-Policies can either be specified using the GPO templates or by putting a file called policies.json in the distribution directory.
+Policies can either be specified using the Group Policy templates or by creating a file called policies.json. On Windows, create a directory called distribution where the EXE is located and place the file there. On Mac, the file goes into Firefox.app/Content/Resources/distribution.
+
The content of the JSON file should look like this:
```
{
}
}
```
-Policies are documented below.
-
+Policies are documented below. Note that even though comments are used in this file for documentation, comments are not allowed for JSON files.
+### Authentication
+This policy is for configuring sites that support integrated authentication. See https://developer.mozilla.org/en-US/docs/Mozilla/Integrated_authentication for more information.
+```
+{
+ "policies": {
+ "Authentication": {
+ "SPNEGO": ["mydomain.com", "https://myotherdomain.com"],
+ "Delegated": ["mydomain.com", "https://myotherdomain.com"],
+ "NTLM": ["mydomain.com", "https://myotherdomain.com"]
+ }
+ }
+}
+```
### BlockAboutAddons
This policy removes access to about:addons.
```
}
}
```
+### Certificates
+This is a Windows only policy that tells Firefox to read certificates from the Windows certificate store.
+```
+{
+ "policies": {
+ "Certificates": {
+ "ImportEnterpriseRoots": [true|false]
+ }
+ }
+}
+```
+### Cookies
+This policy controls various settings related to cookies.
+```
+{
+ "policies": {
+ "Cookies": {
+ "Allow": ["http://example.org/"], /* Domains where cookies are always allowed */
+ "Block": ["http://example.edu/"], /* Domains where cookies are always blocked */
+ "Default": [true|false], /* This sets the default value for "Accept cookies from websites" */
+ "AcceptThirdParty": ["all", "none", "from-visited"], /* This sets the default value for "Accept third-party cookies" */
+ "ExpireAtSessionEnd": [true|false], /* This determines when cookies expire */
+ "Locked": [true|false] /* If this is true, cookies preferences can't be changed */
+ }
+ }
+}
+```
### CreateMasterPassword
This policy removes the master password functionality.
```
}
}
```
+### DisableForgetButton
+This policy disables the "Forget" button
+```
+{
+ "policies": {
+ "DisableForgetButton": true
+ }
+}
+```
### DisableFormHistory
This policy turns off the browser.formfill.enable preferences
```
}
}
```
+### DisableProfileRefresh
+This policy disables the Refresh Firefox button on about:support and support.mozilla.org.
+```
+{
+ "policies": {
+ "DisableProfileRefresh": true
+ }
+}
+```
### DisableSafeMode
This policy disables safe mode on Windows only
```
}
}
```
+### DisableSecurityBypass
+This policy prevents the user from bypassign security in certain cases.
+```
+{
+ "policies": {
+ "DisableSecurityBypass": {
+ "InvalidCertificate": [true|false], /* Prevents adding an exception when an invalid certificate is shown */
+ "SafeBrowsing": [true|false] /* Prevents selecting "ignore the risk" and visiting a harmful site anyway */
+ }
+ }
+}
+```
### DisableSysAddonUpdate
This policy prevents system add-ons from being updated or installed.
```
}
}
```
+### DisableTelemetry
+This policy prevents the upload of telemetry data. Mozilla strongly recommends that you do NOT disable telemetry if you do not have a business need to do so.
+```
+{
+ "policies": {
+ "DisableTelemetry": true
+ }
+}
+```
### DisplayBookmarksToolbar
This policy turns on the bookmarks toolbar by default. A user can still turn it off and it will stay off.
```
}
}
```
-### Cookies
-This policy sets domains that can set or not set cookies.
-```
-{
- "policies": {
- "Cookies": {
- "Allow": ["http://example.org/"],
- "Block": ["http://example.edu/"]
- }
- }
-}
-```
### FlashPlugin
This policy sets domains that can use or not use Flash
```