Avatar of IT Guy
IT Guy
Flag for United States of America asked on

SYSTEM security group keeps getting removed from %tmp% folder

A Windows 10 64-bit domain joined computer has an issue where the SYSTEM security group keeps getting removed from the %tmp% folder. This temp folder is located within the default location of C:\Users\username\AppData\Local\Temp.

This creates issues such as programs not being able to upgrade and the user not being able to print.

This computer currently has all latest Windows 10 updates installed and according to Malwarebytes it is completely clean and doesn't have any malware or harmful software installed. the SFC and DISM commands have also been run and the event viewer logs don't display any serious issues or warnings.

While this issue can be fixed by adding the SYSTEM security group back within the  Security tab (with the full control permissions) it is a hassle to keep doing this.

What can be done to prevent this issue from occurring?
Windows 10MiscellaneousWindows OSSecurity

Avatar of undefined
Last Comment
arnold

8/22/2022 - Mon
AntonInf

This sound slike the domain has a registry change each time you sign into the network.

Does this happen when you log in locally
IT Guy

ASKER
Yes this has been happening intermittently for all logon accounts on this computer both local and domain accounts.

What can be done to prevent this from happening?
ASKER CERTIFIED SOLUTION
Adam Brown

THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
GET A PERSONALIZED SOLUTION
Ask your own question & get feedback from real experts
Find out why thousands trust the EE community with their toughest problems.
arnold

Why do you want/need system to have access to user tmp space?
Anti-virus tools run a component under user credentials and have access to all user's space.

Local/temp is an equivalent to the %userprofiel%\local settings in a roaming profike setup this gets discarded when the roaming profile is copied out to the server on logoff and recreated on logon.
This is the best money I have ever spent. I cannot not tell you how many times these folks have saved my bacon. I learn so much from the contributors.
rwheeler23