I've got a BUNCH of machines using a CIFS share from a NetApp filer - but I need to be able to find out which machine is making/modifying files on that share.. Suggestions? Bill -- bill bradford mrbill at mrbill.net austin, texas