i need to lock down my users IE access. i would like to know what's the best way to do this, and if its possible thru group policy in windows 2000.

i expermineted with the content advisor, but its too difficult to enable websites (for instance just enabling dell.com does not get you dell's whole website, since dell also uses www1.us......etc)
and i can enable the allow unrated websites, but that is too loose for me.

i am not so much worried about people visting adult sites anyways. i want people only hitting sites during work hours that are work related sites. so far no joy on my end.


also i wish to be able to monitor site access across the network and see what sites are being visited. how can i accomplish this, is there any way in windows 2k or do i need 3rd party software.

thank you