The only thing I could think to do is set up each user's directory as a hidden share (i.e. \\server\user$), and then use a hosts allow section in each share section. That would be clunky, and prolly a bear to administer, but I think it would work. You would lose the [homes] functionality, tho. The Archimage