Discussion Locked

Profiles are loaded locally

0 helpful
1 reply
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Hi, I work for a JVS career center. We have several Windows 2000 servers on one domain. Friday, a student's profile showed up locally on the server i.e. (c:\documents and settings\"students name")

In group policy we have logon interactivly andlogon locally disabled for the student accounts and only enabled for domain admins. We have ran bindview and several security audits against the server and this student's account. This student has no more and no less priveleges than other students.

This situation has happened twice.

What are all the ways that a profile can get loaded locally on the server? How could have this happened?

Thanks!

-Mike

1 reply

by iulian costache

All I can think of is the profile might appear there if there is a service that runs as the student's account and the account has logon as a service right. Unlikely but possible. Other way I do not know.

This discussion is closed to new replies.