Hi, I have Squid authenticating AD domain accounts (via it's LDAP helper) to an AD backend, if the user is part of an allowed "Internet Users" group they get internet access, if they don't authenticate or aren't part of the "Internet Users" group they don't get internet access. What I'm after is a way to get rid of the "pop up" authentication Window when the browser starts and uses the Squid proxy server. The Windows workstations that access Squid are all part of an AD domain and the users that login to those workstations login with their valid AD accounts. I've tested various solutions from Web searches for NTLM pass-thru, where for example, Firefox has "about:config" and ntlm settings you can set in there, and for IE adding URL's to the Intranet zone, but they don't work. I keep having Squid prompt for a username and password. Any advice/help/pointers is appreciated. Thanks. Michael. __________________________________________________________________________________ Yahoo!7: Catch-up on your favourite Channel 7 TV shows easily, legally, and for free at PLUS7. www.tv.yahoo.com.au/plus7