I'm sure you guys can explain this, but I feel like I'm in the Twilight
Zone.
Last  week I was helping a friend with his computer, and had occasion to
demonstrate my Remote Desktop connection-it uses port forwarding and the web
interface, and I closed the desktop after only a very short time.
While I was there, we removed his printer, re-booted several times and I
left when the cable connection went down a short time later.
I had occasion to check Event viewer yesterday, and imagine my surprise to
see this printer removal recorded.
There are four events recorded, from 1:04 to 1:06 PM. The type is "warning".
They have event codes 3, 4, 8 and 20 and the user is NT Authority system.
The events are Driver removal, printer purge, pending deletion and deletion.
The printer model and the name of his computer are recorded, so I know this
is from his computer. I've never had that model printer, and my computer has
a different name.
Eagerly awaiting your response (and looking over my shoulder).

www.zoemargo.com

                         PCBUILD's List Owners:
                      Bob Wright<[log in to unmask]>
                       Drew Dunn<[log in to unmask]>