+ Post New Thread
Results 1 to 13 of 13
Windows Thread, Banning a website in group policy in Technical; Is it possible to ban a certain website for a group of computers? I need to ban youtube in our ...
  1. #1
    zag
    zag is offline
    zag's Avatar
    Join Date
    Mar 2007
    Posts
    3,909
    Thank Post
    954
    Thanked 451 Times in 380 Posts
    Blog Entries
    12
    Rep Power
    93

    Banning a website in group policy

    Is it possible to ban a certain website for a group of computers?

    I need to ban youtube in our library but I don't think the current cachepilot proxy is capable of doing that so I need another solution.

    Any ideas?

  2. #2

    plexer's Avatar
    Join Date
    Dec 2005
    Location
    Norfolk
    Posts
    13,610
    Thank Post
    730
    Thanked 1,688 Times in 1,502 Posts
    Rep Power
    433
    No.

    Ben

  3. #3

    Edu-IT's Avatar
    Join Date
    Nov 2007
    Posts
    7,250
    Thank Post
    404
    Thanked 630 Times in 575 Posts
    Rep Power
    185
    I didn't think AD was there for web filtering. Thinking out loud here but how about using the hosts file on the computer to direct YouTube to another website?

  4. #4
    zag
    zag is offline
    zag's Avatar
    Join Date
    Mar 2007
    Posts
    3,909
    Thank Post
    954
    Thanked 451 Times in 380 Posts
    Blog Entries
    12
    Rep Power
    93
    Quote Originally Posted by Edu-IT View Post
    I didn't think AD was there for web filtering. Thinking out loud here but how about using the hosts file on the computer to direct YouTube to another website?
    Yeh already tried re-routing youtube.com to 127.0.0.1 via hosts file but it only seems to work when the local user is logged in.

    When a domain user logs in youtube is correctly displayed.

  5. #5

    Join Date
    Jun 2007
    Location
    Manchester
    Posts
    7
    Thank Post
    3
    Thanked 1 Time in 1 Post
    Rep Power
    0
    Are you going through a proxy? If so it might work if you set a new AD group up, and apply your usual proxy settings via GP to the group but with exceptions for the websites you want to disallow. Then just add the relevant users into the group.

    Edit: Just noticed it's for computers rather than students, so you'd have to use some loopback processing as well and apply the new proxy settings to your library OU - no need for the additional group.
    Last edited by JonahIJ; 3rd February 2011 at 10:56 AM.

  6. #6

    Join Date
    Jun 2007
    Location
    London
    Posts
    894
    Thank Post
    64
    Thanked 171 Times in 140 Posts
    Rep Power
    55
    Surely you've got some sort of firewall/proxy/filtering service at some point between your school and the internet? In which case you should be able to add the offending site to a blacklist.

  7. #7
    zag
    zag is offline
    zag's Avatar
    Join Date
    Mar 2007
    Posts
    3,909
    Thank Post
    954
    Thanked 451 Times in 380 Posts
    Blog Entries
    12
    Rep Power
    93
    Quote Originally Posted by timzim View Post
    Surely you've got some sort of firewall/proxy/filtering service at some point between your school and the internet? In which case you should be able to add the offending site to a blacklist.
    Yep I've got a cachepilot proxy that works ok.

    But in this case I need to ban youtube on certain computers in a specific OU, not by user.

    Basically I would like youtube to work everywhere but our library.

  8. #8
    zag
    zag is offline
    zag's Avatar
    Join Date
    Mar 2007
    Posts
    3,909
    Thank Post
    954
    Thanked 451 Times in 380 Posts
    Blog Entries
    12
    Rep Power
    93
    Aha! thanks for the ideas, managed to acomplish it using Internet explorer "Content advisor" setting.

    You can ban sites in there on a specific computer. You can also use group policy if your domain controller is running the same version of IE.

    Does the job even if its a bit messy.

    Restricting Specific Web Sites in Internet Explorer Using Group Policy

    Block.jpg
    Last edited by zag; 3rd February 2011 at 11:12 AM.

  9. Thanks to zag from:

    BBrian (15th February 2011)

  10. #9

    bossman's Avatar
    Join Date
    Nov 2005
    Location
    England
    Posts
    3,967
    Thank Post
    1,212
    Thanked 1,075 Times in 766 Posts
    Rep Power
    332
    @zag:

    I'm not familiar with cachepilot but there should be some way of banning those IP addresses from accessing this particular site.

    You could setup in the DHCP a reserved scope of addresses which these computers belong too and they would always remain in this group that you set up on the cachepilot.

    Just an idea as I have said I am not familiar with it.


  11. #10
    dwhyte85's Avatar
    Join Date
    Mar 2009
    Location
    Berkshire
    Posts
    1,226
    Thank Post
    161
    Thanked 150 Times in 135 Posts
    Rep Power
    104
    I'd do 'Bypass Proxy for local addresses' and make *.youtube.com a local address, add this to the IE settings on GP and deploy to the OU (library comps).

    My way is crud but works, avoid it if you can

  12. #11

    Join Date
    Dec 2009
    Posts
    612
    Thank Post
    8
    Thanked 36 Times in 34 Posts
    Rep Power
    17
    i did have a vbscript once that would copy a host file a login .. seemed to work for domain users ? so unsure why yours didnt above

  13. #12
    soveryapt's Avatar
    Join Date
    Jan 2009
    Location
    Lancashire
    Posts
    2,421
    Thank Post
    656
    Thanked 278 Times in 245 Posts
    Rep Power
    78
    Don't the cachepilots do AD integration? I've not got mine setup as yet, but the cachepilots / NED boxes provided by Lancashire allow AD integration so you can choose OUs to allow through and not to specific sites.

  14. #13


    Join Date
    Mar 2009
    Location
    Leeds
    Posts
    6,815
    Thank Post
    231
    Thanked 888 Times in 763 Posts
    Rep Power
    301
    if you do use a proxy and cant get to internet without one you could use the proxy exception list in ie settings somewhere. Put facebook in there and it wont look for it on the proxy so should fail

SHARE:
+ Post New Thread

Similar Threads

  1. Group policy search website
    By pete in forum Links
    Replies: 1
    Last Post: 15th July 2010, 09:23 AM
  2. Group Policy
    By JoeBloggs in forum Courses and Training
    Replies: 8
    Last Post: 14th June 2010, 08:13 PM
  3. Group Policy
    By Neville in forum Windows
    Replies: 2
    Last Post: 6th May 2008, 12:17 PM
  4. group policy
    By kevin_lane in forum How do you do....it?
    Replies: 2
    Last Post: 27th July 2007, 12:17 PM
  5. Group policy etc
    By moiebus in forum Wireless Networks
    Replies: 20
    Last Post: 8th November 2006, 11:48 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •