Disable the forwarding... And make a written policy forbidding the improper use, and fire people who break that policy. Then turn resolution back on, and see who is brave enough to test you. Then fire them. peace, BOFH aka: Glenn Sullivan, MCSE+I MCDBA David Clark Company Inc. -----Original Message----- From: Durbin, Jeff [mailto:jdurbin@xxxxxxxxxxxxxxxxxxx] Sent: Wednesday, August 20, 2003 2:16 PM To: windows2000@xxxxxxxxxxxxx Subject: [windows2000] Porn Crazy Users! I just upgraded a customer's domain to AD, which, obviously, requires internal DNS for name resolution. So, all the computers on the network point to an internal server for DNS, which, in turn, will forward unresolved requests to the ISP's DNS servers. The problem I have stems from the fact that the administrator of the domain has been restricting Internet access by not allowing DNS resolution (i.e., no DNS servers specified on the workstations). Now that DNS is a requirement, the users all get Internet access, and they've gone crazy downloading porn. I realize that they are commercial products to control Internet access, but does anyone have any cheap/easy idea for solving the problem? Thanks, JD