We have .tmp files in user profiles on the RDP environment

Question

Users have a growing number of .tmp files in there profile on the RDP round robin w2012R2 server environment. We believe ist malware

Answer 1

Hi,
TMP files are temporary files that are created to temporarily hold data. In you description, it seemed there were a number of temporary profiles loaded when users remoted to the Server 2012.

If you have enabled specific profile mode like roaming profile or UPD and would like to disable temp profile. Please use the group policy setting "Do not log users on with temporary profiles" under Computer Configuration -> Policies -> Administrative Templates-> System -> User Profiles.

Also found a scenario that temporary profiles created even when roaming profile was configured.

In most cases users will get temporary profiles if they never log off and you or scheculed task reboot the server. I was involved in project where customer had issues with this and policy on the server was configured Never on disconnect and idle sessions. After fixing this, they never had issues with temporary profiles. I changed Disconnected and Idle session log off on 3 hours and instruct the users what they need to do. As I said after this they never had issues.
Reference link:
https://social.technet.microsoft.com/Forums/en-US/f1a60a56-95df-45af-8235-d9b04d086cba/roaming-profile-users-getting-temporary-profile-message?forum=winserverTS

---

Hope this helps and please help to accept as Answer if the response is useful.

Thanks,
Jenny