It's actually a combination of reg-reads and file searching, but different for each product (VMware workstation, VMware GSX/ESX, VirtualPC, VirtualServer, etc.) There's a macro now for @tssession, which is somewhat similar with respect to it showing that you're not running on a "real" or "physical" client. Oh well, nevermind then. Just a suggestion.
_________________________
silence is golden, but duct tape is silver