Teachers laptop wiped!?

[Ben-BSH]

we have a few laptops in school, built standard and then connected to our domain. they are then given a local account for the owner so he/she can take it home and log on locally, then work etc. now, last night, we connected one of these laptops via LAN cable, to give the owner network access (via a completely different network account, named differently to his/her local one) the owner had been using this laptop locally ONLY for 3-4 months with no issues. but when they logged back on locally this morning, all their profile seems to of reset itself completely without a trace of where it has gone.

 

also, the local account is named something which does not exist on our domain, so he could not of logged on to the network with the User name which has had its profile wiped.

 

so 1. does anyone know why this is happening?

and 2. is there any good recovery software we can use to get the files back ( system restore was disabled)

Edited October 23, 2009 by Ben-BSH

[kmount]

Try Photorec or have a search on here there's a few options for recovery.

 

PhotoRec - CGSecurity

[Jamo]

Do you have any incorrectly configured profile cleaning scripts on your network?

[Ben-BSH]

Thanks Jamo, that's exactly what it was. now onto the (hopeful) recovery!