Block internet radio with active directory 2008

Hi All,

Does anyone know how to block a user from accessing internet radio (such as pandora) using active directory group policy?  Such as creating an OU, adding users to that OU and appling the policy so those users with in the OU won't be able to stream music.

Thank you in advance.
ReyesrjAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

helpfinderIT ConsultantCommented:
question is if you have web pages you want to block, or if you want to block internet radio in general terms
if you have concrete links (radios) and don´t have proxy or some web filter then you could use blocking desired web pages using hosts file located in system32. it can be edited and desired web pages inserted and these won´t be accessable from aby broswer.
To distrubute to desired PCs you just need to simple bat to copy it over the network.
this is not usable if you want to block users, because it will block whole PC.
thomasdavisCommented:
http://www.opendns.com/home-solutions/

look here, I believe this is a free service for internet filtering
ReyesrjAuthor Commented:
Yes, block workstations is more what I'm after.  Could you explain more on how to apply your suggestion.  Thanks!
10 Tips to Protect Your Business from Ransomware

Did you know that ransomware is the most widespread, destructive malware in the world today? It accounts for 39% of all security breaches, with ransomware gangsters projected to make $11.5B in profits from online extortion by 2019.

Darius GhassemCommented:
Well you can't really block and sites with GPO directly. What you really want is a firewall or content filter that blocks access to these sites.
helpfinderIT ConsultantCommented:
This is how your hosts file looks like:

# Copyright (c) 1993-1999 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
#      102.54.94.97     rhino.acme.com          # source server
#       38.25.63.10     x.acme.com              # x client host

127.0.0.1	 localhost

Open in new window


you can add web pages or IPs you wan to block, to block Rapidshare for example you have to edit the hosts file in this way:

# Copyright (c) 1993-1999 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
#      102.54.94.97     rhino.acme.com          # source server
#       38.25.63.10     x.acme.com              # x client host

127.0.0.1	 localhost
127.0.0.1	 www.rapidshare.com

Open in new window


then on that PC www.rapidshare will be blocked. you can add here any web page. to distrubute it you could prepare .bat file with content:

copy hosts \\192.168.1.100\c$\WINDOWS\system32\drivers\etc
copy hosts \\192.168.1.103\c$\WINDOWS\system32\drivers\etc
copy hosts \\192.168.1.104\c$\WINDOWS\system32\drivers\etc

Open in new window


and then just run the command.

To apply this, browser(s) has to be restarted

This is very simple solution if you are interested. No doubts there are different more professional or enterprise solution like firewall, proxy etc.
You could use Squid as a free solution, but have to study how it works, how to configure etc.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
ReyesrjAuthor Commented:
Thanks!
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2008

From novice to tech pro — start learning today.