README.md

   1 **These policies are in active development and so might contain changes that do not work with current versions of Firefox.**
   2
   3 **You should use the [officially released versions](https://github.com/mozilla/policy-templates/releases) if you are deploying changes.**
   4
   5 Policies can be specified using the [Group Policy templates on Windows](https://github.com/mozilla/policy-templates/tree/master/windows), [Intune on Windows](https://support.mozilla.org/kb/managing-firefox-intune), [configuration profiles on macOS](https://github.com/mozilla/policy-templates/tree/master/mac), or by creating a file called `policies.json`. On Windows, create a directory called `distribution` where the EXE is located and place the file there. On Mac, the file goes into `Firefox.app/Contents/Resources/distribution`.  On Linux, the file goes into `firefox/distribution`, where `firefox` is the installation directory for firefox, which varies by distribution or you can specify system-wide policy by placing the file in `/etc/firefox/policies`.
   6
   7 | Policy Name | Description
   8 | --- | --- |
   9 | **[`3rdparty`](#3rdparty)** | Set policies that WebExtensions can access via chrome.storage.managed.
  10 | **[`AllowedDomainsForApps`](#alloweddomainsforapps)** | Define domains allowed to access Google Workspace.
  11 | **[`AppAutoUpdate`](#appautoupdate)** | Enable or disable automatic application update.
  12 | **[`AppUpdateURL`](#appupdateurl)** | Change the URL for application update.
  13 | **[`Authentication`](#authentication)** | Configure sites that support integrated authentication.
  14 | **[`AutoLaunchProtocolsFromOrigins`](#autolaunchprotocolsfromorigins)** | Define a list of external protocols that can be used from listed origins without prompting the user.
  15 | **[`BackgroundAppUpdate`](#backgroundappupdate)** | Enable or disable the background updater (Windows only).
  16 | **[`BlockAboutAddons`](#blockaboutaddons)** | Block access to the Add-ons Manager (about:addons).
  17 | **[`BlockAboutConfig`](#blockaboutconfig)** | Block access to about:config.
  18 | **[`BlockAboutProfiles`](#blockaboutprofiles)** | Block access to About Profiles (about:profiles).
  19 | **[`BlockAboutSupport`](#blockaboutsupport)** | Block access to Troubleshooting Information (about:support).
  20 | **[`Bookmarks`](#bookmarks)** | Add bookmarks in either the bookmarks toolbar or menu.
  21 | **[`CaptivePortal`](#captiveportal)** | Enable or disable the detection of captive portals.
  22 | **[`Certificates`](#certificates)** |
  23 | **[`Certificates -> ImportEnterpriseRoots`](#certificates--importenterpriseroots)** | Trust certificates that have been added to the operating system certificate store by a user or administrator.
  24 | **[`Certificates -> Install`](#certificates--install)** | Install certificates into the Firefox certificate store.
  25 | **[`Cookies`](#cookies)** | Configure cookie preferences.
  26 | **[`DefaultDownloadDirectory`](#defaultdownloaddirectory)** | Set the default download directory.
  27 | **[`DisableAppUpdate`](#disableappupdate)** | Turn off application updates.
  28 | **[`DisableBuiltinPDFViewer`](#disablebuiltinpdfviewer)** | Disable the built in PDF viewer.
  29 | **[`DisabledCiphers`](#disabledciphers)** | Disable ciphers.
  30 | **[`DisableDefaultBrowserAgent`](#disabledefaultbrowseragent)** | Prevent the default browser agent from taking any actions (Windows only).
  31 | **[`DisableDeveloperTools`](#disabledevelopertools)** | Remove access to all developer tools.
  32 | **[`DisableFeedbackCommands`](#disablefeedbackcommands)** | Disable the menus for reporting sites.
  33 | **[`DisableFirefoxAccounts`](#disablefirefoxaccounts)** | Disable Firefox Accounts integration (Sync).
  34 | **[`DisableFirefoxScreenshots`](#disablefirefoxscreenshots)** | Remove access to Firefox Screenshots.
  35 | **[`DisableFirefoxStudies`](#disablefirefoxstudies)** | Disable Firefox studies (Shield).
  36 | **[`DisableForgetButton`](#disableforgetbutton)** | Disable the "Forget" button.
  37 | **[`DisableFormHistory`](#disableformhistory)** | Turn off saving information on web forms and the search bar.
  38 | **[`DisableMasterPasswordCreation`](#disablemasterpasswordcreation)** | Remove the master password functionality.
  39 | **[`DisablePasswordReveal`](#disablepasswordreveal)** | Do not allow passwords to be revealed in saved logins.
  40 | **[`DisablePocket`](#disablepocket)** | Remove Pocket in the Firefox UI.
  41 | **[`DisablePrivateBrowsing`](#disableprivatebrowsing)** | Remove access to private browsing.
  42 | **[`DisableProfileImport`](#disableprofileimport)** | Disables the "Import data from another browser" option in the bookmarks window.
  43 | **[`DisableProfileRefresh`](#disableprofilerefresh)** | Disable the Refresh Firefox button on about:support and support.mozilla.org
  44 | **[`DisableSafeMode`](#disablesafemode)** | Disable safe mode within the browser.
  45 | **[`DisableSecurityBypass`](#disablesecuritybypass)** | Prevent the user from bypassing security in certain cases.
  46 | **[`DisableSetDesktopBackground`](#disablesetdesktopbackground)** | Remove the "Set As Desktop Background..." menuitem when right clicking on an image.
  47 | **[`DisableSystemAddonUpdate`](#disablesystemaddonupdate)** | Prevent system add-ons from being installed or update.
  48 | **[`DisableTelemetry`](#disabletelemetry)** | DisableTelemetry
  49 | **[`DisplayBookmarksToolbar`](#displaybookmarkstoolbar)** | Set the initial state of the bookmarks toolbar.
  50 | **[`DisplayMenuBar`](#displaymenubar)** | Set the state of the menubar.
  51 | **[`DisplayMenuBar (Deprecated)`](#displaymenubar-deprecated)** | Set the initial state of the menubar.
  52 | **[`DNSOverHTTPS`](#dnsoverhttps)** | Configure DNS over HTTPS.
  53 | **[`DontCheckDefaultBrowser`](#dontcheckdefaultbrowser)** | Don't check if Firefox is the default browser at startup.
  54 | **[`DownloadDirectory`](#downloaddirectory)** | Set and lock the download directory.
  55 | **[`EnableTrackingProtection`](#enabletrackingprotection)** | Configure tracking protection.
  56 | **[`EncryptedMediaExtensions`](#encryptedmediaextensions)** | Enable or disable Encrypted Media Extensions and optionally lock it.
  57 | **[`EnterprisePoliciesEnabled`](#enterprisepoliciesenabled)** | Enable policy support on macOS.
  58 | **[`Extensions`](#extensions)** | Control the installation, uninstallation and locking of extensions.
  59 | **[`ExtensionSettings`](#extensionsettings)** | Manage all aspects of extensions.
  60 | **[`ExtensionUpdate`](#extensionupdate)** | Control extension updates.
  61 | **[`FirefoxHome`](#firefoxhome)** | Customize the Firefox Home page.
  62 | **[`FlashPlugin`](#flashplugin)** | Configure the default Flash plugin policy as well as origins for which Flash is allowed.
  63 | **[`Handlers`](#handlers)** | Configure default application handlers.
  64 | **[`HardwareAcceleration`](#hardwareacceleration)** | Control hardware acceleration.
  65 | **[`Homepage`](#homepage)** | Configure the default homepage and how Firefox starts.
  66 | **[`InstallAddonsPermission`](#installaddonspermission)** | Configure the default extension install policy as well as origins for extension installs are allowed.
  67 | **[`LegacyProfiles`](#legacyprofiles)** | Disable the feature enforcing a separate profile for each installation.
  68 | **[`LegacySameSiteCookieBehaviorEnabled`](#legacysamesitecookiebehaviorenabled)** | Enable default legacy SameSite cookie behavior setting.
  69 | **[`LegacySameSiteCookieBehaviorEnabledForDomainList`](#legacysamesitecookiebehaviorenabledfordomainlist)** | Revert to legacy SameSite behavior for cookies on specified sites.
  70 | **[`LocalFileLinks`](#localfilelinks)** | Enable linking to local files by origin.
  71 | **[`ManagedBookmarks`](#managedbookmarks)** | Configures a list of bookmarks managed by an administrator that cannot be changed by the user.
  72 | **[`ManualAppUpdateOnly`](#manualappupdateonly)** | Allow manual updates only and do not notify the user about updates..
  73 | **[`NetworkPrediction`](#networkprediction)** | Enable or disable network prediction (DNS prefetching).
  74 | **[`NewTabPage`](#newtabpage)** | Enable or disable the New Tab page.
  75 | **[`NoDefaultBookmarks`](#nodefaultbookmarks)** | Disable the creation of default bookmarks.
  76 | **[`OfferToSaveLogins`](#offertosavelogins)** | Control whether or not Firefox offers to save passwords.
  77 | **[`OfferToSaveLoginsDefault`](#offertosaveloginsdefault)** | Set the default value for whether or not Firefox offers to save passwords.
  78 | **[`OverrideFirstRunPage`](#overridefirstrunpage)** | Override the first run page.
  79 | **[`OverridePostUpdatePage`](#overridepostupdatepage)** | Override the upgrade page.
  80 | **[`PasswordManagerEnabled`](#passwordmanagerenabled)** | Remove (some) access to the password manager.
  81 | **[`PDFjs`](#pdfjs)** | Disable or configure PDF.js, the built-in PDF viewer.
  82 | **[`Permissions`](#permissions)** | Set permissions associated with camera, microphone, location, and notifications.
  83 | **[`PictureInPicture`](#pictureinpicture)** | Enable or disable Picture-in-Picture.
  84 | **[`PopupBlocking`](#popupblocking)** | Configure the default pop-up window policy as well as origins for which pop-up windows are allowed.
  85 | **[`Preferences`](#preferences)** | Set and lock preferences.
  86 | **[`Preferences (Deprecated)`](#preferences-deprecated)** | Set and lock some preferences.
  87 | **[`PrimaryPassword`](#primarypassword)** | Require or prevent using a primary (formerly master) password.
  88 | **[`PromptForDownloadLocation`](#promptfordownloadlocation)** | Ask where to save each file before downloading.
  89 | **[`Proxy`](#proxy)** | Configure proxy settings.
  90 | **[`RequestedLocales`](#requestedlocales)** | Set the the list of requested locales for the application in order of preference.
  91 | **[`SanitizeOnShutdown` (All)](#sanitizeonshutdown-all)** | Clear all data on shutdown.
  92 | **[`SanitizeOnShutdown` (Selective)](#sanitizeonshutdown-selective)** | Clear data on shutdown.
  93 | **[`SearchBar`](#searchbar)** | Set whether or not search bar is displayed.
  94 | **[`SearchEngines`](#searchengines-this-policy-is-only-available-on-the-esr)** |
  95 | **[`SearchEngines -> Add`](#searchengines--add)** | Add new search engines.
  96 | **[`SearchEngines -> Default`](#searchengines--default)** | Set the default search engine.
  97 | **[`SearchEngines -> PreventInstalls`](#searchengines--preventinstalls)** | Prevent installing search engines from webpages.
  98 | **[`SearchEngines -> Remove`](#searchengines--remove)** | Hide built-in search engines.
  99 | **[`SearchSuggestEnabled`](#searchsuggestenabled)** | Enable search suggestions.
 100 | **[`SecurityDevices`](#securitydevices)** | Install PKCS #11 modules.
 101 | **[`ShowHomeButton`](#showhomebutton)** | Show the home button on the toolbar.
 102 | **[`SSLVersionMax`](#sslversionmax)** | Set and lock the maximum version of TLS.
 103 | **[`SSLVersionMin`](#sslversionmin)** | Set and lock the minimum version of TLS.
 104 | **[`SupportMenu`](#supportmenu)** | Add a menuitem to the help menu for specifying support information.
 105 | **[`UserMessaging`](#usermessaging)** | Don't show certain messages to the user.
 106 | **[`WebsiteFilter`](#websitefilter)** | Block websites from being visited.
 107 | **[`WindowsSSO`](#windowssso)** | Allow Windows single sign-on for Microsoft, work, and school accounts.
 108
 109 ### 3rdparty
 110
 111 Allow WebExtensions to configure policy. For more information, see [Adding policy support to your extension](https://extensionworkshop.com/documentation/enterprise/adding-policy-support-to-your-extension/).
 112
 113 ### AllowedDomainsForApps
 114
 115 Define domains allowed to access Google Workspace.
 116
 117 This policy is based on the [Chrome policy](https://chromeenterprise.google/policies/#AllowedDomainsForApps) of the same name.
 118
 119 If this policy is enabled, users can only access Google Workspace using accounts from the specified domains. If you want to allow Gmail, you can add ```consumer_accounts``` to the list.
 120
 121 **Compatibility:** Firefox 89, Firefox ESR 78.11\
 122 **CCK2 Equivalent:** N/A\
 123 **Preferences Affected:** N/A
 124
 125 #### Windows (GPO)
 126 ```
 127 Software\Policies\Mozilla\Firefox\AllowedDomainsForApps = "managedfirefox.com,example.com"
 128 ```
 129 #### Windows (Intune)
 130 OMA-URI:
 131 ```
 132 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AllowedDomainsForApps
 133 ```
 134 Value (string):
 135 ```
 136 <enabled/>
 137 <data id="AllowedDomainsForApps" value="managedfirefox.com,example.com"/>
 138 ```
 139 #### macOS
 140 ```
 141 <dict>
 142   <key>AllowedDomainsForApps</key>
 143   <string>managedfirefox.com,example.com</string>
 144 </dict>
 145 ```
 146 #### policies.json
 147 ```
 148 {
 149   "policies": {
 150     "AllowedDomainsForApps": "managedfirefox.com,example.com"
 151   }
 152 }
 153 ```
 154 ### AppAutoUpdate
 155
 156 Enable or disable **automatic** application update.
 157
 158 If set to true, application updates are installed without user approval within Firefox. The operating system might still require approval.
 159
 160 If set to false, application updates are downloaded but the user can choose when to install the update.
 161
 162 If you have disabled updates via `DisableAppUpdate`, this policy has no effect.
 163
 164 **Compatibility:** Firefox 75, Firefox ESR 68.7\
 165 **CCK2 Equivalent:** N/A\
 166 **Preferences Affected:** `app.update.auto`
 167
 168 #### Windows (GPO)
 169 ```
 170 Software\Policies\Mozilla\Firefox\AppAutoUpdate = 0x1 | 0x0
 171 ```
 172 #### Windows (Intune)
 173 OMA-URI:
 174 ```
 175 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AppAutoUpdate
 176 ```
 177 Value (string):
 178 ```
 179 <enabled/> or <disabled/>
 180 ```
 181 #### macOS
 182 ```
 183 <dict>
 184   <key>AppAutoUpdate</key>
 185   <true/> | <false/>
 186 </dict>
 187 ```
 188 #### policies.json
 189 ```
 190 {
 191   "policies": {
 192     "AppAutoUpdate": true | false
 193   }
 194 }
 195 ```
 196 ### AppUpdateURL
 197
 198 Change the URL for application update if you are providing Firefox updates from a custom update server.
 199
 200 **Compatibility:** Firefox 62, Firefox ESR 60.2\
 201 **CCK2 Equivalent:** N/A\
 202 **Preferences Affected:** `app.update.url`
 203
 204 #### Windows (GPO)
 205 ```
 206 Software\Policies\Mozilla\Firefox\AppUpdateURL = "https://yoursite.com"
 207 ```
 208 #### Windows (Intune)
 209 OMA-URI:
 210 ```
 211 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AppUpdateURL
 212 ```
 213 Value (string):
 214 ```
 215 <enabled/>
 216 <data id="AppUpdateURL" value="https://yoursite.com"/>
 217 ```
 218 #### macOS
 219 ```
 220 <dict>
 221   <key>AppUpdateURL</key>
 222   <string>https://yoursite.com</string>
 223 </dict>
 224 ```
 225 #### policies.json
 226 ```
 227 {
 228   "policies": {
 229     "AppUpdateURL": "https://yoursite.com"
 230   }
 231 }
 232 ```
 233 ### Authentication
 234
 235 Configure sites that support integrated authentication.
 236
 237 See [Integrated authentication](https://htmlpreview.github.io/?https://github.com/mdn/archived-content/blob/main/files/en-us/mozilla/integrated_authentication/raw.html) for more information.
 238
 239 `PrivateBrowsing` enables integrated authentication in private browsing.
 240
 241 **Compatibility:** Firefox 60, Firefox ESR 60 (AllowNonFQDN added in 62/60.2, AllowProxies added in 70/68.2, Locked added in 71/68.3, PrivateBrowsing added in 77/68.9)\
 242 **CCK2 Equivalent:** N/A\
 243 **Preferences Affected:** `network.negotiate-auth.trusted-uris`,`network.negotiate-auth.delegation-uris`,`network.automatic-ntlm-auth.trusted-uris`,`network.automatic-ntlm-auth.allow-non-fqdn`,`network.negotiate-auth.allow-non-fqdn`,`network.automatic-ntlm-auth.allow-proxies`,`network.negotiate-auth.allow-proxies`,`network.auth.private-browsing-sso`
 244
 245 #### Windows (GPO)
 246 ```
 247 Software\Policies\Mozilla\Firefox\Authentication\SPNEGO\1 = "mydomain.com"
 248 Software\Policies\Mozilla\Firefox\Authentication\SPNEGO\2 = "https://myotherdomain.com"
 249 Software\Policies\Mozilla\Firefox\Authentication\Delegated\1 = "mydomain.com"
 250 Software\Policies\Mozilla\Firefox\Authentication\Delegated\2 = "https://myotherdomain.com"
 251 Software\Policies\Mozilla\Firefox\Authentication\NTLM\1 = "mydomain.com"
 252 Software\Policies\Mozilla\Firefox\Authentication\NTLM\2 = "https://myotherdomain.com"
 253 Software\Policies\Mozilla\Firefox\Authentication\AllowNonFQDN\SPNEGO = 0x1 | 0x0
 254 Software\Policies\Mozilla\Firefox\Authentication\AllowNonFQDN\NTLM = 0x1 | 0x0
 255 Software\Policies\Mozilla\Firefox\Authentication\AllowProxies\SPNEGO = 0x1 | 0x0
 256 Software\Policies\Mozilla\Firefox\Authentication\AllowProxies\NTLM = 0x1 | 0x0
 257 Software\Policies\Mozilla\Firefox\Authentication\Locked = 0x1 | 0x0
 258 Software\Policies\Mozilla\Firefox\Authentication\PrivateBrowsing = 0x1 | 0x0
 259 ```
 260 #### Windows (Intune)
 261 OMA-URI:
 262 ```
 263 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_SPNEGO
 264 ```
 265 Value (string):
 266 ```
 267 <enabled/>
 268 <data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
 269 ```
 270 OMA-URI:
 271 ```
 272 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_Delegated
 273 ```
 274 Value (string):
 275 ```
 276 <enabled/>
 277 <data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
 278 ```
 279 OMA-URI:
 280 ```
 281 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_NTLM
 282 ```
 283 Value (string):
 284 ```
 285 <enabled/>
 286 <data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
 287 ```
 288 OMA-URI:
 289 ```
 290 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_AllowNonFQDN
 291 ```
 292 Value (string):
 293 ```
 294 <enabled/>
 295 <data id="Authentication_AllowNonFQDN_NTLM" value="true | false"/>
 296 <data id="Authentication_AllowNonFQDN_SPNEGO" value="true | false"/>
 297 ```
 298 OMA-URI:
 299 ```
 300 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_Locked
 301 ```
 302 Value (string):
 303 ```
 304 <enabled/> or <disabled/>
 305 ```
 306 OMA-URI:
 307 ```
 308 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_PrivateBrowsing
 309 ```
 310 Value (string):
 311 ```
 312 <enabled/> or <disabled/>
 313 ```
 314 #### macOS
 315 ```
 316 <dict>
 317   <key>Authentication</key>
 318   <dict>
 319     <key>SPNEGO</key>
 320     <array>
 321       <string>mydomain.com</string>
 322       <string>https://myotherdomain.com</string>
 323     </array>
 324     <key>Delegated</key>
 325     <array>
 326       <string>mydomain.com</string>
 327       <string>https://myotherdomain.com</string>
 328     </array>
 329     <key>NTLM</key>
 330     <array>
 331       <string>mydomain.com</string>
 332       <string>https://myotherdomain.com</string>
 333     </array>
 334     <key>AllowNonFQDN</key>
 335       <dict>
 336       <key>SPNEGO</key>
 337       <true/> | <false/>
 338       <key>NTLM</key>
 339       <true/> | <false/>
 340     </dict>
 341     <key>AllowProxies</key>
 342       <dict>
 343       <key>SPNEGO</key>
 344       <true/> | <false/>
 345       <key>NTLM</key>
 346       <true/> | <false/>
 347     </dict>
 348     <key>Locked</key>
 349     <true/> | <false/>
 350     <key>PrivateBrowsing</key>
 351     <true/> | <false/>
 352   </dict>
 353 </dict>
 354 ```
 355 #### policies.json
 356 ```
 357 {
 358   "policies": {
 359     "Authentication": {
 360       "SPNEGO": ["mydomain.com", "https://myotherdomain.com"],
 361       "Delegated": ["mydomain.com", "https://myotherdomain.com"],
 362       "NTLM": ["mydomain.com", "https://myotherdomain.com"],
 363       "AllowNonFQDN": {
 364         "SPNEGO": true | false,
 365         "NTLM": true | false
 366       },
 367       "AllowProxies": {
 368         "SPNEGO": true | false,
 369         "NTLM": true | false
 370       },
 371       "Locked": true | false,
 372       "PrivateBrowsing": true | false
 373     }
 374   }
 375 }
 376 ```
 377 ### AutoLaunchProtocolsFromOrigins
 378 Define a list of external protocols that can be used from listed origins without prompting the user. The origin is the scheme plus the hostname.
 379
 380 The syntax of this policy is exactly the same as the [Chrome AutoLaunchProtocolsFromOrigins policy](https://cloud.google.com/docs/chrome-enterprise/policies/?policy=AutoLaunchProtocolsFromOrigins) except that you can only use valid origins (not just hostnames). This also means that you cannot specify an asterisk for all origins.
 381
 382 The schema is:
 383 ```
 384 {
 385  "items": {
 386   "properties": {
 387    "allowed_origins": {
 388     "items": {
 389      "type": "string"
 390     },
 391     "type": "array"
 392    },
 393    "protocol": {
 394     "type": "string"
 395    }
 396   },
 397   "required": [
 398    "protocol",
 399    "allowed_origins"
 400   ],
 401   "type": "object"
 402  },
 403  "type": "array"
 404 }
 405 ```
 406 **Compatibility:** Firefox 90, Firefox ESR 78.12\
 407 **CCK2 Equivalent:** N/A\
 408 **Preferences Affected:** N/A
 409
 410 #### Windows (GPO)
 411 Software\Policies\Mozilla\Firefox\AutoLaunchProtocolsFromOrigins (REG_MULTI_SZ) =
 412 ```
 413 [
 414   {
 415     "protocol": "zoommtg",
 416     "allowed_origins": [
 417       "https://somesite.zoom.us"
 418     ]
 419   }
 420 ]
 421 ```
 422 #### Windows (Intune)
 423 OMA-URI:
 424 ```
 425 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AutoLaunchProtocolsFromOrigins
 426 ```
 427 Value (string):
 428 ```
 429 <enabled/>
 430 <data id="JSON" value='
 431 [
 432   {
 433     "protocol": "zoommtg",
 434     "allowed_origins": [
 435       "https://somesite.zoom.us"
 436     ]
 437   }
 438 ]'/>
 439 ```
 440 #### macOS
 441 ```
 442 <dict>
 443   <key>AutoLaunchProtocolsFromOrigins</key>
 444   <array>
 445     <dict>
 446       <key>protocol</key>
 447       <string>zoommtg</string>
 448       <key>allowed_origins</key>
 449       <array>
 450         <string>https://somesite.zoom.us</string>
 451       </array>
 452     </dict>
 453   </array>
 454 </dict>
 455 ```
 456 #### policies.json
 457 ```
 458 {
 459   "policies": {
 460     "AutoLaunchProtocolsFromOrigins": [{
 461       "protocol": "zoommtg",
 462       "allowed_origins": [
 463         "https://somesite.zoom.us"
 464       ]
 465     }]
 466   }
 467 }
 468 ```
 469 ### BackgroundAppUpdate
 470
 471 Enable or disable **automatic** application update **in the background**, when the application is not running.
 472
 473 If set to true, application updates may be installed (without user approval) in the background, even when the application is not running. The operating system might still require approval.
 474
 475 If set to false, the application will not try to install updates when the application is not running.
 476
 477 If you have disabled updates via `DisableAppUpdate` or disabled automatic updates via `AppAutoUpdate`, this policy has no effect.
 478
 479 **Compatibility:** Firefox 90 (Windows only)\
 480 **CCK2 Equivalent:** N/A\
 481 **Preferences Affected:** `app.update.background.enabled`
 482
 483 #### Windows (GPO)
 484 ```
 485 Software\Policies\Mozilla\Firefox\BackgroundAppUpdate = 0x1 | 0x0
 486 ```
 487 #### Windows (Intune)
 488 OMA-URI:
 489 ```
 490 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BackgroundAppUpdate
 491 ```
 492 Value (string):
 493 ```
 494 <enabled/> or <disabled/>
 495 ```
 496 #### macOS
 497 ```
 498 <dict>
 499   <key>BackgroundAppUpdate</key>
 500   <true/> | <false/>
 501 </dict>
 502 ```
 503 #### policies.json
 504 ```
 505 {
 506   "policies": {
 507     "BackgroundAppUpdate": true | false
 508   }
 509 }
 510 ```
 511 ### BlockAboutAddons
 512
 513 Block access to the Add-ons Manager (about:addons).
 514
 515 **Compatibility:** Firefox 60, Firefox ESR 60\
 516 **CCK2 Equivalent:** `disableAddonsManager`\
 517 **Preferences Affected:** N/A
 518
 519 #### Windows (GPO)
 520 ```
 521 Software\Policies\Mozilla\Firefox\BlockAboutAddons = 0x1 | 0x0
 522 ```
 523 #### Windows (Intune)
 524 OMA-URI:
 525 ```
 526 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutAddons
 527 ```
 528 Value (string):
 529 ```
 530 <enabled/> or <disabled/>
 531 ```
 532 #### macOS
 533 ```
 534 <dict>
 535   <key>BlockAboutAddons</key>
 536   <true/> | <false/>
 537 </dict>
 538 ```
 539 #### policies.json
 540 ```
 541 {
 542   "policies": {
 543     "BlockAboutAddons": true | false
 544   }
 545 }
 546 ```
 547 ### BlockAboutConfig
 548
 549 Block access to about:config.
 550
 551 **Compatibility:** Firefox 60, Firefox ESR 60\
 552 **CCK2 Equivalent:** `disableAboutConfig`\
 553 **Preferences Affected:** N/A
 554
 555 #### Windows (GPO)
 556 ```
 557 Software\Policies\Mozilla\Firefox\BlockAboutConfig = 0x1 | 0x0
 558 ```
 559 #### Windows (Intune)
 560 OMA-URI:
 561 ```
 562 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutConfig
 563 ```
 564 Value (string):
 565 ```
 566 <enabled/> or <disabled/>
 567 ```
 568 #### macOS
 569 ```
 570 <dict>
 571   <key>BlockAboutConfig</key>
 572   <true/> | <false/>
 573 </dict>
 574 ```
 575 #### policies.json
 576 ```
 577 {
 578   "policies": {
 579     "BlockAboutConfig": true | false
 580   }
 581 }
 582 ```
 583 ### BlockAboutProfiles
 584
 585 Block access to About Profiles (about:profiles).
 586
 587 **Compatibility:** Firefox 60, Firefox ESR 60\
 588 **CCK2 Equivalent:** `disableAboutProfiles`\
 589 **Preferences Affected:** N/A
 590
 591 #### Windows (GPO)
 592 ```
 593 Software\Policies\Mozilla\Firefox\BlockAboutProfiles = 0x1 | 0x0
 594 ```
 595 #### Windows (Intune)
 596 OMA-URI:
 597 ```
 598 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutProfiles
 599 ```
 600 Value (string):
 601 ```
 602 <enabled/> or <disabled/>
 603 ```
 604 #### macOS
 605 ```
 606 <dict>
 607   <key>BlockAboutProfiles</key>
 608   <true/> | <false/>
 609 </dict>
 610 ```
 611 #### policies.json
 612 ```
 613 {
 614   "policies": {
 615     "BlockAboutProfiles": true | false
 616   }
 617 }
 618 ```
 619 ### BlockAboutSupport
 620
 621 Block access to Troubleshooting Information (about:support).
 622
 623 **Compatibility:** Firefox 60, Firefox ESR 60\
 624 **CCK2 Equivalent:** `disableAboutSupport`\
 625 **Preferences Affected:** N/A
 626
 627 #### Windows (GPO)
 628 ```
 629 Software\Policies\Mozilla\Firefox\BlockAboutSupport = 0x1 | 0x0
 630 ```
 631 #### Windows (Intune)
 632 OMA-URI:
 633 ```
 634 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutSupport
 635 ```
 636 Value (string):
 637 ```
 638 <enabled/> or <disabled/>
 639 ```
 640 #### macOS
 641 ```
 642 <dict>
 643   <key>BlockAboutSupport</key>
 644   <true/> | <false/>
 645 </dict>
 646 ```
 647 #### policies.json
 648 ```
 649 {
 650   "policies": {
 651     "BlockAboutSupport": true | false
 652   }
 653 }
 654 ```
 655 ### Bookmarks
 656
 657 Note: [`ManagedBookmarks`](#managedbookmarks) is the new recommended way to add bookmarks. This policy will continue to be supported.
 658
 659 Add bookmarks in either the bookmarks toolbar or menu. Only `Title` and `URL` are required. If `Placement` is not specified, the bookmark will be placed on the toolbar. If `Folder` is specified, it is automatically created and bookmarks with the same folder name are grouped together.
 660
 661 If you want to clear all bookmarks set with this policy, you can set the value to an empty array (```[]```). This can be on Windows via the new Bookmarks (JSON) policy available with GPO and Intune.
 662
 663 **Compatibility:** Firefox 60, Firefox ESR 60\
 664 **CCK2 Equivalent:** `bookmarks.toolbar`,`bookmarks.menu`\
 665 **Preferences Affected:** N/A
 666
 667 #### Windows (GPO)
 668 ```
 669 Software\Policies\Mozilla\Firefox\Bookmarks\1\Title = "Example"
 670 Software\Policies\Mozilla\Firefox\Bookmarks\1\URL = "https://example.com"
 671 Software\Policies\Mozilla\Firefox\Bookmarks\1\Favicon = "https://example.com/favicon.ico"
 672 Software\Policies\Mozilla\Firefox\Bookmarks\1\Placement = "toolbar" | "menu"
 673 Software\Policies\Mozilla\Firefox\Bookmarks\1\Folder = "FolderName"
 674
 675 Software\Policies\Mozilla\Firefox\Bookmarks (REG_MULTI_SZ) =
 676 ```
 677 []
 678 ```
 679
 680 ```
 681 #### Windows (Intune)
 682 OMA-URI:
 683 ```
 684 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Bookmarks/Bookmark01
 685 ```
 686 Value (string):
 687 ```
 688 <enabled/>
 689 <data id="BookmarkTitle" value="Example"/>
 690 <data id="BookmarkURL" value="https://example.com"/>
 691 <data id="BookmarkFavicon" value="https://example.com/favicon.ico"/>
 692 <data id="BookmarkPlacement" value="toolbar | menu"/>
 693 <data id="BookmarkFolder" value="FolderName"/>
 694 ```
 695 OMA-URI:
 696 ```
 697 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Bookmarks
 698 ```
 699 Value (string):
 700 ```
 701 <enabled/>
 702 <data id="JSON" value='[]'/>
 703 ```
 704 #### macOS
 705 ```
 706 <dict>
 707   <key>Bookmarks</key>
 708   <array>
 709     <dict>
 710       <key>Title</key>
 711       <string>Example</string>
 712       <key>URL</key>
 713       <string>https://example.com</string>
 714       <key>Favicon</key>
 715       <string>https://example.com/favicon.ico</string>
 716       <key>Placement</key>
 717       <string>toolbar | menu</string>
 718       <key>Folder</key>
 719       <string>FolderName</string>
 720     </dict>
 721   </array>
 722 </dict>
 723 ```
 724 #### policies.json
 725 ```
 726 {
 727   "policies": {
 728     "Bookmarks": [
 729       {
 730         "Title": "Example",
 731         "URL": "https://example.com",
 732         "Favicon": "https://example.com/favicon.ico",
 733         "Placement": "toolbar" | "menu",
 734         "Folder": "FolderName"
 735       }
 736     ]
 737   }
 738 }
 739 ```
 740 ### CaptivePortal
 741 Enable or disable the detection of captive portals.
 742
 743 **Compatibility:** Firefox 67, Firefox ESR 60.7\
 744 **CCK2 Equivalent:** N/A\
 745 **Preferences Affected:** `network.captive-portal-service.enabled`
 746
 747 #### Windows (GPO)
 748 ```
 749 Software\Policies\Mozilla\Firefox\CaptivePortal = 0x1 | 0x0
 750 ```
 751 #### Windows (Intune)
 752 OMA-URI:
 753 ```
 754 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/CaptivePortal
 755 ```
 756 Value (string):
 757 ```
 758 <enabled/> or <disabled/>
 759 ```
 760 #### macOS
 761 ```
 762 <dict>
 763   <key>CaptivePortal</key>
 764   <true/> | <false/>
 765 </dict>
 766 ```
 767 #### policies.json
 768 ```
 769 {
 770   "policies": {
 771     "CaptivePortal": true | false
 772   }
 773 }
 774 ```
 775 ### Certificates
 776
 777 ### Certificates | ImportEnterpriseRoots
 778
 779 Trust certificates that have been added to the operating system certificate store by a user or administrator.
 780
 781 Note: This policy only works on Windows and macOS. For Linux discussion, see [bug 1600509](https://bugzilla.mozilla.org/show_bug.cgi?id=1600509).
 782
 783 See https://support.mozilla.org/kb/setting-certificate-authorities-firefox for more detail.
 784
 785 **Compatibility:** Firefox 60, Firefox ESR 60 (macOS support in Firefox 63, Firefox ESR 68)\
 786 **CCK2 Equivalent:** N/A\
 787 **Preferences Affected:** `security.enterprise_roots.enabled`
 788
 789 #### Windows (GPO)
 790 ```
 791 Software\Policies\Mozilla\Firefox\Certificates\ImportEnterpriseRoots = 0x1 | 0x0
 792 ```
 793 #### Windows (Intune)
 794 OMA-URI:
 795 ```
 796 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Certificates/Certificates_ImportEnterpriseRoots
 797 ```
 798 Value (string):
 799 ```
 800 <enabled/> or <disabled/>
 801 ```
 802 #### macOS
 803 ```
 804 <dict>
 805   <key>Certificates</key>
 806   <dict>
 807     <key>ImportEnterpriseRoots</key>
 808     <true/> | <false/>
 809   </dict>
 810 </dict>
 811 ```
 812 #### policies.json
 813 ```
 814 {
 815   "policies": {
 816     "Certificates": {
 817       "ImportEnterpriseRoots": true | false
 818     }
 819   }
 820 }
 821 ```
 822 ### Certificates | Install
 823
 824 Install certificates into the Firefox certificate store. If only a filename is specified, Firefox searches for the file in the following locations:
 825
 826 - Windows
 827   - %USERPROFILE%\AppData\Local\Mozilla\Certificates
 828   - %USERPROFILE%\AppData\Roaming\Mozilla\Certificates
 829 - macOS
 830   - /Library/Application Support/Mozilla/Certificates
 831   - ~/Library/Application Support/Mozilla/Certificates
 832 - Linux
 833   - /usr/lib/mozilla/certificates
 834   - /usr/lib64/mozilla/certificates
 835   - ~/.mozilla/certificates
 836
 837 Starting with Firefox 65, Firefox 60.5 ESR, a fully qualified path can be used, including UNC paths. You should use the native path style for your operating system. We do not support using %USERPROFILE% or other environment variables on Windows.
 838
 839 If you are specifying the path in the policies.json file on Windows, you need to escape your backslashes (`\\`) which means that for UNC paths, you need to escape both (`\\\\`). If you use group policy, you only need one backslash.
 840
 841 Certificates are installed using the trust string `CT,CT,`.
 842
 843 Binary (DER) and ASCII (PEM) certificates are both supported.
 844
 845 **Compatibility:** Firefox 64, Firefox ESR 64\
 846 **CCK2 Equivalent:** `certs.ca`\
 847 **Preferences Affected:** N/A
 848
 849 #### Windows (GPO)
 850 ```
 851 Software\Policies\Mozilla\Firefox\Certificates\Install\1 = "cert1.der"
 852 Software\Policies\Mozilla\Firefox\Certificates\Install\2 = "C:\Users\username\cert2.pem"
 853 ```
 854 #### Windows (Intune)
 855 OMA-URI:
 856 ```
 857 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Certificates/Certificates_Install
 858 ```
 859 Value (string):
 860 ```
 861 <enabled/>
 862 <data id="Certificates_Install" value="1&#xF000;cert1.der&#xF000;2&#xF000;C:\Users\username\cert2.pem"/>
 863 ```
 864 #### macOS
 865 ```
 866 <dict>
 867   <key>Certificates</key>
 868   <dict>
 869     <key>Install</key>
 870     <array>
 871       <string>cert1.der</string>
 872       <string>/Users/username/cert2.pem</string>
 873     </array>
 874   </dict>
 875 </dict>
 876 ```
 877 #### policies.json
 878 ```
 879 {
 880   "policies": {
 881     "Certificates": {
 882       "Install": ["cert1.der", "/home/username/cert2.pem"]
 883     }
 884   }
 885 }
 886 ```
 887 ### Cookies
 888 Configure cookie preferences.
 889
 890 `Allow` is a list of origins (not domains) where cookies are always allowed. You must include http or https.
 891
 892 `AllowSession` is a list of origins (not domains) where cookies are only allowed for the current session. You must include http or https.
 893
 894 `Block` is a list of origins (not domains) where cookies are always blocked. You must include http or https.
 895
 896 `Behavior` sets the default behavior for cookies based on the values below.
 897
 898 `BehaviorPrivateBrowsing` sets the default behavior for cookies in private browsing based on the values below.
 899
 900 | Value | Description
 901 | --- | ---
 902 | accept | Accept all cookies
 903 | reject-foreign | Reject third party cookies
 904 | reject | Reject all cookies
 905 | limit-foreign | Reject third party cookies for sites you haven't visited
 906 | reject-tracker | Reject cookies for known trackers (default)
 907 | reject-tracker-and-partition-foreign | Reject cookies for known trackers and partition third-party cookies (Total Cookie Protection) (default for private browsing)
 908
 909 `Default` (Deprecated) determines whether cookies are accepted at all.
 910
 911 `AcceptThirdParty` (Deprecated) determines how third-party cookies are handled.
 912
 913 `ExpireAtSessionEnd` determines when cookies expire.
 914
 915 `RejectTracker` (Deprecated) only rejects cookies for trackers.
 916
 917 `Locked` prevents the user from changing cookie preferences.
 918
 919 **Compatibility:** Firefox 60, Firefox ESR 60 (RejectTracker added in Firefox 63, AllowSession added in Firefox 79/78.1, Behavior added in Firefox 95/91.4)\
 920 **CCK2 Equivalent:** N/A\
 921 **Preferences Affected:** `network.cookie.cookieBehavior`, `network.cookie.cookieBehavior.pbmode`, `network.cookie.lifetimePolicy`
 922
 923 #### Windows (GPO)
 924 ```
 925 Software\Policies\Mozilla\Firefox\Cookies\Allow\1 = "https://example.com"
 926 Software\Policies\Mozilla\Firefox\Cookies\AllowSession\1 = "https://example.edu"
 927 Software\Policies\Mozilla\Firefox\Cookies\Block\1 = "https://example.org"
 928 Software\Policies\Mozilla\Firefox\Cookies\Default = 0x1 | 0x0
 929 Software\Policies\Mozilla\Firefox\Cookies\AcceptThirdParty = "always" | "never" | "from-visited"
 930 Software\Policies\Mozilla\Firefox\Cookies\ExpireAtSessionEnd = 0x1 | 0x0
 931 Software\Policies\Mozilla\Firefox\Cookies\RejectTracker = 0x1 | 0x0
 932 Software\Policies\Mozilla\Firefox\Cookies\Behavior = "accept" | "reject-foreign" | "reject" | "limit-foreign" | "reject-tracker" | "reject-tracker-and-partition-foreign"
 933 Software\Policies\Mozilla\Firefox\Cookies\BehaviorPrivateBrowsing = "accept" | "reject-foreign" | "reject" | "limit-foreign" | "reject-tracker" | "reject-tracker-and-partition-foreign"
 934 Software\Policies\Mozilla\Firefox\Cookies\Locked = 0x1 | 0x0
 935 ```
 936 #### Windows (Intune)
 937 OMA-URI:
 938 ```
 939 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Allow
 940 ```
 941 Value (string):
 942 ```
 943 <enabled/>
 944 <data id="Cookies_Allow" value="1&#xF000;https://example.com"/>
 945 ```
 946 OMA-URI:
 947 ```
 948 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_AllowSession
 949 ```
 950 Value (string):
 951 ```
 952 <enabled/>
 953 <data id="Cookies_Allow" value="1&#xF000;https://example.edu"/>
 954 ```
 955 OMA-URI:
 956 ```
 957 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Block
 958 ```
 959 Value (string):
 960 ```
 961 <enabled/>
 962 <data id="Cookies_Block" value="1&#xF000;https://example.org"/>
 963 ```
 964 OMA-URI:
 965 ```
 966 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Default
 967 ```
 968 Value (string):
 969 ```
 970 <enabled/> or <disabled/>
 971 ```
 972 OMA-URI:
 973 ```
 974 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_AcceptThirdParty
 975 ```
 976 Value (string):
 977 ```
 978 <enabled/>
 979 <data id="Cookies_AcceptThirdParty" value="always | never | from-visited"/>
 980 ```
 981 OMA-URI:
 982 ```
 983 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_ExpireAtSessionEnd
 984 ```
 985 Value (string):
 986 ```
 987 <enabled/> or <disabled/>
 988 ```
 989 OMA-URI:
 990 ```
 991 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_RejectTracker
 992 ```
 993 Value (string):
 994 ```
 995 <enabled/> or <disabled/>
 996 ```
 997 OMA-URI:
 998 ```
 999 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Locked
1000 ```
1001 Value (string):
1002 ```
1003 <enabled/> or <disabled/>
1004 ```
1005 OMA-URI:
1006 ```
1007 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Behavior
1008 ```
1009 Value (string):
1010 ```
1011 <enabled/>
1012 <data id="Cookies_Behavior" value="accept | reject-foreign | reject | limit-foreign | reject-tracker | reject-tracker-and-partition-foreign"/>
1013 ```
1014 OMA-URI:
1015 ```
1016 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_BehaviorPrivateBrowsing
1017 ```
1018 Value (string):
1019 ```
1020 <enabled/>
1021 <data id="Cookies_BehaviorPrivateBrowsing" value="accept | reject-foreign | reject | limit-foreign | reject-tracker | reject-tracker-and-partition-foreign"/>
1022 ```
1023 #### macOS
1024 ```
1025 <dict>
1026   <key>Cookies</key>
1027   <dict>
1028     <key>Allow</key>
1029     <array>
1030       <string>http://example.com</string>
1031     </array>
1032     <key>AllowSession</key>
1033     <array>
1034       <string>http://example.edu</string>
1035     </array>
1036     <key>Block</key>
1037     <array>
1038       <string>http://example.org</string>
1039     </array>
1040     <key>Default</key>
1041     <true/> | <false/>
1042     <key>AcceptThirdParty</key>
1043     <string>always | never | from-visited</string>
1044     <key>ExpireAtSessionEnd</key>
1045     <true/> | <false/>
1046     <key>RejectTracker</key>
1047     <true/> | <false/>
1048     <key>Locked</key>
1049     <true/> | <false/>
1050     <key>Behavior</key>
1051     <string>accept | reject-foreign | reject | limit-foreign | reject-tracker | reject-tracker-and-partition-foreign</string>
1052     <key>BehaviorPrivateBrowsing</key>
1053     <string>accept | reject-foreign | reject | limit-foreign | reject-tracker | reject-tracker-and-partition-foreign</string>
1054   </dict>
1055 </dict>
1056 ```
1057 #### policies.json
1058 ```
1059 {
1060   "policies": {
1061     "Cookies": {
1062       "Allow": ["http://example.org/"],
1063       "AllowSession": ["http://example.edu/"],
1064       "Block": ["http://example.edu/"],
1065       "Default": true | false,
1066       "AcceptThirdParty": "always" | "never" | "from-visited",
1067       "ExpireAtSessionEnd": true | false,
1068       "RejectTracker": true | false,
1069       "Locked": true | false,
1070       "Behavior": "accept" | "reject-foreign" | "reject" | "limit-foreign" | "reject-tracker" | "reject-tracker-and-partition-foreign",
1071       "BehaviorPrivateBrowsing": "accept" | "reject-foreign" | "reject" | "limit-foreign" | "reject-tracker" | "reject-tracker-and-partition-foreign",
1072     }
1073   }
1074 }
1075 ```
1076 ### DisableSetDesktopBackground
1077 Remove the "Set As Desktop Background..." menuitem when right clicking on an image.
1078
1079 **Compatibility:** Firefox 60, Firefox ESR 60\
1080 **CCK2 Equivalent:** `removeSetDesktopBackground`\
1081 **Preferences Affected:** N/A
1082
1083 #### Windows (GPO)
1084 ```
1085 Software\Policies\Mozilla\Firefox\DisableSetDesktopBackground = 0x1 | 0x0
1086 ```
1087 #### Windows (Intune)
1088 OMA-URI:
1089 ```
1090 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSetDesktopBackground
1091 ```
1092 Value (string):
1093 ```
1094 <enabled/> or <disabled/>
1095 ```
1096 #### macOS
1097 ```
1098 <dict>
1099   <key>DisableSetDesktopBackground</key>
1100   <true/> | <false/>
1101 </dict>
1102 ```
1103 #### policies.json
1104 ```
1105 {
1106   "policies": {
1107     "DisableSetDesktopBackground": true | false
1108   }
1109 }
1110 ```
1111 ### DisableMasterPasswordCreation
1112 Remove the master password functionality.
1113
1114 If this value is true, it works the same as setting [`PrimaryPassword`](#primarypassword) to false and removes the primary password functionality.
1115
1116 If both `DisableMasterPasswordCreation` and `PrimaryPassword` are used, `DisableMasterPasswordCreation` takes precedent.
1117
1118 **Compatibility:** Firefox 60, Firefox ESR 60\
1119 **CCK2 Equivalent:** `noMasterPassword`\
1120 **Preferences Affected:** N/A
1121
1122 #### Windows (GPO)
1123 ```
1124 Software\Policies\Mozilla\Firefox\DisableMasterPasswordCreation = 0x1 | 0x0
1125 ```
1126 #### Windows (Intune)
1127 OMA-URI:
1128 ```
1129 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableMasterPasswordCreation
1130 ```
1131 Value (string):
1132 ```
1133 <enabled/> or <disabled/>
1134 ```
1135 #### macOS
1136 ```
1137 <dict>
1138   <key>DisableMasterPasswordCreation</key>
1139   <true/> | <false/>
1140 </dict>
1141 ```
1142 #### policies.json
1143 ```
1144 {
1145   "policies": {
1146     "DisableMasterPasswordCreation": true | false
1147   }
1148 }
1149 ```
1150 ### DefaultDownloadDirectory
1151 Set the default download directory.
1152
1153 You can use ${home} for the native home directory.
1154
1155 **Compatibility:** Firefox 68, Firefox ESR 68\
1156 **CCK2 Equivalent:** N/A\
1157 **Preferences Affected:** `browser.download.dir`, `browser.download.folderList`
1158
1159 #### Windows (GPO)
1160 ```
1161 Software\Policies\Mozilla\Firefox\DefaultDownloadDirectory = "${home}\Downloads"
1162 ```
1163 #### Windows (Intune)
1164 OMA-URI:
1165 ```
1166 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DefaultDownloadDirectory
1167 ```
1168 Value (string):
1169 ```
1170 <enabled/>
1171 <data id="Preferences_String" value="${home}\Downloads"/>
1172 ```
1173 #### macOS
1174 ```
1175 <dict>
1176   <key>DefaultDownloadDirectory</key>
1177   <string>${home}/Downloads</string>
1178 </dict>
1179 ```
1180 #### policies.json (macOS and Linux)
1181 ```
1182 {
1183   "policies": {
1184     "DefaultDownloadDirectory": "${home}/Downloads"
1185 }
1186 ```
1187 #### policies.json (Windows)
1188 ```
1189 {
1190   "policies": {
1191     "DefaultDownloadDirectory": "${home}\\Downloads"
1192 }
1193 ```
1194 ### DisableAppUpdate
1195 Turn off application updates within Firefox.
1196
1197 **Compatibility:** Firefox 60, Firefox ESR 60\
1198 **CCK2 Equivalent:** `disableFirefoxUpdates`\
1199 **Preferences Affected:** N/A
1200
1201 #### Windows (GPO)
1202 ```
1203 Software\Policies\Mozilla\Firefox\DisableAppUpdate = 0x1 | 0x0
1204 ```
1205 #### Windows (Intune)
1206 OMA-URI:
1207 ```
1208 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableAppUpdate
1209 ```
1210 Value (string):
1211 ```
1212 <enabled/> or <disabled/>
1213 ```
1214 #### macOS
1215 ```
1216 <dict>
1217   <key>DisableAppUpdate</key>
1218   <true/> | <false/>
1219 </dict>
1220 ```
1221 #### policies.json
1222 ```
1223 {
1224   "policies": {
1225     "DisableAppUpdate": true | false
1226   }
1227 }
1228 ```
1229 ### DisableBuiltinPDFViewer
1230 Disable the built in PDF viewer. PDF files are downloaded and sent externally.
1231
1232 **Compatibility:** Firefox 60, Firefox ESR 60\
1233 **CCK2 Equivalent:** `disablePDFjs`\
1234 **Preferences Affected:** `pdfjs.disabled`
1235
1236 #### Windows (GPO)
1237 ```
1238 Software\Policies\Mozilla\Firefox\DisableBuiltinPDFViewer = 0x1 | 0x0
1239 ```
1240 #### Windows (Intune)
1241 OMA-URI:
1242 ```
1243 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableBuiltinPDFViewer
1244 ```
1245 Value (string):
1246 ```
1247 <enabled/> or <disabled/>
1248 ```
1249 #### macOS
1250 ```
1251 <dict>
1252   <key>DisableBuiltinPDFViewer</key>
1253   <true/> | <false/>
1254 </dict>
1255 ```
1256 #### policies.json
1257 ```
1258 {
1259   "policies": {
1260     "DisableBuiltinPDFViewer": true | false
1261   }
1262 }
1263 ```
1264 ### DisabledCiphers
1265 Disable specific cryptographic ciphers, listed below.
1266
1267 ```
1268 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
1269 TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
1270 TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256
1271 TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
1272 TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
1273 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
1274 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
1275 TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA
1276 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
1277 TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA
1278 TLS_DHE_RSA_WITH_AES_128_CBC_SHA
1279 TLS_DHE_RSA_WITH_AES_256_CBC_SHA
1280 TLS_RSA_WITH_AES_128_GCM_SHA256
1281 TLS_RSA_WITH_AES_256_GCM_SHA384
1282 TLS_RSA_WITH_AES_128_CBC_SHA
1283 TLS_RSA_WITH_AES_256_CBC_SHA
1284 TLS_RSA_WITH_3DES_EDE_CBC_SHA
1285 ```
1286
1287 **Preferences Affected:** `security.ssl3.ecdhe_rsa_aes_128_gcm_sha256`, `security.ssl3.ecdhe_ecdsa_aes_128_gcm_sha256`, `security.ssl3.ecdhe_ecdsa_chacha20_poly1305_sha256`, `security.ssl3.ecdhe_rsa_chacha20_poly1305_sha256`, `security.ssl3.ecdhe_ecdsa_aes_256_gcm_sha384`, `security.ssl3.ecdhe_rsa_aes_256_gcm_sha384`, `security.ssl3.ecdhe_rsa_aes_128_sha`, `security.ssl3.ecdhe_ecdsa_aes_128_sha`, `security.ssl3.ecdhe_rsa_aes_256_sha`, `security.ssl3.ecdhe_ecdsa_aes_256_sha`, `security.ssl3.dhe_rsa_aes_128_sha`, `security.ssl3.dhe_rsa_aes_256_sha`, `security.ssl3.rsa_aes_128_gcm_sha256`, `security.ssl3.rsa_aes_256_gcm_sha384`, `security.ssl3.rsa_aes_128_sha`, `security.ssl3.rsa_aes_256_sha`, `security.ssl3.deprecated.rsa_des_ede3_sha`
1288
1289 ---
1290 **Note:**
1291
1292 This policy was updated in Firefox 78 to allow enabling ciphers as well. Setting the value to true disables the cipher, setting the value to false enables the cipher. Previously setting the value to true or false disabled the cipher.
1293
1294 ---
1295 **Compatibility:** Firefox 76, Firefox ESR 68.8 (TLS_RSA_WITH_AES_128_GCM_SHA256 and TLS_RSA_WITH_AES_256_GCM_SHA384 were added in Firefox 78, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA38, TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, and TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 were added in Firefox 97 and Firefox 91.6)\
1296 **CCK2 Equivalent:** N/A\
1297 **Preferences Affected:** N/A
1298
1299 #### Windows (GPO)
1300 ```
1301 Software\Policies\Mozilla\Firefox\DisabledCiphers\CIPHER_NAME = 0x1 | 0x0
1302 ```
1303 #### Windows (Intune)
1304 OMA-URI:
1305 ```
1306 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_CIPHER_BANE
1307
1308 ```
1309 Value (string):
1310 ```
1311 <enabled/> or <disabled/>
1312 ```
1313 #### macOS
1314 ```
1315 <dict>
1316   <key>DisabledCiphers</key>
1317     <dict>
1318       <key>CIPHER_NAME</key>
1319     </dict>
1320 </dict>
1321 ```
1322 #### policies.json
1323 ```
1324 {
1325   "policies": {
1326     "DisabledCiphers": {
1327       "CIPHER_NAME": true | false,
1328     }
1329   }
1330 }
1331 ```
1332 ### DisableDefaultBrowserAgent
1333 Prevent the default browser agent from taking any actions. Only applicable to Windows; other platforms don’t have the agent.
1334
1335 The browser agent is a Windows-only scheduled task which runs in the background to collect and submit data about the browser that the user has set as their OS default. More information is available [here](https://firefox-source-docs.mozilla.org/toolkit/mozapps/defaultagent/default-browser-agent/index.html).
1336
1337 **Compatibility:** Firefox 75, Firefox ESR 68.7 (Windows only)\
1338 **CCK2 Equivalent:** N/A\
1339 **Preferences Affected:** N/A
1340
1341 #### Windows (GPO)
1342 ```
1343 Software\Policies\Mozilla\Firefox\DisableDefaultBrowserAgent = 0x1 | 0x0
1344 ```
1345 #### Windows (Intune)
1346 OMA-URI:
1347 ```
1348 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableDefaultBrowserAgent
1349 ```
1350 Value (string):
1351 ```
1352 <enabled/> or <disabled/>
1353 ```
1354 #### policies.json
1355 ```
1356 {
1357   "policies": {
1358     "DisableDefaultBrowserAgent": true | false
1359   }
1360 }
1361 ```
1362 ### DisableDeveloperTools
1363 Remove access to all developer tools.
1364
1365 **Compatibility:** Firefox 60, Firefox ESR 60\
1366 **CCK2 Equivalent:** `removeDeveloperTools`\
1367 **Preferences Affected:** `devtools.policy.disabled`
1368
1369 #### Windows (GPO)
1370 ```
1371 Software\Policies\Mozilla\Firefox\DisableDeveloperTools = 0x1 | 0x0`
1372 ```
1373 #### Windows (Intune)
1374 OMA-URI:
1375 ```
1376 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableDeveloperTools
1377 ```
1378 Value (string):
1379 ```
1380 <enabled/> or <disabled/>
1381 ```
1382 #### macOS
1383 ```
1384 <dict>
1385   <key>DisableDeveloperTools</key>
1386   <true/> | <false/>
1387 </dict>
1388 ```
1389 #### policies.json
1390 ```
1391 {
1392   "policies": {
1393     "DisableDeveloperTools": true | false
1394   }
1395 }
1396 ```
1397 ### DisableFeedbackCommands
1398 Disable the menus for reporting sites (Submit Feedback, Report Deceptive Site).
1399
1400 **Compatibility:** Firefox 60, Firefox ESR 60\
1401 **CCK2 Equivalent:** N/A\
1402 **Preferences Affected:** N/A
1403
1404 #### Windows (GPO)
1405 ```
1406 Software\Policies\Mozilla\Firefox\DisableFeedbackCommands = 0x1 | 0x0
1407 ```
1408 #### Windows (Intune)
1409 OMA-URI:
1410 ```
1411 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFeedbackCommands
1412 ```
1413 Value (string):
1414 ```
1415 <enabled/> or <disabled/>
1416 ```
1417 #### macOS
1418 ```
1419 <dict>
1420   <key>DisableFeedbackCommands</key>
1421   <true/> | <false/>
1422 </dict>
1423 ```
1424 #### policies.json
1425 ```
1426 {
1427   "policies": {
1428     "DisableFeedbackCommands": true | false
1429   }
1430 }
1431 ```
1432 ### DisableFirefoxAccounts
1433 Disable Firefox Accounts integration (Sync).
1434
1435 **Compatibility:** Firefox 60, Firefox ESR 60\
1436 **CCK2 Equivalent:** `disableSync`\
1437 **Preferences Affected:** `identity.fxaccounts.enabled`
1438
1439 #### Windows (GPO)
1440 ```
1441 Software\Policies\Mozilla\Firefox\DisableFirefoxAccounts = 0x1 | 0x0
1442 ```
1443 #### Windows (Intune)
1444 OMA-URI:
1445 ```
1446 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxAccounts
1447 ```
1448 Value (string):
1449 ```
1450 <enabled/> or <disabled/>
1451 ```
1452 #### macOS
1453 ```
1454 <dict>
1455   <key>DisableFirefoxAccounts</key>
1456   <true/> | <false/>
1457 </dict>
1458 ```
1459 #### policies.json
1460 ```
1461 {
1462   "policies": {
1463     "DisableFirefoxAccounts": true | false
1464   }
1465 }
1466 ```
1467 ### DisableFirefoxScreenshots
1468 Remove access to Firefox Screenshots.
1469
1470 **Compatibility:** Firefox 60, Firefox ESR 60\
1471 **CCK2 Equivalent:** N/A\
1472 **Preferences Affected:** `extensions.screenshots.disabled`
1473
1474 #### Windows (GPO)
1475 ```
1476 Software\Policies\Mozilla\Firefox\DisableFirefoxScreenshots = 0x1 | 0x0
1477 ```
1478 #### Windows (Intune)
1479 OMA-URI:
1480 ```
1481 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxScreenshots
1482 ```
1483 Value (string):
1484 ```
1485 <enabled/> or <disabled/>
1486 ```
1487 #### macOS
1488 ```
1489 <dict>
1490   <key>DisableFirefoxScreenshots</key>
1491   <true/> | <false/>
1492 </dict>
1493 ```
1494 #### policies.json
1495 ```
1496 {
1497   "policies": {
1498     "DisableFirefoxScreenshots": true | false
1499   }
1500 }
1501 ```
1502 ### DisableFirefoxStudies
1503 Disable Firefox studies (Shield).
1504
1505 **Compatibility:** Firefox 60, Firefox ESR 60\
1506 **CCK2 Equivalent:** N/A\
1507 **Preferences Affected:** N/A
1508
1509 #### Windows (GPO)
1510 ```
1511 Software\Policies\Mozilla\Firefox\DisableFirefoxStudies = 0x1 | 0x0
1512 ```
1513 #### Windows (Intune)
1514 OMA-URI:
1515 ```
1516 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxStudies
1517 ```
1518 Value (string):
1519 ```
1520 <enabled/> or <disabled/>
1521 ```
1522 #### macOS
1523 ```
1524 <dict>
1525   <key>DisableFirefoxStudies</key>
1526   <true/> | <false/>
1527 </dict>
1528 ```
1529 #### policies.json
1530 ```
1531 {
1532   "policies": {
1533     "DisableFirefoxStudies": true | false
1534   }
1535 }
1536 ```
1537 ### DisableForgetButton
1538 Disable the "Forget" button.
1539
1540 **Compatibility:** Firefox 60, Firefox ESR 60\
1541 **CCK2 Equivalent:** `disableForget`\
1542 **Preferences Affected:** N/A
1543
1544 #### Windows (GPO)
1545 ```
1546 Software\Policies\Mozilla\Firefox\DisableForgetButton = 0x1 | 0x0
1547 ```
1548 #### Windows (Intune)
1549 OMA-URI:
1550 ```
1551 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableForgetButton
1552 ```
1553 Value (string):
1554 ```
1555 <enabled/> or <disabled/>
1556 ```
1557 #### macOS
1558 ```
1559 <dict>
1560   <key>DisableForgetButton</key>
1561   <true/> | <false/>
1562 </dict>
1563 ```
1564 #### policies.json
1565 ```
1566 {
1567   "policies": {
1568     "DisableForgetButton": true | false
1569   }
1570 }
1571 ```
1572 ### DisableFormHistory
1573 Turn off saving information on web forms and the search bar.
1574
1575 **Compatibility:** Firefox 60, Firefox ESR 60\
1576 **CCK2 Equivalent:** `disableFormFill`\
1577 **Preferences Affected:** `browser.formfill.enable`
1578
1579 #### Windows (GPO)
1580 ```
1581 Software\Policies\Mozilla\Firefox\DisableFormHistory = 0x1 | 0x0
1582 ```
1583 #### Windows (Intune)
1584 OMA-URI:
1585 ```
1586 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFormHistory
1587 ```
1588 Value (string):
1589 ```
1590 <enabled/> or <disabled/>
1591 ```
1592 #### macOS
1593 ```
1594 <dict>
1595   <key>DisableFormHistory</key>
1596   <true/> | <false/>
1597 </dict>
1598 ```
1599 #### policies.json
1600 ```
1601 {
1602   "policies": {
1603     "DisableFormHistory": true | false
1604   }
1605 }
1606 ```
1607 ### DisablePasswordReveal
1608 Do not allow passwords to be shown in saved logins
1609
1610 **Compatibility:** Firefox 71, Firefox ESR 68.3\
1611 **CCK2 Equivalent:** N/A
1612 **Preferences Affected:** N/A
1613
1614 #### Windows (GPO)
1615 ```
1616 Software\Policies\Mozilla\Firefox\DisablePasswordReveal = 0x1 | 0x0
1617 ```
1618 #### Windows (Intune)
1619 OMA-URI:
1620 ```
1621 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePasswordReveal
1622 ```
1623 Value (string):
1624 ```
1625 <enabled/> or <disabled/>
1626 ```
1627 #### macOS
1628 ```
1629 <dict>
1630   <key>DisablePasswordReveal</key>
1631   <true/> | <false/>
1632 </dict>
1633 ```
1634 #### policies.json
1635 ```
1636 {
1637   "policies": {
1638     "DisablePasswordReveal": true | false
1639   }
1640 }
1641 ```
1642 ### DisablePocket
1643 Remove Pocket in the Firefox UI. It does not remove it from the new tab page.
1644
1645 **Compatibility:** Firefox 60, Firefox ESR 60\
1646 **CCK2 Equivalent:** `disablePocket`\
1647 **Preferences Affected:** `extensions.pocket.enabled`
1648
1649 #### Windows (GPO)
1650 ```
1651 Software\Policies\Mozilla\Firefox\DisablePocket = 0x1 | 0x0
1652 ```
1653 #### Windows (Intune)
1654 OMA-URI:
1655 ```
1656 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePocket
1657 ```
1658 Value (string):
1659 ```
1660 <enabled/> or <disabled/>
1661 ```
1662 #### macOS
1663 ```
1664 <dict>
1665   <key>DisablePocket</key>
1666   <true/> | <false/>
1667 </dict>
1668 ```
1669 #### policies.json
1670 ```
1671 {
1672   "policies": {
1673     "DisablePocket": true | false
1674   }
1675 }
1676 ```
1677 ### DisablePrivateBrowsing
1678 Remove access to private browsing.
1679
1680 **Compatibility:** Firefox 60, Firefox ESR 60\
1681 **CCK2 Equivalent:** `disablePrivateBrowsing`\
1682 **Preferences Affected:** N/A
1683
1684 #### Windows (GPO)
1685 ```
1686 Software\Policies\Mozilla\Firefox\DisablePrivateBrowsing = 0x1 | 0x0
1687 ```
1688 #### Windows (Intune)
1689 OMA-URI:
1690 ```
1691 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePrivateBrowsing
1692 ```
1693 Value (string):
1694 ```
1695 <enabled/> or <disabled/>
1696 ```
1697 #### macOS
1698 ```
1699 <dict>
1700   <key>DisablePrivateBrowsing</key>
1701   <true/> | <false/>
1702 </dict>
1703 ```
1704 #### policies.json
1705 ```
1706 {
1707   "policies": {
1708     "DisablePrivateBrowsing": true | false
1709   }
1710 }
1711 ```
1712 ### DisableProfileImport
1713 Disables the "Import data from another browser" option in the bookmarks window.
1714
1715 **Compatibility:** Firefox 60, Firefox ESR 60\
1716 **CCK2 Equivalent:** N/A\
1717 **Preferences Affected:** N/A
1718
1719 #### Windows (GPO)
1720 ```
1721 Software\Policies\Mozilla\Firefox\DisableProfileImport = 0x1 | 0x0
1722 ```
1723 #### Windows (Intune)
1724 OMA-URI:
1725 ```
1726 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableProfileImport
1727 ```
1728 Value (string):
1729 ```
1730 <enabled/> or <disabled/>
1731 ```
1732 #### macOS
1733 ```
1734 <dict>
1735   <key>DisableProfileImport</key>
1736   <true/> | <false/>
1737 </dict>
1738 ```
1739 #### policies.json
1740 ```
1741 {
1742   "policies": {
1743     "DisableProfileImport": true | false
1744   }
1745 }
1746 ```
1747 ### DisableProfileRefresh
1748 Disable the Refresh Firefox button on about:support and support.mozilla.org, as well as the prompt that displays offering to refresh Firefox when you haven't used it in a while.
1749
1750 **Compatibility:** Firefox 60, Firefox ESR 60\
1751 **CCK2 Equivalent:** `disableResetFirefox`\
1752 **Preferences Affected:** `browser.disableResetPrompt`
1753
1754 #### Windows (GPO)
1755 ```
1756 Software\Policies\Mozilla\Firefox\DisableProfileRefresh = 0x1 | 0x0
1757 ```
1758 #### Windows (Intune)
1759 OMA-URI:
1760 ```
1761 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableProfileRefresh
1762 ```
1763 Value (string):
1764 ```
1765 <enabled/> or <disabled/>
1766 ```
1767 #### macOS
1768 ```
1769 <dict>
1770   <key>DisableProfileRefresh</key>
1771   <true/> | <false/>
1772 </dict>
1773 ```
1774 #### policies.json
1775 ```
1776 {
1777   "policies": {
1778     "DisableProfileRefresh": true | false
1779   }
1780 }
1781 ```
1782 ### DisableSafeMode
1783 Disable safe mode within the browser.
1784
1785 On Windows, this disables safe mode via the command line as well.
1786
1787 **Compatibility:** Firefox 60, Firefox ESR 60 (Windows, macOS)\
1788 **CCK2 Equivalent:** `disableSafeMode`\
1789 **Preferences Affected:** N/A
1790
1791 #### Windows (GPO)
1792 ```
1793 Software\Policies\Mozilla\Firefox\DisableSafeMode = 0x1 | 0x0
1794 ```
1795 #### Windows (Intune)
1796 OMA-URI:
1797 ```
1798 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSafeMode
1799 ```
1800 Value (string):
1801 ```
1802 <enabled/> or <disabled/>
1803 ```
1804 #### macOS
1805 ```
1806 <dict>
1807   <key>DisableSafeMode</key>
1808   <true/> | <false/>
1809 </dict>
1810 ```
1811 #### policies.json
1812 ```
1813 {
1814   "policies": {
1815     "DisableSafeMode": true | false
1816   }
1817 }
1818 ```
1819 ### DisableSecurityBypass
1820 Prevent the user from bypassing security in certain cases.
1821
1822 `InvalidCertificate` prevents adding an exception when an invalid certificate is shown.
1823
1824 `SafeBrowsing` prevents selecting "ignore the risk" and visiting a harmful site anyway.
1825
1826 **Compatibility:** Firefox 60, Firefox ESR 60\
1827 **CCK2 Equivalent:** N/A\
1828 **Preferences Affected:** `security.certerror.hideAddException`, `browser.safebrowsing.allowOverride`
1829
1830 #### Windows (GPO)
1831 ```
1832 Software\Policies\Mozilla\Firefox\DisableSecurityBypass\InvalidCertificate = 0x1 | 0x0
1833 Software\Policies\Mozilla\Firefox\DisableSecurityBypass\SafeBrowsing = 0x1 | 0x0
1834 ```
1835 #### Windows (Intune)
1836 OMA-URI:
1837 ```
1838 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/P_DisableSecurityBypass_InvalidCertificate
1839 ```
1840 Value (string):
1841 ```
1842 <enabled/> or <disabled/>
1843 ```
1844 OMA-URI:
1845 ```
1846 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/P_DisableSecurityBypass_SafeBrowsing
1847 ```
1848 Value (string):
1849 ```
1850 <enabled/> or <disabled/>
1851 ```
1852
1853 #### macOS
1854 ```
1855 <dict>
1856   <key>DisableSecurityBypass</key>
1857   <dict>
1858     <key>InvalidCertificate</key>
1859     <true/> | <false/>
1860     <key>SafeBrowsing</key>
1861     <true/> | <false/>
1862   </dict>
1863 </dict>
1864 ```
1865 #### policies.json
1866 ```
1867 {
1868   "policies": {
1869     "DisableSecurityBypass": {
1870       "InvalidCertificate": true | false,
1871       "SafeBrowsing": true | false
1872     }
1873   }
1874 }
1875 ```
1876 ### DisableSystemAddonUpdate
1877 Prevent system add-ons from being installed or update.
1878
1879 **Compatibility:** Firefox 60, Firefox ESR 60\
1880 **CCK2 Equivalent:** N/A\
1881 **Preferences Affected:** N/A
1882
1883 #### Windows (GPO)
1884 ```
1885 Software\Policies\Mozilla\Firefox\DisableSystemAddonUpdate = 0x1 | 0x0
1886 ```
1887 #### Windows (Intune)
1888 OMA-URI:
1889 ```
1890 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSystemAddonUpdate
1891 ```
1892 Value (string):
1893 ```
1894 <enabled/> or <disabled/>
1895 ```
1896 #### macOS
1897 ```
1898 <dict>
1899   <key>DisableSystemAddonUpdate</key>
1900   <true/> | <false/>
1901 </dict>
1902 ```
1903 #### policies.json
1904 ```
1905 {
1906   "policies": {
1907     "DisableSystemAddonUpdate": true | false
1908   }
1909 }
1910 ```
1911 ### DisableTelemetry
1912 Prevent the upload of telemetry data.
1913
1914 As of Firefox 83 and Firefox ESR 78.5, local storage of telemetry data is disabled as well.
1915
1916 Mozilla recommends that you do not disable telemetry. Information collected through telemetry helps us build a better product for businesses like yours.
1917
1918 **Compatibility:** Firefox 60, Firefox ESR 60\
1919 **CCK2 Equivalent:** `disableTelemetry`\
1920 **Preferences Affected:** `datareporting.healthreport.uploadEnabled`, `datareporting.policy.dataSubmissionEnabled`, `toolkit.telemetry.archive.enabled`
1921
1922 #### Windows (GPO)
1923 ```
1924 Software\Policies\Mozilla\Firefox\DisableTelemetry = 0x1 | 0x0
1925 ```
1926 #### Windows (Intune)
1927 OMA-URI:
1928 ```
1929 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableTelemetry
1930 ```
1931 Value (string):
1932 ```
1933 <enabled/> or <disabled/>
1934 ```
1935 #### macOS
1936 ```
1937 <dict>
1938   <key>DisableTelemetry</key>
1939   <true/> | <false/>
1940 </dict>
1941 ```
1942 #### policies.json
1943 ```
1944 {
1945   "policies": {
1946     "DisableTelemetry": true | false
1947   }
1948 }
1949 ```
1950 ### DisplayBookmarksToolbar
1951 Set the initial state of the bookmarks toolbar. A user can still hide it and it will stay hidden.
1952
1953 **Compatibility:** Firefox 60, Firefox ESR 60\
1954 **CCK2 Equivalent:** `displayBookmarksToolbar`\
1955 **Preferences Affected:** N/A
1956
1957 #### Windows (GPO)
1958 ```
1959 Software\Policies\Mozilla\Firefox\DisplayBookmarksToolbar = 0x1 | 0x0
1960 ```
1961 #### Windows (Intune)
1962 OMA-URI:
1963 ```
1964 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisplayBookmarksToolbar
1965 ```
1966 Value (string):
1967 ```
1968 <enabled/> or <disabled/>
1969 ```
1970 #### macOS
1971 ```
1972 <dict>
1973   <key>DisplayBookmarksToolbar</key>
1974   <true/> | <false/>
1975 </dict>
1976 ```
1977 #### policies.json
1978 ```
1979 {
1980   "policies": {
1981     "DisplayBookmarksToolbar": true | false
1982   }
1983 }
1984 ```
1985 ### DisplayMenuBar
1986 Set the state of the menubar.
1987
1988 `always` means the menubar is shown and cannot be hidden.
1989
1990 `never` means the menubar is hidden and cannot be shown.
1991
1992 `default-on` means the menubar is on by default but can be hidden.
1993
1994 `default-off` means the menubar is off by default but can be shown.
1995
1996 **Compatibility:** Firefox 73, Firefox ESR 68.5 (Windows, some Linux)\
1997 **CCK2 Equivalent:** `displayMenuBar`\
1998 **Preferences Affected:** N/A
1999
2000 #### Windows (GPO)
2001 ```
2002 Software\Policies\Mozilla\Firefox\DisplayMenuBar = "always", "never", "default-on", "default-off"
2003 ```
2004 #### Windows (Intune)
2005 OMA-URI:
2006 ```
2007 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisplayMenuBar_Enum
2008 ```
2009 Value (string):
2010 ```
2011 <enabled/>
2012 <data id="DisplayMenuBar" value="always | never | default-on | default-off"/>
2013 ```
2014 #### macOS
2015 ```
2016 <dict>
2017   <key>DisplayMenuBar</key>
2018   <string>always | never | default-on | default-off</string>
2019 </dict>
2020 ```
2021 #### policies.json
2022 ```
2023 {
2024   "policies": {
2025     "DisplayMenuBar": "always", "never", "default-on", "default-off"
2026   }
2027 }
2028 ```
2029 ### DisplayMenuBar (Deprecated)
2030 Set the initial state of the menubar. A user can still hide it and it will stay hidden.
2031
2032 **Compatibility:** Firefox 60, Firefox ESR 60 (Windows, some Linux)\
2033 **CCK2 Equivalent:** `displayMenuBar`\
2034 **Preferences Affected:** N/A
2035
2036 #### Windows (GPO)
2037 ```
2038 Software\Policies\Mozilla\Firefox\DisplayMenuBar = 0x1 | 0x0
2039 ```
2040 #### macOS
2041 ```
2042 <dict>
2043   <key>DisplayMenuBar</key>
2044   <true/> | <false/>
2045 </dict>
2046 ```
2047 #### policies.json
2048 ```
2049 {
2050   "policies": {
2051     "DisplayMenuBar": true | false
2052   }
2053 }
2054 ```
2055 ### DNSOverHTTPS
2056 Configure DNS over HTTPS.
2057
2058 `Enabled` determines whether DNS over HTTPS is enabled
2059
2060 `ProviderURL` is a URL to another provider.
2061
2062 `Locked` prevents the user from changing DNS over HTTPS preferences.
2063
2064 `ExcludedDomains` excludes domains from DNS over HTTPS.
2065
2066 **Compatibility:** Firefox 63, Firefox ESR 68 (ExcludedDomains added in 75/68.7)\
2067 **CCK2 Equivalent:** N/A\
2068 **Preferences Affected:** `network.trr.mode`, `network.trr.uri`
2069
2070 #### Windows (GPO)
2071 ```
2072 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\Enabled = 0x1 | 0x0
2073 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\ProviderURL = "URL_TO_ALTERNATE_PROVIDER"
2074 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\Locked = 0x1 | 0x0
2075 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\ExcludedDomains\1 = "example.com"
2076 ```
2077 #### Windows (Intune)
2078 OMA-URI:
2079 ```
2080 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_Enabled
2081 ```
2082 Value (string):
2083 ```
2084 <enabled/> or <disabled/>
2085 ```
2086 OMA-URI:
2087 ```
2088 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_ProviderURL
2089 ```
2090 Value (string):
2091 ```
2092 <enabled/>
2093 <data id="String" value="URL_TO_ALTERNATE_PROVIDER"/>
2094 ```
2095 OMA-URI:
2096 ```
2097 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_Locked
2098 ```
2099 Value (string):
2100 ```
2101 <enabled/> or <disabled/>
2102 ```
2103 OMA-URI:
2104 ```
2105 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_ExcludedDomains
2106 ```
2107 Value (string):
2108 ```
2109 <enabled/>
2110 <data id="List" value="1&#xF000;example.com"/>
2111 ```
2112 #### macOS
2113 ```
2114 <dict>
2115   <key>DNSOverHTTPS</key>
2116   <dict>
2117     <key>Enabled</key>
2118     <true/> | <false/>
2119     <key>ProviderURL</key>
2120     <string>URL_TO_ALTERNATE_PROVIDER</string>
2121     <key>Locked</key>
2122     <true/> | <false/>
2123     <key>ExcludedDomains</key>
2124     <array>
2125       <string>example.com</string>
2126     </array>
2127   </dict>
2128 </dict>
2129 ```
2130 #### policies.json
2131 ```
2132 {
2133   "policies": {
2134     "DNSOverHTTPS": {
2135       "Enabled":  true | false,
2136       "ProviderURL": "URL_TO_ALTERNATE_PROVIDER",
2137       "Locked": true | false,
2138       "ExcludedDomains": ["example.com"]
2139     }
2140   }
2141 }
2142 ```
2143 ### DontCheckDefaultBrowser
2144 Don't check if Firefox is the default browser at startup.
2145
2146 **Compatibility:** Firefox 60, Firefox ESR 60\
2147 **CCK2 Equivalent:** `dontCheckDefaultBrowser`\
2148 **Preferences Affected:** `browser.shell.checkDefaultBrowser`
2149
2150 #### Windows (GPO)
2151 ```
2152 Software\Policies\Mozilla\Firefox\DontCheckDefaultBrowser = 0x1 | 0x0
2153 ```
2154 #### Windows (Intune)
2155 OMA-URI:
2156 ```
2157 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DontCheckDefaultBrowser
2158 ```
2159 Value (string):
2160 ```
2161 <enabled/> or <disabled/>
2162 ```
2163 #### macOS
2164 ```
2165 <dict>
2166   <key>DontCheckDefaultBrowser</key>
2167   <true/> | <false/>
2168 </dict>
2169 ```
2170 #### policies.json
2171 ```
2172 {
2173   "policies": {
2174     "DontCheckDefaultBrowser": true | false
2175   }
2176 }
2177 ```
2178 ### DownloadDirectory
2179 Set and lock the download directory.
2180
2181 You can use ${home} for the native home directory.
2182
2183 **Compatibility:** Firefox 68, Firefox ESR 68\
2184 **CCK2 Equivalent:** N/A\
2185 **Preferences Affected:** `browser.download.dir`, `browser.download.folderList`, `browser.download.useDownloadDir`
2186
2187 #### Windows (GPO)
2188 ```
2189 Software\Policies\Mozilla\Firefox\DownloadDirectory = "${home}\Downloads"
2190 ```
2191 #### Windows (Intune)
2192 OMA-URI:
2193 ```
2194 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DownloadDirectory
2195 ```
2196 Value (string):
2197 ```
2198 <enabled/>
2199 <data id="Preferences_String" value="${home}\Downloads"/>
2200 ```
2201 #### macOS
2202 ```
2203 <dict>
2204   <key>DownloadDirectory</key>
2205   <string>${home}/Downloads</string>
2206 </dict>
2207 ```
2208 #### policies.json (macOS and Linux)
2209 ```
2210 {
2211   "policies": {
2212     "DownloadDirectory": "${home}/Downloads"
2213 }
2214 ```
2215 #### policies.json (Windows)
2216 ```
2217 {
2218   "policies": {
2219     "DownloadDirectory": "${home}\\Downloads"
2220 }
2221 ```
2222 ### EnableTrackingProtection
2223 Configure tracking protection.
2224
2225 If this policy is not configured, tracking protection is not enabled by default in the browser, but it is enabled by default in private browsing and the user can change it.
2226
2227 If `Value` is set to false, tracking protection is disabled and locked in both the regular browser and private browsing.
2228
2229 If `Value` is set to true, tracking protection is enabled by default in both the regular browser and private browsing and the `Locked` value determines whether or not a user can change it.
2230
2231 If `Cryptomining` is set to true, cryptomining scripts on websites are blocked.
2232
2233 If `Fingerprinting` is set to true, fingerprinting scripts on websites are blocked.
2234
2235 `Exceptions` are origins for which tracking protection is not enabled.
2236
2237 **Compatibility:** Firefox 60, Firefox ESR 60 (Cryptomining and Fingerprinting added in 70/68.2, Exceptions added in 73/68.5)\
2238 **CCK2 Equivalent:** N/A\
2239 **Preferences Affected:** `privacy.trackingprotection.enabled`, `privacy.trackingprotection.pbmode.enabled`, `privacy.trackingprotection.cryptomining.enabled`, `privacy.trackingprotection.fingerprinting.enabled`
2240
2241 #### Windows (GPO)
2242 ```
2243 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Value = 0x1 | 0x0
2244 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Locked = 0x1 | 0x0
2245 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Cryptomining = 0x1 | 0x0
2246 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Fingerprinting = 0x1 | 0x0
2247 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Exceptions\1 = "https://example.com"
2248 ```
2249 #### Windows (Intune)
2250 OMA-URI:
2251 ```
2252 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/A_TrackingProtection_Value
2253 ```
2254 Value (string):
2255 ```
2256 <enabled/> or <disabled/>
2257 ```
2258 OMA-URI:
2259 ```
2260 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/B_TrackingProtection_Cryptomining
2261 ```
2262 Value (string):
2263 ```
2264 <enabled/> or <disabled/>
2265 ```
2266 OMA-URI:
2267 ```
2268 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/C_TrackingProtection_Fingerprinting
2269 ```
2270 Value (string):
2271 ```
2272 <enabled/> or <disabled/>
2273 ```
2274 OMA-URI:
2275 ```
2276 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/D_TrackingProtection_Exceptions
2277 ```
2278 Value (string):
2279 ```
2280 <data id="TrackingProtection_Exceptions" value="1&#xF000;https://example.com"/>
2281 ```
2282 OMA-URI:
2283 ```
2284 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/E_TrackingProtection_Locked
2285 ```
2286 Value (string):
2287 ```
2288 <enabled/> or <disabled/>
2289 ```
2290 #### macOS
2291 ```
2292 <dict>
2293   <key>EnableTrackingProtection</key>
2294   <dict>
2295     <key>Value</key>
2296     <true/> | <false/>
2297     <key>Locked</key>
2298     <true/> | <false/>
2299     <key>Cryptomining</key>
2300     <true/> | <false/>
2301     <key>Fingerprinting</key>
2302     <true/> | <false/>
2303     <key>Exceptions</key>
2304     <array>
2305       <string>https://example.com</string>
2306     </array>
2307   </dict>
2308 </dict>
2309 ```
2310 #### policies.json
2311 ```
2312 {
2313   "policies": {
2314     "EnableTrackingProtection": {
2315       "Value": true | false,
2316       "Locked": true | false,
2317       "Cryptomining": true | false,
2318       "Fingerprinting": true | false,
2319       "Exceptions": ["https://example.com"]
2320     }
2321   }
2322 }
2323 ```
2324 ### EncryptedMediaExtensions
2325 Enable or disable Encrypted Media Extensions and optionally lock it.
2326
2327 If `Enabled` is set to false, encrypted media extensions (like Widevine) are not downloaded by Firefox unless the user consents to installing them.
2328
2329 If `Locked` is set to true and `Enabled` is set to false, Firefox will not download encrypted media extensions (like Widevine) or ask the user to install them.
2330
2331 **Compatibility:** Firefox 77, Firefox ESR 68.9\
2332 **CCK2 Equivalent:** N/A\
2333 **Preferences Affected:** `media.eme.enabled`
2334
2335 #### Windows (GPO)
2336 ```
2337 Software\Policies\Mozilla\Firefox\EncryptedMediaExtensions\Enabled = 0x1 | 0x0
2338 Software\Policies\Mozilla\Firefox\EncryptedMediaExtensions\Locked = 0x1 | 0x0
2339 ```
2340 #### Windows (Intune)
2341 OMA-URI:
2342 ```
2343 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~EncryptedMediaExtensions/EncryptedMediaExtensions_Enabled
2344 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~EncryptedMediaExtensions/EncryptedMediaExtensions_Locked
2345 ```
2346 Value (string):
2347 ```
2348 <enabled/>or <disabled/>
2349 ```
2350 #### macOS
2351 ```
2352 <dict>
2353   <key>EncryptedMediaExtensions</key>
2354   <dict>
2355     <key>Enabled</key>
2356     <true/> | <false/>
2357     <key>Locked</key>
2358     <true/> | <false/>
2359   </dict>
2360 </dict>
2361 ```
2362 #### policies.json
2363 ```
2364 {
2365   "policies": {
2366     "EncryptedMediaExtensions": {
2367       "Enabled": true | false,
2368       "Locked": true | false
2369     }
2370   }
2371 }
2372 ```
2373 ### EnterprisePoliciesEnabled
2374 Enable policy support on macOS.
2375
2376 **Compatibility:** Firefox 63, Firefox ESR 60.3 (macOS only)\
2377 **CCK2 Equivalent:** N/A\
2378 **Preferences Affected:** N/A
2379
2380 #### macOS
2381 ```
2382 <dict>
2383   <key>EnterprisePoliciesEnabled</key>
2384   <true/>
2385 </dict>
2386 ```
2387 ### Extensions
2388 Control the installation, uninstallation and locking of extensions.
2389
2390 While this policy is not technically deprecated, it is recommended that you use the **[`ExtensionSettings`](#extensionsettings)** policy. It has the same functionality and adds more. It does not support native paths, though, so you'll have to use file:/// URLs.
2391
2392 `Install` is a list of URLs or native paths for extensions to be installed.
2393
2394 `Uninstall` is a list of extension IDs that should be uninstalled if found.
2395
2396 `Locked` is a list of extension IDs that the user cannot disable or uninstall.
2397
2398 **Compatibility:** Firefox 60, Firefox ESR 60\
2399 **CCK2 Equivalent:** `addons`\
2400 **Preferences Affected:** N/A
2401
2402 #### Windows (GPO)
2403 ```
2404 Software\Policies\Mozilla\Firefox\Extensions\Install\1 = "https://addons.mozilla.org/firefox/downloads/somefile.xpi"
2405 Software\Policies\Mozilla\Firefox\Extensions\Install\2 = "//path/to/xpi"
2406 Software\Policies\Mozilla\Firefox\Extensions\Uninstall\1 = "bad_addon_id@mozilla.org"
2407 Software\Policies\Mozilla\Firefox\Extensions\Locked\1 = "addon_id@mozilla.org"
2408 ```
2409 #### Windows (Intune)
2410 OMA-URI:
2411 ```
2412 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/Extensions_Install
2413 ```
2414 Value (string):
2415 ```
2416 <enabled/>
2417 <data id="Extensions" value="1&#xF000;https://addons.mozilla.org/firefox/downloads/somefile.xpi&#xF000;2&#xF000;//path/to/xpi"/>
2418 ```
2419 OMA-URI:
2420 ```
2421 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/Extensions_Uninstall
2422 ```
2423 Value (string):
2424 ```
2425 <enabled/>
2426 <data id="Extensions" value="1&#xF000;bad_addon_id@mozilla.org"/>
2427 ```
2428 OMA-URI:
2429 ```
2430 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/Extensions_Locked
2431 ```
2432 Value (string):
2433 ```
2434 <enabled/>
2435 <data id="Extensions" value="1&#xF000;addon_id@mozilla.org"/>
2436 ```
2437 #### macOS
2438 ```
2439 <dict>
2440   <key>Extensions</key>
2441   <dict>
2442     <key>Install</key>
2443     <array>
2444       <string>https://addons.mozilla.org/firefox/downloads/somefile.xpi</string>
2445       <string>//path/to/xpi</string>
2446     </array>
2447     <key>Uninstall</key>
2448     <array>
2449       <string>bad_addon_id@mozilla.org</string>
2450     </array>
2451     <key>Locked</key>
2452     <array>
2453       <string>addon_id@mozilla.org</string>
2454     </array>
2455   </dict>
2456 </dict>
2457 ```
2458 #### policies.json
2459 ```
2460 {
2461   "policies": {
2462     "Extensions": {
2463       "Install": ["https://addons.mozilla.org/firefox/downloads/somefile.xpi", "//path/to/xpi"],
2464       "Uninstall": ["bad_addon_id@mozilla.org"],
2465       "Locked":  ["addon_id@mozilla.org"]
2466     }
2467   }
2468 }
2469 ```
2470 ### ExtensionSettings
2471 Manage all aspects of extensions. This policy is based heavily on the [Chrome policy](https://dev.chromium.org/administrators/policy-list-3/extension-settings-full) of the same name.
2472
2473 This policy maps an extension ID to its configuration. With an extension ID, the configuration will be applied to the specified extension only. A default configuration can be set for the special ID "*", which will apply to all extensions that don't have a custom configuration set in this policy.
2474
2475 To obtain an extension ID, install the extension and go to about:support. You will see the ID in the Extensions section. I've also created an extension that makes it easy to find the ID of extensions on AMO. You can download it [here](https://github.com/mkaply/queryamoid/releases/tag/v0.1).
2476
2477 The configuration for each extension is another dictionary that can contain the fields documented below.
2478
2479 | Name | Description |
2480 | --- | --- |
2481 | `installation_mode` | Maps to a string indicating the installation mode for the extension. The valid strings are `allowed`,`blocked`,`force_installed`, and `normal_installed`.
2482 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`allowed` | Allows the extension to be installed by the user. This is the default behavior. There is no need for an install_url; it will automatically be allowed based on the ID.
2483 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`blocked`| Blocks installation of the extension and removes it from the device if already installed.
2484 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`force_installed`| The extension is automatically installed and can't be removed by the user. This option is not valid for the default configuration and requires an install_url.
2485 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`normal_installed`| The extension is automatically installed but can be disabled by the user. This option is not valid for the default configuration and requires an install_url.
2486 | `install_url`| Maps to a URL indicating where Firefox can download a force_installed or normal_installed extension.  If installing from the local file system, use a [```file:///``` URL](https://en.wikipedia.org/wiki/File_URI_scheme). If installing from the addons.mozilla.org, use the following URL (substituting SHORT_NAME from the URL on AMO), https://addons.mozilla.org/firefox/downloads/latest/SHORT_NAME/latest.xpi. Languages packs are available from https://releases.mozilla.org/pub/firefox/releases/VERSION/PLATFORM/xpi/LANGUAGE.xpi. If you need to update the extension, you can change the name of the extension and it will be automatically updated. Extensions installed from file URLs will additional be updated when their internal version changes.
2487 | `install_sources` | A list of sources from which installing extensions is allowed. **This is unnecessary if you are only allowing the installation of certain extensions by ID.** Each item in this list is an extension-style match pattern. Users will be able to easily install items from any URL that matches an item in this list. Both the location of the *.xpi file and the page where the download is started from (i.e.  the referrer) must be allowed by these patterns. This setting can be used only for the default configuration.
2488 | `allowed_types` | This setting whitelists the allowed types of extension/apps that can be installed in Firefox. The value is a list of strings, each of which should be one of the following: "extension", "theme", "dictionary", "locale" This setting can be used only for the default configuration.
2489 | `blocked_install_message` | This maps to a string specifying the error message to display to users if they're blocked from installing an extension. This setting allows you to append text to the generic error message displayed when the extension is blocked. This could be be used to direct users to your help desk, explain why a particular extension is blocked, or something else. This setting can be used only for the default configuration.
2490 | `restricted_domains` | An array of domains on which content scripts can't be run. This setting can be used only for the default configuration.
2491 | `updates_disabled` | (Firefox 89, Firefox ESR 78.11) Boolean that indicates whether or not to disable automatic updates for an individual extension.
2492
2493 **Compatibility:** Firefox 69, Firefox ESR 68.1 (As of Firefox 85, Firefox ESR 78.7, installing a theme makes it the default.)\
2494 **CCK2 Equivalent:** N/A\
2495 **Preferences Affected:** N/A
2496
2497 #### Windows (GPO)
2498 Software\Policies\Mozilla\Firefox\ExtensionSettings (REG_MULTI_SZ) =
2499 ```
2500 {
2501   "*": {
2502     "blocked_install_message": "Custom error message.",
2503     "install_sources": ["about:addons","https://addons.mozilla.org/"],
2504     "installation_mode": "blocked",
2505     "allowed_types": ["extension"]
2506   },
2507   "uBlock0@raymondhill.net": {
2508     "installation_mode": "force_installed",
2509     "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
2510   },
2511   "https-everywhere@eff.org": {
2512     "installation_mode": "allowed"
2513   }
2514 }
2515 ```
2516 #### Windows (Intune)
2517 OMA-URI:
2518 ```
2519 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/ExtensionSettings
2520 ```
2521 Value (string):
2522 ```
2523 <enabled/>
2524 <data id="ExtensionSettings" value='
2525 {
2526   "*": {
2527     "blocked_install_message": "Custom error message.",
2528     "install_sources": ["about:addons","https://addons.mozilla.org/"],
2529     "installation_mode": "blocked",
2530     "allowed_types": ["extension"]
2531   },
2532   "uBlock0@raymondhill.net": {
2533     "installation_mode": "force_installed",
2534     "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
2535   },
2536     "https-everywhere@eff.org": {
2537     "installation_mode": "allowed"
2538   }
2539 }'/>
2540 ```
2541 #### macOS
2542 ```
2543 <dict>
2544   <key>ExtensionSettings</key>
2545   <dict>
2546     <key>*</key>
2547     <dict>
2548       <key>blocked_install_message</key>
2549       <string>Custom error message.</string>
2550       <key>install_sources</key>
2551       <array>
2552         <string>about:addons</string>
2553         <string>https://addons.mozilla.org/</string>
2554       </array>
2555       <key>installation_mode</key>
2556       <string>blocked</string>
2557       <key>allowed_types</key>
2558       <array>
2559         <string>extension</string>
2560       </array>
2561     </dict>
2562     <key>uBlock0@raymondhill.net</key>
2563     <dict>
2564       <key>installation_mode</key>
2565        <string>force_installed</string>
2566       <key>install_url</key>
2567       <string>https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi</string>
2568     </dict>
2569     <key>https-everywhere@eff.org</key>
2570     <dict>
2571       <key>installation_mode</key>
2572        <string>allowed</string>
2573     </dict>
2574   </dict>
2575 </dict>
2576 ```
2577 #### policies.json
2578 ```
2579 {
2580   "policies": {
2581     "ExtensionSettings": {
2582       "*": {
2583         "blocked_install_message": "Custom error message.",
2584         "install_sources": ["about:addons","https://addons.mozilla.org/"],
2585         "installation_mode": "blocked",
2586         "allowed_types": ["extension"]
2587       },
2588       "uBlock0@raymondhill.net": {
2589         "installation_mode": "force_installed",
2590         "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
2591       },
2592       "https-everywhere@eff.org": {
2593         "installation_mode": "allowed"
2594       }
2595     }
2596   }
2597 }
2598 ```
2599 ### ExtensionUpdate
2600 Control extension updates.
2601
2602 **Compatibility:** Firefox 67, Firefox ESR 60.7\
2603 **CCK2 Equivalent:** N/A\
2604 **Preferences Affected:** `extensions.update.enabled`
2605
2606 #### Windows (GPO)
2607 ```
2608 Software\Policies\Mozilla\Firefox\ExtensionUpdate = 0x1 | 0x0
2609 ```
2610 #### Windows (Intune)
2611 OMA-URI:
2612 ```
2613 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/ExtensionUpdate
2614 ```
2615 Value (string):
2616 ```
2617 <enabled/> or <disabled/>
2618 ```
2619 #### macOS
2620 ```
2621 <dict>
2622   <key>ExtensionUpdate</key>
2623   <true/> | <false/>
2624 </dict>
2625 ```
2626 #### policies.json
2627 ```
2628 {
2629   "policies": {
2630     "ExtensionUpdate": true | false
2631   }
2632 }
2633 ```
2634 ### FirefoxHome
2635 Customize the Firefox Home page.
2636
2637 **Compatibility:** Firefox 68, Firefox ESR 68 (SponsoredTopSites and SponsoredPocket were added in Firefox 95, Firefox ESR 91.4)
2638 **CCK2 Equivalent:** N/A\
2639 **Preferences Affected:** `browser.newtabpage.activity-stream.showSearch`, `browser.newtabpage.activity-stream.feeds.topsites`, `browser.newtabpage.activity-stream.feeds.section.highlights`, `browser.newtabpage.activity-stream.feeds.section.topstories`, `browser.newtabpage.activity-stream.feeds.snippets`, `browser.newtabpage.activity-stream.showSponsoredTopSites`, `browser.newtabpage.activity-stream.showSponsored`
2640
2641 #### Windows (GPO)
2642 ```
2643 Software\Policies\Mozilla\Firefox\FirefoxHome\Search = 0x1 | 0x0
2644 Software\Policies\Mozilla\Firefox\FirefoxHome\TopSites = 0x1 | 0x0
2645 Software\Policies\Mozilla\Firefox\FirefoxHome\SponsoredTopSites = 0x1 | 0x0
2646 Software\Policies\Mozilla\Firefox\FirefoxHome\Highlights = 0x1 | 0x0
2647 Software\Policies\Mozilla\Firefox\FirefoxHome\Pocket = 0x1 | 0x0
2648 Software\Policies\Mozilla\Firefox\FirefoxHome\SponsoredPocket = 0x1 | 0x0
2649 Software\Policies\Mozilla\Firefox\FirefoxHome\Snippets = 0x1 | 0x0
2650 Software\Policies\Mozilla\Firefox\FirefoxHome\Locked = 0x1 | 0x0
2651 ```
2652 #### Windows (Intune)
2653 OMA-URI:
2654 ```
2655 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/CustomizeFirefoxHome
2656 ```
2657 Value (string):
2658 ```
2659 <enabled/>
2660 <data id="FirefoxHome_Search"  value="true | false"/>
2661 <data id="FirefoxHome_TopSites"  value="true | false"/>
2662 <data id="FirefoxHome_SponsoredTopSites"  value="true | false"/>
2663 <data id="FirefoxHome_Highlights"  value="true | false"/>
2664 <data id="FirefoxHome_Pocket"  value="true | false"/>
2665 <data id="FirefoxHome_SponsoredPocket"  value="true | false"/>
2666 <data id="FirefoxHome_Snippets"  value="true | false"/>
2667 <data id="FirefoxHome_Locked"  value="true | false"/>
2668 ```
2669 #### macOS
2670 ```
2671 <dict>
2672   <key>FirefoxHome</key>
2673   <dict>
2674     <key>Search</key>
2675     <true/> | <false/>
2676     <key>TopSites</key>
2677     <true/> | <false/>
2678     <key>SponsoredTopSites</key>
2679     <true/> | <false/>
2680     <key>Highlights</key>
2681     <true/> | <false/>
2682     <key>Pocket</key>
2683     <true/> | <false/>
2684     <key>SponsoredPocket</key>
2685     <true/> | <false/>
2686     <key>Snippets</key>
2687     <true/> | <false/>
2688     <key>Locked</key>
2689     <true/> | <false/>
2690   </dict>
2691 </dict>
2692 ```
2693 #### policies.json
2694 ```
2695 {
2696   "policies": {
2697     "FirefoxHome": {
2698       "Search": true | false,
2699       "TopSites": true | false,
2700       "SponsoredTopSites": true | false,
2701       "Highlights": true | false,
2702       "Pocket": true | false,
2703       "SponsoredPocket": true | false,
2704       "Snippets": true | false,
2705       "Locked": true | false
2706     }
2707   }
2708 }
2709 ```
2710 ### FlashPlugin (Deprecated)
2711 Configure the default Flash plugin policy as well as origins for which Flash is allowed.
2712
2713 `Allow` is a list of origins where Flash are allowed.
2714
2715 `Block` is a list of origins where Flash is not allowed.
2716
2717 `Default` determines whether or not Flash is allowed by default.
2718
2719 `Locked` prevents the user from changing Flash preferences.
2720
2721 **Compatibility:** Firefox 60, Firefox ESR 60\
2722 **CCK2 Equivalent:** `permissions.plugin`\
2723 **Preferences Affected:** `plugin.state.flash`
2724
2725 #### Windows (GPO)
2726 ```
2727 Software\Policies\Mozilla\Firefox\FlashPlugin\Allow\1 = "https://example.org"
2728 Software\Policies\Mozilla\Firefox\FlashPlugin\Block\1 = "https://example.edu"
2729 Software\Policies\Mozilla\Firefox\FlashPlugin\Default = 0x1 | 0x0
2730 Software\Policies\Mozilla\Firefox\FlashPlugin\Locked = 0x1 | 0x0
2731 ```
2732 #### Windows (Intune)
2733 OMA-URI:
2734 ```
2735 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Flash/FlashPlugin_Allow
2736 ```
2737 Value (string):
2738 ```
2739 <enabled/>
2740 <data id="Permissions" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
2741 ```
2742 OMA-URI:
2743 ```
2744 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Flash/FlashPlugin_Locked
2745 ```
2746 Value (string):
2747 ```
2748 <enabled/> or <disabled/>
2749 ```
2750 OMA-URI:
2751 ```
2752 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Flash/FlashPlugin_Default
2753 ```
2754 Value (string):
2755 ```
2756 <enabled/> or <disabled/>
2757 ```
2758 #### macOS
2759 ```
2760 <dict>
2761   <key>FlashPlugin</key>
2762   <dict>
2763     <key>Allow</key>
2764     <array>
2765       <string>http://example.org</string>
2766     </array>
2767     <key>Block</key>
2768     <array>
2769       <string>http://example.edu</string>
2770     </array>
2771     <key>Default</key>
2772     <true/> | <false/>
2773     <key>Locked</key>
2774     <true/> | <false/>
2775   </dict>
2776 </dict>
2777 ```
2778 #### policies.json
2779 ```
2780 {
2781   "policies": {
2782     "FlashPlugin": {
2783       "Allow": ["http://example.org/"],
2784       "Block": ["http://example.edu/"],
2785       "Default": true | false,
2786       "Locked": true | false
2787     }
2788   }
2789 }
2790 ```
2791 ### Handlers
2792 Configure default application handlers. This policy is based on the internal format of `handlers.json`.
2793
2794 You can configure handlers based on a mime type (`mimeTypes`), a file's extension (`extensions`), or a protocol (`schemes`).
2795
2796 Within each handler type, you specify the given mimeType/extension/scheme as a key and use the following subkeys to describe how it is handled.
2797
2798 | Name | Description |
2799 | --- | --- |
2800 | `action`| Can be either `saveToDisk`, `useHelperApp`, `useSystemDefault`.
2801 | `ask` | If `true`, the user is asked if what they want to do with the file. If `false`, the action is taken without user intervention.
2802 | `handlers` | An array of handlers with the first one being the default. If you don't want to have a default handler, use an empty object for the first handler. Choose between path or uriTemplate.
2803 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`name` | The display name of the handler (might not be used).
2804 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`path`| The native path to the executable to be used.
2805 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`uriTemplate`| A url to a web based application handler. The URL must be https and contain a %s to be used for substitution.
2806
2807 **Compatibility:** Firefox 78, Firefox ESR 78\
2808 **CCK2 Equivalent:** N/A\
2809 **Preferences Affected:** N/A
2810
2811 #### Windows (GPO)
2812 Software\Policies\Mozilla\Firefox\Handlers (REG_MULTI_SZ) =
2813 ```
2814 {
2815   "mimeTypes": {
2816     "application/msword": {
2817       "action": "useSystemDefault",
2818       "ask": true | false
2819     }
2820   },
2821   "schemes": {
2822     "mailto": {
2823       "action": "useHelperApp",
2824       "ask": true | false,
2825       "handlers": [{
2826         "name": "Gmail",
2827         "uriTemplate": "https://mail.google.com/mail/?extsrc=mailto&url=%s"
2828       }]
2829     }
2830   },
2831   "extensions": {
2832     "pdf": {
2833       "action": "useHelperApp",
2834       "ask": true | false,
2835       "handlers": [{
2836         "name": "Adobe Acrobat",
2837         "path": "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32.exe"
2838       }]
2839     }
2840   }
2841 }
2842 ```
2843 #### Windows (Intune)
2844 OMA-URI:
2845 ```
2846 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Handlers
2847 ```
2848 Value (string):
2849 ```
2850 <enabled/>
2851 <data id="Handlers" value='
2852 {
2853   "mimeTypes": {
2854     "application/msword": {
2855       "action": "useSystemDefault",
2856       "ask": true | false
2857     }
2858   },
2859   "schemes": {
2860     "mailto": {
2861       "action": "useHelperApp",
2862       "ask": true | false,
2863       "handlers": [{
2864         "name": "Gmail",
2865         "uriTemplate": "https://mail.google.com/mail/?extsrc=mailto&amp;url=%s"
2866       }]
2867     }
2868   },
2869   "extensions": {
2870     "pdf": {
2871       "action": "useHelperApp",
2872       "ask": true | false,
2873       "handlers": [{
2874         "name": "Adobe Acrobat",
2875         "path": "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32.exe"
2876       }]
2877     }
2878   }
2879 }
2880 '/>
2881 ```
2882 #### macOS
2883 ```
2884 <dict>
2885   <key>Handlers</key>
2886   <dict>
2887     <key>mimeTypes</key>
2888     <dict>
2889       <key>application/msword</key>
2890       <dict>
2891         <key>action</key>
2892         <string>useSystemDefault</string>
2893         <key>ask</key>
2894         <true/> | <false/>
2895       </dict>
2896     </dict>
2897     <key>schemes</key>
2898     <dict>
2899       <key>mailto</key>
2900       <dict>
2901         <key>action</key>
2902         <string>useHelperApp</string>
2903         <key>ask</key>
2904         <true/> | <false/>
2905         <key>handlers</key>
2906         <array>
2907           <dict>
2908             <key>name</key>
2909             <string>Gmail</string>
2910             <key>uriTemplate</key>
2911             <string>https://mail.google.com/mail/?extsrc=mailto&url=%s</string>
2912           </dict>
2913         </array>
2914       </dict>
2915     </dict>
2916     <key>extensions</key>
2917     <dict>
2918       <key>pdf</key>
2919       <dict>
2920         <key>action</key>
2921         <string>useHelperApp</string>
2922         <key>ask</key>
2923         <true/> | <false/>
2924         <key>handlers</key>
2925         <array>
2926           <dict>
2927             <key>name</key>
2928             <string>Adobe Acrobat</string>
2929             <key>path</key>
2930             <string>/System/Applications/Preview.app</string>
2931           </dict>
2932         </array>
2933       </dict>
2934     </dict>
2935   </dict>
2936 </dict>
2937 ```
2938 #### policies.json
2939 ```
2940 {
2941   "policies": {
2942     "Handlers": {
2943       "mimeTypes": {
2944         "application/msword": {
2945           "action": "useSystemDefault",
2946           "ask": false
2947         }
2948       },
2949       "schemes": {
2950         "mailto": {
2951           "action": "useHelperApp",
2952           "ask": true | false,
2953           "handlers": [{
2954             "name": "Gmail",
2955             "uriTemplate": "https://mail.google.com/mail/?extsrc=mailto&url=%s"
2956           }]
2957         }
2958       },
2959       "extensions": {
2960         "pdf": {
2961           "action": "useHelperApp",
2962           "ask": true | false,
2963           "handlers": [{
2964             "name": "Adobe Acrobat",
2965             "path": "/usr/bin/acroread"
2966           }]
2967         }
2968       }
2969     }
2970   }
2971 }
2972 ```
2973 ### HardwareAcceleration
2974 Control hardware acceleration.
2975
2976 **Compatibility:** Firefox 60, Firefox ESR 60\
2977 **CCK2 Equivalent:** N/A\
2978 **Preferences Affected:** `layers.acceleration.disabled`
2979
2980 #### Windows (GPO)
2981 ```
2982 Software\Policies\Mozilla\Firefox\HardwareAcceleration = 0x1 | 0x0
2983 ```
2984 #### Windows (Intune)
2985 OMA-URI:
2986 ```
2987 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/HardwareAcceleration
2988 ```
2989 Value (string):
2990 ```
2991 <enabled/> or <disabled/>
2992 ```
2993 #### macOS
2994 ```
2995 <dict>
2996   <key>HardwareAcceleration</key>
2997   <true/> | <false/>
2998 </dict>
2999 ```
3000 #### policies.json
3001 ```
3002 {
3003   "policies": {
3004     "HardwareAcceleration": true | false
3005   }
3006 }
3007 ```
3008 ### Homepage
3009 Configure the default homepage and how Firefox starts.
3010
3011 `URL` is the default homepage.
3012
3013 `Locked` prevents the user from changing homepage preferences.
3014
3015 `Additional` allows for more than one homepage.
3016
3017 `StartPage` is how Firefox starts. The choices are no homepage, the default homepage or the previous session.
3018
3019 With Firefox 78, an additional option as added for `Startpage`, `homepage-locked`. If this is value is set for the Startpage, the user will always get the homepage at startup and cannot choose to restore their session.
3020
3021 **Compatibility:** Firefox 60, Firefox ESR 60 (StartPage was added in Firefox 60, Firefox ESR 60.4, homepage-locked added in Firefox 78)\
3022 **CCK2 Equivalent:** `homePage`,`lockHomePage`\
3023 **Preferences Affected:** `browser.startup.homepage`, `browser.startup.page`
3024
3025 #### Windows (GPO)
3026 ```
3027 Software\Policies\Mozilla\Firefox\Homepage\URL = "https://example.com"
3028 Software\Policies\Mozilla\Firefox\Homepage\Locked = 0x1 | 0x0
3029 Software\Policies\Mozilla\Firefox\Homepage\Additional\1 = "https://example.org"
3030 Software\Policies\Mozilla\Firefox\Homepage\Additional\2 = "https://example.edu"
3031 Software\Policies\Mozilla\Firefox\Homepage\StartPage = "none" | "homepage" | "previous-session" | "homepage-locked"
3032 ```
3033 #### Windows (Intune)
3034 OMA-URI:
3035 ```
3036 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageURL
3037 ```
3038 Value (string):
3039 ```
3040 <enabled/>
3041
3042 <data id="HomepageURL" value="https://example.com"/>
3043 <data id="HomepageLocked" value="true | false"/>
3044 ```
3045 OMA-URI:
3046 ```
3047 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageAdditional
3048 ```
3049 Value (string):
3050 ```
3051 <enabled/>
3052
3053 <data id="HomepageAdditional" value="1&#xF000;http://example.org&#xF000;2&#xF000;http://example.edu"/>
3054 ```
3055 OMA-URI:
3056 ```
3057 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageStartPage
3058 ```
3059 Value (string):
3060 ```
3061 <enabled/>
3062
3063 <data id="StartPage" value="none | homepage | previous-session"/>
3064 ```
3065 #### macOS
3066 ```
3067 <dict>
3068   <key>Homepage</key>
3069   <dict>
3070     <key>URL</key>
3071     <string>http://example.com</string>
3072     <key>Locked</key>
3073     <true/> | <false/>
3074     <key>Additional</key>
3075     <array>
3076       <string>http://example.org</string>
3077       <string>http://example.edu</string>
3078     </array>
3079     <key>StartPage</key>
3080     <string>none | homepage | previous-session | homepage-locked</string>
3081   </dict>
3082 </dict>
3083 ```
3084 #### policies.json
3085 ```
3086 {
3087   "policies": {
3088     "Homepage": {
3089       "URL": "http://example.com/",
3090       "Locked": true | false,
3091       "Additional": ["http://example.org/",
3092                      "http://example.edu/"],
3093       "StartPage": "none" | "homepage" | "previous-session" | "homepage-locked"
3094     }
3095   }
3096 }
3097 ```
3098 ### InstallAddonsPermission
3099 Configure the default extension install policy as well as origins for extension installs are allowed. This policy does not override turning off all extension installs.
3100
3101 `Allow` is a list of origins where extension installs are allowed.
3102
3103 `Default` determines whether or not extension installs are allowed by default.
3104
3105 **Compatibility:** Firefox 60, Firefox ESR 60\
3106 **CCK2 Equivalent:** `permissions.install`\
3107 **Preferences Affected:** `xpinstall.enabled`
3108
3109 #### Windows (GPO)
3110 ```
3111 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Allow\1 = "https://example.org"
3112 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Allow\2 = "https://example.edu"
3113 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Default = 0x1 | 0x0
3114 ```
3115 #### Windows (Intune)
3116 OMA-URI:
3117 ```
3118 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Addons/InstallAddonsPermission_Allow
3119 ```
3120 Value (string):
3121 ```
3122 <enabled/>
3123 <data id="Permissions" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
3124 ```
3125 OMA-URI:
3126 ```
3127 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Addons/InstallAddonsPermission_Default
3128 ```
3129 Value (string):
3130 ```
3131 <enabled/>
3132 ```
3133 #### macOS
3134 ```
3135 <dict>
3136   <key>InstallAddonsPermission</key>
3137   <dict>
3138     <key>Allow</key>
3139     <array>
3140       <string>http://example.org</string>
3141       <string>http://example.edu</string>
3142     </array>
3143     <key>Default</key>
3144     <true/> | <false/>
3145   </dict>
3146 </dict>
3147 ```
3148 #### policies.json
3149 ```
3150 {
3151   "policies": {
3152     "InstallAddonsPermission": {
3153       "Allow": ["http://example.org/",
3154                 "http://example.edu/"],
3155       "Default": true | false
3156     }
3157   }
3158 }
3159 ```
3160 ### LegacyProfiles
3161 Disable the feature enforcing a separate profile for each installation.
3162
3163 If this policy set to true, Firefox will not try to create different profiles for installations of Firefox in different directories. This is the equivalent of the MOZ_LEGACY_PROFILES environment variable.
3164
3165 If this policy set to false, Firefox will create a new profile for each unique installation of Firefox.
3166
3167 This policy only work on Windows via GPO (not policies.json).
3168
3169 **Compatibility:** Firefox 70, Firefox ESR 68.2 (Windows only, GPO only)\
3170 **CCK2 Equivalent:** N/A\
3171 **Preferences Affected:** N/A
3172
3173 #### Windows (GPO)
3174 ```
3175 Software\Policies\Mozilla\Firefox\LegacyProfiles = = 0x1 | 0x0
3176 ```
3177 #### Windows (Intune)
3178 OMA-URI:
3179 ```
3180 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/LegacyProfiles
3181 ```
3182 Value (string):
3183 ```
3184 <enabled/> or <disabled/>
3185 ```
3186 ### LegacySameSiteCookieBehaviorEnabled
3187 Enable default legacy SameSite cookie behavior setting.
3188
3189 If this policy is set to true, it reverts all cookies to legacy SameSite behavior which means that cookies that don't explicitly specify a ```SameSite``` attribute are treated as if they were ```SameSite=None```.
3190
3191 **Compatibility:** Firefox 96\
3192 **CCK2 Equivalent:** N/A\
3193 **Preferences Affected:** `network.cookie.sameSite.laxByDefault`
3194
3195 #### Windows (GPO)
3196 ```
3197 Software\Policies\Mozilla\Firefox\LegacySameSiteCookieBehaviorEnabled = = 0x1 | 0x0
3198 ```
3199 #### Windows (Intune)
3200 OMA-URI:
3201 ```
3202 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/LegacySameSiteCookieBehaviorEnabled
3203 ```
3204 Value (string):
3205 ```
3206 <enabled/> or <disabled/>
3207 ```
3208 #### macOS
3209 ```
3210 <dict>
3211   <key>LegacySameSiteCookieBehaviorEnabled</key>
3212   <true/> | <false/>
3213 </dict>
3214 ```
3215 #### policies.json
3216 ```
3217 {
3218   "policies": {
3219     "LegacySameSiteCookieBehaviorEnabled": true | false
3220 }
3221 ```
3222 ### LegacySameSiteCookieBehaviorEnabledForDomainList
3223 Revert to legacy SameSite behavior for cookies on specified sites.
3224
3225 If this policy is set to true, cookies set for domains in this list will revert to legacy SameSite behavior which means that cookies that don't explicitly specify a ```SameSite``` attribute are treated as if they were ```SameSite=None```.
3226
3227 **Compatibility:** Firefox 96\
3228 **CCK2 Equivalent:** N/A\
3229 **Preferences Affected:** `network.cookie.sameSite.laxByDefault.disabledHosts`
3230
3231 #### Windows (GPO)
3232 ```
3233 Software\Policies\Mozilla\Firefox\LegacySameSiteCookieBehaviorEnabledForDomainList\1 = "example.org"
3234 Software\Policies\Mozilla\Firefox\LegacySameSiteCookieBehaviorEnabledForDomainList\2 = "example.edu"
3235 ```
3236 #### Windows (Intune)
3237 OMA-URI:
3238 ```
3239 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/LegacySameSiteCookieBehaviorEnabledForDomainList
3240 ```
3241 Value (string):
3242 ```
3243 <enabled/>
3244 <data id="LegacySameSiteCookieBehaviorEnabledForDomainList" value="1&#xF000;example.org&#xF000;2&#xF000;example.edu"/>
3245 ```
3246 #### macOS
3247 ```
3248 <dict>
3249   <key>LegacySameSiteCookieBehaviorEnabledForDomainList</key>
3250   <array>
3251     <string>example.org</string>
3252     <string>example.edu</string>
3253   </array>
3254 </dict>
3255 ```
3256 #### policies.json
3257 ```
3258 {
3259   "policies": {
3260     "LegacySameSiteCookieBehaviorEnabledForDomainList": ["example.org",
3261                                                          "example.edu"]
3262   }
3263 }
3264 ```
3265 ### LocalFileLinks
3266 Enable linking to local files by origin.
3267
3268 **Compatibility:** Firefox 68, Firefox ESR 68\
3269 **CCK2 Equivalent:** N/A\
3270 **Preferences Affected:** `capability.policy.localfilelinks.*`
3271
3272 #### Windows (GPO)
3273 ```
3274 Software\Policies\Mozilla\Firefox\LocalFileLinks\1 = "https://example.org"
3275 Software\Policies\Mozilla\Firefox\LocalFileLinks\2 = "https://example.edu"
3276 ```
3277 #### Windows (Intune)
3278 OMA-URI:
3279 ```
3280 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/LocalFileLinks
3281 ```
3282 Value (string):
3283 ```
3284 <enabled/>
3285 <data id="LocalFileLinks" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
3286 ```
3287 #### macOS
3288 ```
3289 <dict>
3290   <key>LocalFileLinks</key>
3291   <array>
3292     <string>http://example.org</string>
3293     <string>http://example.edu</string>
3294   </array>
3295 </dict>
3296 ```
3297 #### policies.json
3298 ```
3299 {
3300   "policies": {
3301     "LocalFileLinks": ["http://example.org/",
3302                        "http://example.edu/"]
3303   }
3304 }
3305 ```
3306 ### ManagedBookmarks
3307 Configures a list of bookmarks managed by an administrator that cannot be changed by the user.
3308
3309 The bookmarks are only added as a button on the personal toolbar. They are not in the bookmarks folder.
3310
3311 The syntax of this policy is exactly the same as the [Chrome ManagedBookmarks policy](https://cloud.google.com/docs/chrome-enterprise/policies/?policy=ManagedBookmarks). The schema is:
3312 ```
3313 {
3314  "items": {
3315   "id": "BookmarkType",
3316   "properties": {
3317    "children": {
3318     "items": {
3319      "$ref": "BookmarkType"
3320     },
3321     "type": "array"
3322    },
3323    "name": {
3324     "type": "string"
3325    },
3326    "toplevel_name": {
3327     "type": "string"
3328    },
3329    "url": {
3330     "type": "string"
3331    }
3332   },
3333   "type": "object"
3334  },
3335  "type": "array"
3336 }
3337 ```
3338 **Compatibility:** Firefox 83, Firefox ESR 78.5\
3339 **CCK2 Equivalent:** N/A\
3340 **Preferences Affected:** N/A
3341
3342 #### Windows (GPO)
3343 Software\Policies\Mozilla\Firefox\ManagedBookmarks (REG_MULTI_SZ) =
3344 ```
3345 [
3346   {
3347     "toplevel_name": "My managed bookmarks folder"
3348   },
3349   {
3350     "url": "example.com",
3351     "name": "Example"
3352   },
3353   {
3354     "name": "Mozilla links",
3355     "children": [
3356       {
3357         "url": "https://mozilla.org",
3358         "name": "Mozilla.org"
3359       },
3360       {
3361         "url": "https://support.mozilla.org/",
3362         "name": "SUMO"
3363       }
3364     ]
3365   }
3366 ]
3367 ```
3368 #### Windows (Intune)
3369 OMA-URI:
3370 ```
3371 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/ManagedBookmarks
3372 ```
3373 Value (string):
3374 ```
3375 <enabled/>
3376 <data id="JSON" value='
3377 [
3378   {
3379     "toplevel_name": "My managed bookmarks folder"
3380   },
3381   {
3382     "url": "example.com",
3383     "name": "Example"
3384   },
3385   {
3386     "name": "Mozilla links",
3387     "children": [
3388       {
3389         "url": "https://mozilla.org",
3390         "name": "Mozilla.org"
3391       },
3392       {
3393         "url": "https://support.mozilla.org/",
3394         "name": "SUMO"
3395       }
3396     ]
3397   }
3398 ]'/>
3399 ```
3400 #### macOS
3401 ```
3402 <dict>
3403   <key>ManagedBookmarks</key>
3404   <array>
3405     <dict>
3406       <key>toplevel_name</key>
3407       <string>My managed bookmarks folder</string>
3408       <dict>
3409         <key>url</key>
3410         <string>example.com</string>
3411         <key>name</key>
3412         <string>Example</string>
3413       </dict>
3414       <dict>
3415       <key>name</key>
3416       <string>Mozilla links</string>
3417       <key>children</key>
3418       <array>
3419         <dict>
3420           <key>url</key>
3421           <string>https://mozilla.org</string>
3422           <key>name</key>
3423           <string>Mozilla</string>
3424         </dict>
3425         <dict>
3426           <key>url</key>
3427           <string>https://support.mozilla.org/</string>
3428           <key>name</key>
3429           <string>SUMO</string>
3430         </dict>
3431       </array>
3432     </dict>
3433   </array>
3434 </dict>
3435 ```
3436 #### policies.json
3437 ```
3438 {
3439   "policies": {
3440     "ManagedBookmarks": [
3441       {
3442         "toplevel_name": "My managed bookmarks folder"
3443       },
3444       {
3445         "url": "example.com",
3446         "name": "Example"
3447       },
3448       {
3449         "name": "Mozilla links",
3450         "children": [
3451           {
3452             "url": "https://mozilla.org",
3453             "name": "Mozilla.org"
3454           },
3455           {
3456             "url": "https://support.mozilla.org/",
3457             "name": "SUMO"
3458           }
3459         ]
3460       }
3461     ]
3462   }
3463 }
3464 ```
3465 ### ManualAppUpdateOnly
3466
3467 Switch to manual updates only.
3468
3469 If this policy is enabled:
3470  1. The user will never be prompted to install updates
3471  2. Firefox will not check for updates in the background, though it will check automatically when an update UI is displayed (such as the one in the About dialog). This check will be used to show "Update to version X" in the UI, but will not automatically download the update or prompt the user to update in any other way.
3472  3. The update UI will work as expected, unlike when using DisableAppUpdate.
3473
3474 This policy is primarily intended for advanced end users, not for enterprises.
3475
3476 **Compatibility:** Firefox 87\
3477 **CCK2 Equivalent:** N/A\
3478 **Preferences Affected:** N/A
3479
3480 #### policies.json
3481 ```
3482 {
3483   "policies": {
3484     "ManualAppUpdateOnly": true | false
3485   }
3486 }
3487 ```
3488 ### NetworkPrediction
3489 Enable or disable network prediction (DNS prefetching).
3490
3491 **Compatibility:** Firefox 67, Firefox ESR 60.7\
3492 **CCK2 Equivalent:** N/A\
3493 **Preferences Affected:** `network.dns.disablePrefetch`, `network.dns.disablePrefetchFromHTTPS`
3494
3495 #### Windows (GPO)
3496 ```
3497 Software\Policies\Mozilla\Firefox\NetworkPrediction = 0x1 | 0x0
3498 ```
3499 #### Windows (Intune)
3500 OMA-URI:
3501 ```
3502 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NetworkPrediction
3503 ```
3504 Value (string):
3505 ```
3506 <enabled/> or <disabled/>
3507 ```
3508 #### macOS
3509 ```
3510 <dict>
3511   <key>NetworkPrediction</key>
3512   <true/> | <false/>
3513 </dict>
3514 ```
3515 #### policies.json
3516 ```
3517 {
3518   "policies": {
3519     "NetworkPrediction": true | false
3520 }
3521 ```
3522 ### NewTabPage
3523 Enable or disable the New Tab page.
3524
3525 **Compatibility:** Firefox 68, Firefox ESR 68\
3526 **CCK2 Equivalent:** N/A\
3527 **Preferences Affected:** `browser.newtabpage.enabled`
3528
3529 #### Windows (GPO)
3530 ```
3531 Software\Policies\Mozilla\Firefox\NewTabPage = 0x1 | 0x0
3532 ```
3533 #### Windows (Intune)
3534 OMA-URI:
3535 ```
3536 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NewTabPage
3537 ```
3538 Value (string):
3539 ```
3540 <enabled/> or <disabled/>
3541 ```
3542 #### macOS
3543 ```
3544 <dict>
3545   <key>NewTabPage</key>
3546   <true/> | <false/>
3547 </dict>
3548 ```
3549 #### policies.json
3550 ```
3551 {
3552   "policies": {
3553     "NewTabPage": true | false
3554 }
3555 ```
3556 ### NoDefaultBookmarks
3557 Disable the creation of default bookmarks.
3558
3559 This policy is only effective if the user profile has not been created yet.
3560
3561 **Compatibility:** Firefox 60, Firefox ESR 60\
3562 **CCK2 Equivalent:** `removeDefaultBookmarks`\
3563 **Preferences Affected:** N/A
3564
3565 #### Windows (GPO)
3566 ```
3567 Software\Policies\Mozilla\Firefox\NoDefaultBookmarks = 0x1 | 0x0
3568 ```
3569 #### Windows (Intune)
3570 OMA-URI:
3571 ```
3572 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NoDefaultBookmarks
3573 ```
3574 Value (string):
3575 ```
3576 <enabled/> or <disabled/>
3577 ```
3578 #### macOS
3579 ```
3580 <dict>
3581   <key>NoDefaultBookmarks</key>
3582   <true/> | <false/>
3583 </dict>
3584 ```
3585 #### policies.json
3586 ```
3587 {
3588   "policies": {
3589     "NoDefaultBookmarks": true | false
3590   }
3591 }
3592 ```
3593 ### OfferToSaveLogins
3594 Control whether or not Firefox offers to save passwords.
3595
3596 **Compatibility:** Firefox 60, Firefox ESR 60\
3597 **CCK2 Equivalent:** `dontRememberPasswords`\
3598 **Preferences Affected:** `signon.rememberSignons`
3599
3600 #### Windows (GPO)
3601 ```
3602 Software\Policies\Mozilla\Firefox\OfferToSaveLogins = 0x1 | 0x0
3603 ```
3604 #### Windows (Intune)
3605 OMA-URI:
3606 ```
3607 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OfferToSaveLogins
3608 ```
3609 Value (string):
3610 ```
3611 <enabled/> or <disabled/>
3612 ```
3613 #### macOS
3614 ```
3615 <dict>
3616   <key>OfferToSaveLogins</key>
3617   <true/> | <false/>
3618 </dict>
3619 ```
3620 #### policies.json
3621 ```
3622 {
3623   "policies": {
3624     "OfferToSaveLogins": true | false
3625   }
3626 }
3627 ```
3628 ### OfferToSaveLoginsDefault
3629 Sets the default value of signon.rememberSignons without locking it.
3630
3631 **Compatibility:** Firefox 70, Firefox ESR 60.2\
3632 **CCK2 Equivalent:** `dontRememberPasswords`\
3633 **Preferences Affected:** `signon.rememberSignons`
3634
3635 #### Windows (GPO)
3636 ```
3637 Software\Policies\Mozilla\Firefox\OfferToSaveLoginsDefault = 0x1 | 0x0
3638 ```
3639 #### Windows (Intune)
3640 OMA-URI:
3641 ```
3642 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OfferToSaveLoginsDefault
3643 ```
3644 Value (string):
3645 ```
3646 <enabled/> or <disabled/>
3647 ```
3648 #### macOS
3649 ```
3650 <dict>
3651   <key>OfferToSaveLoginsDefault</key>
3652   <true/> | <false/>
3653 </dict>
3654 ```
3655 #### policies.json
3656 ```
3657 {
3658   "policies": {
3659     "OfferToSaveLoginsDefault": true | false
3660   }
3661 }
3662 ```
3663 ### OverrideFirstRunPage
3664 Override the first run page. If the value is an empty string (""), the first run page is not displayed.
3665
3666 Starting with Firefox 83, Firefox ESR 78.5, you can also specify multiple URLS separated by a vertical bar (|).
3667
3668 **Compatibility:** Firefox 60, Firefox ESR 60\
3669 **CCK2 Equivalent:** `welcomePage`,`noWelcomePage`\
3670 **Preferences Affected:** `startup.homepage_welcome_url`
3671
3672 #### Windows (GPO)
3673 ```
3674 Software\Policies\Mozilla\Firefox\OverrideFirstRunPage = "http://example.org"
3675 ```
3676 #### Windows (Intune)
3677 OMA-URI:
3678 ```
3679 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OverrideFirstRunPage
3680 ```
3681 Value (string):
3682 ```
3683 <enabled/>
3684 <data id="OverridePage" value="https://example.com"/>
3685 ```
3686 #### macOS
3687 ```
3688 <dict>
3689   <key>OverrideFirstRunPage</key>
3690   <string>http://example.org</string>
3691 </dict>
3692 ```
3693 #### policies.json
3694 ```
3695 {
3696   "policies": {
3697     "OverrideFirstRunPage": "http://example.org"
3698   }
3699 }
3700 ```
3701 ### OverridePostUpdatePage
3702 Override the upgrade page. If the value is an empty string (""), no extra pages are displayed when Firefox is upgraded.
3703
3704 **Compatibility:** Firefox 60, Firefox ESR 60\
3705 **CCK2 Equivalent:** `upgradePage`,`noUpgradePage`\
3706 **Preferences Affected:** `startup.homepage_override_url`
3707
3708 #### Windows (GPO)
3709 ```
3710 Software\Policies\Mozilla\Firefox\OverridePostUpdatePage = "http://example.org"
3711 ```
3712 #### Windows (Intune)
3713 OMA-URI:
3714 ```
3715 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OverridePostUpdatePage
3716 ```
3717 Value (string):
3718 ```
3719 <enabled/>
3720 <data id="OverridePage" value="https://example.com"/>
3721 ```
3722 #### macOS
3723 ```
3724 <dict>
3725   <key>OverridePostUpdatePage</key>
3726   <string>http://example.org</string>
3727 </dict>
3728 ```
3729 #### policies.json
3730 ```
3731 {
3732   "policies": {
3733     "OverridePostUpdatePage": "http://example.org"
3734   }
3735 }
3736 ```
3737 ### PasswordManagerEnabled
3738 Remove access to the password manager via preferences and blocks about:logins on Firefox 70.
3739
3740 **Compatibility:** Firefox 70, Firefox ESR 60.2\
3741 **CCK2 Equivalent:** N/A\
3742 **Preferences Affected:** `pref.privacy.disable_button.view_passwords`
3743
3744 #### Windows (GPO)
3745 ```
3746 Software\Policies\Mozilla\Firefox\PasswordManagerEnabled = 0x1 | 0x0
3747 ```
3748 #### Windows (Intune)
3749 OMA-URI:
3750 ```
3751 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PasswordManagerEnabled
3752 ```
3753 Value (string):
3754 ```
3755 <enabled/> or <disabled/>
3756 ```
3757 #### macOS
3758 ```
3759 <dict>
3760   <key>PasswordManagerEnabled</key>
3761   <true/> | <false/>
3762 </dict>
3763 ```
3764 #### policies.json
3765 ```
3766 {
3767   "policies": {
3768     "PasswordManagerEnabled": true | false
3769   }
3770 }
3771 ```
3772 ### PDFjs
3773 Disable or configure PDF.js, the built-in PDF viewer.
3774
3775 If `Enabled` is set to false, the built-in PDF viewer is disabled.
3776
3777 If `EnablePermissions` is set to true, the built-in PDF viewer will honor document permissions like preventing the copying of text.
3778
3779 Note: DisableBuiltinPDFViewer has not been deprecated. You can either continue to use it, or switch to using PDFjs->Enabled to disable the built-in PDF viewer. This new permission was added because we needed a place for PDFjs->EnabledPermissions.
3780
3781 **Compatibility:** Firefox 77, Firefox ESR 68.9\
3782 **CCK2 Equivalent:** N/A\
3783 **Preferences Affected:** `pdfjs.diabled`, `pdfjs.enablePermissions`
3784
3785 #### Windows (GPO)
3786 ```
3787 Software\Policies\Mozilla\Firefox\PDFjs\Enabled = 0x1 | 0x0
3788 Software\Policies\Mozilla\Firefox\PDFjs\EnablePermissions = 0x1 | 0x0
3789 ```
3790 #### Windows (Intune)
3791 OMA-URI:
3792 ```
3793 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PDFjs/PDFjs_Enabled
3794 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PDFjs/PDFjs_EnablePermissions
3795 ```
3796 Value (string):
3797 ```
3798 <enabled/>or <disabled/>
3799 ```
3800 #### macOS
3801 ```
3802 <dict>
3803   <key>PDFjs</key>
3804   <dict>
3805     <key>Enabled</key>
3806     <true/> | <false/>
3807     <key>EnablePermissions</key>
3808     <true/> | <false/>
3809   </dict>
3810 </dict>
3811 ```
3812 #### policies.json
3813 ```
3814 {
3815   "policies": {
3816     "PDFjs": {
3817       "Enabled": true | false,
3818       "EnablePermissions": true | false
3819     }
3820   }
3821 }
3822 ```
3823 ### Permissions
3824 Set permissions associated with camera, microphone, location, notifications, autoplay, and virtual reality. Because these are origins, not domains, entries with unique ports must be specified separately. This explicitly means that it is not possible to add wildcards. See examples below.
3825
3826 `Allow` is a list of origins where the feature is allowed.
3827
3828 `Block` is a list of origins where the feature is not allowed.
3829
3830 `BlockNewRequests` determines whether or not new requests can be made for the feature.
3831
3832 `Locked` prevents the user from changing preferences for the feature.
3833
3834 `Default` specifies the default value for Autoplay. block-audio-video is not supported on Firefox ESR 68.
3835
3836 **Compatibility:** Firefox 62, Firefox ESR 60.2 (Autoplay added in Firefox 74, Firefox ESR 68.6, Autoplay Default/Locked added in Firefox 76, Firefox ESR 68.8, VirtualReality added in Firefox 80, Firefox ESR 78.2)\
3837 **CCK2 Equivalent:** N/A\
3838 **Preferences Affected:** `permissions.default.camera`, `permissions.default.microphone`, `permissions.default.geo`, `permissions.default.desktop-notification`, `media.autoplay.default`, `permissions.default.xr`
3839
3840 #### Windows (GPO)
3841 ```
3842 Software\Policies\Mozilla\Firefox\Permissions\Camera\Allow\1 = "https://example.org"
3843 Software\Policies\Mozilla\Firefox\Permissions\Camera\Allow\2 = "https://example.org:1234"
3844 Software\Policies\Mozilla\Firefox\Permissions\Camera\Block\1 = "https://example.edu"
3845 Software\Policies\Mozilla\Firefox\Permissions\Camera\BlockNewRequests = 0x1 | 0x0
3846 Software\Policies\Mozilla\Firefox\Permissions\Camera\Locked = 0x1 | 0x0
3847 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Allow\1 = "https://example.org"
3848 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Block\1 = "https://example.edu"
3849 Software\Policies\Mozilla\Firefox\Permissions\Microphone\BlockNewRequests = 0x1 | 0x0
3850 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Locked = 0x1 | 0x0
3851 Software\Policies\Mozilla\Firefox\Permissions\Location\Allow\1 = "https://example.org"
3852 Software\Policies\Mozilla\Firefox\Permissions\Location\Block\1 = "https://example.edu"
3853 Software\Policies\Mozilla\Firefox\Permissions\Location\BlockNewRequests = 0x1 | 0x0
3854 Software\Policies\Mozilla\Firefox\Permissions\Location\Locked = 0x1 | 0x0
3855 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Allow\1 = "https://example.org"
3856 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Block\1 = "https://example.edu"
3857 Software\Policies\Mozilla\Firefox\Permissions\Notifications\BlockNewRequests = 0x1 | 0x0
3858 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Locked = 0x1 | 0x0
3859 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Allow\1 = "https://example.org"
3860 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Block\1 = "https://example.edu"
3861 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Default = "allow-audio-video" | "block-audio" | "block-audio-video"
3862 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Locked = 0x1 | 0x0
3863 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\Allow\1 = "https://example.org"
3864 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\Block\1 = "https://example.edu"
3865 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\BlockNewRequests = 0x1 | 0x0
3866 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\Locked = 0x1 | 0x0
3867 ```
3868 #### Windows (Intune)
3869 OMA-URI:
3870 ```
3871 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Location/Location_BlockNewRequests
3872 ```
3873 Value (string):
3874 ```
3875 <enabled/> or <disabled/>
3876 ```
3877 OMA-URI:
3878 ```
3879 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Location/Location_Locked
3880 ```
3881 Value (string):
3882 ```
3883 <enabled/> or <disabled/>
3884 ```
3885 OMA-URI:
3886 ```
3887 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_Allow
3888 ```
3889 Value (string):
3890 ```
3891 <enabled/>
3892 <data id="Permissions" value="1&#xF000;https://example.org"/>
3893 ```
3894 OMA-URI:
3895 ```
3896 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_BlockNewRequests
3897 ```
3898 Value (string):
3899 ```
3900 <enabled/> or <disabled/>
3901 ```
3902 OMA-URI:
3903 ```
3904 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_Locked
3905 ```
3906 Value (string):
3907 ```
3908 <enabled/> or <disabled/>
3909 ```
3910 OMA-URI:
3911 ```
3912 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Allow
3913 ```
3914 Value (string):
3915 ```
3916 <enabled/>
3917 <data id="Permissions" value="1&#xF000;https://example.org"/>
3918 ```
3919 OMA-URI:
3920 ```
3921 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Block
3922 ```
3923 Value (string):
3924 ```
3925 <enabled/>
3926 <data id="Permissions" value="1&#xF000;https://example.edu"/>
3927 ```
3928 OMA-URI:
3929 ```
3930 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Default
3931 ```
3932 Value (string):
3933 ```
3934 <enabled/>
3935 <data id="Autoplay_Default" value="allow-audio-video | block-audio | block-audio-video"/>
3936 ```
3937 OMA-URI:
3938 ```
3939 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Locked
3940 ```
3941 Value (string):
3942 ```
3943 <enabled/> or <disabled/>
3944 ```
3945 OMA-URI:
3946 ```
3947 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_Allow
3948 ```
3949 Value (string):
3950 ```
3951 <enabled/>
3952 <data id="Permissions" value="1&#xF000;https://example.org"/>
3953 ```
3954 OMA-URI:
3955 ```
3956 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_Block
3957 ```
3958 Value (string):
3959 ```
3960 <enabled/>
3961 <data id="Permissions" value="1&#xF000;https://example.edu"/>
3962 ```
3963 OMA-URI:
3964 ```
3965 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_BlockNewRequests
3966 ```
3967 Value (string):
3968 ```
3969 <enabled/> or <disabled/>
3970 ```
3971 OMA-URI:
3972 ```
3973 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_Locked
3974 ```
3975 Value (string):
3976 ```
3977 <enabled/> or <disabled/>
3978 ```
3979 #### macOS
3980 ```
3981 <dict>
3982   <key>Permissions</key>
3983   <dict>
3984     <key>Camera</key>
3985     <dict>
3986       <key>Allow</key>
3987       <array>
3988         <string>https://example.org</string>
3989         <string>https://example.org:1234</string>
3990       </array>
3991       <key>Block</key>
3992       <array>
3993         <string>https://example.edu</string>
3994       </array>
3995       <key>BlockNewRequests</key>
3996       <true/> | <false/>
3997       <key>Locked</key>
3998       <true/> | <false/>
3999     </dict>
4000     <key>Microphone</key>
4001     <dict>
4002       <key>Allow</key>
4003       <array>
4004         <string>https://example.org</string>
4005       </array>
4006       <key>Block</key>
4007       <array>
4008         <string>https://example.edu</string>
4009       </array>
4010       <key>BlockNewRequests</key>
4011       <true/> | <false/>
4012       <key>Locked</key>
4013       <true/> | <false/>
4014     </dict>
4015     <key>Location</key>
4016     <dict>
4017       <key>Allow</key>
4018       <array>
4019         <string>https://example.org</string>
4020       </array>
4021       <key>Block</key>
4022       <array>
4023         <string>https://example.edu</string>
4024       </array>
4025       <key>BlockNewRequests</key>
4026       <true/> | <false/>
4027       <key>Locked</key>
4028       <true/> | <false/>
4029     </dict>
4030     <key>Notifications</key>
4031     <dict>
4032       <key>Allow</key>
4033       <array>
4034         <string>https://example.org</string>
4035       </array>
4036       <key>Block</key>
4037       <array>
4038         <string>https://example.edu</string>
4039       </array>
4040       <key>BlockNewRequests</key>
4041       <true/>
4042       <key>Locked</key>
4043       <true/>
4044     </dict>
4045     <key>Autoplay</key>
4046     <dict>
4047       <key>Allow</key>
4048       <array>
4049         <string>https://example.org</string>
4050       </array>
4051       <key>Block</key>
4052       <array>
4053         <string>https://example.edu</string>
4054       </array>
4055       <key>Default</key>
4056       <string>allow-audio-video | block-audio | block-audio-video</string>
4057       <key>Locked</key>
4058       <true/> | <false/>
4059     </dict>
4060   </dict>
4061 </dict>
4062 ```
4063 #### policies.json
4064 ```
4065 {
4066   "policies": {
4067     "Permissions": {
4068       "Camera": {
4069         "Allow": ["https://example.org","https://example.org:1234"],
4070         "Block": ["https://example.edu"],
4071         "BlockNewRequests": true | false,
4072         "Locked": true | false
4073       },
4074       "Microphone": {
4075         "Allow": ["https://example.org"],
4076         "Block": ["https://example.edu"],
4077         "BlockNewRequests": true | false,
4078         "Locked": true | false
4079       },
4080       "Location": {
4081         "Allow": ["https://example.org"],
4082         "Block": ["https://example.edu"],
4083         "BlockNewRequests": true | false,
4084         "Locked": true | false
4085       },
4086       "Notifications": {
4087         "Allow": ["https://example.org"],
4088         "Block": ["https://example.edu"],
4089         "BlockNewRequests": true | false,
4090         "Locked": true | false
4091       },
4092       "Autoplay": {
4093         "Allow": ["https://example.org"],
4094         "Block": ["https://example.edu"],
4095         "Default": "allow-audio-video" | "block-audio" | "block-audio-video",
4096         "Locked": true | false
4097       }
4098     }
4099   }
4100 }
4101 ```
4102 ### PictureInPicture
4103
4104 Enable or disable Picture-in-Picture as well as prevent the user from enabling or disabling it (Locked).
4105
4106 **Compatibility:** Firefox 78, Firefox ESR 78\
4107 **CCK2 Equivalent:** N/A\
4108 **Preferences Affected:** `media.videocontrols.picture-in-picture.video-toggle.enabled`
4109
4110 #### Windows (GPO)
4111 ```
4112 Software\Policies\Mozilla\Firefox\PictureInPicture\Enabled = 0x1 | 0x0
4113 Software\Policies\Mozilla\Firefox\PictureInPicture\Locked = 0x1 | 0x0
4114
4115 ```
4116 #### Windows (Intune)
4117 OMA-URI:
4118 ```
4119 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PictureInPicture/PictureInPicture_Enabled
4120 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PictureInPicture/PictureInPicture_Locked
4121 ```
4122 Value (string):
4123 ```
4124 <enabled/> or <disabled/>
4125 ```
4126 #### macOS
4127 ```
4128 <dict>
4129   <key>PictureInPicture</key>
4130   <dict>
4131     <key>Enabled</key>
4132     <true/> | <false/>
4133     <key>Locked</key>
4134     <true/> | <false/>
4135   </dict>
4136 </dict>
4137 ```
4138 #### policies.json
4139 ```
4140 {
4141   "policies": {
4142     "PictureInPicture": {
4143       "Enabled": true | false,
4144       "Locked": true | false
4145     }
4146   }
4147 }
4148 ```
4149 ### PopupBlocking
4150 Configure the default pop-up window policy as well as origins for which pop-up windows are allowed.
4151
4152 `Allow` is a list of origins where popup-windows are allowed.
4153
4154 `Default` determines whether or not pop-up windows are allowed by default.
4155
4156 `Locked` prevents the user from changing pop-up preferences.
4157
4158 **Compatibility:** Firefox 60, Firefox ESR 60\
4159 **CCK2 Equivalent:** `permissions.popup`\
4160 **Preferences Affected:** `dom.disable_open_during_load`
4161
4162 #### Windows (GPO)
4163 ```
4164 Software\Policies\Mozilla\Firefox\PopupBlocking\Allow\1 = "https://example.org"
4165 Software\Policies\Mozilla\Firefox\PopupBlocking\Allow\2 = "https://example.edu"
4166 Software\Policies\Mozilla\Firefox\PopupBlocking\Default = 0x1 | 0x0
4167 Software\Policies\Mozilla\Firefox\PopupBlocking\Locked = 0x1 | 0x0
4168 ```
4169 #### Windows (Intune)
4170 OMA-URI:
4171 ```
4172 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Allow
4173 ```
4174 Value (string):
4175 ```
4176 <enabled/>
4177 <data id="Permissions" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
4178 ```
4179 OMA-URI:
4180 ```
4181 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Default
4182 ```
4183 Value (string):
4184 ```
4185 <enabled/> or <disabled/>
4186 ```
4187 OMA-URI:
4188 ```
4189 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Locked
4190 ```
4191 Value (string):
4192 ```
4193 <enabled/> or <disabled/>
4194 ```
4195 #### macOS
4196 ```
4197 <dict>
4198   <key>PopupBlocking</key>
4199   <dict>
4200     <key>Allow</key>
4201     <array>
4202       <string>http://example.org</string>
4203       <string>http://example.edu</string>
4204     </array>
4205     <key>Default</key>
4206     <true/> | <false/>
4207     <key>Locked</key>
4208     <true/> | <false/>
4209   </dict>
4210 </dict>
4211 ```
4212 #### policies.json
4213 ```
4214 {
4215   "policies": {
4216     "PopupBlocking": {
4217       "Allow": ["http://example.org/",
4218                 "http://example.edu/"],
4219       "Default": true | false,
4220       "Locked": true | false
4221     }
4222   }
4223 }
4224 ```
4225 ### Preferences
4226 Set and lock preferences.
4227
4228 **NOTE** On Windows, in order to use this policy, you must clear all settings in the old **Preferences (Deprecated)** section.
4229
4230 Previously you could only set and lock a subset of preferences. Starting with Firefox 81 and Firefox ESR 78.3 you can set many more preferences. You can also set default preferences, user preferences and you can clear preferences.
4231
4232 Preferences that start with the following prefixes are supported:
4233 ```
4234 accessibility.
4235 app.update.* (Firefox 86, Firefox 78.8)
4236 browser.
4237 datareporting.policy.
4238 dom.
4239 extensions.
4240 general.autoScroll (Firefox 83, Firefox ESR 78.5)
4241 general.smoothScroll (Firefox 83, Firefox ESR 78.5)
4242 geo.
4243 gfx.
4244 intl.
4245 keyword.enabled (Firefox 95, Firefox ESR 91.4)
4246 layers.
4247 layout.
4248 media.
4249 network.
4250 pdfjs. (Firefox 84, Firefox ESR 78.6)
4251 places.
4252 print.
4253 signon. (Firefox 83, Firefox ESR 78.5)
4254 spellchecker. (Firefox 84, Firefox ESR 78.6)
4255 toolkit.legacyUserProfileCustomizations.stylesheets (Firefox 95, Firefox ESR 91.4)
4256 ui.
4257 widget.
4258 ```
4259 as well as the following security preferences:
4260 | Preference | Type | Default
4261 | --- | --- | ---
4262 | security.default_personal_cert | string | Ask Every Time
4263 | &nbsp;&nbsp;&nbsp;&nbsp;If set to Select Automatically, Firefox automatically chooses the default personal certificate.
4264 | security.insecure_connection_text.enabled | bool | false
4265 | &nbsp;&nbsp;&nbsp;&nbsp;If set to true, adds the words "Not Secure" for insecure sites.
4266 | security.insecure_connection_text.pbmode.enabled | bool | false
4267 | &nbsp;&nbsp;&nbsp;&nbsp;If set to true, adds the words "Not Secure" for insecure sites in private browsing.
4268 | security.insecure_field_warning.contextual.enabled | bool | true
4269 | &nbsp;&nbsp;&nbsp;&nbsp;If set to false, remove the warning for inscure login fields.
4270 | security.mixed_content.block_active_content | boolean | true
4271 | &nbsp;&nbsp;&nbsp;&nbsp;If false, mixed active content (HTTP and HTTPS) is not blocked.
4272 | security.osclientcerts.autoload | boolean | false
4273 | &nbsp;&nbsp;&nbsp;&nbsp;If true, client certificates are loaded from the operating system certificate store.
4274 | security.ssl.errorReporting.enabled | boolean | true
4275 | &nbsp;&nbsp;&nbsp;&nbsp;If false, SSL errors cannot be sent to Mozilla.
4276 | security.tls.enable_0rtt_data | boolean | true
4277 | &nbsp;&nbsp;&nbsp;&nbsp;If false, TLS early data is turned off (Firefox 93, Firefox 91.2, Firefox 78.15).
4278 | security.tls.hello_downgrade_check | boolean | true
4279 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the TLS 1.3 downgrade check is disabled.
4280 | security.tls.version.enable-deprecated | boolean | false
4281 | &nbsp;&nbsp;&nbsp;&nbsp;If true, browser will accept TLS 1.0. and TLS 1.1 (Firefox 86, Firefox 78.8).
4282 | security.warn_submit_secure_to_insecure | boolean | true
4283 | &nbsp;&nbsp;&nbsp;&nbsp;If false, no warning is shown when submitting a form from https to http.
4284 &nbsp;
4285
4286 Using the preference as the key, set the `Value` to the corresponding preference value.
4287
4288 `Status` can be "default", "locked", "user" or "clear"
4289
4290 Default preferences can be modified by the user.
4291
4292 If a value is locked, it is also set as the default.
4293
4294 User preferences persist across invocations of Firefox. It is the equivalent of a user setting the preference. They are most useful when a preference is needed very early in startup so it can't be set as default by policy. An example of this is ```toolkit.legacyUserProfileCustomizations.stylesheets```.
4295
4296 User preferences persist even if the policy is removed, so if you need to remove them, you should use the clear policy.
4297
4298 See the examples below for more detail.
4299
4300 IMPORTANT: Make sure you're only setting a particular preference using this mechanism and not some other way.
4301
4302 Status
4303 **Compatibility:** Firefox 81, Firefox ESR 78.3\
4304 **CCK2 Equivalent:** `preferences`\
4305 **Preferences Affected:** Many
4306
4307 #### Windows (GPO)
4308 Software\Policies\Mozilla\Firefox\Preferences (REG_MULTI_SZ) =
4309 ```
4310 {
4311   "accessibility.force_disabled": {
4312     "Value": 1,
4313     "Status": "default"
4314   },
4315   "browser.cache.disk.parent_directory": {
4316     "Value": "SOME_NATIVE_PATH",
4317     "Status": "user"
4318   },
4319   "browser.tabs.warnOnClose": {
4320     "Value": false,
4321     "Status": "locked"
4322   }
4323 }
4324 ```
4325 #### Windows (Intune)
4326 OMA-URI:
4327 ```
4328 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Preferences
4329 ```
4330 Value (string):
4331 ```
4332 <enabled/>
4333 <data id="JSON" value='
4334 {
4335   "accessibility.force_disabled": {
4336     "Value": 1,
4337     "Status": "default"
4338   },
4339   "browser.cache.disk.parent_directory": {
4340     "Value": "SOME_NATIVE_PATH",
4341     "Status": "user"
4342   },
4343   "browser.tabs.warnOnClose": {
4344     "Value": false,
4345     "Status": "locked"
4346   }
4347 }'/>
4348 ```
4349 #### macOS
4350 ```
4351 <dict>
4352   <key>Preferences</key>
4353   <dict>
4354     <key>accessibility.force_disabled</key>
4355     <dict>
4356       <key>Value</key>
4357       <integer>1</integer>
4358       <key>Status</key>
4359       <string>default</string>
4360     </dict>
4361     <key>browser.cache.disk.parent_directory</key>
4362     <dict>
4363       <key>Value</key>
4364       <string>SOME_NATIVE_PATH</string>
4365       <key>Status</key>
4366       <string>user</string>
4367     </dict>
4368     <key>browser.tabs.warnOnClose</key>
4369     <dict>
4370       <key>Value</key>
4371       <false/>
4372       <key>Status</key>
4373       <string>locked</string>
4374     </dict>
4375   </dict>
4376 </dict>
4377 ```
4378 #### policies.json
4379 ```
4380 {
4381   "policies": {
4382     "Preferences": {
4383       "accessibility.force_disabled": {
4384         "Value": 1,
4385         "Status": "default"
4386       },
4387       "browser.cache.disk.parent_directory": {
4388         "Value": "SOME_NATIVE_PATH",
4389         "Status": "user"
4390       },
4391       "browser.tabs.warnOnClose": {
4392         "Value": false,
4393         "Status": "locked"
4394       }
4395     }
4396   }
4397 }
4398 ```
4399 ### Preferences (Deprecated)
4400 Set and lock certain preferences.
4401
4402 **Compatibility:** See below\
4403 **CCK2 Equivalent:** `preferences`\
4404 **Preferences Affected:** See below
4405
4406 | Preference | Type | Compatibility | Default
4407 | --- | --- | --- | ---
4408 | accessibility.force_disabled | integer | Firefox 70, Firefox ESR 68.2 | 0
4409 | &nbsp;&nbsp;&nbsp;&nbsp;If set to 1, platform accessibility is disabled.
4410 | app.update.auto (Deprecated - Switch to AppAutoUpdate policy) | boolean | Firefox 68, Firefox ESR 68 | true
4411 | &nbsp;&nbsp;&nbsp;&nbsp;If false, Firefox doesn't automatically install update.
4412 | browser.bookmarks.autoExportHTML | boolean | Firefox 70, Firefox ESR 68.2 | false
4413 | &nbsp;&nbsp;&nbsp;&nbsp;If true, bookmarks are exported on shutdown.
4414 | browser.bookmarks.file | string | Firefox 70, Firefox ESR 68.2 | N/A
4415 | &nbsp;&nbsp;&nbsp;&nbsp;If set, the name of the file where bookmarks are exported and imported.
4416 | browser.bookmarks.restore_default_bookmarks | boolean | Firefox 70, Firefox ESR 68.2 | N/A
4417 | &nbsp;&nbsp;&nbsp;&nbsp;If true, bookmarks are restored to their defaults.
4418 | browser.cache.disk.enable | boolean | Firefox 68, Firefox ESR 68 | true
4419 | &nbsp;&nbsp;&nbsp;&nbsp;If false, don't store cache on the hard drive.
4420 | ~browser.cache.disk.parent_directory~ | string | Firefox 68, Firefox ESR 68 | Profile temporary directory
4421 | &nbsp;&nbsp;&nbsp;&nbsp;~If set, changes the location of the disk cache.~ This policy doesn't work. It's being worked on.
4422 | browser.fixup.dns_first_for_single_words | boolean | Firefox 68, Firefox ESR 68 | false
4423 | &nbsp;&nbsp;&nbsp;&nbsp;If true, single words are sent to DNS, not directly to search.
4424 | browser.newtabpage.activity-stream.default.sites | string | Firefox 72, ESR 68.4 | Locale dependent
4425 | &nbsp;&nbsp;&nbsp;&nbsp;If set, a list of URLs to use as the default top sites on the new tab page. Due to Firefox limitations, search sites can't be added. In addition, sites with the same name but different TLDs (example.org/example.com) will not display properly.
4426 | browser.places.importBookmarksHTML | boolean | Firefox 70, Firefox ESR 68.2
4427 | &nbsp;&nbsp;&nbsp;&nbsp;If true, bookmarks are always imported on startup.
4428 | browser.safebrowsing.phishing.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
4429 | &nbsp;&nbsp;&nbsp;&nbsp;If false, phishing protection is not enabled (Not recommended)
4430 | browser.safebrowsing.malware.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
4431 | &nbsp;&nbsp;&nbsp;&nbsp;If false, malware protection is not enabled (Not recommended)
4432 | browser.search.update | boolean | Firefox 68, Firefox ESR 68 | true
4433 | &nbsp;&nbsp;&nbsp;&nbsp;If false, updates for search engines are not checked.
4434 | browser.slowStartup.notificationDisabled | boolean | Firefox 70, Firefox ESR 68.2 | false
4435 | &nbsp;&nbsp;&nbsp;&nbsp;If true, a notification isn't shown if startup is slow.
4436 | browser.tabs.warnOnClose | boolean | Firefox 68, Firefox ESR 68 | true
4437 | &nbsp;&nbsp;&nbsp;&nbsp;If false, there is no warning when the browser is closed.
4438 | browser.taskbar.previews.enable | boolean | Firefox 70, Firefox ESR 68.2 (Windows only) | false
4439 | &nbsp;&nbsp;&nbsp;&nbsp;If true, tab previews are shown in the Windows taskbar.
4440 | browser.urlbar.suggest.bookmark | boolean | Firefox 68, Firefox ESR 68 | true
4441 | &nbsp;&nbsp;&nbsp;&nbsp;If false, bookmarks aren't suggested when typing in the URL bar.
4442 | browser.urlbar.suggest.history | boolean | Firefox 68, Firefox ESR 68 | true
4443 | &nbsp;&nbsp;&nbsp;&nbsp;If false, history isn't suggested when typing in the URL bar.
4444 | browser.urlbar.suggest.openpage | boolean | Firefox 68, Firefox ESR 68 | true
4445 | &nbsp;&nbsp;&nbsp;&nbsp;If false, open tabs aren't suggested when typing in the URL bar.
4446 | datareporting.policy.dataSubmissionPolicyBypassNotification | boolean | Firefox 68, Firefox ESR 68 | false
4447 | &nbsp;&nbsp;&nbsp;&nbsp;If true, don't show the privacy policy tab on first run.
4448 | dom.allow_scripts_to_close_windows | boolean | Firefox 70, Firefox ESR 68.2 | false
4449 | &nbsp;&nbsp;&nbsp;&nbsp;If false, web page can close windows.
4450 | dom.disable_window_flip | boolean | Firefox 68, Firefox ESR 68 | true
4451 | &nbsp;&nbsp;&nbsp;&nbsp;If false, web pages can focus and activate windows.
4452 | dom.disable_window_move_resize | boolean | Firefox 68, Firefox ESR 68 | false
4453 | &nbsp;&nbsp;&nbsp;&nbsp;If true, web pages can't move or resize windows.
4454 | dom.event.contextmenu.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4455 | &nbsp;&nbsp;&nbsp;&nbsp;If false, web pages can't override context menus.
4456 | dom.keyboardevent.keypress.hack.dispatch_non_printable_keys.addl | string | Firefox 68, Firefox ESR 68 | N/A
4457 | &nbsp;&nbsp;&nbsp;&nbsp;See https://support.mozilla.org/en-US/kb/dom-events-changes-introduced-firefox-66
4458 | dom.keyboardevent.keypress.hack.use_legacy_keycode_and_charcode.addl | string | Firefox 68, Firefox ESR 68 | N/A
4459 | &nbsp;&nbsp;&nbsp;&nbsp;See https://support.mozilla.org/en-US/kb/dom-events-changes-introduced-firefox-66
4460 | dom.xmldocument.load.enabled | boolean | Firefox ESR 68.5 | true.
4461 | &nbsp;&nbsp;&nbsp;&nbsp;If false, XMLDocument.load is not available.
4462 | dom.xmldocument.async.enabled | boolean | Firefox ESR 68.5 | true
4463 | &nbsp;&nbsp;&nbsp;&nbsp;If false, XMLDocument.async is not available.
4464 | extensions.blocklist.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
4465 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the extensions blocklist is not used (Not recommended)
4466 | extensions.getAddons.showPane | boolean | Firefox 68, Firefox ESR 68 | N/A
4467 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the Recommendations tab is not displayed in the Add-ons Manager.
4468 | extensions.htmlaboutaddons.recommendations.enabled | boolean | Firefox 72, Firefox ESR 68.4 | true
4469 | &nbsp;&nbsp;&nbsp;&nbsp;If false, recommendations are not shown on the Extensions tab in the Add-ons Manager.
4470 | geo.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
4471 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the geolocation API is disabled. | Language dependent
4472 | intl.accept_languages | string | Firefox 70, Firefox ESR 68.2
4473 | &nbsp;&nbsp;&nbsp;&nbsp;If set, preferred language for web pages.
4474 | media.eme.enabled (Deprecated - Switch to EncryptedMediaExtensions policy) | boolean | Firefox 70, Firefox ESR 68.2 | true
4475 | &nbsp;&nbsp;&nbsp;&nbsp;If false, Encrypted Media Extensions are not enabled.
4476 | media.gmp-gmpopenh264.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4477 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the OpenH264  plugin is not downloaded.
4478 | media.gmp-widevinecdm.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4479 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the Widevine plugin is not downloaded.
4480 | media.peerconnection.enabled | boolean | Firefox 72, Firefox ESR 68.4 | true
4481 | &nbsp;&nbsp;&nbsp;&nbsp;If false, WebRTC is disabled
4482 | media.peerconnection.ice.obfuscate_host_addresses.whitelist (Deprecated) | string | Firefox 72, Firefox ESR 68.4 | N/A
4483 | &nbsp;&nbsp;&nbsp;&nbsp;If set, a list of domains for which mDNS hostname obfuscation is
4484 disabled
4485 | media.peerconnection.ice.obfuscate_host_addresses.blocklist | string | Firefox 79, Firefox ESR 78.1 | N/A
4486 | &nbsp;&nbsp;&nbsp;&nbsp;If set, a list of domains for which mDNS hostname obfuscation is
4487 disabled
4488 | network.dns.disableIPv6 | boolean | Firefox 68, Firefox ESR 68 | false
4489 | &nbsp;&nbsp;&nbsp;&nbsp;If true, IPv6 DNS lokoups are disabled.
4490 | network.IDN_show_punycode | boolean | Firefox 68, Firefox ESR 68 | false
4491 | &nbsp;&nbsp;&nbsp;&nbsp;If true, display the punycode version of internationalized domain names.
4492 | places.history.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4493 | &nbsp;&nbsp;&nbsp;&nbsp;If false, history is not enabled.
4494 | print.save_print_settings | boolean | Firefox 70, Firefox ESR 68.2 | true
4495 | &nbsp;&nbsp;&nbsp;&nbsp;If false, print settings are not saved between jobs.
4496 | security.default_personal_cert | string | Firefox 68, Firefox ESR 68 | Ask Every Time
4497 | &nbsp;&nbsp;&nbsp;&nbsp;If set to Select Automatically, Firefox automatically chooses the default personal certificate.
4498 | security.mixed_content.block_active_content | boolean | Firefox 70, Firefox ESR 68.2 | true
4499 | &nbsp;&nbsp;&nbsp;&nbsp;If false, mixed active content (HTTP and HTTPS) is not blocked.
4500 | security.osclientcerts.autoload | boolean | Firefox 72 (Windows), Firefox 75 (macOS)  | false
4501 | &nbsp;&nbsp;&nbsp;&nbsp;If true, client certificates are loaded from the operating system certificate store.
4502 | security.ssl.errorReporting.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4503 | &nbsp;&nbsp;&nbsp;&nbsp;If false, SSL errors cannot be sent to Mozilla.
4504 | security.tls.hello_downgrade_check | boolean | Firefox 72, Firefox ESR 68.4 | true
4505 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the TLS 1.3 downgrade check is disabled.
4506 | ui.key.menuAccessKeyFocuses | boolean | Firefox 68, Firefox ESR 68 | true
4507 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the Alt key doesn't show the menubar on Windows.
4508 | widget.content.gtk-theme-override | string | Firefox 72, Firefox ESR 68.4 (Linux only) | N/A
4509 | &nbsp;&nbsp;&nbsp;&nbsp;If set, overrides the GTK theme for widgets.
4510 #### Windows (GPO)
4511 ```
4512 Software\Policies\Mozilla\Firefox\Preferences\boolean_preference_name = 0x1 | 0x0
4513 Software\Policies\Mozilla\Firefox\Preferences\string_preference_name = "string_value"
4514 ```
4515 #### Windows (Intune)
4516 OMA-URI: (periods are replaced by underscores)
4517 ```
4518 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Preferences/boolean_preference_name
4519 ```
4520 Value (string):
4521 ```
4522 <enabled/> or <disabled/>
4523 ```
4524 OMA-URI: (periods are replaced by underscores)
4525 ```
4526 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Preferences/string_preference_name
4527 ```
4528 Value (string):
4529 ```
4530 <enabled/>
4531 <data id="Preferences_String" value="string_value"/>
4532 ```
4533 #### macOS
4534 ```
4535 <dict>
4536   <key>Preferences</key>
4537   <dict>
4538     <key>boolean_preference_name</key>
4539     <true/> | <false/>
4540     <key>string_preference_name</key>
4541     <string>string_value</string>
4542   </dict>
4543 </dict>
4544 ```
4545 #### policies.json
4546 ```
4547 {
4548   "policies": {
4549     "Preferences": {
4550       "boolean_preference_name": true | false,
4551       "string_preference_name": "string_value"
4552     }
4553   }
4554 }
4555 ```
4556 ### PrimaryPassword
4557 Require or prevent using a primary (formerly master) password.
4558
4559 If this value is true, a primary password is required. If this value is false, it works the same as if [`DisableMasterPasswordCreation`](#disablemasterpasswordcreation) was true and removes the primary password functionality.
4560
4561 If both DisableMasterPasswordCreation and PrimaryPassword are used, DisableMasterPasswordCreation takes precedent.
4562
4563 **Compatibility:** Firefox 79, Firefox ESR 78.1\
4564 **CCK2 Equivalent:** `noMasterPassword`\
4565 **Preferences Affected:** N/A
4566
4567 #### Windows (GPO)
4568 ```
4569 Software\Policies\Mozilla\Firefox\PrimaryPassword = 0x1 | 0x0
4570 ```
4571 #### Windows (Intune)
4572 OMA-URI:
4573 ```
4574 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PrimaryPassword
4575 ```
4576 Value (string):
4577 ```
4578 <enabled/> or <disabled/>
4579 ```
4580 #### macOS
4581 ```
4582 <dict>
4583   <key>PrimaryPassword</key>
4584   <true/> | <false/>
4585 </dict>
4586 ```
4587 #### policies.json
4588 ```
4589 {
4590   "policies": {
4591     "PrimaryPassword": true | false
4592   }
4593 }
4594 ```
4595 ### PromptForDownloadLocation
4596 Ask where to save each file before downloading.
4597
4598 **Compatibility:** Firefox 68, Firefox ESR 68\
4599 **CCK2 Equivalent:** N/A\
4600 **Preferences Affected:** `browser.download.useDownloadDir`
4601
4602 #### Windows (GPO)
4603 ```
4604 Software\Policies\Mozilla\Firefox\PromptForDownloadLocation = 0x1 | 0x0
4605 ```
4606 #### Windows (Intune)
4607 OMA-URI:
4608 ```
4609 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PromptForDownloadLocation
4610 ```
4611 Value (string):
4612 ```
4613 <enabled/> or <disabled/>
4614 ```
4615 #### macOS
4616 ```
4617 <dict>
4618   <key>PromptForDownloadLocation</key>
4619   <true/> | <false/>
4620 </dict>
4621 ```
4622 #### policies.json
4623 ```
4624 {
4625   "policies": {
4626     "PromptForDownloadLocation": true | false
4627   }
4628 }
4629 ```
4630 ### Proxy
4631 Configure proxy settings. These settings correspond to the connection settings in Firefox preferences.
4632 To specify ports, append them to the hostnames with a colon (:).
4633
4634 `Mode` is the proxy method being used.
4635
4636 `Locked` is whether or not proxy settings can be changed.
4637
4638 `HTTPProxy` is the HTTP proxy server.
4639
4640 `UseHTTPProxyForAllProtocols` is whether or not the HTTP proxy should be used for all other proxies.
4641
4642 `SSLProxy` is the SSL proxy server.
4643
4644 `FTPProxy` is the FTP proxy server.
4645
4646 `SOCKSProxy` is the SOCKS proxy server
4647
4648 `SOCKSVersion` is the SOCKS version (4 or 5)
4649
4650 `Passthrough` is list of hostnames or IP addresses that will not be proxied. Use `<local>` to bypass proxying for all hostnames which do not contain periods.
4651
4652 `AutoConfigURL` is a  URL for proxy configuration (only used if Mode is autoConfig).
4653
4654 `AutoLogin` means do not prompt for authentication if password is saved.
4655
4656 `UseProxyForDNS` to use proxy DNS when using SOCKS v5.
4657
4658 **Compatibility:** Firefox 60, Firefox ESR 60\
4659 **CCK2 Equivalent:** `networkProxy*`\
4660 **Preferences Affected:** `network.proxy.type`, `network.proxy.autoconfig_url`, `network.proxy.socks_remote_dns`, `signon.autologin.proxy`, `network.proxy.socks_version`, `network.proxy.no_proxies_on`, `network.proxy.share_proxy_settings`, `network.proxy.http`, `network.proxy.http_port`, `network.proxy.ftp`, `network.proxy.ftp_port`, `network.proxy.ssl`, `network.proxy.ssl_port`, `network.proxy.socks`, `network.proxy.socks_port`
4661
4662 #### Windows (GPO)
4663 ```
4664 Software\Policies\Mozilla\Firefox\Proxy\Mode = "none" | "system" | "manual" | "autoDetect" | "autoConfig"
4665 Software\Policies\Mozilla\Firefox\Proxy\Locked = 0x1 | 0x0
4666 Software\Policies\Mozilla\Firefox\=Proxy\HTTPProxy = https://httpproxy.example.com
4667 Software\Policies\Mozilla\Firefox\Proxy\UseHTTPProxyForAllProtocols = 0x1 | 0x0
4668 Software\Policies\Mozilla\Firefox\Proxy\SSLProxy = https://sslproxy.example.com
4669 Software\Policies\Mozilla\Firefox\Proxy\FTPProxy = https://ftpproxy.example.com
4670 Software\Policies\Mozilla\Firefox\Proxy\SOCKSProxy = https://socksproxy.example.com
4671 Software\Policies\Mozilla\Firefox\Proxy\SOCKSVersion = 0x4 | 0x5
4672 Software\Policies\Mozilla\Firefox\Proxy\Passthrough = <local>
4673 Software\Policies\Mozilla\Firefox\Proxy\AutoConfigURL = URL_TO_AUTOCONFIG
4674 Software\Policies\Mozilla\Firefox\Proxy\AutoLogin = 0x1 | 0x0
4675 Software\Policies\Mozilla\Firefox\Proxy\UseProxyForDNS = 0x1 | 0x0
4676 ```
4677 #### Windows (Intune)
4678 OMA-URI:
4679 ```
4680 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Proxy
4681 ```
4682 Value (string):
4683 ```
4684 <enabled/>
4685 <data id="ProxyLocked" value="true | false"/>
4686 <data id="ConnectionType" value="none | system | manual | autoDetect | autoConfig"/>
4687 <data id="HTTPProxy" value="https://httpproxy.example.com"/>
4688 <data id="UseHTTPProxyForAllProtocols" value="true | false"/>
4689 <data id="SSLProxy" value="https://sslproxy.example.com"/>
4690 <data id="FTPProxy" value="https://ftpproxy.example.com"/>
4691 <data id="SOCKSProxy" value="https://socksproxy.example.com"/>
4692 <data id="SOCKSVersion" value="4 | 5"/>
4693 <data id="AutoConfigURL" value="URL_TO_AUTOCONFIG"/>
4694 <data id="Passthrough" value="<local>"/>
4695 <data id="AutoLogin" value="true | false"/>
4696 <data id="UseProxyForDNS" value="true | false"/>
4697 ```
4698 #### macOS
4699 ```
4700 <dict>
4701   <key>Proxy</key>
4702   <dict>
4703     <key>Mode</key>
4704     <string>none | system | manual | autoDetect | autoConfig</string>
4705     <key>Locked</key>
4706     <true> | </false>
4707     <key>HTTPProxy</key>
4708     <string>https://httpproxy.example.com</string>
4709     <key>UseHTTPProxyForAllProtocols</key>
4710     <true> | </false>
4711     <key>SSLProxy</key>
4712     <string>https://sslproxy.example.com</string>
4713     <key>FTPProxy</key>
4714     <string>https://ftpproxy.example.com</string>
4715     <key>SOCKSProxy</key>
4716     <string>https://socksproxy.example.com</string>
4717     <key>SOCKSVersion</key>
4718     <string>4 | 5</string>
4719     <key>Passthrough</key>
4720     <string>&lt;local>&gt;</string>
4721     <key>AutoConfigURL</key>
4722     <string>URL_TO_AUTOCONFIG</string>
4723     <key>AutoLogin</key>
4724     <true> | </false>
4725     <key>UseProxyForDNS</key>
4726     <true> | </false>
4727   </dict>
4728 </dict>
4729 ```
4730 #### policies.json
4731 ```
4732 {
4733   "policies": {
4734     "Proxy": {
4735       "Mode": "none" | "system" | "manual" | "autoDetect" | "autoConfig",
4736       "Locked": true | false,
4737       "HTTPProxy": "hostname",
4738       "UseHTTPProxyForAllProtocols": true | false,
4739       "SSLProxy": "hostname",
4740       "FTPProxy": "hostname",
4741       "SOCKSProxy": "hostname",
4742       "SOCKSVersion": 4 | 5,
4743       "Passthrough": "<local>",
4744       "AutoConfigURL": "URL_TO_AUTOCONFIG",
4745       "AutoLogin": true | false,
4746       "UseProxyForDNS": true | false
4747     }
4748   }
4749 }
4750 ```
4751 ### RequestedLocales
4752 Set the the list of requested locales for the application in order of preference. It will cause the corresponding language pack to become active.
4753
4754 Note: For Firefox 68, this can now be a string so that you can specify an empty value.
4755
4756 **Compatibility:** Firefox 64, Firefox ESR 60.4, Updated in Firefox 68, Firefox ESR 68\
4757 **CCK2 Equivalent:** N/A\
4758 **Preferences Affected:** N/A
4759 #### Windows (GPO)
4760 ```
4761 Software\Policies\Mozilla\Firefox\RequestedLocales\1 = "de"
4762 Software\Policies\Mozilla\Firefox\RequestedLocales\2 = "en-US"
4763
4764 or
4765
4766 Software\Policies\Mozilla\Firefox\RequestedLocales = "de,en-US"
4767 ```
4768 #### Windows (Intune)
4769 OMA-URI:
4770 ```
4771 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/RequestedLocalesString
4772 ```
4773 Value (string):
4774 ```
4775 <enabled/>
4776 <data id="Preferences_String" value="de,en-US"/>
4777 ```
4778 #### macOS
4779 ```
4780 <dict>
4781   <key>RequestedLocales</key>
4782   <array>
4783     <string>de</string>
4784     <string>en-US</string>
4785   </array>
4786 </dict>
4787
4788 or
4789
4790 <dict>
4791   <key>RequestedLocales</key>
4792   <string>de,en-US</string>
4793 </dict>
4794
4795 ```
4796 #### policies.json
4797 ```
4798 {
4799   "policies": {
4800     "RequestedLocales": ["de", "en-US"]
4801   }
4802 }
4803
4804 or
4805
4806 {
4807   "policies": {
4808     "RequestedLocales": "de,en-US"
4809   }
4810 }
4811 ```
4812 <a name="SanitizeOnShutdown"></a>
4813
4814 ### SanitizeOnShutdown (Selective)
4815 Clear data on shutdown. Choose from Cache, Cookies, Download History, Form & Search History, Browsing History, Active Logins, Site Preferences and Offline Website Data.
4816
4817 Previously, these values were always locked. Starting with Firefox 74 and Firefox ESR 68.6, you can use the `Locked` option to either keep the values unlocked (set it to false), or lock only the values you set (set it to true). If you want the old behavior of locking everything, do not set `Locked` at all.
4818
4819 **Compatibility:** Firefox 68, Firefox ESR 68 (Locked added in 74/68.6)\
4820 **CCK2 Equivalent:** N/A\
4821 **Preferences Affected:** `privacy.sanitize.sanitizeOnShutdown`, `privacy.clearOnShutdown.cache`, `privacy.clearOnShutdown.cookies`, `privacy.clearOnShutdown.downloads`, `privacy.clearOnShutdown.formdata`, `privacy.clearOnShutdown.history`, `privacy.clearOnShutdown.sessions`, `privacy.clearOnShutdown.siteSettings`, `privacy.clearOnShutdown.offlineApps`
4822 #### Windows (GPO)
4823 ```
4824 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Cache = 0x1 | 0x0
4825 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Cookies = 0x1 | 0x0
4826 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Downloads = 0x1 | 0x0
4827 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\FormData = 0x1 | 0x0
4828 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\History = 0x1 | 0x0
4829 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Sessions = 0x1 | 0x0
4830 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\SiteSettings = 0x1 | 0x0
4831 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\OfflineApps = 0x1 | 0x0
4832 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Locked = 0x1 | 0x0
4833 ```
4834 #### Windows (Intune)
4835 OMA-URI:
4836 ```
4837 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/A_SanitizeOnShutdown_Cache
4838 ```
4839 Value (string):
4840 ```
4841 <enabled/> or <disabled/>
4842 ```
4843 OMA-URI:
4844 ```
4845 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/B_SanitizeOnShutdown_Cookies
4846 ```
4847 Value (string):
4848 ```
4849 <enabled/> or <disabled/>
4850 ```
4851 OMA-URI:
4852 ```
4853 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/C_SanitizeOnShutdown_Downloads
4854 ```
4855 Value (string):
4856 ```
4857 <enabled/> or <disabled/>
4858 ```
4859 OMA-URI:
4860 ```
4861 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/D_SanitizeOnShutdown_FormData
4862 ```
4863 Value (string):
4864 ```
4865 <enabled/> or <disabled/>
4866 ```
4867 OMA-URI:
4868 ```
4869 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/E_SanitizeOnShutdown_History
4870 ```
4871 Value (string):
4872 ```
4873 <enabled/> or <disabled/>
4874 ```
4875 OMA-URI:
4876 ```
4877 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/F_SanitizeOnShutdown_Sessions
4878 ```
4879 Value (string):
4880 ```
4881 <enabled/> or <disabled/>
4882 ```
4883 OMA-URI:
4884 ```
4885 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/G_SanitizeOnShutdown_SiteSettings
4886 ```
4887 Value (string):
4888 ```
4889 <enabled/> or <disabled/>
4890 ```
4891 OMA-URI:
4892 ```
4893 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/H_SanitizeOnShutdown_OfflineApps
4894 ```
4895 Value (string):
4896 ```
4897 <enabled/> or <disabled/>
4898 ```
4899 OMA-URI:
4900 ```
4901 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/I_SanitizeOnShutdown_Locked
4902 ```
4903 Value (string):
4904 ```
4905 <enabled/> or <disabled/>
4906 ```
4907 #### macOS
4908 ```
4909 <dict>
4910   <key>SanitizeOnShutdown</key>
4911   <dict>
4912     <key>Cache</key>
4913     <true/> | <false/>
4914     <key>Cookies</key>
4915     <true/> | <false/>
4916     <key>Downloads</key>
4917     <true/> | <false/>
4918     <key>FormData</key>
4919     <true/> | <false/>
4920     <key>History</key>
4921     <true/> | <false/>
4922     <key>Sessions</key>
4923     <true/> | <false/>
4924     <key>SiteSettings</key>
4925     <true/> | <false/>
4926     <key>OfflineApps</key>
4927     <true/> | <false/>
4928     <key>Locked</key>
4929     <true/> | <false/>
4930   </dict>
4931 </dict>
4932 ```
4933 #### policies.json
4934 ```
4935 {
4936   "policies": {
4937     "SanitizeOnShutdown": {
4938       "Cache": true | false,
4939       "Cookies": true | false,
4940       "Downloads": true | false,
4941       "FormData": true | false,
4942       "History": true | false,
4943       "Sessions": true | false,
4944       "SiteSettings": true | false,
4945       "OfflineApps": true | false,
4946       "Locked": true | false
4947     }
4948   }
4949 }
4950 ```
4951 ### SanitizeOnShutdown (All)
4952 Clear all data on shutdown, including Browsing & Download History, Cookies, Active Logins, Cache, Form & Search History, Site Preferences and Offline Website Data.
4953
4954 **Compatibility:** Firefox 60, Firefox ESR 60\
4955 **CCK2 Equivalent:** N/A\
4956 **Preferences Affected:** `privacy.sanitize.sanitizeOnShutdown`, `privacy.clearOnShutdown.cache`, `privacy.clearOnShutdown.cookies`, `privacy.clearOnShutdown.downloads`, `privacy.clearOnShutdown.formdata`, `privacy.clearOnShutdown.history`, `privacy.clearOnShutdown.sessions`, `privacy.clearOnShutdown.siteSettings`, `privacy.clearOnShutdown.offlineApps`
4957 #### Windows (GPO)
4958 ```
4959 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown = 0x1 | 0x0
4960 ```
4961 #### Windows (Intune)
4962 OMA-URI:
4963 ```
4964 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/C_SanitizeOnShutdown
4965 ```
4966 Value (string):
4967 ```
4968 <enabled/> or <disabled/>
4969 ```
4970 #### macOS
4971 ```
4972 <dict>
4973   <key>SanitizeOnShutdown</key>
4974   <true/> | <false/>
4975 </dict>
4976 ```
4977 #### policies.json
4978 ```
4979 {
4980   "policies": {
4981     "SanitizeOnShutdown": true | false
4982   }
4983 }
4984 ```
4985 ### SearchBar
4986 Set whether or not search bar is displayed.
4987
4988 **Compatibility:** Firefox 60, Firefox ESR 60\
4989 **CCK2 Equivalent:** `showSearchBar`\
4990 **Preferences Affected:** N/A
4991
4992 #### Windows (GPO)
4993 ```
4994 Software\Policies\Mozilla\Firefox\SearchBar = "unified" | "separate"
4995 ```
4996
4997 #### Windows (Intune)
4998 OMA-URI:
4999 ```
5000 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SearchBar
5001 ```
5002 Value (string):
5003 ```
5004 <enabled/>
5005 <data id="SearchBar" value="unified | separate"/>
5006 ```
5007 #### macOS
5008 ```
5009 <dict>
5010   <key>SearchBar</key>
5011   <string>unified | separate</string>
5012 </dict>
5013 ```
5014 #### policies.json
5015 ```
5016 {
5017   "policies": {
5018     "SearchBar": "unified" | "separate"
5019   }
5020 }
5021 ```
5022 <a name="SearchEngines"></a>
5023
5024 ### SearchEngines (This policy is only available on the ESR.)
5025
5026 ### SearchEngines | Add
5027
5028 Add new search engines. Although there are only five engines available in the ADMX template, there is no limit. To add more in the ADMX template, you can duplicate the XML.
5029
5030 This policy is only available on the ESR. `Name` and `URLTemplate` are required.
5031
5032 `Name` is the name of the search engine.
5033
5034 `URLTemplate` is the search URL with {searchTerms} to substitute for the search term.
5035
5036 `Method` is either GET or POST
5037
5038 `IconURL` is a URL for the icon to use.
5039
5040 `Alias` is a keyword to use for the engine.
5041
5042 `Description` is a description of the search engine.
5043
5044 `PostData` is the POST data as name value pairs separated by &.
5045
5046 `SuggestURLTemplate` is a search suggestions URL with {searchTerms} to substitute for the search term.
5047
5048 `Encoding` is the query charset for the engine. It defaults to UTF-8.
5049
5050 **Compatibility:** Firefox ESR 60 (POST support in Firefox ESR 68, Encoding support in Firefox 91)\
5051 **CCK2 Equivalent:** `searchplugins`\
5052 **Preferences Affected:** N/A
5053
5054 #### Windows (GPO)
5055 ```
5056 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Name = "Example1"
5057 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\URLTemplate = "https://www.example.org/q={searchTerms}"
5058 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Method = "GET" | "POST"
5059 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\IconURL = "https://www.example.org/favicon.ico"
5060 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Alias = "example"
5061 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Description = "Example Description"
5062 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\SuggestURLTemplate = "https://www.example.org/suggestions/q={searchTerms}"
5063 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\PostData = "name=value&q={searchTerms}"
5064 ```
5065 #### Windows (Intune)
5066 OMA-URI:
5067 ```
5068 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_1
5069 ```
5070 Value (string):
5071 ```
5072 <enabled/>
5073 <data id="SearchEngine_Name" value="Example1"/>
5074 <data id="SearchEngine_URLTemplate" value="https://www.example.org/q={searchTerms"/>
5075 <data id="SearchEngine_Method" value="GET | POST"/>
5076 <data id="SearchEngine_IconURL" value="https://www.example.org/favicon.ico"/>
5077 <data id="SearchEngine_Alias" value="example"/>
5078 <data id="SearchEngine_Description" value="Example Description"/>
5079 <data id="SearchEngine_SuggestURLTemplate" value="https://www.example.org/suggestions/q={searchTerms}"/>
5080 <data id="SearchEngine_PostData" value="name=value&amp;q={searchTerms}"/>
5081 ```
5082 #### macOS
5083 ```
5084 <dict>
5085   <key>SearchEngines</key>
5086   <dict>
5087     <key>Add</key>
5088     <array>
5089       <dict>
5090         <key>Name</key>
5091         <string>Example1</string>
5092         <key>URLTemplate</key>
5093         <string>https://www.example.org/q={searchTerms}</string>
5094         <key>Method</key>
5095         <string>GET | POST </string>
5096         <key>IconURL</key>
5097         <string>https://www.example.org/favicon.ico</string>
5098         <key>Alias</key>
5099         <string>example</string>
5100         <key>Description</key>
5101         <string>Example Description</string>
5102         <key>SuggestURLTemplate</key>
5103         <string>https://www.example.org/suggestions/q={searchTerms}</string>
5104         <key>PostData</key>
5105         <string>name=value&q={searchTerms}</string>
5106       </dict>
5107     <array>
5108   </dict>
5109 </dict>
5110 ```
5111 #### policies.json
5112 ```
5113 {
5114   "policies": {
5115     "SearchEngines": {
5116       "Add": [
5117         {
5118           "Name": "Example1",
5119           "URLTemplate": "https://www.example.org/q={searchTerms}",
5120           "Method": "GET" | "POST",
5121           "IconURL": "https://www.example.org/favicon.ico",
5122           "Alias": "example",
5123           "Description": "Description",
5124           "PostData": "name=value&q={searchTerms}",
5125           "SuggestURLTemplate": "https://www.example.org/suggestions/q={searchTerms}"
5126         }
5127       ]
5128     }
5129   }
5130 }
5131 ```
5132 ### SearchEngines | Default
5133
5134 Set the default search engine. This policy is only available on the ESR.
5135
5136 **Compatibility:** Firefox ESR 60\
5137 **CCK2 Equivalent:** `defaultSearchEngine`\
5138 **Preferences Affected:** N/A
5139
5140 #### Windows (GPO)
5141 ```
5142 Software\Policies\Mozilla\Firefox\SearchEngines\Default = NAME_OF_SEARCH_ENGINE
5143 ```
5144 #### Windows (Intune)
5145 OMA-URI:
5146 ```
5147 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_Default
5148 ```
5149 Value (string):
5150 ```
5151 <enabled/>
5152 <data id="SearchEngines_Default" value="NAME_OF_SEARCH_ENGINE"/>
5153 ```
5154 #### macOS
5155 ```
5156 <dict>
5157   <key>SearchEngines</key>
5158   <dict>
5159     <key>Default</key>
5160     <string>NAME_OF_SEARCH_ENGINE</string>
5161   </dict>
5162 </dict>
5163 ```
5164 #### policies.json
5165 ```
5166 {
5167   "policies": {
5168     "SearchEngines": {
5169       "Default": "NAME_OF_SEARCH_ENGINE"
5170     }
5171   }
5172 }
5173 ```
5174 ### SearchEngines | PreventInstalls
5175
5176 Prevent installing search engines from webpages.
5177
5178 **Compatibility:** Firefox ESR 60\
5179 **CCK2 Equivalent:** `disableSearchEngineInstall`\
5180 **Preferences Affected:** N/A
5181
5182 #### Windows (GPO)
5183 ```
5184 Software\Policies\Mozilla\Firefox\SearchEngines\PreventInstalls = 0x1 | 0x0
5185 ```
5186 #### Windows (Intune)
5187 OMA-URI:
5188 ```
5189 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_PreventInstalls
5190 ```
5191 Value (string):
5192 ```
5193 <enabled/> or <disabled/>
5194 ```
5195 #### macOS
5196 ```
5197 <dict>
5198   <key>SearchEngines</key>
5199   <dict>
5200     <key>PreventInstalls</key>
5201     <true/> | <false/>
5202   </dict>
5203 </dict>
5204 ```
5205 #### policies.json
5206 ```
5207 {
5208   "policies": {
5209     "SearchEngines": {
5210       "PreventInstalls": true | false
5211     }
5212   }
5213 }
5214 ```
5215 ### SearchEngines | Remove
5216
5217 Hide built-in search engines. This policy is only available on the ESR.
5218
5219 **Compatibility:** Firefox ESR 60.2\
5220 **CCK2 Equivalent:** `removeDefaultSearchEngines` (removed all built-in engines)\
5221 **Preferences Affected:** N/A
5222
5223 #### Windows (GPO)
5224 ```
5225 Software\Policies\Mozilla\Firefox\SearchEngines\Remove\1 = NAME_OF_SEARCH_ENGINE
5226 ```
5227 #### Windows (Intune)
5228 OMA-URI:
5229 ```
5230 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_Remove
5231 ```
5232 Value (string):
5233 ```
5234 <enabled/>
5235 <data id="SearchEngines_Remove" value="1&#xF000;NAME_OF_SEARCH_ENGINE"/>
5236 ```
5237 #### macOS
5238 ```
5239 <dict>
5240   <key>SearchEngines</key>
5241   <dict>
5242     <key>Remove</key>
5243     <array>
5244       <string>NAME_OF_SEARCH_ENGINE</string>
5245     </array>
5246   </dict>
5247 </dict>
5248 ```
5249 #### policies.json
5250 ```
5251 {
5252   "policies": {
5253     "SearchEngines": {
5254       "Remove": ["NAME_OF_SEARCH_ENGINE"]
5255     }
5256   }
5257 }
5258 ```
5259 ### SearchSuggestEnabled
5260
5261 Enable search suggestions.
5262
5263 **Compatibility:** Firefox 68, Firefox ESR 68\
5264 **CCK2 Equivalent:** N/A\
5265 **Preferences Affected:** `browser.urlbar.suggest.searches`, `browser.search.suggest.enabled`
5266
5267 #### Windows (GPO)
5268 ```
5269 Software\Policies\Mozilla\Firefox\SearchSuggestEnabled = 0x1 | 0x0
5270 ```
5271 #### Windows (Intune)
5272 OMA-URI:
5273 ```
5274 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchSuggestEnabled
5275 ```
5276 Value (string):
5277 ```
5278 <enabled/> or <disabled/>
5279 ```
5280 #### macOS
5281 ```
5282 <dict>
5283   <key>SearchSuggestEnabled</key>
5284   <true/> | <false/>
5285 </dict>
5286 ```
5287 #### policies.json
5288 ```
5289 {
5290   "policies": {
5291     "SearchSuggestEnabled": true | false
5292   }
5293 }
5294 ```
5295 ### SecurityDevices
5296
5297 Install PKCS #11 modules.
5298
5299 **Compatibility:** Firefox 64, Firefox ESR 60.4\
5300 **CCK2 Equivalent:** `certs.devices`\
5301 **Preferences Affected:** N/A
5302
5303 #### Windows (GPO)
5304 ```
5305 Software\Policies\Mozilla\Firefox\SecurityDevices\NAME_OF_DEVICE = PATH_TO_LIBRARY_FOR_DEVICE
5306 ```
5307 #### Windows (Intune)
5308 OMA-URI:
5309 ```
5310 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SecurityDevices
5311 ```
5312 Value (string):
5313 ```
5314 <enabled/>
5315 <data id="SecurityDevices" value="NAME_OF_DEVICE&#xF000;PATH_TO_LIBRARY_FOR_DEVICE"/>
5316 ```
5317 #### macOS
5318 ```
5319 <dict>
5320   <key>SecurityDevices</key>
5321   <dict>
5322     <key>NAME_OF_DEVICE</key>
5323     <string>PATH_TO_LIBRARY_FOR_DEVICE</string>
5324   </dict>
5325 </dict>
5326 ```
5327
5328 #### policies.json
5329 ```
5330 {
5331   "policies": {
5332     "SecurityDevices": {
5333       "NAME_OF_DEVICE": "PATH_TO_LIBRARY_FOR_DEVICE"
5334     }
5335   }
5336 }
5337 ```
5338 ### ShowHomeButton
5339 Show the home button on the toolbar.
5340
5341 Future versions of Firefox will not show the home button by default.
5342
5343 **Compatibility:** Firefox 88, Firefox ESR 78.10\
5344 **CCK2 Equivalent:** N/A\
5345 **Preferences Affected:** N/A
5346
5347 #### Windows (GPO)
5348 ```
5349 Software\Policies\Mozilla\Firefox\ShowHomeButton = 0x1 | 0x0
5350 ```
5351 #### Windows (Intune)
5352 OMA-URI:
5353 ```
5354 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/Homepage_ShowHomeButton
5355 ```
5356 Value (string):
5357 ```
5358 <enabled/> or <disabled/>
5359 ```
5360 #### macOS
5361 ```
5362 <dict>
5363   <key>ShowHomeButton</key>
5364   <true/> | <false/>
5365 </dict>
5366 ```
5367 #### policies.json
5368 ```
5369 {
5370   "policies": {
5371     "ShowHomeButton": true | false
5372   }
5373 }
5374 ```
5375 ### SSLVersionMax
5376
5377 Set and lock the maximum version of TLS.
5378
5379 **Compatibility:** Firefox 66, Firefox ESR 60.6\
5380 **CCK2 Equivalent:** N/A\
5381 **Preferences Affected:** `security.tls.version.max`
5382
5383 #### Windows (GPO)
5384 ```
5385 Software\Policies\Mozilla\Firefox\SSLVersionMax = "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
5386 ```
5387 #### Windows (Intune)
5388 OMA-URI:
5389 ```
5390 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SSLVersionMax
5391 ```
5392 Value (string):
5393 ```
5394 <enabled/>
5395 <data id="SSLVersion" value="tls1 | tls1.2 | tls1.3"/>
5396 ```
5397 #### macOS
5398 ```
5399 <dict>
5400   <key>SSLVersionMax</key>
5401   <string>tls1 | tls1.1 | tls1.2 | tls1.3</string>
5402 </dict>
5403 ```
5404
5405 #### policies.json
5406 ```
5407 {
5408   "policies": {
5409     "SSLVersionMax": "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
5410   }
5411 }
5412 ```
5413 ### SSLVersionMin
5414
5415 Set and lock the minimum version of TLS.
5416
5417 **Compatibility:** Firefox 66, Firefox ESR 60.6\
5418 **CCK2 Equivalent:** N/A\
5419 **Preferences Affected:** `security.tls.version.min`
5420
5421 #### Windows (GPO)
5422 ```
5423 Software\Policies\Mozilla\Firefox\SSLVersionMin = "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
5424 ```
5425 #### Windows (Intune)
5426 OMA-URI:
5427 ```
5428 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SSLVersionMin
5429 ```
5430 Value (string):
5431 ```
5432 <enabled/>
5433 <data id="SSLVersion" value="tls1 | tls1.2 | tls1.3"/>
5434 ```
5435 #### macOS
5436 ```
5437 <dict>
5438   <key>SSLVersionMin</key>
5439   <string>tls1 | tls1.1 | tls1.2 | tls1.3</string>
5440 </dict>
5441 ```
5442
5443 #### policies.json
5444 ```
5445 {
5446   "policies": {
5447     "SSLVersionMin": "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
5448   }
5449 }
5450 ```
5451 ### SupportMenu
5452 Add a menuitem to the help menu for specifying support information.
5453
5454 **Compatibility:** Firefox 68.0.1, Firefox ESR 68.0.1\
5455 **CCK2 Equivalent:** helpMenu\
5456 **Preferences Affected:** N/A
5457
5458 #### Windows (GPO)
5459 ```
5460 Software\Policies\Mozilla\Firefox\SupportMenu\Title = "Support Menu"
5461 Software\Policies\Mozilla\Firefox\SupportMenu\URL = "http://example.com/support"
5462 Software\Policies\Mozilla\Firefox\SupportMenu\AccessKey = "S"
5463 ```
5464 #### Windows (Intune)
5465 OMA-URI:
5466 ```
5467 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SupportMenu
5468 ```
5469 Value (string):
5470 ```
5471 <enabled/>
5472 <data id="SupportMenuTitle" value="Support Menu"/>
5473 <data id="SupportMenuURL" value="http://example.com/support"/>
5474 <data id="SupportMenuAccessKey" value="S">
5475 ```
5476 #### macOS
5477 ```
5478 <dict>
5479   <key>SupportMenu</key>
5480   <dict>
5481     <key>Title</key>
5482     <string>SupportMenu</string>
5483     <key>URL</key>
5484     <string>http://example.com/support</string>
5485     <key>AccessKey</key>
5486     <string>S</string>
5487   </dict>
5488 </dict>
5489 ```
5490 #### policies.json
5491 ```
5492 {
5493   "policies": {
5494     "SupportMenu": {
5495       "Title": "Support Menu",
5496       "URL": "http://example.com/support",
5497       "AccessKey": "S"
5498     }
5499   }
5500 }
5501 ```
5502 ### UserMessaging
5503
5504 Prevent Firefox from messaging the user in certain situations.
5505
5506 `WhatsNew` Remove the "What's New" icon and menuitem.
5507
5508 `ExtensionRecommendations` If false, don't recommend extensions while the user is visiting web pages.
5509
5510 `FeatureRecommendations` If false, don't recommend browser features.
5511
5512 `UrlbarInterventions` If false, Don't offer Firefox specific suggestions in the URL bar.
5513
5514 `SkipOnboarding` If true, don't show onboarding messages on the new tab page.
5515
5516 **Compatibility:** Firefox 75, Firefox ESR 68.7\
5517 **CCK2 Equivalent:** N/A\
5518 **Preferences Affected:** `browser.messaging-system.whatsNewPanel.enabled`, `browser.newtabpage.activity-stream.asrouter.userprefs.cfr.addons`, `browser.newtabpage.activity-stream.asrouter.userprefs.cfr.features`, `browser.aboutwelcome.enabled`
5519
5520 #### Windows (GPO)
5521 ```
5522 Software\Policies\Mozilla\Firefox\UserMessaging\WhatsNew = 0x1 | 0x0
5523 Software\Policies\Mozilla\Firefox\UserMessaging\ExtensionRecommendations = 0x1 | 0x0
5524 Software\Policies\Mozilla\Firefox\UserMessaging\FeatureRecommendations = 0x1 | 0x0
5525 Software\Policies\Mozilla\Firefox\UserMessaging\UrlbarInterventions = 0x1 | 0x0
5526 Software\Policies\Mozilla\Firefox\UserMessaging\SkipOnboarding = 0x1 | 0x0
5527 ```
5528 #### Windows (Intune)
5529 OMA-URI:
5530 ```
5531 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_WhatsNew
5532 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_ExtensionRecommendations
5533 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_FeatureRecommendations
5534 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_UrlbarInterventions
5535 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_SkipOnboarding
5536 ```
5537 Value (string):
5538 ```
5539 <enabled/> or <disabled/>
5540 ```
5541 #### macOS
5542 ```
5543 <dict>
5544   <key>UserMessaging</key>
5545   <dict>
5546     <key>WhatsNew</key>
5547     <true/> | <false/>
5548     <key>ExtensionRecommendations</key>
5549     <true/> | <false/>
5550     <key>FeatureRecommendations</key>
5551     <true/> | <false/>
5552     <key>UrlbarInterventions</key>
5553     <true/> | <false/>
5554     <key>SkipOnboarding</key>
5555     <true/> | <false/>
5556   </dict>
5557 </dict>
5558 ```
5559 #### policies.json
5560 ```
5561 {
5562   "policies": {
5563     "UserMessaging": {
5564       "WhatsNew": true | false,
5565       "ExtensionRecommendations": true | false,
5566       "FeatureRecommendations": true | false,
5567       "UrlbarInterventions": true | false
5568       "SkipOnboarding": true | false
5569     }
5570   }
5571 }
5572 ```
5573 ### WebsiteFilter
5574 Block websites from being visited. The parameters take an array of Match Patterns, as documented in https://developer.mozilla.org/en-US/Add-ons/WebExtensions/Match_patterns.
5575 The arrays are limited to 1000 entries each.
5576
5577 If you want to block all URLs, you can use `<all_urls>` or `*://*/*`. You can't have just a `*` on the right side.
5578
5579 For specific protocols, use `https://*/*` or `http://*/*`.
5580
5581 As of Firefox 83 and Firefox ESR 78.5, file URLs are supported.
5582
5583 **Compatibility:** Firefox 60, Firefox ESR 60\
5584 **CCK2 Equivalent:** N/A\
5585 **Preferences Affected:** N/A
5586
5587 #### Windows (GPO)
5588 ```
5589 Software\Policies\Mozilla\Firefox\WebsiteFilter\Block\1 = "<all_urls>"
5590 Software\Policies\Mozilla\Firefox\WebsiteFilter\Exceptions\1 = "http://example.org/*"
5591 ```
5592 #### Windows (Intune)
5593 OMA-URI:
5594 ```
5595 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/B_WebsiteFilter_Block
5596 ```
5597 Value (string):
5598 ```
5599 <enabled/> <data id="WebsiteFilter" value="1&#xF000;&#60;all_urls&#62;"/>
5600 ```
5601 OMA-URI:
5602 ```
5603 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/B_WebsiteFilter_Exceptions
5604 ```
5605 Value (string):
5606 ```
5607 <enabled/>
5608 <data id="WebsiteFilter" value="1&#xF000;http://example.org/*"/>
5609 ```
5610 #### macOS
5611 ```
5612 <dict>
5613   <key>WebsiteFilter</key>
5614   <dict>
5615     <key>Block</key>
5616     <array>
5617       <string><all_urls></string>
5618     </array>
5619     <key>Exceptions</key>
5620     <array>
5621       <string>http://example.org/*</string>
5622     </array>
5623   </dict>
5624
5625 </dict>
5626 ```
5627 #### policies.json
5628 ```
5629 {
5630   "policies": {
5631     "WebsiteFilter": {
5632       "Block": ["<all_urls>"],
5633       "Exceptions": ["http://example.org/*"]
5634     }
5635   }
5636 }
5637 ```
5638 ### WindowsSSO
5639 Allow Windows single sign-on for Microsoft, work, and school accounts.
5640
5641 If this policy is set to true, Firefox will use credentials stored in Windows to sign in to Microsoft, work, and school accounts.
5642
5643 **Compatibility:** Firefox 91\
5644 **CCK2 Equivalent:** N/A\
5645 **Preferences Affected:** `network.http.windows-sso.enabled`
5646
5647 #### Windows (GPO)
5648 ```
5649 Software\Policies\Mozilla\Firefox\WindowsSSO = 0x1 | 0x0
5650 ```
5651 #### Windows (Intune)
5652 OMA-URI:
5653 ```
5654 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/WindowsSSO
5655 ```
5656 Value (string):
5657 ```
5658 <enabled/> or <disabled/>
5659 ```
5660 #### policies.json
5661 ```
5662 {
5663   "policies": {
5664     "WindowsSSO": true | false
5665   }
5666 }
5667 ```