Question : unknown/unauthorized user profiles on Server 2008

Recently I noticed our PDC (server 2008) shows several profiles in the C:\users directory with names belonging to users in our students group. These students have limited rights and should not have the capability to log into the server, so I'm not sure how the folders/profiles were created.  


To test further I opened RDP to the server and attempted to login with one of the student accounts in question, but I received an access denied error. Students do not have physical access to the server. Finally, I confirmed the membership for the users was normal and did not provide elevated rights.


Any ideas on what or how these profiles could be created?

Answer : unknown/unauthorized user profiles on Server 2008

They might have logged on locally some how.  Check your domain controller group policy to verify which groups and accounts have this right.  Then double check the groups they belong to.

http://technet.microsoft.com/en-us/library/ee957044(WS.10).aspx