Event ID 6009 is logged when Windows Server starts...what criteria have to be met (or, what service starts) before 6009 is logged?
Dave Lum - Systems Engineer [EMAIL PROTECTED] - (971)-222-1025 "..remember that, in the past, those who foolishly sought power by riding the back of the tiger ended up inside" - JFK ~ Upgrade to Next Generation Antispam/Antivirus with Ninja! ~ ~ <http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm> ~
