I agree with all the ideas in the original article but I do have a problem with actually implementing them because I work for an ISP and I admin a couple of servers which need to have shared access via Enterprise manager for their owner/client so they can update their tables etc. I know they could do this via code within an ASP page or the like being uploaded but most don't know how. If I could get around this I would be happy to close the port. regards from Paul Reynolds