>I think a GPO is your best bet for both, assuming you are using Active >Directory I should have mentioned, but I'm not using AD, users are simply setup on the standalone ISA server - Ciaran