Forum Discussion

LewisTaylor's avatar
LewisTaylor
Copper Contributor
Sep 03, 2019

Block Access To All Sites Except Whitelist Configuration Google Chrome In Intune

Due to the phasing out of the intune managed browser, we have deployed Google Chrome to our Corporate Owned Dedicated Devices. Within client apps - app configuration settings we can configure "Block a...
Intue
SweJorgenMVP's avatar
SweJorgenMVP
MVP
Sep 09, 2019

LewisTaylor Hi,

You need to blacklist everything and then use the Whitelist setting to allow whitelisted websites.. From the Google docs it should look like this.

"*" blocks all requests; only whitelisted URLs will be allowed;

I hope that helps.

Regards,
Jörgen

LewisTaylor's avatar
LewisTaylor
Copper Contributor
Sep 09, 2019
Jörgen Nilsson thanks for your response, that's appreciated I have now got the block configured. However I am now trying to configure the whitelisted URLs, this is an example of my syntax.... ["https://contoso.com","https://microsoft.com*","https://office.com*"] Doesn't seem to be allowing these sites to whitelist but I think the problem is in my syntax
  • ProITadmin's avatar
    ProITadmin
    Copper Contributor
    Jul 24, 2024

    Unfortunately, there is not much documentation on the syntax for multiple URL's or string values.
    I found that this syntax works for MS Edge app configuration policies:
    "https://contoso.com,microsoft.com,office.com,http://google.com,yahoo.com,edge://flagsedge://flags"
    You have to use the protocol type of URL (HTTPS or HTTP or CHROME or EDGE commands) and follow each domain with a comma for that specific protocol.

    What I have found works on Google Chrome App config policy is to use an array instead of a string value:

     

     

    {
        "kind": "androidenterprise#managedConfiguration",
        "productId": "app:com.android.chrome",
        "managedProperty": [
            {
                "key": "URLBlocklist",
                "valueString": "*"
            },
            {
                "key": "URLAllowlist",
                "valueStringArray": [
                    "https://YOURDOMAIN.com",
                    "play.google.com",
                    "microsoftonline.com",
                    "microsoft.com",
                    "http://YOURDOMAIN.com",
                    "chrome://policy"
                ]  
            }
        ]
    }
  • somesh_pathak's avatar
    somesh_pathak
    Iron Contributor
    Sep 10, 2019

    LewisTaylorwere you able to block access to all internet sites using Intune for mobile devices? and you did it using Chrome config settings?

    • LewisTaylor's avatar
      LewisTaylor
      Copper Contributor
      Sep 16, 2019
      Hi Somesh Yeah I used these two commands within the client apps configuration of chrome for android. Configuration Key - Block access to a list of URLs Value Type - String Configuration Value - ["*"] Configuration Key - Allow access to a list of URLs Value Type - String Configuration Value - ["wikipedia.org", "chrome://policy", "microsoft.com"] This allowed me to block all URLs by default, then enable a whitelist of URLs with the 2nd command.
      • Sanggaa_Honeywell's avatar
        Sanggaa_Honeywell
        Brass Contributor
        Apr 11, 2023
        Hey @somesh @lewis
        Could you put the screenshot config from the Intune console as how it looks like

Resources