\users\administrator loses its contents
(i have installed system center endpoint protection msdn , found no viruses) going on???
on 3 of servers now, 2 virtual , 1 physical, loose desktop contents (turns black), , folder contents go this:
directory of c:\users\administrator
03/11/2015 11:10 <dir> .
03/11/2015 11:10 <dir> ..
02/09/2015 12:54 pm <dir> contacts
03/12/2015 01:43 pm <dir> desktop
02/09/2015 12:54 pm <dir> documents
02/09/2015 12:54 pm <dir> downloads
02/09/2015 12:54 pm <dir> favorites
02/09/2015 12:54 pm <dir> links
02/09/2015 12:54 pm <dir> music
02/09/2015 12:54 pm <dir> pictures
02/09/2015 12:54 pm <dir> saved games
02/09/2015 12:54 pm <dir> searches
02/09/2015 12:54 pm <dir> videos
to this:
directory of c:\users\administrator03/12/2015 02:37 pm <dir> .
03/12/2015 02:37 pm <dir> ..
03/12/2015 02:37 pm <dir> desktop
03/12/2015 02:37 pm <dir> favorites
0 file(s) 0 bytes
4 dir(s) 111,235,383,296 bytes free
-------------------------------- kamran.tavakoli@visionsolutions.com
hi kamrantav,
in addition, if user profiles deleted unexpectly, please try audit user profile and find user account deleted files.
1. enable file auditing in local security policy (or better yet domain gpo). "audit object access" option , can enable successes or failures or both.
2. once auditing enabled, choose files/folders want audit going properties of folder -> security tab -> advanced -> advanced security settings -> auditing tab. add everyone->check delete , delete subfolders , files.
then check event id 4660,4663 in event viewer. please note operation add event logs , consume disk space.
if there else regarding issue, please feel free post back.
if have feedback on our support, please click here.
best regards,
anna wang
technet community support
please remember mark replies answers if , unmark them if provide no help. if have feedback technet support, contact tnmff@microsoft.com
Windows Server > Windows Server General Forum
Comments
Post a Comment