X-Git-Url: https://git.p6c8.net/policy-templates.git/blobdiff_plain/2b827326642e7ef9ccd0c64fed1487b5df560984..89869dfbb5e805f1d3813ca08f4e8f9445158ace:/windows/en-US/firefox.adml diff --git a/windows/en-US/firefox.adml b/windows/en-US/firefox.adml index 09a6d3f..193eee9 100644 --- a/windows/en-US/firefox.adml +++ b/windows/en-US/firefox.adml @@ -1,5 +1,5 @@ - + @@ -15,17 +15,47 @@ Firefox 68 or later, Firefox 68 ESR or later Firefox 68.0.1 or later, Firefox 68.0.1 ESR or later Firefox 60 ESR or later + Firefox 68.5 ESR or later Firefox 69 or later, Firefox 68.1 ESR or later Firefox 70 or later, Firefox 68.2 ESR or later Firefox 71 or later, Firefox 68.3 ESR or later Firefox 72 or later, Firefox 68.4 ESR or later Firefox 73 or later, Firefox 68.5 ESR or later + Firefox 74 or later, Firefox 68.6 ESR or later + Firefox 75 or later, Firefox 68.7 ESR or later + Firefox 75 or later + Firefox 76 or later, Firefox 68.8 ESR or later + Firefox 76 or later + Firefox 77 or later, Firefox 68.9 ESR or later + Firefox 77 or later + Firefox 78 or later + Firefox 79 or later, Firefox 78.1 ESR or later + Firefox 80 or later, Firefox 78.2 ESR or later + Firefox 81 or later, Firefox 78.3 ESR or later + Firefox 82 or later, Firefox 78.4 ESR or later + Firefox 83 or later, Firefox 78.5 ESR or later + Firefox 84 or later, Firefox 78.6 ESR or later + Firefox 85 or later, Firefox 78.7 ESR or later + Firefox 86 or later, Firefox 78.8 ESR or later + Firefox 88 or later, Firefox 78.10 ESR or later + Firefox 89 or later, Firefox 78.11 ESR or later + Firefox 90 or later, Firefox 78.12 ESR or later + Firefox 91 or later + Firefox 95 or later, Firefox 91.4 ESR or later + Firefox 96 or later, Firefox 91.5 ESR or later + Firefox 96 or later + Firefox 97 or later, Firefox 91.6 ESR or later + Firefox 98 or later, Firefox 91.7 ESR or later + Firefox 99 or later, Firefox 91.8 ESR or later + Firefox 100 or later, Firefox 91.9 ESR or later Firefox Permissions Camera Microphone Location Notifications + Autoplay + Virtual Reality Authentication Bookmarks Certificates @@ -36,9 +66,21 @@ Flash Home page Search - Preferences + Preferences (Deprecated) + User Messaging + Disabled Ciphers + Encrypted Media Extensions + PDF.js + Picture-in-Picture Allowed Sites + Allowed Sites (Session Only) Blocked Sites + Application Autoupdate + If this policy is enabled, Firefox is automatically updated without user approval. + +If this policy is disabled, Firefox updates are downloaded but the user can choose when to install the update. + +If this policy is not configured, the user can choose whether not Firefox is automatically updated. Custom Update URL If this policy is enabled, you can set a URL to an update server other than the default. This could be helpful if you run your own update server on your network. @@ -73,6 +115,10 @@ If this policy is enabled (and the checkboxes are checked) or not configured, NT If this policy is disabled, authentication preferences can be changed by the user. If this policy is enabled or not configured, authentication preferences cannot be changed by the user. + Allow authentication in private browsing + If this policy is enabled, integrated authentication is used in private browsing. + +If this policy is disabled or not configured, integrated authentication is not used in private browsing. Block Add-ons Manager If this policy is enabled, the user cannot access the Add-ons Manager or about:addons. @@ -113,7 +159,25 @@ If this policy is disabled or not configured, the default Firefox download direc If this policy is enabled, you can set and lock the directory for downloads. ${home} can be used for the native home path. If this policy is disabled or not configured, the default Firefox download directory is used and the user can change it. - Configure DNS Over HTTPS + DNS Over HTTPS + Enabled + If this policy is disabled, DNS over HTTPS is disabled. + +If this policy is enabled or not configured, DNS Over HTTPS is enabled. + Provider URL + If this policy is enabled, the URL specified is used as the provider URL. + +If this policy is disabled or not configured, the default provider is used. + + Locked + If this policy is enabled, DNS over HTTPS settings cannot be changed by the user. + +If this policy is disabled or not configured, DNS over HTTPS settings can be changed by the user. + Excluded Domains + If this policy is enabled, the specified domains are excluded from DNS over HTTPS. + +If this policy is disabled or not configured, no domains are excluded from DNS over HTTPS. + Configure DNS Over HTTPS (Moved) If this policy is enabled, the default configuration for DNS over HTTPS can be changed. If this policy is disabled or not configured, DNS Over HTTPS uses the default Firefox configuration. @@ -129,6 +193,12 @@ If this policy is disabled or not configured, the browser receives updates.If this policy is enabled, PDF files are not viewed within Firefox. If this policy is disabled or not configured, PDF files are viewed within Firefox. + Disable the default browser agent + If this policy is enabled, the default browser agent is disabled. + +If this policy is disabled or not configured, the default browser agent is enabled. + +For more information about the default browser agent, see https://firefox-source-docs.mozilla.org/toolkit/mozapps/defaultagent/default-browser-agent/index.html Disable Developer Tools If this policy is enabled, web developer tools are not available within Firefox. @@ -253,6 +323,14 @@ If this policy is enabled or not configured, hardware acceleration is enabled.If this policy is enabled, Firefox will not try to create different profiles for installations of Firefox in different directories. This is the equivalent of the MOZ_LEGACY_PROFILES environment variable. If this policy is disabled or not configured, Firefox will create a new profile for each unique installation of Firefox. + Revert to legacy SameSite behavior + If this policy is enabled, Firefox will revert to the legacy behavior of SameSite. This means that cookies that don't explicitly specify a SameSite attribute are treated as if they were SameSite=None. + +If this policy is disabled or not configured, Firefox will enforce SameSite=lax. + Revert to legacy SameSite behavior on specific domains + If this policy is enabled, Firefox will revert to the legacy behavior of SameSite for the specified domains. This means that cookies that don't explicitly specify a SameSite attribute are treated as if they were SameSite=None. + +If this policy is disabled or not configured, Firefox will enforce SameSite=lax for all domains. Local File Links If this policy is enabled, you can specify origins where linking to local files is allowed. @@ -278,7 +356,7 @@ In either case, the user will be able to change the value (it is not locked).If this policy is enabled, pop-up windows are always allowed for the origins indicated. If a top level domain is specified (http://example.org), pop-up windows are allowed for all subdomains as well. If this policy is disabled or not configured, the default pop-up policy is followed. - Allow pop-ups from websites + Block pop-ups from websites If this policy is disabled, pop-up windows are allowed from websites by default. If this policy is not configured or enabled, popups are not allowed from websites. @@ -295,15 +373,18 @@ If this policy is disabled or not configured, the default add-on policy is follo If this policy is not configured or enabled, add-ons can be installed. If this policy is enabled, cookies are always allowed for the origins indicated. If a top level domain is specified (http://example.org), cookies are allowed for all subdomains as well. +If this policy is disabled or not configured, the default cookie policy is followed. + If this policy is enabled, cookies are allowed for the origins indicated, but removed at the end of the session. If a top level domain is specified (http://example.org), cookies are allowed for all subdomains as well. + If this policy is disabled or not configured, the default cookie policy is followed. If this policy is enabled, cookies are blocked for the origins indicated. If a top level domain is specified (http://example.org), cookies are blocked from all subdomains as well. If this policy is disabled or not configured, cookies are not blocked by default. - Accept cookies from websites + Accept cookies from websites (Deprecated) If this policy is disabled, cookies are not accepted from websites by default. If this policy is not configured or enabled, cookies are accepted from websites. - Accept third-party cookies + Accept third-party cookies (Deprecated) If this policy is enabled and cookies are allowed, you can set when to accept third-party cookies. This setting is ignored if this policy is disabled or not configured or if cookies are not allowed. @@ -314,14 +395,26 @@ This setting is ignored if this policy is disabled or not configured or if cooki If this policy is enabled and cookies are allowed, they will expire when Firefox is closed. This setting is ignored if this policy is disabled or not configured or if cookies are not allowed. - Reject trackers + Reject trackers (Deprecated) If this policy is enabled and cookies are allowed, Firefox will reject tracker cookies by default. This setting is ignored if this policy is disabled or not configured or if cookies are not allowed. Do not allow preferences to be changed - If this policy is enabled, cookie preferences cannot be changed by the user. - -If this policy is disabled or not configured, the user can change their cookie preferences. + If this policy is enabled, cookie preferences cannot be changed by the user. + Cookie Behavior + If this policy is enabled, you can configure cookie behavior. + +If this policy is not configured or disabled, cookies are rejected for known trackers. + Cookie Behavior in private browsing + If this policy is enabled, you can configure cookie behavior in private browsing. + +If this policy is not configured or disabled, in private browsing, cookies are rejected for known trackers and third-party cookies are partitioned. + Accept all cookies + Reject third party cookies + Reject all cookies + Reject third party cookies for sites you haven't visited + Reject cookies for known trackers + Reject cookies for known trackers and partition third-party cookies (Total Cookie Protection) If this policy is enabled, access to the camera is always allowed for the origins indicated. If this policy is disabled or not configured, the default camera policy is followed. @@ -378,6 +471,39 @@ If this policy is disabled or not configured, any site that is not in the Block If this policy is enabled, notification preferences cannot be changed by the user. If this policy is disabled or not configured, the user can change their notification preferences. + If this policy is enabled, autoplay is always enabled for the origins indicated. + +If this policy is disabled or not configured, the default autoplay policy is followed. + If this policy is enabled, autoplay is always blocked for the origins indicated. + +If this policy is disabled or not configured, the default autoplay policy is followed. + Default autoplay level + If this policy is enabled, you can choose the default autoplay level. + +If this policy is disabled or not configured, audio is blocked by default. + +Note: Blocking audio and video does not work on the ESR. + Do not allow preferences to be changed + If this policy is enabled, autoplay preferences cannot be changed by the user. + +If this policy is disabled or not configured, the user can change autoplay preferences. + Allow Audio and Video + Block Audio + Block Audio and Video + If this policy is enabled, access to virtual reality devices is always allowed for the origins indicated. + +If this policy is disabled or not configured, the default virtual reality policy is followed. + If this policy is enabled, access to virtual reality devices is blocked for the origins indicated. + +If this policy is disabled or not configured, access to virtual reality devices is not blocked by default. + Block new requests asking to access virtual reality devices. + If this policy is enabled, sites that are not in the Allow policy will not be allowed to ask permission to access virtual reality devices. + +If this policy is disabled or not configured, any site that is not in the Block policy can ask permission to virtual reality devices. + Do not allow preferences to be changed + If this policy is enabled, virtual reality preferences cannot be changed by the user. + +If this policy is disabled or not configured, the user can change their virtual reality preferences. Customize Firefox Home If this policy is enabled, you can choose the sections displayed on Firefox Home and prevent the user from changing them. @@ -401,21 +527,63 @@ If this policy is disabled or not configured, the user can change their Flash pr Override the first run page If this policy is enabled, you can specify a URL to be used as the first run page. If you leave the URL blank, no first run page will be shown. +Starting with Firefox 83, Firefox ESR 78.5, you can also specify multiple URLS separated by a vertical bar (|). + If this policy is disabled or not configured, the first run page is displayed. Override the upgrade page If this policy is enabled, you can specify a URL to be displayed after Firefox is updated. If you leave the URL blank, no upgrade page will be shown. If this policy is disabled or not configured, the upgrade is displayed. - Clear data when browser is closed + Clear data when browser is closed (Moved) If this policy is enabled, you can choose data to be cleared when Firefox is closed. If this policy is disabled or not configured, data is not cleared when the browser is closed. + Clear data when browser is closed + + Cache + If the policy is enabled, the cache is cleared when the browser is closed. + +If this policy is disabled or not configured, the cache is not cleared when the browser is closed. + Cookies + If the policy is enabled, cookies are cleared when the browser is closed. + +If this policy is disabled or not configured, cookies are not cleared when the browser is closed. + Download History + If the policy is enabled, download history is cleared when the browser is closed. + +If this policy is disabled or not configured, download history is not cleared when the browser is closed. + Form & Search History + If the policy is enabled, form data is cleared when the browser is closed. + +If this policy is disabled or not configured, form data is not cleared when the browser is closed. + Browsing History + If the policy is enabled, browsing history is cleared when the browser is closed. + +If this policy is disabled or not configured, browsing history is not cleared when the browser is closed. + Active Logins + If the policy is enabled, sessions cleared when the browser is closed. + +If this policy is disabled or not configured, sessions not cleared when the browser is closed. + Site Preferences + If the policy is enabled, site preferences are cleared when the browser is closed. + +If this policy is disabled or not configured, site preferences are not cleared when the browser is closed. + Offline Website Data + If the policy is enabled, offline application storage is cleared when the browser is closed. + +If this policy is disabled or not configured, offline application storage is not cleared when the browser is closed. + Locked + If this policy is disabled, all shutdown preferences can be changed by the user. + +If this policy is enabled, any shutdown preferences explicitly set via policy cannot be changed by the user. + +If this policy is not configured, no shutdown preferences can be changed by the user (previous behavior). Blocked websites - If this policy is enabled, you can specify match patterns that indicate sites to be blocked. The match patterns are documented at https://developer.mozilla.org/en-US/Add-ons/WebExtensions/Match_patterns. Only http/https addresses are supported at the moment. There is a 1000 entry limit. + If this policy is enabled, you can specify match patterns that indicate sites to be blocked. The match patterns are documented at https://developer.mozilla.org/en-US/Add-ons/WebExtensions/Match_patterns. There is a 1000 entry limit. If this policy is disabled or not configured, no websites are blocked. Exceptions to blocked websites - If this policy is enabled, and the website filter is enabled, you can specify match patterns for sites you do not want to block. The match patterns are documented at https://developer.mozilla.org/en-US/Add-ons/WebExtensions/Match_patterns. Only http/https addresses are supported at the moment. There is a 1000 entry limit. + If this policy is enabled, and the website filter is enabled, you can specify match patterns for sites you do not want to block. The match patterns are documented at https://developer.mozilla.org/en-US/Add-ons/WebExtensions/Match_patterns. There is a 1000 entry limit. If this policy is disabled or not configured, there are no exceptions to the website filter. Bookmark 01 @@ -494,6 +662,13 @@ If this policy is disabled or not configured, the start page defaults to the pre None Homepage Previous Session + Homepage (Locked) + Show Home button on toolbar + If this policy is enabled, the home button will appear on the toolbar by default. + +If this policy is disabled, the home button will not appear on the toolbar by default. + +If this policy is not configured, Firefox will determine whether or not the home button appears on the toolbar by default. Password Manager If this policy is disabled, the password manager is not available via preferences. @@ -522,12 +697,35 @@ If this policy is disabled or not configured, the default network settings are u Manual proxy configuration Auto-detect proxy settings Automatic proxy configuration - Tracking Protection + Tracking Protection (Moved) If this policy is not configured, tracking protection is not enabled by default in the browser but it is enabled by default in private browsing and the user can change it. If this policy is disabled, tracking protection is disabled and locked in both the browser and private browsing. If this policy is enabled, private browsing is enabled by default in both the browser and private browsing and you can choose whether or not to prevent the user from changing it. + Tracking Protection + Enabled + If this policy is enabled, tracking protection is enabled. + +If this policy is disabled, tracking protection is disabled and cannot be changed by the user. + +If this policy is not configured, standard tracking protection is used and the user can change it. + Cryptomining + If this policy is enabled, scripts that use cryptomining are blocked. + +If this policy is disabled or not configured, scripts that use cryptomining are not blocked. + Fingerprinting + If this policy is enabled, scripts that use fingerprinting are blocked. + +If this policy is disabled or not configured, scripts that use fingerprinting are not blocked. + Exceptions + If this policy is enabled, you can specify origins where tracking protection is not enabled. + +If this policy is disabled or not configured, tracking protection is enabled for all websites. + Do not allow tracking protection preferences to be changed + If this policy is enabled, tracking protection preferences cannot be changed by the user. + +If this policy is disabled or not configured, the user can change tracking protection preferences. Requested locale Requested locale (string) If this policy is enabled, you can specify a list of requested locales for the application in order of preference. It will cause the corresponding language pack to become active. @@ -587,6 +785,126 @@ If this policy is disabled or not configured, Firefox defaults to a maximum of T If this policy is enabled, a new menuitem is added to the help menu with support information. If this policy is disabled or not configured, no menuitem is added. + What's New + If this policy is disabled, the What's new icon and menuitem will not be displayed. + +If this policy is enabled or not configured, the What's New icon and menuitem will be displayed. + Extension Recommendations + If this policy is disabled, extensions will not be recommended as the user visits websites. + +If this policy is enabled or not configured, extensions will be recommended as the user visits websites. + Feature Recommendations + If this policy is disabled, Firefox features will not be recommended as the user uses Firefox. + +If this policy is enabled or not configured, Firefox features will be recommended as the user uses Firefox. + Urlbar Interventions + If this policy is disabled, actions will not be recommended based on what the user types in the URL bar. + +If this policy is enabled or not configured, actions will be recommended based on what the user types in the URL bar. + Skip Onboarding + If this policy is enabled, onboarding messages will not be shown on the new tab page. + +If this policy is disabled or not configured, onboarding messages will be shown on the new tab page. + TLS_DHE_RSA_WITH_AES_128_CBC_SHA + TLS_DHE_RSA_WITH_AES_256_CBC_SHA + TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA + TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA + TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 + TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 + TLS_RSA_WITH_AES_128_CBC_SHA + TLS_RSA_WITH_AES_256_CBC_SHA + TLS_RSA_WITH_3DES_EDE_CBC_SHA + TLS_RSA_WITH_AES_128_GCM_SHA256 + TLS_RSA_WITH_AES_256_GCM_SHA384 + TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA + TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA + TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 + TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 + TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 + TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 + If this policy is enabled, the corresponding cipher is disabled. + +If this policy is disabled, the corresponding cipher is enabled. + +If this policy is not configured, the corresponding cipher is enabled or disabled based on the default in Firefox. + Enable Encrypted Media Extensions + If this policy is disabled, encrypted media extensions (like Widevine) are not downloaded by Firefox unless the user consents to installing them. + +If this policy is enabled or not configured, encrypted media extensions (like Widevine) are downloaded automatically and used by Firefox. + Lock Encrypted Media Extensions + If this policy is enabled and EncryptedMediaExtensions are disabled, Firefox will not download encrypted media extensions (like Widevine) or ask the user to install them. + +If this policy is not disabled or not configured, it has no effect. + Enable PDF.js + If this policy is disabled, the built-in PDF viewer is not used. + +If this policy is enabled or not configured, the built-in PDF viewer is used. + Enable Permissions + If this policy is enabled, the built-in PDF viewer will honor document permissions like preventing the copying of text. + +If this policy is not disabled or not configured, document permissions are ignored. + Enabled + If this policy is disabled, the Picture-in-Picture toggle does not appear on videos. + +If this policy is enabled or not configured, the Picture-in-Picture toggle is available on videos. + Locked + If this policy is enabled, Picture-in-Picture settings cannot be changed by the user. + +If this policy is disabled or not configured,Picture-in-Picture settings can be changed by the user. + Primary (Master) Password + If this policy is enabled, a primary password is required. + +If this policy is disabled, users cannot create a primary password. + +If this policy is not configured, users can choose to create a primary password. + Handlers + If this policy is enabled, you can use JSON to configure default application handlers. + +If this policy is disabled or not configured, Firefox defaults are used. + +For detailed information on creating the policy, see https://github.com/mozilla/policy-templates/blob/master/README.md#handlers. + Preferences + Note: In order to use this policy, you must clear all settings in the old Preferences (Deprecated) section. + +If this policy is enabled, you can use JSON to configure preferences. + +If this policy is disabled or not configured, preferences are not modified. + +For detailed information on creating the policy, see https://github.com/mozilla/policy-templates/blob/master/README.md#preferences. + Bookmarks (JSON) + If this policy is enabled, you can use JSON to configure bookmarks, including [] to clear all bookmarks. + +If this policy is disabled or not configured, the individual bookmark policies are used. + +If this policy is enabled along with individual bookmarks, those bookmarks will not be added. + +This policy has no effect on Managed Bookmarks. + +For detailed information on the JSON, see https://github.com/mozilla/policy-templates/blob/master/README.md#bookmarks. + Managed Bookmarks + If this policy is enabled, you can use JSON to configure managed bookmarks. + +If this policy is disabled or not configured, managed bookmarks are not added. + +For detailed information on creating the policy, see https://github.com/mozilla/policy-templates/blob/master/README.md#managedbookmarks. + Define domains allowed to access Google Workspace + If this policy is enabled, users can only access Google Workspace for the specified domains (separated by a comma). To allow access to Gmail, you can add consumer_accounts. + +If this policy is disabled or not configured, users can access any account on Google Workspace as well as Gmail. + Background updater + If this policy disabled, the application will not try to install updates when the application is not running. + +If this policy is enabled or not configured, application updates may be installed (without user approval) in the background, even when the application is not running. The operating system might still require approval. + Auto Launch Protocols From Origins + If this policy is enabled, you can define a list of external protocols that can be used from listed origins without prompting the user. + +If this policy is disabled or not configured, any site that invokes an external protocol will ask the user for permission. + +For detailed information on creating the policy, see https://github.com/mozilla/policy-templates/blob/master/README.md#autolaunchprotocolsfromorigins. + Windows SSO + If this policy is enabled, Firefox will use credentials stored in Windows to sign in to Microsoft, work, and school accounts. + +If this policy is disabled or not configured, credentials must be entered manually. If this policy is enabled, the preference is locked to true. If this policy is disabled, the preference is locked to false. For a description of the preference, see: @@ -632,11 +950,13 @@ https://github.com/mozilla/policy-templates/blob/master/README.md#preferences.dom.event.contextmenu.enabled dom.keyboardevent.keypress.hack.dispatch_non_printable_keys.addl dom.keyboardevent.keypress.hack.use_legacy_keycode_and_charcode.addl + dom.xmldocument.load.enabled + dom.xmldocument.async.enabled extensions.blocklist.enabled geo.enabled extensions.getAddons.showPane intl.accept_languages - media.eme.enabled + media.eme.enabled (Deprecated) media.gmp-gmpopenh264.enabled media.gmp-widevinecdm.enabled network.dns.disableIPv6 @@ -650,7 +970,8 @@ https://github.com/mozilla/policy-templates/blob/master/README.md#preferences.browser.newtabpage.activity-stream.default.sites extensions.htmlaboutaddons.recommendations.enabled media.peerconnection.enabled - media.peerconnection.ice.obfuscate_host_addresses.whitelist + media.peerconnection.ice.obfuscate_host_addresses.whitelist (Deprecated) + media.peerconnection.ice.obfuscate_host_addresses.blocklist security.osclientcerts.autoload security.tls.hello_downgrade_check widget.content.gtk-theme-override @@ -692,6 +1013,12 @@ https://github.com/mozilla/policy-templates/blob/master/README.md#preferences. + + + + + + @@ -702,6 +1029,9 @@ https://github.com/mozilla/policy-templates/blob/master/README.md#preferences.Exceptions: + + + @@ -764,6 +1094,9 @@ https://github.com/mozilla/policy-templates/blob/master/README.md#preferences. + + + @@ -844,6 +1177,9 @@ https://github.com/mozilla/policy-templates/blob/master/README.md#preferences. + + + @@ -860,17 +1196,36 @@ https://github.com/mozilla/policy-templates/blob/master/README.md#preferences. Search Top Sites + Sponsored Top Sites Download History Recommended by Pocket + Sponsored Pocket Stories Snippets Don't allow settings to be changed + + + + + + + + + + + + + + + +