Does anyone know why whenever I am in one my several snapshots, I get an SSM popup that svchost.exe is trying to modify the registry? This usaully happens once or twice per session. Process: Path: C:\WINDOWS\system32\svchost.exe PID: 1968 Information: Generic Host Process for Win32 Services (Microsoft Corporation) Registry Group: User Shell Settings Object: Registry key: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders Registry value: AppData New value: Type: REG_SZ Value: C:\Documents and Settings\NetworkService\Application Data Previous value: Type: REG_SZ Value: C:\Documents and Settings\LocalService\Application Data I have the option of creating a permananent rule in the checkbox, but since I am not sure, I don't create a permanent rule. I usually choose to block, and the popup disappears without any hindrance to my system. Obviously, the change is a choice between "NetworkService" and "LocalService" in C:\Documents and Setting\......\Application Data My system is XP Pro SP2, standalone desktop, and is not part of a domain. I don't know what the different values in the registry would make, as a choice.