well, that kind of granular access can only be done when you are in Domain environment(AD Installed on network),you can just prevent acces on the basis of 'Address ranges'of certain clients. --------------------------------- Blab-away for as little as 1¢/min. Make PC-to-Phone Calls using Yahoo! Messenger with Voice.