We'll break it down into steps: 1. Log on to your problematic ISA Server using an account which has local administrator privileges B> I login with Local Computer Account wich happened to have same username and password like a domain account. 2. Start | Run | cmd 3. Type 'Cd "%ProgramFiles%\microsoft isabpa"' (use the double-quotes since the path has spaces) B> this command was not working but I navigate in dos mode to the right folder. 4. Type 'isabpapack +repro' (no quotes) B> yes. 5. Follow the instructions Following the instructions was simple since I have nothing to do only pres Space to begin capturing and End Capturing but between this two points I done nothing, since no one tell me what do to between this two points. 6. Respond with a link to the resulting data http://web.bizarnet.ro/PrivStmt.doc Note: Do NOT clear out your event logs prior to running this utility; there is important data that can help solve this issue. Event log was not cleared on this server since few days. Please provide further guidance.