> Domain Controller- with an internal ip and dns itself. > Exchange Server - internal ip which is a natted ip and in the primary dns > we have the dns of the isp and in the alternate dns we have the dns of our > domain controller. > ISA server - its has an internal ip and has both primary as well as > alternate dns as public dns. There is a big part of your problem, DNS. Any computer on an internal network that is part of a AD domain MUST have as its DNS servers the internal DNS server ONLY. This includes the Exchange server and the Internal NIC of ISA. The External NIC of ISA should have the DNS server configuration blank. John Tolmachoff MCSE CSSA Engineer/Consultant eServices For You www.eservicesforyou.com