My users use Office XP sp3 and windows xp sp2 i redirected mydocs to the server as usual to \\server03\%username%$. And the profile to other sharearea and appdata. I didn't notice that when they access MS word it defaults to Mydocuments with it's on the server \\server03\%username%$ and they can see on the open dialog in MSword username$ then they can press up 1 level and it takes them to the server03 level where the y can see the SYSVOL and NETLOGON and then browse the whole network. I remove nearly all privileges from users, Computers near me, etc... I don't know...could you give some ideas? I runned out.