To remove the resitiction of Host Entry, you can go to the login the console with admin id
Go to Policies Tab
Under this select Application and Device Control
Double click on the policy(Application and Device Control policy) which has assigned to your client groups.
Select the second tab (Application Control)
Under Application control, uncheck the "Block modifications to hosts file".
Then ok.
Make the same changes in all required policy.
This information come help you.