A Young said:
Does anyone know if it is possible to remotely alter the entries in the HOSTS
file on users machines, either using scripting or preferably some kind of AD
policy?
Sure it is possible.
Simon's idea of using a Logon script is pretty good,
but might be improved by using instead a Startup script
(in most cases.)
Unless you have some idiosyncratic situation, it isn't
generally that useful to use Hosts files for dynamic
name resolution though -- that is what DNS does.
Are you trying to distribute hosts files in a blocking,
or some similar, attempt?
Notice that many anti-virus/trojans/hijack tools are
PROTECTING the hosts file so you may have to fight
for control if you are using any of these.