Thanx... I figured out a way to keep the person available to the networ but not able to see the internet. What I did was, since we r using DHCP, I gave that person out of the Dynamic pool and gave that machine a static IP. Next I looked at the dynamic pool on the firewall, and I decided on an IP that was out of both pools. This way the machine has an IP an DNS settings, but not a gateway so it won't fiund it's way out to the internet because the firewall won't allow it. Thanx though, u guys halped a lot u guys RULE!!! :punk: