I do have some sort of update on this... I turned on boot logging on all locations. However, it did not give any additional info. I compared a recent lock-up to a normal boot and there were no differences. What we did was ask approx 1/3 of the users to reboot in the afternoon instead of morning. (We have a VERY leaky app that almost requires a daily reboot... Believe me - I don't like it either <grin>) This made our situation MUCH better. ' So, here is my theory to what happens if anyone can share their thoughts... XP BOOT START load kernel & drivers start network discover/connect to domain controller notify Domain Controllers we are online display wallpaper/desktop start login process/control-alt-delete For us, I feel the communication is being interrupted during the discover/connect to domain controller. XP is waiting for some type of confirmation from the DC which never comes and causes a lockup. Any experts care to share their thoughts?