Thanks. What I'll probably end up doing is similar to what I do now with patches. I collect all OS and IE patches into one field, then do queries against that field to see which servers need a particular patch applied.

Similarly, if I collect all services that are installed and either currently running or set to autostart into one field, I'll get a pretty good snapshot of the services on any given system, and I can do queries as needed for specific questions like, "Which systems are running IIS?"

Since we have hundreds of servers in multiple DMZ's, doing queries across the network is out of the question, so we have to get a little creative in our approach.

Thanks again,

NMM