$ 0 0 Anything in event log?there should be an entry in the procmon log related to access denied of the access.