X-Git-Url: https://git.p6c8.net/policy-templates.git/blobdiff_plain/1cb7efbbff64e09c46ad51a3e5efa6b10f9b6688..2c7fb276b0d27c67396266491d6ab22fe3d6602d:/windows/en-US/firefox.adml diff --git a/windows/en-US/firefox.adml b/windows/en-US/firefox.adml index e68d610..218646c 100644 --- a/windows/en-US/firefox.adml +++ b/windows/en-US/firefox.adml @@ -1,5 +1,5 @@ - + @@ -7,9 +7,18 @@ Microsoft Windows XP SP2 or later Firefox 60 or later, Firefox 60 ESR or later Firefox 62 or later, Firefox 60.2 ESR or later + Firefox 63 or later + Firefox 64 or later, Firefox 60.4 ESR or later + Firefox 66 or later, Firefox 60.6 ESR or later + Firefox 67 or later, Firefox 60.7 ESR or later + Firefox 68 or later, Firefox 68 ESR or later Firefox 60 ESR or later Firefox Permissions + Camera + Microphone + Location + Notifications Authentication Bookmarks Certificates @@ -20,13 +29,14 @@ Flash Home page Search + Preferences Allowed Sites Blocked Sites - SPNEGO - URL for Firefox Updates - If this policy is enabled, you can set a URL to an other update server than the default. This could be helpful, if you run your own update server in your network and the clients have no direct access to the internet and the Mozilla update server. + Custom Update URL + If this policy is enabled, you can set a URL to an update server other than the default. This could be helpful if you run your own update server on your network. If this policy is disabled or not configured, the default update URL is used. + SPNEGO If this policy is enabled, the specified websites are permitted to engage in SPNEGO authentication with the browser. Entries in the list are formatted as mydomain.com or https://myotherdomain.com. If this policy is disabled or not configured, no websites are permitted to engage in SPNEGO authentication with the browser. @@ -68,20 +78,38 @@ If this policy is disabled or not configured, the user can access Troubleshootin If this policy is enabled, the user cannot set an image as their desktop background. If this policy is disabled or not configured, users can set images as their desktop background. + Captive Portal + If this policy is disabled, captive portal support is disabled. + +If this policy is enabled or not configured, captive portal support is enabled. Import Enterprise Roots If this policy is enabled, Firefox will read certificates from the Windows certificate store. If this policy is disabled or not configured, Firefox will not read certificates from the Windows certificate store. + Install Certificates + If this policy is enabled, Firefox will install the listed certificates into Firefox. It will look in %USERPROFILE%\AppData\Local\Mozilla\Certificates and %USERPROFILE%\AppData\Roaming\Mozilla\Certificates. + +If this policy is disabled or not configured, Firefox will not install additional certificates. + Default Download Directory + If this policy is enabled, you can set the default directory for downloads. ${home} can be used for the native home path. + +If this policy is disabled or not configured, the default Firefox download directory is used. + Download Directory + If this policy is enabled, you can set and lock the directory for downloads. ${home} can be used for the native home path. + +If this policy is disabled or not configured, the default Firefox download directory is used and the user can change it. + Configure DNS Over HTTPS + If this policy is enabled, the default configuration for DNS over HTTPS can be changed. + +If this policy is disabled or not configured, DNS Over HTTPS uses the default Firefox configuration. Disable Master Password Creation If this policy is enabled, users cannot create a master password. If this policy is disabled or not configured, users can create a master password. Disable Update - If this policy is enabled, the browser does not receive udpates. - -If this policy is disabled or not configured, the browser receives updates. + If this policy is enabled, the browser does not receive updates. -Starting with Firefox 62, this policy will only work from Computer Configuration. +If this policy is disabled or not configured, the browser receives updates. Disable Built-in PDF Viewer (PDF.js) If this policy is enabled, PDF files are not viewed within Firefox. @@ -147,17 +175,13 @@ If this policy is disabled or not configured, a user can choose to visit a harmf Disable System Addon Updates If this policy is enabled, new system add-ons will not be installed and existing system add-ons will not be updated. -If this policy is disabled or not configured, system add-ons are installed and updated. - -Starting with Firefox 62, this policy will only work from Computer Configuration. +If this policy is disabled or not configured, system add-ons are installed and updated. Disable Telemetry If this policy is enabled, telemetry is not uploaded. If this policy is disabled or not configured, telemetry is collected and uploaded. -Mozilla recommends that you do not disable telemetry. Information collected through telemetry helps us build a better product for businesses like yours. - -Starting with Firefox 62, this policy will only work from Computer Configuration. +Mozilla recommends that you do not disable telemetry. Information collected through telemetry helps us build a better product for businesses like yours. Display Bookmarks Toolbar If this policy is enabled, the bookmarks toolbar is displayed by default. The user can still hide it. @@ -174,22 +198,36 @@ If this policy is disabled or not configured, Firefox checks to see if it is the If this policy is enabled, you can specify a list of extension URLs or paths that will be installed when Firefox is started. Anytime this list is changed, the extensions will be reinstalled. -If this policy is disabled or not configured, no extensions are installed. - -Starting with Firefox 62, this policy will only work from Computer Configuration. +If this policy is disabled or not configured, no extensions are installed. Extensions to Uninstall If this policy is enabled, you can specify a list of extension IDs that will be uninstalled. Anytime this list is changed, the extensions will be uninstalled. -If this policy is disabled or not configured, no extensions are uninstalled. - -Starting with Firefox 62, this policy will only work from Computer Configuration. +If this policy is disabled or not configured, no extensions are uninstalled. Prevent extensions from being disabled or removed If this policy is enabled, you can specify a list of extension IDs that the user will be unable to uninstall or disable. -If this policy is disabled or not configured, no extensions are locked +If this policy is disabled or not configured, no extensions are locked + Extension Update + If this policy is disabled, extensions will not be updated automatically. + +If this policy is enabled or not configured, extensions will be updated automatically. + Hardware Acceleration + If this policy is disabled, hardware acceleration and cannot be enabled. + +If this policy is enabled or not configured, hardware acceleration is enabled. + Local File Links + If this policy is enabled, you can specify origins where linking to local files is allowed. + +If this policy is disabled or not configured, websites can't link to local files. + Network Prediction + If this policy is disabled, network prediction (DNS prefetching) will be disabled. + +If this policy is enabled or not configured, network prediction (DNS prefetching) will be enabled. + New Tab Page + If this policy is disabled, the new tab page will be blank. -Starting with Firefox 62, this policy will only work from Computer Configuration. +If this policy is enabled or not configured, the new tab page will be the default. Offer to save logins If this policy is enabled or not configured, Firefox will offer to save website logins and passwords. @@ -232,11 +270,75 @@ This setting is ignored if this policy is disabled or not configured or if cooki Keep cookies until Firefox is closed If this policy is enabled and cookies are allowed, they will expire when Firefox is closed. +This setting is ignored if this policy is disabled or not configured or if cookies are not allowed. + Reject trackers + If this policy is enabled and cookies are allowed, Firefox will reject tracker cookies by default. + This setting is ignored if this policy is disabled or not configured or if cookies are not allowed. Do not allow preferences to be changed If this policy is enabled, cookie preferences cannot be changed by the user. If this policy is disabled or not configured, the user can change their cookie preferences. + If this policy is enabled, access to the camera is always allowed for the origins indicated. + +If this policy is disabled or not configured, the default camera policy is followed. + If this policy is enabled, access to the camera is blocked for the origins indicated. + +If this policy is disabled or not configured, access to the camera is not blocked by default. + Block new requests asking to access the camera + If this policy is enabled, sites that are not in the Allow policy will not be allowed to ask permission to access the camera. + +If this policy is disabled or not configured, any site that is not in the Block policy can ask permission to access the camera. + Do not allow preferences to be changed + If this policy is enabled, camera preferences cannot be changed by the user. + +If this policy is disabled or not configured, the user can change their camera preferences. + If this policy is enabled, access to the microphone is always allowed for the origins indicated. + +If this policy is disabled or not configured, the default microphone policy is followed. + If this policy is enabled, access to the microphone is blocked for the origins indicated. + +If this policy is disabled or not configured, access to the microphone is not blocked by default. + Block new requests asking to access the microphone + If this policy is enabled, sites that are not in the Allow policy will not be allowed to ask permission to access the microphone. + +If this policy is disabled or not configured, any site that is not in the Block policy can ask permission to access the microphone. + Do not allow preferences to be changed + If this policy is enabled, microphone preferences cannot be changed by the user. + +If this policy is disabled or not configured, the user can change their camera preferences. + If this policy is enabled, access to location is always allowed for the origins indicated. + +If this policy is disabled or not configured, the default location policy is followed. + If this policy is enabled, access to location is blocked for the origins indicated. + +If this policy is disabled or not configured, access to location is not blocked by default. + Block new requests asking to access location + If this policy is enabled, sites that are not in the Allow policy will not be allowed to ask permission to access location. + +If this policy is disabled or not configured, any site that is not in the Block policy can ask permission to access location. + Do not allow preferences to be changed + If this policy is enabled, location preferences cannot be changed by the user. + +If this policy is disabled or not configured, the user can change location preferences. + If this policy is enabled, notifications can always be sent for the origins indicated. + +If this policy is disabled or not configured, the default notification policy is followed. + If this policy is enabled, notifications are always blocked for the origins indicated. + +If this policy is disabled or not configured, notifications are not blocked by default. + Block new requests asking to send notifications + If this policy is enabled, sites that are not in the Allow policy will not be allowed to ask permission to send notifications. + +If this policy is disabled or not configured, any site that is not in the Block policy can ask permission to send notifications. + Do not allow preferences to be changed + If this policy is enabled, notification preferences cannot be changed by the user. + +If this policy is disabled or not configured, the user can change their notification preferences. + Customize Firefox Home + If this policy is enabled, you can choose the sections displayed on Firefox Home and prevent the user from changing them. + +If this policy is disabled or not configured, the default sections are displayed and the user can change them. If this policy is enabled, Flash is activated by default for the origins indicated unless Flash is completely disabled. If a top level domain is specified (http://example.org), Flash is allowed for all subdomains as well. If this policy is disabled or not configured, the default Flash policy is followed. @@ -256,36 +358,73 @@ If this policy is disabled or not configured, the user can change their Flash pr Override the first run page If this policy is enabled, you can specify a URL to be used as the first run page. If you leave the URL blank, no first run page will be shown. -If this policy is disabled or not configured, the first run page is displayed. - -Starting with Firefox 62, this policy will only work from Computer Configuration. +If this policy is disabled or not configured, the first run page is displayed. Override the upgrade page If this policy is enabled, you can specify a URL to be displayed after Firefox is updated. If you leave the URL blank, no upgrade page will be shown. -If this policy is disabled or not configured, the upgrade is displayed. - -Starting with Firefox 62, this policy will only work from Computer Configuration. - Clear all data when browser is closed - If this policy is enabled, all data is cleared when Firefox is closed. This includes Browsing & Download History, Cookies, Active Logins, Cache, Form & Search History, Site Preferences and Offline Website Data. +If this policy is disabled or not configured, the upgrade is displayed. + Clear data when browser is closed + If this policy is enabled, you can choose data to be cleared when Firefox is closed. If this policy is disabled or not configured, data is not cleared when the browser is closed. Blocked websites If this policy is enabled, you can specify match patterns that indicate sites to be blocked. The match patterns are documented at https://developer.mozilla.org/en-US/Add-ons/WebExtensions/Match_patterns. Only http/https addresses are supported at the moment. There is a 1000 entry limit. -If this policy is disabled or not configured, no websites are blocked. - -Starting with Firefox 62, this policy will only work from Computer Configuration. +If this policy is disabled or not configured, no websites are blocked. Exceptions to blocked websites If this policy is enabled, and the website filter is enabled, you can specify match patterns for sites you do not want to block. The match patterns are documented at https://developer.mozilla.org/en-US/Add-ons/WebExtensions/Match_patterns. Only http/https addresses are supported at the moment. There is a 1000 entry limit. -If this policy is disabled or not configured, there are no exceptions to the website filter. - -Starting with Firefox 62, this policy will only work from Computer Configuration. - Bookmark One - Bookmark Two - Bookmark Three - Bookmark Four - Bookmark Five +If this policy is disabled or not configured, there are no exceptions to the website filter. + Bookmark 01 + Bookmark 02 + Bookmark 03 + Bookmark 04 + Bookmark 05 + Bookmark 06 + Bookmark 07 + Bookmark 08 + Bookmark 09 + Bookmark 10 + Bookmark 11 + Bookmark 12 + Bookmark 13 + Bookmark 14 + Bookmark 15 + Bookmark 16 + Bookmark 17 + Bookmark 18 + Bookmark 19 + Bookmark 20 + Bookmark 21 + Bookmark 22 + Bookmark 23 + Bookmark 24 + Bookmark 25 + Bookmark 26 + Bookmark 27 + Bookmark 28 + Bookmark 29 + Bookmark 30 + Bookmark 31 + Bookmark 32 + Bookmark 33 + Bookmark 34 + Bookmark 35 + Bookmark 36 + Bookmark 37 + Bookmark 38 + Bookmark 39 + Bookmark 40 + Bookmark 41 + Bookmark 42 + Bookmark 43 + Bookmark 44 + Bookmark 45 + Bookmark 46 + Bookmark 47 + Bookmark 48 + Bookmark 49 + Bookmark 50 If this policy is enabled, you can configure a bookmark be added to Firefox. Due to a bug, you must select the location. Note that you must specify the bookmarks in order. If this policy is disabled or not configured, a new bookmark is not added. @@ -300,15 +439,24 @@ Note: this policy is only effective if used before the first run of the profile. URL for Home page If this policy is enabled, you can set a default home page. You can also lock the home page. -If this policy is disabled or not configured, the user can set and change the home page. - -Starting with Firefox 62, this policy will only work from Computer Configuration. +If this policy is disabled or not configured, the user can set and change the home page. Additional Homepages If this policy is enabled, you can have additional home pages. They are opened in multiple tabs. -If this policy is disabled or not configured, there is only one home page. +If this policy is disabled or not configured, there is only one home page. + Start Page + If this policy is enabled, you can change what is displayed when Firefox starts. It can be the homepage, the previous session, or a blank page. -Starting with Firefox 62, this policy will only work from Computer Configuration. +If this policy is disabled or not configured, the start page defaults to the previous session. + None + Homepage + Previous Session + Prompt for download location + If this policy is disabled, the user is not prompted for a download location. + +If this policy is enabled, the user is always prompted for a download location. + +If this policy is not configured, the user is prompted for a download location, but can change the default. Proxy Settings If this policy is enabled, you can configure and lock network settings. @@ -333,6 +481,14 @@ If this policy is disabled or not configured, the default network settings are u If this policy is disabled, tracking protection is disabled and locked in both the browser and private browsing. If this policy is enabled, private browsing is enabled by default in both the browser and private browsing and you can choose whether or not to prevent the user from changing it. + Requested locale + If this policy is enabled, you can specify a list of requested locales for the application in order of preference. It will cause the corresponding language pack to become active. + +If this policy is disabled or not configured, the application will use the default locale. + Security Devices + If this policy is enabled, you can specify a list of PKCS #11 modules to be installed. Modules are specified as a name and a fully qualified path. + +If this policy is disabled or not configured, no additional PKCS #11 modules will be installed. Search bar location If this policy is enabled, you can set whether the search bar is separate from the URL bar. @@ -357,8 +513,64 @@ If this policy is disabled or not configured, the Firefox default engine is used If this policy is enabled, the user cannot install search engines from web page. If this policy is disabled or not configured, search engines can be installed from web pages. + Remove Search Engines + If this policy is enabled, you can specify the names of engines to be removed or hidden. + +If this policy is disabled or not configured, search engines will not be removed or hidden. + Search Suggestions + If this policy is disabled, search suggestions will be disabled. + +If this policy is enabled, search suggestions will be enabled. + +If this policy is not configured, search suggestions will be enabled, but the user can turn them off. + Minimum SSL version enabled + If this policy is enabled, Firefox will not use SSL/TLS versions less than the value specified. + +If this policy is disabled or not configured, Firefox defaults to a minimum of TLS 1.0. + Maximum SSL version enabled + If this policy is enabled, Firefox will not use SSL/TLS versions greater than the value specified. + +If this policy is disabled or not configured, Firefox defaults to a maximum of TLS 1.3. + TLS 1.0 + TLS 1.1 + TLS 1.2 + TLS 1.3 + If this policy is enabled, the preference is locked to true. If this policy is disabled, the preference is locked to false. + If this policy is enabled, the preference is locked to the string entered. If this policy is disabled, it has no effect. + If this policy is enabled, the preference is locked to the value selected. If this policy is disabled, it has no effect. + Ask Every Time + Select Automatically + app.update.auto + browser.cache.disk.enable + browser.fixup.dns_first_for_single_words + browser.search.update + browser.tabs.warnOnClose + browser.cache.disk.parent_directory + browser.urlbar.suggest.bookmark + browser.urlbar.suggest.history + browser.urlbar.suggest.openpage + datareporting.policy.dataSubmissionPolicyBypassNotification + browser.dom.disable_window_flip + dom.disable_window_move_resize + dom.event.contextmenu.enabled + dom.keyboardevent.keypress.hack.dispatch_non_printable_keys.addl + dom.keyboardevent.keypress.hack.use_legacy_keycode_and_charcode.addl + extensions.getAddons.showPane + media.gmp-gmpopenh264.enabled + media.gmp-widevinecdm.enabled + network.dns.disableIPv6 + network.IDN_show_punycode + places.history.enabled + security.default_personal_cert + security.ssl.errorReporting.enabled + ui.key.menuAccessKeyFocuses + + + + + @@ -366,6 +578,15 @@ If this policy is disabled or not configured, search engines can be installed fr Always allow NTLM on non FQDNs Always allow SPNEGO on non FQDNs + + + + + + + + + @@ -398,6 +619,9 @@ If this policy is disabled or not configured, search engines can be installed fr Additional homepages + + + Title: @@ -445,6 +669,9 @@ If this policy is disabled or not configured, search engines can be installed fr + + + Don't allow proxy settings to be changed. Connection Type: @@ -480,6 +707,46 @@ If this policy is disabled or not configured, search engines can be installed fr Do not prompt for authentication if password is saved. Proxy DNS when using SOCKS v5. + + Provider URL: + + + Enable DNS over HTTPS. + Don't allow DNS over HTTPS preferences to be changed. + + + + + + + + + + + + + + + + Cache + Cookies + Download History + Form & Search History + Browsing History + Active Logins + Site Preferences + Offline Website Data + + + Search + Top Sites + Download History + Recommended by Pocket + Snippets + Don't allow settings to be changed +