DEMdev
VMware Employee
VMware Employee

Hi rsaulitis,

Sounds like your image has been created properly. I just wanted to check, as we've seen some folder redirection-related issues in the past where people had been a bit too aggressive in "optimizing" the default profile Smiley Happy

ProcMon is a Microsoft tool that captures all registry and file system activity. PsExec is another Microsoft tool that we can use to run ProcMon non-interactively in the system account while a normal logon takes place, using steps similar to the following:

  • Log on to the console with an admin account
  • Copy PSExec.exe and ProcMon.exe to folder C:\X
  • Run C:\X\PSExec.exe -accepteula -sd C:\X\ProcMon.exe -accepteula -quiet -backingfile C:\X\Log.PML
  • Log off
  • Log on "the normal way", with your test user
  • From an elevated prompt, run C:\X\PSExec.exe -accepteula -s C:\X\ProcMon.exe -accepteula -quiet -terminate

C:\X\Log.PML (and potentially a few additional .PML files, if there were a lot of events) should provide us some insight into what exactly is going on. You can analyze it in ProcMon, but I'd be happy to take a look as well.

NOTE: ProcMon traces contain user names, environment info, etc, so do not share them publicly. You can send me a private message with a link to your PML file(s), or you can open a support case with VMware, send the file(s) to our support team, and let me know the SR# so I can pick it up from there.