]> git.p6c8.net - policy-templates.git/blob - README.md
git.p6c8.net / policy-templates.git / blob
? search:


d95079463bc3bb0b3a1568d645afa4074401899e
[policy-templates.git] / README.md
1 **These policies are in active development and so might contain changes that do not work with current versions of Firefox.**
2
3 **You should use the officially released versions (https://github.com/mozilla/policy-templates/releases) if you are deploying changes.**
4
5 Policies can be specified using the Group Policy templates on Windows (https://github.com/mozilla/policy-templates/tree/master/windows), configuration profiles on macOS (https://github.com/mozilla/policy-templates/tree/master/mac), or by creating a file called `policies.json`. On Windows, create a directory called `distribution` where the EXE is located and place the file there. On Mac, the file goes into `Firefox.app/Contents/Resources/distribution`. On Linux, the file goes into `firefox/distribution`, where `firefox` is the installation directory for firefox, which varies by distribution.
6
7 | Policy Name | Description
8 | --- | --- |
9 | **[`AppUpdateURL`](#AppUpdateURL)** | Change the URL for application update.
10 | **[`Authentication`](#Authentication)** | Configure sites that support integrated authentication.
11 | **[`BlockAboutAddons`](#blockaboutaddons)** | Block access to the Add-ons Manager (about:addons).
12 | **[`BlockAboutConfig`](#blockaboutconfig)** | Block access to about:config.
13 | **[`BlockAboutProfiles`](#blockaboutprofiles)** | Block access to About Profiles (about:profiles).
14 | **[`BlockAboutSupport`](#blockaboutsupport)** | Block access to Troubleshooting Information (about:support).
15 | **[`Bookmarks`](#bookmarks)** | Add bookmarks in either the bookmarks toolbar or menu.
16 | **[`CaptivePortal`](#captiveportal)** | Enable or disable the detection of captive portals.
17 | **[`Certificates`](#certificates)** |
18 | **[`Certificates -> ImportEnterpriseRoots`](#certificates--importenterpriseroots)** | Trust certificates that have been added to the operating system certificate store by a user or administrator.
19 | **[`Certificates -> Install`](#certificates--install)** | Install certificates into the Firefox certificate store.
20 | **[`Cookies`](#cookies)** | Configure cookie preferences.
21 | **[`DisableSetDesktopBackground`](#disablesetdesktopbackground)** | Remove the "Set As Desktop Background..." menuitem when right clicking on an image.
22 | **[`DisableMasterPasswordCreation`](#disablemasterpasswordcreation)** | Remove the master password functionality.
23 | **[`DisableAppUpdate`](#disableappupdate)** | Turn off application updates.
24 | **[`DisableBuiltinPDFViewer`](#disablebuiltinpdfviewer)** | Disable the built in PDF viewer.
25 | **[`DisableDeveloperTools`](#disabledevelopertools)** | Remove access to all developer tools.
26 | **[`DisableFeedbackCommands`](#disablefeedbackcommands)** | Disable the menus for reporting sites.
27 | **[`DisableFirefoxScreenshots`](#disablefirefoxscreenshots)** | Remove access to Firefox Screenshots.
28 | **[`DisableFirefoxAccounts`](#disablefirefoxaccounts)** | Disable Firefox Accounts integration (Sync).
29 | **[`DisableFirefoxStudies`](#disablefirefoxstudies)** | Disable Firefox studies (Shield).
30 | **[`DisableForgetButton`](#disableforgetbutton)** | Disable the "Forget" button.
31 | **[`DisableFormHistory`](#disableformhistory)** | Turn off saving information on web forms and the search bar.
32 | **[`DisablePocket`](#disablepocket)** | Remove Pocket in the Firefox UI.
33 | **[`DisablePrivateBrowsing`](#disableprivatebrowsing)** | Remove access to private browsing.
34 | **[`DisableProfileImport`](#disableprofileimport)** | Disables the "Import data from another browser" option in the bookmarks window.
35 | **[`DisableProfileRefresh`](#disableprofilerefresh)** | Disable the Refresh Firefox button on about:support and support.mozilla.org
36 | **[`DisableSafeMode`](#disablesafemode)** | Disable safe mode within the browser.
37 | **[`DisableSecurityBypass`](#disablesecuritybypass)** | Prevent the user from bypassing security in certain cases.
38 | **[`DisableSystemAddonUpdate`](#disablesystemaddonupdate)** | Prevent system add-ons from being installed or update.
39 | **[`DisableTelemetry`](#disabletelemetry)** | DisableTelemetry
40 | **[`DisplayBookmarksToolbar`](#displaybookmarkstoolbar)** | Set the initial state of the bookmarks toolbar.
41 | **[`DisplayMenuBar`](#displaymenubar)** | Set the initial state of the menubar.
42 | **[`DNSOverHTTPS`](#dnsoverhttps)** | Configure DNS over HTTPS.
43 | **[`DontCheckDefaultBrowser`](#dontcheckdefaultbrowser)** | Don't check if Firefox is the default browser at startup.
44 | **[`DefaultDownloadDirectory`](#defaultdownloaddirectory)** | Set the default download directory.
45 | **[`DownloadDirectory`](#downloaddirectory)** | Set and lock the download directory.
46 | **[`EnableTrackingProtection`](#enabletrackingprotection)** | Configure tracking protection.
47 | **[`EnterprisePoliciesEnabled`](#enterprisepoliciesenabled)** | Enable policy support on macOS.
48 | **[`Extensions`](#extensions)** | Control the installation, uninstallation and locking of extensions.
49 | **[`ExtensionSettings`](#extensionsettings)** | Manage all aspects of extensions.
50 | **[`ExtensionUpdate`](#extensionupdate)** | Control extension updates.
51 | **[`FlashPlugin`](#flashplugin)** | Configure the default Flash plugin policy as well as origins for which Flash is allowed.
52 | **[`FirefoxHome`](#firefoxhome)** | Customize the Firefox Home page.
53 | **[`HardwareAcceleration`](#hardwareacceleration)** | Control hardware acceleration.
54 | **[`Homepage`](#homepage)** | Configure the default homepage and how Firefox starts.
55 | **[`InstallAddonsPermission`](#installaddonspermission)** | Configure the default extension install policy as well as origins for extension installs are allowed.
56 | **[`LocalFileLinks`](#localfilelinks)** | Enable linking to local files by origin.
57 | **[`NetworkPrediction`](#networkprediction)** | Enable or disable network prediction (DNS prefetching).
58 | **[`NewTabPage`](#newtabpage)** | Enable or disable the New Tab page.
59 | **[`NoDefaultBookmarks`](#nodefaultbookmarks)** | Disable the creation of default bookmarks.
60 | **[`OfferToSaveLogins`](#offertosavelogins)** | Control whether or not Firefox offers to save passwords.
61 | **[`OverrideFirstRunPage`](#overridefirstrunpage)** | Override the first run page.
62 | **[`OverridePostUpdatePage`](#overridepostupdatepage)** | Override the upgrade page.
63 | **[`Permissions`](#permissions)** | Set permissions associated with camera, microphone, location, and notifications.
64 | **[`PopupBlocking`](#popupblocking)** | Configure the default pop-up window policy as well as origins for which pop-up windows are allowed.
65 | **[`Preferences`](#preferences)** | Set and lock some preferences.
66 | **[`PromptForDownloadLocation`](#promptfordownloadlocation)** | Ask where to save each file before downloading.
67 | **[`Proxy`](#proxy)** | Configure proxy settings.
68 | **[`RequestedLocales`](#requestedlocales)** | Set the the list of requested locales for the application in order of preference.
69 | **[`SanitizeOnShutdown` (All)](#sanitizeonshutdown-all)** | Clear all data on shutdown.
70 | **[`SanitizeOnShutdown` (Selective)](#sanitizeonshutdown-selective)** | Clear data on shutdown.
71 | **[`SearchBar`](#searchbar)** | Set whether or not search bar is displayed.
72 | **[`SearchEngines`](#searchengines-this-policy-is-only-available-on-the-esr)** |
73 | **[`SearchEngines -> Default`](#searchengines--default)** | Set the default search engine.
74 | **[`SearchEngines -> PreventInstalls`](#searchengines--preventinstalls)** | Prevent installing search engines from webpages.
75 | **[`SearchEngines -> Remove`](#searchengines--remove)** | Hide built-in search engines.
76 | **[`SearchEngines -> Add`](#searchengines--add)** | Add new search engines.
77 | **[`SecurityDevices`](#securitydevices)** | Install PKCS #11 modules.
78 | **[`SearchSuggestEnabled`](#searchsuggestenabled)** | Enable search suggestions.
79 | **[`SSLVersionMax`](#sslversionmax)** | Set and lock the maximum version of TLS.
80 | **[`SSLVersionMin`](#sslversionmin)** | Set and lock the minimum version of TLS.
81 | **[`SupportMenu`](#supportmenu)** | Add a menuitem to the help menu for specifying support information.
82 | **[`WebsiteFilter`](#websitefilter)** | Block websites from being visited.
83
84 ### AppUpdateURL
85
86 Change the URL for application update.
87
88 **Compatibility:** Firefox 62, Firefox ESR 60.2\
89 **CCK2 Equivalent:** N/A\
90 **Preferences Affected:** `app.update.url`
91
92 #### Windows
93 ```
94 Software\Policies\Mozilla\Firefox\AppUpdateURL = "https://yoursite.com"
95 ```
96 #### macOS
97 ```
98 <dict>
99 <key>AppUpdateURL</key>
100 <string>https://yoursite.com</string>
101 </dict>
102 ```
103 #### JSON
104 ```
105 {
106 "policies": {
107 "AppUpdateURL": "https://yoursite.com"
108 }
109 }
110 ```
111 ### Authentication
112
113 Configure sites that support integrated authentication.
114
115 See https://developer.mozilla.org/en-US/docs/Mozilla/Integrated_authentication for more information.
116
117 **Compatibility:** Firefox 60, Firefox ESR 60 (AllowNonFQDN added in 62/60.2)\
118 **CCK2 Equivalent:** N/A\
119 **Preferences Affected:** `network.negotiate-auth.trusted-uris`, `network.negotiate-auth.delegation-uris`, `network.automatic-ntlm-auth.trusted-uris`, `network.automatic-ntlm-auth.allow-non-fqdn`, `network.negotiate-auth.allow-non-fqdn`
120
121 #### Windows
122 ```
123 Software\Policies\Mozilla\Firefox\Authentication\SPNEGO\1 = "mydomain.com"
124 Software\Policies\Mozilla\Firefox\Authentication\SPNEGO\2 = "https://myotherdomain.com"
125 Software\Policies\Mozilla\Firefox\Authentication\Delegated\1 = "mydomain.com"
126 Software\Policies\Mozilla\Firefox\Authentication\Delegated\2 = "https://myotherdomain.com"
127 Software\Policies\Mozilla\Firefox\Authentication\NTLM\1 = "mydomain.com"
128 Software\Policies\Mozilla\Firefox\Authentication\NTLM\2 = "https://myotherdomain.com"
129 Software\Policies\Mozilla\Firefox\Authentication\AllowNonFQDN\SPNEGO = 0x1 | 0x0
130 Software\Policies\Mozilla\Firefox\Authentication\AllowNonFQDN\NTLM = 0x1 | 0x0
131 ```
132 #### macOS
133 ```
134 <dict>
135 <key>Authentication</key>
136 <dict>
137 <key>SPNEGO</key>
138 <array>
139 <string>mydomain.com</string>
140 <string>https://myotherdomain.com</string>
141 </array>
142 <key>Delegated</key>
143 <array>
144 <string>mydomain.com</string>
145 <string>https://myotherdomain.com</string>
146 </array>
147 <key>NTLM</key>
148 <array>
149 <string>mydomain.com</string>
150 <string>https://myotherdomain.com</string>
151 </array>
152 <key>AllowNonFQDN</key>
153 <dict>
154 <key>SPNEGO</key>
155 <true/> | <false/>
156 <key>NTLM</key>
157 <true/> | <false/>
158 </dict>
159 </dict>
160 </dict>
161 ```
162 #### JSON
163 ```
164 {
165 "policies": {
166 "Authentication": {
167 "SPNEGO": ["mydomain.com", "https://myotherdomain.com"],
168 "Delegated": ["mydomain.com", "https://myotherdomain.com"],
169 "NTLM": ["mydomain.com", "https://myotherdomain.com"],
170 "AllowNonFQDN": {
171 "SPNEGO": true | false,
172 "NTLM": true | false
173 }
174 }
175 }
176 }
177 ```
178 ### BlockAboutAddons
179
180 Block access to the Add-ons Manager (about:addons).
181
182 **Compatibility:** Firefox 60, Firefox ESR 60\
183 **CCK2 Equivalent:** `disableAddonsManager`\
184 **Preferences Affected:** N/A
185
186 #### Windows
187 ```
188 Software\Policies\Mozilla\Firefox\BlockAboutAddons = 0x1 | 0x0
189 ```
190 #### macOS
191 ```
192 <dict>
193 <key>BlockAboutAddons</key>
194 <true/> | <false/>
195 </dict>
196 ```
197 #### JSON
198 ```
199 {
200 "policies": {
201 "BlockAboutAddons": true | false
202 }
203 }
204 ```
205 ### BlockAboutConfig
206
207 Block access to about:config.
208
209 **Compatibility:** Firefox 60, Firefox ESR 60\
210 **CCK2 Equivalent:** `disableAboutConfig`\
211 **Preferences Affected:** N/A
212
213 #### Windows
214 ```
215 Software\Policies\Mozilla\Firefox\BlockAboutConfig = 0x1 | 0x0
216 ```
217 #### macOS
218 ```
219 <dict>
220 <key>BlockAboutConfig</key>
221 <true/> | <false/>
222 </dict>
223 ```
224 #### JSON
225 ```
226 {
227 "policies": {
228 "BlockAboutConfig": true | false
229 }
230 }
231 ```
232 ### BlockAboutProfiles
233
234 Block access to About Profiles (about:profiles).
235
236 **Compatibility:** Firefox 60, Firefox ESR 60\
237 **CCK2 Equivalent:** `disableAboutProfiles`\
238 **Preferences Affected:** N/A
239
240 #### Windows
241 ```
242 Software\Policies\Mozilla\Firefox\BlockAboutProfiles = 0x1 | 0x0
243 ```
244 #### macOS
245 ```
246 <dict>
247 <key>BlockAboutProfiles</key>
248 <true/> | <false/>
249 </dict>
250 ```
251 #### JSON
252 ```
253 {
254 "policies": {
255 "BlockAboutProfiles": true | false
256 }
257 }
258 ```
259 ### BlockAboutSupport
260
261 Block access to Troubleshooting Information (about:support).
262
263 **Compatibility:** Firefox 60, Firefox ESR 60\
264 **CCK2 Equivalent:** `disableAboutSupport`\
265 **Preferences Affected:** N/A
266
267 #### Windows
268 ```
269 Software\Policies\Mozilla\Firefox\BlockAboutSupport = 0x1 | 0x0
270 ```
271 #### macOS
272 ```
273 <dict>
274 <key>BlockAboutSupport</key>
275 <true/> | <false/>
276 </dict>
277 ```
278 #### JSON
279 ```
280 {
281 "policies": {
282 "BlockAboutSupport": true | false
283 }
284 }
285 ```
286 ### Bookmarks
287
288 Add bookmarks in either the bookmarks toolbar or menu. Only `Title` and `URL` are required. If `Placement` is not specified, the bookmark will be placed on the toolbar. If `Folder` is specified, it is automatically created and bookmarks with the same folder name are grouped together.
289
290 **Compatibility:** Firefox 60, Firefox ESR 60\
291 **CCK2 Equivalent:** `bookmarks.toolbar`,`bookmarks.menu`\
292 **Preferences Affected:** N/A
293
294 #### Windows
295 ```
296 Software\Policies\Mozilla\Firefox\Bookmarks\1\Title = "Example"
297 Software\Policies\Mozilla\Firefox\Bookmarks\1\URL = "https://example.com"
298 Software\Policies\Mozilla\Firefox\Bookmarks\1\Favicon = "https://example.com/favicon.ico"
299 Software\Policies\Mozilla\Firefox\Bookmarks\1\Placement = "toolbar" | "menu"
300 Software\Policies\Mozilla\Firefox\Bookmarks\1\Folder = "FolderName"
301 ```
302 #### macOS
303 ```
304 <dict>
305 <key>Bookmarks</key>
306 <array>
307 <dict>
308 <key>Title</key>
309 <string>Example</string>
310 <key>URL</key>
311 <string>https://example.com</string>
312 <key>Favicon</key>
313 <string>https://example.com/favicon.ico</string>
314 <key>Placement</key>
315 <string>toolbar | menu</string>
316 <key>Folder</key>
317 <string>FolderName</string>
318 </dict>
319 </array>
320 </dict>
321 ```
322 #### JSON
323 ```
324 {
325 "policies": {
326 "Bookmarks": [
327 {
328 "Title": "Example",
329 "URL": "https://example.com",
330 "Favicon": "https://example.com/favicon.ico",
331 "Placement": "toolbar" | "menu",
332 "Folder": "FolderName"
333 }
334 ]
335 }
336 }
337 ```
338 ### CaptivePortal
339 Enable or disable the detection of captive portals.
340
341 **Compatibility:** Firefox 67, Firefox ESR 60.7\
342 **CCK2 Equivalent:** N/A\
343 **Preferences Affected:** `network.captive-portal-service.enabled`
344
345 #### Windows
346 ```
347 Software\Policies\Mozilla\Firefox\CaptivePortal = 0x1 | 0x0
348 ```
349 #### macOS
350 ```
351 <dict>
352 <key>CaptivePortal</key>
353 <true/> | <false/>
354 </dict>
355 ```
356 #### JSON
357 ```
358 {
359 "policies": {
360 "CaptivePortal": true | false
361 }
362 }
363 ```
364 ### Certificates
365
366 ### Certificates | ImportEnterpriseRoots
367
368 Trust certificates that have been added to the operating system certificate store by a user or administrator.
369
370 See https://support.mozilla.org/kb/setting-certificate-authorities-firefox for more detail.
371
372 **Compatibility:** Firefox 60, Firefox ESR 60 (macOS support in Firefox 63, Firefox ESR 68)\
373 **CCK2 Equivalent:** N/A\
374 **Preferences Affected:** `security.enterprise_roots.enabled`
375
376 #### Windows
377 ```
378 Software\Policies\Mozilla\Firefox\Certificates\ImportEnterpriseRoots = 0x1 | 0x0
379 ```
380 #### macOS
381 ```
382 <dict>
383 <key>Certificates</key>
384 <dict>
385 <key>ImportEnterpriseRoots</key>
386 <true/> | <false/>
387 </dict>
388 </dict>
389 ```
390 #### JSON
391 ```
392 {
393 "policies": {
394 "Certificates": {
395 "ImportEnterpriseRoots": true | false
396 }
397 }
398 }
399 ```
400 ### Certificates | Install
401
402 Install certificates into the Firefox certificate store. If only a filename is specified, Firefox searches for the file in the following locations:
403
404 - Windows
405 - %USERPROFILE%\AppData\Local\Mozilla\Certificates
406 - %USERPROFILE%\AppData\Roaming\Mozilla\Certificates
407 - macOS
408 - /Library/Application Support/Mozilla/Certificates
409 - ~/Library/Application Support/Mozilla/Certificates
410 - Linux
411 - /usr/lib/mozilla/certificates
412 - /usr/lib64/mozilla/certificates
413 - ~/.mozilla/certificates
414
415 Starting with Firefox 65, Firefox 60.5 ESR, a fully qualified path can be used, including UNC paths. You should use the native path style for your operating system. We do not support using %USERPROFILE% or other environment variables on Windows.
416
417 If you are specifying the path in the policies.json file on Windows, you need to escape your backslashes (`\\`) which means that for UNC paths, you need to escape both (`\\\\`). If you use group policy, you only need one backslash.
418
419 Certificates are installed using the trust string `CT,CT,`.
420
421 Binary (DER) and ASCII (PEM) certificates are both supported.
422
423 **Compatibility:** Firefox 64, Firefox ESR 64\
424 **CCK2 Equivalent:** `certs.ca`\
425 **Preferences Affected:** N/A
426
427 #### Windows
428 ```
429 Software\Policies\Mozilla\Firefox\Certificates\Install\1 = "cert1.der"
430 Software\Policies\Mozilla\Firefox\Certificates\Install\2 = "C:\Users\username\cert2.pem"
431 ```
432 #### macOS
433 ```
434 <dict>
435 <key>Certificates</key>
436 <dict>
437 <key>Install</key>
438 <array>
439 <string>cert1.der</string>
440 <string>/Users/username/cert2.pem</string>
441 </array>
442 </dict>
443 </dict>
444 ```
445 #### JSON
446 ```
447 {
448 "policies": {
449 "Certificates": {
450 "Install": ["cert1.der", "/home/username/cert2.pem"]
451 }
452 }
453 }
454 ```
455 ### Cookies
456 Configure cookie preferences.
457
458 `Allow` is a list of origins (not domains) where cookies are always allowed. You must include http or https.
459
460 `Block` is a list of origins (not domains) where cookies are always blocked. You must include http or https.
461
462 `Default` determines whether cookies are accepted at all.
463
464 `AcceptThirdParty` determines how third-party cookies are handled.
465
466 `ExpireAtSessionEnd` determines when cookies expire.
467
468 `RejectTracker` only rejects cookies for trackers.
469
470 `Locked` prevents the user from changing cookie preferences.
471
472 **Compatibility:** Firefox 60, Firefox ESR 60 (RejectTracker was added in Firefox 63)\
473 **CCK2 Equivalent:** N/A\
474 **Preferences Affected:** `network.cookie.cookieBehavior`,`network.cookie.lifetimePolicy`
475
476 #### Windows
477 ```
478 Software\Policies\Mozilla\Firefox\Cookies\Allow\1 = "https://example.com"
479 Software\Policies\Mozilla\Firefox\Cookies\Block\1 = "https://example.org"
480 Software\Policies\Mozilla\Firefox\Cookies\Default = 0x1 | 0x0
481 Software\Policies\Mozilla\Firefox\Cookies\AcceptThirdParty = "always" | "never" |"from-visited"
482 Software\Policies\Mozilla\Firefox\Cookies\ExpireAtSessionEnd = 0x1 | 0x0
483 Software\Policies\Mozilla\Firefox\Cookies\RejectTracker = 0x1 | 0x0
484 Software\Policies\Mozilla\Firefox\Cookies\Locked = 0x1 | 0x0
485 ```
486 #### macOS
487 ```
488 <dict>
489 <key>Cookies</key>
490 <dict>
491 <key>Allow</key>
492 <array>
493 <string>http://example.com</string>
494 </array>
495 <key>Block</key>
496 <array>
497 <string>http://example.org</string>
498 </array>
499 <key>Default</key>
500 <true/> | <false/>
501 <key>AcceptThirdParty</key>
502 <string>always | never | from-visited</string>
503 <key>ExpireAtSessionEnd</key>
504 <true/> | <false/>
505 <key>RejectTracker</key>
506 <true/> | <false/>
507 <key>Locked</key>
508 <true/> | <false/>
509 </dict>
510 </dict>
511 ```
512 #### JSON
513 ```
514 {
515 "policies": {
516 "Cookies": {
517 "Allow": ["http://example.org/"],
518 "Block": ["http://example.edu/"],
519 "Default": true | false,
520 "AcceptThirdParty": "always" | "never" | "from-visited"],
521 "ExpireAtSessionEnd": true | false,
522 "RejectTracker": true | false,
523 "Locked": true | false
524 }
525 }
526 }
527 ```
528 ### DisableSetDesktopBackground
529 Remove the "Set As Desktop Background..." menuitem when right clicking on an image.
530
531 **Compatibility:** Firefox 60, Firefox ESR 60\
532 **CCK2 Equivalent:** `removeSetDesktopBackground`\
533 **Preferences Affected:** N/A
534
535 #### Windows
536 ```
537 Software\Policies\Mozilla\Firefox\DisableSetDesktopBackground = 0x1 | 0x0
538 ```
539
540 #### macOS
541 ```
542 <dict>
543 <key>DisableSetDesktopBackground</key>
544 <true/> | <false/>
545 </dict>
546 ```
547 #### JSON
548 ```
549 {
550 "policies": {
551 "DisableSetDesktopBackground": true | false
552 }
553 }
554 ```
555 ### DisableMasterPasswordCreation
556 Remove the master password functionality.
557
558 **Compatibility:** Firefox 60, Firefox ESR 60\
559 **CCK2 Equivalent:** `noMasterPassword`\
560 **Preferences Affected:** N/A
561
562 #### Windows
563 ```
564 Software\Policies\Mozilla\Firefox\DisableMasterPasswordCreation = 0x1 | 0x0
565 ```
566
567 #### macOS
568 ```
569 <dict>
570 <key>DisableMasterPasswordCreation</key>
571 <true/> | <false/>
572 </dict>
573 ```
574 #### JSON
575 ```
576 {
577 "policies": {
578 "DisableMasterPasswordCreation": true | false
579 }
580 }
581 ```
582 ### DisableAppUpdate
583 Turn off application updates.
584
585 **Compatibility:** Firefox 60, Firefox ESR 60\
586 **CCK2 Equivalent:** `disableFirefoxUpdates`\
587 **Preferences Affected:** N/A
588
589 #### Windows
590 ```
591 Software\Policies\Mozilla\Firefox\DisableAppUpdate = 0x1 | 0x0
592 ```
593 #### macOS
594 ```
595 <dict>
596 <key>DisableAppUpdate</key>
597 <true/> | <false/>
598 </dict>
599 ```
600 #### JSON
601 ```
602 {
603 "policies": {
604 "DisableAppUpdate": true | false
605 }
606 }
607 ```
608 ### DisableBuiltinPDFViewer
609 Disable the built in PDF viewer. PDF files are downloaded and sent externally.
610
611 **Compatibility:** Firefox 60, Firefox ESR 60\
612 **CCK2 Equivalent:** `disablePDFjs`\
613 **Preferences Affected:** `pdfjs.disabled`
614
615 #### Windows
616 ```
617 Software\Policies\Mozilla\Firefox\DisableBuiltinPDFViewer = 0x1 | 0x0
618 ```
619
620 #### macOS
621 ```
622 <dict>
623 <key>DisableBuiltinPDFViewer</key>
624 <true/> | <false/>
625 </dict>
626 ```
627 #### JSON
628 ```
629 {
630 "policies": {
631 "DisableBuiltinPDFViewer": true | false
632 }
633 }
634 ```
635 ### DisableDeveloperTools
636 Remove access to all developer tools.
637
638 **Compatibility:** Firefox 60, Firefox ESR 60\
639 **CCK2 Equivalent:** `removeDeveloperTools`\
640 **Preferences Affected:** `devtools.policy.disabled`
641
642 #### Windows
643 ```
644 Software\Policies\Mozilla\Firefox\DisableDeveloperTools = 0x1 | 0x0`
645 ```
646
647 #### macOS
648 ```
649 <dict>
650 <key>DisableDeveloperTools</key>
651 <true/> | <false/>
652 </dict>
653 ```
654 #### JSON
655 ```
656 {
657 "policies": {
658 "DisableDeveloperTools": true | false
659 }
660 }
661 ```
662 ### DisableFeedbackCommands
663 Disable the menus for reporting sites (Submit Feedback, Report Deceptive Site).
664
665 **Compatibility:** Firefox 60, Firefox ESR 60\
666 **CCK2 Equivalent:** N/A\
667 **Preferences Affected:** N/A
668
669 #### Windows
670 ```
671 Software\Policies\Mozilla\Firefox\DisableFeedbackCommands = 0x1 | 0x0
672 ```
673 #### macOS
674 ```
675 <dict>
676 <key>DisableFeedbackCommands</key>
677 <true/> | <false/>
678 </dict>
679 ```
680 #### JSON
681 ```
682 {
683 "policies": {
684 "DisableFeedbackCommands": true | false
685 }
686 }
687 ```
688 ### DisableFirefoxScreenshots
689 Remove access to Firefox Screenshots.
690
691 **Compatibility:** Firefox 60, Firefox ESR 60\
692 **CCK2 Equivalent:** N/A\
693 **Preferences Affected:** `extensions.screenshots.disabled`
694
695 #### Windows
696 ```
697 Software\Policies\Mozilla\Firefox\DisableFirefoxScreenshots = 0x1 | 0x0
698 ```
699 #### macOS
700 ```
701 <dict>
702 <key>DisableFirefoxScreenshots</key>
703 <true/> | <false/>
704 </dict>
705 ```
706 #### JSON
707 ```
708 {
709 "policies": {
710 "DisableFirefoxScreenshots": true | false
711 }
712 }
713 ```
714 ### DisableFirefoxAccounts
715 Disable Firefox Accounts integration (Sync).
716
717 **Compatibility:** Firefox 60, Firefox ESR 60\
718 **CCK2 Equivalent:** `disableSync`\
719 **Preferences Affected:** `identity.fxaccounts.enabled`
720
721 #### Windows
722 ```
723 Software\Policies\Mozilla\Firefox\DisableFirefoxAccounts = 0x1 | 0x0
724 ```
725 #### macOS
726 ```
727 <dict>
728 <key>DisableFirefoxAccounts</key>
729 <true/> | <false/>
730 </dict>
731 ```
732 #### JSON
733 ```
734 {
735 "policies": {
736 "DisableFirefoxAccounts": true | false
737 }
738 }
739 ```
740 ### DisableFirefoxStudies
741 Disable Firefox studies (Shield).
742
743 **Compatibility:** Firefox 60, Firefox ESR 60\
744 **CCK2 Equivalent:** `disableForget`\
745 **Preferences Affected:** N/A
746
747 #### Windows
748 ```
749 Software\Policies\Mozilla\Firefox\DisableFirefoxStudies = 0x1 | 0x0
750 ```
751 #### macOS
752 ```
753 <dict>
754 <key>DisableFirefoxStudies</key>
755 <true/> | <false/>
756 </dict>
757 ```
758 #### JSON
759 ```
760 {
761 "policies": {
762 "DisableFirefoxStudies": true | false
763 }
764 }
765 ```
766 ### DisableForgetButton
767 Disable the "Forget" button.
768
769 **Compatibility:** Firefox 60, Firefox ESR 60\
770 **CCK2 Equivalent:** `disableForget`\
771 **Preferences Affected:** N/A
772
773 #### Windows
774 ```
775 Software\Policies\Mozilla\Firefox\DisableForgetButton = 0x1 | 0x0
776 ```
777 #### macOS
778 ```
779 <dict>
780 <key>DisableForgetButton</key>
781 <true/> | <false/>
782 </dict>
783 ```
784 #### JSON
785 ```
786 {
787 "policies": {
788 "DisableForgetButton": true | false
789 }
790 }
791 ```
792 ### DisableFormHistory
793 Turn off saving information on web forms and the search bar.
794
795 **Compatibility:** Firefox 60, Firefox ESR 60\
796 **CCK2 Equivalent:** `disableFormFill`\
797 **Preferences Affected:** ` browser.formfill.enable`
798
799 #### Windows
800 ```
801 Software\Policies\Mozilla\Firefox\DisableFormHistory = 0x1 | 0x0
802 ```
803 #### macOS
804 ```
805 <dict>
806 <key>DisableFormHistory</key>
807 <true/> | <false/>
808 </dict>
809 ```
810 #### JSON
811 ```
812 {
813 "policies": {
814 "DisableFormHistory": true | false
815 }
816 }
817 ```
818 ### DisablePocket
819 Remove Pocket in the Firefox UI. It does not remove it from the new tab page.
820
821 **Compatibility:** Firefox 60, Firefox ESR 60\
822 **CCK2 Equivalent:** `disablePocket`\
823 **Preferences Affected:** `extensions.pocket.enabled`
824
825 #### Windows
826 ```
827 Software\Policies\Mozilla\Firefox\DisablePocket = 0x1 | 0x0
828 ```
829 #### macOS
830 ```
831 <dict>
832 <key>DisablePocket</key>
833 <true/> | <false/>
834 </dict>
835 ```
836 #### JSON
837 ```
838 {
839 "policies": {
840 "DisablePocket": true | false
841 }
842 }
843 ```
844 ### DisablePrivateBrowsing
845 Remove access to private browsing.
846
847 **Compatibility:** Firefox 60, Firefox ESR 60\
848 **CCK2 Equivalent:** `disablePrivateBrowsing`\
849 **Preferences Affected:** N/A
850
851 #### Windows
852 ```
853 Software\Policies\Mozilla\Firefox\DisablePrivateBrowsing = 0x1 | 0x0
854 ```
855 #### macOS
856 ```
857 <dict>
858 <key>DisablePrivateBrowsing</key>
859 <true/> | <false/>
860 </dict>
861 ```
862 #### JSON
863 ```
864 {
865 "policies": {
866 "DisablePrivateBrowsing": true | false
867 }
868 }
869 ```
870 ### DisableProfileImport
871 Disables the "Import data from another browser" option in the bookmarks window.
872
873 **Compatibility:** Firefox 60, Firefox ESR 60\
874 **CCK2 Equivalent:** N/A\
875 **Preferences Affected:** N/A
876
877 #### Windows
878 ```
879 Software\Policies\Mozilla\Firefox\DisableProfileImport = 0x1 | 0x0
880 ```
881 #### macOS
882 ```
883 <dict>
884 <key>DisableProfileImport</key>
885 <true/> | <false/>
886 </dict>
887 ```
888 #### JSON
889 ```
890 {
891 "policies": {
892 "DisableProfileImport": true | false
893 }
894 }
895 ```
896 ### DisableProfileRefresh
897 Disable the Refresh Firefox button on about:support and support.mozilla.org, as well as the prompt that displays offering to refresh Firefox when you haven't used it in a while.
898
899 **Compatibility:** Firefox 60, Firefox ESR 60\
900 **CCK2 Equivalent:** `disableResetFirefox`\
901 **Preferences Affected:** `browser.disableResetPrompt`
902
903 #### Windows
904 ```
905 Software\Policies\Mozilla\Firefox\DisableProfileRefresh = 0x1 | 0x0
906 ```
907 #### macOS
908 ```
909 <dict>
910 <key>DisableProfileRefresh</key>
911 <true/> | <false/>
912 </dict>
913 ```
914 #### JSON
915 ```
916 {
917 "policies": {
918 "DisableProfileRefresh": true | false
919 }
920 }
921 ```
922 ### DisableSafeMode
923 Disable safe mode within the browser.
924
925 On Windows, this disables safe mode via the command line as well.
926
927 **Compatibility:** Firefox 60, Firefox ESR 60 (Windows, macOS)\
928 **CCK2 Equivalent:** `disableSafeMode`\
929 **Preferences Affected:** N/A
930
931 #### Windows
932 ```
933 Software\Policies\Mozilla\Firefox\DisableSafeMode = 0x1 | 0x0
934 ```
935 #### macOS
936 ```
937 <dict>
938 <key>DisableSafeMode</key>
939 <true/> | <false/>
940 </dict>
941 ```
942 #### JSON
943 ```
944 {
945 "policies": {
946 "DisableSafeMode": true | false
947 }
948 }
949 ```
950 ### DisableSecurityBypass
951 Prevent the user from bypassing security in certain cases.
952
953 `InvalidCertificate` prevents adding an exception when an invalid certificate is shown.
954
955 `SafeBrowsing` prevents selecting "ignore the risk" and visiting a harmful site anyway.
956
957 **Compatibility:** Firefox 60, Firefox ESR 60\
958 **CCK2 Equivalent:** N/A\
959 **Preferences Affected:** `security.certerror.hideAddException`,`browser.safebrowsing.allowOverride`
960
961 #### Windows
962 ```
963 Software\Policies\Mozilla\Firefox\DisableSecurityBypass\InvalidCertificate = 0x1 | 0x0
964 Software\Policies\Mozilla\Firefox\DisableSecurityBypass\SafeBrowsing = 0x1 | 0x0
965 ```
966 #### macOS
967 ```
968 <dict>
969 <key>DisableSecurityBypass</key>
970 <dict>
971 <key>InvalidCertificate</key>
972 <true/> | <false/>
973 <key><SafeBrowsing/key>
974 <true/> | <false/>
975 </dict>
976 </dict>
977 ```
978 #### JSON
979 ```
980 {
981 "policies": {
982 "DisableSecurityBypass": {
983 "InvalidCertificate": true false,
984 "SafeBrowsing": true false
985 }
986 }
987 }
988 ```
989 ### DisableSystemAddonUpdate
990 Prevent system add-ons from being installed or update.
991
992 **Compatibility:** Firefox 60, Firefox ESR 60\
993 **CCK2 Equivalent:** N/A\
994 **Preferences Affected:** N/A
995
996 #### Windows
997 ```Software\Policies\Mozilla\Firefox\DisableSystemAddonUpdate = 0x1 | 0x0
998 ```
999 #### macOS
1000 ```
1001 <dict>
1002 <key>DisableSystemAddonUpdate</key>
1003 <true/> | <false/>
1004 </dict>
1005 ```
1006 #### JSON
1007 ```
1008 {
1009 "policies": {
1010 "DisableSystemAddonUpdate": true | false
1011 }
1012 }
1013 ```
1014 ### DisableTelemetry
1015 Prevent the upload of telemetry data.
1016
1017 Mozilla recommends that you do not disable telemetry. Information collected through telemetry helps us build a better product for businesses like yours.
1018
1019 **Compatibility:** Firefox 60, Firefox ESR 60\
1020 **CCK2 Equivalent:** `disableTelemetry`\
1021 **Preferences Affected:** `datareporting.healthreport.uploadEnabled,datareporting.policy.dataSubmissionEnabled`
1022
1023 #### Windows
1024 ```
1025 Software\Policies\Mozilla\Firefox\DisableTelemetry = 0x1 | 0x0
1026 ```
1027 #### macOS
1028 ```
1029 <dict>
1030 <key>DisableTelemetry</key>
1031 <true/> | <false/>
1032 </dict>
1033 ```
1034 #### JSON
1035 ```
1036 {
1037 "policies": {
1038 "DisableTelemetry": true | false
1039 }
1040 }
1041 ```
1042 ### DisplayBookmarksToolbar
1043 Set the initial state of the bookmarks toolbar. A user can still hide it and it will stay hidden.
1044
1045 **Compatibility:** Firefox 60, Firefox ESR 60\
1046 **CCK2 Equivalent:** `displayBookmarksToolbar`\
1047 **Preferences Affected:** N/A
1048
1049 #### Windows
1050 ```
1051 Software\Policies\Mozilla\Firefox\DisplayBookmarksToolbar = 0x1 | 0x0
1052 ```
1053 #### macOS
1054 ```
1055 <dict>
1056 <key>DisplayBookmarksToolbar</key>
1057 <true/> | <false/>
1058 </dict>
1059 ```
1060 #### JSON
1061 ```
1062 {
1063 "policies": {
1064 "DisplayBookmarksToolbar": true | false
1065 }
1066 }
1067 ```
1068 ### DisplayMenuBar
1069 Set the initial state of the menubar. A user can still hide it and it will stay hidden.
1070
1071 **Compatibility:** Firefox 60, Firefox ESR 60 (Windows, some Linux)\
1072 **CCK2 Equivalent:** `displayMenuBar`\
1073 **Preferences Affected:** N/A
1074
1075 #### Windows
1076 ```
1077 Software\Policies\Mozilla\Firefox\DisplayMenuBar = 0x1 | 0x0
1078 ```
1079 #### macOS
1080 ```
1081 <dict>
1082 <key>DisplayMenuBar</key>
1083 <true/> | <false/>
1084 </dict>
1085 ```
1086 #### JSON
1087 ```
1088 {
1089 "policies": {
1090 "DisplayMenuBar": true | false
1091 }
1092 }
1093 ```
1094 ### DNSOverHTTPS
1095 Configure DNS over HTTPS.
1096
1097 `Enabled` determines whether DNS over HTTPS is enabled
1098
1099 `ProviderURL` is a URL to another provider.
1100
1101 `Locked` prevents the user from changing DNS over HTTPS preferences.
1102
1103 **Compatibility:** Firefox 63, Firefox ESR 68\
1104 **CCK2 Equivalent:** N/A\
1105 **Preferences Affected:** `network.trr.mode`,`network.trr.uri`
1106
1107 #### Windows
1108 ```
1109 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\Enabled = 0x1 | 0x0
1110 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\ProviderURL = "URL_TO_ALTERNATE_PROVIDER"
1111 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\Locked = 0x1 | 0x0
1112 ```
1113 #### macOS
1114 ```
1115 <dict>
1116 <key>DNSOverHTTPS</key>
1117 <dict>
1118 <key>Enabled</key>
1119 <true/> | <false/>
1120 <key>ProviderURL</key>
1121 <string>URL_TO_ALTERNATE_PROVIDER</string>
1122 <key>Locked</key>
1123 <true/> | <false/>
1124 </dict>
1125 </dict>
1126 ```
1127 #### JSON
1128 ```
1129 {
1130 "policies": {
1131 "DNSOverHTTPS": {
1132 "Enabled": true | false,
1133 "ProviderURL": "URL_TO_ALTERNATE_PROVIDER",
1134 "Locked": true | false
1135 }
1136 }
1137 }
1138 ```
1139 ### DontCheckDefaultBrowser
1140 Don't check if Firefox is the default browser at startup.
1141
1142 **Compatibility:** Firefox 60, Firefox ESR 60\
1143 **CCK2 Equivalent:** `dontCheckDefaultBrowser`\
1144 **Preferences Affected:** `browser.shell.checkDefaultBrowser`
1145
1146 #### Windows
1147 ```
1148 Software\Policies\Mozilla\Firefox\DontCheckDefaultBrowser = 0x1 | 0x0
1149 ```
1150 #### macOS
1151 ```
1152 <dict>
1153 <key>DontCheckDefaultBrowser</key>
1154 <true/> | <false/>
1155 </dict>
1156 ```
1157 #### JSON
1158 ```
1159 {
1160 "policies": {
1161 "DontCheckDefaultBrowser": true | false
1162 }
1163 }
1164 ```
1165 ### DefaultDownloadDirectory
1166 Set the default download directory.
1167
1168 You can use ${home} for the native home directory.
1169
1170 **Compatibility:** Firefox 68, Firefox ESR 68\
1171 **CCK2 Equivalent:** N/A\
1172 **Preferences Affected:** `browser.download.dir`,`browser.download.folderList`
1173
1174 #### Windows
1175 ```
1176 Software\Policies\Mozilla\Firefox\DefaultDownloadDirectory = "${home}\Downloads"
1177 ```
1178 #### macOS
1179 ```
1180 <dict>
1181 <key>DefaultDownloadDirectory</key>
1182 <string>${home}/Downloads</string>
1183 </dict>
1184 ```
1185 #### JSON (macOS and Linux)
1186 ```
1187 {
1188 "policies": {
1189 "DefaultDownloadDirectory": "${home}/Downloads"
1190 }
1191 ```
1192 #### JSON (Windows)
1193 ```
1194 {
1195 "policies": {
1196 "DefaultDownloadDirectory": "${home}\\Downloads"
1197 }
1198 ```
1199 ### DownloadDirectory
1200 Set and lock the download directory.
1201
1202 You can use ${home} for the native home directory.
1203
1204 **Compatibility:** Firefox 68, Firefox ESR 68\
1205 **CCK2 Equivalent:** N/A\
1206 **Preferences Affected:** `browser.download.dir`,`browser.download.folderList`,`browser.download.useDownloadDir`
1207
1208 #### Windows
1209 ```
1210 Software\Policies\Mozilla\Firefox\DownloadDirectory = "${home}\Downloads"
1211 ```
1212 #### macOS
1213 ```
1214 <dict>
1215 <key>DownloadDirectory</key>
1216 <string>${home}/Downloads</string>
1217 </dict>
1218 ```
1219 #### JSON (macOS and Linux)
1220 ```
1221 {
1222 "policies": {
1223 "DownloadDirectory": "${home}/Downloads"
1224 }
1225 ```
1226 #### JSON (Windows)
1227 ```
1228 {
1229 "policies": {
1230 "DownloadDirectory": "${home}\\Downloads"
1231 }
1232 ```
1233 ### EnableTrackingProtection
1234 Configure tracking protection.
1235
1236 If this policy is not configured, tracking protection is not enabled by default in the browser, but it is enabled by default in private browsing and the user can change it.
1237
1238 If `Value` is set to false, tracking protection is disabled and locked in both the regular browser and private browsing.
1239
1240 If `Value` is set to true, tracking protection is enabled by default in both the regular browser and private browsing and the `Locked` value determines whether or not a user can change it.
1241
1242 **Compatibility:** Firefox 60, Firefox ESR 60\
1243 **CCK2 Equivalent:** `dontCheckDefaultBrowser`\
1244 **Preferences Affected:** `privacy.trackingprotection.enabled`,`privacy.trackingprotection.pbmode.enabled`
1245
1246 #### Windows
1247 ```
1248 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Value = 0x1 | 0x0
1249 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Locked = 0x1 | 0x0
1250 ```
1251 #### macOS
1252 ```
1253 <dict>
1254 <key>EnableTrackingProtection</key>
1255 <dict>
1256 <key>Value</key>
1257 <true/> | <false/>
1258
1259 <key><Locked/key>
1260 <true/> | <false/>
1261 </dict>
1262 </dict>
1263 ```
1264 #### JSON
1265 ```
1266 {
1267 "policies": {
1268 "EnableTrackingProtection": {
1269 "Value": [true, false],
1270 "Locked": [true, false]
1271 }
1272 }
1273 ```
1274 ### EnterprisePoliciesEnabled
1275 Enable policy support on macOS.
1276
1277 **Compatibility:** Firefox 63, Firefox ESR 60.3 (macOS only)\
1278 **CCK2 Equivalent:** N/A\
1279 **Preferences Affected:** N/A
1280
1281 #### macOS
1282 ```
1283 <dict>
1284 <key>EnterprisePoliciesEnabled</key>
1285 <true/>
1286 </dict>
1287 ```
1288 ### Extensions
1289 Control the installation, uninstallation and locking of extensions.
1290
1291 `Install` is a list of URLs or native paths for extensions to be installed.
1292
1293 `Uninstall` is a list of extension IDs that should be uninstalled if found.
1294
1295 `Locked` is a list of extension IDs that the user cannot disable or uninstall.
1296
1297 **Compatibility:** Firefox 60, Firefox ESR 60\
1298 **CCK2 Equivalent:** `addons`\
1299 **Preferences Affected:** N/A
1300
1301 #### Windows
1302 ```
1303 Software\Policies\Mozilla\Firefox\Extensions\Install\1 = "https://addons.mozilla.org/firefox/downloads/somefile.xpi"
1304 Software\Policies\Mozilla\Firefox\Extensions\Install\2 = "//path/to/xpi"
1305 Software\Policies\Mozilla\Firefox\Extensions\Uninstall\1 = "bad_addon_id@mozilla.org"
1306 Software\Policies\Mozilla\Firefox\Extensions\Locked\1 = "addon_id@mozilla.org"
1307 ```
1308 #### macOS
1309 ```
1310 <dict>
1311 <key>Extensions</key>
1312 <dict>
1313 <key>Install</key>
1314 <array>
1315 <string>https://addons.mozilla.org/firefox/downloads/somefile.xpi</string>
1316 <string>//path/to/xpi</string>
1317 </array>
1318 <key>Uninstall</key>
1319 <array>
1320 <string>bad_addon_id@mozilla.org</string>
1321 </array>
1322 <key>Locked</key>
1323 <array>
1324 <string>addon_id@mozilla.org</string>
1325 </array>
1326 </dict>
1327 </dict>
1328 ```
1329 #### JSON
1330
1331
1332 ```
1333 {
1334 "policies": {
1335 "Extensions": {
1336 "Install": ["https://addons.mozilla.org/firefox/downloads/somefile.xpi", "//path/to/xpi"],
1337 "Uninstall": ["bad_addon_id@mozilla.org"],
1338 "Locked": ["addon_id@mozilla.org"]
1339 }
1340 }
1341 }
1342 ```
1343 ### ExtensionSettings
1344 Manage all aspects of extensions. This policy is based heavily on the [Chrome policy](https://dev.chromium.org/administrators/policy-list-3/extension-settings-full) of the same name.
1345
1346 This policy maps an extension ID to its configuration. With an extension ID, the configuration will be applied to the specified extension only. A default configuration can be set for the special ID "*", which will apply to all extensions that don't have a custom configuration set in this policy.
1347
1348 To obtain an extension ID, install the extension and go to about:support. You will see the ID in the Extensions section.
1349
1350 The configuration for each extension is another dictionary that can contain the fields documented below.
1351
1352 | Name | Description |
1353 | --- | --- |
1354 | `installation_mode` | Maps to a string indicating the installation mode for the extension. The valid strings are `allowed`,`blocked`,`force_installed`, and `normal_installed`.
1355 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`allowed` | Allows the extension to be installed by the user. This is the default behavior.
1356 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`blocked`| Blocks installation of the extension and removes it from the device if already installed.
1357 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`force_installed`| The extension is automatically installed and can't be removed by the user. This option is not valid for the default configuration and requires an install_url.
1358 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`normal_installed`| The extension is automatically installed but can be disabled by the user. This option is not valid for the default configuration and requires an install_url.
1359 | `install_url`| Maps to a URL indicating where Firefox can download a force_installed or normal_installed extension. If installing from the addons.mozilla.org, use the following URL (substituting SHORT_NAME from the URL on AMO), https://addons.mozilla.org/firefox/downloads/latest/SHORT_NAME/latest.xpi. If installing frmo the local file system, use a file:/// URL.
1360 | `install_sources` | Each item in this list is an extension-style match pattern. Users will be able to easily install items from any URL that matches an item in this list. Both the location of the *.xpi file and the page where the download is started from (i.e. the referrer) must be allowed by these patterns. This setting can be used only for the default configuration.
1361 | `allowed_types` | This setting whitelists the allowed types of extension/apps that can be installed in Firefox. The value is a list of strings, each of which should be one of the following: "extension", "theme", "dictionary", "langpack" This setting can be used only for the default configuration.
1362 | `blocked_install_message` | This maps to a string specifying the error message to display to users if they're blocked from installing an extension. This setting allows you to append text to the generic error message displayed when the extension is blocked. This could be be used to direct users to your help desk, explain why a particular extension is blocked, or something else.
1363
1364 **Compatibility:** Firefox 69, Firefox ESR 68.1\
1365 **CCK2 Equivalent:** N/A\
1366 **Preferences Affected:** N/A
1367
1368 #### Windows
1369 ```
1370 Software\Policies\Mozilla\Firefox\ExtensionSettings (REG_MULTI_SZ) = '{"*": {"installation_mode": "blocked"}}'
1371 ```
1372 #### macOS
1373 ```
1374 <dict>
1375 <key>ExtensionSettings</key>
1376 <dict>
1377 <key>*</key>
1378 <dict>
1379 <key>blocked_install_message</key>
1380 <string>Custom error message.</string>
1381 <key>install_sources</key>
1382 <array>
1383 <string>https://addons.mozilla.org/</string>
1384 </array>
1385 <key>installation_mode</key>
1386 <string>blocked</string>
1387 </dict>
1388 <key>uBlock0@raymondhill.net</key>
1389 <dict>
1390 <key>installation_mode</key>
1391 <string>force_installed</string>
1392 <key>install_url</key>
1393 <string>https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi</string>
1394 </dict>
1395 </dict>
1396 </dict>
1397 ```
1398 #### JSON
1399 ```
1400 {
1401 "policies": {
1402 "ExtensionSettings": {
1403 "*": {
1404 "blocked_install_message": "Custom error message.",
1405 "install_sources": ["https://addons.mozilla.org/"],
1406 "installation_mode": "blocked"
1407 },
1408 "uBlock0@raymondhill.net": {
1409 "installation_mode": "force_installed",
1410 "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
1411 }
1412 }
1413 }
1414 }
1415 ```
1416 ### ExtensionUpdate
1417 Control extension updates.
1418
1419 **Compatibility:** Firefox 67, Firefox ESR 60.7\
1420 **CCK2 Equivalent:** N/A\
1421 **Preferences Affected:** `extensions.update.enabled`
1422
1423 #### Windows
1424 ```
1425 Software\Policies\Mozilla\Firefox\ExtensionUpdate = 0x1 | 0x0
1426 ```
1427 #### macOS
1428 ```
1429 <dict>
1430 <key>ExtensionUpdate</key>
1431 <true/> | <false/>
1432 </dict>
1433 ```
1434 #### JSON
1435 ```
1436 {
1437 "policies": {
1438 "ExtensionUpdate": true | false
1439 }
1440 }
1441 ```
1442 ### FlashPlugin
1443 Configure the default Flash plugin policy as well as origins for which Flash is allowed.
1444
1445 `Allow` is a list of origins where Flash are allowed.
1446
1447 `Block` is a list of origins where Flash is not allowed.
1448
1449 `Default` determines whether or not Flash is allowed by default.
1450
1451 `Locked` prevents the user from changing Flash preferences.
1452
1453 **Compatibility:** Firefox 60, Firefox ESR 60\
1454 **CCK2 Equivalent:** `permissions.plugin`\
1455 **Preferences Affected:** `plugin.state.flash`
1456
1457 #### Windows
1458 ```
1459 Software\Policies\Mozilla\Firefox\FlashPlugin\Allow\1 = "https://example.org"
1460 Software\Policies\Mozilla\Firefox\FlashPlugin\Block\1 = "https://example.edu"
1461 Software\Policies\Mozilla\Firefox\FlashPlugin\Default = 0x1 | 0x0
1462 Software\Policies\Mozilla\Firefox\FlashPlugin\Locked = 0x1 | 0x0
1463 ```
1464 #### macOS
1465 ```
1466 <dict>
1467 <key>FlashPlugin</key>
1468 <dict>
1469 <key>Allow</key>
1470 <array>
1471 <string>http://example.org</string>
1472 </array>
1473 <key>Block</key>
1474 <array>
1475 <string>http://example.edu</string>
1476 </array>
1477 <key>Default</key>
1478 <true/> | <false/>
1479 <key>Locked</key>
1480 <true/> | <false/>
1481 </dict>
1482 </dict>
1483 ```
1484 #### JSON
1485 ```
1486 {
1487 "policies": {
1488 "FlashPlugin": {
1489 "Allow": ["http://example.org/"],
1490 "Block": ["http://example.edu/"],
1491 "Default": true | false,
1492 "Locked": true | false
1493 }
1494 }
1495 }
1496 ```
1497 ### FirefoxHome
1498 Customize the Firefox Home page.
1499
1500 **Compatibility:** Firefox 68, Firefox ESR 68\
1501 **CCK2 Equivalent:** N/A\
1502 **Preferences Affected:** `browser.newtabpage.activity-stream.showSearch`,`browser.newtabpage.activity-stream.feeds.topsites`,`browser.newtabpage.activity-stream.feeds.section.highlights`,`browser.newtabpage.activity-stream.feeds.section.topstories`,`browser.newtabpage.activity-stream.feeds.snippets`
1503
1504 #### Windows
1505 ```
1506 Software\Policies\Mozilla\Firefox\FirefoxHome\Search = 0x1 | 0x0
1507 Software\Policies\Mozilla\Firefox\FirefoxHome\TopSites = 0x1 | 0x0
1508 Software\Policies\Mozilla\Firefox\FirefoxHome\Highlights = 0x1 | 0x0
1509 Software\Policies\Mozilla\Firefox\FirefoxHome\Pocket = 0x1 | 0x0
1510 Software\Policies\Mozilla\Firefox\FirefoxHome\Snippets = 0x1 | 0x0
1511 Software\Policies\Mozilla\Firefox\FirefoxHome\Locked = 0x1 | 0x0
1512 ```
1513 #### macOS
1514 ```
1515 <dict>
1516 <key>FirefoxHome</key>
1517 <dict>
1518 <key>Search</key>
1519 <true/> | <false/>
1520 <key>TopSites</key>
1521 <true/> | <false/>
1522 <key>Highlights</key>
1523 <true/> | <false/>
1524 <key>Pocket</key>
1525 <true/> | <false/>
1526 <key>Snippets</key>
1527 <true/> | <false/>
1528 <key>Locked</key>
1529 <true/> | <false/>
1530 </dict>
1531 </dict>
1532 ```
1533 #### JSON
1534 ```
1535 {
1536 "policies": {
1537 "FirefoxHome": {
1538 "Search": true | false,
1539 "TopSites": true | false,
1540 "Highlights": true | false,
1541 "Pocket": true | false,
1542 "Snippets": true | false,
1543 "Locked": true | false
1544 }
1545 }
1546 }
1547 ```
1548 ### HardwareAcceleration
1549 Control hardware acceleration.
1550
1551 **Compatibility:** Firefox 60, Firefox ESR 60\
1552 **CCK2 Equivalent:** N/A\
1553 **Preferences Affected:** `layers.acceleration.disabled`
1554
1555 #### Windows
1556 ```
1557 Software\Policies\Mozilla\Firefox\HardwareAcceleration = 0x1 | 0x0
1558 ```
1559 #### macOS
1560 ```
1561 <dict>
1562 <key>HardwareAcceleration</key>
1563 <true/> | <false/>
1564 </dict>
1565 ```
1566 #### JSON
1567 ```
1568 {
1569 "policies": {
1570 "HardwareAcceleration": true | false
1571 }
1572 }
1573 ```
1574 ### Homepage
1575 Configure the default homepage and how Firefox starts.
1576
1577 `URL` is the default homepage.
1578
1579 `Locked` prevents the user from changing homepage preferences.
1580
1581 `Additional` allows for more than one homepage.
1582
1583 `StartPage` is how Firefox starts. The choices are no homepage, the default homepage or the previous session.
1584
1585 **Compatibility:** Firefox 60, Firefox ESR 60 (StartPage was added in Firefox 60, Firefox ESR 60.4)\
1586 **CCK2 Equivalent:** `homePage`,`lockHomePage`\
1587 **Preferences Affected:** `browser.startup.homepage`,`browser.startup.page`
1588
1589 #### Windows
1590 ```
1591 Software\Policies\Mozilla\Firefox\Homepage\URL = "https://example.com"
1592 Software\Policies\Mozilla\Firefox\Homepage\Locked = 0x1 | 0x0
1593 Software\Policies\Mozilla\Firefox\Homepage\Additional\1 = "https://example.org"
1594 Software\Policies\Mozilla\Firefox\Homepage\Additional\2 = "https://example.edu"
1595 Software\Policies\Mozilla\Firefox\Homepage\StartPage = "none" | "homepage" | "previous-session"
1596 ```
1597 #### macOS
1598 ```
1599 <dict>
1600 <key>Homepage</key>
1601 <dict>
1602 <key>URL</key>
1603 <string>http://example.com</string>
1604 <key>Locked</key>
1605 <true/> | <false/>
1606 <key>Additional</key>
1607 <array>
1608 <string>http://example.org</string>
1609 <string>http://example.edu</string>
1610 </array>
1611 <key>StartPage</key>
1612 <string>always | never | from-visited</string>
1613 </dict>
1614 </dict>
1615 ```
1616 #### JSON
1617 ```
1618 {
1619 "policies": {
1620 "Homepage": {
1621 "URL": "http://example.com/",
1622 "Locked": true | false,
1623 "Additional": ["http://example.org/",
1624 "http://example.edu/"],
1625 "StartPage": "none" | "homepage" | "previous-session"
1626 }
1627 }
1628 }
1629 ```
1630 ### InstallAddonsPermission
1631 Configure the default extension install policy as well as origins for extension installs are allowed. This policy does not override turning off all extension installs.
1632
1633 `Allow` is a list of origins where extension installs are allowed.
1634
1635 `Default` determines whether or not extension installs are allowed by default.
1636
1637 **Compatibility:** Firefox 60, Firefox ESR 60\
1638 **CCK2 Equivalent:** `permissions.install`\
1639 **Preferences Affected:** `xpinstall.enabled`
1640
1641 #### Windows
1642 ```
1643 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Allow\1 = "https://example.org"
1644 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Allow\2 = "https://example.edu"
1645 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Default = 0x1 | 0x0
1646 ```
1647 #### macOS
1648 ```
1649 <dict>
1650 <key>InstallAddonsPermission</key>
1651 <dict>
1652 <key>Allow</key>
1653 <array>
1654 <string>http://example.org</string>
1655 <string>http://example.edu</string>
1656 </array>
1657 <key>Default</key>
1658 <true/> | <false/>
1659 </dict>
1660 </dict>
1661 ```
1662 #### JSON
1663 ```
1664 {
1665 "policies": {
1666 "InstallAddonsPermission": {
1667 "Allow": ["http://example.org/",
1668 "http://example.edu/"],
1669 "Default": true | false
1670 }
1671 }
1672 }
1673 ```
1674 ### LocalFileLinks
1675 Enable linking to local files by origin.
1676
1677 **Compatibility:** Firefox 68, Firefox ESR 68\
1678 **CCK2 Equivalent:** N/A\
1679 **Preferences Affected:** `capability.policy.localfilelinks.*`
1680
1681 #### Windows
1682 ```
1683 Software\Policies\Mozilla\Firefox\LocalFileLinks\1 = "https://example.org"
1684 Software\Policies\Mozilla\Firefox\LocalFileLinks\2 = "https://example.edu"
1685 ```
1686 #### macOS
1687 ```
1688 <dict>
1689 <key>LocalFileLinks</key>
1690 <array>
1691 <string>http://example.org</string>
1692 <string>http://example.edu</string>
1693 </array>
1694 </dict>
1695 ```
1696 #### JSON
1697 ```
1698 {
1699 "policies": {
1700 "LocalFileLinks": ["http://example.org/",
1701 "http://example.edu/"]
1702 }
1703 }
1704 ```
1705 ### NoDefaultBookmarks
1706 Disable the creation of default bookmarks.
1707
1708 This policy is only effective if the user profile has not been created yet.
1709
1710 **Compatibility:** Firefox 60, Firefox ESR 60\
1711 **CCK2 Equivalent:** `removeDefaultBookmarks`\
1712 **Preferences Affected:** N/A
1713
1714 #### Windows
1715 ```
1716 Software\Policies\Mozilla\Firefox\NoDefaultBookmarks = 0x1 | 0x0
1717 ```
1718 #### macOS
1719 ```
1720 <dict>
1721 <key>NoDefaultBookmarks</key>
1722 <true/> | <false/>
1723 </dict>
1724 ```
1725 #### JSON
1726 ```
1727 {
1728 "policies": {
1729 "NoDefaultBookmarks": true | false
1730 }
1731 }
1732 ```
1733 ### NetworkPrediction
1734 Enable or disable network prediction (DNS prefetching).
1735
1736 **Compatibility:** Firefox 67, Firefox ESR 60.7\
1737 **CCK2 Equivalent:** N/A\
1738 **Preferences Affected:** `network.dns.disablePrefetch`,`network.dns.disablePrefetchFromHTTPS`
1739
1740 #### Windows
1741 ```
1742 Software\Policies\Mozilla\Firefox\NetworkPrediction = 0x1 | 0x0
1743 ```
1744 #### macOS
1745 ```
1746 <dict>
1747 <key>NetworkPrediction</key>
1748 <true/> | <false/>
1749 </dict>
1750 ```
1751 #### JSON
1752 ```
1753 {
1754 "policies": {
1755 "NetworkPrediction": true | false
1756 }
1757 ```
1758 ### NewTabPage
1759 Enable or disable the New Tab page.
1760
1761 **Compatibility:** Firefox 68, Firefox ESR 68\
1762 **CCK2 Equivalent:** N/A\
1763 **Preferences Affected:** `browser.newtabpage.enabled`
1764
1765 #### Windows
1766 ```
1767 Software\Policies\Mozilla\Firefox\NewTabPage = 0x1 | 0x0
1768 ```
1769 #### macOS
1770 ```
1771 <dict>
1772 <key>NewTabPage</key>
1773 <true/> | <false/>
1774 </dict>
1775 ```
1776 #### JSON
1777 ```
1778 {
1779 "policies": {
1780 "NewTabPage": true | false
1781 }
1782 ```
1783 ### OfferToSaveLogins
1784 Control whether or not Firefox offers to save passwords.
1785
1786 **Compatibility:** Firefox 60, Firefox ESR 60\
1787 **CCK2 Equivalent:** `dontRememberPasswords`\
1788 **Preferences Affected:** `signon.rememberSignons`
1789
1790 #### Windows
1791 ```
1792 Software\Policies\Mozilla\Firefox\OfferToSaveLogins = 0x1 | 0x0
1793 ```
1794 #### macOS
1795 ```
1796 <dict>
1797 <key>OfferToSaveLogins</key>
1798 <true/> | <false/>
1799 </dict>
1800 ```
1801 #### JSON
1802 ```
1803 {
1804 "policies": {
1805 "OfferToSaveLogins": true | false
1806 }
1807 }
1808 ```
1809 ### OverrideFirstRunPage
1810 Override the first run page. If the value is blank, no first run page is displayed.
1811
1812 **Compatibility:** Firefox 60, Firefox ESR 60\
1813 **CCK2 Equivalent:** `welcomePage`,`noWelcomePage`\
1814 **Preferences Affected:** `startup.homepage_welcome_url`
1815
1816 #### Windows
1817 ```
1818 Software\Policies\Mozilla\Firefox\OverrideFirstRunPage = "http://example.org"
1819 ```
1820 #### macOS
1821 ```
1822 <dict>
1823 <key>OverrideFirstRunPage</key>
1824 <string>http://example.org</string>
1825 </dict>
1826 ```
1827 #### JSON
1828 ```
1829 {
1830 "policies": {
1831 "OverrideFirstRunPage": "http://example.org"
1832 }
1833 ```
1834 ### OverridePostUpdatePage
1835 Override the upgrade page. If the value is blank, no upgrade page is displayed.
1836
1837 **Compatibility:** Firefox 60, Firefox ESR 60\
1838 **CCK2 Equivalent:** `upgradePage`,`noUpgradePage`\
1839 **Preferences Affected:** `startup.homepage_override_url`
1840
1841 #### Windows
1842 ```
1843 Software\Policies\Mozilla\Firefox\OverridePostUpdatePage = "http://example.org"
1844 ```
1845 #### macOS
1846 ```
1847 <dict>
1848 <key>OverridePostUpdatePage</key>
1849 <string>http://example.org</string>
1850 </dict>
1851 ```
1852 #### JSON
1853 ```
1854 {
1855 "policies": {
1856 "OverridePostUpdatePage": "http://example.org"
1857 }
1858 ```
1859 ### Permissions
1860 Set permissions associated with camera, microphone, location, and notifications
1861
1862 `Allow` is a list of origins where the feature is allowed.
1863
1864 `Block` is a list of origins where the feature is not allowed.
1865
1866 `BlockNewRequests` determines whether or not new requests can be made for the feature.
1867
1868 `Locked` prevents the user from changing preferences for the feature.
1869
1870 **Compatibility:** Firefox 62, Firefox ESR 60.2\
1871 **CCK2 Equivalent:** N/A\
1872 **Preferences Affected:** `permissions.default.camera`,`permissions.default.microphone`,`permissions.default.geo`,`permissions.default.desktop-notification`
1873
1874 #### Windows
1875 ```
1876 Software\Policies\Mozilla\Firefox\Permissions\Camera\Allow\1 = "https://example.org"
1877 Software\Policies\Mozilla\Firefox\Permissions\Camera\Block\1 = "https://example.edu"
1878 Software\Policies\Mozilla\Firefox\Permissions\Camera\BlockNewRequests = 0x1 | 0x0
1879 Software\Policies\Mozilla\Firefox\Permissions\Camera\Locked = 0x1 | 0x0
1880 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Allow\1 = "https://example.org"
1881 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Block\1 = "https://example.edu"
1882 Software\Policies\Mozilla\Firefox\Permissions\Microphone\BlockNewRequests = 0x1 | 0x0
1883 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Locked = 0x1 | 0x0
1884 Software\Policies\Mozilla\Firefox\Permissions\Location\Allow\1 = "https://example.org"
1885 Software\Policies\Mozilla\Firefox\Permissions\Location\Block\1 = "https://example.edu"
1886 Software\Policies\Mozilla\Firefox\Permissions\Location\BlockNewRequests = 0x1 | 0x0
1887 Software\Policies\Mozilla\Firefox\Permissions\Location\Locked = 0x1 | 0x0
1888 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Allow\1 = "https://example.org"
1889 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Block\1 = "https://example.edu"
1890 Software\Policies\Mozilla\Firefox\Permissions\Notifications\BlockNewRequests = 0x1 | 0x0
1891 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Locked = 0x1 | 0x0
1892 ```
1893 #### macOS
1894 ```
1895 <dict>
1896 <key>Permissions</key>
1897 <dict>
1898 <key>Camera</key>
1899 <dict>
1900 <key>Allow</key>
1901 <array>
1902 <string>https://example.org</string>
1903 </array>
1904 <key>Block</key>
1905 <array>
1906 <string>https://example.edu</string>
1907 </array>
1908 <key>BlockNewRequests</key>
1909 <true/>
1910 <key>Locked</key>
1911 <true/>
1912 </dict>
1913 <key>Microphone</key>
1914 <dict>
1915 <key>Allow</key>
1916 <array>
1917 <string>https://example.org</string>
1918 </array>
1919 <key>Block</key>
1920 <array>
1921 <string>https://example.edu</string>
1922 </array>
1923 <key>BlockNewRequests</key>
1924 <true/>
1925 <key>Locked</key>
1926 <true/>
1927 </dict>
1928 <key>Location</key>
1929 <dict>
1930 <key>Allow</key>
1931 <array>
1932 <string>https://example.org</string>
1933 </array>
1934 <key>Block</key>
1935 <array>
1936 <string>https://example.edu</string>
1937 </array>
1938 <key>BlockNewRequests</key>
1939 <true/>
1940 <key>Locked</key>
1941 <true/>
1942 </dict>
1943 <key>Notifications</key>
1944 <dict>
1945 <key>Allow</key>
1946 <array>
1947 <string>https://example.org</string>
1948 </array>
1949 <key>Block</key>
1950 <array>
1951 <string>https://example.edu</string>
1952 </array>
1953 <key>BlockNewRequests</key>
1954 <true/>
1955 <key>Locked</key>
1956 <true/>
1957 </dict>
1958 </dict>
1959 </dict>
1960 ```
1961 #### JSON
1962 ```
1963 {
1964 "policies": {
1965 "Permissions": {
1966 "Camera": {
1967 "Allow": ["https://example.org"],
1968 "Block": ["https://example.edu"],
1969 "BlockNewRequests": true | false,
1970 "Locked": true | false
1971 },
1972 "Microphone": {
1973 "Allow": ["https://example.org"],
1974 "Block": ["https://example.edu"],
1975 "BlockNewRequests": true | false,
1976 "Locked": true | false
1977 },
1978 "Location": {
1979 "Allow": ["https://example.org"],
1980 "Block": ["https://example.edu"],
1981 "BlockNewRequests": true | false,
1982 "Locked": true | false
1983 },
1984 "Notifications": {
1985 "Allow": ["https://example.org"],
1986 "Block": ["https://example.edu"],
1987 "BlockNewRequests": true | false,
1988 "Locked": true | false
1989 }
1990 }
1991 }
1992 }
1993 ```
1994 ### PopupBlocking
1995 Configure the default pop-up window policy as well as origins for which pop-up windows are allowed.
1996
1997 `Allow` is a list of origins where popup-windows are allowed.
1998
1999 `Default` determines whether or not pop-up windows are allowed by default.
2000
2001 `Locked` prevents the user from changing pop-up preferences.
2002
2003 **Compatibility:** Firefox 60, Firefox ESR 60\
2004 **CCK2 Equivalent:** `permissions.popup`\
2005 **Preferences Affected:** `dom.disable_open_during_load`
2006
2007 #### Windows
2008 ```
2009 Software\Policies\Mozilla\Firefox\PopupBlocking\Allow\1 = "https://example.org"
2010 Software\Policies\Mozilla\Firefox\PopupBlocking\Allow\2 = "https://example.edu"
2011 Software\Policies\Mozilla\Firefox\PopupBlocking\Default = 0x1 | 0x0
2012 Software\Policies\Mozilla\Firefox\PopupBlocking\Locked = 0x1 | 0x0
2013 ```
2014 #### macOS
2015 ```
2016 <dict>
2017 <key>PopupBlocking</key>
2018 <dict>
2019 <key>Allow</key>
2020 <array>
2021 <string>http://example.org</string>
2022 <string>http://example.edu</string>
2023 </array>
2024 <key>Default</key>
2025 <true/> | <false/>
2026 <key>Locked</key>
2027 <true/> | <false/>
2028 </dict>
2029 </dict>
2030 ```
2031 #### JSON
2032 ```
2033 {
2034 "policies": {
2035 "PopupBlocking": {
2036 "Allow": ["http://example.org/",
2037 "http://example.edu/"],
2038 "Default": true | false,
2039 "Locked": true | false
2040 }
2041 }
2042 }
2043 ```
2044 ### Preferences
2045 Set and lock certain preferences.
2046
2047 **Compatibility:** See below\
2048 **CCK2 Equivalent:** `preferences`\
2049 **Preferences Affected:** See below
2050
2051 | Preference | Type | Compatibility | Default
2052 | --- | --- | --- | ---
2053 | app.update.auto | boolean | Firefox 68, Firefox 68 ESR | true
2054 | &nbsp;&nbsp;&nbsp;&nbsp;If false, Firefox doesn't automatically install update.
2055 | browser.cache.disk.enable | boolean | Firefox 68, Firefox 68 ESR | true
2056 | &nbsp;&nbsp;&nbsp;&nbsp;If false, don't store cache on the hard drive.
2057 | browser.cache.disk.parent_directory | string | Firefox 68, Firefox 68 ESR | Profile temporary directory
2058 | &nbsp;&nbsp;&nbsp;&nbsp;If set, changes the location of the disk cache.
2059 | browser.fixup.dns_first_for_single_words | boolean | Firefox 68, Firefox 68 ESR | false
2060 | &nbsp;&nbsp;&nbsp;&nbsp;If true, single words are sent to DNS, not directly to search.
2061 | browser.search.update | boolean | Firefox 68, Firefox 68 ESR | true
2062 | &nbsp;&nbsp;&nbsp;&nbsp;If false, updates for search engines are not checked.
2063 | browser.tabs.warnOnClose | boolean | Firefox 68, Firefox 68 ESR | true
2064 | &nbsp;&nbsp;&nbsp;&nbsp;If false, there is no warning when the browser is closed.
2065 | browser.urlbar.suggest.bookmark | boolean | Firefox 68, Firefox 68 ESR | true
2066 | &nbsp;&nbsp;&nbsp;&nbsp;If false, bookmarks aren't suggested when typing in the URL bar.
2067 | browser.urlbar.suggest.history | boolean | Firefox 68, Firefox 68 ESR | true
2068 | &nbsp;&nbsp;&nbsp;&nbsp;If false, history isn't suggested when typing in the URL bar.
2069 | browser.urlbar.suggest.openpage | boolean | Firefox 68, Firefox 68 ESR | true
2070 | &nbsp;&nbsp;&nbsp;&nbsp;If false, open tabs aren't suggested when typing in the URL bar.
2071 | datareporting.policy.dataSubmissionPolicyBypassNotification | boolean | Firefox 68, Firefox 68 ESR | false
2072 | &nbsp;&nbsp;&nbsp;&nbsp;If true, don't show the privacy policy tab on first run.
2073 | dom.disable_window_flip | boolean | Firefox 68, Firefox 68 ESR | true
2074 | &nbsp;&nbsp;&nbsp;&nbsp;If false, web pages can focus and activate windows.
2075 | dom.disable_window_move_resize | boolean | Firefox 68, Firefox 68 ESR | false
2076 | &nbsp;&nbsp;&nbsp;&nbsp;If true, web pages can't move or resize windows.
2077 | dom.event.contextmenu.enabled | boolean | Firefox 68, Firefox 68 ESR | true
2078 | &nbsp;&nbsp;&nbsp;&nbsp;If false, web pages can't override context menus.
2079 | dom.keyboardevent.keypress.hack.dispatch_non_printable_keys.addl | string | Firefox 68, Firefox 68 ESR | N/A
2080 | &nbsp;&nbsp;&nbsp;&nbsp;See https://support.mozilla.org/en-US/kb/dom-events-changes-introduced-firefox-66
2081 | dom.keyboardevent.keypress.hack.use_legacy_keycode_and_charcode.addl | string | Firefox 68, Firefox 68 ESR | N/A
2082 | &nbsp;&nbsp;&nbsp;&nbsp;See https://support.mozilla.org/en-US/kb/dom-events-changes-introduced-firefox-66
2083 | extensions.getAddons.showPane | boolean | Firefox 68, Firefox 68 ESR | N/A
2084 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the Recommendations tab is not displayed in the Add-ons Manager.
2085 | media.gmp-gmpopenh264.enabled | boolean | Firefox 68, Firefox 68 ESR | true
2086 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the OpenH264 plugin is not downloaded.
2087 | media.gmp-widevinecdm.enabled | boolean | Firefox 68, Firefox 68 ESR | true
2088 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the Widevine plugin is not downloaded.
2089 | network.dns.disableIPv6 | boolean | Firefox 68, Firefox 68 ESR | false
2090 | &nbsp;&nbsp;&nbsp;&nbsp;If true, IPv6 DNS lokoups are disabled.
2091 | network.IDN_show_punycode | boolean | Firefox 68, Firefox 68 ESR | false
2092 | &nbsp;&nbsp;&nbsp;&nbsp;If true, display the punycode version of internationalized domain names.
2093 | places.history.enabled | boolean | Firefox 68, Firefox 68 ESR | true
2094 | &nbsp;&nbsp;&nbsp;&nbsp;If false, history is not enabled.
2095 | security.default_personal_cert | string | Firefox 68, Firefox 68 ESR | Ask Every Time
2096 | &nbsp;&nbsp;&nbsp;&nbsp;If set to Select Automatically, Firefox automatically chooses the default personal certificate.
2097 | security.ssl.errorReporting.enabled | boolean | Firefox 68, Firefox 68 ESR | true
2098 | &nbsp;&nbsp;&nbsp;&nbsp;If false, SSL errors cannot be sent to Mozilla.
2099 | ui.key.menuAccessKeyFocuses | boolean | Firefox 68, Firefox 68 ESR | true
2100 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the Alt key doesn't show the menubar on Windows.
2101 #### Windows
2102 ```
2103 Software\Policies\Mozilla\Firefox\Preferences\boolean_preference_name = 0x1 | 0x0
2104 Software\Policies\Mozilla\Firefox\Preferences\string_preference_name = "string_value"
2105 ```
2106 #### macOS
2107 ```
2108 <dict>
2109 <key>Preferences</key>
2110 <dict>
2111 <key>boolean_preference_name</key>
2112 <true/> | <false/>
2113 <key>string_preference_name</key>
2114 <string>string_value</string>
2115 </dict>
2116 </dict>
2117 ```
2118 #### JSON
2119 ```
2120 {
2121 "policies": {
2122 "Preferences": {
2123 "boolean_preference_name": true | false,
2124 "string_preference_name": "string_value"
2125 }
2126 }
2127 }
2128 ```
2129 ### PromptForDownloadLocation
2130 Ask where to save each file before downloading.
2131
2132 **Compatibility:** Firefox 68, Firefox ESR 68\
2133 **CCK2 Equivalent:** N/A
2134 **Preferences Affected:** `browser.download.useDownloadDir`
2135
2136 #### Windows
2137 ```
2138 Software\Policies\Mozilla\Firefox\PromptForDownloadLocation = 0x1 | 0x0
2139 ```
2140 #### macOS
2141 ```
2142 <dict>
2143 <key>PromptForDownloadLocation</key>
2144 <true/> | <false/>
2145 </dict>
2146 ```
2147 #### JSON
2148 ```
2149 {
2150 "policies": {
2151 "PromptForDownloadLocation": true | false
2152 }
2153 }
2154 ```
2155 ### Proxy
2156 Configure proxy settings. These settings correspond to the connection settings in Firefox preferences.
2157 To specify ports, append them to the hostnames with a colon (:).
2158
2159 `Mode` is the proxy method being used.
2160
2161 `Locked` is whether or not proxy settings can be changed.
2162
2163 `HTTPProxy` is the HTTP proxy server.
2164
2165 `UseHTTPProxyForAllProtocols` is whether or not the HTTP proxy should be used for all other proxies.
2166
2167 `SSLProxy` is the SSL proxy server.
2168
2169 `FTPProxy` is the FTP proxy server.
2170
2171 `SOCKSProxy` is the SOCKS proxy server
2172
2173 `SOCKSVersion` is the SOCKS version (4 or 5)
2174
2175 `Passthrough` is list of hostnames or IP addresses that will not be proxied. Use `<local>` to bypass proxying for all hostnames which do not contain periods.
2176
2177 `AutoConfigURL` is a URL for proxy configuration (only used if Mode is autoConfig).
2178
2179 `AutoLogin` means do not prompt for authentication if password is saved.
2180
2181 `UseProxyForDNS` to use proxy DNS when using SOCKS v5.
2182
2183 **Compatibility:** Firefox 60, Firefox ESR 60\
2184 **CCK2 Equivalent:** `networkProxy*`\
2185 **Preferences Affected:** `network.proxy.type`,`network.proxy.autoconfig_url`,`network.proxy.socks_remote_dns`,`signon.autologin.proxy`,`network.proxy.socks_version`,`network.proxy.no_proxies_on`,`network.proxy.share_proxy_settings`,`network.proxy.http`,`network.proxy.http_port`,`network.proxy.ftp`,`network.proxy.ftp_port`,`network.proxy.ssl`,`network.proxy.ssl_port`,`network.proxy.socks`,`network.proxy.socks_port`
2186
2187 #### Windows
2188 ```
2189 Software\Policies\Mozilla\Firefox\Proxy\Mode = "none", "system", "manual", "autoDetect", "autoConfig"
2190 Software\Policies\Mozilla\Firefox\Proxy\Locked = 0x1 | 0x0
2191 Software\Policies\Mozilla\Firefox\=Proxy\HTTPProxy = https://httpproxy.example.com
2192 Software\Policies\Mozilla\Firefox\Proxy\UseHTTPProxyForAllProtocols = 0x1 | 0x0
2193 Software\Policies\Mozilla\Firefox\Proxy\SSLProxy = https://sslproxy.example.com
2194 Software\Policies\Mozilla\Firefox\Proxy\FTPProxy = https://ftpproxy.example.com
2195 Software\Policies\Mozilla\Firefox\Proxy\SOCKSProxy = https://socksproxy.example.com
2196 Software\Policies\Mozilla\Firefox\Proxy\SOCKSVersion = 0x4 | 0x5
2197 Software\Policies\Mozilla\Firefox\Proxy\Passthrough = <local>
2198 Software\Policies\Mozilla\Firefox\Proxy\AutoConfigURL = URL_TO_AUTOCONFIG
2199 Software\Policies\Mozilla\Firefox\Proxy\AutoLogin = 0x1 | 0x0
2200 Software\Policies\Mozilla\Firefox\Proxy\UseProxyForDNS = 0x1 | 0x0
2201 ```
2202 #### macOS
2203 ```
2204 <dict>
2205 <key>Proxy</key>
2206 <dict>
2207 <key>Mode</key>
2208 <string>none | system | manual | autoDetect| autoConfig</string>
2209 <key>Locked</key>
2210 <true> | </false>
2211 <key>HTTPProxy</key>
2212 <string>https://httpproxy.example.com</string>
2213 <key>UseHTTPProxyForAllProtocols</key>
2214 <true> | </false>
2215 <key>SSLProxy</key>
2216 <string>https://sslproxy.example.com</string>
2217 <key>FTPProxy</key>
2218 <string>https://ftpproxy.example.com</string>
2219 <key>SOCKSProxy</key>
2220 <string>https://socksproxy.example.com</string>
2221 <key>SOCKSVersion</key>
2222 <string>4 | 5</string>
2223 <key>Passthrough</key>
2224 <string>&lt;local>&gt;</string>
2225 <key>AutoConfigURL</key>
2226 <string>URL_TO_AUTOCONFIG</string>
2227 <key>AutoLogin</key>
2228 <true> | </false>
2229 <key>UseProxyForDNS</key>
2230 <true> | </false>
2231 </dict>
2232 </dict>
2233 ```
2234 #### JSON
2235 ```
2236 {
2237 "policies": {
2238 "Proxy": {
2239 "Mode": "none", "system", "manual", "autoDetect", "autoConfig",
2240 "Locked": [true, false],
2241 "HTTPProxy": "hostname",
2242 "UseHTTPProxyForAllProtocols": [true, false],
2243 "SSLProxy": "hostname",
2244 "FTPProxy": "hostname",
2245 "SOCKSProxy": "hostname",
2246 "SOCKSVersion": 4 | 5
2247 "Passthrough": "<local>",
2248 "AutoConfigURL": "URL_TO_AUTOCONFIG",
2249 "AutoLogin": [true, false],
2250 "UseProxyForDNS": [true, false]
2251 }
2252 }
2253 }
2254 ```
2255 ### RequestedLocales
2256 Set the the list of requested locales for the application in order of preference. It will cause the corresponding language pack to become active.
2257
2258 Note: For Firefox 68, this can now be a string so that you can specify an empty value.
2259
2260 **Compatibility:** Firefox 64, Firefox ESR 60.4, Updated in Firefox 68, Firefox ESR 68\
2261 **CCK2 Equivalent:** N/A\
2262 **Preferences Affected:** N/A
2263 #### Windows
2264 ```
2265 Software\Policies\Mozilla\Firefox\RequestedLocales\1 = "de"
2266 Software\Policies\Mozilla\Firefox\RequestedLocales\2 = "en-US"
2267
2268 or
2269
2270 Software\Policies\Mozilla\Firefox\RequestedLocales = "de,en-US"
2271 ```
2272 #### macOS
2273 ```
2274 <dict>
2275 <key>RequestedLocales</key>
2276 <array>
2277 <string>de</string>
2278 <string>en-US</string>
2279 </array>
2280 </dict>
2281
2282 or
2283
2284 <dict>
2285 <key>RequestedLocales</key>
2286 <string>de,en-US</string>
2287 </dict>
2288
2289 ```
2290 #### JSON
2291 ```
2292 {
2293 "policies": {
2294 "RequestedLocales": ["de", "en-US"]
2295 }
2296 }
2297
2298 or
2299
2300 {
2301 "policies": {
2302 "RequestedLocales": "de,en-US"
2303 }
2304 }
2305 ```
2306 ### SanitizeOnShutdown (Selective)
2307 Clear data on shutdown. Choose from Cache, Cookies, Download History, Form & Search History, Browsing History, Active Logins, Site Preferences and Offline Website Data.
2308
2309 **Compatibility:** Firefox 68, Firefox ESR 68\
2310 **CCK2 Equivalent:** N/A\
2311 **Preferences Affected:** `privacy.sanitize.sanitizeOnShutdown`,`privacy.clearOnShutdown.cache`,`privacy.clearOnShutdown.cookies`,`privacy.clearOnShutdown.downloads`,`privacy.clearOnShutdown.formdata`,`privacy.clearOnShutdown.history`,`privacy.clearOnShutdown.sessions`,`privacy.clearOnShutdown.siteSettings`,`privacy.clearOnShutdown.offlineApps`
2312 #### Windows
2313 ```
2314 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Cache = 0x1 | 0x0
2315 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Cookies = 0x1 | 0x0
2316 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Downloads = 0x1 | 0x0
2317 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\FormData = 0x1 | 0x0
2318 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\History = 0x1 | 0x0
2319 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Sessions = 0x1 | 0x0
2320 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\SiteSettings = 0x1 | 0x0
2321 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\OfflineApps = 0x1 | 0x0
2322 ```
2323 #### macOS
2324 ```
2325 <dict>
2326 <key>SanitizeOnShutdown</key>
2327 <dict>
2328 <key>Cache</key>
2329 <true/> | <false/>
2330 <key>Cookies</key>
2331 <true/> | <false/>
2332 <key>Downloads</key>
2333 <true/> | <false/>
2334 <key>FormData</key>
2335 <true/> | <false/>
2336 <key>History</key>
2337 <true/> | <false/>
2338 <key>Sessions</key>
2339 <true/> | <false/>
2340 <key>SiteSettings</key>
2341 <true/> | <false/>
2342 <key>OfflineApps</key>
2343 <true/> | <false/>
2344 </dict>
2345 </dict>
2346 ```
2347 #### JSON
2348 ```
2349 {
2350 "policies": {
2351 "SanitizeOnShutdown": {
2352 "Cache": true | false,
2353 "Cookies": true | false,
2354 "Downloads": true | false,
2355 "FormData": true | false,
2356 "History": true | false,
2357 "Sessions": true | false,
2358 "SiteSettings": true | false,
2359 "OfflineApps": true | false
2360 }
2361 }
2362 }
2363 ```
2364 ### SanitizeOnShutdown (All)
2365 Clear all data on shutdown, including Browsing & Download History, Cookies, Active Logins, Cache, Form & Search History, Site Preferences and Offline Website Data.
2366
2367 **Compatibility:** Firefox 60, Firefox ESR 60\
2368 **CCK2 Equivalent:** N/A\
2369 **Preferences Affected:** `privacy.sanitize.sanitizeOnShutdown`,`privacy.clearOnShutdown.cache`,`privacy.clearOnShutdown.cookies`,`privacy.clearOnShutdown.downloads`,`privacy.clearOnShutdown.formdata`,`privacy.clearOnShutdown.history`,`privacy.clearOnShutdown.sessions`,`privacy.clearOnShutdown.siteSettings`,`privacy.clearOnShutdown.offlineApps`
2370 #### Windows
2371 ```
2372 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown = 0x1 | 0x0
2373 ```
2374 #### macOS
2375 ```
2376 <dict>
2377 <key>SanitizeOnShutdown</key>
2378 <true/> | <false/>
2379 </dict>
2380 ```
2381 #### JSON
2382 ```
2383 {
2384 "policies": {
2385 "SanitizeOnShutdown": true | false
2386 }
2387 }
2388 ```
2389 ### SearchBar
2390 Set whether or not search bar is displayed.
2391
2392 **Compatibility:** Firefox 60, Firefox ESR 60\
2393 **CCK2 Equivalent:** `showSearchBar`\
2394 **Preferences Affected:** N/A
2395
2396 #### Windows
2397 ```
2398 Software\Policies\Mozilla\Firefox\SearchBar = "unified" | "separate"
2399 ```
2400 #### macOS
2401 ```
2402 <dict>
2403 <key>SearchBar</key>
2404 <string>unified | separate</string>
2405 </dict>
2406 ```
2407
2408 #### JSON
2409 ```
2410 {
2411 "policies": {
2412 "SearchBar": "unified" | "separate"
2413 }
2414 }
2415 ```
2416
2417
2418
2419
2420
2421 ### SearchEngines (This policy is only available on the ESR.)
2422
2423 ### SearchEngines | Default
2424
2425 Set the default search engine. This policy is only available on the ESR.
2426
2427 **Compatibility:** Firefox ESR 60\
2428 **CCK2 Equivalent:** `defaultSearchEngine`\
2429 **Preferences Affected:** N/A
2430
2431 #### Windows
2432 ```
2433 Software\Policies\Mozilla\Firefox\SearchEngines\Default = NAME_OF_SEARCH_ENGINE
2434 ```
2435 #### macOS
2436 ```
2437 <dict>
2438 <key>SearchEngines</key>
2439 <dict>
2440 <key>Default</key>
2441 <string>NAME_OF_SEARCH_ENGINE</string>
2442 </dict>
2443 </dict>
2444 ```
2445 #### JSON
2446 ```
2447 {
2448 "policies": {
2449 "SearchEngines": {
2450 "Default": "NAME_OF_SEARCH_ENGINE"
2451 }
2452 }
2453 }
2454 ```
2455 ### SearchEngines | PreventInstalls
2456
2457 Prevent installing search engines from webpages.
2458
2459 **Compatibility:** Firefox ESR 60\
2460 **CCK2 Equivalent:** `disableSearchEngineInstall`\
2461 **Preferences Affected:** N/A
2462
2463 #### Windows
2464 ```
2465 Software\Policies\Mozilla\Firefox\SearchEngines\PreventInstalls = 0x1 | 0x0
2466 ```
2467 #### macOS
2468 ```
2469 <dict>
2470 <key>SearchEngines</key>
2471 <dict>
2472 <key>PreventInstalls</key>
2473 <true/> | <false/>
2474 </dict>
2475 </dict>
2476 ```
2477 #### JSON
2478 ```
2479 {
2480 "policies": {
2481 "SearchEngines": {
2482 "PreventInstalls": true | false
2483 }
2484 }
2485 }
2486 ```
2487 ### SearchEngines | Remove
2488
2489 Hide built-in search engines. This policy is only available on the ESR.
2490
2491 **Compatibility:** Firefox ESR 60.2\
2492 **CCK2 Equivalent:** `removeDefaultSearchEngines` (removed all built-in engines)\
2493 **Preferences Affected:** N/A
2494
2495 #### Windows
2496 ```
2497 Software\Policies\Mozilla\Firefox\SearchEngines\Remove\1 = NAME_OF_SEARCH_ENGINE
2498 ```
2499 #### macOS
2500 ```
2501 <dict>
2502 <key>SearchEngines</key>
2503 <dict>
2504 <key>Remove</key>
2505 <array>
2506 <string>NAME_OF_SEARCH_ENGINE</string>
2507 </array>
2508 </dict>
2509 </dict>
2510 ```
2511 #### JSON
2512 ```
2513 {
2514 "policies": {
2515 "SearchEngines": {
2516 "Remove": ["NAME_OF_SEARCH_ENGINE"]
2517 }
2518 }
2519 }
2520 ```
2521 ### SearchEngines | Add
2522
2523 Add new search engines (up to five). This policy is only available on the ESR. `Name` and `URLTemplate` are required.
2524
2525 `Name` is the name of the search engine.
2526
2527 `URLTemplate` is the search URL with {searchTerms} to substitute for the search term.
2528
2529 `Method` is either GET or POST
2530
2531 `IconURL` is a URL for the icon to use.
2532
2533 `Alias` is a keyword to use for the engine.
2534
2535 `Description` is a description of the search engine.
2536
2537 `PostData` is the POST data as name value pairs separated by &.
2538
2539 `SuggestURLTemplate` is a search suggestions URL with {searchTerms} to substitute for the search term.
2540
2541 **Compatibility:** Firefox ESR 60 (POST support in Firefox ESR 68)\
2542 **CCK2 Equivalent:** `searchplugins`\
2543 **Preferences Affected:** N/A
2544
2545 #### Windows
2546 ```
2547 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Name = "Example1"
2548 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\URLTemplate = "https://www.example.org/q={searchTerms}"
2549 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Method = "GET" | "POST"
2550 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\IconURL = "https://www.example.org/favicon.ico"
2551 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Alias = "example"
2552 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Description = "Example Description"
2553 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\SuggestURLTemplate = "https://www.example.org/suggestions/q={searchTerms}"
2554 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\PostData = "name=value&q={searchTerms}"
2555 ```
2556
2557 #### macOS
2558 ```
2559 <dict>
2560 <key>SearchEngines</key>
2561 <dict>
2562 <key>Add</key>
2563 <array>
2564 <dict>
2565 <key>Name</key>
2566 <string>Example1</string>
2567 <key>URLTemplate</key>
2568 <string>https://www.example.org/q={searchTerms}</string>
2569 <key>Method</key>
2570 <string>GET | POST </string>
2571 <key>IconURL</key>
2572 <string>https://www.example.org/favicon.ico</string>
2573 <key>Alias</key>
2574 <string>example</string>
2575 <key>Description</key>
2576 <string>Example Description</string>
2577 <key>SuggestURLTemplate</key>
2578 <string>https://www.example.org/suggestions/q={searchTerms}</string>
2579 <key>PostData</key>
2580 <string>name=value&q={searchTerms}</string>
2581 </dict>
2582 <array>
2583 </dict>
2584 </dict>
2585 ```
2586 #### JSON
2587 ```
2588 {
2589 "policies": {
2590 "SearchEngines": {
2591 "Add": [
2592 {
2593 "Name": "Example1",
2594 "URLTemplate": "https://www.example.org/q={searchTerms}",
2595 "Method": "GET" | "POST",
2596 "IconURL": "https://www.example.org/favicon.ico",
2597 "Alias": "example",
2598 "Description": "Description",
2599 "PostData": "name=value&q={searchTerms}",
2600 "SuggestURLTemplate": "https://www.example.org/suggestions/q={searchTerms}"
2601 }
2602 ]
2603 }
2604 }
2605 }
2606 ```
2607 ### SearchSuggestEnabled
2608
2609 Enable search suggestions.
2610
2611 **Compatibility:** Firefox 68, Firefox ESR 68\
2612 **CCK2 Equivalent:** N/A\
2613 **Preferences Affected:** `browser.urlbar.suggest.searches`,`browser.search.suggest.enabled`
2614
2615 #### Windows
2616 ```
2617 Software\Policies\Mozilla\Firefox\SearchSuggestEnabled = 0x1 | 0x0
2618 ```
2619 #### macOS
2620 ```
2621 <dict>
2622 <key>SearchSuggestEnabled</key>
2623 <true/> | <false/>
2624 </dict>
2625 ```
2626 #### JSON
2627 ```
2628 {
2629 "policies": {
2630 "SearchSuggestEnabled": true | false
2631 }
2632 }
2633 ```
2634 ### SecurityDevices
2635
2636 Install PKCS #11 modules.
2637
2638 **Compatibility:** Firefox 64, Firefox ESR 60.4\
2639 **CCK2 Equivalent:** `certs.devices`\
2640 **Preferences Affected:** N/A
2641
2642 #### Windows
2643 ```
2644 Software\Policies\Mozilla\Firefox\SecurityDevices\NAME_OF_DEVICE = PATH_TO_LIBRARY_FOR_DEVICE
2645 ```
2646 #### macOS
2647 ```
2648 <dict>
2649 <key>SecurityDevices</key>
2650 <dict>
2651 <key>NAME_OF_DEVICE</key>
2652 <string>PATH_TO_LIBRARY_FOR_DEVICE</string>
2653 </dict>
2654 </dict>
2655 ```
2656
2657 #### JSON
2658 ```
2659 {
2660 "policies": {
2661 "SecurityDevices": {
2662 "NAME_OF_DEVICE": "PATH_TO_LIBRARY_FOR_DEVICE"
2663 }
2664 }
2665 }
2666 ```
2667 ### SSLVersionMax
2668
2669 Set and lock the maximum version of TLS.
2670
2671 **Compatibility:** Firefox 66, Firefox ESR 60.6\
2672 **CCK2 Equivalent:** N/A\
2673 **Preferences Affected:** `security.tls.version.max`
2674
2675 #### Windows
2676 ```
2677 Software\Policies\Mozilla\Firefox\SSLVersionMax = "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
2678 ```
2679 #### macOS
2680 ```
2681 <dict>
2682 <key>SSLVersionMax</key>
2683 <string>tls1 | tls1.1 | tls1.2 | tls1.3</string>
2684 </dict>
2685 ```
2686
2687 #### JSON
2688 ```
2689 {
2690 "policies": {
2691 "SSLVersionMax": "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
2692 }
2693 }
2694 ```
2695 ### SSLVersionMin
2696
2697 Set and lock the minimum version of TLS.
2698
2699 **Compatibility:** Firefox 66, Firefox ESR 60.6\
2700 **CCK2 Equivalent:** N/A\
2701 **Preferences Affected:** `security.tls.version.min`
2702
2703 #### Windows
2704 ```
2705 Software\Policies\Mozilla\Firefox\SSLVersionMin = "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
2706 ```
2707 #### macOS
2708 ```
2709 <dict>
2710 <key>SSLVersionMin</key>
2711 <string>tls1 | tls1.1 | tls1.2 | tls1.3</string>
2712 </dict>
2713 ```
2714
2715 #### JSON
2716 ```
2717 {
2718 "policies": {
2719 "SSLVersionMin": "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
2720 }
2721 }
2722 ```
2723 ### SupportMenu
2724 Add a menuitem to the help menu for specifying support information.
2725
2726 **Compatibility:** Firefox 68.0.1, Firefox ESR 68.0.1\
2727 **CCK2 Equivalent:** helpMenu\
2728 **Preferences Affected:** N/A
2729
2730 #### Windows
2731 ```
2732 Software\Policies\Mozilla\Firefox\SupportMenu\Title = "Support Menu"
2733 Software\Policies\Mozilla\Firefox\SupportMenu\URL = "http://example.com/support"
2734 Software\Policies\Mozilla\Firefox\SupportMenu\AccessKey = "S"
2735 ```
2736 #### macOS
2737 ```
2738 <dict>
2739 <key>SupportMenu</key>
2740 <dict>
2741 <key>Title</key>
2742 <string>SupportMenu</string>
2743 <key>URL</key>
2744 <string>http://example.com/support</string>
2745 <key>AccessKey</key>
2746 <string>S</string>
2747 </dict>
2748 </dict>
2749 ```
2750 #### JSON
2751 ```
2752 {
2753 "policies": {
2754 "SupportMenu": {
2755 "Title": "Support Menu",
2756 "URL": "http://example.com/support",
2757 "AccessKey": "S"
2758 }
2759 }
2760 }
2761 ```
2762 ### WebsiteFilter
2763 Block websites from being visited. The parameters take an array of Match Patterns, as documented in https://developer.mozilla.org/en-US/Add-ons/WebExtensions/Match_patterns. Only http/https addresses are supported at the moment. The arrays are limited to 1000 entries each.
2764
2765 **Compatibility:** Firefox 60, Firefox ESR 60\
2766 **CCK2 Equivalent:** N/A\
2767 **Preferences Affected:** N/A
2768
2769 #### Windows
2770 ```
2771 Software\Policies\Mozilla\Firefox\WebsiteFilters\Block\1 = "<all_urls>"
2772 Software\Policies\Mozilla\Firefox\WebsiteFilters\Exceptions\1 = "http://example.org/*"
2773 ```
2774 #### macOS
2775 ```
2776 <dict>
2777 <key>WebsiteFilter</key>
2778 <dict>
2779 <key>Block</key>
2780 <array>
2781 <string><all_urls></string>
2782 </array>
2783 <key>Exceptions</key>
2784 <array>
2785 <string>http://example.org/*</string>
2786 </array>
2787 </dict>
2788
2789 </dict>
2790 ```
2791 #### JSON
2792 ```
2793 {
2794 "policies": {
2795 "WebsiteFilter": {
2796 "Block": ["<all_urls>"],
2797 "Exceptions": ["http://example.org/*"]
2798 }
2799 }
2800 }
2801 ```
My copy of the policy templates for Firefox

patrick-canterino.de