Click here to get back home

Delete cached local copy of mandatory profile and non roaming domain user profiles ?

 HomeNewsGroups | Search | About
 microsoft.public.windows.server.security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content
Subject Author Date
Delete cached local copy of mandatory profile and non roaming domain user profiles ? Alex 05-01-2008
Posted by Alex on May 1, 2008, 5:50 am
Please log in for more thread options
Hi. We are currently looking to deploy some Windows XP workstations on a
2003 Domain for development purposes. We are using a mix of mandatory
profiles and general domain users that have NO roaming or mandatory profile.
We are finding that the XP workstations are storing a local copy of the
mandatory profiles and the gerneral domain user accounts as well.

Can anyone confirm whether Windows should automatically remove Mandatory
profiles when the user logs off, and if so can anyone suggest why a copy of
the profiles are being left behind ?

Similarly can anyone recommend how we can allow users with a basic domain
user account (no roaming or mandatory profile) to logon to our XP
workstations such that their locally created profile is automatically
deleted when they logoff ? i.e. no matter the user type (even domain admin
if possible) we would like to remove any locally stored user profiles.

Thanks,
Alex.




Posted by Lanwench [MVP - Exchange] on May 1, 2008, 7:57 am
Please log in for more thread options
> Hi. We are currently looking to deploy some Windows XP workstations
> on a 2003 Domain for development purposes. We are using a mix of
> mandatory profiles and general domain users that have NO roaming or
> mandatory profile. We are finding that the XP workstations are
> storing a local copy of the mandatory profiles and the gerneral
> domain user accounts as well.

Yep - that's normal.
>
> Can anyone confirm whether Windows should automatically remove
> Mandatory profiles when the user logs off,

Nope.

> and if so can anyone
> suggest why a copy of the profiles are being left behind ?

It's by design, as they say.
>
> Similarly can anyone recommend how we can allow users with a basic
> domain user account (no roaming or mandatory profile) to logon to our
> XP workstations such that their locally created profile is
> automatically deleted when they logoff ? i.e. no matter the user type
> (even domain admin if possible) we would like to remove any locally
> stored user profiles.
> Thanks,
> Alex.

For roaming profiles, this can be done in your group policy settings -
http://support.microsoft.com/kb/274152
For non-roaming, I'm not sure there's a policy option for it. However,
delprof certainly works -
http://windowsitpro.com/articles/print.cfm?articleid=48249

Personally - I always use roaming profiles (and folder redirection,so the
profiles stay tiny) and I also *want* a local copy cached on the machine to
eliminate the delay between a user logging in, and a user getting to work.
Just my $.02 and your environment may well be different.



Posted by S. Pidgorny on May 3, 2008, 9:45 pm
Please log in for more thread options
Create a computer startup script that deletes the local profiles if they are
of a concern to you. Users won't be able to delete profiles as a part of
logoff process.

--
Svyatoslav Pidgorny, MS MVP - Security, MCSE
-= F1 is the key =-

* http://sl.mvps.org * http://msmvps.com/blogs/sp *

> Hi. We are currently looking to deploy some Windows XP workstations on a
> 2003 Domain for development purposes. We are using a mix of mandatory
> profiles and general domain users that have NO roaming or mandatory
> profile. We are finding that the XP workstations are storing a local copy
> of the mandatory profiles and the gerneral domain user accounts as well.
>
> Can anyone confirm whether Windows should automatically remove Mandatory
> profiles when the user logs off, and if so can anyone suggest why a copy
> of the profiles are being left behind ?
>
> Similarly can anyone recommend how we can allow users with a basic domain
> user account (no roaming or mandatory profile) to logon to our XP
> workstations such that their locally created profile is automatically
> deleted when they logoff ? i.e. no matter the user type (even domain admin
> if possible) we would like to remove any locally stored user profiles.
>
> Thanks,
> Alex.
>
>
>



Posted by Herb Martin on May 4, 2008, 1:05 pm
Please log in for more thread options

> Create a computer startup script that deletes the local profiles if they
> are of a concern to you. Users won't be able to delete profiles as a part
> of logoff process.

One of the fastest methods to (permanently) delete a directory
tree is: "del /s /q PATH"

/s = subdirectory /q = quite (no warnings)

This is VERY dangerous as it will (usually*) delete everything in it
without further warning so get the PATH correct. * Unless files
are locked but at startup that is unlikely.

A "for /d" (directories) loop can get all directories but be careful
not to delete the Default (or other profiles you wish to keep.)

> --
> Svyatoslav Pidgorny, MS MVP - Security, MCSE
> -= F1 is the key =-
>
> * http://sl.mvps.org * http://msmvps.com/blogs/sp *
>
>> Hi. We are currently looking to deploy some Windows XP workstations on a
>> 2003 Domain for development purposes. We are using a mix of mandatory
>> profiles and general domain users that have NO roaming or mandatory
>> profile. We are finding that the XP workstations are storing a local copy
>> of the mandatory profiles and the gerneral domain user accounts as well.
>>
>> Can anyone confirm whether Windows should automatically remove Mandatory
>> profiles when the user logs off, and if so can anyone suggest why a copy
>> of the profiles are being left behind ?
>>
>> Similarly can anyone recommend how we can allow users with a basic domain
>> user account (no roaming or mandatory profile) to logon to our XP
>> workstations such that their locally created profile is automatically
>> deleted when they logoff ? i.e. no matter the user type (even domain
>> admin if possible) we would like to remove any locally stored user
>> profiles.
>>
>> Thanks,
>> Alex.
>>
>>
>>
>
>



Posted by Lanwench [MVP - Exchange] on May 4, 2008, 1:56 pm
Please log in for more thread options
>> Create a computer startup script that deletes the local profiles if
>> they are of a concern to you. Users won't be able to delete profiles
>> as a part of logoff process.
>
> One of the fastest methods to (permanently) delete a directory
> tree is: "del /s /q PATH"
>
> /s = subdirectory /q = quite (no warnings)
>
> This is VERY dangerous as it will (usually*) delete everything in it
> without further warning so get the PATH correct. * Unless files
> are locked but at startup that is unlikely.
>
> A "for /d" (directories) loop can get all directories but be careful
> not to delete the Default (or other profiles you wish to keep.)

Hence, using delprof instead would be a very simple alternative :-)
>
>> --
>> Svyatoslav Pidgorny, MS MVP - Security, MCSE
>> -= F1 is the key =-
>>
>> * http://sl.mvps.org * http://msmvps.com/blogs/sp *
>>
>>> Hi. We are currently looking to deploy some Windows XP
>>> workstations on a 2003 Domain for development purposes. We are
>>> using a mix of mandatory profiles and general domain users that
>>> have NO roaming or mandatory profile. We are finding that the XP
>>> workstations are storing a local copy of the mandatory profiles and
>>> the gerneral domain user accounts as well. Can anyone confirm whether
>>> Windows should automatically remove
>>> Mandatory profiles when the user logs off, and if so can anyone
>>> suggest why a copy of the profiles are being left behind ?
>>>
>>> Similarly can anyone recommend how we can allow users with a basic
>>> domain user account (no roaming or mandatory profile) to logon to
>>> our XP workstations such that their locally created profile is
>>> automatically deleted when they logoff ? i.e. no matter the user
>>> type (even domain admin if possible) we would like to remove any
>>> locally stored user profiles.
>>>
>>> Thanks,
>>> Alex.




Similar ThreadsPosted
Tech Support access to roaming profile directory on server(s) January 4, 2008, 11:30 am
Backing up roaming profiles on W2K3 January 11, 2006, 1:37 pm
Please help. Cannot access hotmail or run CMD after playing with roaming profiles May 30, 2005, 12:31 am
Stop syncronization of ALL roaming profiles at logout March 30, 2006, 4:17 pm
Custom NTFS permissions on roaming profiles? April 11, 2006, 7:48 am
Re: Admin access to roaming profiles (existing folders) November 19, 2007, 11:32 am
Re: Admin access to roaming profiles (existing folders) November 19, 2007, 11:20 am
cannot change domain user profile display settings August 4, 2005, 11:45 am
What has Windows 2003 Server security done to domain user profiles January 17, 2006, 11:49 pm
un/pwd error using network profile - no error with local profile March 23, 2007, 1:23 pm

Our other projects:

Art Dolls, Fairies and Mermaids - Sunnyfaces.net

Roy's Linux, Programming and Search Engines messages

1-Script XML SitemapXML Sitemap