Imposing Parental Controls on your Employees

Of the thousands of questions I’ve answered at  Experts-Exchange, plenty have been seeking a way to solve the symptom of a much larger problem.  It’s quite easy to tell if the question was asked by someone who has a vested interest in the success of the business, or is merely concerned about solving the problem of the moment, by the way they react to my response.  (Which will always focus on the larger problem rather than providing a quick fix).

Sometimes the larger problem is technical, such as those caused by trying to use Windows XP Home workstations in an Active Directory domain.  There are certainly a lot of work-arounds, but if they can’t understand that IT is an investment (see my previous post about this) then I wonder why they installed an SBS to begin with.  There are other questions where the network administrator or IT consultant is asked to provide a solution for something when the larger problem has nothing to do with technology, but rather it’s caused by management (mismanagement, actually).

In the past few days, I have seen no less than 8 questions on Experts-Exchange seeking an answer of how to block or restrict user access to the Internet.  Here are a few examples (with original spelling/grammar):

What is the best way to restrict user access to the internet while ensuring that windows updates and antivirus defintions are being received.  All users and Power Users on their XP Machines

I am trying to deny internet access to certain users. I have looked up solutions on this web site and followed them. I create a GPO then stop the users from running iexplore.exe. No matter what a change the users are still able to access the internet

I want to block all Internet Explorer traffic on user’s PCs in my office. I want to make an exception on 3 paticular websites though.  I’m using Windows Server 2003 SBS.  Any ideas?

If you search for similar types of questions asked in the past, you’ll find thousands of requests.  This is one that I found particularly amusing:

ive got 4 people who are misusing the internet at work, and so i need to block their computers from accessing any websites at all, if possible to block their usernames also, so that no matter what comp they log into they cannot access the net.  ive been thinking if it is possible to do so with the lmhosts files on each computer?

ok so not only do i need to revoke all internet access i need it so that if they do try and access the net, they get directed to a file on their computers that i will emplace which will send a report to someone.

cheers for any light you can spread! 🙂

When I see these questions, I am often compelled to respond with something like this:

Instead of blocking Internet access, why not get a few 42″ display monitors and hang them in visible locations.  Then, use a remote control session to display employee activity for everyone to see.  That sure would stop Bob from viewing or make it difficult for Susie to order a new pair of shoes from!  Because public humility in the workplace is much quicker than waiting for the HR director to get the report of attempted Internet use.

The fact is that the “computer activity monitoring” software industry, which was originally a hacker’s favorite tool and then became a legitimate tool when marketed to parents who needed to keep tabs on their 12-year-old’s activities, is now being offered as a “valuable” management tool.  Making such promises as allowing you to “efficiently spy on your employees from your own desk”.  Below is a screen shot of the control panel from a program called StaffCop, which I’m sure was named by someone who has absolutely no concept of employee morale — (I think it’s made in Russia):


All of this reminds me of a wonderful story about an emperor who procured the most luxurious suit of invisible cloth.  Why do all of these managers think that the appropriate way to have someone do their work is to prevent them from doing something else?  When will that small child point out to them that the problem isn’t the Internet, but their own lack of management skills?  Not only are they unable to provide these employees with clear expectations and attainable goals, they somehow think that Internet access will prevent them from doing their work.

The irony, of course, is that the questions themselves are being asked on the very Internet which these folks seeking to block for others.  Apparently, these other employees know everything there is to doing their job correctly and efficiently, and never need to come up with new and innovative ideas which may improve their results.

I couldn’t imagine using Microsoft Office without things like Office Online help


or the myriad of templates provided by Office Online.  These tools not only make my work look better, they have saved me countless hours of being frustrated with creating a document from scratch.


Then, if I can’t find what I’m looking for, there are always the discussion groups.


But, remember, if you block them from all of that… then they’ll also be blocked from this


So, wake up people!  Take the time to sit with your employees and ensure that they have the proper tools, training and support to do their jobs well.  Provide them with clear expectations and attainable, measurable goals which are regularly reviewed (which used to mean annually, and now means either monthly or even weekly).  Most of all, give them respect.  If they respond well, you’ll both be rewarded.  If they don’t, then you’ll be glad you stopped treating them like children because can’t fire your kids.