The difference is a centralized account database. In a workgroup setting your user accounts and groups have to local to the ISA server in order to use user-based access control. You would not necessarily be using the same account to authenticate to ISA as you are to authenticate to the workstation. In a domain setting your user accounts and groups would be on the domain controller so you can use the same account for any kind of access. -Shawn ----- Shawn R. Quillman Robert Bosch Corporation RBNA/CIT1.1 38000 Hills Tech Drive Farmington Hills, MI 48331 (248) 553-1164 (P) (248) 848-2855 (F) shawn.quillman@xxxxxxxxxxxx -----Original Message----- From: Syed Tipu Ali [mailto:munawwar@xxxxxxxxxxxxxxxx] Sent: Friday, May 09, 2003 1:11 PM To: [ISAserver.org Discussion List] Subject: [isalist] ISA in Domain or Workgroup http://www.ISAserver.org hi all, I want to get some info for ISA in domain and workgroup. If I m installing ISA in LAN workgroup, ISA is providing the features of Security either with Ip based or User based policy, but other than group what the advantage domain can given us? Infact that ISA in workgroup is also providing security, so why we install domain controller? Is there any reason? ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Exchange Server Resource Site: http://www.msexchange.org/ Windows Security Resource Site: http://www.windowsecurity.com/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: shawn.quillman@xxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')