objWMIservice.ExecNotificationQueryAsync MySink3, _
    "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE " & _
                    "TargetInstance ISA 'CIM_DataFile'" & _
                    " AND TargetInstance.Drive = 'F:'" & _
                    " AND TargetInstance.Extension = 'ini'" & _
                    " AND TargetInstance.FileName = 'gpt'"

Sub SINK3_OnObjectReady(objObject, objAsyncContext)

if objObject.TargetInstance.Properties_.item("LastModified").value <> objObject.PreviousInstance.Properties_.item("LastModified").value then
	gpofullpath = objObject.TargetInstance.Properties_.item("Name").value

	if instr(gpofullpath,DomainDNSFQDN) = 0 then

		gpoid1 = split(lcase(gpofullpath),"policies\")

		gpoid2 = split(lcase(gpoid1(1)),"\gpt.ini")
		gpouid = gpoid2(0)

		strGPODN = "CN="&gpouid&",CN=Policies,CN=System,"&DomainDN
		Set objGPO = GetObject("LDAP://" & strGPODN)
		StrGPOName = objGPO.DisplayName

	End if
End if

End Sub