CAWJames Posted February 12, 2018 Posted February 12, 2018 Morning all, Following on from installing the DNS settings for restrict.youtube.com or restrict-moderate.youtube.com in our domain, as per my other post. This is great and works, BUT as we are a primarily land based college with a focus on Veterinary studies, a lot of our videos come under the restrictions. So it's great for getting rid of bad content, it also stops normal(for us) content. We don't really want to set up a GAFE domain just to allow videos for our lecturing staff, but if that's the only option. Anyone got any bright ideas how we can give access to full youtube by AD group, or a facility to access restricted and non-restricted content? I've looked at Squid proxys, our firewall, access by IP, even thought about hosts files on the lecturing PC's. There must be a better way than you must have a GAFE domain Or..as the main idea for restricting youtube was the fact we could pretty much get any content up, ie jihadist nastiness etc, whihc was blocked by our filters in normal web, but not in YouTube. So other options to block that content would be good too! Thankyou Ofsted(or at least we can hear the foot steps, as we must be due soon) Thanks for any ideas in advance. James
ReBoot Posted February 12, 2018 Posted February 12, 2018 I work in a small primary and have setup GAFE accounts for staff which work fine. Also you can elect users who can approve videos for use across your domain. I've not come across any other solution and I suspect the time taken researching and implementing one (if it exists) will be more than using GAFE which is supported by Google and works.
CAWJames Posted February 12, 2018 Author Posted February 12, 2018 I work in a small primary and have setup GAFE accounts for staff which work fine. Also you can elect users who can approve videos for use across your domain. I've not come across any other solution and I suspect the time taken researching and implementing one (if it exists) will be more than using GAFE which is supported by Google and works. Yes, I think you are right, I am going to have to setup GAFE, although they say it could take 2 weeks once domain verification has been completed!!!
ADMaster Posted February 12, 2018 Posted February 12, 2018 We have a GAFE domain so that's configured by OU. However I did come across a new feature in DNS for server 2016. DNS Policies This will allow you to resolve a different IP based on the client subnet. It's not by AD group but perhaps you can have student IP ranges resolve restricted and normal for staff.
ReBoot Posted February 12, 2018 Posted February 12, 2018 I think it can take some time to get verification of educational status through but you can get things up and running without this and be up and running pretty much immediately. Domain verification should be less than 24 hours its educational status that can be the delay.
CAWJames Posted February 12, 2018 Author Posted February 12, 2018 Well that was a hateful process, I give MS some crap for their arcane rituals, but at least their O365 setup works. I have found the GSFE a nightmare. Mostly easy to get going, until I thought I would sync my lecturers using the dir sync tool, wow what a tool, I know it's meant to cover a multitude of sins, but it makes no sense, doesn't seem to sync passwords until the next time someone changes it. Ok, no problem, I will enter them manually using a CSV, we are only testing after all. Then I went to set the YouTube permissions, all good, so manually entered a lecturers details and got her to sign into YouTube, that would be a no, she is ineligible to access YouTube, turns out there is no YouTube access until you are activated and out of trial, ie pay them or be recognised as an education institution, which is the 2 week thing they had mentioned. So useless until they agree we are education
grant_girdwood Posted February 16, 2018 Posted February 16, 2018 You could set up a squid proxy and on that proxy box have the hosts file to point to the restricted youtube. Create 2 x pac files, one that points youtube traffic to the "restricted proxy" and the other to your existing proxy or however you access YouTube just now, then deploy the pac by group policy.... Of course you could flip the above about
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now