Block Access To All Sites Except Whitelist Configuration Google Chrome In Intune

Copper Contributor
Due to the phasing out of the intune managed browser, we have deployed Google Chrome to our Corporate Owned Dedicated Devices. Within client apps - app configuration settings we can configure "Block access to a list of URLs" within the chrome browser. But I cannot seem to figure out if you can block all sites by default and then have the whitelist configured for allowed sites. Does anybody know if this is possible and if so what syntax do I need to put in the block access to a list of URLs configuration box?
7 Replies

@LewisTaylor Hi,

You need to blacklist everything and then use the Whitelist setting to allow whitelisted websites.. From the Google docs it should look like this.

"*" blocks all requests; only whitelisted URLs will be allowed;

I hope that helps.

Regards,
Jörgen

@Jörgen Nilsson thanks for your response, that's appreciated I have now got the block configured. However I am now trying to configure the whitelisted URLs, this is an example of my syntax.... ["https://contoso.com","https://microsoft.com*","https://office.com*"] Doesn't seem to be allowing these sites to whitelist but I think the problem is in my syntax

@LewisTaylorwere you able to block access to all internet sites using Intune for mobile devices? and you did it using Chrome config settings?

Hi Somesh Yeah I used these two commands within the client apps configuration of chrome for android. Configuration Key - Block access to a list of URLs Value Type - String Configuration Value - ["*"] Configuration Key - Allow access to a list of URLs Value Type - String Configuration Value - ["wikipedia.org", "chrome://policy", "microsoft.com"] This allowed me to block all URLs by default, then enable a whitelist of URLs with the 2nd command.
Hey @somesh @lewis
Could you put the screenshot config from the Intune console as how it looks like
Does anyone know the syntax to whitelist local file storage? For example, we have tested below, and it works - "file:///storage/emulated/0/Download/" when Chrome tries to open files as "file:///xxxxx/xxxx/123.jpg", however, sometime, Chrome is using "content://xxxxx/xxx/456.jpg" to open the file, so we tried "content://media/external/downloads/" where the file is, still blocked. Any idea?

Thanks,