Group Plicy+ Nudity sites

[napoleao]

Is there a way making a group policy so you dont allow users to access porn sites, cracks site, and so on?
We are having problems with some users that keep accessing those sites, and causing problems to other users.

 

[markdmac]

Do you have a firewall? Block access to those sites. ISA works great for this.

Some of the less expensive hardware devices like LinkSys now offer some site blocking features.

If you have people so stupid they can't stay off a porn site at work, lock them out of the Internet.

Configure their machine with a fictitious proxy server address. Check the box to bypass Proxy for local addresses. Lock them out of changing the proxy. Now they can get to internal web sites but not to external sites.

I hope you find this post helpful. Please let me know if it was.

Regards,

Mark

 

[schnook9]

The way we do it in our company is to block it at the router. However, we deal with thousands of employees running various OSs, deeming a uniform method necessary.

How are these users acessing the sites? All domain controlled client PCs? There is the ability to block specific sites from the content rating settings...
take a look at this: MS Chat log

hope that helps.

 

[Binkie]

Napoleao,

If you are open to using a third party tool to help montior Internet Usage, I would recommend you take a look at SysTrack from Lakeside Software.

http://www.LakesideSoftware.com

SysTrack can track which sites your users are visiting, how frequently, and also allows you to shut down any unauthorized sites automatically. SysTrack ships with an easy to use reporting facility to help produce web usage reports quickly and easily.

Please contact me if I can provide you with any additional information.

Good Luck!
Carrie3010@yahoo.com

 

[lgarner]

The firewall/proxy solution is a great no-cost way to do it. We have that set up with a large list of flexible expressions. For a fee, you can also have something like Websense download updated lists.

 

[rislejay]

You could also go down a different path and run a Squid Proxy server using one or more of the various add-ons to control where they go. I believe Squid will run on Windows. I am using Squid on a Red Hat server for this purpose. I am not blocking anything just logging the use. I use Webalizer for general reporting and sarg for detailed reporting. Workstations have Identd loaded for general identity authentication, just the username for the reports no passwords are entered. Proxy settings are set using a group policy. It is completely transparent to the users and there is little to no administrative maintenance.

 

[NotEnoughCaffeine]

I have had a similiar requirement, with a few bad users. What I did was use a OU (For the offending department's users) with a policy that turned on and utilised IE's Content Advisor . It was a little work identifying all the legal websites (About 30 of them). It works well, but my environment is standardised with XP Pro on the desktops using IE. Now the department's manager needs to request new sites be added to the list.