Firefox policy reference

The following page lists all policies (also called "enterprise policies" or "group policies") available for Firefox that can be used to apply browser configuration for enterprise use cases. Each policy outlines its intended function, the settings you can adjust, examples of valid configurations, and any platform limitations.

Authentication

Authentication: Configure sites that support integrated authentication.
MicrosoftEntraSSO: Allow single sign-on for Microsoft Entra accounts on macOS.
WindowsSSO: Allow Windows single sign-on for Microsoft, work, and school accounts.

Bookmarks

Bookmarks: Add bookmarks in either the bookmarks toolbar or menu. Use 'ManagedBookmarks' instead.
DisableProfileImport: Disables the "Import data from another browser" option in the bookmarks window.
DisplayBookmarksToolbar: Set the initial state of the bookmarks toolbar.
ManagedBookmarks: Configures a list of bookmarks managed by an administrator that cannot be changed by the user.
NoDefaultBookmarks: Disable the creation of default bookmarks.

Browser UI

AllowFileSelectionDialogs: Enable or disable file selection dialogs.
DisableFeedbackCommands: Disable the menus for reporting sites (Submit Feedback, Report Deceptive Site).
DisableSetDesktopBackground: Remove the "Set As Desktop Background..." menuitem when right clicking on an image.
DisplayMenuBar: Set the state of the menubar.
SupportMenu: Add a menuitem to the help menu for specifying support information.

Browsing restrictions

DisablePrivateBrowsing: Remove access to private browsing.
PrivateBrowsingModeAvailability: Set availability of private browsing mode.
WebsiteFilter: Block websites from being visited.

Certificate management

Certificates: Install and manage certificates
Certificates: ImportEnterpriseRoots: Trust certificates that have been added to the operating system certificate store by a user or administrator.
Certificates: Install: Install certificates into the Firefox certificate store.
DisableSecurityBypass: Prevent the user from bypassing security in certain cases.
SecurityDevices: Add or delete PKCS #11 modules.

Cloud reporting

ContentAnalysis: Configure Firefox to use an agent for Data Loss Prevention (DLP) that is compatible with the Google Chrome Content Analysis Connector Agent SDK.

Content settings

EncryptedMediaExtensions: Enable or disable Encrypted Media Extensions and optionally lock it.
Permissions: Set permissions associated with camera, microphone, location, notifications, autoplay, and virtual reality.
PictureInPicture: Enable or disable Picture-in-Picture as well as prevent the user from enabling or disabling it (Locked).
PopupBlocking: Configure the default pop-up window policy as well as origins for which pop-up windows are allowed.
TranslateEnabled: Enable or disable webpage translation.

Device update settings

AppAutoUpdate: Enable or disable **automatic** application update.
AppUpdatePin: Prevent Firefox from being updated beyond the specified version.
AppUpdateURL: Change the URL for application update if you are providing Firefox updates from a custom update server.
BackgroundAppUpdate: Enable or disable automatic application update in the background, when the application is not running.
DisableAppUpdate: Turn off application updates within Firefox.
DisableSystemAddonUpdate: Prevent system add-ons from being installed or updated.
ManualAppUpdateOnly: Switch to manual updates only.

Downloads

DefaultDownloadDirectory: Set the default download directory.
DownloadDirectory: Set and lock the download directory.
PromptForDownloadLocation: Ask where to save each file before downloading.
StartDownloadsInTempDirectory: Force downloads to start off in a local, temporary location rather than the default download directory.

Extensions

BlockAboutAddons: Block access to the Add-ons Manager ('about:addons').
Containers: Set policies related to Multi-Account Containers.
Extensions: Control the installation, uninstallation and locking of extensions.
ExtensionSettings: Manage all aspects of extensions.
ExtensionUpdate: Control extension updates.
InstallAddonsPermission: Configure the default extension install policy as well as origins for extension installs are allowed.

Local data storage

DisableFormHistory: Turn off saving information on web forms and the search bar.
SanitizeOnShutdown (All): Clear all data on shutdown, including Browsing & Download History, Cookies, Active Logins, Cache, Form History, Site Preferences and Offline Website Data.
SanitizeOnShutdown (Selective): Clear data on shutdown.

Miscellaneous

DisableDefaultBrowserAgent: Prevent the default browser agent from taking any actions.
DisableFirefoxAccounts: Disable Firefox Accounts integration (Sync).
DisableFirefoxScreenshots: Remove access to Firefox Screenshots.
DisableFirefoxStudies: Disable Firefox studies (Shield).
DisableForgetButton: Disable the "Forget" button.
DisablePocket (deprecated): Remove Pocket in the Firefox UI.
DisableProfileRefresh: Disable the Refresh Firefox button on 'about:support' and 'support.mozilla.org', as well as the prompt that displays offering to refresh Firefox when you haven't used it in a while.
DisableTelemetry: Prevent the upload of telemetry data.
EnterprisePoliciesEnabled: Enable policy support on macOS.
HardwareAcceleration: Control hardware acceleration.
LegacyProfiles: Disable the feature enforcing a separate profile for each installation.
RequestedLocales: Set the the list of requested locales for the application in order of preference.
UserMessaging: Prevent Firefox from messaging the user in certain situations.

Network security

AllowedDomainsForApps: Define domains allowed to access Google Workspace.
AutoLaunchProtocolsFromOrigins: Define a list of external protocols that can be used from listed origins without prompting the user.
CaptivePortal: Enable or disable the detection of captive portals.
Cookies: Configure cookie preferences.
DisabledCiphers: Disable specific cryptographic ciphers, listed below.
DisableEncryptedClientHello: Disable the TLS Feature for Encrypted Client Hello.
DNSOverHTTPS: Configure DNS over HTTPS (DoH).
EnableTrackingProtection: Configure tracking protection.
ExemptDomainFileTypePairsFromFileTypeDownloadWarnings: Disable warnings based on file extension for specific file types on domains.
GoToIntranetSiteForSingleWordEntryInAddressBar: Whether to always go through the DNS server before sending a single word search string to a search engine.
HttpAllowlist: Configure sites that will not be upgraded to HTTPS.
HttpsOnlyMode: Configure HTTPS-Only Mode.
LegacySameSiteCookieBehaviorEnabled: Enable default legacy SameSite cookie behavior setting.
LegacySameSiteCookieBehaviorEnabledForDomainList: Revert to legacy SameSite behavior for cookies on specified sites.
LocalFileLinks: Enable linking to local files by origin.
NetworkPrediction: Enable or disable network prediction (DNS prefetching).
PostQuantumKeyAgreementEnabled: Enable post-quantum key agreement for TLS.
Proxy: Configure proxy settings.
SSLVersionMax: Set and lock the maximum version of TLS.
SSLVersionMin: Set and lock the minimum version of TLS.

Password manager

AutofillAddressEnabled: Enables or disables autofill for addresses.
AutofillCreditCardEnabled: Enables or disables autofill for payment methods.
DisableMasterPasswordCreation: Remove the master password functionality.
DisablePasswordReveal: Do not allow passwords to be shown in saved logins
OfferToSaveLogins: Control whether or not Firefox offers to save passwords.
OfferToSaveLoginsDefault: Sets the default value of 'signon.rememberSignons' without locking it.
PasswordManagerEnabled: Remove access to the password manager via preferences and blocks about:logins on Firefox 70.
PasswordManagerExceptions: Prevent Firefox from saving passwords for specific sites.
PrimaryPassword: Require or prevent using a primary (formerly master) password.

Printing

DisableBuiltinPDFViewer: Disable the built in PDF viewer.
PDFjs: Disable or configure PDF.js, the built-in PDF viewer.
PrintingEnabled: Enable or disable printing.
UseSystemPrintDialog: Use the system print dialog instead of the print preview window.

Search

FirefoxSuggest: Customize Firefox Suggest (US only).
SearchBar: Set whether or not search bar is displayed.
SearchEngines: The following policies allow for configuring search engines in Firefox.
SearchEngines: Add: Add new search engines.
SearchEngines: Default: Set the default search engine.
SearchEngines: PreventInstalls: Prevent installing search engines from webpages.
SearchEngines: Remove: Hide built-in search engines.
SearchSuggestEnabled: Enable search suggestions.

Security

3rdparty: Allow WebExtensions to configure policy.
BlockAboutConfig: Block access to 'about:config'.
BlockAboutProfiles: Block access to About Profiles ('about:profiles').
BlockAboutSupport: Block access to Troubleshooting Information ('about:support').
DisableDeveloperTools: Remove access to all developer tools.
DisableSafeMode: Disable safe mode (Troubleshoot Mode) within the browser.
DisableThirdPartyModuleBlocking: Do not allow blocking third-party modules from the 'about:third-party' page.
Preferences: Set and lock preferences.
SecurityDevices (deprecated): Install PKCS #11 modules.

Startup

DontCheckDefaultBrowser: Don't check if Firefox is the default browser at startup.
FirefoxHome: Customize the Firefox Home page.
Homepage: Configure the default homepage and how Firefox starts.
NewTabPage: Enable or disable the New Tab page.
OverrideFirstRunPage: Override the first run page.
OverridePostUpdatePage: Override the upgrade page.
ShowHomeButton: Show the home button on the toolbar.
SkipTermsOfUse: Configure display settings for the Firefox Terms of Use and Privacy Notice on startup.