Securing Rsync

[Mike Winfrey]

I have a rsync server set up on a win2k server and a win xp pro computer
is my client. It's working very well doing the anonymous transfers.
However, I've tried setting up a password file and not having any
success.
 
rsyncd.conf on my server:
use chroot = false
strict modes = false
hosts allow = *
[serverbu]
auth users = user
path = c:/serverbu
read only = no
list = no
secrets file = c:/rsync/rsync.secrets
 
rsync.secrets on my rsync server
user:password
 
I run the following command string on my client computer:
C:\rsync\rsync.exe -av --delete --password-file=/rsync/rsync.secrets
"/cygdrive/C/Documents and Settings/All Users"  "user at server::serverbu/"
 
the password file on my XP machine looks just like the one on the
server.
 
I get an error stating "password file must not be other-accessible
continuing without password file using RSYNC_PASSWORD environment
variable.
@ERROR: auth failed on module serverbu"
 
I tried "set rsync_password=password" as well but that doesn't work
either.
 
Any ideas on how I can get this working with passwords.
 
Thanks,
Mike Winfrey