Loading using temp profile

[noohad]

Hi Guys,

 

I got a bit of a weird problem here with my domain computers...

 

They are randomly deleting all the profiles stored in c:\users

(including Administrator and Default).

 

As a result of this, any user who logs in is created with a temporary profile.

 

Not only that but pretty much everything in Program Data is being deleted too.

 

I cannot work out what could be causing this.

 

Any help or ideas would be appreciated very very much.

 

Thank you so much :-)

[Zourous]

Sounds like the students might be getting access to the C Drive. Have you got all avenues blocked? Booting from usb disabled?, system repair disabled? Safe mode disabled from students logging in with their accounts. All these roots could enable someone to get in and delete files from the C drive.

[noohad]

You see it's quite baffling... Access to C drive is denied as well as being completely hidden.

USB Drives are disabled. In safe mode they cannot login.

If the students did have access, they would have deleted random files but every time it's the same... All the users folders are deleted except for public. And the two folders that remain in program data are adobe and Microsoft.

 

Thank you :-)

[Zourous]

Assuming you're not using XP, have you looked to see if the corresponding reg keys still exist for the deleted profiles in the registry? This might prove if it is a proper profile deletion process or someone randomly messing around.

[noohad]

Using Win7.

In registry under profile lists Administrator does exist.