At 12:26 AM 21/11/2004 +0000, you wrote:

> > the user connecting to FB has nothing to do with Win ACL.
> > What do you mean by user who is running FB?
>
>This is a standard Windows user account that is used to help secure the
>installation, both FB and guardian are running under the user's (FB_USER)
>account. FB_USER has the correct permissions (R/W) for the DB folder
>(C:\DATABASES\FIREBIRD\) and the FB installation folder as well as Read
>permissions on Windows and System32 folders.

OK, but which OS-user is running the *application* ? This is the user that
is asking to create a file. If the ACL is denying that permission, then
that denial precludes your fb_user from proceeding with the request,
regardless of its own permissions.

./heLen