Yes.. that worked. And yes, I don't recall having to set the top category to deny all before but it makes perfect sense that the logic was changed. Thank you!