hello Thanks for your reply, I checked every where in Active Directory user and Computers, ISA protocole rules etc. Everyone group is bnot allowed only my specified group "exectice" and "staff" are added and user r members of these 2 groups. Still user who can add ISA Server ip as thier gateway can use net easly, any further guiedline? thanks