If your ISA server is joined to your domain and so are your client machines. Then the best option is to install the ISA Firewall Client on client machines and create a user-based access rule. I believe the ISA firewall client setup.exe resides in the \ISAServermspclntsetup.exe. If this path on the server is incorrect then do a seach for mspclnt folder on the ISA Server to locate the FWC setup.exe

Wow, Tnx tnx lot, it work out. i need your help more, v using ISA 2004, there is no document for the network, I recently joind in this company also i new to isa. everybody using internet and i want to block some users, my director is using direct connectivity, somedays back i blocked internet for some users, aftersometime without microsoft firewall client everyone again accessing internet as direct connectivity, also if i modify the rule, any rule particulary in my director pc, administrator user & passwords required. he is getting fed up, on this, without prompt how can i block internet connectivity for some users, also through microsoft client only again it should work out. even the users created in active directory for internet users not worked out how it happens suddenly, but from my head office they doing remotely all this stuff, i want your help, i have lot of doubts pleas help me