Skip to main content

Acronis Backup 12.5 modified NTUser.DAT every time

Thread needs solution

Hello,

Perhaps I'm missing something, I have an environment where a lot of users log in to different computers on a daily basis.

I have a group policy configured to automatically delete profiles when they have not been used after 30 days.

(Delete user profile older than a specified number of days on system restart).

I also have Acronis Backup Advanced 12.5 doing backups (Disk/volume) and it is updated the modified date of the NTUser.dat file each time the backup runs.

This makes it so the group policy never removes old profiles.

Why does the backup modify the NTUser.dat file and is there a way I can change that?

Thanks for all your help!

Ali

0 Users found this helpful
frestogaslorastaswastavewroviwroclolacorashibushurutraciwrubrishabenichikucrijorejenufrilomuwrigaslowrikejawrachosleratiswurelaseriprouobrunoviswosuthitribrepakotritopislivadrauibretisetewrapenuwrapi
Posts: 0
Comments: 2016

Hello Ali,

welcome to Acronis forums!

Could you please clarify if the disk-level backup in your backup plan is selected but not a file-level with all folders on a disk marked for backup?

The NTuser.dat file could be accessed while a disk/entire PC backup is being created: there is a snapshot of the entire system taken with the ntuser.dat hive of another user on your system. However, I need to consult with experts at this moment.

Hi Maria,

Sorry I didn't get a notification that you replied to my post.

It is a disk level backup. (See screenshot).

I understand it could be access but why is it being modified?

Thanks,

Ali

Attachment Size
539762-185287.JPG 31.63 KB

Hello Ali!

You could try a workaround, where you run a script before backup that backs up the NTuser.dat as it is before backup, and run another after backup that restores it.

I've seen this issue on various forums not related to Acronis. The most definiteve way to troubleshooting being running Proccess Monitor and see which process actually modifies it.

-- Peter

frestogaslorastaswastavewroviwroclolacorashibushurutraciwrubrishabenichikucrijorejenufrilomuwrigaslowrikejawrachosleratiswurelaseriprouobrunoviswosuthitribrepakotritopislivadrauibretisetewrapenuwrapi
Posts: 0
Comments: 2016

Hello Ali.

I recommend that you open a case with Acronis Support Team since this issue requires investigation.

Please also follow Peter's advice:

I've seen this issue on various forums not related to Acronis. The most definiteve way to troubleshooting being running Proccess Monitor and see which process actually modifies it.