profile anomaly in 'C:\Users' folder

[CapnPugwash]

Hi,

 

we have Exchange 2010 running on an old 2008 box.

Lately the C drive has got pretty full so I've logged on to clear out temp folders etc.

 

Looking in the 'C:\Users' folder, I can see a staff profile that was modified today

 

Staff do not have access to this server.

 

The modified time was minutes ago so I ran : "query user /server:servername" but it only showed me as logged in

 

This could have a really simple explanation ... but it's confused me

[ReadTheNetwork]

https://social.technet.microsoft.com/Forums/exchange/en-US/caf14f66-62e0-4b76-8fa8-7a41812a5dcf/exchange-2010-users-in-cusers?forum=exchange2010

Users who change their password through the CAS gets a profile created on the server

[CapnPugwash]

https://social.technet.microsoft.com/Forums/exchange/en-US/caf14f66-62e0-4b76-8fa8-7a41812a5dcf/exchange-2010-users-in-cusers?forum=exchange2010

Users who change their password through the CAS gets a profile created on the server

 

Ah.... Great, thanks for that.

 

We have O365 / Exchange in a hybrid config. I wonder if the member of staff tried to reset their password through O365 & that caused DirSync to create the profile on Exchange. I'll test this in a bit.