Hi, I recently purchased Windows server 2003 and I'm trying to set permissions for users on my network, I have a directory on the server where all the company documents are stored, I want the employees to be able to read,edit and add documents to the directory but I don't want them to be able to copy any documents off the server to their own computers, essentially I want to prevent them from stealing company documents, how can I go about doing this? Also, is it possible to have different permissions for the same user based on whether he is logging in locally or remotely? Say I only want them to have access to one folder when they log in remotely compared to all folders when they log in locally, is this possible? Thank you very much for any help you can offer me.

You can't prevent users from copying items if they have any privileges above list access. All you can do (with Management's support) is set company policy and terminate anyone who violates that policy. As for the remote access, I don't believe you can set different access levels if they are using the same login ID. "So won’t you give this man his wings What a shame To have to beg you to see We’re not all the same What a shame" - Shinedown

Jennifer gave you the key concerning remote logons. They need to have different logon accounts if logging in remotely. Policy and enable auditing it the key to controlling documentation. Users should only have the minimum rights they need to do their work. Liberal: characterized by broad-mindedness, a person who favors a political philosophy of progress, reform & protection of civil liberties Conservative: a person who is reluctant to accept changes