Share via

LocalNetworkAccessBlockedForUrls

Block sites from making requests to local network endpoints.

Supported versions

  • On Windows and macOS since 140 or later

Description

List of URL patterns. Requests initiated from websites served by matching origins are blocked from issuing Local Network Access requests.

If an origin is covered by both this policy and by LocalNetworkAccessAllowedForUrls, this policy takes precedence.

Depending on the stage of the rollout of Local Network Access, LocalNetworkAccessRestrictionsEnabled may also need to be enabled for this policy to block Local Network Access requests.

For origins not covered by the patterns specified here, the user's personal configuration will apply.

For detailed information on valid URL patterns, please see Enterprise policy URL pattern format.

Note: This policy improves local network security by blocking specified public websites from accessing private IP addresses. It helps prevent unauthorized external sites from reaching internal resources unless explicitly permitted. For more information about Local Network Access, see https://wicg.github.io/local-network-access/.

Supported features

  • Can be mandatory: Yes
  • Can be recommended: No
  • Dynamic Policy Refresh: Yes
  • Per Profile: Yes
  • Applies to a profile that is signed in with a Microsoft account: No

Data type

  • List of strings

Windows information and settings

Group Policy (ADMX) info

  • GP unique name: LocalNetworkAccessBlockedForUrls
  • GP name: Block sites from making requests to local network endpoints.
  • GP path (Mandatory): Administrative Templates/Microsoft Edge/Network settings
  • GP path (Recommended): N/A
  • GP ADMX file name: MSEdge.admx

Example value

http://www.example.com:8080

[*.]example.edu

*

Registry settings

  • Path (Mandatory): SOFTWARE\Policies\Microsoft\Edge\LocalNetworkAccessBlockedForUrls
  • Path (Recommended): N/A
  • Value name: 1, 2, 3, ...
  • Value type: List of REG_SZ

Example registry value

SOFTWARE\Policies\Microsoft\Edge\LocalNetworkAccessBlockedForUrls\1 =

http://www.example.com:8080

SOFTWARE\Policies\Microsoft\Edge\LocalNetworkAccessBlockedForUrls\2 =

[*.]example.edu

SOFTWARE\Policies\Microsoft\Edge\LocalNetworkAccessBlockedForUrls\3 =

*

Mac information and settings

  • Preference Key name: LocalNetworkAccessBlockedForUrls
  • Example value:
<array>
  <string>http://www.example.com:8080</string>
  <string>[*.]example.edu</string>
  <string>*</string>
</array>

See also