I have found that it almost always is an IIS issue and whomever set up the server had no idea what they were doing, but Microsoft made it easy for them. Usually these sites also have huge wholes in security. The IIS add domain wizard adds the www automatically. Scott Wolpow