Updates for new locked-homepage option on Startpage

[policy-templates.git] / README.md
diff --git a/README.md b/README.md

index efbbd13dd4c6e39984a73b3fe5540c533b92c4d3..90c901f03f948b9291a28837eeae6f66dd6bba7c 100644 (file)
--- a/README.md
+++ b/README.md
@@ -1,13 +1,14 @@
  **These policies are in active development and so might contain changes that do not work with current versions of Firefox.**
  
  **These policies are in active development and so might contain changes that do not work with current versions of Firefox.**
  
-**You should use the officially released versions (https://github.com/mozilla/policy-templates/releases) if you are deploying changes.**
+**You should use the [officially released versions](https://github.com/mozilla/policy-templates/releases) if you are deploying changes.**
  
  
-Policies can be specified using the Group Policy templates on Windows (https://github.com/mozilla/policy-templates/tree/master/windows), configuration profiles on macOS (https://github.com/mozilla/policy-templates/tree/master/mac), or by creating a file called `policies.json`. On Windows, create a directory called `distribution` where the EXE is located and place the file there. On Mac, the file goes into `Firefox.app/Contents/Resources/distribution`.  On Linux, the file goes into `firefox/distribution`, where `firefox` is the installation directory for firefox, which varies by distribution.
+Policies can be specified using the [Group Policy templates on Windows](https://github.com/mozilla/policy-templates/tree/master/windows), [Intune on Windows](https://support.mozilla.org/kb/managing-firefox-intune), [configuration profiles on macOS](https://github.com/mozilla/policy-templates/tree/master/mac), or by creating a file called `policies.json`. On Windows, create a directory called `distribution` where the EXE is located and place the file there. On Mac, the file goes into `Firefox.app/Contents/Resources/distribution`.  On Linux, the file goes into `firefox/distribution`, where `firefox` is the installation directory for firefox, which varies by distribution or you can specify system-wide policy by placing the file in `/etc/firefox/policies`.
  
  | Policy Name | Description
  | --- | --- |
  
  | Policy Name | Description
  | --- | --- |
-| **[`AppUpdateURL`](#AppUpdateURL)** | Change the URL for application update.
-| **[`Authentication`](#Authentication)** | Configure sites that support integrated authentication.
+| **[`AppAutoUpdate`](#appautoupdate)** |  Enable or disable automatic application update.
+| **[`AppUpdateURL`](#appupdateurl)** | Change the URL for application update.
+| **[`Authentication`](#authentication)** | Configure sites that support integrated authentication.
  | **[`BlockAboutAddons`](#blockaboutaddons)** | Block access to the Add-ons Manager (about:addons).
  | **[`BlockAboutConfig`](#blockaboutconfig)** | Block access to about:config.
  | **[`BlockAboutProfiles`](#blockaboutprofiles)** | Block access to About Profiles (about:profiles).
  | **[`BlockAboutAddons`](#blockaboutaddons)** | Block access to the Add-ons Manager (about:addons).
  | **[`BlockAboutConfig`](#blockaboutconfig)** | Block access to about:config.
  | **[`BlockAboutProfiles`](#blockaboutprofiles)** | Block access to About Profiles (about:profiles).
@@ -22,6 +23,8 @@ Policies can be specified using the Group Policy templates on Windows (https://g
  | **[`DisableMasterPasswordCreation`](#disablemasterpasswordcreation)** | Remove the master password functionality.
  | **[`DisableAppUpdate`](#disableappupdate)** | Turn off application updates.
  | **[`DisableBuiltinPDFViewer`](#disablebuiltinpdfviewer)** | Disable the built in PDF viewer.
  | **[`DisableMasterPasswordCreation`](#disablemasterpasswordcreation)** | Remove the master password functionality.
  | **[`DisableAppUpdate`](#disableappupdate)** | Turn off application updates.
  | **[`DisableBuiltinPDFViewer`](#disablebuiltinpdfviewer)** | Disable the built in PDF viewer.
+| **[`DisabledCiphers`](#disabledciphers)** | Disable ciphers.
+| **[`DisableDefaultBrowserAgent`](#disabledefaultbrowseragent)** | Prevent the default browser agent from taking any actions (Windows only).
  | **[`DisableDeveloperTools`](#disabledevelopertools)** | Remove access to all developer tools.
  | **[`DisableFeedbackCommands`](#disablefeedbackcommands)** | Disable the menus for reporting sites.
  | **[`DisableFirefoxScreenshots`](#disablefirefoxscreenshots)** | Remove access to Firefox Screenshots.
  | **[`DisableDeveloperTools`](#disabledevelopertools)** | Remove access to all developer tools.
  | **[`DisableFeedbackCommands`](#disablefeedbackcommands)** | Disable the menus for reporting sites.
  | **[`DisableFirefoxScreenshots`](#disablefirefoxscreenshots)** | Remove access to Firefox Screenshots.
@@ -29,6 +32,7 @@ Policies can be specified using the Group Policy templates on Windows (https://g
  | **[`DisableFirefoxStudies`](#disablefirefoxstudies)** | Disable Firefox studies (Shield).
  | **[`DisableForgetButton`](#disableforgetbutton)** | Disable the "Forget" button.
  | **[`DisableFormHistory`](#disableformhistory)** | Turn off saving information on web forms and the search bar.
  | **[`DisableFirefoxStudies`](#disablefirefoxstudies)** | Disable Firefox studies (Shield).
  | **[`DisableForgetButton`](#disableforgetbutton)** | Disable the "Forget" button.
  | **[`DisableFormHistory`](#disableformhistory)** | Turn off saving information on web forms and the search bar.
+| **[`DisablePasswordReveal`](#disablepasswordreveal)** | Do not allow passwords to be revealed in saved logins.
  | **[`DisablePocket`](#disablepocket)** | Remove Pocket in the Firefox UI.
  | **[`DisablePrivateBrowsing`](#disableprivatebrowsing)** | Remove access to private browsing.
  | **[`DisableProfileImport`](#disableprofileimport)** | Disables the "Import data from another browser" option in the bookmarks window.
  | **[`DisablePocket`](#disablepocket)** | Remove Pocket in the Firefox UI.
  | **[`DisablePrivateBrowsing`](#disableprivatebrowsing)** | Remove access to private browsing.
  | **[`DisableProfileImport`](#disableprofileimport)** | Disables the "Import data from another browser" option in the bookmarks window.
@@ -45,6 +49,7 @@ Policies can be specified using the Group Policy templates on Windows (https://g
  | **[`DefaultDownloadDirectory`](#defaultdownloaddirectory)** | Set the default download directory.
  | **[`DownloadDirectory`](#downloaddirectory)** | Set and lock the download directory.
  | **[`EnableTrackingProtection`](#enabletrackingprotection)** | Configure tracking protection.
  | **[`DefaultDownloadDirectory`](#defaultdownloaddirectory)** | Set the default download directory.
  | **[`DownloadDirectory`](#downloaddirectory)** | Set and lock the download directory.
  | **[`EnableTrackingProtection`](#enabletrackingprotection)** | Configure tracking protection.
+| **[`EncryptedMediaExtensions`](#encryptedmediaextensions)** | Enable or disable Encrypted Media Extensions and optionally lock it.
  | **[`EnterprisePoliciesEnabled`](#enterprisepoliciesenabled)** | Enable policy support on macOS.
  | **[`Extensions`](#extensions)** | Control the installation, uninstallation and locking of extensions.
  | **[`ExtensionSettings`](#extensionsettings)** | Manage all aspects of extensions.
  | **[`EnterprisePoliciesEnabled`](#enterprisepoliciesenabled)** | Enable policy support on macOS.
  | **[`Extensions`](#extensions)** | Control the installation, uninstallation and locking of extensions.
  | **[`ExtensionSettings`](#extensionsettings)** | Manage all aspects of extensions.
@@ -64,6 +69,7 @@ Policies can be specified using the Group Policy templates on Windows (https://g
  | **[`OverrideFirstRunPage`](#overridefirstrunpage)** | Override the first run page.
  | **[`OverridePostUpdatePage`](#overridepostupdatepage)** | Override the upgrade page.
  | **[`PasswordManagerEnabled`](#passwordmanagerenabled)** | Remove (some) access to the password manager.
  | **[`OverrideFirstRunPage`](#overridefirstrunpage)** | Override the first run page.
  | **[`OverridePostUpdatePage`](#overridepostupdatepage)** | Override the upgrade page.
  | **[`PasswordManagerEnabled`](#passwordmanagerenabled)** | Remove (some) access to the password manager.
+| **[`PDFjs`](#pdfjs)** | Disable or configure PDF.js, the built-in PDF viewer.
  | **[`Permissions`](#permissions)** | Set permissions associated with camera, microphone, location, and notifications.
  | **[`PopupBlocking`](#popupblocking)** | Configure the default pop-up window policy as well as origins for which pop-up windows are allowed.
  | **[`Preferences`](#preferences)** | Set and lock some preferences.
  | **[`Permissions`](#permissions)** | Set permissions associated with camera, microphone, location, and notifications.
  | **[`PopupBlocking`](#popupblocking)** | Configure the default pop-up window policy as well as origins for which pop-up windows are allowed.
  | **[`Preferences`](#preferences)** | Set and lock some preferences.
@@ -78,13 +84,56 @@ Policies can be specified using the Group Policy templates on Windows (https://g
  | **[`SearchEngines -> PreventInstalls`](#searchengines--preventinstalls)** | Prevent installing search engines from webpages.
  | **[`SearchEngines -> Remove`](#searchengines--remove)** | Hide built-in search engines.
  | **[`SearchEngines -> Add`](#searchengines--add)** | Add new search engines.
  | **[`SearchEngines -> PreventInstalls`](#searchengines--preventinstalls)** | Prevent installing search engines from webpages.
  | **[`SearchEngines -> Remove`](#searchengines--remove)** | Hide built-in search engines.
  | **[`SearchEngines -> Add`](#searchengines--add)** | Add new search engines.
-| **[`SecurityDevices`](#securitydevices)** | Install PKCS #11 modules.
  | **[`SearchSuggestEnabled`](#searchsuggestenabled)** | Enable search suggestions.
  | **[`SearchSuggestEnabled`](#searchsuggestenabled)** | Enable search suggestions.
+| **[`SecurityDevices`](#securitydevices)** | Install PKCS #11 modules.
  | **[`SSLVersionMax`](#sslversionmax)** | Set and lock the maximum version of TLS.
  | **[`SSLVersionMin`](#sslversionmin)** | Set and lock the minimum version of TLS.
  | **[`SupportMenu`](#supportmenu)** | Add a menuitem to the help menu for specifying support information.
  | **[`SSLVersionMax`](#sslversionmax)** | Set and lock the maximum version of TLS.
  | **[`SSLVersionMin`](#sslversionmin)** | Set and lock the minimum version of TLS.
  | **[`SupportMenu`](#supportmenu)** | Add a menuitem to the help menu for specifying support information.
+| **[`UserMessaging`](#usermessaging)** | Don't show certain messages to the user.
  | **[`WebsiteFilter`](#websitefilter)** | Block websites from being visited.
  
  | **[`WebsiteFilter`](#websitefilter)** | Block websites from being visited.
  
+### AppAutoUpdate
+
+Enable or disable **automatic** application update.
+
+If set to true, application updates are installed without user approval.
+
+If set to false, application updates are downloaded but the user can choose when to install the update.
+
+If you have disabled updates via DisableAppUpdate, this policy has no effect.
+
+**Compatibility:** Firefox 75, Firefox ESR 68.7\
+**CCK2 Equivalent:** N/A\
+**Preferences Affected:** app.update.auto
+
+#### Windows (GPO)
+```
+Software\Policies\Mozilla\Firefox\AppAutoUpdate = 0x1 | 0x0
+```
+#### Windows (Intune)
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AppAutoUpdate
+```
+Value (string):
+```
+<enabled/> or <disabled/>
+```
+#### macOS
+```
+<dict>
+  <key>AppAutoUpdate</key>
+  <true/> | <false/>
+</dict>
+```
+#### policies.json
+```
+{
+  "policies": {
+    "AppAutoUpdate": true | false
+  }
+}
+```
  ### AppUpdateURL
  
  Change the URL for application update.
  ### AppUpdateURL
  
  Change the URL for application update.
@@ -97,6 +146,16 @@ Change the URL for application update.
  ```
  Software\Policies\Mozilla\Firefox\AppUpdateURL = "https://yoursite.com"
  ```
  ```
  Software\Policies\Mozilla\Firefox\AppUpdateURL = "https://yoursite.com"
  ```
+#### Windows (Intune)
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AppUpdateURL
+```
+Value (string):
+```
+<enabled/>
+<data id="AppUpdateURL" value="https://yoursite.com"/>
+```
  #### macOS
  ```
  <dict>
  #### macOS
  ```
  <dict>
@@ -118,9 +177,11 @@ Configure sites that support integrated authentication.
  
  See https://developer.mozilla.org/en-US/docs/Mozilla/Integrated_authentication for more information.
  
  
  See https://developer.mozilla.org/en-US/docs/Mozilla/Integrated_authentication for more information.
  
-**Compatibility:** Firefox 60, Firefox ESR 60 (AllowNonFQDN added in 62/60.2, AllowProxies added in 70/68.2, Locked added in 71/68.3)\
+`PrivateBrowsing` enables integrated authentication in prviate browsing.
+
+**Compatibility:** Firefox 60, Firefox ESR 60 (AllowNonFQDN added in 62/60.2, AllowProxies added in 70/68.2, Locked added in 71/68.3, PrivateBrowsing added in 77/68.9)\
  **CCK2 Equivalent:** N/A\
  **CCK2 Equivalent:** N/A\
-**Preferences Affected:** `network.negotiate-auth.trusted-uris`,`network.negotiate-auth.delegation-uris`,`network.automatic-ntlm-auth.trusted-uris`,`network.automatic-ntlm-auth.allow-non-fqdn`,`network.negotiate-auth.allow-non-fqdn`,`network.automatic-ntlm-auth.allow-proxies`,`network.negotiate-auth.allow-proxies`
+**Preferences Affected:** `network.negotiate-auth.trusted-uris`,`network.negotiate-auth.delegation-uris`,`network.automatic-ntlm-auth.trusted-uris`,`network.automatic-ntlm-auth.allow-non-fqdn`,`network.negotiate-auth.allow-non-fqdn`,`network.automatic-ntlm-auth.allow-proxies`,`network.negotiate-auth.allow-proxies`,`network.auth.private-browsing-sso`
  
  #### Windows (GPO)
  ```
  
  #### Windows (GPO)
  ```
@@ -135,6 +196,61 @@ Software\Policies\Mozilla\Firefox\Authentication\AllowNonFQDN\NTLM = 0x1 | 0x0
  Software\Policies\Mozilla\Firefox\Authentication\AllowProxies\SPNEGO = 0x1 | 0x0
  Software\Policies\Mozilla\Firefox\Authentication\AllowProxies\NTLM = 0x1 | 0x0
  Software\Policies\Mozilla\Firefox\Authentication\Locked = 0x1 | 0x0
  Software\Policies\Mozilla\Firefox\Authentication\AllowProxies\SPNEGO = 0x1 | 0x0
  Software\Policies\Mozilla\Firefox\Authentication\AllowProxies\NTLM = 0x1 | 0x0
  Software\Policies\Mozilla\Firefox\Authentication\Locked = 0x1 | 0x0
+Software\Policies\Mozilla\Firefox\Authentication\PrivateBrowsing = 0x1 | 0x0
+```
+#### Windows (Intune)
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_SPNEGO
+```
+Value (string):
+```
+<enabled/>
+<data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
+```
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_Delegated
+```
+Value (string):
+```
+<enabled/>
+<data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
+```
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_NTLM
+```
+Value (string):
+```
+<enabled/>
+<data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
+```
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_AllowNonFQDN
+```
+Value (string):
+```
+<enabled/>
+<data id="Authentication_AllowNonFQDN_NTLM" value="true | false"/>
+<data id="Authentication_AllowNonFQDN_SPNEGO" value="true | false"/>
+```
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_Locked
+```
+Value (string):
+```
+<enabled/> or <disabled/>
+```
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_PrivateBrowsing
+```
+Value (string):
+```
+<enabled/> or <disabled/>
  ```
  #### macOS
  ```
  ```
  #### macOS
  ```
@@ -172,6 +288,8 @@ Software\Policies\Mozilla\Firefox\Authentication\Locked = 0x1 | 0x0
      </dict>
      <key>Locked</key>
      <true/> | <false/>
      </dict>
      <key>Locked</key>
      <true/> | <false/>
+    <key>PrivateBrowsing</key>
+    <true/> | <false/>
    </dict>
  </dict>
  ```
    </dict>
  </dict>
  ```
@@ -191,7 +309,8 @@ Software\Policies\Mozilla\Firefox\Authentication\Locked = 0x1 | 0x0
          "SPNEGO": true | false,
          "NTLM": true | false
        },
          "SPNEGO": true | false,
          "NTLM": true | false
        },
-      "Locked": true | false
+      "Locked": true | false,
+      "PrivateBrowsing": true | false
      }
    }
  }
      }
    }
  }
@@ -208,6 +327,15 @@ Block access to the Add-ons Manager (about:addons).
  ```
  Software\Policies\Mozilla\Firefox\BlockAboutAddons = 0x1 | 0x0
  ```
  ```
  Software\Policies\Mozilla\Firefox\BlockAboutAddons = 0x1 | 0x0
  ```
+#### Windows (Intune)
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutAddons
+```
+Value (string):
+```
+<enabled/> or <disabled/>
+```
  #### macOS
  ```
  <dict>
  #### macOS
  ```
  <dict>
@@ -235,6 +363,15 @@ Block access to about:config.
  ```
  Software\Policies\Mozilla\Firefox\BlockAboutConfig = 0x1 | 0x0
  ```
  ```
  Software\Policies\Mozilla\Firefox\BlockAboutConfig = 0x1 | 0x0
  ```
+#### Windows (Intune)
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutConfig
+```
+Value (string):
+```
+<enabled/> or <disabled/>
+```
  #### macOS
  ```
  <dict>
  #### macOS
  ```
  <dict>
@@ -262,6 +399,15 @@ Block access to About Profiles (about:profiles).
  ```
  Software\Policies\Mozilla\Firefox\BlockAboutProfiles = 0x1 | 0x0
  ```
  ```
  Software\Policies\Mozilla\Firefox\BlockAboutProfiles = 0x1 | 0x0
  ```
+#### Windows (Intune)
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutProfiles
+```
+Value (string):
+```
+<enabled/> or <disabled/>
+```
  #### macOS
  ```
  <dict>
  #### macOS
  ```
  <dict>
@@ -289,6 +435,15 @@ Block access to Troubleshooting Information (about:support).
  ```
  Software\Policies\Mozilla\Firefox\BlockAboutSupport = 0x1 | 0x0
  ```
  ```
  Software\Policies\Mozilla\Firefox\BlockAboutSupport = 0x1 | 0x0
  ```
+#### Windows (Intune)
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutSupport
+```
+Value (string):
+```
+<enabled/> or <disabled/>
+```
  #### macOS
  ```
  <dict>
  #### macOS
  ```
  <dict>
@@ -320,6 +475,20 @@ Software\Policies\Mozilla\Firefox\Bookmarks\1\Favicon = "https://example.com/fav
  Software\Policies\Mozilla\Firefox\Bookmarks\1\Placement = "toolbar" | "menu"
  Software\Policies\Mozilla\Firefox\Bookmarks\1\Folder = "FolderName"
  ```
  Software\Policies\Mozilla\Firefox\Bookmarks\1\Placement = "toolbar" | "menu"
  Software\Policies\Mozilla\Firefox\Bookmarks\1\Folder = "FolderName"
  ```
+#### Windows (Intune)
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Bookmarks/Bookmark01
+```
+Value (string):
+```
+<enabled/>
+<data id="BookmarkTitle" value="Example"/>
+<data id="BookmarkURL" value="https://example.com"/>
+<data id="BookmarkFavicon" value="https://example.com/favicon.ico"/>
+<data id="BookmarkPlacement" value="toolbar | menu"/>
+<data id="BookmarkFolder" value="FolderName"/>
+```
  #### macOS
  ```
  <dict>
  #### macOS
  ```
  <dict>
@@ -367,6 +536,15 @@ Enable or disable the detection of captive portals.
  ```
  Software\Policies\Mozilla\Firefox\CaptivePortal = 0x1 | 0x0
  ```
  ```
  Software\Policies\Mozilla\Firefox\CaptivePortal = 0x1 | 0x0
  ```
+#### Windows (Intune)
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/CaptivePortal
+```
+Value (string):
+```
+<enabled/> or <disabled/>
+```
  #### macOS
  ```
  <dict>
  #### macOS
  ```
  <dict>
@@ -398,6 +576,15 @@ See https://support.mozilla.org/kb/setting-certificate-authorities-firefox for m
  ```
  Software\Policies\Mozilla\Firefox\Certificates\ImportEnterpriseRoots = 0x1 | 0x0
  ```
  ```
  Software\Policies\Mozilla\Firefox\Certificates\ImportEnterpriseRoots = 0x1 | 0x0
  ```
+#### Windows (Intune)
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Certificates/Certificates_ImportEnterpriseRoots
+```
+Value (string):
+```
+<enabled/> or <disabled/>
+```
  #### macOS
  ```
  <dict>
  #### macOS
  ```
  <dict>
@@ -450,6 +637,16 @@ Binary (DER) and ASCII (PEM) certificates are both supported.
  Software\Policies\Mozilla\Firefox\Certificates\Install\1 = "cert1.der"
  Software\Policies\Mozilla\Firefox\Certificates\Install\2 = "C:\Users\username\cert2.pem"
  ```
  Software\Policies\Mozilla\Firefox\Certificates\Install\1 = "cert1.der"
  Software\Policies\Mozilla\Firefox\Certificates\Install\2 = "C:\Users\username\cert2.pem"
  ```
+#### Windows (Intune)
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Certificates/Certificates_Install
+```
+Value (string):
+```
+<enabled/>
+<data id="Certificates_Install" value="1&#xF000;cert1.der&#xF000;2&#xF000;C:\Users\username\cert2.pem"/>
+```
  #### macOS
  ```
  <dict>
  #### macOS
  ```
  <dict>
@@ -499,11 +696,71 @@ Configure cookie preferences.
  Software\Policies\Mozilla\Firefox\Cookies\Allow\1 = "https://example.com"
  Software\Policies\Mozilla\Firefox\Cookies\Block\1 = "https://example.org"
  Software\Policies\Mozilla\Firefox\Cookies\Default = 0x1 | 0x0
  Software\Policies\Mozilla\Firefox\Cookies\Allow\1 = "https://example.com"
  Software\Policies\Mozilla\Firefox\Cookies\Block\1 = "https://example.org"
  Software\Policies\Mozilla\Firefox\Cookies\Default = 0x1 | 0x0
-Software\Policies\Mozilla\Firefox\Cookies\AcceptThirdParty = "always" | "never" |"from-visited"
+Software\Policies\Mozilla\Firefox\Cookies\AcceptThirdParty = "always" | "never" | "from-visited"
  Software\Policies\Mozilla\Firefox\Cookies\ExpireAtSessionEnd = 0x1 | 0x0
  Software\Policies\Mozilla\Firefox\Cookies\RejectTracker = 0x1 | 0x0
  Software\Policies\Mozilla\Firefox\Cookies\Locked = 0x1 | 0x0
  ```
  Software\Policies\Mozilla\Firefox\Cookies\ExpireAtSessionEnd = 0x1 | 0x0
  Software\Policies\Mozilla\Firefox\Cookies\RejectTracker = 0x1 | 0x0
  Software\Policies\Mozilla\Firefox\Cookies\Locked = 0x1 | 0x0
  ```
+#### Windows (Intune)
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Allow
+```
+Value (string):
+```
+<enabled/>
+<data id="Cookies_Allow" value="1&#xF000;https://example.com"/>
+```
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Block
+```
+Value (string):
+```
+<enabled/>
+<data id="Cookies_Block" value="1&#xF000;https://example.org"/>
+```
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Default
+```
+Value (string):
+```
+<enabled/> or <disabled/>
+```
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_AcceptThirdParty
+```
+Value (string):
+```
+<enabled/>
+<data id="Cookies_AcceptThirdParty" value="always | never | from-visited"/>
+```
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_ExpireAtSessionEnd
+```
+Value (string):
+```
+<enabled/> or <disabled/>
+```
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_RejectTracker
+```
+Value (string):
+```
+<enabled/> or <disabled/>
+```
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Locked
+```
+Value (string):
+```
+<enabled/> or <disabled/>
+```
  #### macOS
  ```
  <dict>
  #### macOS
  ```
  <dict>
@@ -557,7 +814,15 @@ Remove the "Set As Desktop Background..." menuitem when right clicking on an ima
  ```
  Software\Policies\Mozilla\Firefox\DisableSetDesktopBackground = 0x1 | 0x0
  ```
  ```
  Software\Policies\Mozilla\Firefox\DisableSetDesktopBackground = 0x1 | 0x0
  ```
-
+#### Windows (Intune)
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSetDesktopBackground
+```
+Value (string):
+```
+<enabled/> or <disabled/>
+```
  #### macOS
  ```
  <dict>
  #### macOS
  ```
  <dict>
@@ -584,7 +849,15 @@ Remove the master password functionality.
  ```
  Software\Policies\Mozilla\Firefox\DisableMasterPasswordCreation = 0x1 | 0x0
  ```
  ```
  Software\Policies\Mozilla\Firefox\DisableMasterPasswordCreation = 0x1 | 0x0
  ```
-
+#### Windows (Intune)
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableMasterPasswordCreation
+```
+Value (string):
+```
+<enabled/> or <disabled/>
+```
  #### macOS
  ```
  <dict>
  #### macOS
  ```
  <dict>
@@ -611,6 +884,15 @@ Turn off application updates.
  ```
  Software\Policies\Mozilla\Firefox\DisableAppUpdate = 0x1 | 0x0
  ```
  ```
  Software\Policies\Mozilla\Firefox\DisableAppUpdate = 0x1 | 0x0
  ```
+#### Windows (Intune)
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableAppUpdate
+```
+Value (string):
+```
+<enabled/> or <disabled/>
+```
  #### macOS
  ```
  <dict>
  #### macOS
  ```
  <dict>
@@ -637,7 +919,15 @@ Disable the built in PDF viewer. PDF files are downloaded and sent externally.
  ```
  Software\Policies\Mozilla\Firefox\DisableBuiltinPDFViewer = 0x1 | 0x0
  ```
  ```
  Software\Policies\Mozilla\Firefox\DisableBuiltinPDFViewer = 0x1 | 0x0
  ```
-
+#### Windows (Intune)
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableBuiltinPDFViewer
+```
+Value (string):
+```
+<enabled/> or <disabled/>
+```
  #### macOS
  ```
  <dict>
  #### macOS
  ```
  <dict>
@@ -653,6 +943,114 @@ Software\Policies\Mozilla\Firefox\DisableBuiltinPDFViewer = 0x1 | 0x0
    }
  }
  ```
    }
  }
  ```
+### DisabledCiphers
+Disable specific cryptographic ciphers.
+
+**Compatibility:** Firefox 76, Firefox ESR 68.8\
+**CCK2 Equivalent:** N/A\
+**Preferences Affected:** N/A
+
+#### Windows (GPO)
+```
+Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_DHE_RSA_WITH_AES_128_CBC_SHA = 0x1 | 0x0
+Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_DHE_RSA_WITH_AES_256_CBC_SHA = 0x1 | 0x0
+Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA = 0x1 | 0x0
+Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA = 0x1 | 0x0
+Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 = 0x1 | 0x0
+Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 = 0x1 | 0x0
+Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_RSA_WITH_AES_128_CBC_SHA = 0x1 | 0x0
+Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_RSA_WITH_AES_256_CBC_SHA = 0x1 | 0x0
+Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_RSA_WITH_3DES_EDE_CBC_SHA = 0x1 | 0x0
+```
+#### Windows (Intune)
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_DHE_RSA_WITH_AES_128_CBC_SHA
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_DHE_RSA_WITH_AES_256_CBC_SHA
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_RSA_WITH_AES_128_CBC_SHA
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_RSA_WITH_AES_256_CBC_SHA
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DisabledCiphers/DisabledCiphers_TLS_RSA_WITH_3DES_EDE_CBC_SHA
+```
+Value (string):
+```
+<enabled/> or <disabled/>
+```
+#### macOS
+```
+<dict>
+  <key>DisabledCiphers</key>
+    <dict>
+      <key>TLS_DHE_RSA_WITH_AES_128_CBC_SHA</key>
+      <true/> | <false/>
+      <key>TLS_DHE_RSA_WITH_AES_256_CBC_SHA</key>
+      <true/> | <false/>
+      <key>TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA</key>
+      <true/> | <false/>
+      <key>TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA</key>
+      <true/> | <false/>
+      <key>TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256</key>
+      <true/> | <false/>
+      <key>TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256</key>
+      <true/> | <false/>
+      <key>TLS_RSA_WITH_AES_128_CBC_SHA</key>
+      <true/> | <false/>
+      <key>TLS_RSA_WITH_AES_256_CBC_SHA</key>
+      <true/> | <false/>
+      <key>TLS_RSA_WITH_3DES_EDE_CBC_SHA</key>
+      <true/> | <false/>
+    </dict>
+</dict>
+```
+#### policies.json
+```
+{
+  "policies": {
+    "DisabledCiphers" {
+      "TLS_DHE_RSA_WITH_AES_128_CBC_SHA": true | false,
+      "TLS_DHE_RSA_WITH_AES_256_CBC_SHA": true | false,
+      "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA": true | false,
+      "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA": true | false,
+      "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256": true | false,
+      "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256": true | false,
+      "TLS_RSA_WITH_AES_128_CBC_SHA": true | false,
+      "TLS_RSA_WITH_AES_256_CBC_SHA": true | false,
+      "TLS_RSA_WITH_3DES_EDE_CBC_SHA": true | false
+    }
+  }
+}
+```
+### DisableDefaultBrowserAgent
+Prevent the default browser agent from taking any actions. Only applicable to Windows; other platforms don’t have the agent.
+
+**Compatibility:** Firefox 75, Firefox ESR 68.7 (Windows only)\
+**CCK2 Equivalent:** N/A\
+**Preferences Affected:** N/A
+
+#### Windows (GPO)
+```
+Software\Policies\Mozilla\Firefox\DisableDefaultBrowserAgent = 0x1 | 0x0
+```
+#### Windows (Intune)
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableDefaultBrowserAgent
+```
+Value (string):
+```
+<enabled/> or <disabled/>
+```
+#### policies.json
+```
+{
+  "policies": {
+    "DisableDefaultBrowserAgent": true | false
+  }
+}
+```
  ### DisableDeveloperTools
  Remove access to all developer tools.
  
  ### DisableDeveloperTools
  Remove access to all developer tools.
  
@@ -664,7 +1062,15 @@ Remove access to all developer tools.
  ```
  Software\Policies\Mozilla\Firefox\DisableDeveloperTools = 0x1 | 0x0`
  ```
  ```
  Software\Policies\Mozilla\Firefox\DisableDeveloperTools = 0x1 | 0x0`
  ```
-
+#### Windows (Intune)
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableDeveloperTools
+```
+Value (string):
+```
+<enabled/> or <disabled/>
+```
  #### macOS
  ```
  <dict>
  #### macOS
  ```
  <dict>
@@ -691,6 +1097,15 @@ Disable the menus for reporting sites (Submit Feedback, Report Deceptive Site).
  ```
  Software\Policies\Mozilla\Firefox\DisableFeedbackCommands = 0x1 | 0x0
  ```
  ```
  Software\Policies\Mozilla\Firefox\DisableFeedbackCommands = 0x1 | 0x0
  ```
+#### Windows (Intune)
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFeedbackCommands
+```
+Value (string):
+```
+<enabled/> or <disabled/>
+```
  #### macOS
  ```
  <dict>
  #### macOS
  ```
  <dict>
@@ -717,6 +1132,15 @@ Remove access to Firefox Screenshots.
  ```
  Software\Policies\Mozilla\Firefox\DisableFirefoxScreenshots = 0x1 | 0x0
  ```
  ```
  Software\Policies\Mozilla\Firefox\DisableFirefoxScreenshots = 0x1 | 0x0
  ```
+#### Windows (Intune)
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxScreenshots
+```
+Value (string):
+```
+<enabled/> or <disabled/>
+```
  #### macOS
  ```
  <dict>
  #### macOS
  ```
  <dict>
@@ -743,6 +1167,15 @@ Disable Firefox Accounts integration (Sync).
  ```
  Software\Policies\Mozilla\Firefox\DisableFirefoxAccounts = 0x1 | 0x0
  ```
  ```
  Software\Policies\Mozilla\Firefox\DisableFirefoxAccounts = 0x1 | 0x0
  ```
+#### Windows (Intune)
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxAccounts
+```
+Value (string):
+```
+<enabled/> or <disabled/>
+```
  #### macOS
  ```
  <dict>
  #### macOS
  ```
  <dict>
@@ -762,13 +1195,22 @@ Software\Policies\Mozilla\Firefox\DisableFirefoxAccounts = 0x1 | 0x0
  Disable Firefox studies (Shield).
  
  **Compatibility:** Firefox 60, Firefox ESR 60\
  Disable Firefox studies (Shield).
  
  **Compatibility:** Firefox 60, Firefox ESR 60\
-**CCK2 Equivalent:** `disableForget`\
+**CCK2 Equivalent:** N/A\
  **Preferences Affected:** N/A
  
  #### Windows (GPO)
  ```
  Software\Policies\Mozilla\Firefox\DisableFirefoxStudies = 0x1 | 0x0
  ```
  **Preferences Affected:** N/A
  
  #### Windows (GPO)
  ```
  Software\Policies\Mozilla\Firefox\DisableFirefoxStudies = 0x1 | 0x0
  ```
+#### Windows (Intune)
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFirefoxStudies
+```
+Value (string):
+```
+<enabled/> or <disabled/>
+```
  #### macOS
  ```
  <dict>
  #### macOS
  ```
  <dict>
@@ -795,6 +1237,15 @@ Disable the "Forget" button.
  ```
  Software\Policies\Mozilla\Firefox\DisableForgetButton = 0x1 | 0x0
  ```
  ```
  Software\Policies\Mozilla\Firefox\DisableForgetButton = 0x1 | 0x0
  ```
+#### Windows (Intune)
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableForgetButton
+```
+Value (string):
+```
+<enabled/> or <disabled/>
+```
  #### macOS
  ```
  <dict>
  #### macOS
  ```
  <dict>
@@ -821,6 +1272,15 @@ Turn off saving information on web forms and the search bar.
  ```
  Software\Policies\Mozilla\Firefox\DisableFormHistory = 0x1 | 0x0
  ```
  ```
  Software\Policies\Mozilla\Firefox\DisableFormHistory = 0x1 | 0x0
  ```
+#### Windows (Intune)
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableFormHistory
+```
+Value (string):
+```
+<enabled/> or <disabled/>
+```
  #### macOS
  ```
  <dict>
  #### macOS
  ```
  <dict>
@@ -847,7 +1307,15 @@ Do not allow passwords to be shown in saved logins
  ```
  Software\Policies\Mozilla\Firefox\DisablePasswordReveal = 0x1 | 0x0
  ```
  ```
  Software\Policies\Mozilla\Firefox\DisablePasswordReveal = 0x1 | 0x0
  ```
-
+#### Windows (Intune)
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePasswordReveal
+```
+Value (string):
+```
+<enabled/> or <disabled/>
+```
  #### macOS
  ```
  <dict>
  #### macOS
  ```
  <dict>
@@ -874,6 +1342,15 @@ Remove Pocket in the Firefox UI. It does not remove it from the new tab page.
  ```
  Software\Policies\Mozilla\Firefox\DisablePocket = 0x1 | 0x0
  ```
  ```
  Software\Policies\Mozilla\Firefox\DisablePocket = 0x1 | 0x0
  ```
+#### Windows (Intune)
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePocket
+```
+Value (string):
+```
+<enabled/> or <disabled/>
+```
  #### macOS
  ```
  <dict>
  #### macOS
  ```
  <dict>
@@ -900,6 +1377,15 @@ Remove access to private browsing.
  ```
  Software\Policies\Mozilla\Firefox\DisablePrivateBrowsing = 0x1 | 0x0
  ```
  ```
  Software\Policies\Mozilla\Firefox\DisablePrivateBrowsing = 0x1 | 0x0
  ```
+#### Windows (Intune)
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisablePrivateBrowsing
+```
+Value (string):
+```
+<enabled/> or <disabled/>
+```
  #### macOS
  ```
  <dict>
  #### macOS
  ```
  <dict>
@@ -926,6 +1412,15 @@ Disables the "Import data from another browser" option in the bookmarks window.
  ```
  Software\Policies\Mozilla\Firefox\DisableProfileImport = 0x1 | 0x0
  ```
  ```
  Software\Policies\Mozilla\Firefox\DisableProfileImport = 0x1 | 0x0
  ```
+#### Windows (Intune)
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableProfileImport
+```
+Value (string):
+```
+<enabled/> or <disabled/>
+```
  #### macOS
  ```
  <dict>
  #### macOS
  ```
  <dict>
@@ -952,6 +1447,15 @@ Disable the Refresh Firefox button on about:support and support.mozilla.org, as
  ```
  Software\Policies\Mozilla\Firefox\DisableProfileRefresh = 0x1 | 0x0
  ```
  ```
  Software\Policies\Mozilla\Firefox\DisableProfileRefresh = 0x1 | 0x0
  ```
+#### Windows (Intune)
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableProfileRefresh
+```
+Value (string):
+```
+<enabled/> or <disabled/>
+```
  #### macOS
  ```
  <dict>
  #### macOS
  ```
  <dict>
@@ -980,6 +1484,15 @@ On Windows, this disables safe mode via the command line as well.
  ```
  Software\Policies\Mozilla\Firefox\DisableSafeMode = 0x1 | 0x0
  ```
  ```
  Software\Policies\Mozilla\Firefox\DisableSafeMode = 0x1 | 0x0
  ```
+#### Windows (Intune)
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSafeMode
+```
+Value (string):
+```
+<enabled/> or <disabled/>
+```
  #### macOS
  ```
  <dict>
  #### macOS
  ```
  <dict>
@@ -1011,6 +1524,24 @@ Prevent the user from bypassing security in certain cases.
  Software\Policies\Mozilla\Firefox\DisableSecurityBypass\InvalidCertificate = 0x1 | 0x0
  Software\Policies\Mozilla\Firefox\DisableSecurityBypass\SafeBrowsing = 0x1 | 0x0
  ```
  Software\Policies\Mozilla\Firefox\DisableSecurityBypass\InvalidCertificate = 0x1 | 0x0
  Software\Policies\Mozilla\Firefox\DisableSecurityBypass\SafeBrowsing = 0x1 | 0x0
  ```
+#### Windows (Intune)
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/P_DisableSecurityBypass_InvalidCertificate
+```
+Value (string):
+```
+<enabled/> or <disabled/>
+```
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/P_DisableSecurityBypass_SafeBrowsing
+```
+Value (string):
+```
+<enabled/> or <disabled/>
+```
+
  #### macOS
  ```
  <dict>
  #### macOS
  ```
  <dict>
@@ -1028,8 +1559,8 @@ Software\Policies\Mozilla\Firefox\DisableSecurityBypass\SafeBrowsing = 0x1 | 0x0
  {
    "policies": {
      "DisableSecurityBypass": {
  {
    "policies": {
      "DisableSecurityBypass": {
-      "InvalidCertificate": true false,
-      "SafeBrowsing": true false
+      "InvalidCertificate": true | false,
+      "SafeBrowsing": true | false
      }
    }
  }
      }
    }
  }
@@ -1042,7 +1573,17 @@ Prevent system add-ons from being installed or update.
  **Preferences Affected:** N/A
  
  #### Windows (GPO)
  **Preferences Affected:** N/A
  
  #### Windows (GPO)
-```Software\Policies\Mozilla\Firefox\DisableSystemAddonUpdate = 0x1 | 0x0
+```
+Software\Policies\Mozilla\Firefox\DisableSystemAddonUpdate = 0x1 | 0x0
+```
+#### Windows (Intune)
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableSystemAddonUpdate
+```
+Value (string):
+```
+<enabled/> or <disabled/>
  ```
  #### macOS
  ```
  ```
  #### macOS
  ```
@@ -1072,6 +1613,15 @@ Mozilla recommends that you do not disable telemetry. Information collected thro
  ```
  Software\Policies\Mozilla\Firefox\DisableTelemetry = 0x1 | 0x0
  ```
  ```
  Software\Policies\Mozilla\Firefox\DisableTelemetry = 0x1 | 0x0
  ```
+#### Windows (Intune)
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisableTelemetry
+```
+Value (string):
+```
+<enabled/> or <disabled/>
+```
  #### macOS
  ```
  <dict>
  #### macOS
  ```
  <dict>
@@ -1098,6 +1648,15 @@ Set the initial state of the bookmarks toolbar. A user can still hide it and it
  ```
  Software\Policies\Mozilla\Firefox\DisplayBookmarksToolbar = 0x1 | 0x0
  ```
  ```
  Software\Policies\Mozilla\Firefox\DisplayBookmarksToolbar = 0x1 | 0x0
  ```
+#### Windows (Intune)
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisplayBookmarksToolbar
+```
+Value (string):
+```
+<enabled/> or <disabled/>
+```
  #### macOS
  ```
  <dict>
  #### macOS
  ```
  <dict>
@@ -1158,6 +1717,16 @@ Set the state of the menubar.
  ```
  Software\Policies\Mozilla\Firefox\DisplayMenuBar = "always", "never", "default-on", "default-off"
  ```
  ```
  Software\Policies\Mozilla\Firefox\DisplayMenuBar = "always", "never", "default-on", "default-off"
  ```
+#### Windows (Intune)
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DisplayMenuBar_Enum
+```
+Value (string):
+```
+<enabled/>
+<data id="DisplayMenuBar" value="always | never | default-on | default-off"/>
+```
  #### macOS
  ```
  <dict>
  #### macOS
  ```
  <dict>
@@ -1182,7 +1751,9 @@ Configure DNS over HTTPS.
  
  `Locked` prevents the user from changing DNS over HTTPS preferences.
  
  
  `Locked` prevents the user from changing DNS over HTTPS preferences.
  
-**Compatibility:** Firefox 63, Firefox ESR 68\
+`ExcludedDomains` excludes domains from DNS over HTTPS.
+
+**Compatibility:** Firefox 63, Firefox ESR 68 (ExcludedDomains added in 75/68.7)\
  **CCK2 Equivalent:** N/A\
  **Preferences Affected:** `network.trr.mode`,`network.trr.uri`
  
  **CCK2 Equivalent:** N/A\
  **Preferences Affected:** `network.trr.mode`,`network.trr.uri`
  
@@ -1191,6 +1762,42 @@ Configure DNS over HTTPS.
  Software\Policies\Mozilla\Firefox\DNSOverHTTPS\Enabled = 0x1 | 0x0
  Software\Policies\Mozilla\Firefox\DNSOverHTTPS\ProviderURL = "URL_TO_ALTERNATE_PROVIDER"
  Software\Policies\Mozilla\Firefox\DNSOverHTTPS\Locked = 0x1 | 0x0
  Software\Policies\Mozilla\Firefox\DNSOverHTTPS\Enabled = 0x1 | 0x0
  Software\Policies\Mozilla\Firefox\DNSOverHTTPS\ProviderURL = "URL_TO_ALTERNATE_PROVIDER"
  Software\Policies\Mozilla\Firefox\DNSOverHTTPS\Locked = 0x1 | 0x0
+Software\Policies\Mozilla\Firefox\DNSOverHTTPS\ExcludedDomains\1 = "example.com"
+```
+#### Windows (Intune)
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_Enabled
+```
+Value (string):
+```
+<enabled/> or <disabled/>
+```
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_ProviderURL
+```
+Value (string):
+```
+<enabled/>
+<data id="String" value="URL_TO_ALTERNATE_PROVIDER"/>
+```
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_Locked
+```
+Value (string):
+```
+<enabled/> or <disabled/>
+```
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~DNSOverHTTPS/DNSOverHTTPS_ExcludedDomains
+```
+Value (string):
+```
+<enabled/>
+<data id="List" value="1&#xF000;example.com"/>
  ```
  #### macOS
  ```
  ```
  #### macOS
  ```
@@ -1203,6 +1810,10 @@ Software\Policies\Mozilla\Firefox\DNSOverHTTPS\Locked = 0x1 | 0x0
      <string>URL_TO_ALTERNATE_PROVIDER</string>
      <key>Locked</key>
      <true/> | <false/>
      <string>URL_TO_ALTERNATE_PROVIDER</string>
      <key>Locked</key>
      <true/> | <false/>
+    <key>ExcludedDomains</key>
+    <array>
+      <string>example.com</string>
+    </array>
    </dict>
  </dict>
  ```
    </dict>
  </dict>
  ```
@@ -1213,7 +1824,8 @@ Software\Policies\Mozilla\Firefox\DNSOverHTTPS\Locked = 0x1 | 0x0
      "DNSOverHTTPS": {
        "Enabled":  true | false,
        "ProviderURL": "URL_TO_ALTERNATE_PROVIDER",
      "DNSOverHTTPS": {
        "Enabled":  true | false,
        "ProviderURL": "URL_TO_ALTERNATE_PROVIDER",
-      "Locked": true | false
+      "Locked": true | false,
+      "ExcludedDomains": ["example.com"]
      }
    }
  }
      }
    }
  }
@@ -1229,6 +1841,15 @@ Don't check if Firefox is the default browser at startup.
  ```
  Software\Policies\Mozilla\Firefox\DontCheckDefaultBrowser = 0x1 | 0x0
  ```
  ```
  Software\Policies\Mozilla\Firefox\DontCheckDefaultBrowser = 0x1 | 0x0
  ```
+#### Windows (Intune)
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DontCheckDefaultBrowser
+```
+Value (string):
+```
+<enabled/> or <disabled/>
+```
  #### macOS
  ```
  <dict>
  #### macOS
  ```
  <dict>
@@ -1257,6 +1878,16 @@ You can use ${home} for the native home directory.
  ```
  Software\Policies\Mozilla\Firefox\DefaultDownloadDirectory = "${home}\Downloads"
  ```
  ```
  Software\Policies\Mozilla\Firefox\DefaultDownloadDirectory = "${home}\Downloads"
  ```
+#### Windows (Intune)
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DefaultDownloadDirectory
+```
+Value (string):
+```
+<enabled/>
+<data id="Preferences_String" value="${home}\Downloads"/>
+```
  #### macOS
  ```
  <dict>
  #### macOS
  ```
  <dict>
@@ -1291,6 +1922,16 @@ You can use ${home} for the native home directory.
  ```
  Software\Policies\Mozilla\Firefox\DownloadDirectory = "${home}\Downloads"
  ```
  ```
  Software\Policies\Mozilla\Firefox\DownloadDirectory = "${home}\Downloads"
  ```
+#### Windows (Intune)
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/DownloadDirectory
+```
+Value (string):
+```
+<enabled/>
+<data id="Preferences_String" value="${home}\Downloads"/>
+```
  #### macOS
  ```
  <dict>
  #### macOS
  ```
  <dict>
@@ -1339,6 +1980,19 @@ Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Cryptomining = 0x1 |
  Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Fingerprinting = 0x1 | 0x0
  Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Exceptions\1 = "https://example.com"
  ```
  Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Fingerprinting = 0x1 | 0x0
  Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Exceptions\1 = "https://example.com"
  ```
+#### Windows (Intune)
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/TrackingProtection
+```
+Value (string):
+```
+<enabled/>
+<data id="TrackingProtectionLocked" value="true | false"/>
+<data id="Cryptomining" value="true | false"/>
+<data id="Fingerprinting" value="true | false"/>
+<data id=TrackingProtection_Exceptions" value="1&#xF000;https://example.com"/>
+```
  #### macOS
  ```
  <dict>
  #### macOS
  ```
  <dict>
@@ -1364,14 +2018,62 @@ Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Exceptions\1 = "https
  {
    "policies": {
      "EnableTrackingProtection": {
  {
    "policies": {
      "EnableTrackingProtection": {
-      "Value": [true, false],
-      "Locked": [true, false],
-      "Cryptomining": [true, false],
-      "Fingerprinting": [true, false],
+      "Value": true | false,
+      "Locked": true | false,
+      "Cryptomining": true | false,
+      "Fingerprinting": true | false,
        "Exceptions": ["https://example.com"]
      }
  }
  ```
        "Exceptions": ["https://example.com"]
      }
  }
  ```
+### EncryptedMediaExtensions
+Enable or disable Encrypted Media Extensions and optionally lock it.
+
+If `Enabled` is set to false, encrypted media extensions (like Widevine) are not downloaded by Firefox unless the user consents to installing them.
+
+If `Locked` is set to true and `Enabled` is set to false, Firefox will not download encrypted media extensions (like Widevine) or ask the user to install them.
+
+**Compatibility:** Firefox 77, Firefox ESR 68.9\
+**CCK2 Equivalent:** N/A\
+**Preferences Affected:** `media.eme.enabled`
+
+#### Windows (GPO)
+```
+Software\Policies\Mozilla\Firefox\EncryptedMediaExtensions\Enabled = 0x1 | 0x0
+Software\Policies\Mozilla\Firefox\EncryptedMediaExtensions\Locked = 0x1 | 0x0
+```
+#### Windows (Intune)
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~EncryptedMediaExtensions/EncryptedMediaExtensions_Enabled
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~EncryptedMediaExtensions/EncryptedMediaExtensions_Locked
+```
+Value (string):
+```
+<enabled/>or <disabled/>
+```
+#### macOS
+```
+<dict>
+  <key>EncryptedMediaExtensions</key>
+  <dict>
+    <key>Enabled</key>
+    <true/> | <false/>
+    <key><Locked</key>
+    <true/> | <false/>
+  </dict>
+</dict>
+```
+#### policies.json
+```
+{
+  "policies": {
+    "EncryptedMediaExtensions": {
+      "Enabled": true | false,
+      "Locked": true | false
+    }
+}
+```
  ### EnterprisePoliciesEnabled
  Enable policy support on macOS.
  
  ### EnterprisePoliciesEnabled
  Enable policy support on macOS.
  
@@ -1480,6 +2182,26 @@ Software\Policies\Mozilla\Firefox\ExtensionSettings (REG_MULTI_SZ) =
    }
  }
  ```
    }
  }
  ```
+#### Windows (Intune)
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/ExtensionSettings
+```
+Value (string):
+```
+<enabled/>
+<data id="ExtensionSettings" value='
+  "*": {
+      "blocked_install_message": "Custom error message.",
+      "install_sources": ["https://addons.mozilla.org/"],
+      "installation_mode": "blocked",
+      "allowed_types": ["extension"]
+    },
+    "uBlock0@raymondhill.net": {
+      "installation_mode": "force_installed",
+      "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
+    }'/>
+```
  #### macOS
  ```
  <dict>
  #### macOS
  ```
  <dict>
@@ -1540,6 +2262,15 @@ Control extension updates.
  ```
  Software\Policies\Mozilla\Firefox\ExtensionUpdate = 0x1 | 0x0
  ```
  ```
  Software\Policies\Mozilla\Firefox\ExtensionUpdate = 0x1 | 0x0
  ```
+#### Windows (Intune)
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/ExtensionUpdate
+```
+Value (string):
+```
+<enabled/> or <disabled/>
+```
  #### macOS
  ```
  <dict>
  #### macOS
  ```
  <dict>
@@ -1577,6 +2308,32 @@ Software\Policies\Mozilla\Firefox\FlashPlugin\Block\1 = "https://example.edu"
  Software\Policies\Mozilla\Firefox\FlashPlugin\Default = 0x1 | 0x0
  Software\Policies\Mozilla\Firefox\FlashPlugin\Locked = 0x1 | 0x0
  ```
  Software\Policies\Mozilla\Firefox\FlashPlugin\Default = 0x1 | 0x0
  Software\Policies\Mozilla\Firefox\FlashPlugin\Locked = 0x1 | 0x0
  ```
+#### Windows (Intune)
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Flash/FlashPlugin_Allow
+```
+Value (string):
+```
+<enabled/>
+<data id="Permissions" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
+```
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Flash/FlashPlugin_Locked
+```
+Value (string):
+```
+<enabled/> or <disabled/>
+```
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Flash/FlashPlugin_Default
+```
+Value (string):
+```
+<enabled/> or <disabled/>
+```
  #### macOS
  ```
  <dict>
  #### macOS
  ```
  <dict>
@@ -1626,6 +2383,21 @@ Software\Policies\Mozilla\Firefox\FirefoxHome\Pocket = 0x1 | 0x0
  Software\Policies\Mozilla\Firefox\FirefoxHome\Snippets = 0x1 | 0x0
  Software\Policies\Mozilla\Firefox\FirefoxHome\Locked = 0x1 | 0x0
  ```
  Software\Policies\Mozilla\Firefox\FirefoxHome\Snippets = 0x1 | 0x0
  Software\Policies\Mozilla\Firefox\FirefoxHome\Locked = 0x1 | 0x0
  ```
+#### Windows (Intune)
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/CustomizeFirefoxHome
+```
+Value (string):
+```
+<enabled/>
+<data id="FirefoxHome_Search"  value="true | false"/>
+<data id="FirefoxHome_TopSites"  value="true | false"/>
+<data id="FirefoxHome_Highlights"  value="true | false"/>
+<data id="FirefoxHome_Pocket"  value="true | false"/>
+<data id="FirefoxHome_Snippets"  value="true | false"/>
+<data id="FirefoxHome_Locked"  value="true | false"/>
+```
  #### macOS
  ```
  <dict>
  #### macOS
  ```
  <dict>
@@ -1672,6 +2444,15 @@ Control hardware acceleration.
  ```
  Software\Policies\Mozilla\Firefox\HardwareAcceleration = 0x1 | 0x0
  ```
  ```
  Software\Policies\Mozilla\Firefox\HardwareAcceleration = 0x1 | 0x0
  ```
+#### Windows (Intune)
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/HardwareAcceleration
+```
+Value (string):
+```
+<enabled/> or <disabled/>
+```
  #### macOS
  ```
  <dict>
  #### macOS
  ```
  <dict>
@@ -1698,7 +2479,9 @@ Configure the default homepage and how Firefox starts.
  
  `StartPage` is how Firefox starts. The choices are no homepage, the default homepage or the previous session.
  
  
  `StartPage` is how Firefox starts. The choices are no homepage, the default homepage or the previous session.
  
-**Compatibility:** Firefox 60, Firefox ESR 60 (StartPage was added in Firefox 60, Firefox ESR 60.4)\
+With Firefox 78, an additional option as added for `Startpage`, `homepage-locked`. This allows for locking the homepage, but still allowing the user to choose whether or not they want to restore their session.
+
+**Compatibility:** Firefox 60, Firefox ESR 60 (StartPage was added in Firefox 60, Firefox ESR 60.4, homepage-locked added in Firefox 78)\
  **CCK2 Equivalent:** `homePage`,`lockHomePage`\
  **Preferences Affected:** `browser.startup.homepage`,`browser.startup.page`
  
  **CCK2 Equivalent:** `homePage`,`lockHomePage`\
  **Preferences Affected:** `browser.startup.homepage`,`browser.startup.page`
  
@@ -1708,7 +2491,39 @@ Software\Policies\Mozilla\Firefox\Homepage\URL = "https://example.com"
  Software\Policies\Mozilla\Firefox\Homepage\Locked = 0x1 | 0x0
  Software\Policies\Mozilla\Firefox\Homepage\Additional\1 = "https://example.org"
  Software\Policies\Mozilla\Firefox\Homepage\Additional\2 = "https://example.edu"
  Software\Policies\Mozilla\Firefox\Homepage\Locked = 0x1 | 0x0
  Software\Policies\Mozilla\Firefox\Homepage\Additional\1 = "https://example.org"
  Software\Policies\Mozilla\Firefox\Homepage\Additional\2 = "https://example.edu"
-Software\Policies\Mozilla\Firefox\Homepage\StartPage = "none" | "homepage" |  "previous-session"
+Software\Policies\Mozilla\Firefox\Homepage\StartPage = "none" | "homepage" | "previous-session" | "homepage-locked"
+```
+#### Windows (Intune)
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageURL
+```
+Value (string):
+```
+<enabled/>
+
+<data id="HomepageURL" value="https://example.com"/>
+<data id="HomepageLocked" value="true | false"/>
+```
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageAdditional
+```
+Value (string):
+```
+<enabled/>
+
+<data id="HomepageAdditional" value="1&#xF000;http://example.org&#xF000;2&#xF000;http://example.edu"/>
+```
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Homepage/HomepageStartPage
+```
+Value (string):
+```
+<enabled/>
+
+<data id="StartPage" value="none | homepage | previous-session"/>
  ```
  #### macOS
  ```
  ```
  #### macOS
  ```
@@ -1725,7 +2540,7 @@ Software\Policies\Mozilla\Firefox\Homepage\StartPage = "none" | "homepage" |  "p
        <string>http://example.edu</string>
      </array>
      <key>StartPage</key>
        <string>http://example.edu</string>
      </array>
      <key>StartPage</key>
-    <string>none | homepage | previous-session</string>
+    <string>none | homepage | previous-session | homepage-locked</string>
    </dict>
  </dict>
  ```
    </dict>
  </dict>
  ```
@@ -1738,7 +2553,7 @@ Software\Policies\Mozilla\Firefox\Homepage\StartPage = "none" | "homepage" |  "p
        "Locked": true | false,
        "Additional": ["http://example.org/",
                       "http://example.edu/"],
        "Locked": true | false,
        "Additional": ["http://example.org/",
                       "http://example.edu/"],
-      "StartPage": "none" | "homepage" | "previous-session"
+      "StartPage": "none" | "homepage" | "previous-session" | "homepage-locked"
      }
    }
  }
      }
    }
  }
@@ -1760,6 +2575,24 @@ Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Allow\1 = "https://exa
  Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Allow\2 = "https://example.edu"
  Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Default = 0x1 | 0x0
  ```
  Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Allow\2 = "https://example.edu"
  Software\Policies\Mozilla\Firefox\InstallAddonsPermission\Default = 0x1 | 0x0
  ```
+#### Windows (Intune)
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Addons/InstallAddonsPermission_Allow
+```
+Value (string):
+```
+<enabled/>
+<data id="Permissions" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
+```
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Addons/InstallAddonsPermission_Default
+```
+Value (string):
+```
+<enabled/>
+```
  #### macOS
  ```
  <dict>
  #### macOS
  ```
  <dict>
@@ -1804,6 +2637,15 @@ This policy only work on Windows via GPO (not policies.json).
  ```
  Software\Policies\Mozilla\Firefox\LegacyProfiles = = 0x1 | 0x0
  ```
  ```
  Software\Policies\Mozilla\Firefox\LegacyProfiles = = 0x1 | 0x0
  ```
+#### Windows (Intune)
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/LegacyProfiles
+```
+Value (string):
+```
+<enabled/> or <disabled/>
+```
  ### LocalFileLinks
  Enable linking to local files by origin.
  
  ### LocalFileLinks
  Enable linking to local files by origin.
  
@@ -1816,6 +2658,16 @@ Enable linking to local files by origin.
  Software\Policies\Mozilla\Firefox\LocalFileLinks\1 = "https://example.org"
  Software\Policies\Mozilla\Firefox\LocalFileLinks\2 = "https://example.edu"
  ```
  Software\Policies\Mozilla\Firefox\LocalFileLinks\1 = "https://example.org"
  Software\Policies\Mozilla\Firefox\LocalFileLinks\2 = "https://example.edu"
  ```
+#### Windows (Intune)
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/LocalFileLinks
+```
+Value (string):
+```
+<enabled/>
+<data id="LocalFileLinks" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
+```
  #### macOS
  ```
  <dict>
  #### macOS
  ```
  <dict>
@@ -1835,23 +2687,30 @@ Software\Policies\Mozilla\Firefox\LocalFileLinks\2 = "https://example.edu"
    }
  }
  ```
    }
  }
  ```
-### NoDefaultBookmarks
-Disable the creation of default bookmarks.
-
-This policy is only effective if the user profile has not been created yet.
+### NetworkPrediction
+Enable or disable network prediction (DNS prefetching).
  
  
-**Compatibility:** Firefox 60, Firefox ESR 60\
-**CCK2 Equivalent:** `removeDefaultBookmarks`\
-**Preferences Affected:** N/A
+**Compatibility:** Firefox 67, Firefox ESR 60.7\
+**CCK2 Equivalent:** N/A\
+**Preferences Affected:** `network.dns.disablePrefetch`,`network.dns.disablePrefetchFromHTTPS`
  
  #### Windows (GPO)
  ```
  
  #### Windows (GPO)
  ```
-Software\Policies\Mozilla\Firefox\NoDefaultBookmarks = 0x1 | 0x0
+Software\Policies\Mozilla\Firefox\NetworkPrediction = 0x1 | 0x0
+```
+#### Windows (Intune)
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NetworkPrediction
+```
+Value (string):
+```
+<enabled/> or <disabled/>
  ```
  #### macOS
  ```
  <dict>
  ```
  #### macOS
  ```
  <dict>
-  <key>NoDefaultBookmarks</key>
+  <key>NetworkPrediction</key>
    <true/> | <false/>
  </dict>
  ```
    <true/> | <false/>
  </dict>
  ```
@@ -1859,25 +2718,33 @@ Software\Policies\Mozilla\Firefox\NoDefaultBookmarks = 0x1 | 0x0
  ```
  {
    "policies": {
  ```
  {
    "policies": {
-    "NoDefaultBookmarks": true | false
-  }
+    "NetworkPrediction": true | false
  }
  ```
  }
  ```
-### NetworkPrediction
-Enable or disable network prediction (DNS prefetching).
+### NewTabPage
+Enable or disable the New Tab page.
  
  
-**Compatibility:** Firefox 67, Firefox ESR 60.7\
+**Compatibility:** Firefox 68, Firefox ESR 68\
  **CCK2 Equivalent:** N/A\
  **CCK2 Equivalent:** N/A\
-**Preferences Affected:** `network.dns.disablePrefetch`,`network.dns.disablePrefetchFromHTTPS`
+**Preferences Affected:** `browser.newtabpage.enabled`
  
  #### Windows (GPO)
  ```
  
  #### Windows (GPO)
  ```
-Software\Policies\Mozilla\Firefox\NetworkPrediction = 0x1 | 0x0
+Software\Policies\Mozilla\Firefox\NewTabPage = 0x1 | 0x0
+```
+#### Windows (Intune)
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NewTabPage
+```
+Value (string):
+```
+<enabled/> or <disabled/>
  ```
  #### macOS
  ```
  <dict>
  ```
  #### macOS
  ```
  <dict>
-  <key>NetworkPrediction</key>
+  <key>NewTabPage</key>
    <true/> | <false/>
  </dict>
  ```
    <true/> | <false/>
  </dict>
  ```
@@ -1885,24 +2752,35 @@ Software\Policies\Mozilla\Firefox\NetworkPrediction = 0x1 | 0x0
  ```
  {
    "policies": {
  ```
  {
    "policies": {
-    "NetworkPrediction": true | false
+    "NewTabPage": true | false
  }
  ```
  }
  ```
-### NewTabPage
-Enable or disable the New Tab page.
+### NoDefaultBookmarks
+Disable the creation of default bookmarks.
  
  
-**Compatibility:** Firefox 68, Firefox ESR 68\
-**CCK2 Equivalent:** N/A\
-**Preferences Affected:** `browser.newtabpage.enabled`
+This policy is only effective if the user profile has not been created yet.
+
+**Compatibility:** Firefox 60, Firefox ESR 60\
+**CCK2 Equivalent:** `removeDefaultBookmarks`\
+**Preferences Affected:** N/A
  
  #### Windows (GPO)
  ```
  
  #### Windows (GPO)
  ```
-Software\Policies\Mozilla\Firefox\NewTabPage = 0x1 | 0x0
+Software\Policies\Mozilla\Firefox\NoDefaultBookmarks = 0x1 | 0x0
+```
+#### Windows (Intune)
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/NoDefaultBookmarks
+```
+Value (string):
+```
+<enabled/> or <disabled/>
  ```
  #### macOS
  ```
  <dict>
  ```
  #### macOS
  ```
  <dict>
-  <key>NewTabPage</key>
+  <key>NoDefaultBookmarks</key>
    <true/> | <false/>
  </dict>
  ```
    <true/> | <false/>
  </dict>
  ```
@@ -1910,7 +2788,8 @@ Software\Policies\Mozilla\Firefox\NewTabPage = 0x1 | 0x0
  ```
  {
    "policies": {
  ```
  {
    "policies": {
-    "NewTabPage": true | false
+    "NoDefaultBookmarks": true | false
+  }
  }
  ```
  ### OfferToSaveLogins
  }
  ```
  ### OfferToSaveLogins
@@ -1924,6 +2803,15 @@ Control whether or not Firefox offers to save passwords.
  ```
  Software\Policies\Mozilla\Firefox\OfferToSaveLogins = 0x1 | 0x0
  ```
  ```
  Software\Policies\Mozilla\Firefox\OfferToSaveLogins = 0x1 | 0x0
  ```
+#### Windows (Intune)
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OfferToSaveLogins
+```
+Value (string):
+```
+<enabled/> or <disabled/>
+```
  #### macOS
  ```
  <dict>
  #### macOS
  ```
  <dict>
@@ -1950,6 +2838,15 @@ Sets the default value of signon.rememberSignons without locking it.
  ```
  Software\Policies\Mozilla\Firefox\OfferToSaveLoginsDefault = 0x1 | 0x0
  ```
  ```
  Software\Policies\Mozilla\Firefox\OfferToSaveLoginsDefault = 0x1 | 0x0
  ```
+#### Windows (Intune)
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OfferToSaveLoginsDefault
+```
+Value (string):
+```
+<enabled/> or <disabled/>
+```
  #### macOS
  ```
  <dict>
  #### macOS
  ```
  <dict>
@@ -1976,6 +2873,16 @@ Override the first run page. If the value is blank, no first run page is display
  ```
  Software\Policies\Mozilla\Firefox\OverrideFirstRunPage = "http://example.org"
  ```
  ```
  Software\Policies\Mozilla\Firefox\OverrideFirstRunPage = "http://example.org"
  ```
+#### Windows (Intune)
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OverrideFirstRunPage
+```
+Value (string):
+```
+<enabled/>
+<data id="OverridePage" value="https://example.com"/>
+```
  #### macOS
  ```
  <dict>
  #### macOS
  ```
  <dict>
@@ -2001,6 +2908,16 @@ Override the upgrade page. If the value is blank, no upgrade page is displayed.
  ```
  Software\Policies\Mozilla\Firefox\OverridePostUpdatePage = "http://example.org"
  ```
  ```
  Software\Policies\Mozilla\Firefox\OverridePostUpdatePage = "http://example.org"
  ```
+#### Windows (Intune)
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/OverridePostUpdatePage
+```
+Value (string):
+```
+<enabled/>
+<data id="OverridePage" value="https://example.com"/>
+```
  #### macOS
  ```
  <dict>
  #### macOS
  ```
  <dict>
@@ -2020,12 +2937,21 @@ Remove access to the password manager via preferences and blocks about:logins on
  
  **Compatibility:** Firefox 70, Firefox ESR 60.2\
  **CCK2 Equivalent:** N/A\
  
  **Compatibility:** Firefox 70, Firefox ESR 60.2\
  **CCK2 Equivalent:** N/A\
-**Preferences Affected:** `prefs.privacy.disable_button.view_passwords`
+**Preferences Affected:** `pref.privacy.disable_button.view_passwords`
  
  #### Windows (GPO)
  ```
  Software\Policies\Mozilla\Firefox\PasswordManagerEnabled = 0x1 | 0x0
  ```
  
  #### Windows (GPO)
  ```
  Software\Policies\Mozilla\Firefox\PasswordManagerEnabled = 0x1 | 0x0
  ```
+#### Windows (Intune)
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PasswordManagerEnabled
+```
+Value (string):
+```
+<enabled/> or <disabled/>
+```
  #### macOS
  ```
  <dict>
  #### macOS
  ```
  <dict>
@@ -2041,8 +2967,58 @@ Software\Policies\Mozilla\Firefox\PasswordManagerEnabled = 0x1 | 0x0
    }
  }
  ```
    }
  }
  ```
+### PDFjs
+Disable or configure PDF.js, the built-in PDF viewer.
+
+If `Enabled` is set to false, the built-in PDF viewer is disabled.
+
+If `EnablePermissions` is set to true, the built-in PDF viewer will honor document permissions like preventing the copying of text.
+
+Note: DisableBuiltinPDFViewer has not been deprecated. You can either continue to use it, or switch to using PDFjs->Enabled to disable the built-in PDF viewer. This new permission was added because we needed a place for PDFjs->EnabledPermissions.
+
+**Compatibility:** Firefox 77, Firefox ESR 68.9\
+**CCK2 Equivalent:** N/A\
+**Preferences Affected:** `pdfjs.diabled`,`pdfjs.enablePermissions`
+
+#### Windows (GPO)
+```
+Software\Policies\Mozilla\Firefox\PDFjs\Enabled = 0x1 | 0x0
+Software\Policies\Mozilla\Firefox\PDFjs\EnablePermissions = 0x1 | 0x0
+```
+#### Windows (Intune)
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PDFjs/PDFjs_Enabled
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PDFjs/PDFjs_EnablePermissions
+```
+Value (string):
+```
+<enabled/>or <disabled/>
+```
+#### macOS
+```
+<dict>
+  <key>PDFjs</key>
+  <dict>
+    <key>Enabled</key>
+    <true/> | <false/>
+    <key><EnablePermissions</key>
+    <true/> | <false/>
+  </dict>
+</dict>
+```
+#### policies.json
+```
+{
+  "policies": {
+    "PSFjs": {
+      "Enabled": true | false,
+      "EnablePermissions": true | false
+    }
+}
+```
  ### Permissions
  ### Permissions
-Set permissions associated with camera, microphone, location, and notifications. Because these are origins, not domains, entries with unique ports must be specified separately. See examples below.
+Set permissions associated with camera, microphone, location, notifications, and autoplay. Because these are origins, not domains, entries with unique ports must be specified separately. See examples below.
  
  `Allow` is a list of origins where the feature is allowed.
  
  
  `Allow` is a list of origins where the feature is allowed.
  
@@ -2052,9 +3028,11 @@ Set permissions associated with camera, microphone, location, and notifications.
  
  `Locked` prevents the user from changing preferences for the feature.
  
  
  `Locked` prevents the user from changing preferences for the feature.
  
-**Compatibility:** Firefox 62, Firefox ESR 60.2\
+`Default` specifies the default value for Autoplay. block-audio-video is not supported on Firefox ESR 68.
+
+**Compatibility:** Firefox 62, Firefox ESR 60.2 (Autoplay added in Firefox 74, Firefox ESR 68.6, Autoplay Default/Locked added in Firefox 76, Firefox ESR 68.8)\
  **CCK2 Equivalent:** N/A\
  **CCK2 Equivalent:** N/A\
-**Preferences Affected:** `permissions.default.camera`,`permissions.default.microphone`,`permissions.default.geo`,`permissions.default.desktop-notification`
+**Preferences Affected:** `permissions.default.camera`,`permissions.default.microphone`,`permissions.default.geo`,`permissions.default.desktop-notification`,`media.autoplay.default`
  
  #### Windows (GPO)
  ```
  
  #### Windows (GPO)
  ```
@@ -2075,6 +3053,87 @@ Software\Policies\Mozilla\Firefox\Permissions\Notifications\Allow\1 = "https://e
  Software\Policies\Mozilla\Firefox\Permissions\Notifications\Block\1 = "https://example.edu"
  Software\Policies\Mozilla\Firefox\Permissions\Notifications\BlockNewRequests = 0x1 | 0x0
  Software\Policies\Mozilla\Firefox\Permissions\Notifications\Locked = 0x1 | 0x0
  Software\Policies\Mozilla\Firefox\Permissions\Notifications\Block\1 = "https://example.edu"
  Software\Policies\Mozilla\Firefox\Permissions\Notifications\BlockNewRequests = 0x1 | 0x0
  Software\Policies\Mozilla\Firefox\Permissions\Notifications\Locked = 0x1 | 0x0
+Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Allow\1 = "https://example.org"
+Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Block\1 = "https://example.edu"
+Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Default = "allow-audio-video" | "block-audio" | "block-audio-video"
+Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Locked = 0x1 | 0x0
+```
+#### Windows (Intune)
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Location/Location_BlockNewRequests
+```
+Value (string):
+```
+<enabled/> or <disabled/>
+```
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Location/Location_Locked
+```
+Value (string):
+```
+<enabled/> or <disabled/>
+```
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_Allow
+```
+Value (string):
+```
+<enabled/>
+<data id="Permissions" value="1&#xF000;https://example.org"/>
+```
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_BlockNewRequests
+```
+Value (string):
+```
+<enabled/> or <disabled/>
+```
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/Notifications_Locked
+```
+Value (string):
+```
+<enabled/> or <disabled/>
+```
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Allow
+```
+Value (string):
+```
+<enabled/>
+<data id="Permissions" value="1&#xF000;https://example.org"/>
+```
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Block
+```
+Value (string):
+```
+<enabled/>
+<data id="Permissions" value="1&#xF000;https://example.edu"/>
+```
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Default
+```
+Value (string):
+```
+<enabled/>
+<data id="Autoplay_Default" value="allow-audio-video | block-audio | block-audio-video"/>
+```
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Autoplay/Autoplay_Locked
+```
+Value (string):
+```
+<enabled/> or <disabled/>
  ```
  #### macOS
  ```
  ```
  #### macOS
  ```
@@ -2093,9 +3152,9 @@ Software\Policies\Mozilla\Firefox\Permissions\Notifications\Locked = 0x1 | 0x0
          <string>https://example.edu</string>
        </array>
        <key>BlockNewRequests</key>
          <string>https://example.edu</string>
        </array>
        <key>BlockNewRequests</key>
-      <true/>
+      <true/> | <false/>
        <key>Locked</key>
        <key>Locked</key>
-      <true/>
+      <true/> | <false/>
      </dict>
      <key>Microphone</key>
      <dict>
      </dict>
      <key>Microphone</key>
      <dict>
@@ -2108,9 +3167,9 @@ Software\Policies\Mozilla\Firefox\Permissions\Notifications\Locked = 0x1 | 0x0
          <string>https://example.edu</string>
        </array>
        <key>BlockNewRequests</key>
          <string>https://example.edu</string>
        </array>
        <key>BlockNewRequests</key>
-      <true/>
+      <true/> | <false/>
        <key>Locked</key>
        <key>Locked</key>
-      <true/>
+      <true/> | <false/>
      </dict>
      <key>Location</key>
      <dict>
      </dict>
      <key>Location</key>
      <dict>
@@ -2123,9 +3182,9 @@ Software\Policies\Mozilla\Firefox\Permissions\Notifications\Locked = 0x1 | 0x0
          <string>https://example.edu</string>
        </array>
        <key>BlockNewRequests</key>
          <string>https://example.edu</string>
        </array>
        <key>BlockNewRequests</key>
-      <true/>
+      <true/> | <false/>
        <key>Locked</key>
        <key>Locked</key>
-      <true/>
+      <true/> | <false/>
      </dict>
      <key>Notifications</key>
      <dict>
      </dict>
      <key>Notifications</key>
      <dict>
@@ -2142,6 +3201,21 @@ Software\Policies\Mozilla\Firefox\Permissions\Notifications\Locked = 0x1 | 0x0
        <key>Locked</key>
        <true/>
      </dict>
        <key>Locked</key>
        <true/>
      </dict>
+    <key>Autoplay</key>
+    <dict>
+      <key>Allow</key>
+      <array>
+        <string>https://example.org</string>
+      </array>
+      <key>Block</key>
+      <array>
+        <string>https://example.edu</string>
+      </array>
+      <key>Default</key>
+      <string>allow-audio-video | block-audio | block-audio-video</string>
+      <key>Locked</key>
+      <true/> | <false/>
+    </dict>
    </dict>
  </dict>
  ```
    </dict>
  </dict>
  ```
@@ -2173,6 +3247,12 @@ Software\Policies\Mozilla\Firefox\Permissions\Notifications\Locked = 0x1 | 0x0
          "Block": ["https://example.edu"],
          "BlockNewRequests": true | false,
          "Locked": true | false
          "Block": ["https://example.edu"],
          "BlockNewRequests": true | false,
          "Locked": true | false
+      },
+      "Autoplay": {
+        "Allow": ["https://example.org"],
+        "Block": ["https://example.edu"],
+        "Default": "allow-audio-video" | "block-audio" | "block-audio-video",
+        "Locked": true | false
        }
      }
    }
        }
      }
    }
@@ -2198,6 +3278,32 @@ Software\Policies\Mozilla\Firefox\PopupBlocking\Allow\2 = "https://example.edu"
  Software\Policies\Mozilla\Firefox\PopupBlocking\Default = 0x1 | 0x0
  Software\Policies\Mozilla\Firefox\PopupBlocking\Locked = 0x1 | 0x0
  ```
  Software\Policies\Mozilla\Firefox\PopupBlocking\Default = 0x1 | 0x0
  Software\Policies\Mozilla\Firefox\PopupBlocking\Locked = 0x1 | 0x0
  ```
+#### Windows (Intune)
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Allow
+```
+Value (string):
+```
+<enabled/>
+<data id="Permissions" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.edu"/>
+```
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Default
+```
+Value (string):
+```
+<enabled/> or <disabled/>
+```
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Popups/PopupBlocking_Locked
+```
+Value (string):
+```
+<enabled/> or <disabled/>
+```
  #### macOS
  ```
  <dict>
  #### macOS
  ```
  <dict>
@@ -2239,7 +3345,7 @@ Set and lock certain preferences.
  | --- | --- | --- | ---
  | accessibility.force_disabled | integer | Firefox 70, Firefox ESR 68.2 | 0
  | &nbsp;&nbsp;&nbsp;&nbsp;If set to 1, platform accessibility is disabled.
  | --- | --- | --- | ---
  | accessibility.force_disabled | integer | Firefox 70, Firefox ESR 68.2 | 0
  | &nbsp;&nbsp;&nbsp;&nbsp;If set to 1, platform accessibility is disabled.
-| app.update.auto | boolean | Firefox 68, Firefox ESR 68 | true
+| app.update.auto (Deprecated - Switch to AppAutoUpdate policy) | boolean | Firefox 68, Firefox ESR 68 | true
  | &nbsp;&nbsp;&nbsp;&nbsp;If false, Firefox doesn't automatically install update.
  | browser.bookmarks.autoExportHTML | boolean | Firefox 70, Firefox ESR 68.2 | false
  | &nbsp;&nbsp;&nbsp;&nbsp;If true, bookmarks are exported on shutdown.
  | &nbsp;&nbsp;&nbsp;&nbsp;If false, Firefox doesn't automatically install update.
  | browser.bookmarks.autoExportHTML | boolean | Firefox 70, Firefox ESR 68.2 | false
  | &nbsp;&nbsp;&nbsp;&nbsp;If true, bookmarks are exported on shutdown.
@@ -2303,7 +3409,7 @@ Set and lock certain preferences.
  | &nbsp;&nbsp;&nbsp;&nbsp;If false, the geolocation API is disabled. | Language dependent
  | intl.accept_languages | string | Firefox 70, Firefox ESR 68.2
  | &nbsp;&nbsp;&nbsp;&nbsp;If set, preferred language for web pages.
  | &nbsp;&nbsp;&nbsp;&nbsp;If false, the geolocation API is disabled. | Language dependent
  | intl.accept_languages | string | Firefox 70, Firefox ESR 68.2
  | &nbsp;&nbsp;&nbsp;&nbsp;If set, preferred language for web pages.
-| media.eme.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true
+| media.eme.enabled (Deprecated - Switch to EncryptedMediaExtensions policy) | boolean | Firefox 70, Firefox ESR 68.2 | true
  | &nbsp;&nbsp;&nbsp;&nbsp;If false, Encrypted Media Extensions are not enabled.
  | media.gmp-gmpopenh264.enabled | boolean | Firefox 68, Firefox ESR 68 | true
  | &nbsp;&nbsp;&nbsp;&nbsp;If false, the OpenH264  plugin is not downloaded.
  | &nbsp;&nbsp;&nbsp;&nbsp;If false, Encrypted Media Extensions are not enabled.
  | media.gmp-gmpopenh264.enabled | boolean | Firefox 68, Firefox ESR 68 | true
  | &nbsp;&nbsp;&nbsp;&nbsp;If false, the OpenH264  plugin is not downloaded.
@@ -2326,7 +3432,7 @@ disabled
  | &nbsp;&nbsp;&nbsp;&nbsp;If set to Select Automatically, Firefox automatically chooses the default personal certificate.
  | security.mixed_content.block_active_content | boolean | Firefox 70, Firefox ESR 68.2 | true
  | &nbsp;&nbsp;&nbsp;&nbsp;If false, mixed active content (HTTP and HTTPS) is not blocked.
  | &nbsp;&nbsp;&nbsp;&nbsp;If set to Select Automatically, Firefox automatically chooses the default personal certificate.
  | security.mixed_content.block_active_content | boolean | Firefox 70, Firefox ESR 68.2 | true
  | &nbsp;&nbsp;&nbsp;&nbsp;If false, mixed active content (HTTP and HTTPS) is not blocked.
-| security.osclientcerts.autoload | boolean | Firefox 72, Firefox ESR 68.4 (Windows only) | false
+| security.osclientcerts.autoload | boolean | Firefox 72 (Windows), Firefox 75 (macOS)  | false
  | &nbsp;&nbsp;&nbsp;&nbsp;If true, client certificates are loaded from the operating system certificate store.
  | security.ssl.errorReporting.enabled | boolean | Firefox 68, Firefox ESR 68 | true
  | &nbsp;&nbsp;&nbsp;&nbsp;If false, SSL errors cannot be sent to Mozilla.
  | &nbsp;&nbsp;&nbsp;&nbsp;If true, client certificates are loaded from the operating system certificate store.
  | security.ssl.errorReporting.enabled | boolean | Firefox 68, Firefox ESR 68 | true
  | &nbsp;&nbsp;&nbsp;&nbsp;If false, SSL errors cannot be sent to Mozilla.
@@ -2341,6 +3447,15 @@ disabled
  Software\Policies\Mozilla\Firefox\Preferences\boolean_preference_name = 0x1 | 0x0
  Software\Policies\Mozilla\Firefox\Preferences\string_preference_name = "string_value"
  ```
  Software\Policies\Mozilla\Firefox\Preferences\boolean_preference_name = 0x1 | 0x0
  Software\Policies\Mozilla\Firefox\Preferences\string_preference_name = "string_value"
  ```
+#### Windows (Intune)
+OMA-URI: (periods are replaced by underscores)
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Preferences/boolean_preference_name
+```
+Value (string):
+```
+<enabled/> or <disabled/>
+```
  #### macOS
  ```
  <dict>
  #### macOS
  ```
  <dict>
@@ -2368,13 +3483,22 @@ Software\Policies\Mozilla\Firefox\Preferences\string_preference_name = "string_v
  Ask where to save each file before downloading.
  
  **Compatibility:** Firefox 68, Firefox ESR 68\
  Ask where to save each file before downloading.
  
  **Compatibility:** Firefox 68, Firefox ESR 68\
-**CCK2 Equivalent:** N/A
+**CCK2 Equivalent:** N/A\
  **Preferences Affected:** `browser.download.useDownloadDir`
  
  #### Windows (GPO)
  ```
  Software\Policies\Mozilla\Firefox\PromptForDownloadLocation = 0x1 | 0x0
  ```
  **Preferences Affected:** `browser.download.useDownloadDir`
  
  #### Windows (GPO)
  ```
  Software\Policies\Mozilla\Firefox\PromptForDownloadLocation = 0x1 | 0x0
  ```
+#### Windows (Intune)
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PromptForDownloadLocation
+```
+Value (string):
+```
+<enabled/> or <disabled/>
+```
  #### macOS
  ```
  <dict>
  #### macOS
  ```
  <dict>
@@ -2437,6 +3561,27 @@ Software\Policies\Mozilla\Firefox\Proxy\AutoConfigURL = URL_TO_AUTOCONFIG
  Software\Policies\Mozilla\Firefox\Proxy\AutoLogin = 0x1 | 0x0
  Software\Policies\Mozilla\Firefox\Proxy\UseProxyForDNS = 0x1 | 0x0
  ```
  Software\Policies\Mozilla\Firefox\Proxy\AutoLogin = 0x1 | 0x0
  Software\Policies\Mozilla\Firefox\Proxy\UseProxyForDNS = 0x1 | 0x0
  ```
+#### Windows (Intune)
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Proxy
+```
+Value (string):
+```
+<enabled/>
+<data id="ProxyLocked" value="true | false"/>
+<data id="ConnectionType" value="none | system | manual | autoDetect | autoConfig"/>
+<data id="HTTPProxy" value="https://httpproxy.example.com"/>
+<data id="UseHTTPProxyForAllProtocols" value="true | false"/>
+<data id="SSLProxy" value="https://sslproxy.example.com"/>
+<data id="FTPProxy" value="https://ftpproxy.example.com"/>
+<data id="SOCKSProxy" value="https://socksproxy.example.com"/>
+<data id="SOCKSVersion" value="4 | 5"/>
+<data id="AutoConfigURL" value="URL_TO_AUTOCONFIG"/>
+<data id="Passthrough" value="<local>"/>
+<data id="AutoLogin" value="true | false"/>
+<data id="UseProxyForDNS" value="true | false"/>
+```
  #### macOS
  ```
  <dict>
  #### macOS
  ```
  <dict>
@@ -2475,17 +3620,17 @@ Software\Policies\Mozilla\Firefox\Proxy\UseProxyForDNS = 0x1 | 0x0
    "policies": {
      "Proxy": {
        "Mode": "none", "system", "manual", "autoDetect", "autoConfig",
    "policies": {
      "Proxy": {
        "Mode": "none", "system", "manual", "autoDetect", "autoConfig",
-      "Locked": [true, false],
+      "Locked": true | false,
        "HTTPProxy": "hostname",
        "HTTPProxy": "hostname",
-      "UseHTTPProxyForAllProtocols": [true, false],
+      "UseHTTPProxyForAllProtocols": true | false,
        "SSLProxy": "hostname",
        "FTPProxy": "hostname",
        "SOCKSProxy": "hostname",
        "SOCKSVersion": 4 | 5
        "Passthrough": "<local>",
        "AutoConfigURL": "URL_TO_AUTOCONFIG",
        "SSLProxy": "hostname",
        "FTPProxy": "hostname",
        "SOCKSProxy": "hostname",
        "SOCKSVersion": 4 | 5
        "Passthrough": "<local>",
        "AutoConfigURL": "URL_TO_AUTOCONFIG",
-      "AutoLogin":  [true, false],
-      "UseProxyForDNS": [true, false]
+      "AutoLogin": true | false,
+      "UseProxyForDNS": true | false
      }
    }
  }
      }
    }
  }
@@ -2507,6 +3652,16 @@ or
  
  Software\Policies\Mozilla\Firefox\RequestedLocales = "de,en-US"
  ```
  
  Software\Policies\Mozilla\Firefox\RequestedLocales = "de,en-US"
  ```
+#### Windows (Intune)
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/RequestedLocalesString
+```
+Value (string):
+```
+<enabled/>
+<data id="Preferences_String" value="de,en-US"/>
+```
  #### macOS
  ```
  <dict>
  #### macOS
  ```
  <dict>
@@ -2541,6 +3696,8 @@ or
    }
  }
  ```
    }
  }
  ```
+<a name="SanitizeOnShutdown"></a>
+
  ### SanitizeOnShutdown (Selective)
  Clear data on shutdown. Choose from Cache, Cookies, Download History, Form & Search History, Browsing History, Active Logins, Site Preferences and Offline Website Data.
  
  ### SanitizeOnShutdown (Selective)
  Clear data on shutdown. Choose from Cache, Cookies, Download History, Form & Search History, Browsing History, Active Logins, Site Preferences and Offline Website Data.
  
@@ -2561,6 +3718,15 @@ Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\SiteSettings = 0x1 | 0x0
  Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\OfflineApps = 0x1 | 0x0
  Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Locked = 0x1 | 0x0
  ```
  Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\OfflineApps = 0x1 | 0x0
  Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Locked = 0x1 | 0x0
  ```
+#### Windows (Intune)
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/I_SanitizeOnShutdown_Locked
+```
+Value (string):
+```
+<enabled/> or <disabled/>
+```
  #### macOS
  ```
  <dict>
  #### macOS
  ```
  <dict>
@@ -2615,6 +3781,15 @@ Clear all data on shutdown, including Browsing & Download History, Cookies, Acti
  ```
  Software\Policies\Mozilla\Firefox\SanitizeOnShutdown = 0x1 | 0x0
  ```
  ```
  Software\Policies\Mozilla\Firefox\SanitizeOnShutdown = 0x1 | 0x0
  ```
+#### Windows (Intune)
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/C_SanitizeOnShutdown
+```
+Value (string):
+```
+<enabled/> or <disabled/>
+```
  #### macOS
  ```
  <dict>
  #### macOS
  ```
  <dict>
@@ -2641,6 +3816,16 @@ Set whether or not search bar is displayed.
  ```
  Software\Policies\Mozilla\Firefox\SearchBar = "unified" | "separate"
  ```
  ```
  Software\Policies\Mozilla\Firefox\SearchBar = "unified" | "separate"
  ```
+
+#### Windows (Intune)
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SearchBar
+```
+Value (string):
+```
+<enabled/>
+<data id="Permissions" value="unified | separate"/>
  #### macOS
  ```
  <dict>
  #### macOS
  ```
  <dict>
@@ -2648,7 +3833,6 @@ Software\Policies\Mozilla\Firefox\SearchBar = "unified" | "separate"
    <string>unified | separate</string>
  </dict>
  ```
    <string>unified | separate</string>
  </dict>
  ```
-
  #### policies.json
  ```
  {
  #### policies.json
  ```
  {
@@ -2657,10 +3841,7 @@ Software\Policies\Mozilla\Firefox\SearchBar = "unified" | "separate"
    }
  }
  ```
    }
  }
  ```
-
-
-
-
+<a name="SearchEngines"></a>
  
  ### SearchEngines (This policy is only available on the ESR.)
  
  
  ### SearchEngines (This policy is only available on the ESR.)
  
@@ -2676,6 +3857,16 @@ Set the default search engine. This policy is only available on the ESR.
  ```
  Software\Policies\Mozilla\Firefox\SearchEngines\Default = NAME_OF_SEARCH_ENGINE
  ```
  ```
  Software\Policies\Mozilla\Firefox\SearchEngines\Default = NAME_OF_SEARCH_ENGINE
  ```
+#### Windows (Intune)
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_Default
+```
+Value (string):
+```
+<enabled/>
+<data id="SearchEngines_Default" value="NAME_OF_SEARCH_ENGINE"/>
+```
  #### macOS
  ```
  <dict>
  #### macOS
  ```
  <dict>
@@ -2708,6 +3899,15 @@ Prevent installing search engines from webpages.
  ```
  Software\Policies\Mozilla\Firefox\SearchEngines\PreventInstalls = 0x1 | 0x0
  ```
  ```
  Software\Policies\Mozilla\Firefox\SearchEngines\PreventInstalls = 0x1 | 0x0
  ```
+#### Windows (Intune)
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_PreventInstalls
+```
+Value (string):
+```
+<enabled/> or <disabled/>
+```
  #### macOS
  ```
  <dict>
  #### macOS
  ```
  <dict>
@@ -2740,6 +3940,16 @@ Hide built-in search engines. This policy is only available on the ESR.
  ```
  Software\Policies\Mozilla\Firefox\SearchEngines\Remove\1 = NAME_OF_SEARCH_ENGINE
  ```
  ```
  Software\Policies\Mozilla\Firefox\SearchEngines\Remove\1 = NAME_OF_SEARCH_ENGINE
  ```
+#### Windows (Intune)
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_Remove
+```
+Value (string):
+```
+<enabled/>
+<data id="SearchEngines_Remove" value="1&#xF000;NAME_OF_SEARCH_ENGINE"/>
+```
  #### macOS
  ```
  <dict>
  #### macOS
  ```
  <dict>
@@ -2797,7 +4007,23 @@ Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Description = "Example Des
  Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\SuggestURLTemplate = "https://www.example.org/suggestions/q={searchTerms}"
  Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\PostData = "name=value&q={searchTerms}"
  ```
  Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\SuggestURLTemplate = "https://www.example.org/suggestions/q={searchTerms}"
  Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\PostData = "name=value&q={searchTerms}"
  ```
-
+#### Windows (Intune)
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Search/SearchEngines_1
+```
+Value (string):
+```
+<enabled/>
+<data id="SearchEngine_Name" value="Example1"/>
+<data id="SearchEngine_URLTemplate" value="https://www.example.org/q={searchTerms"/>
+<data id="SearchEngine_Method" value="GET | POST"/>
+<data id="SearchEngine_IconURL" value="https://www.example.org/favicon.ico"/>
+<data id="SearchEngine_Alias" value="example"/>
+<data id="SearchEngine_Description" value="Example Description"/>
+<data id="SearchEngine_SuggestURLTemplate" value="https://www.example.org/suggestions/q={searchTerms}"/>
+<data id="SearchEngine_PostData" value="name=value&amp;q={searchTerms}"/>
+```
  #### macOS
  ```
  <dict>
  #### macOS
  ```
  <dict>
@@ -2860,6 +4086,15 @@ Enable search suggestions.
  ```
  Software\Policies\Mozilla\Firefox\SearchSuggestEnabled = 0x1 | 0x0
  ```
  ```
  Software\Policies\Mozilla\Firefox\SearchSuggestEnabled = 0x1 | 0x0
  ```
+#### Windows (Intune)
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SearchSuggestEnabled
+```
+Value (string):
+```
+<enabled/> or <disabled/>
+```
  #### macOS
  ```
  <dict>
  #### macOS
  ```
  <dict>
@@ -2887,6 +4122,16 @@ Install PKCS #11 modules.
  ```
  Software\Policies\Mozilla\Firefox\SecurityDevices\NAME_OF_DEVICE = PATH_TO_LIBRARY_FOR_DEVICE
  ```
  ```
  Software\Policies\Mozilla\Firefox\SecurityDevices\NAME_OF_DEVICE = PATH_TO_LIBRARY_FOR_DEVICE
  ```
+#### Windows (Intune)
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SecurityDevices
+```
+Value (string):
+```
+<enabled/>
+<data id="SecurityDevices" value="NAME_OF_DEVICE&#xF000;PATH_TO_LIBRARY_FOR_DEVICE"/>
+```
  #### macOS
  ```
  <dict>
  #### macOS
  ```
  <dict>
@@ -2920,6 +4165,16 @@ Set and lock the maximum version of TLS.
  ```
  Software\Policies\Mozilla\Firefox\SSLVersionMax = "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
  ```
  ```
  Software\Policies\Mozilla\Firefox\SSLVersionMax = "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
  ```
+#### Windows (Intune)
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SSLVersionMax
+```
+Value (string):
+```
+<enabled/>
+<data id="SSLVersion" value="tls1 | tls1.2 | tls1.3"/>
+```
  #### macOS
  ```
  <dict>
  #### macOS
  ```
  <dict>
@@ -2948,6 +4203,16 @@ Set and lock the minimum version of TLS.
  ```
  Software\Policies\Mozilla\Firefox\SSLVersionMin = "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
  ```
  ```
  Software\Policies\Mozilla\Firefox\SSLVersionMin = "tls1" | "tls1.1" | "tls1.2" | "tls1.3"
  ```
+#### Windows (Intune)
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SSLVersionMin
+```
+Value (string):
+```
+<enabled/>
+<data id="SSLVersion" value="tls1 | tls1.2 | tls1.3"/>
+```
  #### macOS
  ```
  <dict>
  #### macOS
  ```
  <dict>
@@ -2977,6 +4242,18 @@ Software\Policies\Mozilla\Firefox\SupportMenu\Title = "Support Menu"
  Software\Policies\Mozilla\Firefox\SupportMenu\URL = "http://example.com/support"
  Software\Policies\Mozilla\Firefox\SupportMenu\AccessKey = "S"
  ```
  Software\Policies\Mozilla\Firefox\SupportMenu\URL = "http://example.com/support"
  Software\Policies\Mozilla\Firefox\SupportMenu\AccessKey = "S"
  ```
+#### Windows (Intune)
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/SupportMenu
+```
+Value (string):
+```
+<enabled/>
+<data id="SupportMenuTitle" value="Support Menu"/>
+<data id="SupportMenuURL" value="http://example.com/support"/>
+<data id="SupportMenuAccessKey" value="S">
+```
  #### macOS
  ```
  <dict>
  #### macOS
  ```
  <dict>
@@ -3003,6 +4280,70 @@ Software\Policies\Mozilla\Firefox\SupportMenu\AccessKey = "S"
    }
  }
  ```
    }
  }
  ```
+### UserMessaging
+
+Prevent installing search engines from webpages.
+
+`WhatsNew` Remove the "What's New" icon and menuitem. (Firefox 75 only)
+
+`ExtensionRecommendations` Don't recommend extensions.
+
+`FeatureRecommendations` Don't recommend browser features.
+
+`UrlbarInterventions` Don't offer Firefox specific suggestions in the URL bar. (Firefox 75 only)
+
+**Compatibility:** Firefox 75, Firefox ESR 68.7\
+**CCK2 Equivalent:** N/A\
+**Preferences Affected:** `browser.messaging-system.whatsNewPanel.enabled`,`browser.newtabpage.activity-stream.asrouter.userprefs.cfr.addons`,`browser.newtabpage.activity-stream.asrouter.userprefs.cfr.features`
+
+#### Windows (GPO)
+```
+Software\Policies\Mozilla\Firefox\UserMessaging\WhatsNew = 0x1 | 0x0
+Software\Policies\Mozilla\Firefox\UserMessaging\ExtensionRecommendations = 0x1 | 0x0
+Software\Policies\Mozilla\Firefox\UserMessaging\FeatureRecommendations = 0x1 | 0x0
+Software\Policies\Mozilla\Firefox\UserMessaging\UrlbarInterventions = 0x1 | 0x0
+```
+#### Windows (Intune)
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/UserMessaging_WhatsNew
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/UserMessaging_ExtensionRecommendations
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/UserMessaging_FeatureRecommendations
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/UserMessaging_UrlbarInterventions
+```
+Value (string):
+```
+<enabled/> or <disabled/>
+```
+#### macOS
+```
+<dict>
+  <key>UserMessaging</key>
+  <dict>
+    <key>WhatsNew</key>
+    <true/> | <false/>
+    <key>ExtensionRecommendations</key>
+    <true/> | <false/>
+    <key>FeatureRecommendations</key>
+    <true/> | <false/>
+    <key>UrlbarInterventions</key>
+    <true/> | <false/>
+  </dict>
+</dict>
+```
+#### policies.json
+```
+{
+  "policies": {
+    "UserMessaging": {
+      "WhatsNew": true | false,
+      "ExtensionRecommendations": true | false,
+      "FeatureRecommendations": true | false,
+      "UrlbarInterventions": true | false
+    }
+  }
+}
+```
  ### WebsiteFilter
  Block websites from being visited. The parameters take an array of Match Patterns, as documented in https://developer.mozilla.org/en-US/Add-ons/WebExtensions/Match_patterns. Only http/https addresses are supported at the moment. The arrays are limited to 1000 entries each.
  
  ### WebsiteFilter
  Block websites from being visited. The parameters take an array of Match Patterns, as documented in https://developer.mozilla.org/en-US/Add-ons/WebExtensions/Match_patterns. Only http/https addresses are supported at the moment. The arrays are limited to 1000 entries each.
  
@@ -3012,8 +4353,27 @@ Block websites from being visited. The parameters take an array of Match Pattern
  
  #### Windows (GPO)
  ```
  
  #### Windows (GPO)
  ```
-Software\Policies\Mozilla\Firefox\WebsiteFilters\Block\1 = "<all_urls>"
-Software\Policies\Mozilla\Firefox\WebsiteFilters\Exceptions\1 = "http://example.org/*"
+Software\Policies\Mozilla\Firefox\WebsiteFilter\Block\1 = "<all_urls>"
+Software\Policies\Mozilla\Firefox\WebsiteFilter\Exceptions\1 = "http://example.org/*"
+```
+#### Windows (Intune)
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/B_WebsiteFilter_Block
+```
+Value (string):
+```
+<enabled/>
+<data id="WebsiteFilter" value="1&#xF000;<all_urls>"/>
+```
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/B_WebsiteFilter_Exceptions
+```
+Value (string):
+```
+<enabled/>
+<data id="WebsiteFilter" value="1&#xF000;http://example.org/*"/>
  ```
  #### macOS
  ```
  ```
  #### macOS
  ```