.. wow. You've got some serious DNS issue going on there. Clearing the cache means removing all the entries that the DNS server in question looked up for which itself could not find an entry. The SRV records etc in the DNS database are not supposed to be affected by this. Is this server actually part of the DNS application partition ? Or is it looking up records on other DNS servers for your clients ? -----Original Message----- From: Ball, Dan [mailto:DBall@xxxxxxxxxxx] Sent: woensdag 2 maart 2005 23:09 To: [ISAserver.org Discussion List] Subject: [isalist] RE: Interesting problem... http://www.ISAserver.org I'm right-clicking on server and selecting "Clear Cache", is this not the proper way? If I had to guess what is happening, when I clear the cache, it also removes the entries for the domain controllers and other servers, even though they are static IPs. Thus, the ISA server cannot find a DC to authenticate users, and they get blocked. (Due to Federal requirements, we cannot have any Firewall Policies that allow unauthenticated access to the Internet.) If I log onto each DC and do a "repair" of the network connection, it shows back up in the DNS server. Otherwise, I have to either wait for it to refresh itself or reboot the server. -----Original Message----- From: Steve Moffat [mailto:steve@xxxxxxxxxx] Sent: Wednesday, March 02, 2005 16:30 To: [ISAserver.org Discussion List] Subject: [isalist] RE: Interesting problem... http://www.ISAserver.org I still don't understand this Dan. The cache on the DNS servers is for resolved names outwith your Organization. The AD holds all your domain info. When you clear the cache, it shouldn't be interfering with name resolution in your AD zones. You are right clicking on the dns server and selecting clear cache, or ipconfig / flushdns?? Steve ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: paul.van.geldrop@xxxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx This e-mail and any attachment is for authorised use by the intended recipient(s) only. It may contain proprietary material, confidential information and/or be subject to legal privilege. It should not be copied, disclosed to, retained or used by, any other party. If you are not an intended recipient then please promptly delete this e-mail and any attachment and all copies and inform the sender. Thank you.