I discovered my mistake. I hadn't changed the default 100 VPN connections on ISA Server and this was more that number of leases available from the DHCP server. All working now. From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Thomas W Shinder Sent: Wednesday, 19 November 2008 11:43 PM To: isalist@xxxxxxxxxxxxx Subject: [isalist] Re: ISA 2006 Install into Windows 2008 Domain You don't need a DHCP relay agent on the firewall unless you want to deliver DHCP options to the remote access VPN client. HTH, Tom From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Andy Haigh Sent: Tuesday, November 18, 2008 9:54 PM To: isalist@xxxxxxxxxxxxx Subject: [isalist] Re: ISA 2006 Install into Windows 2008 Domain I don't remember setting up DHCP Relay on other all windows 2003 installs. Please could you provide more details. Thanks From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Jim Harrison Sent: Wednesday, 19 November 2008 2:46 PM To: isalist@xxxxxxxxxxxxx Subject: [isalist] Re: ISA 2006 Install into Windows 2008 Domain I don't see anywhere where you use the term "DHCP Relay"? From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Andy Haigh Sent: Tuesday, November 18, 2008 6:04 PM To: isalist@xxxxxxxxxxxxx Subject: [isalist] ISA 2006 Install into Windows 2008 Domain Hi All, I have setup the following: Windows 2008 Domain Controller Windows 2003 R2 SP2 + ISA 2006 SP1 I have setup VPN access and am able to connect to the ISA Server but I don't get an IP address from the DHCP server on the internal Windows 2008 server. I have disabled the Firewall on the Windows 2008 server and ensured that NAP is disabled on the DHCP server but still it doesn't provide IP address. Have I missed something obvious? Is it supported? Thanks Andy