ISA asks for usernames and passwords even though these people are in a group, that is authorised for full ulimited internet. We use a single domain model, and ISA wont accept the usernames or passwords. There is no error message, it just keeps popping up the password box, over and over. The only password that works, is the domain admin password. It does show up as all asterisks, and I type it in for them, so they never see it, but i still dont want people using it. Besides, when i look at the logs, to see where they've been surfing, it looks like the domain admin has been doing all this bad stuff like xxx, and gaming! thanks, Mark