-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 At 10:32 PM 2/12/2002, you wrote: >Thanks a lot for your reply, >but the user is not connected!!! I mean he is in the morning group but not >connected, I remove it and add it to afternoon group and now let him test >his access: near half an hour pass until he receive an Access Denied >message, unless I restart the Web Proxy Service, but you know that it is >not a good solution, because it disconects everybody else too :-( Did you log him off and back on again? Your problem is most likely not ISA, but the structure of your domain and the fact that you are moving people in and out of groups. Without knowing how the PDC/BDC configuration is, we don't know whether to recommend a forced synchronization or not... In NT4, for immediate application of group membership restrictions, you have to log off and back on again IIRC-- Are you going to move this guy in and out of groups everyday to do this? What exactly are you trying to accomplish? -----BEGIN PGP SIGNATURE----- Version: PGP 7.1 iQA/AwUBPGoVd4hsmyD15h5gEQK6ZgCgvSJecpvHu6P85ICK8BtjeIShSA4AmgK5 7QclrPiiN3KEPFnwIhleeBrw =uzWR -----END PGP SIGNATURE-----