Maybe an old event log entry? System log, look for source of w32time, which shows the source IP going to the DC it updated against.
-Bonnie From: Joseph L. Casale [mailto:[EMAIL PROTECTED] Sent: Thursday, June 12, 2008 10:17 AM To: NT System Admin Issues Subject: Old IP from a Win2003 System Any chance of enumerating an ip a system *had*, it was changed and I need to know it! Thanks, jlc ~ Upgrade to Next Generation Antispam/Antivirus with Ninja! ~ ~ <http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm> ~