My Documents contents Deleted at logon ! - Please help

[richbrowncardiff]

Hi All, any advice much appreciated.

Just been looking at one of our calls and it states that when a user logs on their work is missing. looked at all of the usual stuff and have tested it myself and their data does infact get dleted / vanishes from their my docs!

we are using folder re-direction and all (according to the policy / event logs = success)

Any ideas ?

many thanks

[MatthewL]

Have you checked the local computer where it is happening to check they are not local, checked they are on the server, checked permissions on the folder.

[DMcCoy]

This can happen if you are using a mix of short \\server and \\server.domain.com full fqdn paths for redirection and home path location. Windows doesn't recognise them as the same location and decides to "move" the contents.

[witch]

I'm sure you have thought of this but is it a corrupt profile? We have issues with 2 or 3 profiles a week - the user can logon OK but there is nothing in "my docs".

[richbrowncardiff]

Thanks all I found out that the policy had been changed to move contents.

[wesleyw]

There is also a change that needs to be made in the GPOs to stop this type of thing when the content is being deleted due to the way document libraries work with home directories we had this as a conflict with students although the staff didn't suffer the same problems.

[psydii]

This has just appeared in the MS KB.
Folder Redirection functionality "Move Content to new location" can lead to dataloss

They key requirement for this condition is a non MS SMBv1 server hosting the files. I'm not sure which ones in particular are affected.

[Michael]

You haven't got Delprof2 setup have you? Then again, your Documents should be redirected and not local!

[WithoutMotive]

I don't whether this relates but I've just had a similar problem.

A user reported documents missing. I checked their user area and everything apart from the usual "My" folders had gone.
Restored from previous version.
Next day, reported again, restored.
I noticed that the "Last modified" time when the contents had been deleted was always close to 9am. Registration.
User said that she registers in a particular room at that time so I was going to monitor the folder the next day.
Next day, everything stayed where it was but it turns out she was in assembly and didn't register there.

Today, gone again and she'd registered in the same room.
That particular machine seems to be getting rid of her documents on the server. However, it's not affecting anyone else who logs on to that computer nor is it affecting her when she logs on to other machines.
That computer has it in for her.

Investigations continue.