Windows TEMP folder is deleted / recreated once per week

Posted on 2011-04-23
Last Modified: 2012-05-11
Once per week, ALMOST always on Sat mornings between 8 - 10a, the RWW site goes down - a page comes up which says to contact the system administrator.  I have determined through LOTS of troubleshooting that the C:\Windows\Temp folder is either being replaced or modified such that the only permissions on it are "Administrator" user with less than full control.  The workaround so far has been to reset the permissions (SYSTEM FULL CONTROL, Network Service - READ/WRITE, Administrator - FULL CONTROL) and then, under an elevated command prompt, run the iisreset /restart command.
Question by:mlmslex
    LVL 3

    Expert Comment

    Do you have some sort scheduled task running at this time?
    LVL 6

    Expert Comment

    Why the C:\Windows\Temp folder delete/recreate every week?
    Please find which program delete/recreate it and try to solve it.
    Please set rights of C:\Windows\Temp folder as below:
     User: Everyone
     Rights: Only this folder, deny "Delete".

    You can use scheduled task to run a batch file at sat morning, batch file like below:
    ; batch content
    cacls C:\windows\Temp /E /G administrator:F
    iisreset /restart

    Author Comment

    I do not have any tasks (that i can locate) running at this task.  I've been trying to "find" which application is doing it.  Research shows this could be something IIS is doing as a result of a service / process permission not being correct.

    I want to fix the problem rather than creating an automated "block" or "band-aid" to correct the problem when it occurs.
    LVL 6

    Accepted Solution

    The RWW site page do some schedule jobs at Sat? e.g. Backup, Compress database and so on?
    If no schedule task to effect the folder C:\windows\temp, I'm afraid the website maybe effect the folder.

    And we can use Process Monitor to check which program change the C:\windows\temp folder:

    Author Comment

    Thank you, huacat - i will install the Process Monitor before Saturday and see which program / process affects the C:\Windows\Temp folder.

    Author Closing Comment

    Not so much a solution as a good way to help me determine what was happening.

    Featured Post

    Free Trending Threat Insights Every Day

    Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

    Join & Write a Comment

    Because virtualization becomes more and more common, and, with Microsoft Hyper-V included in Windows Server at no additional costs, and, most server hardware nowadays is more than capable of running a physical Small Business Server (SBS) 2008 or 201…
    A quick step-by-step overview of installing and configuring Carbonite Server Backup.
    Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.
    In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor ( If you're interested in additional methods for monitoring bandwidt…

    754 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    18 Experts available now in Live!

    Get 1:1 Help Now