squatpuke

Yeah...I started to look at all the services but stopped after the first 5 or so....figuring that was a dead end...but I should probably do all of them... I did check security logs and don't see any attempts of logging in by that user...

Your exactly right...sorry I probably didn't explain myself and rambled a bit... The user hasn't been w/the company for over a year...I'm not the domain admin, just an OU admin...so I can't delete the user account from AD. I just want to delete their "old" profile off my server... However, I wasn't able to since ON STARTUP something on that profile starts using explorer.exe and prevents me from deleting the profile w/o first deleting the handle that the NTUSER.DAT (reg hive) has on explorer.exe I'd like to find out exactly what that NTUSER.DAT is doing....

. . Hello all... I'm a sys-admin and on my 2003 server I was cleaning up, deleting old window profiles. I tried to delete a profile of a previous admin which was about a year old. Told me NTUSER.DAT was in use, so it wouldn't delete the profile. Looked at the date and it was very recent. My first thought was the system had been compromised and semi-panicked. Rebooted the server, and the profile again locked but the modified date of NTUSER.DAT was current. Obviously something was running at startup using that account. Downloaded the sysinternal process explorer and from the best I could tell, explorer.exe was doing something explicit with that user profile. I was able to kill that handle and free up the NTUSER.DAT and could even delete the profile if I wanted, but instead I wanted to see if I could really find out what was going on.... Any one else have any ideas on how I can out? Did a little deeper to find out exactly what this NTUSER.DAT was doing with explorer.exe? Thanks... (oops...wrong forum....could admin please move?)

excellent...thanks.

. . Running S2003....have several scheduled tasks running.... For some reason, the Schedlgu.txt log-file is not being created in c:\windows.... Any ideas?

. . At work, we use a 3rd party application that sends print jobs through IE (I think) to be printed... On a select few computers, the heading on the printout overlaps the 1st three lines... The problem is definitely NOT the print driver but is profile based....if I wipe the profile of the user and recreate...it works fine for a time, but then starts overlapping again after x amount of days or whatever is causing this problem reoccurs... I've deleted \local settings\temp in a bad profile, but that doesn't seem to fix the problem...in fact, within that folder I can see the temp print jobs (as *.htm) and can double click, see them in Explorer and even print them perfectly from Explorer...just not from the application. Any other recommendations as to what files I might need to delete in a user profile to reset whatever template IE7 might be using. The application printing works fine on many,many other machines and/or printers 99% of the time....I just have a select few that have some corrupt print file in a user profile that needs fixed. I can wipe and create a new profile, but it's pretty troublesome for end user and IT.