OK - I know this can be done, I just forgot how to do it and I can't get it to work. Here is what I need. I have one main share mapped to the users profile called p:\public. Under public there are a number of folders that represent each department. What I want to do using share permissions and Security assignment, is allow all users access to the "P" drive, but not the ability to write, i.e. create new folders at the top level. However, I do want to allow the users to write to their own department folders. Is this possible. I think this has been done, I just get things muddled up between share and security. Thanks. Oh, if you haven't gathered the network is W2K.