Hi everyone, one of my coworkers decided to play a trick on me, and he has been playing a very inappropriate wave on my machine at work. Using the Sysinternals filemon software, I found the wav file being accessed on the network (and removed it) but what baffles me is the winlogon.exe process was executing it. The file is in the <winDir>\system32\ folder, and the last modified date was in 2004, so I'm guessing this is a legit MS file and not something he recently added/overwrote. Any ideas on how he is doing this? We all have access as admins on all machines. Thanks

I am sure you must have thought of this by now, but that is the reason why the OS has permissions in the first place. Rather than solve the immediate puzzle perhaps it would be better to prevent any future occurances.

Contact your IT Department immediately. Life is more painless for those who are brainless.

any wav sound can be used in sounds, it's real easy to change. Some HELP in posting on Cnet plus free progs and instructions Hopefully my advice will help you...Please post back your result

Thanks for all of the replies! We're a fun little software company (hence the admin rights since we always need them as developers), so nothing to contact the IT dept about (they do this kind of stuff too). Found out what it was, and I feel like a fool. He set my new mail notification, program open, and program close sounds in the control panels sound applet to use that wav file just as XpUser4Real had mentioned. I guess I just expected more from him. Thats ok, I have a payback app in the works :D It's all in good fun, I was just wondering how he did it.

Thanks for posting back! Sounds like a cool company to be with...LOL Some HELP in posting on Cnet plus free progs and instructions Hopefully my advice will help you...Please post back your result