Do not log users on with temporary profilesID: oval:org.secpod.oval:def:27945 | Date: (C)2015-10-08 (M)2023-07-04 |
Class: COMPLIANCE | Family: windows |
This policy will automatically log off a user when Windows cannot load their profile.
If Windows cannot access the user profile folder or the profile contains errors that prevent it from loading, Windows logs on the user with a temporary profile. This policy allows the administrator to disable this behavior, preventing Windows to log on the user with a temporary profile.
If you enable this policy setting, Windows will not log on a user with a temporary file. Windows logs the user off if their profile cannot be loaded.
If you disable this policy setting or do not configure it, Windows logs on the user with a temporary profile when Windows cannot load their user profile.
Also, see the Delete cached copies of roaming profiles setting.
Fix:
(1) GPO: Computer Configuration\Administrative Templates\System\User Profiles!Do not log users on with temporary profiles
(2) REG: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System!ProfileErrorAction
Platform: |
Microsoft Windows Server 2012 R2 |