question

AlanJimenez-6964 avatar image
0 Votes"
AlanJimenez-6964 asked SimonRenMSFT-3639 answered

Content in RemoteInstall\SMSBoot\x64 getting deleted at least once per day

We are currently on version 2103, console version 5.2103.1059.3100, site version 5.0.9049.1000

Everyday for some reason the contents of RemoteInstall\SMSBoot\x64 are getting deleted. We checked and it isn't our AV software, I can't find anything in regards to it in the Event Viewer, and we can't image until we replace the contents of that folder.

Any help would be appreciated!

mem-cm-general
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Jason-MSFT avatar image
0 Votes"
Jason-MSFT answered

Set up a SACL on the files and that will then tell you which process deleted the files. Alternatively, use a tool like procmon to record activity against those files and this will also tell you which process is repsonsbile.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

SimonRenMSFT-3639 avatar image
0 Votes"
SimonRenMSFT-3639 answered

Hi,

Thanks for posting in Microsoft Q&A forum.

According to your description, this issue is more related to operating system. I will concur with Jason here, we could use Process Monitor tool to show file system activity. For more information, please refer to:
Process Monitor v3.86
Using Process Monitor to Monitor File Access on Windows

Best regards,
Simon


If the response is helpful, please click "Accept Answer" and upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.


5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.