• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 342
  • Last Modified:

active directory

At work we are on a 2008 active directory. I work in the IT department, but all the group policies are controlled at our corporation office.
They have been implementing a lot of security policies that only they control, and I don’t know if this is yet another policy, but on my laptop I went to
C:\Users
And I can’t find my user directory. I have unhidden folders, and unhidden protected operating system files, but my user’s folder is not showing up.
Any ideas why? I have very little experience with roaming profiles, but would this happen if I have a roaming profile?
0
JeffBeall
Asked:
JeffBeall
  • 5
  • 5
  • 2
  • +1
3 Solutions
 
Tony GiangrecoCommented:
They have probably added a restriction on accessing those folders in the domain GPO. The only way you might be able to access those folders on your laptop is by logging in as the local administrator on that laptop (not the domain account).
0
 
stu29Commented:
Run RSOP and look through the results to see if there are any restrictions set.  It will show you the winning policy.

GPO_name\Computer Configuration\Windows Settings\Security Settings\File System\
0
 
Justin YeungSenior Systems EngineerCommented:
run %userprofile% should give you a full path of your profile.

or under powershell

$env:userprofile
0
Making Bulk Changes to Active Directory

Watch this video to see how easy it is to make mass changes to Active Directory from an external text file without using complicated scripts.

 
JeffBeallAuthor Commented:
stu29, I ran result of policy and at

GPO_name\Computer Configuration\Windows Settings\Security Settings\File System\

it doesn't show anything about c:\users\username. Does that seem weird that it's not there?

Justin Yeung, that worked! my profile directory comes up. but if I click on the address box, it doesn't show the path. I even click on the down arrow at the right side of the address box and it won't show the path? I assume the path is C:\users\myusername
but wouldn't this show that they are blocking my access?
0
 
Justin YeungSenior Systems EngineerCommented:
try in in powershell

or under command prompt

type in
echo %userprofile%
0
 
JeffBeallAuthor Commented:
ah!!, nice, I forgot about echo!
yes, that shows the path, which is of course
c:\users\username
so, wouldn't this suggest that there is a policy hiding this directory from me?
could it be a virus or malware?
0
 
Justin YeungSenior Systems EngineerCommented:
what if you browse it under command prompt?
0
 
Tony GiangrecoCommented:
If you think it's spyware or malware, here is a comprehensive list of items to check

1. Go to All programs, Administrative Tools, Event Viewer. Check the System and Application sections for errors that may be causing your problems.

2. Open an elevated command prompt and run this to check for corrupted system files.
sfc /scannow

3. Install Process Explorer to find out what runs at startup
http://technet.microsoft.com/en-us/sysinternals/bb896653

4. If you haven't also ready checked for Viruses, update your virus definitions and run a Full Scan, deleting all virus and spyware detected

5. If you don’t have any Anti Virus installed, here are a few free ones to try:
http://www.avg.com
http://www.avast.com/en-us/index
http://windows.microsoft.com/en-us/windows/security-essentials-download
http://www.bitdefender.com/solutions/free.html

6. If spyware is found, download and run these free anti spyware apps
AdwCleaner
http://www.bleepingcomputer.com/download/adwcleaner/

Kaspersky TDSSKiller
http://www.bleepingcomputer.com/download/tdsskiller/

ESET online scanner
http://www.eset.com/us/online-scanner/

Malwarebytes Anti-Rootkit
http://www.bleepingcomputer.com/download/malwarebytes-anti-rootkit/

www.malwarebytes.org
www.superantispyware.com
www.hitmanpro.com

7. Run a Disk Cleanup: Start, All Programs, Accessories, System Tools, Disk Cleanup.
Include Temporary Internet Files and Temp files

8. Run Error Checking: Start, Computer, right click  on C:\, Tools, Error Checking.
Select "Automatically fix file system errors" and click start

9. Check for all programs that start at Boot: Start, Run, type MSCONFIG, on the startup tab, review the programs listed. Uncheck anything that should not run on startup

10. Defrag all hard drives: Click My Computer, right click the C drive, click Tools, Disk Defragmenter, Click Analyze to check the amount of fragmentation or Defrag to run the process. You repeat this per drive.

General Maintenance to keep your pc up to date
1. Run Windows Update and select all Microsoft updates and security patches

2. Update your Pc's System Bios

3. Update your drivers: Motherboard Chipset, Network Adaptor, Video, Audio & Printers

4. Start Adobe reader, click Help and then click Check for updates to get the latest security and application updates.

5. Go to Control Panel, Java, advanced tab, click Check for Updates to get the latest security and application updates.

6. If you get a BSOD and want to verify if it’s related to bad Ram chips, download Memtest and make a bootable CD from the ISO. Boot it and run at least one  complete set of tests to check your memory for fault
http://www.memtest.org/#downiso
0
 
stu29Commented:
It is not weird it is not there.  It would only be there in the RSOP results if there were an actual policy defining it.

Does this happen for just YOUR profile or all profiles?
0
 
JeffBeallAuthor Commented:
luckily i have a desktop pc, and a spare pc. this problem is showing up on my laptop
for both the desktop and spare pc, this is NOT happening. So it seems to be my profile on the laptop. The weird thing is, I just imaged my laptop about a week ago. so it's a pretty fresh copy of windows.
My spare and desktop pc were imaged pretty long ago, at least about 5 months ago.
I guess I could try to remove my win7 profile on the laptop.
also, I have my everyday account that doesn't have admin rights, and I have an admin account.
with the admin account, I login, and the non admin account shows up in the users directory, i access the non admin account, but if i close explorer, and open it again, and look for my non admin account, it's not there.
0
 
Justin YeungSenior Systems EngineerCommented:
your profile probably get corrupted. just delete it and rebuild it.
0
 
JeffBeallAuthor Commented:
I would, but I need to rename c:\users\corruptusername
but
corruptusername
is not visible for me to rename.
0
 
Justin YeungSenior Systems EngineerCommented:
do it on command line with local admin login (restart, otherwise the ntuser.dat {registry} will be in use)

run as elevated mode,

ren c:\users\xxxx c:\users\oldprofile.

delete the registry key

HKLM\Software\Microsoft\Windows NT\CurrentVersion\ProfileList\(SID of the users)

you can see that under the Key of the value ProfileImagepath who that profile is.
0
 
JeffBeallAuthor Commented:
thank you for the help, I was able to redo my profile. then i scanned with malwarebytes, and incredibly it didn't find any infections.
this is amazing to me since i re-imaged this laptop about 1 week ago, and my profile already had a problem. I don't think I ever had a profile go bad so fast, but then again, it seems like the longer i work on computers, the more you see different things
0

Featured Post

Upgrade your Question Security!

Your question, your audience. Choose who sees your identity—and your question—with question security.

  • 5
  • 5
  • 2
  • +1
Tackle projects and never again get stuck behind a technical roadblock.
Join Now