You might be able to add an auditing acl to the BITS service. Then track it with success auditing, to see what process is invoking it...
Z Edward Ziots Network Engineer Lifespan Organization MCSE,MCSA,MCP+I, ME, CCA, Security +, Network + [email protected] Phone:401-639-3505 ________________________________ From: David Lum [mailto:[email protected]] Sent: Friday, June 19, 2009 4:07 PM To: NT System Admin Issues Subject: BITS I have a file/print/WSUS server that was using a lot of bandwidth across my WAN. I stopped WSUS and Automatic Updates and that had no effect, Stopping BITS did kill the traffic. Weird thing is 4 minutes alter the BITS process was started by SYSTEM 9but the traffic did flood not resume), but the event log gives no other clues. Looking at the services I see no services that are dependent on BITS. Would IIS auto-start the BITS service? Is there any way to find out what process *IS* starting that service? David Lum // SYSTEMS ENGINEER NORTHWEST EVALUATION ASSOCIATION (Desk) 971.222.1025 // (Cell) 503.267.9764 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
