Hi Bruce,

The security group for this module in this folder was empty that morning before the report was run at 0700 - only SYS access would have been allowed.

The security group for this module in this folder was empty that morning after the report was run - the report was run at 09:28 and the second restored database was taken at 1000 hrs.

The only other person who knows the SYS password was away on holidays and confirms they did not add and remove the security group.

The task entry in the [ADS] section reads:
Task=m:\asp

This is what it reads for all of our databases so it appears there is nothing wrong there...

I still cannot explain how she got in...

I have checked all of our databases and there are no other with the same extension.

This kind of stuff really scares me...

Any other ideas that might explain this are truly appreciated.

Thank you and,

Cheers, JK