OK. So I want to have a share useable by everyone in the group employees. The only modifications to file permissions I want users to be able to change (from their w2k workstations) are the archive bit and the write bit (thus someone can right-click on a file and check the archive and/or the read-only box). So this involves two things, I think: 1) I need to set a certain bit (the first of four octals) on the parent directory (in fact all sibdirectories too?) so that files and directories inside the shares take on the group employee, right? 2) I need to configure in SWAT the various masks/modes/etc, and check or uncheck the inherit permissions box, right? What I don't want is world writeable files, as well as no world readable files (if possible).