1.0.1 - if no +mrgroup specified, assume +mrgroup=* by default. In other words, child processes are now sandboxed by default 1.0.2 - the logon id is now kept enabled and added to the restricting groups by default. This fixes most applications accessing display-related resources (for example, sandboxed applications are now themed under Windows XP and later) - try to unload some unnecessary DLLs before waiting for a child process to terminate, to reduce the footprint of an essentially dead instance of iam - now builds under Visual Studio .NET 2003. Project files included - binaries now built with Visual Studio .NET 2003, tremendous space savings 1.0.2.1 - added version to iam.exe, updated copyright