Group Policies - Restricting Web Access?

[Sleepstalker]

I need to restrict web access for some people. I want to make it so that they can't access any .com site, but can access any .mil site. Can anyone tell me what the best way to do this is. I tried putting *.com and www.yahoo.com on the never access list in the content advisor but it doesn't seem to be working. We have a test account that's only in the group we're working on right now and it can still access anything on the web just fine. Why?

[Enverex]

Hm....... works for me......

I put -

*.com in NEVER
and *.mil in ALWAYS

I couldnt access any .com sites as it says they were blocked but I could access .mil sites.

BUT I also couldnt access any other sites as they didnt have a rating....

NS

[Sleepstalker]

Ok content advisor doesn't seem to enabled on the test user's account. How would I enable it on everyone's account in a certain group from the server?

[versello]

Are you a network admin? or IMO? If you have a router in your branch you could configure that to only allow .mil sites.

[topherice]

If you have admin rights and are using WIN2K and active dir. use gpedit, for win NT4 domain use poledit. Or take it step further and install WIN2K ISA Server in firewall or integrated mode and makem' all firewall or SecureNat clients and really lay the smack down.