Hallo guys Have a small problem. I have set up a squid proxy to authenticate against active directory and it has worked on a single group in the active directory. Now i need to authenicate two different groups who have different permissions on the AD. This is what i did to authenticate the single group : "auth_param ntlm program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp --require-membership-of="BIMSOFT+internet" auth_param ntlm children 5 auth_param basic program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-basic --require-membership-of="BIMSOFT+internet" auth_param basic children 5 auth_param basic realm Squid proxy-caching web server auth_param basic credentialsttl 2 hour auth_param basic casesensitive off" So does anyone have ana idea on how to authenticate both the 'internet group' and 'interenet_users group' to access the interent and ensure that the 'internet group' has access to http,https and ftp while the 'internet_users group' have only access to http. Regards kevin