Yes, this is what I've tried to do. I made a 'Deny Youtube' additional policy, placed it higher than staff and students default policies and selected my AD group when setting it up. Then I wrote a new tag for it to use. Is this where I went wrong? As when I was going to block a website as usual my new tag didn't appear in the list.