Andrew, Robcopy is not the culprit. Xcopy is. Even after we could not access C: or D: drives, roobocpy kept running as I could see in network traffic and its cmd window.
Xcopy has modified default permissions of drives. We cannot view any log or disk remotely either. I think running SECEDIT is perhaps the way to go and hope that we can open command prompt at least in safe mode. Need some feedback about use of SECEDIT in this situation. Thanks. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
