Sorry this is a bit off topic.<BR><BR>I am using MS Proxy Server 2 and want to deny internet access to a small number of NT accounts (by account name not IP address as they could log in anywhere in the company). Access is allowed from all other NT accounts. Doesn&#039t look like you can deny access to users or groups you can only grant access or am I missing something ?<BR><BR>I know I could do this by creating an NT Group containing all the users accounts I DO want to have access and grant this group rights on the Proxy Server but this would be much more of an overhead on my part as this group, which would be forever changing, represents 95% of accounts. I hope I&#039ve made myself clear !<BR><BR>Any help greatly appreciated.