+ Post New Thread
Results 1 to 13 of 13
Windows Thread, Banning a website in group policy in Technical; Is it possible to ban a certain website for a group of computers? I need to ban youtube in our ...
  1. #1
    zag
    zag is offline
    zag's Avatar
    Join Date
    Mar 2007
    Posts
    3,762
    Thank Post
    897
    Thanked 416 Times in 350 Posts
    Blog Entries
    12
    Rep Power
    86

    Banning a website in group policy

    Is it possible to ban a certain website for a group of computers?

    I need to ban youtube in our library but I don't think the current cachepilot proxy is capable of doing that so I need another solution.

    Any ideas?

  2. #2

    plexer's Avatar
    Join Date
    Dec 2005
    Location
    Norfolk
    Posts
    13,343
    Thank Post
    624
    Thanked 1,584 Times in 1,421 Posts
    Rep Power
    414
    No.

    Ben

  3. #3

    Edu-IT's Avatar
    Join Date
    Nov 2007
    Posts
    7,121
    Thank Post
    403
    Thanked 619 Times in 566 Posts
    Rep Power
    180
    I didn't think AD was there for web filtering. Thinking out loud here but how about using the hosts file on the computer to direct YouTube to another website?

  4. #4
    zag
    zag is offline
    zag's Avatar
    Join Date
    Mar 2007
    Posts
    3,762
    Thank Post
    897
    Thanked 416 Times in 350 Posts
    Blog Entries
    12
    Rep Power
    86
    Quote Originally Posted by Edu-IT View Post
    I didn't think AD was there for web filtering. Thinking out loud here but how about using the hosts file on the computer to direct YouTube to another website?
    Yeh already tried re-routing youtube.com to 127.0.0.1 via hosts file but it only seems to work when the local user is logged in.

    When a domain user logs in youtube is correctly displayed.

  5. #5

    Join Date
    Jun 2007
    Location
    Manchester
    Posts
    7
    Thank Post
    3
    Thanked 1 Time in 1 Post
    Rep Power
    0
    Are you going through a proxy? If so it might work if you set a new AD group up, and apply your usual proxy settings via GP to the group but with exceptions for the websites you want to disallow. Then just add the relevant users into the group.

    Edit: Just noticed it's for computers rather than students, so you'd have to use some loopback processing as well and apply the new proxy settings to your library OU - no need for the additional group.
    Last edited by JonahIJ; 3rd February 2011 at 10:56 AM.

  6. #6

    Join Date
    Jun 2007
    Location
    London
    Posts
    894
    Thank Post
    64
    Thanked 171 Times in 140 Posts
    Rep Power
    55
    Surely you've got some sort of firewall/proxy/filtering service at some point between your school and the internet? In which case you should be able to add the offending site to a blacklist.

  7. #7
    zag
    zag is offline
    zag's Avatar
    Join Date
    Mar 2007
    Posts
    3,762
    Thank Post
    897
    Thanked 416 Times in 350 Posts
    Blog Entries
    12
    Rep Power
    86
    Quote Originally Posted by timzim View Post
    Surely you've got some sort of firewall/proxy/filtering service at some point between your school and the internet? In which case you should be able to add the offending site to a blacklist.
    Yep I've got a cachepilot proxy that works ok.

    But in this case I need to ban youtube on certain computers in a specific OU, not by user.

    Basically I would like youtube to work everywhere but our library.

  8. #8
    zag
    zag is offline
    zag's Avatar
    Join Date
    Mar 2007
    Posts
    3,762
    Thank Post
    897
    Thanked 416 Times in 350 Posts
    Blog Entries
    12
    Rep Power
    86
    Aha! thanks for the ideas, managed to acomplish it using Internet explorer "Content advisor" setting.

    You can ban sites in there on a specific computer. You can also use group policy if your domain controller is running the same version of IE.

    Does the job even if its a bit messy.

    Restricting Specific Web Sites in Internet Explorer Using Group Policy

    Block.jpg
    Last edited by zag; 3rd February 2011 at 11:12 AM.

  9. Thanks to zag from:

    BBrian (15th February 2011)

  10. #9

    bossman's Avatar
    Join Date
    Nov 2005
    Location
    England
    Posts
    3,905
    Thank Post
    1,186
    Thanked 1,057 Times in 749 Posts
    Rep Power
    328
    @zag:

    I'm not familiar with cachepilot but there should be some way of banning those IP addresses from accessing this particular site.

    You could setup in the DHCP a reserved scope of addresses which these computers belong too and they would always remain in this group that you set up on the cachepilot.

    Just an idea as I have said I am not familiar with it.


  11. #10
    dwhyte85's Avatar
    Join Date
    Mar 2009
    Location
    Berkshire
    Posts
    1,216
    Thank Post
    156
    Thanked 146 Times in 131 Posts
    Rep Power
    102
    I'd do 'Bypass Proxy for local addresses' and make *.youtube.com a local address, add this to the IE settings on GP and deploy to the OU (library comps).

    My way is crud but works, avoid it if you can

  12. #11

    Join Date
    Dec 2009
    Posts
    605
    Thank Post
    8
    Thanked 36 Times in 34 Posts
    Rep Power
    17
    i did have a vbscript once that would copy a host file a login .. seemed to work for domain users ? so unsure why yours didnt above

  13. #12
    soveryapt's Avatar
    Join Date
    Jan 2009
    Location
    Lancashire
    Posts
    2,402
    Thank Post
    648
    Thanked 277 Times in 244 Posts
    Rep Power
    78
    Don't the cachepilots do AD integration? I've not got mine setup as yet, but the cachepilots / NED boxes provided by Lancashire allow AD integration so you can choose OUs to allow through and not to specific sites.

  14. #13


    Join Date
    Mar 2009
    Location
    Leeds
    Posts
    6,580
    Thank Post
    228
    Thanked 854 Times in 733 Posts
    Rep Power
    295
    if you do use a proxy and cant get to internet without one you could use the proxy exception list in ie settings somewhere. Put facebook in there and it wont look for it on the proxy so should fail

SHARE:
+ Post New Thread

Similar Threads

  1. Group policy search website
    By pete in forum Links
    Replies: 1
    Last Post: 15th July 2010, 09:23 AM
  2. Group Policy
    By JoeBloggs in forum Courses and Training
    Replies: 8
    Last Post: 14th June 2010, 08:13 PM
  3. Group Policy
    By Neville in forum Windows
    Replies: 2
    Last Post: 6th May 2008, 12:17 PM
  4. group policy
    By kevin_lane in forum How do you do....it?
    Replies: 2
    Last Post: 27th July 2007, 12:17 PM
  5. Group policy etc
    By moiebus in forum Wireless Networks
    Replies: 20
    Last Post: 8th November 2006, 11:48 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •