Ditch the old one I found a bug in it that would cause the ever-popular "the configuration parameter defined in this rule is all forked up and I have to cause you much hate and discontent" event log error. I've fixed it and update the .zip file. ..sorry 'bout that.. ..also, I've heard both feature requests and I'm working on them when my boss doesn't have something for me to do. -- Jim Harrison MCP(NT4, W2K), A+, Network+, PCG http://isaserver.org/authors/harrison/ Read the books!