Hi Oliver, First, my sincere thanks for responding. I have delayed answering because I wanted to look further into this and do some testing. As you can see from the following, you can have different permissions for the same NTUser Account: 2009-03-26 17:12:51.6832 TestVista.Form1 Captured the ------------ BUILTIN\Users 2009-03-26 17:12:51.6832 TestVista.Form1 IdentityReference.Value: BUILTIN\Users 2009-03-26 17:12:51.6832 TestVista.Form1 AccessControlType: Allow 2009-03-26 17:12:51.6832 TestVista.Form1 FileSystemRights: FullControl 2009-03-26 17:12:51.6832 TestVista.Form1 InheritanceFlags: ContainerInherit, ObjectInherit 2009-03-26 17:12:51.6832 TestVista.Form1 IsInherited: False 2009-03-26 17:12:51.6832 TestVista.Form1 PropagationFlags: None <--> 2009-03-26 17:12:51.6832 TestVista.Form1 Captured the ------------ BUILTIN\Users 2009-03-26 17:12:51.6832 TestVista.Form1 IdentityReference.Value: BUILTIN\Users 2009-03-26 17:12:51.6832 TestVista.Form1 AccessControlType: Allow 2009-03-26 17:12:51.6832 TestVista.Form1 FileSystemRights: ReadAndExecute, Synchronize 2009-03-26 17:12:51.6832 TestVista.Form1 InheritanceFlags: ContainerInherit, ObjectInherit 2009-03-26 17:12:51.6832 TestVista.Form1 IsInherited: True 2009-03-26 17:12:51.6832 TestVista.Form1 PropagationFlags: None 2009-03-26 17:12:51.6832 TestVista.Form1 Captured the ------------ BUILTIN\Users 2009-03-26 17:12:51.6832 TestVista.Form1 IdentityReference.Value: BUILTIN\Users 2009-03-26 17:12:51.6832 TestVista.Form1 AccessControlType: Allow 2009-03-26 17:12:51.6832 TestVista.Form1 FileSystemRights: AppendData 2009-03-26 17:12:51.6832 TestVista.Form1 InheritanceFlags: ContainerInherit 2009-03-26 17:12:51.6832 TestVista.Form1 IsInherited: True 2009-03-26 17:12:51.6832 TestVista.Form1 PropagationFlags: None 2009-03-26 17:12:51.6832 TestVista.Form1 Captured the ------------ BUILTIN\Users 2009-03-26 17:12:51.6832 TestVista.Form1 IdentityReference.Value: BUILTIN\Users 2009-03-26 17:12:51.6832 TestVista.Form1 AccessControlType: Allow 2009-03-26 17:12:51.6832 TestVista.Form1 FileSystemRights: CreateFiles 2009-03-26 17:12:51.6832 TestVista.Form1 InheritanceFlags: ContainerInherit 2009-03-26 17:12:51.6832 TestVista.Form1 IsInherited: True 2009-03-26 17:12:51.6832 TestVista.Form1 PropagationFlags: None This at first confused me immensely but your comments and my searching has helped me understand a lot more. First, explicitly set permissions override inherited permissions, deny