Allow or block access to websites

Applies to managed Chrome browsers and Chrome OS devices.

As a Chrome Enterprisingness admin you can block and allow URLs so that users can only gossip certain websites. Restricting users' cyberspace access can increase productiveness and protect your organization from viruses and malicious content saved on many websites.

When to choke up and tolerate URLs

Use the blocklist and allowlist for basic URL management. If you need stronger filtering, use a content-filtering, World Wide Web-proxy waiter or extension service.

Use the URL blocklist and allowlist to:

  • Give up access to all URLs except the ones you block—Employ the blocklist to prevent users from visiting certain websites, while allowing them entree to the remainder of the web.
  • Block access to every last URLs except the ones you tolerate—Use the blocklist to block memory access to completely URLs. Then, use the allowlist to permit access to a limited list of URLs.
  • Define exceptions to very restrictive blocklists—Practice the blocklist to block access to totally URLs. And then, use the allowlist to let users access certain schemes, subdomains of separate domains, ports, or specific paths.
  • Allow Chrome web browser to open apps—Allow specific extraneous protocol handlers so that Chromium-plate browser can automatically unconcealed certain apps.

Sometimes, the blocklist and allowlist does not work as expected. For example, if you block an entire internet site and admit a peculiar webpage URL for that site, users might be fit to access other content along that internet site.

URL block exceptions

It is best practice to non block some URLs. These admit:

  • chrome://settings
  • chromium-plate://osmium-settings
  • chrome-untrusted://

The chrome://settings and chrome://os-settings URLs should be considered part of the operative system for Chrome OS and role of the browser for Chrome and should ne'er follow plugged.

Evening if you ut pulley-block some of them, some users might get about this policy by using JavaScript commands to sail to these pages regardless. For example, if you block the Wi-Fi subpage chromium-plate://os-settings/networks?type=Wireless local area network, users can still die to the Page by victimisation the navigation code inside settings from the JavaScript console.

Chrome Oculus sinister system components usechrome-untrusted:// to process data from users or the web and block it is not recommended as it will bump off some system components. This special url scheme allows Google to stool sure any information non included with Chrome OS is handled safely with all the safeguards that the Chromium-plate browser provides and that this data can't accession functionality reserved for system components. Whenever a system ingredient fundament process user-supplied data or content from the web,chrome-untrusted://URLs are used.

If you want to cube chrome://settings,chrome://oculus sinister-settingsor chrome-untrusted://, habituate the SystemFeaturesDisableList policy. This blocks all the settings, not just separate of IT. Practice non use URLallowList Beaver State URLblockList policies to do this. For inside information, see Disabled system features.

If you feature a specific page you want to block, you should isolate what exactly in the paginate that you want to block from users. You rump then alarm Chromium-plate or Chromium-plate OS support about what policies you want enforced. Developers can then add a policy for the specific functionality that should be blocked instead.

Whole step 1: Reexaminatio policies

Insurance Description

URLBlocklist

Prevent users from accessing a name of blocked URLs. Users can access all URLs except those that you block.

Unset: Users lavatory access all web site URLs without restriction.

URLAllowlist

Wont it with URLBlocklist to allow users to access specific URLs American Samoa exceptions to the URL blocklist. The allowlist takes precedence over the blocklist. To work, you need at to the lowest degree one entry in the blocklist.

Unset: There are no exceptions to the URL blocklist.

Step 2: Specify URLs Chrome users can confabulate

Click below for the steps, supported on how you deficiency to get by these policies.

Admin console table

Can utilize for signed-in users on any device or enrolled browsers on Windows, Mackintosh, Beaver State Linux. For details, see See when settings apply.

  2. From the Admin console Homepage, go to Devices and then Chrome.

  3. Get across Settings and then Users &adenosine monophosphate; browsers.
  4. To apply the setting to each users and enrolled browsers, leave the top organizational unit selected. Otherwise, quality a child organizational unit.
  5. Scroll to Uniform resource locator Blocking and enter URLs as needed:
    • Blocked URLs—URLs that you want to prevent users from accessing.

      For syntax and examples, realise Users & browsers > URL blocklist.

    • Blocked URL exceptions—URLs that you want to allow users to access (allowlist). Access is allowed even if the URLs are also characterised in Blocked URLs.

      For phrase structure and examples, see Users & browsers > URL blocklist exceptions.

    You can stymie and reserve upward to 1,000 URLs.

  6. Click Save.
  • Blocked URLs is non recognized by apps that use Android System WebView. To enforce a blocklist along these apps, define the blocked URLs in a text file and apply the blocklist to the Android apps on an app-past-app footing. For apps that don't use Android System WebView, see the app certification for information on how to restrict access in a similar way.
  • Obstructed URL exceptions is usually recognized by Android apps that use Android System of rules WebView. However, other apps mightiness not prize the blocklist. You can allow the apps that use Android System WebView and omit the ones that get into't. For information on allowing Android apps, see Tolerate the installation of approved apps.

Windows

Applies to Windows  users World Health Organization check in to a managed account on Chrome browser.

Using Group Policy

In your Microsoft Windows Group Insurance Editor (Computer operating theatre Drug user Configuration folder):

  1. Go to Policiesand thenAdministrative Templatesand thenGoogleand thenGoogle Chrome.
  2. Enable Blocking access to a list of URLs.
    Hint: If you don't see this policy, download the latest policy guide.
  3. Add the URLs that you privation to block.
    Going away this policy Not configured uses the Unset behaviour represented supra.
  4. Enable Allows access to a list of URLs.
  5. Add the URLs that you lack users to accession.
    Leaving this policy Not organized uses the Unset behavior delineate above.
  6. Deploy the update to your users.

You can block and allow dormie to 1,000 URLs. For URL phrase structure, attend Allow or block websites—URL filter format.

Mac

Applies to Mac  users who sign in to a managed account statement happening Chrome browser.

In your Chromium-plate policy configuration profile (.plist data file):

  1. Add or update the undermentioned keys.
    • Add the URLs that you want to block to theURLBlocklist key.
    • Minimal brain dysfunction the URLs that you want users to access to the URLAllowlist key.
  2. Deploy the changes to your users.

You can block and allow up to 1,000 URLs. For URL syntax, get a line Allow surgery block websites—Universal resource locator filtrate format.

The example shows how to block all URLs except mail.example.com, wikipedia.org, and google.com.

<key>URLBlocklist</key>
<dict>
<lay out>
<string>*</string>
</array>
</dict>
<key>URLAllowlist</key>
<dict>
<array>
<string>get off.example.com</string>
<string>wikipedia.org</string>
<string>google.com</string>
</align>
</dict>

Linux

Applies to Linux  users WHO check in to a managed describe connected Chrome browser.

Using your preferred JSON file editor:

  1. Go to your /etc/opt/chromium-plate/policies/managed pamphlet.
  2. Create operating theater update a JSON file out and enter URLs as required:
    • In URLBlocklist, add together the URLs that you desire to block.
    • In URLAllowlist, contribute the URLs that you want users to access.
  3. Deploy the update to your users.

You can block and allow up to 1,000 URLs. For URL phrase structure, realize Allow or block websites—URL filter format.

The exemplar shows how to block all URLs except mail.example.com, wikipedia.org, and google.com.

First-class honours degree, create a file that contains the blocked URLs.

{
"URLBlocklist": ["*"]
}

Then, create a file that contains the allowed URLs.

{
"URLAllowlist": ["mail.example.com", "wikipedia.org", "google.com"]
}

Step 3 : Verify policies are applied

Aft you apply any Chromium-plate policies, users ask to restart Chrome web browser for the settings to take effect. You john check users' devices to make sure the policy was applied aright.

  1. On a managed twist, go to chrome://policy.
  2. Penetrate Reload policies.
  3. For URLBlocklist and URLAllowlist, make a point Status is set to OK.
  4. For URLBlocklist and URLAllowlist, click Show value and make a point that the value fields are the corresponding as what you set in the policy.

Was this helpful?

How can we improve it?