How to Block Specific Web Sites Using AD / Group Policy

I'm having limited success blocking the web proxy site https://kproxy.com.
I've tried blocking by URL, all of the 17 IP addresses, etc.
Anything I can do within Group Policy to block that site and all of its 17
web servers. It would be something akin to a hosts file on steroids which
could be applied to all computers.

"Scott" <Scott@discussions.microsoft.com> wrote in message
news:C3A898B5-C6D7-4984-8ECD-0A80663CAF6C@microsoft.com...
> I'm having limited success blocking the web proxy site https://kproxy.com.
> I've tried blocking by URL, all of the 17 IP addresses, etc.

> Anything I can do within Group Policy to block that site and all of its 17
> web servers. It would be something akin to a hosts file on steroids which
> could be applied to all computers.

That is a poor way to do such blocking, and isn't true blocking ANYWAY.

Better choices usually include doing this at the FIREWALL/Proxy server.
ISA (Internet Security and Acceleration) Server is the Microsoft proxy
server and can even vary this by user account and group membership.

If you really want to use some name based pseudo blocking you can
best to this at the (Internet forwarder) DNS server but will likely need to
run BIND on that perimeter server since BIND but not MS DNS will
allow you to pre-load the "DNS cache".

--
Herb