So we have many sites and people work at multiple locations, but all the same domain. I'd like to apply a global content filtering policy and put people into AD groups and assign policies:  GeneralAccessGroup - has most things blocked in 'Threat categories' and 'Content categories' and would be the default access policy unless they are in one of the other groups. SocialMediaGroup - allowed to access social media and job sites. HR, Marketing, VIPs.  All'Threat categories' blocked AllAccessGroup - only blocks 'Threat categories'   Is this possible?  ... View more