All, this might have come up before, but I wasn't able to find it. Given the need to upgrade all clients to fully get rid of 1des, is there a way to do an inventory of client versions on a subnet, either by some sort of scan, or by looking at server logs? Thanks to all those of you involved in finally getting rid of 1DES and for the excellent documentation, Christian