Hi all, My problem is this: I have a W2K server on which there is an application that runs from an executable stored on the server. I wish to have an event generated in the sec event viewer everytime one of the 4 users who uses this app, executes the file to open it. So far I have: Gone into local security policy (secpol.msc) and enabled auditing on object access (success). Gone into the properties of the exe I am auditing and in the security/advanced/auditing tab I have entered in the user accounts of all the users I wish to audit. Here is where I am confused: which items have to be checked off in the access table for this exe so that 2000 only gives me events when the file is executed, not for every time someone breathes on the server or looks at it funny (object access auditing is very very extensive, I want to KISS (keep it simple silly). Thanks in advance for the help, Mike ******************************************************** This Weeks Sponsor StressedPuppy.com Games Feeling stressed out? Check out our games to relieve your stress. http://www.StressedPuppy.com ******************************************************** To Unsubscribe, set digest or vacation mode or view archives use the below link. http://thethin.net/win2000list.cfm