Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

When you delete a user account on XP, are the ntuser.dat logs suppose to remain?


  • Please log in to reply
3 replies to this topic

#1 kurtgillis12

kurtgillis12

  • Members
  • 116 posts
  • OFFLINE
  •  
  • Local time:02:39 PM

Posted 20 May 2016 - 01:36 PM

In Vista when I delete an account, the ntuser.dat.log files remain in the otherwise empty account folder (even when I dont save the files) In XP when I look at the deleted user account files there are no ntuser.dat.log files! Are they located somewhere else? (Hidden files are enabled in both cases)


Edited by kurtgillis12, 20 May 2016 - 01:42 PM.


BC AdBot (Login to Remove)

 


#2 RolandJS

RolandJS

  • Members
  • 4,512 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Austin TX metro area
  • Local time:09:39 AM

Posted 20 May 2016 - 02:49 PM

Might be worth a look:

https://forums.techguy.org/threads/solved-what-are-ntuser-dat-log-files.695741/


"Take care of thy backups and thy restores shall take care of thee."  -- Ben Franklin revisited.

http://collegecafe.fr.yuku.com/forums/45/Computer-Technologies/

Backup, backup, backup! -- Lady Fitzgerald (w7forums)

Clone or Image often! Backup... -- RockE (WSL)


#3 kurtgillis12

kurtgillis12
  • Topic Starter

  • Members
  • 116 posts
  • OFFLINE
  •  
  • Local time:02:39 PM

Posted 21 May 2016 - 12:39 PM

It says that it records changes to the registry. The ntuser.dat.log file I examined from one of my old deleted accounts had internet history in it. Would history from Explorer or Firefox end up in that file?

Edited by hamluis, 21 May 2016 - 05:00 PM.


#4 RolandJS

RolandJS

  • Members
  • 4,512 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Austin TX metro area
  • Local time:09:39 AM

Posted 21 May 2016 - 02:47 PM

Dunno.

 

 

From a wilderssecurity thread:

http://www.wilderssecurity.com/threads/ntuser-dat-ntuser-dat-log.62820/

"...ntuser.dat is a registry hive file that loads as HKEY_CURRENT_USER when a user logs on. The HKEY_CURRENT_USER (ntuser.dat) contains the user profile for the user who is currently logged on to the computer. The user profile includes environment variables, personal program groups, desktop settings, network connections, printers, and application preferences.    "

I have not vetted that source!  I have no idea how accurate or inaccurate the above may/may not be.


Edited by hamluis, 21 May 2016 - 05:00 PM.

"Take care of thy backups and thy restores shall take care of thee."  -- Ben Franklin revisited.

http://collegecafe.fr.yuku.com/forums/45/Computer-Technologies/

Backup, backup, backup! -- Lady Fitzgerald (w7forums)

Clone or Image often! Backup... -- RockE (WSL)





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users