Hi Sergey,

>You can use RegMon and RegFile utilities from
Yep, that looks like the direction I'll have to go.
Now all I've got to do is 'acquire' a machine from support
to do a fresh install of an unpatched OS :)

Thanks

Malc