OK, I have RTFM. All the I could find. I cannot seem to set permissions via WINXP Pro explorer. No matter what I do all I get is access denied - even if I own the file. Samba log reveals: [2005/04/20 10:56:08, 2] smbd/open.c:open_file(326) larry opened file xghost.bin read=Yes write=No (numopen=1) [2005/04/20 10:56:08, 3] smbd/process.c:process_smb(1102) Transaction 19 of length 188 [2005/04/20 10:56:08, 3] smbd/process.c:switch_message(893) switch message SMBnttrans (pid 27187) conn 0x8b52b0 [2005/04/20 10:56:08, 3] smbd/nttrans.c:call_nt_transact_set_security_desc(2173) call_nt_transact_set_security_desc: file = xghost.bin, sent 0x4 [2005/04/20 10:56:08, 3] smbd/error.c:error_packet(147) error packet at smbd/nttrans.c(2179) cmd=160 (SMBnttrans) NT_STATUS_ACCESS_DENIED Running on Suse 9.2 File system is Reiserfs with mount options acl,user_xattr 1 2 Samba is compiled with acl and ldap support smbd -b HAVE_SYS_ACL_H HAVE_POSIX_ACLS have net groupmap add ntgroup="Domain Admins" unixgroup=dpdev which is our IT group. Logged as myself uid=272(larry) gid=544(Administrators) groups=0(root),100(users),101(dpdev),108( vsifax),109(www),200(informix),512(Domain Admins),544(Administrators),1000(dp) I can modify acls using setfacl but not through samba. Even if I log in to windows as Administrator I get the same error. What does it take to be a Samba Domain Admin ver 3.0.15pre2