README.md

   1 Policies can be specified using the [Group Policy templates on Windows](https://github.com/mozilla/policy-templates/tree/master/windows), [Intune on Windows](https://support.mozilla.org/kb/managing-firefox-intune), [configuration profiles on macOS](https://github.com/mozilla/policy-templates/tree/master/mac), or by creating a file called `policies.json`. On Windows, create a directory called `distribution` where the EXE is located and place the file there. On Mac, the file goes into `Firefox.app/Contents/Resources/distribution`.  On Linux, the file goes into `firefox/distribution`, where `firefox` is the installation directory for firefox, which varies by distribution or you can specify system-wide policy by placing the file in `/etc/firefox/policies`.
   2
   3 | Policy Name | Description
   4 | --- | --- |
   5 | **[`3rdparty`](#3rdparty)** | Set policies that WebExtensions can access via chrome.storage.managed.
   6 | **[`AllowedDomainsForApps`](#alloweddomainsforapps)** | Define domains allowed to access Google Workspace.
   7 | **[`AppAutoUpdate`](#appautoupdate)** | Enable or disable automatic application update.
   8 | **[`AppUpdateURL`](#appupdateurl)** | Change the URL for application update.
   9 | **[`Authentication`](#authentication)** | Configure sites that support integrated authentication.
  10 | **[`AutoLaunchProtocolsFromOrigins`](#autolaunchprotocolsfromorigins)** | Define a list of external protocols that can be used from listed origins without prompting the user.
  11 | **[`BackgroundAppUpdate`](#backgroundappupdate)** | Enable or disable the background updater (Windows only).
  12 | **[`BlockAboutAddons`](#blockaboutaddons)** | Block access to the Add-ons Manager (about:addons).
  13 | **[`BlockAboutConfig`](#blockaboutconfig)** | Block access to about:config.
  14 | **[`BlockAboutProfiles`](#blockaboutprofiles)** | Block access to About Profiles (about:profiles).
  15 | **[`BlockAboutSupport`](#blockaboutsupport)** | Block access to Troubleshooting Information (about:support).
  16 | **[`Bookmarks`](#bookmarks)** | Add bookmarks in either the bookmarks toolbar or menu.
  17 | **[`CaptivePortal`](#captiveportal)** | Enable or disable the detection of captive portals.
  18 | **[`Certificates`](#certificates)** |
  19 | **[`Certificates -> ImportEnterpriseRoots`](#certificates--importenterpriseroots)** | Trust certificates that have been added to the operating system certificate store by a user or administrator.
  20 | **[`Certificates -> Install`](#certificates--install)** | Install certificates into the Firefox certificate store.
  21 | **[`Cookies`](#cookies)** | Configure cookie preferences.
  22 | **[`DefaultDownloadDirectory`](#defaultdownloaddirectory)** | Set the default download directory.
  23 | **[`DisableAppUpdate`](#disableappupdate)** | Turn off application updates.
  24 | **[`DisableBuiltinPDFViewer`](#disablebuiltinpdfviewer)** | Disable the built in PDF viewer.
  25 | **[`DisabledCiphers`](#disabledciphers)** | Disable ciphers.
  26 | **[`DisableDefaultBrowserAgent`](#disabledefaultbrowseragent)** | Prevent the default browser agent from taking any actions (Windows only).
  27 | **[`DisableDeveloperTools`](#disabledevelopertools)** | Remove access to all developer tools.
  28 | **[`DisableFeedbackCommands`](#disablefeedbackcommands)** | Disable the menus for reporting sites.
  29 | **[`DisableFirefoxAccounts`](#disablefirefoxaccounts)** | Disable Firefox Accounts integration (Sync).
  30 | **[`DisableFirefoxScreenshots`](#disablefirefoxscreenshots)** | Remove access to Firefox Screenshots.
  31 | **[`DisableFirefoxStudies`](#disablefirefoxstudies)** | Disable Firefox studies (Shield).
  32 | **[`DisableForgetButton`](#disableforgetbutton)** | Disable the "Forget" button.
  33 | **[`DisableFormHistory`](#disableformhistory)** | Turn off saving information on web forms and the search bar.
  34 | **[`DisableMasterPasswordCreation`](#disablemasterpasswordcreation)** | Remove the master password functionality.
  35 | **[`DisablePasswordReveal`](#disablepasswordreveal)** | Do not allow passwords to be revealed in saved logins.
  36 | **[`DisablePocket`](#disablepocket)** | Remove Pocket in the Firefox UI.
  37 | **[`DisablePrivateBrowsing`](#disableprivatebrowsing)** | Remove access to private browsing.
  38 | **[`DisableProfileImport`](#disableprofileimport)** | Disables the "Import data from another browser" option in the bookmarks window.
  39 | **[`DisableProfileRefresh`](#disableprofilerefresh)** | Disable the Refresh Firefox button on about:support and support.mozilla.org
  40 | **[`DisableSafeMode`](#disablesafemode)** | Disable safe mode within the browser.
  41 | **[`DisableSecurityBypass`](#disablesecuritybypass)** | Prevent the user from bypassing security in certain cases.
  42 | **[`DisableSetDesktopBackground`](#disablesetdesktopbackground)** | Remove the "Set As Desktop Background..." menuitem when right clicking on an image.
  43 | **[`DisableSystemAddonUpdate`](#disablesystemaddonupdate)** | Prevent system add-ons from being installed or update.
  44 | **[`DisableTelemetry`](#disabletelemetry)** | DisableTelemetry
  45 | **[`DisplayBookmarksToolbar`](#displaybookmarkstoolbar)** | Set the initial state of the bookmarks toolbar.
  46 | **[`DisplayMenuBar`](#displaymenubar)** | Set the state of the menubar.
  47 | **[`DisplayMenuBar (Deprecated)`](#displaymenubar-deprecated)** | Set the initial state of the menubar.
  48 | **[`DNSOverHTTPS`](#dnsoverhttps)** | Configure DNS over HTTPS.
  49 | **[`DontCheckDefaultBrowser`](#dontcheckdefaultbrowser)** | Don't check if Firefox is the default browser at startup.
  50 | **[`DownloadDirectory`](#downloaddirectory)** | Set and lock the download directory.
  51 | **[`EnableTrackingProtection`](#enabletrackingprotection)** | Configure tracking protection.
  52 | **[`EncryptedMediaExtensions`](#encryptedmediaextensions)** | Enable or disable Encrypted Media Extensions and optionally lock it.
  53 | **[`EnterprisePoliciesEnabled`](#enterprisepoliciesenabled)** | Enable policy support on macOS.
  54 | **[`Extensions`](#extensions)** | Control the installation, uninstallation and locking of extensions.
  55 | **[`ExtensionSettings`](#extensionsettings)** | Manage all aspects of extensions.
  56 | **[`ExtensionUpdate`](#extensionupdate)** | Control extension updates.
  57 | **[`FirefoxHome`](#firefoxhome)** | Customize the Firefox Home page.
  58 | **[`FlashPlugin`](#flashplugin)** | Configure the default Flash plugin policy as well as origins for which Flash is allowed.
  59 | **[`Handlers`](#handlers)** | Configure default application handlers.
  60 | **[`HardwareAcceleration`](#hardwareacceleration)** | Control hardware acceleration.
  61 | **[`Homepage`](#homepage)** | Configure the default homepage and how Firefox starts.
  62 | **[`InstallAddonsPermission`](#installaddonspermission)** | Configure the default extension install policy as well as origins for extension installs are allowed.
  63 | **[`LegacyProfiles`](#legacyprofiles)** | Disable the feature enforcing a separate profile for each installation.
  64 | **[`LegacySameSiteCookieBehaviorEnabled`](#legacysamesitecookiebehaviorenabled)** | Enable default legacy SameSite cookie behavior setting.
  65 | **[`LegacySameSiteCookieBehaviorEnabledForDomainList`](#legacysamesitecookiebehaviorenabledfordomainlist)** | Revert to legacy SameSite behavior for cookies on specified sites.
  66 | **[`LocalFileLinks`](#localfilelinks)** | Enable linking to local files by origin.
  67 | **[`ManagedBookmarks`](#managedbookmarks)** | Configures a list of bookmarks managed by an administrator that cannot be changed by the user.
  68 | **[`ManualAppUpdateOnly`](#manualappupdateonly)** | Allow manual updates only and do not notify the user about updates..
  69 | **[`NetworkPrediction`](#networkprediction)** | Enable or disable network prediction (DNS prefetching).
  70 | **[`NewTabPage`](#newtabpage)** | Enable or disable the New Tab page.
  71 | **[`NoDefaultBookmarks`](#nodefaultbookmarks)** | Disable the creation of default bookmarks.
  72 | **[`OfferToSaveLogins`](#offertosavelogins)** | Control whether or not Firefox offers to save passwords.
  73 | **[`OfferToSaveLoginsDefault`](#offertosaveloginsdefault)** | Set the default value for whether or not Firefox offers to save passwords.
  74 | **[`OverrideFirstRunPage`](#overridefirstrunpage)** | Override the first run page.
  75 | **[`OverridePostUpdatePage`](#overridepostupdatepage)** | Override the upgrade page.
  76 | **[`PasswordManagerEnabled`](#passwordmanagerenabled)** | Remove (some) access to the password manager.
  77 | **[`PDFjs`](#pdfjs)** | Disable or configure PDF.js, the built-in PDF viewer.
  78 | **[`Permissions`](#permissions)** | Set permissions associated with camera, microphone, location, and notifications.
  79 | **[`PictureInPicture`](#pictureinpicture)** | Enable or disable Picture-in-Picture.
  80 | **[`PopupBlocking`](#popupblocking)** | Configure the default pop-up window policy as well as origins for which pop-up windows are allowed.
  81 | **[`Preferences`](#preferences)** | Set and lock preferences.
  82 | **[`Preferences (Deprecated)`](#preferences-deprecated)** | Set and lock some preferences.
  83 | **[`PrimaryPassword`](#primarypassword)** | Require or prevent using a primary (formerly master) password.
  84 | **[`PromptForDownloadLocation`](#promptfordownloadlocation)** | Ask where to save each file before downloading.
  85 | **[`Proxy`](#proxy)** | Configure proxy settings.
  86 | **[`RequestedLocales`](#requestedlocales)** | Set the the list of requested locales for the application in order of preference.
  87 | **[`SanitizeOnShutdown` (All)](#sanitizeonshutdown-all)** | Clear all data on shutdown.
  88 | **[`SanitizeOnShutdown` (Selective)](#sanitizeonshutdown-selective)** | Clear data on shutdown.
  89 | **[`SearchBar`](#searchbar)** | Set whether or not search bar is displayed.
  90 | **[`SearchEngines`](#searchengines-this-policy-is-only-available-on-the-esr)** |
  91 | **[`SearchEngines -> Add`](#searchengines--add)** | Add new search engines.
  92 | **[`SearchEngines -> Default`](#searchengines--default)** | Set the default search engine.
  93 | **[`SearchEngines -> PreventInstalls`](#searchengines--preventinstalls)** | Prevent installing search engines from webpages.
  94 | **[`SearchEngines -> Remove`](#searchengines--remove)** | Hide built-in search engines.
  95 | **[`SearchSuggestEnabled`](#searchsuggestenabled)** | Enable search suggestions.
  96 | **[`SecurityDevices`](#securitydevices)** | Install PKCS #11 modules.
  97 | **[`ShowHomeButton`](#showhomebutton)** | Show the home button on the toolbar.
  98 | **[`SSLVersionMax`](#sslversionmax)** | Set and lock the maximum version of TLS.
  99 | **[`SSLVersionMin`](#sslversionmin)** | Set and lock the minimum version of TLS.
 100 | **[`SupportMenu`](#supportmenu)** | Add a menuitem to the help menu for specifying support information.
 101 | **[`UserMessaging`](#usermessaging)** | Don't show certain messages to the user.
 102 | **[`WebsiteFilter`](#websitefilter)** | Block websites from being visited.
 103 | **[`WindowsSSO`](#windowssso)** | Allow Windows single sign-on for Microsoft, work, and school accounts.
 104
 105 ### 3rdparty
 106
 107 Allow WebExtensions to configure policy. For more information, see [Adding policy support to your extension](https://extensionworkshop.com/documentation/enterprise/adding-policy-support-to-your-extension/).
 108
 109 ### AllowedDomainsForApps
 110
 111 Define domains allowed to access Google Workspace.
 112
 113 This policy is based on the [Chrome policy](https://chromeenterprise.google/policies/#AllowedDomainsForApps) of the same name.
 114
 115 If this policy is enabled, users can only access Google Workspace using accounts from the specified domains. If you want to allow Gmail, you can add ```consumer_accounts``` to the list.
 116
 117 **Compatibility:** Firefox 89, Firefox ESR 78.11\
 118 **CCK2 Equivalent:** N/A\
 119 **Preferences Affected:** N/A
 120
 121 #### Windows (GPO)
 122 ```
 123 Software\Policies\Mozilla\Firefox\AllowedDomainsForApps = "managedfirefox.com,example.com"
 124 ```
 125 #### Windows (Intune)
 126 OMA-URI:
 127 ```
 128 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AllowedDomainsForApps
 129 ```
 130 Value (string):
 131 ```
 132 <enabled/>
 133 <data id="AllowedDomainsForApps" value="managedfirefox.com,example.com"/>
 134 ```
 135 #### macOS
 136 ```
 137 <dict>
 138   <key>AllowedDomainsForApps</key>
 139   <string>managedfirefox.com,example.com</string>
 140 </dict>
 141 ```
 142 #### policies.json
 143 ```
 144 {
 145   "policies": {
 146     "AllowedDomainsForApps": "managedfirefox.com,example.com"
 147   }
 148 }
 149 ```
 150 ### AppAutoUpdate
 151
 152 Enable or disable **automatic** application update.
 153
 154 If set to true, application updates are installed without user approval within Firefox. The operating system might still require approval.
 155
 156 If set to false, application updates are downloaded but the user can choose when to install the update.
 157
 158 If you have disabled updates via `DisableAppUpdate`, this policy has no effect.
 159
 160 **Compatibility:** Firefox 75, Firefox ESR 68.7\
 161 **CCK2 Equivalent:** N/A\
 162 **Preferences Affected:** `app.update.auto`
 163
 164 #### Windows (GPO)
 165 ```
 166 Software\Policies\Mozilla\Firefox\AppAutoUpdate = 0x1 | 0x0
 167 ```
 168 #### Windows (Intune)
 169 OMA-URI:
 170 ```
 171 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AppAutoUpdate
 172 ```
 173 Value (string):
 174 ```
 175 <enabled/> or <disabled/>
 176 ```
 177 #### macOS
 178 ```
 179 <dict>
 180   <key>AppAutoUpdate</key>
 181   <true/> | <false/>
 182 </dict>
 183 ```
 184 #### policies.json
 185 ```
 186 {
 187   "policies": {
 188     "AppAutoUpdate": true | false
 189   }
 190 }
 191 ```
 192 ### AppUpdateURL
 193
 194 Change the URL for application update if you are providing Firefox updates from a custom update server.
 195
 196 **Compatibility:** Firefox 62, Firefox ESR 60.2\
 197 **CCK2 Equivalent:** N/A\
 198 **Preferences Affected:** `app.update.url`
 199
 200 #### Windows (GPO)
 201 ```
 202 Software\Policies\Mozilla\Firefox\AppUpdateURL = "https://yoursite.com"
 203 ```
 204 #### Windows (Intune)
 205 OMA-URI:
 206 ```
 207 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AppUpdateURL
 208 ```
 209 Value (string):
 210 ```
 211 <enabled/>
 212 <data id="AppUpdateURL" value="https://yoursite.com"/>
 213 ```
 214 #### macOS
 215 ```
 216 <dict>
 217   <key>AppUpdateURL</key>
 218   <string>https://yoursite.com</string>
 219 </dict>
 220 ```
 221 #### policies.json
 222 ```
 223 {
 224   "policies": {
 225     "AppUpdateURL": "https://yoursite.com"
 226   }
 227 }
 228 ```
 229 ### Authentication
 230
 231 Configure sites that support integrated authentication.
 232
 233 See [Integrated authentication](https://htmlpreview.github.io/?https://github.com/mdn/archived-content/blob/main/files/en-us/mozilla/integrated_authentication/raw.html) for more information.
 234
 235 `PrivateBrowsing` enables integrated authentication in private browsing.
 236
 237 **Compatibility:** Firefox 60, Firefox ESR 60 (AllowNonFQDN added in 62/60.2, AllowProxies added in 70/68.2, Locked added in 71/68.3, PrivateBrowsing added in 77/68.9)\
 238 **CCK2 Equivalent:** N/A\
 239 **Preferences Affected:** `network.negotiate-auth.trusted-uris`,`network.negotiate-auth.delegation-uris`,`network.automatic-ntlm-auth.trusted-uris`,`network.automatic-ntlm-auth.allow-non-fqdn`,`network.negotiate-auth.allow-non-fqdn`,`network.automatic-ntlm-auth.allow-proxies`,`network.negotiate-auth.allow-proxies`,`network.auth.private-browsing-sso`
 240
 241 #### Windows (GPO)
 242 ```
 243 Software\Policies\Mozilla\Firefox\Authentication\SPNEGO\1 = "mydomain.com"
 244 Software\Policies\Mozilla\Firefox\Authentication\SPNEGO\2 = "https://myotherdomain.com"
 245 Software\Policies\Mozilla\Firefox\Authentication\Delegated\1 = "mydomain.com"
 246 Software\Policies\Mozilla\Firefox\Authentication\Delegated\2 = "https://myotherdomain.com"
 247 Software\Policies\Mozilla\Firefox\Authentication\NTLM\1 = "mydomain.com"
 248 Software\Policies\Mozilla\Firefox\Authentication\NTLM\2 = "https://myotherdomain.com"
 249 Software\Policies\Mozilla\Firefox\Authentication\AllowNonFQDN\SPNEGO = 0x1 | 0x0
 250 Software\Policies\Mozilla\Firefox\Authentication\AllowNonFQDN\NTLM = 0x1 | 0x0
 251 Software\Policies\Mozilla\Firefox\Authentication\AllowProxies\SPNEGO = 0x1 | 0x0
 252 Software\Policies\Mozilla\Firefox\Authentication\AllowProxies\NTLM = 0x1 | 0x0
 253 Software\Policies\Mozilla\Firefox\Authentication\Locked = 0x1 | 0x0
 254 Software\Policies\Mozilla\Firefox\Authentication\PrivateBrowsing = 0x1 | 0x0
 255 ```
 256 #### Windows (Intune)
 257 OMA-URI:
 258 ```
 259 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_SPNEGO
 260 ```
 261 Value (string):
 262 ```
 263 <enabled/>
 264 <data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
 265 ```
 266 OMA-URI:
 267 ```
 268 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_Delegated
 269 ```
 270 Value (string):
 271 ```
 272 <enabled/>
 273 <data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
 274 ```
 275 OMA-URI:
 276 ```
 277 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_NTLM
 278 ```
 279 Value (string):
 280 ```
 281 <enabled/>
 282 <data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
 283 ```
 284 OMA-URI:
 285 ```
 286 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_AllowNonFQDN
 287 ```
 288 Value (string):
 289 ```
 290 <enabled/>
 291 <data id="Authentication_AllowNonFQDN_NTLM" value="true | false"/>
 292 <data id="Authentication_AllowNonFQDN_SPNEGO" value="true | false"/>
 293 ```
 294 OMA-URI:
 295 ```
 296 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_Locked
 297 ```
 298 Value (string):
 299 ```
 300 <enabled/> or <disabled/>
 301 ```
 302 OMA-URI:
 303 ```
 304 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_PrivateBrowsing
 305 ```
 306 Value (string):
 307 ```
 308 <enabled/> or <disabled/>
 309 ```
 310 #### macOS
 311 ```
 312 <dict>
 313   <key>Authentication</key>
 314   <dict>
 315     <key>SPNEGO</key>
 316     <array>
 317       <string>mydomain.com</string>
 318       <string>https://myotherdomain.com</string>
 319     </array>
 320     <key>Delegated</key>
 321     <array>
 322       <string>mydomain.com</string>
 323       <string>https://myotherdomain.com</string>
 324     </array>
 325     <key>NTLM</key>
 326     <array>
 327       <string>mydomain.com</string>
 328       <string>https://myotherdomain.com</string>
 329     </array>
 330     <key>AllowNonFQDN</key>
 331       <dict>
 332       <key>SPNEGO</key>
 333       <true/> | <false/>
 334       <key>NTLM</key>
 335       <true/> | <false/>
 336     </dict>
 337     <key>AllowProxies</key>
 338       <dict>
 339       <key>SPNEGO</key>
 340       <true/> | <false/>
 341       <key>NTLM</key>
 342       <true/> | <false/>
 343     </dict>
 344     <key>Locked</key>
 345     <true/> | <false/>
 346     <key>PrivateBrowsing</key>
 347     <true/> | <false/>
 348   </dict>
 349 </dict>
 350 ```
 351 #### policies.json
 352 ```
 353 {
 354   "policies": {
 355     "Authentication": {
 356       "SPNEGO": ["mydomain.com", "https://myotherdomain.com"],
 357       "Delegated": ["mydomain.com", "https://myotherdomain.com"],
 358       "NTLM": ["mydomain.com", "https://myotherdomain.com"],
 359       "AllowNonFQDN": {
 360         "SPNEGO": true | false,
 361         "NTLM": true | false
 362       },
 363       "AllowProxies": {
 364         "SPNEGO": true | false,
 365         "NTLM": true | false
 366       },
 367       "Locked": true | false,
 368       "PrivateBrowsing": true | false
 369     }
 370   }
 371 }
 372 ```
 373 ### AutoLaunchProtocolsFromOrigins
 374 Define a list of external protocols that can be used from listed origins without prompting the user. The origin is the scheme plus the hostname.
 375
 376 The syntax of this policy is exactly the same as the [Chrome AutoLaunchProtocolsFromOrigins policy](https://cloud.google.com/docs/chrome-enterprise/policies/?policy=AutoLaunchProtocolsFromOrigins) except that you can only use valid origins (not just hostnames). This also means that you cannot specify an asterisk for all origins.
 377
 378 The schema is:
 379 ```
 380 {
 381  "items": {
 382   "properties": {
 383    "allowed_origins": {
 384     "items": {
 385      "type": "string"
 386     },
 387     "type": "array"
 388    },
 389    "protocol": {
 390     "type": "string"
 391    }
 392   },
 393   "required": [
 394    "protocol",
 395    "allowed_origins"
 396   ],
 397   "type": "object"
 398  },
 399  "type": "array"
 400 }
 401 ```
 402 **Compatibility:** Firefox 90, Firefox ESR 78.12\
 403 **CCK2 Equivalent:** N/A\
 404 **Preferences Affected:** N/A
 405
 406 #### Windows (GPO)
 407 Software\Policies\Mozilla\Firefox\AutoLaunchProtocolsFromOrigins (REG_MULTI_SZ) =
 408 ```
 409 [
 410   {
 411     "protocol": "zoommtg",
 412     "allowed_origins": [
 413       "https://somesite.zoom.us"
 414     ]
 415   }
 416 ]
 417 ```
 418 #### Windows (Intune)
 419 OMA-URI:
 420 ```
 421 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AutoLaunchProtocolsFromOrigins
 422 ```
 423 Value (string):
 424 ```
 425 <enabled/>
 426 <data id="JSON" value='
 427 [
 428   {
 429     "protocol": "zoommtg",
 430     "allowed_origins": [
 431       "https://somesite.zoom.us"
 432     ]
 433   }
 434 ]'/>
 435 ```
 436 #### macOS
 437 ```
 438 <dict>
 439   <key>AutoLaunchProtocolsFromOrigins</key>
 440   <array>
 441     <dict>
 442       <key>protocol</key>
 443       <string>zoommtg</string>
 444       <key>allowed_origins</key>
 445       <array>
 446         <string>https://somesite.zoom.us</string>
 447       </array>
 448     </dict>
 449   </array>
 450 </dict>
 451 ```
 452 #### policies.json
 453 ```
 454 {
 455   "policies": {
 456     "AutoLaunchProtocolsFromOrigins": [{
 457       "protocol": "zoommtg",
 458       "allowed_origins": [
 459         "https://somesite.zoom.us"
 460       ]
 461     }]
 462   }
 463 }
 464 ```
 465 ### BackgroundAppUpdate
 466
 467 Enable or disable **automatic** application update **in the background**, when the application is not running.
 468
 469 If set to true, application updates may be installed (without user approval) in the background, even when the application is not running. The operating system might still require approval.
 470
 471 If set to false, the application will not try to install updates when the application is not running.
 472
 473 If you have disabled updates via `DisableAppUpdate` or disabled automatic updates via `AppAutoUpdate`, this policy has no effect.
 474
 475 **Compatibility:** Firefox 90 (Windows only)\
 476 **CCK2 Equivalent:** N/A\
 477 **Preferences Affected:** `app.update.background.enabled`
 478
 479 #### Windows (GPO)
 480 ```
 481 Software\Policies\Mozilla\Firefox\BackgroundAppUpdate = 0x1 | 0x0
 482 ```
 483 #### Windows (Intune)
 484 OMA-URI:
 485 ```
 486 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BackgroundAppUpdate
 487 ```
 488 Value (string):
 489 ```
 490 <enabled/> or <disabled/>
 491 ```
 492 #### macOS
 493 ```
 494 <dict>
 495   <key>BackgroundAppUpdate</key>
 496   <true/> | <false/>
 497 </dict>
 498 ```
 499 #### policies.json
 500 ```
 501 {
 502   "policies": {
 503     "BackgroundAppUpdate": true | false
 504   }
 505 }
 506 ```
 507 ### BlockAboutAddons
 508
 509 Block access to the Add-ons Manager (about:addons).
 510
 511 **Compatibility:** Firefox 60, Firefox ESR 60\
 512 **CCK2 Equivalent:** `disableAddonsManager`\
 513 **Preferences Affected:** N/A
 514
 515 #### Windows (GPO)
 516 ```
 517 Software\Policies\Mozilla\Firefox\BlockAboutAddons = 0x1 | 0x0
 518 ```
 519 #### Windows (Intune)
 520 OMA-URI:
 521 ```
 522 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutAddons
 523 ```
 524 Value (string):
 525 ```
 526 <enabled/> or <disabled/>
 527 ```
 528 #### macOS
 529 ```
 530 <dict>
 531   <key>BlockAboutAddons</key>
 532   <true/> | <false/>
 533 </dict>
 534 ```
 535 #### policies.json
 536 ```
 537 {
 538   "policies": {
 539     "BlockAboutAddons": true | false
 540   }
 541 }
 542 ```
 543 ### BlockAboutConfig
 544
 545 Block access to about:config.
 546
 547 **Compatibility:** Firefox 60, Firefox ESR 60\
 548 **CCK2 Equivalent:** `disableAboutConfig`\
 549 **Preferences Affected:** N/A
 550
 551 #### Windows (GPO)
 552 ```
 553 Software\Policies\Mozilla\Firefox\BlockAboutConfig = 0x1 | 0x0
 554 ```
 555 #### Windows (Intune)
 556 OMA-URI:
 557 ```
 558 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutConfig
 559 ```
 560 Value (string):
 561 ```
 562 <enabled/> or <disabled/>
 563 ```
 564 #### macOS
 565 ```
 566 <dict>
 567   <key>BlockAboutConfig</key>
 568   <true/> | <false/>
 569 </dict>
 570 ```
 571 #### policies.json
 572 ```
 573 {
 574   "policies": {
 575     "BlockAboutConfig": true | false
 576   }
 577 }
 578 ```
 579 ### BlockAboutProfiles
 580
 581 Block access to About Profiles (about:profiles).
 582
 583 **Compatibility:** Firefox 60, Firefox ESR 60\
 584 **CCK2 Equivalent:** `disableAboutProfiles`\
 585 **Preferences Affected:** N/A
 586
 587 #### Windows (GPO)
 588 ```
 589 Software\Policies\Mozilla\Firefox\BlockAboutProfiles = 0x1 | 0x0
 590 ```
 591 #### Windows (Intune)
 592 OMA-URI:
 593 ```
 594 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutProfiles
 595 ```
 596 Value (string):
 597 ```
 598 <enabled/> or <disabled/>
 599 ```
 600 #### macOS
 601 ```
 602 <dict>
 603   <key>BlockAboutProfiles</key>
 604   <true/> | <false/>
 605 </dict>
 606 ```
 607 #### policies.json
 608 ```
 609 {
 610   "policies": {
 611     "BlockAboutProfiles": true | false
 612   }
 613 }
 614 ```
 615 ### BlockAboutSupport
 616
 617 Block access to Troubleshooting Information (about:support).
 618
 619 **Compatibility:** Firefox 60, Firefox ESR 60\
 620 **CCK2 Equivalent:** `disableAboutSupport`\
 621 **Preferences Affected:** N/A
 622
 623 #### Windows (GPO)
 624 ```
 625 Software\Policies\Mozilla\Firefox\BlockAboutSupport = 0x1 | 0x0
 626 ```
 627 #### Windows (Intune)
 628 OMA-URI:
 629 ```
 630 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutSupport
 631 ```
 632 Value (string):
 633 ```
 634 <enabled/> or <disabled/>
 635 ```
 636 #### macOS
 637 ```
 638 <dict>
 639   <key>BlockAboutSupport</key>
 640   <true/> | <false/>
 641 </dict>
 642 ```
 643 #### policies.json
 644 ```
 645 {
 646   "policies": {
 647     "BlockAboutSupport": true | false
 648   }
 649 }
 650 ```
 651 ### Bookmarks
 652
 653 Note: [`ManagedBookmarks`](#managedbookmarks) is the new recommended way to add bookmarks. This policy will continue to be supported.
 654
 655 Add bookmarks in either the bookmarks toolbar or menu. Only `Title` and `URL` are required. If `Placement` is not specified, the bookmark will be placed on the toolbar. If `Folder` is specified, it is automatically created and bookmarks with the same folder name are grouped together.
 656
 657 If you want to clear all bookmarks set with this policy, you can set the value to an empty array (```[]```). This can be on Windows via the new Bookmarks (JSON) policy available with GPO and Intune.
 658
 659 **Compatibility:** Firefox 60, Firefox ESR 60\
 660 **CCK2 Equivalent:** `bookmarks.toolbar`,`bookmarks.menu`\
 661 **Preferences Affected:** N/A
 662
 663 #### Windows (GPO)
 664 ```
 665 Software\Policies\Mozilla\Firefox\Bookmarks\1\Title = "Example"
 666 Software\Policies\Mozilla\Firefox\Bookmarks\1\URL = "https://example.com"
 667 Software\Policies\Mozilla\Firefox\Bookmarks\1\Favicon = "https://example.com/favicon.ico"
 668 Software\Policies\Mozilla\Firefox\Bookmarks\1\Placement = "toolbar" | "menu"
 669 Software\Policies\Mozilla\Firefox\Bookmarks\1\Folder = "FolderName"
 670
 671 Software\Policies\Mozilla\Firefox\Bookmarks (REG_MULTI_SZ) =
 672 ```
 673 []
 674 ```
 675
 676 ```
 677 #### Windows (Intune)
 678 OMA-URI:
 679 ```
 680 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Bookmarks/Bookmark01
 681 ```
 682 Value (string):
 683 ```
 684 <enabled/>
 685 <data id="BookmarkTitle" value="Example"/>
 686 <data id="BookmarkURL" value="https://example.com"/>
 687 <data id="BookmarkFavicon" value="https://example.com/favicon.ico"/>
 688 <data id="BookmarkPlacement" value="toolbar | menu"/>
 689 <data id="BookmarkFolder" value="FolderName"/>
 690 ```
 691 OMA-URI:
 692 ```
 693 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Bookmarks
 694 ```
 695 Value (string):
 696 ```
 697 <enabled/>
 698 <data id="JSON" value='[]'/>
 699 ```
 700 #### macOS
 701 ```
 702 <dict>
 703   <key>Bookmarks</key>
 704   <array>
 705     <dict>
 706       <key>Title</key>
 707       <string>Example</string>
 708       <key>URL</key>
 709       <string>https://example.com</string>
 710       <key>Favicon</key>
 711       <string>https://example.com/favicon.ico</string>
 712       <key>Placement</key>
 713       <string>toolbar | menu</string>
 714       <key>Folder</key>
 715       <string>FolderName</string>
 716     </dict>
 717   </array>
 718 </dict>
 719 ```
 720 #### policies.json
 721 ```
 722 {
 723   "policies": {
 724     "Bookmarks": [
 725       {
 726         "Title": "Example",
 727         "URL": "https://example.com",
 728         "Favicon": "https://example.com/favicon.ico",
 729         "Placement": "toolbar" | "menu",
 730         "Folder": "FolderName"
 731       }
 732     ]
 733   }
 734 }
 735 ```
 736 ### CaptivePortal
 737 Enable or disable the detection of captive portals.
 738
 739 **Compatibility:** Firefox 67, Firefox ESR 60.7\
 740 **CCK2 Equivalent:** N/A\
 741 **Preferences Affected:** `network.captive-portal-service.enabled`
 742
 743 #### Windows (GPO)
 744 ```
 745 Software\Policies\Mozilla\Firefox\CaptivePortal = 0x1 | 0x0
 746 ```
 747 #### Windows (Intune)
 748 OMA-URI:
 749 ```
 750 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/CaptivePortal
 751 ```
 752 Value (string):
 753 ```
 754 <enabled/> or <disabled/>
 755 ```
 756 #### macOS
 757 ```
 758 <dict>
 759   <key>CaptivePortal</key>
 760   <true/> | <false/>
 761 </dict>
 762 ```
 763 #### policies.json
 764 ```
 765 {
 766   "policies": {
 767     "CaptivePortal": true | false
 768   }
 769 }
 770 ```
 771 ### Certificates
 772
 773 ### Certificates | ImportEnterpriseRoots
 774
 775 Trust certificates that have been added to the operating system certificate store by a user or administrator.
 776
 777 Note: This policy only works on Windows and macOS. For Linux discussion, see [bug 1600509](https://bugzilla.mozilla.org/show_bug.cgi?id=1600509).
 778
 779 See https://support.mozilla.org/kb/setting-certificate-authorities-firefox for more detail.
 780
 781 **Compatibility:** Firefox 60, Firefox ESR 60 (macOS support in Firefox 63, Firefox ESR 68)\
 782 **CCK2 Equivalent:** N/A\
 783 **Preferences Affected:** `security.enterprise_roots.enabled`
 784
 785 #### Windows (GPO)
 786 ```
 787 Software\Policies\Mozilla\Firefox\Certificates\ImportEnterpriseRoots = 0x1 | 0x0
 788 ```
 789 #### Windows (Intune)
 790 OMA-URI:
 791 ```
 792 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Certificates/Certificates_ImportEnterpriseRoots
 793 ```
 794 Value (string):
 795 ```
 796 <enabled/> or <disabled/>
 797 ```
 798 #### macOS
 799 ```
 800 <dict>
 801   <key>Certificates</key>
 802   <dict>
 803     <key>ImportEnterpriseRoots</key>
 804     <true/> | <false/>
 805   </dict>
 806 </dict>
 807 ```
 808 #### policies.json
 809 ```
 810 {
 811   "policies": {
 812     "Certificates": {
 813       "ImportEnterpriseRoots": true | false
 814     }
 815   }
 816 }
 817 ```
 818 ### Certificates | Install
 819
 820 Install certificates into the Firefox certificate store. If only a filename is specified, Firefox searches for the file in the following locations:
 821
 822 - Windows
 823   - %USERPROFILE%\AppData\Local\Mozilla\Certificates
 824   - %USERPROFILE%\AppData\Roaming\Mozilla\Certificates
 825 - macOS
 826   - /Library/Application Support/Mozilla/Certificates
 827   - ~/Library/Application Support/Mozilla/Certificates
 828 - Linux
 829   - /usr/lib/mozilla/certificates
 830   - /usr/lib64/mozilla/certificates
 831   - ~/.mozilla/certificates
 832
 833 Starting with Firefox 65, Firefox 60.5 ESR, a fully qualified path can be used, including UNC paths. You should use the native path style for your operating system. We do not support using %USERPROFILE% or other environment variables on Windows.
 834
 835 If you are specifying the path in the policies.json file on Windows, you need to escape your backslashes (`\\`) which means that for UNC paths, you need to escape both (`\\\\`). If you use group policy, you only need one backslash.
 836
 837 Certificates are installed using the trust string `CT,CT,`.
 838
 839 Binary (DER) and ASCII (PEM) certificates are both supported.
 840
 841 **Compatibility:** Firefox 64, Firefox ESR 64\
 842 **CCK2 Equivalent:** `certs.ca`\
 843 **Preferences Affected:** N/A
 844
 845 #### Windows (GPO)
 846 ```
 847 Software\Policies\Mozilla\Firefox\Certificates\Install\1 = "cert1.der"
 848 Software\Policies\Mozilla\Firefox\Certificates\Install\2 = "C:\Users\username\cert2.pem"
 849 ```
 850 #### Windows (Intune)
 851 OMA-URI:
 852 ```
 853 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Certificates/Certificates_Install
 854 ```
 855 Value (string):
 856 ```
 857 <enabled/>
 858 <data id="Certificates_Install" value="1&#xF000;cert1.der&#xF000;2&#xF000;C:\Users\username\cert2.pem"/>
 859 ```
 860 #### macOS
 861 ```
 862 <dict>
 863   <key>Certificates</key>
 864   <dict>
 865     <key>Install</key>
 866     <array>
 867       <string>cert1.der</string>
 868       <string>/Users/username/cert2.pem</string>
 869     </array>
 870   </dict>
 871 </dict>
 872 ```
 873 #### policies.json
 874 ```
 875 {
 876   "policies": {
 877     "Certificates": {
 878       "Install": ["cert1.der", "/home/username/cert2.pem"]
 879     }
 880   }
 881 }
 882 ```
 883 ### Cookies
 884 Configure cookie preferences.
 885
 886 `Allow` is a list of origins (not domains) where cookies are always allowed. You must include http or https.
 887
 888 `AllowSession` is a list of origins (not domains) where cookies are only allowed for the current session. You must include http or https.
 889
 890 `Block` is a list of origins (not domains) where cookies are always blocked. You must include http or https.
 891
 892 `Behavior` sets the default behavior for cookies based on the values below.
 893
 894 `BehaviorPrivateBrowsing` sets the default behavior for cookies in private browsing based on the values below.
 895
 896 | Value | Description
 897 | --- | ---
 898 | accept | Accept all cookies
 899 | reject-foreign | Reject third party cookies
 900 | reject | Reject all cookies
 901 | limit-foreign | Reject third party cookies for sites you haven't visited
 902 | reject-tracker | Reject cookies for known trackers (default)
 903 | reject-tracker-and-partition-foreign | Reject cookies for known trackers and partition third-party cookies (Total Cookie Protection) (default for private browsing)
 904
 905 `Default` (Deprecated) determines whether cookies are accepted at all.
 906
 907 `AcceptThirdParty` (Deprecated) determines how third-party cookies are handled.
 908
 909 `ExpireAtSessionEnd` determines when cookies expire.
 910
 911 `RejectTracker` (Deprecated) only rejects cookies for trackers.
 912
 913 `Locked` prevents the user from changing cookie preferences.
 914
 915 **Compatibility:** Firefox 60, Firefox ESR 60 (RejectTracker added in Firefox 63, AllowSession added in Firefox 79/78.1, Behavior added in Firefox 95/91.4)\
 916 **CCK2 Equivalent:** N/A\
 917 **Preferences Affected:** `network.cookie.cookieBehavior`, `network.cookie.cookieBehavior.pbmode`, `network.cookie.lifetimePolicy`
 918
 919 #### Windows (GPO)
 920 ```
 921 Software\Policies\Mozilla\Firefox\Cookies\Allow\1 = "https://example.com"
 922 Software\Policies\Mozilla\Firefox\Cookies\AllowSession\1 = "https://example.edu"
 923 Software\Policies\Mozilla\Firefox\Cookies\Block\1 = "https://example.org"
 924 Software\Policies\Mozilla\Firefox\Cookies\Default = 0x1 | 0x0
 925 Software\Policies\Mozilla\Firefox\Cookies\AcceptThirdParty = "always" | "never" | "from-visited"
 926 Software\Policies\Mozilla\Firefox\Cookies\ExpireAtSessionEnd = 0x1 | 0x0
 927 Software\Policies\Mozilla\Firefox\Cookies\RejectTracker = 0x1 | 0x0
 928 Software\Policies\Mozilla\Firefox\Cookies\Behavior = "accept" | "reject-foreign" | "reject" | "limit-foreign" | "reject-tracker" | "reject-tracker-and-partition-foreign"
 929 Software\Policies\Mozilla\Firefox\Cookies\BehaviorPrivateBrowsing = "accept" | "reject-foreign" | "reject" | "limit-foreign" | "reject-tracker" | "reject-tracker-and-partition-foreign"
 930 Software\Policies\Mozilla\Firefox\Cookies\Locked = 0x1 | 0x0
 931 ```
 932 #### Windows (Intune)
 933 OMA-URI:
 934 ```
 935 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Allow
 936 ```
 937 Value (string):
 938 ```
 939 <enabled/>
 940 <data id="Cookies_Allow" value="1&#xF000;https://example.com"/>
 941 ```
 942 OMA-URI:
 943 ```
 944 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_AllowSession
 945 ```
 946 Value (string):
 947 ```
 948 <enabled/>
 949 <data id="Cookies_Allow" value="1&#xF000;https://example.edu"/>
 950 ```
 951 OMA-URI:
 952 ```
 953 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Block
 954 ```
 955 Value (string):
 956 ```
 957 <enabled/>
 958 <data id="Cookies_Block" value="1&#xF000;https://example.org"/>
 959 ```
 960 OMA-URI:
 961 ```
 962 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Default
 963 ```
 964 Value (string):
 965 ```
 966 <enabled/> or <disabled/>
 967 ```
 968 OMA-URI:
 969 ```
 970 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_AcceptThirdParty
 971 ```
 972 Value (string):
 973 ```
 974 <enabled/>
 975 <data id="Cookies_AcceptThirdParty" value="always | never | from-visited"/>
 976 ```
 977 OMA-URI:
 978 ```
 979 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_ExpireAtSessionEnd
 980 ```
 981 Value (string):
 982 ```
 983 <enabled/> or <disabled/>
 984 ```
 985 OMA-URI:
 986 ```
 987 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_RejectTracker
 988 ```
 989 Value (string):
 990 ```
 991 <enabled/> or <disabled/>
 992 ```
 993 OMA-URI:
 994 ```
 995 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Locked
 996 ```
 997 Value (string):
 998 ```
 999 <enabled/> or <disabled/>
1000 ```
1001 OMA-URI:
1002 ```
1003 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Behavior
1004 ```
1005 Value (string):
1006 ```
1007 <enabled/>
1008 <data id="Cookies_Behavior" value="accept | reject-foreign | reject | limit-foreign | reject-tracker | reject-tracker-and-partition-foreign"/>
1009 ```
1010 OMA-URI:
1011 ```
1012 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_BehaviorPrivateBrowsing
1013 ```
1014 Value (string):
1015 ```
1016 <enabled/>
1017 <data id="Cookies_BehaviorPrivateBrowsing" value="accept | reject-foreign | reject | limit-foreign | reject-tracker | reject-tracker-and-partition-foreign"/>
1018 ```
1019 #### macOS
1020 ```
1021 <dict>
1022   <key>Cookies</key>
1023   <dict>
1024     <key>Allow</key>
1025     <array>
1026       <string>http://example.com</string>
1027     </array>
1028     <key>AllowSession</key>
1029     <array>
1030       <string>http://example.edu</string>
1031     </array>
1032     <key>Block</key>
1033     <array>
1034       <string>http://example.org</string>
1035     </array>
1036     <key>Default</key>
1037     <true/> | <false/>
1038     <key>AcceptThirdParty</key>
1039     <string>always | never | from-visited</string>
1040     <key>ExpireAtSessionEnd</key>
1041     <true/> | <false/>
1042     <key>RejectTracker</key>
1043     <true/> | <false/>
1044     <key>Locked</key>
1045     <true/> | <false/>
1046     <key>Behavior</key>
1047     <string>accept | reject-foreign | reject | limit-foreign | reject-tracker | reject-tracker-and-partition-foreign</string>
1048     <key>BehaviorPrivateBrowsing</key>
1049     <string>accept | reject-foreign | reject | limit-foreign | reject-tracker | reject-tracker-and-partition-foreign</string>
1050   </dict>
1051 </dict>
1052 ```
1053 #### policies.json
1054 ```
1055 {
1056   "policies": {
1057     "Cookies": {
1058       "Allow": ["http://example.org/"],
1059       "AllowSession": ["http://example.edu/"],
1060       "Block": ["http://example.edu/"],
1061       "Default": true | false,
1062       "AcceptThirdParty": "always" | "never" | "from-visited",
1063       "ExpireAtSessionEnd": true | false,
1064       "RejectTracker": true | false,
1065       "Locked": true | false,
1066       "Behavior": "accept" | "reject-foreign" | "reject" | "limit-foreign" | "reject-tracker" | "reject-tracker-and-partition-foreign",
1067       "BehaviorPrivateBrowsing": "accept" | "reject-foreign" | "reject" | "limit-foreign" | "reject-tracker" | "reject-tracker-and-partition-foreign",
1068     }
1069   }
1070 }
1071 ```
1072 ### DisableSetDesktopBackground
1073 Remove the "Set As Desktop Background..." menuitem when right clicking on an image.
1074
1075 **Compatibility:** Firefox 60, Firefox ESR 60\
1076 **CCK2 Equivalent:** `removeSetDesktopBackground`\
1077 **Preferences Affected:** N/A
1078
1079 #### Windows (GPO)
1080 ```
1081 Software\Policies\Mozilla\Firefox\DisableSetDesktopBackground = 0x1 | 0x0
1082 ```
1083 #### Windows (Intune)
1084 OMA-URI:
1085 ```
1086 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSetDesktopBackground
1087 ```
1088 Value (string):
1089 ```
1090 <enabled/> or <disabled/>
1091 ```
1092 #### macOS
1093 ```
1094 <dict>
1095   <key>DisableSetDesktopBackground</key>
1096   <true/> | <false/>
1097 </dict>
1098 ```
1099 #### policies.json
1100 ```
1101 {
1102   "policies": {
1103     "DisableSetDesktopBackground": true | false
1104   }
1105 }
1106 ```
1107 ### DisableMasterPasswordCreation
1108 Remove the master password functionality.
1109
1110 If this value is true, it works the same as setting [`PrimaryPassword`](#primarypassword) to false and removes the primary password functionality.
1111
1112 If both `DisableMasterPasswordCreation` and `PrimaryPassword` are used, `DisableMasterPasswordCreation` takes precedent.
1113
1114 **Compatibility:** Firefox 60, Firefox ESR 60\
1115 **CCK2 Equivalent:** `noMasterPassword`\
1116 **Preferences Affected:** N/A
1117
1118 #### Windows (GPO)
1119 ```
1120 Software\Policies\Mozilla\Firefox\DisableMasterPasswordCreation = 0x1 | 0x0
1121 ```
1122 #### Windows (Intune)
1123 OMA-URI:
1124 ```
1125 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableMasterPasswordCreation
1126 ```
1127 Value (string):
1128 ```
1129 <enabled/> or <disabled/>
1130 ```
1131 #### macOS
1132 ```
1133 <dict>
1134   <key>DisableMasterPasswordCreation</key>
1135   <true/> | <false/>
1136 </dict>
1137 ```
1138 #### policies.json
1139 ```
1140 {
1141   "policies": {
1142     "DisableMasterPasswordCreation": true | false
1143   }
1144 }
1145 ```
1146 ### DefaultDownloadDirectory
1147 Set the default download directory.
1148
1149 You can use ${home} for the native home directory.
1150
1151 **Compatibility:** Firefox 68, Firefox ESR 68\
1152 **CCK2 Equivalent:** N/A\
1153 **Preferences Affected:** `browser.download.dir`, `browser.download.folderList`
1154
1155 #### Windows (GPO)
1156 ```
1157 Software\Policies\Mozilla\Firefox\DefaultDownloadDirectory = "${home}\Downloads"
1158 ```
1159 #### Windows (Intune)
1160 OMA-URI:
1161 ```
1162 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DefaultDownloadDirectory
1163 ```
1164 Value (string):
1165 ```
1166 <enabled/>
1167 <data id="Preferences_String" value="${home}\Downloads"/>
1168 ```
1169 #### macOS
1170 ```
1171 <dict>
1172   <key>DefaultDownloadDirectory</key>
1173   <string>${home}/Downloads</string>
1174 </dict>
1175 ```
1176 #### policies.json (macOS and Linux)
1177 ```
1178 {
1179   "policies": {
1180     "DefaultDownloadDirectory": "${home}/Downloads"
1181 }
1182 ```
1183 #### policies.json (Windows)
1184 ```
1185 {
1186   "policies": {
1187     "DefaultDownloadDirectory": "${home}\\Downloads"
1188 }
1189 ```
1190 ### DisableAppUpdate
1191 Turn off application updates within Firefox.
1192
1193 **Compatibility:** Firefox 60, Firefox ESR 60\
1194 **CCK2 Equivalent:** `disableFirefoxUpdates`\
1195 **Preferences Affected:** N/A
1196
1197 #### Windows (GPO)
1198 ```
1199 Software\Policies\Mozilla\Firefox\DisableAppUpdate = 0x1 | 0x0
1200 ```
1201 #### Windows (Intune)
1202 OMA-URI:
1203 ```
1204 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableAppUpdate
1205 ```
1206 Value (string):
1207 ```
1208 <enabled/> or <disabled/>
1209 ```
1210 #### macOS
1211 ```
1212 <dict>
1213   <key>DisableAppUpdate</key>
1214   <true/> | <false/>
1215 </dict>
1216 ```
1217 #### policies.json
1218 ```
1219 {
1220   "policies": {
1221     "DisableAppUpdate": true | false
1222   }
1223 }
1224 ```
1225 ### DisableBuiltinPDFViewer
1226 Disable the built in PDF viewer. PDF files are downloaded and sent externally.
1227
1228 **Compatibility:** Firefox 60, Firefox ESR 60\
1229 **CCK2 Equivalent:** `disablePDFjs`\
1230 **Preferences Affected:** `pdfjs.disabled`
1231
1232 #### Windows (GPO)
1233 ```
1234 Software\Policies\Mozilla\Firefox\DisableBuiltinPDFViewer = 0x1 | 0x0
1235 ```
1236 #### Windows (Intune)
1237 OMA-URI:
1238 ```
1239 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableBuiltinPDFViewer
1240 ```
1241 Value (string):
1242 ```
1243 <enabled/> or <disabled/>
1244 ```
1245 #### macOS
1246 ```
1247 <dict>
1248   <key>DisableBuiltinPDFViewer</key>
1249   <true/> | <false/>
1250 </dict>
1251 ```
1252 #### policies.json
1253 ```
1254 {
1255   "policies": {
1256     "DisableBuiltinPDFViewer": true | false
1257   }
1258 }
1259 ```
1260 ### DisabledCiphers
1261 Disable specific cryptographic ciphers.
1262
1263 **Preferences Affected:** `security.ssl3.dhe_rsa_aes_128_sha`, `security.ssl3.dhe_rsa_aes_256_sha`, `security.ssl3.ecdhe_ecdsa_aes_128_gcm_sha256`, `security.ssl3.ecdhe_rsa_aes_128_gcm_sha256`, `security.ssl3.ecdhe_rsa_aes_128_sha`, `security.ssl3.ecdhe_rsa_aes_256_sha`, `security.ssl3.rsa_aes_128_gcm_sha256`, `security.ssl3.rsa_aes_128_sha`, `security.ssl3.rsa_aes_256_gcm_sha384`, `security.ssl3.rsa_aes_256_sha`, `security.ssl3.rsa_des_ede3_sha`
1264
1265 ---
1266 **Note:**
1267
1268 This policy was updated in Firefox 78 to allow enabling ciphers as well. Setting the value to true disables the cipher, setting the value to false enables the cipher. Previously setting the value to true or false disabled the cipher.
1269
1270 ---
1271 **Compatibility:** Firefox 76, Firefox ESR 68.8 (TLS_RSA_WITH_AES_128_GCM_SHA256 and TLS_RSA_WITH_AES_256_GCM_SHA384 were added in Firefox 78)\
1272 **CCK2 Equivalent:** N/A\
1273 **Preferences Affected:** N/A
1274
1275 #### Windows (GPO)
1276 ```
1277 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_DHE_RSA_WITH_AES_128_CBC_SHA = 0x1 | 0x0
1278 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_DHE_RSA_WITH_AES_256_CBC_SHA = 0x1 | 0x0
1279 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA = 0x1 | 0x0
1280 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA = 0x1 | 0x0
1281 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 = 0x1 | 0x0
1282 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 = 0x1 | 0x0
1283 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_RSA_WITH_AES_128_CBC_SHA = 0x1 | 0x0
1284 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_RSA_WITH_AES_256_CBC_SHA = 0x1 | 0x0
1285 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_RSA_WITH_3DES_EDE_CBC_SHA = 0x1 | 0x0
1286 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_RSA_WITH_AES_128_GCM_SHA256 = 0x1 | 0x0
1287 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_RSA_WITH_AES_256_GCM_SHA384 = 0x1 | 0x0
1288 ```
1289 #### Windows (Intune)
1290 OMA-URI:
1291 ```
1292 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_DHE_RSA_WITH_AES_128_CBC_SHA
1293 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_DHE_RSA_WITH_AES_256_CBC_SHA
1294 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
1295 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
1296 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
1297 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
1298 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_RSA_WITH_AES_128_CBC_SHA
1299 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_RSA_WITH_AES_256_CBC_SHA
1300 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_RSA_WITH_3DES_EDE_CBC_SHA
1301 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_RSA_WITH_AES_128_GCM_SHA256
1302 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_RSA_WITH_AES_256_GCM_SHA384
1303 ```
1304 Value (string):
1305 ```
1306 <enabled/> or <disabled/>
1307 ```
1308 #### macOS
1309 ```
1310 <dict>
1311   <key>DisabledCiphers</key>
1312     <dict>
1313       <key>TLS_DHE_RSA_WITH_AES_128_CBC_SHA</key>
1314       <true/> | <false/>
1315       <key>TLS_DHE_RSA_WITH_AES_256_CBC_SHA</key>
1316       <true/> | <false/>
1317       <key>TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA</key>
1318       <true/> | <false/>
1319       <key>TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA</key>
1320       <true/> | <false/>
1321       <key>TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256</key>
1322       <true/> | <false/>
1323       <key>TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256</key>
1324       <true/> | <false/>
1325       <key>TLS_RSA_WITH_AES_128_CBC_SHA</key>
1326       <true/> | <false/>
1327       <key>TLS_RSA_WITH_AES_256_CBC_SHA</key>
1328       <true/> | <false/>
1329       <key>TLS_RSA_WITH_3DES_EDE_CBC_SHA</key>
1330       <true/> | <false/>
1331       <key>TLS_RSA_WITH_AES_128_GCM_SHA256</key>
1332       <true/> | <false/>
1333       <key>TLS_RSA_WITH_AES_256_GCM_SHA384</key>
1334       <true/> | <false/>
1335     </dict>
1336 </dict>
1337 ```
1338 #### policies.json
1339 ```
1340 {
1341   "policies": {
1342     "DisabledCiphers": {
1343       "TLS_DHE_RSA_WITH_AES_128_CBC_SHA": true | false,
1344       "TLS_DHE_RSA_WITH_AES_256_CBC_SHA": true | false,
1345       "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA": true | false,
1346       "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA": true | false,
1347       "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256": true | false,
1348       "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256": true | false,
1349       "TLS_RSA_WITH_AES_128_CBC_SHA": true | false,
1350       "TLS_RSA_WITH_AES_256_CBC_SHA": true | false,
1351       "TLS_RSA_WITH_3DES_EDE_CBC_SHA": true | false,
1352       "TLS_RSA_WITH_AES_128_GCM_SHA256": true | false,
1353       "TLS_RSA_WITH_AES_256_GCM_SHA384": true | false
1354     }
1355   }
1356 }
1357 ```
1358 ### DisableDefaultBrowserAgent
1359 Prevent the default browser agent from taking any actions. Only applicable to Windows; other platforms don’t have the agent.
1360
1361 The browser agent is a Windows-only scheduled task which runs in the background to collect and submit data about the browser that the user has set as their OS default. More information is available [here](https://firefox-source-docs.mozilla.org/toolkit/mozapps/defaultagent/default-browser-agent/index.html).
1362
1363 **Compatibility:** Firefox 75, Firefox ESR 68.7 (Windows only)\
1364 **CCK2 Equivalent:** N/A\
1365 **Preferences Affected:** N/A
1366
1367 #### Windows (GPO)
1368 ```
1369 Software\Policies\Mozilla\Firefox\DisableDefaultBrowserAgent = 0x1 | 0x0
1370 ```
1371 #### Windows (Intune)
1372 OMA-URI:
1373 ```
1374 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableDefaultBrowserAgent
1375 ```
1376 Value (string):
1377 ```
1378 <enabled/> or <disabled/>
1379 ```
1380 #### policies.json
1381 ```
1382 {
1383   "policies": {
1384     "DisableDefaultBrowserAgent": true | false
1385   }
1386 }
1387 ```
1388 ### DisableDeveloperTools
1389 Remove access to all developer tools.
1390
1391 **Compatibility:** Firefox 60, Firefox ESR 60\
1392 **CCK2 Equivalent:** `removeDeveloperTools`\
1393 **Preferences Affected:** `devtools.policy.disabled`
1394
1395 #### Windows (GPO)
1396 ```
1397 Software\Policies\Mozilla\Firefox\DisableDeveloperTools = 0x1 | 0x0`
1398 ```
1399 #### Windows (Intune)
1400 OMA-URI:
1401 ```
1402 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableDeveloperTools
1403 ```
1404 Value (string):
1405 ```
1406 <enabled/> or <disabled/>
1407 ```
1408 #### macOS
1409 ```
1410 <dict>
1411   <key>DisableDeveloperTools</key>
1412   <true/> | <false/>
1413 </dict>
1414 ```
1415 #### policies.json
1416 ```
1417 {
1418   "policies": {
1419     "DisableDeveloperTools": true | false
1420   }
1421 }
1422 ```
1423 ### DisableFeedbackCommands
1424 Disable the menus for reporting sites (Submit Feedback, Report Deceptive Site).
1425
1426 **Compatibility:** Firefox 60, Firefox ESR 60\
1427 **CCK2 Equivalent:** N/A\
1428 **Preferences Affected:** N/A
1429
1430 #### Windows (GPO)
1431 ```
1432 Software\Policies\Mozilla\Firefox\DisableFeedbackCommands = 0x1 | 0x0
1433 ```
1434 #### Windows (Intune)
1435 OMA-URI:
1436 ```
1437 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFeedbackCommands
1438 ```
1439 Value (string):
1440 ```
1441 <enabled/> or <disabled/>
1442 ```
1443 #### macOS
1444 ```
1445 <dict>
1446   <key>DisableFeedbackCommands</key>
1447   <true/> | <false/>
1448 </dict>
1449 ```
1450 #### policies.json
1451 ```
1452 {
1453   "policies": {
1454     "DisableFeedbackCommands": true | false
1455   }
1456 }
1457 ```
1458 ### DisableFirefoxAccounts
1459 Disable Firefox Accounts integration (Sync).
1460
1461 **Compatibility:** Firefox 60, Firefox ESR 60\
1462 **CCK2 Equivalent:** `disableSync`\
1463 **Preferences Affected:** `identity.fxaccounts.enabled`
1464
1465 #### Windows (GPO)
1466 ```
1467 Software\Policies\Mozilla\Firefox\DisableFirefoxAccounts = 0x1 | 0x0
1468 ```
1469 #### Windows (Intune)
1470 OMA-URI:
1471 ```
1472 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxAccounts
1473 ```
1474 Value (string):
1475 ```
1476 <enabled/> or <disabled/>
1477 ```
1478 #### macOS
1479 ```
1480 <dict>
1481   <key>DisableFirefoxAccounts</key>
1482   <true/> | <false/>
1483 </dict>
1484 ```
1485 #### policies.json
1486 ```
1487 {
1488   "policies": {
1489     "DisableFirefoxAccounts": true | false
1490   }
1491 }
1492 ```
1493 ### DisableFirefoxScreenshots
1494 Remove access to Firefox Screenshots.
1495
1496 **Compatibility:** Firefox 60, Firefox ESR 60\
1497 **CCK2 Equivalent:** N/A\
1498 **Preferences Affected:** `extensions.screenshots.disabled`
1499
1500 #### Windows (GPO)
1501 ```
1502 Software\Policies\Mozilla\Firefox\DisableFirefoxScreenshots = 0x1 | 0x0
1503 ```
1504 #### Windows (Intune)
1505 OMA-URI:
1506 ```
1507 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxScreenshots
1508 ```
1509 Value (string):
1510 ```
1511 <enabled/> or <disabled/>
1512 ```
1513 #### macOS
1514 ```
1515 <dict>
1516   <key>DisableFirefoxScreenshots</key>
1517   <true/> | <false/>
1518 </dict>
1519 ```
1520 #### policies.json
1521 ```
1522 {
1523   "policies": {
1524     "DisableFirefoxScreenshots": true | false
1525   }
1526 }
1527 ```
1528 ### DisableFirefoxStudies
1529 Disable Firefox studies (Shield).
1530
1531 **Compatibility:** Firefox 60, Firefox ESR 60\
1532 **CCK2 Equivalent:** N/A\
1533 **Preferences Affected:** N/A
1534
1535 #### Windows (GPO)
1536 ```
1537 Software\Policies\Mozilla\Firefox\DisableFirefoxStudies = 0x1 | 0x0
1538 ```
1539 #### Windows (Intune)
1540 OMA-URI:
1541 ```
1542 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxStudies
1543 ```
1544 Value (string):
1545 ```
1546 <enabled/> or <disabled/>
1547 ```
1548 #### macOS
1549 ```
1550 <dict>
1551   <key>DisableFirefoxStudies</key>
1552   <true/> | <false/>
1553 </dict>
1554 ```
1555 #### policies.json
1556 ```
1557 {
1558   "policies": {
1559     "DisableFirefoxStudies": true | false
1560   }
1561 }
1562 ```
1563 ### DisableForgetButton
1564 Disable the "Forget" button.
1565
1566 **Compatibility:** Firefox 60, Firefox ESR 60\
1567 **CCK2 Equivalent:** `disableForget`\
1568 **Preferences Affected:** N/A
1569
1570 #### Windows (GPO)
1571 ```
1572 Software\Policies\Mozilla\Firefox\DisableForgetButton = 0x1 | 0x0
1573 ```
1574 #### Windows (Intune)
1575 OMA-URI:
1576 ```
1577 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableForgetButton
1578 ```
1579 Value (string):
1580 ```
1581 <enabled/> or <disabled/>
1582 ```
1583 #### macOS
1584 ```
1585 <dict>
1586   <key>DisableForgetButton</key>
1587   <true/> | <false/>
1588 </dict>
1589 ```
1590 #### policies.json
1591 ```
1592 {
1593   "policies": {
1594     "DisableForgetButton": true | false
1595   }
1596 }
1597 ```
1598 ### DisableFormHistory
1599 Turn off saving information on web forms and the search bar.
1600
1601 **Compatibility:** Firefox 60, Firefox ESR 60\
1602 **CCK2 Equivalent:** `disableFormFill`\
1603 **Preferences Affected:** `browser.formfill.enable`
1604
1605 #### Windows (GPO)
1606 ```
1607 Software\Policies\Mozilla\Firefox\DisableFormHistory = 0x1 | 0x0
1608 ```
1609 #### Windows (Intune)
1610 OMA-URI:
1611 ```
1612 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFormHistory
1613 ```
1614 Value (string):
1615 ```
1616 <enabled/> or <disabled/>
1617 ```
1618 #### macOS
1619 ```
1620 <dict>
1621   <key>DisableFormHistory</key>
1622   <true/> | <false/>
1623 </dict>
1624 ```
1625 #### policies.json
1626 ```
1627 {
1628   "policies": {
1629     "DisableFormHistory": true | false
1630   }
1631 }
1632 ```
1633 ### DisablePasswordReveal
1634 Do not allow passwords to be shown in saved logins
1635
1636 **Compatibility:** Firefox 71, Firefox ESR 68.3\
1637 **CCK2 Equivalent:** N/A
1638 **Preferences Affected:** N/A
1639
1640 #### Windows (GPO)
1641 ```
1642 Software\Policies\Mozilla\Firefox\DisablePasswordReveal = 0x1 | 0x0
1643 ```
1644 #### Windows (Intune)
1645 OMA-URI:
1646 ```
1647 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePasswordReveal
1648 ```
1649 Value (string):
1650 ```
1651 <enabled/> or <disabled/>
1652 ```
1653 #### macOS
1654 ```
1655 <dict>
1656   <key>DisablePasswordReveal</key>
1657   <true/> | <false/>
1658 </dict>
1659 ```
1660 #### policies.json
1661 ```
1662 {
1663   "policies": {
1664     "DisablePasswordReveal": true | false
1665   }
1666 }
1667 ```
1668 ### DisablePocket
1669 Remove Pocket in the Firefox UI. It does not remove it from the new tab page.
1670
1671 **Compatibility:** Firefox 60, Firefox ESR 60\
1672 **CCK2 Equivalent:** `disablePocket`\
1673 **Preferences Affected:** `extensions.pocket.enabled`
1674
1675 #### Windows (GPO)
1676 ```
1677 Software\Policies\Mozilla\Firefox\DisablePocket = 0x1 | 0x0
1678 ```
1679 #### Windows (Intune)
1680 OMA-URI:
1681 ```
1682 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePocket
1683 ```
1684 Value (string):
1685 ```
1686 <enabled/> or <disabled/>
1687 ```
1688 #### macOS
1689 ```
1690 <dict>
1691   <key>DisablePocket</key>
1692   <true/> | <false/>
1693 </dict>
1694 ```
1695 #### policies.json
1696 ```
1697 {
1698   "policies": {
1699     "DisablePocket": true | false
1700   }
1701 }
1702 ```
1703 ### DisablePrivateBrowsing
1704 Remove access to private browsing.
1705
1706 **Compatibility:** Firefox 60, Firefox ESR 60\
1707 **CCK2 Equivalent:** `disablePrivateBrowsing`\
1708 **Preferences Affected:** N/A
1709
1710 #### Windows (GPO)
1711 ```
1712 Software\Policies\Mozilla\Firefox\DisablePrivateBrowsing = 0x1 | 0x0
1713 ```
1714 #### Windows (Intune)
1715 OMA-URI:
1716 ```
1717 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePrivateBrowsing
1718 ```
1719 Value (string):
1720 ```
1721 <enabled/> or <disabled/>
1722 ```
1723 #### macOS
1724 ```
1725 <dict>
1726   <key>DisablePrivateBrowsing</key>
1727   <true/> | <false/>
1728 </dict>
1729 ```
1730 #### policies.json
1731 ```
1732 {
1733   "policies": {
1734     "DisablePrivateBrowsing": true | false
1735   }
1736 }
1737 ```
1738 ### DisableProfileImport
1739 Disables the "Import data from another browser" option in the bookmarks window.
1740
1741 **Compatibility:** Firefox 60, Firefox ESR 60\
1742 **CCK2 Equivalent:** N/A\
1743 **Preferences Affected:** N/A
1744
1745 #### Windows (GPO)
1746 ```
1747 Software\Policies\Mozilla\Firefox\DisableProfileImport = 0x1 | 0x0
1748 ```
1749 #### Windows (Intune)
1750 OMA-URI:
1751 ```
1752 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableProfileImport
1753 ```
1754 Value (string):
1755 ```
1756 <enabled/> or <disabled/>
1757 ```
1758 #### macOS
1759 ```
1760 <dict>
1761   <key>DisableProfileImport</key>
1762   <true/> | <false/>
1763 </dict>
1764 ```
1765 #### policies.json
1766 ```
1767 {
1768   "policies": {
1769     "DisableProfileImport": true | false
1770   }
1771 }
1772 ```
1773 ### DisableProfileRefresh
1774 Disable the Refresh Firefox button on about:support and support.mozilla.org, as well as the prompt that displays offering to refresh Firefox when you haven't used it in a while.
1775
1776 **Compatibility:** Firefox 60, Firefox ESR 60\
1777 **CCK2 Equivalent:** `disableResetFirefox`\
1778 **Preferences Affected:** `browser.disableResetPrompt`
1779
1780 #### Windows (GPO)
1781 ```
1782 Software\Policies\Mozilla\Firefox\DisableProfileRefresh = 0x1 | 0x0
1783 ```
1784 #### Windows (Intune)
1785 OMA-URI:
1786 ```
1787 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableProfileRefresh
1788 ```
1789 Value (string):
1790 ```
1791 <enabled/> or <disabled/>
1792 ```
1793 #### macOS
1794 ```
1795 <dict>
1796   <key>DisableProfileRefresh</key>
1797   <true/> | <false/>
1798 </dict>
1799 ```
1800 #### policies.json
1801 ```
1802 {
1803   "policies": {
1804     "DisableProfileRefresh": true | false
1805   }
1806 }
1807 ```
1808 ### DisableSafeMode
1809 Disable safe mode within the browser.
1810
1811 On Windows, this disables safe mode via the command line as well.
1812
1813 **Compatibility:** Firefox 60, Firefox ESR 60 (Windows, macOS)\
1814 **CCK2 Equivalent:** `disableSafeMode`\
1815 **Preferences Affected:** N/A
1816
1817 #### Windows (GPO)
1818 ```
1819 Software\Policies\Mozilla\Firefox\DisableSafeMode = 0x1 | 0x0
1820 ```
1821 #### Windows (Intune)
1822 OMA-URI:
1823 ```
1824 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSafeMode
1825 ```
1826 Value (string):
1827 ```
1828 <enabled/> or <disabled/>
1829 ```
1830 #### macOS
1831 ```
1832 <dict>
1833   <key>DisableSafeMode</key>
1834   <true/> | <false/>
1835 </dict>
1836 ```
1837 #### policies.json
1838 ```
1839 {
1840   "policies": {
1841     "DisableSafeMode": true | false
1842   }
1843 }
1844 ```
1845 ### DisableSecurityBypass
1846 Prevent the user from bypassing security in certain cases.
1847
1848 `InvalidCertificate` prevents adding an exception when an invalid certificate is shown.
1849
1850 `SafeBrowsing` prevents selecting "ignore the risk" and visiting a harmful site anyway.
1851
1852 **Compatibility:** Firefox 60, Firefox ESR 60\
1853 **CCK2 Equivalent:** N/A\
1854 **Preferences Affected:** `security.certerror.hideAddException`, `browser.safebrowsing.allowOverride`
1855
1856 #### Windows (GPO)
1857 ```
1858 Software\Policies\Mozilla\Firefox\DisableSecurityBypass\InvalidCertificate = 0x1 | 0x0
1859 Software\Policies\Mozilla\Firefox\DisableSecurityBypass\SafeBrowsing = 0x1 | 0x0
1860 ```
1861 #### Windows (Intune)
1862 OMA-URI:
1863 ```
1864 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/P_DisableSecurityBypass_InvalidCertificate
1865 ```
1866 Value (string):
1867 ```
1868 <enabled/> or <disabled/>
1869 ```
1870 OMA-URI:
1871 ```
1872 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/P_DisableSecurityBypass_SafeBrowsing
1873 ```
1874 Value (string):
1875 ```
1876 <enabled/> or <disabled/>
1877 ```
1878
1879 #### macOS
1880 ```
1881 <dict>
1882   <key>DisableSecurityBypass</key>
1883   <dict>
1884     <key>InvalidCertificate</key>
1885     <true/> | <false/>
1886     <key>SafeBrowsing</key>
1887     <true/> | <false/>
1888   </dict>
1889 </dict>
1890 ```
1891 #### policies.json
1892 ```
1893 {
1894   "policies": {
1895     "DisableSecurityBypass": {
1896       "InvalidCertificate": true | false,
1897       "SafeBrowsing": true | false
1898     }
1899   }
1900 }
1901 ```
1902 ### DisableSystemAddonUpdate
1903 Prevent system add-ons from being installed or update.
1904
1905 **Compatibility:** Firefox 60, Firefox ESR 60\
1906 **CCK2 Equivalent:** N/A\
1907 **Preferences Affected:** N/A
1908
1909 #### Windows (GPO)
1910 ```
1911 Software\Policies\Mozilla\Firefox\DisableSystemAddonUpdate = 0x1 | 0x0
1912 ```
1913 #### Windows (Intune)
1914 OMA-URI:
1915 ```
1916 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSystemAddonUpdate
1917 ```
1918 Value (string):
1919 ```
1920 <enabled/> or <disabled/>
1921 ```
1922 #### macOS
1923 ```
1924 <dict>
1925   <key>DisableSystemAddonUpdate</key>
1926   <true/> | <false/>
1927 </dict>
1928 ```
1929 #### policies.json
1930 ```
1931 {
1932   "policies": {
1933     "DisableSystemAddonUpdate": true | false
1934   }
1935 }
1936 ```
1937 ### DisableTelemetry
1938 Prevent the upload of telemetry data.
1939
1940 As of Firefox 83 and Firefox ESR 78.5, local storage of telemetry data is disabled as well.
1941
1942 Mozilla recommends that you do not disable telemetry. Information collected through telemetry helps us build a better product for businesses like yours.
1943
1944 **Compatibility:** Firefox 60, Firefox ESR 60\
1945 **CCK2 Equivalent:** `disableTelemetry`\
1946 **Preferences Affected:** `datareporting.healthreport.uploadEnabled`, `datareporting.policy.dataSubmissionEnabled`, `toolkit.telemetry.archive.enabled`
1947
1948 #### Windows (GPO)
1949 ```
1950 Software\Policies\Mozilla\Firefox\DisableTelemetry = 0x1 | 0x0
1951 ```
1952 #### Windows (Intune)
1953 OMA-URI:
1954 ```
1955 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableTelemetry
1956 ```
1957 Value (string):
1958 ```
1959 <enabled/> or <disabled/>
1960 ```
1961 #### macOS
1962 ```
1963 <dict>
1964   <key>DisableTelemetry</key>
1965   <true/> | <false/>
1966 </dict>
1967 ```
1968 #### policies.json
1969 ```
1970 {
1971   "policies": {
1972     "DisableTelemetry": true | false
1973   }
1974 }
1975 ```
1976 ### DisplayBookmarksToolbar
1977 Set the initial state of the bookmarks toolbar. A user can still hide it and it will stay hidden.
1978
1979 **Compatibility:** Firefox 60, Firefox ESR 60\
1980 **CCK2 Equivalent:** `displayBookmarksToolbar`\
1981 **Preferences Affected:** N/A
1982
1983 #### Windows (GPO)
1984 ```
1985 Software\Policies\Mozilla\Firefox\DisplayBookmarksToolbar = 0x1 | 0x0
1986 ```
1987 #### Windows (Intune)
1988 OMA-URI:
1989 ```
1990 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisplayBookmarksToolbar
1991 ```
1992 Value (string):
1993 ```
1994 <enabled/> or <disabled/>
1995 ```
1996 #### macOS
1997 ```
1998 <dict>
1999   <key>DisplayBookmarksToolbar</key>
2000   <true/> | <false/>
2001 </dict>
2002 ```
2003 #### policies.json
2004 ```
2005 {
2006   "policies": {
2007     "DisplayBookmarksToolbar": true | false
2008   }
2009 }
2010 ```
2011 ### DisplayMenuBar
2012 Set the state of the menubar.
2013
2014 `always` means the menubar is shown and cannot be hidden.
2015
2016 `never` means the menubar is hidden and cannot be shown.
2017
2018 `default-on` means the menubar is on by default but can be hidden.
2019
2020 `default-off` means the menubar is off by default but can be shown.
2021
2022 **Compatibility:** Firefox 73, Firefox ESR 68.5 (Windows, some Linux)\
2023 **CCK2 Equivalent:** `displayMenuBar`\
2024 **Preferences Affected:** N/A
2025
2026 #### Windows (GPO)
2027 ```
2028 Software\Policies\Mozilla\Firefox\DisplayMenuBar = "always", "never", "default-on", "default-off"
2029 ```
2030 #### Windows (Intune)
2031 OMA-URI:
2032 ```
2033 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisplayMenuBar_Enum
2034 ```
2035 Value (string):
2036 ```
2037 <enabled/>
2038 <data id="DisplayMenuBar" value="always | never | default-on | default-off"/>
2039 ```
2040 #### macOS
2041 ```
2042 <dict>
2043   <key>DisplayMenuBar</key>
2044   <string>always | never | default-on | default-off</string>
2045 </dict>
2046 ```
2047 #### policies.json
2048 ```
2049 {
2050   "policies": {
2051     "DisplayMenuBar": "always", "never", "default-on", "default-off"
2052   }
2053 }
2054 ```
2055 ### DisplayMenuBar (Deprecated)
2056 Set the initial state of the menubar. A user can still hide it and it will stay hidden.
2057
2058 **Compatibility:** Firefox 60, Firefox ESR 60 (Windows, some Linux)\
2059 **CCK2 Equivalent:** `displayMenuBar`\
2060 **Preferences Affected:** N/A
2061
2062 #### Windows (GPO)
2063 ```
2064 Software\Policies\Mozilla\Firefox\DisplayMenuBar = 0x1 | 0x0
2065 ```
2066 #### macOS
2067 ```
2068 <dict>
2069   <key>DisplayMenuBar</key>
2070   <true/> | <false/>
2071 </dict>
2072 ```
2073 #### policies.json
2074 ```
2075 {
2076   "policies": {
2077     "DisplayMenuBar": true | false
2078   }
2079 }
2080 ```
2081 ### DNSOverHTTPS
2082 Configure DNS over HTTPS.
2083
2084 `Enabled` determines whether DNS over HTTPS is enabled
2085
2086 `ProviderURL` is a URL to another provider.
2087
2088 `Locked` prevents the user from changing DNS over HTTPS preferences.
2089
2090 `ExcludedDomains` excludes domains from DNS over HTTPS.
2091
2092 **Compatibility:** Firefox 63, Firefox ESR 68 (ExcludedDomains added in 75/68.7)\
2093 **CCK2 Equivalent:** N/A\
2094 **Preferences Affected:** `network.trr.mode`, `network.trr.uri`
2095
2096 #### Windows (GPO)
2097 ```
2098 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\Enabled = 0x1 | 0x0
2099 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\ProviderURL = "URL_TO_ALTERNATE_PROVIDER"
2100 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\Locked = 0x1 | 0x0
2101 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\ExcludedDomains\1 = "example.com"
2102 ```
2103 #### Windows (Intune)
2104 OMA-URI:
2105 ```
2106 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_Enabled
2107 ```
2108 Value (string):
2109 ```
2110 <enabled/> or <disabled/>
2111 ```
2112 OMA-URI:
2113 ```
2114 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_ProviderURL
2115 ```
2116 Value (string):
2117 ```
2118 <enabled/>
2119 <data id="String" value="URL_TO_ALTERNATE_PROVIDER"/>
2120 ```
2121 OMA-URI:
2122 ```
2123 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_Locked
2124 ```
2125 Value (string):
2126 ```
2127 <enabled/> or <disabled/>
2128 ```
2129 OMA-URI:
2130 ```
2131 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_ExcludedDomains
2132 ```
2133 Value (string):
2134 ```
2135 <enabled/>
2136 <data id="List" value="1&#xF000;example.com"/>
2137 ```
2138 #### macOS
2139 ```
2140 <dict>
2141   <key>DNSOverHTTPS</key>
2142   <dict>
2143     <key>Enabled</key>
2144     <true/> | <false/>
2145     <key>ProviderURL</key>
2146     <string>URL_TO_ALTERNATE_PROVIDER</string>
2147     <key>Locked</key>
2148     <true/> | <false/>
2149     <key>ExcludedDomains</key>
2150     <array>
2151       <string>example.com</string>
2152     </array>
2153   </dict>
2154 </dict>
2155 ```
2156 #### policies.json
2157 ```
2158 {
2159   "policies": {
2160     "DNSOverHTTPS": {
2161       "Enabled":  true | false,
2162       "ProviderURL": "URL_TO_ALTERNATE_PROVIDER",
2163       "Locked": true | false,
2164       "ExcludedDomains": ["example.com"]
2165     }
2166   }
2167 }
2168 ```
2169 ### DontCheckDefaultBrowser
2170 Don't check if Firefox is the default browser at startup.
2171
2172 **Compatibility:** Firefox 60, Firefox ESR 60\
2173 **CCK2 Equivalent:** `dontCheckDefaultBrowser`\
2174 **Preferences Affected:** `browser.shell.checkDefaultBrowser`
2175
2176 #### Windows (GPO)
2177 ```
2178 Software\Policies\Mozilla\Firefox\DontCheckDefaultBrowser = 0x1 | 0x0
2179 ```
2180 #### Windows (Intune)
2181 OMA-URI:
2182 ```
2183 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DontCheckDefaultBrowser
2184 ```
2185 Value (string):
2186 ```
2187 <enabled/> or <disabled/>
2188 ```
2189 #### macOS
2190 ```
2191 <dict>
2192   <key>DontCheckDefaultBrowser</key>
2193   <true/> | <false/>
2194 </dict>
2195 ```
2196 #### policies.json
2197 ```
2198 {
2199   "policies": {
2200     "DontCheckDefaultBrowser": true | false
2201   }
2202 }
2203 ```
2204 ### DownloadDirectory
2205 Set and lock the download directory.
2206
2207 You can use ${home} for the native home directory.
2208
2209 **Compatibility:** Firefox 68, Firefox ESR 68\
2210 **CCK2 Equivalent:** N/A\
2211 **Preferences Affected:** `browser.download.dir`, `browser.download.folderList`, `browser.download.useDownloadDir`
2212
2213 #### Windows (GPO)
2214 ```
2215 Software\Policies\Mozilla\Firefox\DownloadDirectory = "${home}\Downloads"
2216 ```
2217 #### Windows (Intune)
2218 OMA-URI:
2219 ```
2220 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DownloadDirectory
2221 ```
2222 Value (string):
2223 ```
2224 <enabled/>
2225 <data id="Preferences_String" value="${home}\Downloads"/>
2226 ```
2227 #### macOS
2228 ```
2229 <dict>
2230   <key>DownloadDirectory</key>
2231   <string>${home}/Downloads</string>
2232 </dict>
2233 ```
2234 #### policies.json (macOS and Linux)
2235 ```
2236 {
2237   "policies": {
2238     "DownloadDirectory": "${home}/Downloads"
2239 }
2240 ```
2241 #### policies.json (Windows)
2242 ```
2243 {
2244   "policies": {
2245     "DownloadDirectory": "${home}\\Downloads"
2246 }
2247 ```
2248 ### EnableTrackingProtection
2249 Configure tracking protection.
2250
2251 If this policy is not configured, tracking protection is not enabled by default in the browser, but it is enabled by default in private browsing and the user can change it.
2252
2253 If `Value` is set to false, tracking protection is disabled and locked in both the regular browser and private browsing.
2254
2255 If `Value` is set to true, tracking protection is enabled by default in both the regular browser and private browsing and the `Locked` value determines whether or not a user can change it.
2256
2257 If `Cryptomining` is set to true, cryptomining scripts on websites are blocked.
2258
2259 If `Fingerprinting` is set to true, fingerprinting scripts on websites are blocked.
2260
2261 `Exceptions` are origins for which tracking protection is not enabled.
2262
2263 **Compatibility:** Firefox 60, Firefox ESR 60 (Cryptomining and Fingerprinting added in 70/68.2, Exceptions added in 73/68.5)\
2264 **CCK2 Equivalent:** N/A\
2265 **Preferences Affected:** `privacy.trackingprotection.enabled`, `privacy.trackingprotection.pbmode.enabled`, `privacy.trackingprotection.cryptomining.enabled`, `privacy.trackingprotection.fingerprinting.enabled`
2266
2267 #### Windows (GPO)
2268 ```
2269 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Value = 0x1 | 0x0
2270 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Locked = 0x1 | 0x0
2271 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Cryptomining = 0x1 | 0x0
2272 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Fingerprinting = 0x1 | 0x0
2273 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Exceptions\1 = "https://example.com"
2274 ```
2275 #### Windows (Intune)
2276 OMA-URI:
2277 ```
2278 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/A_TrackingProtection_Value
2279 ```
2280 Value (string):
2281 ```
2282 <enabled/> or <disabled/>
2283 ```
2284 OMA-URI:
2285 ```
2286 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/B_TrackingProtection_Cryptomining
2287 ```
2288 Value (string):
2289 ```
2290 <enabled/> or <disabled/>
2291 ```
2292 OMA-URI:
2293 ```
2294 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/C_TrackingProtection_Fingerprinting
2295 ```
2296 Value (string):
2297 ```
2298 <enabled/> or <disabled/>
2299 ```
2300 OMA-URI:
2301 ```
2302 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/D_TrackingProtection_Exceptions
2303 ```
2304 Value (string):
2305 ```
2306 <data id="TrackingProtection_Exceptions" value="1&#xF000;https://example.com"/>
2307 ```
2308 OMA-URI:
2309 ```
2310 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/E_TrackingProtection_Locked
2311 ```
2312 Value (string):
2313 ```
2314 <enabled/> or <disabled/>
2315 ```
2316 #### macOS
2317 ```
2318 <dict>
2319   <key>EnableTrackingProtection</key>
2320   <dict>
2321     <key>Value</key>
2322     <true/> | <false/>
2323     <key>Locked</key>
2324     <true/> | <false/>
2325     <key>Cryptomining</key>
2326     <true/> | <false/>
2327     <key>Fingerprinting</key>
2328     <true/> | <false/>
2329     <key>Exceptions</key>
2330     <array>
2331       <string>https://example.com</string>
2332     </array>
2333   </dict>
2334 </dict>
2335 ```
2336 #### policies.json
2337 ```
2338 {
2339   "policies": {
2340     "EnableTrackingProtection": {
2341       "Value": true | false,
2342       "Locked": true | false,
2343       "Cryptomining": true | false,
2344       "Fingerprinting": true | false,
2345       "Exceptions": ["https://example.com"]
2346     }
2347   }
2348 }
2349 ```
2350 ### EncryptedMediaExtensions
2351 Enable or disable Encrypted Media Extensions and optionally lock it.
2352
2353 If `Enabled` is set to false, encrypted media extensions (like Widevine) are not downloaded by Firefox unless the user consents to installing them.
2354
2355 If `Locked` is set to true and `Enabled` is set to false, Firefox will not download encrypted media extensions (like Widevine) or ask the user to install them.
2356
2357 **Compatibility:** Firefox 77, Firefox ESR 68.9\
2358 **CCK2 Equivalent:** N/A\
2359 **Preferences Affected:** `media.eme.enabled`
2360
2361 #### Windows (GPO)
2362 ```
2363 Software\Policies\Mozilla\Firefox\EncryptedMediaExtensions\Enabled = 0x1 | 0x0
2364 Software\Policies\Mozilla\Firefox\EncryptedMediaExtensions\Locked = 0x1 | 0x0
2365 ```
2366 #### Windows (Intune)
2367 OMA-URI:
2368 ```
2369 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~EncryptedMediaExtensions/EncryptedMediaExtensions_Enabled
2370 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~EncryptedMediaExtensions/EncryptedMediaExtensions_Locked
2371 ```
2372 Value (string):
2373 ```
2374 <enabled/>or <disabled/>
2375 ```
2376 #### macOS
2377 ```
2378 <dict>
2379   <key>EncryptedMediaExtensions</key>
2380   <dict>
2381     <key>Enabled</key>
2382     <true/> | <false/>
2383     <key>Locked</key>
2384     <true/> | <false/>
2385   </dict>
2386 </dict>
2387 ```
2388 #### policies.json
2389 ```
2390 {
2391   "policies": {
2392     "EncryptedMediaExtensions": {
2393       "Enabled": true | false,
2394       "Locked": true | false
2395     }
2396   }
2397 }
2398 ```
2399 ### EnterprisePoliciesEnabled
2400 Enable policy support on macOS.
2401
2402 **Compatibility:** Firefox 63, Firefox ESR 60.3 (macOS only)\
2403 **CCK2 Equivalent:** N/A\
2404 **Preferences Affected:** N/A
2405
2406 #### macOS
2407 ```
2408 <dict>
2409   <key>EnterprisePoliciesEnabled</key>
2410   <true/>
2411 </dict>
2412 ```
2413 ### Extensions
2414 Control the installation, uninstallation and locking of extensions.
2415
2416 While this policy is not technically deprecated, it is recommended that you use the **[`ExtensionSettings`](#extensionsettings)** policy. It has the same functionality and adds more. It does not support native paths, though, so you'll have to use file:/// URLs.
2417
2418 `Install` is a list of URLs or native paths for extensions to be installed.
2419
2420 `Uninstall` is a list of extension IDs that should be uninstalled if found.
2421
2422 `Locked` is a list of extension IDs that the user cannot disable or uninstall.
2423
2424 **Compatibility:** Firefox 60, Firefox ESR 60\
2425 **CCK2 Equivalent:** `addons`\
2426 **Preferences Affected:** N/A
2427
2428 #### Windows (GPO)
2429 ```
2430 Software\Policies\Mozilla\Firefox\Extensions\Install\1 = "https://addons.mozilla.org/firefox/downloads/somefile.xpi"
2431 Software\Policies\Mozilla\Firefox\Extensions\Install\2 = "//path/to/xpi"
2432 Software\Policies\Mozilla\Firefox\Extensions\Uninstall\1 = "bad_addon_id@mozilla.org"
2433 Software\Policies\Mozilla\Firefox\Extensions\Locked\1 = "addon_id@mozilla.org"
2434 ```
2435 #### Windows (Intune)
2436 OMA-URI:
2437 ```
2438 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/Extensions_Install
2439 ```
2440 Value (string):
2441 ```
2442 <enabled/>
2443 <data id="Extensions" value="1&#xF000;https://addons.mozilla.org/firefox/downloads/somefile.xpi&#xF000;2&#xF000;//path/to/xpi"/>
2444 ```
2445 OMA-URI:
2446 ```
2447 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/Extensions_Uninstall
2448 ```
2449 Value (string):
2450 ```
2451 <enabled/>
2452 <data id="Extensions" value="1&#xF000;bad_addon_id@mozilla.org"/>
2453 ```
2454 OMA-URI:
2455 ```
2456 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/Extensions_Locked
2457 ```
2458 Value (string):
2459 ```
2460 <enabled/>
2461 <data id="Extensions" value="1&#xF000;addon_id@mozilla.org"/>
2462 ```
2463 #### macOS
2464 ```
2465 <dict>
2466   <key>Extensions</key>
2467   <dict>
2468     <key>Install</key>
2469     <array>
2470       <string>https://addons.mozilla.org/firefox/downloads/somefile.xpi</string>
2471       <string>//path/to/xpi</string>
2472     </array>
2473     <key>Uninstall</key>
2474     <array>
2475       <string>bad_addon_id@mozilla.org</string>
2476     </array>
2477     <key>Locked</key>
2478     <array>
2479       <string>addon_id@mozilla.org</string>
2480     </array>
2481   </dict>
2482 </dict>
2483 ```
2484 #### policies.json
2485 ```
2486 {
2487   "policies": {
2488     "Extensions": {
2489       "Install": ["https://addons.mozilla.org/firefox/downloads/somefile.xpi", "//path/to/xpi"],
2490       "Uninstall": ["bad_addon_id@mozilla.org"],
2491       "Locked":  ["addon_id@mozilla.org"]
2492     }
2493   }
2494 }
2495 ```
2496 ### ExtensionSettings
2497 Manage all aspects of extensions. This policy is based heavily on the [Chrome policy](https://dev.chromium.org/administrators/policy-list-3/extension-settings-full) of the same name.
2498
2499 This policy maps an extension ID to its configuration. With an extension ID, the configuration will be applied to the specified extension only. A default configuration can be set for the special ID "*", which will apply to all extensions that don't have a custom configuration set in this policy.
2500
2501 To obtain an extension ID, install the extension and go to about:support. You will see the ID in the Extensions section. I've also created an extension that makes it easy to find the ID of extensions on AMO. You can download it [here](https://github.com/mkaply/queryamoid/releases/tag/v0.1).
2502
2503 The configuration for each extension is another dictionary that can contain the fields documented below.
2504
2505 | Name | Description |
2506 | --- | --- |
2507 | `installation_mode` | Maps to a string indicating the installation mode for the extension. The valid strings are `allowed`,`blocked`,`force_installed`, and `normal_installed`.
2508 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`allowed` | Allows the extension to be installed by the user. This is the default behavior. There is no need for an install_url; it will automatically be allowed based on the ID.
2509 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`blocked`| Blocks installation of the extension and removes it from the device if already installed.
2510 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`force_installed`| The extension is automatically installed and can't be removed by the user. This option is not valid for the default configuration and requires an install_url.
2511 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`normal_installed`| The extension is automatically installed but can be disabled by the user. This option is not valid for the default configuration and requires an install_url.
2512 | `install_url`| Maps to a URL indicating where Firefox can download a force_installed or normal_installed extension.  If installing from the local file system, use a [```file:///``` URL](https://en.wikipedia.org/wiki/File_URI_scheme). If installing from the addons.mozilla.org, use the following URL (substituting SHORT_NAME from the URL on AMO), https://addons.mozilla.org/firefox/downloads/latest/SHORT_NAME/latest.xpi. Languages packs are available from https://releases.mozilla.org/pub/firefox/releases/VERSION/PLATFORM/xpi/LANGUAGE.xpi. If you need to update the extension, you can change the name of the extension and it will be automatically updated. Extensions installed from file URLs will additional be updated when their internal version changes.
2513 | `install_sources` | A list of sources from which installing extensions is allowed. **This is unnecessary if you are only allowing the installation of certain extensions by ID.** Each item in this list is an extension-style match pattern. Users will be able to easily install items from any URL that matches an item in this list. Both the location of the *.xpi file and the page where the download is started from (i.e.  the referrer) must be allowed by these patterns. This setting can be used only for the default configuration.
2514 | `allowed_types` | This setting whitelists the allowed types of extension/apps that can be installed in Firefox. The value is a list of strings, each of which should be one of the following: "extension", "theme", "dictionary", "locale" This setting can be used only for the default configuration.
2515 | `blocked_install_message` | This maps to a string specifying the error message to display to users if they're blocked from installing an extension. This setting allows you to append text to the generic error message displayed when the extension is blocked. This could be be used to direct users to your help desk, explain why a particular extension is blocked, or something else. This setting can be used only for the default configuration.
2516 | `restricted_domains` | An array of domains on which content scripts can't be run. This setting can be used only for the default configuration.
2517 | `updates_disabled` | (Firefox 89, Firefox ESR 78.11) Boolean that indicates whether or not to disable automatic updates for an individual extension.
2518
2519 **Compatibility:** Firefox 69, Firefox ESR 68.1 (As of Firefox 85, Firefox ESR 78.7, installing a theme makes it the default.)\
2520 **CCK2 Equivalent:** N/A\
2521 **Preferences Affected:** N/A
2522
2523 #### Windows (GPO)
2524 Software\Policies\Mozilla\Firefox\ExtensionSettings (REG_MULTI_SZ) =
2525 ```
2526 {
2527   "*": {
2528     "blocked_install_message": "Custom error message.",
2529     "install_sources": ["about:addons","https://addons.mozilla.org/"],
2530     "installation_mode": "blocked",
2531     "allowed_types": ["extension"]
2532   },
2533   "uBlock0@raymondhill.net": {
2534     "installation_mode": "force_installed",
2535     "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
2536   },
2537   "https-everywhere@eff.org": {
2538     "installation_mode": "allowed"
2539   }
2540 }
2541 ```
2542 #### Windows (Intune)
2543 OMA-URI:
2544 ```
2545 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/ExtensionSettings
2546 ```
2547 Value (string):
2548 ```
2549 <enabled/>
2550 <data id="ExtensionSettings" value='
2551 {
2552   "*": {
2553     "blocked_install_message": "Custom error message.",
2554     "install_sources": ["about:addons","https://addons.mozilla.org/"],
2555     "installation_mode": "blocked",
2556     "allowed_types": ["extension"]
2557   },
2558   "uBlock0@raymondhill.net": {
2559     "installation_mode": "force_installed",
2560     "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
2561   },
2562     "https-everywhere@eff.org": {
2563     "installation_mode": "allowed"
2564   }
2565 }'/>
2566 ```
2567 #### macOS
2568 ```
2569 <dict>
2570   <key>ExtensionSettings</key>
2571   <dict>
2572     <key>*</key>
2573     <dict>
2574       <key>blocked_install_message</key>
2575       <string>Custom error message.</string>
2576       <key>install_sources</key>
2577       <array>
2578         <string>about:addons</string>
2579         <string>https://addons.mozilla.org/</string>
2580       </array>
2581       <key>installation_mode</key>
2582       <string>blocked</string>
2583       <key>allowed_types</key>
2584       <array>
2585         <string>extension</string>
2586       </array>
2587     </dict>
2588     <key>uBlock0@raymondhill.net</key>
2589     <dict>
2590       <key>installation_mode</key>
2591        <string>force_installed</string>
2592       <key>install_url</key>
2593       <string>https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi</string>
2594     </dict>
2595     <key>https-everywhere@eff.org</key>
2596     <dict>
2597       <key>installation_mode</key>
2598        <string>allowed</string>
2599     </dict>
2600   </dict>
2601 </dict>
2602 ```
2603 #### policies.json
2604 ```
2605 {
2606   "policies": {
2607     "ExtensionSettings": {
2608       "*": {
2609         "blocked_install_message": "Custom error message.",
2610         "install_sources": ["about:addons","https://addons.mozilla.org/"],
2611         "installation_mode": "blocked",
2612         "allowed_types": ["extension"]
2613       },
2614       "uBlock0@raymondhill.net": {
2615         "installation_mode": "force_installed",
2616         "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
2617       },
2618       "https-everywhere@eff.org": {
2619         "installation_mode": "allowed"
2620       }
2621     }
2622   }
2623 }
2624 ```
2625 ### ExtensionUpdate
2626 Control extension updates.
2627
2628 **Compatibility:** Firefox 67, Firefox ESR 60.7\
2629 **CCK2 Equivalent:** N/A\
2630 **Preferences Affected:** `extensions.update.enabled`
2631
2632 #### Windows (GPO)
2633 ```
2634 Software\Policies\Mozilla\Firefox\ExtensionUpdate = 0x1 | 0x0
2635 ```
2636 #### Windows (Intune)
2637 OMA-URI:
2638 ```
2639 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/ExtensionUpdate
2640 ```
2641 Value (string):
2642 ```
2643 <enabled/> or <disabled/>
2644 ```
2645 #### macOS
2646 ```
2647 <dict>
2648   <key>ExtensionUpdate</key>
2649   <true/> | <false/>
2650 </dict>
2651 ```
2652 #### policies.json
2653 ```
2654 {
2655   "policies": {
2656     "ExtensionUpdate": true | false
2657   }
2658 }
2659 ```
2660 ### FirefoxHome
2661 Customize the Firefox Home page.
2662
2663 **Compatibility:** Firefox 68, Firefox ESR 68 (SponsoredTopSites and SponsoredPocket were added in Firefox 95, Firefox ESR 91.4)
2664 **CCK2 Equivalent:** N/A\
2665 **Preferences Affected:** `browser.newtabpage.activity-stream.showSearch`, `browser.newtabpage.activity-stream.feeds.topsites`, `browser.newtabpage.activity-stream.feeds.section.highlights`, `browser.newtabpage.activity-stream.feeds.section.topstories`, `browser.newtabpage.activity-stream.feeds.snippets`, `browser.newtabpage.activity-stream.showSponsoredTopSites`, `browser.newtabpage.activity-stream.showSponsored`
2666
2667 #### Windows (GPO)
2668 ```
2669 Software\Policies\Mozilla\Firefox\FirefoxHome\Search = 0x1 | 0x0
2670 Software\Policies\Mozilla\Firefox\FirefoxHome\TopSites = 0x1 | 0x0
2671 Software\Policies\Mozilla\Firefox\FirefoxHome\SponsoredTopSites = 0x1 | 0x0
2672 Software\Policies\Mozilla\Firefox\FirefoxHome\Highlights = 0x1 | 0x0
2673 Software\Policies\Mozilla\Firefox\FirefoxHome\Pocket = 0x1 | 0x0
2674 Software\Policies\Mozilla\Firefox\FirefoxHome\SponsoredPocket = 0x1 | 0x0
2675 Software\Policies\Mozilla\Firefox\FirefoxHome\Snippets = 0x1 | 0x0
2676 Software\Policies\Mozilla\Firefox\FirefoxHome\Locked = 0x1 | 0x0
2677 ```
2678 #### Windows (Intune)
2679 OMA-URI:
2680 ```
2681 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/CustomizeFirefoxHome
2682 ```
2683 Value (string):
2684 ```
2685 <enabled/>
2686 <data id="FirefoxHome_Search"  value="true | false"/>
2687 <data id="FirefoxHome_TopSites"  value="true | false"/>
2688 <data id="FirefoxHome_SponsoredTopSites"  value="true | false"/>
2689 <data id="FirefoxHome_Highlights"  value="true | false"/>
2690 <data id="FirefoxHome_Pocket"  value="true | false"/>
2691 <data id="FirefoxHome_SponsoredPocket"  value="true | false"/>
2692 <data id="FirefoxHome_Snippets"  value="true | false"/>
2693 <data id="FirefoxHome_Locked"  value="true | false"/>
2694 ```
2695 #### macOS
2696 ```
2697 <dict>
2698   <key>FirefoxHome</key>
2699   <dict>
2700     <key>Search</key>
2701     <true/> | <false/>
2702     <key>TopSites</key>
2703     <true/> | <false/>
2704     <key>SponsoredTopSites</key>
2705     <true/> | <false/>
2706     <key>Highlights</key>
2707     <true/> | <false/>
2708     <key>Pocket</key>
2709     <true/> | <false/>
2710     <key>SponsoredPocket</key>
2711     <true/> | <false/>
2712     <key>Snippets</key>
2713     <true/> | <false/>
2714     <key>Locked</key>
2715     <true/> | <false/>
2716   </dict>
2717 </dict>
2718 ```
2719 #### policies.json
2720 ```
2721 {
2722   "policies": {
2723     "FirefoxHome": {
2724       "Search": true | false,
2725       "TopSites": true | false,
2726       "SponsoredTopSites": true | false,
2727       "Highlights": true | false,
2728       "Pocket": true | false,
2729       "SponsoredPocket": true | false,
2730       "Snippets": true | false,
2731       "Locked": true | false
2732     }
2733   }
2734 }
2735 ```
2736 ### FlashPlugin (Deprecated)
2737 Configure the default Flash plugin policy as well as origins for which Flash is allowed.
2738
2739 `Allow` is a list of origins where Flash are allowed.
2740
2741 `Block` is a list of origins where Flash is not allowed.
2742
2743 `Default` determines whether or not Flash is allowed by default.
2744
2745 `Locked` prevents the user from changing Flash preferences.
2746
2747 **Compatibility:** Firefox 60, Firefox ESR 60\
2748 **CCK2 Equivalent:** `permissions.plugin`\
2749 **Preferences Affected:** `plugin.state.flash`
2750
2751 #### Windows (GPO)
2752 ```
2753 Software\Policies\Mozilla\Firefox\FlashPlugin\Allow\1 = "https://example.org"
2754 Software\Policies\Mozilla\Firefox\FlashPlugin\Block\1 = "https://example.edu"
2755 Software\Policies\Mozilla\Firefox\FlashPlugin\Default = 0x1 | 0x0
2756 Software\Policies\Mozilla\Firefox\FlashPlugin\Locked = 0x1 | 0x0
2757 ```
2758 #### Windows (Intune)
2759 OMA-URI:
2760 ```
2761 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Flash/FlashPlugin_Allow
2762 ```
2763 Value (string):
2764 ```
2765 <enabled/>
2766 <data id="Permissions" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
2767 ```
2768 OMA-URI:
2769 ```
2770 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Flash/FlashPlugin_Locked
2771 ```
2772 Value (string):
2773 ```
2774 <enabled/> or <disabled/>
2775 ```
2776 OMA-URI:
2777 ```
2778 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Flash/FlashPlugin_Default
2779 ```
2780 Value (string):
2781 ```
2782 <enabled/> or <disabled/>
2783 ```
2784 #### macOS
2785 ```
2786 <dict>
2787   <key>FlashPlugin</key>
2788   <dict>
2789     <key>Allow</key>
2790     <array>
2791       <string>http://example.org</string>
2792     </array>
2793     <key>Block</key>
2794     <array>
2795       <string>http://example.edu</string>
2796     </array>
2797     <key>Default</key>
2798     <true/> | <false/>
2799     <key>Locked</key>
2800     <true/> | <false/>
2801   </dict>
2802 </dict>
2803 ```
2804 #### policies.json
2805 ```
2806 {
2807   "policies": {
2808     "FlashPlugin": {
2809       "Allow": ["http://example.org/"],
2810       "Block": ["http://example.edu/"],
2811       "Default": true | false,
2812       "Locked": true | false
2813     }
2814   }
2815 }
2816 ```
2817 ### Handlers
2818 Configure default application handlers. This policy is based on the internal format of `handlers.json`.
2819
2820 You can configure handlers based on a mime type (`mimeTypes`), a file's extension (`extensions`), or a protocol (`schemes`).
2821
2822 Within each handler type, you specify the given mimeType/extension/scheme as a key and use the following subkeys to describe how it is handled.
2823
2824 | Name | Description |
2825 | --- | --- |
2826 | `action`| Can be either `saveToDisk`, `useHelperApp`, `useSystemDefault`.
2827 | `ask` | If `true`, the user is asked if what they want to do with the file. If `false`, the action is taken without user intervention.
2828 | `handlers` | An array of handlers with the first one being the default. If you don't want to have a default handler, use an empty object for the first handler. Choose between path or uriTemplate.
2829 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`name` | The display name of the handler (might not be used).
2830 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`path`| The native path to the executable to be used.
2831 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`uriTemplate`| A url to a web based application handler. The URL must be https and contain a %s to be used for substitution.
2832
2833 **Compatibility:** Firefox 78, Firefox ESR 78\
2834 **CCK2 Equivalent:** N/A\
2835 **Preferences Affected:** N/A
2836
2837 #### Windows (GPO)
2838 Software\Policies\Mozilla\Firefox\Handlers (REG_MULTI_SZ) =
2839 ```
2840 {
2841   "mimeTypes": {
2842     "application/msword": {
2843       "action": "useSystemDefault",
2844       "ask": true | false
2845     }
2846   },
2847   "schemes": {
2848     "mailto": {
2849       "action": "useHelperApp",
2850       "ask": true | false,
2851       "handlers": [{
2852         "name": "Gmail",
2853         "uriTemplate": "https://mail.google.com/mail/?extsrc=mailto&url=%s"
2854       }]
2855     }
2856   },
2857   "extensions": {
2858     "pdf": {
2859       "action": "useHelperApp",
2860       "ask": true | false,
2861       "handlers": [{
2862         "name": "Adobe Acrobat",
2863         "path": "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32.exe"
2864       }]
2865     }
2866   }
2867 }
2868 ```
2869 #### Windows (Intune)
2870 OMA-URI:
2871 ```
2872 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Handlers
2873 ```
2874 Value (string):
2875 ```
2876 <enabled/>
2877 <data id="Handlers" value='
2878 {
2879   "mimeTypes": {
2880     "application/msword": {
2881       "action": "useSystemDefault",
2882       "ask": true | false
2883     }
2884   },
2885   "schemes": {
2886     "mailto": {
2887       "action": "useHelperApp",
2888       "ask": true | false,
2889       "handlers": [{
2890         "name": "Gmail",
2891         "uriTemplate": "https://mail.google.com/mail/?extsrc=mailto&amp;url=%s"
2892       }]
2893     }
2894   },
2895   "extensions": {
2896     "pdf": {
2897       "action": "useHelperApp",
2898       "ask": true | false,
2899       "handlers": [{
2900         "name": "Adobe Acrobat",
2901         "path": "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32.exe"
2902       }]
2903     }
2904   }
2905 }
2906 '/>
2907 ```
2908 #### macOS
2909 ```
2910 <dict>
2911   <key>Handlers</key>
2912   <dict>
2913     <key>mimeTypes</key>
2914     <dict>
2915       <key>application/msword</key>
2916       <dict>
2917         <key>action</key>
2918         <string>useSystemDefault</string>
2919         <key>ask</key>
2920         <true/> | <false/>
2921       </dict>
2922     </dict>
2923     <key>schemes</key>
2924     <dict>
2925       <key>mailto</key>
2926       <dict>
2927         <key>action</key>
2928         <string>useHelperApp</string>
2929         <key>ask</key>
2930         <true/> | <false/>
2931         <key>handlers</key>
2932         <array>
2933           <dict>
2934             <key>name</key>
2935             <string>Gmail</string>
2936             <key>uriTemplate</key>
2937             <string>https://mail.google.com/mail/?extsrc=mailto&url=%s</string>
2938           </dict>
2939         </array>
2940       </dict>
2941     </dict>
2942     <key>extensions</key>
2943     <dict>
2944       <key>pdf</key>
2945       <dict>
2946         <key>action</key>
2947         <string>useHelperApp</string>
2948         <key>ask</key>
2949         <true/> | <false/>
2950         <key>handlers</key>
2951         <array>
2952           <dict>
2953             <key>name</key>
2954             <string>Adobe Acrobat</string>
2955             <key>path</key>
2956             <string>/System/Applications/Preview.app</string>
2957           </dict>
2958         </array>
2959       </dict>
2960     </dict>
2961   </dict>
2962 </dict>
2963 ```
2964 #### policies.json
2965 ```
2966 {
2967   "policies": {
2968     "Handlers": {
2969       "mimeTypes": {
2970         "application/msword": {
2971           "action": "useSystemDefault",
2972           "ask": false
2973         }
2974       },
2975       "schemes": {
2976         "mailto": {
2977           "action": "useHelperApp",
2978           "ask": true | false,
2979           "handlers": [{
2980             "name": "Gmail",
2981             "uriTemplate": "https://mail.google.com/mail/?extsrc=mailto&url=%s"
2982           }]
2983         }
2984       },
2985       "extensions": {
2986         "pdf": {
2987           "action": "useHelperApp",
2988           "ask": true | false,
2989           "handlers": [{
2990             "name": "Adobe Acrobat",
2991             "path": "/usr/bin/acroread"
2992           }]
2993         }
2994       }
2995     }
2996   }
2997 }
2998 ```
2999 ### HardwareAcceleration
3000 Control hardware acceleration.
3001
3002 **Compatibility:** Firefox 60, Firefox ESR 60\
3003 **CCK2 Equivalent:** N/A\
3004 **Preferences Affected:** `layers.acceleration.disabled`
3005
3006 #### Windows (GPO)
3007 ```
3008 Software\Policies\Mozilla\Firefox\HardwareAcceleration = 0x1 | 0x0
3009 ```
3010 #### Windows (Intune)
3011 OMA-URI:
3012 ```
3013 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/HardwareAcceleration
3014 ```
3015 Value (string):
3016 ```
3017 <enabled/> or <disabled/>
3018 ```
3019 #### macOS
3020 ```
3021 <dict>
3022   <key>HardwareAcceleration</key>
3023   <true/> | <false/>
3024 </dict>
3025 ```
3026 #### policies.json
3027 ```
3028 {
3029   "policies": {
3030     "HardwareAcceleration": true | false
3031   }
3032 }
3033 ```
3034 ### Homepage
3035 Configure the default homepage and how Firefox starts.
3036
3037 `URL` is the default homepage.
3038
3039 `Locked` prevents the user from changing homepage preferences.
3040
3041 `Additional` allows for more than one homepage.
3042
3043 `StartPage` is how Firefox starts. The choices are no homepage, the default homepage or the previous session.
3044
3045 With Firefox 78, an additional option as added for `Startpage`, `homepage-locked`. If this is value is set for the Startpage, the user will always get the homepage at startup and cannot choose to restore their session.
3046
3047 **Compatibility:** Firefox 60, Firefox ESR 60 (StartPage was added in Firefox 60, Firefox ESR 60.4, homepage-locked added in Firefox 78)\
3048 **CCK2 Equivalent:** `homePage`,`lockHomePage`\
3049 **Preferences Affected:** `browser.startup.homepage`, `browser.startup.page`
3050
3051 #### Windows (GPO)
3052 ```
3053 Software\Policies\Mozilla\Firefox\Homepage\URL = "https://example.com"
3054 Software\Policies\Mozilla\Firefox\Homepage\Locked = 0x1 | 0x0
3055 Software\Policies\Mozilla\Firefox\Homepage\Additional\1 = "https://example.org"
3056 Software\Policies\Mozilla\Firefox\Homepage\Additional\2 = "https://example.edu"
3057 Software\Policies\Mozilla\Firefox\Homepage\StartPage = "none" | "homepage" | "previous-session" | "homepage-locked"
3058 ```
3059 #### Windows (Intune)
3060 OMA-URI:
3061 ```
3062 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageURL
3063 ```
3064 Value (string):
3065 ```
3066 <enabled/>
3067
3068 <data id="HomepageURL" value="https://example.com"/>
3069 <data id="HomepageLocked" value="true | false"/>
3070 ```
3071 OMA-URI:
3072 ```
3073 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageAdditional
3074 ```
3075 Value (string):
3076 ```
3077 <enabled/>
3078
3079 <data id="HomepageAdditional" value="1&#xF000;http://example.org&#xF000;2&#xF000;http://example.edu"/>
3080 ```
3081 OMA-URI:
3082 ```
3083 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageStartPage
3084 ```
3085 Value (string):
3086 ```
3087 <enabled/>
3088
3089 <data id="StartPage" value="none | homepage | previous-session"/>
3090 ```
3091 #### macOS
3092 ```
3093 <dict>
3094   <key>Homepage</key>
3095   <dict>
3096     <key>URL</key>
3097     <string>http://example.com</string>
3098     <key>Locked</key>
3099     <true/> | <false/>
3100     <key>Additional</key>
3101     <array>
3102       <string>http://example.org</string>
3103       <string>http://example.edu</string>
3104     </array>
3105     <key>StartPage</key>
3106     <string>none | homepage | previous-session | homepage-locked</string>
3107   </dict>
3108 </dict>
3109 ```
3110 #### policies.json
3111 ```
3112 {
3113   "policies": {
3114     "Homepage": {
3115       "URL": "http://example.com/",
3116       "Locked": true | false,
3117       "Additional": ["http://example.org/",
3118                      "http://example.edu/"],
3119       "StartPage": "none" | "homepage" | "previous-session" | "homepage-locked"
3120     }
3121   }
3122 }
3123 ```
3124 ### InstallAddonsPermission
3125 Configure the default extension install policy as well as origins for extension installs are allowed. This policy does not override turning off all extension installs.
3126
3127 `Allow` is a list of origins where extension installs are allowed.
3128
3129 `Default` determines whether or not extension installs are allowed by default.
3130
3131 **Compatibility:** Firefox 60, Firefox ESR 60\
3132 **CCK2 Equivalent:** `permissions.install`\
3133 **Preferences Affected:** `xpinstall.enabled`
3134
3135 #### Windows (GPO)
3136 ```
3137 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Allow\1 = "https://example.org"
3138 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Allow\2 = "https://example.edu"
3139 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Default = 0x1 | 0x0
3140 ```
3141 #### Windows (Intune)
3142 OMA-URI:
3143 ```
3144 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Addons/InstallAddonsPermission_Allow
3145 ```
3146 Value (string):
3147 ```
3148 <enabled/>
3149 <data id="Permissions" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
3150 ```
3151 OMA-URI:
3152 ```
3153 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Addons/InstallAddonsPermission_Default
3154 ```
3155 Value (string):
3156 ```
3157 <enabled/>
3158 ```
3159 #### macOS
3160 ```
3161 <dict>
3162   <key>InstallAddonsPermission</key>
3163   <dict>
3164     <key>Allow</key>
3165     <array>
3166       <string>http://example.org</string>
3167       <string>http://example.edu</string>
3168     </array>
3169     <key>Default</key>
3170     <true/> | <false/>
3171   </dict>
3172 </dict>
3173 ```
3174 #### policies.json
3175 ```
3176 {
3177   "policies": {
3178     "InstallAddonsPermission": {
3179       "Allow": ["http://example.org/",
3180                 "http://example.edu/"],
3181       "Default": true | false
3182     }
3183   }
3184 }
3185 ```
3186 ### LegacyProfiles
3187 Disable the feature enforcing a separate profile for each installation.
3188
3189 If this policy set to true, Firefox will not try to create different profiles for installations of Firefox in different directories. This is the equivalent of the MOZ_LEGACY_PROFILES environment variable.
3190
3191 If this policy set to false, Firefox will create a new profile for each unique installation of Firefox.
3192
3193 This policy only work on Windows via GPO (not policies.json).
3194
3195 **Compatibility:** Firefox 70, Firefox ESR 68.2 (Windows only, GPO only)\
3196 **CCK2 Equivalent:** N/A\
3197 **Preferences Affected:** N/A
3198
3199 #### Windows (GPO)
3200 ```
3201 Software\Policies\Mozilla\Firefox\LegacyProfiles = = 0x1 | 0x0
3202 ```
3203 #### Windows (Intune)
3204 OMA-URI:
3205 ```
3206 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/LegacyProfiles
3207 ```
3208 Value (string):
3209 ```
3210 <enabled/> or <disabled/>
3211 ```
3212 ### LegacySameSiteCookieBehaviorEnabled
3213 Enable default legacy SameSite cookie behavior setting.
3214
3215 If this policy is set to true, it to revert all cookies to legacy SameSite behavior.
3216
3217 **Compatibility:** Firefox 96\
3218 **CCK2 Equivalent:** N/A\
3219 **Preferences Affected:** N/A
3220
3221 #### Windows (GPO)
3222 ```
3223 Software\Policies\Mozilla\Firefox\LegacySameSiteCookieBehaviorEnabled = = 0x1 | 0x0
3224 ```
3225 #### Windows (Intune)
3226 OMA-URI:
3227 ```
3228 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/LegacySameSiteCookieBehaviorEnabled
3229 ```
3230 Value (string):
3231 ```
3232 <enabled/> or <disabled/>
3233 ```
3234 #### macOS
3235 ```
3236 <dict>
3237   <key>LegacySameSiteCookieBehaviorEnabled</key>
3238   <true/> | <false/>
3239 </dict>
3240 ```
3241 #### policies.json
3242 ```
3243 {
3244   "policies": {
3245     "LegacySameSiteCookieBehaviorEnabled": true | false
3246 }
3247 ```
3248 ### LegacySameSiteCookieBehaviorEnabledForDomainList
3249 Revert to legacy SameSite behavior for cookies on specified sites.
3250
3251 If this policy is set to true, cookies set for domains in this list will revert to legacy SameSite behavior.
3252
3253 **Compatibility:** Firefox 96\
3254 **CCK2 Equivalent:** N/A\
3255 **Preferences Affected:** N/A
3256
3257 #### Windows (GPO)
3258 ```
3259 Software\Policies\Mozilla\Firefox\LegacySameSiteCookieBehaviorEnabledForDomainList\1 = "example.org"
3260 Software\Policies\Mozilla\Firefox\LegacySameSiteCookieBehaviorEnabledForDomainList\2 = "example.edu"
3261 ```
3262 #### Windows (Intune)
3263 OMA-URI:
3264 ```
3265 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/LegacySameSiteCookieBehaviorEnabledForDomainList
3266 ```
3267 Value (string):
3268 ```
3269 <enabled/>
3270 <data id="LegacySameSiteCookieBehaviorEnabledForDomainList" value="1&#xF000;example.org&#xF000;2&#xF000;example.edu"/>
3271 ```
3272 #### macOS
3273 ```
3274 <dict>
3275   <key>LegacySameSiteCookieBehaviorEnabledForDomainList</key>
3276   <array>
3277     <string>example.org</string>
3278     <string>example.edu</string>
3279   </array>
3280 </dict>
3281 ```
3282 #### policies.json
3283 ```
3284 {
3285   "policies": {
3286     "LegacySameSiteCookieBehaviorEnabledForDomainList": ["example.org",
3287                                                          "example.edu"]
3288   }
3289 }
3290 ```
3291 ### LocalFileLinks
3292 Enable linking to local files by origin.
3293
3294 **Compatibility:** Firefox 68, Firefox ESR 68\
3295 **CCK2 Equivalent:** N/A\
3296 **Preferences Affected:** `capability.policy.localfilelinks.*`
3297
3298 #### Windows (GPO)
3299 ```
3300 Software\Policies\Mozilla\Firefox\LocalFileLinks\1 = "https://example.org"
3301 Software\Policies\Mozilla\Firefox\LocalFileLinks\2 = "https://example.edu"
3302 ```
3303 #### Windows (Intune)
3304 OMA-URI:
3305 ```
3306 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/LocalFileLinks
3307 ```
3308 Value (string):
3309 ```
3310 <enabled/>
3311 <data id="LocalFileLinks" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
3312 ```
3313 #### macOS
3314 ```
3315 <dict>
3316   <key>LocalFileLinks</key>
3317   <array>
3318     <string>http://example.org</string>
3319     <string>http://example.edu</string>
3320   </array>
3321 </dict>
3322 ```
3323 #### policies.json
3324 ```
3325 {
3326   "policies": {
3327     "LocalFileLinks": ["http://example.org/",
3328                        "http://example.edu/"]
3329   }
3330 }
3331 ```
3332 ### ManagedBookmarks
3333 Configures a list of bookmarks managed by an administrator that cannot be changed by the user.
3334
3335 The bookmarks are only added as a button on the personal toolbar. They are not in the bookmarks folder.
3336
3337 The syntax of this policy is exactly the same as the [Chrome ManagedBookmarks policy](https://cloud.google.com/docs/chrome-enterprise/policies/?policy=ManagedBookmarks). The schema is:
3338 ```
3339 {
3340  "items": {
3341   "id": "BookmarkType",
3342   "properties": {
3343    "children": {
3344     "items": {
3345      "$ref": "BookmarkType"
3346     },
3347     "type": "array"
3348    },
3349    "name": {
3350     "type": "string"
3351    },
3352    "toplevel_name": {
3353     "type": "string"
3354    },
3355    "url": {
3356     "type": "string"
3357    }
3358   },
3359   "type": "object"
3360  },
3361  "type": "array"
3362 }
3363 ```
3364 **Compatibility:** Firefox 83, Firefox ESR 78.5\
3365 **CCK2 Equivalent:** N/A\
3366 **Preferences Affected:** N/A
3367
3368 #### Windows (GPO)
3369 Software\Policies\Mozilla\Firefox\ManagedBookmarks (REG_MULTI_SZ) =
3370 ```
3371 [
3372   {
3373     "toplevel_name": "My managed bookmarks folder"
3374   },
3375   {
3376     "url": "example.com",
3377     "name": "Example"
3378   },
3379   {
3380     "name": "Mozilla links",
3381     "children": [
3382       {
3383         "url": "https://mozilla.org",
3384         "name": "Mozilla.org"
3385       },
3386       {
3387         "url": "https://support.mozilla.org/",
3388         "name": "SUMO"
3389       }
3390     ]
3391   }
3392 ]
3393 ```
3394 #### Windows (Intune)
3395 OMA-URI:
3396 ```
3397 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/ManagedBookmarks
3398 ```
3399 Value (string):
3400 ```
3401 <enabled/>
3402 <data id="JSON" value='
3403 [
3404   {
3405     "toplevel_name": "My managed bookmarks folder"
3406   },
3407   {
3408     "url": "example.com",
3409     "name": "Example"
3410   },
3411   {
3412     "name": "Mozilla links",
3413     "children": [
3414       {
3415         "url": "https://mozilla.org",
3416         "name": "Mozilla.org"
3417       },
3418       {
3419         "url": "https://support.mozilla.org/",
3420         "name": "SUMO"
3421       }
3422     ]
3423   }
3424 ]'/>
3425 ```
3426 #### macOS
3427 ```
3428 <dict>
3429   <key>ManagedBookmarks</key>
3430   <array>
3431     <dict>
3432       <key>toplevel_name</key>
3433       <string>My managed bookmarks folder</string>
3434       <dict>
3435         <key>url</key>
3436         <string>example.com</string>
3437         <key>name</key>
3438         <string>Example</string>
3439       </dict>
3440       <dict>
3441       <key>name</key>
3442       <string>Mozilla links</string>
3443       <key>children</key>
3444       <array>
3445         <dict>
3446           <key>url</key>
3447           <string>https://mozilla.org</string>
3448           <key>name</key>
3449           <string>Mozilla</string>
3450         </dict>
3451         <dict>
3452           <key>url</key>
3453           <string>https://support.mozilla.org/</string>
3454           <key>name</key>
3455           <string>SUMO</string>
3456         </dict>
3457       </array>
3458     </dict>
3459   </array>
3460 </dict>
3461 ```
3462 #### policies.json
3463 ```
3464 {
3465   "policies": {
3466     "ManagedBookmarks": [
3467       {
3468         "toplevel_name": "My managed bookmarks folder"
3469       },
3470       {
3471         "url": "example.com",
3472         "name": "Example"
3473       },
3474       {
3475         "name": "Mozilla links",
3476         "children": [
3477           {
3478             "url": "https://mozilla.org",
3479             "name": "Mozilla.org"
3480           },
3481           {
3482             "url": "https://support.mozilla.org/",
3483             "name": "SUMO"
3484           }
3485         ]
3486       }
3487     ]
3488   }
3489 }
3490 ```
3491 ### ManualAppUpdateOnly
3492
3493 Switch to manual updates only.
3494
3495 If this policy is enabled:
3496  1. The user will never be prompted to install updates
3497  2. Firefox will not check for updates in the background, though it will check automatically when an update UI is displayed (such as the one in the About dialog). This check will be used to show "Update to version X" in the UI, but will not automatically download the update or prompt the user to update in any other way.
3498  3. The update UI will work as expected, unlike when using DisableAppUpdate.
3499
3500 This policy is primarily intended for advanced end users, not for enterprises.
3501
3502 **Compatibility:** Firefox 87\
3503 **CCK2 Equivalent:** N/A\
3504 **Preferences Affected:** N/A
3505
3506 #### policies.json
3507 ```
3508 {
3509   "policies": {
3510     "ManualAppUpdateOnly": true | false
3511   }
3512 }
3513 ```
3514 ### NetworkPrediction
3515 Enable or disable network prediction (DNS prefetching).
3516
3517 **Compatibility:** Firefox 67, Firefox ESR 60.7\
3518 **CCK2 Equivalent:** N/A\
3519 **Preferences Affected:** `network.dns.disablePrefetch`, `network.dns.disablePrefetchFromHTTPS`
3520
3521 #### Windows (GPO)
3522 ```
3523 Software\Policies\Mozilla\Firefox\NetworkPrediction = 0x1 | 0x0
3524 ```
3525 #### Windows (Intune)
3526 OMA-URI:
3527 ```
3528 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NetworkPrediction
3529 ```
3530 Value (string):
3531 ```
3532 <enabled/> or <disabled/>
3533 ```
3534 #### macOS
3535 ```
3536 <dict>
3537   <key>NetworkPrediction</key>
3538   <true/> | <false/>
3539 </dict>
3540 ```
3541 #### policies.json
3542 ```
3543 {
3544   "policies": {
3545     "NetworkPrediction": true | false
3546 }
3547 ```
3548 ### NewTabPage
3549 Enable or disable the New Tab page.
3550
3551 **Compatibility:** Firefox 68, Firefox ESR 68\
3552 **CCK2 Equivalent:** N/A\
3553 **Preferences Affected:** `browser.newtabpage.enabled`
3554
3555 #### Windows (GPO)
3556 ```
3557 Software\Policies\Mozilla\Firefox\NewTabPage = 0x1 | 0x0
3558 ```
3559 #### Windows (Intune)
3560 OMA-URI:
3561 ```
3562 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NewTabPage
3563 ```
3564 Value (string):
3565 ```
3566 <enabled/> or <disabled/>
3567 ```
3568 #### macOS
3569 ```
3570 <dict>
3571   <key>NewTabPage</key>
3572   <true/> | <false/>
3573 </dict>
3574 ```
3575 #### policies.json
3576 ```
3577 {
3578   "policies": {
3579     "NewTabPage": true | false
3580 }
3581 ```
3582 ### NoDefaultBookmarks
3583 Disable the creation of default bookmarks.
3584
3585 This policy is only effective if the user profile has not been created yet.
3586
3587 **Compatibility:** Firefox 60, Firefox ESR 60\
3588 **CCK2 Equivalent:** `removeDefaultBookmarks`\
3589 **Preferences Affected:** N/A
3590
3591 #### Windows (GPO)
3592 ```
3593 Software\Policies\Mozilla\Firefox\NoDefaultBookmarks = 0x1 | 0x0
3594 ```
3595 #### Windows (Intune)
3596 OMA-URI:
3597 ```
3598 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NoDefaultBookmarks
3599 ```
3600 Value (string):
3601 ```
3602 <enabled/> or <disabled/>
3603 ```
3604 #### macOS
3605 ```
3606 <dict>
3607   <key>NoDefaultBookmarks</key>
3608   <true/> | <false/>
3609 </dict>
3610 ```
3611 #### policies.json
3612 ```
3613 {
3614   "policies": {
3615     "NoDefaultBookmarks": true | false
3616   }
3617 }
3618 ```
3619 ### OfferToSaveLogins
3620 Control whether or not Firefox offers to save passwords.
3621
3622 **Compatibility:** Firefox 60, Firefox ESR 60\
3623 **CCK2 Equivalent:** `dontRememberPasswords`\
3624 **Preferences Affected:** `signon.rememberSignons`
3625
3626 #### Windows (GPO)
3627 ```
3628 Software\Policies\Mozilla\Firefox\OfferToSaveLogins = 0x1 | 0x0
3629 ```
3630 #### Windows (Intune)
3631 OMA-URI:
3632 ```
3633 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OfferToSaveLogins
3634 ```
3635 Value (string):
3636 ```
3637 <enabled/> or <disabled/>
3638 ```
3639 #### macOS
3640 ```
3641 <dict>
3642   <key>OfferToSaveLogins</key>
3643   <true/> | <false/>
3644 </dict>
3645 ```
3646 #### policies.json
3647 ```
3648 {
3649   "policies": {
3650     "OfferToSaveLogins": true | false
3651   }
3652 }
3653 ```
3654 ### OfferToSaveLoginsDefault
3655 Sets the default value of signon.rememberSignons without locking it.
3656
3657 **Compatibility:** Firefox 70, Firefox ESR 60.2\
3658 **CCK2 Equivalent:** `dontRememberPasswords`\
3659 **Preferences Affected:** `signon.rememberSignons`
3660
3661 #### Windows (GPO)
3662 ```
3663 Software\Policies\Mozilla\Firefox\OfferToSaveLoginsDefault = 0x1 | 0x0
3664 ```
3665 #### Windows (Intune)
3666 OMA-URI:
3667 ```
3668 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OfferToSaveLoginsDefault
3669 ```
3670 Value (string):
3671 ```
3672 <enabled/> or <disabled/>
3673 ```
3674 #### macOS
3675 ```
3676 <dict>
3677   <key>OfferToSaveLoginsDefault</key>
3678   <true/> | <false/>
3679 </dict>
3680 ```
3681 #### policies.json
3682 ```
3683 {
3684   "policies": {
3685     "OfferToSaveLoginsDefault": true | false
3686   }
3687 }
3688 ```
3689 ### OverrideFirstRunPage
3690 Override the first run page. If the value is an empty string (""), the first run page is not displayed.
3691
3692 Starting with Firefox 83, Firefox ESR 78.5, you can also specify multiple URLS separated by a vertical bar (|).
3693
3694 **Compatibility:** Firefox 60, Firefox ESR 60\
3695 **CCK2 Equivalent:** `welcomePage`,`noWelcomePage`\
3696 **Preferences Affected:** `startup.homepage_welcome_url`
3697
3698 #### Windows (GPO)
3699 ```
3700 Software\Policies\Mozilla\Firefox\OverrideFirstRunPage = "http://example.org"
3701 ```
3702 #### Windows (Intune)
3703 OMA-URI:
3704 ```
3705 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OverrideFirstRunPage
3706 ```
3707 Value (string):
3708 ```
3709 <enabled/>
3710 <data id="OverridePage" value="https://example.com"/>
3711 ```
3712 #### macOS
3713 ```
3714 <dict>
3715   <key>OverrideFirstRunPage</key>
3716   <string>http://example.org</string>
3717 </dict>
3718 ```
3719 #### policies.json
3720 ```
3721 {
3722   "policies": {
3723     "OverrideFirstRunPage": "http://example.org"
3724   }
3725 }
3726 ```
3727 ### OverridePostUpdatePage
3728 Override the upgrade page. If the value is an empty string (""), no extra pages are displayed when Firefox is upgraded.
3729
3730 **Compatibility:** Firefox 60, Firefox ESR 60\
3731 **CCK2 Equivalent:** `upgradePage`,`noUpgradePage`\
3732 **Preferences Affected:** `startup.homepage_override_url`
3733
3734 #### Windows (GPO)
3735 ```
3736 Software\Policies\Mozilla\Firefox\OverridePostUpdatePage = "http://example.org"
3737 ```
3738 #### Windows (Intune)
3739 OMA-URI:
3740 ```
3741 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OverridePostUpdatePage
3742 ```
3743 Value (string):
3744 ```
3745 <enabled/>
3746 <data id="OverridePage" value="https://example.com"/>
3747 ```
3748 #### macOS
3749 ```
3750 <dict>
3751   <key>OverridePostUpdatePage</key>
3752   <string>http://example.org</string>
3753 </dict>
3754 ```
3755 #### policies.json
3756 ```
3757 {
3758   "policies": {
3759     "OverridePostUpdatePage": "http://example.org"
3760   }
3761 }
3762 ```
3763 ### PasswordManagerEnabled
3764 Remove access to the password manager via preferences and blocks about:logins on Firefox 70.
3765
3766 **Compatibility:** Firefox 70, Firefox ESR 60.2\
3767 **CCK2 Equivalent:** N/A\
3768 **Preferences Affected:** `pref.privacy.disable_button.view_passwords`
3769
3770 #### Windows (GPO)
3771 ```
3772 Software\Policies\Mozilla\Firefox\PasswordManagerEnabled = 0x1 | 0x0
3773 ```
3774 #### Windows (Intune)
3775 OMA-URI:
3776 ```
3777 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PasswordManagerEnabled
3778 ```
3779 Value (string):
3780 ```
3781 <enabled/> or <disabled/>
3782 ```
3783 #### macOS
3784 ```
3785 <dict>
3786   <key>PasswordManagerEnabled</key>
3787   <true/> | <false/>
3788 </dict>
3789 ```
3790 #### policies.json
3791 ```
3792 {
3793   "policies": {
3794     "PasswordManagerEnabled": true | false
3795   }
3796 }
3797 ```
3798 ### PDFjs
3799 Disable or configure PDF.js, the built-in PDF viewer.
3800
3801 If `Enabled` is set to false, the built-in PDF viewer is disabled.
3802
3803 If `EnablePermissions` is set to true, the built-in PDF viewer will honor document permissions like preventing the copying of text.
3804
3805 Note: DisableBuiltinPDFViewer has not been deprecated. You can either continue to use it, or switch to using PDFjs->Enabled to disable the built-in PDF viewer. This new permission was added because we needed a place for PDFjs->EnabledPermissions.
3806
3807 **Compatibility:** Firefox 77, Firefox ESR 68.9\
3808 **CCK2 Equivalent:** N/A\
3809 **Preferences Affected:** `pdfjs.diabled`, `pdfjs.enablePermissions`
3810
3811 #### Windows (GPO)
3812 ```
3813 Software\Policies\Mozilla\Firefox\PDFjs\Enabled = 0x1 | 0x0
3814 Software\Policies\Mozilla\Firefox\PDFjs\EnablePermissions = 0x1 | 0x0
3815 ```
3816 #### Windows (Intune)
3817 OMA-URI:
3818 ```
3819 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PDFjs/PDFjs_Enabled
3820 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PDFjs/PDFjs_EnablePermissions
3821 ```
3822 Value (string):
3823 ```
3824 <enabled/>or <disabled/>
3825 ```
3826 #### macOS
3827 ```
3828 <dict>
3829   <key>PDFjs</key>
3830   <dict>
3831     <key>Enabled</key>
3832     <true/> | <false/>
3833     <key>EnablePermissions</key>
3834     <true/> | <false/>
3835   </dict>
3836 </dict>
3837 ```
3838 #### policies.json
3839 ```
3840 {
3841   "policies": {
3842     "PDFjs": {
3843       "Enabled": true | false,
3844       "EnablePermissions": true | false
3845     }
3846   }
3847 }
3848 ```
3849 ### Permissions
3850 Set permissions associated with camera, microphone, location, notifications, autoplay, and virtual reality. Because these are origins, not domains, entries with unique ports must be specified separately. This explicitly means that it is not possible to add wildcards. See examples below.
3851
3852 `Allow` is a list of origins where the feature is allowed.
3853
3854 `Block` is a list of origins where the feature is not allowed.
3855
3856 `BlockNewRequests` determines whether or not new requests can be made for the feature.
3857
3858 `Locked` prevents the user from changing preferences for the feature.
3859
3860 `Default` specifies the default value for Autoplay. block-audio-video is not supported on Firefox ESR 68.
3861
3862 **Compatibility:** Firefox 62, Firefox ESR 60.2 (Autoplay added in Firefox 74, Firefox ESR 68.6, Autoplay Default/Locked added in Firefox 76, Firefox ESR 68.8, VirtualReality added in Firefox 80, Firefox ESR 78.2)\
3863 **CCK2 Equivalent:** N/A\
3864 **Preferences Affected:** `permissions.default.camera`, `permissions.default.microphone`, `permissions.default.geo`, `permissions.default.desktop-notification`, `media.autoplay.default`, `permissions.default.xr`
3865
3866 #### Windows (GPO)
3867 ```
3868 Software\Policies\Mozilla\Firefox\Permissions\Camera\Allow\1 = "https://example.org"
3869 Software\Policies\Mozilla\Firefox\Permissions\Camera\Allow\2 = "https://example.org:1234"
3870 Software\Policies\Mozilla\Firefox\Permissions\Camera\Block\1 = "https://example.edu"
3871 Software\Policies\Mozilla\Firefox\Permissions\Camera\BlockNewRequests = 0x1 | 0x0
3872 Software\Policies\Mozilla\Firefox\Permissions\Camera\Locked = 0x1 | 0x0
3873 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Allow\1 = "https://example.org"
3874 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Block\1 = "https://example.edu"
3875 Software\Policies\Mozilla\Firefox\Permissions\Microphone\BlockNewRequests = 0x1 | 0x0
3876 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Locked = 0x1 | 0x0
3877 Software\Policies\Mozilla\Firefox\Permissions\Location\Allow\1 = "https://example.org"
3878 Software\Policies\Mozilla\Firefox\Permissions\Location\Block\1 = "https://example.edu"
3879 Software\Policies\Mozilla\Firefox\Permissions\Location\BlockNewRequests = 0x1 | 0x0
3880 Software\Policies\Mozilla\Firefox\Permissions\Location\Locked = 0x1 | 0x0
3881 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Allow\1 = "https://example.org"
3882 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Block\1 = "https://example.edu"
3883 Software\Policies\Mozilla\Firefox\Permissions\Notifications\BlockNewRequests = 0x1 | 0x0
3884 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Locked = 0x1 | 0x0
3885 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Allow\1 = "https://example.org"
3886 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Block\1 = "https://example.edu"
3887 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Default = "allow-audio-video" | "block-audio" | "block-audio-video"
3888 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Locked = 0x1 | 0x0
3889 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\Allow\1 = "https://example.org"
3890 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\Block\1 = "https://example.edu"
3891 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\BlockNewRequests = 0x1 | 0x0
3892 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\Locked = 0x1 | 0x0
3893 ```
3894 #### Windows (Intune)
3895 OMA-URI:
3896 ```
3897 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Location/Location_BlockNewRequests
3898 ```
3899 Value (string):
3900 ```
3901 <enabled/> or <disabled/>
3902 ```
3903 OMA-URI:
3904 ```
3905 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Location/Location_Locked
3906 ```
3907 Value (string):
3908 ```
3909 <enabled/> or <disabled/>
3910 ```
3911 OMA-URI:
3912 ```
3913 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_Allow
3914 ```
3915 Value (string):
3916 ```
3917 <enabled/>
3918 <data id="Permissions" value="1&#xF000;https://example.org"/>
3919 ```
3920 OMA-URI:
3921 ```
3922 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_BlockNewRequests
3923 ```
3924 Value (string):
3925 ```
3926 <enabled/> or <disabled/>
3927 ```
3928 OMA-URI:
3929 ```
3930 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_Locked
3931 ```
3932 Value (string):
3933 ```
3934 <enabled/> or <disabled/>
3935 ```
3936 OMA-URI:
3937 ```
3938 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Allow
3939 ```
3940 Value (string):
3941 ```
3942 <enabled/>
3943 <data id="Permissions" value="1&#xF000;https://example.org"/>
3944 ```
3945 OMA-URI:
3946 ```
3947 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Block
3948 ```
3949 Value (string):
3950 ```
3951 <enabled/>
3952 <data id="Permissions" value="1&#xF000;https://example.edu"/>
3953 ```
3954 OMA-URI:
3955 ```
3956 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Default
3957 ```
3958 Value (string):
3959 ```
3960 <enabled/>
3961 <data id="Autoplay_Default" value="allow-audio-video | block-audio | block-audio-video"/>
3962 ```
3963 OMA-URI:
3964 ```
3965 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Locked
3966 ```
3967 Value (string):
3968 ```
3969 <enabled/> or <disabled/>
3970 ```
3971 OMA-URI:
3972 ```
3973 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_Allow
3974 ```
3975 Value (string):
3976 ```
3977 <enabled/>
3978 <data id="Permissions" value="1&#xF000;https://example.org"/>
3979 ```
3980 OMA-URI:
3981 ```
3982 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_Block
3983 ```
3984 Value (string):
3985 ```
3986 <enabled/>
3987 <data id="Permissions" value="1&#xF000;https://example.edu"/>
3988 ```
3989 OMA-URI:
3990 ```
3991 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_BlockNewRequests
3992 ```
3993 Value (string):
3994 ```
3995 <enabled/> or <disabled/>
3996 ```
3997 OMA-URI:
3998 ```
3999 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_Locked
4000 ```
4001 Value (string):
4002 ```
4003 <enabled/> or <disabled/>
4004 ```
4005 #### macOS
4006 ```
4007 <dict>
4008   <key>Permissions</key>
4009   <dict>
4010     <key>Camera</key>
4011     <dict>
4012       <key>Allow</key>
4013       <array>
4014         <string>https://example.org</string>
4015         <string>https://example.org:1234</string>
4016       </array>
4017       <key>Block</key>
4018       <array>
4019         <string>https://example.edu</string>
4020       </array>
4021       <key>BlockNewRequests</key>
4022       <true/> | <false/>
4023       <key>Locked</key>
4024       <true/> | <false/>
4025     </dict>
4026     <key>Microphone</key>
4027     <dict>
4028       <key>Allow</key>
4029       <array>
4030         <string>https://example.org</string>
4031       </array>
4032       <key>Block</key>
4033       <array>
4034         <string>https://example.edu</string>
4035       </array>
4036       <key>BlockNewRequests</key>
4037       <true/> | <false/>
4038       <key>Locked</key>
4039       <true/> | <false/>
4040     </dict>
4041     <key>Location</key>
4042     <dict>
4043       <key>Allow</key>
4044       <array>
4045         <string>https://example.org</string>
4046       </array>
4047       <key>Block</key>
4048       <array>
4049         <string>https://example.edu</string>
4050       </array>
4051       <key>BlockNewRequests</key>
4052       <true/> | <false/>
4053       <key>Locked</key>
4054       <true/> | <false/>
4055     </dict>
4056     <key>Notifications</key>
4057     <dict>
4058       <key>Allow</key>
4059       <array>
4060         <string>https://example.org</string>
4061       </array>
4062       <key>Block</key>
4063       <array>
4064         <string>https://example.edu</string>
4065       </array>
4066       <key>BlockNewRequests</key>
4067       <true/>
4068       <key>Locked</key>
4069       <true/>
4070     </dict>
4071     <key>Autoplay</key>
4072     <dict>
4073       <key>Allow</key>
4074       <array>
4075         <string>https://example.org</string>
4076       </array>
4077       <key>Block</key>
4078       <array>
4079         <string>https://example.edu</string>
4080       </array>
4081       <key>Default</key>
4082       <string>allow-audio-video | block-audio | block-audio-video</string>
4083       <key>Locked</key>
4084       <true/> | <false/>
4085     </dict>
4086   </dict>
4087 </dict>
4088 ```
4089 #### policies.json
4090 ```
4091 {
4092   "policies": {
4093     "Permissions": {
4094       "Camera": {
4095         "Allow": ["https://example.org","https://example.org:1234"],
4096         "Block": ["https://example.edu"],
4097         "BlockNewRequests": true | false,
4098         "Locked": true | false
4099       },
4100       "Microphone": {
4101         "Allow": ["https://example.org"],
4102         "Block": ["https://example.edu"],
4103         "BlockNewRequests": true | false,
4104         "Locked": true | false
4105       },
4106       "Location": {
4107         "Allow": ["https://example.org"],
4108         "Block": ["https://example.edu"],
4109         "BlockNewRequests": true | false,
4110         "Locked": true | false
4111       },
4112       "Notifications": {
4113         "Allow": ["https://example.org"],
4114         "Block": ["https://example.edu"],
4115         "BlockNewRequests": true | false,
4116         "Locked": true | false
4117       },
4118       "Autoplay": {
4119         "Allow": ["https://example.org"],
4120         "Block": ["https://example.edu"],
4121         "Default": "allow-audio-video" | "block-audio" | "block-audio-video",
4122         "Locked": true | false
4123       }
4124     }
4125   }
4126 }
4127 ```
4128 ### PictureInPicture
4129
4130 Enable or disable Picture-in-Picture as well as prevent the user from enabling or disabling it (Locked).
4131
4132 **Compatibility:** Firefox 78, Firefox ESR 78\
4133 **CCK2 Equivalent:** N/A\
4134 **Preferences Affected:** `media.videocontrols.picture-in-picture.video-toggle.enabled`
4135
4136 #### Windows (GPO)
4137 ```
4138 Software\Policies\Mozilla\Firefox\PictureInPicture\Enabled = 0x1 | 0x0
4139 Software\Policies\Mozilla\Firefox\PictureInPicture\Locked = 0x1 | 0x0
4140
4141 ```
4142 #### Windows (Intune)
4143 OMA-URI:
4144 ```
4145 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PictureInPicture/PictureInPicture_Enabled
4146 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PictureInPicture/PictureInPicture_Locked
4147 ```
4148 Value (string):
4149 ```
4150 <enabled/> or <disabled/>
4151 ```
4152 #### macOS
4153 ```
4154 <dict>
4155   <key>PictureInPicture</key>
4156   <dict>
4157     <key>Enabled</key>
4158     <true/> | <false/>
4159     <key>Locked</key>
4160     <true/> | <false/>
4161   </dict>
4162 </dict>
4163 ```
4164 #### policies.json
4165 ```
4166 {
4167   "policies": {
4168     "PictureInPicture": {
4169       "Enabled": true | false,
4170       "Locked": true | false
4171     }
4172   }
4173 }
4174 ```
4175 ### PopupBlocking
4176 Configure the default pop-up window policy as well as origins for which pop-up windows are allowed.
4177
4178 `Allow` is a list of origins where popup-windows are allowed.
4179
4180 `Default` determines whether or not pop-up windows are allowed by default.
4181
4182 `Locked` prevents the user from changing pop-up preferences.
4183
4184 **Compatibility:** Firefox 60, Firefox ESR 60\
4185 **CCK2 Equivalent:** `permissions.popup`\
4186 **Preferences Affected:** `dom.disable_open_during_load`
4187
4188 #### Windows (GPO)
4189 ```
4190 Software\Policies\Mozilla\Firefox\PopupBlocking\Allow\1 = "https://example.org"
4191 Software\Policies\Mozilla\Firefox\PopupBlocking\Allow\2 = "https://example.edu"
4192 Software\Policies\Mozilla\Firefox\PopupBlocking\Default = 0x1 | 0x0
4193 Software\Policies\Mozilla\Firefox\PopupBlocking\Locked = 0x1 | 0x0
4194 ```
4195 #### Windows (Intune)
4196 OMA-URI:
4197 ```
4198 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Allow
4199 ```
4200 Value (string):
4201 ```
4202 <enabled/>
4203 <data id="Permissions" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
4204 ```
4205 OMA-URI:
4206 ```
4207 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Default
4208 ```
4209 Value (string):
4210 ```
4211 <enabled/> or <disabled/>
4212 ```
4213 OMA-URI:
4214 ```
4215 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Locked
4216 ```
4217 Value (string):
4218 ```
4219 <enabled/> or <disabled/>
4220 ```
4221 #### macOS
4222 ```
4223 <dict>
4224   <key>PopupBlocking</key>
4225   <dict>
4226     <key>Allow</key>
4227     <array>
4228       <string>http://example.org</string>
4229       <string>http://example.edu</string>
4230     </array>
4231     <key>Default</key>
4232     <true/> | <false/>
4233     <key>Locked</key>
4234     <true/> | <false/>
4235   </dict>
4236 </dict>
4237 ```
4238 #### policies.json
4239 ```
4240 {
4241   "policies": {
4242     "PopupBlocking": {
4243       "Allow": ["http://example.org/",
4244                 "http://example.edu/"],
4245       "Default": true | false,
4246       "Locked": true | false
4247     }
4248   }
4249 }
4250 ```
4251 ### Preferences
4252 Set and lock preferences.
4253
4254 **NOTE** On Windows, in order to use this policy, you must clear all settings in the old **Preferences (Deprecated)** section.
4255
4256 Previously you could only set and lock a subset of preferences. Starting with Firefox 81 and Firefox ESR 78.3 you can set many more preferences. You can also set default preferences, user preferences and you can clear preferences.
4257
4258 Preferences that start with the following prefixes are supported:
4259 ```
4260 accessibility.
4261 app.update.* (Firefox 86, Firefox 78.8)
4262 browser.
4263 datareporting.policy.
4264 dom.
4265 extensions.
4266 general.autoScroll (Firefox 83, Firefox ESR 78.5)
4267 general.smoothScroll (Firefox 83, Firefox ESR 78.5)
4268 geo.
4269 gfx.
4270 intl.
4271 keyword.enabled (Firefox 95, Firefox ESR 91.4)
4272 layers.
4273 layout.
4274 media.
4275 network.
4276 pdfjs. (Firefox 84, Firefox ESR 78.6)
4277 places.
4278 print.
4279 signon. (Firefox 83, Firefox ESR 78.5)
4280 spellchecker. (Firefox 84, Firefox ESR 78.6)
4281 toolkit.legacyUserProfileCustomizations.stylesheets (Firefox 95, Firefox ESR 91.4)
4282 ui.
4283 widget.
4284 ```
4285 as well as the following security preferences:
4286 | Preference | Type | Default
4287 | --- | --- | ---
4288 | security.default_personal_cert | string | Ask Every Time
4289 | &nbsp;&nbsp;&nbsp;&nbsp;If set to Select Automatically, Firefox automatically chooses the default personal certificate.
4290 | security.insecure_connection_text.enabled | bool | false
4291 | &nbsp;&nbsp;&nbsp;&nbsp;If set to true, adds the words "Not Secure" for insecure sites.
4292 | security.insecure_connection_text.pbmode.enabled | bool | false
4293 | &nbsp;&nbsp;&nbsp;&nbsp;If set to true, adds the words "Not Secure" for insecure sites in private browsing.
4294 | security.insecure_field_warning.contextual.enabled | bool | true
4295 | &nbsp;&nbsp;&nbsp;&nbsp;If set to false, remove the warning for inscure login fields.
4296 | security.mixed_content.block_active_content | boolean | true
4297 | &nbsp;&nbsp;&nbsp;&nbsp;If false, mixed active content (HTTP and HTTPS) is not blocked.
4298 | security.osclientcerts.autoload | boolean | false
4299 | &nbsp;&nbsp;&nbsp;&nbsp;If true, client certificates are loaded from the operating system certificate store.
4300 | security.ssl.errorReporting.enabled | boolean | true
4301 | &nbsp;&nbsp;&nbsp;&nbsp;If false, SSL errors cannot be sent to Mozilla.
4302 | security.tls.enable_0rtt_data | boolean | true
4303 | &nbsp;&nbsp;&nbsp;&nbsp;If false, TLS early data is turned off (Firefox 93, Firefox 91.2, Firefox 78.15).
4304 | security.tls.hello_downgrade_check | boolean | true
4305 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the TLS 1.3 downgrade check is disabled.
4306 | security.tls.version.enable-deprecated | boolean | false
4307 | &nbsp;&nbsp;&nbsp;&nbsp;If true, browser will accept TLS 1.0. and TLS 1.1 (Firefox 86, Firefox 78.8).
4308 | security.warn_submit_secure_to_insecure | boolean | true
4309 | &nbsp;&nbsp;&nbsp;&nbsp;If false, no warning is shown when submitting a form from https to http.
4310 &nbsp;
4311
4312 Using the preference as the key, set the `Value` to the corresponding preference value.
4313
4314 `Status` can be "default", "locked", "user" or "clear"
4315
4316 Default preferences can be modified by the user.
4317
4318 If a value is locked, it is also set as the default.
4319
4320 User preferences persist across invocations of Firefox. It is the equivalent of a user setting the preference. They are most useful when a preference is needed very early in startup so it can't be set as default by policy. An example of this is ```toolkit.legacyUserProfileCustomizations.stylesheets```.
4321
4322 User preferences persist even if the policy is removed, so if you need to remove them, you should use the clear policy.
4323
4324 See the examples below for more detail.
4325
4326 IMPORTANT: Make sure you're only setting a particular preference using this mechanism and not some other way.
4327
4328 Status
4329 **Compatibility:** Firefox 81, Firefox ESR 78.3\
4330 **CCK2 Equivalent:** `preferences`\
4331 **Preferences Affected:** Many
4332
4333 #### Windows (GPO)
4334 Software\Policies\Mozilla\Firefox\Preferences (REG_MULTI_SZ) =
4335 ```
4336 {
4337   "accessibility.force_disabled": {
4338     "Value": 1,
4339     "Status": "default"
4340   },
4341   "browser.cache.disk.parent_directory": {
4342     "Value": "SOME_NATIVE_PATH",
4343     "Status": "user"
4344   },
4345   "browser.tabs.warnOnClose": {
4346     "Value": false,
4347     "Status": "locked"
4348   }
4349 }
4350 ```
4351 #### Windows (Intune)
4352 OMA-URI:
4353 ```
4354 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Preferences
4355 ```
4356 Value (string):
4357 ```
4358 <enabled/>
4359 <data id="JSON" value='
4360 {
4361   "accessibility.force_disabled": {
4362     "Value": 1,
4363     "Status": "default"
4364   },
4365   "browser.cache.disk.parent_directory": {
4366     "Value": "SOME_NATIVE_PATH",
4367     "Status": "user"
4368   },
4369   "browser.tabs.warnOnClose": {
4370     "Value": false,
4371     "Status": "locked"
4372   }
4373 }'/>
4374 ```
4375 #### macOS
4376 ```
4377 <dict>
4378   <key>Preferences</key>
4379   <dict>
4380     <key>accessibility.force_disabled</key>
4381     <dict>
4382       <key>Value</key>
4383       <integer>1</integer>
4384       <key>Status</key>
4385       <string>default</string>
4386     </dict>
4387     <key>browser.cache.disk.parent_directory</key>
4388     <dict>
4389       <key>Value</key>
4390       <string>SOME_NATIVE_PATH</string>
4391       <key>Status</key>
4392       <string>user</string>
4393     </dict>
4394     <key>browser.tabs.warnOnClose</key>
4395     <dict>
4396       <key>Value</key>
4397       <false/>
4398       <key>Status</key>
4399       <string>locked</string>
4400     </dict>
4401   </dict>
4402 </dict>
4403 ```
4404 #### policies.json
4405 ```
4406 {
4407   "policies": {
4408     "Preferences": {
4409       "accessibility.force_disabled": {
4410         "Value": 1,
4411         "Status": "default"
4412       },
4413       "browser.cache.disk.parent_directory": {
4414         "Value": "SOME_NATIVE_PATH",
4415         "Status": "user"
4416       },
4417       "browser.tabs.warnOnClose": {
4418         "Value": false,
4419         "Status": "locked"
4420       }
4421     }
4422   }
4423 }
4424 ```
4425 ### Preferences (Deprecated)
4426 Set and lock certain preferences.
4427
4428 **Compatibility:** See below\
4429 **CCK2 Equivalent:** `preferences`\
4430 **Preferences Affected:** See below
4431
4432 | Preference | Type | Compatibility | Default
4433 | --- | --- | --- | ---
4434 | accessibility.force_disabled | integer | Firefox 70, Firefox ESR 68.2 | 0
4435 | &nbsp;&nbsp;&nbsp;&nbsp;If set to 1, platform accessibility is disabled.
4436 | app.update.auto (Deprecated - Switch to AppAutoUpdate policy) | boolean | Firefox 68, Firefox ESR 68 | true
4437 | &nbsp;&nbsp;&nbsp;&nbsp;If false, Firefox doesn't automatically install update.
4438 | browser.bookmarks.autoExportHTML | boolean | Firefox 70, Firefox ESR 68.2 | false
4439 | &nbsp;&nbsp;&nbsp;&nbsp;If true, bookmarks are exported on shutdown.
4440 | browser.bookmarks.file | string | Firefox 70, Firefox ESR 68.2 | N/A
4441 | &nbsp;&nbsp;&nbsp;&nbsp;If set, the name of the file where bookmarks are exported and imported.
4442 | browser.bookmarks.restore_default_bookmarks | boolean | Firefox 70, Firefox ESR 68.2 | N/A
4443 | &nbsp;&nbsp;&nbsp;&nbsp;If true, bookmarks are restored to their defaults.
4444 | browser.cache.disk.enable | boolean | Firefox 68, Firefox ESR 68 | true
4445 | &nbsp;&nbsp;&nbsp;&nbsp;If false, don't store cache on the hard drive.
4446 | ~browser.cache.disk.parent_directory~ | string | Firefox 68, Firefox ESR 68 | Profile temporary directory
4447 | &nbsp;&nbsp;&nbsp;&nbsp;~If set, changes the location of the disk cache.~ This policy doesn't work. It's being worked on.
4448 | browser.fixup.dns_first_for_single_words | boolean | Firefox 68, Firefox ESR 68 | false
4449 | &nbsp;&nbsp;&nbsp;&nbsp;If true, single words are sent to DNS, not directly to search.
4450 | browser.newtabpage.activity-stream.default.sites | string | Firefox 72, ESR 68.4 | Locale dependent
4451 | &nbsp;&nbsp;&nbsp;&nbsp;If set, a list of URLs to use as the default top sites on the new tab page. Due to Firefox limitations, search sites can't be added. In addition, sites with the same name but different TLDs (example.org/example.com) will not display properly.
4452 | browser.places.importBookmarksHTML | boolean | Firefox 70, Firefox ESR 68.2
4453 | &nbsp;&nbsp;&nbsp;&nbsp;If true, bookmarks are always imported on startup.
4454 | browser.safebrowsing.phishing.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
4455 | &nbsp;&nbsp;&nbsp;&nbsp;If false, phishing protection is not enabled (Not recommended)
4456 | browser.safebrowsing.malware.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
4457 | &nbsp;&nbsp;&nbsp;&nbsp;If false, malware protection is not enabled (Not recommended)
4458 | browser.search.update | boolean | Firefox 68, Firefox ESR 68 | true
4459 | &nbsp;&nbsp;&nbsp;&nbsp;If false, updates for search engines are not checked.
4460 | browser.slowStartup.notificationDisabled | boolean | Firefox 70, Firefox ESR 68.2 | false
4461 | &nbsp;&nbsp;&nbsp;&nbsp;If true, a notification isn't shown if startup is slow.
4462 | browser.tabs.warnOnClose | boolean | Firefox 68, Firefox ESR 68 | true
4463 | &nbsp;&nbsp;&nbsp;&nbsp;If false, there is no warning when the browser is closed.
4464 | browser.taskbar.previews.enable | boolean | Firefox 70, Firefox ESR 68.2 (Windows only) | false
4465 | &nbsp;&nbsp;&nbsp;&nbsp;If true, tab previews are shown in the Windows taskbar.
4466 | browser.urlbar.suggest.bookmark | boolean | Firefox 68, Firefox ESR 68 | true
4467 | &nbsp;&nbsp;&nbsp;&nbsp;If false, bookmarks aren't suggested when typing in the URL bar.
4468 | browser.urlbar.suggest.history | boolean | Firefox 68, Firefox ESR 68 | true
4469 | &nbsp;&nbsp;&nbsp;&nbsp;If false, history isn't suggested when typing in the URL bar.
4470 | browser.urlbar.suggest.openpage | boolean | Firefox 68, Firefox ESR 68 | true
4471 | &nbsp;&nbsp;&nbsp;&nbsp;If false, open tabs aren't suggested when typing in the URL bar.
4472 | datareporting.policy.dataSubmissionPolicyBypassNotification | boolean | Firefox 68, Firefox ESR 68 | false
4473 | &nbsp;&nbsp;&nbsp;&nbsp;If true, don't show the privacy policy tab on first run.
4474 | dom.allow_scripts_to_close_windows | boolean | Firefox 70, Firefox ESR 68.2 | false
4475 | &nbsp;&nbsp;&nbsp;&nbsp;If false, web page can close windows.
4476 | dom.disable_window_flip | boolean | Firefox 68, Firefox ESR 68 | true
4477 | &nbsp;&nbsp;&nbsp;&nbsp;If false, web pages can focus and activate windows.
4478 | dom.disable_window_move_resize | boolean | Firefox 68, Firefox ESR 68 | false
4479 | &nbsp;&nbsp;&nbsp;&nbsp;If true, web pages can't move or resize windows.
4480 | dom.event.contextmenu.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4481 | &nbsp;&nbsp;&nbsp;&nbsp;If false, web pages can't override context menus.
4482 | dom.keyboardevent.keypress.hack.dispatch_non_printable_keys.addl | string | Firefox 68, Firefox ESR 68 | N/A
4483 | &nbsp;&nbsp;&nbsp;&nbsp;See https://support.mozilla.org/en-US/kb/dom-events-changes-introduced-firefox-66
4484 | dom.keyboardevent.keypress.hack.use_legacy_keycode_and_charcode.addl | string | Firefox 68, Firefox ESR 68 | N/A
4485 | &nbsp;&nbsp;&nbsp;&nbsp;See https://support.mozilla.org/en-US/kb/dom-events-changes-introduced-firefox-66
4486 | dom.xmldocument.load.enabled | boolean | Firefox ESR 68.5 | true.
4487 | &nbsp;&nbsp;&nbsp;&nbsp;If false, XMLDocument.load is not available.
4488 | dom.xmldocument.async.enabled | boolean | Firefox ESR 68.5 | true
4489 | &nbsp;&nbsp;&nbsp;&nbsp;If false, XMLDocument.async is not available.
4490 | extensions.blocklist.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
4491 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the extensions blocklist is not used (Not recommended)
4492 | extensions.getAddons.showPane | boolean | Firefox 68, Firefox ESR 68 | N/A
4493 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the Recommendations tab is not displayed in the Add-ons Manager.
4494 | extensions.htmlaboutaddons.recommendations.enabled | boolean | Firefox 72, Firefox ESR 68.4 | true
4495 | &nbsp;&nbsp;&nbsp;&nbsp;If false, recommendations are not shown on the Extensions tab in the Add-ons Manager.
4496 | geo.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
4497 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the geolocation API is disabled. | Language dependent
4498 | intl.accept_languages | string | Firefox 70, Firefox ESR 68.2
4499 | &nbsp;&nbsp;&nbsp;&nbsp;If set, preferred language for web pages.
4500 | media.eme.enabled (Deprecated - Switch to EncryptedMediaExtensions policy) | boolean | Firefox 70, Firefox ESR 68.2 | true
4501 | &nbsp;&nbsp;&nbsp;&nbsp;If false, Encrypted Media Extensions are not enabled.
4502 | media.gmp-gmpopenh264.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4503 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the OpenH264  plugin is not downloaded.
4504 | media.gmp-widevinecdm.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4505 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the Widevine plugin is not downloaded.
4506 | media.peerconnection.enabled | boolean | Firefox 72, Firefox ESR 68.4 | true
4507 | &nbsp;&nbsp;&nbsp;&nbsp;If false, WebRTC is disabled
4508 | media.peerconnection.ice.obfuscate_host_addresses.whitelist (Deprecated) | string | Firefox 72, Firefox ESR 68.4 | N/A
4509 | &nbsp;&nbsp;&nbsp;&nbsp;If set, a list of domains for which mDNS hostname obfuscation is
4510 disabled
4511 | media.peerconnection.ice.obfuscate_host_addresses.blocklist | string | Firefox 79, Firefox ESR 78.1 | N/A
4512 | &nbsp;&nbsp;&nbsp;&nbsp;If set, a list of domains for which mDNS hostname obfuscation is
4513 disabled
4514 | network.dns.disableIPv6 | boolean | Firefox 68, Firefox ESR 68 | false
4515 | &nbsp;&nbsp;&nbsp;&nbsp;If true, IPv6 DNS lokoups are disabled.
4516 | network.IDN_show_punycode | boolean | Firefox 68, Firefox ESR 68 | false
4517 | &nbsp;&nbsp;&nbsp;&nbsp;If true, display the punycode version of internationalized domain names.
4518 | places.history.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4519 | &nbsp;&nbsp;&nbsp;&nbsp;If false, history is not enabled.
4520 | print.save_print_settings | boolean | Firefox 70, Firefox ESR 68.2 | true
4521 | &nbsp;&nbsp;&nbsp;&nbsp;If false, print settings are not saved between jobs.
4522 | security.default_personal_cert | string | Firefox 68, Firefox ESR 68 | Ask Every Time
4523 | &nbsp;&nbsp;&nbsp;&nbsp;If set to Select Automatically, Firefox automatically chooses the default personal certificate.
4524 | security.mixed_content.block_active_content | boolean | Firefox 70, Firefox ESR 68.2 | true
4525 | &nbsp;&nbsp;&nbsp;&nbsp;If false, mixed active content (HTTP and HTTPS) is not blocked.
4526 | security.osclientcerts.autoload | boolean | Firefox 72 (Windows), Firefox 75 (macOS)  | false
4527 | &nbsp;&nbsp;&nbsp;&nbsp;If true, client certificates are loaded from the operating system certificate store.
4528 | security.ssl.errorReporting.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4529 | &nbsp;&nbsp;&nbsp;&nbsp;If false, SSL errors cannot be sent to Mozilla.
4530 | security.tls.hello_downgrade_check | boolean | Firefox 72, Firefox ESR 68.4 | true
4531 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the TLS 1.3 downgrade check is disabled.
4532 | ui.key.menuAccessKeyFocuses | boolean | Firefox 68, Firefox ESR 68 | true
4533 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the Alt key doesn't show the menubar on Windows.
4534 | widget.content.gtk-theme-override | string | Firefox 72, Firefox ESR 68.4 (Linux only) | N/A
4535 | &nbsp;&nbsp;&nbsp;&nbsp;If set, overrides the GTK theme for widgets.
4536 #### Windows (GPO)
4537 ```
4538 Software\Policies\Mozilla\Firefox\Preferences\boolean_preference_name = 0x1 | 0x0
4539 Software\Policies\Mozilla\Firefox\Preferences\string_preference_name = "string_value"
4540 ```
4541 #### Windows (Intune)
4542 OMA-URI: (periods are replaced by underscores)
4543 ```
4544 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Preferences/boolean_preference_name
4545 ```
4546 Value (string):
4547 ```
4548 <enabled/> or <disabled/>
4549 ```
4550 OMA-URI: (periods are replaced by underscores)
4551 ```
4552 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Preferences/string_preference_name
4553 ```
4554 Value (string):
4555 ```
4556 <enabled/>
4557 <data id="Preferences_String" value="string_value"/>
4558 ```
4559 #### macOS
4560 ```
4561 <dict>
4562   <key>Preferences</key>
4563   <dict>
4564     <key>boolean_preference_name</key>
4565     <true/> | <false/>
4566     <key>string_preference_name</key>
4567     <string>string_value</string>
4568   </dict>
4569 </dict>
4570 ```
4571 #### policies.json
4572 ```
4573 {
4574   "policies": {
4575     "Preferences": {
4576       "boolean_preference_name": true | false,
4577       "string_preference_name": "string_value"
4578     }
4579   }
4580 }
4581 ```
4582 ### PrimaryPassword
4583 Require or prevent using a primary (formerly master) password.
4584
4585 If this value is true, a primary password is required. If this value is false, it works the same as if [`DisableMasterPasswordCreation`](#disablemasterpasswordcreation) was true and removes the primary password functionality.
4586
4587 If both DisableMasterPasswordCreation and PrimaryPassword are used, DisableMasterPasswordCreation takes precedent.
4588
4589 **Compatibility:** Firefox 79, Firefox ESR 78.1\
4590 **CCK2 Equivalent:** `noMasterPassword`\
4591 **Preferences Affected:** N/A
4592
4593 #### Windows (GPO)
4594 ```
4595 Software\Policies\Mozilla\Firefox\PrimaryPassword = 0x1 | 0x0
4596 ```
4597 #### Windows (Intune)
4598 OMA-URI:
4599 ```
4600 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PrimaryPassword
4601 ```
4602 Value (string):
4603 ```
4604 <enabled/> or <disabled/>
4605 ```
4606 #### macOS
4607 ```
4608 <dict>
4609   <key>PrimaryPassword</key>
4610   <true/> | <false/>
4611 </dict>
4612 ```
4613 #### policies.json
4614 ```
4615 {
4616   "policies": {
4617     "PrimaryPassword": true | false
4618   }
4619 }
4620 ```
4621 ### PromptForDownloadLocation
4622 Ask where to save each file before downloading.
4623
4624 **Compatibility:** Firefox 68, Firefox ESR 68\
4625 **CCK2 Equivalent:** N/A\
4626 **Preferences Affected:** `browser.download.useDownloadDir`
4627
4628 #### Windows (GPO)
4629 ```
4630 Software\Policies\Mozilla\Firefox\PromptForDownloadLocation = 0x1 | 0x0
4631 ```
4632 #### Windows (Intune)
4633 OMA-URI:
4634 ```
4635 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PromptForDownloadLocation
4636 ```
4637 Value (string):
4638 ```
4639 <enabled/> or <disabled/>
4640 ```
4641 #### macOS
4642 ```
4643 <dict>
4644   <key>PromptForDownloadLocation</key>
4645   <true/> | <false/>
4646 </dict>
4647 ```
4648 #### policies.json
4649 ```
4650 {
4651   "policies": {
4652     "PromptForDownloadLocation": true | false
4653   }
4654 }
4655 ```
4656 ### Proxy
4657 Configure proxy settings. These settings correspond to the connection settings in Firefox preferences.
4658 To specify ports, append them to the hostnames with a colon (:).
4659
4660 `Mode` is the proxy method being used.
4661
4662 `Locked` is whether or not proxy settings can be changed.
4663
4664 `HTTPProxy` is the HTTP proxy server.
4665
4666 `UseHTTPProxyForAllProtocols` is whether or not the HTTP proxy should be used for all other proxies.
4667
4668 `SSLProxy` is the SSL proxy server.
4669
4670 `FTPProxy` is the FTP proxy server.
4671
4672 `SOCKSProxy` is the SOCKS proxy server
4673
4674 `SOCKSVersion` is the SOCKS version (4 or 5)
4675
4676 `Passthrough` is list of hostnames or IP addresses that will not be proxied. Use `<local>` to bypass proxying for all hostnames which do not contain periods.
4677
4678 `AutoConfigURL` is a  URL for proxy configuration (only used if Mode is autoConfig).
4679
4680 `AutoLogin` means do not prompt for authentication if password is saved.
4681
4682 `UseProxyForDNS` to use proxy DNS when using SOCKS v5.
4683
4684 **Compatibility:** Firefox 60, Firefox ESR 60\
4685 **CCK2 Equivalent:** `networkProxy*`\
4686 **Preferences Affected:** `network.proxy.type`, `network.proxy.autoconfig_url`, `network.proxy.socks_remote_dns`, `signon.autologin.proxy`, `network.proxy.socks_version`, `network.proxy.no_proxies_on`, `network.proxy.share_proxy_settings`, `network.proxy.http`, `network.proxy.http_port`, `network.proxy.ftp`, `network.proxy.ftp_port`, `network.proxy.ssl`, `network.proxy.ssl_port`, `network.proxy.socks`, `network.proxy.socks_port`
4687
4688 #### Windows (GPO)
4689 ```
4690 Software\Policies\Mozilla\Firefox\Proxy\Mode = "none" | "system" | "manual" | "autoDetect" | "autoConfig"
4691 Software\Policies\Mozilla\Firefox\Proxy\Locked = 0x1 | 0x0
4692 Software\Policies\Mozilla\Firefox\=Proxy\HTTPProxy = https://httpproxy.example.com
4693 Software\Policies\Mozilla\Firefox\Proxy\UseHTTPProxyForAllProtocols = 0x1 | 0x0
4694 Software\Policies\Mozilla\Firefox\Proxy\SSLProxy = https://sslproxy.example.com
4695 Software\Policies\Mozilla\Firefox\Proxy\FTPProxy = https://ftpproxy.example.com
4696 Software\Policies\Mozilla\Firefox\Proxy\SOCKSProxy = https://socksproxy.example.com
4697 Software\Policies\Mozilla\Firefox\Proxy\SOCKSVersion = 0x4 | 0x5
4698 Software\Policies\Mozilla\Firefox\Proxy\Passthrough = <local>
4699 Software\Policies\Mozilla\Firefox\Proxy\AutoConfigURL = URL_TO_AUTOCONFIG
4700 Software\Policies\Mozilla\Firefox\Proxy\AutoLogin = 0x1 | 0x0
4701 Software\Policies\Mozilla\Firefox\Proxy\UseProxyForDNS = 0x1 | 0x0
4702 ```
4703 #### Windows (Intune)
4704 OMA-URI:
4705 ```
4706 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Proxy
4707 ```
4708 Value (string):
4709 ```
4710 <enabled/>
4711 <data id="ProxyLocked" value="true | false"/>
4712 <data id="ConnectionType" value="none | system | manual | autoDetect | autoConfig"/>
4713 <data id="HTTPProxy" value="https://httpproxy.example.com"/>
4714 <data id="UseHTTPProxyForAllProtocols" value="true | false"/>
4715 <data id="SSLProxy" value="https://sslproxy.example.com"/>
4716 <data id="FTPProxy" value="https://ftpproxy.example.com"/>
4717 <data id="SOCKSProxy" value="https://socksproxy.example.com"/>
4718 <data id="SOCKSVersion" value="4 | 5"/>
4719 <data id="AutoConfigURL" value="URL_TO_AUTOCONFIG"/>
4720 <data id="Passthrough" value="<local>"/>
4721 <data id="AutoLogin" value="true | false"/>
4722 <data id="UseProxyForDNS" value="true | false"/>
4723 ```
4724 #### macOS
4725 ```
4726 <dict>
4727   <key>Proxy</key>
4728   <dict>
4729     <key>Mode</key>
4730     <string>none | system | manual | autoDetect | autoConfig</string>
4731     <key>Locked</key>
4732     <true> | </false>
4733     <key>HTTPProxy</key>
4734     <string>https://httpproxy.example.com</string>
4735     <key>UseHTTPProxyForAllProtocols</key>
4736     <true> | </false>
4737     <key>SSLProxy</key>
4738     <string>https://sslproxy.example.com</string>
4739     <key>FTPProxy</key>
4740     <string>https://ftpproxy.example.com</string>
4741     <key>SOCKSProxy</key>
4742     <string>https://socksproxy.example.com</string>
4743     <key>SOCKSVersion</key>
4744     <string>4 | 5</string>
4745     <key>Passthrough</key>
4746     <string>&lt;local>&gt;</string>
4747     <key>AutoConfigURL</key>
4748     <string>URL_TO_AUTOCONFIG</string>
4749     <key>AutoLogin</key>
4750     <true> | </false>
4751     <key>UseProxyForDNS</key>
4752     <true> | </false>
4753   </dict>
4754 </dict>
4755 ```
4756 #### policies.json
4757 ```
4758 {
4759   "policies": {
4760     "Proxy": {
4761       "Mode": "none" | "system" | "manual" | "autoDetect" | "autoConfig",
4762       "Locked": true | false,
4763       "HTTPProxy": "hostname",
4764       "UseHTTPProxyForAllProtocols": true | false,
4765       "SSLProxy": "hostname",
4766       "FTPProxy": "hostname",
4767       "SOCKSProxy": "hostname",
4768       "SOCKSVersion": 4 | 5,
4769       "Passthrough": "<local>",
4770       "AutoConfigURL": "URL_TO_AUTOCONFIG",
4771       "AutoLogin": true | false,
4772       "UseProxyForDNS": true | false
4773     }
4774   }
4775 }
4776 ```
4777 ### RequestedLocales
4778 Set the the list of requested locales for the application in order of preference. It will cause the corresponding language pack to become active.
4779
4780 Note: For Firefox 68, this can now be a string so that you can specify an empty value.
4781
4782 **Compatibility:** Firefox 64, Firefox ESR 60.4, Updated in Firefox 68, Firefox ESR 68\
4783 **CCK2 Equivalent:** N/A\
4784 **Preferences Affected:** N/A
4785 #### Windows (GPO)
4786 ```
4787 Software\Policies\Mozilla\Firefox\RequestedLocales\1 = "de"
4788 Software\Policies\Mozilla\Firefox\RequestedLocales\2 = "en-US"
4789
4790 or
4791
4792 Software\Policies\Mozilla\Firefox\RequestedLocales = "de,en-US"
4793 ```
4794 #### Windows (Intune)
4795 OMA-URI:
4796 ```
4797 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/RequestedLocalesString
4798 ```
4799 Value (string):
4800 ```
4801 <enabled/>
4802 <data id="Preferences_String" value="de,en-US"/>
4803 ```
4804 #### macOS
4805 ```
4806 <dict>
4807   <key>RequestedLocales</key>
4808   <array>
4809     <string>de</string>
4810     <string>en-US</string>
4811   </array>
4812 </dict>
4813
4814 or
4815
4816 <dict>
4817   <key>RequestedLocales</key>
4818   <string>de,en-US</string>
4819 </dict>
4820
4821 ```
4822 #### policies.json
4823 ```
4824 {
4825   "policies": {
4826     "RequestedLocales": ["de", "en-US"]
4827   }
4828 }
4829
4830 or
4831
4832 {
4833   "policies": {
4834     "RequestedLocales": "de,en-US"
4835   }
4836 }
4837 ```
4838 <a name="SanitizeOnShutdown"></a>
4839
4840 ### SanitizeOnShutdown (Selective)
4841 Clear data on shutdown. Choose from Cache, Cookies, Download History, Form & Search History, Browsing History, Active Logins, Site Preferences and Offline Website Data.
4842
4843 Previously, these values were always locked. Starting with Firefox 74 and Firefox ESR 68.6, you can use the `Locked` option to either keep the values unlocked (set it to false), or lock only the values you set (set it to true). If you want the old behavior of locking everything, do not set `Locked` at all.
4844
4845 **Compatibility:** Firefox 68, Firefox ESR 68 (Locked added in 74/68.6)\
4846 **CCK2 Equivalent:** N/A\
4847 **Preferences Affected:** `privacy.sanitize.sanitizeOnShutdown`, `privacy.clearOnShutdown.cache`, `privacy.clearOnShutdown.cookies`, `privacy.clearOnShutdown.downloads`, `privacy.clearOnShutdown.formdata`, `privacy.clearOnShutdown.history`, `privacy.clearOnShutdown.sessions`, `privacy.clearOnShutdown.siteSettings`, `privacy.clearOnShutdown.offlineApps`
4848 #### Windows (GPO)
4849 ```
4850 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Cache = 0x1 | 0x0
4851 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Cookies = 0x1 | 0x0
4852 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Downloads = 0x1 | 0x0
4853 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\FormData = 0x1 | 0x0
4854 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\History = 0x1 | 0x0
4855 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Sessions = 0x1 | 0x0
4856 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\SiteSettings = 0x1 | 0x0
4857 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\OfflineApps = 0x1 | 0x0
4858 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Locked = 0x1 | 0x0
4859 ```
4860 #### Windows (Intune)
4861 OMA-URI:
4862 ```
4863 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/A_SanitizeOnShutdown_Cache
4864 ```
4865 Value (string):
4866 ```
4867 <enabled/> or <disabled/>
4868 ```
4869 OMA-URI:
4870 ```
4871 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/B_SanitizeOnShutdown_Cookies
4872 ```
4873 Value (string):
4874 ```
4875 <enabled/> or <disabled/>
4876 ```
4877 OMA-URI:
4878 ```
4879 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/C_SanitizeOnShutdown_Downloads
4880 ```
4881 Value (string):
4882 ```
4883 <enabled/> or <disabled/>
4884 ```
4885 OMA-URI:
4886 ```
4887 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/D_SanitizeOnShutdown_FormData
4888 ```
4889 Value (string):
4890 ```
4891 <enabled/> or <disabled/>
4892 ```
4893 OMA-URI:
4894 ```
4895 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/E_SanitizeOnShutdown_History
4896 ```
4897 Value (string):
4898 ```
4899 <enabled/> or <disabled/>
4900 ```
4901 OMA-URI:
4902 ```
4903 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/F_SanitizeOnShutdown_Sessions
4904 ```
4905 Value (string):
4906 ```
4907 <enabled/> or <disabled/>
4908 ```
4909 OMA-URI:
4910 ```
4911 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/G_SanitizeOnShutdown_SiteSettings
4912 ```
4913 Value (string):
4914 ```
4915 <enabled/> or <disabled/>
4916 ```
4917 OMA-URI:
4918 ```
4919 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/H_SanitizeOnShutdown_OfflineApps
4920 ```
4921 Value (string):
4922 ```
4923 <enabled/> or <disabled/>
4924 ```
4925 OMA-URI:
4926 ```
4927 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/I_SanitizeOnShutdown_Locked
4928 ```
4929 Value (string):
4930 ```
4931 <enabled/> or <disabled/>
4932 ```
4933 #### macOS
4934 ```
4935 <dict>
4936   <key>SanitizeOnShutdown</key>
4937   <dict>
4938     <key>Cache</key>
4939     <true/> | <false/>
4940     <key>Cookies</key>
4941     <true/> | <false/>
4942     <key>Downloads</key>
4943     <true/> | <false/>
4944     <key>FormData</key>
4945     <true/> | <false/>
4946     <key>History</key>
4947     <true/> | <false/>
4948     <key>Sessions</key>
4949     <true/> | <false/>
4950     <key>SiteSettings</key>
4951     <true/> | <false/>
4952     <key>OfflineApps</key>
4953     <true/> | <false/>
4954     <key>Locked</key>
4955     <true/> | <false/>
4956   </dict>
4957 </dict>
4958 ```
4959 #### policies.json
4960 ```
4961 {
4962   "policies": {
4963     "SanitizeOnShutdown": {
4964       "Cache": true | false,
4965       "Cookies": true | false,
4966       "Downloads": true | false,
4967       "FormData": true | false,
4968       "History": true | false,
4969       "Sessions": true | false,
4970       "SiteSettings": true | false,
4971       "OfflineApps": true | false,
4972       "Locked": true | false
4973     }
4974   }
4975 }
4976 ```
4977 ### SanitizeOnShutdown (All)
4978 Clear all data on shutdown, including Browsing & Download History, Cookies, Active Logins, Cache, Form & Search History, Site Preferences and Offline Website Data.
4979
4980 **Compatibility:** Firefox 60, Firefox ESR 60\
4981 **CCK2 Equivalent:** N/A\
4982 **Preferences Affected:** `privacy.sanitize.sanitizeOnShutdown`, `privacy.clearOnShutdown.cache`, `privacy.clearOnShutdown.cookies`, `privacy.clearOnShutdown.downloads`, `privacy.clearOnShutdown.formdata`, `privacy.clearOnShutdown.history`, `privacy.clearOnShutdown.sessions`, `privacy.clearOnShutdown.siteSettings`, `privacy.clearOnShutdown.offlineApps`
4983 #### Windows (GPO)
4984 ```
4985 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown = 0x1 | 0x0
4986 ```
4987 #### Windows (Intune)
4988 OMA-URI:
4989 ```
4990 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/C_SanitizeOnShutdown
4991 ```
4992 Value (string):
4993 ```
4994 <enabled/> or <disabled/>
4995 ```
4996 #### macOS
4997 ```
4998 <dict>
4999   <key>SanitizeOnShutdown</key>
5000   <true/> | <false/>
5001 </dict>
5002 ```
5003 #### policies.json
5004 ```
5005 {
5006   "policies": {
5007     "SanitizeOnShutdown": true | false
5008   }
5009 }
5010 ```
5011 ### SearchBar
5012 Set whether or not search bar is displayed.
5013
5014 **Compatibility:** Firefox 60, Firefox ESR 60\
5015 **CCK2 Equivalent:** `showSearchBar`\
5016 **Preferences Affected:** N/A
5017
5018 #### Windows (GPO)
5019 ```
5020 Software\Policies\Mozilla\Firefox\SearchBar = "unified" | "separate"
5021 ```
5022
5023 #### Windows (Intune)
5024 OMA-URI:
5025 ```
5026 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SearchBar
5027 ```
5028 Value (string):
5029 ```
5030 <enabled/>
5031 <data id="SearchBar" value="unified | separate"/>
5032 ```
5033 #### macOS
5034 ```
5035 <dict>
5036   <key>SearchBar</key>
5037   <string>unified | separate</string>
5038 </dict>
5039 ```
5040 #### policies.json
5041 ```
5042 {
5043   "policies": {
5044     "SearchBar": "unified" | "separate"
5045   }
5046 }
5047 ```
5048 <a name="SearchEngines"></a>
5049
5050 ### SearchEngines (This policy is only available on the ESR.)
5051
5052 ### SearchEngines | Add
5053
5054 Add new search engines (up to five). This policy is only available on the ESR. `Name` and `URLTemplate` are required.
5055
5056 `Name` is the name of the search engine.
5057
5058 `URLTemplate` is the search URL with {searchTerms} to substitute for the search term.
5059
5060 `Method` is either GET or POST
5061
5062 `IconURL` is a URL for the icon to use.
5063
5064 `Alias` is a keyword to use for the engine.
5065
5066 `Description` is a description of the search engine.
5067
5068 `PostData` is the POST data as name value pairs separated by &.
5069
5070 `SuggestURLTemplate` is a search suggestions URL with {searchTerms} to substitute for the search term.
5071
5072 `Encoding` is the query charset for the engine. It defaults to UTF-8.
5073
5074 **Compatibility:** Firefox ESR 60 (POST support in Firefox ESR 68, Encoding support in Firefox 91)\
5075 **CCK2 Equivalent:** `searchplugins`\
5076 **Preferences Affected:** N/A
5077
5078 #### Windows (GPO)
5079 ```
5080 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Name = "Example1"
5081 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\URLTemplate = "https://www.example.org/q={searchTerms}"
5082 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Method = "GET" | "POST"
5083 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\IconURL = "https://www.example.org/favicon.ico"
5084 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Alias = "example"
5085 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Description = "Example Description"
5086 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\SuggestURLTemplate = "https://www.example.org/suggestions/q={searchTerms}"
5087 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\PostData = "name=value&q={searchTerms}"
5088 ```
5089 #### Windows (Intune)
5090 OMA-URI:
5091 ```
5092 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_1
5093 ```
5094 Value (string):
5095 ```
5096 <enabled/>
5097 <data id="SearchEngine_Name" value="Example1"/>
5098 <data id="SearchEngine_URLTemplate" value="https://www.example.org/q={searchTerms"/>
5099 <data id="SearchEngine_Method" value="GET | POST"/>
5100 <data id="SearchEngine_IconURL" value="https://www.example.org/favicon.ico"/>
5101 <data id="SearchEngine_Alias" value="example"/>
5102 <data id="SearchEngine_Description" value="Example Description"/>
5103 <data id="SearchEngine_SuggestURLTemplate" value="https://www.example.org/suggestions/q={searchTerms}"/>
5104 <data id="SearchEngine_PostData" value="name=value&amp;q={searchTerms}"/>
5105 ```
5106 #### macOS
5107 ```
5108 <dict>
5109   <key>SearchEngines</key>
5110   <dict>
5111     <key>Add</key>
5112     <array>
5113       <dict>
5114         <key>Name</key>
5115         <string>Example1</string>
5116         <key>URLTemplate</key>
5117         <string>https://www.example.org/q={searchTerms}</string>
5118         <key>Method</key>
5119         <string>GET | POST </string>
5120         <key>IconURL</key>
5121         <string>https://www.example.org/favicon.ico</string>
5122         <key>Alias</key>
5123         <string>example</string>
5124         <key>Description</key>
5125         <string>Example Description</string>
5126         <key>SuggestURLTemplate</key>
5127         <string>https://www.example.org/suggestions/q={searchTerms}</string>
5128         <key>PostData</key>
5129         <string>name=value&q={searchTerms}</string>
5130       </dict>
5131     <array>
5132   </dict>
5133 </dict>
5134 ```
5135 #### policies.json
5136 ```
5137 {
5138   "policies": {
5139     "SearchEngines": {
5140       "Add": [
5141         {
5142           "Name": "Example1",
5143           "URLTemplate": "https://www.example.org/q={searchTerms}",
5144           "Method": "GET" | "POST",
5145           "IconURL": "https://www.example.org/favicon.ico",
5146           "Alias": "example",
5147           "Description": "Description",
5148           "PostData": "name=value&q={searchTerms}",
5149           "SuggestURLTemplate": "https://www.example.org/suggestions/q={searchTerms}"
5150         }
5151       ]
5152     }
5153   }
5154 }
5155 ```
5156 ### SearchEngines | Default
5157
5158 Set the default search engine. This policy is only available on the ESR.
5159
5160 **Compatibility:** Firefox ESR 60\
5161 **CCK2 Equivalent:** `defaultSearchEngine`\
5162 **Preferences Affected:** N/A
5163
5164 #### Windows (GPO)
5165 ```
5166 Software\Policies\Mozilla\Firefox\SearchEngines\Default = NAME_OF_SEARCH_ENGINE
5167 ```
5168 #### Windows (Intune)
5169 OMA-URI:
5170 ```
5171 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_Default
5172 ```
5173 Value (string):
5174 ```
5175 <enabled/>
5176 <data id="SearchEngines_Default" value="NAME_OF_SEARCH_ENGINE"/>
5177 ```
5178 #### macOS
5179 ```
5180 <dict>
5181   <key>SearchEngines</key>
5182   <dict>
5183     <key>Default</key>
5184     <string>NAME_OF_SEARCH_ENGINE</string>
5185   </dict>
5186 </dict>
5187 ```
5188 #### policies.json
5189 ```
5190 {
5191   "policies": {
5192     "SearchEngines": {
5193       "Default": "NAME_OF_SEARCH_ENGINE"
5194     }
5195   }
5196 }
5197 ```
5198 ### SearchEngines | PreventInstalls
5199
5200 Prevent installing search engines from webpages.
5201
5202 **Compatibility:** Firefox ESR 60\
5203 **CCK2 Equivalent:** `disableSearchEngineInstall`\
5204 **Preferences Affected:** N/A
5205
5206 #### Windows (GPO)
5207 ```
5208 Software\Policies\Mozilla\Firefox\SearchEngines\PreventInstalls = 0x1 | 0x0
5209 ```
5210 #### Windows (Intune)
5211 OMA-URI:
5212 ```
5213 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_PreventInstalls
5214 ```
5215 Value (string):
5216 ```
5217 <enabled/> or <disabled/>
5218 ```
5219 #### macOS
5220 ```
5221 <dict>
5222   <key>SearchEngines</key>
5223   <dict>
5224     <key>PreventInstalls</key>
5225     <true/> | <false/>
5226   </dict>
5227 </dict>
5228 ```
5229 #### policies.json
5230 ```
5231 {
5232   "policies": {
5233     "SearchEngines": {
5234       "PreventInstalls": true | false
5235     }
5236   }
5237 }
5238 ```
5239 ### SearchEngines | Remove
5240
5241 Hide built-in search engines. This policy is only available on the ESR.
5242
5243 **Compatibility:** Firefox ESR 60.2\
5244 **CCK2 Equivalent:** `removeDefaultSearchEngines` (removed all built-in engines)\
5245 **Preferences Affected:** N/A
5246
5247 #### Windows (GPO)
5248 ```
5249 Software\Policies\Mozilla\Firefox\SearchEngines\Remove\1 = NAME_OF_SEARCH_ENGINE
5250 ```
5251 #### Windows (Intune)
5252 OMA-URI:
5253 ```
5254 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_Remove
5255 ```
5256 Value (string):
5257 ```
5258 <enabled/>
5259 <data id="SearchEngines_Remove" value="1&#xF000;NAME_OF_SEARCH_ENGINE"/>
5260 ```
5261 #### macOS
5262 ```
5263 <dict>
5264   <key>SearchEngines</key>
5265   <dict>
5266     <key>Remove</key>
5267     <array>
5268       <string>NAME_OF_SEARCH_ENGINE</string>
5269     </array>
5270   </dict>
5271 </dict>
5272 ```
5273 #### policies.json
5274 ```
5275 {
5276   "policies": {
5277     "SearchEngines": {
5278       "Remove": ["NAME_OF_SEARCH_ENGINE"]
5279     }
5280   }
5281 }
5282 ```
5283 ### SearchSuggestEnabled
5284
5285 Enable search suggestions.
5286
5287 **Compatibility:** Firefox 68, Firefox ESR 68\
5288 **CCK2 Equivalent:** N/A\
5289 **Preferences Affected:** `browser.urlbar.suggest.searches`, `browser.search.suggest.enabled`
5290
5291 #### Windows (GPO)
5292 ```
5293 Software\Policies\Mozilla\Firefox\SearchSuggestEnabled = 0x1 | 0x0
5294 ```
5295 #### Windows (Intune)
5296 OMA-URI:
5297 ```
5298 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchSuggestEnabled
5299 ```
5300 Value (string):
5301 ```
5302 <enabled/> or <disabled/>
5303 ```
5304 #### macOS
5305 ```
5306 <dict>
5307   <key>SearchSuggestEnabled</key>
5308   <true/> | <false/>
5309 </dict>
5310 ```
5311 #### policies.json
5312 ```
5313 {
5314   "policies": {
5315     "SearchSuggestEnabled": true | false
5316   }
5317 }
5318 ```
5319 ### SecurityDevices
5320
5321 Install PKCS #11 modules.
5322
5323 **Compatibility:** Firefox 64, Firefox ESR 60.4\
5324 **CCK2 Equivalent:** `certs.devices`\
5325 **Preferences Affected:** N/A
5326
5327 #### Windows (GPO)
5328 ```
5329 Software\Policies\Mozilla\Firefox\SecurityDevices\NAME_OF_DEVICE = PATH_TO_LIBRARY_FOR_DEVICE
5330 ```
5331 #### Windows (Intune)
5332 OMA-URI:
5333 ```
5334 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SecurityDevices
5335 ```
5336 Value (string):
5337 ```
5338 <enabled/>
5339 <data id="SecurityDevices" value="NAME_OF_DEVICE&#xF000;PATH_TO_LIBRARY_FOR_DEVICE"/>
5340 ```
5341 #### macOS
5342 ```
5343 <dict>
5344   <key>SecurityDevices</key>
5345   <dict>
5346     <key>NAME_OF_DEVICE</key>
5347     <string>PATH_TO_LIBRARY_FOR_DEVICE</string>
5348   </dict>
5349 </dict>
5350 ```
5351
5352 #### policies.json
5353 ```
5354 {
5355   "policies": {
5356     "SecurityDevices": {
5357       "NAME_OF_DEVICE": "PATH_TO_LIBRARY_FOR_DEVICE"
5358     }
5359   }
5360 }
5361 ```
5362 ### ShowHomeButton
5363 Show the home button on the toolbar.
5364
5365 Future versions of Firefox will not show the home button by default.
5366
5367 **Compatibility:** Firefox 88, Firefox ESR 78.10\
5368 **CCK2 Equivalent:** N/A\
5369 **Preferences Affected:** N/A
5370
5371 #### Windows (GPO)
5372 ```
5373 Software\Policies\Mozilla\Firefox\ShowHomeButton = 0x1 | 0x0
5374 ```
5375 #### Windows (Intune)
5376 OMA-URI:
5377 ```
5378 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/ShowHomeButton
5379 ```
5380 Value (string):
5381 ```
5382 <enabled/> or <disabled/>
5383 ```
5384 #### macOS
5385 ```
5386 <dict>
5387   <key>ShowHomeButton</key>
5388   <true/> | <false/>
5389 </dict>
5390 ```
5391 #### policies.json
5392 ```
5393 {
5394   "policies": {
5395     "ShowHomeButton": true | false
5396   }
5397 }
5398 ```
5399 ### SSLVersionMax
5400
5401 Set and lock the maximum version of TLS.
5402
5403 **Compatibility:** Firefox 66, Firefox ESR 60.6\
5404 **CCK2 Equivalent:** N/A\
5405 **Preferences Affected:** `security.tls.version.max`
5406
5407 #### Windows (GPO)
5408 ```
5409 Software\Policies\Mozilla\Firefox\SSLVersionMax = "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
5410 ```
5411 #### Windows (Intune)
5412 OMA-URI:
5413 ```
5414 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SSLVersionMax
5415 ```
5416 Value (string):
5417 ```
5418 <enabled/>
5419 <data id="SSLVersion" value="tls1 | tls1.2 | tls1.3"/>
5420 ```
5421 #### macOS
5422 ```
5423 <dict>
5424   <key>SSLVersionMax</key>
5425   <string>tls1 | tls1.1 | tls1.2 | tls1.3</string>
5426 </dict>
5427 ```
5428
5429 #### policies.json
5430 ```
5431 {
5432   "policies": {
5433     "SSLVersionMax": "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
5434   }
5435 }
5436 ```
5437 ### SSLVersionMin
5438
5439 Set and lock the minimum version of TLS.
5440
5441 **Compatibility:** Firefox 66, Firefox ESR 60.6\
5442 **CCK2 Equivalent:** N/A\
5443 **Preferences Affected:** `security.tls.version.min`
5444
5445 #### Windows (GPO)
5446 ```
5447 Software\Policies\Mozilla\Firefox\SSLVersionMin = "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
5448 ```
5449 #### Windows (Intune)
5450 OMA-URI:
5451 ```
5452 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SSLVersionMin
5453 ```
5454 Value (string):
5455 ```
5456 <enabled/>
5457 <data id="SSLVersion" value="tls1 | tls1.2 | tls1.3"/>
5458 ```
5459 #### macOS
5460 ```
5461 <dict>
5462   <key>SSLVersionMin</key>
5463   <string>tls1 | tls1.1 | tls1.2 | tls1.3</string>
5464 </dict>
5465 ```
5466
5467 #### policies.json
5468 ```
5469 {
5470   "policies": {
5471     "SSLVersionMin": "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
5472   }
5473 }
5474 ```
5475 ### SupportMenu
5476 Add a menuitem to the help menu for specifying support information.
5477
5478 **Compatibility:** Firefox 68.0.1, Firefox ESR 68.0.1\
5479 **CCK2 Equivalent:** helpMenu\
5480 **Preferences Affected:** N/A
5481
5482 #### Windows (GPO)
5483 ```
5484 Software\Policies\Mozilla\Firefox\SupportMenu\Title = "Support Menu"
5485 Software\Policies\Mozilla\Firefox\SupportMenu\URL = "http://example.com/support"
5486 Software\Policies\Mozilla\Firefox\SupportMenu\AccessKey = "S"
5487 ```
5488 #### Windows (Intune)
5489 OMA-URI:
5490 ```
5491 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SupportMenu
5492 ```
5493 Value (string):
5494 ```
5495 <enabled/>
5496 <data id="SupportMenuTitle" value="Support Menu"/>
5497 <data id="SupportMenuURL" value="http://example.com/support"/>
5498 <data id="SupportMenuAccessKey" value="S">
5499 ```
5500 #### macOS
5501 ```
5502 <dict>
5503   <key>SupportMenu</key>
5504   <dict>
5505     <key>Title</key>
5506     <string>SupportMenu</string>
5507     <key>URL</key>
5508     <string>http://example.com/support</string>
5509     <key>AccessKey</key>
5510     <string>S</string>
5511   </dict>
5512 </dict>
5513 ```
5514 #### policies.json
5515 ```
5516 {
5517   "policies": {
5518     "SupportMenu": {
5519       "Title": "Support Menu",
5520       "URL": "http://example.com/support",
5521       "AccessKey": "S"
5522     }
5523   }
5524 }
5525 ```
5526 ### UserMessaging
5527
5528 Prevent Firefox from messaging the user in certain situations.
5529
5530 `WhatsNew` Remove the "What's New" icon and menuitem.
5531
5532 `ExtensionRecommendations` If false, don't recommend extensions while the user is visiting web pages.
5533
5534 `FeatureRecommendations` If false, don't recommend browser features.
5535
5536 `UrlbarInterventions` If false, Don't offer Firefox specific suggestions in the URL bar.
5537
5538 `SkipOnboarding` If true, don't show onboarding messages on the new tab page.
5539
5540 **Compatibility:** Firefox 75, Firefox ESR 68.7\
5541 **CCK2 Equivalent:** N/A\
5542 **Preferences Affected:** `browser.messaging-system.whatsNewPanel.enabled`, `browser.newtabpage.activity-stream.asrouter.userprefs.cfr.addons`, `browser.newtabpage.activity-stream.asrouter.userprefs.cfr.features`, `browser.aboutwelcome.enabled`
5543
5544 #### Windows (GPO)
5545 ```
5546 Software\Policies\Mozilla\Firefox\UserMessaging\WhatsNew = 0x1 | 0x0
5547 Software\Policies\Mozilla\Firefox\UserMessaging\ExtensionRecommendations = 0x1 | 0x0
5548 Software\Policies\Mozilla\Firefox\UserMessaging\FeatureRecommendations = 0x1 | 0x0
5549 Software\Policies\Mozilla\Firefox\UserMessaging\UrlbarInterventions = 0x1 | 0x0
5550 Software\Policies\Mozilla\Firefox\UserMessaging\SkipOnboarding = 0x1 | 0x0
5551 ```
5552 #### Windows (Intune)
5553 OMA-URI:
5554 ```
5555 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_WhatsNew
5556 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_ExtensionRecommendations
5557 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_FeatureRecommendations
5558 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_UrlbarInterventions
5559 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_SkipOnboarding
5560 ```
5561 Value (string):
5562 ```
5563 <enabled/> or <disabled/>
5564 ```
5565 #### macOS
5566 ```
5567 <dict>
5568   <key>UserMessaging</key>
5569   <dict>
5570     <key>WhatsNew</key>
5571     <true/> | <false/>
5572     <key>ExtensionRecommendations</key>
5573     <true/> | <false/>
5574     <key>FeatureRecommendations</key>
5575     <true/> | <false/>
5576     <key>UrlbarInterventions</key>
5577     <true/> | <false/>
5578     <key>SkipOnboarding</key>
5579     <true/> | <false/>
5580   </dict>
5581 </dict>
5582 ```
5583 #### policies.json
5584 ```
5585 {
5586   "policies": {
5587     "UserMessaging": {
5588       "WhatsNew": true | false,
5589       "ExtensionRecommendations": true | false,
5590       "FeatureRecommendations": true | false,
5591       "UrlbarInterventions": true | false
5592       "SkipOnboarding": true | false
5593     }
5594   }
5595 }
5596 ```
5597 ### WebsiteFilter
5598 Block websites from being visited. The parameters take an array of Match Patterns, as documented in https://developer.mozilla.org/en-US/Add-ons/WebExtensions/Match_patterns.
5599 The arrays are limited to 1000 entries each.
5600
5601 If you want to block all URLs, you can use `<all_urls>` or `*://*/*`. You can't have just a `*` on the right side.
5602
5603 For specific protocols, use `https://*/*` or `http://*/*`.
5604
5605 As of Firefox 83 and Firefox ESR 78.5, file URLs are supported.
5606
5607 **Compatibility:** Firefox 60, Firefox ESR 60\
5608 **CCK2 Equivalent:** N/A\
5609 **Preferences Affected:** N/A
5610
5611 #### Windows (GPO)
5612 ```
5613 Software\Policies\Mozilla\Firefox\WebsiteFilter\Block\1 = "<all_urls>"
5614 Software\Policies\Mozilla\Firefox\WebsiteFilter\Exceptions\1 = "http://example.org/*"
5615 ```
5616 #### Windows (Intune)
5617 OMA-URI:
5618 ```
5619 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/B_WebsiteFilter_Block
5620 ```
5621 Value (string):
5622 ```
5623 <enabled/> <data id="WebsiteFilter" value="1&#xF000;&#60;all_urls&#62;"/>
5624 ```
5625 OMA-URI:
5626 ```
5627 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/B_WebsiteFilter_Exceptions
5628 ```
5629 Value (string):
5630 ```
5631 <enabled/>
5632 <data id="WebsiteFilter" value="1&#xF000;http://example.org/*"/>
5633 ```
5634 #### macOS
5635 ```
5636 <dict>
5637   <key>WebsiteFilter</key>
5638   <dict>
5639     <key>Block</key>
5640     <array>
5641       <string><all_urls></string>
5642     </array>
5643     <key>Exceptions</key>
5644     <array>
5645       <string>http://example.org/*</string>
5646     </array>
5647   </dict>
5648
5649 </dict>
5650 ```
5651 #### policies.json
5652 ```
5653 {
5654   "policies": {
5655     "WebsiteFilter": {
5656       "Block": ["<all_urls>"],
5657       "Exceptions": ["http://example.org/*"]
5658     }
5659   }
5660 }
5661 ```
5662 ### WindowsSSO
5663 Allow Windows single sign-on for Microsoft, work, and school accounts.
5664
5665 If this policy is set to true, Firefox will use credentials stored in Windows to sign in to Microsoft, work, and school accounts.
5666
5667 **Compatibility:** Firefox 91\
5668 **CCK2 Equivalent:** N/A\
5669 **Preferences Affected:** `network.http.windows-sso.enabled`
5670
5671 #### Windows (GPO)
5672 ```
5673 Software\Policies\Mozilla\Firefox\WindowsSSO = 0x1 | 0x0
5674 ```
5675 #### Windows (Intune)
5676 OMA-URI:
5677 ```
5678 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/WindowsSSO
5679 ```
5680 Value (string):
5681 ```
5682 <enabled/> or <disabled/>
5683 ```
5684 #### policies.json
5685 ```
5686 {
5687   "policies": {
5688     "WindowsSSO": true | false
5689   }
5690 }
5691 ```