Can you clarify whether the audit software is running on the machine being audited, or running on another machine which is mapping a drive to the machine being audited.