Re: Default User folder temp IE files

The Default User folder is the template used when creating new users. It is
essentially copied to create a new users's folder. The folders within it
should be essentially static except for changes made to customize it.

Files in the temp internet files inside it do not sound good, it sounds like
virus or trojan activity to me (there have been some in the past that store
files in there). Hopefully I'm wrong...

--
Allan Williams



"Nick Coe (UK)" <classicnickNOSPAMAT@xxxxxxxxxxxxxxxxxx> wrote in message
news:%23FrXlAi8IHA.1200@xxxxxxxxxxxxxxxxxxxxxxx
G'day,

SBS2k3 standard fully patched. Internally - XP Pro workstations joined to
domain plus MACS using OWA. Externally Windows Mobile device and one XP
laptop currently both using OWA.

Questions:
Should the \Docs and Settings\Default User\..... \temp internet
files\xxxxx\ folders on the server fill up with temp files? That is -
where are they coming from?
What purpose does that Default User folder serve?

Context:
Backup to LTO Ultrium drive using bog standard sbs macro created backup
routine failed on one locked file in one of the above folders. Found the
file was locked by AVG and was infected. Moved to virus vault.

Noticed that there were a lot of temp files in that folder dating back
from yesterday to about feb 07 and all timed within a few minutes either
side of 1600 hours brit summer time or 1700 hours GMT. Odd - but don't
want to jump to conclusions.

Puzzled - I checked through my WFilter logs to see what internet activity
there was about that time - nothing conclusive...
So I double checked the security event log wondering if someone had used
the server to browse the web - nothing unusual there either.
Double checked the Application log - nothing unusual.

Am remotely admininistering the server.

Not sure where to fault find next, any help much appreciated.

--
Nick Coe (UK)
http://www.alphacos.co.uk/






.

Relevant Pages

  • Re: Publishing folders on companyweb
    ... use SharePoint server to make these documents accessible, ... share folder can be accessed from Internet via companweb. ... the share folder is an internal network function ... Partnerfeedback newsgroup to make Microsoft products easier and more ...
    (microsoft.public.windows.server.sbs)
  • Re: Default User folder temp IE files
    ... this weekend when server quiet. ... Only user with write perm on that folder structure is ... Forced a full virus scan for all workstations from AVG ... Files in the temp internet files inside it do not ...
    (microsoft.public.windows.server.sbs)
  • Re: Publishing folders on companyweb
    ... However, the companyweb could be set to be accessible from internet and I thought that I could use SharePoint server to make these documents accessible, couldn't I? ... share folder can be accessed from Internet via companweb. ... Partnerfeedback newsgroup to make Microsoft products easier and more ...
    (microsoft.public.windows.server.sbs)
  • Re: New Desktops AND new SBS 2003 R2 Install - Need Migration Help
    ... Folder \user name folder via the wiz, are the files then deleted from the ... instead of adding and deleting computeres from the server. ... nowforsomethingcompletleydifferent.com internet mail. ... You can leave the pseudo-server in place but I would join it to the ...
    (microsoft.public.windows.server.sbs)
  • Re: Default User folder temp IE files
    ... Post back if you figure it out because I haven't heard of any recent virus ... Files in the temp internet files inside it do not sound good, ... What purpose does that Default User folder serve? ... someone had used the server to browse the web - nothing ...
    (microsoft.public.windows.server.sbs)