Hey Bisco, I really thought bout that... but then again, is not my choice... Thanx guys!

edit the local group policy on the machine preventing anyone but admins from making changes to the network settings. then go in and define a bogus proxy server ip address (my fav is 127.0.0.1. no place like home). then add your lan ip addresses and any other valid sites said moron... er.. user absolutely need to go to in the bypass proxy settings under tools-internet options-lan settings-proxy server-advanced (i.e., *.microsoft.com; 192.168.*; and so on). this will cause any ie sessions to go to the loopback address if they are not clearly defined in the proxy exclusion list as sites that do not need proxy to get to. or you could just have said persons boss threaten to write them up or worse, but that would make sense. i deal with crap like that every day here at my job. good luck!!

Thanx butler.... I will take that into consideration for next time... Thanx to all of you for all your responses.... It's kewl to have so many options...