I have a need for highly expressive, dynamic permissions to shared files and folders. The closest analog to what I would like to do is in the LDAP Query Groups feature of the Windows 2003 Server Authorization Manager--but I can't find any way to tie a folder's ACL to AzMan... Any thoughts? --Pete