CopilotBrowserUseBlockList

Block Copilot browser use on specified URLs

Supported versions

  • Windows: ≥ 158
  • macOS: ≥ 158
  • Android: Not supported
  • iOS: Not supported

Description

Defines the URLs where Copilot browser use is blocked. Users can't modify this policy.

A matching block rule blocks access unless a more specific or equally specific allow rule takes precedence. Blocking can still apply when the CopilotBrowserUseAllowList policy isn't configured or contains '*'. For example, you can allow all URLs with '*' and block paths starting with /private on contoso.com and its subdomains with this policy.

If you don't configure this policy or configure an empty list, this policy blocks no URLs. The allow list still applies: an unconfigured allow list allows all URLs, a configured empty allow list allows none, and a populated allow list allows only listed URLs.

URL patterns use the same syntax as the URLAllowlist and URLBlocklist policies. Patterns can specify schemes, hosts, ports, paths, and query conditions. A hostname such as contoso.com also matches its subdomains. Start the hostname with a dot, such as .contoso.com, to match only that host. Don't use '[*.]contoso.com' or '*.contoso.com'; these forms don't match URLs.

Paths match by prefix, not by path segment. For example, contoso.com/private matches both /private/report and /private-old.

The most specific matching rule determines whether a URL is allowed or blocked. Exact-host rules take precedence over rules that include subdomains, followed by longer hostnames, longer paths, and more query conditions. If allow and block rules are equally specific, the allow rule wins. Schemes and ports restrict matching but don't increase a rule's precedence.

Only the first 1,500 entries in each list are used; later entries are ignored.

This policy doesn't enable Copilot browser use. Other safety checks still apply. For guidance on formatting URL patterns, see https://go.microsoft.com/fwlink/?linkid=2095322.

Supported features

  • Can be mandatory: Yes
  • Can be recommended: No
  • Dynamic Policy Refresh: Yes
  • Per Profile: Yes
  • Applies to a profile that is signed in with a Microsoft account: No

Data type

  • List of strings

Windows information and settings

Group Policy (ADMX) info

  • GP unique name: CopilotBrowserUseBlockList
  • GP name: Block Copilot browser use on specified URLs
  • GP path (Mandatory): Administrative Templates/Microsoft Edge
  • GP path (Recommended): N/A
  • GP ADMX file name: MSEdge.admx

Example value

https://www.contoso.com/private

contoso.edu

contoso.net

.login.contoso.us

Registry settings

  • Path (Mandatory): SOFTWARE\Policies\Microsoft\Edge\CopilotBrowserUseBlockList
  • Path (Recommended): N/A
  • Value name: 1, 2, 3, ...
  • Value type: List of REG_SZ

Example registry value

SOFTWARE\Policies\Microsoft\Edge\CopilotBrowserUseBlockList\1 =

https://www.contoso.com/private

SOFTWARE\Policies\Microsoft\Edge\CopilotBrowserUseBlockList\2 =

contoso.edu

SOFTWARE\Policies\Microsoft\Edge\CopilotBrowserUseBlockList\3 =

contoso.net

SOFTWARE\Policies\Microsoft\Edge\CopilotBrowserUseBlockList\4 =

.login.contoso.us

Mac information and settings

  • Preference Key name: CopilotBrowserUseBlockList
  • Example value:
<array>
  <string>https://www.contoso.com/private</string>
  <string>contoso.edu</string>
  <string>contoso.net</string>
  <string>.login.contoso.us</string>
</array>

See also

  • Last updated on