Yeah, I know, but only to anyone on the network here. Access to the network this server is on is restricted. Turns out, the only people on the network are people I want to be allowed to behave like apache, so it should be ok, right? But I agree that this wouldn't be the best solution if there were Win network users you didn't want snooping around as apache. Maybe just changing the umask and establishing an smbusers file would work better for that, without adding guest priviledges.