Hi! I'd like to create AD-users that can access sharepoint, but can't lgoin at domain computers. I think it should be done with grop policies, but I'm not sure; I run some sites with anonymous access, and I run a site that users should be able to logon to. These users are not supposed to login to workstations in the domain. No VPN, no exchange-- you get the idea. There should be more people with the same requirements I think, so if you know how to do it-- I'd be very gratefull!! Regards, Willa

Hi, You may want to consider using FBA (Forms Based Authenication), since you mention you do not want uses to login with a domain. Please review the following: http://technet.microsoft.com/en-us/library/cc262201(office.12).aspx http://msdn.microsoft.com/en-us/library/bb975136(office.12).aspx - basic walk through.Regards, Savoeurn Va Microsoft Online Community Support

Please take a look at this for steps: http://technet.microsoft.com/en-us/library/ee957044(WS.10).aspx