Thanks to all who chimed in. All helpful responses. I went with the quickest way which was a $7 adapter to slave the drive then use LinNeighborhood to send to a local $erver on Knoppix. Currently I'm writing a quick PHP app to help me manage our new M$ licenses (we have developers). You know, what really get's me mad about this is that M$ requires us to keep up with all these product keys, licenses, and activations but they don't have a way for us to keep up with said items. We have customers that are on the M$ platform and we have no control over that. That requires us to keep up with them for compatibility. We get 10 licenses for M$ Office 2003. We get 5 PK's for 2 activations each. It grows from there. I think I have 40 PK's each with a different number of activiations each that I need to keep track of and on which machine it's installed on. Like I don't have enough to do. MS lost me years ago as a personal customer. They've done it as a professional customer now. PLUGd@LuftHans.com wrote: >Am 26. Jan, 2004 schwätzte Gary Nichols so: > > > >>On Mon, 2004-01-26 at 13:35, Don Calfa wrote: >> >> >>>I have a Win2K laptop that I need to investigate what has been removed >>>(disgruntled ex-employee). >>> >>> >>STOP! Will there be possible legal action against this employee? If >>so, don't do anything to the laptop yet. Have it imaged by a >>professional forensics investigator. >> >>If this laptop won't be considered evidence, then proceed. >> >> > >Contact Ernie @ www.Linux-Forensics.com. > >There is a way to make a boot floppy for Knoppix. There's also a way to >get the floppy to then initiate a network boot and run over the network. >Provided those features are in PenguinSleuth it might be the tool you're >looking for. > >Ernie lives here in town, so if you do need to contract someone in he might >be available or know someone to recommend. He should be doing a presentation >for us soon, as well :). > >ciao, > >der.hans > >