README.md

   1 **These policies are in active development and so might contain changes that do not work with current versions of Firefox.**
   2
   3 **You should use the [officially released versions](https://github.com/mozilla/policy-templates/releases) if you are deploying changes.**
   4
   5 Policies can be specified using the [Group Policy templates on Windows](https://github.com/mozilla/policy-templates/tree/master/windows), [Intune on Windows](https://support.mozilla.org/kb/managing-firefox-intune), [configuration profiles on macOS](https://github.com/mozilla/policy-templates/tree/master/mac), or by creating a file called `policies.json`. On Windows, create a directory called `distribution` where the EXE is located and place the file there. On Mac, the file goes into `Firefox.app/Contents/Resources/distribution`.  On Linux, the file goes into `firefox/distribution`, where `firefox` is the installation directory for firefox, which varies by distribution or you can specify system-wide policy by placing the file in `/etc/firefox/policies`.
   6
   7 | Policy Name | Description
   8 | --- | --- |
   9 | **[`3rdparty`](#3rdparty)** | Set policies that WebExtensions can access via chrome.storage.managed.
  10 | **[`AppAutoUpdate`](#appautoupdate)** | Enable or disable automatic application update.
  11 | **[`AppUpdateURL`](#appupdateurl)** | Change the URL for application update.
  12 | **[`Authentication`](#authentication)** | Configure sites that support integrated authentication.
  13 | **[`BackgroundAppUpdate`](#backgroundappupdate)** | Enable or disable automatic application update in the background, when the application is not running.
  14 | **[`BlockAboutAddons`](#blockaboutaddons)** | Block access to the Add-ons Manager (about:addons).
  15 | **[`BlockAboutConfig`](#blockaboutconfig)** | Block access to about:config.
  16 | **[`BlockAboutProfiles`](#blockaboutprofiles)** | Block access to About Profiles (about:profiles).
  17 | **[`BlockAboutSupport`](#blockaboutsupport)** | Block access to Troubleshooting Information (about:support).
  18 | **[`Bookmarks`](#bookmarks)** | Add bookmarks in either the bookmarks toolbar or menu.
  19 | **[`CaptivePortal`](#captiveportal)** | Enable or disable the detection of captive portals.
  20 | **[`Certificates`](#certificates)** |
  21 | **[`Certificates -> ImportEnterpriseRoots`](#certificates--importenterpriseroots)** | Trust certificates that have been added to the operating system certificate store by a user or administrator.
  22 | **[`Certificates -> Install`](#certificates--install)** | Install certificates into the Firefox certificate store.
  23 | **[`Cookies`](#cookies)** | Configure cookie preferences.
  24 | **[`DisableAppUpdate`](#disableappupdate)** | Turn off application updates.
  25 | **[`DisableBuiltinPDFViewer`](#disablebuiltinpdfviewer)** | Disable the built in PDF viewer.
  26 | **[`DisabledCiphers`](#disabledciphers)** | Disable ciphers.
  27 | **[`DisableDefaultBrowserAgent`](#disabledefaultbrowseragent)** | Prevent the default browser agent from taking any actions (Windows only).
  28 | **[`DisableDeveloperTools`](#disabledevelopertools)** | Remove access to all developer tools.
  29 | **[`DisableFeedbackCommands`](#disablefeedbackcommands)** | Disable the menus for reporting sites.
  30 | **[`DisableFirefoxScreenshots`](#disablefirefoxscreenshots)** | Remove access to Firefox Screenshots.
  31 | **[`DisableFirefoxAccounts`](#disablefirefoxaccounts)** | Disable Firefox Accounts integration (Sync).
  32 | **[`DisableFirefoxStudies`](#disablefirefoxstudies)** | Disable Firefox studies (Shield).
  33 | **[`DisableForgetButton`](#disableforgetbutton)** | Disable the "Forget" button.
  34 | **[`DisableFormHistory`](#disableformhistory)** | Turn off saving information on web forms and the search bar.
  35 | **[`DisableMasterPasswordCreation`](#disablemasterpasswordcreation)** | Remove the master password functionality.
  36 | **[`DisablePasswordReveal`](#disablepasswordreveal)** | Do not allow passwords to be revealed in saved logins.
  37 | **[`DisablePocket`](#disablepocket)** | Remove Pocket in the Firefox UI.
  38 | **[`DisablePrivateBrowsing`](#disableprivatebrowsing)** | Remove access to private browsing.
  39 | **[`DisableProfileImport`](#disableprofileimport)** | Disables the "Import data from another browser" option in the bookmarks window.
  40 | **[`DisableProfileRefresh`](#disableprofilerefresh)** | Disable the Refresh Firefox button on about:support and support.mozilla.org
  41 | **[`DisableSafeMode`](#disablesafemode)** | Disable safe mode within the browser.
  42 | **[`DisableSecurityBypass`](#disablesecuritybypass)** | Prevent the user from bypassing security in certain cases.
  43 | **[`DisableSetDesktopBackground`](#disablesetdesktopbackground)** | Remove the "Set As Desktop Background..." menuitem when right clicking on an image.
  44 | **[`DisableSystemAddonUpdate`](#disablesystemaddonupdate)** | Prevent system add-ons from being installed or update.
  45 | **[`DisableTelemetry`](#disabletelemetry)** | DisableTelemetry
  46 | **[`DisplayBookmarksToolbar`](#displaybookmarkstoolbar)** | Set the initial state of the bookmarks toolbar.
  47 | **[`DisplayMenuBar (Deprecated)`](#displaymenubar-deprecated)** | Set the initial state of the menubar.
  48 | **[`DisplayMenuBar`](#displaymenubar)** | Set the state of the menubar.
  49 | **[`DNSOverHTTPS`](#dnsoverhttps)** | Configure DNS over HTTPS.
  50 | **[`DontCheckDefaultBrowser`](#dontcheckdefaultbrowser)** | Don't check if Firefox is the default browser at startup.
  51 | **[`DefaultDownloadDirectory`](#defaultdownloaddirectory)** | Set the default download directory.
  52 | **[`DownloadDirectory`](#downloaddirectory)** | Set and lock the download directory.
  53 | **[`EnableTrackingProtection`](#enabletrackingprotection)** | Configure tracking protection.
  54 | **[`EncryptedMediaExtensions`](#encryptedmediaextensions)** | Enable or disable Encrypted Media Extensions and optionally lock it.
  55 | **[`EnterprisePoliciesEnabled`](#enterprisepoliciesenabled)** | Enable policy support on macOS.
  56 | **[`Extensions`](#extensions)** | Control the installation, uninstallation and locking of extensions.
  57 | **[`ExtensionSettings`](#extensionsettings)** | Manage all aspects of extensions.
  58 | **[`ExtensionUpdate`](#extensionupdate)** | Control extension updates.
  59 | **[`FlashPlugin`](#flashplugin)** | Configure the default Flash plugin policy as well as origins for which Flash is allowed.
  60 | **[`FirefoxHome`](#firefoxhome)** | Customize the Firefox Home page.
  61 | **[`HardwareAcceleration`](#hardwareacceleration)** | Control hardware acceleration.
  62 | **[`Handlers`](#handlers)** | Configure default application handlers.
  63 | **[`Homepage`](#homepage)** | Configure the default homepage and how Firefox starts.
  64 | **[`InstallAddonsPermission`](#installaddonspermission)** | Configure the default extension install policy as well as origins for extension installs are allowed.
  65 | **[`LegacyProfiles`](#legacyprofiles)** | Disable the feature enforcing a separate profile for each installation.
  66 | **[`LocalFileLinks`](#localfilelinks)** | Enable linking to local files by origin.
  67 | **[`ManagedBookmarks`](#managedbookmarks)** | Configures a list of bookmarks managed by an administrator that cannot be changed by the user.
  68 | **[`ManualAppUpdateOnly`](#manualappupdateonly)** | Allow manual updates only and do not notify the user about updates..
  69 | **[`PrimaryPassword`](#primarypassword)** | Require or prevent using a primary (formerly master) password.
  70 | **[`NetworkPrediction`](#networkprediction)** | Enable or disable network prediction (DNS prefetching).
  71 | **[`NewTabPage`](#newtabpage)** | Enable or disable the New Tab page.
  72 | **[`NoDefaultBookmarks`](#nodefaultbookmarks)** | Disable the creation of default bookmarks.
  73 | **[`OfferToSaveLogins`](#offertosavelogins)** | Control whether or not Firefox offers to save passwords.
  74 | **[`OfferToSaveLoginsDefault`](#offertosaveloginsdefault)** | Set the default value for whether or not Firefox offers to save passwords.
  75 | **[`OverrideFirstRunPage`](#overridefirstrunpage)** | Override the first run page.
  76 | **[`OverridePostUpdatePage`](#overridepostupdatepage)** | Override the upgrade page.
  77 | **[`PasswordManagerEnabled`](#passwordmanagerenabled)** | Remove (some) access to the password manager.
  78 | **[`PDFjs`](#pdfjs)** | Disable or configure PDF.js, the built-in PDF viewer.
  79 | **[`Permissions`](#permissions)** | Set permissions associated with camera, microphone, location, and notifications.
  80 | **[`PictureInPicture`](#pictureinpicture)** | Enable or disable Picture-in-Picture.
  81 | **[`PopupBlocking`](#popupblocking)** | Configure the default pop-up window policy as well as origins for which pop-up windows are allowed.
  82 | **[`Preferences`](#preferences)** | Set and lock preferences.
  83 | **[`Preferences (Deprecated)`](#preferences-deprecated)** | Set and lock some preferences.
  84 | **[`PromptForDownloadLocation`](#promptfordownloadlocation)** | Ask where to save each file before downloading.
  85 | **[`Proxy`](#proxy)** | Configure proxy settings.
  86 | **[`RequestedLocales`](#requestedlocales)** | Set the the list of requested locales for the application in order of preference.
  87 | **[`SanitizeOnShutdown` (All)](#sanitizeonshutdown-all)** | Clear all data on shutdown.
  88 | **[`SanitizeOnShutdown` (Selective)](#sanitizeonshutdown-selective)** | Clear data on shutdown.
  89 | **[`SearchBar`](#searchbar)** | Set whether or not search bar is displayed.
  90 | **[`SearchEngines`](#searchengines-this-policy-is-only-available-on-the-esr)** |
  91 | **[`SearchEngines -> Default`](#searchengines--default)** | Set the default search engine.
  92 | **[`SearchEngines -> PreventInstalls`](#searchengines--preventinstalls)** | Prevent installing search engines from webpages.
  93 | **[`SearchEngines -> Remove`](#searchengines--remove)** | Hide built-in search engines.
  94 | **[`SearchEngines -> Add`](#searchengines--add)** | Add new search engines.
  95 | **[`SearchSuggestEnabled`](#searchsuggestenabled)** | Enable search suggestions.
  96 | **[`SecurityDevices`](#securitydevices)** | Install PKCS #11 modules.
  97 | **[`ShowHomeButton`](#showhomebutton)** | Show the home button on the toolbar.
  98 | **[`SSLVersionMax`](#sslversionmax)** | Set and lock the maximum version of TLS.
  99 | **[`SSLVersionMin`](#sslversionmin)** | Set and lock the minimum version of TLS.
 100 | **[`SupportMenu`](#supportmenu)** | Add a menuitem to the help menu for specifying support information.
 101 | **[`UserMessaging`](#usermessaging)** | Don't show certain messages to the user.
 102 | **[`WebsiteFilter`](#websitefilter)** | Block websites from being visited.
 103
 104 ### 3rdparty
 105
 106 Allow WebExtensions to configure policy. For more information, see [Adding policy support to your extension](https://extensionworkshop.com/documentation/enterprise/adding-policy-support-to-your-extension/).
 107
 108 ### AppAutoUpdate
 109
 110 Enable or disable **automatic** application update.
 111
 112 If set to true, application updates are installed without user approval within Firefox. The operating system might still require approval.
 113
 114 If set to false, application updates are downloaded but the user can choose when to install the update.
 115
 116 If you have disabled updates via DisableAppUpdate, this policy has no effect.
 117
 118 **Compatibility:** Firefox 75, Firefox ESR 68.7\
 119 **CCK2 Equivalent:** N/A\
 120 **Preferences Affected:** app.update.auto
 121
 122 #### Windows (GPO)
 123 ```
 124 Software\Policies\Mozilla\Firefox\AppAutoUpdate = 0x1 | 0x0
 125 ```
 126 #### Windows (Intune)
 127 OMA-URI:
 128 ```
 129 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AppAutoUpdate
 130 ```
 131 Value (string):
 132 ```
 133 <enabled/> or <disabled/>
 134 ```
 135 #### macOS
 136 ```
 137 <dict>
 138   <key>AppAutoUpdate</key>
 139   <true/> | <false/>
 140 </dict>
 141 ```
 142 #### policies.json
 143 ```
 144 {
 145   "policies": {
 146     "AppAutoUpdate": true | false
 147   }
 148 }
 149 ```
 150 ### AppUpdateURL
 151
 152 Change the URL for application update if you are providing Firefox updates from a custom update server.
 153
 154 **Compatibility:** Firefox 62, Firefox ESR 60.2\
 155 **CCK2 Equivalent:** N/A\
 156 **Preferences Affected:** `app.update.url`
 157
 158 #### Windows (GPO)
 159 ```
 160 Software\Policies\Mozilla\Firefox\AppUpdateURL = "https://yoursite.com"
 161 ```
 162 #### Windows (Intune)
 163 OMA-URI:
 164 ```
 165 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AppUpdateURL
 166 ```
 167 Value (string):
 168 ```
 169 <enabled/>
 170 <data id="AppUpdateURL" value="https://yoursite.com"/>
 171 ```
 172 #### macOS
 173 ```
 174 <dict>
 175   <key>AppUpdateURL</key>
 176   <string>https://yoursite.com</string>
 177 </dict>
 178 ```
 179 #### policies.json
 180 ```
 181 {
 182   "policies": {
 183     "AppUpdateURL": "https://yoursite.com"
 184   }
 185 }
 186 ```
 187 ### Authentication
 188
 189 Configure sites that support integrated authentication.
 190
 191 See https://developer.mozilla.org/en-US/docs/Mozilla/Integrated_authentication for more information.
 192
 193 `PrivateBrowsing` enables integrated authentication in private browsing.
 194
 195 **Compatibility:** Firefox 60, Firefox ESR 60 (AllowNonFQDN added in 62/60.2, AllowProxies added in 70/68.2, Locked added in 71/68.3, PrivateBrowsing added in 77/68.9)\
 196 **CCK2 Equivalent:** N/A\
 197 **Preferences Affected:** `network.negotiate-auth.trusted-uris`,`network.negotiate-auth.delegation-uris`,`network.automatic-ntlm-auth.trusted-uris`,`network.automatic-ntlm-auth.allow-non-fqdn`,`network.negotiate-auth.allow-non-fqdn`,`network.automatic-ntlm-auth.allow-proxies`,`network.negotiate-auth.allow-proxies`,`network.auth.private-browsing-sso`
 198
 199 #### Windows (GPO)
 200 ```
 201 Software\Policies\Mozilla\Firefox\Authentication\SPNEGO\1 = "mydomain.com"
 202 Software\Policies\Mozilla\Firefox\Authentication\SPNEGO\2 = "https://myotherdomain.com"
 203 Software\Policies\Mozilla\Firefox\Authentication\Delegated\1 = "mydomain.com"
 204 Software\Policies\Mozilla\Firefox\Authentication\Delegated\2 = "https://myotherdomain.com"
 205 Software\Policies\Mozilla\Firefox\Authentication\NTLM\1 = "mydomain.com"
 206 Software\Policies\Mozilla\Firefox\Authentication\NTLM\2 = "https://myotherdomain.com"
 207 Software\Policies\Mozilla\Firefox\Authentication\AllowNonFQDN\SPNEGO = 0x1 | 0x0
 208 Software\Policies\Mozilla\Firefox\Authentication\AllowNonFQDN\NTLM = 0x1 | 0x0
 209 Software\Policies\Mozilla\Firefox\Authentication\AllowProxies\SPNEGO = 0x1 | 0x0
 210 Software\Policies\Mozilla\Firefox\Authentication\AllowProxies\NTLM = 0x1 | 0x0
 211 Software\Policies\Mozilla\Firefox\Authentication\Locked = 0x1 | 0x0
 212 Software\Policies\Mozilla\Firefox\Authentication\PrivateBrowsing = 0x1 | 0x0
 213 ```
 214 #### Windows (Intune)
 215 OMA-URI:
 216 ```
 217 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_SPNEGO
 218 ```
 219 Value (string):
 220 ```
 221 <enabled/>
 222 <data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
 223 ```
 224 OMA-URI:
 225 ```
 226 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_Delegated
 227 ```
 228 Value (string):
 229 ```
 230 <enabled/>
 231 <data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
 232 ```
 233 OMA-URI:
 234 ```
 235 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_NTLM
 236 ```
 237 Value (string):
 238 ```
 239 <enabled/>
 240 <data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
 241 ```
 242 OMA-URI:
 243 ```
 244 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_AllowNonFQDN
 245 ```
 246 Value (string):
 247 ```
 248 <enabled/>
 249 <data id="Authentication_AllowNonFQDN_NTLM" value="true | false"/>
 250 <data id="Authentication_AllowNonFQDN_SPNEGO" value="true | false"/>
 251 ```
 252 OMA-URI:
 253 ```
 254 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_Locked
 255 ```
 256 Value (string):
 257 ```
 258 <enabled/> or <disabled/>
 259 ```
 260 OMA-URI:
 261 ```
 262 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_PrivateBrowsing
 263 ```
 264 Value (string):
 265 ```
 266 <enabled/> or <disabled/>
 267 ```
 268 #### macOS
 269 ```
 270 <dict>
 271   <key>Authentication</key>
 272   <dict>
 273     <key>SPNEGO</key>
 274     <array>
 275       <string>mydomain.com</string>
 276       <string>https://myotherdomain.com</string>
 277     </array>
 278     <key>Delegated</key>
 279     <array>
 280       <string>mydomain.com</string>
 281       <string>https://myotherdomain.com</string>
 282     </array>
 283     <key>NTLM</key>
 284     <array>
 285       <string>mydomain.com</string>
 286       <string>https://myotherdomain.com</string>
 287     </array>
 288     <key>AllowNonFQDN</key>
 289       <dict>
 290       <key>SPNEGO</key>
 291       <true/> | <false/>
 292       <key>NTLM</key>
 293       <true/> | <false/>
 294     </dict>
 295     <key>AllowProxies</key>
 296       <dict>
 297       <key>SPNEGO</key>
 298       <true/> | <false/>
 299       <key>NTLM</key>
 300       <true/> | <false/>
 301     </dict>
 302     <key>Locked</key>
 303     <true/> | <false/>
 304     <key>PrivateBrowsing</key>
 305     <true/> | <false/>
 306   </dict>
 307 </dict>
 308 ```
 309 #### policies.json
 310 ```
 311 {
 312   "policies": {
 313     "Authentication": {
 314       "SPNEGO": ["mydomain.com", "https://myotherdomain.com"],
 315       "Delegated": ["mydomain.com", "https://myotherdomain.com"],
 316       "NTLM": ["mydomain.com", "https://myotherdomain.com"],
 317       "AllowNonFQDN": {
 318         "SPNEGO": true | false,
 319         "NTLM": true | false
 320       },
 321       "AllowProxies": {
 322         "SPNEGO": true | false,
 323         "NTLM": true | false
 324       },
 325       "Locked": true | false,
 326       "PrivateBrowsing": true | false
 327     }
 328   }
 329 }
 330 ```
 331 ### BackgroundAppUpdate
 332
 333 Enable or disable **automatic** application update **in the background**, when the application is not running.
 334
 335 If set to true, application updates may be installed (without user approval) in the background, even when the application is not running. The operating system might still require approval.
 336
 337 If set to false, the application will not try to install updates when the application is not running.
 338
 339 If you have disabled updates via `DisableAppUpdate` or disabled automatic updates via `AppUpdateAuto`, this policy has no effect.
 340
 341 **Compatibility:** Firefox 89\
 342 **CCK2 Equivalent:** N/A\
 343 **Preferences Affected:** `app.update.background.enabled`
 344
 345 #### Windows (GPO)
 346 ```
 347 Software\Policies\Mozilla\Firefox\BackgroundAppUpdate = 0x1 | 0x0
 348 ```
 349 #### Windows (Intune)
 350 OMA-URI:
 351 ```
 352 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BackgroundAppUpdate
 353 ```
 354 Value (string):
 355 ```
 356 <enabled/> or <disabled/>
 357 ```
 358 #### macOS
 359 ```
 360 <dict>
 361   <key>BackgroundAppUpdate</key>
 362   <true/> | <false/>
 363 </dict>
 364 ```
 365 #### policies.json
 366 ```
 367 {
 368   "policies": {
 369     "BackgroundAppUpdate": true | false
 370   }
 371 }
 372 ```
 373 ### BlockAboutAddons
 374
 375 Block access to the Add-ons Manager (about:addons).
 376
 377 **Compatibility:** Firefox 60, Firefox ESR 60\
 378 **CCK2 Equivalent:** `disableAddonsManager`\
 379 **Preferences Affected:** N/A
 380
 381 #### Windows (GPO)
 382 ```
 383 Software\Policies\Mozilla\Firefox\BlockAboutAddons = 0x1 | 0x0
 384 ```
 385 #### Windows (Intune)
 386 OMA-URI:
 387 ```
 388 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutAddons
 389 ```
 390 Value (string):
 391 ```
 392 <enabled/> or <disabled/>
 393 ```
 394 #### macOS
 395 ```
 396 <dict>
 397   <key>BlockAboutAddons</key>
 398   <true/> | <false/>
 399 </dict>
 400 ```
 401 #### policies.json
 402 ```
 403 {
 404   "policies": {
 405     "BlockAboutAddons": true | false
 406   }
 407 }
 408 ```
 409 ### BlockAboutConfig
 410
 411 Block access to about:config.
 412
 413 **Compatibility:** Firefox 60, Firefox ESR 60\
 414 **CCK2 Equivalent:** `disableAboutConfig`\
 415 **Preferences Affected:** N/A
 416
 417 #### Windows (GPO)
 418 ```
 419 Software\Policies\Mozilla\Firefox\BlockAboutConfig = 0x1 | 0x0
 420 ```
 421 #### Windows (Intune)
 422 OMA-URI:
 423 ```
 424 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutConfig
 425 ```
 426 Value (string):
 427 ```
 428 <enabled/> or <disabled/>
 429 ```
 430 #### macOS
 431 ```
 432 <dict>
 433   <key>BlockAboutConfig</key>
 434   <true/> | <false/>
 435 </dict>
 436 ```
 437 #### policies.json
 438 ```
 439 {
 440   "policies": {
 441     "BlockAboutConfig": true | false
 442   }
 443 }
 444 ```
 445 ### BlockAboutProfiles
 446
 447 Block access to About Profiles (about:profiles).
 448
 449 **Compatibility:** Firefox 60, Firefox ESR 60\
 450 **CCK2 Equivalent:** `disableAboutProfiles`\
 451 **Preferences Affected:** N/A
 452
 453 #### Windows (GPO)
 454 ```
 455 Software\Policies\Mozilla\Firefox\BlockAboutProfiles = 0x1 | 0x0
 456 ```
 457 #### Windows (Intune)
 458 OMA-URI:
 459 ```
 460 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutProfiles
 461 ```
 462 Value (string):
 463 ```
 464 <enabled/> or <disabled/>
 465 ```
 466 #### macOS
 467 ```
 468 <dict>
 469   <key>BlockAboutProfiles</key>
 470   <true/> | <false/>
 471 </dict>
 472 ```
 473 #### policies.json
 474 ```
 475 {
 476   "policies": {
 477     "BlockAboutProfiles": true | false
 478   }
 479 }
 480 ```
 481 ### BlockAboutSupport
 482
 483 Block access to Troubleshooting Information (about:support).
 484
 485 **Compatibility:** Firefox 60, Firefox ESR 60\
 486 **CCK2 Equivalent:** `disableAboutSupport`\
 487 **Preferences Affected:** N/A
 488
 489 #### Windows (GPO)
 490 ```
 491 Software\Policies\Mozilla\Firefox\BlockAboutSupport = 0x1 | 0x0
 492 ```
 493 #### Windows (Intune)
 494 OMA-URI:
 495 ```
 496 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutSupport
 497 ```
 498 Value (string):
 499 ```
 500 <enabled/> or <disabled/>
 501 ```
 502 #### macOS
 503 ```
 504 <dict>
 505   <key>BlockAboutSupport</key>
 506   <true/> | <false/>
 507 </dict>
 508 ```
 509 #### policies.json
 510 ```
 511 {
 512   "policies": {
 513     "BlockAboutSupport": true | false
 514   }
 515 }
 516 ```
 517 ### Bookmarks
 518
 519 Note: [`ManagedBookmarks`](#managedbookmarks) is the new recommended way to add bookmarks. This policy will continue to be supported.
 520
 521 Add bookmarks in either the bookmarks toolbar or menu. Only `Title` and `URL` are required. If `Placement` is not specified, the bookmark will be placed on the toolbar. If `Folder` is specified, it is automatically created and bookmarks with the same folder name are grouped together.
 522
 523 **Compatibility:** Firefox 60, Firefox ESR 60\
 524 **CCK2 Equivalent:** `bookmarks.toolbar`,`bookmarks.menu`\
 525 **Preferences Affected:** N/A
 526
 527 #### Windows (GPO)
 528 ```
 529 Software\Policies\Mozilla\Firefox\Bookmarks\1\Title = "Example"
 530 Software\Policies\Mozilla\Firefox\Bookmarks\1\URL = "https://example.com"
 531 Software\Policies\Mozilla\Firefox\Bookmarks\1\Favicon = "https://example.com/favicon.ico"
 532 Software\Policies\Mozilla\Firefox\Bookmarks\1\Placement = "toolbar" | "menu"
 533 Software\Policies\Mozilla\Firefox\Bookmarks\1\Folder = "FolderName"
 534 ```
 535 #### Windows (Intune)
 536 OMA-URI:
 537 ```
 538 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Bookmarks/Bookmark01
 539 ```
 540 Value (string):
 541 ```
 542 <enabled/>
 543 <data id="BookmarkTitle" value="Example"/>
 544 <data id="BookmarkURL" value="https://example.com"/>
 545 <data id="BookmarkFavicon" value="https://example.com/favicon.ico"/>
 546 <data id="BookmarkPlacement" value="toolbar | menu"/>
 547 <data id="BookmarkFolder" value="FolderName"/>
 548 ```
 549 #### macOS
 550 ```
 551 <dict>
 552   <key>Bookmarks</key>
 553   <array>
 554     <dict>
 555       <key>Title</key>
 556       <string>Example</string>
 557       <key>URL</key>
 558       <string>https://example.com</string>
 559       <key>Favicon</key>
 560       <string>https://example.com/favicon.ico</string>
 561       <key>Placement</key>
 562       <string>toolbar | menu</string>
 563       <key>Folder</key>
 564       <string>FolderName</string>
 565     </dict>
 566   </array>
 567 </dict>
 568 ```
 569 #### policies.json
 570 ```
 571 {
 572   "policies": {
 573     "Bookmarks": [
 574       {
 575         "Title": "Example",
 576         "URL": "https://example.com",
 577         "Favicon": "https://example.com/favicon.ico",
 578         "Placement": "toolbar" | "menu",
 579         "Folder": "FolderName"
 580       }
 581     ]
 582   }
 583 }
 584 ```
 585 ### CaptivePortal
 586 Enable or disable the detection of captive portals.
 587
 588 **Compatibility:** Firefox 67, Firefox ESR 60.7\
 589 **CCK2 Equivalent:** N/A\
 590 **Preferences Affected:** `network.captive-portal-service.enabled`
 591
 592 #### Windows (GPO)
 593 ```
 594 Software\Policies\Mozilla\Firefox\CaptivePortal = 0x1 | 0x0
 595 ```
 596 #### Windows (Intune)
 597 OMA-URI:
 598 ```
 599 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/CaptivePortal
 600 ```
 601 Value (string):
 602 ```
 603 <enabled/> or <disabled/>
 604 ```
 605 #### macOS
 606 ```
 607 <dict>
 608   <key>CaptivePortal</key>
 609   <true/> | <false/>
 610 </dict>
 611 ```
 612 #### policies.json
 613 ```
 614 {
 615   "policies": {
 616     "CaptivePortal": true | false
 617   }
 618 }
 619 ```
 620 ### Certificates
 621
 622 ### Certificates | ImportEnterpriseRoots
 623
 624 Trust certificates that have been added to the operating system certificate store by a user or administrator.
 625
 626 Note: This policy only works on Windows and macOS. For Linux discussion, see [bug 1600509](https://bugzilla.mozilla.org/show_bug.cgi?id=1600509).
 627
 628 See https://support.mozilla.org/kb/setting-certificate-authorities-firefox for more detail.
 629
 630 **Compatibility:** Firefox 60, Firefox ESR 60 (macOS support in Firefox 63, Firefox ESR 68)\
 631 **CCK2 Equivalent:** N/A\
 632 **Preferences Affected:** `security.enterprise_roots.enabled`
 633
 634 #### Windows (GPO)
 635 ```
 636 Software\Policies\Mozilla\Firefox\Certificates\ImportEnterpriseRoots = 0x1 | 0x0
 637 ```
 638 #### Windows (Intune)
 639 OMA-URI:
 640 ```
 641 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Certificates/Certificates_ImportEnterpriseRoots
 642 ```
 643 Value (string):
 644 ```
 645 <enabled/> or <disabled/>
 646 ```
 647 #### macOS
 648 ```
 649 <dict>
 650   <key>Certificates</key>
 651   <dict>
 652     <key>ImportEnterpriseRoots</key>
 653     <true/> | <false/>
 654   </dict>
 655 </dict>
 656 ```
 657 #### policies.json
 658 ```
 659 {
 660   "policies": {
 661     "Certificates": {
 662       "ImportEnterpriseRoots": true | false
 663     }
 664   }
 665 }
 666 ```
 667 ### Certificates | Install
 668
 669 Install certificates into the Firefox certificate store. If only a filename is specified, Firefox searches for the file in the following locations:
 670
 671 - Windows
 672   - %USERPROFILE%\AppData\Local\Mozilla\Certificates
 673   - %USERPROFILE%\AppData\Roaming\Mozilla\Certificates
 674 - macOS
 675   - /Library/Application Support/Mozilla/Certificates
 676   - ~/Library/Application Support/Mozilla/Certificates
 677 - Linux
 678   - /usr/lib/mozilla/certificates
 679   - /usr/lib64/mozilla/certificates
 680   - ~/.mozilla/certificates
 681
 682 Starting with Firefox 65, Firefox 60.5 ESR, a fully qualified path can be used, including UNC paths. You should use the native path style for your operating system. We do not support using %USERPROFILE% or other environment variables on Windows.
 683
 684 If you are specifying the path in the policies.json file on Windows, you need to escape your backslashes (`\\`) which means that for UNC paths, you need to escape both (`\\\\`). If you use group policy, you only need one backslash.
 685
 686 Certificates are installed using the trust string `CT,CT,`.
 687
 688 Binary (DER) and ASCII (PEM) certificates are both supported.
 689
 690 **Compatibility:** Firefox 64, Firefox ESR 64\
 691 **CCK2 Equivalent:** `certs.ca`\
 692 **Preferences Affected:** N/A
 693
 694 #### Windows (GPO)
 695 ```
 696 Software\Policies\Mozilla\Firefox\Certificates\Install\1 = "cert1.der"
 697 Software\Policies\Mozilla\Firefox\Certificates\Install\2 = "C:\Users\username\cert2.pem"
 698 ```
 699 #### Windows (Intune)
 700 OMA-URI:
 701 ```
 702 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Certificates/Certificates_Install
 703 ```
 704 Value (string):
 705 ```
 706 <enabled/>
 707 <data id="Certificates_Install" value="1&#xF000;cert1.der&#xF000;2&#xF000;C:\Users\username\cert2.pem"/>
 708 ```
 709 #### macOS
 710 ```
 711 <dict>
 712   <key>Certificates</key>
 713   <dict>
 714     <key>Install</key>
 715     <array>
 716       <string>cert1.der</string>
 717       <string>/Users/username/cert2.pem</string>
 718     </array>
 719   </dict>
 720 </dict>
 721 ```
 722 #### policies.json
 723 ```
 724 {
 725   "policies": {
 726     "Certificates": {
 727       "Install": ["cert1.der", "/home/username/cert2.pem"]
 728     }
 729   }
 730 }
 731 ```
 732 ### Cookies
 733 Configure cookie preferences.
 734
 735 `Allow` is a list of origins (not domains) where cookies are always allowed. You must include http or https.
 736
 737 `AllowSession` is a list of origins (not domains) where cookies are only allowed for the current session. You must include http or https.
 738
 739 `Block` is a list of origins (not domains) where cookies are always blocked. You must include http or https.
 740
 741 `Default` determines whether cookies are accepted at all.
 742
 743 `AcceptThirdParty` determines how third-party cookies are handled.
 744
 745 `ExpireAtSessionEnd` determines when cookies expire.
 746
 747 `RejectTracker` only rejects cookies for trackers.
 748
 749 `Locked` prevents the user from changing cookie preferences.
 750
 751 **Compatibility:** Firefox 60, Firefox ESR 60 (RejectTracker added in Firefox 63, AllowSession added in Firefox 79/78.1)\
 752 **CCK2 Equivalent:** N/A\
 753 **Preferences Affected:** `network.cookie.cookieBehavior`,`network.cookie.lifetimePolicy`
 754
 755 #### Windows (GPO)
 756 ```
 757 Software\Policies\Mozilla\Firefox\Cookies\Allow\1 = "https://example.com"
 758 Software\Policies\Mozilla\Firefox\Cookies\AllowSession\1 = "https://example.edu"
 759 Software\Policies\Mozilla\Firefox\Cookies\Block\1 = "https://example.org"
 760 Software\Policies\Mozilla\Firefox\Cookies\Default = 0x1 | 0x0
 761 Software\Policies\Mozilla\Firefox\Cookies\AcceptThirdParty = "always" | "never" | "from-visited"
 762 Software\Policies\Mozilla\Firefox\Cookies\ExpireAtSessionEnd = 0x1 | 0x0
 763 Software\Policies\Mozilla\Firefox\Cookies\RejectTracker = 0x1 | 0x0
 764 Software\Policies\Mozilla\Firefox\Cookies\Locked = 0x1 | 0x0
 765 ```
 766 #### Windows (Intune)
 767 OMA-URI:
 768 ```
 769 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Allow
 770 ```
 771 Value (string):
 772 ```
 773 <enabled/>
 774 <data id="Cookies_Allow" value="1&#xF000;https://example.com"/>
 775 ```
 776 OMA-URI:
 777 ```
 778 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_AllowSession
 779 ```
 780 Value (string):
 781 ```
 782 <enabled/>
 783 <data id="Cookies_Allow" value="1&#xF000;https://example.edu"/>
 784 ```
 785 OMA-URI:
 786 ```
 787 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Block
 788 ```
 789 Value (string):
 790 ```
 791 <enabled/>
 792 <data id="Cookies_Block" value="1&#xF000;https://example.org"/>
 793 ```
 794 OMA-URI:
 795 ```
 796 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Default
 797 ```
 798 Value (string):
 799 ```
 800 <enabled/> or <disabled/>
 801 ```
 802 OMA-URI:
 803 ```
 804 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_AcceptThirdParty
 805 ```
 806 Value (string):
 807 ```
 808 <enabled/>
 809 <data id="Cookies_AcceptThirdParty" value="always | never | from-visited"/>
 810 ```
 811 OMA-URI:
 812 ```
 813 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_ExpireAtSessionEnd
 814 ```
 815 Value (string):
 816 ```
 817 <enabled/> or <disabled/>
 818 ```
 819 OMA-URI:
 820 ```
 821 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_RejectTracker
 822 ```
 823 Value (string):
 824 ```
 825 <enabled/> or <disabled/>
 826 ```
 827 OMA-URI:
 828 ```
 829 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Locked
 830 ```
 831 Value (string):
 832 ```
 833 <enabled/> or <disabled/>
 834 ```
 835 #### macOS
 836 ```
 837 <dict>
 838   <key>Cookies</key>
 839   <dict>
 840     <key>Allow</key>
 841     <array>
 842       <string>http://example.com</string>
 843     </array>
 844     <key>AllowSession</key>
 845     <array>
 846       <string>http://example.edu</string>
 847     </array>
 848     <key>Block</key>
 849     <array>
 850       <string>http://example.org</string>
 851     </array>
 852     <key>Default</key>
 853     <true/> | <false/>
 854     <key>AcceptThirdParty</key>
 855     <string>always | never | from-visited</string>
 856     <key>ExpireAtSessionEnd</key>
 857     <true/> | <false/>
 858     <key>RejectTracker</key>
 859     <true/> | <false/>
 860     <key>Locked</key>
 861     <true/> | <false/>
 862   </dict>
 863 </dict>
 864 ```
 865 #### policies.json
 866 ```
 867 {
 868   "policies": {
 869     "Cookies": {
 870       "Allow": ["http://example.org/"],
 871       "AllowSession": ["http://example.edu/"],
 872       "Block": ["http://example.edu/"],
 873       "Default": true | false,
 874       "AcceptThirdParty": "always" | "never" | "from-visited",
 875       "ExpireAtSessionEnd": true | false,
 876       "RejectTracker": true | false,
 877       "Locked": true | false
 878     }
 879   }
 880 }
 881 ```
 882 ### DisableSetDesktopBackground
 883 Remove the "Set As Desktop Background..." menuitem when right clicking on an image.
 884
 885 **Compatibility:** Firefox 60, Firefox ESR 60\
 886 **CCK2 Equivalent:** `removeSetDesktopBackground`\
 887 **Preferences Affected:** N/A
 888
 889 #### Windows (GPO)
 890 ```
 891 Software\Policies\Mozilla\Firefox\DisableSetDesktopBackground = 0x1 | 0x0
 892 ```
 893 #### Windows (Intune)
 894 OMA-URI:
 895 ```
 896 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSetDesktopBackground
 897 ```
 898 Value (string):
 899 ```
 900 <enabled/> or <disabled/>
 901 ```
 902 #### macOS
 903 ```
 904 <dict>
 905   <key>DisableSetDesktopBackground</key>
 906   <true/> | <false/>
 907 </dict>
 908 ```
 909 #### policies.json
 910 ```
 911 {
 912   "policies": {
 913     "DisableSetDesktopBackground": true | false
 914   }
 915 }
 916 ```
 917 ### DisableMasterPasswordCreation
 918 Remove the master password functionality.
 919
 920 If this value is true, it works the same as setting [`PrimaryPassword`](#primarypassword) to false and removes the primary password functionality.
 921
 922 If both DisableMasterPasswordCreation and PrimaryPassword are used, DisableMasterPasswordCreation takes precedent.
 923
 924 **Compatibility:** Firefox 60, Firefox ESR 60\
 925 **CCK2 Equivalent:** `noMasterPassword`\
 926 **Preferences Affected:** N/A
 927
 928 #### Windows (GPO)
 929 ```
 930 Software\Policies\Mozilla\Firefox\DisableMasterPasswordCreation = 0x1 | 0x0
 931 ```
 932 #### Windows (Intune)
 933 OMA-URI:
 934 ```
 935 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableMasterPasswordCreation
 936 ```
 937 Value (string):
 938 ```
 939 <enabled/> or <disabled/>
 940 ```
 941 #### macOS
 942 ```
 943 <dict>
 944   <key>DisableMasterPasswordCreation</key>
 945   <true/> | <false/>
 946 </dict>
 947 ```
 948 #### policies.json
 949 ```
 950 {
 951   "policies": {
 952     "DisableMasterPasswordCreation": true | false
 953   }
 954 }
 955 ```
 956 ### DisableAppUpdate
 957 Turn off application updates within Firefox.
 958
 959 **Compatibility:** Firefox 60, Firefox ESR 60\
 960 **CCK2 Equivalent:** `disableFirefoxUpdates`\
 961 **Preferences Affected:** N/A
 962
 963 #### Windows (GPO)
 964 ```
 965 Software\Policies\Mozilla\Firefox\DisableAppUpdate = 0x1 | 0x0
 966 ```
 967 #### Windows (Intune)
 968 OMA-URI:
 969 ```
 970 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableAppUpdate
 971 ```
 972 Value (string):
 973 ```
 974 <enabled/> or <disabled/>
 975 ```
 976 #### macOS
 977 ```
 978 <dict>
 979   <key>DisableAppUpdate</key>
 980   <true/> | <false/>
 981 </dict>
 982 ```
 983 #### policies.json
 984 ```
 985 {
 986   "policies": {
 987     "DisableAppUpdate": true | false
 988   }
 989 }
 990 ```
 991 ### DisableBuiltinPDFViewer
 992 Disable the built in PDF viewer. PDF files are downloaded and sent externally.
 993
 994 **Compatibility:** Firefox 60, Firefox ESR 60\
 995 **CCK2 Equivalent:** `disablePDFjs`\
 996 **Preferences Affected:** `pdfjs.disabled`
 997
 998 #### Windows (GPO)
 999 ```
1000 Software\Policies\Mozilla\Firefox\DisableBuiltinPDFViewer = 0x1 | 0x0
1001 ```
1002 #### Windows (Intune)
1003 OMA-URI:
1004 ```
1005 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableBuiltinPDFViewer
1006 ```
1007 Value (string):
1008 ```
1009 <enabled/> or <disabled/>
1010 ```
1011 #### macOS
1012 ```
1013 <dict>
1014   <key>DisableBuiltinPDFViewer</key>
1015   <true/> | <false/>
1016 </dict>
1017 ```
1018 #### policies.json
1019 ```
1020 {
1021   "policies": {
1022     "DisableBuiltinPDFViewer": true | false
1023   }
1024 }
1025 ```
1026 ### DisabledCiphers
1027 Disable specific cryptographic ciphers.
1028
1029 ---
1030 **Note:**
1031
1032 This policy was updated in Firefox 78 to allow enabling ciphers as well. Setting the value to true disables the cipher, setting the value to false enables the cipher. Previously setting the value to true or false disabled the cipher.
1033
1034 ---
1035 **Compatibility:** Firefox 76, Firefox ESR 68.8 (TLS_RSA_WITH_AES_128_GCM_SHA256 and TLS_RSA_WITH_AES_256_GCM_SHA384 were added in Firefox 78)\
1036 **CCK2 Equivalent:** N/A\
1037 **Preferences Affected:** N/A
1038
1039 #### Windows (GPO)
1040 ```
1041 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_DHE_RSA_WITH_AES_128_CBC_SHA = 0x1 | 0x0
1042 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_DHE_RSA_WITH_AES_256_CBC_SHA = 0x1 | 0x0
1043 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA = 0x1 | 0x0
1044 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA = 0x1 | 0x0
1045 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 = 0x1 | 0x0
1046 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 = 0x1 | 0x0
1047 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_RSA_WITH_AES_128_CBC_SHA = 0x1 | 0x0
1048 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_RSA_WITH_AES_256_CBC_SHA = 0x1 | 0x0
1049 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_RSA_WITH_3DES_EDE_CBC_SHA = 0x1 | 0x0
1050 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_RSA_WITH_AES_128_GCM_SHA256 = 0x1 | 0x0
1051 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_RSA_WITH_AES_256_GCM_SHA384 = 0x1 | 0x0
1052 ```
1053 #### Windows (Intune)
1054 OMA-URI:
1055 ```
1056 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_DHE_RSA_WITH_AES_128_CBC_SHA
1057 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_DHE_RSA_WITH_AES_256_CBC_SHA
1058 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
1059 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
1060 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
1061 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
1062 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_RSA_WITH_AES_128_CBC_SHA
1063 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_RSA_WITH_AES_256_CBC_SHA
1064 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_RSA_WITH_3DES_EDE_CBC_SHA
1065 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_RSA_WITH_AES_128_GCM_SHA256
1066 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_RSA_WITH_AES_256_GCM_SHA384
1067 ```
1068 Value (string):
1069 ```
1070 <enabled/> or <disabled/>
1071 ```
1072 #### macOS
1073 ```
1074 <dict>
1075   <key>DisabledCiphers</key>
1076     <dict>
1077       <key>TLS_DHE_RSA_WITH_AES_128_CBC_SHA</key>
1078       <true/> | <false/>
1079       <key>TLS_DHE_RSA_WITH_AES_256_CBC_SHA</key>
1080       <true/> | <false/>
1081       <key>TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA</key>
1082       <true/> | <false/>
1083       <key>TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA</key>
1084       <true/> | <false/>
1085       <key>TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256</key>
1086       <true/> | <false/>
1087       <key>TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256</key>
1088       <true/> | <false/>
1089       <key>TLS_RSA_WITH_AES_128_CBC_SHA</key>
1090       <true/> | <false/>
1091       <key>TLS_RSA_WITH_AES_256_CBC_SHA</key>
1092       <true/> | <false/>
1093       <key>TLS_RSA_WITH_3DES_EDE_CBC_SHA</key>
1094       <true/> | <false/>
1095       <key>TLS_RSA_WITH_AES_128_GCM_SHA256</key>
1096       <true/> | <false/>
1097       <key>TLS_RSA_WITH_AES_256_GCM_SHA384</key>
1098       <true/> | <false/>
1099     </dict>
1100 </dict>
1101 ```
1102 #### policies.json
1103 ```
1104 {
1105   "policies": {
1106     "DisabledCiphers": {
1107       "TLS_DHE_RSA_WITH_AES_128_CBC_SHA": true | false,
1108       "TLS_DHE_RSA_WITH_AES_256_CBC_SHA": true | false,
1109       "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA": true | false,
1110       "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA": true | false,
1111       "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256": true | false,
1112       "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256": true | false,
1113       "TLS_RSA_WITH_AES_128_CBC_SHA": true | false,
1114       "TLS_RSA_WITH_AES_256_CBC_SHA": true | false,
1115       "TLS_RSA_WITH_3DES_EDE_CBC_SHA": true | false,
1116       "TLS_RSA_WITH_AES_128_GCM_SHA256": true | false,
1117       "TLS_RSA_WITH_AES_256_GCM_SHA384": true | false
1118     }
1119   }
1120 }
1121 ```
1122 ### DisableDefaultBrowserAgent
1123 Prevent the default browser agent from taking any actions. Only applicable to Windows; other platforms don’t have the agent.
1124
1125 The browser agent is a Windows-only scheduled task which runs in the background to collect and submit data about the browser that the user has set as their OS default. More information is available [here](https://firefox-source-docs.mozilla.org/toolkit/mozapps/defaultagent/default-browser-agent/index.html).
1126
1127 **Compatibility:** Firefox 75, Firefox ESR 68.7 (Windows only)\
1128 **CCK2 Equivalent:** N/A\
1129 **Preferences Affected:** N/A
1130
1131 #### Windows (GPO)
1132 ```
1133 Software\Policies\Mozilla\Firefox\DisableDefaultBrowserAgent = 0x1 | 0x0
1134 ```
1135 #### Windows (Intune)
1136 OMA-URI:
1137 ```
1138 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableDefaultBrowserAgent
1139 ```
1140 Value (string):
1141 ```
1142 <enabled/> or <disabled/>
1143 ```
1144 #### policies.json
1145 ```
1146 {
1147   "policies": {
1148     "DisableDefaultBrowserAgent": true | false
1149   }
1150 }
1151 ```
1152 ### DisableDeveloperTools
1153 Remove access to all developer tools.
1154
1155 **Compatibility:** Firefox 60, Firefox ESR 60\
1156 **CCK2 Equivalent:** `removeDeveloperTools`\
1157 **Preferences Affected:** `devtools.policy.disabled`
1158
1159 #### Windows (GPO)
1160 ```
1161 Software\Policies\Mozilla\Firefox\DisableDeveloperTools = 0x1 | 0x0`
1162 ```
1163 #### Windows (Intune)
1164 OMA-URI:
1165 ```
1166 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableDeveloperTools
1167 ```
1168 Value (string):
1169 ```
1170 <enabled/> or <disabled/>
1171 ```
1172 #### macOS
1173 ```
1174 <dict>
1175   <key>DisableDeveloperTools</key>
1176   <true/> | <false/>
1177 </dict>
1178 ```
1179 #### policies.json
1180 ```
1181 {
1182   "policies": {
1183     "DisableDeveloperTools": true | false
1184   }
1185 }
1186 ```
1187 ### DisableFeedbackCommands
1188 Disable the menus for reporting sites (Submit Feedback, Report Deceptive Site).
1189
1190 **Compatibility:** Firefox 60, Firefox ESR 60\
1191 **CCK2 Equivalent:** N/A\
1192 **Preferences Affected:** N/A
1193
1194 #### Windows (GPO)
1195 ```
1196 Software\Policies\Mozilla\Firefox\DisableFeedbackCommands = 0x1 | 0x0
1197 ```
1198 #### Windows (Intune)
1199 OMA-URI:
1200 ```
1201 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFeedbackCommands
1202 ```
1203 Value (string):
1204 ```
1205 <enabled/> or <disabled/>
1206 ```
1207 #### macOS
1208 ```
1209 <dict>
1210   <key>DisableFeedbackCommands</key>
1211   <true/> | <false/>
1212 </dict>
1213 ```
1214 #### policies.json
1215 ```
1216 {
1217   "policies": {
1218     "DisableFeedbackCommands": true | false
1219   }
1220 }
1221 ```
1222 ### DisableFirefoxScreenshots
1223 Remove access to Firefox Screenshots.
1224
1225 **Compatibility:** Firefox 60, Firefox ESR 60\
1226 **CCK2 Equivalent:** N/A\
1227 **Preferences Affected:** `extensions.screenshots.disabled`
1228
1229 #### Windows (GPO)
1230 ```
1231 Software\Policies\Mozilla\Firefox\DisableFirefoxScreenshots = 0x1 | 0x0
1232 ```
1233 #### Windows (Intune)
1234 OMA-URI:
1235 ```
1236 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxScreenshots
1237 ```
1238 Value (string):
1239 ```
1240 <enabled/> or <disabled/>
1241 ```
1242 #### macOS
1243 ```
1244 <dict>
1245   <key>DisableFirefoxScreenshots</key>
1246   <true/> | <false/>
1247 </dict>
1248 ```
1249 #### policies.json
1250 ```
1251 {
1252   "policies": {
1253     "DisableFirefoxScreenshots": true | false
1254   }
1255 }
1256 ```
1257 ### DisableFirefoxAccounts
1258 Disable Firefox Accounts integration (Sync).
1259
1260 **Compatibility:** Firefox 60, Firefox ESR 60\
1261 **CCK2 Equivalent:** `disableSync`\
1262 **Preferences Affected:** `identity.fxaccounts.enabled`
1263
1264 #### Windows (GPO)
1265 ```
1266 Software\Policies\Mozilla\Firefox\DisableFirefoxAccounts = 0x1 | 0x0
1267 ```
1268 #### Windows (Intune)
1269 OMA-URI:
1270 ```
1271 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxAccounts
1272 ```
1273 Value (string):
1274 ```
1275 <enabled/> or <disabled/>
1276 ```
1277 #### macOS
1278 ```
1279 <dict>
1280   <key>DisableFirefoxAccounts</key>
1281   <true/> | <false/>
1282 </dict>
1283 ```
1284 #### policies.json
1285 ```
1286 {
1287   "policies": {
1288     "DisableFirefoxAccounts": true | false
1289   }
1290 }
1291 ```
1292 ### DisableFirefoxStudies
1293 Disable Firefox studies (Shield).
1294
1295 **Compatibility:** Firefox 60, Firefox ESR 60\
1296 **CCK2 Equivalent:** N/A\
1297 **Preferences Affected:** N/A
1298
1299 #### Windows (GPO)
1300 ```
1301 Software\Policies\Mozilla\Firefox\DisableFirefoxStudies = 0x1 | 0x0
1302 ```
1303 #### Windows (Intune)
1304 OMA-URI:
1305 ```
1306 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxStudies
1307 ```
1308 Value (string):
1309 ```
1310 <enabled/> or <disabled/>
1311 ```
1312 #### macOS
1313 ```
1314 <dict>
1315   <key>DisableFirefoxStudies</key>
1316   <true/> | <false/>
1317 </dict>
1318 ```
1319 #### policies.json
1320 ```
1321 {
1322   "policies": {
1323     "DisableFirefoxStudies": true | false
1324   }
1325 }
1326 ```
1327 ### DisableForgetButton
1328 Disable the "Forget" button.
1329
1330 **Compatibility:** Firefox 60, Firefox ESR 60\
1331 **CCK2 Equivalent:** `disableForget`\
1332 **Preferences Affected:** N/A
1333
1334 #### Windows (GPO)
1335 ```
1336 Software\Policies\Mozilla\Firefox\DisableForgetButton = 0x1 | 0x0
1337 ```
1338 #### Windows (Intune)
1339 OMA-URI:
1340 ```
1341 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableForgetButton
1342 ```
1343 Value (string):
1344 ```
1345 <enabled/> or <disabled/>
1346 ```
1347 #### macOS
1348 ```
1349 <dict>
1350   <key>DisableForgetButton</key>
1351   <true/> | <false/>
1352 </dict>
1353 ```
1354 #### policies.json
1355 ```
1356 {
1357   "policies": {
1358     "DisableForgetButton": true | false
1359   }
1360 }
1361 ```
1362 ### DisableFormHistory
1363 Turn off saving information on web forms and the search bar.
1364
1365 **Compatibility:** Firefox 60, Firefox ESR 60\
1366 **CCK2 Equivalent:** `disableFormFill`\
1367 **Preferences Affected:** ` browser.formfill.enable`
1368
1369 #### Windows (GPO)
1370 ```
1371 Software\Policies\Mozilla\Firefox\DisableFormHistory = 0x1 | 0x0
1372 ```
1373 #### Windows (Intune)
1374 OMA-URI:
1375 ```
1376 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFormHistory
1377 ```
1378 Value (string):
1379 ```
1380 <enabled/> or <disabled/>
1381 ```
1382 #### macOS
1383 ```
1384 <dict>
1385   <key>DisableFormHistory</key>
1386   <true/> | <false/>
1387 </dict>
1388 ```
1389 #### policies.json
1390 ```
1391 {
1392   "policies": {
1393     "DisableFormHistory": true | false
1394   }
1395 }
1396 ```
1397 ### DisablePasswordReveal
1398 Do not allow passwords to be shown in saved logins
1399
1400 **Compatibility:** Firefox 71, Firefox ESR 68.3\
1401 **CCK2 Equivalent:** N/A
1402 **Preferences Affected:** N/A
1403
1404 #### Windows (GPO)
1405 ```
1406 Software\Policies\Mozilla\Firefox\DisablePasswordReveal = 0x1 | 0x0
1407 ```
1408 #### Windows (Intune)
1409 OMA-URI:
1410 ```
1411 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePasswordReveal
1412 ```
1413 Value (string):
1414 ```
1415 <enabled/> or <disabled/>
1416 ```
1417 #### macOS
1418 ```
1419 <dict>
1420   <key>DisablePasswordReveal</key>
1421   <true/> | <false/>
1422 </dict>
1423 ```
1424 #### policies.json
1425 ```
1426 {
1427   "policies": {
1428     "DisablePasswordReveal": true | false
1429   }
1430 }
1431 ```
1432 ### DisablePocket
1433 Remove Pocket in the Firefox UI. It does not remove it from the new tab page.
1434
1435 **Compatibility:** Firefox 60, Firefox ESR 60\
1436 **CCK2 Equivalent:** `disablePocket`\
1437 **Preferences Affected:** `extensions.pocket.enabled`
1438
1439 #### Windows (GPO)
1440 ```
1441 Software\Policies\Mozilla\Firefox\DisablePocket = 0x1 | 0x0
1442 ```
1443 #### Windows (Intune)
1444 OMA-URI:
1445 ```
1446 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePocket
1447 ```
1448 Value (string):
1449 ```
1450 <enabled/> or <disabled/>
1451 ```
1452 #### macOS
1453 ```
1454 <dict>
1455   <key>DisablePocket</key>
1456   <true/> | <false/>
1457 </dict>
1458 ```
1459 #### policies.json
1460 ```
1461 {
1462   "policies": {
1463     "DisablePocket": true | false
1464   }
1465 }
1466 ```
1467 ### DisablePrivateBrowsing
1468 Remove access to private browsing.
1469
1470 **Compatibility:** Firefox 60, Firefox ESR 60\
1471 **CCK2 Equivalent:** `disablePrivateBrowsing`\
1472 **Preferences Affected:** N/A
1473
1474 #### Windows (GPO)
1475 ```
1476 Software\Policies\Mozilla\Firefox\DisablePrivateBrowsing = 0x1 | 0x0
1477 ```
1478 #### Windows (Intune)
1479 OMA-URI:
1480 ```
1481 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePrivateBrowsing
1482 ```
1483 Value (string):
1484 ```
1485 <enabled/> or <disabled/>
1486 ```
1487 #### macOS
1488 ```
1489 <dict>
1490   <key>DisablePrivateBrowsing</key>
1491   <true/> | <false/>
1492 </dict>
1493 ```
1494 #### policies.json
1495 ```
1496 {
1497   "policies": {
1498     "DisablePrivateBrowsing": true | false
1499   }
1500 }
1501 ```
1502 ### DisableProfileImport
1503 Disables the "Import data from another browser" option in the bookmarks window.
1504
1505 **Compatibility:** Firefox 60, Firefox ESR 60\
1506 **CCK2 Equivalent:** N/A\
1507 **Preferences Affected:** N/A
1508
1509 #### Windows (GPO)
1510 ```
1511 Software\Policies\Mozilla\Firefox\DisableProfileImport = 0x1 | 0x0
1512 ```
1513 #### Windows (Intune)
1514 OMA-URI:
1515 ```
1516 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableProfileImport
1517 ```
1518 Value (string):
1519 ```
1520 <enabled/> or <disabled/>
1521 ```
1522 #### macOS
1523 ```
1524 <dict>
1525   <key>DisableProfileImport</key>
1526   <true/> | <false/>
1527 </dict>
1528 ```
1529 #### policies.json
1530 ```
1531 {
1532   "policies": {
1533     "DisableProfileImport": true | false
1534   }
1535 }
1536 ```
1537 ### DisableProfileRefresh
1538 Disable the Refresh Firefox button on about:support and support.mozilla.org, as well as the prompt that displays offering to refresh Firefox when you haven't used it in a while.
1539
1540 **Compatibility:** Firefox 60, Firefox ESR 60\
1541 **CCK2 Equivalent:** `disableResetFirefox`\
1542 **Preferences Affected:** `browser.disableResetPrompt`
1543
1544 #### Windows (GPO)
1545 ```
1546 Software\Policies\Mozilla\Firefox\DisableProfileRefresh = 0x1 | 0x0
1547 ```
1548 #### Windows (Intune)
1549 OMA-URI:
1550 ```
1551 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableProfileRefresh
1552 ```
1553 Value (string):
1554 ```
1555 <enabled/> or <disabled/>
1556 ```
1557 #### macOS
1558 ```
1559 <dict>
1560   <key>DisableProfileRefresh</key>
1561   <true/> | <false/>
1562 </dict>
1563 ```
1564 #### policies.json
1565 ```
1566 {
1567   "policies": {
1568     "DisableProfileRefresh": true | false
1569   }
1570 }
1571 ```
1572 ### DisableSafeMode
1573 Disable safe mode within the browser.
1574
1575 On Windows, this disables safe mode via the command line as well.
1576
1577 **Compatibility:** Firefox 60, Firefox ESR 60 (Windows, macOS)\
1578 **CCK2 Equivalent:** `disableSafeMode`\
1579 **Preferences Affected:** N/A
1580
1581 #### Windows (GPO)
1582 ```
1583 Software\Policies\Mozilla\Firefox\DisableSafeMode = 0x1 | 0x0
1584 ```
1585 #### Windows (Intune)
1586 OMA-URI:
1587 ```
1588 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSafeMode
1589 ```
1590 Value (string):
1591 ```
1592 <enabled/> or <disabled/>
1593 ```
1594 #### macOS
1595 ```
1596 <dict>
1597   <key>DisableSafeMode</key>
1598   <true/> | <false/>
1599 </dict>
1600 ```
1601 #### policies.json
1602 ```
1603 {
1604   "policies": {
1605     "DisableSafeMode": true | false
1606   }
1607 }
1608 ```
1609 ### DisableSecurityBypass
1610 Prevent the user from bypassing security in certain cases.
1611
1612 `InvalidCertificate` prevents adding an exception when an invalid certificate is shown.
1613
1614 `SafeBrowsing` prevents selecting "ignore the risk" and visiting a harmful site anyway.
1615
1616 **Compatibility:** Firefox 60, Firefox ESR 60\
1617 **CCK2 Equivalent:** N/A\
1618 **Preferences Affected:** `security.certerror.hideAddException`,`browser.safebrowsing.allowOverride`
1619
1620 #### Windows (GPO)
1621 ```
1622 Software\Policies\Mozilla\Firefox\DisableSecurityBypass\InvalidCertificate = 0x1 | 0x0
1623 Software\Policies\Mozilla\Firefox\DisableSecurityBypass\SafeBrowsing = 0x1 | 0x0
1624 ```
1625 #### Windows (Intune)
1626 OMA-URI:
1627 ```
1628 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/P_DisableSecurityBypass_InvalidCertificate
1629 ```
1630 Value (string):
1631 ```
1632 <enabled/> or <disabled/>
1633 ```
1634 OMA-URI:
1635 ```
1636 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/P_DisableSecurityBypass_SafeBrowsing
1637 ```
1638 Value (string):
1639 ```
1640 <enabled/> or <disabled/>
1641 ```
1642
1643 #### macOS
1644 ```
1645 <dict>
1646   <key>DisableSecurityBypass</key>
1647   <dict>
1648     <key>InvalidCertificate</key>
1649     <true/> | <false/>
1650     <key>SafeBrowsing</key>
1651     <true/> | <false/>
1652   </dict>
1653 </dict>
1654 ```
1655 #### policies.json
1656 ```
1657 {
1658   "policies": {
1659     "DisableSecurityBypass": {
1660       "InvalidCertificate": true | false,
1661       "SafeBrowsing": true | false
1662     }
1663   }
1664 }
1665 ```
1666 ### DisableSystemAddonUpdate
1667 Prevent system add-ons from being installed or update.
1668
1669 **Compatibility:** Firefox 60, Firefox ESR 60\
1670 **CCK2 Equivalent:** N/A\
1671 **Preferences Affected:** N/A
1672
1673 #### Windows (GPO)
1674 ```
1675 Software\Policies\Mozilla\Firefox\DisableSystemAddonUpdate = 0x1 | 0x0
1676 ```
1677 #### Windows (Intune)
1678 OMA-URI:
1679 ```
1680 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSystemAddonUpdate
1681 ```
1682 Value (string):
1683 ```
1684 <enabled/> or <disabled/>
1685 ```
1686 #### macOS
1687 ```
1688 <dict>
1689   <key>DisableSystemAddonUpdate</key>
1690   <true/> | <false/>
1691 </dict>
1692 ```
1693 #### policies.json
1694 ```
1695 {
1696   "policies": {
1697     "DisableSystemAddonUpdate": true | false
1698   }
1699 }
1700 ```
1701 ### DisableTelemetry
1702 Prevent the upload of telemetry data.
1703
1704 As of Firefox 83 and Firefox ESR 78.5, local storage of telemetry data is disabled as well.
1705
1706 Mozilla recommends that you do not disable telemetry. Information collected through telemetry helps us build a better product for businesses like yours.
1707
1708 **Compatibility:** Firefox 60, Firefox ESR 60\
1709 **CCK2 Equivalent:** `disableTelemetry`\
1710 **Preferences Affected:** `datareporting.healthreport.uploadEnabled,datareporting.policy.dataSubmissionEnabled,toolkit.telemetry.archive.enabled`
1711
1712 #### Windows (GPO)
1713 ```
1714 Software\Policies\Mozilla\Firefox\DisableTelemetry = 0x1 | 0x0
1715 ```
1716 #### Windows (Intune)
1717 OMA-URI:
1718 ```
1719 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableTelemetry
1720 ```
1721 Value (string):
1722 ```
1723 <enabled/> or <disabled/>
1724 ```
1725 #### macOS
1726 ```
1727 <dict>
1728   <key>DisableTelemetry</key>
1729   <true/> | <false/>
1730 </dict>
1731 ```
1732 #### policies.json
1733 ```
1734 {
1735   "policies": {
1736     "DisableTelemetry": true | false
1737   }
1738 }
1739 ```
1740 ### DisplayBookmarksToolbar
1741 Set the initial state of the bookmarks toolbar. A user can still hide it and it will stay hidden.
1742
1743 **Compatibility:** Firefox 60, Firefox ESR 60\
1744 **CCK2 Equivalent:** `displayBookmarksToolbar`\
1745 **Preferences Affected:** N/A
1746
1747 #### Windows (GPO)
1748 ```
1749 Software\Policies\Mozilla\Firefox\DisplayBookmarksToolbar = 0x1 | 0x0
1750 ```
1751 #### Windows (Intune)
1752 OMA-URI:
1753 ```
1754 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisplayBookmarksToolbar
1755 ```
1756 Value (string):
1757 ```
1758 <enabled/> or <disabled/>
1759 ```
1760 #### macOS
1761 ```
1762 <dict>
1763   <key>DisplayBookmarksToolbar</key>
1764   <true/> | <false/>
1765 </dict>
1766 ```
1767 #### policies.json
1768 ```
1769 {
1770   "policies": {
1771     "DisplayBookmarksToolbar": true | false
1772   }
1773 }
1774 ```
1775 ### DisplayMenuBar (Deprecated)
1776 Set the initial state of the menubar. A user can still hide it and it will stay hidden.
1777
1778 **Compatibility:** Firefox 60, Firefox ESR 60 (Windows, some Linux)\
1779 **CCK2 Equivalent:** `displayMenuBar`\
1780 **Preferences Affected:** N/A
1781
1782 #### Windows (GPO)
1783 ```
1784 Software\Policies\Mozilla\Firefox\DisplayMenuBar = 0x1 | 0x0
1785 ```
1786 #### macOS
1787 ```
1788 <dict>
1789   <key>DisplayMenuBar</key>
1790   <true/> | <false/>
1791 </dict>
1792 ```
1793 #### policies.json
1794 ```
1795 {
1796   "policies": {
1797     "DisplayMenuBar": true | false
1798   }
1799 }
1800 ```
1801 ### DisplayMenuBar
1802 Set the state of the menubar.
1803
1804 `always` means the menubar is shown and cannot be hidden.
1805
1806 `never` means the menubar is hidden and cannot be shown.
1807
1808 `default-on` means the menubar is on by default but can be hidden.
1809
1810 `default-off` means the menubar is off by default but can be shown.
1811
1812 **Compatibility:** Firefox 73, Firefox ESR 68.5 (Windows, some Linux)\
1813 **CCK2 Equivalent:** `displayMenuBar`\
1814 **Preferences Affected:** N/A
1815
1816 #### Windows (GPO)
1817 ```
1818 Software\Policies\Mozilla\Firefox\DisplayMenuBar = "always", "never", "default-on", "default-off"
1819 ```
1820 #### Windows (Intune)
1821 OMA-URI:
1822 ```
1823 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisplayMenuBar_Enum
1824 ```
1825 Value (string):
1826 ```
1827 <enabled/>
1828 <data id="DisplayMenuBar" value="always | never | default-on | default-off"/>
1829 ```
1830 #### macOS
1831 ```
1832 <dict>
1833   <key>DisplayMenuBar</key>
1834   <string>always | never | default-on | default-off</string>
1835 </dict>
1836 ```
1837 #### policies.json
1838 ```
1839 {
1840   "policies": {
1841     "DisplayMenuBar": "always", "never", "default-on", "default-off"
1842   }
1843 }
1844 ```
1845 ### DNSOverHTTPS
1846 Configure DNS over HTTPS.
1847
1848 `Enabled` determines whether DNS over HTTPS is enabled
1849
1850 `ProviderURL` is a URL to another provider.
1851
1852 `Locked` prevents the user from changing DNS over HTTPS preferences.
1853
1854 `ExcludedDomains` excludes domains from DNS over HTTPS.
1855
1856 **Compatibility:** Firefox 63, Firefox ESR 68 (ExcludedDomains added in 75/68.7)\
1857 **CCK2 Equivalent:** N/A\
1858 **Preferences Affected:** `network.trr.mode`,`network.trr.uri`
1859
1860 #### Windows (GPO)
1861 ```
1862 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\Enabled = 0x1 | 0x0
1863 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\ProviderURL = "URL_TO_ALTERNATE_PROVIDER"
1864 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\Locked = 0x1 | 0x0
1865 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\ExcludedDomains\1 = "example.com"
1866 ```
1867 #### Windows (Intune)
1868 OMA-URI:
1869 ```
1870 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_Enabled
1871 ```
1872 Value (string):
1873 ```
1874 <enabled/> or <disabled/>
1875 ```
1876 OMA-URI:
1877 ```
1878 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_ProviderURL
1879 ```
1880 Value (string):
1881 ```
1882 <enabled/>
1883 <data id="String" value="URL_TO_ALTERNATE_PROVIDER"/>
1884 ```
1885 OMA-URI:
1886 ```
1887 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_Locked
1888 ```
1889 Value (string):
1890 ```
1891 <enabled/> or <disabled/>
1892 ```
1893 OMA-URI:
1894 ```
1895 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_ExcludedDomains
1896 ```
1897 Value (string):
1898 ```
1899 <enabled/>
1900 <data id="List" value="1&#xF000;example.com"/>
1901 ```
1902 #### macOS
1903 ```
1904 <dict>
1905   <key>DNSOverHTTPS</key>
1906   <dict>
1907     <key>Enabled</key>
1908     <true/> | <false/>
1909     <key>ProviderURL</key>
1910     <string>URL_TO_ALTERNATE_PROVIDER</string>
1911     <key>Locked</key>
1912     <true/> | <false/>
1913     <key>ExcludedDomains</key>
1914     <array>
1915       <string>example.com</string>
1916     </array>
1917   </dict>
1918 </dict>
1919 ```
1920 #### policies.json
1921 ```
1922 {
1923   "policies": {
1924     "DNSOverHTTPS": {
1925       "Enabled":  true | false,
1926       "ProviderURL": "URL_TO_ALTERNATE_PROVIDER",
1927       "Locked": true | false,
1928       "ExcludedDomains": ["example.com"]
1929     }
1930   }
1931 }
1932 ```
1933 ### DontCheckDefaultBrowser
1934 Don't check if Firefox is the default browser at startup.
1935
1936 **Compatibility:** Firefox 60, Firefox ESR 60\
1937 **CCK2 Equivalent:** `dontCheckDefaultBrowser`\
1938 **Preferences Affected:** `browser.shell.checkDefaultBrowser`
1939
1940 #### Windows (GPO)
1941 ```
1942 Software\Policies\Mozilla\Firefox\DontCheckDefaultBrowser = 0x1 | 0x0
1943 ```
1944 #### Windows (Intune)
1945 OMA-URI:
1946 ```
1947 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DontCheckDefaultBrowser
1948 ```
1949 Value (string):
1950 ```
1951 <enabled/> or <disabled/>
1952 ```
1953 #### macOS
1954 ```
1955 <dict>
1956   <key>DontCheckDefaultBrowser</key>
1957   <true/> | <false/>
1958 </dict>
1959 ```
1960 #### policies.json
1961 ```
1962 {
1963   "policies": {
1964     "DontCheckDefaultBrowser": true | false
1965   }
1966 }
1967 ```
1968 ### DefaultDownloadDirectory
1969 Set the default download directory.
1970
1971 You can use ${home} for the native home directory.
1972
1973 **Compatibility:** Firefox 68, Firefox ESR 68\
1974 **CCK2 Equivalent:** N/A\
1975 **Preferences Affected:** `browser.download.dir`,`browser.download.folderList`
1976
1977 #### Windows (GPO)
1978 ```
1979 Software\Policies\Mozilla\Firefox\DefaultDownloadDirectory = "${home}\Downloads"
1980 ```
1981 #### Windows (Intune)
1982 OMA-URI:
1983 ```
1984 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DefaultDownloadDirectory
1985 ```
1986 Value (string):
1987 ```
1988 <enabled/>
1989 <data id="Preferences_String" value="${home}\Downloads"/>
1990 ```
1991 #### macOS
1992 ```
1993 <dict>
1994   <key>DefaultDownloadDirectory</key>
1995   <string>${home}/Downloads</string>
1996 </dict>
1997 ```
1998 #### policies.json (macOS and Linux)
1999 ```
2000 {
2001   "policies": {
2002     "DefaultDownloadDirectory": "${home}/Downloads"
2003 }
2004 ```
2005 #### policies.json (Windows)
2006 ```
2007 {
2008   "policies": {
2009     "DefaultDownloadDirectory": "${home}\\Downloads"
2010 }
2011 ```
2012 ### DownloadDirectory
2013 Set and lock the download directory.
2014
2015 You can use ${home} for the native home directory.
2016
2017 **Compatibility:** Firefox 68, Firefox ESR 68\
2018 **CCK2 Equivalent:** N/A\
2019 **Preferences Affected:** `browser.download.dir`,`browser.download.folderList`,`browser.download.useDownloadDir`
2020
2021 #### Windows (GPO)
2022 ```
2023 Software\Policies\Mozilla\Firefox\DownloadDirectory = "${home}\Downloads"
2024 ```
2025 #### Windows (Intune)
2026 OMA-URI:
2027 ```
2028 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DownloadDirectory
2029 ```
2030 Value (string):
2031 ```
2032 <enabled/>
2033 <data id="Preferences_String" value="${home}\Downloads"/>
2034 ```
2035 #### macOS
2036 ```
2037 <dict>
2038   <key>DownloadDirectory</key>
2039   <string>${home}/Downloads</string>
2040 </dict>
2041 ```
2042 #### policies.json (macOS and Linux)
2043 ```
2044 {
2045   "policies": {
2046     "DownloadDirectory": "${home}/Downloads"
2047 }
2048 ```
2049 #### policies.json (Windows)
2050 ```
2051 {
2052   "policies": {
2053     "DownloadDirectory": "${home}\\Downloads"
2054 }
2055 ```
2056 ### EnableTrackingProtection
2057 Configure tracking protection.
2058
2059 If this policy is not configured, tracking protection is not enabled by default in the browser, but it is enabled by default in private browsing and the user can change it.
2060
2061 If `Value` is set to false, tracking protection is disabled and locked in both the regular browser and private browsing.
2062
2063 If `Value` is set to true, tracking protection is enabled by default in both the regular browser and private browsing and the `Locked` value determines whether or not a user can change it.
2064
2065 If `Cryptomining` is set to true, cryptomining scripts on websites are blocked.
2066
2067 If `Fingerprinting` is set to true, fingerprinting scripts on websites are blocked.
2068
2069 `Exceptions` are origins for which tracking protection is not enabled.
2070
2071 **Compatibility:** Firefox 60, Firefox ESR 60 (Cryptomining and Fingerprinting added in 70/68.2, Exceptions added in 73/68.5)\
2072 **CCK2 Equivalent:** N/A\
2073 **Preferences Affected:** `privacy.trackingprotection.enabled`,`privacy.trackingprotection.pbmode.enabled`,`privacy.trackingprotection.cryptomining.enabled`,`privacy.trackingprotection.fingerprinting.enabled`
2074
2075 #### Windows (GPO)
2076 ```
2077 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Value = 0x1 | 0x0
2078 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Locked = 0x1 | 0x0
2079 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Cryptomining = 0x1 | 0x0
2080 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Fingerprinting = 0x1 | 0x0
2081 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Exceptions\1 = "https://example.com"
2082 ```
2083 #### Windows (Intune)
2084 OMA-URI:
2085 ```
2086 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/A_TrackingProtection_Value
2087 ```
2088 Value (string):
2089 ```
2090 <enabled/> or <disabled/>
2091 ```
2092 OMA-URI:
2093 ```
2094 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/B_TrackingProtection_Cryptomining
2095 ```
2096 Value (string):
2097 ```
2098 <enabled/> or <disabled/>
2099 ```
2100 OMA-URI:
2101 ```
2102 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/C_TrackingProtection_Fingerprinting
2103 ```
2104 Value (string):
2105 ```
2106 <enabled/> or <disabled/>
2107 ```
2108 OMA-URI:
2109 ```
2110 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/D_TrackingProtection_Exceptions
2111 ```
2112 Value (string):
2113 ```
2114 <data id="TrackingProtection_Exceptions" value="1&#xF000;https://example.com"/>
2115 ```
2116 OMA-URI:
2117 ```
2118 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/E_TrackingProtection_Locked
2119 ```
2120 Value (string):
2121 ```
2122 <enabled/> or <disabled/>
2123 ```
2124 #### macOS
2125 ```
2126 <dict>
2127   <key>EnableTrackingProtection</key>
2128   <dict>
2129     <key>Value</key>
2130     <true/> | <false/>
2131     <key>Locked</key>
2132     <true/> | <false/>
2133     <key>Cryptomining</key>
2134     <true/> | <false/>
2135     <key>Fingerprinting</key>
2136     <true/> | <false/>
2137     <key>Exceptions</key>
2138     <array>
2139       <string>https://example.com</string>
2140     </array>
2141   </dict>
2142 </dict>
2143 ```
2144 #### policies.json
2145 ```
2146 {
2147   "policies": {
2148     "EnableTrackingProtection": {
2149       "Value": true | false,
2150       "Locked": true | false,
2151       "Cryptomining": true | false,
2152       "Fingerprinting": true | false,
2153       "Exceptions": ["https://example.com"]
2154     }
2155 }
2156 ```
2157 ### EncryptedMediaExtensions
2158 Enable or disable Encrypted Media Extensions and optionally lock it.
2159
2160 If `Enabled` is set to false, encrypted media extensions (like Widevine) are not downloaded by Firefox unless the user consents to installing them.
2161
2162 If `Locked` is set to true and `Enabled` is set to false, Firefox will not download encrypted media extensions (like Widevine) or ask the user to install them.
2163
2164 **Compatibility:** Firefox 77, Firefox ESR 68.9\
2165 **CCK2 Equivalent:** N/A\
2166 **Preferences Affected:** `media.eme.enabled`
2167
2168 #### Windows (GPO)
2169 ```
2170 Software\Policies\Mozilla\Firefox\EncryptedMediaExtensions\Enabled = 0x1 | 0x0
2171 Software\Policies\Mozilla\Firefox\EncryptedMediaExtensions\Locked = 0x1 | 0x0
2172 ```
2173 #### Windows (Intune)
2174 OMA-URI:
2175 ```
2176 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~EncryptedMediaExtensions/EncryptedMediaExtensions_Enabled
2177 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~EncryptedMediaExtensions/EncryptedMediaExtensions_Locked
2178 ```
2179 Value (string):
2180 ```
2181 <enabled/>or <disabled/>
2182 ```
2183 #### macOS
2184 ```
2185 <dict>
2186   <key>EncryptedMediaExtensions</key>
2187   <dict>
2188     <key>Enabled</key>
2189     <true/> | <false/>
2190     <key>Locked</key>
2191     <true/> | <false/>
2192   </dict>
2193 </dict>
2194 ```
2195 #### policies.json
2196 ```
2197 {
2198   "policies": {
2199     "EncryptedMediaExtensions": {
2200       "Enabled": true | false,
2201       "Locked": true | false
2202     }
2203 }
2204 ```
2205 ### EnterprisePoliciesEnabled
2206 Enable policy support on macOS.
2207
2208 **Compatibility:** Firefox 63, Firefox ESR 60.3 (macOS only)\
2209 **CCK2 Equivalent:** N/A\
2210 **Preferences Affected:** N/A
2211
2212 #### macOS
2213 ```
2214 <dict>
2215   <key>EnterprisePoliciesEnabled</key>
2216   <true/>
2217 </dict>
2218 ```
2219 ### Extensions
2220 Control the installation, uninstallation and locking of extensions.
2221
2222 While this policy is not technically deprecated, it is recommended that you use the **[`ExtensionSettings`](#extensionsettings)** policy. It has the same functionality and adds more. It does not support native paths, though, so you'll have to use file:/// URLs.
2223
2224 `Install` is a list of URLs or native paths for extensions to be installed.
2225
2226 `Uninstall` is a list of extension IDs that should be uninstalled if found.
2227
2228 `Locked` is a list of extension IDs that the user cannot disable or uninstall.
2229
2230 **Compatibility:** Firefox 60, Firefox ESR 60\
2231 **CCK2 Equivalent:** `addons`\
2232 **Preferences Affected:** N/A
2233
2234 #### Windows (GPO)
2235 ```
2236 Software\Policies\Mozilla\Firefox\Extensions\Install\1 = "https://addons.mozilla.org/firefox/downloads/somefile.xpi"
2237 Software\Policies\Mozilla\Firefox\Extensions\Install\2 = "//path/to/xpi"
2238 Software\Policies\Mozilla\Firefox\Extensions\Uninstall\1 = "bad_addon_id@mozilla.org"
2239 Software\Policies\Mozilla\Firefox\Extensions\Locked\1 = "addon_id@mozilla.org"
2240 ```
2241 #### Windows (Intune)
2242 OMA-URI:
2243 ```
2244 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/Extensions_Install
2245 ```
2246 Value (string):
2247 ```
2248 <enabled/>
2249 <data id="Extensions" value="1&#xF000;https://addons.mozilla.org/firefox/downloads/somefile.xpi&#xF000;2&#xF000;//path/to/xpi"/>
2250 ```
2251 OMA-URI:
2252 ```
2253 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/Extensions_Uninstall
2254 ```
2255 Value (string):
2256 ```
2257 <enabled/>
2258 <data id="Extensions" value="1&#xF000;bad_addon_id@mozilla.org"/>
2259 ```
2260 OMA-URI:
2261 ```
2262 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/Extensions_Locked
2263 ```
2264 Value (string):
2265 ```
2266 <enabled/>
2267 <data id="Extensions" value="1&#xF000;addon_id@mozilla.org"/>
2268 ```
2269 #### macOS
2270 ```
2271 <dict>
2272   <key>Extensions</key>
2273   <dict>
2274     <key>Install</key>
2275     <array>
2276       <string>https://addons.mozilla.org/firefox/downloads/somefile.xpi</string>
2277       <string>//path/to/xpi</string>
2278     </array>
2279     <key>Uninstall</key>
2280     <array>
2281       <string>bad_addon_id@mozilla.org</string>
2282     </array>
2283     <key>Locked</key>
2284     <array>
2285       <string>addon_id@mozilla.org</string>
2286     </array>
2287   </dict>
2288 </dict>
2289 ```
2290 #### policies.json
2291 ```
2292 {
2293   "policies": {
2294     "Extensions": {
2295       "Install": ["https://addons.mozilla.org/firefox/downloads/somefile.xpi", "//path/to/xpi"],
2296       "Uninstall": ["bad_addon_id@mozilla.org"],
2297       "Locked":  ["addon_id@mozilla.org"]
2298     }
2299   }
2300 }
2301 ```
2302 ### ExtensionSettings
2303 Manage all aspects of extensions. This policy is based heavily on the [Chrome policy](https://dev.chromium.org/administrators/policy-list-3/extension-settings-full) of the same name.
2304
2305 This policy maps an extension ID to its configuration. With an extension ID, the configuration will be applied to the specified extension only. A default configuration can be set for the special ID "*", which will apply to all extensions that don't have a custom configuration set in this policy.
2306
2307 To obtain an extension ID, install the extension and go to about:support. You will see the ID in the Extensions section. I've also created an extension that makes it easy to find the ID of extensions on AMO. You can download it [here](https://github.com/mkaply/queryamoid/releases/tag/v0.1).
2308
2309 The configuration for each extension is another dictionary that can contain the fields documented below.
2310
2311 | Name | Description |
2312 | --- | --- |
2313 | `installation_mode` | Maps to a string indicating the installation mode for the extension. The valid strings are `allowed`,`blocked`,`force_installed`, and `normal_installed`.
2314 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`allowed` | Allows the extension to be installed by the user. This is the default behavior. There is no need for an install_url; it will automatically be allowed based on the ID.
2315 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`blocked`| Blocks installation of the extension and removes it from the device if already installed.
2316 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`force_installed`| The extension is automatically installed and can't be removed by the user. This option is not valid for the default configuration and requires an install_url.
2317 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`normal_installed`| The extension is automatically installed but can be disabled by the user. This option is not valid for the default configuration and requires an install_url.
2318 | `install_url`| Maps to a URL indicating where Firefox can download a force_installed or normal_installed extension.  If installing from the local file system, use a [```file:///``` URL](https://en.wikipedia.org/wiki/File_URI_scheme). If installing from the addons.mozilla.org, use the following URL (substituting SHORT_NAME from the URL on AMO), https://addons.mozilla.org/firefox/downloads/latest/SHORT_NAME/latest.xpi. Languages packs are available from https://releases.mozilla.org/pub/firefox/releases/VERSION/PLATFORM/xpi/LANGUAGE.xpi. If you need to update the extension, you can change the name of the extension and it will be automatically updated. Extensions installed from file URLs will additional be updated when their internal version changes.
2319 | `install_sources` | A list of sources from which installing extensions is allowed. **This is unnecessary if you are only allowing the installation of certain extensions by ID.** Each item in this list is an extension-style match pattern. Users will be able to easily install items from any URL that matches an item in this list. Both the location of the *.xpi file and the page where the download is started from (i.e.  the referrer) must be allowed by these patterns. This setting can be used only for the default configuration.
2320 | `allowed_types` | This setting whitelists the allowed types of extension/apps that can be installed in Firefox. The value is a list of strings, each of which should be one of the following: "extension", "theme", "dictionary", "locale" This setting can be used only for the default configuration.
2321 | `blocked_install_message` | This maps to a string specifying the error message to display to users if they're blocked from installing an extension. This setting allows you to append text to the generic error message displayed when the extension is blocked. This could be be used to direct users to your help desk, explain why a particular extension is blocked, or something else. This setting can be used only for the default configuration.
2322 | `restricted_domains` | An array of domains on which content scripts can't be run. This setting can be used only for the default configuration.
2323
2324 **Compatibility:** Firefox 69, Firefox ESR 68.1 (As of Firefox 85, Firefox ESR 78.7, installing a theme makes it the default.)\
2325 **CCK2 Equivalent:** N/A\
2326 **Preferences Affected:** N/A
2327
2328 #### Windows (GPO)
2329 Software\Policies\Mozilla\Firefox\ExtensionSettings (REG_MULTI_SZ) =
2330 ```
2331 {
2332   "*": {
2333     "blocked_install_message": "Custom error message.",
2334     "install_sources": ["about:addons","https://addons.mozilla.org/"],
2335     "installation_mode": "blocked",
2336     "allowed_types": ["extension"]
2337   },
2338   "uBlock0@raymondhill.net": {
2339     "installation_mode": "force_installed",
2340     "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
2341   },
2342   "https-everywhere@eff.org": {
2343     "installation_mode": "allowed"
2344   }
2345 }
2346 ```
2347 #### Windows (Intune)
2348 OMA-URI:
2349 ```
2350 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/ExtensionSettings
2351 ```
2352 Value (string):
2353 ```
2354 <enabled/>
2355 <data id="ExtensionSettings" value='
2356 {
2357   "*": {
2358     "blocked_install_message": "Custom error message.",
2359     "install_sources": ["about:addons","https://addons.mozilla.org/"],
2360     "installation_mode": "blocked",
2361     "allowed_types": ["extension"]
2362   },
2363   "uBlock0@raymondhill.net": {
2364     "installation_mode": "force_installed",
2365     "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
2366   },
2367     "https-everywhere@eff.org": {
2368     "installation_mode": "allowed"
2369   }
2370 }'/>
2371 ```
2372 #### macOS
2373 ```
2374 <dict>
2375   <key>ExtensionSettings</key>
2376   <dict>
2377     <key>*</key>
2378     <dict>
2379       <key>blocked_install_message</key>
2380       <string>Custom error message.</string>
2381       <key>install_sources</key>
2382       <array>
2383         <string>about:addons</string>
2384         <string>https://addons.mozilla.org/</string>
2385       </array>
2386       <key>installation_mode</key>
2387       <string>blocked</string>
2388       <key>allowed_types</key>
2389       <array>
2390         <string>extension</string>
2391       </array>
2392     </dict>
2393     <key>uBlock0@raymondhill.net</key>
2394     <dict>
2395       <key>installation_mode</key>
2396        <string>force_installed</string>
2397       <key>install_url</key>
2398       <string>https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi</string>
2399     </dict>
2400     <key>https-everywhere@eff.org</key>
2401     <dict>
2402       <key>installation_mode</key>
2403        <string>allowed</string>
2404     </dict>
2405   </dict>
2406 </dict>
2407 ```
2408 #### policies.json
2409 ```
2410 {
2411   "policies": {
2412     "ExtensionSettings": {
2413       "*": {
2414         "blocked_install_message": "Custom error message.",
2415         "install_sources": ["about:addons","https://addons.mozilla.org/"],
2416         "installation_mode": "blocked",
2417         "allowed_types": ["extension"]
2418       },
2419       "uBlock0@raymondhill.net": {
2420         "installation_mode": "force_installed",
2421         "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
2422       },
2423       "https-everywhere@eff.org": {
2424         "installation_mode": "allowed"
2425       }
2426     }
2427   }
2428 }
2429 ```
2430 ### ExtensionUpdate
2431 Control extension updates.
2432
2433 **Compatibility:** Firefox 67, Firefox ESR 60.7\
2434 **CCK2 Equivalent:** N/A\
2435 **Preferences Affected:** `extensions.update.enabled`
2436
2437 #### Windows (GPO)
2438 ```
2439 Software\Policies\Mozilla\Firefox\ExtensionUpdate = 0x1 | 0x0
2440 ```
2441 #### Windows (Intune)
2442 OMA-URI:
2443 ```
2444 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/ExtensionUpdate
2445 ```
2446 Value (string):
2447 ```
2448 <enabled/> or <disabled/>
2449 ```
2450 #### macOS
2451 ```
2452 <dict>
2453   <key>ExtensionUpdate</key>
2454   <true/> | <false/>
2455 </dict>
2456 ```
2457 #### policies.json
2458 ```
2459 {
2460   "policies": {
2461     "ExtensionUpdate": true | false
2462   }
2463 }
2464 ```
2465 ### FlashPlugin
2466 Configure the default Flash plugin policy as well as origins for which Flash is allowed.
2467
2468 `Allow` is a list of origins where Flash are allowed.
2469
2470 `Block` is a list of origins where Flash is not allowed.
2471
2472 `Default` determines whether or not Flash is allowed by default.
2473
2474 `Locked` prevents the user from changing Flash preferences.
2475
2476 **Compatibility:** Firefox 60, Firefox ESR 60\
2477 **CCK2 Equivalent:** `permissions.plugin`\
2478 **Preferences Affected:** `plugin.state.flash`
2479
2480 #### Windows (GPO)
2481 ```
2482 Software\Policies\Mozilla\Firefox\FlashPlugin\Allow\1 = "https://example.org"
2483 Software\Policies\Mozilla\Firefox\FlashPlugin\Block\1 = "https://example.edu"
2484 Software\Policies\Mozilla\Firefox\FlashPlugin\Default = 0x1 | 0x0
2485 Software\Policies\Mozilla\Firefox\FlashPlugin\Locked = 0x1 | 0x0
2486 ```
2487 #### Windows (Intune)
2488 OMA-URI:
2489 ```
2490 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Flash/FlashPlugin_Allow
2491 ```
2492 Value (string):
2493 ```
2494 <enabled/>
2495 <data id="Permissions" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
2496 ```
2497 OMA-URI:
2498 ```
2499 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Flash/FlashPlugin_Locked
2500 ```
2501 Value (string):
2502 ```
2503 <enabled/> or <disabled/>
2504 ```
2505 OMA-URI:
2506 ```
2507 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Flash/FlashPlugin_Default
2508 ```
2509 Value (string):
2510 ```
2511 <enabled/> or <disabled/>
2512 ```
2513 #### macOS
2514 ```
2515 <dict>
2516   <key>FlashPlugin</key>
2517   <dict>
2518     <key>Allow</key>
2519     <array>
2520       <string>http://example.org</string>
2521     </array>
2522     <key>Block</key>
2523     <array>
2524       <string>http://example.edu</string>
2525     </array>
2526     <key>Default</key>
2527     <true/> | <false/>
2528     <key>Locked</key>
2529     <true/> | <false/>
2530   </dict>
2531 </dict>
2532 ```
2533 #### policies.json
2534 ```
2535 {
2536   "policies": {
2537     "FlashPlugin": {
2538       "Allow": ["http://example.org/"],
2539       "Block": ["http://example.edu/"],
2540       "Default": true | false,
2541       "Locked": true | false
2542     }
2543   }
2544 }
2545 ```
2546
2547
2548
2549 ### Handlers
2550 Configure default application handlers. This policy is based on the internal format of `handlers.json`.
2551
2552 You can configure handlers based on a mime type (`mimeTypes`), a file's extension (`extensions`), or a protocol (`schemes`).
2553
2554 Within each handler type, you specify the given mimeType/extension/scheme as a key and use the following subkeys to describe how it is handled.
2555
2556 | Name | Description |
2557 | --- | --- |
2558 | `action`| Can be either `saveToDisk`, `useHelperApp`, `useSystemDefault`.
2559 | `ask` | If `true`, the user is asked if what they want to do with the file. If `false`, the action is taken without user intervention.
2560 | `handlers` | An array of handlers with the first one being the default. If you don't want to have a default handler, use an empty object for the first handler. Choose between path or uriTemplate.
2561 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`name` | The display name of the handler (might not be used).
2562 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`path`| The native path to the executable to be used.
2563 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`uriTemplate`| A url to a web based application handler. The URL must be https and contain a %s to be used for substitution.
2564
2565 **Compatibility:** Firefox 78, Firefox ESR 78\
2566 **CCK2 Equivalent:** N/A\
2567 **Preferences Affected:** N/A
2568
2569 #### Windows (GPO)
2570 Software\Policies\Mozilla\Firefox\Handlers (REG_MULTI_SZ) =
2571 ```
2572 {
2573   "mimeTypes": {
2574     "application/msword": {
2575       "action": "useSystemDefault",
2576       "ask": true | false
2577     }
2578   },
2579   "schemes": {
2580     "mailto": {
2581       "action": "useHelperApp",
2582       "ask": true | false,
2583       "handlers": [{
2584         "name": "Gmail",
2585         "uriTemplate": "https://mail.google.com/mail/?extsrc=mailto&url=%s"
2586       }]
2587     }
2588   },
2589   "extensions": {
2590     "pdf": {
2591       "action": "useHelperApp",
2592       "ask": true | false,
2593       "handlers": [{
2594         "name": "Adobe Acrobat",
2595         "path": "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32.exe"
2596       }]
2597     }
2598   }
2599 }
2600 ```
2601 #### Windows (Intune)
2602 OMA-URI:
2603 ```
2604 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Handlers
2605 ```
2606 Value (string):
2607 ```
2608 <enabled/>
2609 <data id="Handlers" value='
2610 {
2611   "mimeTypes": {
2612     "application/msword": {
2613       "action": "useSystemDefault",
2614       "ask": true | false
2615     }
2616   },
2617   "schemes": {
2618     "mailto": {
2619       "action": "useHelperApp",
2620       "ask": true | false,
2621       "handlers": [{
2622         "name": "Gmail",
2623         "uriTemplate": "https://mail.google.com/mail/?extsrc=mailto&amp;url=%s"
2624       }]
2625     }
2626   },
2627   "extensions": {
2628     "pdf": {
2629       "action": "useHelperApp",
2630       "ask": true | false,
2631       "handlers": [{
2632         "name": "Adobe Acrobat",
2633         "path": "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32.exe"
2634       }]
2635     }
2636   }
2637 }
2638 '/>
2639 ```
2640 #### macOS
2641 ```
2642 <dict>
2643   <key>Handlers</key>
2644   <dict>
2645     <key>mimeTypes</key>
2646     <dict>
2647       <key>application/msword</key>
2648       <dict>
2649         <key>action</key>
2650         <string>useSystemDefault</string>
2651         <key>ask</key>
2652         <true/> | <false/>
2653       </dict>
2654     </dict>
2655     <key>schemes</key>
2656     <dict>
2657       <key>mailto</key>
2658       <dict>
2659         <key>action</key>
2660         <string>useHelperApp</string>
2661         <key>ask</key>
2662         <true/> | <false/>
2663         <key>handlers</key>
2664         <array>
2665           <dict>
2666             <key>name</key>
2667             <string>Gmail</string>
2668             <key>uriTemplate</key>
2669             <string>https://mail.google.com/mail/?extsrc=mailto&url=%s</string>
2670           </dict>
2671         </array>
2672       </dict>
2673     </dict>
2674     <key>extensions</key>
2675     <dict>
2676       <key>pdf</key>
2677       <dict>
2678         <key>action</key>
2679         <string>useHelperApp</string>
2680         <key>ask</key>
2681         <true/> | <false/>
2682         <key>handlers</key>
2683         <array>
2684           <dict>
2685             <key>name</key>
2686             <string>Adobe Acrobat</string>
2687             <key>path</key>
2688             <string>/System/Applications/Preview.app</string>
2689           </dict>
2690         </array>
2691       </dict>
2692     </dict>
2693   </dict>
2694 </dict>
2695 ```
2696 #### policies.json
2697 ```
2698 {
2699   "policies": {
2700     "Handlers": {
2701       "mimeTypes": {
2702         "application/msword": {
2703           "action": "useSystemDefault",
2704           "ask": false
2705         }
2706       },
2707       "schemes": {
2708         "mailto": {
2709           "action": "useHelperApp",
2710           "ask": true | false,
2711           "handlers": [{
2712             "name": "Gmail",
2713             "uriTemplate": "https://mail.google.com/mail/?extsrc=mailto&url=%s"
2714           }]
2715         }
2716       },
2717       "extensions": {
2718         "pdf": {
2719           "action": "useHelperApp",
2720           "ask": true | false,
2721           "handlers": [{
2722             "name": "Adobe Acrobat",
2723             "path": "/usr/bin/acroread"
2724           }]
2725         }
2726       }
2727     }
2728   }
2729 }
2730 ```
2731 ### FirefoxHome
2732 Customize the Firefox Home page.
2733
2734 **Compatibility:** Firefox 68, Firefox ESR 68\
2735 **CCK2 Equivalent:** N/A\
2736 **Preferences Affected:** `browser.newtabpage.activity-stream.showSearch`,`browser.newtabpage.activity-stream.feeds.topsites`,`browser.newtabpage.activity-stream.feeds.section.highlights`,`browser.newtabpage.activity-stream.feeds.section.topstories`,`browser.newtabpage.activity-stream.feeds.snippets`
2737
2738 #### Windows (GPO)
2739 ```
2740 Software\Policies\Mozilla\Firefox\FirefoxHome\Search = 0x1 | 0x0
2741 Software\Policies\Mozilla\Firefox\FirefoxHome\TopSites = 0x1 | 0x0
2742 Software\Policies\Mozilla\Firefox\FirefoxHome\Highlights = 0x1 | 0x0
2743 Software\Policies\Mozilla\Firefox\FirefoxHome\Pocket = 0x1 | 0x0
2744 Software\Policies\Mozilla\Firefox\FirefoxHome\Snippets = 0x1 | 0x0
2745 Software\Policies\Mozilla\Firefox\FirefoxHome\Locked = 0x1 | 0x0
2746 ```
2747 #### Windows (Intune)
2748 OMA-URI:
2749 ```
2750 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/CustomizeFirefoxHome
2751 ```
2752 Value (string):
2753 ```
2754 <enabled/>
2755 <data id="FirefoxHome_Search"  value="true | false"/>
2756 <data id="FirefoxHome_TopSites"  value="true | false"/>
2757 <data id="FirefoxHome_Highlights"  value="true | false"/>
2758 <data id="FirefoxHome_Pocket"  value="true | false"/>
2759 <data id="FirefoxHome_Snippets"  value="true | false"/>
2760 <data id="FirefoxHome_Locked"  value="true | false"/>
2761 ```
2762 #### macOS
2763 ```
2764 <dict>
2765   <key>FirefoxHome</key>
2766   <dict>
2767     <key>Search</key>
2768     <true/> | <false/>
2769     <key>TopSites</key>
2770     <true/> | <false/>
2771     <key>Highlights</key>
2772     <true/> | <false/>
2773     <key>Pocket</key>
2774     <true/> | <false/>
2775     <key>Snippets</key>
2776     <true/> | <false/>
2777     <key>Locked</key>
2778     <true/> | <false/>
2779   </dict>
2780 </dict>
2781 ```
2782 #### policies.json
2783 ```
2784 {
2785   "policies": {
2786     "FirefoxHome": {
2787       "Search": true | false,
2788       "TopSites": true | false,
2789       "Highlights": true | false,
2790       "Pocket": true | false,
2791       "Snippets": true | false,
2792       "Locked": true | false
2793     }
2794   }
2795 }
2796 ```
2797 ### HardwareAcceleration
2798 Control hardware acceleration.
2799
2800 **Compatibility:** Firefox 60, Firefox ESR 60\
2801 **CCK2 Equivalent:** N/A\
2802 **Preferences Affected:** `layers.acceleration.disabled`
2803
2804 #### Windows (GPO)
2805 ```
2806 Software\Policies\Mozilla\Firefox\HardwareAcceleration = 0x1 | 0x0
2807 ```
2808 #### Windows (Intune)
2809 OMA-URI:
2810 ```
2811 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/HardwareAcceleration
2812 ```
2813 Value (string):
2814 ```
2815 <enabled/> or <disabled/>
2816 ```
2817 #### macOS
2818 ```
2819 <dict>
2820   <key>HardwareAcceleration</key>
2821   <true/> | <false/>
2822 </dict>
2823 ```
2824 #### policies.json
2825 ```
2826 {
2827   "policies": {
2828     "HardwareAcceleration": true | false
2829   }
2830 }
2831 ```
2832 ### Homepage
2833 Configure the default homepage and how Firefox starts.
2834
2835 `URL` is the default homepage.
2836
2837 `Locked` prevents the user from changing homepage preferences.
2838
2839 `Additional` allows for more than one homepage.
2840
2841 `StartPage` is how Firefox starts. The choices are no homepage, the default homepage or the previous session.
2842
2843 With Firefox 78, an additional option as added for `Startpage`, `homepage-locked`. If this is value is set for the Startpage, the user will always get the homepage at startup and cannot choose to restore their session.
2844
2845 **Compatibility:** Firefox 60, Firefox ESR 60 (StartPage was added in Firefox 60, Firefox ESR 60.4, homepage-locked added in Firefox 78)\
2846 **CCK2 Equivalent:** `homePage`,`lockHomePage`\
2847 **Preferences Affected:** `browser.startup.homepage`,`browser.startup.page`
2848
2849 #### Windows (GPO)
2850 ```
2851 Software\Policies\Mozilla\Firefox\Homepage\URL = "https://example.com"
2852 Software\Policies\Mozilla\Firefox\Homepage\Locked = 0x1 | 0x0
2853 Software\Policies\Mozilla\Firefox\Homepage\Additional\1 = "https://example.org"
2854 Software\Policies\Mozilla\Firefox\Homepage\Additional\2 = "https://example.edu"
2855 Software\Policies\Mozilla\Firefox\Homepage\StartPage = "none" | "homepage" | "previous-session" | "homepage-locked"
2856 ```
2857 #### Windows (Intune)
2858 OMA-URI:
2859 ```
2860 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageURL
2861 ```
2862 Value (string):
2863 ```
2864 <enabled/>
2865
2866 <data id="HomepageURL" value="https://example.com"/>
2867 <data id="HomepageLocked" value="true | false"/>
2868 ```
2869 OMA-URI:
2870 ```
2871 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageAdditional
2872 ```
2873 Value (string):
2874 ```
2875 <enabled/>
2876
2877 <data id="HomepageAdditional" value="1&#xF000;http://example.org&#xF000;2&#xF000;http://example.edu"/>
2878 ```
2879 OMA-URI:
2880 ```
2881 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageStartPage
2882 ```
2883 Value (string):
2884 ```
2885 <enabled/>
2886
2887 <data id="StartPage" value="none | homepage | previous-session"/>
2888 ```
2889 #### macOS
2890 ```
2891 <dict>
2892   <key>Homepage</key>
2893   <dict>
2894     <key>URL</key>
2895     <string>http://example.com</string>
2896     <key>Locked</key>
2897     <true/> | <false/>
2898     <key>Additional</key>
2899     <array>
2900       <string>http://example.org</string>
2901       <string>http://example.edu</string>
2902     </array>
2903     <key>StartPage</key>
2904     <string>none | homepage | previous-session | homepage-locked</string>
2905   </dict>
2906 </dict>
2907 ```
2908 #### policies.json
2909 ```
2910 {
2911   "policies": {
2912     "Homepage": {
2913       "URL": "http://example.com/",
2914       "Locked": true | false,
2915       "Additional": ["http://example.org/",
2916                      "http://example.edu/"],
2917       "StartPage": "none" | "homepage" | "previous-session" | "homepage-locked"
2918     }
2919   }
2920 }
2921 ```
2922 ### InstallAddonsPermission
2923 Configure the default extension install policy as well as origins for extension installs are allowed. This policy does not override turning off all extension installs.
2924
2925 `Allow` is a list of origins where extension installs are allowed.
2926
2927 `Default` determines whether or not extension installs are allowed by default.
2928
2929 **Compatibility:** Firefox 60, Firefox ESR 60\
2930 **CCK2 Equivalent:** `permissions.install`\
2931 **Preferences Affected:** `xpinstall.enabled`
2932
2933 #### Windows (GPO)
2934 ```
2935 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Allow\1 = "https://example.org"
2936 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Allow\2 = "https://example.edu"
2937 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Default = 0x1 | 0x0
2938 ```
2939 #### Windows (Intune)
2940 OMA-URI:
2941 ```
2942 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Addons/InstallAddonsPermission_Allow
2943 ```
2944 Value (string):
2945 ```
2946 <enabled/>
2947 <data id="Permissions" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
2948 ```
2949 OMA-URI:
2950 ```
2951 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Addons/InstallAddonsPermission_Default
2952 ```
2953 Value (string):
2954 ```
2955 <enabled/>
2956 ```
2957 #### macOS
2958 ```
2959 <dict>
2960   <key>InstallAddonsPermission</key>
2961   <dict>
2962     <key>Allow</key>
2963     <array>
2964       <string>http://example.org</string>
2965       <string>http://example.edu</string>
2966     </array>
2967     <key>Default</key>
2968     <true/> | <false/>
2969   </dict>
2970 </dict>
2971 ```
2972 #### policies.json
2973 ```
2974 {
2975   "policies": {
2976     "InstallAddonsPermission": {
2977       "Allow": ["http://example.org/",
2978                 "http://example.edu/"],
2979       "Default": true | false
2980     }
2981   }
2982 }
2983 ```
2984 ### LegacyProfiles
2985 Disable the feature enforcing a separate profile for each installation.
2986
2987 If this policy set to true, Firefox will not try to create different profiles for installations of Firefox in different directories. This is the equivalent of the MOZ_LEGACY_PROFILES environment variable.
2988
2989 If this policy set to false, Firefox will create a new profile for each unique installation of Firefox.
2990
2991 This policy only work on Windows via GPO (not policies.json).
2992
2993 **Compatibility:** Firefox 70, Firefox ESR 68.2 (Windows only, GPO only)\
2994 **CCK2 Equivalent:** N/A\
2995 **Preferences Affected:** N/A
2996
2997 #### Windows (GPO)
2998 ```
2999 Software\Policies\Mozilla\Firefox\LegacyProfiles = = 0x1 | 0x0
3000 ```
3001 #### Windows (Intune)
3002 OMA-URI:
3003 ```
3004 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/LegacyProfiles
3005 ```
3006 Value (string):
3007 ```
3008 <enabled/> or <disabled/>
3009 ```
3010 ### LocalFileLinks
3011 Enable linking to local files by origin.
3012
3013 **Compatibility:** Firefox 68, Firefox ESR 68\
3014 **CCK2 Equivalent:** N/A\
3015 **Preferences Affected:** `capability.policy.localfilelinks.*`
3016
3017 #### Windows (GPO)
3018 ```
3019 Software\Policies\Mozilla\Firefox\LocalFileLinks\1 = "https://example.org"
3020 Software\Policies\Mozilla\Firefox\LocalFileLinks\2 = "https://example.edu"
3021 ```
3022 #### Windows (Intune)
3023 OMA-URI:
3024 ```
3025 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/LocalFileLinks
3026 ```
3027 Value (string):
3028 ```
3029 <enabled/>
3030 <data id="LocalFileLinks" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
3031 ```
3032 #### macOS
3033 ```
3034 <dict>
3035   <key>LocalFileLinks</key>
3036   <array>
3037     <string>http://example.org</string>
3038     <string>http://example.edu</string>
3039   </array>
3040 </dict>
3041 ```
3042 #### policies.json
3043 ```
3044 {
3045   "policies": {
3046     "LocalFileLinks": ["http://example.org/",
3047                        "http://example.edu/"]
3048   }
3049 }
3050 ```
3051 ### ManagedBookmarks
3052 Configures a list of bookmarks managed by an administrator that cannot be changed by the user.
3053
3054 The bookmarks are only added as a button on the personal toolbar. They are not in the bookmarks folder.
3055
3056 The syntax of this policy is exactly the same as the [Chrome ManagedBookmarks policy](https://cloud.google.com/docs/chrome-enterprise/policies/?policy=ManagedBookmarks). The schema is:
3057 ```
3058 {
3059  "items": {
3060   "id": "BookmarkType",
3061   "properties": {
3062    "children": {
3063     "items": {
3064      "$ref": "BookmarkType"
3065     },
3066     "type": "array"
3067    },
3068    "name": {
3069     "type": "string"
3070    },
3071    "toplevel_name": {
3072     "type": "string"
3073    },
3074    "url": {
3075     "type": "string"
3076    }
3077   },
3078   "type": "object"
3079  },
3080  "type": "array"
3081 }
3082 ```
3083 **Compatibility:** Firefox 83, Firefox ESR 78.5\
3084 **CCK2 Equivalent:** N/A\
3085 **Preferences Affected:** N/A
3086
3087 #### Windows (GPO)
3088 Software\Policies\Mozilla\Firefox\ManagedBookmarks (REG_MULTI_SZ) =
3089 ```
3090 [
3091   {
3092     "toplevel_name": "My managed bookmarks folder"
3093   },
3094   {
3095     "url": "example.com",
3096     "name": "Example"
3097   },
3098   {
3099     "name": "Mozilla links",
3100     "children": [
3101       {
3102         "url": "https://mozilla.org",
3103         "name": "Mozilla.org"
3104       },
3105       {
3106         "url": "https://support.mozilla.org/",
3107         "name": "SUMO"
3108       }
3109     ]
3110   }
3111 ]
3112 ```
3113 #### Windows (Intune)
3114 OMA-URI:
3115 ```
3116 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/ManagedBookmarks
3117 ```
3118 Value (string):
3119 ```
3120 <enabled/>
3121 <data id="JSON" value='
3122 [
3123   {
3124     "toplevel_name": "My managed bookmarks folder"
3125   },
3126   {
3127     "url": "example.com",
3128     "name": "Example"
3129   },
3130   {
3131     "name": "Mozilla links",
3132     "children": [
3133       {
3134         "url": "https://mozilla.org",
3135         "name": "Mozilla.org"
3136       },
3137       {
3138         "url": "https://support.mozilla.org/",
3139         "name": "SUMO"
3140       }
3141     ]
3142   }
3143 ]'/>
3144 ```
3145 #### macOS
3146 ```
3147 <dict>
3148   <key>ManagedBookmarks</key>
3149   <array>
3150     <dict>
3151       <key>toplevel_name</key>
3152       <string>My managed bookmarks folder</string></dict>
3153       <dict>
3154         <key>url</key>
3155         <string>example.com</string>
3156         <key>name</key>
3157         <string>Example</string>
3158       </dict>
3159       <dict>
3160       <key>name</key>
3161       <string>Mozilla links</string>
3162       <key>children</key>
3163       <array>
3164         <dict>
3165           <key>url</key>
3166           <string>https://mozilla.org</string>
3167           <key>name</key>
3168           <string>Mozilla</string>
3169         </dict>
3170         <dict>
3171           <key>url</key>
3172           <string>https://support.mozilla.org/</string>
3173           <key>name</key>
3174           <string>SUMO</string>
3175         </dict>
3176       </array>
3177     </dict>
3178   </array>
3179 </dict>
3180 ```
3181 #### policies.json
3182 ```
3183 {
3184   "policies": {
3185     "ManagedBookmarks": [
3186       {
3187         "toplevel_name": "My managed bookmarks folder"
3188       },
3189       {
3190         "url": "example.com",
3191         "name": "Example"
3192       },
3193       {
3194         "name": "Mozilla links",
3195         "children": [
3196           {
3197             "url": "https://mozilla.org",
3198             "name": "Mozilla.org"
3199           },
3200           {
3201             "url": "https://support.mozilla.org/",
3202             "name": "SUMO"
3203           }
3204         ]
3205       }
3206     ]
3207   }
3208 }
3209 ```
3210 ### ManualAppUpdateOnly
3211
3212 Switch to manual updates only.
3213
3214 If this policy is enabled:
3215  1. The user will never be prompted to install updates
3216  2. Firefox will not check for updates in the background, though it will check automatically when an update UI is displayed (such as the one in the About dialog). This check will be used to show "Update to version X" in the UI, but will not automatically download the update or prompt the user to update in any other way.
3217  3. The update UI will work as expected, unlike when using DisableAppUpdate.
3218
3219 This policy is primarily intended for advanced end users, not for enterprises.
3220
3221 **Compatibility:** Firefox 87\
3222 **CCK2 Equivalent:** N/A\
3223 **Preferences Affected:** N/A
3224
3225 #### policies.json
3226 ```
3227 {
3228   "policies": {
3229     "ManualAppUpdateOnly": true | false
3230   }
3231 }
3232 ```
3233 ### PrimaryPassword
3234 Require or prevent using a primary (formerly master) password.
3235
3236 If this value is true, a primary password is required. If this value is false, it works the same as if [`DisableMasterPasswordCreation`](#disablemasterpasswordcreation) was true and removes the primary password functionality.
3237
3238 If both DisableMasterPasswordCreation and PrimaryPassword are used, DisableMasterPasswordCreation takes precedent.
3239
3240 **Compatibility:** Firefox 79, Firefox ESR 78.1\
3241 **CCK2 Equivalent:** `noMasterPassword`\
3242 **Preferences Affected:** N/A
3243
3244 #### Windows (GPO)
3245 ```
3246 Software\Policies\Mozilla\Firefox\PrimaryPassword = 0x1 | 0x0
3247 ```
3248 #### Windows (Intune)
3249 OMA-URI:
3250 ```
3251 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PrimaryPassword
3252 ```
3253 Value (string):
3254 ```
3255 <enabled/> or <disabled/>
3256 ```
3257 #### macOS
3258 ```
3259 <dict>
3260   <key>PrimaryPassword</key>
3261   <true/> | <false/>
3262 </dict>
3263 ```
3264 #### policies.json
3265 ```
3266 {
3267   "policies": {
3268     "PrimaryPassword": true | false
3269   }
3270 }
3271 ```
3272 ### NetworkPrediction
3273 Enable or disable network prediction (DNS prefetching).
3274
3275 **Compatibility:** Firefox 67, Firefox ESR 60.7\
3276 **CCK2 Equivalent:** N/A\
3277 **Preferences Affected:** `network.dns.disablePrefetch`,`network.dns.disablePrefetchFromHTTPS`
3278
3279 #### Windows (GPO)
3280 ```
3281 Software\Policies\Mozilla\Firefox\NetworkPrediction = 0x1 | 0x0
3282 ```
3283 #### Windows (Intune)
3284 OMA-URI:
3285 ```
3286 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NetworkPrediction
3287 ```
3288 Value (string):
3289 ```
3290 <enabled/> or <disabled/>
3291 ```
3292 #### macOS
3293 ```
3294 <dict>
3295   <key>NetworkPrediction</key>
3296   <true/> | <false/>
3297 </dict>
3298 ```
3299 #### policies.json
3300 ```
3301 {
3302   "policies": {
3303     "NetworkPrediction": true | false
3304 }
3305 ```
3306 ### NewTabPage
3307 Enable or disable the New Tab page.
3308
3309 **Compatibility:** Firefox 68, Firefox ESR 68\
3310 **CCK2 Equivalent:** N/A\
3311 **Preferences Affected:** `browser.newtabpage.enabled`
3312
3313 #### Windows (GPO)
3314 ```
3315 Software\Policies\Mozilla\Firefox\NewTabPage = 0x1 | 0x0
3316 ```
3317 #### Windows (Intune)
3318 OMA-URI:
3319 ```
3320 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NewTabPage
3321 ```
3322 Value (string):
3323 ```
3324 <enabled/> or <disabled/>
3325 ```
3326 #### macOS
3327 ```
3328 <dict>
3329   <key>NewTabPage</key>
3330   <true/> | <false/>
3331 </dict>
3332 ```
3333 #### policies.json
3334 ```
3335 {
3336   "policies": {
3337     "NewTabPage": true | false
3338 }
3339 ```
3340 ### NoDefaultBookmarks
3341 Disable the creation of default bookmarks.
3342
3343 This policy is only effective if the user profile has not been created yet.
3344
3345 **Compatibility:** Firefox 60, Firefox ESR 60\
3346 **CCK2 Equivalent:** `removeDefaultBookmarks`\
3347 **Preferences Affected:** N/A
3348
3349 #### Windows (GPO)
3350 ```
3351 Software\Policies\Mozilla\Firefox\NoDefaultBookmarks = 0x1 | 0x0
3352 ```
3353 #### Windows (Intune)
3354 OMA-URI:
3355 ```
3356 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NoDefaultBookmarks
3357 ```
3358 Value (string):
3359 ```
3360 <enabled/> or <disabled/>
3361 ```
3362 #### macOS
3363 ```
3364 <dict>
3365   <key>NoDefaultBookmarks</key>
3366   <true/> | <false/>
3367 </dict>
3368 ```
3369 #### policies.json
3370 ```
3371 {
3372   "policies": {
3373     "NoDefaultBookmarks": true | false
3374   }
3375 }
3376 ```
3377 ### OfferToSaveLogins
3378 Control whether or not Firefox offers to save passwords.
3379
3380 **Compatibility:** Firefox 60, Firefox ESR 60\
3381 **CCK2 Equivalent:** `dontRememberPasswords`\
3382 **Preferences Affected:** `signon.rememberSignons`
3383
3384 #### Windows (GPO)
3385 ```
3386 Software\Policies\Mozilla\Firefox\OfferToSaveLogins = 0x1 | 0x0
3387 ```
3388 #### Windows (Intune)
3389 OMA-URI:
3390 ```
3391 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OfferToSaveLogins
3392 ```
3393 Value (string):
3394 ```
3395 <enabled/> or <disabled/>
3396 ```
3397 #### macOS
3398 ```
3399 <dict>
3400   <key>OfferToSaveLogins</key>
3401   <true/> | <false/>
3402 </dict>
3403 ```
3404 #### policies.json
3405 ```
3406 {
3407   "policies": {
3408     "OfferToSaveLogins": true | false
3409   }
3410 }
3411 ```
3412 ### OfferToSaveLoginsDefault
3413 Sets the default value of signon.rememberSignons without locking it.
3414
3415 **Compatibility:** Firefox 70, Firefox ESR 60.2\
3416 **CCK2 Equivalent:** `dontRememberPasswords`\
3417 **Preferences Affected:** `signon.rememberSignons`
3418
3419 #### Windows (GPO)
3420 ```
3421 Software\Policies\Mozilla\Firefox\OfferToSaveLoginsDefault = 0x1 | 0x0
3422 ```
3423 #### Windows (Intune)
3424 OMA-URI:
3425 ```
3426 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OfferToSaveLoginsDefault
3427 ```
3428 Value (string):
3429 ```
3430 <enabled/> or <disabled/>
3431 ```
3432 #### macOS
3433 ```
3434 <dict>
3435   <key>OfferToSaveLoginsDefault</key>
3436   <true/> | <false/>
3437 </dict>
3438 ```
3439 #### policies.json
3440 ```
3441 {
3442   "policies": {
3443     "OfferToSaveLoginsDefault": true | false
3444   }
3445 }
3446 ```
3447 ### OverrideFirstRunPage
3448 Override the first run page. If the value is an empty string (""), the first run page is not displayed.
3449
3450 Starting with Firefox 83, Firefox ESR 78.5, you can also specify multiple URLS separated by a vertical bar (|).
3451
3452 **Compatibility:** Firefox 60, Firefox ESR 60\
3453 **CCK2 Equivalent:** `welcomePage`,`noWelcomePage`\
3454 **Preferences Affected:** `startup.homepage_welcome_url`
3455
3456 #### Windows (GPO)
3457 ```
3458 Software\Policies\Mozilla\Firefox\OverrideFirstRunPage = "http://example.org"
3459 ```
3460 #### Windows (Intune)
3461 OMA-URI:
3462 ```
3463 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OverrideFirstRunPage
3464 ```
3465 Value (string):
3466 ```
3467 <enabled/>
3468 <data id="OverridePage" value="https://example.com"/>
3469 ```
3470 #### macOS
3471 ```
3472 <dict>
3473   <key>OverrideFirstRunPage</key>
3474   <string>http://example.org</string>
3475 </dict>
3476 ```
3477 #### policies.json
3478 ```
3479 {
3480   "policies": {
3481     "OverrideFirstRunPage": "http://example.org"
3482 }
3483 ```
3484 ### OverridePostUpdatePage
3485 Override the upgrade page. If the value is an empty string (""), no extra pages are displayed when Firefox is upgraded.
3486
3487 **Compatibility:** Firefox 60, Firefox ESR 60\
3488 **CCK2 Equivalent:** `upgradePage`,`noUpgradePage`\
3489 **Preferences Affected:** `startup.homepage_override_url`
3490
3491 #### Windows (GPO)
3492 ```
3493 Software\Policies\Mozilla\Firefox\OverridePostUpdatePage = "http://example.org"
3494 ```
3495 #### Windows (Intune)
3496 OMA-URI:
3497 ```
3498 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OverridePostUpdatePage
3499 ```
3500 Value (string):
3501 ```
3502 <enabled/>
3503 <data id="OverridePage" value="https://example.com"/>
3504 ```
3505 #### macOS
3506 ```
3507 <dict>
3508   <key>OverridePostUpdatePage</key>
3509   <string>http://example.org</string>
3510 </dict>
3511 ```
3512 #### policies.json
3513 ```
3514 {
3515   "policies": {
3516     "OverridePostUpdatePage": "http://example.org"
3517 }
3518 ```
3519 ### PasswordManagerEnabled
3520 Remove access to the password manager via preferences and blocks about:logins on Firefox 70.
3521
3522 **Compatibility:** Firefox 70, Firefox ESR 60.2\
3523 **CCK2 Equivalent:** N/A\
3524 **Preferences Affected:** `pref.privacy.disable_button.view_passwords`
3525
3526 #### Windows (GPO)
3527 ```
3528 Software\Policies\Mozilla\Firefox\PasswordManagerEnabled = 0x1 | 0x0
3529 ```
3530 #### Windows (Intune)
3531 OMA-URI:
3532 ```
3533 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PasswordManagerEnabled
3534 ```
3535 Value (string):
3536 ```
3537 <enabled/> or <disabled/>
3538 ```
3539 #### macOS
3540 ```
3541 <dict>
3542   <key>PasswordManagerEnabled</key>
3543   <true/> | <false/>
3544 </dict>
3545 ```
3546 #### policies.json
3547 ```
3548 {
3549   "policies": {
3550     "PasswordManagerEnabled": true | false
3551   }
3552 }
3553 ```
3554 ### PDFjs
3555 Disable or configure PDF.js, the built-in PDF viewer.
3556
3557 If `Enabled` is set to false, the built-in PDF viewer is disabled.
3558
3559 If `EnablePermissions` is set to true, the built-in PDF viewer will honor document permissions like preventing the copying of text.
3560
3561 Note: DisableBuiltinPDFViewer has not been deprecated. You can either continue to use it, or switch to using PDFjs->Enabled to disable the built-in PDF viewer. This new permission was added because we needed a place for PDFjs->EnabledPermissions.
3562
3563 **Compatibility:** Firefox 77, Firefox ESR 68.9\
3564 **CCK2 Equivalent:** N/A\
3565 **Preferences Affected:** `pdfjs.diabled`,`pdfjs.enablePermissions`
3566
3567 #### Windows (GPO)
3568 ```
3569 Software\Policies\Mozilla\Firefox\PDFjs\Enabled = 0x1 | 0x0
3570 Software\Policies\Mozilla\Firefox\PDFjs\EnablePermissions = 0x1 | 0x0
3571 ```
3572 #### Windows (Intune)
3573 OMA-URI:
3574 ```
3575 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PDFjs/PDFjs_Enabled
3576 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PDFjs/PDFjs_EnablePermissions
3577 ```
3578 Value (string):
3579 ```
3580 <enabled/>or <disabled/>
3581 ```
3582 #### macOS
3583 ```
3584 <dict>
3585   <key>PDFjs</key>
3586   <dict>
3587     <key>Enabled</key>
3588     <true/> | <false/>
3589     <key>EnablePermissions</key>
3590     <true/> | <false/>
3591   </dict>
3592 </dict>
3593 ```
3594 #### policies.json
3595 ```
3596 {
3597   "policies": {
3598     "PSFjs": {
3599       "Enabled": true | false,
3600       "EnablePermissions": true | false
3601     }
3602 }
3603 ```
3604 ### Permissions
3605 Set permissions associated with camera, microphone, location, notifications, autoplay, and virtual reality. Because these are origins, not domains, entries with unique ports must be specified separately. This explicitly means that it is not possible to add wildcards. See examples below.
3606
3607 `Allow` is a list of origins where the feature is allowed.
3608
3609 `Block` is a list of origins where the feature is not allowed.
3610
3611 `BlockNewRequests` determines whether or not new requests can be made for the feature.
3612
3613 `Locked` prevents the user from changing preferences for the feature.
3614
3615 `Default` specifies the default value for Autoplay. block-audio-video is not supported on Firefox ESR 68.
3616
3617 **Compatibility:** Firefox 62, Firefox ESR 60.2 (Autoplay added in Firefox 74, Firefox ESR 68.6, Autoplay Default/Locked added in Firefox 76, Firefox ESR 68.8, VirtualReality added in Firefox 80, Firefox ESR 78.2)\
3618 **CCK2 Equivalent:** N/A\
3619 **Preferences Affected:** `permissions.default.camera`,`permissions.default.microphone`,`permissions.default.geo`,`permissions.default.desktop-notification`,`media.autoplay.default`.`permissions.default.xr`
3620
3621 #### Windows (GPO)
3622 ```
3623 Software\Policies\Mozilla\Firefox\Permissions\Camera\Allow\1 = "https://example.org"
3624 Software\Policies\Mozilla\Firefox\Permissions\Camera\Allow\2 = "https://example.org:1234"
3625 Software\Policies\Mozilla\Firefox\Permissions\Camera\Block\1 = "https://example.edu"
3626 Software\Policies\Mozilla\Firefox\Permissions\Camera\BlockNewRequests = 0x1 | 0x0
3627 Software\Policies\Mozilla\Firefox\Permissions\Camera\Locked = 0x1 | 0x0
3628 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Allow\1 = "https://example.org"
3629 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Block\1 = "https://example.edu"
3630 Software\Policies\Mozilla\Firefox\Permissions\Microphone\BlockNewRequests = 0x1 | 0x0
3631 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Locked = 0x1 | 0x0
3632 Software\Policies\Mozilla\Firefox\Permissions\Location\Allow\1 = "https://example.org"
3633 Software\Policies\Mozilla\Firefox\Permissions\Location\Block\1 = "https://example.edu"
3634 Software\Policies\Mozilla\Firefox\Permissions\Location\BlockNewRequests = 0x1 | 0x0
3635 Software\Policies\Mozilla\Firefox\Permissions\Location\Locked = 0x1 | 0x0
3636 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Allow\1 = "https://example.org"
3637 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Block\1 = "https://example.edu"
3638 Software\Policies\Mozilla\Firefox\Permissions\Notifications\BlockNewRequests = 0x1 | 0x0
3639 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Locked = 0x1 | 0x0
3640 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Allow\1 = "https://example.org"
3641 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Block\1 = "https://example.edu"
3642 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Default = "allow-audio-video" | "block-audio" | "block-audio-video"
3643 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Locked = 0x1 | 0x0
3644 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\Allow\1 = "https://example.org"
3645 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\Block\1 = "https://example.edu"
3646 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\BlockNewRequests = 0x1 | 0x0
3647 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\Locked = 0x1 | 0x0
3648 ```
3649 #### Windows (Intune)
3650 OMA-URI:
3651 ```
3652 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Location/Location_BlockNewRequests
3653 ```
3654 Value (string):
3655 ```
3656 <enabled/> or <disabled/>
3657 ```
3658 OMA-URI:
3659 ```
3660 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Location/Location_Locked
3661 ```
3662 Value (string):
3663 ```
3664 <enabled/> or <disabled/>
3665 ```
3666 OMA-URI:
3667 ```
3668 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_Allow
3669 ```
3670 Value (string):
3671 ```
3672 <enabled/>
3673 <data id="Permissions" value="1&#xF000;https://example.org"/>
3674 ```
3675 OMA-URI:
3676 ```
3677 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_BlockNewRequests
3678 ```
3679 Value (string):
3680 ```
3681 <enabled/> or <disabled/>
3682 ```
3683 OMA-URI:
3684 ```
3685 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_Locked
3686 ```
3687 Value (string):
3688 ```
3689 <enabled/> or <disabled/>
3690 ```
3691 OMA-URI:
3692 ```
3693 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Allow
3694 ```
3695 Value (string):
3696 ```
3697 <enabled/>
3698 <data id="Permissions" value="1&#xF000;https://example.org"/>
3699 ```
3700 OMA-URI:
3701 ```
3702 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Block
3703 ```
3704 Value (string):
3705 ```
3706 <enabled/>
3707 <data id="Permissions" value="1&#xF000;https://example.edu"/>
3708 ```
3709 OMA-URI:
3710 ```
3711 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Default
3712 ```
3713 Value (string):
3714 ```
3715 <enabled/>
3716 <data id="Autoplay_Default" value="allow-audio-video | block-audio | block-audio-video"/>
3717 ```
3718 OMA-URI:
3719 ```
3720 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Locked
3721 ```
3722 Value (string):
3723 ```
3724 <enabled/> or <disabled/>
3725 ```
3726 OMA-URI:
3727 ```
3728 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_Allow
3729 ```
3730 Value (string):
3731 ```
3732 <enabled/>
3733 <data id="Permissions" value="1&#xF000;https://example.org"/>
3734 ```
3735 OMA-URI:
3736 ```
3737 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_Block
3738 ```
3739 Value (string):
3740 ```
3741 <enabled/>
3742 <data id="Permissions" value="1&#xF000;https://example.edu"/>
3743 ```
3744 OMA-URI:
3745 ```
3746 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_BlockNewRequests
3747 ```
3748 Value (string):
3749 ```
3750 <enabled/> or <disabled/>
3751 ```
3752 OMA-URI:
3753 ```
3754 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_Locked
3755 ```
3756 Value (string):
3757 ```
3758 <enabled/> or <disabled/>
3759 ```
3760 #### macOS
3761 ```
3762 <dict>
3763   <key>Permissions</key>
3764   <dict>
3765     <key>Camera</key>
3766     <dict>
3767       <key>Allow</key>
3768       <array>
3769         <string>https://example.org</string>
3770         <string>https://example.org:1234</string>
3771       </array>
3772       <key>Block</key>
3773       <array>
3774         <string>https://example.edu</string>
3775       </array>
3776       <key>BlockNewRequests</key>
3777       <true/> | <false/>
3778       <key>Locked</key>
3779       <true/> | <false/>
3780     </dict>
3781     <key>Microphone</key>
3782     <dict>
3783       <key>Allow</key>
3784       <array>
3785         <string>https://example.org</string>
3786       </array>
3787       <key>Block</key>
3788       <array>
3789         <string>https://example.edu</string>
3790       </array>
3791       <key>BlockNewRequests</key>
3792       <true/> | <false/>
3793       <key>Locked</key>
3794       <true/> | <false/>
3795     </dict>
3796     <key>Location</key>
3797     <dict>
3798       <key>Allow</key>
3799       <array>
3800         <string>https://example.org</string>
3801       </array>
3802       <key>Block</key>
3803       <array>
3804         <string>https://example.edu</string>
3805       </array>
3806       <key>BlockNewRequests</key>
3807       <true/> | <false/>
3808       <key>Locked</key>
3809       <true/> | <false/>
3810     </dict>
3811     <key>Notifications</key>
3812     <dict>
3813       <key>Allow</key>
3814       <array>
3815         <string>https://example.org</string>
3816       </array>
3817       <key>Block</key>
3818       <array>
3819         <string>https://example.edu</string>
3820       </array>
3821       <key>BlockNewRequests</key>
3822       <true/>
3823       <key>Locked</key>
3824       <true/>
3825     </dict>
3826     <key>Autoplay</key>
3827     <dict>
3828       <key>Allow</key>
3829       <array>
3830         <string>https://example.org</string>
3831       </array>
3832       <key>Block</key>
3833       <array>
3834         <string>https://example.edu</string>
3835       </array>
3836       <key>Default</key>
3837       <string>allow-audio-video | block-audio | block-audio-video</string>
3838       <key>Locked</key>
3839       <true/> | <false/>
3840     </dict>
3841   </dict>
3842 </dict>
3843 ```
3844 #### policies.json
3845 ```
3846 {
3847   "policies": {
3848     "Permissions": {
3849       "Camera": {
3850         "Allow": ["https://example.org","https://example.org:1234"],
3851         "Block": ["https://example.edu"],
3852         "BlockNewRequests": true | false,
3853         "Locked": true | false
3854       },
3855       "Microphone": {
3856         "Allow": ["https://example.org"],
3857         "Block": ["https://example.edu"],
3858         "BlockNewRequests": true | false,
3859         "Locked": true | false
3860       },
3861       "Location": {
3862         "Allow": ["https://example.org"],
3863         "Block": ["https://example.edu"],
3864         "BlockNewRequests": true | false,
3865         "Locked": true | false
3866       },
3867       "Notifications": {
3868         "Allow": ["https://example.org"],
3869         "Block": ["https://example.edu"],
3870         "BlockNewRequests": true | false,
3871         "Locked": true | false
3872       },
3873       "Autoplay": {
3874         "Allow": ["https://example.org"],
3875         "Block": ["https://example.edu"],
3876         "Default": "allow-audio-video" | "block-audio" | "block-audio-video",
3877         "Locked": true | false
3878       }
3879     }
3880   }
3881 }
3882 ```
3883 ### PictureInPicture
3884
3885 Enable or disable Picture-in-Picture as well as prevent the user from enabling or disabling it (Locked).
3886
3887 **Compatibility:** Firefox 78, Firefox ESR 78\
3888 **CCK2 Equivalent:** N/A\
3889 **Preferences Affected:** `media.videocontrols.picture-in-picture.video-toggle.enabled`
3890
3891 #### Windows (GPO)
3892 ```
3893 Software\Policies\Mozilla\Firefox\PictureInPicture\Enabled = 0x1 | 0x0
3894 Software\Policies\Mozilla\Firefox\PictureInPicture\Locked = 0x1 | 0x0
3895
3896 ```
3897 #### Windows (Intune)
3898 OMA-URI:
3899 ```
3900 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PictureInPicture/PictureInPicture_Enabled
3901 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PictureInPicture/PictureInPicture_Locked
3902 ```
3903 Value (string):
3904 ```
3905 <enabled/> or <disabled/>
3906 ```
3907 #### macOS
3908 ```
3909 <dict>
3910   <key>PictureInPicture</key>
3911   <dict>
3912     <key>Enabled</key>
3913     <true/> | <false/>
3914     <key>Locked</key>
3915     <true/> | <false/>
3916   </dict>
3917 </dict>
3918 ```
3919 #### policies.json
3920 ```
3921 {
3922   "policies": {
3923     "PictureInPicture": {
3924       "Enabled": true | false,
3925       "Locked": true, false
3926     }
3927   }
3928 }
3929 ```
3930 ### PopupBlocking
3931 Configure the default pop-up window policy as well as origins for which pop-up windows are allowed.
3932
3933 `Allow` is a list of origins where popup-windows are allowed.
3934
3935 `Default` determines whether or not pop-up windows are allowed by default.
3936
3937 `Locked` prevents the user from changing pop-up preferences.
3938
3939 **Compatibility:** Firefox 60, Firefox ESR 60\
3940 **CCK2 Equivalent:** `permissions.popup`\
3941 **Preferences Affected:** `dom.disable_open_during_load`
3942
3943 #### Windows (GPO)
3944 ```
3945 Software\Policies\Mozilla\Firefox\PopupBlocking\Allow\1 = "https://example.org"
3946 Software\Policies\Mozilla\Firefox\PopupBlocking\Allow\2 = "https://example.edu"
3947 Software\Policies\Mozilla\Firefox\PopupBlocking\Default = 0x1 | 0x0
3948 Software\Policies\Mozilla\Firefox\PopupBlocking\Locked = 0x1 | 0x0
3949 ```
3950 #### Windows (Intune)
3951 OMA-URI:
3952 ```
3953 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Allow
3954 ```
3955 Value (string):
3956 ```
3957 <enabled/>
3958 <data id="Permissions" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
3959 ```
3960 OMA-URI:
3961 ```
3962 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Default
3963 ```
3964 Value (string):
3965 ```
3966 <enabled/> or <disabled/>
3967 ```
3968 OMA-URI:
3969 ```
3970 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Locked
3971 ```
3972 Value (string):
3973 ```
3974 <enabled/> or <disabled/>
3975 ```
3976 #### macOS
3977 ```
3978 <dict>
3979   <key>PopupBlocking</key>
3980   <dict>
3981     <key>Allow</key>
3982     <array>
3983       <string>http://example.org</string>
3984       <string>http://example.edu</string>
3985     </array>
3986     <key>Default</key>
3987     <true/> | <false/>
3988     <key>Locked</key>
3989     <true/> | <false/>
3990   </dict>
3991 </dict>
3992 ```
3993 #### policies.json
3994 ```
3995 {
3996   "policies": {
3997     "PopupBlocking": {
3998       "Allow": ["http://example.org/",
3999                 "http://example.edu/"],
4000       "Default": true | false,
4001       "Locked": true | false
4002     }
4003   }
4004 }
4005 ```
4006 ### Preferences
4007 Set and lock preferences.
4008
4009 **NOTE** On Windows, in order to use this policy, you must clear all settings in the old **Preferences (Deprecated)** section.
4010
4011 Previously you could only set and lock a subset of preferences. Starting with Firefox 81 and Firefox ESR 78.3 you can set many more preferences. You can also set default preferences, user preferences and you can clear preferences.
4012
4013 Preferences that start with the following prefixes are supported:
4014 ```
4015 accessibility.
4016 app.update.* (Firefox 86, Firefox 78.8)
4017 browser.
4018 datareporting.policy.
4019 dom.
4020 extensions.
4021 general.autoScroll (Firefox 83, Firefox ESR 78.5)
4022 general.smoothScroll (Firefox 83, Firefox ESR 78.5)
4023 geo.
4024 intl.
4025 layout.
4026 media.
4027 network.
4028 pdfjs. (Firefox 84, Firefox ESR 78.6)
4029 places.
4030 print.
4031 signon. (Firefox 83, Firefox ESR 78.5)
4032 spellchecker. (Firefox 84, Firefox ESR 78.6)
4033 ui.
4034 widget.
4035 ```
4036 as well as the following security preferences:
4037 | Preference | Type | Default
4038 | --- | --- | ---
4039 | security.default_personal_cert | string | Ask Every Time
4040 | &nbsp;&nbsp;&nbsp;&nbsp;If set to Select Automatically, Firefox automatically chooses the default personal certificate.
4041 | security.insecure_connection_text.enabled | bool | false
4042 | &nbsp;&nbsp;&nbsp;&nbsp;If set to true, adds the words "Not Secure" for insecure sites.
4043 | security.insecure_connection_text.pbmode.enabled | bool | false
4044 | &nbsp;&nbsp;&nbsp;&nbsp;If set to true, adds the words "Not Secure" for insecure sites in private browsing.
4045 | security.insecure_field_warning.contextual.enabled | bool | true
4046 | &nbsp;&nbsp;&nbsp;&nbsp;If set to false, remove the warning for inscure login fields.
4047 | security.mixed_content.block_active_content | boolean | true
4048 | &nbsp;&nbsp;&nbsp;&nbsp;If false, mixed active content (HTTP and HTTPS) is not blocked.
4049 | security.osclientcerts.autoload | boolean | false
4050 | &nbsp;&nbsp;&nbsp;&nbsp;If true, client certificates are loaded from the operating system certificate store.
4051 | security.ssl.errorReporting.enabled | boolean | true
4052 | &nbsp;&nbsp;&nbsp;&nbsp;If false, SSL errors cannot be sent to Mozilla.
4053 | security.tls.hello_downgrade_check | boolean | true
4054 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the TLS 1.3 downgrade check is disabled.
4055 | security.tls.version.enable-deprecated | boolean | false
4056 | &nbsp;&nbsp;&nbsp;&nbsp;If true, browser will accept TLS 1.0. and TLS 1.1 (Firefox 86, Firefox 78.8)
4057 | security.warn_submit_secure_to_insecure | boolean | true
4058 | &nbsp;&nbsp;&nbsp;&nbsp;If false, no warning is shown when submitting s form from https to http.
4059 &nbsp;
4060
4061 Using the preference as the key, set the `Value` to the corresponding preference value.
4062
4063 `Status` can be "default", "locked", "user" or "clear"
4064
4065 Default preferences can be modified by the user.
4066
4067 If a value is locked, it is also set as the default.
4068
4069 User preferences persist across invocations of Firefox. It is the equivalent of a user setting the preference. They are most useful when a preference is needed very early in startup so it can't be set as default by policy.
4070
4071 User preferences persist even if the policy is removed, so if you need to remove them, you should use the clear policy.
4072
4073 See the examples below for more detail.
4074
4075 IMPORTANT: Make sure you're only setting a particular preference using this mechanism and not some other way.
4076
4077 Status
4078 **Compatibility:** Firefox 81, Firefox ESR 78.3\
4079 **CCK2 Equivalent:** `preferences`\
4080 **Preferences Affected:** Many
4081
4082 #### Windows (GPO)
4083 Software\Policies\Mozilla\Firefox\Preferences (REG_MULTI_SZ) =
4084 ```
4085 {
4086   "accessibility.force_disabled": {
4087     "Value": 1,
4088     "Status": "default"
4089   },
4090   "browser.cache.disk.parent_directory": {
4091     "Value": "SOME_NATIVE_PATH",
4092     "Status": "user"
4093   },
4094   "browser.tabs.warnOnClose": {
4095     "Value": false,
4096     "Status": "locked"
4097   }
4098 }
4099 ```
4100 #### Windows (Intune)
4101 OMA-URI:
4102 ```
4103 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Preferences
4104 ```
4105 Value (string):
4106 ```
4107 <enabled/>
4108 <data id="JSON" value='
4109 {
4110   "accessibility.force_disabled": {
4111     "Value": 1,
4112     "Status": "default"
4113   },
4114   "browser.cache.disk.parent_directory": {
4115     "Value": "SOME_NATIVE_PATH",
4116     "Status": "user"
4117   },
4118   "browser.tabs.warnOnClose": {
4119     "Value": false,
4120     "Status": "locked"
4121   }
4122 }'/>
4123 ```
4124 #### macOS
4125 ```
4126 <dict>
4127   <key>Preferences</key>
4128   <dict>
4129     <key>accessibility.force_disabled</key>
4130     <dict>
4131       <key>Value</key>
4132       <integer>1</integer>
4133       <key>Status</key>
4134       <string>default</string>
4135     </dict>
4136     <key>browser.cache.disk.parent_directory</key>
4137     <dict>
4138       <key>Value</key>
4139       <string>SOME_NATIVE_PATH</string>
4140       <key>Status</key>
4141       <string>user</string>
4142     </dict>
4143     <key>browser.tabs.warnOnClose</key>
4144     <dict>
4145       <key>Value</key>
4146       <false/>
4147       <key>Status</key>
4148       <string>locked</string>
4149     </dict>
4150   </dict>
4151 </dict>
4152 ```
4153 #### policies.json
4154 ```
4155 {
4156   "policies": {
4157     "Preferences": {
4158       "accessibility.force_disabled": {
4159         "Value": 1,
4160         "Status": "default"
4161       },
4162       "browser.cache.disk.parent_directory": {
4163         "Value": "SOME_NATIVE_PATH",
4164         "Status": "user"
4165       },
4166       "browser.tabs.warnOnClose": {
4167         "Value": false,
4168         "Status": "locked"
4169       }
4170     }
4171   }
4172 }
4173 ```
4174 ### Preferences (Deprecated)
4175 Set and lock certain preferences.
4176
4177 **Compatibility:** See below\
4178 **CCK2 Equivalent:** `preferences`\
4179 **Preferences Affected:** See below
4180
4181 | Preference | Type | Compatibility | Default
4182 | --- | --- | --- | ---
4183 | accessibility.force_disabled | integer | Firefox 70, Firefox ESR 68.2 | 0
4184 | &nbsp;&nbsp;&nbsp;&nbsp;If set to 1, platform accessibility is disabled.
4185 | app.update.auto (Deprecated - Switch to AppAutoUpdate policy) | boolean | Firefox 68, Firefox ESR 68 | true
4186 | &nbsp;&nbsp;&nbsp;&nbsp;If false, Firefox doesn't automatically install update.
4187 | browser.bookmarks.autoExportHTML | boolean | Firefox 70, Firefox ESR 68.2 | false
4188 | &nbsp;&nbsp;&nbsp;&nbsp;If true, bookmarks are exported on shutdown.
4189 | browser.bookmarks.file | string | Firefox 70, Firefox ESR 68.2 | N/A
4190 | &nbsp;&nbsp;&nbsp;&nbsp;If set, the name of the file where bookmarks are exported and imported.
4191 | browser.bookmarks.restore_default_bookmarks | boolean | Firefox 70, Firefox ESR 68.2 | N/A
4192 | &nbsp;&nbsp;&nbsp;&nbsp;If true, bookmarks are restored to their defaults.
4193 | browser.cache.disk.enable | boolean | Firefox 68, Firefox ESR 68 | true
4194 | &nbsp;&nbsp;&nbsp;&nbsp;If false, don't store cache on the hard drive.
4195 | ~browser.cache.disk.parent_directory~ | string | Firefox 68, Firefox ESR 68 | Profile temporary directory
4196 | &nbsp;&nbsp;&nbsp;&nbsp;~If set, changes the location of the disk cache.~ This policy doesn't work. It's being worked on.
4197 | browser.fixup.dns_first_for_single_words | boolean | Firefox 68, Firefox ESR 68 | false
4198 | &nbsp;&nbsp;&nbsp;&nbsp;If true, single words are sent to DNS, not directly to search.
4199 | browser.newtabpage.activity-stream.default.sites | string | Firefox 72, ESR 68.4 | Locale dependent
4200 | &nbsp;&nbsp;&nbsp;&nbsp;If set, a list of URLs to use as the default top sites on the new tab page. Due to Firefox limitations, search sites can't be added. In addition, sites with the same name but different TLDs (example.org/example.com) will not display properly.
4201 | browser.places.importBookmarksHTML | boolean | Firefox 70, Firefox ESR 68.2
4202 | &nbsp;&nbsp;&nbsp;&nbsp;If true, bookmarks are always imported on startup.
4203 | browser.safebrowsing.phishing.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
4204 | &nbsp;&nbsp;&nbsp;&nbsp;If false, phishing protection is not enabled (Not recommended)
4205 | browser.safebrowsing.malware.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
4206 | &nbsp;&nbsp;&nbsp;&nbsp;If false, malware protection is not enabled (Not recommended)
4207 | browser.search.update | boolean | Firefox 68, Firefox ESR 68 | true
4208 | &nbsp;&nbsp;&nbsp;&nbsp;If false, updates for search engines are not checked.
4209 | browser.slowStartup.notificationDisabled | boolean | Firefox 70, Firefox ESR 68.2 | false
4210 | &nbsp;&nbsp;&nbsp;&nbsp;If true, a notification isn't shown if startup is slow.
4211 | browser.tabs.warnOnClose | boolean | Firefox 68, Firefox ESR 68 | true
4212 | &nbsp;&nbsp;&nbsp;&nbsp;If false, there is no warning when the browser is closed.
4213 | browser.taskbar.previews.enable | boolean | Firefox 70, Firefox ESR 68.2 (Windows only) | false
4214 | &nbsp;&nbsp;&nbsp;&nbsp;If true, tab previews are shown in the Windows taskbar.
4215 | browser.urlbar.suggest.bookmark | boolean | Firefox 68, Firefox ESR 68 | true
4216 | &nbsp;&nbsp;&nbsp;&nbsp;If false, bookmarks aren't suggested when typing in the URL bar.
4217 | browser.urlbar.suggest.history | boolean | Firefox 68, Firefox ESR 68 | true
4218 | &nbsp;&nbsp;&nbsp;&nbsp;If false, history isn't suggested when typing in the URL bar.
4219 | browser.urlbar.suggest.openpage | boolean | Firefox 68, Firefox ESR 68 | true
4220 | &nbsp;&nbsp;&nbsp;&nbsp;If false, open tabs aren't suggested when typing in the URL bar.
4221 | datareporting.policy.dataSubmissionPolicyBypassNotification | boolean | Firefox 68, Firefox ESR 68 | false
4222 | &nbsp;&nbsp;&nbsp;&nbsp;If true, don't show the privacy policy tab on first run.
4223 | dom.allow_scripts_to_close_windows | boolean | Firefox 70, Firefox ESR 68.2 | false
4224 | &nbsp;&nbsp;&nbsp;&nbsp;If false, web page can close windows.
4225 | dom.disable_window_flip | boolean | Firefox 68, Firefox ESR 68 | true
4226 | &nbsp;&nbsp;&nbsp;&nbsp;If false, web pages can focus and activate windows.
4227 | dom.disable_window_move_resize | boolean | Firefox 68, Firefox ESR 68 | false
4228 | &nbsp;&nbsp;&nbsp;&nbsp;If true, web pages can't move or resize windows.
4229 | dom.event.contextmenu.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4230 | &nbsp;&nbsp;&nbsp;&nbsp;If false, web pages can't override context menus.
4231 | dom.keyboardevent.keypress.hack.dispatch_non_printable_keys.addl | string | Firefox 68, Firefox ESR 68 | N/A
4232 | &nbsp;&nbsp;&nbsp;&nbsp;See https://support.mozilla.org/en-US/kb/dom-events-changes-introduced-firefox-66
4233 | dom.keyboardevent.keypress.hack.use_legacy_keycode_and_charcode.addl | string | Firefox 68, Firefox ESR 68 | N/A
4234 | &nbsp;&nbsp;&nbsp;&nbsp;See https://support.mozilla.org/en-US/kb/dom-events-changes-introduced-firefox-66
4235 | dom.xmldocument.load.enabled | boolean | Firefox ESR 68.5 | true.
4236 | &nbsp;&nbsp;&nbsp;&nbsp;If false, XMLDocument.load is not available.
4237 | dom.xmldocument.async.enabled | boolean | Firefox ESR 68.5 | true
4238 | &nbsp;&nbsp;&nbsp;&nbsp;If false, XMLDocument.async is not available.
4239 | extensions.blocklist.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
4240 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the extensions blocklist is not used (Not recommended)
4241 | extensions.getAddons.showPane | boolean | Firefox 68, Firefox ESR 68 | N/A
4242 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the Recommendations tab is not displayed in the Add-ons Manager.
4243 | extensions.htmlaboutaddons.recommendations.enabled | boolean | Firefox 72, Firefox ESR 68.4 | true
4244 | &nbsp;&nbsp;&nbsp;&nbsp;If false, recommendations are not shown on the Extensions tab in the Add-ons Manager.
4245 | geo.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
4246 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the geolocation API is disabled. | Language dependent
4247 | intl.accept_languages | string | Firefox 70, Firefox ESR 68.2
4248 | &nbsp;&nbsp;&nbsp;&nbsp;If set, preferred language for web pages.
4249 | media.eme.enabled (Deprecated - Switch to EncryptedMediaExtensions policy) | boolean | Firefox 70, Firefox ESR 68.2 | true
4250 | &nbsp;&nbsp;&nbsp;&nbsp;If false, Encrypted Media Extensions are not enabled.
4251 | media.gmp-gmpopenh264.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4252 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the OpenH264  plugin is not downloaded.
4253 | media.gmp-widevinecdm.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4254 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the Widevine plugin is not downloaded.
4255 | media.peerconnection.enabled | boolean | Firefox 72, Firefox ESR 68.4 | true
4256 | &nbsp;&nbsp;&nbsp;&nbsp;If false, WebRTC is disabled
4257 | media.peerconnection.ice.obfuscate_host_addresses.whitelist (Deprecated) | string | Firefox 72, Firefox ESR 68.4 | N/A
4258 | &nbsp;&nbsp;&nbsp;&nbsp;If set, a list of domains for which mDNS hostname obfuscation is
4259 disabled
4260 | media.peerconnection.ice.obfuscate_host_addresses.blocklist | string | Firefox 79, Firefox ESR 78.1 | N/A
4261 | &nbsp;&nbsp;&nbsp;&nbsp;If set, a list of domains for which mDNS hostname obfuscation is
4262 disabled
4263 | network.dns.disableIPv6 | boolean | Firefox 68, Firefox ESR 68 | false
4264 | &nbsp;&nbsp;&nbsp;&nbsp;If true, IPv6 DNS lokoups are disabled.
4265 | network.IDN_show_punycode | boolean | Firefox 68, Firefox ESR 68 | false
4266 | &nbsp;&nbsp;&nbsp;&nbsp;If true, display the punycode version of internationalized domain names.
4267 | places.history.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4268 | &nbsp;&nbsp;&nbsp;&nbsp;If false, history is not enabled.
4269 | print.save_print_settings | boolean | Firefox 70, Firefox ESR 68.2 | true
4270 | &nbsp;&nbsp;&nbsp;&nbsp;If false, print settings are not saved between jobs.
4271 | security.default_personal_cert | string | Firefox 68, Firefox ESR 68 | Ask Every Time
4272 | &nbsp;&nbsp;&nbsp;&nbsp;If set to Select Automatically, Firefox automatically chooses the default personal certificate.
4273 | security.mixed_content.block_active_content | boolean | Firefox 70, Firefox ESR 68.2 | true
4274 | &nbsp;&nbsp;&nbsp;&nbsp;If false, mixed active content (HTTP and HTTPS) is not blocked.
4275 | security.osclientcerts.autoload | boolean | Firefox 72 (Windows), Firefox 75 (macOS)  | false
4276 | &nbsp;&nbsp;&nbsp;&nbsp;If true, client certificates are loaded from the operating system certificate store.
4277 | security.ssl.errorReporting.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4278 | &nbsp;&nbsp;&nbsp;&nbsp;If false, SSL errors cannot be sent to Mozilla.
4279 | security.tls.hello_downgrade_check | boolean | Firefox 72, Firefox ESR 68.4 | true
4280 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the TLS 1.3 downgrade check is disabled.
4281 | ui.key.menuAccessKeyFocuses | boolean | Firefox 68, Firefox ESR 68 | true
4282 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the Alt key doesn't show the menubar on Windows.
4283 | widget.content.gtk-theme-override | string | Firefox 72, Firefox ESR 68.4 (Linux only) | N/A
4284 | &nbsp;&nbsp;&nbsp;&nbsp;If set, overrides the GTK theme for widgets.
4285 #### Windows (GPO)
4286 ```
4287 Software\Policies\Mozilla\Firefox\Preferences\boolean_preference_name = 0x1 | 0x0
4288 Software\Policies\Mozilla\Firefox\Preferences\string_preference_name = "string_value"
4289 ```
4290 #### Windows (Intune)
4291 OMA-URI: (periods are replaced by underscores)
4292 ```
4293 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Preferences/boolean_preference_name
4294 ```
4295 Value (string):
4296 ```
4297 <enabled/> or <disabled/>
4298 ```
4299 OMA-URI: (periods are replaced by underscores)
4300 ```
4301 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Preferences/string_preference_name
4302 ```
4303 Value (string):
4304 ```
4305 <enabled/>
4306 <data id="Preferences_String" value="string_value"/>
4307 ```
4308 #### macOS
4309 ```
4310 <dict>
4311   <key>Preferences</key>
4312   <dict>
4313     <key>boolean_preference_name</key>
4314     <true/> | <false/>
4315     <key>string_preference_name</key>
4316     <string>string_value</string>
4317   </dict>
4318 </dict>
4319 ```
4320 #### policies.json
4321 ```
4322 {
4323   "policies": {
4324     "Preferences": {
4325       "boolean_preference_name": true | false,
4326       "string_preference_name": "string_value"
4327     }
4328   }
4329 }
4330 ```
4331 ### PromptForDownloadLocation
4332 Ask where to save each file before downloading.
4333
4334 **Compatibility:** Firefox 68, Firefox ESR 68\
4335 **CCK2 Equivalent:** N/A\
4336 **Preferences Affected:** `browser.download.useDownloadDir`
4337
4338 #### Windows (GPO)
4339 ```
4340 Software\Policies\Mozilla\Firefox\PromptForDownloadLocation = 0x1 | 0x0
4341 ```
4342 #### Windows (Intune)
4343 OMA-URI:
4344 ```
4345 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PromptForDownloadLocation
4346 ```
4347 Value (string):
4348 ```
4349 <enabled/> or <disabled/>
4350 ```
4351 #### macOS
4352 ```
4353 <dict>
4354   <key>PromptForDownloadLocation</key>
4355   <true/> | <false/>
4356 </dict>
4357 ```
4358 #### policies.json
4359 ```
4360 {
4361   "policies": {
4362     "PromptForDownloadLocation": true | false
4363   }
4364 }
4365 ```
4366 ### Proxy
4367 Configure proxy settings. These settings correspond to the connection settings in Firefox preferences.
4368 To specify ports, append them to the hostnames with a colon (:).
4369
4370 `Mode` is the proxy method being used.
4371
4372 `Locked` is whether or not proxy settings can be changed.
4373
4374 `HTTPProxy` is the HTTP proxy server.
4375
4376 `UseHTTPProxyForAllProtocols` is whether or not the HTTP proxy should be used for all other proxies.
4377
4378 `SSLProxy` is the SSL proxy server.
4379
4380 `FTPProxy` is the FTP proxy server.
4381
4382 `SOCKSProxy` is the SOCKS proxy server
4383
4384 `SOCKSVersion` is the SOCKS version (4 or 5)
4385
4386 `Passthrough` is list of hostnames or IP addresses that will not be proxied. Use `<local>` to bypass proxying for all hostnames which do not contain periods.
4387
4388 `AutoConfigURL` is a  URL for proxy configuration (only used if Mode is autoConfig).
4389
4390 `AutoLogin` means do not prompt for authentication if password is saved.
4391
4392 `UseProxyForDNS` to use proxy DNS when using SOCKS v5.
4393
4394 **Compatibility:** Firefox 60, Firefox ESR 60\
4395 **CCK2 Equivalent:** `networkProxy*`\
4396 **Preferences Affected:** `network.proxy.type`,`network.proxy.autoconfig_url`,`network.proxy.socks_remote_dns`,`signon.autologin.proxy`,`network.proxy.socks_version`,`network.proxy.no_proxies_on`,`network.proxy.share_proxy_settings`,`network.proxy.http`,`network.proxy.http_port`,`network.proxy.ftp`,`network.proxy.ftp_port`,`network.proxy.ssl`,`network.proxy.ssl_port`,`network.proxy.socks`,`network.proxy.socks_port`
4397
4398 #### Windows (GPO)
4399 ```
4400 Software\Policies\Mozilla\Firefox\Proxy\Mode = "none" | "system" | "manual" | "autoDetect" | "autoConfig"
4401 Software\Policies\Mozilla\Firefox\Proxy\Locked = 0x1 | 0x0
4402 Software\Policies\Mozilla\Firefox\=Proxy\HTTPProxy = https://httpproxy.example.com
4403 Software\Policies\Mozilla\Firefox\Proxy\UseHTTPProxyForAllProtocols = 0x1 | 0x0
4404 Software\Policies\Mozilla\Firefox\Proxy\SSLProxy = https://sslproxy.example.com
4405 Software\Policies\Mozilla\Firefox\Proxy\FTPProxy = https://ftpproxy.example.com
4406 Software\Policies\Mozilla\Firefox\Proxy\SOCKSProxy = https://socksproxy.example.com
4407 Software\Policies\Mozilla\Firefox\Proxy\SOCKSVersion = 0x4 | 0x5
4408 Software\Policies\Mozilla\Firefox\Proxy\Passthrough = <local>
4409 Software\Policies\Mozilla\Firefox\Proxy\AutoConfigURL = URL_TO_AUTOCONFIG
4410 Software\Policies\Mozilla\Firefox\Proxy\AutoLogin = 0x1 | 0x0
4411 Software\Policies\Mozilla\Firefox\Proxy\UseProxyForDNS = 0x1 | 0x0
4412 ```
4413 #### Windows (Intune)
4414 OMA-URI:
4415 ```
4416 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Proxy
4417 ```
4418 Value (string):
4419 ```
4420 <enabled/>
4421 <data id="ProxyLocked" value="true | false"/>
4422 <data id="ConnectionType" value="none | system | manual | autoDetect | autoConfig"/>
4423 <data id="HTTPProxy" value="https://httpproxy.example.com"/>
4424 <data id="UseHTTPProxyForAllProtocols" value="true | false"/>
4425 <data id="SSLProxy" value="https://sslproxy.example.com"/>
4426 <data id="FTPProxy" value="https://ftpproxy.example.com"/>
4427 <data id="SOCKSProxy" value="https://socksproxy.example.com"/>
4428 <data id="SOCKSVersion" value="4 | 5"/>
4429 <data id="AutoConfigURL" value="URL_TO_AUTOCONFIG"/>
4430 <data id="Passthrough" value="<local>"/>
4431 <data id="AutoLogin" value="true | false"/>
4432 <data id="UseProxyForDNS" value="true | false"/>
4433 ```
4434 #### macOS
4435 ```
4436 <dict>
4437   <key>Proxy</key>
4438   <dict>
4439     <key>Mode</key>
4440     <string>none | system | manual | autoDetect | autoConfig</string>
4441     <key>Locked</key>
4442     <true> | </false>
4443     <key>HTTPProxy</key>
4444     <string>https://httpproxy.example.com</string>
4445     <key>UseHTTPProxyForAllProtocols</key>
4446     <true> | </false>
4447     <key>SSLProxy</key>
4448     <string>https://sslproxy.example.com</string>
4449     <key>FTPProxy</key>
4450     <string>https://ftpproxy.example.com</string>
4451     <key>SOCKSProxy</key>
4452     <string>https://socksproxy.example.com</string>
4453     <key>SOCKSVersion</key>
4454     <string>4 | 5</string>
4455     <key>Passthrough</key>
4456     <string>&lt;local>&gt;</string>
4457     <key>AutoConfigURL</key>
4458     <string>URL_TO_AUTOCONFIG</string>
4459     <key>AutoLogin</key>
4460     <true> | </false>
4461     <key>UseProxyForDNS</key>
4462     <true> | </false>
4463   </dict>
4464 </dict>
4465 ```
4466 #### policies.json
4467 ```
4468 {
4469   "policies": {
4470     "Proxy": {
4471       "Mode": "none" | "system" | "manual" | "autoDetect" | "autoConfig",
4472       "Locked": true | false,
4473       "HTTPProxy": "hostname",
4474       "UseHTTPProxyForAllProtocols": true | false,
4475       "SSLProxy": "hostname",
4476       "FTPProxy": "hostname",
4477       "SOCKSProxy": "hostname",
4478       "SOCKSVersion": 4 | 5
4479       "Passthrough": "<local>",
4480       "AutoConfigURL": "URL_TO_AUTOCONFIG",
4481       "AutoLogin": true | false,
4482       "UseProxyForDNS": true | false
4483     }
4484   }
4485 }
4486 ```
4487 ### RequestedLocales
4488 Set the the list of requested locales for the application in order of preference. It will cause the corresponding language pack to become active.
4489
4490 Note: For Firefox 68, this can now be a string so that you can specify an empty value.
4491
4492 **Compatibility:** Firefox 64, Firefox ESR 60.4, Updated in Firefox 68, Firefox ESR 68\
4493 **CCK2 Equivalent:** N/A\
4494 **Preferences Affected:** N/A
4495 #### Windows (GPO)
4496 ```
4497 Software\Policies\Mozilla\Firefox\RequestedLocales\1 = "de"
4498 Software\Policies\Mozilla\Firefox\RequestedLocales\2 = "en-US"
4499
4500 or
4501
4502 Software\Policies\Mozilla\Firefox\RequestedLocales = "de,en-US"
4503 ```
4504 #### Windows (Intune)
4505 OMA-URI:
4506 ```
4507 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/RequestedLocalesString
4508 ```
4509 Value (string):
4510 ```
4511 <enabled/>
4512 <data id="Preferences_String" value="de,en-US"/>
4513 ```
4514 #### macOS
4515 ```
4516 <dict>
4517   <key>RequestedLocales</key>
4518   <array>
4519     <string>de</string>
4520     <string>en-US</string>
4521   </array>
4522 </dict>
4523
4524 or
4525
4526 <dict>
4527   <key>RequestedLocales</key>
4528   <string>de,en-US</string>
4529 </dict>
4530
4531 ```
4532 #### policies.json
4533 ```
4534 {
4535   "policies": {
4536     "RequestedLocales": ["de", "en-US"]
4537   }
4538 }
4539
4540 or
4541
4542 {
4543   "policies": {
4544     "RequestedLocales": "de,en-US"
4545   }
4546 }
4547 ```
4548 <a name="SanitizeOnShutdown"></a>
4549
4550 ### SanitizeOnShutdown (Selective)
4551 Clear data on shutdown. Choose from Cache, Cookies, Download History, Form & Search History, Browsing History, Active Logins, Site Preferences and Offline Website Data.
4552
4553 Previously, these values were always locked. Starting with Firefox 74 and Firefox ESR 68.6, you can use the `Locked` option to either keep the values unlocked (set it to false), or lock only the values you set (set it to true). If you want the old behavior of locking everything, do not set `Locked` at all.
4554
4555 **Compatibility:** Firefox 68, Firefox ESR 68 (Locked added in 74/68.6)\
4556 **CCK2 Equivalent:** N/A\
4557 **Preferences Affected:** `privacy.sanitize.sanitizeOnShutdown`,`privacy.clearOnShutdown.cache`,`privacy.clearOnShutdown.cookies`,`privacy.clearOnShutdown.downloads`,`privacy.clearOnShutdown.formdata`,`privacy.clearOnShutdown.history`,`privacy.clearOnShutdown.sessions`,`privacy.clearOnShutdown.siteSettings`,`privacy.clearOnShutdown.offlineApps`
4558 #### Windows (GPO)
4559 ```
4560 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Cache = 0x1 | 0x0
4561 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Cookies = 0x1 | 0x0
4562 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Downloads = 0x1 | 0x0
4563 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\FormData = 0x1 | 0x0
4564 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\History = 0x1 | 0x0
4565 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Sessions = 0x1 | 0x0
4566 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\SiteSettings = 0x1 | 0x0
4567 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\OfflineApps = 0x1 | 0x0
4568 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Locked = 0x1 | 0x0
4569 ```
4570 #### Windows (Intune)
4571 OMA-URI:
4572 ```
4573 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/A_SanitizeOnShutdown_Cache
4574 ```
4575 Value (string):
4576 ```
4577 <enabled/> or <disabled/>
4578 ```
4579 OMA-URI:
4580 ```
4581 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/B_SanitizeOnShutdown_Cookies
4582 ```
4583 Value (string):
4584 ```
4585 <enabled/> or <disabled/>
4586 ```
4587 OMA-URI:
4588 ```
4589 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/C_SanitizeOnShutdown_Downloads
4590 ```
4591 Value (string):
4592 ```
4593 <enabled/> or <disabled/>
4594 ```
4595 OMA-URI:
4596 ```
4597 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/D_SanitizeOnShutdown_FormData
4598 ```
4599 Value (string):
4600 ```
4601 <enabled/> or <disabled/>
4602 ```
4603 OMA-URI:
4604 ```
4605 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/E_SanitizeOnShutdown_History
4606 ```
4607 Value (string):
4608 ```
4609 <enabled/> or <disabled/>
4610 ```
4611 OMA-URI:
4612 ```
4613 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/F_SanitizeOnShutdown_Sessions
4614 ```
4615 Value (string):
4616 ```
4617 <enabled/> or <disabled/>
4618 ```
4619 OMA-URI:
4620 ```
4621 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/G_SanitizeOnShutdown_SiteSettings
4622 ```
4623 Value (string):
4624 ```
4625 <enabled/> or <disabled/>
4626 ```
4627 OMA-URI:
4628 ```
4629 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/H_SanitizeOnShutdown_OfflineApps
4630 ```
4631 Value (string):
4632 ```
4633 <enabled/> or <disabled/>
4634 ```
4635 OMA-URI:
4636 ```
4637 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/I_SanitizeOnShutdown_Locked
4638 ```
4639 Value (string):
4640 ```
4641 <enabled/> or <disabled/>
4642 ```
4643 #### macOS
4644 ```
4645 <dict>
4646   <key>SanitizeOnShutdown</key>
4647   <dict>
4648     <key>Cache</key>
4649     <true/> | <false/>
4650     <key>Cookies</key>
4651     <true/> | <false/>
4652     <key>Downloads</key>
4653     <true/> | <false/>
4654     <key>FormData</key>
4655     <true/> | <false/>
4656     <key>History</key>
4657     <true/> | <false/>
4658     <key>Sessions</key>
4659     <true/> | <false/>
4660     <key>SiteSettings</key>
4661     <true/> | <false/>
4662     <key>OfflineApps</key>
4663     <true/> | <false/>
4664     <key>Locked</key>
4665     <true/> | <false/>
4666   </dict>
4667 </dict>
4668 ```
4669 #### policies.json
4670 ```
4671 {
4672   "policies": {
4673     "SanitizeOnShutdown": {
4674       "Cache": true | false,
4675       "Cookies": true | false,
4676       "Downloads": true | false,
4677       "FormData": true | false,
4678       "History": true | false,
4679       "Sessions": true | false,
4680       "SiteSettings": true | false,
4681       "OfflineApps": true | false,
4682       "Locked": true | false
4683     }
4684   }
4685 }
4686 ```
4687 ### SanitizeOnShutdown (All)
4688 Clear all data on shutdown, including Browsing & Download History, Cookies, Active Logins, Cache, Form & Search History, Site Preferences and Offline Website Data.
4689
4690 **Compatibility:** Firefox 60, Firefox ESR 60\
4691 **CCK2 Equivalent:** N/A\
4692 **Preferences Affected:** `privacy.sanitize.sanitizeOnShutdown`,`privacy.clearOnShutdown.cache`,`privacy.clearOnShutdown.cookies`,`privacy.clearOnShutdown.downloads`,`privacy.clearOnShutdown.formdata`,`privacy.clearOnShutdown.history`,`privacy.clearOnShutdown.sessions`,`privacy.clearOnShutdown.siteSettings`,`privacy.clearOnShutdown.offlineApps`
4693 #### Windows (GPO)
4694 ```
4695 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown = 0x1 | 0x0
4696 ```
4697 #### Windows (Intune)
4698 OMA-URI:
4699 ```
4700 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/C_SanitizeOnShutdown
4701 ```
4702 Value (string):
4703 ```
4704 <enabled/> or <disabled/>
4705 ```
4706 #### macOS
4707 ```
4708 <dict>
4709   <key>SanitizeOnShutdown</key>
4710   <true/> | <false/>
4711 </dict>
4712 ```
4713 #### policies.json
4714 ```
4715 {
4716   "policies": {
4717     "SanitizeOnShutdown": true | false
4718   }
4719 }
4720 ```
4721 ### SearchBar
4722 Set whether or not search bar is displayed.
4723
4724 **Compatibility:** Firefox 60, Firefox ESR 60\
4725 **CCK2 Equivalent:** `showSearchBar`\
4726 **Preferences Affected:** N/A
4727
4728 #### Windows (GPO)
4729 ```
4730 Software\Policies\Mozilla\Firefox\SearchBar = "unified" | "separate"
4731 ```
4732
4733 #### Windows (Intune)
4734 OMA-URI:
4735 ```
4736 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SearchBar
4737 ```
4738 Value (string):
4739 ```
4740 <enabled/>
4741 <data id="Permissions" value="unified | separate"/>
4742 ```
4743 #### macOS
4744 ```
4745 <dict>
4746   <key>SearchBar</key>
4747   <string>unified | separate</string>
4748 </dict>
4749 ```
4750 #### policies.json
4751 ```
4752 {
4753   "policies": {
4754     "SearchBar": "unified" | "separate"
4755   }
4756 }
4757 ```
4758 <a name="SearchEngines"></a>
4759
4760 ### SearchEngines (This policy is only available on the ESR.)
4761
4762 ### SearchEngines | Default
4763
4764 Set the default search engine. This policy is only available on the ESR.
4765
4766 **Compatibility:** Firefox ESR 60\
4767 **CCK2 Equivalent:** `defaultSearchEngine`\
4768 **Preferences Affected:** N/A
4769
4770 #### Windows (GPO)
4771 ```
4772 Software\Policies\Mozilla\Firefox\SearchEngines\Default = NAME_OF_SEARCH_ENGINE
4773 ```
4774 #### Windows (Intune)
4775 OMA-URI:
4776 ```
4777 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_Default
4778 ```
4779 Value (string):
4780 ```
4781 <enabled/>
4782 <data id="SearchEngines_Default" value="NAME_OF_SEARCH_ENGINE"/>
4783 ```
4784 #### macOS
4785 ```
4786 <dict>
4787   <key>SearchEngines</key>
4788   <dict>
4789     <key>Default</key>
4790     <string>NAME_OF_SEARCH_ENGINE</string>
4791   </dict>
4792 </dict>
4793 ```
4794 #### policies.json
4795 ```
4796 {
4797   "policies": {
4798     "SearchEngines": {
4799       "Default": "NAME_OF_SEARCH_ENGINE"
4800     }
4801   }
4802 }
4803 ```
4804 ### SearchEngines | PreventInstalls
4805
4806 Prevent installing search engines from webpages.
4807
4808 **Compatibility:** Firefox ESR 60\
4809 **CCK2 Equivalent:** `disableSearchEngineInstall`\
4810 **Preferences Affected:** N/A
4811
4812 #### Windows (GPO)
4813 ```
4814 Software\Policies\Mozilla\Firefox\SearchEngines\PreventInstalls = 0x1 | 0x0
4815 ```
4816 #### Windows (Intune)
4817 OMA-URI:
4818 ```
4819 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_PreventInstalls
4820 ```
4821 Value (string):
4822 ```
4823 <enabled/> or <disabled/>
4824 ```
4825 #### macOS
4826 ```
4827 <dict>
4828   <key>SearchEngines</key>
4829   <dict>
4830     <key>PreventInstalls</key>
4831     <true/> | <false/>
4832   </dict>
4833 </dict>
4834 ```
4835 #### policies.json
4836 ```
4837 {
4838   "policies": {
4839     "SearchEngines": {
4840       "PreventInstalls": true | false
4841     }
4842   }
4843 }
4844 ```
4845 ### SearchEngines | Remove
4846
4847 Hide built-in search engines. This policy is only available on the ESR.
4848
4849 **Compatibility:** Firefox ESR 60.2\
4850 **CCK2 Equivalent:** `removeDefaultSearchEngines` (removed all built-in engines)\
4851 **Preferences Affected:** N/A
4852
4853 #### Windows (GPO)
4854 ```
4855 Software\Policies\Mozilla\Firefox\SearchEngines\Remove\1 = NAME_OF_SEARCH_ENGINE
4856 ```
4857 #### Windows (Intune)
4858 OMA-URI:
4859 ```
4860 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_Remove
4861 ```
4862 Value (string):
4863 ```
4864 <enabled/>
4865 <data id="SearchEngines_Remove" value="1&#xF000;NAME_OF_SEARCH_ENGINE"/>
4866 ```
4867 #### macOS
4868 ```
4869 <dict>
4870   <key>SearchEngines</key>
4871   <dict>
4872     <key>Remove</key>
4873     <array>
4874       <string>NAME_OF_SEARCH_ENGINE</string>
4875     </array>
4876   </dict>
4877 </dict>
4878 ```
4879 #### policies.json
4880 ```
4881 {
4882   "policies": {
4883     "SearchEngines": {
4884       "Remove": ["NAME_OF_SEARCH_ENGINE"]
4885     }
4886   }
4887 }
4888 ```
4889 ### SearchEngines | Add
4890
4891 Add new search engines (up to five). This policy is only available on the ESR. `Name` and `URLTemplate` are required.
4892
4893 `Name` is the name of the search engine.
4894
4895 `URLTemplate` is the search URL with {searchTerms} to substitute for the search term.
4896
4897 `Method` is either GET or POST
4898
4899 `IconURL` is a URL for the icon to use.
4900
4901 `Alias` is a keyword to use for the engine.
4902
4903 `Description` is a description of the search engine.
4904
4905 `PostData` is the POST data as name value pairs separated by &.
4906
4907 `SuggestURLTemplate` is a search suggestions URL with {searchTerms} to substitute for the search term.
4908
4909 **Compatibility:** Firefox ESR 60 (POST support in Firefox ESR 68)\
4910 **CCK2 Equivalent:** `searchplugins`\
4911 **Preferences Affected:** N/A
4912
4913 #### Windows (GPO)
4914 ```
4915 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Name = "Example1"
4916 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\URLTemplate = "https://www.example.org/q={searchTerms}"
4917 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Method = "GET" | "POST"
4918 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\IconURL = "https://www.example.org/favicon.ico"
4919 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Alias = "example"
4920 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Description = "Example Description"
4921 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\SuggestURLTemplate = "https://www.example.org/suggestions/q={searchTerms}"
4922 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\PostData = "name=value&q={searchTerms}"
4923 ```
4924 #### Windows (Intune)
4925 OMA-URI:
4926 ```
4927 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_1
4928 ```
4929 Value (string):
4930 ```
4931 <enabled/>
4932 <data id="SearchEngine_Name" value="Example1"/>
4933 <data id="SearchEngine_URLTemplate" value="https://www.example.org/q={searchTerms"/>
4934 <data id="SearchEngine_Method" value="GET | POST"/>
4935 <data id="SearchEngine_IconURL" value="https://www.example.org/favicon.ico"/>
4936 <data id="SearchEngine_Alias" value="example"/>
4937 <data id="SearchEngine_Description" value="Example Description"/>
4938 <data id="SearchEngine_SuggestURLTemplate" value="https://www.example.org/suggestions/q={searchTerms}"/>
4939 <data id="SearchEngine_PostData" value="name=value&amp;q={searchTerms}"/>
4940 ```
4941 #### macOS
4942 ```
4943 <dict>
4944   <key>SearchEngines</key>
4945   <dict>
4946     <key>Add</key>
4947     <array>
4948       <dict>
4949         <key>Name</key>
4950         <string>Example1</string>
4951         <key>URLTemplate</key>
4952         <string>https://www.example.org/q={searchTerms}</string>
4953         <key>Method</key>
4954         <string>GET | POST </string>
4955         <key>IconURL</key>
4956         <string>https://www.example.org/favicon.ico</string>
4957         <key>Alias</key>
4958         <string>example</string>
4959         <key>Description</key>
4960         <string>Example Description</string>
4961         <key>SuggestURLTemplate</key>
4962         <string>https://www.example.org/suggestions/q={searchTerms}</string>
4963         <key>PostData</key>
4964         <string>name=value&q={searchTerms}</string>
4965       </dict>
4966     <array>
4967   </dict>
4968 </dict>
4969 ```
4970 #### policies.json
4971 ```
4972 {
4973   "policies": {
4974     "SearchEngines": {
4975       "Add": [
4976         {
4977           "Name": "Example1",
4978           "URLTemplate": "https://www.example.org/q={searchTerms}",
4979           "Method": "GET" | "POST",
4980           "IconURL": "https://www.example.org/favicon.ico",
4981           "Alias": "example",
4982           "Description": "Description",
4983           "PostData": "name=value&q={searchTerms}",
4984           "SuggestURLTemplate": "https://www.example.org/suggestions/q={searchTerms}"
4985         }
4986       ]
4987     }
4988   }
4989 }
4990 ```
4991 ### SearchSuggestEnabled
4992
4993 Enable search suggestions.
4994
4995 **Compatibility:** Firefox 68, Firefox ESR 68\
4996 **CCK2 Equivalent:** N/A\
4997 **Preferences Affected:** `browser.urlbar.suggest.searches`,`browser.search.suggest.enabled`
4998
4999 #### Windows (GPO)
5000 ```
5001 Software\Policies\Mozilla\Firefox\SearchSuggestEnabled = 0x1 | 0x0
5002 ```
5003 #### Windows (Intune)
5004 OMA-URI:
5005 ```
5006 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchSuggestEnabled
5007 ```
5008 Value (string):
5009 ```
5010 <enabled/> or <disabled/>
5011 ```
5012 #### macOS
5013 ```
5014 <dict>
5015   <key>SearchSuggestEnabled</key>
5016   <true/> | <false/>
5017 </dict>
5018 ```
5019 #### policies.json
5020 ```
5021 {
5022   "policies": {
5023     "SearchSuggestEnabled": true | false
5024   }
5025 }
5026 ```
5027 ### SecurityDevices
5028
5029 Install PKCS #11 modules.
5030
5031 **Compatibility:** Firefox 64, Firefox ESR 60.4\
5032 **CCK2 Equivalent:** `certs.devices`\
5033 **Preferences Affected:** N/A
5034
5035 #### Windows (GPO)
5036 ```
5037 Software\Policies\Mozilla\Firefox\SecurityDevices\NAME_OF_DEVICE = PATH_TO_LIBRARY_FOR_DEVICE
5038 ```
5039 #### Windows (Intune)
5040 OMA-URI:
5041 ```
5042 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SecurityDevices
5043 ```
5044 Value (string):
5045 ```
5046 <enabled/>
5047 <data id="SecurityDevices" value="NAME_OF_DEVICE&#xF000;PATH_TO_LIBRARY_FOR_DEVICE"/>
5048 ```
5049 #### macOS
5050 ```
5051 <dict>
5052   <key>SecurityDevices</key>
5053   <dict>
5054     <key>NAME_OF_DEVICE</key>
5055     <string>PATH_TO_LIBRARY_FOR_DEVICE</string>
5056   </dict>
5057 </dict>
5058 ```
5059
5060 #### policies.json
5061 ```
5062 {
5063   "policies": {
5064     "SecurityDevices": {
5065       "NAME_OF_DEVICE": "PATH_TO_LIBRARY_FOR_DEVICE"
5066     }
5067   }
5068 }
5069 ```
5070 ### ShowHomeButton
5071 Show the home button on the toolbar.
5072
5073 Future versions of Firefox will not show the home button by default.
5074
5075 **Compatibility:** Firefox 88, Firefox ESR 78.10\
5076 **CCK2 Equivalent:** N/A\
5077 **Preferences Affected:** N/A
5078
5079 #### Windows (GPO)
5080 ```
5081 Software\Policies\Mozilla\Firefox\ShowHomeButton = 0x1 | 0x0
5082 ```
5083 #### Windows (Intune)
5084 OMA-URI:
5085 ```
5086 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/ShowHomeButton
5087 ```
5088 Value (string):
5089 ```
5090 <enabled/> or <disabled/>
5091 ```
5092 #### macOS
5093 ```
5094 <dict>
5095   <key>ShowHomeButton</key>
5096   <true/> | <false/>
5097 </dict>
5098 ```
5099 #### policies.json
5100 ```
5101 {
5102   "policies": {
5103     "ShowHomeButton": true | false
5104   }
5105 }
5106 ```
5107 ### SSLVersionMax
5108
5109 Set and lock the maximum version of TLS.
5110
5111 **Compatibility:** Firefox 66, Firefox ESR 60.6\
5112 **CCK2 Equivalent:** N/A\
5113 **Preferences Affected:** `security.tls.version.max`
5114
5115 #### Windows (GPO)
5116 ```
5117 Software\Policies\Mozilla\Firefox\SSLVersionMax = "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
5118 ```
5119 #### Windows (Intune)
5120 OMA-URI:
5121 ```
5122 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SSLVersionMax
5123 ```
5124 Value (string):
5125 ```
5126 <enabled/>
5127 <data id="SSLVersion" value="tls1 | tls1.2 | tls1.3"/>
5128 ```
5129 #### macOS
5130 ```
5131 <dict>
5132   <key>SSLVersionMax</key>
5133   <string>tls1 | tls1.1 | tls1.2 | tls1.3</string>
5134 </dict>
5135 ```
5136
5137 #### policies.json
5138 ```
5139 {
5140   "policies": {
5141     "SSLVersionMax": "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
5142   }
5143 }
5144 ```
5145 ### SSLVersionMin
5146
5147 Set and lock the minimum version of TLS.
5148
5149 **Compatibility:** Firefox 66, Firefox ESR 60.6\
5150 **CCK2 Equivalent:** N/A\
5151 **Preferences Affected:** `security.tls.version.min`
5152
5153 #### Windows (GPO)
5154 ```
5155 Software\Policies\Mozilla\Firefox\SSLVersionMin = "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
5156 ```
5157 #### Windows (Intune)
5158 OMA-URI:
5159 ```
5160 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SSLVersionMin
5161 ```
5162 Value (string):
5163 ```
5164 <enabled/>
5165 <data id="SSLVersion" value="tls1 | tls1.2 | tls1.3"/>
5166 ```
5167 #### macOS
5168 ```
5169 <dict>
5170   <key>SSLVersionMin</key>
5171   <string>tls1 | tls1.1 | tls1.2 | tls1.3</string>
5172 </dict>
5173 ```
5174
5175 #### policies.json
5176 ```
5177 {
5178   "policies": {
5179     "SSLVersionMin": "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
5180   }
5181 }
5182 ```
5183 ### SupportMenu
5184 Add a menuitem to the help menu for specifying support information.
5185
5186 **Compatibility:** Firefox 68.0.1, Firefox ESR 68.0.1\
5187 **CCK2 Equivalent:** helpMenu\
5188 **Preferences Affected:** N/A
5189
5190 #### Windows (GPO)
5191 ```
5192 Software\Policies\Mozilla\Firefox\SupportMenu\Title = "Support Menu"
5193 Software\Policies\Mozilla\Firefox\SupportMenu\URL = "http://example.com/support"
5194 Software\Policies\Mozilla\Firefox\SupportMenu\AccessKey = "S"
5195 ```
5196 #### Windows (Intune)
5197 OMA-URI:
5198 ```
5199 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SupportMenu
5200 ```
5201 Value (string):
5202 ```
5203 <enabled/>
5204 <data id="SupportMenuTitle" value="Support Menu"/>
5205 <data id="SupportMenuURL" value="http://example.com/support"/>
5206 <data id="SupportMenuAccessKey" value="S">
5207 ```
5208 #### macOS
5209 ```
5210 <dict>
5211   <key>SupportMenu</key>
5212   <dict>
5213     <key>Title</key>
5214     <string>SupportMenu</string>
5215     <key>URL</key>
5216     <string>http://example.com/support</string>
5217     <key>AccessKey</key>
5218     <string>S</string>
5219   </dict>
5220 </dict>
5221 ```
5222 #### policies.json
5223 ```
5224 {
5225   "policies": {
5226     "SupportMenu": {
5227       "Title": "Support Menu",
5228       "URL": "http://example.com/support",
5229       "AccessKey": "S"
5230     }
5231   }
5232 }
5233 ```
5234 ### UserMessaging
5235
5236 Prevent Firefox from messaging the user in certain situations.
5237
5238 `WhatsNew` Remove the "What's New" icon and menuitem.
5239
5240 `ExtensionRecommendations` If false, don't recommend extensions while the user is visiting web pages.
5241
5242 `FeatureRecommendations` IF false, don't recommend browser features.
5243
5244 `UrlbarInterventions` If false, Don't offer Firefox specific suggestions in the URL bar.
5245
5246 `SkipOnboarding` If true, don't show onboarding messages on the new tab page.
5247
5248 **Compatibility:** Firefox 75, Firefox ESR 68.7\
5249 **CCK2 Equivalent:** N/A\
5250 **Preferences Affected:** `browser.messaging-system.whatsNewPanel.enabled`,`browser.newtabpage.activity-stream.asrouter.userprefs.cfr.addons`,`browser.newtabpage.activity-stream.asrouter.userprefs.cfr.features`,`browser.aboutwelcome.enabled`
5251
5252 #### Windows (GPO)
5253 ```
5254 Software\Policies\Mozilla\Firefox\UserMessaging\WhatsNew = 0x1 | 0x0
5255 Software\Policies\Mozilla\Firefox\UserMessaging\ExtensionRecommendations = 0x1 | 0x0
5256 Software\Policies\Mozilla\Firefox\UserMessaging\FeatureRecommendations = 0x1 | 0x0
5257 Software\Policies\Mozilla\Firefox\UserMessaging\UrlbarInterventions = 0x1 | 0x0
5258 Software\Policies\Mozilla\Firefox\UserMessaging\SkipOnboarding = 0x1 | 0x0
5259 ```
5260 #### Windows (Intune)
5261 OMA-URI:
5262 ```
5263 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/UserMessaging_WhatsNew
5264 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/UserMessaging_ExtensionRecommendations
5265 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/UserMessaging_FeatureRecommendations
5266 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/UserMessaging_UrlbarInterventions
5267 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/UserMessaging_SkipOnboarding
5268 ```
5269 Value (string):
5270 ```
5271 <enabled/> or <disabled/>
5272 ```
5273 #### macOS
5274 ```
5275 <dict>
5276   <key>UserMessaging</key>
5277   <dict>
5278     <key>WhatsNew</key>
5279     <true/> | <false/>
5280     <key>ExtensionRecommendations</key>
5281     <true/> | <false/>
5282     <key>FeatureRecommendations</key>
5283     <true/> | <false/>
5284     <key>UrlbarInterventions</key>
5285     <true/> | <false/>
5286     <key>SkipOnboarding</key>
5287     <true/> | <false/>
5288   </dict>
5289 </dict>
5290 ```
5291 #### policies.json
5292 ```
5293 {
5294   "policies": {
5295     "UserMessaging": {
5296       "WhatsNew": true | false,
5297       "ExtensionRecommendations": true | false,
5298       "FeatureRecommendations": true | false,
5299       "UrlbarInterventions": true | false
5300       "SkipOnboarding": true | false
5301     }
5302   }
5303 }
5304 ```
5305 ### WebsiteFilter
5306 Block websites from being visited. The parameters take an array of Match Patterns, as documented in https://developer.mozilla.org/en-US/Add-ons/WebExtensions/Match_patterns.
5307 The arrays are limited to 1000 entries each.
5308
5309 As of Firefox 83 and Firefox ESR 78.5, file URLs are supported.
5310
5311 **Compatibility:** Firefox 60, Firefox ESR 60\
5312 **CCK2 Equivalent:** N/A\
5313 **Preferences Affected:** N/A
5314
5315 #### Windows (GPO)
5316 ```
5317 Software\Policies\Mozilla\Firefox\WebsiteFilter\Block\1 = "<all_urls>"
5318 Software\Policies\Mozilla\Firefox\WebsiteFilter\Exceptions\1 = "http://example.org/*"
5319 ```
5320 #### Windows (Intune)
5321 OMA-URI:
5322 ```
5323 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/B_WebsiteFilter_Block
5324 ```
5325 Value (string):
5326 ```
5327 <enabled/>
5328 <data id="WebsiteFilter" value="1&#xF000;<all_urls>"/>
5329 ```
5330 OMA-URI:
5331 ```
5332 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/B_WebsiteFilter_Exceptions
5333 ```
5334 Value (string):
5335 ```
5336 <enabled/>
5337 <data id="WebsiteFilter" value="1&#xF000;http://example.org/*"/>
5338 ```
5339 #### macOS
5340 ```
5341 <dict>
5342   <key>WebsiteFilter</key>
5343   <dict>
5344     <key>Block</key>
5345     <array>
5346       <string><all_urls></string>
5347     </array>
5348     <key>Exceptions</key>
5349     <array>
5350       <string>http://example.org/*</string>
5351     </array>
5352   </dict>
5353
5354 </dict>
5355 ```
5356 #### policies.json
5357 ```
5358 {
5359   "policies": {
5360     "WebsiteFilter": {
5361       "Block": ["<all_urls>"],
5362       "Exceptions": ["http://example.org/*"]
5363     }
5364   }
5365 }
5366 ```