Your ISA Web log reflects the user account case based on how it is configured in the SAM on NT 4.0. Take a look at the case on your users and you may see the same results. Thanks, John http://www.accuwired.com