I have Samba4 AD working for my windows xp client, I create share folder at smb.conf , and my user at windows xp can browse it. what i was thinking, how to make share folder only can browse from windows xp with user policy ? ex : /data/finance only browse with user tono,tini,bibit /data/marketing only browse with user ina,ani,ayu Rgds, Henry GM.