fdisk solves ALL windows problems :-}<br><br><div class="gmail_quote">On Tue, Nov 2, 2010 at 5:23 PM, Greg Freemyer <span dir="ltr"><<a href="mailto:greg.freemyer@gmail.com">greg.freemyer@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">Wong mailing list, please IGNORE as it was as off topic as I could get here!<br>
<div><div></div><div class="h5"><br>
On Tue, Nov 2, 2010 at 4:58 PM, Greg Freemyer <<a href="mailto:greg.freemyer@gmail.com">greg.freemyer@gmail.com</a>> wrote:<br>
> All,<br>
><br>
> I've got a situation where two business partners were having issues<br>
> with each other.<br>
><br>
> Based on a brief look at the image of one of their computers:<br>
><br>
> When partner-A came in to work yesterday and logged into his computer<br>
> with his normal login, a new user profile "/documents and<br>
> settings/TEMP" was created with basically nothing in it.<br>
><br>
> I still see "/documents and settings/UserA" but when I login as UserA,<br>
> I am presented the desktop from .../TEMP/Desktop.<br>
><br>
> It feels like a practical joke to me, but I don't know how to make it<br>
> happen in the first place, and I don't know how to undo it so that<br>
> UserA sees the Desktop for "/documents and settings/UserA/desktop".<br>
><br>
> Alternatively, it might have been some malware screwing with things.<br>
><br>
> At this point, I don't think its worth spending a lot of time on, but<br>
> I would like to undo the damage.<br>
><br>
> Thanks<br>
> Greg<br>
> --<br>
> Greg Freemyer<br>
> Head of EDD Tape Extraction and Processing team<br>
> Litigation Triage Solutions Specialist<br>
> <a href="http://www.linkedin.com/in/gregfreemyer" target="_blank">http://www.linkedin.com/in/gregfreemyer</a><br>
> CNN/TruTV Aired Forensic Imaging Demo -<br>
> <a href="http://insession.blogs.cnn.com/2010/03/23/how-computer-evidence-gets-retrieved/" target="_blank">http://insession.blogs.cnn.com/2010/03/23/how-computer-evidence-gets-retrieved/</a><br>
><br>
> The Norcross Group<br>
> The Intersection of Evidence & Technology<br>
> <a href="http://www.norcrossgroup.com" target="_blank">http://www.norcrossgroup.com</a><br>
><br>
<br>
<br>
<br>
--<br>
Greg Freemyer<br>
Head of EDD Tape Extraction and Processing team<br>
Litigation Triage Solutions Specialist<br>
<a href="http://www.linkedin.com/in/gregfreemyer" target="_blank">http://www.linkedin.com/in/gregfreemyer</a><br>
CNN/TruTV Aired Forensic Imaging Demo -<br>
<a href="http://insession.blogs.cnn.com/2010/03/23/how-computer-evidence-gets-retrieved/" target="_blank">http://insession.blogs.cnn.com/2010/03/23/how-computer-evidence-gets-retrieved/</a><br>
<br>
The Norcross Group<br>
The Intersection of Evidence & Technology<br>
<a href="http://www.norcrossgroup.com" target="_blank">http://www.norcrossgroup.com</a><br>
<br>
_______________________________________________<br>
Ale mailing list<br>
<a href="mailto:Ale@ale.org">Ale@ale.org</a><br>
<a href="http://mail.ale.org/mailman/listinfo/ale" target="_blank">http://mail.ale.org/mailman/listinfo/ale</a><br>
See JOBS, ANNOUNCE and SCHOOLS lists at<br>
<a href="http://mail.ale.org/mailman/listinfo" target="_blank">http://mail.ale.org/mailman/listinfo</a><br>
</div></div></blockquote></div><br><br clear="all"><br>-- <br>-- <br>James P. Kinney III<br>I would rather stumble along in freedom than walk effortlessly in chains.<br><br><br>