group policy to restrcit access to certain sites

Hello all,

Can anyone tell me how to setup the group policy to block access to certain sites?
sbodnarAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
PaulD77Commented:
I wouldn't use GP, just create a DNS redirect

It's not a particularly nice solution if you have a lot of them to block. Still possible though.

If you want to block entire domains you would:

1.Open the DNS Console
2.Expand Forward Lookup Zones
3.Create a new Forward Lookup Zone, as a Primary Zone
4.Give it the name of the domain you wish to block. e.g. annoyingdomain.com.

If you just want to block websites under domains you do almost the same:

1.Open the DNS Console
2.Expand Forward Lookup Zones
3.Create a new Forward Lookup Zone, as a Primary Zone
4.Give it the name matching the site you want to block. e.g. www.annoyingdomain.com.
This way, you could still send mail and access other resources as annoyingdomain.com, it's just the address for www.annoyingdomain.com which gets answered by your own DNS Server.

Like I said, not exactely a nice solution, but, if you just want to block a few sites like myspace of Facebook, and dont have the money to spend on hardware

0
sbodnarAuthor Commented:
my users are all laptops and when they disconnect from my network they free themselves of restrcitions. Once disconnected they can get on facebook and other social media sites which I dont want them doing.

That is why I thought GP would be able to fix that issue.
0
Webinar: Cyber Crime Becomes Big Business

The rising threat of malware-as-a-service is not one to be overlooked. Malware-as-a-service is growing and easily purchased from a full-service cyber-criminal store in a “Virus Depot” fashion. Join us in our upcoming webinar as we discuss how to best defend against these attacks!

apache09Commented:
If these are laptop users, you are correct.

Once they are off the domain, you have limited ability to block site access.

In this instance I would modify the Hosts file on the laptop next time its on the network

http://www.spywarevoid.com/how-to-block-malicious-websites-using-hosts-file

0
sbodnarAuthor Commented:
so if I setup a block via group policy that wont work? once the users disconnect from my LAN and leave the office they will no longer have those restrictions in place?
0
netcmhCommented:
Their profile would carry the restrictions
0
netcmhCommented:
Thanks for the grade. Good luck.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Active Directory

From novice to tech pro — start learning today.