Dont give that user group access to the published app and they wont get the icon to run it. If you want to secure it further you can modify the permissions on the executable so its the same as the published app. "Turman, David C." <david_turman@xxxxxxxxxxxxxxxx> wrote: Is there any way to explicitly deny a group running a published app on MF XP like you can deny in access NTFS?