Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
?
Solved

Why do all users have default set paths using system account folders?

Posted on 2014-07-21
6
Medium Priority
?
3,392 Views
Last Modified: 2014-07-27
I have been trying to diagnose an  issue with an application when I noticed that my test user had most of its paths set to a system profile..

So I deleted my test user profile and logged in so it will create a new user profile.  It did it again.  Most of the paths are set to a SYSTEM user profile.  I tried several other users allow them to create new profiles and they all have the same issue.

I moved the machine into a different OU with no GP applied and the issue is still happening.  Here is an example of cmd->set for a normal user.. this is not the system profile, but lots of the variables are set to that for some reason.

ADMINTOOLS=ADMINTOOLS
ALLUSERSPROFILE=C:\Documents and Settings\All Users
APPDATA=C:\Users\xxxxx\AppData\Roaming
CACHE=C:\Documents and Settings\SYSTEM\Local Settings\Temporary Internet Files
CDBURNING=C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\CD Burning
COMMONADMINTOOLS=C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
COMMONAPPDATA=C:\ProgramData\
COMMONDESKTOP=C:\Users\Public\Desktop\
COMMONDOCUMENTS=C:\Documents and Settings\All Users\Documents
COMMONFAVORITES=C:\Documents and Settings\All Users\Favorites
COMMONFILES=C:\Program Files\Common Files\
COMMONMUSIC=C:\Documents and Settings\All Users\Documents\My Music
COMMONPICTURES=C:\Documents and Settings\All Users\Documents\My Pictures
CommonProgramFiles=C:\Program Files\Common Files
COMMONPROGRAMS=C:\ProgramData\Microsoft\Windows\Start Menu\Programs\
COMMONSTARTMENU=C:\ProgramData\Microsoft\Windows\Start Menu\
COMMONSTARTUP=C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\
COMMONTEMPLATES=C:\ProgramData\Microsoft\Windows\Templates\
COMMONVIDEO=C:\Documents and Settings\All Users\Documents\My Videos
ComSpec=C:\Windows\system32\cmd.exe
COOKIES=C:\Documents and Settings\SYSTEM\Cookies
DEFAULTUSERPROFILE=C:\Documents and Settings\Default User
DESKTOP=C:\Users\Public\Desktop\
FAVORITES=C:\Windows\system32\config\systemprofile\Favorites\
FONTS=C:\Windows\Fonts\
FP_NO_HOST_CHECK=NO
x=w sdfsdfzzz
HISTORY=C:\Documents and Settings\SYSTEM\Local Settings\History
HOMEDRIVE=Z:
HOMEPATH=\
HOMESHARE=\\x.x.x\xxxxx
KMP_DUPLICATE_LIB_OK=TRUE
LOCALAPPDATA=C:\Users\xxxxx\AppData\Local
LOCALSETTINGS=C:\Documents and Settings\SYSTEM\Local Settings
MEDIAPATH=C:\Windows\Media
MSSHAREDTOOLS=C:\Program Files\Common Files\Microsoft Shared
MYMUSIC=C:\Windows\system32\config\systemprofile\Documents\My Music
MYPICTURES=C:\Windows\system32\config\systemprofile\Pictures\
MYVIDEO=MYVIDEO
NETHOOD=C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Network Shortcuts\
NUMBER_OF_PROCESSORS=1
OS=Windows_NT
Path=C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\apps\watcom-1.3\binnt;C:\apps\watcom-1.3\binw;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\java\jdk1.7.0_21\bin\;C:\Program Files\MATLAB\R2013a\bin;C:\Program Files\Windows Live\Shared;C:\Windows\System32\WindowsPowerShell\v1.0\
PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC
PERSONAL=C:\Windows\system32\config\systemprofile\Documents\
PRINTHOOD=C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Printer Shortcuts\
PROCESSOR_ARCHITECTURE=x86
PROCESSOR_IDENTIFIER=x86 Family 6 Model 44 Stepping 2, GenuineIntel
PROCESSOR_LEVEL=6
PROCESSOR_REVISION=2c02
PROFILESDIRECTORY=C:\Documents and Settings
ProgramData=C:\ProgramData
ProgramFiles=C:\Program Files\
PROGRAMS=C:\ProgramData\Microsoft\Windows\Start Menu\Programs\
PROMPT=$P$G
PSModulePath=C:\Windows\system32\WindowsPowerShell\v1.0\Modules\
PUBLIC=C:\Users\Public
RECENT=C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Recent\
SENDTO=C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\SendTo\
SESSIONNAME=Console
STARTMENU=C:\ProgramData\Microsoft\Windows\Start Menu\
STARTUP=C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\
SystemDrive=C:
SystemRoot=C:\Windows
TEMP=C:\Documents and Settings\SYSTEM\AppData\Local\Temp
TEMPLATES=C:\ProgramData\Microsoft\Windows\Templates\
TMP=C:\Documents and Settings\SYSTEM\AppData\Local\Temp
UATDATA=C:\Windows\CCM\UATData\D9F8C395-CAB8-491d-B8AC-179A1FE1BE77
USERNAME=xxxxx
USERPROFILE=C:\Users\xxxxx
WATCOM=C:\apps\watcom-1.3
windir=C:\Windows
windows_tracing_flags=3
windows_tracing_logfile=C:\BVTBin\Tests\installpackage\csilogfile.log

Anyone know what may have caused this issue to happen?  I can recreate the issue on all of my lab computers I have tested.

Shell Folders and User Shell folders both have all of the variables set properly in them.  Where is CMD->Set getting its variables from and how do I set them to the proper variables?
0
Comment
Question by:gacus
  • 4
  • 2
6 Comments
 
LVL 58

Assisted Solution

by:McKnife
McKnife earned 2000 total points
ID: 40210860
Setup a test machine, join it to your domain and setup auditing on that registry branch named environment in HKCU. That way you'll see who does it and when it happens.
0
 
LVL 1

Author Comment

by:gacus
ID: 40211580
If I look under HKCU, not all these variables are even set.
0
 
LVL 1

Author Comment

by:gacus
ID: 40211582
0
Free learning courses: Active Directory Deep Dive

Get a firm grasp on your IT environment when you learn Active Directory best practices with Veeam! Watch all, or choose any amount, of this three-part webinar series to improve your skills. From the basics to virtualization and backup, we got you covered.

 
LVL 58

Accepted Solution

by:
McKnife earned 2000 total points
ID: 40211764
Ok... what you see there are user variables. What you see with "set" are both user- and system variables. In regedit, the system variables are under HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Environment

...sorry, missed that.
0
 
LVL 1

Assisted Solution

by:gacus
gacus earned 0 total points
ID: 40211909
Thanks!  I was able to figure out it was a legacy application installer setting all this variables.  I had to go through a list of installers and watch these keys to figure out which application was doing it.  It was fun!
0
 
LVL 1

Author Closing Comment

by:gacus
ID: 40222264
it was part of the fix
0

Featured Post

Making Bulk Changes to Active Directory

Watch this video to see how easy it is to make mass changes to Active Directory from an external text file without using complicated scripts.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

The following article is comprised of the pearls we have garnered deploying virtualization solutions since Virtual Server 2005 and subsequent 2008 RTM+ Hyper-V in standalone and clustered environments.
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
The goal of this Micro Tutorial is to help navigate beginning users with the app store on Windows 8. It will explain exciting features how to maximize your PC through these apps. This will be demonstrated using Windows 8 operating system.
Want to learn how to record your desktop screen without having to use an outside camera. Click on this video and learn how to use the cool google extension called "Screencastify"! Step 1: Open a new google tab Step 2: Go to the left hand upper corn…
Suggested Courses

578 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question