Sorry to be such a pain, but I have another.
The security roles for guest are set to restrict access to "guest" folder, yet they can see all folders back to root.
Also, I would guess that you should be able to combine both configs so that you can control access to resources AND tool bars, yet if I add Guest_AutoConfigure="simple.config" it seems to have no impact.
I'm sure it's me missing something simple, but any help would be appreciated.
Just to confirm I have this right...
<htmlEditor defaultProvider="CEHtmlEditorProvider" >
Admin_SecurityPolicyFile = "admin.config"