This post is off topic. I apologize in advance, but I'm hoping someone out there can answer this question easily for me. I want to put an authentication rule on an entire site save for two subdirectories. How can I do so? As LocationMatch doesn't have an operator for "all things not matched by this regular expression" and one apparently can't ignore a parent directory's authentication rules if the child wants no authentication whatsoever, I can't come up with the right solution. The closest I've come is: <LocationMatch "^/($|[^(cfincludes|includes)])"> But this doesn't work as the brackets remove any sense of string, reducing my match to the set of words that are not completely within the jumbled letters inside the brackets. Regards, Christian ----------------- Christian Gilmore Infrastructure & Tools Team Lead Web & Multimedia Development Tivoli Systems, Inc.