Block access to a list of URLs

Defines a list of sites, based on URL patterns, that are blocked (your users can't load them).

Format the URL pattern according to https://go.microsoft.com/fwlink/?linkid=2095322.

You can define exceptions in the 'URLAllowlist' (Define a list of allowed URLs) policy. These policies are limited to 1000 entries; subsequent entries are ignored.

Blocking internal 'edge://*' and 'chrome-untrusted://*' URLs isn't recommended - this may lead to unexpected errors.

This policy doesn't prevent the page from updating dynamically through JavaScript. For example, if you block 'contoso.com/abc', users can visit 'contoso.com' and select on a link to visit 'contoso.com/abc', as long as the page doesn't refresh.

If you don't configure this policy, no URLs are blocked.

This policy doesn't work as expected with file://* wildcards.

Example value:

contoso.com
https://ssl.server.com
hosting.com/bad_path
https://server:8080/path
.exact.hostname.com
custom_scheme:*
*