I have 80+ .tmp files on my file shares. 99% are created by the client's Excel. The majority of these are from Excel 2010 which are fully patched, and the security group for this folder has full control. The .tmp files are created when the user saves. Most of the time the .tmp file is deleted. Other times it's not. The folder is not inheriting permissions and I have also given the "Everyone" group full control to folder directly above this share.
I am unable to delete these .tmp files. The majority of them at least. Some I can delete. When I delete them, and refresh the screen, they come back. Same file name. The others simply say I do not have permission to delete them. Command line nor powershell will allow me to delete or take ownership. Yes I am a domain admin and yes I ran both utilities as an admin.
There is no anti-virus installed on my 2008R2 server which has all available windows updates. It is a virtual machine running on ESXi 5.5. I have changed the nic from the e1000 to the vmxnet 3 adapter because I saw dropped received packets in esxtop. Since changing the nic, these dropped packets have been resolved. The .tmp files have been created no matter which adapter I use. A file auditing utility I have downloaded as a free trial called "FileAudit" shows the Status to delete a .tmp file as "Granted". However, the .tmp files is still there. Pretty slick little program by the way.
Today I found the .tmp files are being held in limbo by the system process - pid: 4. You will not find them in the open files mmc. I have yet to reboot the server to see if the file lock goes away and then be able to delete the .tmp files. I tried to close one .tmp file using handler.exe and i got "Error closing handle: T".
This 2008R2 server is a new server I have built because I was having the same issue on the last 2008R2 server I built 3 months ago.
On the old server I attempted to disable SMBV2. No change. I enabled the Application Experience service as some have said to have success. No change.
There is no packet loss on the network. No interface errors on my switches. No duplex mismatches. This server lives on the same Cluster as many other servers (25) which do not have issues. Wireshark on a client and the server at the same time show no signs of problems. It is all layer 2 traffic flowing from PC to a Cisco 2960 stack to the server.
I have users reporting they can't save files to this share sometimes. Common errors include "The file is open by someone else" (it's not) "Unable to save" , or sometimes it will appear as though it saved fine only to find out later their changes were not saved.