I believe taking MS's advice and disabling the remote administration via RPC, if at all possible (registry key setting) is the best advice anyone can get due to the nature of this issue. Gadi.