X-Git-Url: https://git.p6c8.net/policy-templates.git/blobdiff_plain/ebaf15ad5c676495e31806aa04ad81d497849779..a70791f6c6bdb5c4c1d4588ac58fc88eaa14ed2a:/docs/index.md?ds=sidebyside diff --git a/docs/index.md b/docs/index.md index d7ea44d..f9558cf 100644 --- a/docs/index.md +++ b/docs/index.md @@ -90,6 +90,7 @@ Note: The `policies.json` must use the UTF-8 encoding. | **[`LocalFileLinks`](#localfilelinks)** | Enable linking to local files by origin. | **[`ManagedBookmarks`](#managedbookmarks)** | Configures a list of bookmarks managed by an administrator that cannot be changed by the user. | **[`ManualAppUpdateOnly`](#manualappupdateonly)** | Allow manual updates only and do not notify the user about updates. +| **[`MicrosoftEntraSSO`](#microsoftentrasso)** | Allow single sign-on for Microsoft Entra accounts on macOS. | **[`NetworkPrediction`](#networkprediction)** | Enable or disable network prediction (DNS prefetching). | **[`NewTabPage`](#newtabpage)** | Enable or disable the New Tab page. | **[`NoDefaultBookmarks`](#nodefaultbookmarks)** | Disable the creation of default bookmarks. @@ -107,6 +108,7 @@ Note: The `policies.json` must use the UTF-8 encoding. | **[`Preferences`](#preferences)** | Set and lock preferences. | **[`PrimaryPassword`](#primarypassword)** | Require or prevent using a primary (formerly master) password. | **[`PrintingEnabled`](#printingenabled)** | Enable or disable printing. +| **[`PrivateBrowsingModeAvailability`](#privatebrowsingmodeavailability)** | Set availability of private browsing mode. | **[`PromptForDownloadLocation`](#promptfordownloadlocation)** | Ask where to save each file before downloading. | **[`Proxy`](#proxy)** | Configure proxy settings. | **[`RequestedLocales`](#requestedlocales)** | Set the the list of requested locales for the application in order of preference. @@ -332,7 +334,7 @@ OMA-URI: Value (string): ``` - + ``` #### macOS ``` @@ -1270,7 +1272,7 @@ Configure Firefox to use an agent for Data Loss Prevention (DLP) that is compati `ShowBlockedResult` indicates whether Firefox should show a notification when a DLP request is denied. The default is true. -**Compatibility:** Firefox 130\ +**Compatibility:** Firefox 132\ **CCK2 Equivalent:** N/A\ **Preferences Affected:** `browser.contentanalysis.agent_name`, `browser.contentanalysis.agent_timeout`, `browser.contentanalysis.allow_url_regex_list`, `browser.contentanalysis.bypass_for_same_tab_operations`, `browser.contentanalysis.client_signature`, `browser.contentanalysis.default_result`, `browser.contentanalysis.deny_url_regex_list`, `browser.contentanalysis.enabled`, `browser.contentanalysis.is_per_user`, `browser.contentanalysis.pipe_path_name`, `browser.contentanalysis.show_blocked_result` @@ -2154,6 +2156,8 @@ Value (string): ### DisablePrivateBrowsing Remove access to private browsing. +This policy is superseded by [`PrivateBrowsingModeAvailability`](#privatebrowsingmodeavailability) + **Compatibility:** Firefox 60, Firefox ESR 60\ **CCK2 Equivalent:** `disablePrivateBrowsing`\ **Preferences Affected:** N/A @@ -4308,6 +4312,30 @@ Value (string): } } ``` +### MicrosoftEntraSSO +Allow single sign-on for Microsoft Entra accounts on macOS. + +If this policy is set to true, Firefox will use credentials stored in the Company Portal to sign in to Microsoft Entra accounts. + +**Compatibility:** Firefox 132.0.1, Firefox ESR 128.5\ +**CCK2 Equivalent:** N/A\ +**Preferences Affected:** `network.http.microsoft-entra-sso.enabled` + +#### macOS +``` + + MicrosoftEntraSSO + | + +``` +#### policies.json +``` +{ + "policies": { + "MicrosoftEntraSSO": true | false + } +} +``` ### NetworkPrediction Enable or disable network prediction (DNS prefetching). @@ -5272,9 +5300,9 @@ as well as the following security preferences: | security.mixed_content.block_active_content | boolean | true |     If set to true, mixed active content (HTTP subresources such as scripts, fetch requests, etc. on a HTTPS page) will be blocked. | security.mixed_content.block_display_content | boolean | false -|     If set to true, mixed passive/display content (HTTP subresources such as images, videos, etc. on a HTTPS page) will be blocked. (Firefox 127, Firefox ESR 128.0) +|     If set to true, mixed passive/display content (HTTP subresources such as images, videos, etc. on a HTTPS page) will be blocked and ```security.mixed_content.upgrade_display_content``` will be ignored. (Firefox 127, Firefox ESR 128.0) | security.mixed_content.upgrade_display_content | boolean | true -|     If set to true, mixed passive/display content (HTTP subresources such as images, videos, etc. on a HTTPS page) will be upgraded to HTTPS. (Firefox 127, Firefox ESR 128.0) +|     If set to false, mixed passive/display content (HTTP subresources such as images, videos, etc. on a HTTPS page) will NOT be upgraded to HTTPS. (Firefox 127, Firefox ESR 128.0) | security.osclientcerts.autoload | boolean | false |     If true, client certificates are loaded from the operating system certificate store. | security.OCSP.enabled | integer | 1 @@ -5506,6 +5534,48 @@ Value (string): } } ``` +### PrivateBrowsingModeAvailability +Set availability of private browsing mode. + +Possible values are `0` (Private Browsing mode is available), `1` (Private Browsing mode not available), and `2`(Private Browsing mode is forced). + +This policy supersedes [`DisablePrivateBrowsing`](#disableprivatebrowsing) + +Note: This policy missed Firefox ESR 128.2, but it will be in Firefox ESR 128.3. + +**Compatibility:** Firefox 130, Firefox ESR 128.3\ +**CCK2 Equivalent:** N/A\ +**Preferences Affected:** N/A + +#### Windows (GPO) +``` +Software\Policies\Mozilla\Firefox\PrivateBrowsingModeAvailability = 0x0 | 0x1 | 0x2 +``` +#### Windows (Intune) +OMA-URI: +``` +./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PrivateBrowsingModeAvailability +``` +Value (string): +``` + + +``` +#### macOS +``` + + PrivateBrowsingModeAvailability + 0 | 1 | 2 + +``` +#### policies.json +``` +{ + "policies": { + "PrivateBrowsingModeAvailability": 0 | 1 | 2 + } +} +``` ### PromptForDownloadLocation Ask where to save each file before downloading. @@ -5836,7 +5906,7 @@ Note: Starting with Firefox 128, History clears FormData and Downloads as well. `SiteSettings` Site Preferences -`OfflineApps` Offline Website Data. +`OfflineApps` Offline Website Data (*Deprecated - part of Cookies*) `Locked` prevents the user from changing these preferences. @@ -5848,12 +5918,9 @@ Note: Starting with Firefox 128, History clears FormData and Downloads as well. ``` Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Cache = 0x1 | 0x0 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Cookies = 0x1 | 0x0 -Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Downloads = 0x1 | 0x0 -Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\FormData = 0x1 | 0x0 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\History = 0x1 | 0x0 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Sessions = 0x1 | 0x0 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\SiteSettings = 0x1 | 0x0 -Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\OfflineApps = 0x1 | 0x0 Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Locked = 0x1 | 0x0 ``` #### Windows (Intune) @@ -5875,22 +5942,6 @@ Value (string): ``` OMA-URI: ``` -./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/C_SanitizeOnShutdown_Downloads -``` -Value (string): -``` - or -``` -OMA-URI: -``` -./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/D_SanitizeOnShutdown_FormData -``` -Value (string): -``` - or -``` -OMA-URI: -``` ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/E_SanitizeOnShutdown_History ``` Value (string): @@ -5915,14 +5966,6 @@ Value (string): ``` OMA-URI: ``` -./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/H_SanitizeOnShutdown_OfflineApps -``` -Value (string): -``` - or -``` -OMA-URI: -``` ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~SanitizeOnShutdown/I_SanitizeOnShutdown_Locked ``` Value (string): @@ -5938,18 +5981,12 @@ Value (string): | Cookies | - Downloads - | - FormData - | History | Sessions | SiteSettings | - OfflineApps - | Locked | @@ -5962,12 +5999,9 @@ Value (string): "SanitizeOnShutdown": { "Cache": true | false, "Cookies": true | false, - "Downloads": true | false, - "FormData": true | false, "History": true | false, "Sessions": true | false, "SiteSettings": true | false, - "OfflineApps": true | false, "Locked": true | false } } @@ -6674,11 +6708,13 @@ Prevent Firefox from messaging the user in certain situations. `MoreFromMozilla` If false, don't show the "More from Mozilla" section in Preferences. (Firefox 98) +`FirefoxLabs` If false, don't show the "Firefox Labs" section in Preferences. (Firefox 130.0.1) + `Locked` prevents the user from changing user messaging preferences. **Compatibility:** Firefox 75, Firefox ESR 68.7\ **CCK2 Equivalent:** N/A\ -**Preferences Affected:** `browser.newtabpage.activity-stream.asrouter.userprefs.cfr.addons`, `browser.newtabpage.activity-stream.asrouter.userprefs.cfr.features`, `browser.aboutwelcome.enabled`, `browser.preferences.moreFromMozilla` +**Preferences Affected:** `browser.newtabpage.activity-stream.asrouter.userprefs.cfr.addons`, `browser.newtabpage.activity-stream.asrouter.userprefs.cfr.features`, `browser.aboutwelcome.enabled`, `browser.preferences.moreFromMozilla`, `browser.preferences.experimental` #### Windows (GPO) ``` @@ -6687,6 +6723,7 @@ Software\Policies\Mozilla\Firefox\UserMessaging\FeatureRecommendations = 0x1 | 0 Software\Policies\Mozilla\Firefox\UserMessaging\UrlbarInterventions = 0x1 | 0x0 Software\Policies\Mozilla\Firefox\UserMessaging\SkipOnboarding = 0x1 | 0x0 Software\Policies\Mozilla\Firefox\UserMessaging\MoreFromMozilla = 0x1 | 0x0 +Software\Policies\Mozilla\Firefox\UserMessaging\FirefoxLabs = 0x1 | 0x0 Software\Policies\Mozilla\Firefox\UserMessaging\Locked = 0x1 | 0x0 ``` #### Windows (Intune) @@ -6697,6 +6734,7 @@ OMA-URI: ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_UrlbarInterventions ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_SkipOnboarding ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_MoreFromMozilla +./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_FirefoxLabs ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~UserMessaging/UserMessaging_Locked ``` Value (string): @@ -6718,6 +6756,8 @@ Value (string): | MoreFromMozilla | + FirefoxLabs + | Locked | @@ -6733,6 +6773,7 @@ Value (string): "UrlbarInterventions": true | false, "SkipOnboarding": true | false, "MoreFromMozilla": true | false, + "FirefoxLabs": true | false, "Locked": true | false } }