PopupsAllowedForUrls GPO needs example notation to make it work

%3CLINGO-SUB%20id%3D%22lingo-sub-1206718%22%20slang%3D%22en-US%22%3EPopupsAllowedForUrls%20GPO%20needs%20example%20notation%20to%20make%20it%20work%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1206718%22%20slang%3D%22en-US%22%3E%3CP%3EDear%20reader%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWe%20found%20out%20while%20configuring%20the%20GPO%20setting%26nbsp%3BPopupsAllowedForUrls%20that%20it%20requires%20the%20notation%3A%3C%2FP%3E%3CP%3E%5B*.%5Dhan.nl%3C%2FP%3E%3CP%3E%5B*.%5Dyouforce.biz%3C%2FP%3E%3CP%3EThese%20are%202%20settings%20we%20had%20to%20add%20this%20week.%3C%2FP%3E%3CP%3EIn%20my%20knowledge%20the%20%5B*.%5D%20is%20in%20the%20documentation%20(%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-gb%2Fdeployedge%2Fmicrosoft-edge-policies%23popupsallowedforurls%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-gb%2Fdeployedge%2Fmicrosoft-edge-policies%23popupsallowedforurls%3C%2FA%3E)%20foe%20explanation%2C%20so%20you%20should%20be%20able%20to%20use%3A%3C%2FP%3E%3CP%3Ehan.nl%3C%2FP%3E%3CP%3Eyouforce.biz%3C%2FP%3E%3CP%3Eor%3A%3C%2FP%3E%3CP%3E*.han.nl%3C%2FP%3E%3CP%3E*.youforce.biz%3C%2FP%3E%3CP%3EBut...%20that%20is%20the%20case.%20Domain%20names%20without%20any%20*.%20or%20with%20*.%20just%20do%20not%20work.%3C%2FP%3E%3CP%3ESince%20in%20IE%20and%20EdgeHTML%20is%20was%20always%2C%20and%20preferred%20to%20use%20just%20domain%20names%2C%20this%20almost%20looks%20like%20a%20bug%2C%20if%20Google%20Chrome%20would%20behave%20differently%2C%20which%20it%20does%20not.%3C%2FP%3E%3CP%3EIt%20has%20the%20same%20quirk.%3C%2FP%3E%3CP%3EIs%20this%20intentional%20or%20a%20bug%20in%20Chromium%3F%3C%2FP%3E%3CP%3EWe%20have%20seen%20this%20behaviour%20in%20Edge%2080.0.361.62%20stable%20on%20Windows%2010%201903%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ERegards%2C%20Henno%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1208528%22%20slang%3D%22en-US%22%3ERe%3A%20PopupsAllowedForUrls%20GPO%20needs%20example%20notation%20to%20make%20it%20work%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1208528%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F539993%22%20target%3D%22_blank%22%3E%40Joachim_T%3C%2FA%3E%26nbsp%3BThanks%20Joachim.%20I%20will%20probably%20not%20be%20the%20first%20who%20reads%20this%20as%20I%20did...%3C%2FP%3E%3CP%3E%5C%3C%2FP%3E%3CP%3Eregards%2C%20Henno%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1208189%22%20slang%3D%22en-US%22%3ERe%3A%20PopupsAllowedForUrls%20GPO%20needs%20example%20notation%20to%20make%20it%20work%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1208189%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F400875%22%20target%3D%22_blank%22%3E%40Henno_Keers%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIts%20just%20a%20missunderstanding%3C%2FP%3E%3CP%3E%3CSPAN%3E%5B*.%5Dyouforce.biz%20is%20the%20real%20syntax%20not%20a%20symbolic%20view%20on%20it.%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%3Eso%20if%20you%20want%20to%20whitelist%20all%20subdomains%20from%20microsoft.com%20use%20%5B*.%5Dmicrosoft.com%20just%20like%20writen.%20no%20changes.%20including%20the%20brackets%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1698708%22%20slang%3D%22de-DE%22%3ERe%3A%20PopupsAllowedForUrls%20GPO%20needs%20example%20notation%20to%20make%20it%20work%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1698708%22%20slang%3D%22de-DE%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F539993%22%20target%3D%22_blank%22%3E%40Joachim_T%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHello%3C%2FP%3E%3CP%3EWhat%20is%20the%20code%20for%20the%20subdomains%20of%20IP%20addresses%3F%20I%20need%20to%20allow%20pop-ups%20for%20many%20Ip%20addresses%20begin%20with%2010.152.x.x.%20A%20the%20moment%20i%20have%20to%20enter%20each%20Ip%20address%20individually.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Ebest%20regards%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E
Frequent Contributor

Dear reader,

 

We found out while configuring the GPO setting PopupsAllowedForUrls that it requires the notation:

[*.]han.nl

[*.]youforce.biz

These are 2 settings we had to add this week.

In my knowledge the [*.] is in the documentation (https://docs.microsoft.com/en-gb/deployedge/microsoft-edge-policies#popupsallowedforurls) foe explanation, so you should be able to use:

han.nl

youforce.biz

or:

*.han.nl

*.youforce.biz

But... that is the case. Domain names without any *. or with *. just do not work.

Since in IE and EdgeHTML is was always, and preferred to use just domain names, this almost looks like a bug, if Google Chrome would behave differently, which it does not.

It has the same quirk.

Is this intentional or a bug in Chromium?

We have seen this behaviour in Edge 80.0.361.62 stable on Windows 10 1903

 

Regards, Henno

3 Replies

@Henno_Keers 

 

Its just a missunderstanding

[*.]youforce.biz is the real syntax not a symbolic view on it.

 

so if you want to whitelist all subdomains from microsoft.com use [*.]microsoft.com just like writen. no changes. including the brackets

 

 

 

 

@Joachim_T Thanks Joachim. I will probably not be the first who reads this as I did...

 

regards, Henno

@Joachim_T 

 

Hello 

what is the code for the subdomains of IP-Adresses? I need to allow Popups für many Ip Adresses begin with 10.152.x.x. A the moment i have to enter each Ip adress individually.

 

best regards