X-Git-Url: https://git.p6c8.net/policy-templates.git/blobdiff_plain/a38d9286bab30dec315e27cfc131bec399e2b070..6ff33da10b0264e4bb84150ce4bcb45871497336:/README.md diff --git a/README.md b/README.md index 1ef0af0..be3de12 100644 --- a/README.md +++ b/README.md @@ -62,6 +62,7 @@ Policies can be specified using the [Group Policy templates on Windows](https:// | **[`InstallAddonsPermission`](#installaddonspermission)** | Configure the default extension install policy as well as origins for extension installs are allowed. | **[`LegacyProfiles`](#legacyprofiles)** | Disable the feature enforcing a separate profile for each installation. | **[`LocalFileLinks`](#localfilelinks)** | Enable linking to local files by origin. +| **[`ManagedBookmarks`](#managedbookmarks)** | Configures a list of bookmarks managed by an administrator that cannot be changed by the user. | **[`PrimaryPassword`](#primarypassword)** | Require or prevent using a primary (formerly master) password. | **[`NetworkPrediction`](#networkprediction)** | Enable or disable network prediction (DNS prefetching). | **[`NewTabPage`](#newtabpage)** | Enable or disable the New Tab page. @@ -1050,7 +1051,7 @@ Value (string): ``` { "policies": { - "DisabledCiphers" { + "DisabledCiphers": { "TLS_DHE_RSA_WITH_AES_128_CBC_SHA": true | false, "TLS_DHE_RSA_WITH_AES_256_CBC_SHA": true | false, "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA": true | false, @@ -1059,8 +1060,8 @@ Value (string): "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256": true | false, "TLS_RSA_WITH_AES_128_CBC_SHA": true | false, "TLS_RSA_WITH_AES_256_CBC_SHA": true | false, - "TLS_RSA_WITH_3DES_EDE_CBC_SHA": true | false - "TLS_RSA_WITH_AES_128_GCM_SHA256": true | false + "TLS_RSA_WITH_3DES_EDE_CBC_SHA": true | false, + "TLS_RSA_WITH_AES_128_GCM_SHA256": true | false, "TLS_RSA_WITH_AES_256_GCM_SHA384": true | false } } @@ -2783,7 +2784,7 @@ Configure the default homepage and how Firefox starts. `StartPage` is how Firefox starts. The choices are no homepage, the default homepage or the previous session. -With Firefox 78, an additional option as added for `Startpage`, `homepage-locked`. This allows for locking the homepage, but still allowing the user to choose whether or not they want to restore their session. +With Firefox 78, an additional option as added for `Startpage`, `homepage-locked`. If this is value is set for the Startpage, the user will always get the homepage at startup and cannot choose to restore their session. **Compatibility:** Firefox 60, Firefox ESR 60 (StartPage was added in Firefox 60, Firefox ESR 60.4, homepage-locked added in Firefox 78)\ **CCK2 Equivalent:** `homePage`,`lockHomePage`\ @@ -2991,6 +2992,165 @@ Value (string): } } ``` +### ManagedBookmarks +Configures a list of bookmarks managed by an administrator that cannot be changed by the user. + +The bookmarks are only added as a button on the personal toolbar. They are not in the bookmarks folder. + +The syntax of this policy is exactly the same as the [Chrome ManagedBookmarks policy](https://cloud.google.com/docs/chrome-enterprise/policies/?policy=ManagedBookmarks). The schema is: +``` +{ + "items": { + "id": "BookmarkType", + "properties": { + "children": { + "items": { + "$ref": "BookmarkType" + }, + "type": "array" + }, + "name": { + "type": "string" + }, + "toplevel_name": { + "type": "string" + }, + "url": { + "type": "string" + } + }, + "type": "object" + }, + "type": "array" +} +``` +**Compatibility:** Firefox 83, Firefox ESR 78.5\ +**CCK2 Equivalent:** N/A\ +**Preferences Affected:** N/A + +#### Windows (GPO) +``` +Software\Policies\Mozilla\Firefox\ManagedBookmarks (REG_MULTI_SZ) = +[ + { + "toplevel_name": "My managed bookmarks folder" + }, + { + "url": "example.com", + "name": "Example" + }, + { + "name": "Mozilla links", + "children": [ + { + "url": "https://mozilla.org", + "name": "Mozilla.org" + }, + { + "url": "https://support.mozilla.org/", + "name": "SUMO" + } + ] + } +] +``` +#### Windows (Intune) +OMA-URI: +``` +./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/ManagedBookmarks +``` +Value (string): +``` + + +``` +#### macOS +``` + + ManagedBookmarks + + + toplevel_name + My managed bookmarks folder + + url + example.com + name + Example + + + name + Mozilla links + children + + + url + https://mozilla.org + name + Mozilla + + + url + https://support.mozilla.org/ + name + SUMO + + + + + +``` +#### policies.json +``` +{ + "policies": { + "ManagedBookmarks": [ + { + "toplevel_name": "My managed bookmarks folder" + }, + { + "url": "example.com", + "name": "Example" + }, + { + "name": "Mozilla links", + "children": [ + { + "url": "https://mozilla.org", + "name": "Mozilla.org" + }, + { + "url": "https://support.mozilla.org/", + "name": "SUMO" + } + ] + } + ] + } +} +``` ### PrimaryPassword Require or prevent using a primary (formerly master) password. @@ -3643,7 +3803,7 @@ Value (string): ``` ### PictureInPicture -Enable or disable Picture-in-Picture. +Enable or disable Picture-in-Picture as well as lock it. **Compatibility:** Firefox 78, Firefox ESR 78\ **CCK2 Equivalent:** N/A\ @@ -3651,12 +3811,15 @@ Enable or disable Picture-in-Picture. #### Windows (GPO) ``` -Software\Policies\Mozilla\Firefox\PictureInPicture = 0x1 | 0x0 +Software\Policies\Mozilla\Firefox\PictureInPicture\Enabled = 0x1 | 0x0 +Software\Policies\Mozilla\Firefox\PictureInPicture\Locked = 0x1 | 0x0 + ``` #### Windows (Intune) OMA-URI: ``` -./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PictureInPicture +./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PictureInPicture/PictureInPicture_Enabled +./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~PictureInPicture/PictureInPicture_Locked ``` Value (string): ``` @@ -3666,14 +3829,22 @@ Value (string): ``` PictureInPicture - | + + Enabled + | + Locked + | + ``` #### policies.json ``` { "policies": { - "PictureInPicture": true | false + "PictureInPicture": { + "Enabled": true | false, + "Locked": true, false + } } } ``` @@ -3774,9 +3945,11 @@ intl. layout. media. network. +pdfjs. (Firefox 84, Firefox ESR 78.6) places. print. signon. (Firefox 83, Firefox ESR 78.5) +spellchecker. (Firefox 84, Firefox ESR 78.6) ui. widget. ``` @@ -3850,7 +4023,7 @@ OMA-URI: Value (string): ``` - or +``` +OMA-URI: +``` +./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/B_SanitizeOnShutdown_Cookies +``` +Value (string): +``` + or +``` +OMA-URI: +``` +./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/C_SanitizeOnShutdown_Downloads +``` +Value (string): +``` + or +``` +OMA-URI: +``` +./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/D_SanitizeOnShutdown_FormData +``` +Value (string): +``` + or +``` +OMA-URI: +``` +./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/E_SanitizeOnShutdown_History +``` +Value (string): +``` + or +``` +OMA-URI: +``` +./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/F_SanitizeOnShutdown_Sessions +``` +Value (string): +``` + or +``` +OMA-URI: +``` +./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/G_SanitizeOnShutdown_SiteSettings +``` +Value (string): +``` + or +``` +OMA-URI: +``` +./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/H_SanitizeOnShutdown_OfflineApps +``` +Value (string): +``` + or +``` +OMA-URI: +``` ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/I_SanitizeOnShutdown_Locked ``` Value (string):