GetFileSecurity should be able to pick up the correct info, assuming you have sufficient permission to read the security descriptor. Does it pick up any permissions at all ? GetNamedSecurityInfo which the fileperm c code uses is also in the win32security module. What leads you to conclude that the group info is wrong ? Roger