Loren, > Is there a VNC service installed on the workstation? Maybe a PcAnywhere > installation? Thanks. Suppose there were a VNC service, or PcAnywhere (or Remote Dektop, or whatever). Is it a known fact that logging in through these would show up as a logon type 2 instead of type 3 (network logon)? I don't use any of these programs to test it out myself. Thanks. -- David McFarlane Systems Designer Michigan State University, Dept. of Psychology [log in to unmask]