Edit

Share via

AllowedDomainsForApps

  • Article

Define domains allowed to access Google Workspace

Supported versions

  • On Windows and macOS since 104 or later

Description

Setting the policy on Microsoft Edge turns on the restricted sign-in feature in Google Workspace and prevents users from changing this setting. Users can only access Google tools using accounts from the specified domains. To allow gmail or googlemail accounts, add consumer_accounts to the list of domains. This policy is based on the Chrome policy of the same name.

If you don't provide a ___domain name or leave this policy unset, users can access Google Workspace with any account.

Users cannot change or override this setting.

Note: This policy causes the X-GoogApps-Allowed-Domains header to be appended to all HTTP and HTTPS requests to all google.com domains, as described in https://go.microsoft.com/fwlink/?linkid=2197973.

Supported features

  • Can be mandatory: Yes
  • Can be recommended: No
  • Dynamic Policy Refresh: Yes
  • Per Profile: Yes
  • Applies to a profile that is signed in with a Microsoft account: No

Data type

  • String

Windows information and settings

Group Policy (ADMX) info

  • GP unique name: AllowedDomainsForApps
  • GP name: Define domains allowed to access Google Workspace
  • GP path (Mandatory): Administrative Templates/Microsoft Edge
  • GP path (Recommended): N/A
  • GP ADMX file name: MSEdge.admx

Example value

example.com

Registry settings

  • Path (Mandatory): SOFTWARE\Policies\Microsoft\Edge
  • Path (Recommended): N/A
  • Value name: AllowedDomainsForApps
  • Value type: REG_SZ

Example registry value

example.com

Mac information and settings

  • Preference Key name: AllowedDomainsForApps
  • Example value:
<string>example.com</string>

See also