Adding user to 'Guests' or 'Domain Guests' group deletes profile on Windows Workstation
Migrated from: https://tracker.clearos.com/view.php?id=6121
Reported by: Dave Loper
While this is a feature of Windows, we can prevent some admins from making a mistake that will cost the loss of a user's profile.
When a user is added to the 'Guests' or 'Domain Guests' group, it will cause the workstation that is joined to the domain to remove the user's profile by default!
https://support.microsoft.com/en-us/kb/940453
In the UI, when the group 'Guests' or 'Domain Guests' is selected for a user, the UI should pop a warning that tells them that this will cause the user's profiles on workstations to be temporary only and will delete the content of the user's profile if selected.
Steps To Reproduce:
With Windows workstation joined to the domain, log in with an account that is not 'domain guests' or 'guests' account. Make some desktop or documents changes in the local profile. Reboot the workstation. Log in as the user. You will notice in the profile section that the user is now 'Temporary' in the profiles section of the advanced configuration when you right-click on "My Computer" and choose properties.