I have a Windows 2003 SBS that is really slow serving clients. There are only 10 clients on the network and the often have to wait 1-2 minutes to open up a word document. I looked thru the event log and the first glaring strange thing was that event id's 576, 540, and 538 are constantly coming up in the Security Audit Log. When I say constantly I mean every 45-60 seconds. Any idea's on why these are happening and if they might be causing the Server to respond slowly to network requests.