Hi all, I've got an NTLM Group deny working: external_acl_type ntlm_group ttl=0 concurrency=5 %LOGIN /usr/lib/squid/wbinfo_group.pl acl NTLMNoAccess external ntlm_group Internet_Access_None http_access deny NTLMNoAccess http_reply_access deny NTLMNoAccess The issue is that when a user is a member of Internet_Access_None, they get prompted to login rather than just seeing the ERR_CACHE_ACCESS_DENIED (ERR_ACCESS_DENIED?) page. How can I setup an outright deny when a member is in Internet_Access_None? thanks --- Chris Covington IT Plus One Health Management 75 Maiden Lane Suite 801 NY, NY 10038 646-312-6269 http://www.plusoneactive.com