eventid was my first port of call! The kix script is being called from a bat file which is run from a GPO. As I said it only sporadically effects XP boxes w2k boxes work fine, grrrrrrrrrrr

Kerry