If you need a test, drop to a command prompt in the WINNT folder and create
a DIRECTORY/folder called winlogon.exe
(i.e. md winlogon.exe)
This'll give you a reading about whether real-time protection is alive an
well within 15 seconds, I believe. RD the newly created folder Neither
choice in the warning popup will do anything either useful or bad.
I'm not sure I've done this test on a server, but it should work and it
should be harmless.
--