You didn't say exactly how these "mobile users" access the LAN when they're "mobile". Is there a VPN connection involved? In general, it's best to let the browser (or any proxy-aware app such as WinMedia Player) self-discover the local proxy (auto-discover). In this case, if the app can't find a proxy, it drops to "direct" operation. If you enter all three, then IE will go from "auto-detect to config URL" to "use this proxy", where it will ultimately fail to access any web site. From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Mayo, Bill Sent: Wednesday, February 14, 2007 11:35 AM To: isalist@xxxxxxxxxxxxx Subject: [isalist] Mobile users I am trying to make some updates to our web proxy configuration in order to prevent our staff from making changes. The concern I have is how this will effect our mobile staff who are sometimes connected to our network and other times connected through some ISP (e.g. cellular modem or wireless access point). Today, our group policy is set to allow them to clear the "use proxy server" checkbox, which they do when they are not attached to our network. Presently, the "automatically detect settings" is turned off and the proxy server address is pre-populated via group policy. I am planning to adjust the policy to use DHCP/DNS/Wpad as is explained quite nicely at http://www.isaserver.org/tutorials/Load-Balancing-Web-Proxy-Clients-With -ISA-Server-2004-Standard-Edition-Part2.html <http://www.isaserver.org/tutorials/Load-Balancing-Web-Proxy-Clients-Wit h-ISA-Server-2004-Standard-Edition-Part2.html> (thanks, Tom!). What I am unclear on, though, is if I set the policy up to use "automatically detect settings", enable automatic configuration, and enter the auto-proxy URL, how will my mobile users be affected? In the absence of a DHCP/DNS record, will IE just happily go along with no proxy, or will it cause it to break? Should entering the auto-proxy URL be something that is included or not for these particular users? I have attempted to find this information online, but if I happen to have missed something, I would gladly accept any pointers to any articles that would clarify. Otherwise, I appreciate any input that I receive. Bill Mayo Pitt County MIS All mail to and from this domain is GFI-scanned.