James, > Are you sure that this test is not triggering a DoS detection > mechanism? yes, quite sure. That wasn't the only experiment I ran :-) > Does it still give NT_STATUS_ACCESS_DENIED independently of whether > you are drip-feeding the data? yes Cheers, Tridge