not a TL employee, but you can do this using url blocking, as opposed to domain blocking. For example if you use a config file, you can add 'https://google.com/search' to the url blocklist settings inside the config settings. This won't interfere with say Google Docs at all. The Google homepage will work so you will be able to click into different Google services, but once you do a Google search, you'll get a device-level block page.