

policy-3rdparty = Set policies that WebExtensions can access via chrome.storage.managed.

policy-AllowedDomainsForApps = Define domains allowed to access Google Workspace.

policy-AllowFileSelectionDialogs = Allow file selection dialogs.

policy-AppAutoUpdate = Enable or disable automatic application update.

policy-AppUpdatePin = Prevent { -brand-short-name } from being updated beyond the specified version.

policy-AppUpdateURL = Set custom app update URL.

policy-Authentication = Configure integrated authentication for websites that support it.

policy-AutofillAddressEnabled = Enable autofill for addresses.

policy-AutofillCreditCardEnabled = Enable autofill for payment methods.

policy-AutoLaunchProtocolsFromOrigins = Define a list of external protocols that can be used from listed origins without prompting the user.

policy-BackgroundAppUpdate2 = Enable or disable the background updater.

policy-BlockAboutAddons = Block access to the Add-ons Manager (about:addons).

policy-BlockAboutConfig = Block access to the about:config page.

policy-BlockAboutProfiles = Block access to the about:profiles page.

policy-BlockAboutSupport = Block access to the about:support page.

policy-Bookmarks = Create bookmarks in the Bookmarks toolbar, Bookmarks menu, or a specified folder inside them.

policy-CaptivePortal = Enable or disable captive portal support.

policy-CertificatesDescription = Add certificates or use built-in certificates.

policy-ContentAnalysis = Enable or disable connection to data-loss-prevention agent.

policy-Cookies = Allow or deny websites to set cookies.

policy-Containers = Set policies related to containers.

policy-DisableAccounts = Disable account-based services, including sync.

policy-DisabledCiphers = Disable ciphers.

policy-DefaultDownloadDirectory = Set the default download directory.

policy-DisableAppUpdate = Prevent the browser from updating.

policy-DisableBuiltinPDFViewer = Disable PDF.js, the built-in PDF viewer in { -brand-short-name }.

policy-DisableDefaultBrowserAgent = Prevent the default browser agent from taking any actions. Only applicable to Windows; other platforms don’t have the agent.

policy-DisableDeveloperTools = Block access to the developer tools.

policy-DisableEncryptedClientHello = Disable use of the TLS feature Encrypted Client Hello (ECH).

policy-DisableFeedbackCommands = Disable commands to send feedback from the Help menu (Submit Feedback and Report Deceptive Site).

policy-DisableFirefoxAccounts1 = Disable account-based services, including sync.

policy-DisableFirefoxScreenshots = Disable the Firefox Screenshots feature.

policy-DisableFirefoxStudies = Prevent { -brand-short-name } from running studies.

policy-DisableForgetButton = Prevent access to the Forget button.

policy-DisableFormHistory = Don’t remember search and form history.

policy-DisablePrimaryPasswordCreation = If true, a Primary Password can’t be created.

policy-DisablePasswordReveal = Do not allow passwords to be revealed in saved logins.

policy-DisablePocket2 = Disable the feature to save webpages to { -pocket-brand-name }.

policy-DisablePrivateBrowsing = Disable Private Browsing.

policy-DisableProfileImport = Disable the menu command to Import data from another browser.

policy-DisableProfileRefresh = Disable the Refresh { -brand-short-name } button in the about:support page.

policy-DisableSafeMode = Disable the feature to restart in Safe Mode. Note: the Shift key to enter Safe Mode can only be disabled on Windows using Group Policy.

policy-DisableSecurityBypass = Prevent the user from bypassing certain security warnings.

policy-DisableSetAsDesktopBackground = Disable the menu command Set as Desktop Background for images.

policy-DisableSystemAddonUpdate = Prevent the browser from installing and updating system add-ons.

policy-DisableTelemetry = Turn off Telemetry.

policy-DisableThirdPartyModuleBlocking = Prevent the user from blocking third-party modules that get injected into the { -brand-short-name } process.

policy-DisplayBookmarksToolbar = Display the Bookmarks Toolbar by default.

policy-DisplayMenuBar = Display the Menu Bar by default.

policy-DNSOverHTTPS = Configure DNS over HTTPS.

policy-DontCheckDefaultBrowser = Disable check for default browser on startup.

policy-DownloadDirectory = Set and lock the download directory.

policy-EnableTrackingProtection = Enable or disable Content Blocking and optionally lock it.

policy-EncryptedMediaExtensions = Enable or disable Encrypted Media Extensions and optionally lock it.

policy-ExemptDomainFileTypePairsFromFileTypeDownloadWarnings = Disable warnings based on file extension for specific file types on domains.

policy-Extensions = Install, uninstall or lock extensions. The Install option takes URLs or paths as parameters. The Uninstall and Locked options take extension IDs.

policy-ExtensionSettings = Manage all aspects of extension installation.

policy-ExtensionUpdate = Enable or disable automatic extension updates.

policy-FirefoxHome2 = Configure { -firefox-home-brand-name }.

policy-FirefoxSuggest = Configure { -firefox-suggest-brand-name }.

policy-GoToIntranetSiteForSingleWordEntryInAddressBar = Force direct intranet site navigation instead of searching when typing single word entries in the address bar.

policy-Handlers = Configure default application handlers.

policy-HardwareAcceleration = If false, turn off hardware acceleration.

policy-Homepage = Set and optionally lock the homepage.

policy-HttpAllowlist = Origins that will not be upgraded to HTTPS.

policy-HttpsOnlyMode = Allow HTTPS-Only Mode to be enabled.

policy-InstallAddonsPermission = Allow certain websites to install add-ons.

policy-LegacyProfiles = Disable the feature enforcing a separate profile for each installation.


policy-LegacySameSiteCookieBehaviorEnabled = Enable default legacy SameSite cookie behavior setting.

policy-LegacySameSiteCookieBehaviorEnabledForDomainList = Revert to legacy SameSite behavior for cookies on specified sites.


policy-LocalFileLinks = Allow specific websites to link to local files.

policy-ManagedBookmarks = Configures a list of bookmarks managed by an administrator that cannot be changed by the user.

policy-ManualAppUpdateOnly = Allow manual updates only and do not notify the user about updates.

policy-PrimaryPassword = Require or prevent using a Primary Password.

policy-PrintingEnabled = Enable or disable printing.

policy-NetworkPrediction = Enable or disable network prediction (DNS prefetching).

policy-NewTabPage = Enable or disable the New Tab page.

policy-NoDefaultBookmarks = Disable creation of the default bookmarks bundled with { -brand-short-name }, and the Smart Bookmarks (Most Visited, Recent Tags). Note: this policy is only effective if used before the first run of the profile.

policy-OfferToSaveLogins = Enforce the setting to allow { -brand-short-name } to offer to remember saved logins and passwords. Both true and false values are accepted.

policy-OfferToSaveLoginsDefault = Set the default value for allowing { -brand-short-name } to offer to remember saved logins and passwords. Both true and false values are accepted.

policy-OverrideFirstRunPage = Override the first run page. Set this policy to blank if you want to disable the first run page.

policy-OverridePostUpdatePage = Override the post-update “What’s New” page. Set this policy to blank if you want to disable the post-update page.

policy-PasswordManagerEnabled = Enable saving passwords to the password manager.

policy-PasswordManagerExceptions = Prevent { -brand-short-name } from saving passwords for specific sites.

policy-PostQuantumKeyAgreementEnabled = Enable post-quantum key agreement for TLS.

policy-PDFjs = Disable or configure PDF.js, the built-in PDF viewer in { -brand-short-name }.

policy-Permissions2 = Configure permissions for camera, microphone, location, notifications, and autoplay.

policy-PictureInPicture = Enable or disable Picture-in-Picture.

policy-PopupBlocking = Allow certain websites to display popups by default.

policy-Preferences = Set and lock the value for a subset of preferences.

policy-PrivateBrowsingModeAvailability = Set availability of private browsing mode.

policy-PromptForDownloadLocation = Ask where to save files when downloading.

policy-Proxy = Configure proxy settings.

policy-RequestedLocales = Set the list of requested locales for the application in order of preference.

policy-SanitizeOnShutdown2 = Clear navigation data on shutdown.

policy-SearchBar = Set the default location of the search bar. The user is still allowed to customize it.

policy-SearchEngines = Configure search engine settings. This policy is only available on the Extended Support Release (ESR) version.

policy-SearchSuggestEnabled = Enable or disable search suggestions.

policy-SecurityDevices2 = Add or delete PKCS #11 modules.

policy-ShowHomeButton = Show the home button on the toolbar.

policy-SSLVersionMax = Set the maximum SSL version.

policy-SSLVersionMin = Set the minimum SSL version.

policy-StartDownloadsInTempDirectory = Force downloads to start off in a local, temporary location rather than the default download directory.

policy-SupportMenu = Add a custom support menu item to the help menu.

policy-TranslateEnabled = Enable or disable webpage translation.

policy-UserMessaging = Don’t show certain messages to the user.

policy-UseSystemPrintDialog = Print using the system print dialog.

policy-WebsiteFilter = Block websites from being visited. See documentation for more details on the format.

policy-Windows10SSO = Allow Windows single sign-on for Microsoft, work, and school accounts.

policy-MicrosoftEntraSSO = Allow single sign-on for Microsoft Entra accounts.
