That particular issue is easy to address John. You also have to have the Office Viewers installed on your servers, but then explicitly set the file associations on a per user basis so that .xls files would be associated with the Excel Viewer instead of the fully blown version of Excel. This is what we do when Customers only have a certain number of Office licenses compared to Citrix users. Jeff Durbin from this list has written a very nice little VBScript that sets the file associations at login based on group membership. And of course remember to install the Office Viewers before you install Office, otherwise everything will default to the viewers. Kind regards, Jeremy Jeremy Saunders Senior Systems Engineer ”ITS - passionate about winning” IBM Logicalis (Integrated Technology Services) Level 2, 1060 Hay Street West Perth, WA 6005, AUSTRALIA Visit us at http://www.ibm.com/services/au/its Phone: 132 426 Fax: ; 08 9261 8536 Mobile: TBA E-mail: jeremy.saunders@xxxxxxxxxxx John Elstone <john150774-thin@ yahoo.co.uk> To Sent by: thin@xxxxxxxxxxxxx thin-bounce@freel cc ists.org Subject [THIN] Re: Published App Groups 16/09/2004 06:05 AM Please respond to thin Then I would publish out each application icon to one group. The problem lies if someone receives an Excel attachment in Outlook for example, if they dont have access to Excel then it would still open when they clicked it. This could be controlled via NTFS permissions on excel.exe. Philip Walley <philip.walley@xxxxxxxxxxxxxx> wrote: that will work unless a user has explicit access or is a member of another group that has rights. If that is what you need to do, I don't think there is much that can be done other then setting the rights on the .exe -----Original Message----- From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx]On Behalf Of John Elstone Posted At: Wednesday, September 15, 2004 4:43 PM Posted To: The thin mailing list Conversation: [THIN] Re: Published App Groups Subject: [THIN] Re: Published App Groups Dont give that user group access to the published app and they wont get the icon to run it. If you want to secure it further you can modify the permissions on the executable so its the same as the published app. "Turman, David C." <david_turman@xxxxxxxxxxxxxxxx> wrote: Is there any way to explicitly deny a group running a published app on MF XP like you can deny in access NTFS?N�Y礱*h��+���z����ʋ�iܨ���Z����)��i��\jYl�v��+�7�j�l���x(���y˫y�ޮh�jT����~)^��i�^���j�e�ƭ���z��f�q�k��^��h�{�jwey�熌2����y�^��^��݊x(�צjw^����zm����k�ǫj�(��Z�