OK, sorry I did not explain myself better.Some sample data is:<RootFolder> <Folder name="C:\TestFolder1"> <Permissions> <Acl>Administrators:FullControl</Acl> <Acl>Users:Modify</Acl> </Permissions> <Folder name="C:\TestFolder1\SubFolder1"> <Permissions> <Acl>Administrators:FullControl</Acl> <Acl>Users:Modify</Acl> ... </Permissions> <Folder name="C:\TestFolder1\SubFolder1\2ndLevel1"> <Permissions> <Acl>Administrators:FullControl</Acl> <Acl>SpecificGroup:FullControl</Acl) </Permissions> </Folder> ... </Folder> <Folder name="C:\TestFolder1\SubFolder2"> ... </Folder> ... </Folder></RootFolder>From above, SubFolder1 and SubFolder2 have the same set of permissions as their parent, C:\TestFolder1 so I am not interested in output here. I am interested in displaying folders that do not have the same permissions as their parent, as in "C:\TestFolder1\SubFolder1\2ndLevel1", in which Users have been removed and permissions granted to a specific groupI hope that this clarifies what I am trying to achieve. I generally use VBScript for my scripting (simple SysAdmin scripting) but not sure XML-wise and am open to suggestions.Thanks,Lee.