On NT TSE 4.0 I blocked internet access by group by setting permissions = on wsock32.dll. The group "non-internet users" was set to no access on = it. That stopped them from accessing the internet through Internet = Explorer, Ms Outlook, Windows Explorer and all the other ways they got = around my attempts to block them. I find it interesting that my users = can't add an attachment to email or rename a file without having their = hands held but deny them access to yahoo and they find a million ways = around it. but I digress... The above solution does not work in Windows 2000. If I change = permissions on wsock32.dll the desktop goes nuts. My Watchguard firewall will block access but only by requiring a = password to be entered in a page for access. That is more trouble that = it is worth. All I want to do is have the internet blocked based on group membership. = If they are in the group, no external access. I have tried to find an add on or something but keep coming up empty. Does any one have any ideas on how I can do this? I have windows 2000 all the way around, a Watchguard Firebox II, and = internet explorer 5.5 on all the servers. Thanks! Greg ******************************************************** This Week's Sponsor - Emergent Online EOL's Universal Printer new Features include: Network Printing, Pagestreaming, 2400 DPI. No Client Software Required! http://www.go-eol.com/ ********************************************************** For Archives, to Unsubscribe, Subscribe or set Digest or Vacation mode use the below link: http://thethin.net/citrixlist.cfm