When a Windows 11 computer is used by a young child for homework, reading, or a small set of approved games, category filtering may allow more of the web than you intend. An approved-site browser uses a simpler rule: every destination is blocked unless a parent or administrator has added its domain.
Decide whether allow-listing fits
An allow-list, also called an approved-site list, works best when the computer has a defined purpose and the child needs a predictable set of resources. It is useful for an elementary-age homework computer, a homeschool learning station, or a supervised school and church computer lab. It is less convenient for a teenager who needs to search broadly across new sources every day.
If you need broad research access, compare this approach with content filtering for children on Windows . The important choice is whether the default should be “allow unless blocked” or “block unless approved.”
Build the approved-site setup
- Use a standard Windows account. Keep administrative credentials with the adult or staff member responsible for the device. This is a foundation for controlling which applications can be installed or used; it is separate from the browser’s site rules.
- Install and pair the approved-site browser. Create the guardian or administrator account, connect the Windows device, and choose the profile that should receive the rules.
- Start with the sites the child actually needs. Add the school platform, library resources, curriculum publishers, and a small number of reviewed entertainment sites. Use domains such as
learn.example.org, not search phrases or a single page title. - Test the complete activity. Open a lesson, sign in, play any required media, and follow one link. If a page uses separate hosts for authentication, video, fonts, or images, review those hosts individually before adding them.
- Set a schedule when the plan supports it. A schedule can define when the approved-site browser is available, but it is not a Windows-wide screen-time control. See the browse schedule guide for the boundary.
Maintain the list deliberately
An approved domain can expose more than one page and may change after you add it. Review new requests yourself, especially for services with user-uploaded videos, comments, public search, or recommendations. Remove domains that no longer support the child’s work.
For multiple children, use separate profiles when their age, curriculum, or approved resources differ. For a lab, a shared template or CSV workflow can reduce repetitive entry, but staff should still review the source list and test it on a real student device.
Test the boundary before handing over the computer
Try an approved lesson, an unapproved domain, a new tab, a sign-in flow, and the schedule boundary. Also check whether Chrome, Firefox, a VPN, a messaging app, or another installed program remains available. The approved-site browser controls browsing inside that browser; it does not replace Windows account restrictions, application management, or network controls.
The result is a focused Windows 11 setup with a clear default: new websites stay unavailable until an adult has decided they belong on the list.
Start with one Windows computer
Create an approved-site setup on Windows
Start with one free profile, review the starter sites, and add the domains your child actually needs.