Hi Pieterjan, > This way, RestrictedGroups should not be able to browse the internet. But > this isn't working. I suspect that the wbinfo_group.pl script is > malfunctioning. Is there a way to check this? try it on Console. When you start wbinfo_group.pl it waits for input. It depends on your configuration. If the command "wbinfo -u" gives you DOMAINNAME+DOMAINUSERS, it should look like this: DOMAINNAME+USERNAME GROUPNAME If you only get the USERNAMES, try: USERNAME GROUPNAME If the input was correct it will return: OK else: ERR Good luck!