An excellent ACE and permission handler (does some things that even xcacls doesn't): http://membres.lycos.fr/jfb/gb/gbtools/fileacl.htm -------------- Xcacls is the easiest way to do this. Its avaliable from the win2k etc resource kits so you should be able to get a copy quite easily. It has the advantage over cacls that you can use the "/y" switch to remove access rights.