Running SquidNT 2.6 STABLE 16 since yesterday and everything is running smoothly. You must be member of global domain group X to authenticate, using NTLM and the user details of the currently logged on user. However, we have a new user on the system. He has been added into the relevant group and I've confirmed on the DCs that replication has occurred, yet whenever he attempts to access a page he gets a "you are not authorised to access this page" page. I've checked the access log and see a lot of lines which look like 1190708486.534 0 191.9.222.107 TCP_DENIED/407 1840 GET http://www.microsoft.com/isapi/redir.dll? - NONE/- text/html 1190708486.565 0 191.9.222.107 TCP_DENIED/407 2086 GET http://www.microsoft.com/isapi/redir.dll? - NONE/- text/html 1190708486.752 187 191.9.222.107 TCP_DENIED/403 1510 GET http://www.microsoft.com/isapi/redir.dll? domain\user NONE/- text/html I had him change his password in case the machine was using a cached password and it was out-of-sync with the domain, but the problem remains. Unsure how to proceed, the permissions look fine and the NTLM authentication is working for everyone else. Paul Cocker IT Systems Administrator IT Security Officer 01628 81(6647) TNT Post (Doordrop Media) Ltd. 1 Globeside Business Park Fieldhouse Lane Marlow Bucks SL7 1HY TNT Post is the trading name for TNT Post UK Ltd (company number: 04417047), TNT Post (Doordrop Media) Ltd (00613278), TNT Post Scotland Ltd (05695897),TNT Post North Ltd (05701709) and TNT Post South West Ltd (05983401). Emma's Diary and Lifecycle are trading names for Lifecycle Marketing (Mother and Baby) Ltd (02556692). All companies are registered in England and Wales; registered address: 1 Globeside Business Park, Fieldhouse Lane, Marlow, Buckinghamshire, SL7 1HY.
