Skip to content

feat: link to OMA-URIs instead of inlining code #295

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
bsmth merged 1 commit into from
Aug 25, 2026
Merged

feat: link to OMA-URIs instead of inlining code #295

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions CHANGELOG.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -12,6 +12,7 @@
### Changed

- `CrashReportsSubmit` policy: Update policy structure to remove `ForceAutoSubmit` key in favor of `Enabled` key ([#222](https://github.com/mozilla/enterprise-admin-reference/pull/222))
- Replace the hand-maintained `Windows (Intune)` sections with an `OMA-URI` link to the [Firefox ADMX OMA-URIs for Intune](https://mozilla.github.io/policy-templates/oma-uris) reference, which is generated from `firefox.admx`.

<!-- unpublished for now

Expand Down
17 changes: 17 additions & 0 deletions CONTRIBUTING.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -68,6 +68,23 @@ To add the table to a policy page, use the `PolicyCompat` component and pass the

Anything the table cannot express belongs in prose directly below it.

### OMA-URIs

Reference pages do not document OMA-URIs. They live in
[`docs/oma-uris.md`](https://github.com/mozilla/policy-templates/blob/master/docs/oma-uris.md) in
`mozilla/policy-templates`, generated from `windows/firefox.admx` and published at
[mozilla.github.io/policy-templates/oma-uris](https://mozilla.github.io/policy-templates/oma-uris).

`src/plugins/inject-oma-uri.mjs` adds the `**OMA-URI:**` line below `**CCK2 Equivalent:**` at build
time, so a new policy page needs no markup.
The anchor is the lowercased policy name.

Two lists hardcode policies that get no addition:

- `NO_ADMX_EQUIVALENT` — no ADMX equivalent.
- `MISSING_UPSTREAM` — may need one but missing from `firefox.admx`. These log a build warning.
Remove a name once it lands upstream and the link starts rendering.

## Changelog

The changelog is based on **Firefox versions**, not documentation versions.
Expand Down
3 changes: 2 additions & 1 deletion astro.config.mjs
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -6,6 +6,7 @@ import starlightChangelogs, { makeChangelogsSidebarLinks } from "starlight-chang
import starlightLinksValidator from "starlight-links-validator";
import { unified } from "@astrojs/markdown-remark";
import remarkAutoImportPolicyComponents from "./src/plugins/auto-import-policy-components.mjs";
import remarkInjectOmaUri from "./src/plugins/inject-oma-uri.mjs";

export const locales = {
root: { label: "English", lang: "en" },
Expand Down Expand Up @@ -35,7 +36,7 @@ export default defineConfig({
markdown: {
processor: unified({
smartypants: false,
remarkPlugins: [remarkAutoImportPolicyComponents],
remarkPlugins: [remarkAutoImportPolicyComponents, remarkInjectOmaUri],
}),
},
integrations: [
Expand Down
14 changes: 0 additions & 14 deletions src/content/docs/reference/policies/AllowFileSelectionDialogs.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -23,20 +23,6 @@ Enable or disable file selection dialogs.
Software\Policies\Mozilla\Firefox\AllowFileSelectionDialogs = 0x1 | 0x0
```

## Windows (Intune)

OMA-URI:

```url
./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AppAutoAllowFileSelectionDialogsUpdate
```

Value (string):

```xml
<enabled/> or <disabled/>
```

## macOS

```xml
Expand Down
15 changes: 0 additions & 15 deletions src/content/docs/reference/policies/AllowedDomainsForApps.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -25,21 +25,6 @@ If this policy is enabled, users can only access Google Workspace using accounts
Software\Policies\Mozilla\Firefox\AllowedDomainsForApps = "managedfirefox.com,example.com"
```

## Windows (Intune)

OMA-URI:

```url
./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AllowedDomainsForApps
```

Value (string):

```xml
<enabled/>
<data id="AllowedDomainsForApps" value="managedfirefox.com,example.com"/>
```

## macOS

```xml
Expand Down
14 changes: 0 additions & 14 deletions src/content/docs/reference/policies/AppAutoUpdate.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -29,20 +29,6 @@ If you have disabled updates via [`DisableAppUpdate`](/reference/policies/disabl
Software\Policies\Mozilla\Firefox\AppAutoUpdate = 0x1 | 0x0
```

## Windows (Intune)

OMA-URI:

```url
./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AppAutoUpdate
```

Value (string):

```xml
<enabled/> or <disabled/>
```

## macOS

```xml
Expand Down
15 changes: 0 additions & 15 deletions src/content/docs/reference/policies/AppUpdatePin.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -35,21 +35,6 @@ If you specify a version that doesn't exist, Firefox will update beyond that ver
Software\Policies\Mozilla\Firefox\AppUpdatePin = "106."
```

## Windows (Intune)

OMA-URI:

```url
./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AppUpdatePin
```

Value (string):

```xml
<enabled/>
<data id="String" value="106."/>
```

## macOS

```xml
Expand Down
15 changes: 0 additions & 15 deletions src/content/docs/reference/policies/AppUpdateURL.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -23,21 +23,6 @@ Change the URL for application update if you are providing Firefox updates from
Software\Policies\Mozilla\Firefox\AppUpdateURL = "https://yoursite.com"
```

## Windows (Intune)

OMA-URI:

```url
./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AppUpdateURL
```

Value (string):

```xml
<enabled/>
<data id="AppUpdateURL" value="https://yoursite.com"/>
```

## macOS

```xml
Expand Down
79 changes: 0 additions & 79 deletions src/content/docs/reference/policies/Authentication.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -39,85 +39,6 @@ Software\Policies\Mozilla\Firefox\Authentication\Locked = 0x1 | 0x0
Software\Policies\Mozilla\Firefox\Authentication\PrivateBrowsing = 0x1 | 0x0
```

## Windows (Intune)

OMA-URI:

```url
./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_SPNEGO
```

Value (string):

```xml
<enabled/>
<data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
```

OMA-URI:

```url
./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_Delegated
```

Value (string):

```xml
<enabled/>
<data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
```

OMA-URI:

```url
./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_NTLM
```

Value (string):

```xml
<enabled/>
<data id="Authentication" value="1&#xF000;mydomain&#xF000;2&#xF000;https://myotherdomain.com"/>
```

OMA-URI:

```url
./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_AllowNonFQDN
```

Value (string):

```xml
<enabled/>
<data id="Authentication_AllowNonFQDN_NTLM" value="true | false"/>
<data id="Authentication_AllowNonFQDN_SPNEGO" value="true | false"/>
```

OMA-URI:

```url
./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_Locked
```

Value (string):

```xml
<enabled/> or <disabled/>
```

OMA-URI:

```url
./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Authentication/Authentication_PrivateBrowsing
```

Value (string):

```xml
<enabled/> or <disabled/>
```

## macOS

```xml
Expand Down
39 changes: 0 additions & 39 deletions src/content/docs/reference/policies/AutoLaunchProtocolsFromOrigins.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -35,45 +35,6 @@ Software\Policies\Mozilla\Firefox\AutoLaunchProtocolsFromOrigins (REG_MULTI_SZ)
]
```

## Windows (Intune)

OMA-URI:

```url
./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AutoLaunchProtocolsFromOrigins
```

Value (string):

```xml
<enabled/>
<data id="JSON" value='
[
{
"protocol": "zoommtg",
"allowed_origins": [
"https://somesite.zoom.us"
]
}
]'/>
```

If you are using custom ADMX and ADML administrative templates in Intune, you can use this OMA-URI instead
to workaround the limit on the length of strings. Put all of your JSON on one line.

@bsmth bsmth Aug 24, 2026

Copy link
Copy Markdown
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This is recorded inline in the templates repo: no information loss here.


OMA-URI:

```url
./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AutoLaunchProtocolsFromOriginsOneLine
```

Value (string):

```xml
<enabled/>
<data id="JSONOneLine" value='[]'/>
```

## macOS

```xml
Expand Down
14 changes: 0 additions & 14 deletions src/content/docs/reference/policies/AutofillAddressEnabled.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -26,20 +26,6 @@ See [Automatically fill in your address on web forms](https://support.mozilla.or
Software\Policies\Mozilla\Firefox\AutofillAddressEnabled = 0x1 | 0x0
```

## Windows (Intune)

OMA-URI:

```url
./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AutofillAddressEnabled
```

Value (string):

```xml
<enabled/> or <disabled/>
```

## macOS

```xml
Expand Down
14 changes: 0 additions & 14 deletions src/content/docs/reference/policies/AutofillCreditCardEnabled.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -25,20 +25,6 @@ This only applies when payment method autofill is enabled for a particular Firef
Software\Policies\Mozilla\Firefox\AutofillCreditCardEnabled = 0x1 | 0x0
```

## Windows (Intune)

OMA-URI:

```url
./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AutofillCreditCardEnabled
```

Value (string):

```xml
<enabled/> or <disabled/>
```

## macOS

```xml
Expand Down
14 changes: 0 additions & 14 deletions src/content/docs/reference/policies/BackgroundAppUpdate.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -34,20 +34,6 @@ Windows only.
Software\Policies\Mozilla\Firefox\BackgroundAppUpdate = 0x1 | 0x0
```

## Windows (Intune)

OMA-URI:

```url
./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BackgroundAppUpdate
```

Value (string):

```xml
<enabled/> or <disabled/>
```

## macOS

```xml
Expand Down
14 changes: 0 additions & 14 deletions src/content/docs/reference/policies/BlockAboutAddons.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -23,20 +23,6 @@ Block access to the Add-ons Manager (`about:addons`).
Software\Policies\Mozilla\Firefox\BlockAboutAddons = 0x1 | 0x0
```

## Windows (Intune)

OMA-URI:

```url
./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutAddons
```

Value (string):

```xml
<enabled/> or <disabled/>
```

## macOS

```xml
Expand Down
14 changes: 0 additions & 14 deletions src/content/docs/reference/policies/BlockAboutConfig.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -23,20 +23,6 @@ Block access to Advanced Preferences (`about:config`).
Software\Policies\Mozilla\Firefox\BlockAboutConfig = 0x1 | 0x0
```

## Windows (Intune)

OMA-URI:

```url
./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BlockAboutConfig
```

Value (string):

```xml
<enabled/> or <disabled/>
```

## macOS

```xml
Expand Down
Loading