X-Git-Url: https://git.p6c8.net/policy-templates.git/blobdiff_plain/15ac1bb72febdb18aa8dfd384f55ed286a52627b..a502970c61549d5b31679e97658df0f07d122a05:/README.md?ds=inline diff --git a/README.md b/README.md index 09b5074..dc293d6 100644 --- a/README.md +++ b/README.md @@ -75,7 +75,8 @@ Policies can be specified using the [Group Policy templates on Windows](https:// | **[`Permissions`](#permissions)** | Set permissions associated with camera, microphone, location, and notifications. | **[`PictureInPicture`](#pictureinpicture)** | Enable or disable Picture-in-Picture. | **[`PopupBlocking`](#popupblocking)** | Configure the default pop-up window policy as well as origins for which pop-up windows are allowed. -| **[`Preferences`](#preferences)** | Set and lock some preferences. +| **[`Preferences`](#preferences)** | Set and lock preferences. +| **[`Preferences (Deprecated)`](#preferences--deprecated)** | Set and lock some preferences. | **[`PromptForDownloadLocation`](#promptfordownloadlocation)** | Ask where to save each file before downloading. | **[`Proxy`](#proxy)** | Configure proxy settings. | **[`RequestedLocales`](#requestedlocales)** | Set the the list of requested locales for the application in order of preference. @@ -2025,15 +2026,43 @@ Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Exceptions\1 = "https #### Windows (Intune) OMA-URI: ``` -./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/TrackingProtection +./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/A_TrackingProtection_Value ``` Value (string): ``` - - - - - + or +``` +OMA-URI: +``` +./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/B_TrackingProtection_Cryptomining +``` +Value (string): +``` + or +``` +OMA-URI: +``` +./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/C_TrackingProtection_Fingerprinting +``` +Value (string): +``` + or +``` +OMA-URI: +``` +./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/D_TrackingProtection_Exceptions +``` +Value (string): +``` + +``` +OMA-URI: +``` +./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/E_TrackingProtection_Locked +``` +Value (string): +``` + or ``` #### macOS ``` @@ -2265,6 +2294,7 @@ Value (string): ``` + } +}'/> ``` #### macOS ``` @@ -3719,6 +3750,149 @@ Value (string): } ``` ### Preferences +Set and lock preferences. + +Previously you could only set and lock a subset of preferences. Starting with Firefox 81 and Firefox ESR 78.3 you can set many more preferences. You can also set default preferences, user preferences and you can clear preferences. + +Preferences that start with the following prefixes are supported: +``` +accessibility. +browser. +datareporting.policy. +dom. +extensions. +geo. +intl. +layout. +media. +network. +places. +print. +ui. +widget. +``` +as well as the following security preferences: +``` +security.default_personal_cert +security.insecure_connection_text.enabled +security.insecure_connection_text.pbmode.enabled +security.insecure_field_warning.contextual.enabled +security.mixed_content.block_active_content +security.osclientcerts.autoload +security.ssl.errorReporting.enabled +security.tls.hello_downgrade_check +security.warn_submit_secure_to_insecure +``` +Using the preference as the key, set the `Value` to the corresponding preference value. + +`Status` can be "default", "locked", "user" or "clear" + +If a value is locked, it is also set as the default. + +User preferences persist across invocations of Firefox. + +See the examples below for more detail. + +IMPORTANT: Make sure you're only setting a particular preference using this mechanism and not some other way. + +Status +**Compatibility:** Firefox 81, Firefox ESR 78.3\ +**CCK2 Equivalent:** `preferences`\ +**Preferences Affected:** Many + +#### Windows (GPO) +``` +Software\Policies\Mozilla\Firefox\Preferences (REG_MULTI_SZ) = +{ + "accessibility.force_disabled": { + "Value": 1, + "Status": "default" + }, + "browser.cache.disk.parent_directory": { + "Value": "SOME_NATIVE_PATH", + "Status": "user" + }, + "browser.tabs.warnOnClose": { + "Value": false, + "Status": "locked" + } +} +``` +#### Windows (Intune) +OMA-URI: +``` +./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/Preferences +``` +Value (string): +``` + + +``` +#### macOS +``` + + Preferences + + accessibility.force_disabled + + Value + 1 + Status + default + + browser.cache.disk.parent_directory + + Value + SOME_NATIVE_PATH + Status + user + + browser.tabs.warnOnClose + + Value + + Status + locked + + + +``` +#### policies.json +``` +{ + "policies": { + "Preferences": { + "accessibility.force_disabled": { + "Value": 1, + "Status": "default" + }, + "browser.cache.disk.parent_directory": { + "Value": "SOME_NATIVE_PATH", + "Status": "user" + }, + "browser.tabs.warnOnClose": { + "Value": false, + "Status": "locked" + } + } + } +} +``` +### Preferences (Deprecated) Set and lock certain preferences. **Compatibility:** See below\ @@ -3744,7 +3918,7 @@ Set and lock certain preferences. | browser.fixup.dns_first_for_single_words | boolean | Firefox 68, Firefox ESR 68 | false |     If true, single words are sent to DNS, not directly to search. | browser.newtabpage.activity-stream.default.sites | string | Firefox 72, ESR 68.4 | Locale dependent -|     If set, a list of URLs to use as the default top sites on the new tab page. +|     If set, a list of URLs to use as the default top sites on the new tab page. Due to Firefox limitations, search sites can't be added. In addition, sites with the same name but different TLDs (example.org/example.com) will not display properly. | browser.places.importBookmarksHTML | boolean | Firefox 70, Firefox ESR 68.2 |     If true, bookmarks are always imported on startup. | browser.safebrowsing.phishing.enabled | boolean | Firefox 70, Firefox ESR 68.2 | true