Hi, I am currently running Web Interface 3.0 with Secure Gateway 2.0 on IIS6. I am now have a need to only provide access via SG to a subset of users in a particular Active Directory group. I have had a look at Sam Jacob's RestrictGroups enhancement (http://www.citrix4ge.de/wim/wimrg.htm) but the code appears to have changed in Web Interface 3.0. Has anyone else developed a way to only allow users in a particular group to log into Web Interface 3.0? Cheers Jay.