Some bugs are designed to exploit SP2 and they won't do diddly if you don't have it. But when you get SP2, you need to get all the rest of the updates to patch the holes SP2 opens up. Make sense? I manage nearly a hundred PC's all of which run XP. Supposedly, they are auto updated by corporate. NOT! The ones that haven't been updated since they were installed have fewer problems than the newer ones. But, since corporate now and then rolls out an update, that creates problems for the machines that don't have current MS fixes. SO, since auto update is FUBAR'd I have to go to each one and log in and get the updates. How much fun is that? Thank GOD for VPN or I would be living here till it's done.