Restrict Web via Group Policy?

[PJA]

Ok - we have (had) ISA server, but due to many problems with it, (due to complex corporation external security issues) it's gone & replaced with a Cisco PIX 501 (which is very nice thanks!).

So - I've got a bunch of hooligans wokring at our place who find it funny to download crap & surf all over the place. Management tell me "Stop that" so we did with ISA.

Now, no ISA - so, I'm looking for a way to restrict based on domain name, preferable cheap (free!) & can be organised via Group Policy because it makes my life easy. I prefer no extra software installed in each PC.

So far - I tried the 'Restrict using content' method in IE - but it allows the top level of a doamin, (such as *.google.ca will allow you to see

http://www.google.ca,

but no pages further into google such as

http://www.google.ca/here).

Tried the 'fales proxy, but allow these websites past the proxy' That work great! Allows *.google.ca to see all of google - but it can only contain a limited number of domains... I really thought I had it fixed with this

As a last resort, I have considered Squid on a windows box, because it's good, free & reliable - but that's means yet another box in the computer room & could cause the proxy security issues with corporate again!

Any ideas? I would be extremly grateful.


regards

Paul

 

[PJA]

Hang on - the 'Restrict by content' does work - it just require https:// in front of any secure pages...

I was entering *.thisdomain.com and getting the front web page. Trying to login to a secure page was failing - I needed

https://*.thisdomain.com

as well as *.thisdomain.com

I can only assume that domain names without anything in front are defaulted to http:// but https:// causes it to fail...

Funny - if domains are entered as *.thisdomain.com, they work fine under the proxy server settings...Microsoft eh?!

Paul