Solved

Temp files being written to C drive

Posted on 2008-10-21
7
261 Views
Last Modified: 2011-10-19
We have a terminal server that keeps getting 1KB files written to the C drive.  The server is one of two that we have load balanced and it is not happening on the other server.  Attached is a jpeg of what the files look like in the directory.  Below is what one of the files actually looks like.  Any ideas on where to look to figure out what is happening?  The file owners are all different.  Again, it isn't happening on the other server.  

The program looks to be Sun Power Campus which is used for student registration.

<?xml version="1.0" encoding="UTF-8" standalone="no"?><request><register term="c_term" year="c_year" regtype="TRAD" session="c_session" __pbband="group" peoplecodeid="c_peoplecodeid" transactionid=""><schedule><current provided="Y"><course status="status" credits="coursecredits" enddate="~tstring( date( enddate ),  &quot;mm/dd/yyyy&quot; )" eventid="eventid" section="section" session="session" subtype="subtype" __pbband="detail" startdate="~tstring( date(   startdate ),  &quot;mm/dd/yyyy&quot; )" credittype="credittype" organization="organizationid"/></current><adds/><drops/></schedule><studentinfo provided="N"/><overrides/></register></request>

files.JPG
0
Comment
Question by:marrj
  • 3
  • 2
  • 2
7 Comments
 
LVL 6

Expert Comment

by:JimsZ
Comment Utility
Not sure what is causing it but you could write a little batch file to remove the files and run it as a scheduled task although something like the file below would delete all files that begin with S in the root of the C:\ drive

create text doc

put below into text document

del c:\s*

rename text document "CleanC.bat"
set to run as scheduled task once every 20 min

*Verify that you have no files/folders you would like to keep that start with the letter S*

I would also check your "temp" path

Right click "My Computer"
Click "Advanced" tab
Click "Environment Variables" tab
at the top you will see
TEMP - see what path is
TMP - see what path is
0
 
LVL 7

Expert Comment

by:Mikealcl
Comment Utility
If the owners are different then perhaps you should use should use something like regmon to try and find the setting that is causing it.  

If you know the program well maybe compare the registry keys from your other load balanced server (for whatever program this is ) with the one thats having the problem, or even import over the keys after saving a backup.  

I'm assuming the settings is registry based since it effects multiple users.  
0
 
LVL 1

Author Comment

by:marrj
Comment Utility
I would assume it is registry based.  I don't know much about the application other than on the term servers everyone runs a specific instance of it.

I'll see if I can compare the registry settings between the two servers.

Thanks for the info on removing the files via a batch file.  
0
Do You Know the 4 Main Threat Actor Types?

Do you know the main threat actor types? Most attackers fall into one of four categories, each with their own favored tactics, techniques, and procedures.

 
LVL 6

Expert Comment

by:JimsZ
Comment Utility
Are these users using a mandatory profile on the Terminal Server?  If so, they could either "not have access" to write to the location in the profile, or the profile could be pointing to a location (such as a certain user account in which they do not have permissions)
0
 
LVL 1

Author Comment

by:marrj
Comment Utility
JimsZ,

The users have local profiles created when they login but data written in power campus gets written to an sql database.
0
 
LVL 7

Accepted Solution

by:
Mikealcl earned 250 total points
Comment Utility
Did you find anything?
0
 
LVL 1

Author Closing Comment

by:marrj
Comment Utility
It looks as if the problems were with the program Power Campus and something called XML validation errors.  I had to users write permission to the C drive of the terminal server.  
0

Featured Post

How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

Join & Write a Comment

Welcome to my series of short tips on migrations. Whilst based on Microsoft migrations the same principles can be applied to any type of migration. My first tip Migration Tip #1 – Source Server Health can be found listed in my profile here: http:…
ADCs have gained traction within the last decade, largely due to increased demand for legacy load balancing appliances to handle more advanced application delivery requirements and improve application performance.
This video Micro Tutorial explains how to clone a hard drive using a commercial software product for Windows systems called Casper from Future Systems Solutions (FSS). Cloning makes an exact, complete copy of one hard disk drive (HDD) onto another d…
Windows 8 comes with a dramatically different user interface known as Metro. Notably missing from the new interface is a Start button and Start Menu. Many users do not like it, much preferring the interface of earlier versions — Windows 7, Windows X…

743 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now