Managed storage of extensions The managed storage of each extension, one JSON object per extension ID, which the extension reads with browser.storage.managed. For more information visit: https://thunderbird.github.io/policy-templates/policies/esr153/#3rdparty Automatic updates Enable or disable automatic application update. Install application updates automatically. If this policy is enabled, updates are installed without asking the user (the operating system might still ask for approval). If it is disabled, updates are downloaded, and the user chooses when to install them. In both cases, the user can't change the setting. If updates are turned off with DisableAppUpdate, this policy has no effect. For more information visit: https://thunderbird.github.io/policy-templates/policies/esr153/#appautoupdate AppUpdatePin Prevent Thunderbird from being updated beyond the specified version. You can specify the version as xx. and Thunderbird will be updated with all minor versions, but will not be updated beyond the major version. You can also specify the version as xx.xx and Thunderbird will be updated with all patch versions, but will not be updated beyond the minor version. You should specify a version that exists or is guaranteed to exist. If you specify a version that doesn't end up existing, Thunderbird will update beyond that version. For more information visit: https://thunderbird.github.io/policy-templates/policies/esr153/#appupdatepin AppUpdateURL Set custom app update URL. Change the URL for application update if you are providing Thunderbird updates from a custom update server. For more information visit: https://thunderbird.github.io/policy-templates/policies/esr153/#appupdateurl Sites allowed to use SPNEGO Websites which may use integrated authentication via SPNEGO (Kerberos). For more information visit: https://thunderbird.github.io/policy-templates/policies/esr153/#authentication Sites allowed to receive delegated credentials Websites to which Thunderbird may delegate the authorization of the user. For more information visit: https://thunderbird.github.io/policy-templates/policies/esr153/#authentication Sites allowed to use NTLM Websites which may use integrated authentication via NTLM. For more information visit: https://thunderbird.github.io/policy-templates/policies/esr153/#authentication Allow integrated authentication for non-FQDN hosts Allows integrated authentication for hosts which are not given as fully qualified domain names. For more information visit: https://thunderbird.github.io/policy-templates/policies/esr153/#authentication Allow integrated authentication for proxies Allows integrated authentication for proxy servers. For more information visit: https://thunderbird.github.io/policy-templates/policies/esr153/#authentication Lock the integrated authentication settings Prevents the user from changing the integrated authentication settings. The settings are locked unless this is false. For more information visit: https://thunderbird.github.io/policy-templates/policies/esr153/#authentication Integrated authentication in private browsing Enables integrated authentication in private browsing. For more information visit: https://thunderbird.github.io/policy-templates/policies/esr153/#authentication Background updates Enable or disable the background updater. Install application updates in the background, also when Thunderbird is not running (only on Windows). If this policy is enabled, updates may be installed in the background without asking the user (the operating system might still ask for approval). If it is disabled, no updates are installed while Thunderbird is not running. In both cases, the user can't change the setting. If updates are turned off with DisableAppUpdate, or automatic updates with AppAutoUpdate, this policy has no effect. If background updates don't run, check the requirements in this support article (https://support.mozilla.org/en-US/kb/enable-background-updates-thunderbird-windows). For more information visit: https://thunderbird.github.io/policy-templates/policies/esr153/#backgroundappupdate BlockAboutAddons Block access to the Add-ons Manager (about:addons). Users can no longer open it to install, remove, enable or disable add-ons, or to change their options. Add-ons can still be managed with the Extensions and ExtensionSettings policies. If this policy is disabled or not configured, the Add-ons Manager is available. For more information visit: https://thunderbird.github.io/policy-templates/policies/esr153/#blockaboutaddons BlockAboutConfig Block access to the about:config page. Block access to about:config. For more information visit: https://thunderbird.github.io/policy-templates/policies/esr153/#blockaboutconfig BlockAboutProfiles Block access to the about:profiles page. Block access to About Profiles (about:profiles). For more information visit: https://thunderbird.github.io/policy-templates/policies/esr153/#blockaboutprofiles BlockAboutSupport Block access to the about:support page. Block access to Troubleshooting Information (about:support). For more information visit: https://thunderbird.github.io/policy-templates/policies/esr153/#blockaboutsupport Captive portal detection Enable or disable captive portal support. Detect captive portals, the login pages of networks in hotels or airports which have to be passed before the internet can be used. If this policy is enabled, the detection is turned on. If it is disabled, it is turned off. In both cases, the user can't change the setting. If this policy is not configured, the user can change the setting. For more information visit: https://thunderbird.github.io/policy-templates/policies/esr153/#captiveportal Install certificates into the Thunderbird certificate store Install certificates into the Thunderbird certificate store. If only a filename is specified, Thunderbird searches for the file in the following locations: - Windows - %USERPROFILE%\AppData\Local\Mozilla\Certificates - %USERPROFILE%\AppData\Roaming\Mozilla\Certificates - macOS - /Library/Application Support/Mozilla/Certificates - ~/Library/Application Support/Mozilla/Certificates - Linux - /usr/lib/mozilla/certificates - /usr/lib64/mozilla/certificates - ~/.mozilla/certificates A fully qualified path can be used, including UNC paths. You should use the native path style for your operating system. If you are specifying the path in the policies.json file on Windows, you need to escape your backslashes (\\) which means that for UNC paths, you need to escape both (\\\\). If you use group policy, you only need one backslash. Certificates are installed using the trust string CT,CT,. Binary (DER) and ASCII (PEM) certificates are both supported. Environment variables like %USERPROFILE% are expanded. For more information visit: https://thunderbird.github.io/policy-templates/policies/esr153/#certificates Trust certificates that have been added to the operating system certificate store by a user or administrator Trust certificates that have been added to the operating system certificate store by a user or administrator. Note: This policy only works on Windows and macOS. For Linux discussion, see bug 1600509 (https://bugzilla.mozilla.org/show_bug.cgi?id=1600509). See https://support.mozilla.org/kb/setting-certificate-authorities-firefox for more detail. For more information visit: https://thunderbird.github.io/policy-templates/policies/esr153/#certificates Sites which may always set cookies A list of origins (not domains) where cookies are always allowed. You must include http or https. For more information visit: https://thunderbird.github.io/policy-templates/policies/esr153/#cookies Sites which may never set cookies A list of origins (not domains) where cookies are always blocked. You must include http or https. For more information visit: https://thunderbird.github.io/policy-templates/policies/esr153/#cookies Accept cookies Determines whether cookies are accepted at all. For more information visit: https://thunderbird.github.io/policy-templates/policies/esr153/#cookies Accept third-party cookies Determines how third-party cookies are handled. For more information visit: https://thunderbird.github.io/policy-templates/policies/esr153/#cookies Always Never From visited sites only Keep cookies only until the end of the session (deprecated) Deprecated. This setting has no effect anymore. For more information visit: https://thunderbird.github.io/policy-templates/policies/esr153/#cookies Lock the cookie preferences Prevents the user from changing cookie preferences. For more information visit: https://thunderbird.github.io/policy-templates/policies/esr153/#cookies DefaultDownloadDirectory Set the default download directory. You can use ${home} for the native home directory. Environment variables like %USERPROFILE% are expanded. For more information visit: https://thunderbird.github.io/policy-templates/policies/esr153/#defaultdownloaddirectory DisableAppUpdate Prevent Thunderbird from updating. Turn off application updates within Thunderbird. For more information visit: https://thunderbird.github.io/policy-templates/policies/esr153/#disableappupdate DisableBuiltinPDFViewer Disable PDF.js, the built-in PDF viewer in Thunderbird. Disable the built in PDF viewer. PDF files are downloaded and sent externally. For more information visit: https://thunderbird.github.io/policy-templates/policies/esr153/#disablebuiltinpdfviewer Disable TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 Disable ciphers. Disable specific cryptographic ciphers. For more information visit: https://thunderbird.github.io/policy-templates/policies/esr153/#disabledciphers Disable TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 Disable ciphers. Disable specific cryptographic ciphers. For more information visit: https://thunderbird.github.io/policy-templates/policies/esr153/#disabledciphers Disable TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 Disable ciphers. Disable specific cryptographic ciphers. For more information visit: https://thunderbird.github.io/policy-templates/policies/esr153/#disabledciphers Disable TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 Disable ciphers. Disable specific cryptographic ciphers. For more information visit: https://thunderbird.github.io/policy-templates/policies/esr153/#disabledciphers Disable TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 Disable ciphers. Disable specific cryptographic ciphers. For more information visit: https://thunderbird.github.io/policy-templates/policies/esr153/#disabledciphers Disable TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 Disable ciphers. Disable specific cryptographic ciphers. For more information visit: https://thunderbird.github.io/policy-templates/policies/esr153/#disabledciphers Disable TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA Disable ciphers. Disable specific cryptographic ciphers. For more information visit: https://thunderbird.github.io/policy-templates/policies/esr153/#disabledciphers Disable TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA Disable ciphers. Disable specific cryptographic ciphers. For more information visit: https://thunderbird.github.io/policy-templates/policies/esr153/#disabledciphers Disable TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA Disable ciphers. Disable specific cryptographic ciphers. For more information visit: https://thunderbird.github.io/policy-templates/policies/esr153/#disabledciphers Disable TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA Disable ciphers. Disable specific cryptographic ciphers. For more information visit: https://thunderbird.github.io/policy-templates/policies/esr153/#disabledciphers Disable TLS_DHE_RSA_WITH_AES_128_CBC_SHA Disable ciphers. Disable specific cryptographic ciphers. For more information visit: https://thunderbird.github.io/policy-templates/policies/esr153/#disabledciphers Disable TLS_DHE_RSA_WITH_AES_256_CBC_SHA Disable ciphers. Disable specific cryptographic ciphers. For more information visit: https://thunderbird.github.io/policy-templates/policies/esr153/#disabledciphers Disable TLS_RSA_WITH_AES_128_GCM_SHA256 Disable ciphers. Disable specific cryptographic ciphers. For more information visit: https://thunderbird.github.io/policy-templates/policies/esr153/#disabledciphers Disable TLS_RSA_WITH_AES_256_GCM_SHA384 Disable ciphers. Disable specific cryptographic ciphers. For more information visit: https://thunderbird.github.io/policy-templates/policies/esr153/#disabledciphers Disable TLS_RSA_WITH_AES_128_CBC_SHA Disable ciphers. Disable specific cryptographic ciphers. For more information visit: https://thunderbird.github.io/policy-templates/policies/esr153/#disabledciphers Disable TLS_RSA_WITH_AES_256_CBC_SHA Disable ciphers. Disable specific cryptographic ciphers. For more information visit: https://thunderbird.github.io/policy-templates/policies/esr153/#disabledciphers Disable TLS_RSA_WITH_3DES_EDE_CBC_SHA Disable ciphers. Disable specific cryptographic ciphers. For more information visit: https://thunderbird.github.io/policy-templates/policies/esr153/#disabledciphers DisableDeveloperTools Block access to the developer tools. Remove access to all developer tools. For more information visit: https://thunderbird.github.io/policy-templates/policies/esr153/#disabledevelopertools Prevent creating a primary password If true, a master password can’t be created. Remove the master password functionality. If this value is true, it works the same as setting PrimaryPassword (#primarypassword) to false and removes the primary password functionality. If both DisableMasterPasswordCreation and PrimaryPassword are used, DisableMasterPasswordCreation takes precedence. For more information visit: https://thunderbird.github.io/policy-templates/policies/esr153/#disablemasterpasswordcreation DisablePasswordReveal Do not allow passwords to be revealed in saved logins. Do not allow passwords to be shown in saved logins. For more information visit: https://thunderbird.github.io/policy-templates/policies/esr153/#disablepasswordreveal Disable safe mode Disable the feature to restart in Safe Mode. Note: the Shift key to enter Safe Mode can only be disabled on Windows using Group Policy. Disable safe mode within the browser. On Windows, this disables safe mode via the command line as well. For more information visit: https://thunderbird.github.io/policy-templates/policies/esr153/#disablesafemode Prevent exceptions for invalid certificates Prevents adding an exception when an invalid certificate is shown. For more information visit: https://thunderbird.github.io/policy-templates/policies/esr153/#disablesecuritybypass Prevent visiting harmful sites anyway Prevents selecting "ignore the risk" and visiting a harmful site anyway. For more information visit: https://thunderbird.github.io/policy-templates/policies/esr153/#disablesecuritybypass DisableSystemAddonUpdate Prevent Thunderbird from installing and updating system add-ons. Prevent system add-ons from being installed or updated. For more information visit: https://thunderbird.github.io/policy-templates/policies/esr153/#disablesystemaddonupdate DisableTelemetry Turn off Telemetry. Prevent the upload of telemetry data. Local storage of telemetry data is disabled as well. Mozilla recommends that you do not disable telemetry. Information collected through telemetry helps us build a better product for businesses like yours. For more information visit: https://thunderbird.github.io/policy-templates/policies/esr153/#disabletelemetry Domains excluded from DNS over HTTPS Domains which are resolved without DNS over HTTPS. For more information visit: https://thunderbird.github.io/policy-templates/policies/esr153/#dnsoverhttps Enable DNS over HTTPS Determines whether DNS over HTTPS is enabled. For more information visit: https://thunderbird.github.io/policy-templates/policies/esr153/#dnsoverhttps DNS over HTTPS provider The URL of another DNS over HTTPS provider. For more information visit: https://thunderbird.github.io/policy-templates/policies/esr153/#dnsoverhttps Lock the DNS over HTTPS settings Prevents the user from changing DNS over HTTPS preferences. For more information visit: https://thunderbird.github.io/policy-templates/policies/esr153/#dnsoverhttps DownloadDirectory Set and lock the download directory. You can use ${home} for the native home directory. Environment variables like %USERPROFILE% are expanded. For more information visit: https://thunderbird.github.io/policy-templates/policies/esr153/#downloaddirectory Extensions to install A list of URLs or native paths of extensions to be installed. Environment variables like %USERPROFILE% are expanded. For more information visit: https://thunderbird.github.io/policy-templates/policies/esr153/#extensions Extensions to uninstall A list of extension IDs which are uninstalled if found. For more information visit: https://thunderbird.github.io/policy-templates/policies/esr153/#extensions Extensions which can't be disabled or removed A list of extension IDs which the user can't disable or uninstall. For more information visit: https://thunderbird.github.io/policy-templates/policies/esr153/#extensions ExtensionSettings Manage all aspects of extension installation. Manage all aspects of extensions. This policy is based heavily on the Chrome policy (https://dev.chromium.org/administrators/policy-list-3/extension-settings-full) of the same name. This policy maps an extension ID to its configuration. With an extension ID, the configuration will be applied to the specified extension only. A default configuration can be set for the special ID "*", which will apply to all extensions that don't have a custom configuration set in this policy. To obtain an extension ID, install the extension and go to about:support. You will see the ID in the Extensions section. Installing a theme makes it the default. *: The default settings for all extensions which have no entry of their own. installation_mode: Whether extensions can be installed. allowed: Users can install extensions. blocked: No extension can be installed. An extension with its own entry in this policy is exempt, whatever that entry says. At startup, installed extensions are removed, unless their entry sets installation_mode to allowed, force_installed or normal_installed. allowed_types: The types of add-ons which can be installed. extension: Ordinary extensions. dictionary: Spell-checking dictionaries. locale: Language packs that translate the Thunderbird interface. theme: Themes that change the appearance of Thunderbird. blocked_install_message: A message shown to the user when the installation of an extension is blocked. install_sources: The sources from which extensions can be installed, as URL match patterns (e.g. https://addons.thunderbird.net/*). restricted_domains: The domains on which content scripts of extensions can't run. [name]: The settings of one extension, by its ID. They take precedence over the default settings. installation_mode: How the extension is installed. allowed: The extension may be installed, even when extensions are blocked by default. blocked: The extension cannot be installed, and is uninstalled if already present. force_installed: The extension is installed automatically and the user can neither disable nor remove it. normal_installed: The extension is installed automatically. The user can disable it but cannot remove it. install_url: The URL from which the extension is installed with force_installed and normal_installed, e.g. from addons.thunderbird.net or a file:/// URL. It is required for these modes. Without it, this extension and the ones which follow it in this policy are neither installed nor removed. blocked_install_message: A message shown to the user when the installation of this extension is blocked. updates_disabled: If true, the extension is not updated automatically. update_url: The URL of an update manifest, which is used to update the extension instead of the update URL of the extension itself. private_browsing: If true, the extension is allowed to run in private browsing. If false, it is not. For more information visit: https://thunderbird.github.io/policy-templates/policies/esr153/#extensionsettings Automatic extension updates Enable or disable automatic extension updates. Turn off automatic updates of extensions. If this policy is disabled, extensions are no longer updated automatically, and the user can't turn it on. If it is enabled or not configured, the user's setting applies. For more information visit: https://thunderbird.github.io/policy-templates/policies/esr153/#extensionupdate Handlers Configure default application handlers. This policy is based on the internal format of handlers.json. You can configure handlers based on a mime type (mimeTypes), a file's extension (extensions), or a protocol (schemes). Within each handler type, you specify the given mimeType/extension/scheme as a key. (mimeTypes|extensions|schemes): How content is matched: by its MIME type (mimeTypes), by the extension of its file name (extensions), or by its protocol (schemes). [name]: One MIME type, file extension or protocol, with how its content is handled. action: What happens with the content. saveToDisk: Download the file instead of opening it. useHelperApp: Open the content with an application listed in handlers. useSystemDefault: Open the content with the application the operating system associates with that type. ask: If true, the user is asked what to do with the content. If false, the action is taken without asking. handlers: The applications which can handle the content. The first one is the default. Each entry has either a path or a uriTemplate. name: The name of the application. path: The path of the executable of the application. uriTemplate: The URL of a web application. It has to use https and contain %s, which is replaced by the URL of the content. For more information visit: https://thunderbird.github.io/policy-templates/policies/esr153/#handlers Use hardware acceleration If false, turn off hardware acceleration. Control hardware acceleration. For more information visit: https://thunderbird.github.io/policy-templates/policies/esr153/#hardwareacceleration Donation notifications Enables or disables notifications asking for a donation. For more information visit: https://thunderbird.github.io/policy-templates/policies/esr153/#inappnotification Survey notifications Enables or disables notifications inviting to a survey. For more information visit: https://thunderbird.github.io/policy-templates/policies/esr153/#inappnotification Message notifications Enables or disables notifications with messages. For more information visit: https://thunderbird.github.io/policy-templates/policies/esr153/#inappnotification Disable all in-app notifications If set to true, no in-app notifications are shown. For more information visit: https://thunderbird.github.io/policy-templates/policies/esr153/#inappnotification Sites allowed to install extensions A list of origins where extension installs are allowed. For more information visit: https://thunderbird.github.io/policy-templates/policies/esr153/#installaddonspermission Allow extension installs by default Determines whether or not extension installs are allowed by default. For more information visit: https://thunderbird.github.io/policy-templates/policies/esr153/#installaddonspermission ManualAppUpdateOnly Allow manual updates only and do not notify the user about updates. Switch to manual updates only. If this policy is enabled: 1. The user will never be prompted to install updates. 2. Thunderbird will not check for updates in the background, though it will check automatically when an update UI is displayed (such as the one in the About dialog). This check will be used to show "Update to version X" in the UI, but will not automatically download the update or prompt the user to update in any other way. 3. The update UI will work as expected, unlike when using DisableAppUpdate. This policy is primarily intended for advanced end users, not for enterprises, but it is available via GPO. For more information visit: https://thunderbird.github.io/policy-templates/policies/esr153/#manualappupdateonly Network prediction (DNS prefetching) Enable or disable network prediction (DNS prefetching). With network prediction, Thunderbird resolves the host names of links in advance, so they load faster. If this policy is enabled, network prediction is turned on. If it is disabled, network prediction is turned off. In both cases, the user can't change the setting. If this policy is not configured, the user can change the setting. For more information visit: https://thunderbird.github.io/policy-templates/policies/esr153/#networkprediction Offer to save passwords Enforce the setting to allow Thunderbird to offer to remember saved logins and passwords. Both true and false values are accepted. Control whether or not Thunderbird offers to save passwords. For more information visit: https://thunderbird.github.io/policy-templates/policies/esr153/#offertosavelogins Offer to save passwords by default Set the default value for allowing Thunderbird to offer to remember saved logins and passwords. Both true and false values are accepted. Sets the default value of signon.rememberSignons without locking it. For more information visit: https://thunderbird.github.io/policy-templates/policies/esr153/#offertosaveloginsdefault PasswordManagerEnabled Enable saving passwords to the password manager. Remove access to the password manager via the settings, and block about:logins. For more information visit: https://thunderbird.github.io/policy-templates/policies/esr153/#passwordmanagerenabled Enable the built-in PDF viewer If set to false, the built-in PDF viewer is disabled. For more information visit: https://thunderbird.github.io/policy-templates/policies/esr153/#pdfjs Honor the permissions of PDF documents Meant to make the built-in PDF viewer honor document permissions like preventing the copying of text. In this version, the value of this setting is ignored. If it is set, document permissions are honored unless Enabled is set to true. For more information visit: https://thunderbird.github.io/policy-templates/policies/esr153/#pdfjs Preferences Set and lock the value for a subset of preferences. Set and lock preferences. You can also set default preferences and user preferences, and clear the user value of a preference. Using the preference as the key, set the Value to the corresponding preference value. Default preferences can be modified by the user. If a value is locked, it is also set as the default. User preferences persist across invocations of Thunderbird. It is the equivalent of a user setting the preference. They are most useful when a preference is needed very early in startup so it can't be set as default by policy. User preferences persist even if the policy is removed, so if you need to remove them, set their Status to clear. IMPORTANT: Make sure you're only setting a particular preference using this mechanism and not some other way. Only these preferences can be set: - accessibility.* - app.update.* (except app.update.channel, app.update.lastUpdateTime and app.update.migrated) - browser.* - calendar.* - chat.* - datareporting.policy.* - dom.* - extensions.* - general.autoScroll* - general.smoothScroll* - geo.* - gfx.* - intl.* - layers.* - layout.* - mail.* - mailnews.* - media.* - network.* - pdfjs.* - places.* - print.* - security.default_personal_cert - security.insecure_connection_text.enabled - security.insecure_connection_text.pbmode.enabled - security.insecure_field_warning.contextual.enabled - security.mixed_content.block_active_content - security.osclientcerts.autoload - security.ssl.errorReporting.enabled - security.tls.hello_downgrade_check - security.tls.version.enable-deprecated - security.warn_submit_secure_to_insecure - signon.* - spellchecker.* - ui.* - widget.* [name]: One preference, by its name, as an object with Value and Status. A value alone (e.g. true) sets and locks the default value of the preference. Value: The value of the preference. Status: How the value is set. default: Change the preference's default value. A value the user has already set still wins. locked: Change the preference's default value and prevent the user from changing it. user: Set the preference as though the user had set it, so the value is written to the profile. clear: Remove any value the user has set, reverting the preference to its default. For more information visit: https://thunderbird.github.io/policy-templates/policies/esr153/#preferences PrimaryPassword Require or prevent using a Primary Password. Require or prevent using a primary (formerly master) password. If this value is true, a primary password is required. If this value is false, it works the same as if DisableMasterPasswordCreation (#disablemasterpasswordcreation) was true and removes the primary password functionality. If both DisableMasterPasswordCreation and PrimaryPassword are used, DisableMasterPasswordCreation takes precedence. For more information visit: https://thunderbird.github.io/policy-templates/policies/esr153/#primarypassword PromptForDownloadLocation Ask where to save files when downloading. Ask where to save each file before downloading. For more information visit: https://thunderbird.github.io/policy-templates/policies/esr153/#promptfordownloadlocation Proxy method The proxy method being used. For more information visit: https://thunderbird.github.io/policy-templates/policies/esr153/#proxy No proxy Use system settings Manual configuration Auto-detect (WPAD) Automatic proxy configuration (PAC) Lock the proxy settings Prevents the user from changing the proxy settings. For more information visit: https://thunderbird.github.io/policy-templates/policies/esr153/#proxy Automatic proxy configuration URL The URL of a proxy configuration file (only used if the proxy method is autoConfig). For more information visit: https://thunderbird.github.io/policy-templates/policies/esr153/#proxy FTP proxy (deprecated) Deprecated. This setting has no effect, because support for FTP proxies was removed. For more information visit: https://thunderbird.github.io/policy-templates/policies/esr153/#proxy HTTP proxy The HTTP proxy server. For more information visit: https://thunderbird.github.io/policy-templates/policies/esr153/#proxy SSL proxy The SSL proxy server. For more information visit: https://thunderbird.github.io/policy-templates/policies/esr153/#proxy SOCKS proxy The SOCKS proxy server. For more information visit: https://thunderbird.github.io/policy-templates/policies/esr153/#proxy SOCKS version The SOCKS version. For more information visit: https://thunderbird.github.io/policy-templates/policies/esr153/#proxy SOCKS v4 SOCKS v5 Use the HTTP proxy for all protocols Whether the HTTP proxy is also used for all other protocols. For more information visit: https://thunderbird.github.io/policy-templates/policies/esr153/#proxy No proxy for Hostnames or IP addresses which are not proxied, separated by commas. Use <local> to bypass proxying for all hostnames which do not contain periods. For more information visit: https://thunderbird.github.io/policy-templates/policies/esr153/#proxy Proxy DNS when using SOCKS v5 Use the proxy for DNS requests when using SOCKS v5. For more information visit: https://thunderbird.github.io/policy-templates/policies/esr153/#proxy Don't prompt for authentication if the password is saved Don't prompt for authentication if the password is saved. If the proxy requires authentication and its password is saved, Thunderbird logs in without asking. If that login fails, the user is asked again. For more information visit: https://thunderbird.github.io/policy-templates/policies/esr153/#proxy RequestedLocales Set the list of requested locales for the application in order of preference. The corresponding language packs become active. Note: This policy can also be a string, so that you can specify an empty value. For more information visit: https://thunderbird.github.io/policy-templates/policies/esr153/#requestedlocales Add new search engines (1) Add new search engines. Although there are only five engines available in the ADMX template, there is no limit. To add more in the ADMX template, you can duplicate the XML. For more information visit: https://thunderbird.github.io/policy-templates/policies/esr153/#searchengines Name: The name of the search engine (required). Icon URL: A URL for the icon to use. Alias: A keyword to use for the engine. Description: A description of the search engine. Encoding: The query charset for the engine. It defaults to UTF-8. Method: The HTTP method. Search URL: The search URL with {searchTerms} to substitute for the search term (required). POST data: The POST data as name value pairs separated by &. Suggestions URL: A search suggestions URL with {searchTerms} to substitute for the search term. GET POST Add new search engines (2) Add new search engines. Although there are only five engines available in the ADMX template, there is no limit. To add more in the ADMX template, you can duplicate the XML. For more information visit: https://thunderbird.github.io/policy-templates/policies/esr153/#searchengines Name: The name of the search engine (required). Icon URL: A URL for the icon to use. Alias: A keyword to use for the engine. Description: A description of the search engine. Encoding: The query charset for the engine. It defaults to UTF-8. Method: The HTTP method. Search URL: The search URL with {searchTerms} to substitute for the search term (required). POST data: The POST data as name value pairs separated by &. Suggestions URL: A search suggestions URL with {searchTerms} to substitute for the search term. GET POST Add new search engines (3) Add new search engines. Although there are only five engines available in the ADMX template, there is no limit. To add more in the ADMX template, you can duplicate the XML. For more information visit: https://thunderbird.github.io/policy-templates/policies/esr153/#searchengines Name: The name of the search engine (required). Icon URL: A URL for the icon to use. Alias: A keyword to use for the engine. Description: A description of the search engine. Encoding: The query charset for the engine. It defaults to UTF-8. Method: The HTTP method. Search URL: The search URL with {searchTerms} to substitute for the search term (required). POST data: The POST data as name value pairs separated by &. Suggestions URL: A search suggestions URL with {searchTerms} to substitute for the search term. GET POST Add new search engines (4) Add new search engines. Although there are only five engines available in the ADMX template, there is no limit. To add more in the ADMX template, you can duplicate the XML. For more information visit: https://thunderbird.github.io/policy-templates/policies/esr153/#searchengines Name: The name of the search engine (required). Icon URL: A URL for the icon to use. Alias: A keyword to use for the engine. Description: A description of the search engine. Encoding: The query charset for the engine. It defaults to UTF-8. Method: The HTTP method. Search URL: The search URL with {searchTerms} to substitute for the search term (required). POST data: The POST data as name value pairs separated by &. Suggestions URL: A search suggestions URL with {searchTerms} to substitute for the search term. GET POST Add new search engines (5) Add new search engines. Although there are only five engines available in the ADMX template, there is no limit. To add more in the ADMX template, you can duplicate the XML. For more information visit: https://thunderbird.github.io/policy-templates/policies/esr153/#searchengines Name: The name of the search engine (required). Icon URL: A URL for the icon to use. Alias: A keyword to use for the engine. Description: A description of the search engine. Encoding: The query charset for the engine. It defaults to UTF-8. Method: The HTTP method. Search URL: The search URL with {searchTerms} to substitute for the search term (required). POST data: The POST data as name value pairs separated by &. Suggestions URL: A search suggestions URL with {searchTerms} to substitute for the search term. GET POST Hide built-in search engines Hide built-in search engines. The search engines are given by their names. They are hidden when the policy is applied for the first time and whenever the list changes. For more information visit: https://thunderbird.github.io/policy-templates/policies/esr153/#searchengines Set the default search engine Set the default search engine, which is used to search the web from Thunderbird. The search engine is given by its name, either a built-in search engine or one added with Add. It is set when the policy is applied for the first time and whenever the name changes, so the user can choose another default search engine in the meantime. For more information visit: https://thunderbird.github.io/policy-templates/policies/esr153/#searchengines Set the default search engine for private browsing Set the default search engine for private browsing. This setting has no effect in Thunderbird. For more information visit: https://thunderbird.github.io/policy-templates/policies/esr153/#searchengines Prevent installing search engines from webpages Prevent installing search engines from webpages. This setting has no effect in Thunderbird. For more information visit: https://thunderbird.github.io/policy-templates/policies/esr153/#searchengines PKCS #11 modules to add The names of the devices to add, with the paths of their libraries. For more information visit: https://thunderbird.github.io/policy-templates/policies/esr153/#securitydevices Add PKCS #11 modules (older form) (deprecated) Deprecated. The older form of this policy, with the names of the devices to add directly in the policy. It is still supported, but ignored if Add or Delete is used. For more information visit: https://thunderbird.github.io/policy-templates/policies/esr153/#securitydevices PKCS #11 modules to delete The names of the devices to delete. For more information visit: https://thunderbird.github.io/policy-templates/policies/esr153/#securitydevices SSLVersionMax Set the maximum SSL version. Set and lock the maximum version of TLS. (Thunderbird defaults to a maximum of TLS 1.3.) For more information visit: https://thunderbird.github.io/policy-templates/policies/esr153/#sslversionmax TLS 1.0 TLS 1.1 TLS 1.2 TLS 1.3 SSLVersionMin Set the minimum SSL version. Set and lock the minimum version of TLS. (Thunderbird defaults to a minimum of TLS 1.2.) For more information visit: https://thunderbird.github.io/policy-templates/policies/esr153/#sslversionmin TLS 1.0 TLS 1.1 TLS 1.2 TLS 1.3 Thunderbird 78.0 - * Thunderbird 75.0 - * Thunderbird 104.0 - * Thunderbird 68.0 - * Thunderbird 92.0 - * Thunderbird 76.0 - * Thunderbird 102.0 - * Thunderbird 77.0 - * Thunderbird 139.0 - * Thunderbird 108.0 - * Thunderbird 152.0 - * Mozilla Thunderbird Security Device update settings Authentication Extensions Network security Certificate management Certificates Cookies Downloads Printing DisabledCiphers Password manager DisableSecurityBypass Miscellaneous DNSOverHTTPS InAppNotification InstallAddonsPermission PDFjs Proxy Search SearchEngines Add SecurityDevices Managed storage of extensions Sites allowed to use SPNEGO Sites allowed to receive delegated credentials Sites allowed to use NTLM Allow SPNEGO Allow NTLM Allow SPNEGO Allow NTLM Install certificates into the Thunderbird certificate store Sites which may always set cookies Sites which may never set cookies AcceptThirdParty Domains excluded from DNS over HTTPS Extensions to install Extensions to uninstall Extensions which can't be disabled or removed ExtensionSettings Handlers Sites allowed to install extensions Preferences Mode SOCKSVersion RequestedLocales Method Method Method Method Method Hide built-in search engines PKCS #11 modules to add SecurityDevices PKCS #11 modules to delete SSLVersionMax SSLVersionMin