We have a domain server (SBS W2K3 Premium Edition) and with it is ISA2004. We are having a DSL connection connected to the server with one NIC. Worstations are connection via switch to the server. We also have one workgroup. My problem is I can’t restrict the workgroup from using the internet. Connection to the internet is thru ISA is per authentication and per internet user only. But still they can access the internet. Can any body help. Thank you very much.