From: Michael Kaply <345868+mkaply@users.noreply.github.com> Date: Thu, 25 Jul 2019 18:00:08 +0000 (-0500) Subject: Merge branch 'master' into SupportMenu X-Git-Tag: v1.8.1~3^2~1 X-Git-Url: https://git.p6c8.net/policy-templates.git/commitdiff_plain/c6855c16e88996a3f7ebd930973c4b68ecd31bfa?ds=sidebyside;hp=-c Merge branch 'master' into SupportMenu --- c6855c16e88996a3f7ebd930973c4b68ecd31bfa diff --combined README.md index e60fbe9,0143b5a..ddcd1b2 --- a/README.md +++ b/README.md @@@ -31,31 -31,41 +31,41 @@@ Policies can be specified using the Gro | **[`DisablePrivateBrowsing`](#disableprivatebrowsing)** | Remove access to private browsing. | **[`DisableProfileImport`](#disableprofileimport)** | Disables the "Import data from another browser" option in the bookmarks window. | **[`DisableProfileRefresh`](#disableprofilerefresh)** | Disable the Refresh Firefox button on about:support and support.mozilla.org - | **[`DisableSafeMode`](#disablesafemode)** | Disable safe mode. + | **[`DisableSafeMode`](#disablesafemode)** | Disable safe mode within the browser. | **[`DisableSecurityBypass`](#disablesecuritybypass)** | Prevent the user from bypassing security in certain cases. | **[`DisableSystemAddonUpdate`](#disablesystemaddonupdate)** | Prevent system add-ons from being installed or update. | **[`DisableTelemetry`](#disabletelemetry)** | DisableTelemetry | **[`DisplayBookmarksToolbar`](#displaybookmarkstoolbar)** | Set the initial state of the bookmarks toolbar. - | **[`DisplayMenuBar`](#displaymenubar)** | Set the initial state of the menubar + | **[`DisplayMenuBar`](#displaymenubar)** | Set the initial state of the menubar. | **[`DNSOverHTTPS`](#dnsoverhttps)** | Configure DNS over HTTPS. | **[`DontCheckDefaultBrowser`](#dontcheckdefaultbrowser)** | Don't check if Firefox is the default browser at startup. + | **[`DefaultDownloadDirectory`](#defaultdownloaddirectory)** | Set the default download directory. + | **[`DownloadDirectory`](#downloaddirectory)** | Set and lock the download directory. | **[`EnableTrackingProtection`](#enabletrackingprotection)** | Configure tracking protection. + | **[`EnterprisePoliciesEnabled`](#enterprisepoliciesenabled)** | Enable policy support on macOS. | **[`Extensions`](#extensions)** | Control the installation, uninstallation and locking of extensions. + | **[`ExtensionSettings`](#extensionsettings)** | Manage all aspects of extensions. | **[`ExtensionUpdate`](#extensionupdate)** | Control extension updates. | **[`FlashPlugin`](#flashplugin)** | Configure the default Flash plugin policy as well as origins for which Flash is allowed. + | **[`FirefoxHome`](#firefoxhome)** | Customize the Firefox Home page. | **[`HardwareAcceleration`](#hardwareacceleration)** | Control hardware acceleration. | **[`Homepage`](#homepage)** | Configure the default homepage and how Firefox starts. | **[`InstallAddonsPermission`](#installaddonspermission)** | Configure the default extension install policy as well as origins for extension installs are allowed. + | **[`LocalFileLinks`](#localfilelinks)** | Enable linking to local files by origin. | **[`NetworkPrediction`](#networkprediction)** | Enable or disable network prediction (DNS prefetching). + | **[`NewTabPage`](#newtabpage)** | Enable or disable the New Tab page. | **[`NoDefaultBookmarks`](#nodefaultbookmarks)** | Disable the creation of default bookmarks. | **[`OfferToSaveLogins`](#offertosavelogins)** | Control whether or not Firefox offers to save passwords. | **[`OverrideFirstRunPage`](#overridefirstrunpage)** | Override the first run page. | **[`OverridePostUpdatePage`](#overridepostupdatepage)** | Override the upgrade page. - | **[`PopupBlocking`](#popupblocking)** | Configure the default pop-up window policy as well as origins for which pop-up windows are allowed. | **[`Permissions`](#permissions)** | Set permissions associated with camera, microphone, location, and notifications. + | **[`PopupBlocking`](#popupblocking)** | Configure the default pop-up window policy as well as origins for which pop-up windows are allowed. + | **[`Preferences`](#preferences)** | Set and lock some preferences. + | **[`PromptForDownloadLocation`](#promptfordownloadlocation)** | Ask where to save each file before downloading. | **[`Proxy`](#proxy)** | Configure proxy settings. | **[`RequestedLocales`](#requestedlocales)** | Set the the list of requested locales for the application in order of preference. - | **[`SanitizeOnShutdown`](#sanitizeonshutdown)** | Clear all data on shutdown. + | **[`SanitizeOnShutdown` (All)](#sanitizeonshutdown-all)** | Clear all data on shutdown. + | **[`SanitizeOnShutdown` (Selective)](#sanitizeonshutdown-selective)** | Clear data on shutdown. | **[`SearchBar`](#searchbar)** | Set whether or not search bar is displayed. | **[`SearchEngines`](#searchengines-this-policy-is-only-available-on-the-esr)** | | **[`SearchEngines -> Default`](#searchengines--default)** | Set the default search engine. @@@ -63,11 -73,12 +73,12 @@@ | **[`SearchEngines -> Remove`](#searchengines--remove)** | Hide built-in search engines. | **[`SearchEngines -> Add`](#searchengines--add)** | Add new search engines. | **[`SecurityDevices`](#securitydevices)** | Install PKCS #11 modules. + | **[`SearchSuggestEnabled`](#searchsuggestenabled)** | Enable search suggestions. | **[`SSLVersionMax`](#sslversionmax)** | Set and lock the maximum version of TLS. | **[`SSLVersionMin`](#sslversionmin)** | Set and lock the minimum version of TLS. +| **[`SupportMenu`](#supportmenu)** | Add a menuitem to the help menu for specifying support information. | **[`WebsiteFilter`](#websitefilter)** | Block websites from being visited. - ### AppUpdateURL Change the URL for application update. @@@ -907,7 -918,9 +918,9 @@@ Software\Policies\Mozilla\Firefox\Disab } ``` ### DisableSafeMode - Disable safe mode. + Disable safe mode within the browser. + + On Windows, this disables safe mode via the command line as well. **Compatibility:** Firefox 60, Firefox ESR 60 (Windows, macOS)\ **CCK2 Equivalent:** `disableSafeMode`\ @@@ -1147,6 -1160,60 +1160,60 @@@ Software\Policies\Mozilla\Firefox\DontC } } ``` + ### DefaultDownloadDirectory + Set the default download directory. + + You can use ${home} for the native home directory. + + **Compatibility:** Firefox 68, Firefox ESR 68\ + **CCK2 Equivalent:** N/A\ + **Preferences Affected:** `browser.download.dir`,`browser.download.folderList` + + #### Windows + ``` + Software\Policies\Mozilla\Firefox\DefaultDownloadDirectory = "${home}\Downloads" + ``` + #### macOS + ``` + + DefaultDownloadDirectory + ${home}/Downloads + + ``` + #### JSON + ``` + { + "policies": { + "DefaultDownloadDirectory": "${home}/Downloads" + } + ``` + ### DownloadDirectory + Set and lock the download directory. + + You can use ${home} for the native home directory. + + **Compatibility:** Firefox 68, Firefox ESR 68\ + **CCK2 Equivalent:** N/A\ + **Preferences Affected:** `browser.download.dir`,`browser.download.folderList`,`browser.download.useDownloadDir` + + #### Windows + ``` + Software\Policies\Mozilla\Firefox\DownloadDirectory = "${home}\Downloads" + ``` + #### macOS + ``` + + DownloadDirectory + ${home}/Downloads + + ``` + #### JSON + ``` + { + "policies": { + "DownloadDirectory": "${home}/Downloads" + } + ``` ### EnableTrackingProtection Configure tracking protection. @@@ -1188,6 -1255,20 +1255,20 @@@ Software\Policies\Mozilla\Firefox\Enabl } } ``` + ### EnterprisePoliciesEnabled + Enable policy support on macOS. + + **Compatibility:** Firefox 63, Firefox ESR 60.3 (macOS only)\ + **CCK2 Equivalent:** N/A\ + **Preferences Affected:** N/A + + #### macOS + ``` + + EnterprisePoliciesEnabled + + + ``` ### Extensions Control the installation, uninstallation and locking of extensions. @@@ -1243,6 -1324,78 +1324,78 @@@ Software\Policies\Mozilla\Firefox\Exten } } ``` + ### ExtensionSettings + Manage all aspects of extensions. This policy is based heavily on the [Chrome policy](https://dev.chromium.org/administrators/policy-list-3/extension-settings-full) of the same name. + + This policy maps an extension ID to its configuration. With an extension ID, configuration will be applied to the specified extension only. A default configuration can be set for the special ID "*", which will apply to all extensions that don't have a custom configuration set in this policy. + + To obtain an extension ID, install the extension and go to about:support. You will see the ID in the Extensions section. + + The configuration for each extension is another dictionary that can contain the fields documented below. + + | Name | Description | + | --- | --- | + | `installation_mode` | Maps to a string indicating the installation mode for the extension. The valid strings are `allowed`,`blocked`,`force_installed`, and `normal_installed`. + |         `allowed` | Allows the extension to be installed by the user. This is the default behavior. + |         `blocked`| Blocks installation of the extension and removes it from the device if already installed. + |         `force_installed`| The extension is automatically installed and can't be removed by the user. This option is not valid for the default configuration and requires an install_url. + |         `normal_installed`| The extension is automatically installed but can be disabled by the user. This option is not valid for the default configuration and requires an install_url. + | `install_url`| Maps to a string indicating where Firefox can download a force_installed or normal_installed extension. If installing from the addons.mozilla.org, use the following URL (substituting SHORT_NAME from the URL on AMO), https://addons.mozilla.org/firefox/downloads/latest/SHORT_NAME/latest.xpi + | `install_sources` | Each item in this list is an extension-style match pattern. Users will be able to easily install items from any URL that matches an item in this list. Both the location of the *.xpi file and the page where the download is started from (i.e. the referrer) must be allowed by these patterns. This setting can be used only for the default configuration. + | `allowed_types` | This setting whitelists the allowed types of extension/apps that can be installed in Firefox. The value is a list of strings, each of which should be one of the following: "extension", "theme", "dictionary", "langpack" This setting can be used only for the default configuration. + | `blocked_install_message` | This maps to a string specifying the error message to display to users if they're blocked from installing an extension. This setting allows you to append text to the generic error message displayed when the extension is blocked. This could be be used to direct users to your help desk, explain why a particular extension is blocked, or something else. + + **Compatibility:** Firefox 68, Firefox ESR 68\ + **CCK2 Equivalent:** N/A\ + **Preferences Affected:** N/A + + #### Windows + Due to a bug in Firefox 68, this policy is not working via GPO on Windows. We will have a fix soon. + #### macOS + ``` + + ExtensionSettings + + * + + blocked_install_message + Custom error message. + install_sources + + https://addons.mozilla.org/ + + installation_mode + blocked + + uBlock0@raymondhill.net + + installation_mode + force_installed + install_url + https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi + + + + ``` + #### JSON + ``` + { + "policies": { + "ExtensionSettings": { + "*": { + "blocked_install_message": "Custom error message.", + "install_sources": ["https://addons.mozilla.org/"], + "installation_mode": "blocked" + }, + "uBlock0@raymondhill.net": { + "installation_mode": "force_installed", + "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi" + } + } + } + } + ``` + ### ExtensionUpdate Control extension updates. @@@ -1324,6 -1477,57 +1477,57 @@@ Software\Policies\Mozilla\Firefox\Flash } } ``` + ### FirefoxHome + Customize the Firefox Home page. + + **Compatibility:** Firefox 68, Firefox ESR 68\ + **CCK2 Equivalent:** N/A\ + **Preferences Affected:** `browser.newtabpage.activity-stream.showSearch`,`browser.newtabpage.activity-stream.feeds.topsites`,`browser.newtabpage.activity-stream.feeds.section.highlights`,`browser.newtabpage.activity-stream.feeds.section.topstories`,`browser.newtabpage.activity-stream.feeds.snippets` + + #### Windows + ``` + Software\Policies\Mozilla\Firefox\FirefoxHome\Search = 0x1 | 0x0 + Software\Policies\Mozilla\Firefox\FirefoxHome\TopSites = 0x1 | 0x0 + Software\Policies\Mozilla\Firefox\FirefoxHome\Highlights = 0x1 | 0x0 + Software\Policies\Mozilla\Firefox\FirefoxHome\Pocket = 0x1 | 0x0 + Software\Policies\Mozilla\Firefox\FirefoxHome\Snippets = 0x1 | 0x0 + Software\Policies\Mozilla\Firefox\FirefoxHome\Locked = 0x1 | 0x0 + ``` + #### macOS + ``` + + FirefoxHome + + Search + | + TopSites + | + Highlights + | + Pocket + | + Snippets + | + Locked + | + + + ``` + #### JSON + ``` + { + "policies": { + "FirefoxHome": { + "Search": true | false, + "TopSites": true | false, + "Highlights": true | false, + "Pocket": true | false, + "Snippets": true | false, + "Locked": true | false + } + } + } + ``` ### HardwareAcceleration Control hardware acceleration. @@@ -1450,6 -1654,37 +1654,37 @@@ Software\Policies\Mozilla\Firefox\Insta } } ``` + ### LocalFileLinks + Enable linking to local files by origin. + + **Compatibility:** Firefox 68, Firefox ESR 68\ + **CCK2 Equivalent:** N/A\ + **Preferences Affected:** `capability.policy.localfilelinks.*` + + #### Windows + ``` + Software\Policies\Mozilla\Firefox\LocalFileLinks\1 = "https://example.org" + Software\Policies\Mozilla\Firefox\LocalFileLinks\2 = "https://example.edu" + ``` + #### macOS + ``` + + LocalFileLinks + + http://example.org + http://example.edu + + + ``` + #### JSON + ``` + { + "policies": { + "LocalFileLinks": ["http://example.org/", + "http://example.edu/"] + } + } + ``` ### NoDefaultBookmarks Disable the creation of default bookmarks. @@@ -1479,7 -1714,7 +1714,7 @@@ Software\Policies\Mozilla\Firefox\NoDef } ``` ### NetworkPrediction - Enable or disable network prediction (DNS prefetching). + Enable or disable network prediction (DNS prefetching). **Compatibility:** Firefox 67, Firefox ESR 60.7\ **CCK2 Equivalent:** N/A\ @@@ -1503,6 -1738,31 +1738,31 @@@ Software\Policies\Mozilla\Firefox\Netwo "NetworkPrediction": true | false } ``` + ### NewTabPage + Enable or disable the New Tab page. + + **Compatibility:** Firefox 68, Firefox ESR 68\ + **CCK2 Equivalent:** N/A\ + **Preferences Affected:** `browser.newtabpage.enabled` + + #### Windows + ``` + Software\Policies\Mozilla\Firefox\NewTabPage = 0x1 | 0x0 + ``` + #### macOS + ``` + + NewTabPage + | + + ``` + #### JSON + ``` + { + "policies": { + "NewTabPage": true | false + } + ``` ### OfferToSaveLogins Control whether or not Firefox offers to save passwords. @@@ -1551,7 -1811,7 +1811,7 @@@ Software\Policies\Mozilla\Firefox\Overr ``` { "policies": { - "OverrideFirstRunPage": ""http://example.org"" + "OverrideFirstRunPage": "http://example.org" } ``` ### OverridePostUpdatePage @@@ -1576,7 -1836,7 +1836,7 @@@ Software\Policies\Mozilla\Firefox\Overr ``` { "policies": { - "OverridePostUpdatePage": ""http://example.org"" + "OverridePostUpdatePage": "http://example.org" } ``` ### Permissions @@@ -1764,8 -2024,95 +2024,95 @@@ Software\Policies\Mozilla\Firefox\Popup } } ``` + ### Preferences + Set and lock certain preferences. + + **Compatibility:** See below\ + **CCK2 Equivalent:** `preferences`\ + **Preferences Affected:** See below + + | Preference | Type | Compatibility + | --- | --- | --- + | app.update.auto | boolean | Firefox 68, Firefox 68 ESR + | browser.cache.disk.enable | boolean | Firefox 68, Firefox 68 ESR + | browser.cache.disk.parent_directory | string | Firefox 68, Firefox 68 ESR + | browser.fixup.dns_first_for_single_words | boolean | Firefox 68, Firefox 68 ESR + | browser.search.update | boolean | Firefox 68, Firefox 68 ESR + | browser.tabs.warnOnClose | boolean | Firefox 68, Firefox 68 ESR + | browser.urlbar.suggest.bookmark | boolean | Firefox 68, Firefox 68 ESR + | browser.urlbar.suggest.history | boolean | Firefox 68, Firefox 68 ESR + | browser.urlbar.suggest.openpage | boolean | Firefox 68, Firefox 68 ESR + | datareporting.policy.dataSubmissionPolicyBypassNotification | boolean | Firefox 68, Firefox 68 ESR + | dom.disable_window_flip | boolean | Firefox 68, Firefox 68 ESR + | dom.disable_window_move_resize | boolean | Firefox 68, Firefox 68 ESR + | dom.event.contextmenu.enabled | boolean | Firefox 68, Firefox 68 ESR + | dom.keyboardevent.keypress.hack.dispatch_non_printable_keys.addl | string | Firefox 68, Firefox 68 ESR + | dom.keyboardevent.keypress.hack.use_legacy_keycode_and_charcode.addl | string | Firefox 68, Firefox 68 ESR + | extensions.getAddons.showPane | boolean | Firefox 68, Firefox 68 ESR + | media.gmp-gmpopenh264.enabled | boolean | Firefox 68, Firefox 68 ESR + | media.gmp-widevinecdm.enabled | boolean | Firefox 68, Firefox 68 ESR + | network.dns.disableIPv6 | boolean | Firefox 68, Firefox 68 ESR + | network.IDN_show_punycode | boolean | Firefox 68, Firefox 68 ESR + | places.history.enabled | boolean | Firefox 68, Firefox 68 ESR + | security.default_personal_cert | string | Firefox 68, Firefox 68 ESR + | security.ssl.errorReporting.enabled | boolean | Firefox 68, Firefox 68 ESR + | ui.key.menuAccessKeyFocuses | boolean | Firefox 68, Firefox 68 ESR + #### Windows + ``` + Software\Policies\Mozilla\Firefox\Preferences\boolean_preference_name = 0x1 | 0x0 + Software\Policies\Mozilla\Firefox\Preferences\string_preference_name = "string_value" + ``` + #### macOS + ``` + + Preferences + + boolean_preference_name + | + string_preference_name + string_value + + + ``` + #### JSON + ``` + { + "policies": { + "Preferences": { + "boolean_preference_name": true | false, + "string_preference_name": "string_value" + } + } + } + ``` + ### PromptForDownloadLocation + Ask where to save each file before downloading. + + **Compatibility:** Firefox 68, Firefox ESR 68\ + **CCK2 Equivalent:** N/A + **Preferences Affected:** `browser.download.useDownloadDir` + + #### Windows + ``` + Software\Policies\Mozilla\Firefox\PromptForDownloadLocation = 0x1 | 0x0 + ``` + #### macOS + ``` + + PromptForDownloadLocation + | + + ``` + #### JSON + ``` + { + "policies": { + "PromptForDownloadLocation": true | false + } + } + ``` ### Proxy - Configugre proxy settings. These settings correspond to the connection settings in Firefox preferences. + Configure proxy settings. These settings correspond to the connection settings in Firefox preferences. To specify ports, append them to the hostnames with a colon (:). `Mode` is the proxy method being used. @@@ -1867,13 -2214,19 +2214,19 @@@ Software\Policies\Mozilla\Firefox\Proxy ### RequestedLocales Set the the list of requested locales for the application in order of preference. It will cause the corresponding language pack to become active. - **Compatibility:** Firefox 64, Firefox ESR 60.4\ + Note: For Firefox 68, this can now be a string so that you can specify an empty value. + + **Compatibility:** Firefox 64, Firefox ESR 60.4, Updated in Firefox 68, Firefox ESR 68\ **CCK2 Equivalent:** N/A\ **Preferences Affected:** N/A #### Windows ``` Software\Policies\Mozilla\Firefox\RequestedLocales\1 = "de" Software\Policies\Mozilla\Firefox\RequestedLocales\2 = "en-US" + + or + + Software\Policies\Mozilla\Firefox\RequestedLocales = "de,en-US" ``` #### macOS ``` @@@ -1884,6 -2237,14 +2237,14 @@@ en-US + + or + + + RequestedLocales + de,en-US + + ``` #### JSON ``` @@@ -1892,13 -2253,79 +2253,79 @@@ "RequestedLocales": ["de", "en-US"] } } + + or + + { + "policies": { + "RequestedLocales": "de,en-US" + } + } + ``` + ### SanitizeOnShutdown (Selective) + Clear data on shutdown. Choose from Cache, Cookies, Download History, Form & Search History, Browsing History, Active Logins, Site Preferences and Offline Website Data. + + **Compatibility:** Firefox 68, Firefox ESR 68\ + **CCK2 Equivalent:** N/A\ + **Preferences Affected:** `privacy.sanitize.sanitizeOnShutdown`,`privacy.clearOnShutdown.cache`,`privacy.clearOnShutdown.cookies`,`privacy.clearOnShutdown.downloads`,`privacy.clearOnShutdown.formdata`,`privacy.clearOnShutdown.history`,`privacy.clearOnShutdown.sessions`,`privacy.clearOnShutdown.siteSettings`,`privacy.clearOnShutdown.offlineApps` + #### Windows + ``` + Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Cache = 0x1 | 0x0 + Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Cookies = 0x1 | 0x0 + Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Downloads = 0x1 | 0x0 + Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\FormData = 0x1 | 0x0 + Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\History = 0x1 | 0x0 + Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\Sessions = 0x1 | 0x0 + Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\SiteSettings = 0x1 | 0x0 + Software\Policies\Mozilla\Firefox\SanitizeOnShutdown\OfflineApps = 0x1 | 0x0 + ``` + #### macOS + ``` + + SanitizeOnShutdown + + Cache + | + Cookies + | + Downloads + | + FormData + | + History + | + Sessions + | + SiteSettings + | + OfflineApps + | + + ``` - ### SanitizeOnShutdown + #### JSON + ``` + { + "policies": { + "SanitizeOnShutdown": { + "Cache": true | false, + "Cookies": true | false, + "Downloads": true | false, + "FormData": true | false, + "History": true | false, + "Sessions": true | false, + "SiteSettings": true | false, + "OfflineApps": true | false + } + } + } + ``` + ### SanitizeOnShutdown (All) Clear all data on shutdown, including Browsing & Download History, Cookies, Active Logins, Cache, Form & Search History, Site Preferences and Offline Website Data. **Compatibility:** Firefox 60, Firefox ESR 60\ **CCK2 Equivalent:** N/A\ - **Preferences Affected:** `privacy.sanitize.sanitizeOnShutdown,privacy.clearOnShutdown.cache,privacy.clearOnShutdown.cookies,privacy.clearOnShutdown.downloads,privacy.clearOnShutdown.formdata,privacy.clearOnShutdown.history,privacy.clearOnShutdown.sessions,privacy.clearOnShutdown.siteSettings,privacy.clearOnShutdown.offlineApps` + **Preferences Affected:** `privacy.sanitize.sanitizeOnShutdown`,`privacy.clearOnShutdown.cache`,`privacy.clearOnShutdown.cookies`,`privacy.clearOnShutdown.downloads`,`privacy.clearOnShutdown.formdata`,`privacy.clearOnShutdown.history`,`privacy.clearOnShutdown.sessions`,`privacy.clearOnShutdown.siteSettings`,`privacy.clearOnShutdown.offlineApps` #### Windows ``` Software\Policies\Mozilla\Firefox\SanitizeOnShutdown = 0x1 | 0x0 @@@ -2052,7 -2479,7 +2479,7 @@@ Software\Policies\Mozilla\Firefox\Searc ``` ### SearchEngines | Add - Adddd new search engines (up to five). This policy is only available on the ESR. `Name` and `URLTemplate` are required. + Add new search engines (up to five). This policy is only available on the ESR. `Name` and `URLTemplate` are required. `Name` is the name of the search engine. @@@ -2066,9 -2493,11 +2493,11 @@@ `Description` is a description of the search engine. + `PostData` is the POST data as name value pairs separated by &. + `SuggestURLTemplate` is a search suggestions URL with {searchTerms} to substitute for the search term. - **Compatibility:** Firefox ESR 60\ + **Compatibility:** Firefox ESR 60 (POST support in Firefox ESR 68)\ **CCK2 Equivalent:** `searchplugins`\ **Preferences Affected:** N/A @@@ -2080,6 -2509,7 +2509,7 @@@ Software\Policies\Mozilla\Firefox\Searc Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Alias = "example" Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\Description = "Example Description" Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\SuggestURLTemplate = "https://www.example.org/suggestions/q={searchTerms}" + Software\Policies\Mozilla\Firefox\SearchEngines\Add\1\PostData = "name=value&q={searchTerms}" #### macOS ``` @@@ -2103,6 -2533,8 +2533,8 @@@ Example Description SuggestURLTemplate https://www.example.org/suggestions/q={searchTerms} + PostData + name=value&q={searchTerms} @@@ -2121,6 -2553,7 +2553,7 @@@ "IconURL": "https://www.example.org/favicon.ico", "Alias": "example", "Description": "Description", + "PostData": "name=value&q={searchTerms}", "SuggestURLTemplate": "https://www.example.org/suggestions/q={searchTerms}" } ] @@@ -2128,6 -2561,33 +2561,33 @@@ } } ``` + ### SearchSuggestEnabled + + Enable search suggestions. + + **Compatibility:** Firefox 68, Firefox ESR 68\ + **CCK2 Equivalent:** N/A\ + **Preferences Affected:** `browser.urlbar.suggest.searches`,`browser.search.suggest.enabled` + + ### Windows + ``` + Software\Policies\Mozilla\Firefox\SearchSuggestEnabled = 0x1 | 0x0 + ``` + #### macOS + ``` + + SearchSuggestEnabled + | + + ``` + ### JSON + ``` + { + "policies": { + "SearchSuggestEnabled": true | false + } + } + ``` ### SecurityDevices Install PKCS #11 modules. @@@ -2217,45 -2677,6 +2677,45 @@@ Software\Policies\Mozilla\Firefox\SSLVe } } ``` +### SupportMenu +Add a menuitem to the help menu for specifying support information. + - **Compatibility:** Firefox 68, Firefox ESR 68\ ++**Compatibility:** Firefox 68.0.1, Firefox ESR 68.0.1\ +**CCK2 Equivalent:** helpMenu\ +**Preferences Affected:** N/A + +#### Windows +``` +Software\Policies\Mozilla\Firefox\SupportMenu\Title = "Support Menu" +Software\Policies\Mozilla\Firefox\SupportMenu\URL = "http://example.com/support" +Software\Policies\Mozilla\Firefox\SupportMenu\Title = "S" +``` +#### macOS +``` + + SupportMenu + + Title + SupportMenu + URL + http://example.com/support + AccessKey + S + + +``` +### JSON +``` +{ + "policies": { + "SupportMenu": { + "Title": "Support Menu", + "URL": "http://example.com/support", + "AccessKey": "S" + } + } +} +``` ### WebsiteFilter Block websites from being visited. The parameters take an array of Match Patterns, as documented in https://developer.mozilla.org/en-US/Add-ons/WebExtensions/Match_patterns. Only http/https addresses are supported at the moment. The arrays are limited to 1000 entries each. diff --combined mac/org.mozilla.firefox.plist index 8405a89,1c6a590..7d0bcad --- a/mac/org.mozilla.firefox.plist +++ b/mac/org.mozilla.firefox.plist @@@ -99,6 -99,10 +99,10 @@@ Locked + DefaultDownloadDirectory + ${home}/Downloads + DownloadDirectory + ${home}/Downloads DNSOverHTTPS Enabled @@@ -175,8 -179,44 +179,44 @@@ firefox@ghostery.com + ExtensionSettings + + * + + blocked_install_message + Custom error message. + install_sources + + https://addons.mozilla.org/ + + installation_mode + blocked + + uBlock0@raymondhill.net + + installation_mode + force_installed + install_url + https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi + + ExtensionUpdate + FirefoxHome + + Search + + TopSites + + Highlights + + Pocket + + Snippets + + Locked + + FlashPlugin Allow @@@ -219,8 -259,15 +259,15 @@@ Default + LocalFileLinks + + http://example.org + http://example.edu + NetworkPrediction + NewTabPage + NoDefaultBookmarks OfferToSaveLogins @@@ -304,6 -351,13 +351,13 @@@ Locked + Preferences + + app.update.auto + + security.default_personal_cert + Ask Every Time + Proxy SocksVersion @@@ -345,14 -399,5 +399,14 @@@ tls1.2 SSLVersionMax tls1.3 + SupportMenu + + Title + Click here for help + URL + http://example.edu/ + AccessKey + C + diff --combined windows/en-US/firefox.adml index 15ff6ae,6e21991..25aa0a3 --- a/windows/en-US/firefox.adml +++ b/windows/en-US/firefox.adml @@@ -1,5 -1,5 +1,5 @@@ - + @@@ -11,6 -11,7 +11,7 @@@ Firefox 64 or later, Firefox 60.4 ESR or later Firefox 66 or later, Firefox 60.6 ESR or later Firefox 67 or later, Firefox 60.7 ESR or later + Firefox 68 or later, Firefox 68 ESR or later Firefox 60 ESR or later Firefox Permissions @@@ -28,6 -29,7 +29,7 @@@ Flash Home page Search + Preferences Allowed Sites Blocked Sites Custom Update URL @@@ -88,6 -90,14 +90,14 @@@ If this policy is disabled or not confi If this policy is enabled, Firefox will install the listed certificates into Firefox. It will look in %USERPROFILE%\AppData\Local\Mozilla\Certificates and %USERPROFILE%\AppData\Roaming\Mozilla\Certificates. If this policy is disabled or not configured, Firefox will not install additional certificates. + Default Download Directory + If this policy is enabled, you can set the default directory for downloads. ${home} can be used for the native home path. + + If this policy is disabled or not configured, the default Firefox download directory is used. + Download Directory + If this policy is enabled, you can set and lock the directory for downloads. ${home} can be used for the native home path. + + If this policy is disabled or not configured, the default Firefox download directory is used and the user can change it. Configure DNS Over HTTPS If this policy is enabled, the default configuration for DNS over HTTPS can be changed. @@@ -206,10 -216,18 +216,18 @@@ If this policy is enabled or not config If this policy is disabled, hardware acceleration and cannot be enabled. If this policy is enabled or not configured, hardware acceleration is enabled. + Local File Links + If this policy is enabled, you can specify origins where linking to local files is allowed. + + If this policy is disabled or not configured, websites can't link to local files. Network Prediction If this policy is disabled, network prediction (DNS prefetching) will be disabled. If this policy is enabled or not configured, network prediction (DNS prefetching) will be enabled. + New Tab Page + If this policy is disabled, the new tab page will be blank. + + If this policy is enabled or not configured, the new tab page will be the default. Offer to save logins If this policy is enabled or not configured, Firefox will offer to save website logins and passwords. @@@ -317,6 -335,10 +335,10 @@@ If this policy is disabled or not confi If this policy is enabled, notification preferences cannot be changed by the user. If this policy is disabled or not configured, the user can change their notification preferences. + Customize Firefox Home + If this policy is enabled, you can choose the sections displayed on Firefox Home and prevent the user from changing them. + + If this policy is disabled or not configured, the default sections are displayed and the user can change them. If this policy is enabled, Flash is activated by default for the origins indicated unless Flash is completely disabled. If a top level domain is specified (http://example.org), Flash is allowed for all subdomains as well. If this policy is disabled or not configured, the default Flash policy is followed. @@@ -341,8 -363,8 +363,8 @@@ If this policy is disabled or not confi If this policy is enabled, you can specify a URL to be displayed after Firefox is updated. If you leave the URL blank, no upgrade page will be shown. If this policy is disabled or not configured, the upgrade is displayed. - Clear all data when browser is closed - If this policy is enabled, all data is cleared when Firefox is closed. This includes Browsing & Download History, Cookies, Active Logins, Cache, Form & Search History, Site Preferences and Offline Website Data. + Clear data when browser is closed + If this policy is enabled, you can choose data to be cleared when Firefox is closed. If this policy is disabled or not configured, data is not cleared when the browser is closed. Blocked websites @@@ -429,6 -451,12 +451,12 @@@ If this policy is disabled or not confi None Homepage Previous Session + Prompt for download location + If this policy is disabled, the user is not prompted for a download location. + + If this policy is enabled, the user is always prompted for a download location. + + If this policy is not configured, the user is prompted for a download location, but can change the default. Proxy Settings If this policy is enabled, you can configure and lock network settings. @@@ -454,6 -482,7 +482,7 @@@ If this policy is disabled, tracking pr If this policy is enabled, private browsing is enabled by default in both the browser and private browsing and you can choose whether or not to prevent the user from changing it. Requested locale + Requested locale (string) If this policy is enabled, you can specify a list of requested locales for the application in order of preference. It will cause the corresponding language pack to become active. If this policy is disabled or not configured, the application will use the default locale. @@@ -489,6 -518,12 +518,12 @@@ If this policy is disabled or not confi If this policy is enabled, you can specify the names of engines to be removed or hidden. If this policy is disabled or not configured, search engines will not be removed or hidden. + Search Suggestions + If this policy is disabled, search suggestions will be disabled. + + If this policy is enabled, search suggestions will be enabled. + + If this policy is not configured, search suggestions will be enabled, but the user can turn them off. Minimum SSL version enabled If this policy is enabled, Firefox will not use SSL/TLS versions less than the value specified. @@@ -497,14 -532,39 +532,43 @@@ If this policy is disabled or not confi If this policy is enabled, Firefox will not use SSL/TLS versions greater than the value specified. If this policy is disabled or not configured, Firefox defaults to a maximum of TLS 1.3. + Support Menu + If this policy is enabled, a new menuitem is added to the help menu with support information. + +If this policy is disabled or not configured, no menuitem is added. TLS 1.0 TLS 1.1 TLS 1.2 TLS 1.3 + If this policy is enabled, the preference is locked to true. If this policy is disabled, the preference is locked to false. + If this policy is enabled, the preference is locked to the string entered. If this policy is disabled, it has no effect. + If this policy is enabled, the preference is locked to the value selected. If this policy is disabled, it has no effect. + Ask Every Time + Select Automatically + app.update.auto + browser.cache.disk.enable + browser.fixup.dns_first_for_single_words + browser.search.update + browser.tabs.warnOnClose + browser.cache.disk.parent_directory + browser.urlbar.suggest.bookmark + browser.urlbar.suggest.history + browser.urlbar.suggest.openpage + datareporting.policy.dataSubmissionPolicyBypassNotification + browser.dom.disable_window_flip + dom.disable_window_move_resize + dom.event.contextmenu.enabled + dom.keyboardevent.keypress.hack.dispatch_non_printable_keys.addl + dom.keyboardevent.keypress.hack.use_legacy_keycode_and_charcode.addl + extensions.getAddons.showPane + media.gmp-gmpopenh264.enabled + media.gmp-widevinecdm.enabled + network.dns.disableIPv6 + network.IDN_show_punycode + places.history.enabled + security.default_personal_cert + security.ssl.errorReporting.enabled + ui.key.menuAccessKeyFocuses @@@ -604,6 -664,9 +668,9 @@@ + + + @@@ -659,20 -722,35 +726,49 @@@ + + Title: + + + URL: + + + Access key: + + + + + + + + + + + + + + + Cache + Cookies + Download History + Form & Search History + Browsing History + Active Logins + Site Preferences + Offline Website Data + + + Search + Top Sites + Download History + Recommended by Pocket + Snippets + Don't allow settings to be changed + diff --combined windows/firefox.admx index 0ad7e9d,aa17af0..75ef4bb --- a/windows/firefox.admx +++ b/windows/firefox.admx @@@ -1,10 -1,10 +1,10 @@@  - + - + @@@ -15,13 -15,13 +15,13 @@@ + - @@@ -67,6 -67,9 +67,9 @@@ + + + @@@ -392,6 -395,20 +395,20 @@@ + + + + + + + + + + + + + + @@@ -676,6 -693,13 +693,13 @@@ + + + + + + + @@@ -685,7 -709,17 +709,17 @@@ - + + + + + + + + + + + @@@ -740,6 -774,60 +774,60 @@@ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + @@@ -788,6 -876,16 +876,16 @@@ + + + + + + + + + + @@@ -811,15 -909,81 +909,81 @@@ - + - + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + @@@ -2067,6 -2231,16 +2231,16 @@@ + + + + + + + + + + @@@ -2125,6 -2299,7 +2299,7 @@@ + @@@ -2149,6 -2324,7 +2324,7 @@@ + @@@ -2173,6 -2349,7 +2349,7 @@@ + @@@ -2197,6 -2374,7 +2374,7 @@@ + @@@ -2221,6 -2399,7 +2399,7 @@@ + @@@ -2268,6 -2447,13 +2447,13 @@@ + + + + + + + @@@ -2324,15 -2510,244 +2510,253 @@@ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + Ask Every Time + + + + + Select Automatically + + + + + -