OH! Only applies to new users. HUM...ok. I will have to test that. There are employees using the 'employee' network and were 'caught' using dating websites. Management wants all dating sites blocked.
I was using DNS host names, aka eharmony.com, match.com, farmersonly.com, etc. I didn't see a 'dating' category in the drop down list.
DNS is being used on the DC.