Well I was testing the adaware ad-watch on a 2003 ts - when a typical user logs in - they cannot minimize the event screen from adwatch and it is trying to make changes probably to the run line in the reg. I have yet to run any filemon/regmon but also do not know how well this scales up with 20-50 users. Has anyone tried this yet? Lavasoft says it works on citrix&TS but not sure if they fully mean it will run or only that you can scan it. thoughts? Ron