You are using an unsupported browser. Please update your browser to the latest version on or before July 31, 2020.
close

Looking for the Diagnostic Utility?

Click Here For Download and Usage Instructions

Windows Users folder on PortalGuard Server, Low Disk Space Issue


Problem

Your PortalGuard server is running low on disk space. The C:\Users folder is multiple GB in size and appears to contain a user profile for every end-user.

Solution

This can occur if PortalGuard's Native Windows authentication feature is being used but the required OS modifications have not been made. In this scenario, the user profiles are created in the C:\Users folder when an end-user performs a Password Change through PortalGuard (where they provide their current password).

As a short term mitigation, the "rogue" user profile folders can be deleted from C:\Users, but they will re-appear the next time the end-user performs a Password Change through PortalGuard.

NOTE: The Native Windows authentication feature has been deprecated for years so you will need to cutover to using connecting to Active Directory via LDAPS (encrypted LDAP) at some point in the future. Please consult the KB article on delegating permissions for LDAPS access when you are ready to do so.

Follow the steps below to fully address this issue with the rogue Windows user profiles:

  1. On the PortalGuard Server, run secpol.msc as an administrator to open the **Local Security Policy** module.
  2. In the left hand side, expand 'Local Policies' and click on 'User Rights Assignment'. 
  3. Locate 'Allow Log on Locally' in the right-hand pane:
    • SecPol - Allow log on locally
  4. Double click 'Allow log on locally' to view the properties.
  5. Remove the Users and Domain Users entries from this list. Normal end-users do NOT need any special permissions on the PG server itself.
  6. Save the changes.

The last step is to open the C:\Users folder and manually delete the Windows user profiles that should not be there. 

Be careful NOT to delete administrative user profiles -OR- those needed by the server itself!

If you aren't sure or don't recognize a user profile, then DO NOT DELETE IT.

Once you have confirmed that the PortalGuard server is running normally and administrators can still login to it through Remote Desktop, you can clear the Recycle Bin to fully free up the disk space.

REV. 05/2020 | PortalGuard

  • 131
  • 11-May-2020
  • 94 Views