Verified Answers
Local user profile - ✔✔This profile is created when the user logs on to a computer for the first
time. You will find the profile stored on the hard disk. When changes are made to the profile,
the changes will be specific to the user and stored on the local computer.
Roaming user profile - ✔✔This profile is an administrator-created, network-based profile. The
profile will be downloaded to the localhost when the user logs in to the system. When any
changes are made to the profile on the localhost, changes will also be made to the server copy
when the user logs off from the localhost. This profile type removes the requirement on the
part of the user to create a profile when they log on to different hosts on the network. (This will
only be found in Enterprise
Mandatory user profile - ✔✔This profile is a profile created by the network administrators to
lock users down to a specific set of settings when they use a host on the network. The user will
not be allowed to make changes to the profile without the administrator's approval. Any
changes made by the user to the environment of the localhost will be lost when the user logs
off from the localhost.
Temporary user profile - ✔✔This profile is created when an error occurs when the system is
loading the user's profile. When the user logs off, the profile is deleted. You will find the use of
temporary profiles on computers running Windows 2000 and later.
AppData folder - ✔✔is a hidden folder that contains user-specific preferences and profile
configurations and is further divided into three subfolders:
Roaming folder - ✔✔contains data that can be synced within the server environment. Data
such as web browser favorites or bookmarks will travel with the user as they log on to different
workstations:
, Local folder - ✔✔contains data related to the installation of programs. It is workstation specific
and will not sync with the server (in a server environment). Temporary files are also stored
here:
LocalLow folder - ✔✔includes low-level access data, such as the temporary files of your
browser when running in protected mode.
SAM hive - ✔✔Security Accounts Manager and contains login information about the users.
Security hive - ✔✔contains security information and, potentially, password information.
System hive - ✔✔includes information on the hardware and system configuration.
Software Hive - ✔✔contains information about application information and the default
Windows settings.
SID - ✔✔the security identifier used by the Windows operating system to identify objects
within. This is how Windows addresses components internally. At the end of the SID is the
relative identifier (RID), which is the last digits after the SID. For example, if you see 500 as the
RID, that would identify the administrator account for that system. The guest account would
have an RID of 501. In this case, as shown in the following diagram, we see the RID of 1001. This
informs me that the jcloudy account is user-created, and is not an account created by the
system through an automated process
Thumbcache - ✔✔a database of thumbnail images created when the user is using Windows
Explorer in a thumbnail view. Depending on the size of the thumbnail, you may have multiple
databases with the same image, but with different sizes. It depends on the view the user
selected while in Windows Explorer.
Recycle Bin - ✔✔Microsoft's effort to protect the user from their own actions. It provides an
intermediary step for when a user deletes a file. Windows will move the file into a holding area
known as the Recycle Bin.