Comment Re:If you gotta ask... (Score 0) 267
Assuming you're the local goody-two-shoes Administrator ("NT can be, and usually is, administered by an idiot") the first real question is, why block at all? Perhaps then you can answer why you feel the need to make a big show of allowing exceptions.
Given that end-users are now the most frequently exploited point in most networks, the first real question asked by idiots is "Why block at all?" Given a network that services anything at all sensitive, the default state for outbound connections to the Internet should "blocked".