Ok, what I mean is the connection established because the user is consciously connecting to my PC or is this part of some network scan that PCs in a workgroup do periddically? Also I'm not actively sharing anything. The default shares are the ones created by WinXP (Admin$, C$ and IPC$), don't know if that makes a difference. I really want to make sure of this.