Hello,
We have configured a Group policy setting to "Delete cached copies of roaming profiles" and "Delete user profiles older than 2 days upon system restart" on our terminal servers running on 2008R2 SP1 OS. The GPO is applied successfully on the target servers. However upon restart, some of the profiles/folders are not being deleted on the target servers even though the timestamp is older than 2 days. When investigated, it was found that the NTUser.Dat.Log1 file of the problematic user profile/folder was having a recent timestamp which prevented the deletion of the profile/folder content. Inspite of having the Anti-Virus exclusions for C:\Users directory, it seems that something else is performing a regular scan of the user profile and preventing the profile folder deletion. I also found a KB983544 article from Microsoft which had a bug fix for a similar behavior but it isn't applicable to Win2K8 R2 SP1. Is there a bug fix for Win2K8R2 SP1 server? If not, is there a way to find out which process is causing the timestamp modification of NTUser.DAT.Log1 file?
Thanks!
Koushik
Koushik