Jim, fab idea already done and works a treat (esp. with the help of altiris rapid install packages!). Have written a small exe (blockdns) that allows command line addition/removal of host file entries. This is now running from the scheduler on the machines in question to add/remove the entry (127.0.0.1 proxyserver.dns) for our web proxy server on demand ! Have emailed the util to you under seperate cover so you can post to thethin downloads area should you wish to ! Cheers Mark Webmail <web@xxxxxxxxxx> wrote: Mark the easiest way to do this is to just block the sites in the hosts file. That way they can't get to them no matter what program they run. See this page for an example how to set it up: http://pgl.yoyo.org/adservers/ Basically you just point the URL to the null address 127.0.0.1 in the hosts file and when they go to it they get a page not found error. What we be cool is a little graphical utility that appends the hosts file properly so you can easily add addreses... hint hint. JK -----Original Message----- From: windows2000-bounce@xxxxxxxxxxxxx [mailto:windows2000-bounce@xxxxxxxxxxxxx]On Behalf Of Mark Lee Sent: Thursday, November 27, 2003 6:58 AM To: thin@xxxxxxxxxxxxx; windows2000@xxxxxxxxxxxxx Subject: [windows2000] Blocking Internet Browsing from Explorer.exe Hi, have scanned the archives but struggled find anything. I need to stop users being able to put URL's into the Windows Explorer address bar and surfing the net. We've restricted Internet Explorer to certain times of the day but users are begining to realise that they can still surf the net from Explorer.exe and it's becoming a real pain. Anyone got any good pointers or suggestions would be great. Thanks Mark --------------------------------- Download Yahoo! Messenger now for a chance to WIN Robbie Williams "Live At Knebworth DVD" --------------------------------- Download Yahoo! Messenger now for a chance to WIN Robbie Williams "Live At Knebworth DVD"