Have you guys set up group(s) and joined users to a group, and then set ibays to belong to a group rather than Admin or Everyone and change rights to read=group write=group
If you do this you can then control users logging on to a domain with netlogon.bat to only have access to ibays belonging to a Group that they are members of, and only log on to network connections if they have a valid user/password combination on e-smith or sme server.
Regards
Ray Mitchell