Just out of curiosity, are the affected machines the same ones on which you see the PsExec log entries?
From: David W. McSpadden [mailto:dav...@imcu.com] Sent: Tuesday, September 22, 2009 2:52 PM To: NT System Admin Issues Subject: Re: Roaming profiles??? domain user accounts. just pass/fail on user accounts. None of them signed on to the network or my machine at the time 'their' profile was updated on my pc today. The best they could come up with was they might have had their screensaver up and it is password enforced... ----- Original Message ----- From: Richard Stovall <mailto:richard.stov...@researchdata.com> To: NT System Admin Issues <mailto:ntsysadmin@lyris.sunbelt-software.com> Sent: Tuesday, September 22, 2009 2:48 PM Subject: RE: Roaming profiles??? Are these profile directories of domain user accounts or local accounts? Are you auditing account logon events and logon events in the appropriate places? From: David W. McSpadden [mailto:dav...@imcu.com] Sent: Tuesday, September 22, 2009 2:41 PM To: NT System Admin Issues Subject: Re: Roaming profiles??? These are Windows 2000 Server, Windows 2003 Server, and Windows XP Pro machines. It is not domain wide yet but I see almost all 10 on most all machines. Even machines that haven't rebooted in months.... So I am confused. ----- Original Message ----- From: Andrew S. Baker <mailto:asbz...@gmail.com> To: NT System Admin Issues <mailto:ntsysadmin@lyris.sunbelt-software.com> Sent: Tuesday, September 22, 2009 2:36 PM Subject: Re: Roaming profiles??? What kinds of servers are these? Are these users using Citrix or Remote Desktop to access these servers? Are there any scheduled jobs running under these user accounts? -ASB: http://xeesm.com/AndrewBaker Providing Competitive Advantage through Effective IT Leadership On Tue, Sep 22, 2009 at 2:12 PM, David W. McSpadden <dav...@imcu.com> wrote: I have like 10 user accounts I am seeing in Documents and settings on like 4 machines now. That would make sense if they logged into these 4 machines but they are physically not here. So, are they some weird form of roaming profiles or what? How do I check them out to see?? ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
