You can do it through client-side VBScript code and hoping that they have their security settings set to Stupid and have The Scripting.FileSystemObject installed and use IE.<BR><BR>Or, you can write an ActiveX control that does it. But you've got to hope that Stupid downloads and installs it.
...then you'd also have the ability to find the *contents* of any files on the user's computer. Including minor little things like registry settings (where maybe passwords are stored?). And maybe financial statements. And...<BR><BR>So unless your user is a complete idiot and allows you access to his machine...<BR><BR>