Rick - Oh, Windows administrators, and their peculiar view of reality...
For your detection, from the TSM server: If they did not also clone the PC's IP address (!), then the GUID should be different for the clone, where message ANR1639I should be expected in the TSM Activity Log. Richard Sims
