Excel is creating .tmp files in shared folder without security permissions.

[LCoimbra]

Hello.

I have a on-prem 2019 DC that has 2012 r2 server in the same forest.

Since the end of July, sometimes when Excel that is used in the workstations, the .tmp files that are created when the excel file is saved are not deleted. If I go to .tmp files' properties, there's nothing in Security and I'm unable to take ownership saying I don't have reading permissions. If I restart the server, I'm able to see the information and to delete them.

I have checked the file in virustotal.com, it's clean and it is an Office Open XML Spreadsheet.

The servers are both updated, the DNS has no errors and the disk is ok.

After some research, I did the following:

    - Disabled the Microsoft Defender on the Server

    - Gave full control to the shared folder to everyone

    - Deactivated the heuristic component of the anti-virus that is installed in the server

Despite all this, the .tmp files continue to stay now and then in the shared folder as described earlier.

I don't know what can I do to solve this?

[#2]

Hello.
I did further tests and I was able to find that it has to do only with .xls files, test this is a P2P network and it is also happening.
It's funny that is started happening only after the end of July.
Thanks.

[#3 · Accepted solution]

We begin to see the same thing with our user. After some search i across the link below and maybe it will help you because we use watchguard EPDR and we have the same issue. We open a case with watchguard

https://answers.microsoft.com/en-us/windowserver/forum/all/shered-excel-files-creating-tmp-files-tha...

[#4]

Hello.
I will check this out.