Author: brainwave64 | Posted on: 2/23/2009 10:15:53 AM | Views : 376

I hope this is the correct forum within which to post this question. Please let me know if I need to post it elsewhere.

We have an in-house self-service password change and reset web application that we wrote using C# ASP.NET 2.0. It's being hosted on a Windows Server 2008 Standard SP1 virtual machine running IIS 7.0 (although our domain is still a Windows 2003 domain). It's been up and running without issue for several months now.
However, we recently realized that the C: drive on our server was getting full due to the existence of over 3000 profile folders in the C:\Users directory. What we found is that any time our .NET code successfully executes the following line, a profile for the user is created.
userDE.Invoke("ChangePassword", new object[] { oldPW, newPW });("userDE" is a DirectoryEntry object for the user's Active Directory account ...

Go to the complete details ...