kenndenn
>....but the user still has access to the primary
> folders and files. How do I restrict users from
> getting into the primary folder?
It's not a case of know one cares, no one knows what you are talking about.
What type of access are you talking about, web, LAN filesharing, ftp, ssh ???
By default only the admin user can write to the primary folder using LAN filesharing.
LAN & Web users will of course have read access to the primary ibay.
If you don't want people to see your primary ibay content then don't have anything in it.
You can configure the system to use an ibay for the primary site content, as you have done for virtual domains.