How would the others here restrict internet access on laptops for home workers?

This is my big problem...

I support some 35 analysts who are only allowed access to specific sites (that may change infrequently).

Previously we used Group Policy (proxy set to 127.0.0.1, Internet Options Connection tab disabled, exceptions listed in GP Proxy Settings). Now I actually use a free software that was made for a quite different public - Windows Live Family Safety. (Together with Windows Live Mesh for remote access.)

It allows me to add and remove websites for viewing for all users in two clicks, to make exceptions for specific employees - anything I want, fast and without even needing to remotely access their laptop.

Any thoughts?