tis 2009-09-01 klockan 17:07 +0530 skrev Tejpal Amin: > My aim is to stop users not logging onto my AD domain from accessing > the internet. I am afraid that is not possible. At the HTTP level (what Squid sees) there is no difference between clients logging on automatically due to having cached credentials from a domain logon or manually by entering the credentials in a browser login box. Both is domain logons, differing only in how the client got the logon information. MAYBE it's possible with some domain policy settings, but I would not think so. Regards Henrik