Can anyone point me to a resource that'll confirm whether an event log is doing what it's supposed to do or if it's masquerading? This is in reference to Security Event ID: 595 that I'm getting on my exchange 2000 server. The event is: Type: Success Event ID: 595 Description: Object Type: Port Object Name: \RPC Control\epmapper Process ID:1256 " " "Accesses: Communicate using port I trying to troubleshoot what might've cause all of my server services to stop and become unaccessible. Any response is appreciated.