The Case of the Temporary Registry Profiles
Posted by William Diaz on July 9, 2010
After getting hooked on Mark Russinovich’s blogs, I came across this, an excellent read: http://blogs.technet.com/b/markrussinovich/archive/2009/08/10/3272210.aspx.
We ran into this issue ourselves and it had everyone stumped until I found this blog post. Demonstrates the power of Process Monitor and specifically the boot logging feature.