This is my understanding aswell >>> malapierre@xxxxxxxxxxxxxxxx 16/09/2004 16:42:27 >>> Am I wrong, but a DENY permission on NTFS has a higher priority than a Allow... that means if a user has a deny on the app. But the everyone group has allow, this user won't be able to open the app... right? __________________________________________________________ Marc-André Lapierre Consultant Systems & Infrastructures 514 977-6170 Email : <mailto:malapierre@xxxxxxxxxxxxxxxx> malapierre@xxxxxxxxxxxxxxxx -----Original Message----- From: Philip Walley [mailto:philip.walley@xxxxxxxxxxxxxx] Sent: 15 septembre, 2004 17:48 To: thin@xxxxxxxxxxxxx Subject: [THIN] Re: Published App Groups that will work unless a user has explicit access or is a member of another group that has rights. If that is what you need to do, I don't think there is much that can be done other then setting the rights on the .exe -----Original Message----- From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx]On Behalf Of John Elstone Posted At: Wednesday, September 15, 2004 4:43 PM Posted To: The thin mailing list Conversation: [THIN] Re: Published App Groups Subject: [THIN] Re: Published App Groups Dont give that user group access to the published app and they wont get the icon to run it. If you want to secure it further you can modify the permissions on the executable so its the same as the published app. "Turman, David C." <david_turman@xxxxxxxxxxxxxxxx> wrote: Is there any way to explicitly deny a group running a published app on MF XP like you can deny in access NTFS? ******************************************************** This Weeks Sponsor triCerat: Have you had your fill of printing support calls, unauthorized apps running on unsecured Terminal Servers, profile headaches, and application performance problems? Join us and learn how you can have a less demanding on-demand enterprise! http://www.tricerat.com/?page=events#register ********************************************************** Useful Thin Client Computing Links are available at: http://thin.net/links.cfm *********************************************************** For Archives, to Unsubscribe, Subscribe or set Digest or Vacation mode use the below link: http://thin.net/citrixlist.cfm