I have locked in several docs and did not find the answer I am using samba2.2.3a The question is, when I view directory permission with the Windows 2000 file properties -> security tab, I change one user should only have read & write access, but no execute permission (that means if they click on ?*.bat? or ?*.exe? the user should get access denied, but they should be able to create a new file). But when I log in as that user, and when I click on a ?*.bat? or ?*.exe?, the file will run even though the user doesn?t have execute permission. In short, how could I set for my users only to have read & write but no execute permissions on any share? This is my share in the smb.conf [public] comment = Public Directories path = /data1/smb/public writable = yes create mask = 0666 force create mode = 0666 directory mask = 0777 Please help Any help is greatly appreciated. Eli