>> That's the wrong options if you are doing the authentication locally. >> always_direct is for bypassing parent proxies. >> I think what you want to do is to use "http_access allow WIN1" (and so >> on) as seperate ACLs to your main one that allows your clients to >> access. Of course, as always, I could be way off. > That did'n work. It still prompts for user and password :( The order of http_access rules is important. If you have your authentication http_access rule before the 'allow WIN1', the authentication popup will show. Joost