change the 'big' FW.. pix, etc.. to only allow the ISA box to go out via port 80.. then if they turn off the firewall client, they cant go anywhere on the web. .thus they will not turn that off anymore if they want to go to the internet ________________________________ From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of D PIETRUSZKA USWRN INTERLINK INFRA ASST MGR Sent: Thursday, September 14, 2006 2:54 PM To: isalist@xxxxxxxxxxxxx Subject: [isalist] Firewall client Hi there, anybody knows how to prevent that a user disables the firewall client? Regards Diego R. Pietruszka