Now I've solved (again) my XP CD problem, I can play with nlite. Removed (all of) them, XP installed correctly under VMWare. I'll see next week how it behaves on my machine. @nuhi and r3incarnat0r, thanks for your answers. It should disable WMI event subsystem and stop logging WMI events. See the *.log files in %windir%\system32\wbem\Logs (defined by Logging Directory value). If you don't need to use the logs, it will prevent from unnecessary disk I/O and also cpu usage every hour in Windows 2000. As you said, the Google would help. Btw this tweak has been requested here. Thanks. I've checked the logs and they are of no interest for me. I don't know if I'll disable this because they are small and are not frequently accessed. If there is any specific thing to test, tell me.