I woke this morning with good intentions...... I saw this in my event log: A client process connected to the directory with remote procedure call (RPC) string binding ncacn_np:\\\\XXX05[\\pipe\\000000FA.001]. This server #5 in a series... Although I am not a total novice; never seen this before. What does it mean?? This server supports Exchange folks remote... but we have no user such as ncacn_np.