Thanks, Ed,
It's IIS5, and just Win2K Servers.

I have walked him through checking the privileges twice. I'll do it again - I'm never positive that what he SAYS he sees is what is truly the case. And maybe if I say "Ed Rauh says..." Instead of "I think your problem is...." he'll listen harder.

He CAN do the download if he uses his admin login and password he says.

Appreciate the time...
Barbara



>
>The odds are that the user is running in the context of IUSR_MachineName, and that account (which is used by anonymous Internet connections) doesn't have adequate privileges. Make sure that this account has read rights in the download directory; you'll need to probably grant permissions to this account in the domain, not just in the local server.
>
>I presume this is IIS5; is the domain operating in mixed mode supporting both NT and Win2K Servers, or is it a pure Active Directory environment? You might try enabling auditing, so that you have a log entry detailing exactly caused Windows authentication to fail for the user when the download fails.