Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Is there a way that AD can be used to block access to certain websites (e.g. Facebook) between certain times? Ideally I'd like to only to be available at (say) lunchtimes.

(I can live with the fact that someone could work around it using a proxy... most of my users won't know how to do that)


share|improve this question
up vote 4 down vote accepted

In a word, no. AD has no interaction with the users browsing experience, web traffic is directed through your proxy if you have one, then your gateway and so it is at these points you would need to filter the traffic. AD is used to authenticate users, validate the users access rights for resources and can be used to prevent the user accessing the internet at all by blocking access to browsing applications, or directing to a non-existant proxy, but it cannot filter sites.

share|improve this answer
I agree with your description of the traffic routing... but I would have thought that the DNS request for (or whatever) would go through AD.... is there anything that could be done to block this between certain times? – cagcowboy Apr 30 '09 at 12:15
DNS request go through the DNS server, which is more than likely an AD integrated zone, so its stored in AD, but thats about it, AD does not monitor DNS requests – Sam Apr 30 '09 at 12:48

This sort of functionality is offered by all good web content filter systems, and some bad ones.

I work for SmoothWall - our "Network Guardian" software will enable you to do just what you describe.

share|improve this answer

I have checked out AD and there's no way you can blocked website but use Content Advisor (GPO -> User Config -> Windows Settings -> IE Maintenance). You can add the allowed/blocked URLs on the Content Advisor Approved Sites taB

share|improve this answer

not sure where u went to school but YES AD can blcok website... it can add a password to view the page. if the password is entered correctly then they are allowed to view the website

share|improve this answer
Hi, James - you have no idea what you're talking about or what the OP was asking. Additionally, you answered (badly) on a 4 year old question that had already been answered. – Dan Oct 16 '13 at 15:18

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.