Is it possible to prevent DNS Forwarding for some workstations? We currently have a Windows 2003 AD environment with a Websense Integration. Currently all workstations have internet access which is restricted by Websense. We have some workstations that are currently being blocked but are capable of resolving internet addresses. I would like to prevent those workstations from forwarding their DNS request to the ISP and at the same time still use our internal dns servers for internal services 0nly.