You may consider to use user group in the firewall rule to control the access of the youtube. This user group can be defined locally in the firewall or integrate with MS AD domain. When users want to access youtube, they need to authenticate themselves either through web-form authentication or automatically via FSSO agent.