Hi B, it's quite easy to use AD group based ACLs. First of all check if you get all groups right form your AD: $> /usr/sbin/wbinfo_group.pl $> M180D01+y2237 Internet $> OK If you get OK - proceed, else you had to check your samba settings. In squid.conf you had to add the follwoing line: external_acl_type AD_group ttl=3600 children=5 %LOGIN /usr/sbin/wbinfo_group.pl Now you can define AD groups in squid: ie acl Administrator external ADS_Group domain-administrator # Def. Administrator as AD group domain-administrator acl AuthUsers proxy_auth REQUIRED >From now on you can define ACL as described by Amos Jeffries. Good luck, Daniel Am Donnerstag, 2. Juli 2009 07:32:36 schrieb Beavis: > is it possible for squid to have the option where it can be tailored > to apply ACL's based on groups on AD? > > any help would be awesomely appreciated. > > regards, > -b