Hi Shadi, You must disconnect the user and force him to create a new connection in order for the changes to take place. HTH, Tom www.isaserver.org/shinder -----Original Message----- From: Shadi Varjavand [mailto:svarjavand@xxxxxxxxx] Sent: Tuesday, February 12, 2002 11:44 PM To: [ISAserver.org Discussion List] Subject: [isalist] You mean it is not a problem? http://www.ISAserver.org Hi all, 5 days ago, I posted a message about Authentication in ISA, the problem which I mentioned there is makeing my boss dissatisfied with ISA.... and leading her to choose another software :-( Can anybody help me to explain for her if it is a problem or not and if it is a problem how can I solve it? Thanks in advance Shadi --------->> My first post: We use ISA standard edition in integrated mode and our PDC is a windows NT 4.0 , It needs authenticaion for outgoing web requests and everything seems to work properly except one: Assume this senario: we have a NT group named Morning_grp and there is a user John who is member of Morning_grp. In ISA, members of this group have Internet access only in morning. Theres is another group named Afternoon_grp for those who have Internet access only in afternoon. When I remove John from Morning_grp and add it to the Afternoon_grp, it takes for changes almost half an hour to take place. It means if it is morning, John still has the permission to use web. I wanted to know if it is a problem here or it is not a problem at all and this half an hour is natural. (I should say that if the web proxy service is restarted the changes will be applied immediately.) Thanks, shadi ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: tshinder@xxxxxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')