From 8d208daa0b5d437c203114d143cae111aa47e000 Mon Sep 17 00:00:00 2001
From: Brian Smith <brian@smith.berlin>
Date: Thu, 22 Oct 2026 14:03:06 +0200
Subject: [PATCH 1/2] feat: Add DisableMacOSUserPolicies policy

---
 .../policies/DisableMacOSUserPolicies.mdx     | 60 +++++++++++++++++++
 src/plugins/inject-oma-uri.mjs                |  1 +
 2 files changed, 61 insertions(+)
 create mode 100644 src/content/docs/reference/policies/DisableMacOSUserPolicies.mdx

diff --git a/src/content/docs/reference/policies/DisableMacOSUserPolicies.mdx b/src/content/docs/reference/policies/DisableMacOSUserPolicies.mdx
new file mode 100644
index 0000000..296bd53
--- /dev/null
+++ b/src/content/docs/reference/policies/DisableMacOSUserPolicies.mdx
@@ -0,0 +1,60 @@
+---
+title: "DisableMacOSUserPolicies"
+description: "Ignore policies from the user's preferences and from user-scope configuration profiles on macOS."
+category: "Miscellaneous"
+---
+
+Ignore policies from the user's preferences and from user-scope configuration profiles on macOS.
+On macOS, Firefox reads policies from sources that an administrator can write to, and from sources that a standard user can write to:
+
+- **Administrator sources:** `policies.json`, device-scope configuration profiles, `/Library/Preferences/org.mozilla.firefox.plist`, and policies from the Firefox Enterprise console.
+- **User sources:** `~/Library/Preferences/org.mozilla.firefox.plist` and user-scope configuration profiles, which a standard user can install.
+
+Policies from user sources always rank below policies from administrator sources, so a user cannot override a policy that an administrator has set.
+A user can still set policies that no administrator source sets.
+Setting `DisableMacOSUserPolicies` to `true` stops Firefox from reading policies from user sources.
+
+## Values
+
+- Set to `true` to ignore every policy from user sources.
+- Set to `false` to allow policies from user sources. This is the same as not setting the policy.
+
+## Examples
+
+```json
+{
+  "policies": {
+    "DisableMacOSUserPolicies": true
+  }
+}
+```
+
+## macOS
+
+Set this key in a device-scope configuration profile or in `/Library/Preferences/org.mozilla.firefox.plist`:
+
+```xml
+<dict>
+  <key>DisableMacOSUserPolicies</key>
+  <true/> | <false/>
+</dict>
+```
+
+To set it from the command line:
+
+```bash
+sudo defaults write /Library/Preferences/org.mozilla.firefox DisableMacOSUserPolicies -bool TRUE
+```
+
+## Compatibility
+
+<PolicyCompat policy="DisableMacOSUserPolicies" />
+
+**CCK2 Equivalent:** N/A\
+**Preferences Affected:** N/A
+
+## See also
+
+- [`EnterprisePoliciesEnabled`](/reference/policies/enterprisepoliciesenabled/)
+- [`DisableLocalPolicies`](/reference/policies/disablelocalpolicies/)
+- [Configuring policies](/guides/policies-configuration/)
diff --git a/src/plugins/inject-oma-uri.mjs b/src/plugins/inject-oma-uri.mjs
index e5521a2..3787aee 100644
--- a/src/plugins/inject-oma-uri.mjs
+++ b/src/plugins/inject-oma-uri.mjs
@@ -13,6 +13,7 @@ const NO_ADMX_EQUIVALENT = new Set([
   "ContentAnalysisTelemetry", // Configured through the admin console, not local policy.
   "DataLossPrevention", // Configured through the admin console, not local policy.
   "DisableLocalPolicies", // Registry bootstrap, outside the ADMX namespace.
+  "DisableMacOSUserPolicies", // macOS only.
   "DisablePocket", // Deprecated, deliberately omitted upstream.
   "EnterprisePoliciesEnabled", // Registry bootstrap, outside the ADMX namespace.
   "MicrosoftEntraSSO", // macOS only.

From 388781c071371c922108dbf5ad260b265cd73e92 Mon Sep 17 00:00:00 2001
From: Brian Smith <brian@smith.berlin>
Date: Thu, 22 Oct 2026 17:21:03 +0200
Subject: [PATCH 2/2] feat: Add DisableMacOSUserPolicies policy

---
 .../docs/reference/policies/DisableMacOSUserPolicies.mdx  | 8 +-------
 1 file changed, 1 insertion(+), 7 deletions(-)

diff --git a/src/content/docs/reference/policies/DisableMacOSUserPolicies.mdx b/src/content/docs/reference/policies/DisableMacOSUserPolicies.mdx
index 296bd53..26ca478 100644
--- a/src/content/docs/reference/policies/DisableMacOSUserPolicies.mdx
+++ b/src/content/docs/reference/policies/DisableMacOSUserPolicies.mdx
@@ -12,7 +12,7 @@ On macOS, Firefox reads policies from sources that an administrator can write to
 
 Policies from user sources always rank below policies from administrator sources, so a user cannot override a policy that an administrator has set.
 A user can still set policies that no administrator source sets.
-Setting `DisableMacOSUserPolicies` to `true` stops Firefox from reading policies from user sources.
+Setting `DisableMacOSUserPolicies` to `true` stops Firefox from reading policies from user sources entirely.
 
 ## Values
 
@@ -40,12 +40,6 @@ Set this key in a device-scope configuration profile or in `/Library/Preferences
 </dict>
 ```
 
-To set it from the command line:
-
-```bash
-sudo defaults write /Library/Preferences/org.mozilla.firefox DisableMacOSUserPolicies -bool TRUE
-```
-
 ## Compatibility
 
 <PolicyCompat policy="DisableMacOSUserPolicies" />