+ Post New Thread
Results 1 to 13 of 13
Windows Thread, Banning a website in group policy in Technical; Is it possible to ban a certain website for a group of computers? I need to ban youtube in our ...
  1. #1
    zag
    zag is offline
    zag's Avatar
    Join Date
    Mar 2007
    Posts
    3,829
    Thank Post
    918
    Thanked 422 Times in 355 Posts
    Blog Entries
    12
    Rep Power
    88

    Banning a website in group policy

    Is it possible to ban a certain website for a group of computers?

    I need to ban youtube in our library but I don't think the current cachepilot proxy is capable of doing that so I need another solution.

    Any ideas?

  2. #2

    plexer's Avatar
    Join Date
    Dec 2005
    Location
    Norfolk
    Posts
    13,713
    Thank Post
    667
    Thanked 1,636 Times in 1,462 Posts
    Rep Power
    424
    No.

    Ben

  3. #3

    Edu-IT's Avatar
    Join Date
    Nov 2007
    Posts
    7,161
    Thank Post
    403
    Thanked 623 Times in 569 Posts
    Rep Power
    181
    I didn't think AD was there for web filtering. Thinking out loud here but how about using the hosts file on the computer to direct YouTube to another website?

  4. #4
    zag
    zag is offline
    zag's Avatar
    Join Date
    Mar 2007
    Posts
    3,829
    Thank Post
    918
    Thanked 422 Times in 355 Posts
    Blog Entries
    12
    Rep Power
    88
    Quote Originally Posted by Edu-IT View Post
    I didn't think AD was there for web filtering. Thinking out loud here but how about using the hosts file on the computer to direct YouTube to another website?
    Yeh already tried re-routing youtube.com to 127.0.0.1 via hosts file but it only seems to work when the local user is logged in.

    When a domain user logs in youtube is correctly displayed.

  5. #5

    Join Date
    Jun 2007
    Location
    Manchester
    Posts
    7
    Thank Post
    3
    Thanked 1 Time in 1 Post
    Rep Power
    0
    Are you going through a proxy? If so it might work if you set a new AD group up, and apply your usual proxy settings via GP to the group but with exceptions for the websites you want to disallow. Then just add the relevant users into the group.

    Edit: Just noticed it's for computers rather than students, so you'd have to use some loopback processing as well and apply the new proxy settings to your library OU - no need for the additional group.
    Last edited by JonahIJ; 3rd February 2011 at 10:56 AM.

  6. #6

    Join Date
    Jun 2007
    Location
    London
    Posts
    894
    Thank Post
    64
    Thanked 171 Times in 140 Posts
    Rep Power
    55
    Surely you've got some sort of firewall/proxy/filtering service at some point between your school and the internet? In which case you should be able to add the offending site to a blacklist.

  7. #7
    zag
    zag is offline
    zag's Avatar
    Join Date
    Mar 2007
    Posts
    3,829
    Thank Post
    918
    Thanked 422 Times in 355 Posts
    Blog Entries
    12
    Rep Power
    88
    Quote Originally Posted by timzim View Post
    Surely you've got some sort of firewall/proxy/filtering service at some point between your school and the internet? In which case you should be able to add the offending site to a blacklist.
    Yep I've got a cachepilot proxy that works ok.

    But in this case I need to ban youtube on certain computers in a specific OU, not by user.

    Basically I would like youtube to work everywhere but our library.

  8. #8
    zag
    zag is offline
    zag's Avatar
    Join Date
    Mar 2007
    Posts
    3,829
    Thank Post
    918
    Thanked 422 Times in 355 Posts
    Blog Entries
    12
    Rep Power
    88
    Aha! thanks for the ideas, managed to acomplish it using Internet explorer "Content advisor" setting.

    You can ban sites in there on a specific computer. You can also use group policy if your domain controller is running the same version of IE.

    Does the job even if its a bit messy.

    Restricting Specific Web Sites in Internet Explorer Using Group Policy

    Block.jpg
    Last edited by zag; 3rd February 2011 at 11:12 AM.

  9. Thanks to zag from:

    BBrian (15th February 2011)

  10. #9

    bossman's Avatar
    Join Date
    Nov 2005
    Location
    England
    Posts
    3,942
    Thank Post
    1,199
    Thanked 1,069 Times in 760 Posts
    Rep Power
    330
    @zag:

    I'm not familiar with cachepilot but there should be some way of banning those IP addresses from accessing this particular site.

    You could setup in the DHCP a reserved scope of addresses which these computers belong too and they would always remain in this group that you set up on the cachepilot.

    Just an idea as I have said I am not familiar with it.


  11. #10
    dwhyte85's Avatar
    Join Date
    Mar 2009
    Location
    Berkshire
    Posts
    1,219
    Thank Post
    159
    Thanked 147 Times in 132 Posts
    Rep Power
    103
    I'd do 'Bypass Proxy for local addresses' and make *.youtube.com a local address, add this to the IE settings on GP and deploy to the OU (library comps).

    My way is crud but works, avoid it if you can

  12. #11

    Join Date
    Dec 2009
    Posts
    607
    Thank Post
    8
    Thanked 36 Times in 34 Posts
    Rep Power
    17
    i did have a vbscript once that would copy a host file a login .. seemed to work for domain users ? so unsure why yours didnt above

  13. #12
    soveryapt's Avatar
    Join Date
    Jan 2009
    Location
    Lancashire
    Posts
    2,405
    Thank Post
    648
    Thanked 277 Times in 244 Posts
    Rep Power
    78
    Don't the cachepilots do AD integration? I've not got mine setup as yet, but the cachepilots / NED boxes provided by Lancashire allow AD integration so you can choose OUs to allow through and not to specific sites.

  14. #13


    Join Date
    Mar 2009
    Location
    Leeds
    Posts
    6,646
    Thank Post
    229
    Thanked 865 Times in 743 Posts
    Rep Power
    297
    if you do use a proxy and cant get to internet without one you could use the proxy exception list in ie settings somewhere. Put facebook in there and it wont look for it on the proxy so should fail

SHARE:
+ Post New Thread

Similar Threads

  1. Group policy search website
    By pete in forum Links
    Replies: 1
    Last Post: 15th July 2010, 09:23 AM
  2. Group Policy
    By JoeBloggs in forum Courses and Training
    Replies: 8
    Last Post: 14th June 2010, 08:13 PM
  3. Group Policy
    By Neville in forum Windows
    Replies: 2
    Last Post: 6th May 2008, 12:17 PM
  4. group policy
    By kevin_lane in forum How do you do....it?
    Replies: 2
    Last Post: 27th July 2007, 12:17 PM
  5. Group policy etc
    By moiebus in forum Wireless Networks
    Replies: 20
    Last Post: 8th November 2006, 11:48 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •