User Accounts

When I look at the C; drive on one of my users, it looks like this:

Folder:   jdoe.domain    (This has 15GB)
Folder:   jdoe                (This has 10GB)
Folder:   All Users
Folder    jdoe.PCName   This has 30MB

Then other user are listed...   But in this case......Why does jdoe have 3 folders?   I could see one for local machine.....and the one for network????

This is a Windows XP SP3 machine and the domain is on a 2008 Server
bankwestCTO/CashierAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Esteban BlancoPresidentCommented:
Sounds like there have been three accounts.  jdoe.domain is the one from Active Directory.

jdoe and jdoe.pcname look to be local profiles.
0
bankwestCTO/CashierAuthor Commented:
But why?     2 local accounts?

My users always log in to a domain as domain\user.    So why would it create a local profile (or should I say 2)

Trying to learn some of this.................

Are they all needed?????    

If this was a brand new user.....I understand it creates the domain profile.....   but I need a bit more knowledge on this.  

Seems like alot of wasted space to have both???
0
Frank McCourryV.P. Holland Computers, Inc.Commented:
Look at the creation dates and the last modified date of the NTuser.dat file.  You will notice that the creation of one of these folders may have co-incided with removing the computer and re-adding it to the domain or even renaming the computer.  

The extra profiles will be inactive and can be removed, the trick is finding the active profile.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
10 Tips to Protect Your Business from Ransomware

Did you know that ransomware is the most widespread, destructive malware in the world today? It accounts for 39% of all security breaches, with ransomware gangsters projected to make $11.5B in profits from online extortion by 2019.

Esteban BlancoPresidentCommented:
The only one that should be present is the domain account.  When you built his computer, you may have created it before joining to the domain.

If the user is only using his/her domain account, then the local accounts are safe to be deleted.
0
Frank McCourryV.P. Holland Computers, Inc.Commented:
To see the NTUSER.DAT file, you will have to unhide the protected operating system files.

NTUSER.DAT is a great indicator of when the profile was last used because it is accessed at every logon and log off, thus changing the modified date.
0
bankwestCTO/CashierAuthor Commented:
Well, since I have been looking at them......The date modified on 2 of them are 9-4-13 and one of them is 8-27-13......

The creation dates are:

jdoe     10-9-08     The last modified date on NTUSER.dat is 8/30/13
jdoe.local     6/16/10    The last modified date on NTUSER.dat (not sure)  dont see one.... and I have "unhidden" the files
jdoe.domain     11/3/11   The last modified date on NTUSER.dat 9/4/13

I am logged onto his machine as a domain admin, not as jdoe.

Sure close in date????   Nervous to delete the jdoe

But if my users ONLY log in as jdoe to our domain.......I shouldnt be nervous.
0
Esteban BlancoPresidentCommented:
Back up jdoe just in case.  He is using his domain account.
0
bankwestCTO/CashierAuthor Commented:
And another puzzlement, some of my users profiles only show as

jdoe   and don't have .domain after their login name like the one I have been talking about.

I am really getting confused....  

What information can I provide to see why some have the .domain and others don't
0
Frank McCourryV.P. Holland Computers, Inc.Commented:
Initially Windows will create the account jdoe, even when connected tot the domain.  If windows creates an new profile for jdoe, but the folder jdoe exists, it will create the folder as jdoe.domain.com.
0
Esteban BlancoPresidentCommented:
How do you build these machines?
0
bankwestCTO/CashierAuthor Commented:
These I didnt....I inherited the job...

When I do them now....I set up the machine as a local admin user ( not the user who will get the machine.)   Then I add it to the domain.    

So the user actually never logs in locally to the PC.

So I should only see jdoe.  

Unless for some reason they added the .domain so a new profile would be created and then didn't delete the old one?  
Is that a possiblilty?
0
Esteban BlancoPresidentCommented:
That's the right way of doing it.  It appears that these machines (before your time) where probably built under the users first name when they were being built.  Perhaps they didn't have a domain and they had a workgroup before and that's why you are seeing local accounts.  Maybe one of those profiles got corrupted once and they created a new profile.

Bottom line is that based on the size of jdoe.domain and the date modified on NTUSER.DAT, the user is working on the domain profile on the machine.  I am certain of that.  You should just create a local admin account if it's not present and delete the other ones.  Create a backup if you are concerned of losing anything but I doubt it.  We are talking 30 MB.  For the other one, ask the user if they have all the data in the current logon that they have.  Is it possible that the same user has two NT accounts?  Is there another person with that name in the company?  The one that logged in on 8/30 may be an old profile and the user still has documents in it.  You can migrate all the data and consolidate.  Just make sure you back up the stuff.
0
bankwestCTO/CashierAuthor Commented:
And another question......If jdoe logs into someone else's PC (domain act), then it will again create a profile on that machine on the local C drive?

Maybe working at another branch for the day?    can those also be deleted safely?
0
Frank McCourryV.P. Holland Computers, Inc.Commented:
Yes and Yes.
0
bankwestCTO/CashierAuthor Commented:
All comments were very helpful and I appreciate it all.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows XP

From novice to tech pro — start learning today.