HI, been locking down a user GPO to basically tie everything down and allow IE to be used for a web application. When the user goes to the web site they are asked to always trus a certificate. Can I do this via the User --> security settings -->Public Key Policies -->Enterprise Trust and then import the cert. Does this need to be done on the DC or were is the cert held. Also would I need to get the sert from the company running the web site. Or is there an easier way to do this in some GPO setting. thanks Ronnie Ronnie Hamilton CCNA Lufthansa Airmotive Ireland Naas Road Tel : 01 4011253 LTAI Visit our website : www.ltai.ie __________________________________________ Lufthansa Technik Airmotive Ireland Limited. Registered in Ireland. Reg. No. 45999. Registered Office: Naas Road, Rathcoole, Co.Dublin. Lufthansa Technik Airmotive Ireland Leasing Limited. Registered in Ireland. Reg. No. 140891. Registered Office: Naas Road, Rathcoole, Co.Dublin. __________________________________________ This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error, please advise by return email and delete all copies of the message.