ntuser.dat file too large

HI,
I have a remote user that has a ntuser.dat file that is almost 3g and i remember about 2yrs ago it was also around this size and i copied it to another location then deleted it and when he logged in again it created a new default ntuser.dat which was much smaller.  No problems except he said some of his settings were different but he still could run all his programs etc.  My question was if there is another way to simply shrink this file since i was recently told you cant delete the ntuser.dat even though i did it that time but maybe just got away with it however since its for a roaming profile isnt there a way to force user to use a mandatory profile?  This is on a windows 2003 terminal server.  thanks
dankyle67Asked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Emmanuel AdebayoGlobal Windows Infrastructure Engineer - ConsultantCommented:
You will need to find out what application is consuming the size.

You can use Dureg.exe Tool to determine the size of the registry

http://support.microsoft.com/kb/317382
0
dankyle67Author Commented:
So if i know that the file i want to check is the ntuser.dat under documents and settings, how would i refine the search using Dureg.exe so i dont have to search entire registry?
0
Emmanuel AdebayoGlobal Windows Infrastructure Engineer - ConsultantCommented:
HKEY_USERS
0
Introducing Cloud Class® training courses

Tech changes fast. You can learn faster. That’s why we’re bringing professional training courses to Experts Exchange. With a subscription, you can access all the Cloud Class® courses to expand your education, prep for certifications, and get top-notch instructions.

Emmanuel AdebayoGlobal Windows Infrastructure Engineer - ConsultantCommented:
Quick question, does this affect the user log on and log off?

Regards
0
dankyle67Author Commented:
It doesnt affect the user logging on and off but it takes up 3g of space on c drive so its a huge ntuser.dat file to say the least.  I thought you could also redirect the temp environment for the roaming profile so that instead of it filling up c drive you could point it to d drive for instance.  Not sure if that can be done.  I would however definately wana know what is taking up all that space.  I ran the Dureg and it gave me sizes of all 3 reg hives so if i isolate the hkey_users and it tells me the size how would i go about isolating the particular program taking up all  that space in ntuser.dat?
0
drfrank319Commented:
Hi  dankyle67,

NTUSER.DAT is loaded into the registry as HKEY_CURRENT_USER when the user logs into the machine. You can delete it by rebooting the machine and remotely accessing the root from another PC. For example, \\servername\c$\~~\<ProfileName>\NTUSER.DAT. I typically rename or delete the Profile at this point. Be sure to first save anything you want from the profile (Outlook signatures, IE favorites, My Documents folder, Desktop folder, etc). Next time the user logs in, a new profile will be created.

Hope this helps.
0
dankyle67Author Commented:
I deleted this file last year and user said no problem with settings after logging back in and creating new ntuser.dat so i can do that again but would still like to know how to find the program that is taking up the space so i will know how to fix in the future when a user might not be able to lose settings and would not want me to delete their ntuser.dat file.
0
Emmanuel AdebayoGlobal Windows Infrastructure Engineer - ConsultantCommented:
As I specified earlier,
NTUSER.DAT is HKCU for that particular user.
Open regedit and goto HKUSERS and find user with matching SID.

Be careful when using regedit
0
drfrank319Commented:
See if this helps:

Registry Size Estimator Tool
http://support.microsoft.com/kb/317382
0
dankyle67Author Commented:
I opened up hkcu in regedit but dont know how to find out which user corresponds to SID for the particular user with the large ntuser.dat.
0
drfrank319Commented:
Look in HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\ProfileList. Under each SID you will see a 'value' named ProfileImagePath that has the directory path to the user profile.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
dankyle67Author Commented:
I located the correct sid for the particular user that was generating the large ntuser.dat but when i opened up HKUSER to identify that same sid, there isnt one there that is same number to match.  At this point i might just end up renaming the ntuser.dat and having the user login later to create a new one.  Thanks for all the help and information.  Would have really liked to identify which software is taking up that space since  most  likely it will fill up again during the course of the year.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2003

From novice to tech pro — start learning today.