[QUOTE] What do you mean by "define the policy for the group SQUID-MANAGERS" ? It is possible to have different user groups that are defined on the AD and use these in squid config ACLS. What you cannot do is change the ACLs themselves without touching the config file. [/QUOTE] Thanks for the reply... Agents would not get search engines, everyone except HR would not get job search sites, sex sites banned globally - these would be the kind of policies I need to set. That's what I mean by "different" policies. Can you guide me as what config changes are required in the config files so that squid understands ADS groups? Thanks, Navin J. Disclaimer: Information transmitted by this e-mail is proprietary to Adventity and/ or its Customers, intended for use only by the individual or entity to which it is addressed, and may contain information that is privileged, confidential or exempt from disclosure under applicable law. If you are not the intended recipient or it appears that this mail has been forwarded to you without proper authority, you are notified that any use or dissemination of this information in any manner is strictly prohibited. In such cases, please notify us immediately at postmaster@xxxxxxxxxxxxx and delete this mail from your records.