Ok here is the question I have for you all. I want to setup ISA to only let Windows 2000 Pro and XP Pro through the firewall, everything else is blocked, even if you know the proper proxy settings it won't let you out if you are not running the correct OS. Now if this can be done by blocking machines that don't have computer accounts in the domain that is just as good to me. Any suggestions? Lewis Brewer