diff --git a/src/content/docs/reference/policies/DisableMacOSUserPolicies.mdx b/src/content/docs/reference/policies/DisableMacOSUserPolicies.mdx new file mode 100644 index 0000000..26ca478 --- /dev/null +++ b/src/content/docs/reference/policies/DisableMacOSUserPolicies.mdx @@ -0,0 +1,54 @@ +--- +title: "DisableMacOSUserPolicies" +description: "Ignore policies from the user's preferences and from user-scope configuration profiles on macOS." +category: "Miscellaneous" +--- + +Ignore policies from the user's preferences and from user-scope configuration profiles on macOS. +On macOS, Firefox reads policies from sources that an administrator can write to, and from sources that a standard user can write to: + +- **Administrator sources:** `policies.json`, device-scope configuration profiles, `/Library/Preferences/org.mozilla.firefox.plist`, and policies from the Firefox Enterprise console. +- **User sources:** `~/Library/Preferences/org.mozilla.firefox.plist` and user-scope configuration profiles, which a standard user can install. + +Policies from user sources always rank below policies from administrator sources, so a user cannot override a policy that an administrator has set. +A user can still set policies that no administrator source sets. +Setting `DisableMacOSUserPolicies` to `true` stops Firefox from reading policies from user sources entirely. + +## Values + +- Set to `true` to ignore every policy from user sources. +- Set to `false` to allow policies from user sources. This is the same as not setting the policy. + +## Examples + +```json +{ + "policies": { + "DisableMacOSUserPolicies": true + } +} +``` + +## macOS + +Set this key in a device-scope configuration profile or in `/Library/Preferences/org.mozilla.firefox.plist`: + +```xml + + DisableMacOSUserPolicies + | + +``` + +## Compatibility + + + +**CCK2 Equivalent:** N/A\ +**Preferences Affected:** N/A + +## See also + +- [`EnterprisePoliciesEnabled`](/reference/policies/enterprisepoliciesenabled/) +- [`DisableLocalPolicies`](/reference/policies/disablelocalpolicies/) +- [Configuring policies](/guides/policies-configuration/) diff --git a/src/plugins/inject-oma-uri.mjs b/src/plugins/inject-oma-uri.mjs index e5521a2..3787aee 100644 --- a/src/plugins/inject-oma-uri.mjs +++ b/src/plugins/inject-oma-uri.mjs @@ -13,6 +13,7 @@ const NO_ADMX_EQUIVALENT = new Set([ "ContentAnalysisTelemetry", // Configured through the admin console, not local policy. "DataLossPrevention", // Configured through the admin console, not local policy. "DisableLocalPolicies", // Registry bootstrap, outside the ADMX namespace. + "DisableMacOSUserPolicies", // macOS only. "DisablePocket", // Deprecated, deliberately omitted upstream. "EnterprisePoliciesEnabled", // Registry bootstrap, outside the ADMX namespace. "MicrosoftEntraSSO", // macOS only.