README.md

   1 **These policies are in active development and so might contain changes that do not work with current versions of Firefox.**
   2
   3 **You should use the [officially released versions](https://github.com/mozilla/policy-templates/releases) if you are deploying changes.**
   4
   5 Policies can be specified using the [Group Policy templates on Windows](https://github.com/mozilla/policy-templates/tree/master/windows), [Intune on Windows](https://support.mozilla.org/kb/managing-firefox-intune), [configuration profiles on macOS](https://github.com/mozilla/policy-templates/tree/master/mac), or by creating a file called `policies.json`. On Windows, create a directory called `distribution` where the EXE is located and place the file there. On Mac, the file goes into `Firefox.app/Contents/Resources/distribution`.  On Linux, the file goes into `firefox/distribution`, where `firefox` is the installation directory for firefox, which varies by distribution or you can specify system-wide policy by placing the file in `/etc/firefox/policies`.
   6
   7 | Policy Name | Description
   8 | --- | --- |
   9 | **[`AppAutoUpdate`](#appautoupdate)** |  Enable or disable automatic application update.
  10 | **[`AppUpdateURL`](#appupdateurl)** | Change the URL for application update.
  11 | **[`Authentication`](#authentication)** | Configure sites that support integrated authentication.
  12 | **[`BlockAboutAddons`](#blockaboutaddons)** | Block access to the Add-ons Manager (about:addons).
  13 | **[`BlockAboutConfig`](#blockaboutconfig)** | Block access to about:config.
  14 | **[`BlockAboutProfiles`](#blockaboutprofiles)** | Block access to About Profiles (about:profiles).
  15 | **[`BlockAboutSupport`](#blockaboutsupport)** | Block access to Troubleshooting Information (about:support).
  16 | **[`Bookmarks`](#bookmarks)** | Add bookmarks in either the bookmarks toolbar or menu.
  17 | **[`CaptivePortal`](#captiveportal)** | Enable or disable the detection of captive portals.
  18 | **[`Certificates`](#certificates)** |
  19 | **[`Certificates -> ImportEnterpriseRoots`](#certificates--importenterpriseroots)** | Trust certificates that have been added to the operating system certificate store by a user or administrator.
  20 | **[`Certificates -> Install`](#certificates--install)** | Install certificates into the Firefox certificate store.
  21 | **[`Cookies`](#cookies)** | Configure cookie preferences.
  22 | **[`DisableAppUpdate`](#disableappupdate)** | Turn off application updates.
  23 | **[`DisableBuiltinPDFViewer`](#disablebuiltinpdfviewer)** | Disable the built in PDF viewer.
  24 | **[`DisabledCiphers`](#disabledciphers)** | Disable ciphers.
  25 | **[`DisableDefaultBrowserAgent`](#disabledefaultbrowseragent)** | Prevent the default browser agent from taking any actions (Windows only).
  26 | **[`DisableDeveloperTools`](#disabledevelopertools)** | Remove access to all developer tools.
  27 | **[`DisableFeedbackCommands`](#disablefeedbackcommands)** | Disable the menus for reporting sites.
  28 | **[`DisableFirefoxScreenshots`](#disablefirefoxscreenshots)** | Remove access to Firefox Screenshots.
  29 | **[`DisableFirefoxAccounts`](#disablefirefoxaccounts)** | Disable Firefox Accounts integration (Sync).
  30 | **[`DisableFirefoxStudies`](#disablefirefoxstudies)** | Disable Firefox studies (Shield).
  31 | **[`DisableForgetButton`](#disableforgetbutton)** | Disable the "Forget" button.
  32 | **[`DisableFormHistory`](#disableformhistory)** | Turn off saving information on web forms and the search bar.
  33 | **[`DisableMasterPasswordCreation`](#disablemasterpasswordcreation)** | Remove the master password functionality.
  34 | **[`DisablePasswordReveal`](#disablepasswordreveal)** | Do not allow passwords to be revealed in saved logins.
  35 | **[`DisablePocket`](#disablepocket)** | Remove Pocket in the Firefox UI.
  36 | **[`DisablePrivateBrowsing`](#disableprivatebrowsing)** | Remove access to private browsing.
  37 | **[`DisableProfileImport`](#disableprofileimport)** | Disables the "Import data from another browser" option in the bookmarks window.
  38 | **[`DisableProfileRefresh`](#disableprofilerefresh)** | Disable the Refresh Firefox button on about:support and support.mozilla.org
  39 | **[`DisableSafeMode`](#disablesafemode)** | Disable safe mode within the browser.
  40 | **[`DisableSecurityBypass`](#disablesecuritybypass)** | Prevent the user from bypassing security in certain cases.
  41 | **[`DisableSetDesktopBackground`](#disablesetdesktopbackground)** | Remove the "Set As Desktop Background..." menuitem when right clicking on an image.
  42 | **[`DisableSystemAddonUpdate`](#disablesystemaddonupdate)** | Prevent system add-ons from being installed or update.
  43 | **[`DisableTelemetry`](#disabletelemetry)** | DisableTelemetry
  44 | **[`DisplayBookmarksToolbar`](#displaybookmarkstoolbar)** | Set the initial state of the bookmarks toolbar.
  45 | **[`DisplayMenuBar (Deprecated)`](#displaymenubar-deprecated)** | Set the initial state of the menubar.
  46 | **[`DisplayMenuBar`](#displaymenubar)** | Set the state of the menubar.
  47 | **[`DNSOverHTTPS`](#dnsoverhttps)** | Configure DNS over HTTPS.
  48 | **[`DontCheckDefaultBrowser`](#dontcheckdefaultbrowser)** | Don't check if Firefox is the default browser at startup.
  49 | **[`DefaultDownloadDirectory`](#defaultdownloaddirectory)** | Set the default download directory.
  50 | **[`DownloadDirectory`](#downloaddirectory)** | Set and lock the download directory.
  51 | **[`EnableTrackingProtection`](#enabletrackingprotection)** | Configure tracking protection.
  52 | **[`EncryptedMediaExtensions`](#encryptedmediaextensions)** | Enable or disable Encrypted Media Extensions and optionally lock it.
  53 | **[`EnterprisePoliciesEnabled`](#enterprisepoliciesenabled)** | Enable policy support on macOS.
  54 | **[`Extensions`](#extensions)** | Control the installation, uninstallation and locking of extensions.
  55 | **[`ExtensionSettings`](#extensionsettings)** | Manage all aspects of extensions.
  56 | **[`ExtensionUpdate`](#extensionupdate)** | Control extension updates.
  57 | **[`FlashPlugin`](#flashplugin)** | Configure the default Flash plugin policy as well as origins for which Flash is allowed.
  58 | **[`FirefoxHome`](#firefoxhome)** | Customize the Firefox Home page.
  59 | **[`HardwareAcceleration`](#hardwareacceleration)** | Control hardware acceleration.
  60 | **[`Handlers`](#handlers)** | Configure default application handlers.
  61 | **[`Homepage`](#homepage)** | Configure the default homepage and how Firefox starts.
  62 | **[`InstallAddonsPermission`](#installaddonspermission)** | Configure the default extension install policy as well as origins for extension installs are allowed.
  63 | **[`LegacyProfiles`](#legacyprofiles)** | Disable the feature enforcing a separate profile for each installation.
  64 | **[`LocalFileLinks`](#localfilelinks)** | Enable linking to local files by origin.
  65 | **[`PrimaryPassword`](#primarypassword)** | Require or prevent using a primary (formerly master) password.
  66 | **[`NetworkPrediction`](#networkprediction)** | Enable or disable network prediction (DNS prefetching).
  67 | **[`NewTabPage`](#newtabpage)** | Enable or disable the New Tab page.
  68 | **[`NoDefaultBookmarks`](#nodefaultbookmarks)** | Disable the creation of default bookmarks.
  69 | **[`OfferToSaveLogins`](#offertosavelogins)** | Control whether or not Firefox offers to save passwords.
  70 | **[`OfferToSaveLoginsDefault`](#offertosaveloginsdefault)** | Set the default value for whether or not Firefox offers to save passwords.
  71 | **[`OverrideFirstRunPage`](#overridefirstrunpage)** | Override the first run page.
  72 | **[`OverridePostUpdatePage`](#overridepostupdatepage)** | Override the upgrade page.
  73 | **[`PasswordManagerEnabled`](#passwordmanagerenabled)** | Remove (some) access to the password manager.
  74 | **[`PDFjs`](#pdfjs)** | Disable or configure PDF.js, the built-in PDF viewer.
  75 | **[`Permissions`](#permissions)** | Set permissions associated with camera, microphone, location, and notifications.
  76 | **[`PictureInPicture`](#pictureinpicture)** | Enable or disable Picture-in-Picture.
  77 | **[`PopupBlocking`](#popupblocking)** | Configure the default pop-up window policy as well as origins for which pop-up windows are allowed.
  78 | **[`Preferences`](#preferences)** | Set and lock some preferences.
  79 | **[`PromptForDownloadLocation`](#promptfordownloadlocation)** | Ask where to save each file before downloading.
  80 | **[`Proxy`](#proxy)** | Configure proxy settings.
  81 | **[`RequestedLocales`](#requestedlocales)** | Set the the list of requested locales for the application in order of preference.
  82 | **[`SanitizeOnShutdown` (All)](#sanitizeonshutdown-all)** | Clear all data on shutdown.
  83 | **[`SanitizeOnShutdown` (Selective)](#sanitizeonshutdown-selective)** | Clear data on shutdown.
  84 | **[`SearchBar`](#searchbar)** | Set whether or not search bar is displayed.
  85 | **[`SearchEngines`](#searchengines-this-policy-is-only-available-on-the-esr)** |
  86 | **[`SearchEngines -> Default`](#searchengines--default)** | Set the default search engine.
  87 | **[`SearchEngines -> PreventInstalls`](#searchengines--preventinstalls)** | Prevent installing search engines from webpages.
  88 | **[`SearchEngines -> Remove`](#searchengines--remove)** | Hide built-in search engines.
  89 | **[`SearchEngines -> Add`](#searchengines--add)** | Add new search engines.
  90 | **[`SearchSuggestEnabled`](#searchsuggestenabled)** | Enable search suggestions.
  91 | **[`SecurityDevices`](#securitydevices)** | Install PKCS #11 modules.
  92 | **[`SSLVersionMax`](#sslversionmax)** | Set and lock the maximum version of TLS.
  93 | **[`SSLVersionMin`](#sslversionmin)** | Set and lock the minimum version of TLS.
  94 | **[`SupportMenu`](#supportmenu)** | Add a menuitem to the help menu for specifying support information.
  95 | **[`UserMessaging`](#usermessaging)** | Don't show certain messages to the user.
  96 | **[`WebsiteFilter`](#websitefilter)** | Block websites from being visited.
  97
  98 ### AppAutoUpdate
  99
 100 Enable or disable **automatic** application update.
 101
 102 If set to true, application updates are installed without user approval.
 103
 104 If set to false, application updates are downloaded but the user can choose when to install the update.
 105
 106 If you have disabled updates via DisableAppUpdate, this policy has no effect.
 107
 108 **Compatibility:** Firefox 75, Firefox ESR 68.7\
 109 **CCK2 Equivalent:** N/A\
 110 **Preferences Affected:** app.update.auto
 111
 112 #### Windows (GPO)
 113 ```
 114 Software\Policies\Mozilla\Firefox\AppAutoUpdate = 0x1 | 0x0
 115 ```
 116 #### Windows (Intune)
 117 OMA-URI:
 118 ```
 119 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AppAutoUpdate
 120 ```
 121 Value (string):
 122 ```
 123 <enabled/> or <disabled/>
 124 ```
 125 #### macOS
 126 ```
 127 <dict>
 128   <key>AppAutoUpdate</key>
 129   <true/> | <false/>
 130 </dict>
 131 ```
 132 #### policies.json
 133 ```
 134 {
 135   "policies": {
 136     "AppAutoUpdate": true | false
 137   }
 138 }
 139 ```
 140 ### AppUpdateURL
 141
 142 Change the URL for application update.
 143
 144 **Compatibility:** Firefox 62, Firefox ESR 60.2\
 145 **CCK2 Equivalent:** N/A\
 146 **Preferences Affected:** `app.update.url`
 147
 148 #### Windows (GPO)
 149 ```
 150 Software\Policies\Mozilla\Firefox\AppUpdateURL = "https://yoursite.com"
 151 ```
 152 #### Windows (Intune)
 153 OMA-URI:
 154 ```
 155 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AppUpdateURL
 156 ```
 157 Value (string):
 158 ```
 159 <enabled/>
 160 <data id="AppUpdateURL" value="https://yoursite.com"/>
 161 ```
 162 #### macOS
 163 ```
 164 <dict>
 165   <key>AppUpdateURL</key>
 166   <string>https://yoursite.com</string>
 167 </dict>
 168 ```
 169 #### policies.json
 170 ```
 171 {
 172   "policies": {
 173     "AppUpdateURL": "https://yoursite.com"
 174   }
 175 }
 176 ```
 177 ### Authentication
 178
 179 Configure sites that support integrated authentication.
 180
 181 See https://developer.mozilla.org/en-US/docs/Mozilla/Integrated_authentication for more information.
 182
 183 `PrivateBrowsing` enables integrated authentication in prviate browsing.
 184
 185 **Compatibility:** Firefox 60, Firefox ESR 60 (AllowNonFQDN added in 62/60.2, AllowProxies added in 70/68.2, Locked added in 71/68.3, PrivateBrowsing added in 77/68.9)\
 186 **CCK2 Equivalent:** N/A\
 187 **Preferences Affected:** `network.negotiate-auth.trusted-uris`,`network.negotiate-auth.delegation-uris`,`network.automatic-ntlm-auth.trusted-uris`,`network.automatic-ntlm-auth.allow-non-fqdn`,`network.negotiate-auth.allow-non-fqdn`,`network.automatic-ntlm-auth.allow-proxies`,`network.negotiate-auth.allow-proxies`,`network.auth.private-browsing-sso`
 188
 189 #### Windows (GPO)
 190 ```
 191 Software\Policies\Mozilla\Firefox\Authentication\SPNEGO\1 = "mydomain.com"
 192 Software\Policies\Mozilla\Firefox\Authentication\SPNEGO\2 = "https://myotherdomain.com"
 193 Software\Policies\Mozilla\Firefox\Authentication\Delegated\1 = "mydomain.com"
 194 Software\Policies\Mozilla\Firefox\Authentication\Delegated\2 = "https://myotherdomain.com"
 195 Software\Policies\Mozilla\Firefox\Authentication\NTLM\1 = "mydomain.com"
 196 Software\Policies\Mozilla\Firefox\Authentication\NTLM\2 = "https://myotherdomain.com"
 197 Software\Policies\Mozilla\Firefox\Authentication\AllowNonFQDN\SPNEGO = 0x1 | 0x0
 198 Software\Policies\Mozilla\Firefox\Authentication\AllowNonFQDN\NTLM = 0x1 | 0x0
 199 Software\Policies\Mozilla\Firefox\Authentication\AllowProxies\SPNEGO = 0x1 | 0x0
 200 Software\Policies\Mozilla\Firefox\Authentication\AllowProxies\NTLM = 0x1 | 0x0
 201 Software\Policies\Mozilla\Firefox\Authentication\Locked = 0x1 | 0x0
 202 Software\Policies\Mozilla\Firefox\Authentication\PrivateBrowsing = 0x1 | 0x0
 203 ```
 204 #### Windows (Intune)
 205 OMA-URI:
 206 ```
 207 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_SPNEGO
 208 ```
 209 Value (string):
 210 ```
 211 <enabled/>
 212 <data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
 213 ```
 214 OMA-URI:
 215 ```
 216 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_Delegated
 217 ```
 218 Value (string):
 219 ```
 220 <enabled/>
 221 <data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
 222 ```
 223 OMA-URI:
 224 ```
 225 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_NTLM
 226 ```
 227 Value (string):
 228 ```
 229 <enabled/>
 230 <data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
 231 ```
 232 OMA-URI:
 233 ```
 234 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_AllowNonFQDN
 235 ```
 236 Value (string):
 237 ```
 238 <enabled/>
 239 <data id="Authentication_AllowNonFQDN_NTLM" value="true | false"/>
 240 <data id="Authentication_AllowNonFQDN_SPNEGO" value="true | false"/>
 241 ```
 242 OMA-URI:
 243 ```
 244 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_Locked
 245 ```
 246 Value (string):
 247 ```
 248 <enabled/> or <disabled/>
 249 ```
 250 OMA-URI:
 251 ```
 252 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_PrivateBrowsing
 253 ```
 254 Value (string):
 255 ```
 256 <enabled/> or <disabled/>
 257 ```
 258 #### macOS
 259 ```
 260 <dict>
 261   <key>Authentication</key>
 262   <dict>
 263     <key>SPNEGO</key>
 264     <array>
 265       <string>mydomain.com</string>
 266       <string>https://myotherdomain.com</string>
 267     </array>
 268     <key>Delegated</key>
 269     <array>
 270       <string>mydomain.com</string>
 271       <string>https://myotherdomain.com</string>
 272     </array>
 273     <key>NTLM</key>
 274     <array>
 275       <string>mydomain.com</string>
 276       <string>https://myotherdomain.com</string>
 277     </array>
 278     <key>AllowNonFQDN</key>
 279       <dict>
 280       <key>SPNEGO</key>
 281       <true/> | <false/>
 282       <key>NTLM</key>
 283       <true/> | <false/>
 284     </dict>
 285     <key>AllowProxies</key>
 286       <dict>
 287       <key>SPNEGO</key>
 288       <true/> | <false/>
 289       <key>NTLM</key>
 290       <true/> | <false/>
 291     </dict>
 292     <key>Locked</key>
 293     <true/> | <false/>
 294     <key>PrivateBrowsing</key>
 295     <true/> | <false/>
 296   </dict>
 297 </dict>
 298 ```
 299 #### policies.json
 300 ```
 301 {
 302   "policies": {
 303     "Authentication": {
 304       "SPNEGO": ["mydomain.com", "https://myotherdomain.com"],
 305       "Delegated": ["mydomain.com", "https://myotherdomain.com"],
 306       "NTLM": ["mydomain.com", "https://myotherdomain.com"],
 307       "AllowNonFQDN": {
 308         "SPNEGO": true | false,
 309         "NTLM": true | false
 310       },
 311       "AllowProxies": {
 312         "SPNEGO": true | false,
 313         "NTLM": true | false
 314       },
 315       "Locked": true | false,
 316       "PrivateBrowsing": true | false
 317     }
 318   }
 319 }
 320 ```
 321 ### BlockAboutAddons
 322
 323 Block access to the Add-ons Manager (about:addons).
 324
 325 **Compatibility:** Firefox 60, Firefox ESR 60\
 326 **CCK2 Equivalent:** `disableAddonsManager`\
 327 **Preferences Affected:** N/A
 328
 329 #### Windows (GPO)
 330 ```
 331 Software\Policies\Mozilla\Firefox\BlockAboutAddons = 0x1 | 0x0
 332 ```
 333 #### Windows (Intune)
 334 OMA-URI:
 335 ```
 336 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutAddons
 337 ```
 338 Value (string):
 339 ```
 340 <enabled/> or <disabled/>
 341 ```
 342 #### macOS
 343 ```
 344 <dict>
 345   <key>BlockAboutAddons</key>
 346   <true/> | <false/>
 347 </dict>
 348 ```
 349 #### policies.json
 350 ```
 351 {
 352   "policies": {
 353     "BlockAboutAddons": true | false
 354   }
 355 }
 356 ```
 357 ### BlockAboutConfig
 358
 359 Block access to about:config.
 360
 361 **Compatibility:** Firefox 60, Firefox ESR 60\
 362 **CCK2 Equivalent:** `disableAboutConfig`\
 363 **Preferences Affected:** N/A
 364
 365 #### Windows (GPO)
 366 ```
 367 Software\Policies\Mozilla\Firefox\BlockAboutConfig = 0x1 | 0x0
 368 ```
 369 #### Windows (Intune)
 370 OMA-URI:
 371 ```
 372 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutConfig
 373 ```
 374 Value (string):
 375 ```
 376 <enabled/> or <disabled/>
 377 ```
 378 #### macOS
 379 ```
 380 <dict>
 381   <key>BlockAboutConfig</key>
 382   <true/> | <false/>
 383 </dict>
 384 ```
 385 #### policies.json
 386 ```
 387 {
 388   "policies": {
 389     "BlockAboutConfig": true | false
 390   }
 391 }
 392 ```
 393 ### BlockAboutProfiles
 394
 395 Block access to About Profiles (about:profiles).
 396
 397 **Compatibility:** Firefox 60, Firefox ESR 60\
 398 **CCK2 Equivalent:** `disableAboutProfiles`\
 399 **Preferences Affected:** N/A
 400
 401 #### Windows (GPO)
 402 ```
 403 Software\Policies\Mozilla\Firefox\BlockAboutProfiles = 0x1 | 0x0
 404 ```
 405 #### Windows (Intune)
 406 OMA-URI:
 407 ```
 408 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutProfiles
 409 ```
 410 Value (string):
 411 ```
 412 <enabled/> or <disabled/>
 413 ```
 414 #### macOS
 415 ```
 416 <dict>
 417   <key>BlockAboutProfiles</key>
 418   <true/> | <false/>
 419 </dict>
 420 ```
 421 #### policies.json
 422 ```
 423 {
 424   "policies": {
 425     "BlockAboutProfiles": true | false
 426   }
 427 }
 428 ```
 429 ### BlockAboutSupport
 430
 431 Block access to Troubleshooting Information (about:support).
 432
 433 **Compatibility:** Firefox 60, Firefox ESR 60\
 434 **CCK2 Equivalent:** `disableAboutSupport`\
 435 **Preferences Affected:** N/A
 436
 437 #### Windows (GPO)
 438 ```
 439 Software\Policies\Mozilla\Firefox\BlockAboutSupport = 0x1 | 0x0
 440 ```
 441 #### Windows (Intune)
 442 OMA-URI:
 443 ```
 444 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutSupport
 445 ```
 446 Value (string):
 447 ```
 448 <enabled/> or <disabled/>
 449 ```
 450 #### macOS
 451 ```
 452 <dict>
 453   <key>BlockAboutSupport</key>
 454   <true/> | <false/>
 455 </dict>
 456 ```
 457 #### policies.json
 458 ```
 459 {
 460   "policies": {
 461     "BlockAboutSupport": true | false
 462   }
 463 }
 464 ```
 465 ### Bookmarks
 466
 467 Add bookmarks in either the bookmarks toolbar or menu. Only `Title` and `URL` are required. If `Placement` is not specified, the bookmark will be placed on the toolbar. If `Folder` is specified, it is automatically created and bookmarks with the same folder name are grouped together.
 468
 469 **Compatibility:** Firefox 60, Firefox ESR 60\
 470 **CCK2 Equivalent:** `bookmarks.toolbar`,`bookmarks.menu`\
 471 **Preferences Affected:** N/A
 472
 473 #### Windows (GPO)
 474 ```
 475 Software\Policies\Mozilla\Firefox\Bookmarks\1\Title = "Example"
 476 Software\Policies\Mozilla\Firefox\Bookmarks\1\URL = "https://example.com"
 477 Software\Policies\Mozilla\Firefox\Bookmarks\1\Favicon = "https://example.com/favicon.ico"
 478 Software\Policies\Mozilla\Firefox\Bookmarks\1\Placement = "toolbar" | "menu"
 479 Software\Policies\Mozilla\Firefox\Bookmarks\1\Folder = "FolderName"
 480 ```
 481 #### Windows (Intune)
 482 OMA-URI:
 483 ```
 484 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Bookmarks/Bookmark01
 485 ```
 486 Value (string):
 487 ```
 488 <enabled/>
 489 <data id="BookmarkTitle" value="Example"/>
 490 <data id="BookmarkURL" value="https://example.com"/>
 491 <data id="BookmarkFavicon" value="https://example.com/favicon.ico"/>
 492 <data id="BookmarkPlacement" value="toolbar | menu"/>
 493 <data id="BookmarkFolder" value="FolderName"/>
 494 ```
 495 #### macOS
 496 ```
 497 <dict>
 498   <key>Bookmarks</key>
 499   <array>
 500     <dict>
 501       <key>Title</key>
 502       <string>Example</string>
 503       <key>URL</key>
 504       <string>https://example.com</string>
 505       <key>Favicon</key>
 506       <string>https://example.com/favicon.ico</string>
 507       <key>Placement</key>
 508       <string>toolbar | menu</string>
 509       <key>Folder</key>
 510       <string>FolderName</string>
 511     </dict>
 512   </array>
 513 </dict>
 514 ```
 515 #### policies.json
 516 ```
 517 {
 518   "policies": {
 519     "Bookmarks": [
 520       {
 521         "Title": "Example",
 522         "URL": "https://example.com",
 523         "Favicon": "https://example.com/favicon.ico",
 524         "Placement": "toolbar" | "menu",
 525         "Folder": "FolderName"
 526       }
 527     ]
 528   }
 529 }
 530 ```
 531 ### CaptivePortal
 532 Enable or disable the detection of captive portals.
 533
 534 **Compatibility:** Firefox 67, Firefox ESR 60.7\
 535 **CCK2 Equivalent:** N/A\
 536 **Preferences Affected:** `network.captive-portal-service.enabled`
 537
 538 #### Windows (GPO)
 539 ```
 540 Software\Policies\Mozilla\Firefox\CaptivePortal = 0x1 | 0x0
 541 ```
 542 #### Windows (Intune)
 543 OMA-URI:
 544 ```
 545 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/CaptivePortal
 546 ```
 547 Value (string):
 548 ```
 549 <enabled/> or <disabled/>
 550 ```
 551 #### macOS
 552 ```
 553 <dict>
 554   <key>CaptivePortal</key>
 555   <true/> | <false/>
 556 </dict>
 557 ```
 558 #### policies.json
 559 ```
 560 {
 561   "policies": {
 562     "CaptivePortal": true | false
 563   }
 564 }
 565 ```
 566 ### Certificates
 567
 568 ### Certificates | ImportEnterpriseRoots
 569
 570 Trust certificates that have been added to the operating system certificate store by a user or administrator.
 571
 572 Note: This policy only works on Windows and macOS. For Linux discussion, see [bug 1600509](https://bugzilla.mozilla.org/show_bug.cgi?id=1600509).
 573
 574 See https://support.mozilla.org/kb/setting-certificate-authorities-firefox for more detail.
 575
 576 **Compatibility:** Firefox 60, Firefox ESR 60 (macOS support in Firefox 63, Firefox ESR 68)\
 577 **CCK2 Equivalent:** N/A\
 578 **Preferences Affected:** `security.enterprise_roots.enabled`
 579
 580 #### Windows (GPO)
 581 ```
 582 Software\Policies\Mozilla\Firefox\Certificates\ImportEnterpriseRoots = 0x1 | 0x0
 583 ```
 584 #### Windows (Intune)
 585 OMA-URI:
 586 ```
 587 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Certificates/Certificates_ImportEnterpriseRoots
 588 ```
 589 Value (string):
 590 ```
 591 <enabled/> or <disabled/>
 592 ```
 593 #### macOS
 594 ```
 595 <dict>
 596   <key>Certificates</key>
 597   <dict>
 598     <key>ImportEnterpriseRoots</key>
 599     <true/> | <false/>
 600   </dict>
 601 </dict>
 602 ```
 603 #### policies.json
 604 ```
 605 {
 606   "policies": {
 607     "Certificates": {
 608       "ImportEnterpriseRoots": true | false
 609     }
 610   }
 611 }
 612 ```
 613 ### Certificates | Install
 614
 615 Install certificates into the Firefox certificate store. If only a filename is specified, Firefox searches for the file in the following locations:
 616
 617 - Windows
 618   - %USERPROFILE%\AppData\Local\Mozilla\Certificates
 619   - %USERPROFILE%\AppData\Roaming\Mozilla\Certificates
 620 - macOS
 621   - /Library/Application Support/Mozilla/Certificates
 622   - ~/Library/Application Support/Mozilla/Certificates
 623 - Linux
 624   - /usr/lib/mozilla/certificates
 625   - /usr/lib64/mozilla/certificates
 626   - ~/.mozilla/certificates
 627
 628 Starting with Firefox 65, Firefox 60.5 ESR, a fully qualified path can be used, including UNC paths. You should use the native path style for your operating system. We do not support using %USERPROFILE% or other environment variables on Windows.
 629
 630 If you are specifying the path in the policies.json file on Windows, you need to escape your backslashes (`\\`) which means that for UNC paths, you need to escape both (`\\\\`). If you use group policy, you only need one backslash.
 631
 632 Certificates are installed using the trust string `CT,CT,`.
 633
 634 Binary (DER) and ASCII (PEM) certificates are both supported.
 635
 636 **Compatibility:** Firefox 64, Firefox ESR 64\
 637 **CCK2 Equivalent:** `certs.ca`\
 638 **Preferences Affected:** N/A
 639
 640 #### Windows (GPO)
 641 ```
 642 Software\Policies\Mozilla\Firefox\Certificates\Install\1 = "cert1.der"
 643 Software\Policies\Mozilla\Firefox\Certificates\Install\2 = "C:\Users\username\cert2.pem"
 644 ```
 645 #### Windows (Intune)
 646 OMA-URI:
 647 ```
 648 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Certificates/Certificates_Install
 649 ```
 650 Value (string):
 651 ```
 652 <enabled/>
 653 <data id="Certificates_Install" value="1&#xF000;cert1.der&#xF000;2&#xF000;C:\Users\username\cert2.pem"/>
 654 ```
 655 #### macOS
 656 ```
 657 <dict>
 658   <key>Certificates</key>
 659   <dict>
 660     <key>Install</key>
 661     <array>
 662       <string>cert1.der</string>
 663       <string>/Users/username/cert2.pem</string>
 664     </array>
 665   </dict>
 666 </dict>
 667 ```
 668 #### policies.json
 669 ```
 670 {
 671   "policies": {
 672     "Certificates": {
 673       "Install": ["cert1.der", "/home/username/cert2.pem"]
 674     }
 675   }
 676 }
 677 ```
 678 ### Cookies
 679 Configure cookie preferences.
 680
 681 `Allow` is a list of origins (not domains) where cookies are always allowed. You must include http or https.
 682
 683 `AllowSession` is a list of origins (not domains) where cookies are only allowed for the current session. You must include http or https.
 684
 685 `Block` is a list of origins (not domains) where cookies are always blocked. You must include http or https.
 686
 687 `Default` determines whether cookies are accepted at all.
 688
 689 `AcceptThirdParty` determines how third-party cookies are handled.
 690
 691 `ExpireAtSessionEnd` determines when cookies expire.
 692
 693 `RejectTracker` only rejects cookies for trackers.
 694
 695 `Locked` prevents the user from changing cookie preferences.
 696
 697 **Compatibility:** Firefox 60, Firefox ESR 60 (RejectTracker added in Firefox 63, AllowSession added in Firefox 79/78.1)\
 698 **CCK2 Equivalent:** N/A\
 699 **Preferences Affected:** `network.cookie.cookieBehavior`,`network.cookie.lifetimePolicy`
 700
 701 #### Windows (GPO)
 702 ```
 703 Software\Policies\Mozilla\Firefox\Cookies\Allow\1 = "https://example.com"
 704 Software\Policies\Mozilla\Firefox\Cookies\AllowSession\1 = "https://example.edu"
 705 Software\Policies\Mozilla\Firefox\Cookies\Block\1 = "https://example.org"
 706 Software\Policies\Mozilla\Firefox\Cookies\Default = 0x1 | 0x0
 707 Software\Policies\Mozilla\Firefox\Cookies\AcceptThirdParty = "always" | "never" | "from-visited"
 708 Software\Policies\Mozilla\Firefox\Cookies\ExpireAtSessionEnd = 0x1 | 0x0
 709 Software\Policies\Mozilla\Firefox\Cookies\RejectTracker = 0x1 | 0x0
 710 Software\Policies\Mozilla\Firefox\Cookies\Locked = 0x1 | 0x0
 711 ```
 712 #### Windows (Intune)
 713 OMA-URI:
 714 ```
 715 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Allow
 716 ```
 717 Value (string):
 718 ```
 719 <enabled/>
 720 <data id="Cookies_Allow" value="1&#xF000;https://example.com"/>
 721 ```
 722 OMA-URI:
 723 ```
 724 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_AllowSession
 725 ```
 726 Value (string):
 727 ```
 728 <enabled/>
 729 <data id="Cookies_Allow" value="1&#xF000;https://example.edu"/>
 730 ```
 731 OMA-URI:
 732 ```
 733 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Block
 734 ```
 735 Value (string):
 736 ```
 737 <enabled/>
 738 <data id="Cookies_Block" value="1&#xF000;https://example.org"/>
 739 ```
 740 OMA-URI:
 741 ```
 742 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Default
 743 ```
 744 Value (string):
 745 ```
 746 <enabled/> or <disabled/>
 747 ```
 748 OMA-URI:
 749 ```
 750 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_AcceptThirdParty
 751 ```
 752 Value (string):
 753 ```
 754 <enabled/>
 755 <data id="Cookies_AcceptThirdParty" value="always | never | from-visited"/>
 756 ```
 757 OMA-URI:
 758 ```
 759 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_ExpireAtSessionEnd
 760 ```
 761 Value (string):
 762 ```
 763 <enabled/> or <disabled/>
 764 ```
 765 OMA-URI:
 766 ```
 767 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_RejectTracker
 768 ```
 769 Value (string):
 770 ```
 771 <enabled/> or <disabled/>
 772 ```
 773 OMA-URI:
 774 ```
 775 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Locked
 776 ```
 777 Value (string):
 778 ```
 779 <enabled/> or <disabled/>
 780 ```
 781 #### macOS
 782 ```
 783 <dict>
 784   <key>Cookies</key>
 785   <dict>
 786     <key>Allow</key>
 787     <array>
 788       <string>http://example.com</string>
 789     </array>
 790     <key>AllowSession</key>
 791     <array>
 792       <string>http://example.edu</string>
 793     </array>
 794     <key>Block</key>
 795     <array>
 796       <string>http://example.org</string>
 797     </array>
 798     <key>Default</key>
 799     <true/> | <false/>
 800     <key>AcceptThirdParty</key>
 801     <string>always | never | from-visited</string>
 802     <key>ExpireAtSessionEnd</key>
 803     <true/> | <false/>
 804     <key>RejectTracker</key>
 805     <true/> | <false/>
 806     <key>Locked</key>
 807     <true/> | <false/>
 808   </dict>
 809 </dict>
 810 ```
 811 #### policies.json
 812 ```
 813 {
 814   "policies": {
 815     "Cookies": {
 816       "Allow": ["http://example.org/"],
 817       "AllowSession": ["http://example.edu/"],
 818       "Block": ["http://example.edu/"],
 819       "Default": true | false,
 820       "AcceptThirdParty": "always" | "never" | "from-visited",
 821       "ExpireAtSessionEnd": true | false,
 822       "RejectTracker": true | false,
 823       "Locked": true | false
 824     }
 825   }
 826 }
 827 ```
 828 ### DisableSetDesktopBackground
 829 Remove the "Set As Desktop Background..." menuitem when right clicking on an image.
 830
 831 **Compatibility:** Firefox 60, Firefox ESR 60\
 832 **CCK2 Equivalent:** `removeSetDesktopBackground`\
 833 **Preferences Affected:** N/A
 834
 835 #### Windows (GPO)
 836 ```
 837 Software\Policies\Mozilla\Firefox\DisableSetDesktopBackground = 0x1 | 0x0
 838 ```
 839 #### Windows (Intune)
 840 OMA-URI:
 841 ```
 842 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSetDesktopBackground
 843 ```
 844 Value (string):
 845 ```
 846 <enabled/> or <disabled/>
 847 ```
 848 #### macOS
 849 ```
 850 <dict>
 851   <key>DisableSetDesktopBackground</key>
 852   <true/> | <false/>
 853 </dict>
 854 ```
 855 #### policies.json
 856 ```
 857 {
 858   "policies": {
 859     "DisableSetDesktopBackground": true | false
 860   }
 861 }
 862 ```
 863 ### DisableMasterPasswordCreation
 864 Remove the master password functionality.
 865
 866 If this value is true, it works the same as setting [`PrimaryPassword`](#primarypassword) to false and removes the primary password functionality.
 867
 868 If both DisableMasterPasswordCreation and PrimaryPassword are used, DisableMasterPasswordCreation takes precedent.
 869
 870 **Compatibility:** Firefox 60, Firefox ESR 60\
 871 **CCK2 Equivalent:** `noMasterPassword`\
 872 **Preferences Affected:** N/A
 873
 874 #### Windows (GPO)
 875 ```
 876 Software\Policies\Mozilla\Firefox\DisableMasterPasswordCreation = 0x1 | 0x0
 877 ```
 878 #### Windows (Intune)
 879 OMA-URI:
 880 ```
 881 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableMasterPasswordCreation
 882 ```
 883 Value (string):
 884 ```
 885 <enabled/> or <disabled/>
 886 ```
 887 #### macOS
 888 ```
 889 <dict>
 890   <key>DisableMasterPasswordCreation</key>
 891   <true/> | <false/>
 892 </dict>
 893 ```
 894 #### policies.json
 895 ```
 896 {
 897   "policies": {
 898     "DisableMasterPasswordCreation": true | false
 899   }
 900 }
 901 ```
 902 ### DisableAppUpdate
 903 Turn off application updates.
 904
 905 **Compatibility:** Firefox 60, Firefox ESR 60\
 906 **CCK2 Equivalent:** `disableFirefoxUpdates`\
 907 **Preferences Affected:** N/A
 908
 909 #### Windows (GPO)
 910 ```
 911 Software\Policies\Mozilla\Firefox\DisableAppUpdate = 0x1 | 0x0
 912 ```
 913 #### Windows (Intune)
 914 OMA-URI:
 915 ```
 916 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableAppUpdate
 917 ```
 918 Value (string):
 919 ```
 920 <enabled/> or <disabled/>
 921 ```
 922 #### macOS
 923 ```
 924 <dict>
 925   <key>DisableAppUpdate</key>
 926   <true/> | <false/>
 927 </dict>
 928 ```
 929 #### policies.json
 930 ```
 931 {
 932   "policies": {
 933     "DisableAppUpdate": true | false
 934   }
 935 }
 936 ```
 937 ### DisableBuiltinPDFViewer
 938 Disable the built in PDF viewer. PDF files are downloaded and sent externally.
 939
 940 **Compatibility:** Firefox 60, Firefox ESR 60\
 941 **CCK2 Equivalent:** `disablePDFjs`\
 942 **Preferences Affected:** `pdfjs.disabled`
 943
 944 #### Windows (GPO)
 945 ```
 946 Software\Policies\Mozilla\Firefox\DisableBuiltinPDFViewer = 0x1 | 0x0
 947 ```
 948 #### Windows (Intune)
 949 OMA-URI:
 950 ```
 951 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableBuiltinPDFViewer
 952 ```
 953 Value (string):
 954 ```
 955 <enabled/> or <disabled/>
 956 ```
 957 #### macOS
 958 ```
 959 <dict>
 960   <key>DisableBuiltinPDFViewer</key>
 961   <true/> | <false/>
 962 </dict>
 963 ```
 964 #### policies.json
 965 ```
 966 {
 967   "policies": {
 968     "DisableBuiltinPDFViewer": true | false
 969   }
 970 }
 971 ```
 972 ### DisabledCiphers
 973 Disable specific cryptographic ciphers.
 974
 975 ---
 976 **Note:**
 977
 978 This policy was updated in Firefox 78 to allow enabling ciphers as well. Setting the value to true disables the cipher, setting the value to false enables the cipher. Previously setting the value to true or false disabled the cipher.
 979
 980 ---
 981 **Compatibility:** Firefox 76, Firefox ESR 68.8 (TLS_RSA_WITH_AES_128_GCM_SHA256 and TLS_RSA_WITH_AES_256_GCM_SHA384 were added in Firefox 78)\
 982 **CCK2 Equivalent:** N/A\
 983 **Preferences Affected:** N/A
 984
 985 #### Windows (GPO)
 986 ```
 987 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_DHE_RSA_WITH_AES_128_CBC_SHA = 0x1 | 0x0
 988 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_DHE_RSA_WITH_AES_256_CBC_SHA = 0x1 | 0x0
 989 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA = 0x1 | 0x0
 990 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA = 0x1 | 0x0
 991 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 = 0x1 | 0x0
 992 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 = 0x1 | 0x0
 993 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_RSA_WITH_AES_128_CBC_SHA = 0x1 | 0x0
 994 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_RSA_WITH_AES_256_CBC_SHA = 0x1 | 0x0
 995 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_RSA_WITH_3DES_EDE_CBC_SHA = 0x1 | 0x0
 996 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_RSA_WITH_AES_128_GCM_SHA256 = 0x1 | 0x0
 997 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_RSA_WITH_AES_256_GCM_SHA384 = 0x1 | 0x0
 998 ```
 999 #### Windows (Intune)
1000 OMA-URI:
1001 ```
1002 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_DHE_RSA_WITH_AES_128_CBC_SHA
1003 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_DHE_RSA_WITH_AES_256_CBC_SHA
1004 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
1005 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
1006 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
1007 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
1008 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_RSA_WITH_AES_128_CBC_SHA
1009 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_RSA_WITH_AES_256_CBC_SHA
1010 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_RSA_WITH_3DES_EDE_CBC_SHA
1011 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_RSA_WITH_AES_128_GCM_SHA256
1012 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_RSA_WITH_AES_256_GCM_SHA384
1013 ```
1014 Value (string):
1015 ```
1016 <enabled/> or <disabled/>
1017 ```
1018 #### macOS
1019 ```
1020 <dict>
1021   <key>DisabledCiphers</key>
1022     <dict>
1023       <key>TLS_DHE_RSA_WITH_AES_128_CBC_SHA</key>
1024       <true/> | <false/>
1025       <key>TLS_DHE_RSA_WITH_AES_256_CBC_SHA</key>
1026       <true/> | <false/>
1027       <key>TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA</key>
1028       <true/> | <false/>
1029       <key>TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA</key>
1030       <true/> | <false/>
1031       <key>TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256</key>
1032       <true/> | <false/>
1033       <key>TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256</key>
1034       <true/> | <false/>
1035       <key>TLS_RSA_WITH_AES_128_CBC_SHA</key>
1036       <true/> | <false/>
1037       <key>TLS_RSA_WITH_AES_256_CBC_SHA</key>
1038       <true/> | <false/>
1039       <key>TLS_RSA_WITH_3DES_EDE_CBC_SHA</key>
1040       <true/> | <false/>
1041       <key>TLS_RSA_WITH_AES_128_GCM_SHA256</key>
1042       <true/> | <false/>
1043       <key>TLS_RSA_WITH_AES_256_GCM_SHA384</key>
1044       <true/> | <false/>
1045     </dict>
1046 </dict>
1047 ```
1048 #### policies.json
1049 ```
1050 {
1051   "policies": {
1052     "DisabledCiphers" {
1053       "TLS_DHE_RSA_WITH_AES_128_CBC_SHA": true | false,
1054       "TLS_DHE_RSA_WITH_AES_256_CBC_SHA": true | false,
1055       "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA": true | false,
1056       "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA": true | false,
1057       "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256": true | false,
1058       "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256": true | false,
1059       "TLS_RSA_WITH_AES_128_CBC_SHA": true | false,
1060       "TLS_RSA_WITH_AES_256_CBC_SHA": true | false,
1061       "TLS_RSA_WITH_3DES_EDE_CBC_SHA": true | false
1062       "TLS_RSA_WITH_AES_128_GCM_SHA256": true | false
1063       "TLS_RSA_WITH_AES_256_GCM_SHA384": true | false
1064     }
1065   }
1066 }
1067 ```
1068 ### DisableDefaultBrowserAgent
1069 Prevent the default browser agent from taking any actions. Only applicable to Windows; other platforms don’t have the agent.
1070
1071 **Compatibility:** Firefox 75, Firefox ESR 68.7 (Windows only)\
1072 **CCK2 Equivalent:** N/A\
1073 **Preferences Affected:** N/A
1074
1075 #### Windows (GPO)
1076 ```
1077 Software\Policies\Mozilla\Firefox\DisableDefaultBrowserAgent = 0x1 | 0x0
1078 ```
1079 #### Windows (Intune)
1080 OMA-URI:
1081 ```
1082 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableDefaultBrowserAgent
1083 ```
1084 Value (string):
1085 ```
1086 <enabled/> or <disabled/>
1087 ```
1088 #### policies.json
1089 ```
1090 {
1091   "policies": {
1092     "DisableDefaultBrowserAgent": true | false
1093   }
1094 }
1095 ```
1096 ### DisableDeveloperTools
1097 Remove access to all developer tools.
1098
1099 **Compatibility:** Firefox 60, Firefox ESR 60\
1100 **CCK2 Equivalent:** `removeDeveloperTools`\
1101 **Preferences Affected:** `devtools.policy.disabled`
1102
1103 #### Windows (GPO)
1104 ```
1105 Software\Policies\Mozilla\Firefox\DisableDeveloperTools = 0x1 | 0x0`
1106 ```
1107 #### Windows (Intune)
1108 OMA-URI:
1109 ```
1110 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableDeveloperTools
1111 ```
1112 Value (string):
1113 ```
1114 <enabled/> or <disabled/>
1115 ```
1116 #### macOS
1117 ```
1118 <dict>
1119   <key>DisableDeveloperTools</key>
1120   <true/> | <false/>
1121 </dict>
1122 ```
1123 #### policies.json
1124 ```
1125 {
1126   "policies": {
1127     "DisableDeveloperTools": true | false
1128   }
1129 }
1130 ```
1131 ### DisableFeedbackCommands
1132 Disable the menus for reporting sites (Submit Feedback, Report Deceptive Site).
1133
1134 **Compatibility:** Firefox 60, Firefox ESR 60\
1135 **CCK2 Equivalent:** N/A\
1136 **Preferences Affected:** N/A
1137
1138 #### Windows (GPO)
1139 ```
1140 Software\Policies\Mozilla\Firefox\DisableFeedbackCommands = 0x1 | 0x0
1141 ```
1142 #### Windows (Intune)
1143 OMA-URI:
1144 ```
1145 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFeedbackCommands
1146 ```
1147 Value (string):
1148 ```
1149 <enabled/> or <disabled/>
1150 ```
1151 #### macOS
1152 ```
1153 <dict>
1154   <key>DisableFeedbackCommands</key>
1155   <true/> | <false/>
1156 </dict>
1157 ```
1158 #### policies.json
1159 ```
1160 {
1161   "policies": {
1162     "DisableFeedbackCommands": true | false
1163   }
1164 }
1165 ```
1166 ### DisableFirefoxScreenshots
1167 Remove access to Firefox Screenshots.
1168
1169 **Compatibility:** Firefox 60, Firefox ESR 60\
1170 **CCK2 Equivalent:** N/A\
1171 **Preferences Affected:** `extensions.screenshots.disabled`
1172
1173 #### Windows (GPO)
1174 ```
1175 Software\Policies\Mozilla\Firefox\DisableFirefoxScreenshots = 0x1 | 0x0
1176 ```
1177 #### Windows (Intune)
1178 OMA-URI:
1179 ```
1180 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxScreenshots
1181 ```
1182 Value (string):
1183 ```
1184 <enabled/> or <disabled/>
1185 ```
1186 #### macOS
1187 ```
1188 <dict>
1189   <key>DisableFirefoxScreenshots</key>
1190   <true/> | <false/>
1191 </dict>
1192 ```
1193 #### policies.json
1194 ```
1195 {
1196   "policies": {
1197     "DisableFirefoxScreenshots": true | false
1198   }
1199 }
1200 ```
1201 ### DisableFirefoxAccounts
1202 Disable Firefox Accounts integration (Sync).
1203
1204 **Compatibility:** Firefox 60, Firefox ESR 60\
1205 **CCK2 Equivalent:** `disableSync`\
1206 **Preferences Affected:** `identity.fxaccounts.enabled`
1207
1208 #### Windows (GPO)
1209 ```
1210 Software\Policies\Mozilla\Firefox\DisableFirefoxAccounts = 0x1 | 0x0
1211 ```
1212 #### Windows (Intune)
1213 OMA-URI:
1214 ```
1215 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxAccounts
1216 ```
1217 Value (string):
1218 ```
1219 <enabled/> or <disabled/>
1220 ```
1221 #### macOS
1222 ```
1223 <dict>
1224   <key>DisableFirefoxAccounts</key>
1225   <true/> | <false/>
1226 </dict>
1227 ```
1228 #### policies.json
1229 ```
1230 {
1231   "policies": {
1232     "DisableFirefoxAccounts": true | false
1233   }
1234 }
1235 ```
1236 ### DisableFirefoxStudies
1237 Disable Firefox studies (Shield).
1238
1239 **Compatibility:** Firefox 60, Firefox ESR 60\
1240 **CCK2 Equivalent:** N/A\
1241 **Preferences Affected:** N/A
1242
1243 #### Windows (GPO)
1244 ```
1245 Software\Policies\Mozilla\Firefox\DisableFirefoxStudies = 0x1 | 0x0
1246 ```
1247 #### Windows (Intune)
1248 OMA-URI:
1249 ```
1250 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxStudies
1251 ```
1252 Value (string):
1253 ```
1254 <enabled/> or <disabled/>
1255 ```
1256 #### macOS
1257 ```
1258 <dict>
1259   <key>DisableFirefoxStudies</key>
1260   <true/> | <false/>
1261 </dict>
1262 ```
1263 #### policies.json
1264 ```
1265 {
1266   "policies": {
1267     "DisableFirefoxStudies": true | false
1268   }
1269 }
1270 ```
1271 ### DisableForgetButton
1272 Disable the "Forget" button.
1273
1274 **Compatibility:** Firefox 60, Firefox ESR 60\
1275 **CCK2 Equivalent:** `disableForget`\
1276 **Preferences Affected:** N/A
1277
1278 #### Windows (GPO)
1279 ```
1280 Software\Policies\Mozilla\Firefox\DisableForgetButton = 0x1 | 0x0
1281 ```
1282 #### Windows (Intune)
1283 OMA-URI:
1284 ```
1285 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableForgetButton
1286 ```
1287 Value (string):
1288 ```
1289 <enabled/> or <disabled/>
1290 ```
1291 #### macOS
1292 ```
1293 <dict>
1294   <key>DisableForgetButton</key>
1295   <true/> | <false/>
1296 </dict>
1297 ```
1298 #### policies.json
1299 ```
1300 {
1301   "policies": {
1302     "DisableForgetButton": true | false
1303   }
1304 }
1305 ```
1306 ### DisableFormHistory
1307 Turn off saving information on web forms and the search bar.
1308
1309 **Compatibility:** Firefox 60, Firefox ESR 60\
1310 **CCK2 Equivalent:** `disableFormFill`\
1311 **Preferences Affected:** ` browser.formfill.enable`
1312
1313 #### Windows (GPO)
1314 ```
1315 Software\Policies\Mozilla\Firefox\DisableFormHistory = 0x1 | 0x0
1316 ```
1317 #### Windows (Intune)
1318 OMA-URI:
1319 ```
1320 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFormHistory
1321 ```
1322 Value (string):
1323 ```
1324 <enabled/> or <disabled/>
1325 ```
1326 #### macOS
1327 ```
1328 <dict>
1329   <key>DisableFormHistory</key>
1330   <true/> | <false/>
1331 </dict>
1332 ```
1333 #### policies.json
1334 ```
1335 {
1336   "policies": {
1337     "DisableFormHistory": true | false
1338   }
1339 }
1340 ```
1341 ### DisablePasswordReveal
1342 Do not allow passwords to be shown in saved logins
1343
1344 **Compatibility:** Firefox 71, Firefox ESR 68.3\
1345 **CCK2 Equivalent:** N/A
1346 **Preferences Affected:** N/A
1347
1348 #### Windows (GPO)
1349 ```
1350 Software\Policies\Mozilla\Firefox\DisablePasswordReveal = 0x1 | 0x0
1351 ```
1352 #### Windows (Intune)
1353 OMA-URI:
1354 ```
1355 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePasswordReveal
1356 ```
1357 Value (string):
1358 ```
1359 <enabled/> or <disabled/>
1360 ```
1361 #### macOS
1362 ```
1363 <dict>
1364   <key>DisablePasswordReveal</key>
1365   <true/> | <false/>
1366 </dict>
1367 ```
1368 #### policies.json
1369 ```
1370 {
1371   "policies": {
1372     "DisablePasswordReveal": true | false
1373   }
1374 }
1375 ```
1376 ### DisablePocket
1377 Remove Pocket in the Firefox UI. It does not remove it from the new tab page.
1378
1379 **Compatibility:** Firefox 60, Firefox ESR 60\
1380 **CCK2 Equivalent:** `disablePocket`\
1381 **Preferences Affected:** `extensions.pocket.enabled`
1382
1383 #### Windows (GPO)
1384 ```
1385 Software\Policies\Mozilla\Firefox\DisablePocket = 0x1 | 0x0
1386 ```
1387 #### Windows (Intune)
1388 OMA-URI:
1389 ```
1390 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePocket
1391 ```
1392 Value (string):
1393 ```
1394 <enabled/> or <disabled/>
1395 ```
1396 #### macOS
1397 ```
1398 <dict>
1399   <key>DisablePocket</key>
1400   <true/> | <false/>
1401 </dict>
1402 ```
1403 #### policies.json
1404 ```
1405 {
1406   "policies": {
1407     "DisablePocket": true | false
1408   }
1409 }
1410 ```
1411 ### DisablePrivateBrowsing
1412 Remove access to private browsing.
1413
1414 **Compatibility:** Firefox 60, Firefox ESR 60\
1415 **CCK2 Equivalent:** `disablePrivateBrowsing`\
1416 **Preferences Affected:** N/A
1417
1418 #### Windows (GPO)
1419 ```
1420 Software\Policies\Mozilla\Firefox\DisablePrivateBrowsing = 0x1 | 0x0
1421 ```
1422 #### Windows (Intune)
1423 OMA-URI:
1424 ```
1425 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePrivateBrowsing
1426 ```
1427 Value (string):
1428 ```
1429 <enabled/> or <disabled/>
1430 ```
1431 #### macOS
1432 ```
1433 <dict>
1434   <key>DisablePrivateBrowsing</key>
1435   <true/> | <false/>
1436 </dict>
1437 ```
1438 #### policies.json
1439 ```
1440 {
1441   "policies": {
1442     "DisablePrivateBrowsing": true | false
1443   }
1444 }
1445 ```
1446 ### DisableProfileImport
1447 Disables the "Import data from another browser" option in the bookmarks window.
1448
1449 **Compatibility:** Firefox 60, Firefox ESR 60\
1450 **CCK2 Equivalent:** N/A\
1451 **Preferences Affected:** N/A
1452
1453 #### Windows (GPO)
1454 ```
1455 Software\Policies\Mozilla\Firefox\DisableProfileImport = 0x1 | 0x0
1456 ```
1457 #### Windows (Intune)
1458 OMA-URI:
1459 ```
1460 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableProfileImport
1461 ```
1462 Value (string):
1463 ```
1464 <enabled/> or <disabled/>
1465 ```
1466 #### macOS
1467 ```
1468 <dict>
1469   <key>DisableProfileImport</key>
1470   <true/> | <false/>
1471 </dict>
1472 ```
1473 #### policies.json
1474 ```
1475 {
1476   "policies": {
1477     "DisableProfileImport": true | false
1478   }
1479 }
1480 ```
1481 ### DisableProfileRefresh
1482 Disable the Refresh Firefox button on about:support and support.mozilla.org, as well as the prompt that displays offering to refresh Firefox when you haven't used it in a while.
1483
1484 **Compatibility:** Firefox 60, Firefox ESR 60\
1485 **CCK2 Equivalent:** `disableResetFirefox`\
1486 **Preferences Affected:** `browser.disableResetPrompt`
1487
1488 #### Windows (GPO)
1489 ```
1490 Software\Policies\Mozilla\Firefox\DisableProfileRefresh = 0x1 | 0x0
1491 ```
1492 #### Windows (Intune)
1493 OMA-URI:
1494 ```
1495 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableProfileRefresh
1496 ```
1497 Value (string):
1498 ```
1499 <enabled/> or <disabled/>
1500 ```
1501 #### macOS
1502 ```
1503 <dict>
1504   <key>DisableProfileRefresh</key>
1505   <true/> | <false/>
1506 </dict>
1507 ```
1508 #### policies.json
1509 ```
1510 {
1511   "policies": {
1512     "DisableProfileRefresh": true | false
1513   }
1514 }
1515 ```
1516 ### DisableSafeMode
1517 Disable safe mode within the browser.
1518
1519 On Windows, this disables safe mode via the command line as well.
1520
1521 **Compatibility:** Firefox 60, Firefox ESR 60 (Windows, macOS)\
1522 **CCK2 Equivalent:** `disableSafeMode`\
1523 **Preferences Affected:** N/A
1524
1525 #### Windows (GPO)
1526 ```
1527 Software\Policies\Mozilla\Firefox\DisableSafeMode = 0x1 | 0x0
1528 ```
1529 #### Windows (Intune)
1530 OMA-URI:
1531 ```
1532 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSafeMode
1533 ```
1534 Value (string):
1535 ```
1536 <enabled/> or <disabled/>
1537 ```
1538 #### macOS
1539 ```
1540 <dict>
1541   <key>DisableSafeMode</key>
1542   <true/> | <false/>
1543 </dict>
1544 ```
1545 #### policies.json
1546 ```
1547 {
1548   "policies": {
1549     "DisableSafeMode": true | false
1550   }
1551 }
1552 ```
1553 ### DisableSecurityBypass
1554 Prevent the user from bypassing security in certain cases.
1555
1556 `InvalidCertificate` prevents adding an exception when an invalid certificate is shown.
1557
1558 `SafeBrowsing` prevents selecting "ignore the risk" and visiting a harmful site anyway.
1559
1560 **Compatibility:** Firefox 60, Firefox ESR 60\
1561 **CCK2 Equivalent:** N/A\
1562 **Preferences Affected:** `security.certerror.hideAddException`,`browser.safebrowsing.allowOverride`
1563
1564 #### Windows (GPO)
1565 ```
1566 Software\Policies\Mozilla\Firefox\DisableSecurityBypass\InvalidCertificate = 0x1 | 0x0
1567 Software\Policies\Mozilla\Firefox\DisableSecurityBypass\SafeBrowsing = 0x1 | 0x0
1568 ```
1569 #### Windows (Intune)
1570 OMA-URI:
1571 ```
1572 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/P_DisableSecurityBypass_InvalidCertificate
1573 ```
1574 Value (string):
1575 ```
1576 <enabled/> or <disabled/>
1577 ```
1578 OMA-URI:
1579 ```
1580 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/P_DisableSecurityBypass_SafeBrowsing
1581 ```
1582 Value (string):
1583 ```
1584 <enabled/> or <disabled/>
1585 ```
1586
1587 #### macOS
1588 ```
1589 <dict>
1590   <key>DisableSecurityBypass</key>
1591   <dict>
1592     <key>InvalidCertificate</key>
1593     <true/> | <false/>
1594     <key><SafeBrowsing/key>
1595     <true/> | <false/>
1596   </dict>
1597 </dict>
1598 ```
1599 #### policies.json
1600 ```
1601 {
1602   "policies": {
1603     "DisableSecurityBypass": {
1604       "InvalidCertificate": true | false,
1605       "SafeBrowsing": true | false
1606     }
1607   }
1608 }
1609 ```
1610 ### DisableSystemAddonUpdate
1611 Prevent system add-ons from being installed or update.
1612
1613 **Compatibility:** Firefox 60, Firefox ESR 60\
1614 **CCK2 Equivalent:** N/A\
1615 **Preferences Affected:** N/A
1616
1617 #### Windows (GPO)
1618 ```
1619 Software\Policies\Mozilla\Firefox\DisableSystemAddonUpdate = 0x1 | 0x0
1620 ```
1621 #### Windows (Intune)
1622 OMA-URI:
1623 ```
1624 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSystemAddonUpdate
1625 ```
1626 Value (string):
1627 ```
1628 <enabled/> or <disabled/>
1629 ```
1630 #### macOS
1631 ```
1632 <dict>
1633   <key>DisableSystemAddonUpdate</key>
1634   <true/> | <false/>
1635 </dict>
1636 ```
1637 #### policies.json
1638 ```
1639 {
1640   "policies": {
1641     "DisableSystemAddonUpdate": true | false
1642   }
1643 }
1644 ```
1645 ### DisableTelemetry
1646 Prevent the upload of telemetry data.
1647
1648 Mozilla recommends that you do not disable telemetry. Information collected through telemetry helps us build a better product for businesses like yours.
1649
1650 **Compatibility:** Firefox 60, Firefox ESR 60\
1651 **CCK2 Equivalent:** `disableTelemetry`\
1652 **Preferences Affected:** `datareporting.healthreport.uploadEnabled,datareporting.policy.dataSubmissionEnabled`
1653
1654 #### Windows (GPO)
1655 ```
1656 Software\Policies\Mozilla\Firefox\DisableTelemetry = 0x1 | 0x0
1657 ```
1658 #### Windows (Intune)
1659 OMA-URI:
1660 ```
1661 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableTelemetry
1662 ```
1663 Value (string):
1664 ```
1665 <enabled/> or <disabled/>
1666 ```
1667 #### macOS
1668 ```
1669 <dict>
1670   <key>DisableTelemetry</key>
1671   <true/> | <false/>
1672 </dict>
1673 ```
1674 #### policies.json
1675 ```
1676 {
1677   "policies": {
1678     "DisableTelemetry": true | false
1679   }
1680 }
1681 ```
1682 ### DisplayBookmarksToolbar
1683 Set the initial state of the bookmarks toolbar. A user can still hide it and it will stay hidden.
1684
1685 **Compatibility:** Firefox 60, Firefox ESR 60\
1686 **CCK2 Equivalent:** `displayBookmarksToolbar`\
1687 **Preferences Affected:** N/A
1688
1689 #### Windows (GPO)
1690 ```
1691 Software\Policies\Mozilla\Firefox\DisplayBookmarksToolbar = 0x1 | 0x0
1692 ```
1693 #### Windows (Intune)
1694 OMA-URI:
1695 ```
1696 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisplayBookmarksToolbar
1697 ```
1698 Value (string):
1699 ```
1700 <enabled/> or <disabled/>
1701 ```
1702 #### macOS
1703 ```
1704 <dict>
1705   <key>DisplayBookmarksToolbar</key>
1706   <true/> | <false/>
1707 </dict>
1708 ```
1709 #### policies.json
1710 ```
1711 {
1712   "policies": {
1713     "DisplayBookmarksToolbar": true | false
1714   }
1715 }
1716 ```
1717 ### DisplayMenuBar (Deprecated)
1718 Set the initial state of the menubar. A user can still hide it and it will stay hidden.
1719
1720 **Compatibility:** Firefox 60, Firefox ESR 60 (Windows, some Linux)\
1721 **CCK2 Equivalent:** `displayMenuBar`\
1722 **Preferences Affected:** N/A
1723
1724 #### Windows (GPO)
1725 ```
1726 Software\Policies\Mozilla\Firefox\DisplayMenuBar = 0x1 | 0x0
1727 ```
1728 #### macOS
1729 ```
1730 <dict>
1731   <key>DisplayMenuBar</key>
1732   <true/> | <false/>
1733 </dict>
1734 ```
1735 #### policies.json
1736 ```
1737 {
1738   "policies": {
1739     "DisplayMenuBar": true | false
1740   }
1741 }
1742 ```
1743 ### DisplayMenuBar
1744 Set the state of the menubar.
1745
1746 `always` means the menubar is shown and cannot be hidden.
1747
1748 `never` means the menubar is hidden and cannot be shown.
1749
1750 `default-on` means the menubar is on by default but can be hidden.
1751
1752 `default-off` means the menubar is off by default but can be shown.
1753
1754 **Compatibility:** Firefox 73, Firefox ESR 68.5 (Windows, some Linux)\
1755 **CCK2 Equivalent:** `displayMenuBar`\
1756 **Preferences Affected:** N/A
1757
1758 #### Windows (GPO)
1759 ```
1760 Software\Policies\Mozilla\Firefox\DisplayMenuBar = "always", "never", "default-on", "default-off"
1761 ```
1762 #### Windows (Intune)
1763 OMA-URI:
1764 ```
1765 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisplayMenuBar_Enum
1766 ```
1767 Value (string):
1768 ```
1769 <enabled/>
1770 <data id="DisplayMenuBar" value="always | never | default-on | default-off"/>
1771 ```
1772 #### macOS
1773 ```
1774 <dict>
1775   <key>DisplayMenuBar</key>
1776   <string>always | never | default-on | default-off</string>
1777 </dict>
1778 ```
1779 #### policies.json
1780 ```
1781 {
1782   "policies": {
1783     "DisplayMenuBar": "always", "never", "default-on", "default-off"
1784   }
1785 }
1786 ```
1787 ### DNSOverHTTPS
1788 Configure DNS over HTTPS.
1789
1790 `Enabled` determines whether DNS over HTTPS is enabled
1791
1792 `ProviderURL` is a URL to another provider.
1793
1794 `Locked` prevents the user from changing DNS over HTTPS preferences.
1795
1796 `ExcludedDomains` excludes domains from DNS over HTTPS.
1797
1798 **Compatibility:** Firefox 63, Firefox ESR 68 (ExcludedDomains added in 75/68.7)\
1799 **CCK2 Equivalent:** N/A\
1800 **Preferences Affected:** `network.trr.mode`,`network.trr.uri`
1801
1802 #### Windows (GPO)
1803 ```
1804 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\Enabled = 0x1 | 0x0
1805 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\ProviderURL = "URL_TO_ALTERNATE_PROVIDER"
1806 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\Locked = 0x1 | 0x0
1807 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\ExcludedDomains\1 = "example.com"
1808 ```
1809 #### Windows (Intune)
1810 OMA-URI:
1811 ```
1812 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_Enabled
1813 ```
1814 Value (string):
1815 ```
1816 <enabled/> or <disabled/>
1817 ```
1818 OMA-URI:
1819 ```
1820 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_ProviderURL
1821 ```
1822 Value (string):
1823 ```
1824 <enabled/>
1825 <data id="String" value="URL_TO_ALTERNATE_PROVIDER"/>
1826 ```
1827 OMA-URI:
1828 ```
1829 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_Locked
1830 ```
1831 Value (string):
1832 ```
1833 <enabled/> or <disabled/>
1834 ```
1835 OMA-URI:
1836 ```
1837 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_ExcludedDomains
1838 ```
1839 Value (string):
1840 ```
1841 <enabled/>
1842 <data id="List" value="1&#xF000;example.com"/>
1843 ```
1844 #### macOS
1845 ```
1846 <dict>
1847   <key>DNSOverHTTPS</key>
1848   <dict>
1849     <key>Enabled</key>
1850     <true/> | <false/>
1851     <key>ProviderURL</key>
1852     <string>URL_TO_ALTERNATE_PROVIDER</string>
1853     <key>Locked</key>
1854     <true/> | <false/>
1855     <key>ExcludedDomains</key>
1856     <array>
1857       <string>example.com</string>
1858     </array>
1859   </dict>
1860 </dict>
1861 ```
1862 #### policies.json
1863 ```
1864 {
1865   "policies": {
1866     "DNSOverHTTPS": {
1867       "Enabled":  true | false,
1868       "ProviderURL": "URL_TO_ALTERNATE_PROVIDER",
1869       "Locked": true | false,
1870       "ExcludedDomains": ["example.com"]
1871     }
1872   }
1873 }
1874 ```
1875 ### DontCheckDefaultBrowser
1876 Don't check if Firefox is the default browser at startup.
1877
1878 **Compatibility:** Firefox 60, Firefox ESR 60\
1879 **CCK2 Equivalent:** `dontCheckDefaultBrowser`\
1880 **Preferences Affected:** `browser.shell.checkDefaultBrowser`
1881
1882 #### Windows (GPO)
1883 ```
1884 Software\Policies\Mozilla\Firefox\DontCheckDefaultBrowser = 0x1 | 0x0
1885 ```
1886 #### Windows (Intune)
1887 OMA-URI:
1888 ```
1889 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DontCheckDefaultBrowser
1890 ```
1891 Value (string):
1892 ```
1893 <enabled/> or <disabled/>
1894 ```
1895 #### macOS
1896 ```
1897 <dict>
1898   <key>DontCheckDefaultBrowser</key>
1899   <true/> | <false/>
1900 </dict>
1901 ```
1902 #### policies.json
1903 ```
1904 {
1905   "policies": {
1906     "DontCheckDefaultBrowser": true | false
1907   }
1908 }
1909 ```
1910 ### DefaultDownloadDirectory
1911 Set the default download directory.
1912
1913 You can use ${home} for the native home directory.
1914
1915 **Compatibility:** Firefox 68, Firefox ESR 68\
1916 **CCK2 Equivalent:** N/A\
1917 **Preferences Affected:** `browser.download.dir`,`browser.download.folderList`
1918
1919 #### Windows (GPO)
1920 ```
1921 Software\Policies\Mozilla\Firefox\DefaultDownloadDirectory = "${home}\Downloads"
1922 ```
1923 #### Windows (Intune)
1924 OMA-URI:
1925 ```
1926 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DefaultDownloadDirectory
1927 ```
1928 Value (string):
1929 ```
1930 <enabled/>
1931 <data id="Preferences_String" value="${home}\Downloads"/>
1932 ```
1933 #### macOS
1934 ```
1935 <dict>
1936   <key>DefaultDownloadDirectory</key>
1937   <string>${home}/Downloads</string>
1938 </dict>
1939 ```
1940 #### policies.json (macOS and Linux)
1941 ```
1942 {
1943   "policies": {
1944     "DefaultDownloadDirectory": "${home}/Downloads"
1945 }
1946 ```
1947 #### policies.json (Windows)
1948 ```
1949 {
1950   "policies": {
1951     "DefaultDownloadDirectory": "${home}\\Downloads"
1952 }
1953 ```
1954 ### DownloadDirectory
1955 Set and lock the download directory.
1956
1957 You can use ${home} for the native home directory.
1958
1959 **Compatibility:** Firefox 68, Firefox ESR 68\
1960 **CCK2 Equivalent:** N/A\
1961 **Preferences Affected:** `browser.download.dir`,`browser.download.folderList`,`browser.download.useDownloadDir`
1962
1963 #### Windows (GPO)
1964 ```
1965 Software\Policies\Mozilla\Firefox\DownloadDirectory = "${home}\Downloads"
1966 ```
1967 #### Windows (Intune)
1968 OMA-URI:
1969 ```
1970 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DownloadDirectory
1971 ```
1972 Value (string):
1973 ```
1974 <enabled/>
1975 <data id="Preferences_String" value="${home}\Downloads"/>
1976 ```
1977 #### macOS
1978 ```
1979 <dict>
1980   <key>DownloadDirectory</key>
1981   <string>${home}/Downloads</string>
1982 </dict>
1983 ```
1984 #### policies.json (macOS and Linux)
1985 ```
1986 {
1987   "policies": {
1988     "DownloadDirectory": "${home}/Downloads"
1989 }
1990 ```
1991 #### policies.json (Windows)
1992 ```
1993 {
1994   "policies": {
1995     "DownloadDirectory": "${home}\\Downloads"
1996 }
1997 ```
1998 ### EnableTrackingProtection
1999 Configure tracking protection.
2000
2001 If this policy is not configured, tracking protection is not enabled by default in the browser, but it is enabled by default in private browsing and the user can change it.
2002
2003 If `Value` is set to false, tracking protection is disabled and locked in both the regular browser and private browsing.
2004
2005 If `Value` is set to true, tracking protection is enabled by default in both the regular browser and private browsing and the `Locked` value determines whether or not a user can change it.
2006
2007 If `Cryptomining` is set to true, cryptomining scripts on websites are blocked.
2008
2009 If `Fingerprinting` is set to true, fingerprinting scripts on websites are blocked.
2010
2011 `Exceptions` are origins for which tracking protection is not enabled.
2012
2013 **Compatibility:** Firefox 60, Firefox ESR 60 (Cryptomining and Fingerprinting added in 70/68.2, Exceptions added in 73/68.5)\
2014 **CCK2 Equivalent:** N/A\
2015 **Preferences Affected:** `privacy.trackingprotection.enabled`,`privacy.trackingprotection.pbmode.enabled`,`privacy.trackingprotection.cryptomining.enabled`,`privacy.trackingprotection.fingerprinting.enabled`
2016
2017 #### Windows (GPO)
2018 ```
2019 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Value = 0x1 | 0x0
2020 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Locked = 0x1 | 0x0
2021 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Cryptomining = 0x1 | 0x0
2022 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Fingerprinting = 0x1 | 0x0
2023 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Exceptions\1 = "https://example.com"
2024 ```
2025 #### Windows (Intune)
2026 OMA-URI:
2027 ```
2028 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/TrackingProtection
2029 ```
2030 Value (string):
2031 ```
2032 <enabled/>
2033 <data id="TrackingProtectionLocked" value="true | false"/>
2034 <data id="Cryptomining" value="true | false"/>
2035 <data id="Fingerprinting" value="true | false"/>
2036 <data id=TrackingProtection_Exceptions" value="1&#xF000;https://example.com"/>
2037 ```
2038 #### macOS
2039 ```
2040 <dict>
2041   <key>EnableTrackingProtection</key>
2042   <dict>
2043     <key>Value</key>
2044     <true/> | <false/>
2045     <key><Locked</key>
2046     <true/> | <false/>
2047     <key><Cryptomining</key>
2048     <true/> | <false/>
2049     <key><Fingerprinting</key>
2050     <true/> | <false/>
2051     <key>Exceptions</key>
2052     <array>
2053       <string>https://example.com</string>
2054     </array>
2055   </dict>
2056 </dict>
2057 ```
2058 #### policies.json
2059 ```
2060 {
2061   "policies": {
2062     "EnableTrackingProtection": {
2063       "Value": true | false,
2064       "Locked": true | false,
2065       "Cryptomining": true | false,
2066       "Fingerprinting": true | false,
2067       "Exceptions": ["https://example.com"]
2068     }
2069 }
2070 ```
2071 ### EncryptedMediaExtensions
2072 Enable or disable Encrypted Media Extensions and optionally lock it.
2073
2074 If `Enabled` is set to false, encrypted media extensions (like Widevine) are not downloaded by Firefox unless the user consents to installing them.
2075
2076 If `Locked` is set to true and `Enabled` is set to false, Firefox will not download encrypted media extensions (like Widevine) or ask the user to install them.
2077
2078 **Compatibility:** Firefox 77, Firefox ESR 68.9\
2079 **CCK2 Equivalent:** N/A\
2080 **Preferences Affected:** `media.eme.enabled`
2081
2082 #### Windows (GPO)
2083 ```
2084 Software\Policies\Mozilla\Firefox\EncryptedMediaExtensions\Enabled = 0x1 | 0x0
2085 Software\Policies\Mozilla\Firefox\EncryptedMediaExtensions\Locked = 0x1 | 0x0
2086 ```
2087 #### Windows (Intune)
2088 OMA-URI:
2089 ```
2090 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~EncryptedMediaExtensions/EncryptedMediaExtensions_Enabled
2091 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~EncryptedMediaExtensions/EncryptedMediaExtensions_Locked
2092 ```
2093 Value (string):
2094 ```
2095 <enabled/>or <disabled/>
2096 ```
2097 #### macOS
2098 ```
2099 <dict>
2100   <key>EncryptedMediaExtensions</key>
2101   <dict>
2102     <key>Enabled</key>
2103     <true/> | <false/>
2104     <key><Locked</key>
2105     <true/> | <false/>
2106   </dict>
2107 </dict>
2108 ```
2109 #### policies.json
2110 ```
2111 {
2112   "policies": {
2113     "EncryptedMediaExtensions": {
2114       "Enabled": true | false,
2115       "Locked": true | false
2116     }
2117 }
2118 ```
2119 ### EnterprisePoliciesEnabled
2120 Enable policy support on macOS.
2121
2122 **Compatibility:** Firefox 63, Firefox ESR 60.3 (macOS only)\
2123 **CCK2 Equivalent:** N/A\
2124 **Preferences Affected:** N/A
2125
2126 #### macOS
2127 ```
2128 <dict>
2129   <key>EnterprisePoliciesEnabled</key>
2130   <true/>
2131 </dict>
2132 ```
2133 ### Extensions
2134 Control the installation, uninstallation and locking of extensions.
2135
2136 `Install` is a list of URLs or native paths for extensions to be installed.
2137
2138 `Uninstall` is a list of extension IDs that should be uninstalled if found.
2139
2140 `Locked` is a list of extension IDs that the user cannot disable or uninstall.
2141
2142 **Compatibility:** Firefox 60, Firefox ESR 60\
2143 **CCK2 Equivalent:** `addons`\
2144 **Preferences Affected:** N/A
2145
2146 #### Windows (GPO)
2147 ```
2148 Software\Policies\Mozilla\Firefox\Extensions\Install\1 = "https://addons.mozilla.org/firefox/downloads/somefile.xpi"
2149 Software\Policies\Mozilla\Firefox\Extensions\Install\2 = "//path/to/xpi"
2150 Software\Policies\Mozilla\Firefox\Extensions\Uninstall\1 = "bad_addon_id@mozilla.org"
2151 Software\Policies\Mozilla\Firefox\Extensions\Locked\1 = "addon_id@mozilla.org"
2152 ```
2153 #### Windows (Intune)
2154 OMA-URI:
2155 ```
2156 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/Extensions_Install
2157 ```
2158 Value (string):
2159 ```
2160 <enabled/>
2161 <data id="Extensions" value="1&#xF000;https://addons.mozilla.org/firefox/downloads/somefile.xpi&#xF000;2&#xF000;//path/to/xpi"/>
2162 ```
2163 OMA-URI:
2164 ```
2165 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/Extensions_Uninstall
2166 ```
2167 Value (string):
2168 ```
2169 <enabled/>
2170 <data id="Extensions" value="1&#xF000;bad_addon_id@mozilla.org"/>
2171 ```
2172 OMA-URI:
2173 ```
2174 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/Extensions_Locked
2175 ```
2176 Value (string):
2177 ```
2178 <enabled/>
2179 <data id="Extensions" value="1&#xF000;addon_id@mozilla.org"/>
2180 ```
2181 #### macOS
2182 ```
2183 <dict>
2184   <key>Extensions</key>
2185   <dict>
2186     <key>Install</key>
2187     <array>
2188       <string>https://addons.mozilla.org/firefox/downloads/somefile.xpi</string>
2189       <string>//path/to/xpi</string>
2190     </array>
2191     <key>Uninstall</key>
2192     <array>
2193       <string>bad_addon_id@mozilla.org</string>
2194     </array>
2195     <key>Locked</key>
2196     <array>
2197       <string>addon_id@mozilla.org</string>
2198     </array>
2199   </dict>
2200 </dict>
2201 ```
2202 #### policies.json
2203 ```
2204 {
2205   "policies": {
2206     "Extensions": {
2207       "Install": ["https://addons.mozilla.org/firefox/downloads/somefile.xpi", "//path/to/xpi"],
2208       "Uninstall": ["bad_addon_id@mozilla.org"],
2209       "Locked":  ["addon_id@mozilla.org"]
2210     }
2211   }
2212 }
2213 ```
2214 ### ExtensionSettings
2215 Manage all aspects of extensions. This policy is based heavily on the [Chrome policy](https://dev.chromium.org/administrators/policy-list-3/extension-settings-full) of the same name.
2216
2217 This policy maps an extension ID to its configuration. With an extension ID, the configuration will be applied to the specified extension only. A default configuration can be set for the special ID "*", which will apply to all extensions that don't have a custom configuration set in this policy.
2218
2219 To obtain an extension ID, install the extension and go to about:support. You will see the ID in the Extensions section. I've also created an extension that makes it easy to find the ID of extensions on AMO. You can download it [here](https://github.com/mkaply/queryamoid/releases/tag/v0.1).
2220
2221 The configuration for each extension is another dictionary that can contain the fields documented below.
2222
2223 | Name | Description |
2224 | --- | --- |
2225 | `installation_mode` | Maps to a string indicating the installation mode for the extension. The valid strings are `allowed`,`blocked`,`force_installed`, and `normal_installed`.
2226 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`allowed` | Allows the extension to be installed by the user. This is the default behavior. There is no need for an install_url; it will automatically be allowed based on the ID.
2227 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`blocked`| Blocks installation of the extension and removes it from the device if already installed.
2228 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`force_installed`| The extension is automatically installed and can't be removed by the user. This option is not valid for the default configuration and requires an install_url.
2229 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`normal_installed`| The extension is automatically installed but can be disabled by the user. This option is not valid for the default configuration and requires an install_url.
2230 | `install_url`| Maps to a URL indicating where Firefox can download a force_installed or normal_installed extension. If installing from the addons.mozilla.org, use the following URL (substituting SHORT_NAME from the URL on AMO), https://addons.mozilla.org/firefox/downloads/latest/SHORT_NAME/latest.xpi. If installing from the local file system, use a file:/// URL. Languages packs are available from https://releases.mozilla.org/pub/firefox/releases/VERSION/PLATFORM/xpi/LANGUAGE.xpi. If you need to update the extension, you can change the name of the extension and it will be automatically updated. Extensions installed from file URLs will additional be updated when their internal version changes.
2231 | `install_sources` | A list of sources from which installing extensions is allowed. **This is unnecessary if you are only allowing the installation of certain extensions by ID.** Each item in this list is an extension-style match pattern. Users will be able to easily install items from any URL that matches an item in this list. Both the location of the *.xpi file and the page where the download is started from (i.e.  the referrer) must be allowed by these patterns. This setting can be used only for the default configuration. If you want to allow the install of extensions from the recommended add-ons page, you must add `about:addons` to this list.
2232 | `allowed_types` | This setting whitelists the allowed types of extension/apps that can be installed in Firefox. The value is a list of strings, each of which should be one of the following: "extension", "theme", "dictionary", "langpack" This setting can be used only for the default configuration.
2233 | `blocked_install_message` | This maps to a string specifying the error message to display to users if they're blocked from installing an extension. This setting allows you to append text to the generic error message displayed when the extension is blocked. This could be be used to direct users to your help desk, explain why a particular extension is blocked, or something else. This setting can be used only for the default configuration.
2234 | `restricted_domains` | An array of domains on which content scripts can't be run. This setting can be used only for the default configuration.
2235
2236 **Compatibility:** Firefox 69, Firefox ESR 68.1\
2237 **CCK2 Equivalent:** N/A\
2238 **Preferences Affected:** N/A
2239
2240 #### Windows (GPO)
2241 ```
2242 Software\Policies\Mozilla\Firefox\ExtensionSettings (REG_MULTI_SZ) =
2243 {
2244   "*": {
2245     "blocked_install_message": "Custom error message.",
2246     "install_sources": ["about:addons","https://addons.mozilla.org/"],
2247     "installation_mode": "blocked",
2248     "allowed_types": ["extension"]
2249   },
2250   "uBlock0@raymondhill.net": {
2251     "installation_mode": "force_installed",
2252     "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
2253   },
2254   "https-everywhere@eff.org": {
2255     "installation_mode": "allowed",
2256   }
2257 }
2258 ```
2259 #### Windows (Intune)
2260 OMA-URI:
2261 ```
2262 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/ExtensionSettings
2263 ```
2264 Value (string):
2265 ```
2266 <enabled/>
2267 <data id="ExtensionSettings" value='
2268   "*": {
2269     "blocked_install_message": "Custom error message.",
2270     "install_sources": ["about:addons","https://addons.mozilla.org/"],
2271     "installation_mode": "blocked",
2272     "allowed_types": ["extension"]
2273   },
2274   "uBlock0@raymondhill.net": {
2275     "installation_mode": "force_installed",
2276     "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
2277   },
2278     "https-everywhere@eff.org": {
2279     "installation_mode": "allowed",
2280   }'/>
2281 ```
2282 #### macOS
2283 ```
2284 <dict>
2285   <key>ExtensionSettings</key>
2286   <dict>
2287     <key>*</key>
2288     <dict>
2289       <key>blocked_install_message</key>
2290       <string>Custom error message.</string>
2291       <key>install_sources</key>
2292       <array>
2293         <string>about:addons</string>
2294         <string>https://addons.mozilla.org/</string>
2295       </array>
2296       <key>installation_mode</key>
2297       <string>blocked</string>
2298       <key>allowed_types</key>
2299       <array>
2300         <string>extension</string>
2301       </array>
2302     </dict>
2303     <key>uBlock0@raymondhill.net</key>
2304     <dict>
2305       <key>installation_mode</key>
2306        <string>force_installed</string>
2307       <key>install_url</key>
2308       <string>https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi</string>
2309     </dict>
2310     <key>https-everywhere@eff.org</key>
2311     <dict>
2312       <key>installation_mode</key>
2313        <string>allowed</string>
2314     </dict>
2315   </dict>
2316 </dict>
2317 ```
2318 #### policies.json
2319 ```
2320 {
2321   "policies": {
2322     "ExtensionSettings": {
2323       "*": {
2324         "blocked_install_message": "Custom error message.",
2325         "install_sources": ["about:addons","https://addons.mozilla.org/"],
2326         "installation_mode": "blocked",
2327         "allowed_types": ["extension"]
2328       },
2329       "uBlock0@raymondhill.net": {
2330         "installation_mode": "force_installed",
2331         "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
2332       },
2333       "https-everywhere@eff.org": {
2334         "installation_mode": "allowed"
2335       }
2336     }
2337   }
2338 }
2339 ```
2340 ### ExtensionUpdate
2341 Control extension updates.
2342
2343 **Compatibility:** Firefox 67, Firefox ESR 60.7\
2344 **CCK2 Equivalent:** N/A\
2345 **Preferences Affected:** `extensions.update.enabled`
2346
2347 #### Windows (GPO)
2348 ```
2349 Software\Policies\Mozilla\Firefox\ExtensionUpdate = 0x1 | 0x0
2350 ```
2351 #### Windows (Intune)
2352 OMA-URI:
2353 ```
2354 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/ExtensionUpdate
2355 ```
2356 Value (string):
2357 ```
2358 <enabled/> or <disabled/>
2359 ```
2360 #### macOS
2361 ```
2362 <dict>
2363   <key>ExtensionUpdate</key>
2364   <true/> | <false/>
2365 </dict>
2366 ```
2367 #### policies.json
2368 ```
2369 {
2370   "policies": {
2371     "ExtensionUpdate": true | false
2372   }
2373 }
2374 ```
2375 ### FlashPlugin
2376 Configure the default Flash plugin policy as well as origins for which Flash is allowed.
2377
2378 `Allow` is a list of origins where Flash are allowed.
2379
2380 `Block` is a list of origins where Flash is not allowed.
2381
2382 `Default` determines whether or not Flash is allowed by default.
2383
2384 `Locked` prevents the user from changing Flash preferences.
2385
2386 **Compatibility:** Firefox 60, Firefox ESR 60\
2387 **CCK2 Equivalent:** `permissions.plugin`\
2388 **Preferences Affected:** `plugin.state.flash`
2389
2390 #### Windows (GPO)
2391 ```
2392 Software\Policies\Mozilla\Firefox\FlashPlugin\Allow\1 = "https://example.org"
2393 Software\Policies\Mozilla\Firefox\FlashPlugin\Block\1 = "https://example.edu"
2394 Software\Policies\Mozilla\Firefox\FlashPlugin\Default = 0x1 | 0x0
2395 Software\Policies\Mozilla\Firefox\FlashPlugin\Locked = 0x1 | 0x0
2396 ```
2397 #### Windows (Intune)
2398 OMA-URI:
2399 ```
2400 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Flash/FlashPlugin_Allow
2401 ```
2402 Value (string):
2403 ```
2404 <enabled/>
2405 <data id="Permissions" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
2406 ```
2407 OMA-URI:
2408 ```
2409 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Flash/FlashPlugin_Locked
2410 ```
2411 Value (string):
2412 ```
2413 <enabled/> or <disabled/>
2414 ```
2415 OMA-URI:
2416 ```
2417 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Flash/FlashPlugin_Default
2418 ```
2419 Value (string):
2420 ```
2421 <enabled/> or <disabled/>
2422 ```
2423 #### macOS
2424 ```
2425 <dict>
2426   <key>FlashPlugin</key>
2427   <dict>
2428     <key>Allow</key>
2429     <array>
2430       <string>http://example.org</string>
2431     </array>
2432     <key>Block</key>
2433     <array>
2434       <string>http://example.edu</string>
2435     </array>
2436     <key>Default</key>
2437     <true/> | <false/>
2438     <key>Locked</key>
2439     <true/> | <false/>
2440   </dict>
2441 </dict>
2442 ```
2443 #### policies.json
2444 ```
2445 {
2446   "policies": {
2447     "FlashPlugin": {
2448       "Allow": ["http://example.org/"],
2449       "Block": ["http://example.edu/"],
2450       "Default": true | false,
2451       "Locked": true | false
2452     }
2453   }
2454 }
2455 ```
2456
2457
2458
2459 ### Handlers
2460 Configure default application handlers. This policy is based on the internal format of `handlers.json`.
2461
2462 You can configure handlers based on a mime type (`mimeTypes`), a file's extension (`extensions`), or a protocol (`schemes`).
2463
2464 Within each handler type, you specify the given mimeType/extension/scheme as a key and use the following subkeys to describe how it is handled.
2465
2466 | Name | Description |
2467 | --- | --- |
2468 | `action`| Can be either `saveToDisk`, `useHelperApp`, `useSystemDefault`.
2469 | `ask` | If `true`, the user is asked if what they want to do with the file. If `false`, the action is taken without user intervention.
2470 | `handlers` | An array of handlers with the first one being the default. If you don't want to have a default handler, use an empty object for the first handler. Choose between path or uriTemplate.
2471 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`name` | The display name of the handler (might not be used).
2472 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`path`| The native path to the executable to be used.
2473 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`uriTemplate`| A url to a web based application handler. The URL must be https and contain a %s to be used for substitution.
2474
2475 **Compatibility:** Firefox 78, Firefox ESR 78\
2476 **CCK2 Equivalent:** N/A\
2477 **Preferences Affected:** N/A
2478
2479 #### Windows (GPO)
2480 ```
2481 Software\Policies\Mozilla\Firefox\ExtensionSettings (REG_MULTI_SZ) =
2482 {
2483   "mimeTypes": {
2484     "application/msword": {
2485       "action": "useSystemDefault",
2486       "ask": true | false
2487     }
2488   },
2489   "schemes": {
2490     "mailto": {
2491       "action": "useHelperApp",
2492       "ask": true | false,
2493       "handlers": [{
2494         "name": "Gmail",
2495         "uriTemplate": "https://mail.google.com/mail/?extsrc=mailto&url=%s"
2496       }]
2497     }
2498   },
2499   "extensions": {
2500     "pdf": {
2501       "action": "useHelperApp",
2502       "ask": true | false,
2503       "handlers": [{
2504         "name": "Adobe Acrobat",
2505         "path": "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32.exe"
2506       }]
2507     }
2508   }
2509 }
2510 ```
2511 #### Windows (Intune)
2512 OMA-URI:
2513 ```
2514 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Handlers
2515 ```
2516 Value (string):
2517 ```
2518 <enabled/>
2519 <data id="Handlers" value='
2520 {
2521   "mimeTypes": {
2522     "application/msword": {
2523       "action": "useSystemDefault",
2524       "ask": true | false
2525     }
2526   },
2527   "schemes": {
2528     "mailto": {
2529       "action": "useHelperApp",
2530       "ask": true | false,
2531       "handlers": [{
2532         "name": "Gmail",
2533         "uriTemplate": "https://mail.google.com/mail/?extsrc=mailto&amp;url=%s"
2534       }]
2535     }
2536   },
2537   "extensions": {
2538     "pdf": {
2539       "action": "useHelperApp",
2540       "ask": true | false,
2541       "handlers": [{
2542         "name": "Adobe Acrobat",
2543         "path": "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32.exe"
2544       }]
2545     }
2546   }
2547 }
2548 '/>
2549 ```
2550 #### macOS
2551 ```
2552 <dict>
2553   <key>Handlers</key>
2554   <dict>
2555     <key>mimeTypes</key>
2556     <dict>
2557       <key>application/msword</key>
2558       <dict>
2559         <key>action</key>
2560         <string>useSystemDefault</string>
2561         <key>ask</key>
2562         <true/> | <false/>
2563       </dict>
2564     </dict>
2565     <key>schemes</key>
2566     <dict>
2567       <key>mailto</key>
2568       <dict>
2569         <key>action</key>
2570         <string>useHelperApp</string>
2571         <key>ask</key>
2572         <true/> | <false/>
2573         <key>handlers</key>
2574         <array>
2575           <dict>
2576             <key>name</key>
2577             <string>Gmail</string>
2578             <key>uriTemplate</key>
2579             <string>https://mail.google.com/mail/?extsrc=mailto&url=%s</string>
2580           </dict>
2581         </array>
2582       </dict>
2583     </dict>
2584     <key>extensions</key>
2585     <dict>
2586       <key>pdf</key>
2587       <dict>
2588         <key>action</key>
2589         <string>useHelperApp</string>
2590         <key>ask</key>
2591         <true/> | <false/>
2592         <key>handlers</key>
2593         <array>
2594           <dict>
2595             <key>name</key>
2596             <string>Adobe Acrobat</string>
2597             <key>path</key>
2598             <string>/System/Applications/Preview.app</string>
2599           </dict>
2600         </array>
2601       </dict>
2602     </dict>
2603   </dict>
2604 </dict>
2605 ```
2606 #### policies.json
2607 ```
2608 {
2609   "policies": {
2610     "Handlers": {
2611       "mimeTypes": {
2612         "application/msword": {
2613           "action": "useSystemDefault",
2614           "ask": false
2615         }
2616       },
2617       "schemes": {
2618         "mailto": {
2619           "action": "useHelperApp",
2620           "ask": true | false,
2621           "handlers": [{
2622             "name": "Gmail",
2623             "uriTemplate": "https://mail.google.com/mail/?extsrc=mailto&url=%s"
2624           }]
2625         }
2626       },
2627       "extensions": {
2628         "pdf": {
2629           "action": "useHelperApp",
2630           "ask": true | false,
2631           "handlers": [{
2632             "name": "Adobe Acrobat",
2633             "path": "/usr/bin/acroread"
2634           }]
2635         }
2636       }
2637     }
2638   }
2639 }
2640 ```
2641 ### FirefoxHome
2642 Customize the Firefox Home page.
2643
2644 **Compatibility:** Firefox 68, Firefox ESR 68\
2645 **CCK2 Equivalent:** N/A\
2646 **Preferences Affected:** `browser.newtabpage.activity-stream.showSearch`,`browser.newtabpage.activity-stream.feeds.topsites`,`browser.newtabpage.activity-stream.feeds.section.highlights`,`browser.newtabpage.activity-stream.feeds.section.topstories`,`browser.newtabpage.activity-stream.feeds.snippets`
2647
2648 #### Windows (GPO)
2649 ```
2650 Software\Policies\Mozilla\Firefox\FirefoxHome\Search = 0x1 | 0x0
2651 Software\Policies\Mozilla\Firefox\FirefoxHome\TopSites = 0x1 | 0x0
2652 Software\Policies\Mozilla\Firefox\FirefoxHome\Highlights = 0x1 | 0x0
2653 Software\Policies\Mozilla\Firefox\FirefoxHome\Pocket = 0x1 | 0x0
2654 Software\Policies\Mozilla\Firefox\FirefoxHome\Snippets = 0x1 | 0x0
2655 Software\Policies\Mozilla\Firefox\FirefoxHome\Locked = 0x1 | 0x0
2656 ```
2657 #### Windows (Intune)
2658 OMA-URI:
2659 ```
2660 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/CustomizeFirefoxHome
2661 ```
2662 Value (string):
2663 ```
2664 <enabled/>
2665 <data id="FirefoxHome_Search"  value="true | false"/>
2666 <data id="FirefoxHome_TopSites"  value="true | false"/>
2667 <data id="FirefoxHome_Highlights"  value="true | false"/>
2668 <data id="FirefoxHome_Pocket"  value="true | false"/>
2669 <data id="FirefoxHome_Snippets"  value="true | false"/>
2670 <data id="FirefoxHome_Locked"  value="true | false"/>
2671 ```
2672 #### macOS
2673 ```
2674 <dict>
2675   <key>FirefoxHome</key>
2676   <dict>
2677     <key>Search</key>
2678     <true/> | <false/>
2679     <key>TopSites</key>
2680     <true/> | <false/>
2681     <key>Highlights</key>
2682     <true/> | <false/>
2683     <key>Pocket</key>
2684     <true/> | <false/>
2685     <key>Snippets</key>
2686     <true/> | <false/>
2687     <key>Locked</key>
2688     <true/> | <false/>
2689   </dict>
2690 </dict>
2691 ```
2692 #### policies.json
2693 ```
2694 {
2695   "policies": {
2696     "FirefoxHome": {
2697       "Search": true | false,
2698       "TopSites": true | false,
2699       "Highlights": true | false,
2700       "Pocket": true | false,
2701       "Snippets": true | false,
2702       "Locked": true | false
2703     }
2704   }
2705 }
2706 ```
2707 ### HardwareAcceleration
2708 Control hardware acceleration.
2709
2710 **Compatibility:** Firefox 60, Firefox ESR 60\
2711 **CCK2 Equivalent:** N/A\
2712 **Preferences Affected:** `layers.acceleration.disabled`
2713
2714 #### Windows (GPO)
2715 ```
2716 Software\Policies\Mozilla\Firefox\HardwareAcceleration = 0x1 | 0x0
2717 ```
2718 #### Windows (Intune)
2719 OMA-URI:
2720 ```
2721 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/HardwareAcceleration
2722 ```
2723 Value (string):
2724 ```
2725 <enabled/> or <disabled/>
2726 ```
2727 #### macOS
2728 ```
2729 <dict>
2730   <key>HardwareAcceleration</key>
2731   <true/> | <false/>
2732 </dict>
2733 ```
2734 #### policies.json
2735 ```
2736 {
2737   "policies": {
2738     "HardwareAcceleration": true | false
2739   }
2740 }
2741 ```
2742 ### Homepage
2743 Configure the default homepage and how Firefox starts.
2744
2745 `URL` is the default homepage.
2746
2747 `Locked` prevents the user from changing homepage preferences.
2748
2749 `Additional` allows for more than one homepage.
2750
2751 `StartPage` is how Firefox starts. The choices are no homepage, the default homepage or the previous session.
2752
2753 With Firefox 78, an additional option as added for `Startpage`, `homepage-locked`. This allows for locking the homepage, but still allowing the user to choose whether or not they want to restore their session.
2754
2755 **Compatibility:** Firefox 60, Firefox ESR 60 (StartPage was added in Firefox 60, Firefox ESR 60.4, homepage-locked added in Firefox 78)\
2756 **CCK2 Equivalent:** `homePage`,`lockHomePage`\
2757 **Preferences Affected:** `browser.startup.homepage`,`browser.startup.page`
2758
2759 #### Windows (GPO)
2760 ```
2761 Software\Policies\Mozilla\Firefox\Homepage\URL = "https://example.com"
2762 Software\Policies\Mozilla\Firefox\Homepage\Locked = 0x1 | 0x0
2763 Software\Policies\Mozilla\Firefox\Homepage\Additional\1 = "https://example.org"
2764 Software\Policies\Mozilla\Firefox\Homepage\Additional\2 = "https://example.edu"
2765 Software\Policies\Mozilla\Firefox\Homepage\StartPage = "none" | "homepage" | "previous-session" | "homepage-locked"
2766 ```
2767 #### Windows (Intune)
2768 OMA-URI:
2769 ```
2770 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageURL
2771 ```
2772 Value (string):
2773 ```
2774 <enabled/>
2775
2776 <data id="HomepageURL" value="https://example.com"/>
2777 <data id="HomepageLocked" value="true | false"/>
2778 ```
2779 OMA-URI:
2780 ```
2781 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageAdditional
2782 ```
2783 Value (string):
2784 ```
2785 <enabled/>
2786
2787 <data id="HomepageAdditional" value="1&#xF000;http://example.org&#xF000;2&#xF000;http://example.edu"/>
2788 ```
2789 OMA-URI:
2790 ```
2791 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageStartPage
2792 ```
2793 Value (string):
2794 ```
2795 <enabled/>
2796
2797 <data id="StartPage" value="none | homepage | previous-session"/>
2798 ```
2799 #### macOS
2800 ```
2801 <dict>
2802   <key>Homepage</key>
2803   <dict>
2804     <key>URL</key>
2805     <string>http://example.com</string>
2806     <key>Locked</key>
2807     <true/> | <false/>
2808     <key>Additional</key>
2809     <array>
2810       <string>http://example.org</string>
2811       <string>http://example.edu</string>
2812     </array>
2813     <key>StartPage</key>
2814     <string>none | homepage | previous-session | homepage-locked</string>
2815   </dict>
2816 </dict>
2817 ```
2818 #### policies.json
2819 ```
2820 {
2821   "policies": {
2822     "Homepage": {
2823       "URL": "http://example.com/",
2824       "Locked": true | false,
2825       "Additional": ["http://example.org/",
2826                      "http://example.edu/"],
2827       "StartPage": "none" | "homepage" | "previous-session" | "homepage-locked"
2828     }
2829   }
2830 }
2831 ```
2832 ### InstallAddonsPermission
2833 Configure the default extension install policy as well as origins for extension installs are allowed. This policy does not override turning off all extension installs.
2834
2835 `Allow` is a list of origins where extension installs are allowed.
2836
2837 `Default` determines whether or not extension installs are allowed by default.
2838
2839 **Compatibility:** Firefox 60, Firefox ESR 60\
2840 **CCK2 Equivalent:** `permissions.install`\
2841 **Preferences Affected:** `xpinstall.enabled`
2842
2843 #### Windows (GPO)
2844 ```
2845 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Allow\1 = "https://example.org"
2846 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Allow\2 = "https://example.edu"
2847 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Default = 0x1 | 0x0
2848 ```
2849 #### Windows (Intune)
2850 OMA-URI:
2851 ```
2852 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Addons/InstallAddonsPermission_Allow
2853 ```
2854 Value (string):
2855 ```
2856 <enabled/>
2857 <data id="Permissions" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
2858 ```
2859 OMA-URI:
2860 ```
2861 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Addons/InstallAddonsPermission_Default
2862 ```
2863 Value (string):
2864 ```
2865 <enabled/>
2866 ```
2867 #### macOS
2868 ```
2869 <dict>
2870   <key>InstallAddonsPermission</key>
2871   <dict>
2872     <key>Allow</key>
2873     <array>
2874       <string>http://example.org</string>
2875       <string>http://example.edu</string>
2876     </array>
2877     <key>Default</key>
2878     <true/> | <false/>
2879   </dict>
2880 </dict>
2881 ```
2882 #### policies.json
2883 ```
2884 {
2885   "policies": {
2886     "InstallAddonsPermission": {
2887       "Allow": ["http://example.org/",
2888                 "http://example.edu/"],
2889       "Default": true | false
2890     }
2891   }
2892 }
2893 ```
2894 ### LegacyProfiles
2895 Disable the feature enforcing a separate profile for each installation.
2896
2897 If this policy set to true, Firefox will not try to create different profiles for installations of Firefox in different directories. This is the equivalent of the MOZ_LEGACY_PROFILES environment variable.
2898
2899 If this policy set to false, Firefox will create a new profile for each unique installation of Firefox.
2900
2901 This policy only work on Windows via GPO (not policies.json).
2902
2903 **Compatibility:** Firefox 70, Firefox ESR 68.2 (Windows only, GPO only)\
2904 **CCK2 Equivalent:** N/A\
2905 **Preferences Affected:** N/A
2906
2907 #### Windows (GPO)
2908 ```
2909 Software\Policies\Mozilla\Firefox\LegacyProfiles = = 0x1 | 0x0
2910 ```
2911 #### Windows (Intune)
2912 OMA-URI:
2913 ```
2914 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/LegacyProfiles
2915 ```
2916 Value (string):
2917 ```
2918 <enabled/> or <disabled/>
2919 ```
2920 ### LocalFileLinks
2921 Enable linking to local files by origin.
2922
2923 **Compatibility:** Firefox 68, Firefox ESR 68\
2924 **CCK2 Equivalent:** N/A\
2925 **Preferences Affected:** `capability.policy.localfilelinks.*`
2926
2927 #### Windows (GPO)
2928 ```
2929 Software\Policies\Mozilla\Firefox\LocalFileLinks\1 = "https://example.org"
2930 Software\Policies\Mozilla\Firefox\LocalFileLinks\2 = "https://example.edu"
2931 ```
2932 #### Windows (Intune)
2933 OMA-URI:
2934 ```
2935 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/LocalFileLinks
2936 ```
2937 Value (string):
2938 ```
2939 <enabled/>
2940 <data id="LocalFileLinks" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
2941 ```
2942 #### macOS
2943 ```
2944 <dict>
2945   <key>LocalFileLinks</key>
2946   <array>
2947     <string>http://example.org</string>
2948     <string>http://example.edu</string>
2949   </array>
2950 </dict>
2951 ```
2952 #### policies.json
2953 ```
2954 {
2955   "policies": {
2956     "LocalFileLinks": ["http://example.org/",
2957                        "http://example.edu/"]
2958   }
2959 }
2960 ```
2961 ### PrimaryPassword
2962 Require or prevent using a primary (formerly master) password.
2963
2964 If this value is true, a primary password is required. If this value is false, it works the same as if [`DisableMasterPasswordCreation`](#disablemasterpasswordcreation) was true and removes the primary password functionality.
2965
2966 If both DisableMasterPasswordCreation and PrimaryPassword are used, DisableMasterPasswordCreation takes precedent.
2967
2968 **Compatibility:** Firefox 79, Firefox ESR 78.1\
2969 **CCK2 Equivalent:** `noMasterPassword`\
2970 **Preferences Affected:** N/A
2971
2972 #### Windows (GPO)
2973 ```
2974 Software\Policies\Mozilla\Firefox\PrimaryPassword = 0x1 | 0x0
2975 ```
2976 #### Windows (Intune)
2977 OMA-URI:
2978 ```
2979 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PrimaryPassword
2980 ```
2981 Value (string):
2982 ```
2983 <enabled/> or <disabled/>
2984 ```
2985 #### macOS
2986 ```
2987 <dict>
2988   <key>PrimaryPassword</key>
2989   <true/> | <false/>
2990 </dict>
2991 ```
2992 #### policies.json
2993 ```
2994 {
2995   "policies": {
2996     "PrimaryPassword": true | false
2997   }
2998 }
2999 ```
3000 ### NetworkPrediction
3001 Enable or disable network prediction (DNS prefetching).
3002
3003 **Compatibility:** Firefox 67, Firefox ESR 60.7\
3004 **CCK2 Equivalent:** N/A\
3005 **Preferences Affected:** `network.dns.disablePrefetch`,`network.dns.disablePrefetchFromHTTPS`
3006
3007 #### Windows (GPO)
3008 ```
3009 Software\Policies\Mozilla\Firefox\NetworkPrediction = 0x1 | 0x0
3010 ```
3011 #### Windows (Intune)
3012 OMA-URI:
3013 ```
3014 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NetworkPrediction
3015 ```
3016 Value (string):
3017 ```
3018 <enabled/> or <disabled/>
3019 ```
3020 #### macOS
3021 ```
3022 <dict>
3023   <key>NetworkPrediction</key>
3024   <true/> | <false/>
3025 </dict>
3026 ```
3027 #### policies.json
3028 ```
3029 {
3030   "policies": {
3031     "NetworkPrediction": true | false
3032 }
3033 ```
3034 ### NewTabPage
3035 Enable or disable the New Tab page.
3036
3037 **Compatibility:** Firefox 68, Firefox ESR 68\
3038 **CCK2 Equivalent:** N/A\
3039 **Preferences Affected:** `browser.newtabpage.enabled`
3040
3041 #### Windows (GPO)
3042 ```
3043 Software\Policies\Mozilla\Firefox\NewTabPage = 0x1 | 0x0
3044 ```
3045 #### Windows (Intune)
3046 OMA-URI:
3047 ```
3048 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NewTabPage
3049 ```
3050 Value (string):
3051 ```
3052 <enabled/> or <disabled/>
3053 ```
3054 #### macOS
3055 ```
3056 <dict>
3057   <key>NewTabPage</key>
3058   <true/> | <false/>
3059 </dict>
3060 ```
3061 #### policies.json
3062 ```
3063 {
3064   "policies": {
3065     "NewTabPage": true | false
3066 }
3067 ```
3068 ### NoDefaultBookmarks
3069 Disable the creation of default bookmarks.
3070
3071 This policy is only effective if the user profile has not been created yet.
3072
3073 **Compatibility:** Firefox 60, Firefox ESR 60\
3074 **CCK2 Equivalent:** `removeDefaultBookmarks`\
3075 **Preferences Affected:** N/A
3076
3077 #### Windows (GPO)
3078 ```
3079 Software\Policies\Mozilla\Firefox\NoDefaultBookmarks = 0x1 | 0x0
3080 ```
3081 #### Windows (Intune)
3082 OMA-URI:
3083 ```
3084 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NoDefaultBookmarks
3085 ```
3086 Value (string):
3087 ```
3088 <enabled/> or <disabled/>
3089 ```
3090 #### macOS
3091 ```
3092 <dict>
3093   <key>NoDefaultBookmarks</key>
3094   <true/> | <false/>
3095 </dict>
3096 ```
3097 #### policies.json
3098 ```
3099 {
3100   "policies": {
3101     "NoDefaultBookmarks": true | false
3102   }
3103 }
3104 ```
3105 ### OfferToSaveLogins
3106 Control whether or not Firefox offers to save passwords.
3107
3108 **Compatibility:** Firefox 60, Firefox ESR 60\
3109 **CCK2 Equivalent:** `dontRememberPasswords`\
3110 **Preferences Affected:** `signon.rememberSignons`
3111
3112 #### Windows (GPO)
3113 ```
3114 Software\Policies\Mozilla\Firefox\OfferToSaveLogins = 0x1 | 0x0
3115 ```
3116 #### Windows (Intune)
3117 OMA-URI:
3118 ```
3119 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OfferToSaveLogins
3120 ```
3121 Value (string):
3122 ```
3123 <enabled/> or <disabled/>
3124 ```
3125 #### macOS
3126 ```
3127 <dict>
3128   <key>OfferToSaveLogins</key>
3129   <true/> | <false/>
3130 </dict>
3131 ```
3132 #### policies.json
3133 ```
3134 {
3135   "policies": {
3136     "OfferToSaveLogins": true | false
3137   }
3138 }
3139 ```
3140 ### OfferToSaveLoginsDefault
3141 Sets the default value of signon.rememberSignons without locking it.
3142
3143 **Compatibility:** Firefox 70, Firefox ESR 60.2\
3144 **CCK2 Equivalent:** `dontRememberPasswords`\
3145 **Preferences Affected:** `signon.rememberSignons`
3146
3147 #### Windows (GPO)
3148 ```
3149 Software\Policies\Mozilla\Firefox\OfferToSaveLoginsDefault = 0x1 | 0x0
3150 ```
3151 #### Windows (Intune)
3152 OMA-URI:
3153 ```
3154 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OfferToSaveLoginsDefault
3155 ```
3156 Value (string):
3157 ```
3158 <enabled/> or <disabled/>
3159 ```
3160 #### macOS
3161 ```
3162 <dict>
3163   <key>OfferToSaveLoginsDefault</key>
3164   <true/> | <false/>
3165 </dict>
3166 ```
3167 #### policies.json
3168 ```
3169 {
3170   "policies": {
3171     "OfferToSaveLoginsDefault": true | false
3172   }
3173 }
3174 ```
3175 ### OverrideFirstRunPage
3176 Override the first run page. If the value is blank, no first run page is displayed.
3177
3178 **Compatibility:** Firefox 60, Firefox ESR 60\
3179 **CCK2 Equivalent:** `welcomePage`,`noWelcomePage`\
3180 **Preferences Affected:** `startup.homepage_welcome_url`
3181
3182 #### Windows (GPO)
3183 ```
3184 Software\Policies\Mozilla\Firefox\OverrideFirstRunPage = "http://example.org"
3185 ```
3186 #### Windows (Intune)
3187 OMA-URI:
3188 ```
3189 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OverrideFirstRunPage
3190 ```
3191 Value (string):
3192 ```
3193 <enabled/>
3194 <data id="OverridePage" value="https://example.com"/>
3195 ```
3196 #### macOS
3197 ```
3198 <dict>
3199   <key>OverrideFirstRunPage</key>
3200   <string>http://example.org</string>
3201 </dict>
3202 ```
3203 #### policies.json
3204 ```
3205 {
3206   "policies": {
3207     "OverrideFirstRunPage": "http://example.org"
3208 }
3209 ```
3210 ### OverridePostUpdatePage
3211 Override the upgrade page. If the value is blank, no upgrade page is displayed.
3212
3213 **Compatibility:** Firefox 60, Firefox ESR 60\
3214 **CCK2 Equivalent:** `upgradePage`,`noUpgradePage`\
3215 **Preferences Affected:** `startup.homepage_override_url`
3216
3217 #### Windows (GPO)
3218 ```
3219 Software\Policies\Mozilla\Firefox\OverridePostUpdatePage = "http://example.org"
3220 ```
3221 #### Windows (Intune)
3222 OMA-URI:
3223 ```
3224 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OverridePostUpdatePage
3225 ```
3226 Value (string):
3227 ```
3228 <enabled/>
3229 <data id="OverridePage" value="https://example.com"/>
3230 ```
3231 #### macOS
3232 ```
3233 <dict>
3234   <key>OverridePostUpdatePage</key>
3235   <string>http://example.org</string>
3236 </dict>
3237 ```
3238 #### policies.json
3239 ```
3240 {
3241   "policies": {
3242     "OverridePostUpdatePage": "http://example.org"
3243 }
3244 ```
3245 ### PasswordManagerEnabled
3246 Remove access to the password manager via preferences and blocks about:logins on Firefox 70.
3247
3248 **Compatibility:** Firefox 70, Firefox ESR 60.2\
3249 **CCK2 Equivalent:** N/A\
3250 **Preferences Affected:** `pref.privacy.disable_button.view_passwords`
3251
3252 #### Windows (GPO)
3253 ```
3254 Software\Policies\Mozilla\Firefox\PasswordManagerEnabled = 0x1 | 0x0
3255 ```
3256 #### Windows (Intune)
3257 OMA-URI:
3258 ```
3259 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PasswordManagerEnabled
3260 ```
3261 Value (string):
3262 ```
3263 <enabled/> or <disabled/>
3264 ```
3265 #### macOS
3266 ```
3267 <dict>
3268   <key>PasswordManagerEnabled</key>
3269   <true/> | <false/>
3270 </dict>
3271 ```
3272 #### policies.json
3273 ```
3274 {
3275   "policies": {
3276     "PasswordManagerEnabled": true | false
3277   }
3278 }
3279 ```
3280 ### PDFjs
3281 Disable or configure PDF.js, the built-in PDF viewer.
3282
3283 If `Enabled` is set to false, the built-in PDF viewer is disabled.
3284
3285 If `EnablePermissions` is set to true, the built-in PDF viewer will honor document permissions like preventing the copying of text.
3286
3287 Note: DisableBuiltinPDFViewer has not been deprecated. You can either continue to use it, or switch to using PDFjs->Enabled to disable the built-in PDF viewer. This new permission was added because we needed a place for PDFjs->EnabledPermissions.
3288
3289 **Compatibility:** Firefox 77, Firefox ESR 68.9\
3290 **CCK2 Equivalent:** N/A\
3291 **Preferences Affected:** `pdfjs.diabled`,`pdfjs.enablePermissions`
3292
3293 #### Windows (GPO)
3294 ```
3295 Software\Policies\Mozilla\Firefox\PDFjs\Enabled = 0x1 | 0x0
3296 Software\Policies\Mozilla\Firefox\PDFjs\EnablePermissions = 0x1 | 0x0
3297 ```
3298 #### Windows (Intune)
3299 OMA-URI:
3300 ```
3301 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PDFjs/PDFjs_Enabled
3302 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PDFjs/PDFjs_EnablePermissions
3303 ```
3304 Value (string):
3305 ```
3306 <enabled/>or <disabled/>
3307 ```
3308 #### macOS
3309 ```
3310 <dict>
3311   <key>PDFjs</key>
3312   <dict>
3313     <key>Enabled</key>
3314     <true/> | <false/>
3315     <key><EnablePermissions</key>
3316     <true/> | <false/>
3317   </dict>
3318 </dict>
3319 ```
3320 #### policies.json
3321 ```
3322 {
3323   "policies": {
3324     "PSFjs": {
3325       "Enabled": true | false,
3326       "EnablePermissions": true | false
3327     }
3328 }
3329 ```
3330 ### Permissions
3331 Set permissions associated with camera, microphone, location, notifications, and autoplay. Because these are origins, not domains, entries with unique ports must be specified separately. See examples below.
3332
3333 `Allow` is a list of origins where the feature is allowed.
3334
3335 `Block` is a list of origins where the feature is not allowed.
3336
3337 `BlockNewRequests` determines whether or not new requests can be made for the feature.
3338
3339 `Locked` prevents the user from changing preferences for the feature.
3340
3341 `Default` specifies the default value for Autoplay. block-audio-video is not supported on Firefox ESR 68.
3342
3343 **Compatibility:** Firefox 62, Firefox ESR 60.2 (Autoplay added in Firefox 74, Firefox ESR 68.6, Autoplay Default/Locked added in Firefox 76, Firefox ESR 68.8)\
3344 **CCK2 Equivalent:** N/A\
3345 **Preferences Affected:** `permissions.default.camera`,`permissions.default.microphone`,`permissions.default.geo`,`permissions.default.desktop-notification`,`media.autoplay.default`
3346
3347 #### Windows (GPO)
3348 ```
3349 Software\Policies\Mozilla\Firefox\Permissions\Camera\Allow\1 = "https://example.org"
3350 Software\Policies\Mozilla\Firefox\Permissions\Camera\Allow\2 = "https://example.org:1234"
3351 Software\Policies\Mozilla\Firefox\Permissions\Camera\Block\1 = "https://example.edu"
3352 Software\Policies\Mozilla\Firefox\Permissions\Camera\BlockNewRequests = 0x1 | 0x0
3353 Software\Policies\Mozilla\Firefox\Permissions\Camera\Locked = 0x1 | 0x0
3354 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Allow\1 = "https://example.org"
3355 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Block\1 = "https://example.edu"
3356 Software\Policies\Mozilla\Firefox\Permissions\Microphone\BlockNewRequests = 0x1 | 0x0
3357 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Locked = 0x1 | 0x0
3358 Software\Policies\Mozilla\Firefox\Permissions\Location\Allow\1 = "https://example.org"
3359 Software\Policies\Mozilla\Firefox\Permissions\Location\Block\1 = "https://example.edu"
3360 Software\Policies\Mozilla\Firefox\Permissions\Location\BlockNewRequests = 0x1 | 0x0
3361 Software\Policies\Mozilla\Firefox\Permissions\Location\Locked = 0x1 | 0x0
3362 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Allow\1 = "https://example.org"
3363 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Block\1 = "https://example.edu"
3364 Software\Policies\Mozilla\Firefox\Permissions\Notifications\BlockNewRequests = 0x1 | 0x0
3365 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Locked = 0x1 | 0x0
3366 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Allow\1 = "https://example.org"
3367 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Block\1 = "https://example.edu"
3368 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Default = "allow-audio-video" | "block-audio" | "block-audio-video"
3369 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Locked = 0x1 | 0x0
3370 ```
3371 #### Windows (Intune)
3372 OMA-URI:
3373 ```
3374 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Location/Location_BlockNewRequests
3375 ```
3376 Value (string):
3377 ```
3378 <enabled/> or <disabled/>
3379 ```
3380 OMA-URI:
3381 ```
3382 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Location/Location_Locked
3383 ```
3384 Value (string):
3385 ```
3386 <enabled/> or <disabled/>
3387 ```
3388 OMA-URI:
3389 ```
3390 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_Allow
3391 ```
3392 Value (string):
3393 ```
3394 <enabled/>
3395 <data id="Permissions" value="1&#xF000;https://example.org"/>
3396 ```
3397 OMA-URI:
3398 ```
3399 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_BlockNewRequests
3400 ```
3401 Value (string):
3402 ```
3403 <enabled/> or <disabled/>
3404 ```
3405 OMA-URI:
3406 ```
3407 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_Locked
3408 ```
3409 Value (string):
3410 ```
3411 <enabled/> or <disabled/>
3412 ```
3413 OMA-URI:
3414 ```
3415 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Allow
3416 ```
3417 Value (string):
3418 ```
3419 <enabled/>
3420 <data id="Permissions" value="1&#xF000;https://example.org"/>
3421 ```
3422 OMA-URI:
3423 ```
3424 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Block
3425 ```
3426 Value (string):
3427 ```
3428 <enabled/>
3429 <data id="Permissions" value="1&#xF000;https://example.edu"/>
3430 ```
3431 OMA-URI:
3432 ```
3433 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Default
3434 ```
3435 Value (string):
3436 ```
3437 <enabled/>
3438 <data id="Autoplay_Default" value="allow-audio-video | block-audio | block-audio-video"/>
3439 ```
3440 OMA-URI:
3441 ```
3442 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Locked
3443 ```
3444 Value (string):
3445 ```
3446 <enabled/> or <disabled/>
3447 ```
3448 #### macOS
3449 ```
3450 <dict>
3451   <key>Permissions</key>
3452   <dict>
3453     <key>Camera</key>
3454     <dict>
3455       <key>Allow</key>
3456       <array>
3457         <string>https://example.org</string>
3458         <string>https://example.org:1234</string>
3459       </array>
3460       <key>Block</key>
3461       <array>
3462         <string>https://example.edu</string>
3463       </array>
3464       <key>BlockNewRequests</key>
3465       <true/> | <false/>
3466       <key>Locked</key>
3467       <true/> | <false/>
3468     </dict>
3469     <key>Microphone</key>
3470     <dict>
3471       <key>Allow</key>
3472       <array>
3473         <string>https://example.org</string>
3474       </array>
3475       <key>Block</key>
3476       <array>
3477         <string>https://example.edu</string>
3478       </array>
3479       <key>BlockNewRequests</key>
3480       <true/> | <false/>
3481       <key>Locked</key>
3482       <true/> | <false/>
3483     </dict>
3484     <key>Location</key>
3485     <dict>
3486       <key>Allow</key>
3487       <array>
3488         <string>https://example.org</string>
3489       </array>
3490       <key>Block</key>
3491       <array>
3492         <string>https://example.edu</string>
3493       </array>
3494       <key>BlockNewRequests</key>
3495       <true/> | <false/>
3496       <key>Locked</key>
3497       <true/> | <false/>
3498     </dict>
3499     <key>Notifications</key>
3500     <dict>
3501       <key>Allow</key>
3502       <array>
3503         <string>https://example.org</string>
3504       </array>
3505       <key>Block</key>
3506       <array>
3507         <string>https://example.edu</string>
3508       </array>
3509       <key>BlockNewRequests</key>
3510       <true/>
3511       <key>Locked</key>
3512       <true/>
3513     </dict>
3514     <key>Autoplay</key>
3515     <dict>
3516       <key>Allow</key>
3517       <array>
3518         <string>https://example.org</string>
3519       </array>
3520       <key>Block</key>
3521       <array>
3522         <string>https://example.edu</string>
3523       </array>
3524       <key>Default</key>
3525       <string>allow-audio-video | block-audio | block-audio-video</string>
3526       <key>Locked</key>
3527       <true/> | <false/>
3528     </dict>
3529   </dict>
3530 </dict>
3531 ```
3532 #### policies.json
3533 ```
3534 {
3535   "policies": {
3536     "Permissions": {
3537       "Camera": {
3538         "Allow": ["https://example.org","https://example.org:1234"],
3539         "Block": ["https://example.edu"],
3540         "BlockNewRequests": true | false,
3541         "Locked": true | false
3542       },
3543       "Microphone": {
3544         "Allow": ["https://example.org"],
3545         "Block": ["https://example.edu"],
3546         "BlockNewRequests": true | false,
3547         "Locked": true | false
3548       },
3549       "Location": {
3550         "Allow": ["https://example.org"],
3551         "Block": ["https://example.edu"],
3552         "BlockNewRequests": true | false,
3553         "Locked": true | false
3554       },
3555       "Notifications": {
3556         "Allow": ["https://example.org"],
3557         "Block": ["https://example.edu"],
3558         "BlockNewRequests": true | false,
3559         "Locked": true | false
3560       },
3561       "Autoplay": {
3562         "Allow": ["https://example.org"],
3563         "Block": ["https://example.edu"],
3564         "Default": "allow-audio-video" | "block-audio" | "block-audio-video",
3565         "Locked": true | false
3566       }
3567     }
3568   }
3569 }
3570 ```
3571 ### PictureInPicture
3572
3573 Enable or disable Picture-in-Picture.
3574
3575 **Compatibility:** Firefox 78, Firefox ESR 78\
3576 **CCK2 Equivalent:** N/A\
3577 **Preferences Affected:** `media.videocontrols.picture-in-picture.video-toggle.enabled`
3578
3579 #### Windows (GPO)
3580 ```
3581 Software\Policies\Mozilla\Firefox\PictureInPicture = 0x1 | 0x0
3582 ```
3583 #### Windows (Intune)
3584 OMA-URI:
3585 ```
3586 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PictureInPicture
3587 ```
3588 Value (string):
3589 ```
3590 <enabled/> or <disabled/>
3591 ```
3592 #### macOS
3593 ```
3594 <dict>
3595   <key>PictureInPicture</key>
3596   <true/> | <false/>
3597 </dict>
3598 ```
3599 #### policies.json
3600 ```
3601 {
3602   "policies": {
3603     "PictureInPicture": true | false
3604   }
3605 }
3606 ```
3607 ### PopupBlocking
3608 Configure the default pop-up window policy as well as origins for which pop-up windows are allowed.
3609
3610 `Allow` is a list of origins where popup-windows are allowed.
3611
3612 `Default` determines whether or not pop-up windows are allowed by default.
3613
3614 `Locked` prevents the user from changing pop-up preferences.
3615
3616 **Compatibility:** Firefox 60, Firefox ESR 60\
3617 **CCK2 Equivalent:** `permissions.popup`\
3618 **Preferences Affected:** `dom.disable_open_during_load`
3619
3620 #### Windows (GPO)
3621 ```
3622 Software\Policies\Mozilla\Firefox\PopupBlocking\Allow\1 = "https://example.org"
3623 Software\Policies\Mozilla\Firefox\PopupBlocking\Allow\2 = "https://example.edu"
3624 Software\Policies\Mozilla\Firefox\PopupBlocking\Default = 0x1 | 0x0
3625 Software\Policies\Mozilla\Firefox\PopupBlocking\Locked = 0x1 | 0x0
3626 ```
3627 #### Windows (Intune)
3628 OMA-URI:
3629 ```
3630 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Allow
3631 ```
3632 Value (string):
3633 ```
3634 <enabled/>
3635 <data id="Permissions" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
3636 ```
3637 OMA-URI:
3638 ```
3639 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Default
3640 ```
3641 Value (string):
3642 ```
3643 <enabled/> or <disabled/>
3644 ```
3645 OMA-URI:
3646 ```
3647 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Locked
3648 ```
3649 Value (string):
3650 ```
3651 <enabled/> or <disabled/>
3652 ```
3653 #### macOS
3654 ```
3655 <dict>
3656   <key>PopupBlocking</key>
3657   <dict>
3658     <key>Allow</key>
3659     <array>
3660       <string>http://example.org</string>
3661       <string>http://example.edu</string>
3662     </array>
3663     <key>Default</key>
3664     <true/> | <false/>
3665     <key>Locked</key>
3666     <true/> | <false/>
3667   </dict>
3668 </dict>
3669 ```
3670 #### policies.json
3671 ```
3672 {
3673   "policies": {
3674     "PopupBlocking": {
3675       "Allow": ["http://example.org/",
3676                 "http://example.edu/"],
3677       "Default": true | false,
3678       "Locked": true | false
3679     }
3680   }
3681 }
3682 ```
3683 ### Preferences
3684 Set and lock certain preferences.
3685
3686 **Compatibility:** See below\
3687 **CCK2 Equivalent:** `preferences`\
3688 **Preferences Affected:** See below
3689
3690 | Preference | Type | Compatibility | Default
3691 | --- | --- | --- | ---
3692 | accessibility.force_disabled | integer | Firefox 70, Firefox ESR 68.2 | 0
3693 | &nbsp;&nbsp;&nbsp;&nbsp;If set to 1, platform accessibility is disabled.
3694 | app.update.auto (Deprecated - Switch to AppAutoUpdate policy) | boolean | Firefox 68, Firefox ESR 68 | true
3695 | &nbsp;&nbsp;&nbsp;&nbsp;If false, Firefox doesn't automatically install update.
3696 | browser.bookmarks.autoExportHTML | boolean | Firefox 70, Firefox ESR 68.2 | false
3697 | &nbsp;&nbsp;&nbsp;&nbsp;If true, bookmarks are exported on shutdown.
3698 | browser.bookmarks.file | string | Firefox 70, Firefox ESR 68.2 | N/A
3699 | &nbsp;&nbsp;&nbsp;&nbsp;If set, the name of the file where bookmarks are exported and imported.
3700 | browser.bookmarks.restore_default_bookmarks | boolean | Firefox 70, Firefox ESR 68.2 | N/A
3701 | &nbsp;&nbsp;&nbsp;&nbsp;If true, bookmarks are restored to their defaults.
3702 | browser.cache.disk.enable | boolean | Firefox 68, Firefox ESR 68 | true
3703 | &nbsp;&nbsp;&nbsp;&nbsp;If false, don't store cache on the hard drive.
3704 | ~browser.cache.disk.parent_directory~ | string | Firefox 68, Firefox ESR 68 | Profile temporary directory
3705 | &nbsp;&nbsp;&nbsp;&nbsp;~If set, changes the location of the disk cache.~ This policy doesn't work. It's being worked on.
3706 | browser.fixup.dns_first_for_single_words | boolean | Firefox 68, Firefox ESR 68 | false
3707 | &nbsp;&nbsp;&nbsp;&nbsp;If true, single words are sent to DNS, not directly to search.
3708 | browser.newtabpage.activity-stream.default.sites | string | Firefox 72, ESR 68.4 | Locale dependent
3709 | &nbsp;&nbsp;&nbsp;&nbsp;If set, a list of URLs to use as the default top sites on the new tab page.
3710 | browser.places.importBookmarksHTML | boolean | Firefox 70, Firefox ESR 68.2
3711 | &nbsp;&nbsp;&nbsp;&nbsp;If true, bookmarks are always imported on startup.
3712 | browser.safebrowsing.phishing.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
3713 | &nbsp;&nbsp;&nbsp;&nbsp;If false, phishing protection is not enabled (Not recommended)
3714 | browser.safebrowsing.malware.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
3715 | &nbsp;&nbsp;&nbsp;&nbsp;If false, malware protection is not enabled (Not recommended)
3716 | browser.search.update | boolean | Firefox 68, Firefox ESR 68 | true
3717 | &nbsp;&nbsp;&nbsp;&nbsp;If false, updates for search engines are not checked.
3718 | browser.slowStartup.notificationDisabled | boolean | Firefox 70, Firefox ESR 68.2 | false
3719 | &nbsp;&nbsp;&nbsp;&nbsp;If true, a notification isn't shown if startup is slow.
3720 | browser.tabs.warnOnClose | boolean | Firefox 68, Firefox ESR 68 | true
3721 | &nbsp;&nbsp;&nbsp;&nbsp;If false, there is no warning when the browser is closed.
3722 | browser.taskbar.previews.enable | boolean | Firefox 70, Firefox ESR 68.2 (Windows only) | false
3723 | &nbsp;&nbsp;&nbsp;&nbsp;If true, tab previews are shown in the Windows taskbar.
3724 | browser.urlbar.suggest.bookmark | boolean | Firefox 68, Firefox ESR 68 | true
3725 | &nbsp;&nbsp;&nbsp;&nbsp;If false, bookmarks aren't suggested when typing in the URL bar.
3726 | browser.urlbar.suggest.history | boolean | Firefox 68, Firefox ESR 68 | true
3727 | &nbsp;&nbsp;&nbsp;&nbsp;If false, history isn't suggested when typing in the URL bar.
3728 | browser.urlbar.suggest.openpage | boolean | Firefox 68, Firefox ESR 68 | true
3729 | &nbsp;&nbsp;&nbsp;&nbsp;If false, open tabs aren't suggested when typing in the URL bar.
3730 | datareporting.policy.dataSubmissionPolicyBypassNotification | boolean | Firefox 68, Firefox ESR 68 | false
3731 | &nbsp;&nbsp;&nbsp;&nbsp;If true, don't show the privacy policy tab on first run.
3732 | dom.allow_scripts_to_close_windows | boolean | Firefox 70, Firefox ESR 68.2 | false
3733 | &nbsp;&nbsp;&nbsp;&nbsp;If false, web page can close windows.
3734 | dom.disable_window_flip | boolean | Firefox 68, Firefox ESR 68 | true
3735 | &nbsp;&nbsp;&nbsp;&nbsp;If false, web pages can focus and activate windows.
3736 | dom.disable_window_move_resize | boolean | Firefox 68, Firefox ESR 68 | false
3737 | &nbsp;&nbsp;&nbsp;&nbsp;If true, web pages can't move or resize windows.
3738 | dom.event.contextmenu.enabled | boolean | Firefox 68, Firefox ESR 68 | true
3739 | &nbsp;&nbsp;&nbsp;&nbsp;If false, web pages can't override context menus.
3740 | dom.keyboardevent.keypress.hack.dispatch_non_printable_keys.addl | string | Firefox 68, Firefox ESR 68 | N/A
3741 | &nbsp;&nbsp;&nbsp;&nbsp;See https://support.mozilla.org/en-US/kb/dom-events-changes-introduced-firefox-66
3742 | dom.keyboardevent.keypress.hack.use_legacy_keycode_and_charcode.addl | string | Firefox 68, Firefox ESR 68 | N/A
3743 | &nbsp;&nbsp;&nbsp;&nbsp;See https://support.mozilla.org/en-US/kb/dom-events-changes-introduced-firefox-66
3744 | dom.xmldocument.load.enabled | boolean | Firefox ESR 68.5 | true.
3745 | &nbsp;&nbsp;&nbsp;&nbsp;If false, XMLDocument.load is not available.
3746 | dom.xmldocument.async.enabled | boolean | Firefox ESR 68.5 | true
3747 | &nbsp;&nbsp;&nbsp;&nbsp;If false, XMLDocument.async is not available.
3748 | extensions.blocklist.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
3749 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the extensions blocklist is not used (Not recommended)
3750 | extensions.getAddons.showPane | boolean | Firefox 68, Firefox ESR 68 | N/A
3751 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the Recommendations tab is not displayed in the Add-ons Manager.
3752 | extensions.htmlaboutaddons.recommendations.enabled | boolean | Firefox 72, Firefox ESR 68.4 | true
3753 | &nbsp;&nbsp;&nbsp;&nbsp;If false, recommendations are not shown on the Extensions tab in the Add-ons Manager.
3754 | geo.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
3755 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the geolocation API is disabled. | Language dependent
3756 | intl.accept_languages | string | Firefox 70, Firefox ESR 68.2
3757 | &nbsp;&nbsp;&nbsp;&nbsp;If set, preferred language for web pages.
3758 | media.eme.enabled (Deprecated - Switch to EncryptedMediaExtensions policy) | boolean | Firefox 70, Firefox ESR 68.2 | true
3759 | &nbsp;&nbsp;&nbsp;&nbsp;If false, Encrypted Media Extensions are not enabled.
3760 | media.gmp-gmpopenh264.enabled | boolean | Firefox 68, Firefox ESR 68 | true
3761 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the OpenH264  plugin is not downloaded.
3762 | media.gmp-widevinecdm.enabled | boolean | Firefox 68, Firefox ESR 68 | true
3763 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the Widevine plugin is not downloaded.
3764 | media.peerconnection.enabled | boolean | Firefox 72, Firefox ESR 68.4 | true
3765 | &nbsp;&nbsp;&nbsp;&nbsp;If false, WebRTC is disabled
3766 | media.peerconnection.ice.obfuscate_host_addresses.whitelist (Deprecated) | string | Firefox 72, Firefox ESR 68.4 | N/A
3767 | &nbsp;&nbsp;&nbsp;&nbsp;If set, a list of domains for which mDNS hostname obfuscation is
3768 disabled
3769 | media.peerconnection.ice.obfuscate_host_addresses.blocklist | string | Firefox 79, Firefox ESR 78.1 | N/A
3770 | &nbsp;&nbsp;&nbsp;&nbsp;If set, a list of domains for which mDNS hostname obfuscation is
3771 disabled
3772 | network.dns.disableIPv6 | boolean | Firefox 68, Firefox ESR 68 | false
3773 | &nbsp;&nbsp;&nbsp;&nbsp;If true, IPv6 DNS lokoups are disabled.
3774 | network.IDN_show_punycode | boolean | Firefox 68, Firefox ESR 68 | false
3775 | &nbsp;&nbsp;&nbsp;&nbsp;If true, display the punycode version of internationalized domain names.
3776 | places.history.enabled | boolean | Firefox 68, Firefox ESR 68 | true
3777 | &nbsp;&nbsp;&nbsp;&nbsp;If false, history is not enabled.
3778 | print.save_print_settings | boolean | Firefox 70, Firefox ESR 68.2 | true
3779 | &nbsp;&nbsp;&nbsp;&nbsp;If false, print settings are not saved between jobs.
3780 | security.default_personal_cert | string | Firefox 68, Firefox ESR 68 | Ask Every Time
3781 | &nbsp;&nbsp;&nbsp;&nbsp;If set to Select Automatically, Firefox automatically chooses the default personal certificate.
3782 | security.mixed_content.block_active_content | boolean | Firefox 70, Firefox ESR 68.2 | true
3783 | &nbsp;&nbsp;&nbsp;&nbsp;If false, mixed active content (HTTP and HTTPS) is not blocked.
3784 | security.osclientcerts.autoload | boolean | Firefox 72 (Windows), Firefox 75 (macOS)  | false
3785 | &nbsp;&nbsp;&nbsp;&nbsp;If true, client certificates are loaded from the operating system certificate store.
3786 | security.ssl.errorReporting.enabled | boolean | Firefox 68, Firefox ESR 68 | true
3787 | &nbsp;&nbsp;&nbsp;&nbsp;If false, SSL errors cannot be sent to Mozilla.
3788 | security.tls.hello_downgrade_check | boolean | Firefox 72, Firefox ESR 68.4 | true
3789 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the TLS 1.3 downgrade check is disabled.
3790 | ui.key.menuAccessKeyFocuses | boolean | Firefox 68, Firefox ESR 68 | true
3791 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the Alt key doesn't show the menubar on Windows.
3792 | widget.content.gtk-theme-override | string | Firefox 72, Firefox ESR 68.4 (Linux only) | N/A
3793 | &nbsp;&nbsp;&nbsp;&nbsp;If set, overrides the GTK theme for widgets.
3794 #### Windows (GPO)
3795 ```
3796 Software\Policies\Mozilla\Firefox\Preferences\boolean_preference_name = 0x1 | 0x0
3797 Software\Policies\Mozilla\Firefox\Preferences\string_preference_name = "string_value"
3798 ```
3799 #### Windows (Intune)
3800 OMA-URI: (periods are replaced by underscores)
3801 ```
3802 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Preferences/boolean_preference_name
3803 ```
3804 Value (string):
3805 ```
3806 <enabled/> or <disabled/>
3807 ```
3808 OMA-URI: (periods are replaced by underscores)
3809 ```
3810 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Preferences/string_preference_name
3811 ```
3812 Value (string):
3813 ```
3814 <enabled/>
3815 <data id="Preferences_String" value="string_value"/>
3816 ```
3817 #### macOS
3818 ```
3819 <dict>
3820   <key>Preferences</key>
3821   <dict>
3822     <key>boolean_preference_name</key>
3823     <true/> | <false/>
3824     <key>string_preference_name</key>
3825     <string>string_value</string>
3826   </dict>
3827 </dict>
3828 ```
3829 #### policies.json
3830 ```
3831 {
3832   "policies": {
3833     "Preferences": {
3834       "boolean_preference_name": true | false,
3835       "string_preference_name": "string_value"
3836     }
3837   }
3838 }
3839 ```
3840 ### PromptForDownloadLocation
3841 Ask where to save each file before downloading.
3842
3843 **Compatibility:** Firefox 68, Firefox ESR 68\
3844 **CCK2 Equivalent:** N/A\
3845 **Preferences Affected:** `browser.download.useDownloadDir`
3846
3847 #### Windows (GPO)
3848 ```
3849 Software\Policies\Mozilla\Firefox\PromptForDownloadLocation = 0x1 | 0x0
3850 ```
3851 #### Windows (Intune)
3852 OMA-URI:
3853 ```
3854 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PromptForDownloadLocation
3855 ```
3856 Value (string):
3857 ```
3858 <enabled/> or <disabled/>
3859 ```
3860 #### macOS
3861 ```
3862 <dict>
3863   <key>PromptForDownloadLocation</key>
3864   <true/> | <false/>
3865 </dict>
3866 ```
3867 #### policies.json
3868 ```
3869 {
3870   "policies": {
3871     "PromptForDownloadLocation": true | false
3872   }
3873 }
3874 ```
3875 ### Proxy
3876 Configure proxy settings. These settings correspond to the connection settings in Firefox preferences.
3877 To specify ports, append them to the hostnames with a colon (:).
3878
3879 `Mode` is the proxy method being used.
3880
3881 `Locked` is whether or not proxy settings can be changed.
3882
3883 `HTTPProxy` is the HTTP proxy server.
3884
3885 `UseHTTPProxyForAllProtocols` is whether or not the HTTP proxy should be used for all other proxies.
3886
3887 `SSLProxy` is the SSL proxy server.
3888
3889 `FTPProxy` is the FTP proxy server.
3890
3891 `SOCKSProxy` is the SOCKS proxy server
3892
3893 `SOCKSVersion` is the SOCKS version (4 or 5)
3894
3895 `Passthrough` is list of hostnames or IP addresses that will not be proxied. Use `<local>` to bypass proxying for all hostnames which do not contain periods.
3896
3897 `AutoConfigURL` is a  URL for proxy configuration (only used if Mode is autoConfig).
3898
3899 `AutoLogin` means do not prompt for authentication if password is saved.
3900
3901 `UseProxyForDNS` to use proxy DNS when using SOCKS v5.
3902
3903 **Compatibility:** Firefox 60, Firefox ESR 60\
3904 **CCK2 Equivalent:** `networkProxy*`\
3905 **Preferences Affected:** `network.proxy.type`,`network.proxy.autoconfig_url`,`network.proxy.socks_remote_dns`,`signon.autologin.proxy`,`network.proxy.socks_version`,`network.proxy.no_proxies_on`,`network.proxy.share_proxy_settings`,`network.proxy.http`,`network.proxy.http_port`,`network.proxy.ftp`,`network.proxy.ftp_port`,`network.proxy.ssl`,`network.proxy.ssl_port`,`network.proxy.socks`,`network.proxy.socks_port`
3906
3907 #### Windows (GPO)
3908 ```
3909 Software\Policies\Mozilla\Firefox\Proxy\Mode = "none" | "system" | "manual" | "autoDetect" | "autoConfig"
3910 Software\Policies\Mozilla\Firefox\Proxy\Locked = 0x1 | 0x0
3911 Software\Policies\Mozilla\Firefox\=Proxy\HTTPProxy = https://httpproxy.example.com
3912 Software\Policies\Mozilla\Firefox\Proxy\UseHTTPProxyForAllProtocols = 0x1 | 0x0
3913 Software\Policies\Mozilla\Firefox\Proxy\SSLProxy = https://sslproxy.example.com
3914 Software\Policies\Mozilla\Firefox\Proxy\FTPProxy = https://ftpproxy.example.com
3915 Software\Policies\Mozilla\Firefox\Proxy\SOCKSProxy = https://socksproxy.example.com
3916 Software\Policies\Mozilla\Firefox\Proxy\SOCKSVersion = 0x4 | 0x5
3917 Software\Policies\Mozilla\Firefox\Proxy\Passthrough = <local>
3918 Software\Policies\Mozilla\Firefox\Proxy\AutoConfigURL = URL_TO_AUTOCONFIG
3919 Software\Policies\Mozilla\Firefox\Proxy\AutoLogin = 0x1 | 0x0
3920 Software\Policies\Mozilla\Firefox\Proxy\UseProxyForDNS = 0x1 | 0x0
3921 ```
3922 #### Windows (Intune)
3923 OMA-URI:
3924 ```
3925 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Proxy
3926 ```
3927 Value (string):
3928 ```
3929 <enabled/>
3930 <data id="ProxyLocked" value="true | false"/>
3931 <data id="ConnectionType" value="none | system | manual | autoDetect | autoConfig"/>
3932 <data id="HTTPProxy" value="https://httpproxy.example.com"/>
3933 <data id="UseHTTPProxyForAllProtocols" value="true | false"/>
3934 <data id="SSLProxy" value="https://sslproxy.example.com"/>
3935 <data id="FTPProxy" value="https://ftpproxy.example.com"/>
3936 <data id="SOCKSProxy" value="https://socksproxy.example.com"/>
3937 <data id="SOCKSVersion" value="4 | 5"/>
3938 <data id="AutoConfigURL" value="URL_TO_AUTOCONFIG"/>
3939 <data id="Passthrough" value="<local>"/>
3940 <data id="AutoLogin" value="true | false"/>
3941 <data id="UseProxyForDNS" value="true | false"/>
3942 ```
3943 #### macOS
3944 ```
3945 <dict>
3946   <key>Proxy</key>
3947   <dict>
3948     <key>Mode</key>
3949     <string>none | system | manual | autoDetect | autoConfig</string>
3950     <key>Locked</key>
3951     <true> | </false>
3952     <key>HTTPProxy</key>
3953     <string>https://httpproxy.example.com</string>
3954     <key>UseHTTPProxyForAllProtocols</key>
3955     <true> | </false>
3956     <key>SSLProxy</key>
3957     <string>https://sslproxy.example.com</string>
3958     <key>FTPProxy</key>
3959     <string>https://ftpproxy.example.com</string>
3960     <key>SOCKSProxy</key>
3961     <string>https://socksproxy.example.com</string>
3962     <key>SOCKSVersion</key>
3963     <string>4 | 5</string>
3964     <key>Passthrough</key>
3965     <string>&lt;local>&gt;</string>
3966     <key>AutoConfigURL</key>
3967     <string>URL_TO_AUTOCONFIG</string>
3968     <key>AutoLogin</key>
3969     <true> | </false>
3970     <key>UseProxyForDNS</key>
3971     <true> | </false>
3972   </dict>
3973 </dict>
3974 ```
3975 #### policies.json
3976 ```
3977 {
3978   "policies": {
3979     "Proxy": {
3980       "Mode": "none" | "system" | "manual" | "autoDetect" | "autoConfig",
3981       "Locked": true | false,
3982       "HTTPProxy": "hostname",
3983       "UseHTTPProxyForAllProtocols": true | false,
3984       "SSLProxy": "hostname",
3985       "FTPProxy": "hostname",
3986       "SOCKSProxy": "hostname",
3987       "SOCKSVersion": 4 | 5
3988       "Passthrough": "<local>",
3989       "AutoConfigURL": "URL_TO_AUTOCONFIG",
3990       "AutoLogin": true | false,
3991       "UseProxyForDNS": true | false
3992     }
3993   }
3994 }
3995 ```
3996 ### RequestedLocales
3997 Set the the list of requested locales for the application in order of preference. It will cause the corresponding language pack to become active.
3998
3999 Note: For Firefox 68, this can now be a string so that you can specify an empty value.
4000
4001 **Compatibility:** Firefox 64, Firefox ESR 60.4, Updated in Firefox 68, Firefox ESR 68\
4002 **CCK2 Equivalent:** N/A\
4003 **Preferences Affected:** N/A
4004 #### Windows (GPO)
4005 ```
4006 Software\Policies\Mozilla\Firefox\RequestedLocales\1 = "de"
4007 Software\Policies\Mozilla\Firefox\RequestedLocales\2 = "en-US"
4008
4009 or
4010
4011 Software\Policies\Mozilla\Firefox\RequestedLocales = "de,en-US"
4012 ```
4013 #### Windows (Intune)
4014 OMA-URI:
4015 ```
4016 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/RequestedLocalesString
4017 ```
4018 Value (string):
4019 ```
4020 <enabled/>
4021 <data id="Preferences_String" value="de,en-US"/>
4022 ```
4023 #### macOS
4024 ```
4025 <dict>
4026   <key>RequestedLocales</key>
4027   <array>
4028     <string>de</string>
4029     <string>en-US</string>
4030   </array>
4031 </dict>
4032
4033 or
4034
4035 <dict>
4036   <key>RequestedLocales</key>
4037   <string>de,en-US</string>
4038 </dict>
4039
4040 ```
4041 #### policies.json
4042 ```
4043 {
4044   "policies": {
4045     "RequestedLocales": ["de", "en-US"]
4046   }
4047 }
4048
4049 or
4050
4051 {
4052   "policies": {
4053     "RequestedLocales": "de,en-US"
4054   }
4055 }
4056 ```
4057 <a name="SanitizeOnShutdown"></a>
4058
4059 ### SanitizeOnShutdown (Selective)
4060 Clear data on shutdown. Choose from Cache, Cookies, Download History, Form & Search History, Browsing History, Active Logins, Site Preferences and Offline Website Data.
4061
4062 Previously, these values were always locked. Starting with Firefox 74 and Firefox ESR 68.6, you can use the `Locked` option to either keep the values unlocked (set it to false), or lock only the values you set (set it to true). If you want the old behavior of locking everything, do not set `Locked` at all.
4063
4064 **Compatibility:** Firefox 68, Firefox ESR 68 (Locked added in 74/68.6)\
4065 **CCK2 Equivalent:** N/A\
4066 **Preferences Affected:** `privacy.sanitize.sanitizeOnShutdown`,`privacy.clearOnShutdown.cache`,`privacy.clearOnShutdown.cookies`,`privacy.clearOnShutdown.downloads`,`privacy.clearOnShutdown.formdata`,`privacy.clearOnShutdown.history`,`privacy.clearOnShutdown.sessions`,`privacy.clearOnShutdown.siteSettings`,`privacy.clearOnShutdown.offlineApps`
4067 #### Windows (GPO)
4068 ```
4069 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Cache = 0x1 | 0x0
4070 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Cookies = 0x1 | 0x0
4071 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Downloads = 0x1 | 0x0
4072 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\FormData = 0x1 | 0x0
4073 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\History = 0x1 | 0x0
4074 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Sessions = 0x1 | 0x0
4075 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\SiteSettings = 0x1 | 0x0
4076 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\OfflineApps = 0x1 | 0x0
4077 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Locked = 0x1 | 0x0
4078 ```
4079 #### Windows (Intune)
4080 OMA-URI:
4081 ```
4082 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/I_SanitizeOnShutdown_Locked
4083 ```
4084 Value (string):
4085 ```
4086 <enabled/> or <disabled/>
4087 ```
4088 #### macOS
4089 ```
4090 <dict>
4091   <key>SanitizeOnShutdown</key>
4092   <dict>
4093     <key>Cache</key>
4094     <true/> | <false/>
4095     <key>Cookies</key>
4096     <true/> | <false/>
4097     <key>Downloads</key>
4098     <true/> | <false/>
4099     <key>FormData</key>
4100     <true/> | <false/>
4101     <key>History</key>
4102     <true/> | <false/>
4103     <key>Sessions</key>
4104     <true/> | <false/>
4105     <key>SiteSettings</key>
4106     <true/> | <false/>
4107     <key>OfflineApps</key>
4108     <true/> | <false/>
4109     <key>Locked</key>
4110     <true/> | <false/>
4111   </dict>
4112 </dict>
4113 ```
4114 #### policies.json
4115 ```
4116 {
4117   "policies": {
4118     "SanitizeOnShutdown": {
4119       "Cache": true | false,
4120       "Cookies": true | false,
4121       "Downloads": true | false,
4122       "FormData": true | false,
4123       "History": true | false,
4124       "Sessions": true | false,
4125       "SiteSettings": true | false,
4126       "OfflineApps": true | false,
4127       "Locked": true | false
4128     }
4129   }
4130 }
4131 ```
4132 ### SanitizeOnShutdown (All)
4133 Clear all data on shutdown, including Browsing & Download History, Cookies, Active Logins, Cache, Form & Search History, Site Preferences and Offline Website Data.
4134
4135 **Compatibility:** Firefox 60, Firefox ESR 60\
4136 **CCK2 Equivalent:** N/A\
4137 **Preferences Affected:** `privacy.sanitize.sanitizeOnShutdown`,`privacy.clearOnShutdown.cache`,`privacy.clearOnShutdown.cookies`,`privacy.clearOnShutdown.downloads`,`privacy.clearOnShutdown.formdata`,`privacy.clearOnShutdown.history`,`privacy.clearOnShutdown.sessions`,`privacy.clearOnShutdown.siteSettings`,`privacy.clearOnShutdown.offlineApps`
4138 #### Windows (GPO)
4139 ```
4140 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown = 0x1 | 0x0
4141 ```
4142 #### Windows (Intune)
4143 OMA-URI:
4144 ```
4145 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/C_SanitizeOnShutdown
4146 ```
4147 Value (string):
4148 ```
4149 <enabled/> or <disabled/>
4150 ```
4151 #### macOS
4152 ```
4153 <dict>
4154   <key>SanitizeOnShutdown</key>
4155   <true/> | <false/>
4156 </dict>
4157 ```
4158 #### policies.json
4159 ```
4160 {
4161   "policies": {
4162     "SanitizeOnShutdown": true | false
4163   }
4164 }
4165 ```
4166 ### SearchBar
4167 Set whether or not search bar is displayed.
4168
4169 **Compatibility:** Firefox 60, Firefox ESR 60\
4170 **CCK2 Equivalent:** `showSearchBar`\
4171 **Preferences Affected:** N/A
4172
4173 #### Windows (GPO)
4174 ```
4175 Software\Policies\Mozilla\Firefox\SearchBar = "unified" | "separate"
4176 ```
4177
4178 #### Windows (Intune)
4179 OMA-URI:
4180 ```
4181 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SearchBar
4182 ```
4183 Value (string):
4184 ```
4185 <enabled/>
4186 <data id="Permissions" value="unified | separate"/>
4187 ```
4188 #### macOS
4189 ```
4190 <dict>
4191   <key>SearchBar</key>
4192   <string>unified | separate</string>
4193 </dict>
4194 ```
4195 #### policies.json
4196 ```
4197 {
4198   "policies": {
4199     "SearchBar": "unified" | "separate"
4200   }
4201 }
4202 ```
4203 <a name="SearchEngines"></a>
4204
4205 ### SearchEngines (This policy is only available on the ESR.)
4206
4207 ### SearchEngines | Default
4208
4209 Set the default search engine. This policy is only available on the ESR.
4210
4211 **Compatibility:** Firefox ESR 60\
4212 **CCK2 Equivalent:** `defaultSearchEngine`\
4213 **Preferences Affected:** N/A
4214
4215 #### Windows (GPO)
4216 ```
4217 Software\Policies\Mozilla\Firefox\SearchEngines\Default = NAME_OF_SEARCH_ENGINE
4218 ```
4219 #### Windows (Intune)
4220 OMA-URI:
4221 ```
4222 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_Default
4223 ```
4224 Value (string):
4225 ```
4226 <enabled/>
4227 <data id="SearchEngines_Default" value="NAME_OF_SEARCH_ENGINE"/>
4228 ```
4229 #### macOS
4230 ```
4231 <dict>
4232   <key>SearchEngines</key>
4233   <dict>
4234     <key>Default</key>
4235     <string>NAME_OF_SEARCH_ENGINE</string>
4236   </dict>
4237 </dict>
4238 ```
4239 #### policies.json
4240 ```
4241 {
4242   "policies": {
4243     "SearchEngines": {
4244       "Default": "NAME_OF_SEARCH_ENGINE"
4245     }
4246   }
4247 }
4248 ```
4249 ### SearchEngines | PreventInstalls
4250
4251 Prevent installing search engines from webpages.
4252
4253 **Compatibility:** Firefox ESR 60\
4254 **CCK2 Equivalent:** `disableSearchEngineInstall`\
4255 **Preferences Affected:** N/A
4256
4257 #### Windows (GPO)
4258 ```
4259 Software\Policies\Mozilla\Firefox\SearchEngines\PreventInstalls = 0x1 | 0x0
4260 ```
4261 #### Windows (Intune)
4262 OMA-URI:
4263 ```
4264 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_PreventInstalls
4265 ```
4266 Value (string):
4267 ```
4268 <enabled/> or <disabled/>
4269 ```
4270 #### macOS
4271 ```
4272 <dict>
4273   <key>SearchEngines</key>
4274   <dict>
4275     <key>PreventInstalls</key>
4276     <true/> | <false/>
4277   </dict>
4278 </dict>
4279 ```
4280 #### policies.json
4281 ```
4282 {
4283   "policies": {
4284     "SearchEngines": {
4285       "PreventInstalls": true | false
4286     }
4287   }
4288 }
4289 ```
4290 ### SearchEngines | Remove
4291
4292 Hide built-in search engines. This policy is only available on the ESR.
4293
4294 **Compatibility:** Firefox ESR 60.2\
4295 **CCK2 Equivalent:** `removeDefaultSearchEngines` (removed all built-in engines)\
4296 **Preferences Affected:** N/A
4297
4298 #### Windows (GPO)
4299 ```
4300 Software\Policies\Mozilla\Firefox\SearchEngines\Remove\1 = NAME_OF_SEARCH_ENGINE
4301 ```
4302 #### Windows (Intune)
4303 OMA-URI:
4304 ```
4305 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_Remove
4306 ```
4307 Value (string):
4308 ```
4309 <enabled/>
4310 <data id="SearchEngines_Remove" value="1&#xF000;NAME_OF_SEARCH_ENGINE"/>
4311 ```
4312 #### macOS
4313 ```
4314 <dict>
4315   <key>SearchEngines</key>
4316   <dict>
4317     <key>Remove</key>
4318     <array>
4319       <string>NAME_OF_SEARCH_ENGINE</string>
4320     </array>
4321   </dict>
4322 </dict>
4323 ```
4324 #### policies.json
4325 ```
4326 {
4327   "policies": {
4328     "SearchEngines": {
4329       "Remove": ["NAME_OF_SEARCH_ENGINE"]
4330     }
4331   }
4332 }
4333 ```
4334 ### SearchEngines | Add
4335
4336 Add new search engines (up to five). This policy is only available on the ESR. `Name` and `URLTemplate` are required.
4337
4338 `Name` is the name of the search engine.
4339
4340 `URLTemplate` is the search URL with {searchTerms} to substitute for the search term.
4341
4342 `Method` is either GET or POST
4343
4344 `IconURL` is a URL for the icon to use.
4345
4346 `Alias` is a keyword to use for the engine.
4347
4348 `Description` is a description of the search engine.
4349
4350 `PostData` is the POST data as name value pairs separated by &.
4351
4352 `SuggestURLTemplate` is a search suggestions URL with {searchTerms} to substitute for the search term.
4353
4354 **Compatibility:** Firefox ESR 60 (POST support in Firefox ESR 68)\
4355 **CCK2 Equivalent:** `searchplugins`\
4356 **Preferences Affected:** N/A
4357
4358 #### Windows (GPO)
4359 ```
4360 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Name = "Example1"
4361 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\URLTemplate = "https://www.example.org/q={searchTerms}"
4362 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Method = "GET" | "POST"
4363 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\IconURL = "https://www.example.org/favicon.ico"
4364 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Alias = "example"
4365 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Description = "Example Description"
4366 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\SuggestURLTemplate = "https://www.example.org/suggestions/q={searchTerms}"
4367 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\PostData = "name=value&q={searchTerms}"
4368 ```
4369 #### Windows (Intune)
4370 OMA-URI:
4371 ```
4372 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_1
4373 ```
4374 Value (string):
4375 ```
4376 <enabled/>
4377 <data id="SearchEngine_Name" value="Example1"/>
4378 <data id="SearchEngine_URLTemplate" value="https://www.example.org/q={searchTerms"/>
4379 <data id="SearchEngine_Method" value="GET | POST"/>
4380 <data id="SearchEngine_IconURL" value="https://www.example.org/favicon.ico"/>
4381 <data id="SearchEngine_Alias" value="example"/>
4382 <data id="SearchEngine_Description" value="Example Description"/>
4383 <data id="SearchEngine_SuggestURLTemplate" value="https://www.example.org/suggestions/q={searchTerms}"/>
4384 <data id="SearchEngine_PostData" value="name=value&amp;q={searchTerms}"/>
4385 ```
4386 #### macOS
4387 ```
4388 <dict>
4389   <key>SearchEngines</key>
4390   <dict>
4391     <key>Add</key>
4392     <array>
4393       <dict>
4394         <key>Name</key>
4395         <string>Example1</string>
4396         <key>URLTemplate</key>
4397         <string>https://www.example.org/q={searchTerms}</string>
4398         <key>Method</key>
4399         <string>GET | POST </string>
4400         <key>IconURL</key>
4401         <string>https://www.example.org/favicon.ico</string>
4402         <key>Alias</key>
4403         <string>example</string>
4404         <key>Description</key>
4405         <string>Example Description</string>
4406         <key>SuggestURLTemplate</key>
4407         <string>https://www.example.org/suggestions/q={searchTerms}</string>
4408         <key>PostData</key>
4409         <string>name=value&q={searchTerms}</string>
4410       </dict>
4411     <array>
4412   </dict>
4413 </dict>
4414 ```
4415 #### policies.json
4416 ```
4417 {
4418   "policies": {
4419     "SearchEngines": {
4420       "Add": [
4421         {
4422           "Name": "Example1",
4423           "URLTemplate": "https://www.example.org/q={searchTerms}",
4424           "Method": "GET" | "POST",
4425           "IconURL": "https://www.example.org/favicon.ico",
4426           "Alias": "example",
4427           "Description": "Description",
4428           "PostData": "name=value&q={searchTerms}",
4429           "SuggestURLTemplate": "https://www.example.org/suggestions/q={searchTerms}"
4430         }
4431       ]
4432     }
4433   }
4434 }
4435 ```
4436 ### SearchSuggestEnabled
4437
4438 Enable search suggestions.
4439
4440 **Compatibility:** Firefox 68, Firefox ESR 68\
4441 **CCK2 Equivalent:** N/A\
4442 **Preferences Affected:** `browser.urlbar.suggest.searches`,`browser.search.suggest.enabled`
4443
4444 #### Windows (GPO)
4445 ```
4446 Software\Policies\Mozilla\Firefox\SearchSuggestEnabled = 0x1 | 0x0
4447 ```
4448 #### Windows (Intune)
4449 OMA-URI:
4450 ```
4451 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SearchSuggestEnabled
4452 ```
4453 Value (string):
4454 ```
4455 <enabled/> or <disabled/>
4456 ```
4457 #### macOS
4458 ```
4459 <dict>
4460   <key>SearchSuggestEnabled</key>
4461   <true/> | <false/>
4462 </dict>
4463 ```
4464 #### policies.json
4465 ```
4466 {
4467   "policies": {
4468     "SearchSuggestEnabled": true | false
4469   }
4470 }
4471 ```
4472 ### SecurityDevices
4473
4474 Install PKCS #11 modules.
4475
4476 **Compatibility:** Firefox 64, Firefox ESR 60.4\
4477 **CCK2 Equivalent:** `certs.devices`\
4478 **Preferences Affected:** N/A
4479
4480 #### Windows (GPO)
4481 ```
4482 Software\Policies\Mozilla\Firefox\SecurityDevices\NAME_OF_DEVICE = PATH_TO_LIBRARY_FOR_DEVICE
4483 ```
4484 #### Windows (Intune)
4485 OMA-URI:
4486 ```
4487 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SecurityDevices
4488 ```
4489 Value (string):
4490 ```
4491 <enabled/>
4492 <data id="SecurityDevices" value="NAME_OF_DEVICE&#xF000;PATH_TO_LIBRARY_FOR_DEVICE"/>
4493 ```
4494 #### macOS
4495 ```
4496 <dict>
4497   <key>SecurityDevices</key>
4498   <dict>
4499     <key>NAME_OF_DEVICE</key>
4500     <string>PATH_TO_LIBRARY_FOR_DEVICE</string>
4501   </dict>
4502 </dict>
4503 ```
4504
4505 #### policies.json
4506 ```
4507 {
4508   "policies": {
4509     "SecurityDevices": {
4510       "NAME_OF_DEVICE": "PATH_TO_LIBRARY_FOR_DEVICE"
4511     }
4512   }
4513 }
4514 ```
4515 ### SSLVersionMax
4516
4517 Set and lock the maximum version of TLS.
4518
4519 **Compatibility:** Firefox 66, Firefox ESR 60.6\
4520 **CCK2 Equivalent:** N/A\
4521 **Preferences Affected:** `security.tls.version.max`
4522
4523 #### Windows (GPO)
4524 ```
4525 Software\Policies\Mozilla\Firefox\SSLVersionMax = "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
4526 ```
4527 #### Windows (Intune)
4528 OMA-URI:
4529 ```
4530 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SSLVersionMax
4531 ```
4532 Value (string):
4533 ```
4534 <enabled/>
4535 <data id="SSLVersion" value="tls1 | tls1.2 | tls1.3"/>
4536 ```
4537 #### macOS
4538 ```
4539 <dict>
4540   <key>SSLVersionMax</key>
4541   <string>tls1 | tls1.1 | tls1.2 | tls1.3</string>
4542 </dict>
4543 ```
4544
4545 #### policies.json
4546 ```
4547 {
4548   "policies": {
4549     "SSLVersionMax": "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
4550   }
4551 }
4552 ```
4553 ### SSLVersionMin
4554
4555 Set and lock the minimum version of TLS.
4556
4557 **Compatibility:** Firefox 66, Firefox ESR 60.6\
4558 **CCK2 Equivalent:** N/A\
4559 **Preferences Affected:** `security.tls.version.min`
4560
4561 #### Windows (GPO)
4562 ```
4563 Software\Policies\Mozilla\Firefox\SSLVersionMin = "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
4564 ```
4565 #### Windows (Intune)
4566 OMA-URI:
4567 ```
4568 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SSLVersionMin
4569 ```
4570 Value (string):
4571 ```
4572 <enabled/>
4573 <data id="SSLVersion" value="tls1 | tls1.2 | tls1.3"/>
4574 ```
4575 #### macOS
4576 ```
4577 <dict>
4578   <key>SSLVersionMin</key>
4579   <string>tls1 | tls1.1 | tls1.2 | tls1.3</string>
4580 </dict>
4581 ```
4582
4583 #### policies.json
4584 ```
4585 {
4586   "policies": {
4587     "SSLVersionMin": "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
4588   }
4589 }
4590 ```
4591 ### SupportMenu
4592 Add a menuitem to the help menu for specifying support information.
4593
4594 **Compatibility:** Firefox 68.0.1, Firefox ESR 68.0.1\
4595 **CCK2 Equivalent:** helpMenu\
4596 **Preferences Affected:** N/A
4597
4598 #### Windows (GPO)
4599 ```
4600 Software\Policies\Mozilla\Firefox\SupportMenu\Title = "Support Menu"
4601 Software\Policies\Mozilla\Firefox\SupportMenu\URL = "http://example.com/support"
4602 Software\Policies\Mozilla\Firefox\SupportMenu\AccessKey = "S"
4603 ```
4604 #### Windows (Intune)
4605 OMA-URI:
4606 ```
4607 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SupportMenu
4608 ```
4609 Value (string):
4610 ```
4611 <enabled/>
4612 <data id="SupportMenuTitle" value="Support Menu"/>
4613 <data id="SupportMenuURL" value="http://example.com/support"/>
4614 <data id="SupportMenuAccessKey" value="S">
4615 ```
4616 #### macOS
4617 ```
4618 <dict>
4619   <key>SupportMenu</key>
4620   <dict>
4621     <key>Title</key>
4622     <string>SupportMenu</string>
4623     <key>URL</key>
4624     <string>http://example.com/support</string>
4625     <key>AccessKey</key>
4626     <string>S</string>
4627   </dict>
4628 </dict>
4629 ```
4630 #### policies.json
4631 ```
4632 {
4633   "policies": {
4634     "SupportMenu": {
4635       "Title": "Support Menu",
4636       "URL": "http://example.com/support",
4637       "AccessKey": "S"
4638     }
4639   }
4640 }
4641 ```
4642 ### UserMessaging
4643
4644 Prevent Firefox from messaging the user in certain situations.
4645
4646 `WhatsNew` Remove the "What's New" icon and menuitem. (Firefox 75 only)
4647
4648 `ExtensionRecommendations` Don't recommend extensions while the user is visiting web pages.
4649
4650 `FeatureRecommendations` Don't recommend browser features.
4651
4652 `UrlbarInterventions` Don't offer Firefox specific suggestions in the URL bar. (Firefox 75 only)
4653
4654 **Compatibility:** Firefox 75, Firefox ESR 68.7\
4655 **CCK2 Equivalent:** N/A\
4656 **Preferences Affected:** `browser.messaging-system.whatsNewPanel.enabled`,`browser.newtabpage.activity-stream.asrouter.userprefs.cfr.addons`,`browser.newtabpage.activity-stream.asrouter.userprefs.cfr.features`
4657
4658 #### Windows (GPO)
4659 ```
4660 Software\Policies\Mozilla\Firefox\UserMessaging\WhatsNew = 0x1 | 0x0
4661 Software\Policies\Mozilla\Firefox\UserMessaging\ExtensionRecommendations = 0x1 | 0x0
4662 Software\Policies\Mozilla\Firefox\UserMessaging\FeatureRecommendations = 0x1 | 0x0
4663 Software\Policies\Mozilla\Firefox\UserMessaging\UrlbarInterventions = 0x1 | 0x0
4664 ```
4665 #### Windows (Intune)
4666 OMA-URI:
4667 ```
4668 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/UserMessaging_WhatsNew
4669 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/UserMessaging_ExtensionRecommendations
4670 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/UserMessaging_FeatureRecommendations
4671 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/UserMessaging_UrlbarInterventions
4672 ```
4673 Value (string):
4674 ```
4675 <enabled/> or <disabled/>
4676 ```
4677 #### macOS
4678 ```
4679 <dict>
4680   <key>UserMessaging</key>
4681   <dict>
4682     <key>WhatsNew</key>
4683     <true/> | <false/>
4684     <key>ExtensionRecommendations</key>
4685     <true/> | <false/>
4686     <key>FeatureRecommendations</key>
4687     <true/> | <false/>
4688     <key>UrlbarInterventions</key>
4689     <true/> | <false/>
4690   </dict>
4691 </dict>
4692 ```
4693 #### policies.json
4694 ```
4695 {
4696   "policies": {
4697     "UserMessaging": {
4698       "WhatsNew": true | false,
4699       "ExtensionRecommendations": true | false,
4700       "FeatureRecommendations": true | false,
4701       "UrlbarInterventions": true | false
4702     }
4703   }
4704 }
4705 ```
4706 ### WebsiteFilter
4707 Block websites from being visited. The parameters take an array of Match Patterns, as documented in https://developer.mozilla.org/en-US/Add-ons/WebExtensions/Match_patterns. Only http/https addresses are supported at the moment. The arrays are limited to 1000 entries each.
4708
4709 **Compatibility:** Firefox 60, Firefox ESR 60\
4710 **CCK2 Equivalent:** N/A\
4711 **Preferences Affected:** N/A
4712
4713 #### Windows (GPO)
4714 ```
4715 Software\Policies\Mozilla\Firefox\WebsiteFilter\Block\1 = "<all_urls>"
4716 Software\Policies\Mozilla\Firefox\WebsiteFilter\Exceptions\1 = "http://example.org/*"
4717 ```
4718 #### Windows (Intune)
4719 OMA-URI:
4720 ```
4721 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/B_WebsiteFilter_Block
4722 ```
4723 Value (string):
4724 ```
4725 <enabled/>
4726 <data id="WebsiteFilter" value="1&#xF000;<all_urls>"/>
4727 ```
4728 OMA-URI:
4729 ```
4730 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/B_WebsiteFilter_Exceptions
4731 ```
4732 Value (string):
4733 ```
4734 <enabled/>
4735 <data id="WebsiteFilter" value="1&#xF000;http://example.org/*"/>
4736 ```
4737 #### macOS
4738 ```
4739 <dict>
4740   <key>WebsiteFilter</key>
4741   <dict>
4742     <key>Block</key>
4743     <array>
4744       <string><all_urls></string>
4745     </array>
4746     <key>Exceptions</key>
4747     <array>
4748       <string>http://example.org/*</string>
4749     </array>
4750   </dict>
4751
4752 </dict>
4753 ```
4754 #### policies.json
4755 ```
4756 {
4757   "policies": {
4758     "WebsiteFilter": {
4759       "Block": ["<all_urls>"],
4760       "Exceptions": ["http://example.org/*"]
4761     }
4762   }
4763 }
4764 ```