Thanks Todd

It answers some of my questions.. but where would a Windows 2008 Domain server's authenticaton fit into this picture

On our domain we have multiple groups that we wish to use to restrict access to various directories.

Will this be done in the Windows Share environment.. i.e. Drive D: is mapped to \\DSS\Share1

Or in the DSS Share Environment

Many thanks
Dave