policy-templates

Enterprise policy descriptions and templates for Thunderbird

The templates of a newer version of Thunderbird usually also work with older releases, but they may contain policies which older releases don’t support. We suggest using the templates which correspond to the version of Thunderbird you are deploying.

List of supported policies

The following table states for each policy and setting since when Thunderbird supports it, when it was removed, and whether Firefox supports it.

Policy/Property Name Thunderbird Removed after Firefox
3rdparty 78.0   ✅
3rdparty_Extensions 78.0   ✅
3rdparty_Extensions_[name] 78.0   ✅
AIControls ❌   ✅
AllowFileSelectionDialogs ❌   ✅
AllowedDomainsForApps ❌   ✅
AppAutoUpdate 75.0   ✅
AppUpdatePin 104.0   ✅
AppUpdateURL 68.0   ✅
Authentication 78.0   ✅
Authentication_AllowNonFQDN 78.0   ✅
Authentication_AllowNonFQDN_NTLM 78.0   ✅
Authentication_AllowNonFQDN_SPNEGO 78.0   ✅
Authentication_AllowProxies 78.0   ✅
Authentication_AllowProxies_NTLM 78.0   ✅
Authentication_AllowProxies_SPNEGO 78.0   ✅
Authentication_Delegated 78.0   ✅
Authentication_Locked 78.0   ✅
Authentication_NTLM 78.0   ✅
Authentication_PrivateBrowsing 78.0   ✅
Authentication_SPNEGO 78.0   ✅
AutoLaunchProtocolsFromOrigins ❌   ✅
AutofillAddressEnabled ❌   ✅
AutofillCreditCardEnabled ❌   ✅
BackgroundAppUpdate 92.0   ✅
BlockAboutAddons 68.0   ✅
BlockAboutConfig 68.0   ✅
BlockAboutProfiles 68.0   ✅
BlockAboutSupport 68.0   ✅
Bookmarks ❌   ✅
BrowserDataBackup ❌   ✅
CNSA2KeyAgreementEnabled ❌   ✅
CaptivePortal 78.0   ✅
Certificates 68.0   ✅
Certificates_ImportEnterpriseRoots 68.0   ✅
Certificates_Install 68.0   ✅
ClearOnShutdown ❌   ✅
Containers ❌   ✅
ContentAnalysis ❌   ✅
Cookies 78.0   ✅
Cookies_AcceptThirdParty 78.0   ✅
Cookies_Allow 78.0   ✅
Cookies_AllowSession ❌   ✅
Cookies_Behavior ❌   ✅
Cookies_BehaviorPrivateBrowsing ❌   ✅
Cookies_Block 78.0   ✅
Cookies_Default 78.0   ✅
Cookies_ExpireAtSessionEnd 78.0   ✅
Cookies_Locked 78.0   ✅
Cookies_RejectTracker ❌   ✅
DNSOverHTTPS 92.0   ✅
DNSOverHTTPS_Enabled 92.0   ✅
DNSOverHTTPS_ExcludedDomains 92.0   ✅
DNSOverHTTPS_Fallback ❌   ✅
DNSOverHTTPS_Locked 92.0   ✅
DNSOverHTTPS_ProviderURL 92.0   ✅
DefaultBrowserSettingEnabled ❌   ✅
DefaultDownloadDirectory 78.0   ✅
DefaultSerialGuardSetting ❌   ✅
DisableAccounts ❌   ✅
DisableAppUpdate 68.0   ✅
DisableBuiltinPDFViewer 92.0   ✅
DisableChat 157.0   ❌
DisableCommunity 157.0   ❌
DisableDataCollectionSettings 156.0   ❌
DisableDefaultBrowserAgent ❌   ✅
DisableDeveloperTools 68.0   ✅
DisableEncryptedClientHello ❌   ✅
DisableExperimentalFeatures 155.0   ❌
DisableFeedbackCommands ❌   ✅
DisableFileLink 157.0   ❌
DisableFirefoxAccounts ❌   ✅
DisableFirefoxScreenshots ❌   ✅
DisableFirefoxStudies ❌   ✅
DisableForgetButton ❌   ✅
DisableFormHistory ❌   ✅
DisableLaunchOnLogin ❌   ✅
DisableMasterPasswordCreation 68.0   ✅
DisableMessageForwardingFilters 156.0   ❌
DisablePasswordReveal 78.0   ✅
DisablePocket ❌   ✅
DisablePrivateBrowsing ❌   ✅
DisableProfileImport ❌   ✅
DisableProfileRefresh ❌   ✅
DisableQRExport 155.0   ❌
DisableRemoteImprovements ❌   ✅
DisableRemoteSettingsAndAcceptSecurityConsequences ❌   ✅
DisableSafeMode 78.0   ✅
DisableSecurityBypass 68.0   ✅
DisableSecurityBypass_InvalidCertificate 68.0   ✅
DisableSecurityBypass_SafeBrowsing 68.0   ✅
DisableSetDesktopBackground ❌   ✅
DisableSystemAddonUpdate 77.0   ✅
DisableTelemetry 78.0   ✅
DisableThirdPartyModuleBlocking ❌   ✅
DisableUpdateSettings 156.0   ❌
DisabledCiphers 76.0   ✅
DisabledCiphers_TLS_AES_128_GCM_SHA256 ❌   ✅
DisabledCiphers_TLS_AES_256_GCM_SHA384 ❌   ✅
DisabledCiphers_TLS_CHACHA20_POLY1305_SHA256 ❌   ✅
DisabledCiphers_TLS_DHE_RSA_WITH_AES_128_CBC_SHA 76.0   ✅
DisabledCiphers_TLS_DHE_RSA_WITH_AES_256_CBC_SHA 76.0   ✅
DisabledCiphers_TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA 102.0   ✅
DisabledCiphers_TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 76.0   ✅
DisabledCiphers_TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA 102.0   ✅
DisabledCiphers_TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 102.0   ✅
DisabledCiphers_TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 102.0   ✅
DisabledCiphers_TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA 76.0   ✅
DisabledCiphers_TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 76.0   ✅
DisabledCiphers_TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA 76.0   ✅
DisabledCiphers_TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 102.0   ✅
DisabledCiphers_TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 102.0   ✅
DisabledCiphers_TLS_RSA_WITH_3DES_EDE_CBC_SHA 76.0   ✅
DisabledCiphers_TLS_RSA_WITH_AES_128_CBC_SHA 76.0   ✅
DisabledCiphers_TLS_RSA_WITH_AES_128_GCM_SHA256 92.0   ✅
DisabledCiphers_TLS_RSA_WITH_AES_256_CBC_SHA 76.0   ✅
DisabledCiphers_TLS_RSA_WITH_AES_256_GCM_SHA384 92.0   ✅
DisplayBookmarksToolbar ❌   ✅
DisplayMenuBar ❌   ✅
DontCheckDefaultBrowser ❌   ✅
DownloadDirectory 78.0   ✅
EnableTrackingProtection ❌   ✅
EncryptedMediaExtensions ❌   ✅
ExemptDomainFileTypePairsFromFileTypeDownloadWarnings ❌   ✅
ExtensionSettings 68.0   ✅
ExtensionSettings_* 89.0   ✅
ExtensionSettings_*_allowed_permissions ❌   ✅
ExtensionSettings_*_allowed_types 89.0   ✅
ExtensionSettings_*_blocked_install_message 89.0   ✅
ExtensionSettings_*_blocked_permissions ❌   ✅
ExtensionSettings_*_install_sources 89.0   ✅
ExtensionSettings_*_installation_mode 89.0   ✅
ExtensionSettings_*_restricted_domains 89.0   ✅
ExtensionSettings_*_runtime_allowed_hosts ❌   ✅
ExtensionSettings_*_runtime_blocked_hosts ❌   ✅
ExtensionSettings_*_temporarily_allow_weak_signatures ❌   ✅
ExtensionSettings_[name] 68.0   ✅
ExtensionSettings_[name]_allowed_permissions ❌   ✅
ExtensionSettings_[name]_blocked_install_message 68.0   ✅
ExtensionSettings_[name]_blocked_permissions ❌   ✅
ExtensionSettings_[name]_default_area ❌   ✅
ExtensionSettings_[name]_install_url 89.0   ✅
ExtensionSettings_[name]_installation_mode 89.0   ✅
ExtensionSettings_[name]_private_browsing 136.0, 128.8.0esr   ✅
ExtensionSettings_[name]_runtime_allowed_hosts ❌   ✅
ExtensionSettings_[name]_runtime_blocked_hosts ❌   ✅
ExtensionSettings_[name]_temporarily_allow_weak_signatures ❌   ✅
ExtensionSettings_[name]_update_url 154.0, 153.0.2esr   ✅
ExtensionSettings_[name]_updates_disabled 92.0   ✅
ExtensionUpdate 68.0   ✅
Extensions 68.0   ✅
Extensions_Install 68.0   ✅
Extensions_Locked 68.0   ✅
Extensions_Uninstall 68.0   ✅
FirefoxHome ❌   ✅
FirefoxSuggest ❌   ✅
GenerativeAI ❌   ✅
GoToIntranetSiteForSingleWordEntryInAddressBar ❌   ✅
Handlers 92.0   ✅
Handlers_extensions 92.0   ✅
Handlers_extensions_[name] 92.0   ✅
Handlers_extensions_[name]_action 92.0   ✅
Handlers_extensions_[name]_ask 92.0   ✅
Handlers_extensions_[name]_handlers 92.0   ✅
Handlers_mimeTypes 92.0   ✅
Handlers_mimeTypes_[name] 92.0   ✅
Handlers_mimeTypes_[name]_action 92.0   ✅
Handlers_mimeTypes_[name]_ask 92.0   ✅
Handlers_mimeTypes_[name]_handlers 92.0   ✅
Handlers_schemes 92.0   ✅
Handlers_schemes_[name] 92.0   ✅
Handlers_schemes_[name]_action 92.0   ✅
Handlers_schemes_[name]_ask 92.0   ✅
Handlers_schemes_[name]_handlers 92.0   ✅
HardwareAcceleration 78.0   ✅
Homepage ❌   ✅
HttpAllowlist ❌   ✅
HttpsOnlyMode ❌   ✅
IPProtectionAvailable ❌   ✅
InAppNotification 139.0   ❌
InAppNotification_Disabled 139.0   ❌
InAppNotification_DonationEnabled 139.0   ❌
InAppNotification_MessageEnabled 139.0   ❌
InAppNotification_SurveyEnabled 139.0   ❌
InstallAddonsPermission 68.0   ✅
InstallAddonsPermission_Allow 68.0   ✅
InstallAddonsPermission_Default 68.0   ✅
LegacyProfiles ❌   ✅
LegacySameSiteCookieBehaviorEnabled ❌   ✅
LegacySameSiteCookieBehaviorEnabledForDomainList ❌   ✅
LocalFileLinks ❌   ✅
LocalNetworkAccess ❌   ✅
ManagedBookmarks ❌   ✅
ManualAppUpdateOnly 92.0   ✅
MicrosoftEntraSSO ❌   ✅
NetworkPrediction 92.0   ✅
NewTabPage ❌   ✅
NoDefaultBookmarks ❌   ✅
OfferToSaveLogins 92.0   ✅
OfferToSaveLoginsDefault 92.0   ✅
OverrideFirstRunPage ❌   ✅
OverridePostUpdatePage ❌   ✅
PDFjs 92.0   ✅
PDFjs_EnablePermissions 92.0   ✅
PDFjs_Enabled 92.0   ✅
PasswordManagerEnabled 78.0   ✅
PasswordManagerExceptions ❌   ✅
Permissions ❌   ✅
PictureInPicture ❌   ✅
PopupBlocking ❌   ✅
PostQuantumKeyAgreementEnabled ❌   ✅
Preferences 68.0   ✅
Preferences_[name] 92.0   ✅
Preferences_[name]_Status 92.0   ✅
Preferences_[name]_Type ❌   ✅
Preferences_[name]_Value 92.0   ✅
Preferences_accessibility.force_disabled 78.0 89.0 ❌
Preferences_browser.cache.disk.enable 78.0 89.0 ❌
Preferences_browser.cache.disk.parent_directory 68.0 89.0 ❌
Preferences_browser.fixup.dns_first_for_single_words 68.0 77.0 ❌
Preferences_browser.safebrowsing.malware.enabled 78.0 89.0 ❌
Preferences_browser.safebrowsing.phishing.enabled 78.0 89.0 ❌
Preferences_browser.search.update 78.0 89.0 ❌
Preferences_browser.urlbar.suggest.bookmark 68.0 77.0 ❌
Preferences_browser.urlbar.suggest.history 68.0 77.0 ❌
Preferences_browser.urlbar.suggest.openpage 68.0 77.0 ❌
Preferences_datareporting.policy.dataSubmissionPolicyBypassNotification 78.0 89.0 ❌
Preferences_dom.allow_scripts_to_close_windows 78.0 89.0 ❌
Preferences_dom.disable_window_flip 78.0 89.0 ❌
Preferences_dom.disable_window_move_resize 78.0 89.0 ❌
Preferences_dom.event.contextmenu.enabled 78.0 89.0 ❌
Preferences_dom.keyboardevent.keypress.hack.dispatch_non_printable_keys.addl 78.0 89.0 ❌
Preferences_dom.keyboardevent.keypress.hack.use_legacy_keycode_and_charcode.addl 78.0 89.0 ❌
Preferences_extensions.blocklist.enabled 78.0 89.0 ❌
Preferences_geo.enabled 78.0 89.0 ❌
Preferences_intl.accept_languages 78.0 89.0 ❌
Preferences_network.IDN_show_punycode 68.0 89.0 ❌
Preferences_network.dns.disableIPv6 78.0 89.0 ❌
Preferences_places.history.enabled 78.0 89.0 ❌
Preferences_print.save_print_settings 78.0 89.0 ❌
Preferences_security.default_personal_cert 78.0 89.0 ❌
Preferences_security.mixed_content.block_active_content 78.0 89.0 ❌
Preferences_security.osclientcerts.autoload 78.0 89.0 ❌
Preferences_security.ssl.errorReporting.enabled 78.0 89.0 ❌
Preferences_security.tls.hello_downgrade_check 78.0 89.0 ❌
Preferences_widget.content.gtk-theme-override 78.0 89.0 ❌
PrimaryPassword 92.0   ✅
PrintingEnabled ❌   ✅
PrivateBrowsingModeAvailability ❌   ✅
PromptForDownloadLocation 78.0   ✅
Proxy 68.0   ✅
Proxy_AutoConfigURL 68.0   ✅
Proxy_AutoLogin 68.0   ✅
Proxy_FTPProxy 68.0   ✅
Proxy_HTTPProxy 68.0   ✅
Proxy_Locked 68.0   ✅
Proxy_Mode 68.0   ✅
Proxy_Passthrough 68.0   ✅
Proxy_SOCKSProxy 68.0   ✅
Proxy_SOCKSVersion 68.0   ✅
Proxy_SSLProxy 68.0   ✅
Proxy_UseHTTPProxyForAllProtocols 68.0   ✅
Proxy_UseProxyForDNS 68.0   ✅
RelaunchRequired ❌   ✅
RequestedLocales 68.0   ✅
SSLVersionMax 68.0   ✅
SSLVersionMin 68.0   ✅
SanitizeOnShutdown ❌   ✅
SearchBar ❌   ✅
SearchEngines 108.0   ✅
SearchEngines_Add 108.0   ✅
SearchEngines_Default 108.0   ✅
SearchEngines_DefaultPrivate 108.0   ✅
SearchEngines_PreventInstalls 108.0   ✅
SearchEngines_Remove 108.0   ✅
SearchSuggestEnabled ❌   ✅
SecurityDevices 152.0   ✅
SecurityDevices_Add 152.0   ✅
SecurityDevices_Add_[name] 152.0   ✅
SecurityDevices_Delete 152.0   ✅
SecurityDevices_[name] 152.0   ✅
ShowHomeButton ❌   ✅
SitePolicies ❌   ✅
SkipTermsOfUse ❌   ✅
StartDownloadsInTempDirectory ❌   ✅
SupportMenu ❌   ✅
TranslateEnabled ❌   ✅
UseSystemPrintDialog ❌   ✅
UserMessaging ❌   ✅
VisualSearchEnabled ❌   ✅
WebsiteFilter ❌   ✅
WindowsSSO ❌   ✅
XSLTEnabled ❌   ✅