<dict>
<key>EnterprisePoliciesEnabled</key>
<true/>
+ <key>AppAutoUpdate</key>
+ <true/>
<key>AppUpdateURL</key>
<string>https://www.example.com/update.xml</string>
<key>Authentication</key>
<key>NTLM</key>
<true/>
</dict>
+ <key>AllowProxies</key>
+ <dict>
+ <key>SPNEGO</key>
+ <true/>
+ <key>NTLM</key>
+ <true/>
+ </dict>
+ <key>PrivateBrowsing</key>
+ <true/>
+ <key>Locked</key>
+ <true/>
</dict>
<key>BlockAboutAddons</key>
<true/>
<string>Example2Folder</string>
</dict>
</array>
+ <key>CaptivePortal</key>
+ <false/>
<key>Certificates</key>
<dict>
<key>ImportEnterpriseRoots</key>
<array>
<string>https://www.example.org/</string>
</array>
+ <key>Allowsession</key>
+ <array>
+ <string>https://www.example.edu/</string>
+ </array>
<key>Block</key>
<array>
<string>https://www.example.edu/</string>
<string>never</string>
<key>ExpireAtSessionEnd</key>
<true/>
+ <key>RejectTracker</key>
+ <true/>
<key>Locked</key>
<true/>
</dict>
+ <key>DefaultDownloadDirectory</key>
+ <string>${home}/Downloads</string>
+ <key>DownloadDirectory</key>
+ <string>${home}/Downloads</string>
<key>DNSOverHTTPS</key>
<dict>
<key>Enabled</key>
<string>URL_TO_ALTERNATE_PROVIDER</string>
<key>Locked</key>
<true/>
+ <key>ExcludedDomains</key>
+ <array>
+ <string>example.com</string>
+ </array>
</dict>
<key>DisableAppUpdate</key>
<true/>
<key>DisableBuiltinPDFViewer</key>
<true/>
+ <key>DisabledCiphers</key>
+ <dict>
+ <key>TLS_DHE_RSA_WITH_AES_128_CBC_SHA</key>
+ <true/>
+ <key>TLS_DHE_RSA_WITH_AES_256_CBC_SHA</key>
+ <true/>
+ <key>TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA</key>
+ <true/>
+ <key>TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA</key>
+ <true/>
+ <key>TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256</key>
+ <true/>
+ <key>TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256</key>
+ <true/>
+ <key>TLS_RSA_WITH_AES_128_CBC_SHA</key>
+ <true/>
+ <key>TLS_RSA_WITH_AES_256_CBC_SHA</key>
+ <true/>
+ <key>TLS_RSA_WITH_3DES_EDE_CBC_SHA</key>
+ <true/>
+ <key>TLS_RSA_WITH_AES_128_GCM_SHA256</key>
+ <false/>
+ <key>TLS_RSA_WITH_AES_256_GCM_SHA384</key>
+ <false/>
+ </dict>
<key>DisableDeveloperTools</key>
<true/>
<key>DisableFeedbackCommands</key>
<true/>
<key>DisableMasterPasswordCreation</key>
<true/>
+ <key>DisablePasswordReveal</key>
+ <true/>
<key>DisablePocket</key>
<true/>
<key>DisablePrivateBrowsing</key>
<true/>
<key>Locked</key>
<true/>
+ <key>Cryptomining</key>
+ <true/>
+ <key>Fingerprinting</key>
+ <true/>
+ <key>Exceptions</key>
+ <array>
+ <string>https://example.com</string>
+ </array>
+ </dict>
+ <key>EncryptedMediaExtensions</key>
+ <dict>
+ <key>Enabled</key>
+ <false/>
+ <key>Locked</key>
+ <false/>
</dict>
<key>Extensions</key>
<dict>
<string>firefox@ghostery.com</string>
</array>
</dict>
+ <key>ExtensionSettings</key>
+ <dict>
+ <key>*</key>
+ <dict>
+ <key>blocked_install_message</key>
+ <string>Custom error message.</string>
+ <key>install_sources</key>
+ <array>
+ <string>https://addons.mozilla.org/</string>
+ </array>
+ <key>installation_mode</key>
+ <string>blocked</string>
+ </dict>
+ <key>uBlock0@raymondhill.net</key>
+ <dict>
+ <key>installation_mode</key>
+ <string>force_installed</string>
+ <key>install_url</key>
+ <string>https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi</string>
+ </dict>
+ </dict>
+ <key>ExtensionUpdate</key>
+ <false/>
+ <key>FirefoxHome</key>
+ <dict>
+ <key>Search</key>
+ <true/>
+ <key>TopSites</key>
+ <true/>
+ <key>Highlights</key>
+ <true/>
+ <key>Pocket</key>
+ <false/>
+ <key>Snippets</key>
+ <false/>
+ <key>Locked</key>
+ <true/>
+ </dict>
<key>FlashPlugin</key>
<dict>
<key>Allow</key>
<array>
<string>https://www.example.org</string>
</array>
+ <key>Default</key>
+ <true/>
+ <key>Locked</key>
+ <true/>
+ </dict>
+ <key>Handlers</key>
+ <dict>
+ <key>mimeTypes</key>
+ <dict>
+ <key>application/msword</key>
+ <dict>
+ <key>action</key>
+ <string>useSystemDefault</string>
+ <key>ask</key>
+ <false/>
+ </dict>
+ </dict>
+ <key>schemes</key>
+ <dict>
+ <key>mailto</key>
+ <dict>
+ <key>action</key>
+ <string>useHelperApp</string>
+ <key>ask</key>
+ <false/>
+ <key>handlers</key>
+ <array>
+ <dict>
+ <key>name</key>
+ <string>Gmail</string>
+ <key>uriTemplate</key>
+ <string>https://mail.google.com/mail/?extsrc=mailto&url=%s</string>
+ </dict>
+ </array>
+ </dict>
+ </dict>
+ <key>extensions</key>
+ <dict>
+ <key>pdf</key>
+ <dict>
+ <key>action</key>
+ <string>useHelperApp</string>
+ <key>ask</key>
+ <false/>
+ <key>handlers</key>
+ <array>
+ <dict>
+ <key>name</key>
+ <string>Adobe Acrobat</string>
+ <key>path</key>
+ <string>/System/Applications/Preview.app</string>
+ </dict>
+ </array>
+ </dict>
+ </dict>
</dict>
<key>HardwareAcceleration</key>
<false/>
<key>Homepage</key>
<dict>
<key>URL</key>
- <string>about:policies</string>
+ <string>http://example.com</string>
<key>Locked</key>
<true/>
<key>Additional</key>
<key>Default</key>
<false/>
</dict>
+ <key>LocalFileLinks</key>
+ <array>
+ <string>http://example.org</string>
+ <string>http://example.edu</string>
+ </array>
+ <key>PrimaryPassword</key>
+ <true/>
+ <key>NetworkPrediction</key>
+ <false/>
+ <key>NewTabPage</key>
+ <false/>
<key>NoDefaultBookmarks</key>
<true/>
<key>OfferToSaveLogins</key>
<false/>
+ <key>OfferToSaveLoginsDefault</key>
+ <true/>
<key>OverrideFirstRunPage</key>
<string>https://www.example.com</string>
<key>OverridePostUpdatePage</key>
<string></string>
+ <key>PasswordManagerEnabled</key>
+ <false/>
+ <key>PDFjs</key>
+ <dict>
+ <key>Enabled</key>
+ <false/>
+ <key>EnablePermissions</key>
+ <false/>
+ </dict>
<key>Permissions</key>
<dict>
<key>Camera</key>
<key>Locked</key>
<true/>
</dict>
+ <key>Autoplay</key>
+ <dict>
+ <key>Allow</key>
+ <array>
+ <string>https://example.org</string>
+ </array>
+ <key>Block</key>
+ <array>
+ <string>https://example.edu</string>
+ </array>
+ <key>Default</key>
+ <string>block-audio</string>
+ <key>Locked</key>
+ <true/>
+ </dict>
+ <key>VirtualReality</key>
+ <dict>
+ <key>Allow</key>
+ <array>
+ <string>https://example.org</string>
+ </array>
+ <key>Block</key>
+ <array>
+ <string>https://example.edu</string>
+ </array>
+ <key>BlockNewRequests</key>
+ <true/>
+ <key>Locked</key>
+ <true/>
+ </dict>
+ </dict>
+ <key>PictureInPicture</key>
+ <dict>
+ <key>Enabled</key>
+ <false/>
+ <key>Locked</key>
+ <true/>
</dict>
<key>PopupBlocking</key>
<dict>
<key>Locked</key>
<true/>
</dict>
+ <key>Preferences</key>
+ <dict>
+ <key>accessibility.force_disabled</key>
+ <dict>
+ <key>Value</key>
+ <integer>1</integer>
+ <key>Status</key>
+ <string>default</string>
+ </dict>
+ <key>browser.cache.disk.parent_directory</key>
+ <dict>
+ <key>Value</key>
+ <string>SOME_NATIVE_PATH</string>
+ <key>Status</key>
+ <string>user</string>
+ </dict>
+ <key>browser.tabs.warnOnClose</key>
+ <dict>
+ <key>Value</key>
+ <false/>
+ <key>Status</key>
+ <string>locked</string>
+ </dict>
+ </dict>
<key>Proxy</key>
<dict>
<key>SocksVersion</key>
<true/>
<key>SearchBar</key>
<string>separate</string>
+ <key>UserMessaging</key>
+ <dict>
+ <key>WhatsNew</key>
+ <false/>
+ <key>ExtensionRecommendations</key>
+ <false/>
+ <key>FeatureRecommendations</key>
+ <false/>
+ <key>UrlbarInterventions</key>
+ <false/>
+ <key>SkipOnboarding</key>
+ <true/>
+ </dict>
<key>WebsiteFilter</key>
<dict>
<key>Block</key>
<key>NAME_OF_DEVICE</key>
<string>PATH_TO_LIBRARY_FOR_DEVICE</string>
</dict>
+ <key>SSLVersionMin</key>
+ <string>tls1.2</string>
+ <key>SSLVersionMax</key>
+ <string>tls1.3</string>
+ <key>SupportMenu</key>
+ <dict>
+ <key>Title</key>
+ <string>Click here for help</string>
+ <key>URL</key>
+ <string>http://example.edu/</string>
+ <key>AccessKey</key>
+ <string>C</string>
+ </dict>
</dict>
</plist>