is set for the Startpage, the user will always get the homepage at startup and cannot choose to restore their session.
3050
3051 **Compatibility:** Firefox 60, Firefox ESR 60 (StartPage was added in Firefox 60, Firefox ESR 60.4, homepage-locked added in Firefox 78)\
3052 **CCK2 Equivalent:** `homePage`,`lockHomePage`\
3053 **Preferences Affected:** `browser.startup.homepage`, `browser.startup.page`
3054
3055 #### Windows (GPO)
3056 ```
3057 Software\Policies\Mozilla\Firefox\Homepage\URL = "https://example.com"
3058 Software\Policies\Mozilla\Firefox\Homepage\Locked = 0x1 | 0x0
3059 Software\Policies\Mozilla\Firefox\Homepage\Additional\1 = "https://example.org"
3060 Software\Policies\Mozilla\Firefox\Homepage\Additional\2 = "https://example.edu"
3061 Software\Policies\Mozilla\Firefox\Homepage\StartPage = "none" | "homepage" | "previous-session" | "homepage-locked"
3062 ```
3063 #### Windows (Intune)
3064 OMA-URI:
3065 ```
3066 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageURL
3067 ```
3068 Value (string):
3069 ```
3070 <enabled/>
3071
3072 <data id="HomepageURL" value="https://example.com"/>
3073 <data id="HomepageLocked" value="true | false"/>
3074 ```
3075 OMA-URI:
3076 ```
3077 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageAdditional
3078 ```
3079 Value (string):
3080 ```
3081 <enabled/>
3082
3083 <data id="HomepageAdditional" value="1&#xF000;http://example.org&#xF000;2&#xF000;http://example.edu"/>
3084 ```
3085 OMA-URI:
3086 ```
3087 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageStartPage
3088 ```
3089 Value (string):
3090 ```
3091 <enabled/>
3092
3093 <data id="StartPage" value="none | homepage | previous-session"/>
3094 ```
3095 #### macOS
3096 ```
3097 <dict>
3098   <key>Homepage</key>
3099   <dict>
3100     <key>URL</key>
3101     <string>http://example.com</string>
3102     <key>Locked</key>
3103     <true/> | <false/>
3104     <key>Additional</key>
3105     <array>
3106       <string>http://example.org</string>
3107       <string>http://example.edu</string>
3108     </array>
3109     <key>StartPage</key>
3110     <string>none | homepage | previous-session | homepage-locked</string>
3111   </dict>
3112 </dict>
3113 ```
3114 #### policies.json
3115 ```
3116 {
3117   "policies": {
3118     "Homepage": {
3119       "URL": "http://example.com/",
3120       "Locked": true | false,
3121       "Additional": ["http://example.org/",
3122                      "http://example.edu/"],
3123       "StartPage": "none" | "homepage" | "previous-session" | "homepage-locked"
3124     }
3125   }
3126 }
3127 ```
3128 ### InstallAddonsPermission
3129 Configure the default extension install policy as well as origins for extension installs are allowed. This policy does not override turning off all extension installs.
3130
3131 `Allow` is a list of origins where extension installs are allowed.
3132
3133 `Default` determines whether or not extension installs are allowed by default.
3134
3135 **Compatibility:** Firefox 60, Firefox ESR 60\
3136 **CCK2 Equivalent:** `permissions.install`\
3137 **Preferences Affected:** `xpinstall.enabled`
3138
3139 #### Windows (GPO)
3140 ```
3141 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Allow\1 = "https://example.org"
3142 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Allow\2 = "https://example.edu"
3143 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Default = 0x1 | 0x0
3144 ```
3145 #### Windows (Intune)
3146 OMA-URI:
3147 ```
3148 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Addons/InstallAddonsPermission_Allow
3149 ```
3150 Value (string):
3151 ```
3152 <enabled/>
3153 <data id="Permissions" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
3154 ```
3155 OMA-URI:
3156 ```
3157 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Addons/InstallAddonsPermission_Default
3158 ```
3159 Value (string):
3160 ```
3161 <enabled/>
3162 ```
3163 #### macOS
3164 ```
3165 <dict>
3166   <key>InstallAddonsPermission</key>
3167   <dict>
3168     <key>Allow</key>
3169     <array>
3170       <string>http://example.org</string>
3171       <string>http://example.edu</string>
3172     </array>
3173     <key>Default</key>
3174     <true/> | <false/>
3175   </dict>
3176 </dict>
3177 ```
3178 #### policies.json
3179 ```
3180 {
3181   "policies": {
3182     "InstallAddonsPermission": {
3183       "Allow": ["http://example.org/",
3184                 "http://example.edu/"],
3185       "Default": true | false
3186     }
3187   }
3188 }
3189 ```
3190 ### LegacyProfiles
3191 Disable the feature enforcing a separate profile for each installation.
3192
3193 If this policy set to true, Firefox will not try to create different profiles for installations of Firefox in different directories. This is the equivalent of the MOZ_LEGACY_PROFILES environment variable.
3194
3195 If this policy set to false, Firefox will create a new profile for each unique installation of Firefox.
3196
3197 This policy only work on Windows via GPO (not policies.json).
3198
3199 **Compatibility:** Firefox 70, Firefox ESR 68.2 (Windows only, GPO only)\
3200 **CCK2 Equivalent:** N/A\
3201 **Preferences Affected:** N/A
3202
3203 #### Windows (GPO)
3204 ```
3205 Software\Policies\Mozilla\Firefox\LegacyProfiles = = 0x1 | 0x0
3206 ```
3207 #### Windows (Intune)
3208 OMA-URI:
3209 ```
3210 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/LegacyProfiles
3211 ```
3212 Value (string):
3213 ```
3214 <enabled/> or <disabled/>
3215 ```
3216 ### LegacySameSiteCookieBehaviorEnabled
3217 Enable default legacy SameSite cookie behavior setting.
3218
3219 If this policy is set to true, it reverts all cookies to legacy SameSite behavior which means that cookies that don't explicitly specify a ```SameSite``` attribute are treated as if they were ```SameSite=None```.
3220
3221 **Compatibility:** Firefox 96\
3222 **CCK2 Equivalent:** N/A\
3223 **Preferences Affected:** `network.cookie.sameSite.laxByDefault`
3224
3225 #### Windows (GPO)
3226 ```
3227 Software\Policies\Mozilla\Firefox\LegacySameSiteCookieBehaviorEnabled = = 0x1 | 0x0
3228 ```
3229 #### Windows (Intune)
3230 OMA-URI:
3231 ```
3232 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/LegacySameSiteCookieBehaviorEnabled
3233 ```
3234 Value (string):
3235 ```
3236 <enabled/> or <disabled/>
3237 ```
3238 #### macOS
3239 ```
3240 <dict>
3241   <key>LegacySameSiteCookieBehaviorEnabled</key>
3242   <true/> | <false/>
3243 </dict>
3244 ```
3245 #### policies.json
3246 ```
3247 {
3248   "policies": {
3249     "LegacySameSiteCookieBehaviorEnabled": true | false
3250 }
3251 ```
3252 ### LegacySameSiteCookieBehaviorEnabledForDomainList
3253 Revert to legacy SameSite behavior for cookies on specified sites.
3254
3255 If this policy is set to true, cookies set for domains in this list will revert to legacy SameSite behavior which means that cookies that don't explicitly specify a ```SameSite``` attribute are treated as if they were ```SameSite=None```.
3256
3257 **Compatibility:** Firefox 96\
3258 **CCK2 Equivalent:** N/A\
3259 **Preferences Affected:** `network.cookie.sameSite.laxByDefault.disabledHosts`
3260
3261 #### Windows (GPO)
3262 ```
3263 Software\Policies\Mozilla\Firefox\LegacySameSiteCookieBehaviorEnabledForDomainList\1 = "example.org"
3264 Software\Policies\Mozilla\Firefox\LegacySameSiteCookieBehaviorEnabledForDomainList\2 = "example.edu"
3265 ```
3266 #### Windows (Intune)
3267 OMA-URI:
3268 ```
3269 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/LegacySameSiteCookieBehaviorEnabledForDomainList
3270 ```
3271 Value (string):
3272 ```
3273 <enabled/>
3274 <data id="LegacySameSiteCookieBehaviorEnabledForDomainList" value="1&#xF000;example.org&#xF000;2&#xF000;example.edu"/>
3275 ```
3276 #### macOS
3277 ```
3278 <dict>
3279   <key>LegacySameSiteCookieBehaviorEnabledForDomainList</key>
3280   <array>
3281     <string>example.org</string>
3282     <string>example.edu</string>
3283   </array>
3284 </dict>
3285 ```
3286 #### policies.json
3287 ```
3288 {
3289   "policies": {
3290     "LegacySameSiteCookieBehaviorEnabledForDomainList": ["example.org",
3291                                                          "example.edu"]
3292   }
3293 }
3294 ```
3295 ### LocalFileLinks
3296 Enable linking to local files by origin.
3297
3298 **Compatibility:** Firefox 68, Firefox ESR 68\
3299 **CCK2 Equivalent:** N/A\
3300 **Preferences Affected:** `capability.policy.localfilelinks.*`
3301
3302 #### Windows (GPO)
3303 ```
3304 Software\Policies\Mozilla\Firefox\LocalFileLinks\1 = "https://example.org"
3305 Software\Policies\Mozilla\Firefox\LocalFileLinks\2 = "https://example.edu"
3306 ```
3307 #### Windows (Intune)
3308 OMA-URI:
3309 ```
3310 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/LocalFileLinks
3311 ```
3312 Value (string):
3313 ```
3314 <enabled/>
3315 <data id="LocalFileLinks" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
3316 ```
3317 #### macOS
3318 ```
3319 <dict>
3320   <key>LocalFileLinks</key>
3321   <array>
3322     <string>http://example.org</string>
3323     <string>http://example.edu</string>
3324   </array>
3325 </dict>
3326 ```
3327 #### policies.json
3328 ```
3329 {
3330   "policies": {
3331     "LocalFileLinks": ["http://example.org/",
3332                        "http://example.edu/"]
3333   }
3334 }
3335 ```
3336 ### ManagedBookmarks
3337 Configures a list of bookmarks managed by an administrator that cannot be changed by the user.
3338
3339 The bookmarks are only added as a button on the personal toolbar. They are not in the bookmarks folder.
3340
3341 The syntax of this policy is exactly the same as the [Chrome ManagedBookmarks policy](https://cloud.google.com/docs/chrome-enterprise/policies/?policy=ManagedBookmarks). The schema is:
3342 ```
3343 {
3344  "items": {
3345   "id": "BookmarkType",
3346   "properties": {
3347    "children": {
3348     "items": {
3349      "$ref": "BookmarkType"
3350     },
3351     "type": "array"
3352    },
3353    "name": {
3354     "type": "string"
3355    },
3356    "toplevel_name": {
3357     "type": "string"
3358    },
3359    "url": {
3360     "type": "string"
3361    }
3362   },
3363   "type": "object"
3364  },
3365  "type": "array"
3366 }
3367 ```
3368 **Compatibility:** Firefox 83, Firefox ESR 78.5\
3369 **CCK2 Equivalent:** N/A\
3370 **Preferences Affected:** N/A
3371
3372 #### Windows (GPO)
3373 Software\Policies\Mozilla\Firefox\ManagedBookmarks (REG_MULTI_SZ) =
3374 ```
3375 [
3376   {
3377     "toplevel_name": "My managed bookmarks folder"
3378   },
3379   {
3380     "url": "example.com",
3381     "name": "Example"
3382   },
3383   {
3384     "name": "Mozilla links",
3385     "children": [
3386       {
3387         "url": "https://mozilla.org",
3388         "name": "Mozilla.org"
3389       },
3390       {
3391         "url": "https://support.mozilla.org/",
3392         "name": "SUMO"
3393       }
3394     ]
3395   }
3396 ]
3397 ```
3398 #### Windows (Intune)
3399 OMA-URI:
3400 ```
3401 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/ManagedBookmarks
3402 ```
3403 Value (string):
3404 ```
3405 <enabled/>
3406 <data id="JSON" value='
3407 [
3408   {
3409     "toplevel_name": "My managed bookmarks folder"
3410   },
3411   {
3412     "url": "example.com",
3413     "name": "Example"
3414   },
3415   {
3416     "name": "Mozilla links",
3417     "children": [
3418       {
3419         "url": "https://mozilla.org",
3420         "name": "Mozilla.org"
3421       },
3422       {
3423         "url": "https://support.mozilla.org/",
3424         "name": "SUMO"
3425       }
3426     ]
3427   }
3428 ]'/>
3429 ```
3430 #### macOS
3431 ```
3432 <dict>
3433   <key>ManagedBookmarks</key>
3434   <array>
3435     <dict>
3436       <key>toplevel_name</key>
3437       <string>My managed bookmarks folder</string>
3438       <dict>
3439         <key>url</key>
3440         <string>example.com</string>
3441         <key>name</key>
3442         <string>Example</string>
3443       </dict>
3444       <dict>
3445       <key>name</key>
3446       <string>Mozilla links</string>
3447       <key>children</key>
3448       <array>
3449         <dict>
3450           <key>url</key>
3451           <string>https://mozilla.org</string>
3452           <key>name</key>
3453           <string>Mozilla</string>
3454         </dict>
3455         <dict>
3456           <key>url</key>
3457           <string>https://support.mozilla.org/</string>
3458           <key>name</key>
3459           <string>SUMO</string>
3460         </dict>
3461       </array>
3462     </dict>
3463   </array>
3464 </dict>
3465 ```
3466 #### policies.json
3467 ```
3468 {
3469   "policies": {
3470     "ManagedBookmarks": [
3471       {
3472         "toplevel_name": "My managed bookmarks folder"
3473       },
3474       {
3475         "url": "example.com",
3476         "name": "Example"
3477       },
3478       {
3479         "name": "Mozilla links",
3480         "children": [
3481           {
3482             "url": "https://mozilla.org",
3483             "name": "Mozilla.org"
3484           },
3485           {
3486             "url": "https://support.mozilla.org/",
3487             "name": "SUMO"
3488           }
3489         ]
3490       }
3491     ]
3492   }
3493 }
3494 ```
3495 ### ManualAppUpdateOnly
3496
3497 Switch to manual updates only.
3498
3499 If this policy is enabled:
3500  1. The user will never be prompted to install updates
3501  2. Firefox will not check for updates in the background, though it will check automatically when an update UI is displayed (such as the one in the About dialog). This check will be used to show "Update to version X" in the UI, but will not automatically download the update or prompt the user to update in any other way.
3502  3. The update UI will work as expected, unlike when using DisableAppUpdate.
3503
3504 This policy is primarily intended for advanced end users, not for enterprises.
3505
3506 **Compatibility:** Firefox 87\
3507 **CCK2 Equivalent:** N/A\
3508 **Preferences Affected:** N/A
3509
3510 #### policies.json
3511 ```
3512 {
3513   "policies": {
3514     "ManualAppUpdateOnly": true | false
3515   }
3516 }
3517 ```
3518 ### NetworkPrediction
3519 Enable or disable network prediction (DNS prefetching).
3520
3521 **Compatibility:** Firefox 67, Firefox ESR 60.7\
3522 **CCK2 Equivalent:** N/A\
3523 **Preferences Affected:** `network.dns.disablePrefetch`, `network.dns.disablePrefetchFromHTTPS`
3524
3525 #### Windows (GPO)
3526 ```
3527 Software\Policies\Mozilla\Firefox\NetworkPrediction = 0x1 | 0x0
3528 ```
3529 #### Windows (Intune)
3530 OMA-URI:
3531 ```
3532 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NetworkPrediction
3533 ```
3534 Value (string):
3535 ```
3536 <enabled/> or <disabled/>
3537 ```
3538 #### macOS
3539 ```
3540 <dict>
3541   <key>NetworkPrediction</key>
3542   <true/> | <false/>
3543 </dict>
3544 ```
3545 #### policies.json
3546 ```
3547 {
3548   "policies": {
3549     "NetworkPrediction": true | false
3550 }
3551 ```
3552 ### NewTabPage
3553 Enable or disable the New Tab page.
3554
3555 **Compatibility:** Firefox 68, Firefox ESR 68\
3556 **CCK2 Equivalent:** N/A\
3557 **Preferences Affected:** `browser.newtabpage.enabled`
3558
3559 #### Windows (GPO)
3560 ```
3561 Software\Policies\Mozilla\Firefox\NewTabPage = 0x1 | 0x0
3562 ```
3563 #### Windows (Intune)
3564 OMA-URI:
3565 ```
3566 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NewTabPage
3567 ```
3568 Value (string):
3569 ```
3570 <enabled/> or <disabled/>
3571 ```
3572 #### macOS
3573 ```
3574 <dict>
3575   <key>NewTabPage</key>
3576   <true/> | <false/>
3577 </dict>
3578 ```
3579 #### policies.json
3580 ```
3581 {
3582   "policies": {
3583     "NewTabPage": true | false
3584 }
3585 ```
3586 ### NoDefaultBookmarks
3587 Disable the creation of default bookmarks.
3588
3589 This policy is only effective if the user profile has not been created yet.
3590
3591 **Compatibility:** Firefox 60, Firefox ESR 60\
3592 **CCK2 Equivalent:** `removeDefaultBookmarks`\
3593 **Preferences Affected:** N/A
3594
3595 #### Windows (GPO)
3596 ```
3597 Software\Policies\Mozilla\Firefox\NoDefaultBookmarks = 0x1 | 0x0
3598 ```
3599 #### Windows (Intune)
3600 OMA-URI:
3601 ```
3602 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NoDefaultBookmarks
3603 ```
3604 Value (string):
3605 ```
3606 <enabled/> or <disabled/>
3607 ```
3608 #### macOS
3609 ```
3610 <dict>
3611   <key>NoDefaultBookmarks</key>
3612   <true/> | <false/>
3613 </dict>
3614 ```
3615 #### policies.json
3616 ```
3617 {
3618   "policies": {
3619     "NoDefaultBookmarks": true | false
3620   }
3621 }
3622 ```
3623 ### OfferToSaveLogins
3624 Control whether or not Firefox offers to save passwords.
3625
3626 **Compatibility:** Firefox 60, Firefox ESR 60\
3627 **CCK2 Equivalent:** `dontRememberPasswords`\
3628 **Preferences Affected:** `signon.rememberSignons`
3629
3630 #### Windows (GPO)
3631 ```
3632 Software\Policies\Mozilla\Firefox\OfferToSaveLogins = 0x1 | 0x0
3633 ```
3634 #### Windows (Intune)
3635 OMA-URI:
3636 ```
3637 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OfferToSaveLogins
3638 ```
3639 Value (string):
3640 ```
3641 <enabled/> or <disabled/>
3642 ```
3643 #### macOS
3644 ```
3645 <dict>
3646   <key>OfferToSaveLogins</key>
3647   <true/> | <false/>
3648 </dict>
3649 ```
3650 #### policies.json
3651 ```
3652 {
3653   "policies": {
3654     "OfferToSaveLogins": true | false
3655   }
3656 }
3657 ```
3658 ### OfferToSaveLoginsDefault
3659 Sets the default value of signon.rememberSignons without locking it.
3660
3661 **Compatibility:** Firefox 70, Firefox ESR 60.2\
3662 **CCK2 Equivalent:** `dontRememberPasswords`\
3663 **Preferences Affected:** `signon.rememberSignons`
3664
3665 #### Windows (GPO)
3666 ```
3667 Software\Policies\Mozilla\Firefox\OfferToSaveLoginsDefault = 0x1 | 0x0
3668 ```
3669 #### Windows (Intune)
3670 OMA-URI:
3671 ```
3672 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OfferToSaveLoginsDefault
3673 ```
3674 Value (string):
3675 ```
3676 <enabled/> or <disabled/>
3677 ```
3678 #### macOS
3679 ```
3680 <dict>
3681   <key>OfferToSaveLoginsDefault</key>
3682   <true/> | <false/>
3683 </dict>
3684 ```
3685 #### policies.json
3686 ```
3687 {
3688   "policies": {
3689     "OfferToSaveLoginsDefault": true | false
3690   }
3691 }
3692 ```
3693 ### OverrideFirstRunPage
3694 Override the first run page. If the value is an empty string (""), the first run page is not displayed.
3695
3696 Starting with Firefox 83, Firefox ESR 78.5, you can also specify multiple URLS separated by a vertical bar (|).
3697
3698 **Compatibility:** Firefox 60, Firefox ESR 60\
3699 **CCK2 Equivalent:** `welcomePage`,`noWelcomePage`\
3700 **Preferences Affected:** `startup.homepage_welcome_url`
3701
3702 #### Windows (GPO)
3703 ```
3704 Software\Policies\Mozilla\Firefox\OverrideFirstRunPage = "http://example.org"
3705 ```
3706 #### Windows (Intune)
3707 OMA-URI:
3708 ```
3709 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OverrideFirstRunPage
3710 ```
3711 Value (string):
3712 ```
3713 <enabled/>
3714 <data id="OverridePage" value="https://example.com"/>
3715 ```
3716 #### macOS
3717 ```
3718 <dict>
3719   <key>OverrideFirstRunPage</key>
3720   <string>http://example.org</string>
3721 </dict>
3722 ```
3723 #### policies.json
3724 ```
3725 {
3726   "policies": {
3727     "OverrideFirstRunPage": "http://example.org"
3728   }
3729 }
3730 ```
3731 ### OverridePostUpdatePage
3732 Override the upgrade page. If the value is an empty string (""), no extra pages are displayed when Firefox is upgraded.
3733
3734 **Compatibility:** Firefox 60, Firefox ESR 60\
3735 **CCK2 Equivalent:** `upgradePage`,`noUpgradePage`\
3736 **Preferences Affected:** `startup.homepage_override_url`
3737
3738 #### Windows (GPO)
3739 ```
3740 Software\Policies\Mozilla\Firefox\OverridePostUpdatePage = "http://example.org"
3741 ```
3742 #### Windows (Intune)
3743 OMA-URI:
3744 ```
3745 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OverridePostUpdatePage
3746 ```
3747 Value (string):
3748 ```
3749 <enabled/>
3750 <data id="OverridePage" value="https://example.com"/>
3751 ```
3752 #### macOS
3753 ```
3754 <dict>
3755   <key>OverridePostUpdatePage</key>
3756   <string>http://example.org</string>
3757 </dict>
3758 ```
3759 #### policies.json
3760 ```
3761 {
3762   "policies": {
3763     "OverridePostUpdatePage": "http://example.org"
3764   }
3765 }
3766 ```
3767 ### PasswordManagerEnabled
3768 Remove access to the password manager via preferences and blocks about:logins on Firefox 70.
3769
3770 **Compatibility:** Firefox 70, Firefox ESR 60.2\
3771 **CCK2 Equivalent:** N/A\
3772 **Preferences Affected:** `pref.privacy.disable_button.view_passwords`
3773
3774 #### Windows (GPO)
3775 ```
3776 Software\Policies\Mozilla\Firefox\PasswordManagerEnabled = 0x1 | 0x0
3777 ```
3778 #### Windows (Intune)
3779 OMA-URI:
3780 ```
3781 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PasswordManagerEnabled
3782 ```
3783 Value (string):
3784 ```
3785 <enabled/> or <disabled/>
3786 ```
3787 #### macOS
3788 ```
3789 <dict>
3790   <key>PasswordManagerEnabled</key>
3791   <true/> | <false/>
3792 </dict>
3793 ```
3794 #### policies.json
3795 ```
3796 {
3797   "policies": {
3798     "PasswordManagerEnabled": true | false
3799   }
3800 }
3801 ```
3802 ### PDFjs
3803 Disable or configure PDF.js, the built-in PDF viewer.
3804
3805 If `Enabled` is set to false, the built-in PDF viewer is disabled.
3806
3807 If `EnablePermissions` is set to true, the built-in PDF viewer will honor document permissions like preventing the copying of text.
3808
3809 Note: DisableBuiltinPDFViewer has not been deprecated. You can either continue to use it, or switch to using PDFjs->Enabled to disable the built-in PDF viewer. This new permission was added because we needed a place for PDFjs->EnabledPermissions.
3810
3811 **Compatibility:** Firefox 77, Firefox ESR 68.9\
3812 **CCK2 Equivalent:** N/A\
3813 **Preferences Affected:** `pdfjs.diabled`, `pdfjs.enablePermissions`
3814
3815 #### Windows (GPO)
3816 ```
3817 Software\Policies\Mozilla\Firefox\PDFjs\Enabled = 0x1 | 0x0
3818 Software\Policies\Mozilla\Firefox\PDFjs\EnablePermissions = 0x1 | 0x0
3819 ```
3820 #### Windows (Intune)
3821 OMA-URI:
3822 ```
3823 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PDFjs/PDFjs_Enabled
3824 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PDFjs/PDFjs_EnablePermissions
3825 ```
3826 Value (string):
3827 ```
3828 <enabled/>or <disabled/>
3829 ```
3830 #### macOS
3831 ```
3832 <dict>
3833   <key>PDFjs</key>
3834   <dict>
3835     <key>Enabled</key>
3836     <true/> | <false/>
3837     <key>EnablePermissions</key>
3838     <true/> | <false/>
3839   </dict>
3840 </dict>
3841 ```
3842 #### policies.json
3843 ```
3844 {
3845   "policies": {
3846     "PDFjs": {
3847       "Enabled": true | false,
3848       "EnablePermissions": true | false
3849     }
3850   }
3851 }
3852 ```
3853 ### Permissions
3854 Set permissions associated with camera, microphone, location, notifications, autoplay, and virtual reality. Because these are origins, not domains, entries with unique ports must be specified separately. This explicitly means that it is not possible to add wildcards. See examples below.
3855
3856 `Allow` is a list of origins where the feature is allowed.
3857
3858 `Block` is a list of origins where the feature is not allowed.
3859
3860 `BlockNewRequests` determines whether or not new requests can be made for the feature.
3861
3862 `Locked` prevents the user from changing preferences for the feature.
3863
3864 `Default` specifies the default value for Autoplay. block-audio-video is not supported on Firefox ESR 68.
3865
3866 **Compatibility:** Firefox 62, Firefox ESR 60.2 (Autoplay added in Firefox 74, Firefox ESR 68.6, Autoplay Default/Locked added in Firefox 76, Firefox ESR 68.8, VirtualReality added in Firefox 80, Firefox ESR 78.2)\
3867 **CCK2 Equivalent:** N/A\
3868 **Preferences Affected:** `permissions.default.camera`, `permissions.default.microphone`, `permissions.default.geo`, `permissions.default.desktop-notification`, `media.autoplay.default`, `permissions.default.xr`
3869
3870 #### Windows (GPO)
3871 ```
3872 Software\Policies\Mozilla\Firefox\Permissions\Camera\Allow\1 = "https://example.org"
3873 Software\Policies\Mozilla\Firefox\Permissions\Camera\Allow\2 = "https://example.org:1234"
3874 Software\Policies\Mozilla\Firefox\Permissions\Camera\Block\1 = "https://example.edu"
3875 Software\Policies\Mozilla\Firefox\Permissions\Camera\BlockNewRequests = 0x1 | 0x0
3876 Software\Policies\Mozilla\Firefox\Permissions\Camera\Locked = 0x1 | 0x0
3877 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Allow\1 = "https://example.org"
3878 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Block\1 = "https://example.edu"
3879 Software\Policies\Mozilla\Firefox\Permissions\Microphone\BlockNewRequests = 0x1 | 0x0
3880 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Locked = 0x1 | 0x0
3881 Software\Policies\Mozilla\Firefox\Permissions\Location\Allow\1 = "https://example.org"
3882 Software\Policies\Mozilla\Firefox\Permissions\Location\Block\1 = "https://example.edu"
3883 Software\Policies\Mozilla\Firefox\Permissions\Location\BlockNewRequests = 0x1 | 0x0
3884 Software\Policies\Mozilla\Firefox\Permissions\Location\Locked = 0x1 | 0x0
3885 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Allow\1 = "https://example.org"
3886 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Block\1 = "https://example.edu"
3887 Software\Policies\Mozilla\Firefox\Permissions\Notifications\BlockNewRequests = 0x1 | 0x0
3888 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Locked = 0x1 | 0x0
3889 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Allow\1 = "https://example.org"
3890 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Block\1 = "https://example.edu"
3891 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Default = "allow-audio-video" | "block-audio" | "block-audio-video"
3892 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Locked = 0x1 | 0x0
3893 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\Allow\1 = "https://example.org"
3894 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\Block\1 = "https://example.edu"
3895 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\BlockNewRequests = 0x1 | 0x0
3896 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\Locked = 0x1 | 0x0
3897 ```
3898 #### Windows (Intune)
3899 OMA-URI:
3900 ```
3901 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Location/Location_BlockNewRequests
3902 ```
3903 Value (string):
3904 ```
3905 <enabled/> or <disabled/>
3906 ```
3907 OMA-URI:
3908 ```
3909 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Location/Location_Locked
3910 ```
3911 Value (string):
3912 ```
3913 <enabled/> or <disabled/>
3914 ```
3915 OMA-URI:
3916 ```
3917 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_Allow
3918 ```
3919 Value (string):
3920 ```
3921 <enabled/>
3922 <data id="Permissions" value="1&#xF000;https://example.org"/>
3923 ```
3924 OMA-URI:
3925 ```
3926 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_BlockNewRequests
3927 ```
3928 Value (string):
3929 ```
3930 <enabled/> or <disabled/>
3931 ```
3932 OMA-URI:
3933 ```
3934 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_Locked
3935 ```
3936 Value (string):
3937 ```
3938 <enabled/> or <disabled/>
3939 ```
3940 OMA-URI:
3941 ```
3942 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Allow
3943 ```
3944 Value (string):
3945 ```
3946 <enabled/>
3947 <data id="Permissions" value="1&#xF000;https://example.org"/>
3948 ```
3949 OMA-URI:
3950 ```
3951 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Block
3952 ```
3953 Value (string):
3954 ```
3955 <enabled/>
3956 <data id="Permissions" value="1&#xF000;https://example.edu"/>
3957 ```
3958 OMA-URI:
3959 ```
3960 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Default
3961 ```
3962 Value (string):
3963 ```
3964 <enabled/>
3965 <data id="Autoplay_Default" value="allow-audio-video | block-audio | block-audio-video"/>
3966 ```
3967 OMA-URI:
3968 ```
3969 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Locked
3970 ```
3971 Value (string):
3972 ```
3973 <enabled/> or <disabled/>
3974 ```
3975 OMA-URI:
3976 ```
3977 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_Allow
3978 ```
3979 Value (string):
3980 ```
3981 <enabled/>
3982 <data id="Permissions" value="1&#xF000;https://example.org"/>
3983 ```
3984 OMA-URI:
3985 ```
3986 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_Block
3987 ```
3988 Value (string):
3989 ```
3990 <enabled/>
3991 <data id="Permissions" value="1&#xF000;https://example.edu"/>
3992 ```
3993 OMA-URI:
3994 ```
3995 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_BlockNewRequests
3996 ```
3997 Value (string):
3998 ```
3999 <enabled/> or <disabled/>
4000 ```
4001 OMA-URI:
4002 ```
4003 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_Locked
4004 ```
4005 Value (string):
4006 ```
4007 <enabled/> or <disabled/>
4008 ```
4009 #### macOS
4010 ```
4011 <dict>
4012   <key>Permissions</key>
4013   <dict>
4014     <key>Camera</key>
4015     <dict>
4016       <key>Allow</key>
4017       <array>
4018         <string>https://example.org</string>
4019         <string>https://example.org:1234</string>
4020       </array>
4021       <key>Block</key>
4022       <array>
4023         <string>https://example.edu</string>
4024       </array>
4025       <key>BlockNewRequests</key>
4026       <true/> | <false/>
4027       <key>Locked</key>
4028       <true/> | <false/>
4029     </dict>
4030     <key>Microphone</key>
4031     <dict>
4032       <key>Allow</key>
4033       <array>
4034         <string>https://example.org</string>
4035       </array>
4036       <key>Block</key>
4037       <array>
4038         <string>https://example.edu</string>
4039       </array>
4040       <key>BlockNewRequests</key>
4041       <true/> | <false/>
4042       <key>Locked</key>
4043       <true/> | <false/>
4044     </dict>
4045     <key>Location</key>
4046     <dict>
4047       <key>Allow</key>
4048       <array>
4049         <string>https://example.org</string>
4050       </array>
4051       <key>Block</key>
4052       <array>
4053         <string>https://example.edu</string>
4054       </array>
4055       <key>BlockNewRequests</key>
4056       <true/> | <false/>
4057       <key>Locked</key>
4058       <true/> | <false/>
4059     </dict>
4060     <key>Notifications</key>
4061     <dict>
4062       <key>Allow</key>
4063       <array>
4064         <string>https://example.org</string>
4065       </array>
4066       <key>Block</key>
4067       <array>
4068         <string>https://example.edu</string>
4069       </array>
4070       <key>BlockNewRequests</key>
4071       <true/>
4072       <key>Locked</key>
4073       <true/>
4074     </dict>
4075     <key>Autoplay</key>
4076     <dict>
4077       <key>Allow</key>
4078       <array>
4079         <string>https://example.org</string>
4080       </array>
4081       <key>Block</key>
4082       <array>
4083         <string>https://example.edu</string>
4084       </array>
4085       <key>Default</key>
4086       <string>allow-audio-video | block-audio | block-audio-video</string>
4087       <key>Locked</key>
4088       <true/> | <false/>
4089     </dict>
4090   </dict>
4091 </dict>
4092 ```
4093 #### policies.json
4094 ```
4095 {
4096   "policies": {
4097     "Permissions": {
4098       "Camera": {
4099         "Allow": ["https://example.org","https://example.org:1234"],
4100         "Block": ["https://example.edu"],
4101         "BlockNewRequests": true | false,
4102         "Locked": true | false
4103       },
4104       "Microphone": {
4105         "Allow": ["https://example.org"],
4106         "Block": ["https://example.edu"],
4107         "BlockNewRequests": true | false,
4108         "Locked": true | false
4109       },
4110       "Location": {
4111         "Allow": ["https://example.org"],
4112         "Block": ["https://example.edu"],
4113         "BlockNewRequests": true | false,
4114         "Locked": true | false
4115       },
4116       "Notifications": {
4117         "Allow": ["https://example.org"],
4118         "Block": ["https://example.edu"],
4119         "BlockNewRequests": true | false,
4120         "Locked": true | false
4121       },
4122       "Autoplay": {
4123         "Allow": ["https://example.org"],
4124         "Block": ["https://example.edu"],
4125         "Default": "allow-audio-video" | "block-audio" | "block-audio-video",
4126         "Locked": true | false
4127       }
4128     }
4129   }
4130 }
4131 ```
4132 ### PictureInPicture
4133
4134 Enable or disable Picture-in-Picture as well as prevent the user from enabling or disabling it (Locked).
4135
4136 **Compatibility:** Firefox 78, Firefox ESR 78\
4137 **CCK2 Equivalent:** N/A\
4138 **Preferences Affected:** `media.videocontrols.picture-in-picture.video-toggle.enabled`
4139
4140 #### Windows (GPO)
4141 ```
4142 Software\Policies\Mozilla\Firefox\PictureInPicture\Enabled = 0x1 | 0x0
4143 Software\Policies\Mozilla\Firefox\PictureInPicture\Locked = 0x1 | 0x0
4144
4145 ```
4146 #### Windows (Intune)
4147 OMA-URI:
4148 ```
4149 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PictureInPicture/PictureInPicture_Enabled
4150 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PictureInPicture/PictureInPicture_Locked
4151 ```
4152 Value (string):
4153 ```
4154 <enabled/> or <disabled/>
4155 ```
4156 #### macOS
4157 ```
4158 <dict>
4159   <key>PictureInPicture</key>
4160   <dict>
4161     <key>Enabled</key>
4162     <true/> | <false/>
4163     <key>Locked</key>
4164     <true/> | <false/>
4165   </dict>
4166 </dict>
4167 ```
4168 #### policies.json
4169 ```
4170 {
4171   "policies": {
4172     "PictureInPicture": {
4173       "Enabled": true | false,
4174       "Locked": true | false
4175     }
4176   }
4177 }
4178 ```
4179 ### PopupBlocking
4180 Configure the default pop-up window policy as well as origins for which pop-up windows are allowed.
4181
4182 `Allow` is a list of origins where popup-windows are allowed.
4183
4184 `Default` determines whether or not pop-up windows are allowed by default.
4185
4186 `Locked` prevents the user from changing pop-up preferences.
4187
4188 **Compatibility:** Firefox 60, Firefox ESR 60\
4189 **CCK2 Equivalent:** `permissions.popup`\
4190 **Preferences Affected:** `dom.disable_open_during_load`
4191
4192 #### Windows (GPO)
4193 ```
4194 Software\Policies\Mozilla\Firefox\PopupBlocking\Allow\1 = "https://example.org"
4195 Software\Policies\Mozilla\Firefox\PopupBlocking\Allow\2 = "https://example.edu"
4196 Software\Policies\Mozilla\Firefox\PopupBlocking\Default = 0x1 | 0x0
4197 Software\Policies\Mozilla\Firefox\PopupBlocking\Locked = 0x1 | 0x0
4198 ```
4199 #### Windows (Intune)
4200 OMA-URI:
4201 ```
4202 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Allow
4203 ```
4204 Value (string):
4205 ```
4206 <enabled/>
4207 <data id="Permissions" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
4208 ```
4209 OMA-URI:
4210 ```
4211 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Default
4212 ```
4213 Value (string):
4214 ```
4215 <enabled/> or <disabled/>
4216 ```
4217 OMA-URI:
4218 ```
4219 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Locked
4220 ```
4221 Value (string):
4222 ```
4223 <enabled/> or <disabled/>
4224 ```
4225 #### macOS
4226 ```
4227 <dict>
4228   <key>PopupBlocking</key>
4229   <dict>
4230     <key>Allow</key>
4231     <array>
4232       <string>http://example.org</string>
4233       <string>http://example.edu</string>
4234     </array>
4235     <key>Default</key>
4236     <true/> | <false/>
4237     <key>Locked</key>
4238     <true/> | <false/>
4239   </dict>
4240 </dict>
4241 ```
4242 #### policies.json
4243 ```
4244 {
4245   "policies": {
4246     "PopupBlocking": {
4247       "Allow": ["http://example.org/",
4248                 "http://example.edu/"],
4249       "Default": true | false,
4250       "Locked": true | false
4251     }
4252   }
4253 }
4254 ```
4255 ### Preferences
4256 Set and lock preferences.
4257
4258 **NOTE** On Windows, in order to use this policy, you must clear all settings in the old **Preferences (Deprecated)** section.
4259
4260 Previously you could only set and lock a subset of preferences. Starting with Firefox 81 and Firefox ESR 78.3 you can set many more preferences. You can also set default preferences, user preferences and you can clear preferences.
4261
4262 Preferences that start with the following prefixes are supported:
4263 ```
4264 accessibility.
4265 app.update.* (Firefox 86, Firefox 78.8)
4266 browser.
4267 datareporting.policy.
4268 dom.
4269 extensions.
4270 general.autoScroll (Firefox 83, Firefox ESR 78.5)
4271 general.smoothScroll (Firefox 83, Firefox ESR 78.5)
4272 geo.
4273 gfx.
4274 intl.
4275 keyword.enabled (Firefox 95, Firefox ESR 91.4)
4276 layers.
4277 layout.
4278 media.
4279 network.
4280 pdfjs. (Firefox 84, Firefox ESR 78.6)
4281 places.
4282 print.
4283 signon. (Firefox 83, Firefox ESR 78.5)
4284 spellchecker. (Firefox 84, Firefox ESR 78.6)
4285 toolkit.legacyUserProfileCustomizations.stylesheets (Firefox 95, Firefox ESR 91.4)
4286 ui.
4287 widget.
4288 ```
4289 as well as the following security preferences:
4290 | Preference | Type | Default
4291 | --- | --- | ---
4292 | security.default_personal_cert | string | Ask Every Time
4293 | &nbsp;&nbsp;&nbsp;&nbsp;If set to Select Automatically, Firefox automatically chooses the default personal certificate.
4294 | security.insecure_connection_text.enabled | bool | false
4295 | &nbsp;&nbsp;&nbsp;&nbsp;If set to true, adds the words "Not Secure" for insecure sites.
4296 | security.insecure_connection_text.pbmode.enabled | bool | false
4297 | &nbsp;&nbsp;&nbsp;&nbsp;If set to true, adds the words "Not Secure" for insecure sites in private browsing.
4298 | security.insecure_field_warning.contextual.enabled | bool | true
4299 | &nbsp;&nbsp;&nbsp;&nbsp;If set to false, remove the warning for inscure login fields.
4300 | security.mixed_content.block_active_content | boolean | true
4301 | &nbsp;&nbsp;&nbsp;&nbsp;If false, mixed active content (HTTP and HTTPS) is not blocked.
4302 | security.osclientcerts.autoload | boolean | false
4303 | &nbsp;&nbsp;&nbsp;&nbsp;If true, client certificates are loaded from the operating system certificate store.
4304 | security.ssl.errorReporting.enabled | boolean | true
4305 | &nbsp;&nbsp;&nbsp;&nbsp;If false, SSL errors cannot be sent to Mozilla.
4306 | security.tls.enable_0rtt_data | boolean | true
4307 | &nbsp;&nbsp;&nbsp;&nbsp;If false, TLS early data is turned off (Firefox 93, Firefox 91.2, Firefox 78.15).
4308 | security.tls.hello_downgrade_check | boolean | true
4309 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the TLS 1.3 downgrade check is disabled.
4310 | security.tls.version.enable-deprecated | boolean | false
4311 | &nbsp;&nbsp;&nbsp;&nbsp;If true, browser will accept TLS 1.0. and TLS 1.1 (Firefox 86, Firefox 78.8).
4312 | security.warn_submit_secure_to_insecure | boolean | true
4313 | &nbsp;&nbsp;&nbsp;&nbsp;If false, no warning is shown when submitting a form from https to http.
4314 &nbsp;
4315
4316 Using the preference as the key, set the `Value` to the corresponding preference value.
4317
4318 `Status` can be "default", "locked", "user" or "clear"
4319
4320 Default preferences can be modified by the user.
4321
4322 If a value is locked, it is also set as the default.
4323
4324 User preferences persist across invocations of Firefox. It is the equivalent of a user setting the preference. They are most useful when a preference is needed very early in startup so it can't be set as default by policy. An example of this is ```toolkit.legacyUserProfileCustomizations.stylesheets```.
4325
4326 User preferences persist even if the policy is removed, so if you need to remove them, you should use the clear policy.
4327
4328 See the examples below for more detail.
4329
4330 IMPORTANT: Make sure you're only setting a particular preference using this mechanism and not some other way.
4331
4332 Status
4333 **Compatibility:** Firefox 81, Firefox ESR 78.3\
4334 **CCK2 Equivalent:** `preferences`\
4335 **Preferences Affected:** Many
4336
4337 #### Windows (GPO)
4338 Software\Policies\Mozilla\Firefox\Preferences (REG_MULTI_SZ) =
4339 ```
4340 {
4341   "accessibility.force_disabled": {
4342     "Value": 1,
4343     "Status": "default"
4344   },
4345   "browser.cache.disk.parent_directory": {
4346     "Value": "SOME_NATIVE_PATH",
4347     "Status": "user"
4348   },
4349   "browser.tabs.warnOnClose": {
4350     "Value": false,
4351     "Status": "locked"
4352   }
4353 }
4354 ```
4355 #### Windows (Intune)
4356 OMA-URI:
4357 ```
4358 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Preferences
4359 ```
4360 Value (string):
4361 ```
4362 <enabled/>
4363 <data id="JSON" value='
4364 {
4365   "accessibility.force_disabled": {
4366     "Value": 1,
4367     "Status": "default"
4368   },
4369   "browser.cache.disk.parent_directory": {
4370     "Value": "SOME_NATIVE_PATH",
4371     "Status": "user"
4372   },
4373   "browser.tabs.warnOnClose": {
4374     "Value": false,
4375     "Status": "locked"
4376   }
4377 }'/>
4378 ```
4379 #### macOS
4380 ```
4381 <dict>
4382   <key>Preferences</key>
4383   <dict>
4384     <key>accessibility.force_disabled</key>
4385     <dict>
4386       <key>Value</key>
4387       <integer>1</integer>
4388       <key>Status</key>
4389       <string>default</string>
4390     </dict>
4391     <key>browser.cache.disk.parent_directory</key>
4392     <dict>
4393       <key>Value</key>
4394       <string>SOME_NATIVE_PATH</string>
4395       <key>Status</key>
4396       <string>user</string>
4397     </dict>
4398     <key>browser.tabs.warnOnClose</key>
4399     <dict>
4400       <key>Value</key>
4401       <false/>
4402       <key>Status</key>
4403       <string>locked</string>
4404     </dict>
4405   </dict>
4406 </dict>
4407 ```
4408 #### policies.json
4409 ```
4410 {
4411   "policies": {
4412     "Preferences": {
4413       "accessibility.force_disabled": {
4414         "Value": 1,
4415         "Status": "default"
4416       },
4417       "browser.cache.disk.parent_directory": {
4418         "Value": "SOME_NATIVE_PATH",
4419         "Status": "user"
4420       },
4421       "browser.tabs.warnOnClose": {
4422         "Value": false,
4423         "Status": "locked"
4424       }
4425     }
4426   }
4427 }
4428 ```
4429 ### Preferences (Deprecated)
4430 Set and lock certain preferences.
4431
4432 **Compatibility:** See below\
4433 **CCK2 Equivalent:** `preferences`\
4434 **Preferences Affected:** See below
4435
4436 | Preference | Type | Compatibility | Default
4437 | --- | --- | --- | ---
4438 | accessibility.force_disabled | integer | Firefox 70, Firefox ESR 68.2 | 0
4439 | &nbsp;&nbsp;&nbsp;&nbsp;If set to 1, platform accessibility is disabled.
4440 | app.update.auto (Deprecated - Switch to AppAutoUpdate policy) | boolean | Firefox 68, Firefox ESR 68 | true
4441 | &nbsp;&nbsp;&nbsp;&nbsp;If false, Firefox doesn't automatically install update.
4442 | browser.bookmarks.autoExportHTML | boolean | Firefox 70, Firefox ESR 68.2 | false
4443 | &nbsp;&nbsp;&nbsp;&nbsp;If true, bookmarks are exported on shutdown.
4444 | browser.bookmarks.file | string | Firefox 70, Firefox ESR 68.2 | N/A
4445 | &nbsp;&nbsp;&nbsp;&nbsp;If set, the name of the file where bookmarks are exported and imported.
4446 | browser.bookmarks.restore_default_bookmarks | boolean | Firefox 70, Firefox ESR 68.2 | N/A
4447 | &nbsp;&nbsp;&nbsp;&nbsp;If true, bookmarks are restored to their defaults.
4448 | browser.cache.disk.enable | boolean | Firefox 68, Firefox ESR 68 | true
4449 | &nbsp;&nbsp;&nbsp;&nbsp;If false, don't store cache on the hard drive.
4450 | ~browser.cache.disk.parent_directory~ | string | Firefox 68, Firefox ESR 68 | Profile temporary directory
4451 | &nbsp;&nbsp;&nbsp;&nbsp;~If set, changes the location of the disk cache.~ This policy doesn't work. It's being worked on.
4452 | browser.fixup.dns_first_for_single_words | boolean | Firefox 68, Firefox ESR 68 | false
4453 | &nbsp;&nbsp;&nbsp;&nbsp;If true, single words are sent to DNS, not directly to search.
4454 | browser.newtabpage.activity-stream.default.sites | string | Firefox 72, ESR 68.4 | Locale dependent
4455 | &nbsp;&nbsp;&nbsp;&nbsp;If set, a list of URLs to use as the default top sites on the new tab page. Due to Firefox limitations, search sites can't be added. In addition, sites with the same name but different TLDs (example.org/example.com) will not display properly.
4456 | browser.places.importBookmarksHTML | boolean | Firefox 70, Firefox ESR 68.2
4457 | &nbsp;&nbsp;&nbsp;&nbsp;If true, bookmarks are always imported on startup.
4458 | browser.safebrowsing.phishing.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
4459 | &nbsp;&nbsp;&nbsp;&nbsp;If false, phishing protection is not enabled (Not recommended)
4460 | browser.safebrowsing.malware.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
4461 | &nbsp;&nbsp;&nbsp;&nbsp;If false, malware protection is not enabled (Not recommended)
4462 | browser.search.update | boolean | Firefox 68, Firefox ESR 68 | true
4463 | &nbsp;&nbsp;&nbsp;&nbsp;If false, updates for search engines are not checked.
4464 | browser.slowStartup.notificationDisabled | boolean | Firefox 70, Firefox ESR 68.2 | false
4465 | &nbsp;&nbsp;&nbsp;&nbsp;If true, a notification isn't shown if startup is slow.
4466 | browser.tabs.warnOnClose | boolean | Firefox 68, Firefox ESR 68 | true
4467 | &nbsp;&nbsp;&nbsp;&nbsp;If false, there is no warning when the browser is closed.
4468 | browser.taskbar.previews.enable | boolean | Firefox 70, Firefox ESR 68.2 (Windows only) | false
4469 | &nbsp;&nbsp;&nbsp;&nbsp;If true, tab previews are shown in the Windows taskbar.
4470 | browser.urlbar.suggest.bookmark | boolean | Firefox 68, Firefox ESR 68 | true
4471 | &nbsp;&nbsp;&nbsp;&nbsp;If false, bookmarks aren't suggested when typing in the URL bar.
4472 | browser.urlbar.suggest.history | boolean | Firefox 68, Firefox ESR 68 | true
4473 | &nbsp;&nbsp;&nbsp;&nbsp;If false, history isn't suggested when typing in the URL bar.
4474 | browser.urlbar.suggest.openpage | boolean | Firefox 68, Firefox ESR 68 | true
4475 | &nbsp;&nbsp;&nbsp;&nbsp;If false, open tabs aren't suggested when typing in the URL bar.
4476 | datareporting.policy.dataSubmissionPolicyBypassNotification | boolean | Firefox 68, Firefox ESR 68 | false
4477 | &nbsp;&nbsp;&nbsp;&nbsp;If true, don't show the privacy policy tab on first run.
4478 | dom.allow_scripts_to_close_windows | boolean | Firefox 70, Firefox ESR 68.2 | false
4479 | &nbsp;&nbsp;&nbsp;&nbsp;If false, web page can close windows.
4480 | dom.disable_window_flip | boolean | Firefox 68, Firefox ESR 68 | true
4481 | &nbsp;&nbsp;&nbsp;&nbsp;If false, web pages can focus and activate windows.
4482 | dom.disable_window_move_resize | boolean | Firefox 68, Firefox ESR 68 | false
4483 | &nbsp;&nbsp;&nbsp;&nbsp;If true, web pages can't move or resize windows.
4484 | dom.event.contextmenu.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4485 | &nbsp;&nbsp;&nbsp;&nbsp;If false, web pages can't override context menus.
4486 | dom.keyboardevent.keypress.hack.dispatch_non_printable_keys.addl | string | Firefox 68, Firefox ESR 68 | N/A
4487 | &nbsp;&nbsp;&nbsp;&nbsp;See https://support.mozilla.org/en-US/kb/dom-events-changes-introduced-firefox-66
4488 | dom.keyboardevent.keypress.hack.use_legacy_keycode_and_charcode.addl | string | Firefox 68, Firefox ESR 68 | N/A
4489 | &nbsp;&nbsp;&nbsp;&nbsp;See https://support.mozilla.org/en-US/kb/dom-events-changes-introduced-firefox-66
4490 | dom.xmldocument.load.enabled | boolean | Firefox ESR 68.5 | true.
4491 | &nbsp;&nbsp;&nbsp;&nbsp;If false, XMLDocument.load is not available.
4492 | dom.xmldocument.async.enabled | boolean | Firefox ESR 68.5 | true
4493 | &nbsp;&nbsp;&nbsp;&nbsp;If false, XMLDocument.async is not available.
4494 | extensions.blocklist.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
4495 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the extensions blocklist is not used (Not recommended)
4496 | extensions.getAddons.showPane | boolean | Firefox 68, Firefox ESR 68 | N/A
4497 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the Recommendations tab is not displayed in the Add-ons Manager.
4498 | extensions.htmlaboutaddons.recommendations.enabled | boolean | Firefox 72, Firefox ESR 68.4 | true
4499 | &nbsp;&nbsp;&nbsp;&nbsp;If false, recommendations are not shown on the Extensions tab in the Add-ons Manager.
4500 | geo.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
4501 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the geolocation API is disabled. | Language dependent
4502 | intl.accept_languages | string | Firefox 70, Firefox ESR 68.2
4503 | &nbsp;&nbsp;&nbsp;&nbsp;If set, preferred language for web pages.
4504 | media.eme.enabled (Deprecated - Switch to EncryptedMediaExtensions policy) | boolean | Firefox 70, Firefox ESR 68.2 | true
4505 | &nbsp;&nbsp;&nbsp;&nbsp;If false, Encrypted Media Extensions are not enabled.
4506 | media.gmp-gmpopenh264.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4507 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the OpenH264  plugin is not downloaded.
4508 | media.gmp-widevinecdm.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4509 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the Widevine plugin is not downloaded.
4510 | media.peerconnection.enabled | boolean | Firefox 72, Firefox ESR 68.4 | true
4511 | &nbsp;&nbsp;&nbsp;&nbsp;If false, WebRTC is disabled
4512 | media.peerconnection.ice.obfuscate_host_addresses.whitelist (Deprecated) | string | Firefox 72, Firefox ESR 68.4 | N/A
4513 | &nbsp;&nbsp;&nbsp;&nbsp;If set, a list of domains for which mDNS hostname obfuscation is
4514 disabled
4515 | media.peerconnection.ice.obfuscate_host_addresses.blocklist | string | Firefox 79, Firefox ESR 78.1 | N/A
4516 | &nbsp;&nbsp;&nbsp;&nbsp;If set, a list of domains for which mDNS hostname obfuscation is
4517 disabled
4518 | network.dns.disableIPv6 | boolean | Firefox 68, Firefox ESR 68 | false
4519 | &nbsp;&nbsp;&nbsp;&nbsp;If true, IPv6 DNS lokoups are disabled.
4520 | network.IDN_show_punycode | boolean | Firefox 68, Firefox ESR 68 | false
4521 | &nbsp;&nbsp;&nbsp;&nbsp;If true, display the punycode version of internationalized domain names.
4522 | places.history.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4523 | &nbsp;&nbsp;&nbsp;&nbsp;If false, history is not enabled.
4524 | print.save_print_settings | boolean | Firefox 70, Firefox ESR 68.2 | true
4525 | &nbsp;&nbsp;&nbsp;&nbsp;If false, print settings are not saved between jobs.
4526 | security.default_personal_cert | string | Firefox 68, Firefox ESR 68 | Ask Every Time
4527 | &nbsp;&nbsp;&nbsp;&nbsp;If set to Select Automatically, Firefox automatically chooses the default personal certificate.
4528 | security.mixed_content.block_active_content | boolean | Firefox 70, Firefox ESR 68.2 | true
4529 | &nbsp;&nbsp;&nbsp;&nbsp;If false, mixed active content (HTTP and HTTPS) is not blocked.
4530 | security.osclientcerts.autoload | boolean | Firefox 72 (Windows), Firefox 75 (macOS)  | false
4531 | &nbsp;&nbsp;&nbsp;&nbsp;If true, client certificates are loaded from the operating system certificate store.
4532 | security.ssl.errorReporting.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4533 | &nbsp;&nbsp;&nbsp;&nbsp;If false, SSL errors cannot be sent to Mozilla.
4534 | security.tls.hello_downgrade_check | boolean | Firefox 72, Firefox ESR 68.4 | true
4535 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the TLS 1.3 downgrade check is disabled.
4536 | ui.key.menuAccessKeyFocuses | boolean | Firefox 68, Firefox ESR 68 | true
4537 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the Alt key doesn't show the menubar on Windows.
4538 | widget.content.gtk-theme-override | string | Firefox 72, Firefox ESR 68.4 (Linux only) | N/A
4539 | &nbsp;&nbsp;&nbsp;&nbsp;If set, overrides the GTK theme for widgets.
4540 #### Windows (GPO)
4541 ```
4542 Software\Policies\Mozilla\Firefox\Preferences\boolean_preference_name = 0x1 | 0x0
4543 Software\Policies\Mozilla\Firefox\Preferences\string_preference_name = "string_value"
4544 ```
4545 #### Windows (Intune)
4546 OMA-URI: (periods are replaced by underscores)
4547 ```
4548 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Preferences/boolean_preference_name
4549 ```
4550 Value (string):
4551 ```
4552 <enabled/> or <disabled/>
4553 ```
4554 OMA-URI: (periods are replaced by underscores)
4555 ```
4556 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Preferences/string_preference_name
4557 ```
4558 Value (string):
4559 ```
4560 <enabled/>
4561 <data id="Preferences_String" value="string_value"/>
4562 ```
4563 #### macOS
4564 ```
4565 <dict>
4566   <key>Preferences</key>
4567   <dict>
4568     <key>boolean_preference_name</key>
4569     <true/> | <false/>
4570     <key>string_preference_name</key>
4571     <string>string_value</string>
4572   </dict>
4573 </dict>
4574 ```
4575 #### policies.json
4576 ```
4577 {
4578   "policies": {
4579     "Preferences": {
4580       "boolean_preference_name": true | false,
4581       "string_preference_name": "string_value"
4582     }
4583   }
4584 }
4585 ```
4586 ### PrimaryPassword
4587 Require or prevent using a primary (formerly master) password.
4588
4589 If this value is true, a primary password is required. If this value is false, it works the same as if [`DisableMasterPasswordCreation`](#disablemasterpasswordcreation) was true and removes the primary password functionality.
4590
4591 If both DisableMasterPasswordCreation and PrimaryPassword are used, DisableMasterPasswordCreation takes precedent.
4592
4593 **Compatibility:** Firefox 79, Firefox ESR 78.1\
4594 **CCK2 Equivalent:** `noMasterPassword`\
4595 **Preferences Affected:** N/A
4596
4597 #### Windows (GPO)
4598 ```
4599 Software\Policies\Mozilla\Firefox\PrimaryPassword = 0x1 | 0x0
4600 ```
4601 #### Windows (Intune)
4602 OMA-URI:
4603 ```
4604 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PrimaryPassword
4605 ```
4606 Value (string):
4607 ```
4608 <enabled/> or <disabled/>
4609 ```
4610 #### macOS
4611 ```
4612 <dict>
4613   <key>PrimaryPassword</key>
4614   <true/> | <false/>
4615 </dict>
4616 ```
4617 #### policies.json
4618 ```
4619 {
4620   "policies": {
4621     "PrimaryPassword": true | false
4622   }
4623 }
4624 ```
4625 ### PromptForDownloadLocation
4626 Ask where to save each file before downloading.
4627
4628 **Compatibility:** Firefox 68, Firefox ESR 68\
4629 **CCK2 Equivalent:** N/A\
4630 **Preferences Affected:** `browser.download.useDownloadDir`
4631
4632 #### Windows (GPO)
4633 ```
4634 Software\Policies\Mozilla\Firefox\PromptForDownloadLocation = 0x1 | 0x0
4635 ```
4636 #### Windows (Intune)
4637 OMA-URI:
4638 ```
4639 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PromptForDownloadLocation
4640 ```
4641 Value (string):
4642 ```
4643 <enabled/> or <disabled/>
4644 ```
4645 #### macOS
4646 ```
4647 <dict>
4648   <key>PromptForDownloadLocation</key>
4649   <true/> | <false/>
4650 </dict>
4651 ```
4652 #### policies.json
4653 ```
4654 {
4655   "policies": {
4656     "PromptForDownloadLocation": true | false
4657   }
4658 }
4659 ```
4660 ### Proxy
4661 Configure proxy settings. These settings correspond to the connection settings in Firefox preferences.
4662 To specify ports, append them to the hostnames with a colon (:).
4663
4664 `Mode` is the proxy method being used.
4665
4666 `Locked` is whether or not proxy settings can be changed.
4667
4668 `HTTPProxy` is the HTTP proxy server.
4669
4670 `UseHTTPProxyForAllProtocols` is whether or not the HTTP proxy should be used for all other proxies.
4671
4672 `SSLProxy` is the SSL proxy server.
4673
4674 `FTPProxy` is the FTP proxy server.
4675
4676 `SOCKSProxy` is the SOCKS proxy server
4677
4678 `SOCKSVersion` is the SOCKS version (4 or 5)
4679
4680 `Passthrough` is list of hostnames or IP addresses that will not be proxied. Use `<local>` to bypass proxying for all hostnames which do not contain periods.
4681
4682 `AutoConfigURL` is a  URL for proxy configuration (only used if Mode is autoConfig).
4683
4684 `AutoLogin` means do not prompt for authentication if password is saved.
4685
4686 `UseProxyForDNS` to use proxy DNS when using SOCKS v5.
4687
4688 **Compatibility:** Firefox 60, Firefox ESR 60\
4689 **CCK2 Equivalent:** `networkProxy*`\
4690 **Preferences Affected:** `network.proxy.type`, `network.proxy.autoconfig_url`, `network.proxy.socks_remote_dns`, `signon.autologin.proxy`, `network.proxy.socks_version`, `network.proxy.no_proxies_on`, `network.proxy.share_proxy_settings`, `network.proxy.http`, `network.proxy.http_port`, `network.proxy.ftp`, `network.proxy.ftp_port`, `network.proxy.ssl`, `network.proxy.ssl_port`, `network.proxy.socks`, `network.proxy.socks_port`
4691
4692 #### Windows (GPO)
4693 ```
4694 Software\Policies\Mozilla\Firefox\Proxy\Mode = "none" | "system" | "manual" | "autoDetect" | "autoConfig"
4695 Software\Policies\Mozilla\Firefox\Proxy\Locked = 0x1 | 0x0
4696 Software\Policies\Mozilla\Firefox\=Proxy\HTTPProxy = https://httpproxy.example.com
4697 Software\Policies\Mozilla\Firefox\Proxy\UseHTTPProxyForAllProtocols = 0x1 | 0x0
4698 Software\Policies\Mozilla\Firefox\Proxy\SSLProxy = https://sslproxy.example.com
4699 Software\Policies\Mozilla\Firefox\Proxy\FTPProxy = https://ftpproxy.example.com
4700 Software\Policies\Mozilla\Firefox\Proxy\SOCKSProxy = https://socksproxy.example.com
4701 Software\Policies\Mozilla\Firefox\Proxy\SOCKSVersion = 0x4 | 0x5
4702 Software\Policies\Mozilla\Firefox\Proxy\Passthrough = <local>
4703 Software\Policies\Mozilla\Firefox\Proxy\AutoConfigURL = URL_TO_AUTOCONFIG
4704 Software\Policies\Mozilla\Firefox\Proxy\AutoLogin = 0x1 | 0x0
4705 Software\Policies\Mozilla\Firefox\Proxy\UseProxyForDNS = 0x1 | 0x0
4706 ```
4707 #### Windows (Intune)
4708 OMA-URI:
4709 ```
4710 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Proxy
4711 ```
4712 Value (string):
4713 ```
4714 <enabled/>
4715 <data id="ProxyLocked" value="true | false"/>
4716 <data id="ConnectionType" value="none | system | manual | autoDetect | autoConfig"/>
4717 <data id="HTTPProxy" value="https://httpproxy.example.com"/>
4718 <data id="UseHTTPProxyForAllProtocols" value="true | false"/>
4719 <data id="SSLProxy" value="https://sslproxy.example.com"/>
4720 <data id="FTPProxy" value="https://ftpproxy.example.com"/>
4721 <data id="SOCKSProxy" value="https://socksproxy.example.com"/>
4722 <data id="SOCKSVersion" value="4 | 5"/>
4723 <data id="AutoConfigURL" value="URL_TO_AUTOCONFIG"/>
4724 <data id="Passthrough" value="<local>"/>
4725 <data id="AutoLogin" value="true | false"/>
4726 <data id="UseProxyForDNS" value="true | false"/>
4727 ```
4728 #### macOS
4729 ```
4730 <dict>
4731   <key>Proxy</key>
4732   <dict>
4733     <key>Mode</key>
4734     <string>none | system | manual | autoDetect | autoConfig</string>
4735     <key>Locked</key>
4736     <true> | </false>
4737     <key>HTTPProxy</key>
4738     <string>https://httpproxy.example.com</string>
4739     <key>UseHTTPProxyForAllProtocols</key>
4740     <true> | </false>
4741     <key>SSLProxy</key>
4742     <string>https://sslproxy.example.com</string>
4743     <key>FTPProxy</key>
4744     <string>https://ftpproxy.example.com</string>
4745     <key>SOCKSProxy</key>
4746     <string>https://socksproxy.example.com</string>
4747     <key>SOCKSVersion</key>
4748     <string>4 | 5</string>
4749     <key>Passthrough</key>
4750     <string>&lt;local>&gt;</string>
4751     <key>AutoConfigURL</key>
4752     <string>URL_TO_AUTOCONFIG</string>
4753     <key>AutoLogin</key>
4754     <true> | </false>
4755     <key>UseProxyForDNS</key>
4756     <true> | </false>
4757   </dict>
4758 </dict>
4759 ```
4760 #### policies.json
4761 ```
4762 {
4763   "policies": {
4764     "Proxy": {
4765       "Mode": "none" | "system" | "manual" | "autoDetect" | "autoConfig",
4766       "Locked": true | false,
4767       "HTTPProxy": "hostname",
4768       "UseHTTPProxyForAllProtocols": true | false,
4769       "SSLProxy": "hostname",
4770       "FTPProxy": "hostname",
4771       "SOCKSProxy": "hostname",
4772       "SOCKSVersion": 4 | 5,
4773       "Passthrough": "<local>",
4774       "AutoConfigURL": "URL_TO_AUTOCONFIG",
4775       "AutoLogin": true | false,
4776       "UseProxyForDNS": true | false
4777     }
4778   }
4779 }
4780 ```
4781 ### RequestedLocales
4782 Set the the list of requested locales for the application in order of preference. It will cause the corresponding language pack to become active.
4783
4784 Note: For Firefox 68, this can now be a string so that you can specify an empty value.
4785
4786 **Compatibility:** Firefox 64, Firefox ESR 60.4, Updated in Firefox 68, Firefox ESR 68\
4787 **CCK2 Equivalent:** N/A\
4788 **Preferences Affected:** N/A
4789 #### Windows (GPO)
4790 ```
4791 Software\Policies\Mozilla\Firefox\RequestedLocales\1 = "de"
4792 Software\Policies\Mozilla\Firefox\RequestedLocales\2 = "en-US"
4793
4794 or
4795
4796 Software\Policies\Mozilla\Firefox\RequestedLocales = "de,en-US"
4797 ```
4798 #### Windows (Intune)
4799 OMA-URI:
4800 ```
4801 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/RequestedLocalesString
4802 ```
4803 Value (string):
4804 ```
4805 <enabled/>
4806 <data id="Preferences_String" value="de,en-US"/>
4807 ```
4808 #### macOS
4809 ```
4810 <dict>
4811   <key>RequestedLocales</key>
4812   <array>
4813     <string>de</string>
4814     <string>en-US</string>
4815   </array>
4816 </dict>
4817
4818 or
4819
4820 <dict>
4821   <key>RequestedLocales</key>
4822   <string>de,en-US</string>
4823 </dict>
4824
4825 ```
4826 #### policies.json
4827 ```
4828 {
4829   "policies": {
4830     "RequestedLocales": ["de", "en-US"]
4831   }
4832 }
4833
4834 or
4835
4836 {
4837   "policies": {
4838     "RequestedLocales": "de,en-US"
4839   }
4840 }
4841 ```
4842 <a name="SanitizeOnShutdown"></a>
4843
4844 ### SanitizeOnShutdown (Selective)
4845 Clear data on shutdown. Choose from Cache, Cookies, Download History, Form & Search History, Browsing History, Active Logins, Site Preferences and Offline Website Data.
4846
4847 Previously, these values were always locked. Starting with Firefox 74 and Firefox ESR 68.6, you can use the `Locked` option to either keep the values unlocked (set it to false), or lock only the values you set (set it to true). If you want the old behavior of locking everything, do not set `Locked` at all.
4848
4849 **Compatibility:** Firefox 68, Firefox ESR 68 (Locked added in 74/68.6)\
4850 **CCK2 Equivalent:** N/A\
4851 **Preferences Affected:** `privacy.sanitize.sanitizeOnShutdown`, `privacy.clearOnShutdown.cache`, `privacy.clearOnShutdown.cookies`, `privacy.clearOnShutdown.downloads`, `privacy.clearOnShutdown.formdata`, `privacy.clearOnShutdown.history`, `privacy.clearOnShutdown.sessions`, `privacy.clearOnShutdown.siteSettings`, `privacy.clearOnShutdown.offlineApps`
4852 #### Windows (GPO)
4853 ```
4854 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Cache = 0x1 | 0x0
4855 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Cookies = 0x1 | 0x0
4856 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Downloads = 0x1 | 0x0
4857 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\FormData = 0x1 | 0x0
4858 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\History = 0x1 | 0x0
4859 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Sessions = 0x1 | 0x0
4860 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\SiteSettings = 0x1 | 0x0
4861 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\OfflineApps = 0x1 | 0x0
4862 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Locked = 0x1 | 0x0
4863 ```
4864 #### Windows (Intune)
4865 OMA-URI:
4866 ```
4867 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/A_SanitizeOnShutdown_Cache
4868 ```
4869 Value (string):
4870 ```
4871 <enabled/> or <disabled/>
4872 ```
4873 OMA-URI:
4874 ```
4875 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/B_SanitizeOnShutdown_Cookies
4876 ```
4877 Value (string):
4878 ```
4879 <enabled/> or <disabled/>
4880 ```
4881 OMA-URI:
4882 ```
4883 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/C_SanitizeOnShutdown_Downloads
4884 ```
4885 Value (string):
4886 ```
4887 <enabled/> or <disabled/>
4888 ```
4889 OMA-URI:
4890 ```
4891 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/D_SanitizeOnShutdown_FormData
4892 ```
4893 Value (string):
4894 ```
4895 <enabled/> or <disabled/>
4896 ```
4897 OMA-URI:
4898 ```
4899 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/E_SanitizeOnShutdown_History
4900 ```
4901 Value (string):
4902 ```
4903 <enabled/> or <disabled/>
4904 ```
4905 OMA-URI:
4906 ```
4907 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/F_SanitizeOnShutdown_Sessions
4908 ```
4909 Value (string):
4910 ```
4911 <enabled/> or <disabled/>
4912 ```
4913 OMA-URI:
4914 ```
4915 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/G_SanitizeOnShutdown_SiteSettings
4916 ```
4917 Value (string):
4918 ```
4919 <enabled/> or <disabled/>
4920 ```
4921 OMA-URI:
4922 ```
4923 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/H_SanitizeOnShutdown_OfflineApps
4924 ```
4925 Value (string):
4926 ```
4927 <enabled/> or <disabled/>
4928 ```
4929 OMA-URI:
4930 ```
4931 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/I_SanitizeOnShutdown_Locked
4932 ```
4933 Value (string):
4934 ```
4935 <enabled/> or <disabled/>
4936 ```
4937 #### macOS
4938 ```
4939 <dict>
4940   <key>SanitizeOnShutdown</key>
4941   <dict>
4942     <key>Cache</key>
4943     <true/> | <false/>
4944     <key>Cookies</key>
4945     <true/> | <false/>
4946     <key>Downloads</key>
4947     <true/> | <false/>
4948     <key>FormData</key>
4949     <true/> | <false/>
4950     <key>History</key>
4951     <true/> | <false/>
4952     <key>Sessions</key>
4953     <true/> | <false/>
4954     <key>SiteSettings</key>
4955     <true/> | <false/>
4956     <key>OfflineApps</key>
4957     <true/> | <false/>
4958     <key>Locked</key>
4959     <true/> | <false/>
4960   </dict>
4961 </dict>
4962 ```
4963 #### policies.json
4964 ```
4965 {
4966   "policies": {
4967     "SanitizeOnShutdown": {
4968       "Cache": true | false,
4969       "Cookies": true | false,
4970       "Downloads": true | false,
4971       "FormData": true | false,
4972       "History": true | false,
4973       "Sessions": true | false,
4974       "SiteSettings": true | false,
4975       "OfflineApps": true | false,
4976       "Locked": true | false
4977     }
4978   }
4979 }
4980 ```
4981 ### SanitizeOnShutdown (All)
4982 Clear all data on shutdown, including Browsing & Download History, Cookies, Active Logins, Cache, Form & Search History, Site Preferences and Offline Website Data.
4983
4984 **Compatibility:** Firefox 60, Firefox ESR 60\
4985 **CCK2 Equivalent:** N/A\
4986 **Preferences Affected:** `privacy.sanitize.sanitizeOnShutdown`, `privacy.clearOnShutdown.cache`, `privacy.clearOnShutdown.cookies`, `privacy.clearOnShutdown.downloads`, `privacy.clearOnShutdown.formdata`, `privacy.clearOnShutdown.history`, `privacy.clearOnShutdown.sessions`, `privacy.clearOnShutdown.siteSettings`, `privacy.clearOnShutdown.offlineApps`
4987 #### Windows (GPO)
4988 ```
4989 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown = 0x1 | 0x0
4990 ```
4991 #### Windows (Intune)
4992 OMA-URI:
4993 ```
4994 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/C_SanitizeOnShutdown
4995 ```
4996 Value (string):
4997 ```
4998 <enabled/> or <disabled/>
4999 ```
5000 #### macOS
5001 ```
5002 <dict>
5003   <key>SanitizeOnShutdown</key>
5004   <true/> | <false/>
5005 </dict>
5006 ```
5007 #### policies.json
5008 ```
5009 {
5010   "policies": {
5011     "SanitizeOnShutdown": true | false
5012   }
5013 }
5014 ```
5015 ### SearchBar
5016 Set whether or not search bar is displayed.
5017
5018 **Compatibility:** Firefox 60, Firefox ESR 60\
5019 **CCK2 Equivalent:** `showSearchBar`\
5020 **Preferences Affected:** N/A
5021
5022 #### Windows (GPO)
5023 ```
5024 Software\Policies\Mozilla\Firefox\SearchBar = "unified" | "separate"
5025 ```
5026
5027 #### Windows (Intune)
5028 OMA-URI:
5029 ```
5030 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SearchBar
5031 ```
5032 Value (string):
5033 ```
5034 <enabled/>
5035 <data id="SearchBar" value="unified | separate"/>
5036 ```
5037 #### macOS
5038 ```
5039 <dict>
5040   <key>SearchBar</key>
5041   <string>unified | separate</string>
5042 </dict>
5043 ```
5044 #### policies.json
5045 ```
5046 {
5047   "policies": {
5048     "SearchBar": "unified" | "separate"
5049   }
5050 }
5051 ```
5052 <a name="SearchEngines"></a>
5053
5054 ### SearchEngines (This policy is only available on the ESR.)
5055
5056 ### SearchEngines | Add
5057
5058 Add new search engines. Although there are only five engines available in the ADMX template, there is no limit. To add more in the ADMX template, you can duplicate the XML.
5059
5060 This policy is only available on the ESR. `Name` and `URLTemplate` are required.
5061
5062 `Name` is the name of the search engine.
5063
5064 `URLTemplate` is the search URL with {searchTerms} to substitute for the search term.
5065
5066 `Method` is either GET or POST
5067
5068 `IconURL` is a URL for the icon to use.
5069
5070 `Alias` is a keyword to use for the engine.
5071
5072 `Description` is a description of the search engine.
5073
5074 `PostData` is the POST data as name value pairs separated by &.
5075
5076 `SuggestURLTemplate` is a search suggestions URL with {searchTerms} to substitute for the search term.
5077
5078 `Encoding` is the query charset for the engine. It defaults to UTF-8.
5079
5080 **Compatibility:** Firefox ESR 60 (POST support in Firefox ESR 68, Encoding support in Firefox 91)\
5081 **CCK2 Equivalent:** `searchplugins`\
5082 **Preferences Affected:** N/A
5083
5084 #### Windows (GPO)
5085 ```
5086 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Name = "Example1"
5087 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\URLTemplate = "https://www.example.org/q={searchTerms}"
5088 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Method = "GET" | "POST"
5089 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\IconURL = "https://www.example.org/favicon.ico"
5090 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Alias = "example"
5091 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Description = "Example Description"
5092 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\SuggestURLTemplate = "https://www.example.org/suggestions/q={searchTerms}"
5093 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\PostData = "name=value&q={searchTerms}"
5094 ```
5095 #### Windows (Intune)
5096 OMA-URI:
5097 ```
5098 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_1
5099 ```
5100 Value (string):
5101 ```
5102 <enabled/>
5103 <data id="SearchEngine_Name" value="Example1"/>
5104 <data id="SearchEngine_URLTemplate" value="https://www.example.org/q={searchTerms"/>
5105 <data id="SearchEngine_Method" value="GET | POST"/>
5106 <data id="SearchEngine_IconURL" value="https://www.example.org/favicon.ico"/>
5107 <data id="SearchEngine_Alias" value="example"/>
5108 <data id="SearchEngine_Description" value="Example Description"/>
5109 <data id="SearchEngine_SuggestURLTemplate" value="https://www.example.org/suggestions/q={searchTerms}"/>
5110 <data id="SearchEngine_PostData" value="name=value&amp;q={searchTerms}"/>
5111 ```
5112 #### macOS
5113 ```
5114 <dict>
5115   <key>SearchEngines</key>
5116   <dict>
5117     <key>Add</key>
5118     <array>
5119       <dict>
5120         <key>Name</key>
5121         <string>Example1</string>
5122         <key>URLTemplate</key>
5123         <string>https://www.example.org/q={searchTerms}</string>
5124         <key>Method</key>
5125         <string>GET | POST </string>
5126         <key>IconURL</key>
5127         <string>https://www.example.org/favicon.ico</string>
5128         <key>Alias</key>
5129         <string>example</string>
5130         <key>Description</key>
5131         <string>Example Description</string>
5132         <key>SuggestURLTemplate</key>
5133         <string>https://www.example.org/suggestions/q={searchTerms}</string>
5134         <key>PostData</key>
5135         <string>name=value&q={searchTerms}</string>
5136       </dict>
5137     <array>
5138   </dict>
5139 </dict>
5140 ```
5141 #### policies.json
5142 ```
5143 {
5144   "policies": {
5145     "SearchEngines": {
5146       "Add": [
5147         {
5148           "Name": "Example1",
5149           "URLTemplate": "https://www.example.org/q={searchTerms}",
5150           "Method": "GET" | "POST",
5151           "IconURL": "https://www.example.org/favicon.ico",
5152           "Alias": "example",
5153           "Description": "Description",
5154           "PostData": "name=value&q={searchTerms}",
5155           "SuggestURLTemplate": "https://www.example.org/suggestions/q={searchTerms}"
5156         }
5157       ]
5158     }
5159   }
5160 }
5161 ```
5162 ### SearchEngines | Default
5163
5164 Set the default search engine. This policy is only available on the ESR.
5165
5166 **Compatibility:** Firefox ESR 60\
5167 **CCK2 Equivalent:** `defaultSearchEngine`\
5168 **Preferences Affected:** N/A
5169
5170 #### Windows (GPO)
5171 ```
5172 Software\Policies\Mozilla\Firefox\SearchEngines\Default = NAME_OF_SEARCH_ENGINE
5173 ```
5174 #### Windows (Intune)
5175 OMA-URI:
5176 ```
5177 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_Default
5178 ```
5179 Value (string):
5180 ```
5181 <enabled/>
5182 <data id="SearchEngines_Default" value="NAME_OF_SEARCH_ENGINE"/>
5183 ```
5184 #### macOS
5185 ```
5186 <dict>
5187   <key>SearchEngines</key>
5188   <dict>
5189     <key>Default</key>
5190     <string>NAME_OF_SEARCH_ENGINE</string>
5191   </dict>
5192 </dict>
5193 ```
5194 #### policies.json
5195 ```
5196 {
5197   "policies": {
5198     "SearchEngines": {
5199       "Default": "NAME_OF_SEARCH_ENGINE"
5200     }
5201   }
5202 }
5203 ```
5204 ### SearchEngines | PreventInstalls
5205
5206 Prevent installing search engines from webpages.
5207
5208 **Compatibility:** Firefox ESR 60\
5209 **CCK2 Equivalent:** `disableSearchEngineInstall`\
5210 **Preferences Affected:** N/A
5211
5212 #### Windows (GPO)
5213 ```
5214 Software\Policies\Mozilla\Firefox\SearchEngines\PreventInstalls = 0x1 | 0x0
5215 ```
5216 #### Windows (Intune)
5217 OMA-URI:
5218 ```
5219 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_PreventInstalls
5220 ```
5221 Value (string):
5222 ```
5223 <enabled/> or <disabled/>
5224 ```
5225 #### macOS
5226 ```
5227 <dict>
5228   <key>SearchEngines</key>
5229   <dict>
5230     <key>PreventInstalls</key>
5231     <true/> | <false/>
5232   </dict>
5233 </dict>
5234 ```
5235 #### policies.json
5236 ```
5237 {
5238   "policies": {
5239     "SearchEngines": {
5240       "PreventInstalls": true | false
5241     }
5242   }
5243 }
5244 ```
5245 ### SearchEngines | Remove
5246
5247 Hide built-in search engines. This policy is only available on the ESR.
5248
5249 **Compatibility:** Firefox ESR 60.2\
5250 **CCK2 Equivalent:** `removeDefaultSearchEngines` (removed all built-in engines)\
5251 **Preferences Affected:** N/A
5252
5253 #### Windows (GPO)
5254 ```
5255 Software\Policies\Mozilla\Firefox\SearchEngines\Remove\1 = NAME_OF_SEARCH_ENGINE
5256 ```
5257 #### Windows (Intune)
5258 OMA-URI:
5259 ```
5260 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_Remove
5261 ```
5262 Value (string):
5263 ```
5264 <enabled/>
5265 <data id="SearchEngines_Remove" value="1&#xF000;NAME_OF_SEARCH_ENGINE"/>
5266 ```
5267 #### macOS
5268 ```
5269 <dict>
5270   <key>SearchEngines</key>
5271   <dict>
5272     <key>Remove</key>
5273     <array>
5274       <string>NAME_OF_SEARCH_ENGINE</string>
5275     </array>
5276   </dict>
5277 </dict>
5278 ```
5279 #### policies.json
5280 ```
5281 {
5282   "policies": {
5283     "SearchEngines": {
5284       "Remove": ["NAME_OF_SEARCH_ENGINE"]
5285     }
5286   }
5287 }
5288 ```
5289 ### SearchSuggestEnabled
5290
5291 Enable search suggestions.
5292
5293 **Compatibility:** Firefox 68, Firefox ESR 68\
5294 **CCK2 Equivalent:** N/A\
5295 **Preferences Affected:** `browser.urlbar.suggest.searches`, `browser.search.suggest.enabled`
5296
5297 #### Windows (GPO)
5298 ```
5299 Software\Policies\Mozilla\Firefox\SearchSuggestEnabled = 0x1 | 0x0
5300 ```
5301 #### Windows (Intune)
5302 OMA-URI:
5303 ```
5304 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchSuggestEnabled
5305 ```
5306 Value (string):
5307 ```
5308 <enabled/> or <disabled/>
5309 ```
5310 #### macOS
5311 ```
5312 <dict>
5313   <key>SearchSuggestEnabled</key>
5314   <true/> | <false/>
5315 </dict>
5316 ```
5317 #### policies.json
5318 ```
5319 {
5320   "policies": {
5321     "SearchSuggestEnabled": true | false
5322   }
5323 }
5324 ```
5325 ### SecurityDevices
5326
5327 Install PKCS #11 modules.
5328
5329 **Compatibility:** Firefox 64, Firefox ESR 60.4\
5330 **CCK2 Equivalent:** `certs.devices`\
5331 **Preferences Affected:** N/A
5332
5333 #### Windows (GPO)
5334 ```
5335 Software\Policies\Mozilla\Firefox\SecurityDevices\NAME_OF_DEVICE = PATH_TO_LIBRARY_FOR_DEVICE
5336 ```
5337 #### Windows (Intune)
5338 OMA-URI:
5339 ```
5340 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SecurityDevices
5341 ```
5342 Value (string):
5343 ```
5344 <enabled/>
5345 <data id="SecurityDevices" value="NAME_OF_DEVICE&#xF000;PATH_TO_LIBRARY_FOR_DEVICE"/>
5346 ```
5347 #### macOS
5348 ```
5349 <dict>
5350   <key>SecurityDevices</key>
5351   <dict>
5352     <key>NAME_OF_DEVICE</key>
5353     <string>PATH_TO_LIBRARY_FOR_DEVICE</string>
5354   </dict>
5355 </dict>
5356 ```
5357
5358 #### policies.json
5359 ```
5360 {
5361   "policies": {
5362     "SecurityDevices": {
5363       "NAME_OF_DEVICE": "PATH_TO_LIBRARY_FOR_DEVICE"
5364     }
5365   }
5366 }
5367 ```
5368 ### ShowHomeButton
5369 Show the home button on the toolbar.
5370
5371 Future versions of Firefox will not show the home button by default.
5372
5373 **Compatibility:** Firefox 88, Firefox ESR 78.10\
5374 **CCK2 Equivalent:** N/A\
5375 **Preferences Affected:** N/A
5376
5377 #### Windows (GPO)
5378 ```
5379 Software\Policies\Mozilla\Firefox\ShowHomeButton = 0x1 | 0x0
5380 ```
5381 #### Windows (Intune)
5382 OMA-URI:
5383 ```
5384 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/Homepage_ShowHomeButton
5385 ```
5386 Value (string):
5387 ```
5388 <enabled/> or <disabled/>
5389 ```
5390 #### macOS
5391 ```
5392 <dict>
5393   <key>ShowHomeButton</key>
5394   <true/> | <false/>
5395 </dict>
5396 ```
5397 #### policies.json
5398 ```
5399 {
5400   "policies": {
5401     "ShowHomeButton": true | false
5402   }
5403 }
5404 ```
5405 ### SSLVersionMax
5406
5407 Set and lock the maximum version of TLS.
5408
5409 **Compatibility:** Firefox 66, Firefox ESR 60.6\
5410 **CCK2 Equivalent:** N/A\
5411 **Preferences Affected:** `security.tls.version.max`
5412
5413 #### Windows (GPO)
5414 ```
5415 Software\Policies\Mozilla\Firefox\SSLVersionMax = "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
5416 ```
5417 #### Windows (Intune)
5418 OMA-URI:
5419 ```
5420 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SSLVersionMax
5421 ```
5422 Value (string):
5423 ```
5424 <enabled/>
5425 <data id="SSLVersion" value="tls1 | tls1.2 | tls1.3"/>
5426 ```
5427 #### macOS
5428 ```
5429 <dict>
5430   <key>SSLVersionMax</key>
5431   <string>tls1 | tls1.1 | tls1.2 | tls1.3</string>
5432 </dict>
5433 ```
5434
5435 #### policies.json
5436 ```
5437 {
5438   "policies": {
5439     "SSLVersionMax": "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
5440   }
5441 }
5442 ```
5443 ### SSLVersionMin
5444
5445 Set and lock the minimum version of TLS.
5446
5447 **Compatibility:** Firefox 66, Firefox ESR 60.6\
5448 **CCK2 Equivalent:** N/A\
5449 **Preferences Affected:** `security.tls.version.min`
5450
5451 #### Windows (GPO)
5452 ```
5453 Software\Policies\Mozilla\Firefox\SSLVersionMin = "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
5454 ```
5455 #### Windows (Intune)
5456 OMA-URI:
5457 ```
5458 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SSLVersionMin
5459 ```
5460 Value (string):
5461 ```
5462 <enabled/>
5463 <data id="SSLVersion" value="tls1 | tls1.2 | tls1.3"/>
5464 ```
5465 #### macOS
5466 ```
5467 <dict>
5468   <key>SSLVersionMin</key>
5469   <string>tls1 | tls1.1 | tls1.2 | tls1.3</string>
5470 </dict>
5471 ```
5472
5473 #### policies.json
5474 ```
5475 {
5476   "policies": {
5477     "SSLVersionMin": "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
5478   }
5479 }
5480 ```
5481 ### SupportMenu
5482 Add a menuitem to the help menu for specifying support information.
5483
5484 **Compatibility:** Firefox 68.0.1, Firefox ESR 68.0.1\
5485 **CCK2 Equivalent:** helpMenu\
5486 **Preferences Affected:** N/A
5487
5488 #### Windows (GPO)
5489 ```
5490 Software\Policies\Mozilla\Firefox\SupportMenu\Title = "Support Menu"
5491 Software\Policies\Mozilla\Firefox\SupportMenu\URL = "http://example.com/support"
5492 Software\Policies\Mozilla\Firefox\SupportMenu\AccessKey = "S"
5493 ```
5494 #### Windows (Intune)
5495 OMA-URI:
5496 ```
5497 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SupportMenu
5498 ```
5499 Value (string):
5500 ```
5501 <enabled/>
5502 <data id="SupportMenuTitle" value="Support Menu"/>
5503 <data id="SupportMenuURL" value="http://example.com/support"/>
5504 <data id="SupportMenuAccessKey" value="S">
5505 ```
5506 #### macOS
5507 ```
5508 <dict>
5509   <key>SupportMenu</key>
5510   <dict>
5511     <key>Title</key>
5512     <string>SupportMenu</string>
5513     <key>URL</key>
5514     <string>http://example.com/support</string>
5515     <key>AccessKey</key>
5516     <string>S</string>
5517   </dict>
5518 </dict>
5519 ```
5520 #### policies.json
5521 ```
5522 {
5523   "policies": {
5524     "SupportMenu": {
5525       "Title": "Support Menu",
5526       "URL": "http://example.com/support",
5527       "AccessKey": "S"
5528     }
5529   }
5530 }
5531 ```
5532 ### UserMessaging
5533
5534 Prevent Firefox from messaging the user in certain situations.
5535
5536 `WhatsNew` Remove the "What's New" icon and menuitem.
5537
5538 `ExtensionRecommendations` If false, don't recommend extensions while the user is visiting web pages.
5539
5540 `FeatureRecommendations` If false, don't recommend browser features.
5541
5542 `UrlbarInterventions` If false, Don't offer Firefox specific suggestions in the URL bar.
5543
5544 `SkipOnboarding` If true, don't show onboarding messages on the new tab page.
5545
5546 **Compatibility:** Firefox 75, Firefox ESR 68.7\
5547 **CCK2 Equivalent:** N/A\
5548 **Preferences Affected:** `browser.messaging-system.whatsNewPanel.enabled`, `browser.newtabpage.activity-stream.asrouter.userprefs.cfr.addons`, `browser.newtabpage.activity-stream.asrouter.userprefs.cfr.features`, `browser.aboutwelcome.enabled`
5549
5550 #### Windows (GPO)
5551 ```
5552 Software\Policies\Mozilla\Firefox\UserMessaging\WhatsNew = 0x1 | 0x0
5553 Software\Policies\Mozilla\Firefox\UserMessaging\ExtensionRecommendations = 0x1 | 0x0
5554 Software\Policies\Mozilla\Firefox\UserMessaging\FeatureRecommendations = 0x1 | 0x0
5555 Software\Policies\Mozilla\Firefox\UserMessaging\UrlbarInterventions = 0x1 | 0x0
5556 Software\Policies\Mozilla\Firefox\UserMessaging\SkipOnboarding = 0x1 | 0x0
5557 ```
5558 #### Windows (Intune)
5559 OMA-URI:
5560 ```
5561 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_WhatsNew
5562 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_ExtensionRecommendations
5563 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_FeatureRecommendations
5564 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_UrlbarInterventions
5565 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_SkipOnboarding
5566 ```
5567 Value (string):
5568 ```
5569 <enabled/> or <disabled/>
5570 ```
5571 #### macOS
5572 ```
5573 <dict>
5574   <key>UserMessaging</key>
5575   <dict>
5576     <key>WhatsNew</key>
5577     <true/> | <false/>
5578     <key>ExtensionRecommendations</key>
5579     <true/> | <false/>
5580     <key>FeatureRecommendations</key>
5581     <true/> | <false/>
5582     <key>UrlbarInterventions</key>
5583     <true/> | <false/>
5584     <key>SkipOnboarding</key>
5585     <true/> | <false/>
5586   </dict>
5587 </dict>
5588 ```
5589 #### policies.json
5590 ```
5591 {
5592   "policies": {
5593     "UserMessaging": {
5594       "WhatsNew": true | false,
5595       "ExtensionRecommendations": true | false,
5596       "FeatureRecommendations": true | false,
5597       "UrlbarInterventions": true | false
5598       "SkipOnboarding": true | false
5599     }
5600   }
5601 }
5602 ```
5603 ### WebsiteFilter
5604 Block websites from being visited. The parameters take an array of Match Patterns, as documented in https://developer.mozilla.org/en-US/Add-ons/WebExtensions/Match_patterns.
5605 The arrays are limited to 1000 entries each.
5606
5607 If you want to block all URLs, you can use `<all_urls>` or `*://*/*`. You can't have just a `*` on the right side.
5608
5609 For specific protocols, use `https://*/*` or `http://*/*`.
5610
5611 As of Firefox 83 and Firefox ESR 78.5, file URLs are supported.
5612
5613 **Compatibility:** Firefox 60, Firefox ESR 60\
5614 **CCK2 Equivalent:** N/A\
5615 **Preferences Affected:** N/A
5616
5617 #### Windows (GPO)
5618 ```
5619 Software\Policies\Mozilla\Firefox\WebsiteFilter\Block\1 = "<all_urls>"
5620 Software\Policies\Mozilla\Firefox\WebsiteFilter\Exceptions\1 = "http://example.org/*"
5621 ```
5622 #### Windows (Intune)
5623 OMA-URI:
5624 ```
5625 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/B_WebsiteFilter_Block
5626 ```
5627 Value (string):
5628 ```
5629 <enabled/> <data id="WebsiteFilter" value="1&#xF000;&#60;all_urls&#62;"/>
5630 ```
5631 OMA-URI:
5632 ```
5633 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/B_WebsiteFilter_Exceptions
5634 ```
5635 Value (string):
5636 ```
5637 <enabled/>
5638 <data id="WebsiteFilter" value="1&#xF000;http://example.org/*"/>
5639 ```
5640 #### macOS
5641 ```
5642 <dict>
5643   <key>WebsiteFilter</key>
5644   <dict>
5645     <key>Block</key>
5646     <array>
5647       <string><all_urls></string>
5648     </array>
5649     <key>Exceptions</key>
5650     <array>
5651       <string>http://example.org/*</string>
5652     </array>
5653   </dict>
5654
5655 </dict>
5656 ```
5657 #### policies.json
5658 ```
5659 {
5660   "policies": {
5661     "WebsiteFilter": {
5662       "Block": ["<all_urls>"],
5663       "Exceptions": ["http://example.org/*"]
5664     }
5665   }
5666 }
5667 ```
5668 ### WindowsSSO
5669 Allow Windows single sign-on for Microsoft, work, and school accounts.
5670
5671 If this policy is set to true, Firefox will use credentials stored in Windows to sign in to Microsoft, work, and school accounts.
5672
5673 **Compatibility:** Firefox 91\
5674 **CCK2 Equivalent:** N/A\
5675 **Preferences Affected:** `network.http.windows-sso.enabled`
5676
5677 #### Windows (GPO)
5678 ```
5679 Software\Policies\Mozilla\Firefox\WindowsSSO = 0x1 | 0x0
5680 ```
5681 #### Windows (Intune)
5682 OMA-URI:
5683 ```
5684 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/WindowsSSO
5685 ```
5686 Value (string):
5687 ```
5688 <enabled/> or <disabled/>
5689 ```
5690 #### policies.json
5691 ```
5692 {
5693   "policies": {
5694     "WindowsSSO": true | false
5695   }
5696 }
5697 ```