We help IT Professionals succeed at work.

We've partnered with Certified Experts, Carl Webster and Richard Faulkner, to bring you two Citrix podcasts. Learn about 2020 trends and get answers to your biggest Citrix questions!Listen Now

x

Directories keep resurrecting themselves in profile share!

georgemason
georgemason asked
on
Medium Priority
304 Views
Last Modified: 2010-04-18
Hi Experts,

I wonder if someone can shed some light on this strange issue.

We have deleted some people's profiles from a share on the file server, and deleted the profiles from their local XP machines also. Yet overnight, the old profiles seem to resurrect themslelves, requiring re-deletion. Could there be some replication configured that I am unaware of? Where would this be set up?

Thanks. Investigation is ongoing!!
Comment
Watch Question

G'day mate.  Is this in a domain environment?  If so do the users have roaming profiles? If so soon as they log off they will indeed copy their new profiles back to the roaming path.  Take a looks at the user properties in Active Directory Users & Computers.  Check to see if there is a roaming profile set for the user

Hope this helps

Rob
IT Consultancy
CERTIFIED EXPERT
Commented:
Check the date/time of the ntuser.dat.  If the file is older than when you deleted them then yes you have somethign re-creating them such as maybe a script syncronishing two servers?  If ntuser.dat is being updated then a user is logging off from a machine using that roaming profile.

Having said that are these just empty directories?

Not the solution you were looking for? Getting a personalized solution is easy.

Ask the Experts

Author

Commented:
Hi Rob,

Yes it's a domain environment, sorry should have been clearer. Basically we logged onto the users machine as an admin, deleted the local copy of their roaming profile from the machine, then in the same session browsed to the server and deleted their profile from the share.

Lo and behold, the next morning, the profile was back on the server (and their machine) in all its 4.5GB glory.

It's got me very confused!

George

Author

Commented:
- dragon-it - no these are anything but empty! 4.6gb to be precise. I too suspect some sort of file synchronisation from somewhere but am so far unable to track it down.

However a previous administrator of this server was running a util on there known as Handy Backup - this is a file sync shareware app << shudder >> and although the license has expired I think it might be the culprit.

I'm performing a controlled deletion this evening and we shall see what's there tomorrow!

Thanks. G
Steve KnightIT Consultancy
CERTIFIED EXPERT

Commented:
As I said if the ntuser.dat is a new date/time then it is the user putting it back effectively.  If this isn;t possible because the user hasnt logged in then something funny's up!

Let us know how it goes.

Steve
CERTIFIED EXPERT
Top Expert 2005

Commented:
It's possible the user has Offline folders enabled for the profile share.  In this case you need to find the Offline cache and remove it otherwise it will simply recopy everything you deleted.

mmmmmm, nice idea Netmann66.  Am curious to find out the outcome . . .
CERTIFIED EXPERT
Top Expert 2005
Commented:
The only other logical explanation would be if the Profile share is on a DFS share that is being replicated back from another replica.

Author

Commented:
Right, here's an update....

The user is using a completely different profile now, and the problem has gone away. One piece of info that I should have shared with you is that historically a user profile migration had occured between two drives on the server, by the aforementioned admin, using techniques unknown. I think is the root of the problem. The new profile created for the user above was created in the current profile share and therefore did not exist in the old area. Previously the directories existed in both for most users (maybe you're getting a picture of how the previous guy operated!!).

Last night I created some test directories in the old profile share - sure enough, this morning, they are all present in the new profile share. Therefore there is obviously some process copying data between the shares. This is doubly annoying as I finished this profile migration with a nice script that ensured that profiles were copied in a controlled way..... deep breath.....

So the question is, what is installed on this box which is doing the mischievous synchronisation of profile shares? There are 2 likely culprits, I would appreciate your collective input:

1) Handy Backup. A piece of shareware used to copy between directories, but claiming that it has expired, and not running as a service as far as I can tell (will look into this more).
2) DFS (good suggestion netman66). It seems to be installed on the server, but not configured correctly. There is a share configured although I don't think it's active, errors when I try to view its properties.
Steve KnightIT Consultancy
CERTIFIED EXPERT

Commented:
It might just be a robocopy or xcopy job in scheduled tasks - he no doubt used d$ or whatever to carry out the replication but otherwise might be worth removing the profiles share from the other server for starters.

Author

Commented:
Am in the process of doing exactly that. I had already checked scheduled tasks and there's nothing in there, or from the cmd line using at.

I think it's Handy Backup. Shame, I would have liked to find out what was causing the issue, but I think I might just have to take steps to stop it happening without fully knowing what was causing it.
Steve KnightIT Consultancy
CERTIFIED EXPERT

Commented:
You could narrow down WHEN it is happening by checking the create time on the folders potentially.  If not write a batch file which does this and run it one the server.  When the path appears it will print the time and stop.


:start
if exist D:\profiles\testuser\ntuser.dat echo %time% & pause
REM Pause approx. 2 mins
ping localhost -n 120
goto start

Author

Commented:
OK I've ununstalled Handy Backup and moved the old profile directory (he must have been referring to its location using the C$ share as I'd already unshared the dir before any of this happened). I've created a test directory in the old profile directory to see whether it gets copied across - although I see no way that it could - but you never know!!

I'll split the points between you all as you have all given me ideas which helped me track down what was happening. Thanks to you all.
"I'll split the points between you all as you have all given me ideas which helped me track down what was happening. Thanks to you all."

I feel left out of the points George :-) I'll struggle on though.

Good luck tracking it down mate. Problems like this are great cos thanks to steve we all get a little batch file to check for a path and loop until it appears. I love Experts Exchange.

Rob

Author

Commented:
Oh mate, sorry about that, I missed you out at the top there. Next time eh? :-)

In the end I copped out and uninstalled that Handy Backup shareware, and I think that's it licked. Would have liked to be more scientific about it but the users were breathing down my next as their profiles kept getting polluted with old stuff which they had to delete every morning! How to make friends and influence people - I think not.

Thanks for your help tho.

George
Access more of Experts Exchange with a free account
Thanks for using Experts Exchange.

Create a free account to continue.

Limited access with a free account allows you to:

  • View three pieces of content (articles, solutions, posts, and videos)
  • Ask the experts questions (counted toward content limit)
  • Customize your dashboard and profile

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

OR

Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.