Yeah, it doesn't happen immediately by default. See Q281985. http://support.microsoft.com/default.aspx?scid=kb;en-us;Q281985 <http://support.microsoft.com/default.aspx?scid=kb;en-us;Q281985> -Shawn ----- Shawn R. Quillman Robert Bosch Corporation RBNA/CIT7 38000 Hills Tech Drive Farmington Hills, MI 48331 (248) 553-1164 (P) (248) 848-2855 (F) shawn.quillman@xxxxxxxxxxxx -----Original Message----- From: Jay [mailto:jschwarzkopf@xxxxxxxxxx] Sent: Tuesday, November 05, 2002 3:41 PM To: [ISAserver.org Discussion List] Subject: [isalist] Delay in applying User/Group Permissions http://www.ISAserver.org I denied Internet access to a group (in site and content rules) and restarted the services. Any users in those groups were denied access. However, if I added new users to those denied groups, I expected those users to be denied access immediately (after logging off and then on again). However, these users were still able to access the Internet - until I restarted the ISA services. In fact, this occurred in reverse as well. When I removed users from the group and had them log off and on, they were still denied access - until I restarted the ISA services. In both cases, group permissions to other resources were applied/removed when the user was assigned/removed from the group. Anyone see this before? ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Exchange Server Resource Site: http://www.msexchange.org/ Windows Security Resource Site: http://www.windowsecurity.com/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: shawn.quillman@xxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')