Hi Dan, Can the users log on? Or does the log on fail? Thanks! Tom Thomas W Shinder, M.D. Site: www.isaserver.org <http://www.isaserver.org/> Blog: http://blogs.isaserver.org/shinder/ Book: http://tinyurl.com/3xqb7 <http://tinyurl.com/3xqb7> MVP -- Microsoft Firewalls (ISA) ________________________________ From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Ball, Dan Sent: Monday, October 08, 2007 1:22 PM To: isalist@xxxxxxxxxxxxx Subject: [isalist] VPN Permissions in ISA2006 I have a VPN user that logs on, but cannot reach our internal network. If I disconnect the VPN session, then log in again using "my" account, it works fine, even with them logged into the computer. I disconnect the VPN, and have them log in again using "their" account, and they cannot connect to the internal network. It's an ISA 2006 SE install, related firewall policies are for "all users", and they are members of the appropriate group of people allowed to connect VPN, so it makes no sense to me what is happening. I'm stumped, can someone point me in the right direction for troubleshooting this issue?