I noticed back in April of 07 in our Event Viewer in the Security log a new category named Detailed Tracking, and I am curious what update create that. Thank you, Mike

Hi Mike, The Detailed Tracking category determines detailed information for events such as program activation, process exit, handle duplication, and indirect object access. Reference: Audit Policies and Subcategories http://technet.microsoft.com/en-us/library/cc264465.aspx However this is Exchange Server Admin forum, you may get better idea about it Windows forum if you have further doubts. http://forums.technet.microsoft.com/en/tag/windowsserver/forums/