Am I wrong, but a DENY permission on NTFS has a higher priority than a Allow... that means if a user has a deny on the app. But the everyone group has allow, this user won't be able to open the app... right? __________________________________________________________ Marc-André Lapierre Consultant Systems & Infrastructures 514 977-6170 Email : <mailto:malapierre@xxxxxxxxxxxxxxxx> malapierre@xxxxxxxxxxxxxxxx -----Original Message----- From: Philip Walley [mailto:philip.walley@xxxxxxxxxxxxxx] Sent: 15 septembre, 2004 17:48 To: thin@xxxxxxxxxxxxx Subject: [THIN] Re: Published App Groups that will work unless a user has explicit access or is a member of another group that has rights. If that is what you need to do, I don't think there is much that can be done other then setting the rights on the .exe -----Original Message----- From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx]On Behalf Of John Elstone Posted At: Wednesday, September 15, 2004 4:43 PM Posted To: The thin mailing list Conversation: [THIN] Re: Published App Groups Subject: [THIN] Re: Published App Groups Dont give that user group access to the published app and they wont get the icon to run it. If you want to secure it further you can modify the permissions on the executable so its the same as the published app. "Turman, David C." <david_turman@xxxxxxxxxxxxxxxx> wrote: Is there any way to explicitly deny a group running a published app on MF XP like you can deny in access NTFS?