README.md

   1 **These policies are in active development and so might contain changes that do not work with current versions of Firefox.**
   2
   3 **You should use the [officially released versions](https://github.com/mozilla/policy-templates/releases) if you are deploying changes.**
   4
   5 Policies can be specified using the [Group Policy templates on Windows](https://github.com/mozilla/policy-templates/tree/master/windows), [Intune on Windows](https://support.mozilla.org/kb/managing-firefox-intune), [configuration profiles on macOS](https://github.com/mozilla/policy-templates/tree/master/mac), or by creating a file called `policies.json`. On Windows, create a directory called `distribution` where the EXE is located and place the file there. On Mac, the file goes into `Firefox.app/Contents/Resources/distribution`.  On Linux, the file goes into `firefox/distribution`, where `firefox` is the installation directory for firefox, which varies by distribution.
   6
   7 | Policy Name | Description
   8 | --- | --- |
   9 | **[`AppAutoUpdate`](#appautoupdate)** |  Enable or disable automatic application update.
  10 | **[`AppUpdateURL`](#appupdateurl)** | Change the URL for application update.
  11 | **[`Authentication`](#authentication)** | Configure sites that support integrated authentication.
  12 | **[`BlockAboutAddons`](#blockaboutaddons)** | Block access to the Add-ons Manager (about:addons).
  13 | **[`BlockAboutConfig`](#blockaboutconfig)** | Block access to about:config.
  14 | **[`BlockAboutProfiles`](#blockaboutprofiles)** | Block access to About Profiles (about:profiles).
  15 | **[`BlockAboutSupport`](#blockaboutsupport)** | Block access to Troubleshooting Information (about:support).
  16 | **[`Bookmarks`](#bookmarks)** | Add bookmarks in either the bookmarks toolbar or menu.
  17 | **[`CaptivePortal`](#captiveportal)** | Enable or disable the detection of captive portals.
  18 | **[`Certificates`](#certificates)** |
  19 | **[`Certificates -> ImportEnterpriseRoots`](#certificates--importenterpriseroots)** | Trust certificates that have been added to the operating system certificate store by a user or administrator.
  20 | **[`Certificates -> Install`](#certificates--install)** | Install certificates into the Firefox certificate store.
  21 | **[`Cookies`](#cookies)** | Configure cookie preferences.
  22 | **[`DisableSetDesktopBackground`](#disablesetdesktopbackground)** | Remove the "Set As Desktop Background..." menuitem when right clicking on an image.
  23 | **[`DisableMasterPasswordCreation`](#disablemasterpasswordcreation)** | Remove the master password functionality.
  24 | **[`DisableAppUpdate`](#disableappupdate)** | Turn off application updates.
  25 | **[`DisableBuiltinPDFViewer`](#disablebuiltinpdfviewer)** | Disable the built in PDF viewer.
  26 | **[`DisabledCiphers`](#disabledciphers)** | Disable ciphers.
  27 | **[`DisableDefaultBrowserAgent`](#disabledefaultbrowseragent)** | Prevent the default browser agent from taking any actions (Windows only).
  28 | **[`DisableDeveloperTools`](#disabledevelopertools)** | Remove access to all developer tools.
  29 | **[`DisableFeedbackCommands`](#disablefeedbackcommands)** | Disable the menus for reporting sites.
  30 | **[`DisableFirefoxScreenshots`](#disablefirefoxscreenshots)** | Remove access to Firefox Screenshots.
  31 | **[`DisableFirefoxAccounts`](#disablefirefoxaccounts)** | Disable Firefox Accounts integration (Sync).
  32 | **[`DisableFirefoxStudies`](#disablefirefoxstudies)** | Disable Firefox studies (Shield).
  33 | **[`DisableForgetButton`](#disableforgetbutton)** | Disable the "Forget" button.
  34 | **[`DisableFormHistory`](#disableformhistory)** | Turn off saving information on web forms and the search bar.
  35 | **[`DisablePasswordReveal`](#disablepasswordreveal)** | Do not allow passwords to be revealed in saved logins.
  36 | **[`DisablePocket`](#disablepocket)** | Remove Pocket in the Firefox UI.
  37 | **[`DisablePrivateBrowsing`](#disableprivatebrowsing)** | Remove access to private browsing.
  38 | **[`DisableProfileImport`](#disableprofileimport)** | Disables the "Import data from another browser" option in the bookmarks window.
  39 | **[`DisableProfileRefresh`](#disableprofilerefresh)** | Disable the Refresh Firefox button on about:support and support.mozilla.org
  40 | **[`DisableSafeMode`](#disablesafemode)** | Disable safe mode within the browser.
  41 | **[`DisableSecurityBypass`](#disablesecuritybypass)** | Prevent the user from bypassing security in certain cases.
  42 | **[`DisableSystemAddonUpdate`](#disablesystemaddonupdate)** | Prevent system add-ons from being installed or update.
  43 | **[`DisableTelemetry`](#disabletelemetry)** | DisableTelemetry
  44 | **[`DisplayBookmarksToolbar`](#displaybookmarkstoolbar)** | Set the initial state of the bookmarks toolbar.
  45 | **[`DisplayMenuBar (Deprecated)`](#displaymenubar-deprecated)** | Set the initial state of the menubar.
  46 | **[`DisplayMenuBar`](#displaymenubar)** | Set the state of the menubar.
  47 | **[`DNSOverHTTPS`](#dnsoverhttps)** | Configure DNS over HTTPS.
  48 | **[`DontCheckDefaultBrowser`](#dontcheckdefaultbrowser)** | Don't check if Firefox is the default browser at startup.
  49 | **[`DefaultDownloadDirectory`](#defaultdownloaddirectory)** | Set the default download directory.
  50 | **[`DownloadDirectory`](#downloaddirectory)** | Set and lock the download directory.
  51 | **[`EnableTrackingProtection`](#enabletrackingprotection)** | Configure tracking protection.
  52 | **[`EncryptedMediaExtensions`](#encryptedmediaextensions)** | Enable or disable Encrypted Media Extensions and optionally lock it.
  53 | **[`EnterprisePoliciesEnabled`](#enterprisepoliciesenabled)** | Enable policy support on macOS.
  54 | **[`Extensions`](#extensions)** | Control the installation, uninstallation and locking of extensions.
  55 | **[`ExtensionSettings`](#extensionsettings)** | Manage all aspects of extensions.
  56 | **[`ExtensionUpdate`](#extensionupdate)** | Control extension updates.
  57 | **[`FlashPlugin`](#flashplugin)** | Configure the default Flash plugin policy as well as origins for which Flash is allowed.
  58 | **[`FirefoxHome`](#firefoxhome)** | Customize the Firefox Home page.
  59 | **[`HardwareAcceleration`](#hardwareacceleration)** | Control hardware acceleration.
  60 | **[`Homepage`](#homepage)** | Configure the default homepage and how Firefox starts.
  61 | **[`InstallAddonsPermission`](#installaddonspermission)** | Configure the default extension install policy as well as origins for extension installs are allowed.
  62 | **[`LegacyProfiles`](#legacyprofiles)** | Disable the feature enforcing a separate profile for each installation.
  63 | **[`LocalFileLinks`](#localfilelinks)** | Enable linking to local files by origin.
  64 | **[`NetworkPrediction`](#networkprediction)** | Enable or disable network prediction (DNS prefetching).
  65 | **[`NewTabPage`](#newtabpage)** | Enable or disable the New Tab page.
  66 | **[`NoDefaultBookmarks`](#nodefaultbookmarks)** | Disable the creation of default bookmarks.
  67 | **[`OfferToSaveLogins`](#offertosavelogins)** | Control whether or not Firefox offers to save passwords.
  68 | **[`OfferToSaveLoginsDefault`](#offertosaveloginsdefault)** | Set the default value for whether or not Firefox offers to save passwords.
  69 | **[`OverrideFirstRunPage`](#overridefirstrunpage)** | Override the first run page.
  70 | **[`OverridePostUpdatePage`](#overridepostupdatepage)** | Override the upgrade page.
  71 | **[`PasswordManagerEnabled`](#passwordmanagerenabled)** | Remove (some) access to the password manager.
  72 | **[`PDFjs`](#pdfjs)** | Disable or configure PDF.js, the built-in PDF viewer.
  73 | **[`Permissions`](#permissions)** | Set permissions associated with camera, microphone, location, and notifications.
  74 | **[`PopupBlocking`](#popupblocking)** | Configure the default pop-up window policy as well as origins for which pop-up windows are allowed.
  75 | **[`Preferences`](#preferences)** | Set and lock some preferences.
  76 | **[`PromptForDownloadLocation`](#promptfordownloadlocation)** | Ask where to save each file before downloading.
  77 | **[`Proxy`](#proxy)** | Configure proxy settings.
  78 | **[`RequestedLocales`](#requestedlocales)** | Set the the list of requested locales for the application in order of preference.
  79 | **[`SanitizeOnShutdown` (All)](#sanitizeonshutdown-all)** | Clear all data on shutdown.
  80 | **[`SanitizeOnShutdown` (Selective)](#sanitizeonshutdown-selective)** | Clear data on shutdown.
  81 | **[`SearchBar`](#searchbar)** | Set whether or not search bar is displayed.
  82 | **[`SearchEngines`](#searchengines-this-policy-is-only-available-on-the-esr)** |
  83 | **[`SearchEngines -> Default`](#searchengines--default)** | Set the default search engine.
  84 | **[`SearchEngines -> PreventInstalls`](#searchengines--preventinstalls)** | Prevent installing search engines from webpages.
  85 | **[`SearchEngines -> Remove`](#searchengines--remove)** | Hide built-in search engines.
  86 | **[`SearchEngines -> Add`](#searchengines--add)** | Add new search engines.
  87 | **[`SearchSuggestEnabled`](#searchsuggestenabled)** | Enable search suggestions.
  88 | **[`SecurityDevices`](#securitydevices)** | Install PKCS #11 modules.
  89 | **[`SSLVersionMax`](#sslversionmax)** | Set and lock the maximum version of TLS.
  90 | **[`SSLVersionMin`](#sslversionmin)** | Set and lock the minimum version of TLS.
  91 | **[`SupportMenu`](#supportmenu)** | Add a menuitem to the help menu for specifying support information.
  92 | **[`UserMessaging`](#usermessaging)** | Don't show certain messages to the user.
  93 | **[`WebsiteFilter`](#websitefilter)** | Block websites from being visited.
  94
  95 ### AppAutoUpdate
  96
  97 Enable or disable **automatic** application update.
  98
  99 If set to true, application updates are installed without user approval.
 100
 101 If set to false, application updates are downloaded but the user can choose when to install the update.
 102
 103 If you have disabled updates via DisableAppUpdate, this policy has no effect.
 104
 105 **Compatibility:** Firefox 75, Firefox ESR 68.7\
 106 **CCK2 Equivalent:** N/A\
 107 **Preferences Affected:** app.update.auto
 108
 109 #### Windows (GPO)
 110 ```
 111 Software\Policies\Mozilla\Firefox\AppAutoUpdate = 0x1 | 0x0
 112 ```
 113 #### Windows (Intune)
 114 OMA-URI:
 115 ```
 116 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AppAutoUpdate
 117 ```
 118 Value (string):
 119 ```
 120 <enabled/> or <disabled/>
 121 ```
 122 #### macOS
 123 ```
 124 <dict>
 125   <key>AppAutoUpdate</key>
 126   <true/> | <false/>
 127 </dict>
 128 ```
 129 #### policies.json
 130 ```
 131 {
 132   "policies": {
 133     "AppAutoUpdate": true | false
 134   }
 135 }
 136 ```
 137 ### AppUpdateURL
 138
 139 Change the URL for application update.
 140
 141 **Compatibility:** Firefox 62, Firefox ESR 60.2\
 142 **CCK2 Equivalent:** N/A\
 143 **Preferences Affected:** `app.update.url`
 144
 145 #### Windows (GPO)
 146 ```
 147 Software\Policies\Mozilla\Firefox\AppUpdateURL = "https://yoursite.com"
 148 ```
 149 #### Windows (Intune)
 150 OMA-URI:
 151 ```
 152 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AppUpdateURL
 153 ```
 154 Value (string):
 155 ```
 156 <enabled/>
 157 <data id="AppUpdateURL" value="https://yoursite.com"/>
 158 ```
 159 #### macOS
 160 ```
 161 <dict>
 162   <key>AppUpdateURL</key>
 163   <string>https://yoursite.com</string>
 164 </dict>
 165 ```
 166 #### policies.json
 167 ```
 168 {
 169   "policies": {
 170     "AppUpdateURL": "https://yoursite.com"
 171   }
 172 }
 173 ```
 174 ### Authentication
 175
 176 Configure sites that support integrated authentication.
 177
 178 See https://developer.mozilla.org/en-US/docs/Mozilla/Integrated_authentication for more information.
 179
 180 `PrivateBrowsing` enables integrated authentication in prviate browsing.
 181
 182 **Compatibility:** Firefox 60, Firefox ESR 60 (AllowNonFQDN added in 62/60.2, AllowProxies added in 70/68.2, Locked added in 71/68.3, PrivateBrowsing added in 77/68.9)\
 183 **CCK2 Equivalent:** N/A\
 184 **Preferences Affected:** `network.negotiate-auth.trusted-uris`,`network.negotiate-auth.delegation-uris`,`network.automatic-ntlm-auth.trusted-uris`,`network.automatic-ntlm-auth.allow-non-fqdn`,`network.negotiate-auth.allow-non-fqdn`,`network.automatic-ntlm-auth.allow-proxies`,`network.negotiate-auth.allow-proxies`,`network.auth.private-browsing-sso`
 185
 186 #### Windows (GPO)
 187 ```
 188 Software\Policies\Mozilla\Firefox\Authentication\SPNEGO\1 = "mydomain.com"
 189 Software\Policies\Mozilla\Firefox\Authentication\SPNEGO\2 = "https://myotherdomain.com"
 190 Software\Policies\Mozilla\Firefox\Authentication\Delegated\1 = "mydomain.com"
 191 Software\Policies\Mozilla\Firefox\Authentication\Delegated\2 = "https://myotherdomain.com"
 192 Software\Policies\Mozilla\Firefox\Authentication\NTLM\1 = "mydomain.com"
 193 Software\Policies\Mozilla\Firefox\Authentication\NTLM\2 = "https://myotherdomain.com"
 194 Software\Policies\Mozilla\Firefox\Authentication\AllowNonFQDN\SPNEGO = 0x1 | 0x0
 195 Software\Policies\Mozilla\Firefox\Authentication\AllowNonFQDN\NTLM = 0x1 | 0x0
 196 Software\Policies\Mozilla\Firefox\Authentication\AllowProxies\SPNEGO = 0x1 | 0x0
 197 Software\Policies\Mozilla\Firefox\Authentication\AllowProxies\NTLM = 0x1 | 0x0
 198 Software\Policies\Mozilla\Firefox\Authentication\Locked = 0x1 | 0x0
 199 Software\Policies\Mozilla\Firefox\Authentication\PrivateBrowsing = 0x1 | 0x0
 200 ```
 201 #### Windows (Intune)
 202 OMA-URI:
 203 ```
 204 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_SPNEGO
 205 ```
 206 Value (string):
 207 ```
 208 <enabled/>
 209 <data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
 210 ```
 211 OMA-URI:
 212 ```
 213 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_Delegated
 214 ```
 215 Value (string):
 216 ```
 217 <enabled/>
 218 <data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
 219 ```
 220 OMA-URI:
 221 ```
 222 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_NTLM
 223 ```
 224 Value (string):
 225 ```
 226 <enabled/>
 227 <data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
 228 ```
 229 OMA-URI:
 230 ```
 231 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_AllowNonFQDN
 232 ```
 233 Value (string):
 234 ```
 235 <enabled/>
 236 <data id="Authentication_AllowNonFQDN_NTLM" value="true | false"/>
 237 <data id="Authentication_AllowNonFQDN_SPNEGO" value="true | false"/>
 238 ```
 239 OMA-URI:
 240 ```
 241 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_Locked
 242 ```
 243 Value (string):
 244 ```
 245 <enabled/> or <disabled/>
 246 ```
 247 OMA-URI:
 248 ```
 249 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_PrivateBrowsing
 250 ```
 251 Value (string):
 252 ```
 253 <enabled/> or <disabled/>
 254 ```
 255 #### macOS
 256 ```
 257 <dict>
 258   <key>Authentication</key>
 259   <dict>
 260     <key>SPNEGO</key>
 261     <array>
 262       <string>mydomain.com</string>
 263       <string>https://myotherdomain.com</string>
 264     </array>
 265     <key>Delegated</key>
 266     <array>
 267       <string>mydomain.com</string>
 268       <string>https://myotherdomain.com</string>
 269     </array>
 270     <key>NTLM</key>
 271     <array>
 272       <string>mydomain.com</string>
 273       <string>https://myotherdomain.com</string>
 274     </array>
 275     <key>AllowNonFQDN</key>
 276       <dict>
 277       <key>SPNEGO</key>
 278       <true/> | <false/>
 279       <key>NTLM</key>
 280       <true/> | <false/>
 281     </dict>
 282     <key>AllowProxies</key>
 283       <dict>
 284       <key>SPNEGO</key>
 285       <true/> | <false/>
 286       <key>NTLM</key>
 287       <true/> | <false/>
 288     </dict>
 289     <key>Locked</key>
 290     <true/> | <false/>
 291     <key>PrivateBrowsing</key>
 292     <true/> | <false/>
 293   </dict>
 294 </dict>
 295 ```
 296 #### policies.json
 297 ```
 298 {
 299   "policies": {
 300     "Authentication": {
 301       "SPNEGO": ["mydomain.com", "https://myotherdomain.com"],
 302       "Delegated": ["mydomain.com", "https://myotherdomain.com"],
 303       "NTLM": ["mydomain.com", "https://myotherdomain.com"],
 304       "AllowNonFQDN": {
 305         "SPNEGO": true | false,
 306         "NTLM": true | false
 307       },
 308       "AllowProxies": {
 309         "SPNEGO": true | false,
 310         "NTLM": true | false
 311       },
 312       "Locked": true | false,
 313       "PrivateBrowsing": true | false
 314     }
 315   }
 316 }
 317 ```
 318 ### BlockAboutAddons
 319
 320 Block access to the Add-ons Manager (about:addons).
 321
 322 **Compatibility:** Firefox 60, Firefox ESR 60\
 323 **CCK2 Equivalent:** `disableAddonsManager`\
 324 **Preferences Affected:** N/A
 325
 326 #### Windows (GPO)
 327 ```
 328 Software\Policies\Mozilla\Firefox\BlockAboutAddons = 0x1 | 0x0
 329 ```
 330 #### Windows (Intune)
 331 OMA-URI:
 332 ```
 333 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutAddons
 334 ```
 335 Value (string):
 336 ```
 337 <enabled/> or <disabled/>
 338 ```
 339 #### macOS
 340 ```
 341 <dict>
 342   <key>BlockAboutAddons</key>
 343   <true/> | <false/>
 344 </dict>
 345 ```
 346 #### policies.json
 347 ```
 348 {
 349   "policies": {
 350     "BlockAboutAddons": true | false
 351   }
 352 }
 353 ```
 354 ### BlockAboutConfig
 355
 356 Block access to about:config.
 357
 358 **Compatibility:** Firefox 60, Firefox ESR 60\
 359 **CCK2 Equivalent:** `disableAboutConfig`\
 360 **Preferences Affected:** N/A
 361
 362 #### Windows (GPO)
 363 ```
 364 Software\Policies\Mozilla\Firefox\BlockAboutConfig = 0x1 | 0x0
 365 ```
 366 #### Windows (Intune)
 367 OMA-URI:
 368 ```
 369 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutConfig
 370 ```
 371 Value (string):
 372 ```
 373 <enabled/> or <disabled/>
 374 ```
 375 #### macOS
 376 ```
 377 <dict>
 378   <key>BlockAboutConfig</key>
 379   <true/> | <false/>
 380 </dict>
 381 ```
 382 #### policies.json
 383 ```
 384 {
 385   "policies": {
 386     "BlockAboutConfig": true | false
 387   }
 388 }
 389 ```
 390 ### BlockAboutProfiles
 391
 392 Block access to About Profiles (about:profiles).
 393
 394 **Compatibility:** Firefox 60, Firefox ESR 60\
 395 **CCK2 Equivalent:** `disableAboutProfiles`\
 396 **Preferences Affected:** N/A
 397
 398 #### Windows (GPO)
 399 ```
 400 Software\Policies\Mozilla\Firefox\BlockAboutProfiles = 0x1 | 0x0
 401 ```
 402 #### Windows (Intune)
 403 OMA-URI:
 404 ```
 405 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutProfiles
 406 ```
 407 Value (string):
 408 ```
 409 <enabled/> or <disabled/>
 410 ```
 411 #### macOS
 412 ```
 413 <dict>
 414   <key>BlockAboutProfiles</key>
 415   <true/> | <false/>
 416 </dict>
 417 ```
 418 #### policies.json
 419 ```
 420 {
 421   "policies": {
 422     "BlockAboutProfiles": true | false
 423   }
 424 }
 425 ```
 426 ### BlockAboutSupport
 427
 428 Block access to Troubleshooting Information (about:support).
 429
 430 **Compatibility:** Firefox 60, Firefox ESR 60\
 431 **CCK2 Equivalent:** `disableAboutSupport`\
 432 **Preferences Affected:** N/A
 433
 434 #### Windows (GPO)
 435 ```
 436 Software\Policies\Mozilla\Firefox\BlockAboutSupport = 0x1 | 0x0
 437 ```
 438 #### Windows (Intune)
 439 OMA-URI:
 440 ```
 441 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutSupport
 442 ```
 443 Value (string):
 444 ```
 445 <enabled/> or <disabled/>
 446 ```
 447 #### macOS
 448 ```
 449 <dict>
 450   <key>BlockAboutSupport</key>
 451   <true/> | <false/>
 452 </dict>
 453 ```
 454 #### policies.json
 455 ```
 456 {
 457   "policies": {
 458     "BlockAboutSupport": true | false
 459   }
 460 }
 461 ```
 462 ### Bookmarks
 463
 464 Add bookmarks in either the bookmarks toolbar or menu. Only `Title` and `URL` are required. If `Placement` is not specified, the bookmark will be placed on the toolbar. If `Folder` is specified, it is automatically created and bookmarks with the same folder name are grouped together.
 465
 466 **Compatibility:** Firefox 60, Firefox ESR 60\
 467 **CCK2 Equivalent:** `bookmarks.toolbar`,`bookmarks.menu`\
 468 **Preferences Affected:** N/A
 469
 470 #### Windows (GPO)
 471 ```
 472 Software\Policies\Mozilla\Firefox\Bookmarks\1\Title = "Example"
 473 Software\Policies\Mozilla\Firefox\Bookmarks\1\URL = "https://example.com"
 474 Software\Policies\Mozilla\Firefox\Bookmarks\1\Favicon = "https://example.com/favicon.ico"
 475 Software\Policies\Mozilla\Firefox\Bookmarks\1\Placement = "toolbar" | "menu"
 476 Software\Policies\Mozilla\Firefox\Bookmarks\1\Folder = "FolderName"
 477 ```
 478 #### Windows (Intune)
 479 OMA-URI:
 480 ```
 481 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Bookmarks/Bookmark01
 482 ```
 483 Value (string):
 484 ```
 485 <enabled/>
 486 <data id="BookmarkTitle" value="Example"/>
 487 <data id="BookmarkURL" value="https://example.com"/>
 488 <data id="BookmarkFavicon" value="https://example.com/favicon.ico"/>
 489 <data id="BookmarkPlacement" value="toolbar | menu"/>
 490 <data id="BookmarkFolder" value="FolderName"/>
 491 ```
 492 #### macOS
 493 ```
 494 <dict>
 495   <key>Bookmarks</key>
 496   <array>
 497     <dict>
 498       <key>Title</key>
 499       <string>Example</string>
 500       <key>URL</key>
 501       <string>https://example.com</string>
 502       <key>Favicon</key>
 503       <string>https://example.com/favicon.ico</string>
 504       <key>Placement</key>
 505       <string>toolbar | menu</string>
 506       <key>Folder</key>
 507       <string>FolderName</string>
 508     </dict>
 509   </array>
 510 </dict>
 511 ```
 512 #### policies.json
 513 ```
 514 {
 515   "policies": {
 516     "Bookmarks": [
 517       {
 518         "Title": "Example",
 519         "URL": "https://example.com",
 520         "Favicon": "https://example.com/favicon.ico",
 521         "Placement": "toolbar" | "menu",
 522         "Folder": "FolderName"
 523       }
 524     ]
 525   }
 526 }
 527 ```
 528 ### CaptivePortal
 529 Enable or disable the detection of captive portals.
 530
 531 **Compatibility:** Firefox 67, Firefox ESR 60.7\
 532 **CCK2 Equivalent:** N/A\
 533 **Preferences Affected:** `network.captive-portal-service.enabled`
 534
 535 #### Windows (GPO)
 536 ```
 537 Software\Policies\Mozilla\Firefox\CaptivePortal = 0x1 | 0x0
 538 ```
 539 #### Windows (Intune)
 540 OMA-URI:
 541 ```
 542 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/CaptivePortal
 543 ```
 544 Value (string):
 545 ```
 546 <enabled/> or <disabled/>
 547 ```
 548 #### macOS
 549 ```
 550 <dict>
 551   <key>CaptivePortal</key>
 552   <true/> | <false/>
 553 </dict>
 554 ```
 555 #### policies.json
 556 ```
 557 {
 558   "policies": {
 559     "CaptivePortal": true | false
 560   }
 561 }
 562 ```
 563 ### Certificates
 564
 565 ### Certificates | ImportEnterpriseRoots
 566
 567 Trust certificates that have been added to the operating system certificate store by a user or administrator.
 568
 569 See https://support.mozilla.org/kb/setting-certificate-authorities-firefox for more detail.
 570
 571 **Compatibility:** Firefox 60, Firefox ESR 60 (macOS support in Firefox 63, Firefox ESR 68)\
 572 **CCK2 Equivalent:** N/A\
 573 **Preferences Affected:** `security.enterprise_roots.enabled`
 574
 575 #### Windows (GPO)
 576 ```
 577 Software\Policies\Mozilla\Firefox\Certificates\ImportEnterpriseRoots = 0x1 | 0x0
 578 ```
 579 #### Windows (Intune)
 580 OMA-URI:
 581 ```
 582 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Certificates/Certificates_ImportEnterpriseRoots
 583 ```
 584 Value (string):
 585 ```
 586 <enabled/> or <disabled/>
 587 ```
 588 #### macOS
 589 ```
 590 <dict>
 591   <key>Certificates</key>
 592   <dict>
 593     <key>ImportEnterpriseRoots</key>
 594     <true/> | <false/>
 595   </dict>
 596 </dict>
 597 ```
 598 #### policies.json
 599 ```
 600 {
 601   "policies": {
 602     "Certificates": {
 603       "ImportEnterpriseRoots": true | false
 604     }
 605   }
 606 }
 607 ```
 608 ### Certificates | Install
 609
 610 Install certificates into the Firefox certificate store. If only a filename is specified, Firefox searches for the file in the following locations:
 611
 612 - Windows
 613   - %USERPROFILE%\AppData\Local\Mozilla\Certificates
 614   - %USERPROFILE%\AppData\Roaming\Mozilla\Certificates
 615 - macOS
 616   - /Library/Application Support/Mozilla/Certificates
 617   - ~/Library/Application Support/Mozilla/Certificates
 618 - Linux
 619   - /usr/lib/mozilla/certificates
 620   - /usr/lib64/mozilla/certificates
 621   - ~/.mozilla/certificates
 622
 623 Starting with Firefox 65, Firefox 60.5 ESR, a fully qualified path can be used, including UNC paths. You should use the native path style for your operating system. We do not support using %USERPROFILE% or other environment variables on Windows.
 624
 625 If you are specifying the path in the policies.json file on Windows, you need to escape your backslashes (`\\`) which means that for UNC paths, you need to escape both (`\\\\`). If you use group policy, you only need one backslash.
 626
 627 Certificates are installed using the trust string `CT,CT,`.
 628
 629 Binary (DER) and ASCII (PEM) certificates are both supported.
 630
 631 **Compatibility:** Firefox 64, Firefox ESR 64\
 632 **CCK2 Equivalent:** `certs.ca`\
 633 **Preferences Affected:** N/A
 634
 635 #### Windows (GPO)
 636 ```
 637 Software\Policies\Mozilla\Firefox\Certificates\Install\1 = "cert1.der"
 638 Software\Policies\Mozilla\Firefox\Certificates\Install\2 = "C:\Users\username\cert2.pem"
 639 ```
 640 #### Windows (Intune)
 641 OMA-URI:
 642 ```
 643 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Certificates/Certificates_Install
 644 ```
 645 Value (string):
 646 ```
 647 <enabled/>
 648 <data id="Certificates_Install" value="1&#xF000;cert1.der&#xF000;2&#xF000;C:\Users\username\cert2.pem"/>
 649 ```
 650 #### macOS
 651 ```
 652 <dict>
 653   <key>Certificates</key>
 654   <dict>
 655     <key>Install</key>
 656     <array>
 657       <string>cert1.der</string>
 658       <string>/Users/username/cert2.pem</string>
 659     </array>
 660   </dict>
 661 </dict>
 662 ```
 663 #### policies.json
 664 ```
 665 {
 666   "policies": {
 667     "Certificates": {
 668       "Install": ["cert1.der", "/home/username/cert2.pem"]
 669     }
 670   }
 671 }
 672 ```
 673 ### Cookies
 674 Configure cookie preferences.
 675
 676 `Allow` is a list of origins (not domains) where cookies are always allowed. You must include http or https.
 677
 678 `Block` is a list of origins (not domains) where cookies are always blocked. You must include http or https.
 679
 680 `Default` determines whether cookies are accepted at all.
 681
 682 `AcceptThirdParty` determines how third-party cookies are handled.
 683
 684 `ExpireAtSessionEnd` determines when cookies expire.
 685
 686 `RejectTracker` only rejects cookies for trackers.
 687
 688 `Locked` prevents the user from changing cookie preferences.
 689
 690 **Compatibility:** Firefox 60, Firefox ESR 60 (RejectTracker was added in Firefox 63)\
 691 **CCK2 Equivalent:** N/A\
 692 **Preferences Affected:** `network.cookie.cookieBehavior`,`network.cookie.lifetimePolicy`
 693
 694 #### Windows (GPO)
 695 ```
 696 Software\Policies\Mozilla\Firefox\Cookies\Allow\1 = "https://example.com"
 697 Software\Policies\Mozilla\Firefox\Cookies\Block\1 = "https://example.org"
 698 Software\Policies\Mozilla\Firefox\Cookies\Default = 0x1 | 0x0
 699 Software\Policies\Mozilla\Firefox\Cookies\AcceptThirdParty = "always" | "never" | "from-visited"
 700 Software\Policies\Mozilla\Firefox\Cookies\ExpireAtSessionEnd = 0x1 | 0x0
 701 Software\Policies\Mozilla\Firefox\Cookies\RejectTracker = 0x1 | 0x0
 702 Software\Policies\Mozilla\Firefox\Cookies\Locked = 0x1 | 0x0
 703 ```
 704 #### Windows (Intune)
 705 OMA-URI:
 706 ```
 707 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Allow
 708 ```
 709 Value (string):
 710 ```
 711 <enabled/>
 712 <data id="Cookies_Allow" value="1&#xF000;https://example.com"/>
 713 ```
 714 OMA-URI:
 715 ```
 716 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Block
 717 ```
 718 Value (string):
 719 ```
 720 <enabled/>
 721 <data id="Cookies_Block" value="1&#xF000;https://example.org"/>
 722 ```
 723 OMA-URI:
 724 ```
 725 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Default
 726 ```
 727 Value (string):
 728 ```
 729 <enabled/> or <disabled/>
 730 ```
 731 OMA-URI:
 732 ```
 733 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_AcceptThirdParty
 734 ```
 735 Value (string):
 736 ```
 737 <enabled/>
 738 <data id="Cookies_AcceptThirdParty" value="always | never | from-visited"/>
 739 ```
 740 OMA-URI:
 741 ```
 742 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_ExpireAtSessionEnd
 743 ```
 744 Value (string):
 745 ```
 746 <enabled/> or <disabled/>
 747 ```
 748 OMA-URI:
 749 ```
 750 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_RejectTracker
 751 ```
 752 Value (string):
 753 ```
 754 <enabled/> or <disabled/>
 755 ```
 756 OMA-URI:
 757 ```
 758 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Locked
 759 ```
 760 Value (string):
 761 ```
 762 <enabled/> or <disabled/>
 763 ```
 764 #### macOS
 765 ```
 766 <dict>
 767   <key>Cookies</key>
 768   <dict>
 769     <key>Allow</key>
 770     <array>
 771       <string>http://example.com</string>
 772     </array>
 773     <key>Block</key>
 774     <array>
 775       <string>http://example.org</string>
 776     </array>
 777     <key>Default</key>
 778     <true/> | <false/>
 779     <key>AcceptThirdParty</key>
 780     <string>always | never | from-visited</string>
 781     <key>ExpireAtSessionEnd</key>
 782     <true/> | <false/>
 783     <key>RejectTracker</key>
 784     <true/> | <false/>
 785     <key>Locked</key>
 786     <true/> | <false/>
 787   </dict>
 788 </dict>
 789 ```
 790 #### policies.json
 791 ```
 792 {
 793   "policies": {
 794     "Cookies": {
 795       "Allow": ["http://example.org/"],
 796       "Block": ["http://example.edu/"],
 797       "Default": true | false,
 798       "AcceptThirdParty": "always" | "never" | "from-visited",
 799       "ExpireAtSessionEnd": true | false,
 800       "RejectTracker": true | false,
 801       "Locked": true | false
 802     }
 803   }
 804 }
 805 ```
 806 ### DisableSetDesktopBackground
 807 Remove the "Set As Desktop Background..." menuitem when right clicking on an image.
 808
 809 **Compatibility:** Firefox 60, Firefox ESR 60\
 810 **CCK2 Equivalent:** `removeSetDesktopBackground`\
 811 **Preferences Affected:** N/A
 812
 813 #### Windows (GPO)
 814 ```
 815 Software\Policies\Mozilla\Firefox\DisableSetDesktopBackground = 0x1 | 0x0
 816 ```
 817 #### Windows (Intune)
 818 OMA-URI:
 819 ```
 820 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSetDesktopBackground
 821 ```
 822 Value (string):
 823 ```
 824 <enabled/> or <disabled/>
 825 ```
 826 #### macOS
 827 ```
 828 <dict>
 829   <key>DisableSetDesktopBackground</key>
 830   <true/> | <false/>
 831 </dict>
 832 ```
 833 #### policies.json
 834 ```
 835 {
 836   "policies": {
 837     "DisableSetDesktopBackground": true | false
 838   }
 839 }
 840 ```
 841 ### DisableMasterPasswordCreation
 842 Remove the master password functionality.
 843
 844 **Compatibility:** Firefox 60, Firefox ESR 60\
 845 **CCK2 Equivalent:** `noMasterPassword`\
 846 **Preferences Affected:** N/A
 847
 848 #### Windows (GPO)
 849 ```
 850 Software\Policies\Mozilla\Firefox\DisableMasterPasswordCreation = 0x1 | 0x0
 851 ```
 852 #### Windows (Intune)
 853 OMA-URI:
 854 ```
 855 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableMasterPasswordCreation
 856 ```
 857 Value (string):
 858 ```
 859 <enabled/> or <disabled/>
 860 ```
 861 #### macOS
 862 ```
 863 <dict>
 864   <key>DisableMasterPasswordCreation</key>
 865   <true/> | <false/>
 866 </dict>
 867 ```
 868 #### policies.json
 869 ```
 870 {
 871   "policies": {
 872     "DisableMasterPasswordCreation": true | false
 873   }
 874 }
 875 ```
 876 ### DisableAppUpdate
 877 Turn off application updates.
 878
 879 **Compatibility:** Firefox 60, Firefox ESR 60\
 880 **CCK2 Equivalent:** `disableFirefoxUpdates`\
 881 **Preferences Affected:** N/A
 882
 883 #### Windows (GPO)
 884 ```
 885 Software\Policies\Mozilla\Firefox\DisableAppUpdate = 0x1 | 0x0
 886 ```
 887 #### Windows (Intune)
 888 OMA-URI:
 889 ```
 890 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableAppUpdate
 891 ```
 892 Value (string):
 893 ```
 894 <enabled/> or <disabled/>
 895 ```
 896 #### macOS
 897 ```
 898 <dict>
 899   <key>DisableAppUpdate</key>
 900   <true/> | <false/>
 901 </dict>
 902 ```
 903 #### policies.json
 904 ```
 905 {
 906   "policies": {
 907     "DisableAppUpdate": true | false
 908   }
 909 }
 910 ```
 911 ### DisableBuiltinPDFViewer
 912 Disable the built in PDF viewer. PDF files are downloaded and sent externally.
 913
 914 **Compatibility:** Firefox 60, Firefox ESR 60\
 915 **CCK2 Equivalent:** `disablePDFjs`\
 916 **Preferences Affected:** `pdfjs.disabled`
 917
 918 #### Windows (GPO)
 919 ```
 920 Software\Policies\Mozilla\Firefox\DisableBuiltinPDFViewer = 0x1 | 0x0
 921 ```
 922 #### Windows (Intune)
 923 OMA-URI:
 924 ```
 925 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableBuiltinPDFViewer
 926 ```
 927 Value (string):
 928 ```
 929 <enabled/> or <disabled/>
 930 ```
 931 #### macOS
 932 ```
 933 <dict>
 934   <key>DisableBuiltinPDFViewer</key>
 935   <true/> | <false/>
 936 </dict>
 937 ```
 938 #### policies.json
 939 ```
 940 {
 941   "policies": {
 942     "DisableBuiltinPDFViewer": true | false
 943   }
 944 }
 945 ```
 946 ### DisabledCiphers
 947 Disable specific cryptographic ciphers.
 948
 949 **Compatibility:** Firefox 76, Firefox ESR 68.8\
 950 **CCK2 Equivalent:** N/A\
 951 **Preferences Affected:** N/A
 952
 953 #### Windows (GPO)
 954 ```
 955 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_DHE_RSA_WITH_AES_128_CBC_SHA = 0x1 | 0x0
 956 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_DHE_RSA_WITH_AES_256_CBC_SHA = 0x1 | 0x0
 957 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA = 0x1 | 0x0
 958 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA = 0x1 | 0x0
 959 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 = 0x1 | 0x0
 960 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 = 0x1 | 0x0
 961 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_RSA_WITH_AES_128_CBC_SHA = 0x1 | 0x0
 962 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_RSA_WITH_AES_256_CBC_SHA = 0x1 | 0x0
 963 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_RSA_WITH_3DES_EDE_CBC_SHA = 0x1 | 0x0
 964 ```
 965 #### Windows (Intune)
 966 OMA-URI:
 967 ```
 968 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_DHE_RSA_WITH_AES_128_CBC_SHA
 969 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_DHE_RSA_WITH_AES_256_CBC_SHA
 970 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
 971 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
 972 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
 973 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
 974 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_RSA_WITH_AES_128_CBC_SHA
 975 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_RSA_WITH_AES_256_CBC_SHA
 976 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_RSA_WITH_3DES_EDE_CBC_SHA
 977 ```
 978 Value (string):
 979 ```
 980 <enabled/> or <disabled/>
 981 ```
 982 #### macOS
 983 ```
 984 <dict>
 985   <key>DisabledCiphers</key>
 986     <dict>
 987       <key>TLS_DHE_RSA_WITH_AES_128_CBC_SHA</key>
 988       <true/> | <false/>
 989       <key>TLS_DHE_RSA_WITH_AES_256_CBC_SHA</key>
 990       <true/> | <false/>
 991       <key>TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA</key>
 992       <true/> | <false/>
 993       <key>TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA</key>
 994       <true/> | <false/>
 995       <key>TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256</key>
 996       <true/> | <false/>
 997       <key>TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256</key>
 998       <true/> | <false/>
 999       <key>TLS_RSA_WITH_AES_128_CBC_SHA</key>
1000       <true/> | <false/>
1001       <key>TLS_RSA_WITH_AES_256_CBC_SHA</key>
1002       <true/> | <false/>
1003       <key>TLS_RSA_WITH_3DES_EDE_CBC_SHA</key>
1004       <true/> | <false/>
1005     </dict>
1006 </dict>
1007 ```
1008 #### policies.json
1009 ```
1010 {
1011   "policies": {
1012     "DisabledCiphers" {
1013       "TLS_DHE_RSA_WITH_AES_128_CBC_SHA": true | false,
1014       "TLS_DHE_RSA_WITH_AES_256_CBC_SHA": true | false,
1015       "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA": true | false,
1016       "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA": true | false,
1017       "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256": true | false,
1018       "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256": true | false,
1019       "TLS_RSA_WITH_AES_128_CBC_SHA": true | false,
1020       "TLS_RSA_WITH_AES_256_CBC_SHA": true | false,
1021       "TLS_RSA_WITH_3DES_EDE_CBC_SHA": true | false
1022     }
1023   }
1024 }
1025 ```
1026 ### DisableDefaultBrowserAgent
1027 Prevent the default browser agent from taking any actions. Only applicable to Windows; other platforms don’t have the agent.
1028
1029 **Compatibility:** Firefox 75, Firefox ESR 68.7 (Windows only)\
1030 **CCK2 Equivalent:** N/A\
1031 **Preferences Affected:** N/A
1032
1033 #### Windows (GPO)
1034 ```
1035 Software\Policies\Mozilla\Firefox\DisableDefaultBrowserAgent = 0x1 | 0x0
1036 ```
1037 #### Windows (Intune)
1038 OMA-URI:
1039 ```
1040 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableDefaultBrowserAgent
1041 ```
1042 Value (string):
1043 ```
1044 <enabled/> or <disabled/>
1045 ```
1046 #### policies.json
1047 ```
1048 {
1049   "policies": {
1050     "DisableDefaultBrowserAgent": true | false
1051   }
1052 }
1053 ```
1054 ### DisableDeveloperTools
1055 Remove access to all developer tools.
1056
1057 **Compatibility:** Firefox 60, Firefox ESR 60\
1058 **CCK2 Equivalent:** `removeDeveloperTools`\
1059 **Preferences Affected:** `devtools.policy.disabled`
1060
1061 #### Windows (GPO)
1062 ```
1063 Software\Policies\Mozilla\Firefox\DisableDeveloperTools = 0x1 | 0x0`
1064 ```
1065 #### Windows (Intune)
1066 OMA-URI:
1067 ```
1068 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableDeveloperTools
1069 ```
1070 Value (string):
1071 ```
1072 <enabled/> or <disabled/>
1073 ```
1074 #### macOS
1075 ```
1076 <dict>
1077   <key>DisableDeveloperTools</key>
1078   <true/> | <false/>
1079 </dict>
1080 ```
1081 #### policies.json
1082 ```
1083 {
1084   "policies": {
1085     "DisableDeveloperTools": true | false
1086   }
1087 }
1088 ```
1089 ### DisableFeedbackCommands
1090 Disable the menus for reporting sites (Submit Feedback, Report Deceptive Site).
1091
1092 **Compatibility:** Firefox 60, Firefox ESR 60\
1093 **CCK2 Equivalent:** N/A\
1094 **Preferences Affected:** N/A
1095
1096 #### Windows (GPO)
1097 ```
1098 Software\Policies\Mozilla\Firefox\DisableFeedbackCommands = 0x1 | 0x0
1099 ```
1100 #### Windows (Intune)
1101 OMA-URI:
1102 ```
1103 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFeedbackCommands
1104 ```
1105 Value (string):
1106 ```
1107 <enabled/> or <disabled/>
1108 ```
1109 #### macOS
1110 ```
1111 <dict>
1112   <key>DisableFeedbackCommands</key>
1113   <true/> | <false/>
1114 </dict>
1115 ```
1116 #### policies.json
1117 ```
1118 {
1119   "policies": {
1120     "DisableFeedbackCommands": true | false
1121   }
1122 }
1123 ```
1124 ### DisableFirefoxScreenshots
1125 Remove access to Firefox Screenshots.
1126
1127 **Compatibility:** Firefox 60, Firefox ESR 60\
1128 **CCK2 Equivalent:** N/A\
1129 **Preferences Affected:** `extensions.screenshots.disabled`
1130
1131 #### Windows (GPO)
1132 ```
1133 Software\Policies\Mozilla\Firefox\DisableFirefoxScreenshots = 0x1 | 0x0
1134 ```
1135 #### Windows (Intune)
1136 OMA-URI:
1137 ```
1138 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxScreenshots
1139 ```
1140 Value (string):
1141 ```
1142 <enabled/> or <disabled/>
1143 ```
1144 #### macOS
1145 ```
1146 <dict>
1147   <key>DisableFirefoxScreenshots</key>
1148   <true/> | <false/>
1149 </dict>
1150 ```
1151 #### policies.json
1152 ```
1153 {
1154   "policies": {
1155     "DisableFirefoxScreenshots": true | false
1156   }
1157 }
1158 ```
1159 ### DisableFirefoxAccounts
1160 Disable Firefox Accounts integration (Sync).
1161
1162 **Compatibility:** Firefox 60, Firefox ESR 60\
1163 **CCK2 Equivalent:** `disableSync`\
1164 **Preferences Affected:** `identity.fxaccounts.enabled`
1165
1166 #### Windows (GPO)
1167 ```
1168 Software\Policies\Mozilla\Firefox\DisableFirefoxAccounts = 0x1 | 0x0
1169 ```
1170 #### Windows (Intune)
1171 OMA-URI:
1172 ```
1173 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxAccounts
1174 ```
1175 Value (string):
1176 ```
1177 <enabled/> or <disabled/>
1178 ```
1179 #### macOS
1180 ```
1181 <dict>
1182   <key>DisableFirefoxAccounts</key>
1183   <true/> | <false/>
1184 </dict>
1185 ```
1186 #### policies.json
1187 ```
1188 {
1189   "policies": {
1190     "DisableFirefoxAccounts": true | false
1191   }
1192 }
1193 ```
1194 ### DisableFirefoxStudies
1195 Disable Firefox studies (Shield).
1196
1197 **Compatibility:** Firefox 60, Firefox ESR 60\
1198 **CCK2 Equivalent:** N/A\
1199 **Preferences Affected:** N/A
1200
1201 #### Windows (GPO)
1202 ```
1203 Software\Policies\Mozilla\Firefox\DisableFirefoxStudies = 0x1 | 0x0
1204 ```
1205 #### Windows (Intune)
1206 OMA-URI:
1207 ```
1208 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxStudies
1209 ```
1210 Value (string):
1211 ```
1212 <enabled/> or <disabled/>
1213 ```
1214 #### macOS
1215 ```
1216 <dict>
1217   <key>DisableFirefoxStudies</key>
1218   <true/> | <false/>
1219 </dict>
1220 ```
1221 #### policies.json
1222 ```
1223 {
1224   "policies": {
1225     "DisableFirefoxStudies": true | false
1226   }
1227 }
1228 ```
1229 ### DisableForgetButton
1230 Disable the "Forget" button.
1231
1232 **Compatibility:** Firefox 60, Firefox ESR 60\
1233 **CCK2 Equivalent:** `disableForget`\
1234 **Preferences Affected:** N/A
1235
1236 #### Windows (GPO)
1237 ```
1238 Software\Policies\Mozilla\Firefox\DisableForgetButton = 0x1 | 0x0
1239 ```
1240 #### Windows (Intune)
1241 OMA-URI:
1242 ```
1243 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableForgetButton
1244 ```
1245 Value (string):
1246 ```
1247 <enabled/> or <disabled/>
1248 ```
1249 #### macOS
1250 ```
1251 <dict>
1252   <key>DisableForgetButton</key>
1253   <true/> | <false/>
1254 </dict>
1255 ```
1256 #### policies.json
1257 ```
1258 {
1259   "policies": {
1260     "DisableForgetButton": true | false
1261   }
1262 }
1263 ```
1264 ### DisableFormHistory
1265 Turn off saving information on web forms and the search bar.
1266
1267 **Compatibility:** Firefox 60, Firefox ESR 60\
1268 **CCK2 Equivalent:** `disableFormFill`\
1269 **Preferences Affected:** ` browser.formfill.enable`
1270
1271 #### Windows (GPO)
1272 ```
1273 Software\Policies\Mozilla\Firefox\DisableFormHistory = 0x1 | 0x0
1274 ```
1275 #### Windows (Intune)
1276 OMA-URI:
1277 ```
1278 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFormHistory
1279 ```
1280 Value (string):
1281 ```
1282 <enabled/> or <disabled/>
1283 ```
1284 #### macOS
1285 ```
1286 <dict>
1287   <key>DisableFormHistory</key>
1288   <true/> | <false/>
1289 </dict>
1290 ```
1291 #### policies.json
1292 ```
1293 {
1294   "policies": {
1295     "DisableFormHistory": true | false
1296   }
1297 }
1298 ```
1299 ### DisablePasswordReveal
1300 Do not allow passwords to be shown in saved logins
1301
1302 **Compatibility:** Firefox 71, Firefox ESR 68.3\
1303 **CCK2 Equivalent:** N/A
1304 **Preferences Affected:** N/A
1305
1306 #### Windows (GPO)
1307 ```
1308 Software\Policies\Mozilla\Firefox\DisablePasswordReveal = 0x1 | 0x0
1309 ```
1310 #### Windows (Intune)
1311 OMA-URI:
1312 ```
1313 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePasswordReveal
1314 ```
1315 Value (string):
1316 ```
1317 <enabled/> or <disabled/>
1318 ```
1319 #### macOS
1320 ```
1321 <dict>
1322   <key>DisablePasswordReveal</key>
1323   <true/> | <false/>
1324 </dict>
1325 ```
1326 #### policies.json
1327 ```
1328 {
1329   "policies": {
1330     "DisablePasswordReveal": true | false
1331   }
1332 }
1333 ```
1334 ### DisablePocket
1335 Remove Pocket in the Firefox UI. It does not remove it from the new tab page.
1336
1337 **Compatibility:** Firefox 60, Firefox ESR 60\
1338 **CCK2 Equivalent:** `disablePocket`\
1339 **Preferences Affected:** `extensions.pocket.enabled`
1340
1341 #### Windows (GPO)
1342 ```
1343 Software\Policies\Mozilla\Firefox\DisablePocket = 0x1 | 0x0
1344 ```
1345 #### Windows (Intune)
1346 OMA-URI:
1347 ```
1348 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePocket
1349 ```
1350 Value (string):
1351 ```
1352 <enabled/> or <disabled/>
1353 ```
1354 #### macOS
1355 ```
1356 <dict>
1357   <key>DisablePocket</key>
1358   <true/> | <false/>
1359 </dict>
1360 ```
1361 #### policies.json
1362 ```
1363 {
1364   "policies": {
1365     "DisablePocket": true | false
1366   }
1367 }
1368 ```
1369 ### DisablePrivateBrowsing
1370 Remove access to private browsing.
1371
1372 **Compatibility:** Firefox 60, Firefox ESR 60\
1373 **CCK2 Equivalent:** `disablePrivateBrowsing`\
1374 **Preferences Affected:** N/A
1375
1376 #### Windows (GPO)
1377 ```
1378 Software\Policies\Mozilla\Firefox\DisablePrivateBrowsing = 0x1 | 0x0
1379 ```
1380 #### Windows (Intune)
1381 OMA-URI:
1382 ```
1383 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePrivateBrowsing
1384 ```
1385 Value (string):
1386 ```
1387 <enabled/> or <disabled/>
1388 ```
1389 #### macOS
1390 ```
1391 <dict>
1392   <key>DisablePrivateBrowsing</key>
1393   <true/> | <false/>
1394 </dict>
1395 ```
1396 #### policies.json
1397 ```
1398 {
1399   "policies": {
1400     "DisablePrivateBrowsing": true | false
1401   }
1402 }
1403 ```
1404 ### DisableProfileImport
1405 Disables the "Import data from another browser" option in the bookmarks window.
1406
1407 **Compatibility:** Firefox 60, Firefox ESR 60\
1408 **CCK2 Equivalent:** N/A\
1409 **Preferences Affected:** N/A
1410
1411 #### Windows (GPO)
1412 ```
1413 Software\Policies\Mozilla\Firefox\DisableProfileImport = 0x1 | 0x0
1414 ```
1415 #### Windows (Intune)
1416 OMA-URI:
1417 ```
1418 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableProfileImport
1419 ```
1420 Value (string):
1421 ```
1422 <enabled/> or <disabled/>
1423 ```
1424 #### macOS
1425 ```
1426 <dict>
1427   <key>DisableProfileImport</key>
1428   <true/> | <false/>
1429 </dict>
1430 ```
1431 #### policies.json
1432 ```
1433 {
1434   "policies": {
1435     "DisableProfileImport": true | false
1436   }
1437 }
1438 ```
1439 ### DisableProfileRefresh
1440 Disable the Refresh Firefox button on about:support and support.mozilla.org, as well as the prompt that displays offering to refresh Firefox when you haven't used it in a while.
1441
1442 **Compatibility:** Firefox 60, Firefox ESR 60\
1443 **CCK2 Equivalent:** `disableResetFirefox`\
1444 **Preferences Affected:** `browser.disableResetPrompt`
1445
1446 #### Windows (GPO)
1447 ```
1448 Software\Policies\Mozilla\Firefox\DisableProfileRefresh = 0x1 | 0x0
1449 ```
1450 #### Windows (Intune)
1451 OMA-URI:
1452 ```
1453 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableProfileRefresh
1454 ```
1455 Value (string):
1456 ```
1457 <enabled/> or <disabled/>
1458 ```
1459 #### macOS
1460 ```
1461 <dict>
1462   <key>DisableProfileRefresh</key>
1463   <true/> | <false/>
1464 </dict>
1465 ```
1466 #### policies.json
1467 ```
1468 {
1469   "policies": {
1470     "DisableProfileRefresh": true | false
1471   }
1472 }
1473 ```
1474 ### DisableSafeMode
1475 Disable safe mode within the browser.
1476
1477 On Windows, this disables safe mode via the command line as well.
1478
1479 **Compatibility:** Firefox 60, Firefox ESR 60 (Windows, macOS)\
1480 **CCK2 Equivalent:** `disableSafeMode`\
1481 **Preferences Affected:** N/A
1482
1483 #### Windows (GPO)
1484 ```
1485 Software\Policies\Mozilla\Firefox\DisableSafeMode = 0x1 | 0x0
1486 ```
1487 #### Windows (Intune)
1488 OMA-URI:
1489 ```
1490 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSafeMode
1491 ```
1492 Value (string):
1493 ```
1494 <enabled/> or <disabled/>
1495 ```
1496 #### macOS
1497 ```
1498 <dict>
1499   <key>DisableSafeMode</key>
1500   <true/> | <false/>
1501 </dict>
1502 ```
1503 #### policies.json
1504 ```
1505 {
1506   "policies": {
1507     "DisableSafeMode": true | false
1508   }
1509 }
1510 ```
1511 ### DisableSecurityBypass
1512 Prevent the user from bypassing security in certain cases.
1513
1514 `InvalidCertificate` prevents adding an exception when an invalid certificate is shown.
1515
1516 `SafeBrowsing` prevents selecting "ignore the risk" and visiting a harmful site anyway.
1517
1518 **Compatibility:** Firefox 60, Firefox ESR 60\
1519 **CCK2 Equivalent:** N/A\
1520 **Preferences Affected:** `security.certerror.hideAddException`,`browser.safebrowsing.allowOverride`
1521
1522 #### Windows (GPO)
1523 ```
1524 Software\Policies\Mozilla\Firefox\DisableSecurityBypass\InvalidCertificate = 0x1 | 0x0
1525 Software\Policies\Mozilla\Firefox\DisableSecurityBypass\SafeBrowsing = 0x1 | 0x0
1526 ```
1527 #### Windows (Intune)
1528 OMA-URI:
1529 ```
1530 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/P_DisableSecurityBypass_InvalidCertificate
1531 ```
1532 Value (string):
1533 ```
1534 <enabled/> or <disabled/>
1535 ```
1536 OMA-URI:
1537 ```
1538 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/P_DisableSecurityBypass_SafeBrowsing
1539 ```
1540 Value (string):
1541 ```
1542 <enabled/> or <disabled/>
1543 ```
1544
1545 #### macOS
1546 ```
1547 <dict>
1548   <key>DisableSecurityBypass</key>
1549   <dict>
1550     <key>InvalidCertificate</key>
1551     <true/> | <false/>
1552     <key><SafeBrowsing/key>
1553     <true/> | <false/>
1554   </dict>
1555 </dict>
1556 ```
1557 #### policies.json
1558 ```
1559 {
1560   "policies": {
1561     "DisableSecurityBypass": {
1562       "InvalidCertificate": true | false,
1563       "SafeBrowsing": true | false
1564     }
1565   }
1566 }
1567 ```
1568 ### DisableSystemAddonUpdate
1569 Prevent system add-ons from being installed or update.
1570
1571 **Compatibility:** Firefox 60, Firefox ESR 60\
1572 **CCK2 Equivalent:** N/A\
1573 **Preferences Affected:** N/A
1574
1575 #### Windows (GPO)
1576 ```
1577 Software\Policies\Mozilla\Firefox\DisableSystemAddonUpdate = 0x1 | 0x0
1578 ```
1579 #### Windows (Intune)
1580 OMA-URI:
1581 ```
1582 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSystemAddonUpdate
1583 ```
1584 Value (string):
1585 ```
1586 <enabled/> or <disabled/>
1587 ```
1588 #### macOS
1589 ```
1590 <dict>
1591   <key>DisableSystemAddonUpdate</key>
1592   <true/> | <false/>
1593 </dict>
1594 ```
1595 #### policies.json
1596 ```
1597 {
1598   "policies": {
1599     "DisableSystemAddonUpdate": true | false
1600   }
1601 }
1602 ```
1603 ### DisableTelemetry
1604 Prevent the upload of telemetry data.
1605
1606 Mozilla recommends that you do not disable telemetry. Information collected through telemetry helps us build a better product for businesses like yours.
1607
1608 **Compatibility:** Firefox 60, Firefox ESR 60\
1609 **CCK2 Equivalent:** `disableTelemetry`\
1610 **Preferences Affected:** `datareporting.healthreport.uploadEnabled,datareporting.policy.dataSubmissionEnabled`
1611
1612 #### Windows (GPO)
1613 ```
1614 Software\Policies\Mozilla\Firefox\DisableTelemetry = 0x1 | 0x0
1615 ```
1616 #### Windows (Intune)
1617 OMA-URI:
1618 ```
1619 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableTelemetry
1620 ```
1621 Value (string):
1622 ```
1623 <enabled/> or <disabled/>
1624 ```
1625 #### macOS
1626 ```
1627 <dict>
1628   <key>DisableTelemetry</key>
1629   <true/> | <false/>
1630 </dict>
1631 ```
1632 #### policies.json
1633 ```
1634 {
1635   "policies": {
1636     "DisableTelemetry": true | false
1637   }
1638 }
1639 ```
1640 ### DisplayBookmarksToolbar
1641 Set the initial state of the bookmarks toolbar. A user can still hide it and it will stay hidden.
1642
1643 **Compatibility:** Firefox 60, Firefox ESR 60\
1644 **CCK2 Equivalent:** `displayBookmarksToolbar`\
1645 **Preferences Affected:** N/A
1646
1647 #### Windows (GPO)
1648 ```
1649 Software\Policies\Mozilla\Firefox\DisplayBookmarksToolbar = 0x1 | 0x0
1650 ```
1651 #### Windows (Intune)
1652 OMA-URI:
1653 ```
1654 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisplayBookmarksToolbar
1655 ```
1656 Value (string):
1657 ```
1658 <enabled/> or <disabled/>
1659 ```
1660 #### macOS
1661 ```
1662 <dict>
1663   <key>DisplayBookmarksToolbar</key>
1664   <true/> | <false/>
1665 </dict>
1666 ```
1667 #### policies.json
1668 ```
1669 {
1670   "policies": {
1671     "DisplayBookmarksToolbar": true | false
1672   }
1673 }
1674 ```
1675 ### DisplayMenuBar (Deprecated)
1676 Set the initial state of the menubar. A user can still hide it and it will stay hidden.
1677
1678 **Compatibility:** Firefox 60, Firefox ESR 60 (Windows, some Linux)\
1679 **CCK2 Equivalent:** `displayMenuBar`\
1680 **Preferences Affected:** N/A
1681
1682 #### Windows (GPO)
1683 ```
1684 Software\Policies\Mozilla\Firefox\DisplayMenuBar = 0x1 | 0x0
1685 ```
1686 #### macOS
1687 ```
1688 <dict>
1689   <key>DisplayMenuBar</key>
1690   <true/> | <false/>
1691 </dict>
1692 ```
1693 #### policies.json
1694 ```
1695 {
1696   "policies": {
1697     "DisplayMenuBar": true | false
1698   }
1699 }
1700 ```
1701 ### DisplayMenuBar
1702 Set the state of the menubar.
1703
1704 `always` means the menubar is shown and cannot be hidden.
1705
1706 `never` means the menubar is hidden and cannot be shown.
1707
1708 `default-on` means the menubar is on by default but can be hidden.
1709
1710 `default-off` means the menubar is off by default but can be shown.
1711
1712 **Compatibility:** Firefox 73, Firefox ESR 68.5 (Windows, some Linux)\
1713 **CCK2 Equivalent:** `displayMenuBar`\
1714 **Preferences Affected:** N/A
1715
1716 #### Windows (GPO)
1717 ```
1718 Software\Policies\Mozilla\Firefox\DisplayMenuBar = "always", "never", "default-on", "default-off"
1719 ```
1720 #### Windows (Intune)
1721 OMA-URI:
1722 ```
1723 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisplayMenuBar_Enum
1724 ```
1725 Value (string):
1726 ```
1727 <enabled/>
1728 <data id="DisplayMenuBar" value="always | never | default-on | default-off"/>
1729 ```
1730 #### macOS
1731 ```
1732 <dict>
1733   <key>DisplayMenuBar</key>
1734   <string>always | never | default-on | default-off</string>
1735 </dict>
1736 ```
1737 #### policies.json
1738 ```
1739 {
1740   "policies": {
1741     "DisplayMenuBar": "always", "never", "default-on", "default-off"
1742   }
1743 }
1744 ```
1745 ### DNSOverHTTPS
1746 Configure DNS over HTTPS.
1747
1748 `Enabled` determines whether DNS over HTTPS is enabled
1749
1750 `ProviderURL` is a URL to another provider.
1751
1752 `Locked` prevents the user from changing DNS over HTTPS preferences.
1753
1754 `ExcludedDomains` excludes domains from DNS over HTTPS.
1755
1756 **Compatibility:** Firefox 63, Firefox ESR 68 (ExcludedDomains added in 75/68.7)\
1757 **CCK2 Equivalent:** N/A\
1758 **Preferences Affected:** `network.trr.mode`,`network.trr.uri`
1759
1760 #### Windows (GPO)
1761 ```
1762 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\Enabled = 0x1 | 0x0
1763 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\ProviderURL = "URL_TO_ALTERNATE_PROVIDER"
1764 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\Locked = 0x1 | 0x0
1765 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\ExcludedDomains\1 = "example.com"
1766 ```
1767 #### Windows (Intune)
1768 OMA-URI:
1769 ```
1770 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_Enabled
1771 ```
1772 Value (string):
1773 ```
1774 <enabled/> or <disabled/>
1775 ```
1776 OMA-URI:
1777 ```
1778 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_ProviderURL
1779 ```
1780 Value (string):
1781 ```
1782 <enabled/>
1783 <data id="String" value="URL_TO_ALTERNATE_PROVIDER"/>
1784 ```
1785 OMA-URI:
1786 ```
1787 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_Locked
1788 ```
1789 Value (string):
1790 ```
1791 <enabled/> or <disabled/>
1792 ```
1793 OMA-URI:
1794 ```
1795 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_ExcludedDomains
1796 ```
1797 Value (string):
1798 ```
1799 <enabled/>
1800 <data id="List" value="1&#xF000;example.com"/>
1801 ```
1802 #### macOS
1803 ```
1804 <dict>
1805   <key>DNSOverHTTPS</key>
1806   <dict>
1807     <key>Enabled</key>
1808     <true/> | <false/>
1809     <key>ProviderURL</key>
1810     <string>URL_TO_ALTERNATE_PROVIDER</string>
1811     <key>Locked</key>
1812     <true/> | <false/>
1813     <key>ExcludedDomains</key>
1814     <array>
1815       <string>example.com</string>
1816     </array>
1817   </dict>
1818 </dict>
1819 ```
1820 #### policies.json
1821 ```
1822 {
1823   "policies": {
1824     "DNSOverHTTPS": {
1825       "Enabled":  true | false,
1826       "ProviderURL": "URL_TO_ALTERNATE_PROVIDER",
1827       "Locked": true | false,
1828       "ExcludedDomains": ["example.com"]
1829     }
1830   }
1831 }
1832 ```
1833 ### DontCheckDefaultBrowser
1834 Don't check if Firefox is the default browser at startup.
1835
1836 **Compatibility:** Firefox 60, Firefox ESR 60\
1837 **CCK2 Equivalent:** `dontCheckDefaultBrowser`\
1838 **Preferences Affected:** `browser.shell.checkDefaultBrowser`
1839
1840 #### Windows (GPO)
1841 ```
1842 Software\Policies\Mozilla\Firefox\DontCheckDefaultBrowser = 0x1 | 0x0
1843 ```
1844 #### Windows (Intune)
1845 OMA-URI:
1846 ```
1847 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DontCheckDefaultBrowser
1848 ```
1849 Value (string):
1850 ```
1851 <enabled/> or <disabled/>
1852 ```
1853 #### macOS
1854 ```
1855 <dict>
1856   <key>DontCheckDefaultBrowser</key>
1857   <true/> | <false/>
1858 </dict>
1859 ```
1860 #### policies.json
1861 ```
1862 {
1863   "policies": {
1864     "DontCheckDefaultBrowser": true | false
1865   }
1866 }
1867 ```
1868 ### DefaultDownloadDirectory
1869 Set the default download directory.
1870
1871 You can use ${home} for the native home directory.
1872
1873 **Compatibility:** Firefox 68, Firefox ESR 68\
1874 **CCK2 Equivalent:** N/A\
1875 **Preferences Affected:** `browser.download.dir`,`browser.download.folderList`
1876
1877 #### Windows (GPO)
1878 ```
1879 Software\Policies\Mozilla\Firefox\DefaultDownloadDirectory = "${home}\Downloads"
1880 ```
1881 #### Windows (Intune)
1882 OMA-URI:
1883 ```
1884 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DefaultDownloadDirectory
1885 ```
1886 Value (string):
1887 ```
1888 <enabled/>
1889 <data id="Preferences_String" value="${home}\Downloads"/>
1890 ```
1891 #### macOS
1892 ```
1893 <dict>
1894   <key>DefaultDownloadDirectory</key>
1895   <string>${home}/Downloads</string>
1896 </dict>
1897 ```
1898 #### policies.json (macOS and Linux)
1899 ```
1900 {
1901   "policies": {
1902     "DefaultDownloadDirectory": "${home}/Downloads"
1903 }
1904 ```
1905 #### policies.json (Windows)
1906 ```
1907 {
1908   "policies": {
1909     "DefaultDownloadDirectory": "${home}\\Downloads"
1910 }
1911 ```
1912 ### DownloadDirectory
1913 Set and lock the download directory.
1914
1915 You can use ${home} for the native home directory.
1916
1917 **Compatibility:** Firefox 68, Firefox ESR 68\
1918 **CCK2 Equivalent:** N/A\
1919 **Preferences Affected:** `browser.download.dir`,`browser.download.folderList`,`browser.download.useDownloadDir`
1920
1921 #### Windows (GPO)
1922 ```
1923 Software\Policies\Mozilla\Firefox\DownloadDirectory = "${home}\Downloads"
1924 ```
1925 #### Windows (Intune)
1926 OMA-URI:
1927 ```
1928 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DownloadDirectory
1929 ```
1930 Value (string):
1931 ```
1932 <enabled/>
1933 <data id="Preferences_String" value="${home}\Downloads"/>
1934 ```
1935 #### macOS
1936 ```
1937 <dict>
1938   <key>DownloadDirectory</key>
1939   <string>${home}/Downloads</string>
1940 </dict>
1941 ```
1942 #### policies.json (macOS and Linux)
1943 ```
1944 {
1945   "policies": {
1946     "DownloadDirectory": "${home}/Downloads"
1947 }
1948 ```
1949 #### policies.json (Windows)
1950 ```
1951 {
1952   "policies": {
1953     "DownloadDirectory": "${home}\\Downloads"
1954 }
1955 ```
1956 ### EnableTrackingProtection
1957 Configure tracking protection.
1958
1959 If this policy is not configured, tracking protection is not enabled by default in the browser, but it is enabled by default in private browsing and the user can change it.
1960
1961 If `Value` is set to false, tracking protection is disabled and locked in both the regular browser and private browsing.
1962
1963 If `Value` is set to true, tracking protection is enabled by default in both the regular browser and private browsing and the `Locked` value determines whether or not a user can change it.
1964
1965 If `Cryptomining` is set to true, cryptomining scripts on websites are blocked.
1966
1967 If `Fingerprinting` is set to true, fingerprinting scripts on websites are blocked.
1968
1969 `Exceptions` are origins for which tracking protection is not enabled.
1970
1971 **Compatibility:** Firefox 60, Firefox ESR 60 (Cryptomining and Fingerprinting added in 70/68.2, Exceptions added in 73/68.5)\
1972 **CCK2 Equivalent:** N/A\
1973 **Preferences Affected:** `privacy.trackingprotection.enabled`,`privacy.trackingprotection.pbmode.enabled`,`privacy.trackingprotection.cryptomining.enabled`,`privacy.trackingprotection.fingerprinting.enabled`
1974
1975 #### Windows (GPO)
1976 ```
1977 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Value = 0x1 | 0x0
1978 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Locked = 0x1 | 0x0
1979 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Cryptomining = 0x1 | 0x0
1980 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Fingerprinting = 0x1 | 0x0
1981 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Exceptions\1 = "https://example.com"
1982 ```
1983 #### Windows (Intune)
1984 OMA-URI:
1985 ```
1986 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/TrackingProtection
1987 ```
1988 Value (string):
1989 ```
1990 <enabled/>
1991 <data id="TrackingProtectionLocked" value="true | false"/>
1992 <data id="Cryptomining" value="true | false"/>
1993 <data id="Fingerprinting" value="true | false"/>
1994 <data id=TrackingProtection_Exceptions" value="1&#xF000;https://example.com"/>
1995 ```
1996 #### macOS
1997 ```
1998 <dict>
1999   <key>EnableTrackingProtection</key>
2000   <dict>
2001     <key>Value</key>
2002     <true/> | <false/>
2003     <key><Locked</key>
2004     <true/> | <false/>
2005     <key><Cryptomining</key>
2006     <true/> | <false/>
2007     <key><Fingerprinting</key>
2008     <true/> | <false/>
2009     <key>Exceptions</key>
2010     <array>
2011       <string>https://example.com</string>
2012     </array>
2013   </dict>
2014 </dict>
2015 ```
2016 #### policies.json
2017 ```
2018 {
2019   "policies": {
2020     "EnableTrackingProtection": {
2021       "Value": true | false,
2022       "Locked": true | false,
2023       "Cryptomining": true | false,
2024       "Fingerprinting": true | false,
2025       "Exceptions": ["https://example.com"]
2026     }
2027 }
2028 ```
2029 ### EncryptedMediaExtensions
2030 Enable or disable Encrypted Media Extensions and optionally lock it.
2031
2032 If `Enabled` is set to false, encrypted media extensions (like Widevine) are not downloaded by Firefox unless the user consents to installing them.
2033
2034 If `Locked` is set to true and `Enabled` is set to false, Firefox will not download encrypted media extensions (like Widevine) or ask the user to install them.
2035
2036 **Compatibility:** Firefox 77, Firefox ESR 68.9\
2037 **CCK2 Equivalent:** N/A\
2038 **Preferences Affected:** `media.eme.enabled`
2039
2040 #### Windows (GPO)
2041 ```
2042 Software\Policies\Mozilla\Firefox\EncryptedMediaExtensions\Enabled = 0x1 | 0x0
2043 Software\Policies\Mozilla\Firefox\EncryptedMediaExtensions\Locked = 0x1 | 0x0
2044 ```
2045 #### Windows (Intune)
2046 OMA-URI:
2047 ```
2048 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~EncryptedMediaExtensions/EncryptedMediaExtensions_Enabled
2049 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~EncryptedMediaExtensions/EncryptedMediaExtensions_Locked
2050 ```
2051 Value (string):
2052 ```
2053 <enabled/>or <disabled/>
2054 ```
2055 #### macOS
2056 ```
2057 <dict>
2058   <key>EncryptedMediaExtensions</key>
2059   <dict>
2060     <key>Enabled</key>
2061     <true/> | <false/>
2062     <key><Locked</key>
2063     <true/> | <false/>
2064   </dict>
2065 </dict>
2066 ```
2067 #### policies.json
2068 ```
2069 {
2070   "policies": {
2071     "EncryptedMediaExtensions": {
2072       "Enabled": true | false,
2073       "Locked": true | false
2074     }
2075 }
2076 ```
2077 ### EnterprisePoliciesEnabled
2078 Enable policy support on macOS.
2079
2080 **Compatibility:** Firefox 63, Firefox ESR 60.3 (macOS only)\
2081 **CCK2 Equivalent:** N/A\
2082 **Preferences Affected:** N/A
2083
2084 #### macOS
2085 ```
2086 <dict>
2087   <key>EnterprisePoliciesEnabled</key>
2088   <true/>
2089 </dict>
2090 ```
2091 ### Extensions
2092 Control the installation, uninstallation and locking of extensions.
2093
2094 `Install` is a list of URLs or native paths for extensions to be installed.
2095
2096 `Uninstall` is a list of extension IDs that should be uninstalled if found.
2097
2098 `Locked` is a list of extension IDs that the user cannot disable or uninstall.
2099
2100 **Compatibility:** Firefox 60, Firefox ESR 60\
2101 **CCK2 Equivalent:** `addons`\
2102 **Preferences Affected:** N/A
2103
2104 #### Windows (GPO)
2105 ```
2106 Software\Policies\Mozilla\Firefox\Extensions\Install\1 = "https://addons.mozilla.org/firefox/downloads/somefile.xpi"
2107 Software\Policies\Mozilla\Firefox\Extensions\Install\2 = "//path/to/xpi"
2108 Software\Policies\Mozilla\Firefox\Extensions\Uninstall\1 = "bad_addon_id@mozilla.org"
2109 Software\Policies\Mozilla\Firefox\Extensions\Locked\1 = "addon_id@mozilla.org"
2110 ```
2111 #### macOS
2112 ```
2113 <dict>
2114   <key>Extensions</key>
2115   <dict>
2116     <key>Install</key>
2117     <array>
2118       <string>https://addons.mozilla.org/firefox/downloads/somefile.xpi</string>
2119       <string>//path/to/xpi</string>
2120     </array>
2121     <key>Uninstall</key>
2122     <array>
2123       <string>bad_addon_id@mozilla.org</string>
2124     </array>
2125     <key>Locked</key>
2126     <array>
2127       <string>addon_id@mozilla.org</string>
2128     </array>
2129   </dict>
2130 </dict>
2131 ```
2132 #### policies.json
2133 ```
2134 {
2135   "policies": {
2136     "Extensions": {
2137       "Install": ["https://addons.mozilla.org/firefox/downloads/somefile.xpi", "//path/to/xpi"],
2138       "Uninstall": ["bad_addon_id@mozilla.org"],
2139       "Locked":  ["addon_id@mozilla.org"]
2140     }
2141   }
2142 }
2143 ```
2144 ### ExtensionSettings
2145 Manage all aspects of extensions. This policy is based heavily on the [Chrome policy](https://dev.chromium.org/administrators/policy-list-3/extension-settings-full) of the same name.
2146
2147 This policy maps an extension ID to its configuration. With an extension ID, the configuration will be applied to the specified extension only. A default configuration can be set for the special ID "*", which will apply to all extensions that don't have a custom configuration set in this policy.
2148
2149 To obtain an extension ID, install the extension and go to about:support. You will see the ID in the Extensions section.
2150
2151 The configuration for each extension is another dictionary that can contain the fields documented below.
2152
2153 | Name | Description |
2154 | --- | --- |
2155 | `installation_mode` | Maps to a string indicating the installation mode for the extension. The valid strings are `allowed`,`blocked`,`force_installed`, and `normal_installed`.
2156 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`allowed` | Allows the extension to be installed by the user. This is the default behavior.
2157 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`blocked`| Blocks installation of the extension and removes it from the device if already installed.
2158 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`force_installed`| The extension is automatically installed and can't be removed by the user. This option is not valid for the default configuration and requires an install_url.
2159 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`normal_installed`| The extension is automatically installed but can be disabled by the user. This option is not valid for the default configuration and requires an install_url.
2160 | `install_url`| Maps to a URL indicating where Firefox can download a force_installed or normal_installed extension. If installing from the addons.mozilla.org, use the following URL (substituting SHORT_NAME from the URL on AMO), https://addons.mozilla.org/firefox/downloads/latest/SHORT_NAME/latest.xpi. If installing from the local file system, use a file:/// URL. Languages packs are available from https://releases.mozilla.org/pub/firefox/releases/VERSION/PLATFORM/xpi/LANGUAGE.xpi.
2161 | `install_sources` | Each item in this list is an extension-style match pattern. Users will be able to easily install items from any URL that matches an item in this list. Both the location of the *.xpi file and the page where the download is started from (i.e.  the referrer) must be allowed by these patterns. This setting can be used only for the default configuration.
2162 | `allowed_types` | This setting whitelists the allowed types of extension/apps that can be installed in Firefox. The value is a list of strings, each of which should be one of the following: "extension", "theme", "dictionary", "langpack" This setting can be used only for the default configuration.
2163 | `blocked_install_message` | This maps to a string specifying the error message to display to users if they're blocked from installing an extension. This setting allows you to append text to the generic error message displayed when the extension is blocked. This could be be used to direct users to your help desk, explain why a particular extension is blocked, or something else.
2164
2165 **Compatibility:** Firefox 69, Firefox ESR 68.1\
2166 **CCK2 Equivalent:** N/A\
2167 **Preferences Affected:** N/A
2168
2169 #### Windows (GPO)
2170 ```
2171 Software\Policies\Mozilla\Firefox\ExtensionSettings (REG_MULTI_SZ) =
2172 {
2173   "*": {
2174     "blocked_install_message": "Custom error message.",
2175     "install_sources": ["https://addons.mozilla.org/"],
2176     "installation_mode": "blocked",
2177     "allowed_types": ["extension"]
2178   },
2179   "uBlock0@raymondhill.net": {
2180     "installation_mode": "force_installed",
2181     "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
2182   }
2183 }
2184 ```
2185 #### Windows (Intune)
2186 OMA-URI:
2187 ```
2188 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/ExtensionSettings
2189 ```
2190 Value (string):
2191 ```
2192 <enabled/>
2193 <data id="ExtensionSettings" value='
2194   "*": {
2195       "blocked_install_message": "Custom error message.",
2196       "install_sources": ["https://addons.mozilla.org/"],
2197       "installation_mode": "blocked",
2198       "allowed_types": ["extension"]
2199     },
2200     "uBlock0@raymondhill.net": {
2201       "installation_mode": "force_installed",
2202       "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
2203     }'/>
2204 ```
2205 #### macOS
2206 ```
2207 <dict>
2208   <key>ExtensionSettings</key>
2209   <dict>
2210     <key>*</key>
2211     <dict>
2212       <key>blocked_install_message</key>
2213       <string>Custom error message.</string>
2214       <key>install_sources</key>
2215       <array>
2216         <string>https://addons.mozilla.org/</string>
2217       </array>
2218       <key>installation_mode</key>
2219       <string>blocked</string>
2220       <key>allowed_types</key>
2221       <array>
2222         <string>extension</string>
2223       </array>
2224     </dict>
2225     <key>uBlock0@raymondhill.net</key>
2226     <dict>
2227       <key>installation_mode</key>
2228        <string>force_installed</string>
2229       <key>install_url</key>
2230       <string>https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi</string>
2231     </dict>
2232   </dict>
2233 </dict>
2234 ```
2235 #### policies.json
2236 ```
2237 {
2238   "policies": {
2239     "ExtensionSettings": {
2240       "*": {
2241         "blocked_install_message": "Custom error message.",
2242         "install_sources": ["https://addons.mozilla.org/"],
2243         "installation_mode": "blocked",
2244         "allowed_types": ["extension"]
2245       },
2246       "uBlock0@raymondhill.net": {
2247         "installation_mode": "force_installed",
2248         "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
2249       }
2250     }
2251   }
2252 }
2253 ```
2254 ### ExtensionUpdate
2255 Control extension updates.
2256
2257 **Compatibility:** Firefox 67, Firefox ESR 60.7\
2258 **CCK2 Equivalent:** N/A\
2259 **Preferences Affected:** `extensions.update.enabled`
2260
2261 #### Windows (GPO)
2262 ```
2263 Software\Policies\Mozilla\Firefox\ExtensionUpdate = 0x1 | 0x0
2264 ```
2265 #### Windows (Intune)
2266 OMA-URI:
2267 ```
2268 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/ExtensionUpdate
2269 ```
2270 Value (string):
2271 ```
2272 <enabled/> or <disabled/>
2273 ```
2274 #### macOS
2275 ```
2276 <dict>
2277   <key>ExtensionUpdate</key>
2278   <true/> | <false/>
2279 </dict>
2280 ```
2281 #### policies.json
2282 ```
2283 {
2284   "policies": {
2285     "ExtensionUpdate": true | false
2286   }
2287 }
2288 ```
2289 ### FlashPlugin
2290 Configure the default Flash plugin policy as well as origins for which Flash is allowed.
2291
2292 `Allow` is a list of origins where Flash are allowed.
2293
2294 `Block` is a list of origins where Flash is not allowed.
2295
2296 `Default` determines whether or not Flash is allowed by default.
2297
2298 `Locked` prevents the user from changing Flash preferences.
2299
2300 **Compatibility:** Firefox 60, Firefox ESR 60\
2301 **CCK2 Equivalent:** `permissions.plugin`\
2302 **Preferences Affected:** `plugin.state.flash`
2303
2304 #### Windows (GPO)
2305 ```
2306 Software\Policies\Mozilla\Firefox\FlashPlugin\Allow\1 = "https://example.org"
2307 Software\Policies\Mozilla\Firefox\FlashPlugin\Block\1 = "https://example.edu"
2308 Software\Policies\Mozilla\Firefox\FlashPlugin\Default = 0x1 | 0x0
2309 Software\Policies\Mozilla\Firefox\FlashPlugin\Locked = 0x1 | 0x0
2310 ```
2311 #### Windows (Intune)
2312 OMA-URI:
2313 ```
2314 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Flash/FlashPlugin_Allow
2315 ```
2316 Value (string):
2317 ```
2318 <enabled/>
2319 <data id="Permissions" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
2320 ```
2321 OMA-URI:
2322 ```
2323 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Flash/FlashPlugin_Locked
2324 ```
2325 Value (string):
2326 ```
2327 <enabled/> or <disabled/>
2328 ```
2329 OMA-URI:
2330 ```
2331 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Flash/FlashPlugin_Default
2332 ```
2333 Value (string):
2334 ```
2335 <enabled/> or <disabled/>
2336 ```
2337 #### macOS
2338 ```
2339 <dict>
2340   <key>FlashPlugin</key>
2341   <dict>
2342     <key>Allow</key>
2343     <array>
2344       <string>http://example.org</string>
2345     </array>
2346     <key>Block</key>
2347     <array>
2348       <string>http://example.edu</string>
2349     </array>
2350     <key>Default</key>
2351     <true/> | <false/>
2352     <key>Locked</key>
2353     <true/> | <false/>
2354   </dict>
2355 </dict>
2356 ```
2357 #### policies.json
2358 ```
2359 {
2360   "policies": {
2361     "FlashPlugin": {
2362       "Allow": ["http://example.org/"],
2363       "Block": ["http://example.edu/"],
2364       "Default": true | false,
2365       "Locked": true | false
2366     }
2367   }
2368 }
2369 ```
2370 ### FirefoxHome
2371 Customize the Firefox Home page.
2372
2373 **Compatibility:** Firefox 68, Firefox ESR 68\
2374 **CCK2 Equivalent:** N/A\
2375 **Preferences Affected:** `browser.newtabpage.activity-stream.showSearch`,`browser.newtabpage.activity-stream.feeds.topsites`,`browser.newtabpage.activity-stream.feeds.section.highlights`,`browser.newtabpage.activity-stream.feeds.section.topstories`,`browser.newtabpage.activity-stream.feeds.snippets`
2376
2377 #### Windows (GPO)
2378 ```
2379 Software\Policies\Mozilla\Firefox\FirefoxHome\Search = 0x1 | 0x0
2380 Software\Policies\Mozilla\Firefox\FirefoxHome\TopSites = 0x1 | 0x0
2381 Software\Policies\Mozilla\Firefox\FirefoxHome\Highlights = 0x1 | 0x0
2382 Software\Policies\Mozilla\Firefox\FirefoxHome\Pocket = 0x1 | 0x0
2383 Software\Policies\Mozilla\Firefox\FirefoxHome\Snippets = 0x1 | 0x0
2384 Software\Policies\Mozilla\Firefox\FirefoxHome\Locked = 0x1 | 0x0
2385 ```
2386 #### Windows (Intune)
2387 OMA-URI:
2388 ```
2389 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/CustomizeFirefoxHome
2390 ```
2391 Value (string):
2392 ```
2393 <enabled/>
2394 <data id="FirefoxHome_Search"  value="true | false"/>
2395 <data id="FirefoxHome_TopSites"  value="true | false"/>
2396 <data id="FirefoxHome_Highlights"  value="true | false"/>
2397 <data id="FirefoxHome_Pocket"  value="true | false"/>
2398 <data id="FirefoxHome_Snippets"  value="true | false"/>
2399 <data id="FirefoxHome_Locked"  value="true | false"/>
2400 ```
2401 #### macOS
2402 ```
2403 <dict>
2404   <key>FirefoxHome</key>
2405   <dict>
2406     <key>Search</key>
2407     <true/> | <false/>
2408     <key>TopSites</key>
2409     <true/> | <false/>
2410     <key>Highlights</key>
2411     <true/> | <false/>
2412     <key>Pocket</key>
2413     <true/> | <false/>
2414     <key>Snippets</key>
2415     <true/> | <false/>
2416     <key>Locked</key>
2417     <true/> | <false/>
2418   </dict>
2419 </dict>
2420 ```
2421 #### policies.json
2422 ```
2423 {
2424   "policies": {
2425     "FirefoxHome": {
2426       "Search": true | false,
2427       "TopSites": true | false,
2428       "Highlights": true | false,
2429       "Pocket": true | false,
2430       "Snippets": true | false,
2431       "Locked": true | false
2432     }
2433   }
2434 }
2435 ```
2436 ### HardwareAcceleration
2437 Control hardware acceleration.
2438
2439 **Compatibility:** Firefox 60, Firefox ESR 60\
2440 **CCK2 Equivalent:** N/A\
2441 **Preferences Affected:** `layers.acceleration.disabled`
2442
2443 #### Windows (GPO)
2444 ```
2445 Software\Policies\Mozilla\Firefox\HardwareAcceleration = 0x1 | 0x0
2446 ```
2447 #### Windows (Intune)
2448 OMA-URI:
2449 ```
2450 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/HardwareAcceleration
2451 ```
2452 Value (string):
2453 ```
2454 <enabled/> or <disabled/>
2455 ```
2456 #### macOS
2457 ```
2458 <dict>
2459   <key>HardwareAcceleration</key>
2460   <true/> | <false/>
2461 </dict>
2462 ```
2463 #### policies.json
2464 ```
2465 {
2466   "policies": {
2467     "HardwareAcceleration": true | false
2468   }
2469 }
2470 ```
2471 ### Homepage
2472 Configure the default homepage and how Firefox starts.
2473
2474 `URL` is the default homepage.
2475
2476 `Locked` prevents the user from changing homepage preferences.
2477
2478 `Additional` allows for more than one homepage.
2479
2480 `StartPage` is how Firefox starts. The choices are no homepage, the default homepage or the previous session.
2481
2482 **Compatibility:** Firefox 60, Firefox ESR 60 (StartPage was added in Firefox 60, Firefox ESR 60.4)\
2483 **CCK2 Equivalent:** `homePage`,`lockHomePage`\
2484 **Preferences Affected:** `browser.startup.homepage`,`browser.startup.page`
2485
2486 #### Windows (GPO)
2487 ```
2488 Software\Policies\Mozilla\Firefox\Homepage\URL = "https://example.com"
2489 Software\Policies\Mozilla\Firefox\Homepage\Locked = 0x1 | 0x0
2490 Software\Policies\Mozilla\Firefox\Homepage\Additional\1 = "https://example.org"
2491 Software\Policies\Mozilla\Firefox\Homepage\Additional\2 = "https://example.edu"
2492 Software\Policies\Mozilla\Firefox\Homepage\StartPage = "none" | "homepage" |  "previous-session"
2493 ```
2494 #### Windows (Intune)
2495 OMA-URI:
2496 ```
2497 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageURL
2498 ```
2499 Value (string):
2500 ```
2501 <enabled/>
2502
2503 <data id="HomepageURL" value="https://example.com"/>
2504 <data id="HomepageLocked" value="true | false"/>
2505 ```
2506 OMA-URI:
2507 ```
2508 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageAdditional
2509 ```
2510 Value (string):
2511 ```
2512 <enabled/>
2513
2514 <data id="HomepageAdditional" value="1&#xF000;http://example.org&#xF000;2&#xF000;http://example.edu"/>
2515 ```
2516 OMA-URI:
2517 ```
2518 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageStartPage
2519 ```
2520 Value (string):
2521 ```
2522 <enabled/>
2523
2524 <data id="StartPage" value="none | homepage | previous-session"/>
2525 ```
2526 #### macOS
2527 ```
2528 <dict>
2529   <key>Homepage</key>
2530   <dict>
2531     <key>URL</key>
2532     <string>http://example.com</string>
2533     <key>Locked</key>
2534     <true/> | <false/>
2535     <key>Additional</key>
2536     <array>
2537       <string>http://example.org</string>
2538       <string>http://example.edu</string>
2539     </array>
2540     <key>StartPage</key>
2541     <string>none | homepage | previous-session</string>
2542   </dict>
2543 </dict>
2544 ```
2545 #### policies.json
2546 ```
2547 {
2548   "policies": {
2549     "Homepage": {
2550       "URL": "http://example.com/",
2551       "Locked": true | false,
2552       "Additional": ["http://example.org/",
2553                      "http://example.edu/"],
2554       "StartPage": "none" | "homepage" | "previous-session"
2555     }
2556   }
2557 }
2558 ```
2559 ### InstallAddonsPermission
2560 Configure the default extension install policy as well as origins for extension installs are allowed. This policy does not override turning off all extension installs.
2561
2562 `Allow` is a list of origins where extension installs are allowed.
2563
2564 `Default` determines whether or not extension installs are allowed by default.
2565
2566 **Compatibility:** Firefox 60, Firefox ESR 60\
2567 **CCK2 Equivalent:** `permissions.install`\
2568 **Preferences Affected:** `xpinstall.enabled`
2569
2570 #### Windows (GPO)
2571 ```
2572 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Allow\1 = "https://example.org"
2573 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Allow\2 = "https://example.edu"
2574 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Default = 0x1 | 0x0
2575 ```
2576 #### Windows (Intune)
2577 OMA-URI:
2578 ```
2579 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Addons/InstallAddonsPermission_Allow
2580 ```
2581 Value (string):
2582 ```
2583 <enabled/>
2584 <data id="Permissions" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
2585 ```
2586 OMA-URI:
2587 ```
2588 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Addons/InstallAddonsPermission_Default
2589 ```
2590 Value (string):
2591 ```
2592 <enabled/>
2593 ```
2594 #### macOS
2595 ```
2596 <dict>
2597   <key>InstallAddonsPermission</key>
2598   <dict>
2599     <key>Allow</key>
2600     <array>
2601       <string>http://example.org</string>
2602       <string>http://example.edu</string>
2603     </array>
2604     <key>Default</key>
2605     <true/> | <false/>
2606   </dict>
2607 </dict>
2608 ```
2609 #### policies.json
2610 ```
2611 {
2612   "policies": {
2613     "InstallAddonsPermission": {
2614       "Allow": ["http://example.org/",
2615                 "http://example.edu/"],
2616       "Default": true | false
2617     }
2618   }
2619 }
2620 ```
2621 ### LegacyProfiles
2622 Disable the feature enforcing a separate profile for each installation.
2623
2624 If this policy set to true, Firefox will not try to create different profiles for installations of Firefox in different directories. This is the equivalent of the MOZ_LEGACY_PROFILES environment variable.
2625
2626 If this policy set to false, Firefox will create a new profile for each unique installation of Firefox.
2627
2628 This policy only work on Windows via GPO (not policies.json).
2629
2630 **Compatibility:** Firefox 70, Firefox ESR 68.2 (Windows only, GPO only)\
2631 **CCK2 Equivalent:** N/A\
2632 **Preferences Affected:** N/A
2633
2634 #### Windows (GPO)
2635 ```
2636 Software\Policies\Mozilla\Firefox\LegacyProfiles = = 0x1 | 0x0
2637 ```
2638 #### Windows (Intune)
2639 OMA-URI:
2640 ```
2641 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/LegacyProfiles
2642 ```
2643 Value (string):
2644 ```
2645 <enabled/> or <disabled/>
2646 ```
2647 ### LocalFileLinks
2648 Enable linking to local files by origin.
2649
2650 **Compatibility:** Firefox 68, Firefox ESR 68\
2651 **CCK2 Equivalent:** N/A\
2652 **Preferences Affected:** `capability.policy.localfilelinks.*`
2653
2654 #### Windows (GPO)
2655 ```
2656 Software\Policies\Mozilla\Firefox\LocalFileLinks\1 = "https://example.org"
2657 Software\Policies\Mozilla\Firefox\LocalFileLinks\2 = "https://example.edu"
2658 ```
2659 #### Windows (Intune)
2660 OMA-URI:
2661 ```
2662 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/LocalFileLinks
2663 ```
2664 Value (string):
2665 ```
2666 <enabled/>
2667 <data id="LocalFileLinks" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
2668 ```
2669 #### macOS
2670 ```
2671 <dict>
2672   <key>LocalFileLinks</key>
2673   <array>
2674     <string>http://example.org</string>
2675     <string>http://example.edu</string>
2676   </array>
2677 </dict>
2678 ```
2679 #### policies.json
2680 ```
2681 {
2682   "policies": {
2683     "LocalFileLinks": ["http://example.org/",
2684                        "http://example.edu/"]
2685   }
2686 }
2687 ```
2688 ### NetworkPrediction
2689 Enable or disable network prediction (DNS prefetching).
2690
2691 **Compatibility:** Firefox 67, Firefox ESR 60.7\
2692 **CCK2 Equivalent:** N/A\
2693 **Preferences Affected:** `network.dns.disablePrefetch`,`network.dns.disablePrefetchFromHTTPS`
2694
2695 #### Windows (GPO)
2696 ```
2697 Software\Policies\Mozilla\Firefox\NetworkPrediction = 0x1 | 0x0
2698 ```
2699 #### Windows (Intune)
2700 OMA-URI:
2701 ```
2702 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NetworkPrediction
2703 ```
2704 Value (string):
2705 ```
2706 <enabled/> or <disabled/>
2707 ```
2708 #### macOS
2709 ```
2710 <dict>
2711   <key>NetworkPrediction</key>
2712   <true/> | <false/>
2713 </dict>
2714 ```
2715 #### policies.json
2716 ```
2717 {
2718   "policies": {
2719     "NetworkPrediction": true | false
2720 }
2721 ```
2722 ### NewTabPage
2723 Enable or disable the New Tab page.
2724
2725 **Compatibility:** Firefox 68, Firefox ESR 68\
2726 **CCK2 Equivalent:** N/A\
2727 **Preferences Affected:** `browser.newtabpage.enabled`
2728
2729 #### Windows (GPO)
2730 ```
2731 Software\Policies\Mozilla\Firefox\NewTabPage = 0x1 | 0x0
2732 ```
2733 #### Windows (Intune)
2734 OMA-URI:
2735 ```
2736 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NewTabPage
2737 ```
2738 Value (string):
2739 ```
2740 <enabled/> or <disabled/>
2741 ```
2742 #### macOS
2743 ```
2744 <dict>
2745   <key>NewTabPage</key>
2746   <true/> | <false/>
2747 </dict>
2748 ```
2749 #### policies.json
2750 ```
2751 {
2752   "policies": {
2753     "NewTabPage": true | false
2754 }
2755 ```
2756 ### NoDefaultBookmarks
2757 Disable the creation of default bookmarks.
2758
2759 This policy is only effective if the user profile has not been created yet.
2760
2761 **Compatibility:** Firefox 60, Firefox ESR 60\
2762 **CCK2 Equivalent:** `removeDefaultBookmarks`\
2763 **Preferences Affected:** N/A
2764
2765 #### Windows (GPO)
2766 ```
2767 Software\Policies\Mozilla\Firefox\NoDefaultBookmarks = 0x1 | 0x0
2768 ```
2769 #### Windows (Intune)
2770 OMA-URI:
2771 ```
2772 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NoDefaultBookmarks
2773 ```
2774 Value (string):
2775 ```
2776 <enabled/> or <disabled/>
2777 ```
2778 #### macOS
2779 ```
2780 <dict>
2781   <key>NoDefaultBookmarks</key>
2782   <true/> | <false/>
2783 </dict>
2784 ```
2785 #### policies.json
2786 ```
2787 {
2788   "policies": {
2789     "NoDefaultBookmarks": true | false
2790   }
2791 }
2792 ```
2793 ### OfferToSaveLogins
2794 Control whether or not Firefox offers to save passwords.
2795
2796 **Compatibility:** Firefox 60, Firefox ESR 60\
2797 **CCK2 Equivalent:** `dontRememberPasswords`\
2798 **Preferences Affected:** `signon.rememberSignons`
2799
2800 #### Windows (GPO)
2801 ```
2802 Software\Policies\Mozilla\Firefox\OfferToSaveLogins = 0x1 | 0x0
2803 ```
2804 #### Windows (Intune)
2805 OMA-URI:
2806 ```
2807 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OfferToSaveLogins
2808 ```
2809 Value (string):
2810 ```
2811 <enabled/> or <disabled/>
2812 ```
2813 #### macOS
2814 ```
2815 <dict>
2816   <key>OfferToSaveLogins</key>
2817   <true/> | <false/>
2818 </dict>
2819 ```
2820 #### policies.json
2821 ```
2822 {
2823   "policies": {
2824     "OfferToSaveLogins": true | false
2825   }
2826 }
2827 ```
2828 ### OfferToSaveLoginsDefault
2829 Sets the default value of signon.rememberSignons without locking it.
2830
2831 **Compatibility:** Firefox 70, Firefox ESR 60.2\
2832 **CCK2 Equivalent:** `dontRememberPasswords`\
2833 **Preferences Affected:** `signon.rememberSignons`
2834
2835 #### Windows (GPO)
2836 ```
2837 Software\Policies\Mozilla\Firefox\OfferToSaveLoginsDefault = 0x1 | 0x0
2838 ```
2839 #### Windows (Intune)
2840 OMA-URI:
2841 ```
2842 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OfferToSaveLoginsDefault
2843 ```
2844 Value (string):
2845 ```
2846 <enabled/> or <disabled/>
2847 ```
2848 #### macOS
2849 ```
2850 <dict>
2851   <key>OfferToSaveLoginsDefault</key>
2852   <true/> | <false/>
2853 </dict>
2854 ```
2855 #### policies.json
2856 ```
2857 {
2858   "policies": {
2859     "OfferToSaveLoginsDefault": true | false
2860   }
2861 }
2862 ```
2863 ### OverrideFirstRunPage
2864 Override the first run page. If the value is blank, no first run page is displayed.
2865
2866 **Compatibility:** Firefox 60, Firefox ESR 60\
2867 **CCK2 Equivalent:** `welcomePage`,`noWelcomePage`\
2868 **Preferences Affected:** `startup.homepage_welcome_url`
2869
2870 #### Windows (GPO)
2871 ```
2872 Software\Policies\Mozilla\Firefox\OverrideFirstRunPage = "http://example.org"
2873 ```
2874 #### Windows (Intune)
2875 OMA-URI:
2876 ```
2877 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OverrideFirstRunPage
2878 ```
2879 Value (string):
2880 ```
2881 <enabled/>
2882 <data id="OverridePage" value="https://example.com"/>
2883 ```
2884 #### macOS
2885 ```
2886 <dict>
2887   <key>OverrideFirstRunPage</key>
2888   <string>http://example.org</string>
2889 </dict>
2890 ```
2891 #### policies.json
2892 ```
2893 {
2894   "policies": {
2895     "OverrideFirstRunPage": "http://example.org"
2896 }
2897 ```
2898 ### OverridePostUpdatePage
2899 Override the upgrade page. If the value is blank, no upgrade page is displayed.
2900
2901 **Compatibility:** Firefox 60, Firefox ESR 60\
2902 **CCK2 Equivalent:** `upgradePage`,`noUpgradePage`\
2903 **Preferences Affected:** `startup.homepage_override_url`
2904
2905 #### Windows (GPO)
2906 ```
2907 Software\Policies\Mozilla\Firefox\OverridePostUpdatePage = "http://example.org"
2908 ```
2909 #### Windows (Intune)
2910 OMA-URI:
2911 ```
2912 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OverridePostUpdatePage
2913 ```
2914 Value (string):
2915 ```
2916 <enabled/>
2917 <data id="OverridePage" value="https://example.com"/>
2918 ```
2919 #### macOS
2920 ```
2921 <dict>
2922   <key>OverridePostUpdatePage</key>
2923   <string>http://example.org</string>
2924 </dict>
2925 ```
2926 #### policies.json
2927 ```
2928 {
2929   "policies": {
2930     "OverridePostUpdatePage": "http://example.org"
2931 }
2932 ```
2933 ### PasswordManagerEnabled
2934 Remove access to the password manager via preferences and blocks about:logins on Firefox 70.
2935
2936 **Compatibility:** Firefox 70, Firefox ESR 60.2\
2937 **CCK2 Equivalent:** N/A\
2938 **Preferences Affected:** `pref.privacy.disable_button.view_passwords`
2939
2940 #### Windows (GPO)
2941 ```
2942 Software\Policies\Mozilla\Firefox\PasswordManagerEnabled = 0x1 | 0x0
2943 ```
2944 #### Windows (Intune)
2945 OMA-URI:
2946 ```
2947 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PasswordManagerEnabled
2948 ```
2949 Value (string):
2950 ```
2951 <enabled/> or <disabled/>
2952 ```
2953 #### macOS
2954 ```
2955 <dict>
2956   <key>PasswordManagerEnabled</key>
2957   <true/> | <false/>
2958 </dict>
2959 ```
2960 #### policies.json
2961 ```
2962 {
2963   "policies": {
2964     "PasswordManagerEnabled": true | false
2965   }
2966 }
2967 ```
2968 ### PDFjs
2969 Disable or configure PDF.js, the built-in PDF viewer.
2970
2971 If `Enabled` is set to false, the built-in PDF viewer is disabled.
2972
2973 If `EnablePermissions` is set to true, the built-in PDF viewer will honor document permissions like preventing the copying of text.
2974
2975 **Compatibility:** Firefox 77, Firefox ESR 68.9\
2976 **CCK2 Equivalent:** N/A\
2977 **Preferences Affected:** `pdfjs.diabled`,`pdfjs.enablePermissions`
2978
2979 #### Windows (GPO)
2980 ```
2981 Software\Policies\Mozilla\Firefox\PDFjs\Enabled = 0x1 | 0x0
2982 Software\Policies\Mozilla\Firefox\PDFjs\EnablePermissions = 0x1 | 0x0
2983 ```
2984 #### Windows (Intune)
2985 OMA-URI:
2986 ```
2987 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PDFjs/PDFjs_Enabled
2988 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PDFjs/PDFjs_EnablePermissions
2989 ```
2990 Value (string):
2991 ```
2992 <enabled/>or <disabled/>
2993 ```
2994 #### macOS
2995 ```
2996 <dict>
2997   <key>PDFjs</key>
2998   <dict>
2999     <key>Enabled</key>
3000     <true/> | <false/>
3001     <key><EnablePermissions</key>
3002     <true/> | <false/>
3003   </dict>
3004 </dict>
3005 ```
3006 #### policies.json
3007 ```
3008 {
3009   "policies": {
3010     "PSFjs": {
3011       "Enabled": true | false,
3012       "EnablePermissions": true | false
3013     }
3014 }
3015 ```
3016 ### Permissions
3017 Set permissions associated with camera, microphone, location, notifications, and autoplay. Because these are origins, not domains, entries with unique ports must be specified separately. See examples below.
3018
3019 `Allow` is a list of origins where the feature is allowed.
3020
3021 `Block` is a list of origins where the feature is not allowed.
3022
3023 `BlockNewRequests` determines whether or not new requests can be made for the feature.
3024
3025 `Locked` prevents the user from changing preferences for the feature.
3026
3027 `Default` specifies the default value for Autoplay. block-audio-video is not supported on Firefox ESR 68.
3028
3029 **Compatibility:** Firefox 62, Firefox ESR 60.2 (Autoplay added in Firefox 74, Firefox ESR 68.6, Autoplay Default/Locked added in Firefox 76, Firefox ESR 68.8)\
3030 **CCK2 Equivalent:** N/A\
3031 **Preferences Affected:** `permissions.default.camera`,`permissions.default.microphone`,`permissions.default.geo`,`permissions.default.desktop-notification`,`media.autoplay.default`
3032
3033 #### Windows (GPO)
3034 ```
3035 Software\Policies\Mozilla\Firefox\Permissions\Camera\Allow\1 = "https://example.org"
3036 Software\Policies\Mozilla\Firefox\Permissions\Camera\Allow\2 = "https://example.org:1234"
3037 Software\Policies\Mozilla\Firefox\Permissions\Camera\Block\1 = "https://example.edu"
3038 Software\Policies\Mozilla\Firefox\Permissions\Camera\BlockNewRequests = 0x1 | 0x0
3039 Software\Policies\Mozilla\Firefox\Permissions\Camera\Locked = 0x1 | 0x0
3040 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Allow\1 = "https://example.org"
3041 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Block\1 = "https://example.edu"
3042 Software\Policies\Mozilla\Firefox\Permissions\Microphone\BlockNewRequests = 0x1 | 0x0
3043 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Locked = 0x1 | 0x0
3044 Software\Policies\Mozilla\Firefox\Permissions\Location\Allow\1 = "https://example.org"
3045 Software\Policies\Mozilla\Firefox\Permissions\Location\Block\1 = "https://example.edu"
3046 Software\Policies\Mozilla\Firefox\Permissions\Location\BlockNewRequests = 0x1 | 0x0
3047 Software\Policies\Mozilla\Firefox\Permissions\Location\Locked = 0x1 | 0x0
3048 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Allow\1 = "https://example.org"
3049 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Block\1 = "https://example.edu"
3050 Software\Policies\Mozilla\Firefox\Permissions\Notifications\BlockNewRequests = 0x1 | 0x0
3051 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Locked = 0x1 | 0x0
3052 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Allow\1 = "https://example.org"
3053 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Block\1 = "https://example.edu"
3054 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Default = "allow-audio-video" | "block-audio" | "block-audio-video"
3055 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Locked = 0x1 | 0x0
3056 ```
3057 #### Windows (Intune)
3058 OMA-URI:
3059 ```
3060 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Location/Location_BlockNewRequests
3061 ```
3062 Value (string):
3063 ```
3064 <enabled/> or <disabled/>
3065 ```
3066 OMA-URI:
3067 ```
3068 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Location/Location_Locked
3069 ```
3070 Value (string):
3071 ```
3072 <enabled/> or <disabled/>
3073 ```
3074 OMA-URI:
3075 ```
3076 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_Allow
3077 ```
3078 Value (string):
3079 ```
3080 <enabled/>
3081 <data id="Permissions" value="1&#xF000;https://example.org"/>
3082 ```
3083 OMA-URI:
3084 ```
3085 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_BlockNewRequests
3086 ```
3087 Value (string):
3088 ```
3089 <enabled/> or <disabled/>
3090 ```
3091 OMA-URI:
3092 ```
3093 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_Locked
3094 ```
3095 Value (string):
3096 ```
3097 <enabled/> or <disabled/>
3098 ```
3099 OMA-URI:
3100 ```
3101 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Allow
3102 ```
3103 Value (string):
3104 ```
3105 <enabled/>
3106 <data id="Permissions" value="1&#xF000;https://example.org"/>
3107 ```
3108 OMA-URI:
3109 ```
3110 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Block
3111 ```
3112 Value (string):
3113 ```
3114 <enabled/>
3115 <data id="Permissions" value="1&#xF000;https://example.edu"/>
3116 ```
3117 OMA-URI:
3118 ```
3119 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Default
3120 ```
3121 Value (string):
3122 ```
3123 <enabled/>
3124 <data id="Autoplay_Default" value="allow-audio-video | block-audio | block-audio-video"/>
3125 ```
3126 OMA-URI:
3127 ```
3128 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Locked
3129 ```
3130 Value (string):
3131 ```
3132 <enabled/> or <disabled/>
3133 ```
3134 #### macOS
3135 ```
3136 <dict>
3137   <key>Permissions</key>
3138   <dict>
3139     <key>Camera</key>
3140     <dict>
3141       <key>Allow</key>
3142       <array>
3143         <string>https://example.org</string>
3144         <string>https://example.org:1234</string>
3145       </array>
3146       <key>Block</key>
3147       <array>
3148         <string>https://example.edu</string>
3149       </array>
3150       <key>BlockNewRequests</key>
3151       <true/> | <false/>
3152       <key>Locked</key>
3153       <true/> | <false/>
3154     </dict>
3155     <key>Microphone</key>
3156     <dict>
3157       <key>Allow</key>
3158       <array>
3159         <string>https://example.org</string>
3160       </array>
3161       <key>Block</key>
3162       <array>
3163         <string>https://example.edu</string>
3164       </array>
3165       <key>BlockNewRequests</key>
3166       <true/> | <false/>
3167       <key>Locked</key>
3168       <true/> | <false/>
3169     </dict>
3170     <key>Location</key>
3171     <dict>
3172       <key>Allow</key>
3173       <array>
3174         <string>https://example.org</string>
3175       </array>
3176       <key>Block</key>
3177       <array>
3178         <string>https://example.edu</string>
3179       </array>
3180       <key>BlockNewRequests</key>
3181       <true/> | <false/>
3182       <key>Locked</key>
3183       <true/> | <false/>
3184     </dict>
3185     <key>Notifications</key>
3186     <dict>
3187       <key>Allow</key>
3188       <array>
3189         <string>https://example.org</string>
3190       </array>
3191       <key>Block</key>
3192       <array>
3193         <string>https://example.edu</string>
3194       </array>
3195       <key>BlockNewRequests</key>
3196       <true/>
3197       <key>Locked</key>
3198       <true/>
3199     </dict>
3200     <key>Autoplay</key>
3201     <dict>
3202       <key>Allow</key>
3203       <array>
3204         <string>https://example.org</string>
3205       </array>
3206       <key>Block</key>
3207       <array>
3208         <string>https://example.edu</string>
3209       </array>
3210       <key>Default</key>
3211       <string>allow-audio-video | block-audio | block-audio-video</string>
3212       <key>Locked</key>
3213       <true/> | <false/>
3214     </dict>
3215   </dict>
3216 </dict>
3217 ```
3218 #### policies.json
3219 ```
3220 {
3221   "policies": {
3222     "Permissions": {
3223       "Camera": {
3224         "Allow": ["https://example.org","https://example.org:1234"],
3225         "Block": ["https://example.edu"],
3226         "BlockNewRequests": true | false,
3227         "Locked": true | false
3228       },
3229       "Microphone": {
3230         "Allow": ["https://example.org"],
3231         "Block": ["https://example.edu"],
3232         "BlockNewRequests": true | false,
3233         "Locked": true | false
3234       },
3235       "Location": {
3236         "Allow": ["https://example.org"],
3237         "Block": ["https://example.edu"],
3238         "BlockNewRequests": true | false,
3239         "Locked": true | false
3240       },
3241       "Notifications": {
3242         "Allow": ["https://example.org"],
3243         "Block": ["https://example.edu"],
3244         "BlockNewRequests": true | false,
3245         "Locked": true | false
3246       },
3247       "Autoplay": {
3248         "Allow": ["https://example.org"],
3249         "Block": ["https://example.edu"],
3250         "Default": "allow-audio-video" | "block-audio" | "block-audio-video",
3251         "Locked": true | false
3252       }
3253     }
3254   }
3255 }
3256 ```
3257 ### PopupBlocking
3258 Configure the default pop-up window policy as well as origins for which pop-up windows are allowed.
3259
3260 `Allow` is a list of origins where popup-windows are allowed.
3261
3262 `Default` determines whether or not pop-up windows are allowed by default.
3263
3264 `Locked` prevents the user from changing pop-up preferences.
3265
3266 **Compatibility:** Firefox 60, Firefox ESR 60\
3267 **CCK2 Equivalent:** `permissions.popup`\
3268 **Preferences Affected:** `dom.disable_open_during_load`
3269
3270 #### Windows (GPO)
3271 ```
3272 Software\Policies\Mozilla\Firefox\PopupBlocking\Allow\1 = "https://example.org"
3273 Software\Policies\Mozilla\Firefox\PopupBlocking\Allow\2 = "https://example.edu"
3274 Software\Policies\Mozilla\Firefox\PopupBlocking\Default = 0x1 | 0x0
3275 Software\Policies\Mozilla\Firefox\PopupBlocking\Locked = 0x1 | 0x0
3276 ```
3277 #### Windows (Intune)
3278 OMA-URI:
3279 ```
3280 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Allow
3281 ```
3282 Value (string):
3283 ```
3284 <enabled/>
3285 <data id="Permissions" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
3286 ```
3287 OMA-URI:
3288 ```
3289 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Default
3290 ```
3291 Value (string):
3292 ```
3293 <enabled/> or <disabled/>
3294 ```
3295 OMA-URI:
3296 ```
3297 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Locked
3298 ```
3299 Value (string):
3300 ```
3301 <enabled/> or <disabled/>
3302 ```
3303 #### macOS
3304 ```
3305 <dict>
3306   <key>PopupBlocking</key>
3307   <dict>
3308     <key>Allow</key>
3309     <array>
3310       <string>http://example.org</string>
3311       <string>http://example.edu</string>
3312     </array>
3313     <key>Default</key>
3314     <true/> | <false/>
3315     <key>Locked</key>
3316     <true/> | <false/>
3317   </dict>
3318 </dict>
3319 ```
3320 #### policies.json
3321 ```
3322 {
3323   "policies": {
3324     "PopupBlocking": {
3325       "Allow": ["http://example.org/",
3326                 "http://example.edu/"],
3327       "Default": true | false,
3328       "Locked": true | false
3329     }
3330   }
3331 }
3332 ```
3333 ### Preferences
3334 Set and lock certain preferences.
3335
3336 **Compatibility:** See below\
3337 **CCK2 Equivalent:** `preferences`\
3338 **Preferences Affected:** See below
3339
3340 | Preference | Type | Compatibility | Default
3341 | --- | --- | --- | ---
3342 | accessibility.force_disabled | integer | Firefox 70, Firefox ESR 68.2 | 0
3343 | &nbsp;&nbsp;&nbsp;&nbsp;If set to 1, platform accessibility is disabled.
3344 | app.update.auto (Deprecated - Switch to AppAutoUpdate policy) | boolean | Firefox 68, Firefox ESR 68 | true
3345 | &nbsp;&nbsp;&nbsp;&nbsp;If false, Firefox doesn't automatically install update.
3346 | browser.bookmarks.autoExportHTML | boolean | Firefox 70, Firefox ESR 68.2 | false
3347 | &nbsp;&nbsp;&nbsp;&nbsp;If true, bookmarks are exported on shutdown.
3348 | browser.bookmarks.file | string | Firefox 70, Firefox ESR 68.2 | N/A
3349 | &nbsp;&nbsp;&nbsp;&nbsp;If set, the name of the file where bookmarks are exported and imported.
3350 | browser.bookmarks.restore_default_bookmarks | boolean | Firefox 70, Firefox ESR 68.2 | N/A
3351 | &nbsp;&nbsp;&nbsp;&nbsp;If true, bookmarks are restored to their defaults.
3352 | browser.cache.disk.enable | boolean | Firefox 68, Firefox ESR 68 | true
3353 | &nbsp;&nbsp;&nbsp;&nbsp;If false, don't store cache on the hard drive.
3354 | ~browser.cache.disk.parent_directory~ | string | Firefox 68, Firefox ESR 68 | Profile temporary directory
3355 | &nbsp;&nbsp;&nbsp;&nbsp;~If set, changes the location of the disk cache.~ This policy doesn't work. It's being worked on.
3356 | browser.fixup.dns_first_for_single_words | boolean | Firefox 68, Firefox ESR 68 | false
3357 | &nbsp;&nbsp;&nbsp;&nbsp;If true, single words are sent to DNS, not directly to search.
3358 | browser.newtabpage.activity-stream.default.sites | string | Firefox 72, ESR 68.4 | Locale dependent
3359 | &nbsp;&nbsp;&nbsp;&nbsp;If set, a list of URLs to use as the default top sites on the new tab page.
3360 | browser.places.importBookmarksHTML | boolean | Firefox 70, Firefox ESR 68.2
3361 | &nbsp;&nbsp;&nbsp;&nbsp;If true, bookmarks are always imported on startup.
3362 | browser.safebrowsing.phishing.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
3363 | &nbsp;&nbsp;&nbsp;&nbsp;If false, phishing protection is not enabled (Not recommended)
3364 | browser.safebrowsing.malware.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
3365 | &nbsp;&nbsp;&nbsp;&nbsp;If false, malware protection is not enabled (Not recommended)
3366 | browser.search.update | boolean | Firefox 68, Firefox ESR 68 | true
3367 | &nbsp;&nbsp;&nbsp;&nbsp;If false, updates for search engines are not checked.
3368 | browser.slowStartup.notificationDisabled | boolean | Firefox 70, Firefox ESR 68.2 | false
3369 | &nbsp;&nbsp;&nbsp;&nbsp;If true, a notification isn't shown if startup is slow.
3370 | browser.tabs.warnOnClose | boolean | Firefox 68, Firefox ESR 68 | true
3371 | &nbsp;&nbsp;&nbsp;&nbsp;If false, there is no warning when the browser is closed.
3372 | browser.taskbar.previews.enable | boolean | Firefox 70, Firefox ESR 68.2 (Windows only) | false
3373 | &nbsp;&nbsp;&nbsp;&nbsp;If true, tab previews are shown in the Windows taskbar.
3374 | browser.urlbar.suggest.bookmark | boolean | Firefox 68, Firefox ESR 68 | true
3375 | &nbsp;&nbsp;&nbsp;&nbsp;If false, bookmarks aren't suggested when typing in the URL bar.
3376 | browser.urlbar.suggest.history | boolean | Firefox 68, Firefox ESR 68 | true
3377 | &nbsp;&nbsp;&nbsp;&nbsp;If false, history isn't suggested when typing in the URL bar.
3378 | browser.urlbar.suggest.openpage | boolean | Firefox 68, Firefox ESR 68 | true
3379 | &nbsp;&nbsp;&nbsp;&nbsp;If false, open tabs aren't suggested when typing in the URL bar.
3380 | datareporting.policy.dataSubmissionPolicyBypassNotification | boolean | Firefox 68, Firefox ESR 68 | false
3381 | &nbsp;&nbsp;&nbsp;&nbsp;If true, don't show the privacy policy tab on first run.
3382 | dom.allow_scripts_to_close_windows | boolean | Firefox 70, Firefox ESR 68.2 | false
3383 | &nbsp;&nbsp;&nbsp;&nbsp;If false, web page can close windows.
3384 | dom.disable_window_flip | boolean | Firefox 68, Firefox ESR 68 | true
3385 | &nbsp;&nbsp;&nbsp;&nbsp;If false, web pages can focus and activate windows.
3386 | dom.disable_window_move_resize | boolean | Firefox 68, Firefox ESR 68 | false
3387 | &nbsp;&nbsp;&nbsp;&nbsp;If true, web pages can't move or resize windows.
3388 | dom.event.contextmenu.enabled | boolean | Firefox 68, Firefox ESR 68 | true
3389 | &nbsp;&nbsp;&nbsp;&nbsp;If false, web pages can't override context menus.
3390 | dom.keyboardevent.keypress.hack.dispatch_non_printable_keys.addl | string | Firefox 68, Firefox ESR 68 | N/A
3391 | &nbsp;&nbsp;&nbsp;&nbsp;See https://support.mozilla.org/en-US/kb/dom-events-changes-introduced-firefox-66
3392 | dom.keyboardevent.keypress.hack.use_legacy_keycode_and_charcode.addl | string | Firefox 68, Firefox ESR 68 | N/A
3393 | &nbsp;&nbsp;&nbsp;&nbsp;See https://support.mozilla.org/en-US/kb/dom-events-changes-introduced-firefox-66
3394 | dom.xmldocument.load.enabled | boolean | Firefox ESR 68.5 | true.
3395 | &nbsp;&nbsp;&nbsp;&nbsp;If false, XMLDocument.load is not available.
3396 | dom.xmldocument.async.enabled | boolean | Firefox ESR 68.5 | true
3397 | &nbsp;&nbsp;&nbsp;&nbsp;If false, XMLDocument.async is not available.
3398 | extensions.blocklist.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
3399 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the extensions blocklist is not used (Not recommended)
3400 | extensions.getAddons.showPane | boolean | Firefox 68, Firefox ESR 68 | N/A
3401 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the Recommendations tab is not displayed in the Add-ons Manager.
3402 | extensions.htmlaboutaddons.recommendations.enabled | boolean | Firefox 72, Firefox ESR 68.4 | true
3403 | &nbsp;&nbsp;&nbsp;&nbsp;If false, recommendations are not shown on the Extensions tab in the Add-ons Manager.
3404 | geo.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
3405 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the geolocation API is disabled. | Language dependent
3406 | intl.accept_languages | string | Firefox 70, Firefox ESR 68.2
3407 | &nbsp;&nbsp;&nbsp;&nbsp;If set, preferred language for web pages.
3408 | media.eme.enabled (Deprecated - Switch to EncryptedMediaExtensions policy) | boolean | Firefox 70, Firefox ESR 68.2 | true
3409 | &nbsp;&nbsp;&nbsp;&nbsp;If false, Encrypted Media Extensions are not enabled.
3410 | media.gmp-gmpopenh264.enabled | boolean | Firefox 68, Firefox ESR 68 | true
3411 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the OpenH264  plugin is not downloaded.
3412 | media.gmp-widevinecdm.enabled | boolean | Firefox 68, Firefox ESR 68 | true
3413 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the Widevine plugin is not downloaded.
3414 | media.peerconnection.enabled | boolean | Firefox 72, Firefox ESR 68.4 | true
3415 | &nbsp;&nbsp;&nbsp;&nbsp;If false, WebRTC is disabled
3416 | media.peerconnection.ice.obfuscate_host_addresses.whitelist | string | Firefox 72, Firefox ESR 68.4 | N/A
3417 | &nbsp;&nbsp;&nbsp;&nbsp;If set, a list of domains for which mDNS hostname obfuscation is
3418 disabled
3419 | network.dns.disableIPv6 | boolean | Firefox 68, Firefox ESR 68 | false
3420 | &nbsp;&nbsp;&nbsp;&nbsp;If true, IPv6 DNS lokoups are disabled.
3421 | network.IDN_show_punycode | boolean | Firefox 68, Firefox ESR 68 | false
3422 | &nbsp;&nbsp;&nbsp;&nbsp;If true, display the punycode version of internationalized domain names.
3423 | places.history.enabled | boolean | Firefox 68, Firefox ESR 68 | true
3424 | &nbsp;&nbsp;&nbsp;&nbsp;If false, history is not enabled.
3425 | print.save_print_settings | boolean | Firefox 70, Firefox ESR 68.2 | true
3426 | &nbsp;&nbsp;&nbsp;&nbsp;If false, print settings are not saved between jobs.
3427 | security.default_personal_cert | string | Firefox 68, Firefox ESR 68 | Ask Every Time
3428 | &nbsp;&nbsp;&nbsp;&nbsp;If set to Select Automatically, Firefox automatically chooses the default personal certificate.
3429 | security.mixed_content.block_active_content | boolean | Firefox 70, Firefox ESR 68.2 | true
3430 | &nbsp;&nbsp;&nbsp;&nbsp;If false, mixed active content (HTTP and HTTPS) is not blocked.
3431 | security.osclientcerts.autoload | boolean | Firefox 72 (Windows), Firefox 75 (macOS)  | false
3432 | &nbsp;&nbsp;&nbsp;&nbsp;If true, client certificates are loaded from the operating system certificate store.
3433 | security.ssl.errorReporting.enabled | boolean | Firefox 68, Firefox ESR 68 | true
3434 | &nbsp;&nbsp;&nbsp;&nbsp;If false, SSL errors cannot be sent to Mozilla.
3435 | security.tls.hello_downgrade_check | boolean | Firefox 72, Firefox ESR 68.4 | true
3436 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the TLS 1.3 downgrade check is disabled.
3437 | ui.key.menuAccessKeyFocuses | boolean | Firefox 68, Firefox ESR 68 | true
3438 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the Alt key doesn't show the menubar on Windows.
3439 | widget.content.gtk-theme-override | string | Firefox 72, Firefox ESR 68.4 (Linux only) | N/A
3440 | &nbsp;&nbsp;&nbsp;&nbsp;If set, overrides the GTK theme for widgets.
3441 #### Windows (GPO)
3442 ```
3443 Software\Policies\Mozilla\Firefox\Preferences\boolean_preference_name = 0x1 | 0x0
3444 Software\Policies\Mozilla\Firefox\Preferences\string_preference_name = "string_value"
3445 ```
3446 #### Windows (Intune)
3447 OMA-URI: (periods are replaced by underscores)
3448 ```
3449 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Preferences/boolean_preference_name
3450 ```
3451 Value (string):
3452 ```
3453 <enabled/> or <disabled/>
3454 ```
3455 #### macOS
3456 ```
3457 <dict>
3458   <key>Preferences</key>
3459   <dict>
3460     <key>boolean_preference_name</key>
3461     <true/> | <false/>
3462     <key>string_preference_name</key>
3463     <string>string_value</string>
3464   </dict>
3465 </dict>
3466 ```
3467 #### policies.json
3468 ```
3469 {
3470   "policies": {
3471     "Preferences": {
3472       "boolean_preference_name": true | false,
3473       "string_preference_name": "string_value"
3474     }
3475   }
3476 }
3477 ```
3478 ### PromptForDownloadLocation
3479 Ask where to save each file before downloading.
3480
3481 **Compatibility:** Firefox 68, Firefox ESR 68\
3482 **CCK2 Equivalent:** N/A\
3483 **Preferences Affected:** `browser.download.useDownloadDir`
3484
3485 #### Windows (GPO)
3486 ```
3487 Software\Policies\Mozilla\Firefox\PromptForDownloadLocation = 0x1 | 0x0
3488 ```
3489 #### Windows (Intune)
3490 OMA-URI:
3491 ```
3492 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PromptForDownloadLocation
3493 ```
3494 Value (string):
3495 ```
3496 <enabled/> or <disabled/>
3497 ```
3498 #### macOS
3499 ```
3500 <dict>
3501   <key>PromptForDownloadLocation</key>
3502   <true/> | <false/>
3503 </dict>
3504 ```
3505 #### policies.json
3506 ```
3507 {
3508   "policies": {
3509     "PromptForDownloadLocation": true | false
3510   }
3511 }
3512 ```
3513 ### Proxy
3514 Configure proxy settings. These settings correspond to the connection settings in Firefox preferences.
3515 To specify ports, append them to the hostnames with a colon (:).
3516
3517 `Mode` is the proxy method being used.
3518
3519 `Locked` is whether or not proxy settings can be changed.
3520
3521 `HTTPProxy` is the HTTP proxy server.
3522
3523 `UseHTTPProxyForAllProtocols` is whether or not the HTTP proxy should be used for all other proxies.
3524
3525 `SSLProxy` is the SSL proxy server.
3526
3527 `FTPProxy` is the FTP proxy server.
3528
3529 `SOCKSProxy` is the SOCKS proxy server
3530
3531 `SOCKSVersion` is the SOCKS version (4 or 5)
3532
3533 `Passthrough` is list of hostnames or IP addresses that will not be proxied. Use `<local>` to bypass proxying for all hostnames which do not contain periods.
3534
3535 `AutoConfigURL` is a  URL for proxy configuration (only used if Mode is autoConfig).
3536
3537 `AutoLogin` means do not prompt for authentication if password is saved.
3538
3539 `UseProxyForDNS` to use proxy DNS when using SOCKS v5.
3540
3541 **Compatibility:** Firefox 60, Firefox ESR 60\
3542 **CCK2 Equivalent:** `networkProxy*`\
3543 **Preferences Affected:** `network.proxy.type`,`network.proxy.autoconfig_url`,`network.proxy.socks_remote_dns`,`signon.autologin.proxy`,`network.proxy.socks_version`,`network.proxy.no_proxies_on`,`network.proxy.share_proxy_settings`,`network.proxy.http`,`network.proxy.http_port`,`network.proxy.ftp`,`network.proxy.ftp_port`,`network.proxy.ssl`,`network.proxy.ssl_port`,`network.proxy.socks`,`network.proxy.socks_port`
3544
3545 #### Windows (GPO)
3546 ```
3547 Software\Policies\Mozilla\Firefox\Proxy\Mode = "none", "system", "manual", "autoDetect", "autoConfig"
3548 Software\Policies\Mozilla\Firefox\Proxy\Locked = 0x1 | 0x0
3549 Software\Policies\Mozilla\Firefox\=Proxy\HTTPProxy = https://httpproxy.example.com
3550 Software\Policies\Mozilla\Firefox\Proxy\UseHTTPProxyForAllProtocols = 0x1 | 0x0
3551 Software\Policies\Mozilla\Firefox\Proxy\SSLProxy = https://sslproxy.example.com
3552 Software\Policies\Mozilla\Firefox\Proxy\FTPProxy = https://ftpproxy.example.com
3553 Software\Policies\Mozilla\Firefox\Proxy\SOCKSProxy = https://socksproxy.example.com
3554 Software\Policies\Mozilla\Firefox\Proxy\SOCKSVersion = 0x4 | 0x5
3555 Software\Policies\Mozilla\Firefox\Proxy\Passthrough = <local>
3556 Software\Policies\Mozilla\Firefox\Proxy\AutoConfigURL = URL_TO_AUTOCONFIG
3557 Software\Policies\Mozilla\Firefox\Proxy\AutoLogin = 0x1 | 0x0
3558 Software\Policies\Mozilla\Firefox\Proxy\UseProxyForDNS = 0x1 | 0x0
3559 ```
3560 #### Windows (Intune)
3561 OMA-URI:
3562 ```
3563 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Proxy
3564 ```
3565 Value (string):
3566 ```
3567 <enabled/>
3568 <data id="ProxyLocked" value="true | false"/>
3569 <data id="ConnectionType" value="none | system | manual | autoDetect | autoConfig"/>
3570 <data id="HTTPProxy" value="https://httpproxy.example.com"/>
3571 <data id="UseHTTPProxyForAllProtocols" value="true | false"/>
3572 <data id="SSLProxy" value="https://sslproxy.example.com"/>
3573 <data id="FTPProxy" value="https://ftpproxy.example.com"/>
3574 <data id="SOCKSProxy" value="https://socksproxy.example.com"/>
3575 <data id="SOCKSVersion" value="4 | 5"/>
3576 <data id="AutoConfigURL" value="URL_TO_AUTOCONFIG"/>
3577 <data id="Passthrough" value="<local>"/>
3578 <data id="AutoLogin" value="true | false"/>
3579 <data id="UseProxyForDNS" value="true | false"/>
3580 ```
3581 #### macOS
3582 ```
3583 <dict>
3584   <key>Proxy</key>
3585   <dict>
3586     <key>Mode</key>
3587     <string>none | system | manual | autoDetect | autoConfig</string>
3588     <key>Locked</key>
3589     <true> | </false>
3590     <key>HTTPProxy</key>
3591     <string>https://httpproxy.example.com</string>
3592     <key>UseHTTPProxyForAllProtocols</key>
3593     <true> | </false>
3594     <key>SSLProxy</key>
3595     <string>https://sslproxy.example.com</string>
3596     <key>FTPProxy</key>
3597     <string>https://ftpproxy.example.com</string>
3598     <key>SOCKSProxy</key>
3599     <string>https://socksproxy.example.com</string>
3600     <key>SOCKSVersion</key>
3601     <string>4 | 5</string>
3602     <key>Passthrough</key>
3603     <string>&lt;local>&gt;</string>
3604     <key>AutoConfigURL</key>
3605     <string>URL_TO_AUTOCONFIG</string>
3606     <key>AutoLogin</key>
3607     <true> | </false>
3608     <key>UseProxyForDNS</key>
3609     <true> | </false>
3610   </dict>
3611 </dict>
3612 ```
3613 #### policies.json
3614 ```
3615 {
3616   "policies": {
3617     "Proxy": {
3618       "Mode": "none", "system", "manual", "autoDetect", "autoConfig",
3619       "Locked": true | false,
3620       "HTTPProxy": "hostname",
3621       "UseHTTPProxyForAllProtocols": true | false,
3622       "SSLProxy": "hostname",
3623       "FTPProxy": "hostname",
3624       "SOCKSProxy": "hostname",
3625       "SOCKSVersion": 4 | 5
3626       "Passthrough": "<local>",
3627       "AutoConfigURL": "URL_TO_AUTOCONFIG",
3628       "AutoLogin": true | false,
3629       "UseProxyForDNS": true | false
3630     }
3631   }
3632 }
3633 ```
3634 ### RequestedLocales
3635 Set the the list of requested locales for the application in order of preference. It will cause the corresponding language pack to become active.
3636
3637 Note: For Firefox 68, this can now be a string so that you can specify an empty value.
3638
3639 **Compatibility:** Firefox 64, Firefox ESR 60.4, Updated in Firefox 68, Firefox ESR 68\
3640 **CCK2 Equivalent:** N/A\
3641 **Preferences Affected:** N/A
3642 #### Windows (GPO)
3643 ```
3644 Software\Policies\Mozilla\Firefox\RequestedLocales\1 = "de"
3645 Software\Policies\Mozilla\Firefox\RequestedLocales\2 = "en-US"
3646
3647 or
3648
3649 Software\Policies\Mozilla\Firefox\RequestedLocales = "de,en-US"
3650 ```
3651 #### Windows (Intune)
3652 OMA-URI:
3653 ```
3654 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/RequestedLocalesString
3655 ```
3656 Value (string):
3657 ```
3658 <enabled/>
3659 <data id="Preferences_String" value="de,en-US"/>
3660 ```
3661 #### macOS
3662 ```
3663 <dict>
3664   <key>RequestedLocales</key>
3665   <array>
3666     <string>de</string>
3667     <string>en-US</string>
3668   </array>
3669 </dict>
3670
3671 or
3672
3673 <dict>
3674   <key>RequestedLocales</key>
3675   <string>de,en-US</string>
3676 </dict>
3677
3678 ```
3679 #### policies.json
3680 ```
3681 {
3682   "policies": {
3683     "RequestedLocales": ["de", "en-US"]
3684   }
3685 }
3686
3687 or
3688
3689 {
3690   "policies": {
3691     "RequestedLocales": "de,en-US"
3692   }
3693 }
3694 ```
3695 <a name="SanitizeOnShutdown"></a>
3696
3697 ### SanitizeOnShutdown (Selective)
3698 Clear data on shutdown. Choose from Cache, Cookies, Download History, Form & Search History, Browsing History, Active Logins, Site Preferences and Offline Website Data.
3699
3700 Previously, these values were always locked. Starting with Firefox 74 and Firefox ESR 68.6, you can use the `Locked` option to either keep the values unlocked (set it to false), or lock only the values you set (set it to true). If you want the old behavior of locking everything, do not set `Locked` at all.
3701
3702 **Compatibility:** Firefox 68, Firefox ESR 68 (Locked added in 74/68.6)\
3703 **CCK2 Equivalent:** N/A\
3704 **Preferences Affected:** `privacy.sanitize.sanitizeOnShutdown`,`privacy.clearOnShutdown.cache`,`privacy.clearOnShutdown.cookies`,`privacy.clearOnShutdown.downloads`,`privacy.clearOnShutdown.formdata`,`privacy.clearOnShutdown.history`,`privacy.clearOnShutdown.sessions`,`privacy.clearOnShutdown.siteSettings`,`privacy.clearOnShutdown.offlineApps`
3705 #### Windows (GPO)
3706 ```
3707 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Cache = 0x1 | 0x0
3708 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Cookies = 0x1 | 0x0
3709 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Downloads = 0x1 | 0x0
3710 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\FormData = 0x1 | 0x0
3711 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\History = 0x1 | 0x0
3712 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Sessions = 0x1 | 0x0
3713 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\SiteSettings = 0x1 | 0x0
3714 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\OfflineApps = 0x1 | 0x0
3715 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Locked = 0x1 | 0x0
3716 ```
3717 #### Windows (Intune)
3718 OMA-URI:
3719 ```
3720 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/I_SanitizeOnShutdown_Locked
3721 ```
3722 Value (string):
3723 ```
3724 <enabled/> or <disabled/>
3725 ```
3726 #### macOS
3727 ```
3728 <dict>
3729   <key>SanitizeOnShutdown</key>
3730   <dict>
3731     <key>Cache</key>
3732     <true/> | <false/>
3733     <key>Cookies</key>
3734     <true/> | <false/>
3735     <key>Downloads</key>
3736     <true/> | <false/>
3737     <key>FormData</key>
3738     <true/> | <false/>
3739     <key>History</key>
3740     <true/> | <false/>
3741     <key>Sessions</key>
3742     <true/> | <false/>
3743     <key>SiteSettings</key>
3744     <true/> | <false/>
3745     <key>OfflineApps</key>
3746     <true/> | <false/>
3747     <key>Locked</key>
3748     <true/> | <false/>
3749   </dict>
3750 </dict>
3751 ```
3752 #### policies.json
3753 ```
3754 {
3755   "policies": {
3756     "SanitizeOnShutdown": {
3757       "Cache": true | false,
3758       "Cookies": true | false,
3759       "Downloads": true | false,
3760       "FormData": true | false,
3761       "History": true | false,
3762       "Sessions": true | false,
3763       "SiteSettings": true | false,
3764       "OfflineApps": true | false,
3765       "Locked": true | false
3766     }
3767   }
3768 }
3769 ```
3770 ### SanitizeOnShutdown (All)
3771 Clear all data on shutdown, including Browsing & Download History, Cookies, Active Logins, Cache, Form & Search History, Site Preferences and Offline Website Data.
3772
3773 **Compatibility:** Firefox 60, Firefox ESR 60\
3774 **CCK2 Equivalent:** N/A\
3775 **Preferences Affected:** `privacy.sanitize.sanitizeOnShutdown`,`privacy.clearOnShutdown.cache`,`privacy.clearOnShutdown.cookies`,`privacy.clearOnShutdown.downloads`,`privacy.clearOnShutdown.formdata`,`privacy.clearOnShutdown.history`,`privacy.clearOnShutdown.sessions`,`privacy.clearOnShutdown.siteSettings`,`privacy.clearOnShutdown.offlineApps`
3776 #### Windows (GPO)
3777 ```
3778 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown = 0x1 | 0x0
3779 ```
3780 #### Windows (Intune)
3781 OMA-URI:
3782 ```
3783 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/C_SanitizeOnShutdown
3784 ```
3785 Value (string):
3786 ```
3787 <enabled/> or <disabled/>
3788 ```
3789 #### macOS
3790 ```
3791 <dict>
3792   <key>SanitizeOnShutdown</key>
3793   <true/> | <false/>
3794 </dict>
3795 ```
3796 #### policies.json
3797 ```
3798 {
3799   "policies": {
3800     "SanitizeOnShutdown": true | false
3801   }
3802 }
3803 ```
3804 ### SearchBar
3805 Set whether or not search bar is displayed.
3806
3807 **Compatibility:** Firefox 60, Firefox ESR 60\
3808 **CCK2 Equivalent:** `showSearchBar`\
3809 **Preferences Affected:** N/A
3810
3811 #### Windows (GPO)
3812 ```
3813 Software\Policies\Mozilla\Firefox\SearchBar = "unified" | "separate"
3814 ```
3815
3816 #### Windows (Intune)
3817 OMA-URI:
3818 ```
3819 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SearchBar
3820 ```
3821 Value (string):
3822 ```
3823 <enabled/>
3824 <data id="Permissions" value="unified | separate"/>
3825 #### macOS
3826 ```
3827 <dict>
3828   <key>SearchBar</key>
3829   <string>unified | separate</string>
3830 </dict>
3831 ```
3832 #### policies.json
3833 ```
3834 {
3835   "policies": {
3836     "SearchBar": "unified" | "separate"
3837   }
3838 }
3839 ```
3840 <a name="SearchEngines"></a>
3841
3842 ### SearchEngines (This policy is only available on the ESR.)
3843
3844 ### SearchEngines | Default
3845
3846 Set the default search engine. This policy is only available on the ESR.
3847
3848 **Compatibility:** Firefox ESR 60\
3849 **CCK2 Equivalent:** `defaultSearchEngine`\
3850 **Preferences Affected:** N/A
3851
3852 #### Windows (GPO)
3853 ```
3854 Software\Policies\Mozilla\Firefox\SearchEngines\Default = NAME_OF_SEARCH_ENGINE
3855 ```
3856 #### Windows (Intune)
3857 OMA-URI:
3858 ```
3859 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_Default
3860 ```
3861 Value (string):
3862 ```
3863 <enabled/>
3864 <data id="SearchEngines_Default" value="NAME_OF_SEARCH_ENGINE"/>
3865 ```
3866 #### macOS
3867 ```
3868 <dict>
3869   <key>SearchEngines</key>
3870   <dict>
3871     <key>Default</key>
3872     <string>NAME_OF_SEARCH_ENGINE</string>
3873   </dict>
3874 </dict>
3875 ```
3876 #### policies.json
3877 ```
3878 {
3879   "policies": {
3880     "SearchEngines": {
3881       "Default": "NAME_OF_SEARCH_ENGINE"
3882     }
3883   }
3884 }
3885 ```
3886 ### SearchEngines | PreventInstalls
3887
3888 Prevent installing search engines from webpages.
3889
3890 **Compatibility:** Firefox ESR 60\
3891 **CCK2 Equivalent:** `disableSearchEngineInstall`\
3892 **Preferences Affected:** N/A
3893
3894 #### Windows (GPO)
3895 ```
3896 Software\Policies\Mozilla\Firefox\SearchEngines\PreventInstalls = 0x1 | 0x0
3897 ```
3898 #### Windows (Intune)
3899 OMA-URI:
3900 ```
3901 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_PreventInstalls
3902 ```
3903 Value (string):
3904 ```
3905 <enabled/> or <disabled/>
3906 ```
3907 #### macOS
3908 ```
3909 <dict>
3910   <key>SearchEngines</key>
3911   <dict>
3912     <key>PreventInstalls</key>
3913     <true/> | <false/>
3914   </dict>
3915 </dict>
3916 ```
3917 #### policies.json
3918 ```
3919 {
3920   "policies": {
3921     "SearchEngines": {
3922       "PreventInstalls": true | false
3923     }
3924   }
3925 }
3926 ```
3927 ### SearchEngines | Remove
3928
3929 Hide built-in search engines. This policy is only available on the ESR.
3930
3931 **Compatibility:** Firefox ESR 60.2\
3932 **CCK2 Equivalent:** `removeDefaultSearchEngines` (removed all built-in engines)\
3933 **Preferences Affected:** N/A
3934
3935 #### Windows (GPO)
3936 ```
3937 Software\Policies\Mozilla\Firefox\SearchEngines\Remove\1 = NAME_OF_SEARCH_ENGINE
3938 ```
3939 #### Windows (Intune)
3940 OMA-URI:
3941 ```
3942 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_Remove
3943 ```
3944 Value (string):
3945 ```
3946 <enabled/>
3947 <data id="SearchEngines_Remove" value="1&#xF000;NAME_OF_SEARCH_ENGINE"/>
3948 ```
3949 #### macOS
3950 ```
3951 <dict>
3952   <key>SearchEngines</key>
3953   <dict>
3954     <key>Remove</key>
3955     <array>
3956       <string>NAME_OF_SEARCH_ENGINE</string>
3957     </array>
3958   </dict>
3959 </dict>
3960 ```
3961 #### policies.json
3962 ```
3963 {
3964   "policies": {
3965     "SearchEngines": {
3966       "Remove": ["NAME_OF_SEARCH_ENGINE"]
3967     }
3968   }
3969 }
3970 ```
3971 ### SearchEngines | Add
3972
3973 Add new search engines (up to five). This policy is only available on the ESR. `Name` and `URLTemplate` are required.
3974
3975 `Name` is the name of the search engine.
3976
3977 `URLTemplate` is the search URL with {searchTerms} to substitute for the search term.
3978
3979 `Method` is either GET or POST
3980
3981 `IconURL` is a URL for the icon to use.
3982
3983 `Alias` is a keyword to use for the engine.
3984
3985 `Description` is a description of the search engine.
3986
3987 `PostData` is the POST data as name value pairs separated by &.
3988
3989 `SuggestURLTemplate` is a search suggestions URL with {searchTerms} to substitute for the search term.
3990
3991 **Compatibility:** Firefox ESR 60 (POST support in Firefox ESR 68)\
3992 **CCK2 Equivalent:** `searchplugins`\
3993 **Preferences Affected:** N/A
3994
3995 #### Windows (GPO)
3996 ```
3997 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Name = "Example1"
3998 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\URLTemplate = "https://www.example.org/q={searchTerms}"
3999 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Method = "GET" | "POST"
4000 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\IconURL = "https://www.example.org/favicon.ico"
4001 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Alias = "example"
4002 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Description = "Example Description"
4003 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\SuggestURLTemplate = "https://www.example.org/suggestions/q={searchTerms}"
4004 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\PostData = "name=value&q={searchTerms}"
4005 ```
4006 #### Windows (Intune)
4007 OMA-URI:
4008 ```
4009 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_1
4010 ```
4011 Value (string):
4012 ```
4013 <enabled/>
4014 <data id="SearchEngine_Name" value="Example1"/>
4015 <data id="SearchEngine_URLTemplate" value="https://www.example.org/q={searchTerms"/>
4016 <data id="SearchEngine_Method" value="GET | POST"/>
4017 <data id="SearchEngine_IconURL" value="https://www.example.org/favicon.ico"/>
4018 <data id="SearchEngine_Alias" value="example"/>
4019 <data id="SearchEngine_Description" value="Example Description"/>
4020 <data id="SearchEngine_SuggestURLTemplate" value="https://www.example.org/suggestions/q={searchTerms}"/>
4021 <data id="SearchEngine_PostData" value="name=value&amp;q={searchTerms}"/>
4022 ```
4023 #### macOS
4024 ```
4025 <dict>
4026   <key>SearchEngines</key>
4027   <dict>
4028     <key>Add</key>
4029     <array>
4030       <dict>
4031         <key>Name</key>
4032         <string>Example1</string>
4033         <key>URLTemplate</key>
4034         <string>https://www.example.org/q={searchTerms}</string>
4035         <key>Method</key>
4036         <string>GET | POST </string>
4037         <key>IconURL</key>
4038         <string>https://www.example.org/favicon.ico</string>
4039         <key>Alias</key>
4040         <string>example</string>
4041         <key>Description</key>
4042         <string>Example Description</string>
4043         <key>SuggestURLTemplate</key>
4044         <string>https://www.example.org/suggestions/q={searchTerms}</string>
4045         <key>PostData</key>
4046         <string>name=value&q={searchTerms}</string>
4047       </dict>
4048     <array>
4049   </dict>
4050 </dict>
4051 ```
4052 #### policies.json
4053 ```
4054 {
4055   "policies": {
4056     "SearchEngines": {
4057       "Add": [
4058         {
4059           "Name": "Example1",
4060           "URLTemplate": "https://www.example.org/q={searchTerms}",
4061           "Method": "GET" | "POST",
4062           "IconURL": "https://www.example.org/favicon.ico",
4063           "Alias": "example",
4064           "Description": "Description",
4065           "PostData": "name=value&q={searchTerms}",
4066           "SuggestURLTemplate": "https://www.example.org/suggestions/q={searchTerms}"
4067         }
4068       ]
4069     }
4070   }
4071 }
4072 ```
4073 ### SearchSuggestEnabled
4074
4075 Enable search suggestions.
4076
4077 **Compatibility:** Firefox 68, Firefox ESR 68\
4078 **CCK2 Equivalent:** N/A\
4079 **Preferences Affected:** `browser.urlbar.suggest.searches`,`browser.search.suggest.enabled`
4080
4081 #### Windows (GPO)
4082 ```
4083 Software\Policies\Mozilla\Firefox\SearchSuggestEnabled = 0x1 | 0x0
4084 ```
4085 #### Windows (Intune)
4086 OMA-URI:
4087 ```
4088 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SearchSuggestEnabled
4089 ```
4090 Value (string):
4091 ```
4092 <enabled/> or <disabled/>
4093 ```
4094 #### macOS
4095 ```
4096 <dict>
4097   <key>SearchSuggestEnabled</key>
4098   <true/> | <false/>
4099 </dict>
4100 ```
4101 #### policies.json
4102 ```
4103 {
4104   "policies": {
4105     "SearchSuggestEnabled": true | false
4106   }
4107 }
4108 ```
4109 ### SecurityDevices
4110
4111 Install PKCS #11 modules.
4112
4113 **Compatibility:** Firefox 64, Firefox ESR 60.4\
4114 **CCK2 Equivalent:** `certs.devices`\
4115 **Preferences Affected:** N/A
4116
4117 #### Windows (GPO)
4118 ```
4119 Software\Policies\Mozilla\Firefox\SecurityDevices\NAME_OF_DEVICE = PATH_TO_LIBRARY_FOR_DEVICE
4120 ```
4121 #### Windows (Intune)
4122 OMA-URI:
4123 ```
4124 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SecurityDevices
4125 ```
4126 Value (string):
4127 ```
4128 <enabled/>
4129 <data id="SecurityDevices" value="NAME_OF_DEVICE&#xF000;PATH_TO_LIBRARY_FOR_DEVICE"/>
4130 ```
4131 #### macOS
4132 ```
4133 <dict>
4134   <key>SecurityDevices</key>
4135   <dict>
4136     <key>NAME_OF_DEVICE</key>
4137     <string>PATH_TO_LIBRARY_FOR_DEVICE</string>
4138   </dict>
4139 </dict>
4140 ```
4141
4142 #### policies.json
4143 ```
4144 {
4145   "policies": {
4146     "SecurityDevices": {
4147       "NAME_OF_DEVICE": "PATH_TO_LIBRARY_FOR_DEVICE"
4148     }
4149   }
4150 }
4151 ```
4152 ### SSLVersionMax
4153
4154 Set and lock the maximum version of TLS.
4155
4156 **Compatibility:** Firefox 66, Firefox ESR 60.6\
4157 **CCK2 Equivalent:** N/A\
4158 **Preferences Affected:** `security.tls.version.max`
4159
4160 #### Windows (GPO)
4161 ```
4162 Software\Policies\Mozilla\Firefox\SSLVersionMax = "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
4163 ```
4164 #### Windows (Intune)
4165 OMA-URI:
4166 ```
4167 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SSLVersionMax
4168 ```
4169 Value (string):
4170 ```
4171 <enabled/>
4172 <data id="SSLVersion" value="tls1 | tls1.2 | tls1.3"/>
4173 ```
4174 #### macOS
4175 ```
4176 <dict>
4177   <key>SSLVersionMax</key>
4178   <string>tls1 | tls1.1 | tls1.2 | tls1.3</string>
4179 </dict>
4180 ```
4181
4182 #### policies.json
4183 ```
4184 {
4185   "policies": {
4186     "SSLVersionMax": "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
4187   }
4188 }
4189 ```
4190 ### SSLVersionMin
4191
4192 Set and lock the minimum version of TLS.
4193
4194 **Compatibility:** Firefox 66, Firefox ESR 60.6\
4195 **CCK2 Equivalent:** N/A\
4196 **Preferences Affected:** `security.tls.version.min`
4197
4198 #### Windows (GPO)
4199 ```
4200 Software\Policies\Mozilla\Firefox\SSLVersionMin = "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
4201 ```
4202 #### Windows (Intune)
4203 OMA-URI:
4204 ```
4205 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SSLVersionMin
4206 ```
4207 Value (string):
4208 ```
4209 <enabled/>
4210 <data id="SSLVersion" value="tls1 | tls1.2 | tls1.3"/>
4211 ```
4212 #### macOS
4213 ```
4214 <dict>
4215   <key>SSLVersionMin</key>
4216   <string>tls1 | tls1.1 | tls1.2 | tls1.3</string>
4217 </dict>
4218 ```
4219
4220 #### policies.json
4221 ```
4222 {
4223   "policies": {
4224     "SSLVersionMin": "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
4225   }
4226 }
4227 ```
4228 ### SupportMenu
4229 Add a menuitem to the help menu for specifying support information.
4230
4231 **Compatibility:** Firefox 68.0.1, Firefox ESR 68.0.1\
4232 **CCK2 Equivalent:** helpMenu\
4233 **Preferences Affected:** N/A
4234
4235 #### Windows (GPO)
4236 ```
4237 Software\Policies\Mozilla\Firefox\SupportMenu\Title = "Support Menu"
4238 Software\Policies\Mozilla\Firefox\SupportMenu\URL = "http://example.com/support"
4239 Software\Policies\Mozilla\Firefox\SupportMenu\AccessKey = "S"
4240 ```
4241 #### Windows (Intune)
4242 OMA-URI:
4243 ```
4244 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SupportMenu
4245 ```
4246 Value (string):
4247 ```
4248 <enabled/>
4249 <data id="SupportMenuTitle" value="Support Menu"/>
4250 <data id="SupportMenuURL" value="http://example.com/support"/>
4251 <data id="SupportMenuAccessKey" value="S">
4252 ```
4253 #### macOS
4254 ```
4255 <dict>
4256   <key>SupportMenu</key>
4257   <dict>
4258     <key>Title</key>
4259     <string>SupportMenu</string>
4260     <key>URL</key>
4261     <string>http://example.com/support</string>
4262     <key>AccessKey</key>
4263     <string>S</string>
4264   </dict>
4265 </dict>
4266 ```
4267 #### policies.json
4268 ```
4269 {
4270   "policies": {
4271     "SupportMenu": {
4272       "Title": "Support Menu",
4273       "URL": "http://example.com/support",
4274       "AccessKey": "S"
4275     }
4276   }
4277 }
4278 ```
4279 ### UserMessaging
4280
4281 Prevent installing search engines from webpages.
4282
4283 `WhatsNew` Remove the "What's New" icon and menuitem. (Firefox 75 only)
4284
4285 `ExtensionRecommendations` Don't recommend extensions.
4286
4287 `FeatureRecommendations` Don't recommend browser features.
4288
4289 `UrlbarInterventions` Don't offer Firefox specific suggestions in the URL bar. (Firefox 75 only)
4290
4291 **Compatibility:** Firefox 75, Firefox ESR 68.7\
4292 **CCK2 Equivalent:** N/A\
4293 **Preferences Affected:** `browser.messaging-system.whatsNewPanel.enabled`,`browser.newtabpage.activity-stream.asrouter.userprefs.cfr.addons`,`browser.newtabpage.activity-stream.asrouter.userprefs.cfr.features`
4294
4295 #### Windows (GPO)
4296 ```
4297 Software\Policies\Mozilla\Firefox\UserMessaging\WhatsNew = 0x1 | 0x0
4298 Software\Policies\Mozilla\Firefox\UserMessaging\ExtensionRecommendations = 0x1 | 0x0
4299 Software\Policies\Mozilla\Firefox\UserMessaging\FeatureRecommendations = 0x1 | 0x0
4300 Software\Policies\Mozilla\Firefox\UserMessaging\UrlbarInterventions = 0x1 | 0x0
4301 ```
4302 #### Windows (Intune)
4303 OMA-URI:
4304 ```
4305 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/UserMessaging_WhatsNew
4306 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/UserMessaging_ExtensionRecommendations
4307 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/UserMessaging_FeatureRecommendations
4308 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/UserMessaging_UrlbarInterventions
4309 ```
4310 Value (string):
4311 ```
4312 <enabled/> or <disabled/>
4313 ```
4314 #### macOS
4315 ```
4316 <dict>
4317   <key>UserMessaging</key>
4318   <dict>
4319     <key>WhatsNew</key>
4320     <true/> | <false/>
4321     <key>ExtensionRecommendations</key>
4322     <true/> | <false/>
4323     <key>FeatureRecommendations</key>
4324     <true/> | <false/>
4325     <key>UrlbarInterventions</key>
4326     <true/> | <false/>
4327   </dict>
4328 </dict>
4329 ```
4330 #### policies.json
4331 ```
4332 {
4333   "policies": {
4334     "UserMessaging": {
4335       "WhatsNew": true | false,
4336       "ExtensionRecommendations": true | false,
4337       "FeatureRecommendations": true | false,
4338       "UrlbarInterventions": true | false
4339     }
4340   }
4341 }
4342 ```
4343 ### WebsiteFilter
4344 Block websites from being visited. The parameters take an array of Match Patterns, as documented in https://developer.mozilla.org/en-US/Add-ons/WebExtensions/Match_patterns. Only http/https addresses are supported at the moment. The arrays are limited to 1000 entries each.
4345
4346 **Compatibility:** Firefox 60, Firefox ESR 60\
4347 **CCK2 Equivalent:** N/A\
4348 **Preferences Affected:** N/A
4349
4350 #### Windows (GPO)
4351 ```
4352 Software\Policies\Mozilla\Firefox\WebsiteFilter\Block\1 = "<all_urls>"
4353 Software\Policies\Mozilla\Firefox\WebsiteFilter\Exceptions\1 = "http://example.org/*"
4354 ```
4355 #### Windows (Intune)
4356 OMA-URI:
4357 ```
4358 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/B_WebsiteFilter_Block
4359 ```
4360 Value (string):
4361 ```
4362 <enabled/>
4363 <data id="WebsiteFilter" value="1&#xF000;<all_urls>"/>
4364 ```
4365 OMA-URI:
4366 ```
4367 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/B_WebsiteFilter_Exceptions
4368 ```
4369 Value (string):
4370 ```
4371 <enabled/>
4372 <data id="WebsiteFilter" value="1&#xF000;http://example.org/*"/>
4373 ```
4374 #### macOS
4375 ```
4376 <dict>
4377   <key>WebsiteFilter</key>
4378   <dict>
4379     <key>Block</key>
4380     <array>
4381       <string><all_urls></string>
4382     </array>
4383     <key>Exceptions</key>
4384     <array>
4385       <string>http://example.org/*</string>
4386     </array>
4387   </dict>
4388
4389 </dict>
4390 ```
4391 #### policies.json
4392 ```
4393 {
4394   "policies": {
4395     "WebsiteFilter": {
4396       "Block": ["<all_urls>"],
4397       "Exceptions": ["http://example.org/*"]
4398     }
4399   }
4400 }
4401 ```