

The equivalent in GNU/Linux is /usr/share/mozilla/extensions/ block. To enable approved extensions via Firefox install_directory\browser\extensions, set extensions.enabledScopes to 4, & add lockPref("toDisableScopes", 11) Īlternatively (in Windows), to enable approved extensions via Windows registry HKLM, set extensions.enabledScopes to 8, and toDisableScopes to 7.

The second code block above throws an error whenever this location appears, and Firefox exits.Ībout:config, about:config Entries, Config Descriptions extension, Installing extensions, Special locations The (user) Scope 1 hybrid location (user profile 'extensions' folder) is the only store of the first installation method and is obsoleted by setting xpinstall.enabled to false, but is not scoped out (extensions.enabledScopes) as a discovered location (second installation method). Setting extensions.enabledScopes to 0 disables all (except user (profile) folder (Scope 1), and admin folder) offline/manual discovery (once at every Firefox startup) locations. installations from websites, Tools > Add-ons >, File > Open File, and drag-n'-drop. Setting xpinstall.enabled to false disables all installations through (running) Firefox, i.e. nonmandatory - users may modify the initially set value. mandatory - users cannot modify, whereasĭefaultPref() or pref() specifies a preference i.e. Tech_a_break // here anything undefined would sufficeĭouble slashes (//) outside code denote comments. Var profExtDir = FileUtils.getDir("ProfD",, false, false) LockPref("extensions.enabledScopes", 0) // Or 4 or 8 for approved extensionsĬ("resource://gre/modules/FileUtils.jsm") This is a variation, compiled from the helpful details MDN, MozillaZine, PCC-Services, Mike's Musings To block/prevent extensions (include this in the lock (policy) file): lockPref("xpinstall.enabled", false) LockPref("", true) Īlso see the locked config settings on to the official docs. LockPref("signon.rememberSignons", false) LockPref("profile.allow_automigration", false)


LockPref("plugins.hide_infobar_for_missing_plugin", true) LockPref("fault_plugin_disabled", false) LockPref("browser.rights.3.shown", true) It's a K-12 environment, so your needs will likely vary. Here's the list of settings we deploy via lock down. Administrators can of course swap in/out the config file at will. This, however, will prevent all users from using locked down features though. You can apply lock down settings with mozilla.cfg.
