Solved

Windows 2008 Server has a current profile of a user that left the company

Posted on 2012-03-26
9
292 Views
Last Modified: 2012-08-13
I have a Windows 2008 Standard server that has a local profile with a Modified date of today for a user that has left the company weeks ago and their account was disabled in AD.

Under what conditions could this profile be for today?
0
Comment
Question by:iNetSystem
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 4
9 Comments
 
LVL 121
ID: 37767936
No services on that server using the Account?

Check local event logs?

Server Backup?
0
 
LVL 9

Accepted Solution

by:
Geodash earned 500 total points
ID: 37767946
Take a look at this article. The OS can be modifying something within the profile, even if it is not being used.

http://social.technet.microsoft.com/Forums/en-US/windowsserver2008r2rds/thread/c97f17a0-e711-413b-a2f0-8b30717ca627
0
 

Author Comment

by:iNetSystem
ID: 37767950
No services at all on the system using the account.  The event logs truncated as of early this morning.  I do have a backup but am suspicious.  In AD the user is disabled and has a Modified date of weeks ago.  The Server however shows a current profile as of today.
0
Space-Age Communications Transitions to DevOps

ViaSat, a global provider of satellite and wireless communications, securely connects businesses, governments, and organizations to the Internet. Learn how ViaSat’s Network Solutions Engineer, drove the transition from a traditional network support to a DevOps-centric model.

 
LVL 9

Expert Comment

by:Geodash
ID: 37767960
0
 
LVL 9

Expert Comment

by:Geodash
ID: 37767970
You can also look here - if you are suspicious - and see when the account was actually last logged in

http://technet.microsoft.com/en-us/library/dd378867(v=ws.10).aspx
0
 

Author Comment

by:iNetSystem
ID: 37767983
Thank Geodash -
I use ManageEngine AD Manager and actually it reports the "Last Real Logoin" as the same date that the account shows in the Objects tab.
0
 

Author Comment

by:iNetSystem
ID: 37768573
any other ideas?
0
 
LVL 9

Expert Comment

by:Geodash
ID: 37768831
So the account has not been logged in or has recently?
0
 

Author Comment

by:iNetSystem
ID: 37801874
correct - the account is actually disabled in AD yet the profile continbues to report the current date.
0

Featured Post

MIM Survival Guide for Service Desk Managers

Major incidents can send mastered service desk processes into disorder. Systems and tools produce the data needed to resolve these incidents, but your challenge is getting that information to the right people fast. Check out the Survival Guide and begin bringing order to chaos.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

A company’s centralized system that manages user data, security, and distributed resources is often a focus of criminal attention. Active Directory (AD) is no exception. In truth, it’s even more likely to be targeted due to the number of companies …
Always backup Domain, SYSVOL etc.using processes according to Microsoft Best Practices. This is meant as a disaster recovery process for small environments that did not implement backup processes and did not run a secondary domain controller that ne…
This tutorial will show how to configure a single USB drive with a separate folder for each day of the week. This will allow each of the backups to be kept separate preventing the previous day’s backup from being overwritten. The USB drive must be s…
This Micro Tutorial steps you through the configuration steps to configure your ESXi host Management Network settings and test the management network, ensure the host is recognized by the DNS Server, configure a new password, and the troubleshooting…

726 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question