Group Policy disables a registrant domain name or an IP address from the http://hi.baidu.com/wfctljq/blog/item/b0a95d1869b34fbe4bedbce1.html)

Group Policy disables allow access to domain names or IP addresses (from http://hi.baidu.com/wfctljq/blog/item/b0a95d1869b34fbe4bedbce1.html)

Step 1: Investigate the IP address and domain name of the site you want to disable. This is simple. Ping. If the ping fails, use NSLookup. Step 2: add the site to the "restricted site" Open the Group Policy Editor (gpedit. MSC ). Expand as follows: User Configuration-Windows configuration-Internet Explorer Maintenance-Security Open "security region and content classification", select "Import current security region and privacy settings", and select "Modify Settings"-Restricted Sites, choose site> enter the URL and IP address of the site you want to disable, for example, to disable Qzone. You can enter the following: * .qzone.qq.com (note that you must add the "*" number to indicate all), and then add 121.14.91.148. After adding the number, click OK. Step 3: Set the security level of the restricted site The Group Policy is expanded as follows: User Configuration-management template-Windows Components-Internet Explorer-Internet control panel-Security page. Open the restricted site region template policy. Enabled, and the restricted site is set to "high", application, OK. Tested. If no Software Restriction policy is implemented and the client has other browsers, the above method will not work.