How would you know if a machine is on the domain if you can't do endpoint checking? Joe Using Client SSL Certs may be you only choice. Just tell them its a certificate, not software. Joe On Fri, Apr 4, 2014 at 8:25 AM, Tom Sorenson <tsorenson99@xxxxxxxxx> wrote: > Hi List > > Is there a way to limit access an access gateway pnagent site? I'm trying > to set one up that only allows domain machines. I can't install any > additional software on the endpoints. > > Thanks! >