Did a Search and tried the suggestion from MCA as myself (Domain Admin) and a "locked down" user and did not generate anything in the Event Log..

Here is the link that I tried -

Event Log (Application)

{Edit - Search Results from http://vivisimo.com }
Eric Augustus- Re- Rpcclient doesn't use '-I' option

http://www.stanford.edu/~glamb/lanman/restrict.txt
{Edit - end}

Did not find anything on http://www.northernlight.com

From what I can find Get domain of current logged user -, it may be related to W9x.. Just checked the logs and there has been no one logging in on W9x system for quite a while now.

Thanks,

Kent

[ 25. October 2002, 17:48: Message edited by: kdyer ]
_________________________
Utilize these resources:
UDFs (Full List)
KiXtart FAQ & How to's