That can not be done natively in W2K. W2K offers ntfs permissions and EFS file
encryption to control access to files/folders. Keep in mind a local
administrator can always gain access to files and folders that he does not have
permissions to by taking ownership and giving himself permissions and may also
be able to decrypt EFS encrypted files if he is the recovery agent for
S. --- Steve