Anew,Very insightful questions. Here are the anwsers:1. This is currently not an option (a feature request already exists). However, if you limit the permissions in MB, can can get some of the control you desire. If you are using a guest account, make sure the guest user can only access the desired folders/files. For trusted login, the assuption is the TeamSite user is also a MB user, so they should have access to the same set of files -- after all, they can log directly into MB and export the file and then import it into TS.2. There is no way to "enable" the MB connection and then "disable" the direct import feature. I'll file a feature request.3. See Mark's reply. If you are using the "Login with a MediaBin guest account" option, no LDAP is needed.