I found a howto on ACL's but it assumes the following: At this time, this document is not 100% complete. I have assumed you are joining to a Windows 2000 domain which is using Active Directory, you aren't trying to use Samba as a domain controller, and that you're using ext2 or ext3 on Linux. How would this procedure have to be changed if I was using Samba as the DC? http://www.bluelightning.org/linux/samba_acl_howto/ Regards Doug P