I've had to blacklist Facebook at work. There's not a work computer that can access it. outside of crowdstrike going nuts every few days over crap the employees were clicking on we were losing at least an hour a day per employee. I assumed people would start using HMA or some other VPN service to access facebook, Netflix, etc. on their computers, instead these fools started bringing in their cell phones! Now I have to write up people every time I see them with their phones, but it a lot easier than dealing with the viruses and other crap.