I am attempting to create a rule that is limited by domain userid or security group. Does the "Select User or Groups" exception work in Mixed mode? I specified Users and groups, but those users still were able to access the web site I was blocking. However when I applied the rule to everyone, everyone was blocked. Has anyone else encountered this? Karl Schneider