README.md

   1 **These policies are in active development and so might contain changes that do not work with current versions of Firefox.**
   2
   3 **You should use the [officially released versions](https://github.com/mozilla/policy-templates/releases) if you are deploying changes.**
   4
   5 Policies can be specified using the [Group Policy templates on Windows](https://github.com/mozilla/policy-templates/tree/master/windows), [Intune on Windows](https://support.mozilla.org/kb/managing-firefox-intune), [configuration profiles on macOS](https://github.com/mozilla/policy-templates/tree/master/mac), or by creating a file called `policies.json`. On Windows, create a directory called `distribution` where the EXE is located and place the file there. On Mac, the file goes into `Firefox.app/Contents/Resources/distribution`.  On Linux, the file goes into `firefox/distribution`, where `firefox` is the installation directory for firefox, which varies by distribution or you can specify system-wide policy by placing the file in `/etc/firefox/policies`.
   6
   7 | Policy Name | Description
   8 | --- | --- |
   9 | **[`3rdparty`](#3rdparty)** | Set policies that WebExtensions can access via chrome.storage.managed.
  10 | **[`AllowedDomainsForApps`](#alloweddomainsforapps)** | Define domains allowed to access Google Workspace.
  11 | **[`AppAutoUpdate`](#appautoupdate)** | Enable or disable automatic application update.
  12 | **[`AppUpdateURL`](#appupdateurl)** | Change the URL for application update.
  13 | **[`Authentication`](#authentication)** | Configure sites that support integrated authentication.
  14 | **[`AutoLaunchProtocolsFromOrigins`](#autolaunchprotocolsfromorigins)** | Define a list of external protocols that can be used from listed origins without prompting the user.
  15 | **[`BackgroundAppUpdate`](#backgroundappupdate)** | Enable or disable the background updater (Windows only).
  16 | **[`BlockAboutAddons`](#blockaboutaddons)** | Block access to the Add-ons Manager (about:addons).
  17 | **[`BlockAboutConfig`](#blockaboutconfig)** | Block access to about:config.
  18 | **[`BlockAboutProfiles`](#blockaboutprofiles)** | Block access to About Profiles (about:profiles).
  19 | **[`BlockAboutSupport`](#blockaboutsupport)** | Block access to Troubleshooting Information (about:support).
  20 | **[`Bookmarks`](#bookmarks)** | Add bookmarks in either the bookmarks toolbar or menu.
  21 | **[`CaptivePortal`](#captiveportal)** | Enable or disable the detection of captive portals.
  22 | **[`Certificates`](#certificates)** |
  23 | **[`Certificates -> ImportEnterpriseRoots`](#certificates--importenterpriseroots)** | Trust certificates that have been added to the operating system certificate store by a user or administrator.
  24 | **[`Certificates -> Install`](#certificates--install)** | Install certificates into the Firefox certificate store.
  25 | **[`Cookies`](#cookies)** | Configure cookie preferences.
  26 | **[`DisableAppUpdate`](#disableappupdate)** | Turn off application updates.
  27 | **[`DisableBuiltinPDFViewer`](#disablebuiltinpdfviewer)** | Disable the built in PDF viewer.
  28 | **[`DisabledCiphers`](#disabledciphers)** | Disable ciphers.
  29 | **[`DisableDefaultBrowserAgent`](#disabledefaultbrowseragent)** | Prevent the default browser agent from taking any actions (Windows only).
  30 | **[`DisableDeveloperTools`](#disabledevelopertools)** | Remove access to all developer tools.
  31 | **[`DisableFeedbackCommands`](#disablefeedbackcommands)** | Disable the menus for reporting sites.
  32 | **[`DisableFirefoxScreenshots`](#disablefirefoxscreenshots)** | Remove access to Firefox Screenshots.
  33 | **[`DisableFirefoxAccounts`](#disablefirefoxaccounts)** | Disable Firefox Accounts integration (Sync).
  34 | **[`DisableFirefoxStudies`](#disablefirefoxstudies)** | Disable Firefox studies (Shield).
  35 | **[`DisableForgetButton`](#disableforgetbutton)** | Disable the "Forget" button.
  36 | **[`DisableFormHistory`](#disableformhistory)** | Turn off saving information on web forms and the search bar.
  37 | **[`DisableMasterPasswordCreation`](#disablemasterpasswordcreation)** | Remove the master password functionality.
  38 | **[`DisablePasswordReveal`](#disablepasswordreveal)** | Do not allow passwords to be revealed in saved logins.
  39 | **[`DisablePocket`](#disablepocket)** | Remove Pocket in the Firefox UI.
  40 | **[`DisablePrivateBrowsing`](#disableprivatebrowsing)** | Remove access to private browsing.
  41 | **[`DisableProfileImport`](#disableprofileimport)** | Disables the "Import data from another browser" option in the bookmarks window.
  42 | **[`DisableProfileRefresh`](#disableprofilerefresh)** | Disable the Refresh Firefox button on about:support and support.mozilla.org
  43 | **[`DisableSafeMode`](#disablesafemode)** | Disable safe mode within the browser.
  44 | **[`DisableSecurityBypass`](#disablesecuritybypass)** | Prevent the user from bypassing security in certain cases.
  45 | **[`DisableSetDesktopBackground`](#disablesetdesktopbackground)** | Remove the "Set As Desktop Background..." menuitem when right clicking on an image.
  46 | **[`DisableSystemAddonUpdate`](#disablesystemaddonupdate)** | Prevent system add-ons from being installed or update.
  47 | **[`DisableTelemetry`](#disabletelemetry)** | DisableTelemetry
  48 | **[`DisplayBookmarksToolbar`](#displaybookmarkstoolbar)** | Set the initial state of the bookmarks toolbar.
  49 | **[`DisplayMenuBar (Deprecated)`](#displaymenubar-deprecated)** | Set the initial state of the menubar.
  50 | **[`DisplayMenuBar`](#displaymenubar)** | Set the state of the menubar.
  51 | **[`DNSOverHTTPS`](#dnsoverhttps)** | Configure DNS over HTTPS.
  52 | **[`DontCheckDefaultBrowser`](#dontcheckdefaultbrowser)** | Don't check if Firefox is the default browser at startup.
  53 | **[`DefaultDownloadDirectory`](#defaultdownloaddirectory)** | Set the default download directory.
  54 | **[`DownloadDirectory`](#downloaddirectory)** | Set and lock the download directory.
  55 | **[`EnableTrackingProtection`](#enabletrackingprotection)** | Configure tracking protection.
  56 | **[`EncryptedMediaExtensions`](#encryptedmediaextensions)** | Enable or disable Encrypted Media Extensions and optionally lock it.
  57 | **[`EnterprisePoliciesEnabled`](#enterprisepoliciesenabled)** | Enable policy support on macOS.
  58 | **[`Extensions`](#extensions)** | Control the installation, uninstallation and locking of extensions.
  59 | **[`ExtensionSettings`](#extensionsettings)** | Manage all aspects of extensions.
  60 | **[`ExtensionUpdate`](#extensionupdate)** | Control extension updates.
  61 | **[`FlashPlugin`](#flashplugin)** | Configure the default Flash plugin policy as well as origins for which Flash is allowed.
  62 | **[`FirefoxHome`](#firefoxhome)** | Customize the Firefox Home page.
  63 | **[`HardwareAcceleration`](#hardwareacceleration)** | Control hardware acceleration.
  64 | **[`Handlers`](#handlers)** | Configure default application handlers.
  65 | **[`Homepage`](#homepage)** | Configure the default homepage and how Firefox starts.
  66 | **[`InstallAddonsPermission`](#installaddonspermission)** | Configure the default extension install policy as well as origins for extension installs are allowed.
  67 | **[`LegacyProfiles`](#legacyprofiles)** | Disable the feature enforcing a separate profile for each installation.
  68 | **[`LocalFileLinks`](#localfilelinks)** | Enable linking to local files by origin.
  69 | **[`ManagedBookmarks`](#managedbookmarks)** | Configures a list of bookmarks managed by an administrator that cannot be changed by the user.
  70 | **[`ManualAppUpdateOnly`](#manualappupdateonly)** | Allow manual updates only and do not notify the user about updates..
  71 | **[`PrimaryPassword`](#primarypassword)** | Require or prevent using a primary (formerly master) password.
  72 | **[`NetworkPrediction`](#networkprediction)** | Enable or disable network prediction (DNS prefetching).
  73 | **[`NewTabPage`](#newtabpage)** | Enable or disable the New Tab page.
  74 | **[`NoDefaultBookmarks`](#nodefaultbookmarks)** | Disable the creation of default bookmarks.
  75 | **[`OfferToSaveLogins`](#offertosavelogins)** | Control whether or not Firefox offers to save passwords.
  76 | **[`OfferToSaveLoginsDefault`](#offertosaveloginsdefault)** | Set the default value for whether or not Firefox offers to save passwords.
  77 | **[`OverrideFirstRunPage`](#overridefirstrunpage)** | Override the first run page.
  78 | **[`OverridePostUpdatePage`](#overridepostupdatepage)** | Override the upgrade page.
  79 | **[`PasswordManagerEnabled`](#passwordmanagerenabled)** | Remove (some) access to the password manager.
  80 | **[`PDFjs`](#pdfjs)** | Disable or configure PDF.js, the built-in PDF viewer.
  81 | **[`Permissions`](#permissions)** | Set permissions associated with camera, microphone, location, and notifications.
  82 | **[`PictureInPicture`](#pictureinpicture)** | Enable or disable Picture-in-Picture.
  83 | **[`PopupBlocking`](#popupblocking)** | Configure the default pop-up window policy as well as origins for which pop-up windows are allowed.
  84 | **[`Preferences`](#preferences)** | Set and lock preferences.
  85 | **[`Preferences (Deprecated)`](#preferences-deprecated)** | Set and lock some preferences.
  86 | **[`PromptForDownloadLocation`](#promptfordownloadlocation)** | Ask where to save each file before downloading.
  87 | **[`Proxy`](#proxy)** | Configure proxy settings.
  88 | **[`RequestedLocales`](#requestedlocales)** | Set the the list of requested locales for the application in order of preference.
  89 | **[`SanitizeOnShutdown` (All)](#sanitizeonshutdown-all)** | Clear all data on shutdown.
  90 | **[`SanitizeOnShutdown` (Selective)](#sanitizeonshutdown-selective)** | Clear data on shutdown.
  91 | **[`SearchBar`](#searchbar)** | Set whether or not search bar is displayed.
  92 | **[`SearchEngines`](#searchengines-this-policy-is-only-available-on-the-esr)** |
  93 | **[`SearchEngines -> Default`](#searchengines--default)** | Set the default search engine.
  94 | **[`SearchEngines -> PreventInstalls`](#searchengines--preventinstalls)** | Prevent installing search engines from webpages.
  95 | **[`SearchEngines -> Remove`](#searchengines--remove)** | Hide built-in search engines.
  96 | **[`SearchEngines -> Add`](#searchengines--add)** | Add new search engines.
  97 | **[`SearchSuggestEnabled`](#searchsuggestenabled)** | Enable search suggestions.
  98 | **[`SecurityDevices`](#securitydevices)** | Install PKCS #11 modules.
  99 | **[`ShowHomeButton`](#showhomebutton)** | Show the home button on the toolbar.
 100 | **[`SSLVersionMax`](#sslversionmax)** | Set and lock the maximum version of TLS.
 101 | **[`SSLVersionMin`](#sslversionmin)** | Set and lock the minimum version of TLS.
 102 | **[`SupportMenu`](#supportmenu)** | Add a menuitem to the help menu for specifying support information.
 103 | **[`UserMessaging`](#usermessaging)** | Don't show certain messages to the user.
 104 | **[`WebsiteFilter`](#websitefilter)** | Block websites from being visited.
 105 | **[`WindowsSSO`](#windowssso)** | Allow Windows single sign-on for Microsoft, work, and school accounts.
 106
 107 ### 3rdparty
 108
 109 Allow WebExtensions to configure policy. For more information, see [Adding policy support to your extension](https://extensionworkshop.com/documentation/enterprise/adding-policy-support-to-your-extension/).
 110
 111 ### AppAutoUpdate
 112
 113 Enable or disable **automatic** application update.
 114
 115 If set to true, application updates are installed without user approval within Firefox. The operating system might still require approval.
 116
 117 If set to false, application updates are downloaded but the user can choose when to install the update.
 118
 119 If you have disabled updates via DisableAppUpdate, this policy has no effect.
 120
 121 **Compatibility:** Firefox 75, Firefox ESR 68.7\
 122 **CCK2 Equivalent:** N/A\
 123 **Preferences Affected:** `app.update.auto`
 124
 125 #### Windows (GPO)
 126 ```
 127 Software\Policies\Mozilla\Firefox\AppAutoUpdate = 0x1 | 0x0
 128 ```
 129 #### Windows (Intune)
 130 OMA-URI:
 131 ```
 132 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AppAutoUpdate
 133 ```
 134 Value (string):
 135 ```
 136 <enabled/> or <disabled/>
 137 ```
 138 #### macOS
 139 ```
 140 <dict>
 141   <key>AppAutoUpdate</key>
 142   <true/> | <false/>
 143 </dict>
 144 ```
 145 #### policies.json
 146 ```
 147 {
 148   "policies": {
 149     "AppAutoUpdate": true | false
 150   }
 151 }
 152 ```
 153 ### AllowedDomainsForApps
 154
 155 Define domains allowed to access Google Workspace.
 156
 157 This policy is based on the [Chrome policy](https://chromeenterprise.google/policies/#AllowedDomainsForApps) of the same name.
 158
 159 If this policy is enabled, users can only access Google Workspace using accounts from the specified domains. If you want to allow Gmail, you can add ```consumer_accounts``` to the list.
 160
 161 **Compatibility:** Firefox 89, Firefox ESR 78.11\
 162 **CCK2 Equivalent:** N/A\
 163 **Preferences Affected:** N/A
 164
 165 #### Windows (GPO)
 166 ```
 167 Software\Policies\Mozilla\Firefox\AllowedDomainsForApps = "managedfirefox.com,example.com"
 168 ```
 169 #### Windows (Intune)
 170 OMA-URI:
 171 ```
 172 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AllowedDomainsForApps
 173 ```
 174 Value (string):
 175 ```
 176 <enabled/>
 177 <data id="AllowedDomainsForApps" value="managedfirefox.com,example.com"/>
 178 ```
 179 #### macOS
 180 ```
 181 <dict>
 182   <key>AllowedDomainsForApps</key>
 183   <string>managedfirefox.com,example.com</string>
 184 </dict>
 185 ```
 186 #### policies.json
 187 ```
 188 {
 189   "policies": {
 190     "AllowedDomainsForApps": "managedfirefox.com,example.com"
 191   }
 192 }
 193 ```
 194 ### AppUpdateURL
 195
 196 Change the URL for application update if you are providing Firefox updates from a custom update server.
 197
 198 **Compatibility:** Firefox 62, Firefox ESR 60.2\
 199 **CCK2 Equivalent:** N/A\
 200 **Preferences Affected:** `app.update.url`
 201
 202 #### Windows (GPO)
 203 ```
 204 Software\Policies\Mozilla\Firefox\AppUpdateURL = "https://yoursite.com"
 205 ```
 206 #### Windows (Intune)
 207 OMA-URI:
 208 ```
 209 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AppUpdateURL
 210 ```
 211 Value (string):
 212 ```
 213 <enabled/>
 214 <data id="AppUpdateURL" value="https://yoursite.com"/>
 215 ```
 216 #### macOS
 217 ```
 218 <dict>
 219   <key>AppUpdateURL</key>
 220   <string>https://yoursite.com</string>
 221 </dict>
 222 ```
 223 #### policies.json
 224 ```
 225 {
 226   "policies": {
 227     "AppUpdateURL": "https://yoursite.com"
 228   }
 229 }
 230 ```
 231 ### Authentication
 232
 233 Configure sites that support integrated authentication.
 234
 235 See [Integrated authentication](https://htmlpreview.github.io/?https://github.com/mdn/archived-content/blob/main/files/en-us/mozilla/integrated_authentication/raw.html) for more information.
 236
 237 `PrivateBrowsing` enables integrated authentication in private browsing.
 238
 239 **Compatibility:** Firefox 60, Firefox ESR 60 (AllowNonFQDN added in 62/60.2, AllowProxies added in 70/68.2, Locked added in 71/68.3, PrivateBrowsing added in 77/68.9)\
 240 **CCK2 Equivalent:** N/A\
 241 **Preferences Affected:** `network.negotiate-auth.trusted-uris`,`network.negotiate-auth.delegation-uris`,`network.automatic-ntlm-auth.trusted-uris`,`network.automatic-ntlm-auth.allow-non-fqdn`,`network.negotiate-auth.allow-non-fqdn`,`network.automatic-ntlm-auth.allow-proxies`,`network.negotiate-auth.allow-proxies`,`network.auth.private-browsing-sso`
 242
 243 #### Windows (GPO)
 244 ```
 245 Software\Policies\Mozilla\Firefox\Authentication\SPNEGO\1 = "mydomain.com"
 246 Software\Policies\Mozilla\Firefox\Authentication\SPNEGO\2 = "https://myotherdomain.com"
 247 Software\Policies\Mozilla\Firefox\Authentication\Delegated\1 = "mydomain.com"
 248 Software\Policies\Mozilla\Firefox\Authentication\Delegated\2 = "https://myotherdomain.com"
 249 Software\Policies\Mozilla\Firefox\Authentication\NTLM\1 = "mydomain.com"
 250 Software\Policies\Mozilla\Firefox\Authentication\NTLM\2 = "https://myotherdomain.com"
 251 Software\Policies\Mozilla\Firefox\Authentication\AllowNonFQDN\SPNEGO = 0x1 | 0x0
 252 Software\Policies\Mozilla\Firefox\Authentication\AllowNonFQDN\NTLM = 0x1 | 0x0
 253 Software\Policies\Mozilla\Firefox\Authentication\AllowProxies\SPNEGO = 0x1 | 0x0
 254 Software\Policies\Mozilla\Firefox\Authentication\AllowProxies\NTLM = 0x1 | 0x0
 255 Software\Policies\Mozilla\Firefox\Authentication\Locked = 0x1 | 0x0
 256 Software\Policies\Mozilla\Firefox\Authentication\PrivateBrowsing = 0x1 | 0x0
 257 ```
 258 #### Windows (Intune)
 259 OMA-URI:
 260 ```
 261 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_SPNEGO
 262 ```
 263 Value (string):
 264 ```
 265 <enabled/>
 266 <data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
 267 ```
 268 OMA-URI:
 269 ```
 270 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_Delegated
 271 ```
 272 Value (string):
 273 ```
 274 <enabled/>
 275 <data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
 276 ```
 277 OMA-URI:
 278 ```
 279 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_NTLM
 280 ```
 281 Value (string):
 282 ```
 283 <enabled/>
 284 <data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
 285 ```
 286 OMA-URI:
 287 ```
 288 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_AllowNonFQDN
 289 ```
 290 Value (string):
 291 ```
 292 <enabled/>
 293 <data id="Authentication_AllowNonFQDN_NTLM" value="true | false"/>
 294 <data id="Authentication_AllowNonFQDN_SPNEGO" value="true | false"/>
 295 ```
 296 OMA-URI:
 297 ```
 298 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_Locked
 299 ```
 300 Value (string):
 301 ```
 302 <enabled/> or <disabled/>
 303 ```
 304 OMA-URI:
 305 ```
 306 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_PrivateBrowsing
 307 ```
 308 Value (string):
 309 ```
 310 <enabled/> or <disabled/>
 311 ```
 312 #### macOS
 313 ```
 314 <dict>
 315   <key>Authentication</key>
 316   <dict>
 317     <key>SPNEGO</key>
 318     <array>
 319       <string>mydomain.com</string>
 320       <string>https://myotherdomain.com</string>
 321     </array>
 322     <key>Delegated</key>
 323     <array>
 324       <string>mydomain.com</string>
 325       <string>https://myotherdomain.com</string>
 326     </array>
 327     <key>NTLM</key>
 328     <array>
 329       <string>mydomain.com</string>
 330       <string>https://myotherdomain.com</string>
 331     </array>
 332     <key>AllowNonFQDN</key>
 333       <dict>
 334       <key>SPNEGO</key>
 335       <true/> | <false/>
 336       <key>NTLM</key>
 337       <true/> | <false/>
 338     </dict>
 339     <key>AllowProxies</key>
 340       <dict>
 341       <key>SPNEGO</key>
 342       <true/> | <false/>
 343       <key>NTLM</key>
 344       <true/> | <false/>
 345     </dict>
 346     <key>Locked</key>
 347     <true/> | <false/>
 348     <key>PrivateBrowsing</key>
 349     <true/> | <false/>
 350   </dict>
 351 </dict>
 352 ```
 353 #### policies.json
 354 ```
 355 {
 356   "policies": {
 357     "Authentication": {
 358       "SPNEGO": ["mydomain.com", "https://myotherdomain.com"],
 359       "Delegated": ["mydomain.com", "https://myotherdomain.com"],
 360       "NTLM": ["mydomain.com", "https://myotherdomain.com"],
 361       "AllowNonFQDN": {
 362         "SPNEGO": true | false,
 363         "NTLM": true | false
 364       },
 365       "AllowProxies": {
 366         "SPNEGO": true | false,
 367         "NTLM": true | false
 368       },
 369       "Locked": true | false,
 370       "PrivateBrowsing": true | false
 371     }
 372   }
 373 }
 374 ```
 375 ### AutoLaunchProtocolsFromOrigins
 376 Define a list of external protocols that can be used from listed origins without prompting the user. The origin is the scheme plus the hostname.
 377
 378 The syntax of this policy is exactly the same as the [Chrome AutoLaunchProtocolsFromOrigins policy](https://cloud.google.com/docs/chrome-enterprise/policies/?policy=AutoLaunchProtocolsFromOrigins) except that you can only use valid origins (not just hostnames). This also means that you cannot specify an asterisk for all origins.
 379
 380 The schema is:
 381 ```
 382 {
 383  "items": {
 384   "properties": {
 385    "allowed_origins": {
 386     "items": {
 387      "type": "string"
 388     },
 389     "type": "array"
 390    },
 391    "protocol": {
 392     "type": "string"
 393    }
 394   },
 395   "required": [
 396    "protocol",
 397    "allowed_origins"
 398   ],
 399   "type": "object"
 400  },
 401  "type": "array"
 402 }
 403 ```
 404 **Compatibility:** Firefox 90, Firefox ESR 78.12\
 405 **CCK2 Equivalent:** N/A\
 406 **Preferences Affected:** N/A
 407
 408 #### Windows (GPO)
 409 Software\Policies\Mozilla\Firefox\AutoLaunchProtocolsFromOrigins (REG_MULTI_SZ) =
 410 ```
 411 [
 412   {
 413     "protocol": "zoommtg",
 414     "allowed_origins": [
 415       "https://somesite.zoom.us"
 416     ]
 417   }
 418 ]
 419 ```
 420 #### Windows (Intune)
 421 OMA-URI:
 422 ```
 423 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AutoLaunchProtocolsFromOrigins
 424 ```
 425 Value (string):
 426 ```
 427 <enabled/>
 428 <data id="JSON" value='
 429 [
 430   {
 431     "protocol": "zoommtg",
 432     "allowed_origins": [
 433       "https://somesite.zoom.us"
 434     ]
 435   }
 436 ]'/>
 437 ```
 438 #### macOS
 439 ```
 440 <dict>
 441   <key>AutoLaunchProtocolsFromOrigins</key>
 442   <array>
 443     <dict>
 444       <key>protocol</key>
 445       <string>zoommtg</string>
 446       <key>allowed_origins</key>
 447       <array>
 448         <string>https://somesite.zoom.us</string>
 449       </array>
 450     </dict>
 451   </array>
 452 </dict>
 453 ```
 454 #### policies.json
 455 ```
 456 {
 457   "policies": {
 458     "AutoLaunchProtocolsFromOrigins": [{
 459       "protocol": "zoommtg",
 460       "allowed_origins": [
 461         "https://somesite.zoom.us"
 462       ]
 463     }]
 464   }
 465 }
 466 ```
 467 ### BackgroundAppUpdate
 468
 469 Enable or disable **automatic** application update **in the background**, when the application is not running.
 470
 471 If set to true, application updates may be installed (without user approval) in the background, even when the application is not running. The operating system might still require approval.
 472
 473 If set to false, the application will not try to install updates when the application is not running.
 474
 475 If you have disabled updates via `DisableAppUpdate` or disabled automatic updates via `AppAutoUpdate`, this policy has no effect.
 476
 477 **Compatibility:** Firefox 90 (Windows only)\
 478 **CCK2 Equivalent:** N/A\
 479 **Preferences Affected:** `app.update.background.enabled`
 480
 481 #### Windows (GPO)
 482 ```
 483 Software\Policies\Mozilla\Firefox\BackgroundAppUpdate = 0x1 | 0x0
 484 ```
 485 #### Windows (Intune)
 486 OMA-URI:
 487 ```
 488 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BackgroundAppUpdate
 489 ```
 490 Value (string):
 491 ```
 492 <enabled/> or <disabled/>
 493 ```
 494 #### macOS
 495 ```
 496 <dict>
 497   <key>BackgroundAppUpdate</key>
 498   <true/> | <false/>
 499 </dict>
 500 ```
 501 #### policies.json
 502 ```
 503 {
 504   "policies": {
 505     "BackgroundAppUpdate": true | false
 506   }
 507 }
 508 ```
 509 ### BlockAboutAddons
 510
 511 Block access to the Add-ons Manager (about:addons).
 512
 513 **Compatibility:** Firefox 60, Firefox ESR 60\
 514 **CCK2 Equivalent:** `disableAddonsManager`\
 515 **Preferences Affected:** N/A
 516
 517 #### Windows (GPO)
 518 ```
 519 Software\Policies\Mozilla\Firefox\BlockAboutAddons = 0x1 | 0x0
 520 ```
 521 #### Windows (Intune)
 522 OMA-URI:
 523 ```
 524 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutAddons
 525 ```
 526 Value (string):
 527 ```
 528 <enabled/> or <disabled/>
 529 ```
 530 #### macOS
 531 ```
 532 <dict>
 533   <key>BlockAboutAddons</key>
 534   <true/> | <false/>
 535 </dict>
 536 ```
 537 #### policies.json
 538 ```
 539 {
 540   "policies": {
 541     "BlockAboutAddons": true | false
 542   }
 543 }
 544 ```
 545 ### BlockAboutConfig
 546
 547 Block access to about:config.
 548
 549 **Compatibility:** Firefox 60, Firefox ESR 60\
 550 **CCK2 Equivalent:** `disableAboutConfig`\
 551 **Preferences Affected:** N/A
 552
 553 #### Windows (GPO)
 554 ```
 555 Software\Policies\Mozilla\Firefox\BlockAboutConfig = 0x1 | 0x0
 556 ```
 557 #### Windows (Intune)
 558 OMA-URI:
 559 ```
 560 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutConfig
 561 ```
 562 Value (string):
 563 ```
 564 <enabled/> or <disabled/>
 565 ```
 566 #### macOS
 567 ```
 568 <dict>
 569   <key>BlockAboutConfig</key>
 570   <true/> | <false/>
 571 </dict>
 572 ```
 573 #### policies.json
 574 ```
 575 {
 576   "policies": {
 577     "BlockAboutConfig": true | false
 578   }
 579 }
 580 ```
 581 ### BlockAboutProfiles
 582
 583 Block access to About Profiles (about:profiles).
 584
 585 **Compatibility:** Firefox 60, Firefox ESR 60\
 586 **CCK2 Equivalent:** `disableAboutProfiles`\
 587 **Preferences Affected:** N/A
 588
 589 #### Windows (GPO)
 590 ```
 591 Software\Policies\Mozilla\Firefox\BlockAboutProfiles = 0x1 | 0x0
 592 ```
 593 #### Windows (Intune)
 594 OMA-URI:
 595 ```
 596 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutProfiles
 597 ```
 598 Value (string):
 599 ```
 600 <enabled/> or <disabled/>
 601 ```
 602 #### macOS
 603 ```
 604 <dict>
 605   <key>BlockAboutProfiles</key>
 606   <true/> | <false/>
 607 </dict>
 608 ```
 609 #### policies.json
 610 ```
 611 {
 612   "policies": {
 613     "BlockAboutProfiles": true | false
 614   }
 615 }
 616 ```
 617 ### BlockAboutSupport
 618
 619 Block access to Troubleshooting Information (about:support).
 620
 621 **Compatibility:** Firefox 60, Firefox ESR 60\
 622 **CCK2 Equivalent:** `disableAboutSupport`\
 623 **Preferences Affected:** N/A
 624
 625 #### Windows (GPO)
 626 ```
 627 Software\Policies\Mozilla\Firefox\BlockAboutSupport = 0x1 | 0x0
 628 ```
 629 #### Windows (Intune)
 630 OMA-URI:
 631 ```
 632 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutSupport
 633 ```
 634 Value (string):
 635 ```
 636 <enabled/> or <disabled/>
 637 ```
 638 #### macOS
 639 ```
 640 <dict>
 641   <key>BlockAboutSupport</key>
 642   <true/> | <false/>
 643 </dict>
 644 ```
 645 #### policies.json
 646 ```
 647 {
 648   "policies": {
 649     "BlockAboutSupport": true | false
 650   }
 651 }
 652 ```
 653 ### Bookmarks
 654
 655 Note: [`ManagedBookmarks`](#managedbookmarks) is the new recommended way to add bookmarks. This policy will continue to be supported.
 656
 657 Add bookmarks in either the bookmarks toolbar or menu. Only `Title` and `URL` are required. If `Placement` is not specified, the bookmark will be placed on the toolbar. If `Folder` is specified, it is automatically created and bookmarks with the same folder name are grouped together.
 658
 659 If you want to clear all bookmarks set with this policy, you can set the value to an empty array (```[]```). This can be on Windows via the new Bookmarks (JSON) policy available with GPO and Intune.
 660
 661 **Compatibility:** Firefox 60, Firefox ESR 60\
 662 **CCK2 Equivalent:** `bookmarks.toolbar`,`bookmarks.menu`\
 663 **Preferences Affected:** N/A
 664
 665 #### Windows (GPO)
 666 ```
 667 Software\Policies\Mozilla\Firefox\Bookmarks\1\Title = "Example"
 668 Software\Policies\Mozilla\Firefox\Bookmarks\1\URL = "https://example.com"
 669 Software\Policies\Mozilla\Firefox\Bookmarks\1\Favicon = "https://example.com/favicon.ico"
 670 Software\Policies\Mozilla\Firefox\Bookmarks\1\Placement = "toolbar" | "menu"
 671 Software\Policies\Mozilla\Firefox\Bookmarks\1\Folder = "FolderName"
 672
 673 Software\Policies\Mozilla\Firefox\Bookmarks (REG_MULTI_SZ) =
 674 ```
 675 []
 676 ```
 677
 678 ```
 679 #### Windows (Intune)
 680 OMA-URI:
 681 ```
 682 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Bookmarks/Bookmark01
 683 ```
 684 Value (string):
 685 ```
 686 <enabled/>
 687 <data id="BookmarkTitle" value="Example"/>
 688 <data id="BookmarkURL" value="https://example.com"/>
 689 <data id="BookmarkFavicon" value="https://example.com/favicon.ico"/>
 690 <data id="BookmarkPlacement" value="toolbar | menu"/>
 691 <data id="BookmarkFolder" value="FolderName"/>
 692 ```
 693 OMA-URI:
 694 ```
 695 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Bookmarks
 696 ```
 697 Value (string):
 698 ```
 699 <enabled/>
 700 <data id="JSON" value='[]'/>
 701 ```
 702 #### macOS
 703 ```
 704 <dict>
 705   <key>Bookmarks</key>
 706   <array>
 707     <dict>
 708       <key>Title</key>
 709       <string>Example</string>
 710       <key>URL</key>
 711       <string>https://example.com</string>
 712       <key>Favicon</key>
 713       <string>https://example.com/favicon.ico</string>
 714       <key>Placement</key>
 715       <string>toolbar | menu</string>
 716       <key>Folder</key>
 717       <string>FolderName</string>
 718     </dict>
 719   </array>
 720 </dict>
 721 ```
 722 #### policies.json
 723 ```
 724 {
 725   "policies": {
 726     "Bookmarks": [
 727       {
 728         "Title": "Example",
 729         "URL": "https://example.com",
 730         "Favicon": "https://example.com/favicon.ico",
 731         "Placement": "toolbar" | "menu",
 732         "Folder": "FolderName"
 733       }
 734     ]
 735   }
 736 }
 737 ```
 738 ### CaptivePortal
 739 Enable or disable the detection of captive portals.
 740
 741 **Compatibility:** Firefox 67, Firefox ESR 60.7\
 742 **CCK2 Equivalent:** N/A\
 743 **Preferences Affected:** `network.captive-portal-service.enabled`
 744
 745 #### Windows (GPO)
 746 ```
 747 Software\Policies\Mozilla\Firefox\CaptivePortal = 0x1 | 0x0
 748 ```
 749 #### Windows (Intune)
 750 OMA-URI:
 751 ```
 752 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/CaptivePortal
 753 ```
 754 Value (string):
 755 ```
 756 <enabled/> or <disabled/>
 757 ```
 758 #### macOS
 759 ```
 760 <dict>
 761   <key>CaptivePortal</key>
 762   <true/> | <false/>
 763 </dict>
 764 ```
 765 #### policies.json
 766 ```
 767 {
 768   "policies": {
 769     "CaptivePortal": true | false
 770   }
 771 }
 772 ```
 773 ### Certificates
 774
 775 ### Certificates | ImportEnterpriseRoots
 776
 777 Trust certificates that have been added to the operating system certificate store by a user or administrator.
 778
 779 Note: This policy only works on Windows and macOS. For Linux discussion, see [bug 1600509](https://bugzilla.mozilla.org/show_bug.cgi?id=1600509).
 780
 781 See https://support.mozilla.org/kb/setting-certificate-authorities-firefox for more detail.
 782
 783 **Compatibility:** Firefox 60, Firefox ESR 60 (macOS support in Firefox 63, Firefox ESR 68)\
 784 **CCK2 Equivalent:** N/A\
 785 **Preferences Affected:** `security.enterprise_roots.enabled`
 786
 787 #### Windows (GPO)
 788 ```
 789 Software\Policies\Mozilla\Firefox\Certificates\ImportEnterpriseRoots = 0x1 | 0x0
 790 ```
 791 #### Windows (Intune)
 792 OMA-URI:
 793 ```
 794 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Certificates/Certificates_ImportEnterpriseRoots
 795 ```
 796 Value (string):
 797 ```
 798 <enabled/> or <disabled/>
 799 ```
 800 #### macOS
 801 ```
 802 <dict>
 803   <key>Certificates</key>
 804   <dict>
 805     <key>ImportEnterpriseRoots</key>
 806     <true/> | <false/>
 807   </dict>
 808 </dict>
 809 ```
 810 #### policies.json
 811 ```
 812 {
 813   "policies": {
 814     "Certificates": {
 815       "ImportEnterpriseRoots": true | false
 816     }
 817   }
 818 }
 819 ```
 820 ### Certificates | Install
 821
 822 Install certificates into the Firefox certificate store. If only a filename is specified, Firefox searches for the file in the following locations:
 823
 824 - Windows
 825   - %USERPROFILE%\AppData\Local\Mozilla\Certificates
 826   - %USERPROFILE%\AppData\Roaming\Mozilla\Certificates
 827 - macOS
 828   - /Library/Application Support/Mozilla/Certificates
 829   - ~/Library/Application Support/Mozilla/Certificates
 830 - Linux
 831   - /usr/lib/mozilla/certificates
 832   - /usr/lib64/mozilla/certificates
 833   - ~/.mozilla/certificates
 834
 835 Starting with Firefox 65, Firefox 60.5 ESR, a fully qualified path can be used, including UNC paths. You should use the native path style for your operating system. We do not support using %USERPROFILE% or other environment variables on Windows.
 836
 837 If you are specifying the path in the policies.json file on Windows, you need to escape your backslashes (`\\`) which means that for UNC paths, you need to escape both (`\\\\`). If you use group policy, you only need one backslash.
 838
 839 Certificates are installed using the trust string `CT,CT,`.
 840
 841 Binary (DER) and ASCII (PEM) certificates are both supported.
 842
 843 **Compatibility:** Firefox 64, Firefox ESR 64\
 844 **CCK2 Equivalent:** `certs.ca`\
 845 **Preferences Affected:** N/A
 846
 847 #### Windows (GPO)
 848 ```
 849 Software\Policies\Mozilla\Firefox\Certificates\Install\1 = "cert1.der"
 850 Software\Policies\Mozilla\Firefox\Certificates\Install\2 = "C:\Users\username\cert2.pem"
 851 ```
 852 #### Windows (Intune)
 853 OMA-URI:
 854 ```
 855 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Certificates/Certificates_Install
 856 ```
 857 Value (string):
 858 ```
 859 <enabled/>
 860 <data id="Certificates_Install" value="1&#xF000;cert1.der&#xF000;2&#xF000;C:\Users\username\cert2.pem"/>
 861 ```
 862 #### macOS
 863 ```
 864 <dict>
 865   <key>Certificates</key>
 866   <dict>
 867     <key>Install</key>
 868     <array>
 869       <string>cert1.der</string>
 870       <string>/Users/username/cert2.pem</string>
 871     </array>
 872   </dict>
 873 </dict>
 874 ```
 875 #### policies.json
 876 ```
 877 {
 878   "policies": {
 879     "Certificates": {
 880       "Install": ["cert1.der", "/home/username/cert2.pem"]
 881     }
 882   }
 883 }
 884 ```
 885 ### Cookies
 886 Configure cookie preferences.
 887
 888 `Allow` is a list of origins (not domains) where cookies are always allowed. You must include http or https.
 889
 890 `AllowSession` is a list of origins (not domains) where cookies are only allowed for the current session. You must include http or https.
 891
 892 `Block` is a list of origins (not domains) where cookies are always blocked. You must include http or https.
 893
 894 `Default` determines whether cookies are accepted at all.
 895
 896 `AcceptThirdParty` determines how third-party cookies are handled.
 897
 898 `ExpireAtSessionEnd` determines when cookies expire.
 899
 900 `RejectTracker` only rejects cookies for trackers.
 901
 902 `Locked` prevents the user from changing cookie preferences.
 903
 904 **Compatibility:** Firefox 60, Firefox ESR 60 (RejectTracker added in Firefox 63, AllowSession added in Firefox 79/78.1)\
 905 **CCK2 Equivalent:** N/A\
 906 **Preferences Affected:** `network.cookie.cookieBehavior`, `network.cookie.lifetimePolicy`
 907
 908 #### Windows (GPO)
 909 ```
 910 Software\Policies\Mozilla\Firefox\Cookies\Allow\1 = "https://example.com"
 911 Software\Policies\Mozilla\Firefox\Cookies\AllowSession\1 = "https://example.edu"
 912 Software\Policies\Mozilla\Firefox\Cookies\Block\1 = "https://example.org"
 913 Software\Policies\Mozilla\Firefox\Cookies\Default = 0x1 | 0x0
 914 Software\Policies\Mozilla\Firefox\Cookies\AcceptThirdParty = "always" | "never" | "from-visited"
 915 Software\Policies\Mozilla\Firefox\Cookies\ExpireAtSessionEnd = 0x1 | 0x0
 916 Software\Policies\Mozilla\Firefox\Cookies\RejectTracker = 0x1 | 0x0
 917 Software\Policies\Mozilla\Firefox\Cookies\Locked = 0x1 | 0x0
 918 ```
 919 #### Windows (Intune)
 920 OMA-URI:
 921 ```
 922 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Allow
 923 ```
 924 Value (string):
 925 ```
 926 <enabled/>
 927 <data id="Cookies_Allow" value="1&#xF000;https://example.com"/>
 928 ```
 929 OMA-URI:
 930 ```
 931 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_AllowSession
 932 ```
 933 Value (string):
 934 ```
 935 <enabled/>
 936 <data id="Cookies_Allow" value="1&#xF000;https://example.edu"/>
 937 ```
 938 OMA-URI:
 939 ```
 940 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Block
 941 ```
 942 Value (string):
 943 ```
 944 <enabled/>
 945 <data id="Cookies_Block" value="1&#xF000;https://example.org"/>
 946 ```
 947 OMA-URI:
 948 ```
 949 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Default
 950 ```
 951 Value (string):
 952 ```
 953 <enabled/> or <disabled/>
 954 ```
 955 OMA-URI:
 956 ```
 957 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_AcceptThirdParty
 958 ```
 959 Value (string):
 960 ```
 961 <enabled/>
 962 <data id="Cookies_AcceptThirdParty" value="always | never | from-visited"/>
 963 ```
 964 OMA-URI:
 965 ```
 966 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_ExpireAtSessionEnd
 967 ```
 968 Value (string):
 969 ```
 970 <enabled/> or <disabled/>
 971 ```
 972 OMA-URI:
 973 ```
 974 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_RejectTracker
 975 ```
 976 Value (string):
 977 ```
 978 <enabled/> or <disabled/>
 979 ```
 980 OMA-URI:
 981 ```
 982 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Locked
 983 ```
 984 Value (string):
 985 ```
 986 <enabled/> or <disabled/>
 987 ```
 988 #### macOS
 989 ```
 990 <dict>
 991   <key>Cookies</key>
 992   <dict>
 993     <key>Allow</key>
 994     <array>
 995       <string>http://example.com</string>
 996     </array>
 997     <key>AllowSession</key>
 998     <array>
 999       <string>http://example.edu</string>
1000     </array>
1001     <key>Block</key>
1002     <array>
1003       <string>http://example.org</string>
1004     </array>
1005     <key>Default</key>
1006     <true/> | <false/>
1007     <key>AcceptThirdParty</key>
1008     <string>always | never | from-visited</string>
1009     <key>ExpireAtSessionEnd</key>
1010     <true/> | <false/>
1011     <key>RejectTracker</key>
1012     <true/> | <false/>
1013     <key>Locked</key>
1014     <true/> | <false/>
1015   </dict>
1016 </dict>
1017 ```
1018 #### policies.json
1019 ```
1020 {
1021   "policies": {
1022     "Cookies": {
1023       "Allow": ["http://example.org/"],
1024       "AllowSession": ["http://example.edu/"],
1025       "Block": ["http://example.edu/"],
1026       "Default": true | false,
1027       "AcceptThirdParty": "always" | "never" | "from-visited",
1028       "ExpireAtSessionEnd": true | false,
1029       "RejectTracker": true | false,
1030       "Locked": true | false
1031     }
1032   }
1033 }
1034 ```
1035 ### DisableSetDesktopBackground
1036 Remove the "Set As Desktop Background..." menuitem when right clicking on an image.
1037
1038 **Compatibility:** Firefox 60, Firefox ESR 60\
1039 **CCK2 Equivalent:** `removeSetDesktopBackground`\
1040 **Preferences Affected:** N/A
1041
1042 #### Windows (GPO)
1043 ```
1044 Software\Policies\Mozilla\Firefox\DisableSetDesktopBackground = 0x1 | 0x0
1045 ```
1046 #### Windows (Intune)
1047 OMA-URI:
1048 ```
1049 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSetDesktopBackground
1050 ```
1051 Value (string):
1052 ```
1053 <enabled/> or <disabled/>
1054 ```
1055 #### macOS
1056 ```
1057 <dict>
1058   <key>DisableSetDesktopBackground</key>
1059   <true/> | <false/>
1060 </dict>
1061 ```
1062 #### policies.json
1063 ```
1064 {
1065   "policies": {
1066     "DisableSetDesktopBackground": true | false
1067   }
1068 }
1069 ```
1070 ### DisableMasterPasswordCreation
1071 Remove the master password functionality.
1072
1073 If this value is true, it works the same as setting [`PrimaryPassword`](#primarypassword) to false and removes the primary password functionality.
1074
1075 If both DisableMasterPasswordCreation and PrimaryPassword are used, DisableMasterPasswordCreation takes precedent.
1076
1077 **Compatibility:** Firefox 60, Firefox ESR 60\
1078 **CCK2 Equivalent:** `noMasterPassword`\
1079 **Preferences Affected:** N/A
1080
1081 #### Windows (GPO)
1082 ```
1083 Software\Policies\Mozilla\Firefox\DisableMasterPasswordCreation = 0x1 | 0x0
1084 ```
1085 #### Windows (Intune)
1086 OMA-URI:
1087 ```
1088 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableMasterPasswordCreation
1089 ```
1090 Value (string):
1091 ```
1092 <enabled/> or <disabled/>
1093 ```
1094 #### macOS
1095 ```
1096 <dict>
1097   <key>DisableMasterPasswordCreation</key>
1098   <true/> | <false/>
1099 </dict>
1100 ```
1101 #### policies.json
1102 ```
1103 {
1104   "policies": {
1105     "DisableMasterPasswordCreation": true | false
1106   }
1107 }
1108 ```
1109 ### DisableAppUpdate
1110 Turn off application updates within Firefox.
1111
1112 **Compatibility:** Firefox 60, Firefox ESR 60\
1113 **CCK2 Equivalent:** `disableFirefoxUpdates`\
1114 **Preferences Affected:** N/A
1115
1116 #### Windows (GPO)
1117 ```
1118 Software\Policies\Mozilla\Firefox\DisableAppUpdate = 0x1 | 0x0
1119 ```
1120 #### Windows (Intune)
1121 OMA-URI:
1122 ```
1123 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableAppUpdate
1124 ```
1125 Value (string):
1126 ```
1127 <enabled/> or <disabled/>
1128 ```
1129 #### macOS
1130 ```
1131 <dict>
1132   <key>DisableAppUpdate</key>
1133   <true/> | <false/>
1134 </dict>
1135 ```
1136 #### policies.json
1137 ```
1138 {
1139   "policies": {
1140     "DisableAppUpdate": true | false
1141   }
1142 }
1143 ```
1144 ### DisableBuiltinPDFViewer
1145 Disable the built in PDF viewer. PDF files are downloaded and sent externally.
1146
1147 **Compatibility:** Firefox 60, Firefox ESR 60\
1148 **CCK2 Equivalent:** `disablePDFjs`\
1149 **Preferences Affected:** `pdfjs.disabled`
1150
1151 #### Windows (GPO)
1152 ```
1153 Software\Policies\Mozilla\Firefox\DisableBuiltinPDFViewer = 0x1 | 0x0
1154 ```
1155 #### Windows (Intune)
1156 OMA-URI:
1157 ```
1158 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableBuiltinPDFViewer
1159 ```
1160 Value (string):
1161 ```
1162 <enabled/> or <disabled/>
1163 ```
1164 #### macOS
1165 ```
1166 <dict>
1167   <key>DisableBuiltinPDFViewer</key>
1168   <true/> | <false/>
1169 </dict>
1170 ```
1171 #### policies.json
1172 ```
1173 {
1174   "policies": {
1175     "DisableBuiltinPDFViewer": true | false
1176   }
1177 }
1178 ```
1179 ### DisabledCiphers
1180 Disable specific cryptographic ciphers.
1181
1182 **Preferences Affected:** `security.ssl3.dhe_rsa_aes_128_sha`, `security.ssl3.dhe_rsa_aes_256_sha`, `security.ssl3.ecdhe_ecdsa_aes_128_gcm_sha256`, `security.ssl3.ecdhe_rsa_aes_128_gcm_sha256`, `security.ssl3.ecdhe_rsa_aes_128_sha`, `security.ssl3.ecdhe_rsa_aes_256_sha`, `security.ssl3.rsa_aes_128_gcm_sha256`, `security.ssl3.rsa_aes_128_sha`, `security.ssl3.rsa_aes_256_gcm_sha384`, `security.ssl3.rsa_aes_256_sha`, `security.ssl3.rsa_des_ede3_sha`
1183
1184 ---
1185 **Note:**
1186
1187 This policy was updated in Firefox 78 to allow enabling ciphers as well. Setting the value to true disables the cipher, setting the value to false enables the cipher. Previously setting the value to true or false disabled the cipher.
1188
1189 ---
1190 **Compatibility:** Firefox 76, Firefox ESR 68.8 (TLS_RSA_WITH_AES_128_GCM_SHA256 and TLS_RSA_WITH_AES_256_GCM_SHA384 were added in Firefox 78)\
1191 **CCK2 Equivalent:** N/A\
1192 **Preferences Affected:** N/A
1193
1194 #### Windows (GPO)
1195 ```
1196 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_DHE_RSA_WITH_AES_128_CBC_SHA = 0x1 | 0x0
1197 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_DHE_RSA_WITH_AES_256_CBC_SHA = 0x1 | 0x0
1198 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA = 0x1 | 0x0
1199 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA = 0x1 | 0x0
1200 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 = 0x1 | 0x0
1201 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 = 0x1 | 0x0
1202 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_RSA_WITH_AES_128_CBC_SHA = 0x1 | 0x0
1203 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_RSA_WITH_AES_256_CBC_SHA = 0x1 | 0x0
1204 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_RSA_WITH_3DES_EDE_CBC_SHA = 0x1 | 0x0
1205 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_RSA_WITH_AES_128_GCM_SHA256 = 0x1 | 0x0
1206 Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_RSA_WITH_AES_256_GCM_SHA384 = 0x1 | 0x0
1207 ```
1208 #### Windows (Intune)
1209 OMA-URI:
1210 ```
1211 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_DHE_RSA_WITH_AES_128_CBC_SHA
1212 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_DHE_RSA_WITH_AES_256_CBC_SHA
1213 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
1214 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
1215 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
1216 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
1217 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_RSA_WITH_AES_128_CBC_SHA
1218 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_RSA_WITH_AES_256_CBC_SHA
1219 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_RSA_WITH_3DES_EDE_CBC_SHA
1220 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_RSA_WITH_AES_128_GCM_SHA256
1221 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_RSA_WITH_AES_256_GCM_SHA384
1222 ```
1223 Value (string):
1224 ```
1225 <enabled/> or <disabled/>
1226 ```
1227 #### macOS
1228 ```
1229 <dict>
1230   <key>DisabledCiphers</key>
1231     <dict>
1232       <key>TLS_DHE_RSA_WITH_AES_128_CBC_SHA</key>
1233       <true/> | <false/>
1234       <key>TLS_DHE_RSA_WITH_AES_256_CBC_SHA</key>
1235       <true/> | <false/>
1236       <key>TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA</key>
1237       <true/> | <false/>
1238       <key>TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA</key>
1239       <true/> | <false/>
1240       <key>TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256</key>
1241       <true/> | <false/>
1242       <key>TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256</key>
1243       <true/> | <false/>
1244       <key>TLS_RSA_WITH_AES_128_CBC_SHA</key>
1245       <true/> | <false/>
1246       <key>TLS_RSA_WITH_AES_256_CBC_SHA</key>
1247       <true/> | <false/>
1248       <key>TLS_RSA_WITH_3DES_EDE_CBC_SHA</key>
1249       <true/> | <false/>
1250       <key>TLS_RSA_WITH_AES_128_GCM_SHA256</key>
1251       <true/> | <false/>
1252       <key>TLS_RSA_WITH_AES_256_GCM_SHA384</key>
1253       <true/> | <false/>
1254     </dict>
1255 </dict>
1256 ```
1257 #### policies.json
1258 ```
1259 {
1260   "policies": {
1261     "DisabledCiphers": {
1262       "TLS_DHE_RSA_WITH_AES_128_CBC_SHA": true | false,
1263       "TLS_DHE_RSA_WITH_AES_256_CBC_SHA": true | false,
1264       "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA": true | false,
1265       "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA": true | false,
1266       "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256": true | false,
1267       "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256": true | false,
1268       "TLS_RSA_WITH_AES_128_CBC_SHA": true | false,
1269       "TLS_RSA_WITH_AES_256_CBC_SHA": true | false,
1270       "TLS_RSA_WITH_3DES_EDE_CBC_SHA": true | false,
1271       "TLS_RSA_WITH_AES_128_GCM_SHA256": true | false,
1272       "TLS_RSA_WITH_AES_256_GCM_SHA384": true | false
1273     }
1274   }
1275 }
1276 ```
1277 ### DisableDefaultBrowserAgent
1278 Prevent the default browser agent from taking any actions. Only applicable to Windows; other platforms don’t have the agent.
1279
1280 The browser agent is a Windows-only scheduled task which runs in the background to collect and submit data about the browser that the user has set as their OS default. More information is available [here](https://firefox-source-docs.mozilla.org/toolkit/mozapps/defaultagent/default-browser-agent/index.html).
1281
1282 **Compatibility:** Firefox 75, Firefox ESR 68.7 (Windows only)\
1283 **CCK2 Equivalent:** N/A\
1284 **Preferences Affected:** N/A
1285
1286 #### Windows (GPO)
1287 ```
1288 Software\Policies\Mozilla\Firefox\DisableDefaultBrowserAgent = 0x1 | 0x0
1289 ```
1290 #### Windows (Intune)
1291 OMA-URI:
1292 ```
1293 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableDefaultBrowserAgent
1294 ```
1295 Value (string):
1296 ```
1297 <enabled/> or <disabled/>
1298 ```
1299 #### policies.json
1300 ```
1301 {
1302   "policies": {
1303     "DisableDefaultBrowserAgent": true | false
1304   }
1305 }
1306 ```
1307 ### DisableDeveloperTools
1308 Remove access to all developer tools.
1309
1310 **Compatibility:** Firefox 60, Firefox ESR 60\
1311 **CCK2 Equivalent:** `removeDeveloperTools`\
1312 **Preferences Affected:** `devtools.policy.disabled`
1313
1314 #### Windows (GPO)
1315 ```
1316 Software\Policies\Mozilla\Firefox\DisableDeveloperTools = 0x1 | 0x0`
1317 ```
1318 #### Windows (Intune)
1319 OMA-URI:
1320 ```
1321 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableDeveloperTools
1322 ```
1323 Value (string):
1324 ```
1325 <enabled/> or <disabled/>
1326 ```
1327 #### macOS
1328 ```
1329 <dict>
1330   <key>DisableDeveloperTools</key>
1331   <true/> | <false/>
1332 </dict>
1333 ```
1334 #### policies.json
1335 ```
1336 {
1337   "policies": {
1338     "DisableDeveloperTools": true | false
1339   }
1340 }
1341 ```
1342 ### DisableFeedbackCommands
1343 Disable the menus for reporting sites (Submit Feedback, Report Deceptive Site).
1344
1345 **Compatibility:** Firefox 60, Firefox ESR 60\
1346 **CCK2 Equivalent:** N/A\
1347 **Preferences Affected:** N/A
1348
1349 #### Windows (GPO)
1350 ```
1351 Software\Policies\Mozilla\Firefox\DisableFeedbackCommands = 0x1 | 0x0
1352 ```
1353 #### Windows (Intune)
1354 OMA-URI:
1355 ```
1356 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFeedbackCommands
1357 ```
1358 Value (string):
1359 ```
1360 <enabled/> or <disabled/>
1361 ```
1362 #### macOS
1363 ```
1364 <dict>
1365   <key>DisableFeedbackCommands</key>
1366   <true/> | <false/>
1367 </dict>
1368 ```
1369 #### policies.json
1370 ```
1371 {
1372   "policies": {
1373     "DisableFeedbackCommands": true | false
1374   }
1375 }
1376 ```
1377 ### DisableFirefoxScreenshots
1378 Remove access to Firefox Screenshots.
1379
1380 **Compatibility:** Firefox 60, Firefox ESR 60\
1381 **CCK2 Equivalent:** N/A\
1382 **Preferences Affected:** `extensions.screenshots.disabled`
1383
1384 #### Windows (GPO)
1385 ```
1386 Software\Policies\Mozilla\Firefox\DisableFirefoxScreenshots = 0x1 | 0x0
1387 ```
1388 #### Windows (Intune)
1389 OMA-URI:
1390 ```
1391 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxScreenshots
1392 ```
1393 Value (string):
1394 ```
1395 <enabled/> or <disabled/>
1396 ```
1397 #### macOS
1398 ```
1399 <dict>
1400   <key>DisableFirefoxScreenshots</key>
1401   <true/> | <false/>
1402 </dict>
1403 ```
1404 #### policies.json
1405 ```
1406 {
1407   "policies": {
1408     "DisableFirefoxScreenshots": true | false
1409   }
1410 }
1411 ```
1412 ### DisableFirefoxAccounts
1413 Disable Firefox Accounts integration (Sync).
1414
1415 **Compatibility:** Firefox 60, Firefox ESR 60\
1416 **CCK2 Equivalent:** `disableSync`\
1417 **Preferences Affected:** `identity.fxaccounts.enabled`
1418
1419 #### Windows (GPO)
1420 ```
1421 Software\Policies\Mozilla\Firefox\DisableFirefoxAccounts = 0x1 | 0x0
1422 ```
1423 #### Windows (Intune)
1424 OMA-URI:
1425 ```
1426 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxAccounts
1427 ```
1428 Value (string):
1429 ```
1430 <enabled/> or <disabled/>
1431 ```
1432 #### macOS
1433 ```
1434 <dict>
1435   <key>DisableFirefoxAccounts</key>
1436   <true/> | <false/>
1437 </dict>
1438 ```
1439 #### policies.json
1440 ```
1441 {
1442   "policies": {
1443     "DisableFirefoxAccounts": true | false
1444   }
1445 }
1446 ```
1447 ### DisableFirefoxStudies
1448 Disable Firefox studies (Shield).
1449
1450 **Compatibility:** Firefox 60, Firefox ESR 60\
1451 **CCK2 Equivalent:** N/A\
1452 **Preferences Affected:** N/A
1453
1454 #### Windows (GPO)
1455 ```
1456 Software\Policies\Mozilla\Firefox\DisableFirefoxStudies = 0x1 | 0x0
1457 ```
1458 #### Windows (Intune)
1459 OMA-URI:
1460 ```
1461 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxStudies
1462 ```
1463 Value (string):
1464 ```
1465 <enabled/> or <disabled/>
1466 ```
1467 #### macOS
1468 ```
1469 <dict>
1470   <key>DisableFirefoxStudies</key>
1471   <true/> | <false/>
1472 </dict>
1473 ```
1474 #### policies.json
1475 ```
1476 {
1477   "policies": {
1478     "DisableFirefoxStudies": true | false
1479   }
1480 }
1481 ```
1482 ### DisableForgetButton
1483 Disable the "Forget" button.
1484
1485 **Compatibility:** Firefox 60, Firefox ESR 60\
1486 **CCK2 Equivalent:** `disableForget`\
1487 **Preferences Affected:** N/A
1488
1489 #### Windows (GPO)
1490 ```
1491 Software\Policies\Mozilla\Firefox\DisableForgetButton = 0x1 | 0x0
1492 ```
1493 #### Windows (Intune)
1494 OMA-URI:
1495 ```
1496 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableForgetButton
1497 ```
1498 Value (string):
1499 ```
1500 <enabled/> or <disabled/>
1501 ```
1502 #### macOS
1503 ```
1504 <dict>
1505   <key>DisableForgetButton</key>
1506   <true/> | <false/>
1507 </dict>
1508 ```
1509 #### policies.json
1510 ```
1511 {
1512   "policies": {
1513     "DisableForgetButton": true | false
1514   }
1515 }
1516 ```
1517 ### DisableFormHistory
1518 Turn off saving information on web forms and the search bar.
1519
1520 **Compatibility:** Firefox 60, Firefox ESR 60\
1521 **CCK2 Equivalent:** `disableFormFill`\
1522 **Preferences Affected:** `browser.formfill.enable`
1523
1524 #### Windows (GPO)
1525 ```
1526 Software\Policies\Mozilla\Firefox\DisableFormHistory = 0x1 | 0x0
1527 ```
1528 #### Windows (Intune)
1529 OMA-URI:
1530 ```
1531 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFormHistory
1532 ```
1533 Value (string):
1534 ```
1535 <enabled/> or <disabled/>
1536 ```
1537 #### macOS
1538 ```
1539 <dict>
1540   <key>DisableFormHistory</key>
1541   <true/> | <false/>
1542 </dict>
1543 ```
1544 #### policies.json
1545 ```
1546 {
1547   "policies": {
1548     "DisableFormHistory": true | false
1549   }
1550 }
1551 ```
1552 ### DisablePasswordReveal
1553 Do not allow passwords to be shown in saved logins
1554
1555 **Compatibility:** Firefox 71, Firefox ESR 68.3\
1556 **CCK2 Equivalent:** N/A
1557 **Preferences Affected:** N/A
1558
1559 #### Windows (GPO)
1560 ```
1561 Software\Policies\Mozilla\Firefox\DisablePasswordReveal = 0x1 | 0x0
1562 ```
1563 #### Windows (Intune)
1564 OMA-URI:
1565 ```
1566 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePasswordReveal
1567 ```
1568 Value (string):
1569 ```
1570 <enabled/> or <disabled/>
1571 ```
1572 #### macOS
1573 ```
1574 <dict>
1575   <key>DisablePasswordReveal</key>
1576   <true/> | <false/>
1577 </dict>
1578 ```
1579 #### policies.json
1580 ```
1581 {
1582   "policies": {
1583     "DisablePasswordReveal": true | false
1584   }
1585 }
1586 ```
1587 ### DisablePocket
1588 Remove Pocket in the Firefox UI. It does not remove it from the new tab page.
1589
1590 **Compatibility:** Firefox 60, Firefox ESR 60\
1591 **CCK2 Equivalent:** `disablePocket`\
1592 **Preferences Affected:** `extensions.pocket.enabled`
1593
1594 #### Windows (GPO)
1595 ```
1596 Software\Policies\Mozilla\Firefox\DisablePocket = 0x1 | 0x0
1597 ```
1598 #### Windows (Intune)
1599 OMA-URI:
1600 ```
1601 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePocket
1602 ```
1603 Value (string):
1604 ```
1605 <enabled/> or <disabled/>
1606 ```
1607 #### macOS
1608 ```
1609 <dict>
1610   <key>DisablePocket</key>
1611   <true/> | <false/>
1612 </dict>
1613 ```
1614 #### policies.json
1615 ```
1616 {
1617   "policies": {
1618     "DisablePocket": true | false
1619   }
1620 }
1621 ```
1622 ### DisablePrivateBrowsing
1623 Remove access to private browsing.
1624
1625 **Compatibility:** Firefox 60, Firefox ESR 60\
1626 **CCK2 Equivalent:** `disablePrivateBrowsing`\
1627 **Preferences Affected:** N/A
1628
1629 #### Windows (GPO)
1630 ```
1631 Software\Policies\Mozilla\Firefox\DisablePrivateBrowsing = 0x1 | 0x0
1632 ```
1633 #### Windows (Intune)
1634 OMA-URI:
1635 ```
1636 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePrivateBrowsing
1637 ```
1638 Value (string):
1639 ```
1640 <enabled/> or <disabled/>
1641 ```
1642 #### macOS
1643 ```
1644 <dict>
1645   <key>DisablePrivateBrowsing</key>
1646   <true/> | <false/>
1647 </dict>
1648 ```
1649 #### policies.json
1650 ```
1651 {
1652   "policies": {
1653     "DisablePrivateBrowsing": true | false
1654   }
1655 }
1656 ```
1657 ### DisableProfileImport
1658 Disables the "Import data from another browser" option in the bookmarks window.
1659
1660 **Compatibility:** Firefox 60, Firefox ESR 60\
1661 **CCK2 Equivalent:** N/A\
1662 **Preferences Affected:** N/A
1663
1664 #### Windows (GPO)
1665 ```
1666 Software\Policies\Mozilla\Firefox\DisableProfileImport = 0x1 | 0x0
1667 ```
1668 #### Windows (Intune)
1669 OMA-URI:
1670 ```
1671 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableProfileImport
1672 ```
1673 Value (string):
1674 ```
1675 <enabled/> or <disabled/>
1676 ```
1677 #### macOS
1678 ```
1679 <dict>
1680   <key>DisableProfileImport</key>
1681   <true/> | <false/>
1682 </dict>
1683 ```
1684 #### policies.json
1685 ```
1686 {
1687   "policies": {
1688     "DisableProfileImport": true | false
1689   }
1690 }
1691 ```
1692 ### DisableProfileRefresh
1693 Disable the Refresh Firefox button on about:support and support.mozilla.org, as well as the prompt that displays offering to refresh Firefox when you haven't used it in a while.
1694
1695 **Compatibility:** Firefox 60, Firefox ESR 60\
1696 **CCK2 Equivalent:** `disableResetFirefox`\
1697 **Preferences Affected:** `browser.disableResetPrompt`
1698
1699 #### Windows (GPO)
1700 ```
1701 Software\Policies\Mozilla\Firefox\DisableProfileRefresh = 0x1 | 0x0
1702 ```
1703 #### Windows (Intune)
1704 OMA-URI:
1705 ```
1706 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableProfileRefresh
1707 ```
1708 Value (string):
1709 ```
1710 <enabled/> or <disabled/>
1711 ```
1712 #### macOS
1713 ```
1714 <dict>
1715   <key>DisableProfileRefresh</key>
1716   <true/> | <false/>
1717 </dict>
1718 ```
1719 #### policies.json
1720 ```
1721 {
1722   "policies": {
1723     "DisableProfileRefresh": true | false
1724   }
1725 }
1726 ```
1727 ### DisableSafeMode
1728 Disable safe mode within the browser.
1729
1730 On Windows, this disables safe mode via the command line as well.
1731
1732 **Compatibility:** Firefox 60, Firefox ESR 60 (Windows, macOS)\
1733 **CCK2 Equivalent:** `disableSafeMode`\
1734 **Preferences Affected:** N/A
1735
1736 #### Windows (GPO)
1737 ```
1738 Software\Policies\Mozilla\Firefox\DisableSafeMode = 0x1 | 0x0
1739 ```
1740 #### Windows (Intune)
1741 OMA-URI:
1742 ```
1743 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSafeMode
1744 ```
1745 Value (string):
1746 ```
1747 <enabled/> or <disabled/>
1748 ```
1749 #### macOS
1750 ```
1751 <dict>
1752   <key>DisableSafeMode</key>
1753   <true/> | <false/>
1754 </dict>
1755 ```
1756 #### policies.json
1757 ```
1758 {
1759   "policies": {
1760     "DisableSafeMode": true | false
1761   }
1762 }
1763 ```
1764 ### DisableSecurityBypass
1765 Prevent the user from bypassing security in certain cases.
1766
1767 `InvalidCertificate` prevents adding an exception when an invalid certificate is shown.
1768
1769 `SafeBrowsing` prevents selecting "ignore the risk" and visiting a harmful site anyway.
1770
1771 **Compatibility:** Firefox 60, Firefox ESR 60\
1772 **CCK2 Equivalent:** N/A\
1773 **Preferences Affected:** `security.certerror.hideAddException`, `browser.safebrowsing.allowOverride`
1774
1775 #### Windows (GPO)
1776 ```
1777 Software\Policies\Mozilla\Firefox\DisableSecurityBypass\InvalidCertificate = 0x1 | 0x0
1778 Software\Policies\Mozilla\Firefox\DisableSecurityBypass\SafeBrowsing = 0x1 | 0x0
1779 ```
1780 #### Windows (Intune)
1781 OMA-URI:
1782 ```
1783 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/P_DisableSecurityBypass_InvalidCertificate
1784 ```
1785 Value (string):
1786 ```
1787 <enabled/> or <disabled/>
1788 ```
1789 OMA-URI:
1790 ```
1791 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/P_DisableSecurityBypass_SafeBrowsing
1792 ```
1793 Value (string):
1794 ```
1795 <enabled/> or <disabled/>
1796 ```
1797
1798 #### macOS
1799 ```
1800 <dict>
1801   <key>DisableSecurityBypass</key>
1802   <dict>
1803     <key>InvalidCertificate</key>
1804     <true/> | <false/>
1805     <key>SafeBrowsing</key>
1806     <true/> | <false/>
1807   </dict>
1808 </dict>
1809 ```
1810 #### policies.json
1811 ```
1812 {
1813   "policies": {
1814     "DisableSecurityBypass": {
1815       "InvalidCertificate": true | false,
1816       "SafeBrowsing": true | false
1817     }
1818   }
1819 }
1820 ```
1821 ### DisableSystemAddonUpdate
1822 Prevent system add-ons from being installed or update.
1823
1824 **Compatibility:** Firefox 60, Firefox ESR 60\
1825 **CCK2 Equivalent:** N/A\
1826 **Preferences Affected:** N/A
1827
1828 #### Windows (GPO)
1829 ```
1830 Software\Policies\Mozilla\Firefox\DisableSystemAddonUpdate = 0x1 | 0x0
1831 ```
1832 #### Windows (Intune)
1833 OMA-URI:
1834 ```
1835 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSystemAddonUpdate
1836 ```
1837 Value (string):
1838 ```
1839 <enabled/> or <disabled/>
1840 ```
1841 #### macOS
1842 ```
1843 <dict>
1844   <key>DisableSystemAddonUpdate</key>
1845   <true/> | <false/>
1846 </dict>
1847 ```
1848 #### policies.json
1849 ```
1850 {
1851   "policies": {
1852     "DisableSystemAddonUpdate": true | false
1853   }
1854 }
1855 ```
1856 ### DisableTelemetry
1857 Prevent the upload of telemetry data.
1858
1859 As of Firefox 83 and Firefox ESR 78.5, local storage of telemetry data is disabled as well.
1860
1861 Mozilla recommends that you do not disable telemetry. Information collected through telemetry helps us build a better product for businesses like yours.
1862
1863 **Compatibility:** Firefox 60, Firefox ESR 60\
1864 **CCK2 Equivalent:** `disableTelemetry`\
1865 **Preferences Affected:** `datareporting.healthreport.uploadEnabled`, `datareporting.policy.dataSubmissionEnabled`, `toolkit.telemetry.archive.enabled`
1866
1867 #### Windows (GPO)
1868 ```
1869 Software\Policies\Mozilla\Firefox\DisableTelemetry = 0x1 | 0x0
1870 ```
1871 #### Windows (Intune)
1872 OMA-URI:
1873 ```
1874 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableTelemetry
1875 ```
1876 Value (string):
1877 ```
1878 <enabled/> or <disabled/>
1879 ```
1880 #### macOS
1881 ```
1882 <dict>
1883   <key>DisableTelemetry</key>
1884   <true/> | <false/>
1885 </dict>
1886 ```
1887 #### policies.json
1888 ```
1889 {
1890   "policies": {
1891     "DisableTelemetry": true | false
1892   }
1893 }
1894 ```
1895 ### DisplayBookmarksToolbar
1896 Set the initial state of the bookmarks toolbar. A user can still hide it and it will stay hidden.
1897
1898 **Compatibility:** Firefox 60, Firefox ESR 60\
1899 **CCK2 Equivalent:** `displayBookmarksToolbar`\
1900 **Preferences Affected:** N/A
1901
1902 #### Windows (GPO)
1903 ```
1904 Software\Policies\Mozilla\Firefox\DisplayBookmarksToolbar = 0x1 | 0x0
1905 ```
1906 #### Windows (Intune)
1907 OMA-URI:
1908 ```
1909 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisplayBookmarksToolbar
1910 ```
1911 Value (string):
1912 ```
1913 <enabled/> or <disabled/>
1914 ```
1915 #### macOS
1916 ```
1917 <dict>
1918   <key>DisplayBookmarksToolbar</key>
1919   <true/> | <false/>
1920 </dict>
1921 ```
1922 #### policies.json
1923 ```
1924 {
1925   "policies": {
1926     "DisplayBookmarksToolbar": true | false
1927   }
1928 }
1929 ```
1930 ### DisplayMenuBar (Deprecated)
1931 Set the initial state of the menubar. A user can still hide it and it will stay hidden.
1932
1933 **Compatibility:** Firefox 60, Firefox ESR 60 (Windows, some Linux)\
1934 **CCK2 Equivalent:** `displayMenuBar`\
1935 **Preferences Affected:** N/A
1936
1937 #### Windows (GPO)
1938 ```
1939 Software\Policies\Mozilla\Firefox\DisplayMenuBar = 0x1 | 0x0
1940 ```
1941 #### macOS
1942 ```
1943 <dict>
1944   <key>DisplayMenuBar</key>
1945   <true/> | <false/>
1946 </dict>
1947 ```
1948 #### policies.json
1949 ```
1950 {
1951   "policies": {
1952     "DisplayMenuBar": true | false
1953   }
1954 }
1955 ```
1956 ### DisplayMenuBar
1957 Set the state of the menubar.
1958
1959 `always` means the menubar is shown and cannot be hidden.
1960
1961 `never` means the menubar is hidden and cannot be shown.
1962
1963 `default-on` means the menubar is on by default but can be hidden.
1964
1965 `default-off` means the menubar is off by default but can be shown.
1966
1967 **Compatibility:** Firefox 73, Firefox ESR 68.5 (Windows, some Linux)\
1968 **CCK2 Equivalent:** `displayMenuBar`\
1969 **Preferences Affected:** N/A
1970
1971 #### Windows (GPO)
1972 ```
1973 Software\Policies\Mozilla\Firefox\DisplayMenuBar = "always", "never", "default-on", "default-off"
1974 ```
1975 #### Windows (Intune)
1976 OMA-URI:
1977 ```
1978 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisplayMenuBar_Enum
1979 ```
1980 Value (string):
1981 ```
1982 <enabled/>
1983 <data id="DisplayMenuBar" value="always | never | default-on | default-off"/>
1984 ```
1985 #### macOS
1986 ```
1987 <dict>
1988   <key>DisplayMenuBar</key>
1989   <string>always | never | default-on | default-off</string>
1990 </dict>
1991 ```
1992 #### policies.json
1993 ```
1994 {
1995   "policies": {
1996     "DisplayMenuBar": "always", "never", "default-on", "default-off"
1997   }
1998 }
1999 ```
2000 ### DNSOverHTTPS
2001 Configure DNS over HTTPS.
2002
2003 `Enabled` determines whether DNS over HTTPS is enabled
2004
2005 `ProviderURL` is a URL to another provider.
2006
2007 `Locked` prevents the user from changing DNS over HTTPS preferences.
2008
2009 `ExcludedDomains` excludes domains from DNS over HTTPS.
2010
2011 **Compatibility:** Firefox 63, Firefox ESR 68 (ExcludedDomains added in 75/68.7)\
2012 **CCK2 Equivalent:** N/A\
2013 **Preferences Affected:** `network.trr.mode`, `network.trr.uri`
2014
2015 #### Windows (GPO)
2016 ```
2017 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\Enabled = 0x1 | 0x0
2018 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\ProviderURL = "URL_TO_ALTERNATE_PROVIDER"
2019 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\Locked = 0x1 | 0x0
2020 Software\Policies\Mozilla\Firefox\DNSOverHTTPS\ExcludedDomains\1 = "example.com"
2021 ```
2022 #### Windows (Intune)
2023 OMA-URI:
2024 ```
2025 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_Enabled
2026 ```
2027 Value (string):
2028 ```
2029 <enabled/> or <disabled/>
2030 ```
2031 OMA-URI:
2032 ```
2033 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_ProviderURL
2034 ```
2035 Value (string):
2036 ```
2037 <enabled/>
2038 <data id="String" value="URL_TO_ALTERNATE_PROVIDER"/>
2039 ```
2040 OMA-URI:
2041 ```
2042 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_Locked
2043 ```
2044 Value (string):
2045 ```
2046 <enabled/> or <disabled/>
2047 ```
2048 OMA-URI:
2049 ```
2050 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_ExcludedDomains
2051 ```
2052 Value (string):
2053 ```
2054 <enabled/>
2055 <data id="List" value="1&#xF000;example.com"/>
2056 ```
2057 #### macOS
2058 ```
2059 <dict>
2060   <key>DNSOverHTTPS</key>
2061   <dict>
2062     <key>Enabled</key>
2063     <true/> | <false/>
2064     <key>ProviderURL</key>
2065     <string>URL_TO_ALTERNATE_PROVIDER</string>
2066     <key>Locked</key>
2067     <true/> | <false/>
2068     <key>ExcludedDomains</key>
2069     <array>
2070       <string>example.com</string>
2071     </array>
2072   </dict>
2073 </dict>
2074 ```
2075 #### policies.json
2076 ```
2077 {
2078   "policies": {
2079     "DNSOverHTTPS": {
2080       "Enabled":  true | false,
2081       "ProviderURL": "URL_TO_ALTERNATE_PROVIDER",
2082       "Locked": true | false,
2083       "ExcludedDomains": ["example.com"]
2084     }
2085   }
2086 }
2087 ```
2088 ### DontCheckDefaultBrowser
2089 Don't check if Firefox is the default browser at startup.
2090
2091 **Compatibility:** Firefox 60, Firefox ESR 60\
2092 **CCK2 Equivalent:** `dontCheckDefaultBrowser`\
2093 **Preferences Affected:** `browser.shell.checkDefaultBrowser`
2094
2095 #### Windows (GPO)
2096 ```
2097 Software\Policies\Mozilla\Firefox\DontCheckDefaultBrowser = 0x1 | 0x0
2098 ```
2099 #### Windows (Intune)
2100 OMA-URI:
2101 ```
2102 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DontCheckDefaultBrowser
2103 ```
2104 Value (string):
2105 ```
2106 <enabled/> or <disabled/>
2107 ```
2108 #### macOS
2109 ```
2110 <dict>
2111   <key>DontCheckDefaultBrowser</key>
2112   <true/> | <false/>
2113 </dict>
2114 ```
2115 #### policies.json
2116 ```
2117 {
2118   "policies": {
2119     "DontCheckDefaultBrowser": true | false
2120   }
2121 }
2122 ```
2123 ### DefaultDownloadDirectory
2124 Set the default download directory.
2125
2126 You can use ${home} for the native home directory.
2127
2128 **Compatibility:** Firefox 68, Firefox ESR 68\
2129 **CCK2 Equivalent:** N/A\
2130 **Preferences Affected:** `browser.download.dir`, `browser.download.folderList`
2131
2132 #### Windows (GPO)
2133 ```
2134 Software\Policies\Mozilla\Firefox\DefaultDownloadDirectory = "${home}\Downloads"
2135 ```
2136 #### Windows (Intune)
2137 OMA-URI:
2138 ```
2139 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DefaultDownloadDirectory
2140 ```
2141 Value (string):
2142 ```
2143 <enabled/>
2144 <data id="Preferences_String" value="${home}\Downloads"/>
2145 ```
2146 #### macOS
2147 ```
2148 <dict>
2149   <key>DefaultDownloadDirectory</key>
2150   <string>${home}/Downloads</string>
2151 </dict>
2152 ```
2153 #### policies.json (macOS and Linux)
2154 ```
2155 {
2156   "policies": {
2157     "DefaultDownloadDirectory": "${home}/Downloads"
2158 }
2159 ```
2160 #### policies.json (Windows)
2161 ```
2162 {
2163   "policies": {
2164     "DefaultDownloadDirectory": "${home}\\Downloads"
2165 }
2166 ```
2167 ### DownloadDirectory
2168 Set and lock the download directory.
2169
2170 You can use ${home} for the native home directory.
2171
2172 **Compatibility:** Firefox 68, Firefox ESR 68\
2173 **CCK2 Equivalent:** N/A\
2174 **Preferences Affected:** `browser.download.dir`, `browser.download.folderList`, `browser.download.useDownloadDir`
2175
2176 #### Windows (GPO)
2177 ```
2178 Software\Policies\Mozilla\Firefox\DownloadDirectory = "${home}\Downloads"
2179 ```
2180 #### Windows (Intune)
2181 OMA-URI:
2182 ```
2183 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DownloadDirectory
2184 ```
2185 Value (string):
2186 ```
2187 <enabled/>
2188 <data id="Preferences_String" value="${home}\Downloads"/>
2189 ```
2190 #### macOS
2191 ```
2192 <dict>
2193   <key>DownloadDirectory</key>
2194   <string>${home}/Downloads</string>
2195 </dict>
2196 ```
2197 #### policies.json (macOS and Linux)
2198 ```
2199 {
2200   "policies": {
2201     "DownloadDirectory": "${home}/Downloads"
2202 }
2203 ```
2204 #### policies.json (Windows)
2205 ```
2206 {
2207   "policies": {
2208     "DownloadDirectory": "${home}\\Downloads"
2209 }
2210 ```
2211 ### EnableTrackingProtection
2212 Configure tracking protection.
2213
2214 If this policy is not configured, tracking protection is not enabled by default in the browser, but it is enabled by default in private browsing and the user can change it.
2215
2216 If `Value` is set to false, tracking protection is disabled and locked in both the regular browser and private browsing.
2217
2218 If `Value` is set to true, tracking protection is enabled by default in both the regular browser and private browsing and the `Locked` value determines whether or not a user can change it.
2219
2220 If `Cryptomining` is set to true, cryptomining scripts on websites are blocked.
2221
2222 If `Fingerprinting` is set to true, fingerprinting scripts on websites are blocked.
2223
2224 `Exceptions` are origins for which tracking protection is not enabled.
2225
2226 **Compatibility:** Firefox 60, Firefox ESR 60 (Cryptomining and Fingerprinting added in 70/68.2, Exceptions added in 73/68.5)\
2227 **CCK2 Equivalent:** N/A\
2228 **Preferences Affected:** `privacy.trackingprotection.enabled`, `privacy.trackingprotection.pbmode.enabled`, `privacy.trackingprotection.cryptomining.enabled`, `privacy.trackingprotection.fingerprinting.enabled`
2229
2230 #### Windows (GPO)
2231 ```
2232 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Value = 0x1 | 0x0
2233 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Locked = 0x1 | 0x0
2234 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Cryptomining = 0x1 | 0x0
2235 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Fingerprinting = 0x1 | 0x0
2236 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Exceptions\1 = "https://example.com"
2237 ```
2238 #### Windows (Intune)
2239 OMA-URI:
2240 ```
2241 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/A_TrackingProtection_Value
2242 ```
2243 Value (string):
2244 ```
2245 <enabled/> or <disabled/>
2246 ```
2247 OMA-URI:
2248 ```
2249 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/B_TrackingProtection_Cryptomining
2250 ```
2251 Value (string):
2252 ```
2253 <enabled/> or <disabled/>
2254 ```
2255 OMA-URI:
2256 ```
2257 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/C_TrackingProtection_Fingerprinting
2258 ```
2259 Value (string):
2260 ```
2261 <enabled/> or <disabled/>
2262 ```
2263 OMA-URI:
2264 ```
2265 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/D_TrackingProtection_Exceptions
2266 ```
2267 Value (string):
2268 ```
2269 <data id="TrackingProtection_Exceptions" value="1&#xF000;https://example.com"/>
2270 ```
2271 OMA-URI:
2272 ```
2273 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/E_TrackingProtection_Locked
2274 ```
2275 Value (string):
2276 ```
2277 <enabled/> or <disabled/>
2278 ```
2279 #### macOS
2280 ```
2281 <dict>
2282   <key>EnableTrackingProtection</key>
2283   <dict>
2284     <key>Value</key>
2285     <true/> | <false/>
2286     <key>Locked</key>
2287     <true/> | <false/>
2288     <key>Cryptomining</key>
2289     <true/> | <false/>
2290     <key>Fingerprinting</key>
2291     <true/> | <false/>
2292     <key>Exceptions</key>
2293     <array>
2294       <string>https://example.com</string>
2295     </array>
2296   </dict>
2297 </dict>
2298 ```
2299 #### policies.json
2300 ```
2301 {
2302   "policies": {
2303     "EnableTrackingProtection": {
2304       "Value": true | false,
2305       "Locked": true | false,
2306       "Cryptomining": true | false,
2307       "Fingerprinting": true | false,
2308       "Exceptions": ["https://example.com"]
2309     }
2310   }
2311 }
2312 ```
2313 ### EncryptedMediaExtensions
2314 Enable or disable Encrypted Media Extensions and optionally lock it.
2315
2316 If `Enabled` is set to false, encrypted media extensions (like Widevine) are not downloaded by Firefox unless the user consents to installing them.
2317
2318 If `Locked` is set to true and `Enabled` is set to false, Firefox will not download encrypted media extensions (like Widevine) or ask the user to install them.
2319
2320 **Compatibility:** Firefox 77, Firefox ESR 68.9\
2321 **CCK2 Equivalent:** N/A\
2322 **Preferences Affected:** `media.eme.enabled`
2323
2324 #### Windows (GPO)
2325 ```
2326 Software\Policies\Mozilla\Firefox\EncryptedMediaExtensions\Enabled = 0x1 | 0x0
2327 Software\Policies\Mozilla\Firefox\EncryptedMediaExtensions\Locked = 0x1 | 0x0
2328 ```
2329 #### Windows (Intune)
2330 OMA-URI:
2331 ```
2332 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~EncryptedMediaExtensions/EncryptedMediaExtensions_Enabled
2333 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~EncryptedMediaExtensions/EncryptedMediaExtensions_Locked
2334 ```
2335 Value (string):
2336 ```
2337 <enabled/>or <disabled/>
2338 ```
2339 #### macOS
2340 ```
2341 <dict>
2342   <key>EncryptedMediaExtensions</key>
2343   <dict>
2344     <key>Enabled</key>
2345     <true/> | <false/>
2346     <key>Locked</key>
2347     <true/> | <false/>
2348   </dict>
2349 </dict>
2350 ```
2351 #### policies.json
2352 ```
2353 {
2354   "policies": {
2355     "EncryptedMediaExtensions": {
2356       "Enabled": true | false,
2357       "Locked": true | false
2358     }
2359   }
2360 }
2361 ```
2362 ### EnterprisePoliciesEnabled
2363 Enable policy support on macOS.
2364
2365 **Compatibility:** Firefox 63, Firefox ESR 60.3 (macOS only)\
2366 **CCK2 Equivalent:** N/A\
2367 **Preferences Affected:** N/A
2368
2369 #### macOS
2370 ```
2371 <dict>
2372   <key>EnterprisePoliciesEnabled</key>
2373   <true/>
2374 </dict>
2375 ```
2376 ### Extensions
2377 Control the installation, uninstallation and locking of extensions.
2378
2379 While this policy is not technically deprecated, it is recommended that you use the **[`ExtensionSettings`](#extensionsettings)** policy. It has the same functionality and adds more. It does not support native paths, though, so you'll have to use file:/// URLs.
2380
2381 `Install` is a list of URLs or native paths for extensions to be installed.
2382
2383 `Uninstall` is a list of extension IDs that should be uninstalled if found.
2384
2385 `Locked` is a list of extension IDs that the user cannot disable or uninstall.
2386
2387 **Compatibility:** Firefox 60, Firefox ESR 60\
2388 **CCK2 Equivalent:** `addons`\
2389 **Preferences Affected:** N/A
2390
2391 #### Windows (GPO)
2392 ```
2393 Software\Policies\Mozilla\Firefox\Extensions\Install\1 = "https://addons.mozilla.org/firefox/downloads/somefile.xpi"
2394 Software\Policies\Mozilla\Firefox\Extensions\Install\2 = "//path/to/xpi"
2395 Software\Policies\Mozilla\Firefox\Extensions\Uninstall\1 = "bad_addon_id@mozilla.org"
2396 Software\Policies\Mozilla\Firefox\Extensions\Locked\1 = "addon_id@mozilla.org"
2397 ```
2398 #### Windows (Intune)
2399 OMA-URI:
2400 ```
2401 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/Extensions_Install
2402 ```
2403 Value (string):
2404 ```
2405 <enabled/>
2406 <data id="Extensions" value="1&#xF000;https://addons.mozilla.org/firefox/downloads/somefile.xpi&#xF000;2&#xF000;//path/to/xpi"/>
2407 ```
2408 OMA-URI:
2409 ```
2410 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/Extensions_Uninstall
2411 ```
2412 Value (string):
2413 ```
2414 <enabled/>
2415 <data id="Extensions" value="1&#xF000;bad_addon_id@mozilla.org"/>
2416 ```
2417 OMA-URI:
2418 ```
2419 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/Extensions_Locked
2420 ```
2421 Value (string):
2422 ```
2423 <enabled/>
2424 <data id="Extensions" value="1&#xF000;addon_id@mozilla.org"/>
2425 ```
2426 #### macOS
2427 ```
2428 <dict>
2429   <key>Extensions</key>
2430   <dict>
2431     <key>Install</key>
2432     <array>
2433       <string>https://addons.mozilla.org/firefox/downloads/somefile.xpi</string>
2434       <string>//path/to/xpi</string>
2435     </array>
2436     <key>Uninstall</key>
2437     <array>
2438       <string>bad_addon_id@mozilla.org</string>
2439     </array>
2440     <key>Locked</key>
2441     <array>
2442       <string>addon_id@mozilla.org</string>
2443     </array>
2444   </dict>
2445 </dict>
2446 ```
2447 #### policies.json
2448 ```
2449 {
2450   "policies": {
2451     "Extensions": {
2452       "Install": ["https://addons.mozilla.org/firefox/downloads/somefile.xpi", "//path/to/xpi"],
2453       "Uninstall": ["bad_addon_id@mozilla.org"],
2454       "Locked":  ["addon_id@mozilla.org"]
2455     }
2456   }
2457 }
2458 ```
2459 ### ExtensionSettings
2460 Manage all aspects of extensions. This policy is based heavily on the [Chrome policy](https://dev.chromium.org/administrators/policy-list-3/extension-settings-full) of the same name.
2461
2462 This policy maps an extension ID to its configuration. With an extension ID, the configuration will be applied to the specified extension only. A default configuration can be set for the special ID "*", which will apply to all extensions that don't have a custom configuration set in this policy.
2463
2464 To obtain an extension ID, install the extension and go to about:support. You will see the ID in the Extensions section. I've also created an extension that makes it easy to find the ID of extensions on AMO. You can download it [here](https://github.com/mkaply/queryamoid/releases/tag/v0.1).
2465
2466 The configuration for each extension is another dictionary that can contain the fields documented below.
2467
2468 | Name | Description |
2469 | --- | --- |
2470 | `installation_mode` | Maps to a string indicating the installation mode for the extension. The valid strings are `allowed`,`blocked`,`force_installed`, and `normal_installed`.
2471 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`allowed` | Allows the extension to be installed by the user. This is the default behavior. There is no need for an install_url; it will automatically be allowed based on the ID.
2472 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`blocked`| Blocks installation of the extension and removes it from the device if already installed.
2473 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`force_installed`| The extension is automatically installed and can't be removed by the user. This option is not valid for the default configuration and requires an install_url.
2474 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`normal_installed`| The extension is automatically installed but can be disabled by the user. This option is not valid for the default configuration and requires an install_url.
2475 | `install_url`| Maps to a URL indicating where Firefox can download a force_installed or normal_installed extension.  If installing from the local file system, use a [```file:///``` URL](https://en.wikipedia.org/wiki/File_URI_scheme). If installing from the addons.mozilla.org, use the following URL (substituting SHORT_NAME from the URL on AMO), https://addons.mozilla.org/firefox/downloads/latest/SHORT_NAME/latest.xpi. Languages packs are available from https://releases.mozilla.org/pub/firefox/releases/VERSION/PLATFORM/xpi/LANGUAGE.xpi. If you need to update the extension, you can change the name of the extension and it will be automatically updated. Extensions installed from file URLs will additional be updated when their internal version changes.
2476 | `install_sources` | A list of sources from which installing extensions is allowed. **This is unnecessary if you are only allowing the installation of certain extensions by ID.** Each item in this list is an extension-style match pattern. Users will be able to easily install items from any URL that matches an item in this list. Both the location of the *.xpi file and the page where the download is started from (i.e.  the referrer) must be allowed by these patterns. This setting can be used only for the default configuration.
2477 | `allowed_types` | This setting whitelists the allowed types of extension/apps that can be installed in Firefox. The value is a list of strings, each of which should be one of the following: "extension", "theme", "dictionary", "locale" This setting can be used only for the default configuration.
2478 | `blocked_install_message` | This maps to a string specifying the error message to display to users if they're blocked from installing an extension. This setting allows you to append text to the generic error message displayed when the extension is blocked. This could be be used to direct users to your help desk, explain why a particular extension is blocked, or something else. This setting can be used only for the default configuration.
2479 | `restricted_domains` | An array of domains on which content scripts can't be run. This setting can be used only for the default configuration.
2480 | `updates_disabled` | (Firefox 89, Firefox ESR 78.11) Boolean that indicates whether or not to disable automatic updates for an individual extension.
2481
2482 **Compatibility:** Firefox 69, Firefox ESR 68.1 (As of Firefox 85, Firefox ESR 78.7, installing a theme makes it the default.)\
2483 **CCK2 Equivalent:** N/A\
2484 **Preferences Affected:** N/A
2485
2486 #### Windows (GPO)
2487 Software\Policies\Mozilla\Firefox\ExtensionSettings (REG_MULTI_SZ) =
2488 ```
2489 {
2490   "*": {
2491     "blocked_install_message": "Custom error message.",
2492     "install_sources": ["about:addons","https://addons.mozilla.org/"],
2493     "installation_mode": "blocked",
2494     "allowed_types": ["extension"]
2495   },
2496   "uBlock0@raymondhill.net": {
2497     "installation_mode": "force_installed",
2498     "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
2499   },
2500   "https-everywhere@eff.org": {
2501     "installation_mode": "allowed"
2502   }
2503 }
2504 ```
2505 #### Windows (Intune)
2506 OMA-URI:
2507 ```
2508 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/ExtensionSettings
2509 ```
2510 Value (string):
2511 ```
2512 <enabled/>
2513 <data id="ExtensionSettings" value='
2514 {
2515   "*": {
2516     "blocked_install_message": "Custom error message.",
2517     "install_sources": ["about:addons","https://addons.mozilla.org/"],
2518     "installation_mode": "blocked",
2519     "allowed_types": ["extension"]
2520   },
2521   "uBlock0@raymondhill.net": {
2522     "installation_mode": "force_installed",
2523     "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
2524   },
2525     "https-everywhere@eff.org": {
2526     "installation_mode": "allowed"
2527   }
2528 }'/>
2529 ```
2530 #### macOS
2531 ```
2532 <dict>
2533   <key>ExtensionSettings</key>
2534   <dict>
2535     <key>*</key>
2536     <dict>
2537       <key>blocked_install_message</key>
2538       <string>Custom error message.</string>
2539       <key>install_sources</key>
2540       <array>
2541         <string>about:addons</string>
2542         <string>https://addons.mozilla.org/</string>
2543       </array>
2544       <key>installation_mode</key>
2545       <string>blocked</string>
2546       <key>allowed_types</key>
2547       <array>
2548         <string>extension</string>
2549       </array>
2550     </dict>
2551     <key>uBlock0@raymondhill.net</key>
2552     <dict>
2553       <key>installation_mode</key>
2554        <string>force_installed</string>
2555       <key>install_url</key>
2556       <string>https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi</string>
2557     </dict>
2558     <key>https-everywhere@eff.org</key>
2559     <dict>
2560       <key>installation_mode</key>
2561        <string>allowed</string>
2562     </dict>
2563   </dict>
2564 </dict>
2565 ```
2566 #### policies.json
2567 ```
2568 {
2569   "policies": {
2570     "ExtensionSettings": {
2571       "*": {
2572         "blocked_install_message": "Custom error message.",
2573         "install_sources": ["about:addons","https://addons.mozilla.org/"],
2574         "installation_mode": "blocked",
2575         "allowed_types": ["extension"]
2576       },
2577       "uBlock0@raymondhill.net": {
2578         "installation_mode": "force_installed",
2579         "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
2580       },
2581       "https-everywhere@eff.org": {
2582         "installation_mode": "allowed"
2583       }
2584     }
2585   }
2586 }
2587 ```
2588 ### ExtensionUpdate
2589 Control extension updates.
2590
2591 **Compatibility:** Firefox 67, Firefox ESR 60.7\
2592 **CCK2 Equivalent:** N/A\
2593 **Preferences Affected:** `extensions.update.enabled`
2594
2595 #### Windows (GPO)
2596 ```
2597 Software\Policies\Mozilla\Firefox\ExtensionUpdate = 0x1 | 0x0
2598 ```
2599 #### Windows (Intune)
2600 OMA-URI:
2601 ```
2602 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/ExtensionUpdate
2603 ```
2604 Value (string):
2605 ```
2606 <enabled/> or <disabled/>
2607 ```
2608 #### macOS
2609 ```
2610 <dict>
2611   <key>ExtensionUpdate</key>
2612   <true/> | <false/>
2613 </dict>
2614 ```
2615 #### policies.json
2616 ```
2617 {
2618   "policies": {
2619     "ExtensionUpdate": true | false
2620   }
2621 }
2622 ```
2623 ### FlashPlugin
2624 Configure the default Flash plugin policy as well as origins for which Flash is allowed.
2625
2626 `Allow` is a list of origins where Flash are allowed.
2627
2628 `Block` is a list of origins where Flash is not allowed.
2629
2630 `Default` determines whether or not Flash is allowed by default.
2631
2632 `Locked` prevents the user from changing Flash preferences.
2633
2634 **Compatibility:** Firefox 60, Firefox ESR 60\
2635 **CCK2 Equivalent:** `permissions.plugin`\
2636 **Preferences Affected:** `plugin.state.flash`
2637
2638 #### Windows (GPO)
2639 ```
2640 Software\Policies\Mozilla\Firefox\FlashPlugin\Allow\1 = "https://example.org"
2641 Software\Policies\Mozilla\Firefox\FlashPlugin\Block\1 = "https://example.edu"
2642 Software\Policies\Mozilla\Firefox\FlashPlugin\Default = 0x1 | 0x0
2643 Software\Policies\Mozilla\Firefox\FlashPlugin\Locked = 0x1 | 0x0
2644 ```
2645 #### Windows (Intune)
2646 OMA-URI:
2647 ```
2648 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Flash/FlashPlugin_Allow
2649 ```
2650 Value (string):
2651 ```
2652 <enabled/>
2653 <data id="Permissions" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
2654 ```
2655 OMA-URI:
2656 ```
2657 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Flash/FlashPlugin_Locked
2658 ```
2659 Value (string):
2660 ```
2661 <enabled/> or <disabled/>
2662 ```
2663 OMA-URI:
2664 ```
2665 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Flash/FlashPlugin_Default
2666 ```
2667 Value (string):
2668 ```
2669 <enabled/> or <disabled/>
2670 ```
2671 #### macOS
2672 ```
2673 <dict>
2674   <key>FlashPlugin</key>
2675   <dict>
2676     <key>Allow</key>
2677     <array>
2678       <string>http://example.org</string>
2679     </array>
2680     <key>Block</key>
2681     <array>
2682       <string>http://example.edu</string>
2683     </array>
2684     <key>Default</key>
2685     <true/> | <false/>
2686     <key>Locked</key>
2687     <true/> | <false/>
2688   </dict>
2689 </dict>
2690 ```
2691 #### policies.json
2692 ```
2693 {
2694   "policies": {
2695     "FlashPlugin": {
2696       "Allow": ["http://example.org/"],
2697       "Block": ["http://example.edu/"],
2698       "Default": true | false,
2699       "Locked": true | false
2700     }
2701   }
2702 }
2703 ```
2704
2705
2706
2707 ### Handlers
2708 Configure default application handlers. This policy is based on the internal format of `handlers.json`.
2709
2710 You can configure handlers based on a mime type (`mimeTypes`), a file's extension (`extensions`), or a protocol (`schemes`).
2711
2712 Within each handler type, you specify the given mimeType/extension/scheme as a key and use the following subkeys to describe how it is handled.
2713
2714 | Name | Description |
2715 | --- | --- |
2716 | `action`| Can be either `saveToDisk`, `useHelperApp`, `useSystemDefault`.
2717 | `ask` | If `true`, the user is asked if what they want to do with the file. If `false`, the action is taken without user intervention.
2718 | `handlers` | An array of handlers with the first one being the default. If you don't want to have a default handler, use an empty object for the first handler. Choose between path or uriTemplate.
2719 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`name` | The display name of the handler (might not be used).
2720 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`path`| The native path to the executable to be used.
2721 | &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;`uriTemplate`| A url to a web based application handler. The URL must be https and contain a %s to be used for substitution.
2722
2723 **Compatibility:** Firefox 78, Firefox ESR 78\
2724 **CCK2 Equivalent:** N/A\
2725 **Preferences Affected:** N/A
2726
2727 #### Windows (GPO)
2728 Software\Policies\Mozilla\Firefox\Handlers (REG_MULTI_SZ) =
2729 ```
2730 {
2731   "mimeTypes": {
2732     "application/msword": {
2733       "action": "useSystemDefault",
2734       "ask": true | false
2735     }
2736   },
2737   "schemes": {
2738     "mailto": {
2739       "action": "useHelperApp",
2740       "ask": true | false,
2741       "handlers": [{
2742         "name": "Gmail",
2743         "uriTemplate": "https://mail.google.com/mail/?extsrc=mailto&url=%s"
2744       }]
2745     }
2746   },
2747   "extensions": {
2748     "pdf": {
2749       "action": "useHelperApp",
2750       "ask": true | false,
2751       "handlers": [{
2752         "name": "Adobe Acrobat",
2753         "path": "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32.exe"
2754       }]
2755     }
2756   }
2757 }
2758 ```
2759 #### Windows (Intune)
2760 OMA-URI:
2761 ```
2762 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Handlers
2763 ```
2764 Value (string):
2765 ```
2766 <enabled/>
2767 <data id="Handlers" value='
2768 {
2769   "mimeTypes": {
2770     "application/msword": {
2771       "action": "useSystemDefault",
2772       "ask": true | false
2773     }
2774   },
2775   "schemes": {
2776     "mailto": {
2777       "action": "useHelperApp",
2778       "ask": true | false,
2779       "handlers": [{
2780         "name": "Gmail",
2781         "uriTemplate": "https://mail.google.com/mail/?extsrc=mailto&amp;url=%s"
2782       }]
2783     }
2784   },
2785   "extensions": {
2786     "pdf": {
2787       "action": "useHelperApp",
2788       "ask": true | false,
2789       "handlers": [{
2790         "name": "Adobe Acrobat",
2791         "path": "C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32.exe"
2792       }]
2793     }
2794   }
2795 }
2796 '/>
2797 ```
2798 #### macOS
2799 ```
2800 <dict>
2801   <key>Handlers</key>
2802   <dict>
2803     <key>mimeTypes</key>
2804     <dict>
2805       <key>application/msword</key>
2806       <dict>
2807         <key>action</key>
2808         <string>useSystemDefault</string>
2809         <key>ask</key>
2810         <true/> | <false/>
2811       </dict>
2812     </dict>
2813     <key>schemes</key>
2814     <dict>
2815       <key>mailto</key>
2816       <dict>
2817         <key>action</key>
2818         <string>useHelperApp</string>
2819         <key>ask</key>
2820         <true/> | <false/>
2821         <key>handlers</key>
2822         <array>
2823           <dict>
2824             <key>name</key>
2825             <string>Gmail</string>
2826             <key>uriTemplate</key>
2827             <string>https://mail.google.com/mail/?extsrc=mailto&url=%s</string>
2828           </dict>
2829         </array>
2830       </dict>
2831     </dict>
2832     <key>extensions</key>
2833     <dict>
2834       <key>pdf</key>
2835       <dict>
2836         <key>action</key>
2837         <string>useHelperApp</string>
2838         <key>ask</key>
2839         <true/> | <false/>
2840         <key>handlers</key>
2841         <array>
2842           <dict>
2843             <key>name</key>
2844             <string>Adobe Acrobat</string>
2845             <key>path</key>
2846             <string>/System/Applications/Preview.app</string>
2847           </dict>
2848         </array>
2849       </dict>
2850     </dict>
2851   </dict>
2852 </dict>
2853 ```
2854 #### policies.json
2855 ```
2856 {
2857   "policies": {
2858     "Handlers": {
2859       "mimeTypes": {
2860         "application/msword": {
2861           "action": "useSystemDefault",
2862           "ask": false
2863         }
2864       },
2865       "schemes": {
2866         "mailto": {
2867           "action": "useHelperApp",
2868           "ask": true | false,
2869           "handlers": [{
2870             "name": "Gmail",
2871             "uriTemplate": "https://mail.google.com/mail/?extsrc=mailto&url=%s"
2872           }]
2873         }
2874       },
2875       "extensions": {
2876         "pdf": {
2877           "action": "useHelperApp",
2878           "ask": true | false,
2879           "handlers": [{
2880             "name": "Adobe Acrobat",
2881             "path": "/usr/bin/acroread"
2882           }]
2883         }
2884       }
2885     }
2886   }
2887 }
2888 ```
2889 ### FirefoxHome
2890 Customize the Firefox Home page.
2891
2892 **Compatibility:** Firefox 68, Firefox ESR 68 (SponsoredTopSites and SponsoredPocket were added in Firefox 95, Firefox ESR 91.4)
2893 **CCK2 Equivalent:** N/A\
2894 **Preferences Affected:** `browser.newtabpage.activity-stream.showSearch`, `browser.newtabpage.activity-stream.feeds.topsites`, `browser.newtabpage.activity-stream.feeds.section.highlights`, `browser.newtabpage.activity-stream.feeds.section.topstories`, `browser.newtabpage.activity-stream.feeds.snippets`, `browser.newtabpage.activity-stream.showSponsoredTopSites`, `browser.newtabpage.activity-stream.showSponsored`
2895
2896 #### Windows (GPO)
2897 ```
2898 Software\Policies\Mozilla\Firefox\FirefoxHome\Search = 0x1 | 0x0
2899 Software\Policies\Mozilla\Firefox\FirefoxHome\TopSites = 0x1 | 0x0
2900 Software\Policies\Mozilla\Firefox\FirefoxHome\SponsoredTopSites = 0x1 | 0x0
2901 Software\Policies\Mozilla\Firefox\FirefoxHome\Highlights = 0x1 | 0x0
2902 Software\Policies\Mozilla\Firefox\FirefoxHome\Pocket = 0x1 | 0x0
2903 Software\Policies\Mozilla\Firefox\FirefoxHome\SponsoredPocket = 0x1 | 0x0
2904 Software\Policies\Mozilla\Firefox\FirefoxHome\Snippets = 0x1 | 0x0
2905 Software\Policies\Mozilla\Firefox\FirefoxHome\Locked = 0x1 | 0x0
2906 ```
2907 #### Windows (Intune)
2908 OMA-URI:
2909 ```
2910 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/CustomizeFirefoxHome
2911 ```
2912 Value (string):
2913 ```
2914 <enabled/>
2915 <data id="FirefoxHome_Search"  value="true | false"/>
2916 <data id="FirefoxHome_TopSites"  value="true | false"/>
2917 <data id="FirefoxHome_SponsoredTopSites"  value="true | false"/>
2918 <data id="FirefoxHome_Highlights"  value="true | false"/>
2919 <data id="FirefoxHome_Pocket"  value="true | false"/>
2920 <data id="FirefoxHome_SponsoredPocket"  value="true | false"/>
2921 <data id="FirefoxHome_Snippets"  value="true | false"/>
2922 <data id="FirefoxHome_Locked"  value="true | false"/>
2923 ```
2924 #### macOS
2925 ```
2926 <dict>
2927   <key>FirefoxHome</key>
2928   <dict>
2929     <key>Search</key>
2930     <true/> | <false/>
2931     <key>TopSites</key>
2932     <true/> | <false/>
2933     <key>SponsoredTopSites</key>
2934     <true/> | <false/>
2935     <key>Highlights</key>
2936     <true/> | <false/>
2937     <key>Pocket</key>
2938     <true/> | <false/>
2939     <key>SponsoredPocket</key>
2940     <true/> | <false/>
2941     <key>Snippets</key>
2942     <true/> | <false/>
2943     <key>Locked</key>
2944     <true/> | <false/>
2945   </dict>
2946 </dict>
2947 ```
2948 #### policies.json
2949 ```
2950 {
2951   "policies": {
2952     "FirefoxHome": {
2953       "Search": true | false,
2954       "TopSites": true | false,
2955       "SponsoredTopSites": true | false,
2956       "Highlights": true | false,
2957       "Pocket": true | false,
2958       "SponsoredPocket": true | false,
2959       "Snippets": true | false,
2960       "Locked": true | false
2961     }
2962   }
2963 }
2964 ```
2965 ### HardwareAcceleration
2966 Control hardware acceleration.
2967
2968 **Compatibility:** Firefox 60, Firefox ESR 60\
2969 **CCK2 Equivalent:** N/A\
2970 **Preferences Affected:** `layers.acceleration.disabled`
2971
2972 #### Windows (GPO)
2973 ```
2974 Software\Policies\Mozilla\Firefox\HardwareAcceleration = 0x1 | 0x0
2975 ```
2976 #### Windows (Intune)
2977 OMA-URI:
2978 ```
2979 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/HardwareAcceleration
2980 ```
2981 Value (string):
2982 ```
2983 <enabled/> or <disabled/>
2984 ```
2985 #### macOS
2986 ```
2987 <dict>
2988   <key>HardwareAcceleration</key>
2989   <true/> | <false/>
2990 </dict>
2991 ```
2992 #### policies.json
2993 ```
2994 {
2995   "policies": {
2996     "HardwareAcceleration": true | false
2997   }
2998 }
2999 ```
3000 ### Homepage
3001 Configure the default homepage and how Firefox starts.
3002
3003 `URL` is the default homepage.
3004
3005 `Locked` prevents the user from changing homepage preferences.
3006
3007 `Additional` allows for more than one homepage.
3008
3009 `StartPage` is how Firefox starts. The choices are no homepage, the default homepage or the previous session.
3010
3011 With Firefox 78, an additional option as added for `Startpage`, `homepage-locked`. If this is value is set for the Startpage, the user will always get the homepage at startup and cannot choose to restore their session.
3012
3013 **Compatibility:** Firefox 60, Firefox ESR 60 (StartPage was added in Firefox 60, Firefox ESR 60.4, homepage-locked added in Firefox 78)\
3014 **CCK2 Equivalent:** `homePage`,`lockHomePage`\
3015 **Preferences Affected:** `browser.startup.homepage`, `browser.startup.page`
3016
3017 #### Windows (GPO)
3018 ```
3019 Software\Policies\Mozilla\Firefox\Homepage\URL = "https://example.com"
3020 Software\Policies\Mozilla\Firefox\Homepage\Locked = 0x1 | 0x0
3021 Software\Policies\Mozilla\Firefox\Homepage\Additional\1 = "https://example.org"
3022 Software\Policies\Mozilla\Firefox\Homepage\Additional\2 = "https://example.edu"
3023 Software\Policies\Mozilla\Firefox\Homepage\StartPage = "none" | "homepage" | "previous-session" | "homepage-locked"
3024 ```
3025 #### Windows (Intune)
3026 OMA-URI:
3027 ```
3028 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageURL
3029 ```
3030 Value (string):
3031 ```
3032 <enabled/>
3033
3034 <data id="HomepageURL" value="https://example.com"/>
3035 <data id="HomepageLocked" value="true | false"/>
3036 ```
3037 OMA-URI:
3038 ```
3039 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageAdditional
3040 ```
3041 Value (string):
3042 ```
3043 <enabled/>
3044
3045 <data id="HomepageAdditional" value="1&#xF000;http://example.org&#xF000;2&#xF000;http://example.edu"/>
3046 ```
3047 OMA-URI:
3048 ```
3049 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageStartPage
3050 ```
3051 Value (string):
3052 ```
3053 <enabled/>
3054
3055 <data id="StartPage" value="none | homepage | previous-session"/>
3056 ```
3057 #### macOS
3058 ```
3059 <dict>
3060   <key>Homepage</key>
3061   <dict>
3062     <key>URL</key>
3063     <string>http://example.com</string>
3064     <key>Locked</key>
3065     <true/> | <false/>
3066     <key>Additional</key>
3067     <array>
3068       <string>http://example.org</string>
3069       <string>http://example.edu</string>
3070     </array>
3071     <key>StartPage</key>
3072     <string>none | homepage | previous-session | homepage-locked</string>
3073   </dict>
3074 </dict>
3075 ```
3076 #### policies.json
3077 ```
3078 {
3079   "policies": {
3080     "Homepage": {
3081       "URL": "http://example.com/",
3082       "Locked": true | false,
3083       "Additional": ["http://example.org/",
3084                      "http://example.edu/"],
3085       "StartPage": "none" | "homepage" | "previous-session" | "homepage-locked"
3086     }
3087   }
3088 }
3089 ```
3090 ### InstallAddonsPermission
3091 Configure the default extension install policy as well as origins for extension installs are allowed. This policy does not override turning off all extension installs.
3092
3093 `Allow` is a list of origins where extension installs are allowed.
3094
3095 `Default` determines whether or not extension installs are allowed by default.
3096
3097 **Compatibility:** Firefox 60, Firefox ESR 60\
3098 **CCK2 Equivalent:** `permissions.install`\
3099 **Preferences Affected:** `xpinstall.enabled`
3100
3101 #### Windows (GPO)
3102 ```
3103 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Allow\1 = "https://example.org"
3104 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Allow\2 = "https://example.edu"
3105 Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Default = 0x1 | 0x0
3106 ```
3107 #### Windows (Intune)
3108 OMA-URI:
3109 ```
3110 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Addons/InstallAddonsPermission_Allow
3111 ```
3112 Value (string):
3113 ```
3114 <enabled/>
3115 <data id="Permissions" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
3116 ```
3117 OMA-URI:
3118 ```
3119 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Addons/InstallAddonsPermission_Default
3120 ```
3121 Value (string):
3122 ```
3123 <enabled/>
3124 ```
3125 #### macOS
3126 ```
3127 <dict>
3128   <key>InstallAddonsPermission</key>
3129   <dict>
3130     <key>Allow</key>
3131     <array>
3132       <string>http://example.org</string>
3133       <string>http://example.edu</string>
3134     </array>
3135     <key>Default</key>
3136     <true/> | <false/>
3137   </dict>
3138 </dict>
3139 ```
3140 #### policies.json
3141 ```
3142 {
3143   "policies": {
3144     "InstallAddonsPermission": {
3145       "Allow": ["http://example.org/",
3146                 "http://example.edu/"],
3147       "Default": true | false
3148     }
3149   }
3150 }
3151 ```
3152 ### LegacyProfiles
3153 Disable the feature enforcing a separate profile for each installation.
3154
3155 If this policy set to true, Firefox will not try to create different profiles for installations of Firefox in different directories. This is the equivalent of the MOZ_LEGACY_PROFILES environment variable.
3156
3157 If this policy set to false, Firefox will create a new profile for each unique installation of Firefox.
3158
3159 This policy only work on Windows via GPO (not policies.json).
3160
3161 **Compatibility:** Firefox 70, Firefox ESR 68.2 (Windows only, GPO only)\
3162 **CCK2 Equivalent:** N/A\
3163 **Preferences Affected:** N/A
3164
3165 #### Windows (GPO)
3166 ```
3167 Software\Policies\Mozilla\Firefox\LegacyProfiles = = 0x1 | 0x0
3168 ```
3169 #### Windows (Intune)
3170 OMA-URI:
3171 ```
3172 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/LegacyProfiles
3173 ```
3174 Value (string):
3175 ```
3176 <enabled/> or <disabled/>
3177 ```
3178 ### LocalFileLinks
3179 Enable linking to local files by origin.
3180
3181 **Compatibility:** Firefox 68, Firefox ESR 68\
3182 **CCK2 Equivalent:** N/A\
3183 **Preferences Affected:** `capability.policy.localfilelinks.*`
3184
3185 #### Windows (GPO)
3186 ```
3187 Software\Policies\Mozilla\Firefox\LocalFileLinks\1 = "https://example.org"
3188 Software\Policies\Mozilla\Firefox\LocalFileLinks\2 = "https://example.edu"
3189 ```
3190 #### Windows (Intune)
3191 OMA-URI:
3192 ```
3193 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/LocalFileLinks
3194 ```
3195 Value (string):
3196 ```
3197 <enabled/>
3198 <data id="LocalFileLinks" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
3199 ```
3200 #### macOS
3201 ```
3202 <dict>
3203   <key>LocalFileLinks</key>
3204   <array>
3205     <string>http://example.org</string>
3206     <string>http://example.edu</string>
3207   </array>
3208 </dict>
3209 ```
3210 #### policies.json
3211 ```
3212 {
3213   "policies": {
3214     "LocalFileLinks": ["http://example.org/",
3215                        "http://example.edu/"]
3216   }
3217 }
3218 ```
3219 ### ManagedBookmarks
3220 Configures a list of bookmarks managed by an administrator that cannot be changed by the user.
3221
3222 The bookmarks are only added as a button on the personal toolbar. They are not in the bookmarks folder.
3223
3224 The syntax of this policy is exactly the same as the [Chrome ManagedBookmarks policy](https://cloud.google.com/docs/chrome-enterprise/policies/?policy=ManagedBookmarks). The schema is:
3225 ```
3226 {
3227  "items": {
3228   "id": "BookmarkType",
3229   "properties": {
3230    "children": {
3231     "items": {
3232      "$ref": "BookmarkType"
3233     },
3234     "type": "array"
3235    },
3236    "name": {
3237     "type": "string"
3238    },
3239    "toplevel_name": {
3240     "type": "string"
3241    },
3242    "url": {
3243     "type": "string"
3244    }
3245   },
3246   "type": "object"
3247  },
3248  "type": "array"
3249 }
3250 ```
3251 **Compatibility:** Firefox 83, Firefox ESR 78.5\
3252 **CCK2 Equivalent:** N/A\
3253 **Preferences Affected:** N/A
3254
3255 #### Windows (GPO)
3256 Software\Policies\Mozilla\Firefox\ManagedBookmarks (REG_MULTI_SZ) =
3257 ```
3258 [
3259   {
3260     "toplevel_name": "My managed bookmarks folder"
3261   },
3262   {
3263     "url": "example.com",
3264     "name": "Example"
3265   },
3266   {
3267     "name": "Mozilla links",
3268     "children": [
3269       {
3270         "url": "https://mozilla.org",
3271         "name": "Mozilla.org"
3272       },
3273       {
3274         "url": "https://support.mozilla.org/",
3275         "name": "SUMO"
3276       }
3277     ]
3278   }
3279 ]
3280 ```
3281 #### Windows (Intune)
3282 OMA-URI:
3283 ```
3284 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/ManagedBookmarks
3285 ```
3286 Value (string):
3287 ```
3288 <enabled/>
3289 <data id="JSON" value='
3290 [
3291   {
3292     "toplevel_name": "My managed bookmarks folder"
3293   },
3294   {
3295     "url": "example.com",
3296     "name": "Example"
3297   },
3298   {
3299     "name": "Mozilla links",
3300     "children": [
3301       {
3302         "url": "https://mozilla.org",
3303         "name": "Mozilla.org"
3304       },
3305       {
3306         "url": "https://support.mozilla.org/",
3307         "name": "SUMO"
3308       }
3309     ]
3310   }
3311 ]'/>
3312 ```
3313 #### macOS
3314 ```
3315 <dict>
3316   <key>ManagedBookmarks</key>
3317   <array>
3318     <dict>
3319       <key>toplevel_name</key>
3320       <string>My managed bookmarks folder</string>
3321       <dict>
3322         <key>url</key>
3323         <string>example.com</string>
3324         <key>name</key>
3325         <string>Example</string>
3326       </dict>
3327       <dict>
3328       <key>name</key>
3329       <string>Mozilla links</string>
3330       <key>children</key>
3331       <array>
3332         <dict>
3333           <key>url</key>
3334           <string>https://mozilla.org</string>
3335           <key>name</key>
3336           <string>Mozilla</string>
3337         </dict>
3338         <dict>
3339           <key>url</key>
3340           <string>https://support.mozilla.org/</string>
3341           <key>name</key>
3342           <string>SUMO</string>
3343         </dict>
3344       </array>
3345     </dict>
3346   </array>
3347 </dict>
3348 ```
3349 #### policies.json
3350 ```
3351 {
3352   "policies": {
3353     "ManagedBookmarks": [
3354       {
3355         "toplevel_name": "My managed bookmarks folder"
3356       },
3357       {
3358         "url": "example.com",
3359         "name": "Example"
3360       },
3361       {
3362         "name": "Mozilla links",
3363         "children": [
3364           {
3365             "url": "https://mozilla.org",
3366             "name": "Mozilla.org"
3367           },
3368           {
3369             "url": "https://support.mozilla.org/",
3370             "name": "SUMO"
3371           }
3372         ]
3373       }
3374     ]
3375   }
3376 }
3377 ```
3378 ### ManualAppUpdateOnly
3379
3380 Switch to manual updates only.
3381
3382 If this policy is enabled:
3383  1. The user will never be prompted to install updates
3384  2. Firefox will not check for updates in the background, though it will check automatically when an update UI is displayed (such as the one in the About dialog). This check will be used to show "Update to version X" in the UI, but will not automatically download the update or prompt the user to update in any other way.
3385  3. The update UI will work as expected, unlike when using DisableAppUpdate.
3386
3387 This policy is primarily intended for advanced end users, not for enterprises.
3388
3389 **Compatibility:** Firefox 87\
3390 **CCK2 Equivalent:** N/A\
3391 **Preferences Affected:** N/A
3392
3393 #### policies.json
3394 ```
3395 {
3396   "policies": {
3397     "ManualAppUpdateOnly": true | false
3398   }
3399 }
3400 ```
3401 ### PrimaryPassword
3402 Require or prevent using a primary (formerly master) password.
3403
3404 If this value is true, a primary password is required. If this value is false, it works the same as if [`DisableMasterPasswordCreation`](#disablemasterpasswordcreation) was true and removes the primary password functionality.
3405
3406 If both DisableMasterPasswordCreation and PrimaryPassword are used, DisableMasterPasswordCreation takes precedent.
3407
3408 **Compatibility:** Firefox 79, Firefox ESR 78.1\
3409 **CCK2 Equivalent:** `noMasterPassword`\
3410 **Preferences Affected:** N/A
3411
3412 #### Windows (GPO)
3413 ```
3414 Software\Policies\Mozilla\Firefox\PrimaryPassword = 0x1 | 0x0
3415 ```
3416 #### Windows (Intune)
3417 OMA-URI:
3418 ```
3419 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PrimaryPassword
3420 ```
3421 Value (string):
3422 ```
3423 <enabled/> or <disabled/>
3424 ```
3425 #### macOS
3426 ```
3427 <dict>
3428   <key>PrimaryPassword</key>
3429   <true/> | <false/>
3430 </dict>
3431 ```
3432 #### policies.json
3433 ```
3434 {
3435   "policies": {
3436     "PrimaryPassword": true | false
3437   }
3438 }
3439 ```
3440 ### NetworkPrediction
3441 Enable or disable network prediction (DNS prefetching).
3442
3443 **Compatibility:** Firefox 67, Firefox ESR 60.7\
3444 **CCK2 Equivalent:** N/A\
3445 **Preferences Affected:** `network.dns.disablePrefetch`, `network.dns.disablePrefetchFromHTTPS`
3446
3447 #### Windows (GPO)
3448 ```
3449 Software\Policies\Mozilla\Firefox\NetworkPrediction = 0x1 | 0x0
3450 ```
3451 #### Windows (Intune)
3452 OMA-URI:
3453 ```
3454 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NetworkPrediction
3455 ```
3456 Value (string):
3457 ```
3458 <enabled/> or <disabled/>
3459 ```
3460 #### macOS
3461 ```
3462 <dict>
3463   <key>NetworkPrediction</key>
3464   <true/> | <false/>
3465 </dict>
3466 ```
3467 #### policies.json
3468 ```
3469 {
3470   "policies": {
3471     "NetworkPrediction": true | false
3472 }
3473 ```
3474 ### NewTabPage
3475 Enable or disable the New Tab page.
3476
3477 **Compatibility:** Firefox 68, Firefox ESR 68\
3478 **CCK2 Equivalent:** N/A\
3479 **Preferences Affected:** `browser.newtabpage.enabled`
3480
3481 #### Windows (GPO)
3482 ```
3483 Software\Policies\Mozilla\Firefox\NewTabPage = 0x1 | 0x0
3484 ```
3485 #### Windows (Intune)
3486 OMA-URI:
3487 ```
3488 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NewTabPage
3489 ```
3490 Value (string):
3491 ```
3492 <enabled/> or <disabled/>
3493 ```
3494 #### macOS
3495 ```
3496 <dict>
3497   <key>NewTabPage</key>
3498   <true/> | <false/>
3499 </dict>
3500 ```
3501 #### policies.json
3502 ```
3503 {
3504   "policies": {
3505     "NewTabPage": true | false
3506 }
3507 ```
3508 ### NoDefaultBookmarks
3509 Disable the creation of default bookmarks.
3510
3511 This policy is only effective if the user profile has not been created yet.
3512
3513 **Compatibility:** Firefox 60, Firefox ESR 60\
3514 **CCK2 Equivalent:** `removeDefaultBookmarks`\
3515 **Preferences Affected:** N/A
3516
3517 #### Windows (GPO)
3518 ```
3519 Software\Policies\Mozilla\Firefox\NoDefaultBookmarks = 0x1 | 0x0
3520 ```
3521 #### Windows (Intune)
3522 OMA-URI:
3523 ```
3524 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NoDefaultBookmarks
3525 ```
3526 Value (string):
3527 ```
3528 <enabled/> or <disabled/>
3529 ```
3530 #### macOS
3531 ```
3532 <dict>
3533   <key>NoDefaultBookmarks</key>
3534   <true/> | <false/>
3535 </dict>
3536 ```
3537 #### policies.json
3538 ```
3539 {
3540   "policies": {
3541     "NoDefaultBookmarks": true | false
3542   }
3543 }
3544 ```
3545 ### OfferToSaveLogins
3546 Control whether or not Firefox offers to save passwords.
3547
3548 **Compatibility:** Firefox 60, Firefox ESR 60\
3549 **CCK2 Equivalent:** `dontRememberPasswords`\
3550 **Preferences Affected:** `signon.rememberSignons`
3551
3552 #### Windows (GPO)
3553 ```
3554 Software\Policies\Mozilla\Firefox\OfferToSaveLogins = 0x1 | 0x0
3555 ```
3556 #### Windows (Intune)
3557 OMA-URI:
3558 ```
3559 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OfferToSaveLogins
3560 ```
3561 Value (string):
3562 ```
3563 <enabled/> or <disabled/>
3564 ```
3565 #### macOS
3566 ```
3567 <dict>
3568   <key>OfferToSaveLogins</key>
3569   <true/> | <false/>
3570 </dict>
3571 ```
3572 #### policies.json
3573 ```
3574 {
3575   "policies": {
3576     "OfferToSaveLogins": true | false
3577   }
3578 }
3579 ```
3580 ### OfferToSaveLoginsDefault
3581 Sets the default value of signon.rememberSignons without locking it.
3582
3583 **Compatibility:** Firefox 70, Firefox ESR 60.2\
3584 **CCK2 Equivalent:** `dontRememberPasswords`\
3585 **Preferences Affected:** `signon.rememberSignons`
3586
3587 #### Windows (GPO)
3588 ```
3589 Software\Policies\Mozilla\Firefox\OfferToSaveLoginsDefault = 0x1 | 0x0
3590 ```
3591 #### Windows (Intune)
3592 OMA-URI:
3593 ```
3594 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OfferToSaveLoginsDefault
3595 ```
3596 Value (string):
3597 ```
3598 <enabled/> or <disabled/>
3599 ```
3600 #### macOS
3601 ```
3602 <dict>
3603   <key>OfferToSaveLoginsDefault</key>
3604   <true/> | <false/>
3605 </dict>
3606 ```
3607 #### policies.json
3608 ```
3609 {
3610   "policies": {
3611     "OfferToSaveLoginsDefault": true | false
3612   }
3613 }
3614 ```
3615 ### OverrideFirstRunPage
3616 Override the first run page. If the value is an empty string (""), the first run page is not displayed.
3617
3618 Starting with Firefox 83, Firefox ESR 78.5, you can also specify multiple URLS separated by a vertical bar (|).
3619
3620 **Compatibility:** Firefox 60, Firefox ESR 60\
3621 **CCK2 Equivalent:** `welcomePage`,`noWelcomePage`\
3622 **Preferences Affected:** `startup.homepage_welcome_url`
3623
3624 #### Windows (GPO)
3625 ```
3626 Software\Policies\Mozilla\Firefox\OverrideFirstRunPage = "http://example.org"
3627 ```
3628 #### Windows (Intune)
3629 OMA-URI:
3630 ```
3631 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OverrideFirstRunPage
3632 ```
3633 Value (string):
3634 ```
3635 <enabled/>
3636 <data id="OverridePage" value="https://example.com"/>
3637 ```
3638 #### macOS
3639 ```
3640 <dict>
3641   <key>OverrideFirstRunPage</key>
3642   <string>http://example.org</string>
3643 </dict>
3644 ```
3645 #### policies.json
3646 ```
3647 {
3648   "policies": {
3649     "OverrideFirstRunPage": "http://example.org"
3650   }
3651 }
3652 ```
3653 ### OverridePostUpdatePage
3654 Override the upgrade page. If the value is an empty string (""), no extra pages are displayed when Firefox is upgraded.
3655
3656 **Compatibility:** Firefox 60, Firefox ESR 60\
3657 **CCK2 Equivalent:** `upgradePage`,`noUpgradePage`\
3658 **Preferences Affected:** `startup.homepage_override_url`
3659
3660 #### Windows (GPO)
3661 ```
3662 Software\Policies\Mozilla\Firefox\OverridePostUpdatePage = "http://example.org"
3663 ```
3664 #### Windows (Intune)
3665 OMA-URI:
3666 ```
3667 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OverridePostUpdatePage
3668 ```
3669 Value (string):
3670 ```
3671 <enabled/>
3672 <data id="OverridePage" value="https://example.com"/>
3673 ```
3674 #### macOS
3675 ```
3676 <dict>
3677   <key>OverridePostUpdatePage</key>
3678   <string>http://example.org</string>
3679 </dict>
3680 ```
3681 #### policies.json
3682 ```
3683 {
3684   "policies": {
3685     "OverridePostUpdatePage": "http://example.org"
3686   }
3687 }
3688 ```
3689 ### PasswordManagerEnabled
3690 Remove access to the password manager via preferences and blocks about:logins on Firefox 70.
3691
3692 **Compatibility:** Firefox 70, Firefox ESR 60.2\
3693 **CCK2 Equivalent:** N/A\
3694 **Preferences Affected:** `pref.privacy.disable_button.view_passwords`
3695
3696 #### Windows (GPO)
3697 ```
3698 Software\Policies\Mozilla\Firefox\PasswordManagerEnabled = 0x1 | 0x0
3699 ```
3700 #### Windows (Intune)
3701 OMA-URI:
3702 ```
3703 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PasswordManagerEnabled
3704 ```
3705 Value (string):
3706 ```
3707 <enabled/> or <disabled/>
3708 ```
3709 #### macOS
3710 ```
3711 <dict>
3712   <key>PasswordManagerEnabled</key>
3713   <true/> | <false/>
3714 </dict>
3715 ```
3716 #### policies.json
3717 ```
3718 {
3719   "policies": {
3720     "PasswordManagerEnabled": true | false
3721   }
3722 }
3723 ```
3724 ### PDFjs
3725 Disable or configure PDF.js, the built-in PDF viewer.
3726
3727 If `Enabled` is set to false, the built-in PDF viewer is disabled.
3728
3729 If `EnablePermissions` is set to true, the built-in PDF viewer will honor document permissions like preventing the copying of text.
3730
3731 Note: DisableBuiltinPDFViewer has not been deprecated. You can either continue to use it, or switch to using PDFjs->Enabled to disable the built-in PDF viewer. This new permission was added because we needed a place for PDFjs->EnabledPermissions.
3732
3733 **Compatibility:** Firefox 77, Firefox ESR 68.9\
3734 **CCK2 Equivalent:** N/A\
3735 **Preferences Affected:** `pdfjs.diabled`, `pdfjs.enablePermissions`
3736
3737 #### Windows (GPO)
3738 ```
3739 Software\Policies\Mozilla\Firefox\PDFjs\Enabled = 0x1 | 0x0
3740 Software\Policies\Mozilla\Firefox\PDFjs\EnablePermissions = 0x1 | 0x0
3741 ```
3742 #### Windows (Intune)
3743 OMA-URI:
3744 ```
3745 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PDFjs/PDFjs_Enabled
3746 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PDFjs/PDFjs_EnablePermissions
3747 ```
3748 Value (string):
3749 ```
3750 <enabled/>or <disabled/>
3751 ```
3752 #### macOS
3753 ```
3754 <dict>
3755   <key>PDFjs</key>
3756   <dict>
3757     <key>Enabled</key>
3758     <true/> | <false/>
3759     <key>EnablePermissions</key>
3760     <true/> | <false/>
3761   </dict>
3762 </dict>
3763 ```
3764 #### policies.json
3765 ```
3766 {
3767   "policies": {
3768     "PDFjs": {
3769       "Enabled": true | false,
3770       "EnablePermissions": true | false
3771     }
3772   }
3773 }
3774 ```
3775 ### Permissions
3776 Set permissions associated with camera, microphone, location, notifications, autoplay, and virtual reality. Because these are origins, not domains, entries with unique ports must be specified separately. This explicitly means that it is not possible to add wildcards. See examples below.
3777
3778 `Allow` is a list of origins where the feature is allowed.
3779
3780 `Block` is a list of origins where the feature is not allowed.
3781
3782 `BlockNewRequests` determines whether or not new requests can be made for the feature.
3783
3784 `Locked` prevents the user from changing preferences for the feature.
3785
3786 `Default` specifies the default value for Autoplay. block-audio-video is not supported on Firefox ESR 68.
3787
3788 **Compatibility:** Firefox 62, Firefox ESR 60.2 (Autoplay added in Firefox 74, Firefox ESR 68.6, Autoplay Default/Locked added in Firefox 76, Firefox ESR 68.8, VirtualReality added in Firefox 80, Firefox ESR 78.2)\
3789 **CCK2 Equivalent:** N/A\
3790 **Preferences Affected:** `permissions.default.camera`, `permissions.default.microphone`, `permissions.default.geo`, `permissions.default.desktop-notification`, `media.autoplay.default`, `permissions.default.xr`
3791
3792 #### Windows (GPO)
3793 ```
3794 Software\Policies\Mozilla\Firefox\Permissions\Camera\Allow\1 = "https://example.org"
3795 Software\Policies\Mozilla\Firefox\Permissions\Camera\Allow\2 = "https://example.org:1234"
3796 Software\Policies\Mozilla\Firefox\Permissions\Camera\Block\1 = "https://example.edu"
3797 Software\Policies\Mozilla\Firefox\Permissions\Camera\BlockNewRequests = 0x1 | 0x0
3798 Software\Policies\Mozilla\Firefox\Permissions\Camera\Locked = 0x1 | 0x0
3799 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Allow\1 = "https://example.org"
3800 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Block\1 = "https://example.edu"
3801 Software\Policies\Mozilla\Firefox\Permissions\Microphone\BlockNewRequests = 0x1 | 0x0
3802 Software\Policies\Mozilla\Firefox\Permissions\Microphone\Locked = 0x1 | 0x0
3803 Software\Policies\Mozilla\Firefox\Permissions\Location\Allow\1 = "https://example.org"
3804 Software\Policies\Mozilla\Firefox\Permissions\Location\Block\1 = "https://example.edu"
3805 Software\Policies\Mozilla\Firefox\Permissions\Location\BlockNewRequests = 0x1 | 0x0
3806 Software\Policies\Mozilla\Firefox\Permissions\Location\Locked = 0x1 | 0x0
3807 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Allow\1 = "https://example.org"
3808 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Block\1 = "https://example.edu"
3809 Software\Policies\Mozilla\Firefox\Permissions\Notifications\BlockNewRequests = 0x1 | 0x0
3810 Software\Policies\Mozilla\Firefox\Permissions\Notifications\Locked = 0x1 | 0x0
3811 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Allow\1 = "https://example.org"
3812 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Block\1 = "https://example.edu"
3813 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Default = "allow-audio-video" | "block-audio" | "block-audio-video"
3814 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Locked = 0x1 | 0x0
3815 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\Allow\1 = "https://example.org"
3816 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\Block\1 = "https://example.edu"
3817 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\BlockNewRequests = 0x1 | 0x0
3818 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\Locked = 0x1 | 0x0
3819 ```
3820 #### Windows (Intune)
3821 OMA-URI:
3822 ```
3823 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Location/Location_BlockNewRequests
3824 ```
3825 Value (string):
3826 ```
3827 <enabled/> or <disabled/>
3828 ```
3829 OMA-URI:
3830 ```
3831 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Location/Location_Locked
3832 ```
3833 Value (string):
3834 ```
3835 <enabled/> or <disabled/>
3836 ```
3837 OMA-URI:
3838 ```
3839 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_Allow
3840 ```
3841 Value (string):
3842 ```
3843 <enabled/>
3844 <data id="Permissions" value="1&#xF000;https://example.org"/>
3845 ```
3846 OMA-URI:
3847 ```
3848 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_BlockNewRequests
3849 ```
3850 Value (string):
3851 ```
3852 <enabled/> or <disabled/>
3853 ```
3854 OMA-URI:
3855 ```
3856 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_Locked
3857 ```
3858 Value (string):
3859 ```
3860 <enabled/> or <disabled/>
3861 ```
3862 OMA-URI:
3863 ```
3864 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Allow
3865 ```
3866 Value (string):
3867 ```
3868 <enabled/>
3869 <data id="Permissions" value="1&#xF000;https://example.org"/>
3870 ```
3871 OMA-URI:
3872 ```
3873 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Block
3874 ```
3875 Value (string):
3876 ```
3877 <enabled/>
3878 <data id="Permissions" value="1&#xF000;https://example.edu"/>
3879 ```
3880 OMA-URI:
3881 ```
3882 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Default
3883 ```
3884 Value (string):
3885 ```
3886 <enabled/>
3887 <data id="Autoplay_Default" value="allow-audio-video | block-audio | block-audio-video"/>
3888 ```
3889 OMA-URI:
3890 ```
3891 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Locked
3892 ```
3893 Value (string):
3894 ```
3895 <enabled/> or <disabled/>
3896 ```
3897 OMA-URI:
3898 ```
3899 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_Allow
3900 ```
3901 Value (string):
3902 ```
3903 <enabled/>
3904 <data id="Permissions" value="1&#xF000;https://example.org"/>
3905 ```
3906 OMA-URI:
3907 ```
3908 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_Block
3909 ```
3910 Value (string):
3911 ```
3912 <enabled/>
3913 <data id="Permissions" value="1&#xF000;https://example.edu"/>
3914 ```
3915 OMA-URI:
3916 ```
3917 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_BlockNewRequests
3918 ```
3919 Value (string):
3920 ```
3921 <enabled/> or <disabled/>
3922 ```
3923 OMA-URI:
3924 ```
3925 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_Locked
3926 ```
3927 Value (string):
3928 ```
3929 <enabled/> or <disabled/>
3930 ```
3931 #### macOS
3932 ```
3933 <dict>
3934   <key>Permissions</key>
3935   <dict>
3936     <key>Camera</key>
3937     <dict>
3938       <key>Allow</key>
3939       <array>
3940         <string>https://example.org</string>
3941         <string>https://example.org:1234</string>
3942       </array>
3943       <key>Block</key>
3944       <array>
3945         <string>https://example.edu</string>
3946       </array>
3947       <key>BlockNewRequests</key>
3948       <true/> | <false/>
3949       <key>Locked</key>
3950       <true/> | <false/>
3951     </dict>
3952     <key>Microphone</key>
3953     <dict>
3954       <key>Allow</key>
3955       <array>
3956         <string>https://example.org</string>
3957       </array>
3958       <key>Block</key>
3959       <array>
3960         <string>https://example.edu</string>
3961       </array>
3962       <key>BlockNewRequests</key>
3963       <true/> | <false/>
3964       <key>Locked</key>
3965       <true/> | <false/>
3966     </dict>
3967     <key>Location</key>
3968     <dict>
3969       <key>Allow</key>
3970       <array>
3971         <string>https://example.org</string>
3972       </array>
3973       <key>Block</key>
3974       <array>
3975         <string>https://example.edu</string>
3976       </array>
3977       <key>BlockNewRequests</key>
3978       <true/> | <false/>
3979       <key>Locked</key>
3980       <true/> | <false/>
3981     </dict>
3982     <key>Notifications</key>
3983     <dict>
3984       <key>Allow</key>
3985       <array>
3986         <string>https://example.org</string>
3987       </array>
3988       <key>Block</key>
3989       <array>
3990         <string>https://example.edu</string>
3991       </array>
3992       <key>BlockNewRequests</key>
3993       <true/>
3994       <key>Locked</key>
3995       <true/>
3996     </dict>
3997     <key>Autoplay</key>
3998     <dict>
3999       <key>Allow</key>
4000       <array>
4001         <string>https://example.org</string>
4002       </array>
4003       <key>Block</key>
4004       <array>
4005         <string>https://example.edu</string>
4006       </array>
4007       <key>Default</key>
4008       <string>allow-audio-video | block-audio | block-audio-video</string>
4009       <key>Locked</key>
4010       <true/> | <false/>
4011     </dict>
4012   </dict>
4013 </dict>
4014 ```
4015 #### policies.json
4016 ```
4017 {
4018   "policies": {
4019     "Permissions": {
4020       "Camera": {
4021         "Allow": ["https://example.org","https://example.org:1234"],
4022         "Block": ["https://example.edu"],
4023         "BlockNewRequests": true | false,
4024         "Locked": true | false
4025       },
4026       "Microphone": {
4027         "Allow": ["https://example.org"],
4028         "Block": ["https://example.edu"],
4029         "BlockNewRequests": true | false,
4030         "Locked": true | false
4031       },
4032       "Location": {
4033         "Allow": ["https://example.org"],
4034         "Block": ["https://example.edu"],
4035         "BlockNewRequests": true | false,
4036         "Locked": true | false
4037       },
4038       "Notifications": {
4039         "Allow": ["https://example.org"],
4040         "Block": ["https://example.edu"],
4041         "BlockNewRequests": true | false,
4042         "Locked": true | false
4043       },
4044       "Autoplay": {
4045         "Allow": ["https://example.org"],
4046         "Block": ["https://example.edu"],
4047         "Default": "allow-audio-video" | "block-audio" | "block-audio-video",
4048         "Locked": true | false
4049       }
4050     }
4051   }
4052 }
4053 ```
4054 ### PictureInPicture
4055
4056 Enable or disable Picture-in-Picture as well as prevent the user from enabling or disabling it (Locked).
4057
4058 **Compatibility:** Firefox 78, Firefox ESR 78\
4059 **CCK2 Equivalent:** N/A\
4060 **Preferences Affected:** `media.videocontrols.picture-in-picture.video-toggle.enabled`
4061
4062 #### Windows (GPO)
4063 ```
4064 Software\Policies\Mozilla\Firefox\PictureInPicture\Enabled = 0x1 | 0x0
4065 Software\Policies\Mozilla\Firefox\PictureInPicture\Locked = 0x1 | 0x0
4066
4067 ```
4068 #### Windows (Intune)
4069 OMA-URI:
4070 ```
4071 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PictureInPicture/PictureInPicture_Enabled
4072 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PictureInPicture/PictureInPicture_Locked
4073 ```
4074 Value (string):
4075 ```
4076 <enabled/> or <disabled/>
4077 ```
4078 #### macOS
4079 ```
4080 <dict>
4081   <key>PictureInPicture</key>
4082   <dict>
4083     <key>Enabled</key>
4084     <true/> | <false/>
4085     <key>Locked</key>
4086     <true/> | <false/>
4087   </dict>
4088 </dict>
4089 ```
4090 #### policies.json
4091 ```
4092 {
4093   "policies": {
4094     "PictureInPicture": {
4095       "Enabled": true | false,
4096       "Locked": true | false
4097     }
4098   }
4099 }
4100 ```
4101 ### PopupBlocking
4102 Configure the default pop-up window policy as well as origins for which pop-up windows are allowed.
4103
4104 `Allow` is a list of origins where popup-windows are allowed.
4105
4106 `Default` determines whether or not pop-up windows are allowed by default.
4107
4108 `Locked` prevents the user from changing pop-up preferences.
4109
4110 **Compatibility:** Firefox 60, Firefox ESR 60\
4111 **CCK2 Equivalent:** `permissions.popup`\
4112 **Preferences Affected:** `dom.disable_open_during_load`
4113
4114 #### Windows (GPO)
4115 ```
4116 Software\Policies\Mozilla\Firefox\PopupBlocking\Allow\1 = "https://example.org"
4117 Software\Policies\Mozilla\Firefox\PopupBlocking\Allow\2 = "https://example.edu"
4118 Software\Policies\Mozilla\Firefox\PopupBlocking\Default = 0x1 | 0x0
4119 Software\Policies\Mozilla\Firefox\PopupBlocking\Locked = 0x1 | 0x0
4120 ```
4121 #### Windows (Intune)
4122 OMA-URI:
4123 ```
4124 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Allow
4125 ```
4126 Value (string):
4127 ```
4128 <enabled/>
4129 <data id="Permissions" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
4130 ```
4131 OMA-URI:
4132 ```
4133 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Default
4134 ```
4135 Value (string):
4136 ```
4137 <enabled/> or <disabled/>
4138 ```
4139 OMA-URI:
4140 ```
4141 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Locked
4142 ```
4143 Value (string):
4144 ```
4145 <enabled/> or <disabled/>
4146 ```
4147 #### macOS
4148 ```
4149 <dict>
4150   <key>PopupBlocking</key>
4151   <dict>
4152     <key>Allow</key>
4153     <array>
4154       <string>http://example.org</string>
4155       <string>http://example.edu</string>
4156     </array>
4157     <key>Default</key>
4158     <true/> | <false/>
4159     <key>Locked</key>
4160     <true/> | <false/>
4161   </dict>
4162 </dict>
4163 ```
4164 #### policies.json
4165 ```
4166 {
4167   "policies": {
4168     "PopupBlocking": {
4169       "Allow": ["http://example.org/",
4170                 "http://example.edu/"],
4171       "Default": true | false,
4172       "Locked": true | false
4173     }
4174   }
4175 }
4176 ```
4177 ### Preferences
4178 Set and lock preferences.
4179
4180 **NOTE** On Windows, in order to use this policy, you must clear all settings in the old **Preferences (Deprecated)** section.
4181
4182 Previously you could only set and lock a subset of preferences. Starting with Firefox 81 and Firefox ESR 78.3 you can set many more preferences. You can also set default preferences, user preferences and you can clear preferences.
4183
4184 Preferences that start with the following prefixes are supported:
4185 ```
4186 accessibility.
4187 app.update.* (Firefox 86, Firefox 78.8)
4188 browser.
4189 datareporting.policy.
4190 dom.
4191 extensions.
4192 general.autoScroll (Firefox 83, Firefox ESR 78.5)
4193 general.smoothScroll (Firefox 83, Firefox ESR 78.5)
4194 geo.
4195 gfx.
4196 intl.
4197 keyword.enabled (Firefox 95, Firefox ESR 91.4)
4198 layers.
4199 layout.
4200 media.
4201 network.
4202 pdfjs. (Firefox 84, Firefox ESR 78.6)
4203 places.
4204 print.
4205 signon. (Firefox 83, Firefox ESR 78.5)
4206 spellchecker. (Firefox 84, Firefox ESR 78.6)
4207 toolkit.legacyUserProfileCustomizations.stylesheets (Firefox 95, Firefox ESR 91.4)
4208 ui.
4209 widget.
4210 ```
4211 as well as the following security preferences:
4212 | Preference | Type | Default
4213 | --- | --- | ---
4214 | security.default_personal_cert | string | Ask Every Time
4215 | &nbsp;&nbsp;&nbsp;&nbsp;If set to Select Automatically, Firefox automatically chooses the default personal certificate.
4216 | security.insecure_connection_text.enabled | bool | false
4217 | &nbsp;&nbsp;&nbsp;&nbsp;If set to true, adds the words "Not Secure" for insecure sites.
4218 | security.insecure_connection_text.pbmode.enabled | bool | false
4219 | &nbsp;&nbsp;&nbsp;&nbsp;If set to true, adds the words "Not Secure" for insecure sites in private browsing.
4220 | security.insecure_field_warning.contextual.enabled | bool | true
4221 | &nbsp;&nbsp;&nbsp;&nbsp;If set to false, remove the warning for inscure login fields.
4222 | security.mixed_content.block_active_content | boolean | true
4223 | &nbsp;&nbsp;&nbsp;&nbsp;If false, mixed active content (HTTP and HTTPS) is not blocked.
4224 | security.osclientcerts.autoload | boolean | false
4225 | &nbsp;&nbsp;&nbsp;&nbsp;If true, client certificates are loaded from the operating system certificate store.
4226 | security.ssl.errorReporting.enabled | boolean | true
4227 | &nbsp;&nbsp;&nbsp;&nbsp;If false, SSL errors cannot be sent to Mozilla.
4228 | security.tls.enable_0rtt_data | boolean | true
4229 | &nbsp;&nbsp;&nbsp;&nbsp;If false, TLS early data is turned off (Firefox 93, Firefox 91.2, Firefox 78.15).
4230 | security.tls.hello_downgrade_check | boolean | true
4231 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the TLS 1.3 downgrade check is disabled.
4232 | security.tls.version.enable-deprecated | boolean | false
4233 | &nbsp;&nbsp;&nbsp;&nbsp;If true, browser will accept TLS 1.0. and TLS 1.1 (Firefox 86, Firefox 78.8).
4234 | security.warn_submit_secure_to_insecure | boolean | true
4235 | &nbsp;&nbsp;&nbsp;&nbsp;If false, no warning is shown when submitting s form from https to http.
4236 &nbsp;
4237
4238 Using the preference as the key, set the `Value` to the corresponding preference value.
4239
4240 `Status` can be "default", "locked", "user" or "clear"
4241
4242 Default preferences can be modified by the user.
4243
4244 If a value is locked, it is also set as the default.
4245
4246 User preferences persist across invocations of Firefox. It is the equivalent of a user setting the preference. They are most useful when a preference is needed very early in startup so it can't be set as default by policy.
4247
4248 User preferences persist even if the policy is removed, so if you need to remove them, you should use the clear policy.
4249
4250 See the examples below for more detail.
4251
4252 IMPORTANT: Make sure you're only setting a particular preference using this mechanism and not some other way.
4253
4254 Status
4255 **Compatibility:** Firefox 81, Firefox ESR 78.3\
4256 **CCK2 Equivalent:** `preferences`\
4257 **Preferences Affected:** Many
4258
4259 #### Windows (GPO)
4260 Software\Policies\Mozilla\Firefox\Preferences (REG_MULTI_SZ) =
4261 ```
4262 {
4263   "accessibility.force_disabled": {
4264     "Value": 1,
4265     "Status": "default"
4266   },
4267   "browser.cache.disk.parent_directory": {
4268     "Value": "SOME_NATIVE_PATH",
4269     "Status": "user"
4270   },
4271   "browser.tabs.warnOnClose": {
4272     "Value": false,
4273     "Status": "locked"
4274   }
4275 }
4276 ```
4277 #### Windows (Intune)
4278 OMA-URI:
4279 ```
4280 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Preferences
4281 ```
4282 Value (string):
4283 ```
4284 <enabled/>
4285 <data id="JSON" value='
4286 {
4287   "accessibility.force_disabled": {
4288     "Value": 1,
4289     "Status": "default"
4290   },
4291   "browser.cache.disk.parent_directory": {
4292     "Value": "SOME_NATIVE_PATH",
4293     "Status": "user"
4294   },
4295   "browser.tabs.warnOnClose": {
4296     "Value": false,
4297     "Status": "locked"
4298   }
4299 }'/>
4300 ```
4301 #### macOS
4302 ```
4303 <dict>
4304   <key>Preferences</key>
4305   <dict>
4306     <key>accessibility.force_disabled</key>
4307     <dict>
4308       <key>Value</key>
4309       <integer>1</integer>
4310       <key>Status</key>
4311       <string>default</string>
4312     </dict>
4313     <key>browser.cache.disk.parent_directory</key>
4314     <dict>
4315       <key>Value</key>
4316       <string>SOME_NATIVE_PATH</string>
4317       <key>Status</key>
4318       <string>user</string>
4319     </dict>
4320     <key>browser.tabs.warnOnClose</key>
4321     <dict>
4322       <key>Value</key>
4323       <false/>
4324       <key>Status</key>
4325       <string>locked</string>
4326     </dict>
4327   </dict>
4328 </dict>
4329 ```
4330 #### policies.json
4331 ```
4332 {
4333   "policies": {
4334     "Preferences": {
4335       "accessibility.force_disabled": {
4336         "Value": 1,
4337         "Status": "default"
4338       },
4339       "browser.cache.disk.parent_directory": {
4340         "Value": "SOME_NATIVE_PATH",
4341         "Status": "user"
4342       },
4343       "browser.tabs.warnOnClose": {
4344         "Value": false,
4345         "Status": "locked"
4346       }
4347     }
4348   }
4349 }
4350 ```
4351 ### Preferences (Deprecated)
4352 Set and lock certain preferences.
4353
4354 **Compatibility:** See below\
4355 **CCK2 Equivalent:** `preferences`\
4356 **Preferences Affected:** See below
4357
4358 | Preference | Type | Compatibility | Default
4359 | --- | --- | --- | ---
4360 | accessibility.force_disabled | integer | Firefox 70, Firefox ESR 68.2 | 0
4361 | &nbsp;&nbsp;&nbsp;&nbsp;If set to 1, platform accessibility is disabled.
4362 | app.update.auto (Deprecated - Switch to AppAutoUpdate policy) | boolean | Firefox 68, Firefox ESR 68 | true
4363 | &nbsp;&nbsp;&nbsp;&nbsp;If false, Firefox doesn't automatically install update.
4364 | browser.bookmarks.autoExportHTML | boolean | Firefox 70, Firefox ESR 68.2 | false
4365 | &nbsp;&nbsp;&nbsp;&nbsp;If true, bookmarks are exported on shutdown.
4366 | browser.bookmarks.file | string | Firefox 70, Firefox ESR 68.2 | N/A
4367 | &nbsp;&nbsp;&nbsp;&nbsp;If set, the name of the file where bookmarks are exported and imported.
4368 | browser.bookmarks.restore_default_bookmarks | boolean | Firefox 70, Firefox ESR 68.2 | N/A
4369 | &nbsp;&nbsp;&nbsp;&nbsp;If true, bookmarks are restored to their defaults.
4370 | browser.cache.disk.enable | boolean | Firefox 68, Firefox ESR 68 | true
4371 | &nbsp;&nbsp;&nbsp;&nbsp;If false, don't store cache on the hard drive.
4372 | ~browser.cache.disk.parent_directory~ | string | Firefox 68, Firefox ESR 68 | Profile temporary directory
4373 | &nbsp;&nbsp;&nbsp;&nbsp;~If set, changes the location of the disk cache.~ This policy doesn't work. It's being worked on.
4374 | browser.fixup.dns_first_for_single_words | boolean | Firefox 68, Firefox ESR 68 | false
4375 | &nbsp;&nbsp;&nbsp;&nbsp;If true, single words are sent to DNS, not directly to search.
4376 | browser.newtabpage.activity-stream.default.sites | string | Firefox 72, ESR 68.4 | Locale dependent
4377 | &nbsp;&nbsp;&nbsp;&nbsp;If set, a list of URLs to use as the default top sites on the new tab page. Due to Firefox limitations, search sites can't be added. In addition, sites with the same name but different TLDs (example.org/example.com) will not display properly.
4378 | browser.places.importBookmarksHTML | boolean | Firefox 70, Firefox ESR 68.2
4379 | &nbsp;&nbsp;&nbsp;&nbsp;If true, bookmarks are always imported on startup.
4380 | browser.safebrowsing.phishing.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
4381 | &nbsp;&nbsp;&nbsp;&nbsp;If false, phishing protection is not enabled (Not recommended)
4382 | browser.safebrowsing.malware.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
4383 | &nbsp;&nbsp;&nbsp;&nbsp;If false, malware protection is not enabled (Not recommended)
4384 | browser.search.update | boolean | Firefox 68, Firefox ESR 68 | true
4385 | &nbsp;&nbsp;&nbsp;&nbsp;If false, updates for search engines are not checked.
4386 | browser.slowStartup.notificationDisabled | boolean | Firefox 70, Firefox ESR 68.2 | false
4387 | &nbsp;&nbsp;&nbsp;&nbsp;If true, a notification isn't shown if startup is slow.
4388 | browser.tabs.warnOnClose | boolean | Firefox 68, Firefox ESR 68 | true
4389 | &nbsp;&nbsp;&nbsp;&nbsp;If false, there is no warning when the browser is closed.
4390 | browser.taskbar.previews.enable | boolean | Firefox 70, Firefox ESR 68.2 (Windows only) | false
4391 | &nbsp;&nbsp;&nbsp;&nbsp;If true, tab previews are shown in the Windows taskbar.
4392 | browser.urlbar.suggest.bookmark | boolean | Firefox 68, Firefox ESR 68 | true
4393 | &nbsp;&nbsp;&nbsp;&nbsp;If false, bookmarks aren't suggested when typing in the URL bar.
4394 | browser.urlbar.suggest.history | boolean | Firefox 68, Firefox ESR 68 | true
4395 | &nbsp;&nbsp;&nbsp;&nbsp;If false, history isn't suggested when typing in the URL bar.
4396 | browser.urlbar.suggest.openpage | boolean | Firefox 68, Firefox ESR 68 | true
4397 | &nbsp;&nbsp;&nbsp;&nbsp;If false, open tabs aren't suggested when typing in the URL bar.
4398 | datareporting.policy.dataSubmissionPolicyBypassNotification | boolean | Firefox 68, Firefox ESR 68 | false
4399 | &nbsp;&nbsp;&nbsp;&nbsp;If true, don't show the privacy policy tab on first run.
4400 | dom.allow_scripts_to_close_windows | boolean | Firefox 70, Firefox ESR 68.2 | false
4401 | &nbsp;&nbsp;&nbsp;&nbsp;If false, web page can close windows.
4402 | dom.disable_window_flip | boolean | Firefox 68, Firefox ESR 68 | true
4403 | &nbsp;&nbsp;&nbsp;&nbsp;If false, web pages can focus and activate windows.
4404 | dom.disable_window_move_resize | boolean | Firefox 68, Firefox ESR 68 | false
4405 | &nbsp;&nbsp;&nbsp;&nbsp;If true, web pages can't move or resize windows.
4406 | dom.event.contextmenu.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4407 | &nbsp;&nbsp;&nbsp;&nbsp;If false, web pages can't override context menus.
4408 | dom.keyboardevent.keypress.hack.dispatch_non_printable_keys.addl | string | Firefox 68, Firefox ESR 68 | N/A
4409 | &nbsp;&nbsp;&nbsp;&nbsp;See https://support.mozilla.org/en-US/kb/dom-events-changes-introduced-firefox-66
4410 | dom.keyboardevent.keypress.hack.use_legacy_keycode_and_charcode.addl | string | Firefox 68, Firefox ESR 68 | N/A
4411 | &nbsp;&nbsp;&nbsp;&nbsp;See https://support.mozilla.org/en-US/kb/dom-events-changes-introduced-firefox-66
4412 | dom.xmldocument.load.enabled | boolean | Firefox ESR 68.5 | true.
4413 | &nbsp;&nbsp;&nbsp;&nbsp;If false, XMLDocument.load is not available.
4414 | dom.xmldocument.async.enabled | boolean | Firefox ESR 68.5 | true
4415 | &nbsp;&nbsp;&nbsp;&nbsp;If false, XMLDocument.async is not available.
4416 | extensions.blocklist.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
4417 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the extensions blocklist is not used (Not recommended)
4418 | extensions.getAddons.showPane | boolean | Firefox 68, Firefox ESR 68 | N/A
4419 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the Recommendations tab is not displayed in the Add-ons Manager.
4420 | extensions.htmlaboutaddons.recommendations.enabled | boolean | Firefox 72, Firefox ESR 68.4 | true
4421 | &nbsp;&nbsp;&nbsp;&nbsp;If false, recommendations are not shown on the Extensions tab in the Add-ons Manager.
4422 | geo.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
4423 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the geolocation API is disabled. | Language dependent
4424 | intl.accept_languages | string | Firefox 70, Firefox ESR 68.2
4425 | &nbsp;&nbsp;&nbsp;&nbsp;If set, preferred language for web pages.
4426 | media.eme.enabled (Deprecated - Switch to EncryptedMediaExtensions policy) | boolean | Firefox 70, Firefox ESR 68.2 | true
4427 | &nbsp;&nbsp;&nbsp;&nbsp;If false, Encrypted Media Extensions are not enabled.
4428 | media.gmp-gmpopenh264.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4429 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the OpenH264  plugin is not downloaded.
4430 | media.gmp-widevinecdm.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4431 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the Widevine plugin is not downloaded.
4432 | media.peerconnection.enabled | boolean | Firefox 72, Firefox ESR 68.4 | true
4433 | &nbsp;&nbsp;&nbsp;&nbsp;If false, WebRTC is disabled
4434 | media.peerconnection.ice.obfuscate_host_addresses.whitelist (Deprecated) | string | Firefox 72, Firefox ESR 68.4 | N/A
4435 | &nbsp;&nbsp;&nbsp;&nbsp;If set, a list of domains for which mDNS hostname obfuscation is
4436 disabled
4437 | media.peerconnection.ice.obfuscate_host_addresses.blocklist | string | Firefox 79, Firefox ESR 78.1 | N/A
4438 | &nbsp;&nbsp;&nbsp;&nbsp;If set, a list of domains for which mDNS hostname obfuscation is
4439 disabled
4440 | network.dns.disableIPv6 | boolean | Firefox 68, Firefox ESR 68 | false
4441 | &nbsp;&nbsp;&nbsp;&nbsp;If true, IPv6 DNS lokoups are disabled.
4442 | network.IDN_show_punycode | boolean | Firefox 68, Firefox ESR 68 | false
4443 | &nbsp;&nbsp;&nbsp;&nbsp;If true, display the punycode version of internationalized domain names.
4444 | places.history.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4445 | &nbsp;&nbsp;&nbsp;&nbsp;If false, history is not enabled.
4446 | print.save_print_settings | boolean | Firefox 70, Firefox ESR 68.2 | true
4447 | &nbsp;&nbsp;&nbsp;&nbsp;If false, print settings are not saved between jobs.
4448 | security.default_personal_cert | string | Firefox 68, Firefox ESR 68 | Ask Every Time
4449 | &nbsp;&nbsp;&nbsp;&nbsp;If set to Select Automatically, Firefox automatically chooses the default personal certificate.
4450 | security.mixed_content.block_active_content | boolean | Firefox 70, Firefox ESR 68.2 | true
4451 | &nbsp;&nbsp;&nbsp;&nbsp;If false, mixed active content (HTTP and HTTPS) is not blocked.
4452 | security.osclientcerts.autoload | boolean | Firefox 72 (Windows), Firefox 75 (macOS)  | false
4453 | &nbsp;&nbsp;&nbsp;&nbsp;If true, client certificates are loaded from the operating system certificate store.
4454 | security.ssl.errorReporting.enabled | boolean | Firefox 68, Firefox ESR 68 | true
4455 | &nbsp;&nbsp;&nbsp;&nbsp;If false, SSL errors cannot be sent to Mozilla.
4456 | security.tls.hello_downgrade_check | boolean | Firefox 72, Firefox ESR 68.4 | true
4457 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the TLS 1.3 downgrade check is disabled.
4458 | ui.key.menuAccessKeyFocuses | boolean | Firefox 68, Firefox ESR 68 | true
4459 | &nbsp;&nbsp;&nbsp;&nbsp;If false, the Alt key doesn't show the menubar on Windows.
4460 | widget.content.gtk-theme-override | string | Firefox 72, Firefox ESR 68.4 (Linux only) | N/A
4461 | &nbsp;&nbsp;&nbsp;&nbsp;If set, overrides the GTK theme for widgets.
4462 #### Windows (GPO)
4463 ```
4464 Software\Policies\Mozilla\Firefox\Preferences\boolean_preference_name = 0x1 | 0x0
4465 Software\Policies\Mozilla\Firefox\Preferences\string_preference_name = "string_value"
4466 ```
4467 #### Windows (Intune)
4468 OMA-URI: (periods are replaced by underscores)
4469 ```
4470 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Preferences/boolean_preference_name
4471 ```
4472 Value (string):
4473 ```
4474 <enabled/> or <disabled/>
4475 ```
4476 OMA-URI: (periods are replaced by underscores)
4477 ```
4478 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Preferences/string_preference_name
4479 ```
4480 Value (string):
4481 ```
4482 <enabled/>
4483 <data id="Preferences_String" value="string_value"/>
4484 ```
4485 #### macOS
4486 ```
4487 <dict>
4488   <key>Preferences</key>
4489   <dict>
4490     <key>boolean_preference_name</key>
4491     <true/> | <false/>
4492     <key>string_preference_name</key>
4493     <string>string_value</string>
4494   </dict>
4495 </dict>
4496 ```
4497 #### policies.json
4498 ```
4499 {
4500   "policies": {
4501     "Preferences": {
4502       "boolean_preference_name": true | false,
4503       "string_preference_name": "string_value"
4504     }
4505   }
4506 }
4507 ```
4508 ### PromptForDownloadLocation
4509 Ask where to save each file before downloading.
4510
4511 **Compatibility:** Firefox 68, Firefox ESR 68\
4512 **CCK2 Equivalent:** N/A\
4513 **Preferences Affected:** `browser.download.useDownloadDir`
4514
4515 #### Windows (GPO)
4516 ```
4517 Software\Policies\Mozilla\Firefox\PromptForDownloadLocation = 0x1 | 0x0
4518 ```
4519 #### Windows (Intune)
4520 OMA-URI:
4521 ```
4522 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PromptForDownloadLocation
4523 ```
4524 Value (string):
4525 ```
4526 <enabled/> or <disabled/>
4527 ```
4528 #### macOS
4529 ```
4530 <dict>
4531   <key>PromptForDownloadLocation</key>
4532   <true/> | <false/>
4533 </dict>
4534 ```
4535 #### policies.json
4536 ```
4537 {
4538   "policies": {
4539     "PromptForDownloadLocation": true | false
4540   }
4541 }
4542 ```
4543 ### Proxy
4544 Configure proxy settings. These settings correspond to the connection settings in Firefox preferences.
4545 To specify ports, append them to the hostnames with a colon (:).
4546
4547 `Mode` is the proxy method being used.
4548
4549 `Locked` is whether or not proxy settings can be changed.
4550
4551 `HTTPProxy` is the HTTP proxy server.
4552
4553 `UseHTTPProxyForAllProtocols` is whether or not the HTTP proxy should be used for all other proxies.
4554
4555 `SSLProxy` is the SSL proxy server.
4556
4557 `FTPProxy` is the FTP proxy server.
4558
4559 `SOCKSProxy` is the SOCKS proxy server
4560
4561 `SOCKSVersion` is the SOCKS version (4 or 5)
4562
4563 `Passthrough` is list of hostnames or IP addresses that will not be proxied. Use `<local>` to bypass proxying for all hostnames which do not contain periods.
4564
4565 `AutoConfigURL` is a  URL for proxy configuration (only used if Mode is autoConfig).
4566
4567 `AutoLogin` means do not prompt for authentication if password is saved.
4568
4569 `UseProxyForDNS` to use proxy DNS when using SOCKS v5.
4570
4571 **Compatibility:** Firefox 60, Firefox ESR 60\
4572 **CCK2 Equivalent:** `networkProxy*`\
4573 **Preferences Affected:** `network.proxy.type`, `network.proxy.autoconfig_url`, `network.proxy.socks_remote_dns`, `signon.autologin.proxy`, `network.proxy.socks_version`, `network.proxy.no_proxies_on`, `network.proxy.share_proxy_settings`, `network.proxy.http`, `network.proxy.http_port`, `network.proxy.ftp`, `network.proxy.ftp_port`, `network.proxy.ssl`, `network.proxy.ssl_port`, `network.proxy.socks`, `network.proxy.socks_port`
4574
4575 #### Windows (GPO)
4576 ```
4577 Software\Policies\Mozilla\Firefox\Proxy\Mode = "none" | "system" | "manual" | "autoDetect" | "autoConfig"
4578 Software\Policies\Mozilla\Firefox\Proxy\Locked = 0x1 | 0x0
4579 Software\Policies\Mozilla\Firefox\=Proxy\HTTPProxy = https://httpproxy.example.com
4580 Software\Policies\Mozilla\Firefox\Proxy\UseHTTPProxyForAllProtocols = 0x1 | 0x0
4581 Software\Policies\Mozilla\Firefox\Proxy\SSLProxy = https://sslproxy.example.com
4582 Software\Policies\Mozilla\Firefox\Proxy\FTPProxy = https://ftpproxy.example.com
4583 Software\Policies\Mozilla\Firefox\Proxy\SOCKSProxy = https://socksproxy.example.com
4584 Software\Policies\Mozilla\Firefox\Proxy\SOCKSVersion = 0x4 | 0x5
4585 Software\Policies\Mozilla\Firefox\Proxy\Passthrough = <local>
4586 Software\Policies\Mozilla\Firefox\Proxy\AutoConfigURL = URL_TO_AUTOCONFIG
4587 Software\Policies\Mozilla\Firefox\Proxy\AutoLogin = 0x1 | 0x0
4588 Software\Policies\Mozilla\Firefox\Proxy\UseProxyForDNS = 0x1 | 0x0
4589 ```
4590 #### Windows (Intune)
4591 OMA-URI:
4592 ```
4593 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Proxy
4594 ```
4595 Value (string):
4596 ```
4597 <enabled/>
4598 <data id="ProxyLocked" value="true | false"/>
4599 <data id="ConnectionType" value="none | system | manual | autoDetect | autoConfig"/>
4600 <data id="HTTPProxy" value="https://httpproxy.example.com"/>
4601 <data id="UseHTTPProxyForAllProtocols" value="true | false"/>
4602 <data id="SSLProxy" value="https://sslproxy.example.com"/>
4603 <data id="FTPProxy" value="https://ftpproxy.example.com"/>
4604 <data id="SOCKSProxy" value="https://socksproxy.example.com"/>
4605 <data id="SOCKSVersion" value="4 | 5"/>
4606 <data id="AutoConfigURL" value="URL_TO_AUTOCONFIG"/>
4607 <data id="Passthrough" value="<local>"/>
4608 <data id="AutoLogin" value="true | false"/>
4609 <data id="UseProxyForDNS" value="true | false"/>
4610 ```
4611 #### macOS
4612 ```
4613 <dict>
4614   <key>Proxy</key>
4615   <dict>
4616     <key>Mode</key>
4617     <string>none | system | manual | autoDetect | autoConfig</string>
4618     <key>Locked</key>
4619     <true> | </false>
4620     <key>HTTPProxy</key>
4621     <string>https://httpproxy.example.com</string>
4622     <key>UseHTTPProxyForAllProtocols</key>
4623     <true> | </false>
4624     <key>SSLProxy</key>
4625     <string>https://sslproxy.example.com</string>
4626     <key>FTPProxy</key>
4627     <string>https://ftpproxy.example.com</string>
4628     <key>SOCKSProxy</key>
4629     <string>https://socksproxy.example.com</string>
4630     <key>SOCKSVersion</key>
4631     <string>4 | 5</string>
4632     <key>Passthrough</key>
4633     <string>&lt;local>&gt;</string>
4634     <key>AutoConfigURL</key>
4635     <string>URL_TO_AUTOCONFIG</string>
4636     <key>AutoLogin</key>
4637     <true> | </false>
4638     <key>UseProxyForDNS</key>
4639     <true> | </false>
4640   </dict>
4641 </dict>
4642 ```
4643 #### policies.json
4644 ```
4645 {
4646   "policies": {
4647     "Proxy": {
4648       "Mode": "none" | "system" | "manual" | "autoDetect" | "autoConfig",
4649       "Locked": true | false,
4650       "HTTPProxy": "hostname",
4651       "UseHTTPProxyForAllProtocols": true | false,
4652       "SSLProxy": "hostname",
4653       "FTPProxy": "hostname",
4654       "SOCKSProxy": "hostname",
4655       "SOCKSVersion": 4 | 5,
4656       "Passthrough": "<local>",
4657       "AutoConfigURL": "URL_TO_AUTOCONFIG",
4658       "AutoLogin": true | false,
4659       "UseProxyForDNS": true | false
4660     }
4661   }
4662 }
4663 ```
4664 ### RequestedLocales
4665 Set the the list of requested locales for the application in order of preference. It will cause the corresponding language pack to become active.
4666
4667 Note: For Firefox 68, this can now be a string so that you can specify an empty value.
4668
4669 **Compatibility:** Firefox 64, Firefox ESR 60.4, Updated in Firefox 68, Firefox ESR 68\
4670 **CCK2 Equivalent:** N/A\
4671 **Preferences Affected:** N/A
4672 #### Windows (GPO)
4673 ```
4674 Software\Policies\Mozilla\Firefox\RequestedLocales\1 = "de"
4675 Software\Policies\Mozilla\Firefox\RequestedLocales\2 = "en-US"
4676
4677 or
4678
4679 Software\Policies\Mozilla\Firefox\RequestedLocales = "de,en-US"
4680 ```
4681 #### Windows (Intune)
4682 OMA-URI:
4683 ```
4684 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/RequestedLocalesString
4685 ```
4686 Value (string):
4687 ```
4688 <enabled/>
4689 <data id="Preferences_String" value="de,en-US"/>
4690 ```
4691 #### macOS
4692 ```
4693 <dict>
4694   <key>RequestedLocales</key>
4695   <array>
4696     <string>de</string>
4697     <string>en-US</string>
4698   </array>
4699 </dict>
4700
4701 or
4702
4703 <dict>
4704   <key>RequestedLocales</key>
4705   <string>de,en-US</string>
4706 </dict>
4707
4708 ```
4709 #### policies.json
4710 ```
4711 {
4712   "policies": {
4713     "RequestedLocales": ["de", "en-US"]
4714   }
4715 }
4716
4717 or
4718
4719 {
4720   "policies": {
4721     "RequestedLocales": "de,en-US"
4722   }
4723 }
4724 ```
4725 <a name="SanitizeOnShutdown"></a>
4726
4727 ### SanitizeOnShutdown (Selective)
4728 Clear data on shutdown. Choose from Cache, Cookies, Download History, Form & Search History, Browsing History, Active Logins, Site Preferences and Offline Website Data.
4729
4730 Previously, these values were always locked. Starting with Firefox 74 and Firefox ESR 68.6, you can use the `Locked` option to either keep the values unlocked (set it to false), or lock only the values you set (set it to true). If you want the old behavior of locking everything, do not set `Locked` at all.
4731
4732 **Compatibility:** Firefox 68, Firefox ESR 68 (Locked added in 74/68.6)\
4733 **CCK2 Equivalent:** N/A\
4734 **Preferences Affected:** `privacy.sanitize.sanitizeOnShutdown`, `privacy.clearOnShutdown.cache`, `privacy.clearOnShutdown.cookies`, `privacy.clearOnShutdown.downloads`, `privacy.clearOnShutdown.formdata`, `privacy.clearOnShutdown.history`, `privacy.clearOnShutdown.sessions`, `privacy.clearOnShutdown.siteSettings`, `privacy.clearOnShutdown.offlineApps`
4735 #### Windows (GPO)
4736 ```
4737 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Cache = 0x1 | 0x0
4738 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Cookies = 0x1 | 0x0
4739 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Downloads = 0x1 | 0x0
4740 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\FormData = 0x1 | 0x0
4741 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\History = 0x1 | 0x0
4742 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Sessions = 0x1 | 0x0
4743 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\SiteSettings = 0x1 | 0x0
4744 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\OfflineApps = 0x1 | 0x0
4745 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Locked = 0x1 | 0x0
4746 ```
4747 #### Windows (Intune)
4748 OMA-URI:
4749 ```
4750 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/A_SanitizeOnShutdown_Cache
4751 ```
4752 Value (string):
4753 ```
4754 <enabled/> or <disabled/>
4755 ```
4756 OMA-URI:
4757 ```
4758 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/B_SanitizeOnShutdown_Cookies
4759 ```
4760 Value (string):
4761 ```
4762 <enabled/> or <disabled/>
4763 ```
4764 OMA-URI:
4765 ```
4766 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/C_SanitizeOnShutdown_Downloads
4767 ```
4768 Value (string):
4769 ```
4770 <enabled/> or <disabled/>
4771 ```
4772 OMA-URI:
4773 ```
4774 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/D_SanitizeOnShutdown_FormData
4775 ```
4776 Value (string):
4777 ```
4778 <enabled/> or <disabled/>
4779 ```
4780 OMA-URI:
4781 ```
4782 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/E_SanitizeOnShutdown_History
4783 ```
4784 Value (string):
4785 ```
4786 <enabled/> or <disabled/>
4787 ```
4788 OMA-URI:
4789 ```
4790 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/F_SanitizeOnShutdown_Sessions
4791 ```
4792 Value (string):
4793 ```
4794 <enabled/> or <disabled/>
4795 ```
4796 OMA-URI:
4797 ```
4798 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/G_SanitizeOnShutdown_SiteSettings
4799 ```
4800 Value (string):
4801 ```
4802 <enabled/> or <disabled/>
4803 ```
4804 OMA-URI:
4805 ```
4806 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/H_SanitizeOnShutdown_OfflineApps
4807 ```
4808 Value (string):
4809 ```
4810 <enabled/> or <disabled/>
4811 ```
4812 OMA-URI:
4813 ```
4814 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/I_SanitizeOnShutdown_Locked
4815 ```
4816 Value (string):
4817 ```
4818 <enabled/> or <disabled/>
4819 ```
4820 #### macOS
4821 ```
4822 <dict>
4823   <key>SanitizeOnShutdown</key>
4824   <dict>
4825     <key>Cache</key>
4826     <true/> | <false/>
4827     <key>Cookies</key>
4828     <true/> | <false/>
4829     <key>Downloads</key>
4830     <true/> | <false/>
4831     <key>FormData</key>
4832     <true/> | <false/>
4833     <key>History</key>
4834     <true/> | <false/>
4835     <key>Sessions</key>
4836     <true/> | <false/>
4837     <key>SiteSettings</key>
4838     <true/> | <false/>
4839     <key>OfflineApps</key>
4840     <true/> | <false/>
4841     <key>Locked</key>
4842     <true/> | <false/>
4843   </dict>
4844 </dict>
4845 ```
4846 #### policies.json
4847 ```
4848 {
4849   "policies": {
4850     "SanitizeOnShutdown": {
4851       "Cache": true | false,
4852       "Cookies": true | false,
4853       "Downloads": true | false,
4854       "FormData": true | false,
4855       "History": true | false,
4856       "Sessions": true | false,
4857       "SiteSettings": true | false,
4858       "OfflineApps": true | false,
4859       "Locked": true | false
4860     }
4861   }
4862 }
4863 ```
4864 ### SanitizeOnShutdown (All)
4865 Clear all data on shutdown, including Browsing & Download History, Cookies, Active Logins, Cache, Form & Search History, Site Preferences and Offline Website Data.
4866
4867 **Compatibility:** Firefox 60, Firefox ESR 60\
4868 **CCK2 Equivalent:** N/A\
4869 **Preferences Affected:** `privacy.sanitize.sanitizeOnShutdown`, `privacy.clearOnShutdown.cache`, `privacy.clearOnShutdown.cookies`, `privacy.clearOnShutdown.downloads`, `privacy.clearOnShutdown.formdata`, `privacy.clearOnShutdown.history`, `privacy.clearOnShutdown.sessions`, `privacy.clearOnShutdown.siteSettings`, `privacy.clearOnShutdown.offlineApps`
4870 #### Windows (GPO)
4871 ```
4872 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown = 0x1 | 0x0
4873 ```
4874 #### Windows (Intune)
4875 OMA-URI:
4876 ```
4877 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/C_SanitizeOnShutdown
4878 ```
4879 Value (string):
4880 ```
4881 <enabled/> or <disabled/>
4882 ```
4883 #### macOS
4884 ```
4885 <dict>
4886   <key>SanitizeOnShutdown</key>
4887   <true/> | <false/>
4888 </dict>
4889 ```
4890 #### policies.json
4891 ```
4892 {
4893   "policies": {
4894     "SanitizeOnShutdown": true | false
4895   }
4896 }
4897 ```
4898 ### SearchBar
4899 Set whether or not search bar is displayed.
4900
4901 **Compatibility:** Firefox 60, Firefox ESR 60\
4902 **CCK2 Equivalent:** `showSearchBar`\
4903 **Preferences Affected:** N/A
4904
4905 #### Windows (GPO)
4906 ```
4907 Software\Policies\Mozilla\Firefox\SearchBar = "unified" | "separate"
4908 ```
4909
4910 #### Windows (Intune)
4911 OMA-URI:
4912 ```
4913 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SearchBar
4914 ```
4915 Value (string):
4916 ```
4917 <enabled/>
4918 <data id="SearchBar" value="unified | separate"/>
4919 ```
4920 #### macOS
4921 ```
4922 <dict>
4923   <key>SearchBar</key>
4924   <string>unified | separate</string>
4925 </dict>
4926 ```
4927 #### policies.json
4928 ```
4929 {
4930   "policies": {
4931     "SearchBar": "unified" | "separate"
4932   }
4933 }
4934 ```
4935 <a name="SearchEngines"></a>
4936
4937 ### SearchEngines (This policy is only available on the ESR.)
4938
4939 ### SearchEngines | Default
4940
4941 Set the default search engine. This policy is only available on the ESR.
4942
4943 **Compatibility:** Firefox ESR 60\
4944 **CCK2 Equivalent:** `defaultSearchEngine`\
4945 **Preferences Affected:** N/A
4946
4947 #### Windows (GPO)
4948 ```
4949 Software\Policies\Mozilla\Firefox\SearchEngines\Default = NAME_OF_SEARCH_ENGINE
4950 ```
4951 #### Windows (Intune)
4952 OMA-URI:
4953 ```
4954 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_Default
4955 ```
4956 Value (string):
4957 ```
4958 <enabled/>
4959 <data id="SearchEngines_Default" value="NAME_OF_SEARCH_ENGINE"/>
4960 ```
4961 #### macOS
4962 ```
4963 <dict>
4964   <key>SearchEngines</key>
4965   <dict>
4966     <key>Default</key>
4967     <string>NAME_OF_SEARCH_ENGINE</string>
4968   </dict>
4969 </dict>
4970 ```
4971 #### policies.json
4972 ```
4973 {
4974   "policies": {
4975     "SearchEngines": {
4976       "Default": "NAME_OF_SEARCH_ENGINE"
4977     }
4978   }
4979 }
4980 ```
4981 ### SearchEngines | PreventInstalls
4982
4983 Prevent installing search engines from webpages.
4984
4985 **Compatibility:** Firefox ESR 60\
4986 **CCK2 Equivalent:** `disableSearchEngineInstall`\
4987 **Preferences Affected:** N/A
4988
4989 #### Windows (GPO)
4990 ```
4991 Software\Policies\Mozilla\Firefox\SearchEngines\PreventInstalls = 0x1 | 0x0
4992 ```
4993 #### Windows (Intune)
4994 OMA-URI:
4995 ```
4996 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_PreventInstalls
4997 ```
4998 Value (string):
4999 ```
5000 <enabled/> or <disabled/>
5001 ```
5002 #### macOS
5003 ```
5004 <dict>
5005   <key>SearchEngines</key>
5006   <dict>
5007     <key>PreventInstalls</key>
5008     <true/> | <false/>
5009   </dict>
5010 </dict>
5011 ```
5012 #### policies.json
5013 ```
5014 {
5015   "policies": {
5016     "SearchEngines": {
5017       "PreventInstalls": true | false
5018     }
5019   }
5020 }
5021 ```
5022 ### SearchEngines | Remove
5023
5024 Hide built-in search engines. This policy is only available on the ESR.
5025
5026 **Compatibility:** Firefox ESR 60.2\
5027 **CCK2 Equivalent:** `removeDefaultSearchEngines` (removed all built-in engines)\
5028 **Preferences Affected:** N/A
5029
5030 #### Windows (GPO)
5031 ```
5032 Software\Policies\Mozilla\Firefox\SearchEngines\Remove\1 = NAME_OF_SEARCH_ENGINE
5033 ```
5034 #### Windows (Intune)
5035 OMA-URI:
5036 ```
5037 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_Remove
5038 ```
5039 Value (string):
5040 ```
5041 <enabled/>
5042 <data id="SearchEngines_Remove" value="1&#xF000;NAME_OF_SEARCH_ENGINE"/>
5043 ```
5044 #### macOS
5045 ```
5046 <dict>
5047   <key>SearchEngines</key>
5048   <dict>
5049     <key>Remove</key>
5050     <array>
5051       <string>NAME_OF_SEARCH_ENGINE</string>
5052     </array>
5053   </dict>
5054 </dict>
5055 ```
5056 #### policies.json
5057 ```
5058 {
5059   "policies": {
5060     "SearchEngines": {
5061       "Remove": ["NAME_OF_SEARCH_ENGINE"]
5062     }
5063   }
5064 }
5065 ```
5066 ### SearchEngines | Add
5067
5068 Add new search engines (up to five). This policy is only available on the ESR. `Name` and `URLTemplate` are required.
5069
5070 `Name` is the name of the search engine.
5071
5072 `URLTemplate` is the search URL with {searchTerms} to substitute for the search term.
5073
5074 `Method` is either GET or POST
5075
5076 `IconURL` is a URL for the icon to use.
5077
5078 `Alias` is a keyword to use for the engine.
5079
5080 `Description` is a description of the search engine.
5081
5082 `PostData` is the POST data as name value pairs separated by &.
5083
5084 `SuggestURLTemplate` is a search suggestions URL with {searchTerms} to substitute for the search term.
5085
5086 `Encoding` is the query charset for the engine. It defaults to UTF-8.
5087
5088 **Compatibility:** Firefox ESR 60 (POST support in Firefox ESR 68, Encoding support in Firefox 91)\
5089 **CCK2 Equivalent:** `searchplugins`\
5090 **Preferences Affected:** N/A
5091
5092 #### Windows (GPO)
5093 ```
5094 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Name = "Example1"
5095 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\URLTemplate = "https://www.example.org/q={searchTerms}"
5096 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Method = "GET" | "POST"
5097 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\IconURL = "https://www.example.org/favicon.ico"
5098 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Alias = "example"
5099 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Description = "Example Description"
5100 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\SuggestURLTemplate = "https://www.example.org/suggestions/q={searchTerms}"
5101 Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\PostData = "name=value&q={searchTerms}"
5102 ```
5103 #### Windows (Intune)
5104 OMA-URI:
5105 ```
5106 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_1
5107 ```
5108 Value (string):
5109 ```
5110 <enabled/>
5111 <data id="SearchEngine_Name" value="Example1"/>
5112 <data id="SearchEngine_URLTemplate" value="https://www.example.org/q={searchTerms"/>
5113 <data id="SearchEngine_Method" value="GET | POST"/>
5114 <data id="SearchEngine_IconURL" value="https://www.example.org/favicon.ico"/>
5115 <data id="SearchEngine_Alias" value="example"/>
5116 <data id="SearchEngine_Description" value="Example Description"/>
5117 <data id="SearchEngine_SuggestURLTemplate" value="https://www.example.org/suggestions/q={searchTerms}"/>
5118 <data id="SearchEngine_PostData" value="name=value&amp;q={searchTerms}"/>
5119 ```
5120 #### macOS
5121 ```
5122 <dict>
5123   <key>SearchEngines</key>
5124   <dict>
5125     <key>Add</key>
5126     <array>
5127       <dict>
5128         <key>Name</key>
5129         <string>Example1</string>
5130         <key>URLTemplate</key>
5131         <string>https://www.example.org/q={searchTerms}</string>
5132         <key>Method</key>
5133         <string>GET | POST </string>
5134         <key>IconURL</key>
5135         <string>https://www.example.org/favicon.ico</string>
5136         <key>Alias</key>
5137         <string>example</string>
5138         <key>Description</key>
5139         <string>Example Description</string>
5140         <key>SuggestURLTemplate</key>
5141         <string>https://www.example.org/suggestions/q={searchTerms}</string>
5142         <key>PostData</key>
5143         <string>name=value&q={searchTerms}</string>
5144       </dict>
5145     <array>
5146   </dict>
5147 </dict>
5148 ```
5149 #### policies.json
5150 ```
5151 {
5152   "policies": {
5153     "SearchEngines": {
5154       "Add": [
5155         {
5156           "Name": "Example1",
5157           "URLTemplate": "https://www.example.org/q={searchTerms}",
5158           "Method": "GET" | "POST",
5159           "IconURL": "https://www.example.org/favicon.ico",
5160           "Alias": "example",
5161           "Description": "Description",
5162           "PostData": "name=value&q={searchTerms}",
5163           "SuggestURLTemplate": "https://www.example.org/suggestions/q={searchTerms}"
5164         }
5165       ]
5166     }
5167   }
5168 }
5169 ```
5170 ### SearchSuggestEnabled
5171
5172 Enable search suggestions.
5173
5174 **Compatibility:** Firefox 68, Firefox ESR 68\
5175 **CCK2 Equivalent:** N/A\
5176 **Preferences Affected:** `browser.urlbar.suggest.searches`, `browser.search.suggest.enabled`
5177
5178 #### Windows (GPO)
5179 ```
5180 Software\Policies\Mozilla\Firefox\SearchSuggestEnabled = 0x1 | 0x0
5181 ```
5182 #### Windows (Intune)
5183 OMA-URI:
5184 ```
5185 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchSuggestEnabled
5186 ```
5187 Value (string):
5188 ```
5189 <enabled/> or <disabled/>
5190 ```
5191 #### macOS
5192 ```
5193 <dict>
5194   <key>SearchSuggestEnabled</key>
5195   <true/> | <false/>
5196 </dict>
5197 ```
5198 #### policies.json
5199 ```
5200 {
5201   "policies": {
5202     "SearchSuggestEnabled": true | false
5203   }
5204 }
5205 ```
5206 ### SecurityDevices
5207
5208 Install PKCS #11 modules.
5209
5210 **Compatibility:** Firefox 64, Firefox ESR 60.4\
5211 **CCK2 Equivalent:** `certs.devices`\
5212 **Preferences Affected:** N/A
5213
5214 #### Windows (GPO)
5215 ```
5216 Software\Policies\Mozilla\Firefox\SecurityDevices\NAME_OF_DEVICE = PATH_TO_LIBRARY_FOR_DEVICE
5217 ```
5218 #### Windows (Intune)
5219 OMA-URI:
5220 ```
5221 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SecurityDevices
5222 ```
5223 Value (string):
5224 ```
5225 <enabled/>
5226 <data id="SecurityDevices" value="NAME_OF_DEVICE&#xF000;PATH_TO_LIBRARY_FOR_DEVICE"/>
5227 ```
5228 #### macOS
5229 ```
5230 <dict>
5231   <key>SecurityDevices</key>
5232   <dict>
5233     <key>NAME_OF_DEVICE</key>
5234     <string>PATH_TO_LIBRARY_FOR_DEVICE</string>
5235   </dict>
5236 </dict>
5237 ```
5238
5239 #### policies.json
5240 ```
5241 {
5242   "policies": {
5243     "SecurityDevices": {
5244       "NAME_OF_DEVICE": "PATH_TO_LIBRARY_FOR_DEVICE"
5245     }
5246   }
5247 }
5248 ```
5249 ### ShowHomeButton
5250 Show the home button on the toolbar.
5251
5252 Future versions of Firefox will not show the home button by default.
5253
5254 **Compatibility:** Firefox 88, Firefox ESR 78.10\
5255 **CCK2 Equivalent:** N/A\
5256 **Preferences Affected:** N/A
5257
5258 #### Windows (GPO)
5259 ```
5260 Software\Policies\Mozilla\Firefox\ShowHomeButton = 0x1 | 0x0
5261 ```
5262 #### Windows (Intune)
5263 OMA-URI:
5264 ```
5265 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/ShowHomeButton
5266 ```
5267 Value (string):
5268 ```
5269 <enabled/> or <disabled/>
5270 ```
5271 #### macOS
5272 ```
5273 <dict>
5274   <key>ShowHomeButton</key>
5275   <true/> | <false/>
5276 </dict>
5277 ```
5278 #### policies.json
5279 ```
5280 {
5281   "policies": {
5282     "ShowHomeButton": true | false
5283   }
5284 }
5285 ```
5286 ### SSLVersionMax
5287
5288 Set and lock the maximum version of TLS.
5289
5290 **Compatibility:** Firefox 66, Firefox ESR 60.6\
5291 **CCK2 Equivalent:** N/A\
5292 **Preferences Affected:** `security.tls.version.max`
5293
5294 #### Windows (GPO)
5295 ```
5296 Software\Policies\Mozilla\Firefox\SSLVersionMax = "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
5297 ```
5298 #### Windows (Intune)
5299 OMA-URI:
5300 ```
5301 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SSLVersionMax
5302 ```
5303 Value (string):
5304 ```
5305 <enabled/>
5306 <data id="SSLVersion" value="tls1 | tls1.2 | tls1.3"/>
5307 ```
5308 #### macOS
5309 ```
5310 <dict>
5311   <key>SSLVersionMax</key>
5312   <string>tls1 | tls1.1 | tls1.2 | tls1.3</string>
5313 </dict>
5314 ```
5315
5316 #### policies.json
5317 ```
5318 {
5319   "policies": {
5320     "SSLVersionMax": "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
5321   }
5322 }
5323 ```
5324 ### SSLVersionMin
5325
5326 Set and lock the minimum version of TLS.
5327
5328 **Compatibility:** Firefox 66, Firefox ESR 60.6\
5329 **CCK2 Equivalent:** N/A\
5330 **Preferences Affected:** `security.tls.version.min`
5331
5332 #### Windows (GPO)
5333 ```
5334 Software\Policies\Mozilla\Firefox\SSLVersionMin = "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
5335 ```
5336 #### Windows (Intune)
5337 OMA-URI:
5338 ```
5339 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SSLVersionMin
5340 ```
5341 Value (string):
5342 ```
5343 <enabled/>
5344 <data id="SSLVersion" value="tls1 | tls1.2 | tls1.3"/>
5345 ```
5346 #### macOS
5347 ```
5348 <dict>
5349   <key>SSLVersionMin</key>
5350   <string>tls1 | tls1.1 | tls1.2 | tls1.3</string>
5351 </dict>
5352 ```
5353
5354 #### policies.json
5355 ```
5356 {
5357   "policies": {
5358     "SSLVersionMin": "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
5359   }
5360 }
5361 ```
5362 ### SupportMenu
5363 Add a menuitem to the help menu for specifying support information.
5364
5365 **Compatibility:** Firefox 68.0.1, Firefox ESR 68.0.1\
5366 **CCK2 Equivalent:** helpMenu\
5367 **Preferences Affected:** N/A
5368
5369 #### Windows (GPO)
5370 ```
5371 Software\Policies\Mozilla\Firefox\SupportMenu\Title = "Support Menu"
5372 Software\Policies\Mozilla\Firefox\SupportMenu\URL = "http://example.com/support"
5373 Software\Policies\Mozilla\Firefox\SupportMenu\AccessKey = "S"
5374 ```
5375 #### Windows (Intune)
5376 OMA-URI:
5377 ```
5378 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SupportMenu
5379 ```
5380 Value (string):
5381 ```
5382 <enabled/>
5383 <data id="SupportMenuTitle" value="Support Menu"/>
5384 <data id="SupportMenuURL" value="http://example.com/support"/>
5385 <data id="SupportMenuAccessKey" value="S">
5386 ```
5387 #### macOS
5388 ```
5389 <dict>
5390   <key>SupportMenu</key>
5391   <dict>
5392     <key>Title</key>
5393     <string>SupportMenu</string>
5394     <key>URL</key>
5395     <string>http://example.com/support</string>
5396     <key>AccessKey</key>
5397     <string>S</string>
5398   </dict>
5399 </dict>
5400 ```
5401 #### policies.json
5402 ```
5403 {
5404   "policies": {
5405     "SupportMenu": {
5406       "Title": "Support Menu",
5407       "URL": "http://example.com/support",
5408       "AccessKey": "S"
5409     }
5410   }
5411 }
5412 ```
5413 ### UserMessaging
5414
5415 Prevent Firefox from messaging the user in certain situations.
5416
5417 `WhatsNew` Remove the "What's New" icon and menuitem.
5418
5419 `ExtensionRecommendations` If false, don't recommend extensions while the user is visiting web pages.
5420
5421 `FeatureRecommendations` IF false, don't recommend browser features.
5422
5423 `UrlbarInterventions` If false, Don't offer Firefox specific suggestions in the URL bar.
5424
5425 `SkipOnboarding` If true, don't show onboarding messages on the new tab page.
5426
5427 **Compatibility:** Firefox 75, Firefox ESR 68.7\
5428 **CCK2 Equivalent:** N/A\
5429 **Preferences Affected:** `browser.messaging-system.whatsNewPanel.enabled`, `browser.newtabpage.activity-stream.asrouter.userprefs.cfr.addons`, `browser.newtabpage.activity-stream.asrouter.userprefs.cfr.features`, `browser.aboutwelcome.enabled`
5430
5431 #### Windows (GPO)
5432 ```
5433 Software\Policies\Mozilla\Firefox\UserMessaging\WhatsNew = 0x1 | 0x0
5434 Software\Policies\Mozilla\Firefox\UserMessaging\ExtensionRecommendations = 0x1 | 0x0
5435 Software\Policies\Mozilla\Firefox\UserMessaging\FeatureRecommendations = 0x1 | 0x0
5436 Software\Policies\Mozilla\Firefox\UserMessaging\UrlbarInterventions = 0x1 | 0x0
5437 Software\Policies\Mozilla\Firefox\UserMessaging\SkipOnboarding = 0x1 | 0x0
5438 ```
5439 #### Windows (Intune)
5440 OMA-URI:
5441 ```
5442 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_WhatsNew
5443 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_ExtensionRecommendations
5444 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_FeatureRecommendations
5445 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_UrlbarInterventions
5446 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_SkipOnboarding
5447 ```
5448 Value (string):
5449 ```
5450 <enabled/> or <disabled/>
5451 ```
5452 #### macOS
5453 ```
5454 <dict>
5455   <key>UserMessaging</key>
5456   <dict>
5457     <key>WhatsNew</key>
5458     <true/> | <false/>
5459     <key>ExtensionRecommendations</key>
5460     <true/> | <false/>
5461     <key>FeatureRecommendations</key>
5462     <true/> | <false/>
5463     <key>UrlbarInterventions</key>
5464     <true/> | <false/>
5465     <key>SkipOnboarding</key>
5466     <true/> | <false/>
5467   </dict>
5468 </dict>
5469 ```
5470 #### policies.json
5471 ```
5472 {
5473   "policies": {
5474     "UserMessaging": {
5475       "WhatsNew": true | false,
5476       "ExtensionRecommendations": true | false,
5477       "FeatureRecommendations": true | false,
5478       "UrlbarInterventions": true | false
5479       "SkipOnboarding": true | false
5480     }
5481   }
5482 }
5483 ```
5484 ### WebsiteFilter
5485 Block websites from being visited. The parameters take an array of Match Patterns, as documented in https://developer.mozilla.org/en-US/Add-ons/WebExtensions/Match_patterns.
5486 The arrays are limited to 1000 entries each.
5487
5488 If you want to block all URLs, you can use `<all_urls>` or `*://*/*`. You can't have just a `*` on the right side.
5489
5490 For specific protocols, use `https://*/*` or `http://*/*`.
5491
5492 As of Firefox 83 and Firefox ESR 78.5, file URLs are supported.
5493
5494 **Compatibility:** Firefox 60, Firefox ESR 60\
5495 **CCK2 Equivalent:** N/A\
5496 **Preferences Affected:** N/A
5497
5498 #### Windows (GPO)
5499 ```
5500 Software\Policies\Mozilla\Firefox\WebsiteFilter\Block\1 = "<all_urls>"
5501 Software\Policies\Mozilla\Firefox\WebsiteFilter\Exceptions\1 = "http://example.org/*"
5502 ```
5503 #### Windows (Intune)
5504 OMA-URI:
5505 ```
5506 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/B_WebsiteFilter_Block
5507 ```
5508 Value (string):
5509 ```
5510 <enabled/> <data id="WebsiteFilter" value="1&#xF000;&#60;all_urls&#62;"/>
5511 ```
5512 OMA-URI:
5513 ```
5514 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/B_WebsiteFilter_Exceptions
5515 ```
5516 Value (string):
5517 ```
5518 <enabled/>
5519 <data id="WebsiteFilter" value="1&#xF000;http://example.org/*"/>
5520 ```
5521 #### macOS
5522 ```
5523 <dict>
5524   <key>WebsiteFilter</key>
5525   <dict>
5526     <key>Block</key>
5527     <array>
5528       <string><all_urls></string>
5529     </array>
5530     <key>Exceptions</key>
5531     <array>
5532       <string>http://example.org/*</string>
5533     </array>
5534   </dict>
5535
5536 </dict>
5537 ```
5538 #### policies.json
5539 ```
5540 {
5541   "policies": {
5542     "WebsiteFilter": {
5543       "Block": ["<all_urls>"],
5544       "Exceptions": ["http://example.org/*"]
5545     }
5546   }
5547 }
5548 ```
5549 ### WindowsSSO
5550 Allow Windows single sign-on for Microsoft, work, and school accounts.
5551
5552 If this policy is set to true, Firefox will use credentials stored in Windows to sign in to Microsoft, work, and school accounts.
5553
5554 **Compatibility:** Firefox 91\
5555 **CCK2 Equivalent:** N/A\
5556 **Preferences Affected:** `network.http.windows-sso.enabled`
5557
5558 #### Windows (GPO)
5559 ```
5560 Software\Policies\Mozilla\Firefox\WindowsSSO = 0x1 | 0x0
5561 ```
5562 #### Windows (Intune)
5563 OMA-URI:
5564 ```
5565 ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/WindowsSSO
5566 ```
5567 Value (string):
5568 ```
5569 <enabled/> or <disabled/>
5570 ```
5571 #### policies.json
5572 ```
5573 {
5574   "policies": {
5575     "WindowsSSO": true | false
5576   }
5577 }
5578 ```