I have a network folder that 4 individuals need private. I figured it'd be pretty simple: deny the group with everyone and give the 4 individuals access. However, since the users are in the group with everyone in our organization, which I have denied access, it doesn't matter if I explicitly gave them permission. Is there any way around this?

Deny settings always trump everything else. You forgot to tell us whether this computer is on a domain or not. Generally you would create an Organizational Unit (OU) for these people (Marketing, Sales, Production, whatever) and use GPMC.msi to create/link permissions so they apply only to the OU. Get details about using Group Policy and its management console in the appropriate TechNet forum. http://social.technet.microsoft.com/Forums/en/categories/ MS-MVP - Elephant Boy Computers - Don't Panic!