|
Posted by Lanwench [MVP - Exchange] on May 4, 2008, 3:59 pm
Please log in for more thread options
> "Lanwench [MVP - Exchange]"
>>>> Create a computer startup script that deletes the local profiles if
>>>> they are of a concern to you. Users won't be able to delete
>>>> profiles as a part of logoff process.
>>>
>>> One of the fastest methods to (permanently) delete a directory
>>> tree is: "del /s /q PATH"
>>>
>>> /s = subdirectory /q = quite (no warnings)
>>>
>>> This is VERY dangerous as it will (usually*) delete everything in it
>>> without further warning so get the PATH correct. * Unless files
>>> are locked but at startup that is unlikely.
>>>
>>> A "for /d" (directories) loop can get all directories but be careful
>>> not to delete the Default (or other profiles you wish to keep.)
>>
>> Hence, using delprof instead would be a very simple alternative :-)
>
> That's not the only reason, as references to the profiles would still
> appear in the registry once the profile folder was deleted.
>
> /Al
Yep, that too.
>
>>>
>>>> --
>>>> Svyatoslav Pidgorny, MS MVP - Security, MCSE
>>>> -= F1 is the key =-
>>>>
>>>> * http://sl.mvps.org * http://msmvps.com/blogs/sp *
>>>>
>>>>> Hi. We are currently looking to deploy some Windows XP
>>>>> workstations on a 2003 Domain for development purposes. We are
>>>>> using a mix of mandatory profiles and general domain users that
>>>>> have NO roaming or mandatory profile. We are finding that the XP
>>>>> workstations are storing a local copy of the mandatory profiles
>>>>> and the gerneral domain user accounts as well. Can anyone confirm
>>>>> whether Windows should automatically remove
>>>>> Mandatory profiles when the user logs off, and if so can anyone
>>>>> suggest why a copy of the profiles are being left behind ?
>>>>>
>>>>> Similarly can anyone recommend how we can allow users with a basic
>>>>> domain user account (no roaming or mandatory profile) to logon to
>>>>> our XP workstations such that their locally created profile is
>>>>> automatically deleted when they logoff ? i.e. no matter the user
>>>>> type (even domain admin if possible) we would like to remove any
>>>>> locally stored user profiles.
>>>>>
>>>>> Thanks,
>>>>> Alex.
|