turn off the forwarding then use the ISP's DNS server rather than the local one for the DNS settings for the users that need internet access. Greg -----Original Message----- From: Durbin, Jeff [mailto:jdurbin@xxxxxxxxxxxxxxxxxxx] Sent: Wednesday, August 20, 2003 2:16 PM To: windows2000@xxxxxxxxxxxxx Subject: [windows2000] Porn Crazy Users! I just upgraded a customer's domain to AD, which, obviously, requires internal DNS for name resolution. So, all the computers on the network point to an internal server for DNS, which, in turn, will forward unresolved requests to the ISP's DNS servers. The problem I have stems from the fact that the administrator of the domain has been restricting Internet access by not allowing DNS resolution (i.e., no DNS servers specified on the workstations). Now that DNS is a requirement, the users all get Internet access, and they've gone crazy downloading porn. I realize that they are commercial products to control Internet access, but does anyone have any cheap/easy idea for solving the problem? Thanks, JD