Hi Might be a wrong default gateway given by dhcp. Have you checked that? Do they have firewall client installed? Is web allowing rule based on all users or authenticated users? Can you nslookup from those machines to google.com? ________________________________ From: Andrew English [mailto:andrew@xxxxxxxxxxxxxxxxxxxxxx] Sent: Friday, April 15, 2005 9:50 PM To: [ISAserver.org Discussion List] Subject: [isalist] Windiows 2003 SP1 http://www.ISAserver.org Hi, I just wanted to let everyone know that I ran into a strange problem which might be a direct results of Windows 2003 Server SP1. I installed Windows 2003 Server SE SP1 one three machines (fresh install), Domain, Exchange, and ISAServer. After I installed ISA 2004 Server without restarting our adding any new rules I applied ISA 2004 SP1. I set everything up the way I always have, Exchange, Servers --> Internet, and Workstations --> Internet. I found that none of the workstations running XP SP2 would connect to the net even if I opened all outbound ports just for the workstations which are in a pool of IPs (from the DHCP server). The workstations could ping each other, and ping the servers but they would not access the internet at all. The servers on the other hand were able to access the internet without any problems. It was only when I joined the workstations to the domain that I was allowed to gain access to the internet. I certainly remember being able to connection workstations that weren't necessarily connected to the domain to the internet without any issues. So I dawned on me maybe there is some weird Windows 2003 Server SP1 thing going on? I know that I don't have the firewall turned on because when I click on it in control panels it asks if I want to enable it. And like I said before the servers were able to access the net easily with the same rules as the workstations have (DNS, HTTP, HTTPS). Shrug, Andrew ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: ara@xxxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx ________________________________ The haggis is unusual in that it is neither consistently nocturnal nor diurnal, but instead is active at dawn and dusk (crepuscular), with occasional forays forth during the day and night. ________________________________ Attention: This message, including any attachment(s), is intended only for the use of the individual(s) to which it is addressed and may contain information that is privileged or confidential. Any other distribution, copying or disclosure is strictly prohibited. If you are not the intended recipient or have received this message in error, please notify us immediately by reply e-mail and permanently delete this message including any attachment(s), without reading it or making a copy. Any outgoing message has been scanned for possible harmful file(s) or script(s), but it is your sole responsibility to run detection tools as we won't guarantee the safety of message(s).