hmmm, might check the following key:

HKEY_CURRENT_USER\Software\KiXtart\TokenCache

and see if it's abnormally large ... only other time I've heard of anything similar to this, is certain THIRD PARTY APPLICATIONS, that when sensing a new user, recursively create KEYS in HKCU ... and runup the registry big time ... might check any HKCU keys for any third-party appz run amok ...

-Shawn

[ 03 July 2002, 23:46: Message edited by: Shawn ]