<p>OT as it might be, look for what ms calls "folder redirection".</p>
<div class="gmail_quote">On Nov 2, 2010 4:59 PM, "Greg Freemyer" <<a href="mailto:greg.freemyer@gmail.com">greg.freemyer@gmail.com</a>> wrote:<br type="attribution">> All,<br>> <br>> I've got a situation where two business partners were having issues<br>
> with each other.<br>> <br>> Based on a brief look at the image of one of their computers:<br>> <br>> When partner-A came in to work yesterday and logged into his computer<br>> with his normal login, a new user profile "/documents and<br>
> settings/TEMP" was created with basically nothing in it.<br>> <br>> I still see "/documents and settings/UserA" but when I login as UserA,<br>> I am presented the desktop from .../TEMP/Desktop.<br>
> <br>> It feels like a practical joke to me, but I don't know how to make it<br>> happen in the first place, and I don't know how to undo it so that<br>> UserA sees the Desktop for "/documents and settings/UserA/desktop".<br>
> <br>> Alternatively, it might have been some malware screwing with things.<br>> <br>> At this point, I don't think its worth spending a lot of time on, but<br>> I would like to undo the damage.<br>> <br>
> Thanks<br>> Greg<br>> -- <br>> Greg Freemyer<br>> Head of EDD Tape Extraction and Processing team<br>> Litigation Triage Solutions Specialist<br>> <a href="http://www.linkedin.com/in/gregfreemyer">http://www.linkedin.com/in/gregfreemyer</a><br>
> CNN/TruTV Aired Forensic Imaging Demo -<br>> <a href="http://insession.blogs.cnn.com/2010/03/23/how-computer-evidence-gets-retrieved/">http://insession.blogs.cnn.com/2010/03/23/how-computer-evidence-gets-retrieved/</a><br>
> <br>> The Norcross Group<br>> The Intersection of Evidence & Technology<br>> <a href="http://www.norcrossgroup.com">http://www.norcrossgroup.com</a><br>> <br>> _______________________________________________<br>
> Ale mailing list<br>> <a href="mailto:Ale@ale.org">Ale@ale.org</a><br>> <a href="http://mail.ale.org/mailman/listinfo/ale">http://mail.ale.org/mailman/listinfo/ale</a><br>> See JOBS, ANNOUNCE and SCHOOLS lists at<br>
> <a href="http://mail.ale.org/mailman/listinfo">http://mail.ale.org/mailman/listinfo</a><br></div>