Okay, I reread the Microsoft ISA Security Guide and it mentions using a workgroup only if you do not require AD authentication. Or to set it up in its own AD then create a trust. I am just trying to make it as secure as possible. My apoligies.