An important component of any security system, its multi-layered access and encryption permissions provides a powerful combination, when configured properly. However, time and time again I find myself in front of a Windows 2000 Server, where a failed permissions configuration succeeded in creating a tangled mesh, denying access to everyone. At this point, without a documented roadmap, it becomes difficult to unravel the conflicts, but I hope to shed some light on what to do and avoid form personal experience.