World of EUC

At my last place, we used uBlock because it was just superior to every other extension. I pushed for that because I use uBlock on all of my browsers at home.

<@UL5TCSW3D> is an ad blocker evangelist.... maybe he has ideas

Pi-hole is likely a good option for centralised management, but you’d need to direct all DNS traffic through it and it will require monitoring and management/support calls for allow lists. 

you can make your Pi Hole a DNS forwarding target - but that doesn't cover endpoints when they leave. I am still seeing UBlock out in the wild the most.

Ublock seems to be the consensus. The good thing is that it has no upsell and works on virtual and physical. It’s a pity there’s no centralised management of settings. 

Yeah, that was the only drawback. I used WEM to throw down any changes (whitelist additions, etc.) when I needed to, which was still pretty easy.

Since IIRC it was just a registry string.

Which it is:
```&lt;VUEMRegValue&gt;&lt;State&gt;1&lt;/State&gt;&lt;ActionType&gt;0&lt;/ActionType&gt;&lt;RunOnce&gt;0&lt;/RunOnce&gt;&lt;IdRegValue&gt;80&lt;/IdRegValue&gt;&lt;IdSite&gt;1&lt;/IdSite&gt;&lt;RevisionId&gt;1&lt;/RevisionId&gt;&lt;Name&gt;Edge Chromium - uBlock Origin&lt;/Name&gt;&lt;Description&gt;Sets the default uBlock Origin settings in Edge Chromium&lt;/Description&gt;&lt;TargetRoot /&gt;&lt;TargetName&gt;adminSettings&lt;/TargetName&gt;&lt;TargetPath&gt;Software\Policies\Microsoft\Edge\3rdparty\extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm\policy&lt;/TargetPath&gt;&lt;TargetType&gt;REG_SZ&lt;/TargetType&gt;&lt;TargetValue&gt;{"userSettings":{"showIconBadge":false},"whitelist":["about-scheme","<http://WhitelistedDomain.edu|WhitelistedDomain.edu>","chrome-extension-scheme","chrome-scheme","moz-extension-scheme","opera-scheme","vivaldi-scheme","wyciwyg-scheme"],"netWhitelist":"about-scheme\<http://nWhitelistedDomain.edu|nWhitelistedDomain.edu>\nchrome-extension-scheme\nchrome-scheme\nmoz-extension-scheme\nopera-scheme\nvivaldi-scheme\nwyciwyg-scheme","userFilters":""}&lt;/TargetValue&gt;&lt;Reserved01 /&gt;&lt;/VUEMRegValue&gt;```

It pays to RTFM sometimes <https://github.com/gorhill/uBlock/wiki/Deploying-uBlock-Origin|Deploying uBlock Origin · gorhill/uBlock Wiki · GitHub>