Petri.com forums Home Forums Start Page Forums Frequently Asked Questions FAQ Member List Members List
Go Back   Petri IT Knowledgebase Forums > Server Operating Systems > Windows Server 2000 / 2003 / 2003 R2
Petri.com is happy to award RicklesP the title of Most Valuable Member !!!
Register Calendar Calendar Search Petri IT Knowledgebase Forums Search Todays Posts Today's Posts Mark Forums Read
Notices

NTUSER.DAT Would not delete

NTUSER.DAT Would not delete

this thread has 14 replies and has been viewed 27498 times

Closed Thread
 
Thread Tools Search this Thread Display Modes
  #1  
Old 28th December 2006, 16:11
deadly_virgo deadly_virgo is offline
Casual
Casual
 
 Join Date: Dec 2006
  6 month star 12 month star
 Posts: 3
 Reputation: deadly_virgo is on a distinguished road (10)
Default NTUSER.DAT Would not delete

Hi,

I am facing a very common issue of NTUSER.DAT & NTUSER.LOG file not getting deteled from users local profile.

The user in question is not logged in to the computer or any other compuer on the Domain.

I have deteled the local profile setting from My Computer--> Properties--> Advanced--> USer Profiles. & then deleting the profile but this gives an error.

I also have edited the registry HLM--> Software --> Microsoft --> Windows NT --> ProfileList & then deleting the SID for the profile that has the curropted ProfileImagePath.

I have also installed the UPHClean utility to unload user profiles.

There is no computer on the domain that is logged in with this users profile.

The computer from which we want to delete these files is a Windows 2003 DC server.

Please assist in resolving this.

Regards,
Harneet Seistani
  #2  
Old 28th December 2006, 16:17
JeremyW JeremyW is offline
Moderator
 
 Join Date: May 2006
  6 month star 12 month star
 Location: Washington DC metro area
 Posts: 3,765
 Reputation: JeremyW is a name known to allJeremyW is a name known to allJeremyW is a name known to allJeremyW is a name known to allJeremyW is a name known to allJeremyW is a name known to all (550)
Default Re: NTUSER.DAT Would not delete

What errors do you get?
What led up to the issue i.e. what caused the corruption?
Where did the account come from?
__________________
Regards,
Jeremy

Network Consultant/Engineer
Baltimore - Washington area and beyond
www.gma-cpa.com
  #3  
Old 28th December 2006, 17:34
Dumber's Avatar
Dumber Dumber is offline
Moderator
 
 Join Date: Dec 2003
  6 month star 12 month star
 Location: The Netherlands
 Posts: 8,173
 Reputation: Dumber is a splendid one to beholdDumber is a splendid one to beholdDumber is a splendid one to beholdDumber is a splendid one to beholdDumber is a splendid one to beholdDumber is a splendid one to beholdDumber is a splendid one to behold (844)
Default Re: NTUSER.DAT Would not delete

sounds maybe a bit stupid but did you already rebooted the machine?
__________________
Marcel
Technical Consultant
Netherlands
http://www.phetios.com
http://blog.nessus.nl

MCITP(EA, SA), MCSA/E 2003:Security, CCNA, SNAF, DCUCI, CCSA/E/E+ (R60), VCP4/5, NCDA, NCIE - SAN, NCIE - BR, EMCPE
"No matter how secure, there is always the human factor."

"Enjoy life today, tomorrow may never come."
"If you're going through hell, keep going. ~Winston Churchill"

  #4  
Old 28th December 2006, 17:38
deadly_virgo deadly_virgo is offline
Casual
Casual
 
 Join Date: Dec 2006
  6 month star 12 month star
 Posts: 3
 Reputation: deadly_virgo is on a distinguished road (10)
Default Re: NTUSER.DAT Would not delete

Thie is a domain user with rights to logon to the DC.

After some changes in the local DC policy the user can only logon to a temp profile & not the orignal one.

Since it was loading the temp profile we deleted the old profile & tried to created a new one.

Tried RM Userprofile /s /q in documents & settings folder but only 2 files NTUSER.DAT & NTUSER.LOG are left.

Regards,
Harneet Seistani
  #5  
Old 28th December 2006, 17:40
deadly_virgo deadly_virgo is offline
Casual
Casual
 
 Join Date: Dec 2006
  6 month star 12 month star
 Posts: 3
 Reputation: deadly_virgo is on a distinguished road (10)
Default Re: NTUSER.DAT Would not delete

hey Mr Moderator this is my main DC for the office I cannot restart it.

Sorry
  #6  
Old 28th December 2006, 17:43
JeremyW JeremyW is offline
Moderator
 
 Join Date: May 2006
  6 month star 12 month star
 Location: Washington DC metro area
 Posts: 3,765
 Reputation: JeremyW is a name known to allJeremyW is a name known to allJeremyW is a name known to allJeremyW is a name known to allJeremyW is a name known to allJeremyW is a name known to all (550)
Default Re: NTUSER.DAT Would not delete

Moved Thread to Server forum.

deadly_virgo, find a time to restart the server and then delete the files.

Good call Marcel.

EDIT - deadly_virgo, let us know if it works or not.
If it doesn't work then please post the errors you get.
If it does work then let us know and be sure to thank Marcel.
__________________
Regards,
Jeremy

Network Consultant/Engineer
Baltimore - Washington area and beyond
www.gma-cpa.com

Last edited by JeremyW; 28th December 2006 at 17:46..
  #7  
Old 28th December 2006, 17:52
Dumber's Avatar
Dumber Dumber is offline
Moderator
 
 Join Date: Dec 2003
  6 month star 12 month star
 Location: The Netherlands
 Posts: 8,173
 Reputation: Dumber is a splendid one to beholdDumber is a splendid one to beholdDumber is a splendid one to beholdDumber is a splendid one to beholdDumber is a splendid one to beholdDumber is a splendid one to beholdDumber is a splendid one to behold (844)
Default Re: NTUSER.DAT Would not delete

Deadly_virgo;

Ask the boss when you can reboot the machine. Most likely you can do it tonight, or on a onther night. How do you reboot the machine when there are security patches out?

Ntuser.dat is the user's registry, and there might still be a handle open. You can also try if you find anything with process explorer, however i Doubt that.
__________________
Marcel
Technical Consultant
Netherlands
http://www.phetios.com
http://blog.nessus.nl

MCITP(EA, SA), MCSA/E 2003:Security, CCNA, SNAF, DCUCI, CCSA/E/E+ (R60), VCP4/5, NCDA, NCIE - SAN, NCIE - BR, EMCPE
"No matter how secure, there is always the human factor."

"Enjoy life today, tomorrow may never come."
"If you're going through hell, keep going. ~Winston Churchill"

  #8  
Old 29th December 2006, 09:24
sorinso's Avatar
sorinso sorinso is offline
Moderator
 
 Join Date: May 2006
  6 month star 12 month star
 Location: Haifa, Israel
 Posts: 3,065
 Reputation: sorinso is a name known to allsorinso is a name known to allsorinso is a name known to allsorinso is a name known to allsorinso is a name known to allsorinso is a name known to all (561)
Exclamation Re: NTUSER.DAT Would not delete

Deadly_virgo:
UPHClean was installed before or after the problem started? If it was installed before it's odd, because its purpose is to assure a clean logoff and user profile unload, thus preventing these things from happening. If it was installed afterwords, it will not help you in this one.
And you can restart the server, even if it's a DC. Just do it as Marcel proposed, in a time window that has as little influence on your office. From experience, only Restart will release the locked NTUser.dat file.
BTW, why are you so afraid of restarting the DC?
__________________

Sorin Solomon


In order to succeed, your desire for success should be greater than your fear of failure.
- Bill Cosby
  #9  
Old 29th December 2006, 17:25
guyt's Avatar
guyt guyt is offline
[MSFT]
Guru
 
 Join Date: Nov 2003
  6 month star 12 month star
 Location: Israel
 Posts: 1,766
  Send a message via MSN to guyt
 Reputation: guyt is a name known to allguyt is a name known to allguyt is a name known to allguyt is a name known to allguyt is a name known to allguyt is a name known to all (592)
Default Re: NTUSER.DAT Would not delete

Guys, there is no reason to restart a server because of a file that is in use.
Just get yourself a copy of Unlocker from here and it will let you identify the process locking the files in question. Watch out though not to kill important processes like lsass
__________________
Guy Teverovsky
http://blogs.technet.com/b/isrpfeplat/
"Smith & Wesson - the original point and click interface"
  #10  
Old 29th December 2006, 17:47
sorinso's Avatar
sorinso sorinso is offline
Moderator
 
 Join Date: May 2006
  6 month star 12 month star
 Location: Haifa, Israel
 Posts: 3,065
 Reputation: sorinso is a name known to allsorinso is a name known to allsorinso is a name known to allsorinso is a name known to allsorinso is a name known to allsorinso is a name known to all (561)
Exclamation Re: NTUSER.DAT Would not delete

I would agree with you, but we are talking about NTUSER.DAT here... Wouldn't one be on the safe side to restart the server and unlock this file? After all, there's no such big deal to restart, even a DC. There's also DelinvFile that can be used.
BTW, 10nx for the link.
__________________

Sorin Solomon


In order to succeed, your desire for success should be greater than your fear of failure.
- Bill Cosby
Closed Thread


Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
delete alitoday Misc 8 1st December 2005 13:24
help ! delete a message ! sos! ravx Exchange 2000 / 2003 3 25th July 2005 18:19
can't delete profile jonny_2good Windows 2000 Pro, XP Pro 2 15th October 2004 22:32
how to delete a .exe in system32? oldi Windows 2000 Pro, XP Pro 1 7th September 2004 20:41


All times are GMT +3. The time now is 06:46.

Steel Blue 3.5.4 vBulletin Style ©2006 vBEnhanced
Powered by vBulletin® Version 3.8.4
Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.
 

Valid XHTML 1.0!   Valid CSS!

Copyright 2005 Daniel Petri