Hi Dan, I have no idea what the original problem was, but it was a nice, professional and technical discussion. Thanks! Tom www.isaserver.org/shinder Tom and Deb Shinder's Configuring ISA Server 2004 http://tinyurl.com/3xqb7 MVP -- ISA Firewalls -----Original Message----- From: Ball, Dan [mailto:DBall@xxxxxxxxxxx] Sent: Friday, March 04, 2005 7:27 AM To: [ISAserver.org Discussion List] Subject: [isalist] RE: Interesting problem... http://www.ISAserver.org I think I also said that right from the start, just trying to explain how it was setup. I've been going through a lot of manuals over the last few days on how to set it up, and best practices, etc... It appears I had it setup correctly, but it's not working the way it's supposed to. So, no need to discuss it further, I'll just rebuild all the DNS servers and see if that helps. I think we've all agreed that there is something drastically wrong, now I have to fix it. Thanks for the help, it has cleared up a few questions I had, and pointed me in the right direction. -----Original Message----- From: Steve Moffat [mailto:steve@xxxxxxxxxx] Sent: Friday, March 04, 2005 06:48 To: [ISAserver.org Discussion List] Subject: [isalist] RE: Interesting problem... http://www.ISAserver.org " If they cannot resolve names to even get to the ISA server, they certainly cannot get to the Internet." That's what we're saying, that there is something wrong there if your server entries are disappearing from your zone. That SHOULD NOT be happening. If you restart one of your dns servers, the on restart, when it's saying preparing network connections, that's when it is reloading the AD zone amongst other things, so that when it comes online it's ready to start servicing all network requests. All my DNS servers point to themselves first and then to my "PDC" as secondary. This is how it's done. The only difference is that you only allow one dns server to query the internet. AS SAID BEFORE, THERE IS SOMETHING SERIOUSLY WRONG WITH YOUR DNS IF THE SERVER a RECORDS ARE BEING REMOVED FROM THE ZONE ON A CACHE CLEAR OR A RESTART. S