Mark D. MacLachlan

Harold, I believe you could do this with a WMI Event Consumer script.

Such a script is available in Ed Wilson's MSPRess book Windows
Scripting with WMI (Self Paced Learning Guide).

I attended a Microsoft sponsored workshop that was taught by the author
of this book. Important note: The author made the class aware that a
line was missing in the event consumer script in both the print and
companion CD versions.

To get the script to run, at the bottom of page 110 add the following
line of code.

objfilter.EventNameSpace = "root\cimv2"

Hope that helps,

Mark D. MacLachlan