Solved

XP Bypass Recycle - Immediately Delete

Posted on 2014-02-26
7
258 Views
Last Modified: 2014-02-27
We have an XP workstation that started to permanently (and unintentionally) immeidately clear documents when a specific user moves something to the recycle Bin.  If we log on as a different user that does not happen.  The user is on a domain running Windows SBS 2011 with re-directed desktop and documents.  If I log on as her on a different workstation the recycle bin does not immediately clear.  I did check the Recycle Settings (Right-click the Recycle Bin, and then click Properties.In the Recycle Bin Properties dialog box, click to select the Do not move files to the Recycle Bin. Remove files immediately when deleted check box) and it was not set to delete immediately.  I then reset it to delete immediately and saved.  I then turned off the delete immediately but it still deleted immediately.  Does anyone know where to check this in the Registry?

Thanks
Rich
0
Comment
Question by:webentpr
7 Comments
 
LVL 62

Expert Comment

by:☠ MASQ ☠
Comment Utility
"Does anyone know where to check this in the Registry?"

Try
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

The value of "NoRecycleFiles" should be "0" for normal behaviour
0
 
LVL 13

Expert Comment

by:Santosh Gupta
Comment Utility
hi,

Also you can check the recycle bin property and make sure that below option is not selected

recyclebin
0
 

Author Comment

by:webentpr
Comment Utility
Thanks guys but the Registry entry was already set and this issue is only with one user.  The registry entry would be for all users and it is not happening to all.  

As far as recycle property goes - that was checked prior to posting this message.  

We did discover one other thing - that is the delete issue only happens with items on the desktop.  If anything else is deleted it goes to recycle.  I am beginning to think the problem may be with the desktop redirection in SBS 2011.
0
Top 6 Sources for Identifying Threat Actor TTPs

Understanding your enemy is essential. These six sources will help you identify the most popular threat actor tactics, techniques, and procedures (TTPs).

 
LVL 18

Accepted Solution

by:
web_tracker earned 200 total points
Comment Utility
Since this is the only user it happens to and the user can log into another machine with out it happening, then it could be a glich in the users profile. I would rename this profile as User_old, then create a new profile for the user, then migrate her/his data to the new profile. Don't waste any more time on this issue, which you may not or may eventual find the cause, who knows it could have been a bug that corrupted the profile.
0
 

Author Closing Comment

by:webentpr
Comment Utility
Thank you - worked like a charm.
0
 
LVL 18

Expert Comment

by:web_tracker
Comment Utility
Glad to help. I to have racked my brain trying to find solutions to problems with a user's profile, some times spent hours, when it would have been simpler just to rebuilt a user's profile. Although it is nice to know how and why the issue was caused in the first place, but if I waste too much time on the solution then that is not a productive use of my time, which could be used to solve other IT issues in the company .
0
 

Author Comment

by:webentpr
Comment Utility
I agree.  2 weeks ago we upgraded the server from SBS 2003 to SBS 2011 and for a week everything was fine.  Suddenly we had this problem o this workstation.  In addition when she opened Chrome multiple copies would start.  One of the differences is SBS 2011 applied a number of updates to these workstations and i suspect one or more of the update caused the problem.  Again, thank you so much for the solution.
0

Featured Post

Highfive + Dolby Voice = No More Audio Complaints!

Poor audio quality is one of the top reasons people don’t use video conferencing. Get the crispest, clearest audio powered by Dolby Voice in every meeting. Highfive and Dolby Voice deliver the best video conferencing and audio experience for every meeting and every room.

Join & Write a Comment

If you build your web application in Visual Studio you'll get at least a few binaries, or .DLL, files in your bin folder. However, there is more compiling to be done. Normally this would happen when an ASP.NET resource within the web site is request…
If your system is showing symptoms of browser hijacks or 'google search redirects' check out my other article (http://rdsrc.us/u3GP7A) first and run the tool TDSSKiller (http://rdsrc.us/GDBBs4) to get rid of the infection. Once done, and if the …
This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're looking for how to monitor bandwidth using netflow or packet s…
You have products, that come in variants and want to set different prices for them? Watch this micro tutorial that describes how to configure prices for Magento super attributes. Assigning simple products to configurable: We assigned simple products…

744 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

19 Experts available now in Live!

Get 1:1 Help Now