Content in RemoteInstall\SMSBoot\x64 getting deleted at least once per day

Alan Jimenez 1 Reputation point
2021-10-26T21:46:59.543+00:00

We are currently on version 2103, console version 5.2103.1059.3100, site version 5.0.9049.1000

Everyday for some reason the contents of RemoteInstall\SMSBoot\x64 are getting deleted. We checked and it isn't our AV software, I can't find anything in regards to it in the Event Viewer, and we can't image until we replace the contents of that folder.

Any help would be appreciated!

Microsoft Configuration Manager
0 comments

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Jason Sandys 31,151 Reputation points Microsoft Employee
    2021-10-26T23:52:27.553+00:00

    Set up a SACL on the files and that will then tell you which process deleted the files. Alternatively, use a tool like procmon to record activity against those files and this will also tell you which process is repsonsbile.

    0 comments
  2. Simon Ren-MSFT 29,791 Reputation points Microsoft Vendor
    2021-11-01T06:41:22.627+00:00

    Hi,

    Thanks for posting in Microsoft Q&A forum.

    According to your description, this issue is more related to operating system. I will concur with Jason here, we could use Process Monitor tool to show file system activity. For more information, please refer to:
    Process Monitor v3.86
    Using Process Monitor to Monitor File Access on Windows

    Best regards,
    Simon

    If the response is helpful, please click "Accept Answer" and upvote it. If you have extra questions about this answer, please click "Comment".
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    0 comments