docs/index.md

   1 Firefox policies can be specified using the [Group Policy templates on Windows](https://github.com/mozilla/policy-templates/tree/master/windows), [Intune on Windows](https://support.mozilla.org/kb/managing-firefox-intune), [configuration profiles on macOS](https://github.com/mozilla/policy-templates/tree/master/mac), or by creating a file called `policies.json`. On Windows, create a directory called `distribution` where the EXE is located and place the file there. On Mac, the file goes into `Firefox.app/Contents/Resources/distribution`.  On Linux, the file goes into `firefox/distribution`, where `firefox` is the installation directory for firefox, which varies by distribution or you can specify system-wide policy by placing the file in `/etc/firefox/policies`.
   2
   3 Unfortunately, JSON files do not support comments, but you can add extra entries to the JSON to use as comments. You will see an error in about:policies, but the policies will still work properly. For example:
   4
   5 ```
   6 {
   7   "policies": {
   8     "Authentication": {
   9       "SPNEGO": ["mydomain.com", "https://myotherdomain.com"]
  10     }
  11     "Authentication_Comment": "These domains are required for us"
  12   }
  13 }
  14 ```
  15
  16 | Policy Name | Description
  17 | --- | --- |
  18 | **[`3rdparty`](#3rdparty)** | Set policies that WebExtensions can access via chrome.storage.managed.
  19 | **[`AllowedDomainsForApps`](#alloweddomainsforapps)** | Define domains allowed to access Google Workspace.
  20 | **[`AppAutoUpdate`](#appautoupdate)** | Enable or disable automatic application update.
  21 | **[`AppUpdatePin`](#appupdatepin)** | Prevent Firefox from being updated beyond the specified version.
  22 | **[`AppUpdateURL`](#appupdateurl)** | Change the URL for application update.
  23 | **[`Authentication`](#authentication)** | Configure sites that support integrated authentication.
  24 | **[`AutoLaunchProtocolsFromOrigins`](#autolaunchprotocolsfromorigins)** | Define a list of external protocols that can be used from listed origins without prompting the user.
  25 | **[`BackgroundAppUpdate`](#backgroundappupdate)** | Enable or disable the background updater (Windows only).
  26 | **[`BlockAboutAddons`](#blockaboutaddons)** | Block access to the Add-ons Manager (about:addons).
  27 | **[`BlockAboutConfig`](#blockaboutconfig)** | Block access to about:config.
  28 | **[`BlockAboutProfiles`](#blockaboutprofiles)** | Block access to About Profiles (about:profiles).
  29 | **[`BlockAboutSupport`](#blockaboutsupport)** | Block access to Troubleshooting Information (about:support).
  30 | **[`Bookmarks`](#bookmarks)** | Add bookmarks in either the bookmarks toolbar or menu.
  31 | **[`CaptivePortal`](#captiveportal)** | Enable or disable the detection of captive portals.
  32 | **[`Certificates`](#certificates)** |
  33 | **[`Certificates -> ImportEnterpriseRoots`](#certificates--importenterpriseroots)** | Trust certificates that have been added to the operating system certificate store by a user or administrator.
  34 | **[`Certificates -> Install`](#certificates--install)** | Install certificates into the Firefox certificate store.
  35 | **[`Containers`](#containers)** | Set policies related to [containers](https://addons.mozilla.org/firefox/addon/multi-account-containers/).
  36 | **[`Cookies`](#cookies)** | Configure cookie preferences.
  37 | **[`DefaultDownloadDirectory`](#defaultdownloaddirectory)** | Set the default download directory.
  38 | **[`DisableAppUpdate`](#disableappupdate)** | Turn off application updates.
  39 | **[`DisableBuiltinPDFViewer`](#disablebuiltinpdfviewer)** | Disable the built in PDF viewer.
  40 | **[`DisabledCiphers`](#disabledciphers)** | Disable ciphers.
  41 | **[`DisableDefaultBrowserAgent`](#disabledefaultbrowseragent)** | Prevent the default browser agent from taking any actions (Windows only).
  42 | **[`DisableDeveloperTools`](#disabledevelopertools)** | Remove access to all developer tools.
  43 | **[`DisableFeedbackCommands`](#disablefeedbackcommands)** | Disable the menus for reporting sites.
  44 | **[`DisableFirefoxAccounts`](#disablefirefoxaccounts)** | Disable Firefox Accounts integration (Sync).
  45 | **[`DisableFirefoxScreenshots`](#disablefirefoxscreenshots)** | Remove access to Firefox Screenshots.
  46 | **[`DisableFirefoxStudies`](#disablefirefoxstudies)** | Disable Firefox studies (Shield).
  47 | **[`DisableForgetButton`](#disableforgetbutton)** | Disable the "Forget" button.
  48 | **[`DisableFormHistory`](#disableformhistory)** | Turn off saving information on web forms and the search bar.
  49 | **[`DisableMasterPasswordCreation`](#disablemasterpasswordcreation)** | Remove the master password functionality.
  50 | **[`DisablePasswordReveal`](#disablepasswordreveal)** | Do not allow passwords to be revealed in saved logins.
  51 | **[`DisablePocket`](#disablepocket)** | Remove Pocket in the Firefox UI.
  52 | **[`DisablePrivateBrowsing`](#disableprivatebrowsing)** | Remove access to private browsing.
  53 | **[`DisableProfileImport`](#disableprofileimport)** | Disables the "Import data from another browser" option in the bookmarks window.
  54 | **[`DisableProfileRefresh`](#disableprofilerefresh)** | Disable the Refresh Firefox button on about:support and support.mozilla.org
  55 | **[`DisableSafeMode`](#disablesafemode)** | Disable safe mode within the browser.
  56 | **[`DisableSecurityBypass`](#disablesecuritybypass)** | Prevent the user from bypassing security in certain cases.
  57 | **[`DisableSetDesktopBackground`](#disablesetdesktopbackground)** | Remove the "Set As Desktop Background..." menuitem when right clicking on an image.
  58 | **[`DisableSystemAddonUpdate`](#disablesystemaddonupdate)** | Prevent system add-ons from being installed or updated.
  59 | **[`DisableTelemetry`](#disabletelemetry)** | DisableTelemetry
  60 | **[`DisableThirdPartyModuleBlocking`](#disablethirdpartymoduleblocking)** | Do not allow blocking third-party modules.
  61 | **[`DisplayBookmarksToolbar`](#displaybookmarkstoolbar)** | Set the initial state of the bookmarks toolbar.
  62 | **[`DisplayMenuBar`](#displaymenubar)** | Set the state of the menubar.
  63 | **[`DNSOverHTTPS`](#dnsoverhttps)** | Configure DNS over HTTPS.
  64 | **[`DontCheckDefaultBrowser`](#dontcheckdefaultbrowser)** | Don't check if Firefox is the default browser at startup.
  65 | **[`DownloadDirectory`](#downloaddirectory)** | Set and lock the download directory.
  66 | **[`EnableTrackingProtection`](#enabletrackingprotection)** | Configure tracking protection.
  67 | **[`EncryptedMediaExtensions`](#encryptedmediaextensions)** | Enable or disable Encrypted Media Extensions and optionally lock it.
  68 | **[`EnterprisePoliciesEnabled`](#enterprisepoliciesenabled)** | Enable policy support on macOS.
  69 | **[`ExemptDomainFileTypePairsFromFileTypeDownloadWarnings`](#exemptdomainfiletypepairsfromfiletypedownloadwarnings)** | Disable warnings based on file extension for specific file types on domains.
  70 | **[`Extensions`](#extensions)** | Control the installation, uninstallation and locking of extensions.
  71 | **[`ExtensionSettings`](#extensionsettings)** | Manage all aspects of extensions.
  72 | **[`ExtensionUpdate`](#extensionupdate)** | Control extension updates.
  73 | **[`FirefoxHome`](#firefoxhome)** | Customize the Firefox Home page.
  74 | **[`FirefoxSuggest`](#firefoxsuggest)** | Customize Firefox Suggest.
  75 | **[`GoToIntranetSiteForSingleWordEntryInAddressBar`](#gotointranetsiteforsinglewordentryinaddressbar)** | Force direct intranet site navigation instead of searching when typing single word entries in the address bar.
  76 | **[`Handlers`](#handlers)** | Configure default application handlers.
  77 | **[`HardwareAcceleration`](#hardwareacceleration)** | Control hardware acceleration.
  78 | **[`Homepage`](#homepage)** | Configure the default homepage and how Firefox starts.
  79 | **[`InstallAddonsPermission`](#installaddonspermission)** | Configure the default extension install policy as well as origins for extension installs are allowed.
  80 | **[`LegacyProfiles`](#legacyprofiles)** | Disable the feature enforcing a separate profile for each installation.
  81 | **[`LegacySameSiteCookieBehaviorEnabled`](#legacysamesitecookiebehaviorenabled)** | Enable default legacy SameSite cookie behavior setting.
  82 | **[`LegacySameSiteCookieBehaviorEnabledForDomainList`](#legacysamesitecookiebehaviorenabledfordomainlist)** | Revert to legacy SameSite behavior for cookies on specified sites.
  83 | **[`LocalFileLinks`](#localfilelinks)** | Enable linking to local files by origin.
  84 | **[`ManagedBookmarks`](#managedbookmarks)** | Configures a list of bookmarks managed by an administrator that cannot be changed by the user.
  85 | **[`ManualAppUpdateOnly`](#manualappupdateonly)** | Allow manual updates only and do not notify the user about updates.
  86 | **[`NetworkPrediction`](#networkprediction)** | Enable or disable network prediction (DNS prefetching).
  87 | **[`NewTabPage`](#newtabpage)** | Enable or disable the New Tab page.
  88 | **[`NoDefaultBookmarks`](#nodefaultbookmarks)** | Disable the creation of default bookmarks.
  89 | **[`OfferToSaveLogins`](#offertosavelogins)** | Control whether or not Firefox offers to save passwords.
  90 | **[`OfferToSaveLoginsDefault`](#offertosaveloginsdefault)** | Set the default value for whether or not Firefox offers to save passwords.
  91 | **[`OverrideFirstRunPage`](#overridefirstrunpage)** | Override the first run page.
  92 | **[`OverridePostUpdatePage`](#overridepostupdatepage)** | Override the upgrade page.
  93 | **[`PasswordManagerEnabled`](#passwordmanagerenabled)** | Remove (some) access to the password manager.
  94 | **[`PasswordManagerExceptions`](#passwordmanagerexceptions)** | Prevent Firefox from saving passwords for specific sites.
  95 | **[`PDFjs`](#pdfjs)** | Disable or configure PDF.js, the built-in PDF viewer.
  96 | **[`Permissions`](#permissions)** | Set permissions associated with camera, microphone, location, and notifications.
  97 | **[`PictureInPicture`](#pictureinpicture)** | Enable or disable Picture-in-Picture.
  98 | **[`PopupBlocking`](#popupblocking)** | Configure the default pop-up window policy as well as origins for which pop-up windows are allowed.
  99 | **[`Preferences`](#preferences)** | Set and lock preferences.
 100 | **[`PrimaryPassword`](#primarypassword)** | Require or prevent using a primary (formerly master) password.
 101 | **[`PromptForDownloadLocation`](#promptfordownloadlocation)** | Ask where to save each file before downloading.
 102 | **[`Proxy`](#proxy)** | Configure proxy settings.
 103 | **[`RequestedLocales`](#requestedlocales)** | Set the the list of requested locales for the application in order of preference.
 104 | **[`SanitizeOnShutdown` (All)](#sanitizeonshutdown-all)** | Clear all data on shutdown.
 105 | **[`SanitizeOnShutdown` (Selective)](#sanitizeonshutdown-selective)** | Clear data on shutdown.
 106 | **[`SearchBar`](#searchbar)** | Set whether or not search bar is displayed.
 107 | **[`SearchEngines`](#searchengines-this-policy-is-only-available-on-the-esr)** |
 108 | **[`SearchEngines -> Add`](#searchengines--add)** | Add new search engines.
 109 | **[`SearchEngines -> Default`](#searchengines--default)** | Set the default search engine.
 110 | **[`SearchEngines -> PreventInstalls`](#searchengines--preventinstalls)** | Prevent installing search engines from webpages.
 111 | **[`SearchEngines -> Remove`](#searchengines--remove)** | Hide built-in search engines.
 112 | **[`SearchSuggestEnabled`](#searchsuggestenabled)** | Enable search suggestions.
 113 | **[`SecurityDevices`](#securitydevices)** | Install PKCS #11 modules.
 114 | **[`ShowHomeButton`](#showhomebutton)** | Show the home button on the toolbar.
 115 | **[`SSLVersionMax`](#sslversionmax)** | Set and lock the maximum version of TLS.
 116 | **[`SSLVersionMin`](#sslversionmin)** | Set and lock the minimum version of TLS.
 117 | **[`StartDownloadsInTempDirectory`](#startdownloadsintempdirectory)** | Force downloads to start off in a local, temporary location rather than the default download directory.
 118 | **[`SupportMenu`](#supportmenu)** | Add a menuitem to the help menu for specifying support information.
 119 | **[`UserMessaging`](#usermessaging)** | Don't show certain messages to the user.
 120 | **[`UseSystemPrintDialog`](#usesystemprintdialog)** | Print using the system print dialog instead of print preview.
 121 | **[`WebsiteFilter`](#websitefilter)** | Block websites from being visited.
 122 | **[`WindowsSSO`](#windowssso)** | Allow Windows single sign-on for Microsoft, work, and school accounts.
 123
 124 ### 3rdparty
 125
 126 Allow WebExtensions to configure policy. For more information, see [Adding policy support to your extension](https://extensionworkshop.com/documentation/enterprise/adding-policy-support-to-your-extension/).
 127
 128 For GPO and Intune, the extension developer should provide an ADMX file.
 129
 130 **Compatibility:** Firefox 68\
 131 **CCK2 Equivalent:** N/A\
 132 **Preferences Affected:** N/A
 133
 134 #### macOS
 135 ```
 136 <dict>
 137   <key>3rdparty</key>
 138   <dict>
 139     <key>Extensions</key>
 140     <dict>
 141       <key>uBlock0@raymondhill.net</key>
 142       <dict>
 143         <key>adminSettings</key>
 144         <dict>
 145           <key>selectedFilterLists</key>
 146           <array>
 147             <string>ublock-privacy</string>
 148             <string>ublock-badware</string>
 149             <string>ublock-filters</string>
 150             <string>user-filters</string>
 151           </array>
 152         </dict>
 153       </dict>
 154     </dict>
 155   </dict>
 156 </dict>
 157 ```
 158 #### policies.json
 159 ```
 160 {
 161   "policies": {
 162     "3rdparty": {
 163       "Extensions": {
 164         "uBlock0@raymondhill.net": {
 165           "adminSettings": {
 166             "selectedFilterLists": [
 167               "ublock-privacy",
 168               "ublock-badware",
 169               "ublock-filters",
 170               "user-filters"
 171             ]
 172           }
 173         }
 174       }
 175     }
 176   }
 177 }
 178 ```
 179
 180 ### AllowedDomainsForApps
 181
 182 Define domains allowed to access Google Workspace.
 183
 184 This policy is based on the [Chrome policy](https://chromeenterprise.google/policies/#AllowedDomainsForApps) of the same name.
 185
 186 If this policy is enabled, users can only access Google Workspace using accounts from the specified domains. If you want to allow Gmail, you can add ```consumer_accounts``` to the list.
 187
 188 **Compatibility:** Firefox 89, Firefox ESR 78.11\
 189 **CCK2 Equivalent:** N/A\
 190 **Preferences Affected:** N/A
 191
 192 #### Windows (GPO)
 193 ```
 194 Software\Policies\Mozilla\Firefox\AllowedDomainsForApps = "managedfirefox.com,example.com"
 195 ```
 196 #### Windows (Intune)
 197 OMA-URI:
 198 ```
 199 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AllowedDomainsForApps
 200 ```
 201 Value (string):
 202 ```
 203 <enabled/>
 204 <data id="AllowedDomainsForApps" value="managedfirefox.com,example.com"/>
 205 ```
 206 #### macOS
 207 ```
 208 <dict>
 209   <key>AllowedDomainsForApps</key>
 210   <string>managedfirefox.com,example.com</string>
 211 </dict>
 212 ```
 213 #### policies.json
 214 ```
 215 {
 216   "policies": {
 217     "AllowedDomainsForApps": "managedfirefox.com,example.com"
 218   }
 219 }
 220 ```
 221 ### AppAutoUpdate
 222
 223 Enable or disable **automatic** application update.
 224
 225 If set to true, application updates are installed without user approval within Firefox. The operating system might still require approval.
 226
 227 If set to false, application updates are downloaded but the user can choose when to install the update.
 228
 229 If you have disabled updates via `DisableAppUpdate`, this policy has no effect.
 230
 231 **Compatibility:** Firefox 75, Firefox ESR 68.7\
 232 **CCK2 Equivalent:** N/A\
 233 **Preferences Affected:** `app.update.auto`
 234
 235 #### Windows (GPO)
 236 ```
 237 Software\Policies\Mozilla\Firefox\AppAutoUpdate = 0x1 | 0x0
 238 ```
 239 #### Windows (Intune)
 240 OMA-URI:
 241 ```
 242 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AppAutoUpdate
 243 ```
 244 Value (string):
 245 ```
 246 <enabled/> or <disabled/>
 247 ```
 248 #### macOS
 249 ```
 250 <dict>
 251   <key>AppAutoUpdate</key>
 252   <true/> | <false/>
 253 </dict>
 254 ```
 255 #### policies.json
 256 ```
 257 {
 258   "policies": {
 259     "AppAutoUpdate": true | false
 260   }
 261 }
 262 ```
 263 ### AppUpdatePin
 264
 265 Prevent Firefox from being updated beyond the specified version.
 266
 267 You can specify the any version as ```xx.``` and Firefox will be updated with all minor versions, but will not be updated beyond the major version.
 268
 269 You can also specify the version as ```xx.xx``` and Firefox will be updated with all patch versions, but will not be updated beyond the minor version.
 270
 271 You should specify a version that exists or is guaranteed to exist. If you specify a version that doesn't end up existing, Firefox will update beyond that version.
 272
 273 **Compatibility:** Firefox 102,\
 274 **CCK2 Equivalent:** N/A\
 275 **Preferences Affected:** N/A
 276
 277 #### Windows (GPO)
 278 ```
 279 Software\Policies\Mozilla\Firefox\AppUpdatePin = "106."
 280 ```
 281 #### Windows (Intune)
 282 OMA-URI:
 283 ```
 284 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AppUpdatePin
 285 ```
 286 Value (string):
 287 ```
 288 <enabled/>
 289 <data id="AppUpdatePin" value="106."/>
 290 ```
 291 #### macOS
 292 ```
 293 <dict>
 294   <key>AppUpdatePin</key>
 295   <string>106.</string>
 296 </dict>
 297 ```
 298 #### policies.json
 299 ```
 300 {
 301   "policies": {
 302     "AppUpdatePin": "106."
 303   }
 304 }
 305 ```
 306 ### AppUpdateURL
 307
 308 Change the URL for application update if you are providing Firefox updates from a custom update server.
 309
 310 **Compatibility:** Firefox 62, Firefox ESR 60.2\
 311 **CCK2 Equivalent:** N/A\
 312 **Preferences Affected:** `app.update.url`
 313
 314 #### Windows (GPO)
 315 ```
 316 Software\Policies\Mozilla\Firefox\AppUpdateURL = "https://yoursite.com"
 317 ```
 318 #### Windows (Intune)
 319 OMA-URI:
 320 ```
 321 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AppUpdateURL
 322 ```
 323 Value (string):
 324 ```
 325 <enabled/>
 326 <data id="AppUpdateURL" value="https://yoursite.com"/>
 327 ```
 328 #### macOS
 329 ```
 330 <dict>
 331   <key>AppUpdateURL</key>
 332   <string>https://yoursite.com</string>
 333 </dict>
 334 ```
 335 #### policies.json
 336 ```
 337 {
 338   "policies": {
 339     "AppUpdateURL": "https://yoursite.com"
 340   }
 341 }
 342 ```
 343 ### Authentication
 344
 345 Configure sites that support integrated authentication.
 346
 347 See [Integrated authentication](https://htmlpreview.github.io/?https://github.com/mdn/archived-content/blob/main/files/en-us/mozilla/integrated_authentication/raw.html) for more information.
 348
 349 `PrivateBrowsing` enables integrated authentication in private browsing.
 350
 351 **Compatibility:** Firefox 60, Firefox ESR 60 (AllowNonFQDN added in 62/60.2, AllowProxies added in 70/68.2, Locked added in 71/68.3, PrivateBrowsing added in 77/68.9)\
 352 **CCK2 Equivalent:** N/A\
 353 **Preferences Affected:** `network.negotiate-auth.trusted-uris`,`network.negotiate-auth.delegation-uris`,`network.automatic-ntlm-auth.trusted-uris`,`network.automatic-ntlm-auth.allow-non-fqdn`,`network.negotiate-auth.allow-non-fqdn`,`network.automatic-ntlm-auth.allow-proxies`,`network.negotiate-auth.allow-proxies`,`network.auth.private-browsing-sso`
 354
 355 #### Windows (GPO)
 356 ```
 357 Software\Policies\Mozilla\Firefox\Authentication\SPNEGO\1 = "mydomain.com"
 358 Software\Policies\Mozilla\Firefox\Authentication\SPNEGO\2 = "https://myotherdomain.com"
 359 Software\Policies\Mozilla\Firefox\Authentication\Delegated\1 = "mydomain.com"
 360 Software\Policies\Mozilla\Firefox\Authentication\Delegated\2 = "https://myotherdomain.com"
 361 Software\Policies\Mozilla\Firefox\Authentication\NTLM\1 = "mydomain.com"
 362 Software\Policies\Mozilla\Firefox\Authentication\NTLM\2 = "https://myotherdomain.com"
 363 Software\Policies\Mozilla\Firefox\Authentication\AllowNonFQDN\SPNEGO = 0x1 | 0x0
 364 Software\Policies\Mozilla\Firefox\Authentication\AllowNonFQDN\NTLM = 0x1 | 0x0
 365 Software\Policies\Mozilla\Firefox\Authentication\AllowProxies\SPNEGO = 0x1 | 0x0
 366 Software\Policies\Mozilla\Firefox\Authentication\AllowProxies\NTLM = 0x1 | 0x0
 367 Software\Policies\Mozilla\Firefox\Authentication\Locked = 0x1 | 0x0
 368 Software\Policies\Mozilla\Firefox\Authentication\PrivateBrowsing = 0x1 | 0x0
 369 ```
 370 #### Windows (Intune)
 371 OMA-URI:
 372 ```
 373 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_SPNEGO
 374 ```
 375 Value (string):
 376 ```
 377 <enabled/>
 378 <data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
 379 ```
 380 OMA-URI:
 381 ```
 382 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_Delegated
 383 ```
 384 Value (string):
 385 ```
 386 <enabled/>
 387 <data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
 388 ```
 389 OMA-URI:
 390 ```
 391 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_NTLM
 392 ```
 393 Value (string):
 394 ```
 395 <enabled/>
 396 <data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
 397 ```
 398 OMA-URI:
 399 ```
 400 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_AllowNonFQDN
 401 ```
 402 Value (string):
 403 ```
 404 <enabled/>
 405 <data id="Authentication_AllowNonFQDN_NTLM" value="true | false"/>
 406 <data id="Authentication_AllowNonFQDN_SPNEGO" value="true | false"/>
 407 ```
 408 OMA-URI:
 409 ```
 410 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_Locked
 411 ```
 412 Value (string):
 413 ```
 414 <enabled/> or <disabled/>
 415 ```
 416 OMA-URI:
 417 ```
 418 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_PrivateBrowsing
 419 ```
 420 Value (string):
 421 ```
 422 <enabled/> or <disabled/>
 423 ```
 424 #### macOS
 425 ```
 426 <dict>
 427   <key>Authentication</key>
 428   <dict>
 429     <key>SPNEGO</key>
 430     <array>
 431       <string>mydomain.com</string>
 432       <string>https://myotherdomain.com</string>
 433     </array>
 434     <key>Delegated</key>
 435     <array>
 436       <string>mydomain.com</string>
 437       <string>https://myotherdomain.com</string>
 438     </array>
 439     <key>NTLM</key>
 440     <array>
 441       <string>mydomain.com</string>
 442       <string>https://myotherdomain.com</string>
 443     </array>
 444     <key>AllowNonFQDN</key>
 445       <dict>
 446       <key>SPNEGO</key>
 447       <true/> | <false/>
 448       <key>NTLM</key>
 449       <true/> | <false/>
 450     </dict>
 451     <key>AllowProxies</key>
 452       <dict>
 453       <key>SPNEGO</key>
 454       <true/> | <false/>
 455       <key>NTLM</key>
 456       <true/> | <false/>
 457     </dict>
 458     <key>Locked</key>
 459     <true/> | <false/>
 460     <key>PrivateBrowsing</key>
 461     <true/> | <false/>
 462   </dict>
 463 </dict>
 464 ```
 465 #### policies.json
 466 ```
 467 {
 468   "policies": {
 469     "Authentication": {
 470       "SPNEGO": ["mydomain.com", "https://myotherdomain.com"],
 471       "Delegated": ["mydomain.com", "https://myotherdomain.com"],
 472       "NTLM": ["mydomain.com", "https://myotherdomain.com"],
 473       "AllowNonFQDN": {
 474         "SPNEGO": true | false,
 475         "NTLM": true | false
 476       },
 477       "AllowProxies": {
 478         "SPNEGO": true | false,
 479         "NTLM": true | false
 480       },
 481       "Locked": true | false,
 482       "PrivateBrowsing": true | false
 483     }
 484   }
 485 }
 486 ```
 487 ### AutoLaunchProtocolsFromOrigins
 488 Define a list of external protocols that can be used from listed origins without prompting the user. The origin is the scheme plus the hostname.
 489
 490 The syntax of this policy is exactly the same as the [Chrome AutoLaunchProtocolsFromOrigins policy](https://cloud.google.com/docs/chrome-enterprise/policies/?policy=AutoLaunchProtocolsFromOrigins) except that you can only use valid origins (not just hostnames). This also means that you cannot specify an asterisk for all origins.
 491
 492 The schema is:
 493 ```
 494 {
 495  "items": {
 496   "properties": {
 497    "allowed_origins": {
 498     "items": {
 499      "type": "string"
 500     },
 501     "type": "array"
 502    },
 503    "protocol": {
 504     "type": "string"
 505    }
 506   },
 507   "required": [
 508    "protocol",
 509    "allowed_origins"
 510   ],
 511   "type": "object"
 512  },
 513  "type": "array"
 514 }
 515 ```
 516 **Compatibility:** Firefox 90, Firefox ESR 78.12\
 517 **CCK2 Equivalent:** N/A\
 518 **Preferences Affected:** N/A
 519
 520 #### Windows (GPO)
 521 Software\Policies\Mozilla\Firefox\AutoLaunchProtocolsFromOrigins (REG_MULTI_SZ) =
 522 ```
 523 [
 524   {
 525     "protocol": "zoommtg",
 526     "allowed_origins": [
 527       "https://somesite.zoom.us"
 528     ]
 529   }
 530 ]
 531 ```
 532 #### Windows (Intune)
 533 OMA-URI:
 534 ```
 535 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AutoLaunchProtocolsFromOrigins
 536 ```
 537 Value (string):
 538 ```
 539 <enabled/>
 540 <data id="JSON" value='
 541 [
 542   {
 543     "protocol": "zoommtg",
 544     "allowed_origins": [
 545       "https://somesite.zoom.us"
 546     ]
 547   }
 548 ]'/>
 549 ```
 550 #### macOS
 551 ```
 552 <dict>
 553   <key>AutoLaunchProtocolsFromOrigins</key>
 554   <array>
 555     <dict>
 556       <key>protocol</key>
 557       <string>zoommtg</string>
 558       <key>allowed_origins</key>
 559       <array>
 560         <string>https://somesite.zoom.us</string>
 561       </array>
 562     </dict>
 563   </array>
 564 </dict>
 565 ```
 566 #### policies.json
 567 ```
 568 {
 569   "policies": {
 570     "AutoLaunchProtocolsFromOrigins": [{
 571       "protocol": "zoommtg",
 572       "allowed_origins": [
 573         "https://somesite.zoom.us"
 574       ]
 575     }]
 576   }
 577 }
 578 ```
 579 ### BackgroundAppUpdate
 580
 581 Enable or disable **automatic** application update **in the background**, when the application is not running.
 582
 583 If set to true, application updates may be installed (without user approval) in the background, even when the application is not running. The operating system might still require approval.
 584
 585 If set to false, the application will not try to install updates when the application is not running.
 586
 587 If you have disabled updates via `DisableAppUpdate` or disabled automatic updates via `AppAutoUpdate`, this policy has no effect.
 588
 589 **Compatibility:** Firefox 90 (Windows only)\
 590 **CCK2 Equivalent:** N/A\
 591 **Preferences Affected:** `app.update.background.enabled`
 592
 593 #### Windows (GPO)
 594 ```
 595 Software\Policies\Mozilla\Firefox\BackgroundAppUpdate = 0x1 | 0x0
 596 ```
 597 #### Windows (Intune)
 598 OMA-URI:
 599 ```
 600 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BackgroundAppUpdate
 601 ```
 602 Value (string):
 603 ```
 604 <enabled/> or <disabled/>
 605 ```
 606 #### macOS
 607 ```
 608 <dict>
 609   <key>BackgroundAppUpdate</key>
 610   <true/> | <false/>
 611 </dict>
 612 ```
 613 #### policies.json
 614 ```
 615 {
 616   "policies": {
 617     "BackgroundAppUpdate": true | false
 618   }
 619 }
 620 ```
 621 ### BlockAboutAddons
 622
 623 Block access to the Add-ons Manager (about:addons).
 624
 625 **Compatibility:** Firefox 60, Firefox ESR 60\
 626 **CCK2 Equivalent:** `disableAddonsManager`\
 627 **Preferences Affected:** N/A
 628
 629 #### Windows (GPO)
 630 ```
 631 Software\Policies\Mozilla\Firefox\BlockAboutAddons = 0x1 | 0x0
 632 ```
 633 #### Windows (Intune)
 634 OMA-URI:
 635 ```
 636 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutAddons
 637 ```
 638 Value (string):
 639 ```
 640 <enabled/> or <disabled/>
 641 ```
 642 #### macOS
 643 ```
 644 <dict>
 645   <key>BlockAboutAddons</key>
 646   <true/> | <false/>
 647 </dict>
 648 ```
 649 #### policies.json
 650 ```
 651 {
 652   "policies": {
 653     "BlockAboutAddons": true | false
 654   }
 655 }
 656 ```
 657 ### BlockAboutConfig
 658
 659 Block access to about:config.
 660
 661 **Compatibility:** Firefox 60, Firefox ESR 60\
 662 **CCK2 Equivalent:** `disableAboutConfig`\
 663 **Preferences Affected:** N/A
 664
 665 #### Windows (GPO)
 666 ```
 667 Software\Policies\Mozilla\Firefox\BlockAboutConfig = 0x1 | 0x0
 668 ```
 669 #### Windows (Intune)
 670 OMA-URI:
 671 ```
 672 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutConfig
 673 ```
 674 Value (string):
 675 ```
 676 <enabled/> or <disabled/>
 677 ```
 678 #### macOS
 679 ```
 680 <dict>
 681   <key>BlockAboutConfig</key>
 682   <true/> | <false/>
 683 </dict>
 684 ```
 685 #### policies.json
 686 ```
 687 {
 688   "policies": {
 689     "BlockAboutConfig": true | false
 690   }
 691 }
 692 ```
 693 ### BlockAboutProfiles
 694
 695 Block access to About Profiles (about:profiles).
 696
 697 **Compatibility:** Firefox 60, Firefox ESR 60\
 698 **CCK2 Equivalent:** `disableAboutProfiles`\
 699 **Preferences Affected:** N/A
 700
 701 #### Windows (GPO)
 702 ```
 703 Software\Policies\Mozilla\Firefox\BlockAboutProfiles = 0x1 | 0x0
 704 ```
 705 #### Windows (Intune)
 706 OMA-URI:
 707 ```
 708 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutProfiles
 709 ```
 710 Value (string):
 711 ```
 712 <enabled/> or <disabled/>
 713 ```
 714 #### macOS
 715 ```
 716 <dict>
 717   <key>BlockAboutProfiles</key>
 718   <true/> | <false/>
 719 </dict>
 720 ```
 721 #### policies.json
 722 ```
 723 {
 724   "policies": {
 725     "BlockAboutProfiles": true | false
 726   }
 727 }
 728 ```
 729 ### BlockAboutSupport
 730
 731 Block access to Troubleshooting Information (about:support).
 732
 733 **Compatibility:** Firefox 60, Firefox ESR 60\
 734 **CCK2 Equivalent:** `disableAboutSupport`\
 735 **Preferences Affected:** N/A
 736
 737 #### Windows (GPO)
 738 ```
 739 Software\Policies\Mozilla\Firefox\BlockAboutSupport = 0x1 | 0x0
 740 ```
 741 #### Windows (Intune)
 742 OMA-URI:
 743 ```
 744 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutSupport
 745 ```
 746 Value (string):
 747 ```
 748 <enabled/> or <disabled/>
 749 ```
 750 #### macOS
 751 ```
 752 <dict>
 753   <key>BlockAboutSupport</key>
 754   <true/> | <false/>
 755 </dict>
 756 ```
 757 #### policies.json
 758 ```
 759 {
 760   "policies": {
 761     "BlockAboutSupport": true | false
 762   }
 763 }
 764 ```
 765 ### Bookmarks
 766
 767 Note: [`ManagedBookmarks`](#managedbookmarks) is the new recommended way to add bookmarks. This policy will continue to be supported.
 768
 769 Add bookmarks in either the bookmarks toolbar or menu. Only `Title` and `URL` are required. If `Placement` is not specified, the bookmark will be placed on the toolbar. If `Folder` is specified, it is automatically created and bookmarks with the same folder name are grouped together.
 770
 771 If you want to clear all bookmarks set with this policy, you can set the value to an empty array (```[]```). This can be on Windows via the new Bookmarks (JSON) policy available with GPO and Intune.
 772
 773 **Compatibility:** Firefox 60, Firefox ESR 60\
 774 **CCK2 Equivalent:** `bookmarks.toolbar`,`bookmarks.menu`\
 775 **Preferences Affected:** N/A
 776
 777 #### Windows (GPO)
 778 ```
 779 Software\Policies\Mozilla\Firefox\Bookmarks\1\Title = "Example"
 780 Software\Policies\Mozilla\Firefox\Bookmarks\1\URL = "https://example.com"
 781 Software\Policies\Mozilla\Firefox\Bookmarks\1\Favicon = "https://example.com/favicon.ico"
 782 Software\Policies\Mozilla\Firefox\Bookmarks\1\Placement = "toolbar" | "menu"
 783 Software\Policies\Mozilla\Firefox\Bookmarks\1\Folder = "FolderName"
 784
 785 Software\Policies\Mozilla\Firefox\Bookmarks (REG_MULTI_SZ) =
 786 ```
 787 []
 788 ```
 789
 790 ```
 791 #### Windows (Intune)
 792 OMA-URI:
 793 ```
 794 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Bookmarks/Bookmark01
 795 ```
 796 Value (string):
 797 ```
 798 <enabled/>
 799 <data id="BookmarkTitle" value="Example"/>
 800 <data id="BookmarkURL" value="https://example.com"/>
 801 <data id="BookmarkFavicon" value="https://example.com/favicon.ico"/>
 802 <data id="BookmarkPlacement" value="toolbar | menu"/>
 803 <data id="BookmarkFolder" value="FolderName"/>
 804 ```
 805 OMA-URI:
 806 ```
 807 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Bookmarks
 808 ```
 809 Value (string):
 810 ```
 811 <enabled/>
 812 <data id="JSON" value='[]'/>
 813 ```
 814 #### macOS
 815 ```
 816 <dict>
 817   <key>Bookmarks</key>
 818   <array>
 819     <dict>
 820       <key>Title</key>
 821       <string>Example</string>
 822       <key>URL</key>
 823       <string>https://example.com</string>
 824       <key>Favicon</key>
 825       <string>https://example.com/favicon.ico</string>
 826       <key>Placement</key>
 827       <string>toolbar | menu</string>
 828       <key>Folder</key>
 829       <string>FolderName</string>
 830     </dict>
 831   </array>
 832 </dict>
 833 ```
 834 #### policies.json
 835 ```
 836 {
 837   "policies": {
 838     "Bookmarks": [
 839       {
 840         "Title": "Example",
 841         "URL": "https://example.com",
 842         "Favicon": "https://example.com/favicon.ico",
 843         "Placement": "toolbar" | "menu",
 844         "Folder": "FolderName"
 845       }
 846     ]
 847   }
 848 }
 849 ```
 850 ### CaptivePortal
 851 Enable or disable the detection of captive portals.
 852
 853 **Compatibility:** Firefox 67, Firefox ESR 60.7\
 854 **CCK2 Equivalent:** N/A\
 855 **Preferences Affected:** `network.captive-portal-service.enabled`
 856
 857 #### Windows (GPO)
 858 ```
 859 Software\Policies\Mozilla\Firefox\CaptivePortal = 0x1 | 0x0
 860 ```
 861 #### Windows (Intune)
 862 OMA-URI:
 863 ```
 864 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/CaptivePortal
 865 ```
 866 Value (string):
 867 ```
 868 <enabled/> or <disabled/>
 869 ```
 870 #### macOS
 871 ```
 872 <dict>
 873   <key>CaptivePortal</key>
 874   <true/> | <false/>
 875 </dict>
 876 ```
 877 #### policies.json
 878 ```
 879 {
 880   "policies": {
 881     "CaptivePortal": true | false
 882   }
 883 }
 884 ```
 885 ### Certificates
 886
 887 ### Certificates | ImportEnterpriseRoots
 888
 889 Trust certificates that have been added to the operating system certificate store by a user or administrator.
 890
 891 Note: This policy only works on Windows and macOS. For Linux discussion, see [bug 1600509](https://bugzilla.mozilla.org/show_bug.cgi?id=1600509).
 892
 893 See https://support.mozilla.org/kb/setting-certificate-authorities-firefox for more detail.
 894
 895 **Compatibility:** Firefox 60, Firefox ESR 60 (macOS support in Firefox 63, Firefox ESR 68)\
 896 **CCK2 Equivalent:** N/A\
 897 **Preferences Affected:** `security.enterprise_roots.enabled`
 898
 899 #### Windows (GPO)
 900 ```
 901 Software\Policies\Mozilla\Firefox\Certificates\ImportEnterpriseRoots = 0x1 | 0x0
 902 ```
 903 #### Windows (Intune)
 904 OMA-URI:
 905 ```
 906 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Certificates/Certificates_ImportEnterpriseRoots
 907 ```
 908 Value (string):
 909 ```
 910 <enabled/> or <disabled/>
 911 ```
 912 #### macOS
 913 ```
 914 <dict>
 915   <key>Certificates</key>
 916   <dict>
 917     <key>ImportEnterpriseRoots</key>
 918     <true/> | <false/>
 919   </dict>
 920 </dict>
 921 ```
 922 #### policies.json
 923 ```
 924 {
 925   "policies": {
 926     "Certificates": {
 927       "ImportEnterpriseRoots": true | false
 928     }
 929   }
 930 }
 931 ```
 932 ### Certificates | Install
 933
 934 Install certificates into the Firefox certificate store. If only a filename is specified, Firefox searches for the file in the following locations:
 935
 936 - Windows
 937   - %USERPROFILE%\AppData\Local\Mozilla\Certificates
 938   - %USERPROFILE%\AppData\Roaming\Mozilla\Certificates
 939 - macOS
 940   - /Library/Application Support/Mozilla/Certificates
 941   - ~/Library/Application Support/Mozilla/Certificates
 942 - Linux
 943   - /usr/lib/mozilla/certificates
 944   - /usr/lib64/mozilla/certificates
 945   - ~/.mozilla/certificates
 946
 947 Starting with Firefox 65, Firefox 60.5 ESR, a fully qualified path can be used, including UNC paths. You should use the native path style for your operating system. We do not support using %USERPROFILE% or other environment variables on Windows.
 948
 949 If you are specifying the path in the policies.json file on Windows, you need to escape your backslashes (`\\`) which means that for UNC paths, you need to escape both (`\\\\`). If you use group policy, you only need one backslash.
 950
 951 Certificates are installed using the trust string `CT,CT,`.
 952
 953 Binary (DER) and ASCII (PEM) certificates are both supported.
 954
 955 **Compatibility:** Firefox 64, Firefox ESR 64\
 956 **CCK2 Equivalent:** `certs.ca`\
 957 **Preferences Affected:** N/A
 958
 959 #### Windows (GPO)
 960 ```
 961 Software\Policies\Mozilla\Firefox\Certificates\Install\1 = "cert1.der"
 962 Software\Policies\Mozilla\Firefox\Certificates\Install\2 = "C:\Users\username\cert2.pem"
 963 ```
 964 #### Windows (Intune)
 965 OMA-URI:
 966 ```
 967 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Certificates/Certificates_Install
 968 ```
 969 Value (string):
 970 ```
 971 <enabled/>
 972 <data id="Certificates_Install" value="1&#xF000;cert1.der&#xF000;2&#xF000;C:\Users\username\cert2.pem"/>
 973 ```
 974 #### macOS
 975 ```
 976 <dict>
 977   <key>Certificates</key>
 978   <dict>
 979     <key>Install</key>
 980     <array>
 981       <string>cert1.der</string>
 982       <string>/Users/username/cert2.pem</string>
 983     </array>
 984   </dict>
 985 </dict>
 986 ```
 987 #### policies.json
 988 ```
 989 {
 990   "policies": {
 991     "Certificates": {
 992       "Install": ["cert1.der", "/home/username/cert2.pem"]
 993     }
 994   }
 995 }
 996 ```
 997 ### Containers
 998 Set policies related to [containers](https://addons.mozilla.org/firefox/addon/multi-account-containers/).
 999
1000 Currently you can set the initial set of containers.
1001
1002 For each container, you can specify the name, icon, and color.
1003
1004 | Name | Description |
1005 | --- | --- |
1006 | `name`| Name of container
1007 | `icon` | Can be `fingerprint`, `briefcase`, `dollar`, `cart`, `vacation`, `gift`, `food`, `fruit`, `pet`, `tree`, `chill`, `circle`, `fence`
1008 | `color` | Can be `blue`, `turquoise`, `green`, `yellow`, `orange`, `red`, `pink`, `purple`, `toolbar`
1009
1010 **Compatibility:** Firefox 113\
1011 **CCK2 Equivalent:** N/A\
1012 **Preferences Affected:** N/A
1013
1014 #### Windows (GPO)
1015 Software\Policies\Mozilla\Firefox\Containers (REG_MULTI_SZ) =
1016 ```
1017 {
1018   "Default": [
1019     {
1020       "name": "My container",
1021       "icon": "pet",
1022       "color": "turquoise"
1023     }
1024   ]
1025 }
1026 ```
1027 #### Windows (Intune)
1028 OMA-URI:
1029 ```
1030 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Containers
1031 ```
1032 Value (string):
1033 ```
1034 <enabled/>
1035 <data id="JSON" value='
1036 {
1037   "Default": [
1038     {
1039       "name": "My container",
1040       "icon": "pet",
1041       "color": "turquoise"
1042     }
1043   ]
1044 }
1045 '/>
1046 ```
1047 #### macOS
1048 ```
1049 <dict>
1050   <key>Default</key>
1051   <dict>
1052     <key>Containers</key>
1053     <array>
1054       <dict>
1055         <key>name</key>
1056         <string>My container</string>
1057         <key>icon</key>
1058         <string>pet</string>
1059         <key>color</key>
1060         <string>turquoise</string>
1061       </dict>
1062     </array>
1063   </dict>
1064 </dict>
1065 ```
1066 #### policies.json
1067 ```
1068 {
1069   "policies": {
1070     "Containers": {
1071       "Default": [
1072         {
1073           "name": "My container",
1074           "icon": "pet",
1075           "color": "turquoise"
1076         }
1077       ]
1078     }
1079   }
1080 }
1081 ```
1082 ### Cookies
1083 Configure cookie preferences.
1084
1085 `Allow` is a list of origins (not domains) where cookies are always allowed. You must include http or https.
1086
1087 `AllowSession` is a list of origins (not domains) where cookies are only allowed for the current session. You must include http or https.
1088
1089 `Block` is a list of origins (not domains) where cookies are always blocked. You must include http or https.
1090
1091 `Behavior` sets the default behavior for cookies based on the values below.
1092
1093 `BehaviorPrivateBrowsing` sets the default behavior for cookies in private browsing based on the values below.
1094
1095 | Value | Description
1096 | --- | --- |
1097 | accept | Accept all cookies
1098 | reject-foreign | Reject third party cookies
1099 | reject | Reject all cookies
1100 | limit-foreign | Reject third party cookies for sites you haven't visited
1101 | reject-tracker | Reject cookies for known trackers (default)
1102 | reject-tracker-and-partition-foreign | Reject cookies for known trackers and partition third-party cookies (Total Cookie Protection) (default for private browsing)
1103
1104 `Locked` prevents the user from changing cookie preferences.
1105
1106 **Compatibility:** Firefox 60, Firefox ESR 60 (RejectTracker added in Firefox 63, AllowSession added in Firefox 79/78.1, Behavior added in Firefox 95/91.4)\
1107 **CCK2 Equivalent:** N/A\
1108 **Preferences Affected:** `network.cookie.cookieBehavior`, `network.cookie.cookieBehavior.pbmode`, `network.cookie.lifetimePolicy`
1109
1110 #### Windows (GPO)
1111 ```
1112 Software\Policies\Mozilla\Firefox\Cookies\Allow\1 = "https://example.com"
1113 Software\Policies\Mozilla\Firefox\Cookies\AllowSession\1 = "https://example.edu"
1114 Software\Policies\Mozilla\Firefox\Cookies\Block\1 = "https://example.org"
1115 Software\Policies\Mozilla\Firefox\Cookies\Default = 0x1 | 0x0
1116 Software\Policies\Mozilla\Firefox\Cookies\AcceptThirdParty = "always" | "never" | "from-visited"
1117 Software\Policies\Mozilla\Firefox\Cookies\ExpireAtSessionEnd = 0x1 | 0x0
1118 Software\Policies\Mozilla\Firefox\Cookies\RejectTracker = 0x1 | 0x0
1119 Software\Policies\Mozilla\Firefox\Cookies\Behavior = "accept" | "reject-foreign" | "reject" | "limit-foreign" | "reject-tracker" | "reject-tracker-and-partition-foreign"
1120 Software\Policies\Mozilla\Firefox\Cookies\BehaviorPrivateBrowsing = "accept" | "reject-foreign" | "reject" | "limit-foreign" | "reject-tracker" | "reject-tracker-and-partition-foreign"
1121 Software\Policies\Mozilla\Firefox\Cookies\Locked = 0x1 | 0x0
1122 ```
1123 #### Windows (Intune)
1124 OMA-URI:
1125 ```
1126 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Allow
1127 ```
1128 Value (string):
1129 ```
1130 <enabled/>
1131 <data id="Permissions" value="1&#xF000;https://example.com"/>
1132 ```
1133 OMA-URI:
1134 ```
1135 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_AllowSession
1136 ```
1137 Value (string):
1138 ```
1139 <enabled/>
1140 <data id="Permissions" value="1&#xF000;https://example.edu"/>
1141 ```
1142 OMA-URI:
1143 ```
1144 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Block
1145 ```
1146 Value (string):
1147 ```
1148 <enabled/>
1149 <data id="Permissions" value="1&#xF000;https://example.org"/>
1150 ```
1151 OMA-URI:
1152 ```
1153 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Default
1154 ```
1155 Value (string):
1156 ```
1157 <enabled/> or <disabled/>
1158 ```
1159 OMA-URI:
1160 ```
1161 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_AcceptThirdParty
1162 ```
1163 Value (string):
1164 ```
1165 <enabled/>
1166 <data id="Cookies_AcceptThirdParty" value="always | never | from-visited"/>
1167 ```
1168 OMA-URI:
1169 ```
1170 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_ExpireAtSessionEnd
1171 ```
1172 Value (string):
1173 ```
1174 <enabled/> or <disabled/>
1175 ```
1176 OMA-URI:
1177 ```
1178 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_RejectTracker
1179 ```
1180 Value (string):
1181 ```
1182 <enabled/> or <disabled/>
1183 ```
1184 OMA-URI:
1185 ```
1186 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Locked
1187 ```
1188 Value (string):
1189 ```
1190 <enabled/> or <disabled/>
1191 ```
1192 OMA-URI:
1193 ```
1194 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Behavior
1195 ```
1196 Value (string):
1197 ```
1198 <enabled/>
1199 <data id="Cookies_Behavior" value="accept | reject-foreign | reject | limit-foreign | reject-tracker | reject-tracker-and-partition-foreign"/>
1200 ```
1201 OMA-URI:
1202 ```
1203 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_BehaviorPrivateBrowsing
1204 ```
1205 Value (string):
1206 ```
1207 <enabled/>
1208 <data id="Cookies_BehaviorPrivateBrowsing" value="accept | reject-foreign | reject | limit-foreign | reject-tracker | reject-tracker-and-partition-foreign"/>
1209 ```
1210 #### macOS
1211 ```
1212 <dict>
1213   <key>Cookies</key>
1214   <dict>
1215     <key>Allow</key>
1216     <array>
1217       <string>http://example.com</string>
1218     </array>
1219     <key>AllowSession</key>
1220     <array>
1221       <string>http://example.edu</string>
1222     </array>
1223     <key>Block</key>
1224     <array>
1225       <string>http://example.org</string>
1226     </array>
1227     <key>Default</key>
1228     <true/> | <false/>
1229     <key>AcceptThirdParty</key>
1230     <string>always | never | from-visited</string>
1231     <key>ExpireAtSessionEnd</key>
1232     <true/> | <false/>
1233     <key>RejectTracker</key>
1234     <true/> | <false/>
1235     <key>Locked</key>
1236     <true/> | <false/>
1237     <key>Behavior</key>
1238     <string>accept | reject-foreign | reject | limit-foreign | reject-tracker | reject-tracker-and-partition-foreign</string>
1239     <key>BehaviorPrivateBrowsing</key>
1240     <string>accept | reject-foreign | reject | limit-foreign | reject-tracker | reject-tracker-and-partition-foreign</string>
1241   </dict>
1242 </dict>
1243 ```
1244 #### policies.json
1245 ```
1246 {
1247   "policies": {
1248     "Cookies": {
1249       "Allow": ["http://example.org/"],
1250       "AllowSession": ["http://example.edu/"],
1251       "Block": ["http://example.edu/"],
1252       "Default": true | false,
1253       "AcceptThirdParty": "always" | "never" | "from-visited",
1254       "ExpireAtSessionEnd": true | false,
1255       "RejectTracker": true | false,
1256       "Locked": true | false,
1257       "Behavior": "accept" | "reject-foreign" | "reject" | "limit-foreign" | "reject-tracker" | "reject-tracker-and-partition-foreign",
1258       "BehaviorPrivateBrowsing": "accept" | "reject-foreign" | "reject" | "limit-foreign" | "reject-tracker" | "reject-tracker-and-partition-foreign",
1259     }
1260   }
1261 }
1262 ```
1263 ### DefaultDownloadDirectory
1264 Set the default download directory.
1265
1266 You can use ${home} for the native home directory.
1267
1268 **Compatibility:** Firefox 68, Firefox ESR 68\
1269 **CCK2 Equivalent:** N/A\
1270 **Preferences Affected:** `browser.download.dir`, `browser.download.folderList`
1271
1272 #### Windows (GPO)
1273 ```
1274 Software\Policies\Mozilla\Firefox\DefaultDownloadDirectory = "${home}\Downloads"
1275 ```
1276 #### Windows (Intune)
1277 OMA-URI:
1278 ```
1279 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DefaultDownloadDirectory
1280 ```
1281 Value (string):
1282 ```
1283 <enabled/>
1284 <data id="Preferences_String" value="${home}\Downloads"/>
1285 ```
1286 #### macOS
1287 ```
1288 <dict>
1289   <key>DefaultDownloadDirectory</key>
1290   <string>${home}/Downloads</string>
1291 </dict>
1292 ```
1293 #### policies.json (macOS and Linux)
1294 ```
1295 {
1296   "policies": {
1297     "DefaultDownloadDirectory": "${home}/Downloads"
1298   }
1299 }
1300 ```
1301 #### policies.json (Windows)
1302 ```
1303 {
1304   "policies": {
1305     "DefaultDownloadDirectory": "${home}\\Downloads"
1306   }
1307 }
1308 ```
1309 ### DisableAppUpdate
1310 Turn off application updates within Firefox.
1311
1312 **Compatibility:** Firefox 60, Firefox ESR 60\
1313 **CCK2 Equivalent:** `disableFirefoxUpdates`\
1314 **Preferences Affected:** N/A
1315
1316 #### Windows (GPO)
1317 ```
1318 Software\Policies\Mozilla\Firefox\DisableAppUpdate = 0x1 | 0x0
1319 ```
1320 #### Windows (Intune)
1321 OMA-URI:
1322 ```
1323 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableAppUpdate
1324 ```
1325 Value (string):
1326 ```
1327 <enabled/> or <disabled/>
1328 ```
1329 #### macOS
1330 ```
1331 <dict>
1332   <key>DisableAppUpdate</key>
1333   <true/> | <false/>
1334 </dict>
1335 ```
1336 #### policies.json
1337 ```
1338 {
1339   "policies": {
1340     "DisableAppUpdate": true | false
1341   }
1342 }
1343 ```
1344 ### DisableBuiltinPDFViewer
1345 Disable the built in PDF viewer. PDF files are downloaded and sent externally.
1346
1347 **Compatibility:** Firefox 60, Firefox ESR 60\
1348 **CCK2 Equivalent:** `disablePDFjs`\
1349 **Preferences Affected:** `pdfjs.disabled`
1350
1351 #### Windows (GPO)
1352 ```
1353 Software\Policies\Mozilla\Firefox\DisableBuiltinPDFViewer = 0x1 | 0x0
1354 ```
1355 #### Windows (Intune)
1356 OMA-URI:
1357 ```
1358 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableBuiltinPDFViewer
1359 ```
1360 Value (string):
1361 ```
1362 <enabled/> or <disabled/>
1363 ```
1364 #### macOS
1365 ```
1366 <dict>
1367   <key>DisableBuiltinPDFViewer</key>
1368   <true/> | <false/>
1369 </dict>
1370 ```
1371 #### policies.json
1372 ```
1373 {
1374   "policies": {
1375     "DisableBuiltinPDFViewer": true | false
1376   }
1377 }
1378 ```
1379 ### DisabledCiphers
1380 Disable specific cryptographic ciphers, listed below.
1381
1382 ```
1383 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
1384 TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
1385 TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256
1386 TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
1387 TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
1388 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
1389 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
1390 TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA
1391 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
1392 TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA
1393 TLS_DHE_RSA_WITH_AES_128_CBC_SHA
1394 TLS_DHE_RSA_WITH_AES_256_CBC_SHA
1395 TLS_RSA_WITH_AES_128_GCM_SHA256
1396 TLS_RSA_WITH_AES_256_GCM_SHA384
1397 TLS_RSA_WITH_AES_128_CBC_SHA
1398 TLS_RSA_WITH_AES_256_CBC_SHA
1399 TLS_RSA_WITH_3DES_EDE_CBC_SHA
1400 ```
1401
1402 **Preferences Affected:** `security.ssl3.ecdhe_rsa_aes_128_gcm_sha256`, `security.ssl3.ecdhe_ecdsa_aes_128_gcm_sha256`, `security.ssl3.ecdhe_ecdsa_chacha20_poly1305_sha256`, `security.ssl3.ecdhe_rsa_chacha20_poly1305_sha256`, `security.ssl3.ecdhe_ecdsa_aes_256_gcm_sha384`, `security.ssl3.ecdhe_rsa_aes_256_gcm_sha384`, `security.ssl3.ecdhe_rsa_aes_128_sha`, `security.ssl3.ecdhe_ecdsa_aes_128_sha`, `security.ssl3.ecdhe_rsa_aes_256_sha`, `security.ssl3.ecdhe_ecdsa_aes_256_sha`, `security.ssl3.dhe_rsa_aes_128_sha`, `security.ssl3.dhe_rsa_aes_256_sha`, `security.ssl3.rsa_aes_128_gcm_sha256`, `security.ssl3.rsa_aes_256_gcm_sha384`, `security.ssl3.rsa_aes_128_sha`, `security.ssl3.rsa_aes_256_sha`, `security.ssl3.deprecated.rsa_des_ede3_sha`
1403
1404 ---
1405 **Note:**
1406
1407 This policy was updated in Firefox 78 to allow enabling ciphers as well. Setting the value to true disables the cipher, setting the value to false enables the cipher. Previously setting the value to true or false disabled the cipher.
1408
1409 ---
1410 **Compatibility:** Firefox 76, Firefox ESR 68.8 (TLS_RSA_WITH_AES_128_GCM_SHA256 and TLS_RSA_WITH_AES_256_GCM_SHA384 were added in Firefox 78, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA38, TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, and TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 were added in Firefox 97 and Firefox 91.6)\
1411 **CCK2 Equivalent:** N/A\
1412 **Preferences Affected:** N/A
1413
1414 #### Windows (GPO)
1415 ```
1416 Software\Policies\Mozilla\Firefox\DisabledCiphers\CIPHER_NAME = 0x1 | 0x0
1417 ```
1418 #### Windows (Intune)
1419 OMA-URI:
1420 ```
1421 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_CIPHER_NAME
1422
1423 ```
1424 Value (string):
1425 ```
1426 <enabled/> or <disabled/>
1427 ```
1428 #### macOS
1429 ```
1430 <dict>
1431   <key>DisabledCiphers</key>
1432     <dict>
1433       <key>CIPHER_NAME</key>
1434       <true/> | <false/>
1435     </dict>
1436 </dict>
1437 ```
1438 #### policies.json
1439 ```
1440 {
1441   "policies": {
1442     "DisabledCiphers": {
1443       "CIPHER_NAME": true | false,
1444     }
1445   }
1446 }
1447 ```
1448 ### DisableDefaultBrowserAgent
1449 Prevent the default browser agent from taking any actions. Only applicable to Windows; other platforms don’t have the agent.
1450
1451 The browser agent is a Windows-only scheduled task which runs in the background to collect and submit data about the browser that the user has set as their OS default. More information is available [here](https://firefox-source-docs.mozilla.org/toolkit/mozapps/defaultagent/default-browser-agent/index.html).
1452
1453 **Compatibility:** Firefox 75, Firefox ESR 68.7 (Windows only)\
1454 **CCK2 Equivalent:** N/A\
1455 **Preferences Affected:** N/A
1456
1457 #### Windows (GPO)
1458 ```
1459 Software\Policies\Mozilla\Firefox\DisableDefaultBrowserAgent = 0x1 | 0x0
1460 ```
1461 #### Windows (Intune)
1462 OMA-URI:
1463 ```
1464 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableDefaultBrowserAgent
1465 ```
1466 Value (string):
1467 ```
1468 <enabled/> or <disabled/>
1469 ```
1470 #### policies.json
1471 ```
1472 {
1473   "policies": {
1474     "DisableDefaultBrowserAgent": true | false
1475   }
1476 }
1477 ```
1478 ### DisableDeveloperTools
1479 Remove access to all developer tools.
1480
1481 **Compatibility:** Firefox 60, Firefox ESR 60\
1482 **CCK2 Equivalent:** `removeDeveloperTools`\
1483 **Preferences Affected:** `devtools.policy.disabled`
1484
1485 #### Windows (GPO)
1486 ```
1487 Software\Policies\Mozilla\Firefox\DisableDeveloperTools = 0x1 | 0x0`
1488 ```
1489 #### Windows (Intune)
1490 OMA-URI:
1491 ```
1492 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableDeveloperTools
1493 ```
1494 Value (string):
1495 ```
1496 <enabled/> or <disabled/>
1497 ```
1498 #### macOS
1499 ```
1500 <dict>
1501   <key>DisableDeveloperTools</key>
1502   <true/> | <false/>
1503 </dict>
1504 ```
1505 #### policies.json
1506 ```
1507 {
1508   "policies": {
1509     "DisableDeveloperTools": true | false
1510   }
1511 }
1512 ```
1513 ### DisableFeedbackCommands
1514 Disable the menus for reporting sites (Submit Feedback, Report Deceptive Site).
1515
1516 **Compatibility:** Firefox 60, Firefox ESR 60\
1517 **CCK2 Equivalent:** N/A\
1518 **Preferences Affected:** N/A
1519
1520 #### Windows (GPO)
1521 ```
1522 Software\Policies\Mozilla\Firefox\DisableFeedbackCommands = 0x1 | 0x0
1523 ```
1524 #### Windows (Intune)
1525 OMA-URI:
1526 ```
1527 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFeedbackCommands
1528 ```
1529 Value (string):
1530 ```
1531 <enabled/> or <disabled/>
1532 ```
1533 #### macOS
1534 ```
1535 <dict>
1536   <key>DisableFeedbackCommands</key>
1537   <true/> | <false/>
1538 </dict>
1539 ```
1540 #### policies.json
1541 ```
1542 {
1543   "policies": {
1544     "DisableFeedbackCommands": true | false
1545   }
1546 }
1547 ```
1548 ### DisableFirefoxAccounts
1549 Disable Firefox Accounts integration (Sync).
1550
1551 **Compatibility:** Firefox 60, Firefox ESR 60\
1552 **CCK2 Equivalent:** `disableSync`\
1553 **Preferences Affected:** `identity.fxaccounts.enabled`
1554
1555 #### Windows (GPO)
1556 ```
1557 Software\Policies\Mozilla\Firefox\DisableFirefoxAccounts = 0x1 | 0x0
1558 ```
1559 #### Windows (Intune)
1560 OMA-URI:
1561 ```
1562 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxAccounts
1563 ```
1564 Value (string):
1565 ```
1566 <enabled/> or <disabled/>
1567 ```
1568 #### macOS
1569 ```
1570 <dict>
1571   <key>DisableFirefoxAccounts</key>
1572   <true/> | <false/>
1573 </dict>
1574 ```
1575 #### policies.json
1576 ```
1577 {
1578   "policies": {
1579     "DisableFirefoxAccounts": true | false
1580   }
1581 }
1582 ```
1583 ### DisableFirefoxScreenshots
1584 Remove access to Firefox Screenshots.
1585
1586 **Compatibility:** Firefox 60, Firefox ESR 60\
1587 **CCK2 Equivalent:** N/A\
1588 **Preferences Affected:** `extensions.screenshots.disabled`
1589
1590 #### Windows (GPO)
1591 ```
1592 Software\Policies\Mozilla\Firefox\DisableFirefoxScreenshots = 0x1 | 0x0
1593 ```
1594 #### Windows (Intune)
1595 OMA-URI:
1596 ```
1597 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxScreenshots
1598 ```
1599 Value (string):
1600 ```
1601 <enabled/> or <disabled/>
1602 ```
1603 #### macOS
1604 ```
1605 <dict>
1606   <key>DisableFirefoxScreenshots</key>
1607   <true/> | <false/>
1608 </dict>
1609 ```
1610 #### policies.json
1611 ```
1612 {
1613   "policies": {
1614     "DisableFirefoxScreenshots": true | false
1615   }
1616 }
1617 ```
1618 ### DisableFirefoxStudies
1619 Disable Firefox studies (Shield).
1620
1621 **Compatibility:** Firefox 60, Firefox ESR 60\
1622 **CCK2 Equivalent:** N/A\
1623 **Preferences Affected:** N/A
1624
1625 #### Windows (GPO)
1626 ```
1627 Software\Policies\Mozilla\Firefox\DisableFirefoxStudies = 0x1 | 0x0
1628 ```
1629 #### Windows (Intune)
1630 OMA-URI:
1631 ```
1632 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxStudies
1633 ```
1634 Value (string):
1635 ```
1636 <enabled/> or <disabled/>
1637 ```
1638 #### macOS
1639 ```
1640 <dict>
1641   <key>DisableFirefoxStudies</key>
1642   <true/> | <false/>
1643 </dict>
1644 ```
1645 #### policies.json
1646 ```
1647 {
1648   "policies": {
1649     "DisableFirefoxStudies": true | false
1650   }
1651 }
1652 ```
1653 ### DisableForgetButton
1654 Disable the "Forget" button.
1655
1656 **Compatibility:** Firefox 60, Firefox ESR 60\
1657 **CCK2 Equivalent:** `disableForget`\
1658 **Preferences Affected:** N/A
1659
1660 #### Windows (GPO)
1661 ```
1662 Software\Policies\Mozilla\Firefox\DisableForgetButton = 0x1 | 0x0
1663 ```
1664 #### Windows (Intune)
1665 OMA-URI:
1666 ```
1667 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableForgetButton
1668 ```
1669 Value (string):
1670 ```
1671 <enabled/> or <disabled/>
1672 ```
1673 #### macOS
1674 ```
1675 <dict>
1676   <key>DisableForgetButton</key>
1677   <true/> | <false/>
1678 </dict>
1679 ```
1680 #### policies.json
1681 ```
1682 {
1683   "policies": {
1684     "DisableForgetButton": true | false
1685   }
1686 }
1687 ```
1688 ### DisableFormHistory
1689 Turn off saving information on web forms and the search bar.
1690
1691 **Compatibility:** Firefox 60, Firefox ESR 60\
1692 **CCK2 Equivalent:** `disableFormFill`\
1693 **Preferences Affected:** `browser.formfill.enable`
1694
1695 #### Windows (GPO)
1696 ```
1697 Software\Policies\Mozilla\Firefox\DisableFormHistory = 0x1 | 0x0
1698 ```
1699 #### Windows (Intune)
1700 OMA-URI:
1701 ```
1702 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFormHistory
1703 ```
1704 Value (string):
1705 ```
1706 <enabled/> or <disabled/>
1707 ```
1708 #### macOS
1709 ```
1710 <dict>
1711   <key>DisableFormHistory</key>
1712   <true/> | <false/>
1713 </dict>
1714 ```
1715 #### policies.json
1716 ```
1717 {
1718   "policies": {
1719     "DisableFormHistory": true | false
1720   }
1721 }
1722 ```
1723 ### DisableMasterPasswordCreation
1724 Remove the master password functionality.
1725
1726 If this value is true, it works the same as setting [`PrimaryPassword`](#primarypassword) to false and removes the primary password functionality.
1727
1728 If both `DisableMasterPasswordCreation` and `PrimaryPassword` are used, `DisableMasterPasswordCreation` takes precedent.
1729
1730 **Compatibility:** Firefox 60, Firefox ESR 60\
1731 **CCK2 Equivalent:** `noMasterPassword`\
1732 **Preferences Affected:** N/A
1733
1734 #### Windows (GPO)
1735 ```
1736 Software\Policies\Mozilla\Firefox\DisableMasterPasswordCreation = 0x1 | 0x0
1737 ```
1738 #### Windows (Intune)
1739 OMA-URI:
1740 ```
1741 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableMasterPasswordCreation
1742 ```
1743 Value (string):
1744 ```
1745 <enabled/> or <disabled/>
1746 ```
1747 #### macOS
1748 ```
1749 <dict>
1750   <key>DisableMasterPasswordCreation</key>
1751   <true/> | <false/>
1752 </dict>
1753 ```
1754 #### policies.json
1755 ```
1756 {
1757   "policies": {
1758     "DisableMasterPasswordCreation": true | false
1759   }
1760 }
1761 ```
1762 ### DisablePasswordReveal
1763 Do not allow passwords to be shown in saved logins
1764
1765 **Compatibility:** Firefox 71, Firefox ESR 68.3\
1766 **CCK2 Equivalent:** N/A
1767 **Preferences Affected:** N/A
1768
1769 #### Windows (GPO)
1770 ```
1771 Software\Policies\Mozilla\Firefox\DisablePasswordReveal = 0x1 | 0x0
1772 ```
1773 #### Windows (Intune)
1774 OMA-URI:
1775 ```
1776 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePasswordReveal
1777 ```
1778 Value (string):
1779 ```
1780 <enabled/> or <disabled/>
1781 ```
1782 #### macOS
1783 ```
1784 <dict>
1785   <key>DisablePasswordReveal</key>
1786   <true/> | <false/>
1787 </dict>
1788 ```
1789 #### policies.json
1790 ```
1791 {
1792   "policies": {
1793     "DisablePasswordReveal": true | false
1794   }
1795 }
1796 ```
1797 ### DisablePocket
1798 Remove Pocket in the Firefox UI. It does not remove it from the new tab page.
1799
1800 **Compatibility:** Firefox 60, Firefox ESR 60\
1801 **CCK2 Equivalent:** `disablePocket`\
1802 **Preferences Affected:** `extensions.pocket.enabled`
1803
1804 #### Windows (GPO)
1805 ```
1806 Software\Policies\Mozilla\Firefox\DisablePocket = 0x1 | 0x0
1807 ```
1808 #### Windows (Intune)
1809 OMA-URI:
1810 ```
1811 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePocket
1812 ```
1813 Value (string):
1814 ```
1815 <enabled/> or <disabled/>
1816 ```
1817 #### macOS
1818 ```
1819 <dict>
1820   <key>DisablePocket</key>
1821   <true/> | <false/>
1822 </dict>
1823 ```
1824 #### policies.json
1825 ```
1826 {
1827   "policies": {
1828     "DisablePocket": true | false
1829   }
1830 }
1831 ```
1832 ### DisablePrivateBrowsing
1833 Remove access to private browsing.
1834
1835 **Compatibility:** Firefox 60, Firefox ESR 60\
1836 **CCK2 Equivalent:** `disablePrivateBrowsing`\
1837 **Preferences Affected:** N/A
1838
1839 #### Windows (GPO)
1840 ```
1841 Software\Policies\Mozilla\Firefox\DisablePrivateBrowsing = 0x1 | 0x0
1842 ```
1843 #### Windows (Intune)
1844 OMA-URI:
1845 ```
1846 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePrivateBrowsing
1847 ```
1848 Value (string):
1849 ```
1850 <enabled/> or <disabled/>
1851 ```
1852 #### macOS
1853 ```
1854 <dict>
1855   <key>DisablePrivateBrowsing</key>
1856   <true/> | <false/>
1857 </dict>
1858 ```
1859 #### policies.json
1860 ```
1861 {
1862   "policies": {
1863     "DisablePrivateBrowsing": true | false
1864   }
1865 }
1866 ```
1867 ### DisableProfileImport
1868 Disables the "Import data from another browser" option in the bookmarks window.
1869
1870 **Compatibility:** Firefox 60, Firefox ESR 60\
1871 **CCK2 Equivalent:** N/A\
1872 **Preferences Affected:** N/A
1873
1874 #### Windows (GPO)
1875 ```
1876 Software\Policies\Mozilla\Firefox\DisableProfileImport = 0x1 | 0x0
1877 ```
1878 #### Windows (Intune)
1879 OMA-URI:
1880 ```
1881 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableProfileImport
1882 ```
1883 Value (string):
1884 ```
1885 <enabled/> or <disabled/>
1886 ```
1887 #### macOS
1888 ```
1889 <dict>
1890   <key>DisableProfileImport</key>
1891   <true/> | <false/>
1892 </dict>
1893 ```
1894 #### policies.json
1895 ```
1896 {
1897   "policies": {
1898     "DisableProfileImport": true | false
1899   }
1900 }
1901 ```
1902 ### DisableProfileRefresh
1903 Disable the Refresh Firefox button on about:support and support.mozilla.org, as well as the prompt that displays offering to refresh Firefox when you haven't used it in a while.
1904
1905 **Compatibility:** Firefox 60, Firefox ESR 60\
1906 **CCK2 Equivalent:** `disableResetFirefox`\
1907 **Preferences Affected:** `browser.disableResetPrompt`
1908
1909 #### Windows (GPO)
1910 ```
1911 Software\Policies\Mozilla\Firefox\DisableProfileRefresh = 0x1 | 0x0
1912 ```
1913 #### Windows (Intune)
1914 OMA-URI:
1915 ```
1916 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableProfileRefresh
1917 ```
1918 Value (string):
1919 ```
1920 <enabled/> or <disabled/>
1921 ```
1922 #### macOS
1923 ```
1924 <dict>
1925   <key>DisableProfileRefresh</key>
1926   <true/> | <false/>
1927 </dict>
1928 ```
1929 #### policies.json
1930 ```
1931 {
1932   "policies": {
1933     "DisableProfileRefresh": true | false
1934   }
1935 }
1936 ```
1937 ### DisableSafeMode
1938 Disable safe mode within the browser.
1939
1940 On Windows, this disables safe mode via the command line as well.
1941
1942 **Compatibility:** Firefox 60, Firefox ESR 60 (Windows, macOS)\
1943 **CCK2 Equivalent:** `disableSafeMode`\
1944 **Preferences Affected:** N/A
1945
1946 #### Windows (GPO)
1947 ```
1948 Software\Policies\Mozilla\Firefox\DisableSafeMode = 0x1 | 0x0
1949 ```
1950 #### Windows (Intune)
1951 OMA-URI:
1952 ```
1953 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSafeMode
1954 ```
1955 Value (string):
1956 ```
1957 <enabled/> or <disabled/>
1958 ```
1959 #### macOS
1960 ```
1961 <dict>
1962   <key>DisableSafeMode</key>
1963   <true/> | <false/>
1964 </dict>
1965 ```
1966 #### policies.json
1967 ```
1968 {
1969   "policies": {
1970     "DisableSafeMode": true | false
1971   }
1972 }
1973 ```
1974 ### DisableSecurityBypass
1975 Prevent the user from bypassing security in certain cases.
1976
1977 `InvalidCertificate` prevents adding an exception when an invalid certificate is shown.
1978
1979 `SafeBrowsing` prevents selecting "ignore the risk" and visiting a harmful site anyway.
1980
1981 **Compatibility:** Firefox 60, Firefox ESR 60\
1982 **CCK2 Equivalent:** N/A\
1983 **Preferences Affected:** `security.certerror.hideAddException`, `browser.safebrowsing.allowOverride`
1984
1985 #### Windows (GPO)
1986 ```
1987 Software\Policies\Mozilla\Firefox\DisableSecurityBypass\InvalidCertificate = 0x1 | 0x0
1988 Software\Policies\Mozilla\Firefox\DisableSecurityBypass\SafeBrowsing = 0x1 | 0x0
1989 ```
1990 #### Windows (Intune)
1991 OMA-URI:
1992 ```
1993 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/P_DisableSecurityBypass_InvalidCertificate
1994 ```
1995 Value (string):
1996 ```
1997 <enabled/> or <disabled/>
1998 ```
1999 OMA-URI:
2000 ```
2001 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/P_DisableSecurityBypass_SafeBrowsing
2002 ```
2003 Value (string):
2004 ```
2005 <enabled/> or <disabled/>
2006 ```
2007
2008 #### macOS
2009 ```
2010 <dict>
2011   <key>DisableSecurityBypass</key>
2012   <dict>
2013     <key>InvalidCertificate</key>
2014     <true/> | <false/>
2015     <key>SafeBrowsing</key>
2016     <true/> | <false/>
2017   </dict>
2018 </dict>
2019 ```
2020 #### policies.json
2021 ```
2022 {
2023   "policies": {
2024     "DisableSecurityBypass": {
2025       "InvalidCertificate": true | false,
2026       "SafeBrowsing": true | false
2027     }
2028   }
2029 }
2030 ```
2031 ### DisableSetDesktopBackground
2032 Remove the "Set As Desktop Background..." menuitem when right clicking on an image.
2033
2034 **Compatibility:** Firefox 60, Firefox ESR 60\
2035 **CCK2 Equivalent:** `removeSetDesktopBackground`\
2036 **Preferences Affected:** N/A
2037
2038 #### Windows (GPO)
2039 ```
2040 Software\Policies\Mozilla\Firefox\DisableSetDesktopBackground = 0x1 | 0x0
2041 ```
2042 #### Windows (Intune)
2043 OMA-URI:
2044 ```
2045 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSetDesktopBackground
2046 ```
2047 Value (string):
2048 ```
2049 <enabled/> or <disabled/>
2050 ```
2051 #### macOS
2052 ```
2053 <dict>
2054   <key>DisableSetDesktopBackground</key>
2055   <true/> | <false/>
2056 </dict>
2057 ```
2058 #### policies.json
2059 ```
2060 {
2061   "policies": {
2062     "DisableSetDesktopBackground": true | false
2063   }
2064 }
2065 ```
2066 ### DisableSystemAddonUpdate
2067 Prevent system add-ons from being installed or updated.
2068
2069 **Compatibility:** Firefox 60, Firefox ESR 60\
2070 **CCK2 Equivalent:** N/A\
2071 **Preferences Affected:** N/A
2072
2073 #### Windows (GPO)
2074 ```
2075 Software\Policies\Mozilla\Firefox\DisableSystemAddonUpdate = 0x1 | 0x0
2076 ```
2077 #### Windows (Intune)
2078 OMA-URI:
2079 ```
2080 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSystemAddonUpdate
2081 ```
2082 Value (string):
2083 ```
2084 <enabled/> or <disabled/>
2085 ```
2086 #### macOS
2087 ```
2088 <dict>
2089   <key>DisableSystemAddonUpdate</key>
2090   <true/> | <false/>
2091 </dict>
2092 ```
2093 #### policies.json
2094 ```
2095 {
2096   "policies": {
2097     "DisableSystemAddonUpdate": true | false
2098   }
2099 }
2100 ```
2101 ### DisableTelemetry
2102 Prevent the upload of telemetry data.
2103
2104 As of Firefox 83 and Firefox ESR 78.5, local storage of telemetry data is disabled as well.
2105
2106 Mozilla recommends that you do not disable telemetry. Information collected through telemetry helps us build a better product for businesses like yours.
2107
2108 **Compatibility:** Firefox 60, Firefox ESR 60\
2109 **CCK2 Equivalent:** `disableTelemetry`\
2110 **Preferences Affected:** `datareporting.healthreport.uploadEnabled`, `datareporting.policy.dataSubmissionEnabled`, `toolkit.telemetry.archive.enabled`
2111
2112 #### Windows (GPO)
2113 ```
2114 Software\Policies\Mozilla\Firefox\DisableTelemetry = 0x1 | 0x0
2115 ```
2116 #### Windows (Intune)
2117 OMA-URI:
2118 ```
2119 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableTelemetry
2120 ```
2121 Value (string):
2122 ```
2123 <enabled/> or <disabled/>
2124 ```
2125 #### macOS
2126 ```
2127 <dict>
2128   <key>DisableTelemetry</key>
2129   <true/> | <false/>
2130 </dict>
2131 ```
2132 #### policies.json
2133 ```
2134 {
2135   "policies": {
2136     "DisableTelemetry": true | false
2137   }
2138 }
2139 ```
2140 ### DisableThirdPartyModuleBlocking
2141 Do not allow blocking third-party modules from the `about:third-party` page.
2142
2143 This policy only works on Windows through GPO (not policies.json).
2144
2145 **Compatibility:** Firefox 110 (Windows only, GPO only)\
2146 **CCK2 Equivalent:** N/A\
2147 **Preferences Affected:** N/A
2148
2149 #### Windows (GPO)
2150 ```
2151 Software\Policies\Mozilla\Firefox\DisableThirdPartyModuleBlocking = = 0x1 | 0x0
2152 ```
2153 #### Windows (Intune)
2154 OMA-URI:
2155 ```
2156 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableThirdPartyModuleBlocking
2157 ```
2158 Value (string):
2159 ```
2160 <enabled/> or <disabled/>
2161 ```
2162 ### DisplayBookmarksToolbar
2163 Set the initial state of the bookmarks toolbar. A user can still change how it is displayed.
2164
2165 `always` means the bookmarks toolbar is always shown.
2166
2167 `never` means the bookmarks toolbar is not shown.
2168
2169 `newtab` means the bookmarks toolbar is only shown on the new tab page.
2170
2171 **Compatibility:** Firefox 109, Firefox ESR 102.7\
2172 **CCK2 Equivalent:** N/A\
2173 **Preferences Affected:** N/A
2174
2175 #### Windows (GPO)
2176 ```
2177 Software\Policies\Mozilla\Firefox\DisplayBookmarksToolbar = "always", "never", "newtab"
2178 ```
2179 #### Windows (Intune)
2180 OMA-URI:
2181 ```
2182 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisplayBookmarksToolbar_Enum
2183 ```
2184 Value (string):
2185 ```
2186 <enabled/>
2187 <data id="DisplayBookmarksToolbar" value="always | never | newtab"/>
2188 ```
2189 #### macOS
2190 ```
2191 <dict>
2192   <key>DisplayBookmarksToolbar</key>
2193   <string>always | never | newtab</string>
2194 </dict>
2195 ```
2196 #### policies.json
2197 ```
2198 {
2199   "policies": {
2200     "DisplayBookmarksToolbar": "always" | "never" | "newtab"
2201   }
2202 }
2203 ```
2204 ### DisplayMenuBar
2205 Set the state of the menubar.
2206
2207 `always` means the menubar is shown and cannot be hidden.
2208
2209 `never` means the menubar is hidden and cannot be shown.
2210
2211 `default-on` means the menubar is on by default but can be hidden.
2212
2213 `default-off` means the menubar is off by default but can be shown.
2214
2215 **Compatibility:** Firefox 73, Firefox ESR 68.5 (Windows, some Linux)\
2216 **CCK2 Equivalent:** `displayMenuBar`\
2217 **Preferences Affected:** N/A
2218
2219 #### Windows (GPO)
2220 ```
2221 Software\Policies\Mozilla\Firefox\DisplayMenuBar = "always", "never", "default-on", "default-off"
2222 ```
2223 #### Windows (Intune)
2224 OMA-URI:
2225 ```
2226 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisplayMenuBar_Enum
2227 ```
2228 Value (string):
2229 ```
2230 <enabled/>
2231 <data id="DisplayMenuBar" value="always | never | default-on | default-off"/>
2232 ```
2233 #### macOS
2234 ```
2235 <dict>
2236   <key>DisplayMenuBar</key>
2237   <string>always | never | default-on | default-off</string>
2238 </dict>
2239 ```
2240 #### policies.json
2241 ```
2242 {
2243   "policies": {
2244     "DisplayMenuBar": "always", "never", "default-on", "default-off"
2245   }
2246 }
2247 ```
2248 ### DNSOverHTTPS
2249 Configure DNS over HTTPS.
2250
2251 `Enabled` determines whether DNS over HTTPS is enabled
2252
2253 `ProviderURL` is a URL to another provider.
2254
2255 `Locked` prevents the user from changing DNS over HTTPS preferences.
2256
2257 `ExcludedDomains` excludes domains from DNS over HTTPS.
2258
2259 **Compatibility:** Firefox 63, Firefox ESR 68 (ExcludedDomains added in 75/68.7)\
2260 **CCK2 Equivalent:** N/A\
2261 **Preferences Affected:** `network.trr.mode`, `network.trr.uri`
2262
2263 #### Windows (GPO)
2264 ```
2265 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\Enabled = 0x1 | 0x0
2266 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\ProviderURL = "URL_TO_ALTERNATE_PROVIDER"
2267 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\Locked = 0x1 | 0x0
2268 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\ExcludedDomains\1 = "example.com"
2269 ```
2270 #### Windows (Intune)
2271 OMA-URI:
2272 ```
2273 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_Enabled
2274 ```
2275 Value (string):
2276 ```
2277 <enabled/> or <disabled/>
2278 ```
2279 OMA-URI:
2280 ```
2281 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_ProviderURL
2282 ```
2283 Value (string):
2284 ```
2285 <enabled/>
2286 <data id="String" value="URL_TO_ALTERNATE_PROVIDER"/>
2287 ```
2288 OMA-URI:
2289 ```
2290 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_Locked
2291 ```
2292 Value (string):
2293 ```
2294 <enabled/> or <disabled/>
2295 ```
2296 OMA-URI:
2297 ```
2298 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_ExcludedDomains
2299 ```
2300 Value (string):
2301 ```
2302 <enabled/>
2303 <data id="List" value="1&#xF000;example.com"/>
2304 ```
2305 #### macOS
2306 ```
2307 <dict>
2308   <key>DNSOverHTTPS</key>
2309   <dict>
2310     <key>Enabled</key>
2311     <true/> | <false/>
2312     <key>ProviderURL</key>
2313     <string>URL_TO_ALTERNATE_PROVIDER</string>
2314     <key>Locked</key>
2315     <true/> | <false/>
2316     <key>ExcludedDomains</key>
2317     <array>
2318       <string>example.com</string>
2319     </array>
2320   </dict>
2321 </dict>
2322 ```
2323 #### policies.json
2324 ```
2325 {
2326   "policies": {
2327     "DNSOverHTTPS": {
2328       "Enabled":  true | false,
2329       "ProviderURL": "URL_TO_ALTERNATE_PROVIDER",
2330       "Locked": true | false,
2331       "ExcludedDomains": ["example.com"]
2332     }
2333   }
2334 }
2335 ```
2336 ### DontCheckDefaultBrowser
2337 Don't check if Firefox is the default browser at startup.
2338
2339 **Compatibility:** Firefox 60, Firefox ESR 60\
2340 **CCK2 Equivalent:** `dontCheckDefaultBrowser`\
2341 **Preferences Affected:** `browser.shell.checkDefaultBrowser`
2342
2343 #### Windows (GPO)
2344 ```
2345 Software\Policies\Mozilla\Firefox\DontCheckDefaultBrowser = 0x1 | 0x0
2346 ```
2347 #### Windows (Intune)
2348 OMA-URI:
2349 ```
2350 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DontCheckDefaultBrowser
2351 ```
2352 Value (string):
2353 ```
2354 <enabled/> or <disabled/>
2355 ```
2356 #### macOS
2357 ```
2358 <dict>
2359   <key>DontCheckDefaultBrowser</key>
2360   <true/> | <false/>
2361 </dict>
2362 ```
2363 #### policies.json
2364 ```
2365 {
2366   "policies": {
2367     "DontCheckDefaultBrowser": true | false
2368   }
2369 }
2370 ```
2371 ### DownloadDirectory
2372 Set and lock the download directory.
2373
2374 You can use ${home} for the native home directory.
2375
2376 **Compatibility:** Firefox 68, Firefox ESR 68\
2377 **CCK2 Equivalent:** N/A\
2378 **Preferences Affected:** `browser.download.dir`, `browser.download.folderList`, `browser.download.useDownloadDir`
2379
2380 #### Windows (GPO)
2381 ```
2382 Software\Policies\Mozilla\Firefox\DownloadDirectory = "${home}\Downloads"
2383 ```
2384 #### Windows (Intune)
2385 OMA-URI:
2386 ```
2387 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DownloadDirectory
2388 ```
2389 Value (string):
2390 ```
2391 <enabled/>
2392 <data id="Preferences_String" value="${home}\Downloads"/>
2393 ```
2394 #### macOS
2395 ```
2396 <dict>
2397   <key>DownloadDirectory</key>
2398   <string>${home}/Downloads</string>
2399 </dict>
2400 ```
2401 #### policies.json (macOS and Linux)
2402 ```
2403 {
2404   "policies": {
2405     "DownloadDirectory": "${home}/Downloads"
2406 }
2407 ```
2408 #### policies.json (Windows)
2409 ```
2410 {
2411   "policies": {
2412     "DownloadDirectory": "${home}\\Downloads"
2413 }
2414 ```
2415 ### EnableTrackingProtection
2416 Configure tracking protection.
2417
2418 If this policy is not configured, tracking protection is not enabled by default in the browser, but it is enabled by default in private browsing and the user can change it.
2419
2420 If `Value` is set to false, tracking protection is disabled and locked in both the regular browser and private browsing.
2421
2422 If `Value` is set to true, tracking protection is enabled by default in both the regular browser and private browsing and the `Locked` value determines whether or not a user can change it.
2423
2424 If `Cryptomining` is set to true, cryptomining scripts on websites are blocked.
2425
2426 If `Fingerprinting` is set to true, fingerprinting scripts on websites are blocked.
2427
2428 If `EmailTracking` is set to true, hidden email tracking pixels and scripts on websites are blocked. (Firefox 112)
2429
2430 `Exceptions` are origins for which tracking protection is not enabled.
2431
2432 **Compatibility:** Firefox 60, Firefox ESR 60 (Cryptomining and Fingerprinting added in 70/68.2, Exceptions added in 73/68.5)\
2433 **CCK2 Equivalent:** N/A\
2434 **Preferences Affected:** `privacy.trackingprotection.enabled`, `privacy.trackingprotection.pbmode.enabled`, `privacy.trackingprotection.cryptomining.enabled`, `privacy.trackingprotection.fingerprinting.enabled`
2435
2436 #### Windows (GPO)
2437 ```
2438 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Value = 0x1 | 0x0
2439 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Locked = 0x1 | 0x0
2440 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Cryptomining = 0x1 | 0x0
2441 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Fingerprinting = 0x1 | 0x0
2442 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Exceptions\1 = "https://example.com"
2443 ```
2444 #### Windows (Intune)
2445 OMA-URI:
2446 ```
2447 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/A_TrackingProtection_Value
2448 ```
2449 Value (string):
2450 ```
2451 <enabled/> or <disabled/>
2452 ```
2453 OMA-URI:
2454 ```
2455 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/B_TrackingProtection_Cryptomining
2456 ```
2457 Value (string):
2458 ```
2459 <enabled/> or <disabled/>
2460 ```
2461 OMA-URI:
2462 ```
2463 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/C_TrackingProtection_Fingerprinting
2464 ```
2465 Value (string):
2466 ```
2467 <enabled/> or <disabled/>
2468 ```
2469 OMA-URI:
2470 ```
2471 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/D_TrackingProtection_Exceptions
2472 ```
2473 Value (string):
2474 ```
2475 <enabled/>
2476 <data id="TrackingProtection_Exceptions" value="1&#xF000;https://example.com"/>
2477 ```
2478 OMA-URI:
2479 ```
2480 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/E_TrackingProtection_Locked
2481 ```
2482 Value (string):
2483 ```
2484 <enabled/> or <disabled/>
2485 ```
2486 #### macOS
2487 ```
2488 <dict>
2489   <key>EnableTrackingProtection</key>
2490   <dict>
2491     <key>Value</key>
2492     <true/> | <false/>
2493     <key>Locked</key>
2494     <true/> | <false/>
2495     <key>Cryptomining</key>
2496     <true/> | <false/>
2497     <key>Fingerprinting</key>
2498     <true/> | <false/>
2499     <key>Exceptions</key>
2500     <array>
2501       <string>https://example.com</string>
2502     </array>
2503   </dict>
2504 </dict>
2505 ```
2506 #### policies.json
2507 ```
2508 {
2509   "policies": {
2510     "EnableTrackingProtection": {
2511       "Value": true | false,
2512       "Locked": true | false,
2513       "Cryptomining": true | false,
2514       "Fingerprinting": true | false,
2515       "Exceptions": ["https://example.com"]
2516     }
2517   }
2518 }
2519 ```
2520 ### EncryptedMediaExtensions
2521 Enable or disable Encrypted Media Extensions and optionally lock it.
2522
2523 If `Enabled` is set to false, encrypted media extensions (like Widevine) are not downloaded by Firefox unless the user consents to installing them.
2524
2525 If `Locked` is set to true and `Enabled` is set to false, Firefox will not download encrypted media extensions (like Widevine) or ask the user to install them.
2526
2527 **Compatibility:** Firefox 77, Firefox ESR 68.9\
2528 **CCK2 Equivalent:** N/A\
2529 **Preferences Affected:** `media.eme.enabled`
2530
2531 #### Windows (GPO)
2532 ```
2533 Software\Policies\Mozilla\Firefox\EncryptedMediaExtensions\Enabled = 0x1 | 0x0
2534 Software\Policies\Mozilla\Firefox\EncryptedMediaExtensions\Locked = 0x1 | 0x0
2535 ```
2536 #### Windows (Intune)
2537 OMA-URI:
2538 ```
2539 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~EncryptedMediaExtensions/EncryptedMediaExtensions_Enabled
2540 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~EncryptedMediaExtensions/EncryptedMediaExtensions_Locked
2541 ```
2542 Value (string):
2543 ```
2544 <enabled/>or <disabled/>
2545 ```
2546 #### macOS
2547 ```
2548 <dict>
2549   <key>EncryptedMediaExtensions</key>
2550   <dict>
2551     <key>Enabled</key>
2552     <true/> | <false/>
2553     <key>Locked</key>
2554     <true/> | <false/>
2555   </dict>
2556 </dict>
2557 ```
2558 #### policies.json
2559 ```
2560 {
2561   "policies": {
2562     "EncryptedMediaExtensions": {
2563       "Enabled": true | false,
2564       "Locked": true | false
2565     }
2566   }
2567 }
2568 ```
2569 ### EnterprisePoliciesEnabled
2570 Enable policy support on macOS.
2571
2572 **Compatibility:** Firefox 63, Firefox ESR 60.3 (macOS only)\
2573 **CCK2 Equivalent:** N/A\
2574 **Preferences Affected:** N/A
2575
2576 #### macOS
2577 ```
2578 <dict>
2579   <key>EnterprisePoliciesEnabled</key>
2580   <true/>
2581 </dict>
2582 ```
2583 ### ExemptDomainFileTypePairsFromFileTypeDownloadWarnings
2584
2585 Disable warnings based on file extension for specific file types on domains.
2586
2587 This policy is based on the [Chrome policy](https://chromeenterprise.google/policies/#ExemptDomainFileTypePairsFromFileTypeDownloadWarnings) of the same name.
2588
2589 Important: The documentation for the policy for both Edge and Chrome is incorrect. The ```domains``` value must be a domain, not a URL pattern. Also, we do not support using ```*``` to mean all domains.
2590
2591 **Compatibility:** Firefox 102\
2592 **CCK2 Equivalent:** N/A\
2593 **Preferences Affected:** N/A
2594
2595 #### Windows (GPO)
2596 Software\Policies\Mozilla\Firefox\ExemptDomainFileTypePairsFromFileTypeDownloadWarnings (REG_MULTI_SZ) =
2597 ```
2598 [
2599   {
2600      "file_extension": "jnlp",
2601      "domains": ["example.com"]
2602   }
2603 ]
2604 ```
2605 #### Windows (Intune)
2606 OMA-URI:
2607 ```
2608 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/ExemptDomainFileTypePairsFromFileTypeDownloadWarnings
2609 ```
2610 Value (string):
2611 ```
2612 <enabled/>
2613 <data id="JSON" value='
2614 [
2615   {
2616      "file_extension": "jnlp",
2617      "domains": ["example.com"]
2618   }
2619 ]
2620 '/>
2621 ```
2622 #### macOS
2623 ```
2624 <dict>
2625   <key>ExemptDomainFileTypePairsFromFileTypeDownloadWarnings</key>
2626   <array>
2627     <dict>
2628       <key>file_extension</key>
2629       <string>jnlp</string>
2630       <key>domains</key>
2631       <array>
2632         <string>example.com</string>
2633       </array>
2634     </dict>
2635   </array>
2636 </dict>
2637 ```
2638 #### policies.json
2639 ```
2640 {
2641   "policies": {
2642     "ExemptDomainFileTypePairsFromFileTypeDownloadWarnings": [{
2643       "file_extension": "jnlp",
2644       "domains": ["example.com"]
2645     }]
2646   }
2647 }
2648 ```
2649 ### Extensions
2650 Control the installation, uninstallation and locking of extensions.
2651
2652 While this policy is not technically deprecated, it is recommended that you use the **[`ExtensionSettings`](#extensionsettings)** policy. It has the same functionality and adds more. It does not support native paths, though, so you'll have to use file:/// URLs.
2653
2654 `Install` is a list of URLs or native paths for extensions to be installed.
2655
2656 `Uninstall` is a list of extension IDs that should be uninstalled if found.
2657
2658 `Locked` is a list of extension IDs that the user cannot disable or uninstall.
2659
2660 **Compatibility:** Firefox 60, Firefox ESR 60\
2661 **CCK2 Equivalent:** `addons`\
2662 **Preferences Affected:** N/A
2663
2664 #### Windows (GPO)
2665 ```
2666 Software\Policies\Mozilla\Firefox\Extensions\Install\1 = "https://addons.mozilla.org/firefox/downloads/somefile.xpi"
2667 Software\Policies\Mozilla\Firefox\Extensions\Install\2 = "//path/to/xpi"
2668 Software\Policies\Mozilla\Firefox\Extensions\Uninstall\1 = "bad_addon_id@mozilla.org"
2669 Software\Policies\Mozilla\Firefox\Extensions\Locked\1 = "addon_id@mozilla.org"
2670 ```
2671 #### Windows (Intune)
2672 OMA-URI:
2673 ```
2674 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/Extensions_Install
2675 ```
2676 Value (string):
2677 ```
2678 <enabled/>
2679 <data id="Extensions" value="1&#xF000;https://addons.mozilla.org/firefox/downloads/somefile.xpi&#xF000;2&#xF000;//path/to/xpi"/>
2680 ```
2681 OMA-URI:
2682 ```
2683 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/Extensions_Uninstall
2684 ```
2685 Value (string):
2686 ```
2687 <enabled/>
2688 <data id="Extensions" value="1&#xF000;bad_addon_id@mozilla.org"/>
2689 ```
2690 OMA-URI:
2691 ```
2692 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/Extensions_Locked
2693 ```
2694 Value (string):
2695 ```
2696 <enabled/>
2697 <data id="Extensions" value="1&#xF000;addon_id@mozilla.org"/>
2698 ```
2699 #### macOS
2700 ```
2701 <dict>
2702   <key>Extensions</key>
2703   <dict>
2704     <key>Install</key>
2705     <array>
2706       <string>https://addons.mozilla.org/firefox/downloads/somefile.xpi</string>
2707       <string>//path/to/xpi</string>
2708     </array>
2709     <key>Uninstall</key>
2710     <array>
2711       <string>bad_addon_id@mozilla.org</string>
2712     </array>
2713     <key>Locked</key>
2714     <array>
2715       <string>addon_id@mozilla.org</string>
2716     </array>
2717   </dict>
2718 </dict>
2719 ```
2720 #### policies.json
2721 ```
2722 {
2723   "policies": {
2724     "Extensions": {
2725       "Install": ["https://addons.mozilla.org/firefox/downloads/somefile.xpi", "//path/to/xpi"],
2726       "Uninstall": ["bad_addon_id@mozilla.org"],
2727       "Locked":  ["addon_id@mozilla.org"]
2728     }
2729   }
2730 }
2731 ```
2732 ### ExtensionSettings
2733 Manage all aspects of extensions. This policy is based heavily on the [Chrome policy](https://dev.chromium.org/administrators/policy-list-3/extension-settings-full) of the same name.
2734
2735 This policy maps an extension ID to its configuration. With an extension ID, the configuration will be applied to the specified extension only. A default configuration can be set for the special ID "*", which will apply to all extensions that don't have a custom configuration set in this policy.
2736
2737 To obtain an extension ID, install the extension and go to about:support. You will see the ID in the Extensions section. I've also created an extension that makes it easy to find the ID of extensions on AMO. You can download it [here](https://github.com/mkaply/queryamoid/releases/tag/v0.1).
2738
2739 The configuration for each extension is another dictionary that can contain the fields documented below.
2740
2741 | Name | Description |
2742 | --- | --- |
2743 | `installation_mode` | Maps to a string indicating the installation mode for the extension. The valid strings are `allowed`,`blocked`,`force_installed`, and `normal_installed`.
2744 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`allowed` | Allows the extension to be installed by the user. This is the default behavior. There is no need for an install_url; it will automatically be allowed based on the ID.
2745 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`blocked`| Blocks installation of the extension and removes it from the device if already installed.
2746 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`force_installed`| The extension is automatically installed and can't be removed by the user. This option is not valid for the default configuration and requires an install_url.
2747 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`normal_installed`| The extension is automatically installed but can be disabled by the user. This option is not valid for the default configuration and requires an install_url.
2748 | `install_url`| Maps to a URL indicating where Firefox can download a force_installed or normal_installed extension.  If installing from the local file system, use a [```file:///``` URL](https://en.wikipedia.org/wiki/File_URI_scheme). If installing from the addons.mozilla.org, use the following URL (substituting SHORT_NAME from the URL on AMO), https://addons.mozilla.org/firefox/downloads/latest/SHORT_NAME/latest.xpi. Languages packs are available from https://releases.mozilla.org/pub/firefox/releases/VERSION/PLATFORM/xpi/LANGUAGE.xpi. If you need to update the extension, you can change the name of the extension and it will be automatically updated. Extensions installed from file URLs will additional be updated when their internal version changes.
2749 | `install_sources` | A list of sources from which installing extensions is allowed using URL match patterns. **This is unnecessary if you are only allowing the installation of certain extensions by ID.** Each item in this list is an extension-style match pattern. Users will be able to easily install items from any URL that matches an item in this list. Both the location of the *.xpi file and the page where the download is started from (i.e.  the referrer) must be allowed by these patterns. This setting can be used only for the default configuration.
2750 | `allowed_types` | This setting whitelists the allowed types of extension/apps that can be installed in Firefox. The value is a list of strings, each of which should be one of the following: "extension", "theme", "dictionary", "locale" This setting can be used only for the default configuration.
2751 | `blocked_install_message` | This maps to a string specifying the error message to display to users if they're blocked from installing an extension. This setting allows you to append text to the generic error message displayed when the extension is blocked. This could be be used to direct users to your help desk, explain why a particular extension is blocked, or something else. This setting can be used only for the default configuration.
2752 | `restricted_domains` | An array of domains on which content scripts can't be run. This setting can be used only for the default configuration.
2753 | `updates_disabled` | (Firefox 89, Firefox ESR 78.11) Boolean that indicates whether or not to disable automatic updates for an individual extension.
2754 | `default_area` | (Firefox 113) String that indicates where to place the extension icon by default. Possible values are `navbar` and `menupanel`.
2755
2756 **Compatibility:** Firefox 69, Firefox ESR 68.1 (As of Firefox 85, Firefox ESR 78.7, installing a theme makes it the default.)\
2757 **CCK2 Equivalent:** N/A\
2758 **Preferences Affected:** N/A
2759
2760 #### Windows (GPO)
2761 Software\Policies\Mozilla\Firefox\ExtensionSettings (REG_MULTI_SZ) =
2762 ```
2763 {
2764   "*": {
2765     "blocked_install_message": "Custom error message.",
2766     "install_sources": ["https://yourwebsite.com/*"],
2767     "installation_mode": "blocked",
2768     "allowed_types": ["extension"]
2769   },
2770   "uBlock0@raymondhill.net": {
2771     "installation_mode": "force_installed",
2772     "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
2773   },
2774   "https-everywhere@eff.org": {
2775     "installation_mode": "allowed"
2776   }
2777 }
2778 ```
2779 #### Windows (Intune)
2780 OMA-URI:
2781 ```
2782 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/ExtensionSettings
2783 ```
2784 Value (string):
2785 ```
2786 <enabled/>
2787 <data id="ExtensionSettings" value='
2788 {
2789   "*": {
2790     "blocked_install_message": "Custom error message.",
2791     "install_sources": ["https://yourwebsite.com/*"],
2792     "installation_mode": "blocked",
2793     "allowed_types": ["extension"]
2794   },
2795   "uBlock0@raymondhill.net": {
2796     "installation_mode": "force_installed",
2797     "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
2798   },
2799     "https-everywhere@eff.org": {
2800     "installation_mode": "allowed"
2801   }
2802 }'/>
2803 ```
2804 #### macOS
2805 ```
2806 <dict>
2807   <key>ExtensionSettings</key>
2808   <dict>
2809     <key>*</key>
2810     <dict>
2811       <key>blocked_install_message</key>
2812       <string>Custom error message.</string>
2813       <key>install_sources</key>
2814       <array>
2815         <string>"https://yourwebsite.com/*"</string>
2816       </array>
2817       <key>installation_mode</key>
2818       <string>blocked</string>
2819       <key>allowed_types</key>
2820       <array>
2821         <string>extension</string>
2822       </array>
2823     </dict>
2824     <key>uBlock0@raymondhill.net</key>
2825     <dict>
2826       <key>installation_mode</key>
2827        <string>force_installed</string>
2828       <key>install_url</key>
2829       <string>https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi</string>
2830     </dict>
2831     <key>https-everywhere@eff.org</key>
2832     <dict>
2833       <key>installation_mode</key>
2834        <string>allowed</string>
2835     </dict>
2836   </dict>
2837 </dict>
2838 ```
2839 #### policies.json
2840 ```
2841 {
2842   "policies": {
2843     "ExtensionSettings": {
2844       "*": {
2845         "blocked_install_message": "Custom error message.",
2846         "install_sources": ["https://yourwebsite.com/*"],
2847         "installation_mode": "blocked",
2848         "allowed_types": ["extension"]
2849       },
2850       "uBlock0@raymondhill.net": {
2851         "installation_mode": "force_installed",
2852         "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
2853       },
2854       "https-everywhere@eff.org": {
2855         "installation_mode": "allowed"
2856       }
2857     }
2858   }
2859 }
2860 ```
2861 ### ExtensionUpdate
2862 Control extension updates.
2863
2864 **Compatibility:** Firefox 67, Firefox ESR 60.7\
2865 **CCK2 Equivalent:** N/A\
2866 **Preferences Affected:** `extensions.update.enabled`
2867
2868 #### Windows (GPO)
2869 ```
2870 Software\Policies\Mozilla\Firefox\ExtensionUpdate = 0x1 | 0x0
2871 ```
2872 #### Windows (Intune)
2873 OMA-URI:
2874 ```
2875 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/ExtensionUpdate
2876 ```
2877 Value (string):
2878 ```
2879 <enabled/> or <disabled/>
2880 ```
2881 #### macOS
2882 ```
2883 <dict>
2884   <key>ExtensionUpdate</key>
2885   <true/> | <false/>
2886 </dict>
2887 ```
2888 #### policies.json
2889 ```
2890 {
2891   "policies": {
2892     "ExtensionUpdate": true | false
2893   }
2894 }
2895 ```
2896 ### FirefoxHome
2897 Customize the Firefox Home page.
2898
2899 **Compatibility:** Firefox 68, Firefox ESR 68 (SponsoredTopSites and SponsoredPocket were added in Firefox 95, Firefox ESR 91.4)
2900 **CCK2 Equivalent:** N/A\
2901 **Preferences Affected:** `browser.newtabpage.activity-stream.showSearch`, `browser.newtabpage.activity-stream.feeds.topsites`, `browser.newtabpage.activity-stream.feeds.section.highlights`, `browser.newtabpage.activity-stream.feeds.section.topstories`, `browser.newtabpage.activity-stream.feeds.snippets`, `browser.newtabpage.activity-stream.showSponsoredTopSites`, `browser.newtabpage.activity-stream.showSponsored`
2902
2903 #### Windows (GPO)
2904 ```
2905 Software\Policies\Mozilla\Firefox\FirefoxHome\Search = 0x1 | 0x0
2906 Software\Policies\Mozilla\Firefox\FirefoxHome\TopSites = 0x1 | 0x0
2907 Software\Policies\Mozilla\Firefox\FirefoxHome\SponsoredTopSites = 0x1 | 0x0
2908 Software\Policies\Mozilla\Firefox\FirefoxHome\Highlights = 0x1 | 0x0
2909 Software\Policies\Mozilla\Firefox\FirefoxHome\Pocket = 0x1 | 0x0
2910 Software\Policies\Mozilla\Firefox\FirefoxHome\SponsoredPocket = 0x1 | 0x0
2911 Software\Policies\Mozilla\Firefox\FirefoxHome\Snippets = 0x1 | 0x0
2912 Software\Policies\Mozilla\Firefox\FirefoxHome\Locked = 0x1 | 0x0
2913 ```
2914 #### Windows (Intune)
2915 OMA-URI:
2916 ```
2917 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/CustomizeFirefoxHome
2918 ```
2919 Value (string):
2920 ```
2921 <enabled/>
2922 <data id="FirefoxHome_Search"  value="true | false"/>
2923 <data id="FirefoxHome_TopSites"  value="true | false"/>
2924 <data id="FirefoxHome_SponsoredTopSites"  value="true | false"/>
2925 <data id="FirefoxHome_Highlights"  value="true | false"/>
2926 <data id="FirefoxHome_Pocket"  value="true | false"/>
2927 <data id="FirefoxHome_SponsoredPocket"  value="true | false"/>
2928 <data id="FirefoxHome_Snippets"  value="true | false"/>
2929 <data id="FirefoxHome_Locked"  value="true | false"/>
2930 ```
2931 #### macOS
2932 ```
2933 <dict>
2934   <key>FirefoxHome</key>
2935   <dict>
2936     <key>Search</key>
2937     <true/> | <false/>
2938     <key>TopSites</key>
2939     <true/> | <false/>
2940     <key>SponsoredTopSites</key>
2941     <true/> | <false/>
2942     <key>Highlights</key>
2943     <true/> | <false/>
2944     <key>Pocket</key>
2945     <true/> | <false/>
2946     <key>SponsoredPocket</key>
2947     <true/> | <false/>
2948     <key>Snippets</key>
2949     <true/> | <false/>
2950     <key>Locked</key>
2951     <true/> | <false/>
2952   </dict>
2953 </dict>
2954 ```
2955 #### policies.json
2956 ```
2957 {
2958   "policies": {
2959     "FirefoxHome": {
2960       "Search": true | false,
2961       "TopSites": true | false,
2962       "SponsoredTopSites": true | false,
2963       "Highlights": true | false,
2964       "Pocket": true | false,
2965       "SponsoredPocket": true | false,
2966       "Snippets": true | false,
2967       "Locked": true | false
2968     }
2969   }
2970 }
2971 ```
2972 ### FirefoxSuggest
2973 Customize Firefox Suggest (US only).
2974
2975 **Compatibility:** Firefox 118, Firefox ESR 115.3.
2976 **CCK2 Equivalent:** N/A\
2977 **Preferences Affected:** `browser.urlbar.suggest.quicksuggest.nonsponsored`, `browser.urlbar.suggest.quicksuggest.sponsored`, `browser.urlbar.quicksuggest.dataCollection.enabled`
2978
2979 #### Windows (GPO)
2980 ```
2981 Software\Policies\Mozilla\Firefox\FirefoxSuggest\WebSuggestions = 0x1 | 0x0
2982 Software\Policies\Mozilla\Firefox\FirefoxSuggest\SponsoredSuggestions = 0x1 | 0x0
2983 Software\Policies\Mozilla\Firefox\FirefoxSuggest\ImproveSuggest = 0x1 | 0x0
2984 Software\Policies\Mozilla\Firefox\FirefoxSuggest\Locked = 0x1 | 0x0
2985 ```
2986 #### Windows (Intune)
2987 OMA-URI:
2988 ```
2989 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~FirefoxSuggest/WebSuggestions
2990 ```
2991 Value (string):
2992 ```
2993 <enabled/> or <disabled/>
2994 ```
2995 OMA-URI:
2996 ```
2997 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~FirefoxSuggest/SponsoredSuggestions
2998 ```
2999 Value (string):
3000 ```
3001 <enabled/> or <disabled/>
3002 ```
3003 OMA-URI:
3004 ```
3005 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~FirefoxSuggest/ImproveSuggest
3006 ```
3007 Value (string):
3008 ```
3009 <enabled/> or <disabled/>
3010 ```
3011 OMA-URI:
3012 ```
3013 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~FirefoxSuggest/Locked
3014 ```
3015 Value (string):
3016 ```
3017 <enabled/> or <disabled/>
3018 ```
3019 #### macOS
3020 ```
3021 <dict>
3022   <key>FirefoxSuggest</key>
3023   <dict>
3024     <key>WebSuggestions</key>
3025     <true/> | <false/>
3026     <key>SponsoredSuggestions</key>
3027     <true/> | <false/>
3028     <key>ImproveSuggest</key>
3029     <true/> | <false/>
3030     <key>Locked</key>
3031     <true/> | <false/>
3032   </dict>
3033 </dict>
3034 ```
3035 #### policies.json
3036 ```
3037 {
3038   "policies": {
3039     "FirefoxSuggest": {
3040       "WebSuggestions": true | false,
3041       "SponsoredSuggestions": true | false,
3042       "ImproveSuggest": true | false,
3043       "Locked": true | false
3044     }
3045   }
3046 }
3047 ```
3048 ### GoToIntranetSiteForSingleWordEntryInAddressBar
3049 Whether to always go through the DNS server before sending a single word search string to a search engine.
3050
3051 If the site exists, it will navigate to the website. If the intranet responds with a 404, the page will show a 404. If the intranet does not respond, the browser will attempt a search.
3052
3053 The second result in the URL bar will be a search result to allow users to conduct a web search exactly as it was entered.
3054
3055 If instead you would like to enable the ability to have your domain appear as a valid URL and to disallow the browser from ever searching that term using the first result that matches it, add the pref `browser.fixup.domainwhitelist.YOUR_DOMAIN` (where `YOUR_DOMAIN` is the name of the domain you'd like to add), and set the pref to `true`. The URL bar will then suggest `YOUR_DOMAIN` when the user fully types `YOUR_DOMAIN`. If the user attempts to load that domain and it fails to load, it will show an "Unable to connect" error page.
3056
3057 You can also whitelist a domain suffix that is not part of the [Public Suffix List](https://publicsuffix.org/) by adding the pref `browser.fixup.domainsuffixwhitelist.YOUR_DOMAIN_SUFFIX` with a value of `true`.
3058
3059 Additionally, if you want users to see a "Did you mean to go to 'YOUR_DOMAIN'" prompt below the URL bar if they land on a search results page instead of an intranet domain that provides a response, set the pref `browser.urlbar.dnsResolveSingleWordsAfterSearch` to `1`. Enabling this will cause the browser to commit a DNS check after every single word search. If the browser receives a response from the intranet, a prompt will ask the user if they'd like to instead navigate to `YOUR_DOMAIN`. If the user presses the **yes** button, `browser.fixup.domainwhitelist.YOUR_DOMAIN` will be set to `true`.
3060
3061 **Compatibility:** Firefox 104, Firefox ESR 102.2\
3062 **CCK2 Equivalent:** `N/A`\
3063 **Preferences Affected:** `browser.fixup.dns_first_for_single_words`
3064
3065 #### Windows (GPO)
3066 ```
3067 Software\Policies\Mozilla\Firefox\GoToIntranetSiteForSingleWordEntryInAddressBar = 0x1 | 0x0
3068 ```
3069 #### Windows (Intune)
3070 OMA-URI:
3071 ```
3072 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/GoToIntranetSiteForSingleWordEntryInAddressBar
3073 ```
3074 Value (string):
3075 ```
3076 <enabled/> or <disabled/>
3077 ```
3078 #### macOS
3079 ```
3080 <dict>
3081   <key>GoToIntranetSiteForSingleWordEntryInAddressBar</key>
3082   <true/> | <false/>
3083 </dict>
3084 ```
3085 #### policies.json
3086 ```
3087 {
3088   "policies": {
3089     "GoToIntranetSiteForSingleWordEntryInAddressBar": true | false
3090   }
3091 }
3092 ```
3093 ### Handlers
3094 Configure default application handlers. This policy is based on the internal format of `handlers.json`.
3095
3096 You can configure handlers based on a mime type (`mimeTypes`), a file's extension (`extensions`), or a protocol (`schemes`).
3097
3098 Within each handler type, you specify the given mimeType/extension/scheme as a key and use the following subkeys to describe how it is handled.
3099
3100 | Name | Description |
3101 | --- | --- |
3102 | `action`| Can be either `saveToDisk`, `useHelperApp`, `useSystemDefault`.
3103 | `ask` | If `true`, the user is asked if what they want to do with the file. If `false`, the action is taken without user intervention.
3104 | `handlers` | An array of handlers with the first one being the default. If you don't want to have a default handler, use an empty object for the first handler. Choose between path or uriTemplate.
3105 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`name` | The display name of the handler (might not be used).
3106 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`path`| The native path to the executable to be used.
3107 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`uriTemplate`| A url to a web based application handler. The URL must be https and contain a %s to be used for substitution.
3108
3109 **Compatibility:** Firefox 78, Firefox ESR 78\
3110 **CCK2 Equivalent:** N/A\
3111 **Preferences Affected:** N/A
3112
3113 #### Windows (GPO)
3114 Software\Policies\Mozilla\Firefox\Handlers (REG_MULTI_SZ) =
3115 ```
3116 {
3117   "mimeTypes": {
3118     "application/msword": {
3119       "action": "useSystemDefault",
3120       "ask": true | false
3121     }
3122   },
3123   "schemes": {
3124     "mailto": {
3125       "action": "useHelperApp",
3126       "ask": true | false,
3127       "handlers": [{
3128         "name": "Gmail",
3129         "uriTemplate": "https://mail.google.com/mail/?extsrc=mailto&url=%s"
3130       }]
3131     }
3132   },
3133   "extensions": {
3134     "pdf": {
3135       "action": "useHelperApp",
3136       "ask": true | false,
3137       "handlers": [{
3138         "name": "Adobe Acrobat",
3139         "path": "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32.exe"
3140       }]
3141     }
3142   }
3143 }
3144 ```
3145 #### Windows (Intune)
3146 OMA-URI:
3147 ```
3148 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Handlers
3149 ```
3150 Value (string):
3151 ```
3152 <enabled/>
3153 <data id="Handlers" value='
3154 {
3155   "mimeTypes": {
3156     "application/msword": {
3157       "action": "useSystemDefault",
3158       "ask": true | false
3159     }
3160   },
3161   "schemes": {
3162     "mailto": {
3163       "action": "useHelperApp",
3164       "ask": true | false,
3165       "handlers": [{
3166         "name": "Gmail",
3167         "uriTemplate": "https://mail.google.com/mail/?extsrc=mailto&amp;url=%s"
3168       }]
3169     }
3170   },
3171   "extensions": {
3172     "pdf": {
3173       "action": "useHelperApp",
3174       "ask": true | false,
3175       "handlers": [{
3176         "name": "Adobe Acrobat",
3177         "path": "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32.exe"
3178       }]
3179     }
3180   }
3181 }
3182 '/>
3183 ```
3184 #### macOS
3185 ```
3186 <dict>
3187   <key>Handlers</key>
3188   <dict>
3189     <key>mimeTypes</key>
3190     <dict>
3191       <key>application/msword</key>
3192       <dict>
3193         <key>action</key>
3194         <string>useSystemDefault</string>
3195         <key>ask</key>
3196         <true/> | <false/>
3197       </dict>
3198     </dict>
3199     <key>schemes</key>
3200     <dict>
3201       <key>mailto</key>
3202       <dict>
3203         <key>action</key>
3204         <string>useHelperApp</string>
3205         <key>ask</key>
3206         <true/> | <false/>
3207         <key>handlers</key>
3208         <array>
3209           <dict>
3210             <key>name</key>
3211             <string>Gmail</string>
3212             <key>uriTemplate</key>
3213             <string>https://mail.google.com/mail/?extsrc=mailto&url=%s</string>
3214           </dict>
3215         </array>
3216       </dict>
3217     </dict>
3218     <key>extensions</key>
3219     <dict>
3220       <key>pdf</key>
3221       <dict>
3222         <key>action</key>
3223         <string>useHelperApp</string>
3224         <key>ask</key>
3225         <true/> | <false/>
3226         <key>handlers</key>
3227         <array>
3228           <dict>
3229             <key>name</key>
3230             <string>Adobe Acrobat</string>
3231             <key>path</key>
3232             <string>/System/Applications/Preview.app</string>
3233           </dict>
3234         </array>
3235       </dict>
3236     </dict>
3237   </dict>
3238 </dict>
3239 ```
3240 #### policies.json
3241 ```
3242 {
3243   "policies": {
3244     "Handlers": {
3245       "mimeTypes": {
3246         "application/msword": {
3247           "action": "useSystemDefault",
3248           "ask": false
3249         }
3250       },
3251       "schemes": {
3252         "mailto": {
3253           "action": "useHelperApp",
3254           "ask": true | false,
3255           "handlers": [{
3256             "name": "Gmail",
3257             "uriTemplate": "https://mail.google.com/mail/?extsrc=mailto&url=%s"
3258           }]
3259         }
3260       },
3261       "extensions": {
3262         "pdf": {
3263           "action": "useHelperApp",
3264           "ask": true | false,
3265           "handlers": [{
3266             "name": "Adobe Acrobat",
3267             "path": "/usr/bin/acroread"
3268           }]
3269         }
3270       }
3271     }
3272   }
3273 }
3274 ```
3275 ### HardwareAcceleration
3276 Control hardware acceleration.
3277
3278 **Compatibility:** Firefox 60, Firefox ESR 60\
3279 **CCK2 Equivalent:** N/A\
3280 **Preferences Affected:** `layers.acceleration.disabled`
3281
3282 #### Windows (GPO)
3283 ```
3284 Software\Policies\Mozilla\Firefox\HardwareAcceleration = 0x1 | 0x0
3285 ```
3286 #### Windows (Intune)
3287 OMA-URI:
3288 ```
3289 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/HardwareAcceleration
3290 ```
3291 Value (string):
3292 ```
3293 <enabled/> or <disabled/>
3294 ```
3295 #### macOS
3296 ```
3297 <dict>
3298   <key>HardwareAcceleration</key>
3299   <true/> | <false/>
3300 </dict>
3301 ```
3302 #### policies.json
3303 ```
3304 {
3305   "policies": {
3306     "HardwareAcceleration": true | false
3307   }
3308 }
3309 ```
3310 ### Homepage
3311 Configure the default homepage and how Firefox starts.
3312
3313 `URL` is the default homepage.
3314
3315 `Locked` prevents the user from changing homepage preferences.
3316
3317 `Additional` allows for more than one homepage.
3318
3319 `StartPage` is how Firefox starts. The choices are no homepage, the default homepage or the previous session.
3320
3321 With Firefox 78, an additional option as added for `Startpage`, `homepage-locked`. If this is value is set for the Startpage, the user will always get the homepage at startup and cannot choose to restore their session.
3322
3323 **Compatibility:** Firefox 60, Firefox ESR 60 (StartPage was added in Firefox 60, Firefox ESR 60.4, homepage-locked added in Firefox 78)\
3324 **CCK2 Equivalent:** `homePage`,`lockHomePage`\
3325 **Preferences Affected:** `browser.startup.homepage`, `browser.startup.page`
3326
3327 #### Windows (GPO)
3328 ```
3329 Software\Policies\Mozilla\Firefox\Homepage\URL = "https://example.com"
3330 Software\Policies\Mozilla\Firefox\Homepage\Locked = 0x1 | 0x0
3331 Software\Policies\Mozilla\Firefox\Homepage\Additional\1 = "https://example.org"
3332 Software\Policies\Mozilla\Firefox\Homepage\Additional\2 = "https://example.edu"
3333 Software\Policies\Mozilla\Firefox\Homepage\StartPage = "none" | "homepage" | "previous-session" | "homepage-locked"
3334 ```
3335 #### Windows (Intune)
3336 OMA-URI:
3337 ```
3338 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageURL
3339 ```
3340 Value (string):
3341 ```
3342 <enabled/>
3343
3344 <data id="HomepageURL" value="https://example.com"/>
3345 <data id="HomepageLocked" value="true | false"/>
3346 ```
3347 OMA-URI:
3348 ```
3349 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageAdditional
3350 ```
3351 Value (string):
3352 ```
3353 <enabled/>
3354
3355 <data id="HomepageAdditional" value="1&#xF000;http://example.org&#xF000;2&#xF000;http://example.edu"/>
3356 ```
3357 OMA-URI:
3358 ```
3359 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageStartPage
3360 ```
3361 Value (string):
3362 ```
3363 <enabled/>
3364
3365 <data id="StartPage" value="none | homepage | previous-session"/>
3366 ```
3367 #### macOS
3368 ```
3369 <dict>
3370   <key>Homepage</key>
3371   <dict>
3372     <key>URL</key>
3373     <string>http://example.com</string>
3374     <key>Locked</key>
3375     <true/> | <false/>
3376     <key>Additional</key>
3377     <array>
3378       <string>http://example.org</string>
3379       <string>http://example.edu</string>
3380     </array>
3381     <key>StartPage</key>
3382     <string>none | homepage | previous-session | homepage-locked</string>
3383   </dict>
3384 </dict>
3385 ```
3386 #### policies.json
3387 ```
3388 {
3389   "policies": {
3390     "Homepage": {
3391       "URL": "http://example.com/",
3392       "Locked": true | false,
3393       "Additional": ["http://example.org/",
3394                      "http://example.edu/"],
3395       "StartPage": "none" | "homepage" | "previous-session" | "homepage-locked"
3396     }
3397   }
3398 }
3399 ```
3400 ### InstallAddonsPermission
3401 Configure the default extension install policy as well as origins for extension installs are allowed. This policy does not override turning off all extension installs.
3402
3403 `Allow` is a list of origins where extension installs are allowed.
3404
3405 `Default` determines whether or not extension installs are allowed by default.
3406
3407 **Compatibility:** Firefox 60, Firefox ESR 60\
3408 **CCK2 Equivalent:** `permissions.install`\
3409 **Preferences Affected:** `xpinstall.enabled`
3410
3411 #### Windows (GPO)
3412 ```
3413 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Allow\1 = "https://example.org"
3414 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Allow\2 = "https://example.edu"
3415 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Default = 0x1 | 0x0
3416 ```
3417 #### Windows (Intune)
3418 OMA-URI:
3419 ```
3420 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Addons/InstallAddonsPermission_Allow
3421 ```
3422 Value (string):
3423 ```
3424 <enabled/>
3425 <data id="Permissions" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
3426 ```
3427 OMA-URI:
3428 ```
3429 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Addons/InstallAddonsPermission_Default
3430 ```
3431 Value (string):
3432 ```
3433 <enabled/>
3434 ```
3435 #### macOS
3436 ```
3437 <dict>
3438   <key>InstallAddonsPermission</key>
3439   <dict>
3440     <key>Allow</key>
3441     <array>
3442       <string>http://example.org</string>
3443       <string>http://example.edu</string>
3444     </array>
3445     <key>Default</key>
3446     <true/> | <false/>
3447   </dict>
3448 </dict>
3449 ```
3450 #### policies.json
3451 ```
3452 {
3453   "policies": {
3454     "InstallAddonsPermission": {
3455       "Allow": ["http://example.org/",
3456                 "http://example.edu/"],
3457       "Default": true | false
3458     }
3459   }
3460 }
3461 ```
3462 ### LegacyProfiles
3463 Disable the feature enforcing a separate profile for each installation.
3464
3465 If this policy set to true, Firefox will not try to create different profiles for installations of Firefox in different directories. This is the equivalent of the MOZ_LEGACY_PROFILES environment variable.
3466
3467 If this policy set to false, Firefox will create a new profile for each unique installation of Firefox.
3468
3469 This policy only work on Windows via GPO (not policies.json).
3470
3471 **Compatibility:** Firefox 70, Firefox ESR 68.2 (Windows only, GPO only)\
3472 **CCK2 Equivalent:** N/A\
3473 **Preferences Affected:** N/A
3474
3475 #### Windows (GPO)
3476 ```
3477 Software\Policies\Mozilla\Firefox\LegacyProfiles = = 0x1 | 0x0
3478 ```
3479 #### Windows (Intune)
3480 OMA-URI:
3481 ```
3482 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/LegacyProfiles
3483 ```
3484 Value (string):
3485 ```
3486 <enabled/> or <disabled/>
3487 ```
3488 ### LegacySameSiteCookieBehaviorEnabled
3489 Enable default legacy SameSite cookie behavior setting.
3490
3491 If this policy is set to true, it reverts all cookies to legacy SameSite behavior which means that cookies that don't explicitly specify a ```SameSite``` attribute are treated as if they were ```SameSite=None```.
3492
3493 **Compatibility:** Firefox 96\
3494 **CCK2 Equivalent:** N/A\
3495 **Preferences Affected:** `network.cookie.sameSite.laxByDefault`
3496
3497 #### Windows (GPO)
3498 ```
3499 Software\Policies\Mozilla\Firefox\LegacySameSiteCookieBehaviorEnabled = = 0x1 | 0x0
3500 ```
3501 #### Windows (Intune)
3502 OMA-URI:
3503 ```
3504 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/LegacySameSiteCookieBehaviorEnabled
3505 ```
3506 Value (string):
3507 ```
3508 <enabled/> or <disabled/>
3509 ```
3510 #### macOS
3511 ```
3512 <dict>
3513   <key>LegacySameSiteCookieBehaviorEnabled</key>
3514   <true/> | <false/>
3515 </dict>
3516 ```
3517 #### policies.json
3518 ```
3519 {
3520   "policies": {
3521     "LegacySameSiteCookieBehaviorEnabled": true | false
3522 }
3523 ```
3524 ### LegacySameSiteCookieBehaviorEnabledForDomainList
3525 Revert to legacy SameSite behavior for cookies on specified sites.
3526
3527 If this policy is set to true, cookies set for domains in this list will revert to legacy SameSite behavior which means that cookies that don't explicitly specify a ```SameSite``` attribute are treated as if they were ```SameSite=None```.
3528
3529 **Compatibility:** Firefox 96\
3530 **CCK2 Equivalent:** N/A\
3531 **Preferences Affected:** `network.cookie.sameSite.laxByDefault.disabledHosts`
3532
3533 #### Windows (GPO)
3534 ```
3535 Software\Policies\Mozilla\Firefox\LegacySameSiteCookieBehaviorEnabledForDomainList\1 = "example.org"
3536 Software\Policies\Mozilla\Firefox\LegacySameSiteCookieBehaviorEnabledForDomainList\2 = "example.edu"
3537 ```
3538 #### Windows (Intune)
3539 OMA-URI:
3540 ```
3541 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/LegacySameSiteCookieBehaviorEnabledForDomainList
3542 ```
3543 Value (string):
3544 ```
3545 <enabled/>
3546 <data id="LegacySameSiteCookieBehaviorEnabledForDomainList" value="1&#xF000;example.org&#xF000;2&#xF000;example.edu"/>
3547 ```
3548 #### macOS
3549 ```
3550 <dict>
3551   <key>LegacySameSiteCookieBehaviorEnabledForDomainList</key>
3552   <array>
3553     <string>example.org</string>
3554     <string>example.edu</string>
3555   </array>
3556 </dict>
3557 ```
3558 #### policies.json
3559 ```
3560 {
3561   "policies": {
3562     "LegacySameSiteCookieBehaviorEnabledForDomainList": ["example.org",
3563                                                          "example.edu"]
3564   }
3565 }
3566 ```
3567 ### LocalFileLinks
3568 Enable linking to local files by origin.
3569
3570 **Compatibility:** Firefox 68, Firefox ESR 68\
3571 **CCK2 Equivalent:** N/A\
3572 **Preferences Affected:** `capability.policy.localfilelinks.*`
3573
3574 #### Windows (GPO)
3575 ```
3576 Software\Policies\Mozilla\Firefox\LocalFileLinks\1 = "https://example.org"
3577 Software\Policies\Mozilla\Firefox\LocalFileLinks\2 = "https://example.edu"
3578 ```
3579 #### Windows (Intune)
3580 OMA-URI:
3581 ```
3582 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/LocalFileLinks
3583 ```
3584 Value (string):
3585 ```
3586 <enabled/>
3587 <data id="LocalFileLinks" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
3588 ```
3589 #### macOS
3590 ```
3591 <dict>
3592   <key>LocalFileLinks</key>
3593   <array>
3594     <string>http://example.org</string>
3595     <string>http://example.edu</string>
3596   </array>
3597 </dict>
3598 ```
3599 #### policies.json
3600 ```
3601 {
3602   "policies": {
3603     "LocalFileLinks": ["http://example.org/",
3604                        "http://example.edu/"]
3605   }
3606 }
3607 ```
3608 ### ManagedBookmarks
3609 Configures a list of bookmarks managed by an administrator that cannot be changed by the user.
3610
3611 The bookmarks are only added as a button on the personal toolbar. They are not in the bookmarks folder.
3612
3613 The syntax of this policy is exactly the same as the [Chrome ManagedBookmarks policy](https://cloud.google.com/docs/chrome-enterprise/policies/?policy=ManagedBookmarks). The schema is:
3614 ```
3615 {
3616  "items": {
3617   "id": "BookmarkType",
3618   "properties": {
3619    "children": {
3620     "items": {
3621      "$ref": "BookmarkType"
3622     },
3623     "type": "array"
3624    },
3625    "name": {
3626     "type": "string"
3627    },
3628    "toplevel_name": {
3629     "type": "string"
3630    },
3631    "url": {
3632     "type": "string"
3633    }
3634   },
3635   "type": "object"
3636  },
3637  "type": "array"
3638 }
3639 ```
3640 **Compatibility:** Firefox 83, Firefox ESR 78.5\
3641 **CCK2 Equivalent:** N/A\
3642 **Preferences Affected:** N/A
3643
3644 #### Windows (GPO)
3645 Software\Policies\Mozilla\Firefox\ManagedBookmarks (REG_MULTI_SZ) =
3646 ```
3647 [
3648   {
3649     "toplevel_name": "My managed bookmarks folder"
3650   },
3651   {
3652     "url": "example.com",
3653     "name": "Example"
3654   },
3655   {
3656     "name": "Mozilla links",
3657     "children": [
3658       {
3659         "url": "https://mozilla.org",
3660         "name": "Mozilla.org"
3661       },
3662       {
3663         "url": "https://support.mozilla.org/",
3664         "name": "SUMO"
3665       }
3666     ]
3667   }
3668 ]
3669 ```
3670 #### Windows (Intune)
3671 OMA-URI:
3672 ```
3673 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/ManagedBookmarks
3674 ```
3675 Value (string):
3676 ```
3677 <enabled/>
3678 <data id="JSON" value='
3679 [
3680   {
3681     "toplevel_name": "My managed bookmarks folder"
3682   },
3683   {
3684     "url": "example.com",
3685     "name": "Example"
3686   },
3687   {
3688     "name": "Mozilla links",
3689     "children": [
3690       {
3691         "url": "https://mozilla.org",
3692         "name": "Mozilla.org"
3693       },
3694       {
3695         "url": "https://support.mozilla.org/",
3696         "name": "SUMO"
3697       }
3698     ]
3699   }
3700 ]'/>
3701 ```
3702 #### macOS
3703 ```
3704 <dict>
3705   <key>ManagedBookmarks</key>
3706   <array>
3707     <dict>
3708       <key>toplevel_name</key>
3709       <string>My managed bookmarks folder</string>
3710       <dict>
3711         <key>url</key>
3712         <string>example.com</string>
3713         <key>name</key>
3714         <string>Example</string>
3715       </dict>
3716       <dict>
3717       <key>name</key>
3718       <string>Mozilla links</string>
3719       <key>children</key>
3720       <array>
3721         <dict>
3722           <key>url</key>
3723           <string>https://mozilla.org</string>
3724           <key>name</key>
3725           <string>Mozilla</string>
3726         </dict>
3727         <dict>
3728           <key>url</key>
3729           <string>https://support.mozilla.org/</string>
3730           <key>name</key>
3731           <string>SUMO</string>
3732         </dict>
3733       </array>
3734     </dict>
3735   </array>
3736 </dict>
3737 ```
3738 #### policies.json
3739 ```
3740 {
3741   "policies": {
3742     "ManagedBookmarks": [
3743       {
3744         "toplevel_name": "My managed bookmarks folder"
3745       },
3746       {
3747         "url": "example.com",
3748         "name": "Example"
3749       },
3750       {
3751         "name": "Mozilla links",
3752         "children": [
3753           {
3754             "url": "https://mozilla.org",
3755             "name": "Mozilla.org"
3756           },
3757           {
3758             "url": "https://support.mozilla.org/",
3759             "name": "SUMO"
3760           }
3761         ]
3762       }
3763     ]
3764   }
3765 }
3766 ```
3767 ### ManualAppUpdateOnly
3768
3769 Switch to manual updates only.
3770
3771 If this policy is enabled:
3772  1. The user will never be prompted to install updates
3773  2. Firefox will not check for updates in the background, though it will check automatically when an update UI is displayed (such as the one in the About dialog). This check will be used to show "Update to version X" in the UI, but will not automatically download the update or prompt the user to update in any other way.
3774  3. The update UI will work as expected, unlike when using DisableAppUpdate.
3775
3776 This policy is primarily intended for advanced end users, not for enterprises.
3777
3778 **Compatibility:** Firefox 87\
3779 **CCK2 Equivalent:** N/A\
3780 **Preferences Affected:** N/A
3781
3782 #### policies.json
3783 ```
3784 {
3785   "policies": {
3786     "ManualAppUpdateOnly": true | false
3787   }
3788 }
3789 ```
3790 ### NetworkPrediction
3791 Enable or disable network prediction (DNS prefetching).
3792
3793 **Compatibility:** Firefox 67, Firefox ESR 60.7\
3794 **CCK2 Equivalent:** N/A\
3795 **Preferences Affected:** `network.dns.disablePrefetch`, `network.dns.disablePrefetchFromHTTPS`
3796
3797 #### Windows (GPO)
3798 ```
3799 Software\Policies\Mozilla\Firefox\NetworkPrediction = 0x1 | 0x0
3800 ```
3801 #### Windows (Intune)
3802 OMA-URI:
3803 ```
3804 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NetworkPrediction
3805 ```
3806 Value (string):
3807 ```
3808 <enabled/> or <disabled/>
3809 ```
3810 #### macOS
3811 ```
3812 <dict>
3813   <key>NetworkPrediction</key>
3814   <true/> | <false/>
3815 </dict>
3816 ```
3817 #### policies.json
3818 ```
3819 {
3820   "policies": {
3821     "NetworkPrediction": true | false
3822 }
3823 ```
3824 ### NewTabPage
3825 Enable or disable the New Tab page.
3826
3827 **Compatibility:** Firefox 68, Firefox ESR 68\
3828 **CCK2 Equivalent:** N/A\
3829 **Preferences Affected:** `browser.newtabpage.enabled`
3830
3831 #### Windows (GPO)
3832 ```
3833 Software\Policies\Mozilla\Firefox\NewTabPage = 0x1 | 0x0
3834 ```
3835 #### Windows (Intune)
3836 OMA-URI:
3837 ```
3838 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NewTabPage
3839 ```
3840 Value (string):
3841 ```
3842 <enabled/> or <disabled/>
3843 ```
3844 #### macOS
3845 ```
3846 <dict>
3847   <key>NewTabPage</key>
3848   <true/> | <false/>
3849 </dict>
3850 ```
3851 #### policies.json
3852 ```
3853 {
3854   "policies": {
3855     "NewTabPage": true | false
3856 }
3857 ```
3858 ### NoDefaultBookmarks
3859 Disable the creation of default bookmarks.
3860
3861 This policy is only effective if the user profile has not been created yet.
3862
3863 **Compatibility:** Firefox 60, Firefox ESR 60\
3864 **CCK2 Equivalent:** `removeDefaultBookmarks`\
3865 **Preferences Affected:** N/A
3866
3867 #### Windows (GPO)
3868 ```
3869 Software\Policies\Mozilla\Firefox\NoDefaultBookmarks = 0x1 | 0x0
3870 ```
3871 #### Windows (Intune)
3872 OMA-URI:
3873 ```
3874 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NoDefaultBookmarks
3875 ```
3876 Value (string):
3877 ```
3878 <enabled/> or <disabled/>
3879 ```
3880 #### macOS
3881 ```
3882 <dict>
3883   <key>NoDefaultBookmarks</key>
3884   <true/> | <false/>
3885 </dict>
3886 ```
3887 #### policies.json
3888 ```
3889 {
3890   "policies": {
3891     "NoDefaultBookmarks": true | false
3892   }
3893 }
3894 ```
3895 ### OfferToSaveLogins
3896 Control whether or not Firefox offers to save passwords.
3897
3898 **Compatibility:** Firefox 60, Firefox ESR 60\
3899 **CCK2 Equivalent:** `dontRememberPasswords`\
3900 **Preferences Affected:** `signon.rememberSignons`
3901
3902 #### Windows (GPO)
3903 ```
3904 Software\Policies\Mozilla\Firefox\OfferToSaveLogins = 0x1 | 0x0
3905 ```
3906 #### Windows (Intune)
3907 OMA-URI:
3908 ```
3909 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OfferToSaveLogins
3910 ```
3911 Value (string):
3912 ```
3913 <enabled/> or <disabled/>
3914 ```
3915 #### macOS
3916 ```
3917 <dict>
3918   <key>OfferToSaveLogins</key>
3919   <true/> | <false/>
3920 </dict>
3921 ```
3922 #### policies.json
3923 ```
3924 {
3925   "policies": {
3926     "OfferToSaveLogins": true | false
3927   }
3928 }
3929 ```
3930 ### OfferToSaveLoginsDefault
3931 Sets the default value of signon.rememberSignons without locking it.
3932
3933 **Compatibility:** Firefox 70, Firefox ESR 60.2\
3934 **CCK2 Equivalent:** `dontRememberPasswords`\
3935 **Preferences Affected:** `signon.rememberSignons`
3936
3937 #### Windows (GPO)
3938 ```
3939 Software\Policies\Mozilla\Firefox\OfferToSaveLoginsDefault = 0x1 | 0x0
3940 ```
3941 #### Windows (Intune)
3942 OMA-URI:
3943 ```
3944 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OfferToSaveLoginsDefault
3945 ```
3946 Value (string):
3947 ```
3948 <enabled/> or <disabled/>
3949 ```
3950 #### macOS
3951 ```
3952 <dict>
3953   <key>OfferToSaveLoginsDefault</key>
3954   <true/> | <false/>
3955 </dict>
3956 ```
3957 #### policies.json
3958 ```
3959 {
3960   "policies": {
3961     "OfferToSaveLoginsDefault": true | false
3962   }
3963 }
3964 ```
3965 ### OverrideFirstRunPage
3966 Override the first run page. If the value is an empty string (""), the first run page is not displayed.
3967
3968 Starting with Firefox 83, Firefox ESR 78.5, you can also specify multiple URLS separated by a vertical bar (|).
3969
3970 **Compatibility:** Firefox 60, Firefox ESR 60\
3971 **CCK2 Equivalent:** `welcomePage`,`noWelcomePage`\
3972 **Preferences Affected:** `startup.homepage_welcome_url`
3973
3974 #### Windows (GPO)
3975 ```
3976 Software\Policies\Mozilla\Firefox\OverrideFirstRunPage = "http://example.org"
3977 ```
3978 #### Windows (Intune)
3979 OMA-URI:
3980 ```
3981 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OverrideFirstRunPage
3982 ```
3983 Value (string):
3984 ```
3985 <enabled/>
3986 <data id="OverridePage" value="https://example.com"/>
3987 ```
3988 #### macOS
3989 ```
3990 <dict>
3991   <key>OverrideFirstRunPage</key>
3992   <string>http://example.org</string>
3993 </dict>
3994 ```
3995 #### policies.json
3996 ```
3997 {
3998   "policies": {
3999     "OverrideFirstRunPage": "http://example.org"
4000   }
4001 }
4002 ```
4003 ### OverridePostUpdatePage
4004 Override the upgrade page. If the value is an empty string (""), no extra pages are displayed when Firefox is upgraded.
4005
4006 **Compatibility:** Firefox 60, Firefox ESR 60\
4007 **CCK2 Equivalent:** `upgradePage`,`noUpgradePage`\
4008 **Preferences Affected:** `startup.homepage_override_url`
4009
4010 #### Windows (GPO)
4011 ```
4012 Software\Policies\Mozilla\Firefox\OverridePostUpdatePage = "http://example.org"
4013 ```
4014 #### Windows (Intune)
4015 OMA-URI:
4016 ```
4017 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OverridePostUpdatePage
4018 ```
4019 Value (string):
4020 ```
4021 <enabled/>
4022 <data id="OverridePage" value="https://example.com"/>
4023 ```
4024 #### macOS
4025 ```
4026 <dict>
4027   <key>OverridePostUpdatePage</key>
4028   <string>http://example.org</string>
4029 </dict>
4030 ```
4031 #### policies.json
4032 ```
4033 {
4034   "policies": {
4035     "OverridePostUpdatePage": "http://example.org"
4036   }
4037 }
4038 ```
4039 ### PasswordManagerEnabled
4040 Remove access to the password manager via preferences and blocks about:logins on Firefox 70.
4041
4042 **Compatibility:** Firefox 70, Firefox ESR 60.2\
4043 **CCK2 Equivalent:** N/A\
4044 **Preferences Affected:** `pref.privacy.disable_button.view_passwords`
4045
4046 #### Windows (GPO)
4047 ```
4048 Software\Policies\Mozilla\Firefox\PasswordManagerEnabled = 0x1 | 0x0
4049 ```
4050 #### Windows (Intune)
4051 OMA-URI:
4052 ```
4053 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PasswordManagerEnabled
4054 ```
4055 Value (string):
4056 ```
4057 <enabled/> or <disabled/>
4058 ```
4059 #### macOS
4060 ```
4061 <dict>
4062   <key>PasswordManagerEnabled</key>
4063   <true/> | <false/>
4064 </dict>
4065 ```
4066 #### policies.json
4067 ```
4068 {
4069   "policies": {
4070     "PasswordManagerEnabled": true | false
4071   }
4072 }
4073 ```
4074 ### PasswordManagerExceptions
4075 Prevent Firefox from saving passwords for specific sites.
4076
4077 The sites are specified as a list of origins.
4078
4079 **Compatibility:** Firefox 101\
4080 **CCK2 Equivalent:** N/A\
4081 **Preferences Affected:** N/A
4082
4083 #### Windows (GPO)
4084 ```
4085 Software\Policies\Mozilla\Firefox\PasswordManagerExceptions\1 = "https://example.org"
4086 Software\Policies\Mozilla\Firefox\PasswordManagerExceptions\2 = "https://example.edu"
4087 ```
4088 #### Windows (Intune)
4089 OMA-URI:
4090 ```
4091 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PasswordManagerExceptions
4092 ```
4093 Value (string):
4094 ```
4095 <enabled/>
4096 <data id="List" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
4097 ```
4098 #### macOS
4099 ```
4100 <dict>
4101   <key>PasswordManagerExceptions</key>
4102   <array>
4103     <string>https://example.org</string>
4104     <string>https://example.edu</string>
4105   </array>
4106 </dict>
4107 ```
4108 #### policies.json
4109 ```
4110 {
4111   "policies": {
4112     "PasswordManagerExceptions": ["https://example.org",
4113                                   "https://example.edu"]
4114   }
4115 }
4116 ```
4117
4118 ### PDFjs
4119 Disable or configure PDF.js, the built-in PDF viewer.
4120
4121 If `Enabled` is set to false, the built-in PDF viewer is disabled.
4122
4123 If `EnablePermissions` is set to true, the built-in PDF viewer will honor document permissions like preventing the copying of text.
4124
4125 Note: DisableBuiltinPDFViewer has not been deprecated. You can either continue to use it, or switch to using PDFjs->Enabled to disable the built-in PDF viewer. This new permission was added because we needed a place for PDFjs->EnabledPermissions.
4126
4127 **Compatibility:** Firefox 77, Firefox ESR 68.9\
4128 **CCK2 Equivalent:** N/A\
4129 **Preferences Affected:** `pdfjs.diabled`, `pdfjs.enablePermissions`
4130
4131 #### Windows (GPO)
4132 ```
4133 Software\Policies\Mozilla\Firefox\PDFjs\Enabled = 0x1 | 0x0
4134 Software\Policies\Mozilla\Firefox\PDFjs\EnablePermissions = 0x1 | 0x0
4135 ```
4136 #### Windows (Intune)
4137 OMA-URI:
4138 ```
4139 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PDFjs/PDFjs_Enabled
4140 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PDFjs/PDFjs_EnablePermissions
4141 ```
4142 Value (string):
4143 ```
4144 <enabled/>or <disabled/>
4145 ```
4146 #### macOS
4147 ```
4148 <dict>
4149   <key>PDFjs</key>
4150   <dict>
4151     <key>Enabled</key>
4152     <true/> | <false/>
4153     <key>EnablePermissions</key>
4154     <true/> | <false/>
4155   </dict>
4156 </dict>
4157 ```
4158 #### policies.json
4159 ```
4160 {
4161   "policies": {
4162     "PDFjs": {
4163       "Enabled": true | false,
4164       "EnablePermissions": true | false
4165     }
4166   }
4167 }
4168 ```
4169 ### Permissions
4170 Set permissions associated with camera, microphone, location, notifications, autoplay, and virtual reality. Because these are origins, not domains, entries with unique ports must be specified separately. This explicitly means that it is not possible to add wildcards. See examples below.
4171
4172 `Allow` is a list of origins where the feature is allowed.
4173
4174 `Block` is a list of origins where the feature is not allowed.
4175
4176 `BlockNewRequests` determines whether or not new requests can be made for the feature.
4177
4178 `Locked` prevents the user from changing preferences for the feature.
4179
4180 `Default` specifies the default value for Autoplay. block-audio-video is not supported on Firefox ESR 68.
4181
4182 **Compatibility:** Firefox 62, Firefox ESR 60.2 (Autoplay added in Firefox 74, Firefox ESR 68.6, Autoplay Default/Locked added in Firefox 76, Firefox ESR 68.8, VirtualReality added in Firefox 80, Firefox ESR 78.2)\
4183 **CCK2 Equivalent:** N/A\
4184 **Preferences Affected:** `permissions.default.camera`, `permissions.default.microphone`, `permissions.default.geo`, `permissions.default.desktop-notification`, `media.autoplay.default`, `permissions.default.xr`
4185
4186 #### Windows (GPO)
4187 ```
4188 Software\Policies\Mozilla\Firefox\Permissions\Camera\Allow\1 = "https://example.org"
4189 Software\Policies\Mozilla\Firefox\Permissions\Camera\Allow\2 = "https://example.org:1234"
4190 Software\Policies\Mozilla\Firefox\Permissions\Camera\Block\1 = "https://example.edu"
4191 Software\Policies\Mozilla\Firefox\Permissions\Camera\BlockNewRequests = 0x1 | 0x0
4192 Software\Policies\Mozilla\Firefox\Permissions\Camera\Locked = 0x1 | 0x0
4193 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Allow\1 = "https://example.org"
4194 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Block\1 = "https://example.edu"
4195 Software\Policies\Mozilla\Firefox\Permissions\Microphone\BlockNewRequests = 0x1 | 0x0
4196 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Locked = 0x1 | 0x0
4197 Software\Policies\Mozilla\Firefox\Permissions\Location\Allow\1 = "https://example.org"
4198 Software\Policies\Mozilla\Firefox\Permissions\Location\Block\1 = "https://example.edu"
4199 Software\Policies\Mozilla\Firefox\Permissions\Location\BlockNewRequests = 0x1 | 0x0
4200 Software\Policies\Mozilla\Firefox\Permissions\Location\Locked = 0x1 | 0x0
4201 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Allow\1 = "https://example.org"
4202 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Block\1 = "https://example.edu"
4203 Software\Policies\Mozilla\Firefox\Permissions\Notifications\BlockNewRequests = 0x1 | 0x0
4204 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Locked = 0x1 | 0x0
4205 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Allow\1 = "https://example.org"
4206 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Block\1 = "https://example.edu"
4207 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Default = "allow-audio-video" | "block-audio" | "block-audio-video"
4208 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Locked = 0x1 | 0x0
4209 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\Allow\1 = "https://example.org"
4210 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\Block\1 = "https://example.edu"
4211 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\BlockNewRequests = 0x1 | 0x0
4212 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\Locked = 0x1 | 0x0
4213 ```
4214 #### Windows (Intune)
4215 OMA-URI:
4216 ```
4217 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Location/Location_BlockNewRequests
4218 ```
4219 Value (string):
4220 ```
4221 <enabled/> or <disabled/>
4222 ```
4223 OMA-URI:
4224 ```
4225 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Location/Location_Locked
4226 ```
4227 Value (string):
4228 ```
4229 <enabled/> or <disabled/>
4230 ```
4231 OMA-URI:
4232 ```
4233 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_Allow
4234 ```
4235 Value (string):
4236 ```
4237 <enabled/>
4238 <data id="Permissions" value="1&#xF000;https://example.org"/>
4239 ```
4240 OMA-URI:
4241 ```
4242 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_BlockNewRequests
4243 ```
4244 Value (string):
4245 ```
4246 <enabled/> or <disabled/>
4247 ```
4248 OMA-URI:
4249 ```
4250 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_Locked
4251 ```
4252 Value (string):
4253 ```
4254 <enabled/> or <disabled/>
4255 ```
4256 OMA-URI:
4257 ```
4258 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Allow
4259 ```
4260 Value (string):
4261 ```
4262 <enabled/>
4263 <data id="Permissions" value="1&#xF000;https://example.org"/>
4264 ```
4265 OMA-URI:
4266 ```
4267 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Block
4268 ```
4269 Value (string):
4270 ```
4271 <enabled/>
4272 <data id="Permissions" value="1&#xF000;https://example.edu"/>
4273 ```
4274 OMA-URI:
4275 ```
4276 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Default
4277 ```
4278 Value (string):
4279 ```
4280 <enabled/>
4281 <data id="Autoplay_Default" value="allow-audio-video | block-audio | block-audio-video"/>
4282 ```
4283 OMA-URI:
4284 ```
4285 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Locked
4286 ```
4287 Value (string):
4288 ```
4289 <enabled/> or <disabled/>
4290 ```
4291 OMA-URI:
4292 ```
4293 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_Allow
4294 ```
4295 Value (string):
4296 ```
4297 <enabled/>
4298 <data id="Permissions" value="1&#xF000;https://example.org"/>
4299 ```
4300 OMA-URI:
4301 ```
4302 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_Block
4303 ```
4304 Value (string):
4305 ```
4306 <enabled/>
4307 <data id="Permissions" value="1&#xF000;https://example.edu"/>
4308 ```
4309 OMA-URI:
4310 ```
4311 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_BlockNewRequests
4312 ```
4313 Value (string):
4314 ```
4315 <enabled/> or <disabled/>
4316 ```
4317 OMA-URI:
4318 ```
4319 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_Locked
4320 ```
4321 Value (string):
4322 ```
4323 <enabled/> or <disabled/>
4324 ```
4325 #### macOS
4326 ```
4327 <dict>
4328   <key>Permissions</key>
4329   <dict>
4330     <key>Camera</key>
4331     <dict>
4332       <key>Allow</key>
4333       <array>
4334         <string>https://example.org</string>
4335         <string>https://example.org:1234</string>
4336       </array>
4337       <key>Block</key>
4338       <array>
4339         <string>https://example.edu</string>
4340       </array>
4341       <key>BlockNewRequests</key>
4342       <true/> | <false/>
4343       <key>Locked</key>
4344       <true/> | <false/>
4345     </dict>
4346     <key>Microphone</key>
4347     <dict>
4348       <key>Allow</key>
4349       <array>
4350         <string>https://example.org</string>
4351       </array>
4352       <key>Block</key>
4353       <array>
4354         <string>https://example.edu</string>
4355       </array>
4356       <key>BlockNewRequests</key>
4357       <true/> | <false/>
4358       <key>Locked</key>
4359       <true/> | <false/>
4360     </dict>
4361     <key>Location</key>
4362     <dict>
4363       <key>Allow</key>
4364       <array>
4365         <string>https://example.org</string>
4366       </array>
4367       <key>Block</key>
4368       <array>
4369         <string>https://example.edu</string>
4370       </array>
4371       <key>BlockNewRequests</key>
4372       <true/> | <false/>
4373       <key>Locked</key>
4374       <true/> | <false/>
4375     </dict>
4376     <key>Notifications</key>
4377     <dict>
4378       <key>Allow</key>
4379       <array>
4380         <string>https://example.org</string>
4381       </array>
4382       <key>Block</key>
4383       <array>
4384         <string>https://example.edu</string>
4385       </array>
4386       <key>BlockNewRequests</key>
4387       <true/>
4388       <key>Locked</key>
4389       <true/>
4390     </dict>
4391     <key>Autoplay</key>
4392     <dict>
4393       <key>Allow</key>
4394       <array>
4395         <string>https://example.org</string>
4396       </array>
4397       <key>Block</key>
4398       <array>
4399         <string>https://example.edu</string>
4400       </array>
4401       <key>Default</key>
4402       <string>allow-audio-video | block-audio | block-audio-video</string>
4403       <key>Locked</key>
4404       <true/> | <false/>
4405     </dict>
4406   </dict>
4407 </dict>
4408 ```
4409 #### policies.json
4410 ```
4411 {
4412   "policies": {
4413     "Permissions": {
4414       "Camera": {
4415         "Allow": ["https://example.org","https://example.org:1234"],
4416         "Block": ["https://example.edu"],
4417         "BlockNewRequests": true | false,
4418         "Locked": true | false
4419       },
4420       "Microphone": {
4421         "Allow": ["https://example.org"],
4422         "Block": ["https://example.edu"],
4423         "BlockNewRequests": true | false,
4424         "Locked": true | false
4425       },
4426       "Location": {
4427         "Allow": ["https://example.org"],
4428         "Block": ["https://example.edu"],
4429         "BlockNewRequests": true | false,
4430         "Locked": true | false
4431       },
4432       "Notifications": {
4433         "Allow": ["https://example.org"],
4434         "Block": ["https://example.edu"],
4435         "BlockNewRequests": true | false,
4436         "Locked": true | false
4437       },
4438       "Autoplay": {
4439         "Allow": ["https://example.org"],
4440         "Block": ["https://example.edu"],
4441         "Default": "allow-audio-video" | "block-audio" | "block-audio-video",
4442         "Locked": true | false
4443       }
4444     }
4445   }
4446 }
4447 ```
4448 ### PictureInPicture
4449
4450 Enable or disable Picture-in-Picture as well as prevent the user from enabling or disabling it (Locked).
4451
4452 **Compatibility:** Firefox 78, Firefox ESR 78\
4453 **CCK2 Equivalent:** N/A\
4454 **Preferences Affected:** `media.videocontrols.picture-in-picture.video-toggle.enabled`
4455
4456 #### Windows (GPO)
4457 ```
4458 Software\Policies\Mozilla\Firefox\PictureInPicture\Enabled = 0x1 | 0x0
4459 Software\Policies\Mozilla\Firefox\PictureInPicture\Locked = 0x1 | 0x0
4460
4461 ```
4462 #### Windows (Intune)
4463 OMA-URI:
4464 ```
4465 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PictureInPicture/PictureInPicture_Enabled
4466 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PictureInPicture/PictureInPicture_Locked
4467 ```
4468 Value (string):
4469 ```
4470 <enabled/> or <disabled/>
4471 ```
4472 #### macOS
4473 ```
4474 <dict>
4475   <key>PictureInPicture</key>
4476   <dict>
4477     <key>Enabled</key>
4478     <true/> | <false/>
4479     <key>Locked</key>
4480     <true/> | <false/>
4481   </dict>
4482 </dict>
4483 ```
4484 #### policies.json
4485 ```
4486 {
4487   "policies": {
4488     "PictureInPicture": {
4489       "Enabled": true | false,
4490       "Locked": true | false
4491     }
4492   }
4493 }
4494 ```
4495 ### PopupBlocking
4496 Configure the default pop-up window policy as well as origins for which pop-up windows are allowed.
4497
4498 `Allow` is a list of origins where popup-windows are allowed.
4499
4500 `Default` determines whether or not pop-up windows are allowed by default.
4501
4502 `Locked` prevents the user from changing pop-up preferences.
4503
4504 **Compatibility:** Firefox 60, Firefox ESR 60\
4505 **CCK2 Equivalent:** `permissions.popup`\
4506 **Preferences Affected:** `dom.disable_open_during_load`
4507
4508 #### Windows (GPO)
4509 ```
4510 Software\Policies\Mozilla\Firefox\PopupBlocking\Allow\1 = "https://example.org"
4511 Software\Policies\Mozilla\Firefox\PopupBlocking\Allow\2 = "https://example.edu"
4512 Software\Policies\Mozilla\Firefox\PopupBlocking\Default = 0x1 | 0x0
4513 Software\Policies\Mozilla\Firefox\PopupBlocking\Locked = 0x1 | 0x0
4514 ```
4515 #### Windows (Intune)
4516 OMA-URI:
4517 ```
4518 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Allow
4519 ```
4520 Value (string):
4521 ```
4522 <enabled/>
4523 <data id="Permissions" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
4524 ```
4525 OMA-URI:
4526 ```
4527 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Default
4528 ```
4529 Value (string):
4530 ```
4531 <enabled/> or <disabled/>
4532 ```
4533 OMA-URI:
4534 ```
4535 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Locked
4536 ```
4537 Value (string):
4538 ```
4539 <enabled/> or <disabled/>
4540 ```
4541 #### macOS
4542 ```
4543 <dict>
4544   <key>PopupBlocking</key>
4545   <dict>
4546     <key>Allow</key>
4547     <array>
4548       <string>http://example.org</string>
4549       <string>http://example.edu</string>
4550     </array>
4551     <key>Default</key>
4552     <true/> | <false/>
4553     <key>Locked</key>
4554     <true/> | <false/>
4555   </dict>
4556 </dict>
4557 ```
4558 #### policies.json
4559 ```
4560 {
4561   "policies": {
4562     "PopupBlocking": {
4563       "Allow": ["http://example.org/",
4564                 "http://example.edu/"],
4565       "Default": true | false,
4566       "Locked": true | false
4567     }
4568   }
4569 }
4570 ```
4571 ### Preferences
4572 Set and lock preferences.
4573
4574 **NOTE** On Windows, in order to use this policy, you must clear all settings in the old **Preferences (Deprecated)** section in group policy.
4575
4576 Previously you could only set and lock a subset of preferences. Starting with Firefox 81 and Firefox ESR 78.3 you can set many more preferences. You can also set default preferences, user preferences and you can clear preferences.
4577
4578 Preferences that start with the following prefixes are supported:
4579 ```
4580 accessibility.
4581 app.update.* (Firefox 86, Firefox 78.8)
4582 browser.
4583 datareporting.policy.
4584 dom.
4585 extensions.
4586 general.autoScroll (Firefox 83, Firefox ESR 78.5)
4587 general.smoothScroll (Firefox 83, Firefox ESR 78.5)
4588 geo.
4589 gfx.
4590 intl.
4591 keyword.enabled (Firefox 95, Firefox ESR 91.4)
4592 layers.
4593 layout.
4594 media.
4595 network.
4596 pdfjs. (Firefox 84, Firefox ESR 78.6)
4597 places.
4598 print.
4599 signon. (Firefox 83, Firefox ESR 78.5)
4600 spellchecker. (Firefox 84, Firefox ESR 78.6)
4601 toolkit.legacyUserProfileCustomizations.stylesheets (Firefox 95, Firefox ESR 91.4)
4602 ui.
4603 widget.
4604 xpinstall.signatures.required (Firefox ESR 102.10, Firefox ESR only)
4605 xpinstall.whitelist.required (Firefox 118, Firefox ESR 115.3)
4606 ```
4607 as well as the following security preferences:
4608
4609 | Preference | Type | Default
4610 | --- | --- | --- |
4611 | security.default_personal_cert | string | Ask Every Time
4612 | &nbsp;&nbsp;&nbsp;&nbsp;If set to Select Automatically, Firefox automatically chooses the default personal certificate.
4613 | security.insecure_connection_text.enabled | bool | false
4614 | &nbsp;&nbsp;&nbsp;&nbsp;If set to true, adds the words "Not Secure" for insecure sites.
4615 | security.insecure_connection_text.pbmode.enabled | bool | false
4616 | &nbsp;&nbsp;&nbsp;&nbsp;If set to true, adds the words "Not Secure" for insecure sites in private browsing.
4617 | security.mixed_content.block_active_content | boolean | true
4618 | &nbsp;&nbsp;&nbsp;&nbsp;If false, mixed active content (HTTP and HTTPS) is not blocked.
4619 | security.osclientcerts.autoload | boolean | false
4620 | &nbsp;&nbsp;&nbsp;&nbsp;If true, client certificates are loaded from the operating system certificate store.
4621 | security.OCSP.enabled | integer | 1
4622 | &nbsp;&nbsp;&nbsp;&nbsp;If 0, do not fetch OCSP. If 1, fetch OCSP for DV and EV certificates. If 2, fetch OCSP only for EV certificates.
4623 | security.OCSP.require | boolean | false
4624 | &nbsp;&nbsp;&nbsp;&nbsp; If true, if an OCSP request times out, the connection fails.
4625 | security.osclientcerts.assume_rsa_pss_support | boolean | true
4626 | &nbsp;&nbsp;&nbsp;&nbsp; If false, we don't assume an RSA key can do RSA-PSS. (Firefox 114, Firefox ESR 102.12)
4627 | security.ssl.enable_ocsp_stapling | boolean | true
4628 | &nbsp;&nbsp;&nbsp;&nbsp; If false, OCSP stapling is not enabled.
4629 | security.ssl.errorReporting.enabled | boolean | true
4630 | &nbsp;&nbsp;&nbsp;&nbsp;If false, SSL errors cannot be sent to Mozilla.
4631 | security.ssl.require_safe_negotiation | boolean | false
4632 | &nbsp;&nbsp;&nbsp;&nbsp;If true, Firefox will only negotiate TLS connections with servers that indicate they support secure renegotiation. (Firefox 118, Firefox ESR 115.3)
4633 | security.tls.enable_0rtt_data | boolean | true
4634 | &nbsp;&nbsp;&nbsp;&nbsp;If false, TLS early data is turned off. (Firefox 93, Firefox 91.2, Firefox 78.15)
4635 | security.tls.hello_downgrade_check | boolean | true
4636 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the TLS 1.3 downgrade check is disabled.
4637 | security.tls.version.enable-deprecated | boolean | false
4638 | &nbsp;&nbsp;&nbsp;&nbsp;If true, browser will accept TLS 1.0. and TLS 1.1. (Firefox 86, Firefox 78.8)
4639 | security.warn_submit_secure_to_insecure | boolean | true
4640 | &nbsp;&nbsp;&nbsp;&nbsp;If false, no warning is shown when submitting a form from https to http.
4641
4642 Using the preference as the key, set the `Value` to the corresponding preference value.
4643
4644 `Status` can be "default", "locked", "user" or "clear"
4645
4646 * `"default"`: Read/Write: Settings appear as default even if factory default differs.
4647 * `"locked"`: Read-Only: Settings appear as default even if factory default differs.
4648 * `"user"`: Read/Write: Settings appear as changed if it differs from factory default.
4649 * `"clear"`: Read/Write: `Value` has no effect. Resets to factory defaults on each startup.
4650
4651 `"user"` preferences persist across invocations of Firefox. It is the equivalent of a user setting the preference. They are most useful when a preference is needed very early in startup so it can't be set as default by policy. An example of this is ```toolkit.legacyUserProfileCustomizations.stylesheets```.
4652
4653 `"user"` preferences persist even if the policy is removed, so if you need to remove them, you should use the clear policy.
4654
4655 See the examples below for more detail.
4656
4657 IMPORTANT: Make sure you're only setting a particular preference using this mechanism and not some other way.
4658
4659 Status
4660 **Compatibility:** Firefox 81, Firefox ESR 78.3\
4661 **CCK2 Equivalent:** `preferences`\
4662 **Preferences Affected:** Many
4663
4664 #### Windows (GPO)
4665 Software\Policies\Mozilla\Firefox\Preferences (REG_MULTI_SZ) =
4666 ```
4667 {
4668   "accessibility.force_disabled": {
4669     "Value": 1,
4670     "Status": "default"
4671   },
4672   "browser.cache.disk.parent_directory": {
4673     "Value": "SOME_NATIVE_PATH",
4674     "Status": "user"
4675   },
4676   "browser.tabs.warnOnClose": {
4677     "Value": false,
4678     "Status": "locked"
4679   }
4680 }
4681 ```
4682 #### Windows (Intune)
4683 OMA-URI:
4684 ```
4685 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Preferences
4686 ```
4687 Value (string):
4688 ```
4689 <enabled/>
4690 <data id="JSON" value='
4691 {
4692   "accessibility.force_disabled": {
4693     "Value": 1,
4694     "Status": "default"
4695   },
4696   "browser.cache.disk.parent_directory": {
4697     "Value": "SOME_NATIVE_PATH",
4698     "Status": "user"
4699   },
4700   "browser.tabs.warnOnClose": {
4701     "Value": false,
4702     "Status": "locked"
4703   }
4704 }'/>
4705 ```
4706 #### macOS
4707 ```
4708 <dict>
4709   <key>Preferences</key>
4710   <dict>
4711     <key>accessibility.force_disabled</key>
4712     <dict>
4713       <key>Value</key>
4714       <integer>1</integer>
4715       <key>Status</key>
4716       <string>default</string>
4717     </dict>
4718     <key>browser.cache.disk.parent_directory</key>
4719     <dict>
4720       <key>Value</key>
4721       <string>SOME_NATIVE_PATH</string>
4722       <key>Status</key>
4723       <string>user</string>
4724     </dict>
4725     <key>browser.tabs.warnOnClose</key>
4726     <dict>
4727       <key>Value</key>
4728       <false/>
4729       <key>Status</key>
4730       <string>locked</string>
4731     </dict>
4732   </dict>
4733 </dict>
4734 ```
4735 #### policies.json
4736 ```
4737 {
4738   "policies": {
4739     "Preferences": {
4740       "accessibility.force_disabled": {
4741         "Value": 1,
4742         "Status": "default"
4743       },
4744       "browser.cache.disk.parent_directory": {
4745         "Value": "SOME_NATIVE_PATH",
4746         "Status": "user"
4747       },
4748       "browser.tabs.warnOnClose": {
4749         "Value": false,
4750         "Status": "locked"
4751       }
4752     }
4753   }
4754 }
4755 ```
4756 ### PrimaryPassword
4757 Require or prevent using a primary (formerly master) password.
4758
4759 If this value is true, a primary password is required. If this value is false, it works the same as if [`DisableMasterPasswordCreation`](#disablemasterpasswordcreation) was true and removes the primary password functionality.
4760
4761 If both DisableMasterPasswordCreation and PrimaryPassword are used, DisableMasterPasswordCreation takes precedent.
4762
4763 **Compatibility:** Firefox 79, Firefox ESR 78.1\
4764 **CCK2 Equivalent:** `noMasterPassword`\
4765 **Preferences Affected:** N/A
4766
4767 #### Windows (GPO)
4768 ```
4769 Software\Policies\Mozilla\Firefox\PrimaryPassword = 0x1 | 0x0
4770 ```
4771 #### Windows (Intune)
4772 OMA-URI:
4773 ```
4774 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PrimaryPassword
4775 ```
4776 Value (string):
4777 ```
4778 <enabled/> or <disabled/>
4779 ```
4780 #### macOS
4781 ```
4782 <dict>
4783   <key>PrimaryPassword</key>
4784   <true/> | <false/>
4785 </dict>
4786 ```
4787 #### policies.json
4788 ```
4789 {
4790   "policies": {
4791     "PrimaryPassword": true | false
4792   }
4793 }
4794 ```
4795 ### PromptForDownloadLocation
4796 Ask where to save each file before downloading.
4797
4798 **Compatibility:** Firefox 68, Firefox ESR 68\
4799 **CCK2 Equivalent:** N/A\
4800 **Preferences Affected:** `browser.download.useDownloadDir`
4801
4802 #### Windows (GPO)
4803 ```
4804 Software\Policies\Mozilla\Firefox\PromptForDownloadLocation = 0x1 | 0x0
4805 ```
4806 #### Windows (Intune)
4807 OMA-URI:
4808 ```
4809 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PromptForDownloadLocation
4810 ```
4811 Value (string):
4812 ```
4813 <enabled/> or <disabled/>
4814 ```
4815 #### macOS
4816 ```
4817 <dict>
4818   <key>PromptForDownloadLocation</key>
4819   <true/> | <false/>
4820 </dict>
4821 ```
4822 #### policies.json
4823 ```
4824 {
4825   "policies": {
4826     "PromptForDownloadLocation": true | false
4827   }
4828 }
4829 ```
4830 ### Proxy
4831 Configure proxy settings. These settings correspond to the connection settings in Firefox preferences.
4832 To specify ports, append them to the hostnames with a colon (:).
4833
4834 Unless you lock this policy, changes the user already has in place will take effect.
4835
4836 `Mode` is the proxy method being used.
4837
4838 `Locked` is whether or not proxy settings can be changed.
4839
4840 `HTTPProxy` is the HTTP proxy server.
4841
4842 `UseHTTPProxyForAllProtocols` is whether or not the HTTP proxy should be used for all other proxies.
4843
4844 `SSLProxy` is the SSL proxy server.
4845
4846 `FTPProxy` is the FTP proxy server.
4847
4848 `SOCKSProxy` is the SOCKS proxy server
4849
4850 `SOCKSVersion` is the SOCKS version (4 or 5)
4851
4852 `Passthrough` is list of hostnames or IP addresses that will not be proxied. Use `<local>` to bypass proxying for all hostnames which do not contain periods.
4853
4854 `AutoConfigURL` is a  URL for proxy configuration (only used if Mode is autoConfig).
4855
4856 `AutoLogin` means do not prompt for authentication if password is saved.
4857
4858 `UseProxyForDNS` to use proxy DNS when using SOCKS v5.
4859
4860 **Compatibility:** Firefox 60, Firefox ESR 60\
4861 **CCK2 Equivalent:** `networkProxy*`\
4862 **Preferences Affected:** `network.proxy.type`, `network.proxy.autoconfig_url`, `network.proxy.socks_remote_dns`, `signon.autologin.proxy`, `network.proxy.socks_version`, `network.proxy.no_proxies_on`, `network.proxy.share_proxy_settings`, `network.proxy.http`, `network.proxy.http_port`, `network.proxy.ftp`, `network.proxy.ftp_port`, `network.proxy.ssl`, `network.proxy.ssl_port`, `network.proxy.socks`, `network.proxy.socks_port`
4863
4864 #### Windows (GPO)
4865 ```
4866 Software\Policies\Mozilla\Firefox\Proxy\Mode = "none" | "system" | "manual" | "autoDetect" | "autoConfig"
4867 Software\Policies\Mozilla\Firefox\Proxy\Locked = 0x1 | 0x0
4868 Software\Policies\Mozilla\Firefox\Proxy\HTTPProxy = https://httpproxy.example.com
4869 Software\Policies\Mozilla\Firefox\Proxy\UseHTTPProxyForAllProtocols = 0x1 | 0x0
4870 Software\Policies\Mozilla\Firefox\Proxy\SSLProxy = https://sslproxy.example.com
4871 Software\Policies\Mozilla\Firefox\Proxy\FTPProxy = https://ftpproxy.example.com
4872 Software\Policies\Mozilla\Firefox\Proxy\SOCKSProxy = https://socksproxy.example.com
4873 Software\Policies\Mozilla\Firefox\Proxy\SOCKSVersion = 0x4 | 0x5
4874 Software\Policies\Mozilla\Firefox\Proxy\Passthrough = <local>
4875 Software\Policies\Mozilla\Firefox\Proxy\AutoConfigURL = URL_TO_AUTOCONFIG
4876 Software\Policies\Mozilla\Firefox\Proxy\AutoLogin = 0x1 | 0x0
4877 Software\Policies\Mozilla\Firefox\Proxy\UseProxyForDNS = 0x1 | 0x0
4878 ```
4879 #### Windows (Intune)
4880 **Note**
4881 These setttings were moved to a category to make them easier to configure via Intune.
4882
4883 OMA-URI:
4884 ```
4885 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ProxySettings/Proxy_Locked
4886 ```
4887 Value (string):
4888 ```
4889 <enabled/> or <disabled/>
4890 ```
4891 OMA-URI:
4892 ```
4893 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ProxySettings/Proxy_ConnectionType
4894 ```
4895 Value (string):
4896 ```
4897 <enabled/>
4898 <data id="Proxy_ConnectionType" value="none | system | manual | autoDetect | autoConfig"/>
4899 ```
4900 OMA-URI:
4901 ```
4902 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ProxySettings/Proxy_HTTPProxy
4903 ```
4904 Value (string):
4905 ```
4906 <enabled/>
4907 <data id="Proxy_HTTPProxy" value="httpproxy.example.com"/>
4908 ```
4909 OMA-URI:
4910 ```
4911 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ProxySettings/Proxy_UseHTTPProxyForAllProtocols
4912 ```
4913 Value (string):
4914 ```
4915 <enabled/> or <disabled/>
4916 ```
4917 OMA-URI:
4918 ```
4919 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ProxySettings/Proxy_SSLProxy
4920 ```
4921 Value (string):
4922 ```
4923 <enabled/>
4924 <data id="Proxy_SSLProxy" value="sslproxy.example.com"/>
4925 ```
4926 OMA-URI:
4927 ```
4928 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ProxySettings/Proxy_SOCKSProxy
4929 ```
4930 Value (string):
4931 ```
4932 <enabled/>
4933 <data id="Proxy_SOCKSProxy" value="socksproxy.example.com"/>
4934 <data id="Proxy_SOCKSVersion" value="4 | 5"/>
4935 ```
4936 OMA-URI:
4937 ```
4938 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ProxySettings/Proxy_AutoConfigURL
4939 ```
4940 Value (string):
4941 ```
4942 <enabled/>
4943 <data id="Proxy_AutoConfigURL" value="URL_TO_AUTOCONFIG"/>
4944 ```
4945 OMA-URI:
4946 ```
4947 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ProxySettings/Proxy_Passthrough
4948 ```
4949 Value (string):
4950 ```
4951 <enabled/>
4952 <data id="Proxy_Passthrough" value="&lt;local&gt;"/>
4953 ```
4954 OMA-URI:
4955 ```
4956 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ProxySettings/Proxy_AutoLogin
4957 ```
4958 Value (string):
4959 ```
4960 <enabled/> or <disabled/>
4961 ```
4962 OMA-URI:
4963 ```
4964 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ProxySettings/Proxy_UseProxyForDNS
4965 ```
4966 Value (string):
4967 ```
4968 <enabled/> or <disabled/>
4969 ```
4970 OMA-URI (Old way):
4971 ```
4972 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Proxy
4973 ```
4974 Value (string):
4975 ```
4976 <enabled/>
4977 <data id="ProxyLocked" value="true | false"/>
4978 <data id="ConnectionType" value="none | system | manual | autoDetect | autoConfig"/>
4979 <data id="HTTPProxy" value="httpproxy.example.com"/>
4980 <data id="UseHTTPProxyForAllProtocols" value="true | false"/>
4981 <data id="SSLProxy" value="sslproxy.example.com"/>
4982 <data id="FTPProxy" value="ftpproxy.example.com"/>
4983 <data id="SOCKSProxy" value="socksproxy.example.com"/>
4984 <data id="SOCKSVersion" value="4 | 5"/>
4985 <data id="AutoConfigURL" value="URL_TO_AUTOCONFIG"/>
4986 <data id="Passthrough" value="<local>"/>
4987 <data id="AutoLogin" value="true | false"/>
4988 <data id="UseProxyForDNS" value="true | false"/>
4989 ```
4990 #### macOS
4991 ```
4992 <dict>
4993   <key>Proxy</key>
4994   <dict>
4995     <key>Mode</key>
4996     <string>none | system | manual | autoDetect | autoConfig</string>
4997     <key>Locked</key>
4998     <true> | </false>
4999     <key>HTTPProxy</key>
5000     <string>https://httpproxy.example.com</string>
5001     <key>UseHTTPProxyForAllProtocols</key>
5002     <true> | </false>
5003     <key>SSLProxy</key>
5004     <string>https://sslproxy.example.com</string>
5005     <key>FTPProxy</key>
5006     <string>https://ftpproxy.example.com</string>
5007     <key>SOCKSProxy</key>
5008     <string>https://socksproxy.example.com</string>
5009     <key>SOCKSVersion</key>
5010     <string>4 | 5</string>
5011     <key>Passthrough</key>
5012     <string>&lt;local>&gt;</string>
5013     <key>AutoConfigURL</key>
5014     <string>URL_TO_AUTOCONFIG</string>
5015     <key>AutoLogin</key>
5016     <true> | </false>
5017     <key>UseProxyForDNS</key>
5018     <true> | </false>
5019   </dict>
5020 </dict>
5021 ```
5022 #### policies.json
5023 ```
5024 {
5025   "policies": {
5026     "Proxy": {
5027       "Mode": "none" | "system" | "manual" | "autoDetect" | "autoConfig",
5028       "Locked": true | false,
5029       "HTTPProxy": "hostname",
5030       "UseHTTPProxyForAllProtocols": true | false,
5031       "SSLProxy": "hostname",
5032       "FTPProxy": "hostname",
5033       "SOCKSProxy": "hostname",
5034       "SOCKSVersion": 4 | 5,
5035       "Passthrough": "<local>",
5036       "AutoConfigURL": "URL_TO_AUTOCONFIG",
5037       "AutoLogin": true | false,
5038       "UseProxyForDNS": true | false
5039     }
5040   }
5041 }
5042 ```
5043 ### RequestedLocales
5044 Set the the list of requested locales for the application in order of preference. It will cause the corresponding language pack to become active.
5045
5046 Note: For Firefox 68, this can now be a string so that you can specify an empty value.
5047
5048 **Compatibility:** Firefox 64, Firefox ESR 60.4, Updated in Firefox 68, Firefox ESR 68\
5049 **CCK2 Equivalent:** N/A\
5050 **Preferences Affected:** N/A
5051 #### Windows (GPO)
5052 ```
5053 Software\Policies\Mozilla\Firefox\RequestedLocales\1 = "de"
5054 Software\Policies\Mozilla\Firefox\RequestedLocales\2 = "en-US"
5055
5056 or
5057
5058 Software\Policies\Mozilla\Firefox\RequestedLocales = "de,en-US"
5059 ```
5060 #### Windows (Intune)
5061 OMA-URI:
5062 ```
5063 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/RequestedLocalesString
5064 ```
5065 Value (string):
5066 ```
5067 <enabled/>
5068 <data id="Preferences_String" value="de,en-US"/>
5069 ```
5070 #### macOS
5071 ```
5072 <dict>
5073   <key>RequestedLocales</key>
5074   <array>
5075     <string>de</string>
5076     <string>en-US</string>
5077   </array>
5078 </dict>
5079
5080 or
5081
5082 <dict>
5083   <key>RequestedLocales</key>
5084   <string>de,en-US</string>
5085 </dict>
5086
5087 ```
5088 #### policies.json
5089 ```
5090 {
5091   "policies": {
5092     "RequestedLocales": ["de", "en-US"]
5093   }
5094 }
5095
5096 or
5097
5098 {
5099   "policies": {
5100     "RequestedLocales": "de,en-US"
5101   }
5102 }
5103 ```
5104 <a name="SanitizeOnShutdown"></a>
5105
5106 ### SanitizeOnShutdown (Selective)
5107 Clear data on shutdown. Choose from Cache, Cookies, Download History, Form & Search History, Browsing History, Active Logins, Site Preferences and Offline Website Data.
5108
5109 Previously, these values were always locked. Starting with Firefox 74 and Firefox ESR 68.6, you can use the `Locked` option to either keep the values unlocked (set it to false), or lock only the values you set (set it to true). If you want the old behavior of locking everything, do not set `Locked` at all.
5110
5111 **Compatibility:** Firefox 68, Firefox ESR 68 (Locked added in 74/68.6)\
5112 **CCK2 Equivalent:** N/A\
5113 **Preferences Affected:** `privacy.sanitize.sanitizeOnShutdown`, `privacy.clearOnShutdown.cache`, `privacy.clearOnShutdown.cookies`, `privacy.clearOnShutdown.downloads`, `privacy.clearOnShutdown.formdata`, `privacy.clearOnShutdown.history`, `privacy.clearOnShutdown.sessions`, `privacy.clearOnShutdown.siteSettings`, `privacy.clearOnShutdown.offlineApps`
5114 #### Windows (GPO)
5115 ```
5116 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Cache = 0x1 | 0x0
5117 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Cookies = 0x1 | 0x0
5118 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Downloads = 0x1 | 0x0
5119 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\FormData = 0x1 | 0x0
5120 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\History = 0x1 | 0x0
5121 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Sessions = 0x1 | 0x0
5122 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\SiteSettings = 0x1 | 0x0
5123 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\OfflineApps = 0x1 | 0x0
5124 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Locked = 0x1 | 0x0
5125 ```
5126 #### Windows (Intune)
5127 OMA-URI:
5128 ```
5129 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/A_SanitizeOnShutdown_Cache
5130 ```
5131 Value (string):
5132 ```
5133 <enabled/> or <disabled/>
5134 ```
5135 OMA-URI:
5136 ```
5137 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/B_SanitizeOnShutdown_Cookies
5138 ```
5139 Value (string):
5140 ```
5141 <enabled/> or <disabled/>
5142 ```
5143 OMA-URI:
5144 ```
5145 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/C_SanitizeOnShutdown_Downloads
5146 ```
5147 Value (string):
5148 ```
5149 <enabled/> or <disabled/>
5150 ```
5151 OMA-URI:
5152 ```
5153 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/D_SanitizeOnShutdown_FormData
5154 ```
5155 Value (string):
5156 ```
5157 <enabled/> or <disabled/>
5158 ```
5159 OMA-URI:
5160 ```
5161 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/E_SanitizeOnShutdown_History
5162 ```
5163 Value (string):
5164 ```
5165 <enabled/> or <disabled/>
5166 ```
5167 OMA-URI:
5168 ```
5169 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/F_SanitizeOnShutdown_Sessions
5170 ```
5171 Value (string):
5172 ```
5173 <enabled/> or <disabled/>
5174 ```
5175 OMA-URI:
5176 ```
5177 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/G_SanitizeOnShutdown_SiteSettings
5178 ```
5179 Value (string):
5180 ```
5181 <enabled/> or <disabled/>
5182 ```
5183 OMA-URI:
5184 ```
5185 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/H_SanitizeOnShutdown_OfflineApps
5186 ```
5187 Value (string):
5188 ```
5189 <enabled/> or <disabled/>
5190 ```
5191 OMA-URI:
5192 ```
5193 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/I_SanitizeOnShutdown_Locked
5194 ```
5195 Value (string):
5196 ```
5197 <enabled/> or <disabled/>
5198 ```
5199 #### macOS
5200 ```
5201 <dict>
5202   <key>SanitizeOnShutdown</key>
5203   <dict>
5204     <key>Cache</key>
5205     <true/> | <false/>
5206     <key>Cookies</key>
5207     <true/> | <false/>
5208     <key>Downloads</key>
5209     <true/> | <false/>
5210     <key>FormData</key>
5211     <true/> | <false/>
5212     <key>History</key>
5213     <true/> | <false/>
5214     <key>Sessions</key>
5215     <true/> | <false/>
5216     <key>SiteSettings</key>
5217     <true/> | <false/>
5218     <key>OfflineApps</key>
5219     <true/> | <false/>
5220     <key>Locked</key>
5221     <true/> | <false/>
5222   </dict>
5223 </dict>
5224 ```
5225 #### policies.json
5226 ```
5227 {
5228   "policies": {
5229     "SanitizeOnShutdown": {
5230       "Cache": true | false,
5231       "Cookies": true | false,
5232       "Downloads": true | false,
5233       "FormData": true | false,
5234       "History": true | false,
5235       "Sessions": true | false,
5236       "SiteSettings": true | false,
5237       "OfflineApps": true | false,
5238       "Locked": true | false
5239     }
5240   }
5241 }
5242 ```
5243 ### SanitizeOnShutdown (All)
5244 Clear all data on shutdown, including Browsing & Download History, Cookies, Active Logins, Cache, Form & Search History, Site Preferences and Offline Website Data.
5245
5246 **Compatibility:** Firefox 60, Firefox ESR 60\
5247 **CCK2 Equivalent:** N/A\
5248 **Preferences Affected:** `privacy.sanitize.sanitizeOnShutdown`, `privacy.clearOnShutdown.cache`, `privacy.clearOnShutdown.cookies`, `privacy.clearOnShutdown.downloads`, `privacy.clearOnShutdown.formdata`, `privacy.clearOnShutdown.history`, `privacy.clearOnShutdown.sessions`, `privacy.clearOnShutdown.siteSettings`, `privacy.clearOnShutdown.offlineApps`
5249 #### Windows (GPO)
5250 ```
5251 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown = 0x1 | 0x0
5252 ```
5253 #### Windows (Intune)
5254 OMA-URI:
5255 ```
5256 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/C_SanitizeOnShutdown
5257 ```
5258 Value (string):
5259 ```
5260 <enabled/> or <disabled/>
5261 ```
5262 #### macOS
5263 ```
5264 <dict>
5265   <key>SanitizeOnShutdown</key>
5266   <true/> | <false/>
5267 </dict>
5268 ```
5269 #### policies.json
5270 ```
5271 {
5272   "policies": {
5273     "SanitizeOnShutdown": true | false
5274   }
5275 }
5276 ```
5277 ### SearchBar
5278 Set whether or not search bar is displayed.
5279
5280 **Compatibility:** Firefox 60, Firefox ESR 60\
5281 **CCK2 Equivalent:** `showSearchBar`\
5282 **Preferences Affected:** N/A
5283
5284 #### Windows (GPO)
5285 ```
5286 Software\Policies\Mozilla\Firefox\SearchBar = "unified" | "separate"
5287 ```
5288
5289 #### Windows (Intune)
5290 OMA-URI:
5291 ```
5292 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SearchBar
5293 ```
5294 Value (string):
5295 ```
5296 <enabled/>
5297 <data id="SearchBar" value="unified | separate"/>
5298 ```
5299 #### macOS
5300 ```
5301 <dict>
5302   <key>SearchBar</key>
5303   <string>unified | separate</string>
5304 </dict>
5305 ```
5306 #### policies.json
5307 ```
5308 {
5309   "policies": {
5310     "SearchBar": "unified" | "separate"
5311   }
5312 }
5313 ```
5314 <a name="SearchEngines"></a>
5315
5316 ### SearchEngines (This policy is only available on the ESR.)
5317
5318 ### SearchEngines | Add
5319
5320 Add new search engines. Although there are only five engines available in the ADMX template, there is no limit. To add more in the ADMX template, you can duplicate the XML.
5321
5322 This policy is only available on the ESR. `Name` and `URLTemplate` are required.
5323
5324 `Name` is the name of the search engine.
5325
5326 `URLTemplate` is the search URL with {searchTerms} to substitute for the search term.
5327
5328 `Method` is either GET or POST
5329
5330 `IconURL` is a URL for the icon to use.
5331
5332 `Alias` is a keyword to use for the engine.
5333
5334 `Description` is a description of the search engine.
5335
5336 `PostData` is the POST data as name value pairs separated by &.
5337
5338 `SuggestURLTemplate` is a search suggestions URL with {searchTerms} to substitute for the search term.
5339
5340 `Encoding` is the query charset for the engine. It defaults to UTF-8.
5341
5342 **Compatibility:** Firefox ESR 60 (POST support in Firefox ESR 68, Encoding support in Firefox 91)\
5343 **CCK2 Equivalent:** `searchplugins`\
5344 **Preferences Affected:** N/A
5345
5346 #### Windows (GPO)
5347 ```
5348 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Name = "Example1"
5349 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\URLTemplate = "https://www.example.org/q={searchTerms}"
5350 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Method = "GET" | "POST"
5351 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\IconURL = "https://www.example.org/favicon.ico"
5352 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Alias = "example"
5353 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Description = "Example Description"
5354 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\SuggestURLTemplate = "https://www.example.org/suggestions/q={searchTerms}"
5355 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\PostData = "name=value&q={searchTerms}"
5356 ```
5357 #### Windows (Intune)
5358 OMA-URI:
5359 ```
5360 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_1
5361 ```
5362 Value (string):
5363 ```
5364 <enabled/>
5365 <data id="SearchEngine_Name" value="Example1"/>
5366 <data id="SearchEngine_URLTemplate" value="https://www.example.org/q={searchTerms"/>
5367 <data id="SearchEngine_Method" value="GET | POST"/>
5368 <data id="SearchEngine_IconURL" value="https://www.example.org/favicon.ico"/>
5369 <data id="SearchEngine_Alias" value="example"/>
5370 <data id="SearchEngine_Description" value="Example Description"/>
5371 <data id="SearchEngine_SuggestURLTemplate" value="https://www.example.org/suggestions/q={searchTerms}"/>
5372 <data id="SearchEngine_PostData" value="name=value&amp;q={searchTerms}"/>
5373 ```
5374 #### macOS
5375 ```
5376 <dict>
5377   <key>SearchEngines</key>
5378   <dict>
5379     <key>Add</key>
5380     <array>
5381       <dict>
5382         <key>Name</key>
5383         <string>Example1</string>
5384         <key>URLTemplate</key>
5385         <string>https://www.example.org/q={searchTerms}</string>
5386         <key>Method</key>
5387         <string>GET | POST </string>
5388         <key>IconURL</key>
5389         <string>https://www.example.org/favicon.ico</string>
5390         <key>Alias</key>
5391         <string>example</string>
5392         <key>Description</key>
5393         <string>Example Description</string>
5394         <key>SuggestURLTemplate</key>
5395         <string>https://www.example.org/suggestions/q={searchTerms}</string>
5396         <key>PostData</key>
5397         <string>name=value&q={searchTerms}</string>
5398       </dict>
5399     <array>
5400   </dict>
5401 </dict>
5402 ```
5403 #### policies.json
5404 ```
5405 {
5406   "policies": {
5407     "SearchEngines": {
5408       "Add": [
5409         {
5410           "Name": "Example1",
5411           "URLTemplate": "https://www.example.org/q={searchTerms}",
5412           "Method": "GET" | "POST",
5413           "IconURL": "https://www.example.org/favicon.ico",
5414           "Alias": "example",
5415           "Description": "Description",
5416           "PostData": "name=value&q={searchTerms}",
5417           "SuggestURLTemplate": "https://www.example.org/suggestions/q={searchTerms}"
5418         }
5419       ]
5420     }
5421   }
5422 }
5423 ```
5424 ### SearchEngines | Default
5425
5426 Set the default search engine. This policy is only available on the ESR.
5427
5428 **Compatibility:** Firefox ESR 60\
5429 **CCK2 Equivalent:** `defaultSearchEngine`\
5430 **Preferences Affected:** N/A
5431
5432 #### Windows (GPO)
5433 ```
5434 Software\Policies\Mozilla\Firefox\SearchEngines\Default = NAME_OF_SEARCH_ENGINE
5435 ```
5436 #### Windows (Intune)
5437 OMA-URI:
5438 ```
5439 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_Default
5440 ```
5441 Value (string):
5442 ```
5443 <enabled/>
5444 <data id="SearchEngines_Default" value="NAME_OF_SEARCH_ENGINE"/>
5445 ```
5446 #### macOS
5447 ```
5448 <dict>
5449   <key>SearchEngines</key>
5450   <dict>
5451     <key>Default</key>
5452     <string>NAME_OF_SEARCH_ENGINE</string>
5453   </dict>
5454 </dict>
5455 ```
5456 #### policies.json
5457 ```
5458 {
5459   "policies": {
5460     "SearchEngines": {
5461       "Default": "NAME_OF_SEARCH_ENGINE"
5462     }
5463   }
5464 }
5465 ```
5466 ### SearchEngines | PreventInstalls
5467
5468 Prevent installing search engines from webpages.
5469
5470 **Compatibility:** Firefox ESR 60\
5471 **CCK2 Equivalent:** `disableSearchEngineInstall`\
5472 **Preferences Affected:** N/A
5473
5474 #### Windows (GPO)
5475 ```
5476 Software\Policies\Mozilla\Firefox\SearchEngines\PreventInstalls = 0x1 | 0x0
5477 ```
5478 #### Windows (Intune)
5479 OMA-URI:
5480 ```
5481 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_PreventInstalls
5482 ```
5483 Value (string):
5484 ```
5485 <enabled/> or <disabled/>
5486 ```
5487 #### macOS
5488 ```
5489 <dict>
5490   <key>SearchEngines</key>
5491   <dict>
5492     <key>PreventInstalls</key>
5493     <true/> | <false/>
5494   </dict>
5495 </dict>
5496 ```
5497 #### policies.json
5498 ```
5499 {
5500   "policies": {
5501     "SearchEngines": {
5502       "PreventInstalls": true | false
5503     }
5504   }
5505 }
5506 ```
5507 ### SearchEngines | Remove
5508
5509 Hide built-in search engines. This policy is only available on the ESR.
5510
5511 **Compatibility:** Firefox ESR 60.2\
5512 **CCK2 Equivalent:** `removeDefaultSearchEngines` (removed all built-in engines)\
5513 **Preferences Affected:** N/A
5514
5515 #### Windows (GPO)
5516 ```
5517 Software\Policies\Mozilla\Firefox\SearchEngines\Remove\1 = NAME_OF_SEARCH_ENGINE
5518 ```
5519 #### Windows (Intune)
5520 OMA-URI:
5521 ```
5522 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_Remove
5523 ```
5524 Value (string):
5525 ```
5526 <enabled/>
5527 <data id="SearchEngines_Remove" value="1&#xF000;NAME_OF_SEARCH_ENGINE"/>
5528 ```
5529 #### macOS
5530 ```
5531 <dict>
5532   <key>SearchEngines</key>
5533   <dict>
5534     <key>Remove</key>
5535     <array>
5536       <string>NAME_OF_SEARCH_ENGINE</string>
5537     </array>
5538   </dict>
5539 </dict>
5540 ```
5541 #### policies.json
5542 ```
5543 {
5544   "policies": {
5545     "SearchEngines": {
5546       "Remove": ["NAME_OF_SEARCH_ENGINE"]
5547     }
5548   }
5549 }
5550 ```
5551 ### SearchSuggestEnabled
5552
5553 Enable search suggestions.
5554
5555 **Compatibility:** Firefox 68, Firefox ESR 68\
5556 **CCK2 Equivalent:** N/A\
5557 **Preferences Affected:** `browser.urlbar.suggest.searches`, `browser.search.suggest.enabled`
5558
5559 #### Windows (GPO)
5560 ```
5561 Software\Policies\Mozilla\Firefox\SearchSuggestEnabled = 0x1 | 0x0
5562 ```
5563 #### Windows (Intune)
5564 OMA-URI:
5565 ```
5566 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchSuggestEnabled
5567 ```
5568 Value (string):
5569 ```
5570 <enabled/> or <disabled/>
5571 ```
5572 #### macOS
5573 ```
5574 <dict>
5575   <key>SearchSuggestEnabled</key>
5576   <true/> | <false/>
5577 </dict>
5578 ```
5579 #### policies.json
5580 ```
5581 {
5582   "policies": {
5583     "SearchSuggestEnabled": true | false
5584   }
5585 }
5586 ```
5587 ### SecurityDevices
5588
5589 Add or delete PKCS #11 modules.
5590
5591 **Compatibility:** Firefox 114, Firefox ESR 112.12\
5592 **CCK2 Equivalent:** N/A\
5593 **Preferences Affected:** N/A
5594
5595 #### Windows (GPO)
5596 ```
5597 Software\Policies\Mozilla\Firefox\SecurityDevices\Add\NAME_OF_DEVICE_TO_ADD = PATH_TO_LIBRARY_FOR_DEVICE
5598 Software\Policies\Mozilla\Firefox\SecurityDevices\Remove\1 = NAME_OF_DEVICE_TO_REMOVE
5599 ```
5600 #### Windows (Intune)
5601 OMA-URI:
5602 ```
5603 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SecurityDevices/SecurityDevices_Add
5604 ```
5605 Value (string):
5606 ```
5607 <enabled/>
5608 <data id="SecurityDevices" value="NAME_OF_DEVICE_TO_ADD&#xF000;PATH_TO_LIBRARY_FOR_DEVICE"/>
5609 ```
5610 OMA-URI:
5611 ```
5612 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SecurityDevices/SecurityDevices_Delete
5613 ```
5614 Value (string):
5615 ```
5616 <enabled/>
5617 <data id="SecurityDevices" value="1&#xF000;NAME_OF_DEVICE_TO_REMOVE"/>
5618 ```
5619 #### macOS
5620 ```
5621 <dict>
5622   <key>SecurityDevices</key>
5623   <dict>
5624     <key>Add<key>
5625     <dict>
5626       <key>NAME_OF_DEVICE_TO_ADD</key>
5627       <string>PATH_TO_LIBRARY_FOR_DEVICE</string>
5628     </dict>
5629     <key>Delete</add>
5630     <array>
5631       <string>NAME_OF_DEVICE_TO_DELETE</string>
5632     </array>
5633   </dict>
5634 </dict>
5635 ```
5636 #### policies.json
5637 ```
5638 {
5639   "policies": {
5640     "SecurityDevices": {
5641       "Add": {
5642         "NAME_OF_DEVICE_TO_ADD": "PATH_TO_LIBRARY_FOR_DEVICE"
5643       },
5644       "Delete": ["NAME_OF_DEVICE_TO_DELETE"]
5645     }
5646   }
5647 }
5648 ```
5649 ### SecurityDevices (Deprecated)
5650
5651 Install PKCS #11 modules.
5652
5653 **Compatibility:** Firefox 64, Firefox ESR 60.4\
5654 **CCK2 Equivalent:** `certs.devices`\
5655 **Preferences Affected:** N/A
5656
5657 #### Windows (GPO)
5658 ```
5659 Software\Policies\Mozilla\Firefox\SecurityDevices\NAME_OF_DEVICE = PATH_TO_LIBRARY_FOR_DEVICE
5660 ```
5661 #### Windows (Intune)
5662 OMA-URI:
5663 ```
5664 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SecurityDevices
5665 ```
5666 Value (string):
5667 ```
5668 <enabled/>
5669 <data id="SecurityDevices" value="NAME_OF_DEVICE&#xF000;PATH_TO_LIBRARY_FOR_DEVICE"/>
5670 ```
5671 #### macOS
5672 ```
5673 <dict>
5674   <key>SecurityDevices</key>
5675   <dict>
5676     <key>NAME_OF_DEVICE</key>
5677     <string>PATH_TO_LIBRARY_FOR_DEVICE</string>
5678   </dict>
5679 </dict>
5680 ```
5681 #### policies.json
5682 ```
5683 {
5684   "policies": {
5685     "SecurityDevices": {
5686       "NAME_OF_DEVICE": "PATH_TO_LIBRARY_FOR_DEVICE"
5687     }
5688   }
5689 }
5690 ```
5691 ### ShowHomeButton
5692 Show the home button on the toolbar.
5693
5694 Future versions of Firefox will not show the home button by default.
5695
5696 **Compatibility:** Firefox 88, Firefox ESR 78.10\
5697 **CCK2 Equivalent:** N/A\
5698 **Preferences Affected:** N/A
5699
5700 #### Windows (GPO)
5701 ```
5702 Software\Policies\Mozilla\Firefox\ShowHomeButton = 0x1 | 0x0
5703 ```
5704 #### Windows (Intune)
5705 OMA-URI:
5706 ```
5707 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/Homepage_ShowHomeButton
5708 ```
5709 Value (string):
5710 ```
5711 <enabled/> or <disabled/>
5712 ```
5713 #### macOS
5714 ```
5715 <dict>
5716   <key>ShowHomeButton</key>
5717   <true/> | <false/>
5718 </dict>
5719 ```
5720 #### policies.json
5721 ```
5722 {
5723   "policies": {
5724     "ShowHomeButton": true | false
5725   }
5726 }
5727 ```
5728 ### SSLVersionMax
5729
5730 Set and lock the maximum version of TLS. (Firefox defaults to a maximum of TLS 1.3.)
5731
5732 **Compatibility:** Firefox 66, Firefox ESR 60.6\
5733 **CCK2 Equivalent:** N/A\
5734 **Preferences Affected:** `security.tls.version.max`
5735
5736 #### Windows (GPO)
5737 ```
5738 Software\Policies\Mozilla\Firefox\SSLVersionMax = "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
5739 ```
5740 #### Windows (Intune)
5741 OMA-URI:
5742 ```
5743 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SSLVersionMax
5744 ```
5745 Value (string):
5746 ```
5747 <enabled/>
5748 <data id="SSLVersion" value="tls1 | tls1.2 | tls1.3"/>
5749 ```
5750 #### macOS
5751 ```
5752 <dict>
5753   <key>SSLVersionMax</key>
5754   <string>tls1 | tls1.1 | tls1.2 | tls1.3</string>
5755 </dict>
5756 ```
5757
5758 #### policies.json
5759 ```
5760 {
5761   "policies": {
5762     "SSLVersionMax": "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
5763   }
5764 }
5765 ```
5766 ### SSLVersionMin
5767
5768 Set and lock the minimum version of TLS. (Firefox defaults to a minimum of TLS 1.2.)
5769
5770 **Compatibility:** Firefox 66, Firefox ESR 60.6\
5771 **CCK2 Equivalent:** N/A\
5772 **Preferences Affected:** `security.tls.version.min`
5773
5774 #### Windows (GPO)
5775 ```
5776 Software\Policies\Mozilla\Firefox\SSLVersionMin = "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
5777 ```
5778 #### Windows (Intune)
5779 OMA-URI:
5780 ```
5781 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SSLVersionMin
5782 ```
5783 Value (string):
5784 ```
5785 <enabled/>
5786 <data id="SSLVersion" value="tls1 | tls1.2 | tls1.3"/>
5787 ```
5788 #### macOS
5789 ```
5790 <dict>
5791   <key>SSLVersionMin</key>
5792   <string>tls1 | tls1.1 | tls1.2 | tls1.3</string>
5793 </dict>
5794 ```
5795
5796 #### policies.json
5797 ```
5798 {
5799   "policies": {
5800     "SSLVersionMin": "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
5801   }
5802 }
5803 ```
5804 ### SupportMenu
5805 Add a menuitem to the help menu for specifying support information.
5806
5807 **Compatibility:** Firefox 68.0.1, Firefox ESR 68.0.1\
5808 **CCK2 Equivalent:** helpMenu\
5809 **Preferences Affected:** N/A
5810
5811 #### Windows (GPO)
5812 ```
5813 Software\Policies\Mozilla\Firefox\SupportMenu\Title = "Support Menu"
5814 Software\Policies\Mozilla\Firefox\SupportMenu\URL = "http://example.com/support"
5815 Software\Policies\Mozilla\Firefox\SupportMenu\AccessKey = "S"
5816 ```
5817 #### Windows (Intune)
5818 OMA-URI:
5819 ```
5820 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SupportMenu
5821 ```
5822 Value (string):
5823 ```
5824 <enabled/>
5825 <data id="SupportMenuTitle" value="Support Menu"/>
5826 <data id="SupportMenuURL" value="http://example.com/support"/>
5827 <data id="SupportMenuAccessKey" value="S"/>
5828 ```
5829 #### macOS
5830 ```
5831 <dict>
5832   <key>SupportMenu</key>
5833   <dict>
5834     <key>Title</key>
5835     <string>SupportMenu</string>
5836     <key>URL</key>
5837     <string>http://example.com/support</string>
5838     <key>AccessKey</key>
5839     <string>S</string>
5840   </dict>
5841 </dict>
5842 ```
5843 #### policies.json
5844 ```
5845 {
5846   "policies": {
5847     "SupportMenu": {
5848       "Title": "Support Menu",
5849       "URL": "http://example.com/support",
5850       "AccessKey": "S"
5851     }
5852   }
5853 }
5854 ```
5855 ### StartDownloadsInTempDirectory
5856 Force downloads to start off in a local, temporary location rather than the default download directory.
5857
5858 **Compatibility:** Firefox 102\
5859 **CCK2 Equivalent:** N/A\
5860 **Preferences Affected:** `browser.download.start_downloads_in_tmp_dir`
5861
5862 #### Windows (GPO)
5863 ```
5864 Software\Policies\Mozilla\Firefox\StartDownloadsInTempDirectory = 0x1 | 0x0
5865 ```
5866 #### Windows (Intune)
5867 OMA-URI:
5868 ```
5869 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/StartDownloadsInTempDirectory
5870 ```
5871 Value (string):
5872 ```
5873 <enabled/> or <disabled/>
5874 ```
5875 #### macOS
5876 ```
5877 <dict>
5878   <key>StartDownloadsInTempDirectory</key>
5879   <true/> | <false/>
5880 </dict>
5881 ```
5882 #### policies.json
5883 ```
5884 {
5885   "policies": {
5886     "StartDownloadsInTempDirectory": true | false
5887 }
5888 ```
5889 ### UserMessaging
5890
5891 Prevent Firefox from messaging the user in certain situations.
5892
5893 `WhatsNew` Remove the "What's New" icon and menuitem.
5894
5895 `ExtensionRecommendations` If false, don't recommend extensions while the user is visiting web pages.
5896
5897 `FeatureRecommendations` If false, don't recommend browser features.
5898
5899 `UrlbarInterventions` If false, Don't offer Firefox specific suggestions in the URL bar.
5900
5901 `SkipOnboarding` If true, don't show onboarding messages on the new tab page.
5902
5903 `MoreFromMozilla` If false, don't show the "More from Mozilla" section in Preferences. (Firefox 98)
5904
5905 `Locked` prevents the user from changing user messaging preferences.
5906
5907 **Compatibility:** Firefox 75, Firefox ESR 68.7\
5908 **CCK2 Equivalent:** N/A\
5909 **Preferences Affected:** `browser.messaging-system.whatsNewPanel.enabled`, `browser.newtabpage.activity-stream.asrouter.userprefs.cfr.addons`, `browser.newtabpage.activity-stream.asrouter.userprefs.cfr.features`, `browser.aboutwelcome.enabled`, `browser.preferences.moreFromMozilla`
5910
5911 #### Windows (GPO)
5912 ```
5913 Software\Policies\Mozilla\Firefox\UserMessaging\WhatsNew = 0x1 | 0x0
5914 Software\Policies\Mozilla\Firefox\UserMessaging\ExtensionRecommendations = 0x1 | 0x0
5915 Software\Policies\Mozilla\Firefox\UserMessaging\FeatureRecommendations = 0x1 | 0x0
5916 Software\Policies\Mozilla\Firefox\UserMessaging\UrlbarInterventions = 0x1 | 0x0
5917 Software\Policies\Mozilla\Firefox\UserMessaging\SkipOnboarding = 0x1 | 0x0
5918 Software\Policies\Mozilla\Firefox\UserMessaging\MoreFromMozilla = 0x1 | 0x0
5919 Software\Policies\Mozilla\Firefox\UserMessaging\Locked = 0x1 | 0x0
5920 ```
5921 #### Windows (Intune)
5922 OMA-URI:
5923 ```
5924 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_WhatsNew
5925 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_ExtensionRecommendations
5926 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_FeatureRecommendations
5927 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_UrlbarInterventions
5928 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_SkipOnboarding
5929 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_MoreFromMozilla
5930 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_Locked
5931 ```
5932 Value (string):
5933 ```
5934 <enabled/> or <disabled/>
5935 ```
5936 #### macOS
5937 ```
5938 <dict>
5939   <key>UserMessaging</key>
5940   <dict>
5941     <key>WhatsNew</key>
5942     <true/> | <false/>
5943     <key>ExtensionRecommendations</key>
5944     <true/> | <false/>
5945     <key>FeatureRecommendations</key>
5946     <true/> | <false/>
5947     <key>UrlbarInterventions</key>
5948     <true/> | <false/>
5949     <key>SkipOnboarding</key>
5950     <true/> | <false/>
5951     <key>MoreFromMozilla</key>
5952     <true/> | <false/>
5953     <key>Locked</key>
5954     <true/> | <false/>
5955   </dict>
5956 </dict>
5957 ```
5958 #### policies.json
5959 ```
5960 {
5961   "policies": {
5962     "UserMessaging": {
5963       "WhatsNew": true | false,
5964       "ExtensionRecommendations": true | false,
5965       "FeatureRecommendations": true | false,
5966       "UrlbarInterventions": true | false,
5967       "SkipOnboarding": true | false,
5968       "MoreFromMozilla": true | false,
5969       "Locked": true | false
5970     }
5971   }
5972 }
5973 ```
5974 ### UseSystemPrintDialog
5975 Use the system print dialog instead of the print preview window.
5976
5977 **Compatibility:** Firefox 102\
5978 **CCK2 Equivalent:** N/A\
5979 **Preferences Affected:** `print.prefer_system_dialog`
5980
5981 #### Windows (GPO)
5982 ```
5983 Software\Policies\Mozilla\Firefox\UseSystemPrintDialog = 0x1 | 0x0
5984 ```
5985 #### Windows (Intune)
5986 OMA-URI:
5987 ```
5988 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/UseSystemPrintDialog
5989 ```
5990 Value (string):
5991 ```
5992 <enabled/> or <disabled/>
5993 ```
5994 #### macOS
5995 ```
5996 <dict>
5997   <key>UseSystemPrintDialog</key>
5998   <true/> | <false/>
5999 </dict>
6000 ```
6001 #### policies.json
6002 ```
6003 {
6004   "policies": {
6005     "UseSystemPrintDialog": true | false
6006   }
6007 }
6008 ```
6009 ### WebsiteFilter
6010 Block websites from being visited. The parameters take an array of Match Patterns, as documented in https://developer.mozilla.org/en-US/Add-ons/WebExtensions/Match_patterns.
6011 The arrays are limited to 1000 entries each.
6012
6013 If you want to block all URLs, you can use `<all_urls>` or `*://*/*`. You can't have just a `*` on the right side.
6014
6015 For specific protocols, use `https://*/*` or `http://*/*`.
6016
6017 As of Firefox 83 and Firefox ESR 78.5, file URLs are supported.
6018
6019 **Compatibility:** Firefox 60, Firefox ESR 60\
6020 **CCK2 Equivalent:** N/A\
6021 **Preferences Affected:** N/A
6022
6023 #### Windows (GPO)
6024 ```
6025 Software\Policies\Mozilla\Firefox\WebsiteFilter\Block\1 = "<all_urls>"
6026 Software\Policies\Mozilla\Firefox\WebsiteFilter\Exceptions\1 = "http://example.org/*"
6027 ```
6028 #### Windows (Intune)
6029 OMA-URI:
6030 ```
6031 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/B_WebsiteFilter_Block
6032 ```
6033 Value (string):
6034 ```
6035 <enabled/> <data id="WebsiteFilter" value="1&#xF000;&#60;all_urls&#62;"/>
6036 ```
6037 OMA-URI:
6038 ```
6039 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/B_WebsiteFilter_Exceptions
6040 ```
6041 Value (string):
6042 ```
6043 <enabled/>
6044 <data id="WebsiteFilter" value="1&#xF000;http://example.org/*"/>
6045 ```
6046 #### macOS
6047 ```
6048 <dict>
6049   <key>WebsiteFilter</key>
6050   <dict>
6051     <key>Block</key>
6052     <array>
6053       <string><all_urls></string>
6054     </array>
6055     <key>Exceptions</key>
6056     <array>
6057       <string>http://example.org/*</string>
6058     </array>
6059   </dict>
6060
6061 </dict>
6062 ```
6063 #### policies.json
6064 ```
6065 {
6066   "policies": {
6067     "WebsiteFilter": {
6068       "Block": ["<all_urls>"],
6069       "Exceptions": ["http://example.org/*"]
6070     }
6071   }
6072 }
6073 ```
6074 ### WindowsSSO
6075 Allow Windows single sign-on for Microsoft, work, and school accounts.
6076
6077 If this policy is set to true, Firefox will use credentials stored in Windows to sign in to Microsoft, work, and school accounts.
6078
6079 **Compatibility:** Firefox 91\
6080 **CCK2 Equivalent:** N/A\
6081 **Preferences Affected:** `network.http.windows-sso.enabled`
6082
6083 #### Windows (GPO)
6084 ```
6085 Software\Policies\Mozilla\Firefox\WindowsSSO = 0x1 | 0x0
6086 ```
6087 #### Windows (Intune)
6088 OMA-URI:
6089 ```
6090 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/WindowsSSO
6091 ```
6092 Value (string):
6093 ```
6094 <enabled/> or <disabled/>
6095 ```
6096 #### policies.json
6097 ```
6098 {
6099   "policies": {
6100     "WindowsSSO": true | false
6101   }
6102 }
6103 ```