I've been thinking about security in ReactOS a lot recently, and I've taken the time to write down some of my thoughts.... http://mok.lvcm.com/cgi-bin/reactos/roswiki?UserSecurity I'd love some feedback if anybody is also interested in this subject.