Thanks, Markus. I'll give this a try!
Mark

>There is a log or better 3 of them that you can find using the Start menu tag Administration/Event Log (may vary, mine is in German). But what got logged there in the past, depends on the actual settings.
>
>NT doesn't enable file access logging by default. You will have to do this once for the files you were interested in. It's easy done by clicking on the file, and choosing properties/security in the context menu. Mark the points you are interested in.
>
>Having done this, the checked events get logged in the security log too. You can now compare the file accesses with possible entries in the system or application log showing driver errors etc. May be you get a hint out of that.
>
>May be I'm wrong here but I don't think you can do much more with the built in tools of NT.