group policy to restrcit access to certain sites

Hello all,

Can anyone tell me how to setup the group policy to block access to certain sites?
sbodnarAsked:
Who is Participating?
 
PaulD77Commented:
I wouldn't use GP, just create a DNS redirect

It's not a particularly nice solution if you have a lot of them to block. Still possible though.

If you want to block entire domains you would:

1.Open the DNS Console
2.Expand Forward Lookup Zones
3.Create a new Forward Lookup Zone, as a Primary Zone
4.Give it the name of the domain you wish to block. e.g. annoyingdomain.com.

If you just want to block websites under domains you do almost the same:

1.Open the DNS Console
2.Expand Forward Lookup Zones
3.Create a new Forward Lookup Zone, as a Primary Zone
4.Give it the name matching the site you want to block. e.g. www.annoyingdomain.com.
This way, you could still send mail and access other resources as annoyingdomain.com, it's just the address for www.annoyingdomain.com which gets answered by your own DNS Server.

Like I said, not exactely a nice solution, but, if you just want to block a few sites like myspace of Facebook, and dont have the money to spend on hardware

0
 
sbodnarAuthor Commented:
my users are all laptops and when they disconnect from my network they free themselves of restrcitions. Once disconnected they can get on facebook and other social media sites which I dont want them doing.

That is why I thought GP would be able to fix that issue.
0
Making Bulk Changes to Active Directory

Watch this video to see how easy it is to make mass changes to Active Directory from an external text file without using complicated scripts.

 
apache09Commented:
If these are laptop users, you are correct.

Once they are off the domain, you have limited ability to block site access.

In this instance I would modify the Hosts file on the laptop next time its on the network

http://www.spywarevoid.com/how-to-block-malicious-websites-using-hosts-file

0
 
sbodnarAuthor Commented:
so if I setup a block via group policy that wont work? once the users disconnect from my LAN and leave the office they will no longer have those restrictions in place?
0
 
netcmhCommented:
Their profile would carry the restrictions
0
 
netcmhCommented:
Thanks for the grade. Good luck.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.