Thanks! I noticed the screens are different from 4.9 to 4.2. Back to the problem, how to disable the default group...how to keep users from signing onto the CAG successfully. I think the partial problem here, is LDAP. My account is in an ou here....with MOST other members of the domain. The shop floor users are in a different ou at the same tree level as mine. If I change the LDAP auth. Base DN to my ou specifically, I can sign in, the shop floor accounts can not, it just fails. This makes sense...however, I want to only grant a specific group rights to be able to sign onto the CAG...and apparently that is asking too much, as users under the ou I am in, even if they are not in a specified group on the CAG, get default rights. _____ From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf Of Evan Mann Sent: Thursday, August 03, 2006 9:12 AM To: thin@xxxxxxxxxxxxx Subject: [THIN] RE: [THIN] Access Gateway This explains it: http://support.citrix.com/article/entry.jspa?entryID=6651#P13_663 <http://support.citrix.com/article/entry.jspa?entryID=6651#P13_663> _____ From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf Of Schneider, Chad M Sent: Thursday, August 03, 2006 10:05 AM To: 'thin@xxxxxxxxxxxxx' Subject: [THIN] Access Gateway Why am I finding documentation about CAG 4.9 and the most recent version I can find is 4.2? Chad Schneider Technology Analyst/Citrix Admin. Bemis Company, Inc. 920-303-7609