Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

we apreciate your help... best regards!!

share|improve this question

closed as not a real question by Mark Henderson, Zypher, duffbeer703, Nick Kavadias, Jim B Feb 10 '10 at 2:20

It's difficult to tell what is being asked here. This question is ambiguous, vague, incomplete, overly broad, or rhetorical and cannot be reasonably answered in its current form. For help clarifying this question so that it can be reopened, visit the help center.If this question can be reworded to fit the rules in the help center, please edit the question.

2  
Sorry, I was going to try and tidy up the language/structure of the question but I've really got no idea what's being asked. –  Mark Henderson Feb 10 '10 at 1:20

2 Answers 2

Forget Active Directory, Look at DNS

It's not a particularly nice solution if you have a lot of them to block. Still possible though. Hopefully this explains how.

If you want to block entire domains you would:

  1. Open the DNS Console
  2. Expand Forward Lookup Zones
  3. Create a new Forward Lookup Zone, as a Primary Zone
  4. Give it the name of the domain you wish to block. e.g. annoyingdomain.com.

If you just want to block websites under domains you do almost the same:

  1. Open the DNS Console
  2. Expand Forward Lookup Zones
  3. Create a new Forward Lookup Zone, as a Primary Zone
  4. Give it the name matching the site you want to block. e.g. www.annoyingdomain.com.

This way, you could still send mail and access other resources as annoyingdomain.com, it's just the address for www.annoyingdomain.com which gets answered by your own DNS Server.

Like I said, not exactely a nice solution, but, if you just want to block a few sites like myspace of Facebook, and dont have the money to spend on an Appliance as Wesley Recommended

Although I will say an appliance is the better solution

HTH

share|improve this answer

Use Group Policy to edit IE's Content Advisor settings. You may need the ADM templates for IE. However, that will only work for Internet Explorer settings so you'll have to block all other browsers somehow. Really, your best bet will be an appliance (E.g. Websense) or proxy server (E.g. Squid Cache).

share|improve this answer