Mysterious user profiles under documents and settings

Posted on 2009-04-30
Last Modified: 2012-05-06

At a branch office we have a DC and acts as their file/print server. I have noticed folders appearing under documents and settings for people that are at other branches and the same branch, but whats weird is they are not admins, just normal users. I have checked remote desktop settings, and local admins, and just the correct admins are in there. When I open the profile folders they do not have a desktop or mydocuments folder. Any ideas on why these folders are being created? It is only on this server we are having the problem.
Question by:borgmember
    1 Comment
    LVL 20

    Accepted Solution

    That is typically what you see when a user can access a share on a domain
    computer and encrypt files in that share. The computer then creates the
    profile for the user and impersonates the user to request an EFS certificate
    to store in that profile. The user would need write access to the folder in
    order to encrypt the files and the encryption attribute would need to be
    enabled on a folder in the share. So I would start by checking that out. You
    can use the cipher command to check for encrypted folders on a computer. By
    default on a domain controller regular domain users would not have write
    access to any default share and the only share they would see is the sysvol
    share.  If you have audting for account management enabled on those domain
    controllers you might find events recorded in the security log that may give
    an idea what is going on. The user profile creation date may also be


    Featured Post

    How your wiki can always stay up-to-date

    Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
    - Increase transparency
    - Onboard new hires faster
    - Access from mobile/offline

    Join & Write a Comment

    Numerous times I have been asked this questions that what is it that makes my machine log on so slow, there have been cases where computers took 23 minute exactly after taking password and getting to the desktop. Interesting thing was the fact th…
    A quick step-by-step overview of installing and configuring Carbonite Server Backup.
    Hi everyone! This is Experts Exchange customer support.  This quick video will show you how to change your primary email address.  If you have any questions, then please Write a Comment below!
    Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.

    734 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    20 Experts available now in Live!

    Get 1:1 Help Now