This seems like the perfect solution, but there's one gotcha. Run our playback application ( Traktor) as the MediaUser, allowing the programmer to play back media but not copy or modify it.Have users log in to Windows as ProgramUser, giving them no access at all to the media.Create a user (MediaUser) that has read-only access to the digital media that programmers know nothing about and do not know the password to.Create a user (ProgramUser) that has no access at all to the digital media.We're running on Windows systems (Windows XP for the client machines, and Windows Server 2008 for the media server). We're trying to give programmers (read DJs, not coders) access to the music, without allowing them to copy any of it to their flash drives or transfer it across the Internet. We're installing a digital media system at the college radio station I work at.