Can anyone tell me if there is a way to write a log file from the vbs
logon script (in XP) as System (or someother level) so that the user
can't have read access to the folder/file that is being written to?

Thanks in advance.
--Gene

Gene,

You may want to do something like this.
Placing this code in a logon batch file will open IE and send the username and computername
as a query string to a web server.

You can then log this data to a database on the web server.
I do this to get service pack versions and registry settings pushed up also.

Set objIE = WScript.CreateObject("InternetExplorer.Application","objIE_")
objIE.Visible = False
StrUserName = GetUserName()
StrComputerName = WshNetwork.ComputerName
objIE.Navigate "http://servername/log.asp?COMPUTER=" & mStrComputerName & "&USER=" & mStrUserName
Set objIE = Nothing

Function GetUserName()
 GetUserName = ""
 mIntCounter = 0
 Do While GetUserName = "" AND mIntCounter < 5000
  mIntCounter = mIntCounter + 1
  GetUserName = WshNetwork.UserName
 Loop
End Function

-------------------------------------------------
d l b j r

Unambit yourself from meager knowledge of others,
engender uncharted sagacity.
-------------------------------------------------

I haven't tested it out, but I can set files/folders to write access and not
read access with the security tab.  But I don't know if you that would work-
being able to write to something but not be able to read it.

How about making the folder hidden?