Currently with Exchange 2000 and the Active Directory, OWA can be toggled on and off using the HTTP Protocol Setting for each user object. Is there a way to turn this off by default for all users and only enable it for a specific group of users (eg, Web Mail Users)? Perhaps there is a Policy Template (adm file) that can provide this. I've tried securing the exchweb folder on the OWA server but some parts of the OWA site are still displayed (with errors). Thanks, Ants :-)