Hi We are using ISAServer and integrated authentication with firewall client. But when a user who is not permitted to access a site the user is prompted for username and password. It would have been better if the user just get a message that he is not permitted to access this site. Any ideas?