Hi All, It seems asif i managed to setup squid in a w2k domain. i setup an acl to give access to a group that is on the w2k dc: acl full proxy_auth internet http_access allow full It does not allow internet access on the group but when i create an acl for a user thats on the w2k dc it works: acl full proxy_auth user http_access allow full How do u set an acl up to work with w2k domain groups? Thanks Regards ______________________________________________________________ http://www.webmail.co.za the South African FREE email service