Relocating a portion of User profile

Won't Process Explorer by Sysinternals allow you to search for a file/handle to see what task has that file open?

I use process monitor but to be honest it can be quite windy if it's not filtered properly.

brady said:

I use process monitor but to be honest it can be quite windy if it's not filtered properly.

Thanks. I installed the process monitor found at:
Process Monitor

Now I understand your comment about 'windy'! I've tried setting up filters and also disabled most everything in msconfig. I suspect process monitor could help, but I'm way down on the learning curve. I suspect that the 3 files in question with extensions LOG, LOG!, and LOG2 are opened by someone shortly after startup. Finding the culprit has alluded me so far. Is there anyway to setup a filter to determine which program has opened these log files? Wonder if process monitor has to be running prior to the opening to help? Thanks for the help.


Any more ideas appreciated.

Well, we know what "account" has hold of it already. System account has it on startup... it's a profile directory constantly being updated by, well... the "system".

You can possibly move them while the system is at a "ctrl alt del" screen before anyone logs into the account. do you have another machine there you can UNC from?

ex: \\computername\c$\users\*

you'll need an administrator account to do this with.

brady said:

Well, we know what "account" has hold of it already. System account has it on startup... it's a profile directory constantly being updated by, well... the "system".

You can possibly move them while the system is at a "ctrl alt del" screen before anyone logs into the account. do you have another machine there you can UNC from?

ex: \\computername\c$\users\*

you'll need an administrator account to do this with.

Wow, that sounds complicated. Don't understand the UNC reference although we do run UltraVNC between our two laptops.

Sorry about that, UNC is not ultraVNC. UNC is the process of "whacking" into a machine with "\\" or patch computing. What I meant, was to attempt moving the directory when user.dat and index files aren't being used by the machine. This is generally done when the computer is at the ctr, alt del screen.

another user (with administrative privileges) can access that computers file system by entering \\computername\c$ at the run line. This will take them into the root of C: and allow them to copy/paste directories while the machine isn't holding on to them.

brady said:

Sorry about that, UNC is not ultraVNC. UNC is the process of "whacking" into a machine with "\\" or patch computing. What I meant, was to attempt moving the directory when user.dat and index files aren't being used by the machine. This is generally done when the computer is at the ctr, alt del screen.

another user (with administrative privileges) can access that computers file system by entering \\computername\c$ at the run line. This will take them into the root of C: and allow them to copy/paste directories while the machine isn't holding on to them.

I will try the \\computername\c$ by enabling the built-in administrator account and logging into it. Of course, it's not a matter of cut & paste; instead I must access the Location tab under Properties and I'm not sure if that will work as another user. I'll try and see

I must access the Location tab under Properties and I'm not sure if that will work as another user.

um, wait, what? I might have misunderstood your original request maybe?

Location tab?

brady said:

I must access the Location tab under Properties and I'm not sure if that will work as another user.

um, wait, what? I might have misunderstood your original request maybe?

Location tab?

Yes, I browse to C:\Users\Administrator\AppData\Local and then go to Properties/Location/Move. When I do as you suggest from a different administrator account the Location option is not available.

ok I now understand exactly what you want to happen here.

Try this: In the admin account, browse to:

C:\Users\Account you with to change\AppData\Local and try again?

This is a new feature that I haven't had a chance to play around with, so I hope this doesn't ruin everything else linking to that local folder.