mmm yes, I suppose it could be the ADO part that fails although all the machine are also supposed be using the latest MDAC (suppose things aren't the way they are supposed to be) Wsus client must be having a problem. O well either way though they need to install a service pack or MDAC... i'll make it somebody elses problem... by the way this script works like a charm and is finding a few failed migrations. I deleted my computer account from the old domain and it was then not able to logon. So im glad this script is out there now to find them otherwise the remediation would have been a disaster.